@de-otio/trellis 0.7.0 → 0.9.0

package/dist/lib/middleware.js

@@ -1,54 +1,15 @@
-"use strict";
 /**
  * Middleware
  *
  * Provides middleware functionality for the route abstraction layer.
  * Middleware can modify requests, responses, or short-circuit the request.
  */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.composeMiddleware = composeMiddleware;
-exports.corsMiddleware = corsMiddleware;
-exports.securityHeadersMiddleware = securityHeadersMiddleware;
-exports.rateLimitMiddleware = rateLimitMiddleware;
-exports.csrfMiddleware = csrfMiddleware;
-exports.mfaMiddleware = mfaMiddleware;
+import { getLogger } from "./logger.js";
+import { RateLimiter, buildRateLimitResponse } from "./rate-limit.js";
 /**
  * Compose multiple middleware functions
  */
-function composeMiddleware(middlewares) {
+export function composeMiddleware(middlewares) {
     return async (context, next) => {
         let index = -1;
         async function dispatch(i) {
@@ -68,10 +29,10 @@ function composeMiddleware(middlewares) {
 /**
  * CORS middleware
  */
-function corsMiddleware() {
+export function corsMiddleware() {
     return async (context, next) => {
         const { request, env } = context;
-        const { CorsHandler } = await Promise.resolve().then(() => __importStar(require("./cors-handler")));
+        const { CorsHandler } = await import("./cors-handler.js");
         // Handle OPTIONS requests
         if (request.method === "OPTIONS") {
             const allowedOrigin = CorsHandler.getAllowedOrigin(request, env);
@@ -103,9 +64,9 @@ function corsMiddleware() {
 /**
  * Security headers middleware
  */
-function securityHeadersMiddleware(env) {
+export function securityHeadersMiddleware(env) {
     return async (context, next) => {
-        const { SecurityHeaders } = await Promise.resolve().then(() => __importStar(require("./security-headers")));
+        const { SecurityHeaders } = await import("./security-headers.js");
         const securityHeaders = new SecurityHeaders(env);
         const response = await next();
         return securityHeaders.addSecurityHeaders(response);
@@ -114,111 +75,75 @@ function securityHeadersMiddleware(env) {
 /**
  * Rate limiting middleware
  *
- * Limits the number of requests a user can make within a time window.
- * Uses sliding window algorithm with KV storage.
+ * Limits requests per caller within a window, backed by the **foundation
+ * token-bucket** limiter (`RateLimiter` in `rate-limit.ts`) — the same limiter
+ * the auth path uses. Consolidated from the former fixed-window-over-KV
+ * implementation: one algorithm (token-bucket), one store (the
+ * `RATE_LIMIT_TABLE` DynamoDB limiter, or an in-memory limiter in dev/test),
+ * one 429 shape.
+ *
+ * `{maxRequests, windowMs}` map to `capacity = maxRequests`,
+ * `refillRate = maxRequests / windowSeconds` (bursts up to `maxRequests`, then
+ * continuous refill). The caller is keyed by the authenticated `userId` when
+ * present, else by request IP (handled inside `RateLimiter.getRateLimitKey`).
+ *
+ * Failure policy (S4.2) is preserved: if the distributed limiter is
+ * unreachable, fail CLOSED (503) on `/api/admin` and `/api/auth`, fail OPEN
+ * elsewhere.
  *
- * @param options - Configuration options
- * @param options.maxRequests - Maximum requests allowed in the window (default: 20)
- * @param options.windowMs - Time window in milliseconds (default: 60000 = 1 minute)
- * @param options.keyPrefix - KV key prefix (default: 'rate_limit')
+ * @param options.maxRequests - Token-bucket capacity / window limit (default: 20)
+ * @param options.windowMs - Window in ms; sets the refill rate (default: 60000)
+ * @param options.keyPrefix - Accepted for backward compatibility; no longer
+ *   used (keys are composed by `RateLimiter` as `ratelimit:<endpoint>:<id>`).
  */
-function rateLimitMiddleware(options) {
+export function rateLimitMiddleware(options) {
     const maxRequests = options?.maxRequests ?? 20;
     const windowMs = options?.windowMs ?? 60000; // 1 minute default
-    const keyPrefix = options?.keyPrefix ?? "rate_limit";
+    const windowSeconds = Math.max(1, Math.round(windowMs / 1000));
     return async (context, next) => {
-        const { request, env, requestContext } = context;
-        // Get user identifier (userId from session or IP address as fallback)
-        const { SessionManager } = await Promise.resolve().then(() => __importStar(require("./session-manager")));
-        const { Secrets } = await Promise.resolve().then(() => __importStar(require("./secret-resolver")));
-        const sessionManager = new SessionManager();
-        let userIdentifier;
+        const { request, env } = context;
+        // Identify the caller: prefer the authenticated userId; RateLimiter falls
+        // back to the request IP internally when no identity is supplied.
