@jheavenknows/bluerouter 5.0.39 → 5.0.41

package/app/.next-cli-build/server/chunks/4778.js

@@ -1 +1 @@
-"use strict";exports.id=4778,exports.ids=[4778],exports.modules={9588:(a,b,c)=>{c.d(b,{I8:()=>j,Tv:()=>t,aV:()=>n,bz:()=>p,hH:()=>s,oW:()=>r,s0:()=>l,ub:()=>m,vZ:()=>o});var d=c(65573),e=c(23211),f=c(89718),g=c(33792),h=c(90389);function i(a){return String(a||"").trim().toLowerCase()}function j(a){return i(a)}function k(a={}){return[a.ldapUsername,a.ldapEmail,a.ldapName,a.oidcEmail,a.oidcName,a.localUsername,a.username,a.email].map(i).filter(Boolean)}function l(a={}){let b=k(a),c=b[0]||"local",d=a.ldapName||a.ldapEmail||a.oidcName||a.oidcEmail||a.localUsername||c;return{userId:c,displayName:d,loginMethod:a.oidc?"OIDC":a.ldap?"LDAP":"Local",candidates:b}}function m(a={},b={}){var c;if(!b?.authenticated)return!1;if(b.local||!b.ldap&&!b.oidc||b.role===h.hS.ADMIN||!0===b.ldapIsAdmin)return!0;let d=Array.isArray(c=a.ldapAllowedUsers)?c.map(i).filter(Boolean):String(c||"").split(/[,\n]/).map(i).filter(Boolean);return 0!==d.length&&k(b).some(a=>d.includes(a))}function n(a={},b={}){return!(!b?.authenticated||m(a,b))&&(b.role===h.hS.MONITOR_ADMIN||!0===b.ldapIsMonitorAdmin)}function o(a={},b={}){return b?.authenticated?m(a,b)?h.hS.ADMIN:n(a,b)?h.hS.MONITOR_ADMIN:h.hS.USER:h.hS.GUEST}function p(a={}){return!0===a.isAdmin||!0===a.isMonitorAdmin}async function q(){let a=await (0,f.mt)(),b=await (0,d.UL)(),c=await (0,g.dY)(b.get("auth_token")?.value);if(!c?.authenticated)return{authenticated:!1,isAdmin:!1,isMonitorAdmin:!1,role:h.hS.GUEST,userId:"",displayName:"Guest",loginMethod:"None",settings:{...a,requireLogin:!0},session:null};let e=l(c||{}),i=o(a,c||{}),j=i===h.hS.ADMIN,k=i===h.hS.MONITOR_ADMIN;return{authenticated:!0,isAdmin:j,isMonitorAdmin:k,role:i,canManageApiKeys:j||k,canUseMonitorAdminTabs:j||k,...e,settings:{...a,requireLogin:!0},session:c}}async function r(){let a=await q();return a.authenticated?{access:a,response:null}:{access:a,response:e.NextResponse.json({error:"Authentication required"},{status:401})}}async function s(a={}){let{allowMonitorAdmin:b=!1}=a||{},{access:c,response:d}=await r();return d?{access:c,response:d}:c.isAdmin||b&&c.isMonitorAdmin?{access:c,response:null}:{access:c,response:e.NextResponse.json({error:"Admin access required"},{status:403})}}function t(a,b){if(!a?.authenticated||!b)return!1;if(p(a))return!0;let c=i(a.userId),d=i(b.ownerUser),e=i(b.createdByUser);return!!c&&(d===c||e===c)}},33669:(a,b,c)=>{c.d(b,{MI:()=>e,RC:()=>h,zx:()=>f});var d=c(89718);function e(a){return Array.isArray(a)?[...new Set(a.map(a=>String(a||"").trim()).filter(Boolean))]:[]}function f(a,b){if(!a||!1===a.isActive)return!1;let c=String(b||"").trim();if(!c)return!1;let d=e(a.allowedModels);return 0===d.length||d.includes(c)}async function g(a){let b,c=await (0,d.mt)(),e=(b=a?.headers?.get?.("Authorization")||"").startsWith("Bearer ")?b.slice(7).trim():a?.headers?.get?.("x-api-key")?.trim()||null;if(!e)return{settings:c,apiKey:null,keyRecord:null,missing:!0,invalid:!1};let f=await (0,d.mY)(e);return{settings:c,apiKey:e,keyRecord:f,missing:!1,invalid:!f||!1===f.isActive}}async function h(a,b){let c=await g(a);return c.missing?{error:{message:"Missing API key",type:"authentication_error"},status:401}:c.invalid?{error:{message:"Invalid API key",type:"authentication_error"},status:401}:{data:function(a,b){if(!b||0===e(b?.allowedModels).length)return a;let c=new Set(e(b.allowedModels));return(a||[]).filter(a=>c.has(a?.id))}(b,c.keyRecord)}}},33792:(a,b,c)=>{c.d(b,{Dc:()=>p,OZ:()=>s,YK:()=>n,dY:()=>q,tm:()=>r});var d=c(86935),e=c(69614),f=c(73024),g=c.n(f),h=c(76760),i=c.n(h),j=c(77598),k=c.n(j),l=c(49120);let m=new TextEncoder().encode(function(){if(process.env.JWT_SECRET)return process.env.JWT_SECRET;let a=i().join(l.DATA_DIR,"jwt-secret");try{return g().readFileSync(a,"utf8").trim()}catch{}g().mkdirSync(l.DATA_DIR,{recursive:!0});let b=k().randomBytes(32).toString("hex");return g().writeFileSync(a,b,{mode:384}),b}());function n(a){let b="true"===process.env.AUTH_COOKIE_SECURE,c=a?.headers?.get?.("x-forwarded-proto");return b||"https"===c}async function o(a={}){return new d.P({authenticated:!0,...a}).setProtectedHeader({alg:"HS256"}).setIssuedAt().setExpirationTime("24h").sign(m)}async function p(a){if(!a)return!1;try{return await (0,e.V)(a,m),!0}catch{return!1}}async function q(a){if(!a)return null;try{let{payload:b}=await (0,e.V)(a,m);return b}catch{return null}}async function r(a,b,c={}){let d=await o(c);a.set("auth_token",d,{httpOnly:!0,secure:n(b),sameSite:"lax",path:"/"})}function s(a){a.delete("auth_token")}},34778:(a,b,c)=>{c.a(a,async(a,d)=>{try{c.d(b,{Ek:()=>p,H7:()=>u,IP:()=>s,Iq:()=>M,MQ:()=>N,NT:()=>n,UH:()=>m,Wj:()=>E,YU:()=>q,Z$:()=>F,Zg:()=>A,buildModelsUpdatePatch:()=>L,cz:()=>z,dO:()=>t,dT:()=>D,gm:()=>r,importPersonalProviderModels:()=>K,lg:()=>o,wn:()=>y});var e=c(48895),f=c(75681),g=c(9588),h=c(44404),i=c(89718),j=c(47812),k=c(33669),l=a([e]);e=(l.then?(await l)():l)[0];let N=["claude","codex","antigravity"],O={claude:[{id:"claude-opus-4-8",name:"Claude Opus 4.8"},{id:"claude-opus-4-7",name:"Claude Opus 4.7"},{id:"claude-sonnet-4-6",name:"Claude Sonnet 4.6"},{id:"claude-haiku-4-5-20251001",name:"Claude Haiku 4.5"}]};function m(a){let b=String(a||"").trim().toLowerCase();return N.includes(b)?b:""}function n(a){let b=m(a);return b?f.zN[b]:null}function o(a){let b=a&&"object"==typeof a&&!Array.isArray(a)?a:{},c={};for(let[a,d]of Object.entries(b)){let b=(0,g.I8)(a);if(!b)continue;let e=d&&"object"==typeof d&&!Array.isArray(d)?d:{};for(let a of(c[b]={},N))c[b][a]=!0===e[a]}return c}function p(a={}){return o(a.personalOAuthProviderPermissions||{})}function q(a={},b=""){let c=(0,g.I8)(b),d=p(a)[c]||{};return N.filter(a=>!0===d[a])}function r(a={},b="",c=""){let d=m(c);return!!d&&q(a,b).includes(d)}function s(a,b,c=[]){let d=m(a)||String(a||"provider").trim().toLowerCase(),e=function(a=""){let b=(0,g.I8)(a);return(b.split("@")[0]||b||"user").replace(/[^a-z0-9_-]+/g,"-").replace(/^-+|-+$/g,"").slice(0,48)||"user"}(b),f=`${d}-${e}`,h=new Set((c||[]).map(a=>String(a?.name||"").trim().toLowerCase()).filter(Boolean)),i=1;for(;h.has(`${f}-${i}`.toLowerCase());)i+=1;return`${f}-${i}`}function t(a={}){return"personal"===a.scope||"private"===a.visibility||!!a.ownerUser}async function u(a,b=[]){let c=(0,g.I8)(a),d=(b||[]).map(m).filter(Boolean);if(!c||0===d.length)return;let[e,f,h]=await Promise.all([(0,i.getProviderConnections)({scope:"personal",ownerUser:c}),(0,i.PX)({ownerUser:c}),(0,i.mt)()]),l=new Set(e.filter(a=>!1!