gemi 0.92.0 → 0.94.0

package/dist/{chunk-dpak844f.js.map → chunk-bk8wjf00.js.map}

@@ -13,6 +13,6 @@
     "/**\n * Which `X-Forwarded-For` entries the production server believes (#8).\n *\n * `X-Forwarded-For` is written by whoever sends the request. A client talking\n * to the app directly — or through a proxy that appends to the header rather\n * than replacing it — picks any address it likes, and `clientIp` (the rate\n * limiter's default key) used to read the left-most entry, which is exactly\n * the one the client wrote. So the server decides here, once, at the edge,\n * and hands the app a single address it can rely on:\n *\n * - `none` (the default): no proxy is trusted. The header is replaced with the\n *   socket's peer address, and `X-Real-IP` is dropped.\n * - `hops` (`GEMI_TRUST_PROXY=<n>`): the `n` proxies nearest the app are\n *   trusted. Each appends the address it was reached from, so the client is\n *   the `n`-th entry from the right of `X-Forwarded-For`. Anything\n *   further left was written by someone the app does not trust and is dropped.\n * - `all` (`GEMI_TRUST_PROXY=true`): the inbound header is passed through\n *   unchanged, as before 0.88. Only sound behind a proxy that overwrites\n *   `X-Forwarded-For` (and `X-Real-IP`) rather than appending to it.\n */\nexport type ForwardedTrust =\n  | { kind: \"none\" }\n  | { kind: \"all\" }\n  | { kind: \"hops\"; hops: number };\n\nconst NONE: ForwardedTrust = { kind: \"none\" };\n\n/**\n * `GEMI_TRUST_PROXY` as a policy. Unset, empty, `false`, `off` and `0` trust\n * nothing; `true` trusts everything; a positive integer is a hop count.\n * Anything else throws, so a typo fails the boot instead of silently trusting\n * nothing (every client sharing the proxy's address) or everything.\n */\nexport function parseTrustProxy(value: string | undefined): ForwardedTrust {\n  const raw = (value ?? \"\").trim().toLowerCase();\n  if (raw === \"\" || raw === \"false\" || raw === \"off\" || raw === \"0\") {\n    return NONE;\n  }\n  if (raw === \"true\") {\n    return { kind: \"all\" };\n  }\n  if (/^[1-9]\\d*$/.test(raw)) {\n    return { kind: \"hops\", hops: Number(raw) };\n  }\n  throw new Error(\n    `GEMI_TRUST_PROXY must be \"false\", \"true\" or the number of proxies in front of the app (e.g. 1). Got ${JSON.stringify(value)}.`,\n  );\n}\n\n/**\n * Rewrites `headers` so `X-Forwarded-For` holds what `trust` says the client\n * address is. `peer` is the socket's remote address — `null` for a unix\n * socket, where the immediate hop is still counted as one proxy.\n */\nexport function applyForwardedTrust(\n  headers: Headers,\n  peer: string | null,\n  trust: ForwardedTrust,\n): void {\n  if (trust.kind === \"all\") {\n    if (!headers.get(\"x-forwarded-for\") && peer) {\n      headers.set(\"x-forwarded-for\", peer);\n    }\n    return;\n  }\n\n  // Under any other policy `X-Real-IP` is as client-written as the rest; the\n  // address the app should use is the one left in `X-Forwarded-For`.\n  headers.delete(\"x-real-ip\");\n\n  let client: string | null = peer;\n  if (trust.kind === \"hops\") {\n    const entries = (headers.get(\"x-forwarded-for\") ?? \"\")\n      .split(\",\")\n      .map((entry) => entry.trim())\n      .filter(Boolean);\n    // The chain is `entries` + `peer`; the client sits `hops` places left of\n    // its end, i.e. `entries[entries.length - hops]`. A shorter chain than\n    // expected means the request skipped a proxy, so its left-most hop is the\n    // furthest thing seen — never anything further left than that.\n    const index = entries.length - trust.hops;\n    client = index >= 0 ? entries[index]! : (entries[0] ?? peer);\n  }\n\n  if (client) {\n    headers.set(\"x-forwarded-for\", client);\n  } else {\n    headers.delete(\"x-forwarded-for\");\n  }\n}\n"
   ],
   "mappings": ";mzBAAA,SAAS,OAAM,IAAS,QCkBxB,WAAS,UACT,cAAS,oBAAW,WAAsB,QAW1C,FAAM,HAAuC,LAAC,DAAM,AAAM,JAQpD,HAAyB,DAYzB,HAAiB,EACjB,GAAqB,GAGrB,GAAa,EAEnB,SAAS,EAAW,CAAC,EAAiC,CACpD,GAAI,IAAQ,OACV,MAAO,GAKT,GAAI,CAAC,oBAAoB,KAAK,EAAI,KAAK,CAAC,EACtC,MAAO,GAET,IAAM,EAAQ,OAAO,EAAI,KAAK,CAAC,EAC/B,OAAO,OAAO,SAAS,CAAK,EAAI,KAAK,IAAI,EAAO,CAAC,EAAI,EAahD,SAAS,EAAmB,CAAC,EAA+D,CACjG,GAAI,IAAW,MAAQ,IAAW,OAChC,OAAO,KAGT,IAAM,EAAW,IAAI,IACrB,QAAW,KAAQ,EAAO,MAAM,GAAG,EAAG,CACpC,IAAO,KAAc,GAAU,EAAK,MAAM,GAAG,EACvC,EAAS,EAAU,KAAK,EAAE,YAAY,EAC5C,GAAI,IAAW,GACb,SAGF,IAAI,EAAI,EACR,QAAW,KAAS,EAAQ,CAC1B,IAAM,EAAY,EAAM,QAAQ,GAAG,EACnC,GAAI,IAAc,GAChB,SAEF,GAAI,EAAM,MAAM,EAAG,CAAS,EAAE,KAAK,EAAE,YAAY,IAAM,IAAK,CAC1D,EAAI,GAAY,EAAM,MAAM,EAAY,CAAC,CAAC,EAC1C,OAIJ,EAAS,IAAI,EAAQ,CAAC,EAGxB,OAAO,EAUF,SAAS,EAAiB,CAC/B,EACA,EAA+B,GACP,CACxB,IAAM,EAAW,GAAoB,CAAM,EAC3C,GAAI,CAAC,EACH,OAAO,KAGT,IAAM,EAAW,EAAS,IAAI,GAAG,EAC7B,EAA+B,KAC/B,EAAQ,EAEZ,QAAW,KAAU,EAAW,CAC9B,IAAM,EAAI,EAAS,IAAI,CAAM,GAAK,GAAY,EAC9C,GAAI,EAAI,EACN,EAAO,EACP,EAAQ,EAIZ,OAAO,EAGT,SAAS,EAAY,CAAC,EAA4B,EAA4B,CAC5E,GAAI,CAAC,EACH,MAAO,GAIT,OAAO,EACJ,MAAM,GAAG,EACT,KAAK,CAAC,IAAU,EAAM,KAAK,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE,GAAG,KAAK,IAAM,CAAS,EAY3E,SAAS,EAAc,CAAC,EAAgB,EAAwB,CAGrE,GAAI,IAAW,OACb,MAAO,GAKT,GAAI,EAAI,OAAS,KAAO,EAAI,SAAW,KAAO,EAAI,SAAW,KAAO,EAAI,SAAW,IACjF,MAAO,GAGT,GAAI,EAAI,QAAQ,IAAI,eAAe,EACjC,MAAO,GAGT,IAAM,EAAc,EAAI,QAAQ,IAAI,cAAc,EAClD,GAAI,CAAC,GAAe,CAAC,0BAA0B,KAAK,CAAW,EAC7D,MAAO,GAOT,GAAI,CAAC,EAAI,KACP,MAAO,GAKT,IAAM,EAAkB,EAAI,QAAQ,IAAI,kBAAkB,EAC1D,GAAI,GAAmB,EAAgB,KAAK,EAAE,YAAY,IAAM,WAC9D,MAAO,GAKT,GAAI,GAAa,EAAI,QAAQ,IAAI,eAAe,EAAG,cAAc,EAC/D,MAAO,GAGT,IAAM,EAAgB,EAAI,QAAQ,IAAI,gBAAgB,EACtD,GAAI,IAAkB,MAAQ,OAAO,CAAa,EAAI,GACpD,MAAO,GAGT,MAAO,GAWF,SAAS,EAAmB,CAAC,EAA2B,CAC7D,IAAM,EACJ,IAAa,KACT,GAAqB,CACnB,OAAQ,EACL,EAAU,sBAAuB,IACjC,EAAU,oBAAqB,EAClC,EACA,MAAO,EAAU,sBACnB,CAAC,EACD,GAAW,CAAE,MAAO,GAAY,MAAO,EAAU,YAAa,CAAC,EAErE,OAAO,GAAO,MAAM,CAAU,EAGhC,SAAS,EAAsB,CAAC,EAAkB,CAChD,IAAM,EAAO,EAAQ,IAAI,MAAM,EAC/B,GAAI,CAAC,EAAM,CACT,EAAQ,IAAI,OAAQ,iBAAiB,EACrC,OAEF,IAAM,EAAS,EAAK,MAAM,GAAG,EAAE,IAAI,CAAC,IAAU,EAAM,KAAK,EAAE,YAAY,CAAC,EAGxE,GAAI,EAAO,SAAS,GAAG,GAAK,EAAO,SAAS,iBAAiB,EAC3D,OAEF,EAAQ,OAAO,OAAQ,iBAAiB,EAanC,SAAS,CAAgB,CAAC,EAAc,EAAyB,CACtE,GAAI,CAAC,GAAe,EAAI,OAAQ,CAAG,EACjC,OAAO,EAGT,IAAM,EAAU,IAAI,QAAQ,EAAI,OAAO,EACvC,GAAuB,CAAO,EAE9B,IAAM,EAAW,GAAkB,EAAI,QAAQ,IAAI,iBAAiB,CAAC,EACrE,GAAI,CAAC,EACH,OAAO,IAAI,SAAS,EAAI,KAAM,CAC5B,OAAQ,EAAI,OACZ,WAAY,EAAI,WAChB,SACF,CAAC,EAGH,IAAI,EACJ,GAAI,CACF,EAAU,GAAoB,CAAQ,EACtC,KAAM,CAGN,OAAO,IAAI,SAAS,EAAI,KAAM,CAC5B,OAAQ,EAAI,OACZ,WAAY,EAAI,WAChB,SACF,CAAC,EAQH,OALA,EAAQ,IAAI,mBAAoB,CAAQ,EAGxC,EAAQ,OAAO,gBAAgB,EAExB,IAAI,SAAS,EAAI,KAAM,YAAY,CAAO,EAAG,CAClD,OAAQ,EAAI,OACZ,WAAY,EAAI,WAChB,SACF,CAAC,EC5SH,kBAAS,WAAS,qBAClB,eAAS,cCDF,SAAS,CAAY,CAAC,EAA8B,CAEzD,IAAM,EAAkB,EAAa