@jheavenknows/bluerouter 5.3.83 → 5.3.85

package/app/.next-cli-build/server/app/(dashboard)/dashboard/audit-proxy/page.js

@@ -1,4 +1,4 @@
-(()=>{var a={};a.id=5236,a.ids=[5236],a.modules={1568:(a,b,c)=>{"use strict";c.d(b,{default:()=>d});let d=(0,c(77943).registerClientReference)(function(){throw Error("Attempted to call the default export of \"D:\\\\bluerouter\\\\src\\\\app\\\\(dashboard)\\\\dashboard\\\\audit-proxy\\\\AuditProxyPageClient.js\" from the server, but it's on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"D:\\bluerouter\\src\\app\\(dashboard)\\dashboard\\audit-proxy\\AuditProxyPageClient.js","default")},1932:a=>{"use strict";a.exports=require("url")},3295:a=>{"use strict";a.exports=require("next/dist/server/app-render/after-task-async-storage.external.js")},4573:a=>{"use strict";a.exports=require("node:buffer")},8128:a=>{"use strict";a.exports=require("next/dist/server/runtime-reacts.external.js")},9588:(a,b,c)=>{"use strict";c.d(b,{Cy:()=>i,I8:()=>k,Tv:()=>v,UX:()=>p,aV:()=>o,bz:()=>r,hH:()=>u,ny:()=>s,oW:()=>t,s0:()=>m,ub:()=>n,vZ:()=>q});var d=c(65573),e=c(23211),f=c(89718),g=c(33792),h=c(90389);let i="dashboard_view_mode";function j(a){return String(a||"").trim().toLowerCase()}function k(a){return j(a)}function l(a={}){return[a.ldapUsername,a.ldapEmail,a.ldapName,a.oidcEmail,a.oidcName,a.localUsername,a.username,a.email].map(j).filter(Boolean)}function m(a={}){let b=l(a),c=b[0]||"local",d=a.ldapName||a.ldapEmail||a.oidcName||a.oidcEmail||a.localUsername||c;return{userId:c,displayName:d,loginMethod:a.oidc?"OIDC":a.ldap?"LDAP":"Local",candidates:b}}function n(a={},b={}){var c;if(!b?.authenticated)return!1;if(b.local||!b.ldap&&!b.oidc||b.role===h.hS.ADMIN||!0===b.ldapIsAdmin)return!0;let d=Array.isArray(c=a.ldapAllowedUsers)?c.map(j).filter(Boolean):String(c||"").split(/[,\n]/).map(j).filter(Boolean);return 0!==d.length&&l(b).some(a=>d.includes(a))}function o(a={},b={}){return!(!b?.authenticated||n(a,b))&&(b.role===h.hS.MONITOR_ADMIN||!0===b.ldapIsMonitorAdmin)}function p(a={},b={}){return!(!b?.authenticated||n(a,b)||o(a,b))&&(b.role===h.hS.AI_GATEWAYS_MONITOR||!0===b.ldapIsAiGatewaysMonitor)}function q(a={},b={}){return b?.authenticated?n(a,b)?h.hS.ADMIN:o(a,b)?h.hS.MONITOR_ADMIN:p(a,b)?h.hS.AI_GATEWAYS_MONITOR:h.hS.USER:h.hS.GUEST}function r(a={}){return!0===a.isAdmin||!0===a.isMonitorAdmin}async function s(){let a=await (0,f.mt)(),b=await (0,d.UL)(),c=await (0,g.dY)(b.get("auth_token")?.value);if(!c?.authenticated)return{authenticated:!1,isAdmin:!1,actualIsAdmin:!1,showAsUser:!1,canToggleUserMode:!1,isMonitorAdmin:!1,isAiGatewaysMonitor:!1,role:h.hS.GUEST,actualRole:h.hS.GUEST,userId:"",displayName:"Guest",loginMethod:"None",settings:{...a,requireLogin:!0},session:null};let e=m(c||{}),j=q(a,c||{}),k=j===h.hS.ADMIN,l=k&&b.get(i)?.value==="user",n=l?h.hS.USER:j,o=n===h.hS.ADMIN,p=n===h.hS.MONITOR_ADMIN,r=n===h.hS.AI_GATEWAYS_MONITOR;return{authenticated:!0,isAdmin:o,actualIsAdmin:k,showAsUser:l,canToggleUserMode:k,isMonitorAdmin:p,isAiGatewaysMonitor:r,role:n,actualRole:j,canManageApiKeys:o||p,canUseMonitorAdminTabs:o||p,canViewAllAnalytics:o||p||r,...e,settings:{...a,requireLogin:!0},session:c}}async function t(){let a=await s();return a.authenticated?{access:a,response:null}:{access:a,response:e.NextResponse.json({error:"Authentication required"},{status:401})}}async function u(a={}){let{allowMonitorAdmin:b=!1}=a||{},{access:c,response:d}=await t();return d?{access:c,response:d}:c.isAdmin||b&&c.isMonitorAdmin?{access:c,response:null}:{access:c,response:e.NextResponse.json({error:"Admin access required"},{status:403})}}function v(a,b){if(!a?.authenticated||!b)return!1;if(r(a))return!0;let c=j(a.userId),d=j(b.ownerUser),e=j(b.createdByUser);return!!c&&(d===c||e===c)}},10381:(a,b)=>{"use strict";Object.defineProperty(b,"__esModule",{value:!0}),Object.defineProperty(b,"ReadonlyURLSearchParams",{enumerable:!0,get:function(){return d}});class c extends Error{constructor(){super("Method unavailable on `ReadonlyURLSearchParams`. Read more: https://nextjs.org/docs/app/api-reference/functions/use-search-params#updating-searchparams"),Object.defineProperty(this,"__NEXT_ERROR_CODE",{value:"E1174",enumerable:!1,configurable:!0})}}class d extends URLSearchParams{append(){throw new c}delete(){throw new c}set(){throw new c}sort(){throw new c}}("function"==typeof b.default||"object"==typeof b.default&&null!==b.default)&&void 0===b.default.__esModule&&(Object.defineProperty(b.default,"__esModule",{value:!0}),Object.assign(b.default,b),a.exports=b.default)},10846:a=>{"use strict";a.exports=require("next/dist/compiled/next-server/app-page.runtime.prod.js")},17509:(a,b,c)=>{"use strict";c.d(b,{V:()=>o});var d=c(91356),e=c(80700),f=c(99129),g=c(73575),h=c(41570),i=c(19035),j=c(44893),k=c(69052);async function l(a,b,c){let l,{protected:m,header:n,payload:o}=a,p={};if(m&&(p=(0,h.OX)(m,f.Ye,"JWS Protected Header is invalid")),void 0!==n){if(!(0,i.fz)(p,n))throw new f.Ye("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");l={...p,...n}}else l=p;let q=(0,j.nI)(f.Ye,j.qc,b[1],p,l),r=!0;if(q.includes("b64")&&"boolean"!=typeof(r=p.b64))throw new f.Ye('The "b64" (base64url-encode payload) Header Parameter must be a boolean');let{alg:s}=l;if("string"!=typeof s||!s)throw new f.Ye('JWS "alg" (Algorithm) Header Parameter missing or invalid');if(b[0]&&!b[0].has(s))throw new f.Rb('"alg" (Algorithm) Header Parameter value not allowed');if(r){if("string"!=typeof o)throw new f.Ye("JWS Payload must be a string")}else if("string"!=typeof o&&!(o instanceof Uint8Array))throw new f.Ye("JWS Payload must be a string or an Uint8Array instance");let t=!1;"function"==typeof c&&(c=await c(p,a),t=!0);let u=(0,e.q)(s),v=(0,g.xW)(void 0!==m?(0,g.lF)(m):new Uint8Array,(0,g.lF)("."),"string"==typeof o?r?b[2]??=(0,h.Fo)(o,"payload",f.Ye):g.Rd.encode(o):o),w=(0,h.h2)(a.signature,"signature",f.Ye),x=await (0,k.d)(u,c,"verify");if(!await (0,d.M)(u,x,w,v))throw new f.h2;return[r?(0,h.h2)(o,"payload",f.Ye):"string"==typeof o?g.Rd.encode(o):o,p,r,x,t]}async function m(a,b,c){if(a instanceof Uint8Array&&(a=g.D0.decode(a)),"string"!=typeof a)throw new f.Ye("Compact JWS must be a string or Uint8Array");let{0:d,1:e,2:h,length:i}=a.split(".");if(3!==i)throw new f.Ye("Invalid Compact JWS");return l({payload:e,protected:d,signature:h},b,c)}var n=c(17347);async function o(a,b,c){let d=await m(a,[c&&(0,j.Fw)("algorithms",c.algorithms),c?.crit],b);if(!d[2])throw new f.Dp("JWTs MUST NOT use unencoded payload");let e={payload:(0,n.k6)(d[1],d[0],c),protectedHeader:d[1]};return"function"==typeof b?{...e,key:d[3]}:e}},19121:a=>{"use strict";a.exports=require("next/dist/server/app-render/action-async-storage.external.js")},19771:a=>{"use strict";a.exports=require("process")},21820:a=>{"use strict";a.exports=require("os")},27910:a=>{"use strict";a.exports=require("stream")},28354:a=>{"use strict";a.exports=require("util")},29294:a=>{"use strict";a.exports=require("next/dist/server/app-render/work-async-storage.external.js")},32171:(a,b,c)=>{"use strict";Object.defineProperty(b,"__esModule",{value:!0});var d={getRedirectError:function(){return i},getRedirectStatusCodeFromError:function(){return n},getRedirectTypeFromError:function(){return m},getURLFromRedirectError:function(){return l},permanentRedirect:function(){return k},redirect:function(){return j}};for(var e in d)Object.defineProperty(b,e,{enumerable:!0,get:d[e]});let f=c(81494),g=c(52220),h=c(73565);function i(a,b,c=f.RedirectStatusCode.TemporaryRedirect){let d=Object.defineProperty(Error(g.REDIRECT_ERROR_CODE),"__NEXT_ERROR_CODE",{value:"E394",enumerable:!1,configurable:!0});return d.digest=`${g.REDIRECT_ERROR_CODE};${b};${a};${c};`,d}function j(a,b){throw i(a,b??=h.actionAsyncStorage?.getStore()?.isAction?"push":"replace",f.RedirectStatusCode.TemporaryRedirect)}function k(a,b="replace"){throw i(a,b,f.RedirectStatusCode.PermanentRedirect)}function l(a){return(0,g.isRedirectError)(a)?a.digest.split(";").slice(2,-2).join(";"):null}function m(a){if(!(0,g.isRedirectError)(a))throw Object.defineProperty(Error("Not a redirect error"),"__NEXT_ERROR_CODE",{value:"E260",enumerable:!1,configurable:!0});return a.digest.split(";",2)[1]}function n(a){if(!(0,g.isRedirectError)(a))throw Object.defineProperty(Error("Not a redirect error"),"__NEXT_ERROR_CODE",{value:"E260",enumerable:!1,configurable:!0});return Number(a.digest.split(";").at(-2))}("function"==typeof b.default||"object"==typeof b.default&&null!==b.default)&&void 0===b.default.__esModule&&(Object.defineProperty(b.default,"__esModule",{value:!0}),Object.assign(b.default,b),a.exports=b.default)},33792:(a,b,c)=>{"use strict";c.d(b,{Dc:()=>p,OZ:()=>s,YK:()=>n,dY:()=>q,tm:()=>r});var d=c(84433),e=c(17509),f=c(73024),g=c.n(f),h=c(76760),i=c.n(h),j=c(77598),k=c.n(j),l=c(49120);let m=new TextEncoder().encode(function(){if(process.env.JWT_SECRET)return process.env.JWT_SECRET;let a=i().join(l.DATA_DIR,"jwt-secret");try{return g().readFileSync(a,"utf8").trim()}catch{}g().mkdirSync(l.DATA_DIR,{recursive:!0});let b=k().randomBytes(32).toString("hex");return g().writeFileSync(a,b,{mode:384}),b}());function n(a){let b="true"===process.env.AUTH_COOKIE_SECURE,c=a?.headers?.get?.("x-forwarded-proto");return b||"https"===c}async function o(a={}){return new d.P({authenticated:!0,...a}).setProtectedHeader({alg:"HS256"}).setIssuedAt().setExpirationTime("86400s").sign(m)}async function p(a){if(!a)return!1;try{return await (0,e.V)(a,m),!0}catch{return!1}}async function q(a){if(!a)return null;try{let{payload:b}=await (0,e.V)(a,m);return b}catch{return null}}async function r(a,b,c={}){let d=await o(c);a.set("auth_token",d,{httpOnly:!0,secure:n(b),sameSite:"lax",path:"/",maxAge:86400})}function s(a){a.delete("auth_token")}},33873:a=>{"use strict";a.exports=require("path")},34631:a=>{"use strict";a.exports=require("tls")},38522:a=>{"use strict";a.exports=require("node:zlib")},39834:(a,b,c)=>{"use strict";c.d(b,{default:()=>v});var d=c(48249),e=c(67484),f=c(2116),g=c.n(f);function h(){let[a,b]=(0,e.useState)(null),[c,f]=(0,e.useState)(!1),[g,h]=(0,e.useState)(!1),[i,j]=(0,e.useState)(""),[k,l]=(0,e.useState)(!1),[m,n]=(0,e.useState)(""),[o,p]=(0,e.useState)("");(0,e.useCallback)(async()=>{try{let a=await fetch("/api/audit-proxy?limit=1",{cache:"no-store"}),c=await a.json();if(!a.ok)throw Error(c.error||"Cannot load Audit Proxy IP filter");b(c.config),f(c.status?.running===!0),h(c.config?.clientIpFilterEnabled===!0),j((c.config?.allowedClientIps||[]).join("\n"))}catch(a){n(a.message||"Cannot load Audit Proxy IP filter")}},[]);let q=(0,e.useMemo)(()=>i.split(/\r?\n/).map(a=>a.trim()).filter(Boolean),[i]),r=async()=>{if(a){if(g&&0===q.length)return void n("Add at least one client IP or CIDR before enabling the filter.");l(!0),n(""),p("");try{let c=await fetch("/api/audit-proxy",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({action:"save-ip-filter",enabled:g,allowedClientIps:q})}),d=await c.json().catch(()=>({}));if(!c.ok)throw Error(d.error||"Failed to save client IP filter");p(d.restarted?"Client IP filter saved and Audit Proxy restarted.":"Client IP filter saved."),b(d.config||a),f(d.status?.running===!0),h(d.config?.clientIpFilterEnabled===!0),j((d.config?.allowedClientIps||[]).join("\n"))}catch(a){n(a.message||"Failed to save client IP filter")}finally{l(!1)}}};return a?(0,d.jsxs)("section",{className:"rounded-2xl border border-border bg-surface p-4",children:[(0,d.jsxs)("div",{className:"flex flex-col gap-3 lg:flex-row lg:items-start lg:justify-between",children:[(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-2",children:[(0,d.jsx)("span",{className:"material-symbols-outlined text-primary",children:"shield_lock"}),(0,d.jsx)("h2",{className:"font-semibold text-text-main",children:"Client IP filter"}),(0,d.jsx)("span",{className:`rounded-full px-2 py-0.5 text-[10px] font-semibold ${g?"bg-green-500/10 text-green-600 dark:text-green-400":"bg-surface text-text-muted"}`,children:g?"ENABLED":"DISABLED"})]}),(0,d.jsxs)("p",{className:"mt-1 max-w-4xl text-xs leading-5 text-text-muted",children:["Restrict TCP access to the Audit Proxy itself. Only client IPs/CIDRs below can use port ",a.port,". The decision uses the socket peer IP; X-Forwarded-For and other HTTP headers are ignored."]})]}),(0,d.jsxs)("label",{className:"flex shrink-0 items-center gap-2 text-sm font-medium text-text-main",children:[(0,d.jsx)("input",{type:"checkbox",checked:g,onChange:a=>h(a.target.checked),className:"h-4 w-4 accent-[var(--color-primary)]"}),"Enable IP filter"]})]}),m?(0,d.jsx)("div",{className:"mt-3 rounded-lg border border-red-500/30 bg-red-500/10 px-3 py-2 text-xs text-red-600 dark:text-red-400",children:m}):null,o?(0,d.jsx)("div",{className:"mt-3 rounded-lg border border-green-500/30 bg-green-500/10 px-3 py-2 text-xs text-green-600 dark:text-green-400",children:o}):null,(0,d.jsxs)("div",{className:"mt-4 grid gap-4 lg:grid-cols-[1fr_320px]",children:[(0,d.jsxs)("label",{className:"grid gap-1.5",children:[(0,d.jsx)("span",{className:"text-sm font-semibold text-text-main",children:"Allowed client IPs / CIDRs"}),(0,d.jsx)("textarea",{rows:6,value:i,onChange:a=>j(a.target.value),placeholder:"172.16.253.3\n172.16.253.0/24\n10.20.30.15\n2001:db8::/64",className:"rounded-lg border border-border bg-background px-3 py-2 font-mono text-xs text-text-main outline-none focus:border-primary"}),(0,d.jsx)("span",{className:"text-[11px] leading-4 text-text-muted",children:"One IPv4, IPv6, or CIDR per line. IPv4-mapped IPv6 addresses are normalized automatically."})]}),(0,d.jsxs)("div",{className:"grid content-start gap-3",children:[(0,d.jsxs)("div",{className:"rounded-xl border border-primary/20 bg-primary/5 p-3 text-xs leading-5 text-text-muted",children:[(0,d.jsx)("div",{className:"font-semibold text-primary",children:"Security behavior"}),(0,d.jsx)("div",{className:"mt-1",children:"Allowed IP → proxy works normally."}),(0,d.jsx)("div",{children:"Other IP → TCP connection is immediately closed before CONNECT/HTTP parsing."}),(0,d.jsx)("div",{children:"Empty list + enabled → configuration is rejected."})]}),(0,d.jsx)("button",{type:"button",onClick:r,disabled:k,className:"rounded-lg bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:k?"Saving…":c?"Save & Restart Proxy":"Save IP Filter"}),c?(0,d.jsxs)("div",{className:"text-[11px] leading-4 text-text-muted",children:["Proxy is running, so applying this security policy requires a short restart of port ",a.port,"."]}):null]})]})]}):null}function i(){let[a,b]=(0,e.useState)(!1),[c,f]=(0,e.useState)(!1),[g,h]=(0,e.useState)([]),[i,j]=(0,e.useState)(!1),[k,l]=(0,e.useState)(""),[m,n]=(0,e.useState)(""),o=(a,c)=>{f(a?.proxyAuthEnabled===!0),h((a?.proxyAuthUsers||[]).map(a=>({username:a.username,hasPassword:!0===a.hasPassword,password:""}))),c&&b(!0===c.running)};(0,e.useCallback)(async()=>{try{let a=await fetch("/api/audit-proxy?limit=1",{cache:"no-store"}),b=await a.json();if(!a.ok)throw Error(b.error||"Cannot load proxy authentication");o(b.config,b.status)}catch(a){l(a.message||"Cannot load proxy authentication")}},[]);let p=(a,b)=>{h(c=>c.map((c,d)=>d===a?{...c,...b}:c))},q=async()=>{let a=g.map(a=>({...a,username:a.username.trim()}));if(c&&0===a.length)return void l("Add at least one account before enabling proxy authentication.");let b=a.find(a=>!a.hasPassword&&!a.password);if(b)return void l(`Set a password for ${b.username||"the new account"}.`);j(!0),l(""),n("");try{let b=await fetch("/api/audit-proxy",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({action:"save-proxy-auth",enabled:c,users:a.map(a=>a.password?