@jheavenknows/bluerouter 5.3.74 → 5.3.76

package/app/.next-cli-build/server/app/api/audit-proxy/route.js

@@ -1,15 +1,20 @@
-"use strict";(()=>{var a={};a.id=920,a.ids=[920],a.modules={261:a=>{a.exports=require("next/dist/shared/lib/router/utils/app-paths")},1932:a=>{a.exports=require("url")},3295:a=>{a.exports=require("next/dist/server/app-render/after-task-async-storage.external.js")},3697:(a,b,c)=>{c.r(b),c.d(b,{handler:()=>z,patchFetch:()=>y,routeModule:()=>u,serverHooks:()=>x,workAsyncStorage:()=>v,workUnitAsyncStorage:()=>w});var d=c(19225),e=c(84006),f=c(8317),g=c(99373),h=c(34775),i=c(24235),j=c(261),k=c(54365),l=c(90771),m=c(73461),n=c(67798),o=c(92280),p=c(62018),q=c(45696),r=c(47929),s=c(86439),t=c(37527);let u=new d.AppRouteRouteModule({definition:{kind:e.RouteKind.APP_ROUTE,page:"/api/audit-proxy/route",pathname:"/api/audit-proxy",filename:"route",bundlePath:"app/api/audit-proxy/route"},distDir:".next-cli-build",relativeProjectDir:"",resolvedPagePath:"D:\\bluerouter\\src\\app\\api\\audit-proxy\\route.js",nextConfigOutput:"standalone",userland:()=>c(87496),...{}}),{workAsyncStorage:v,workUnitAsyncStorage:w,serverHooks:x}=u;function y(){return(0,f.patchFetch)({workAsyncStorage:v,workUnitAsyncStorage:w})}async function z(a,b,c){c.requestMeta&&(0,g.setRequestMeta)(a,c.requestMeta),u.isDev&&(0,g.addRequestMeta)(a,"devRequestTimingInternalsEnd",process.hrtime.bigint());let d="/api/audit-proxy/route";"/index"===d&&(d="/");let f=await u.prepare(a,b,{srcPage:d,multiZoneDraftMode:!1});if(!f)return b.statusCode=400,b.end("Bad Request"),null==c.waitUntil||c.waitUntil.call(c,Promise.resolve()),null;let{buildId:v,deploymentId:w,params:x,nextConfig:y,parsedUrl:z,isDraftMode:A,prerenderManifest:B,routerServerContext:C,isOnDemandRevalidate:D,revalidateOnlyGenerated:E,resolvedPathname:F,clientReferenceManifest:G,serverActionsManifest:H}=f,I=(0,j.normalizeAppPath)(d),J=!!(B.dynamicRoutes[I]||B.routes[F]),K=async()=>((null==C?void 0:C.render404)?await C.render404(a,b,z,!1):b.end("This page could not be found"),null);if(J&&!A){let a=!!B.routes[F],b=B.dynamicRoutes[I];if(b&&!1===b.fallback&&!a){if(y.adapterPath)return await K();throw new s.NoFallbackError}}let L=null;!J||u.isDev||A||(L="/index"===(L=F)?"/":L);let M=!0===u.isDev||!J,N=J&&!M;H&&G&&(0,i.setManifestsSingleton)({page:d,clientReferenceManifest:G,serverActionsManifest:H});let O=a.method||"GET",P=(0,h.getTracer)(),Q=P.getActiveScopeSpan(),R=!!(null==C?void 0:C.isWrappedByNextServer),S=!!(0,g.getRequestMeta)(a,"minimalMode"),T=(0,g.getRequestMeta)(a,"incrementalCache")||await u.getIncrementalCache(a,y,B,S);null==T||T.resetRequestCache(),globalThis.__incrementalCache=T;let U={params:x,previewProps:B.preview,renderOpts:{experimental:{authInterrupts:!!y.experimental.authInterrupts,useCacheTimeout:y.experimental.useCacheTimeout},cacheComponents:!!y.cacheComponents,validationLevel:y.experimental.instantInsights.validationLevel,supportsDynamicResponse:M,incrementalCache:T,hmrRefreshHash:(0,g.getRequestMeta)(a,"hmrRefreshHash"),cacheLifeProfiles:y.cacheLife,staticPageGenerationTimeout:y.staticPageGenerationTimeout,waitUntil:c.waitUntil,onClose:a=>{b.on("close",a)},onAfterTaskError:void 0,onInstrumentationRequestError:(b,c,d,e)=>u.onRequestError(a,b,d,e,C)},sharedContext:{buildId:v,deploymentId:w}},V=new k.NodeNextRequest(a),W=new k.NodeNextResponse(b),X=l.NextRequestAdapter.fromNodeNextRequest(V,(0,l.signalFromNodeResponse)(b)),Y=async({previousCacheEntry:e})=>{try{if(!S&&D&&E&&!e)return b.statusCode=404,b.setHeader("x-nextjs-cache","REVALIDATED"),b.end("This page could not be found"),null;let d=await u.handle(X,U);a.fetchMetrics=U.renderOpts.fetchMetrics;let f=U.renderOpts.pendingWaitUntil;f&&c.waitUntil&&(c.waitUntil(f),f=void 0);let g=U.renderOpts.collectedTags;if(!J)return await (0,o.I)(V,W,d,f),null;{let a=await d.blob(),b=(0,p.toNodeOutgoingHttpHeaders)(d.headers);g&&(b[r.NEXT_CACHE_TAGS_HEADER]=g),!b["content-type"]&&a.type&&(b["content-type"]=a.type);let c=void 0!==U.renderOpts.collectedRevalidate&&!(U.renderOpts.collectedRevalidate>=r.INFINITE_CACHE)&&U.renderOpts.collectedRevalidate,e=void 0===U.renderOpts.collectedExpire||U.renderOpts.collectedExpire>=r.INFINITE_CACHE?!1!==c&&c>0?y.expireTime:void 0:U.renderOpts.collectedExpire;return{value:{kind:t.CachedRouteKind.APP_ROUTE,status:d.status,body:Buffer.from(await a.arrayBuffer()),headers:b},cacheControl:{revalidate:c,expire:e}}}}catch(b){throw(null==e?void 0:e.isStale)&&await u.onRequestError(a,b,{routerKind:"App Router",routePath:d,routeType:"route",revalidateReason:(0,n.getRevalidateReason)({isStaticGeneration:N,isOnDemandRevalidate:D})},!1,C),b}},Z=async(d,f)=>{try{var g,i;let d=await u.handleResponse({req:a,nextConfig:y,cacheKey:L,routeKind:e.RouteKind.APP_ROUTE,isFallback:!1,prerenderManifest:B,isRoutePPREnabled:!1,isOnDemandRevalidate:D,revalidateOnlyGenerated:E,responseGenerator:Y,waitUntil:c.waitUntil,isMinimalMode:S});if(!J)return;if((null==d||null==(g=d.value)?void 0:g.kind)!==t.CachedRouteKind.APP_ROUTE)throw Object.defineProperty(Error(`Invariant: app-route received invalid cache entry ${null==d||null==(i=d.value)?void 0:i.kind}`),"__NEXT_ERROR_CODE",{value:"E701",enumerable:!1,configurable:!0});S||b.setHeader("x-nextjs-cache",D?"REVALIDATED":d.isMiss?"MISS":d.isStale?"STALE":"HIT"),A&&b.setHeader("Cache-Control","private, no-cache, no-store, max-age=0, must-revalidate");let f=(0,p.fromNodeOutgoingHttpHeaders)(d.value.headers);S&&J||f.delete(r.NEXT_CACHE_TAGS_HEADER),!d.cacheControl||b.getHeader("Cache-Control")||f.get("Cache-Control")||f.set("Cache-Control",(0,q.getCacheControlHeader)(d.cacheControl)),await (0,o.I)(V,W,new Response(d.value.body,{headers:f,status:d.value.status||200}));return}catch(b){if(b instanceof s.NoFallbackError||await u.onRequestError(a,b,{routerKind:"App Router",routePath:I,routeType:"route",revalidateReason:(0,n.getRevalidateReason)({isStaticGeneration:N,isOnDemandRevalidate:D})},!1,C),J)throw b;await (0,o.I)(V,W,new Response(null,{status:500}));return}finally{(()=>{if(!d)return;let a=b.statusCode;d.setAttributes({"http.status_code":a,"next.rsc":!1}),a&&a>=500&&(d.setStatus({code:h.SpanStatusCode.ERROR}),d.setAttribute("error.type",a.toString()));let c=P.getRootSpanAttributes();if(!c)return;if(c.get("next.span_type")!==m.BaseServerSpan.handleRequest)return console.warn(`Unexpected root span type '${c.get("next.span_type")}'. Please report this Next.js issue https://github.com/vercel/next.js`);let e=c.get("next.route")||I,g=`${O} ${e}`;d.setAttributes({"next.route":e,"http.route":e,"next.span_name":g}),d.updateName(g),f&&f!==d&&(f.setAttribute("http.route",e),f.updateName(g))})()}};if(R&&Q)await Z(Q,void 0);else{let b=P.getActiveScopeSpan();await P.withPropagatedContext(a.headers,()=>P.trace(m.BaseServerSpan.handleRequest,{spanName:`${O} ${d}`,kind:h.SpanKind.SERVER,attributes:{"http.method":O,"http.target":a.url}},a=>Z(a,b)),void 0,!R)}}},4573:a=>{a.exports=require("node:buffer")},4984:a=>{a.exports=require("readline")},5565:(a,b,c)=>{let d=c(91645);function e(a){let b=String(a||"").trim().toLowerCase();b.startsWith("[")&&b.endsWith("]")&&(b=b.slice(1,-1));let c=b.indexOf("%");return c>=0&&(b=b.slice(0,c)),b.startsWith("::ffff:")&&4===d.isIP(b.slice(7))&&(b=b.slice(7)),b}function f(a){return Buffer.from(a.split(".").map(a=>Number(a)))}function g(a,b){return 4===b?f(a):function(a){let b=e(a),c=b.lastIndexOf(":");if(c>=0){let a=b.slice(c+1);if(4===d.isIP(a)){let d=f(a),e=(d[0]<<8|d[1]).toString(16),g=(d[2]<<8|d[3]).toString(16);b=`${b.slice(0,c)}:${e}:${g}`}}let g=b.split("::");if(g.length>2)throw Error("Invalid IPv6 address");let h=g[0]?g[0].split(":").filter(Boolean):[],i=2===g.length&&g[1]?g[1].split(":").filter(Boolean):[],j=8-h.length-i.length;if(1===g.length&&0!==j||j<0)throw Error("Invalid IPv6 address");let k=2===g.length?[...h,...Array(j).fill("0"),...i]:h;if(8!==k.length)throw Error("Invalid IPv6 address");let l=Buffer.alloc(16);return k.forEach((a,b)=>{let c=Number.parseInt(a||"0",16);if(!Number.isInteger(c)||c<0||c>65535)throw Error("Invalid IPv6 address");l[2*b]=c>>8&255,l[2*b+1]=255&c}),l}(a)}function h(a){let b=String(a||"").trim();if(!b)throw Error("Empty IP rule");let c=b.indexOf("/"),f=e(c>=0?b.slice(0,c):b),g=d.isIP(f);if(!g)throw Error(`Invalid client IP/CIDR: ${b}`);let h=4===g?32:128,i=c>=0?Number(b.slice(c+1)):h;if(!Number.isInteger(i)||i<0||i>h)throw Error(`Invalid CIDR prefix: ${b}`);return{text:c>=0?`${f}/${i}`:f,ip:f,family:g,prefix:i}}a.exports={normalizeIp:e,parseIpRule:h,normalizeAllowedClientIps:function(a){let b=Array.isArray(a)?a:String(a||"").split(/[\r\n,]+/),c=[],d=new Set;for(let a of b){let b=String(a||"").trim();if(!b)continue;let e=h(b);d.has(e.text)||(d.add(e.text),c.push(e.text))}return c},clientIpMatches:function(a,b=[]){let c=e(a),f=d.isIP(c);if(!f)return!1;let i=g(c,f);for(let a of b||[]){let b;try{b=h(a)}catch{continue}if(b.family===f&&function(a,b,c){let d=Math.floor(c/8),e=c%8;for(let c=0;c<d;c+=1)if(a[c]!==b[c])return!1;if(!e)return!0;let f=255<<8-e&255;return(a[d]&f)==(b[d]&f)}(i,g(b.ip,b.family),b.prefix))return!0}return!1}}},8128:a=>{a.exports=require("next/dist/server/runtime-reacts.external.js")},10846:a=>{a.exports=require("next/dist/compiled/next-server/app-page.runtime.prod.js")},14985:a=>{a.exports=require("dns")},19121:a=>{a.exports=require("next/dist/server/app-render/action-async-storage.external.js")},19771:a=>{a.exports=require("process")},21820:a=>{a.exports=require("os")},27910:a=>{a.exports=require("stream")},28354:a=>{a.exports=require("util")},29021:a=>{a.exports=require("fs")},29294:a=>{a.exports=require("next/dist/server/app-render/work-async-storage.external.js")},33873:a=>{a.exports=require("path")},34631:a=>{a.exports=require("tls")},41204:a=>{a.exports=require("string_decoder")},43096:(a,b,c)=>{let d=c(29021),e=c(33873),{DATA_DIR:f}=c(82193),{normalizeAllowedClientIps:g}=c(5565),{normalizeAllowedToolsInput:h}=c(98586),i=e.join(f,"audit-gateway"),j=e.join(i,"config.json"),k=e.join(i,"audit.jsonl"),l=e.join(i,"logs"),m=Object.freeze({enabled:!1,bindHost:"127.0.0.1",port:3128,clientProxyHost:"",clientIpFilterEnabled:!1,allowedClientIps:[],clientToolFilterEnabled:!1,allowedClientTools:[],allowedHosts:["api.anthropic.com","*.anthropic.com","claude.ai","*.claude.ai","api.openai.com","*.openai.com","chatgpt.com","*.chatgpt.com"],passthroughUnknown:!0,captureBodies:!0,captureLimitBytes:2097152,retentionDays:7,verifyUpstreamTls:!0,connectTimeoutMs:1e4,tlsHandshakeTimeoutMs:1e4,responseHeaderTimeoutMs:3e4,idleTimeoutMs:9e5,shutdownGraceMs:1500,allowPlainHttp:!1,allowedConnectPorts:[443]});function n(){return{...m,allowedClientIps:[...m.allowedClientIps],allowedClientTools:[...m.allowedClientTools],allowedHosts:[...m.allowedHosts],allowedConnectPorts:[...m.allowedConnectPorts]}}function o(){d.mkdirSync(i,{recursive:!0}),d.mkdirSync(l,{recursive:!0})}function p(a){return[...new Set((Array.isArray(a)?a:String(a||"").split(/[\r\n,]+/)).map(a=>String(a||"").trim().toLowerCase()).filter(Boolean).filter(a=>!a.includes("://")&&/^[*a-z0-9._-]+$/.test(a)))]}function q(a,b,c,d,e){let f=null==a?b:Number(a);if(!Number.isInteger(f)||f<c||f>d)throw Error(`${e} must be between ${c} and ${d}`);return f}function r(a={}){let b={...m,...a},c=q(b.port,m.port,1,65535,"Proxy port"),d=Number(b.captureLimitBytes);if(!Number.isFinite(d)||d<0||d>0x1000000)throw Error("Capture limit must be between 0 and 16 MB");let e=q(b.retentionDays,m.retentionDays,1,365,"Retention days"),f=q(b.connectTimeoutMs,m.connectTimeoutMs,1e3,12e4,"Connect timeout"),i=q(b.tlsHandshakeTimeoutMs,m.tlsHandshakeTimeoutMs,1e3,12e4,"TLS handshake timeout"),j=q(b.responseHeaderTimeoutMs,m.responseHeaderTimeoutMs,1e3,3e5,"Response header timeout"),k=q(b.idleTimeoutMs,m.idleTimeoutMs,3e4,36e5,"Idle timeout"),l=q(b.shutdownGraceMs,m.shutdownGraceMs,0,3e4,"Shutdown grace period"),n=String(b.bindHost||"127.0.0.1").trim();if(!n||/\s/.test(n))throw Error("Invalid bind address");let o=String(b.clientProxyHost||"").trim();if(/\s/.test(o)||o.includes("://"))throw Error("Client proxy host must be a hostname or IP without protocol");let s=!0===b.clientIpFilterEnabled,t=g(b.allowedClientIps);if(s&&0===t.length)throw Error("Client IP filter requires at least one allowed IP or CIDR");let u=!0===b.clientToolFilterEnabled,v=h(b.allowedClientTools);if(u&&0===v.length)throw Error("Client tool filter requires at least one allowed tool");return{enabled:!0===b.enabled,bindHost:n,port:c,clientProxyHost:o,clientIpFilterEnabled:s,allowedClientIps:t,clientToolFilterEnabled:u,allowedClientTools:v,allowedHosts:p(b.allowedHosts),passthroughUnknown:!1!==b.passthroughUnknown,captureBodies:!1!==b.captureBodies,captureLimitBytes:Math.round(d),retentionDays:e,verifyUpstreamTls:!0,connectTimeoutMs:f,tlsHandshakeTimeoutMs:i,responseHeaderTimeoutMs:j,idleTimeoutMs:k,shutdownGraceMs:l,allowPlainHttp:!1,allowedConnectPorts:[443]}}a.exports={AUDIT_DIR:i,CONFIG_PATH:j,AUDIT_LOG_PATH:k,AUDIT_LOG_DIR:l,DEFAULT_CONFIG:m,ensureAuditDir:o,loadConfig:function(){if(o(),!d.existsSync(j))return n();try{return r(JSON.parse(d.readFileSync(j,"utf8")))}catch(a){return console.warn(`[audit-proxy] invalid config ignored: ${a.message||a}`),n()}},saveConfig:function(a){o();let b=r(a),c=`${j}.tmp`;return d.writeFileSync(c,`${JSON.stringify(b,null,2)}
-`,{mode:384}),d.renameSync(c,j),b},validateConfig:r,normalizeAllowedHosts:p,normalizeAllowedClientIps:g}},44870:a=>{a.exports=require("next/dist/compiled/next-server/app-route.runtime.prod.js")},45372:(a,b,c)=>{let d=c(81630),e=c(73496),f=c(55591),g=c(91645),h=c(34631),i=c(55511),j=c(74075),{promisify:k}=c(28354),{redactHeaders:l,redactBodyText:m,redactUrlPath:n,scrubString:o}=c(48350),{extractUsageFromBody:p}=c(86455),{resolvePublicTarget:q}=c(78864),{normalizeAllowedTools:r,shouldRefuseClientTool:s,describeUserAgent:t}=c(98586),u=k(j.brotliDecompress),v=k(j.gunzip),w=k(j.inflate),x=k(j.inflateRaw),y="function"==typeof j.zstdDecompress?k(j.zstdDecompress):null,z=new Set(["connection","proxy-connection","keep-alive","proxy-authenticate","proxy-authorization","te","trailer","transfer-encoding","upgrade"]);function A(a){return String(a||"").trim().replace(/^\[|\]$/g,"").toLowerCase()}function B(a,b=443){let c=String(a||"").trim();if(!c)throw Error("Missing CONNECT authority");if(c.startsWith("[")){let a=c.indexOf("]");if(a<0)throw Error("Invalid IPv6 CONNECT authority");let d=c.slice(1,a),e=c.slice(a+1);if(e&&!e.startsWith(":"))throw Error("Invalid IPv6 CONNECT authority");let f=e?Number(e.slice(1)):b;if(!Number.isInteger(f)||f<1||f>65535)throw Error("Invalid CONNECT port");return{host:d,port:f}}let d=c.lastIndexOf(":");if(d>0&&c.indexOf(":")===d){let a=c.slice(d+1);if(!/^\d+$/.test(a))throw Error("Invalid CONNECT port");let b=Number(a);if(!Number.isInteger(b)||b<1||b>65535)throw Error("Invalid CONNECT port");return{host:c.slice(0,d),port:b}}return{host:c,port:b}}function C(a,b=[]){let c=A(a);return b.some(a=>{let b=A(a);if(!b)return!1;if(b===c)return!0;if(b.startsWith("*.")){let a=b.slice(1);return c.endsWith(a)&&c.length>a.length}return!1})}function D(a={},{stripInternal:b=!0}={}){let c=new Set([...z,...String(a.connection||"").split(",").map(a=>a.trim().toLowerCase()).filter(Boolean)]),d={};for(let[e,f]of Object.entries(a||{})){let a=e.toLowerCase();!c.has(a)&&(b&&(a.startsWith("x-9r-")||a.startsWith("x-bluerouter-"))||(d[e]=f))}return d}async function E(a,b,c){let d=String(b||"").split(",").map(a=>a.trim().toLowerCase()).filter(a=>a&&"identity"!==a);if(!d.length||!a.length)return{buffer:a,decoded:!1,contentEncoding:d.join(", ")||null};let e=a;for(let a of[...d].reverse()){let b={maxOutputLength:c};if("br"===a)e=await u(e,b);else if("gzip"===a||"x-gzip"===a)e=await v(e,b);else if("deflate"===a)try{e=await w(e,b)}catch{e=await x(e,b)}else if("zstd"===a&&y)e=await y(e,b);else throw Error(`Unsupported content-encoding: ${a}`)}return{buffer:e,decoded:!0,contentEncoding:d.join(", ")}}async function F(a,b,c){let d=String(b||"").split(",").map(a=>a.trim().toLowerCase()).filter(a=>a&&"identity"!==a);if(1!==d.length||!a.length)return null;let e=d[0],f={maxOutputLength:c,finishFlush:j.constants.Z_SYNC_FLUSH};try{if("gzip"===e||"x-gzip"===e)return await v(a,f);if("deflate"===e)try{return await w(a,f)}catch{return await x(a,f)}if("br"===e)return await u(a,{maxOutputLength:c,finishFlush:j.constants.BROTLI_OPERATION_FLUSH})}catch{}return null}class G{constructor(a){this.limitBytes=Math.max(0,Number(a)||0),this.parts=[],this.capturedBytes=0,this.totalBytes=0,this.truncated=!1,this.hash=i.createHash("sha256"),this.finished=!1}add(a){if(!a||this.finished)return;let b=Buffer.isBuffer(a)?a:Buffer.from(a);if(this.hash.update(b),this.totalBytes+=b.length,this.capturedBytes>=this.limitBytes){b.length&&(this.truncated=!0);return}let c=this.limitBytes-this.capturedBytes,d=b.length>c?b.subarray(0,c):b;d.length&&(this.parts.push(Buffer.from(d)),this.capturedBytes+=d.length),d.length<b.length&&(this.truncated=!0)}async finish(a="",b=""){if(this.finished)throw Error("Audit capture was finalized more than once");this.finished=!0;let c=this.hash.digest("hex"),d=Buffer.concat(this.parts),e=String(b||"").trim().toLowerCase(),f=d,g=!1,h=null,i=!1,j=null,k=null,l=!1,n=Math.max(1048576,Math.min(0x4000000,Math.max(8*this.limitBytes,this.limitBytes)));if(this.limitBytes>0&&d.length&&e&&"identity"!==e)if(this.truncated){let a=await F(d,e,n);a&&a.length?(f=a,g=!0,l=!0,h=a.length,i=!0):(j=`Compressed ${e} capture was truncated before decode`,k=`[${e} audit body capture truncated; decoded body unavailable]`)}else try{let a=await E(d,e,n);f=a.buffer,g=a.decoded,h=f.length,f.length>this.limitBytes&&(f=f.subarray(0,this.limitBytes),i=!0)}catch(a){j=o(a?.message||String(a)),k=`[Unable to decode ${e} audit body: ${j}]`}let p=/json|text|javascript|xml|x-www-form-urlencoded|event-stream/i.test(a||"");return{body:null!==k?k:p||!a?m(f.toString("utf8"),a):`[${f.length} bytes captured; binary body omitted]`,capturedBytes:this.capturedBytes,totalBytes:this.totalBytes,wireSha256:c,truncated:this.truncated||i,...e&&"identity"!==e?{contentEncoding:e}:{},...g?{decoded:!0,decodedBytes:h}:{},...l?{decodePartial:!0}:{},...j?{decodeError:j}:{}}}}function H(a){let b=A(a);return"api.anthropic.com"===b||b.endsWith(".anthropic.com")||"claude.ai"===b||b.endsWith(".claude.ai")?"anthropic":"api.openai.com"===b||b.endsWith(".openai.com")||"chatgpt.com"===b||b.endsWith(".chatgpt.com")?"openai":"other"}function I(a){if(!a||"string"!=typeof a)return null;try{let b=JSON.parse(a);return"string"==typeof b?.model?b.model:null}catch{return null}}function J(a,b,c){try{let d=String(c||b);a.end(`HTTP/1.1 ${b}\r
-Connection: close\r
+(()=>{var a={};a.id=920,a.ids=[920],a.modules={261:a=>{"use strict";a.exports=require("next/dist/shared/lib/router/utils/app-paths")},1932:a=>{"use strict";a.exports=require("url")},3295:a=>{"use strict";a.exports=require("next/dist/server/app-render/after-task-async-storage.external.js")},3697:(a,b,c)=>{"use strict";c.r(b),c.d(b,{handler:()=>z,patchFetch:()=>y,routeModule:()=>u,serverHooks:()=>x,workAsyncStorage:()=>v,workUnitAsyncStorage:()=>w});var d=c(19225),e=c(84006),f=c(8317),g=c(99373),h=c(34775),i=c(24235),j=c(261),k=c(54365),l=c(90771),m=c(73461),n=c(67798),o=c(92280),p=c(62018),q=c(45696),r=c(47929),s=c(86439),t=c(37527);let u=new d.AppRouteRouteModule({definition:{kind:e.RouteKind.APP_ROUTE,page:"/api/audit-proxy/route",pathname:"/api/audit-proxy",filename:"route",bundlePath:"app/api/audit-proxy/route"},distDir:".next-cli-build",relativeProjectDir:"",resolvedPagePath:"D:\\bluerouter\\src\\app\\api\\audit-proxy\\route.js",nextConfigOutput:"standalone",userland:()=>c(87496),...{}}),{workAsyncStorage:v,workUnitAsyncStorage:w,serverHooks:x}=u;function y(){return(0,f.patchFetch)({workAsyncStorage:v,workUnitAsyncStorage:w})}async function z(a,b,c){c.requestMeta&&(0,g.setRequestMeta)(a,c.requestMeta),u.isDev&&(0,g.addRequestMeta)(a,"devRequestTimingInternalsEnd",process.hrtime.bigint());let d="/api/audit-proxy/route";"/index"===d&&(d="/");let f=await u.prepare(a,b,{srcPage:d,multiZoneDraftMode:!1});if(!f)return b.statusCode=400,b.end("Bad Request"),null==c.waitUntil||c.waitUntil.call(c,Promise.resolve()),null;let{buildId:v,deploymentId:w,params:x,nextConfig:y,parsedUrl:z,isDraftMode:A,prerenderManifest:B,routerServerContext:C,isOnDemandRevalidate:D,revalidateOnlyGenerated:E,resolvedPathname:F,clientReferenceManifest:G,serverActionsManifest:H}=f,I=(0,j.normalizeAppPath)(d),J=!!(B.dynamicRoutes[I]||B.routes[F]),K=async()=>((null==C?void 0:C.render404)?await C.render404(a,b,z,!1):b.end("This page could not be found"),null);if(J&&!A){let a=!!B.routes[F],b=B.dynamicRoutes[I];if(b&&!1===b.fallback&&!a){if(y.adapterPath)return await K();throw new s.NoFallbackError}}let L=null;!J||u.isDev||A||(L="/index"===(L=F)?"/":L);let M=!0===u.isDev||!J,N=J&&!M;H&&G&&(0,i.setManifestsSingleton)({page:d,clientReferenceManifest:G,serverActionsManifest:H});let O=a.method||"GET",P=(0,h.getTracer)(),Q=P.getActiveScopeSpan(),R=!!(null==C?void 0:C.isWrappedByNextServer),S=!!(0,g.getRequestMeta)(a,"minimalMode"),T=(0,g.getRequestMeta)(a,"incrementalCache")||await u.getIncrementalCache(a,y,B,S);null==T||T.resetRequestCache(),globalThis.__incrementalCache=T;let U={params:x,previewProps:B.preview,renderOpts:{experimental:{authInterrupts:!!y.experimental.authInterrupts,useCacheTimeout:y.experimental.useCacheTimeout},cacheComponents:!!y.cacheComponents,validationLevel:y.experimental.instantInsights.validationLevel,supportsDynamicResponse:M,incrementalCache:T,hmrRefreshHash:(0,g.getRequestMeta)(a,"hmrRefreshHash"),cacheLifeProfiles:y.cacheLife,staticPageGenerationTimeout:y.staticPageGenerationTimeout,waitUntil:c.waitUntil,onClose:a=>{b.on("close",a)},onAfterTaskError:void 0,onInstrumentationRequestError:(b,c,d,e)=>u.onRequestError(a,b,d,e,C)},sharedContext:{buildId:v,deploymentId:w}},V=new k.NodeNextRequest(a),W=new k.NodeNextResponse(b),X=l.NextRequestAdapter.fromNodeNextRequest(V,(0,l.signalFromNodeResponse)(b)),Y=async({previousCacheEntry:e})=>{try{if(!S&&D&&E&&!e)return b.statusCode=404,b.setHeader("x-nextjs-cache","REVALIDATED"),b.end("This page could not be found"),null;let d=await u.handle(X,U);a.fetchMetrics=U.renderOpts.fetchMetrics;let f=U.renderOpts.pendingWaitUntil;f&&c.waitUntil&&(c.waitUntil(f),f=void 0);let g=U.renderOpts.collectedTags;if(!J)return await (0,o.I)(V,W,d,f),null;{let a=await d.blob(),b=(0,p.toNodeOutgoingHttpHeaders)(d.headers);g&&(b[r.NEXT_CACHE_TAGS_HEADER]=g),!b["content-type"]&&a.type&&(b["content-type"]=a.type);let c=void 0!==U.renderOpts.collectedRevalidate&&!(U.renderOpts.collectedRevalidate>=r.INFINITE_CACHE)&&U.renderOpts.collectedRevalidate,e=void 0===U.renderOpts.collectedExpire||U.renderOpts.collectedExpire>=r.INFINITE_CACHE?!1!==c&&c>0?y.expireTime:void 0:U.renderOpts.collectedExpire;return{value:{kind:t.CachedRouteKind.APP_ROUTE,status:d.status,body:Buffer.from(await a.arrayBuffer()),headers:b},cacheControl:{revalidate:c,expire:e}}}}catch(b){throw(null==e?void 0:e.isStale)&&await u.onRequestError(a,b,{routerKind:"App Router",routePath:d,routeType:"route",revalidateReason:(0,n.getRevalidateReason)({isStaticGeneration:N,isOnDemandRevalidate:D})},!1,C),b}},Z=async(d,f)=>{try{var g,i;let d=await u.handleResponse({req:a,nextConfig:y,cacheKey:L,routeKind:e.RouteKind.APP_ROUTE,isFallback:!1,prerenderManifest:B,isRoutePPREnabled:!1,isOnDemandRevalidate:D,revalidateOnlyGenerated:E,responseGenerator:Y,waitUntil:c.waitUntil,isMinimalMode:S});if(!J)return;if((null==d||null==(g=d.value)?void 0:g.kind)!==t.CachedRouteKind.APP_ROUTE)throw Object.defineProperty(Error(`Invariant: app-route received invalid cache entry ${null==d||null==(i=d.value)?void 0:i.kind}`),"__NEXT_ERROR_CODE",{value:"E701",enumerable:!1,configurable:!0});S||b.setHeader("x-nextjs-cache",D?"REVALIDATED":d.isMiss?"MISS":d.isStale?"STALE":"HIT"),A&&b.setHeader("Cache-Control","private, no-cache, no-store, max-age=0, must-revalidate");let f=(0,p.fromNodeOutgoingHttpHeaders)(d.value.headers);S&&J||f.delete(r.NEXT_CACHE_TAGS_HEADER),!d.cacheControl||b.getHeader("Cache-Control")||f.get("Cache-Control")||f.set("Cache-Control",(0,q.getCacheControlHeader)(d.cacheControl)),await (0,o.I)(V,W,new Response(d.value.body,{headers:f,status:d.value.status||200}));return}catch(b){if(b instanceof s.NoFallbackError||await u.onRequestError(a,b,{routerKind:"App Router",routePath:I,routeType:"route",revalidateReason:(0,n.getRevalidateReason)({isStaticGeneration:N,isOnDemandRevalidate:D})},!1,C),J)throw b;await (0,o.I)(V,W,new Response(null,{status:500}));return}finally{(()=>{if(!d)return;let a=b.statusCode;d.setAttributes({"http.status_code":a,"next.rsc":!1}),a&&a>=500&&(d.setStatus({code:h.SpanStatusCode.ERROR}),d.setAttribute("error.type",a.toString()));let c=P.getRootSpanAttributes();if(!c)return;if(c.get("next.span_type")!==m.BaseServerSpan.handleRequest)return console.warn(`Unexpected root span type '${c.get("next.span_type")}'. Please report this Next.js issue https://github.com/vercel/next.js`);let e=c.get("next.route")||I,g=`${O} ${e}`;d.setAttributes({"next.route":e,"http.route":e,"next.span_name":g}),d.updateName(g),f&&f!==d&&(f.setAttribute("http.route",e),f.updateName(g))})()}};if(R&&Q)await Z(Q,void 0);else{let b=P.getActiveScopeSpan();await P.withPropagatedContext(a.headers,()=>P.trace(m.BaseServerSpan.handleRequest,{spanName:`${O} ${d}`,kind:h.SpanKind.SERVER,attributes:{"http.method":O,"http.target":a.url}},a=>Z(a,b)),void 0,!R)}}},4573:a=>{"use strict";a.exports=require("node:buffer")},4984:a=>{"use strict";a.exports=require("readline")},5565:(a,b,c)=>{"use strict";let d=c(91645);function e(a){let b=String(a||"").trim().toLowerCase();b.startsWith("[")&&b.endsWith("]")&&(b=b.slice(1,-1));let c=b.indexOf("%");return c>=0&&(b=b.slice(0,c)),b.startsWith("::ffff:")&&4===d.isIP(b.slice(7))&&(b=b.slice(7)),b}function f(a){return Buffer.from(a.split(".").map(a=>Number(a)))}function g(a,b){return 4===b?f(a):function(a){let b=e(a),c=b.lastIndexOf(":");if(c>=0){let a=b.slice(c+1);if(4===d.isIP(a)){let d=f(a),e=(d[0]<<8|d[1]).toString(16),g=(d[2]<<8|d[3]).toString(16);b=`${b.slice(0,c)}:${e}:${g}`}}let g=b.split("::");if(g.length>2)throw Error("Invalid IPv6 address");let h=g[0]?g[0].split(":").filter(Boolean):[],i=2===g.length&&g[1]?g[1].split(":").filter(Boolean):[],j=8-h.length-i.length;if(1===g.length&&0!==j||j<0)throw Error("Invalid IPv6 address");let k=2===g.length?[...h,...Array(j).fill("0"),...i]:h;if(8!