@evalops/maestro 0.10.8 → 0.10.10

package/dist/server/routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/server/routes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EACN,yBAAyB,EACzB,uBAAuB,EACvB,iBAAiB,GACjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EACN,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACN,8BAA8B,EAC9B,2BAA2B,EAC3B,+BAA+B,EAC/B,2BAA2B,EAC3B,8BAA8B,EAC9B,4BAA4B,EAC5B,0BAA0B,EAC1B,8BAA8B,EAC9B,gCAAgC,GAChC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EACN,2BAA2B,EAC3B,yBAAyB,EACzB,2BAA2B,EAC3B,4BAA4B,EAC5B,2BAA2B,EAC3B,yBAAyB,GACzB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACN,uBAAuB,EACvB,8BAA8B,GAC9B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACN,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,6BAA6B,GAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,MAAM,UAAU,YAAY,CAAC,OAAyB;IACrD,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAEhC,OAAO;QACN;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;gBACtB,wBAAwB;gBACxB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;gBACrD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,CAAC;SACD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,2BAA2B;YACjC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,8BAA8B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACxE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,2BAA2B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACrE;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,4BAA4B;YAClC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,0BAA0B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;SACtD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,mCAAmC;YACzC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,2BAA2B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;SACvD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,sCAAsC;YAC5C,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,8BAA8B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,wCAAwC;YAC9C,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,gCAAgC,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;SAC5D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,sCAAsC;YAC5C,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,8BAA8B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,uCAAuC;YAC7C,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;SAC3D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,qCAAqC;YAC3C,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,4BAA4B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;SACxD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;gBACtB,yDAAyD;gBACzD,mFAAmF;gBACnF,MAAM,cAAc,GAAG,cAAc,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBACjE,GAAG,GAAG;oBACN,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS;iBAC7C,CAAC,CAAC,CAAC;gBAEJ,MAAM,WAAW,GAAG,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBACrE,GAAG,GAAG;oBACN,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS;iBAC7C,CAAC,CAAC,CAAC;gBAEJ,QAAQ,CACP,GAAG,EACH,GAAG,EACH;oBACC,cAAc;oBACd,WAAW;oBACX,WAAW,EAAE,cAAc,CAAC,MAAM;oBAClC,gBAAgB,EAAE,WAAW,CAAC,MAAM;iBACpC,EACD,WAAW,EACX,IAAI,CACJ,CAAC;YACH,CAAC;SACD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACrD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACxD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SAC5D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SAC5D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CACrB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE;gBACnC,iBAAiB,EAAE,OAAO,CAAC,YAAY;aACvC,CAAC;SACH;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SAChE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CACrB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE;gBACnC,iBAAiB,EAAE,OAAO,CAAC,YAAY;aACvC,CAAC;SACH;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SAC5D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAClE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC/D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAClE;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACxD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACxD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC7D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC7D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACjE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACjE;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACzD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC9D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC9D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SAC3D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SAC3D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACjE;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,6BAA6B;YACnC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,yBAAyB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACnE;QACD;YACC,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;SAC7C;QACD;YACC,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;SAC7C;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;SAC7C;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACxD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACxD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC3D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACzD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACzD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC7D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC7D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACzD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC3D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACzD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC7D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC7D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC5D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC5D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC/D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACvD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACvD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC5D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC5D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACvD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACvD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC3D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC5D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC5D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACxD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACxD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACzD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACzD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACxD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACxD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACvD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACvD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACtD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACtD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACzD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACzD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SAC3D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SAC3D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;gBAC5B,uCAAuC;gBACvC,MAAM,OAAO,GAAG,MAAM,oBAAoB,EAAE,CAAC;gBAC7C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;oBAClB,cAAc,EAAE,2BAA2B;oBAC3C,GAAG,WAAW;iBACd,CAAC,CAAC;gBACH,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClB,CAAC;SACD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACxD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SAChE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACzD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACrE;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,6BAA6B;YACnC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,2BAA2B,CAC1B,GAAG,EACH,GAAG,EACH,MAAwB,EACxB,WAAW,CACX;SACF;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,mCAAmC;YACzC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,2BAA2B,CAC1B,GAAG,EACH,GAAG,EACH,MAAwB,EACxB,WAAW,CACX;SACF;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,iCAAiC;YACvC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,yBAAyB,CACxB,GAAG,EACH,GAAG,EACH,MAAwB,EACxB,WAAW,CACX;SACF;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,oCAAoC;YAC1C,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,4BAA4B,CAC3B,GAAG,EACH,GAAG,EACH,MAAwB,EACxB,WAAW,CACX;SACF;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,uCAAuC;YAC7C,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,yBAAyB,CACxB,GAAG,EACH,GAAG,EACH,MAA0C,EAC1C,WAAW,CACX;SACF;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,4CAA4C;YAClD,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,2BAA2B,CAC1B,GAAG,EACH,GAAG,EACH,MAA0C,EAC1C,WAAW,CACX;SACF;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,6CAA6C;YACnD,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,uBAAuB,CACtB,GAAG,EACH,GAAG,EACH,MAA8C,EAC9C,WAAW,CACX;SACF;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,qDAAqD;YAC3D,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,8BAA8B,CAC7B,GAAG,EACH,GAAG,EACH,MAA8C,EAC9C,WAAW,CACX;SACF;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,CAAC;SAChE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,CAAC;SAChE;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC;SAC9C;QACD;YACC,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC;SAC9C;QACD;YACC,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC;SAC9C;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAwB,EAAE,WAAW,CAAC;SACpE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAwB,EAAE,WAAW,CAAC;SACrE;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,6BAA6B;YACnC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,MAA2B,EAAE,WAAW,CAAC;SACxE;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,uDAAuD;YAC7D,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,6BAA6B,CAC5B,GAAG,EACH,GAAG,EACH,MAAiD,EACjD,WAAW,CACX;SACF;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAClE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAChE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACnE;QACD,oDAAoD;QACpD,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACtE,CAAC;AACH,CAAC","sourcesContent":["import type { ApprovalMode } from \"../agent/action-approval.js\";\nimport type { ThinkingLevel } from \"../agent/types.js\";\nimport { createEnterpriseRoutes } from \"../api/enterprise-routes.js\";\nimport { isDatabaseConfigured } from \"../db/client.js\";\nimport type { WebServerContext } from \"./app-context.js\";\nimport { handleAdminCleanup, handleAdminWarmCaches } from \"./handlers/admin.js\";\nimport { handleApproval } from \"./handlers/approval.js\";\nimport { handleApprovals } from \"./handlers/approvals.js\";\nimport { handleAttachmentExtract } from \"./handlers/attachments.js\";\nimport {\n\thandleAutomationMagicDocs,\n\thandleAutomationPreview,\n\thandleAutomations,\n} from \"./handlers/automations.js\";\nimport { handleBackground } from \"./handlers/background.js\";\nimport { handleBranch } from \"./handlers/branch.js\";\nimport { handleBridgeStatus } from \"./handlers/bridge.js\";\nimport { handleChat } from \"./handlers/chat.js\";\nimport { handleClientToolResult } from \"./handlers/client-tools.js\";\nimport { handleCommandPrefs } from \"./handlers/command-prefs.js\";\nimport { handleCommands } from \"./handlers/commands.js\";\nimport { handleComposer } from \"./handlers/composer.js\";\nimport { handleConfig } from \"./handlers/config.js\";\nimport { handleContext } from \"./handlers/context.js\";\nimport { handleCost } from \"./handlers/cost.js\";\nimport { handleDiagnostics } from \"./handlers/diagnostics.js\";\nimport { handleFiles } from \"./handlers/files.js\";\nimport { handleFramework } from \"./handlers/framework.js\";\nimport {\n\thandleGuardianConfig,\n\thandleGuardianRun,\n\thandleGuardianStatus,\n} from \"./handlers/guardian.js\";\nimport {\n\thandleHeadlessConnectionCreate,\n\thandleHeadlessSessionCreate,\n\thandleHeadlessSessionDisconnect,\n\thandleHeadlessSessionEvents,\n\thandleHeadlessSessionHeartbeat,\n\thandleHeadlessSessionMessage,\n\thandleHeadlessSessionState,\n\thandleHeadlessSessionSubscribe,\n\thandleHeadlessSessionUnsubscribe,\n} from \"./handlers/headless-sessions.js\";\nimport { handleReadyz } from \"./handlers/health.js\";\nimport { handleLsp } from \"./handlers/lsp.js\";\nimport { handleMcpStatus } from \"./handlers/mcp.js\";\nimport { handleMemory } from \"./handlers/memory.js\";\nimport { handleMode } from \"./handlers/mode.js\";\nimport { handleModel, handleModels } from \"./handlers/models.js\";\nimport { handleOllama } from \"./handlers/ollama.js\";\nimport { handlePackageStatus } from \"./handlers/package.js\";\nimport { handlePlan } from \"./handlers/plan.js\";\nimport { handlePolicyValidate } from \"./handlers/policy.js\";\nimport { handlePreview } from \"./handlers/preview.js\";\nimport { handlePromptSuggestion } from \"./handlers/prompt-suggestion.js\";\nimport { handleQueue } from \"./handlers/queue.js\";\nimport { handleQuota } from \"./handlers/quota.js\";\nimport { handleReview } from \"./handlers/review.js\";\nimport { handleRun } from \"./handlers/run.js\";\nimport {\n\thandleSessionArtifactAccess,\n\thandleSessionArtifactFile,\n\thandleSessionArtifactViewer,\n\thandleSessionArtifactsEvents,\n\thandleSessionArtifactsIndex,\n\thandleSessionArtifactsZip,\n} from \"./handlers/session-artifacts.js\";\nimport {\n\thandleSessionAttachment,\n\thandleSessionAttachmentExtract,\n} from \"./handlers/session-attachments.js\";\nimport {\n\thandleSessionExport,\n\thandleSessionShare,\n\thandleSessions,\n\thandleSharedSession,\n\thandleSharedSessionAttachment,\n} from \"./handlers/sessions.js\";\nimport { handleStats } from \"./handlers/stats.js\";\nimport { handleStatus } from \"./handlers/status.js\";\nimport { handleTelemetry } from \"./handlers/telemetry.js\";\nimport { handleToolRetry } from \"./handlers/tool-retry.js\";\nimport { handleTools } from \"./handlers/tools.js\";\nimport { handleTraining } from \"./handlers/training.js\";\nimport { handleUI } from \"./handlers/ui.js\";\nimport { handleChanges } from \"./handlers/undo.js\";\nimport { handleUndo } from \"./handlers/undo.js\";\nimport { handleUsage } from \"./handlers/usage.js\";\nimport { handleWorkflow } from \"./handlers/workflow.js\";\nimport { handleZen } from \"./handlers/zen.js\";\nimport { getPrometheusMetrics } from \"./logger.js\";\nimport { requestTracker } from \"./request-tracker.js\";\nimport type { Route } from \"./router.js\";\nimport { sendJson } from \"./server-utils.js\";\n\nexport function createRoutes(context: WebServerContext): Route[] {\n\tconst { corsHeaders } = context;\n\n\treturn [\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/healthz\",\n\t\t\thandler: (_req, res) => {\n\t\t\t\t// Simple liveness check\n\t\t\t\tres.writeHead(200, { \"Content-Type\": \"text/plain\" });\n\t\t\t\tres.end(\"ok\");\n\t\t\t},\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/readyz\",\n\t\t\thandler: (req, res) => handleReadyz(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/headless/connections\",\n\t\t\thandler: (req, res) => handleHeadlessConnectionCreate(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/headless/sessions\",\n\t\t\thandler: (req, res) => handleHeadlessSessionCreate(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/headless/sessions/:id\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleHeadlessSessionState(req, res, context, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/headless/sessions/:id/events\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleHeadlessSessionEvents(req, res, context, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/headless/sessions/:id/subscribe\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleHeadlessSessionSubscribe(req, res, context, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/headless/sessions/:id/unsubscribe\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleHeadlessSessionUnsubscribe(req, res, context, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/headless/sessions/:id/heartbeat\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleHeadlessSessionHeartbeat(req, res, context, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/headless/sessions/:id/disconnect\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleHeadlessSessionDisconnect(req, res, context, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/headless/sessions/:id/messages\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleHeadlessSessionMessage(req, res, context, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/debug/z\",\n\t\t\thandler: (_req, res) => {\n\t\t\t\t// Statusz: Deep introspection for debugging (Borg style)\n\t\t\t\t// Intentionally requires internal access or auth in real prod, open here for local\n\t\t\t\tconst activeRequests = requestTracker.getSnapshot().map((req) => ({\n\t\t\t\t\t...req,\n\t\t\t\t\tdurationMs: performance.now() - req.startTime,\n\t\t\t\t}));\n\n\t\t\t\tconst longRunning = requestTracker.getLongRunning(5000).map((req) => ({\n\t\t\t\t\t...req,\n\t\t\t\t\tdurationMs: performance.now() - req.startTime,\n\t\t\t\t}));\n\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t200,\n\t\t\t\t\t{\n\t\t\t\t\t\tactiveRequests,\n\t\t\t\t\t\tlongRunning,\n\t\t\t\t\t\ttotalActive: activeRequests.length,\n\t\t\t\t\t\ttotalLongRunning: longRunning.length,\n\t\t\t\t\t},\n\t\t\t\t\tcorsHeaders,\n\t\t\t\t\t_req, // Pass request for potential compression access\n\t\t\t\t);\n\t\t\t},\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/files\",\n\t\t\thandler: (req, res) => handleFiles(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/commands\",\n\t\t\thandler: (req, res) => handleCommands(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/command-prefs\",\n\t\t\thandler: (req, res) => handleCommandPrefs(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/command-prefs\",\n\t\t\thandler: (req, res) => handleCommandPrefs(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/models\",\n\t\t\thandler: (req, res) => handleModels(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/status\",\n\t\t\thandler: (req, res) =>\n\t\t\t\thandleStatus(req, res, corsHeaders, {\n\t\t\t\t\tstaticCacheMaxAge: context.staticMaxAge,\n\t\t\t\t}),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/prompt-suggestion\",\n\t\t\thandler: (req, res) => handlePromptSuggestion(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/status\",\n\t\t\thandler: (req, res) =>\n\t\t\t\thandleStatus(req, res, corsHeaders, {\n\t\t\t\t\tstaticCacheMaxAge: context.staticMaxAge,\n\t\t\t\t}),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/bridge/status\",\n\t\t\thandler: (req, res) => handleBridgeStatus(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/config\",\n\t\t\thandler: (req, res) => handleConfig(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/config\",\n\t\t\thandler: (req, res) => handleConfig(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/guardian/status\",\n\t\t\thandler: (req, res) => handleGuardianStatus(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/guardian/run\",\n\t\t\thandler: (req, res) => handleGuardianRun(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/guardian/config\",\n\t\t\thandler: (req, res) => handleGuardianConfig(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/plan\",\n\t\t\thandler: (req, res) => handlePlan(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/plan\",\n\t\t\thandler: (req, res) => handlePlan(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/mcp\",\n\t\t\thandler: (req, res) => handleMcpStatus(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/mcp\",\n\t\t\thandler: (req, res) => handleMcpStatus(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/package\",\n\t\t\thandler: (req, res) => handlePackageStatus(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/package\",\n\t\t\thandler: (req, res) => handlePackageStatus(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/usage\",\n\t\t\thandler: (req, res) => handleUsage(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/background\",\n\t\t\thandler: (req, res) => handleBackground(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/background\",\n\t\t\thandler: (req, res) => handleBackground(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/automations\",\n\t\t\thandler: (req, res) => handleAutomations(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/automations\",\n\t\t\thandler: (req, res) => handleAutomations(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/automations/preview\",\n\t\t\thandler: (req, res) => handleAutomationPreview(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/automations/magic-docs\",\n\t\t\thandler: (req, res) => handleAutomationMagicDocs(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"PATCH\",\n\t\t\tpath: \"/api/automations/:id\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleAutomations(req, res, context, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"DELETE\",\n\t\t\tpath: \"/api/automations/:id\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleAutomations(req, res, context, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/automations/:id/run\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleAutomations(req, res, context, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/undo\",\n\t\t\thandler: (req, res) => handleUndo(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/undo\",\n\t\t\thandler: (req, res) => handleUndo(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/changes\",\n\t\t\thandler: (req, res) => handleChanges(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/approvals\",\n\t\t\thandler: (req, res) => handleApprovals(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/approvals\",\n\t\t\thandler: (req, res) => handleApprovals(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/framework\",\n\t\t\thandler: (req, res) => handleFramework(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/framework\",\n\t\t\thandler: (req, res) => handleFramework(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/tools\",\n\t\t\thandler: (req, res) => handleTools(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/review\",\n\t\t\thandler: (req, res) => handleReview(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/context\",\n\t\t\thandler: (req, res) => handleContext(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/stats\",\n\t\t\thandler: (req, res) => handleStats(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/telemetry\",\n\t\t\thandler: (req, res) => handleTelemetry(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/telemetry\",\n\t\t\thandler: (req, res) => handleTelemetry(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/training\",\n\t\t\thandler: (req, res) => handleTraining(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/training\",\n\t\t\thandler: (req, res) => handleTraining(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/diagnostics\",\n\t\t\thandler: (req, res) => handleDiagnostics(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/lsp\",\n\t\t\thandler: (req, res) => handleLsp(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/lsp\",\n\t\t\thandler: (req, res) => handleLsp(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/workflow\",\n\t\t\thandler: (req, res) => handleWorkflow(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/workflow\",\n\t\t\thandler: (req, res) => handleWorkflow(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/run\",\n\t\t\thandler: (req, res) => handleRun(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/run\",\n\t\t\thandler: (req, res) => handleRun(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/ollama\",\n\t\t\thandler: (req, res) => handleOllama(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/ollama\",\n\t\t\thandler: (req, res) => handleOllama(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/preview\",\n\t\t\thandler: (req, res) => handlePreview(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/composer\",\n\t\t\thandler: (req, res) => handleComposer(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/composer\",\n\t\t\thandler: (req, res) => handleComposer(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/cost\",\n\t\t\thandler: (req, res) => handleCost(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/cost\",\n\t\t\thandler: (req, res) => handleCost(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/quota\",\n\t\t\thandler: (req, res) => handleQuota(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/quota\",\n\t\t\thandler: (req, res) => handleQuota(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/memory\",\n\t\t\thandler: (req, res) => handleMemory(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/memory\",\n\t\t\thandler: (req, res) => handleMemory(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/mode\",\n\t\t\thandler: (req, res) => handleMode(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/mode\",\n\t\t\thandler: (req, res) => handleMode(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/zen\",\n\t\t\thandler: (req, res) => handleZen(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/zen\",\n\t\t\thandler: (req, res) => handleZen(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/ui\",\n\t\t\thandler: (req, res) => handleUI(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/ui\",\n\t\t\thandler: (req, res) => handleUI(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/queue\",\n\t\t\thandler: (req, res) => handleQueue(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/queue\",\n\t\t\thandler: (req, res) => handleQueue(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/branch\",\n\t\t\thandler: (req, res) => handleBranch(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/branch\",\n\t\t\thandler: (req, res) => handleBranch(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/model\",\n\t\t\thandler: async (req, res) => handleModel(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/model\",\n\t\t\thandler: async (req, res) => handleModel(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/metrics\",\n\t\t\thandler: async (_req, res) => {\n\t\t\t\t// Expose Prometheus compatible metrics\n\t\t\t\tconst metrics = await getPrometheusMetrics();\n\t\t\t\tres.writeHead(200, {\n\t\t\t\t\t\"Content-Type\": \"text/plain; version=0.0.4\",\n\t\t\t\t\t...corsHeaders,\n\t\t\t\t});\n\t\t\t\tres.end(metrics);\n\t\t\t},\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/chat\",\n\t\t\thandler: async (req, res) => handleChat(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/chat/approval\",\n\t\t\thandler: (req, res) => handleApproval(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/chat/client-tool-result\",\n\t\t\thandler: (req, res) => handleClientToolResult(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/chat/tool-retry\",\n\t\t\thandler: (req, res) => handleToolRetry(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/attachments/extract\",\n\t\t\thandler: (req, res) => handleAttachmentExtract(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions/:id/artifacts\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessionArtifactsIndex(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tparams as { id: string },\n\t\t\t\t\tcorsHeaders,\n\t\t\t\t),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions/:id/artifact-access\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessionArtifactAccess(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tparams as { id: string },\n\t\t\t\t\tcorsHeaders,\n\t\t\t\t),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions/:id/artifacts.zip\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessionArtifactsZip(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tparams as { id: string },\n\t\t\t\t\tcorsHeaders,\n\t\t\t\t),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions/:id/artifacts/events\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessionArtifactsEvents(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tparams as { id: string },\n\t\t\t\t\tcorsHeaders,\n\t\t\t\t),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions/:id/artifacts/:filename\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessionArtifactFile(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tparams as { id: string; filename: string },\n\t\t\t\t\tcorsHeaders,\n\t\t\t\t),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions/:id/artifacts/:filename/view\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessionArtifactViewer(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tparams as { id: string; filename: string },\n\t\t\t\t\tcorsHeaders,\n\t\t\t\t),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions/:id/attachments/:attachmentId\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessionAttachment(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tparams as { id: string; attachmentId: string },\n\t\t\t\t\tcorsHeaders,\n\t\t\t\t),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/sessions/:id/attachments/:attachmentId/extract\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessionAttachmentExtract(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tparams as { id: string; attachmentId: string },\n\t\t\t\t\tcorsHeaders,\n\t\t\t\t),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions\",\n\t\t\thandler: (req, res) => handleSessions(req, res, {}, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/sessions\",\n\t\t\thandler: (req, res) => handleSessions(req, res, {}, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions/:id\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessions(req, res, params, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"PATCH\",\n\t\t\tpath: \"/api/sessions/:id\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessions(req, res, params, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"DELETE\",\n\t\t\tpath: \"/api/sessions/:id\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessions(req, res, params, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/sessions/:id/share\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessionShare(req, res, params as { id: string }, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/sessions/:id/export\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessionExport(req, res, params as { id: string }, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions/shared/:token\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSharedSession(req, res, params as { token: string }, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions/shared/:token/attachments/:attachmentId\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSharedSessionAttachment(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tparams as { token: string; attachmentId: string },\n\t\t\t\t\tcorsHeaders,\n\t\t\t\t),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/policy/validate\",\n\t\t\thandler: (req, res) => handlePolicyValidate(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/admin/cleanup\",\n\t\t\thandler: (req, res) => handleAdminCleanup(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/admin/warm-caches\",\n\t\t\thandler: (req, res) => handleAdminWarmCaches(req, res, corsHeaders),\n\t\t},\n\t\t// Add enterprise routes when database is configured\n\t\t...(isDatabaseConfigured() ? createEnterpriseRoutes(corsHeaders) : []),\n\t];\n}\n"]}
