@jheavenknows/bluerouter 5.3.71 → 5.3.73

package/app/.next-cli-build/server/app/api/audit-proxy/route.js

@@ -1,14 +1,15 @@
-"use strict";(()=>{var a={};a.id=920,a.ids=[920],a.modules={261:a=>{a.exports=require("next/dist/shared/lib/router/utils/app-paths")},1932:a=>{a.exports=require("url")},3295:a=>{a.exports=require("next/dist/server/app-render/after-task-async-storage.external.js")},3697:(a,b,c)=>{c.r(b),c.d(b,{handler:()=>z,patchFetch:()=>y,routeModule:()=>u,serverHooks:()=>x,workAsyncStorage:()=>v,workUnitAsyncStorage:()=>w});var d=c(19225),e=c(84006),f=c(8317),g=c(99373),h=c(34775),i=c(24235),j=c(261),k=c(54365),l=c(90771),m=c(73461),n=c(67798),o=c(92280),p=c(62018),q=c(45696),r=c(47929),s=c(86439),t=c(37527);let u=new d.AppRouteRouteModule({definition:{kind:e.RouteKind.APP_ROUTE,page:"/api/audit-proxy/route",pathname:"/api/audit-proxy",filename:"route",bundlePath:"app/api/audit-proxy/route"},distDir:".next-cli-build",relativeProjectDir:"",resolvedPagePath:"D:\\bluerouter\\src\\app\\api\\audit-proxy\\route.js",nextConfigOutput:"standalone",userland:()=>c(87496),...{}}),{workAsyncStorage:v,workUnitAsyncStorage:w,serverHooks:x}=u;function y(){return(0,f.patchFetch)({workAsyncStorage:v,workUnitAsyncStorage:w})}async function z(a,b,c){c.requestMeta&&(0,g.setRequestMeta)(a,c.requestMeta),u.isDev&&(0,g.addRequestMeta)(a,"devRequestTimingInternalsEnd",process.hrtime.bigint());let d="/api/audit-proxy/route";"/index"===d&&(d="/");let f=await u.prepare(a,b,{srcPage:d,multiZoneDraftMode:!1});if(!f)return b.statusCode=400,b.end("Bad Request"),null==c.waitUntil||c.waitUntil.call(c,Promise.resolve()),null;let{buildId:v,deploymentId:w,params:x,nextConfig:y,parsedUrl:z,isDraftMode:A,prerenderManifest:B,routerServerContext:C,isOnDemandRevalidate:D,revalidateOnlyGenerated:E,resolvedPathname:F,clientReferenceManifest:G,serverActionsManifest:H}=f,I=(0,j.normalizeAppPath)(d),J=!!(B.dynamicRoutes[I]||B.routes[F]),K=async()=>((null==C?void 0:C.render404)?await C.render404(a,b,z,!1):b.end("This page could not be found"),null);if(J&&!A){let a=!!B.routes[F],b=B.dynamicRoutes[I];if(b&&!1===b.fallback&&!a){if(y.adapterPath)return await K();throw new s.NoFallbackError}}let L=null;!J||u.isDev||A||(L="/index"===(L=F)?"/":L);let M=!0===u.isDev||!J,N=J&&!M;H&&G&&(0,i.setManifestsSingleton)({page:d,clientReferenceManifest:G,serverActionsManifest:H});let O=a.method||"GET",P=(0,h.getTracer)(),Q=P.getActiveScopeSpan(),R=!!(null==C?void 0:C.isWrappedByNextServer),S=!!(0,g.getRequestMeta)(a,"minimalMode"),T=(0,g.getRequestMeta)(a,"incrementalCache")||await u.getIncrementalCache(a,y,B,S);null==T||T.resetRequestCache(),globalThis.__incrementalCache=T;let U={params:x,previewProps:B.preview,renderOpts:{experimental:{authInterrupts:!!y.experimental.authInterrupts,useCacheTimeout:y.experimental.useCacheTimeout},cacheComponents:!!y.cacheComponents,validationLevel:y.experimental.instantInsights.validationLevel,supportsDynamicResponse:M,incrementalCache:T,hmrRefreshHash:(0,g.getRequestMeta)(a,"hmrRefreshHash"),cacheLifeProfiles:y.cacheLife,staticPageGenerationTimeout:y.staticPageGenerationTimeout,waitUntil:c.waitUntil,onClose:a=>{b.on("close",a)},onAfterTaskError:void 0,onInstrumentationRequestError:(b,c,d,e)=>u.onRequestError(a,b,d,e,C)},sharedContext:{buildId:v,deploymentId:w}},V=new k.NodeNextRequest(a),W=new k.NodeNextResponse(b),X=l.NextRequestAdapter.fromNodeNextRequest(V,(0,l.signalFromNodeResponse)(b)),Y=async({previousCacheEntry:e})=>{try{if(!S&&D&&E&&!e)return b.statusCode=404,b.setHeader("x-nextjs-cache","REVALIDATED"),b.end("This page could not be found"),null;let d=await u.handle(X,U);a.fetchMetrics=U.renderOpts.fetchMetrics;let f=U.renderOpts.pendingWaitUntil;f&&c.waitUntil&&(c.waitUntil(f),f=void 0);let g=U.renderOpts.collectedTags;if(!J)return await (0,o.I)(V,W,d,f),null;{let a=await d.blob(),b=(0,p.toNodeOutgoingHttpHeaders)(d.headers);g&&(b[r.NEXT_CACHE_TAGS_HEADER]=g),!b["content-type"]&&a.type&&(b["content-type"]=a.type);let c=void 0!==U.renderOpts.collectedRevalidate&&!(U.renderOpts.collectedRevalidate>=r.INFINITE_CACHE)&&U.renderOpts.collectedRevalidate,e=void 0===U.renderOpts.collectedExpire||U.renderOpts.collectedExpire>=r.INFINITE_CACHE?!1!==c&&c>0?y.expireTime:void 0:U.renderOpts.collectedExpire;return{value:{kind:t.CachedRouteKind.APP_ROUTE,status:d.status,body:Buffer.from(await a.arrayBuffer()),headers:b},cacheControl:{revalidate:c,expire:e}}}}catch(b){throw(null==e?void 0:e.isStale)&&await u.onRequestError(a,b,{routerKind:"App Router",routePath:d,routeType:"route",revalidateReason:(0,n.getRevalidateReason)({isStaticGeneration:N,isOnDemandRevalidate:D})},!1,C),b}},Z=async(d,f)=>{try{var g,i;let d=await u.handleResponse({req:a,nextConfig:y,cacheKey:L,routeKind:e.RouteKind.APP_ROUTE,isFallback:!1,prerenderManifest:B,isRoutePPREnabled:!1,isOnDemandRevalidate:D,revalidateOnlyGenerated:E,responseGenerator:Y,waitUntil:c.waitUntil,isMinimalMode:S});if(!J)return;if((null==d||null==(g=d.value)?void 0:g.kind)!==t.CachedRouteKind.APP_ROUTE)throw Object.defineProperty(Error(`Invariant: app-route received invalid cache entry ${null==d||null==(i=d.value)?void 0:i.kind}`),"__NEXT_ERROR_CODE",{value:"E701",enumerable:!1,configurable:!0});S||b.setHeader("x-nextjs-cache",D?"REVALIDATED":d.isMiss?"MISS":d.isStale?"STALE":"HIT"),A&&b.setHeader("Cache-Control","private, no-cache, no-store, max-age=0, must-revalidate");let f=(0,p.fromNodeOutgoingHttpHeaders)(d.value.headers);S&&J||f.delete(r.NEXT_CACHE_TAGS_HEADER),!d.cacheControl||b.getHeader("Cache-Control")||f.get("Cache-Control")||f.set("Cache-Control",(0,q.getCacheControlHeader)(d.cacheControl)),await (0,o.I)(V,W,new Response(d.value.body,{headers:f,status:d.value.status||200}));return}catch(b){if(b instanceof s.NoFallbackError||await u.onRequestError(a,b,{routerKind:"App Router",routePath:I,routeType:"route",revalidateReason:(0,n.getRevalidateReason)({isStaticGeneration:N,isOnDemandRevalidate:D})},!1,C),J)throw b;await (0,o.I)(V,W,new Response(null,{status:500}));return}finally{(()=>{if(!d)return;let a=b.statusCode;d.setAttributes({"http.status_code":a,"next.rsc":!1}),a&&a>=500&&(d.setStatus({code:h.SpanStatusCode.ERROR}),d.setAttribute("error.type",a.toString()));let c=P.getRootSpanAttributes();if(!c)return;if(c.get("next.span_type")!==m.BaseServerSpan.handleRequest)return console.warn(`Unexpected root span type '${c.get("next.span_type")}'. Please report this Next.js issue https://github.com/vercel/next.js`);let e=c.get("next.route")||I,g=`${O} ${e}`;d.setAttributes({"next.route":e,"http.route":e,"next.span_name":g}),d.updateName(g),f&&f!==d&&(f.setAttribute("http.route",e),f.updateName(g))})()}};if(R&&Q)await Z(Q,void 0);else{let b=P.getActiveScopeSpan();await P.withPropagatedContext(a.headers,()=>P.trace(m.BaseServerSpan.handleRequest,{spanName:`${O} ${d}`,kind:h.SpanKind.SERVER,attributes:{"http.method":O,"http.target":a.url}},a=>Z(a,b)),void 0,!R)}}},4573:a=>{a.exports=require("node:buffer")},4984:a=>{a.exports=require("readline")},5565:(a,b,c)=>{let d=c(91645);function e(a){let b=String(a||"").trim().toLowerCase();b.startsWith("[")&&b.endsWith("]")&&(b=b.slice(1,-1));let c=b.indexOf("%");return c>=0&&(b=b.slice(0,c)),b.startsWith("::ffff:")&&4===d.isIP(b.slice(7))&&(b=b.slice(7)),b}function f(a){return Buffer.from(a.split(".").map(a=>Number(a)))}function g(a,b){return 4===b?f(a):function(a){let b=e(a),c=b.lastIndexOf(":");if(c>=0){let a=b.slice(c+1);if(4===d.isIP(a)){let d=f(a),e=(d[0]<<8|d[1]).toString(16),g=(d[2]<<8|d[3]).toString(16);b=`${b.slice(0,c)}:${e}:${g}`}}let g=b.split("::");if(g.length>2)throw Error("Invalid IPv6 address");let h=g[0]?g[0].split(":").filter(Boolean):[],i=2===g.length&&g[1]?g[1].split(":").filter(Boolean):[],j=8-h.length-i.length;if(1===g.length&&0!==j||j<0)throw Error("Invalid IPv6 address");let k=2===g.length?[...h,...Array(j).fill("0"),...i]:h;if(8!==k.length)throw Error("Invalid IPv6 address");let l=Buffer.alloc(16);return k.forEach((a,b)=>{let c=Number.parseInt(a||"0",16);if(!Number.isInteger(c)||c<0||c>65535)throw Error("Invalid IPv6 address");l[2*b]=c>>8&255,l[2*b+1]=255&c}),l}(a)}function h(a){let b=String(a||"").trim();if(!b)throw Error("Empty IP rule");let c=b.indexOf("/"),f=e(c>=0?b.slice(0,c):b),g=d.isIP(f);if(!g)throw Error(`Invalid client IP/CIDR: ${b}`);let h=4===g?32:128,i=c>=0?Number(b.slice(c+1)):h;if(!Number.isInteger(i)||i<0||i>h)throw Error(`Invalid CIDR prefix: ${b}`);return{text:c>=0?`${f}/${i}`:f,ip:f,family:g,prefix:i}}a.exports={normalizeIp:e,parseIpRule:h,normalizeAllowedClientIps:function(a){let b=Array.isArray(a)?a:String(a||"").split(/[\r\n,]+/),c=[],d=new Set;for(let a of b){let b=String(a||"").trim();if(!b)continue;let e=h(b);d.has(e.text)||(d.add(e.text),c.push(e.text))}return c},clientIpMatches:function(a,b=[]){let c=e(a),f=d.isIP(c);if(!f)return!1;let i=g(c,f);for(let a of b||[]){let b;try{b=h(a)}catch{continue}if(b.family===f&&function(a,b,c){let d=Math.floor(c/8),e=c%8;for(let c=0;c<d;c+=1)if(a[c]!==b[c])return!1;if(!e)return!0;let f=255<<8-e&255;return(a[d]&f)==(b[d]&f)}(i,g(b.ip,b.family),b.prefix))return!0}return!1}}},8128:a=>{a.exports=require("next/dist/server/runtime-reacts.external.js")},10846:a=>{a.exports=require("next/dist/compiled/next-server/app-page.runtime.prod.js")},14985:a=>{a.exports=require("dns")},19121:a=>{a.exports=require("next/dist/server/app-render/action-async-storage.external.js")},19771:a=>{a.exports=require("process")},21820:a=>{a.exports=require("os")},27910:a=>{a.exports=require("stream")},28354:a=>{a.exports=require("util")},29021:a=>{a.exports=require("fs")},29294:a=>{a.exports=require("next/dist/server/app-render/work-async-storage.external.js")},33873:a=>{a.exports=require("path")},34631:a=>{a.exports=require("tls")},41204:a=>{a.exports=require("string_decoder")},43096:(a,b,c)=>{let d=c(29021),e=c(33873),{DATA_DIR:f}=c(82193),{normalizeAllowedClientIps:g}=c(5565),h=e.join(f,"audit-gateway"),i=e.join(h,"config.json"),j=e.join(h,"audit.jsonl"),k=e.join(h,"logs"),l=Object.freeze({enabled:!1,bindHost:"127.0.0.1",port:3128,clientProxyHost:"",clientIpFilterEnabled:!1,allowedClientIps:[],allowedHosts:["api.anthropic.com","*.anthropic.com","claude.ai","*.claude.ai","api.openai.com","*.openai.com","chatgpt.com","*.chatgpt.com"],passthroughUnknown:!0,captureBodies:!0,captureLimitBytes:2097152,retentionDays:7,verifyUpstreamTls:!0,connectTimeoutMs:1e4,tlsHandshakeTimeoutMs:1e4,responseHeaderTimeoutMs:3e4,idleTimeoutMs:9e5,shutdownGraceMs:1500,allowPlainHttp:!1,allowedConnectPorts:[443]});function m(){return{...l,allowedClientIps:[...l.allowedClientIps],allowedHosts:[...l.allowedHosts],allowedConnectPorts:[...l.allowedConnectPorts]}}function n(){d.mkdirSync(h,{recursive:!0}),d.mkdirSync(k,{recursive:!0})}function o(a){return[...new Set((Array.isArray(a)?a:String(a||"").split(/[\r\n,]+/)).map(a=>String(a||"").trim().toLowerCase()).filter(Boolean).filter(a=>!a.includes("://")&&/^[*a-z0-9._-]+$/.test(a)))]}function p(a,b,c,d,e){let f=null==a?b:Number(a);if(!Number.isInteger(f)||f<c||f>d)throw Error(`${e} must be between ${c} and ${d}`);return f}function q(a={}){let b={...l,...a},c=p(b.port,l.port,1,65535,"Proxy port"),d=Number(b.captureLimitBytes);if(!Number.isFinite(d)||d<0||d>0x1000000)throw Error("Capture limit must be between 0 and 16 MB");let e=p(b.retentionDays,l.retentionDays,1,365,"Retention days"),f=p(b.connectTimeoutMs,l.connectTimeoutMs,1e3,12e4,"Connect timeout"),h=p(b.tlsHandshakeTimeoutMs,l.tlsHandshakeTimeoutMs,1e3,12e4,"TLS handshake timeout"),i=p(b.responseHeaderTimeoutMs,l.responseHeaderTimeoutMs,1e3,3e5,"Response header timeout"),j=p(b.idleTimeoutMs,l.idleTimeoutMs,3e4,36e5,"Idle timeout"),k=p(b.shutdownGraceMs,l.shutdownGraceMs,0,3e4,"Shutdown grace period"),m=String(b.bindHost||"127.0.0.1").trim();if(!m||/\s/.test(m))throw Error("Invalid bind address");let n=String(b.clientProxyHost||"").trim();if(/\s/.test(n)||n.includes("://"))throw Error("Client proxy host must be a hostname or IP without protocol");let r=!0===b.clientIpFilterEnabled,s=g(b.allowedClientIps);if(r&&0===s.length)throw Error("Client IP filter requires at least one allowed IP or CIDR");return{enabled:!0===b.enabled,bindHost:m,port:c,clientProxyHost:n,clientIpFilterEnabled:r,allowedClientIps:s,allowedHosts:o(b.allowedHosts),passthroughUnknown:!1!==b.passthroughUnknown,captureBodies:!1!==b.captureBodies,captureLimitBytes:Math.round(d),retentionDays:e,verifyUpstreamTls:!0,connectTimeoutMs:f,tlsHandshakeTimeoutMs:h,responseHeaderTimeoutMs:i,idleTimeoutMs:j,shutdownGraceMs:k,allowPlainHttp:!1,allowedConnectPorts:[443]}}a.exports={AUDIT_DIR:h,CONFIG_PATH:i,AUDIT_LOG_PATH:j,AUDIT_LOG_DIR:k,DEFAULT_CONFIG:l,ensureAuditDir:n,loadConfig:function(){if(n(),!d.existsSync(i))return m();try{return q(JSON.parse(d.readFileSync(i,"utf8")))}catch(a){return console.warn(`[audit-proxy] invalid config ignored: ${a.message||a}`),m()}},saveConfig:function(a){n();let b=q(a),c=`${i}.tmp`;return d.writeFileSync(c,`${JSON.stringify(b,null,2)}
-`,{mode:384}),d.renameSync(c,i),b},validateConfig:q,normalizeAllowedHosts:o,normalizeAllowedClientIps:g}},44870:a=>{a.exports=require("next/dist/compiled/next-server/app-route.runtime.prod.js")},45372:(a,b,c)=>{let d=c(81630),e=c(73496),f=c(55591),g=c(91645),h=c(34631),i=c(55511),j=c(74075),{promisify:k}=c(28354),{redactHeaders:l,redactBodyText:m,redactUrlPath:n,scrubString:o}=c(48350),{extractUsageFromBody:p}=c(86455),{resolvePublicTarget:q}=c(78864),r=k(j.brotliDecompress),s=k(j.gunzip),t=k(j.inflate),u=k(j.inflateRaw),v="function"==typeof j.zstdDecompress?k(j.zstdDecompress):null,w=new Set(["connection","proxy-connection","keep-alive","proxy-authenticate","proxy-authorization","te","trailer","transfer-encoding","upgrade"]);function x(a){return String(a||"").trim().replace(/^\[|\]$/g,"").toLowerCase()}function y(a,b=443){let c=String(a||"").trim();if(!c)throw Error("Missing CONNECT authority");if(c.startsWith("[")){let a=c.indexOf("]");if(a<0)throw Error("Invalid IPv6 CONNECT authority");let d=c.slice(1,a),e=c.slice(a+1);if(e&&!e.startsWith(":"))throw Error("Invalid IPv6 CONNECT authority");let f=e?Number(e.slice(1)):b;if(!Number.isInteger(f)||f<1||f>65535)throw Error("Invalid CONNECT port");return{host:d,port:f}}let d=c.lastIndexOf(":");if(d>0&&c.indexOf(":")===d){let a=c.slice(d+1);if(!/^\d+$/.test(a))throw Error("Invalid CONNECT port");let b=Number(a);if(!Number.isInteger(b)||b<1||b>65535)throw Error("Invalid CONNECT port");return{host:c.slice(0,d),port:b}}return{host:c,port:b}}function z(a,b=[]){let c=x(a);return b.some(a=>{let b=x(a);if(!b)return!1;if(b===c)return!0;if(b.startsWith("*.")){let a=b.slice(1);return c.endsWith(a)&&c.length>a.length}return!1})}function A(a={},{stripInternal:b=!0}={}){let c=new Set([...w,...String(a.connection||"").split(",").map(a=>a.trim().toLowerCase()).filter(Boolean)]),d={};for(let[e,f]of Object.entries(a||{})){let a=e.toLowerCase();!c.has(a)&&(b&&(a.startsWith("x-9r-")||a.startsWith("x-bluerouter-"))||(d[e]=f))}return d}async function B(a,b,c){let d=String(b||"").split(",").map(a=>a.trim().toLowerCase()).filter(a=>a&&"identity"!==a);if(!d.length||!a.length)return{buffer:a,decoded:!1,contentEncoding:d.join(", ")||null};let e=a;for(let a of[...d].reverse()){let b={maxOutputLength:c};if("br"===a)e=await r(e,b);else if("gzip"===a||"x-gzip"===a)e=await s(e,b);else if("deflate"===a)try{e=await t(e,b)}catch{e=await u(e,b)}else if("zstd"===a&&v)e=await v(e,b);else throw Error(`Unsupported content-encoding: ${a}`)}return{buffer:e,decoded:!0,contentEncoding:d.join(", ")}}async function C(a,b,c){let d=String(b||"").split(",").map(a=>a.trim().toLowerCase()).filter(a=>a&&"identity"!==a);if(1!==d.length||!a.length)return null;let e=d[0],f={maxOutputLength:c,finishFlush:j.constants.Z_SYNC_FLUSH};try{if("gzip"===e||"x-gzip"===e)return await s(a,f);if("deflate"===e)try{return await t(a,f)}catch{return await u(a,f)}if("br"===e)return await r(a,{maxOutputLength:c,finishFlush:j.constants.BROTLI_OPERATION_FLUSH})}catch{}return null}class D{constructor(a){this.limitBytes=Math.max(0,Number(a)||0),this.parts=[],this.capturedBytes=0,this.totalBytes=0,this.truncated=!1,this.hash=i.createHash("sha256"),this.finished=!1}add(a){if(!a||this.finished)return;let b=Buffer.isBuffer(a)?a:Buffer.from(a);if(this.hash.update(b),this.totalBytes+=b.length,this.capturedBytes>=this.limitBytes){b.length&&(this.truncated=!0);return}let c=this.limitBytes-this.capturedBytes,d=b.length>c?b.subarray(0,c):b;d.length&&(this.parts.push(Buffer.from(d)),this.capturedBytes+=d.length),d.length<b.length&&(this.truncated=!0)}async finish(a="",b=""){if(this.finished)throw Error("Audit capture was finalized more than once");this.finished=!0;let c=this.hash.digest("hex"),d=Buffer.concat(this.parts),e=String(b||"").trim().toLowerCase(),f=d,g=!1,h=null,i=!1,j=null,k=null,l=!1,n=Math.max(1048576,Math.min(0x4000000,Math.max(8*this.limitBytes,this.limitBytes)));if(this.limitBytes>0&&d.length&&e&&"identity"!==e)if(this.truncated){let a=await C(d,e,n);a&&a.length?(f=a,g=!0,l=!0,h=a.length,i=!0):(j=`Compressed ${e} capture was truncated before decode`,k=`[${e} audit body capture truncated; decoded body unavailable]`)}else try{let a=await B(d,e,n);f=a.buffer,g=a.decoded,h=f.length,f.length>this.limitBytes&&(f=f.subarray(0,this.limitBytes),i=!0)}catch(a){j=o(a?.message||String(a)),k=`[Unable to decode ${e} audit body: ${j}]`}let p=/json|text|javascript|xml|x-www-form-urlencoded|event-stream/i.test(a||"");return{body:null!==k?k:p||!a?m(f.toString("utf8"),a):`[${f.length} bytes captured; binary body omitted]`,capturedBytes:this.capturedBytes,totalBytes:this.totalBytes,wireSha256:c,truncated:this.truncated||i,...e&&"identity"!==e?{contentEncoding:e}:{},...g?{decoded:!0,decodedBytes:h}:{},...l?{decodePartial:!0}:{},...j?{decodeError:j}:{}}}}function E(a){let b=x(a);return"api.anthropic.com"===b||b.endsWith(".anthropic.com")||"claude.ai"===b||b.endsWith(".claude.ai")?"anthropic":"api.openai.com"===b||b.endsWith(".openai.com")||"chatgpt.com"===b||b.endsWith(".chatgpt.com")?"openai":"other"}function F(a){if(!a||"string"!=typeof a)return null;try{let b=JSON.parse(a);return"string"==typeof b?.model?b.model:null}catch{return null}}function G(a,b,c){try{let d=String(c||b);a.end(`HTTP/1.1 ${b}\r