==k.length)throw Error("Invalid IPv6 address");let l=Buffer.alloc(16);return k.forEach((a,b)=>{let c=Number.parseInt(a||"0",16);if(!Number.isInteger(c)||c<0||c>65535)throw Error("Invalid IPv6 address");l[2*b]=c>>8&255,l[2*b+1]=255&c}),l}(a)}function h(a){let b=String(a||"").trim();if(!b)throw Error("Empty IP rule");let c=b.indexOf("/"),f=e(c>=0?b.slice(0,c):b),g=d.isIP(f);if(!g)throw Error(`Invalid client IP/CIDR: ${b}`);let h=4===g?32:128,i=c>=0?Number(b.slice(c+1)):h;if(!Number.isInteger(i)||i<0||i>h)throw Error(`Invalid CIDR prefix: ${b}`);return{text:c>=0?`${f}/${i}`:f,ip:f,family:g,prefix:i}}a.exports={normalizeIp:e,parseIpRule:h,normalizeAllowedClientIps:function(a){let b=Array.isArray(a)?a:String(a||"").split(/[\r\n,]+/),c=[],d=new Set;for(let a of b){let b=String(a||"").trim();if(!b)continue;let e=h(b);d.has(e.text)||(d.add(e.text),c.push(e.text))}return c},clientIpMatches:function(a,b=[]){let c=e(a),f=d.isIP(c);if(!f)return!1;let i=g(c,f);for(let a of b||[]){let b;try{b=h(a)}catch{continue}if(b.family===f&&function(a,b,c){let d=Math.floor(c/8),e=c%8;for(let c=0;c<d;c+=1)if(a[c]!==b[c])return!1;if(!e)return!0;let f=255<<8-e&255;return(a[d]&f)==(b[d]&f)}(i,g(b.ip,b.family),b.prefix))return!0}return!1}}},7566:(a,b,c)=>{"use strict";let d=c(55511),e=/^[a-z0-9][a-z0-9._-]{0,63}$/i,f=null;function g(){return f||(f=c(81370)),f}function h(a){return String(a||"").trim()}function i(a){let b=Array.isArray(a)?a:[],c=new Set,d=[];for(let a of b){if(!a||"object"!=typeof a)continue;let b=h(a.username),f=String(a.passwordHash||"");if(!e.test(b)||!f.startsWith("$2"))continue;let g=b.toLowerCase();c.has(g)||(c.add(g),d.push({username:b,passwordHash:f}))}return d}function j(a){if(Array.isArray(a))return null;let b=String(a||"").trim();if(!b||b.length>1024)return null;let c=b.indexOf(" ");if(c<0||"basic"!==b.slice(0,c).toLowerCase())return null;let d=b.slice(c+1).trim();if(!d||!/^[A-Za-z0-9+/]+={0,2}$/.test(d))return null;let e="";try{e=Buffer.from(d,"base64").toString("utf8")}catch{return null}let f=e.indexOf(":");return f<0?null:{username:e.slice(0,f),password:e.slice(f+1)}}a.exports={CACHE_TTL_MS:3e5,PASSWORD_MAX_BYTES:72,PASSWORD_MIN_BYTES:8,createProxyAuthLimiter:function({maxFailures:a=10,windowMs:b=6e4,cooldownMs:c=3e4,maxCooldownMs:d=3e5,maxEntries:e=1024}={}){let f=new Map;return{isLocked(a){let b=f.get(a);return!!b&&b.lockedUntil>Date.now()},recordFailure(g){let h=Date.now();!function(a){if(f.size<e)return;for(let[c,d]of f)if(d.lockedUntil<=a&&a-d.lastFailAt>b&&f.delete(c),f.size<e)return;let c=f.keys().next();c.done||f.delete(c.value)}(h);let i=f.get(g)||{failures:0,lastFailAt:0,lockedUntil:0,cooldownMs:c};h-i.lastFailAt>b&&(i.failures=0),i.failures+=1,i.lastFailAt=h;let j=!1;return i.failures>=a&&(i.lockedUntil=h+i.cooldownMs,i.cooldownMs=Math.min(2*i.cooldownMs,d),i.failures=0,j=!0),f.set(g,i),{lockedNow:j}},recordSuccess(a){f.delete(a)}}},createProxyAuthenticator:function(a){let b=new Map(i(a).map(a=>[a.username.toLowerCase(),a])),c=new Map,e=new Map;return{get accountCount(){return b.size},async authenticate(a){let f,h=j(a);if(!h)return{ok:!1,username:null,reason:a?"Unsupported proxy credentials":"Proxy authentication required"};let{username:i,password:k}=h,l=d.createHash("sha256").update(`${i}\0${k}`).digest("hex"),m=(f=c.get(l))?f.expiresAt<=Date.now()?(c.delete(l),null):f.username:null;if(m)return{ok:!0,username:m,reason:null};let n=b.get(i.trim().toLowerCase()),o=n?n.passwordHash:"$2b$10$N9qo8uLOickgx2ZMRZoMyeIjZAgcfl7p92ldGxad68LJZdL17lhWy",p=e.get(l);p||(p=g().compare(k,o).catch(()=>!1),e.set(l,p),p.finally(()=>e.delete(l)));let q=await p;if(!n||!q)return{ok:!1,username:null,reason:"Invalid proxy credentials"};var r=n.username;if(c.size>=256){let a=c.keys().next();a.done||c.delete(a.value)}return c.set(l,{username:r,expiresAt:Date.now()+3e5}),{ok:!0,username:n.username,reason:null}}}},hashProxyPassword:async function a(a){let b=await g().genSalt(10);return g().hash(String(a),b)},isValidUsername:function(a){return e.test(h(a))},normalizeProxyUsers:i,parseBasicProxyAuthorization:j,redactProxyAuthUsers:function(a){return i(a).map(a=>({username:a.username,hasPassword:!0}))}}},8128:a=>{"use strict";a.exports=require("next/dist/server/runtime-reacts.external.js")},10846:a=>{"use strict";a.exports=require("next/dist/compiled/next-server/app-page.runtime.prod.js")},14985:a=>{"use strict";a.exports=require("dns")},19121:a=>{"use strict";a.exports=require("next/dist/server/app-render/action-async-storage.external.js")},19771:a=>{"use strict";a.exports=require("process")},21820:a=>{"use strict";a.exports=require("os")},27910:a=>{"use strict";a.exports=require("stream")},28354:a=>{"use strict";a.exports=require("util")},29021:a=>{"use strict";a.exports=require("fs")},29294:a=>{"use strict";a.exports=require("next/dist/server/app-render/work-async-storage.external.js")},33873:a=>{"use strict";a.exports=require("path")},34631:a=>{"use strict";a.exports=require("tls")},41204:a=>{"use strict";a.exports=require("string_decoder")},43096:(a,b,c)=>{"use strict";let d=c(29021),e=c(33873),{DATA_DIR:f}=c(82193),{normalizeAllowedClientIps:g}=c(5565),{normalizeAllowedToolsInput:h}=c(98586),{normalizeProxyUsers:i}=c(7566),j=e.join(f,"audit-gateway"),k=e.join(j,"config.json"),l=e.join(j,"audit.jsonl"),m=e.join(j,"logs"),n=Object.freeze({enabled:!1,bindHost:"127.0.0.1",port:3128,clientProxyHost:"",clientIpFilterEnabled:!1,allowedClientIps:[],clientToolFilterEnabled:!1,allowedClientTools:[],proxyAuthEnabled:!1,proxyAuthUsers:[],allowedHosts:["api.anthropic.com","*.anthropic.com","claude.ai","*.claude.ai","api.openai.com","*.openai.com","chatgpt.com","*.chatgpt.com"],passthroughUnknown:!0,captureBodies:!0,captureLimitBytes:2097152,retentionDays:7,verifyUpstreamTls:!0,connectTimeoutMs:1e4,tlsHandshakeTimeoutMs:1e4,responseHeaderTimeoutMs:3e4,idleTimeoutMs:9e5,shutdownGraceMs:1500,allowPlainHttp:!1,allowedConnectPorts:[443]});function o(){return{...n,allowedClientIps:[...n.allowedClientIps],allowedClientTools:[...n.allowedClientTools],proxyAuthUsers:[...n.proxyAuthUsers],allowedHosts:[...n.allowedHosts],allowedConnectPorts:[...n.allowedConnectPorts]}}function p(){d.mkdirSync(j,{recursive:!0}),d.mkdirSync(m,{recursive:!0})}function q(a){return[...new Set((Array.isArray(a)?a:String(a||"").split(/[\r\n,]+/)).map(a=>String(a||"").trim().toLowerCase()).filter(Boolean).filter(a=>!a.includes("://")&&/^[*a-z0-9._-]+$/.test(a)))]}function r(a,b,c,d,e){let f=null==a?b:Number(a);if(!Number.isInteger(f)||f<c||f>d)throw Error(`${e} must be between ${c} and ${d}`);return f}function s(a={}){let b={...n,...a},c=r(b.port,n.port,1,65535,"Proxy port"),d=Number(b.captureLimitBytes);if(!Number.isFinite(d)||d<0||d>0x1000000)throw Error("Capture limit must be between 0 and 16 MB");let e=r(b.retentionDays,n.retentionDays,1,365,"Retention days"),f=r(b.connectTimeoutMs,n.connectTimeoutMs,1e3,12e4,"Connect timeout"),j=r(b.tlsHandshakeTimeoutMs,n.tlsHandshakeTimeoutMs,1e3,12e4,"TLS handshake timeout"),k=r(b.responseHeaderTimeoutMs,n.responseHeaderTimeoutMs,1e3,3e5,"Response header timeout"),l=r(b.idleTimeoutMs,n.idleTimeoutMs,3e4,36e5,"Idle timeout"),m=r(b.shutdownGraceMs,n.shutdownGraceMs,0,3e4,"Shutdown grace period"),o=String(b.bindHost||"127.0.0.1").trim();if(!o||/\s/.test(o))throw Error("Invalid bind address");let p=String(b.clientProxyHost||"").trim();if(/\s/.test(p)||p.includes("://"))throw Error("Client proxy host must be a hostname or IP without protocol");let t=!0===b.clientIpFilterEnabled,u=g(b.allowedClientIps);if(t&&0===u.length)throw Error("Client IP filter requires at least one allowed IP or CIDR");let v=!0===b.proxyAuthEnabled,w=i(b.proxyAuthUsers);if(v&&0===w.length)throw Error("Proxy authentication requires at least one account");let x=!0===b.clientToolFilterEnabled,y=h(b.allowedClientTools);if(x&&0===y.length)throw Error("Client tool filter requires at least one allowed tool");return{enabled:!0===b.enabled,bindHost:o,port:c,clientProxyHost:p,clientIpFilterEnabled:t,allowedClientIps:u,clientToolFilterEnabled:x,allowedClientTools:y,proxyAuthEnabled:v,proxyAuthUsers:w,allowedHosts:q(b.allowedHosts),passthroughUnknown:!1!==b.passthroughUnknown,captureBodies:!1!==b.captureBodies,captureLimitBytes:Math.round(d),retentionDays:e,verifyUpstreamTls:!0,connectTimeoutMs:f,tlsHandshakeTimeoutMs:j,responseHeaderTimeoutMs:k,idleTimeoutMs:l,shutdownGraceMs:m,allowPlainHttp:!1,allowedConnectPorts:[443]}}a.exports={AUDIT_DIR:j,CONFIG_PATH:k,AUDIT_LOG_PATH:l,AUDIT_LOG_DIR:m,DEFAULT_CONFIG:n,ensureAuditDir:p,loadConfig:function(){if(p(),!d.existsSync(k))return o();try{return s(JSON.parse(d.readFileSync(k,"utf8")))}catch(a){return console.warn(`[audit-proxy] invalid config ignored: ${a.message||a}`),o()}},saveConfig:function(a){p();let b=s(a),c=`${k}.tmp`;return d.writeFileSync(c,`${JSON.stringify(b,null,2)}
+`,{mode:384}),d.renameSync(c,k),b},validateConfig:s,normalizeAllowedHosts:q,normalizeAllowedClientIps:g}},44870:a=>{"use strict";a.exports=require("next/dist/compiled/next-server/app-route.runtime.prod.js")},45372:(a,b,c)=>{"use strict";let d=c(81630),e=c(73496),f=c(55591),g=c(91645),h=c(34631),i=c(55511),j=c(74075),{promisify:k}=c(28354),{redactHeaders:l,redactBodyText:m,redactUrlPath:n,scrubString:o}=c(48350),{extractUsageFromBody:p}=c(86455),{resolvePublicTarget:q}=c(78864),{normalizeAllowedTools:r,shouldRefuseClientTool:s,describeUserAgent:t}=c(98586),{createProxyAuthenticator:u,createProxyAuthLimiter:v}=c(7566),w=k(j.brotliDecompress),x=k(j.gunzip),y=k(j.inflate),z=k(j.inflateRaw),A="function"==typeof j.zstdDecompress?k(j.zstdDecompress):null,B=new Set(["connection","proxy-connection","keep-alive","proxy-authenticate","proxy-authorization","te","trailer","transfer-encoding","upgrade"]);function C(a){return String(a||"").trim().replace(/^\[|\]$/g,"").toLowerCase()}function D(a,b=443){let c=String(a||"").trim();if(!c)throw Error("Missing CONNECT authority");if(c.startsWith("[")){let a=c.indexOf("]");if(a<0)throw Error("Invalid IPv6 CONNECT authority");let d=c.slice(1,a),e=c.slice(a+1);if(e&&!e.startsWith(":"))throw Error("Invalid IPv6 CONNECT authority");let f=e?Number(e.slice(1)):b;if(!Number.isInteger(f)||f<1||f>65535)throw Error("Invalid CONNECT port");return{host:d,port:f}}let d=c.lastIndexOf(":");if(d>0&&c.indexOf(":")===d){let a=c.slice(d+1);if(!/^\d+$/.test(a))throw Error("Invalid CONNECT port");let b=Number(a);if(!Number.isInteger(b)||b<1||b>65535)throw Error("Invalid CONNECT port");return{host:c.slice(0,d),port:b}}return{host:c,port:b}}function E(a,b=[]){let c=C(a);return b.some(a=>{let b=C(a);if(!b)return!1;if(b===c)return!0;if(b.startsWith("*.")){let a=b.slice(1);return c.endsWith(a)&&c.length>a.length}return!1})}function F(a={},{stripInternal:b=!0}={}){let c=new Set([...B,...String(a.connection||"").split(",").map(a=>a.trim().toLowerCase()).filter(Boolean)]),d={};for(let[e,f]of Object.entries(a||{})){let a=e.toLowerCase();!c.has(a)&&(b&&(a.startsWith("x-9r-")||a.startsWith("x-bluerouter-"))||(d[e]=f))}return d}async function G(a,b,c){let d=String(b||"").split(",").map(a=>a.trim().toLowerCase()).filter(a=>a&&"identity"!==a);if(!d.length||!a.length)return{buffer:a,decoded:!1,contentEncoding:d.join(", ")||null};let e=a;for(let a of[...d].reverse()){let b={maxOutputLength:c};if("br"===a)e=await w(e,b);else if("gzip"===a||"x-gzip"===a)e=await x(e,b);else if("deflate"===a)try{e=await y(e,b)}catch{e=await z(e,b)}else if("zstd"===a&&A)e=await A(e,b);else throw Error(`Unsupported content-encoding: ${a}`)}return{buffer:e,decoded:!0,contentEncoding:d.join(", ")}}async function H(a,b,c){let d=String(b||"").split(",").map(a=>a.trim().toLowerCase()).filter(a=>a&&"identity"!==a);if(1!==d.length||!a.length)return null;let e=d[0],f={maxOutputLength:c,finishFlush:j.constants.Z_SYNC_FLUSH};try{if("gzip"===e||"x-gzip"===e)return await x(a,f);if("deflate"===e)try{return await y(a,f)}catch{return await z(a,f)}if("br"===e)return await w(a,{maxOutputLength:c,finishFlush:j.constants.BROTLI_OPERATION_FLUSH})}catch{}return null}class I{constructor(a){this.limitBytes=Math.max(0,Number(a)||0),this.parts=[],this.capturedBytes=0,this.totalBytes=0,this.truncated=!1,this.hash=i.createHash("sha256"),this.finished=!1}add(a){if(!a||this.finished)return;let b=Buffer.isBuffer(a)?a:Buffer.from(a);if(this.hash.update(b),this.totalBytes+=b.length,this.capturedBytes>=this.limitBytes){b.length&&(this.truncated=!0);return}let c=this.limitBytes-this.capturedBytes,d=b.length>c?b.subarray(0,c):b;d.length&&(this.parts.push(Buffer.from(d)),this.capturedBytes+=d.length),d.length<b.length&&(this.truncated=!0)}async finish(a="",b=""){if(this.finished)throw Error("Audit capture was finalized more than once");this.finished=!0;let c=this.hash.digest("hex"),d=Buffer.concat(this.parts),e=String(b||"").trim().toLowerCase(),f=d,g=!1,h=null,i=!1,j=null,k=null,l=!1,n=Math.max(1048576,Math.min(0x4000000,Math.max(8*this.limitBytes,this.limitBytes)));if(this.limitBytes>0&&d.length&&e&&"identity"!==e)if(this.truncated){let a=await H(d,e,n);a&&a.length?(f=a,g=!0,l=!0,h=a.length,i=!0):(j=`Compressed ${e} capture was truncated before decode`,k=`[${e} audit body capture truncated; decoded body unavailable]`)}else try{let a=await G(d,e,n);f=a.buffer,g=a.decoded,h=f.length,f.length>this.limitBytes&&(f=f.subarray(0,this.limitBytes),i=!0)}catch(a){j=o(a?.message||String(a)),k=`[Unable to decode ${e} audit body: ${j}]`}let p=/json|text|javascript|xml|x-www-form-urlencoded|event-stream/i.test(a||"");return{body:null!==k?k:p||!a?m(f.toString("utf8"),a):`[${f.length} bytes captured; binary body omitted]`,capturedBytes:this.capturedBytes,totalBytes:this.totalBytes,wireSha256:c,truncated:this.truncated||i,...e&&"identity"!==e?{contentEncoding:e}:{},...g?{decoded:!0,decodedBytes:h}:{},...l?{decodePartial:!0}:{},...j?{decodeError:j}:{}}}}function J(a){let b=C(a);return"api.anthropic.com"===b||b.endsWith(".anthropic.com")||"claude.ai"===b||b.endsWith(".claude.ai")?"anthropic":"api.openai.com"===b||b.endsWith(".openai.com")||"chatgpt.com"===b||b.endsWith(".chatgpt.com")?"openai":"other"}function K(a){if(!a||"string"!=typeof a)return null;try{let b=JSON.parse(a);return"string"==typeof b?.model?b.model:null}catch{return null}}function L(a){let b=a?.remoteAddress||"";return b.startsWith("::ffff:")?b.slice(7):b}function M(a,b,c,d=null){try{let e=String(c||b),f=(d||[]).filter(a=>"string"==typeof a&&!/[\r\n]/.test(a)).map(a=>`${a}\r
+`).join("");a.end(`HTTP/1.1 ${b}\r
+${f}Connection: close\r
 Content-Type: text/plain; charset=utf-8\r
-Content-Length: ${Buffer.byteLength(d)}\r
+Content-Length: ${Buffer.byteLength(e)}\r
 \r
-${d}`)}catch{try{a.destroy()}catch{}}}function K(a={}){let b={};for(let[c,d]of Object.entries(a||{}))b[c]=d;return b}async function L(a){let b=await a.requestCapture.finish(String(a.requestHeaders["content-type"]||""),String(a.requestHeaders["content-encoding"]||"")),c=String(a.responseHeaders?.["content-type"]||""),d=await a.responseCapture.finish(c,String(a.responseHeaders?.["content-encoding"]||"")),e=H(a.target.host),f=n(a.path),g=p({provider:e,body:d.body,contentType:c,path:f}),h=I(b.body)||g?.model||null;return{id:i.randomUUID(),timestamp:new Date().toISOString(),protocol:a.protocol||"http/1.1",client:{ip:a.clientIp||"",port:a.clientPort||null,userAgent:String(a.requestHeaders["user-agent"]||"")},provider:e,host:A(a.target.host),port:a.target.port,method:a.method,path:f,model:h,usage:g,status:a.statusCode||null,durationMs:Date.now()-a.startedAt,error:a.error?o(a.error.message||a.error):null,request:{headers:l(a.requestHeaders),...b},response:{headers:l(a.responseHeaders||{}),...d}}}a.exports={createAuditProxy:function(a={},b={}){let c={allowedHosts:[],passthroughUnknown:!0,captureBodies:!0,captureLimitBytes:2097152,verifyUpstreamTls:!0,allowedConnectPorts:[443],connectTimeoutMs:1e4,tlsHandshakeTimeoutMs:1e4,responseHeaderTimeoutMs:3e4,idleTimeoutMs:9e5,allowPlainHttp:!1,clientToolFilterEnabled:!1,allowedClientTools:[],clientAlpnProtocols:["http/1.1"],...a};if(!0!==c.verifyUpstreamTls)throw Error("Upstream TLS verification is mandatory in Audit Proxy mode");let i=b.certificateProvider;if("function"!=typeof i)throw Error("certificateProvider is required");let j="function"==typeof b.onAudit?b.onAudit:()=>{},k="function"==typeof b.onAuditJob?b.onAuditJob:null,l="function"==typeof b.resolveTarget?b.resolveTarget:(a,b)=>q(a,b,{allowedPorts:c.allowedConnectPorts}),m=b.upstreamCa,n=r(c.allowedClientTools),o=new Set,p=new Map,u=new WeakMap,v=new Set;function w(a){return!a||o.has(a)||(o.add(a),a.once?.("close",()=>o.delete(a))),a}function x(a,b){try{"function"==typeof a.destroy?a.destroy(b):"function"==typeof a.close&&a.close()}catch{}}function y(a){let b=()=>L(a);if(k){try{k(b)}catch(a){console.warn("[audit-proxy] audit enqueue failed:",a?.message||a)}return}setImmediate(()=>{Promise.resolve().then(b).then(j).catch(a=>console.warn("[audit-proxy] audit callback failed:",a?.message||a))})}function z({requestHeaders:a,method:b,path:c,target:d,requestCapture:e,responseCapture:f,responseHeaders:g,statusCode:h,startedAt:i,error:j,socket:k,protocol:l}){let m;return{requestHeaders:K(a),method:b,path:c,target:d,requestCapture:e,responseCapture:f,responseHeaders:K(g),statusCode:h,startedAt:i,error:j,clientIp:(m=k?.remoteAddress||"").startsWith("::ffff:")?m.slice(7):m,clientPort:k?.remotePort||null,protocol:l}}let A="This proxy does not support WebSocket connections. Use the HTTP streaming transport instead - most clients fall back to it automatically.";function E(a,b,d,e){let f=String(a.url||""),g=d||{host:f.includes(":")?f.slice(0,f.lastIndexOf(":")):f||"unknown",port:443},h=new G(c.captureBodies?c.captureLimitBytes:0);h.add(Buffer.from(e)),y(z({requestHeaders:a.headers,method:"CONNECT",path:"",target:g,requestCapture:new G(0),responseCapture:h,responseHeaders:{"content-type":"text/plain; charset=utf-8",connection:"close"},statusCode:403,startedAt:Date.now(),error:e,socket:b,protocol:"http/1.1"}))}function F(a,b,d){if(!d)return;let e=new G(c.captureBodies?c.captureLimitBytes:0);e.add(Buffer.from(A)),y(z({requestHeaders:a.headers,method:a.method,path:a.url,target:d,requestCapture:new G(0),responseCapture:e,responseHeaders:{"content-type":"text/plain; charset=utf-8",connection:"close"},statusCode:501,startedAt:Date.now(),error:null,socket:b,protocol:"http/1.1"}))}async function H(a,b,{expectContinue:d=!1}={}){let e=a.socket.__auditTarget;if(!e){b.writeHead(502,{"content-type":"text/plain"}),b.end("Audit target is missing");return}if(function(a={}){return"string"==typeof a.upgrade&&""!==a.upgrade.trim()}(a.headers)){b.writeHead(501,{"content-type":"text/plain; charset=utf-8",connection:"close"}),b.end(A),F(a,a.socket,e);return}let h=Date.now(),i=new G(c.captureBodies?c.captureLimitBytes:0),j=new G(c.captureBodies?c.captureLimitBytes:0),k=D(a.headers,{stripInternal:!0});k.host=443===e.port?e.host:`${e.host}:${e.port}`;let n=null,o=null,q={},r=null,s=!1,t=!1,u=null,v=(b=null)=>{s||(s=!0,u&&clearTimeout(u),y(z({requestHeaders:a.headers,method:a.method,path:a.url,target:e,requestCapture:i,responseCapture:j,responseHeaders:q,statusCode:r,startedAt:h,error:b,socket:a.socket,protocol:"http/1.1"})))};try{let h,s,x=await l(e.host,e.port);(n=f.request({hostname:e.host,port:e.port,method:a.method,path:a.url,headers:k,rejectUnauthorized:!0,servername:g.isIP(e.host)?void 0:e.host,ca:m,ALPNProtocols:["http/1.1"],lookup:x.lookup,autoSelectFamily:!0,agent:(h=`${e.host}:${e.port}`,(s=p.get(h))||(s=new f.Agent({keepAlive:!0,maxSockets:32,maxFreeSockets:8,timeout:c.idleTimeoutMs}),p.set(h,s)),s)})).on("socket",a=>{if(w(a),a.setNoDelay(!0),a.setKeepAlive(!0,3e4),a.setTimeout(c.idleTimeoutMs,()=>a.destroy(Error("Upstream idle timeout"))),a.connecting){let b=setTimeout(()=>a.destroy(Error("Upstream TLS connect timeout")),c.connectTimeoutMs+c.tlsHandshakeTimeoutMs);b.unref?.();let d=()=>clearTimeout(b);a.once("secureConnect",d),a.once("error",d),a.once("close",d)}}),n.on("continue",()=>{d&&!b.headersSent&&b.writeContinue()}),n.on("information",a=>{102===a.statusCode&&"function"==typeof b.writeProcessing&&b.writeProcessing(),103===a.statusCode&&"function"==typeof b.writeEarlyHints&&b.writeEarlyHints(a.headers||{})}),n.on("response",a=>{o=a,u&&clearTimeout(u),r=a.statusCode||502,q=K(a.headers||{});let c=D(a.headers,{stripInternal:!1});b.writeHead(r,c),b.flushHeaders?.(),a.on("data",c=>{j.add(c),b.write(c)||a.pause()}),b.on("drain",()=>a.resume()),a.on("aborted",()=>{let a=Error("Upstream response aborted");b.destroyed||b.destroy(a),v(a)}),a.on("error",a=>{b.destroyed||b.destroy(a),v(a)}),a.on("end",()=>{if(a.trailers&&Object.keys(a.trailers).length)try{b.addTrailers(D(a.trailers,{stripInternal:!1}))}catch{}t=!0,b.end(),v(null)})}),n.on("error",a=>{b.headersSent?b.destroyed||b.destroy(a):(b.writeHead(502,{"content-type":"application/json"}),b.end(JSON.stringify({error:"Verified upstream TLS request failed"})),t=!0),v(a)}),a.on("data",b=>{i.add(b),n.write(b)||a.pause()}),n.on("drain",()=>a.resume()),a.on("end",()=>{if(a.trailers&&Object.keys(a.trailers).length)try{n.addTrailers(D(a.trailers,{stripInternal:!0}))}catch{}n.end(),u=setTimeout(()=>n.destroy(Error("Upstream response header timeout")),c.responseHeaderTimeoutMs),u.unref?.()}),a.on("aborted",()=>n.destroy(Error("Client request aborted"))),a.on("error",a=>n.destroy(a)),b.on("close",()=>{t||(o?.destroy(Error("Client response closed")),n?.destroy(Error("Client response closed")),v(Error("Client response closed")))})}catch(a){b.headersSent||(b.writeHead(502,{"content-type":"application/json"}),b.end(JSON.stringify({error:"Destination validation or connection failed"})),t=!0),v(a)}}let I=d.createServer((a,b)=>{H(a,b)});async function M(a){return a.upstreamPromise||(a.upstreamPromise=(async()=>{let b=a.target,d=await l(b.host,b.port),f=w(h.connect({host:b.host,port:b.port,servername:g.isIP(b.host)?void 0:b.host,rejectUnauthorized:!0,ca:m,ALPNProtocols:["h2"],lookup:d.lookup,autoSelectFamily:!0}));f.setNoDelay(!0),f.setKeepAlive(!0,3e4);let i=setTimeout(()=>f.destroy(Error("Upstream HTTP/2 TLS connect timeout")),c.connectTimeoutMs+c.tlsHandshakeTimeoutMs);i.unref?.(),f.once("secureConnect",()=>{clearTimeout(i),"h2"!==f.alpnProtocol&&f.destroy(Error("Upstream did not negotiate HTTP/2"))}),f.once("error",()=>clearTimeout(i)),f.once("close",()=>clearTimeout(i));let j=`https://${b.host}${443===b.port?"":`:${b.port}`}`,k=e.connect(j,{createConnection:()=>f,settings:{enablePush:!1}});return v.add(k),k.setTimeout(c.idleTimeoutMs,()=>k.destroy(Error("Upstream HTTP/2 idle timeout"))),k.once("close",()=>v.delete(k)),await new Promise((a,b)=>{let d=setTimeout(()=>b(Error("Upstream HTTP/2 session timeout")),c.connectTimeoutMs+c.tlsHandshakeTimeoutMs);d.unref?.();let e=(a,b)=>{clearTimeout(d),k.removeListener("connect",f),k.removeListener("error",g),a(b)},f=()=>e(a,k),g=a=>e(b,a);k.once("connect",f),k.once("error",g)}),k})().catch(b=>{throw a.upstreamPromise=null,b})),a.upstreamPromise}async function N(a,b){let d=u.get(a.session),f=d?.target;if(!d||!f){a.respond({":status":502,"content-type":"text/plain"}),a.end("Audit target is missing");return}a.pause();let g=Date.now(),h=new G(c.captureBodies?c.captureLimitBytes:0),i=new G(c.captureBodies?c.captureLimitBytes:0),j={},k=null,l=!1,m=!1,n=null,o=null,p=null,q=(c=null)=>{l||(l=!0,y(z({requestHeaders:b,method:b[":method"]||"GET",path:b[":path"]||"/",target:f,requestCapture:h,responseCapture:i,responseHeaders:j,statusCode:k,startedAt:g,error:c,socket:a.session.socket,protocol:"h2"})))};try{(n=(await M(d)).request(function(a,b){let c=D(a,{stripInternal:!0}),d={":method":a[":method"]||"GET",":path":a[":path"]||"/",":scheme":"https",":authority":443===b.port?b.host:`${b.host}:${b.port}`};for(let[a,b]of Object.entries(c))a.startsWith(":")||(d[a.toLowerCase()]=b);return d}(b,f),{endStream:!1,waitForTrailers:!0})).setTimeout(c.idleTimeoutMs,()=>n.close(e.constants.NGHTTP2_CANCEL)),a.setTimeout(c.idleTimeoutMs,()=>a.close(e.constants.NGHTTP2_CANCEL)),n.on("response",b=>{j=K(b),k=Number(b[":status"]||502),a.respond(function(a){let b=D(a,{stripInternal:!1}),c={":status":Number(a[":status"]||502)};for(let[a,d]of Object.entries(b))a.startsWith(":")||(c[a.toLowerCase()]=d);return c}(b),{waitForTrailers:!0})}),n.on("trailers",a=>{p=D(a,{stripInternal:!1})}),a.on("wantTrailers",()=>{try{a.sendTrailers(p||{})}catch{}}),a.on("trailers",a=>{o=D(a,{stripInternal:!0})}),n.on("wantTrailers",()=>{try{n.sendTrailers(o||{})}catch{}}),a.on("data",b=>{h.add(b),n.write(b)||a.pause()}),n.on("drain",()=>a.resume()),a.on("end",()=>n.end()),n.on("data",b=>{i.add(b),a.write(b)||n.pause()}),a.on("drain",()=>n.resume()),n.on("end",()=>{m=!0,a.end(),q(null)}),n.on("aborted",()=>{let b=Error("Upstream HTTP/2 stream aborted");a.close(e.constants.NGHTTP2_INTERNAL_ERROR),q(b)}),n.on("error",b=>{a.closed||a.close(e.constants.NGHTTP2_INTERNAL_ERROR),q(b)}),a.on("aborted",()=>{n.close(e.constants.NGHTTP2_CANCEL),q(Error("Client HTTP/2 stream aborted"))}),a.on("error",a=>{n.close(e.constants.NGHTTP2_CANCEL),q(a)}),a.on("close",()=>{m||!n||n.closed||(n.close(e.constants.NGHTTP2_CANCEL),q(Error("Client HTTP/2 stream closed")))}),a.resume()}catch(b){a.headersSent||a.closed||a.respond({":status":502,"content-type":"application/json"}),a.closed||a.end(JSON.stringify({error:"Verified upstream HTTP/2 request failed"})),q(b)}}I.on("checkContinue",(a,b)=>{H(a,b,{expectContinue:!0})}),I.on("upgrade",(a,b)=>{J(b,"501 Not Implemented",A),F(a,b,b.__auditTarget)}),I.on("clientError",(a,b)=>x(b)),I.headersTimeout=c.responseHeaderTimeoutMs,I.requestTimeout=0,I.keepAliveTimeout=c.idleTimeoutMs;let O=e.createServer({settings:{enablePush:!1}});O.on("session",a=>{let b={target:a.socket.__auditTarget,upstreamPromise:null};u.set(a,b),a.setTimeout(c.idleTimeoutMs,()=>a.destroy(Error("Client HTTP/2 idle timeout"))),a.once("close",()=>{Promise.resolve(b.upstreamPromise).then(a=>a?.close()).catch(()=>{})})}),O.on("stream",(a,b)=>{N(a,b)}),O.on("sessionError",a=>{console.warn("[audit-proxy] HTTP/2 client session error:",a?.message||a)});let P=d.createServer((a,b)=>{b.writeHead(403,{"content-type":"text/plain; charset=utf-8",connection:"close"}),b.end("Audit Proxy accepts HTTPS CONNECT traffic only")});return P.on("connect",(a,b,d)=>{(async()=>{let e,f;try{e=B(a.url,443),await l(e.host,e.port)}catch(d){let c=d.message||"Destination is not allowed";J(b,"403 Forbidden",c),E(a,b,e,c);return}if(c.clientToolFilterEnabled&&s(a.headers["user-agent"],n)){let c=`Client tool is not allowed to use this proxy (${t(a.headers["user-agent"])})`;J(b,"403 Forbidden",c),E(a,b,e,c);return}if(!C(e.host,c.allowedHosts)){if(!c.passthroughUnknown){let c="Host is not in the audit allowlist";J(b,"403 Forbidden",c),E(a,b,e,c);return}let f=!1;try{let a=await l(e.host,e.port),h=w(g.connect({host:e.host,port:e.port,lookup:a.lookup,autoSelectFamily:!0})),i=setTimeout(()=>h.destroy(Error("TCP passthrough connect timeout")),c.connectTimeoutMs);i.unref?.