{username:a.username,password:a.password}:{username:a.username})})}),d=await b.json().catch(()=>({}));if(!b.ok)throw Error(d.error||"Failed to save proxy authentication");n(d.restarted?"Proxy authentication saved and Audit Proxy restarted.":"Proxy authentication saved."),o(d.config,d.status)}catch(a){l(a.message||"Failed to save proxy authentication")}finally{j(!1)}};return(0,d.jsxs)("section",{className:"rounded-2xl border border-border bg-surface p-4",children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-start justify-between gap-3",children:[(0,d.jsxs)("div",{className:"max-w-3xl",children:[(0,d.jsx)("h2",{className:"font-semibold text-text-main",children:"Proxy authentication"}),(0,d.jsx)("p",{className:"mt-1 text-xs leading-5 text-text-muted",children:"Requires a username and password on every CONNECT, and records which account opened each tunnel, so the audit table answers who rather than only which IP. Give each person or CI job its own account: removing one leaves the others working."}),(0,d.jsx)("p",{className:"mt-2 rounded-lg border border-amber-500/30 bg-amber-500/5 p-2 text-[11px] leading-5 text-amber-700 dark:text-amber-300",children:"The proxy listener speaks plain HTTP, so the credential crosses the client-to-proxy hop unencrypted (Basic is base64, not encryption). This keeps out anyone without the password and attributes traffic to a person; it does not hide the password from someone capturing packets on that network. On an untrusted network use it alongside the client IP allowlist, not instead of it. The password also ends up in HTTPS_PROXY, and so in the process list and shell history."})]}),(0,d.jsxs)("label",{className:"flex shrink-0 items-center gap-2 text-sm text-text-main",children:[(0,d.jsx)("input",{type:"checkbox",checked:c,onChange:a=>f(a.target.checked),disabled:i,className:"h-4 w-4 accent-[var(--color-primary)]"}),"Require credentials"]})]}),(0,d.jsxs)("div",{className:"mt-4 grid gap-2",children:[0===g.length?(0,d.jsx)("p",{className:"rounded-xl border border-border bg-background/50 p-3 text-xs text-text-muted",children:"No accounts yet."}):null,g.map((a,b)=>(0,d.jsxs)("div",{className:"grid gap-2 rounded-xl border border-border bg-background/50 p-3 sm:grid-cols-[1fr_1fr_auto]",children:[(0,d.jsx)("input",{type:"text",value:a.username,onChange:a=>p(b,{username:a.target.value}),disabled:i,placeholder:"username",className:"min-w-0 rounded-lg border border-border bg-background px-3 py-2 font-mono text-xs text-text-main outline-none focus:border-primary disabled:opacity-60"}),(0,d.jsx)("input",{type:"password",value:a.password,onChange:a=>p(b,{password:a.target.value}),disabled:i,placeholder:a.hasPassword?"Saved — leave blank to keep":"Set a password",className:"min-w-0 rounded-lg border border-border bg-background px-3 py-2 font-mono text-xs text-text-main outline-none focus:border-primary disabled:opacity-60"}),(0,d.jsx)("button",{type:"button",onClick:()=>{let a;(!(a=g[b]).hasPassword||window.confirm(`Remove ${a.username}? Anything using this account stops working after the restart.`))&&h(a=>a.filter((a,c)=>c!==b))},disabled:i,className:"rounded-lg border border-border px-3 py-2 text-xs text-text-muted transition hover:border-red-500/40 hover:text-red-600 disabled:opacity-50",children:"Remove"})]},b))]}),(0,d.jsxs)("div",{className:"mt-3 flex flex-wrap items-center gap-2",children:[(0,d.jsx)("button",{type:"button",onClick:()=>h(a=>[...a,{username:"",hasPassword:!1,password:""}]),disabled:i,className:"rounded-lg border border-border px-3 py-1.5 text-xs text-text-muted transition hover:border-primary hover:text-primary disabled:opacity-50",children:"Add account"}),(0,d.jsx)("button",{type:"button",onClick:q,disabled:i,className:"rounded-lg bg-primary px-3 py-1.5 text-xs font-semibold text-white transition hover:opacity-90 disabled:opacity-50",children:i?"Saving…":a?"Save & Restart Proxy":"Save"}),(0,d.jsxs)("span",{className:"text-[11px] text-text-muted",children:["Clients pass credentials in the proxy URL: ",(0,d.jsx)("code",{className:"font-mono",children:"http://USER:PASSWORD@host:port"})," ","— URL-encode ",(0,d.jsx)("code",{className:"font-mono",children:"@ : / #"})," if the password contains them."]})]}),k?(0,d.jsx)("p",{className:"mt-3 rounded-lg border border-red-500/30 bg-red-500/5 p-2 text-xs text-red-600 dark:text-red-400",children:k}):null,m?(0,d.jsx)("p",{className:"mt-3 rounded-lg border border-green-500/30 bg-green-500/5 p-2 text-xs text-green-600 dark:text-green-400",children:m}):null]})}let j=["api.anthropic.com","*.anthropic.com","claude.ai","*.claude.ai"],k=["api.openai.com","*.openai.com","chatgpt.com","*.chatgpt.com"],l="localhost,127.0.0.1,::1",m=[{id:"claude-code",label:"Claude Code"},{id:"codex",label:"OpenAI Codex"},{id:"gemini-cli",label:"Gemini CLI"},{id:"cursor",label:"Cursor"},{id:"curl",label:"curl / scripts"}];function n({ok:a,children:b}){return(0,d.jsxs)("span",{className:`inline-flex items-center gap-1 rounded-full border px-2 py-0.5 text-xs font-medium ${a?"border-green-500/30 bg-green-500/10 text-green-600 dark:text-green-400":"border-border bg-surface text-text-muted"}`,children:[(0,d.jsx)("span",{className:"material-symbols-outlined text-[13px]",children:a?"check_circle":"radio_button_unchecked"}),b]})}function o(a){let b=Number(a||0);return!Number.isFinite(b)||b<=0?"0":b>=1e6?`${(b/1e6).toFixed(2)}M`:b>=1e3?`${(b/1e3).toFixed(1)}k`:String(b)}function p(a){let b=Number(a||0);return!Number.isFinite(b)||b<=0?"$0.00":b<.01?`$${b.toFixed(4)}`:`$${b.toFixed(2)}`}function q({label:a,value:b,hint:c}){return(0,d.jsxs)("div",{className:"rounded-xl border border-border bg-background/50 p-3",children:[(0,d.jsx)("div",{className:"text-[11px] font-medium uppercase tracking-wide text-text-muted",children:a}),(0,d.jsx)("div",{className:"mt-1 text-lg font-semibold text-text-main",children:b}),c?(0,d.jsx)("div",{className:"mt-0.5 text-[11px] leading-4 text-text-muted",children:c}):null]})}function r({title:a,rows:b}){return b?.length?(0,d.jsxs)("div",{className:"min-w-0",children:[(0,d.jsx)("h3",{className:"text-xs font-semibold uppercase tracking-wide text-text-muted",children:a}),(0,d.jsx)("div",{className:"mt-2 overflow-x-auto",children:(0,d.jsxs)("table",{className:"w-full min-w-[420px] text-left text-xs",children:[(0,d.jsx)("thead",{className:"border-b border-border text-text-muted",children:(0,d.jsxs)("tr",{children:[(0,d.jsx)("th",{className:"px-2 py-1.5 font-medium",children:"Name"}),(0,d.jsx)("th",{className:"px-2 py-1.5 text-right font-medium",children:"Reqs"}),(0,d.jsx)("th",{className:"px-2 py-1.5 text-right font-medium",children:"In"}),(0,d.jsx)("th",{className:"px-2 py-1.5 text-right font-medium",children:"Out"}),(0,d.jsx)("th",{className:"px-2 py-1.5 text-right font-medium",children:"Cache R/W"}),(0,d.jsx)("th",{className:"px-2 py-1.5 text-right font-medium",children:"Cost"})]})}),(0,d.jsx)("tbody",{children:b.map(a=>(0,d.jsxs)("tr",{className:"border-b border-border/60 text-text-main",children:[(0,d.jsx)("td",{className:"max-w-[220px] truncate px-2 py-1.5 font-mono text-[11px]",title:a.label,children:a.label}),(0,d.jsx)("td",{className:"px-2 py-1.5 text-right",children:a.requests}),(0,d.jsx)("td",{className:"px-2 py-1.5 text-right",children:o(a.inputTokens)}),(0,d.jsx)("td",{className:"px-2 py-1.5 text-right",children:o(a.outputTokens)}),(0,d.jsxs)("td",{className:"px-2 py-1.5 text-right text-text-muted",children:[o(a.cacheReadTokens),"/",o(a.cacheCreationTokens)]}),(0,d.jsx)("td",{className:"px-2 py-1.5 text-right",children:p(a.cost)})]},a.label))})]})})]}):null}function s({label:a,hint:b,children:c}){return(0,d.jsxs)("label",{className:"grid gap-1.5",children:[(0,d.jsx)("span",{className:"text-sm font-semibold text-text-main",children:a}),c,b?(0,d.jsx)("span",{className:"text-[11px] leading-4 text-text-muted",children:b}):null]})}function t({label:a,description:b,checked:c,onChange:e,disabled:f=!1}){return(0,d.jsxs)("label",{className:"flex items-start justify-between gap-4 rounded-xl border border-border bg-background/50 p-3",children:[(0,d.jsxs)("span",{children:[(0,d.jsx)("span",{className:"block text-sm font-semibold text-text-main",children:a}),(0,d.jsx)("span",{className:"mt-0.5 block text-xs leading-5 text-text-muted",children:b})]}),(0,d.jsx)("input",{type:"checkbox",checked:c,onChange:a=>e(a.target.checked),disabled:f,className:"mt-1 h-4 w-4 accent-[var(--color-primary)]"})]})}function u({title:a,subtitle:b,command:c,copyKey:e,copied:f,onCopy:g,recommended:h=!1}){return(0,d.jsxs)("div",{className:`rounded-xl border bg-background p-3 ${h?"border-green-500/30":"border-border"}`,children:[(0,d.jsxs)("div",{className:"flex items-start justify-between gap-3",children:[(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-2",children:[(0,d.jsx)("span",{className:"text-xs font-semibold text-text-main",children:a}),h?(0,d.jsx)("span",{className:"rounded-full bg-green-500/10 px-2 py-0.5 text-[10px] font-semibold text-green-600 dark:text-green-400",children:"Recommended"}):null]}),b?(0,d.jsx)("div",{className:"mt-0.5 text-[10px] leading-4 text-text-muted",children:b}):null]}),(0,d.jsx)("button",{type:"button",onClick:()=>g(e,c),className:"shrink-0 text-xs font-medium text-primary",children:f===e?"Copied":"Copy"})]}),(0,d.jsx)("pre",{className:"mt-2 overflow-x-auto whitespace-pre-wrap break-all rounded-lg bg-surface px-3 py-2 text-[11px] leading-5 text-text-muted",children:c})]})}function v(){let[a,b]=(0,e.useState)(null),[c,f]=(0,e.useState)(null),[v,w]=(0,e.useState)(""),[x,y]=(0,e.useState)(""),[z,A]=(0,e.useState)(""),[B,C]=(0,e.useState)(null),[D,E]=(0,e.useState)(""),[F,G]=(0,e.useState)("configuration"),H=(0,e.useCallback)(async(a=!0)=>{try{let c=await fetch("/api/audit-proxy?limit=50",{cache:"no-store"}),d=await c.json();if(!c.ok)throw Error(d.error||"Cannot load Audit Proxy");b(d),a?f(a=>a||d.config):f(d.config)}catch(a){y(a.message||"Cannot load Audit Proxy")}},[]),I=a?.status||{},J=I.security||{},K=I.rootCA||{},L=!0===I.running,M=(0,e.useMemo)(()=>{let a;return(a=String(c?.clientProxyHost||"").trim()||"<bluerouter-host>").includes(":")&&!a.startsWith("[")?`[${a}]`:a},[c?.clientProxyHost]),N=c?`http://${M}:${c.port}`:"",O=(c?.allowedHosts||[]).join("\n"),P=(a,b)=>f(c=>({...c,[a]:b})),Q=async(a,b={})=>{w(a),y(""),A("");try{let c=await fetch("/api/audit-proxy",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({action:a,...b})}),d=await c.json().catch(()=>({}));if(!c.ok)throw Error(d.error||`${a} failed`);return"test"===a?(C(d.test),A(`Simulation passed ${d.test.passed}/${d.test.total} checks.`)):A("clear-logs"===a?"Audit logs cleared.":`Audit Proxy ${a} completed.`),await H("start"!==a&&"restart"!==a),d}catch(b){return y(b.message||`${a} failed`),null}finally{w("")}},R=async()=>{w("save"),y(""),A("");try{let a=await fetch("/api/audit-proxy",{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify({config:c})}),b=await a.json();if(!a.ok)throw Error(b.error||"Save failed");f(b.config),A("Configuration saved."),await H(!0)}catch(a){y(a.message||"Save failed")}finally{w("")}},S=async()=>{w("save-client-host"),y(""),A("");try{let a=await fetch("/api/audit-proxy",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({action:"save-client-host",clientProxyHost:c?.clientProxyHost||""})}),b=await a.json().catch(()=>({}));if(!a.ok)throw Error(b.error||"Failed to save Client proxy host");f(a=>({...a,clientProxyHost:b.config?.clientProxyHost||""})),A("Client proxy host saved."),await H(!0)}catch(a){y(a.message||"Failed to save Client proxy host")}finally{w("")}},T=async()=>{w("ca"),y("");try{let a=await fetch("/api/audit-proxy/ca",{method:"POST"}),b=await a.json();if(!a.ok)throw Error(b.error||"CA validation failed");A("Root CA is ready. Existing enterprise CA material was not rotated."),await H(!0)}catch(a){y(a.message||"CA validation failed")}finally{w("")}},U=a=>P("allowedHosts",[...new Set([...c?.allowedHosts||[],...a])]),V=async(a,b)=>{try{await navigator.clipboard.writeText(b),E(a),setTimeout(()=>E(""),1500)}catch{y("Clipboard access failed.")}};if(!c)return(0,d.jsx)("div",{className:"rounded-xl border border-border bg-surface p-5 text-sm text-text-muted",children:"Loading Enterprise AI Audit Proxy…"});let W=Math.round(Number(c.captureLimitBytes||0)/1024/1024*10)/10,X=["0.0.0.0","::"].includes(c.bindHost)||!String(c.bindHost).startsWith("127.")&&"localhost"!==c.bindHost&&"::1"!==c.bindHost,Y="C:\\BlueRouter\\bluerouter-audit-root-ca.crt",Z="$HOME/.bluerouter/bluerouter-audit-root-ca.crt",$=`set "HTTP_PROXY=${N}"&&set "HTTPS_PROXY=${N}"&&set "NO_PROXY=${l}"&&set "no_proxy=${l}"`,_=`cmd.exe /d /c '${$}&&set "NODE_EXTRA_CA_CERTS=${Y}"&&claude'`,aa=`cmd.exe /d /c '${$}&&set "CODEX_CA_CERTIFICATE=${Y}"&&codex'`,ab=`HTTP_PROXY='${N}' HTTPS_PROXY='${N}' NO_PROXY='${l}' no_proxy='${l}'`,ac=`env ${ab} NODE_EXTRA_CA_CERTS="${Z}" claude`,ad=`env ${ab} CODEX_CA_CERTIFICATE="${Z}" codex`,ae=`$cfg = Join-Path $env:USERPROFILE '.codex\\config.toml'
+(()=>{var a={};a.id=5236,a.ids=[5236],a.modules={1568:(a,b,c)=>{"use strict";c.d(b,{default:()=>d});let d=(0,c(77943).registerClientReference)(function(){throw Error("Attempted to call the default export of \"D:\\\\bluerouter\\\\src\\\\app\\\\(dashboard)\\\\dashboard\\\\audit-proxy\\\\AuditProxyPageClient.js\" from the server, but it's on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"D:\\bluerouter\\src\\app\\(dashboard)\\dashboard\\audit-proxy\\AuditProxyPageClient.js","default")},1932:a=>{"use strict";a.exports=require("url")},3295:a=>{"use strict";a.exports=require("next/dist/server/app-render/after-task-async-storage.external.js")},4573:a=>{"use strict";a.exports=require("node:buffer")},5243:(a,b,c)=>{"use strict";c.d(b,{Ay:()=>j});var d=c(48249),e=c(67484);let f="localhost,127.0.0.1,::1",g="C:\\BlueRouter\\bluerouter-audit-root-ca.crt",h="$HOME/.bluerouter/bluerouter-audit-root-ca.crt";function i({title:a,subtitle:b,command:c,copyKey:e,copied:f,onCopy:g,recommended:h=!1}){return(0,d.jsxs)("div",{className:`rounded-xl border bg-background p-3 ${h?"border-green-500/30":"border-border"}`,children:[(0,d.jsxs)("div",{className:"flex items-start justify-between gap-3",children:[(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-2",children:[(0,d.jsx)("span",{className:"text-xs font-semibold text-text-main",children:a}),h?(0,d.jsx)("span",{className:"rounded-full bg-green-500/10 px-2 py-0.5 text-[10px] font-semibold text-green-600 dark:text-green-400",children:"Recommended"}):null]}),b?(0,d.jsx)("div",{className:"mt-0.5 text-[10px] leading-4 text-text-muted",children:b}):null]}),(0,d.jsx)("button",{type:"button",onClick:()=>g(e,c),className:"shrink-0 text-xs font-medium text-primary",children:f===e?"Copied":"Copy"})]}),(0,d.jsx)("pre",{className:"mt-2 overflow-x-auto whitespace-pre-wrap break-all rounded-lg bg-surface px-3 py-2 text-[11px] leading-5 text-text-muted",children:c})]})}function j({clientProxyHost:a,port:b,onError:c}){let[k,l]=(0,e.useState)(""),m=(0,e.useMemo)(()=>{var c,d;let e,i=(c=a,d=b,`http://${(e=String(c||"").trim()||"<bluerouter-host>").includes(":")&&!e.startsWith("[")?`[${e}]`:e}:${d}`),j=`set "HTTP_PROXY=${i}"&&set "HTTPS_PROXY=${i}"&&set "NO_PROXY=${f}"&&set "no_proxy=${f}"`,k=`HTTP_PROXY='${i}' HTTPS_PROXY='${i}' NO_PROXY='${f}' no_proxy='${f}'`;return{proxyUrl:i,claudePowerShell:`cmd.exe /d /c '${j}&&set "NODE_EXTRA_CA_CERTS=${g}"&&claude'`,codexPowerShell:`cmd.exe /d /c '${j}&&set "CODEX_CA_CERTIFICATE=${g}"&&codex'`,claudeBash:`env ${k} NODE_EXTRA_CA_CERTS="${h}" claude`,codexBash:`env ${k} CODEX_CA_CERTIFICATE="${h}" codex`}},[a,b]),n=`$cfg = Join-Path $env:USERPROFILE '.codex\\config.toml'
 $block = @'
 model_provider = "chatgpt_https"
 
@@ -18,4 +18,4 @@ else {
   if (Test-Path $cfg) { Copy-Item $cfg "$cfg.bak" -Force }
   [IO.File]::WriteAllText($cfg, $block + $body, (New-Object Text.UTF8Encoding $false))
   Write-Host 'Injected at top of config.toml (backup: config.toml.bak).'