+"use strict";(()=>{var a={};a.id=920,a.ids=[920],a.modules={261:a=>{a.exports=require("next/dist/shared/lib/router/utils/app-paths")},1932:a=>{a.exports=require("url")},3295:a=>{a.exports=require("next/dist/server/app-render/after-task-async-storage.external.js")},3697:(a,b,c)=>{c.r(b),c.d(b,{handler:()=>z,patchFetch:()=>y,routeModule:()=>u,serverHooks:()=>x,workAsyncStorage:()=>v,workUnitAsyncStorage:()=>w});var d=c(19225),e=c(84006),f=c(8317),g=c(99373),h=c(34775),i=c(24235),j=c(261),k=c(54365),l=c(90771),m=c(73461),n=c(67798),o=c(92280),p=c(62018),q=c(45696),r=c(47929),s=c(86439),t=c(37527);let u=new d.AppRouteRouteModule({definition:{kind:e.RouteKind.APP_ROUTE,page:"/api/audit-proxy/route",pathname:"/api/audit-proxy",filename:"route",bundlePath:"app/api/audit-proxy/route"},distDir:".next-cli-build",relativeProjectDir:"",resolvedPagePath:"D:\\bluerouter\\src\\app\\api\\audit-proxy\\route.js",nextConfigOutput:"standalone",userland:()=>c(87496),...{}}),{workAsyncStorage:v,workUnitAsyncStorage:w,serverHooks:x}=u;function y(){return(0,f.patchFetch)({workAsyncStorage:v,workUnitAsyncStorage:w})}async function z(a,b,c){c.requestMeta&&(0,g.setRequestMeta)(a,c.requestMeta),u.isDev&&(0,g.addRequestMeta)(a,"devRequestTimingInternalsEnd",process.hrtime.bigint());let d="/api/audit-proxy/route";"/index"===d&&(d="/");let f=await u.prepare(a,b,{srcPage:d,multiZoneDraftMode:!1});if(!f)return b.statusCode=400,b.end("Bad Request"),null==c.waitUntil||c.waitUntil.call(c,Promise.resolve()),null;let{buildId:v,deploymentId:w,params:x,nextConfig:y,parsedUrl:z,isDraftMode:A,prerenderManifest:B,routerServerContext:C,isOnDemandRevalidate:D,revalidateOnlyGenerated:E,resolvedPathname:F,clientReferenceManifest:G,serverActionsManifest:H}=f,I=(0,j.normalizeAppPath)(d),J=!!(B.dynamicRoutes[I]||B.routes[F]),K=async()=>((null==C?void 0:C.render404)?await C.render404(a,b,z,!1):b.end("This page could not be found"),null);if(J&&!A){let a=!!B.routes[F],b=B.dynamicRoutes[I];if(b&&!1===b.fallback&&!a){if(y.adapterPath)return await K();throw new s.NoFallbackError}}let L=null;!J||u.isDev||A||(L="/index"===(L=F)?"/":L);let M=!0===u.isDev||!J,N=J&&!M;H&&G&&(0,i.setManifestsSingleton)({page:d,clientReferenceManifest:G,serverActionsManifest:H});let O=a.method||"GET",P=(0,h.getTracer)(),Q=P.getActiveScopeSpan(),R=!!(null==C?void 0:C.isWrappedByNextServer),S=!!(0,g.getRequestMeta)(a,"minimalMode"),T=(0,g.getRequestMeta)(a,"incrementalCache")||await u.getIncrementalCache(a,y,B,S);null==T||T.resetRequestCache(),globalThis.__incrementalCache=T;let U={params:x,previewProps:B.preview,renderOpts:{experimental:{authInterrupts:!!y.experimental.authInterrupts,useCacheTimeout:y.experimental.useCacheTimeout},cacheComponents:!!y.cacheComponents,validationLevel:y.experimental.instantInsights.validationLevel,supportsDynamicResponse:M,incrementalCache:T,hmrRefreshHash:(0,g.getRequestMeta)(a,"hmrRefreshHash"),cacheLifeProfiles:y.cacheLife,staticPageGenerationTimeout:y.staticPageGenerationTimeout,waitUntil:c.waitUntil,onClose:a=>{b.on("close",a)},onAfterTaskError:void 0,onInstrumentationRequestError:(b,c,d,e)=>u.onRequestError(a,b,d,e,C)},sharedContext:{buildId:v,deploymentId:w}},V=new k.NodeNextRequest(a),W=new k.NodeNextResponse(b),X=l.NextRequestAdapter.fromNodeNextRequest(V,(0,l.signalFromNodeResponse)(b)),Y=async({previousCacheEntry:e})=>{try{if(!S&&D&&E&&!e)return b.statusCode=404,b.setHeader("x-nextjs-cache","REVALIDATED"),b.end("This page could not be found"),null;let d=await u.handle(X,U);a.fetchMetrics=U.renderOpts.fetchMetrics;let f=U.renderOpts.pendingWaitUntil;f&&c.waitUntil&&(c.waitUntil(f),f=void 0);let g=U.renderOpts.collectedTags;if(!J)return await (0,o.I)(V,W,d,f),null;{let a=await d.blob(),b=(0,p.toNodeOutgoingHttpHeaders)(d.headers);g&&(b[r.NEXT_CACHE_TAGS_HEADER]=g),!b["content-type"]&&a.type&&(b["content-type"]=a.type);let c=void 0!==U.renderOpts.collectedRevalidate&&!(U.renderOpts.collectedRevalidate>=r.INFINITE_CACHE)&&U.renderOpts.collectedRevalidate,e=void 0===U.renderOpts.collectedExpire||U.renderOpts.collectedExpire>=r.INFINITE_CACHE?!1!==c&&c>0?y.expireTime:void 0:U.renderOpts.collectedExpire;return{value:{kind:t.CachedRouteKind.APP_ROUTE,status:d.status,body:Buffer.from(await a.arrayBuffer()),headers:b},cacheControl:{revalidate:c,expire:e}}}}catch(b){throw(null==e?void 0:e.isStale)&&await u.onRequestError(a,b,{routerKind:"App Router",routePath:d,routeType:"route",revalidateReason:(0,n.getRevalidateReason)({isStaticGeneration:N,isOnDemandRevalidate:D})},!1,C),b}},Z=async(d,f)=>{try{var g,i;let d=await u.handleResponse({req:a,nextConfig:y,cacheKey:L,routeKind:e.RouteKind.APP_ROUTE,isFallback:!1,prerenderManifest:B,isRoutePPREnabled:!1,isOnDemandRevalidate:D,revalidateOnlyGenerated:E,responseGenerator:Y,waitUntil:c.waitUntil,isMinimalMode:S});if(!J)return;if((null==d||null==(g=d.value)?void 0:g.kind)!==t.CachedRouteKind.APP_ROUTE)throw Object.defineProperty(Error(`Invariant: app-route received invalid cache entry ${null==d||null==(i=d.value)?void 0:i.kind}`),"__NEXT_ERROR_CODE",{value:"E701",enumerable:!1,configurable:!0});S||b.setHeader("x-nextjs-cache",D?"REVALIDATED":d.isMiss?"MISS":d.isStale?"STALE":"HIT"),A&&b.setHeader("Cache-Control","private, no-cache, no-store, max-age=0, must-revalidate");let f=(0,p.fromNodeOutgoingHttpHeaders)(d.value.headers);S&&J||f.delete(r.NEXT_CACHE_TAGS_HEADER),!d.cacheControl||b.getHeader("Cache-Control")||f.get("Cache-Control")||f.set("Cache-Control",(0,q.getCacheControlHeader)(d.cacheControl)),await (0,o.I)(V,W,new Response(d.value.body,{headers:f,status:d.value.status||200}));return}catch(b){if(b instanceof s.NoFallbackError||await u.onRequestError(a,b,{routerKind:"App Router",routePath:I,routeType:"route",revalidateReason:(0,n.getRevalidateReason)({isStaticGeneration:N,isOnDemandRevalidate:D})},!1,C),J)throw b;await (0,o.I)(V,W,new Response(null,{status:500}));return}finally{(()=>{if(!d)return;let a=b.statusCode;d.setAttributes({"http.status_code":a,"next.rsc":!1}),a&&a>=500&&(d.setStatus({code:h.SpanStatusCode.ERROR}),d.setAttribute("error.type",a.toString()));let c=P.getRootSpanAttributes();if(!c)return;if(c.get("next.span_type")!==m.BaseServerSpan.handleRequest)return console.warn(`Unexpected root span type '${c.get("next.span_type")}'. Please report this Next.js issue https://github.com/vercel/next.js`);let e=c.get("next.route")||I,g=`${O} ${e}`;d.setAttributes({"next.route":e,"http.route":e,"next.span_name":g}),d.updateName(g),f&&f!==d&&(f.setAttribute("http.route",e),f.updateName(g))})()}};if(R&&Q)await Z(Q,void 0);else{let b=P.getActiveScopeSpan();await P.withPropagatedContext(a.headers,()=>P.trace(m.BaseServerSpan.handleRequest,{spanName:`${O} ${d}`,kind:h.SpanKind.SERVER,attributes:{"http.method":O,"http.target":a.url}},a=>Z(a,b)),void 0,!R)}}},4573:a=>{a.exports=require("node:buffer")},4984:a=>{a.exports=require("readline")},5565:(a,b,c)=>{let d=c(91645);function e(a){let b=String(a||"").trim().toLowerCase();b.startsWith("[")&&b.endsWith("]")&&(b=b.slice(1,-1));let c=b.indexOf("%");return c>=0&&(b=b.slice(0,c)),b.startsWith("::ffff:")&&4===d.isIP(b.slice(7))&&(b=b.slice(7)),b}function f(a){return Buffer.from(a.split(".").map(a=>Number(a)))}function g(a,b){return 4===b?f(a):function(a){let b=e(a),c=b.lastIndexOf(":");if(c>=0){let a=b.slice(c+1);if(4===d.isIP(a)){let d=f(a),e=(d[0]<<8|d[1]).toString(16),g=(d[2]<<8|d[3]).toString(16);b=`${b.slice(0,c)}:${e}:${g}`}}let g=b.split("::");if(g.length>2)throw Error("Invalid IPv6 address");let h=g[0]?g[0].split(":").filter(Boolean):[],i=2===g.length&&g[1]?g[1].split(":").filter(Boolean):[],j=8-h.length-i.length;if(1===g.length&&0!==j||j<0)throw Error("Invalid IPv6 address");let k=2===g.length?[...h,...Array(j).fill("0"),...i]:h;if(8!==k.length)throw Error("Invalid IPv6 address");let l=Buffer.alloc(16);return k.forEach((a,b)=>{let c=Number.parseInt(a||"0",16);if(!Number.isInteger(c)||c<0||c>65535)throw Error("Invalid IPv6 address");l[2*b]=c>>8&255,l[2*b+1]=255&c}),l}(a)}function h(a){let b=String(a||"").trim();if(!b)throw Error("Empty IP rule");let c=b.indexOf("/"),f=e(c>=0?b.slice(0,c):b),g=d.isIP(f);if(!g)throw Error(`Invalid client IP/CIDR: ${b}`);let h=4===g?32:128,i=c>=0?Number(b.slice(c+1)):h;if(!Number.isInteger(i)||i<0||i>h)throw Error(`Invalid CIDR prefix: ${b}`);return{text:c>=0?`${f}/${i}`:f,ip:f,family:g,prefix:i}}a.exports={normalizeIp:e,parseIpRule:h,normalizeAllowedClientIps:function(a){let b=Array.isArray(a)?a:String(a||"").split(/[\r\n,]+/),c=[],d=new Set;for(let a of b){let b=String(a||"").trim();if(!b)continue;let e=h(b);d.has(e.text)||(d.add(e.text),c.push(e.text))}return c},clientIpMatches:function(a,b=[]){let c=e(a),f=d.isIP(c);if(!f)return!1;let i=g(c,f);for(let a of b||[]){let b;try{b=h(a)}catch{continue}if(b.family===f&&function(a,b,c){let d=Math.floor(c/8),e=c%8;for(let c=0;c<d;c+=1)if(a[c]!==b[c])return!1;if(!e)return!0;let f=255<<8-e&255;return(a[d]&f)==(b[d]&f)}(i,g(b.ip,b.family),b.prefix))return!0}return!1}}},8128:a=>{a.exports=require("next/dist/server/runtime-reacts.external.js")},10846:a=>{a.exports=require("next/dist/compiled/next-server/app-page.runtime.prod.js")},14985:a=>{a.exports=require("dns")},19121:a=>{a.exports=require("next/dist/server/app-render/action-async-storage.external.js")},19771:a=>{a.exports=require("process")},21820:a=>{a.exports=require("os")},27910:a=>{a.exports=require("stream")},28354:a=>{a.exports=require("util")},29021:a=>{a.exports=require("fs")},29294:a=>{a.exports=require("next/dist/server/app-render/work-async-storage.external.js")},33873:a=>{a.exports=require("path")},34631:a=>{a.exports=require("tls")},41204:a=>{a.exports=require("string_decoder")},43096:(a,b,c)=>{let d=c(29021),e=c(33873),{DATA_DIR:f}=c(82193),{normalizeAllowedClientIps:g}=c(5565),{normalizeAllowedToolsInput:h}=c(98586),i=e.join(f,"audit-gateway"),j=e.join(i,"config.json"),k=e.join(i,"audit.jsonl"),l=e.join(i,"logs"),m=Object.freeze({enabled:!1,bindHost:"127.0.0.1",port:3128,clientProxyHost:"",clientIpFilterEnabled:!1,allowedClientIps:[],clientToolFilterEnabled:!1,allowedClientTools:[],allowedHosts:["api.anthropic.com","*.anthropic.com","claude.ai","*.claude.ai","api.openai.com","*.openai.com","chatgpt.com","*.chatgpt.com"],passthroughUnknown:!0,captureBodies:!0,captureLimitBytes:2097152,retentionDays:7,verifyUpstreamTls:!0,connectTimeoutMs:1e4,tlsHandshakeTimeoutMs:1e4,responseHeaderTimeoutMs:3e4,idleTimeoutMs:9e5,shutdownGraceMs:1500,allowPlainHttp:!1,allowedConnectPorts:[443]});function n(){return{...m,allowedClientIps:[...m.allowedClientIps],allowedClientTools:[...m.allowedClientTools],allowedHosts:[...m.allowedHosts],allowedConnectPorts:[...m.allowedConnectPorts]}}function o(){d.mkdirSync(i,{recursive:!0}),d.mkdirSync(l,{recursive:!0})}function p(a){return[...new Set((Array.isArray(a)?a:String(a||"").split(/[\r\n,]+/)).map(a=>String(a||"").trim().toLowerCase()).filter(Boolean).filter(a=>!a.includes("://")&&/^[*a-z0-9._-]+$/.test(a)))]}function q(a,b,c,d,e){let f=null==a?b:Number(a);if(!Number.isInteger(f)||f<c||f>d)throw Error(`${e} must be between ${c} and ${d}`);return f}function r(a={}){let b={...m,...a},c=q(b.port,m.port,1,65535,"Proxy port"),d=Number(b.captureLimitBytes);if(!Number.isFinite(d)||d<0||d>0x1000000)throw Error("Capture limit must be between 0 and 16 MB");let e=q(b.retentionDays,m.retentionDays,1,365,"Retention days"),f=q(b.connectTimeoutMs,m.connectTimeoutMs,1e3,12e4,"Connect timeout"),i=q(b.tlsHandshakeTimeoutMs,m.tlsHandshakeTimeoutMs,1e3,12e4,"TLS handshake timeout"),j=q(b.responseHeaderTimeoutMs,m.responseHeaderTimeoutMs,1e3,3e5,"Response header timeout"),k=q(b.idleTimeoutMs,m.idleTimeoutMs,3e4,36e5,"Idle timeout"),l=q(b.shutdownGraceMs,m.shutdownGraceMs,0,3e4,"Shutdown grace period"),n=String(b.bindHost||"127.0.0.1").trim();if(!n||/\s/.test(n))throw Error("Invalid bind address");let o=String(b.clientProxyHost||"").trim();if(/\s/.test(o)||o.includes("://"))throw Error("Client proxy host must be a hostname or IP without protocol");let s=!0===b.clientIpFilterEnabled,t=g(b.allowedClientIps);if(s&&0===t.length)throw Error("Client IP filter requires at least one allowed IP or CIDR");let u=!0===b.clientToolFilterEnabled,v=h(b.allowedClientTools);if(u&&0===v.length)throw Error("Client tool filter requires at least one allowed tool");return{enabled:!0===b.enabled,bindHost:n,port:c,clientProxyHost:o,clientIpFilterEnabled:s,allowedClientIps:t,clientToolFilterEnabled:u,allowedClientTools:v,allowedHosts:p(b.allowedHosts),passthroughUnknown:!1!==b.passthroughUnknown,captureBodies:!1!==b.captureBodies,captureLimitBytes:Math.round(d),retentionDays:e,verifyUpstreamTls:!0,connectTimeoutMs:f,tlsHandshakeTimeoutMs:i,responseHeaderTimeoutMs:j,idleTimeoutMs:k,shutdownGraceMs:l,allowPlainHttp:!1,allowedConnectPorts:[443]}}a.exports={AUDIT_DIR:i,CONFIG_PATH:j,AUDIT_LOG_PATH:k,AUDIT_LOG_DIR:l,DEFAULT_CONFIG:m,ensureAuditDir:o,loadConfig:function(){if(o(),!d.existsSync(j))return n();try{return r(JSON.parse(d.readFileSync(j,"utf8")))}catch(a){return console.warn(`[audit-proxy] invalid config ignored: ${a.message||a}`),n()}},saveConfig:function(a){o();let b=r(a),c=`${j}.tmp`;return d.writeFileSync(c,`${JSON.stringify(b,null,2)}
+`,{mode:384}),d.renameSync(c,j),b},validateConfig:r,normalizeAllowedHosts:p,normalizeAllowedClientIps:g}},44870:a=>{a.exports=require("next/dist/compiled/next-server/app-route.runtime.prod.js")},45372:(a,b,c)=>{let d=c(81630),e=c(73496),f=c(55591),g=c(91645),h=c(34631),i=c(55511),j=c(74075),{promisify:k}=c(28354),{redactHeaders:l,redactBodyText:m,redactUrlPath:n,scrubString:o}=c(48350),{extractUsageFromBody:p}=c(86455),{resolvePublicTarget:q}=c(78864),{normalizeAllowedTools:r,clientToolMatches:s,describeUserAgent:t}=c(98586),u=k(j.brotliDecompress),v=k(j.gunzip),w=k(j.inflate),x=k(j.inflateRaw),y="function"==typeof j.zstdDecompress?k(j.zstdDecompress):null,z=new Set(["connection","proxy-connection","keep-alive","proxy-authenticate","proxy-authorization","te","trailer","transfer-encoding","upgrade"]);function A(a){return String(a||"").trim().replace(/^\[|\]$/g,"").toLowerCase()}function B(a,b=443){let c=String(a||"").trim();if(!c)throw Error("Missing CONNECT authority");if(c.startsWith("[")){let a=c.indexOf("]");if(a<0)throw Error("Invalid IPv6 CONNECT authority");let d=c.slice(1,a),e=c.slice(a+1);if(e&&!e.startsWith(":"))throw Error("Invalid IPv6 CONNECT authority");let f=e?Number(e.slice(1)):b;if(!Number.isInteger(f)||f<1||f>65535)throw Error("Invalid CONNECT port");return{host:d,port:f}}let d=c.lastIndexOf(":");if(d>0&&c.indexOf(":")===d){let a=c.slice(d+1);if(!/^\d+$/.test(a))throw Error("Invalid CONNECT port");let b=Number(a);if(!Number.isInteger(b)||b<1||b>65535)throw Error("Invalid CONNECT port");return{host:c.slice(0,d),port:b}}return{host:c,port:b}}function C(a,b=[]){let c=A(a);return b.some(a=>{let b=A(a);if(!b)return!1;if(b===c)return!0;if(b.startsWith("*.")){let a=b.slice(1);return c.endsWith(a)&&c.length>a.length}return!1})}function D(a={},{stripInternal:b=!0}={}){let c=new Set([...z,...String(a.connection||"").split(",").map(a=>a.trim().toLowerCase()).filter(Boolean)]),d={};for(let[e,f]of Object.entries(a||{})){let a=e.toLowerCase();!c.has(a)&&(b&&(a.startsWith("x-9r-")||a.startsWith("x-bluerouter-"))||(d[e]=f))}return d}async function E(a,b,c){let d=String(b||"").split(",").map(a=>a.trim().toLowerCase()).filter(a=>a&&"identity"!==a);if(!d.length||!a.length)return{buffer:a,decoded:!1,contentEncoding:d.join(", ")||null};let e=a;for(let a of[...d].reverse()){let b={maxOutputLength:c};if("br"===a)e=await u(e,b);else if("gzip"===a||"x-gzip"===a)e=await v(e,b);else if("deflate"===a)try{e=await w(e,b)}catch{e=await x(e,b)}else if("zstd"===a&&y)e=await y(e,b);else throw Error(`Unsupported content-encoding: ${a}`)}return{buffer:e,decoded:!0,contentEncoding:d.join(", ")}}async function F(a,b,c){let d=String(b||"").split(",").map(a=>a.trim().toLowerCase()).filter(a=>a&&"identity"!==a);if(1!==d.length||!a.length)return null;let e=d[0],f={maxOutputLength:c,finishFlush:j.constants.Z_SYNC_FLUSH};try{if("gzip"===e||"x-gzip"===e)return await v(a,f);if("deflate"===e)try{return await w(a,f)}catch{return await x(a,f)}if("br"===e)return await u(a,{maxOutputLength:c,finishFlush:j.constants.BROTLI_OPERATION_FLUSH})}catch{}return null}class G{constructor(a){this.limitBytes=Math.max(0,Number(a)||0),this.parts=[],this.capturedBytes=0,this.totalBytes=0,this.truncated=!1,this.hash=i.createHash("sha256"),this.finished=!1}add(a){if(!a||this.finished)return;let b=Buffer.isBuffer(a)?a:Buffer.from(a);if(this.hash.update(b),this.totalBytes+=b.length,this.capturedBytes>=this.limitBytes){b.length&&(this.truncated=!0);return}let c=this.limitBytes-this.capturedBytes,d=b.length>c?b.subarray(0,c):b;d.length&&(this.parts.push(Buffer.from(d)),this.capturedBytes+=d.length),d.length<b.length&&(this.truncated=!0)}async finish(a="",b=""){if(this.finished)throw Error("Audit capture was finalized more than once");this.finished=!0;let c=this.hash.digest("hex"),d=Buffer.concat(this.parts),e=String(b||"").trim().toLowerCase(),f=d,g=!1,h=null,i=!1,j=null,k=null,l=!1,n=Math.max(1048576,Math.min(0x4000000,Math.max(8*this.limitBytes,this.limitBytes)));if(this.limitBytes>0&&d.length&&e&&"identity"!==e)if(this.truncated){let a=await F(d,e,n);a&&a.length?(f=a,g=!0,l=!0,h=a.length,i=!0):(j=`Compressed ${e} capture was truncated before decode`,k=`[${e} audit body capture truncated; decoded body unavailable]`)}else try{let a=await E(d,e,n);f=a.buffer,g=a.decoded,h=f.length,f.length>this.limitBytes&&(f=f.subarray(0,this.limitBytes),i=!0)}catch(a){j=o(a?.message||String(a)),k=`[Unable to decode ${e} audit body: ${j}]`}let p=/json|text|javascript|xml|x-www-form-urlencoded|event-stream/i.test(a||"");return{body:null!==k?k:p||!a?m(f.toString("utf8"),a):`[${f.length} bytes captured; binary body omitted]`,capturedBytes:this.capturedBytes,totalBytes:this.totalBytes,wireSha256:c,truncated:this.truncated||i,...e&&"identity"!==e?{contentEncoding:e}:{},...g?{decoded:!0,decodedBytes:h}:{},...l?{decodePartial:!0}:{},...j?{decodeError:j}:{}}}}function H(a){let b=A(a);return"api.anthropic.com"===b||b.endsWith(".anthropic.com")||"claude.ai"===b||b.endsWith(".claude.ai")?"anthropic":"api.openai.com"===b||b.endsWith(".openai.com")||"chatgpt.com"===b||b.endsWith(".chatgpt.com")?"openai":"other"}function I(a){if(!a||"string"!=typeof a)return null;try{let b=JSON.parse(a);return"string"==typeof b?.model?b.model:null}catch{return null}}function J(a,b,c){try{let d=String(c||b);a.end(`HTTP/1.1 ${b}\r
 Connection: close\r
 Content-Type: text/plain; charset=utf-8\r
 Content-Length: ${Buffer.byteLength(d)}\r
 \r
-${d}`)}catch{try{a.destroy()}catch{}}}function H(a={}){let b={};for(let[c,d]of Object.entries(a||{}))b[c]=d;return b}async function I(a){let b=await a.requestCapture.finish(String(a.requestHeaders["content-type"]||""),String(a.requestHeaders["content-encoding"]||"")),c=String(a.responseHeaders?.["content-type"]||""),d=await a.responseCapture.finish(c,String(a.responseHeaders?.["content-encoding"]||"")),e=E(a.target.host),f=n(a.path),g=p({provider:e,body:d.body,contentType:c,path:f}),h=F(b.body)||g?.model||null;return{id:i.randomUUID(),timestamp:new Date().toISOString(),protocol:a.protocol||"http/1.1",client:{ip:a.clientIp||"",port:a.clientPort||null,userAgent:String(a.requestHeaders["user-agent"]||"")},provider:e,host:x(a.target.host),port:a.target.port,method:a.method,path:f,model:h,usage:g,status:a.statusCode||null,durationMs:Date.now()-a.startedAt,error:a.error?o(a.error.message||a.error):null,request:{headers:l(a.requestHeaders),...b},response:{headers:l(a.responseHeaders||{}),...d}}}a.exports={createAuditProxy:function(a={},b={}){let c={allowedHosts:[],passthroughUnknown:!0,captureBodies:!0,captureLimitBytes:2097152,verifyUpstreamTls:!0,allowedConnectPorts:[443],connectTimeoutMs:1e4,tlsHandshakeTimeoutMs:1e4,responseHeaderTimeoutMs:3e4,idleTimeoutMs:9e5,allowPlainHttp:!1,clientAlpnProtocols:["http/1.1"],...a};if(!0!==c.verifyUpstreamTls)throw Error("Upstream TLS verification is mandatory in Audit Proxy mode");let i=b.certificateProvider;if("function"!=typeof i)throw Error("certificateProvider is required");let j="function"==typeof b.onAudit?b.onAudit:()=>{},k="function"==typeof b.onAuditJob?b.onAuditJob:null,l="function"==typeof b.resolveTarget?b.resolveTarget:(a,b)=>q(a,b,{allowedPorts:c.allowedConnectPorts}),m=b.upstreamCa,n=new Set,o=new Map,p=new WeakMap,r=new Set;function s(a){return!a||n.has(a)||(n.add(a),a.once?.("close",()=>n.delete(a))),a}function t(a,b){try{"function"==typeof a.destroy?a.destroy(b):"function"==typeof a.close&&a.close()}catch{}}function u(a){let b=()=>I(a);if(k){try{k(b)}catch(a){console.warn("[audit-proxy] audit enqueue failed:",a?.message||a)}return}setImmediate(()=>{Promise.resolve().then(b).then(j).catch(a=>console.warn("[audit-proxy] audit callback failed:",a?.message||a))})}function v({requestHeaders:a,method:b,path:c,target:d,requestCapture:e,responseCapture:f,responseHeaders:g,statusCode:h,startedAt:i,error:j,socket:k,protocol:l}){let m;return{requestHeaders:H(a),method:b,path:c,target:d,requestCapture:e,responseCapture:f,responseHeaders:H(g),statusCode:h,startedAt:i,error:j,clientIp:(m=k?.remoteAddress||"").startsWith("::ffff:")?m.slice(7):m,clientPort:k?.remotePort||null,protocol:l}}let w="This proxy does not support WebSocket connections. Use the HTTP streaming transport instead - most clients fall back to it automatically.";function x(a,b,d){if(!d)return;let e=new D(c.captureBodies?c.captureLimitBytes:0);e.add(Buffer.from(w)),u(v({requestHeaders:a.headers,method:a.method,path:a.url,target:d,requestCapture:new D(0),responseCapture:e,responseHeaders:{"content-type":"text/plain; charset=utf-8",connection:"close"},statusCode:501,startedAt:Date.now(),error:null,socket:b,protocol:"http/1.1"}))}async function B(a,b,{expectContinue:d=!1}={}){let e=a.socket.__auditTarget;if(!e){b.writeHead(502,{"content-type":"text/plain"}),b.end("Audit target is missing");return}if(function(a={}){return"string"==typeof a.upgrade&&""!==a.upgrade.trim()}(a.headers)){b.writeHead(501,{"content-type":"text/plain; charset=utf-8",connection:"close"}),b.end(w),x(a,a.socket,e);return}let h=Date.now(),i=new D(c.captureBodies?c.captureLimitBytes:0),j=new D(c.captureBodies?c.captureLimitBytes:0),k=A(a.headers,{stripInternal:!0});k.host=443===e.port?e.host:`${e.host}:${e.port}`;let n=null,p=null,q={},r=null,t=!1,y=!1,z=null,C=(b=null)=>{t||(t=!0,z&&clearTimeout(z),u(v({requestHeaders:a.headers,method:a.method,path:a.url,target:e,requestCapture:i,responseCapture:j,responseHeaders:q,statusCode:r,startedAt:h,error:b,socket:a.socket,protocol:"http/1.1"})))};try{let h,t,u=await l(e.host,e.port);(n=f.request({hostname:e.host,port:e.port,method:a.method,path:a.url,headers:k,rejectUnauthorized:!0,servername:g.isIP(e.host)?void 0:e.host,ca:m,ALPNProtocols:["http/1.1"],lookup:u.lookup,autoSelectFamily:!0,agent:(h=`${e.host}:${e.port}`,(t=o.get(h))||(t=new f.Agent({keepAlive:!0,maxSockets:32,maxFreeSockets:8,timeout:c.idleTimeoutMs}),o.set(h,t)),t)})).on("socket",a=>{if(s(a),a.setNoDelay(!0),a.setKeepAlive(!0,3e4),a.setTimeout(c.idleTimeoutMs,()=>a.destroy(Error("Upstream idle timeout"))),a.connecting){let b=setTimeout(()=>a.destroy(Error("Upstream TLS connect timeout")),c.connectTimeoutMs+c.tlsHandshakeTimeoutMs);b.unref?.