(),h.setNoDelay(!0),h.setKeepAlive(!0,3e4),h.setTimeout(c.idleTimeoutMs,()=>h.destroy(Error("TCP passthrough idle timeout"))),h.once("connect",()=>{clearTimeout(i),f=!0,b.write("HTTP/1.1 200 Connection Established\r\nProxy-Agent: BlueRouter-Audit\r\n\r\n"),d?.length&&h.write(d),h.pipe(b),b.pipe(h)}),h.once("error",()=>{clearTimeout(i),f?x(b):J(b,"502 Bad Gateway","TCP passthrough failed")}),b.once("error",()=>x(h)),b.once("close",()=>x(h))}catch(a){J(b,"502 Bad Gateway",a.message||"TCP passthrough failed")}return}try{if(f=i(e.host),!f?.key||!f?.cert)throw Error("Certificate provider returned no certificate")}catch(a){J(b,"500 Internal Server Error",`Cannot issue audit certificate: ${a.message}`);return}b.write("HTTP/1.1 200 Connection Established\r\nProxy-Agent: BlueRouter-Audit\r\n\r\n"),d?.length&&b.unshift(d);let j=w(new h.TLSSocket(b,{isServer:!0,key:f.key,cert:f.cert,ALPNProtocols:c.clientAlpnProtocols}));j.__auditTarget=e,j.setNoDelay(!0),j.setKeepAlive(!0,3e4),j.setTimeout(c.idleTimeoutMs,()=>j.destroy(Error("Client TLS idle timeout")));let k=setTimeout(()=>j.destroy(Error("Client TLS handshake timeout")),c.tlsHandshakeTimeoutMs);k.unref?.();let m=!1,o=()=>{m||(m=!0,clearTimeout(k),"h2"===j.alpnProtocol?O.emit("connection",j):I.emit("connection",j))};j.once("secure",o),j.once("secureConnect",o),j.once("error",()=>{clearTimeout(k),x(j)}),j.once("close",()=>clearTimeout(k))})().catch(a=>J(b,"500 Internal Server Error",a.message||"Audit CONNECT failed"))}),P.prependListener("connection",a=>{w(a),a.setNoDelay(!0),a.setKeepAlive(!0,3e4)}),P.on("upgrade",(a,b)=>J(b,"501 Not Implemented",A)),P.on("clientError",(a,b)=>x(b)),P.headersTimeout=c.responseHeaderTimeoutMs,P.requestTimeout=0,P.keepAliveTimeout=c.idleTimeoutMs,P.forceCloseAll=()=>{for(let a of v)try{a.destroy()}catch{}for(let a of p.values())try{a.destroy()}catch{}for(let a of[...o])x(a)},P.getActiveConnectionCount=()=>o.size,P.auditConfig=c,P.auditCapabilities={http1:!0,http2:c.clientAlpnProtocols.includes("h2"),plainHttp:!1,publicConnectPorts:[...c.allowedConnectPorts]},P},hostMatches:C,parseAuthority:B,stripHopByHop:D,CaptureBuffer:G,detectProvider:H,extractModel:I,decodeCapturedBuffer:E}},46293:a=>{a.exports=require("sql.js")},48350:a=>{let b=new Set(["authorization","proxy-authorization","x-api-key","api-key","cookie","set-cookie","x-auth-token","x-access-token","cf-access-jwt-assertion"]),c=/(^|[_-])(access[_-]?token|refresh[_-]?token|id[_-]?token|token|api[_-]?key|apikey|password|passwd|secret|authorization|cookie)($|[_-])/i;function d(a){let c=String(a||"").toLowerCase();return b.has(c)||/token|secret|password|credential/i.test(c)}function e(a,b=new WeakSet){if(null==a||"object"!=typeof a)return a;if(b.has(a))return"[CIRCULAR]";if(b.add(a),Array.isArray(a))return a.map(a=>e(a,b));let d={};for(let[f,g]of Object.entries(a))d[f]=c.test(f)?"[REDACTED]":e(g,b);return d}function f(a){if(null==a)return a;let b=String(a);return(b=(b=b.replace(/\bBearer\s+[A-Za-z0-9._~+\/-]+=*/gi,"Bearer [REDACTED]")).replace(/\b(sk-ant-[A-Za-z0-9_-]{8,}|sk-[A-Za-z0-9_-]{8,})\b/g,"[REDACTED]")).replace(/("(?:access_token|refresh_token|id_token|api_key|apikey|password|secret|authorization)"\s*:\s*")([^"]+)(")/gi,"$1[REDACTED]$3")}a.exports={redactHeaders:function(a={}){let b={};for(let[c,e]of Object.entries(a||{}))b[c]=d(c)?"[REDACTED]":e;return b},redactObject:e,redactBodyText:function(a,b=""){let c=String(a||"");if(/application\/(?:[^;]+\+)?json/i.test(b)||/^[\s\r\n]*[\[{]/.test(c))try{let a=JSON.parse(c);return JSON.stringify(e(a))}catch{}return f(c)},scrubString:f,redactUrlPath:function(a){let b=String(a||"");try{let a=new URL(b,"https://audit.invalid");for(let b of[...a.searchParams.keys()])if(/token|secret|key|password|credential|authorization|^code$/i.test(b))a.searchParams.set(b,"[REDACTED]");else{let c=a.searchParams.get(b);c&&a.searchParams.set(b,f(c))}return`${a.pathname}${a.search}`}catch{return f(b)}},containsLikelySecret:function(a){let b="string"==typeof a?a:JSON.stringify(a);return/Bearer\s+(?!\[REDACTED\])\S+|sk-ant-[A-Za-z0-9_-]{8,}|\bsk-[A-Za-z0-9_-]{8,}/i.test(b||"")},shouldRedactHeader:d}},49083:(a,b,c)=>{let{createAuditProxy:d}=c(45372),{loadConfig:e,saveConfig:f,validateConfig:g,CONFIG_PATH:h,AUDIT_LOG_PATH:i,AUDIT_LOG_DIR:j}=c(43096),{clientIpMatches:k,normalizeIp:l}=c(5565),{enqueueAuditJob:m,readRecent:n,clearAudit:o,pruneExpired:p,startAuditMaintenance:q,stopAuditMaintenance:r,flushAuditQueue:s,getAuditStoreStats:t}=c(90173),{ensureAuditRootCA:u,createAuditCertificateProvider:v,validateRootCaPair:w}=c(85074),{readRootCAInfo:x}=c(8578),{runSelfTest:y}=c(85252);function z(){return globalThis.__blueRouterAuditProxyRuntime||(globalThis.__blueRouterAuditProxyRuntime={server:null,certificateProvider:null,startedAt:null,lastError:null,autostartPromise:null,lifecycle:Promise.resolve()}),globalThis.__blueRouterAuditProxyRuntime}function A(a){let b=z(),c=b.lifecycle.then(a,a);return b.lifecycle=c.catch(()=>{}),c}async function B(a,b=1500){if(!a)return;let c=Math.max(0,Number(b)||0);await new Promise(b=>{let d=!1,e=()=>{d||(d=!0,b())};try{a.listening?a.close(e):e()}catch{e()}let f=setTimeout(()=>{try{a.forceCloseAll?.()}catch{}},c);f.unref?.();let g=setTimeout(e,c+2e3);g.unref?.()});try{a.forceCloseAll?.()}catch{}}function C(a){let b=e();return{...a,clientIpFilterEnabled:!0===b.clientIpFilterEnabled,allowedClientIps:[...b.allowedClientIps||[]]}}async function D(a=null){let b=z();if(b.server?.listening)return I();let c=a?f({...C(a),enabled:!1}):e();await u(),await p(),q();let g=v({maxEntries:128});g.prewarm(c.allowedHosts);let h=d(c,{certificateProvider:g,onAuditJob:m});!function(a,b){if(!b.clientIpFilterEnabled)return;let c=b.allowedClientIps||[];a.prependListener("connection",a=>{let b=l(a?.remoteAddress||"");if(!k(b,c)){console.log(`[audit-proxy] denied client IP ${b||"unknown"}`);try{a.destroy()}catch{}}})}(h,c);try{let a=await new Promise((a,b)=>{let d=a=>{h.removeListener("listening",e),b(a)},e=()=>{h.removeListener("error",d),a(h.address())};h.once("error",d),h.once("listening",e),h.listen(c.port,c.bindHost)});return b.server=h,b.certificateProvider=g,b.startedAt=new Date().toISOString(),b.lastError=null,f({...c,enabled:!0}),{...await I(),address:a}}catch(a){b.lastError=a.message||String(a);try{h.forceCloseAll?.()}catch{}try{h.close()}catch{}throw g.clear?.(),a}}async function E({persist:a=!0}={}){let b=z(),c=b.server,d=e();return b.server=null,b.startedAt=null,await B(c,d.shutdownGraceMs),b.certificateProvider?.clear?.(),b.certificateProvider=null,await s(3e3),r(),a&&f({...d,enabled:!1}),I()}async function F(a=null){return await E({persist:!1}),a&&f({...C(a),enabled:!1}),D()}function G(a=null){return A(()=>D(a))}async function H(){let a=z(),b=e();return b.enabled?a.server?.listening?{started:!1,reason:"already-running",status:await I()}:(a.autostartPromise||(a.autostartPromise=(async()=>{try{let a=await G();return console.log(`[audit-proxy] autostarted on ${b.bindHost}:${b.port}`),{started:!0,status:a}}catch(b){return a.lastError=b?.message||String(b),console.log("[audit-proxy] autostart failed:",a.lastError),{started:!1,error:a.lastError}}finally{a.autostartPromise=null}})()),a.autostartPromise):{started:!1,reason:"disabled"}}async function I(){let a=z(),b=e(),c=!!a.server?.listening,d=x();try{let a=w();d={...d,validated:!0===a.exists,expiringSoon:!0===a.expiringSoon,autoRotation:!1}}catch(a){d={...d,validated:!1,autoRotation:!1,error:a.message||String(a)}}return{running:c,listening:c,startedAt:a.startedAt,lastError:a.lastError,address:c?a.server.address():null,activeConnections:c&&a.server.getActiveConnectionCount?.()||0,capabilities:c?a.server.auditCapabilities:{http1:!0,http2:!1,plainHttp:!1,publicConnectPorts:[443]},security:{clientIpFilterEnabled:b.clientIpFilterEnabled,clientToolFilterEnabled:!0===b.clientToolFilterEnabled,allowedClientToolCount:(b.allowedClientTools||[]).length,lanExposedWithoutIpFilter:!["127.0.0.1","::1","localhost"].includes(String(b.bindHost||"").trim().toLowerCase())&&!b.clientIpFilterEnabled,privateDestinationsBlocked:!0,plainHttpBlocked:!0,upstreamTlsVerified:!0},certificateCache:a.certificateProvider?.stats?.()||{entries:0},auditStore:t(),configPath:h,auditLogPath:i,auditLogDirectory:j,rootCA:d}}async function J(a=50){let b=e(),[c,d]=await Promise.all([I(),n(a)]);return{config:b,status:c,events:d}}a.exports={startProxy:G,ensureAuditProxyAutostart:H,stopProxy:function(a={}){return A(()=>E(a))},restartProxy:function(a=null){return A(()=>F(a))},getStatus:I,getSnapshot:J,updateConfig:function(a){let b=z();if(b.server?.listening)throw Error("Stop or restart the Audit Proxy before changing its configuration");return f(g(C(a)))},updateClientProxyHost:function(a){return f(g({...e(),clientProxyHost:String(a||"").trim()}))},updateClientIpFilter:function({enabled:a,allowedClientIps:b}={}){return A(async()=>{let c=z(),d=g({...e(),clientIpFilterEnabled:!0===a,allowedClientIps:b});if(c.server?.listening){await E({persist:!1}),f({...d,enabled:!1});let a=await D();return{config:e(),status:a,restarted:!0}}return{config:f(d),status:await I(),restarted:!1}})},clearAudit:o,runSelfTest:y}},51455:a=>{a.exports=require("node:fs/promises")},53053:a=>{a.exports=require("node:diagnostics_channel")},55511:a=>{a.exports=require("crypto")},55591:a=>{a.exports=require("https")},63033:a=>{a.exports=require("next/dist/server/app-render/work-unit-async-storage.external.js")},64939:a=>{a.exports=import("pg")},66136:a=>{a.exports=require("timers")},73024:a=>{a.exports=require("node:fs")},73496:a=>{a.exports=require("http2")},74075:a=>{a.exports=require("zlib")},76760:a=>{a.exports=require("node:path")},77598:a=>{a.exports=require("node:crypto")},78864:(a,b,c)=>{let d=c(14985).promises,e=c(91645),{normalizeIp:f,clientIpMatches:g}=c(5565),h=new Map,i=Object.freeze(["0.0.0.0/8","10.0.0.0/8","100.64.0.0/10","127.0.0.0/8","169.254.0.0/16","172.16.0.0/12","192.0.0.0/24","192.0.2.0/24","192.88.99.0/24","192.168.0.0/16","198.18.0.0/15","198.51.100.0/24","203.0.113.0/24","224.0.0.0/4","240.0.0.0/4","::/96","::1/128","100::/64","2001:2::/48","2001:db8::/32","fc00::/7","fe80::/10","ff00::/8"]),j=Object.freeze([".localhost",".local",".internal",".lan",".home.arpa"]);function k(a){return String(a||"").trim().replace(/^\[|\]$/g,"").replace(/\.$/,"").toLowerCase()}function l(a){let b=k(a);return!(!(!b||"localhost"===b||j.some(a=>b.endsWith(a)))&&(e.isIP(b)||b.includes(".")))}function m(a){let b=f(a);return!!e.isIP(b)&&!g(b,i)}function n(a){let b=[...new Set((Array.isArray(a)?a:[a]).map(a=>Number(a)).filter(a=>Number.isInteger(a)&&a>=1&&a<=65535))];return b.length?b:[443]}function o(a){let b=[...a?.addresses||[]];return function(c,d,e){let f=d,g=e;"function"==typeof d&&(g=d,f={});let h="number"==typeof f?f:Number(f?.family||0);if("object"==typeof f&&f?.all===!0){let c=4===h||6===h?b.filter(a=>a.family===h):b;if(!c.length){let b=Error(`No validated public address for ${a.host}`);b.code="ENOTFOUND",g(b);return}g(null,c.map(({address:a,family:b})=>({address:a,family:b})));return}let i=function(a,b=0){let c=Number(b||0);return 4===c||6===c?a.find(a=>a.family===c)||null:a.find(a=>4===a.family)||a[0]||null}(b,h);if(!i){let b=Error(`No validated public address for ${a.host}`);b.code="ENOTFOUND",g(b);return}g(null,i.address,i.family)}}async function p(a,b,c={}){let g=k(a),i=Number(b||443),j=n(c.allowedPorts||[443]);if(!g)throw Error("Destination host is empty");if(!Number.isInteger(i)||!j.includes(i))throw Error(`CONNECT destination port ${i||"unknown"} is not allowed`);if(l(g))throw Error(`Private or local destination hostname is not allowed: ${g}`);let q=e.isIP(f(g));if(q){let a=f(g);if(!m(a))throw Error(`Private or reserved destination address is not allowed: ${a}`);let b={host:g,port:i,addresses:[{address:a,family:q}]};return{...b,lookup:o(b)}}let r=Date.now(),s=h.get(g);if(!s||s.expiresAt<=r){let a=await d.lookup(g,{all:!0,verbatim:!0}),b=[],c=new Set;for(let d of a||[]){let a=f(d.address),g=e.isIP(a);if(!g||!m(a))continue;let h=`${g}:${a}`;c.has(h)||(c.add(h),b.push({address:a,family:g}))}if(!b.length)throw Error(`Destination did not resolve to a public address: ${g}`);s={addresses:b,expiresAt:r+6e4},h.set(g,s)}let t={host:g,port:i,addresses:[...s.addresses]};return{...t,lookup:o(t)}}a.exports={BLOCKED_ADDRESS_RANGES:i,normalizeTargetHost:k,normalizeAllowedPorts:n,isBlockedHostname:l,isPublicAddress:m,createPinnedLookup:o,resolvePublicTarget:p,clearDnsPolicyCache:function(){h.clear()}}},79428:a=>{a.exports=require("buffer")},79646:a=>{a.exports=require("child_process")},79748:a=>{a.exports=require("fs/promises")},80099:a=>{a.exports=require("node:sqlite")},81630:a=>{a.exports=require("http")},81787:a=>{a.exports=require("bun:sqlite")},85252:(a,b,c)=>{let d=c(73496),e=c(91645),f=c(34631),g=c(74075),h=c(55511),i=c(15296),{createAuditProxy:j,CaptureBuffer:k}=c(45372),{containsLikelySecret:l}=c(48350),{clientIpMatches:m,normalizeAllowedClientIps:n}=c(5565),{normalizeAllowedTools:o,clientToolMatches:p,shouldRefuseClientTool:q}=c(98586),{isPublicAddress:r}=c(78864);function s(a){return h.createHash("sha256").update(a).digest("hex")}function t(a){let b=i.pki.rsa.generateKeyPair(2048),c=i.pki.createCertificate();c.publicKey=b.publicKey,c.serialNumber=String(Date.now()),c.validity.notBefore=new Date(Date.now()-6e4),c.validity.notAfter=new Date(Date.now()+864e5);let d=[{name:"commonName",value:a}];return c.setSubject(d),c.setIssuer(d),c.setExtensions([{name:"basicConstraints",cA:!0,critical:!0},{name:"keyUsage",keyCertSign:!0,cRLSign:!0,critical:!0}]),c.sign(b.privateKey,i.md.sha256.create()),{cert:c,keys:b,certPem:i.pki.certificateToPem(c)}}function u(a,b){let c=i.pki.rsa.generateKeyPair(2048),d=i.pki.createCertificate();return d.publicKey=c.publicKey,d.serialNumber=`${Date.now()}${Math.floor(1e3*Math.random())}`,d.validity.notBefore=new Date(Date.now()-6e4),d.validity.notAfter=new Date(Date.now()+864e5),d.setSubject([{name:"commonName",value:b}]),d.setIssuer(a.cert.subject.attributes),d.setExtensions([{name:"basicConstraints",cA:!1},{name:"keyUsage",digitalSignature:!0,keyEncipherment:!0},{name:"extKeyUsage",serverAuth:!0},{name:"subjectAltName",altNames:[{type:2,value:b}]}]),d.sign(a.keys.privateKey,i.md.sha256.create()),{cert:i.pki.certificateToPem(d),key:i.pki.privateKeyToPem(c.privateKey)}}function v(a,b="127.0.0.1"){return new Promise((c,d)=>{a.once("error",d),a.listen(0,b,()=>{a.removeListener("error",d),c(a.address())})})}function w(a){return new Promise(b=>{if(!a)return b();try{a.forceCloseAll?.()}catch{}if(!a.listening)return b();a.close(()=>b()),setTimeout(b,1e3).unref?.()})}function x(a,b){let c="127.0.0.1";return Promise.resolve({host:a,port:b,addresses:[{address:c,family:4}],lookup:(a,b,d)=>{let e=b,f=d;"function"==typeof b&&(f=b,e={}),e?.all?f(null,[{address:c,family:4}]):f(null,c,4)}})}function y(a,b,c=""){return new Promise((d,f)=>{let g=e.connect(a,"127.0.0.1"),h=Buffer.alloc(0),i=setTimeout(()=>f(Error("CONNECT timeout")),7e3);g.once("error",f),g.once("connect",()=>{let a=c?`User-Agent: ${c}\r
-`:"";g.write(`CONNECT ${b} HTTP/1.1\r
+${e}`)}catch{try{a.destroy()}catch{}}}function N(a={}){let b={};for(let[c,d]of Object.entries(a||{}))b[c]=d;return b}async function O(a){let b=await a.requestCapture.finish(String(a.requestHeaders["content-type"]||""),String(a.requestHeaders["content-encoding"]||"")),c=String(a.responseHeaders?.["content-type"]||""),d=await a.responseCapture.finish(c,String(a.responseHeaders?.["content-encoding"]||"")),e=J(a.target.host),f=n(a.path),g=p({provider:e,body:d.body,contentType:c,path:f}),h=K(b.body)||g?.model||null;return{id:i.randomUUID(),timestamp:new Date().toISOString(),protocol:a.protocol||"http/1.1",client:{ip:a.clientIp||"",port:a.clientPort||null,userAgent:String(a.requestHeaders["user-agent"]||""),proxyUser:a.authUser||null},provider:e,host:C(a.target.host),port:a.target.port,method:a.method,path:f,model:h,usage:g,status:a.statusCode||null,durationMs:Date.now()-a.startedAt,error:a.error?o(a.error.message||a.error):null,request:{headers:l(a.requestHeaders),...b},response:{headers:l(a.responseHeaders||{}),...d}}}a.exports={createAuditProxy:function(a={},b={}){let i={allowedHosts:[],passthroughUnknown:!0,captureBodies:!0,captureLimitBytes:2097152,verifyUpstreamTls:!0,allowedConnectPorts:[443],connectTimeoutMs:1e4,tlsHandshakeTimeoutMs:1e4,responseHeaderTimeoutMs:3e4,idleTimeoutMs:9e5,allowPlainHttp:!1,clientToolFilterEnabled:!1,allowedClientTools:[],proxyAuthEnabled:!1,proxyAuthUsers:[],clientAlpnProtocols:["http/1.1"],...a};if(!0!==i.verifyUpstreamTls)throw Error("Upstream TLS verification is mandatory in Audit Proxy mode");let j=b.certificateProvider;if("function"!=typeof j)throw Error("certificateProvider is required");let k="function"==typeof b.onAudit?b.onAudit:()=>{},l="function"==typeof b.onAuditJob?b.onAuditJob:null,m="function"==typeof b.resolveTarget?b.resolveTarget:(a,b)=>q(a,b,{allowedPorts:i.allowedConnectPorts}),n=b.upstreamCa,o=r(i.allowedClientTools),p=i.proxyAuthEnabled?u(i.proxyAuthUsers):null,w=i.proxyAuthEnabled?v():null,x=new Set,y=new Map,z=new WeakMap,A=new Set;function B(a){return!a||x.has(a)||(x.add(a),a.once?.("close",()=>x.delete(a))),a}function C(a,b){try{"function"==typeof a.destroy?a.destroy(b):"function"==typeof a.close&&a.close()}catch{}}function G(a){let b=()=>O(a);if(l){try{l(b)}catch(a){console.warn("[audit-proxy] audit enqueue failed:",a?.message||a)}return}setImmediate(()=>{Promise.resolve().then(b).then(k).catch(a=>console.warn("[audit-proxy] audit callback failed:",a?.message||a))})}function H({requestHeaders:a,method:b,path:c,target:d,requestCapture:e,responseCapture:f,responseHeaders:g,statusCode:h,startedAt:i,error:j,socket:k,protocol:l,authUser:m=null}){return{requestHeaders:N(a),method:b,path:c,target:d,requestCapture:e,responseCapture:f,responseHeaders:N(g),statusCode:h,startedAt:i,error:j,clientIp:L(k),clientPort:k?.remotePort||null,authUser:m,protocol:l}}let J="This proxy does not support WebSocket connections. Use the HTTP streaming transport instead - most clients fall back to it automatically.";function K(a,b,c,d,{statusCode:e=403,authUser:f=null}={}){let g=String(a.url||""),h=c||{host:g.includes(":")?g.slice(0,g.lastIndexOf(":")):g||"unknown",port:443},j=new I(i.captureBodies?i.captureLimitBytes:0);j.add(Buffer.from(d)),G(H({requestHeaders:a.headers,method:"CONNECT",path:"",target:h,requestCapture:new I(0),responseCapture:j,responseHeaders:{"content-type":"text/plain; charset=utf-8",connection:"close"},statusCode:e,startedAt:Date.now(),error:d,socket:b,protocol:"http/1.1",authUser:f}))}let P=Symbol("refused");async function Q(a,b){if(!p)return null;let d=L(b),e=(c,d=null)=>(M(b,"407 Proxy Authentication Required",c,['Proxy-Authenticate: Basic realm="BlueRouter Audit Proxy", charset="UTF-8"']),K(a,b,void 0,c,{statusCode:407,authUser:d}),P);if(w.isLocked(d))return e("Too many failed proxy authentication attempts");let f=a.headers["proxy-authorization"],g=await p.authenticate(f);if(g.ok)return w.recordSuccess(d),g.username;let h=null;if(f){let{lockedNow:a}=w.recordFailure(d);a&&console.log(`[audit-proxy] proxy auth lockout for ${d||"unknown"}`);try{h=c(7566).parseBasicProxyAuthorization(f)?.username||null}catch{h=null}}return e(g.reason||"Proxy authentication required",h)}function R(a,b,c){if(!c)return;let d=new I(i.captureBodies?i.captureLimitBytes:0);d.add(Buffer.from(J)),G(H({requestHeaders:a.headers,method:a.method,path:a.url,target:c,requestCapture:new I(0),responseCapture:d,responseHeaders:{"content-type":"text/plain; charset=utf-8",connection:"close"},statusCode:501,startedAt:Date.now(),error:null,socket:b,protocol:"http/1.1",authUser:b?.__auditProxyUser||null}))}async function S(a,b,{expectContinue:c=!1}={}){let d=a.socket.__auditTarget,e=a.socket.__auditProxyUser||null;if(!d){b.writeHead(502,{"content-type":"text/plain"}),b.end("Audit target is missing");return}if(function(a={}){return"string"==typeof a.upgrade&&""!==a.upgrade.trim()}(a.headers)){b.writeHead(501,{"content-type":"text/plain; charset=utf-8",connection:"close"}),b.end(J),R(a,a.socket,d);return}let h=Date.now(),j=new I(i.captureBodies?i.captureLimitBytes:0),k=new I(i.captureBodies?i.captureLimitBytes:0),l=F(a.headers,{stripInternal:!0});l.host=443===d.port?d.host:`${d.host}:${d.port}`;let o=null,p=null,q={},r=null,s=!1,t=!1,u=null,v=(b=null)=>{s||(s=!0,u&&clearTimeout(u),G(H({requestHeaders:a.headers,method:a.method,path:a.url,target:d,requestCapture:j,responseCapture:k,responseHeaders:q,statusCode:r,startedAt:h,error:b,socket:a.socket,protocol:"http/1.1",authUser:e})))};try{let e,h,s=await m(d.host,d.port);(o=f.request({hostname:d.host,port:d.port,method:a.method,path:a.url,headers:l,rejectUnauthorized:!0,servername:g.isIP(d.host)?void 0:d.host,ca:n,ALPNProtocols:["http/1.1"],lookup:s.lookup,autoSelectFamily:!0,agent:(e=`${d.host}:${d.port}`,(h=y.get(e))||(h=new f.Agent({keepAlive:!0,maxSockets:32,maxFreeSockets:8,timeout:i.idleTimeoutMs}),y.set(e,h)),h)})).on("socket",a=>{if(B(a),a.setNoDelay(!0),a.setKeepAlive(!0,3e4),a.setTimeout(i.idleTimeoutMs,()=>a.destroy(Error("Upstream idle timeout"))),a.connecting){let b=setTimeout(()=>a.destroy(Error("Upstream TLS connect timeout")),i.connectTimeoutMs+i.tlsHandshakeTimeoutMs);b.unref?.();let c=()=>clearTimeout(b);a.once("secureConnect",c),a.once("error",c),a.once("close",c)}}),o.on("continue",()=>{c&&!b.headersSent&&b.writeContinue()}),o.on("information",a=>{102===a.statusCode&&"function"==typeof b.writeProcessing&&b.writeProcessing(),103===a.statusCode&&"function"==typeof b.writeEarlyHints&&b.writeEarlyHints(a.headers||{})}),o.on("response",a=>{p=a,u&&clearTimeout(u),r=a.statusCode||502,q=N(a.headers||{});let c=F(a.headers,{stripInternal:!1});b.writeHead(r,c),b.flushHeaders?.(),a.on("data",c=>{k.add(c),b.write(c)||a.pause()}),b.on("drain",()=>a.resume()),a.on("aborted",()=>{let a=Error("Upstream response aborted");b.destroyed||b.destroy(a),v(a)}),a.on("error",a=>{b.destroyed||b.destroy(a),v(a)}),a.on("end",()=>{if(a.trailers&&Object.keys(a.trailers).length)try{b.addTrailers(F(a.trailers,{stripInternal:!1}))}catch{}t=!0,b.end(),v(null)})}),o.on("error",a=>{b.headersSent?b.destroyed||b.destroy(a):(b.writeHead(502,{"content-type":"application/json"}),b.end(JSON.stringify({error:"Verified upstream TLS request failed"})),t=!0),v(a)}),a.on("data",b=>{j.add(b),o.write(b)||a.pause()}),o.on("drain",()=>a.resume()),a.on("end",()=>{if(a.trailers&&Object.keys(a.trailers).length)try{o.addTrailers(F(a.trailers,{stripInternal:!0}))}catch{}o.end(),u=setTimeout(()=>o.destroy(Error("Upstream response header timeout")),i.responseHeaderTimeoutMs),u.unref?.()}),a.on("aborted",()=>o.destroy(Error("Client request aborted"))),a.on("error",a=>o.destroy(a)),b.on("close",()=>{t||(p?.destroy(Error("Client response closed")),o?.destroy(Error("Client response closed")),v(Error("Client response closed")))})}catch(a){b.headersSent||(b.writeHead(502,{"content-type":"application/json"}),b.end(JSON.stringify({error:"Destination validation or connection failed"})),t=!0),v(a)}}let T=d.createServer((a,b)=>{S(a,b)});async function U(a){return a.upstreamPromise||(a.upstreamPromise=(async()=>{let b=a.target,c=await m(b.host,b.port),d=B(h.connect({host:b.host,port:b.port,servername:g.isIP(b.host)?void 0:b.host,rejectUnauthorized:!0,ca:n,ALPNProtocols:["h2"],lookup:c.lookup,autoSelectFamily:!0}));d.setNoDelay(!0),d.setKeepAlive(!0,3e4);let f=setTimeout(()=>d.destroy(Error("Upstream HTTP/2 TLS connect timeout")),i.connectTimeoutMs+i.tlsHandshakeTimeoutMs);f.unref?.(),d.once("secureConnect",()=>{clearTimeout(f),"h2"!==d.alpnProtocol&&d.destroy(Error("Upstream did not negotiate HTTP/2"))}),d.once("error",()=>clearTimeout(f)),d.once("close",()=>clearTimeout(f));let j=`https://${b.host}${443===b.port?"":`:${b.port}`}`,k=e.connect(j,{createConnection:()=>d,settings:{enablePush:!1}});return A.add(k),k.setTimeout(i.idleTimeoutMs,()=>k.destroy(Error("Upstream HTTP/2 idle timeout"))),k.once("close",()=>A.delete(k)),await new Promise((a,b)=>{let c=setTimeout(()=>b(Error("Upstream HTTP/2 session timeout")),i.connectTimeoutMs+i.tlsHandshakeTimeoutMs);c.unref?.();let d=(a,b)=>{clearTimeout(c),k.removeListener("connect",e),k.removeListener("error",f),a(b)},e=()=>d(a,k),f=a=>d(b,a);k.once("connect",e),k.once("error",f)}),k})().catch(b=>{throw a.upstreamPromise=null,b})),a.upstreamPromise}async function V(a,b){let c=z.get(a.session),d=c?.target;if(!c||!d){a.respond({":status":502,"content-type":"text/plain"}),a.end("Audit target is missing");return}a.pause();let f=Date.now(),g=new I(i.captureBodies?i.captureLimitBytes:0),h=new I(i.captureBodies?i.captureLimitBytes:0),j={},k=null,l=!1,m=!1,n=null,o=null,p=null,q=(e=null)=>{l||(l=!0,G(H({requestHeaders:b,method:b[":method"]||"GET",path:b[":path"]||"/",target:d,requestCapture:g,responseCapture:h,responseHeaders:j,statusCode:k,startedAt:f,error:e,socket:a.session.socket,protocol:"h2",authUser:c.authUser||null})))};try{(n=(await U(c)).request(function(a,b){let c=F(a,{stripInternal:!0}),d={":method":a[":method"]||"GET",":path":a[":path"]||"/",":scheme":"https",":authority":443===b.port?b.host:`${b.host}:${b.port}`};for(let[a,b]of Object.entries(c))a.startsWith(":")||(d[a.toLowerCase()]=b);return d}(b,d),{endStream:!1,waitForTrailers:!0})).setTimeout(i.idleTimeoutMs,()=>n.close(e.constants.NGHTTP2_CANCEL)),a.setTimeout(i.idleTimeoutMs,()=>a.close(e.constants.NGHTTP2_CANCEL)),n.on("response",b=>{j=N(b),k=Number(b[":status"]||502),a.respond(function(a){let b=F(a,{stripInternal:!1}),c={":status":Number(a[":status"]||502)};for(let[a,d]of Object.entries(b))a.startsWith(":")||(c[a.toLowerCase()]=d);return c}(b),{waitForTrailers:!0})}),n.on("trailers",a=>{p=F(a,{stripInternal:!1})}),a.on("wantTrailers",()=>{try{a.sendTrailers(p||{})}catch{}}),a.on("trailers",a=>{o=F(a,{stripInternal:!0})}),n.on("wantTrailers",()=>{try{n.sendTrailers(o||{})}catch{}}),a.on("data",b=>{g.add(b),n.write(b)||a.pause()}),n.on("drain",()=>a.resume()),a.on("end",()=>n.end()),n.on("data",b=>{h.add(b),a.write(b)||n.pause()}),a.on("drain",()=>n.resume()),n.on("end",()=>{m=!0,a.end(),q(null)}),n.on("aborted",()=>{let b=Error("Upstream HTTP/2 stream aborted");a.close(e.constants.NGHTTP2_INTERNAL_ERROR),q(b)}),n.on("error",b=>{a.closed||a.close(e.constants.NGHTTP2_INTERNAL_ERROR),q(b)}),a.on("aborted",()=>{n.close(e.constants.NGHTTP2_CANCEL),q(Error("Client HTTP/2 stream aborted"))}),a.on("error",a=>{n.close(e.constants.NGHTTP2_CANCEL),q(a)}),a.on("close",()=>{m||!n||n.closed||(n.close(e.constants.NGHTTP2_CANCEL),q(Error("Client HTTP/2 stream closed")))}),a.resume()}catch(b){a.headersSent||a.closed||a.respond({":status":502,"content-type":"application/json"}),a.closed||a.end(JSON.stringify({error:"Verified upstream HTTP/2 request failed"})),q(b)}}T.on("checkContinue",(a,b)=>{S(a,b,{expectContinue:!0})}),T.on("upgrade",(a,b)=>{M(b,"501 Not Implemented",J),R(a,b,b.