-}`;return(0,d.jsxs)("div",{className:"space-y-4",children:[(0,d.jsxs)("div",{className:"flex flex-col gap-3 rounded-2xl border border-primary/20 bg-primary/5 p-4 sm:flex-row sm:items-start sm:justify-between",children:[(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-2",children:[(0,d.jsx)("span",{className:"material-symbols-outlined text-primary",children:"policy"}),(0,d.jsx)("h1",{className:"text-lg font-bold text-text-main",children:"Enterprise AI Audit Proxy"}),(0,d.jsx)(n,{ok:L,children:L?"Running":"Stopped"}),(0,d.jsx)(n,{ok:!0===K.validated,children:"Root CA"}),(0,d.jsx)(n,{ok:c.verifyUpstreamTls,children:"Verified upstream TLS"}),(0,d.jsx)(n,{ok:!0,children:I.capabilities?.http2===!0?"HTTP/1.1 + HTTP/2":"HTTP/1.1"})]}),(0,d.jsx)("p",{className:"mt-2 max-w-5xl text-sm leading-6 text-text-muted",children:"Explicit HTTPS CONNECT proxy for Claude Code and Codex. Request method, path, query, authentication values and body bytes are forwarded without content rewriting. Standard hop-by-hop headers and BlueRouter internal headers remain intentionally removed."})]}),(0,d.jsxs)(g(),{href:"/dashboard/mitm",className:"inline-flex items-center gap-1 text-xs font-medium text-primary hover:underline",children:[(0,d.jsx)("span",{className:"material-symbols-outlined text-[16px]",children:"arrow_back"})," AI Traffic Gateway"]})]}),x?(0,d.jsx)("div",{className:"rounded-xl border border-red-500/30 bg-red-500/10 px-4 py-3 text-sm text-red-600 dark:text-red-400",children:x}):null,z?(0,d.jsx)("div",{className:"rounded-xl border border-green-500/30 bg-green-500/10 px-4 py-3 text-sm text-green-600 dark:text-green-400",children:z}):null,(0,d.jsxs)("div",{className:"flex w-fit items-center gap-1 rounded-xl border border-border bg-surface p-1",children:[(0,d.jsx)("button",{type:"button",onClick:()=>G("configuration"),className:`rounded-lg px-3 py-1.5 text-xs font-semibold transition ${"configuration"===F?"bg-primary text-white":"text-text-muted hover:bg-background hover:text-text-main"}`,children:"Configuration"}),(0,d.jsx)("button",{type:"button",onClick:()=>G("audit"),className:`rounded-lg px-3 py-1.5 text-xs font-semibold transition ${"audit"===F?"bg-primary text-white":"text-text-muted hover:bg-background hover:text-text-main"}`,children:"Audit & Usage"})]}),(0,d.jsxs)("div",{className:"configuration"===F?"space-y-4":"hidden",children:[J.lanExposedWithoutIpFilter?(0,d.jsxs)("div",{className:"rounded-xl border border-red-500/30 bg-red-500/10 px-4 py-3 text-sm text-red-700 dark:text-red-300",children:[(0,d.jsx)("strong",{children:"LAN listener has no Client IP filter."})," Enable the IP allowlist below before broad deployment. Plain HTTP, private destinations and CONNECT ports other than 443 are blocked, but the listener should still be restricted by firewall/VLAN."]}):X?(0,d.jsxs)("div",{className:"rounded-xl border border-amber-500/30 bg-amber-500/10 px-4 py-3 text-sm text-amber-700 dark:text-amber-300",children:[(0,d.jsx)("strong",{children:"LAN listener enabled."})," Keep TCP ",c.port," restricted to the intended LAN/VPN and maintain the Client IP allowlist."]}):null,K.expiringSoon?(0,d.jsx)("div",{className:"rounded-xl border border-amber-500/30 bg-amber-500/10 px-4 py-3 text-sm text-amber-700 dark:text-amber-300",children:"Root CA expires soon. Audit Proxy will not rotate enterprise CA material automatically; prepare and deploy the replacement CA through Advanced CA management."}):null,(0,d.jsxs)("div",{className:"grid gap-4 xl:grid-cols-[1.25fr_0.75fr]",children:[(0,d.jsxs)("section",{className:"rounded-2xl border border-border bg-surface p-4",children:[(0,d.jsxs)("div",{className:"mb-4 flex flex-wrap items-center justify-between gap-2",children:[(0,d.jsxs)("div",{children:[(0,d.jsx)("h2",{className:"font-semibold text-text-main",children:"Proxy configuration"}),(0,d.jsx)("p",{className:"mt-1 text-xs text-text-muted",children:"All server-side setup is managed here. No proxy daemon CLI is required."})]}),(0,d.jsxs)("div",{className:"flex flex-wrap gap-2",children:[(0,d.jsx)("button",{type:"button",onClick:()=>U(j),disabled:L,className:"rounded-lg border border-border px-3 py-1.5 text-xs text-text-main hover:bg-background disabled:opacity-50",children:"+ Anthropic preset"}),(0,d.jsx)("button",{type:"button",onClick:()=>U(k),disabled:L,className:"rounded-lg border border-border px-3 py-1.5 text-xs text-text-main hover:bg-background disabled:opacity-50",children:"+ OpenAI preset"})]})]}),(0,d.jsxs)("div",{className:"grid gap-4 md:grid-cols-2",children:[(0,d.jsx)(s,{label:"Bind address",hint:"127.0.0.1 = local only. Use 0.0.0.0 or a LAN IP for other workstations.",children:(0,d.jsx)("input",{value:c.bindHost,onChange:a=>P("bindHost",a.target.value),disabled:L,className:"rounded-lg border border-border bg-background px-3 py-2 text-sm text-text-main outline-none focus:border-primary disabled:opacity-60"})}),(0,d.jsx)(s,{label:"Proxy port",hint:"Default 3128; Docker deployments must publish this port explicitly.",children:(0,d.jsx)("input",{type:"number",min:"1",max:"65535",value:c.port,onChange:a=>P("port",Number(a.target.value)),disabled:L,className:"rounded-lg border border-border bg-background px-3 py-2 text-sm text-text-main outline-none focus:border-primary disabled:opacity-60"})}),(0,d.jsx)(s,{label:"Client proxy host",hint:"Manual persistent hostname/IP used only in deployment commands; it does not change the listener.",children:(0,d.jsxs)("div",{className:"flex gap-2",children:[(0,d.jsx)("input",{value:c.clientProxyHost||"",onChange:a=>P("clientProxyHost",a.target.value),placeholder:"172.16.6.8 or proxy.example.local",className:"min-w-0 flex-1 rounded-lg border border-border bg-background px-3 py-2 text-sm text-text-main outline-none focus:border-primary"}),(0,d.jsx)("button",{type:"button",onClick:S,disabled:!!v,className:"shrink-0 rounded-lg border border-primary/30 bg-primary/10 px-3 py-2 text-xs font-semibold text-primary disabled:opacity-50",children:"save-client-host"===v?"Saving…":"Save host"})]})}),(0,d.jsx)(s,{label:"Capture limit / request",hint:"Traffic streams immediately; only this bounded prefix is retained for audit.",children:(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)("input",{type:"number",min:"0",max:"16",step:"0.5",value:W,onChange:a=>P("captureLimitBytes",Math.round(1024*Number(a.target.value)*1024)),disabled:L||!c.captureBodies,className:"min-w-0 flex-1 rounded-lg border border-border bg-background px-3 py-2 text-sm text-text-main outline-none focus:border-primary disabled:opacity-60"}),(0,d.jsx)("span",{className:"text-xs text-text-muted",children:"MB"})]})})]}),(0,d.jsxs)("div",{className:"mt-4 grid gap-3 md:grid-cols-2",children:[(0,d.jsx)(t,{label:"Pass through non-audited hosts",description:"Unknown hosts use a blind TLS tunnel only when they resolve to public addresses on TCP 443. Private/reserved destinations are denied.",checked:c.passthroughUnknown,onChange:a=>P("passthroughUnknown",a),disabled:L}),(0,d.jsx)(t,{label:"Capture request/response bodies",description:"Credentials are redacted before persistence. Disable to retain metadata and wire hashes only.",checked:c.captureBodies,onChange:a=>P("captureBodies",a),disabled:L})]}),(0,d.jsxs)("div",{className:"mt-4 grid gap-3",children:[(0,d.jsx)(t,{label:"Restrict which client tools may connect",description:"Refuses a CONNECT whose User-Agent identifies a tool that is not listed. Catches a browser pointed at the proxy, or a script that inherited HTTPS_PROXY. It cannot catch a client that sends no User-Agent — Claude Code sends none at all and Codex only on its first tunnel, so those are always let through, and anyone can do the same by dropping the header. Hygiene, not access control: the client IP allowlist and who holds the root CA are what bound access.",checked:!0===c.clientToolFilterEnabled,onChange:a=>P("clientToolFilterEnabled",a),disabled:L}),c.clientToolFilterEnabled?(0,d.jsxs)("div",{className:"grid gap-2",children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-1.5",children:[(0,d.jsx)("span",{className:"text-[11px] font-medium text-text-muted",children:"Add:"}),m.map(a=>(0,d.jsx)("button",{type:"button",disabled:L||(c.allowedClientTools||[]).includes(a.id),onClick:()=>P("allowedClientTools",[...new Set([...c.allowedClientTools||[],a.id])]),className:"rounded-lg border border-border px-2 py-1 text-[11px] text-text-muted transition hover:border-primary hover:text-primary disabled:opacity-40",children:a.label},a.id))]}),(0,d.jsx)(s,{label:"Allowed client tools",hint:"One entry per line: a preset id above, or any substring matched against the User-Agent. Only clients that send a User-Agent are checked. Refused connections appear in the audit table with the User-Agent that was rejected, so you can add what you actually use.",children:(0,d.jsx)("textarea",{rows:4,value:(c.allowedClientTools||[]).join("\n"),onChange:a=>P("allowedClientTools",a.target.value.split(/\r?\n/).map(a=>a.trim().toLowerCase()).filter(Boolean)),disabled:L,placeholder:"claude-code\ncodex",className:"rounded-lg border border-border bg-background px-3 py-2 font-mono text-xs text-text-main outline-none focus:border-primary disabled:opacity-60"})})]}):null]}),(0,d.jsxs)("div",{className:"mt-4 grid gap-4 md:grid-cols-[1fr_190px]",children:[(0,d.jsx)(s,{label:"TLS inspection allowlist",hint:"One hostname/wildcard per line. Only these public HTTPS hosts are decrypted and audited.",children:(0,d.jsx)("textarea",{rows:9,value:O,onChange:a=>P("allowedHosts",a.target.value.split(/\r?\n/).map(a=>a.trim()).filter(Boolean)),disabled:L,className:"rounded-lg border border-border bg-background px-3 py-2 font-mono text-xs text-text-main outline-none focus:border-primary disabled:opacity-60"})}),(0,d.jsxs)("div",{className:"grid content-start gap-4",children:[(0,d.jsx)(s,{label:"Retention",hint:"Daily local JSONL segments older than this value are deleted hourly.",children:(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)("input",{type:"number",min:"1",max:"365",value:c.retentionDays,onChange:a=>P("retentionDays",Number(a.target.value)),disabled:L,className:"min-w-0 flex-1 rounded-lg border border-border bg-background px-3 py-2 text-sm text-text-main outline-none focus:border-primary disabled:opacity-60"}),(0,d.jsx)("span",{className:"text-xs text-text-muted",children:"days"})]})}),(0,d.jsxs)("div",{className:"rounded-xl border border-green-500/20 bg-green-500/5 p-3 text-xs leading-5 text-text-muted",children:[(0,d.jsx)("div",{className:"font-semibold text-green-600 dark:text-green-400",children:"Transport controls enforced"}),"TLS verification ON \xb7 HTTP/1.1 \xb7 HTTPS CONNECT only \xb7 public TCP 443 only."]})]})]}),(0,d.jsxs)("div",{className:"mt-4 flex flex-wrap gap-2",children:[(0,d.jsx)("button",{type:"button",onClick:R,disabled:!!v||L,className:"rounded-lg bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:"save"===v?"Saving…":"Save"}),L?(0,d.jsx)("button",{type:"button",onClick:()=>Q("stop"),disabled:!!v,className:"rounded-lg border border-red-500/30 bg-red-500/10 px-4 py-2 text-sm font-semibold text-red-500 disabled:opacity-50",children:"stop"===v?"Stopping…":"Stop Proxy"}):(0,d.jsx)("button",{type:"button",onClick:()=>Q("start",{config:c}),disabled:!!v,className:"rounded-lg border border-green-500/30 bg-green-500/10 px-4 py-2 text-sm font-semibold text-green-600 disabled:opacity-50",children:"start"===v?"Starting…":"Start Proxy"}),(0,d.jsx)("button",{type:"button",onClick:()=>Q("restart",{config:c}),disabled:!!v,className:"rounded-lg border border-border px-4 py-2 text-sm font-semibold text-text-main hover:bg-background disabled:opacity-50",children:"restart"===v?"Restarting…":"Save & Restart"}),(0,d.jsx)("button",{type:"button",onClick:()=>Q("test"),disabled:!!v,className:"rounded-lg border border-primary/30 bg-primary/10 px-4 py-2 text-sm font-semibold text-primary disabled:opacity-50",children:"test"===v?"Testing…":"Run Simulated Test"})]})]}),(0,d.jsxs)("div",{className:"space-y-4",children:[(0,d.jsxs)("section",{className:"rounded-2xl border border-border bg-surface p-4",children:[(0,d.jsx)("h2",{className:"font-semibold text-text-main",children:"Root CA"}),(0,d.jsx)("p",{className:"mt-1 text-xs leading-5 text-text-muted",children:"The existing Root CA/key pair is validated and reused. Audit Proxy never auto-rotates enterprise CA material."}),(0,d.jsxs)("div",{className:"mt-3 grid gap-2 text-xs",children:[(0,d.jsxs)("div",{className:"flex justify-between gap-3",children:[(0,d.jsx)("span",{className:"text-text-muted",children:"Status"}),(0,d.jsx)("span",{className:"font-medium text-text-main",children:K.validated?"Validated":K.certExists?"Needs attention":"Not generated"})]}),K.subject?(0,d.jsxs)("div",{className:"grid gap-1",children:[(0,d.jsx)("span",{className:"text-text-muted",children:"Subject"}),(0,d.jsx)("span",{className:"break-all font-mono text-[11px] text-text-main",children:K.subject})]}):null,K.fingerprint?(0,d.jsxs)("div",{className:"grid gap-1",children:[(0,d.jsx)("span",{className:"text-text-muted",children:"Public key fingerprint"}),(0,d.jsx)("span",{className:"break-all font-mono text-[11px] text-text-main",children:K.fingerprint})]}):null,K.notAfter?(0,d.jsxs)("div",{className:"flex justify-between gap-3",children:[(0,d.jsx)("span",{className:"text-text-muted",children:"Expires"}),(0,d.jsx)("span",{className:"text-text-main",children:new Date(K.notAfter).toLocaleString()})]}):null,K.error?(0,d.jsx)("div",{className:"rounded-lg bg-red-500/10 p-2 text-red-600 dark:text-red-300",children:K.error}):null]}),(0,d.jsxs)("div",{className:"mt-4 flex flex-wrap gap-2",children:[(0,d.jsx)("button",{type:"button",onClick:T,disabled:!!v||L,className:"rounded-lg border border-border px-3 py-2 text-xs font-semibold text-text-main hover:bg-background disabled:opacity-50",children:K.certExists?"Validate / Reuse CA":"Generate CA"}),(0,d.jsx)("a",{href:"/api/audit-proxy/ca?download=cert",className:`rounded-lg border border-primary/30 bg-primary/10 px-3 py-2 text-xs font-semibold text-primary ${!K.certExists?"pointer-events-none opacity-50":""}`,children:"Download Root CA"}),(0,d.jsx)(g(),{href:"/dashboard/mitm",className:"rounded-lg border border-border px-3 py-2 text-xs font-semibold text-text-main hover:bg-background",children:"Advanced CA management"})]})]}),(0,d.jsxs)("section",{className:"rounded-2xl border border-border bg-surface p-4",children:[(0,d.jsx)("h2",{className:"font-semibold text-text-main",children:"Client deployment values"}),(0,d.jsx)("p",{className:"mt-1 text-xs leading-5 text-text-muted",children:"Process-scoped launchers do not use setx or modify Windows/System proxy. NO_PROXY keeps localhost OAuth callbacks and local MCP services off the gateway."