();let d=()=>clearTimeout(b);a.once("secureConnect",d),a.once("error",d),a.once("close",d)}}),n.on("continue",()=>{d&&!b.headersSent&&b.writeContinue()}),n.on("information",a=>{102===a.statusCode&&"function"==typeof b.writeProcessing&&b.writeProcessing(),103===a.statusCode&&"function"==typeof b.writeEarlyHints&&b.writeEarlyHints(a.headers||{})}),n.on("response",a=>{p=a,z&&clearTimeout(z),r=a.statusCode||502,q=H(a.headers||{});let c=A(a.headers,{stripInternal:!1});b.writeHead(r,c),b.flushHeaders?.(),a.on("data",c=>{j.add(c),b.write(c)||a.pause()}),b.on("drain",()=>a.resume()),a.on("aborted",()=>{let a=Error("Upstream response aborted");b.destroyed||b.destroy(a),C(a)}),a.on("error",a=>{b.destroyed||b.destroy(a),C(a)}),a.on("end",()=>{if(a.trailers&&Object.keys(a.trailers).length)try{b.addTrailers(A(a.trailers,{stripInternal:!1}))}catch{}y=!0,b.end(),C(null)})}),n.on("error",a=>{b.headersSent?b.destroyed||b.destroy(a):(b.writeHead(502,{"content-type":"application/json"}),b.end(JSON.stringify({error:"Verified upstream TLS request failed"})),y=!0),C(a)}),a.on("data",b=>{i.add(b),n.write(b)||a.pause()}),n.on("drain",()=>a.resume()),a.on("end",()=>{if(a.trailers&&Object.keys(a.trailers).length)try{n.addTrailers(A(a.trailers,{stripInternal:!0}))}catch{}n.end(),z=setTimeout(()=>n.destroy(Error("Upstream response header timeout")),c.responseHeaderTimeoutMs),z.unref?.()}),a.on("aborted",()=>n.destroy(Error("Client request aborted"))),a.on("error",a=>n.destroy(a)),b.on("close",()=>{y||(p?.destroy(Error("Client response closed")),n?.destroy(Error("Client response closed")),C(Error("Client response closed")))})}catch(a){b.headersSent||(b.writeHead(502,{"content-type":"application/json"}),b.end(JSON.stringify({error:"Destination validation or connection failed"})),y=!0),C(a)}}let C=d.createServer((a,b)=>{B(a,b)});async function E(a){return a.upstreamPromise||(a.upstreamPromise=(async()=>{let b=a.target,d=await l(b.host,b.port),f=s(h.connect({host:b.host,port:b.port,servername:g.isIP(b.host)?void 0:b.host,rejectUnauthorized:!0,ca:m,ALPNProtocols:["h2"],lookup:d.lookup,autoSelectFamily:!0}));f.setNoDelay(!0),f.setKeepAlive(!0,3e4);let i=setTimeout(()=>f.destroy(Error("Upstream HTTP/2 TLS connect timeout")),c.connectTimeoutMs+c.tlsHandshakeTimeoutMs);i.unref?.(),f.once("secureConnect",()=>{clearTimeout(i),"h2"!==f.alpnProtocol&&f.destroy(Error("Upstream did not negotiate HTTP/2"))}),f.once("error",()=>clearTimeout(i)),f.once("close",()=>clearTimeout(i));let j=`https://${b.host}${443===b.port?"":`:${b.port}`}`,k=e.connect(j,{createConnection:()=>f,settings:{enablePush:!1}});return r.add(k),k.setTimeout(c.idleTimeoutMs,()=>k.destroy(Error("Upstream HTTP/2 idle timeout"))),k.once("close",()=>r.delete(k)),await new Promise((a,b)=>{let d=setTimeout(()=>b(Error("Upstream HTTP/2 session timeout")),c.connectTimeoutMs+c.tlsHandshakeTimeoutMs);d.unref?.();let e=(a,b)=>{clearTimeout(d),k.removeListener("connect",f),k.removeListener("error",g),a(b)},f=()=>e(a,k),g=a=>e(b,a);k.once("connect",f),k.once("error",g)}),k})().catch(b=>{throw a.upstreamPromise=null,b})),a.upstreamPromise}async function F(a,b){let d=p.get(a.session),f=d?.target;if(!d||!f){a.respond({":status":502,"content-type":"text/plain"}),a.end("Audit target is missing");return}a.pause();let g=Date.now(),h=new D(c.captureBodies?c.captureLimitBytes:0),i=new D(c.captureBodies?c.captureLimitBytes:0),j={},k=null,l=!1,m=!1,n=null,o=null,q=null,r=(c=null)=>{l||(l=!0,u(v({requestHeaders:b,method:b[":method"]||"GET",path:b[":path"]||"/",target:f,requestCapture:h,responseCapture:i,responseHeaders:j,statusCode:k,startedAt:g,error:c,socket:a.session.socket,protocol:"h2"})))};try{(n=(await E(d)).request(function(a,b){let c=A(a,{stripInternal:!0}),d={":method":a[":method"]||"GET",":path":a[":path"]||"/",":scheme":"https",":authority":443===b.port?b.host:`${b.host}:${b.port}`};for(let[a,b]of Object.entries(c))a.startsWith(":")||(d[a.toLowerCase()]=b);return d}(b,f),{endStream:!1,waitForTrailers:!0})).setTimeout(c.idleTimeoutMs,()=>n.close(e.constants.NGHTTP2_CANCEL)),a.setTimeout(c.idleTimeoutMs,()=>a.close(e.constants.NGHTTP2_CANCEL)),n.on("response",b=>{j=H(b),k=Number(b[":status"]||502),a.respond(function(a){let b=A(a,{stripInternal:!1}),c={":status":Number(a[":status"]||502)};for(let[a,d]of Object.entries(b))a.startsWith(":")||(c[a.toLowerCase()]=d);return c}(b),{waitForTrailers:!0})}),n.on("trailers",a=>{q=A(a,{stripInternal:!1})}),a.on("wantTrailers",()=>{try{a.sendTrailers(q||{})}catch{}}),a.on("trailers",a=>{o=A(a,{stripInternal:!0})}),n.on("wantTrailers",()=>{try{n.sendTrailers(o||{})}catch{}}),a.on("data",b=>{h.add(b),n.write(b)||a.pause()}),n.on("drain",()=>a.resume()),a.on("end",()=>n.end()),n.on("data",b=>{i.add(b),a.write(b)||n.pause()}),a.on("drain",()=>n.resume()),n.on("end",()=>{m=!0,a.end(),r(null)}),n.on("aborted",()=>{let b=Error("Upstream HTTP/2 stream aborted");a.close(e.constants.NGHTTP2_INTERNAL_ERROR),r(b)}),n.on("error",b=>{a.closed||a.close(e.constants.NGHTTP2_INTERNAL_ERROR),r(b)}),a.on("aborted",()=>{n.close(e.constants.NGHTTP2_CANCEL),r(Error("Client HTTP/2 stream aborted"))}),a.on("error",a=>{n.close(e.constants.NGHTTP2_CANCEL),r(a)}),a.on("close",()=>{m||!n||n.closed||(n.close(e.constants.NGHTTP2_CANCEL),r(Error("Client HTTP/2 stream closed")))}),a.resume()}catch(b){a.headersSent||a.closed||a.respond({":status":502,"content-type":"application/json"}),a.closed||a.end(JSON.stringify({error:"Verified upstream HTTP/2 request failed"})),r(b)}}C.on("checkContinue",(a,b)=>{B(a,b,{expectContinue:!0})}),C.on("upgrade",(a,b)=>{G(b,"501 Not Implemented",w),x(a,b,b.__auditTarget)}),C.on("clientError",(a,b)=>t(b)),C.headersTimeout=c.responseHeaderTimeoutMs,C.requestTimeout=0,C.keepAliveTimeout=c.idleTimeoutMs;let J=e.createServer({settings:{enablePush:!1}});J.on("session",a=>{let b={target:a.socket.__auditTarget,upstreamPromise:null};p.set(a,b),a.setTimeout(c.idleTimeoutMs,()=>a.destroy(Error("Client HTTP/2 idle timeout"))),a.once("close",()=>{Promise.resolve(b.upstreamPromise).then(a=>a?.close()).catch(()=>{})})}),J.on("stream",(a,b)=>{F(a,b)}),J.on("sessionError",a=>{console.warn("[audit-proxy] HTTP/2 client session error:",a?.message||a)});let K=d.createServer((a,b)=>{b.writeHead(403,{"content-type":"text/plain; charset=utf-8",connection:"close"}),b.end("Audit Proxy accepts HTTPS CONNECT traffic only")});return K.on("connect",(a,b,d)=>{(async()=>{let e,f;try{e=y(a.url,443),await l(e.host,e.port)}catch(a){G(b,"403 Forbidden",a.message||"Destination is not allowed");return}if(!z(e.host,c.allowedHosts)){if(!c.passthroughUnknown)return void G(b,"403 Forbidden","Host is not in the audit allowlist");let a=!1;try{let f=await l(e.host,e.port),h=s(g.connect({host:e.host,port:e.port,lookup:f.lookup,autoSelectFamily:!0})),i=setTimeout(()=>h.destroy(Error("TCP passthrough connect timeout")),c.connectTimeoutMs);i.unref?.(),h.setNoDelay(!0),h.setKeepAlive(!0,3e4),h.setTimeout(c.idleTimeoutMs,()=>h.destroy(Error("TCP passthrough idle timeout"))),h.once("connect",()=>{clearTimeout(i),a=!0,b.write("HTTP/1.1 200 Connection Established\r\nProxy-Agent: BlueRouter-Audit\r\n\r\n"),d?.length&&h.write(d),h.pipe(b),b.pipe(h)}),h.once("error",()=>{clearTimeout(i),a?t(b):G(b,"502 Bad Gateway","TCP passthrough failed")}),b.once("error",()=>t(h)),b.once("close",()=>t(h))}catch(a){G(b,"502 Bad Gateway",a.message||"TCP passthrough failed")}return}try{if(f=i(e.host),!f?.key||!f?.cert)throw Error("Certificate provider returned no certificate")}catch(a){G(b,"500 Internal Server Error",`Cannot issue audit certificate: ${a.message}`);return}b.write("HTTP/1.1 200 Connection Established\r\nProxy-Agent: BlueRouter-Audit\r\n\r\n"),d?.length&&b.unshift(d);let j=s(new h.TLSSocket(b,{isServer:!0,key:f.key,cert:f.cert,ALPNProtocols:c.clientAlpnProtocols}));j.__auditTarget=e,j.setNoDelay(!0),j.setKeepAlive(!0,3e4),j.setTimeout(c.idleTimeoutMs,()=>j.destroy(Error("Client TLS idle timeout")));let k=setTimeout(()=>j.destroy(Error("Client TLS handshake timeout")),c.tlsHandshakeTimeoutMs);k.unref?.();let m=!1,n=()=>{m||(m=!0,clearTimeout(k),"h2"===j.alpnProtocol?J.emit("connection",j):C.emit("connection",j))};j.once("secure",n),j.once("secureConnect",n),j.once("error",()=>{clearTimeout(k),t(j)}),j.once("close",()=>clearTimeout(k))})().catch(a=>G(b,"500 Internal Server Error",a.message||"Audit CONNECT failed"))}),K.prependListener("connection",a=>{s(a),a.setNoDelay(!0),a.setKeepAlive(!0,3e4)}),K.on("upgrade",(a,b)=>G(b,"501 Not Implemented",w)),K.on("clientError",(a,b)=>t(b)),K.headersTimeout=c.responseHeaderTimeoutMs,K.requestTimeout=0,K.keepAliveTimeout=c.idleTimeoutMs,K.forceCloseAll=()=>{for(let a of r)try{a.destroy()}catch{}for(let a of o.values())try{a.destroy()}catch{}for(let a of[...n])t(a)},K.getActiveConnectionCount=()=>n.size,K.auditConfig=c,K.auditCapabilities={http1:!0,http2:c.clientAlpnProtocols.includes("h2"),plainHttp:!1,publicConnectPorts:[...c.allowedConnectPorts]},K},hostMatches:z,parseAuthority:y,stripHopByHop:A,CaptureBuffer:D,detectProvider:E,extractModel:F,decodeCapturedBuffer:B}},46293:a=>{a.exports=require("sql.js")},48350:a=>{let b=new Set(["authorization","proxy-authorization","x-api-key","api-key","cookie","set-cookie","x-auth-token","x-access-token","cf-access-jwt-assertion"]),c=/(^|[_-])(access[_-]?token|refresh[_-]?token|id[_-]?token|token|api[_-]?key|apikey|password|passwd|secret|authorization|cookie)($|[_-])/i;function d(a){let c=String(a||"").toLowerCase();return b.has(c)||/token|secret|password|credential/i.test(c)}function e(a,b=new WeakSet){if(null==a||"object"!=typeof a)return a;if(b.has(a))return"[CIRCULAR]";if(b.add(a),Array.isArray(a))return a.map(a=>e(a,b));let d={};for(let[f,g]of Object.entries(a))d[f]=c.test(f)?"[REDACTED]":e(g,b);return d}function f(a){if(null==a)return a;let b=String(a);return(b=(b=b.replace(/\bBearer\s+[A-Za-z0-9._~+\/-]+=*/gi,"Bearer [REDACTED]")).replace(/\b(sk-ant-[A-Za-z0-9_-]{8,}|sk-[A-Za-z0-9_-]{8,})\b/g,"[REDACTED]")).replace(/("(?:access_token|refresh_token|id_token|api_key|apikey|password|secret|authorization)"\s*:\s*")([^"]+)(")/gi,"$1[REDACTED]$3")}a.exports={redactHeaders:function(a={}){let b={};for(let[c,e]of Object.entries(a||{}))b[c]=d(c)?"[REDACTED]":e;return b},redactObject:e,redactBodyText:function(a,b=""){let c=String(a||"");if(/application\/(?:[^;]+\+)?json/i.test(b)||/^[\s\r\n]*[\[{]/.test(c))try{let a=JSON.parse(c);return JSON.stringify(e(a))}catch{}return f(c)},scrubString:f,redactUrlPath:function(a){let b=String(a||"");try{let a=new URL(b,"https://audit.invalid");for(let b of[...a.searchParams.keys()])if(/token|secret|key|password|credential|authorization|^code$/i.test(b))a.searchParams.set(b,"[REDACTED]");else{let c=a.searchParams.get(b);c&&a.searchParams.set(b,f(c))}return`${a.pathname}${a.search}`}catch{return f(b)}},containsLikelySecret:function(a){let b="string"==typeof a?a:JSON.stringify(a);return/Bearer\s+(?!\[REDACTED\])\S+|sk-ant-[A-Za-z0-9_-]{8,}|\bsk-[A-Za-z0-9_-]{8,}/i.test(b||"")},shouldRedactHeader:d}},49083:(a,b,c)=>{let{createAuditProxy:d}=c(45372),{loadConfig:e,saveConfig:f,validateConfig:g,CONFIG_PATH:h,AUDIT_LOG_PATH:i,AUDIT_LOG_DIR:j}=c(43096),{clientIpMatches:k,normalizeIp:l}=c(5565),{enqueueAuditJob:m,readRecent:n,clearAudit:o,pruneExpired:p,startAuditMaintenance:q,stopAuditMaintenance:r,flushAuditQueue:s,getAuditStoreStats:t}=c(90173),{ensureAuditRootCA:u,createAuditCertificateProvider:v,validateRootCaPair:w}=c(85074),{readRootCAInfo:x}=c(8578),{runSelfTest:y}=c(85252);function z(){return globalThis.__blueRouterAuditProxyRuntime||(globalThis.__blueRouterAuditProxyRuntime={server:null,certificateProvider:null,startedAt:null,lastError:null,autostartPromise:null,lifecycle:Promise.resolve()}),globalThis.__blueRouterAuditProxyRuntime}function A(a){let b=z(),c=b.lifecycle.then(a,a);return b.lifecycle=c.catch(()=>{}),c}async function B(a,b=1500){if(!a)return;let c=Math.max(0,Number(b)||0);await new Promise(b=>{let d=!1,e=()=>{d||(d=!0,b())};try{a.listening?a.close(e):e()}catch{e()}let f=setTimeout(()=>{try{a.forceCloseAll?.()}catch{}},c);f.unref?.();let g=setTimeout(e,c+2e3);g.unref?.()});try{a.forceCloseAll?.()}catch{}}function C(a){let b=e();return{...a,clientIpFilterEnabled:!0===b.clientIpFilterEnabled,allowedClientIps:[...b.allowedClientIps||[]]}}async function D(a=null){let b=z();if(b.server?.listening)return I();let c=a?f({...C(a),enabled:!1}):e();await u(),await p(),q();let g=v({maxEntries:128});g.prewarm(c.allowedHosts);let h=d(c,{certificateProvider:g,onAuditJob:m});!function(a,b){if(!b.clientIpFilterEnabled)return;let c=b.allowedClientIps||[];a.prependListener("connection",a=>{let b=l(a?.remoteAddress||"");if(!k(b,c)){console.log(`[audit-proxy] denied client IP ${b||"unknown"}`);try{a.destroy()}catch{}}})}(h,c);try{let a=await new Promise((a,b)=>{let d=a=>{h.removeListener("listening",e),b(a)},e=()=>{h.removeListener("error",d),a(h.address())};h.once("error",d),h.once("listening",e),h.listen(c.port,c.bindHost)});return b.server=h,b.certificateProvider=g,b.startedAt=new Date().toISOString(),b.lastError=null,f({...c,enabled:!0}),{...await I(),address:a}}catch(a){b.lastError=a.message||String(a);try{h.forceCloseAll?.()}catch{}try{h.close()}catch{}throw g.clear?.(),a}}async function E({persist:a=!0}={}){let b=z(),c=b.server,d=e();return b.server=null,b.startedAt=null,await B(c,d.shutdownGraceMs),b.certificateProvider?.clear?.(),b.certificateProvider=null,await s(3e3),r(),a&&f({...d,enabled:!1}),I()}async function F(a=null){return await E({persist:!1}),a&&f({...C(a),enabled:!1}),D()}function G(a=null){return A(()=>D(a))}async function H(){let a=z(),b=e();return b.enabled?a.server?.listening?{started:!1,reason:"already-running",status:await I()}:(a.autostartPromise||(a.autostartPromise=(async()=>{try{let a=await G();return console.log(`[audit-proxy] autostarted on ${b.bindHost}:${b.port}`),{started:!0,status:a}}catch(b){return a.lastError=b?.message||String(b),console.log("[audit-proxy] autostart failed:",a.lastError),{started:!1,error:a.lastError}}finally{a.autostartPromise=null}})()),a.autostartPromise):{started:!1,reason:"disabled"}}async function I(){let a=z(),b=e(),c=!!a.server?.listening,d=x();try{let a=w();d={...d,validated:!0===a.exists,expiringSoon:!0===a.expiringSoon,autoRotation:!1}}catch(a){d={...d,validated:!1,autoRotation:!1,error:a.message||String(a)}}return{running:c,listening:c,startedAt:a.startedAt,lastError:a.lastError,address:c?a.server.address():null,activeConnections:c&&a.server.getActiveConnectionCount?.()||0,capabilities:c?a.server.auditCapabilities:{http1:!0,http2:!1,plainHttp:!1,publicConnectPorts:[443]},security:{clientIpFilterEnabled:b.clientIpFilterEnabled,lanExposedWithoutIpFilter:!["127.0.0.1","::1","localhost"].includes(String(b.bindHost||"").trim().toLowerCase())&&!b.clientIpFilterEnabled,privateDestinationsBlocked:!0,plainHttpBlocked:!0,upstreamTlsVerified:!0},certificateCache:a.certificateProvider?.stats?.()||{entries:0},auditStore:t(),configPath:h,auditLogPath:i,auditLogDirectory:j,rootCA:d}}async function J(a=50){let b=e(),[c,d]=await Promise.all([I(),n(a)]);return{config:b,status:c,events:d}}a.exports={startProxy:G,ensureAuditProxyAutostart:H,stopProxy:function(a={}){return A(()=>E(a))},restartProxy:function(a=null){return A(()=>F(a))},getStatus:I,getSnapshot:J,updateConfig:function(a){let b=z();if(b.server?.listening)throw Error("Stop or restart the Audit Proxy before changing its configuration");return f(g(C(a)))},updateClientProxyHost:function(a){return f(g({...e(),clientProxyHost:String(a||"").trim()}))},updateClientIpFilter:function({enabled:a,allowedClientIps:b}={}){return A(async()=>{let c=z(),d=g({...e(),clientIpFilterEnabled:!0===a,allowedClientIps:b});if(c.server?.listening){await E({persist:!1}),f({...d,enabled:!1});let a=await D();return{config:e(),status:a,restarted:!0}}return{config:f(d),status:await I(),restarted:!1}})},clearAudit:o,runSelfTest:y}},51455:a=>{a.exports=require("node:fs/promises")},53053:a=>{a.exports=require("node:diagnostics_channel")},55511:a=>{a.exports=require("crypto")},55591:a=>{a.exports=require("https")},63033:a=>{a.exports=require("next/dist/server/app-render/work-unit-async-storage.external.js")},64939:a=>{a.exports=import("pg")},66136:a=>{a.exports=require("timers")},73024:a=>{a.exports=require("node:fs")},73496:a=>{a.exports=require("http2")},74075:a=>{a.exports=require("zlib")},76760:a=>{a.exports=require("node:path")},77598:a=>{a.exports=require("node:crypto")},78864:(a,b,c)=>{let d=c(14985).promises,e=c(91645),{normalizeIp:f,clientIpMatches:g}=c(5565),h=new Map,i=Object.freeze(["0.0.0.0/8","10.0.0.0/8","100.64.0.0/10","127.0.0.0/8","169.254.0.0/16","172.16.0.0/12","192.0.0.0/24","192.0.2.0/24","192.88.99.0/24","192.168.0.0/16","198.18.0.0/15","198.51.100.0/24","203.0.113.0/24","224.0.0.0/4","240.0.0.0/4","::/96","::1/128","100::/64","2001:2::/48","2001:db8::/32","fc00::/7","fe80::/10","ff00::/8"]),j=Object.freeze([".localhost",".local",".internal",".lan",".home.arpa"]);function k(a){return String(a||"").trim().replace(/^\[|\]$/g,"").replace(/\.$/,"").toLowerCase()}function l(a){let b=k(a);return!(!(!b||"localhost"===b||j.some(a=>b.endsWith(a)))&&(e.isIP(b)||b.includes(".")))}function m(a){let b=f(a);return!!e.isIP(b)&&!g(b,i)}function n(a){let b=[...new Set((Array.isArray(a)?a:[a]).map(a=>Number(a)).filter(a=>Number.isInteger(a)&&a>=1&&a<=65535))];return b.length?b:[443]}function o(a){let b=[...a?.addresses||[]];return function(c,d,e){let f=d,g=e;"function"==typeof d&&(g=d,f={});let h="number"==typeof f?f:Number(f?.family||0);if("object"==typeof f&&f?.all===!0){let c=4===h||6===h?b.filter(a=>a.family===h):b;if(!c.length){let b=Error(`No validated public address for ${a.host}`);b.code="ENOTFOUND",g(b);return}g(null,c.map(({address:a,family:b})=>({address:a,family:b})));return}let i=function(a,b=0){let c=Number(b||0);return 4===c||6===c?a.find(a=>a.family===c)||null:a.find(a=>4===a.family)||a[0]||null}(b,h);if(!i){let b=Error(`No validated public address for ${a.host}`);b.code="ENOTFOUND",g(b);return}g(null,i.address,i.family)}}async function p(a,b,c={}){let g=k(a),i=Number(b||443),j=n(c.allowedPorts||[443]);if(!g)throw Error("Destination host is empty");if(!Number.isInteger(i)||!j.includes(i))throw Error(`CONNECT destination port ${i||"unknown"} is not allowed`);if(l(g))throw Error(`Private or local destination hostname is not allowed: ${g}`);let q=e.isIP(f(g));if(q){let a=f(g);if(!m(a))throw Error(`Private or reserved destination address is not allowed: ${a}`);let b={host:g,port:i,addresses:[{address:a,family:q}]};return{...b,lookup:o(b)}}let r=Date.now(),s=h.get(g);if(!s||s.expiresAt<=r){let a=await d.lookup(g,{all:!0,verbatim:!0}),b=[],c=new Set;for(let d of a||[]){let a=f(d.address),g=e.isIP(a);if(!g||!m(a))continue;let h=`${g}:${a}`;c.has(h)||(c.add(h),b.push({address:a,family:g}))}if(!b.length)throw Error(`Destination did not resolve to a public address: ${g}`);s={addresses:b,expiresAt:r+6e4},h.set(g,s)}let t={host:g,port:i,addresses:[...s.addresses]};return{...t,lookup:o(t)}}a.exports={BLOCKED_ADDRESS_RANGES:i,normalizeTargetHost:k,normalizeAllowedPorts:n,isBlockedHostname:l,isPublicAddress:m,createPinnedLookup:o,resolvePublicTarget:p,clearDnsPolicyCache:function(){h.clear()}}},79428:a=>{a.exports=require("buffer")},79646:a=>{a.exports=require("child_process")},79748:a=>{a.exports=require("fs/promises")},80099:a=>{a.exports=require("node:sqlite")},81630:a=>{a.exports=require("http")},81787:a=>{a.exports=require("bun:sqlite")},85252:(a,b,c)=>{let d=c(73496),e=c(91645),f=c(34631),g=c(74075),h=c(55511),i=c(15296),{createAuditProxy:j,CaptureBuffer:k}=c(45372),{containsLikelySecret:l}=c(48350),{clientIpMatches:m,normalizeAllowedClientIps:n}=c(5565),{isPublicAddress:o}=c(78864);function p(a){return h.createHash("sha256").update(a).digest("hex")}function q(a){let b=i.pki.rsa.generateKeyPair(2048),c=i.pki.createCertificate();c.publicKey=b.publicKey,c.serialNumber=String(Date.now()),c.validity.notBefore=new Date(Date.now()-6e4),c.validity.notAfter=new Date(Date.now()+864e5);let d=[{name:"commonName",value:a}];return c.setSubject(d),c.setIssuer(d),c.setExtensions([{name:"basicConstraints",cA:!0,critical:!0},{name:"keyUsage",keyCertSign:!0,cRLSign:!0,critical:!0}]),c.sign(b.privateKey,i.md.sha256.create()),{cert:c,keys:b,certPem:i.pki.certificateToPem(c)}}function r(a,b){let c=i.pki.rsa.generateKeyPair(2048),d=i.pki.createCertificate();return d.publicKey=c.publicKey,d.serialNumber=`${Date.now()}${Math.floor(1e3*Math.random())}`,d.validity.notBefore=new Date(Date.now()-6e4),d.validity.notAfter=new Date(Date.now()+864e5),d.setSubject([{name:"commonName",value:b}]),d.setIssuer(a.cert.subject.attributes),d.setExtensions([{name:"basicConstraints",cA:!1},{name:"keyUsage",digitalSignature:!0,keyEncipherment:!0},{name:"extKeyUsage",serverAuth:!0},{name:"subjectAltName",altNames:[{type:2,value:b}]}]),d.sign(a.keys.privateKey,i.md.sha256.create()),{cert:i.pki.certificateToPem(d),key:i.pki.privateKeyToPem(c.privateKey)}}function s(a,b="127.0.0.1"){return new Promise((c,d)=>{a.once("error",d),a.listen(0,b,()=>{a.removeListener("error",d),c(a.address())})})}function t(a){return new Promise(b=>{if(!a)return b();try{a.forceCloseAll?.()}catch{}if(!a.listening)return b();a.close(()=>b()),setTimeout(b,1e3).unref?.()})}function u(a,b){let c="127.0.0.1";return Promise.resolve({host:a,port:b,addresses:[{address:c,family:4}],lookup:(a,b,d)=>{let e=b,f=d;"function"==typeof b&&(f=b,e={}),e?.all?f(null,[{address:c,family:4}]):f(null,c,4)}})}function v(a,b){return new Promise((c,d)=>{let f=e.connect(a,"127.0.0.1"),g=Buffer.alloc(0),h=setTimeout(()=>d(Error("CONNECT timeout")),7e3);f.once("error",d),f.once("connect",()=>{f.write(`CONNECT ${b} HTTP/1.1\r
