gemi 0.93.0 → 0.94.0

package/dist/{chunk-1wdfjmkx.js.map → chunk-bedkys40.js.map}

@@ -5,6 +5,6 @@
     "import { setCredentialFeature } from \"@aws-sdk/core/client\";\nimport { CredentialsProviderError } from \"@smithy/property-provider\";\nexport const ENV_KEY = \"AWS_ACCESS_KEY_ID\";\nexport const ENV_SECRET = \"AWS_SECRET_ACCESS_KEY\";\nexport const ENV_SESSION = \"AWS_SESSION_TOKEN\";\nexport const ENV_EXPIRATION = \"AWS_CREDENTIAL_EXPIRATION\";\nexport const ENV_CREDENTIAL_SCOPE = \"AWS_CREDENTIAL_SCOPE\";\nexport const ENV_ACCOUNT_ID = \"AWS_ACCOUNT_ID\";\nexport const fromEnv = (init) => async () => {\n    init?.logger?.debug(\"@aws-sdk/credential-provider-env - fromEnv\");\n    const accessKeyId = process.env[ENV_KEY];\n    const secretAccessKey = process.env[ENV_SECRET];\n    const sessionToken = process.env[ENV_SESSION];\n    const expiry = process.env[ENV_EXPIRATION];\n    const credentialScope = process.env[ENV_CREDENTIAL_SCOPE];\n    const accountId = process.env[ENV_ACCOUNT_ID];\n    if (accessKeyId && secretAccessKey) {\n        const credentials = {\n            accessKeyId,\n            secretAccessKey,\n            ...(sessionToken && { sessionToken }),\n            ...(expiry && { expiration: new Date(expiry) }),\n            ...(credentialScope && { credentialScope }),\n            ...(accountId && { accountId }),\n        };\n        setCredentialFeature(credentials, \"CREDENTIALS_ENV_VARS\", \"g\");\n        return credentials;\n    }\n    throw new CredentialsProviderError(\"Unable to find environment variable credentials.\", { logger: init?.logger });\n};\n"
   ],
   "mappings": ";qIAAA,SACA,KACa,EAAU,oBACV,EAAa,wBACb,EAAc,oBACd,EAAiB,4BACjB,EAAuB,uBACvB,EAAiB,iBACjB,EAAU,CAAC,IAAS,SAAY,CACzC,GAAM,QAAQ,MAAM,4CAA4C,EAChE,IAAM,EAAc,QAAQ,IAAI,GAC1B,EAAkB,QAAQ,IAAI,GAC9B,EAAe,QAAQ,IAAI,GAC3B,EAAS,QAAQ,IAAI,GACrB,EAAkB,QAAQ,IAAI,GAC9B,EAAY,QAAQ,IAAI,GAC9B,GAAI,GAAe,EAAiB,CAChC,IAAM,EAAc,CAChB,cACA,qBACI,GAAgB,CAAE,cAAa,KAC/B,GAAU,CAAE,WAAY,IAAI,KAAK,CAAM,CAAE,KACzC,GAAmB,CAAE,iBAAgB,KACrC,GAAa,CAAE,WAAU,CACjC,EAEA,OADA,uBAAqB,EAAa,uBAAwB,GAAG,EACtD,EAEX,MAAM,IAAI,2BAAyB,mDAAoD,CAAE,OAAQ,GAAM,MAAO,CAAC",
-  "debugId": "61F4600747E851CF64756E2164756E21",
+  "debugId": "D3BFAEB6A037F78964756E2164756E21",
   "names": []
 }

package/dist/chunk-bk4f99s4.js

@@ -0,0 +1,5 @@
+// @bun
+import{zb as SZ}from"./chunk-wc46df4w.js";import{Lb as c,Nb as y,Pb as XZ,Qb as VZ,Sb as qZ}from"./chunk-j9x86xsc.js";import{$b as GZ,Tb as e,Wb as JZ,Yb as ZZ,Zb as $Z,_b as U,ac as WZ,cc as HZ}from"./chunk-zyw42zny.js";import{fc as K}from"./chunk-7kedxtbp.js";import{$c as IZ,Cd as S,Dd as v,Ec as _Z,Ed as h,ad as u,ed as j,md as i,nd as f,rd as s,tc as OZ,xc as n,yd as R}from"./chunk-ykbehyp9.js";import{Md as KZ,Nd as p}from"./chunk-jxhznqhe.js";import{df as b,sf as l,uf as w,vf as k,wf as T}from"./chunk-mym0zxxp.js";import{Ff as a,Hf as Q}from"./chunk-br9p390p.js";import{Nf as BZ}from"./chunk-n4807648.js";import{vg as I}from"./chunk-3fr22rtg.js";import{Bg as d}from"./chunk-z9ydpvc8.js";import{Eg as zZ,Hg as M}from"./chunk-7hfv5n00.js";async function TZ(Z,$={}){try{if(!await Z.shouldRun.call(Z))return}catch(W){console.error(`Error evaluating shouldRun for cron job ${Z.name}:`,W);return}let G=EZ(Z.withoutOverlapping);if(!Z.onOneServer&&G===void 0){await m(Z);return}let H;try{if(H=$.locks?.()??RZ(),Z.onOneServer){let W=Math.floor(($.now??Date.now())/60000);if(!await H.store.advance(`gemi:cron-tick:${Z.name}`,W))return}}catch(W){console.error(`Could not claim the tick of cron job ${Z.name}; skipped it:`,W);return}if(G===void 0){await m(Z);return}try{await H.run(`gemi:cron:${Z.name}`,{ttl:G},(W)=>m(Z,W))}catch(W){if(W instanceof a)console.error(`Cron job ${Z.name} lost its withoutOverlapping lock while running: another tick may have started alongside it.`,W);else console.error(`Could not take the withoutOverlapping lock of cron job ${Z.name}:`,W)}}var o=300000;function EZ(Z){if(!Z)return;if(Z===!0)return o;return Z.expiresAfter??o}var r;function RZ(){return r??=new Q(new e),r}async function m(Z,$){try{await Z.onTick.call(Z)}catch(G){console.error(`Error executing cron job ${Z.name}:`,G)}try{await Z.callback.call(Z,$)}catch(G){console.error(`Error in cron job ${Z.name}:`,G)}try{await Z.onComplete.call(Z)}catch(G){console.error(`Error completing cron job ${Z.name}:`,G)}}class A{static token="scheduler";handles=[];resolved;inFlight=new Map;stopped=!1;locks;constructor(Z){this.resolved=Z.jobs}get jobs(){return[...this.resolved]}useJobs(Z){this.resolved=Z}useLocks(Z){this.locks=Z}start(Z=($)=>$()){if(this.stopped=!1,this.resolved.length===0)return;let $=globalThis.__gemiCronJobs??=new Map,G=new Map;for(let H of this.resolved){let W=new H;if(!W.name){console.error(`Cron job must have a name \u2014 ${H.name||"an anonymous class"} has none, so it is not scheduled. If this is a base class that other jobs extend, move it out of the discovered directory: \`abstract\` does not survive to runtime, so a class under app/cron is indistinguishable from a job.`);continue}if(!W.cron){console.error(`Cron job must have an expression. Job: ${W.name}`);continue}let X=G.get(W.name);if(X!==void 0){console.error(`Two cron jobs claim the name "${W.name}" \u2014 ${X} is scheduled and ${H.name||"an anonymous class"} is not. A name is the scheduler's key, so only one job can hold it. Rename one.`);continue}G.set(W.name,H.name||"an anonymous class"),$.get(W.name)?.stop();let Y=Bun.cron(W.cron,()=>{if(this.stopped)return;let z=this.locks;return this.track(W.name,()=>Z(()=>TZ(W,{locks:z})))});$.set(W.name,Y),this.handles.push(Y)}}stop(){this.stopped=!0;for(let Z of this.handles)Z.stop();this.handles=[]}async drain(Z=1/0){this.stop();let $,G=new Promise((H)=>{if(Z!==1/0)$=setTimeout(H,Z)});return await Promise.race([Promise.allSettled([...this.inFlight.values()].map((H)=>H.done)),G]),clearTimeout($),{unfinished:[...this.inFlight.values()].map((H)=>({...H.tick}))}}get running(){return this.inFlight.size}track(Z,$){let G={},H=Promise.resolve().then($).finally(()=>this.inFlight.delete(G));return this.inFlight.set(G,{tick:{name:Z,startedAt:new Date},done:H}),H}}import{isMainThread as DZ}from"worker_threads";var kZ=100,jZ=(Z)=>Math.min(kZ,Math.floor(Z/10));class MZ extends K{register(){this.app.singleton(U,()=>new U(this.app.config.get("queue",{}),{application:this.app})),this.app.singleton(Q,()=>this.app.make(U).locks)}async boot(){let Z=this.app.config.get("queue",{});if(Z.jobs!==void 0)return;let{jobsDir:$}=I(ZZ(),Z);this.app.make(U).useJobs(await XZ($))}async shutdown(Z){if(!this.app.resolved(U))return;let $=this.app.make(U);if($.running>0)console.log(`[gemi] Shutting down: waiting for ${$.running} running queued job(s).`);let G=Z?.timeoutMs,{unfinished:H}=await $.drain(G===void 0?1/0:Math.max(0,G-jZ(G)));if(H.length>0)return console.error("[gemi] Queued jobs still running at shutdown: "+H.map((W)=>`${W.name} (${W.id})`).join(", ")),{abandoned:!0}}}function Q3(Z){if(wZ(Z),Bun.env.NODE_ENV!=="production")return fZ(Z);if(YZ(Z))return;if(!GZ())return;if(!Z.bound(U))return;Z.make(U).start()}function YZ(Z){let $=Z.config.get("queue",{}).driver??"memory";return $==="memory"||$ instanceof $Z}function yZ(Z){if(YZ(Z))return!0;if(typeof Z.config.get("queue",{}).driver!=="function"||!Z.bound(U))return!1;try{return!Z.make(U).durable}catch{return!1}}function wZ(Z){let $=process.env.GEMI_QUEUE_CLAIM;if($===void 0||HZ())return;if(process.env.ROOT_DIR===void 0||!DZ)return;if(WZ()){if(!yZ(Z))return;console.warn('[gemi] GEMI_QUEUE_CLAIM=off is ignored: the memory queue driver keeps jobs in the process that dispatched them, so no worker could run them. This server runs its own jobs. Use a driver other processes can read, such as "database", to hand jobs to `gemi queue:work`.')}else if($.trim().toLowerCase()!=="on")console.warn(`[gemi] GEMI_QUEUE_CLAIM="${$}" is not "off" or "on", so this server claims jobs. Set it to "off" to leave them to \`gemi queue:work\`.`)}function fZ(Z){let $=globalThis.__gemiDevQueue;if(!$)return;if(globalThis.__gemiDevQueue=void 0,$.stop(),Z.bound(U))Z.make(U).start()}class bZ extends K{register(){this.app.singleton(h,()=>new h(this.app.config.get("auth",{})))}}var gZ=100,vZ=(Z)=>Math.min(gZ,Math.floor(Z/10));class mZ extends K{register(){this.app.singleton(A,()=>new A(I(c(),this.app.config.get("schedule",{}))))}async boot(){let Z=this.app.make(A),$=this.app.config.get("schedule",{});if($.jobs===void 0){let{jobsDir:H}=I(c(),$);Z.useJobs(await VZ(H))}if(process.env.GEMI_NO_SCHEDULE==="1")return;let G=this.app;if(G.bound(Q))Z.useLocks(()=>G.make(Q));Z.start((H)=>zZ.run(G,H))}async shutdown(Z){if(!this.app.resolved(A))return;let $=this.app.make(A);if($.running>0)console.log(`[gemi] Shutting down: waiting for ${$.running} running cron tick(s).`);let G=Z?.timeoutMs,{unfinished:H}=await $.drain(G===void 0?1/0:Math.max(0,G-vZ(G)));if(H.length>0)return console.error("[gemi] Cron jobs still running at shutdown: "+H.map((W)=>`${W.name} (started ${W.startedAt.toISOString()})`).join(", ")),{abandoned:!0}}}class F extends IZ{modelName;constructor(Z="FeatureFlag"){super();this.modelName=Z}get available(){return KZ(this.modelName)}async load(){if(!this.available)throw new u(this.modelName);let Z=p(this.modelName);return await Z.asSystem(()=>Z.findMany())}async write(Z,$,G){if(!this.available)throw new u(this.modelName);let H=p(this.modelName),W=this.hasActorColumn(H),X={active:$};if(W)X.updatedBy=G.actor;return await H.asSystem(()=>H.upsert({where:{key:Z},create:{key:Z,...X},update:X})),{actorRecorded:W}}hasActorColumn(Z){let $=Z?.$schema?.fields?.updatedBy;return $!==void 0&&$.type==="String"}}function g3(Z){return Z}function UZ(){return{features:void 0,enabled:!0,source:new F,model:"FeatureFlag",ttl:30,context:void 0,onEvaluate:void 0,maxClientFlags:200}}class hZ extends K{register(){this.app.singleton(j,()=>{let Z=this.app.config.get("features",{}),$=I(UZ(),Z);if(Z?.model!==void 0&&Z?.source===void 0)$.source=new F(Z.model);else if(Z?.model!==void 0&&Z.source instanceof F&&Z.source.modelName!==Z.model)k.warning(`app/config/features.ts sets \`model: "${Z.model}"\` and a source reading "${Z.source.modelName}". The source wins; drop \`model\` to silence this.`);return new j($,(G)=>k.warning(G))})}async boot(){let Z=this.app.make(j);if(!Z.config.enabled)return;try{await Z.refresh()}catch($){k.error(`Could not warm the feature flag cache at boot. ${$ instanceof Error?$.message:String($)}`)}}}class cZ extends K{register(){this.app.singleton(d,()=>new d(this.app.config.get("mail",{})))}}function pZ(Z){return`listener:${Z}`}function CZ(Z,$){uZ(Z);let{maxAttempts:G,backoff:H,worker:W}=$,X=Z.event.name,Y=class extends JZ{maxAttempts=G;backoff=H;worker=W;async run(...z){let[C,B]=dZ(z),J=M(x).rehydrate(C,B);await new Z().handle(J)}onFail(z){console.error(`The listener ${Z.name} threw while handling ${X} off the queue. The queue will retry it up to ${G} times in total; nothing the dispatcher did is waiting on it.`,z)}onDeadletter(z){console.error(`The listener ${Z.name} failed every one of its ${G} attempts at ${X} and has been dead-lettered, so this side effect did not happen and will not be retried.`,z)}};return Object.defineProperty(Y,"name",{value:pZ(Z.name),writable:!0}),Y}function uZ(Z){if(Object.getOwnPropertyDescriptor(Z,"name")?.writable)return;throw Error(`The listener ${Z.name} sets \`queued = true\` but does not declare \`static name\`, so it would be registered with the queue `+"under its class name \u2014 which a production build renames while the "+`payload that names it does not. Add: static name = "${Z.name}";`)}function dZ(Z){return typeof Z[0]==="string"?Z:Z[0]}class x{static token="events";listeners={};events={};warnedFor=new Set;warnedAboutWaiting=new Set;config;constructor(Z={}){this.config=I(y(),Z),this.useListeners(this.config.listeners)}useListeners(Z){this.config.listeners=Z,this.listeners={},this.events={};let $=new Set;for(let G of Z){if(!G.event){console.error(`Listener ${G.name} does not declare \`static event\`, so there is no event name to register it under and its handle will never run. Add: static event = SomeEvent;`);continue}if($.has(G.name)){console.error(`Two event listeners are named "${G.name}" \u2014 the first is `+"registered and this one is not. A listener's name identifies it across the framework, so only one class can hold it. Rename one.");continue}$.add(G.name);let H=G.event.name,W=new G;this.events[H]??=G.event,(this.listeners[H]??=[]).push({listener:G,job:W.queued?CZ(G,W):null})}}get queuedListenerJobs(){return Object.values(this.listeners).flat().flatMap(({job:Z})=>Z?[Z]:[])}get registeredListeners(){return[...this.config.listeners]}dispatch(Z,$){if(this.deferToCommit(Z,$,!1))return;this.runListeners(Z,$)}async dispatchAndWait(Z,$){if(this.deferToCommit(Z,$,!0))return;return this.runListeners(Z,$)}deferToCommit(Z,$,G){let{name:H,afterCommit:W}=Z.constructor;if(!W)return!1;let X=BZ(()=>this.runListeners(Z,$));if(X&&G)this.warnNothingIsWaitedFor(H);return X}async runListeners(Z,$){let G=Z.constructor.name,H=this.listeners[G];if(!H?.length){this.warnNothingIsListening(G);return}for(let{listener:W,job:X}of H){if(X){this.enqueue(X,W,G,$);continue}try{await new W().handle(Z)}catch(Y){console.error(`The listener ${W.name} threw while handling ${G}. The `+"listeners after it still ran \u2014 a listener's failure is its own.",Y)}}}rehydrate(Z,$=[]){let G=this.events[Z];if(!G)throw Error(`Cannot rebuild the event "${Z}" that came off the queue: no registered listener binds to an event of that name, so there is no class to construct. A queued listener runs in an application that `+"discovered its own listeners \u2014 check that this process sees the "+`same app/listeners as the one that dispatched, and that the event declares \`static name = "${Z}"\`.`);return new G(...$)}enqueue(Z,$,G,H){if(H===void 0){console.error(`The listener ${$.name} is queued, but ${G} reached the dispatcher without its constructor arguments, so there is nothing for the queue to rebuild it from and the listener was skipped. Dispatch through ${G}.dispatch(...) or ${G}.dispatchAndWait(...), which carry them.`);return}let W=(X)=>console.error(`The listener ${$.name} could not be queued for ${G}, so it did not run and will not be retried. The listeners after it still ran.`,X);try{M(U).push(Z,JSON.stringify([G,H]),{reportFailure:!1}).catch(W)}catch(X){W(X)}}warnNothingIsWaitedFor(Z){if(Bun.env.NODE_ENV==="production")return;if(this.warnedAboutWaiting.has(Z))return;this.warnedAboutWaiting.add(Z),console.warn(`[gemi] ${Z}.dispatchAndWait() was called inside a transaction and ${Z} declares \`static afterCommit = true\`, so it resolved `+"immediately with no listener having run \u2014 they run when the "+"transaction commits. Await the transaction instead, or drop afterCommit if the caller needs the side effects first. Development only.")}warnNothingIsListening(Z){if(Bun.env.NODE_ENV==="production")return;if(this.warnedFor.has(Z))return;this.warnedFor.add(Z),console.warn(`[gemi] ${Z} was dispatched and nothing is listening for it. A listener registers under the name its event declares, so check that app/listeners holds a Listener with \`static event = ${Z}\` and that ${Z} declares \`static name = "${Z}"\`. Development only.`)}}class lZ extends K{register(){this.app.singleton(x,()=>new x(this.app.config.get("events",{})))}async boot(){let Z=this.app.make(x),$=this.app.config.get("events",{});if($.listeners===void 0){let{listenersDir:W}=I(y(),$);Z.useListeners(await qZ(W))}let G=Z.queuedListenerJobs;if(G.length===0)return;let H=this.app.make(U);for(let W of G)H.registerJob(W)}}class iZ extends K{register(){this.app.singleton(l,()=>new l(this.app.config.get("filesystem",{})))}}class sZ extends K{register(){this.app.singleton(i,()=>new i(this.app.config.get("image",{})))}}class nZ extends K{register(){this.app.instance(s,new s)}}function F4(Z){return Z}function PZ(){return{maxFileSize:10485760,onLogFileClosed:()=>{},onLogCreated:()=>{}}}class tZ extends K{register(){this.app.singleton(w,()=>new w(I(PZ(),this.app.config.get("log",{}))))}async boot(){if(!process.env.ROOT_DIR)return;await this.app.make(w).boot()}}class oZ extends K{register(){this.app.singleton(f,()=>new f(I(OZ(),this.app.config.get("middleware",{}))))}boot(){this.app.make(f).assertGlobalMiddleware()}}function b4(Z){return Z}function NZ(){return{driver:new _Z,limit:1000,window:60}}class rZ extends K{register(){this.app.singleton(n,()=>new n(I(NZ(),this.app.config.get("ratelimiter",{}))))}}function u4(Z){return Z}function QZ(){return{url:process.env.REDIS_URL,options:void 0}}class aZ extends K{register(){this.app.singleton(T,()=>new T(I(QZ(),this.app.config.get("redis",{}))))}shutdown(){if(!this.app.resolved(T))return;this.app.make(T).close()}}class q extends SZ{status;constructor(Z,$){super(Z);this.status=$;this.name="McpToolError"}}var eZ=/^[A-Za-z0-9_-]{1,64}$/,Z3=/:([A-Za-z_][A-Za-z0-9_]*)([?*+]?)/g,AZ=4000,t=1e5,$3=/^(text\/|application\/([\w.+-]*\+)?(json|xml))/i;class E{dispatcher;static token="router.mcp";plans=new Map;constructor(Z,$){this.dispatcher=$;for(let[G,H]of Object.entries(Z.routes??{}))this.plans.set(G,this.plan(G,H))}list(Z,$){return xZ(Z),this.descriptors($)}descriptors(Z){let $=[];for(let{descriptor:G}of this.plans.values()){if(Z?.names&&!Z.names.includes(G.name))continue;if(Z?.tags&&!G.tags.some((H)=>Z.tags.includes(H)))continue;$.push(G)}return $}async execute(Z,$,G,H){xZ(Z);let W=this.plans.get($);if(!W)throw Error(`McpRegistry: there is no tool named "${$}".`);let{descriptor:X}=W,Y=X.inputSchema.safeParse(G);if(Y.ok===!1)throw new q(`Invalid arguments for "${$}": ${Y.errors.join(", ")}`);let z=Y.value,C=await this.fillPath(W,z,Z.req),{path:B}=this.dispatcher.getRouteHandlerAndParams(new Request(`http://gemi.internal/api${C}`));if(B!==X.url)throw new q(`"${$}" has nothing at ${C}.`,404);let J={};for(let N of W.jsonKeys)if(z[N]!==void 0)J[N]=z[N];let P,O="";if(W.fileFields.length>0)P=await this.formData(W,z,J,H);else if(X.method==="GET")O=X3(J);else if(W.jsonKeys.length>0)P=J;let L;try{L=await this.dispatcher.dispatchAs(Z.req,X.method,O?`${C}?${O}`:C,P)}catch(N){throw console.error(`[gemi/mcp] Dispatching "${$}" failed:`,N),new q(`"${$}" failed on the server.`,500)}return await Y3($,L)}plan(Z,$){if(!eZ.test(Z))throw Error(`McpRouter: "${Z}" is not a valid tool name. A routes key is the tool's name as a model and an MCP client see it, used verbatim \u2014 letters, digits, "_" and "-", at most 64.`);let G=`McpRouter: "${Z}" (${$?.method} ${$?.url})`;if(!($ instanceof Object)||$.__internal_brand!=="McpRoute")throw Error(`McpRouter: "${Z}" is not a route. Declare it with this.fromApiRoute(...).`);let{method:H,url:W,meta:X}=$;if(W.startsWith("/__gemi__"))throw Error(`${G} is a framework route, not an app route.`);let Y=this.dispatcher.flatRoutes[W]?.[H];if(!Y)throw Error(`${G} names no route of this app. Expose a route by the path and verb it is mounted at.`);let z=[...W.matchAll(Z3)].map(([,V,_])=>({name:V,modifier:_})),C=X.params??{};for(let V of z)if(!(V.name in C))throw Error(`${G}: the path param "${V.name}" must be bound or declared "input".`);for(let[V,_]of Object.entries(C)){if(!z.some((D)=>D.name===V))throw Error(`${G}: "${V}" in params is not a param of the url.`);FZ(G,`params.${V}`,_)}let B=[],J;if(X.input){if(J=X.input.toJSONSchema(),J.type!=="object"||!J.properties)throw Error(`${G}: input must be an s.object(...), the fields of the request body.`);B=Object.keys(J.properties)}let P=Object.entries(X.files??{}).map(([V,_])=>({name:V,binder:_}));for(let V of P)FZ(G,`files.${V.name}`,V.binder);if(P.length>0&&H==="GET")throw Error(`${G}: a GET has no body to carry a file.`);let O={},L=new Map;for(let V of z){let _=C[V.name];if(_==="input"){let D=b.string().describe(`The ":${V.name}" segment of the url.`);O[V.name]=V.modifier==="?"||V.modifier==="*"?D.optional():D}else L.set(V.name,_)}for(let V of P)if(V.binder==="input")O[V.name]=b.string().describe("The id of an attachment the user uploaded or a tool produced (gemi_att_\u2026), whose file is sent as this field.");let N=[...Object.keys(O),...P.map((V)=>V.name)];for(let V of new Set(N))if(B.includes(V))throw Error(`${G}: "${V}" is both an input field and a param or file, and the model can only send one.`);return{descriptor:Object.freeze({name:Z,description:X.description,method:H,url:W,inputSchema:W3(X.input,J,b.object(O)),annotations:G3(H),tags:Object.freeze([...X.tags??[]]),requiresApproval:X.requiresApproval===!0,...Y.source?{source:Y.source}:{}}),params:z,paramBinders:L,fileFields:P,jsonKeys:B}}async fillPath(Z,$,G){let H=Z.descriptor.url;for(let W of Z.params){let X=Z.paramBinders.get(W.name),Y;if(X){if(Y=await this.bind(Z,`the param "${W.name}"`,()=>X(G)),Y===void 0||Y===null||Y==="")throw console.error(`[gemi/mcp] The binder for "${W.name}" of "${Z.descriptor.name}" returned ${JSON.stringify(Y)}.`),new q(`"${Z.descriptor.name}" failed on the server.`,500)}else Y=$[W.name];let z=`:${W.name}${W.modifier}`;if(Y===void 0||Y===null||Y===""){if(W.modifier!=="?"&&W.modifier!=="*")throw new q(`"${W.name}" of "${Z.descriptor.name}" must not be empty.`);H=H.replace(`/${z}`,"");continue}H=H.replace(z,H3(Z.descriptor.name,W,String(Y)))}return H}async formData(Z,$,G,H){let W=Z.descriptor.name;if(!H)throw Error(`McpRegistry: "${W}" sends a file, which is resolved through the tool context's attachments, and none was passed to execute().`);let X=new FormData;for(let[Y,z]of Object.entries(G))LZ(X,Y,z);for(let Y of Z.fileFields){let z=Y.binder==="input"?$[Y.name]:await this.bind(Z,`the file "${Y.name}"`,()=>Y.binder(H));if(typeof z!=="string"||z==="")throw new q(`"${W}" needs a file for "${Y.name}", and this turn has none. Ask the user to attach one.`);X.append(Y.name,await H.attachments.file(z))}return X}async bind(Z,$,G){try{return await G()}catch(H){throw console.error(`[gemi/mcp] Binding ${$} of "${Z.descriptor.name}" failed:`,H),new q(`"${Z.descriptor.name}" failed on the server.`,500)}}}function xZ(Z){if(Z?.kind!=="local")throw Error("McpRegistry: only local callers are implemented. A remote caller needs a bearer-token resolver, which v1 does not have \u2014 and until it does there is no remote surface to call from.")}function FZ(Z,$,G){if(G!=="input"&&typeof G!=="function")throw Error(`${Z}: ${$} must be a function or "input".`)}function G3(Z){switch(Z){case"GET":return Object.freeze({readOnlyHint:!0});case"DELETE":return Object.freeze({destructiveHint:!0});case"PUT":return Object.freeze({idempotentHint:!0});default:return Object.freeze({})}}function W3(Z,$,G){let H=G.toJSONSchema(),W={...$??{},type:"object",properties:{...$?.properties??{},...H.properties},required:[...$?.required??[],...H.required??[]],additionalProperties:!1},X=(Y)=>{if(typeof Y!=="object"||Y===null||Array.isArray(Y))return{ok:!1,errors:["expected an object"]};let z=[],C={};if(Z){let J=Z.safeParse(Y);if(J.ok===!1)z.push(...J.errors);else C={...J.value}}let B=G.safeParse(Y);if(B.ok===!1)z.push(...B.errors);else C={...C,...B.value};return z.length>0?{ok:!1,errors:z}:{ok:!0,value:C}};return{toJSONSchema:()=>W,safeParse:X,parse(Y){let z=X(Y);if(z.ok===!1)throw Error(z.errors.join(", "));return z.value}}}function H3(Z,$,G){let H=$.modifier==="*"||$.modifier==="+"?G.split("/"):[G];if(H.some((W)=>W==="."||W===".."))throw new q(`"${G}" is not a valid value for "${$.name}" of "${Z}".`);return H.map(encodeURIComponent).join("/")}function LZ(Z,$,G){if(G===void 0||G===null)return;if(Array.isArray(G)){for(let H of G)LZ(Z,$,H);return}Z.append($,typeof G==="object"?JSON.stringify(G):String(G))}function X3(Z){let $=new URLSearchParams,G=(H,W)=>{if(W===void 0||W===null)return;if(Array.isArray(W)){for(let X of W)G(H,X);return}$.append(H,typeof W==="object"?JSON.stringify(W):String(W))};for(let[H,W]of Object.entries(Z))G(H,W);return $.toString()}async function Y3(Z,$){if($.status>=200&&$.status<300){let H=$.headers.get("Content-Type");if(H&&!$3.test(H)){let X=(await $.arrayBuffer()).byteLength;return`"${Z}" answered with ${X} bytes of ${H}, which is not shown.`}let W=await $.text();if(W==="")return null;if(W.length>t)return`${W.slice(0,t)}\u2026 [cut at ${t} of ${W.length} characters]`;try{return JSON.parse(W)}catch{return W}}let G=await $.text();if($.status>=400&&$.status<500){let H=G.length>AZ?`${G.slice(0,AZ)}\u2026`:G;throw new q(`"${Z}" was refused with ${$.status}${H?`: ${H}`:"."}`,$.status)}if($.status<500)console.error(`[gemi/mcp] "${Z}" answered ${$.status}${$.headers.get("Location")?` to ${$.headers.get("Location")}`:""}, which a tool call cannot follow.`);throw new q(`"${Z}" failed on the server.`,$.status)}function g(Z,$){let G=Z.get($);if(!G)throw Error(`Missing "${$}" configuration. Route dispatching needs a root router \u2014 declare it in "app/config/route.ts".`);return G}class z3 extends K{register(){this.app.singleton(S,()=>new S(g(this.app.config,"route.api"))),this.app.singleton(R,()=>new R(g(this.app.config,"route.view"))),this.app.singleton(v,()=>new v({api:this.app.make(S),view:this.app.make(R)},{api:g(this.app.config,"route.api"),view:g(this.app.config,"route.view"),domains:this.app.config.get("route.domains")})),this.app.singleton(E,()=>{let Z=this.app.config.get("route.mcp");if(!Z?.router)throw Error('No MCP router is configured. Declare one as `mcp: { router }` in "app/config/route.ts".');return new E(new Z.router,this.app.make(S))})}boot(){if(this.app.make(S),this.app.make(R),this.app.make(v),this.app.config.get("route.mcp"))this.app.make(E)}}
+export{A as Za,MZ as _a,Q3 as $a,bZ as ab,mZ as bb,F as cb,g3 as db,UZ as eb,hZ as fb,cZ as gb,x as hb,lZ as ib,iZ as jb,sZ as kb,nZ as lb,F4 as mb,PZ as nb,tZ as ob,oZ as pb,b4 as qb,NZ as rb,rZ as sb,u4 as tb,QZ as ub,aZ as vb,q as wb,E as xb,z3 as yb};
+
+//# debugId=5C2B7BF63F34934E64756E2164756E21

package/dist/{chunk-svzdv2rf.js.map → chunk-bk4f99s4.js.map}

@@ -2,10 +2,10 @@
   "version": 3,
   "sources": ["../services/cron/Scheduler.ts", "../services/queue/QueueServiceProvider.ts", "../auth/AuthServiceProvider.ts", "../services/cron/ScheduleServiceProvider.ts", "../services/features/sources/DatabaseFeatureFlagSource.ts", "../services/features/config.ts", "../services/features/FeaturesServiceProvider.ts", "../services/email/MailServiceProvider.ts", "../services/events/listenerJob.ts", "../services/events/EventManager.ts", "../services/events/EventServiceProvider.ts", "../services/file-storage/FilesystemServiceProvider.ts", "../services/image-optimization/ImageServiceProvider.ts", "../services/kernel-id/KernelIdServiceProvider.ts", "../services/logging/config.ts", "../services/logging/LogServiceProvider.ts", "../services/middleware/MiddlewareServiceProvider.ts", "../services/rate-limiter/config.ts", "../services/rate-limiter/RateLimiterServiceProvider.ts", "../services/redis/config.ts", "../services/redis/RedisServiceProvider.ts", "../services/mcp/McpRegistry.ts", "../services/router/RouteServiceProvider.ts"],