==a.isActive).map(a=>String(a.provider||"").trim().toLowerCase())),n=d.filter(a=>!l.has(a));if(0===n.length)return;let o=new Set((0,k.MI)((0,j.nC)(h)));await Promise.all(f.map(async a=>{let b=(0,k.MI)(a.allowedModels);if(0===b.length)return;let c=b.filter(a=>{if(o.has(a))return!0;let b=String(a||"").split("/")[0].trim().toLowerCase();return!n.includes(b)});c.length!==b.length&&await (0,i.XW)(a.id,{allowedModels:c})}))}function v(a=""){return String(a||"").replace(/^models\//,"").split(/[_.-]+/).filter(Boolean).map(a=>a.length<=3?a.toUpperCase():a.charAt(0).toUpperCase()+a.slice(1)).join(" ")||String(a||"model")}function w(a,b,c="catalog"){let d=new Set;return(Array.isArray(b)?b:[]).map(b=>(function(a,b,c="catalog"){let d,e;if(!b)return null;let f="string"==typeof b?b:b.id||b.model||b.name||b.slug,g=String(f||"").trim().replace(/^models\//,"");if(!g)return null;let h=m(a);if(!h)return null;let i=(d=m(h),e=String(g||"").trim().replace(/^models\//,""),d&&e?e.includes("/")?e:`${d}/${e}`:""),j="string"==typeof b?v(g):b.display_name||b.displayName||b.name||v(g),k="object"==typeof b&&b?.type?String(b.type):"llm";return{id:g,name:String(j||g),type:k,provider:h,routeModel:i,source:c,upstreamModelId:"object"==typeof b&&(b.upstreamModelId||b.upstream_model_id)||null}})(a,b,c)).filter(a=>!(!a?.routeModel||d.has(a.routeModel))&&(d.add(a.routeModel),!0))}function x(a){let b=m(a);if(!b)return[];let c=O[b]||(0,h.KC)(b)||[];return w(b,c,"catalog")}function y(a={}){return{source:a.modelsSource||a.modelImportSource||"catalog",importedAt:a.modelsImportedAt||a.modelImportImportedAt||null,error:a.modelsImportError||a.modelImportError||"",warning:a.modelsImportWarning||a.modelImportWarning||""}}function z(a={}){let b=w(a.provider,a.importedModels,a.modelsSource||"imported");return b.length>0?b:x(a.provider)}function A(a={}){return w(a.provider,a.importedModels,a.modelsSource||"imported")}let P=new Set(["fill-first","round-robin","least-latency","p2c"]),Q=new Set(["global","client_ip","client_session"]);function B(a){return!0===a||!1===a?a:"true"===a||"false"!==a&&void 0}function C(a,{max:b}={}){let c=Number.parseInt(a,10);if(Number.isFinite(c)&&!(c<=0))return b&&c>b?b:c}function D(a={}){if(!a||"object"!=typeof a)return null;let b={},c=String(a.fallbackStrategy||a.strategy||"").trim().toLowerCase();P.has(c)&&(b.fallbackStrategy=c);let d=C(a.stickyRoundRobinLimit??a.stickyLimit,{max:1e3});void 0!==d&&(b.stickyRoundRobinLimit=d);let e=String(a.stickyScope||"").trim().toLowerCase();Q.has(e)&&(b.stickyScope=e);let f=C(a.stickyTtlMinutes,{max:10080});void 0!==f&&(b.stickyTtlMinutes=f);let g=B(a.stickyFallbackToClientIp);void 0!==g&&(b.stickyFallbackToClientIp=g);let h=B(a.stickyRebindOnFailure);void 0!==h&&(b.stickyRebindOnFailure=h);let i=C(a.stickyRebindFailureThreshold,{max:50});return void 0!==i&&(b.stickyRebindFailureThreshold=i),Object.keys(b).length>0?b:null}function E(a={}){let b=a.personalRoutingStrategies;if(!b||"object"!=typeof b||Array.isArray(b))return{};let c={};for(let[a,d]of Object.entries(b)){let b=(0,g.I8)(a);if(!b||!d||"object"!=typeof d)continue;let e={};for(let[a,b]of Object.entries(d)){let c=m(a);if(!c)continue;let d=D(b);d&&(e[c]=d)}Object.keys(e).length>0&&(c[b]=e)}return c}function F(a={},b="",c=""){let d=(0,g.I8)(b),e=m(c);if(!d||!e)return null;let f=E(a);return f[d]?.[e]||null}async function G(a,b={},c=12e3){let d=new AbortController,e=setTimeout(()=>d.abort(),c);try{let c=await fetch(a,{...b,signal:d.signal}),e=await c.text(),f=null;try{f=e?JSON.parse(e):null}catch{}return{response:c,data:f,text:e}}finally{clearTimeout(e)}}async function H(a){let b=a?.accessToken;if(!b)throw Error("No Claude OAuth token found");let{response:c,data:d,text:e}=await G("https://api.anthropic.com/v1/models",{method:"GET",headers:{Accept:"application/json","anthropic-version":"2023-06-01","anthropic-beta":"oauth-2025-04-20",Authorization:`Bearer ${b}`}});if(!c.ok)throw Error(`Claude models API ${c.status}: ${(e||"").slice(0,300)}`);return w("claude",d?.data||[],"provider")}async function I(a){let b=a?.accessToken;if(!b)throw Error("No Codex OAuth token found");let{response:c,data:d,text:e}=await G("https://chatgpt.com/backend-api/codex/models?client_version=1.0.0",{method:"GET",headers:{Accept:"application/json","Content-Type":"application/json",Authorization:`Bearer ${b}`}});if(!c.ok)throw Error(`Codex models API ${c.status}: ${(e||"").slice(0,300)}`);return w("codex",(Array.isArray(d)?d:d?.data||d?.models||d?.results||[]).flatMap(a=>{let b=a?.id||a?.slug||a?.model||a?.name;if(!b)return[];let c=a?.display_name||a?.displayName||a?.name||b,d={...a,id:b,name:c};return!("image"!==(a?.type||"llm")&&!String(b).toLowerCase().includes("embed"))||String(b).endsWith("-review")?[d]:[d,{...d,id:`${b}-review`,name:`${c} Review`,upstreamModelId:b,quotaFamily:"review"}]}),"provider")}async function J(a){let b=a?.accessToken;if(!b)throw Error("No Antigravity OAuth token found");let{response:c,data:d,text:e}=await G("https://daily-cloudcode-pa.sandbox.googleapis.com/v1internal:models",{method:"POST",headers:{Accept:"application/json","Content-Type":"application/json",Authorization:`Bearer ${b}`},body:JSON.stringify({})});if(!c.ok)throw Error(`Antigravity models API ${c.status}: ${(e||"").slice(0,300)}`);return w("antigravity",d?.models||[],"provider")}async function K(a={}){let b=m(a.provider);if(!b)throw Error("Unsupported personal OAuth provider");try{let c=[];if("claude"===b?c=await H(a):"codex"===b?c=await I(a):"antigravity"===b&&(c=await J(a)),c.length>0)return{models:c,source:"provider",importedAt:new Date().toISOString(),warning:"",error:""};throw Error("Provider returned no models")}catch(c){let a=x(b);return{models:a,source:"catalog",importedAt:new Date().toISOString(),warning:a.length>0?