__auditTarget)}),T.on("clientError",(a,b)=>C(b)),T.headersTimeout=i.responseHeaderTimeoutMs,T.requestTimeout=0,T.keepAliveTimeout=i.idleTimeoutMs;let W=e.createServer({settings:{enablePush:!1}});W.on("session",a=>{let b={target:a.socket.__auditTarget,authUser:a.socket.__auditProxyUser||null,upstreamPromise:null};z.set(a,b),a.setTimeout(i.idleTimeoutMs,()=>a.destroy(Error("Client HTTP/2 idle timeout"))),a.once("close",()=>{Promise.resolve(b.upstreamPromise).then(a=>a?.close()).catch(()=>{})})}),W.on("stream",(a,b)=>{V(a,b)}),W.on("sessionError",a=>{console.warn("[audit-proxy] HTTP/2 client session error:",a?.message||a)});let X=d.createServer((a,b)=>{b.writeHead(403,{"content-type":"text/plain; charset=utf-8",connection:"close"}),b.end("Audit Proxy accepts HTTPS CONNECT traffic only")});return X.on("connect",(a,b,c)=>{(async()=>{let d,e;try{d=D(a.url,443)}catch(e){let c=e.message||"Invalid CONNECT authority";M(b,"400 Bad Request",c),K(a,b,d,c,{statusCode:400});return}let f=await Q(a,b);if(f===P)return;try{await m(d.host,d.port)}catch(e){let c=e.message||"Destination is not allowed";M(b,"403 Forbidden",c),K(a,b,d,c,{authUser:f});return}if(i.clientToolFilterEnabled&&s(a.headers["user-agent"],o)){let c=`Client tool is not allowed to use this proxy (${t(a.headers["user-agent"])})`;M(b,"403 Forbidden",c),K(a,b,d,c);return}if(!E(d.host,i.allowedHosts)){if(!i.passthroughUnknown){let c="Host is not in the audit allowlist";M(b,"403 Forbidden",c),K(a,b,d,c);return}let e=!1;try{let a=await m(d.host,d.port),f=B(g.connect({host:d.host,port:d.port,lookup:a.lookup,autoSelectFamily:!0})),h=setTimeout(()=>f.destroy(Error("TCP passthrough connect timeout")),i.connectTimeoutMs);h.unref?.(),f.setNoDelay(!0),f.setKeepAlive(!0,3e4),f.setTimeout(i.idleTimeoutMs,()=>f.destroy(Error("TCP passthrough idle timeout"))),f.once("connect",()=>{clearTimeout(h),e=!0,b.write("HTTP/1.1 200 Connection Established\r\nProxy-Agent: BlueRouter-Audit\r\n\r\n"),c?.length&&f.write(c),f.pipe(b),b.pipe(f)}),f.once("error",()=>{clearTimeout(h),e?C(b):M(b,"502 Bad Gateway","TCP passthrough failed")}),b.once("error",()=>C(f)),b.once("close",()=>C(f))}catch(a){M(b,"502 Bad Gateway",a.message||"TCP passthrough failed")}return}try{if(e=j(d.host),!e?.key||!e?.cert)throw Error("Certificate provider returned no certificate")}catch(a){M(b,"500 Internal Server Error",`Cannot issue audit certificate: ${a.message}`);return}b.write("HTTP/1.1 200 Connection Established\r\nProxy-Agent: BlueRouter-Audit\r\n\r\n"),c?.length&&b.unshift(c);let k=B(new h.TLSSocket(b,{isServer:!0,key:e.key,cert:e.cert,ALPNProtocols:i.clientAlpnProtocols}));k.__auditTarget=d,k.__auditProxyUser=f,k.setNoDelay(!0),k.setKeepAlive(!0,3e4),k.setTimeout(i.idleTimeoutMs,()=>k.destroy(Error("Client TLS idle timeout")));let l=setTimeout(()=>k.destroy(Error("Client TLS handshake timeout")),i.tlsHandshakeTimeoutMs);l.unref?.();let n=!1,p=()=>{n||(n=!0,clearTimeout(l),"h2"===k.alpnProtocol?W.emit("connection",k):T.emit("connection",k))};k.once("secure",p),k.once("secureConnect",p),k.once("error",()=>{clearTimeout(l),C(k)}),k.once("close",()=>clearTimeout(l))})().catch(a=>M(b,"500 Internal Server Error",a.message||"Audit CONNECT failed"))}),X.prependListener("connection",a=>{B(a),a.setNoDelay(!0),a.setKeepAlive(!0,3e4)}),X.on("upgrade",(a,b)=>M(b,"501 Not Implemented",J)),X.on("clientError",(a,b)=>C(b)),X.headersTimeout=i.responseHeaderTimeoutMs,X.requestTimeout=0,X.keepAliveTimeout=i.idleTimeoutMs,X.forceCloseAll=()=>{for(let a of A)try{a.destroy()}catch{}for(let a of y.values())try{a.destroy()}catch{}for(let a of[...x])C(a)},X.getActiveConnectionCount=()=>x.size,X.auditConfig=i,X.auditCapabilities={http1:!0,http2:i.clientAlpnProtocols.includes("h2"),proxyAuth:!0===i.proxyAuthEnabled,plainHttp:!1,publicConnectPorts:[...i.allowedConnectPorts]},X},hostMatches:E,parseAuthority:D,stripHopByHop:F,CaptureBuffer:I,detectProvider:J,extractModel:K,decodeCapturedBuffer:G}},46293:a=>{"use strict";a.exports=require("sql.js")},48350:a=>{"use strict";let b=new Set(["authorization","proxy-authorization","x-api-key","api-key","cookie","set-cookie","x-auth-token","x-access-token","cf-access-jwt-assertion"]),c=/(^|[_-])(access[_-]?token|refresh[_-]?token|id[_-]?token|token|api[_-]?key|apikey|password|passwd|secret|authorization|cookie)($|[_-])/i;function d(a){let c=String(a||"").toLowerCase();return b.has(c)||/token|secret|password|credential/i.test(c)}function e(a,b=new WeakSet){if(null==a||"object"!=typeof a)return a;if(b.has(a))return"[CIRCULAR]";if(b.add(a),Array.isArray(a))return a.map(a=>e(a,b));let d={};for(let[f,g]of Object.entries(a))d[f]=c.test(f)?"[REDACTED]":e(g,b);return d}function f(a){if(null==a)return a;let b=String(a);return(b=(b=b.replace(/\bBearer\s+[A-Za-z0-9._~+\/-]+=*/gi,"Bearer [REDACTED]")).replace(/\b(sk-ant-[A-Za-z0-9_-]{8,}|sk-[A-Za-z0-9_-]{8,})\b/g,"[REDACTED]")).replace(/("(?:access_token|refresh_token|id_token|api_key|apikey|password|secret|authorization)"\s*:\s*")([^"]+)(")/gi,"$1[REDACTED]$3")}a.exports={redactHeaders:function(a={}){let b={};for(let[c,e]of Object.entries(a||{}))b[c]=d(c)?"[REDACTED]":e;return b},redactObject:e,redactBodyText:function(a,b=""){let c=String(a||"");if(/application\/(?:[^;]+\+)?json/i.test(b)||/^[\s\r\n]*[\[{]/.test(c))try{let a=JSON.parse(c);return JSON.stringify(e(a))}catch{}return f(c)},scrubString:f,redactUrlPath:function(a){let b=String(a||"");try{let a=new URL(b,"https://audit.invalid");for(let b of[...a.searchParams.keys()])if(/token|secret|key|password|credential|authorization|^code$/i.test(b))a.searchParams.set(b,"[REDACTED]");else{let c=a.searchParams.get(b);c&&a.searchParams.set(b,f(c))}return`${a.pathname}${a.search}`}catch{return f(b)}},containsLikelySecret:function(a){let b="string"==typeof a?a:JSON.stringify(a);return/Bearer\s+(?!\[REDACTED\])\S+|sk-ant-[A-Za-z0-9_-]{8,}|\bsk-[A-Za-z0-9_-]{8,}/i.test(b||"")},shouldRedactHeader:d}},49083:(a,b,c)=>{"use strict";let{createAuditProxy:d}=c(45372),{loadConfig:e,saveConfig:f,validateConfig:g,CONFIG_PATH:h,AUDIT_LOG_PATH:i,AUDIT_LOG_DIR:j}=c(43096),{hashProxyPassword:k,isValidUsername:l,normalizeProxyUsers:m,redactProxyAuthUsers:n,PASSWORD_MAX_BYTES:o,PASSWORD_MIN_BYTES:p}=c(7566),{clientIpMatches:q,normalizeIp:r}=c(5565),{enqueueAuditJob:s,readRecent:t,clearAudit:u,pruneExpired:v,startAuditMaintenance:w,stopAuditMaintenance:x,flushAuditQueue:y,getAuditStoreStats:z}=c(90173),{ensureAuditRootCA:A,createAuditCertificateProvider:B,validateRootCaPair:C}=c(85074),{readRootCAInfo:D}=c(8578),{runSelfTest:E}=c(85252);function F(){return globalThis.__blueRouterAuditProxyRuntime||(globalThis.__blueRouterAuditProxyRuntime={server:null,certificateProvider:null,startedAt:null,lastError:null,autostartPromise:null,lifecycle:Promise.resolve()}),globalThis.__blueRouterAuditProxyRuntime}function G(a){let b=F(),c=b.lifecycle.then(a,a);return b.lifecycle=c.catch(()=>{}),c}async function H(a,b=1500){if(!a)return;let c=Math.max(0,Number(b)||0);await new Promise(b=>{let d=!1,e=()=>{d||(d=!0,b())};try{a.listening?a.close(e):e()}catch{e()}let f=setTimeout(()=>{try{a.forceCloseAll?.()}catch{}},c);f.unref?.();let g=setTimeout(e,c+2e3);g.unref?.()});try{a.forceCloseAll?.()}catch{}}function I(a){let b=e();return{...a,clientIpFilterEnabled:!0===b.clientIpFilterEnabled,allowedClientIps:[...b.allowedClientIps||[]],proxyAuthEnabled:!0===b.proxyAuthEnabled,proxyAuthUsers:[...b.proxyAuthUsers||[]]}}async function J(a=null){let b=F();if(b.server?.listening)return O();let c=a?f({...I(a),enabled:!1}):e();await A(),await v(),w();let g=B({maxEntries:128});g.prewarm(c.allowedHosts);let h=d(c,{certificateProvider:g,onAuditJob:s});!function(a,b){if(!b.clientIpFilterEnabled)return;let c=b.allowedClientIps||[];a.prependListener("connection",a=>{let b=r(a?.remoteAddress||"");if(!q(b,c)){console.log(`[audit-proxy] denied client IP ${b||"unknown"}`);try{a.destroy()}catch{}}})}(h,c);try{let a=await new Promise((a,b)=>{let d=a=>{h.removeListener("listening",e),b(a)},e=()=>{h.removeListener("error",d),a(h.address())};h.once("error",d),h.once("listening",e),h.listen(c.port,c.bindHost)});return b.server=h,b.certificateProvider=g,b.startedAt=new Date().toISOString(),b.lastError=null,f({...c,enabled:!0}),{...await O(),address:a}}catch(a){b.lastError=a.message||String(a);try{h.forceCloseAll?.()}catch{}try{h.close()}catch{}throw g.clear?.(),a}}async function K({persist:a=!0}={}){let b=F(),c=b.server,d=e();return b.server=null,b.startedAt=null,await H(c,d.shutdownGraceMs),b.certificateProvider?.clear?.(),b.certificateProvider=null,await y(3e3),x(),a&&f({...d,enabled:!1}),O()}async function L(a=null){return await K({persist:!1}),a&&f({...I(a),enabled:!1}),J()}function M(a=null){return G(()=>J(a))}async function N(){let a=F(),b=e();return b.enabled?a.server?.listening?{started:!1,reason:"already-running",status:await O()}:(a.autostartPromise||(a.autostartPromise=(async()=>{try{let a=await M();return console.log(`[audit-proxy] autostarted on ${b.bindHost}:${b.port}`),{started:!0,status:a}}catch(b){return a.lastError=b?.message||String(b),console.log("[audit-proxy] autostart failed:",a.lastError),{started:!1,error:a.lastError}}finally{a.autostartPromise=null}})()),a.autostartPromise):{started:!1,reason:"disabled"}}async function O(){let a=F(),b=e(),c=!!a.server?.listening,d=D();try{let a=C();d={...d,validated:!0===a.exists,expiringSoon:!0===a.expiringSoon,autoRotation:!1}}catch(a){d={...d,validated:!1,autoRotation:!1,error:a.message||String(a)}}return{running:c,listening:c,startedAt:a.startedAt,lastError:a.lastError,address:c?a.server.address():null,activeConnections:c&&a.server.getActiveConnectionCount?.()||0,capabilities:c?a.server.auditCapabilities:{http1:!0,http2:!1,plainHttp:!1,publicConnectPorts:[443]},security:{clientIpFilterEnabled:b.clientIpFilterEnabled,clientToolFilterEnabled:!0===b.clientToolFilterEnabled,allowedClientToolCount:(b.allowedClientTools||[]).length,lanExposedWithoutIpFilter:!["127.0.0.1","::1","localhost"].includes(String(b.bindHost||"").trim().toLowerCase())&&!b.clientIpFilterEnabled,privateDestinationsBlocked:!0,plainHttpBlocked:!0,upstreamTlsVerified:!0},certificateCache:a.certificateProvider?.stats?.()||{entries:0},auditStore:z(),configPath:h,auditLogPath:i,auditLogDirectory:j,rootCA:d}}async function P(a=50){let b=e(),[c,d]=await Promise.all([O(),t(a)]);return{config:Q(b),status:c,events:d}}function Q(a){return a?{...a,proxyAuthUsers:n(a.proxyAuthUsers)}:a}a.exports={startProxy:M,ensureAuditProxyAutostart:N,stopProxy:function(a={}){return G(()=>K(a))},restartProxy:function(a=null){return G(()=>L(a))},getStatus:O,getSnapshot:P,updateConfig:function(a){let b=F();if(b.server?.listening)throw Error("Stop or restart the Audit Proxy before changing its configuration");return Q(f(g(I(a))))},updateClientProxyHost:function(a){return Q(f(g({...e(),clientProxyHost:String(a||"").trim()})))},updateClientIpFilter:function({enabled:a,allowedClientIps:b}={}){return G(async()=>{let c=F(),d=g({...e(),clientIpFilterEnabled:!0===a,allowedClientIps:b});if(c.server?.listening){await K({persist:!1}),f({...d,enabled:!1});let a=await J();return{config:Q(e()),status:a,restarted:!0}}return{config:Q(f(d)),status:await O(),restarted:!1}})},updateProxyAuth:function({enabled:a,users:b}={}){return G(async()=>{let c=F(),d=e(),h=new Map(m(d.proxyAuthUsers).map(a=>[a.username.toLowerCase(),a])),i=new Set,j=[];for(let a of Array.isArray(b)?b:[]){let b=String(a?.username||"").trim();if(!l(b))throw Error(`Invalid username: ${b||"(empty)"}`);let c=b.toLowerCase();if(i.has(c))throw Error(`Duplicate username: ${b}`);i.add(c);let d="string"==typeof a?.password?a.password:"";if(d){let a=Buffer.byteLength(d,"utf8");if(a<p)throw Error(`Password for ${b} must be at least ${p} characters`);if(a>o)throw Error(`Password for ${b} must be at most ${o} bytes`);j.push({username:b,passwordHash:await k(d)});continue}let e=h.get(c);if(!e)throw Error(`Account ${b} requires a password`);j.push({username:b,passwordHash:e.passwordHash})}let n=g({...d,proxyAuthEnabled:!0===a,proxyAuthUsers:j});if(c.server?.listening){await K({persist:!1}),f({...n,enabled:!1});let a=await J();return{config:Q(e()),status:a,restarted:!0}}return{config:Q(f(n)),status:await O(),restarted:!1}})},clearAudit:u,runSelfTest:E}},51455:a=>{"use strict";a.exports=require("node:fs/promises")},53053:a=>{"use strict";a.exports=require("node:diagnostics_channel")},55511:a=>{"use strict";a.exports=require("crypto")},55591:a=>{"use strict";a.exports=require("https")},63033:a=>{"use strict";a.exports=require("next/dist/server/app-render/work-unit-async-storage.external.js")},64939:a=>{"use strict";a.exports=import("pg")},66136:a=>{"use strict";a.exports=require("timers")},73024:a=>{"use strict";a.exports=require("node:fs")},73496:a=>{"use strict";a.exports=require("http2")},74075:a=>{"use strict";a.exports=require("zlib")},76760:a=>{"use strict";a.exports=require("node:path")},77598:a=>{"use strict";a.exports=require("node:crypto")},78864:(a,b,c)=>{"use strict";let d=c(14985).promises,e=c(91645),{normalizeIp:f,clientIpMatches:g}=c(5565),h=new Map,i=Object.freeze(["0.0.0.0/8","10.0.0.0/8","100.64.0.0/10","127.0.0.0/8","169.254.0.0/16","172.16.0.0/12","192.0.0.0/24","192.0.2.0/24","192.88.99.0/24","192.168.0.0/16","198.18.0.0/15","198.51.100.0/24","203.0.113.0/24","224.0.0.0/4","240.0.0.0/4","::/96","::1/128","100::/64","2001:2::/48","2001:db8::/32","fc00::/7","fe80::/10","ff00::/8"]),j=Object.freeze([".localhost",".local",".internal",".lan",".home.arpa"]);function k(a){return String(a||"").trim().replace(/^\[|\]$/g,"").replace(/\.$/,"").toLowerCase()}function l(a){let b=k(a);return!(!(!b||"localhost"===b||j.some(a=>b.endsWith(a)))&&(e.isIP(b)||b.includes(".")))}function m(a){let b=f(a);return!!e.isIP(b)&&!g(b,i)}function n(a){let b=[...new Set((Array.isArray(a)?a:[a]).map(a=>Number(a)).filter(a=>Number.isInteger(a)&&a>=1&&a<=65535))];return b.length?b:[443]}function o(a){let b=[...a?.addresses||[]];return function(c,d,e){let f=d,g=e;"function"==typeof d&&(g=d,f={});let h="number"==typeof f?f:Number(f?.family||0);if("object"==typeof f&&f?.all===!0){let c=4===h||6===h?b.filter(a=>a.family===h):b;if(!c.length){let b=Error(`No validated public address for ${a.host}`);b.code="ENOTFOUND",g(b);return}g(null,c.map(({address:a,family:b})=>({address:a,family:b})));return}let i=function(a,b=0){let c=Number(b||0);return 4===c||6===c?a.find(a=>a.family===c)||null:a.find(a=>4===a.family)||a[0]||null}(b,h);if(!i){let b=Error(`No validated public address for ${a.host}`);b.code="ENOTFOUND",g(b);return}g(null,i.address,i.family)}}async function p(a,b,c={}){let g=k(a),i=Number(b||443),j=n(c.allowedPorts||[443]);if(!g)throw Error("Destination host is empty");if(!Number.isInteger(i)||!j.includes(i))throw Error(`CONNECT destination port ${i||"unknown"} is not allowed`);if(l(g))throw Error(`Private or local destination hostname is not allowed: ${g}`);let q=e.isIP(f(g));if(q){let a=f(g);if(!m(a))throw Error(`Private or reserved destination address is not allowed: ${a}`);let b={host:g,port:i,addresses:[{address:a,family:q}]};return{...b,lookup:o(b)}}let r=Date.now(),s=h.get(g);if(!s||s.expiresAt<=r){let a=await d.lookup(g,{all:!0,verbatim:!0}),b=[],c=new Set;for(let d of a||[]){let a=f(d.address),g=e.isIP(a);if(!g||!m(a))continue;let h=`${g}:${a}`;c.has(h)||(c.add(h),b.push({address:a,family:g}))}if(!b.length)throw Error(`Destination did not resolve to a public address: ${g}`);s={addresses:b,expiresAt:r+6e4},h.set(g,s)}let t={host:g,port:i,addresses:[...s.addresses]};return{...t,lookup:o(t)}}a.exports={BLOCKED_ADDRESS_RANGES:i,normalizeTargetHost:k,normalizeAllowedPorts:n,isBlockedHostname:l,isPublicAddress:m,createPinnedLookup:o,resolvePublicTarget:p,clearDnsPolicyCache:function(){h.clear()}}},79428:a=>{"use strict";a.exports=require("buffer")},79646:a=>{"use strict";a.exports=require("child_process")},79748:a=>{"use strict";a.exports=require("fs/promises")},80099:a=>{"use strict";a.exports=require("node:sqlite")},81370:function(a,b,c){var d,e;"u">typeof globalThis||"u">typeof self&&self,e=function(a,b){"use strict";Object.defineProperty(a,"__esModule",{value:!0}),a.compare=l,a.compareSync=k,a.decodeBase64=G,a.default=void 0,a.encodeBase64=F,a.genSalt=g,a.genSaltSync=f,a.getRounds=m,a.getSalt=n,a.hash=i,a.hashSync=h,a.setRandomFallback=e,a.truncates=o,b=(c=b)&&c.__esModule?c:{default:c};var c,d=null;function e(a){d=a}function f(a,c){if("number"!=typeof(a=a||w))throw Error("Illegal arguments: "+typeof a+", "+typeof c);a<4?a=4:a>31&&(a=31);var e=[];return e.push("$2b$"),a<10&&e.push("0"),e.push(a.toString()),e.push("$"),e.push(t(function(a){try{return crypto.getRandomValues(new Uint8Array(a))}catch{}try{return b.default.randomBytes(a)}catch{}if(!d)throw Error("Neither WebCryptoAPI nor a crypto module is available. Use bcrypt.setRandomFallback to set an alternative");return d(a)}(v),v)),e.join("")}function g(a,b,c){if("function"==typeof b&&(c=b,b=void 0),"function"==typeof a&&(c=a,a=void 0),void 0===a)a=w;else if("number"!=typeof a)throw Error("illegal arguments: "+typeof a);function d(b){p(function(){try{b(null,f(a))}catch(a){b(a)}})}if(!c)return new Promise(function(a,b){d(function(c,d){c?b(c):a(d)})});if("function"!=typeof c)throw Error("Illegal callback: "+typeof c);d(c)}function h(a,b){if(void 0===b&&(b=w),"number"==typeof b&&(b=f(b)),"string"!=typeof a||"string"!=typeof b)throw Error("Illegal arguments: "+typeof a+", "+typeof b);return E(a,b)}function i(a,b,c,d){function e(c){"string"==typeof a&&"number"==typeof b?g(b,function(b,e){E(a,e,c,d)}):"string"==typeof a&&"string"==typeof b?E(a,b,c,d):p(c.bind(this,Error("Illegal arguments: "+typeof a+", "+typeof b)))}if(!c)return new Promise(function(a,b){e(function(c,d){c?b(c):a(d)})});if("function"!=typeof c)throw Error("Illegal callback: "+typeof c);e(c)}function j(a,b){for(var c=a.length^b.length,d=0;d<a.length;++d)c|=a.charCodeAt(d)^b.charCodeAt(d);return 0===c}function k(a,b){if("string"!=typeof a||"string"!=typeof b)throw Error("Illegal arguments: "+typeof a+", "+typeof b);return 60===b.length&&j(h(a,b.substring(0,b.length-31)),b)}function l(a,b,c,d){function e(c){"string"!=typeof a||"string"!=typeof b?p(c.bind(this,Error("Illegal arguments: "+typeof a+", "+typeof b))):60!==b.length?p(c.bind(this,null,!1)):i(a,b.substring(0,29),function(a,d){a?c(a):c(null,j(d,b))},d)}if(!c)return new Promise(function(a,b){e(function(c,d){c?b(c):a(d)})});if("function"!=typeof c)throw Error("Illegal callback: "+typeof c);e(c)}function m(a){if("string"!=typeof a)throw Error("Illegal arguments: "+typeof a);return parseInt(a.split("$")[2],10)}function n(a){if("string"!=typeof a)throw Error("Illegal arguments: "+typeof a);if(60!==a.length)throw Error("Illegal hash length: "+a.length+" != 60");return a.substring(0,29)}function o(a){if("string"!=typeof a)throw Error("Illegal arguments: "+typeof a);return q(a)>72}var p="function"==typeof setImmediate?setImmediate:"object"==typeof scheduler&&"function"==typeof scheduler.postTask?scheduler.postTask.bind(scheduler):setTimeout;function q(a){for(var b=0,c=0,d=0;d<a.length;++d)(c=a.charCodeAt(d))<128?b+=1:c<2048?b+=2:(64512&c)==55296&&(64512&a.charCodeAt(d+1))==56320?(++d,b+=4):b+=3;return b}var r="./ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789".split(""),s=[-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,0,1,54,55,56,57,58,59,60,61,62,63,-1,-1,-1,-1,-1,-1,-1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,-1,-1,-1,-1,-1,-1,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,-1,-1,-1,-1,-1];function t(a,b){var c,d,e=0,f=[];if(b<=0||b>a.length)throw Error("Illegal len: "+b);for(;e<b;){if(c=255&a[e++],f.push(r[c>>2&63]),c=(3&c)<<4,e>=b||(c|=(d=255&a[e++])>>4&15,f.push(r[63&c]),c=(15&d)<<2,e>=b)){f.push(r[63&c]);break}c|=(d=255&a[e++])>>6&3,f.push(r[63&c]),f.push(r[63&d])}return f.join("")}function u(a,b){var c,d,e,f,g,h=0,i=a.length,j=0,k=[];if(b<=0)throw Error("Illegal len: "+b);for(;h<i-1&&j<b&&(c=(g=a.charCodeAt(h++))<s.length?s[g]:-1,d=(g=a.charCodeAt(h++))<s.length?s[g]:-1,-1!=c&&-1!=d)&&(f=c<<2>>>0|(48&d)>>4,k.push(String.fromCharCode(f)),!(++j>=b||h>=i||-1==(e=(g=a.charCodeAt(h++))<s.length?s[g]:-1)||(f=(15&d)<<4>>>0|(60&e)>>2,k.push(String.fromCharCode(f)),++j>=b||h>=i)));){;f=(3&e)<<6>>>0|((g=a.charCodeAt(h++))<s.length?s[g]:-1),k.push(String.fromCharCode(f)),++j}var l=[];for(h=0;h<j;h++)l.push(k[h].charCodeAt(0));return l}var v=16,w=10,x=[0x243f6a88,0x85a308d3,0x13198a2e,0x3707344,0xa4093822,0x299f31d0,0x82efa98,0xec4e6c89,0x452821e6,0x38d01377,0xbe5466cf,0x34e90c6c,0xc0ac29b7,0xc97c50dd,0x3f84d5b5,0xb5470917,0x9216d5d9,0x8979fb1b],y=[0xd1310ba6,0x98dfb5ac,0x2ffd72db,0xd01adfb7,0xb8e1afed,0x6a267e96,0xba7c9045,0xf12c7f99,0x24a19947,0xb3916cf7,0x801f2e2,0x858efc16,0x636920d8,0x71574e69,0xa458fea3,0xf4933d7e,0xd95748f,0x728eb658,0x718bcd58,0x82154aee,0x7b54a41d,0xc25a59b5,0x9c30d539,0x2af26013,0xc5d1b023,0x286085f0,0xca417918,0xb8db38ef,0x8e79dcb0,0x603a180e,0x6c9e0e8b,0xb01e8a3e,0xd71577c1,0xbd314b27,0x78af2fda,0x55605c60,0xe65525f3,0xaa55ab94,0x57489862,0x63e81440,0x55ca396a,0x2aab10b6,0xb4cc5c34,0x1141e8ce,0xa15486af,0x7c72e993,0xb3ee1411,0x636fbc2a,0x2ba9c55d,0x741831f6,0xce5c3e16,0x9b87931e,0xafd6ba33,0x6c24cf5c,0x7a325381,0x28958677,0x3b8f4898,0x6b4bb9af,0xc4bfe81b,0x66282193,0x61d809cc,0xfb21a991,0x487cac60,0x5dec8032,0xef845d5d,0xe98575b1,0xdc262302,0xeb651b88,0x23893e81,0xd396acc5,0xf6d6ff3,0x83f44239,0x2e0b4482,0xa4842004,0x69c8f04a,0x9e1f9b5e,0x21c66842,0xf6e96c9a,0x670c9c61,0xabd388f0,0x6a51a0d2,0xd8542f68,0x960fa728,0xab5133a3,0x6eef0b6c,0x137a3be4,0xba3bf050,0x7efb2a98,0xa1f1651d,0x39af0176,0x66ca593e,0x82430e88,0x8cee8619,0x456f9fb4,0x7d84a5c3,0x3b8b5ebe,0xe06f75d8,0x85c12073,0x401a449f,0x56c16aa6,0x4ed3aa62,0x363f7706,0x1bfedf72,0x429b023d,0x37d0d724,0xd00a1248,0xdb0fead3,0x49f1c09b,0x75372c9,0x80991b7b,0x25d479d8,0xf6e8def7,0xe3fe501a,0xb6794c3b,0x976ce0bd,0x4c006ba,0xc1a94fb6,0x409f60c4,0x5e5c9ec2,0x196a2463,0x68fb6faf,0x3e6c53b5,0x1339b2eb,0x3b52ec6f,0x6dfc511f,0x9b30952c,0xcc814544,0xaf5ebd09,0xbee3d004,0xde334afd,0x660f2807,0x192e4bb3,0xc0cba857,0x45c8740f,0xd20b5f39,0xb9d3fbdb,0x5579c0bd,0x1a60320a,0xd6a100c6,0x402c7279,0x679f25fe,0xfb1fa3cc,0x8ea5e9f8,0xdb3222f8,0x3c7516df,0xfd616b15,0x2f501ec8,0xad0552ab,0x323db5fa,0xfd238760,0x53317b48,0x3e00df82,0x9e5c57bb,0xca6f8ca0,0x1a87562e,0xdf1769db,0xd542a8f6,0x287effc3,0xac6732c6,0x8c4f5573,0x695b27b0,0xbbca58c8,0xe1ffa35d,0xb8f011a0,0x10fa3d98,0xfd2183b8,0x4afcb56c,0x2dd1d35b,0x9a53e479,0xb6f84565,0xd28e49bc,0x4bfb9790,0xe1ddf2da,0xa4cb7e33,0x62fb1341,0xcee4c6e8,0xef20cada,0x36774c01,0xd07e9efe,0x2bf11fb4,0x95dbda4d,0xae909198,0xeaad8e71,0x6b93d5a0,0xd08ed1d0,0xafc725e0,0x8e3c5b2f,0x8e7594b7,0x8ff6e2fb,0xf2122b64,0x8888b812,0x900df01c,0x4fad5ea0,0x688fc31c,0xd1cff191,0xb3a8c1ad,0x2f2f2218,0xbe0e1777,0xea752dfe,0x8b021fa1,0xe5a0cc0f,0xb56f74e8,0x18acf3d6,0xce89e299,0xb4a84fe0,0xfd13e0b7,0x7cc43b81,0xd2ada8d9,0x165fa266,0x80957705,0x93cc7314,0x211a1477,0xe6ad2065,0x77b5fa86,0xc75442f5,0xfb9d35cf,0xebcdaf0c,0x7b3e89a0,0xd6411bd3,0xae1e7e49,2428461,0x2071b35e,0x226800bb,0x57b8e0af,0x2464369b,0xf009b91e,0x5563911d,0x59dfa6aa,0x78c14389,0xd95a537f,0x207d5ba2,0x2e5b9c5,0x83260376,0x6295cfa9,0x11c81968,0x4e734a41,0xb3472dca,0x7b14a94a,0x1b510052,0x9a532915,0xd60f573f,0xbc9bc6e4,0x2b60a476,0x81e67400,0x8ba6fb5,0x571be91f,0xf296ec6b,0x2a0dd915,0xb6636521,0xe7b9f9b6,0xff34052e,0xc5855664,0x53b02d5d,0xa99f8fa1,0x8ba4799,0x6e85076a,0x4b7a70e9,0xb5b32944,0xdb75092e,0xc4192623,290971e4,0x49a7df7d,0x9cee60b8,0x8fedb266,0xecaa8c71,0x699a17ff,0x5664526c,0xc2b19ee1,0x193602a5,0x75094c29,0xa0591340,0xe4183a3e,0x3f54989a,0x5b429d65,0x6b8fe4d6,0x99f73fd6,0xa1d29c07,0xefe830f5,0x4d2d38e6,0xf0255dc1,0x4cdd2086,0x8470eb26,0x6382e9c6,0x21ecc5e,0x9686b3f,0x3ebaefc9,0x3c971814,0x6b6a70a1,0x687f3584,0x52a0e286,0xb79c5305,0xaa500737,0x3e07841c,0x7fdeae5c,0x8e7d44ec,0x5716f2b8,0xb03ada37,0xf0500c0d,0xf01c1f04,0x200b3ff,0xae0cf51a,0x3cb574b2,0x25837a58,0xdc0921bd,0xd19113f9,0x7ca92ff6,0x94324773,0x22f54701,0x3ae5e581,0x37c2dadc,0xc8b57634,0x9af3dda7,0xa9446146,0xfd0030e,0xecc8c73e,0xa4751e41,0xe238cd99,0x3bea0e2f,0x3280bba1,0x183eb331,0x4e548b38,0x4f6db908,0x6f420d03,0xf60a04bf,0x2cb81290,0x24977c79,0x5679b072,0xbcaf89af,0xde9a771f,0xd9930810,0xb38bae12,0xdccf3f2e,0x5512721f,0x2e6b7124,0x501adde6,0x9f84cd87,0x7a584718,0x7408da17,0xbc9f9abc,0xe94b7d8c,0xec7aec3a,0xdb851dfa,0x63094366,0xc464c3d2,0xef1c1847,0x3215d908,0xdd433b37,0x24c2ba16,0x12a14d43,0x2a65c451,0x50940002,0x133ae4dd,0x71dff89e,0x10314e55,0x81ac77d6,0x5f11199b,0x43556f1,0xd7a3c76b,0x3c11183b,0x5924a509,0xf28fe6ed,0x97f1fbfa,0x9ebabf2c,0x1e153c6e,0x86e34570,0xeae96fb1,0x860e5e0a,0x5a3e2ab3,0x771fe71c,0x4e3d06fa,0x2965dcb9,0x99e71d0f,0x803e89d6,0x5266c825,0x2e4cc978,0x9c10b36a,0xc6150eba,0x94e2ea78,0xa5fc3c53,0x1e0a2df4,0xf2f74ea7,0x361d2b3d,0x1939260f,0x19c27960,0x5223a708,0xf71312b6,0xebadfe6e,0xeac31f66,0xe3bc4595,0xa67bc883,0xb17f37d1,0x18cff28,0xc332ddef,0xbe6c5aa5,0x65582185,0x68ab9802,0xeecea50f,0xdb2f953b,0x2aef7dad,0x5b6e2f84,0x1521b628,0x29076170,0xecdd4775,0x619f1510,0x13cca830,0xeb61bd96,0x334fe1e,0xaa0363cf,0xb5735c90,0x4c70a239,0xd59e9e0b,0xcbaade14,0xeecc86bc,0x60622ca7,0x9cab5cab,0xb2f3846e,0x648b1eaf,0x19bdf0ca,0xa02369b9,0x655abb50,0x40685a32,0x3c2ab4b3,0x319ee9d5,0xc021b8f7,0x9b540b19,0x875fa099,0x95f7997e,0x623d7da8,0xf837889a,0x97e32d77,0x11ed935f,0x16681281,0xe358829,0xc7e61fd6,0x96dedfa1,0x7858ba99,0x57f584a5,0x1b227263,0x9b83c3ff,0x1ac24696,0xcdb30aeb,0x532e3054,0x8fd948e4,0x6dbc3128,0x58ebf2ef,0x34c6ffea,0xfe28ed61,0xee7c3c73,0x5d4a14d9,0xe864b7e3,0x42105d14,0x203e13e0,0x45eee2b6,0xa3aaabea,0xdb6c4f15,0xfacb4fd0,0xc742f442,0xef6abbb5,0x654f3b1d,0x41cd2105,0xd81e799e,0x86854dc7,0xe44b476a,0x3d816250,0xcf62a1f2,0x5b8d2646,0xfc8883a0,0xc1c7b6a3,0x7f1524c3,0x69cb7492,0x47848a0b,0x5692b285,0x95bbf00,0xad19489d,0x1462b174,0x23820e00,0x58428d2a,0xc55f5ea,0x1dadf43e,0x233f7061,0x3372f092,0x8d937e41,0xd65fecf1,0x6c223bdb,0x7cde3759,0xcbee7460,0x4085f2a7,0xce77326e,0xa6078084,0x19f8509e,0xe8efd855,0x61d99735,0xa969a7aa,0xc50c06c2,0x5a04abfc,0x800bcadc,0x9e447a2e,0xc3453484,0xfdd56705,0xe1e9ec9,0xdb73dbd3,0x105588cd,0x675fda79,0xe3674340,0xc5c43465,0x713e38d8,0x3d28f89e,0xf16dff20,0x153e21e7,0x8fb03d4a,0xe6e39f2b,0xdb83adf7,0xe93d5a68,0x948140f7,0xf64c261c,0x94692934,0x411520f7,0x7602d4f7,0xbcf46b2e,0xd4a20068,0xd4082471,0x3320f46a,0x43b7d4b7,0x500061af,0x1e39f62e,0x97244546,0x14214f74,0xbf8b8840,0x4d95fc1d,0x96b591af,0x70f4ddd3,0x66a02f45,0xbfbc09ec,0x3bd9785,0x7fac6dd0,0x31cb8504,0x96eb27b3,0x55fd3941,0xda2547e6,0xabca0a9a,0x28507825,0x530429f4,0xa2c86da,0xe9b66dfb,0x68dc1462,0xd7486900,0x680ec0a4,0x27a18dee,0x4f3ffea2,0xe