   "sourcesContent": [
-    "import type { CronJob } from \"./CronJob\";\nimport type { ScheduleConfig } from \"./config\";\n\n// The handle the in-process `Bun.cron(schedule, callback)` overload returns\n// (has `.stop()`). `ReturnType<typeof Bun.cron>` can't be used — it resolves to\n// the module-path overload's `Promise<void>` instead.\ntype BunCronHandle = Bun.CronJob;\n\n// Runs a tick inside whatever async context the framework needs, so a job body\n// can resolve services exactly like a request handler can.\nexport type ScheduleRunner = <T>(cb: () => T | Promise<T>) => Promise<T> | T;\n\ndeclare global {\n  // Registered cron jobs keyed by name, kept on `globalThis` so it survives\n  // `bun --hot` reloads. Re-registering a name stops the previous schedule\n  // first, so a reload *updates* the job in place instead of stacking a\n  // duplicate. (Bun also stops all in-process cron jobs before re-evaluating on\n  // hot reload; this makes the intent explicit and covers any re-construction.)\n  var __gemiCronJobs: Map<string, BunCronHandle> | undefined;\n}\n\n/**\n * One tick of one job: the gate, then the three hooks in order.\n *\n * Named and exported rather than left inline in `start()` because otherwise the\n * only way to reach it is to wait — the tightest schedule `Bun.cron` accepts is\n * once a minute, which is not a thing a test can honestly sit through. What a\n * caller gives up by calling this directly is Bun's clock; what it keeps is\n * everything the scheduler puts between the clock and the job, which is the\n * part that has behaviour.\n *\n * The three hooks each catch and log, so one throwing does not stop the next —\n * `onComplete` in particular runs whether `callback` returned or threw, closer\n * to a `finally` than to a success handler.\n */\nexport async function runTick(job: CronJob): Promise<void> {\n  try {\n    // Plain truthiness, not `!== false`. The sloppy gate an app writes is\n    // `if (!isProduction) return false;`, which returns `undefined` on the path\n    // that was meant to run — and between the two readings of that, the one\n    // that skips a recurring tick is recoverable and the one that mails a\n    // customer from a developer's laptop is not. The declared return type makes\n    // that method a compile error anyway, so the type system catches it while\n    // it is still being written and the runtime stays on the safe side.\n    if (!(await job.shouldRun.call(job))) {\n      return;\n    }\n  } catch (error) {\n    // Fail closed, for the same reason. A gate that throws has told us nothing\n    // about whether the job may run, and the framework already refuses to\n    // schedule a job whose name or expression it cannot read rather than run\n    // something half-declared. The throw is logged, so this is loud; the missed\n    // tick comes back on the next one.\n    console.error(\n      `Error evaluating shouldRun for cron job ${job.name}:`,\n      error,\n    );\n    return;\n  }\n\n  try {\n    await job.onTick.call(job);\n  } catch (error) {\n    console.error(`Error executing cron job ${job.name}:`, error);\n  }\n  try {\n    await job.callback.call(job);\n  } catch (error) {\n    console.error(`Error in cron job ${job.name}:`, error);\n  }\n  try {\n    await job.onComplete.call(job);\n  } catch (error) {\n    console.error(`Error completing cron job ${job.name}:`, error);\n  }\n}\n\n/** A tick `drain` could not wait out. */\nexport interface UnfinishedTick {\n  /** The job's `name`. */\n  name: string;\n  /**\n   * When this tick started. A job whose tick outlasts its own interval has\n   * two ticks running at once, and the name alone would list it twice with\n   * nothing to tell the two apart.\n   */\n  startedAt: Date;\n}\n\n/** What `drain` could not wait out. */\nexport interface ScheduleDrainResult {\n  /**\n   * Ticks still running when the timeout elapsed. They keep running — a tick\n   * has no way to be told to stop — until they finish or the process exits.\n   */\n  unfinished: UnfinishedTick[];\n}\n\nexport class Scheduler {\n  static token = \"scheduler\";\n\n  private handles: BunCronHandle[] = [];\n  private resolved: Array<new () => CronJob>;\n\n  /**\n   * Every tick this scheduler has started and not seen settle, keyed by an\n   * object of its own so two overlapping ticks of one job are two entries.\n   * Without this there is nothing for a shutdown to wait on, and a tick the\n   * process exits under is cut off halfway through its `callback`.\n   */\n  private readonly inFlight = new Map<object, { tick: UnfinishedTick; done: Promise<unknown> }>();\n\n  /**\n   * Set by `stop()`, cleared by `start()`. `handle.stop()` is what keeps Bun\n   * from firing again, and this is the second lock on the same door: a\n   * callback Bun had already dispatched when `stop()` ran, or a handle some\n   * other scheduler left in the hot-reload registry, still finds nothing to\n   * start once the drain has begun.\n   */\n  private stopped = false;\n\n  constructor(config: Required<ScheduleConfig>) {\n    this.resolved = config.jobs;\n  }\n\n  /**\n   * The jobs this scheduler will run, or ran — declared in the config slice or\n   * discovered under `app/cron`, whichever the slice asked for.\n   *\n   * #323 turned an application's schedule from an array it could import into a\n   * directory it cannot, and an app that had a test walking that array —\n   * asserting every report has an owner, that no two share an expression — was\n   * about to lose it. This is where that test goes instead, and it is the\n   * better question anyway: the config slice says what was asked for, this says\n   * what the scheduler took.\n   *\n   * It lists what `start()` iterates, not what `Bun.cron` accepted. A job with\n   * no name, no expression, or a name another job already claimed is logged and\n   * skipped, and still appears here — a test walking this should see the\n   * problem rather than have it tidied away.\n   *\n   * A copy, so that walk cannot edit the set the scheduler is running from.\n   */\n  get jobs(): ReadonlyArray<new () => CronJob> {\n    return [...this.resolved];\n  }\n\n  /**\n   * Replaces the job set, for the provider to hand over what it found under\n   * `app/cron` before it calls `start()`.\n   *\n   * The scheduler is constructed in `register()`, where reading a directory and\n   * importing what is in it is not allowed to happen — that phase is\n   * synchronous and resolves nothing. So it is built from whatever the slice\n   * declared and corrected in `boot()`, one line before it starts. Calling this\n   * after `start()` changes what `jobs` reports and nothing else; the schedules\n   * are already registered.\n   */\n  useJobs(jobs: Array<new () => CronJob>) {\n    this.resolved = jobs;\n  }\n\n  /**\n   * Schedules every configured job. Called from `ScheduleServiceProvider.boot()`\n   * — never from the constructor — so a job body may resolve any service the\n   * container holds by the time it first ticks. That ordering is what replaced\n   * the old `kernel.waitForBoot()` handshake.\n   */\n  start(run: ScheduleRunner = (cb) => cb()) {\n    this.stopped = false;\n    if (this.resolved.length === 0) {\n      return;\n    }\n\n    const registry = (globalThis.__gemiCronJobs ??= new Map());\n\n    // Names claimed during *this* pass, which is a different question from what\n    // `registry` holds. `registry` spans hot reloads and is supposed to already\n    // contain the previous reload's handle under the same name; this starts\n    // empty every time and is how a name claimed twice in one schedule is told\n    // apart from the same job coming back after an edit.\n    const claimed = new Map<string, string>();\n\n    for (const Job of this.resolved) {\n      const job = new Job();\n      if (!job.name) {\n        // Named by its class, because under discovery nobody wrote this job\n        // down anywhere and `JSON.stringify(job)` on a nameless one prints\n        // `{}`. The overwhelmingly common cause is the second sentence: a\n        // shared base class sitting in the walked directory. `abstract` is\n        // erased before this code runs, so there is nothing here that could\n        // tell a base class from a job — only the message can.\n        console.error(\n          `Cron job must have a name — ${Job.name || \"an anonymous class\"} ` +\n            `has none, so it is not scheduled. If this is a base class that ` +\n            `other jobs extend, move it out of the discovered directory: ` +\n            `\\`abstract\\` does not survive to runtime, so a class under ` +\n            `app/cron is indistinguishable from a job.`,\n        );\n        continue;\n      }\n      if (!job.cron) {\n        console.error(`Cron job must have an expression. Job: ${job.name}`);\n        continue;\n      }\n      const taken = claimed.get(job.name);\n      if (taken !== undefined) {\n        // Refusing the second one, rather than letting it through to the\n        // `registry.get(...).stop()` below — which is what used to happen, and\n        // it stopped the *first* job's schedule while leaving both classes in\n        // `jobs`. That is the failure #323 exists to remove wearing a disguise:\n        // a report that silently stops arriving, and a test walking `jobs` that\n        // sees two healthy entries and passes.\n        console.error(\n          `Two cron jobs claim the name \"${job.name}\" — ${taken} is ` +\n            `scheduled and ${Job.name || \"an anonymous class\"} is not. A name ` +\n            `is the scheduler's key, so only one job can hold it. Rename one.`,\n        );\n        continue;\n      }\n      claimed.set(job.name, Job.name || \"an anonymous class\");\n\n      // Update in place: stop any schedule previously registered under this name\n      // before re-registering, so a hot reload replaces rather than duplicates.\n      registry.get(job.name)?.stop();\n\n      // Inside `run`, gate included: a `shouldRun` that resolves a service to\n      // decide is the ordinary case, and evaluating it out here would leave it\n      // without the application context every other line of the tick has.\n      const handle = Bun.cron(job.cron, () => {\n        if (this.stopped) return;\n        return this.track(job.name, () => run(() => runTick(job)));\n      });\n\n      registry.set(job.name, handle);\n      this.handles.push(handle);\n    }\n  }\n\n  /**\n   * Stops every schedule, so no new tick starts. A tick already running is\n   * left alone — `drain` is how to wait for it.\n   */\n  stop() {\n    this.stopped = true;\n    for (const handle of this.handles) {\n      handle.stop();\n    }\n    this.handles = [];\n  }\n\n  /**\n   * Stops every schedule, waits up to `timeoutMs` for the ticks already\n   * running, and reports the ones that did not finish.\n   *\n   * Stopping comes first, so a tick that falls due while this waits does not\n   * start: a drain that kept the clock running would never be sure it had\n   * waited for everything. Nothing is cancelled — a job has no way to be told\n   * — so an unfinished tick keeps running after this resolves, until it ends\n   * or the process does.\n   *\n   * A later `start()` schedules again.\n   */\n  async drain(timeoutMs = Infinity): Promise<ScheduleDrainResult> {\n    this.stop();\n\n    let timer: ReturnType<typeof setTimeout> | undefined;\n    const deadline = new Promise<void>((resolve) => {\n      if (timeoutMs !== Infinity) timer = setTimeout(resolve, timeoutMs);\n    });\n    await Promise.race([\n      Promise.allSettled([...this.inFlight.values()].map((e) => e.done)),\n      deadline,\n    ]);\n    clearTimeout(timer);\n\n    return {\n      unfinished: [...this.inFlight.values()].map((e) => ({ ...e.tick })),\n    };\n  }\n\n  /** How many ticks this scheduler is running right now. */\n  get running(): number {\n    return this.inFlight.size;\n  }\n\n  private track(name: string, tick: () => unknown): Promise<unknown> {\n    const key = {};\n    // `Promise.resolve().then(...)` rather than calling `tick` directly, so a\n    // runner that throws synchronously lands in the same promise as one that\n    // rejects, and the entry below is removed either way.\n    const done = Promise.resolve()\n      .then(tick)\n      .finally(() => this.inFlight.delete(key));\n    this.inFlight.set(key, { tick: { name, startedAt: new Date() }, done });\n    return done;\n  }\n}\n",
-    "import { isMainThread } from \"node:worker_threads\";\n\nimport type { Application } from \"../../foundation/Application\";\nimport { ServiceProvider } from \"../../support/ServiceProvider\";\nimport { discoverJobs } from \"../discovery\";\nimport { withDefaults } from \"../../support/withDefaults\";\nimport { queueConfigDefaults, type QueueConfig } from \"./config\";\nimport { MemoryQueueDriver } from \"./MemoryQueueDriver\";\nimport {\n  claimingTurnedOff,\n  claimsInThisProcess,\n  isQueueWorker,\n  QueueManager,\n} from \"./QueueManager\";\n\n/**\n * How far inside the provider deadline the drain stops, so there is time left\n * to write the list of jobs it abandoned before `Application` stops waiting\n * for this provider and the process exits. A tenth of the budget, capped, so\n * that a deadline of a few milliseconds still spends most of itself waiting\n * rather than handing the whole of it to the margin.\n */\nconst REPORT_MARGIN_MS = 100;\n\nconst reportMargin = (timeoutMs: number) =>\n  Math.min(REPORT_MARGIN_MS, Math.floor(timeoutMs / 10));\n\nexport class QueueServiceProvider extends ServiceProvider {\n  register() {\n    this.app.singleton(\n      QueueManager,\n      () =>\n        new QueueManager(this.app.config.get<QueueConfig>(\"queue\", {}), {\n          application: this.app,\n        }),\n    );\n  }\n\n  /**\n   * Fills in the job registry when the app did not declare one.\n   *\n   * ### Why the raw slice and not the manager's config\n   *\n   * The decision here is whether the app said anything, and by the time the\n   * manager holds a config it can no longer tell: `withDefaults` treats an\n   * absent key and an `undefined` one alike and substitutes the default `[]`,\n   * which is the same value an app writes when it means \"no jobs, and I mean\n   * it\". Reading the slice before defaults are applied is the only place the\n   * difference still exists.\n   *\n   * So: `jobs` present, including `jobs: []`, is used verbatim and no directory\n   * is read. Absent or `undefined`, the classes under `jobsDir` are.\n   *\n   * ### Why phase two\n   *\n   * Discovery imports every file it walks, which is asynchronous, and\n   * `register()` is not. It also has to happen before the first dispatch rather\n   * than before the first tick — there is no equivalent of the scheduler's\n   * `start()` to hang it off, so the registry has to be complete by the end of\n   * boot.\n   */\n  async boot() {\n    const slice = this.app.config.get<QueueConfig>(\"queue\", {});\n    if (slice.jobs !== undefined) return;\n\n    const { jobsDir } = withDefaults(queueConfigDefaults(), slice);\n    this.app.make(QueueManager).useJobs(await discoverJobs(jobsDir));\n  }\n\n  /**\n   * Stops claiming and waits for the jobs this process is running, on the way\n   * out of a server told to stop. Runs after the request drain, and before the\n   * database provider's, so the jobs still have their connection.\n   *\n   * A job still running at the deadline is abandoned with the process. With\n   * the memory driver that job is lost; with one that outlives the process it\n   * is claimed again elsewhere once its lease runs out. With such a driver\n   * claiming already stopped when the signal arrived, so the jobs here are\n   * only the ones that were running then; the memory driver kept claiming\n   * until now, so a job dispatched by a request still draining ran here too.\n   *\n   * The drain is bounded by a little less than what is left of the shared\n   * provider deadline, so that this is the thing that names the jobs it gave\n   * up on. Draining without a timeout of its own read better but could not\n   * work: `drain()` then resolves only once every job has finished, by which\n   * point nothing is unfinished and the list below is always empty — and the\n   * operator who needed it got `Application`'s generic \"did not finish within\n   * the provider shutdown deadline\" instead, which names no job at all.   *\n   * A drain that left jobs running resolves `{ abandoned: true }`, so\n   * `Application` reports this provider in `timedOut` and the process exits 1:\n   * the jobs are named in the log, and the exit code shows the stop was not\n   * clean (#580).\n   */\n  async shutdown(options?: { timeoutMs: number }) {\n    // Resolving the manager now would build a driver only to stop it.\n    if (!this.app.resolved(QueueManager)) return;\n    const queue = this.app.make(QueueManager);\n    if (queue.running > 0) {\n      console.log(\n        `[gemi] Shutting down: waiting for ${queue.running} running queued job(s).`,\n      );\n    }\n    const budget = options?.timeoutMs;\n    const { unfinished } = await queue.drain(\n      budget === undefined ? Infinity : Math.max(0, budget - reportMargin(budget)),\n    );\n    if (unfinished.length > 0) {\n      console.error(\n        `[gemi] Queued jobs still running at shutdown: ` +\n          unfinished.map((job) => `${job.name} (${job.id})`).join(\", \"),\n      );\n      return { abandoned: true };\n    }\n  }\n}\n\n/**\n * Starts claiming once the application has booted, in a production server\n * whose driver keeps jobs outside the process, rather than at its first\n * dispatch. That is the recovery half of a durable driver: the jobs a previous\n * process left behind are claimed by whichever one is up, and a replica that\n * serves no dispatch of its own would otherwise never look.\n *\n * Called by the kernel after every provider has booted, not from `boot()`\n * above: queued listeners are registered as jobs by the event provider, which\n * boots after this one, and a job claimed before its name is registered is\n * dead-lettered for it.\n *\n * Not the memory driver, which never has anything left behind. Not a console\n * command or a migration, which boot the same providers and would claim jobs\n * only to exit under them — `ROOT_DIR` is set by `Server.start()` and the\n * `gemi queue:work` worker alone. Not a server started with\n * `GEMI_QUEUE_CLAIM=off`, which leaves its jobs to workers. Not\n * a `worker` job's thread, which clones the application. And not development,\n * where `bun --hot` boots a fresh application on every save: there the queue\n * starts at the first dispatch, and a reload hands a running loop over — see\n * `takeOverDevQueue`.\n */\nexport function startClaimingIfServing(application: Application) {\n  warnAboutClaimSwitch(application);\n  if (process.env.NODE_ENV !== \"production\") return takeOverDevQueue(application);\n  if (configuresMemory(application)) return;\n  if (!claimsInThisProcess()) return;\n  if (!application.bound(QueueManager)) return;\n  application.make(QueueManager).start();\n}\n\nfunction configuresMemory(application: Application) {\n  const driver = application.config.get<QueueConfig>(\"queue\", {}).driver ?? \"memory\";\n  return driver === \"memory\" || driver instanceof MemoryQueueDriver;\n}\n\n/**\n * Whether the queue's jobs live only in this process, for the warning below.\n * The config says so for `\"memory\"` or a `MemoryQueueDriver`, but a factory\n * only says once it has run, so for one the manager is built — which is the\n * same driver `durable` and `push()` go by. A factory that throws here is\n * left to throw at the first dispatch, as it would have without the switch,\n * rather than failing the boot over a warning.\n */\nfunction keepsJobsInProcess(application: Application) {\n  if (configuresMemory(application)) return true;\n  const driver = application.config.get<QueueConfig>(\"queue\", {}).driver;\n  if (typeof driver !== \"function\" || !application.bound(QueueManager)) return false;\n  try {\n    return !application.make(QueueManager).durable;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Says so at boot when a server's `GEMI_QUEUE_CLAIM` will not do what it\n * reads as. Only in a server's main thread: a console command or a `worker`\n * job's thread shares the server's environment and claims nothing anyway.\n *\n * - `off` with the memory driver is ignored, because a memory queue's jobs\n *   exist only in the process that dispatched them. Honoured, it would leave\n *   every dispatch waiting in a `Map` that no worker can see, for good.\n * - Any value but `off` or `on` claims. `false` or `0` read as \"off\" and are\n *   not it, and a web process that quietly keeps claiming is the failure a\n *   deploy that set one would never notice.\n */\nfunction warnAboutClaimSwitch(application: Application) {\n  const value = process.env.GEMI_QUEUE_CLAIM;\n  if (value === undefined || isQueueWorker()) return;\n  if (process.env.ROOT_DIR === undefined || !isMainThread) return;\n  if (claimingTurnedOff()) {\n    if (!keepsJobsInProcess(application)) return;\n    console.warn(\n      `[gemi] GEMI_QUEUE_CLAIM=off is ignored: the memory queue driver keeps ` +\n        `jobs in the process that dispatched them, so no worker could run ` +\n        `them. This server runs its own jobs. Use a driver other processes ` +\n        `can read, such as \"database\", to hand jobs to \\`gemi queue:work\\`.`,\n    );\n  } else if (value.trim().toLowerCase() !== \"on\") {\n    console.warn(\n      `[gemi] GEMI_QUEUE_CLAIM=\"${value}\" is not \"off\" or \"on\", so this ` +\n        `server claims jobs. Set it to \"off\" to leave them to \\`gemi queue:work\\`.`,\n    );\n  }\n}\n\n/**\n * Under `gemi dev`, stops the loop the previous application started over a\n * shared driver, and starts this application's in its place.\n *\n * A `bun --hot` reload boots a new application in the same process, and the\n * old application's loop — started lazily by a dispatch — is a live closure\n * that nothing stopped. Over the database driver it went on claiming rows\n * from the table and running them with the code from before the save, and\n * after a few saves several generations of it were doing so side by side.\n *\n * Stopped rather than drained: `stop()` claims nothing more and returns, and\n * a job the old loop is running finishes on its old code and reports as\n * usual, where waiting for it would hold up the reload behind a job. Its row\n * stays claimed until then, so the new loop cannot take it twice.\n *\n * The new loop is started only when an old one was running, which keeps the\n * rule that development claims nothing until something is dispatched, while\n * a job waiting out a retry when the file was saved still gets its retry —\n * on the new code, which is the point of the reload. A memory queue is never\n * recorded, so it is never handed over: only its own application feeds it,\n * and stopping it would drop whatever was still waiting there.\n *\n * Runs from every boot. `waitForBoot` twice on one application stops its own\n * loop and starts it again at once, which changes nothing. The `bound` guard\n * is for an application built without the queue provider, which still stops\n * the stale loop.\n */\nfunction takeOverDevQueue(application: Application) {\n  const previous = globalThis.__gemiDevQueue;\n  if (!previous) return;\n  globalThis.__gemiDevQueue = undefined;\n  void previous.stop();\n  if (application.bound(QueueManager)) application.make(QueueManager).start();\n}\n",