+        let userId;
         try {
-            const sessionSecret = Secrets.getSessionSecret(env);
-            const session = await sessionManager.getSession(request, sessionSecret, env);
-            userIdentifier = session?.userId ?? request.headers.get("CF-Connecting-IP") ?? "unknown";
+            const { SessionManager } = await import("./session-cookie.js");
+            const session = await new SessionManager().getSession(request, env.SESSION_SECRET, env);
+            userId = session?.userId ?? undefined;
         }
         catch {
-            // Fallback to IP if session retrieval fails
-            userIdentifier = request.headers.get("CF-Connecting-IP") ?? "unknown";
-        }
-        // Skip rate limiting if no KV namespace configured
-        if (!env.FEED_CACHE_KV) {
-            return next();
+            // ignore — fall back to IP keying inside RateLimiter
         }
-        // Create rate limit key
-        const rateLimitKey = `${keyPrefix}:${userIdentifier}:${context.pathname}`;
-        const now = Date.now();
+        const limiter = new RateLimiter();
+        let result;
         try {
-            // Get current request count from KV
-            const data = await env.FEED_CACHE_KV.get(rateLimitKey);
-            let requestCount = 0;
-            let windowStart = now;
-            if (data) {
-                const parsed = JSON.parse(data);
-                requestCount = parsed.count;
-                windowStart = parsed.windowStart;
-                // Check if window has expired
-                if (now - windowStart >= windowMs) {
-                    // Reset window
-                    requestCount = 0;
-                    windowStart = now;
-                }
-            }
-            // Check if rate limit exceeded
-            if (requestCount >= maxRequests) {
-                const retryAfter = Math.ceil((windowStart + windowMs - now) / 1000);
-                const { Logger } = await Promise.resolve().then(() => __importStar(require("./logger")));
-                Logger.getInstance(env).warn("[Rate Limit] Request rate limit exceeded", {
-                    pathname: context.pathname,
-                    userIdentifier,
-                    requestCount,
-                    maxRequests,
-                    retryAfter,
-                });
-                return new Response(JSON.stringify({
-                    error: "Rate limit exceeded",
-                    retryAfter,
-                    maxRequests,
-                    windowMs,
-                }), {
-                    status: 429,
-                    headers: {
-                        "content-type": "application/json",
-                        "retry-after": retryAfter.toString(),
-                        "x-ratelimit-limit": maxRequests.toString(),
-                        "x-ratelimit-remaining": "0",
-                        "x-ratelimit-reset": Math.ceil((windowStart + windowMs) / 1000).toString(),
-                    },
-                });
-            }
-            // Increment request count
-            requestCount++;
-            // Store updated count in KV
-            await env.FEED_CACHE_KV.put(rateLimitKey, JSON.stringify({ count: requestCount, windowStart }), { expirationTtl: Math.ceil(windowMs / 1000) + 10 });
-            // Proceed with request
-            const response = await next();
-            // Add rate limit headers to response
-            response.headers.set("x-ratelimit-limit", maxRequests.toString());
-            response.headers.set("x-ratelimit-remaining", Math.max(0, maxRequests - requestCount).toString());
-            response.headers.set("x-ratelimit-reset", Math.ceil((windowStart + windowMs) / 1000).toString());
-            return response;
+            // Strict path: a limiter (infra) failure throws so we can apply the S4.2
+            // fail-closed/open policy below, rather than silently degrading.
+            result = await limiter.checkRateLimitKVStrict(env, request, context.pathname, maxRequests, windowSeconds, undefined, undefined, userId);
         }
         catch (error) {
-            // Fail-closed for sensitive routes (admin and auth) — deny request if rate limiting fails
-            if (context.pathname.startsWith("/api/admin") || context.pathname.startsWith("/api/auth")) {
-                const { Logger } = await Promise.resolve().then(() => __importStar(require("./logger")));
-                Logger.getInstance(env).error("[Rate Limit] Rate limiting error on sensitive route, denying request", error);
-                return new Response(JSON.stringify({ error: "Service temporarily unavailable" }), {
-                    status: 503,
-                    headers: { "content-type": "application/json" },
-                });
+            if (context.pathname.startsWith("/api/admin") ||
+                context.pathname.startsWith("/api/auth")) {
+                getLogger().error("[Rate Limit] Rate limiting error on sensitive route, denying request", error);
+                return new Response(JSON.stringify({ error: "Service temporarily unavailable" }), { status: 503, headers: { "content-type": "application/json" } });
             }
-            // Fail-open for other routes — log error and continue
-            const { Logger } = await Promise.resolve().then(() => __importStar(require("./logger")));
-            Logger.getInstance(env).error("[Rate Limit] Rate limiting error, allowing request", error);
+            getLogger().error("[Rate Limit] Rate limiting error, allowing request", error);
             return next();
         }
+        if (!result.allowed) {
+            const retryAfter = result.retryAfter ??
+                Math.max(1, Math.ceil((result.resetAt - Date.now()) / 1000));
+            getLogger().warn("[Rate Limit] Request rate limit exceeded", {
+                pathname: context.pathname,
+                maxRequests,
+                retryAfter,
+            });
+            return buildRateLimitResponse(maxRequests, retryAfter, result.resetAt);
+        }
+        const response = await next();
+        response.headers.set("X-RateLimit-Limit", maxRequests.toString());
+        response.headers.set("X-RateLimit-Remaining", Math.max(0, result.remaining).toString());
+        response.headers.set("X-RateLimit-Reset", new Date(result.resetAt).toISOString());
+        return response;
     };
 }
 /**
@@ -233,7 +158,7 @@ function rateLimitMiddleware(options) {
  * - X-CSRF-Token header with valid token
  * - CSRF token in session (or KV fallback if configured)
  */
-function csrfMiddleware() {
+export function csrfMiddleware() {
     return async (context, next) => {
         const { request, env } = context;
         // Skip for safe methods
@@ -254,13 +179,12 @@ function csrfMiddleware() {
             }
         }
         // Get session
-        const { SessionManager } = await Promise.resolve().then(() => __importStar(require("./session-manager")));
-        const { Secrets } = await Promise.resolve().then(() => __importStar(require("./secret-resolver")));
+        const { SessionManager } = await import("./session-cookie.js");
         const sessionManager = new SessionManager();
         // Get session secret with proper error handling
         let sessionSecret;
         try {
-            sessionSecret = Secrets.getSessionSecret(env);
+            sessionSecret = env.SESSION_SECRET;
             if (!sessionSecret || typeof sessionSecret !== "string") {
                 // If we can't get the secret, skip CSRF validation (let auth middleware handle it)
                 return next();
@@ -275,8 +199,7 @@ function csrfMiddleware() {
         // If no session, let authentication middleware handle it
         // CSRF protection only applies to authenticated requests
         if (!session) {
-            const { Logger } = await Promise.resolve().then(() => __importStar(require("./logger")));
-            Logger.getInstance(env).debug("[CSRF Middleware] No session found, skipping CSRF check", {
+            getLogger().debug("[CSRF Middleware] No session found, skipping CSRF check", {
                 pathname: context.pathname,
                 hasCookie: !!request.headers.get("Cookie"),
                 hasAuthHeader: !!authHeader,
@@ -286,8 +209,7 @@ function csrfMiddleware() {
         // Validate CSRF token
         const token = request.headers.get("X-CSRF-Token");
         if (!token) {
-            const { Logger } = await Promise.resolve().then(() => __importStar(require("./logger")));
-            Logger.getInstance(env).warn("[CSRF Middleware] CSRF token required but missing", {
+            getLogger().warn("[CSRF Middleware] CSRF token required but missing", {
                 pathname: context.pathname,
                 userId: session.userId,
                 hasCookie: !!request.headers.get("Cookie"),
@@ -298,11 +220,10 @@ function csrfMiddleware() {
                 headers: { "content-type": "application/json" },
             });
         }
-        const { CSRFProtection } = await Promise.resolve().then(() => __importStar(require("./csrf")));
+        const { CSRFProtection } = await import("./csrf.js");
         const isValid = await CSRFProtection.validateToken(token, session, env);
         if (!isValid) {
-            const { Logger } = await Promise.resolve().then(() => __importStar(require("./logger")));
-            Logger.getInstance(env).warn("[CSRF Middleware] Token validation failed", {
+            getLogger().warn("[CSRF Middleware] Token validation failed", {
                 pathname: context.pathname,
                 method: request.method,
                 userId: session.userId,
@@ -329,15 +250,14 @@ function csrfMiddleware() {
  * This middleware should be placed AFTER authentication middleware
  * on admin/sensitive routes.