887ad8c,0xb58ce006,0x7af4d6b6,0xaace1e7c,0xd3375fec,0xce78a399,0x406b2a42,0x20fe9e35,0xd9f385b9,0xee39d7ab,0x3b124e8b,0x1dc9faf7,0x4b6d1856,0x26a36631,0xeae397b2,0x3a6efa74,0xdd5b4332,0x6841e7f7,0xca7820fb,0xfb0af54e,0xd8feb397,0x454056ac,0xba489527,0x55533a3a,0x20838d87,0xfe6ba9b7,0xd096954b,0x55a867bc,0xa1159a58,0xcca92963,0x99e1db33,0xa62a4a56,0x3f3125f9,0x5ef47e1c,0x9029317c,0xfdf8e802,0x4272f70,0x80bb155c,0x5282ce3,0x95c11548,0xe4c66d22,0x48c1133f,0xc70f86dc,0x7f9c9ee,0x41041f0f,0x404779a4,0x5d886e17,0x325f51eb,0xd59bc0d1,0xf2bcc18f,0x41113564,0x257b7834,0x602a9c60,0xdff8e8a3,0x1f636c1b,0xe12b4c2,0x2e1329e,0xaf664fd1,0xcad18115,0x6b2395e0,0x333e92e1,0x3b240b62,0xeebeb922,0x85b2a20e,0xe6ba0d99,0xde720c8c,0x2da2f728,0xd0127845,0x95b794fd,0x647d0862,0xe7ccf5f0,0x5449a36f,0x877d48fa,0xc39dfd27,0xf33e8d1e,0xa476341,0x992eff74,0x3a6f6eab,0xf4f8fd37,0xa812dc60,0xa1ebddf8,0x991be14c,0xdb6e6b0d,0xc67b5510,0x6d672c37,0x2765d43b,0xdcd0e804,0xf1290dc7,0xcc00ffa3,0xb5390f92,0x690fed0b,0x667b9ffb,0xcedb7d9c,0xa091cf0b,0xd9155ea3,0xbb132f88,0x515bad24,0x7b9479bf,0x763bd6eb,0x37392eb3,0xcc115979,0x8026e297,0xf42e312d,0x6842ada7,0xc66a2b3b,0x12754ccc,0x782ef11c,0x6a124237,0xb79251e7,0x6a1bbe6,0x4bfb6350,0x1a6b1018,0x11caedfa,0x3d25bdd8,0xe2e1c3c9,0x44421659,0xa121386,0xd90cec6e,0xd5abea2a,0x64af674e,0xda86a85f,0xbebfe988,0x64e4c3fe,0x9dbc8057,0xf0f7c086,0x60787bf8,0x6003604d,0xd1fd8346,0xf6381fb0,0x7745ae04,0xd736fccc,0x83426b33,0xf01eab71,0xb0804187,0x3c005e5f,0x77a057be,0xbde8ae24,0x55464299,0xbf582e61,0x4e58f48f,0xf2ddfda2,0xf474ef38,0x8789bdc2,0x5366f9c3,0xc8b38e74,0xb475f255,0x46fcd9b9,0x7aeb2661,0x8b1ddf84,0x846a0e79,0x915f95e2,0x466e598e,0x20b45770,0x8cd55591,0xc902de4c,0xb90bace1,0xbb8205d0,0x11a86248,0x7574a99e,0xb77f19b6,0xe0a9dc09,0x662d09a1,0xc4324633,0xe85a1f02,0x9f0be8c,0x4a99a025,0x1d6efe10,0x1ab93d1d,0xba5a4df,0xa186f20f,0x2868f169,0xdcb7da83,0x573906fe,0xa1e2ce9b,0x4fcd7f52,0x50115e01,0xa70683fa,0xa002b5c4,0xde6d027,0x9af88c27,0x773f8641,0xc3604c06,0x61a806b5,0xf0177a28,0xc0f586e0,6314154,0x30dc7d62,0x11e69ed7,0x2338ea63,0x53c2dd94,0xc2c21634,0xbbcbee56,0x90bcb6de,0xebfc7da1,0xce591d76,0x6f05e409,0x4b7c0188,0x39720a3d,0x7c927c24,0x86e3725f,0x724d9db9,0x1ac15bb4,0xd39eb8fc,0xed545578,0x8fca5b5,0xd83d7cd3,0x4dad0fc4,0x1e50ef5e,0xb161e6f8,0xa28514d9,0x6c51133c,0x6fd5c7e7,0x56e14ec4,0x362abfce,0xddc6c837,0xd79a3234,0x92638212,0x670efa8e,0x406000e0,0x3a39ce37,0xd3faf5cf,0xabc27737,0x5ac52d1b,0x5cb0679e,0x4fa33742,0xd3822740,0x99bc9bbe,0xd5118e9d,0xbf0f7315,0xd62d1c7e,0xc700c47b,0xb78c1b6b,0x21a19045,0xb26eb1be,0x6a366eb4,0x5748ab2f,0xbc946e79,0xc6a376d2,0x6549c2c8,0x530ff8ee,0x468dde7d,0xd5730a1d,0x4cd04dc6,0x2939bbdb,0xa9ba4650,0xac9526e8,0xbe5ee304,0xa1fad5f0,0x6a2d519a,0x63ef8ce2,0x9a86ee22,0xc089c2b8,0x43242ef6,0xa51e03aa,0x9cf2d0a4,0x83c061ba,0x9be96a4d,0x8fe51550,0xba645bd6,0x2826a2f9,0xa73a3ae1,0x4ba99586,0xef5562e9,0xc72fefd3,0xf752f7da,0x3f046f69,0x77fa0a59,0x80e4a915,0x87b08601,0x9b09e6ad,0x3b3ee593,0xe990fd5a,0x9e34d797,0x2cf0b7d9,0x22b8b51,0x96d5ac3a,0x17da67d,0xd1cf3ed6,0x7c7d2d28,0x1f9f25cf,0xadf2b89b,0x5ad6b472,0x5a88f54c,0xe029ac71,0xe019a5e6,0x47b0acfd,0xed93fa9b,0xe8d3c48d,0x283b57cc,0xf8d56629,0x79132e28,0x785f0191,0xed756055,0xf7960e44,0xe3d35e8c,0x15056dd4,0x88f46dba,0x3a16125,0x564f0bd,0xc3eb9e15,0x3c9057a2,0x97271aec,0xa93a072a,0x1b3f6d9b,0x1e6321f5,0xf59c66fb,0x26dcf319,0x7533d928,0xb155fdf5,0x3563482,0x8aba3cbb,0x28517711,0xc20ad9f8,0xabcc5167,0xccad925f,0x4de81751,0x3830dc8e,0x379d5862,0x9320f991,0xea7a90c2,0xfb3e7bce,0x5121ce64,0x774fbe32,0xa8b6e37e,0xc3293d46,0x48de5369,0x6413e680,0xa2ae0810,0xdd6db224,0x69852dfd,0x9072166,0xb39a460a,0x6445c0dd,0x586cdecf,0x1c20c8ae,0x5bbef7dd,0x1b588d40,0xccd2017f,0x6bb4e3bb,0xdda26a7e,0x3a59ff45,0x3e350a44,0xbcb4cdd5,0x72eacea8,0xfa6484bb,0x8d6612ae,0xbf3c6f47,0xd29be463,0x542f5d9e,0xaec2771b,0xf64e6370,0x740e0d8d,0xe75b1357,0xf8721671,0xaf537d5d,0x4040cb08,0x4eb4e2cc,0x34d2466a,0x115af84,3786409e3,0x95983a1d,0x6b89fb4,0xce6ea048,0x6f3f3b82,0x3520ab82,0x11a1d4b,0x277227f8,0x611560b1,0xe7933fdc,0xbb3a792b,0x344525bd,0xa08839e1,0x51ce794b,0x2f32c9b7,0xa01fbac9,0xe01cc87e,0xbcc7d1f6,0xcf0111c3,0xa1e8aac7,0x1a908749,0xd44fbd9a,0xd0dadecb,0xd50ada38,0x339c32a,0xc6913667,0x8df9317c,0xe0b12b4f,0xf79e59b7,0x43f5bb3a,0xf2d519ff,0x27d9459c,0xbf97222c,0x15e6fc2a,0xf91fc71,0x9b941525,0xfae59361,0xceb69ceb,0xc2a86459,0x12baa8d1,0xb6c1075e,0xe3056a0c,0x10d25065,0xcb03a442,0xe0ec6e0e,0x1698db3b,0x4c98a0be,0x3278e964,0x9f1f9532,0xe0d392df,0xd3a0342b,0x8971f21e,0x1b0a7441,0x4ba3348c,0xc5be7120,0xc37632d8,0xdf359f8d,0x9b992f2e,0xe60b6f47,0xfe3f11d,0xe54cda54,0x1edad891,0xce6279cf,0xcd3e7e6f,0x1618b166,0xfd2c1d05,0x848fd2c5,0xf6fb2299,0xf523f357,0xa6327623,0x93a83531,0x56cccd02,0xacf08162,0x5a75ebb5,0x6e163697,0x88d273cc,0xde966292,0x81b949d0,0x4c50901b,0x71c65614,0xe6c6c7bd,0x327a140a,0x45e1d006,0xc3f27b9a,0xc9aa53fd,0x62a80f00,0xbb25bfe2,0x35bdd2f6,0x71126905,0xb2040222,0xb6cbcf7c,0xcd769c2b,0x53113ec0,0x1640e3d3,0x38abbd60,0x2547adf0,0xba38209c,0xf746ce76,0x77afa1c5,0x20756060,0x85cbfe4e,0x8ae88dd8,0x7aaaf9b0,0x4cf9aa7e,0x1948c25c,0x2fb8a8c,0x1c36ae4,0xd6ebe1f9,0x90d4f869,0xa65cdea0,0x3f09252d,0xc208e69f,0xb74e6132,0xce77e25b,0x578fdfe3,0x3ac372e6],z=[0x4f727068,0x65616e42,0x65686f6c,0x64657253,0x63727944,0x6f756274];function A(a,b,c,d){var e=a[b],f=a[b+1];return e^=c[0],f^=(d[e>>>24]+d[256|e>>16&255]^d[512|e>>8&255])+d[768|255&e]^c[1],e^=(d[f>>>24]+d[256|f>>16&255]^d[512|f>>8&255])+d[768|255&f]^c[2],f^=(d[e>>>24]+d[256|e>>16&255]^d[512|e>>8&255])+d[768|255&e]^c[3],e^=(d[f>>>24]+d[256|f>>16&255]^d[512|f>>8&255])+d[768|255&f]^c[4],f^=(d[e>>>24]+d[256|e>>16&255]^d[512|e>>8&255])+d[768|255&e]^c[5],e^=(d[f>>>24]+d[256|f>>16&255]^d[512|f>>8&255])+d[768|255&f]^c[6],f^=(d[e>>>24]+d[256|e>>16&255]^d[512|e>>8&255])+d[768|255&e]^c[7],e^=(d[f>>>24]+d[256|f>>16&255]^d[512|f>>8&255])+d[768|255&f]^c[8],f^=(d[e>>>24]+d[256|e>>16&255]^d[512|e>>8&255])+d[768|255&e]^c[9],e^=(d[f>>>24]+d[256|f>>16&255]^d[512|f>>8&255])+d[768|255&f]^c[10],f^=(d[e>>>24]+d[256|e>>16&255]^d[512|e>>8&255])+d[768|255&e]^c[11],e^=(d[f>>>24]+d[256|f>>16&255]^d[512|f>>8&255])+d[768|255&f]^c[12],f^=(d[e>>>24]+d[256|e>>16&255]^d[512|e>>8&255])+d[768|255&e]^c[13],e^=(d[f>>>24]+d[256|f>>16&255]^d[512|f>>8&255])+d[768|255&f]^c[14],f^=(d[e>>>24]+d[256|e>>16&255]^d[512|e>>8&255])+d[768|255&e]^c[15],e^=(d[f>>>24]+d[256|f>>16&255]^d[512|f>>8&255])+d[768|255&f]^c[16],a[b]=f^c[17],a[b+1]=e,a}function B(a,b){for(var c=0,d=0;c<4;++c)d=d<<8|255&a[b],b=(b+1)%a.length;return{key:d,offp:b}}function C(a,b,c){for(var d,e=0,f=[0,0],g=b.length,h=c.length,i=0;i<g;i++)e=(d=B(a,e)).offp,b[i]=b[i]^d.key;for(i=0;i<g;i+=2)f=A(f,0,b,c),b[i]=f[0],b[i+1]=f[1];for(i=0;i<h;i+=2)f=A(f,0,b,c),c[i]=f[0],c[i+1]=f[1]}function D(a,b,c,d,e){var f,g,h=z.slice(),i=h.length;if(c<4||c>31){if(g=Error("Illegal number of rounds (4-31): "+c),d)return void p(d.bind(this,g));throw g}if(b.length!==v){if(g=Error("Illegal salt length: "+b.length+" != "+v),d)return void p(d.bind(this,g));throw g}c=1<<c>>>0;var j,k,l,m=0;function n(){if(e&&e(m/c),m<c)for(var f=Date.now();m<c&&(m+=1,C(a,j,k),C(b,j,k),!(Date.now()-f>100)););else{for(m=0;m<64;m++)for(l=0;l<i>>1;l++)A(h,l<<1,j,k);var g=[];for(m=0;m<i;m++)g.push((h[m]>>24&255)>>>0),g.push((h[m]>>16&255)>>>0),g.push((h[m]>>8&255)>>>0),g.push((255&h[m])>>>0);return d?void d(null,g):g}d&&p(n)}if("function"==typeof Int32Array?(j=new Int32Array(x),k=new Int32Array(y)):(j=x.slice(),k=y.slice()),!function(a,b,c,d){for(var e,f=0,g=[0,0],h=c.length,i=d.length,j=0;j<h;j++)f=(e=B(b,f)).offp,c[j]=c[j]^e.key;for(j=0,f=0;j<h;j+=2)f=(e=B(a,f)).offp,g[0]^=e.key,f=(e=B(a,f)).offp,g[1]^=e.key,g=A(g,0,c,d),c[j]=g[0],c[j+1]=g[1];for(j=0;j<i;j+=2)f=(e=B(a,f)).offp,g[0]^=e.key,f=(e=B(a,f)).offp,g[1]^=e.key,g=A(g,0,c,d),d[j]=g[0],d[j+1]=g[1]}(b,a,j,k),void 0!==d)n();else for(;;)if(void 0!==(f=n()))return f||[]}function E(a,b,c,d){if("string"!=typeof a||"string"!=typeof b){if(e=Error("Invalid string / salt: Not a string"),c)return void p(c.bind(this,e));throw e}if("$"!==b.charAt(0)||"2"!==b.charAt(1)){if(e=Error("Invalid salt version: "+b.substring(0,2)),c)return void p(c.bind(this,e));throw e}if("$"===b.charAt(2))f="\0",g=3;else{if("a"!==(f=b.charAt(2))&&"b"!==f&&"y"!==f||"$"!==b.charAt(3)){if(e=Error("Invalid salt revision: "+b.substring(2,4)),c)return void p(c.bind(this,e));throw e}g=4}if(b.charAt(g+2)>"$"){if(e=Error("Missing salt rounds"),c)return void p(c.bind(this,e));throw e}var e,f,g,h=10*parseInt(b.substring(g,g+1),10)+parseInt(b.substring(g+1,g+2),10),i=b.substring(g+3,g+25),j=function(a){for(var b,c,d=0,e=Array(q(a)),f=0,g=a.length;f<g;++f)(b=a.charCodeAt(f))<128?e[d++]=b:(b<2048?e[d++]=b>>6|192:((64512&b)==55296&&(64512&(c=a.charCodeAt(f+1)))==56320?(b=65536+((1023&b)<<10)+(1023&c),++f,e[d++]=b>>18|240,e[d++]=b>>12&63|128):e[d++]=b>>12|224,e[d++]=b>>6&63|128),e[d++]=63&b|128);return e}(a+=f>="a"?"\0":""),k=u(i,v);function l(a){var b=[];return b.push("$2"),f>="a"&&b.push(f),b.push("$"),h<10&&b.push("0"),b.push(h.toString()),b.push("$"),b.push(t(k,k.length)),b.push(t(a,4*z.length-1)),b.join("")}if(void 0===c)return l(D(j,k,h));D(j,k,h,function(a,b){a?c(a,null):c(null,l(b))},d)}function F(a,b){return t(a,b)}function G(a,b){return u(a,b)}a.default={setRandomFallback:e,genSaltSync:f,genSalt:g,hashSync:h,hash:i,compareSync:k,compare:l,getRounds:m,getSalt:n,truncates:o,encodeBase64:F,decodeBase64:G}},void 0===(d=(function(a){var b={};return e(b,a),b.default||b}).apply(b,[c(55511)]))||(a.exports=d)},81630:a=>{"use strict";a.exports=require("http")},81787:a=>{"use strict";a.exports=require("bun:sqlite")},85252:(a,b,c)=>{"use strict";let d=c(73496),e=c(91645),f=c(34631),g=c(74075),h=c(55511),i=c(15296),{createAuditProxy:j,CaptureBuffer:k}=c(45372),{containsLikelySecret:l}=c(48350),{clientIpMatches:m,normalizeAllowedClientIps:n}=c(5565),{normalizeAllowedTools:o,clientToolMatches:p,shouldRefuseClientTool:q}=c(98586),{createProxyAuthenticator:r,createProxyAuthLimiter:s,hashProxyPassword:t,parseBasicProxyAuthorization:u}=c(7566),{isPublicAddress:v}=c(78864);function w(a){return h.createHash("sha256").update(a).digest("hex")}function x(a){let b=i.pki.rsa.generateKeyPair(2048),c=i.pki.createCertificate();c.publicKey=b.publicKey,c.serialNumber=String(Date.now()),c.validity.notBefore=new Date(Date.now()-6e4),c.validity.notAfter=new Date(Date.now()+864e5);let d=[{name:"commonName",value:a}];return c.setSubject(d),c.setIssuer(d),c.setExtensions([{name:"basicConstraints",cA:!0,critical:!0},{name:"keyUsage",keyCertSign:!0,cRLSign:!0,critical:!0}]),c.sign(b.privateKey,i.md.sha256.create()),{cert:c,keys:b,certPem:i.pki.certificateToPem(c)}}function y(a,b){let c=i.pki.rsa.generateKeyPair(2048),d=i.pki.createCertificate();return d.publicKey=c.publicKey,d.serialNumber=`${Date.now()}${Math.floor(1e3*Math.random())}`,d.validity.notBefore=new Date(Date.now()-6e4),d.validity.notAfter=new Date(Date.now()+864e5),d.setSubject([{name:"commonName",value:b}]),d.setIssuer(a.cert.subject.attributes),d.setExtensions([{name:"basicConstraints",cA:!1},{name:"keyUsage",digitalSignature:!0,keyEncipherment:!0},{name:"extKeyUsage",serverAuth:!0},{name:"subjectAltName",altNames:[{type:2,value:b}]}]),d.sign(a.keys.privateKey,i.md.sha256.create()),{cert:i.pki.certificateToPem(d),key:i.pki.privateKeyToPem(c.privateKey)}}function z(a,b="127.0.0.1"){return new Promise((c,d)=>{a.once("error",d),a.listen(0,b,()=>{a.removeListener("error",d),c(a.address())})})}function A(a){return new Promise(b=>{if(!a)return b();try{a.forceCloseAll?.()}catch{}if(!a.listening)return b();a.close(()=>b()),setTimeout(b,1e3).unref?.()})}function B(a,b){let c="127.0.0.1";return Promise.resolve({host:a,port:b,addresses:[{address:c,family:4}],lookup:(a,b,d)=>{let e=b,f=d;"function"==typeof b&&(f=b,e={}),e?.all?f(null,[{address:c,family:4}]):f(null,c,4)}})}function C(a,b,c="",d=""){return new Promise((f,g)=>{let h=e.connect(a,"127.0.0.1"),i=Buffer.alloc(0),j=setTimeout(()=>g(Error("CONNECT timeout")),7e3);h.once("error",g),h.once("connect",()=>{let a=c?`User-Agent: ${c}\r
+`:"";h.write(`CONNECT ${b} HTTP/1.1\r
 Host: ${b}\r
-${a}Proxy-Connection: keep-alive\r
+${a}${d}Proxy-Connection: keep-alive\r
 \r
-`)});let j=a=>{let b=(h=Buffer.concat([h,a])).indexOf("\r\n\r\n");if(b<0)return;g.removeListener("data",j),clearTimeout(i);let c=h.subarray(0,b).toString("utf8"),e=h.subarray(b+4);if(!/^HTTP\/1\.1 200\b/.test(c)){g.destroy(),f(Error(`CONNECT failed: ${c.split("\r\n")[0]}`));return}e.length&&g.unshift(e),d(g)};g.on("data",j)})}function z({socket:a,ca:b,servername:c,port:d,body:e,path:g,alpnProtocols:h=["http/1.1"],onAlpn:i}){return new Promise((j,k)=>{let l=f.connect({socket:a,ca:b,servername:c,rejectUnauthorized:!0,ALPNProtocols:h}),m=[],n=setTimeout(()=>k(Error("TLS HTTP/1.1 test timeout")),1e4);l.once("error",k),l.once("secureConnect",()=>{i?.(l.alpnProtocol),l.write(`POST ${g} HTTP/1.1\r
+`)});let k=a=>{let b=(i=Buffer.concat([i,a])).indexOf("\r\n\r\n");if(b<0)return;h.removeListener("data",k),clearTimeout(j);let c=i.subarray(0,b).toString("utf8"),d=i.subarray(b+4);if(!/^HTTP\/1\.1 200\b/.test(c)){h.destroy(),g(Error(`CONNECT failed: ${c.split("\r\n")[0]}`));return}d.length&&h.unshift(d),f(h)};h.on("data",k)})}function D(a,b,c=""){return new Promise((d,f)=>{let g=e.connect(a,"127.0.0.1"),h=Buffer.alloc(0),i=setTimeout(()=>f(Error("CONNECT raw timeout")),7e3);g.once("error",f),g.once("connect",()=>{g.write(`CONNECT ${b} HTTP/1.1\r
+Host: ${b}\r
+${c}\r
+`)}),g.on("data",a=>{let b=(h=Buffer.concat([h,a])).indexOf("\r\n\r\n");if(b<0)return;clearTimeout(i);let c=h.subarray(0,b).toString("utf8");try{g.destroy()}catch{}d(c)}),g.on("close",()=>{clearTimeout(i),d(h.toString("utf8"))})})}function E(a,b){return`Proxy-Authorization: Basic ${Buffer.from(`${a}:${b}`).toString("base64")}\r
+`}function F({socket:a,ca:b,servername:c,port:d,body:e,path:g,alpnProtocols:h=["http/1.1"],onAlpn:i}){return new Promise((j,k)=>{let l=f.connect({socket:a,ca:b,servername:c,rejectUnauthorized:!0,ALPNProtocols:h}),m=[],n=setTimeout(()=>k(Error("TLS HTTP/1.1 test timeout")),1e4);l.once("error",k),l.once("secureConnect",()=>{i?.(l.alpnProtocol),l.write(`POST ${g} HTTP/1.1\r
 Host: localhost:${d}\r
 Authorization: Bearer test-secret-authorization-123456789\r
 x-api-key: sk-test-supersecret-123456789\r
@@ -18,7 +23,7 @@ Content-Type: application/json\r
 Content-Length: ${e.length}\r
 Connection: close\r
 \r
-`),l.write(e)}),l.on("data",a=>m.push(Buffer.from(a))),l.on("end",()=>{clearTimeout(n),j(function(a){let b=a.indexOf("\r\n\r\n");if(b<0)throw Error("Invalid HTTP/1.1 response");let c=a.subarray(0,b).toString("latin1"),d={};for(let a of c.split("\r\n").slice(1)){let b=a.indexOf(":");b>0&&(d[a.slice(0,b).toLowerCase()]=a.slice(b+1).trim())}let e=Number(d["content-length"]||0);return{head:c,headers:d,body:a.subarray(b+4,e?b+4+e:void 0)}}(Buffer.concat(m)))})})}a.exports={runSelfTest:async function(){let a=Date.now(),b=[],c=(a,c,d="")=>b.push({name:a,ok:!!c,detail:d}),i=n(["172.16.253.3","10.20.30.0/24","2001:db8::/64"]);c("Client IP exact allowlist match",m("::ffff:172.16.253.3",i)),c("Client IPv4 CIDR allowlist match",m("10.20.30.77",i)),c("Client IPv6 CIDR allowlist match",m("2001:db8::1234",i)),c("Client IP outside allowlist denied",!m("10.20.31.77",i)),c("Public destination accepted",r("1.1.1.1"));let A=o(["claude-code","codex"]);c("Preset expands to the tool's User-Agent patterns",p("claude-cli/2.0.1 (external, cli)",A)),c("Codex User-Agent matches its preset",p("codex_cli_rs/0.147.0 (Windows 10.0.26200; x86_64)",A)),c("A browser is refused",q("Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/131.0",A)),c("An allowed tool is not refused",!q("claude-cli/2.1.241 (external, cli)",A)),c("A CONNECT without a User-Agent is let through",!q("",A)),c("A free-text entry is matched verbatim",p("my-internal-agent/3",o(["my-internal-agent"]))),c("Private destination rejected",!r("127.0.0.1")&&!r("169.254.169.254"));let B=JSON.stringify({type:"message",content:[{type:"text",text:"brotli audit ok"}]}),C=new k(1048576);C.add(g.brotliCompressSync(Buffer.from(B)));let D=await C.finish("application/json","br");c("Brotli audit body decoded",!0===D.decoded&&D.body.includes("brotli audit ok")&&!D.decodeError);let E=Buffer.from(`TRUNCATED-GZIP-PREFIX-OK${h.randomBytes(8192).toString("hex")}`),F=g.gzipSync(E),G=new k(Math.floor(.7*F.length));G.add(F);let H=await G.finish("application/json","gzip");c("Truncated gzip audit body partially decoded",!0===H.decodePartial&&!0===H.truncated&&H.body.includes("TRUNCATED-GZIP-PREFIX-OK"),H.decodeError||"");let I=t("BlueRouter Audit Self Test Upstream CA"),J=u(I,"localhost"),K=t("BlueRouter Audit Self Test Proxy CA"),L=u(K,"localhost"),M=Buffer.from(JSON.stringify({type:"message",content:[{type:"text",text:"compressed response preserved"}]})),N=g.brotliCompressSync(M),O=[],P=`event: message_start
+`),l.write(e)}),l.on("data",a=>m.push(Buffer.from(a))),l.on("end",()=>{clearTimeout(n),j(function(a){let b=a.indexOf("\r\n\r\n");if(b<0)throw Error("Invalid HTTP/1.1 response");let c=a.subarray(0,b).toString("latin1"),d={};for(let a of c.split("\r\n").slice(1)){let b=a.indexOf(":");b>0&&(d[a.slice(0,b).toLowerCase()]=a.slice(b+1).trim())}let e=Number(d["content-length"]||0);return{head:c,headers:d,body:a.subarray(b+4,e?b+4+e:void 0)}}(Buffer.concat(m)))})})}a.exports={runSelfTest:async function(){let a=Date.now(),b=[],c=(a,c,d="")=>b.push({name:a,ok:!!c,detail:d}),i=n(["172.16.253.3","10.20.30.0/24","2001:db8::/64"]);c("Client IP exact allowlist match",m("::ffff:172.16.253.3",i)),c("Client IPv4 CIDR allowlist match",m("10.20.30.77",i)),c("Client IPv6 CIDR allowlist match",m("2001:db8::1234",i)),c("Client IP outside allowlist denied",!m("10.20.31.77",i)),c("Public destination accepted",v("1.1.1.1"));let r=o(["claude-code","codex"]);c("Preset expands to the tool's User-Agent patterns",p("claude-cli/2.0.1 (external, cli)",r)),c("Codex User-Agent matches its preset",p("codex_cli_rs/0.147.0 (Windows 10.0.26200; x86_64)",r)),c("A browser is refused",q("Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/131.0",r)),c("An allowed tool is not refused",!q("claude-cli/2.1.241 (external, cli)",r)),c("A CONNECT without a User-Agent is let through",!q("",r)),c("A free-text entry is matched verbatim",p("my-internal-agent/3",o(["my-internal-agent"]))),c("Private destination rejected",!v("127.0.0.1")&&!v("169.254.169.254"));let s=JSON.stringify({type:"message",content:[{type:"text",text:"brotli audit ok"}]}),u=new k(1048576);u.add(g.brotliCompressSync(Buffer.from(s)));let G=await u.finish("application/json","br");c("Brotli audit body decoded",!0===G.decoded&&G.body.includes("brotli audit ok")&&!G.decodeError);let H=Buffer.from(`TRUNCATED-GZIP-PREFIX-OK${h.randomBytes(8192).toString("hex")}`),I=g.gzipSync(H),J=new k(Math.floor(.7*I.length));J.add(I);let K=await J.finish("application/json","gzip");c("Truncated gzip audit body partially decoded",!0===K.decodePartial&&!0===K.truncated&&K.body.includes("TRUNCATED-GZIP-PREFIX-OK"),K.decodeError||"");let L=x("BlueRouter Audit Self Test Upstream CA"),M=y(L,"localhost"),N=x("BlueRouter Audit Self Test Proxy CA"),O=y(N,"localhost"),P=Buffer.from(JSON.stringify({type:"message",content:[{type:"text",text:"compressed response preserved"}]})),Q=g.brotliCompressSync(P),R=[],S=`event: message_start
 data: ${JSON.stringify({type:"message_start",message:{id:"msg_selftest",type:"message",role:"assistant",model:"audit-self-test-stream-model",content:[],usage:{input_tokens:11,cache_creation_input_tokens:22,cache_read_input_tokens:33,output_tokens:1}}})}
 
 event: content_block_delta
@@ -29,7 +34,7 @@ data: ${JSON.stringify({type:"message_delta",delta:{stop_reason:"end_turn"},usag
 
 event: message_stop
 data: ${JSON.stringify({type:"message_stop"})}
-`,Q=g.gzipSync(Buffer.from(P,"utf8")),R=d.createSecureServer({key:J.key,cert:J.cert,allowHTTP1:!0});R.on("request",(a,b)=>{let c=[];a.on("data",a=>c.push(Buffer.from(a))),a.on("end",()=>{if(O.push({protocol:2===a.httpVersionMajor?"h2":"http/1.1",path:a.url,authorization:a.headers.authorization,apiKey:a.headers["x-api-key"],internalHeader:a.headers["x-9r-source-tool"],body:Buffer.concat(c)}),String(a.url||"").includes("stream=1")){b.writeHead(200,{"content-type":"text/event-stream","content-encoding":"gzip","content-length":String(Q.length)}),b.end(Q);return}b.writeHead(200,{"content-type":"application/json","content-encoding":"br","content-length":String(N.length)}),b.end(N)})});let S=[],T=null,U=null;try{var V;let a=await v(R);T=j({allowedHosts:["localhost"],passthroughUnknown:!1,captureBodies:!0,captureLimitBytes:1048576,verifyUpstreamTls:!0,allowedConnectPorts:[a.port],connectTimeoutMs:5e3,tlsHandshakeTimeoutMs:5e3,responseHeaderTimeoutMs:5e3,idleTimeoutMs:3e4},{certificateProvider:()=>L,upstreamCa:I.certPem,resolveTarget:x,onAudit:a=>S.push(a)});let b=await v(T),d=await (V=b.port,new Promise((a,b)=>{let c=e.connect(V,"127.0.0.1"),d=[],f=setTimeout(()=>b(Error("Plain HTTP rejection timeout")),5e3);c.once("connect",()=>c.end("GET http://example.com/ HTTP/1.1\r\nHost: example.com\r\nConnection: close\r\n\r\n")),c.on("data",a=>d.push(Buffer.from(a))),c.once("error",b),c.once("end",()=>{clearTimeout(f),a(Buffer.concat(d).toString("utf8"))})}));c("Plain HTTP forward proxy is disabled",d.startsWith("HTTP/1.1 403"));let g="";try{await y(b.port,`blocked.invalid:${a.port}`)}catch(a){g=a.message||String(a)}c("CONNECT to a non-allowlisted host is refused",g.includes("403"),g),await new Promise(a=>setTimeout(a,100));let i=S.find(a=>"CONNECT"===a.method&&"blocked.invalid"===a.host);c("Refused CONNECT is audited with the blocked host",!!i,i?"":"no CONNECT event recorded"),c("Refused CONNECT records why it was blocked",/allowlist/i.test(i?.error||""),i?.error||"");let k=j({allowedHosts:["localhost"],passthroughUnknown:!1,captureBodies:!0,captureLimitBytes:1048576,verifyUpstreamTls:!0,allowedConnectPorts:[a.port],connectTimeoutMs:5e3,tlsHandshakeTimeoutMs:5e3,responseHeaderTimeoutMs:5e3,idleTimeoutMs:3e4,clientToolFilterEnabled:!0,allowedClientTools:["claude-code"]},{certificateProvider:()=>L,upstreamCa:I.certPem,resolveTarget:x,onAudit:a=>S.push(a)}),m=await v(k),n="";try{(await y(m.port,`localhost:${a.port}`,"claude-cli/2.0.1 (external, cli)")).destroy()}catch(a){n=a.message||String(a)}c("Allowed tool still opens a tunnel",""===n,n);let o="";try{await y(m.port,`localhost:${a.port}`,"Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/131.0")}catch(a){o=a.message||String(a)}c("Browser is turned away by the tool filter",o.includes("403"),o);let p="";try{(await y(m.port,`localhost:${a.port}`)).destroy()}catch(a){p=a.message||String(a)}c("A client sending no User-Agent still connects",""===p,p),await new Promise(a=>setTimeout(a,100));let q=S.find(a=>/Client tool is not allowed/i.test(a.error||""));c("Refused tool is audited with the User-Agent that was rejected",/Chrome|no User-Agent/i.test(q?.error||""),q?.error||""),await w(k);let r=Buffer.from(JSON.stringify({model:"audit-self-test-h1",messages:[{role:"user",content:"hello h1 ✓"}]})),t="/v1/messages?beta=true&encoded=%2F",u=await y(b.port,`localhost:${a.port}`),A=await z({socket:u,ca:K.certPem,servername:"localhost",port:a.port,body:r,path:t});c("HTTP/1.1 CONNECT and TLS succeeded",A.head.startsWith("HTTP/1.1 200")),c("HTTP/1.1 compressed response bytes preserved",s(A.body)===s(N));let B=Buffer.from(JSON.stringify({model:"audit-self-test-h2-downgrade",messages:[{role:"user",content:"hello downgrade ✓"}]})),C="/v1/messages?beta=true&protocol=h2-preferred",D=await y(b.port,`localhost:${a.port}`),E=null,F=await z({socket:D,ca:K.certPem,servername:"localhost",port:a.port,body:B,path:C,alpnProtocols:["h2","http/1.1"],onAlpn:a=>{E=a}});c("h2-preferring client is downgraded to HTTP/1.1","http/1.1"===E,`negotiated ${E||"none"}`),c("Downgraded client still gets a response",F.head.startsWith("HTTP/1.1 200")),c("Downgraded compressed response bytes preserved",s(F.body)===s(N)),c("HTTP/2 is not advertised while the h2 path is unfixed",T.auditCapabilities?.http2===!1);let G=Buffer.from(JSON.stringify({model:"audit-self-test-stream-model",messages:[{role:"user",content:"x".repeat(1052672)}]})),H=await y(b.port,`localhost:${a.port}`),J=await z({socket:H,ca:K.certPem,servername:"localhost",port:a.port,body:G,path:"/v1/messages?beta=true&stream=1"});c("Streaming response forwarded",J.head.startsWith("HTTP/1.1 200")),await new Promise(a=>setTimeout(a,100));let M=S.find(a=>String(a.path||"").includes("stream=1"));c("Streaming audit event captured",!!M),c("Token usage extracted from streamed response",M?.usage?.inputTokens===11&&M?.usage?.cacheCreationTokens===22&&M?.usage?.cacheReadTokens===33&&M?.usage?.outputTokens===44&&M?.usage?.totalTokens===110,JSON.stringify(M?.usage||null)),c("Streamed usage marked complete",M?.usage?.complete===!0&&M?.usage?.stopReason==="end_turn"),c("Model recovered from response when request body is truncated",M?.request?.truncated===!0&&M?.model==="audit-self-test-stream-model"),c("Exchange without token usage reports none",S.some(a=>String(a.path||"").includes("encoded=")&&null==a.usage));let P=await y(b.port,`localhost:${a.port}`),Q=await function({socket:a,ca:b,servername:c,port:d,path:e}){return new Promise((g,i)=>{let j=f.connect({socket:a,ca:b,servername:c,rejectUnauthorized:!0,ALPNProtocols:["http/1.1"]}),k=[],l=setTimeout(()=>i(Error("Upgrade test timeout")),1e4);j.once("error",i),j.once("secureConnect",()=>{j.write(`GET ${e} HTTP/1.1\r