+    "import { type HeldLock, LockManager } from \"../lock/LockManager\";\nimport { LockLostError } from \"../lock/LockStore\";\nimport { MemoryLockStore } from \"../lock/MemoryLockStore\";\nimport type { CronJob } from \"./CronJob\";\nimport type { ScheduleConfig } from \"./config\";\n\n// The handle the in-process `Bun.cron(schedule, callback)` overload returns\n// (has `.stop()`). `ReturnType<typeof Bun.cron>` can't be used — it resolves to\n// the module-path overload's `Promise<void>` instead.\ntype BunCronHandle = Bun.CronJob;\n\n// Runs a tick inside whatever async context the framework needs, so a job body\n// can resolve services exactly like a request handler can.\nexport type ScheduleRunner = <T>(cb: () => T | Promise<T>) => Promise<T> | T;\n\ndeclare global {\n  // Registered cron jobs keyed by name, kept on `globalThis` so it survives\n  // `bun --hot` reloads. Re-registering a name stops the previous schedule\n  // first, so a reload *updates* the job in place instead of stacking a\n  // duplicate. (Bun also stops all in-process cron jobs before re-evaluating on\n  // hot reload; this makes the intent explicit and covers any re-construction.)\n  var __gemiCronJobs: Map<string, BunCronHandle> | undefined;\n}\n\n/**\n * One tick of one job: the gate, then the three hooks in order.\n *\n * Named and exported rather than left inline in `start()` because otherwise the\n * only way to reach it is to wait — the tightest schedule `Bun.cron` accepts is\n * once a minute, which is not a thing a test can honestly sit through. What a\n * caller gives up by calling this directly is Bun's clock; what it keeps is\n * everything the scheduler puts between the clock and the job, which is the\n * part that has behaviour.\n *\n * The three hooks each catch and log, so one throwing does not stop the next —\n * `onComplete` in particular runs whether `callback` returned or threw, closer\n * to a `finally` than to a success handler.\n */\nexport async function runTick(job: CronJob, options: TickOptions = {}): Promise<void> {\n  try {\n    // Plain truthiness, not `!== false`. The sloppy gate an app writes is\n    // `if (!isProduction) return false;`, which returns `undefined` on the path\n    // that was meant to run — and between the two readings of that, the one\n    // that skips a recurring tick is recoverable and the one that mails a\n    // customer from a developer's laptop is not. The declared return type makes\n    // that method a compile error anyway, so the type system catches it while\n    // it is still being written and the runtime stays on the safe side.\n    if (!(await job.shouldRun.call(job))) {\n      return;\n    }\n  } catch (error) {\n    // Fail closed, for the same reason. A gate that throws has told us nothing\n    // about whether the job may run, and the framework already refuses to\n    // schedule a job whose name or expression it cannot read rather than run\n    // something half-declared. The throw is logged, so this is loud; the missed\n    // tick comes back on the next one.\n    console.error(\n      `Error evaluating shouldRun for cron job ${job.name}:`,\n      error,\n    );\n    return;\n  }\n\n  const overlap = overlapLease(job.withoutOverlapping);\n  if (!job.onOneServer && overlap === undefined) {\n    await runHooks(job);\n    return;\n  }\n\n  // Fail closed, like the gate: a tick that cannot find out whether it may\n  // run is skipped, and the next one tries again.\n  let locks: LockManager;\n  try {\n    locks = options.locks?.() ?? processLocks();\n    if (job.onOneServer) {\n      const minute = Math.floor((options.now ?? Date.now()) / 60_000);\n      if (!(await locks.store.advance(`gemi:cron-tick:${job.name}`, minute))) return;\n    }\n  } catch (error) {\n    console.error(`Could not claim the tick of cron job ${job.name}; skipped it:`, error);\n    return;\n  }\n  if (overlap === undefined) {\n    await runHooks(job);\n    return;\n  }\n\n  try {\n    await locks.run(`gemi:cron:${job.name}`, { ttl: overlap }, (lock) => runHooks(job, lock));\n  } catch (error) {\n    if (error instanceof LockLostError) {\n      console.error(\n        `Cron job ${job.name} lost its withoutOverlapping lock while running: ` +\n          `another tick may have started alongside it.`,\n        error,\n      );\n    } else {\n      console.error(`Could not take the withoutOverlapping lock of cron job ${job.name}:`, error);\n    }\n  }\n}\n\n/** What `runTick` needs beyond the job. */\nexport interface TickOptions {\n  /**\n   * The locks `withoutOverlapping` and `onOneServer` take. The scheduler\n   * passes the queue's, so they hold across instances sharing its storage;\n   * without one they hold within this process only.\n   */\n  locks?: () => LockManager;\n  /** The tick's time, for `onOneServer`. Default now. */\n  now?: number;\n}\n\nconst DEFAULT_OVERLAP_LEASE = 5 * 60_000;\n\nfunction overlapLease(option: CronJob[\"withoutOverlapping\"]): number | undefined {\n  if (!option) return undefined;\n  if (option === true) return DEFAULT_OVERLAP_LEASE;\n  return option.expiresAfter ?? DEFAULT_OVERLAP_LEASE;\n}\n\nlet fallbackLocks: LockManager | undefined;\nfunction processLocks() {\n  fallbackLocks ??= new LockManager(new MemoryLockStore());\n  return fallbackLocks;\n}\n\nasync function runHooks(job: CronJob, lock?: HeldLock) {\n  try {\n    await job.onTick.call(job);\n  } catch (error) {\n    console.error(`Error executing cron job ${job.name}:`, error);\n  }\n  try {\n    await job.callback.call(job, lock);\n  } catch (error) {\n    console.error(`Error in cron job ${job.name}:`, error);\n  }\n  try {\n    await job.onComplete.call(job);\n  } catch (error) {\n    console.error(`Error completing cron job ${job.name}:`, error);\n  }\n}\n\n/** A tick `drain` could not wait out. */\nexport interface UnfinishedTick {\n  /** The job's `name`. */\n  name: string;\n  /**\n   * When this tick started. A job whose tick outlasts its own interval has\n   * two ticks running at once, and the name alone would list it twice with\n   * nothing to tell the two apart.\n   */\n  startedAt: Date;\n}\n\n/** What `drain` could not wait out. */\nexport interface ScheduleDrainResult {\n  /**\n   * Ticks still running when the timeout elapsed. They keep running — a tick\n   * has no way to be told to stop — until they finish or the process exits.\n   */\n  unfinished: UnfinishedTick[];\n}\n\nexport class Scheduler {\n  static token = \"scheduler\";\n\n  private handles: BunCronHandle[] = [];\n  private resolved: Array<new () => CronJob>;\n\n  /**\n   * Every tick this scheduler has started and not seen settle, keyed by an\n   * object of its own so two overlapping ticks of one job are two entries.\n   * Without this there is nothing for a shutdown to wait on, and a tick the\n   * process exits under is cut off halfway through its `callback`.\n   */\n  private readonly inFlight = new Map<object, { tick: UnfinishedTick; done: Promise<unknown> }>();\n\n  /**\n   * Set by `stop()`, cleared by `start()`. `handle.stop()` is what keeps Bun\n   * from firing again, and this is the second lock on the same door: a\n   * callback Bun had already dispatched when `stop()` ran, or a handle some\n   * other scheduler left in the hot-reload registry, still finds nothing to\n   * start once the drain has begun.\n   */\n  private stopped = false;\n\n  private locks: (() => LockManager) | undefined;\n\n  constructor(config: Required<ScheduleConfig>) {\n    this.resolved = config.jobs;\n  }\n\n  /**\n   * The jobs this scheduler will run, or ran — declared in the config slice or\n   * discovered under `app/cron`, whichever the slice asked for.\n   *\n   * #323 turned an application's schedule from an array it could import into a\n   * directory it cannot, and an app that had a test walking that array —\n   * asserting every report has an owner, that no two share an expression — was\n   * about to lose it. This is where that test goes instead, and it is the\n   * better question anyway: the config slice says what was asked for, this says\n   * what the scheduler took.\n   *\n   * It lists what `start()` iterates, not what `Bun.cron` accepted. A job with\n   * no name, no expression, or a name another job already claimed is logged and\n   * skipped, and still appears here — a test walking this should see the\n   * problem rather than have it tidied away.\n   *\n   * A copy, so that walk cannot edit the set the scheduler is running from.\n   */\n  get jobs(): ReadonlyArray<new () => CronJob> {\n    return [...this.resolved];\n  }\n\n  /**\n   * Replaces the job set, for the provider to hand over what it found under\n   * `app/cron` before it calls `start()`.\n   *\n   * The scheduler is constructed in `register()`, where reading a directory and\n   * importing what is in it is not allowed to happen — that phase is\n   * synchronous and resolves nothing. So it is built from whatever the slice\n   * declared and corrected in `boot()`, one line before it starts. Calling this\n   * after `start()` changes what `jobs` reports and nothing else; the schedules\n   * are already registered.\n   */\n  useJobs(jobs: Array<new () => CronJob>) {\n    this.resolved = jobs;\n  }\n\n  /**\n   * Where `withoutOverlapping` and `onOneServer` take their locks. The\n   * provider hands over the queue's, resolved only when a tick needs them.\n   */\n  useLocks(locks: () => LockManager) {\n    this.locks = locks;\n  }\n\n  /**\n   * Schedules every configured job. Called from `ScheduleServiceProvider.boot()`\n   * — never from the constructor — so a job body may resolve any service the\n   * container holds by the time it first ticks. That ordering is what replaced\n   * the old `kernel.waitForBoot()` handshake.\n   */\n  start(run: ScheduleRunner = (cb) => cb()) {\n    this.stopped = false;\n    if (this.resolved.length === 0) {\n      return;\n    }\n\n    const registry = (globalThis.__gemiCronJobs ??= new Map());\n\n    // Names claimed during *this* pass, which is a different question from what\n    // `registry` holds. `registry` spans hot reloads and is supposed to already\n    // contain the previous reload's handle under the same name; this starts\n    // empty every time and is how a name claimed twice in one schedule is told\n    // apart from the same job coming back after an edit.\n    const claimed = new Map<string, string>();\n\n    for (const Job of this.resolved) {\n      const job = new Job();\n      if (!job.name) {\n        // Named by its class, because under discovery nobody wrote this job\n        // down anywhere and `JSON.stringify(job)` on a nameless one prints\n        // `{}`. The overwhelmingly common cause is the second sentence: a\n        // shared base class sitting in the walked directory. `abstract` is\n        // erased before this code runs, so there is nothing here that could\n        // tell a base class from a job — only the message can.\n        console.error(\n          `Cron job must have a name — ${Job.name || \"an anonymous class\"} ` +\n            `has none, so it is not scheduled. If this is a base class that ` +\n            `other jobs extend, move it out of the discovered directory: ` +\n            `\\`abstract\\` does not survive to runtime, so a class under ` +\n            `app/cron is indistinguishable from a job.`,\n        );\n        continue;\n      }\n      if (!job.cron) {\n        console.error(`Cron job must have an expression. Job: ${job.name}`);\n        continue;\n      }\n      const taken = claimed.get(job.name);\n      if (taken !== undefined) {\n        // Refusing the second one, rather than letting it through to the\n        // `registry.get(...).stop()` below — which is what used to happen, and\n        // it stopped the *first* job's schedule while leaving both classes in\n        // `jobs`. That is the failure #323 exists to remove wearing a disguise:\n        // a report that silently stops arriving, and a test walking `jobs` that\n        // sees two healthy entries and passes.\n        console.error(\n          `Two cron jobs claim the name \"${job.name}\" — ${taken} is ` +\n            `scheduled and ${Job.name || \"an anonymous class\"} is not. A name ` +\n            `is the scheduler's key, so only one job can hold it. Rename one.`,\n        );\n        continue;\n      }\n      claimed.set(job.name, Job.name || \"an anonymous class\");\n\n      // Update in place: stop any schedule previously registered under this name\n      // before re-registering, so a hot reload replaces rather than duplicates.\n      registry.get(job.name)?.stop();\n\n      // Inside `run`, gate included: a `shouldRun` that resolves a service to\n      // decide is the ordinary case, and evaluating it out here would leave it\n      // without the application context every other line of the tick has.\n      const handle = Bun.cron(job.cron, () => {\n        if (this.stopped) return;\n        const locks = this.locks;\n        return this.track(job.name, () => run(() => runTick(job, { locks })));\n      });\n\n      registry.set(job.name, handle);\n      this.handles.push(handle);\n    }\n  }\n\n  /**\n   * Stops every schedule, so no new tick starts. A tick already running is\n   * left alone — `drain` is how to wait for it.\n   */\n  stop() {\n    this.stopped = true;\n    for (const handle of this.handles) {\n      handle.stop();\n    }\n    this.handles = [];\n  }\n\n  /**\n   * Stops every schedule, waits up to `timeoutMs` for the ticks already\n   * running, and reports the ones that did not finish.\n   *\n   * Stopping comes first, so a tick that falls due while this waits does not\n   * start: a drain that kept the clock running would never be sure it had\n   * waited for everything. Nothing is cancelled — a job has no way to be told\n   * — so an unfinished tick keeps running after this resolves, until it ends\n   * or the process does.\n   *\n   * A later `start()` schedules again.\n   */\n  async drain(timeoutMs = Infinity): Promise<ScheduleDrainResult> {\n    this.stop();\n\n    let timer: ReturnType<typeof setTimeout> | undefined;\n    const deadline = new Promise<void>((resolve) => {\n      if (timeoutMs !== Infinity) timer = setTimeout(resolve, timeoutMs);\n    });\n    await Promise.race([\n      Promise.allSettled([...this.inFlight.values()].map((e) => e.done)),\n      deadline,\n    ]);\n    clearTimeout(timer);\n\n    return {\n      unfinished: [...this.inFlight.values()].map((e) => ({ ...e.tick })),\n    };\n  }\n\n  /** How many ticks this scheduler is running right now. */\n  get running(): number {\n    return this.inFlight.size;\n  }\n\n  private track(name: string, tick: () => unknown): Promise<unknown> {\n    const key = {};\n    // `Promise.resolve().then(...)` rather than calling `tick` directly, so a\n    // runner that throws synchronously lands in the same promise as one that\n    // rejects, and the entry below is removed either way.\n    const done = Promise.resolve()\n      .then(tick)\n      .finally(() => this.inFlight.delete(key));\n    this.inFlight.set(key, { tick: { name, startedAt: new Date() }, done });\n    return done;\n  }\n}\n",
+    "import { isMainThread } from \"node:worker_threads\";\n\nimport type { Application } from \"../../foundation/Application\";\nimport { ServiceProvider } from \"../../support/ServiceProvider\";\nimport { discoverJobs } from \"../discovery\";\nimport { withDefaults } from \"../../support/withDefaults\";\nimport { queueConfigDefaults, type QueueConfig } from \"./config\";\nimport { LockManager } from \"../lock/LockManager\";\nimport { MemoryQueueDriver } from \"./MemoryQueueDriver\";\nimport {\n  claimingTurnedOff,\n  claimsInThisProcess,\n  isQueueWorker,\n  QueueManager,\n} from \"./QueueManager\";\n\n/**\n * How far inside the provider deadline the drain stops, so there is time left\n * to write the list of jobs it abandoned before `Application` stops waiting\n * for this provider and the process exits. A tenth of the budget, capped, so\n * that a deadline of a few milliseconds still spends most of itself waiting\n * rather than handing the whole of it to the margin.\n */\nconst REPORT_MARGIN_MS = 100;\n\nconst reportMargin = (timeoutMs: number) =>\n  Math.min(REPORT_MARGIN_MS, Math.floor(timeoutMs / 10));\n\nexport class QueueServiceProvider extends ServiceProvider {\n  register() {\n    this.app.singleton(\n      QueueManager,\n      () =>\n        new QueueManager(this.app.config.get<QueueConfig>(\"queue\", {}), {\n          application: this.app,\n        }),\n    );\n    // The `Lock` facade's binding: the queue's locks, over its storage.\n    this.app.singleton(LockManager, () => this.app.make(QueueManager).locks);\n  }\n\n  /**\n   * Fills in the job registry when the app did not declare one.\n   *\n   * ### Why the raw slice and not the manager's config\n   *\n   * The decision here is whether the app said anything, and by the time the\n   * manager holds a config it can no longer tell: `withDefaults` treats an\n   * absent key and an `undefined` one alike and substitutes the default `[]`,\n   * which is the same value an app writes when it means \"no jobs, and I mean\n   * it\". Reading the slice before defaults are applied is the only place the\n   * difference still exists.\n   *\n   * So: `jobs` present, including `jobs: []`, is used verbatim and no directory\n   * is read. Absent or `undefined`, the classes under `jobsDir` are.\n   *\n   * ### Why phase two\n   *\n   * Discovery imports every file it walks, which is asynchronous, and\n   * `register()` is not. It also has to happen before the first dispatch rather\n   * than before the first tick — there is no equivalent of the scheduler's\n   * `start()` to hang it off, so the registry has to be complete by the end of\n   * boot.\n   */\n  async boot() {\n    const slice = this.app.config.get<QueueConfig>(\"queue\", {});\n    if (slice.jobs !== undefined) return;\n\n    const { jobsDir } = withDefaults(queueConfigDefaults(), slice);\n    this.app.make(QueueManager).useJobs(await discoverJobs(jobsDir));\n  }\n\n  /**\n   * Stops claiming and waits for the jobs this process is running, on the way\n   * out of a server told to stop. Runs after the request drain, and before the\n   * database provider's, so the jobs still have their connection.\n   *\n   * A job still running at the deadline is abandoned with the process. With\n   * the memory driver that job is lost; with one that outlives the process it\n   * is claimed again elsewhere once its lease runs out. With such a driver\n   * claiming already stopped when the signal arrived, so the jobs here are\n   * only the ones that were running then; the memory driver kept claiming\n   * until now, so a job dispatched by a request still draining ran here too.\n   *\n   * The drain is bounded by a little less than what is left of the shared\n   * provider deadline, so that this is the thing that names the jobs it gave\n   * up on. Draining without a timeout of its own read better but could not\n   * work: `drain()` then resolves only once every job has finished, by which\n   * point nothing is unfinished and the list below is always empty — and the\n   * operator who needed it got `Application`'s generic \"did not finish within\n   * the provider shutdown deadline\" instead, which names no job at all.   *\n   * A drain that left jobs running resolves `{ abandoned: true }`, so\n   * `Application` reports this provider in `timedOut` and the process exits 1:\n   * the jobs are named in the log, and the exit code shows the stop was not\n   * clean (#580).\n   */\n  async shutdown(options?: { timeoutMs: number }) {\n    // Resolving the manager now would build a driver only to stop it.\n    if (!this.app.resolved(QueueManager)) return;\n    const queue = this.app.make(QueueManager);\n    if (queue.running > 0) {\n      console.log(\n        `[gemi] Shutting down: waiting for ${queue.running} running queued job(s).`,\n      );\n    }\n    const budget = options?.timeoutMs;\n    const { unfinished } = await queue.drain(\n      budget === undefined ? Infinity : Math.max(0, budget - reportMargin(budget)),\n    );\n    if (unfinished.length > 0) {\n      console.error(\n        `[gemi] Queued jobs still running at shutdown: ` +\n          unfinished.map((job) => `${job.name} (${job.id})`).join(\", \"),\n      );\n      return { abandoned: true };\n    }\n  }\n}\n\n/**\n * Starts claiming once the application has booted, in a production server\n * whose driver keeps jobs outside the process, rather than at its first\n * dispatch. That is the recovery half of a durable driver: the jobs a previous\n * process left behind are claimed by whichever one is up, and a replica that\n * serves no dispatch of its own would otherwise never look.\n *\n * Called by the kernel after every provider has booted, not from `boot()`\n * above: queued listeners are registered as jobs by the event provider, which\n * boots after this one, and a job claimed before its name is registered is\n * dead-lettered for it.\n *\n * Not the memory driver, which never has anything left behind. Not a console\n * command or a migration, which boot the same providers and would claim jobs\n * only to exit under them — `ROOT_DIR` is set by `Server.start()` and the\n * `gemi queue:work` worker alone. Not a server started with\n * `GEMI_QUEUE_CLAIM=off`, which leaves its jobs to workers. Not\n * a `worker` job's thread, which clones the application. And not development,\n * where `bun --hot` boots a fresh application on every save: there the queue\n * starts at the first dispatch, and a reload hands a running loop over — see\n * `takeOverDevQueue`.\n */\nexport function startClaimingIfServing(application: Application) {\n  warnAboutClaimSwitch(application);\n  if (process.env.NODE_ENV !== \"production\") return takeOverDevQueue(application);\n  if (configuresMemory(application)) return;\n  if (!claimsInThisProcess()) return;\n  if (!application.bound(QueueManager)) return;\n  application.make(QueueManager).start();\n}\n\nfunction configuresMemory(application: Application) {\n  const driver = application.config.get<QueueConfig>(\"queue\", {}).driver ?? \"memory\";\n  return driver === \"memory\" || driver instanceof MemoryQueueDriver;\n}\n\n/**\n * Whether the queue's jobs live only in this process, for the warning below.\n * The config says so for `\"memory\"` or a `MemoryQueueDriver`, but a factory\n * only says once it has run, so for one the manager is built — which is the\n * same driver `durable` and `push()` go by. A factory that throws here is\n * left to throw at the first dispatch, as it would have without the switch,\n * rather than failing the boot over a warning.\n */\nfunction keepsJobsInProcess(application: Application) {\n  if (configuresMemory(application)) return true;\n  const driver = application.config.get<QueueConfig>(\"queue\", {}).driver;\n  if (typeof driver !== \"function\" || !application.bound(QueueManager)) return false;\n  try {\n    return !application.make(QueueManager).durable;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Says so at boot when a server's `GEMI_QUEUE_CLAIM` will not do what it\n * reads as. Only in a server's main thread: a console command or a `worker`\n * job's thread shares the server's environment and claims nothing anyway.\n *\n * - `off` with the memory driver is ignored, because a memory queue's jobs\n *   exist only in the process that dispatched them. Honoured, it would leave\n *   every dispatch waiting in a `Map` that no worker can see, for good.\n * - Any value but `off` or `on` claims. `false` or `0` read as \"off\" and are\n *   not it, and a web process that quietly keeps claiming is the failure a\n *   deploy that set one would never notice.\n */\nfunction warnAboutClaimSwitch(application: Application) {\n  const value = process.env.GEMI_QUEUE_CLAIM;\n  if (value === undefined || isQueueWorker()) return;\n  if (process.env.ROOT_DIR === undefined || !isMainThread) return;\n  if (claimingTurnedOff()) {\n    if (!keepsJobsInProcess(application)) return;\n    console.warn(\n      `[gemi] GEMI_QUEUE_CLAIM=off is ignored: the memory queue driver keeps ` +\n        `jobs in the process that dispatched them, so no worker could run ` +\n        `them. This server runs its own jobs. Use a driver other processes ` +\n        `can read, such as \"database\", to hand jobs to \\`gemi queue:work\\`.`,\n    );\n  } else if (value.trim().toLowerCase() !== \"on\") {\n    console.warn(\n      `[gemi] GEMI_QUEUE_CLAIM=\"${value}\" is not \"off\" or \"on\", so this ` +\n        `server claims jobs. Set it to \"off\" to leave them to \\`gemi queue:work\\`.`,\n    );\n  }\n}\n\n/**\n * Under `gemi dev`, stops the loop the previous application started over a\n * shared driver, and starts this application's in its place.\n *\n * A `bun --hot` reload boots a new application in the same process, and the\n * old application's loop — started lazily by a dispatch — is a live closure\n * that nothing stopped. Over the database driver it went on claiming rows\n * from the table and running them with the code from before the save, and\n * after a few saves several generations of it were doing so side by side.\n *\n * Stopped rather than drained: `stop()` claims nothing more and returns, and\n * a job the old loop is running finishes on its old code and reports as\n * usual, where waiting for it would hold up the reload behind a job. Its row\n * stays claimed until then, so the new loop cannot take it twice.\n *\n * The new loop is started only when an old one was running, which keeps the\n * rule that development claims nothing until something is dispatched, while\n * a job waiting out a retry when the file was saved still gets its retry —\n * on the new code, which is the point of the reload. A memory queue is never\n * recorded, so it is never handed over: only its own application feeds it,\n * and stopping it would drop whatever was still waiting there.\n *\n * Runs from every boot. `waitForBoot` twice on one application stops its own\n * loop and starts it again at once, which changes nothing. The `bound` guard\n * is for an application built without the queue provider, which still stops\n * the stale loop.\n */\nfunction takeOverDevQueue(application: Application) {\n  const previous = globalThis.__gemiDevQueue;\n  if (!previous) return;\n  globalThis.__gemiDevQueue = undefined;\n  void previous.stop();\n  if (application.bound(QueueManager)) application.make(QueueManager).start();\n}\n",
     "import { ServiceProvider } from \"../support/ServiceProvider\";\nimport type { AuthConfig } from \"./config\";\nimport { AuthManager } from \"./AuthManager\";\n\nexport class AuthServiceProvider extends ServiceProvider {\n  register() {\n    this.app.singleton(\n      AuthManager,\n      () => new AuthManager(this.app.config.get<AuthConfig>(\"auth\", {})),\n    );\n  }\n}\n",
-    "import { kernelContext } from \"../../kernel/context\";\nimport { ServiceProvider } from \"../../support/ServiceProvider\";\nimport { withDefaults } from \"../../support/withDefaults\";\nimport { discoverCronJobs } from \"../discovery\";\nimport { scheduleConfigDefaults, type ScheduleConfig } from \"./config\";\nimport { Scheduler } from \"./Scheduler\";\n\n/**\n * How far inside the provider deadline the drain stops, so there is time left\n * to name the ticks it abandoned before `Application` stops waiting for this\n * provider. The same margin as the queue's drain, for the same reason: a\n * tenth of the budget, capped, so a deadline of a few milliseconds still\n * spends most of itself waiting.\n */\nconst REPORT_MARGIN_MS = 100;\n\nconst reportMargin = (timeoutMs: number) => Math.min(REPORT_MARGIN_MS, Math.floor(timeoutMs / 10));\n\nexport class ScheduleServiceProvider extends ServiceProvider {\n  register() {\n    this.app.singleton(\n      Scheduler,\n      () =>\n        new Scheduler(\n          withDefaults(\n            scheduleConfigDefaults(),\n            this.app.config.get<ScheduleConfig>(\"schedule\", {}),\n          ),\n        ),\n    );\n  }\n\n  /**\n   * Resolves the schedule, then starts it.\n   *\n   * Cron jobs are scheduled in phase two, not in `register()`: a job body is\n   * free to resolve any service, and by the time `boot()` runs every provider\n   * has registered. Each tick re-enters the application context so the job sees\n   * the same container a request handler would.\n   *\n   * ### Why the raw slice and not the scheduler's config\n   *\n   * The decision here is whether the app said anything, and by the time the\n   * scheduler holds a config it can no longer tell: `withDefaults` treats an\n   * absent key and an `undefined` one alike and substitutes the default `[]`,\n   * which is the same value an app writes when it means \"nothing scheduled, and\n   * I mean it\". Reading the slice before defaults are applied is the only place\n   * that difference still exists.\n   *\n   * So: `jobs` present, including `jobs: []`, is used verbatim and no directory\n   * is read. Absent or `undefined` — which includes an app with no `schedule`\n   * slice at all — the classes under `jobsDir` are, which is the case #323 is\n   * about: a cron job that is written and never listed fires never, and nothing\n   * downstream is waiting to notice.\n   */\n  async boot() {\n    const scheduler = this.app.make(Scheduler);\n    const slice = this.app.config.get<ScheduleConfig>(\"schedule\", {});\n\n    if (slice.jobs === undefined) {\n      const { jobsDir } = withDefaults(scheduleConfigDefaults(), slice);\n      scheduler.useJobs(await discoverCronJobs(jobsDir));\n    }\n\n    // Resolved, listed, and not started.\n    //\n    // `gemi run` sets this on the process it spawns. Booting the application is\n    // how a console command reaches the container, and starting the schedule is\n    // a side effect of that which nobody asked for: a `gemi run backfill` that\n    // takes four minutes would otherwise fire the application's whole cron\n    // schedule in a process no operator is watching, and `Bun.cron` handles hold\n    // the loop open besides.\n    //\n    // Deliberately above `start` and below `useJobs`, so `app(Scheduler).jobs`\n    // still answers honestly — a command that wants to fire a tick by hand can,\n    // and a test asking what this application schedules gets the same answer\n    // either way.\n    //\n    // An environment variable rather than a config field, because this is a\n    // property of *this process* and not of the application: the same variable\n    // is how a deploy runs one cron dyno beside several web ones, and a config\n    // slice would have to know which command started it.\n    if (process.env.GEMI_NO_SCHEDULE === \"1\") return;\n\n    const app = this.app;\n    scheduler.start((cb) => kernelContext.run(app, cb));\n  }\n\n  /**\n   * Stops the schedule and waits for the ticks already running, on the way out\n   * of a server told to stop.\n   *\n   * Stopping first is the point. Without it `Bun.cron` kept firing for the\n   * whole drain window, starting ticks the process was about to exit under,\n   * and a tick already running when the process exited was cut off halfway\n   * through its `callback` — on a platform that recycles replicas on every\n   * release, that is every release.\n   *\n   * The wait is bounded a little inside what is left of the shared provider\n   * deadline, like the queue's, so that this is what names the ticks it gave\n   * up on rather than `Application`'s generic \"did not finish within the\n   * provider shutdown deadline\", which names no job at all.   *\n   * Ticks left running resolve `{ abandoned: true }`, so `Application`\n   * reports this provider in `timedOut` and the process exits 1, as it does\n   * for a queued job cut off at the deadline (#580).\n   */\n  async shutdown(options?: { timeoutMs: number }) {\n    // `boot()` always resolves it; this is for an application that shuts down\n    // without having booted, where building a scheduler would be pointless.\n    if (!this.app.resolved(Scheduler)) return;\n    const scheduler = this.app.make(Scheduler);\n    if (scheduler.running > 0) {\n      console.log(`[gemi] Shutting down: waiting for ${scheduler.running} running cron tick(s).`);\n    }\n    const budget = options?.timeoutMs;\n    const { unfinished } = await scheduler.drain(\n      budget === undefined ? Infinity : Math.max(0, budget - reportMargin(budget)),\n    );\n    if (unfinished.length > 0) {\n      console.error(\n        `[gemi] Cron jobs still running at shutdown: ` +\n          unfinished\n            .map((tick) => `${tick.name} (started ${tick.startedAt.toISOString()})`)\n            .join(\", \"),\n      );\n      return { abandoned: true };\n    }\n  }\n}\n",