  */
-function mfaMiddleware() {
+export function mfaMiddleware() {
     return async (context, next) => {
         const { request, env } = context;
-        const { SessionManager } = await Promise.resolve().then(() => __importStar(require("./session-manager")));
-        const { Secrets } = await Promise.resolve().then(() => __importStar(require("./secret-resolver")));
+        const { SessionManager } = await import("./session-cookie.js");
         const sessionManager = new SessionManager();
         let sessionSecret;
         try {
-            sessionSecret = Secrets.getSessionSecret(env);
+            sessionSecret = env.SESSION_SECRET;
             if (!sessionSecret)
                 return next();
         }
@@ -357,8 +277,7 @@ function mfaMiddleware() {
             return next();
         }
         // MFA required but not verified
-        const { Logger } = await Promise.resolve().then(() => __importStar(require("./logger")));
-        Logger.getInstance(env).warn("[MFA Middleware] MFA required but not verified", {
+        getLogger().warn("[MFA Middleware] MFA required but not verified", {
             pathname: context.pathname,
             userId: session.userId,
             role: session.role,

package/dist/lib/middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/lib/middleware.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsBH,8CAoBC;AAKD,wCA6CC;AAKD,8DAQC;AAaD,kDAgJC;AAcD,wCA2GC;AAYD,sCAwDC;AAhbD;;GAEG;AACH,SAAgB,iBAAiB,CAAC,WAAyB;IACzD,OAAO,KAAK,EAAE,OAA0B,EAAE,IAA6B,EAAE,EAAE;QACzE,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QAEf,KAAK,UAAU,QAAQ,CAAC,CAAS;YAC/B,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAClD,CAAC;YACD,KAAK,GAAG,CAAC,CAAC;YAEV,IAAI,CAAC,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;gBAC7B,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAClC,OAAO,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc;IAC5B,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QACjC,MAAM,EAAE,WAAW,EAAE,GAAG,wDAAa,gBAAgB,GAAC,CAAC;QAEvD,0BAA0B;QAC1B,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,aAAa,GAAG,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACjE,MAAM,OAAO,GAA2B;gBACtC,8BAA8B,EAC5B,wCAAwC;gBAC1C,8BAA8B,EAC5B,0DAA0D;gBAC5D,kCAAkC,EAAE,MAAM;aAC3C,CAAC;YAEF,IAAI,aAAa,EAAE,CAAC;gBAClB,OAAO,CAAC,6BAA6B,CAAC,GAAG,aAAa,CAAC;YACzD,CAAC;YAED,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;gBACxB,MAAM,EAAE,GAAG;gBACX,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QAE9B,+BAA+B;QAC/B,MAAM,aAAa,GAAG,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACjE,IAAI,aAAa,EAAE,CAAC;YAClB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,aAAa,CAAC,CAAC;QACrE,CAAC;QACD,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,8BAA8B,EAC9B,wCAAwC,CACzC,CAAC;QACF,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,8BAA8B,EAC9B,0DAA0D,CAC3D,CAAC;QACF,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;QAEjE,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,yBAAyB,CAAC,GAAQ;IAChD,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,EAAE,eAAe,EAAE,GAAG,wDAAa,oBAAoB,GAAC,CAAC;QAC/D,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;QAEjD,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QAC9B,OAAO,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,mBAAmB,CAAC,OAInC;IACC,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,KAAK,CAAC,CAAC,mBAAmB;IAChE,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,YAAY,CAAC;IAErD,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC;QAEjD,sEAAsE;QACtE,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,mBAAmB,GAAC,CAAC;QAC7D,MAAM,EAAE,OAAO,EAAE,GAAG,wDAAa,mBAAmB,GAAC,CAAC;QACtD,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;QAE5C,IAAI,cAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACpD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,aAAa,EACb,GAAG,CACJ,CAAC;YACF,cAAc,GAAG,OAAO,EAAE,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,SAAS,CAAC;QAC3F,CAAC;QAAC,MAAM,CAAC;YACP,4CAA4C;YAC5C,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,SAAS,CAAC;QACxE,CAAC;QAED,mDAAmD;QACnD,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,wBAAwB;QACxB,MAAM,YAAY,GAAG,GAAG,SAAS,IAAI,cAAc,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,CAAC;YACH,oCAAoC;YACpC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACvD,IAAI,YAAY,GAAG,CAAC,CAAC;YACrB,IAAI,WAAW,GAAG,GAAG,CAAC;YAEtB,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC5B,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;gBAEjC,8BAA8B;gBAC9B,IAAI,GAAG,GAAG,WAAW,IAAI,QAAQ,EAAE,CAAC;oBAClC,eAAe;oBACf,YAAY,GAAG,CAAC,CAAC;oBACjB,WAAW,GAAG,GAAG,CAAC;gBACpB,CAAC;YACH,CAAC;YAED,+BAA+B;YAC/B,IAAI,YAAY,IAAI,WAAW,EAAE,CAAC;gBAChC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,GAAG,QAAQ,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;gBACpE,MAAM,EAAE,MAAM,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;gBAC5C,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAC1B,0CAA0C,EAC1C;oBACE,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,cAAc;oBACd,YAAY;oBACZ,WAAW;oBACX,UAAU;iBACX,CACF,CAAC;gBAEF,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,qBAAqB;oBAC5B,UAAU;oBACV,WAAW;oBACX,QAAQ;iBACT,CAAC,EACF;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,aAAa,EAAE,UAAU,CAAC,QAAQ,EAAE;wBACpC,mBAAmB,EAAE,WAAW,CAAC,QAAQ,EAAE;wBAC3C,uBAAuB,EAAE,GAAG;wBAC5B,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE;qBAC3E;iBACF,CACF,CAAC;YACJ,CAAC;YAED,0BAA0B;YAC1B,YAAY,EAAE,CAAC;YAEf,4BAA4B;YAC5B,MAAM,GAAG,CAAC,aAAa,CAAC,GAAG,CACzB,YAAY,EACZ,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,EACpD,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CACnD,CAAC;YAEF,uBAAuB;YACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;YAE9B,qCAAqC;YACrC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,uBAAuB,EACvB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,GAAG,YAAY,CAAC,CAAC,QAAQ,EAAE,CACnD,CAAC;YACF,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,mBAAmB,EACnB,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CACtD,CAAC;YAEF,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,0FAA0F;YAC1F,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC1F,MAAM,EAAE,MAAM,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;gBAC5C,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAC3B,sEAAsE,EACtE,KAAK,CACN,CAAC;gBACF,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,EAC5D;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