+`,T=g.gzipSync(Buffer.from(S,"utf8")),U=d.createSecureServer({key:M.key,cert:M.cert,allowHTTP1:!0});U.on("request",(a,b)=>{let c=[];a.on("data",a=>c.push(Buffer.from(a))),a.on("end",()=>{if(R.push({proxyAuthorization:a.headers["proxy-authorization"]||null,protocol:2===a.httpVersionMajor?"h2":"http/1.1",path:a.url,authorization:a.headers.authorization,apiKey:a.headers["x-api-key"],internalHeader:a.headers["x-9r-source-tool"],body:Buffer.concat(c)}),String(a.url||"").includes("stream=1")){b.writeHead(200,{"content-type":"text/event-stream","content-encoding":"gzip","content-length":String(T.length)}),b.end(T);return}b.writeHead(200,{"content-type":"application/json","content-encoding":"br","content-length":String(Q.length)}),b.end(Q)})});let V=[],W=null,X=null;try{var Y;let a=await z(U);W=j({allowedHosts:["localhost"],passthroughUnknown:!1,captureBodies:!0,captureLimitBytes:1048576,verifyUpstreamTls:!0,allowedConnectPorts:[a.port],connectTimeoutMs:5e3,tlsHandshakeTimeoutMs:5e3,responseHeaderTimeoutMs:5e3,idleTimeoutMs:3e4},{certificateProvider:()=>O,upstreamCa:L.certPem,resolveTarget:B,onAudit:a=>V.push(a)});let b=await z(W),d=await (Y=b.port,new Promise((a,b)=>{let c=e.connect(Y,"127.0.0.1"),d=[],f=setTimeout(()=>b(Error("Plain HTTP rejection timeout")),5e3);c.once("connect",()=>c.end("GET http://example.com/ HTTP/1.1\r\nHost: example.com\r\nConnection: close\r\n\r\n")),c.on("data",a=>d.push(Buffer.from(a))),c.once("error",b),c.once("end",()=>{clearTimeout(f),a(Buffer.concat(d).toString("utf8"))})}));c("Plain HTTP forward proxy is disabled",d.startsWith("HTTP/1.1 403"));let g="";try{await C(b.port,`blocked.invalid:${a.port}`)}catch(a){g=a.message||String(a)}c("CONNECT to a non-allowlisted host is refused",g.includes("403"),g),await new Promise(a=>setTimeout(a,100));let i=V.find(a=>"CONNECT"===a.method&&"blocked.invalid"===a.host);c("Refused CONNECT is audited with the blocked host",!!i,i?"":"no CONNECT event recorded"),c("Refused CONNECT records why it was blocked",/allowlist/i.test(i?.error||""),i?.error||"");let k=j({allowedHosts:["localhost"],passthroughUnknown:!1,captureBodies:!0,captureLimitBytes:1048576,verifyUpstreamTls:!0,allowedConnectPorts:[a.port],connectTimeoutMs:5e3,tlsHandshakeTimeoutMs:5e3,responseHeaderTimeoutMs:5e3,idleTimeoutMs:3e4,clientToolFilterEnabled:!0,allowedClientTools:["claude-code"]},{certificateProvider:()=>O,upstreamCa:L.certPem,resolveTarget:B,onAudit:a=>V.push(a)}),m=await z(k),n="";try{(await C(m.port,`localhost:${a.port}`,"claude-cli/2.0.1 (external, cli)")).destroy()}catch(a){n=a.message||String(a)}c("Allowed tool still opens a tunnel",""===n,n);let o="";try{await C(m.port,`localhost:${a.port}`,"Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/131.0")}catch(a){o=a.message||String(a)}c("Browser is turned away by the tool filter",o.includes("403"),o);let p="";try{(await C(m.port,`localhost:${a.port}`)).destroy()}catch(a){p=a.message||String(a)}c("A client sending no User-Agent still connects",""===p,p),await new Promise(a=>setTimeout(a,100));let q=V.find(a=>/Client tool is not allowed/i.test(a.error||""));c("Refused tool is audited with the User-Agent that was rejected",/Chrome|no User-Agent/i.test(q?.error||""),q?.error||""),await A(k);let r="selftest-user",s="selftest:pass:with:colons",u=await t(s),v=0,x=j({allowedHosts:["localhost"],passthroughUnknown:!0,captureBodies:!0,captureLimitBytes:1048576,verifyUpstreamTls:!0,allowedConnectPorts:[a.port],connectTimeoutMs:5e3,tlsHandshakeTimeoutMs:5e3,responseHeaderTimeoutMs:5e3,idleTimeoutMs:3e4,proxyAuthEnabled:!0,proxyAuthUsers:[{username:r,passwordHash:u}]},{certificateProvider:()=>O,upstreamCa:L.certPem,resolveTarget:(a,b)=>(v+=1,B(a,b)),onAudit:a=>V.push(a)}),y=await z(x),G=`localhost:${a.port}`,H=await D(y.port,G);c("CONNECT without credentials is refused with 407",H.startsWith("HTTP/1.1 407 Proxy Authentication Required"),H.split("\r\n")[0]),c("407 carries a Basic challenge",/Proxy-Authenticate: Basic realm="BlueRouter Audit Proxy", charset="UTF-8"/.test(H)),c("407 closes the connection",/Connection: close/i.test(H));let I=await D(y.port,G,E(r,"wrong"));c("Wrong password is refused with 407",I.startsWith("HTTP/1.1 407"),I.split("\r\n")[0]);let J=await D(y.port,G,E("nobody",s));c("Unknown username is refused with 407",J.startsWith("HTTP/1.1 407"),J.split("\r\n")[0]);let K=await D(y.port,`blocked.invalid:${a.port}`);c("Unauthenticated client cannot use the passthrough tunnel",K.startsWith("HTTP/1.1 407"),K.split("\r\n")[0]),c("Unauthenticated client cannot tell an allowlisted host from a blocked one",H.split("\r\n")[0]===K.split("\r\n")[0]),c("Unauthenticated CONNECT does not resolve the destination",0===v,`resolver called ${v} times`);let M=Buffer.from(JSON.stringify({model:"audit-self-test-auth",messages:[]})),P=await C(y.port,G,"",E(r,s)),S=await F({socket:P,ca:N.certPem,servername:"localhost",port:a.port,body:M,path:"/v1/messages?auth=1"});c("Correct credentials open a working tunnel",S.head.startsWith("HTTP/1.1 200"),S.head.split("\r\n")[0]),c("Authenticated CONNECT does resolve the destination",v>0,`resolver called ${v} times`),await new Promise(a=>setTimeout(a,100));let T=V.find(a=>String(a.path||"").includes("auth=1"));c("Authenticated tunnel attributes the username on the request event",T?.client?.proxyUser===r,T?.client?.proxyUser||"(none)");let Z=V.find(a=>407===a.status&&a.error&&/Invalid proxy credentials/.test(a.error));c("Failed proxy auth is audited",!!Z,Z?"":"no 407 event recorded");let $=Buffer.from(`${r}:${s}`).toString("base64"),_=V.some(a=>{let b=JSON.stringify(a);return b.includes(s)||b.includes($)});c("No audit event records the proxy credential",!_),c("Proxy-Authorization is redacted in audit events",V.filter(a=>"proxy-authorization"in(a.request?.headers||{})).every(a=>"[REDACTED]"===a.request.headers["proxy-authorization"])),c("Proxy-Authorization never reaches the origin",R.every(a=>null==a.proxyAuthorization)),await A(x);let aa=Buffer.from(JSON.stringify({model:"audit-self-test-h1",messages:[{role:"user",content:"hello h1 ✓"}]})),ab="/v1/messages?beta=true&encoded=%2F",ac=await C(b.port,`localhost:${a.port}`),ad=await F({socket:ac,ca:N.certPem,servername:"localhost",port:a.port,body:aa,path:ab});c("HTTP/1.1 CONNECT and TLS succeeded",ad.head.startsWith("HTTP/1.1 200")),c("HTTP/1.1 compressed response bytes preserved",w(ad.body)===w(Q));let ae=Buffer.from(JSON.stringify({model:"audit-self-test-h2-downgrade",messages:[{role:"user",content:"hello downgrade ✓"}]})),af="/v1/messages?beta=true&protocol=h2-preferred",ag=await C(b.port,`localhost:${a.port}`),ah=null,ai=await F({socket:ag,ca:N.certPem,servername:"localhost",port:a.port,body:ae,path:af,alpnProtocols:["h2","http/1.1"],onAlpn:a=>{ah=a}});c("h2-preferring client is downgraded to HTTP/1.1","http/1.1"===ah,`negotiated ${ah||"none"}`),c("Downgraded client still gets a response",ai.head.startsWith("HTTP/1.1 200")),c("Downgraded compressed response bytes preserved",w(ai.body)===w(Q)),c("HTTP/2 is not advertised while the h2 path is unfixed",W.auditCapabilities?.http2===!1);let aj=Buffer.from(JSON.stringify({model:"audit-self-test-stream-model",messages:[{role:"user",content:"x".repeat(1052672)}]})),ak=await C(b.port,`localhost:${a.port}`),al=await F({socket:ak,ca:N.certPem,servername:"localhost",port:a.port,body:aj,path:"/v1/messages?beta=true&stream=1"});c("Streaming response forwarded",al.head.startsWith("HTTP/1.1 200")),await new Promise(a=>setTimeout(a,100));let am=V.find(a=>String(a.path||"").includes("stream=1"));c("Streaming audit event captured",!!am),c("Token usage extracted from streamed response",am?.usage?.inputTokens===11&&am?.usage?.cacheCreationTokens===22&&am?.usage?.cacheReadTokens===33&&am?.usage?.outputTokens===44&&am?.usage?.totalTokens===110,JSON.stringify(am?.usage||null)),c("Streamed usage marked complete",am?.usage?.complete===!0&&am?.usage?.stopReason==="end_turn"),c("Model recovered from response when request body is truncated",am?.request?.truncated===!0&&am?.model==="audit-self-test-stream-model"),c("Exchange without token usage reports none",V.some(a=>String(a.path||"").includes("encoded=")&&null==a.usage));let an=await C(b.port,`localhost:${a.port}`),ao=await function({socket:a,ca:b,servername:c,port:d,path:e}){return new Promise((g,i)=>{let j=f.connect({socket:a,ca:b,servername:c,rejectUnauthorized:!0,ALPNProtocols:["http/1.1"]}),k=[],l=setTimeout(()=>i(Error("Upgrade test timeout")),1e4);j.once("error",i),j.once("secureConnect",()=>{j.write(`GET ${e} HTTP/1.1\r
 Host: localhost:${d}\r
 Upgrade: websocket\r
 Connection: Upgrade\r
@@ -38,7 +43,7 @@ x-api-key: sk-test-supersecret-123456789\r
 Sec-WebSocket-Key: ${h.randomBytes(16).toString("base64")}\r
 Sec-WebSocket-Version: 13\r
 \r
-`)});let m=()=>{clearTimeout(l),g(Buffer.concat(k).toString("latin1"))};j.on("data",a=>{k.push(Buffer.from(a)),Buffer.concat(k).indexOf("\r\n\r\n")>=0&&m()}),j.on("end",m),j.on("close",m)})}({socket:P,ca:K.certPem,servername:"localhost",port:a.port,path:"/v1/messages?transport=websocket"});c("Protocol upgrade is refused, not silently downgraded",Q.startsWith("HTTP/1.1 501"),Q.slice(0,40)),c("Upgrade refusal tells the client what to do instead",/HTTP streaming transport/i.test(Q)),c("Upgrade never reaches the origin",!O.some(a=>String(a.path||"").includes("transport=websocket"))),await new Promise(a=>setTimeout(a,100)),c("Refused upgrade is still audited",S.some(a=>501===a.status&&String(a.path||"").includes("transport=websocket")));let W=O.find(a=>"http/1.1"===a.protocol),X=O.find(a=>String(a.path||"").includes("h2-preferred"));c("HTTP/1.1 path/query preserved",W?.path===t),c("Downgraded path/query preserved",X?.path===C),c("HTTP/1.1 request body byte-identical",W&&s(W.body)===s(r)),c("Downgraded request body byte-identical",X&&s(X.body)===s(B)),c("Authorization preserved on wire",O.every(a=>"Bearer test-secret-authorization-123456789"===a.authorization)),c("x-api-key preserved on wire",O.every(a=>"sk-test-supersecret-123456789"===a.apiKey)),c("Internal x-9r-* header stripped",O.every(a=>null==a.internalHeader));let Y=S.find(a=>String(a.path||"").includes("encoded=")),Z=S.find(a=>String(a.path||"").includes("h2-preferred"));c("HTTP/1.1 audit event captured",!!Y),c("Downgraded audit event captured",!!Z),c("Request wire SHA-256 recorded",Y?.request?.wireSha256===s(r)&&Z?.request?.wireSha256===s(B)),c("Response wire SHA-256 recorded",Y?.response?.wireSha256===s(N)&&Z?.response?.wireSha256===s(N)),c("Compressed audit response decoded",Y?.response?.body?.includes("compressed response preserved")&&Z?.response?.body?.includes("compressed response preserved"));let $=S.filter(a=>"authorization"in(a.request?.headers||{}));c("Authorization redacted in audit",$.length>0&&$.every(a=>"[REDACTED]"===a.request.headers.authorization));let _=S.filter(a=>"x-api-key"in(a.request?.headers||{}));c("x-api-key redacted in audit",_.length>0&&_.every(a=>"[REDACTED]"===a.request.headers["x-api-key"])),c("No likely API secret persisted",S.length>=2&&S.every(a=>!l(a))),U=j({allowedHosts:["localhost"],passthroughUnknown:!1,captureBodies:!0,captureLimitBytes:1048576,verifyUpstreamTls:!0,allowedConnectPorts:[a.port],connectTimeoutMs:5e3,tlsHandshakeTimeoutMs:5e3,responseHeaderTimeoutMs:5e3,idleTimeoutMs:3e4},{certificateProvider:()=>L,upstreamCa:I.certPem,resolveTarget:x,onAudit:()=>{throw Error("simulated audit sink failure")}});let aa=await v(U),ab=await y(aa.port,`localhost:${a.port}`),ac=await z({socket:ab,ca:K.certPem,servername:"localhost",port:a.port,body:r,path:t});c("Audit sink failure does not fail proxied request",ac.head.startsWith("HTTP/1.1 200"))}catch(a){c("Self-test execution",!1,a.message||String(a))}finally{await w(U),await w(T),await w(R)}return{ok:b.length>0&&b.every(a=>a.ok),checks:b,passed:b.filter(a=>a.ok).length,total:b.length,durationMs:Date.now()-a}}}},86439:a=>{a.exports=require("next/dist/shared/lib/no-fallback-error.external")},86455:a=>{function b(a){let b=Number(a);return!Number.isFinite(b)||b<0?0:Math.round(b)}function c(){return{inputTokens:0,outputTokens:0,cacheReadTokens:0,cacheCreationTokens:0,reasoningTokens:0,totalTokens:0,model:null,stopReason:null,streaming:!1,complete:!1,source:null}}function d(a){let b=String(a||"").trim();if(!b||"{"!==b[0])return null;try{let a=JSON.parse(b);return a&&"object"==typeof a&&!Array.isArray(a)?a:null}catch{return null}}function e(a,c){"string"==typeof c.model&&c.model&&!a.model&&(a.model=c.model);let d="response.completed"===c.type||"response.done"===c.type?c.response?.usage:null,e=d||c.usage;if(!e||"object"!=typeof e)return!1;d&&"string"==typeof c.response?.model&&c.response.model&&(a.model=c.response.model);let f=b(e.prompt_tokens??e.input_tokens),g=b(e.completion_tokens??e.output_tokens);if(!f&&!g)return!1;let h=b(e.prompt_tokens_details?.cached_tokens??e.input_tokens_details?.cached_tokens??e.cached_tokens??e.prompt_cache_hit_tokens);a.inputTokens=Math.max(0,f-h),a.cacheReadTokens=h,a.outputTokens=g,a.reasoningTokens=b(e.completion_tokens_details?.reasoning_tokens??e.output_tokens_details?.reasoning_tokens),a.complete=!0;let i=c.choices?.[0]?.finish_reason;return"string"==typeof i&&i&&(a.stopReason=i),!0}function f(a,f){let g=c();g.streaming=!0,g.source="sse";let h=!1;for(let c of function*(a){let b=String(a||""),c=0;for(;c<b.length;){let a=b.indexOf("\n",c);-1===a&&(a=b.length);let e=b.slice(c,a).trim();if(c=a+1,!e.startsWith("data:"))continue;let f=e.slice(5).trim();if(!f||"[DONE]"===f)continue;let g=d(f);g&&(yield g)}}(a)){if(("anthropic"===f||"message_start"===c.type||"message_delta"===c.type)&&function(a,c){let d=String(c.type||"");if("message_start"===d&&c.message&&"object"==typeof c.message){let d=c.message;"string"==typeof d.model&&d.model&&(a.model=d.model);let e=d.usage;return e&&"object"==typeof e&&(a.inputTokens=b(e.input_tokens)||a.inputTokens,a.cacheReadTokens=b(e.cache_read_input_tokens)||a.cacheReadTokens,a.cacheCreationTokens=b(e.cache_creation_input_tokens)||a.cacheCreationTokens),!0}if("message_delta"===d){let d=c.usage;d&&"object"==typeof d&&(a.outputTokens=b(d.output_tokens)||a.outputTokens,a.inputTokens=a.inputTokens||b(d.input_tokens),a.cacheReadTokens=a.cacheReadTokens||b(d.cache_read_input_tokens),a.cacheCreationTokens=a.cacheCreationTokens||b(d.cache_creation_input_tokens),a.complete=!0);let e=c.delta?.stop_reason;return"string"==typeof e&&e&&(a.stopReason=e),!0}return!1}(g,c)){h=!0;continue}e(g,c)&&(h=!0)}return h?g:null}function g(a){let f=d(a);if(!f)return null;let g=c();g.source="json","string"==typeof f.model&&f.model&&(g.model=f.model);let h=f.usage;return h&&"object"==typeof h?null!=h.input_tokens||null!=h.output_tokens?(g.inputTokens=b(h.input_tokens),g.outputTokens=b(h.output_tokens),g.cacheReadTokens=b(h.cache_read_input_tokens),g.cacheCreationTokens=b(h.cache_creation_input_tokens),g.complete=!0,"string"==typeof f.stop_reason&&(g.stopReason=f.stop_reason),g):e(g,f)?g:null:null}function h(a){return/\/count_tokens\b/.test(String(a||""))}function i(a){return a.inputTokens+a.cacheReadTokens+a.cacheCreationTokens}a.exports={extractUsageFromBody:function({provider:a,body:b,contentType:c="",path:d=""}={}){if("string"!=typeof b||!b||b.length>0x1000000||h(d))return null;let e=/event-stream/i.test(String(c||""))||b.includes("\ndata:")||b.startsWith("data:")?f(b,a)||g(b):g(b)||f(b,a);return e&&(e&&(e.inputTokens||e.outputTokens||e.cacheReadTokens||e.cacheCreationTokens)||e.model)?(e.totalTokens=e.inputTokens+e.outputTokens+e.cacheReadTokens+e.cacheCreationTokens,e):null},isTokenCountingEndpoint:h,toTokensJson:function(a){if(!a)return null;let b=i(a),c={input_tokens:a.inputTokens,output_tokens:a.outputTokens,prompt_tokens:b,completion_tokens:a.outputTokens,total_tokens:a.totalTokens,display_total_input_tokens:b,display_new_input_tokens:a.inputTokens,display_cached_input_tokens:a.cacheReadTokens,display_cache_creation_input_tokens:a.cacheCreationTokens,display_output_tokens:a.outputTokens};return a.cacheReadTokens&&(c.cache_read_input_tokens=a.cacheReadTokens),a.cacheCreationTokens&&(c.cache_creation_input_tokens=a.cacheCreationTokens),a.cacheReadTokens&&(c.cached_tokens=a.cacheReadTokens),a.reasoningTokens&&(c.reasoning_tokens=a.reasoningTokens),c},totalInputTokens:i}},87496:(a,b,c)=>{c.r(b),c.d(b,{GET:()=>B,POST:()=>D,PUT:()=>C,dynamic:()=>r,revalidate:()=>s,runtime:()=>q});var d=c(23211),e=c(9588),f=c(45903);let g="audit-proxy",h="client",i="provider_response",j="__blueRouterAuditRecentMysqlReader";function k(){return globalThis[j]||(globalThis[j]={pool:null,poolKey:"",poolPromise:null,cache:{expiresAt:0,limit:0,result:null}}),globalThis[j]}async function l(a){let b=k(),d=JSON.stringify({host:a.host,port:Number(a.port||3306),database:a.database,username:a.username,password:a.password,ssl:!0===a.ssl});if(b.pool&&b.poolKey===d||b.poolPromise&&(await b.poolPromise.catch(()=>{}),b.pool&&b.poolKey===d))return b.pool;b.poolPromise=(async()=>{if(b.pool&&b.poolKey!==d){try{await b.pool.end()}catch{}b.pool=null,b.poolKey=""}let e=await c.e(8491).then(c.t.bind(c,38491,19)),f=(e.default||e).createPool({host:a.host,port:Number(a.port||3306),database:a.database,user:a.username,password:a.password,ssl:a.ssl?{rejectUnauthorized:!0}:void 0,connectTimeout:2500,waitForConnections:!0,connectionLimit:1,maxIdle:1,idleTimeout:3e4,queueLimit:4,enableKeepAlive:!0,keepAliveInitialDelay:3e4,timezone:"Z",dateStrings:!0});return b.pool=f,b.poolKey=d,f})();try{return await b.poolPromise}finally{b.poolPromise=null}}function m(a){if(null==a||""===a)return null;let b=Number(a);return Number.isFinite(b)?b:null}function n(a){let b=Date.parse(a||0);return Number.isFinite(b)?b:0}async function o(a=50){let b=Math.max(1,Math.min(500,Number(a)||50)),c=k(),d=Date.now();if(c.cache.result&&c.cache.expiresAt>d&&c.cache.limit>=b)return{...c.cache.result,events:c.cache.result.events.slice(0,b),cached:!0};try{let a=await (0,f.getPromptLogDbConfig)();if(!a?.enabled)return{events:[],available:!1,reason:"Prompt Log MySQL is disabled",error:null};if("mysql"!==String(a.type||"").toLowerCase())return{events:[],available:!1,reason:`Prompt Log database type is ${a.type||"unknown"}`,error:null};let e=await l(a),j=Math.min(1200,2*b+20),k=`SELECT
+`)});let m=()=>{clearTimeout(l),g(Buffer.concat(k).toString("latin1"))};j.on("data",a=>{k.push(Buffer.from(a)),Buffer.concat(k).indexOf("\r\n\r\n")>=0&&m()}),j.on("end",m),j.on("close",m)})}({socket:an,ca:N.certPem,servername:"localhost",port:a.port,path:"/v1/messages?transport=websocket"});c("Protocol upgrade is refused, not silently downgraded",ao.startsWith("HTTP/1.1 501"),ao.slice(0,40)),c("Upgrade refusal tells the client what to do instead",/HTTP streaming transport/i.test(ao)),c("Upgrade never reaches the origin",!R.some(a=>String(a.path||"").includes("transport=websocket"))),await new Promise(a=>setTimeout(a,100)),c("Refused upgrade is still audited",V.some(a=>501===a.status&&String(a.path||"").includes("transport=websocket")));let ap=R.find(a=>String(a.path||"").includes("encoded=")),aq=R.find(a=>String(a.path||"").includes("h2-preferred"));c("HTTP/1.1 path/query preserved",ap?.path===ab),c("Downgraded path/query preserved",aq?.path===af),c("HTTP/1.1 request body byte-identical",ap&&w(ap.body)===w(aa)),c("Downgraded request body byte-identical",aq&&w(aq.body)===w(ae)),c("Authorization preserved on wire",R.every(a=>"Bearer test-secret-authorization-123456789"===a.authorization)),c("x-api-key preserved on wire",R.every(a=>"sk-test-supersecret-123456789"===a.apiKey)),c("Internal x-9r-* header stripped",R.every(a=>null==a.internalHeader));let ar=V.find(a=>String(a.path||"").includes("encoded=")),as=V.find(a=>String(a.path||"").includes("h2-preferred"));c("HTTP/1.1 audit event captured",!!ar),c("Downgraded audit event captured",!!as),c("Request wire SHA-256 recorded",ar?.request?.wireSha256===w(aa)&&as?.request?.wireSha256===w(ae)),c("Response wire SHA-256 recorded",ar?.response?.wireSha256===w(Q)&&as?.response?.wireSha256===w(Q)),c("Compressed audit response decoded",ar?.response?.body?.includes("compressed response preserved")&&as?.response?.body?.includes("compressed response preserved"));let at=V.filter(a=>"authorization"in(a.request?.headers||{}));c("Authorization redacted in audit",at.length>0&&at.every(a=>"[REDACTED]"===a.request.headers.authorization));let au=V.filter(a=>"x-api-key"in(a.request?.headers||{}));c("x-api-key redacted in audit",au.length>0&&au.every(a=>"[REDACTED]"===a.request.headers["x-api-key"])),c("No likely API secret persisted",V.length>=2&&V.every(a=>!l(a))),X=j({allowedHosts:["localhost"],passthroughUnknown:!1,captureBodies:!0,captureLimitBytes:1048576,verifyUpstreamTls:!0,allowedConnectPorts:[a.port],connectTimeoutMs:5e3,tlsHandshakeTimeoutMs:5e3,responseHeaderTimeoutMs:5e3,idleTimeoutMs:3e4},{certificateProvider:()=>O,upstreamCa:L.certPem,resolveTarget:B,onAudit:()=>{throw Error("simulated audit sink failure")}});let av=await z(X),aw=await C(av.port,`localhost:${a.port}`),ax=await F({socket:aw,ca:N.certPem,servername:"localhost",port:a.port,body:aa,path:ab});c("Audit sink failure does not fail proxied request",ax.head.startsWith("HTTP/1.1 200"))}catch(a){c("Self-test execution",!1,a.message||String(a))}finally{await A(X),await A(W),await A(U)}return{ok:b.length>0&&b.every(a=>a.ok),checks:b,passed:b.filter(a=>a.ok).length,total:b.length,durationMs:Date.now()-a}}}},86439:a=>{"use strict";a.exports=require("next/dist/shared/lib/no-fallback-error.external")},86455:a=>{"use strict";function b(a){let b=Number(a);return!Number.isFinite(b)||b<0?0:Math.round(b)}function c(){return{inputTokens:0,outputTokens:0,cacheReadTokens:0,cacheCreationTokens:0,reasoningTokens:0,totalTokens:0,model:null,stopReason:null,streaming:!1,complete:!1,source:null}}function d(a){let b=String(a||"").trim();if(!b||"{"!==b[0])return null;try{let a=JSON.parse(b);return a&&"object"==typeof a&&!Array.isArray(a)?a:null}catch{return null}}function e(a,c){"string"==typeof c.model&&c.model&&!a.model&&(a.model=c.model);let d="response.completed"===c.type||"response.done"===c.type?c.response?.usage:null,e=d||c.usage;if(!e||"object"!=typeof e)return!1;d&&"string"==typeof c.response?.model&&c.response.model&&(a.model=c.response.model);let f=b(e.prompt_tokens??e.input_tokens),g=b(e.completion_tokens??e.output_tokens);if(!f&&!g)return!1;let h=b(e.prompt_tokens_details?.cached_tokens??e.input_tokens_details?.cached_tokens??e.cached_tokens??e.prompt_cache_hit_tokens);a.inputTokens=Math.max(0,f-h),a.cacheReadTokens=h,a.outputTokens=g,a.reasoningTokens=b(e.completion_tokens_details?.reasoning_tokens??e.output_tokens_details?.reasoning_tokens),a.complete=!0;let i=c.choices?.[0]?.finish_reason;return"string"==typeof i&&i&&(a.stopReason=i),!0}function f(a,f){let g=c();g.streaming=!0,g.source="sse";let h=!1;for(let c of function*(a){let b=String(a||""),c=0;for(;c<b.length;){let a=b.indexOf("\n",c);-1===a&&(a=b.length);let e=b.slice(c,a).trim();if(c=a+1,!e.startsWith("data:"))continue;let f=e.slice(5).trim();if(!f||"[DONE]"===f)continue;let g=d(f);g&&(yield g)}}(a)){if(("anthropic"===f||"message_start"===c.type||"message_delta"===c.type)&&function(a,c){let d=String(c.type||"");if("message_start"===d&&c.message&&"object"==typeof c.message){let d=c.message;"string"==typeof d.model&&d.model&&(a.model=d.model);let e=d.usage;return e&&"object"==typeof e&&(a.inputTokens=b(e.input_tokens)||a.inputTokens,a.cacheReadTokens=b(e.cache_read_input_tokens)||a.cacheReadTokens,a.cacheCreationTokens=b(e.cache_creation_input_tokens)||a.cacheCreationTokens),!0}if("message_delta"===d){let d=c.usage;d&&"object"==typeof d&&(a.outputTokens=b(d.output_tokens)||a.outputTokens,a.inputTokens=a.inputTokens||b(d.input_tokens),a.cacheReadTokens=a.cacheReadTokens||b(d.cache_read_input_tokens),a.cacheCreationTokens=a.cacheCreationTokens||b(d.cache_creation_input_tokens),a.complete=!0);let e=c.delta?.stop_reason;return"string"==typeof e&&e&&(a.stopReason=e),!0}return!1}(g,c)){h=!0;continue}e(g,c)&&(h=!0)}return h?g:null}function g(a){let f=d(a);if(!f)return null;let g=c();g.source="json","string"==typeof f.model&&f.model&&(g.model=f.model);let h=f.usage;return h&&"object"==typeof h?null!=h.input_tokens||null!=h.output_tokens?(g.inputTokens=b(h.input_tokens),g.outputTokens=b(h.output_tokens),g.cacheReadTokens=b(h.cache_read_input_tokens),g.cacheCreationTokens=b(h.cache_creation_input_tokens),g.complete=!0,"string"==typeof f.stop_reason&&(g.stopReason=f.stop_reason),g):e(g,f)?g:null:null}function h(a){return/\/count_tokens\b/.test(String(a||""))}function i(a){return a.inputTokens+a.cacheReadTokens+a.cacheCreationTokens}a.exports={extractUsageFromBody:function({provider:a,body:b,contentType:c="",path:d=""}={}){if("string"!=typeof b||!b||b.length>0x1000000||h(d))return null;let e=/event-stream/i.test(String(c||""))||b.includes("\ndata:")||b.startsWith("data:")?f(b,a)||g(b):g(b)||f(b,a);return e&&(e&&(e.inputTokens||e.outputTokens||e.cacheReadTokens||e.cacheCreationTokens)||e.model)?(e.totalTokens=e.inputTokens+e.outputTokens+e.cacheReadTokens+e.cacheCreationTokens,e):null},isTokenCountingEndpoint:h,toTokensJson:function(a){if(!a)return null;let b=i(a),c={input_tokens:a.inputTokens,output_tokens:a.outputTokens,prompt_tokens:b,completion_tokens:a.outputTokens,total_tokens:a.totalTokens,display_total_input_tokens:b,display_new_input_tokens:a.inputTokens,display_cached_input_tokens:a.cacheReadTokens,display_cache_creation_input_tokens:a.cacheCreationTokens,display_output_tokens:a.outputTokens};return a.cacheReadTokens&&(c.cache_read_input_tokens=a.cacheReadTokens),a.cacheCreationTokens&&(c.cache_creation_input_tokens=a.cacheCreationTokens),a.cacheReadTokens&&(c.cached_tokens=a.cacheReadTokens),a.reasoningTokens&&(c.reasoning_tokens=a.reasoningTokens),c},totalInputTokens:i}},87496:(a,b,c)=>{"use strict";c.r(b),c.d(b,{GET:()=>B,POST:()=>D,PUT:()=>C,dynamic:()=>r,revalidate:()=>s,runtime:()=>q});var d=c(23211),e=c(9588),f=c(45903);let g="audit-proxy",h="client",i="provider_response",j="__blueRouterAuditRecentMysqlReader";function k(){return globalThis[j]||(globalThis[j]={pool:null,poolKey:"",poolPromise:null,cache:{expiresAt:0,limit:0,result:null}}),globalThis[j]}async function l(a){let b=k(),d=JSON.stringify({host:a.host,port:Number(a.port||3306),database:a.database,username:a.username,password:a.password,ssl:!0===a.ssl});if(b.pool&&b.poolKey===d||b.poolPromise&&(await b.poolPromise.catch(()=>{}),b.pool&&b.poolKey===d))return b.pool;b.poolPromise=(async()=>{if(b.pool&&b.poolKey!==d){try{await b.pool.end()}catch{}b.pool=null,b.poolKey=""}let e=await c.e(8491).then(c.t.bind(c,38491,19)),f=(e.default||e).createPool({host:a.host,port:Number(a.port||3306),database:a.database,user:a.username,password:a.password,ssl:a.ssl?{rejectUnauthorized:!0}:void 0,connectTimeout:2500,waitForConnections:!0,connectionLimit:1,maxIdle:1,idleTimeout:3e4,queueLimit:4,enableKeepAlive:!0,keepAliveInitialDelay:3e4,timezone:"Z",dateStrings:!0});return b.pool=f,b.poolKey=d,f})();try{return await b.poolPromise}finally{b.poolPromise=null}}function m(a){if(null==a||""===a)return null;let b=Number(a);return Number.isFinite(b)?b:null}function n(a){let b=Date.parse(a||0);return Number.isFinite(b)?b:0}async function o(a=50){let b=Math.max(1,Math.min(500,Number(a)||50)),c=k(),d=Date.now();if(c.cache.result&&c.cache.expiresAt>d&&c.cache.limit>=b)return{...c.cache.result,events:c.cache.result.events.slice(0,b),cached:!0};try{let a=await (0,f.getPromptLogDbConfig)();if(!a?.enabled)return{events:[],available:!1,reason:"Prompt Log MySQL is disabled",error:null};if("mysql"!==String(a.type||"").toLowerCase())return{events:[],available:!1,reason:`Prompt Log database type is ${a.type||"unknown"}`,error:null};let e=await l(a),j=Math.min(1200,2*b+20),k=`SELECT
       id, created_at, stage, model, endpoint, provider,
       client_ip, client_port, client_user_agent, client_host, source_host,
       prompt_text, response_text, status_code, error_text, meta_json
@@ -46,7 +51,7 @@ Sec-WebSocket-Version: 13\r
     WHERE stage = ?