+    "import { kernelContext } from \"../../kernel/context\";\nimport { LockManager } from \"../lock/LockManager\";\nimport { ServiceProvider } from \"../../support/ServiceProvider\";\nimport { withDefaults } from \"../../support/withDefaults\";\nimport { discoverCronJobs } from \"../discovery\";\nimport { scheduleConfigDefaults, type ScheduleConfig } from \"./config\";\nimport { Scheduler } from \"./Scheduler\";\n\n/**\n * How far inside the provider deadline the drain stops, so there is time left\n * to name the ticks it abandoned before `Application` stops waiting for this\n * provider. The same margin as the queue's drain, for the same reason: a\n * tenth of the budget, capped, so a deadline of a few milliseconds still\n * spends most of itself waiting.\n */\nconst REPORT_MARGIN_MS = 100;\n\nconst reportMargin = (timeoutMs: number) => Math.min(REPORT_MARGIN_MS, Math.floor(timeoutMs / 10));\n\nexport class ScheduleServiceProvider extends ServiceProvider {\n  register() {\n    this.app.singleton(\n      Scheduler,\n      () =>\n        new Scheduler(\n          withDefaults(\n            scheduleConfigDefaults(),\n            this.app.config.get<ScheduleConfig>(\"schedule\", {}),\n          ),\n        ),\n    );\n  }\n\n  /**\n   * Resolves the schedule, then starts it.\n   *\n   * Cron jobs are scheduled in phase two, not in `register()`: a job body is\n   * free to resolve any service, and by the time `boot()` runs every provider\n   * has registered. Each tick re-enters the application context so the job sees\n   * the same container a request handler would.\n   *\n   * ### Why the raw slice and not the scheduler's config\n   *\n   * The decision here is whether the app said anything, and by the time the\n   * scheduler holds a config it can no longer tell: `withDefaults` treats an\n   * absent key and an `undefined` one alike and substitutes the default `[]`,\n   * which is the same value an app writes when it means \"nothing scheduled, and\n   * I mean it\". Reading the slice before defaults are applied is the only place\n   * that difference still exists.\n   *\n   * So: `jobs` present, including `jobs: []`, is used verbatim and no directory\n   * is read. Absent or `undefined` — which includes an app with no `schedule`\n   * slice at all — the classes under `jobsDir` are, which is the case #323 is\n   * about: a cron job that is written and never listed fires never, and nothing\n   * downstream is waiting to notice.\n   */\n  async boot() {\n    const scheduler = this.app.make(Scheduler);\n    const slice = this.app.config.get<ScheduleConfig>(\"schedule\", {});\n\n    if (slice.jobs === undefined) {\n      const { jobsDir } = withDefaults(scheduleConfigDefaults(), slice);\n      scheduler.useJobs(await discoverCronJobs(jobsDir));\n    }\n\n    // Resolved, listed, and not started.\n    //\n    // `gemi run` sets this on the process it spawns. Booting the application is\n    // how a console command reaches the container, and starting the schedule is\n    // a side effect of that which nobody asked for: a `gemi run backfill` that\n    // takes four minutes would otherwise fire the application's whole cron\n    // schedule in a process no operator is watching, and `Bun.cron` handles hold\n    // the loop open besides.\n    //\n    // Deliberately above `start` and below `useJobs`, so `app(Scheduler).jobs`\n    // still answers honestly — a command that wants to fire a tick by hand can,\n    // and a test asking what this application schedules gets the same answer\n    // either way.\n    //\n    // An environment variable rather than a config field, because this is a\n    // property of *this process* and not of the application: the same variable\n    // is how a deploy runs one cron dyno beside several web ones, and a config\n    // slice would have to know which command started it.\n    if (process.env.GEMI_NO_SCHEDULE === \"1\") return;\n\n    const app = this.app;\n    // The queue's locks, so `withoutOverlapping` and `onOneServer` hold across\n    // the instances sharing its storage. Resolved per tick that asks.\n    if (app.bound(LockManager)) scheduler.useLocks(() => app.make(LockManager));\n    scheduler.start((cb) => kernelContext.run(app, cb));\n  }\n\n  /**\n   * Stops the schedule and waits for the ticks already running, on the way out\n   * of a server told to stop.\n   *\n   * Stopping first is the point. Without it `Bun.cron` kept firing for the\n   * whole drain window, starting ticks the process was about to exit under,\n   * and a tick already running when the process exited was cut off halfway\n   * through its `callback` — on a platform that recycles replicas on every\n   * release, that is every release.\n   *\n   * The wait is bounded a little inside what is left of the shared provider\n   * deadline, like the queue's, so that this is what names the ticks it gave\n   * up on rather than `Application`'s generic \"did not finish within the\n   * provider shutdown deadline\", which names no job at all.   *\n   * Ticks left running resolve `{ abandoned: true }`, so `Application`\n   * reports this provider in `timedOut` and the process exits 1, as it does\n   * for a queued job cut off at the deadline (#580).\n   */\n  async shutdown(options?: { timeoutMs: number }) {\n    // `boot()` always resolves it; this is for an application that shuts down\n    // without having booted, where building a scheduler would be pointless.\n    if (!this.app.resolved(Scheduler)) return;\n    const scheduler = this.app.make(Scheduler);\n    if (scheduler.running > 0) {\n      console.log(`[gemi] Shutting down: waiting for ${scheduler.running} running cron tick(s).`);\n    }\n    const budget = options?.timeoutMs;\n    const { unfinished } = await scheduler.drain(\n      budget === undefined ? Infinity : Math.max(0, budget - reportMargin(budget)),\n    );\n    if (unfinished.length > 0) {\n      console.error(\n        `[gemi] Cron jobs still running at shutdown: ` +\n          unfinished\n            .map((tick) => `${tick.name} (started ${tick.startedAt.toISOString()})`)\n            .join(\", \"),\n      );\n      return { abandoned: true };\n    }\n  }\n}\n",
     "import * as registry from \"../../../orm/registry\";\nimport {\n  FeatureFlagSource,\n  FeatureModelMissingError,\n  type FeatureWriteMeta,\n  type FeatureWriteResult,\n} from \"./FeatureFlagSource\";\n\n/**\n * Reads the application's `FeatureFlag` table — one row per feature, carrying\n * one meaningful column.\n *\n * The model is resolved from the ORM registry **by name, at call time**, the way\n * `auth/UserProvider` resolves `User`. The framework cannot import a class the\n * application generates, and resolving lazily also means constructing this\n * source does not require the app's models to have been imported yet — only\n * loading does.\n */\nexport class DatabaseFeatureFlagSource extends FeatureFlagSource {\n  constructor(readonly modelName: string = \"FeatureFlag\") {\n    super();\n  }\n\n  /** Whether the application has registered the model at all. */\n  get available(): boolean {\n    return registry.has(this.modelName);\n  }\n\n  async load(): Promise<Record<string, unknown>[]> {\n    if (!this.available) {\n      throw new FeatureModelMissingError(this.modelName);\n    }\n\n    const model = registry.get<any>(this.modelName);\n\n    // `asSystem` for the same reason auth uses it: features are read before\n    // there is a user — on an anonymous page load, in a cron tick — and a policy\n    // that denies by default would turn \"nobody is signed in\" into \"no rows\",\n    // which silently switches every feature off for logged-out traffic.\n    return await model.asSystem(() => model.findMany());\n  }\n\n  /**\n   * Upserts the row for `key`.\n   *\n   * `upsert`, not `update`: a feature that has been deployed but never switched\n   * on has no row at all, and that is exactly the state an admin screen exists\n   * to change.\n   *\n   * The actor goes into an `updatedBy` column **when the model has one**, and is\n   * otherwise not recorded. The column is optional so that adding `Features.set`\n   * did not become a migration every app owes. When it exists it is always\n   * written — `null` for a write with no actor — because leaving the previous\n   * value in place would credit the last named person with a change they did\n   * not make.\n   */\n  async write(key: string, active: boolean, meta: FeatureWriteMeta): Promise<FeatureWriteResult> {\n    if (!this.available) {\n      throw new FeatureModelMissingError(this.modelName);\n    }\n\n    const model = registry.get<any>(this.modelName);\n    const actorRecorded = this.hasActorColumn(model);\n    const data: Record<string, unknown> = { active };\n    if (actorRecorded) data.updatedBy = meta.actor;\n\n    // `asSystem` for the same reason `load()` uses it: the table is global\n    // configuration, and a policy that denied the write would leave the admin\n    // with an error about tenancy on a row that has none.\n    await model.asSystem(() =>\n      model.upsert({\n        where: { key },\n        create: { key, ...data },\n        update: data,\n      }),\n    );\n\n    return { actorRecorded };\n  }\n\n  private hasActorColumn(model: any): boolean {\n    const field = model?.$schema?.fields?.updatedBy;\n    return field !== undefined && field.type === \"String\";\n  }\n}\n",
     "import type { HttpRequest } from \"../../http/HttpRequest\";\nimport type { FeatureRegistry } from \"./defineFeature\";\nimport { DatabaseFeatureFlagSource } from \"./sources/DatabaseFeatureFlagSource\";\nimport type { FeatureFlagSource } from \"./sources/FeatureFlagSource\";\nimport type { FeatureContext, FeatureEvaluation } from \"./types\";\n\n// Config key: `features`. Derived from `FeaturesServiceProvider`.\nexport interface FeaturesConfig {\n  /**\n   * The application's declarations — the default export of\n   * `app/features/index.ts`.\n   *\n   * Named here as well as in the framework's `gemi.d.ts` because the two layers\n   * cannot share one reference: the type augmentation resolves `@/app/features`\n   * through the app's tsconfig paths, which exists only at compile time. This is\n   * the runtime half. They should point at the same object.\n   */\n  features?: FeatureRegistry;\n\n  /**\n   * Master switch. `false` skips loading and evaluation entirely: every feature\n   * reads off and the SSR payload carries `{}`.\n   */\n  enabled?: boolean;\n\n  /** Where the on/off switches come from. The database by default. */\n  source?: FeatureFlagSource;\n\n  /** ORM registry name of the model, when using the database source. */\n  model?: string;\n\n  /**\n   * Snapshot lifetime in **seconds**.\n   *\n   * This is the propagation delay: switching a feature on or off is live on\n   * every instance within this window. Lower it if that matters more than the\n   * query volume — there is no cross-instance invalidation.\n   */\n  ttl?: number;\n\n  /**\n   * Extra attributes for every evaluation — country, cohort, build, plan.\n   * Reachable in a `when` as `ctx.attributes`.\n   *\n   * Runs on every request inside the render path, so keep it cheap and free of\n   * I/O. If it throws, evaluation degrades to no attributes rather than failing\n   * the page.\n   */\n  context?: (req: HttpRequest | null) => Record<string, unknown> | Promise<Record<string, unknown>>;\n\n  /**\n   * Called once per key per request after evaluation — the hook an analytics or\n   * experiment pipeline reads exposures from. Errors are caught and logged.\n   */\n  onEvaluate?: (key: string, evaluation: FeatureEvaluation, ctx: FeatureContext) => void;\n\n  /** Warn once per boot above this many client-visible features. */\n  maxClientFlags?: number;\n}\n\nexport function defineFeaturesConfig(config: FeaturesConfig): FeaturesConfig {\n  return config;\n}\n\nexport function featuresConfigDefaults(): Required<\n  Omit<FeaturesConfig, \"features\" | \"context\" | \"onEvaluate\">\n> & {\n  features: FeaturesConfig[\"features\"];\n  context: FeaturesConfig[\"context\"];\n  onEvaluate: FeaturesConfig[\"onEvaluate\"];\n} {\n  return {\n    features: undefined,\n    enabled: true,\n    source: new DatabaseFeatureFlagSource(),\n    model: \"FeatureFlag\",\n    ttl: 30,\n    context: undefined,\n    onEvaluate: undefined,\n    maxClientFlags: 200,\n  };\n}\n\nexport type ResolvedFeaturesConfig = ReturnType<typeof featuresConfigDefaults>;\n",
     "import { Log } from \"../../facades/Log\";\nimport { ServiceProvider } from \"../../support/ServiceProvider\";\nimport { withDefaults } from \"../../support/withDefaults\";\nimport { featuresConfigDefaults, type FeaturesConfig } from \"./config\";\nimport { FeatureManager } from \"./FeatureManager\";\nimport { DatabaseFeatureFlagSource } from \"./sources/DatabaseFeatureFlagSource\";\n\nexport class FeaturesServiceProvider extends ServiceProvider {\n  register() {\n    this.app.singleton(FeatureManager, () => {\n      const declared = this.app.config.get<FeaturesConfig>(\"features\", {});\n      const config = withDefaults(featuresConfigDefaults(), declared);\n\n      // The default source is constructed by `featuresConfigDefaults()` with the\n      // default model name, so a `model` override would otherwise be ignored\n      // unless the app also replaced the source. Rebuild it here instead of\n      // making every app that renames the table also know about the source.\n      //\n      // Keyed on what the *application* wrote, not on the merged values. The\n      // merged `model` is always set — it defaults to `\"FeatureFlag\"` — so\n      // comparing it against the source's name would fire for an app that\n      // configured only `source: new DatabaseFeatureFlagSource(\"Flags\")`,\n      // throwing that source away and pointing the replacement at a table the\n      // app never mentioned. Every feature would then read off with nothing to\n      // explain why.\n      //\n      // An explicit `source` always wins: it is the more specific statement, and\n      // it is the only one of the two that can name something other than the\n      // local table.\n      if (declared?.model !== undefined && declared?.source === undefined) {\n        config.source = new DatabaseFeatureFlagSource(declared.model);\n      } else if (\n        declared?.model !== undefined &&\n        declared.source instanceof DatabaseFeatureFlagSource &&\n        declared.source.modelName !== declared.model\n      ) {\n        Log.warning(\n          `app/config/features.ts sets \\`model: \"${declared.model}\"\\` and a source reading \"${declared.source.modelName}\". The source wins; drop \\`model\\` to silence this.`,\n        );\n      }\n\n      return new FeatureManager(config, (message) => Log.warning(message));\n    });\n  }\n\n  async boot() {\n    const features = this.app.make(FeatureManager);\n    if (!features.config.enabled) return;\n\n    // Warmed at boot so the first request is served from memory rather than\n    // paying for the cold load. Wrapped because a database that is not up yet\n    // must not fail the boot — the store fails closed, every feature reads off,\n    // and it recovers on its own once the next TTL elapses.\n    try {\n      await features.refresh();\n    } catch (error) {\n      Log.error(\n        `Could not warm the feature flag cache at boot. ${\n          error instanceof Error ? error.message : String(error)\n        }`,\n      );\n    }\n  }\n}\n",
@@ -26,7 +26,7 @@
     "import type { ToolContext } from \"../../ai/Agent\";\nimport { ToolError } from \"../../ai/redact\";\nimport { s, type AnySchema, type JSONSchema, type Schema } from \"../../ai/Schema\";\nimport type { RouteSource } from \"../../http/ApiRouter\";\nimport type { HttpRequest } from \"../../http/HttpRequest\";\nimport type {\n  McpFileBinder,\n  McpMethod,\n  McpParamBinder,\n  McpRouteDeclaration,\n  McpRouter,\n} from \"../../http/McpRouter\";\nimport type { ApiRouteDispatcher } from \"../router/ApiRouteDispatcher\";\n\n/**\n * Who a tool call runs as. Always an argument to the registry, never read from\n * ambient state by it.\n *\n * `local` is an agent running in this server, and `req` is the request that\n * started its run — read by `toAgentTools` at the moment the tool executes,\n * not when the tool was built, which is what lets one set of tools serve every\n * user's run.\n *\n * That producer *does* read ambient state, since a run no longer carries a\n * request (see `AgentContext`), and the boundary is what keeps that from\n * mattering here: the registry is handed a caller and dispatches as that\n * caller, so a second producer — a job, a test, v2's remote client — supplies\n * one however it likes, and a run with no ambient request is refused by\n * `toAgentTools` before the registry is reached rather than dispatching as\n * nobody.\n * The call is dispatched with that request's credentials, so it runs as that\n * user, through that route's middleware.\n *\n * `remote` is v2's MCP client with a bearer token. It is typed so the seam\n * exists and every entry point already takes it; each of them refuses it,\n * because a token resolver is what makes it safe and there is none yet.\n * Reading the caller from `RequestContext` instead would have been shorter,\n * and would have left v2 a registry that only works inside a gemi request.\n */\nexport type McpCaller =\n  | { kind: \"local\"; req: HttpRequest<any, any> }\n  | { kind: \"remote\"; token: string };\n\n/**\n * MCP's tool annotations, from the verb. They drive confirmation prompts in\n * remote clients, which is why they are set now rather than when v2 lands:\n * every app would otherwise have to revisit its MCP file to get them.\n *\n * Only what the verb says is set. POST and PATCH carry nothing, and MCP's\n * defaults for an unannotated tool — not read-only, possibly destructive — are\n * the honest answer for them.\n */\nexport type McpToolAnnotations = {\n  readOnlyHint?: true;\n  destructiveHint?: true;\n  idempotentHint?: true;\n};\n\n/**\n * One tool, described without committing to who consumes it.\n *\n * The registry's native output. An in-process agent projects it to an\n * `AgentTool` (`toAgentTools`); v2's `tools/list` will project it to JSON.\n * Emitting `AgentTool`s here instead would leave v2 reversing JSON Schema back\n * out of them.\n */\nexport interface McpToolDescriptor {\n  /** The `routes` key, verbatim. See `McpRouter`. */\n  readonly name: string;\n  readonly description: string;\n  readonly method: McpMethod;\n  /** The route's path as declared, params unfilled. */\n  readonly url: string;\n  /**\n   * What the model fills in: the declared `input`, plus a string for every\n   * `\"input\"` path param and every `\"input\"` file field. Bound params and\n   * bound files are not in it at all.\n   */\n  readonly inputSchema: Schema<Record<string, unknown>>;\n  readonly annotations: McpToolAnnotations;\n  readonly tags: readonly string[];\n  readonly requiresApproval: boolean;\n  /** The controller method mounted at the route, when there is one (#502). */\n  readonly source?: RouteSource;\n}\n\n/**\n * Narrows `list`. Data rather than a predicate, because v2's per-token\n * visibility will come from a token's grants, which are data. Both fields\n * narrow: `names` keeps only those tools, `tags` keeps tools carrying at least\n * one of them.\n */\nexport type McpToolFilter = {\n  names?: readonly string[];\n  tags?: readonly string[];\n};\n\n/**\n * A failure the model is meant to read: a 4xx from the route, a missing file,\n * a bad argument. v2 turns it into `isError: true` rather than a protocol\n * error. Anything else thrown from `execute` is the caller's mistake or the\n * server's, not the model's.\n */\nexport class McpToolError extends ToolError {\n  constructor(\n    message: string,\n    readonly status?: number,\n  ) {\n    super(message);\n    this.name = \"McpToolError\";\n  }\n}\n\n/** Tool names as OpenAI's function tools and MCP clients both accept them. */\nconst TOOL_NAME = /^[A-Za-z0-9_-]{1,64}$/;\n\n/** `:name`, with URLPattern's modifiers. */\nconst PATH_PARAM = /:([A-Za-z_][A-Za-z0-9_]*)([?*+]?)/g;\n\n/**\n * A 4xx body goes to the model verbatim, so a validation error can be fixed on\n * the next step — but a route that answers a 4xx with a page of HTML should not\n * be able to fill the context window with it.\n */\nconst MAX_ERROR_BODY = 4000;\n\n/**\n * The same limit for a success, set higher: a list route answering every row,\n * or a route serving a large text file, would otherwise land in the context\n * window whole. Past it the model gets the text cut short and told so, rather\n * than an error — the route has already done what it does, and a model told it\n * failed would do it again.\n */\nconst MAX_RESULT_BODY = 100_000;\n\n/** A body a model can read. A missing content-type is read as text. */\nconst READABLE = /^(text\\/|application\\/([\\w.+-]*\\+)?(json|xml))/i;\n\ntype PathParam = { name: string; modifier: string };\n\ntype Plan = {\n  descriptor: McpToolDescriptor;\n  params: PathParam[];\n  paramBinders: Map<string, McpParamBinder>;\n  fileFields: { name: string; binder: McpFileBinder | \"input\" }[];\n  jsonKeys: string[];\n};\n\n/**\n * The tools an app's `McpRouter` declares, resolved against the api route\n * table, and the one place a call to them is dispatched.\n *\n * Built once, at boot, from the dispatcher's flat route table — so a route\n * that was renamed or unmounted fails the boot here, and at compile time\n * before that, rather than the first model that calls it.\n *\n * THE INVARIANT: a tool call can do nothing its caller could not do with a\n * direct HTTP request. `execute` builds a request and hands it to\n * `ApiRouteDispatcher.dispatchAs`, which runs the route's middleware, auth and\n * policies exactly as for a client. It never reaches for a flat entry's\n * `exec`, which is the handler alone — no auth, no policies, no rate limit —\n * and is the shorter path for exactly that reason.\n */\nexport class McpRegistry {\n  static token = \"router.mcp\";\n\n  private readonly plans = new Map<string, Plan>();\n\n  constructor(\n    router: McpRouter<any>,\n    private readonly dispatcher: Pick<\n      ApiRouteDispatcher,\n      \"flatRoutes\" | \"dispatchAs\" | \"getRouteHandlerAndParams\"\n    >,\n  ) {\n    for (const [name, declaration] of Object.entries(router.routes ?? {})) {\n      this.plans.set(name, this.plan(name, declaration));\n    }\n  }\n\n  /**\n   * The tools `caller` may see. v1 has only local callers, and every declared\n   * tool is visible to every one of them; `filter` is taken now so the shape\n   * v2's per-token visibility needs is the shape callers already use.\n   */\n  list(caller: McpCaller, filter?: McpToolFilter): McpToolDescriptor[] {\n    assertLocal(caller);\n    return this.descriptors(filter);\n  }\n\n  /**\n   * The same listing without a caller, for a projection built once before any\n   * caller exists — `toAgentTools`. It is not per-caller visibility, and a v2\n   * remote listing must go through `list`.\n   */\n  descriptors(filter?: McpToolFilter): McpToolDescriptor[] {\n    const out: McpToolDescriptor[] = [];\n    for (const { descriptor } of this.plans.values()) {\n      if (filter?.names && !filter.names.includes(descriptor.name)) continue;\n      if (filter?.tags && !descriptor.tags.some((tag) => filter.tags.includes(tag))) continue;\n      out.push(descriptor);\n    }\n    return out;\n  }\n\n  /**\n   * Calls the tool `name` as `caller`, and answers the route's JSON.\n   *\n   * `ctx` is the tool context of the agent call, and only files need it:\n   * `\"input\"` files resolve through `ctx.attachments`, the handle already\n   * scoped to the caller, and bound files are chosen by a binder given `ctx`.\n   * Nothing here reads an attachment any other way — the store has no\n   * unscoped lookup, and this must not become one.