CACF,CAAC;YACJ,CAAC;YACD,sDAAsD;YACtD,MAAM,EAAE,MAAM,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;YAC5C,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAC3B,oDAAoD,EACpD,KAAK,CACN,CAAC;YACF,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,cAAc;IAC5B,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QAEjC,wBAAwB;QACxB,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACxD,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,sFAAsF;QACtF,6FAA6F;QAC7F,+FAA+F;QAC/F,4EAA4E;QAC5E,+EAA+E;QAC/E,iFAAiF;QACjF,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC1D,IAAI,YAAY,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;QAED,cAAc;QACd,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,mBAAmB,GAAC,CAAC;QAC7D,MAAM,EAAE,OAAO,EAAE,GAAG,wDAAa,mBAAmB,GAAC,CAAC;QACtD,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;QAE5C,gDAAgD;QAChD,IAAI,aAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC9C,IAAI,CAAC,aAAa,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;gBACxD,mFAAmF;gBACnF,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kFAAkF;YAClF,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,aAAa,EACb,GAAG,CACJ,CAAC;QAEF,yDAAyD;QACzD,yDAAyD;QACzD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,EAAE,MAAM,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;YAC5C,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAC3B,yDAAyD,EACzD;gBACE,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAC1C,aAAa,EAAE,CAAC,CAAC,UAAU;aAC5B,CACF,CAAC;YACF,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,sBAAsB;QACtB,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,EAAE,MAAM,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;YAC5C,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAC1B,mDAAmD,EACnD;gBACE,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAC1C,aAAa,EAAE,CAAC,CAAC,UAAU;aAC5B,CACF,CAAC;YACF,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,EAAE;gBACpE,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,QAAQ,GAAC,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAExE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,EAAE,MAAM,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;YAC5C,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAC1B,2CAA2C,EAC3C;gBACE,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,gBAAgB,EAAE,CAAC,CAAC,KAAK;gBACzB,iBAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS;gBACtC,YAAY,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK;gBAC5C,mBAAmB,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK;aAChE,CACF,CAAC;YACF,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,EAAE;gBACnE,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,aAAa;IAC3B,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QAEjC,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,mBAAmB,GAAC,CAAC;QAC7D,MAAM,EAAE,OAAO,EAAE,GAAG,wDAAa,mBAAmB,GAAC,CAAC;QACtD,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;QAE5C,IAAI,aAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC9C,IAAI,CAAC,aAAa;gBAAE,OAAO,IAAI,EAAE,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,aAAa,EACb,GAAG,CACJ,CAAC;QACF,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,EAAE,CAAC,CAAC,6CAA6C;QAE1E,wCAAwC;QACxC,MAAM,kBAAkB,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAChE,OAAO,IAAI,EAAE,CAAC,CAAC,iCAAiC;QAClD,CAAC;QAED,mCAAmC;QACnC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,gCAAgC;QAChC,MAAM,EAAE,MAAM,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;QAC5C,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAC1B,gDAAgD,EAChD;YACE,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CACF,CAAC;QAEF,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,2BAA2B;YAClC,IAAI,EAAE,cAAc;SACrB,CAAC,EACF;YACE,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/lib/middleware.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAetE;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAyB;IACzD,OAAO,KAAK,EAAE,OAA0B,EAAE,IAA6B,EAAE,EAAE;QACzE,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QAEf,KAAK,UAAU,QAAQ,CAAC,CAAS;YAC/B,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAClD,CAAC;YACD,KAAK,GAAG,CAAC,CAAC;YAEV,IAAI,CAAC,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;gBAC7B,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAClC,OAAO,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QACjC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAE1D,0BAA0B;QAC1B,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,aAAa,GAAG,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACjE,MAAM,OAAO,GAA2B;gBACtC,8BAA8B,EAC5B,wCAAwC;gBAC1C,8BAA8B,EAC5B,0DAA0D;gBAC5D,kCAAkC,EAAE,MAAM;aAC3C,CAAC;YAEF,IAAI,aAAa,EAAE,CAAC;gBAClB,OAAO,CAAC,6BAA6B,CAAC,GAAG,aAAa,CAAC;YACzD,CAAC;YAED,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;gBACxB,MAAM,EAAE,GAAG;gBACX,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QAE9B,+BAA+B;QAC/B,MAAM,aAAa,GAAG,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACjE,IAAI,aAAa,EAAE,CAAC;YAClB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,aAAa,CAAC,CAAC;QACrE,CAAC;QACD,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,8BAA8B,EAC9B,wCAAwC,CACzC,CAAC;QACF,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,8BAA8B,EAC9B,0DAA0D,CAC3D,CAAC;QACF,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;QAEjE,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAQ;IAChD,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAClE,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;QAEjD,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QAC9B,OAAO,eAAe,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAInC;IACC,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,KAAK,CAAC,CAAC,mBAAmB;IAChE,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC;IAE/D,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QAEjC,0EAA0E;QAC1E,kEAAkE;QAClE,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,MAAM,IAAI,cAAc,EAAE,CAAC,UAAU,CACnD,OAAO,EACP,GAAG,CAAC,cAAc,EAClB,GAAG,CACJ,CAAC;YACF,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,SAAS,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,MAAqF,CAAC;QAC1F,IAAI,CAAC;YACH,yEAAyE;YACzE,iEAAiE;YACjE,MAAM,GAAG,MAAM,OAAO,CAAC,sBAAsB,CAC3C,GAAG,EACH,OAAO,EACP,OAAO,CAAC,QAAQ,EAChB,WAAW,EACX,aAAa,EACb,SAAS,EACT,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC;gBACzC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,EACxC,CAAC;gBACD,SAAS,EAAE,CAAC,KAAK,CACf,sEAAsE,EACtE,KAAK,CACN,CAAC;gBACF,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,EAC5D,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;YACJ,CAAC;YACD,SAAS,EAAE,CAAC,KAAK,CACf,oDAAoD,EACpD,KAAK,CACN,CAAC;YACF,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,UAAU,GACd,MAAM,CAAC,UAAU;gBACjB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;YAC/D,SAAS,EAAE,CAAC,IAAI,CAAC,0CAA0C,EAAE;gBAC3D,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,WAAW;gBACX,UAAU;aACX,CAAC,CAAC;YACH,OAAO,sBAAsB,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QAC9B,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,uBAAuB,EACvB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CACzC,CAAC;QACF,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,mBAAmB,EACnB,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CACvC,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QAEjC,wBAAwB;QACxB,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACxD,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,sFAAsF;QACtF,6FAA6F;QAC7F,+FAA+F;QAC/F,4EAA4E;QAC5E,+EAA+E;QAC/E,iFAAiF;QACjF,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC1D,IAAI,YAAY,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;QAED,cAAc;QACd,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC/D,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;QAE5C,gDAAgD;QAChD,IAAI,aAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,aAAa,GAAG,GAAG,CAAC,cAAc,CAAC;YACnC,IAAI,CAAC,aAAa,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;gBACxD,mFAAmF;gBACnF,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kFAAkF;YAClF,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,aAAa,EACb,GAAG,CACJ,CAAC;QAEF,yDAAyD;QACzD,yDAAyD;QACzD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS,EAAE,CAAC,KAAK,CACf,yDAAyD,EACzD;gBACE,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAC1C,aAAa,EAAE,CAAC,CAAC,UAAU;aAC5B,CACF,CAAC;YACF,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,sBAAsB;QACtB,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,SAAS,EAAE,CAAC,IAAI,CACd,mDAAmD,EACnD;gBACE,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAC1C,aAAa,EAAE,CAAC,CAAC,UAAU;aAC5B,CACF,CAAC;YACF,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,EAAE;gBACpE,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAExE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS,EAAE,CAAC,IAAI,CACd,2CAA2C,EAC3C;gBACE,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,gBAAgB,EAAE,CAAC,CAAC,KAAK;gBACzB,iBAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS;gBACtC,YAAY,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK;gBAC5C,mBAAmB,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK;aAChE,CACF,CAAC;YACF,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,EAAE;gBACnE,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QAEjC,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC/D,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;QAE5C,IAAI,aAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,aAAa,GAAG,GAAG,CAAC,cAAc,CAAC;YACnC,IAAI,CAAC,aAAa;gBAAE,OAAO,IAAI,EAAE,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAC7C,OAAO,EACP,aAAa,EACb,GAAG,CACJ,CAAC;QACF,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,EAAE,CAAC,CAAC,6CAA6C;QAE1E,wCAAwC;QACxC,MAAM,kBAAkB,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAChE,OAAO,IAAI,EAAE,CAAC,CAAC,iCAAiC;QAClD,CAAC;QAED,mCAAmC;QACnC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,gCAAgC;QAChC,SAAS,EAAE,CAAC,IAAI,CACd,gDAAgD,EAChD;YACE,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CACF,CAAC;QAEF,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,2BAA2B;YAClC,IAAI,EAAE,cAAc;SACrB,CAAC,EACF;YACE,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/moderation-handler.d.ts

@@ -1,4 +1,4 @@
-import type { KVNamespace } from "../types/cloudflare-compat";
+import type { KVNamespace } from "../types/cloudflare-compat.js";
 export interface Env {
     OPENAI_API_KEY?: string;
     MODERATION_CACHE_KV?: KVNamespace;

package/dist/lib/moderation-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"moderation-handler.d.ts","sourceRoot":"","sources":["../../src/lib/moderation-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAA6B,MAAM,4BAA4B,CAAC;AAczF,MAAM,WAAW,GAAG;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,WAAW,CAAC;IAClC,aAAa,CAAC,EAAE,WAAW,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE;QACR,UAAU,EAAE;YACV,IAAI,EAAE,OAAO,CAAC;YACd,gBAAgB,EAAE,OAAO,CAAC;YAC1B,UAAU,EAAE,OAAO,CAAC;YACpB,sBAAsB,EAAE,OAAO,CAAC;YAChC,SAAS,EAAE,OAAO,CAAC;YACnB,gBAAgB,EAAE,OAAO,CAAC;YAC1B,sBAAsB,EAAE,OAAO,CAAC;YAChC,MAAM,EAAE,OAAO,CAAC;YAChB,aAAa,EAAE,OAAO,CAAC;YACvB,QAAQ,EAAE,OAAO,CAAC;YAClB,gBAAgB,EAAE,OAAO,CAAC;SAC3B,CAAC;QACF,cAAc,EAAE;YACd,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;SACvB,CAAC;KACH,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sGAAsG;IACtG,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2C;IAE1E;;OAEG;IACG,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAqLrE;;OAEG;IACH,OAAO,CAAC,WAAW;IAOnB;;OAEG;IACH,OAAO,CAAC,UAAU;IAUlB;;OAEG;YACW,eAAe;IAgB7B;;OAEG;YACW,WAAW;CAkB1B"}
+{"version":3,"file":"moderation-handler.d.ts","sourceRoot":"","sources":["../../src/lib/moderation-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAA6B,MAAM,+BAA+B,CAAC;AAc5F,MAAM,WAAW,GAAG;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,WAAW,CAAC;IAClC,aAAa,CAAC,EAAE,WAAW,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE;QACR,UAAU,EAAE;YACV,IAAI,EAAE,OAAO,CAAC;YACd,gBAAgB,EAAE,OAAO,CAAC;YAC1B,UAAU,EAAE,OAAO,CAAC;YACpB,sBAAsB,EAAE,OAAO,CAAC;YAChC,SAAS,EAAE,OAAO,CAAC;YACnB,gBAAgB,EAAE,OAAO,CAAC;YAC1B,sBAAsB,EAAE,OAAO,CAAC;YAChC,MAAM,EAAE,OAAO,CAAC;YAChB,aAAa,EAAE,OAAO,CAAC;YACvB,QAAQ,EAAE,OAAO,CAAC;YAClB,gBAAgB,EAAE,OAAO,CAAC;SAC3B,CAAC;QACF,cAAc,EAAE;YACd,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;SACvB,CAAC;KACH,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sGAAsG;IACtG,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2C;IAE1E;;OAEG;IACG,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAkLrE;;OAEG;IACH,OAAO,CAAC,WAAW;IAOnB;;OAEG;IACH,OAAO,CAAC,UAAU;IAUlB;;OAEG;YACW,eAAe;IAgB7B;;OAEG;YACW,WAAW;CAkB1B"}

package/dist/lib/moderation-handler.js

@@ -1,39 +1,3 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ModerationHandler = void 0;
 /**
  * Moderation Handler
  *
@@ -41,10 +5,10 @@ exports.ModerationHandler = void 0;
  * Caches moderation results in KV to reduce API calls.