`Using static catalog fallback: ${c.message}`:"",error:a.length>0?"":c.message}}}function L(a={}){return{importedModels:Array.isArray(a.models)?a.models:[],modelsSource:a.source||"catalog",modelsImportedAt:a.importedAt||new Date().toISOString(),modelsImportWarning:a.warning||"",modelsImportError:a.error||""}}function M(a={}){let b={...a};return delete b.apiKey,delete b.accessToken,delete b.refreshToken,delete b.idToken,b.rtkEnabled=!0===a.rtkEnabled||!1===a.rtkEnabled?a.rtkEnabled:null,b}d()}catch(a){d(a)}})},47812:(a,b,c)=>{c.d(b,{T4:()=>l,WZ:()=>k,Xl:()=>n,_p:()=>p,nC:()=>m,nm:()=>r,tY:()=>j,uP:()=>o});var d=c(89718),e=c(74452),f=c(54603),g=c(490),h=c(33669),i=c(9588);let j=2;function k(a){return String(a||"").trim()}function l(a){if(Array.isArray(a))return(0,h.MI)(a);let b=k(a);return b?[b]:[]}function m(a={}){let b=l(a.apiKeyDefaultModels);return b.length>0?b:l(a.apiKeyDefaultModel)}function n(a={}){let b=a?.apiKeyDefaultPolicy;return(0,g.jQ)(b&&"object"==typeof b?b:g.is)}function o(a={}){return(0,h.MI)(m(a))}async function p(a){let b=(0,i.I8)(a||"");return b?(0,e.mI)({ownerUser:b}):0}async function q(a,b,c={}){let e={authenticated:!0,...b||{}},g=(0,i.s0)(e),h=(0,i.I8)(g.userId);if(!h)return{created:!1,skipped:"missing_owner"};let j=await p(h);if(j>0)return{created:!1,skipped:"already_has_key",apiKeyCount:j};let k=a||await (0,d.mt)(),l=o(k);if(0===l.length)return{created:!1,skipped:"missing_default_model"};let m=await (0,f.Xj)();return{created:!0,key:await (0,d.Iq)(c.name||function(a={}){let b=String(a.displayName||a.userId||"user").trim();return`Default API Key - ${b}`.slice(0,120)}(g),m,{allowedModels:l,limits:n(k),ownerUser:h,createdByUser:h})}}async function r(a,b,c={}){try{return await q(a,b,c)}catch(a){return console.log("Auto API key provisioning skipped:",a?.message||a),{created:!1,skipped:"error",error:a?.message||String(a)}}}},90389:(a,b,c)=>{c.d(b,{hS:()=>d});let d=Object.freeze({ADMIN:"admin",MONITOR_ADMIN:"monitor_admin",USER:"user",GUEST:"guest"});Object.freeze([{href:"/dashboard/endpoint",label:"Endpoint",icon:"api"},{href:"/dashboard/api-keys",label:"API Keys",icon:"vpn_key"},{href:"/dashboard/usage",label:"Usage",icon:"bar_chart"},{href:"/dashboard/analytics",label:"Analytics",icon:"monitoring"},{href:"/dashboard/quota",label:"Quota Tracker",icon:"data_usage"},{href:"/dashboard/prompt-logs",label:"Prompt Logs",icon:"manage_search"}]),Object.freeze(["/dashboard","/dashboard/endpoint","/dashboard/api-keys","/dashboard/usage","/dashboard/analytics","/dashboard/quota","/dashboard/prompt-logs"])}};
+"use strict";exports.id=4778,exports.ids=[4778],exports.modules={9588:(a,b,c)=>{c.d(b,{I8:()=>j,Tv:()=>u,UX:()=>o,aV:()=>n,bz:()=>q,hH:()=>t,oW:()=>s,s0:()=>l,ub:()=>m,vZ:()=>p});var d=c(65573),e=c(23211),f=c(89718),g=c(33792),h=c(90389);function i(a){return String(a||"").trim().toLowerCase()}function j(a){return i(a)}function k(a={}){return[a.ldapUsername,a.ldapEmail,a.ldapName,a.oidcEmail,a.oidcName,a.localUsername,a.username,a.email].map(i).filter(Boolean)}function l(a={}){let b=k(a),c=b[0]||"local",d=a.ldapName||a.ldapEmail||a.oidcName||a.oidcEmail||a.localUsername||c;return{userId:c,displayName:d,loginMethod:a.oidc?"OIDC":a.ldap?"LDAP":"Local",candidates:b}}function m(a={},b={}){var c;if(!b?.authenticated)return!1;if(b.local||!b.ldap&&!b.oidc||b.role===h.hS.ADMIN||!0===b.ldapIsAdmin)return!0;let d=Array.isArray(c=a.ldapAllowedUsers)?c.map(i).filter(Boolean):String(c||"").split(/[,\n]/).map(i).filter(Boolean);return 0!==d.length&&k(b).some(a=>d.includes(a))}function n(a={},b={}){return!(!b?.authenticated||m(a,b))&&(b.role===h.hS.MONITOR_ADMIN||!0===b.ldapIsMonitorAdmin)}function o(a={},b={}){return!(!b?.authenticated||m(a,b)||n(a,b))&&(b.role===h.hS.AI_GATEWAYS_MONITOR||!0===b.ldapIsAiGatewaysMonitor)}function p(a={},b={}){return b?.authenticated?m(a,b)?h.hS.ADMIN:n(a,b)?h.hS.MONITOR_ADMIN:o(a,b)?h.hS.AI_GATEWAYS_MONITOR:h.hS.USER:h.hS.GUEST}function q(a={}){return!0===a.isAdmin||!0===a.isMonitorAdmin}async function r(){let a=await (0,f.mt)(),b=await (0,d.UL)(),c=await (0,g.dY)(b.get("auth_token")?.value);if(!c?.authenticated)return{authenticated:!1,isAdmin:!1,isMonitorAdmin:!1,isAiGatewaysMonitor:!1,role:h.hS.GUEST,userId:"",displayName:"Guest",loginMethod:"None",settings:{...a,requireLogin:!0},session:null};let e=l(c||{}),i=p(a,c||{}),j=i===h.hS.ADMIN,k=i===h.hS.MONITOR_ADMIN,m=i===h.hS.AI_GATEWAYS_MONITOR;return{authenticated:!0,isAdmin:j,isMonitorAdmin:k,isAiGatewaysMonitor:m,role:i,canManageApiKeys:j||k,canUseMonitorAdminTabs:j||k,canViewAllAnalytics:j||k||m,...e,settings:{...a,requireLogin:!0},session:c}}async function s(){let a=await r();return a.authenticated?{access:a,response:null}:{access:a,response:e.NextResponse.json({error:"Authentication required"},{status:401})}}async function t(a={}){let{allowMonitorAdmin:b=!1}=a||{},{access:c,response:d}=await s();return d?{access:c,response:d}:c.isAdmin||b&&c.isMonitorAdmin?{access:c,response:null}:{access:c,response:e.NextResponse.json({error:"Admin access required"},{status:403})}}function u(a,b){if(!a?.authenticated||!b)return!1;if(q(a))return!0;let c=i(a.userId),d=i(b.ownerUser),e=i(b.createdByUser);return!!c&&(d===c||e===c)}},33669:(a,b,c)=>{c.d(b,{MI:()=>e,RC:()=>h,zx:()=>f});var d=c(89718);function e(a){return Array.isArray(a)?[...new Set(a.map(a=>String(a||"").trim()).filter(Boolean))]:[]}function f(a,b){if(!a||!1===a.isActive)return!1;let c=String(b||"").trim();if(!c)return!1;let d=e(a.allowedModels);return 0===d.length||d.includes(c)}async function g(a){let b,c=await (0,d.mt)(),e=(b=a?.headers?.get?.("Authorization")||"").startsWith("Bearer ")?b.slice(7).trim():a?.headers?.get?.("x-api-key")?.trim()||null;if(!e)return{settings:c,apiKey:null,keyRecord:null,missing:!0,invalid:!1};let f=await (0,d.mY)(e);return{settings:c,apiKey:e,keyRecord:f,missing:!1,invalid:!f||!1===f.isActive}}async function h(a,b){let c=await g(a);return c.missing?{error:{message:"Missing API key",type:"authentication_error"},status:401}:c.invalid?{error:{message:"Invalid API key",type:"authentication_error"},status:401}:{data:function(a,b){if(!b||0===e(b?.allowedModels).length)return a;let c=new Set(e(b.allowedModels));return(a||[]).filter(a=>c.has(a?.id))}(b,c.keyRecord)}}},33792:(a,b,c)=>{c.d(b,{Dc:()=>p,OZ:()=>s,YK:()=>n,dY:()=>q,tm:()=>r});var d=c(86935),e=c(69614),f=c(73024),g=c.n(f),h=c(76760),i=c.n(h),j=c(77598),k=c.n(j),l=c(49120);let m=new TextEncoder().encode(function(){if(process.env.JWT_SECRET)return process.env.JWT_SECRET;let a=i().join(l.DATA_DIR,"jwt-secret");try{return g().readFileSync(a,"utf8").trim()}catch{}g().mkdirSync(l.DATA_DIR,{recursive:!0});let b=k().randomBytes(32).toString("hex");return g().writeFileSync(a,b,{mode:384}),b}());function n(a){let b="true"===process.env.AUTH_COOKIE_SECURE,c=a?.headers?.get?.