\n   *\n   * A 2xx answers its JSON, or its text, cut at `MAX_RESULT_BODY`; a body\n   * that is neither — a file a route serves — is described, not shown.\n   * A 4xx throws an `McpToolError` carrying the route's body, so a validation\n   * error reaches the model word for word. Anything else, or a route that\n   * throws, throws an `McpToolError` that says only that the server failed.\n   * The app gets the reason in its log, and a stack trace or a database\n   * message is not something to hand a model that may be steered by whoever\n   * wrote the document it is reading.\n   */\n  async execute(\n    caller: McpCaller,\n    name: string,\n    args: unknown,\n    ctx?: ToolContext,\n  ): Promise<unknown> {\n    assertLocal(caller);\n    const plan = this.plans.get(name);\n    if (!plan) {\n      throw new Error(`McpRegistry: there is no tool named \"${name}\".`);\n    }\n    const { descriptor } = plan;\n\n    const parsed = descriptor.inputSchema.safeParse(args);\n    if (parsed.ok === false) {\n      throw new McpToolError(`Invalid arguments for \"${name}\": ${parsed.errors.join(\", \")}`);\n    }\n    const input = parsed.value;\n\n    const path = await this.fillPath(plan, input, caller.req);\n\n    // The dispatcher routes `path` afresh and takes the first route that\n    // matches it, so a model's \"archive-all\" for `/products/:id` would reach a\n    // `/products/archive-all` declared above it — a route the app never\n    // exposed, behind none of this tool's approval or annotations.\n    const { path: matched } = this.dispatcher.getRouteHandlerAndParams(\n      new Request(`http://gemi.internal/api${path}`),\n    );\n    if (matched !== descriptor.url) {\n      throw new McpToolError(`\"${name}\" has nothing at ${path}.`, 404);\n    }\n\n    const json: Record<string, unknown> = {};\n    for (const key of plan.jsonKeys) {\n      if (input[key] !== undefined) json[key] = input[key];\n    }\n\n    let body: FormData | Record<string, unknown> | undefined;\n    let query = \"\";\n    if (plan.fileFields.length > 0) {\n      body = await this.formData(plan, input, json, ctx);\n    } else if (descriptor.method === \"GET\") {\n      query = toQuery(json);\n    } else if (plan.jsonKeys.length > 0) {\n      body = json;\n    }\n\n    let response: Response;\n    try {\n      response = await this.dispatcher.dispatchAs(\n        caller.req,\n        descriptor.method,\n        query ? `${path}?${query}` : path,\n        body,\n      );\n    } catch (error) {\n      // What a client would get as a 500. A handler's throw is logged by the\n      // dispatcher too, but dispatchAs's own refusal of the path is not.\n      console.error(`[gemi/mcp] Dispatching \"${name}\" failed:`, error);\n      throw new McpToolError(`\"${name}\" failed on the server.`, 500);\n    }\n    return await readResponse(name, response);\n  }\n\n  // --- building ------------------------------------------------------------\n\n  private plan(name: string, declaration: McpRouteDeclaration): Plan {\n    if (!TOOL_NAME.test(name)) {\n      throw new Error(\n        `McpRouter: \"${name}\" is not a valid tool name. A routes key is the tool's name as a model and an MCP client see it, used verbatim — letters, digits, \"_\" and \"-\", at most 64.`,\n      );\n    }\n    const where = `McpRouter: \"${name}\" (${declaration?.method} ${declaration?.url})`;\n    if (!(declaration instanceof Object) || declaration.__internal_brand !== \"McpRoute\") {\n      throw new Error(\n        `McpRouter: \"${name}\" is not a route. Declare it with this.fromApiRoute(...).`,\n      );\n    }\n    const { method, url, meta } = declaration;\n    if (url.startsWith(\"/__gemi__\")) {\n      throw new Error(`${where} is a framework route, not an app route.`);\n    }\n\n    const entry = this.dispatcher.flatRoutes[url]?.[method];\n    if (!entry) {\n      throw new Error(\n        `${where} names no route of this app. Expose a route by the path and verb it is mounted at.`,\n      );\n    }\n\n    // Mirrors the compile-time check, for a router written in JavaScript or\n    // behind a cast: a param left undeclared would otherwise be the model's.\n    const params: PathParam[] = [...url.matchAll(PATH_PARAM)].map(([, param, modifier]) => ({\n      name: param,\n      modifier,\n    }));\n    const declared = meta.params ?? {};\n    for (const param of params) {\n      if (!(param.name in declared)) {\n        throw new Error(\n          `${where}: the path param \"${param.name}\" must be bound or declared \"input\".`,\n        );\n      }\n    }\n    for (const [key, binder] of Object.entries(declared)) {\n      if (!params.some((param) => param.name === key)) {\n        throw new Error(`${where}: \"${key}\" in params is not a param of the url.`);\n      }\n      assertBinder(where, `params.${key}`, binder);\n    }\n\n    let jsonKeys: string[] = [];\n    let base: JSONSchema | undefined;\n    if (meta.input) {\n      base = meta.input.toJSONSchema();\n      if (base.type !== \"object\" || !base.properties) {\n        throw new Error(\n          `${where}: input must be an s.object(...), the fields of the request body.`,\n        );\n      }\n      jsonKeys = Object.keys(base.properties);\n    }\n\n    const fileFields = Object.entries(meta.files ?? {}).map(([field, binder]) => ({\n      name: field,\n      binder,\n    }));\n    for (const file of fileFields) {\n      assertBinder(where, `files.${file.name}`, file.binder);\n    }\n    if (fileFields.length > 0 && method === \"GET\") {\n      throw new Error(`${where}: a GET has no body to carry a file.`);\n    }\n\n    const extras: Record<string, AnySchema> = {};\n    const paramBinders = new Map<string, McpParamBinder>();\n    for (const param of params) {\n      const binder = declared[param.name];\n      if (binder === \"input\") {\n        const field = s.string().describe(`The \":${param.name}\" segment of the url.`);\n        extras[param.name] =\n          param.modifier === \"?\" || param.modifier === \"*\" ? field.optional() : field;\n      } else {\n        paramBinders.set(param.name, binder);\n      }\n    }\n    for (const file of fileFields) {\n      if (file.binder === \"input\") {\n        extras[file.name] = s\n          .string()\n          .describe(\n            \"The id of an attachment the user uploaded or a tool produced (gemi_att_…), whose file is sent as this field.\",\n          );\n      }\n    }\n    // A bound file is not the model's, but it shares the form with the input,\n    // so it collides all the same.\n    const bodyKeys = [...Object.keys(extras), ...fileFields.map((file) => file.name)];\n    for (const key of new Set(bodyKeys)) {\n      if (jsonKeys.includes(key)) {\n        throw new Error(\n          `${where}: \"${key}\" is both an input field and a param or file, and the model can only send one.`,\n        );\n      }\n    }\n\n    return {\n      descriptor: Object.freeze({\n        name,\n        description: meta.description,\n        method,\n        url,\n        inputSchema: combineSchemas(meta.input, base, s.object(extras)),\n        annotations: annotationsFor(method),\n        tags: Object.freeze([...(meta.tags ?? [])]),\n        requiresApproval: meta.requiresApproval === true,\n        ...(entry.source ? { source: entry.source } : {}),\n      }),\n      params,\n      paramBinders,\n      fileFields,\n      jsonKeys,\n    };\n  }\n\n  // --- calling -------------------------------------------------------------\n\n  private async fillPath(\n    plan: Plan,\n    input: Record<string, unknown>,\n    req: HttpRequest<any, any>,\n  ): Promise<string> {\n    let path = plan.descriptor.url;\n    for (const param of plan.params) {\n      const binder = plan.paramBinders.get(param.name);\n      let value: unknown;\n      if (binder) {\n        value = await this.bind(plan, `the param \"${param.name}\"`, () => binder(req));\n        if (value === undefined || value === null || value === \"\") {\n          console.error(\n            `[gemi/mcp] The binder for \"${param.name}\" of \"${plan.descriptor.name}\" returned ${JSON.stringify(value)}.`,\n          );\n          throw new McpToolError(`\"${plan.descriptor.name}\" failed on the server.`, 500);\n        }\n      } else {\n        value = input[param.name];\n      }\n\n      const token = `:${param.name}${param.modifier}`;\n      if (value === undefined || value === null || value === \"\") {\n        if (param.modifier !== \"?\" && param.modifier !== \"*\") {\n          throw new McpToolError(`\"${param.name}\" of \"${plan.descriptor.name}\" must not be empty.`);\n        }\n        path = path.replace(`/${token}`, \"\");\n        continue;\n      }\n      path = path.replace(token, encodeSegment(plan.descriptor.name, param, String(value)));\n    }\n    return path;\n  }\n\n  private async formData(\n    plan: Plan,\n    input: Record<string, unknown>,\n    json: Record<string, unknown>,\n    ctx: ToolContext | undefined,\n  ): Promise<FormData> {\n    const name = plan.descriptor.name;\n    if (!ctx) {\n      throw new Error(\n        `McpRegistry: \"${name}\" sends a file, which is resolved through the tool context's attachments, and none was passed to execute().`,\n      );\n    }\n    const form = new FormData();\n    for (const [key, value] of Object.entries(json)) {\n      appendField(form, key, value);\n    }\n    for (const field of plan.fileFields) {\n      const id =\n        field.binder === \"input\"\n          ? (input[field.name] as string)\n          : await this.bind(plan, `the file \"${field.name}\"`, () =>\n              (field.binder as McpFileBinder)(ctx),\n            );\n      if (typeof id !== \"string\" || id === \"\") {\n        throw new McpToolError(\n          `\"${name}\" needs a file for \"${field.name}\", and this turn has none. Ask the user to attach one.`,\n        );\n      }\n      // Scoped to the caller: someone else's id is a not-found, worded like an\n      // invented one, and that error is what the model reads.\n      form.append(field.name, await ctx.attachments.file(id));\n    }\n    return form;\n  }\n\n  /**\n   * Runs an app's binder. Its failure is the server's, not the model's, so the\n   * model is told only that; the app gets the error in its log.\n   */\n  private async bind<T>(plan: Plan, what: string, fn: () => T | Promise<T>): Promise<T> {\n    try {\n      return await fn();\n    } catch (error) {\n      console.error(`[gemi/mcp] Binding ${what} of \"${plan.descriptor.name}\" failed:`, error);\n      throw new McpToolError(`\"${plan.descriptor.name}\" failed on the server.`, 500);\n    }\n  }\n}\n\nfunction assertLocal(caller: McpCaller): asserts caller is Extract<McpCaller, { kind: \"local\" }> {\n  if (caller?.kind !== \"local\") {\n    throw new Error(\n      \"McpRegistry: only local callers are implemented. A remote caller needs a bearer-token resolver, which v1 does not have — and until it does there is no remote surface to call from.\",\n    );\n  }\n}\n\n/** A binder is a function or `\"input\"`; anything else would leave the value to nobody. */\nfunction assertBinder(where: string, at: string, binder: unknown) {\n  if (binder !== \"input\" && typeof binder !== \"function\") {\n    throw new Error(`${where}: ${at} must be a function or \"input\".`);\n  }\n}\n\nfunction annotationsFor(method: McpMethod): McpToolAnnotations {\n  switch (method) {\n    case \"GET\":\n      return Object.freeze({ readOnlyHint: true as const });\n    case \"DELETE\":\n      return Object.freeze({ destructiveHint: true as const });\n    case \"PUT\":\n      return Object.freeze({ idempotentHint: true as const });\n    default:\n      return Object.freeze({});\n  }\n}\n\n/**\n * One schema out of two: the app's `input`, and the strings for `\"input\"`\n * params and files.\n *\n * Built by hand, like `questionSchema` in `ai/Agent.ts`, rather than by\n * widening `s` with a merge: `Schema.ts` is deliberately the strict\n * structured-output subset and owns no operation on a finished schema. Both\n * halves are real `s` schemas, each parses the whole value and drops the keys\n * that are not its own — which is also where a bound param the model sent\n * anyway disappears, since neither half declares it.\n */\nfunction combineSchemas(\n  input: AnySchema | undefined,\n  base: JSONSchema | undefined,\n  extras: AnySchema,\n): Schema<Record<string, unknown>> {\n  const extra = extras.toJSONSchema();\n  const json: JSONSchema = {\n    ...(base ?? {}),\n    type: \"object\",\n    properties: { ...(base?.properties ?? {}), ...extra.properties },\n    required: [...(base?.required ?? []), ...(extra.required ?? [])],\n    additionalProperties: false,\n  };\n\n  const safeParse = (value: unknown) => {\n    if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n      return { ok: false as const, errors: [\"expected an object\"] };\n    }\n    const errors: string[] = [];\n    let out: Record<string, unknown> = {};\n    if (input) {\n      const own = input.safeParse(value);\n      if (own.ok === false) errors.push(...own.errors);\n      else out = { ...own.value };\n    }\n    const more = extras.safeParse(value);\n    if (more.ok === false) errors.push(...more.errors);\n    else out = { ...out, ...more.value };\n    return errors.length > 0 ? { ok: false as const, errors } : { ok: true as const, value: out };\n  };\n\n  return {\n    toJSONSchema: () => json,\n    safeParse,\n    parse(value: unknown) {\n      const result = safeParse(value);\n      if (result.ok === false) throw new Error(result.errors.join(\", \"));\n      return result.value;\n    },\n  } as unknown as Schema<Record<string, unknown>>;\n}\n\n/**\n * A model-supplied param, as one encoded path segment. `.` and `..` are\n * refused rather than encoded: they encode to themselves, and URL parsing\n * would walk them out of the route.\n */\nfunction encodeSegment(tool: string, param: PathParam, value: string): string {\n  const parts = param.modifier === \"*\" || param.modifier === \"+\" ? value.split(\"/\") : [value];\n  if (parts.some((part) => part === \".\" || part === \"..\")) {\n    throw new McpToolError(`\"${value}\" is not a valid value for \"${param.name}\" of \"${tool}\".`);\n  }\n  return parts.map(encodeURIComponent).join(\"/\");\n}\n\n/**\n * A JSON field as a multipart form field. A form has only strings, so the\n * route reads `\"12\"` where a JSON body would have carried `12` — what a\n * browser form sends the same route. An array becomes the key repeated, which\n * `HttpRequest` reads back as an array.\n */\nfunction appendField(form: FormData, key: string, value: unknown) {\n  if (value === undefined || value === null) return;\n  if (Array.isArray(value)) {\n    for (const item of value) appendField(form, key, item);\n    return;\n  }\n  form.append(key, typeof value === \"object\" ? JSON.stringify(value) : String(value));\n}\n\n/** A GET's input, as the query string `HttpRequest.search` reads. */\nfunction toQuery(json: Record<string, unknown>): string {\n  const search = new URLSearchParams();\n  const add = (key: string, value: unknown) => {\n    if (value === undefined || value === null) return;\n    if (Array.isArray(value)) {\n      for (const item of value) add(key, item);\n      return;\n    }\n    search.append(key, typeof value === \"object\" ? JSON.stringify(value) : String(value));\n  };\n  for (const [key, value] of Object.entries(json)) add(key, value);\n  return search.toString();\n}\n\nasync function readResponse(name: string, response: Response): Promise<unknown> {\n  if (response.status >= 200 && response.status < 300) {\n    const type = response.headers.get(\"Content-Type\");\n    if (type && !READABLE.test(type)) {\n      const size = (await response.arrayBuffer()).byteLength;\n      return `\"${name}\" answered with ${size} bytes of ${type}, which is not shown.`;\n    }\n    const text = await response.text();\n    if (text === \"\") return null;\n    if (text.length > MAX_RESULT_BODY) {\n      return `${text.slice(0, MAX_RESULT_BODY)}… [cut at ${MAX_RESULT_BODY} of ${text.length} characters]`;\n    }\n    try {\n      return JSON.parse(text);\n    } catch {\n      return text;\n    }\n  }\n  const text = await response.text();\n  if (response.status >= 400 && response.status < 500) {\n    const shown = text.length > MAX_ERROR_BODY ? `${text.slice(0, MAX_ERROR_BODY)}…` : text;\n    throw new McpToolError(\n      `\"${name}\" was refused with ${response.status}${shown ? `: ${shown}` : \".\"}`,\n      response.status,\n    );\n  }\n  if (response.status < 500) {\n    // A redirect, or a 1xx: nothing the model can follow, and nothing the\n    // dispatcher logged.\n    console.error(\n      `[gemi/mcp] \"${name}\" answered ${response.status}${response.headers.get(\"Location\") ? ` to ${response.headers.get(\"Location\")}` : \"\"}, which a tool call cannot follow.`,\n    );\n  }\n  throw new McpToolError(`\"${name}\" failed on the server.`, response.status);\n}\n",
     "import { ServiceProvider } from \"../../support/ServiceProvider\";\nimport { McpRegistry } from \"../mcp/McpRegistry\";\nimport { ApiRouteDispatcher } from \"./ApiRouteDispatcher\";\nimport { DomainRouter } from \"./DomainRouter\";\nimport { ViewRouteDispatcher } from \"./ViewRouteDispatcher\";\nimport type { ApiRouteConfig, DomainsConfig, McpRouteConfig, ViewRouteConfig } from \"./config\";\nimport type { Repository } from \"../../support/Repository\";\n\nfunction readConfig<T>(config: Repository, key: string): T {\n  const slice = config.get<T>(key);\n  if (!slice) {\n    throw new Error(\n      `Missing \"${key}\" configuration. Route dispatching needs a root router — declare it in \"app/config/route.ts\".`,\n    );\n  }\n  return slice;\n}\n\n/**\n * Owns both route dispatchers. Laravel ships a single RouteServiceProvider for\n * every route file it loads; the api/view split is a config slice, not a\n * separate provider.\n */\nexport class RouteServiceProvider extends ServiceProvider {\n  register() {\n    this.app.singleton(\n      ApiRouteDispatcher,\n      () =>\n        new ApiRouteDispatcher(\n          readConfig<ApiRouteConfig>(this.app.config, \"route.api\"),\n        ),\n    );\n\n    this.app.singleton(\n      ViewRouteDispatcher,\n      () =>\n        new ViewRouteDispatcher(\n          readConfig<ViewRouteConfig>(this.app.config, \"route.view\"),\n        ),\n    );\n\n    // The root pair above is the root group's; the other `route.domains`\n    // groups get their own only when they bring their own routers.\n    this.app.singleton(\n      DomainRouter,\n      () =>\n        new DomainRouter(\n          { api: this.app.make(ApiRouteDispatcher), view: this.app.make(ViewRouteDispatcher) },\n          {\n            api: readConfig<ApiRouteConfig>(this.app.config, \"route.api\"),\n            view: readConfig<ViewRouteConfig>(this.app.config, \"route.view\"),\n            domains: this.app.config.get<DomainsConfig | undefined>(\"route.domains\"),\n          },\n        ),\n    );\n\n    // Bound whether or not the app declares one, so asking for it without\n    // `route.mcp` fails with a sentence rather than an unbound token.\n    this.app.singleton(McpRegistry, () => {\n      const config = this.app.config.get<McpRouteConfig | undefined>(\"route.mcp\");\n      if (!config?.router) {\n        throw new Error(\n          'No MCP router is configured. Declare one as `mcp: { router }` in \"app/config/route.ts\".',\n        );\n      }\n      return new McpRegistry(new config.router(), this.app.make(ApiRouteDispatcher));\n    });\n  }\n\n  /**\n   * The dispatchers of every host group, and the MCP registry when an app declares one, must\n   * not be built lazily: constructing the dispatchers flattens the route\n   * tables and runs `assertNoReservedRoutePaths`, and constructing the registry\n   * resolves every tool against those tables. A missing `route` config, a\n   * route under a reserved prefix or a tool naming a route that is gone has to\n   * fail the boot rather than the first request, or the first tool call, that\n   * happens to hit it.\n   */\n  boot() {\n    this.app.make(ApiRouteDispatcher);\n    this.app.make(ViewRouteDispatcher);\n    // Builds every host group's dispatchers and validates `route.domains`.\n    this.app.make(DomainRouter);\n    if (this.app.config.get(\"route.mcp\")) {\n      this.app.make(McpRegistry);\n    }\n  }\n}\n"
   ],
-  "mappings": ";gxBAmCA,SAAsB,JAAO,LAAC,JAA6B,LACzD,HAAI,LAQF,HAAI,LAAE,AAAM,JAAI,UAAU,KAAK,CAAG,EAChC,OAEF,MAAO,EAAO,CAMd,QAAQ,MACN,2CAA2C,EAAI,QAC/C,CACF,EACA,OAGF,GAAI,CACF,MAAM,EAAI,OAAO,KAAK,CAAG,EACzB,MAAO,EAAO,CACd,QAAQ,MAAM,4BAA4B,EAAI,QAAS,CAAK,EAE9D,GAAI,CACF,MAAM,EAAI,SAAS,KAAK,CAAG,EAC3B,MAAO,EAAO,CACd,QAAQ,MAAM,qBAAqB,EAAI,QAAS,CAAK,EAEvD,GAAI,CACF,MAAM,EAAI,WAAW,KAAK,CAAG,EAC7B,MAAO,EAAO,CACd,QAAQ,MAAM,6BAA6B,EAAI,QAAS,CAAK,GAyB1D,MAAM,CAAU,OACd,OAAQ,YAEP,QAA2B,CAAC,EAC5B,SAQS,SAAW,IAAI,IASxB,QAAU,GAElB,WAAW,CAAC,EAAkC,CAC5C,KAAK,SAAW,EAAO,QAqBrB,KAAI,EAAqC,CAC3C,MAAO,CAAC,GAAG,KAAK,QAAQ,EAc1B,OAAO,CAAC,EAAgC,CACtC,KAAK,SAAW,EASlB,KAAK,CAAC,EAAsB,CAAC,IAAO,EAAG,EAAG,CAExC,GADA,KAAK,QAAU,GACX,KAAK,SAAS,SAAW,EAC3B,OAGF,IAAM,EAAY,WAAW,iBAAmB,IAAI,IAO9C,EAAU,IAAI,IAEpB,QAAW,KAAO,KAAK,SAAU,CAC/B,IAAM,EAAM,IAAI,EAChB,GAAI,CAAC,EAAI,KAAM,CAOb,QAAQ,MACN,oCAA8B,EAAI,MAAQ,sPAK5C,EACA,SAEF,GAAI,CAAC,EAAI,KAAM,CACb,QAAQ,MAAM,0CAA0C,EAAI,MAAM,EAClE,SAEF,IAAM,EAAQ,EAAQ,IAAI,EAAI,IAAI,EAClC,GAAI,IAAU,OAAW,CAOvB,QAAQ,MACN,iCAAiC,EAAI,gBAAU,sBAC5B,EAAI,MAAQ,sGAEjC,EACA,SAEF,EAAQ,IAAI,EAAI,KAAM,EAAI,MAAQ,oBAAoB,EAItD,EAAS,IAAI,EAAI,IAAI,GAAG,KAAK,EAK7B,IAAM,EAAS,IAAI,KAAK,EAAI,KAAM,IAAM,CACtC,GAAI,KAAK,QAAS,OAClB,OAAO,KAAK,MAAM,EAAI,KAAM,IAAM,EAAI,IAAM,GAAQ,CAAG,CAAC,CAAC,EAC1D,EAED,EAAS,IAAI,EAAI,KAAM,CAAM,EAC7B,KAAK,QAAQ,KAAK,CAAM,GAQ5B,IAAI,EAAG,CACL,KAAK,QAAU,GACf,QAAW,KAAU,KAAK,QACxB,EAAO,KAAK,EAEd,KAAK,QAAU,CAAC,OAeZ,MAAK,CAAC,EAAY,IAAwC,CAC9D,KAAK,KAAK,EAEV,IAAI,EACE,EAAW,IAAI,QAAc,CAAC,IAAY,CAC9C,GAAI,IAAc,IAAU,EAAQ,WAAW,EAAS,CAAS,EAClE,EAOD,OANA,MAAM,QAAQ,KAAK,CACjB,QAAQ,WAAW,CAAC,GAAG,KAAK,SAAS,OAAO,CAAC,EAAE,IAAI,CAAC,IAAM,EAAE,IAAI,CAAC,EACjE,CACF,CAAC,EACD,aAAa,CAAK,EAEX,CACL,WAAY,CAAC,GAAG,KAAK,SAAS,OAAO,CAAC,EAAE,IAAI,CAAC,KAAO,IAAK,EAAE,IAAK,EAAE,CACpE,KAIE,QAAO,EAAW,CACpB,OAAO,KAAK,SAAS,KAGf,KAAK,CAAC,EAAc,EAAuC,CACjE,IAAM,EAAM,CAAC,EAIP,EAAO,QAAQ,QAAQ,EAC1B,KAAK,CAAI,EACT,QAAQ,IAAM,KAAK,SAAS,OAAO,CAAG,CAAC,EAE1C,OADA,KAAK,SAAS,IAAI,EAAK,CAAE,KAAM,CAAE,OAAM,UAAW,IAAI,IAAO,EAAG,MAAK,CAAC,EAC/D,EAEX,CCzSA,uBAAS,wBAsBT,IAAM,GAAmB,IAEnB,GAAe,CAAC,IACpB,KAAK,IAAI,GAAkB,KAAK,MAAM,EAAY,EAAE,CAAC,EAEhD,MAAM,WAA6B,CAAgB,CACxD,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IACE,IAAI,EAAa,KAAK,IAAI,OAAO,IAAiB,QAAS,CAAC,CAAC,EAAG,CAC9D,YAAa,KAAK,GACpB,CAAC,CACL,OA0BI,KAAI,EAAG,CACX,IAAM,EAAQ,KAAK,IAAI,OAAO,IAAiB,QAAS,CAAC,CAAC,EAC1D,GAAI,EAAM,OAAS,OAAW,OAE9B,IAAQ,WAAY,EAAa,EAAoB,EAAG,CAAK,EAC7D,KAAK,IAAI,KAAK,CAAY,EAAE,QAAQ,MAAM,EAAa,CAAO,CAAC,OA2B3D,SAAQ,CAAC,EAAiC,CAE9C,GAAI,CAAC,KAAK,IAAI,SAAS,CAAY,EAAG,OACtC,IAAM,EAAQ,KAAK,IAAI,KAAK,CAAY,EACxC,GAAI,EAAM,QAAU,EAClB,QAAQ,IACN,qCAAqC,EAAM,gCAC7C,EAEF,IAAM,EAAS,GAAS,WAChB,cAAe,MAAM,EAAM,MACjC,IAAW,OAAY,IAAW,KAAK,IAAI,EAAG,EAAS,GAAa,CAAM,CAAC,CAC7E,EACA,GAAI,EAAW,OAAS,EAKtB,OAJA,QAAQ,MACN,iDACE,EAAW,IAAI,CAAC,IAAQ,GAAG,EAAI,SAAS,EAAI,KAAK,EAAE,KAAK,IAAI,CAChE,EACO,CAAE,UAAW,EAAK,EAG/B,CAwBO,SAAS,EAAsB,CAAC,EAA0B,CAE/D,GADA,GAAqB,CAAW,EAC5B,mBAAyB,aAAc,OAAO,GAAiB,CAAW,EAC9E,GAAI,GAAiB,CAAW,EAAG,OACnC,GAAI,CAAC,EAAoB,EAAG,OAC5B,GAAI,CAAC,EAAY,MAAM,CAAY,EAAG,OACtC,EAAY,KAAK,CAAY,EAAE,MAAM,EAGvC,SAAS,EAAgB,CAAC,EAA0B,CAClD,IAAM,EAAS,EAAY,OAAO,IAAiB,QAAS,CAAC,CAAC,EAAE,QAAU,SAC1E,OAAO,IAAW,UAAY,aAAkB,EAWlD,SAAS,EAAkB,CAAC,EAA0B,CACpD,GAAI,GAAiB,CAAW,EAAG,MAAO,GAE1C,GAAI,OADW,EAAY,OAAO,IAAiB,QAAS,CAAC,CAAC,EAAE,SAC1C,YAAc,CAAC,EAAY,MAAM,CAAY,EAAG,MAAO,GAC7E,GAAI,CACF,MAAO,CAAC,EAAY,KAAK,CAAY,EAAE,QACvC,KAAM,CACN,MAAO,IAgBX,SAAS,EAAoB,CAAC,EAA0B,CACtD,IAAM,EAAQ,QAAQ,IAAI,iBAC1B,GAAI,IAAU,QAAa,EAAc,EAAG,OAC5C,GAAI,QAAQ,IAAI,WAAa,QAAa,CAAC,GAAc,OACzD,GAAI,EAAkB,EAAG,CACvB,GAAI,CAAC,GAAmB,CAAW,EAAG,OACtC,QAAQ,KACN,2QAIF,EACK,QAAI,EAAM,KAAK,EAAE,YAAY,IAAM,KACxC,QAAQ,KACN,4BAA4B,4GAE9B,EA+BJ,SAAS,EAAgB,CAAC,EAA0B,CAClD,IAAM,EAAW,WAAW,eAC5B,GAAI,CAAC,EAAU,OAGf,GAFA,WAAW,eAAiB,OACvB,EAAS,KAAK,EACf,EAAY,MAAM,CAAY,EAAG,EAAY,KAAK,CAAY,EAAE,MAAM,ECvOrE,MAAM,WAA4B,CAAgB,CACvD,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IAAM,IAAI,EAAY,KAAK,IAAI,OAAO,IAAgB,OAAQ,CAAC,CAAC,CAAC,CACnE,EAEJ,CCGA,IAAM,GAAmB,IAEnB,GAAe,CAAC,IAAsB,KAAK,IAAI,GAAkB,KAAK,MAAM,EAAY,EAAE,CAAC,EAE1F,MAAM,WAAgC,CAAgB,CAC3D,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IACE,IAAI,EACF,EACE,EAAuB,EACvB,KAAK,IAAI,OAAO,IAAoB,WAAY,CAAC,CAAC,CACpD,CACF,CACJ,OA0BI,KAAI,EAAG,CACX,IAAM,EAAY,KAAK,IAAI,KAAK,CAAS,EACnC,EAAQ,KAAK,IAAI,OAAO,IAAoB,WAAY,CAAC,CAAC,EAEhE,GAAI,EAAM,OAAS,OAAW,CAC5B,IAAQ,WAAY,EAAa,EAAuB,EAAG,CAAK,EAChE,EAAU,QAAQ,MAAM,GAAiB,CAAO,CAAC,EAqBnD,GAAI,QAAQ,IAAI,mBAAqB,IAAK,OAE1C,IAAM,EAAM,KAAK,IACjB,EAAU,MAAM,CAAC,IAAO,GAAc,IAAI,EAAK,CAAE,CAAC,OAqB9C,SAAQ,CAAC,EAAiC,CAG9C,GAAI,CAAC,KAAK,IAAI,SAAS,CAAS,EAAG,OACnC,IAAM,EAAY,KAAK,IAAI,KAAK,CAAS,EACzC,GAAI,EAAU,QAAU,EACtB,QAAQ,IAAI,qCAAqC,EAAU,+BAA+B,EAE5F,IAAM,EAAS,GAAS,WAChB,cAAe,MAAM,EAAU,MACrC,IAAW,OAAY,IAAW,KAAK,IAAI,EAAG,EAAS,GAAa,CAAM,CAAC,CAC7E,EACA,GAAI,EAAW,OAAS,EAOtB,OANA,QAAQ,MACN,+CACE,EACG,IAAI,CAAC,IAAS,GAAG,EAAK,iBAAiB,EAAK,UAAU,YAAY,IAAI,EACtE,KAAK,IAAI,CAChB,EACO,CAAE,UAAW,EAAK,EAG/B,CC9GO,MAAM,UAAkC,EAAkB,CAC1C,UAArB,WAAW,CAAU,EAAoB,cAAe,CACtD,MAAM,EADa,oBAKjB,UAAS,EAAY,CACvB,OAAgB,GAAI,KAAK,SAAS,OAG9B,KAAI,EAAuC,CAC/C,GAAI,CAAC,KAAK,UACR,MAAM,IAAI,EAAyB,KAAK,SAAS,EAGnD,IAAM,EAAiB,EAAS,KAAK,SAAS,EAM9C,OAAO,MAAM,EAAM,SAAS,IAAM,EAAM,SAAS,CAAC,OAiB9C,MAAK,CAAC,EAAa,EAAiB,EAAqD,CAC7F,GAAI,CAAC,KAAK,UACR,MAAM,IAAI,EAAyB,KAAK,SAAS,EAGnD,IAAM,EAAiB,EAAS,KAAK,SAAS,EACxC,EAAgB,KAAK,eAAe,CAAK,EACzC,EAAgC,CAAE,QAAO,EAC/C,GAAI,EAAe,EAAK,UAAY,EAAK,MAazC,OARA,MAAM,EAAM,SAAS,IACnB,EAAM,OAAO,CACX,MAAO,CAAE,KAAI,EACb,OAAQ,CAAE,SAAQ,CAAK,EACvB,OAAQ,CACV,CAAC,CACH,EAEO,CAAE,eAAc,EAGjB,cAAc,CAAC,EAAqB,CAC1C,IAAM,EAAQ,GAAO,SAAS,QAAQ,UACtC,OAAO,IAAU,QAAa,EAAM,OAAS,SAEjD,CCxBO,SAAS,EAAoB,CAAC,EAAwC,CAC3E,OAAO,EAGF,SAAS,EAAsB,EAMpC,CACA,MAAO,CACL,SAAU,OACV,QAAS,GACT,OAAQ,IAAI,EACZ,MAAO,cACP,IAAK,GACL,QAAS,OACT,WAAY,OACZ,eAAgB,GAClB,ECzEK,MAAM,WAAgC,CAAgB,CAC3D,QAAQ,EAAG,CACT,KAAK,IAAI,UAAU,EAAgB,IAAM,CACvC,IAAM,EAAW,KAAK,IAAI,OAAO,IAAoB,WAAY,CAAC,CAAC,EAC7D,EAAS,EAAa,GAAuB,EAAG,CAAQ,EAkB9D,GAAI,GAAU,QAAU,QAAa,GAAU,SAAW,OACxD,EAAO,OAAS,IAAI,EAA0B,EAAS,KAAK,EACvD,QACL,GAAU,QAAU,QACpB,EAAS,kBAAkB,GAC3B,EAAS,OAAO,YAAc,EAAS,MAEvC,EAAI,QACF,yCAAyC,EAAS,kCAAkC,EAAS,OAAO,8DACtG,EAGF,OAAO,IAAI,EAAe,EAAQ,CAAC,IAAY,EAAI,QAAQ,CAAO,CAAC,EACpE,OAGG,KAAI,EAAG,CACX,IAAM,EAAW,KAAK,IAAI,KAAK,CAAc,EAC7C,GAAI,CAAC,EAAS,OAAO,QAAS,OAM9B,GAAI,CACF,MAAM,EAAS,QAAQ,EACvB,MAAO,EAAO,CACd,EAAI,MACF,kDACE,aAAiB,MAAQ,EAAM,QAAU,OAAO,CAAK,GAEzD,GAGN,CC3DO,MAAM,WAA4B,CAAgB,CACvD,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IAAM,IAAI,EAAY,KAAK,IAAI,OAAO,IAAgB,OAAQ,CAAC,CAAC,CAAC,CACnE,EAEJ,CCiBO,SAAS,EAAe,CAAC,EAA8B,CAC5D,MAAO,YAAY,IAmBd,SAAS,EAAc,CAC5B,EACA,EACe,CACf,GAAmB,CAAQ,EAE3B,IAA0B,YAApB,EACkB,QAAlB,EACoB,OAApB,GADS,EAET,EAAU,EAAS,MAAM,KAEzB,EAAM,cAAc,EAAI,CAC5B,YAAc,EACd,QAAU,EACV,OAAS,OAEH,IAAG,IAAI,EAAoB,CAC/B,IAAO,EAAW,GAAQ,GAAY,CAAO,EACvC,EAAQ,EAAI,CAAY,EAAE,UAAU,EAAW,CAAI,EACzD,MAAM,IAAI,EAAS,EAAE,OAAO,CAAK,EA6BnC,MAAM,CAAC,EAAc,CACnB,QAAQ,MACN,gBAAgB,EAAS,6BAA6B,kDACR,iEAE9C,CACF,EAGF,YAAY,CAAC,EAAc,CACzB,QAAQ,MACN,gBAAgB,EAAS,gCAAgC,iBACxC,4FAEjB,CACF,EAEJ,EAoBA,OALA,OAAO,eAAe,EAAK,OAAQ,CACjC,MAAO,GAAgB,EAAS,IAAI,EACpC,SAAU,EACZ,CAAC,EAEM,EAoBT,SAAS,EAAkB,CAAC,EAA+B,CACzD,GAAI,OAAO,yBAAyB,EAAU,MAAM,GAAG,SAAU,OAEjE,MAAU,MACR,gBAAgB,EAAS,8GAEvB,0EACA,uDAAuD,EAAS,QACpE,EAmBF,SAAS,EAAW,CAAC,EAAyC,CAC5D,OAAQ,OAAO,EAAQ,KAAO,SAAW,EAAU,EAAQ,GClHtD,MAAM,CAAa,OACjB,OAAQ,SAGP,UAA4C,CAAC,EAW7C,OAAqC,CAAC,EAMtC,UAAY,IAAI,IAShB,mBAAqB,IAAI,IAExB,OAET,WAAW,CAAC,EAAsB,CAAC,EAAG,CACpC,KAAK,OAAS,EAAa,EAAoB,EAAG,CAAM,EACxD,KAAK,aAAa,KAAK,OAAO,SAAS,EA0BzC,YAAY,CAAC,EAA4B,CACvC,KAAK,OAAO,UAAY,EAExB,KAAK,UAAY,CAAC,EAClB,KAAK,OAAS,CAAC,EACf,IAAM,EAAU,IAAI,IAEpB,QAAW,KAAY,EAAW,CAOhC,GAAI,CAAC,EAAS,MAAO,CACnB,QAAQ,MACN,YAAY,EAAS,sJAGvB,EACA,SASF,GAAI,EAAQ,IAAI,EAAS,IAAI,EAAG,CAC9B,QAAQ,MACN,kCAAkC,EAAS,6BACzC,kIAEJ,EACA,SAEF,EAAQ,IAAI,EAAS,IAAI,EAUzB,IAAM,EAAO,EAAS,MAAM,KACtB,EAAW,IAAI,EAErB,KAAK,OAAO,KAAU,EAAS,OAC9B,KAAK,UAAU,KAAU,CAAC,GAAG,KAAK,CACjC,WACA,IAAK,EAAS,OAAS,GAAe,EAAU,CAAQ,EAAI,IAC9D,CAAC,MAcD,mBAAkB,EAAiC,CACrD,OAAO,OAAO,OAAO,KAAK,SAAS,EAChC,KAAK,EACL,QAAQ,EAAG,SAAW,EAAM,CAAC,CAAG,EAAI,CAAC,CAAE,KAcxC,oBAAmB,EAAiC,CACtD,MAAO,CAAC,GAAG,KAAK,OAAO,SAAS,EAgBlC,QAAQ,CAAC,EAAc,EAAiC,CACtD,GAAI,KAAK,cAAc,EAAO,EAAM,EAAK,EAAG,OACvC,KAAK,aAAa,EAAO,CAAI,OAa9B,gBAAe,CACnB,EACA,EACe,CACf,GAAI,KAAK,cAAc,EAAO,EAAM,EAAI,EAAG,OAC3C,OAAO,KAAK,aAAa,EAAO,CAAI,EAwB9B,aAAa,CACnB,EACA,EACA,EACS,CAKT,IAAQ,OAAM,eAAgB,EAAM,YAIpC,GAAI,CAAC,EAAa,MAAO,GAEzB,IAAM,EAAW,GAAiB,IAAM,KAAK,aAAa,EAAO,CAAI,CAAC,EACtE,GAAI,GAAY,EAAS,KAAK,uBAAuB,CAAI,EACzD,OAAO,OAkEO,aAAY,CAC1B,EACA,EACe,CACf,IAAM,EAAQ,EAAM,YAAiC,KAC/C,EAAW,KAAK,UAAU,GAEhC,GAAI,CAAC,GAAU,OAAQ,CACrB,KAAK,uBAAuB,CAAI,EAChC,OAGF,QAAa,SAAU,EAAU,SAAS,EAAU,CAClD,GAAI,EAAK,CACP,KAAK,QAAQ,EAAK,EAAU,EAAM,CAAI,EACtC,SAGF,GAAI,CACF,MAAM,IAAI,EAAS,EAAE,OAAO,CAAK,EACjC,MAAO,EAAO,CACd,QAAQ,MACN,gBAAgB,EAAS,6BAA6B,UACpD,uEACF,CACF,IAsBN,SAAS,CAAC,EAAmB,EAA2B,CAAC,EAAU,CACjE,IAAM,EAAa,KAAK,OAAO,GAE/B,GAAI,CAAC,EACH,MAAU,MACR,6BAA6B,uKAG3B,wEACA,+FAC6B,OACjC,EAGF,OAAO,IAAI,EAAW,GAAG,CAAI,EAkBvB,OAAO,CACb,EACA,EACA,EACA,EACA,CACA,GAAI,IAAS,OAAW,CACtB,QAAQ,MACN,gBAAgB,EAAS,uBAAuB,mKAGjB,sBAC1B,2CACP,EACA,OAGF,IAAM,EAAS,CAAC,IACd,QAAQ,MACN,gBAAgB,EAAS,gCAAgC,kFAGzD,CACF,EAKF,GAAI,CAIF,EAAI,CAAY,EACb,KAAK,EAAK,KAAK,UAAU,CAAC,EAAW,CAAI,CAAC,EAAG,CAAE,cAAe,EAAM,CAAC,EACrE,MAAM,CAAM,EACf,MAAO,EAAO,CACd,EAAO,CAAK,GAmBR,sBAAsB,CAAC,EAAc,CAC3C,GAAI,mBAAyB,aAAc,OAC3C,GAAI,KAAK,mBAAmB,IAAI,CAAI,EAAG,OACvC,KAAK,mBAAmB,IAAI,CAAI,EAEhC,QAAQ,KACN,UAAU,2DACL,4DACH,oEACA,uIAGJ,EAGM,sBAAsB,CAAC,EAAc,CAC3C,GAAI,mBAAyB,aAAc,OAC3C,GAAI,KAAK,UAAU,IAAI,CAAI,EAAG,OAC9B,KAAK,UAAU,IAAI,CAAI,EAEvB,QAAQ,KACN,UAAU,gLAEgD,gBAChD,+BAAkC,yBAC9C,EAEJ,CChgBO,MAAM,WAA6B,CAAgB,CACxD,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IAAM,IAAI,EAAa,KAAK,IAAI,OAAO,IAAiB,SAAU,CAAC,CAAC,CAAC,CACvE,OA2CI,KAAI,EAAG,CACX,IAAM,EAAU,KAAK,IAAI,KAAK,CAAY,EACpC,EAAQ,KAAK,IAAI,OAAO,IAAiB,SAAU,CAAC,CAAC,EAE3D,GAAI,EAAM,YAAc,OAAW,CACjC,IAAQ,gBAAiB,EAAa,EAAoB,EAAG,CAAK,EAClE,EAAQ,aAAa,MAAM,GAAkB,CAAY,CAAC,EAM5D,IAAM,EAAO,EAAQ,mBACrB,GAAI,EAAK,SAAW,EAAG,OAEvB,IAAM,EAAQ,KAAK,IAAI,KAAK,CAAY,EACxC,QAAW,KAAO,EAChB,EAAM,YAAY,CAAG,EAG3B,CCvEO,MAAM,WAAkC,CAAgB,CAC7D,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IACE,IAAI,EACF,KAAK,IAAI,OAAO,IAAsB,aAAc,CAAC,CAAC,CACxD,CACJ,EAEJ,CCVO,MAAM,WAA6B,CAAgB,CACxD,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IAAM,IAAI,EAAa,KAAK,IAAI,OAAO,IAAiB,QAAS,CAAC,CAAC,CAAC,CACtE,EAEJ,CCPO,MAAM,WAAgC,CAAgB,CAC3D,QAAQ,EAAG,CACT,KAAK,IAAI,SAAS,EAAU,IAAI,CAAU,EAE9C,CCEO,SAAS,EAAe,CAAC,EAA8B,CAC5D,OAAO,EAGF,SAAS,EAAiB,EAAwB,CACvD,MAAO,CACL,YAAa,SACb,gBAAiB,IAAM,GACvB,aAAc,IAAM,EACtB,ECdK,MAAM,WAA2B,CAAgB,CACtD,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IACE,IAAI,EACF,EACE,GAAkB,EAClB,KAAK,IAAI,OAAO,IAAe,MAAO,CAAC,CAAC,CAC1C,CACF,CACJ,OAoBI,KAAI,EAAG,CACX,GAAI,CAAC,QAAQ,IAAI,SACf,OAEF,MAAM,KAAK,IAAI,KAAK,CAAU,EAAE,KAAK,EAEzC,CClCO,MAAM,WAAkC,CAAgB,CAC7D,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IACE,IAAI,EACF,EACE,GAAyB,EACzB,KAAK,IAAI,OAAO,IAAsB,aAAc,CAAC,CAAC,CACxD,CACF,CACJ,EAGF,IAAI,EAAG,CAGL,KAAK,IAAI,KAAK,CAAkB,EAAE,uBAAuB,EAE7D,CCTO,SAAS,EAAuB,CACrC,EACmB,CACnB,OAAO,EAGF,SAAS,EAAyB,EAAgC,CACvE,MAAO,CACL,OAAQ,IAAI,GACZ,MAAO,KACP,OAAQ,EACV,ECxBK,MAAM,WAAmC,CAAgB,CAC9D,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IACE,IAAI,EACF,EACE,GAA0B,EAC1B,KAAK,IAAI,OAAO,IAAuB,cAAe,CAAC,CAAC,CAC1D,CACF,CACJ,EAEJ,CCLO,SAAS,EAAiB,CAAC,EAAkC,CAClE,OAAO,EAGF,SAAS,EAAmB,EAAgB,CACjD,MAAO,CACL,IAAK,QAAQ,IAAI,UACjB,QAAS,MACX,EChBK,MAAM,WAA6B,CAAgB,CACxD,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IACE,IAAI,EACF,EACE,GAAoB,EACpB,KAAK,IAAI,OAAO,IAAiB,QAAS,CAAC,CAAC,CAC9C,CACF,CACJ,EAQF,QAAQ,EAAG,CACT,GAAI,CAAC,KAAK,IAAI,SAAS,CAAY,EAAG,OACtC,KAAK,IAAI,KAAK,CAAY,EAAE,MAAM,EAEtC,CC2EO,MAAM,UAAqB,EAAU,CAG/B,OAFX,WAAW,CACT,EACS,EACT,CACA,MAAM,CAAO,EAFJ,cAGT,KAAK,KAAO,eAEhB,CAGA,IAAM,GAAY,wBAGZ,GAAa,qCAOb,GAAiB,KASjB,EAAkB,IAGlB,GAAW,kDA2BV,MAAM,CAAY,CAOJ,iBANZ,OAAQ,aAEE,MAAQ,IAAI,IAE7B,WAAW,CACT,EACiB,EAIjB,CAJiB,kBAKjB,QAAY,EAAM,KAAgB,OAAO,QAAQ,EAAO,QAAU,CAAC,CAAC,EAClE,KAAK,MAAM,IAAI,EAAM,KAAK,KAAK,EAAM,CAAW,CAAC,EASrD,IAAI,CAAC,EAAmB,EAA6C,CAEnE,OADA,GAAY,CAAM,EACX,KAAK,YAAY,CAAM,EAQhC,WAAW,CAAC,EAA6C,CACvD,IAAM,EAA2B,CAAC,EAClC,QAAa,gBAAgB,KAAK,MAAM,OAAO,EAAG,CAChD,GAAI,GAAQ,OAAS,CAAC,EAAO,MAAM,SAAS,EAAW,IAAI,EAAG,SAC9D,GAAI,GAAQ,MAAQ,CAAC,EAAW,KAAK,KAAK,CAAC,IAAQ,EAAO,KAAK,SAAS,CAAG,CAAC,EAAG,SAC/E,EAAI,KAAK,CAAU,EAErB,OAAO,OAqBH,QAAO,CACX,EACA,EACA,EACA,EACkB,CAClB,GAAY,CAAM,EAClB,IAAM,EAAO,KAAK,MAAM,IAAI,CAAI,EAChC,GAAI,CAAC,EACH,MAAU,MAAM,wCAAwC,KAAQ,EAElE,IAAQ,cAAe,EAEjB,EAAS,EAAW,YAAY,UAAU,CAAI,EACpD,GAAI,EAAO,KAAO,GAChB,MAAM,IAAI,EAAa,0BAA0B,OAAU,EAAO,OAAO,KAAK,IAAI,GAAG,EAEvF,IAAM,EAAQ,EAAO,MAEf,EAAO,MAAM,KAAK,SAAS,EAAM,EAAO,EAAO,GAAG,GAMhD,KAAM,GAAY,KAAK,WAAW,yBACxC,IAAI,QAAQ,2BAA2B,GAAM,CAC/C,EACA,GAAI,IAAY,EAAW,IACzB,MAAM,IAAI,EAAa,IAAI,qBAAwB,KAAS,GAAG,EAGjE,IAAM,EAAgC,CAAC,EACvC,QAAW,KAAO,EAAK,SACrB,GAAI,EAAM,KAAS,OAAW,EAAK,GAAO,EAAM,GAGlD,IAAI,EACA,EAAQ,GACZ,GAAI,EAAK,WAAW,OAAS,EAC3B,EAAO,MAAM,KAAK,SAAS,EAAM,EAAO,EAAM,CAAG,EAC5C,QAAI,EAAW,SAAW,MAC/B,EAAQ,GAAQ,CAAI,EACf,QAAI,EAAK,SAAS,OAAS,EAChC,EAAO,EAGT,IAAI,EACJ,GAAI,CACF,EAAW,MAAM,KAAK,WAAW,WAC/B,EAAO,IACP,EAAW,OACX,EAAQ,GAAG,KAAQ,IAAU,EAC7B,CACF,EACA,MAAO,EAAO,CAId,MADA,QAAQ,MAAM,2BAA2B,aAAiB,CAAK,EACzD,IAAI,EAAa,IAAI,2BAA+B,GAAG,EAE/D,OAAO,MAAM,GAAa,EAAM,CAAQ,EAKlC,IAAI,CAAC,EAAc,EAAwC,CACjE,GAAI,CAAC,GAAU,KAAK,CAAI,EACtB,MAAU,MACR,eAAe,kKACjB,EAEF,IAAM,EAAQ,eAAe,OAAU,GAAa,UAAU,GAAa,OAC3E,GAAI,EAAE,aAAuB,SAAW,EAAY,mBAAqB,WACvE,MAAU,MACR,eAAe,4DACjB,EAEF,IAAQ,SAAQ,MAAK,QAAS,EAC9B,GAAI,EAAI,WAAW,WAAW,EAC5B,MAAU,MAAM,GAAG,2CAA+C,EAGpE,IAAM,EAAQ,KAAK,WAAW,WAAW,KAAO,GAChD,GAAI,CAAC,EACH,MAAU,MACR,GAAG,qFACL,EAKF,IAAM,EAAsB,CAAC,GAAG,EAAI,SAAS,EAAU,CAAC,EAAE,IAAI,GAAI,EAAO,MAAe,CACtF,KAAM,EACN,UACF,EAAE,EACI,EAAW,EAAK,QAAU,CAAC,EACjC,QAAW,KAAS,EAClB,GAAI,EAAE,EAAM,QAAQ,GAClB,MAAU,MACR,GAAG,sBAA0B,EAAM,0CACrC,EAGJ,QAAY,EAAK,KAAW,OAAO,QAAQ,CAAQ,EAAG,CACpD,GAAI,CAAC,EAAO,KAAK,CAAC,IAAU,EAAM,OAAS,CAAG,EAC5C,MAAU,MAAM,GAAG,OAAW,yCAA2C,EAE3E,GAAa,EAAO,UAAU,IAAO,CAAM,EAG7C,IAAI,EAAqB,CAAC,EACtB,EACJ,GAAI,EAAK,MAAO,CAEd,GADA,EAAO,EAAK,MAAM,aAAa,EAC3B,EAAK,OAAS,UAAY,CAAC,EAAK,WAClC,MAAU,MACR,GAAG,oEACL,EAEF,EAAW,OAAO,KAAK,EAAK,UAAU,EAGxC,IAAM,EAAa,OAAO,QAAQ,EAAK,OAAS,CAAC,CAAC,EAAE,IAAI,EAAE,EAAO,MAAa,CAC5E,KAAM,EACN,QACF,EAAE,EACF,QAAW,KAAQ,EACjB,GAAa,EAAO,SAAS,EAAK,OAAQ,EAAK,MAAM,EAEvD,GAAI,EAAW,OAAS,GAAK,IAAW,MACtC,MAAU,MAAM,GAAG,uCAA2C,EAGhE,IAAM,EAAoC,CAAC,EACrC,EAAe,IAAI,IACzB,QAAW,KAAS,EAAQ,CAC1B,IAAM,EAAS,EAAS,EAAM,MAC9B,GAAI,IAAW,QAAS,CACtB,IAAM,EAAQ,EAAE,OAAO,EAAE,SAAS,SAAS,EAAM,2BAA2B,EAC5E,EAAO,EAAM,MACX,EAAM,WAAa,KAAO,EAAM,WAAa,IAAM,EAAM,SAAS,EAAI,EAExE,OAAa,IAAI,EAAM,KAAM,CAAM,EAGvC,QAAW,KAAQ,EACjB,GAAI,EAAK,SAAW,QAClB,EAAO,EAAK,MAAQ,EACjB,OAAO,EACP,SACC,mHACF,EAKN,IAAM,EAAW,CAAC,GAAG,OAAO,KAAK,CAAM,EAAG,GAAG,EAAW,IAAI,CAAC,IAAS,EAAK,IAAI,CAAC,EAChF,QAAW,KAAO,IAAI,IAAI,CAAQ,EAChC,GAAI,EAAS,SAAS,CAAG,EACvB,MAAU,MACR,GAAG,OAAW,iFAChB,EAIJ,MAAO,CACL,WAAY,OAAO,OAAO,CACxB,OACA,YAAa,EAAK,YAClB,SACA,MACA,YAAa,GAAe,EAAK,MAAO,EAAM,EAAE,OAAO,CAAM,CAAC,EAC9D,YAAa,GAAe,CAAM,EAClC,KAAM,OAAO,OAAO,CAAC,GAAI,EAAK,MAAQ,CAAC,CAAE,CAAC,EAC1C,iBAAkB,EAAK,mBAAqB,MACxC,EAAM,OAAS,CAAE,OAAQ,EAAM,MAAO,EAAI,CAAC,CACjD,CAAC,EACD,SACA,eACA,aACA,UACF,OAKY,SAAQ,CACpB,EACA,EACA,EACiB,CACjB,IAAI,EAAO,EAAK,WAAW,IAC3B,QAAW,KAAS,EAAK,OAAQ,CAC/B,IAAM,EAAS,EAAK,aAAa,IAAI,EAAM,IAAI,EAC3C,EACJ,GAAI,GAEF,GADA,EAAQ,MAAM,KAAK,KAAK,EAAM,cAAc,EAAM,QAAS,IAAM,EAAO,CAAG,CAAC,EACxE,IAAU,QAAa,IAAU,MAAQ,IAAU,GAIrD,MAHA,QAAQ,MACN,8BAA8B,EAAM,aAAa,EAAK,WAAW,kBAAkB,KAAK,UAAU,CAAK,IACzG,EACM,IAAI,EAAa,IAAI,EAAK,WAAW,8BAA+B,GAAG,EAG/E,OAAQ,EAAM,EAAM,MAGtB,IAAM,EAAQ,IAAI,EAAM,OAAO,EAAM,WACrC,GAAI,IAAU,QAAa,IAAU,MAAQ,IAAU,GAAI,CACzD,GAAI,EAAM,WAAa,KAAO,EAAM,WAAa,IAC/C,MAAM,IAAI,EAAa,IAAI,EAAM,aAAa,EAAK,WAAW,0BAA0B,EAE1F,EAAO,EAAK,QAAQ,IAAI,IAAS,EAAE,EACnC,SAEF,EAAO,EAAK,QAAQ,EAAO,GAAc,EAAK,WAAW,KAAM,EAAO,OAAO,CAAK,CAAC,CAAC,EAEtF,OAAO,OAGK,SAAQ,CACpB,EACA,EACA,EACA,EACmB,CACnB,IAAM,EAAO,EAAK,WAAW,KAC7B,GAAI,CAAC,EACH,MAAU,MACR,iBAAiB,8GACnB,EAEF,IAAM,EAAO,IAAI,SACjB,QAAY,EAAK,KAAU,OAAO,QAAQ,CAAI,EAC5C,GAAY,EAAM,EAAK,CAAK,EAE9B,QAAW,KAAS,EAAK,WAAY,CACnC,IAAM,EACJ,EAAM,SAAW,QACZ,EAAM,EAAM,MACb,MAAM,KAAK,KAAK,EAAM,aAAa,EAAM,QAAS,IAC/C,EAAM,OAAyB,CAAG,CACrC,EACN,GAAI,OAAO,IAAO,UAAY,IAAO,GACnC,MAAM,IAAI,EACR,IAAI,wBAA2B,EAAM,4DACvC,EAIF,EAAK,OAAO,EAAM,KAAM,MAAM,EAAI,YAAY,KAAK,CAAE,CAAC,EAExD,OAAO,OAOK,KAAO,CAAC,EAAY,EAAc,EAAsC,CACpF,GAAI,CACF,OAAO,MAAM,EAAG,EAChB,MAAO,EAAO,CAEd,MADA,QAAQ,MAAM,sBAAsB,SAAY,EAAK,WAAW,gBAAiB,CAAK,EAChF,IAAI,EAAa,IAAI,EAAK,WAAW,8BAA+B,GAAG,GAGnF,CAEA,SAAS,EAAW,CAAC,EAA4E,CAC/F,GAAI,GAAQ,OAAS,QACnB,MAAU,MACR,0LACF,EAKJ,SAAS,EAAY,CAAC,EAAe,EAAY,EAAiB,CAChE,GAAI,IAAW,SAAW,OAAO,IAAW,WAC1C,MAAU,MAAM,GAAG,MAAU,kCAAmC,EAIpE,SAAS,EAAc,CAAC,EAAuC,CAC7D,OAAQ,OACD,MACH,OAAO,OAAO,OAAO,CAAE,aAAc,EAAc,CAAC,MACjD,SACH,OAAO,OAAO,OAAO,CAAE,gBAAiB,EAAc,CAAC,MACpD,MACH,OAAO,OAAO,OAAO,CAAE,eAAgB,EAAc,CAAC,UAEtD,OAAO,OAAO,OAAO,CAAC,CAAC,GAe7B,SAAS,EAAc,CACrB,EACA,EACA,EACiC,CACjC,IAAM,EAAQ,EAAO,aAAa,EAC5B,EAAmB,IACnB,GAAQ,CAAC,EACb,KAAM,SACN,WAAY,IAAM,GAAM,YAAc,CAAC,KAAO,EAAM,UAAW,EAC/D,SAAU,CAAC,GAAI,GAAM,UAAY,CAAC,EAAI,GAAI,EAAM,UAAY,CAAC,CAAE,EAC/D,qBAAsB,EACxB,EAEM,EAAY,CAAC,IAAmB,CACpC,GAAI,OAAO,IAAU,UAAY,IAAU,MAAQ,MAAM,QAAQ,CAAK,EACpE,MAAO,CAAE,GAAI,GAAgB,OAAQ,CAAC,oBAAoB,CAAE,EAE9D,IAAM,EAAmB,CAAC,EACtB,EAA+B,CAAC,EACpC,GAAI,EAAO,CACT,IAAM,EAAM,EAAM,UAAU,CAAK,EACjC,GAAI,EAAI,KAAO,GAAO,EAAO,KAAK,GAAG,EAAI,MAAM,EAC1C,OAAM,IAAK,EAAI,KAAM,EAE5B,IAAM,EAAO,EAAO,UAAU,CAAK,EACnC,GAAI,EAAK,KAAO,GAAO,EAAO,KAAK,GAAG,EAAK,MAAM,EAC5C,OAAM,IAAK,KAAQ,EAAK,KAAM,EACnC,OAAO,EAAO,OAAS,EAAI,CAAE,GAAI,GAAgB,QAAO,EAAI,CAAE,GAAI,GAAe,MAAO,CAAI,GAG9F,MAAO,CACL,aAAc,IAAM,EACpB,YACA,KAAK,CAAC,EAAgB,CACpB,IAAM,EAAS,EAAU,CAAK,EAC9B,GAAI,EAAO,KAAO,GAAO,MAAU,MAAM,EAAO,OAAO,KAAK,IAAI,CAAC,EACjE,OAAO,EAAO,MAElB,EAQF,SAAS,EAAa,CAAC,EAAc,EAAkB,EAAuB,CAC5E,IAAM,EAAQ,EAAM,WAAa,KAAO,EAAM,WAAa,IAAM,EAAM,MAAM,GAAG,EAAI,CAAC,CAAK,EAC1F,GAAI,EAAM,KAAK,CAAC,IAAS,IAAS,KAAO,IAAS,IAAI,EACpD,MAAM,IAAI,EAAa,IAAI,gCAAoC,EAAM,aAAa,KAAQ,EAE5F,OAAO,EAAM,IAAI,kBAAkB,EAAE,KAAK,GAAG,EAS/C,SAAS,EAAW,CAAC,EAAgB,EAAa,EAAgB,CAChE,GAAI,IAAU,QAAa,IAAU,KAAM,OAC3C,GAAI,MAAM,QAAQ,CAAK,EAAG,CACxB,QAAW,KAAQ,EAAO,GAAY,EAAM,EAAK,CAAI,EACrD,OAEF,EAAK,OAAO,EAAK,OAAO,IAAU,SAAW,KAAK,UAAU,CAAK,EAAI,OAAO,CAAK,CAAC,EAIpF,SAAS,EAAO,CAAC,EAAuC,CACtD,IAAM,EAAS,IAAI,gBACb,EAAM,CAAC,EAAa,IAAmB,CAC3C,GAAI,IAAU,QAAa,IAAU,KAAM,OAC3C,GAAI,MAAM,QAAQ,CAAK,EAAG,CACxB,QAAW,KAAQ,EAAO,EAAI,EAAK,CAAI,EACvC,OAEF,EAAO,OAAO,EAAK,OAAO,IAAU,SAAW,KAAK,UAAU,CAAK,EAAI,OAAO,CAAK,CAAC,GAEtF,QAAY,EAAK,KAAU,OAAO,QAAQ,CAAI,EAAG,EAAI,EAAK,CAAK,EAC/D,OAAO,EAAO,SAAS,EAGzB,eAAe,EAAY,CAAC,EAAc,EAAsC,CAC9E,GAAI,EAAS,QAAU,KAAO,EAAS,OAAS,IAAK,CACnD,IAAM,EAAO,EAAS,QAAQ,IAAI,cAAc,EAChD,GAAI,GAAQ,CAAC,GAAS,KAAK,CAAI,EAAG,CAChC,IAAM,GAAQ,MAAM,EAAS,YAAY,GAAG,WAC5C,MAAO,IAAI,oBAAuB,cAAiB,yBAErD,IAAM,EAAO,MAAM,EAAS,KAAK,EACjC,GAAI,IAAS,GAAI,OAAO,KACxB,GAAI,EAAK,OAAS,EAChB,MAAO,GAAG,EAAK,MAAM,EAAG,CAAe,mBAAa,QAAsB,EAAK,qBAEjF,GAAI,CACF,OAAO,KAAK,MAAM,CAAI,EACtB,KAAM,CACN,OAAO,GAGX,IAAM,EAAO,MAAM,EAAS,KAAK,EACjC,GAAI,EAAS,QAAU,KAAO,EAAS,OAAS,IAAK,CACnD,IAAM,EAAQ,EAAK,OAAS,GAAiB,GAAG,EAAK,MAAM,EAAG,EAAc,UAAM,EAClF,MAAM,IAAI,EACR,IAAI,uBAA0B,EAAS,SAAS,EAAQ,KAAK,IAAU,MACvE,EAAS,MACX,EAEF,GAAI,EAAS,OAAS,IAGpB,QAAQ,MACN,eAAe,eAAkB,EAAS,SAAS,EAAS,QAAQ,IAAI,UAAU,EAAI,OAAO,EAAS,QAAQ,IAAI,UAAU,IAAM,sCACpI,EAEF,MAAM,IAAI,EAAa,IAAI,2BAA+B,EAAS,MAAM,ECloB3E,SAAS,CAAa,CAAC,EAAoB,EAAgB,CACzD,IAAM,EAAQ,EAAO,IAAO,CAAG,EAC/B,GAAI,CAAC,EACH,MAAU,MACR,YAAY,qGACd,EAEF,OAAO,EAQF,MAAM,WAA6B,CAAgB,CACxD,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IACE,IAAI,EACF,EAA2B,KAAK,IAAI,OAAQ,WAAW,CACzD,CACJ,EAEA,KAAK,IAAI,UACP,EACA,IACE,IAAI,EACF,EAA4B,KAAK,IAAI,OAAQ,YAAY,CAC3D,CACJ,EAIA,KAAK,IAAI,UACP,EACA,IACE,IAAI,EACF,CAAE,IAAK,KAAK,IAAI,KAAK,CAAkB,EAAG,KAAM,KAAK,IAAI,KAAK,CAAmB,CAAE,EACnF,CACE,IAAK,EAA2B,KAAK,IAAI,OAAQ,WAAW,EAC5D,KAAM,EAA4B,KAAK,IAAI,OAAQ,YAAY,EAC/D,QAAS,KAAK,IAAI,OAAO,IAA+B,eAAe,CACzE,CACF,CACJ,EAIA,KAAK,IAAI,UAAU,EAAa,IAAM,CACpC,IAAM,EAAS,KAAK,IAAI,OAAO,IAAgC,WAAW,EAC1E,GAAI,CAAC,GAAQ,OACX,MAAU,MACR,yFACF,EAEF,OAAO,IAAI,EAAY,IAAI,EAAO,OAAU,KAAK,IAAI,KAAK,CAAkB,CAAC,EAC9E,EAYH,IAAI,EAAG,CAKL,GAJA,KAAK,IAAI,KAAK,CAAkB,EAChC,KAAK,IAAI,KAAK,CAAmB,EAEjC,KAAK,IAAI,KAAK,CAAY,EACtB,KAAK,IAAI,OAAO,IAAI,WAAW,EACjC,KAAK,IAAI,KAAK,CAAW,EAG/B",
-  "debugId": "D08A5EEDD7782BCE64756E2164756E21",
+  "mappings": ";8yBAsCA,SAAsB,JAAO,LAAC,JAAc,JAAuB,LAAC,JAAkB,LACpF,HAAI,LAQF,HAAI,CAAE,MAAM,EAAI,UAAU,KAAK,CAAG,EAChC,OAEF,MAAO,EAAO,CAMd,QAAQ,MACN,2CAA2C,EAAI,QAC/C,CACF,EACA,OAGF,IAAM,EAAU,GAAa,EAAI,kBAAkB,EACnD,GAAI,CAAC,EAAI,aAAe,IAAY,OAAW,CAC7C,MAAM,EAAS,CAAG,EAClB,OAKF,IAAI,EACJ,GAAI,CAEF,GADA,EAAQ,EAAQ,QAAQ,GAAK,GAAa,EACtC,EAAI,YAAa,CACnB,IAAM,EAAS,KAAK,OAAO,EAAQ,KAAO,KAAK,IAAI,GAAK,KAAM,EAC9D,GAAI,CAAE,MAAM,EAAM,MAAM,QAAQ,kBAAkB,EAAI,OAAQ,CAAM,EAAI,QAE1E,MAAO,EAAO,CACd,QAAQ,MAAM,wCAAwC,EAAI,oBAAqB,CAAK,EACpF,OAEF,GAAI,IAAY,OAAW,CACzB,MAAM,EAAS,CAAG,EAClB,OAGF,GAAI,CACF,MAAM,EAAM,IAAI,aAAa,EAAI,OAAQ,CAAE,IAAK,CAAQ,EAAG,CAAC,IAAS,EAAS,EAAK,CAAI,CAAC,EACxF,MAAO,EAAO,CACd,GAAI,aAAiB,EACnB,QAAQ,MACN,YAAY,EAAI,mGAEhB,CACF,EAEA,aAAQ,MAAM,0DAA0D,EAAI,QAAS,CAAK,GAiBhG,IAAM,EAAwB,OAE9B,SAAS,EAAY,CAAC,EAA2D,CAC/E,GAAI,CAAC,EAAQ,OACb,GAAI,IAAW,GAAM,OAAO,EAC5B,OAAO,EAAO,cAAgB,EAGhC,IAAI,EACJ,SAAS,EAAY,EAAG,CAEtB,OADA,IAAkB,IAAI,EAAY,IAAI,CAAiB,EAChD,EAGT,eAAe,CAAQ,CAAC,EAAc,EAAiB,CACrD,GAAI,CACF,MAAM,EAAI,OAAO,KAAK,CAAG,EACzB,MAAO,EAAO,CACd,QAAQ,MAAM,4BAA4B,EAAI,QAAS,CAAK,EAE9D,GAAI,CACF,MAAM,EAAI,SAAS,KAAK,EAAK,CAAI,EACjC,MAAO,EAAO,CACd,QAAQ,MAAM,qBAAqB,EAAI,QAAS,CAAK,EAEvD,GAAI,CACF,MAAM,EAAI,WAAW,KAAK,CAAG,EAC7B,MAAO,EAAO,CACd,QAAQ,MAAM,6BAA6B,EAAI,QAAS,CAAK,GAyB1D,MAAM,CAAU,OACd,OAAQ,YAEP,QAA2B,CAAC,EAC5B,SAQS,SAAW,IAAI,IASxB,QAAU,GAEV,MAER,WAAW,CAAC,EAAkC,CAC5C,KAAK,SAAW,EAAO,QAqBrB,KAAI,EAAqC,CAC3C,MAAO,CAAC,GAAG,KAAK,QAAQ,EAc1B,OAAO,CAAC,EAAgC,CACtC,KAAK,SAAW,EAOlB,QAAQ,CAAC,EAA0B,CACjC,KAAK,MAAQ,EASf,KAAK,CAAC,EAAsB,CAAC,IAAO,EAAG,EAAG,CAExC,GADA,KAAK,QAAU,GACX,KAAK,SAAS,SAAW,EAC3B,OAGF,IAAM,EAAY,WAAW,iBAAmB,IAAI,IAO9C,EAAU,IAAI,IAEpB,QAAW,KAAO,KAAK,SAAU,CAC/B,IAAM,EAAM,IAAI,EAChB,GAAI,CAAC,EAAI,KAAM,CAOb,QAAQ,MACN,oCAA8B,EAAI,MAAQ,sPAK5C,EACA,SAEF,GAAI,CAAC,EAAI,KAAM,CACb,QAAQ,MAAM,0CAA0C,EAAI,MAAM,EAClE,SAEF,IAAM,EAAQ,EAAQ,IAAI,EAAI,IAAI,EAClC,GAAI,IAAU,OAAW,CAOvB,QAAQ,MACN,iCAAiC,EAAI,gBAAU,sBAC5B,EAAI,MAAQ,sGAEjC,EACA,SAEF,EAAQ,IAAI,EAAI,KAAM,EAAI,MAAQ,oBAAoB,EAItD,EAAS,IAAI,EAAI,IAAI,GAAG,KAAK,EAK7B,IAAM,EAAS,IAAI,KAAK,EAAI,KAAM,IAAM,CACtC,GAAI,KAAK,QAAS,OAClB,IAAM,EAAQ,KAAK,MACnB,OAAO,KAAK,MAAM,EAAI,KAAM,IAAM,EAAI,IAAM,GAAQ,EAAK,CAAE,OAAM,CAAC,CAAC,CAAC,EACrE,EAED,EAAS,IAAI,EAAI,KAAM,CAAM,EAC7B,KAAK,QAAQ,KAAK,CAAM,GAQ5B,IAAI,EAAG,CACL,KAAK,QAAU,GACf,QAAW,KAAU,KAAK,QACxB,EAAO,KAAK,EAEd,KAAK,QAAU,CAAC,OAeZ,MAAK,CAAC,EAAY,IAAwC,CAC9D,KAAK,KAAK,EAEV,IAAI,EACE,EAAW,IAAI,QAAc,CAAC,IAAY,CAC9C,GAAI,IAAc,IAAU,EAAQ,WAAW,EAAS,CAAS,EAClE,EAOD,OANA,MAAM,QAAQ,KAAK,CACjB,QAAQ,WAAW,CAAC,GAAG,KAAK,SAAS,OAAO,CAAC,EAAE,IAAI,CAAC,IAAM,EAAE,IAAI,CAAC,EACjE,CACF,CAAC,EACD,aAAa,CAAK,EAEX,CACL,WAAY,CAAC,GAAG,KAAK,SAAS,OAAO,CAAC,EAAE,IAAI,CAAC,KAAO,IAAK,EAAE,IAAK,EAAE,CACpE,KAIE,QAAO,EAAW,CACpB,OAAO,KAAK,SAAS,KAGf,KAAK,CAAC,EAAc,EAAuC,CACjE,IAAM,EAAM,CAAC,EAIP,EAAO,QAAQ,QAAQ,EAC1B,KAAK,CAAI,EACT,QAAQ,IAAM,KAAK,SAAS,OAAO,CAAG,CAAC,EAE1C,OADA,KAAK,SAAS,IAAI,EAAK,CAAE,KAAM,CAAE,OAAM,UAAW,IAAI,IAAO,EAAG,MAAK,CAAC,EAC/D,EAEX,CCzXA,uBAAS,wBAuBT,IAAM,GAAmB,IAEnB,GAAe,CAAC,IACpB,KAAK,IAAI,GAAkB,KAAK,MAAM,EAAY,EAAE,CAAC,EAEhD,MAAM,WAA6B,CAAgB,CACxD,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IACE,IAAI,EAAa,KAAK,IAAI,OAAO,IAAiB,QAAS,CAAC,CAAC,EAAG,CAC9D,YAAa,KAAK,GACpB,CAAC,CACL,EAEA,KAAK,IAAI,UAAU,EAAa,IAAM,KAAK,IAAI,KAAK,CAAY,EAAE,KAAK,OA0BnE,KAAI,EAAG,CACX,IAAM,EAAQ,KAAK,IAAI,OAAO,IAAiB,QAAS,CAAC,CAAC,EAC1D,GAAI,EAAM,OAAS,OAAW,OAE9B,IAAQ,WAAY,EAAa,GAAoB,EAAG,CAAK,EAC7D,KAAK,IAAI,KAAK,CAAY,EAAE,QAAQ,MAAM,GAAa,CAAO,CAAC,OA2B3D,SAAQ,CAAC,EAAiC,CAE9C,GAAI,CAAC,KAAK,IAAI,SAAS,CAAY,EAAG,OACtC,IAAM,EAAQ,KAAK,IAAI,KAAK,CAAY,EACxC,GAAI,EAAM,QAAU,EAClB,QAAQ,IACN,qCAAqC,EAAM,gCAC7C,EAEF,IAAM,EAAS,GAAS,WAChB,cAAe,MAAM,EAAM,MACjC,IAAW,OAAY,IAAW,KAAK,IAAI,EAAG,EAAS,GAAa,CAAM,CAAC,CAC7E,EACA,GAAI,EAAW,OAAS,EAKtB,OAJA,QAAQ,MACN,iDACE,EAAW,IAAI,CAAC,IAAQ,GAAG,EAAI,SAAS,EAAI,KAAK,EAAE,KAAK,IAAI,CAChE,EACO,CAAE,UAAW,EAAK,EAG/B,CAwBO,SAAS,EAAsB,CAAC,EAA0B,CAE/D,GADA,GAAqB,CAAW,EAC5B,mBAAyB,aAAc,OAAO,GAAiB,CAAW,EAC9E,GAAI,GAAiB,CAAW,EAAG,OACnC,GAAI,CAAC,GAAoB,EAAG,OAC5B,GAAI,CAAC,EAAY,MAAM,CAAY,EAAG,OACtC,EAAY,KAAK,CAAY,EAAE,MAAM,EAGvC,SAAS,EAAgB,CAAC,EAA0B,CAClD,IAAM,EAAS,EAAY,OAAO,IAAiB,QAAS,CAAC,CAAC,EAAE,QAAU,SAC1E,OAAO,IAAW,UAAY,aAAkB,GAWlD,SAAS,EAAkB,CAAC,EAA0B,CACpD,GAAI,GAAiB,CAAW,EAAG,MAAO,GAE1C,GAAI,OADW,EAAY,OAAO,IAAiB,QAAS,CAAC,CAAC,EAAE,SAC1C,YAAc,CAAC,EAAY,MAAM,CAAY,EAAG,MAAO,GAC7E,GAAI,CACF,MAAO,CAAC,EAAY,KAAK,CAAY,EAAE,QACvC,KAAM,CACN,MAAO,IAgBX,SAAS,EAAoB,CAAC,EAA0B,CACtD,IAAM,EAAQ,QAAQ,IAAI,iBAC1B,GAAI,IAAU,QAAa,GAAc,EAAG,OAC5C,GAAI,QAAQ,IAAI,WAAa,QAAa,CAAC,GAAc,OACzD,GAAI,GAAkB,EAAG,CACvB,GAAI,CAAC,GAAmB,CAAW,EAAG,OACtC,QAAQ,KACN,2QAIF,EACK,QAAI,EAAM,KAAK,EAAE,YAAY,IAAM,KACxC,QAAQ,KACN,4BAA4B,4GAE9B,EA+BJ,SAAS,EAAgB,CAAC,EAA0B,CAClD,IAAM,EAAW,WAAW,eAC5B,GAAI,CAAC,EAAU,OAGf,GAFA,WAAW,eAAiB,OACvB,EAAS,KAAK,EACf,EAAY,MAAM,CAAY,EAAG,EAAY,KAAK,CAAY,EAAE,MAAM,EC1OrE,MAAM,WAA4B,CAAgB,CACvD,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IAAM,IAAI,EAAY,KAAK,IAAI,OAAO,IAAgB,OAAQ,CAAC,CAAC,CAAC,CACnE,EAEJ,CCIA,IAAM,GAAmB,IAEnB,GAAe,CAAC,IAAsB,KAAK,IAAI,GAAkB,KAAK,MAAM,EAAY,EAAE,CAAC,EAE1F,MAAM,WAAgC,CAAgB,CAC3D,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IACE,IAAI,EACF,EACE,EAAuB,EACvB,KAAK,IAAI,OAAO,IAAoB,WAAY,CAAC,CAAC,CACpD,CACF,CACJ,OA0BI,KAAI,EAAG,CACX,IAAM,EAAY,KAAK,IAAI,KAAK,CAAS,EACnC,EAAQ,KAAK,IAAI,OAAO,IAAoB,WAAY,CAAC,CAAC,EAEhE,GAAI,EAAM,OAAS,OAAW,CAC5B,IAAQ,WAAY,EAAa,EAAuB,EAAG,CAAK,EAChE,EAAU,QAAQ,MAAM,GAAiB,CAAO,CAAC,EAqBnD,GAAI,QAAQ,IAAI,mBAAqB,IAAK,OAE1C,IAAM,EAAM,KAAK,IAGjB,GAAI,EAAI,MAAM,CAAW,EAAG,EAAU,SAAS,IAAM,EAAI,KAAK,CAAW,CAAC,EAC1E,EAAU,MAAM,CAAC,IAAO,GAAc,IAAI,EAAK,CAAE,CAAC,OAqB9C,SAAQ,CAAC,EAAiC,CAG9C,GAAI,CAAC,KAAK,IAAI,SAAS,CAAS,EAAG,OACnC,IAAM,EAAY,KAAK,IAAI,KAAK,CAAS,EACzC,GAAI,EAAU,QAAU,EACtB,QAAQ,IAAI,qCAAqC,EAAU,+BAA+B,EAE5F,IAAM,EAAS,GAAS,WAChB,cAAe,MAAM,EAAU,MACrC,IAAW,OAAY,IAAW,KAAK,IAAI,EAAG,EAAS,GAAa,CAAM,CAAC,CAC7E,EACA,GAAI,EAAW,OAAS,EAOtB,OANA,QAAQ,MACN,+CACE,EACG,IAAI,CAAC,IAAS,GAAG,EAAK,iBAAiB,EAAK,UAAU,YAAY,IAAI,EACtE,KAAK,IAAI,CAChB,EACO,CAAE,UAAW,EAAK,EAG/B,CClHO,MAAM,UAAkC,EAAkB,CAC1C,UAArB,WAAW,CAAU,EAAoB,cAAe,CACtD,MAAM,EADa,oBAKjB,UAAS,EAAY,CACvB,OAAgB,GAAI,KAAK,SAAS,OAG9B,KAAI,EAAuC,CAC/C,GAAI,CAAC,KAAK,UACR,MAAM,IAAI,EAAyB,KAAK,SAAS,EAGnD,IAAM,EAAiB,EAAS,KAAK,SAAS,EAM9C,OAAO,MAAM,EAAM,SAAS,IAAM,EAAM,SAAS,CAAC,OAiB9C,MAAK,CAAC,EAAa,EAAiB,EAAqD,CAC7F,GAAI,CAAC,KAAK,UACR,MAAM,IAAI,EAAyB,KAAK,SAAS,EAGnD,IAAM,EAAiB,EAAS,KAAK,SAAS,EACxC,EAAgB,KAAK,eAAe,CAAK,EACzC,EAAgC,CAAE,QAAO,EAC/C,GAAI,EAAe,EAAK,UAAY,EAAK,MAazC,OARA,MAAM,EAAM,SAAS,IACnB,EAAM,OAAO,CACX,MAAO,CAAE,KAAI,EACb,OAAQ,CAAE,SAAQ,CAAK,EACvB,OAAQ,CACV,CAAC,CACH,EAEO,CAAE,eAAc,EAGjB,cAAc,CAAC,EAAqB,CAC1C,IAAM,EAAQ,GAAO,SAAS,QAAQ,UACtC,OAAO,IAAU,QAAa,EAAM,OAAS,SAEjD,CCxBO,SAAS,EAAoB,CAAC,EAAwC,CAC3E,OAAO,EAGF,SAAS,EAAsB,EAMpC,CACA,MAAO,CACL,SAAU,OACV,QAAS,GACT,OAAQ,IAAI,EACZ,MAAO,cACP,IAAK,GACL,QAAS,OACT,WAAY,OACZ,eAAgB,GAClB,ECzEK,MAAM,WAAgC,CAAgB,CAC3D,QAAQ,EAAG,CACT,KAAK,IAAI,UAAU,EAAgB,IAAM,CACvC,IAAM,EAAW,KAAK,IAAI,OAAO,IAAoB,WAAY,CAAC,CAAC,EAC7D,EAAS,EAAa,GAAuB,EAAG,CAAQ,EAkB9D,GAAI,GAAU,QAAU,QAAa,GAAU,SAAW,OACxD,EAAO,OAAS,IAAI,EAA0B,EAAS,KAAK,EACvD,QACL,GAAU,QAAU,QACpB,EAAS,kBAAkB,GAC3B,EAAS,OAAO,YAAc,EAAS,MAEvC,EAAI,QACF,yCAAyC,EAAS,kCAAkC,EAAS,OAAO,8DACtG,EAGF,OAAO,IAAI,EAAe,EAAQ,CAAC,IAAY,EAAI,QAAQ,CAAO,CAAC,EACpE,OAGG,KAAI,EAAG,CACX,IAAM,EAAW,KAAK,IAAI,KAAK,CAAc,EAC7C,GAAI,CAAC,EAAS,OAAO,QAAS,OAM9B,GAAI,CACF,MAAM,EAAS,QAAQ,EACvB,MAAO,EAAO,CACd,EAAI,MACF,kDACE,aAAiB,MAAQ,EAAM,QAAU,OAAO,CAAK,GAEzD,GAGN,CC3DO,MAAM,WAA4B,CAAgB,CACvD,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IAAM,IAAI,EAAY,KAAK,IAAI,OAAO,IAAgB,OAAQ,CAAC,CAAC,CAAC,CACnE,EAEJ,CCiBO,SAAS,EAAe,CAAC,EAA8B,CAC5D,MAAO,YAAY,IAmBd,SAAS,EAAc,CAC5B,EACA,EACe,CACf,GAAmB,CAAQ,EAE3B,IAA0B,YAApB,EACkB,QAAlB,EACoB,OAApB,GADS,EAET,EAAU,EAAS,MAAM,KAEzB,EAAM,cAAc,EAAI,CAC5B,YAAc,EACd,QAAU,EACV,OAAS,OAEH,IAAG,IAAI,EAAoB,CAC/B,IAAO,EAAW,GAAQ,GAAY,CAAO,EACvC,EAAQ,EAAI,CAAY,EAAE,UAAU,EAAW,CAAI,EACzD,MAAM,IAAI,EAAS,EAAE,OAAO,CAAK,EA6BnC,MAAM,CAAC,EAAc,CACnB,QAAQ,MACN,gBAAgB,EAAS,6BAA6B,kDACR,iEAE9C,CACF,EAGF,YAAY,CAAC,EAAc,CACzB,QAAQ,MACN,gBAAgB,EAAS,gCAAgC,iBACxC,4FAEjB,CACF,EAEJ,EAoBA,OALA,OAAO,eAAe,EAAK,OAAQ,CACjC,MAAO,GAAgB,EAAS,IAAI,EACpC,SAAU,EACZ,CAAC,EAEM,EAoBT,SAAS,EAAkB,CAAC,EAA+B,CACzD,GAAI,OAAO,yBAAyB,EAAU,MAAM,GAAG,SAAU,OAEjE,MAAU,MACR,gBAAgB,EAAS,8GAEvB,0EACA,uDAAuD,EAAS,QACpE,EAmBF,SAAS,EAAW,CAAC,EAAyC,CAC5D,OAAQ,OAAO,EAAQ,KAAO,SAAW,EAAU,EAAQ,GClHtD,MAAM,CAAa,OACjB,OAAQ,SAGP,UAA4C,CAAC,EAW7C,OAAqC,CAAC,EAMtC,UAAY,IAAI,IAShB,mBAAqB,IAAI,IAExB,OAET,WAAW,CAAC,EAAsB,CAAC,EAAG,CACpC,KAAK,OAAS,EAAa,EAAoB,EAAG,CAAM,EACxD,KAAK,aAAa,KAAK,OAAO,SAAS,EA0BzC,YAAY,CAAC,EAA4B,CACvC,KAAK,OAAO,UAAY,EAExB,KAAK,UAAY,CAAC,EAClB,KAAK,OAAS,CAAC,EACf,IAAM,EAAU,IAAI,IAEpB,QAAW,KAAY,EAAW,CAOhC,GAAI,CAAC,EAAS,MAAO,CACnB,QAAQ,MACN,YAAY,EAAS,sJAGvB,EACA,SASF,GAAI,EAAQ,IAAI,EAAS,IAAI,EAAG,CAC9B,QAAQ,MACN,kCAAkC,EAAS,6BACzC,kIAEJ,EACA,SAEF,EAAQ,IAAI,EAAS,IAAI,EAUzB,IAAM,EAAO,EAAS,MAAM,KACtB,EAAW,IAAI,EAErB,KAAK,OAAO,KAAU,EAAS,OAC9B,KAAK,UAAU,KAAU,CAAC,GAAG,KAAK,CACjC,WACA,IAAK,EAAS,OAAS,GAAe,EAAU,CAAQ,EAAI,IAC9D,CAAC,MAcD,mBAAkB,EAAiC,CACrD,OAAO,OAAO,OAAO,KAAK,SAAS,EAChC,KAAK,EACL,QAAQ,EAAG,SAAW,EAAM,CAAC,CAAG,EAAI,CAAC,CAAE,KAcxC,oBAAmB,EAAiC,CACtD,MAAO,CAAC,GAAG,KAAK,OAAO,SAAS,EAgBlC,QAAQ,CAAC,EAAc,EAAiC,CACtD,GAAI,KAAK,cAAc,EAAO,EAAM,EAAK,EAAG,OACvC,KAAK,aAAa,EAAO,CAAI,OAa9B,gBAAe,CACnB,EACA,EACe,CACf,GAAI,KAAK,cAAc,EAAO,EAAM,EAAI,EAAG,OAC3C,OAAO,KAAK,aAAa,EAAO,CAAI,EAwB9B,aAAa,CACnB,EACA,EACA,EACS,CAKT,IAAQ,OAAM,eAAgB,EAAM,YAIpC,GAAI,CAAC,EAAa,MAAO,GAEzB,IAAM,EAAW,GAAiB,IAAM,KAAK,aAAa,EAAO,CAAI,CAAC,EACtE,GAAI,GAAY,EAAS,KAAK,uBAAuB,CAAI,EACzD,OAAO,OAkEO,aAAY,CAC1B,EACA,EACe,CACf,IAAM,EAAQ,EAAM,YAAiC,KAC/C,EAAW,KAAK,UAAU,GAEhC,GAAI,CAAC,GAAU,OAAQ,CACrB,KAAK,uBAAuB,CAAI,EAChC,OAGF,QAAa,SAAU,EAAU,SAAS,EAAU,CAClD,GAAI,EAAK,CACP,KAAK,QAAQ,EAAK,EAAU,EAAM,CAAI,EACtC,SAGF,GAAI,CACF,MAAM,IAAI,EAAS,EAAE,OAAO,CAAK,EACjC,MAAO,EAAO,CACd,QAAQ,MACN,gBAAgB,EAAS,6BAA6B,UACpD,uEACF,CACF,IAsBN,SAAS,CAAC,EAAmB,EAA2B,CAAC,EAAU,CACjE,IAAM,EAAa,KAAK,OAAO,GAE/B,GAAI,CAAC,EACH,MAAU,MACR,6BAA6B,uKAG3B,wEACA,+FAC6B,OACjC,EAGF,OAAO,IAAI,EAAW,GAAG,CAAI,EAkBvB,OAAO,CACb,EACA,EACA,EACA,EACA,CACA,GAAI,IAAS,OAAW,CACtB,QAAQ,MACN,gBAAgB,EAAS,uBAAuB,mKAGjB,sBAC1B,2CACP,EACA,OAGF,IAAM,EAAS,CAAC,IACd,QAAQ,MACN,gBAAgB,EAAS,gCAAgC,kFAGzD,CACF,EAKF,GAAI,CAIF,EAAI,CAAY,EACb,KAAK,EAAK,KAAK,UAAU,CAAC,EAAW,CAAI,CAAC,EAAG,CAAE,cAAe,EAAM,CAAC,EACrE,MAAM,CAAM,EACf,MAAO,EAAO,CACd,EAAO,CAAK,GAmBR,sBAAsB,CAAC,EAAc,CAC3C,GAAI,mBAAyB,aAAc,OAC3C,GAAI,KAAK,mBAAmB,IAAI,CAAI,EAAG,OACvC,KAAK,mBAAmB,IAAI,CAAI,EAEhC,QAAQ,KACN,UAAU,2DACL,4DACH,oEACA,uIAGJ,EAGM,sBAAsB,CAAC,EAAc,CAC3C,GAAI,mBAAyB,aAAc,OAC3C,GAAI,KAAK,UAAU,IAAI,CAAI,EAAG,OAC9B,KAAK,UAAU,IAAI,CAAI,EAEvB,QAAQ,KACN,UAAU,gLAEgD,gBAChD,+BAAkC,yBAC9C,EAEJ,CChgBO,MAAM,WAA6B,CAAgB,CACxD,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IAAM,IAAI,EAAa,KAAK,IAAI,OAAO,IAAiB,SAAU,CAAC,CAAC,CAAC,CACvE,OA2CI,KAAI,EAAG,CACX,IAAM,EAAU,KAAK,IAAI,KAAK,CAAY,EACpC,EAAQ,KAAK,IAAI,OAAO,IAAiB,SAAU,CAAC,CAAC,EAE3D,GAAI,EAAM,YAAc,OAAW,CACjC,IAAQ,gBAAiB,EAAa,EAAoB,EAAG,CAAK,EAClE,EAAQ,aAAa,MAAM,GAAkB,CAAY,CAAC,EAM5D,IAAM,EAAO,EAAQ,mBACrB,GAAI,EAAK,SAAW,EAAG,OAEvB,IAAM,EAAQ,KAAK,IAAI,KAAK,CAAY,EACxC,QAAW,KAAO,EAChB,EAAM,YAAY,CAAG,EAG3B,CCvEO,MAAM,WAAkC,CAAgB,CAC7D,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IACE,IAAI,EACF,KAAK,IAAI,OAAO,IAAsB,aAAc,CAAC,CAAC,CACxD,CACJ,EAEJ,CCVO,MAAM,WAA6B,CAAgB,CACxD,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IAAM,IAAI,EAAa,KAAK,IAAI,OAAO,IAAiB,QAAS,CAAC,CAAC,CAAC,CACtE,EAEJ,CCPO,MAAM,WAAgC,CAAgB,CAC3D,QAAQ,EAAG,CACT,KAAK,IAAI,SAAS,EAAU,IAAI,CAAU,EAE9C,CCEO,SAAS,EAAe,CAAC,EAA8B,CAC5D,OAAO,EAGF,SAAS,EAAiB,EAAwB,CACvD,MAAO,CACL,YAAa,SACb,gBAAiB,IAAM,GACvB,aAAc,IAAM,EACtB,ECdK,MAAM,WAA2B,CAAgB,CACtD,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IACE,IAAI,EACF,EACE,GAAkB,EAClB,KAAK,IAAI,OAAO,IAAe,MAAO,CAAC,CAAC,CAC1C,CACF,CACJ,OAoBI,KAAI,EAAG,CACX,GAAI,CAAC,QAAQ,IAAI,SACf,OAEF,MAAM,KAAK,IAAI,KAAK,CAAU,EAAE,KAAK,EAEzC,CClCO,MAAM,WAAkC,CAAgB,CAC7D,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IACE,IAAI,EACF,EACE,GAAyB,EACzB,KAAK,IAAI,OAAO,IAAsB,aAAc,CAAC,CAAC,CACxD,CACF,CACJ,EAGF,IAAI,EAAG,CAGL,KAAK,IAAI,KAAK,CAAkB,EAAE,uBAAuB,EAE7D,CCTO,SAAS,EAAuB,CACrC,EACmB,CACnB,OAAO,EAGF,SAAS,EAAyB,EAAgC,CACvE,MAAO,CACL,OAAQ,IAAI,GACZ,MAAO,KACP,OAAQ,EACV,ECxBK,MAAM,WAAmC,CAAgB,CAC9D,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IACE,IAAI,EACF,EACE,GAA0B,EAC1B,KAAK,IAAI,OAAO,IAAuB,cAAe,CAAC,CAAC,CAC1D,CACF,CACJ,EAEJ,CCLO,SAAS,EAAiB,CAAC,EAAkC,CAClE,OAAO,EAGF,SAAS,EAAmB,EAAgB,CACjD,MAAO,CACL,IAAK,QAAQ,IAAI,UACjB,QAAS,MACX,EChBK,MAAM,WAA6B,CAAgB,CACxD,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IACE,IAAI,EACF,EACE,GAAoB,EACpB,KAAK,IAAI,OAAO,IAAiB,QAAS,CAAC,CAAC,CAC9C,CACF,CACJ,EAQF,QAAQ,EAAG,CACT,GAAI,CAAC,KAAK,IAAI,SAAS,CAAY,EAAG,OACtC,KAAK,IAAI,KAAK,CAAY,EAAE,MAAM,EAEtC,CC2EO,MAAM,UAAqB,EAAU,CAG/B,OAFX,WAAW,CACT,EACS,EACT,CACA,MAAM,CAAO,EAFJ,cAGT,KAAK,KAAO,eAEhB,CAGA,IAAM,GAAY,wBAGZ,GAAa,qCAOb,GAAiB,KASjB,EAAkB,IAGlB,GAAW,kDA2BV,MAAM,CAAY,CAOJ,iBANZ,OAAQ,aAEE,MAAQ,IAAI,IAE7B,WAAW,CACT,EACiB,EAIjB,CAJiB,kBAKjB,QAAY,EAAM,KAAgB