,SAAS,EAExC,EAAS,IAAI,IAAI,aAAa,MAAM,EAI1C,OAHA,EAAO,OAAO,CAAe,EAChB,EAAO,OAAO,KAAK,EDiBlC,eAAsB,CAAe,CAAC,EAAyC,CAC7E,IAAM,EAAQ,IAAI,IAElB,eAAe,CAAI,CAAC,EAAa,EAAmB,CAClD,IAAI,EACJ,GAAI,CACF,EAAU,MAAM,GAAQ,EAAK,CAAE,cAAe,EAAK,CAAC,EACpD,KAAM,CACN,OAEF,QAAW,KAAS,EAAS,CAC3B,GAAI,EAAM,KAAK,WAAW,GAAG,EAAG,SAChC,GAAI,GAAY,EAAM,OAAS,SAAU,SACzC,IAAM,EAAO,GAAK,EAAK,EAAM,IAAI,EAC7B,EAAQ,EAAM,YAAY,EAC1B,EAAS,EAAM,OAAO,EAC1B,GAAI,EAAM,eAAe,EACvB,GAAI,CACF,IAAM,EAAS,MAAM,GAAK,CAAI,EAC9B,EAAQ,EAAO,YAAY,EAC3B,EAAS,EAAO,OAAO,EACvB,KAAM,CACN,SAGJ,GAAI,EAAQ,EAAM,IAAI,CAAI,EAGrB,QAAI,GAAS,CAAC,EAAM,eAAe,EAAG,MAAM,EAAK,EAAM,EAAK,GAKrE,OADA,MAAM,EAAK,EAAW,EAAI,EACnB,EAGT,IAAM,GAAa,4CAeZ,SAAS,CAAkB,CAAC,EAAc,EAAwB,CACvE,IAAM,EAAO,IAAI,KAAK,CAAI,EACpB,EAAQ,EAAK,KACb,EAAO,EAAa,EAAK,YAAY,EAErC,EAAkC,CACtC,eAAgB,EAAK,MAAQ,2BAC7B,gBAAiB,GACjB,gBAAiB,QACjB,KAAM,CACR,EAEM,EAAQ,EAAiB,EAAI,QAAQ,IAAI,OAAO,CAAC,EAEvD,GAAI,EAAO,CACT,IAAM,EAAW,EAAa,EAAO,CAAK,EAC1C,GAAI,CAAC,EACH,OAAO,EAA4B,CAAK,EAE1C,OAAO,IAAI,SAAS,EAAK,MAAM,EAAS,MAAO,EAAS,IAAM,CAAC,EAAE,OAAO,EAAG,CACzE,OAAQ,IACR,QAAS,IACJ,EACH,gBAAiB,EAAmB,EAAS,MAAO,EAAS,IAAK,CAAK,EACvE,iBAAkB,OAAO,EAAS,MAAM,CAC1C,CACF,CAAC,EAGH,OAAO,IAAI,SAAS,EAAK,OAAO,EAAG,CACjC,QAAS,IAAK,EAAS,iBAAkB,OAAO,CAAK,CAAE,CACzD,CAAC,EFtGH,eAAS,qBISF,IAAM,EAAmB,iBAgBzB,SAAS,CAAiB,CAC/B,EACA,EAAoB,EAC+B,CACnD,IAAM,EAAO,EAAS,IAAmB,KACzC,GAAI,CAAC,EACH,OAEF,MAAO,CACL,OAAQ,EAAS,EAAM,CAAS,EAChC,QAAS,EAAsB,EAAU,EAAkB,CAAS,CACtE,EAgBK,SAAS,CAAqB,CACnC,EACA,EACA,EAAoB,EACV,CACV,IAAM,EAAiB,CAAC,EAGlB,EAAU,IAAI,IAEd,EAAO,CAAC,IAAgB,CAC5B,GAAI,EAAQ,IAAI,CAAG,EAAG,OACtB,EAAQ,IAAI,CAAG,EACf,IAAM,EAAQ,EAAS,GACvB,GAAI,CAAC,GAAO,KAAM,OAClB,EAAK,KAAK,EAAS,EAAM,KAAM,CAAS,CAAC,EACzC,QAAW,KAAY,EAAM,SAAW,CAAC,EACvC,EAAK,CAAQ,GAMjB,OAFA,EAAK,CAAQ,EAEN,EC8HF,SAAS,CAAqB,CACnC,EACA,EA3L8C,MA4LtC,CACR,IAAM,EAAM,KAAK,UAhMgB,mBAgMa,EACxC,EAAQ,KAAK,UAAU,gDAAgD,GAAU,EACvF,MACE,mEAAmE,+EAE5B,iBAC1B,kIACyC,eC3M1D,IAAM,GAAc,IAAI,OAAO,IAAI,cAAkC,EAE9D,SAAS,EAAgB,CAAC,EAA2B,CAC1D,OAAO,GAAY,KAAK,CAAQ,EA2C3B,SAAS,CAAe,CAAC,EAAwC,CACtE,GAAI,GAAiB,CAAQ,EAC3B,OAAO,IAAI,SAAS,EAAsB,CAAQ,EAAG,CACnD,QAAS,CACP,eAAgB,yBAChB,gBAAiB,UACnB,CACF,CAAC,EAKH,GAAI,EAAoB,CAAQ,EAC9B,OAAO,IAAI,SAAS,YAAa,CAAE,OAAQ,GAAI,CAAC,EAOlD,OCpEF,IAAM,GAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,SAqBlB,SAAS,CAAsB,CACpC,EACA,EACA,EACU,CAUV,GAAI,CAAC,EACH,QAAQ,MAAM,CAAG,EAEjB,QAAI,CAGF,EAAY,aAAe,MAAQ,EAAU,MAAM,OAAO,CAAG,EAAG,CAAE,MAAO,CAAI,CAAC,CAAC,EAC/E,MAAO,EAAa,CAEpB,QAAQ,MAAM,CAAG,EACjB,QAAQ,MAAM,CAAW,EAI7B,GAAI,EAAU,CAAQ,EACpB,OAAO,IAAI,SACT,KAAK,UAAU,CAAE,MAAO,EAAiB,eAAgB,wBAAyB,GAAG,CAAE,CAAC,EACxF,CACE,OAAQ,IACR,QAAS,CAAE,eAAgB,kBAAmB,CAChD,CACF,EAGF,OAAO,IAAI,SAAS,GAAkB,CACpC,OAAQ,IACR,QAAS,CAAE,eAAgB,0BAA2B,CACxD,CAAC,EC/CH,IAAM,GAAuB,CAAE,KAAM,MAAO,EAQrC,SAAS,CAAe,CAAC,EAA2C,CACzE,IAAM,GAAO,GAAS,IAAI,KAAK,EAAE,YAAY,EAC7C,GAAI,IAAQ,IAAM,IAAQ,SAAW,IAAQ,OAAS,IAAQ,IAC5D,OAAO,GAET,GAAI,IAAQ,OACV,MAAO,CAAE,KAAM,KAAM,EAEvB,GAAI,aAAa,KAAK,CAAG,EACvB,MAAO,CAAE,KAAM,OAAQ,KAAM,OAAO,CAAG,CAAE,EAE3C,MAAU,MACR,uGAAuG,KAAK,UAAU,CAAK,IAC7H,EAQK,SAAS,CAAmB,CACjC,EACA,EACA,EACM,CACN,GAAI,EAAM,OAAS,MAAO,CACxB,GAAI,CAAC,EAAQ,IAAI,iBAAiB,GAAK,EACrC,EAAQ,IAAI,kBAAmB,CAAI,EAErC,OAKF,EAAQ,OAAO,WAAW,EAE1B,IAAI,EAAwB,EAC5B,GAAI,EAAM,OAAS,OAAQ,CACzB,IAAM,GAAW,EAAQ,IAAI,iBAAiB,GAAK,IAChD,MAAM,GAAG,EACT,IAAI,CAAC,IAAU,EAAM,KAAK,CAAC,EAC3B,OAAO,OAAO,EAKX,EAAQ,EAAQ,OAAS,EAAM,KACrC,EAAS,GAAS,EAAI,EAAQ,GAAW,EAAQ,IAAM,EAGzD,GAAI,EACF,EAAQ,IAAI,kBAAmB,CAAM,EAErC,OAAQ,OAAO,iBAAiB,ERnEpC,IAAM,EAAU,EAAY,EAEtB,GAAS,EAAK,EAAS,KAAK,EAC5B,EAAU,EAAK,EAAS,MAAM,EAE9B,EAAY,EAAK,EAAS,QAAQ,EAQxC,SAAS,EAAc,CAAC,EAAiC,CACvD,IAAI,EACJ,GAAI,CACF,EAAU,mBAAmB,CAAQ,EACrC,KAAM,CACN,OAAO,KAET,IAAM,EAAO,GAAQ,EAAW,IAAM,EAAQ,QAAQ,iBAAkB,SAAS,CAAC,EAClF,OAAO,EAAK,WAAW,EAAY,EAAG,EAAI,EAAO,KAGnD,eAAe,EAAM,CAAC,EAAc,CAClC,GAAI,CACF,OAAQ,MAAM,GAAK,CAAI,GAAG,OAAO,EACjC,KAAM,CACN,MAAO,IAQX,eAAsB,EAAQ,CAAC,EAAU,EAAkC,CACzE,IAAM,EAAW,MAAa,UAAG,gCAC3B,EAAiB,MAAa,UAAG,gCAIjC,EAAY,MAAM,EAAmB,GAAG,UAAgB,EAE9D,QAAQ,IAAI,SAAW,EACvB,QAAQ,IAAI,QAAU,GACtB,QAAQ,IAAI,SAAW,EAEvB,IAAM,EAAgB,CAAC,EACjB,EAAQ,CAAC,EACT,EAAc,CAAC,EACf,EAAc,CAAC,EAGf,EAAkD,CAAC,EACnD,EAAW,CAAC,EAAkB,IAAiB,IAAI,qBAA4B,MAC/E,EAAY,CAAC,EAEnB,QAAW,IAAY,CAAC,MAAO,GAAG,EAAI,qBAAqB,KAAK,CAAG,CAAC,EAAG,CACrE,IAAM,EAAa,EAAe,aAAa,SAC/C,GAAI,CAAC,GAAY,KAAM,CACrB,QAAQ,IAAI,6BAA6B,GAAU,EACnD,QAAQ,IAAI,CAAU,EACtB,IAAM,EAAQ,OAAO,KAAK,CAAc,EAClC,EAAO,aAAa,QAC1B,QAAQ,IAAI,GAAG,gCAAmC,EAClD,QAAQ,IAAI,CAAK,EAEnB,IAAM,EAAM,MAAa,UAAG,QAAQ,IAAI,mBAAmB,GAAY,QACvE,EAAc,GAAY,EAAI,QAC9B,EAAM,GAAY,EAAI,UAGtB,EAAY,GAAY,EACxB,IAAM,EAAa,EAAS,aAAa,SAEzC,GAAI,GAAY,KAAO,GAAY,IAAI,OAAS,EAC9C,EAAY,GAAY,GAAY,IAEtC,GAAI,EACF,EAAU,KAAK,EAAS,EAAU,EAAS,GAAY,KAAM,CAAS,CAAC,CAAC,EACxE,EAAsB,GAAY,EAChC,EACA,aAAa,QACb,CACF,EAIJ,IAAM,GAAU,IAAI,EAAU,KAAK,GAAG,KAKhC,EAAc,EAAkB,EAAU,CAAS,EACzD,GAAI,CAAC,EAGH,QAAQ,MACN,2BAA2B,wFAC7B,EAMF,IAAM,GAAwB,EAAS,mBAAmB,KAAO,CAAC,EAC5D,IACJ,MAAM,QAAQ,IAAI,GAAY,IAAI,CAAC,IAAY,IAAI,KAAK,GAAG,YAAkB,GAAS,EAAE,KAAK,CAAC,CAAC,GAC/F,KAAK;AAAA,CAAI,EAmBL,GAAc,MAAM,EAAgB,CAAS,EAEnD,eAAe,EAAc,CAAC,EAAc,CAC1C,IAAQ,YAAa,IAAI,IAAI,EAAI,GAAG,EAEpC,GAAI,EAAU,CAAQ,EACpB,OAAO,MAAM,EAAc,EAAK,CAAQ,EAG1C,IAAM,EAAW,GAAe,CAAQ,EAMxC,GAJE,EAAoB,CAAQ,GAC5B,EAAS,WAAW,cAAc,GACjC,IAAa,MAAQ,GAAY,IAAI,CAAQ,EAE7B,CAUjB,GAAI,CAAC,GAAY,CAAE,MAAM,GAAO,CAAQ,EACtC,OAAO,EAAgB,CAAQ,GAAM,MAAM,EAAc,EAAK,CAAQ,EAGxE,GAAI,CACF,OAAO,EAAmB,EAAK,CAAQ,EACvC,MAAO,EAAO,CAEd,OADA,EAAI,cAAc,CAAK,EAChB,IAAI,SAAS,YAAa,CAAE,OAAQ,GAAI,CAAC,GAIpD,OAAO,MAAM,EAAc,EAAK,CAAQ,EAG1C,eAAe,CAAa,CAAC,EAAc,EAAkB,CAC3D,IAAM,EAAU,EAAI,MAAM,KAAK,CAAG,EAElC,GAAI,CACF,IAAM,EAAS,MAAM,EAAQ,CAAG,EAChC,GAAI,aAAkB,SACpB,OAAO,EACF,KACL,IAAM,EAAS,CAAC,EAuBhB,OArBA,EAAO,KAAK,CACV,QAAS,EACX,CAAC,EAmBM,MAAM,EAAO,CAClB,UAlBgB,MAAO,IAA2B,CAClD,GAAI,CAAC,EACH,OAAO,EAAa,CAAC,CAAC,EAExB,QAAW,MAAQ,EAAc,CAC/B,IAAM,GAAa,EAAS,aAAa,UACzC,QAAW,KAAW,IAAY,KAAO,CAAC,EAAG,CAC3C,IAAM,GAAM,IAAI,KAAK,GAAG,QAAQ,IAAI,mBAAmB,GAAS,EAChE,EAAO,KAAK,CACV,GAAI,EACJ,QAAS,MAAM,GAAI,KAAK,CAC1B,CAAC,GAGL,OAAO,EAAa,CAAM,GAK1B,cACA,wBACA,WACA,gBACA,cACA,QACA,cACA,WACF,CAAC,GAEH,MAAO,EAAK,CACZ,OAAO,EAAuB,EAAK,EAAU,EAAI,WAAW,GAOhE,IAAM,IAAsB,QAAQ,IAAI,kBAAoB,QAAQ,YAAY,IAAM,MAIhF,GAAiB,EAAgB,QAAQ,IAAI,gBAAgB,EAE7D,EAAS,IAAI,MAAM,CACvB,mBAAoB,YACpB,MAAO,MAAO,EAAK,IAAW,CAG5B,EAAoB,EAAI,QAAS,EAAO,UAAU,CAAG,GAAG,SAAW,KAAM,EAAc,EAGvF,IAAM,EAAM,MAAM,EAAgB,EAAK,CAAC,IACtC,EAAI,qBAAqB,EAAK,GAAgB,CAAC,IAC7C,EAAuB,EAAK,IAAI,IAAI,EAAI,GAAG,EAAE,SAAU,EAAI,WAAW,CACxE,CACF,EAKA,OAAO,GAAqB,EAAiB,EAAK,CAAG,EAAI,GAE3D,YAAa,OAAO,QAAQ,IAAI,qBAAuB,EAAE,EACzD,KAAM,QAAQ,IAAI,MAAQ,IAC5B,CAAC,EAID,OAFA,EAAmB,CAAE,KAAM,EAAO,KAAM,SAAQ,CAAC,EAE1C",
-  "debugId": "A47E3565125846ED64756E2164756E21",
+  "debugId": "0D6094061F3B99EA64756E2164756E21",
   "names": []
 }