  * Respects OpenAI budget limits — skips moderation when budget is exceeded.
  */
-const logger_1 = require("./logger");
-const openai_budget_1 = require("./openai-budget");
-const cost_accumulator_1 = require("./cost-accumulator");
-class ModerationHandler {
+import { getLogger } from "./logger.js";
+import { OpenAiBudget } from "./openai-budget.js";
+import { CostAccumulator } from "./cost-accumulator.js";
+export class ModerationHandler {
     OPENAI_API_URL = "https://api.openai.com/v1/moderations";
     /**
      * Moderate text content using OpenAI Moderation API
@@ -56,9 +20,9 @@ class ModerationHandler {
             maxRequestsPerHour: parseInt(env.OPENAI_BUDGET_HOURLY_MAX || "500", 10),
             maxRequestsPerDay: parseInt(env.OPENAI_BUDGET_DAILY_MAX || "5000", 10),
         };
-        const budget = new openai_budget_1.OpenAiBudget(budgetConfig);
+        const budget = new OpenAiBudget(budgetConfig);
         if (!await budget.tryConsume()) {
-            logger_1.Logger.getInstance(env).warn("[Moderation] OpenAI budget exceeded, skipping moderation");
+            getLogger().warn("[Moderation] OpenAI budget exceeded, skipping moderation");
             return { approved: true, budgetExceeded: true };
         }
         // OPTIMIZATION: Check cache first with timeout to avoid slow KV reads
@@ -74,17 +38,15 @@ class ModerationHandler {
         }
         catch (error) {
             // If cache lookup times out or fails, continue without cache
-            logger_1.Logger.getInstance(env).debug("[ModerationHandler] Cache lookup timeout/failed, continuing without cache");
+            getLogger().debug("[ModerationHandler] Cache lookup timeout/failed, continuing without cache");
         }
         if (cached) {
             return cached;
         }
-        // Get API key using SecretResolver (supports both old and new naming conventions)
-        const { Secrets } = await Promise.resolve().then(() => __importStar(require("./secret-resolver")));
-        const apiKey = Secrets.getOpenAIApiKey(env) || env.OPENAI_API_KEY;
+        const apiKey = env.OPENAI_API_KEY;
         // If no API key, skip moderation (for development/testing)
         if (!apiKey) {
-            logger_1.Logger.getInstance(env).warn("OPENAI_API_KEY not set, skipping moderation");
+            getLogger().warn("OPENAI_API_KEY not set, skipping moderation");
             return { approved: true };
         }
         try {
@@ -110,7 +72,7 @@ class ModerationHandler {
             const response = await Promise.race([fetchPromise, timeoutPromise]);
             if (!response.ok) {
                 const errorText = await response.text();
-                logger_1.Logger.getInstance(env).error("OpenAI Moderation API error:", errorText);
+                getLogger().error("OpenAI Moderation API error:", errorText);
                 // On API error, approve content (fail open for availability)
                 return { approved: true, error: "Moderation service unavailable" };
             }
@@ -156,16 +118,16 @@ class ModerationHandler {
                 },
             };
             // Record cost event (in-memory, zero I/O)
-            cost_accumulator_1.CostAccumulator.getInstance().record({ service: "openai", operation: "moderation", units: 1 });
+            CostAccumulator.getInstance().record({ service: "openai", operation: "moderation", units: 1 });
             // Cache result (24 hour TTL) - fire and forget to avoid blocking
             // Don't await - if caching is slow, don't block the response
             this.cacheResult(cacheKey, moderationResult, env).catch((error) => {
-                logger_1.Logger.getInstance(env).debug("[ModerationHandler] Cache write failed (non-blocking):", error);
+                getLogger().debug("[ModerationHandler] Cache write failed (non-blocking):", error);
             });
             return moderationResult;
         }
         catch (error) {
-            logger_1.Logger.getInstance(env).error("Moderation error:", error);
+            getLogger().error("Moderation error:", error);
             // Fail open - approve content if moderation fails
             return { approved: true, error: "Moderation service error" };
         }
@@ -203,7 +165,7 @@ class ModerationHandler {
             return cached;
         }
         catch (error) {
-            logger_1.Logger.getInstance(env).error("Cache read error:", error);
+            getLogger().error("Cache read error:", error);
             return null;
         }
     }
@@ -221,10 +183,9 @@ class ModerationHandler {
             });
         }
         catch (error) {
-            logger_1.Logger.getInstance(env).error("Cache write error:", error);
+            getLogger().error("Cache write error:", error);
             // Non-fatal - continue without caching
         }
     }
 }
-exports.ModerationHandler = ModerationHandler;
 //# sourceMappingURL=moderation-handler.js.map

package/dist/lib/moderation-handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"moderation-handler.js","sourceRoot":"","sources":["../../src/lib/moderation-handler.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA;;;;;;GAMG;AAGH,qCAAkC;AAClC,mDAAwE;AACxE,yDAAqD;AAkCrD,MAAa,iBAAiB;IACX,cAAc,GAAG,uCAAuC,CAAC;IAE1E;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,GAAQ;QACvC,6CAA6C;QAC7C,MAAM,YAAY,GAAuB;YACvC,OAAO,EAAG,GAAW,CAAC,qBAAqB,KAAK,OAAO;YACvD,kBAAkB,EAAE,QAAQ,CAAE,GAAW,CAAC,wBAAwB,IAAI,KAAK,EAAE,EAAE,CAAC;YAChF,iBAAiB,EAAE,QAAQ,CAAE,GAAW,CAAC,uBAAuB,IAAI,MAAM,EAAE,EAAE,CAAC;SAChF,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,4BAAY,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;YAC/B,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;YACzF,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QAClD,CAAC;QAED,sEAAsE;QACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,gBAAgB,GAAG,GAAG,CAAC,CAAC,mCAAmC;QACjE,IAAI,MAAM,GAA4B,IAAI,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACzD,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBACtD,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;YACzE,CAAC,CAAC,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6DAA6D;YAC7D,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAC3B,2EAA2E,CAC5E,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,kFAAkF;QAClF,MAAM,EAAE,OAAO,EAAE,GAAG,wDAAa,mBAAmB,GAAC,CAAC;QACtD,MAAM,MAAM,GACV,OAAO,CAAC,eAAe,CAAC,GAAU,CAAC,IAAK,GAAW,CAAC,cAAc,CAAC;QAErE,2DAA2D;QAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAC1B,6CAA6C,CAC9C,CAAC;YACF,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC5B,CAAC;QAED,IAAI,CAAC;YACH,4DAA4D;YAC5D,4CAA4C;YAC5C,MAAM,qBAAqB,GAAG,IAAI,CAAC,CAAC,+BAA+B;YACnE,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE;gBAC9C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,MAAM,EAAE;iBAClC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK,EAAE,IAAI;oBACX,KAAK,EAAE,wBAAwB;iBAChC,CAAC;aACH,CAAC,CAAC;YAEH,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBACtD,UAAU,CAAC,GAAG,EAAE;oBACd,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;gBAC9C,CAAC,EAAE,qBAAqB,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;YAEpE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAC3B,8BAA8B,EAC9B,SAAS,CACV,CAAC;gBACF,6DAA6D;gBAC7D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;YACrE,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CA8BlC,CAAC;YAEF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAE/B,0DAA0D;YAC1D,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;YAEjC,uDAAuD;YACvD,MAAM,UAAU,GAAG;gBACjB,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI;gBAC5B,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC;gBACvD,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU;gBACxC,sBAAsB,EAAE,MAAM,CAAC,UAAU,CAAC,wBAAwB,CAAC;gBACnE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC;gBACzC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC;gBACvD,sBAAsB,EAAE,MAAM,CAAC,UAAU,CAAC,wBAAwB,CAAC;gBACnE,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM;gBAChC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC;gBACjD,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;gBACpC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC;aACxD,CAAC;YAEF,MAAM,cAAc,GAA8B;gBAChD,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,IAAI;gBACjC,gBAAgB,EAAE,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC;gBAC5D,UAAU,EAAE,MAAM,CAAC,eAAe,CAAC,UAAU;gBAC7C,sBAAsB,EACpB,MAAM,CAAC,eAAe,CAAC,wBAAwB,CAAC;gBAClD,SAAS,EAAE,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC;gBAC9C,gBAAgB,EAAE,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC;gBAC5D,sBAAsB,EACpB,MAAM,CAAC,eAAe,CAAC,wBAAwB,CAAC;gBAClD,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM;gBACrC,aAAa,EAAE,MAAM,CAAC,eAAe,CAAC,eAAe,CAAC;gBACtD,QAAQ,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ;gBACzC,gBAAgB,EAAE,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC;aAC7D,CAAC;YAEF,kDAAkD;YAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;YAE5D,MAAM,gBAAgB,GAAqB;gBACzC,QAAQ;gBACR,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE;oBACP,UAAU;oBACV,cAAc;iBACf;aACF,CAAC;YAEF,0CAA0C;YAC1C,kCAAe,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAE/F,iEAAiE;YACjE,6DAA6D;YAC7D,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBAChE,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAC3B,wDAAwD,EACxD,KAAK,CACN,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;YAC1D,kDAAkD;YAClD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;QAC/D,CAAC;IACH,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,IAAY;QAC9B,sCAAsC;QACtC,4CAA4C;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,cAAc,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,GAAW;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;YACjC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,4BAA4B;QAClD,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,eAAe,CAC3B,QAAgB,EAChB,GAAQ;QAER,MAAM,EAAE,GAAG,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,aAAa,CAAC;QACxD,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAErB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC9C,OAAO,MAAiC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW,CACvB,QAAgB,EAChB,MAAwB,EACxB,GAAQ;QAER,MAAM,EAAE,GAAG,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,aAAa,CAAC;QACxD,IAAI,CAAC,EAAE;YAAE,OAAO;QAEhB,IAAI,CAAC;YACH,qBAAqB;YACrB,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;gBAC7C,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE;aAC5B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;YAC3D,uCAAuC;QACzC,CAAC;IACH,CAAC;CACF;AA1PD,8CA0PC"}
+{"version":3,"file":"moderation-handler.js","sourceRoot":"","sources":["../../src/lib/moderation-handler.ts"],"names":[],"mappings":"AACA;;;;;;GAMG;AAGH,OAAO,EAAE,SAAS,EAAU,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,YAAY,EAA2B,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAkCxD,MAAM,OAAO,iBAAiB;IACX,cAAc,GAAG,uCAAuC,CAAC;IAE1E;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,GAAQ;QACvC,6CAA6C;QAC7C,MAAM,YAAY,GAAuB;YACvC,OAAO,EAAG,GAAW,CAAC,qBAAqB,KAAK,OAAO;YACvD,kBAAkB,EAAE,QAAQ,CAAE,GAAW,CAAC,wBAAwB,IAAI,KAAK,EAAE,EAAE,CAAC;YAChF,iBAAiB,EAAE,QAAQ,CAAE,GAAW,CAAC,uBAAuB,IAAI,MAAM,EAAE,EAAE,CAAC;SAChF,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;YAC/B,SAAS,EAAE,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;YAC7E,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QAClD,CAAC;QAED,sEAAsE;QACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,gBAAgB,GAAG,GAAG,CAAC,CAAC,mCAAmC;QACjE,IAAI,MAAM,GAA4B,IAAI,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACzD,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBACtD,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;YACzE,CAAC,CAAC,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6DAA6D;YAC7D,SAAS,EAAE,CAAC,KAAK,CACf,2EAA2E,CAC5E,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,CAAC;QAElC,2DAA2D;QAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS,EAAE,CAAC,IAAI,CACd,6CAA6C,CAC9C,CAAC;YACF,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC5B,CAAC;QAED,IAAI,CAAC;YACH,4DAA4D;YAC5D,4CAA4C;YAC5C,MAAM,qBAAqB,GAAG,IAAI,CAAC,CAAC,+BAA+B;YACnE,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE;gBAC9C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,MAAM,EAAE;iBAClC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK,EAAE,IAAI;oBACX,KAAK,EAAE,wBAAwB;iBAChC,CAAC;aACH,CAAC,CAAC;YAEH,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBACtD,UAAU,CAAC,GAAG,EAAE;oBACd,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;gBAC9C,CAAC,EAAE,qBAAqB,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;YAEpE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,SAAS,EAAE,CAAC,KAAK,CACf,8BAA8B,EAC9B,SAAS,CACV,CAAC;gBACF,6DAA6D;gBAC7D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;YACrE,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CA8BlC,CAAC;YAEF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAE/B,0DAA0D;YAC1D,