("x-forwarded-proto");return b||"https"===c}async function o(a={}){return new d.P({authenticated:!0,...a}).setProtectedHeader({alg:"HS256"}).setIssuedAt().setExpirationTime("24h").sign(m)}async function p(a){if(!a)return!1;try{return await (0,e.V)(a,m),!0}catch{return!1}}async function q(a){if(!a)return null;try{let{payload:b}=await (0,e.V)(a,m);return b}catch{return null}}async function r(a,b,c={}){let d=await o(c);a.set("auth_token",d,{httpOnly:!0,secure:n(b),sameSite:"lax",path:"/"})}function s(a){a.delete("auth_token")}},34778:(a,b,c)=>{c.a(a,async(a,d)=>{try{c.d(b,{Ek:()=>p,H7:()=>u,IP:()=>s,Iq:()=>M,MQ:()=>N,NT:()=>n,UH:()=>m,Wj:()=>E,YU:()=>q,Z$:()=>F,Zg:()=>A,buildModelsUpdatePatch:()=>L,cz:()=>z,dO:()=>t,dT:()=>D,gm:()=>r,importPersonalProviderModels:()=>K,lg:()=>o,wn:()=>y});var e=c(48895),f=c(75681),g=c(9588),h=c(44404),i=c(89718),j=c(47812),k=c(33669),l=a([e]);e=(l.then?(await l)():l)[0];let N=["claude","codex","antigravity"],O={claude:[{id:"claude-opus-4-8",name:"Claude Opus 4.8"},{id:"claude-opus-4-7",name:"Claude Opus 4.7"},{id:"claude-sonnet-4-6",name:"Claude Sonnet 4.6"},{id:"claude-haiku-4-5-20251001",name:"Claude Haiku 4.5"}]};function m(a){let b=String(a||"").trim().toLowerCase();return N.includes(b)?b:""}function n(a){let b=m(a);return b?f.zN[b]:null}function o(a){let b=a&&"object"==typeof a&&!Array.isArray(a)?a:{},c={};for(let[a,d]of Object.entries(b)){let b=(0,g.I8)(a);if(!b)continue;let e=d&&"object"==typeof d&&!Array.isArray(d)?d:{};for(let a of(c[b]={},N))c[b][a]=!0===e[a]}return c}function p(a={}){return o(a.personalOAuthProviderPermissions||{})}function q(a={},b=""){let c=(0,g.I8)(b),d=p(a)[c]||{};return N.filter(a=>!0===d[a])}function r(a={},b="",c=""){let d=m(c);return!!d&&q(a,b).includes(d)}function s(a,b,c=[]){let d=m(a)||String(a||"provider").trim().toLowerCase(),e=function(a=""){let b=(0,g.I8)(a);return(b.split("@")[0]||b||"user").replace(/[^a-z0-9_-]+/g,"-").replace(/^-+|-+$/g,"").slice(0,48)||"user"}(b),f=`${d}-${e}`,h=new Set((c||[]).map(a=>String(a?.name||"").trim().toLowerCase()).filter(Boolean)),i=1;for(;h.has(`${f}-${i}`.toLowerCase());)i+=1;return`${f}-${i}`}function t(a={}){return"personal"===a.scope||"private"===a.visibility||!!a.ownerUser}async function u(a,b=[]){let c=(0,g.I8)(a),d=(b||[]).map(m).filter(Boolean);if(!c||0===d.length)return;let[e,f,h]=await Promise.all([(0,i.getProviderConnections)({scope:"personal",ownerUser:c}),(0,i.PX)({ownerUser:c}),(0,i.mt)()]),l=new Set(e.filter(a=>!1!==a.isActive).map(a=>String(a.provider||"").trim().toLowerCase())),n=d.filter(a=>!l.has(a));if(0===n.length)return;let o=new Set((0,k.MI)((0,j.nC)(h)));await Promise.all(f.map(async a=>{let b=(0,k.MI)(a.allowedModels);if(0===b.length)return;let c=b.filter(a=>{if(o.has(a))return!0;let b=String(a||"").split("/")[0].trim().toLowerCase();return!n.includes(b)});c.length!==b.length&&await (0,i.XW)(a.id,{allowedModels:c})}))}function v(a=""){return String(a||"").replace(/^models\//,"").split(/[_.-]+/).filter(Boolean).map(a=>a.length<=3?a.toUpperCase():a.charAt(0).toUpperCase()+a.slice(1)).join(" ")||String(a||"model")}function w(a,b,c="catalog"){let d=new Set;return(Array.isArray(b)?b:[]).map(b=>(function(a,b,c="catalog"){let d,e;if(!b)return null;let f="string"==typeof b?b:b.id||b.model||b.name||b.slug,g=String(f||"").trim().replace(/^models\//,"");if(!g)return null;let h=m(a);if(!h)return null;let i=(d=m(h),e=String(g||"").trim().replace(/^models\//,""),d&&e?e.includes("/")?e:`${d}/${e}`:""),j="string"==typeof b?v(g):b.display_name||b.displayName||b.name||v(g),k="object"==typeof b&&b?.type?String(b.type):"llm";return{id:g,name:String(j||g),type:k,provider:h,routeModel:i,source:c,upstreamModelId:"object"==typeof b&&(b.upstreamModelId||b.upstream_model_id)||null}})(a,b,c)).filter(a=>!(!a?.routeModel||d.has(a.routeModel))&&(d.add(a.routeModel),!0))}function x(a){let b=m(a);if(!b)return[];let c=O[b]||(0,h.KC)(b)||[];return w(b,c,"catalog")}function y(a={}){return{source:a.modelsSource||a.modelImportSource||"catalog",importedAt:a.modelsImportedAt||a.modelImportImportedAt||null,error:a.modelsImportError||a.modelImportError||"",warning:a.modelsImportWarning||a.modelImportWarning||""}}function z(a={}){let b=w(a.provider,a.importedModels,a.modelsSource||"imported");return b.length>0?b:x(a.provider)}function A(a={}){return w(a.provider,a.importedModels,a.modelsSource||"imported")}let P=new Set(["fill-first","round-robin","least-latency","p2c"]),Q=new Set(["global","client_ip","client_session"]);function B(a){return!0===a||!1===a?a:"true"===a||"false"!==a&&void 0}function C(a,{max:b}={}){let c=Number.parseInt(a,10);if(Number.isFinite(c)&&!(c<=0))return b&&c>b?b:c}function D(a={}){if(!a||"object"!=typeof a)return null;let b={},c=String(a.fallbackStrategy||a.strategy||"").trim().toLowerCase();P.has(c)&&(b.fallbackStrategy=c);let d=C(a.stickyRoundRobinLimit??a.stickyLimit,{max:1e3});void 0!==d&&(b.stickyRoundRobinLimit=d);let e=String(a.stickyScope||"").trim().toLowerCase();Q.has(e)&&(b.stickyScope=e);let f=C(a.stickyTtlMinutes,{max:10080});void 0!==f&&(b.stickyTtlMinutes=f);let g=B(a.stickyFallbackToClientIp);void 0!==g&&(b.stickyFallbackToClientIp=g);let h=B(a.stickyRebindOnFailure);void 0!==h&&(b.stickyRebindOnFailure=h);let i=C(a.stickyRebindFailureThreshold,{max:50});return void 0!==i&&(b.stickyRebindFailureThreshold=i),Object.keys(b).length>0?b:null}function E(a={}){let b=a.personalRoutingStrategies;if(!b||"object"!=typeof b||Array.isArray(b))return{};let c={};for(let[a,d]of Object.entries(b)){let b=(0,g.I8)(a);if(!b||!d||"object"!=typeof d)continue;let e={};for(let[a,b]of Object.entries(d)){let c=m(a);if(!c)continue;let d=D(b);d&&(e[c]=d)}Object.keys(e).length>0&&(c[b]=e)}return c}function F(a={},b="",c=""){let d=(0,g.I8)(b),e=m(c);if(!d||!e)return null;let f=E(a);return f[d]?.