+${d}`)}catch{try{a.destroy()}catch{}}}function K(a={}){let b={};for(let[c,d]of Object.entries(a||{}))b[c]=d;return b}async function L(a){let b=await a.requestCapture.finish(String(a.requestHeaders["content-type"]||""),String(a.requestHeaders["content-encoding"]||"")),c=String(a.responseHeaders?.["content-type"]||""),d=await a.responseCapture.finish(c,String(a.responseHeaders?.["content-encoding"]||"")),e=H(a.target.host),f=n(a.path),g=p({provider:e,body:d.body,contentType:c,path:f}),h=I(b.body)||g?.model||null;return{id:i.randomUUID(),timestamp:new Date().toISOString(),protocol:a.protocol||"http/1.1",client:{ip:a.clientIp||"",port:a.clientPort||null,userAgent:String(a.requestHeaders["user-agent"]||"")},provider:e,host:A(a.target.host),port:a.target.port,method:a.method,path:f,model:h,usage:g,status:a.statusCode||null,durationMs:Date.now()-a.startedAt,error:a.error?o(a.error.message||a.error):null,request:{headers:l(a.requestHeaders),...b},response:{headers:l(a.responseHeaders||{}),...d}}}a.exports={createAuditProxy:function(a={},b={}){let c={allowedHosts:[],passthroughUnknown:!0,captureBodies:!0,captureLimitBytes:2097152,verifyUpstreamTls:!0,allowedConnectPorts:[443],connectTimeoutMs:1e4,tlsHandshakeTimeoutMs:1e4,responseHeaderTimeoutMs:3e4,idleTimeoutMs:9e5,allowPlainHttp:!1,clientToolFilterEnabled:!1,allowedClientTools:[],clientAlpnProtocols:["http/1.1"],...a};if(!0!==c.verifyUpstreamTls)throw Error("Upstream TLS verification is mandatory in Audit Proxy mode");let i=b.certificateProvider;if("function"!=typeof i)throw Error("certificateProvider is required");let j="function"==typeof b.onAudit?b.onAudit:()=>{},k="function"==typeof b.onAuditJob?b.onAuditJob:null,l="function"==typeof b.resolveTarget?b.resolveTarget:(a,b)=>q(a,b,{allowedPorts:c.allowedConnectPorts}),m=b.upstreamCa,n=r(c.allowedClientTools),o=new Set,p=new Map,u=new WeakMap,v=new Set;function w(a){return!a||o.has(a)||(o.add(a),a.once?.("close",()=>o.delete(a))),a}function x(a,b){try{"function"==typeof a.destroy?a.destroy(b):"function"==typeof a.close&&a.close()}catch{}}function y(a){let b=()=>L(a);if(k){try{k(b)}catch(a){console.warn("[audit-proxy] audit enqueue failed:",a?.message||a)}return}setImmediate(()=>{Promise.resolve().then(b).then(j).catch(a=>console.warn("[audit-proxy] audit callback failed:",a?.message||a))})}function z({requestHeaders:a,method:b,path:c,target:d,requestCapture:e,responseCapture:f,responseHeaders:g,statusCode:h,startedAt:i,error:j,socket:k,protocol:l}){let m;return{requestHeaders:K(a),method:b,path:c,target:d,requestCapture:e,responseCapture:f,responseHeaders:K(g),statusCode:h,startedAt:i,error:j,clientIp:(m=k?.remoteAddress||"").startsWith("::ffff:")?m.slice(7):m,clientPort:k?.remotePort||null,protocol:l}}let A="This proxy does not support WebSocket connections. Use the HTTP streaming transport instead - most clients fall back to it automatically.";function E(a,b,d,e){let f=String(a.url||""),g=d||{host:f.includes(":")?f.slice(0,f.lastIndexOf(":")):f||"unknown",port:443},h=new G(c.captureBodies?c.captureLimitBytes:0);h.add(Buffer.from(e)),y(z({requestHeaders:a.headers,method:"CONNECT",path:"",target:g,requestCapture:new G(0),responseCapture:h,responseHeaders:{"content-type":"text/plain; charset=utf-8",connection:"close"},statusCode:403,startedAt:Date.now(),error:e,socket:b,protocol:"http/1.1"}))}function F(a,b,d){if(!d)return;let e=new G(c.captureBodies?c.captureLimitBytes:0);e.add(Buffer.from(A)),y(z({requestHeaders:a.headers,method:a.method,path:a.url,target:d,requestCapture:new G(0),responseCapture:e,responseHeaders:{"content-type":"text/plain; charset=utf-8",connection:"close"},statusCode:501,startedAt:Date.now(),error:null,socket:b,protocol:"http/1.1"}))}async function H(a,b,{expectContinue:d=!1}={}){let e=a.socket.__auditTarget;if(!e){b.writeHead(502,{"content-type":"text/plain"}),b.end("Audit target is missing");return}if(function(a={}){return"string"==typeof a.upgrade&&""!==a.upgrade.trim()}(a.headers)){b.writeHead(501,{"content-type":"text/plain; charset=utf-8",connection:"close"}),b.end(A),F(a,a.socket,e);return}let h=Date.now(),i=new G(c.captureBodies?c.captureLimitBytes:0),j=new G(c.captureBodies?c.captureLimitBytes:0),k=D(a.headers,{stripInternal:!0});k.host=443===e.port?e.host:`${e.host}:${e.port}`;let n=null,o=null,q={},r=null,s=!1,t=!1,u=null,v=(b=null)=>{s||(s=!0,u&&clearTimeout(u),y(z({requestHeaders:a.headers,method:a.method,path:a.url,target:e,requestCapture:i,responseCapture:j,responseHeaders:q,statusCode:r,startedAt:h,error:b,socket:a.socket,protocol:"http/1.1"})))};try{let h,s,x=await l(e.host,e.port);(n=f.request({hostname:e.host,port:e.port,method:a.method,path:a.url,headers:k,rejectUnauthorized:!0,servername:g.isIP(e.host)?void 0:e.host,ca:m,ALPNProtocols:["http/1.1"],lookup:x.lookup,autoSelectFamily:!0,agent:(h=`${e.host}:${e.port}`,(s=p.get(h))||(s=new f.Agent({keepAlive:!0,maxSockets:32,maxFreeSockets:8,timeout:c.idleTimeoutMs}),p.set(h,s)),s)})).on("socket",a=>{if(w(a),a.setNoDelay(!0),a.setKeepAlive(!0,3e4),a.setTimeout(c.idleTimeoutMs,()=>a.destroy(Error("Upstream idle timeout"))),a.connecting){let b=setTimeout(()=>a.destroy(Error("Upstream TLS connect timeout")),c.connectTimeoutMs+c.tlsHandshakeTimeoutMs);b.unref?.();let d=()=>clearTimeout(b);a.once("secureConnect",d),a.once("error",d),a.once("close",d)}}),n.on("continue",()=>{d&&!b.headersSent&&b.writeContinue()}),n.on("information",a=>{102===a.statusCode&&"function"==typeof b.writeProcessing&&b.writeProcessing(),103===a.statusCode&&"function"==typeof b.writeEarlyHints&&b.writeEarlyHints(a.headers||{})}),n.on("response",a=>{o=a,u&&clearTimeout(u),r=a.statusCode||502,q=K(a.headers||{});let c=D(a.headers,{stripInternal:!1});b.writeHead(r,c),b.flushHeaders?.(),a.on("data",c=>{j.add(c),b.write(c)||a.pause()}),b.on("drain",()=>a.resume()),a.on("aborted",()=>{let a=Error("Upstream response aborted");b.destroyed||b.destroy(a),v(a)}),a.on("error",a=>{b.destroyed||b.destroy(a),v(a)}),a.on("end",()=>{if(a.trailers&&Object.keys(a.trailers).length)try{b.addTrailers(D(a.trailers,{stripInternal:!1}))}catch{}t=!0,b.end(),v(null)})}),n.on("error",a=>{b.headersSent?b.destroyed||b.destroy(a):(b.writeHead(502,{"content-type":"application/json"}),b.end(JSON.stringify({error:"Verified upstream TLS request failed"})),t=!0),v(a)}),a.on("data",b=>{i.add(b),n.write(b)||a.pause()}),n.on("drain",()=>a.resume()),a.on("end",()=>{if(a.trailers&&Object.keys(a.trailers).length)try{n.addTrailers(D(a.trailers,{stripInternal:!0}))}catch{}n.end(),u=setTimeout(()=>n.destroy(Error("Upstream response header timeout")),c.responseHeaderTimeoutMs),u.unref?.()}),a.on("aborted",()=>n.destroy(Error("Client request aborted"))),a.on("error",a=>n.destroy(a)),b.on("close",()=>{t||(o?.destroy(Error("Client response closed")),n?.destroy(Error("Client response closed")),v(Error("Client response closed")))})}catch(a){b.headersSent||(b.writeHead(502,{"content-type":"application/json"}),b.end(JSON.stringify({error:"Destination validation or connection failed"})),t=!0),v(a)}}let I=d.createServer((a,b)=>{H(a,b)});async function M(a){return a.upstreamPromise||(a.upstreamPromise=(async()=>{let b=a.target,d=await l(b.host,b.port),f=w(h.connect({host:b.host,port:b.port,servername:g.isIP(b.host)?void 0:b.host,rejectUnauthorized:!0,ca:m,ALPNProtocols:["h2"],lookup:d.lookup,autoSelectFamily:!0}));f.setNoDelay(!0),f.setKeepAlive(!0,3e4);let i=setTimeout(()=>f.destroy(Error("Upstream HTTP/2 TLS connect timeout")),c.connectTimeoutMs+c.tlsHandshakeTimeoutMs);i.unref?.(),f.once("secureConnect",()=>{clearTimeout(i),"h2"!==f.alpnProtocol&&f.destroy(Error("Upstream did not negotiate HTTP/2"))}),f.once("error",()=>clearTimeout(i)),f.once("close",()=>clearTimeout(i));let j=`https://${b.host}${443===b.port?"":`:${b.port}`}`,k=e.connect(j,{createConnection:()=>f,settings:{enablePush:!1}});return v.add(k),k.setTimeout(c.idleTimeoutMs,()=>k.destroy(Error("Upstream HTTP/2 idle timeout"))),k.once("close",()=>v.delete(k)),await new Promise((a,b)=>{let d=setTimeout(()=>b(Error("Upstream HTTP/2 session timeout")),c.connectTimeoutMs+c.tlsHandshakeTimeoutMs);d.unref?.();let e=(a,b)=>{clearTimeout(d),k.removeListener("connect",f),k.removeListener("error",g),a(b)},f=()=>e(a,k),g=a=>e(b,a);k.once("connect",f),k.once("error",g)}),k})().catch(b=>{throw a.upstreamPromise=null,b})),a.upstreamPromise}async function N(a,b){let d=u.get(a.session),f=d?.target;if(!d||!f){a.respond({":status":502,"content-type":"text/plain"}),a.end("Audit target is missing");return}a.pause();let g=Date.now(),h=new G(c.captureBodies?c.captureLimitBytes:0),i=new G(c.captureBodies?c.captureLimitBytes:0),j={},k=null,l=!1,m=!1,n=null,o=null,p=null,q=(c=null)=>{l||(l=!0,y(z({requestHeaders:b,method:b[":method"]||"GET",path:b[":path"]||"/",target:f,requestCapture:h,responseCapture:i,responseHeaders:j,statusCode:k,startedAt:g,error:c,socket:a.session.socket,protocol:"h2"})))};try{(n=(await M(d)).request(function(a,b){let c=D(a,{stripInternal:!0}),d={":method":a[":method"]||"GET",":path":a[":path"]||"/",":scheme":"https",":authority":443===b.port?b.host:`${b.host}:${b.port}`};for(let[a,b]of Object.entries(c))a.startsWith(":")||(d[a.toLowerCase()]=b);return d}(b,f),{endStream:!1,waitForTrailers:!0})).setTimeout(c.idleTimeoutMs,()=>n.close(e.constants.NGHTTP2_CANCEL)),a.setTimeout(c.idleTimeoutMs,()=>a.close(e.constants.NGHTTP2_CANCEL)),n.on("response",b=>{j=K(b),k=Number(b[":status"]||502),a.respond(function(a){let b=D(a,{stripInternal:!1}),c={":status":Number(a[":status"]||502)};for(let[a,d]of Object.entries(b))a.startsWith(":")||(c[a.toLowerCase()]=d);return c}(b),{waitForTrailers:!0})}),n.on("trailers",a=>{p=D(a,{stripInternal:!1})}),a.on("wantTrailers",()=>{try{a.sendTrailers(p||{})}catch{}}),a.on("trailers",a=>{o=D(a,{stripInternal:!0})}),n.on("wantTrailers",()=>{try{n.sendTrailers(o||{})}catch{}}),a.on("data",b=>{h.add(b),n.write(b)||a.pause()}),n.on("drain",()=>a.resume()),a.on("end",()=>n.end()),n.on("data",b=>{i.add(b),a.write(b)||n.pause()}),a.on("drain",()=>n.resume()),n.on("end",()=>{m=!0,a.end(),q(null)}),n.on("aborted",()=>{let b=Error("Upstream HTTP/2 stream aborted");a.close(e.constants.NGHTTP2_INTERNAL_ERROR),q(b)}),n.on("error",b=>{a.closed||a.close(e.constants.NGHTTP2_INTERNAL_ERROR),q(b)}),a.on("aborted",()=>{n.close(e.constants.NGHTTP2_CANCEL),q(Error("Client HTTP/2 stream aborted"))}),a.on("error",a=>{n.close(e.constants.NGHTTP2_CANCEL),q(a)}),a.on("close",()=>{m||!n||n.closed||(n.close(e.constants.NGHTTP2_CANCEL),q(Error("Client HTTP/2 stream closed")))}),a.resume()}catch(b){a.headersSent||a.closed||a.respond({":status":502,"content-type":"application/json"}),a.closed||a.end(JSON.stringify({error:"Verified upstream HTTP/2 request failed"})),q(b)}}I.on("checkContinue",(a,b)=>{H(a,b,{expectContinue:!0})}),I.on("upgrade",(a,b)=>{J(b,"501 Not Implemented",A),F(a,b,b.__auditTarget)}),I.on("clientError",(a,b)=>x(b)),I.headersTimeout=c.responseHeaderTimeoutMs,I.requestTimeout=0,I.keepAliveTimeout=c.idleTimeoutMs;let O=e.createServer({settings:{enablePush:!1}});O.on("session",a=>{let b={target:a.socket.__auditTarget,upstreamPromise:null};u.set(a,b),a.setTimeout(c.idleTimeoutMs,()=>a.destroy(Error("Client HTTP/2 idle timeout"))),a.once("close",()=>{Promise.resolve(b.upstreamPromise).then(a=>a?.close()).catch(()=>{})})}),O.on("stream",(a,b)=>{N(a,b)}),O.on("sessionError",a=>{console.warn("[audit-proxy] HTTP/2 client session error:",a?.message||a)});let P=d.createServer((a,b)=>{b.writeHead(403,{"content-type":"text/plain; charset=utf-8",connection:"close"}),b.end("Audit Proxy accepts HTTPS CONNECT traffic only")});return P.on("connect",(a,b,d)=>{(async()=>{let e,f;try{e=B(a.url,443),await l(e.host,e.port)}catch(d){let c=d.message||"Destination is not allowed";J(b,"403 Forbidden",c),E(a,b,e,c);return}if(c.clientToolFilterEnabled&&!s(a.headers["user-agent"],n)){let c=`Client tool is not allowed to use this proxy (${t(a.headers["user-agent"])})`;J(b,"403 Forbidden",c),E(a,b,e,c);return}if(!C(e.host,c.allowedHosts)){if(!c.passthroughUnknown){let c="Host is not in the audit allowlist";J(b,"403 Forbidden",c),E(a,b,e,c);return}let f=!1;try{let a=await l(e.host,e.port),h=w(g.connect({host:e.host,port:e.port,lookup:a.lookup,autoSelectFamily:!0})),i=setTimeout(()=>h.destroy(Error("TCP passthrough connect timeout")),c.connectTimeoutMs);i.unref?.(),h.setNoDelay(!0),h.setKeepAlive(!0,3e4),h.setTimeout(c.idleTimeoutMs,()=>h.destroy(Error("TCP passthrough idle timeout"))),h.once("connect",()=>{clearTimeout(i),f=!0,b.write("HTTP/1.1 200 Connection Established\r\nProxy-Agent: BlueRouter-Audit\r\n\r\n"),d?.length&&h.write(d),h.pipe(b),b.pipe(h)}),h.once("error",()=>{clearTimeout(i),f?x(b):J(b,"502 Bad Gateway","TCP passthrough failed")}),b.once("error",()=>x(h)),b.once("close",()=>x(h))}catch(a){J(b,"502 Bad Gateway",a.message||"TCP passthrough failed")}return}try{if(f=i(e.host),!f?.key||!f?.cert)throw Error("Certificate provider returned no certificate")}catch(a){J(b,"500 Internal Server Error",`Cannot issue audit certificate: ${a.message}`);return}b.write("HTTP/1.1 200 Connection Established\r\nProxy-Agent: BlueRouter-Audit\r\n\r\n"),d?.length&&b.unshift(d);let j=w(new h.TLSSocket(b,{isServer:!0,key:f.key,cert:f.cert,ALPNProtocols:c.clientAlpnProtocols}));j.__auditTarget=e,j.setNoDelay(!0),j.setKeepAlive(!0,3e4),j.setTimeout(c.idleTimeoutMs,()=>j.destroy(Error("Client TLS idle timeout")));let k=setTimeout(()=>j.destroy(Error("Client TLS handshake timeout")),c.tlsHandshakeTimeoutMs);k.unref?.();let m=!1,o=()=>{m||(m=!0,clearTimeout(k),"h2"===j.alpnProtocol?O.emit("connection",j):I.emit("connection",j))};j.once("secure",o),j.once("secureConnect",o),j.once("error",()=>{clearTimeout(k),x(j)}),j.once("close",()=>clearTimeout(k))})().catch(a=>J(b,"500 Internal Server Error",a.message||"Audit CONNECT failed"))}),P.prependListener("connection",a=>{w(a),a.setNoDelay(!0),a.setKeepAlive(!0,3e4)}),P.on("upgrade",(a,b)=>J(b,"501 Not Implemented",A)),P.on("clientError",(a,b)=>x(b)),P.headersTimeout=c.responseHeaderTimeoutMs,P.requestTimeout=0,P.keepAliveTimeout=c.idleTimeoutMs,P.forceCloseAll=()=>{for(let a of v)try{a.destroy()}catch{}for(let a of p.values())try{a.destroy()}catch{}for(let a of[...o])x(a)},P.getActiveConnectionCount=()=>o.size,P.auditConfig=c,P.auditCapabilities={http1:!0,http2:c.clientAlpnProtocols.includes("h2"),plainHttp:!1,publicConnectPorts:[...c.allowedConnectPorts]},P},hostMatches:C,parseAuthority:B,stripHopByHop:D,CaptureBuffer:G,detectProvider:H,extractModel:I,decodeCapturedBuffer:E}},46293:a=>{a.exports=require("sql.js")},48350:a=>{let b=new Set(["authorization","proxy-authorization","x-api-key","api-key","cookie","set-cookie","x-auth-token","x-access-token","cf-access-jwt-assertion"]),c=/(^|[_-])(access[_-]?token|refresh[_-]?token|id[_-]?token|token|api[_-]?key|apikey|password|passwd|secret|authorization|cookie)($|[_-])/i;function d(a){let c=String(a||"").toLowerCase();return b.has(c)||/token|secret|password|credential/i.test(c)}function e(a,b=new WeakSet){if(null==a||"object"!=typeof a)return a;if(b.has(a))return"[CIRCULAR]";if(b.add(a),Array.isArray(a))return a.map(a=>e(a,b));let d={};for(let[f,g]of Object.entries(a))d[f]=c.test(f)?"[REDACTED]":e(g,b);return d}function f(a){if(null==a)return a;let b=String(a);return(b=(b=b.replace(/\bBearer\s+[A-Za-z0-9._~+\/-]+=*/gi,"Bearer [REDACTED]")).replace(/\b(sk-ant-[A-Za-z0-9_-]{8,}|sk-[A-Za-z0-9_-]{8,})\b/g,"[REDACTED]")).replace(/("(?:access_token|refresh_token|id_token|api_key|apikey|password|secret|authorization)"\s*:\s*")([^"]+)(")/gi,"$1[REDACTED]$3")}a.exports={redactHeaders:function(a={}){let b={};for(let[c,e]of Object.entries(a||{}))b[c]=d(c)?"[REDACTED]":e;return b},redactObject:e,redactBodyText:function(a,b=""){let c=String(a||"");if(/application\/(?:[^;]+\+)?json/i.test(b)||/^[\s\r\n]*[\[{]/.test(c))try{let a=JSON.parse(c);return JSON.stringify(e(a))}catch{}return f(c)},scrubString:f,redactUrlPath:function(a){let b=String(a||"");try{let a=new URL(b,"https://audit.invalid");for(let b of[...a.searchParams.keys()])if(/token|secret|key|password|credential|authorization|^code$/i.test(b))a.searchParams.set(b,"[REDACTED]");else{let c=a.searchParams.get(b);c&&a.searchParams.set(b,f(c))}return`${a.pathname}${a.search}`}catch{return f(b)}},containsLikelySecret:function(a){let b="string"==typeof a?a:JSON.stringify(a);return/Bearer\s+(?!\[REDACTED\])\S+|sk-ant-[A-Za-z0-9_-]{8,}|\bsk-[A-Za-z0-9_-]{8,}/i.test(b||"")},shouldRedactHeader:d}},49083:(a,b,c)=>{let{createAuditProxy:d}=c(45372),{loadConfig:e,saveConfig:f,validateConfig:g,CONFIG_PATH:h,AUDIT_LOG_PATH:i,AUDIT_LOG_DIR:j}=c(43096),{clientIpMatches:k,normalizeIp:l}=c(5565),{enqueueAuditJob:m,readRecent:n,clearAudit:o,pruneExpired:p,startAuditMaintenance:q,stopAuditMaintenance:r,flushAuditQueue:s,getAuditStoreStats:t}=c(90173),{ensureAuditRootCA:u,createAuditCertificateProvider:v,validateRootCaPair:w}=c(85074),{readRootCAInfo:x}=c(8578),{runSelfTest:y}=c(85252);function z(){return globalThis.__blueRouterAuditProxyRuntime||(globalThis.__blueRouterAuditProxyRuntime={server:null,certificateProvider:null,startedAt:null,lastError:null,autostartPromise:null,lifecycle:Promise.resolve()}),globalThis.__blueRouterAuditProxyRuntime}function A(a){let b=z(),c=b.lifecycle.then(a,a);return b.lifecycle=c.catch(()=>{}),c}async function B(a,b=1500){if(!a)return;let c=Math.max(0,Number(b)||0);await new Promise(b=>{let d=!1,e=()=>{d||(d=!0,b())};try{a.listening?a.close(e):e()}catch{e()}let f=setTimeout(()=>{try{a.forceCloseAll?.()}catch{}},c);f.unref?.();let g=setTimeout(e,c+2e3);g.unref?.()});try{a.forceCloseAll?.()}catch{}}function C(a){let b=e();return{...a,clientIpFilterEnabled:!0===b.clientIpFilterEnabled,allowedClientIps:[...b.allowedClientIps||[]]}}async function D(a=null){let b=z();if(b.server?.listening)return I();let c=a?f({...C(a),enabled:!1}):e();await u(),await p(),q();let g=v({maxEntries:128});g.prewarm(c.allowedHosts);let h=d(c,{certificateProvider:g,onAuditJob:m});!function(a,b){if(!b.clientIpFilterEnabled)return;let c=b.allowedClientIps||[];a.prependListener("connection",a=>{let b=l(a?.remoteAddress||"");if(!k(b,c)){console.log(`[audit-proxy] denied client IP ${b||"unknown"}`);try{a.destroy()}catch{}}})}(h,c);try{let a=await new Promise((a,b)=>{let d=a=>{h.removeListener("listening",e),b(a)},e=()=>{h.removeListener("error",d),a(h.address())};h.once("error",d),h.once("listening",e),h.listen(c.port,c.bindHost)});return b.server=h,b.certificateProvider=g,b.startedAt=new Date().toISOString(),b.lastError=null,f({...c,enabled:!0}),{...await I(),address:a}}catch(a){b.lastError=a.message||String(a);try{h.forceCloseAll?.()}catch{}try{h.close()}catch{}throw g.clear?.(),a}}async function E({persist:a=!0}={}){let b=z(),c=b.server,d=e();return b.server=null,b.startedAt=null,await B(c,d.shutdownGraceMs),b.certificateProvider?.clear?.