}),(0,d.jsxs)("div",{className:"mt-3 rounded-xl border border-primary/20 bg-primary/5 p-3 text-xs leading-5 text-text-muted",children:[(0,d.jsx)("div",{className:"font-semibold text-primary",children:"Before first use"}),"Save the CA as ",(0,d.jsx)("code",{className:"rounded bg-background px-1 py-0.5",children:Y})," on Windows or ",(0,d.jsx)("code",{className:"rounded bg-background px-1 py-0.5",children:Z})," on Linux/macOS. The extra CA variable is harmless when the CA is already trusted by the OS."]}),(0,d.jsxs)("div",{className:"mt-3 grid gap-3",children:[(0,d.jsxs)("div",{className:"rounded-xl border border-border bg-background p-3",children:[(0,d.jsxs)("div",{className:"flex items-center justify-between gap-2",children:[(0,d.jsx)("span",{className:"text-xs font-semibold text-text-main",children:"Proxy URL"}),(0,d.jsx)("button",{type:"button",onClick:()=>V("url",N),className:"text-xs text-primary",children:"url"===D?"Copied":"Copy"})]}),(0,d.jsx)("code",{className:"mt-1 block break-all text-xs text-text-muted",children:N})]}),(0,d.jsx)(u,{title:"Claude Code \xb7 Windows PowerShell",subtitle:"Proxy variables exist only in the child process.",command:_,copyKey:"claude-ps",copied:D,onCopy:V,recommended:!0}),(0,d.jsx)(u,{title:"Codex \xb7 Windows PowerShell",subtitle:"No persistent user/system environment changes.",command:aa,copyKey:"codex-ps",copied:D,onCopy:V,recommended:!0}),(0,d.jsxs)("details",{className:"rounded-xl border border-border bg-background p-3",children:[(0,d.jsx)("summary",{className:"cursor-pointer text-xs font-semibold text-text-main",children:"Codex \xb7 skip the WebSocket retry delay (optional)"}),(0,d.jsxs)("p",{className:"mt-2 text-[11px] leading-5 text-text-muted",children:["Codex opens ",(0,d.jsx)("code",{className:"rounded bg-surface px-1 py-0.5",children:"wss://chatgpt.com/backend-api/codex/responses"})," before it will use HTTPS. This proxy refuses upgrades so every request stays auditable, which costs Codex five reconnect attempts — about 7 seconds — once per start, before it falls back. Requests are logged either way; this only removes the wait."]}),(0,d.jsxs)("p",{className:"mt-2 text-[11px] leading-5 text-text-muted",children:["Run once in PowerShell. It is idempotent, writes the top-level key above every table (TOML requires that) and keeps a ",(0,d.jsx)("code",{className:"rounded bg-surface px-1 py-0.5",children:"config.toml.bak"}),"."]}),(0,d.jsxs)("p",{className:"mt-2 text-[11px] leading-5 text-text-muted",children:["Only the transport is configurable in config.toml. Codex has no proxy key there — it reads ",(0,d.jsx)("code",{className:"rounded bg-surface px-1 py-0.5",children:"HTTP_PROXY"}),"/",(0,d.jsx)("code",{className:"rounded bg-surface px-1 py-0.5",children:"HTTPS_PROXY"}),"/",(0,d.jsx)("code",{className:"rounded bg-surface px-1 py-0.5",children:"NO_PROXY"})," from the environment only, so the launcher above stays required."]}),(0,d.jsx)("div",{className:"mt-3",children:(0,d.jsx)(u,{title:"Pin Codex to the HTTPS transport",subtitle:"Edits %USERPROFILE%\\.codex\\config.toml",command:ae,copyKey:"codex-https-config",copied:D,onCopy:V})}),(0,d.jsxs)("p",{className:"mt-2 text-[11px] leading-5 text-amber-600 dark:text-amber-400",children:["Trade-off: the built-in ",(0,d.jsx)("code",{className:"rounded bg-surface px-1 py-0.5",children:"openai"})," provider is reserved, so this clones it. The clone does not send ",(0,d.jsx)("code",{className:"rounded bg-surface px-1 py-0.5",children:"content-encoding"})," (request compression), ",(0,d.jsx)("code",{className:"rounded bg-surface px-1 py-0.5",children:"x-codex-routing-hint"})," or ",(0,d.jsx)("code",{className:"rounded bg-surface px-1 py-0.5",children:"version"}),", and it pins ",(0,d.jsx)("code",{className:"rounded bg-surface px-1 py-0.5",children:"base_url"}),". Delete both blocks from config.toml to return to defaults."]})]}),(0,d.jsxs)("details",{className:"rounded-xl border border-border bg-background p-3",children:[(0,d.jsx)("summary",{className:"cursor-pointer text-xs font-semibold text-text-main",children:"Linux / macOS process-scoped commands"}),(0,d.jsxs)("div",{className:"mt-3 grid gap-3",children:[(0,d.jsx)(u,{title:"Claude Code \xb7 Bash/zsh",command:ac,copyKey:"claude-bash",copied:D,onCopy:V}),(0,d.jsx)(u,{title:"Codex \xb7 Bash/zsh",command:ad,copyKey:"codex-bash",copied:D,onCopy:V})]})]})]})]})]})]}),B?(0,d.jsxs)("section",{className:`rounded-2xl border p-4 ${B.ok?"border-green-500/30 bg-green-500/5":"border-red-500/30 bg-red-500/5"}`,children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center justify-between gap-2",children:[(0,d.jsxs)("div",{children:[(0,d.jsx)("h2",{className:"font-semibold text-text-main",children:"Simulated end-to-end test"}),(0,d.jsx)("p",{className:"mt-1 text-xs text-text-muted",children:"Local throwaway TLS endpoints; no cloud credential or external API call is used."})]}),(0,d.jsxs)(n,{ok:B.ok,children:[B.passed,"/",B.total," passed \xb7 ",B.durationMs," ms"]})]}),(0,d.jsx)("div",{className:"mt-3 grid gap-2 md:grid-cols-2 xl:grid-cols-3",children:B.checks?.map(a=>(0,d.jsxs)("div",{className:"flex items-start gap-2 rounded-lg border border-border/70 bg-background/60 px-3 py-2 text-xs",children:[(0,d.jsx)("span",{className:`material-symbols-outlined text-[16px] ${a.ok?"text-green-500":"text-red-500"}`,children:a.ok?"check_circle":"error"}),(0,d.jsxs)("span",{children:[(0,d.jsx)("span",{className:"font-medium text-text-main",children:a.name}),a.detail?(0,d.jsx)("span",{className:"mt-0.5 block text-text-muted",children:a.detail}):null]})]},a.name))})]}):null,(0,d.jsx)(h,{}),(0,d.jsx)(i,{})]}),(0,d.jsxs)("div",{className:"audit"===F?"space-y-4":"hidden",children:[(0,d.jsxs)("section",{className:"rounded-2xl border border-border bg-surface p-4",children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center justify-between gap-2",children:[(0,d.jsxs)("div",{children:[(0,d.jsx)("h2",{className:"font-semibold text-text-main",children:"Token usage"}),(0,d.jsxs)("p",{className:"mt-1 text-xs text-text-muted",children:["Counts are read out of the audited provider responses themselves — ",(0,d.jsx)("code",{className:"font-mono",children:"message_start"})," carries input and cache tokens, the closing ",(0,d.jsx)("code",{className:"font-mono",children:"message_delta"})," carries output. Scope is the same window as the table below."]})]}),a?.usageSummary?.incompleteUsageCount?(0,d.jsxs)("span",{className:"rounded-lg border border-amber-500/30 bg-amber-500/10 px-2.5 py-1 text-[11px] font-medium text-amber-700 dark:text-amber-300",children:[a.usageSummary.incompleteUsageCount," response(s) truncated before the final usage event — output tokens under-counted"]}):null]}),a?.usageSummary?.totals?.requests?(0,d.jsxs)(d.Fragment,{children:[(0,d.jsxs)("div",{className:"mt-3 grid gap-2 sm:grid-cols-2 lg:grid-cols-5",children:[(0,d.jsx)(q,{label:"Requests with usage",value:a.usageSummary.totals.requests}),(0,d.jsx)(q,{label:"Input",value:o(a.usageSummary.totals.inputTokens),hint:"new (uncached) input tokens"}),(0,d.jsx)(q,{label:"Output",value:o(a.usageSummary.totals.outputTokens)}),(0,d.jsx)(q,{label:"Cache read / write",value:`${o(a.usageSummary.totals.cacheReadTokens)} / ${o(a.usageSummary.totals.cacheCreationTokens)}`}),(0,d.jsx)(q,{label:"Est. cost",value:p(a.usageSummary.totals.cost),hint:"from the pricing table"})]}),(0,d.jsxs)("div",{className:"mt-4 grid gap-5 lg:grid-cols-2",children:[(0,d.jsx)(r,{title:"By model",rows:a.usageSummary.byModel}),(0,d.jsx)(r,{title:"By client tool",rows:a.usageSummary.bySourceTool})]})]}):(0,d.jsx)("p",{className:"mt-3 rounded-xl border border-border bg-background/50 p-3 text-xs text-text-muted",children:"No token usage recorded yet. Usage appears once an audited request reaches a provider that reports it (Anthropic and OpenAI both do)."})]}),(0,d.jsxs)("section",{className:"rounded-2xl border border-border bg-surface p-4",children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center justify-between gap-2",children:[(0,d.jsxs)("div",{children:[(0,d.jsx)("h2",{className:"font-semibold text-text-main",children:"Recent audit requests"}),(0,d.jsx)("p",{className:"mt-1 text-xs text-text-muted",children:"Credentials are redacted before persistence. Local writes and MySQL mirroring run through a bounded asynchronous queue."})]}),(0,d.jsxs)("div",{className:"flex items-center gap-3 text-xs text-text-muted",children:[(0,d.jsxs)("span",{children:["Queue ",I.auditStore?.queueDepth||0,"/",I.auditStore?.queueLimit||1e3]}),(0,d.jsx)("button",{type:"button",onClick:()=>Q("clear-logs"),disabled:!!v,className:"rounded-lg border border-border px-3 py-1.5 hover:bg-background disabled:opacity-50",children:"Clear logs"})]})]}),(0,d.jsx)("div",{className:"mt-3 overflow-x-auto",children:(0,d.jsxs)("table",{className:"w-full min-w-[1250px] text-left text-xs",children:[(0,d.jsx)("thead",{className:"border-b border-border text-text-muted",children:(0,d.jsxs)("tr",{children:[(0,d.jsx)("th",{className:"px-2 py-2 font-medium",children:"Time"}),(0,d.jsx)("th",{className:"px-2 py-2 font-medium",children:"Protocol"}),(0,d.jsx)("th",{className:"px-2 py-2 font-medium",children:"Client"}),(0,d.jsx)("th",{className:"px-2 py-2 font-medium",children:"User"}),(0,d.jsx)("th",{className:"px-2 py-2 font-medium",children:"Provider"}),(0,d.jsx)("th",{className:"px-2 py-2 font-medium",children:"Host"}),(0,d.jsx)("th",{className:"px-2 py-2 font-medium",children:"Model"}),(0,d.jsx)("th",{className:"px-2 py-2 font-medium",children:"Request"}),(0,d.jsx)("th",{className:"px-2 py-2 text-right font-medium",children:"Tokens (in/out)"}),(0,d.jsx)("th",{className:"px-2 py-2 text-right font-medium",children:"Cache (r/w)"}),(0,d.jsx)("th",{className:"px-2 py-2 font-medium",children:"Status"}),(0,d.jsx)("th",{className:"px-2 py-2 font-medium",children:"Latency"})]})}),(0,d.jsxs)("tbody",{children:[(a?.events||[]).map(a=>(0,d.jsxs)("tr",{className:"border-b border-border/60 align-top text-text-main",children:[(0,d.jsx)("td",{className:"whitespace-nowrap px-2 py-2 text-text-muted",children:new Date(a.timestamp).toLocaleTimeString()}),(0,d.jsx)("td",{className:"px-2 py-2",children:a.protocol||"http/1.1"}),(0,d.jsx)("td",{className:"px-2 py-2 font-mono text-[11px]",children:a.client?.ip||"-"}),(0,d.jsx)("td",{className:"px-2 py-2",children:a.client?.proxyUser||"-"}),(0,d.jsx)("td",{className:"px-2 py-2",children:a.provider||"-"}),(0,d.jsx)("td",{className:"px-2 py-2 font-mono text-[11px]",children:a.host||"-"}),(0,d.jsx)("td",{className:"px-2 py-2",children:a.model||"-"}),(0,d.jsx)("td",{className:"max-w-[300px] px-2 py-2",children:(0,d.jsxs)("details",{children:[(0,d.jsxs)("summary",{className:"cursor-pointer truncate",children:[a.method," ",a.path]}),(0,d.jsx)("pre",{className:"mt-2 max-h-72 overflow-auto whitespace-pre-wrap rounded-lg bg-background p-2 text-[10px] leading-4 text-text-muted",children:JSON.stringify({request:a.request,response:a.response,error:a.error},null,2)})]})}),(0,d.jsx)("td",{className:"whitespace-nowrap px-2 py-2 text-right",children:a.usage?(0,d.jsxs)("span",{title:!1===a.usage.complete?"Response was truncated before the final usage event; output is a lower bound":void 0,children:[o(a.usage.inputTokens),"/",o(a.usage.outputTokens),!1===a.usage.complete?(0,d.jsx)("span",{className:"text-amber-600 dark:text-amber-400",children:"*"}):null]}):(0,d.jsx)("span",{className:"text-text-muted",children:"-"})}),(0,d.jsx)("td",{className:"whitespace-nowrap px-2 py-2 text-right text-text-muted",children:a.usage?`${o(a.usage.cacheReadTokens)}/${o(a.usage.cacheCreationTokens)}`:"-"}),(0,d.jsx)("td",{className:"px-2 py-2",children:a.status||"ERR"}),(0,d.jsxs)("td",{className:"whitespace-nowrap px-2 py-2",children:[a.durationMs??"-"," ms"]})]},a.id)),a?.events?.length?null:(0,d.jsx)("tr",{children:(0,d.jsx)("td",{colSpan:"12",className:"px-2 py-8 text-center text-text-muted",children:"No audited requests yet."})})]})]})})]})]})]})}},41025:a=>{"use strict";a.exports=require("next/dist/server/app-render/dynamic-access-async-storage.external.js")},41204:a=>{"use strict";a.exports=require("string_decoder")},44057:(a,b,c)=>{"use strict";function d(){throw Object.defineProperty(Error("`unauthorized()` is experimental and only allowed to be used when `experimental.authInterrupts` is enabled."),"__NEXT_ERROR_CODE",{value:"E411",enumerable:!1,configurable:!0})}Object.defineProperty(b,"__esModule",{value:!0}),Object.defineProperty(b,"unauthorized",{enumerable:!0,get:function(){return d}}),c(7638).HTTP_ERROR_FALLBACK_ERROR_CODE,("function"==typeof b.default||"object"==typeof b.default&&null!==b.default)&&void 0===b.default.__esModule&&(Object.defineProperty(b.default,"__esModule",{value:!0}),Object.assign(b.default,b),a.exports=b.default)},46060:a=>{"use strict";a.exports=require("next/dist/shared/lib/no-fallback-error.external.js")},46293:a=>{"use strict";a.exports=require("sql.js")},51455:a=>{"use strict";a.exports=require("node:fs/promises")},52283:(a,b,c)=>{"use strict";Object.defineProperty(b,"__esModule",{value:!0}),Object.defineProperty(b,"notFound",{enumerable:!0,get:function(){return f}});let d=c(7638),e=`${d.HTTP_ERROR_FALLBACK_ERROR_CODE};404`;function f(){let a=Object.defineProperty(Error(e),"__NEXT_ERROR_CODE",{value:"E1041",enumerable:!1,configurable:!0});throw a.digest=e,a}("function"==typeof b.default||"object"==typeof b.default&&null!==b.default)&&void 0===b.default.