[e]||null}async function G(a,b={},c=12e3){let d=new AbortController,e=setTimeout(()=>d.abort(),c);try{let c=await fetch(a,{...b,signal:d.signal}),e=await c.text(),f=null;try{f=e?JSON.parse(e):null}catch{}return{response:c,data:f,text:e}}finally{clearTimeout(e)}}async function H(a){let b=a?.accessToken;if(!b)throw Error("No Claude OAuth token found");let{response:c,data:d,text:e}=await G("https://api.anthropic.com/v1/models",{method:"GET",headers:{Accept:"application/json","anthropic-version":"2023-06-01","anthropic-beta":"oauth-2025-04-20",Authorization:`Bearer ${b}`}});if(!c.ok)throw Error(`Claude models API ${c.status}: ${(e||"").slice(0,300)}`);return w("claude",d?.data||[],"provider")}async function I(a){let b=a?.accessToken;if(!b)throw Error("No Codex OAuth token found");let{response:c,data:d,text:e}=await G("https://chatgpt.com/backend-api/codex/models?client_version=1.0.0",{method:"GET",headers:{Accept:"application/json","Content-Type":"application/json",Authorization:`Bearer ${b}`}});if(!c.ok)throw Error(`Codex models API ${c.status}: ${(e||"").slice(0,300)}`);return w("codex",(Array.isArray(d)?d:d?.data||d?.models||d?.results||[]).flatMap(a=>{let b=a?.id||a?.slug||a?.model||a?.name;if(!b)return[];let c=a?.display_name||a?.displayName||a?.name||b,d={...a,id:b,name:c};return!("image"!==(a?.type||"llm")&&!String(b).toLowerCase().includes("embed"))||String(b).endsWith("-review")?[d]:[d,{...d,id:`${b}-review`,name:`${c} Review`,upstreamModelId:b,quotaFamily:"review"}]}),"provider")}async function J(a){let b=a?.accessToken;if(!b)throw Error("No Antigravity OAuth token found");let{response:c,data:d,text:e}=await G("https://daily-cloudcode-pa.sandbox.googleapis.com/v1internal:models",{method:"POST",headers:{Accept:"application/json","Content-Type":"application/json",Authorization:`Bearer ${b}`},body:JSON.stringify({})});if(!c.ok)throw Error(`Antigravity models API ${c.status}: ${(e||"").slice(0,300)}`);return w("antigravity",d?.models||[],"provider")}async function K(a={}){let b=m(a.provider);if(!b)throw Error("Unsupported personal OAuth provider");try{let c=[];if("claude"===b?c=await H(a):"codex"===b?c=await I(a):"antigravity"===b&&(c=await J(a)),c.length>0)return{models:c,source:"provider",importedAt:new Date().toISOString(),warning:"",error:""};throw Error("Provider returned no models")}catch(c){let a=x(b);return{models:a,source:"catalog",importedAt:new Date().toISOString(),warning:a.length>0?`Using static catalog fallback: ${c.message}`:"",error:a.length>0?"":c.message}}}function L(a={}){return{importedModels:Array.isArray(a.models)?a.models:[],modelsSource:a.source||"catalog",modelsImportedAt:a.importedAt||new Date().toISOString(),modelsImportWarning:a.warning||"",modelsImportError:a.error||""}}function M(a={}){let b={...a};return delete b.apiKey,delete b.accessToken,delete b.refreshToken,delete b.idToken,b.rtkEnabled=!0===a.rtkEnabled||!1===a.rtkEnabled?a.rtkEnabled:null,b}d()}catch(a){d(a)}})},47812:(a,b,c)=>{c.d(b,{T4:()=>l,WZ:()=>k,Xl:()=>n,_p:()=>p,nC:()=>m,nm:()=>r,tY:()=>j,uP:()=>o});var d=c(89718),e=c(74452),f=c(54603),g=c(490),h=c(33669),i=c(9588);let j=2;function k(a){return String(a||"").trim()}function l(a){if(Array.isArray(a))return(0,h.MI)(a);let b=k(a);return b?[b]:[]}function m(a={}){let b=l(a.apiKeyDefaultModels);return b.length>0?b:l(a.apiKeyDefaultModel)}function n(a={}){let b=a?.apiKeyDefaultPolicy;return(0,g.jQ)(b&&"object"==typeof b?b:g.is)}function o(a={}){return(0,h.MI)(m(a))}async function p(a){let b=(0,i.I8)(a||"");return b?(0,e.mI)({ownerUser:b}):0}async function q(a,b,c={}){let e={authenticated:!0,...b||{}},g=(0,i.s0)(e),h=(0,i.I8)(g.userId);if(!h)return{created:!1,skipped:"missing_owner"};let j=await p(h);if(j>0)return{created:!1,skipped:"already_has_key",apiKeyCount:j};let k=a||await (0,d.mt)(),l=o(k);if(0===l.length)return{created:!1,skipped:"missing_default_model"};let m=await (0,f.Xj)();return{created:!0,key:await (0,d.Iq)(c.name||function(a={}){let b=String(a.displayName||a.userId||"user").trim();return`Default API Key - ${b}`.slice(0,120)}(g),m,{allowedModels:l,limits:n(k),ownerUser:h,createdByUser:h})}}async function r(a,b,c={}){try{return await q(a,b,c)}catch(a){return console.log("Auto API key provisioning skipped:",a?.message||a),{created:!1,skipped:"error",error:a?.message||String(a)}}}},90389:(a,b,c)=>{c.d(b,{hS:()=>d});let d=Object.freeze({ADMIN:"admin",MONITOR_ADMIN:"monitor_admin",AI_GATEWAYS_MONITOR:"ai_gateways_monitor",USER:"user",GUEST:"guest"});Object.freeze([{href:"/dashboard/endpoint",label:"Endpoint",icon:"api"},{href:"/dashboard/api-keys",label:"API Keys",icon:"vpn_key"},{href:"/dashboard/usage",label:"Usage",icon:"bar_chart"},{href:"/dashboard/analytics",label:"Analytics",icon:"monitoring"},{href:"/dashboard/quota",label:"Quota Tracker",icon:"data_usage"},{href:"/dashboard/prompt-logs",label:"Prompt Logs",icon:"manage_search"}]),Object.freeze(["/dashboard","/dashboard/endpoint","/dashboard/api-keys","/dashboard/usage","/dashboard/analytics","/dashboard/quota","/dashboard/prompt-logs"])}};

package/app/.next-cli-build/server/chunks/5206.js

@@ -1 +1 @@
-"use strict";exports.id=5206,exports.ids=[5206],exports.modules={92825:(a,b,c)=>{c.d(b,{CO:()=>z,Qx:()=>C,cf:()=>D,ih:()=>B,sU:()=>E,uj:()=>A});var d=c(25060);let e="(|(sAMAccountName={{username}})(userPrincipalName={{username}})(mail={{username}}))",f=["dn","cn","displayName","mail","sAMAccountName","userPrincipalName","distinguishedName","memberOf"],g="1.2.840.113556.1.4.1941";function h(a){return String(a||"").trim()}function i(a){return Array.isArray(a)?a.map(a=>h(a)).filter(Boolean):String(a||"").split(/[,\n]/).map(a=>h(a)).filter(Boolean)}function j(a){return[...new Set(a.filter(Boolean))]}function k(a){return String(a||"").trim().toLowerCase()}function l(a){return String(a||"").replace(/[\\*()\u0000]/g,a=>{switch(a){case"\\":return"\\5c";case"*":return"\\2a";case"(":return"\\28";case")":return"\\29";case"\0":return"\\00";default:return a}})}function m(a={}){let b=h(a.ldapUserBaseDn||a.ldapBaseDn);return{enabled:!0===a.ldapEnabled,url:h(a.ldapUrl),bindDn:h(a.ldapBindDn),bindPassword:a.ldapBindPassword||"",baseDn:b,userBaseDn:b,userSearchFilter:h(a.ldapUserSearchFilter)||e,userNameAttribute:h(a.ldapUserNameAttribute)||"sAMAccountName",userDisplayAttribute:h(a.ldapUserDisplayAttribute)||"displayName",userEmailAttribute:h(a.ldapUserEmailAttribute)||"mail",allowedUsers:i(a.ldapAllowedUsers),allowAnyUser:!0===a.ldapAllowAnyUser,loginAllowedGroupDn:h(a.ldapLoginAllowedGroupDn),adminGroupDn:h(a.ldapAdminGroupDn),monitorAdminGroupDn:h(a.ldapMonitorAdminGroupDn),nestedGroups:!1!