package/dist/chunk-br9p390p.js

@@ -0,0 +1,5 @@
+// @bun
+class J extends Error{lock;token;constructor(x,y,B="its lease ran out or another holder took it"){super(`Lost the lock "${x}" (token ${y}): ${B}.`);this.lock=x;this.token=y;this.name="LockLostError"}}var Q=60000,V=100,X=(x)=>new Promise((y)=>setTimeout(y,x));class O{store;name;owner;token;ttl;lost;controller=new AbortController;deadline;expiryTimer;renewTimer;done=!1;constructor(x,y,B,z,C,G){this.store=x;this.name=y;this.owner=B;this.token=z;this.ttl=C;this.lost=this.controller.signal,this.deadline=G+C,this.armExpiry()}get expired(){return this.lost.aborted||performance.now()>=this.deadline}async extend(x=this.ttl){if(this.lost.aborted)return!1;let y=performance.now();if(!await this.store.extend(this.name,this.owner,this.token,x))return this.markLost(),!1;if(this.done)return!0;return this.deadline=Math.max(this.deadline,y+x),this.armExpiry(),!0}async isHeld(){if(this.lost.aborted)return!1;let x=await this.store.held(this.name,this.owner,this.token);if(!x)this.markLost();return x}async fence(x){if(this.lost.aborted)throw new J(this.name,this.token);try{return await this.store.fence(this.name,this.owner,this.token,x)}catch(y){if(y instanceof J)this.markLost();throw y}}async release(){if(this.stop(),this.lost.aborted)return!1;return this.store.release(this.name,this.owner,this.token)}startRenewing(){if(this.renewTimer||this.done)return;this.renewTimer=setInterval(()=>{this.extend().catch((x)=>{console.error(`[gemi] Could not renew the lock "${this.name}".`,x)})},Math.max(1,Math.floor(this.ttl/3))),this.renewTimer.unref?.()}markLost(x){if(this.stop(),!this.lost.aborted)this.controller.abort(new J(this.name,this.token,x))}stop(){this.done=!0,clearInterval(this.renewTimer),clearTimeout(this.expiryTimer),this.renewTimer=void 0,this.expiryTimer=void 0}armExpiry(){clearTimeout(this.expiryTimer),this.expiryTimer=setTimeout(()=>this.markLost("its lease ran out before it was renewed"),Math.max(0,this.deadline-performance.now())),this.expiryTimer.unref?.()}}class Y{store;static token="locks";constructor(x){this.store=x}async acquire(x,y={}){let B=y.ttl??Q;if(!(B>0))throw Error(`A lock's ttl must be a positive number of milliseconds; got ${B}.`);let z=Bun.randomUUIDv7(),C=performance.now()+Math.max(0,y.wait??0);for(;;){let G=performance.now(),K=await this.store.acquire(x,z,B);if(K!==null){let N=new O(this.store,x,z,K,B,G);if(y.renew)N.startRenewing();return N}let M=C-performance.now();if(M<=0)return null;await X(Math.min(V,M))}}async run(x,y,B){let z=await this.acquire(x,{...y,renew:y.renew??!0});if(!z)return{acquired:!1};let C;try{C=await B(z)}catch(G){throw await z.release().catch(()=>{}),G}if(z.expired)throw z.markLost(),z.lost.reason;return await z.release(),{acquired:!0,value:C}}}
+export{J as Ff,O as Gf,Y as Hf};
+
+//# debugId=B76039054448948464756E2164756E21