__esModule&&(Object.defineProperty(b.default,"__esModule",{value:!0}),Object.assign(b.default,b),a.exports=b.default)},53053:a=>{"use strict";a.exports=require("node:diagnostics_channel")},55511:a=>{"use strict";a.exports=require("crypto")},63033:a=>{"use strict";a.exports=require("next/dist/server/app-render/work-unit-async-storage.external.js")},64939:a=>{"use strict";a.exports=import("pg")},66136:a=>{"use strict";a.exports=require("timers")},66610:(a,b,c)=>{"use strict";Object.defineProperty(b,"__esModule",{value:!0});var d={ReadonlyURLSearchParams:function(){return f.ReadonlyURLSearchParams},RedirectType:function(){return m},forbidden:function(){return i.forbidden},notFound:function(){return h.notFound},permanentRedirect:function(){return g.permanentRedirect},redirect:function(){return g.redirect},unauthorized:function(){return j.unauthorized},unstable_isUnrecognizedActionError:function(){return l},unstable_rethrow:function(){return k.unstable_rethrow}};for(var e in d)Object.defineProperty(b,e,{enumerable:!0,get:d[e]});let f=c(10381),g=c(32171),h=c(52283),i=c(92606),j=c(44057),k=c(98621);function l(){throw Object.defineProperty(Error("`unstable_isUnrecognizedActionError` can only be used on the client."),"__NEXT_ERROR_CODE",{value:"E776",enumerable:!1,configurable:!0})}let m={push:"push",replace:"replace"};("function"==typeof b.default||"object"==typeof b.default&&null!==b.default)&&void 0===b.default.__esModule&&(Object.defineProperty(b.default,"__esModule",{value:!0}),Object.assign(b.default,b),a.exports=b.default)},71899:(a,b,c)=>{"use strict";c.r(b),c.d(b,{__next_app__:()=>w,handler:()=>y,routeModule:()=>x});var d=c(21635),e=c(86315),f=c(1020),g=c(61287),h={};for(let a in g)0>["default","__next_app__","routeModule","handler"].indexOf(a)&&(h[a]=()=>g[a]);c.d(b,h);let i=(0,d.p)(()=>Promise.resolve().then(c.bind(c,32059))),j=(0,d.p)(()=>Promise.resolve().then(c.t.bind(c,95547,23))),k=(0,d.p)(()=>Promise.resolve().then(c.t.bind(c,55091,23))),l=(0,d.p)(()=>Promise.resolve().then(c.t.bind(c,45270,23))),m=(0,d.p)(()=>Promise.resolve().then(c.t.bind(c,28193,23))),n=(0,d.p)(()=>Promise.resolve().then(c.bind(c,30508))),o=(0,d.p)(()=>Promise.resolve().then(c.t.bind(c,95547,23))),p=(0,d.p)(()=>Promise.resolve().then(c.t.bind(c,55091,23))),q=(0,d.p)(()=>Promise.resolve().then(c.t.bind(c,45270,23))),r=(0,d.p)(()=>Promise.resolve().then(c.t.bind(c,28193,23))),s=(0,d.p)(()=>Promise.resolve().then(c.t.bind(c,95547,23))),t=(0,d.p)(()=>Promise.resolve().then(c.t.bind(c,95547,23))),u={children:["",{children:["(dashboard)",{children:["dashboard",{children:["audit-proxy",{children:["__PAGE__",{},{page:[(0,d.p)(()=>Promise.resolve().then(c.bind(c,86282))),"D:\\bluerouter\\src\\app\\(dashboard)\\dashboard\\audit-proxy\\page.js"]}]},{"global-error":[t,"next/dist/client/components/builtin/global-error.js"]},[]]},{"global-error":[s,"next/dist/client/components/builtin/global-error.js"]},[]]},{layout:[n,"D:\\bluerouter\\src\\app\\(dashboard)\\layout.js"],"global-error":[o,"next/dist/client/components/builtin/global-error.js"],"not-found":[p,"next/dist/client/components/builtin/not-found.js"],forbidden:[q,"next/dist/client/components/builtin/forbidden.js"],unauthorized:[r,"next/dist/client/components/builtin/unauthorized.js"],metadata:{icon:[async a=>(await (0,d.p)(()=>Promise.resolve().then(c.bind(c,70440)))()).default(a)],apple:[],openGraph:[],twitter:[],manifest:"/manifest.webmanifest"}},[]]},{layout:[i,"D:\\bluerouter\\src\\app\\layout.js"],"global-error":[j,"next/dist/client/components/builtin/global-error.js"],"not-found":[k,"next/dist/client/components/builtin/not-found.js"],forbidden:[l,"next/dist/client/components/builtin/forbidden.js"],unauthorized:[m,"next/dist/client/components/builtin/unauthorized.js"],metadata:{icon:[async a=>(await (0,d.p)(()=>Promise.resolve().then(c.bind(c,70440)))()).default(a)],apple:[],openGraph:[],twitter:[],manifest:"/manifest.webmanifest"}},[]]}.children,v=(0,e.H)({tree:u,page:"/(dashboard)/dashboard/audit-proxy/page",pathname:"/dashboard/audit-proxy",require:c,loadChunk:()=>Promise.resolve(),interopDefault:f.T}),w=v.__next_app__,x=v.routeModule,y=v.handler},73024:a=>{"use strict";a.exports=require("node:fs")},73565:(a,b,c)=>{"use strict";Object.defineProperty(b,"__esModule",{value:!0});var d={actionAsyncStorage:function(){return f.actionAsyncStorage},workAsyncStorage:function(){return g.workAsyncStorage},workUnitAsyncStorage:function(){return h.workUnitAsyncStorage}};for(var e in d)Object.defineProperty(b,e,{enumerable:!0,get:d[e]});let f=c(19121),g=c(29294),h=c(63033);("function"==typeof b.default||"object"==typeof b.default&&null!==b.default)&&void 0===b.default.__esModule&&(Object.defineProperty(b.default,"__esModule",{value:!0}),Object.assign(b.default,b),a.exports=b.default)},74075:a=>{"use strict";a.exports=require("zlib")},76760:a=>{"use strict";a.exports=require("node:path")},77598:a=>{"use strict";a.exports=require("node:crypto")},78474:a=>{"use strict";a.exports=require("node:events")},78947:(a,b,c)=>{Promise.resolve().then(c.bind(c,1568))},79428:a=>{"use strict";a.exports=require("buffer")},79748:a=>{"use strict";a.exports=require("fs/promises")},80099:a=>{"use strict";a.exports=require("node:sqlite")},81787:a=>{"use strict";a.exports=require("bun:sqlite")},86282:(a,b,c)=>{"use strict";c.r(b),c.d(b,{default:()=>h});var d=c(5735),e=c(91970),f=c(9588),g=c(1568);async function h(){let a=await (0,f.ny)();return a.authenticated||(0,e.redirect)("/login"),a.isAdmin||(0,e.redirect)("/dashboard/endpoint"),(0,d.jsx)(g.default,{})}},87550:a=>{"use strict";a.exports=require("better-sqlite3")},90389:(a,b,c)=>{"use strict";c.d(b,{hS:()=>d});let d=Object.freeze({ADMIN:"admin",MONITOR_ADMIN:"monitor_admin",AI_GATEWAYS_MONITOR:"ai_gateways_monitor",USER:"user",GUEST:"guest"});Object.freeze([{href:"/dashboard/endpoint",label:"Endpoint",icon:"api"},{href:"/dashboard/api-keys",label:"API Keys",icon:"vpn_key"},{href:"/dashboard/usage",label:"Usage",icon:"bar_chart"},{href:"/dashboard/analytics",label:"Analytics",icon:"monitoring"},{href:"/dashboard/ai-power-index",label:"AI Power Index",icon:"electric_bolt"},{href:"/dashboard/quota",label:"Quota Tracker",icon:"data_usage"}]),Object.freeze(["/dashboard","/dashboard/endpoint","/dashboard/api-keys","/dashboard/usage","/dashboard/analytics","/dashboard/ai-power-index","/dashboard/quota"])},91645:a=>{"use strict";a.exports=require("net")},91970:(a,b,c)=>{"use strict";var d=c(66610);c.o(d,"notFound")&&c.d(b,{notFound:function(){return d.notFound}}),c.o(d,"redirect")&&c.d(b,{redirect:function(){return d.redirect}})},92606:(a,b,c)=>{"use strict";function d(){throw Object.defineProperty(Error("`forbidden()` is experimental and only allowed to be enabled when `experimental.authInterrupts` is enabled."),"__NEXT_ERROR_CODE",{value:"E488",enumerable:!1,configurable:!0})}Object.defineProperty(b,"__esModule",{value:!0}),Object.defineProperty(b,"forbidden",{enumerable:!0,get:function(){return d}}),c(7638).HTTP_ERROR_FALLBACK_ERROR_CODE,("function"==typeof b.default||"object"==typeof b.default&&null!==b.default)&&void 0===b.default.__esModule&&(Object.defineProperty(b.default,"__esModule",{value:!0}),Object.assign(b.default,b),a.exports=b.default)},93019:(a,b,c)=>{Promise.resolve().then(c.bind(c,39834))},94735:a=>{"use strict";a.exports=require("events")},98621:(a,b,c)=>{"use strict";Object.defineProperty(b,"__esModule",{value:!0}),Object.defineProperty(b,"unstable_rethrow",{enumerable:!0,get:function(){return function a(b){if((0,g.isNextRouterError)(b)||(0,f.isBailoutToCSRError)(b)||(0,i.isDynamicServerError)(b)||(0,h.isDynamicPostpone)(b)||(0,e.isPostpone)(b)||(0,d.isHangingPromiseRejectionError)(b)||(0,h.isPrerenderInterruptedError)(b))throw b;b instanceof Error&&"cause"in b&&a(b.cause)}}});let d=c(48894),e=c(64491),f=c(62880),g=c(76484),h=c(23445),i=c(43449);("function"==typeof b.default||"object"==typeof b.default&&null!==b.default)&&void 0===b.default.__esModule&&(Object.defineProperty(b.default,"__esModule",{value:!0}),Object.assign(b.default,b),a.exports=b.default)}};var b=require("../../../../webpack-runtime.js");b.C(a);var c=b.X(0,[4741,5592,5573,4433,2430,8316,8946,402,5681,4404,6064,6328,8640],()=>b(b.s=71899));module.exports=c})();
+}`,o=async(a,b)=>{try{await navigator.clipboard.writeText(b),l(a),setTimeout(()=>l(""),1500)}catch{c?.("Clipboard access failed.")}};return(0,d.jsxs)("section",{className:"rounded-2xl border border-border bg-surface p-4",children:[(0,d.jsx)("h2",{className:"font-semibold text-text-main",children:"Client deployment values"}),(0,d.jsx)("p",{className:"mt-1 text-xs leading-5 text-text-muted",children:"Process-scoped launchers do not use setx or modify Windows/System proxy. NO_PROXY keeps localhost OAuth callbacks and local MCP services off the gateway."}),(0,d.jsxs)("div",{className:"mt-3 rounded-xl border border-primary/20 bg-primary/5 p-3 text-xs leading-5 text-text-muted",children:[(0,d.jsx)("div",{className:"font-semibold text-primary",children:"Before first use"}),"Save the CA as ",(0,d.jsx)("code",{className:"rounded bg-background px-1 py-0.5",children:g})," on Windows or ",(0,d.jsx)("code",{className:"rounded bg-background px-1 py-0.5",children:h})," on Linux/macOS. The extra CA variable is harmless when the CA is already trusted by the OS."]}),(0,d.jsxs)("div",{className:"mt-3 grid gap-3",children:[(0,d.jsxs)("div",{className:"rounded-xl border border-border bg-background p-3",children:[(0,d.jsxs)("div",{className:"flex items-center justify-between gap-2",children:[(0,d.jsx)("span",{className:"text-xs font-semibold text-text-main",children:"Proxy URL"}),(0,d.jsx)("button",{type:"button",onClick:()=>o("url",m.proxyUrl),className:"text-xs text-primary",children:"url"===k?"Copied":"Copy"})]}),(0,d.jsx)("code",{className:"mt-1 block break-all text-xs text-text-muted",children:m.proxyUrl})]}),(0,d.jsx)(i,{title:"Claude Code \xb7 Windows PowerShell",subtitle:"Proxy variables exist only in the child process.",command:m.claudePowerShell,copyKey:"claude-ps",copied:k,onCopy:o,recommended:!0}),(0,d.jsx)(i,{title:"Codex \xb7 Windows PowerShell",subtitle:"No persistent user/system environment changes.",command:m.codexPowerShell,copyKey:"codex-ps",copied:k,onCopy:o,recommended:!0}),(0,d.jsxs)("details",{className:"rounded-xl border border-border bg-background p-3",children:[(0,d.jsx)("summary",{className:"cursor-pointer text-xs font-semibold text-text-main",children:"Codex \xb7 skip the WebSocket retry delay (optional)"}),(0,d.jsxs)("p",{className:"mt-2 text-[11px] leading-5 text-text-muted",children:["Codex opens ",(0,d.jsx)("code",{className:"rounded bg-surface px-1 py-0.5",children:"wss://chatgpt.com/backend-api/codex/responses"})," before it will use HTTPS. This proxy refuses upgrades so every request stays auditable, which costs Codex five reconnect attempts — about 7 seconds — once per start, before it falls back. Requests are logged either way; this only removes the wait."]}),(0,d.jsxs)("p",{className:"mt-2 text-[11px] leading-5 text-text-muted",children:["Run once in PowerShell. It is idempotent, writes the top-level key above every table (TOML requires that) and keeps a ",(0,d.jsx)("code",{className:"rounded bg-surface px-1 py-0.5",children:"config.toml.bak"}),"."]}),(0,d.jsxs)("p",{className:"mt-2 text-[11px] leading-5 text-text-muted",children:["Only the transport is configurable in config.toml. Codex has no proxy key there — it reads ",(0,d.jsx)("code",{className:"rounded bg-surface px-1 py-0.5",children:"HTTP_PROXY"}),"/",(0,d.jsx)("code",{className:"rounded bg-surface px-1 py-0.5",children:"HTTPS_PROXY"}),"/",(0,d.jsx)("code",{className:"rounded bg-surface px-1 py-0.5",children:"NO_PROXY"})," from the environment only, so the launcher above stays required."]}),(0,d.jsx)("div",{className:"mt-3",children:(0,d.jsx)(i,{title:"Pin Codex to the HTTPS transport",subtitle:"Edits %USERPROFILE%\\.codex\\config.toml",command:n,copyKey:"codex-https-config",copied:k,onCopy:o})}),(0,d.jsxs)("p",{className:"mt-2 text-[11px] leading-5 text-amber-600 dark:text-amber-400",children:["Trade-off: the built-in ",(0,d.jsx)("code",{className:"rounded bg-surface px-1 py-0.5",children:"openai"})," provider is reserved, so this clones it. The clone does not send ",(0,d.jsx)("code",{className:"rounded bg-surface px-1 py-0.5",children:"content-encoding"})," (request compression), ",(0,d.jsx)("code",{className:"rounded bg-surface px-1 py-0.5",children:"x-codex-routing-hint"})," or ",(0,d.jsx)("code",{className:"rounded bg-surface px-1 py-0.5",children:"version"}),", and it pins ",(0,d.jsx)("code",{className:"rounded bg-surface px-1 py-0.5",children:"base_url"}),". Delete both blocks from config.toml to return to defaults."]})]}),(0,d.jsxs)("details",{className:"rounded-xl border border-border bg-background p-3",children:[(0,d.jsx)("summary",{className:"cursor-pointer text-xs font-semibold text-text-main",children:"Linux / macOS process-scoped commands"}),(0,d.jsxs)("div",{className:"mt-3 grid gap-3",children:[(0,d.jsx)(i,{title:"Claude Code \xb7 Bash/zsh",command:m.claudeBash,copyKey:"claude-bash",copied:k,onCopy:o}),(0,d.jsx)(i,{title:"Codex \xb7 Bash/zsh",command:m.codexBash,copyKey:"codex-bash",copied:k,onCopy:o})]})]})]})]})}},8128:a=>{"use strict";a.exports=require("next/dist/server/runtime-reacts.external.js")},9471:(a,b,c)=>{"use strict";c.d(b,{Su:()=>i,T0:()=>j,Vq:()=>h});var d=c(23211),e=c(43096),f=c(77407),g=c(9588);function h(a,b=function(){try{return(0,f.normalizeAccessGrants)((0,e.loadConfig)().accessGrants)}catch{return[]}}()){for(let c of function(a={}){let b=Array.isArray(a.candidates)?a.candidates.filter(Boolean):[];return b.length>0?b:a.userId?[a.userId]:[]}(a)){let a=(0,f.findAccessGrant)(b,c);if(a)return a}return null}async function i(){let a=await (0,g.ny)();if(!a.authenticated)return{authenticated:!1,isAdmin:!1,canView:!1,grant:null,userId:"",displayName:""};let b=!0===a.isAdmin,c=h(a);return{authenticated:!0,isAdmin:b,grant:c,canView:b||!!c,userId:a.userId||"",displayName:a.displayName||a.userId||""}}async function j(){let a=await i();return a.authenticated?a.canView?{viewer:a,response:null}:{viewer:a,response:d.NextResponse.json({error:"Audit Proxy access has not been granted to this account"},{status:403})}:{viewer:a,response:d.NextResponse.json({error:"Authentication required"},{status:401})}}},10381:(a,b)=>{"use strict";Object.defineProperty(b,"__esModule",{value:!0}),Object.defineProperty(b,"ReadonlyURLSearchParams",{enumerable:!0,get:function(){return d}});class c extends Error{constructor(){super("Method unavailable on `ReadonlyURLSearchParams`. Read more: https://nextjs.org/docs/app/api-reference/functions/use-search-params#updating-searchparams"),Object.defineProperty(this,"__NEXT_ERROR_CODE",{value:"E1174",enumerable:!1,configurable:!0})}}class d extends URLSearchParams{append(){throw new c}delete(){throw new c}set(){throw new c}sort(){throw new c}}("function"==typeof b.default||"object"==typeof b.default&&null!==b.default)&&void 0===b.default.