==a.ldapNestedGroups,tlsRejectUnauthorized:function(a,b=!1){return null==a||""===a?b:!0===a||"true"===a}(a.ldapTlsRejectUnauthorized,!0),connectTimeoutMs:Number(a.ldapConnectTimeoutMs||8e3)}}function n(a,{requirePassword:b=!0}={}){if(!a.enabled)throw Error("LDAP login is disabled.");if(!a.url)throw Error("LDAP URL is required.");if(!a.userBaseDn)throw Error("LDAP User Base DN is required.");if(!a.bindDn)throw Error("LDAP Bind DN is required.");if(b&&!a.bindPassword)throw Error("LDAP Bind password is required.")}async function o(a,b){let c=new d.Kj({url:a.url,timeout:a.connectTimeoutMs,connectTimeout:a.connectTimeoutMs,tlsOptions:{rejectUnauthorized:!1!==a.tlsRejectUnauthorized}});try{return await c.bind(a.bindDn,a.bindPassword||""),await b(c)}finally{try{await c.unbind()}catch{}}}function p(a,b){let c=a?.[b];return Array.isArray(c)?c[0]||"":c||""}function q(a,b){let c=a?.[b];return Array.isArray(c)?c.map(String).filter(Boolean):c?[String(c)]:[]}function r(a,b){let c=b.userNameAttribute||"sAMAccountName",d=b.userDisplayAttribute||"displayName",e=b.userEmailAttribute||"mail",f=p(a,c)||p(a,"sAMAccountName")||p(a,"userPrincipalName")||p(a,"mail")||a.dn;return{dn:a.dn,username:f,displayName:p(a,d)||p(a,"displayName")||p(a,"cn")||f,email:p(a,e)||p(a,"mail")||p(a,"userPrincipalName")||"",userPrincipalName:p(a,"userPrincipalName")||"",sAMAccountName:p(a,"sAMAccountName")||"",memberOf:q(a,"memberOf")}}function s(a,b={}){let c=a.allowedUsers.map(k).filter(Boolean);return 0!==c.length&&(function(a={}){return[a.username,a.email,a.displayName,a.userPrincipalName,a.sAMAccountName,a.dn].map(k).filter(Boolean)})(b).some(a=>c.includes(a))}async function t(a,b,c){var d;let g,i,k=(d=b.userSearchFilter,g=h(d)||e,i=l(c),g.replaceAll("{{username}}",i).replaceAll("{username}",i));return(await a.search(b.userBaseDn,{scope:"sub",filter:k,sizeLimit:1,attributes:j([...f,b.userNameAttribute,b.userDisplayAttribute,b.userEmailAttribute])})).searchEntries[0]||null}async function u(a,b,c,d){if(!b.nestedGroups)return!1;try{let e=`(&(distinguishedName=${l(c)})(memberOf:${g}:=${l(d)}))`;return(await a.search(b.userBaseDn,{scope:"sub",filter:e,sizeLimit:1,attributes:["dn"]})).searchEntries.length>0}catch{return!1}}async function v(a,b){try{let c=(await a.search(b,{scope:"base",filter:"(objectClass=*)",sizeLimit:1,attributes:["member","uniqueMember"]})).searchEntries[0]||{};return j([...q(c,"member"),...q(c,"uniqueMember")])}catch{return[]}}async function w(a,b,c,d){let e=h(d);if(!e)return!1;let f=h(c?.dn);return!!f&&(!!(q(c,"memberOf").map(k).includes(k(e))||await u(a,b,f,e))||(await v(a,e)).map(k).includes(k(f)))}async function x(a,b,c,d){let e=b.userNameAttribute||"sAMAccountName",h=b.userDisplayAttribute||"displayName",i=b.userEmailAttribute||"mail",k=String(c||"").trim(),m=l(k||"*"),n=k?`(|(${e}=*${m}*)(${h}=*${m}*)(${i}=*${m}*)(userPrincipalName=*${m}*)(sAMAccountName=*${m}*))`:"(|(sAMAccountName=*)(userPrincipalName=*)(mail=*))",o=b.nestedGroups?`(memberOf:${g}:=${l(d)})`:`(memberOf=${l(d)})`,p=`(&(&(objectCategory=person)(objectClass=user)(!(objectClass=computer))(!(userAccountControl:1.2.840.113556.1.4.803:=2)))${n}${o})`;return(await a.search(b.userBaseDn,{scope:"sub",filter:p,sizeLimit:100,attributes:j([...f,e,h,i])})).searchEntries.map(a=>r(a,b))}async function y(a,b,c,d){let e=await v(a,d),g=[];for(let d of e.slice(0,200))try{let e=(await a.search(d,{scope:"base",filter:"(objectClass=*)",sizeLimit:1,attributes:j([...f,b.userNameAttribute,b.userDisplayAttribute,b.userEmailAttribute])})).searchEntries[0];if(e?.dn){let a=r(e,b);(function(a,b){let c=k(b);return!c||[a.username,a.displayName,a.email,a.userPrincipalName,a.sAMAccountName,a.dn].map(k).some(a=>a.includes(c))})(a,c)&&g.push(a)}}catch{}return g}function z(a={}){let b=m(a);return!!(b.enabled&&b.url&&b.bindDn&&b.bindPassword&&b.userBaseDn)}function A(a={}){let b=m(a);return{ldapEnabled:b.enabled,ldapUrl:b.url,ldapBindDn:b.bindDn,ldapBaseDn:b.userBaseDn,ldapUserBaseDn:b.userBaseDn,ldapUserSearchFilter:b.userSearchFilter,ldapUserNameAttribute:b.userNameAttribute,ldapUserDisplayAttribute:b.userDisplayAttribute,ldapUserEmailAttribute:b.userEmailAttribute,ldapLoginAllowedGroupDn:b.loginAllowedGroupDn,ldapAdminGroupDn:b.adminGroupDn,ldapMonitorAdminGroupDn:b.monitorAdminGroupDn,ldapNestedGroups:b.nestedGroups,ldapAllowedUsers:b.allowedUsers,ldapAllowAnyUser:b.allowAnyUser,ldapTlsRejectUnauthorized:b.tlsRejectUnauthorized,ldapConnectTimeoutMs:b.connectTimeoutMs,ldapHasBindPassword:!!a.ldapBindPassword,ldapConfigured:z(a)}}function B(a={}){let b={};for(let c of["ldapUrl","ldapBindDn","ldapBaseDn","ldapUserBaseDn","ldapUserSearchFilter","ldapUserNameAttribute","ldapUserDisplayAttribute","ldapUserEmailAttribute","ldapLoginAllowedGroupDn","ldapAdminGroupDn","ldapMonitorAdminGroupDn"])Object.prototype.hasOwnProperty.call(a,c)&&(b[c]=h(a[c]));if(Object.prototype.hasOwnProperty.call(b,"ldapUserBaseDn")&&(b.ldapBaseDn=b.ldapUserBaseDn),Object.prototype.hasOwnProperty.call(a,"ldapEnabled")&&(b.ldapEnabled=!0===a.ldapEnabled),Object.prototype.hasOwnProperty.call(a,"ldapBindPassword")){let c=String(a.ldapBindPassword||"");c&&(b.ldapBindPassword=c)}if(Object.prototype.hasOwnProperty.call(a,"ldapClearBindPassword")&&!0===a.ldapClearBindPassword&&(b.ldapBindPassword=""),Object.prototype.hasOwnProperty.call(a,"ldapAllowedUsers")&&(b.ldapAllowedUsers=i(a.ldapAllowedUsers)),Object.prototype.hasOwnProperty.call(a,"ldapAllowAnyUser")&&(b.ldapAllowAnyUser=!0===a.ldapAllowAnyUser),Object.prototype.hasOwnProperty.call(a,"ldapNestedGroups")&&(b.ldapNestedGroups=!1!==a.ldapNestedGroups),Object.prototype.hasOwnProperty.call(a,"ldapTlsRejectUnauthorized")&&(b.ldapTlsRejectUnauthorized=!1!==a.ldapTlsRejectUnauthorized),Object.prototype.hasOwnProperty.call(a,"ldapConnectTimeoutMs")){let c=Number(a.ldapConnectTimeoutMs);b.ldapConnectTimeoutMs=Number.isFinite(c)&&c>0?Math.min(c,3e4):8e3}return b}async function C(a={}){let b=m(a);return n(b),await o(b,async a=>{let c=await a.search(b.userBaseDn,{scope:"sub",filter:"(objectClass=*)",sizeLimit:1,attributes:["dn"]}),d=!0,e=!0,f=!0;return b.loginAllowedGroupDn&&(d=(await v(a,b.loginAllowedGroupDn)).length>=0),b.adminGroupDn&&(e=(await v(a,b.adminGroupDn)).length>=0),b.monitorAdminGroupDn&&(f=(await v(a,b.monitorAdminGroupDn)).length>=0),{ok:!0,message:`LDAP bind and user base search OK. Found ${c.searchEntries.length} object(s).