package/dist/chunk-br9p390p.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../services/lock/LockStore.ts", "../services/lock/LockManager.ts"],
+  "sourcesContent": [
+    "/**\n * Where locks are kept: one record per lock name, with the current holder, a\n * fencing token and a lease.\n *\n * ### The model\n *\n * A lock is held by an **owner** (a random id per acquisition, or a job's id)\n * until its **lease** runs out or the owner releases it. Every successful\n * `acquire` raises the name's **token** by one, so tokens only grow per name and\n * a newer holder always has a larger one than any older holder. A store never\n * forgets a name on release, which is what keeps the token growing; `prune`\n * (on a store that has it) removes names idle for long enough.\n *\n * A lease that runs out is lost, even if nobody has taken the lock since:\n * `extend`, `held` and `fence` all refuse it. That is the rule that makes the\n * token mean something. A holder whose process stalled past its lease cannot\n * renew its way back in after another process may have started the same work.\n *\n * ### Time\n *\n * Durations cross this interface as relative milliseconds, as they do for\n * `QueueDriver`, so a store shared between machines can measure every lease on\n * one clock, its own.\n */\nexport interface LockStore {\n  /**\n   * Takes `name` for `owner` for `ttlMs`, if nobody holds it or the holder's\n   * lease ran out, and resolves to the new fencing token. `null` when it is\n   * held. Two concurrent calls, from any processes sharing the store, never\n   * both succeed.\n   */\n  acquire(name: string, owner: string, ttlMs: number): Promise<number | null>;\n\n  /**\n   * Renews a lease to `ttlMs` from now, and resolves to whether `owner` still\n   * held it with `token`. A lease that already ran out is not renewed.\n   */\n  extend(name: string, owner: string, token: number, ttlMs: number): Promise<boolean>;\n\n  /**\n   * Ends a hold, and resolves to whether `owner` held it (with `token`, when\n   * given) and its lease had not run out. Releasing a lock someone else now\n   * holds does nothing.\n   */\n  release(name: string, owner: string, token?: number): Promise<boolean>;\n\n  /** The current holder, or `null` when the lock is free or its lease ran out. */\n  holder(name: string): Promise<{ owner: string; token: number } | null>;\n\n  /** Whether `owner` still holds `name` with `token`, its lease running. */\n  held(name: string, owner: string, token: number): Promise<boolean>;\n\n  /**\n   * Raises a counter kept under `name` to `value` if it is below it, and\n   * resolves to whether it did. For \"once per tick across instances\": every\n   * instance advances to the tick's number and only the first one gets `true`.\n   * A name used here must not also be used with `acquire`.\n   */\n  advance(name: string, value: number): Promise<boolean>;\n\n  /**\n   * Runs `fn` only if `owner` still holds `name` with `token`, and keeps the\n   * lock from changing hands until `fn` settles. Rejects with `LockLostError`\n   * when the hold is gone. On the database store this is a transaction that\n   * locks the lock's row first, so writes `fn` makes through the ORM on the\n   * same connection commit only while the hold is current, and a new holder's\n   * `acquire` waits for that commit.\n   */\n  fence<T>(name: string, owner: string, token: number, fn: () => Promise<T>): Promise<T>;\n\n  /**\n   * Counts one hit against a fixed window kept under `name`: allowed when\n   * fewer than `limit` were counted in the current window, which starts at the\n   * first hit after the last one ended and lasts `windowMs`. A refused hit is\n   * not counted. `resetInMs` is how long until the window ends. A name used\n   * here must not also be used with `acquire` or `advance`.\n   */\n  hit(\n    name: string,\n    limit: number,\n    windowMs: number,\n  ): Promise<{ allowed: boolean; resetInMs: number }>;\n\n  /** Takes back one counted hit from the current window, if it has one. */\n  refund(name: string): Promise<void>;\n}\n\n/** The hold on a lock ended before the work it guarded did. */\nexport class LockLostError extends Error {\n  constructor(\n    readonly lock: string,\n    readonly token: number,\n    detail = \"its lease ran out or another holder took it\",\n  ) {\n    super(`Lost the lock \"${lock}\" (token ${token}): ${detail}.`);\n    this.name = \"LockLostError\";\n  }\n}\n",
+    "import { LockLostError, type LockStore } from \"./LockStore\";\n\nexport type AcquireOptions = {\n  /** The lease, in milliseconds. Default one minute. */\n  ttl?: number;\n  /**\n   * How long to keep trying when the lock is held, in milliseconds. Default\n   * `0`: one try.\n   */\n  wait?: number;\n  /**\n   * Renew the lease every third of `ttl` until the lock is released. Default\n   * `true` for `run`, `false` for `acquire`, whose caller may never release.\n   */\n  renew?: boolean;\n};\n\nexport type LockRunResult<T> = { acquired: true; value: T } | { acquired: false };\n\nconst DEFAULT_TTL = 60_000;\nconst WAIT_STEP = 100;\n\nconst sleep = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms));\n\n/**\n * One hold on a lock, from a successful `acquire` until `release` or the end\n * of its lease.\n *\n * `token` is the fencing token: it grows with each new holder of the name, so\n * a write that records it can be refused when an older holder tries to make\n * it late. `fence` does that refusal for writes to the application's own\n * database.\n *\n * `lost` aborts when the hold is known to be gone: a renewal found another\n * holder, or the lease ran out by this process's clock without a successful\n * renewal. The local deadline is measured from just before each request that\n * set the lease, so it always falls before the store's own expiry.\n */\nexport class HeldLock {\n  readonly lost: AbortSignal;\n  private readonly controller = new AbortController();\n  private deadline: number;\n  private expiryTimer: ReturnType<typeof setTimeout> | undefined;\n  private renewTimer: ReturnType<typeof setInterval> | undefined;\n  private done = false;\n\n  constructor(\n    private readonly store: LockStore,\n    readonly name: string,\n    readonly owner: string,\n    readonly token: number,\n    readonly ttl: number,\n    requestedAt: number,\n  ) {\n    this.lost = this.controller.signal;\n    this.deadline = requestedAt + ttl;\n    this.armExpiry();\n  }\n\n  /** Whether the lease has run out by this process's clock, or the hold was lost. */\n  get expired(): boolean {\n    return this.lost.aborted || performance.now() >= this.deadline;\n  }\n\n  /** Renews the lease. `false`, and `lost` aborted, when the hold was already gone. */\n  async extend(ttl = this.ttl): Promise<boolean> {\n    if (this.lost.aborted) return false;\n    const requestedAt = performance.now();\n    const ok = await this.store.extend(this.name, this.owner, this.token, ttl);\n    if (!ok) {\n      this.markLost();\n      return false;\n    }\n    if (this.done) return true;\n    this.deadline = Math.max(this.deadline, requestedAt + ttl);\n    this.armExpiry();\n    return true;\n  }\n\n  /** Asks the store whether this hold is still current. */\n  async isHeld(): Promise<boolean> {\n    if (this.lost.aborted) return false;\n    const held = await this.store.held(this.name, this.owner, this.token);\n    if (!held) this.markLost();\n    return held;\n  }\n\n  /**\n   * Runs `fn` only while this hold is current, and keeps the lock from\n   * changing hands until it settles; rejects with `LockLostError` otherwise.\n   * On the database store `fn` runs in a transaction on the store's\n   * connection, so ORM writes inside it commit only if the hold was current.\n   */\n  async fence<T>(fn: () => Promise<T>): Promise<T> {\n    if (this.lost.aborted) throw new LockLostError(this.name, this.token);\n    try {\n      return await this.store.fence(this.name, this.owner, this.token, fn);\n    } catch (error) {\n      if (error instanceof LockLostError) this.markLost();\n      throw error;\n    }\n  }\n\n  /** Ends the hold. `false` when it had already been lost. */\n  async release(): Promise<boolean> {\n    this.stop();\n    if (this.lost.aborted) return false;\n    return this.store.release(this.name, this.owner, this.token);\n  }\n\n  /** Renews every third of the lease until `release`. */\n  startRenewing() {\n    if (this.renewTimer || this.done) return;\n    this.renewTimer = setInterval(\n      () => {\n        this.extend().catch((error) => {\n          // Not lost yet: the local deadline still decides, so a store that\n          // comes back within the lease keeps the hold.\n          console.error(`[gemi] Could not renew the lock \"${this.name}\".`, error);\n        });\n      },\n      Math.max(1, Math.floor(this.ttl / 3)),\n    );\n    this.renewTimer.unref?.();\n  }\n\n  /** @internal Marks the hold as gone and stops every timer. */\n  markLost(detail?: string) {\n    this.stop();\n    if (!this.lost.aborted) {\n      this.controller.abort(new LockLostError(this.name, this.token, detail));\n    }\n  }\n\n  private stop() {\n    this.done = true;\n    clearInterval(this.renewTimer);\n    clearTimeout(this.expiryTimer);\n    this.renewTimer = undefined;\n    this.expiryTimer = undefined;\n  }\n\n  private armExpiry() {\n    clearTimeout(this.expiryTimer);\n    this.expiryTimer = setTimeout(\n      () => this.markLost(\"its lease ran out before it was renewed\"),\n      Math.max(0, this.deadline - performance.now()),\n    );\n    this.expiryTimer.unref?.();\n  }\n}\n\n/**\n * Named locks with leases and fencing tokens, over a `LockStore`. The queue\n * builds one over its own storage (`app(QueueManager).locks`), so with the\n * database driver the locks hold across every process sharing the database.\n * The `Lock` facade fronts it.\n */\nexport class LockManager {\n  static token = \"locks\";\n\n  constructor(readonly store: LockStore) {}\n\n  /** Takes the lock, or resolves `null` if it is held (after `wait`, when given). */\n  async acquire(name: string, options: AcquireOptions = {}): Promise<HeldLock | null> {\n    const ttl = options.ttl ?? DEFAULT_TTL;\n    if (!(ttl > 0))\n      throw new Error(`A lock's ttl must be a positive number of milliseconds; got ${ttl}.`);\n    const owner = Bun.randomUUIDv7();\n    const giveUpAt = performance.now() + Math.max(0, options.wait ?? 0);\n    for (;;) {\n      const requestedAt = performance.now();\n      const token = await this.store.acquire(name, owner, ttl);\n      if (token !== null) {\n        const lock = new HeldLock(this.store, name, owner, token, ttl, requestedAt);\n        if (options.renew) lock.startRenewing();\n        return lock;\n      }\n      const left = giveUpAt - performance.now();\n      if (left <= 0) return null;\n      await sleep(Math.min(WAIT_STEP, left));\n    }\n  }\n\n  /**\n   * Runs `fn` while holding the lock, renewing the lease as it runs, and\n   * releases it after. `{ acquired: false }` when the lock was held.\n   *\n   * If the hold is lost while `fn` runs, `lock.lost` aborts, and once `fn`\n   * settles this rejects with `LockLostError` instead of resolving: the caller\n   * must not treat work done without the lock as done under it.\n   */\n  async run<T>(\n    name: string,\n    options: AcquireOptions,\n    fn: (lock: HeldLock) => Promise<T> | T,\n  ): Promise<LockRunResult<T>> {\n    const lock = await this.acquire(name, { ...options, renew: options.renew ?? true });\n    if (!lock) return { acquired: false };\n\n    let value: T;\n    try {\n      value = await fn(lock);\n    } catch (error) {\n      await lock.release().catch(() => {});\n      throw error;\n    }\n    if (lock.expired) {\n      lock.markLost();\n      throw lock.lost.reason as LockLostError;\n    }\n    await lock.release();\n    return { acquired: true, value };\n  }\n}\n"
+  ],
+  "mappings": ";AAwFO,MAAM,UAAsB,KAAM,CAE5B,KACA,MAFX,WAAW,CACA,EACA,EACT,EAAS,8CACT,CACA,MAAM,kBAAkB,aAAgB,OAAW,IAAS,EAJnD,YACA,aAIT,KAAK,KAAO,gBAEhB,CC9EA,IAAM,EAAc,MACd,EAAY,IAEZ,EAAQ,CAAC,IAAe,IAAI,QAAQ,CAAC,IAAY,WAAW,EAAS,CAAE,CAAC,EAgBvE,MAAM,CAAS,CASD,MACR,KACA,MACA,MACA,IAZF,KACQ,WAAa,IAAI,gBAC1B,SACA,YACA,WACA,KAAO,GAEf,WAAW,CACQ,EACR,EACA,EACA,EACA,EACT,EACA,CANiB,aACR,YACA,aACA,aACA,WAGT,KAAK,KAAO,KAAK,WAAW,OAC5B,KAAK,SAAW,EAAc,EAC9B,KAAK,UAAU,KAIb,QAAO,EAAY,CACrB,OAAO,KAAK,KAAK,SAAW,YAAY,IAAI,GAAK,KAAK,cAIlD,OAAM,CAAC,EAAM,KAAK,IAAuB,CAC7C,GAAI,KAAK,KAAK,QAAS,MAAO,GAC9B,IAAM,EAAc,YAAY,IAAI,EAEpC,GAAI,CADO,MAAM,KAAK,MAAM,OAAO,KAAK,KAAM,KAAK,MAAO,KAAK,MAAO,CAAG,EAGvE,OADA,KAAK,SAAS,EACP,GAET,GAAI,KAAK,KAAM,MAAO,GAGtB,OAFA,KAAK,SAAW,KAAK,IAAI,KAAK,SAAU,EAAc,CAAG,EACzD,KAAK,UAAU,EACR,QAIH,OAAM,EAAqB,CAC/B,GAAI,KAAK,KAAK,QAAS,MAAO,GAC9B,IAAM,EAAO,MAAM,KAAK,MAAM,KAAK,KAAK,KAAM,KAAK,MAAO,KAAK,KAAK,EACpE,GAAI,CAAC,EAAM,KAAK,SAAS,EACzB,OAAO,OASH,MAAQ,CAAC,EAAkC,CAC/C,GAAI,KAAK,KAAK,QAAS,MAAM,IAAI,EAAc,KAAK,KAAM,KAAK,KAAK,EACpE,GAAI,CACF,OAAO,MAAM,KAAK,MAAM,MAAM,KAAK,KAAM,KAAK,MAAO,KAAK,MAAO,CAAE,EACnE,MAAO,EAAO,CACd,GAAI,aAAiB,EAAe,KAAK,SAAS,EAClD,MAAM,QAKJ,QAAO,EAAqB,CAEhC,GADA,KAAK,KAAK,EACN,KAAK,KAAK,QAAS,MAAO,GAC9B,OAAO,KAAK,MAAM,QAAQ,KAAK,KAAM,KAAK,MAAO,KAAK,KAAK,EAI7D,aAAa,EAAG,CACd,GAAI,KAAK,YAAc,KAAK,KAAM,OAClC,KAAK,WAAa,YAChB,IAAM,CACJ,KAAK,OAAO,EAAE,MAAM,CAAC,IAAU,CAG7B,QAAQ,MAAM,oCAAoC,KAAK,SAAU,CAAK,EACvE,GAEH,KAAK,IAAI,EAAG,KAAK,MAAM,KAAK,IAAM,CAAC,CAAC,CACtC,EACA,KAAK,WAAW,QAAQ,EAI1B,QAAQ,CAAC,EAAiB,CAExB,GADA,KAAK,KAAK,EACN,CAAC,KAAK,KAAK,QACb,KAAK,WAAW,MAAM,IAAI,EAAc,KAAK,KAAM,KAAK,MAAO,CAAM,CAAC,EAIlE,IAAI,EAAG,CACb,KAAK,KAAO,GACZ,cAAc,KAAK,UAAU,EAC7B,aAAa,KAAK,WAAW,EAC7B,KAAK,WAAa,OAClB,KAAK,YAAc,OAGb,SAAS,EAAG,CAClB,aAAa,KAAK,WAAW,EAC7B,KAAK,YAAc,WACjB,IAAM,KAAK,SAAS,yCAAyC,EAC7D,KAAK,IAAI,EAAG,KAAK,SAAW,YAAY,IAAI,CAAC,CAC/C,EACA,KAAK,YAAY,QAAQ,EAE7B,CAQO,MAAM,CAAY,CAGF,YAFd,OAAQ,QAEf,WAAW,CAAU,EAAkB,CAAlB,kBAGf,QAAO,CAAC,EAAc,EAA0B,CAAC,EAA6B,CAClF,IAAM,EAAM,EAAQ,KAAO,EAC3B,GAAI,EAAE,EAAM,GACV,MAAU,MAAM,+DAA+D,IAAM,EACvF,IAAM,EAAQ,IAAI,aAAa,EACzB,EAAW,YAAY,IAAI,EAAI,KAAK,IAAI,EAAG,EAAQ,MAAQ,CAAC,EAClE,OAAS,CACP,IAAM,EAAc,YAAY,IAAI,EAC9B,EAAQ,MAAM,KAAK,MAAM,QAAQ,EAAM,EAAO,CAAG,EACvD,GAAI,IAAU,KAAM,CAClB,IAAM,EAAO,IAAI,EAAS,KAAK,MAAO,EAAM,EAAO,EAAO,EAAK,CAAW,EAC1E,GAAI,EAAQ,MAAO,EAAK,cAAc,EACtC,OAAO,EAET,IAAM,EAAO,EAAW,YAAY,IAAI,EACxC,GAAI,GAAQ,EAAG,OAAO,KACtB,MAAM,EAAM,KAAK,IAAI,EAAW,CAAI,CAAC,QAYnC,IAAM,CACV,EACA,EACA,EAC2B,CAC3B,IAAM,EAAO,MAAM,KAAK,QAAQ,EAAM,IAAK,EAAS,MAAO,EAAQ,OAAS,EAAK,CAAC,EAClF,GAAI,CAAC,EAAM,MAAO,CAAE,SAAU,EAAM,EAEpC,IAAI,EACJ,GAAI,CACF,EAAQ,MAAM,EAAG,CAAI,EACrB,MAAO,EAAO,CAEd,MADA,MAAM,EAAK,QAAQ,EAAE,MAAM,IAAM,EAAE,EAC7B,EAER,GAAI,EAAK,QAEP,MADA,EAAK,SAAS,EACR,EAAK,KAAK,OAGlB,OADA,MAAM,EAAK,QAAQ,EACZ,CAAE,SAAU,GAAM,OAAM,EAEnC",
+  "debugId": "B76039054448948464756E2164756E21",
+  "names": []
+}