__esModule&&(Object.defineProperty(b.default,"__esModule",{value:!0}),Object.assign(b.default,b),a.exports=b.default)},10846:a=>{"use strict";a.exports=require("next/dist/compiled/next-server/app-page.runtime.prod.js")},19121:a=>{"use strict";a.exports=require("next/dist/server/app-render/action-async-storage.external.js")},19771:a=>{"use strict";a.exports=require("process")},21820:a=>{"use strict";a.exports=require("os")},27910:a=>{"use strict";a.exports=require("stream")},28354:a=>{"use strict";a.exports=require("util")},29021:a=>{"use strict";a.exports=require("fs")},29294:a=>{"use strict";a.exports=require("next/dist/server/app-render/work-async-storage.external.js")},32171:(a,b,c)=>{"use strict";Object.defineProperty(b,"__esModule",{value:!0});var d={getRedirectError:function(){return i},getRedirectStatusCodeFromError:function(){return n},getRedirectTypeFromError:function(){return m},getURLFromRedirectError:function(){return l},permanentRedirect:function(){return k},redirect:function(){return j}};for(var e in d)Object.defineProperty(b,e,{enumerable:!0,get:d[e]});let f=c(81494),g=c(52220),h=c(73565);function i(a,b,c=f.RedirectStatusCode.TemporaryRedirect){let d=Object.defineProperty(Error(g.REDIRECT_ERROR_CODE),"__NEXT_ERROR_CODE",{value:"E394",enumerable:!1,configurable:!0});return d.digest=`${g.REDIRECT_ERROR_CODE};${b};${a};${c};`,d}function j(a,b){throw i(a,b??=h.actionAsyncStorage?.getStore()?.isAction?"push":"replace",f.RedirectStatusCode.TemporaryRedirect)}function k(a,b="replace"){throw i(a,b,f.RedirectStatusCode.PermanentRedirect)}function l(a){return(0,g.isRedirectError)(a)?a.digest.split(";").slice(2,-2).join(";"):null}function m(a){if(!(0,g.isRedirectError)(a))throw Object.defineProperty(Error("Not a redirect error"),"__NEXT_ERROR_CODE",{value:"E260",enumerable:!1,configurable:!0});return a.digest.split(";",2)[1]}function n(a){if(!(0,g.isRedirectError)(a))throw Object.defineProperty(Error("Not a redirect error"),"__NEXT_ERROR_CODE",{value:"E260",enumerable:!1,configurable:!0});return Number(a.digest.split(";").at(-2))}("function"==typeof b.default||"object"==typeof b.default&&null!==b.default)&&void 0===b.default.__esModule&&(Object.defineProperty(b.default,"__esModule",{value:!0}),Object.assign(b.default,b),a.exports=b.default)},33873:a=>{"use strict";a.exports=require("path")},34631:a=>{"use strict";a.exports=require("tls")},38522:a=>{"use strict";a.exports=require("node:zlib")},41025:a=>{"use strict";a.exports=require("next/dist/server/app-render/dynamic-access-async-storage.external.js")},41204:a=>{"use strict";a.exports=require("string_decoder")},42477:(a,b,c)=>{Promise.resolve().then(c.bind(c,1568)),Promise.resolve().then(c.bind(c,91202))},44057:(a,b,c)=>{"use strict";function d(){throw Object.defineProperty(Error("`unauthorized()` is experimental and only allowed to be used when `experimental.authInterrupts` is enabled."),"__NEXT_ERROR_CODE",{value:"E411",enumerable:!1,configurable:!0})}Object.defineProperty(b,"__esModule",{value:!0}),Object.defineProperty(b,"unauthorized",{enumerable:!0,get:function(){return d}}),c(7638).HTTP_ERROR_FALLBACK_ERROR_CODE,("function"==typeof b.default||"object"==typeof b.default&&null!==b.default)&&void 0===b.default.__esModule&&(Object.defineProperty(b.default,"__esModule",{value:!0}),Object.assign(b.default,b),a.exports=b.default)},46060:a=>{"use strict";a.exports=require("next/dist/shared/lib/no-fallback-error.external.js")},46293:a=>{"use strict";a.exports=require("sql.js")},51455:a=>{"use strict";a.exports=require("node:fs/promises")},52283:(a,b,c)=>{"use strict";Object.defineProperty(b,"__esModule",{value:!0}),Object.defineProperty(b,"notFound",{enumerable:!0,get:function(){return f}});let d=c(7638),e=`${d.HTTP_ERROR_FALLBACK_ERROR_CODE};404`;function f(){let a=Object.defineProperty(Error(e),"__NEXT_ERROR_CODE",{value:"E1041",enumerable:!1,configurable:!0});throw a.digest=e,a}("function"==typeof b.default||"object"==typeof b.default&&null!==b.default)&&void 0===b.default.__esModule&&(Object.defineProperty(b.default,"__esModule",{value:!0}),Object.assign(b.default,b),a.exports=b.default)},53053:a=>{"use strict";a.exports=require("node:diagnostics_channel")},55511:a=>{"use strict";a.exports=require("crypto")},63033:a=>{"use strict";a.exports=require("next/dist/server/app-render/work-unit-async-storage.external.js")},63314:(a,b,c)=>{"use strict";c.r(b),c.d(b,{__next_app__:()=>w,handler:()=>y,routeModule:()=>x});var d=c(21635),e=c(86315),f=c(1020),g=c(61287),h={};for(let a in g)0>["default","__next_app__","routeModule","handler"].indexOf(a)&&(h[a]=()=>g[a]);c.d(b,h);let i=(0,d.p)(()=>Promise.resolve().then(c.bind(c,32059))),j=(0,d.p)(()=>Promise.resolve().then(c.t.bind(c,95547,23))),k=(0,d.p)(()=>Promise.resolve().then(c.t.bind(c,55091,23))),l=(0,d.p)(()=>Promise.resolve().then(c.t.bind(c,45270,23))),m=(0,d.p)(()=>Promise.resolve().then(c.t.bind(c,28193,23))),n=(0,d.p)(()=>Promise.resolve().then(c.bind(c,30508))),o=(0,d.p)(()=>Promise.resolve().then(c.t.bind(c,95547,23))),p=(0,d.p)(()=>Promise.resolve().then(c.t.bind(c,55091,23))),q=(0,d.p)(()=>Promise.resolve().then(c.t.bind(c,45270,23))),r=(0,d.p)(()=>Promise.resolve().then(c.t.bind(c,28193,23))),s=(0,d.p)(()=>Promise.resolve().then(c.t.bind(c,95547,23))),t=(0,d.p)(()=>Promise.resolve().then(c.t.bind(c,95547,23))),u={children:["",{children:["(dashboard)",{children:["dashboard",{children:["audit-proxy",{children:["__PAGE__",{},{page:[(0,d.p)(()=>Promise.resolve().then(c.bind(c,86282))),"D:\\bluerouter\\src\\app\\(dashboard)\\dashboard\\audit-proxy\\page.js"]}]},{"global-error":[t,"next/dist/client/components/builtin/global-error.js"]},[]]},{"global-error":[s,"next/dist/client/components/builtin/global-error.js"]},[]]},{layout:[n,"D:\\bluerouter\\src\\app\\(dashboard)\\layout.js"],"global-error":[o,"next/dist/client/components/builtin/global-error.js"],"not-found":[p,"next/dist/client/components/builtin/not-found.js"],forbidden:[q,"next/dist/client/components/builtin/forbidden.js"],unauthorized:[r,"next/dist/client/components/builtin/unauthorized.js"],metadata:{icon:[async a=>(await (0,d.p)(()=>Promise.resolve().then(c.bind(c,70440)))()).default(a)],apple:[],openGraph:[],twitter:[],manifest:"/manifest.webmanifest"}},[]]},{layout:[i,"D:\\bluerouter\\src\\app\\layout.js"],"global-error":[j,"next/dist/client/components/builtin/global-error.js"],"not-found":[k,"next/dist/client/components/builtin/not-found.js"],forbidden:[l,"next/dist/client/components/builtin/forbidden.js"],unauthorized:[m,"next/dist/client/components/builtin/unauthorized.js"],metadata:{icon:[async a=>(await (0,d.p)(()=>Promise.resolve().then(c.bind(c,70440)))()).default(a)],apple:[],openGraph:[],twitter:[],manifest:"/manifest.webmanifest"}},[]]}.children,v=(0,e.H)({tree:u,page:"/(dashboard)/dashboard/audit-proxy/page",pathname:"/dashboard/audit-proxy",require:c,loadChunk:()=>Promise.resolve(),interopDefault:f.T}),w=v.__next_app__,x=v.routeModule,y=v.handler},64939:a=>{"use strict";a.exports=import("pg")},66136:a=>{"use strict";a.exports=require("timers")},66445:(a,b,c)=>{Promise.resolve().then(c.bind(c,93831)),Promise.resolve().then(c.bind(c,80532))},66610:(a,b,c)=>{"use strict";Object.defineProperty(b,"__esModule",{value:!0});var d={ReadonlyURLSearchParams:function(){return f.ReadonlyURLSearchParams},RedirectType:function(){return m},forbidden:function(){return i.forbidden},notFound:function(){return h.notFound},permanentRedirect:function(){return g.permanentRedirect},redirect:function(){return g.redirect},unauthorized:function(){return j.unauthorized},unstable_isUnrecognizedActionError:function(){return l},unstable_rethrow:function(){return k.unstable_rethrow}};for(var e in d)Object.defineProperty(b,e,{enumerable:!0,get:d[e]});let f=c(10381),g=c(32171),h=c(52283),i=c(92606),j=c(44057),k=c(98621);function l(){throw Object.defineProperty(Error("`unstable_isUnrecognizedActionError` can only be used on the client."),"__NEXT_ERROR_CODE",{value:"E776",enumerable:!1,configurable:!0})}let m={push:"push",replace:"replace"};("function"==typeof b.default||"object"==typeof b.default&&null!==b.default)&&void 0===b.default.__esModule&&(Object.defineProperty(b.default,"__esModule",{value:!0}),Object.assign(b.default,b),a.exports=b.default)},73024:a=>{"use strict";a.exports=require("node:fs")},73565:(a,b,c)=>{"use strict";Object.defineProperty(b,"__esModule",{value:!0});var d={actionAsyncStorage:function(){return f.actionAsyncStorage},workAsyncStorage:function(){return g.workAsyncStorage},workUnitAsyncStorage:function(){return h.workUnitAsyncStorage}};for(var e in d)Object.defineProperty(b,e,{enumerable:!0,get:d[e]});let f=c(19121),g=c(29294),h=c(63033);("function"==typeof b.default||"object"==typeof b.default&&null!==b.default)&&void 0===b.default.__esModule&&(Object.defineProperty(b.default,"__esModule",{value:!0}),Object.assign(b.default,b),a.exports=b.default)},74075:a=>{"use strict";a.exports=require("zlib")},76760:a=>{"use strict";a.exports=require("node:path")},77598:a=>{"use strict";a.exports=require("node:crypto")},78474:a=>{"use strict";a.exports=require("node:events")},79428:a=>{"use strict";a.exports=require("buffer")},79748:a=>{"use strict";a.exports=require("fs/promises")},80099:a=>{"use strict";a.exports=require("node:sqlite")},80532:(a,b,c)=>{"use strict";c.d(b,{default:()=>h});var d=c(48249),e=c(67484),f=c(5243);function g({ok:a,children:b}){return(0,d.jsxs)("span",{className:`inline-flex items-center gap-1 rounded-full border px-2 py-0.5 text-xs font-medium ${a?"border-green-500/30 bg-green-500/10 text-green-600 dark:text-green-400":"border-border bg-surface text-text-muted"}`,children:[(0,d.jsx)("span",{className:"material-symbols-outlined text-[13px]",children:a?"check_circle":"radio_button_unchecked"}),b]})}function h(){let[a,b]=(0,e.useState)(null),[c,h]=(0,e.useState)("");if((0,e.useCallback)(async()=>{try{let a=await fetch("/api/audit-proxy/me",{cache:"no-store"}),c=await a.json().catch(()=>({}));if(!a.ok)throw Error(c.error||"Cannot load your Audit Proxy access");b(c)}catch(a){h(a.message||"Cannot load your Audit Proxy access")}},[]),c&&!a)return(0,d.jsx)("div",{className:"rounded-xl border border-red-500/30 bg-red-500/10 px-4 py-3 text-sm text-red-600 dark:text-red-400",children:c});if(!a)return(0,d.jsx)("div",{className:"rounded-xl border border-border bg-surface p-5 text-sm text-text-muted",children:"Loading Enterprise AI Audit Proxy…"});let i=a.rootCA||{},j=a.grant?.ips||[];return(0,d.jsxs)("div",{className:"space-y-4",children:[(0,d.jsxs)("div",{className:"rounded-2xl border border-primary/20 bg-primary/5 p-4",children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-2",children:[(0,d.jsx)("span",{className:"material-symbols-outlined text-primary",children:"policy"}),(0,d.jsx)("h1",{className:"text-lg font-bold text-text-main",children:"Enterprise AI Audit Proxy"}),(0,d.jsx)(g,{ok:!0===a.running,children:a.running?"Running":"Stopped"}),(0,d.jsx)(g,{ok:!0===i.validated,children:"Root CA"})]}),(0,d.jsx)("p",{className:"mt-2 max-w-4xl text-sm leading-6 text-text-muted",children:"Your account is allowed to use the audit proxy for Claude Code and Codex. Install the root CA once, then start your CLI with one of the launchers below. Requests through the proxy are audited by your administrator."})]}),c?(0,d.jsx)("div",{className:"rounded-xl border border-red-500/30 bg-red-500/10 px-4 py-3 text-sm text-red-600 dark:text-red-400",children:c}):null,(0,d.jsxs)("div",{className:"grid gap-4 xl:grid-cols-[0.8fr_1.2fr]",children:[(0,d.jsxs)("div",{className:"space-y-4",children:[(0,d.jsxs)("section",{className:"rounded-2xl border border-border bg-surface p-4",children:[(0,d.jsx)("h2",{className:"font-semibold text-text-main",children:"Your access"}),(0,d.jsx)("p",{className:"mt-1 text-xs leading-5 text-text-muted",children:"The proxy accepts connections only from the addresses below. From anywhere else the connection is closed — ask your administrator to add the address."}),(0,d.jsxs)("div",{className:"mt-3 grid gap-2 text-xs",children:[(0,d.jsxs)("div",{className:"flex justify-between gap-3",children:[(0,d.jsx)("span",{className:"text-text-muted",children:"Account"}),(0,d.jsx)("span",{className:"break-all font-mono text-text-main",children:a.grant?.userId||a.userId||"-"})]}),a.grant?.note?(0,d.jsxs)("div",{className:"flex justify-between gap-3",children:[(0,d.jsx)("span",{className:"text-text-muted",children:"Note"}),(0,d.jsx)("span",{className:"break-all text-text-main",children:a.grant.note})]}):null]}),(0,d.jsxs)("div",{className:"mt-3",children:[(0,d.jsx)("div",{className:"text-[11px] font-medium uppercase tracking-wide text-text-muted",children:"Allowed client IP"}),j.length?(0,d.jsx)("div",{className:"mt-1.5 flex flex-wrap gap-1.5",children:j.map(a=>(0,d.jsx)("span",{className:"rounded-full border border-primary/30 bg-primary/5 px-2.5 py-1 font-mono text-[11px] text-primary",children:a},a))}):(0,d.jsx)("p",{className:"mt-1.5 rounded-lg border border-amber-500/30 bg-amber-500/10 px-3 py-2 text-[11px] leading-5 text-amber-700 dark:text-amber-300",children:a.isAdmin?"Your admin account has no grant of its own. Grants apply to the proxy allowlist only.":"No address is granted yet, so the proxy will refuse your connection. Send your workstation IP to your administrator."})]})]}),(0,d.jsxs)("section",{className:"rounded-2xl border border-border bg-surface p-4",children:[(0,d.jsx)("h2",{className:"font-semibold text-text-main",children:"Root CA"}),(0,d.jsx)("p",{className:"mt-1 text-xs leading-5 text-text-muted",children:"Download the certificate and save it to the path shown in the deployment values. It is a public certificate; it contains no key material."}),(0,d.jsxs)("div",{className:"mt-3 grid gap-2 text-xs",children:[(0,d.jsxs)("div",{className:"flex justify-between gap-3",children:[(0,d.jsx)("span",{className:"text-text-muted",children:"Status"}),(0,d.jsx)("span",{className:"font-medium text-text-main",children:i.validated?"Validated":i.certExists?"Needs attention":"Not generated"})]}),i.subject?(0,d.jsxs)("div",{className:"grid gap-1",children:[(0,d.jsx)("span",{className:"text-text-muted",children:"Subject"}),(0,d.jsx)("span",{className:"break-all font-mono text-[11px] text-text-main",children:i.subject})]}):null,i.fingerprint?(0,d.jsxs)("div",{className:"grid gap-1",children:[(0,d.jsx)("span",{className:"text-text-muted",children:"Public key fingerprint"}),(0,d.jsx)("span",{className:"break-all font-mono text-[11px] text-text-main",children:i.fingerprint})]}):null,i.notAfter?