${b.loginAllowedGroupDn?" Login group DN is readable.":""}${b.adminGroupDn?" Admin group DN is readable.":""}${b.monitorAdminGroupDn?" Monitor admin group DN is readable.":""}`,loginGroupOk:d,adminGroupOk:e,monitorAdminGroupOk:f}})}async function D(a={},b=""){let c=m(a);return n(c),await o(c,async a=>{if(c.loginAllowedGroupDn){let d=await x(a,c,b,c.loginAllowedGroupDn).catch(()=>[]);return d.length>0?d:await y(a,c,b,c.loginAllowedGroupDn)}let d=c.userNameAttribute||"sAMAccountName",e=c.userDisplayAttribute||"displayName",g=c.userEmailAttribute||"mail",h=String(b||"").trim(),i=l(h||"*"),k=h?`(|(${d}=*${i}*)(${e}=*${i}*)(${g}=*${i}*)(userPrincipalName=*${i}*)(sAMAccountName=*${i}*))`:"(|(sAMAccountName=*)(userPrincipalName=*)(mail=*))",m=`(&(&(objectCategory=person)(objectClass=user)(!(objectClass=computer))(!(userAccountControl:1.2.840.113556.1.4.803:=2)))${k})`;return(await a.search(c.userBaseDn,{scope:"sub",filter:m,sizeLimit:100,attributes:j([...f,d,e,g])})).searchEntries.map(a=>r(a,c))})}async function E(a={},b,c){let e=m(a);n(e);let f=h(b),g=String(c||"");if(!f)throw Error("LDAP username is required.");if(!g)throw Error("LDAP password is required.");return await o(e,async a=>{let b=await t(a,e,f);if(!b?.dn)throw Error("LDAP user was not found.");let c=new d.Kj({url:e.url,timeout:e.connectTimeoutMs,connectTimeout:e.connectTimeoutMs,tlsOptions:{rejectUnauthorized:!1!==e.tlsRejectUnauthorized}});try{await c.bind(b.dn,g)}finally{try{await c.unbind()}catch{}}let h=r(b,e),i=e.loginAllowedGroupDn;if(i){if(!await w(a,e,b,i))throw Error("This LDAP user is not a member of the allowed login group.")}else if(!e.allowAnyUser&&e.allowedUsers.length>0&&!s(e,h))throw Error("This LDAP user is not allowed to access the dashboard.");let j=!!e.adminGroupDn&&await w(a,e,b,e.adminGroupDn),k=s(e,h),l=j||k,m=!l&&!!e.monitorAdminGroupDn&&await w(a,e,b,e.monitorAdminGroupDn);return{...h,isLoginAllowed:!0,isAdmin:l,isMonitorAdmin:m,adminSource:j?"ldap-admin-group":k?"manual-admin-list":"none",monitorAdminSource:m?"ldap-monitor-admin-group":"none"}})}}};
+"use strict";exports.id=5206,exports.ids=[5206],exports.modules={92825:(a,b,c)=>{c.d(b,{CO:()=>z,Qx:()=>C,cf:()=>D,ih:()=>B,sU:()=>E,uj:()=>A});var d=c(25060);let e="(|(sAMAccountName={{username}})(userPrincipalName={{username}})(mail={{username}}))",f=["dn","cn","displayName","mail","sAMAccountName","userPrincipalName","distinguishedName","memberOf"],g="1.2.840.113556.1.4.1941";function h(a){return String(a||"").trim()}function i(a){return Array.isArray(a)?a.map(a=>h(a)).filter(Boolean):String(a||"").split(/[,\n]/).map(a=>h(a)).filter(Boolean)}function j(a){return[...new Set(a.filter(Boolean))]}function k(a){return String(a||"").trim().toLowerCase()}function l(a){return String(a||"").replace(/[\\*()\u0000]/g,a=>{switch(a){case"\\":return"\\5c";case"*":return"\\2a";case"(":return"\\28";case")":return"\\29";case"\0":return"\\00";default:return a}})}function m(a={}){let b=h(a.ldapUserBaseDn||a.ldapBaseDn);return{enabled:!0===a.ldapEnabled,url:h(a.ldapUrl),bindDn:h(a.ldapBindDn),bindPassword:a.ldapBindPassword||"",baseDn:b,userBaseDn:b,userSearchFilter:h(a.ldapUserSearchFilter)||e,userNameAttribute:h(a.ldapUserNameAttribute)||"sAMAccountName",userDisplayAttribute:h(a.ldapUserDisplayAttribute)||"displayName",userEmailAttribute:h(a.ldapUserEmailAttribute)||"mail",allowedUsers:i(a.ldapAllowedUsers),allowAnyUser:!0===a.ldapAllowAnyUser,loginAllowedGroupDn:h(a.ldapLoginAllowedGroupDn),adminGroupDn:h(a.ldapAdminGroupDn),monitorAdminGroupDn:h(a.ldapMonitorAdminGroupDn),aiGatewaysMonitorsGroupDn:h(a.ldapAiGatewaysMonitorsGroupDn),nestedGroups:!1!==a.ldapNestedGroups,tlsRejectUnauthorized:function(a,b=!1){return null==a||""===a?b:!0===a||"true"===a}(a.ldapTlsRejectUnauthorized,!0),connectTimeoutMs:Number(a.ldapConnectTimeoutMs||8e3)}}function n(a,{requirePassword:b=!0}={}){if(!a.enabled)throw Error("LDAP login is disabled.");if(!a.url)throw Error("LDAP URL is required.");if(!a.userBaseDn)throw Error("LDAP User Base DN is required.");if(!a.bindDn)throw Error("LDAP Bind DN is required.");if(b&&!a.bindPassword)throw Error("LDAP Bind password is required.")}async function o(a,b){let c=new d.Kj({url:a.url,timeout:a.connectTimeoutMs,connectTimeout:a.connectTimeoutMs,tlsOptions:{rejectUnauthorized:!1!==a.tlsRejectUnauthorized}});try{return await c.bind(a.bindDn,a.bindPassword||""),await b(c)}finally{try{await c.unbind()}catch{}}}function p(a,b){let c=a?.[b];return Array.isArray(c)?c[0]||"":c||""}function q(a,b){let c=a?.[b];return Array.isArray(c)?c.map(String).filter(Boolean):c?[String(c)]:[]}function r(a,b){let c=b.userNameAttribute||"sAMAccountName",d=b.userDisplayAttribute||"displayName",e=b.userEmailAttribute||"mail",f=p(a,c)||p(a,"sAMAccountName")||p(a,"userPrincipalName")||p(a,"mail")||a.dn;return{dn:a.dn,username:f,displayName:p(a,d)||p(a,"displayName")||p(a,"cn")||f,email:p(a,e)||p(a,"mail")||p(a,"userPrincipalName")||"",userPrincipalName:p(a,"userPrincipalName")||"",sAMAccountName:p(a,"sAMAccountName")||"",memberOf:q(a,"memberOf")}}function s(a,b={}){let c=a.allowedUsers.map(k).filter(Boolean);return 0!==c.length&&(function(a={}){return[a.username,a.email,a.displayName,a.userPrincipalName,a.sAMAccountName,a.dn].map(k).filter(Boolean)})(b).some(a=>c.includes(a))}async function t(a,b,c){var d;let g,i,k=(d=b.userSearchFilter,g=h(d)||e,i=l(c),g.replaceAll("{{username}}",i).replaceAll("{username}",i));return(await a.search(b.userBaseDn,{scope:"sub",filter:k,sizeLimit:1,attributes:j([...f,b.userNameAttribute,b.userDisplayAttribute,b.userEmailAttribute])})).searchEntries[0]||null}async function u(a,b,c,d){if(!b.nestedGroups)return!1;try{let e=`(&(distinguishedName=${l(c)})(memberOf:${g}:=${l(d)}))`;return(await a.search(b.userBaseDn,{scope:"sub",filter:e,sizeLimit:1,attributes:["dn"]})).searchEntries.length>0}catch{return!1}}async function v(a,b){try{let c=(await a.search(b,{scope:"base",filter:"(objectClass=*)",sizeLimit:1,attributes:["member","uniqueMember"]})).searchEntries[0]||{};return j([...q(c,"member"),...q(c,"uniqueMember")])}catch{return[]}}async function w(a,b,c,d){let e=h(d);if(!e)return!1;let f=h(c?.dn);return!!f&&(!!