package/dist/chunk-dhe96f7z.js

@@ -0,0 +1,5 @@
+// @bun
+import{ec as o}from"./chunk-safv6h9x.js";import{fc as i}from"./chunk-7kedxtbp.js";import{vg as t}from"./chunk-3fr22rtg.js";import{Dg as r}from"./chunk-m3z60v9d.js";class n extends i{register(){this.app.singleton(r,()=>new r(t(o(),this.app.config.get("translation",{}))))}}
+export{n as Wa};
+
+//# debugId=4228079C2DAEAC1064756E2164756E21

package/dist/{chunk-00cwycyq.js.map → chunk-dhe96f7z.js.map}

@@ -5,6 +5,6 @@
     "import { ServiceProvider } from \"../support/ServiceProvider\";\nimport { withDefaults } from \"../support/withDefaults\";\nimport { Translator } from \"./Translator\";\nimport { translationConfigDefaults, type TranslationConfig } from \"./config\";\n\nexport class TranslationServiceProvider extends ServiceProvider {\n  register() {\n    this.app.singleton(\n      Translator,\n      () =>\n        new Translator(\n          withDefaults(\n            translationConfigDefaults(),\n            this.app.config.get<TranslationConfig>(\"translation\", {}),\n          ),\n        ),\n    );\n  }\n}\n"
   ],
   "mappings": ";sLAKO,AAAM,IAAmC,LAAgB,CAC9D,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IACE,IAAI,EACF,EACE,EAA0B,EAC1B,KAAK,IAAI,OAAO,IAAuB,cAAe,CAAC,CAAC,CAC1D,CACF,CACJ,EAEJ",
-  "debugId": "7519F4AABDB3657E64756E2164756E21",
+  "debugId": "4228079C2DAEAC1064756E2164756E21",
   "names": []
 }

package/dist/{chunk-tj684a37.js → chunk-epwaxctc.js}

@@ -1,6 +1,6 @@
 // @bun
-import{dc as G}from"./chunk-p0px3ym0.js";import{Ge as F}from"./chunk-165mrqab.js";import{Rf as B,cg as x}from"./chunk-2caeg5jf.js";import{ng as E}from"./chunk-mqa6b0sx.js";class J extends G{register(){this.app.singleton(x,()=>{let j=new x(E(B(),this.app.config.get("database",{})));return K(j),j})}async shutdown(){if(!this.app.resolved(x))return;await this.app.make(x).close()}}function K(j){if(Bun.env.NODE_ENV!=="development")return;for(let z of j.connectionNames){let A=j.connection(z);if(F(A.dialect))continue;let H=z===j.name?"DATABASE_URL":`The "${z}" database connection`;console.warn(`[gemi] ${H} points at ${A.dialect}, which the gemi ORM `+"does not implement \u2014 only sqlite and postgres are. The connection "+`works, so raw SQL through DB.query / DB.sql and transactions are fine, but every model operation will raise UnsupportedDialectError.
+import{fc as G}from"./chunk-7kedxtbp.js";import{Je as F}from"./chunk-adm5g1v8.js";import{Zf as B,kg as x}from"./chunk-ghz3e8b7.js";import{vg as E}from"./chunk-3fr22rtg.js";class J extends G{register(){this.app.singleton(x,()=>{let j=new x(E(B(),this.app.config.get("database",{})));return K(j),j})}async shutdown(){if(!this.app.resolved(x))return;await this.app.make(x).close()}}function K(j){if(Bun.env.NODE_ENV!=="development")return;for(let z of j.connectionNames){let A=j.connection(z);if(F(A.dialect))continue;let H=z===j.name?"DATABASE_URL":`The "${z}" database connection`;console.warn(`[gemi] ${H} points at ${A.dialect}, which the gemi ORM `+"does not implement \u2014 only sqlite and postgres are. The connection "+`works, so raw SQL through DB.query / DB.sql and transactions are fine, but every model operation will raise UnsupportedDialectError.
 (development only)`)}}
 export{J as ya};
 
-//# debugId=8A781F6631E5222C64756E2164756E21
+//# debugId=6479B22C9FC7B46C64756E2164756E21

package/dist/{chunk-tj684a37.js.map → chunk-epwaxctc.js.map}

@@ -5,6 +5,6 @@
     "import { ormSupports } from \"../orm/dialect\";\nimport { ServiceProvider } from \"../support/ServiceProvider\";\nimport { withDefaults } from \"../support/withDefaults\";\nimport { databaseConfigDefaults, type DatabaseConfig } from \"./config\";\nimport { DatabaseManager } from \"./DatabaseManager\";\n\nexport class DatabaseServiceProvider extends ServiceProvider {\n  register() {\n    this.app.singleton(\n      DatabaseManager,\n      () => {\n        const database = new DatabaseManager(\n          withDefaults(\n            databaseConfigDefaults(),\n            this.app.config.get<DatabaseConfig>(\"database\", {}),\n          ),\n        );\n\n        warnIfOrmUnavailable(database);\n        return database;\n      },\n    );\n  }\n\n  /**\n   * Closes every connection's pool. Registered early, so it runs late: after\n   * the queue and the scheduler have waited for their jobs, which still need\n   * it. Bun's `close()` lets a query already sent finish.\n   *\n   * On the way out of a production server this only tidies up before the\n   * exit. Under `gemi dev` it is the whole point: a `bun --hot` reload boots\n   * a new application with a new pool, and the replaced one's is closed here\n   * rather than left holding its connections for the life of the process\n   * (#652).\n   */\n  async shutdown() {\n    // Resolving the manager now would open a pool only to close it.\n    if (!this.app.resolved(DatabaseManager)) return;\n    await this.app.make(DatabaseManager).close();\n  }\n}\n\n/**\n * Say it at boot, not on the first model query.\n *\n * `DatabaseManager` connects to MySQL and MariaDB without complaint — Bun's\n * client speaks them — and the ORM's compiler has no dialect for either. So a\n * deploy pointed at one starts, passes a health check, serves whatever does not\n * touch a model, and raises `UnsupportedDialectError` on the first `findMany`.\n * That is the latest and most expensive moment to learn it.\n *\n * A **warning rather than a throw**, deliberately: raw SQL through `DB.query`\n * and `DB.sql` genuinely works on those dialects, and so do transactions.\n * Refusing to construct the manager would break code that is correct today to\n * pre-empt an error the ORM already raises clearly. The supported set is a\n * property of the query compiler, not of the connection.\n *\n * Development only, for the same reason the slow-transaction warning is: it is\n * a diagnostic aimed at whoever is choosing the database, and it should not\n * add noise to a production log every time the container starts.\n */\nfunction warnIfOrmUnavailable(database: DatabaseManager): void {\n  if (process.env.NODE_ENV !== \"development\") return;\n\n  // Every connection, not only the default one. A named connection is a whole\n  // pool an application will run model queries on — `Model.on(\"analytics\")` —\n  // so it can be pointed at MySQL exactly as the default can, and warning about\n  // only one of them would make the check pass while the query that raises is\n  // on the other.\n  for (const name of database.connectionNames) {\n    const connection = database.connection(name);\n    if (ormSupports(connection.dialect)) continue;\n\n    const source =\n      name === database.name\n        ? \"DATABASE_URL\"\n        : `The \"${name}\" database connection`;\n\n    console.warn(\n      `[gemi] ${source} points at ${connection.dialect}, which the gemi ORM ` +\n        `does not implement — only sqlite and postgres are. The connection ` +\n        `works, so raw SQL through DB.query / DB.sql and transactions are ` +\n        `fine, but every model operation will raise ` +\n        `UnsupportedDialectError.\\n(development only)`,\n    );\n  }\n}\n"
   ],
   "mappings": ";8LAMO,AAAM,IAAgC,LAAgB,CAC3D,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IAAM,CACJ,IAAM,EAAW,IAAI,EACnB,EACE,EAAuB,EACvB,KAAK,IAAI,OAAO,IAAoB,WAAY,CAAC,CAAC,CACpD,CACF,EAGA,OADA,EAAqB,CAAQ,EACtB,EAEX,OAcI,SAAQ,EAAG,CAEf,GAAI,CAAC,KAAK,IAAI,SAAS,CAAe,EAAG,OACzC,MAAM,KAAK,IAAI,KAAK,CAAe,EAAE,MAAM,EAE/C,CAqBA,SAAS,CAAoB,CAAC,EAAiC,CAC7D,GAAI,mBAAyB,cAAe,OAO5C,QAAW,KAAQ,EAAS,gBAAiB,CAC3C,IAAM,EAAa,EAAS,WAAW,CAAI,EAC3C,GAAI,EAAY,EAAW,OAAO,EAAG,SAErC,IAAM,EACJ,IAAS,EAAS,KACd,eACA,QAAQ,yBAEd,QAAQ,KACN,UAAU,eAAoB,EAAW,+BACvC,0EACA;AAAA,mBAGJ",
-  "debugId": "8A781F6631E5222C64756E2164756E21",
+  "debugId": "6479B22C9FC7B46C64756E2164756E21",
   "names": []
 }

package/dist/{chunk-pwchwgkc.js → chunk-eqtsfvvd.js}

@@ -1,5 +1,5 @@
 // @bun
 import{AsyncLocalStorage as E}from"async_hooks";class Q{content={title:"Gemi App",description:null,openGraph:null};touched=!1;render(){return{title:this.content.title,description:this.content.description,openGraph:this.content.openGraph}}title(j){this.touched=!0,this.content.title=j}description(j){this.touched=!0,this.content.description=j}openGraph({title:j,description:B,type:z,url:G,image:J,imageAlt:U,imageWidth:V,imageHeight:X,twitterImage:Y=J,twitterImageAlt:D=U,twitterImageWidth:K=V,twitterImageHeight:M=X}){this.touched=!0;let Z=J,$=Y;if(J&&!J.startsWith("http"))Z=`${process.env.HOST_NAME}${J}`,$=`${process.env.HOST_NAME}${Y}`;this.content.openGraph=Object.fromEntries(Object.entries({title:j,description:B,type:z,url:G,image:Z,imageAlt:U,imageWidth:V,imageHeight:X,twitterImage:$,twitterImageAlt:D,twitterImageWidth:K,twitterImageHeight:M}).filter(([O,N])=>N!==void 0))}}function b(j,B,z={}){return[`${j}=${B}`,z.maxAge?`Max-Age=${z.maxAge}`:"",z.httpOnly?"HttpOnly":"",z.secure?"Secure":"",z.sameSite?`SameSite=${z.sameSite}`:"SameSite=Strict",z.path?`Path=${z.path}`:"Path=/",z.domain?`Domain=${z.domain}`:"",z.expires?`Expires=${z.expires.toUTCString()}`:"",z.partitioned?"Partitioned":""].filter((G)=>G!=="").join("; ")}var P=new E;class F{req;cookies=new Set;headers=new Headers;serverQueries=null;user=null;csrfHmac=null;locale=null;metadata=new Q;rangeRequest=null;sessionId=null;featureEvaluations=null;featureContext=null;featureBuckets=null;pendingWork=new Set;ended=!1;constructor(j){this.req=j}waitUntil(j){if(this.ended)return;let B=Promise.resolve(j).then(()=>{},()=>{});this.pendingWork.add(B),B.then(()=>this.pendingWork.delete(B))}hasPendingWork(){return this.pendingWork.size>0}async whenIdle(){while(this.pendingWork.size>0)await Promise.all(Array.from(this.pendingWork))}setLocale(j){this.locale=j}renderMeta(){return this.metadata.render()}setCSRFHmac(j){this.csrfHmac=j}setCookie(j,B,z={}){this.cookies.add(b(j,B,z))}deleteCookie(j,B={}){this.cookies.add(b(j,"",{...B,maxAge:-1}))}setHeaders(j,B){this.headers.set(j,B)}setUser(j){this.user=j}setRequest(j){this.req=j}destroy(){this.ended=!0,delete this.cookies,delete this.headers,this.serverQueries=null,this.sessionId=null,this.featureEvaluations=null,this.featureContext=null,this.featureBuckets=null,delete this.user}}var L="session_id";function H(){let j=T.getStore();if(!j)return null;if(j.sessionId)return j.sessionId;let B=j.req?.cookies?.get(L);if(B)j.sessionId=B;return j.sessionId}function W(){let j=T.getStore();if(!j)return null;let B=H();if(B)return B;let z=Bun.randomUUIDv7();return j.sessionId=z,j.setCookie(L,z,{httpOnly:!0,secure:Bun.env.NODE_ENV==="production",sameSite:"Lax",expires:new Date(Date.now()+31536000000)}),z}class T{static getStore(){return P.getStore()}static setRequest(j){P.getStore().req=j}static run(j,B,z){let G=new F(j);if(z)G.user=z.user;return P.run(G,B)}static runWith(j,B){return P.run(j,B)}static exit(j){return P.exit(j)}}
-export{H as zf,W as Af,T as Bf};
+export{H as Cf,W as Df,T as Ef};
 