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/server/routes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EACN,yBAAyB,EACzB,uBAAuB,EACvB,iBAAiB,GACjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EACN,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACN,8BAA8B,EAC9B,2BAA2B,EAC3B,+BAA+B,EAC/B,2BAA2B,EAC3B,8BAA8B,EAC9B,4BAA4B,EAC5B,0BAA0B,EAC1B,8BAA8B,EAC9B,gCAAgC,GAChC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EACN,wBAAwB,EACxB,uBAAuB,GACvB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACN,2BAA2B,EAC3B,0BAA0B,GAC1B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EACN,2BAA2B,EAC3B,yBAAyB,EACzB,2BAA2B,EAC3B,4BAA4B,EAC5B,2BAA2B,EAC3B,yBAAyB,GACzB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACN,uBAAuB,EACvB,8BAA8B,GAC9B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EACN,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,6BAA6B,GAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,MAAM,UAAU,YAAY,CAAC,OAAyB;IACrD,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAEhC,OAAO;QACN;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;gBACtB,wBAAwB;gBACxB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;gBACrD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,CAAC;SACD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CACrB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,2BAA2B;YACjC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CACrB,0BAA0B,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC;SACxE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACjE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,2BAA2B;YACjC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,8BAA8B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACxE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,2BAA2B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACrE;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,4BAA4B;YAClC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,0BAA0B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;SACtD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,mCAAmC;YACzC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,2BAA2B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;SACvD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,sCAAsC;YAC5C,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,8BAA8B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,wCAAwC;YAC9C,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,gCAAgC,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;SAC5D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,sCAAsC;YAC5C,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,8BAA8B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,uCAAuC;YAC7C,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,+BAA+B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;SAC3D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,qCAAqC;YAC3C,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,4BAA4B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;SACxD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;gBACtB,yDAAyD;gBACzD,mFAAmF;gBACnF,MAAM,cAAc,GAAG,cAAc,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBACjE,GAAG,GAAG;oBACN,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS;iBAC7C,CAAC,CAAC,CAAC;gBAEJ,MAAM,WAAW,GAAG,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBACrE,GAAG,GAAG;oBACN,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS;iBAC7C,CAAC,CAAC,CAAC;gBAEJ,QAAQ,CACP,GAAG,EACH,GAAG,EACH;oBACC,cAAc;oBACd,WAAW;oBACX,WAAW,EAAE,cAAc,CAAC,MAAM;oBAClC,gBAAgB,EAAE,WAAW,CAAC,MAAM;iBACpC,EACD,WAAW,EACX,IAAI,CACJ,CAAC;YACH,CAAC;SACD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACrD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACxD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SAC5D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SAC5D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CACrB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE;gBACnC,iBAAiB,EAAE,OAAO,CAAC,YAAY;aACvC,CAAC;SACH;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SAChE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CACrB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE;gBACnC,iBAAiB,EAAE,OAAO,CAAC,YAAY;aACvC,CAAC;SACH;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SAC5D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAClE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC/D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAClE;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACxD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACxD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC7D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC7D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACjE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACjE;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACzD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAClE;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC;SACpD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC;SAC5C;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACnE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACnE;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,qCAAqC;YAC3C,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC;SACrD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,qCAAqC;YAC3C,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC;SACrD;QACD;YACC,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,qCAAqC;YAC3C,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC;SACrD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,iCAAiC;YACvC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC9D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC9D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,qCAAqC;YAC3C,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC;SAChD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,iCAAiC;YACvC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACtE;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,+BAA+B;YACrC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,wBAAwB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC;SACxD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,mCAAmC;YACzC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACrE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,mCAAmC;YACzC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACrE;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,iCAAiC;YACvC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACrE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,iCAAiC;YACvC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACrE;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,mCAAmC;YACzC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACrE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,mCAAmC;YACzC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACrE;QACD;YACC,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,6CAA6C;YACnD,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC;SACvD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACrD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC9D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC9D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SAC3D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SAC3D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACjE;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,6BAA6B;YACnC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,yBAAyB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACnE;QACD;YACC,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;SAC7C;QACD;YACC,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;SAC7C;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;SAC7C;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACxD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACxD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC3D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACzD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACzD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC7D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC7D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACzD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC3D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACzD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC7D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC7D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC5D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC5D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC/D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACvD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACvD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC5D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC5D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACvD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACvD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC3D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC5D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC5D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACxD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACxD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACzD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACzD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACxD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACxD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACvD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACvD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACtD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACtD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACzD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACzD;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SAC3D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SAC3D;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;gBAC5B,uCAAuC;gBACvC,MAAM,OAAO,GAAG,MAAM,oBAAoB,EAAE,CAAC;gBAC7C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;oBAClB,cAAc,EAAE,2BAA2B;oBAC3C,GAAG,WAAW;iBACd,CAAC,CAAC;gBACH,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClB,CAAC;SACD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SAC1D;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,yCAAyC;YAC/C,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,0BAA0B,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC;SACtD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACxD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SAChE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;SACzD;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACrE;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,6BAA6B;YACnC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,2BAA2B,CAC1B,GAAG,EACH,GAAG,EACH,MAAwB,EACxB,WAAW,CACX;SACF;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,mCAAmC;YACzC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,2BAA2B,CAC1B,GAAG,EACH,GAAG,EACH,MAAwB,EACxB,WAAW,CACX;SACF;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,iCAAiC;YACvC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,yBAAyB,CACxB,GAAG,EACH,GAAG,EACH,MAAwB,EACxB,WAAW,CACX;SACF;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,oCAAoC;YAC1C,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,4BAA4B,CAC3B,GAAG,EACH,GAAG,EACH,MAAwB,EACxB,WAAW,CACX;SACF;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,uCAAuC;YAC7C,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,yBAAyB,CACxB,GAAG,EACH,GAAG,EACH,MAA0C,EAC1C,WAAW,CACX;SACF;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,4CAA4C;YAClD,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,2BAA2B,CAC1B,GAAG,EACH,GAAG,EACH,MAA0C,EAC1C,WAAW,CACX;SACF;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,6CAA6C;YACnD,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,uBAAuB,CACtB,GAAG,EACH,GAAG,EACH,MAA8C,EAC9C,WAAW,CACX;SACF;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,qDAAqD;YAC3D,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,8BAA8B,CAC7B,GAAG,EACH,GAAG,EACH,MAA8C,EAC9C,WAAW,CACX;SACF;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,4BAA4B;YAClC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAwB,EAAE,WAAW,EAAE;gBACtE,YAAY,EAAE,OAAO,CAAC,YAAY;aAClC,CAAC;SACH;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,CAAC;SAChE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,CAAC;SAChE;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC;SAC9C;QACD;YACC,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC;SAC9C;QACD;YACC,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC;SAC9C;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAwB,EAAE,WAAW,CAAC;SACpE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAwB,EAAE,WAAW,CAAC;SACrE;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,6BAA6B;YACnC,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,MAA2B,EAAE,WAAW,CAAC;SACxE;QACD;YACC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,uDAAuD;YAC7D,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC7B,6BAA6B,CAC5B,GAAG,EACH,GAAG,EACH,MAAiD,EACjD,WAAW,CACX;SACF;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAClE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SAChE;QACD;YACC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC;SACnE;QACD,oDAAoD;QACpD,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACtE,CAAC;AACH,CAAC","sourcesContent":["import type { ApprovalMode } from \"../agent/action-approval.js\";\nimport type { ThinkingLevel } from \"../agent/types.js\";\nimport { createEnterpriseRoutes } from \"../api/enterprise-routes.js\";\nimport { isDatabaseConfigured } from \"../db/client.js\";\nimport type { WebServerContext } from \"./app-context.js\";\nimport { handleAdminCleanup, handleAdminWarmCaches } from \"./handlers/admin.js\";\nimport { handleApproval } from \"./handlers/approval.js\";\nimport { handleApprovals } from \"./handlers/approvals.js\";\nimport { handleAttachmentExtract } from \"./handlers/attachments.js\";\nimport {\n\thandleAutomationMagicDocs,\n\thandleAutomationPreview,\n\thandleAutomations,\n} from \"./handlers/automations.js\";\nimport { handleBackground } from \"./handlers/background.js\";\nimport { handleBranch } from \"./handlers/branch.js\";\nimport { handleBridgeStatus } from \"./handlers/bridge.js\";\nimport { handleChat } from \"./handlers/chat.js\";\nimport { handleClientToolResult } from \"./handlers/client-tools.js\";\nimport { handleCommandPrefs } from \"./handlers/command-prefs.js\";\nimport { handleCommands } from \"./handlers/commands.js\";\nimport { handleCompliance } from \"./handlers/compliance.js\";\nimport { handleComposer } from \"./handlers/composer.js\";\nimport { handleConfig } from \"./handlers/config.js\";\nimport { handleContext } from \"./handlers/context.js\";\nimport { handleCost } from \"./handlers/cost.js\";\nimport { handleDiagnostics } from \"./handlers/diagnostics.js\";\nimport { handleFiles } from \"./handlers/files.js\";\nimport { handleFleet } from \"./handlers/fleet.js\";\nimport { handleFramework } from \"./handlers/framework.js\";\nimport {\n\thandleGuardianConfig,\n\thandleGuardianRun,\n\thandleGuardianStatus,\n} from \"./handlers/guardian.js\";\nimport {\n\thandleHeadlessConnectionCreate,\n\thandleHeadlessSessionCreate,\n\thandleHeadlessSessionDisconnect,\n\thandleHeadlessSessionEvents,\n\thandleHeadlessSessionHeartbeat,\n\thandleHeadlessSessionMessage,\n\thandleHeadlessSessionState,\n\thandleHeadlessSessionSubscribe,\n\thandleHeadlessSessionUnsubscribe,\n} from \"./handlers/headless-sessions.js\";\nimport { handleReadyz } from \"./handlers/health.js\";\nimport {\n\tHOSTED_RUNNER_DRAIN_PATH,\n\thandleHostedRunnerDrain,\n} from \"./handlers/hosted-runner-drain.js\";\nimport {\n\tHOSTED_RUNNER_IDENTITY_PATH,\n\thandleHostedRunnerIdentity,\n} from \"./handlers/hosted-runner-identity.js\";\nimport { handleIntelligentRouter } from \"./handlers/intelligent-router.js\";\nimport { handleLsp } from \"./handlers/lsp.js\";\nimport { handleMcpStatus } from \"./handlers/mcp.js\";\nimport { handleMemory } from \"./handlers/memory.js\";\nimport { handleMode } from \"./handlers/mode.js\";\nimport { handleModel, handleModels } from \"./handlers/models.js\";\nimport { handleOllama } from \"./handlers/ollama.js\";\nimport { handlePackageStatus } from \"./handlers/package.js\";\nimport { handlePendingRequestResume } from \"./handlers/pending-requests.js\";\nimport { handlePlan } from \"./handlers/plan.js\";\nimport { handlePolicyValidate } from \"./handlers/policy.js\";\nimport { handlePreview } from \"./handlers/preview.js\";\nimport { handlePromptSuggestion } from \"./handlers/prompt-suggestion.js\";\nimport { handleQueue } from \"./handlers/queue.js\";\nimport { handleQuota } from \"./handlers/quota.js\";\nimport { handleRevenueAttribution } from \"./handlers/revenue-attribution.js\";\nimport { handleReview } from \"./handlers/review.js\";\nimport { handleRun } from \"./handlers/run.js\";\nimport {\n\thandleSessionArtifactAccess,\n\thandleSessionArtifactFile,\n\thandleSessionArtifactViewer,\n\thandleSessionArtifactsEvents,\n\thandleSessionArtifactsIndex,\n\thandleSessionArtifactsZip,\n} from \"./handlers/session-artifacts.js\";\nimport {\n\thandleSessionAttachment,\n\thandleSessionAttachmentExtract,\n} from \"./handlers/session-attachments.js\";\nimport { handleSessionTimeline } from \"./handlers/session-timeline.js\";\nimport {\n\thandleSessionExport,\n\thandleSessionShare,\n\thandleSessions,\n\thandleSharedSession,\n\thandleSharedSessionAttachment,\n} from \"./handlers/sessions.js\";\nimport { handleStats } from \"./handlers/stats.js\";\nimport { handleStatus } from \"./handlers/status.js\";\nimport { handleTelemetry } from \"./handlers/telemetry.js\";\nimport { handleToolRetry } from \"./handlers/tool-retry.js\";\nimport { handleTools } from \"./handlers/tools.js\";\nimport { handleTraces } from \"./handlers/traces.js\";\nimport { handleTraining } from \"./handlers/training.js\";\nimport { handleUI } from \"./handlers/ui.js\";\nimport { handleChanges } from \"./handlers/undo.js\";\nimport { handleUndo } from \"./handlers/undo.js\";\nimport { handleUsageAnalytics } from \"./handlers/usage-analytics.js\";\nimport { handleUsage } from \"./handlers/usage.js\";\nimport { handleWorkflow } from \"./handlers/workflow.js\";\nimport { handleWorkspaceConfig } from \"./handlers/workspace-config.js\";\nimport { handleZen } from \"./handlers/zen.js\";\nimport { getPrometheusMetrics } from \"./logger.js\";\nimport { requestTracker } from \"./request-tracker.js\";\nimport type { Route } from \"./router.js\";\nimport { sendJson } from \"./server-utils.js\";\n\nexport function createRoutes(context: WebServerContext): Route[] {\n\tconst { corsHeaders } = context;\n\n\treturn [\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/healthz\",\n\t\t\thandler: (_req, res) => {\n\t\t\t\t// Simple liveness check\n\t\t\t\tres.writeHead(200, { \"Content-Type\": \"text/plain\" });\n\t\t\t\tres.end(\"ok\");\n\t\t\t},\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/readyz\",\n\t\t\thandler: (req, res) =>\n\t\t\t\thandleReadyz(req, res, corsHeaders, context.hostedRunner),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: HOSTED_RUNNER_IDENTITY_PATH,\n\t\t\thandler: (req, res) =>\n\t\t\t\thandleHostedRunnerIdentity(req, res, corsHeaders, context.hostedRunner),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: HOSTED_RUNNER_DRAIN_PATH,\n\t\t\thandler: (req, res) => handleHostedRunnerDrain(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/headless/connections\",\n\t\t\thandler: (req, res) => handleHeadlessConnectionCreate(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/headless/sessions\",\n\t\t\thandler: (req, res) => handleHeadlessSessionCreate(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/headless/sessions/:id\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleHeadlessSessionState(req, res, context, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/headless/sessions/:id/events\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleHeadlessSessionEvents(req, res, context, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/headless/sessions/:id/subscribe\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleHeadlessSessionSubscribe(req, res, context, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/headless/sessions/:id/unsubscribe\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleHeadlessSessionUnsubscribe(req, res, context, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/headless/sessions/:id/heartbeat\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleHeadlessSessionHeartbeat(req, res, context, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/headless/sessions/:id/disconnect\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleHeadlessSessionDisconnect(req, res, context, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/headless/sessions/:id/messages\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleHeadlessSessionMessage(req, res, context, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/debug/z\",\n\t\t\thandler: (_req, res) => {\n\t\t\t\t// Statusz: Deep introspection for debugging (Borg style)\n\t\t\t\t// Intentionally requires internal access or auth in real prod, open here for local\n\t\t\t\tconst activeRequests = requestTracker.getSnapshot().map((req) => ({\n\t\t\t\t\t...req,\n\t\t\t\t\tdurationMs: performance.now() - req.startTime,\n\t\t\t\t}));\n\n\t\t\t\tconst longRunning = requestTracker.getLongRunning(5000).map((req) => ({\n\t\t\t\t\t...req,\n\t\t\t\t\tdurationMs: performance.now() - req.startTime,\n\t\t\t\t}));\n\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t200,\n\t\t\t\t\t{\n\t\t\t\t\t\tactiveRequests,\n\t\t\t\t\t\tlongRunning,\n\t\t\t\t\t\ttotalActive: activeRequests.length,\n\t\t\t\t\t\ttotalLongRunning: longRunning.length,\n\t\t\t\t\t},\n\t\t\t\t\tcorsHeaders,\n\t\t\t\t\t_req, // Pass request for potential compression access\n\t\t\t\t);\n\t\t\t},\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/files\",\n\t\t\thandler: (req, res) => handleFiles(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/commands\",\n\t\t\thandler: (req, res) => handleCommands(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/command-prefs\",\n\t\t\thandler: (req, res) => handleCommandPrefs(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/command-prefs\",\n\t\t\thandler: (req, res) => handleCommandPrefs(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/models\",\n\t\t\thandler: (req, res) => handleModels(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/status\",\n\t\t\thandler: (req, res) =>\n\t\t\t\thandleStatus(req, res, corsHeaders, {\n\t\t\t\t\tstaticCacheMaxAge: context.staticMaxAge,\n\t\t\t\t}),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/prompt-suggestion\",\n\t\t\thandler: (req, res) => handlePromptSuggestion(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/status\",\n\t\t\thandler: (req, res) =>\n\t\t\t\thandleStatus(req, res, corsHeaders, {\n\t\t\t\t\tstaticCacheMaxAge: context.staticMaxAge,\n\t\t\t\t}),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/bridge/status\",\n\t\t\thandler: (req, res) => handleBridgeStatus(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/config\",\n\t\t\thandler: (req, res) => handleConfig(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/config\",\n\t\t\thandler: (req, res) => handleConfig(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/guardian/status\",\n\t\t\thandler: (req, res) => handleGuardianStatus(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/guardian/run\",\n\t\t\thandler: (req, res) => handleGuardianRun(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/guardian/config\",\n\t\t\thandler: (req, res) => handleGuardianConfig(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/plan\",\n\t\t\thandler: (req, res) => handlePlan(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/plan\",\n\t\t\thandler: (req, res) => handlePlan(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/mcp\",\n\t\t\thandler: (req, res) => handleMcpStatus(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/mcp\",\n\t\t\thandler: (req, res) => handleMcpStatus(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/package\",\n\t\t\thandler: (req, res) => handlePackageStatus(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/package\",\n\t\t\thandler: (req, res) => handlePackageStatus(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/usage\",\n\t\t\thandler: (req, res) => handleUsage(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/usage/analytics\",\n\t\t\thandler: (req, res) => handleUsageAnalytics(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/usage/analytics/:period\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleUsageAnalytics(req, res, corsHeaders, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/traces\",\n\t\t\thandler: (req, res) => handleTraces(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/traces\",\n\t\t\thandler: (req, res) => handleTraces(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/traces/:id\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleTraces(req, res, corsHeaders, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/workspace-configs\",\n\t\t\thandler: (req, res) => handleWorkspaceConfig(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/workspace-configs\",\n\t\t\thandler: (req, res) => handleWorkspaceConfig(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/workspace-configs/:workspaceId\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleWorkspaceConfig(req, res, corsHeaders, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"PUT\",\n\t\t\tpath: \"/api/workspace-configs/:workspaceId\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleWorkspaceConfig(req, res, corsHeaders, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"DELETE\",\n\t\t\tpath: \"/api/workspace-configs/:workspaceId\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleWorkspaceConfig(req, res, corsHeaders, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/compliance/generate-report\",\n\t\t\thandler: (req, res) => handleCompliance(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/compliance/controls\",\n\t\t\thandler: (req, res) => handleCompliance(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/compliance/evidence/:controlId\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleCompliance(req, res, corsHeaders, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/attribution/record-outcome\",\n\t\t\thandler: (req, res) => handleRevenueAttribution(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/attribution/roi/:agentId\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleRevenueAttribution(req, res, corsHeaders, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/intelligent-router/decisions\",\n\t\t\thandler: (req, res) => handleIntelligentRouter(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/intelligent-router/decisions\",\n\t\t\thandler: (req, res) => handleIntelligentRouter(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/intelligent-router/metrics\",\n\t\t\thandler: (req, res) => handleIntelligentRouter(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/intelligent-router/metrics\",\n\t\t\thandler: (req, res) => handleIntelligentRouter(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/intelligent-router/overrides\",\n\t\t\thandler: (req, res) => handleIntelligentRouter(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/intelligent-router/overrides\",\n\t\t\thandler: (req, res) => handleIntelligentRouter(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"DELETE\",\n\t\t\tpath: \"/api/intelligent-router/overrides/:taskType\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleIntelligentRouter(req, res, corsHeaders, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/fleet\",\n\t\t\thandler: (req, res) => handleFleet(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/background\",\n\t\t\thandler: (req, res) => handleBackground(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/background\",\n\t\t\thandler: (req, res) => handleBackground(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/automations\",\n\t\t\thandler: (req, res) => handleAutomations(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/automations\",\n\t\t\thandler: (req, res) => handleAutomations(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/automations/preview\",\n\t\t\thandler: (req, res) => handleAutomationPreview(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/automations/magic-docs\",\n\t\t\thandler: (req, res) => handleAutomationMagicDocs(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"PATCH\",\n\t\t\tpath: \"/api/automations/:id\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleAutomations(req, res, context, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"DELETE\",\n\t\t\tpath: \"/api/automations/:id\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleAutomations(req, res, context, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/automations/:id/run\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleAutomations(req, res, context, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/undo\",\n\t\t\thandler: (req, res) => handleUndo(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/undo\",\n\t\t\thandler: (req, res) => handleUndo(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/changes\",\n\t\t\thandler: (req, res) => handleChanges(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/approvals\",\n\t\t\thandler: (req, res) => handleApprovals(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/approvals\",\n\t\t\thandler: (req, res) => handleApprovals(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/framework\",\n\t\t\thandler: (req, res) => handleFramework(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/framework\",\n\t\t\thandler: (req, res) => handleFramework(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/tools\",\n\t\t\thandler: (req, res) => handleTools(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/review\",\n\t\t\thandler: (req, res) => handleReview(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/context\",\n\t\t\thandler: (req, res) => handleContext(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/stats\",\n\t\t\thandler: (req, res) => handleStats(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/telemetry\",\n\t\t\thandler: (req, res) => handleTelemetry(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/telemetry\",\n\t\t\thandler: (req, res) => handleTelemetry(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/training\",\n\t\t\thandler: (req, res) => handleTraining(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/training\",\n\t\t\thandler: (req, res) => handleTraining(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/diagnostics\",\n\t\t\thandler: (req, res) => handleDiagnostics(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/lsp\",\n\t\t\thandler: (req, res) => handleLsp(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/lsp\",\n\t\t\thandler: (req, res) => handleLsp(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/workflow\",\n\t\t\thandler: (req, res) => handleWorkflow(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/workflow\",\n\t\t\thandler: (req, res) => handleWorkflow(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/run\",\n\t\t\thandler: (req, res) => handleRun(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/run\",\n\t\t\thandler: (req, res) => handleRun(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/ollama\",\n\t\t\thandler: (req, res) => handleOllama(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/ollama\",\n\t\t\thandler: (req, res) => handleOllama(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/preview\",\n\t\t\thandler: (req, res) => handlePreview(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/composer\",\n\t\t\thandler: (req, res) => handleComposer(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/composer\",\n\t\t\thandler: (req, res) => handleComposer(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/cost\",\n\t\t\thandler: (req, res) => handleCost(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/cost\",\n\t\t\thandler: (req, res) => handleCost(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/quota\",\n\t\t\thandler: (req, res) => handleQuota(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/quota\",\n\t\t\thandler: (req, res) => handleQuota(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/memory\",\n\t\t\thandler: (req, res) => handleMemory(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/memory\",\n\t\t\thandler: (req, res) => handleMemory(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/mode\",\n\t\t\thandler: (req, res) => handleMode(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/mode\",\n\t\t\thandler: (req, res) => handleMode(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/zen\",\n\t\t\thandler: (req, res) => handleZen(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/zen\",\n\t\t\thandler: (req, res) => handleZen(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/ui\",\n\t\t\thandler: (req, res) => handleUI(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/ui\",\n\t\t\thandler: (req, res) => handleUI(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/queue\",\n\t\t\thandler: (req, res) => handleQueue(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/queue\",\n\t\t\thandler: (req, res) => handleQueue(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/branch\",\n\t\t\thandler: (req, res) => handleBranch(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/branch\",\n\t\t\thandler: (req, res) => handleBranch(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/model\",\n\t\t\thandler: async (req, res) => handleModel(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/model\",\n\t\t\thandler: async (req, res) => handleModel(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/metrics\",\n\t\t\thandler: async (_req, res) => {\n\t\t\t\t// Expose Prometheus compatible metrics\n\t\t\t\tconst metrics = await getPrometheusMetrics();\n\t\t\t\tres.writeHead(200, {\n\t\t\t\t\t\"Content-Type\": \"text/plain; version=0.0.4\",\n\t\t\t\t\t...corsHeaders,\n\t\t\t\t});\n\t\t\t\tres.end(metrics);\n\t\t\t},\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/chat\",\n\t\t\thandler: async (req, res) => handleChat(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/pending-requests/:requestId/resume\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandlePendingRequestResume(req, res, context, params),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/chat/approval\",\n\t\t\thandler: (req, res) => handleApproval(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/chat/client-tool-result\",\n\t\t\thandler: (req, res) => handleClientToolResult(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/chat/tool-retry\",\n\t\t\thandler: (req, res) => handleToolRetry(req, res, context),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/attachments/extract\",\n\t\t\thandler: (req, res) => handleAttachmentExtract(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions/:id/artifacts\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessionArtifactsIndex(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tparams as { id: string },\n\t\t\t\t\tcorsHeaders,\n\t\t\t\t),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions/:id/artifact-access\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessionArtifactAccess(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tparams as { id: string },\n\t\t\t\t\tcorsHeaders,\n\t\t\t\t),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions/:id/artifacts.zip\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessionArtifactsZip(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tparams as { id: string },\n\t\t\t\t\tcorsHeaders,\n\t\t\t\t),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions/:id/artifacts/events\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessionArtifactsEvents(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tparams as { id: string },\n\t\t\t\t\tcorsHeaders,\n\t\t\t\t),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions/:id/artifacts/:filename\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessionArtifactFile(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tparams as { id: string; filename: string },\n\t\t\t\t\tcorsHeaders,\n\t\t\t\t),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions/:id/artifacts/:filename/view\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessionArtifactViewer(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tparams as { id: string; filename: string },\n\t\t\t\t\tcorsHeaders,\n\t\t\t\t),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions/:id/attachments/:attachmentId\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessionAttachment(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tparams as { id: string; attachmentId: string },\n\t\t\t\t\tcorsHeaders,\n\t\t\t\t),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/sessions/:id/attachments/:attachmentId/extract\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessionAttachmentExtract(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tparams as { id: string; attachmentId: string },\n\t\t\t\t\tcorsHeaders,\n\t\t\t\t),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions/:id/timeline\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessionTimeline(req, res, params as { id: string }, corsHeaders, {\n\t\t\t\t\thostedRunner: context.hostedRunner,\n\t\t\t\t}),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions\",\n\t\t\thandler: (req, res) => handleSessions(req, res, {}, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/sessions\",\n\t\t\thandler: (req, res) => handleSessions(req, res, {}, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions/:id\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessions(req, res, params, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"PATCH\",\n\t\t\tpath: \"/api/sessions/:id\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessions(req, res, params, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"DELETE\",\n\t\t\tpath: \"/api/sessions/:id\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessions(req, res, params, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/sessions/:id/share\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessionShare(req, res, params as { id: string }, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/sessions/:id/export\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSessionExport(req, res, params as { id: string }, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions/shared/:token\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSharedSession(req, res, params as { token: string }, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tpath: \"/api/sessions/shared/:token/attachments/:attachmentId\",\n\t\t\thandler: (req, res, params) =>\n\t\t\t\thandleSharedSessionAttachment(\n\t\t\t\t\treq,\n\t\t\t\t\tres,\n\t\t\t\t\tparams as { token: string; attachmentId: string },\n\t\t\t\t\tcorsHeaders,\n\t\t\t\t),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/policy/validate\",\n\t\t\thandler: (req, res) => handlePolicyValidate(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/admin/cleanup\",\n\t\t\thandler: (req, res) => handleAdminCleanup(req, res, corsHeaders),\n\t\t},\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tpath: \"/api/admin/warm-caches\",\n\t\t\thandler: (req, res) => handleAdminWarmCaches(req, res, corsHeaders),\n\t\t},\n\t\t// Add enterprise routes when database is configured\n\t\t...(isDatabaseConfigured() ? createEnterpriseRoutes(corsHeaders) : []),\n\t];\n}\n"]}

package/dist/server/runtime-ws-access.d.ts

@@ -0,0 +1,16 @@
+import type { IncomingMessage } from "node:http";
+type RuntimeWebSocketAccessValidator = (req: IncomingMessage, sessionId: string) => boolean | Promise<boolean>;
+interface RuntimeWebSocketUpgradeSocket {
+    write(payload: string): unknown;
+    destroy(): unknown;
+}
+interface RuntimeWebSocketSessionAuthorizationOptions {
+    req: IncomingMessage;
+    socket: RuntimeWebSocketUpgradeSocket;
+    requestedSessionId: string | null;
+    validateSessionAccess: RuntimeWebSocketAccessValidator;
+    logAccessError?: (error: Error) => void;
+}
+export declare function authorizeRuntimeWebSocketSession({ req, socket, requestedSessionId, validateSessionAccess, logAccessError, }: RuntimeWebSocketSessionAuthorizationOptions): Promise<string | null | undefined>;
+export {};
+//# sourceMappingURL=runtime-ws-access.d.ts.map

package/dist/server/runtime-ws-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-ws-access.d.ts","sourceRoot":"","sources":["../../src/server/runtime-ws-access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEjD,KAAK,+BAA+B,GAAG,CACtC,GAAG,EAAE,eAAe,EACpB,SAAS,EAAE,MAAM,KACb,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEhC,UAAU,6BAA6B;IACtC,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IAChC,OAAO,IAAI,OAAO,CAAC;CACnB;AAED,UAAU,2CAA2C;IACpD,GAAG,EAAE,eAAe,CAAC;IACrB,MAAM,EAAE,6BAA6B,CAAC;IACtC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,qBAAqB,EAAE,+BAA+B,CAAC;IACvD,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CACxC;AAWD,wBAAsB,gCAAgC,CAAC,EACtD,GAAG,EACH,MAAM,EACN,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,GACd,EAAE,2CAA2C,GAAG,OAAO,CACvD,MAAM,GAAG,IAAI,GAAG,SAAS,CACzB,CAaA"}

package/dist/server/runtime-ws-access.js

@@ -0,0 +1,21 @@
+function rejectUpgrade(socket, statusLine) {
+    socket.write(`${statusLine}\r\n\r\n`);
+    socket.destroy();
+    return null;
+}
+export async function authorizeRuntimeWebSocketSession({ req, socket, requestedSessionId, validateSessionAccess, logAccessError, }) {
+    if (!requestedSessionId) {
+        return undefined;
+    }
+    try {
+        if (await validateSessionAccess(req, requestedSessionId)) {
+            return requestedSessionId;
+        }
+        return rejectUpgrade(socket, "HTTP/1.1 403 Forbidden");
+    }
+    catch (error) {
+        logAccessError?.(error instanceof Error ? error : new Error(String(error)));
+        return rejectUpgrade(socket, "HTTP/1.1 500 Internal Server Error");
+    }
+}
+//# sourceMappingURL=runtime-ws-access.js.map

package/dist/server/runtime-ws-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-ws-access.js","sourceRoot":"","sources":["../../src/server/runtime-ws-access.ts"],"names":[],"mappings":"AAoBA,SAAS,aAAa,CACrB,MAAqC,EACrC,UAAkB;IAElB,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,UAAU,CAAC,CAAC;IACtC,MAAM,CAAC,OAAO,EAAE,CAAC;IACjB,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,EACtD,GAAG,EACH,MAAM,EACN,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,GAC+B;IAG7C,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACJ,IAAI,MAAM,qBAAqB,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,CAAC;YAC1D,OAAO,kBAAkB,CAAC;QAC3B,CAAC;QACD,OAAO,aAAa,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,cAAc,EAAE,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5E,OAAO,aAAa,CAAC,MAAM,EAAE,oCAAoC,CAAC,CAAC;IACpE,CAAC;AACF,CAAC","sourcesContent":["import type { IncomingMessage } from \"node:http\";\n\ntype RuntimeWebSocketAccessValidator = (\n\treq: IncomingMessage,\n\tsessionId: string,\n) => boolean | Promise<boolean>;\n\ninterface RuntimeWebSocketUpgradeSocket {\n\twrite(payload: string): unknown;\n\tdestroy(): unknown;\n}\n\ninterface RuntimeWebSocketSessionAuthorizationOptions {\n\treq: IncomingMessage;\n\tsocket: RuntimeWebSocketUpgradeSocket;\n\trequestedSessionId: string | null;\n\tvalidateSessionAccess: RuntimeWebSocketAccessValidator;\n\tlogAccessError?: (error: Error) => void;\n}\n\nfunction rejectUpgrade(\n\tsocket: RuntimeWebSocketUpgradeSocket,\n\tstatusLine: string,\n): null {\n\tsocket.write(`${statusLine}\\r\\n\\r\\n`);\n\tsocket.destroy();\n\treturn null;\n}\n\nexport async function authorizeRuntimeWebSocketSession({\n\treq,\n\tsocket,\n\trequestedSessionId,\n\tvalidateSessionAccess,\n\tlogAccessError,\n}: RuntimeWebSocketSessionAuthorizationOptions): Promise<\n\tstring | null | undefined\n> {\n\tif (!requestedSessionId) {\n\t\treturn undefined;\n\t}\n\ttry {\n\t\tif (await validateSessionAccess(req, requestedSessionId)) {\n\t\t\treturn requestedSessionId;\n\t\t}\n\t\treturn rejectUpgrade(socket, \"HTTP/1.1 403 Forbidden\");\n\t} catch (error) {\n\t\tlogAccessError?.(error instanceof Error ? error : new Error(String(error)));\n\t\treturn rejectUpgrade(socket, \"HTTP/1.1 500 Internal Server Error\");\n\t}\n}\n"]}

package/dist/server/server-middlewares.d.ts

@@ -9,7 +9,7 @@ export declare function createRateLimitMiddleware(rateLimiter: RateLimiter, cors
  */
 export declare function createTieredRateLimitMiddleware(rateLimiter: TieredRateLimiter, corsHeaders: Record<string, string>, trustProxy?: boolean, trustProxyHops?: number): Middleware;
 export declare function createCorsMiddleware(corsHeaders: Record<string, string>): Middleware;
-export declare function createAuthMiddleware(_apiKey: string | null, corsHeaders: Record<string, string>, requireApiKey?: boolean): Middleware;
+export declare function createAuthMiddleware(apiKey: string | null, corsHeaders: Record<string, string>, requireApiKey?: boolean): Middleware;
 export declare function createCsrfMiddleware(token: string | null, corsHeaders: Record<string, string>, enabled?: boolean): Middleware;
 export declare function createRouterMiddleware(routerHandler: (req: IncomingMessage, res: ServerResponse, pathname: string) => Promise<void> | void): Middleware;
 export interface IpAccessRule {

package/dist/server/server-middlewares.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server-middlewares.d.ts","sourceRoot":"","sources":["../../src/server/server-middlewares.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAKjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAwBxE,wBAAgB,4BAA4B,CAC3C,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACjC,UAAU,CAwBZ;AA6CD,wBAAgB,yBAAyB,CACxC,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,UAAU,UAAQ,EAClB,cAAc,SAAI,GAChB,UAAU,CAoCZ;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAC9C,WAAW,EAAE,iBAAiB,EAC9B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,UAAU,UAAQ,EAClB,cAAc,SAAI,GAChB,UAAU,CAsCZ;AAED,wBAAgB,oBAAoB,CACnC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACjC,UAAU,CASZ;AAED,wBAAgB,oBAAoB,CACnC,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,aAAa,UAAQ,GACnB,UAAU,CAsCZ;AAED,wBAAgB,oBAAoB,CACnC,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,OAAO,UAAQ,GACb,UAAU,CAmCZ;AAED,wBAAgB,sBAAsB,CACrC,aAAa,EAAE,CACd,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,QAAQ,EAAE,MAAM,KACZ,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,GACvB,UAAU,CASZ;AAMD,MAAM,WAAW,YAAY;IAC5B,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;IACvB,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC9B,yCAAyC;IACzC,aAAa,EAAE,OAAO,GAAG,MAAM,CAAC;IAChC,iDAAiD;IACjD,KAAK,EAAE,YAAY,EAAE,CAAC;CACtB;AA8ED;;GAEG;AACH,wBAAgB,aAAa,CAC5B,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,cAAc,GACpB;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,YAAY,CAAA;CAAE,CAWlD;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACvC,SAAS,EAAE,MAAM,cAAc,GAAG,IAAI,EACtC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,UAAU,UAAQ,EAClB,cAAc,SAAI,GAChB,UAAU,CA6CZ"}
+{"version":3,"file":"server-middlewares.d.ts","sourceRoot":"","sources":["../../src/server/server-middlewares.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAMjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAgBxE,wBAAgB,4BAA4B,CAC3C,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACjC,UAAU,CAyBZ;AA6CD,wBAAgB,yBAAyB,CACxC,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,UAAU,UAAQ,EAClB,cAAc,SAAI,GAChB,UAAU,CAoCZ;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAC9C,WAAW,EAAE,iBAAiB,EAC9B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,UAAU,UAAQ,EAClB,cAAc,SAAI,GAChB,UAAU,CAsCZ;AAED,wBAAgB,oBAAoB,CACnC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACjC,UAAU,CASZ;AAED,wBAAgB,oBAAoB,CACnC,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,aAAa,UAAQ,GACnB,UAAU,CAyDZ;AAED,wBAAgB,oBAAoB,CACnC,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,OAAO,UAAQ,GACb,UAAU,CAgCZ;AAED,wBAAgB,sBAAsB,CACrC,aAAa,EAAE,CACd,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,QAAQ,EAAE,MAAM,KACZ,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,GACvB,UAAU,CASZ;AAMD,MAAM,WAAW,YAAY;IAC5B,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;IACvB,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC9B,yCAAyC;IACzC,aAAa,EAAE,OAAO,GAAG,MAAM,CAAC;IAChC,iDAAiD;IACjD,KAAK,EAAE,YAAY,EAAE,CAAC;CACtB;AA8ED;;GAEG;AACH,wBAAgB,aAAa,CAC5B,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,cAAc,GACpB;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,YAAY,CAAA;CAAE,CAWlD;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACvC,SAAS,EAAE,MAAM,cAAc,GAAG,IAAI,EACtC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,UAAU,UAAQ,EAClB,cAAc,SAAI,GAChB,UAAU,CA6CZ"}

package/dist/server/server-middlewares.js

@@ -1,6 +1,6 @@
 import { createLogger } from "../utils/logger.js";
 import { getArtifactAccessGrantFromRequest } from "./artifact-access.js";
-import { checkApiAuth, isApiAuthConfigured } from "./authz.js";
+import { checkApiAuth } from "./authz.js";
 import { isOverloaded } from "./logger.js";
 import { getRequestHeader, secureCompare, sendJson } from "./server-utils.js";
 const logger = createLogger("middleware:ip-access");
@@ -15,11 +15,6 @@ function getPathname(req) {
         return "/";
     }
 }
-function isPublicApiPath(pathname) {
-    return (pathname === "/api/auth/login" ||
-        pathname === "/api/auth/register" ||
-        pathname.startsWith("/api/sessions/shared/"));
-}
 export function createLoadSheddingMiddleware(corsHeaders) {
     return (req, res, next) => {
         const pathname = getPathname(req);
@@ -28,6 +23,7 @@ export function createLoadSheddingMiddleware(corsHeaders) {
         // We drop new /api/chat requests if overloaded
         if (isOverloaded() &&
             pathname !== "/healthz" &&
+            pathname !== "/readyz" &&
             pathname !== "/api/metrics") {
             // Drop non-critical traffic
             res.writeHead(503, {
@@ -152,26 +148,41 @@ export function createCorsMiddleware(corsHeaders) {
         return next();
     };
 }
-export function createAuthMiddleware(_apiKey, corsHeaders, requireApiKey = false) {
+export function createAuthMiddleware(apiKey, corsHeaders, requireApiKey = false) {
     return async (req, res, next) => {
         const pathname = getPathname(req);
-        if (!pathname.startsWith("/api") || isPublicApiPath(pathname)) {
-            return next();
-        }
-        if (getArtifactAccessGrantFromRequest(req)) {
-            return next();
-        }
-        const auth = await checkApiAuth(req);
-        if (auth.ok) {
-            return next();
-        }
-        if (requireApiKey && !isApiAuthConfigured()) {
-            sendJson(res, 401, {