(0,d.jsxs)("div",{className:"flex justify-between gap-3",children:[(0,d.jsx)("span",{className:"text-text-muted",children:"Expires"}),(0,d.jsx)("span",{className:"text-text-main",children:new Date(i.notAfter).toLocaleString()})]}):null]}),(0,d.jsx)("div",{className:"mt-4",children:(0,d.jsx)("a",{href:"/api/audit-proxy/ca?download=cert",className:`inline-flex rounded-lg border border-primary/30 bg-primary/10 px-3 py-2 text-xs font-semibold text-primary ${i.certExists?"":"pointer-events-none opacity-50"}`,children:"Download Root CA"})})]})]}),(0,d.jsx)(f.Ay,{clientProxyHost:a.endpoint?.clientProxyHost,port:a.endpoint?.port,onError:h})]})]})}},81787:a=>{"use strict";a.exports=require("bun:sqlite")},86282:(a,b,c)=>{"use strict";c.r(b),c.d(b,{default:()=>i});var d=c(5735),e=c(91970),f=c(9471),g=c(1568),h=c(91202);async function i(){let a=await (0,f.Su)();return a.authenticated||(0,e.redirect)("/login"),a.canView||(0,e.redirect)("/dashboard/endpoint"),a.isAdmin?(0,d.jsx)(g.default,{}):(0,d.jsx)(h.default,{})}},87550:a=>{"use strict";a.exports=require("better-sqlite3")},91202:(a,b,c)=>{"use strict";c.d(b,{default:()=>d});let d=(0,c(77943).registerClientReference)(function(){throw Error("Attempted to call the default export of \"D:\\\\bluerouter\\\\src\\\\app\\\\(dashboard)\\\\dashboard\\\\audit-proxy\\\\AuditProxyUserView.js\" from the server, but it's on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"D:\\bluerouter\\src\\app\\(dashboard)\\dashboard\\audit-proxy\\AuditProxyUserView.js","default")},91645:a=>{"use strict";a.exports=require("net")},91970:(a,b,c)=>{"use strict";var d=c(66610);c.o(d,"notFound")&&c.d(b,{notFound:function(){return d.notFound}}),c.o(d,"redirect")&&c.d(b,{redirect:function(){return d.redirect}})},92606:(a,b,c)=>{"use strict";function d(){throw Object.defineProperty(Error("`forbidden()` is experimental and only allowed to be enabled when `experimental.authInterrupts` is enabled."),"__NEXT_ERROR_CODE",{value:"E488",enumerable:!1,configurable:!0})}Object.defineProperty(b,"__esModule",{value:!0}),Object.defineProperty(b,"forbidden",{enumerable:!0,get:function(){return d}}),c(7638).HTTP_ERROR_FALLBACK_ERROR_CODE,("function"==typeof b.default||"object"==typeof b.default&&null!==b.default)&&void 0===b.default.__esModule&&(Object.defineProperty(b.default,"__esModule",{value:!0}),Object.assign(b.default,b),a.exports=b.default)},93831:(a,b,c)=>{"use strict";c.d(b,{default:()=>v});var d=c(48249),e=c(67484),f=c(2116),g=c.n(f);function h(){let[a,b]=(0,e.useState)(null),[c,f]=(0,e.useState)(!1),[g,h]=(0,e.useState)(!1),[i,j]=(0,e.useState)([]),[k,l]=(0,e.useState)(!1),[m,n]=(0,e.useState)(""),[o,p]=(0,e.useState)(!1),[q,r]=(0,e.useState)(""),[s,t]=(0,e.useState)("");(0,e.useCallback)(async()=>{try{let a=await fetch("/api/audit-proxy?limit=1",{cache:"no-store"}),c=await a.json();if(!a.ok)throw Error(c.error||"Cannot load Audit Proxy IP filter");b(c.config),f(c.status?.running===!0),l(c.config?.clientIpFilterEnabled===!0),n((c.config?.allowedClientIps||[]).join("\n")),h(c.status?.security?.clientIpFilterSource==="grants"),j((c.config?.accessGrants||[]).flatMap(a=>a?.ips||[]))}catch(a){r(a.message||"Cannot load Audit Proxy IP filter")}},[]);let u=(0,e.useMemo)(()=>m.split(/\r?\n/).map(a=>a.trim()).filter(Boolean),[m]),v=async()=>{if(a){if(k&&0===u.length)return void r("Add at least one client IP or CIDR before enabling the filter.");p(!0),r(""),t("");try{let c=await fetch("/api/audit-proxy",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({action:"save-ip-filter",enabled:k,allowedClientIps:u})}),d=await c.json().catch(()=>({}));if(!c.ok)throw Error(d.error||"Failed to save client IP filter");t(d.restarted?"Client IP filter saved and Audit Proxy restarted.":"Client IP filter saved."),b(d.config||a),f(d.status?.running===!0),l(d.config?.clientIpFilterEnabled===!0),n((d.config?.allowedClientIps||[]).join("\n")),h(d.status?.security?.clientIpFilterSource==="grants"),j((d.config?.accessGrants||[]).flatMap(a=>a?.ips||[]))}catch(a){r(a.message||"Failed to save client IP filter")}finally{p(!1)}}};return a?(0,d.jsxs)("section",{className:"rounded-2xl border border-border bg-surface p-4",children:[(0,d.jsxs)("div",{className:"flex flex-col gap-3 lg:flex-row lg:items-start lg:justify-between",children:[(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-2",children:[(0,d.jsx)("span",{className:"material-symbols-outlined text-primary",children:"shield_lock"}),(0,d.jsx)("h2",{className:"font-semibold text-text-main",children:"Client IP filter"}),(0,d.jsx)("span",{className:`rounded-full px-2 py-0.5 text-[10px] font-semibold ${k?"bg-green-500/10 text-green-600 dark:text-green-400":"bg-surface text-text-muted"}`,children:k?"ENABLED":"DISABLED"})]}),(0,d.jsxs)("p",{className:"mt-1 max-w-4xl text-xs leading-5 text-text-muted",children:["Restrict TCP access to the Audit Proxy itself. Only client IPs/CIDRs below can use port ",a.port,". The decision uses the socket peer IP; X-Forwarded-For and other HTTP headers are ignored."]}),g?(0,d.jsxs)("p",{className:"mt-2 max-w-4xl rounded-lg border border-primary/30 bg-primary/5 px-3 py-2 text-xs leading-5 text-text-muted",children:[(0,d.jsx)("strong",{className:"text-primary",children:"Superseded by Access grants."})," The proxy is enforcing the ",new Set(i).size," address(es) granted to users above, and this list is ignored until every grant has no IP left. Manage access there."]}):null]}),(0,d.jsxs)("label",{className:"flex shrink-0 items-center gap-2 text-sm font-medium text-text-main",children:[(0,d.jsx)("input",{type:"checkbox",checked:k,onChange:a=>l(a.target.checked),disabled:g,className:"h-4 w-4 accent-[var(--color-primary)] disabled:opacity-50"}),"Enable IP filter"]})]}),q?(0,d.jsx)("div",{className:"mt-3 rounded-lg border border-red-500/30 bg-red-500/10 px-3 py-2 text-xs text-red-600 dark:text-red-400",children:q}):null,s?(0,d.jsx)("div",{className:"mt-3 rounded-lg border border-green-500/30 bg-green-500/10 px-3 py-2 text-xs text-green-600 dark:text-green-400",children:s}):null,(0,d.jsxs)("div",{className:"mt-4 grid gap-4 lg:grid-cols-[1fr_320px]",children:[(0,d.jsxs)("label",{className:"grid gap-1.5",children:[(0,d.jsx)("span",{className:"text-sm font-semibold text-text-main",children:"Allowed client IPs / CIDRs"}),(0,d.jsx)("textarea",{rows:6,value:m,onChange:a=>n(a.target.value),disabled:g,placeholder:"172.16.253.3\n172.16.253.0/24\n10.20.30.15\n2001:db8::/64",className:"rounded-lg border border-border bg-background px-3 py-2 font-mono text-xs text-text-main outline-none focus:border-primary"}),(0,d.jsx)("span",{className:"text-[11px] leading-4 text-text-muted",children:"One IPv4, IPv6, or CIDR per line. IPv4-mapped IPv6 addresses are normalized automatically."})]}),(0,d.jsxs)("div",{className:"grid content-start gap-3",children:[(0,d.jsxs)("div",{className:"rounded-xl border border-primary/20 bg-primary/5 p-3 text-xs leading-5 text-text-muted",children:[(0,d.jsx)("div",{className:"font-semibold text-primary",children:"Security behavior"}),(0,d.jsx)("div",{className:"mt-1",children:"Allowed IP → proxy works normally."}),(0,d.jsx)("div",{children:"Other IP → TCP connection is immediately closed before CONNECT/HTTP parsing."}),(0,d.jsx)("div",{children:"Empty list + enabled → configuration is rejected."})]}),(0,d.jsx)("button",{type:"button",onClick:v,disabled:o||g,className:"rounded-lg bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:o?"Saving…":c?"Save & Restart Proxy":"Save IP Filter"}),c?(0,d.jsxs)("div",{className:"text-[11px] leading-4 text-text-muted",children:["Proxy is running, so applying this security policy requires a short restart of port ",a.port,"."]}):null]})]})]}):null}function i(){let[a,b]=(0,e.useState)(!1),[c,f]=(0,e.useState)(!1),[g,h]=(0,e.useState)([]),[i,j]=(0,e.useState)(!1),[k,l]=(0,e.useState)(""),[m,n]=(0,e.useState)(""),o=(a,c)=>{f(a?.proxyAuthEnabled===!0),h((a?.proxyAuthUsers||[]).map(a=>({username:a.username,hasPassword:!0===a.hasPassword,password:""}))),c&&b(!0===c.running)};(0,e.useCallback)(async()=>{try{let a=await fetch("/api/audit-proxy?limit=1",{cache:"no-store"}),b=await a.json();if(!a.ok)throw Error(b.error||"Cannot load proxy authentication");o(b.config,b.status)}catch(a){l(a.message||"Cannot load proxy authentication")}},[]);let p=(a,b)=>{h(c=>c.map((c,d)=>d===a?{...c,...b}:c))},q=async()=>{let a=g.map(a=>({...a,username:a.username.trim()}));if(c&&0===a.length)return void l("Add at least one account before enabling proxy authentication.");let b=a.find(a=>!a.hasPassword&&!a.password);if(b)return void l(`Set a password for ${b.username||"the new account"}.`);j(!0),l(""),n("");try{let b=await fetch("/api/audit-proxy",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({action:"save-proxy-auth",enabled:c,users:a.map(a=>a.password?{username:a.username,password:a.password}:{username:a.username})})}),d=await b.json().catch(()=>({}));if(!b.ok)throw Error(d.error||"Failed to save proxy authentication");n(d.restarted?"Proxy authentication saved and Audit Proxy restarted.":"Proxy authentication saved."),o(d.config,d.status)}catch(a){l(a.message||"Failed to save proxy authentication")}finally{j(!1)}};return(0,d.jsxs)("section",{className:"rounded-2xl border border-border bg-surface p-4",children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-start justify-between gap-3",children:[(0,d.jsxs)("div",{className:"max-w-3xl",children:[(0,d.jsx)("h2",{className:"font-semibold text-text-main",children:"Proxy authentication"}),(0,d.jsx)("p",{className:"mt-1 text-xs leading-5 text-text-muted",children:"Requires a username and password on every CONNECT, and records which account opened each tunnel, so the audit table answers who rather than only which IP. Give each person or CI job its own account: removing one leaves the others working."}),(0,d.jsx)("p",{className:"mt-2 rounded-lg border border-amber-500/30 bg-amber-500/5 p-2 text-[11px] leading-5 text-amber-700 dark:text-amber-300",children:"The proxy listener speaks plain HTTP, so the credential crosses the client-to-proxy hop unencrypted (Basic is base64, not encryption). This keeps out anyone without the password and attributes traffic to a person; it does not hide the password from someone capturing packets on that network. On an untrusted network use it alongside the client IP allowlist, not instead of it. The password also ends up in HTTPS_PROXY, and so in the process list and shell history."})]}),(0,d.jsxs)("label",{className:"flex shrink-0 items-center gap-2 text-sm text-text-main",children:[(0,d.jsx)("input",{type:"checkbox",checked:c,onChange:a=>f(a.target.checked),disabled:i,className:"h-4 w-4 accent-[var(--color-primary)]"}),"Require credentials"]})]}),(0,d.jsxs)("div",{className:"mt-4 grid gap-2",children:[0===g.length?(0,d.jsx)("p",{className:"rounded-xl border border-border bg-background/50 p-3 text-xs text-text-muted",children:"No accounts yet."}):null,g.map((a,b)=>(0,d.jsxs)("div",{className:"grid gap-2 rounded-xl border border-border bg-background/50 p-3 sm:grid-cols-[1fr_1fr_auto]",children:[(0,d.jsx)("input",{type:"text",value:a.username,onChange:a=>p(b,{username:a.target.value}),disabled:i,placeholder:"username",className:"min-w-0 rounded-lg border border-border bg-background px-3 py-2 font-mono text-xs text-text-main outline-none focus:border-primary disabled:opacity-60"}),(0,d.jsx)("input",{type:"password",value:a.password,onChange:a=>p(b,{password:a.target.value}),disabled:i,placeholder:a.hasPassword?"Saved — leave blank to keep":"Set a password",className:"min-w-0 rounded-lg border border-border bg-background px-3 py-2 font-mono text-xs text-text-main outline-none focus:border-primary disabled:opacity-60"}),(0,d.jsx)("button",{type:"button",onClick:()=>{let a;(!(a=g[b]).hasPassword||window.confirm(`Remove ${a.username}? Anything using this account stops working after the restart.`))&&h(a=>a.filter((a,c)=>c!==b))},disabled:i,className:"rounded-lg border border-border px-3 py-2 text-xs text-text-muted transition hover:border-red-500/40 hover:text-red-600 disabled:opacity-50",children:"Remove"})]},b))]}),(0,d.jsxs)("div",{className:"mt-3 flex flex-wrap items-center gap-2",children:[(0,d.jsx)("button",{type:"button",onClick:()=>h(a=>[...a,{username:"",hasPassword:!1,password:""}]),disabled:i,className:"rounded-lg border border-border px-3 py-1.5 text-xs text-text-muted transition hover:border-primary hover:text-primary disabled:opacity-50",children:"Add account"}),(0,d.jsx)("button",{type:"button",onClick:q,disabled:i,className:"rounded-lg bg-primary px-3 py-1.5 text-xs font-semibold text-white transition hover:opacity-90 disabled:opacity-50",children:i?"Saving…":a?"Save & Restart Proxy":"Save"}),(0,d.jsxs)("span",{className:"text-[11px] text-text-muted",children:["Clients pass credentials in the proxy URL: ",(0,d.jsx)("code",{className:"font-mono",children:"http://USER:PASSWORD@host:port"})," ","— URL-encode ",(0,d.jsx)("code",{className:"font-mono",children:"@ : / #"})," if the password contains them."]})]}),k?(0,d.jsx)("p",{className:"mt-3 rounded-lg border border-red-500/30 bg-red-500/5 p-2 text-xs text-red-600 dark:text-red-400",children:k}):null,m?(0,d.jsx)("p",{className:"mt-3 rounded-lg border border-green-500/30 bg-green-500/5 p-2 text-xs text-green-600 dark:text-green-400",children:m}):null]})}function j({onChanged:a}){let[b,c]=(0,e.useState)(null),[f,g]=(0,e.useState)("manual"),[h,i]=(0,e.useState)(0),[k,l]=(0,e.useState)(!1),[m,n]=(0,e.useState)(""),[o,p]=(0,e.useState)(""),[q,r]=(0,e.useState)(""),[s,t]=(0,e.useState)(""),[u,v]=(0,e.useState)(""),[w,x]=(0,e.useState)(""),[y,z]=(0,e.useState)(""),A=(0,e.useCallback)(a=>{c(Array.isArray(a?.config?.accessGrants)?a.config.accessGrants:[]),g(a?.status?.security?.clientIpFilterSource||"manual"),i(Number(a?.status?.security?.enforcedClientIpCount||0)),l(a?.status?.running===!0)},[]);(0,e.useCallback)(async()=>{try{let a=await fetch("/api/audit-proxy?limit=1",{cache:"no-store"}),b=await a.json();if(!a.ok)throw Error(b.error||"Cannot load Audit Proxy access grants");A(b)}catch(a){v(a.message||"Cannot load Audit Proxy access grants")}},[A]);let B=(0,e.useMemo)(()=>String(o||"").split(/[\r\n,]+/).map(a=>a.trim()).filter(Boolean),[o]),C=async(b,c,d)=>{t(b),v(""),x("");try{let e=await fetch("/api/audit-proxy",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({action:b,...c})}),f=await e.json().catch(()=>({}));if(!e.ok)throw Error(f.error||"Failed to save Audit Proxy access grant");return A(f),x(f.restarted?