-//# debugId=A7749207BCAA8A1264756E2164756E21
+//# debugId=B37DEE9E0FDEE9EF64756E2164756E21

package/dist/{chunk-pwchwgkc.js.map → chunk-eqtsfvvd.js.map}

@@ -6,6 +6,6 @@
     "export type OpenGraphParams = {\n  title: string;\n  description?: string;\n  type: string;\n  url: string;\n  image: string;\n  imageAlt?: string;\n  imageWidth?: number;\n  imageHeight?: number;\n  twitterImage?: string;\n  twitterImageAlt?: string;\n  twitterImageWidth?: number;\n  twitterImageHeight?: number;\n};\nexport class Metadata {\n  content: any = {\n    title: \"Gemi App\",\n    description: null,\n    openGraph: null,\n  };\n\n  /**\n   * Whether a handler set anything, as opposed to `content` still being the\n   * defaults. A partially rendered response that touched no metadata sends\n   * none, so the client keeps what the skipped segments put there.\n   */\n  touched = false;\n\n  render() {\n    return {\n      title: this.content.title,\n      description: this.content.description,\n      openGraph: this.content.openGraph,\n    };\n  }\n\n  title(title: string) {\n    this.touched = true;\n    this.content.title = title;\n  }\n\n  description(description: string) {\n    this.touched = true;\n    this.content.description = description;\n  }\n\n  openGraph({\n    title,\n    description,\n    type,\n    url,\n    image,\n    imageAlt,\n    imageWidth,\n    imageHeight,\n    twitterImage = image,\n    twitterImageAlt = imageAlt,\n    twitterImageWidth = imageWidth,\n    twitterImageHeight = imageHeight,\n  }: OpenGraphParams) {\n    this.touched = true;\n    let _image = image;\n    let _twitterImage = twitterImage;\n    if (image && !image.startsWith(\"http\")) {\n      _image = `${process.env.HOST_NAME}${image}`;\n      _twitterImage = `${process.env.HOST_NAME}${twitterImage}`;\n    }\n    this.content.openGraph = Object.fromEntries(\n      Object.entries({\n        title,\n        description,\n        type,\n        url,\n        image: _image,\n        imageAlt,\n        imageWidth,\n        imageHeight,\n        twitterImage: _twitterImage,\n        twitterImageAlt,\n        twitterImageWidth,\n        twitterImageHeight,\n      }).filter(([_, value]) => value !== undefined),\n    );\n  }\n}\n"
   ],
   "mappings": ";AAAA,4BAAS,oBCcF,MAAM,CAAS,CACpB,QAAe,CACb,MAAO,WACP,YAAa,KACb,UAAW,IACb,EAOA,QAAU,GAEV,MAAM,EAAG,CACP,MAAO,CACL,MAAO,KAAK,QAAQ,MACpB,YAAa,KAAK,QAAQ,YAC1B,UAAW,KAAK,QAAQ,SAC1B,EAGF,KAAK,CAAC,EAAe,CACnB,KAAK,QAAU,GACf,KAAK,QAAQ,MAAQ,EAGvB,WAAW,CAAC,EAAqB,CAC/B,KAAK,QAAU,GACf,KAAK,QAAQ,YAAc,EAG7B,SAAS,EACP,QACA,cACA,OACA,MACA,QACA,WACA,aACA,cACA,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,GACH,CAClB,KAAK,QAAU,GACf,IAAI,EAAS,EACT,EAAgB,EACpB,GAAI,GAAS,CAAC,EAAM,WAAW,MAAM,EACnC,EAAS,GAAG,QAAQ,IAAI,YAAY,IACpC,EAAgB,GAAG,QAAQ,IAAI,YAAY,IAE7C,KAAK,QAAQ,UAAY,OAAO,YAC9B,OAAO,QAAQ,CACb,QACA,cACA,OACA,MACA,MAAO,EACP,WACA,aACA,cACA,aAAc,EACd,kBACA,oBACA,oBACF,CAAC,EAAE,OAAO,EAAE,EAAG,KAAW,IAAU,MAAS,CAC/C,EAEJ,CDjEO,SAAS,CAAY,CAC1B,EACA,EACA,EAA+B,CAAC,EAChC,CACA,MAAO,CACL,GAAG,KAAQ,IACX,EAAQ,OAAS,WAAW,EAAQ,SAAW,GAC/C,EAAQ,SAAW,WAAa,GAChC,EAAQ,OAAS,SAAW,GAC5B,EAAQ,SAAW,YAAY,EAAQ,WAAa,kBACpD,EAAQ,KAAO,QAAQ,EAAQ,OAAS,SACxC,EAAQ,OAAS,UAAU,EAAQ,SAAW,GAC9C,EAAQ,QAAU,WAAW,EAAQ,QAAQ,YAAY,IAAM,GAC/D,EAAQ,YAAc,cAAgB,EACxC,EACG,OAAO,CAAC,IAAM,IAAM,EAAE,EACtB,KAAK,IAAI,EAGd,IAAM,EAAiB,IAAI,EAW3B,MAAM,CAAM,CA0DS,IAzDnB,QAAuB,IAAI,IAC3B,QAAmB,IAAI,QAMvB,cAAyC,KACzC,KAAY,KACZ,SAA0B,KAC1B,OAAwB,KACxB,SAAW,IAAI,EAUf,aAAiC,KAWjC,UAA2B,KAW3B,mBAAkD,KAElD,eAA0B,KAE1B,eAA6C,KAO7C,YAAc,IAAI,IAClB,MAAQ,GAER,WAAW,CAAQ,EAAkB,CAAlB,WAenB,SAAS,CAAC,EAA4B,CACpC,GAAI,KAAK,MACP,OAEF,IAAM,EAAU,QAAQ,QAAQ,CAAI,EAAE,KACpC,IAAM,GACN,IAAM,EACR,EACA,KAAK,YAAY,IAAI,CAAO,EACvB,EAAQ,KAAK,IAAM,KAAK,YAAY,OAAO,CAAO,CAAC,EAI1D,cAAc,EAAG,CACf,OAAO,KAAK,YAAY,KAAO,OAO3B,SAAQ,EAAG,CACf,MAAO,KAAK,YAAY,KAAO,EAC7B,MAAM,QAAQ,IAAI,MAAM,KAAK,KAAK,WAAW,CAAC,EAIlD,SAAS,CAAC,EAAgB,CACxB,KAAK,OAAS,EAGhB,UAAU,EAAG,CACX,OAAO,KAAK,SAAS,OAAO,EAG9B,WAAW,CAAC,EAAc,CACxB,KAAK,SAAW,EAGlB,SAAS,CAAC,EAAc,EAAe,EAA+B,CAAC,EAAG,CACxE,KAAK,QAAQ,IAAI,EAAa,EAAM,EAAO,CAAO,CAAC,EAOrD,YAAY,CAAC,EAAc,EAAwD,CAAC,EAAG,CACrF,KAAK,QAAQ,IAAI,EAAa,EAAM,GAAI,IAAK,EAAS,OAAQ,EAAG,CAAC,CAAC,EAGrE,UAAU,CAAC,EAAc,EAAe,CACtC,KAAK,QAAQ,IAAI,EAAM,CAAK,EAG9B,OAAO,CAAC,EAAW,CACjB,KAAK,KAAO,EAGd,UAAU,CAAC,EAA4B,CACrC,KAAK,IAAM,EAGb,OAAO,EAAG,CACR,KAAK,MAAQ,GACb,OAAO,KAAK,QACZ,OAAO,KAAK,QACZ,KAAK,cAAgB,KACrB,KAAK,UAAY,KACjB,KAAK,mBAAqB,KAC1B,KAAK,eAAiB,KACtB,KAAK,eAAiB,KACtB,OAAO,KAAK,KAEhB,CAEO,IAAM,EAAoB,aAsB1B,SAAS,CAAS,EAAkB,CACzC,IAAM,EAAQ,EAAe,SAAS,EACtC,GAAI,CAAC,EACH,OAAO,KAET,GAAI,EAAM,UACR,OAAO,EAAM,UAEf,IAAM,EAAO,EAAM,KAAK,SAAS,IAAI,CAAiB,EACtD,GAAI,EACF,EAAM,UAAY,EAEpB,OAAO,EAAM,UAaR,SAAS,CAAe,EAAkB,CAC/C,IAAM,EAAQ,EAAe,SAAS,EACtC,GAAI,CAAC,EACH,OAAO,KAET,IAAM,EAAW,EAAU,EAC3B,GAAI,EACF,OAAO,EAGT,IAAM,EAAS,IAAI,aAAa,EAehC,OAdA,EAAM,UAAY,EAClB,EAAM,UAAU,EAAmB,EAAQ,CACzC,SAAU,GACV,OAAQ,mBAAyB,aAQjC,SAAU,MACV,QAAS,IAAI,KAAK,KAAK,IAAI,EAAI,WAAyB,CAC1D,CAAC,EACM,EAGF,MAAM,CAAe,OACnB,SAAQ,EAAG,CAChB,OAAO,EAAe,SAAS,QAG1B,WAAU,CAAC,EAA4B,CAC5C,EAAe,SAAS,EAAE,IAAM,QAO3B,IAAM,CACX,EACA,EACA,EACG,CACH,IAAM,EAAQ,IAAI,EAAM,CAAW,EACnC,GAAI,EACF,EAAM,KAAO,EAAQ,KAEvB,OAAO,EAAe,IAAI,EAAO,CAAE,QAU9B,QAAU,CAAC,EAAc,EAAgB,CAC9C,OAAO,EAAe,IAAI,EAAO,CAAE,QAQ9B,KAAO,CAAC,EAAgB,CAC7B,OAAO,EAAe,KAAK,CAAE,EAEjC",
-  "debugId": "A7749207BCAA8A1264756E2164756E21",
+  "debugId": "B37DEE9E0FDEE9EF64756E2164756E21",
   "names": []
 }