,OAAO,QAAQ,EAAO,QAAU,CAAC,CAAC,EAClE,KAAK,MAAM,IAAI,EAAM,KAAK,KAAK,EAAM,CAAW,CAAC,EASrD,IAAI,CAAC,EAAmB,EAA6C,CAEnE,OADA,GAAY,CAAM,EACX,KAAK,YAAY,CAAM,EAQhC,WAAW,CAAC,EAA6C,CACvD,IAAM,EAA2B,CAAC,EAClC,QAAa,gBAAgB,KAAK,MAAM,OAAO,EAAG,CAChD,GAAI,GAAQ,OAAS,CAAC,EAAO,MAAM,SAAS,EAAW,IAAI,EAAG,SAC9D,GAAI,GAAQ,MAAQ,CAAC,EAAW,KAAK,KAAK,CAAC,IAAQ,EAAO,KAAK,SAAS,CAAG,CAAC,EAAG,SAC/E,EAAI,KAAK,CAAU,EAErB,OAAO,OAqBH,QAAO,CACX,EACA,EACA,EACA,EACkB,CAClB,GAAY,CAAM,EAClB,IAAM,EAAO,KAAK,MAAM,IAAI,CAAI,EAChC,GAAI,CAAC,EACH,MAAU,MAAM,wCAAwC,KAAQ,EAElE,IAAQ,cAAe,EAEjB,EAAS,EAAW,YAAY,UAAU,CAAI,EACpD,GAAI,EAAO,KAAO,GAChB,MAAM,IAAI,EAAa,0BAA0B,OAAU,EAAO,OAAO,KAAK,IAAI,GAAG,EAEvF,IAAM,EAAQ,EAAO,MAEf,EAAO,MAAM,KAAK,SAAS,EAAM,EAAO,EAAO,GAAG,GAMhD,KAAM,GAAY,KAAK,WAAW,yBACxC,IAAI,QAAQ,2BAA2B,GAAM,CAC/C,EACA,GAAI,IAAY,EAAW,IACzB,MAAM,IAAI,EAAa,IAAI,qBAAwB,KAAS,GAAG,EAGjE,IAAM,EAAgC,CAAC,EACvC,QAAW,KAAO,EAAK,SACrB,GAAI,EAAM,KAAS,OAAW,EAAK,GAAO,EAAM,GAGlD,IAAI,EACA,EAAQ,GACZ,GAAI,EAAK,WAAW,OAAS,EAC3B,EAAO,MAAM,KAAK,SAAS,EAAM,EAAO,EAAM,CAAG,EAC5C,QAAI,EAAW,SAAW,MAC/B,EAAQ,GAAQ,CAAI,EACf,QAAI,EAAK,SAAS,OAAS,EAChC,EAAO,EAGT,IAAI,EACJ,GAAI,CACF,EAAW,MAAM,KAAK,WAAW,WAC/B,EAAO,IACP,EAAW,OACX,EAAQ,GAAG,KAAQ,IAAU,EAC7B,CACF,EACA,MAAO,EAAO,CAId,MADA,QAAQ,MAAM,2BAA2B,aAAiB,CAAK,EACzD,IAAI,EAAa,IAAI,2BAA+B,GAAG,EAE/D,OAAO,MAAM,GAAa,EAAM,CAAQ,EAKlC,IAAI,CAAC,EAAc,EAAwC,CACjE,GAAI,CAAC,GAAU,KAAK,CAAI,EACtB,MAAU,MACR,eAAe,kKACjB,EAEF,IAAM,EAAQ,eAAe,OAAU,GAAa,UAAU,GAAa,OAC3E,GAAI,EAAE,aAAuB,SAAW,EAAY,mBAAqB,WACvE,MAAU,MACR,eAAe,4DACjB,EAEF,IAAQ,SAAQ,MAAK,QAAS,EAC9B,GAAI,EAAI,WAAW,WAAW,EAC5B,MAAU,MAAM,GAAG,2CAA+C,EAGpE,IAAM,EAAQ,KAAK,WAAW,WAAW,KAAO,GAChD,GAAI,CAAC,EACH,MAAU,MACR,GAAG,qFACL,EAKF,IAAM,EAAsB,CAAC,GAAG,EAAI,SAAS,EAAU,CAAC,EAAE,IAAI,GAAI,EAAO,MAAe,CACtF,KAAM,EACN,UACF,EAAE,EACI,EAAW,EAAK,QAAU,CAAC,EACjC,QAAW,KAAS,EAClB,GAAI,EAAE,EAAM,QAAQ,GAClB,MAAU,MACR,GAAG,sBAA0B,EAAM,0CACrC,EAGJ,QAAY,EAAK,KAAW,OAAO,QAAQ,CAAQ,EAAG,CACpD,GAAI,CAAC,EAAO,KAAK,CAAC,IAAU,EAAM,OAAS,CAAG,EAC5C,MAAU,MAAM,GAAG,OAAW,yCAA2C,EAE3E,GAAa,EAAO,UAAU,IAAO,CAAM,EAG7C,IAAI,EAAqB,CAAC,EACtB,EACJ,GAAI,EAAK,MAAO,CAEd,GADA,EAAO,EAAK,MAAM,aAAa,EAC3B,EAAK,OAAS,UAAY,CAAC,EAAK,WAClC,MAAU,MACR,GAAG,oEACL,EAEF,EAAW,OAAO,KAAK,EAAK,UAAU,EAGxC,IAAM,EAAa,OAAO,QAAQ,EAAK,OAAS,CAAC,CAAC,EAAE,IAAI,EAAE,EAAO,MAAa,CAC5E,KAAM,EACN,QACF,EAAE,EACF,QAAW,KAAQ,EACjB,GAAa,EAAO,SAAS,EAAK,OAAQ,EAAK,MAAM,EAEvD,GAAI,EAAW,OAAS,GAAK,IAAW,MACtC,MAAU,MAAM,GAAG,uCAA2C,EAGhE,IAAM,EAAoC,CAAC,EACrC,EAAe,IAAI,IACzB,QAAW,KAAS,EAAQ,CAC1B,IAAM,EAAS,EAAS,EAAM,MAC9B,GAAI,IAAW,QAAS,CACtB,IAAM,EAAQ,EAAE,OAAO,EAAE,SAAS,SAAS,EAAM,2BAA2B,EAC5E,EAAO,EAAM,MACX,EAAM,WAAa,KAAO,EAAM,WAAa,IAAM,EAAM,SAAS,EAAI,EAExE,OAAa,IAAI,EAAM,KAAM,CAAM,EAGvC,QAAW,KAAQ,EACjB,GAAI,EAAK,SAAW,QAClB,EAAO,EAAK,MAAQ,EACjB,OAAO,EACP,SACC,mHACF,EAKN,IAAM,EAAW,CAAC,GAAG,OAAO,KAAK,CAAM,EAAG,GAAG,EAAW,IAAI,CAAC,IAAS,EAAK,IAAI,CAAC,EAChF,QAAW,KAAO,IAAI,IAAI,CAAQ,EAChC,GAAI,EAAS,SAAS,CAAG,EACvB,MAAU,MACR,GAAG,OAAW,iFAChB,EAIJ,MAAO,CACL,WAAY,OAAO,OAAO,CACxB,OACA,YAAa,EAAK,YAClB,SACA,MACA,YAAa,GAAe,EAAK,MAAO,EAAM,EAAE,OAAO,CAAM,CAAC,EAC9D,YAAa,GAAe,CAAM,EAClC,KAAM,OAAO,OAAO,CAAC,GAAI,EAAK,MAAQ,CAAC,CAAE,CAAC,EAC1C,iBAAkB,EAAK,mBAAqB,MACxC,EAAM,OAAS,CAAE,OAAQ,EAAM,MAAO,EAAI,CAAC,CACjD,CAAC,EACD,SACA,eACA,aACA,UACF,OAKY,SAAQ,CACpB,EACA,EACA,EACiB,CACjB,IAAI,EAAO,EAAK,WAAW,IAC3B,QAAW,KAAS,EAAK,OAAQ,CAC/B,IAAM,EAAS,EAAK,aAAa,IAAI,EAAM,IAAI,EAC3C,EACJ,GAAI,GAEF,GADA,EAAQ,MAAM,KAAK,KAAK,EAAM,cAAc,EAAM,QAAS,IAAM,EAAO,CAAG,CAAC,EACxE,IAAU,QAAa,IAAU,MAAQ,IAAU,GAIrD,MAHA,QAAQ,MACN,8BAA8B,EAAM,aAAa,EAAK,WAAW,kBAAkB,KAAK,UAAU,CAAK,IACzG,EACM,IAAI,EAAa,IAAI,EAAK,WAAW,8BAA+B,GAAG,EAG/E,OAAQ,EAAM,EAAM,MAGtB,IAAM,EAAQ,IAAI,EAAM,OAAO,EAAM,WACrC,GAAI,IAAU,QAAa,IAAU,MAAQ,IAAU,GAAI,CACzD,GAAI,EAAM,WAAa,KAAO,EAAM,WAAa,IAC/C,MAAM,IAAI,EAAa,IAAI,EAAM,aAAa,EAAK,WAAW,0BAA0B,EAE1F,EAAO,EAAK,QAAQ,IAAI,IAAS,EAAE,EACnC,SAEF,EAAO,EAAK,QAAQ,EAAO,GAAc,EAAK,WAAW,KAAM,EAAO,OAAO,CAAK,CAAC,CAAC,EAEtF,OAAO,OAGK,SAAQ,CACpB,EACA,EACA,EACA,EACmB,CACnB,IAAM,EAAO,EAAK,WAAW,KAC7B,GAAI,CAAC,EACH,MAAU,MACR,iBAAiB,8GACnB,EAEF,IAAM,EAAO,IAAI,SACjB,QAAY,EAAK,KAAU,OAAO,QAAQ,CAAI,EAC5C,GAAY,EAAM,EAAK,CAAK,EAE9B,QAAW,KAAS,EAAK,WAAY,CACnC,IAAM,EACJ,EAAM,SAAW,QACZ,EAAM,EAAM,MACb,MAAM,KAAK,KAAK,EAAM,aAAa,EAAM,QAAS,IAC/C,EAAM,OAAyB,CAAG,CACrC,EACN,GAAI,OAAO,IAAO,UAAY,IAAO,GACnC,MAAM,IAAI,EACR,IAAI,wBAA2B,EAAM,4DACvC,EAIF,EAAK,OAAO,EAAM,KAAM,MAAM,EAAI,YAAY,KAAK,CAAE,CAAC,EAExD,OAAO,OAOK,KAAO,CAAC,EAAY,EAAc,EAAsC,CACpF,GAAI,CACF,OAAO,MAAM,EAAG,EAChB,MAAO,EAAO,CAEd,MADA,QAAQ,MAAM,sBAAsB,SAAY,EAAK,WAAW,gBAAiB,CAAK,EAChF,IAAI,EAAa,IAAI,EAAK,WAAW,8BAA+B,GAAG,GAGnF,CAEA,SAAS,EAAW,CAAC,EAA4E,CAC/F,GAAI,GAAQ,OAAS,QACnB,MAAU,MACR,0LACF,EAKJ,SAAS,EAAY,CAAC,EAAe,EAAY,EAAiB,CAChE,GAAI,IAAW,SAAW,OAAO,IAAW,WAC1C,MAAU,MAAM,GAAG,MAAU,kCAAmC,EAIpE,SAAS,EAAc,CAAC,EAAuC,CAC7D,OAAQ,OACD,MACH,OAAO,OAAO,OAAO,CAAE,aAAc,EAAc,CAAC,MACjD,SACH,OAAO,OAAO,OAAO,CAAE,gBAAiB,EAAc,CAAC,MACpD,MACH,OAAO,OAAO,OAAO,CAAE,eAAgB,EAAc,CAAC,UAEtD,OAAO,OAAO,OAAO,CAAC,CAAC,GAe7B,SAAS,EAAc,CACrB,EACA,EACA,EACiC,CACjC,IAAM,EAAQ,EAAO,aAAa,EAC5B,EAAmB,IACnB,GAAQ,CAAC,EACb,KAAM,SACN,WAAY,IAAM,GAAM,YAAc,CAAC,KAAO,EAAM,UAAW,EAC/D,SAAU,CAAC,GAAI,GAAM,UAAY,CAAC,EAAI,GAAI,EAAM,UAAY,CAAC,CAAE,EAC/D,qBAAsB,EACxB,EAEM,EAAY,CAAC,IAAmB,CACpC,GAAI,OAAO,IAAU,UAAY,IAAU,MAAQ,MAAM,QAAQ,CAAK,EACpE,MAAO,CAAE,GAAI,GAAgB,OAAQ,CAAC,oBAAoB,CAAE,EAE9D,IAAM,EAAmB,CAAC,EACtB,EAA+B,CAAC,EACpC,GAAI,EAAO,CACT,IAAM,EAAM,EAAM,UAAU,CAAK,EACjC,GAAI,EAAI,KAAO,GAAO,EAAO,KAAK,GAAG,EAAI,MAAM,EAC1C,OAAM,IAAK,EAAI,KAAM,EAE5B,IAAM,EAAO,EAAO,UAAU,CAAK,EACnC,GAAI,EAAK,KAAO,GAAO,EAAO,KAAK,GAAG,EAAK,MAAM,EAC5C,OAAM,IAAK,KAAQ,EAAK,KAAM,EACnC,OAAO,EAAO,OAAS,EAAI,CAAE,GAAI,GAAgB,QAAO,EAAI,CAAE,GAAI,GAAe,MAAO,CAAI,GAG9F,MAAO,CACL,aAAc,IAAM,EACpB,YACA,KAAK,CAAC,EAAgB,CACpB,IAAM,EAAS,EAAU,CAAK,EAC9B,GAAI,EAAO,KAAO,GAAO,MAAU,MAAM,EAAO,OAAO,KAAK,IAAI,CAAC,EACjE,OAAO,EAAO,MAElB,EAQF,SAAS,EAAa,CAAC,EAAc,EAAkB,EAAuB,CAC5E,IAAM,EAAQ,EAAM,WAAa,KAAO,EAAM,WAAa,IAAM,EAAM,MAAM,GAAG,EAAI,CAAC,CAAK,EAC1F,GAAI,EAAM,KAAK,CAAC,IAAS,IAAS,KAAO,IAAS,IAAI,EACpD,MAAM,IAAI,EAAa,IAAI,gCAAoC,EAAM,aAAa,KAAQ,EAE5F,OAAO,EAAM,IAAI,kBAAkB,EAAE,KAAK,GAAG,EAS/C,SAAS,EAAW,CAAC,EAAgB,EAAa,EAAgB,CAChE,GAAI,IAAU,QAAa,IAAU,KAAM,OAC3C,GAAI,MAAM,QAAQ,CAAK,EAAG,CACxB,QAAW,KAAQ,EAAO,GAAY,EAAM,EAAK,CAAI,EACrD,OAEF,EAAK,OAAO,EAAK,OAAO,IAAU,SAAW,KAAK,UAAU,CAAK,EAAI,OAAO,CAAK,CAAC,EAIpF,SAAS,EAAO,CAAC,EAAuC,CACtD,IAAM,EAAS,IAAI,gBACb,EAAM,CAAC,EAAa,IAAmB,CAC3C,GAAI,IAAU,QAAa,IAAU,KAAM,OAC3C,GAAI,MAAM,QAAQ,CAAK,EAAG,CACxB,QAAW,KAAQ,EAAO,EAAI,EAAK,CAAI,EACvC,OAEF,EAAO,OAAO,EAAK,OAAO,IAAU,SAAW,KAAK,UAAU,CAAK,EAAI,OAAO,CAAK,CAAC,GAEtF,QAAY,EAAK,KAAU,OAAO,QAAQ,CAAI,EAAG,EAAI,EAAK,CAAK,EAC/D,OAAO,EAAO,SAAS,EAGzB,eAAe,EAAY,CAAC,EAAc,EAAsC,CAC9E,GAAI,EAAS,QAAU,KAAO,EAAS,OAAS,IAAK,CACnD,IAAM,EAAO,EAAS,QAAQ,IAAI,cAAc,EAChD,GAAI,GAAQ,CAAC,GAAS,KAAK,CAAI,EAAG,CAChC,IAAM,GAAQ,MAAM,EAAS,YAAY,GAAG,WAC5C,MAAO,IAAI,oBAAuB,cAAiB,yBAErD,IAAM,EAAO,MAAM,EAAS,KAAK,EACjC,GAAI,IAAS,GAAI,OAAO,KACxB,GAAI,EAAK,OAAS,EAChB,MAAO,GAAG,EAAK,MAAM,EAAG,CAAe,mBAAa,QAAsB,EAAK,qBAEjF,GAAI,CACF,OAAO,KAAK,MAAM,CAAI,EACtB,KAAM,CACN,OAAO,GAGX,IAAM,EAAO,MAAM,EAAS,KAAK,EACjC,GAAI,EAAS,QAAU,KAAO,EAAS,OAAS,IAAK,CACnD,IAAM,EAAQ,EAAK,OAAS,GAAiB,GAAG,EAAK,MAAM,EAAG,EAAc,UAAM,EAClF,MAAM,IAAI,EACR,IAAI,uBAA0B,EAAS,SAAS,EAAQ,KAAK,IAAU,MACvE,EAAS,MACX,EAEF,GAAI,EAAS,OAAS,IAGpB,QAAQ,MACN,eAAe,eAAkB,EAAS,SAAS,EAAS,QAAQ,IAAI,UAAU,EAAI,OAAO,EAAS,QAAQ,IAAI,UAAU,IAAM,sCACpI,EAEF,MAAM,IAAI,EAAa,IAAI,2BAA+B,EAAS,MAAM,ECloB3E,SAAS,CAAa,CAAC,EAAoB,EAAgB,CACzD,IAAM,EAAQ,EAAO,IAAO,CAAG,EAC/B,GAAI,CAAC,EACH,MAAU,MACR,YAAY,qGACd,EAEF,OAAO,EAQF,MAAM,WAA6B,CAAgB,CACxD,QAAQ,EAAG,CACT,KAAK,IAAI,UACP,EACA,IACE,IAAI,EACF,EAA2B,KAAK,IAAI,OAAQ,WAAW,CACzD,CACJ,EAEA,KAAK,IAAI,UACP,EACA,IACE,IAAI,EACF,EAA4B,KAAK,IAAI,OAAQ,YAAY,CAC3D,CACJ,EAIA,KAAK,IAAI,UACP,EACA,IACE,IAAI,EACF,CAAE,IAAK,KAAK,IAAI,KAAK,CAAkB,EAAG,KAAM,KAAK,IAAI,KAAK,CAAmB,CAAE,EACnF,CACE,IAAK,EAA2B,KAAK,IAAI,OAAQ,WAAW,EAC5D,KAAM,EAA4B,KAAK,IAAI,OAAQ,YAAY,EAC/D,QAAS,KAAK,IAAI,OAAO,IAA+B,eAAe,CACzE,CACF,CACJ,EAIA,KAAK,IAAI,UAAU,EAAa,IAAM,CACpC,IAAM,EAAS,KAAK,IAAI,OAAO,IAAgC,WAAW,EAC1E,GAAI,CAAC,GAAQ,OACX,MAAU,MACR,yFACF,EAEF,OAAO,IAAI,EAAY,IAAI,EAAO,OAAU,KAAK,IAAI,KAAK,CAAkB,CAAC,EAC9E,EAYH,IAAI,EAAG,CAKL,GAJA,KAAK,IAAI,KAAK,CAAkB,EAChC,KAAK,IAAI,KAAK,CAAmB,EAEjC,KAAK,IAAI,KAAK,CAAY,EACtB,KAAK,IAAI,OAAO,IAAI,WAAW,EACjC,KAAK,IAAI,KAAK,CAAW,EAG/B",
+  "debugId": "5C2B7BF63F34934E64756E2164756E21",
   "names": []
 }

package/dist/{chunk-0rs8a7re.js → chunk-bk8wjf00.js}

@@ -1,5 +1,5 @@
 // @bun
-import{i as B,j as e}from"./chunk-7k7a6h9j.js";import{ka as D,oa as I,pa as r}from"./chunk-zq5m4scz.js";import"./chunk-8z37k28d.js";import{fc as c,rd as o,sd as P}from"./chunk-c37g1gzy.js";import"./chunk-sppjqk4n.js";import"./chunk-9pcsm8g3.js";import{Pe as f,Qe as u,Te as m}from"./chunk-sqd77ksy.js";import{yf as n}from"./chunk-v6vsjdp7.js";import"./chunk-pwchwgkc.js";import"./chunk-qv2sdxbq.js";import"./chunk-vbfwvyb8.js";import"./chunk-fz805r97.js";import"./chunk-6qyc4e22.js";import"./chunk-dwkhs81y.js";import"./chunk-cyze295m.js";import"./chunk-rgcfqq21.js";import"./chunk-241aehp3.js";import{Ng as a}from"./chunk-5v2rx0rk.js";import{Og as _}from"./chunk-bb8e7rhf.js";import"./chunk-g6byqmdq.js";import{join as M,resolve as yJ,sep as vJ}from"path";import{Duplex as KJ}from"stream";import{constants as L,createBrotliCompress as OJ,createGzip as YJ}from"zlib";var UJ=["br","gzip"],xJ=1024,VJ=5,IJ=19,CJ=6;function LJ(J){if(J===void 0)return 1;if(!/^\d+(\.\d{0,3})?$/.test(J.trim()))return 1;let $=Number(J.trim());return Number.isFinite($)?Math.min($,1):1}function AJ(J){if(J===null||J===void 0)return null;let $=new Map;for(let X of J.split(",")){let[Z,...Q]=X.split(";"),W=Z.trim().toLowerCase();if(W==="")continue;let j=1;for(let G of Q){let Y=G.indexOf("=");if(Y===-1)continue;if(G.slice(0,Y).trim().toLowerCase()==="q"){j=LJ(G.slice(Y+1));break}}$.set(W,j)}return $}function PJ(J,$=UJ){let X=AJ(J);if(!X)return null;let Z=X.get("*"),Q=null,W=0;for(let j of $){let G=X.get(j)??Z??0;if(G>W)Q=j,W=G}return Q}function _J(J,$){if(!J)return!1;return J.split(",").some((X)=>X.trim().toLowerCase().split("=")[0].trim()===$)}function SJ(J,$){if(J==="HEAD")return!1;if($.status<200||$.status===204||$.status===206||$.status===304)return!1;if($.headers.has("Content-Range"))return!1;let X=$.headers.get("Content-Type");if(!X||!/^\s*text\/html\s*(;|$)/i.test(X))return!1;if(!$.body)return!1;let Z=$.headers.get("Content-Encoding");if(Z&&Z.trim().toLowerCase()!=="identity")return!1;if(_J($.headers.get("Cache-Control"),"no-transform"))return!1;let Q=$.headers.get("Content-Length");if(Q!==null&&Number(Q)<xJ)return!1;return!0}function TJ(J){let $=J==="br"?OJ({params:{[L.BROTLI_PARAM_QUALITY]:VJ,[L.BROTLI_PARAM_LGWIN]:IJ},flush:L.BROTLI_OPERATION_FLUSH}):YJ({level:CJ,flush:L.Z_SYNC_FLUSH});return KJ.toWeb($)}function DJ(J){let $=J.get("Vary");if(!$){J.set("Vary","Accept-Encoding");return}let X=$.split(",").map((Z)=>Z.trim().toLowerCase());if(X.includes("*")||X.includes("accept-encoding"))return;J.append("Vary","Accept-Encoding")}function g(J,$){if(!SJ(J.method,$))return $;let X=new Headers($.headers);DJ(X);let Z=PJ(J.headers.get("Accept-Encoding"));if(!Z)return new Response($.body,{status:$.status,statusText:$.statusText,headers:X});let Q;try{Q=TJ(Z)}catch{return new Response($.body,{status:$.status,statusText:$.statusText,headers:X})}return X.set("Content-Encoding",Z),X.delete("Content-Length"),new Response($.body.pipeThrough(Q),{status:$.status,statusText:$.statusText,headers:X})}import{readdir as FJ,stat as NJ}from"fs/promises";import{join as BJ}from"path";function w(J){let $=J.toString(),X=new Bun.CryptoHasher("sha1");return X.update($),X.digest("hex")}async function h(J){let $=new Set;async function X(Z,Q){let W;try{W=await FJ(Z,{withFileTypes:!0})}catch{return}for(let j of W){if(j.name.startsWith("."))continue;if(Q&&j.name==="assets")continue;let G=BJ(Z,j.name),Y=j.isDirectory(),V=j.isFile();if(j.isSymbolicLink())try{let C=await NJ(G);Y=C.isDirectory(),V=C.isFile()}catch{continue}if(V)$.add(G);else if(Y&&!j.isSymbolicLink())await X(G,!1)}}return await X(J,!0),$}var bJ="public, max-age=31536000, must-revalidate";function p(J,$){let X=Bun.file($),Z=X.size,Q=w(X.lastModified),W={"Content-Type":X.type||"application/octet-stream","Cache-Control":bJ,"Accept-Ranges":"bytes",ETag:Q},j=f(J.headers.get("Range"));if(j){let G=u(j,Z);if(!G)return c(Z);return new Response(X.slice(G.start,G.end+1).stream(),{status:206,headers:{...W,"Content-Range":m(G.start,G.end,Z),"Content-Length":String(G.length)}})}return new Response(X.stream(),{headers:{...W,"Content-Length":String(Z)}})}import{stat as EJ}from"fs/promises";var A="app/client.tsx";function d(J,$=D){let X=J[A]?.file;if(!X)return;return{module:I(X,$),preload:F(J,A,$)}}function F(J,$,X=D){let Z=[],Q=new Set,W=(j)=>{if(Q.has(j))return;Q.add(j);let G=J[j];if(!G?.file)return;Z.push(I(G.file,X));for(let Y of G.imports??[])W(Y)};return W($),Z}function l(J,$=30000){let X=JSON.stringify("gemi:chunk-reload"),Z=JSON.stringify(`Failed to fetch dynamically imported module: ${J}`);return`var r=!1;try{var s=window.sessionStorage,m=JSON.parse(s.getItem(${X})||"null");var d=m?Date.now()-m.at:NaN;if(navigator.onLine!==!1&&!(d>=0&&d<${$})){s.setItem(${X},JSON.stringify({url:window.location.href,at:Date.now()}));r=!0}}catch(e){}if(r)window.location.reload();else throw new Error(${Z});export {}`}var MJ=new RegExp(`^${o}/.+\\.m?js$`);function qJ(J){return MJ.test(J)}function i(J){if(qJ(J))return new Response(l(J),{headers:{"Content-Type":"application/javascript","Cache-Control":"no-store"}});if(P(J))return new Response("Not found",{status:404});return}var RJ=`<!DOCTYPE html>
+import{i as B,j as e}from"./chunk-r7qzdmew.js";import{ka as D,oa as I,pa as r}from"./chunk-zq5m4scz.js";import"./chunk-8z37k28d.js";import{hc as c,ud as o,vd as P}from"./chunk-ykbehyp9.js";import"./chunk-jxhznqhe.js";import"./chunk-adm5g1v8.js";import{Se as f,Te as u,We as m}from"./chunk-mym0zxxp.js";import{Bf as n}from"./chunk-9xf2fx98.js";import"./chunk-eqtsfvvd.js";import"./chunk-br9p390p.js";import"./chunk-n4807648.js";import"./chunk-ghz3e8b7.js";import"./chunk-7vjbebst.js";import"./chunk-3fr22rtg.js";import"./chunk-m3z60v9d.js";import"./chunk-7hfv5n00.js";import"./chunk-qxda7pzm.js";import{Tg as a}from"./chunk-kzh8bkg5.js";import{Ug as _}from"./chunk-7dnb21s9.js";import"./chunk-j2nx0dtq.js";import{join as M,resolve as yJ,sep as vJ}from"path";import{Duplex as KJ}from"stream";import{constants as L,createBrotliCompress as OJ,createGzip as YJ}from"zlib";var UJ=["br","gzip"],xJ=1024,VJ=5,IJ=19,CJ=6;function LJ(J){if(J===void 0)return 1;if(!/^\d+(\.\d{0,3})?$/.test(J.trim()))return 1;let $=Number(J.trim());return Number.isFinite($)?Math.min($,1):1}function AJ(J){if(J===null||J===void 0)return null;let $=new Map;for(let X of J.split(",")){let[Z,...Q]=X.split(";"),W=Z.trim().toLowerCase();if(W==="")continue;let j=1;for(let G of Q){let Y=G.indexOf("=");if(Y===-1)continue;if(G.slice(0,Y).trim().toLowerCase()==="q"){j=LJ(G.slice(Y+1));break}}$.set(W,j)}return $}function PJ(J,$=UJ){let X=AJ(J);if(!X)return null;let Z=X.get("*"),Q=null,W=0;for(let j of $){let G=X.get(j)??Z??0;if(G>W)Q=j,W=G}return Q}function _J(J,$){if(!J)return!1;return J.split(",").some((X)=>X.trim().toLowerCase().split("=")[0].trim()===$)}function SJ(J,$){if(J==="HEAD")return!1;if($.status<200||$.status===204||$.status===206||$.status===304)return!1;if($.headers.has("Content-Range"))return!1;let X=$.headers.get("Content-Type");if(!X||!/^\s*text\/html\s*(;|$)/i.test(X))return!1;if(!$.body)return!1;let Z=$.headers.get("Content-Encoding");if(Z&&Z.trim().toLowerCase()!=="identity")return!1;if(_J($.headers.get("Cache-Control"),"no-transform"))return!1;let Q=$.headers.get("Content-Length");if(Q!==null&&Number(Q)<xJ)return!1;return!0}function TJ(J){let $=J==="br"?OJ({params:{[L.BROTLI_PARAM_QUALITY]:VJ,[L.BROTLI_PARAM_LGWIN]:IJ},flush:L.BROTLI_OPERATION_FLUSH}):YJ({level:CJ,flush:L.Z_SYNC_FLUSH});return KJ.toWeb($)}function DJ(J){let $=J.get("Vary");if(!$){J.set("Vary","Accept-Encoding");return}let X=$.split(",").map((Z)=>Z.trim().toLowerCase());if(X.includes("*")||X.includes("accept-encoding"))return;J.append("Vary","Accept-Encoding")}function g(J,$){if(!SJ(J.method,$))return $;let X=new Headers($.headers);DJ(X);let Z=PJ(J.headers.get("Accept-Encoding"));if(!Z)return new Response($.body,{status:$.status,statusText:$.statusText,headers:X});let Q;try{Q=TJ(Z)}catch{return new Response($.body,{status:$.status,statusText:$.statusText,headers:X})}return X.set("Content-Encoding",Z),X.delete("Content-Length"),new Response($.body.pipeThrough(Q),{status:$.status,statusText:$.statusText,headers:X})}import{readdir as FJ,stat as NJ}from"fs/promises";import{join as BJ}from"path";function w(J){let $=J.toString(),X=new Bun.CryptoHasher("sha1");return X.update($),X.digest("hex")}async function h(J){let $=new Set;async function X(Z,Q){let W;try{W=await FJ(Z,{withFileTypes:!0})}catch{return}for(let j of W){if(j.name.startsWith("."))continue;if(Q&&j.name==="assets")continue;let G=BJ(Z,j.name),Y=j.isDirectory(),V=j.isFile();if(j.isSymbolicLink())try{let C=await NJ(G);Y=C.isDirectory(),V=C.isFile()}catch{continue}if(V)$.add(G);else if(Y&&!j.isSymbolicLink())await X(G,!1)}}return await X(J,!0),$}var bJ="public, max-age=31536000, must-revalidate";function p(J,$){let X=Bun.file($),Z=X.size,Q=w(X.lastModified),W={"Content-Type":X.type||"application/octet-stream","Cache-Control":bJ,"Accept-Ranges":"bytes",ETag:Q},j=f(J.headers.get("Range"));if(j){let G=u(j,Z);if(!G)return c(Z);return new Response(X.slice(G.start,G.end+1).stream(),{status:206,headers:{...W,"Content-Range":m(G.start,G.end,Z),"Content-Length":String(G.length)}})}return new Response(X.stream(),{headers:{...W,"Content-Length":String(Z)}})}import{stat as EJ}from"fs/promises";var A="app/client.tsx";function d(J,$=D){let X=J[A]?.file;if(!X)return;return{module:I(X,$),preload:F(J,A,$)}}function F(J,$,X=D){let Z=[],Q=new Set,W=(j)=>{if(Q.has(j))return;Q.add(j);let G=J[j];if(!G?.file)return;Z.push(I(G.file,X));for(let Y of G.imports??[])W(Y)};return W($),Z}function l(J,$=30000){let X=JSON.stringify("gemi:chunk-reload"),Z=JSON.stringify(`Failed to fetch dynamically imported module: ${J}`);return`var r=!1;try{var s=window.sessionStorage,m=JSON.parse(s.getItem(${X})||"null");var d=m?Date.now()-m.at:NaN;if(navigator.onLine!==!1&&!(d>=0&&d<${$})){s.setItem(${X},JSON.stringify({url:window.location.href,at:Date.now()}));r=!0}}catch(e){}if(r)window.location.reload();else throw new Error(${Z});export {}`}var MJ=new RegExp(`^${o}/.+\\.m?js$`);function qJ(J){return MJ.test(J)}function i(J){if(qJ(J))return new Response(l(J),{headers:{"Content-Type":"application/javascript","Cache-Control":"no-store"}});if(P(J))return new Response("Not found",{status:404});return}var RJ=`<!DOCTYPE html>
 <html lang="en">
   <head>
     <meta charset="UTF-8" />
@@ -21,4 +21,4 @@ import{i as B,j as e}from"./chunk-7k7a6h9j.js";import{ka as D,oa as I,pa as r}fr
 </html>`;function N(J,$,X){if(!X)console.error(J);else try{X(J instanceof Error?J:Error(String(J),{cause:J}))}catch(Z){console.error(J),console.error(Z)}if(_($))return new Response(JSON.stringify({error:n("server_error","Internal Server Error",500)}),{status:500,headers:{"Content-Type":"application/json"}});return new Response(RJ,{status:500,headers:{"Content-Type":"text/html; charset=utf-8"}})}var kJ={kind:"none"};function s(J){let $=(J??"").trim().toLowerCase();if($===""||$==="false"||$==="off"||$==="0")return kJ;if($==="true")return{kind:"all"};if(/^[1-9]\d*$/.test($))return{kind:"hops",hops:Number($)};throw Error(`GEMI_TRUST_PROXY must be "false", "true" or the number of proxies in front of the app (e.g. 1). Got ${JSON.stringify(J)}.`)}function t(J,$,X){if(X.kind==="all"){if(!J.get("x-forwarded-for")&&$)J.set("x-forwarded-for",$);return}J.delete("x-real-ip");let Z=$;if(X.kind==="hops"){let Q=(J.get("x-forwarded-for")??"").split(",").map((j)=>j.trim()).filter(Boolean),W=Q.length-X.hops;Z=W>=0?Q[W]:Q[0]??$}if(Z)J.set("x-forwarded-for",Z);else J.delete("x-forwarded-for")}var S=a(),gJ=M(S,"app"),x=M(S,"dist"),b=M(x,"client");function wJ(J){let $;try{$=decodeURIComponent(J)}catch{return null}let X=yJ(b,"."+$.replace("/assets/assets","/assets"));return X.startsWith(b+vJ)?X:null}async function fJ(J){try{return(await EJ(J)).isFile()}catch{return!1}}async function L3(J,$){let X=await import(`${x}/client/.vite/manifest.json`),Z=await import(`${x}/server/.vite/manifest.json`),Q=await r(`${x}/client`);process.env.ROOT_DIR=S,process.env.APP_DIR=gJ,process.env.DIST_DIR=x;let W={},j={},G={},Y={},V={},C=(z,H)=>`"${z}": () => import("${H}")`,q=[];for(let z of["404",...J.getFlatComponentTree.call(J)]){let H=Z[`app/views/${z}.tsx`];if(!H?.file){console.log(`Server file not found for ${z}`),console.log(H);let U=Object.keys(Z),y=`app/views/${z}.tsx`;console.log(`${y} not found in server manifest`),console.log(U)}let O=await import(`${process.env.DIST_DIR}/server/${H?.file}`);W[z]=O.default,j[z]=O.OpenGraph,G[z]=O;let K=X[`app/views/${z}.tsx`];if(K?.css&&K?.css.length>0)Y[z]=K?.css;if(K)q.push(C(z,I(K?.file,Q))),V[z]=F(X,`app/views/${z}.tsx`,Q)}let JJ=`{${q.join(",")}}`,R=d(X,Q);if(!R)console.error(`Client manifest has no "${A}" entry \u2014 dist/client is incomplete, so documents will render but never hydrate.`);let $J=X["app/client.tsx"]?.css??[],XJ=(await Promise.all($J.map((z)=>Bun.file(`${x}/client/${z}`).text()))).join(`
 `),ZJ=await h(b);async function zJ(z){let{pathname:H}=new URL(z.url);if(_(H))return await T(z,H);let O=wJ(H);if(P(H)||H.startsWith("/.well-known")||O!==null&&ZJ.has(O)){if(!O||!await fJ(O))return i(H)??await T(z,H);try{return p(z,O)}catch(U){return J.onException?.(U),new Response("Not found",{status:404})}}return await T(z,H)}async function T(z,H){let O=J.fetch.bind(J);try{let K=await O(z);if(K instanceof Response)return K;else{let U=[];return U.push({content:XJ}),await K({getStyles:async(v)=>{if(!v)return B([]);for(let GJ of v){let WJ=X[`app/views/${GJ}.tsx`];for(let E of WJ?.css??[]){let HJ=Bun.file(`${process.env.DIST_DIR}/client/${E}`);U.push({id:E,content:await HJ.text()})}}return B(U)},clientEntry:R,modulePreloadManifest:V,loaders:JJ,viewImportMap:W,viewModules:G,ogMap:j,cssManifest:Y,assetBase:Q})}}catch(K){return N(K,H,J.onException)}}let QJ=(process.env.GEMI_COMPRESSION??"auto").toLowerCase()!=="off",jJ=s(process.env.GEMI_TRUST_PROXY),k=Bun.serve({maxRequestBodySize:10737418240,fetch:async(z,H)=>{t(z.headers,H.requestIP(z)?.address??null,jJ);let O=await $(z,(K)=>J.withGlobalMiddleware(K,zJ,(U)=>N(U,new URL(K.url).pathname,J.onException)));return QJ?g(z,O):O},idleTimeout:Number(process.env.SERVER_IDLE_TIMEOUT??10),port:process.env.PORT||5173});return e({port:k.port,rootDir:S}),k}export{L3 as httpProd};
 
-//# debugId=3C573BE793FFD76464756E2164756E21
+//# debugId=0D6094061F3B99EA64756E2164756E21

package/dist/{chunk-0rs8a7re.js.map → chunk-bk8wjf00.js.map}

@@ -13,6 +13,6 @@
     "/**\n * Which `X-Forwarded-For` entries the production server believes (#8).\n *\n * `X-Forwarded-For` is written by whoever sends the request. A client talking\n * to the app directly — or through a proxy that appends to the header rather\n * than replacing it — picks any address it likes, and `clientIp` (the rate\n * limiter's default key) used to read the left-most entry, which is exactly\n * the one the client wrote. So the server decides here, once, at the edge,\n * and hands the app a single address it can rely on:\n *\n * - `none` (the default): no proxy is trusted. The header is replaced with the\n *   socket's peer address, and `X-Real-IP` is dropped.\n * - `hops` (`GEMI_TRUST_PROXY=<n>`): the `n` proxies nearest the app are\n *   trusted. Each appends the address it was reached from, so the client is\n *   the `n`-th entry from the right of `X-Forwarded-For`. Anything\n *   further left was written by someone the app does not trust and is dropped.\n * - `all` (`GEMI_TRUST_PROXY=true`): the inbound header is passed through\n *   unchanged, as before 0.88. Only sound behind a proxy that overwrites\n *   `X-Forwarded-For` (and `X-Real-IP`) rather than appending to it.\n */\nexport type ForwardedTrust =\n  | { kind: \"none\" }\n  | { kind: \"all\" }\n  | { kind: \"hops\"; hops: number };\n\nconst NONE: ForwardedTrust = { kind: \"none\" };\n\n/**\n * `GEMI_TRUST_PROXY` as a policy. Unset, empty, `false`, `off` and `0` trust\n * nothing; `true` trusts everything; a positive integer is a hop count.\n * Anything else throws, so a typo fails the boot instead of silently trusting\n * nothing (every client sharing the proxy's address) or everything.\n */\nexport function parseTrustProxy(value: string | undefined): ForwardedTrust {\n  const raw = (value ?? \"\").trim().toLowerCase();\n  if (raw === \"\" || raw === \"false\" || raw === \"off\" || raw === \"0\") {\n    return NONE;\n  }\n  if (raw === \"true\") {\n    return { kind: \"all\" };\n  }\n  if (/^[1-9]\\d*$/.test(raw)) {\n    return { kind: \"hops\", hops: Number(raw) };\n  }\n  throw new Error(\n    `GEMI_TRUST_PROXY must be \"false\", \"true\" or the number of proxies in front of the app (e.g. 1). Got ${JSON.stringify(value)}.`,\n  );\n}\n\n/**\n * Rewrites `headers` so `X-Forwarded-For` holds what `trust` says the client\n * address is. `peer` is the socket's remote address — `null` for a unix\n * socket, where the immediate hop is still counted as one proxy.\n */\nexport function applyForwardedTrust(\n  headers: Headers,\n  peer: string | null,\n  trust: ForwardedTrust,\n): void {\n  if (trust.kind === \"all\") {\n    if (!headers.get(\"x-forwarded-for\") && peer) {\n      headers.set(\"x-forwarded-for\", peer);\n    }\n    return;\n  }\n\n  // Under any other policy `X-Real-IP` is as client-written as the rest; the\n  // address the app should use is the one left in `X-Forwarded-For`.\n  headers.delete(\"x-real-ip\");\n\n  let client: string | null = peer;\n  if (trust.kind === \"hops\") {\n    const entries = (headers.get(\"x-forwarded-for\") ?? \"\")\n      .split(\",\")\n      .map((entry) => entry.trim())\n      .filter(Boolean);\n    // The chain is `entries` + `peer`; the client sits `hops` places left of\n    // its end, i.e. `entries[entries.length - hops]`. A shorter chain than\n    // expected means the request skipped a proxy, so its left-most hop is the\n    // furthest thing seen — never anything further left than that.\n    const index = entries.length - trust.hops;\n    client = index >= 0 ? entries[index]! : (entries[0] ?? peer);\n  }\n\n  if (client) {\n    headers.set(\"x-forwarded-for\", client);\n  } else {\n    headers.delete(\"x-forwarded-for\");\n  }\n}\n"
   ],