(q(c,"memberOf").map(k).includes(k(e))||await u(a,b,f,e))||(await v(a,e)).map(k).includes(k(f)))}async function x(a,b,c,d){let e=b.userNameAttribute||"sAMAccountName",h=b.userDisplayAttribute||"displayName",i=b.userEmailAttribute||"mail",k=String(c||"").trim(),m=l(k||"*"),n=k?`(|(${e}=*${m}*)(${h}=*${m}*)(${i}=*${m}*)(userPrincipalName=*${m}*)(sAMAccountName=*${m}*))`:"(|(sAMAccountName=*)(userPrincipalName=*)(mail=*))",o=b.nestedGroups?`(memberOf:${g}:=${l(d)})`:`(memberOf=${l(d)})`,p=`(&(&(objectCategory=person)(objectClass=user)(!(objectClass=computer))(!(userAccountControl:1.2.840.113556.1.4.803:=2)))${n}${o})`;return(await a.search(b.userBaseDn,{scope:"sub",filter:p,sizeLimit:100,attributes:j([...f,e,h,i])})).searchEntries.map(a=>r(a,b))}async function y(a,b,c,d){let e=await v(a,d),g=[];for(let d of e.slice(0,200))try{let e=(await a.search(d,{scope:"base",filter:"(objectClass=*)",sizeLimit:1,attributes:j([...f,b.userNameAttribute,b.userDisplayAttribute,b.userEmailAttribute])})).searchEntries[0];if(e?.dn){let a=r(e,b);(function(a,b){let c=k(b);return!c||[a.username,a.displayName,a.email,a.userPrincipalName,a.sAMAccountName,a.dn].map(k).some(a=>a.includes(c))})(a,c)&&g.push(a)}}catch{}return g}function z(a={}){let b=m(a);return!!(b.enabled&&b.url&&b.bindDn&&b.bindPassword&&b.userBaseDn)}function A(a={}){let b=m(a);return{ldapEnabled:b.enabled,ldapUrl:b.url,ldapBindDn:b.bindDn,ldapBaseDn:b.userBaseDn,ldapUserBaseDn:b.userBaseDn,ldapUserSearchFilter:b.userSearchFilter,ldapUserNameAttribute:b.userNameAttribute,ldapUserDisplayAttribute:b.userDisplayAttribute,ldapUserEmailAttribute:b.userEmailAttribute,ldapLoginAllowedGroupDn:b.loginAllowedGroupDn,ldapAdminGroupDn:b.adminGroupDn,ldapMonitorAdminGroupDn:b.monitorAdminGroupDn,ldapAiGatewaysMonitorsGroupDn:b.aiGatewaysMonitorsGroupDn,ldapNestedGroups:b.nestedGroups,ldapAllowedUsers:b.allowedUsers,ldapAllowAnyUser:b.allowAnyUser,ldapTlsRejectUnauthorized:b.tlsRejectUnauthorized,ldapConnectTimeoutMs:b.connectTimeoutMs,ldapHasBindPassword:!!a.ldapBindPassword,ldapConfigured:z(a)}}function B(a={}){let b={};for(let c of["ldapUrl","ldapBindDn","ldapBaseDn","ldapUserBaseDn","ldapUserSearchFilter","ldapUserNameAttribute","ldapUserDisplayAttribute","ldapUserEmailAttribute","ldapLoginAllowedGroupDn","ldapAdminGroupDn","ldapMonitorAdminGroupDn","ldapAiGatewaysMonitorsGroupDn"])Object.prototype.hasOwnProperty.call(a,c)&&(b[c]=h(a[c]));if(Object.prototype.hasOwnProperty.call(b,"ldapUserBaseDn")&&(b.ldapBaseDn=b.ldapUserBaseDn),Object.prototype.hasOwnProperty.call(a,"ldapEnabled")&&(b.ldapEnabled=!0===a.ldapEnabled),Object.prototype.hasOwnProperty.call(a,"ldapBindPassword")){let c=String(a.ldapBindPassword||"");c&&(b.ldapBindPassword=c)}if(Object.prototype.hasOwnProperty.call(a,"ldapClearBindPassword")&&!0===a.ldapClearBindPassword&&(b.ldapBindPassword=""),Object.prototype.hasOwnProperty.call(a,"ldapAllowedUsers")&&(b.ldapAllowedUsers=i(a.ldapAllowedUsers)),Object.prototype.hasOwnProperty.call(a,"ldapAllowAnyUser")&&(b.ldapAllowAnyUser=!0===a.ldapAllowAnyUser),Object.prototype.hasOwnProperty.call(a,"ldapNestedGroups")&&(b.ldapNestedGroups=!1!==a.ldapNestedGroups),Object.prototype.hasOwnProperty.call(a,"ldapTlsRejectUnauthorized")&&(b.ldapTlsRejectUnauthorized=!1!==a.ldapTlsRejectUnauthorized),Object.prototype.hasOwnProperty.call(a,"ldapConnectTimeoutMs")){let c=Number(a.ldapConnectTimeoutMs);b.ldapConnectTimeoutMs=Number.isFinite(c)&&c>0?Math.min(c,3e4):8e3}return b}async function C(a={}){let b=m(a);return n(b),await o(b,async a=>{let c=await a.search(b.userBaseDn,{scope:"sub",filter:"(objectClass=*)",sizeLimit:1,attributes:["dn"]}),d=!0,e=!0,f=!0,g=!0;return b.loginAllowedGroupDn&&(d=(await v(a,b.loginAllowedGroupDn)).length>=0),b.adminGroupDn&&(e=(await v(a,b.adminGroupDn)).length>=0),b.monitorAdminGroupDn&&(f=(await v(a,b.monitorAdminGroupDn)).length>=0),b.aiGatewaysMonitorsGroupDn&&(g=(await v(a,b.aiGatewaysMonitorsGroupDn)).length>=0),{ok:!0,message:`LDAP bind and user base search OK. Found ${c.searchEntries.length} object(s).${b.loginAllowedGroupDn?" Login group DN is readable.":""}${b.adminGroupDn?" Admin group DN is readable.":""}${b.monitorAdminGroupDn?" Monitor admin group DN is readable.":""}${b.aiGatewaysMonitorsGroupDn?" AI Gateways monitors group DN is readable.":""}`,loginGroupOk:d,adminGroupOk:e,monitorAdminGroupOk:f,aiGatewaysMonitorsGroupOk:g}})}async function D(a={},b=""){let c=m(a);return n(c),await o(c,async a=>{if(c.loginAllowedGroupDn){let d=await x(a,c,b,c.loginAllowedGroupDn).catch(()=>[]);return d.length>0?d:await y(a,c,b,c.loginAllowedGroupDn)}let d=c.userNameAttribute||"sAMAccountName",e=c.userDisplayAttribute||"displayName",g=c.userEmailAttribute||"mail",h=String(b||"").trim(),i=l(h||"*"),k=h?`(|(${d}=*${i}*)(${e}=*${i}*)(${g}=*${i}*)(userPrincipalName=*${i}*)(sAMAccountName=*${i}*))`:"(|(sAMAccountName=*)(userPrincipalName=*)(mail=*))",m=`(&(&(objectCategory=person)(objectClass=user)(!(objectClass=computer))(!(userAccountControl:1.2.840.113556.1.4.803:=2)))${k})`;return(await a.search(c.userBaseDn,{scope:"sub",filter:m,sizeLimit:100,attributes:j([...f,d,e,g])})).searchEntries.map(a=>r(a,c))})}async function E(a={},b,c){let e=m(a);n(e);let f=h(b),g=String(c||"");if(!f)throw Error("LDAP username is required.");if(!g)throw Error("LDAP password is required.");return await o(e,async a=>{let b=await t(a,e,f);if(!b?.dn)throw Error("LDAP user was not found.");let c=new d.Kj({url:e.url,timeout:e.connectTimeoutMs,connectTimeout:e.connectTimeoutMs,tlsOptions:{rejectUnauthorized:!1!==e.tlsRejectUnauthorized}});try{await c.bind(b.dn,g)}finally{try{await c.unbind()}catch{}}let h=r(b,e),i=e.loginAllowedGroupDn;if(i){if(!await w(a,e,b,i))throw Error("This LDAP user is not a member of the allowed login group.")}else if(!e.allowAnyUser&&e.allowedUsers.length>0&&!s(e,h))throw Error("This LDAP user is not allowed to access the dashboard.");let j=!!e.adminGroupDn&&await w(a,e,b,e.adminGroupDn),k=s(e,h),l=j||k,m=!l&&!!e.monitorAdminGroupDn&&await w(a,e,b,e.monitorAdminGroupDn),n=!l&&!m&&!!e.aiGatewaysMonitorsGroupDn&&await w(a,e,b,e.aiGatewaysMonitorsGroupDn);return{...h,isLoginAllowed:!0,isAdmin:l,isMonitorAdmin:m,isAiGatewaysMonitor:n,adminSource:j?"ldap-admin-group":k?"manual-admin-list":"none",monitorAdminSource:m?"ldap-monitor-admin-group":"none",aiGatewaysMonitorSource:n?"ldap-ai-gateways-monitors-group":"none"}})}}};