package/dist/{chunk-df0105td.js → chunk-et6thczw.js}

@@ -1,5 +1,5 @@
 // @bun
 import{constants as X}from"os";var U=Symbol.for("gemi.server.shutdown");function P(){let j=globalThis;return j[U]??={shuttingDown:!1,drained:!1},j[U]}function Y(){return P().shuttingDown}function Z(){P().shuttingDown=!0}function $(){P().drained=!0}function y(j=process.env){let z={timeoutMs:Q(j.GEMI_SHUTDOWN_TIMEOUT,20),delayMs:Q(j.GEMI_SHUTDOWN_DELAY,0),providerTimeoutMs:Q(j.GEMI_SHUTDOWN_PROVIDER_TIMEOUT,5)};if(z.delayMs>0&&z.delayMs>=z.timeoutMs)console.warn(`[gemi] GEMI_SHUTDOWN_DELAY (${z.delayMs/1000}s) leaves no time to drain within GEMI_SHUTDOWN_TIMEOUT (${z.timeoutMs/1000}s); in-flight requests will be abandoned on every shutdown. Raise the timeout.`);return z}function Q(j,z){let B=j===void 0||j.trim()===""?NaN:Number(j);if(Number.isFinite(B)&&B>=0)return B*1000;if(j!==void 0)console.warn(`[gemi] Ignoring shutdown setting "${j}": expected a number of seconds.`);return z*1000}async function G(j){let{server:z,settings:B}=j,H=Date.now()+B.timeoutMs;Z(),console.log(`[gemi] Shutting down: draining in-flight requests (up to ${B.timeoutMs/1000}s).`);let F=!0;if(z){if(B.delayMs>0)await M(Math.min(B.delayMs,H-Date.now()));let O=z.stop(),R=H-Date.now();if(F=R>0?await C(O,R):z.pendingRequests===0,!F)console.error(`[gemi] Shutdown grace period elapsed with ${z.pendingRequests} request(s) still in flight; abandoning them.`),z.stop(!0).catch(()=>{})}$();let K=await j.shutdownProviders({timeoutMs:B.providerTimeoutMs}),J=F&&K.failed.length===0&&K.timedOut.length===0;return console.log(`[gemi] Shutdown ${J?"complete":"finished with errors"}.`),J?0:1}async function C(j,z){if(z<=0)return!1;let B,H=await Promise.race([j.then(()=>!0,()=>!0),new Promise((F)=>{B=setTimeout(()=>F(!1),z)})]);return clearTimeout(B),H}function M(j){return new Promise((z)=>setTimeout(z,Math.max(0,j)))}function f(j){if(!Y())return j;try{return j.headers.set("Connection","close"),j}catch{let z=new Response(j.body,j);return z.headers.set("Connection","close"),z}}function _(j){return async(z,B)=>{if(P().drained)return new Response("Service Unavailable",{status:503,headers:{Connection:"close"}});return f(await j(z,B))}}var V=Symbol.for("gemi.server.signalsInstalled"),q=1000;function w(j,z={}){let B=globalThis;if(B[V])return;B[V]=!0;let H=z.repeatWindowMs??q,F,K=(J)=>{if(F!==void 0){if(Date.now()-F<H)return;console.error(`[gemi] ${J} received again; exiting without waiting for the drain.`),process.exit(128+X.signals[J])}F=Date.now(),console.log(`[gemi] ${J} received.`),j().then((O)=>process.exit(O),(O)=>{console.error("[gemi] Shutdown failed:",O),process.exit(1)})};process.on("SIGTERM",K),process.on("SIGINT",K)}
-export{Y as Cg,Z as Dg,y as Eg,G as Fg,_ as Gg,w as Hg};
+export{Y as Kg,Z as Lg,y as Mg,G as Ng,_ as Og,w as Pg};
 
-//# debugId=D3F34BEE406912DD64756E2164756E21
+//# debugId=32C02B61764C72F164756E2164756E21