(),b.certificateProvider=null,await s(3e3),r(),a&&f({...d,enabled:!1}),I()}async function F(a=null){return await E({persist:!1}),a&&f({...C(a),enabled:!1}),D()}function G(a=null){return A(()=>D(a))}async function H(){let a=z(),b=e();return b.enabled?a.server?.listening?{started:!1,reason:"already-running",status:await I()}:(a.autostartPromise||(a.autostartPromise=(async()=>{try{let a=await G();return console.log(`[audit-proxy] autostarted on ${b.bindHost}:${b.port}`),{started:!0,status:a}}catch(b){return a.lastError=b?.message||String(b),console.log("[audit-proxy] autostart failed:",a.lastError),{started:!1,error:a.lastError}}finally{a.autostartPromise=null}})()),a.autostartPromise):{started:!1,reason:"disabled"}}async function I(){let a=z(),b=e(),c=!!a.server?.listening,d=x();try{let a=w();d={...d,validated:!0===a.exists,expiringSoon:!0===a.expiringSoon,autoRotation:!1}}catch(a){d={...d,validated:!1,autoRotation:!1,error:a.message||String(a)}}return{running:c,listening:c,startedAt:a.startedAt,lastError:a.lastError,address:c?a.server.address():null,activeConnections:c&&a.server.getActiveConnectionCount?.()||0,capabilities:c?a.server.auditCapabilities:{http1:!0,http2:!1,plainHttp:!1,publicConnectPorts:[443]},security:{clientIpFilterEnabled:b.clientIpFilterEnabled,clientToolFilterEnabled:!0===b.clientToolFilterEnabled,allowedClientToolCount:(b.allowedClientTools||[]).length,lanExposedWithoutIpFilter:!["127.0.0.1","::1","localhost"].includes(String(b.bindHost||"").trim().toLowerCase())&&!b.clientIpFilterEnabled,privateDestinationsBlocked:!0,plainHttpBlocked:!0,upstreamTlsVerified:!0},certificateCache:a.certificateProvider?.stats?.()||{entries:0},auditStore:t(),configPath:h,auditLogPath:i,auditLogDirectory:j,rootCA:d}}async function J(a=50){let b=e(),[c,d]=await Promise.all([I(),n(a)]);return{config:b,status:c,events:d}}a.exports={startProxy:G,ensureAuditProxyAutostart:H,stopProxy:function(a={}){return A(()=>E(a))},restartProxy:function(a=null){return A(()=>F(a))},getStatus:I,getSnapshot:J,updateConfig:function(a){let b=z();if(b.server?.listening)throw Error("Stop or restart the Audit Proxy before changing its configuration");return f(g(C(a)))},updateClientProxyHost:function(a){return f(g({...e(),clientProxyHost:String(a||"").trim()}))},updateClientIpFilter:function({enabled:a,allowedClientIps:b}={}){return A(async()=>{let c=z(),d=g({...e(),clientIpFilterEnabled:!0===a,allowedClientIps:b});if(c.server?.listening){await E({persist:!1}),f({...d,enabled:!1});let a=await D();return{config:e(),status:a,restarted:!0}}return{config:f(d),status:await I(),restarted:!1}})},clearAudit:o,runSelfTest:y}},51455:a=>{a.exports=require("node:fs/promises")},53053:a=>{a.exports=require("node:diagnostics_channel")},55511:a=>{a.exports=require("crypto")},55591:a=>{a.exports=require("https")},63033:a=>{a.exports=require("next/dist/server/app-render/work-unit-async-storage.external.js")},64939:a=>{a.exports=import("pg")},66136:a=>{a.exports=require("timers")},73024:a=>{a.exports=require("node:fs")},73496:a=>{a.exports=require("http2")},74075:a=>{a.exports=require("zlib")},76760:a=>{a.exports=require("node:path")},77598:a=>{a.exports=require("node:crypto")},78864:(a,b,c)=>{let d=c(14985).promises,e=c(91645),{normalizeIp:f,clientIpMatches:g}=c(5565),h=new Map,i=Object.freeze(["0.0.0.0/8","10.0.0.0/8","100.64.0.0/10","127.0.0.0/8","169.254.0.0/16","172.16.0.0/12","192.0.0.0/24","192.0.2.0/24","192.88.99.0/24","192.168.0.0/16","198.18.0.0/15","198.51.100.0/24","203.0.113.0/24","224.0.0.0/4","240.0.0.0/4","::/96","::1/128","100::/64","2001:2::/48","2001:db8::/32","fc00::/7","fe80::/10","ff00::/8"]),j=Object.freeze([".localhost",".local",".internal",".lan",".home.arpa"]);function k(a){return String(a||"").trim().replace(/^\[|\]$/g,"").replace(/\.$/,"").toLowerCase()}function l(a){let b=k(a);return!(!(!b||"localhost"===b||j.some(a=>b.endsWith(a)))&&(e.isIP(b)||b.includes(".")))}function m(a){let b=f(a);return!!e.isIP(b)&&!g(b,i)}function n(a){let b=[...new Set((Array.isArray(a)?a:[a]).map(a=>Number(a)).filter(a=>Number.isInteger(a)&&a>=1&&a<=65535))];return b.length?b:[443]}function o(a){let b=[...a?.addresses||[]];return function(c,d,e){let f=d,g=e;"function"==typeof d&&(g=d,f={});let h="number"==typeof f?f:Number(f?.family||0);if("object"==typeof f&&f?.all===!0){let c=4===h||6===h?b.filter(a=>a.family===h):b;if(!c.length){let b=Error(`No validated public address for ${a.host}`);b.code="ENOTFOUND",g(b);return}g(null,c.map(({address:a,family:b})=>({address:a,family:b})));return}let i=function(a,b=0){let c=Number(b||0);return 4===c||6===c?a.find(a=>a.family===c)||null:a.find(a=>4===a.family)||a[0]||null}(b,h);if(!i){let b=Error(`No validated public address for ${a.host}`);b.code="ENOTFOUND",g(b);return}g(null,i.address,i.family)}}async function p(a,b,c={}){let g=k(a),i=Number(b||443),j=n(c.allowedPorts||[443]);if(!g)throw Error("Destination host is empty");if(!Number.isInteger(i)||!j.includes(i))throw Error(`CONNECT destination port ${i||"unknown"} is not allowed`);if(l(g))throw Error(`Private or local destination hostname is not allowed: ${g}`);let q=e.isIP(f(g));if(q){let a=f(g);if(!m(a))throw Error(`Private or reserved destination address is not allowed: ${a}`);let b={host:g,port:i,addresses:[{address:a,family:q}]};return{...b,lookup:o(b)}}let r=Date.now(),s=h.get(g);if(!s||s.expiresAt<=r){let a=await d.lookup(g,{all:!0,verbatim:!0}),b=[],c=new Set;for(let d of a||[]){let a=f(d.address),g=e.isIP(a);if(!g||!m(a))continue;let h=`${g}:${a}`;c.has(h)||(c.add(h),b.push({address:a,family:g}))}if(!b.length)throw Error(`Destination did not resolve to a public address: ${g}`);s={addresses:b,expiresAt:r+6e4},h.set(g,s)}let t={host:g,port:i,addresses:[...s.addresses]};return{...t,lookup:o(t)}}a.exports={BLOCKED_ADDRESS_RANGES:i,normalizeTargetHost:k,normalizeAllowedPorts:n,isBlockedHostname:l,isPublicAddress:m,createPinnedLookup:o,resolvePublicTarget:p,clearDnsPolicyCache:function(){h.clear()}}},79428:a=>{a.exports=require("buffer")},79646:a=>{a.exports=require("child_process")},79748:a=>{a.exports=require("fs/promises")},80099:a=>{a.exports=require("node:sqlite")},81630:a=>{a.exports=require("http")},81787:a=>{a.exports=require("bun:sqlite")},85252:(a,b,c)=>{let d=c(73496),e=c(91645),f=c(34631),g=c(74075),h=c(55511),i=c(15296),{createAuditProxy:j,CaptureBuffer:k}=c(45372),{containsLikelySecret:l}=c(48350),{clientIpMatches:m,normalizeAllowedClientIps:n}=c(5565),{normalizeAllowedTools:o,clientToolMatches:p}=c(98586),{isPublicAddress:q}=c(78864);function r(a){return h.createHash("sha256").update(a).digest("hex")}function s(a){let b=i.pki.rsa.generateKeyPair(2048),c=i.pki.createCertificate();c.publicKey=b.publicKey,c.serialNumber=String(Date.now()),c.validity.notBefore=new Date(Date.now()-6e4),c.validity.notAfter=new Date(Date.now()+864e5);let d=[{name:"commonName",value:a}];return c.setSubject(d),c.setIssuer(d),c.setExtensions([{name:"basicConstraints",cA:!0,critical:!0},{name:"keyUsage",keyCertSign:!0,cRLSign:!0,critical:!0}]),c.sign(b.privateKey,i.md.sha256.create()),{cert:c,keys:b,certPem:i.pki.certificateToPem(c)}}function t(a,b){let c=i.pki.rsa.generateKeyPair(2048),d=i.pki.createCertificate();return d.publicKey=c.publicKey,d.serialNumber=`${Date.now()}${Math.floor(1e3*Math.random())}`,d.validity.notBefore=new Date(Date.now()-6e4),d.validity.notAfter=new Date(Date.now()+864e5),d.setSubject([{name:"commonName",value:b}]),d.setIssuer(a.cert.subject.attributes),d.setExtensions([{name:"basicConstraints",cA:!1},{name:"keyUsage",digitalSignature:!0,keyEncipherment:!0},{name:"extKeyUsage",serverAuth:!0},{name:"subjectAltName",altNames:[{type:2,value:b}]}]),d.sign(a.keys.privateKey,i.md.sha256.create()),{cert:i.pki.certificateToPem(d),key:i.pki.privateKeyToPem(c.privateKey)}}function u(a,b="127.0.0.1"){return new Promise((c,d)=>{a.once("error",d),a.listen(0,b,()=>{a.removeListener("error",d),c(a.address())})})}function v(a){return new Promise(b=>{if(!a)return b();try{a.forceCloseAll?.()}catch{}if(!a.listening)return b();a.close(()=>b()),setTimeout(b,1e3).unref?.()})}function w(a,b){let c="127.0.0.1";return Promise.resolve({host:a,port:b,addresses:[{address:c,family:4}],lookup:(a,b,d)=>{let e=b,f=d;"function"==typeof b&&(f=b,e={}),e?.all?f(null,[{address:c,family:4}]):f(null,c,4)}})}function x(a,b,c=""){return new Promise((d,f)=>{let g=e.connect(a,"127.0.0.1"),h=Buffer.alloc(0),i=setTimeout(()=>f(Error("CONNECT timeout")),7e3);g.once("error",f),g.once("connect",()=>{let a=c?`User-Agent: ${c}\r
+`:"";g.write(`CONNECT ${b} HTTP/1.1\r
 Host: ${b}\r
-Proxy-Connection: keep-alive\r
+${a}Proxy-Connection: keep-alive\r
 \r
-`)});let i=a=>{let b=(g=Buffer.concat([g,a])).indexOf("\r\n\r\n");if(b<0)return;f.removeListener("data",i),clearTimeout(h);let e=g.subarray(0,b).toString("utf8"),j=g.subarray(b+4);if(!/^HTTP\/1\.1 200\b/.test(e)){f.destroy(),d(Error(`CONNECT failed: ${e.split("\r\n")[0]}`));return}j.length&&f.unshift(j),c(f)};f.on("data",i)})}function w({socket:a,ca:b,servername:c,port:d,body:e,path:g,alpnProtocols:h=["http/1.1"],onAlpn:i}){return new Promise((j,k)=>{let l=f.connect({socket:a,ca:b,servername:c,rejectUnauthorized:!0,ALPNProtocols:h}),m=[],n=setTimeout(()=>k(Error("TLS HTTP/1.1 test timeout")),1e4);l.once("error",k),l.once("secureConnect",()=>{i?.(l.alpnProtocol),l.write(`POST ${g} HTTP/1.1\r
+`)});let j=a=>{let b=(h=Buffer.concat([h,a])).indexOf("\r\n\r\n");if(b<0)return;g.removeListener("data",j),clearTimeout(i);let c=h.subarray(0,b).toString("utf8"),e=h.subarray(b+4);if(!/^HTTP\/1\.1 200\b/.test(c)){g.destroy(),f(Error(`CONNECT failed: ${c.split("\r\n")[0]}`));return}e.length&&g.unshift(e),d(g)};g.on("data",j)})}function y({socket:a,ca:b,servername:c,port:d,body:e,path:g,alpnProtocols:h=["http/1.1"],onAlpn:i}){return new Promise((j,k)=>{let l=f.connect({socket:a,ca:b,servername:c,rejectUnauthorized:!0,ALPNProtocols:h}),m=[],n=setTimeout(()=>k(Error("TLS HTTP/1.1 test timeout")),1e4);l.once("error",k),l.once("secureConnect",()=>{i?.(l.alpnProtocol),l.write(`POST ${g} HTTP/1.1\r
 Host: localhost:${d}\r
 Authorization: Bearer test-secret-authorization-123456789\r
 x-api-key: sk-test-supersecret-123456789\r
@@ -17,7 +18,7 @@ Content-Type: application/json\r
 Content-Length: ${e.length}\r
 Connection: close\r
 \r
-`),l.write(e)}),l.on("data",a=>m.push(Buffer.from(a))),l.on("end",()=>{clearTimeout(n),j(function(a){let b=a.indexOf("\r\n\r\n");if(b<0)throw Error("Invalid HTTP/1.1 response");let c=a.subarray(0,b).toString("latin1"),d={};for(let a of c.split("\r\n").slice(1)){let b=a.indexOf(":");b>0&&(d[a.slice(0,b).toLowerCase()]=a.slice(b+1).trim())}let e=Number(d["content-length"]||0);return{head:c,headers:d,body:a.subarray(b+4,e?b+4+e:void 0)}}(Buffer.concat(m)))})})}a.exports={runSelfTest:async function(){let a=Date.now(),b=[],c=(a,c,d="")=>b.push({name:a,ok:!!c,detail:d}),i=n(["172.16.253.3","10.20.30.0/24","2001:db8::/64"]);c("Client IP exact allowlist match",m("::ffff:172.16.253.3",i)),c("Client IPv4 CIDR allowlist match",m("10.20.30.77",i)),c("Client IPv6 CIDR allowlist match",m("2001:db8::1234",i)),c("Client IP outside allowlist denied",!m("10.20.31.77",i)),c("Public destination accepted",o("1.1.1.1")),c("Private destination rejected",!o("127.0.0.1")&&!o("169.254.169.254"));let x=JSON.stringify({type:"message",content:[{type:"text",text:"brotli audit ok"}]}),y=new k(1048576);y.add(g.brotliCompressSync(Buffer.from(x)));let z=await y.finish("application/json","br");c("Brotli audit body decoded",!0===z.decoded&&z.body.includes("brotli audit ok")&&!z.decodeError);let A=Buffer.from(`TRUNCATED-GZIP-PREFIX-OK${h.randomBytes(8192).toString("hex")}`),B=g.gzipSync(A),C=new k(Math.floor(.7*B.length));C.add(B);let D=await C.finish("application/json","gzip");c("Truncated gzip audit body partially decoded",!0===D.decodePartial&&!0===D.truncated&&D.body.includes("TRUNCATED-GZIP-PREFIX-OK"),D.decodeError||"");let E=q("BlueRouter Audit Self Test Upstream CA"),F=r(E,"localhost"),G=q("BlueRouter Audit Self Test Proxy CA"),H=r(G,"localhost"),I=Buffer.from(JSON.stringify({type:"message",content:[{type:"text",text:"compressed response preserved"}]})),J=g.brotliCompressSync(I),K=[],L=`event: message_start
+`),l.write(e)}),l.on("data",a=>m.push(Buffer.from(a))),l.on("end",()=>{clearTimeout(n),j(function(a){let b=a.indexOf("\r\n\r\n");if(b<0)throw Error("Invalid HTTP/1.1 response");let c=a.subarray(0,b).toString("latin1"),d={};for(let a of c.split("\r\n").slice(1)){let b=a.indexOf(":");b>0&&(d[a.slice(0,b).toLowerCase()]=a.slice(b+1).trim())}let e=Number(d["content-length"]||0);return{head:c,headers:d,body:a.subarray(b+4,e?b+4+e:void 0)}}(Buffer.concat(m)))})})}a.exports={runSelfTest:async function(){let a=Date.now(),b=[],c=(a,c,d="")=>b.push({name:a,ok:!!c,detail:d}),i=n(["172.16.253.3","10.20.30.0/24","2001:db8::/64"]);c("Client IP exact allowlist match",m("::ffff:172.16.253.3",i)),c("Client IPv4 CIDR allowlist match",m("10.20.30.77",i)),c("Client IPv6 CIDR allowlist match",m("2001:db8::1234",i)),c("Client IP outside allowlist denied",!m("10.20.31.77",i)),c("Public destination accepted",q("1.1.1.1"));let z=o(["claude-code","codex"]);c("Preset expands to the tool's User-Agent patterns",p("claude-cli/2.0.1 (external, cli)",z)),c("Codex User-Agent matches its preset",p("codex_cli_rs/0.147.0 (Windows 10.0.26200; x86_64)",z)),c("A browser User-Agent is not allowed",!p("Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/131.0",z)),c("A missing User-Agent is not allowed",!p("",z)),c("A free-text entry is matched verbatim",p("my-internal-agent/3",o(["my-internal-agent"]))),c("Private destination rejected",!q("127.0.0.1")&&!q("169.254.169.254"));let A=JSON.stringify({type:"message",content:[{type:"text",text:"brotli audit ok"}]}),B=new k(1048576);B.add(g.brotliCompressSync(Buffer.from(A)));let C=await B.finish("application/json","br");c("Brotli audit body decoded",!0===C.decoded&&C.body.includes("brotli audit ok")&&!C.decodeError);let D=Buffer.from(`TRUNCATED-GZIP-PREFIX-OK${h.randomBytes(8192).toString("hex")}`),E=g.gzipSync(D),F=new k(Math.floor(.7*E.length));F.add(E);let G=await F.finish("application/json","gzip");c("Truncated gzip audit body partially decoded",!0===G.decodePartial&&!0===G.truncated&&G.body.includes("TRUNCATED-GZIP-PREFIX-OK"),G.decodeError||"");let H=s("BlueRouter Audit Self Test Upstream CA"),I=t(H,"localhost"),J=s("BlueRouter Audit Self Test Proxy CA"),K=t(J,"localhost"),L=Buffer.from(JSON.stringify({type:"message",content:[{type:"text",text:"compressed response preserved"}]})),M=g.brotliCompressSync(L),N=[],O=`event: message_start
 data: ${JSON.stringify({type:"message_start",message:{id:"msg_selftest",type:"message",role:"assistant",model:"audit-self-test-stream-model",content:[],usage:{input_tokens:11,cache_creation_input_tokens:22,cache_read_input_tokens:33,output_tokens:1}}})}
 
 event: content_block_delta
@@ -28,7 +29,7 @@ data: ${JSON.stringify({type:"message_delta",delta:{stop_reason:"end_turn"},usag
 
 event: message_stop
 data: ${JSON.stringify({type:"message_stop"})}
-`,M=g.gzipSync(Buffer.from(L,"utf8")),N=d.createSecureServer({key:F.key,cert:F.cert,allowHTTP1:!0});N.on("request",(a,b)=>{let c=[];a.on("data",a=>c.push(Buffer.from(a))),a.on("end",()=>{if(K.push({protocol:2===a.httpVersionMajor?"h2":"http/1.1",path:a.url,authorization:a.headers.authorization,apiKey:a.headers["x-api-key"],internalHeader:a.headers["x-9r-source-tool"],body:Buffer.concat(c)}),String(a.url||"").includes("stream=1")){b.writeHead(200,{"content-type":"text/event-stream","content-encoding":"gzip","content-length":String(M.length)}),b.end(M);return}b.writeHead(200,{"content-type":"application/json","content-encoding":"br","content-length":String(J.length)}),b.end(J)})});let O=[],P=null,Q=null;try{var R;let a=await s(N);P=j({allowedHosts:["localhost"],passthroughUnknown:!1,captureBodies:!0,captureLimitBytes:1048576,verifyUpstreamTls:!0,allowedConnectPorts:[a.port],connectTimeoutMs:5e3,tlsHandshakeTimeoutMs:5e3,responseHeaderTimeoutMs:5e3,idleTimeoutMs:3e4},{certificateProvider:()=>H,upstreamCa:E.certPem,resolveTarget:u,onAudit:a=>O.push(a)});let b=await s(P),d=await (R=b.port,new Promise((a,b)=>{let c=e.connect(R,"127.0.0.1"),d=[],f=setTimeout(()=>b(Error("Plain HTTP rejection timeout")),5e3);c.once("connect",()=>c.end("GET http://example.com/ HTTP/1.1\r\nHost: example.com\r\nConnection: close\r\n\r\n")),c.on("data",a=>d.push(Buffer.from(a))),c.once("error",b),c.once("end",()=>{clearTimeout(f),a(Buffer.concat(d).toString("utf8"))})}));c("Plain HTTP forward proxy is disabled",d.startsWith("HTTP/1.1 403"));let g=Buffer.from(JSON.stringify({model:"audit-self-test-h1",messages:[{role:"user",content:"hello h1 ✓"}]})),i="/v1/messages?beta=true&encoded=%2F",k=await v(b.port,`localhost:${a.port}`),m=await w({socket:k,ca:G.certPem,servername:"localhost",port:a.port,body:g,path:i});c("HTTP/1.1 CONNECT and TLS succeeded",m.head.startsWith("HTTP/1.1 200")),c("HTTP/1.1 compressed response bytes preserved",p(m.body)===p(J));let n=Buffer.from(JSON.stringify({model:"audit-self-test-h2-downgrade",messages:[{role:"user",content:"hello downgrade ✓"}]})),o="/v1/messages?beta=true&protocol=h2-preferred",q=await v(b.port,`localhost:${a.port}`),r=null,t=await w({socket:q,ca:G.certPem,servername:"localhost",port:a.port,body:n,path:o,alpnProtocols:["h2","http/1.1"],onAlpn:a=>{r=a}});c("h2-preferring client is downgraded to HTTP/1.1","http/1.1"===r,`negotiated ${r||"none"}`),c("Downgraded client still gets a response",t.head.startsWith("HTTP/1.1 200")),c("Downgraded compressed response bytes preserved",p(t.body)===p(J)),c("HTTP/2 is not advertised while the h2 path is unfixed",P.auditCapabilities?.http2===!1);let x=Buffer.from(JSON.stringify({model:"audit-self-test-stream-model",messages:[{role:"user",content:"x".repeat(1052672)}]})),y=await v(b.port,`localhost:${a.port}`),z=await w({socket:y,ca:G.certPem,servername:"localhost",port:a.port,body:x,path:"/v1/messages?beta=true&stream=1"});c("Streaming response forwarded",z.head.startsWith("HTTP/1.1 200")),await new Promise(a=>setTimeout(a,100));let A=O.find(a=>String(a.path||"").includes("stream=1"));c("Streaming audit event captured",!!A),c("Token usage extracted from streamed response",A?.usage?.inputTokens===11&&A?.usage?.cacheCreationTokens===22&&A?.usage?.cacheReadTokens===33&&A?.usage?.outputTokens===44&&A?.usage?.totalTokens===110,JSON.stringify(A?.usage||null)),c("Streamed usage marked complete",A?.usage?.complete===!0&&A?.usage?.stopReason==="end_turn"),c("Model recovered from response when request body is truncated",A?.request?.truncated===!0&&A?.model==="audit-self-test-stream-model"),c("Exchange without token usage reports none",O.some(a=>String(a.path||"").includes("encoded=")&&null==a.usage));let B=await v(b.port,`localhost:${a.port}`),C=await function({socket:a,ca:b,servername:c,port:d,path:e}){return new Promise((g,i)=>{let j=f.connect({socket:a,ca:b,servername:c,rejectUnauthorized:!0,ALPNProtocols:["http/1.1"]}),k=[],l=setTimeout(()=>i(Error("Upgrade test timeout")),1e4);j.once("error",i),j.once("secureConnect",()=>{j.write(`GET ${e} HTTP/1.1\r