-                error: "Protected API routes require configured authentication. Set MAESTRO_WEB_API_KEY, MAESTRO_AUTH_SHARED_SECRET, or MAESTRO_JWT_* for hosted deployments, or disable the requirement explicitly with MAESTRO_WEB_REQUIRE_KEY=0 for local-only testing.",
-            }, corsHeaders, req);
-            return;
+        const isApiRoute = pathname.startsWith("/api");
+        const isDebugRoute = pathname.startsWith("/debug");
+        const requiresAuthBoundary = isApiRoute || isDebugRoute;
+        if (requiresAuthBoundary) {
+            const missingKey = !apiKey || apiKey.length === 0;
+            // No key provided
+            if (missingKey) {
+                if (requireApiKey) {
+                    sendJson(res, 401, {
+                        error: "MAESTRO_WEB_API_KEY is required for all API requests. Set the environment variable or disable requirement explicitly with MAESTRO_WEB_REQUIRE_KEY=0 for local testing only.",
+                    }, corsHeaders, req);
+                    return;
+                }
+                // Requirement off and no key: allow through.
+                const auth = await checkApiAuth(req, { apiKey });
+                if (!auth.ok) {
+                    sendJson(res, 401, { error: auth.error || "Unauthorized" }, corsHeaders, req);
+                    return;
+                }
+                return next();
+            }
+            // Key provided: validate it.
+            if (isApiRoute && getArtifactAccessGrantFromRequest(req)) {
+                return next();
+            }
+            const auth = await checkApiAuth(req, { apiKey });
+            if (!auth.ok) {
+                sendJson(res, 401, { error: auth.error || "Unauthorized" }, corsHeaders, req);
+                return;
+            }
         }
-        sendJson(res, 401, { error: auth.error || "Unauthorized" }, corsHeaders, req);
+        return next();
     };
 }
 export function createCsrfMiddleware(token, corsHeaders, enabled = false) {
@@ -184,10 +195,7 @@ export function createCsrfMiddleware(token, corsHeaders, enabled = false) {
             return next();
         }
         const pathname = getPathname(req);
-        if (!pathname.startsWith("/api") || isPublicApiPath(pathname)) {
-            return next();
-        }
-        if (req.headers.authorization?.trim().startsWith("Bearer ")) {
+        if (!pathname.startsWith("/api")) {
             return next();
         }
         const value = getRequestHeader(req, "x-composer-csrf", "x-maestro-csrf", "x-csrf-token", "x-xsrf-token");

package/dist/server/server-middlewares.js.map

@@ -1 +1 @@
-{"version":3,"file":"server-middlewares.js","sourceRoot":"","sources":["../../src/server/server-middlewares.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE9E,MAAM,MAAM,GAAG,YAAY,CAAC,sBAAsB,CAAC,CAAC;AAEpD,yCAAyC;AACzC,SAAS,WAAW,CAAC,GAAoB;IACxC,IAAI,CAAC;QACJ,sEAAsE;QACtE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC,QAAQ,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,GAAG,CAAC;IACZ,CAAC;AACF,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACxC,OAAO,CACN,QAAQ,KAAK,iBAAiB;QAC9B,QAAQ,KAAK,oBAAoB;QACjC,QAAQ,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAC5C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC3C,WAAmC;IAEnC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,qDAAqD;QACrD,qEAAqE;QACrE,+CAA+C;QAC/C,IACC,YAAY,EAAE;YACd,QAAQ,KAAK,UAAU;YACvB,QAAQ,KAAK,cAAc,EAC1B,CAAC;YACF,4BAA4B;YAC5B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBAClB,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,GAAG;gBAClB,GAAG,WAAW;aACd,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CACN,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC,CACtE,CAAC;YACF,OAAO;QACR,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAS,WAAW,CAAC,EAAU;IAC9B,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,CAAC;AACX,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CACnB,GAAoB,EACpB,UAAmB,EACnB,cAAsB;IAEtB,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;IAE/C,IAAI,UAAU,EAAE,CAAC;QAChB,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACjD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YACnC,4DAA4D;YAC5D,wDAAwD;YACxD,kDAAkD;YAClD,yEAAyE;YACzE,6CAA6C;YAC7C,sEAAsE;YACtE,MAAM,GAAG,GAAG,SAAS;iBACnB,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,OAAO,CAAC,CAAC;YAClB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,mEAAmE;gBACnE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,GAAG,cAAc,GAAG,CAAC,CAAC,CAAC;gBACjE,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YAC7B,CAAC;QACF,CAAC;IACF,CAAC;IAED,oEAAoE;IACpE,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,yBAAyB,CACxC,WAAwB,EACxB,WAAmC,EACnC,UAAU,GAAG,KAAK,EAClB,cAAc,GAAG,CAAC;IAElB,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,+DAA+D;QAC/D,MAAM,aAAa,GAClB,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;YAC3B,QAAQ,KAAK,cAAc;YAC3B,QAAQ,KAAK,UAAU,CAAC;QAEzB,IAAI,aAAa,EAAE,CAAC;YACnB,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;YACxD,iEAAiE;YACjE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,GACzC,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAElC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;oBAClB,cAAc,EAAE,kBAAkB;oBAClC,mBAAmB,EAAE,KAAK,CAAC,QAAQ,EAAE;oBACrC,uBAAuB,EAAE,GAAG;oBAC5B,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE;oBACvD,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE;oBAChE,GAAG,WAAW;iBACd,CAAC,CAAC;gBACH,GAAG,CAAC,GAAG,CACN,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC,CACnE,CAAC;gBACF,OAAO;YACR,CAAC;YACD,qDAAqD;YACrD,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YACrD,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7D,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAC9C,WAA8B,EAC9B,WAAmC,EACnC,UAAU,GAAG,KAAK,EAClB,cAAc,GAAG,CAAC;IAElB,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,+DAA+D;QAC/D,MAAM,aAAa,GAClB,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;YAC3B,QAAQ,KAAK,cAAc;YAC3B,QAAQ,KAAK,UAAU,CAAC;QAEzB,IAAI,aAAa,EAAE,CAAC;YACnB,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;YACxD,iEAAiE;YACjE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,CAAC,UAAU,CACxE,EAAE,EACF,QAAQ,CACR,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;oBAClB,cAAc,EAAE,kBAAkB;oBAClC,mBAAmB,EAAE,KAAK,CAAC,QAAQ,EAAE;oBACrC,uBAAuB,EAAE,GAAG;oBAC5B,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE;oBACvD,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE;oBAChE,GAAG,WAAW;iBACd,CAAC,CAAC;gBACH,GAAG,CAAC,GAAG,CACN,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC,CACnE,CAAC;gBACF,OAAO;YACR,CAAC;YACD,qDAAqD;YACrD,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YACrD,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7D,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CACnC,WAAmC;IAEnC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAChC,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACR,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CACnC,OAAsB,EACtB,WAAmC,EACnC,aAAa,GAAG,KAAK;IAErB,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,EAAE,CAAC;QACf,CAAC;QAED,IAAI,iCAAiC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5C,OAAO,IAAI,EAAE,CAAC;QACf,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,OAAO,IAAI,EAAE,CAAC;QACf,CAAC;QAED,IAAI,aAAa,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAC7C,QAAQ,CACP,GAAG,EACH,GAAG,EACH;gBACC,KAAK,EACJ,oPAAoP;aACrP,EACD,WAAW,EACX,GAAG,CACH,CAAC;YACF,OAAO;QACR,CAAC;QAED,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,cAAc,EAAE,EACvC,WAAW,EACX,GAAG,CACH,CAAC;IACH,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CACnC,KAAoB,EACpB,WAAmC,EACnC,OAAO,GAAG,KAAK;IAEf,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACnE,OAAO,IAAI,EAAE,CAAC;QACf,CAAC;QACD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,EAAE,CAAC;QACf,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,OAAO,IAAI,EAAE,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,gBAAgB,CAC7B,GAAG,EACH,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,cAAc,CACd,CAAC;QACF,IAAI,CAAC,KAAK,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;YACpD,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,0CAA0C,EAAE,EACrD,WAAW,EACX,GAAG,CACH,CAAC;YACF,OAAO;QACR,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CACrC,aAIyB;IAEzB,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QACxC,gFAAgF;QAChF,mCAAmC;QACnC,mFAAmF;QACnF,2CAA2C;IAC5C,CAAC,CAAC;AACH,CAAC;AAsBD;;GAEG;AACH,SAAS,SAAS,CAAC,IAAY;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,EAAE,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEtE,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,EAAE,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,IACC,OAAO,CAAC,MAAM,KAAK,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,EACvD,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,4CAA4C;IAC5C,MAAM,KAAK,GAAG,MAAM,CACnB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC;QACnB,CAAC,OAAO,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC;QACnB,CAAC,OAAO,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC;QAClB,OAAO,CAAC,CAAC,CAAE,CAAC;QACZ,CAAC,CACF,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC;IAC3B,MAAM,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAEjD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,EAAU;IAC7B,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAEhC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,IACC,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,EACrD,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,4CAA4C;IAC5C,OAAO,MAAM,CACZ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACrE,CAAC,CACF,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,EAAU,EAAE,OAAe;IACpD,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAEjC,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,kBAAkB;QAClB,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACvC,OAAO,UAAU,KAAK,IAAI,IAAI,KAAK,KAAK,UAAU,CAAC;IACpD,CAAC;IAED,OAAO,KAAK,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC5B,EAAU,EACV,MAAsB;IAEtB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,OAAO;gBACN,OAAO,EAAE,IAAI,CAAC,IAAI,KAAK,OAAO;gBAC9B,WAAW,EAAE,IAAI;aACjB,CAAC;QACH,CAAC;IACF,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,aAAa,KAAK,OAAO,EAAE,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACvC,SAAsC,EACtC,WAAmC,EACnC,UAAU,GAAG,KAAK,EAClB,cAAc,GAAG,CAAC;IAElB,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,4BAA4B;YAC5B,OAAO,IAAI,EAAE,CAAC;QACf,CAAC;QAED,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;QAE/C,yCAAyC;QACzC,IAAI,UAAU,EAAE,CAAC;YAChB,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACjD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,GAAG,GAAG,SAAS;qBACnB,KAAK,CAAC,GAAG,CAAC;qBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;qBACpB,MAAM,CAAC,OAAO,CAAC,CAAC;gBAClB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,GAAG,cAAc,GAAG,CAAC,CAAC,CAAC;oBACjE,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;gBAC7B,CAAC;YACF,CAAC;QACF,CAAC;QAED,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAEzC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;gBAC/B,EAAE;gBACF,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,OAAO;gBACxC,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW;aAC5C,CAAC,CAAC;YAEH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBAClB,cAAc,EAAE,kBAAkB;gBAClC,GAAG,WAAW;aACd,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC,CAAC;YACxE,OAAO;QACR,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACH,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { createLogger } from \"../utils/logger.js\";\nimport { getArtifactAccessGrantFromRequest } from \"./artifact-access.js\";\nimport { checkApiAuth, isApiAuthConfigured } from \"./authz.js\";\nimport { isOverloaded } from \"./logger.js\";\nimport type { Middleware } from \"./middleware.js\";\nimport type { RateLimiter, TieredRateLimiter } from \"./rate-limiter.js\";\nimport { getRequestHeader, secureCompare, sendJson } from \"./server-utils.js\";\n\nconst logger = createLogger(\"middleware:ip-access\");\n\n// Helper for consistent safe URL parsing\nfunction getPathname(req: IncomingMessage): string {\n\ttry {\n\t\t// Use a dummy base for relative URLs (req.url) to ensure safe parsing\n\t\tconst parsed = new URL(req.url || \"/\", \"http://localhost\");\n\t\treturn parsed.pathname;\n\t} catch {\n\t\treturn \"/\";\n\t}\n}\n\nfunction isPublicApiPath(pathname: string): boolean {\n\treturn (\n\t\tpathname === \"/api/auth/login\" ||\n\t\tpathname === \"/api/auth/register\" ||\n\t\tpathname.startsWith(\"/api/sessions/shared/\")\n\t);\n}\n\nexport function createLoadSheddingMiddleware(\n\tcorsHeaders: Record<string, string>,\n): Middleware {\n\treturn (req, res, next) => {\n\t\tconst pathname = getPathname(req);\n\t\t// 1. Criticality-Aware Load Shedding (Global health)\n\t\t// We prioritize /healthz, /api/metrics, and existing SSE connections\n\t\t// We drop new /api/chat requests if overloaded\n\t\tif (\n\t\t\tisOverloaded() &&\n\t\t\tpathname !== \"/healthz\" &&\n\t\t\tpathname !== \"/api/metrics\"\n\t\t) {\n\t\t\t// Drop non-critical traffic\n\t\t\tres.writeHead(503, {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\"Retry-After\": \"5\",\n\t\t\t\t...corsHeaders,\n\t\t\t});\n\t\t\tres.end(\n\t\t\t\tJSON.stringify({ error: \"Service Unavailable: Server is overloaded\" }),\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\t\treturn next();\n\t};\n}\n\n// Normalize IPv4-mapped IPv6 addresses (e.g., ::ffff:127.0.0.1 -> 127.0.0.1)\nfunction normalizeIP(ip: string): string {\n\tif (ip.startsWith(\"::ffff:\")) {\n\t\treturn ip.substring(7);\n\t}\n\treturn ip;\n}\n\n/**\n * Extract client IP from request, handling proxy headers.\n */\nfunction getClientIp(\n\treq: IncomingMessage,\n\ttrustProxy: boolean,\n\ttrustProxyHops: number,\n): string {\n\tlet ip = req.socket.remoteAddress || \"unknown\";\n\n\tif (trustProxy) {\n\t\tconst forwarded = req.headers[\"x-forwarded-for\"];\n\t\tif (typeof forwarded === \"string\") {\n\t\t\t// Parse IPs and read from right-to-left to prevent spoofing\n\t\t\t// X-Forwarded-For format: \"client, proxy1, proxy2, ...\"\n\t\t\t// Each proxy appends its upstream IP to the right\n\t\t\t// trustProxyHops = number of trusted proxies between us and the internet\n\t\t\t// Example with CDN -> nginx -> app (2 hops):\n\t\t\t//   Header: \"client, cdn, nginx\" -> skip 2 from right -> use \"client\"\n\t\t\tconst ips = forwarded\n\t\t\t\t.split(\",\")\n\t\t\t\t.map((s) => s.trim())\n\t\t\t\t.filter(Boolean);\n\t\t\tif (ips.length > 0) {\n\t\t\t\t// Skip trustProxyHops from the right to get the first untrusted IP\n\t\t\t\tconst targetIndex = Math.max(0, ips.length - trustProxyHops - 1);\n\t\t\t\tip = ips[targetIndex] || ip;\n\t\t\t}\n\t\t}\n\t}\n\n\t// Normalize IPv4-mapped IPv6 addresses for consistent rate limiting\n\treturn normalizeIP(ip);\n}\n\nexport function createRateLimitMiddleware(\n\trateLimiter: RateLimiter,\n\tcorsHeaders: Record<string, string>,\n\ttrustProxy = false,\n\ttrustProxyHops = 1,\n): Middleware {\n\treturn async (req, res, next) => {\n\t\tconst pathname = getPathname(req);\n\t\t// Skip for static assets and critical health/metrics endpoints\n\t\tconst isRateLimited =\n\t\t\tpathname.startsWith(\"/api\") &&\n\t\t\tpathname !== \"/api/metrics\" &&\n\t\t\tpathname !== \"/healthz\";\n\n\t\tif (isRateLimited) {\n\t\t\tconst ip = getClientIp(req, trustProxy, trustProxyHops);\n\t\t\t// Use async check to support Redis for distributed rate limiting\n\t\t\tconst { allowed, remaining, reset, limit } =\n\t\t\t\tawait rateLimiter.checkAsync(ip);\n\n\t\t\tif (!allowed) {\n\t\t\t\tres.writeHead(429, {\n\t\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\t\"X-RateLimit-Limit\": limit.toString(),\n\t\t\t\t\t\"X-RateLimit-Remaining\": \"0\",\n\t\t\t\t\t\"X-RateLimit-Reset\": Math.ceil(reset / 1000).toString(),\n\t\t\t\t\t\"Retry-After\": Math.ceil((reset - Date.now()) / 1000).toString(),\n\t\t\t\t\t...corsHeaders,\n\t\t\t\t});\n\t\t\t\tres.end(\n\t\t\t\t\tJSON.stringify({ error: \"Too Many Requests: Rate limit exceeded\" }),\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\t// Add rate limit headers to successful responses too\n\t\t\tres.setHeader(\"X-RateLimit-Limit\", limit.toString());\n\t\t\tres.setHeader(\"X-RateLimit-Remaining\", remaining.toString());\n\t\t\tres.setHeader(\"X-RateLimit-Reset\", Math.ceil(reset / 1000).toString());\n\t\t}\n\t\treturn next();\n\t};\n}\n\n/**\n * Create tiered rate limit middleware with per-endpoint limits.\n * Uses TieredRateLimiter for endpoint-specific rate limits.