package/dist/{chunk-df0105td.js.map → chunk-et6thczw.js.map}

@@ -5,6 +5,6 @@
     "import { constants } from \"node:os\";\nimport type { ShutdownReport } from \"../foundation/Application\";\nimport type { Instrumentation } from \"./types\";\n\n// On `globalThis` under a registry symbol rather than in a module variable, so\n// the flag an app's health route reads is the one the server set even when two\n// copies of this module are loaded — the built CLI bundles its own gemi (see\n// `app/App.ts`), and `bun --hot` re-evaluates every module on a reload.\nconst STATE = Symbol.for(\"gemi.server.shutdown\");\n\ntype ShutdownState = { shuttingDown: boolean; drained: boolean };\n\nfunction state(): ShutdownState {\n  const global = globalThis as { [STATE]?: ShutdownState };\n  global[STATE] ??= { shuttingDown: false, drained: false };\n  return global[STATE];\n}\n\n/**\n * True from the moment this server process has been told to stop — before it\n * stops accepting connections — until it exits.\n *\n * gemi has no health endpoint of its own, so taking an instance out of a load\n * balancer is the app's health route's job: answer it with a `503` while this\n * is true, and the platform's probe pulls the instance while the in-flight\n * requests are still draining. Every response sent in that window also carries\n * `Connection: close`, so a client that honours it opens its next request on a\n * new connection — one the load balancer can route elsewhere — instead of\n * reusing this one.\n */\nexport function isShuttingDown(): boolean {\n  return state().shuttingDown;\n}\n\nexport function markShuttingDown() {\n  state().shuttingDown = true;\n}\n\n/**\n * The request drain is over and the providers' `shutdown()` may be running:\n * from here on a request must not reach the app. See `serveForShutdown`.\n */\nexport function markDrained() {\n  state().drained = true;\n}\n\n/** Test seam: a fresh process starts false, and so should each test. */\nexport function resetShuttingDown() {\n  state().shuttingDown = false;\n  state().drained = false;\n}\n\nexport type ShutdownSettings = {\n  /**\n   * From the signal to the end of the request drain, in milliseconds — the\n   * delay below included. Requests still in flight when it runs out are\n   * abandoned. `GEMI_SHUTDOWN_TIMEOUT`, in seconds; default 20. `0` means\n   * \"close the listener and do not wait\": a shutdown with nothing in flight is\n   * still a clean one.\n   */\n  timeoutMs: number;\n  /**\n   * How long to keep accepting new requests after `isShuttingDown()` turns\n   * true, in milliseconds, so a health probe can see the `503` and the load\n   * balancer stop routing here before the listener closes.\n   * `GEMI_SHUTDOWN_DELAY`, in seconds; default 0.\n   */\n  delayMs: number;\n  /**\n   * The shared deadline for every provider's `shutdown()`, in milliseconds,\n   * after the drain. `GEMI_SHUTDOWN_PROVIDER_TIMEOUT`, in seconds; default 5.\n   * `0` skips the hooks — deliberately, so it is not reported as a failure.\n   */\n  providerTimeoutMs: number;\n};\n\n/**\n * 20s to drain plus 5s for providers is 25s: under the 30s that Kubernetes,\n * Azure Container Apps and ECS give by default between `SIGTERM` and `SIGKILL`,\n * with 5s left for the `gemi start` relay, the process exit and clock skew\n * between the platform's timer and ours. A platform with a shorter window\n * (Cloud Run's 10s, Fly's 5s) needs these lowered, not the other way round —\n * a drain that outlives the grace period ends in the same `SIGKILL` as no drain.\n *\n * The delay defaults to 0 because it only helps where a probe is watching, and\n * otherwise every shutdown would pay it for nothing.\n */\nexport function shutdownSettings(\n  env: Record<string, string | undefined> = process.env,\n): ShutdownSettings {\n  const settings = {\n    timeoutMs: seconds(env.GEMI_SHUTDOWN_TIMEOUT, 20),\n    delayMs: seconds(env.GEMI_SHUTDOWN_DELAY, 0),\n    providerTimeoutMs: seconds(env.GEMI_SHUTDOWN_PROVIDER_TIMEOUT, 5),\n  };\n  // Warned, not clamped: the delay is sized to a probe, the timeout to the\n  // platform's grace period, and which one is wrong only the operator knows.\n  // Left alone, every shutdown spends the whole timeout in the delay and then\n  // abandons whatever is in flight without draining it.\n  if (settings.delayMs > 0 && settings.delayMs >= settings.timeoutMs) {\n    console.warn(\n      `[gemi] GEMI_SHUTDOWN_DELAY (${settings.delayMs / 1000}s) leaves no time to drain within GEMI_SHUTDOWN_TIMEOUT (${settings.timeoutMs / 1000}s); in-flight requests will be abandoned on every shutdown. Raise the timeout.`,\n    );\n  }\n  return settings;\n}\n\nfunction seconds(value: string | undefined, fallback: number): number {\n  const parsed = value === undefined || value.trim() === \"\" ? NaN : Number(value);\n  if (Number.isFinite(parsed) && parsed >= 0) return parsed * 1000;\n  if (value !== undefined) {\n    console.warn(`[gemi] Ignoring shutdown setting \"${value}\": expected a number of seconds.`);\n  }\n  return fallback * 1000;\n}\n\n/** The part of `Bun.Server` a drain needs. */\nexport type Stoppable = {\n  stop(closeActiveConnections?: boolean): Promise<void>;\n  readonly pendingRequests: number;\n};\n\n/**\n * The shutdown sequence, in its order:\n *\n * 1. `isShuttingDown()` turns true — first, so the health route answers `503`\n *    and responses carry `Connection: close` while the listener is still open.\n * 2. After `delayMs`, the listener closes (`server.stop()` without force):\n *    new connections are refused, while every request in flight — a streamed\n *    response included, to its last chunk — runs to completion.\n * 3. That completion is awaited until `timeoutMs` from the start.\n * 4. From here a request is refused with a `503` before it reaches the app\n *    (`serveForShutdown`), and every provider's `shutdown()` runs, reverse\n *    order, `providerTimeoutMs`.\n *\n * Resolves with the exit code: 0 when every step finished in time, 1 when the\n * drain was cut short or a provider failed or overran.\n *\n * Two things `stop()` does not do, both measured on Bun 1.3.14, and both why\n * the process exit that follows is what actually ends the server:\n *\n * - It does not close a kept-alive connection. One that is idle when the\n *   listener closes stays open, and a request sent down it afterwards is\n *   served. That is what the `Connection: close` on every response in the\n *   window is for: a client (or a proxy in front) that honours it opens its\n *   next request on a new connection, which the closed listener refuses. A\n *   client that does not honour it is what step 4's `503` is for — Bun does\n *   not close the socket after a `Connection: close` response either (#566).\n * - `stop(true)` issued after a graceful `stop()` does not cut the remaining\n *   requests off; it waits for the same ones. It is still called when the\n *   drain times out, for a Bun that does, but nothing here depends on it. Nor\n *   does it close an idle kept-alive connection. Only a `stop(true)` issued\n *   *first* does that, and it cuts off the requests in flight with it, which\n *   is the drain given up — so the idle ones are refused, not closed.\n */\nexport async function drain(params: {\n  server: Stoppable | undefined;\n  shutdownProviders: (options: { timeoutMs: number }) => Promise<ShutdownReport>;\n  settings: ShutdownSettings;\n}): Promise<number> {\n  const { server, settings } = params;\n  const deadline = Date.now() + settings.timeoutMs;\n\n  markShuttingDown();\n  console.log(\n    `[gemi] Shutting down: draining in-flight requests (up to ${settings.timeoutMs / 1000}s).`,\n  );\n\n  let drained = true;\n  if (server) {\n    if (settings.delayMs > 0) {\n      await sleep(Math.min(settings.delayMs, deadline - Date.now()));\n    }\n    const stopped = server.stop();\n    // No time left to wait — a `GEMI_SHUTDOWN_TIMEOUT` of 0, or a delay that\n    // spent all of it — is \"do not wait for what is in flight\", and that is\n    // only a failure when something *is* in flight. Reading it as one made\n    // every clean shutdown log an abandonment and exit 1 for the operator who\n    // zeroed the budget to fit a 5s grace period, with nothing to abandon.\n    const remaining = deadline - Date.now();\n    drained =\n      remaining > 0 ? await settlesWithin(stopped, remaining) : server.pendingRequests === 0;\n    if (!drained) {\n      console.error(\n        `[gemi] Shutdown grace period elapsed with ${server.pendingRequests} request(s) still in flight; abandoning them.`,\n      );\n      void server.stop(true).catch(() => {});\n    }\n  }\n\n  // Whether or not the drain finished: a request that arrives now, down a\n  // kept-alive connection the listener's close left open, would run against\n  // providers that are being shut down underneath it.\n  markDrained();\n  const report = await params.shutdownProviders({ timeoutMs: settings.providerTimeoutMs });\n  const clean = drained && report.failed.length === 0 && report.timedOut.length === 0;\n  console.log(`[gemi] Shutdown ${clean ? \"complete\" : \"finished with errors\"}.`);\n  return clean ? 0 : 1;\n}\n\nasync function settlesWithin(promise: Promise<unknown>, ms: number): Promise<boolean> {\n  // `drain` decides for itself what a budget that is already spent means, so\n  // this is only a guard: a race against `setTimeout(0)` is a coin toss, and\n  // \"did not settle within no time at all\" is the honest answer to it.\n  if (ms <= 0) return false;\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const result = await Promise.race([\n    promise.then(\n      () => true,\n      () => true,\n    ),\n    new Promise<false>((resolve) => {\n      timer = setTimeout(() => resolve(false), ms);\n    }),\n  ]);\n  clearTimeout(timer);\n  return result;\n}\n\nfunction sleep(ms: number) {\n  return new Promise((resolve) => setTimeout(resolve, Math.max(0, ms)));\n}\n\n/**\n * `Connection: close` on a response sent while shutting down, so the client's\n * next request opens a connection — which the load balancer can send elsewhere\n * — instead of reusing this one.\n *\n * The spec makes some responses' headers immutable (a `Response.redirect`, a\n * proxied `fetch`), and setting one throws. Bun 1.3.14 lets both be set, so\n * the copy is for a Bun that follows the spec — a throw here would turn every\n * such response in the drain window into a 500.\n */\nexport function closeConnectionWhileShuttingDown(res: Response): Response {\n  if (!isShuttingDown()) return res;\n  try {\n    res.headers.set(\"Connection\", \"close\");\n    return res;\n  } catch {\n    const copy = new Response(res.body, res);\n    copy.headers.set(\"Connection\", \"close\");\n    return copy;\n  }\n}\n\n/**\n * What every response goes through while this process serves: the app's\n * instrumentation, with the two changes a shutdown makes to it.\n *\n * - While the requests in flight drain, a response carries `Connection: close`\n *   (`closeConnectionWhileShuttingDown`).\n * - Once they have drained, a request is answered `503` with\n *   `Connection: close` and reaches neither the app nor its instrumentation.\n *   The listener is closed by then, so only a kept-alive connection can still\n *   deliver one, and `server.stop()` leaves those open. Serving it would run a\n *   handler against providers whose `shutdown()` is closing the pool, the\n *   queue or the cache it uses — until the process exits. The instrumentation\n *   is skipped too because it is app code, and a tracer or error reporter is\n *   exactly what a provider flushes and closes at this point.\n */\nexport function serveForShutdown(instrumentation: Instrumentation): Instrumentation {\n  return async (req, next) => {\n    if (state().drained) {\n      return new Response(\"Service Unavailable\", {\n        status: 503,\n        headers: { Connection: \"close\" },\n      });\n    }\n    return closeConnectionWhileShuttingDown(await instrumentation(req, next));\n  };\n}\n\n// Installed once per process, not once per `Server`: a listener per instance\n// would each start a shutdown of its own, and read the other's signal as the\n// second one.\nconst SIGNALS_INSTALLED = Symbol.for(\"gemi.server.signalsInstalled\");\n\n/**\n * A repeat of the first signal inside this window is the same shutdown\n * delivered twice, not an operator asking to skip the drain. One shutdown\n * routinely arrives more than once, milliseconds apart: Ctrl+C on\n * `bun run start` reaches the server directly (the whole foreground group is\n * signalled), and again through `gemi start`'s relay — twice over, since\n * `bun run` forwards it to `gemi start` too. systemd's default\n * `KillMode=control-group` and `tini -g` do the same to every process in the\n * group. A person pressing Ctrl+C again is well outside a second.\n */\nconst REPEAT_WINDOW_MS = 1000;\n\n/**\n * `SIGTERM` or `SIGINT` runs `stop` and exits with the code it resolves with.\n * Another signal of either kind, more than `repeatWindowMs` after the first,\n * exits at once with `128 + n` — an operator pressing Ctrl+C again does not\n * want to wait out the grace period. Without a listener the first signal would\n * do that too: the default action for both is to terminate the process on the\n * spot.\n */\nexport function installShutdownSignals(\n  stop: () => Promise<number>,\n  options: { repeatWindowMs?: number } = {},\n) {\n  const global = globalThis as { [SIGNALS_INSTALLED]?: boolean };\n  if (global[SIGNALS_INSTALLED]) return;\n  global[SIGNALS_INSTALLED] = true;\n\n  const repeatWindowMs = options.repeatWindowMs ?? REPEAT_WINDOW_MS;\n  let receivedAt: number | undefined;\n  const onSignal = (signal: \"SIGTERM\" | \"SIGINT\") => {\n    if (receivedAt !== undefined) {\n      if (Date.now() - receivedAt < repeatWindowMs) return;\n      console.error(`[gemi] ${signal} received again; exiting without waiting for the drain.`);\n      process.exit(128 + constants.signals[signal]);\n    }\n    receivedAt = Date.now();\n    console.log(`[gemi] ${signal} received.`);\n    stop().then(\n      (code) => process.exit(code),\n      (error) => {\n        console.error(\"[gemi] Shutdown failed:\", error);\n        process.exit(1);\n      },\n    );\n  };\n  process.on(\"SIGTERM\", onSignal);\n  process.on(\"SIGINT\", onSignal);\n}\n"
   ],
   "mappings": ";AAAA,oBAAS,WAQT,IAAM,EAAQ,OAAO,IAAI,sBAAsB,EAI/C,SAAS,CAAK,EAAkB,CAC9B,IAAM,EAAS,WAEf,OADA,EAAO,KAAW,CAAE,aAAc,GAAO,QAAS,EAAM,EACjD,EAAO,GAeT,SAAS,CAAc,EAAY,CACxC,OAAO,EAAM,EAAE,aAGV,SAAS,CAAgB,EAAG,CACjC,EAAM,EAAE,aAAe,GAOlB,SAAS,CAAW,EAAG,CAC5B,EAAM,EAAE,QAAU,GA4Cb,SAAS,CAAgB,CAC9B,EAA0C,QAAQ,IAChC,CAClB,IAAM,EAAW,CACf,UAAW,EAAQ,EAAI,sBAAuB,EAAE,EAChD,QAAS,EAAQ,EAAI,oBAAqB,CAAC,EAC3C,kBAAmB,EAAQ,EAAI,+BAAgC,CAAC,CAClE,EAKA,GAAI,EAAS,QAAU,GAAK,EAAS,SAAW,EAAS,UACvD,QAAQ,KACN,+BAA+B,EAAS,QAAU,gEAAgE,EAAS,UAAY,oFACzI,EAEF,OAAO,EAGT,SAAS,CAAO,CAAC,EAA2B,EAA0B,CACpE,IAAM,EAAS,IAAU,QAAa,EAAM,KAAK,IAAM,GAAK,IAAM,OAAO,CAAK,EAC9E,GAAI,OAAO,SAAS,CAAM,GAAK,GAAU,EAAG,OAAO,EAAS,KAC5D,GAAI,IAAU,OACZ,QAAQ,KAAK,qCAAqC,mCAAuC,EAE3F,OAAO,EAAW,KA0CpB,eAAsB,CAAK,CAAC,EAIR,CAClB,IAAQ,SAAQ,YAAa,EACvB,EAAW,KAAK,IAAI,EAAI,EAAS,UAEvC,EAAiB,EACjB,QAAQ,IACN,4DAA4D,EAAS,UAAY,SACnF,EAEA,IAAI,EAAU,GACd,GAAI,EAAQ,CACV,GAAI,EAAS,QAAU,EACrB,MAAM,EAAM,KAAK,IAAI,EAAS,QAAS,EAAW,KAAK,IAAI,CAAC,CAAC,EAE/D,IAAM,EAAU,EAAO,KAAK,EAMtB,EAAY,EAAW,KAAK,IAAI,EAGtC,GAFA,EACE,EAAY,EAAI,MAAM,EAAc,EAAS,CAAS,EAAI,EAAO,kBAAoB,EACnF,CAAC,EACH,QAAQ,MACN,6CAA6C,EAAO,8DACtD,EACK,EAAO,KAAK,EAAI,EAAE,MAAM,IAAM,EAAE,EAOzC,EAAY,EACZ,IAAM,EAAS,MAAM,EAAO,kBAAkB,CAAE,UAAW,EAAS,iBAAkB,CAAC,EACjF,EAAQ,GAAW,EAAO,OAAO,SAAW,GAAK,EAAO,SAAS,SAAW,EAElF,OADA,QAAQ,IAAI,mBAAmB,EAAQ,WAAa,yBAAyB,EACtE,EAAQ,EAAI,EAGrB,eAAe,CAAa,CAAC,EAA2B,EAA8B,CAIpF,GAAI,GAAM,EAAG,MAAO,GACpB,IAAI,EACE,EAAS,MAAM,QAAQ,KAAK,CAChC,EAAQ,KACN,IAAM,GACN,IAAM,EACR,EACA,IAAI,QAAe,CAAC,IAAY,CAC9B,EAAQ,WAAW,IAAM,EAAQ,EAAK,EAAG,CAAE,EAC5C,CACH,CAAC,EAED,OADA,aAAa,CAAK,EACX,EAGT,SAAS,CAAK,CAAC,EAAY,CACzB,OAAO,IAAI,QAAQ,CAAC,IAAY,WAAW,EAAS,KAAK,IAAI,EAAG,CAAE,CAAC,CAAC,EAa/D,SAAS,CAAgC,CAAC,EAAyB,CACxE,GAAI,CAAC,EAAe,EAAG,OAAO,EAC9B,GAAI,CAEF,OADA,EAAI,QAAQ,IAAI,aAAc,OAAO,EAC9B,EACP,KAAM,CACN,IAAM,EAAO,IAAI,SAAS,EAAI,KAAM,CAAG,EAEvC,OADA,EAAK,QAAQ,IAAI,aAAc,OAAO,EAC/B,GAmBJ,SAAS,CAAgB,CAAC,EAAmD,CAClF,MAAO,OAAO,EAAK,IAAS,CAC1B,GAAI,EAAM,EAAE,QACV,OAAO,IAAI,SAAS,sBAAuB,CACzC,OAAQ,IACR,QAAS,CAAE,WAAY,OAAQ,CACjC,CAAC,EAEH,OAAO,EAAiC,MAAM,EAAgB,EAAK,CAAI,CAAC,GAO5E,IAAM,EAAoB,OAAO,IAAI,8BAA8B,EAY7D,EAAmB,KAUlB,SAAS,CAAsB,CACpC,EACA,EAAuC,CAAC,EACxC,CACA,IAAM,EAAS,WACf,GAAI,EAAO,GAAoB,OAC/B,EAAO,GAAqB,GAE5B,IAAM,EAAiB,EAAQ,gBAAkB,EAC7C,EACE,EAAW,CAAC,IAAiC,CACjD,GAAI,IAAe,OAAW,CAC5B,GAAI,KAAK,IAAI,EAAI,EAAa,EAAgB,OAC9C,QAAQ,MAAM,UAAU,0DAA+D,EACvF,QAAQ,KAAK,IAAM,EAAU,QAAQ,EAAO,EAE9C,EAAa,KAAK,IAAI,EACtB,QAAQ,IAAI,UAAU,aAAkB,EACxC,EAAK,EAAE,KACL,CAAC,IAAS,QAAQ,KAAK,CAAI,EAC3B,CAAC,IAAU,CACT,QAAQ,MAAM,0BAA2B,CAAK,EAC9C,QAAQ,KAAK,CAAC,EAElB,GAEF,QAAQ,GAAG,UAAW,CAAQ,EAC9B,QAAQ,GAAG,SAAU,CAAQ",
-  "debugId": "D3F34BEE406912DD64756E2164756E21",
+  "debugId": "32C02B61764C72F164756E2164756E21",
   "names": []
 }