+`,P=g.gzipSync(Buffer.from(O,"utf8")),Q=d.createSecureServer({key:I.key,cert:I.cert,allowHTTP1:!0});Q.on("request",(a,b)=>{let c=[];a.on("data",a=>c.push(Buffer.from(a))),a.on("end",()=>{if(N.push({protocol:2===a.httpVersionMajor?"h2":"http/1.1",path:a.url,authorization:a.headers.authorization,apiKey:a.headers["x-api-key"],internalHeader:a.headers["x-9r-source-tool"],body:Buffer.concat(c)}),String(a.url||"").includes("stream=1")){b.writeHead(200,{"content-type":"text/event-stream","content-encoding":"gzip","content-length":String(P.length)}),b.end(P);return}b.writeHead(200,{"content-type":"application/json","content-encoding":"br","content-length":String(M.length)}),b.end(M)})});let R=[],S=null,T=null;try{var U;let a=await u(Q);S=j({allowedHosts:["localhost"],passthroughUnknown:!1,captureBodies:!0,captureLimitBytes:1048576,verifyUpstreamTls:!0,allowedConnectPorts:[a.port],connectTimeoutMs:5e3,tlsHandshakeTimeoutMs:5e3,responseHeaderTimeoutMs:5e3,idleTimeoutMs:3e4},{certificateProvider:()=>K,upstreamCa:H.certPem,resolveTarget:w,onAudit:a=>R.push(a)});let b=await u(S),d=await (U=b.port,new Promise((a,b)=>{let c=e.connect(U,"127.0.0.1"),d=[],f=setTimeout(()=>b(Error("Plain HTTP rejection timeout")),5e3);c.once("connect",()=>c.end("GET http://example.com/ HTTP/1.1\r\nHost: example.com\r\nConnection: close\r\n\r\n")),c.on("data",a=>d.push(Buffer.from(a))),c.once("error",b),c.once("end",()=>{clearTimeout(f),a(Buffer.concat(d).toString("utf8"))})}));c("Plain HTTP forward proxy is disabled",d.startsWith("HTTP/1.1 403"));let g="";try{await x(b.port,`blocked.invalid:${a.port}`)}catch(a){g=a.message||String(a)}c("CONNECT to a non-allowlisted host is refused",g.includes("403"),g),await new Promise(a=>setTimeout(a,100));let i=R.find(a=>"CONNECT"===a.method&&"blocked.invalid"===a.host);c("Refused CONNECT is audited with the blocked host",!!i,i?"":"no CONNECT event recorded"),c("Refused CONNECT records why it was blocked",/allowlist/i.test(i?.error||""),i?.error||"");let k=j({allowedHosts:["localhost"],passthroughUnknown:!1,captureBodies:!0,captureLimitBytes:1048576,verifyUpstreamTls:!0,allowedConnectPorts:[a.port],connectTimeoutMs:5e3,tlsHandshakeTimeoutMs:5e3,responseHeaderTimeoutMs:5e3,idleTimeoutMs:3e4,clientToolFilterEnabled:!0,allowedClientTools:["claude-code"]},{certificateProvider:()=>K,upstreamCa:H.certPem,resolveTarget:w,onAudit:a=>R.push(a)}),m=await u(k),n="";try{(await x(m.port,`localhost:${a.port}`,"claude-cli/2.0.1 (external, cli)")).destroy()}catch(a){n=a.message||String(a)}c("Allowed tool still opens a tunnel",""===n,n);let o="";try{await x(m.port,`localhost:${a.port}`,"Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/131.0")}catch(a){o=a.message||String(a)}c("Browser is turned away by the tool filter",o.includes("403"),o);let p="";try{await x(m.port,`localhost:${a.port}`)}catch(a){p=a.message||String(a)}c("Omitting the User-Agent does not slip past the tool filter",p.includes("403"),p),await new Promise(a=>setTimeout(a,100));let q=R.find(a=>/Client tool is not allowed/i.test(a.error||""));c("Refused tool is audited with the User-Agent that was rejected",/Chrome|no User-Agent/i.test(q?.error||""),q?.error||""),await v(k);let s=Buffer.from(JSON.stringify({model:"audit-self-test-h1",messages:[{role:"user",content:"hello h1 ✓"}]})),t="/v1/messages?beta=true&encoded=%2F",z=await x(b.port,`localhost:${a.port}`),A=await y({socket:z,ca:J.certPem,servername:"localhost",port:a.port,body:s,path:t});c("HTTP/1.1 CONNECT and TLS succeeded",A.head.startsWith("HTTP/1.1 200")),c("HTTP/1.1 compressed response bytes preserved",r(A.body)===r(M));let B=Buffer.from(JSON.stringify({model:"audit-self-test-h2-downgrade",messages:[{role:"user",content:"hello downgrade ✓"}]})),C="/v1/messages?beta=true&protocol=h2-preferred",D=await x(b.port,`localhost:${a.port}`),E=null,F=await y({socket:D,ca:J.certPem,servername:"localhost",port:a.port,body:B,path:C,alpnProtocols:["h2","http/1.1"],onAlpn:a=>{E=a}});c("h2-preferring client is downgraded to HTTP/1.1","http/1.1"===E,`negotiated ${E||"none"}`),c("Downgraded client still gets a response",F.head.startsWith("HTTP/1.1 200")),c("Downgraded compressed response bytes preserved",r(F.body)===r(M)),c("HTTP/2 is not advertised while the h2 path is unfixed",S.auditCapabilities?.http2===!1);let G=Buffer.from(JSON.stringify({model:"audit-self-test-stream-model",messages:[{role:"user",content:"x".repeat(1052672)}]})),I=await x(b.port,`localhost:${a.port}`),L=await y({socket:I,ca:J.certPem,servername:"localhost",port:a.port,body:G,path:"/v1/messages?beta=true&stream=1"});c("Streaming response forwarded",L.head.startsWith("HTTP/1.1 200")),await new Promise(a=>setTimeout(a,100));let O=R.find(a=>String(a.path||"").includes("stream=1"));c("Streaming audit event captured",!!O),c("Token usage extracted from streamed response",O?.usage?.inputTokens===11&&O?.usage?.cacheCreationTokens===22&&O?.usage?.cacheReadTokens===33&&O?.usage?.outputTokens===44&&O?.usage?.totalTokens===110,JSON.stringify(O?.usage||null)),c("Streamed usage marked complete",O?.usage?.complete===!0&&O?.usage?.stopReason==="end_turn"),c("Model recovered from response when request body is truncated",O?.request?.truncated===!0&&O?.model==="audit-self-test-stream-model"),c("Exchange without token usage reports none",R.some(a=>String(a.path||"").includes("encoded=")&&null==a.usage));let P=await x(b.port,`localhost:${a.port}`),V=await function({socket:a,ca:b,servername:c,port:d,path:e}){return new Promise((g,i)=>{let j=f.connect({socket:a,ca:b,servername:c,rejectUnauthorized:!0,ALPNProtocols:["http/1.1"]}),k=[],l=setTimeout(()=>i(Error("Upgrade test timeout")),1e4);j.once("error",i),j.once("secureConnect",()=>{j.write(`GET ${e} HTTP/1.1\r
 Host: localhost:${d}\r
 Upgrade: websocket\r
 Connection: Upgrade\r
@@ -37,7 +38,7 @@ x-api-key: sk-test-supersecret-123456789\r
 Sec-WebSocket-Key: ${h.randomBytes(16).toString("base64")}\r
 Sec-WebSocket-Version: 13\r
 \r
-`)});let m=()=>{clearTimeout(l),g(Buffer.concat(k).toString("latin1"))};j.on("data",a=>{k.push(Buffer.from(a)),Buffer.concat(k).indexOf("\r\n\r\n")>=0&&m()}),j.on("end",m),j.on("close",m)})}({socket:B,ca:G.certPem,servername:"localhost",port:a.port,path:"/v1/messages?transport=websocket"});c("Protocol upgrade is refused, not silently downgraded",C.startsWith("HTTP/1.1 501"),C.slice(0,40)),c("Upgrade refusal tells the client what to do instead",/HTTP streaming transport/i.test(C)),c("Upgrade never reaches the origin",!K.some(a=>String(a.path||"").includes("transport=websocket"))),await new Promise(a=>setTimeout(a,100)),c("Refused upgrade is still audited",O.some(a=>501===a.status&&String(a.path||"").includes("transport=websocket")));let D=K.find(a=>"http/1.1"===a.protocol),F=K.find(a=>String(a.path||"").includes("h2-preferred"));c("HTTP/1.1 path/query preserved",D?.path===i),c("Downgraded path/query preserved",F?.path===o),c("HTTP/1.1 request body byte-identical",D&&p(D.body)===p(g)),c("Downgraded request body byte-identical",F&&p(F.body)===p(n)),c("Authorization preserved on wire",K.every(a=>"Bearer test-secret-authorization-123456789"===a.authorization)),c("x-api-key preserved on wire",K.every(a=>"sk-test-supersecret-123456789"===a.apiKey)),c("Internal x-9r-* header stripped",K.every(a=>null==a.internalHeader));let I=O.find(a=>"http/1.1"===a.protocol),L=O.find(a=>String(a.path||"").includes("h2-preferred"));c("HTTP/1.1 audit event captured",!!I),c("Downgraded audit event captured",!!L),c("Request wire SHA-256 recorded",I?.request?.wireSha256===p(g)&&L?.request?.wireSha256===p(n)),c("Response wire SHA-256 recorded",I?.response?.wireSha256===p(J)&&L?.response?.wireSha256===p(J)),c("Compressed audit response decoded",I?.response?.body?.includes("compressed response preserved")&&L?.response?.body?.includes("compressed response preserved")),c("Authorization redacted in audit",O.every(a=>a.request?.headers?.authorization==="[REDACTED]")),c("x-api-key redacted in audit",O.every(a=>a.request?.headers?.["x-api-key"]==="[REDACTED]")),c("No likely API secret persisted",O.length>=2&&O.every(a=>!l(a))),Q=j({allowedHosts:["localhost"],passthroughUnknown:!1,captureBodies:!0,captureLimitBytes:1048576,verifyUpstreamTls:!0,allowedConnectPorts:[a.port],connectTimeoutMs:5e3,tlsHandshakeTimeoutMs:5e3,responseHeaderTimeoutMs:5e3,idleTimeoutMs:3e4},{certificateProvider:()=>H,upstreamCa:E.certPem,resolveTarget:u,onAudit:()=>{throw Error("simulated audit sink failure")}});let M=await s(Q),S=await v(M.port,`localhost:${a.port}`),T=await w({socket:S,ca:G.certPem,servername:"localhost",port:a.port,body:g,path:i});c("Audit sink failure does not fail proxied request",T.head.startsWith("HTTP/1.1 200"))}catch(a){c("Self-test execution",!1,a.message||String(a))}finally{await t(Q),await t(P),await t(N)}return{ok:b.length>0&&b.every(a=>a.ok),checks:b,passed:b.filter(a=>a.ok).length,total:b.length,durationMs:Date.now()-a}}}},86439:a=>{a.exports=require("next/dist/shared/lib/no-fallback-error.external")},86455:a=>{function b(a){let b=Number(a);return!Number.isFinite(b)||b<0?0:Math.round(b)}function c(){return{inputTokens:0,outputTokens:0,cacheReadTokens:0,cacheCreationTokens:0,reasoningTokens:0,totalTokens:0,model:null,stopReason:null,streaming:!1,complete:!1,source:null}}function d(a){let b=String(a||"").trim();if(!b||"{"!==b[0])return null;try{let a=JSON.parse(b);return a&&"object"==typeof a&&!Array.isArray(a)?a:null}catch{return null}}function e(a,c){"string"==typeof c.model&&c.model&&!a.model&&(a.model=c.model);let d="response.completed"===c.type||"response.done"===c.type?c.response?.usage:null,e=d||c.usage;if(!e||"object"!=typeof e)return!1;d&&"string"==typeof c.response?.model&&c.response.model&&(a.model=c.response.model);let f=b(e.prompt_tokens??e.input_tokens),g=b(e.completion_tokens??e.output_tokens);if(!f&&!g)return!1;let h=b(e.prompt_tokens_details?.cached_tokens??e.input_tokens_details?.cached_tokens??e.cached_tokens??e.prompt_cache_hit_tokens);a.inputTokens=Math.max(0,f-h),a.cacheReadTokens=h,a.outputTokens=g,a.reasoningTokens=b(e.completion_tokens_details?.reasoning_tokens??e.output_tokens_details?.reasoning_tokens),a.complete=!0;let i=c.choices?.[0]?.finish_reason;return"string"==typeof i&&i&&(a.stopReason=i),!0}function f(a,f){let g=c();g.streaming=!0,g.source="sse";let h=!1;for(let c of function*(a){let b=String(a||""),c=0;for(;c<b.length;){let a=b.indexOf("\n",c);-1===a&&(a=b.length);let e=b.slice(c,a).trim();if(c=a+1,!e.startsWith("data:"))continue;let f=e.slice(5).trim();if(!f||"[DONE]"===f)continue;let g=d(f);g&&(yield g)}}(a)){if(("anthropic"===f||"message_start"===c.type||"message_delta"===c.type)&&function(a,c){let d=String(c.type||"");if("message_start"===d&&c.message&&"object"==typeof c.message){let d=c.message;"string"==typeof d.model&&d.model&&(a.model=d.model);let e=d.usage;return e&&"object"==typeof e&&(a.inputTokens=b(e.input_tokens)||a.inputTokens,a.cacheReadTokens=b(e.cache_read_input_tokens)||a.cacheReadTokens,a.cacheCreationTokens=b(e.cache_creation_input_tokens)||a.cacheCreationTokens),!0}if("message_delta"===d){let d=c.usage;d&&"object"==typeof d&&(a.outputTokens=b(d.output_tokens)||a.outputTokens,a.inputTokens=a.inputTokens||b(d.input_tokens),a.cacheReadTokens=a.cacheReadTokens||b(d.cache_read_input_tokens),a.cacheCreationTokens=a.cacheCreationTokens||b(d.cache_creation_input_tokens),a.complete=!0);let e=c.delta?.stop_reason;return"string"==typeof e&&e&&(a.stopReason=e),!0}return!1}(g,c)){h=!0;continue}e(g,c)&&(h=!0)}return h?g:null}function g(a){let f=d(a);if(!f)return null;let g=c();g.source="json","string"==typeof f.model&&f.model&&(g.model=f.model);let h=f.usage;return h&&"object"==typeof h?null!=h.input_tokens||null!=h.output_tokens?(g.inputTokens=b(h.input_tokens),g.outputTokens=b(h.output_tokens),g.cacheReadTokens=b(h.cache_read_input_tokens),g.cacheCreationTokens=b(h.cache_creation_input_tokens),g.complete=!0,"string"==typeof f.stop_reason&&(g.stopReason=f.stop_reason),g):e(g,f)?g:null:null}function h(a){return/\/count_tokens\b/.test(String(a||""))}function i(a){return a.inputTokens+a.cacheReadTokens+a.cacheCreationTokens}a.exports={extractUsageFromBody:function({provider:a,body:b,contentType:c="",path:d=""}={}){if("string"!=typeof b||!b||b.length>0x1000000||h(d))return null;let e=/event-stream/i.test(String(c||""))||b.includes("\ndata:")||b.startsWith("data:")?f(b,a)||g(b):g(b)||f(b,a);return e&&(e&&(e.inputTokens||e.outputTokens||e.cacheReadTokens||e.cacheCreationTokens)||e.model)?(e.totalTokens=e.inputTokens+e.outputTokens+e.cacheReadTokens+e.cacheCreationTokens,e):null},isTokenCountingEndpoint:h,toTokensJson:function(a){if(!a)return null;let b=i(a),c={input_tokens:a.inputTokens,output_tokens:a.outputTokens,prompt_tokens:b,completion_tokens:a.outputTokens,total_tokens:a.totalTokens,display_total_input_tokens:b,display_new_input_tokens:a.inputTokens,display_cached_input_tokens:a.cacheReadTokens,display_cache_creation_input_tokens:a.cacheCreationTokens,display_output_tokens:a.outputTokens};return a.cacheReadTokens&&(c.cache_read_input_tokens=a.cacheReadTokens),a.cacheCreationTokens&&(c.cache_creation_input_tokens=a.cacheCreationTokens),a.cacheReadTokens&&(c.cached_tokens=a.cacheReadTokens),a.reasoningTokens&&(c.reasoning_tokens=a.reasoningTokens),c},totalInputTokens:i}},87496:(a,b,c)=>{c.r(b),c.d(b,{GET:()=>B,POST:()=>D,PUT:()=>C,dynamic:()=>r,revalidate:()=>s,runtime:()=>q});var d=c(23211),e=c(9588),f=c(45903);let g="audit-proxy",h="client",i="provider_response",j="__blueRouterAuditRecentMysqlReader";function k(){return globalThis[j]||(globalThis[j]={pool:null,poolKey:"",poolPromise:null,cache:{expiresAt:0,limit:0,result:null}}),globalThis[j]}async function l(a){let b=k(),d=JSON.stringify({host:a.host,port:Number(a.port||3306),database:a.database,username:a.username,password:a.password,ssl:!0===a.ssl});if(b.pool&&b.poolKey===d||b.poolPromise&&(await b.poolPromise.catch(()=>{}),b.pool&&b.poolKey===d))return b.pool;b.poolPromise=(async()=>{if(b.pool&&b.poolKey!==d){try{await b.pool.end()}catch{}b.pool=null,b.poolKey=""}let e=await c.e(8491).then(c.t.bind(c,38491,19)),f=(e.default||e).createPool({host:a.host,port:Number(a.port||3306),database:a.database,user:a.username,password:a.password,ssl:a.ssl?{rejectUnauthorized:!0}:void 0,connectTimeout:2500,waitForConnections:!0,connectionLimit:1,maxIdle:1,idleTimeout:3e4,queueLimit:4,enableKeepAlive:!0,keepAliveInitialDelay:3e4,timezone:"Z",dateStrings:!0});return b.pool=f,b.poolKey=d,f})();try{return await b.poolPromise}finally{b.poolPromise=null}}function m(a){if(null==a||""===a)return null;let b=Number(a);return Number.isFinite(b)?b:null}function n(a){let b=Date.parse(a||0);return Number.isFinite(b)?b:0}async function o(a=50){let b=Math.max(1,Math.min(500,Number(a)||50)),c=k(),d=Date.now();if(c.cache.result&&c.cache.expiresAt>d&&c.cache.limit>=b)return{...c.cache.result,events:c.cache.result.events.slice(0,b),cached:!0};try{let a=await (0,f.getPromptLogDbConfig)();if(!a?.enabled)return{events:[],available:!1,reason:"Prompt Log MySQL is disabled",error:null};if("mysql"!==String(a.type||"").toLowerCase())return{events:[],available:!1,reason:`Prompt Log database type is ${a.type||"unknown"}`,error:null};let e=await l(a),j=Math.min(1200,2*b+20),k=`SELECT
+`)});let m=()=>{clearTimeout(l),g(Buffer.concat(k).toString("latin1"))};j.on("data",a=>{k.push(Buffer.from(a)),Buffer.concat(k).indexOf("\r\n\r\n")>=0&&m()}),j.on("end",m),j.on("close",m)})}({socket:P,ca:J.certPem,servername:"localhost",port:a.port,path:"/v1/messages?transport=websocket"});c("Protocol upgrade is refused, not silently downgraded",V.startsWith("HTTP/1.1 501"),V.slice(0,40)),c("Upgrade refusal tells the client what to do instead",/HTTP streaming transport/i.test(V)),c("Upgrade never reaches the origin",!N.some(a=>String(a.path||"").includes("transport=websocket"))),await new Promise(a=>setTimeout(a,100)),c("Refused upgrade is still audited",R.some(a=>501===a.status&&String(a.path||"").includes("transport=websocket")));let W=N.find(a=>"http/1.1"===a.protocol),X=N.find(a=>String(a.path||"").includes("h2-preferred"));c("HTTP/1.1 path/query preserved",W?.path===t),c("Downgraded path/query preserved",X?.path===C),c("HTTP/1.1 request body byte-identical",W&&r(W.body)===r(s)),c("Downgraded request body byte-identical",X&&r(X.body)===r(B)),c("Authorization preserved on wire",N.every(a=>"Bearer test-secret-authorization-123456789"===a.authorization)),c("x-api-key preserved on wire",N.every(a=>"sk-test-supersecret-123456789"===a.apiKey)),c("Internal x-9r-* header stripped",N.every(a=>null==a.internalHeader));let Y=R.find(a=>String(a.path||"").includes("encoded=")),Z=R.find(a=>String(a.path||"").includes("h2-preferred"));c("HTTP/1.1 audit event captured",!!Y),c("Downgraded audit event captured",!!Z),c("Request wire SHA-256 recorded",Y?.request?.wireSha256===r(s)&&Z?.request?.wireSha256===r(B)),c("Response wire SHA-256 recorded",Y?.response?.wireSha256===r(M)&&Z?.response?.wireSha256===r(M)),c("Compressed audit response decoded",Y?.response?.body?.includes("compressed response preserved")&&Z?.response?.body?.includes("compressed response preserved"));let $=R.filter(a=>"authorization"in(a.request?.headers||{}));c("Authorization redacted in audit",$.length>0&&$.every(a=>"[REDACTED]"===a.request.headers.authorization));let _=R.filter(a=>"x-api-key"in(a.request?.headers||{}));c("x-api-key redacted in audit",_.length>0&&_.every(a=>"[REDACTED]"===a.request.headers["x-api-key"])),c("No likely API secret persisted",R.length>=2&&R.every(a=>!l(a))),T=j({allowedHosts:["localhost"],passthroughUnknown:!1,captureBodies:!0,captureLimitBytes:1048576,verifyUpstreamTls:!0,allowedConnectPorts:[a.port],connectTimeoutMs:5e3,tlsHandshakeTimeoutMs:5e3,responseHeaderTimeoutMs:5e3,idleTimeoutMs:3e4},{certificateProvider:()=>K,upstreamCa:H.certPem,resolveTarget:w,onAudit:()=>{throw Error("simulated audit sink failure")}});let aa=await u(T),ab=await x(aa.port,`localhost:${a.port}`),ac=await y({socket:ab,ca:J.certPem,servername:"localhost",port:a.port,body:s,path:t});c("Audit sink failure does not fail proxied request",ac.head.startsWith("HTTP/1.1 200"))}catch(a){c("Self-test execution",!1,a.message||String(a))}finally{await v(T),await v(S),await v(Q)}return{ok:b.length>0&&b.every(a=>a.ok),checks:b,passed:b.filter(a=>a.ok).length,total:b.length,durationMs:Date.now()-a}}}},86439:a=>{a.exports=require("next/dist/shared/lib/no-fallback-error.external")},86455:a=>{function b(a){let b=Number(a);return!Number.isFinite(b)||b<0?0:Math.round(b)}function c(){return{inputTokens:0,outputTokens:0,cacheReadTokens:0,cacheCreationTokens:0,reasoningTokens:0,totalTokens:0,model:null,stopReason:null,streaming:!1,complete:!1,source:null}}function d(a){let b=String(a||"").trim();if(!b||"{"!==b[0])return null;try{let a=JSON.parse(b);return a&&"object"==typeof a&&!Array.isArray(a)?a:null}catch{return null}}function e(a,c){"string"==typeof c.model&&c.model&&!a.model&&(a.model=c.model);let d="response.completed"===c.type||"response.done"===c.type?c.response?.usage:null,e=d||c.usage;if(!e||"object"!=typeof e)return!1;d&&"string"==typeof c.response?.model&&c.response.model&&(a.model=c.response.model);let f=b(e.prompt_tokens??e.input_tokens),g=b(e.completion_tokens??e.output_tokens);if(!f&&!g)return!1;let h=b(e.prompt_tokens_details?.cached_tokens??e.input_tokens_details?.cached_tokens??e.cached_tokens??e.prompt_cache_hit_tokens);a.inputTokens=Math.max(0,f-h),a.cacheReadTokens=h,a.outputTokens=g,a.reasoningTokens=b(e.completion_tokens_details?.reasoning_tokens??e.output_tokens_details?.reasoning_tokens),a.complete=!0;let i=c.choices?.[0]?.finish_reason;return"string"==typeof i&&i&&(a.stopReason=i),!0}function f(a,f){let g=c();g.streaming=!0,g.source="sse";let h=!1;for(let c of function*(a){let b=String(a||""),c=0;for(;c<b.length;){let a=b.indexOf("\n",c);-1===a&&(a=b.length);let e=b.slice(c,a).trim();if(c=a+1,!e.startsWith("data:"))continue;let f=e.slice(5).trim();if(!f||"[DONE]"===f)continue;let g=d(f);g&&(yield g)}}(a)){if(("anthropic"===f||"message_start"===c.type||"message_delta"===c.type)&&function(a,c){let d=String(c.type||"");if("message_start"===d&&c.message&&"object"==typeof c.message){let d=c.message;"string"==typeof d.model&&d.model&&(a.model=d.model);let e=d.usage;return e&&"object"==typeof e&&(a.inputTokens=b(e.input_tokens)||a.inputTokens,a.cacheReadTokens=b(e.cache_read_input_tokens)||a.cacheReadTokens,a.cacheCreationTokens=b(e.cache_creation_input_tokens)||a.cacheCreationTokens),!0}if("message_delta"===d){let d=c.usage;d&&"object"==typeof d&&(a.outputTokens=b(d.output_tokens)||a.outputTokens,a.inputTokens=a.inputTokens||b(d.input_tokens),a.cacheReadTokens=a.cacheReadTokens||b(d.cache_read_input_tokens),a.cacheCreationTokens=a.cacheCreationTokens||b(d.cache_creation_input_tokens),a.complete=!0);let e=c.delta?.stop_reason;return"string"==typeof e&&e&&(a.stopReason=e),!0}return!1}(g,c)){h=!0;continue}e(g,c)&&(h=!0)}return h?g:null}function g(a){let f=d(a);if(!f)return null;let g=c();g.source="json","string"==typeof f.model&&f.model&&(g.model=f.model);let h=f.usage;return h&&"object"==typeof h?null!=h.input_tokens||null!=h.output_tokens?(g.inputTokens=b(h.input_tokens),g.outputTokens=b(h.output_tokens),g.cacheReadTokens=b(h.cache_read_input_tokens),g.cacheCreationTokens=b(h.cache_creation_input_tokens),g.complete=!0,"string"==typeof f.stop_reason&&(g.stopReason=f.stop_reason),g):e(g,f)?g:null:null}function h(a){return/\/count_tokens\b/.test(String(a||""))}function i(a){return a.inputTokens+a.cacheReadTokens+a.cacheCreationTokens}a.exports={extractUsageFromBody:function({provider:a,body:b,contentType:c="",path:d=""}={}){if("string"!=typeof b||!b||b.length>0x1000000||h(d))return null;let e=/event-stream/i.test(String(c||""))||b.includes("\ndata:")||b.startsWith("data:")?f(b,a)||g(b):g(b)||f(b,a);return e&&(e&&(e.inputTokens||e.outputTokens||e.cacheReadTokens||e.cacheCreationTokens)||e.model)?(e.totalTokens=e.inputTokens+e.outputTokens+e.cacheReadTokens+e.cacheCreationTokens,e):null},isTokenCountingEndpoint:h,toTokensJson:function(a){if(!a)return null;let b=i(a),c={input_tokens:a.inputTokens,output_tokens:a.outputTokens,prompt_tokens:b,completion_tokens:a.outputTokens,total_tokens:a.totalTokens,display_total_input_tokens:b,display_new_input_tokens:a.inputTokens,display_cached_input_tokens:a.cacheReadTokens,display_cache_creation_input_tokens:a.cacheCreationTokens,display_output_tokens:a.outputTokens};return a.cacheReadTokens&&(c.cache_read_input_tokens=a.cacheReadTokens),a.cacheCreationTokens&&(c.cache_creation_input_tokens=a.cacheCreationTokens),a.cacheReadTokens&&(c.cached_tokens=a.cacheReadTokens),a.reasoningTokens&&(c.reasoning_tokens=a.reasoningTokens),c},totalInputTokens:i}},87496:(a,b,c)=>{c.r(b),c.d(b,{GET:()=>B,POST:()=>D,PUT:()=>C,dynamic:()=>r,revalidate:()=>s,runtime:()=>q});var d=c(23211),e=c(9588),f=c(45903);let g="audit-proxy",h="client",i="provider_response",j="__blueRouterAuditRecentMysqlReader";function k(){return globalThis[j]||(globalThis[j]={pool:null,poolKey:"",poolPromise:null,cache:{expiresAt:0,limit:0,result:null}}),globalThis[j]}async function l(a){let b=k(),d=JSON.stringify({host:a.host,port:Number(a.port||3306),database:a.database,username:a.username,password:a.password,ssl:!0===a.ssl});if(b.pool&&b.poolKey===d||b.poolPromise&&(await b.poolPromise.catch(()=>{}),b.pool&&b.poolKey===d))return b.pool;b.poolPromise=(async()=>{if(b.pool&&b.poolKey!==d){try{await b.pool.end()}catch{}b.pool=null,b.poolKey=""}let e=await c.e(8491).then(c.t.bind(c,38491,19)),f=(e.default||e).createPool({host:a.host,port:Number(a.port||3306),database:a.database,user:a.username,password:a.password,ssl:a.ssl?{rejectUnauthorized:!0}:void 0,connectTimeout:2500,waitForConnections:!0,connectionLimit:1,maxIdle:1,idleTimeout:3e4,queueLimit:4,enableKeepAlive:!0,keepAliveInitialDelay:3e4,timezone:"Z",dateStrings:!0});return b.pool=f,b.poolKey=d,f})();try{return await b.poolPromise}finally{b.poolPromise=null}}function m(a){if(null==a||""===a)return null;let b=Number(a);return Number.isFinite(b)?b:null}function n(a){let b=Date.parse(a||0);return Number.isFinite(b)?b:0}async function o(a=50){let b=Math.max(1,Math.min(500,Number(a)||50)),c=k(),d=Date.now();if(c.cache.result&&c.cache.expiresAt>d&&c.cache.limit>=b)return{...c.cache.result,events:c.cache.result.events.slice(0,b),cached:!0};try{let a=await (0,f.getPromptLogDbConfig)();if(!a?.enabled)return{events:[],available:!1,reason:"Prompt Log MySQL is disabled",error:null};if("mysql"!==String(a.type||"").toLowerCase())return{events:[],available:!1,reason:`Prompt Log database type is ${a.type||"unknown"}`,error:null};let e=await l(a),j=Math.min(1200,2*b+20),k=`SELECT