        OR (session_id LIKE 'audit-%' AND stage IN (?, ?))
     ORDER BY created_at DESC
-    LIMIT ${j}`,[o]=await e.query({sql:k,timeout:2500},[g,h,i]),p={events:function(a,b){let c=new Map;for(let b of a||[]){let a=function(a){let b,c,d,e,f=function(a){if(!a)return{};if("object"==typeof a&&!Buffer.isBuffer(a))return a;try{return JSON.parse(Buffer.isBuffer(a)?a.toString("utf8"):String(a))}catch{return{}}}(a.meta_json),g=Number(f.requestCapturedBytes||0),h=Number(f.requestTotalBytes||g||0),i=Number(f.responseCapturedBytes||0),j=Number(f.responseTotalBytes||i||0);return{id:String(f.auditEventId||a.id),timestamp:function(a){if(a instanceof Date)return a.toISOString();let b=String(a||"").trim();if(!b)return new Date().toISOString();let c=b.replace(" ","T"),d=new Date(/(?:Z|[+-]\d{2}:?\d{2})$/i.test(c)?c:`${c}Z`);return Number.isNaN(d.getTime())?new Date().toISOString():d.toISOString()}(a.created_at),protocol:String(f.protocol||"http/1.1"),client:{ip:a.client_ip||"",port:m(a.client_port),userAgent:a.client_user_agent||""},provider:a.provider||"other",host:f.host||a.client_host||a.source_host||"",port:Number(f.port||443),method:f.method||"REQUEST",path:f.path||a.endpoint||"",model:a.model||null,usage:(b=Number(f.inputTokens||0),c=Number(f.outputTokens||0),d=Number(f.cacheReadTokens||0),e=Number(f.cacheCreationTokens||0),b||c||d||e?{inputTokens:b,outputTokens:c,cacheReadTokens:d,cacheCreationTokens:e,reasoningTokens:Number(f.reasoningTokens||0),totalTokens:Number(f.totalTokens||0)||b+c+d+e,complete:!0===f.usageComplete,source:f.usageSource||null,stopReason:f.stopReason||null}:null),status:m(a.status_code),durationMs:Number(f.durationMs||0),error:a.error_text||null,request:{headers:{},body:a.prompt_text||"",capturedBytes:g,totalBytes:h,wireSha256:f.requestWireSha256||null,truncated:!0===f.requestTruncated,previewOnly:!0},response:{headers:{},body:a.response_text||"",capturedBytes:i,totalBytes:j,wireSha256:f.responseWireSha256||null,truncated:!0===f.responseTruncated,previewOnly:!0},persistenceSource:"mysql"}}(b),d=a.id,e=String(b.stage||"");if(e===g){let b=c.get(d);(!b||n(a.timestamp)>=n(b.timestamp))&&c.set(d,a);continue}let f=c.get(d);f||(f={...a,request:{...a.request,body:""},response:{...a.response,body:""}},c.set(d,f)),n(a.timestamp)>n(f.timestamp)&&(f.timestamp=a.timestamp),!f.model&&a.model&&(f.model=a.model),!f.usage&&a.usage&&(f.usage=a.usage),!f.host&&a.host&&(f.host=a.host),!f.path&&a.path&&(f.path=a.path),e===h?f.request=a.request:e===i&&(f.response=a.response,f.status=a.status,f.error=a.error)}return[...c.values()].sort((a,b)=>n(b.timestamp)-n(a.timestamp)).slice(0,b)}(o||[],b),available:!0,reason:null,error:null};return c.cache={expiresAt:d+3e3,limit:b,result:p},p}catch(e){let a={events:[],available:!1,reason:null,error:e?.message||String(e)};return c.cache={expiresAt:d+3e3,limit:b,result:a},a}}var p=c(49083);let q="nodejs",r="force-dynamic",s=0,t={"Cache-Control":"no-store"};async function u(){let{response:a}=await (0,e.hH)();return a}function v(a){let b=Date.parse(a?.timestamp||0);return Number.isFinite(b)?b:0}function w(a){return{label:a,requests:0,inputTokens:0,outputTokens:0,cacheReadTokens:0,cacheCreationTokens:0,totalTokens:0,cost:0}}function x(a,b){a.requests+=1,a.inputTokens+=Number(b.inputTokens||0),a.outputTokens+=Number(b.outputTokens||0),a.cacheReadTokens+=Number(b.cacheReadTokens||0),a.cacheCreationTokens+=Number(b.cacheCreationTokens||0),a.totalTokens+=Number(b.totalTokens||0)}function y(a,b=12){return[...a.values()].sort((a,b)=>b.totalTokens-a.totalTokens).slice(0,b)}async function z(a){let b=w("all"),d=new Map,e=new Map,f=new Map,g=0,h=[];for(let b of a||[]){let a=b?.usage;a&&Number(a.totalTokens||0)&&(!1===a.complete&&(g+=1),h.push({usage:a,modelKey:b.model||a.model||"unknown",providerKey:b.provider||"other",toolKey:function(a){let b=String(a||"").toLowerCase();return b.includes("claude")?"claude-code":b.includes("codex")?"codex":"other"}(b.client?.userAgent)}))}if(!h.length)return{totals:b,byModel:[],byProvider:[],bySourceTool:[],incompleteUsageCount:0};let i=null,j=null;try{let[a,b]=await Promise.all([Promise.resolve().then(c.bind(c,97914)),c.e(7341).then(c.bind(c,57341))]);i=a.getPricingForModel,j=b.calculateCostFromTokens}catch{}let k=new Map;for(let a of h){let c=0;if(i&&"unknown"!==a.modelKey){k.has(a.modelKey)||k.set(a.modelKey,await i(null,a.modelKey).catch(()=>null));let b=k.get(a.modelKey);if(b){let d=j({input_tokens:a.usage.inputTokens,prompt_tokens:a.usage.inputTokens,output_tokens:a.usage.outputTokens,completion_tokens:a.usage.outputTokens,cache_read_input_tokens:a.usage.cacheReadTokens,cache_creation_input_tokens:a.usage.cacheCreationTokens},b);Number.isFinite(d)&&d>0&&(c=d)}}for(let[b,g]of[[d,a.modelKey],[e,a.providerKey],[f,a.toolKey]]){b.has(g)||b.set(g,w(g));let d=b.get(g);x(d,a.usage),d.cost+=c}x(b,a.usage),b.cost+=c}return{totals:b,byModel:y(d),byProvider:y(e),bySourceTool:y(f),incompleteUsageCount:g}}async function A(){let a=await (0,p.runSelfTest)();if(a.ok)return{...a,attempts:1,recoveredAfterRetry:!1};await new Promise(a=>setTimeout(a,250));let b=await (0,p.runSelfTest)();return{...b,attempts:2,recoveredAfterRetry:!0===b.ok,firstAttempt:{passed:a.passed,total:a.total,durationMs:a.durationMs,failed:(a?.checks||[]).filter(a=>!a.ok).map(a=>({name:a.name,detail:a.detail||""}))}}}async function B(a){let b=await u();if(b)return b;try{let{searchParams:b}=new URL(a.url),c=Math.max(1,Math.min(500,Number(b.get("limit"))||50)),e=await (0,p.getSnapshot)(c),f=e.events||[],g=await o(c),h=function(a,...b){let c=new Map;for(let a of b)for(let b of a||[]){if(!b)continue;let a=String(b.id||`${b.timestamp||""}:${b.host||""}:${b.path||""}`),d=c.get(a);(!d||v(b)>v(d))&&c.set(a,b)}return[...c.values()].sort((a,b)=>v(b)-v(a)).slice(0,a)}(c,f,g.events),i=e.status?.auditStore||{},j={...e.status,auditStore:{...i,recentRead:{localCount:f.length,mysqlCount:g.events?.length||0,mergedCount:h.length,mysqlAvailable:!0===g.available,mysqlCached:!0===g.cached,mysqlReason:g.reason||null,mysqlError:g.error||null}}},k=await z(h);return d.NextResponse.json({success:!0,...e,status:j,events:h,usageSummary:k},{headers:t})}catch(a){return d.NextResponse.json({error:a.message||"Failed to read Audit Proxy state"},{status:500,headers:t})}}async function C(a){let b=await u();if(b)return b;try{let b=await a.json(),c=(0,p.updateConfig)(b?.config||b||{});return d.NextResponse.json({success:!0,config:c},{headers:t})}catch(b){let a=/Stop or restart/.test(b.message||"")?409:400;return d.NextResponse.json({error:b.message||"Failed to save Audit Proxy configuration"},{status:a,headers:t})}}async function D(a){let b=await u();if(b)return b;try{let b=await a.json().catch(()=>({})),c=String(b?.action||"").trim().toLowerCase();if("start"===c)return d.NextResponse.json({success:!0,status:await (0,p.startProxy)(b.config||null)},{headers:t});if("stop"===c)return d.NextResponse.json({success:!0,status:await (0,p.stopProxy)()},{headers:t});if("restart"===c)return d.NextResponse.json({success:!0,status:await (0,p.restartProxy)(b.config||null)},{headers:t});if("save-client-host"===c){let a=(0,p.updateClientProxyHost)(b.clientProxyHost);return d.NextResponse.json({success:!0,config:a},{headers:t})}if("save-ip-filter"===c){let a=await (0,p.updateClientIpFilter)({enabled:!0===b.enabled,allowedClientIps:b.allowedClientIps});return d.NextResponse.json({success:!0,...a},{headers:t})}if("test"===c){let a=await A();return d.NextResponse.json({success:!0,test:a},{headers:t})}if("clear-logs"===c)return await (0,p.clearAudit)(),d.NextResponse.json({success:!0},{headers:t});return d.NextResponse.json({error:"Unsupported Audit Proxy action"},{status:400,headers:t})}catch(c){let a=c.message||"Audit Proxy action failed",b=/Invalid client IP|Invalid CIDR|requires at least one|not allowed|Invalid CONNECT/.test(a)?400:500;return d.NextResponse.json({error:a},{status:b,headers:t})}}},87550:a=>{a.exports=require("better-sqlite3")},90173:(a,b,c)=>{let d=c(29021),e=c(33873),f=c(4984),g=c(55511),{AUDIT_LOG_PATH:h,AUDIT_LOG_DIR:i,ensureAuditDir:j,loadConfig:k}=c(43096),{redactObject:l,scrubString:m}=c(48350),{toTokensJson:n,totalInputTokens:o}=c(86455),p="audit-proxy",q="client",r="provider_response",s={expiresAt:0,config:null},t=null,u=null,v=null,w=null,x=null,y="",z=Promise.resolve(),A=Promise.resolve(),B=0,C=null,D=new Map,E={queue:[],workers:new Set,activeWorkers:0,clearing:!1,enqueued:0,written:0,dropped:0,failed:0,mysqlWritten:0,mysqlFailed:0,usageWritten:0,usageFailed:0,tokensSeen:0,lastError:null,lastWrittenAt:null};function F(a){let b=Date.now();b-B<6e4||(B=b,console.warn(`[AuditProxy][PromptDB] ${a}`))}function G(a){E.lastError=String(a||"Audit store failure"),console.warn(`[AuditProxy][Store] ${E.lastError}`)}async function H(){let a=Date.now();if(s.expiresAt>a)return s.config;t||(t=Promise.resolve().then(c.bind(c,45903)));let b=await t,d=await b.getPromptLogDbConfig();return s={expiresAt:a+5e3,config:d},d}async function I(a){let b=g.createHash("sha256").update(JSON.stringify({host:a.host,port:Number(a.port||3306),database:a.database,username:a.username,password:a.password,ssl:!!a.ssl})).digest("hex");if(x&&y===b)return x;let d=z.then(async()=>{if(x&&y===b)return x;if(x){try{await x.end()}catch{}x=null,y=""}let d=await c.e(8491).then(c.t.bind(c,38491,19)),e=(d.default||d).createPool({host:a.host,port:Number(a.port||3306),database:a.database,user:a.username,password:a.password,ssl:a.ssl?{rejectUnauthorized:!0}:void 0,connectTimeout:3e3,waitForConnections:!0,connectionLimit:4,maxIdle:4,idleTimeout:6e4,queueLimit:100,enableKeepAlive:!0,keepAliveInitialDelay:3e4});return x=e,y=b,e});return z=d.then(()=>void 0,()=>void 0),d}function J(a){let b=a?new Date(a):new Date;return(Number.isNaN(b.getTime())?new Date:b).toISOString().replace("T"," ").replace("Z","")}function K(a){if("string"!=typeof a)return a;let b=a.trim();if(!b||!b.startsWith("{")&&!b.startsWith("["))return a;try{return JSON.parse(b)}catch{return a}}function L(a,b=0,c=[]){if(null==a||b>12||c.join("\n").length>=2e5)return c;if("string"==typeof a)return a.trim()&&c.push(a.trim()),c;if(Array.isArray(a)){for(let d of a)L(d,b+1,c);return c}if("object"!=typeof a)return c;for(let[d,e]of Object.entries(a)){let a=d.toLowerCase();["content","text","prompt","input","message","output_text"].includes(a)?L(e,b+1,c):b<8&&["messages","contents","parts","body","request","payload","response","choices","output","item","items"].includes(a)&&L(e,b+1,c)}return c}function M(a){let b=String(a||"").toLowerCase();return b.includes("claude")?{tool:"claude-code",label:"Claude Code"}:b.includes("codex")?{tool:"codex",label:"Codex"}:{tool:"audit-proxy",label:"Enterprise AI Audit Proxy"}}async function N(a,b,c,d){if(!c)return null;let e=g.createHash("sha256").update(c).digest("hex"),f=Buffer.byteLength(String(c||""),"utf8");return await a.query(`INSERT INTO prompt_log_payloads (
+    LIMIT ${j}`,[o]=await e.query({sql:k,timeout:2500},[g,h,i]),p={events:function(a,b){let c=new Map;for(let b of a||[]){let a=function(a){let b,c,d,e,f=function(a){if(!a)return{};if("object"==typeof a&&!Buffer.isBuffer(a))return a;try{return JSON.parse(Buffer.isBuffer(a)?a.toString("utf8"):String(a))}catch{return{}}}(a.meta_json),g=Number(f.requestCapturedBytes||0),h=Number(f.requestTotalBytes||g||0),i=Number(f.responseCapturedBytes||0),j=Number(f.responseTotalBytes||i||0);return{id:String(f.auditEventId||a.id),timestamp:function(a){if(a instanceof Date)return a.toISOString();let b=String(a||"").trim();if(!b)return new Date().toISOString();let c=b.replace(" ","T"),d=new Date(/(?:Z|[+-]\d{2}:?\d{2})$/i.test(c)?c:`${c}Z`);return Number.isNaN(d.getTime())?new Date().toISOString():d.toISOString()}(a.created_at),protocol:String(f.protocol||"http/1.1"),client:{ip:a.client_ip||"",port:m(a.client_port),userAgent:a.client_user_agent||"",proxyUser:f.proxyUser||null},provider:a.provider||"other",host:f.host||a.client_host||a.source_host||"",port:Number(f.port||443),method:f.method||"REQUEST",path:f.path||a.endpoint||"",model:a.model||null,usage:(b=Number(f.inputTokens||0),c=Number(f.outputTokens||0),d=Number(f.cacheReadTokens||0),e=Number(f.cacheCreationTokens||0),b||c||d||e?{inputTokens:b,outputTokens:c,cacheReadTokens:d,cacheCreationTokens:e,reasoningTokens:Number(f.reasoningTokens||0),totalTokens:Number(f.totalTokens||0)||b+c+d+e,complete:!0===f.usageComplete,source:f.usageSource||null,stopReason:f.stopReason||null}:null),status:m(a.status_code),durationMs:Number(f.durationMs||0),error:a.error_text||null,request:{headers:{},body:a.prompt_text||"",capturedBytes:g,totalBytes:h,wireSha256:f.requestWireSha256||null,truncated:!0===f.requestTruncated,previewOnly:!0},response:{headers:{},body:a.response_text||"",capturedBytes:i,totalBytes:j,wireSha256:f.responseWireSha256||null,truncated:!0===f.responseTruncated,previewOnly:!0},persistenceSource:"mysql"}}(b),d=a.id,e=String(b.stage||"");if(e===g){let b=c.get(d);(!b||n(a.timestamp)>=n(b.timestamp))&&c.set(d,a);continue}let f=c.get(d);f||(f={...a,request:{...a.request,body:""},response:{...a.response,body:""}},c.set(d,f)),n(a.timestamp)>n(f.timestamp)&&(f.timestamp=a.timestamp),!f.model&&a.model&&(f.model=a.model),!f.usage&&a.usage&&(f.usage=a.usage),!f.host&&a.host&&(f.host=a.host),!f.path&&a.path&&(f.path=a.path),e===h?f.request=a.request:e===i&&(f.response=a.response,f.status=a.status,f.error=a.error)}return[...c.values()].sort((a,b)=>n(b.timestamp)-n(a.timestamp)).slice(0,b)}(o||[],b),available:!0,reason:null,error:null};return c.cache={expiresAt:d+3e3,limit:b,result:p},p}catch(e){let a={events:[],available:!1,reason:null,error:e?.message||String(e)};return c.cache={expiresAt:d+3e3,limit:b,result:a},a}}var p=c(49083);let q="nodejs",r="force-dynamic",s=0,t={"Cache-Control":"no-store"};async function u(){let{response:a}=await (0,e.hH)();return a}function v(a){let b=Date.parse(a?.timestamp||0);return Number.isFinite(b)?b:0}function w(a){return{label:a,requests:0,inputTokens:0,outputTokens:0,cacheReadTokens:0,cacheCreationTokens:0,totalTokens:0,cost:0}}function x(a,b){a.requests+=1,a.inputTokens+=Number(b.inputTokens||0),a.outputTokens+=Number(b.outputTokens||0),a.cacheReadTokens+=Number(b.cacheReadTokens||0),a.cacheCreationTokens+=Number(b.cacheCreationTokens||0),a.totalTokens+=Number(b.totalTokens||0)}function y(a,b=12){return[...a.values()].sort((a,b)=>b.totalTokens-a.totalTokens).slice(0,b)}async function z(a){let b=w("all"),d=new Map,e=new Map,f=new Map,g=0,h=[];for(let b of a||[]){let a=b?.usage;a&&Number(a.totalTokens||0)&&(!1===a.complete&&(g+=1),h.push({usage:a,modelKey:b.model||a.model||"unknown",providerKey:b.provider||"other",toolKey:function(a){let b=String(a||"").toLowerCase();return b.includes("claude")?"claude-code":b.includes("codex")?"codex":"other"}(b.client?.userAgent)}))}if(!h.length)return{totals:b,byModel:[],byProvider:[],bySourceTool:[],incompleteUsageCount:0};let i=null,j=null;try{let[a,b]=await Promise.all([Promise.resolve().then(c.bind(c,97914)),c.e(7341).then(c.bind(c,57341))]);i=a.getPricingForModel,j=b.calculateCostFromTokens}catch{}let k=new Map;for(let a of h){let c=0;if(i&&"unknown"!==a.modelKey){k.has(a.modelKey)||k.set(a.modelKey,await i(null,a.modelKey).catch(()=>null));let b=k.get(a.modelKey);if(b){let d=j({input_tokens:a.usage.inputTokens,prompt_tokens:a.usage.inputTokens,output_tokens:a.usage.outputTokens,completion_tokens:a.usage.outputTokens,cache_read_input_tokens:a.usage.cacheReadTokens,cache_creation_input_tokens:a.usage.cacheCreationTokens},b);Number.isFinite(d)&&d>0&&(c=d)}}for(let[b,g]of[[d,a.modelKey],[e,a.providerKey],[f,a.toolKey]]){b.has(g)||b.set(g,w(g));let d=b.get(g);x(d,a.usage),d.cost+=c}x(b,a.usage),b.cost+=c}return{totals:b,byModel:y(d),byProvider:y(e),bySourceTool:y(f),incompleteUsageCount:g}}async function A(){let a=await (0,p.runSelfTest)();if(a.ok)return{...a,attempts:1,recoveredAfterRetry:!1};await new Promise(a=>setTimeout(a,250));let b=await (0,p.runSelfTest)();return{...b,attempts:2,recoveredAfterRetry:!0===b.ok,firstAttempt:{passed:a.passed,total:a.total,durationMs:a.durationMs,failed:(a?.checks||[]).filter(a=>!a.ok).map(a=>({name:a.name,detail:a.detail||""}))}}}async function B(a){let b=await u();if(b)return b;try{let{searchParams:b}=new URL(a.url),c=Math.max(1,Math.min(500,Number(b.get("limit"))||50)),e=await (0,p.getSnapshot)(c),f=e.events||[],g=await o(c),h=function(a,...b){let c=new Map;for(let a of b)for(let b of a||[]){if(!b)continue;let a=String(b.id||`${b.timestamp||""}:${b.host||""}:${b.path||""}`),d=c.get(a);(!d||v(b)>v(d))&&c.set(a,b)}return[...c.values()].sort((a,b)=>v(b)-v(a)).slice(0,a)}(c,f,g.events),i=e.status?.auditStore||{},j={...e.status,auditStore:{...i,recentRead:{localCount:f.length,mysqlCount:g.events?.length||0,mergedCount:h.length,mysqlAvailable:!0===g.available,mysqlCached:!0===g.cached,mysqlReason:g.reason||null,mysqlError:g.error||null}}},k=await z(h);return d.NextResponse.json({success:!0,...e,status:j,events:h,usageSummary:k},{headers:t})}catch(a){return d.NextResponse.json({error:a.message||"Failed to read Audit Proxy state"},{status:500,headers:t})}}async function C(a){let b=await u();if(b)return b;try{let b=await a.json(),c=(0,p.updateConfig)(b?.config||b||{});return d.NextResponse.json({success:!0,config:c},{headers:t})}catch(b){let a=/Stop or restart/.test(b.message||"")?409:400;return d.NextResponse.json({error:b.message||"Failed to save Audit Proxy configuration"},{status:a,headers:t})}}async function D(a){let b=await u();if(b)return b;try{let b=await a.json().catch(()=>({})),c=String(b?.action||"").trim().toLowerCase();if("start"===c)return d.NextResponse.json({success:!0,status:await (0,p.startProxy)(b.config||null)},{headers:t});if("stop"===c)return d.NextResponse.json({success:!0,status:await (0,p.stopProxy)()},{headers:t});if("restart"===c)return d.NextResponse.json({success:!0,status:await (0,p.restartProxy)(b.config||null)},{headers:t});if("save-client-host"===c){let a=(0,p.updateClientProxyHost)(b.clientProxyHost);return d.NextResponse.json({success:!0,config:a},{headers:t})}if("save-proxy-auth"===c){let a=await (0,p.updateProxyAuth)({enabled:b?.enabled===!0,users:b?.users});return d.NextResponse.json({success:!0,...a},{headers:t})}if("save-ip-filter"===c){let a=await (0,p.updateClientIpFilter)({enabled:!0===b.enabled,allowedClientIps:b.allowedClientIps});return d.NextResponse.json({success:!0,...a},{headers:t})}if("test"===c){let a=await A();return d.NextResponse.json({success:!0,test:a},{headers:t})}if("clear-logs"===c)return await (0,p.clearAudit)(),d.NextResponse.json({success:!0},{headers:t});return d.NextResponse.json({error:"Unsupported Audit Proxy action"},{status:400,headers:t})}catch(c){let a=c.message||"Audit Proxy action failed",b=/Invalid client IP|Invalid CIDR|requires at least one|not allowed|Invalid CONNECT|Invalid username|Duplicate username|requires a password|Password for .* must be/.test(a)?400:500;return d.NextResponse.json({error:a},{status:b,headers:t})}}},87550:a=>{"use strict";a.exports=require("better-sqlite3")},90173:(a,b,c)=>{"use strict";let d=c(29021),e=c(33873),f=c(4984),g=c(55511),{AUDIT_LOG_PATH:h,AUDIT_LOG_DIR:i,ensureAuditDir:j,loadConfig:k}=c(43096),{redactObject:l,scrubString:m}=c(48350),{toTokensJson:n,totalInputTokens:o}=c(86455),p="audit-proxy",q="client",r="provider_response",s={expiresAt:0,config:null},t=null,u=null,v=null,w=null,x=null,y="",z=Promise.resolve(),A=Promise.resolve(),B=0,C=null,D=new Map,E={queue:[],workers:new Set,activeWorkers:0,clearing:!1,enqueued:0,written:0,dropped:0,failed:0,mysqlWritten:0,mysqlFailed:0,usageWritten:0,usageFailed:0,tokensSeen:0,lastError:null,lastWrittenAt:null};function F(a){let b=Date.now();b-B<6e4||(B=b,console.warn(`[AuditProxy][PromptDB] ${a}`))}function G(a){E.lastError=String(a||"Audit store failure"),console.warn(`[AuditProxy][Store] ${E.lastError}`)}async function H(){let a=Date.now();if(s.expiresAt>a)return s.config;t||(t=Promise.resolve().then(c.bind(c,45903)));let b=await t,d=await b.getPromptLogDbConfig();return s={expiresAt:a+5e3,config:d},d}async function I(a){let b=g.createHash("sha256").update(JSON.stringify({host:a.host,port:Number(a.port||3306),database:a.database,username:a.username,password:a.password,ssl:!!a.ssl})).digest("hex");if(x&&y===b)return x;let d=z.then(async()=>{if(x&&y===b)return x;if(x){try{await x.end()}catch{}x=null,y=""}let d=await c.e(8491).then(c.t.bind(c,38491,19)),e=(d.default||d).createPool({host:a.host,port:Number(a.port||3306),database:a.database,user:a.username,password:a.password,ssl:a.ssl?{rejectUnauthorized:!0}:void 0,connectTimeout:3e3,waitForConnections:!0,connectionLimit:4,maxIdle:4,idleTimeout:6e4,queueLimit:100,enableKeepAlive:!0,keepAliveInitialDelay:3e4});return x=e,y=b,e});return z=d.then(()=>void 0,()=>void 0),d}function J(a){let b=a?new Date(a):new Date;return(Number.isNaN(b.getTime())?new Date:b).toISOString().replace("T"," ").replace("Z","")}function K(a){if("string"!=typeof a)return a;let b=a.trim();if(!b||!b.startsWith("{")&&!b.startsWith("["))return a;try{return JSON.parse(b)}catch{return a}}function L(a,b=0,c=[]){if(null==a||b>12||c.join("\n").length>=2e5)return c;if("string"==typeof a)return a.trim()&&c.push(a.trim()),c;if(Array.isArray(a)){for(let d of a)L(d,b+1,c);return c}if("object"!=typeof a)return c;for(let[d,e]of Object.entries(a)){let a=d.toLowerCase();["content","text","prompt","input","message","output_text"].includes(a)?L(e,b+1,c):b<8&&["messages","contents","parts","body","request","payload","response","choices","output","item","items"].includes(a)&&L(e,b+1,c)}return c}function M(a){let b=String(a||"").toLowerCase();return b.includes("claude")?{tool:"claude-code",label:"Claude Code"}:b.includes("codex")?{tool:"codex",label:"Codex"}:{tool:"audit-proxy",label:"Enterprise AI Audit Proxy"}}async function N(a,b,c,d){if(!c)return null;let e=g.createHash("sha256").update(c).digest("hex"),f=Buffer.byteLength(String(c||""),"utf8");return await a.query(`INSERT INTO prompt_log_payloads (
       payload_hash, created_at, last_seen_at, content_type, payload_size_bytes, ref_count, payload_json
     ) VALUES (?, ?, ?, ?, ?, 1, CAST(? AS JSON))
     ON DUPLICATE KEY UPDATE
@@ -64,10 +69,10 @@ Sec-WebSocket-Version: 13\r
       response_payload_hash, response_payload_size_bytes,
       prompt_text, full_request_json,
       response_text, status_code, error_text, meta_json