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;YAEjC,uDAAuD;YACvD,MAAM,UAAU,GAAG;gBACjB,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI;gBAC5B,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC;gBACvD,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU;gBACxC,sBAAsB,EAAE,MAAM,CAAC,UAAU,CAAC,wBAAwB,CAAC;gBACnE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC;gBACzC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC;gBACvD,sBAAsB,EAAE,MAAM,CAAC,UAAU,CAAC,wBAAwB,CAAC;gBACnE,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM;gBAChC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC;gBACjD,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;gBACpC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC;aACxD,CAAC;YAEF,MAAM,cAAc,GAA8B;gBAChD,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,IAAI;gBACjC,gBAAgB,EAAE,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC;gBAC5D,UAAU,EAAE,MAAM,CAAC,eAAe,CAAC,UAAU;gBAC7C,sBAAsB,EACpB,MAAM,CAAC,eAAe,CAAC,wBAAwB,CAAC;gBAClD,SAAS,EAAE,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC;gBAC9C,gBAAgB,EAAE,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC;gBAC5D,sBAAsB,EACpB,MAAM,CAAC,eAAe,CAAC,wBAAwB,CAAC;gBAClD,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM;gBACrC,aAAa,EAAE,MAAM,CAAC,eAAe,CAAC,eAAe,CAAC;gBACtD,QAAQ,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ;gBACzC,gBAAgB,EAAE,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC;aAC7D,CAAC;YAEF,kDAAkD;YAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;YAE5D,MAAM,gBAAgB,GAAqB;gBACzC,QAAQ;gBACR,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE;oBACP,UAAU;oBACV,cAAc;iBACf;aACF,CAAC;YAEF,0CAA0C;YAC1C,eAAe,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAE/F,iEAAiE;YACjE,6DAA6D;YAC7D,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBAChE,SAAS,EAAE,CAAC,KAAK,CACf,wDAAwD,EACxD,KAAK,CACN,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;YAC9C,kDAAkD;YAClD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;QAC/D,CAAC;IACH,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,IAAY;QAC9B,sCAAsC;QACtC,4CAA4C;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,cAAc,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,GAAW;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;YACjC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,4BAA4B;QAClD,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,eAAe,CAC3B,QAAgB,EAChB,GAAQ;QAER,MAAM,EAAE,GAAG,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,aAAa,CAAC;QACxD,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAErB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC9C,OAAO,MAAiC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;YAC9C,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW,CACvB,QAAgB,EAChB,MAAwB,EACxB,GAAQ;QAER,MAAM,EAAE,GAAG,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,aAAa,CAAC;QACxD,IAAI,CAAC,EAAE;YAAE,OAAO;QAEhB,IAAI,CAAC;YACH,qBAAqB;YACrB,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;gBAC7C,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE;aAC5B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,EAAE,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;YAC/C,uCAAuC;QACzC,CAAC;IACH,CAAC;CACF"}

package/dist/lib/net/trusted-client-ip.d.ts

@@ -1,39 +1,17 @@
 /**
- * Trusted client-IP derivation (G4 CRITICAL-3, LOW-1, LOW-3).
+ * Thin trellis-side adapter around `@de-otio/saas-foundation/net`.
  *
- * The previous pattern — `X-Forwarded-For.split(",")[0]` plus
- * `CF-Connecting-IP` — assumed a Cloudflare-class trusted edge sitting
- * in front of trellis. Behind ALB the leftmost XFF entry is supplied
- * by the immediate client and is therefore caller-supplied input. This
- * helper centralises IP derivation behind an explicit `TRUSTED_PROXY`
- * env flag so the rule is the same for every call site.
+ * Foundation exposes `trustedClientIp(request, { mode })` with a strict
+ * `TrustedProxyMode = "none" | "alb" | "cloudflare"`. Trellis stores the
+ * mode as a string in `env.TRUSTED_PROXY` and historically accepted any
+ * case (`"ALB"` / `"Alb"` / `"alb"` all worked). This wrapper normalises
+ * the env value and delegates; call sites stay `trustedClientIp(request, env)`.
  *
- * Configuration:
- *   TRUSTED_PROXY=none         — default. Do not honour XFF or CF
- *                                headers. Returns the connection's
- *                                remote address only (or "unknown" if
- *                                the runtime does not expose one).
- *   TRUSTED_PROXY=alb          — application is behind a trusted ALB.
- *                                Parse XFF taking the right-most
- *                                appended hop (the ALB's view of the
- *                                client) rather than the leftmost.
- *   TRUSTED_PROXY=cloudflare   — application is fronted by Cloudflare.
- *                                Trust CF-Connecting-IP.
- *
- * The result is always validated against an IPv4/IPv6 shape regex.
- * Anything that does not match returns the literal string "unknown" so
- * downstream rate-limit keys cannot be poisoned with arbitrary content.
+ * `isIpShape` is a straight re-export — foundation owns the regex now.
  */
+export { isIpShape } from "@de-otio/saas-foundation/net";
 interface RemoteAddrEnv {
     TRUSTED_PROXY?: string;
 }
-/** True when `s` parses as an IPv4 dotted-quad or an IPv6 shape. */
-export declare function isIpShape(s: string): boolean;
-/**
- * Derive a client IP we are willing to use for rate-limit keys / audit
- * payloads. Always returns a non-empty string; "unknown" when nothing
- * trustworthy is available.
- */
 export declare function trustedClientIp(request: Request, env: RemoteAddrEnv): string;
-export {};
 //# sourceMappingURL=trusted-client-ip.d.ts.map

package/dist/lib/net/trusted-client-ip.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"trusted-client-ip.d.ts","sourceRoot":"","sources":["../../../src/lib/net/trusted-client-ip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,UAAU,aAAa;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAiBD,oEAAoE;AACpE,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAM5C;AAcD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,GAAG,MAAM,CA4B5E"}
+{"version":3,"file":"trusted-client-ip.d.ts","sourceRoot":"","sources":["../../../src/lib/net/trusted-client-ip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAEzD,UAAU,aAAa;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,GAAG,MAAM,CAK5E"}