       id, created_at, stage, model, endpoint, provider,
       client_ip, client_port, client_user_agent, client_host, source_host,
       prompt_text, response_text, status_code, error_text, meta_json
@@ -69,4 +70,4 @@ Sec-WebSocket-Version: 13\r
           WHERE p.payload_hash = ?
             AND p.last_seen_at < UTC_TIMESTAMP(3) - INTERVAL 5 MINUTE
             AND NOT EXISTS (SELECT 1 FROM prompt_logs r WHERE r.payload_hash = p.payload_hash)
-            AND NOT EXISTS (SELECT 1 FROM prompt_logs r WHERE r.response_payload_hash = p.payload_hash)`,[b]);await a.commit()}catch(b){if(a)try{await a.rollback()}catch{}F(`Failed to clear mirrored audit rows: ${b.message||b}`)}finally{try{a?.release()}catch{}}}a.exports={appendAudit:function(a){return Y(async()=>a)},enqueueAuditJob:Y,readRecent:_,clearAudit:async function a(){E.clearing=!0,E.queue.length=0,E.workers.size&&await Promise.allSettled([...E.workers]),j();let a=await d.promises.readdir(i).catch(()=>[]);await Promise.all(a.filter(a=>a.endsWith(".jsonl")).map(a=>d.promises.unlink(e.join(i,a)).catch(()=>{}))),await d.promises.writeFile(h,"",{mode:384}).catch(()=>{}),D.clear(),await ad(),E.clearing=!1,E.queue.length&&setImmediate(X)},pruneExpired:ab,startAuditMaintenance:function(){C||(C=setInterval(()=>void ab(),36e5),C.unref?.())},stopAuditMaintenance:function(){C&&clearInterval(C),C=null},flushAuditQueue:ac,getAuditStoreStats:function(){return{queueDepth:E.queue.length,queueLimit:1e3,workerRunning:E.activeWorkers>0,workerConcurrency:4,activeWorkers:E.activeWorkers,mysqlPoolConnections:4,enqueued:E.enqueued,written:E.written,dropped:E.dropped,failed:E.failed,mysqlWritten:E.mysqlWritten,mysqlFailed:E.mysqlFailed,usageWritten:E.usageWritten,usageFailed:E.usageFailed,tokensSeen:E.tokensSeen,lastError:E.lastError,lastWrittenAt:E.lastWrittenAt,logDirectory:i}},appendPromptLog:P,appendUsageEvent:S}},91645:a=>{a.exports=require("net")},94735:a=>{a.exports=require("events")}};var b=require("../../../webpack-runtime.js");b.C(a);var c=b.X(0,[4741,5592,5573,4433,7669,402,3767],()=>b(b.s=3697));module.exports=c})();
+            AND NOT EXISTS (SELECT 1 FROM prompt_logs r WHERE r.response_payload_hash = p.payload_hash)`,[b]);await a.commit()}catch(b){if(a)try{await a.rollback()}catch{}F(`Failed to clear mirrored audit rows: ${b.message||b}`)}finally{try{a?.release()}catch{}}}a.exports={appendAudit:function(a){return Y(async()=>a)},enqueueAuditJob:Y,readRecent:_,clearAudit:async function a(){E.clearing=!0,E.queue.length=0,E.workers.size&&await Promise.allSettled([...E.workers]),j();let a=await d.promises.readdir(i).catch(()=>[]);await Promise.all(a.filter(a=>a.endsWith(".jsonl")).map(a=>d.promises.unlink(e.join(i,a)).catch(()=>{}))),await d.promises.writeFile(h,"",{mode:384}).catch(()=>{}),D.clear(),await ad(),E.clearing=!1,E.queue.length&&setImmediate(X)},pruneExpired:ab,startAuditMaintenance:function(){C||(C=setInterval(()=>void ab(),36e5),C.unref?.())},stopAuditMaintenance:function(){C&&clearInterval(C),C=null},flushAuditQueue:ac,getAuditStoreStats:function(){return{queueDepth:E.queue.length,queueLimit:1e3,workerRunning:E.activeWorkers>0,workerConcurrency:4,activeWorkers:E.activeWorkers,mysqlPoolConnections:4,enqueued:E.enqueued,written:E.written,dropped:E.dropped,failed:E.failed,mysqlWritten:E.mysqlWritten,mysqlFailed:E.mysqlFailed,usageWritten:E.usageWritten,usageFailed:E.usageFailed,tokensSeen:E.tokensSeen,lastError:E.lastError,lastWrittenAt:E.lastWrittenAt,logDirectory:i}},appendPromptLog:P,appendUsageEvent:S}},91645:a=>{a.exports=require("net")},94735:a=>{a.exports=require("events")},98586:a=>{let b=[{id:"claude-code",label:"Claude Code",patterns:["claude-cli","claude-code","anthropic"]},{id:"codex",label:"OpenAI Codex",patterns:["codex_cli","codex-cli","codex"]},{id:"gemini-cli",label:"Gemini CLI",patterns:["gemini-cli","google-genai"]},{id:"cursor",label:"Cursor",patterns:["cursor"]},{id:"curl",label:"curl / scripts",patterns:["curl","wget","httpie"]}];function c(a){return String(a||"").trim().toLowerCase()}a.exports={TOOL_PRESETS:b,normalizeAllowedTools:function(a){let d=Array.isArray(a)?a:String(a||"").split(/[\r\n,]+/),e=[];for(let a of d){let d=c(a);if(!d)continue;let f=b.find(a=>a.id===d);f?e.push(...f.patterns):e.push(d)}return[...new Set(e)]},normalizeAllowedToolsInput:function(a){return[...new Set((Array.isArray(a)?a:String(a||"").split(/[\r\n,]+/)).map(c).filter(Boolean))]},clientToolMatches:function(a,b=[]){let d=c(a);return!!d&&!!b.length&&b.some(a=>a&&d.includes(a))},describeUserAgent:function(a){let b=String(a||"").trim();return b?b.length>120?`${b.slice(0,119)}…`:b:"no User-Agent"}}}};var b=require("../../../webpack-runtime.js");b.C(a);var c=b.X(0,[4741,5592,5573,4433,7669,402,3767],()=>b(b.s=3697));module.exports=c})();

package/app/.next-cli-build/server/app/api/audit-proxy/route.js.nft.json

@@ -1 +1 @@
-{"version":1,"files":["../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/backups/upgrade-5.3.66-to-5.3.67-5.3.67-20260823-124458/data.sqlite","../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/backups/upgrade-5.3.66-to-5.3.67-5.3.67-20260823-124459/data.sqlite","../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/backups/upgrade-5.3.67-to-5.3.68-5.3.68-20260823-125625/data.sqlite","../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/backups/upgrade-5.3.68-to-5.3.69-5.3.69-20260823-134420/data.sqlite","../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/backups/upgrade-5.3.69-to-5.3.70-5.3.70-20260823-140130/data.sqlite","../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/data.sqlite","../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/data.sqlite-shm","../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/data.sqlite-wal","../../../../../cli/.build-home/AppData/Roaming/bluerouter/jwt-secret","../../../../../cli/.build-home/AppData/Roaming/bluerouter/machine-id","../../../../../cli/.build-home/AppData/Roaming/nextjs-nodejs/Config/config.json","../../../../../node_modules/@swc/helpers/_/_interop_require_default/package.json","../../../../../node_modules/@swc/helpers/cjs/_interop_require_default.cjs","../../../../../node_modules/@swc/helpers/package.json","../../../../../node_modules/better-sqlite3/build/Release/better_sqlite3.node","../../../../../node_modules/better-sqlite3/lib/database.js","../../../../../node_modules/better-sqlite3/lib/index.js","../../../../../node_modules/better-sqlite3/lib/methods/aggregate.js","../../../../../node_modules/better-sqlite3/lib/methods/backup.js","../../../../../node_modules/better-sqlite3/lib/methods/function.js","../../../../../node_modules/better-sqlite3/lib/methods/inspect.js","../../../../../node_modules/better-sqlite3/lib/methods/pragma.js","../../../../../node_modules/better-sqlite3/lib/methods/serialize.js","../../../../../node_modules/better-sqlite3/lib/methods/table.js","../../../../../node_modules/better-sqlite3/lib/methods/transaction.js","../../../../../node_modules/better-sqlite3/lib/methods/wrappers.js","../../../../../node_modules/better-sqlite3/lib/sqlite-error.js","../../../../../node_modules/better-sqlite3/lib/util.js","../../../../../node_modules/better-sqlite3/package.json","../../../../../node_modules/bindings/bindings.js","../../../../../node_modules/bindings/package.json","../../../../../node_modules/file-uri-to-path/index.js","../../../../../node_modules/file-uri-to-path/package.json","../../../../../node_modules/next/dist/build/adapter/setup-node-env.external.js","../../../../../node_modules/next/dist/client/components/hooks-server-context.js","../../../../../node_modules/next/dist/client/components/static-generation-bailout.js","../../../../../node_modules/next/dist/client/lib/console.js","../../../../../node_modules/next/dist/compiled/@opentelemetry/api/index.js","../../../../../node_modules/next/dist/compiled/@opentelemetry/api/package.json","../../../../../node_modules/next/dist/compiled/jsonwebtoken/index.js","../../../../../node_modules/next/dist/compiled/jsonwebtoken/package.json","../../../../../node_modules/next/dist/compiled/next-server/app-page.runtime.prod.js","../../../../../node_modules/next/dist/compiled/next-server/app-route.runtime.prod.js","../../../../../node_modules/next/dist/compiled/source-map/package.json","../../../../../node_modules/next/dist/compiled/source-map/source-map.js","../../../../../node_modules/next/dist/compiled/stacktrace-parser/package.json","../../../../../node_modules/next/dist/compiled/stacktrace-parser/stack-trace-parser.cjs.js","../../../../../node_modules/next/dist/compiled/ws/index.js","../../../../../node_modules/next/dist/compiled/ws/package.json","../../../../../node_modules/next/dist/lib/client-and-server-references.js","../../../../../node_modules/next/dist/lib/constants.js","../../../../../node_modules/next/dist/lib/framework/boundary-constants.js","../../../../../node_modules/next/dist/lib/interop-default.js","../../../../../node_modules/next/dist/lib/is-error.js","../../../../../node_modules/next/dist/lib/picocolors.js","../../../../../node_modules/next/dist/lib/scheduler.js","../../../../../node_modules/next/dist/lib/semver-noop.js","../../../../../node_modules/next/dist/server/app-render/action-async-storage-instance.js","../../../../../node_modules/next/dist/server/app-render/action-async-storage.external.js","../../../../../node_modules/next/dist/server/app-render/after-task-async-storage-instance.js","../../../../../node_modules/next/dist/server/app-render/after-task-async-storage.external.js","../../../../../node_modules/next/dist/server/app-render/async-local-storage.js","../../../../../node_modules/next/dist/server/app-render/blocking-route-messages.js","../../../../../node_modules/next/dist/server/app-render/cache-signal.js","../../../../../node_modules/next/dist/server/app-render/console-async-storage-instance.js","../../../../../node_modules/next/dist/server/app-render/console-async-storage.external.js","../../../../../node_modules/next/dist/server/app-render/dynamic-access-async-storage-instance.js","../../../../../node_modules/next/dist/server/app-render/dynamic-access-async-storage.external.js","../../../../../node_modules/next/dist/server/app-render/dynamic-rendering.js","../../../../../node_modules/next/dist/server/app-render/instant-validation/boundary-constants.js","../../../../../node_modules/next/dist/server/app-render/instant-validation/boundary-tracking.js","../../../../../node_modules/next/dist/server/app-render/module-loading/track-module-loading.external.js","../../../../../node_modules/next/dist/server/app-render/module-loading/track-module-loading.instance.js","../../../../../node_modules/next/dist/server/app-render/staged-rendering.js","../../../../../node_modules/next/dist/server/app-render/sync-io-messages.js","../../../../../node_modules/next/dist/server/app-render/work-async-storage-instance.js","../../../../../node_modules/next/dist/server/app-render/work-async-storage.external.js","../../../../../node_modules/next/dist/server/app-render/work-unit-async-storage-instance.js","../../../../../node_modules/next/dist/server/app-render/work-unit-async-storage.external.js","../../../../../node_modules/next/dist/server/dev/browser-logs/file-logger.js","../../../../../node_modules/next/dist/server/dynamic-rendering-utils.js","../../../../../node_modules/next/dist/server/lib/incremental-cache/memory-cache.external.js","../../../../../node_modules/next/dist/server/lib/incremental-cache/shared-cache-controls.external.js","../../../../../node_modules/next/dist/server/lib/incremental-cache/tags-manifest.external.js","../../../../../node_modules/next/dist/server/lib/lru-cache.js","../../../../../node_modules/next/dist/server/lib/parse-stack.js","../../../../../node_modules/next/dist/server/lib/router-utils/instrumentation-globals.external.js","../../../../../node_modules/next/dist/server/lib/router-utils/instrumentation-node-extensions.js","../../../../../node_modules/next/dist/server/lib/source-maps.js","../../../../../node_modules/next/dist/server/lib/trace/constants.js","../../../../../node_modules/next/dist/server/lib/trace/tracer.js","../../../../../node_modules/next/dist/server/load-manifest.external.js","../../../../../node_modules/next/dist/server/node-environment-baseline.js","../../../../../node_modules/next/dist/server/node-environment-extensions/console-dim.external.js","../../../../../node_modules/next/dist/server/node-environment-extensions/console-exit.js","../../../../../node_modules/next/dist/server/node-environment-extensions/console-file.js","../../../../../node_modules/next/dist/server/node-environment-extensions/date.js","../../../../../node_modules/next/dist/server/node-environment-extensions/error-inspect.js","../../../../../node_modules/next/dist/server/node-environment-extensions/fast-set-immediate.external.js","../../../../../node_modules/next/dist/server/node-environment-extensions/io-utils.js","../../../../../node_modules/next/dist/server/node-environment-extensions/node-crypto.js","../../../../../node_modules/next/dist/server/node-environment-extensions/random.js","../../../../../node_modules/next/dist/server/node-environment-extensions/unhandled-rejection.external.js","../../../../../node_modules/next/dist/server/node-environment-extensions/web-crypto.js","../../../../../node_modules/next/dist/server/node-environment.js","../../../../../node_modules/next/dist/server/node-polyfill-crypto.js","../../../../../node_modules/next/dist/server/patch-error-inspect.js","../../../../../node_modules/next/dist/server/require-hook.js","../../../../../node_modules/next/dist/server/response-cache/types.js","../../../../../node_modules/next/dist/server/runtime-reacts.external.js","../../../../../node_modules/next/dist/shared/lib/deep-freeze.js","../../../../../node_modules/next/dist/shared/lib/instant-messages.js","../../../../../node_modules/next/dist/shared/lib/invariant-error.js","../../../../../node_modules/next/dist/shared/lib/is-plain-object.js","../../../../../node_modules/next/dist/shared/lib/is-thenable.js","../../../../../node_modules/next/dist/shared/lib/lazy-dynamic/bailout-to-csr.js","../../../../../node_modules/next/dist/shared/lib/no-fallback-error.external.js","../../../../../node_modules/next/dist/shared/lib/page-path/ensure-leading-slash.js","../../../../../node_modules/next/dist/shared/lib/promise-with-resolvers.js","../../../../../node_modules/next/dist/shared/lib/router/utils/app-paths.js","../../../../../node_modules/next/dist/shared/lib/segment.js","../../../../../node_modules/next/dist/shared/lib/server-reference-info.js","../../../../../node_modules/next/package.json","../../../../../node_modules/pg-cloudflare/dist/empty.js","../../../../../node_modules/pg-cloudflare/dist/index.js","../../../../../node_modules/pg-cloudflare/package.json","../../../../../node_modules/pg-connection-string/index.js","../../../../../node_modules/pg-connection-string/package.json","../../../../../node_modules/pg-int8/index.js","../../../../../node_modules/pg-int8/package.json","../../../../../node_modules/pg-pool/index.js","../../../../../node_modules/pg-pool/package.json","../../../../../node_modules/pg-protocol/dist/buffer-reader.js","../../../../../node_modules/pg-protocol/dist/buffer-writer.js","../../../../../node_modules/pg-protocol/dist/index.js","../../../../../node_modules/pg-protocol/dist/messages.js","../../../../../node_modules/pg-protocol/dist/parser.js","../../../../../node_modules/pg-protocol/dist/serializer.js","../../../../../node_modules/pg-protocol/package.json","../../../../../node_modules/pg-types/index.js","../../../../../node_modules/pg-types/lib/arrayParser.js","../../../../../node_modules/pg-types/lib/binaryParsers.js","../../../../../node_modules/pg-types/lib/builtins.js","../../../../../node_modules/pg-types/lib/textParsers.js","../../../../../node_modules/pg-types/package.json","../../../../../node_modules/pg/esm/index.mjs","../../../../../node_modules/pg/lib/client.js","../../../../../node_modules/pg/lib/connection-parameters.js","../../../../../node_modules/pg/lib/connection.js","../../../../../node_modules/pg/lib/crypto/cert-signatures.js","../../../../../node_modules/pg/lib/crypto/sasl.js","../../../../../node_modules/pg/lib/crypto/utils.js","../../../../../node_modules/pg/lib/defaults.js","../../../../../node_modules/pg/lib/index.js","../../../../../node_modules/pg/lib/native/client.js","../../../../../node_modules/pg/lib/native/index.js","../../../../../node_modules/pg/lib/native/query.js","../../../../../node_modules/pg/lib/query.js","../../../../../node_modules/pg/lib/result.js","../../../../../node_modules/pg/lib/stream.js","../../../../../node_modules/pg/lib/type-overrides.js","../../../../../node_modules/pg/lib/utils.js","../../../../../node_modules/pg/package.json","../../../../../node_modules/pgpass/lib/helper.js","../../../../../node_modules/pgpass/lib/index.js","../../../../../node_modules/pgpass/package.json","../../../../../node_modules/postgres-array/index.js","../../../../../node_modules/postgres-array/package.json","../../../../../node_modules/postgres-bytea/index.js","../../../../../node_modules/postgres-bytea/package.json","../../../../../node_modules/postgres-date/index.js","../../../../../node_modules/postgres-date/package.json","../../../../../node_modules/postgres-interval/index.js","../../../../../node_modules/postgres-interval/package.json","../../../../../node_modules/react/cjs/react.development.js","../../../../../node_modules/react/cjs/react.production.js","../../../../../node_modules/react/index.js","../../../../../node_modules/react/package.json","../../../../../node_modules/split2/index.js","../../../../../node_modules/split2/package.json","../../../../../node