-    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, CAST(? AS JSON), ?, ?, ?, CAST(? AS JSON))`,[b.id,b.createdAt,b.sessionId,b.sourceFormat,b.targetFormat,b.model,b.endpoint,b.stage,b.providerUrl,b.provider,b.accountName,b.connectionId,b.displayModel,b.clientIp,b.clientPort,b.clientUserAgent,b.clientHost,b.sourceTool,b.sourceToolLabel,b.sourceHost,b.contentMode,b.payloadHash,b.payloadSizeBytes,b.responsePayloadHash,b.responsePayloadSizeBytes,b.promptText,b.fullRequestJson,b.responseText,b.statusCode,b.errorText,JSON.stringify(b.meta||{})])}async function P(a){let b=null;try{let c,d,e,f=await H();if(!f?.enabled)return{written:!1,disabled:!0};if("mysql"!==String(f.type||"").toLowerCase())return F(`Audit mirroring requires MySQL; current type is ${f.type||"unknown"}`),{written:!1,unsupported:!0};let h=function(a){try{let b=JSON.parse(JSON.stringify(a??null)),c=l(b);return JSON.parse(m(JSON.stringify(c)))}catch{return m(String(a??""))}}(a),{requestPayload:i,responsePayload:j}=(c=h.request||{},d=h.response||{},{requestPayload:{timestamp:h.timestamp,protocol:h.protocol||"http/1.1",method:h.method,endpoint:h.path,headers:c.headers||{},body:K(c.body),capturedBytes:Number(c.capturedBytes||0),totalBytes:Number(c.totalBytes||0),wireSha256:c.wireSha256||null,truncated:!0===c.truncated},responsePayload:{timestamp:h.timestamp,protocol:h.protocol||"http/1.1",status:h.status,headers:d.headers||{},body:K(d.body),capturedBytes:Number(d.capturedBytes||0),totalBytes:Number(d.totalBytes||0),wireSha256:d.wireSha256||null,truncated:!0===d.truncated}}),k=JSON.stringify(i),n=JSON.stringify(j),o=Math.max(0,Number(h.durationMs||0)),s=new Date(h.timestamp||Date.now()),t=Number.isNaN(s.getTime())?new Date:s,u=new Date(t.getTime()-o),v=J(u),w=J(t),x=M(h.client?.userAgent),y=String(h.provider||"other"),z=h.model?String(h.model):null,A=String(h.host||""),B=Number(h.port||443),C=String(h.path||""),D=A?`https://${A}${443!==B?`:${B}`:""}${C}`:null,E=await I(f);b=await E.getConnection(),await b.beginTransaction();let G=await N(b,v,k,"request_json"),P=await N(b,w,n,"response_json"),Q={source:p,auditEventId:h.id||null,protocol:h.protocol||"http/1.1",host:A||null,port:B,method:h.method||null,path:C||null,durationMs:o,requestCapturedBytes:Number(h.request?.capturedBytes||0),requestTotalBytes:Number(h.request?.totalBytes||0),requestWireSha256:h.request?.wireSha256||null,requestTruncated:h.request?.truncated===!0,responseCapturedBytes:Number(h.response?.capturedBytes||0),responseTotalBytes:Number(h.response?.totalBytes||0),responseWireSha256:h.response?.wireSha256||null,responseTruncated:h.response?.truncated===!0,payloadHash:G?.payloadHash||null,payloadSizeBytes:G?.payloadSizeBytes||0,payloadStorage:G?"prompt_log_payloads":null,responsePayloadHash:P?.payloadHash||null,responsePayloadSizeBytes:P?.payloadSizeBytes||0,responsePayloadStorage:P?"prompt_log_payloads":null,...h.usage?{inputTokens:Number(h.usage.inputTokens||0),outputTokens:Number(h.usage.outputTokens||0),cacheReadTokens:Number(h.usage.cacheReadTokens||0),cacheCreationTokens:Number(h.usage.cacheCreationTokens||0),reasoningTokens:Number(h.usage.reasoningTokens||0),totalTokens:Number(h.usage.totalTokens||0),usageComplete:!0===h.usage.complete,usageSource:h.usage.source||null,stopReason:h.usage.stopReason||null}:{}},R=String(h.id||g.randomUUID()),S={sessionId:`audit-${R}`,sourceFormat:y,targetFormat:y,model:z,endpoint:C||null,providerUrl:D,provider:y,accountName:null,connectionId:null,displayModel:z?`${y}/${z}`:null,clientIp:h.client?.ip||null,clientPort:h.client?.port!=null?String(h.client.port):null,clientUserAgent:h.client?.userAgent||null,clientHost:A||null,sourceTool:x.tool,sourceToolLabel:x.label,sourceHost:A||null};return await O(b,{...S,id:`${R}:request`,createdAt:v,stage:q,contentMode:h.request?.body?"raw_json_preview":"metadata_only",payloadHash:G?.payloadHash||null,payloadSizeBytes:G?.payloadSizeBytes||0,responsePayloadHash:null,responsePayloadSizeBytes:0,promptText:(e=L(i?.body??i??{}).join("\n\n"))?e.slice(0,2e3):null,fullRequestJson:null,responseText:null,statusCode:null,errorText:null,meta:{...Q,auditDirection:"request"}}),await O(b,{...S,id:`${R}:response`,createdAt:w,stage:r,contentMode:h.response?.body?"raw_json_preview":"metadata_only",payloadHash:null,payloadSizeBytes:0,responsePayloadHash:P?.payloadHash||null,responsePayloadSizeBytes:P?.payloadSizeBytes||0,promptText:null,fullRequestJson:null,responseText:function(a){let b=a?.body;if("string"==typeof b)return b.slice(0,2e3)||null;let c=L(b??a??{}).join("\n\n");return c?c.slice(0,2e3):null}(j),statusCode:null!=h.status?Number(h.status):null,errorText:h.error||null,meta:{...Q,auditDirection:"response"}}),await b.commit(),{written:!0,rowsWritten:2}}catch(a){if(b)try{await b.rollback()}catch{}return F(`Failed to mirror audit event to prompt_logs: ${a.message||a}`),{written:!1,error:a.message||String(a)}}finally{try{b?.release()}catch{}}}async function Q(){return u||(u=Promise.resolve().then(c.bind(c,77638))),u}async function R(a,b,d){if(!b||!d)return 0;try{w||(w=Promise.resolve().then(c.bind(c,97914))),v||(v=c.e(7341).then(c.bind(c,57341)));let[e,f]=await Promise.all([w,v]),g=await e.getPricingForModel(a,b);if(!g)return 0;let h=f.calculateCostFromTokens(d,g);return Number.isFinite(h)&&h>0?h:0}catch{return 0}}async function S(a,b){let c=a?.usage;if(!c||!(c.inputTokens||c.outputTokens||c.cacheReadTokens||c.cacheCreationTokens))return{written:!1,skipped:!0};try{let d=await Q();if(!await d.isMysqlObservabilityEnabled())return{written:!1,disabled:!0};let e=String(a.provider||"other"),f=a.model||c.model||null,g=n(c),h=await R(e,f,g),i=a.error||a.status&&a.status>=400?"error":"success";return{written:!!await d.saveMysqlUsageEvent({timestamp:a.timestamp||new Date().toISOString(),provider:e,model:f,endpoint:a.path||null,requestId:a.id||null,sessionId:a.id?`audit-${a.id}`:null,clientIp:a.client?.ip||null,clientIpNormalized:a.client?.ip||null,clientHost:a.host||null,clientUserAgent:a.client?.userAgent||null,sourceTool:b.tool,sourceToolLabel:b.label,sourceHost:a.host||null,latencyMs:Math.max(0,Number(a.durationMs||0)),statusCode:null!=a.status?Number(a.status):null,errorMessageShort:a.error?String(a.error).slice(0,500):null,isStreaming:!0===c.streaming,promptTokens:o(c),completionTokens:c.outputTokens,totalTokens:c.totalTokens,cachedTokens:c.cacheReadTokens,cacheCreationTokens:c.cacheCreationTokens,reasoningTokens:c.reasoningTokens,cost:h,status:i,tokens:g,meta:{source:p,auditEventId:a.id||null,host:a.host||null,method:a.method||null,stopReason:c.stopReason||null,usageComplete:!0===c.complete,usageSource:c.source||null,responseTruncated:a.response?.truncated===!0}})}}catch(a){return F(`Failed to mirror audit usage to usage_events: ${a.message||a}`),{written:!1,error:a.message||String(a)}}}async function T(a,b){let c;j();let f=(Number.isNaN((c=a?new Date(a):new Date).getTime())?new Date:c).toISOString().slice(0,10),g=D.get(f);if(!g){let a=await d.promises.readdir(i).catch(()=>[]),b=RegExp(`^audit-${f.replace(/-/g,"\\-")}(?:\\.(\\d+))?\\.jsonl$`),c=0;for(let d of a){let a=d.match(b);a&&(c=Math.max(c,Number(a[1]||0)))}let h=e.join(i,`audit-${f}${c?`.${c}`:""}.jsonl`),j=await d.promises.stat(h).catch(()=>null);g={segment:c,filePath:h,size:j?.size||0},D.set(f,g)}return g.size>0&&g.size+b>0x8000000&&(g={segment:g.segment+1,filePath:e.join(i,`audit-${f}.${g.segment+1}.jsonl`),size:0},D.set(f,g)),g}async function U(a){let b=`${JSON.stringify(a)}
+    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, CAST(? AS JSON), ?, ?, ?, CAST(? AS JSON))`,[b.id,b.createdAt,b.sessionId,b.sourceFormat,b.targetFormat,b.model,b.endpoint,b.stage,b.providerUrl,b.provider,b.accountName,b.connectionId,b.displayModel,b.clientIp,b.clientPort,b.clientUserAgent,b.clientHost,b.sourceTool,b.sourceToolLabel,b.sourceHost,b.contentMode,b.payloadHash,b.payloadSizeBytes,b.responsePayloadHash,b.responsePayloadSizeBytes,b.promptText,b.fullRequestJson,b.responseText,b.statusCode,b.errorText,JSON.stringify(b.meta||{})])}async function P(a){let b=null;try{let c,d,e,f=await H();if(!f?.enabled)return{written:!1,disabled:!0};if("mysql"!==String(f.type||"").toLowerCase())return F(`Audit mirroring requires MySQL; current type is ${f.type||"unknown"}`),{written:!1,unsupported:!0};let h=function(a){try{let b=JSON.parse(JSON.stringify(a??null)),c=l(b);return JSON.parse(m(JSON.stringify(c)))}catch{return m(String(a??""))}}(a),{requestPayload:i,responsePayload:j}=(c=h.request||{},d=h.response||{},{requestPayload:{timestamp:h.timestamp,protocol:h.protocol||"http/1.1",method:h.method,endpoint:h.path,headers:c.headers||{},body:K(c.body),capturedBytes:Number(c.capturedBytes||0),totalBytes:Number(c.totalBytes||0),wireSha256:c.wireSha256||null,truncated:!0===c.truncated},responsePayload:{timestamp:h.timestamp,protocol:h.protocol||"http/1.1",status:h.status,headers:d.headers||{},body:K(d.body),capturedBytes:Number(d.capturedBytes||0),totalBytes:Number(d.totalBytes||0),wireSha256:d.wireSha256||null,truncated:!0===d.truncated}}),k=JSON.stringify(i),n=JSON.stringify(j),o=Math.max(0,Number(h.durationMs||0)),s=new Date(h.timestamp||Date.now()),t=Number.isNaN(s.getTime())?new Date:s,u=new Date(t.getTime()-o),v=J(u),w=J(t),x=M(h.client?.userAgent),y=String(h.provider||"other"),z=h.model?String(h.model):null,A=String(h.host||""),B=Number(h.port||443),C=String(h.path||""),D=A?`https://${A}${443!==B?`:${B}`:""}${C}`:null,E=await I(f);b=await E.getConnection(),await b.beginTransaction();let G=await N(b,v,k,"request_json"),P=await N(b,w,n,"response_json"),Q={source:p,auditEventId:h.id||null,protocol:h.protocol||"http/1.1",host:A||null,port:B,method:h.method||null,path:C||null,proxyUser:h.client?.proxyUser||null,durationMs:o,requestCapturedBytes:Number(h.request?.capturedBytes||0),requestTotalBytes:Number(h.request?.totalBytes||0),requestWireSha256:h.request?.wireSha256||null,requestTruncated:h.request?.truncated===!0,responseCapturedBytes:Number(h.response?.capturedBytes||0),responseTotalBytes:Number(h.response?.totalBytes||0),responseWireSha256:h.response?.wireSha256||null,responseTruncated:h.response?.truncated===!0,payloadHash:G?.payloadHash||null,payloadSizeBytes:G?.payloadSizeBytes||0,payloadStorage:G?"prompt_log_payloads":null,responsePayloadHash:P?.payloadHash||null,responsePayloadSizeBytes:P?.payloadSizeBytes||0,responsePayloadStorage:P?"prompt_log_payloads":null,...h.usage?{inputTokens:Number(h.usage.inputTokens||0),outputTokens:Number(h.usage.outputTokens||0),cacheReadTokens:Number(h.usage.cacheReadTokens||0),cacheCreationTokens:Number(h.usage.cacheCreationTokens||0),reasoningTokens:Number(h.usage.reasoningTokens||0),totalTokens:Number(h.usage.totalTokens||0),usageComplete:!0===h.usage.complete,usageSource:h.usage.source||null,stopReason:h.usage.stopReason||null}:{}},R=String(h.id||g.randomUUID()),S={sessionId:`audit-${R}`,sourceFormat:y,targetFormat:y,model:z,endpoint:C||null,providerUrl:D,provider:y,accountName:null,connectionId:null,displayModel:z?`${y}/${z}`:null,clientIp:h.client?.ip||null,clientPort:h.client?.port!=null?String(h.client.port):null,clientUserAgent:h.client?.userAgent||null,clientHost:A||null,sourceTool:x.tool,sourceToolLabel:x.label,sourceHost:A||null};return await O(b,{...S,id:`${R}:request`,createdAt:v,stage:q,contentMode:h.request?.body?"raw_json_preview":"metadata_only",payloadHash:G?.payloadHash||null,payloadSizeBytes:G?.payloadSizeBytes||0,responsePayloadHash:null,responsePayloadSizeBytes:0,promptText:(e=L(i?.body??i??{}).join("\n\n"))?e.slice(0,2e3):null,fullRequestJson:null,responseText:null,statusCode:null,errorText:null,meta:{...Q,auditDirection:"request"}}),await O(b,{...S,id:`${R}:response`,createdAt:w,stage:r,contentMode:h.response?.body?"raw_json_preview":"metadata_only",payloadHash:null,payloadSizeBytes:0,responsePayloadHash:P?.payloadHash||null,responsePayloadSizeBytes:P?.payloadSizeBytes||0,promptText:null,fullRequestJson:null,responseText:function(a){let b=a?.body;if("string"==typeof b)return b.slice(0,2e3)||null;let c=L(b??a??{}).join("\n\n");return c?c.slice(0,2e3):null}(j),statusCode:null!=h.status?Number(h.status):null,errorText:h.error||null,meta:{...Q,auditDirection:"response"}}),await b.commit(),{written:!0,rowsWritten:2}}catch(a){if(b)try{await b.rollback()}catch{}return F(`Failed to mirror audit event to prompt_logs: ${a.message||a}`),{written:!1,error:a.message||String(a)}}finally{try{b?.release()}catch{}}}async function Q(){return u||(u=Promise.resolve().then(c.bind(c,77638))),u}async function R(a,b,d){if(!b||!d)return 0;try{w||(w=Promise.resolve().then(c.bind(c,97914))),v||(v=c.e(7341).then(c.bind(c,57341)));let[e,f]=await Promise.all([w,v]),g=await e.getPricingForModel(a,b);if(!g)return 0;let h=f.calculateCostFromTokens(d,g);return Number.isFinite(h)&&h>0?h:0}catch{return 0}}async function S(a,b){let c=a?.usage;if(!c||!(c.inputTokens||c.outputTokens||c.cacheReadTokens||c.cacheCreationTokens))return{written:!1,skipped:!0};try{let d=await Q();if(!await d.isMysqlObservabilityEnabled())return{written:!1,disabled:!0};let e=String(a.provider||"other"),f=a.model||c.model||null,g=n(c),h=await R(e,f,g),i=a.error||a.status&&a.status>=400?"error":"success";return{written:!!await d.saveMysqlUsageEvent({timestamp:a.timestamp||new Date().toISOString(),provider:e,model:f,endpoint:a.path||null,requestId:a.id||null,sessionId:a.id?`audit-${a.id}`:null,clientIp:a.client?.ip||null,clientIpNormalized:a.client?.ip||null,clientHost:a.host||null,clientUserAgent:a.client?.userAgent||null,sourceTool:b.tool,sourceToolLabel:b.label,sourceHost:a.host||null,latencyMs:Math.max(0,Number(a.durationMs||0)),statusCode:null!=a.status?Number(a.status):null,errorMessageShort:a.error?String(a.error).slice(0,500):null,isStreaming:!0===c.streaming,promptTokens:o(c),completionTokens:c.outputTokens,totalTokens:c.totalTokens,cachedTokens:c.cacheReadTokens,cacheCreationTokens:c.cacheCreationTokens,reasoningTokens:c.reasoningTokens,cost:h,status:i,tokens:g,meta:{source:p,auditEventId:a.id||null,host:a.host||null,method:a.method||null,stopReason:c.stopReason||null,usageComplete:!0===c.complete,usageSource:c.source||null,responseTruncated:a.response?.truncated===!0}})}}catch(a){return F(`Failed to mirror audit usage to usage_events: ${a.message||a}`),{written:!1,error:a.message||String(a)}}}async function T(a,b){let c;j();let f=(Number.isNaN((c=a?new Date(a):new Date).getTime())?new Date:c).toISOString().slice(0,10),g=D.get(f);if(!g){let a=await d.promises.readdir(i).catch(()=>[]),b=RegExp(`^audit-${f.replace(/-/g,"\\-")}(?:\\.(\\d+))?\\.jsonl$`),c=0;for(let d of a){let a=d.match(b);a&&(c=Math.max(c,Number(a[1]||0)))}let h=e.join(i,`audit-${f}${c?`.${c}`:""}.jsonl`),j=await d.promises.stat(h).catch(()=>null);g={segment:c,filePath:h,size:j?.size||0},D.set(f,g)}return g.size>0&&g.size+b>0x8000000&&(g={segment:g.segment+1,filePath:e.join(i,`audit-${f}.${g.segment+1}.jsonl`),size:0},D.set(f,g)),g}async function U(a){let b=`${JSON.stringify(a)}
 `,c=Buffer.byteLength(b),e=await T(a.timestamp,c);return await d.promises.appendFile(e.filePath,b,{encoding:"utf8",mode:384}),e.size+=c,e.filePath}async function V(a){try{let b,c=await a.finalize(),d=(A=(b=A.then(()=>U(c))).then(()=>void 0,()=>void 0),b).catch(a=>(G(`Local JSONL write failed: ${a.message||a}`),null)),e=P(c),f=S(c,M(c.client?.userAgent)),[,g,h]=await Promise.all([d,e,f]);g?.written?E.mysqlWritten+=1:g?.error&&(E.mysqlFailed+=1),h?.written?E.usageWritten+=1:h?.error&&(E.usageFailed+=1),c.usage&&(E.tokensSeen+=Number(c.usage.totalTokens||0)),E.written+=1,E.lastWrittenAt=new Date().toISOString()}catch(a){E.failed+=1,G(a.message||a)}}async function W(){E.activeWorkers+=1;try{for(;!E.clearing;){let a=E.queue.shift();if(!a)break;await V(a)}}finally{E.activeWorkers=Math.max(0,E.activeWorkers-1)}}function X(){if(!E.clearing)for(;E.queue.length&&E.activeWorkers<4;){let a;a=W().finally(()=>{E.workers.delete(a),!E.clearing&&E.queue.length&&setImmediate(X)}),E.workers.add(a)}}function Y(a){return"function"==typeof a&&(E.queue.length>=1e3?(E.dropped+=1,G(`Audit queue full; dropped event ${E.dropped}`),!1):(E.queue.push({finalize:a,enqueuedAt:Date.now()}),E.enqueued+=1,E.clearing||setImmediate(X),!0))}async function Z(){j();let a=(await d.promises.readdir(i).catch(()=>[])).filter(a=>/^audit-\d{4}-\d{2}-\d{2}(?:\.\d+)?\.jsonl$/.test(a)).sort((a,b)=>b.localeCompare(a,void 0,{numeric:!0})).map(a=>e.join(i,a));return d.existsSync(h)&&a.push(h),a}async function $(a,b){let c=await d.promises.stat(a).catch(()=>null);if(!c?.size||b<=0)return[];let e=await d.promises.open(a,"r");try{let a=c.size,d=Buffer.alloc(0),f=0;for(;a>0&&d.length<0x4000000&&f<=b;){let b=Math.min(262144,a,0x4000000-d.length);a-=b;let c=Buffer.alloc(b);await e.read(c,0,b,a),d=Buffer.concat([c,d]),f+=c.reduce((a,b)=>a+ +(10===b),0)}let g=d.toString("utf8");if(a>0){let a=g.indexOf("\n");g=a>=0?g.slice(a+1):""}return g.split("\n").filter(Boolean).slice(-b).reverse().map(a=>{try{return JSON.parse(a)}catch{return null}}).filter(Boolean)}finally{await e.close()}}async function _(a=50){let b=Math.max(1,Math.min(1e3,Number(a)||50)),c=[];for(let a of(await Z())){if(c.length>=b)break;let d=await $(a,b-c.length);c.push(...d)}return c.slice(0,b)}async function aa(a){if(!d.existsSync(h))return;let b=`${h}.tmp`,c=d.createReadStream(h,{encoding:"utf8"}),e=d.createWriteStream(b,{encoding:"utf8",mode:384});for await(let b of f.createInterface({input:c,crlfDelay:1/0}))if(b)try{let c=JSON.parse(b);Date.parse(c.timestamp||0)>=a&&e.write(`${b}
 `)}catch{}await new Promise((a,b)=>{e.end(a),e.once("error",b)}),await d.promises.rename(b,h)}async function ab(){j();let a=k(),b=Date.now()-24*a.retentionDays*36e5;for(let a of(await d.promises.readdir(i).catch(()=>[]))){if(!/^audit-\d{4}-\d{2}-\d{2}(?:\.\d+)?\.jsonl$/.test(a))continue;let c=e.join(i,a),f=await d.promises.stat(c).catch(()=>null);if(f&&f.mtimeMs<b)for(let[a,b]of(await d.promises.unlink(c).catch(()=>{}),D.entries()))b.filePath===c&&D.delete(a)}await aa(b).catch(a=>G(`Legacy log prune failed: ${a.message||a}`))}async function ac(a=5e3){let b=Date.now()+Math.max(0,Number(a)||0);for(;(E.queue.length||E.activeWorkers)&&Date.now()<b;){X();let a=[...E.workers];a.length?await Promise.race([Promise.allSettled(a),new Promise(a=>setTimeout(a,50))]):await new Promise(a=>setTimeout(a,10))}return 0===E.queue.length&&0===E.activeWorkers}async function ad(){let a=null;try{let b=await H();if(!b?.enabled||"mysql"!==String(b.type||"").toLowerCase())return;let c=await I(b);a=await c.getConnection(),await a.beginTransaction();let d="(stage = ? OR (session_id LIKE 'audit-%' AND stage IN (?, ?)))",[e]=await a.query(`SELECT payload_hash, response_payload_hash FROM prompt_logs WHERE ${d}`,[p,q,r]);await a.query(`DELETE FROM prompt_logs WHERE ${d}`,[p,q,r]);let f=new Map;for(let a of e||[])for(let b of[a.payload_hash,a.response_payload_hash]){let a=String(b||"").trim();a&&f.set(a,(f.get(a)||0)+1)}for(let[b,c]of f.entries())await a.query("UPDATE prompt_log_payloads SET ref_count = GREATEST(ref_count - ?, 0) WHERE payload_hash = ?",[c,b]),await a.query(`DELETE p FROM prompt_log_payloads p
           WHERE p.payload_hash = ?
             AND p.last_seen_at < UTC_TIMESTAMP(3) - INTERVAL 5 MINUTE
             AND NOT EXISTS (SELECT 1 FROM prompt_logs r WHERE r.payload_hash = p.payload_hash)
-            AND NOT EXISTS (SELECT 1 FROM prompt_logs r WHERE r.response_payload_hash = p.payload_hash)`,[b]);await a.commit()}catch(b){if(a)try{await a.rollback()}catch{}F(`Failed to clear mirrored audit rows: ${b.message||b}`)}finally{try{a?.release()}catch{}}}a.exports={appendAudit:function(a){return Y(async()=>a)},enqueueAuditJob:Y,readRecent:_,clearAudit:async function a(){E.clearing=!0,E.queue.length=0,E.workers.size&&await Promise.allSettled([...E.workers]),j();let a=await d.promises.readdir(i).catch(()=>[]);await Promise.all(a.filter(a=>a.endsWith(".jsonl")).map(a=>d.promises.unlink(e.join(i,a)).catch(()=>{}))),await d.promises.writeFile(h,"",{mode:384}).catch(()=>{}),D.clear(),await ad(),E.clearing=!1,E.queue.length&&setImmediate(X)},pruneExpired:ab,startAuditMaintenance:function(){C||(C=setInterval(()=>void ab(),36e5),C.unref?.())},stopAuditMaintenance:function(){C&&clearInterval(C),C=null},flushAuditQueue:ac,getAuditStoreStats:function(){return{queueDepth:E.queue.length,queueLimit:1e3,workerRunning:E.activeWorkers>0,workerConcurrency:4,activeWorkers:E.activeWorkers,mysqlPoolConnections:4,enqueued:E.enqueued,written:E.written,dropped:E.dropped,failed:E.failed,mysqlWritten:E.mysqlWritten,mysqlFailed:E.mysqlFailed,usageWritten:E.usageWritten,usageFailed:E.usageFailed,tokensSeen:E.tokensSeen,lastError:E.lastError,lastWrittenAt:E.lastWrittenAt,logDirectory:i}},appendPromptLog:P,appendUsageEvent:S}},91645:a=>{a.exports=require("net")},94735:a=>{a.exports=require("events")},98586:a=>{let b=[{id:"claude-code",label:"Claude Code",patterns:["claude-cli","claude-code","anthropic"]},{id:"codex",label:"OpenAI Codex",patterns:["codex_cli","codex-cli","codex"]},{id:"gemini-cli",label:"Gemini CLI",patterns:["gemini-cli","google-genai"]},{id:"cursor",label:"Cursor",patterns:["cursor"]},{id:"curl",label:"curl / scripts",patterns:["curl","wget","httpie"]}];function c(a){return String(a||"").trim().toLowerCase()}function d(a,b=[]){let e=c(a);return!!e&&!!b.length&&b.some(a=>a&&e.includes(a))}a.exports={TOOL_PRESETS:b,normalizeAllowedTools:function(a){let d=Array.isArray(a)?a:String(a||"").split(/[\r\n,]+/),e=[];for(let a of d){let d=c(a);if(!d)continue;let f=b.find(a=>a.id===d);f?e.push(...f.patterns):e.push(d)}return[...new Set(e)]},normalizeAllowedToolsInput:function(a){return[...new Set((Array.isArray(a)?a:String(a||"").split(/[\r\n,]+/)).map(c).filter(Boolean))]},clientToolMatches:d,shouldRefuseClientTool:function(a,b=[]){return!!c(a)&&!d(a,b)},describeUserAgent:function(a){let b=String(a||"").trim();return b?b.length>120?`${b.slice(0,119)}…`:b:"no User-Agent"}}}};var b=require("../../../webpack-runtime.js");b.C(a);var c=b.X(0,[4741,5592,5573,4433,7669,402,3767],()=>b(b.s=3697));module.exports=c})();
+            AND NOT EXISTS (SELECT 1 FROM prompt_logs r WHERE r.response_payload_hash = p.payload_hash)`,[b]);await a.commit()}catch(b){if(a)try{await a.rollback()}catch{}F(`Failed to clear mirrored audit rows: ${b.message||b}`)}finally{try{a?.release()}catch{}}}a.exports={appendAudit:function(a){return Y(async()=>a)},enqueueAuditJob:Y,readRecent:_,clearAudit:async function a(){E.clearing=!0,E.queue.length=0,E.workers.size&&await Promise.allSettled([...E.workers]),j();let a=await d.promises.readdir(i).catch(()=>[]);await Promise.all(a.filter(a=>a.endsWith(".jsonl")).map(a=>d.promises.unlink(e.join(i,a)).catch(()=>{}))),await d.promises.writeFile(h,"",{mode:384}).catch(()=>{}),D.clear(),await ad(),E.clearing=!1,E.queue.length&&setImmediate(X)},pruneExpired:ab,startAuditMaintenance:function(){C||(C=setInterval(()=>void ab(),36e5),C.unref?.())},stopAuditMaintenance:function(){C&&clearInterval(C),C=null},flushAuditQueue:ac,getAuditStoreStats:function(){return{queueDepth:E.queue.length,queueLimit:1e3,workerRunning:E.activeWorkers>0,workerConcurrency:4,activeWorkers:E.activeWorkers,mysqlPoolConnections:4,enqueued:E.enqueued,written:E.written,dropped:E.dropped,failed:E.failed,mysqlWritten:E.mysqlWritten,mysqlFailed:E.mysqlFailed,usageWritten:E.usageWritten,usageFailed:E.usageFailed,tokensSeen:E.tokensSeen,lastError:E.lastError,lastWrittenAt:E.lastWrittenAt,logDirectory:i}},appendPromptLog:P,appendUsageEvent:S}},91645:a=>{"use strict";a.exports=require("net")},94735:a=>{"use strict";a.exports=require("events")},98586:a=>{"use strict";let b=[{id:"claude-code",label:"Claude Code",patterns:["claude-cli","claude-code","anthropic"]},{id:"codex",label:"OpenAI Codex",patterns:["codex_cli","codex-cli","codex"]},{id:"gemini-cli",label:"Gemini CLI",patterns:["gemini-cli","google-genai"]},{id:"cursor",label:"Cursor",patterns:["cursor"]},{id:"curl",label:"curl / scripts",patterns:["curl","wget","httpie"]}];function c(a){return String(a||"").trim().toLowerCase()}function d(a,b=[]){let e=c(a);return!!e&&!!b.length&&b.some(a=>a&&e.includes(a))}a.exports={TOOL_PRESETS:b,normalizeAllowedTools:function(a){let d=Array.isArray(a)?a:String(a||"").split(/[\r\n,]+/),e=[];for(let a of d){let d=c(a);if(!d)continue;let f=b.find(a=>a.id===d);f?e.push(...f.patterns):e.push(d)}return[...new Set(e)]},normalizeAllowedToolsInput:function(a){return[...new Set((Array.isArray(a)?a:String(a||"").split(/[\r\n,]+/)).map(c).filter(Boolean))]},clientToolMatches:d,shouldRefuseClientTool:function(a,b=[]){return!!c(a)&&!d(a,b)},describeUserAgent:function(a){let b=String(a||"").trim();return b?b.length>120?`${b.slice(0,119)}…`:b:"no User-Agent"}}}};var b=require("../../../webpack-runtime.js");b.C(a);var c=b.X(0,[4741,5592,5573,4433,7669,402,3767],()=>b(b.s=3697));module.exports=c})();