\n */\nexport function createTieredRateLimitMiddleware(\n\trateLimiter: TieredRateLimiter,\n\tcorsHeaders: Record<string, string>,\n\ttrustProxy = false,\n\ttrustProxyHops = 1,\n): Middleware {\n\treturn async (req, res, next) => {\n\t\tconst pathname = getPathname(req);\n\t\t// Skip for static assets and critical health/metrics endpoints\n\t\tconst isRateLimited =\n\t\t\tpathname.startsWith(\"/api\") &&\n\t\t\tpathname !== \"/api/metrics\" &&\n\t\t\tpathname !== \"/healthz\";\n\n\t\tif (isRateLimited) {\n\t\t\tconst ip = getClientIp(req, trustProxy, trustProxyHops);\n\t\t\t// Use async check to support Redis for distributed rate limiting\n\t\t\tconst { allowed, remaining, reset, limit } = await rateLimiter.checkAsync(\n\t\t\t\tip,\n\t\t\t\tpathname,\n\t\t\t);\n\n\t\t\tif (!allowed) {\n\t\t\t\tres.writeHead(429, {\n\t\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\t\"X-RateLimit-Limit\": limit.toString(),\n\t\t\t\t\t\"X-RateLimit-Remaining\": \"0\",\n\t\t\t\t\t\"X-RateLimit-Reset\": Math.ceil(reset / 1000).toString(),\n\t\t\t\t\t\"Retry-After\": Math.ceil((reset - Date.now()) / 1000).toString(),\n\t\t\t\t\t...corsHeaders,\n\t\t\t\t});\n\t\t\t\tres.end(\n\t\t\t\t\tJSON.stringify({ error: \"Too Many Requests: Rate limit exceeded\" }),\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\t// Add rate limit headers to successful responses too\n\t\t\tres.setHeader(\"X-RateLimit-Limit\", limit.toString());\n\t\t\tres.setHeader(\"X-RateLimit-Remaining\", remaining.toString());\n\t\t\tres.setHeader(\"X-RateLimit-Reset\", Math.ceil(reset / 1000).toString());\n\t\t}\n\t\treturn next();\n\t};\n}\n\nexport function createCorsMiddleware(\n\tcorsHeaders: Record<string, string>,\n): Middleware {\n\treturn (req, res, next) => {\n\t\tif (req.method === \"OPTIONS\") {\n\t\t\tres.writeHead(204, corsHeaders);\n\t\t\tres.end();\n\t\t\treturn;\n\t\t}\n\t\treturn next();\n\t};\n}\n\nexport function createAuthMiddleware(\n\t_apiKey: string | null,\n\tcorsHeaders: Record<string, string>,\n\trequireApiKey = false,\n): Middleware {\n\treturn async (req, res, next) => {\n\t\tconst pathname = getPathname(req);\n\t\tif (!pathname.startsWith(\"/api\") || isPublicApiPath(pathname)) {\n\t\t\treturn next();\n\t\t}\n\n\t\tif (getArtifactAccessGrantFromRequest(req)) {\n\t\t\treturn next();\n\t\t}\n\n\t\tconst auth = await checkApiAuth(req);\n\t\tif (auth.ok) {\n\t\t\treturn next();\n\t\t}\n\n\t\tif (requireApiKey && !isApiAuthConfigured()) {\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t401,\n\t\t\t\t{\n\t\t\t\t\terror:\n\t\t\t\t\t\t\"Protected API routes require configured authentication. Set MAESTRO_WEB_API_KEY, MAESTRO_AUTH_SHARED_SECRET, or MAESTRO_JWT_* for hosted deployments, or disable the requirement explicitly with MAESTRO_WEB_REQUIRE_KEY=0 for local-only testing.\",\n\t\t\t\t},\n\t\t\t\tcorsHeaders,\n\t\t\t\treq,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\n\t\tsendJson(\n\t\t\tres,\n\t\t\t401,\n\t\t\t{ error: auth.error || \"Unauthorized\" },\n\t\t\tcorsHeaders,\n\t\t\treq,\n\t\t);\n\t};\n}\n\nexport function createCsrfMiddleware(\n\ttoken: string | null,\n\tcorsHeaders: Record<string, string>,\n\tenabled = false,\n): Middleware {\n\tif (!enabled || !token) {\n\t\treturn (_req, _res, next) => next();\n\t}\n\treturn (req, res, next) => {\n\t\tconst method = (req.method || \"GET\").toUpperCase();\n\t\tif (method === \"GET\" || method === \"HEAD\" || method === \"OPTIONS\") {\n\t\t\treturn next();\n\t\t}\n\t\tconst pathname = getPathname(req);\n\t\tif (!pathname.startsWith(\"/api\") || isPublicApiPath(pathname)) {\n\t\t\treturn next();\n\t\t}\n\t\tif (req.headers.authorization?.trim().startsWith(\"Bearer \")) {\n\t\t\treturn next();\n\t\t}\n\t\tconst value = getRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-csrf\",\n\t\t\t\"x-maestro-csrf\",\n\t\t\t\"x-csrf-token\",\n\t\t\t\"x-xsrf-token\",\n\t\t);\n\t\tif (!value || !secureCompare(String(value), token)) {\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t403,\n\t\t\t\t{ error: \"Forbidden: missing or invalid CSRF token\" },\n\t\t\t\tcorsHeaders,\n\t\t\t\treq,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\t\treturn next();\n\t};\n}\n\nexport function createRouterMiddleware(\n\trouterHandler: (\n\t\treq: IncomingMessage,\n\t\tres: ServerResponse,\n\t\tpathname: string,\n\t) => Promise<void> | void,\n): Middleware {\n\treturn async (req, res, next) => {\n\t\tconst pathname = getPathname(req);\n\t\tawait routerHandler(req, res, pathname);\n\t\t// Router handles the response, so we don't call next() unless it falls through,\n\t\t// but typically router is the end.\n\t\t// If router doesn't handle it (e.g. 404), it might send response itself or return.\n\t\t// Our current router sends 404/500 itself.\n\t};\n}\n\n// ============================================================================\n// IP ACCESS CONTROL\n// ============================================================================\n\nexport interface IpAccessRule {\n\t/** CIDR notation (e.g., \"192.168.1.0/24\") or single IP */\n\tpattern: string;\n\t/** Whether this is an allow or deny rule */\n\ttype: \"allow\" | \"deny\";\n\t/** Optional description */\n\tdescription?: string;\n}\n\nexport interface IpAccessConfig {\n\t/** Default action when no rules match */\n\tdefaultAction: \"allow\" | \"deny\";\n\t/** Rules evaluated in order, first match wins */\n\trules: IpAccessRule[];\n}\n\n/**\n * Parse CIDR notation to IP range (IPv4 only for now)\n */\nfunction parseCidr(cidr: string): { start: bigint; end: bigint } | null {\n\tconst parts = cidr.split(\"/\");\n\tconst ip = parts[0];\n\tif (!ip) {\n\t\treturn null;\n\t}\n\tconst prefix = parts.length > 1 ? Number.parseInt(parts[1]!, 10) : 32;\n\n\tif (Number.isNaN(prefix) || prefix < 0 || prefix > 32) {\n\t\treturn null;\n\t}\n\n\tconst ipParts = ip.split(\".\").map(Number);\n\tif (\n\t\tipParts.length !== 4 ||\n\t\tipParts.some((p) => Number.isNaN(p) || p < 0 || p > 255)\n\t) {\n\t\treturn null;\n\t}\n\n\t// Length check above guarantees these exist\n\tconst ipNum = BigInt(\n\t\t((ipParts[0]! << 24) |\n\t\t\t(ipParts[1]! << 16) |\n\t\t\t(ipParts[2]! << 8) |\n\t\t\tipParts[3]!) >>>\n\t\t\t0,\n\t);\n\tconst mask = BigInt(0xffffffff) << BigInt(32 - prefix);\n\tconst start = ipNum & mask;\n\tconst end = start | (~mask & BigInt(0xffffffff));\n\n\treturn { start, end };\n}\n\n/**\n * Convert IP string to numeric (IPv4)\n */\nfunction ipToNumber(ip: string): bigint | null {\n\tconst cleanIp = normalizeIP(ip);\n\n\tconst parts = cleanIp.split(\".\").map(Number);\n\tif (\n\t\tparts.length !== 4 ||\n\t\tparts.some((p) => Number.isNaN(p) || p < 0 || p > 255)\n\t) {\n\t\treturn null;\n\t}\n\n\t// Length check above guarantees these exist\n\treturn BigInt(\n\t\t((parts[0]! << 24) | (parts[1]! << 16) | (parts[2]! << 8) | parts[3]!) >>>\n\t\t\t0,\n\t);\n}\n\n/**\n * Check if IP matches a pattern (CIDR or exact)\n */\nfunction ipMatchesPattern(ip: string, pattern: string): boolean {\n\tconst ipNum = ipToNumber(ip);\n\tif (ipNum === null) return false;\n\n\tconst range = parseCidr(pattern);\n\tif (!range) {\n\t\t// Try exact match\n\t\tconst patternNum = ipToNumber(pattern);\n\t\treturn patternNum !== null && ipNum === patternNum;\n\t}\n\n\treturn ipNum >= range.start && ipNum <= range.end;\n}\n\n/**\n * Check if an IP is allowed based on access rules\n */\nexport function checkIpAccess(\n\tip: string,\n\tconfig: IpAccessConfig,\n): { allowed: boolean; matchedRule?: IpAccessRule } {\n\tfor (const rule of config.rules) {\n\t\tif (ipMatchesPattern(ip, rule.pattern)) {\n\t\t\treturn {\n\t\t\t\tallowed: rule.type === \"allow\",\n\t\t\t\tmatchedRule: rule,\n\t\t\t};\n\t\t}\n\t}\n\n\treturn { allowed: config.defaultAction === \"allow\" };\n}\n\n/**\n * Create IP access control middleware.\n * getConfig is called per-request to allow dynamic config updates.\n */\nexport function createIpAccessMiddleware(\n\tgetConfig: () => IpAccessConfig | null,\n\tcorsHeaders: Record<string, string>,\n\ttrustProxy = false,\n\ttrustProxyHops = 1,\n): Middleware {\n\treturn (req, res, next) => {\n\t\tconst config = getConfig();\n\t\tif (!config) {\n\t\t\t// No config means allow all\n\t\t\treturn next();\n\t\t}\n\n\t\tlet ip = req.socket.remoteAddress || \"unknown\";\n\n\t\t// Extract real client IP if behind proxy\n\t\tif (trustProxy) {\n\t\t\tconst forwarded = req.headers[\"x-forwarded-for\"];\n\t\t\tif (typeof forwarded === \"string\") {\n\t\t\t\tconst ips = forwarded\n\t\t\t\t\t.split(\",\")\n\t\t\t\t\t.map((s) => s.trim())\n\t\t\t\t\t.filter(Boolean);\n\t\t\t\tif (ips.length > 0) {\n\t\t\t\t\tconst targetIndex = Math.max(0, ips.length - trustProxyHops - 1);\n\t\t\t\t\tip = ips[targetIndex] || ip;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tip = normalizeIP(ip);\n\t\tconst result = checkIpAccess(ip, config);\n\n\t\tif (!result.allowed) {\n\t\t\tlogger.warn(\"IP access denied\", {\n\t\t\t\tip,\n\t\t\t\tmatchedRule: result.matchedRule?.pattern,\n\t\t\t\tdescription: result.matchedRule?.description,\n\t\t\t});\n\n\t\t\tres.writeHead(403, {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t...corsHeaders,\n\t\t\t});\n\t\t\tres.end(JSON.stringify({ error: \"Forbidden: IP address not allowed\" }));\n\t\t\treturn;\n\t\t}\n\n\t\treturn next();\n\t};\n}\n"]}
+{"version":3,"file":"server-middlewares.js","sourceRoot":"","sources":["../../src/server/server-middlewares.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAc,MAAM,aAAa,CAAC;AAGvD,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE9E,MAAM,MAAM,GAAG,YAAY,CAAC,sBAAsB,CAAC,CAAC;AAEpD,yCAAyC;AACzC,SAAS,WAAW,CAAC,GAAoB;IACxC,IAAI,CAAC;QACJ,sEAAsE;QACtE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC,QAAQ,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,GAAG,CAAC;IACZ,CAAC;AACF,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC3C,WAAmC;IAEnC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,qDAAqD;QACrD,qEAAqE;QACrE,+CAA+C;QAC/C,IACC,YAAY,EAAE;YACd,QAAQ,KAAK,UAAU;YACvB,QAAQ,KAAK,SAAS;YACtB,QAAQ,KAAK,cAAc,EAC1B,CAAC;YACF,4BAA4B;YAC5B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBAClB,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,GAAG;gBAClB,GAAG,WAAW;aACd,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CACN,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC,CACtE,CAAC;YACF,OAAO;QACR,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAS,WAAW,CAAC,EAAU;IAC9B,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,CAAC;AACX,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CACnB,GAAoB,EACpB,UAAmB,EACnB,cAAsB;IAEtB,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;IAE/C,IAAI,UAAU,EAAE,CAAC;QAChB,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACjD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YACnC,4DAA4D;YAC5D,wDAAwD;YACxD,kDAAkD;YAClD,yEAAyE;YACzE,6CAA6C;YAC7C,sEAAsE;YACtE,MAAM,GAAG,GAAG,SAAS;iBACnB,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,OAAO,CAAC,CAAC;YAClB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,mEAAmE;gBACnE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,GAAG,cAAc,GAAG,CAAC,CAAC,CAAC;gBACjE,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YAC7B,CAAC;QACF,CAAC;IACF,CAAC;IAED,oEAAoE;IACpE,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,yBAAyB,CACxC,WAAwB,EACxB,WAAmC,EACnC,UAAU,GAAG,KAAK,EAClB,cAAc,GAAG,CAAC;IAElB,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,+DAA+D;QAC/D,MAAM,aAAa,GAClB,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;YAC3B,QAAQ,KAAK,cAAc;YAC3B,QAAQ,KAAK,UAAU,CAAC;QAEzB,IAAI,aAAa,EAAE,CAAC;YACnB,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;YACxD,iEAAiE;YACjE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,GACzC,MAAM,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAElC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;oBAClB,cAAc,EAAE,kBAAkB;oBAClC,mBAAmB,EAAE,KAAK,CAAC,QAAQ,EAAE;oBACrC,uBAAuB,EAAE,GAAG;oBAC5B,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE;oBACvD,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE;oBAChE,GAAG,WAAW;iBACd,CAAC,CAAC;gBACH,GAAG,CAAC,GAAG,CACN,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC,CACnE,CAAC;gBACF,OAAO;YACR,CAAC;YACD,qDAAqD;YACrD,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YACrD,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7D,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAC9C,WAA8B,EAC9B,WAAmC,EACnC,UAAU,GAAG,KAAK,EAClB,cAAc,GAAG,CAAC;IAElB,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,+DAA+D;QAC/D,MAAM,aAAa,GAClB,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;YAC3B,QAAQ,KAAK,cAAc;YAC3B,QAAQ,KAAK,UAAU,CAAC;QAEzB,IAAI,aAAa,EAAE,CAAC;YACnB,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;YACxD,iEAAiE;YACjE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,CAAC,UAAU,CACxE,EAAE,EACF,QAAQ,CACR,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;oBAClB,cAAc,EAAE,kBAAkB;oBAClC,mBAAmB,EAAE,KAAK,CAAC,QAAQ,EAAE;oBACrC,uBAAuB,EAAE,GAAG;oBAC5B,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE;oBACvD,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE;oBAChE,GAAG,WAAW;iBACd,CAAC,CAAC;gBACH,GAAG,CAAC,GAAG,CACN,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC,CACnE,CAAC;gBACF,OAAO;YACR,CAAC;YACD,qDAAqD;YACrD,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YACrD,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7D,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CACnC,WAAmC;IAEnC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAChC,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACR,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CACnC,MAAqB,EACrB,WAAmC,EACnC,aAAa,GAAG,KAAK;IAErB,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,oBAAoB,GAAG,UAAU,IAAI,YAAY,CAAC;QACxD,IAAI,oBAAoB,EAAE,CAAC;YAC1B,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;YAElD,kBAAkB;YAClB,IAAI,UAAU,EAAE,CAAC;gBAChB,IAAI,aAAa,EAAE,CAAC;oBACnB,QAAQ,CACP,GAAG,EACH,GAAG,EACH;wBACC,KAAK,EACJ,6KAA6K;qBAC9K,EACD,WAAW,EACX,GAAG,CACH,CAAC;oBACF,OAAO;gBACR,CAAC;gBACD,6CAA6C;gBAC7C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBACjD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;oBACd,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,cAAc,EAAE,EACvC,WAAW,EACX,GAAG,CACH,CAAC;oBACF,OAAO;gBACR,CAAC;gBACD,OAAO,IAAI,EAAE,CAAC;YACf,CAAC;YAED,6BAA6B;YAC7B,IAAI,UAAU,IAAI,iCAAiC,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1D,OAAO,IAAI,EAAE,CAAC;YACf,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACd,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,cAAc,EAAE,EACvC,WAAW,EACX,GAAG,CACH,CAAC;gBACF,OAAO;YACR,CAAC;QACF,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CACnC,KAAoB,EACpB,WAAmC,EACnC,OAAO,GAAG,KAAK;IAEf,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACnE,OAAO,IAAI,EAAE,CAAC;QACf,CAAC;QACD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,EAAE,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,gBAAgB,CAC7B,GAAG,EACH,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,cAAc,CACd,CAAC;QACF,IAAI,CAAC,KAAK,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;YACpD,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,0CAA0C,EAAE,EACrD,WAAW,EACX,GAAG,CACH,CAAC;YACF,OAAO;QACR,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CACrC,aAIyB;IAEzB,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QACxC,gFAAgF;QAChF,mCAAmC;QACnC,mFAAmF;QACnF,2CAA2C;IAC5C,CAAC,CAAC;AACH,CAAC;AAsBD;;GAEG;AACH,SAAS,SAAS,CAAC,IAAY;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,EAAE,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEtE,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,EAAE,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,IACC,OAAO,CAAC,MAAM,KAAK,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,EACvD,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,4CAA4C;IAC5C,MAAM,KAAK,GAAG,MAAM,CACnB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC;QACnB,CAAC,OAAO,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC;QACnB,CAAC,OAAO,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC;QAClB,OAAO,CAAC,CAAC,CAAE,CAAC;QACZ,CAAC,CACF,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC;IAC3B,MAAM,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAEjD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,EAAU;IAC7B,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAEhC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,IACC,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,EACrD,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,4CAA4C;IAC5C,OAAO,MAAM,CACZ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACrE,CAAC,CACF,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,EAAU,EAAE,OAAe;IACpD,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAEjC,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,kBAAkB;QAClB,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACvC,OAAO,UAAU,KAAK,IAAI,IAAI,KAAK,KAAK,UAAU,CAAC;IACpD,CAAC;IAED,OAAO,KAAK,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC5B,EAAU,EACV,MAAsB;IAEtB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,OAAO;gBACN,OAAO,EAAE,IAAI,CAAC,IAAI,KAAK,OAAO;gBAC9B,WAAW,EAAE,IAAI;aACjB,CAAC;QACH,CAAC;IACF,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,aAAa,KAAK,OAAO,EAAE,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACvC,SAAsC,EACtC,WAAmC,EACnC,UAAU,GAAG,KAAK,EAClB,cAAc,GAAG,CAAC;IAElB,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,4BAA4B;YAC5B,OAAO,IAAI,EAAE,CAAC;QACf,CAAC;QAED,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;QAE/C,yCAAyC;QACzC,IAAI,UAAU,EAAE,CAAC;YAChB,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACjD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,GAAG,GAAG,SAAS;qBACnB,KAAK,CAAC,GAAG,CAAC;qBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;qBACpB,MAAM,CAAC,OAAO,CAAC,CAAC;gBAClB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,GAAG,cAAc,GAAG,CAAC,CAAC,CAAC;oBACjE,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;gBAC7B,CAAC;YACF,CAAC;QACF,CAAC;QAED,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAEzC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;gBAC/B,EAAE;gBACF,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,OAAO;gBACxC,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW;aAC5C,CAAC,CAAC;YAEH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBAClB,cAAc,EAAE,kBAAkB;gBAClC,GAAG,WAAW;aACd,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC,CAAC;YACxE,OAAO;QACR,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACH,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { parse } from \"node:url\";\nimport { createLogger } from \"../utils/logger.js\";\nimport { getArtifactAccessGrantFromRequest } from \"./artifact-access.js\";\nimport { checkApiAuth } from \"./authz.js\";\nimport { isOverloaded, logRequest } from \"./logger.js\";\nimport type { Middleware } from \"./middleware.js\";\nimport type { RateLimiter, TieredRateLimiter } from \"./rate-limiter.js\";\nimport { getRequestHeader, secureCompare, sendJson } from \"./server-utils.js\";\n\nconst logger = createLogger(\"middleware:ip-access\");\n\n// Helper for consistent safe URL parsing\nfunction getPathname(req: IncomingMessage): string {\n\ttry {\n\t\t// Use a dummy base for relative URLs (req.url) to ensure safe parsing\n\t\tconst parsed = new URL(req.url || \"/\", \"http://localhost\");\n\t\treturn parsed.pathname;\n\t} catch {\n\t\treturn \"/\";\n\t}\n}\n\nexport function createLoadSheddingMiddleware(\n\tcorsHeaders: Record<string, string>,\n): Middleware {\n\treturn (req, res, next) => {\n\t\tconst pathname = getPathname(req);\n\t\t// 1. Criticality-Aware Load Shedding (Global health)\n\t\t// We prioritize /healthz, /api/metrics, and existing SSE connections\n\t\t// We drop new /api/chat requests if overloaded\n\t\tif (\n\t\t\tisOverloaded() &&\n\t\t\tpathname !== \"/healthz\" &&\n\t\t\tpathname !== \"/readyz\" &&\n\t\t\tpathname !== \"/api/metrics\"\n\t\t) {\n\t\t\t// Drop non-critical traffic\n\t\t\tres.writeHead(503, {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\"Retry-After\": \"5\",\n\t\t\t\t...corsHeaders,\n\t\t\t});\n\t\t\tres.end(\n\t\t\t\tJSON.stringify({ error: \"Service Unavailable: Server is overloaded\" }),\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\t\treturn next();\n\t};\n}\n\n// Normalize IPv4-mapped IPv6 addresses (e.g., ::ffff:127.0.0.1 -> 127.0.0.1)\nfunction normalizeIP(ip: string): string {\n\tif (ip.startsWith(\"::ffff:\")) {\n\t\treturn ip.substring(7);\n\t}\n\treturn ip;\n}\n\n/**\n * Extract client IP from request, handling proxy headers.\n */\nfunction getClientIp(\n\treq: IncomingMessage,\n\ttrustProxy: boolean,\n\ttrustProxyHops: number,\n): string {\n\tlet ip = req.socket.remoteAddress || \"unknown\";\n\n\tif (trustProxy) {\n\t\tconst forwarded = req.headers[\"x-forwarded-for\"];\n\t\tif (typeof forwarded === \"string\") {\n\t\t\t// Parse IPs and read from right-to-left to prevent spoofing\n\t\t\t// X-Forwarded-For format: \"client, proxy1, proxy2, ...\"\n\t\t\t// Each proxy appends its upstream IP to the right\n\t\t\t// trustProxyHops = number of trusted proxies between us and the internet\n\t\t\t// Example with CDN -> nginx -> app (2 hops):\n\t\t\t//   Header: \"client, cdn, nginx\" -> skip 2 from right -> use \"client\"\n\t\t\tconst ips = forwarded\n\t\t\t\t.split(\",\")\n\t\t\t\t.map((s) => s.trim())\n\t\t\t\t.filter(Boolean);\n\t\t\tif (ips.length > 0) {\n\t\t\t\t// Skip trustProxyHops from the right to get the first untrusted IP\n\t\t\t\tconst targetIndex = Math.max(0, ips.length - trustProxyHops - 1);\n\t\t\t\tip = ips[targetIndex] || ip;\n\t\t\t}\n\t\t}\n\t}\n\n\t// Normalize IPv4-mapped IPv6 addresses for consistent rate limiting\n\treturn normalizeIP(ip);\n}\n\nexport function createRateLimitMiddleware(\n\trateLimiter: RateLimiter,\n\tcorsHeaders: Record<string, string>,\n\ttrustProxy = false,\n\ttrustProxyHops = 1,\n): Middleware {\n\treturn async (req, res, next) => {\n\t\tconst pathname = getPathname(req);\n\t\t// Skip for static assets and critical health/metrics endpoints\n\t\tconst isRateLimited =\n\t\t\tpathname.startsWith(\"/api\") &&\n\t\t\tpathname !== \"/api/metrics\" &&\n\t\t\tpathname !== \"/healthz\";\n\n\t\tif (isRateLimited) {\n\t\t\tconst ip = getClientIp(req, trustProxy, trustProxyHops);\n\t\t\t// Use async check to support Redis for distributed rate limiting\n\t\t\tconst { allowed, remaining, reset, limit } =\n\t\t\t\tawait rateLimiter.checkAsync(ip);\n\n\t\t\tif (!allowed) {\n\t\t\t\tres.writeHead(429, {\n\t\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\t\"X-RateLimit-Limit\": limit.toString(),\n\t\t\t\t\t\"X-RateLimit-Remaining\": \"0\",\n\t\t\t\t\t\"X-RateLimit-Reset\": Math.ceil(reset / 1000).toString(),\n\t\t\t\t\t\"Retry-After\": Math.ceil((reset - Date.now()) / 1000).toString(),\n\t\t\t\t\t...corsHeaders,\n\t\t\t\t});\n\t\t\t\tres.end(\n\t\t\t\t\tJSON.stringify({ error: \"Too Many Requests: Rate limit exceeded\" }),\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\t// Add rate limit headers to successful responses too\n\t\t\tres.setHeader(\"X-RateLimit-Limit\", limit.toString());\n\t\t\tres.setHeader(\"X-RateLimit-Remaining\", remaining.toString());\n\t\t\tres.setHeader(\"X-RateLimit-Reset\", Math.ceil(reset / 1000).toString());\n\t\t}\n\t\treturn next();\n\t};\n}\n\n/**\n * Create tiered rate limit middleware with per-endpoint limits.\n * Uses TieredRateLimiter for endpoint-specific rate limits.\n */\nexport function createTieredRateLimitMiddleware(\n\trateLimiter: TieredRateLimiter,\n\tcorsHeaders: Record<string, string>,\n\ttrustProxy = false,\n\ttrustProxyHops = 1,\n): Middleware {\n\treturn async (req, res, next) => {\n\t\tconst pathname = getPathname(req);\n\t\t// Skip for static assets and critical health/metrics endpoints\n\t\tconst isRateLimited =\n\t\t\tpathname.startsWith(\"/api\") &&\n\t\t\tpathname !== \"/api/metrics\" &&\n\t\t\tpathname !== \"/healthz\";\n\n\t\tif (isRateLimited) {\n\t\t\tconst ip = getClientIp(req, trustProxy, trustProxyHops);\n\t\t\t// Use async check to support Redis for distributed rate limiting\n\t\t\tconst { allowed, remaining, reset, limit } = await rateLimiter.checkAsync(\n\t\t\t\tip,\n\t\t\t\tpathname,\n\t\t\t);\n\n\t\t\tif (!allowed) {\n\t\t\t\tres.writeHead(429, {\n\t\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\t\"X-RateLimit-Limit\": limit.toString(),\n\t\t\t\t\t\"X-RateLimit-Remaining\": \"0\",\n\t\t\t\t\t\"X-RateLimit-Reset\": Math.ceil(reset / 1000).toString(),\n\t\t\t\t\t\"Retry-After\": Math.ceil((reset - Date.now()) / 1000).toString(),\n\t\t\t\t\t...corsHeaders,\n\t\t\t\t});\n\t\t\t\tres.end(\n\t\t\t\t\tJSON.stringify({ error: \"Too Many Requests: Rate limit exceeded\" }),\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\t// Add rate limit headers to successful responses too\n\t\t\tres.setHeader(\"X-RateLimit-Limit\", limit.toString());\n\t\t\tres.setHeader(\"X-RateLimit-Remaining\", remaining.toString());\n\t\t\tres.setHeader(\"X-RateLimit-Reset\", Math.ceil(reset / 1000).toString());\n\t\t}\n\t\treturn next();\n\t};\n}\n\nexport function createCorsMiddleware(\n\tcorsHeaders: Record<string, string>,\n): Middleware {\n\treturn (req, res, next) => {\n\t\tif (req.method === \"OPTIONS\") {\n\t\t\tres.writeHead(204, corsHeaders);\n\t\t\tres.end();\n\t\t\treturn;\n\t\t}\n\t\treturn next();\n\t};\n}\n\nexport function createAuthMiddleware(\n\tapiKey: string | null,\n\tcorsHeaders: Record<string, string>,\n\trequireApiKey = false,\n): Middleware {\n\treturn async (req, res, next) => {\n\t\tconst pathname = getPathname(req);\n\t\tconst isApiRoute = pathname.startsWith(\"/api\");\n\t\tconst isDebugRoute = pathname.startsWith(\"/debug\");\n\t\tconst requiresAuthBoundary = isApiRoute || isDebugRoute;\n\t\tif (requiresAuthBoundary) {\n\t\t\tconst missingKey = !apiKey || apiKey.length === 0;\n\n\t\t\t// No key provided\n\t\t\tif (missingKey) {\n\t\t\t\tif (requireApiKey) {\n\t\t\t\t\tsendJson(\n\t\t\t\t\t\tres,\n\t\t\t\t\t\t401,\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\terror:\n\t\t\t\t\t\t\t\t\"MAESTRO_WEB_API_KEY is required for all API requests. Set the environment variable or disable requirement explicitly with MAESTRO_WEB_REQUIRE_KEY=0 for local testing only.\",\n\t\t\t\t\t\t},\n\t\t\t\t\t\tcorsHeaders,\n\t\t\t\t\t\treq,\n\t\t\t\t\t);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\t// Requirement off and no key: allow through.\n\t\t\t\tconst auth = await checkApiAuth(req, { apiKey });\n\t\t\t\tif (!auth.ok) {\n\t\t\t\t\tsendJson(\n\t\t\t\t\t\tres,\n\t\t\t\t\t\t401,\n\t\t\t\t\t\t{ error: auth.error || \"Unauthorized\" },\n\t\t\t\t\t\tcorsHeaders,\n\t\t\t\t\t\treq,\n\t\t\t\t\t);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\treturn next();\n\t\t\t}\n\n\t\t\t// Key provided: validate it.\n\t\t\tif (isApiRoute && getArtifactAccessGrantFromRequest(req)) {\n\t\t\t\treturn next();\n\t\t\t}\n\t\t\tconst auth = await checkApiAuth(req, { apiKey });\n\t\t\tif (!auth.ok) {\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t401,\n\t\t\t\t\t{ error: auth.error || \"Unauthorized\" },\n\t\t\t\t\tcorsHeaders,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\t\treturn next();\n\t};\n}\n\nexport function createCsrfMiddleware(\n\ttoken: string | null,\n\tcorsHeaders: Record<string, string>,\n\tenabled = false,\n): Middleware {\n\tif (!enabled || !token) {\n\t\treturn (_req, _res, next) => next();\n\t}\n\treturn (req, res, next) => {\n\t\tconst method = (req.method || \"GET\").toUpperCase();\n\t\tif (method === \"GET\" || method === \"HEAD\" || method === \"OPTIONS\") {\n\t\t\treturn next();\n\t\t}\n\t\tconst pathname = getPathname(req);\n\t\tif (!pathname.startsWith(\"/api\")) {\n\t\t\treturn next();\n\t\t}\n\t\tconst value = getRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-csrf\",\n\t\t\t\"x-maestro-csrf\",\n\t\t\t\"x-csrf-token\",\n\t\t\t\"x-xsrf-token\",\n\t\t);\n\t\tif (!value || !secureCompare(String(value), token)) {\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t403,\n\t\t\t\t{ error: \"Forbidden: missing or invalid CSRF token\" },\n\t\t\t\tcorsHeaders,\n\t\t\t\treq,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\t\treturn next();\n\t};\n}\n\nexport function createRouterMiddleware(\n\trouterHandler: (\n\t\treq: IncomingMessage,\n\t\tres: ServerResponse,\n\t\tpathname: string,\n\t) => Promise<void> | void,\n): Middleware {\n\treturn async (req, res, next) => {\n\t\tconst pathname = getPathname(req);\n\t\tawait routerHandler(req, res, pathname);\n\t\t// Router handles the response, so we don't call next() unless it falls through,\n\t\t// but typically router is the end.\n\t\t// If router doesn't handle it (e.g. 404), it might send response itself or return.\n\t\t// Our current router sends 404/500 itself.\n\t};\n}\n\n// ============================================================================\n// IP ACCESS CONTROL\n// ============================================================================\n\nexport interface IpAccessRule {\n\t/** CIDR notation (e.g., \"192.168.1.0/24\") or single IP */\n\tpattern: string;\n\t/** Whether this is an allow or deny rule */\n\ttype: \"allow\" | \"deny\";\n\t/** Optional description */\n\tdescription?: string;\n}\n\nexport interface IpAccessConfig {\n\t/** Default action when no rules match */\n\tdefaultAction: \"allow\" | \"deny\";\n\t/** Rules evaluated in order, first match wins */\n\trules: IpAccessRule[];\n}\n\n/**\n * Parse CIDR notation to IP range (IPv4 only for now)\n */\nfunction parseCidr(cidr: string): { start: bigint; end: bigint } | null {\n\tconst parts = cidr.split(\"/\");\n\tconst ip = parts[0];\n\tif (!ip) {\n\t\treturn null;\n\t}\n\tconst prefix = parts.length > 1 ? Number.parseInt(parts[1]!, 10) : 32;\n\n\tif (Number.isNaN(prefix) || prefix < 0 || prefix > 32) {\n\t\treturn null;\n\t}\n\n\tconst ipParts = ip.split(\".\").map(Number);\n\tif (\n\t\tipParts.length !== 4 ||\n\t\tipParts.some((p) => Number.isNaN(p) || p < 0 || p > 255)\n\t) {\n\t\treturn null;\n\t}\n\n\t// Length check above guarantees these exist\n\tconst ipNum = BigInt(\n\t\t((ipParts[0]! << 24) |\n\t\t\t(ipParts[1]! << 16) |\n\t\t\t(ipParts[2]! << 8) |\n\t\t\tipParts[3]!) >>>\n\t\t\t0,\n\t);\n\tconst mask = BigInt(0xffffffff) << BigInt(32 - prefix);\n\tconst start = ipNum & mask;\n\tconst end = start | (~mask & BigInt(0xffffffff));\n\n\treturn { start, end };\n}\n\n/**\n * Convert IP string to numeric (IPv4)\n */\nfunction ipToNumber(ip: string): bigint | null {\n\tconst cleanIp = normalizeIP(ip);\n\n\tconst parts = cleanIp.split(\".\").map(Number);\n\tif (\n\t\tparts.length !== 4 ||\n\t\tparts.some((p) => Number.isNaN(p) || p < 0 || p > 255)\n\t) {\n\t\treturn null;\n\t}\n\n\t// Length check above guarantees these exist\n\treturn BigInt(\n\t\t((parts[0]! << 24) | (parts[1]! << 16) | (parts[2]! << 8) | parts[3]!) >>>\n\t\t\t0,\n\t);\n}\n\n/**\n * Check if IP matches a pattern (CIDR or exact)\n */\nfunction ipMatchesPattern(ip: string, pattern: string): boolean {\n\tconst ipNum = ipToNumber(ip);\n\tif (ipNum === null) return false;\n\n\tconst range = parseCidr(pattern);\n\tif (!range) {\n\t\t// Try exact match\n\t\tconst patternNum = ipToNumber(pattern);\n\t\treturn patternNum !== null && ipNum === patternNum;\n\t}\n\n\treturn ipNum >= range.start && ipNum <= range.end;\n}\n\n/**\n * Check if an IP is allowed based on access rules\n */\nexport function checkIpAccess(\n\tip: string,\n\tconfig: IpAccessConfig,\n): { allowed: boolean; matchedRule?: IpAccessRule } {\n\tfor (const rule of config.rules) {\n\t\tif (ipMatchesPattern(ip, rule.pattern)) {\n\t\t\treturn {\n\t\t\t\tallowed: rule.type === \"allow\",\n\t\t\t\tmatchedRule: rule,\n\t\t\t};\n\t\t}\n\t}\n\n\treturn { allowed: config.defaultAction === \"allow\" };\n}\n\n/**\n * Create IP access control middleware.\n * getConfig is called per-request to allow dynamic config updates.\n */\nexport function createIpAccessMiddleware(\n\tgetConfig: () => IpAccessConfig | null,\n\tcorsHeaders: Record<string, string>,\n\ttrustProxy = false,\n\ttrustProxyHops = 1,\n): Middleware {\n\treturn (req, res, next) => {\n\t\tconst config = getConfig();\n\t\tif (!config) {\n\t\t\t// No config means allow all\n\t\t\treturn next();\n\t\t}\n\n\t\tlet ip = req.socket.remoteAddress || \"unknown\";\n\n\t\t// Extract real client IP if behind proxy\n\t\tif (trustProxy) {\n\t\t\tconst forwarded = req.headers[\"x-forwarded-for\"];\n\t\t\tif (typeof forwarded === \"string\") {\n\t\t\t\tconst ips = forwarded\n\t\t\t\t\t.split(\",\")\n\t\t\t\t\t.map((s) => s.trim())\n\t\t\t\t\t.filter(Boolean);\n\t\t\t\tif (ips.length > 0) {\n\t\t\t\t\tconst targetIndex = Math.max(0, ips.length - trustProxyHops - 1);\n\t\t\t\t\tip = ips[targetIndex] || ip;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tip = normalizeIP(ip);\n\t\tconst result = checkIpAccess(ip, config);\n\n\t\tif (!result.allowed) {\n\t\t\tlogger.warn(\"IP access denied\", {\n\t\t\t\tip,\n\t\t\t\tmatchedRule: result.matchedRule?.pattern,\n\t\t\t\tdescription: result.matchedRule?.description,\n\t\t\t});\n\n\t\t\tres.writeHead(403, {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t...corsHeaders,\n\t\t\t});\n\t\t\tres.end(JSON.stringify({ error: \"Forbidden: IP address not allowed\" }));\n\t\t\treturn;\n\t\t}\n\n\t\treturn next();\n\t};\n}\n"]}