_modules/sql.js/dist/sql-wasm.js","../../../../../node_modules/sql.js/package.json","../../../../../node_modules/xtend/mutable.js","../../../../../node_modules/xtend/package.json","../../../../../package.json","../../../../../src/lib/db/adapters/betterSqliteAdapter.js","../../../../../src/lib/db/adapters/bunSqliteAdapter.js","../../../../../src/lib/db/adapters/nodeSqliteAdapter.js","../../../../../src/lib/db/adapters/sqljsAdapter.js","../../../../../src/lib/db/migrate.js","../../../../../src/shared/utils/apiKey.js","../../../../package.json","../../../chunks/1002.js","../../../chunks/1455.js","../../../chunks/181.js","../../../chunks/1817.js","../../../chunks/1998.js","../../../chunks/2155.js","../../../chunks/2242.js","../../../chunks/241.js","../../../chunks/2430.js","../../../chunks/2506.js","../../../chunks/2507.js","../../../chunks/2512.js","../../../chunks/2556.js","../../../chunks/2566.js","../../../chunks/2611.js","../../../chunks/2650.js","../../../chunks/2664.js","../../../chunks/2731.js","../../../chunks/2891.js","../../../chunks/2944.js","../../../chunks/3031.js","../../../chunks/3104.js","../../../chunks/318.js","../../../chunks/3433.js","../../../chunks/3484.js","../../../chunks/3593.js","../../../chunks/3609.js","../../../chunks/3696.js","../../../chunks/3738.js","../../../chunks/3767.js","../../../chunks/3801.js","../../../chunks/3824.js","../../../chunks/3958.js","../../../chunks/3960.js","../../../chunks/4013.js","../../../chunks/4017.js","../../../chunks/402.js","../../../chunks/4123.js","../../../chunks/4177.js","../../../chunks/4298.js","../../../chunks/4315.js","../../../chunks/436.js","../../../chunks/4404.js","../../../chunks/4433.js","../../../chunks/4632.js","../../../chunks/4696.js","../../../chunks/4739.js","../../../chunks/4741.js","../../../chunks/4746.js","../../../chunks/476.js","../../../chunks/4778.js","../../../chunks/4780.js","../../../chunks/4790.js","../../../chunks/4803.js","../../../chunks/507.js","../../../chunks/5206.js","../../../chunks/5210.js","../../../chunks/5213.js","../../../chunks/5258.js","../../../chunks/5312.js","../../../chunks/541.js","../../../chunks/5424.js","../../../chunks/5433.js","../../../chunks/5573.js","../../../chunks/5592.js","../../../chunks/564.js","../../../chunks/5681.js","../../../chunks/5852.js","../../../chunks/5901.js","../../../chunks/5915.js","../../../chunks/595.js","../../../chunks/6053.js","../../../chunks/6064.js","../../../chunks/607.js","../../../chunks/6103.js","../../../chunks/6108.js","../../../chunks/6118.js","../../../chunks/6182.js","../../../chunks/6252.js","../../../chunks/6328.js","../../../chunks/6404.js","../../../chunks/6492.js","../../../chunks/6811.js","../../../chunks/6844.js","../../../chunks/689.js","../../../chunks/6936.js","../../../chunks/6956.js","../../../chunks/6977.js","../../../chunks/6979.js","../../../chunks/698.js","../../../chunks/6992.js","../../../chunks/7126.js","../../../chunks/7242.js","../../../chunks/7341.js","../../../chunks/7464.js","../../../chunks/7639.js","../../../chunks/7669.js","../../../chunks/7707.js","../../../chunks/7753.js","../../../chunks/7774.js","../../../chunks/7812.js","../../../chunks/7828.js","../../../chunks/7965.js","../../../chunks/7986.js","../../../chunks/8023.js","../../../chunks/8062.js","../../../chunks/8099.js","../../../chunks/814.js","../../../chunks/8255.js","../../../chunks/8316.js","../../../chunks/8347.js","../../../chunks/8352.js","../../../chunks/8360.js","../../../chunks/8469.js","../../../chunks/8491.js","../../../chunks/8520.js","../../../chunks/8590.js","../../../chunks/8640.js","../../../chunks/8895.js","../../../chunks/8946.js","../../../chunks/9483.js","../../../chunks/9489.js","../../../chunks/9609.js","../../../chunks/9868.js","../../../webpack-runtime.js","route_client-reference-manifest.js"]}
+{"version":1,"files":["../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/backups/upgrade-5.3.68-to-5.3.69-5.3.69-20260823-134420/data.sqlite","../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/backups/upgrade-5.3.69-to-5.3.70-5.3.70-20260823-140130/data.sqlite","../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/backups/upgrade-5.3.70-to-5.3.71-5.3.71-20260823-141819/data.sqlite","../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/backups/upgrade-5.3.70-to-5.3.71-5.3.71-20260823-141820/data.sqlite","../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/backups/upgrade-5.3.71-to-5.3.72-5.3.72-20260823-143506/data.sqlite","../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/data.sqlite","../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/data.sqlite-shm","../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/data.sqlite-wal","../../../../../cli/.build-home/AppData/Roaming/bluerouter/jwt-secret","../../../../../cli/.build-home/AppData/Roaming/bluerouter/machine-id","../../../../../cli/.build-home/AppData/Roaming/nextjs-nodejs/Config/config.json","../../../../../node_modules/@swc/helpers/_/_interop_require_default/package.json","../../../../../node_modules/@swc/helpers/cjs/_interop_require_default.cjs","../../../../../node_modules/@swc/helpers/package.json","../../../../../node_modules/better-sqlite3/build/Release/better_sqlite3.node","../../../../../node_modules/better-sqlite3/lib/database.js","../../../../../node_modules/better-sqlite3/lib/index.js","../../../../../node_modules/better-sqlite3/lib/methods/aggregate.js","../../../../../node_modules/better-sqlite3/lib/methods/backup.js","../../../../../node_modules/better-sqlite3/lib/methods/function.js","../../../../../node_modules/better-sqlite3/lib/methods/inspect.js","../../../../../node_modules/better-sqlite3/lib/methods/pragma.js","../../../../../node_modules/better-sqlite3/lib/methods/serialize.js","../../../../../node_modules/better-sqlite3/lib/methods/table.js","../../../../../node_modules/better-sqlite3/lib/methods/transaction.js","../../../../../node_modules/better-sqlite3/lib/methods/wrappers.js","../../../../../node_modules/better-sqlite3/lib/sqlite-error.js","../../../../../node_modules/better-sqlite3/lib/util.js","../../../../../node_modules/better-sqlite3/package.json","../../../../../node_modules/bindings/bindings.js","../../../../../node_modules/bindings/package.json","../../../../../node_modules/file-uri-to-path/index.js","../../../../../node_modules/file-uri-to-path/package.json","../../../../../node_modules/next/dist/build/adapter/setup-node-env.external.js","../../../../../node_modules/next/dist/client/components/hooks-server-context.js","../../../../../node_modules/next/dist/client/components/static-generation-bailout.js","../../../../../node_modules/next/dist/client/lib/console.js","../../../../../node_modules/next/dist/compiled/@opentelemetry/api/index.js","../../../../../node_modules/next/dist/compiled/@opentelemetry/api/package.json","../../../../../node_modules/next/dist/compiled/jsonwebtoken/index.js","../../../../../node_modules/next/dist/compiled/jsonwebtoken/package.json","../../../../../node_modules/next/dist/compiled/next-server/app-page.runtime.prod.js","../../../../../node_modules/next/dist/compiled/next-server/app-route.runtime.prod.js","../../../../../node_modules/next/dist/compiled/source-map/package.json","../../../../../node_modules/next/dist/compiled/source-map/source-map.js","../../../../../node_modules/next/dist/compiled/stacktrace-parser/package.json","../../../../../node_modules/next/dist/compiled/stacktrace-parser/stack-trace-parser.cjs.js","../../../../../node_modules/next/dist/compiled/ws/index.js","../../../../../node_modules/next/dist/compiled/ws/package.json","../../../../../node_modules/next/dist/lib/client-and-server-references.js","../../../../../node_modules/next/dist/lib/constants.js","../../../../../node_modules/next/dist/lib/framework/boundary-constants.js","../../../../../node_modules/next/dist/lib/interop-default.js","../../../../../node_modules/next/dist/lib/is-error.js","../../../../../node_modules/next/dist/lib/picocolors.js","../../../../../node_modules/next/dist/lib/scheduler.js","../../../../../node_modules/next/dist/lib/semver-noop.js","../../../../../node_modules/next/dist/server/app-render/action-async-storage-instance.js","../../../../../node_modules/next/dist/server/app-render/action-async-storage.external.js","../../../../../node_modules/next/dist/server/app-render/after-task-async-storage-instance.js","../../../../../node_modules/next/dist/server/app-render/after-task-async-storage.external.js","../../../../../node_modules/next/dist/server/app-render/async-local-storage.js","../../../../../node_modules/next/dist/server/app-render/blocking-route-messages.js","../../../../../node_modules/next/dist/server/app-render/cache-signal.js","../../../../../node_modules/next/dist/server/app-render/console-async-storage-instance.js","../../../../../node_modules/next/dist/server/app-render/console-async-storage.external.js","../../../../../node_modules/next/dist/server/app-render/dynamic-access-async-storage-instance.js","../../../../../node_modules/next/dist/server/app-render/dynamic-access-async-storage.external.js","../../../../../node_modules/next/dist/server/app-render/dynamic-rendering.js","../../../../../node_modules/next/dist/server/app-render/instant-validation/boundary-constants.js","../../../../../node_modules/next/dist/server/app-render/instant-validation/boundary-tracking.js","../../../../../node_modules/next/dist/server/app-render/module-loading/track-module-loading.external.js","../../../../../node_modules/next/dist/server/app-render/module-loading/track-module-loading.instance.js","../../../../../node_modules/next/dist/server/app-render/staged-rendering.js","../../../../../node_modules/next/dist/server/app-render/sync-io-messages.js","../../../../../node_modules/next/dist/server/app-render/work-async-storage-instance.js","../../../../../node_modules/next/dist/server/app-render/work-async-storage.external.js","../../../../../node_modules/next/dist/server/app-render/work-unit-async-storage-instance.js","../../../../../node_modules/next/dist/server/app-render/work-unit-async-storage.external.js","../../../../../node_modules/next/dist/server/dev/browser-logs/file-logger.js","../../../../../node_modules/next/dist/server/dynamic-rendering-utils.js","../../../../../node_modules/next/dist/server/lib/incremental-cache/memory-cache.external.js","../../../../../node_modules/next/dist/server/lib/incremental-cache/shared-cache-controls.external.js","../../../../../node_modules/next/dist/server/lib/incremental-cache/tags-manifest.external.js","../../../../../node_modules/next/dist/server/lib/lru-cache.js","../../../../../node_modules/next/dist/server/lib/parse-stack.js","../../../../../node_modules/next/dist/server/lib/router-utils/instrumentation-globals.external.js","../../../../../node_modules/next/dist/server/lib/router-utils/instrumentation-node-extensions.js","../../../../../node_modules/next/dist/server/lib/source-maps.js","../../../../../node_modules/next/dist/server/lib/trace/constants.js","../../../../../node_modules/next/dist/server/lib/trace/tracer.js","../../../../../node_modules/next/dist/server/load-manifest.external.js","../../../../../node_modules/next/dist/server/node-environment-baseline.js","../../../../../node_modules/next/dist/server/node-environment-extensions/console-dim.external.js","../../../../../node_modules/next/dist/server/node-environment-extensions/console-exit.js","../../../../../node_modules/next/dist/server/node-environment-extensions/console-file.js","../../../../../node_modules/next/dist/server/node-environment-extensions/date.js","../../../../../node_modules/next/dist/server/node-environment-extensions/error-inspect.js","../../../../../node_modules/next/dist/server/node-environment-extensions/fast-set-immediate.external.js","../../../../../node_modules/next/dist/server/node-environment-extensions/io-utils.js","../../../../../node_modules/next/dist/server/node-environment-extensions/node-crypto.js","../../../../../node_modules/next/dist/server/node-environment-extensions/random.js","../../../../../node_modules/next/dist/server/node-environment-extensions/unhandled-rejection.external.js","../../../../../node_modules/next/dist/server/node-environment-extensions/web-crypto.js","../../../../../node_modules/next/dist/server/node-environment.js","../../../../../node_modules/next/dist/server/node-polyfill-crypto.js","../../../../../node_modules/next/dist/server/patch-error-inspect.js","../../../../../node_modules/next/dist/server/require-hook.js","../../../../../node_modules/next/dist/server/response-cache/types.js","../../../../../node_modules/next/dist/server/runtime-reacts.external.js","../../../../../node_modules/next/dist/shared/lib/deep-freeze.js","../../../../../node_modules/next/dist/shared/lib/instant-messages.js","../../../../../node_modules/next/dist/shared/lib/invariant-error.js","../../../../../node_modules/next/dist/shared/lib/is-plain-object.js","../../../../../node_modules/next/dist/shared/lib/is-thenable.js","../../../../../node_modules/next/dist/shared/lib/lazy-dynamic/bailout-to-csr.js","../../../../../node_modules/next/dist/shared/lib/no-fallback-error.external.js","../../../../../node_modules/next/dist/shared/lib/page-path/ensure-leading-slash.js","../../../../../node_modules/next/dist/shared/lib/promise-with-resolvers.js","../../../../../node_modules/next/dist/shared/lib/router/utils/app-paths.js","../../../../../node_modules/next/dist/shared/lib/segment.js","../../../../../node_modules/next/dist/shared/lib/server-reference-info.js","../../../../../node_modules/next/package.json","../../../../../node_modules/pg-cloudflare/dist/empty.js","../../../../../node_modules/pg-cloudflare/dist/index.js","../../../../../node_modules/pg-cloudflare/package.json","../../../../../node_modules/pg-connection-string/index.js","../../../../../node_modules/pg-connection-string/package.json","../../../../../node_modules/pg-int8/index.js","../../../../../node_modules/pg-int8/package.json","../../../../../node_modules/pg-pool/index.js","../../../../../node_modules/pg-pool/package.json","../../../../../node_modules/pg-protocol/dist/buffer-reader.js","../../../../../node_modules/pg-protocol/dist/buffer-writer.js","../../../../../node_modules/pg-protocol/dist/index.js","../../../../../node_modules/pg-protocol/dist/messages.js","../../../../../node_modules/pg-protocol/dist/parser.js","../../../../../node_modules/pg-protocol/dist/serializer.js","../../../../../node_modules/pg-protocol/package.json","../../../../../node_modules/pg-types/index.js","../../../../../node_modules/pg-types/lib/arrayParser.js","../../../../../node_modules/pg-types/lib/binaryParsers.js","../../../../../node_modules/pg-types/lib/builtins.js","../../../../../node_modules/pg-types/lib/textParsers.js","../../../../../node_modules/pg-types/package.json","../../../../../node_modules/pg/esm/index.mjs","../../../../../node_modules/pg/lib/client.js","../../../../../node_modules/pg/lib/connection-parameters.js","../../../../../node_modules/pg/lib/connection.js","../../../../../node_modules/pg/lib/crypto/cert-signatures.js","../../../../../node_modules/pg/lib/crypto/sasl.js","../../../../../node_modules/pg/lib/crypto/utils.js","../../../../../node_modules/pg/lib/defaults.js","../../../../../node_modules/pg/lib/index.js","../../../../../node_modules/pg/lib/native/client.js","../../../../../node_modules/pg/lib/native/index.js","../../../../../node_modules/pg/lib/native/query.js","../../../../../node_modules/pg/lib/query.js","../../../../../node_modules/pg/lib/result.js","../../../../../node_modules/pg/lib/stream.js","../../../../../node_modules/pg/lib/type-overrides.js","../../../../../node_modules/pg/lib/utils.js","../../../../../node_modules/pg/package.json","../../../../../node_modules/pgpass/lib/helper.js","../../../../../node_modules/pgpass/lib/index.js","../../../../../node_modules/pgpass/package.json","../../../../../node_modules/postgres-array/index.js","../../../../../node_modules/postgres-array/package.json","../../../../../node_modules/postgres-bytea/index.js","../../../../../node_modules/postgres-bytea/package.json","../../../../../node_modules/postgres-date/index.js","../../../../../node_modules/postgres-date/package.json","../../../../../node_modules/postgres-interval/index.js","../../../../../node_modules/postgres-interval/package.json","../../../../../node_modules/react/cjs/react.development.js","../../../../../node_modules/react/cjs/react.production.js","../../../../../node_modules/react/index.js","../../../../../node_modules/react/package.json","../../../../../node_modules/split2/index.js","../../../../../node_modules/split2/package.json","../../../../../node_modules/sql.js/dist/sql-wasm.js","../../../../../node_modules/sql.js/package.json","../../../../../node_modules/xtend/mutable.js","../../../../../node_modules/xtend/package.json","../../../../../package.json","../../../../../src/lib/db/adapters/betterSqliteAdapter.js","../../../../../src/lib/db/adapters/bunSqliteAdapter.js","../../../../../src/lib/db/adapters/nodeSqliteAdapter.js","../../../../../src/lib/db/adapters/sqljsAdapter.js","../../../../../src/lib/db/migrate.js","../../../../../src/shared/utils/apiKey.js","../../../../package.json","../../../chunks/1002.js","../../../chunks/1455.js","../../../chunks/181.js","../../../chunks/1817.js","../../../chunks/1998.js","../../../chunks/2155.js","../../../chunks/2242.js","../../../chunks/241.js","../../../chunks/2430.js","../../../chunks/2506.js","../../../chunks/2507.js","../../../chunks/2512.js","../../../chunks/2556.js","../../../chunks/2566.js","../../../chunks/2611.js","../../../chunks/2650.js","../../../chunks/2664.js","../../../chunks/2731.js","../../../chunks/2891.js","../../../chunks/2944.js","../../../chunks/3031.js","../../../chunks/3104.js","../../../chunks/318.js","../../../chunks/3433.js","../../../chunks/3484.js","../../../chunks/3593.js","../../../chunks/3609.js","../../../chunks/3696.js","../../../chunks/3738.js","../../../chunks/3767.js","../../../chunks/3801.js","../../../chunks/3824.js","../../../chunks/3958.js","../../../chunks/3960.js","../../../chunks/4013.js","../../../chunks/4017.js","../../../chunks/402.js","../../../chunks/4123.js","../../../chunks/4177.js","../../../chunks/4298.js","../../../chunks/4315.js","../../../chunks/436.js","../../../chunks/4404.js","../../../chunks/4433.js","../../../chunks/4632.js","../../../chunks/4696.js","../../../chunks/4739.js","../../../chunks/4741.js","../../../chunks/4746.js","../../../chunks/476.js","../../../chunks/4778.js","../../../chunks/4780.js","../../../chunks/4790.js","../../../chunks/4803.js","../../../chunks/507.js","../../../chunks/5206.js","../../../chunks/5210.js","../../../chunks/5213.js","../../../chunks/5258.js","../../../chunks/5312.js","../../../chunks/541.js","../../../chunks/5424.js","../../../chunks/5433.js","../../../chunks/5573.js","../../../chunks/5592.js","../../../chunks/564.js","../../../chunks/5681.js","../../../chunks/5852.js","../../../chunks/5901.js","../../../chunks/5915.js","../../../chunks/595.js","../../../chunks/6053.js","../../../chunks/6064.js","../../../chunks/607.js","../../../chunks/6103.js","../../../chunks/6108.js","../../../chunks/6118.js","../../../chunks/6182.js","../../../chunks/6252.js","../../../chunks/6328.js","../../../chunks/6404.js","../../../chunks/6492.js","../../../chunks/6811.js","../../../chunks/6844.js","../../../chunks/689.js","../../../chunks/6936.js","../../../chunks/6956.js","../../../chunks/6977.js","../../../chunks/6979.js","../../../chunks/698.js","../../../chunks/6992.js","../../../chunks/7126.js","../../../chunks/7242.js","../../../chunks/7341.js","../../../chunks/7464.js","../../../chunks/7639.js","../../../chunks/7669.js","../../../chunks/7707.js","../../../chunks/7753.js","../../../chunks/7774.js","../../../chunks/7812.js","../../../chunks/7828.js","../../../chunks/7965.js","../../../chunks/7986.js","../../../chunks/8023.js","../../../chunks/8062.js","../../../chunks/8099.js","../../../chunks/814.js","../../../chunks/8255.js","../../../chunks/8316.js","../../../chunks/8347.js","../../../chunks/8352.js","../../../chunks/8360.js","../../../chunks/8469.js","../../../chunks/8491.js","../../../chunks/8520.js","../../../chunks/8590.js","../../../chunks/8640.js","../../../chunks/8895.js","../../../chunks/8946.js","../../../chunks/9483.js","../../../chunks/9489.js","../../../chunks/9609.js","../../../chunks/9868.js","../../../webpack-runtime.js","route_client-reference-manifest.js"]}