   "mappings": ";mzBAAA,SAAS,OAAM,IAAS,QCkBxB,WAAS,UACT,cAAS,oBAAW,WAAsB,QAW1C,FAAM,HAAuC,LAAC,DAAM,AAAM,JAQpD,HAAyB,DAYzB,HAAiB,EACjB,GAAqB,GAGrB,GAAa,EAEnB,SAAS,EAAW,CAAC,EAAiC,CACpD,GAAI,IAAQ,OACV,MAAO,GAKT,GAAI,CAAC,oBAAoB,KAAK,EAAI,KAAK,CAAC,EACtC,MAAO,GAET,IAAM,EAAQ,OAAO,EAAI,KAAK,CAAC,EAC/B,OAAO,OAAO,SAAS,CAAK,EAAI,KAAK,IAAI,EAAO,CAAC,EAAI,EAahD,SAAS,EAAmB,CAAC,EAA+D,CACjG,GAAI,IAAW,MAAQ,IAAW,OAChC,OAAO,KAGT,IAAM,EAAW,IAAI,IACrB,QAAW,KAAQ,EAAO,MAAM,GAAG,EAAG,CACpC,IAAO,KAAc,GAAU,EAAK,MAAM,GAAG,EACvC,EAAS,EAAU,KAAK,EAAE,YAAY,EAC5C,GAAI,IAAW,GACb,SAGF,IAAI,EAAI,EACR,QAAW,KAAS,EAAQ,CAC1B,IAAM,EAAY,EAAM,QAAQ,GAAG,EACnC,GAAI,IAAc,GAChB,SAEF,GAAI,EAAM,MAAM,EAAG,CAAS,EAAE,KAAK,EAAE,YAAY,IAAM,IAAK,CAC1D,EAAI,GAAY,EAAM,MAAM,EAAY,CAAC,CAAC,EAC1C,OAIJ,EAAS,IAAI,EAAQ,CAAC,EAGxB,OAAO,EAUF,SAAS,EAAiB,CAC/B,EACA,EAA+B,GACP,CACxB,IAAM,EAAW,GAAoB,CAAM,EAC3C,GAAI,CAAC,EACH,OAAO,KAGT,IAAM,EAAW,EAAS,IAAI,GAAG,EAC7B,EAA+B,KAC/B,EAAQ,EAEZ,QAAW,KAAU,EAAW,CAC9B,IAAM,EAAI,EAAS,IAAI,CAAM,GAAK,GAAY,EAC9C,GAAI,EAAI,EACN,EAAO,EACP,EAAQ,EAIZ,OAAO,EAGT,SAAS,EAAY,CAAC,EAA4B,EAA4B,CAC5E,GAAI,CAAC,EACH,MAAO,GAIT,OAAO,EACJ,MAAM,GAAG,EACT,KAAK,CAAC,IAAU,EAAM,KAAK,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE,GAAG,KAAK,IAAM,CAAS,EAY3E,SAAS,EAAc,CAAC,EAAgB,EAAwB,CAGrE,GAAI,IAAW,OACb,MAAO,GAKT,GAAI,EAAI,OAAS,KAAO,EAAI,SAAW,KAAO,EAAI,SAAW,KAAO,EAAI,SAAW,IACjF,MAAO,GAGT,GAAI,EAAI,QAAQ,IAAI,eAAe,EACjC,MAAO,GAGT,IAAM,EAAc,EAAI,QAAQ,IAAI,cAAc,EAClD,GAAI,CAAC,GAAe,CAAC,0BAA0B,KAAK,CAAW,EAC7D,MAAO,GAOT,GAAI,CAAC,EAAI,KACP,MAAO,GAKT,IAAM,EAAkB,EAAI,QAAQ,IAAI,kBAAkB,EAC1D,GAAI,GAAmB,EAAgB,KAAK,EAAE,YAAY,IAAM,WAC9D,MAAO,GAKT,GAAI,GAAa,EAAI,QAAQ,IAAI,eAAe,EAAG,cAAc,EAC/D,MAAO,GAGT,IAAM,EAAgB,EAAI,QAAQ,IAAI,gBAAgB,EACtD,GAAI,IAAkB,MAAQ,OAAO,CAAa,EAAI,GACpD,MAAO,GAGT,MAAO,GAWF,SAAS,EAAmB,CAAC,EAA2B,CAC7D,IAAM,EACJ,IAAa,KACT,GAAqB,CACnB,OAAQ,EACL,EAAU,sBAAuB,IACjC,EAAU,oBAAqB,EAClC,EACA,MAAO,EAAU,sBACnB,CAAC,EACD,GAAW,CAAE,MAAO,GAAY,MAAO,EAAU,YAAa,CAAC,EAErE,OAAO,GAAO,MAAM,CAAU,EAGhC,SAAS,EAAsB,CAAC,EAAkB,CAChD,IAAM,EAAO,EAAQ,IAAI,MAAM,EAC/B,GAAI,CAAC,EAAM,CACT,EAAQ,IAAI,OAAQ,iBAAiB,EACrC,OAEF,IAAM,EAAS,EAAK,MAAM,GAAG,EAAE,IAAI,CAAC,IAAU,EAAM,KAAK,EAAE,YAAY,CAAC,EAGxE,GAAI,EAAO,SAAS,GAAG,GAAK,EAAO,SAAS,iBAAiB,EAC3D,OAEF,EAAQ,OAAO,OAAQ,iBAAiB,EAanC,SAAS,CAAgB,CAAC,EAAc,EAAyB,CACtE,GAAI,CAAC,GAAe,EAAI,OAAQ,CAAG,EACjC,OAAO,EAGT,IAAM,EAAU,IAAI,QAAQ,EAAI,OAAO,EACvC,GAAuB,CAAO,EAE9B,IAAM,EAAW,GAAkB,EAAI,QAAQ,IAAI,iBAAiB,CAAC,EACrE,GAAI,CAAC,EACH,OAAO,IAAI,SAAS,EAAI,KAAM,CAC5B,OAAQ,EAAI,OACZ,WAAY,EAAI,WAChB,SACF,CAAC,EAGH,IAAI,EACJ,GAAI,CACF,EAAU,GAAoB,CAAQ,EACtC,KAAM,CAGN,OAAO,IAAI,SAAS,EAAI,KAAM,CAC5B,OAAQ,EAAI,OACZ,WAAY,EAAI,WAChB,SACF,CAAC,EAQH,OALA,EAAQ,IAAI,mBAAoB,CAAQ,EAGxC,EAAQ,OAAO,gBAAgB,EAExB,IAAI,SAAS,EAAI,KAAM,YAAY,CAAO,EAAG,CAClD,OAAQ,EAAI,OACZ,WAAY,EAAI,WAChB,SACF,CAAC,EC5SH,kBAAS,WAAS,qBAClB,eAAS,cCDF,SAAS,CAAY,CAAC,EAA8B,CAEzD,IAAM,EAAkB,EAAa,SAAS,EAExC,EAAS,IAAI,IAAI,aAAa,MAAM,EAI1C,OAHA,EAAO,OAAO,CAAe,EAChB,EAAO,OAAO,KAAK,EDiBlC,eAAsB,CAAe,CAAC,EAAyC,CAC7E,IAAM,EAAQ,IAAI,IAElB,eAAe,CAAI,CAAC,EAAa,EAAmB,CAClD,IAAI,EACJ,GAAI,CACF,EAAU,MAAM,GAAQ,EAAK,CAAE,cAAe,EAAK,CAAC,EACpD,KAAM,CACN,OAEF,QAAW,KAAS,EAAS,CAC3B,GAAI,EAAM,KAAK,WAAW,GAAG,EAAG,SAChC,GAAI,GAAY,EAAM,OAAS,SAAU,SACzC,IAAM,EAAO,GAAK,EAAK,EAAM,IAAI,EAC7B,EAAQ,EAAM,YAAY,EAC1B,EAAS,EAAM,OAAO,EAC1B,GAAI,EAAM,eAAe,EACvB,GAAI,CACF,IAAM,EAAS,MAAM,GAAK,CAAI,EAC9B,EAAQ,EAAO,YAAY,EAC3B,EAAS,EAAO,OAAO,EACvB,KAAM,CACN,SAGJ,GAAI,EAAQ,EAAM,IAAI,CAAI,EAGrB,QAAI,GAAS,CAAC,EAAM,eAAe,EAAG,MAAM,EAAK,EAAM,EAAK,GAKrE,OADA,MAAM,EAAK,EAAW,EAAI,EACnB,EAGT,IAAM,GAAa,4CAeZ,SAAS,CAAkB,CAAC,EAAc,EAAwB,CACvE,IAAM,EAAO,IAAI,KAAK,CAAI,EACpB,EAAQ,EAAK,KACb,EAAO,EAAa,EAAK,YAAY,EAErC,EAAkC,CACtC,eAAgB,EAAK,MAAQ,2BAC7B,gBAAiB,GACjB,gBAAiB,QACjB,KAAM,CACR,EAEM,EAAQ,EAAiB,EAAI,QAAQ,IAAI,OAAO,CAAC,EAEvD,GAAI,EAAO,CACT,IAAM,EAAW,EAAa,EAAO,CAAK,EAC1C,GAAI,CAAC,EACH,OAAO,EAA4B,CAAK,EAE1C,OAAO,IAAI,SAAS,EAAK,MAAM,EAAS,MAAO,EAAS,IAAM,CAAC,EAAE,OAAO,EAAG,CACzE,OAAQ,IACR,QAAS,IACJ,EACH,gBAAiB,EAAmB,EAAS,MAAO,EAAS,IAAK,CAAK,EACvE,iBAAkB,OAAO,EAAS,MAAM,CAC1C,CACF,CAAC,EAGH,OAAO,IAAI,SAAS,EAAK,OAAO,EAAG,CACjC,QAAS,IAAK,EAAS,iBAAkB,OAAO,CAAK,CAAE,CACzD,CAAC,EFtGH,eAAS,qBISF,IAAM,EAAmB,iBAgBzB,SAAS,CAAiB,CAC/B,EACA,EAAoB,EAC+B,CACnD,IAAM,EAAO,EAAS,IAAmB,KACzC,GAAI,CAAC,EACH,OAEF,MAAO,CACL,OAAQ,EAAS,EAAM,CAAS,EAChC,QAAS,EAAsB,EAAU,EAAkB,CAAS,CACtE,EAgBK,SAAS,CAAqB,CACnC,EACA,EACA,EAAoB,EACV,CACV,IAAM,EAAiB,CAAC,EAGlB,EAAU,IAAI,IAEd,EAAO,CAAC,IAAgB,CAC5B,GAAI,EAAQ,IAAI,CAAG,EAAG,OACtB,EAAQ,IAAI,CAAG,EACf,IAAM,EAAQ,EAAS,GACvB,GAAI,CAAC,GAAO,KAAM,OAClB,EAAK,KAAK,EAAS,EAAM,KAAM,CAAS,CAAC,EACzC,QAAW,KAAY,EAAM,SAAW,CAAC,EACvC,EAAK,CAAQ,GAMjB,OAFA,EAAK,CAAQ,EAEN,EC8HF,SAAS,CAAqB,CACnC,EACA,EA3L8C,MA4LtC,CACR,IAAM,EAAM,KAAK,UAhMgB,mBAgMa,EACxC,EAAQ,KAAK,UAAU,gDAAgD,GAAU,EACvF,MACE,mEAAmE,+EAE5B,iBAC1B,kIACyC,eC3M1D,IAAM,GAAc,IAAI,OAAO,IAAI,cAAkC,EAE9D,SAAS,EAAgB,CAAC,EAA2B,CAC1D,OAAO,GAAY,KAAK,CAAQ,EA2C3B,SAAS,CAAe,CAAC,EAAwC,CACtE,GAAI,GAAiB,CAAQ,EAC3B,OAAO,IAAI,SAAS,EAAsB,CAAQ,EAAG,CACnD,QAAS,CACP,eAAgB,yBAChB,gBAAiB,UACnB,CACF,CAAC,EAKH,GAAI,EAAoB,CAAQ,EAC9B,OAAO,IAAI,SAAS,YAAa,CAAE,OAAQ,GAAI,CAAC,EAOlD,OCpEF,IAAM,GAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,SAqBlB,SAAS,CAAsB,CACpC,EACA,EACA,EACU,CAUV,GAAI,CAAC,EACH,QAAQ,MAAM,CAAG,EAEjB,QAAI,CAGF,EAAY,aAAe,MAAQ,EAAU,MAAM,OAAO,CAAG,EAAG,CAAE,MAAO,CAAI,CAAC,CAAC,EAC/E,MAAO,EAAa,CAEpB,QAAQ,MAAM,CAAG,EACjB,QAAQ,MAAM,CAAW,EAI7B,GAAI,EAAU,CAAQ,EACpB,OAAO,IAAI,SACT,KAAK,UAAU,CAAE,MAAO,EAAiB,eAAgB,wBAAyB,GAAG,CAAE,CAAC,EACxF,CACE,OAAQ,IACR,QAAS,CAAE,eAAgB,kBAAmB,CAChD,CACF,EAGF,OAAO,IAAI,SAAS,GAAkB,CACpC,OAAQ,IACR,QAAS,CAAE,eAAgB,0BAA2B,CACxD,CAAC,EC/CH,IAAM,GAAuB,CAAE,KAAM,MAAO,EAQrC,SAAS,CAAe,CAAC,EAA2C,CACzE,IAAM,GAAO,GAAS,IAAI,KAAK,EAAE,YAAY,EAC7C,GAAI,IAAQ,IAAM,IAAQ,SAAW,IAAQ,OAAS,IAAQ,IAC5D,OAAO,GAET,GAAI,IAAQ,OACV,MAAO,CAAE,KAAM,KAAM,EAEvB,GAAI,aAAa,KAAK,CAAG,EACvB,MAAO,CAAE,KAAM,OAAQ,KAAM,OAAO,CAAG,CAAE,EAE3C,MAAU,MACR,uGAAuG,KAAK,UAAU,CAAK,IAC7H,EAQK,SAAS,CAAmB,CACjC,EACA,EACA,EACM,CACN,GAAI,EAAM,OAAS,MAAO,CACxB,GAAI,CAAC,EAAQ,IAAI,iBAAiB,GAAK,EACrC,EAAQ,IAAI,kBAAmB,CAAI,EAErC,OAKF,EAAQ,OAAO,WAAW,EAE1B,IAAI,EAAwB,EAC5B,GAAI,EAAM,OAAS,OAAQ,CACzB,IAAM,GAAW,EAAQ,IAAI,iBAAiB,GAAK,IAChD,MAAM,GAAG,EACT,IAAI,CAAC,IAAU,EAAM,KAAK,CAAC,EAC3B,OAAO,OAAO,EAKX,EAAQ,EAAQ,OAAS,EAAM,KACrC,EAAS,GAAS,EAAI,EAAQ,GAAW,EAAQ,IAAM,EAGzD,GAAI,EACF,EAAQ,IAAI,kBAAmB,CAAM,EAErC,OAAQ,OAAO,iBAAiB,ERnEpC,IAAM,EAAU,EAAY,EAEtB,GAAS,EAAK,EAAS,KAAK,EAC5B,EAAU,EAAK,EAAS,MAAM,EAE9B,EAAY,EAAK,EAAS,QAAQ,EAQxC,SAAS,EAAc,CAAC,EAAiC,CACvD,IAAI,EACJ,GAAI,CACF,EAAU,mBAAmB,CAAQ,EACrC,KAAM,CACN,OAAO,KAET,IAAM,EAAO,GAAQ,EAAW,IAAM,EAAQ,QAAQ,iBAAkB,SAAS,CAAC,EAClF,OAAO,EAAK,WAAW,EAAY,EAAG,EAAI,EAAO,KAGnD,eAAe,EAAM,CAAC,EAAc,CAClC,GAAI,CACF,OAAQ,MAAM,GAAK,CAAI,GAAG,OAAO,EACjC,KAAM,CACN,MAAO,IAQX,eAAsB,EAAQ,CAAC,EAAU,EAAkC,CACzE,IAAM,EAAW,MAAa,UAAG,gCAC3B,EAAiB,MAAa,UAAG,gCAIjC,EAAY,MAAM,EAAmB,GAAG,UAAgB,EAE9D,QAAQ,IAAI,SAAW,EACvB,QAAQ,IAAI,QAAU,GACtB,QAAQ,IAAI,SAAW,EAEvB,IAAM,EAAgB,CAAC,EACjB,EAAQ,CAAC,EACT,EAAc,CAAC,EACf,EAAc,CAAC,EAGf,EAAkD,CAAC,EACnD,EAAW,CAAC,EAAkB,IAAiB,IAAI,qBAA4B,MAC/E,EAAY,CAAC,EAEnB,QAAW,IAAY,CAAC,MAAO,GAAG,EAAI,qBAAqB,KAAK,CAAG,CAAC,EAAG,CACrE,IAAM,EAAa,EAAe,aAAa,SAC/C,GAAI,CAAC,GAAY,KAAM,CACrB,QAAQ,IAAI,6BAA6B,GAAU,EACnD,QAAQ,IAAI,CAAU,EACtB,IAAM,EAAQ,OAAO,KAAK,CAAc,EAClC,EAAO,aAAa,QAC1B,QAAQ,IAAI,GAAG,gCAAmC,EAClD,QAAQ,IAAI,CAAK,EAEnB,IAAM,EAAM,MAAa,UAAG,QAAQ,IAAI,mBAAmB,GAAY,QACvE,EAAc,GAAY,EAAI,QAC9B,EAAM,GAAY,EAAI,UAGtB,EAAY,GAAY,EACxB,IAAM,EAAa,EAAS,aAAa,SAEzC,GAAI,GAAY,KAAO,GAAY,IAAI,OAAS,EAC9C,EAAY,GAAY,GAAY,IAEtC,GAAI,EACF,EAAU,KAAK,EAAS,EAAU,EAAS,GAAY,KAAM,CAAS,CAAC,CAAC,EACxE,EAAsB,GAAY,EAChC,EACA,aAAa,QACb,CACF,EAIJ,IAAM,GAAU,IAAI,EAAU,KAAK,GAAG,KAKhC,EAAc,EAAkB,EAAU,CAAS,EACzD,GAAI,CAAC,EAGH,QAAQ,MACN,2BAA2B,wFAC7B,EAMF,IAAM,GAAwB,EAAS,mBAAmB,KAAO,CAAC,EAC5D,IACJ,MAAM,QAAQ,IAAI,GAAY,IAAI,CAAC,IAAY,IAAI,KAAK,GAAG,YAAkB,GAAS,EAAE,KAAK,CAAC,CAAC,GAC/F,KAAK;AAAA,CAAI,EAmBL,GAAc,MAAM,EAAgB,CAAS,EAEnD,eAAe,EAAc,CAAC,EAAc,CAC1C,IAAQ,YAAa,IAAI,IAAI,EAAI,GAAG,EAEpC,GAAI,EAAU,CAAQ,EACpB,OAAO,MAAM,EAAc,EAAK,CAAQ,EAG1C,IAAM,EAAW,GAAe,CAAQ,EAMxC,GAJE,EAAoB,CAAQ,GAC5B,EAAS,WAAW,cAAc,GACjC,IAAa,MAAQ,GAAY,IAAI,CAAQ,EAE7B,CAUjB,GAAI,CAAC,GAAY,CAAE,MAAM,GAAO,CAAQ,EACtC,OAAO,EAAgB,CAAQ,GAAM,MAAM,EAAc,EAAK,CAAQ,EAGxE,GAAI,CACF,OAAO,EAAmB,EAAK,CAAQ,EACvC,MAAO,EAAO,CAEd,OADA,EAAI,cAAc,CAAK,EAChB,IAAI,SAAS,YAAa,CAAE,OAAQ,GAAI,CAAC,GAIpD,OAAO,MAAM,EAAc,EAAK,CAAQ,EAG1C,eAAe,CAAa,CAAC,EAAc,EAAkB,CAC3D,IAAM,EAAU,EAAI,MAAM,KAAK,CAAG,EAElC,GAAI,CACF,IAAM,EAAS,MAAM,EAAQ,CAAG,EAChC,GAAI,aAAkB,SACpB,OAAO,EACF,KACL,IAAM,EAAS,CAAC,EAuBhB,OArBA,EAAO,KAAK,CACV,QAAS,EACX,CAAC,EAmBM,MAAM,EAAO,CAClB,UAlBgB,MAAO,IAA2B,CAClD,GAAI,CAAC,EACH,OAAO,EAAa,CAAC,CAAC,EAExB,QAAW,MAAQ,EAAc,CAC/B,IAAM,GAAa,EAAS,aAAa,UACzC,QAAW,KAAW,IAAY,KAAO,CAAC,EAAG,CAC3C,IAAM,GAAM,IAAI,KAAK,GAAG,QAAQ,IAAI,mBAAmB,GAAS,EAChE,EAAO,KAAK,CACV,GAAI,EACJ,QAAS,MAAM,GAAI,KAAK,CAC1B,CAAC,GAGL,OAAO,EAAa,CAAM,GAK1B,cACA,wBACA,WACA,gBACA,cACA,QACA,cACA,WACF,CAAC,GAEH,MAAO,EAAK,CACZ,OAAO,EAAuB,EAAK,EAAU,EAAI,WAAW,GAOhE,IAAM,IAAsB,QAAQ,IAAI,kBAAoB,QAAQ,YAAY,IAAM,MAIhF,GAAiB,EAAgB,QAAQ,IAAI,gBAAgB,EAE7D,EAAS,IAAI,MAAM,CACvB,mBAAoB,YACpB,MAAO,MAAO,EAAK,IAAW,CAG5B,EAAoB,EAAI,QAAS,EAAO,UAAU,CAAG,GAAG,SAAW,KAAM,EAAc,EAGvF,IAAM,EAAM,MAAM,EAAgB,EAAK,CAAC,IACtC,EAAI,qBAAqB,EAAK,GAAgB,CAAC,IAC7C,EAAuB,EAAK,IAAI,IAAI,EAAI,GAAG,EAAE,SAAU,EAAI,WAAW,CACxE,CACF,EAKA,OAAO,GAAqB,EAAiB,EAAK,CAAG,EAAI,GAE3D,YAAa,OAAO,QAAQ,IAAI,qBAAuB,EAAE,EACzD,KAAM,QAAQ,IAAI,MAAQ,IAC5B,CAAC,EAID,OAFA,EAAmB,CAAE,KAAM,EAAO,KAAM,SAAQ,CAAC,EAE1C",
-  "debugId": "3C573BE793FFD76464756E2164756E21",
+  "debugId": "0D6094061F3B99EA64756E2164756E21",
   "names": []
 }

package/dist/chunk-br9p390p.js

@@ -0,0 +1,5 @@
+// @bun
+class J extends Error{lock;token;constructor(x,y,B="its lease ran out or another holder took it"){super(`Lost the lock "${x}" (token ${y}): ${B}.`);this.lock=x;this.token=y;this.name="LockLostError"}}var Q=60000,V=100,X=(x)=>new Promise((y)=>setTimeout(y,x));class O{store;name;owner;token;ttl;lost;controller=new AbortController;deadline;expiryTimer;renewTimer;done=!1;constructor(x,y,B,z,C,G){this.store=x;this.name=y;this.owner=B;this.token=z;this.ttl=C;this.lost=this.controller.signal,this.deadline=G+C,this.armExpiry()}get expired(){return this.lost.aborted||performance.now()>=this.deadline}async extend(x=this.ttl){if(this.lost.aborted)return!1;let y=performance.now();if(!await this.store.extend(this.name,this.owner,this.token,x))return this.markLost(),!1;if(this.done)return!0;return this.deadline=Math.max(this.deadline,y+x),this.armExpiry(),!0}async isHeld(){if(this.lost.aborted)return!1;let x=await this.store.held(this.name,this.owner,this.token);if(!x)this.markLost();return x}async fence(x){if(this.lost.aborted)throw new J(this.name,this.token);try{return await this.store.fence(this.name,this.owner,this.token,x)}catch(y){if(y instanceof J)this.markLost();throw y}}async release(){if(this.stop(),this.lost.aborted)return!1;return this.store.release(this.name,this.owner,this.token)}startRenewing(){if(this.renewTimer||this.done)return;this.renewTimer=setInterval(()=>{this.extend().catch((x)=>{console.error(`[gemi] Could not renew the lock "${this.name}".`,x)})},Math.max(1,Math.floor(this.ttl/3))),this.renewTimer.unref?.()}markLost(x){if(this.stop(),!this.lost.aborted)this.controller.abort(new J(this.name,this.token,x))}stop(){this.done=!0,clearInterval(this.renewTimer),clearTimeout(this.expiryTimer),this.renewTimer=void 0,this.expiryTimer=void 0}armExpiry(){clearTimeout(this.expiryTimer),this.expiryTimer=setTimeout(()=>this.markLost("its lease ran out before it was renewed"),Math.max(0,this.deadline-performance.now())),this.expiryTimer.unref?.()}}class Y{store;static token="locks";constructor(x){this.store=x}async acquire(x,y={}){let B=y.ttl??Q;if(!(B>0))throw Error(`A lock's ttl must be a positive number of milliseconds; got ${B}.`);let z=Bun.randomUUIDv7(),C=performance.now()+Math.max(0,y.wait??0);for(;;){let G=performance.now(),K=await this.store.acquire(x,z,B);if(K!==null){let N=new O(this.store,x,z,K,B,G);if(y.renew)N.startRenewing();return N}let M=C-performance.now();if(M<=0)return null;await X(Math.min(V,M))}}async run(x,y,B){let z=await this.acquire(x,{...y,renew:y.renew??!0});if(!z)return{acquired:!1};let C;try{C=await B(z)}catch(G){throw await z.release().catch(()=>{}),G}if(z.expired)throw z.markLost(),z.lost.reason;return await z.release(),{acquired:!0,value:C}}}
+export{J as Ff,O as Gf,Y as Hf};
+
+//# debugId=B76039054448948464756E2164756E21

package/dist/chunk-br9p390p.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../services/lock/LockStore.ts", "../services/lock/LockManager.ts"],
+  "sourcesContent": [
+    "/**\n * Where locks are kept: one record per lock name, with the current holder, a\n * fencing token and a lease.\n *\n * ### The model\n *\n * A lock is held by an **owner** (a random id per acquisition, or a job's id)\n * until its **lease** runs out or the owner releases it. Every successful\n * `acquire` raises the name's **token** by one, so tokens only grow per name and\n * a newer holder always has a larger one than any older holder. A store never\n * forgets a name on release, which is what keeps the token growing; `prune`\n * (on a store that has it) removes names idle for long enough.\n *\n * A lease that runs out is lost, even if nobody has taken the lock since:\n * `extend`, `held` and `fence` all refuse it. That is the rule that makes the\n * token mean something. A holder whose process stalled past its lease cannot\n * renew its way back in after another process may have started the same work.\n *\n * ### Time\n *\n * Durations cross this interface as relative milliseconds, as they do for\n * `QueueDriver`, so a store shared between machines can measure every lease on\n * one clock, its own.\n */\nexport interface LockStore {\n  /**\n   * Takes `name` for `owner` for `ttlMs`, if nobody holds it or the holder's\n   * lease ran out, and resolves to the new fencing token. `null` when it is\n   * held. Two concurrent calls, from any processes sharing the store, never\n   * both succeed.\n   */\n  acquire(name: string, owner: string, ttlMs: number): Promise<number | null>;\n\n  /**\n   * Renews a lease to `ttlMs` from now, and resolves to whether `owner` still\n   * held it with `token`. A lease that already ran out is not renewed.\n   */\n  extend(name: string, owner: string, token: number, ttlMs: number): Promise<boolean>;\n\n  /**\n   * Ends a hold, and resolves to whether `owner` held it (with `token`, when\n   * given) and its lease had not run out. Releasing a lock someone else now\n   * holds does nothing.\n   */\n  release(name: string, owner: string, token?: number): Promise<boolean>;\n\n  /** The current holder, or `null` when the lock is free or its lease ran out. */\n  holder(name: string): Promise<{ owner: string; token: number } | null>;\n\n  /** Whether `owner` still holds `name` with `token`, its lease running. */\n  held(name: string, owner: string, token: number): Promise<boolean>;\n\n  /**\n   * Raises a counter kept under `name` to `value` if it is below it, and\n   * resolves to whether it did. For \"once per tick across instances\": every\n   * instance advances to the tick's number and only the first one gets `true`.\n   * A name used here must not also be used with `acquire`.\n   */\n  advance(name: string, value: number): Promise<boolean>;\n\n  /**\n   * Runs `fn` only if `owner` still holds `name` with `token`, and keeps the\n   * lock from changing hands until `fn` settles. Rejects with `LockLostError`\n   * when the hold is gone. On the database store this is a transaction that\n   * locks the lock's row first, so writes `fn` makes through the ORM on the\n   * same connection commit only while the hold is current, and a new holder's\n   * `acquire` waits for that commit.\n   */\n  fence<T>(name: string, owner: string, token: number, fn: () => Promise<T>): Promise<T>;\n\n  /**\n   * Counts one hit against a fixed window kept under `name`: allowed when\n   * fewer than `limit` were counted in the current window, which starts at the\n   * first hit after the last one ended and lasts `windowMs`. A refused hit is\n   * not counted. `resetInMs` is how long until the window ends. A name used\n   * here must not also be used with `acquire` or `advance`.\n   */\n  hit(\n    name: string,\n    limit: number,\n    windowMs: number,\n  ): Promise<{ allowed: boolean; resetInMs: number }>;\n\n  /** Takes back one counted hit from the current window, if it has one. */\n  refund(name: string): Promise<void>;\n}\n\n/** The hold on a lock ended before the work it guarded did. */\nexport class LockLostError extends Error {\n  constructor(\n    readonly lock: string,\n    readonly token: number,\n    detail = \"its lease ran out or another holder took it\",\n  ) {\n    super(`Lost the lock \"${lock}\" (token ${token}): ${detail}.`);\n    this.name = \"LockLostError\";\n  }\n}\n",
+    "import { LockLostError, type LockStore } from \"./LockStore\";\n\nexport type AcquireOptions = {\n  /** The lease, in milliseconds. Default one minute. */\n  ttl?: number;\n  /**\n   * How long to keep trying when the lock is held, in milliseconds. Default\n   * `0`: one try.\n   */\n  wait?: number;\n  /**\n   * Renew the lease every third of `ttl` until the lock is released. Default\n   * `true` for `run`, `false` for `acquire`, whose caller may never release.\n   */\n  renew?: boolean;\n};\n\nexport type LockRunResult<T> = { acquired: true; value: T } | { acquired: false };\n\nconst DEFAULT_TTL = 60_000;\nconst WAIT_STEP = 100;\n\nconst sleep = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms));\n\n/**\n * One hold on a lock, from a successful `acquire` until `release` or the end\n * of its lease.\n *\n * `token` is the fencing token: it grows with each new holder of the name, so\n * a write that records it can be refused when an older holder tries to make\n * it late. `fence` does that refusal for writes to the application's own\n * database.\n *\n * `lost` aborts when the hold is known to be gone: a renewal found another\n * holder, or the lease ran out by this process's clock without a successful\n * renewal. The local deadline is measured from just before each request that\n * set the lease, so it always falls before the store's own expiry.\n */\nexport class HeldLock {\n  readonly lost: AbortSignal;\n  private readonly controller = new AbortController();\n  private deadline: number;\n  private expiryTimer: ReturnType<typeof setTimeout> | undefined;\n  private renewTimer: ReturnType<typeof setInterval> | undefined;\n  private done = false;\n\n  constructor(\n    private readonly store: LockStore,\n    readonly name: string,\n    readonly owner: string,\n    readonly token: number,\n    readonly ttl: number,\n    requestedAt: number,\n  ) {\n    this.lost = this.controller.signal;\n    this.deadline = requestedAt + ttl;\n    this.armExpiry();\n  }\n\n  /** Whether the lease has run out by this process's clock, or the hold was lost. */\n  get expired(): boolean {\n    return this.lost.aborted || performance.now() >= this.deadline;\n  }\n\n  /** Renews the lease. `false`, and `lost` aborted, when the hold was already gone. */\n  async extend(ttl = this.ttl): Promise<boolean> {\n    if (this.lost.aborted) return false;\n    const requestedAt = performance.now();\n    const ok = await this.store.extend(this.name, this.owner, this.token, ttl);\n    if (!ok) {\n      this.markLost();\n      return false;\n    }\n    if (this.done) return true;\n    this.deadline = Math.max(this.deadline, requestedAt + ttl);\n    this.armExpiry();\n    return true;\n  }\n\n  /** Asks the store whether this hold is still current. */\n  async isHeld(): Promise<boolean> {\n    if (this.lost.aborted) return false;\n    const held = await this.store.held(this.name, this.owner, this.token);\n    if (!held) this.markLost();\n    return held;\n  }\n\n  /**\n   * Runs `fn` only while this hold is current, and keeps the lock from\n   * changing hands until it settles; rejects with `LockLostError` otherwise.\n   * On the database store `fn` runs in a transaction on the store's\n   * connection, so ORM writes inside it commit only if the hold was current.\n   */\n  async fence<T>(fn: () => Promise<T>): Promise<T> {\n    if (this.lost.aborted) throw new LockLostError(this.name, this.token);\n    try {\n      return await this.store.fence(this.name, this.owner, this.token, fn);\n    } catch (error) {\n      if (error instanceof LockLostError) this.markLost();\n      throw error;\n    }\n  }\n\n  /** Ends the hold. `false` when it had already been lost. */\n  async release(): Promise<boolean> {\n    this.stop();\n    if (this.lost.aborted) return false;\n    return this.store.release(this.name, this.owner, this.token);\n  }\n\n  /** Renews every third of the lease until `release`. */\n  startRenewing() {\n    if (this.renewTimer || this.done) return;\n    this.renewTimer = setInterval(\n      () => {\n        this.extend().catch((error) => {\n          // Not lost yet: the local deadline still decides, so a store that\n          // comes back within the lease keeps the hold.\n          console.error(`[gemi] Could not renew the lock \"${this.name}\".`, error);\n        });\n      },\n      Math.max(1, Math.floor(this.ttl / 3)),\n    );\n    this.renewTimer.unref?.();\n  }\n\n  /** @internal Marks the hold as gone and stops every timer. */\n  markLost(detail?: string) {\n    this.stop();\n    if (!this.lost.aborted) {\n      this.controller.abort(new LockLostError(this.name, this.token, detail));\n    }\n  }\n\n  private stop() {\n    this.done = true;\n    clearInterval(this.renewTimer);\n    clearTimeout(this.expiryTimer);\n    this.renewTimer = undefined;\n    this.expiryTimer = undefined;\n  }\n\n  private armExpiry() {\n    clearTimeout(this.expiryTimer);\n    this.expiryTimer = setTimeout(\n      () => this.markLost(\"its lease ran out before it was renewed\"),\n      Math.max(0, this.deadline - performance.now()),\n    );\n    this.expiryTimer.unref?.();\n  }\n}\n\n/**\n * Named locks with leases and fencing tokens, over a `LockStore`. The queue\n * builds one over its own storage (`app(QueueManager).locks`), so with the\n * database driver the locks hold across every process sharing the database.\n * The `Lock` facade fronts it.\n */\nexport class LockManager {\n  static token = \"locks\";\n\n  constructor(readonly store: LockStore) {}\n\n  /** Takes the lock, or resolves `null` if it is held (after `wait`, when given). */\n  async acquire(name: string, options: AcquireOptions = {}): Promise<HeldLock | null> {\n    const ttl = options.ttl ?? DEFAULT_TTL;\n    if (!(ttl > 0))\n      throw new Error(`A lock's ttl must be a positive number of milliseconds; got ${ttl}.`);\n    const owner = Bun.randomUUIDv7();\n    const giveUpAt = performance.now() + Math.max(0, options.wait ?? 0);\n    for (;;) {\n      const requestedAt = performance.now();\n      const token = await this.store.acquire(name, owner, ttl);\n      if (token !== null) {\n        const lock = new HeldLock(this.store, name, owner, token, ttl, requestedAt);\n        if (options.renew) lock.startRenewing();\n        return lock;\n      }\n      const left = giveUpAt - performance.now();\n      if (left <= 0) return null;\n      await sleep(Math.min(WAIT_STEP, left));\n    }\n  }\n\n  /**\n   * Runs `fn` while holding the lock, renewing the lease as it runs, and\n   * releases it after. `{ acquired: false }` when the lock was held.\n   *\n   * If the hold is lost while `fn` runs, `lock.lost` aborts, and once `fn`\n   * settles this rejects with `LockLostError` instead of resolving: the caller\n   * must not treat work done without the lock as done under it.\n   */\n  async run<T>(\n    name: string,\n    options: AcquireOptions,\n    fn: (lock: HeldLock) => Promise<T> | T,\n  ): Promise<LockRunResult<T>> {\n    const lock = await this.acquire(name, { ...options, renew: options.renew ?? true });\n    if (!lock) return { acquired: false };\n\n    let value: T;\n    try {\n      value = await fn(lock);\n    } catch (error) {\n      await lock.release().catch(() => {});\n      throw error;\n    }\n    if (lock.expired) {\n      lock.markLost();\n      throw lock.lost.reason as LockLostError;\n    }\n    await lock.release();\n    return { acquired: true, value };\n  }\n}\n"
+  ],
+  "mappings": ";AAwFO,MAAM,UAAsB,KAAM,CAE5B,KACA,MAFX,WAAW,CACA,EACA,EACT,EAAS,8CACT,CACA,MAAM,kBAAkB,aAAgB,OAAW,IAAS,EAJnD,YACA,aAIT,KAAK,KAAO,gBAEhB,CC9EA,IAAM,EAAc,MACd,EAAY,IAEZ,EAAQ,CAAC,IAAe,IAAI,QAAQ,CAAC,IAAY,WAAW,EAAS,CAAE,CAAC,EAgBvE,MAAM,CAAS,CASD,MACR,KACA,MACA,MACA,IAZF,KACQ,WAAa,IAAI,gBAC1B,SACA,YACA,WACA,KAAO,GAEf,WAAW,CACQ,EACR,EACA,EACA,EACA,EACT,EACA,CANiB,aACR,YACA,aACA,aACA,WAGT,KAAK,KAAO,KAAK,WAAW,OAC5B,KAAK,SAAW,EAAc,EAC9B,KAAK,UAAU,KAIb,QAAO,EAAY,CACrB,OAAO,KAAK,KAAK,SAAW,YAAY,IAAI,GAAK,KAAK,cAIlD,OAAM,CAAC,EAAM,KAAK,IAAuB,CAC7C,GAAI,KAAK,KAAK,QAAS,MAAO,GAC9B,IAAM,EAAc,YAAY,IAAI,EAEpC,GAAI,CADO,MAAM,KAAK,MAAM,OAAO,KAAK,KAAM,KAAK,MAAO,KAAK,MAAO,CAAG,EAGvE,OADA,KAAK,SAAS,EACP,GAET,GAAI,KAAK,KAAM,MAAO,GAGtB,OAFA,KAAK,SAAW,KAAK,IAAI,KAAK,SAAU,EAAc,CAAG,EACzD,KAAK,UAAU,EACR,QAIH,OAAM,EAAqB,CAC/B,GAAI,KAAK,KAAK,QAAS,MAAO,GAC9B,IAAM,EAAO,MAAM,KAAK,MAAM,KAAK,KAAK,KAAM,KAAK,MAAO,KAAK,KAAK,EACpE,GAAI,CAAC,EAAM,KAAK,SAAS,EACzB,OAAO,OASH,MAAQ,CAAC,EAAkC,CAC/C,GAAI,KAAK,KAAK,QAAS,MAAM,IAAI,EAAc,KAAK,KAAM,KAAK,KAAK,EACpE,GAAI,CACF,OAAO,MAAM,KAAK,MAAM,MAAM,KAAK,KAAM,KAAK,MAAO,KAAK,MAAO,CAAE,EACnE,MAAO,EAAO,CACd,GAAI,aAAiB,EAAe,KAAK,SAAS,EAClD,MAAM,QAKJ,QAAO,EAAqB,CAEhC,GADA,KAAK,KAAK,EACN,KAAK,KAAK,QAAS,MAAO,GAC9B,OAAO,KAAK,MAAM,QAAQ,KAAK,KAAM,KAAK,MAAO,KAAK,KAAK,EAI7D,aAAa,EAAG,CACd,GAAI,KAAK,YAAc,KAAK,KAAM,OAClC,KAAK,WAAa,YAChB,IAAM,CACJ,KAAK,OAAO,EAAE,MAAM,CAAC,IAAU,CAG7B,QAAQ,MAAM,oCAAoC,KAAK,SAAU,CAAK,EACvE,GAEH,KAAK,IAAI,EAAG,KAAK,MAAM,KAAK,IAAM,CAAC,CAAC,CACtC,EACA,KAAK,WAAW,QAAQ,EAI1B,QAAQ,CAAC,EAAiB,CAExB,GADA,KAAK,KAAK,EACN,CAAC,KAAK,KAAK,QACb,KAAK,WAAW,MAAM,IAAI,EAAc,KAAK,KAAM,KAAK,MAAO,CAAM,CAAC,EAIlE,IAAI,EAAG,CACb,KAAK,KAAO,GACZ,cAAc,KAAK,UAAU,EAC7B,aAAa,KAAK,WAAW,EAC7B,KAAK,WAAa,OAClB,KAAK,YAAc,OAGb,SAAS,EAAG,CAClB,aAAa,KAAK,WAAW,EAC7B,KAAK,YAAc,WACjB,IAAM,KAAK,SAAS,yCAAyC,EAC7D,KAAK,IAAI,EAAG,KAAK,SAAW,YAAY,IAAI,CAAC,CAC/C,EACA,KAAK,YAAY,QAAQ,EAE7B,CAQO,MAAM,CAAY,CAGF,YAFd,OAAQ,QAEf,WAAW,CAAU,EAAkB,CAAlB,kBAGf,QAAO,CAAC,EAAc,EAA0B,CAAC,EAA6B,CAClF,IAAM,EAAM,EAAQ,KAAO,EAC3B,GAAI,EAAE,EAAM,GACV,MAAU,MAAM,+DAA+D,IAAM,EACvF,IAAM,EAAQ,IAAI,aAAa,EACzB,EAAW,YAAY,IAAI,EAAI,KAAK,IAAI,EAAG,EAAQ,MAAQ,CAAC,EAClE,OAAS,CACP,IAAM,EAAc,YAAY,IAAI,EAC9B,EAAQ,MAAM,KAAK,MAAM,QAAQ,EAAM,EAAO,CAAG,EACvD,GAAI,IAAU,KAAM,CAClB,IAAM,EAAO,IAAI,EAAS,KAAK,MAAO,EAAM,EAAO,EAAO,EAAK,CAAW,EAC1E,GAAI,EAAQ,MAAO,EAAK,cAAc,EACtC,OAAO,EAET,IAAM,EAAO,EAAW,YAAY,IAAI,EACxC,GAAI,GAAQ,EAAG,OAAO,KACtB,MAAM,EAAM,KAAK,IAAI,EAAW,CAAI,CAAC,QAYnC,IAAM,CACV,EACA,EACA,EAC2B,CAC3B,IAAM,EAAO,MAAM,KAAK,QAAQ,EAAM,IAAK,EAAS,MAAO,EAAQ,OAAS,EAAK,CAAC,EAClF,GAAI,CAAC,EAAM,MAAO,CAAE,SAAU,EAAM,EAEpC,IAAI,EACJ,GAAI,CACF,EAAQ,MAAM,EAAG,CAAI,EACrB,MAAO,EAAO,CAEd,MADA,MAAM,EAAK,QAAQ,EAAE,MAAM,IAAM,EAAE,EAC7B,EAER,GAAI,EAAK,QAEP,MADA,EAAK,SAAS,EACR,EAAK,KAAK,OAGlB,OADA,MAAM,EAAK,QAAQ,EACZ,CAAE,SAAU,GAAM,OAAM,EAEnC",
+  "debugId": "B76039054448948464756E2164756E21",
+  "names": []
+}