`${d} Audit Proxy restarted to apply it.`:d),a?.(),!0}catch(a){return v(a.message||"Failed to save Audit Proxy access grant"),!1}finally{t("")}},D=async()=>{let a=String(m||"").trim().toLowerCase();a?await C("save-access-grant",{userId:a,ips:B,note:q},`Access grant for ${a} saved.`)&&(n(""),p(""),r("")):v("Enter the dashboard username or email to grant access to.")},E=async a=>{await C("delete-access-grant",{userId:a},`Access grant for ${a} revoked.`)&&z("")};if(!b)return null;let F=b.reduce((a,b)=>a+(b.ips?.length||0),0);return(0,d.jsxs)("section",{className:"rounded-2xl border border-border bg-surface p-4",children:[(0,d.jsx)("div",{className:"flex flex-col gap-3 lg:flex-row lg:items-start lg:justify-between",children:(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-2",children:[(0,d.jsx)("span",{className:"material-symbols-outlined text-primary",children:"group"}),(0,d.jsx)("h2",{className:"font-semibold text-text-main",children:"Access grants — who may use this proxy"}),(0,d.jsx)("span",{className:`rounded-full px-2 py-0.5 text-[10px] font-semibold ${"grants"===f?"bg-green-500/10 text-green-600 dark:text-green-400":"bg-surface text-text-muted"}`,children:"grants"===f?`ENFORCING ${h} IP`:"NOT ENFORCING"})]}),(0,d.jsxs)("p",{className:"mt-1 max-w-4xl text-xs leading-5 text-text-muted",children:["Grant a dashboard user the client IPs they may connect from. As soon as one grant carries an IP, the proxy accepts ",(0,d.jsx)("strong",{children:"only granted addresses"})," and the free-text Client IP filter below is superseded. Each granted user also gets a read-only ",(0,d.jsx)("span",{className:"font-mono",children:"/dashboard/audit-proxy"})," page with the root CA download, the launcher commands and their own addresses — no configuration, no audited traffic."]})]})}),u?(0,d.jsx)("div",{className:"mt-3 rounded-lg border border-red-500/30 bg-red-500/10 px-3 py-2 text-xs text-red-600 dark:text-red-400",children:u}):null,w?(0,d.jsx)("div",{className:"mt-3 rounded-lg border border-green-500/30 bg-green-500/10 px-3 py-2 text-xs text-green-600 dark:text-green-400",children:w}):null,(0,d.jsxs)("div",{className:"mt-4 grid gap-4 lg:grid-cols-[1fr_320px]",children:[(0,d.jsxs)("div",{className:"grid gap-3",children:[(0,d.jsxs)("label",{className:"grid gap-1.5",children:[(0,d.jsx)("span",{className:"text-sm font-semibold text-text-main",children:"Dashboard username / email"}),(0,d.jsx)("input",{value:m,onChange:a=>n(a.target.value),placeholder:"anh-tct or anh-tct@fujinet.net",className:"rounded-lg border border-border bg-background px-3 py-2 text-sm text-text-main outline-none focus:border-primary"}),(0,d.jsx)("span",{className:"text-[11px] leading-4 text-text-muted",children:"The identity the user logs into this dashboard with (LDAP/OIDC/local). Either the username or the email form is matched."})]}),(0,d.jsxs)("label",{className:"grid gap-1.5",children:[(0,d.jsx)("span",{className:"text-sm font-semibold text-text-main",children:"Allowed client IPs / CIDRs"}),(0,d.jsx)("textarea",{rows:4,value:o,onChange:a=>p(a.target.value),placeholder:"172.16.253.2\n172.16.6.0/24",className:"rounded-lg border border-border bg-background px-3 py-2 font-mono text-xs text-text-main outline-none focus:border-primary"}),(0,d.jsx)("span",{className:"text-[11px] leading-4 text-text-muted",children:"One IPv4, IPv6 or CIDR per line — the workstation addresses this user runs Claude Code / Codex from."})]}),(0,d.jsxs)("label",{className:"grid gap-1.5",children:[(0,d.jsx)("span",{className:"text-sm font-semibold text-text-main",children:"Note (optional)"}),(0,d.jsx)("input",{value:q,onChange:a=>r(a.target.value),placeholder:"Laptop + VDI",className:"rounded-lg border border-border bg-background px-3 py-2 text-sm text-text-main outline-none focus:border-primary"})]})]}),(0,d.jsxs)("div",{className:"grid content-start gap-3",children:[(0,d.jsxs)("div",{className:"rounded-xl border border-primary/20 bg-primary/5 p-3 text-xs leading-5 text-text-muted",children:[(0,d.jsx)("div",{className:"font-semibold text-primary",children:"What a grant changes"}),(0,d.jsx)("div",{className:"mt-1",children:"Granted IP → proxy works normally."}),(0,d.jsx)("div",{children:"Any other IP → TCP connection closed before CONNECT is parsed."}),(0,d.jsx)("div",{children:"Granted user → read-only Audit Proxy page + CA download."}),(0,d.jsx)("div",{children:"No grant with an IP → falls back to the Client IP filter below."})]}),(0,d.jsx)("button",{type:"button",onClick:D,disabled:!!s,className:"rounded-lg bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:"save-access-grant"===s?"Saving…":k?"Save grant & restart proxy":"Save grant"}),k?(0,d.jsx)("div",{className:"text-[11px] leading-4 text-text-muted",children:"The proxy is running, so applying a grant requires a short restart of the listener."}):null]})]}),(0,d.jsxs)("div",{className:"mt-4 border-t border-border pt-4",children:[(0,d.jsxs)("div",{className:"mb-3 flex flex-wrap items-center justify-between gap-2",children:[(0,d.jsx)("h3",{className:"text-sm font-semibold text-text-main",children:"Granted users"}),(0,d.jsxs)("span",{className:"text-[11px] text-text-muted",children:[b.length," user \xb7 ",F," address"]})]}),0===b.length?(0,d.jsx)("div",{className:"rounded-xl border border-dashed border-border p-6 text-center text-xs text-text-muted",children:"No grant yet. The proxy still follows the Client IP filter below, and only admins can open this page."}):(0,d.jsx)("div",{className:"overflow-x-auto rounded-xl border border-border",children:(0,d.jsxs)("table",{className:"min-w-full divide-y divide-border text-xs",children:[(0,d.jsx)("thead",{className:"bg-surface/80 text-left uppercase tracking-wide text-text-muted",children:(0,d.jsxs)("tr",{children:[(0,d.jsx)("th",{className:"px-3 py-2 font-medium",children:"User"}),(0,d.jsx)("th",{className:"px-3 py-2 font-medium",children:"Allowed client IPs"}),(0,d.jsx)("th",{className:"px-3 py-2 font-medium",children:"Note"}),(0,d.jsx)("th",{className:"px-3 py-2 text-right font-medium",children:"Actions"})]})}),(0,d.jsx)("tbody",{className:"divide-y divide-border bg-background",children:b.map(a=>(0,d.jsxs)("tr",{className:"align-top",children:[(0,d.jsx)("td",{className:"px-3 py-3 font-mono text-text-main",children:a.userId}),(0,d.jsx)("td",{className:"px-3 py-3",children:a.ips?.length?(0,d.jsx)("div",{className:"flex flex-wrap gap-1",children:a.ips.map(a=>(0,d.jsx)("span",{className:"rounded-full border border-border bg-surface px-2 py-0.5 font-mono text-[10px] text-text-muted",children:a},a))}):(0,d.jsx)("span",{className:"text-amber-600 dark:text-amber-400",children:"No IP — page access only, proxy will refuse this user"})}),(0,d.jsx)("td",{className:"px-3 py-3 text-text-muted",children:a.note||"-"}),(0,d.jsx)("td",{className:"px-3 py-3",children:(0,d.jsxs)("div",{className:"flex flex-wrap justify-end gap-2",children:[(0,d.jsx)("button",{type:"button",onClick:()=>{n(a.userId),p((a.ips||[]).join("\n")),r(a.note||"")},className:"rounded-lg border border-border px-2.5 py-1 font-semibold text-text-main hover:bg-surface",children:"Edit"}),y===a.userId?(0,d.jsxs)(d.Fragment,{children:[(0,d.jsx)("button",{type:"button",onClick:()=>E(a.userId),disabled:!!s,className:"rounded-lg border border-red-500/30 bg-red-500/10 px-2.5 py-1 font-semibold text-red-600 disabled:opacity-50",children:"Confirm revoke"}),(0,d.jsx)("button",{type:"button",onClick:()=>z(""),className:"rounded-lg border border-border px-2.5 py-1 text-text-muted",children:"Cancel"})]}):(0,d.jsx)("button",{type:"button",onClick:()=>z(a.userId),className:"rounded-lg border border-red-500/30 px-2.5 py-1 font-semibold text-red-600 hover:bg-red-500/10",children:"Revoke"})]})})]},a.userId))})]})})]})]})}var k=c(5243);let l=["api.anthropic.com","*.anthropic.com","claude.ai","*.claude.ai"],m=["api.openai.com","*.openai.com","chatgpt.com","*.chatgpt.com"],n=[{id:"claude-code",label:"Claude Code"},{id:"codex",label:"OpenAI Codex"},{id:"gemini-cli",label:"Gemini CLI"},{id:"cursor",label:"Cursor"},{id:"curl",label:"curl / scripts"}];function o({ok:a,children:b}){return(0,d.jsxs)("span",{className:`inline-flex items-center gap-1 rounded-full border px-2 py-0.5 text-xs font-medium ${a?"border-green-500/30 bg-green-500/10 text-green-600 dark:text-green-400":"border-border bg-surface text-text-muted"}`,children:[(0,d.jsx)("span",{className:"material-symbols-outlined text-[13px]",children:a?"check_circle":"radio_button_unchecked"}),b]})}function p(a){let b=Number(a||0);return!Number.isFinite(b)||b<=0?"0":b>=1e6?`${(b/1e6).toFixed(2)}M`:b>=1e3?`${(b/1e3).toFixed(1)}k`:String(b)}function q(a){let b=Number(a||0);return!Number.isFinite(b)||b<=0?"$0.00":b<.01?`$${b.toFixed(4)}`:`$${b.toFixed(2)}`}function r({label:a,value:b,hint:c}){return(0,d.jsxs)("div",{className:"rounded-xl border border-border bg-background/50 p-3",children:[(0,d.jsx)("div",{className:"text-[11px] font-medium uppercase tracking-wide text-text-muted",children:a}),(0,d.jsx)("div",{className:"mt-1 text-lg font-semibold text-text-main",children:b}),c?(0,d.jsx)("div",{className:"mt-0.5 text-[11px] leading-4 text-text-muted",children:c}):null]})}function s({title:a,rows:b}){return b?.length?(0,d.jsxs)("div",{className:"min-w-0",children:[(0,d.jsx)("h3",{className:"text-xs font-semibold uppercase tracking-wide text-text-muted",children:a}),(0,d.jsx)("div",{className:"mt-2 overflow-x-auto",children:(0,d.jsxs)("table",{className:"w-full min-w-[420px] text-left text-xs",children:[(0,d.jsx)("thead",{className:"border-b border-border text-text-muted",children:(0,d.jsxs)("tr",{children:[(0,d.jsx)("th",{className:"px-2 py-1.5 font-medium",children:"Name"}),(0,d.jsx)("th",{className:"px-2 py-1.5 text-right font-medium",children:"Reqs"}),(0,d.jsx)("th",{className:"px-2 py-1.5 text-right font-medium",children:"In"}),(0,d.jsx)("th",{className:"px-2 py-1.5 text-right font-medium",children:"Out"}),(0,d.jsx)("th",{className:"px-2 py-1.5 text-right font-medium",children:"Cache R/W"}),(0,d.jsx)("th",{className:"px-2 py-1.5 text-right font-medium",children:"Cost"})]})}),(0,d.jsx)("tbody",{children:b.map(a=>(0,d.jsxs)("tr",{className:"border-b border-border/60 text-text-main",children:[(0,d.jsx)("td",{className:"max-w-[220px] truncate px-2 py-1.5 font-mono text-[11px]",title:a.label,children:a.label}),(0,d.jsx)("td",{className:"px-2 py-1.5 text-right",children:a.requests}),(0,d.jsx)("td",{className:"px-2 py-1.5 text-right",children:p(a.inputTokens)}),(0,d.jsx)("td",{className:"px-2 py-1.5 text-right",children:p(a.outputTokens)}),(0,d.jsxs)("td",{className:"px-2 py-1.5 text-right text-text-muted",children:[p(a.cacheReadTokens),"/",p(a.cacheCreationTokens)]}),(0,d.jsx)("td",{className:"px-2 py-1.5 text-right",children:q(a.cost)})]},a.label))})]})})]}):null}function t({label:a,hint:b,children:c}){return(0,d.jsxs)("label",{className:"grid gap-1.5",children:[(0,d.jsx)("span",{className:"text-sm font-semibold text-text-main",children:a}),c,b?(0,d.jsx)("span",{className:"text-[11px] leading-4 text-text-muted",children:b}):null]})}function u({label:a,description:b,checked:c,onChange:e,disabled:f=!1}){return(0,d.jsxs)("label",{className:"flex items-start justify-between gap-4 rounded-xl border border-border bg-background/50 p-3",children:[(0,d.jsxs)("span",{children:[(0,d.jsx)("span",{className:"block text-sm font-semibold text-text-main",children:a}),(0,d.jsx)("span",{className:"mt-0.5 block text-xs leading-5 text-text-muted",children:b})]}),(0,d.jsx)("input",{type:"checkbox",checked:c,onChange:a=>e(a.target.checked),disabled:f,className:"mt-1 h-4 w-4 accent-[var(--color-primary)]"})]})}function v(){let[a,b]=(0,e.useState)(null),[c,f]=(0,e.useState)(null),[v,w]=(0,e.useState)(""),[x,y]=(0,e.useState)(""),[z,A]=(0,e.useState)(""),[B,C]=(0,e.useState)(null),[D,E]=(0,e.useState)("configuration"),F=(0,e.useCallback)(async(a=!0)=>{try{let c=await fetch("/api/audit-proxy?limit=50",{cache:"no-store"}),d=await c.json();if(!c.ok)throw Error(d.error||"Cannot load Audit Proxy");b(d),a?f(a=>a||d.config):f(d.config)}catch(a){y(a.message||"Cannot load Audit Proxy")}},[]),G=a?.status||{},H=G.security||{},I=G.rootCA||{},J=!0===G.running,K=(c?.allowedHosts||[]).join("\n"),L=(a,b)=>f(c=>({...c,[a]:b})),M=async(a,b={})=>{w(a),y(""),A("");try{let c=await fetch("/api/audit-proxy",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({action:a,...b})}),d=await c.json().catch(()=>({}));if(!c.ok)throw Error(d.error||`${a} failed`);return"test"===a?(C(d.test),A(`Simulation passed ${d.test.passed}/${d.test.total} checks.`)):A("clear-logs"===a?"Audit logs cleared.":`Audit Proxy ${a} completed.`),await F("start"!==a&&"restart"!==a),d}catch(b){return y(b.message||`${a} failed`),null}finally{w("")}},N=async()=>{w("save"),y(""),A("");try{let a=await fetch("/api/audit-proxy",{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify({config:c})}),b=await a.json();if(!a.ok)throw Error(b.error||"Save failed");f(b.config),A("Configuration saved."),await F(!0)}catch(a){y(a.message||"Save failed")}finally{w("")}},O=async()=>{w("save-client-host"),y(""),A("");try{let a=await fetch("/api/audit-proxy",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({action:"save-client-host",clientProxyHost:c?.clientProxyHost||""})}),b=await a.json().catch(()=>({}));if(!a.ok)throw Error(b.error||"Failed to save Client proxy host");f(a=>({...a,clientProxyHost:b.config?.clientProxyHost||""})),A("Client proxy host saved."),await F(!0)}catch(a){y(a.message||"Failed to save Client proxy host")}finally{w("")}},P=async()=>{w("ca"),y("");try{let a=await fetch("/api/audit-proxy/ca",{method:"POST"}),b=await a.json();if(!a.ok)throw Error(b.error||"CA validation failed");A("Root CA is ready. Existing enterprise CA material was not rotated."),await F(!0)}catch(a){y(a.message||"CA validation failed")}finally{w("")}},Q=a=>L("allowedHosts",[...new Set([...c?.allowedHosts||[],...a])]);if(!c)return(0,d.jsx)("div",{className:"rounded-xl border border-border bg-surface p-5 text-sm text-text-muted",children:"Loading Enterprise AI Audit Proxy…"});let R=Math.round(Number(c.captureLimitBytes||0)/1024/1024*10)/10,S=["0.0.0.0","::"].includes(c.bindHost)||!String(c.bindHost).startsWith("127.")&&"localhost"!==c.bindHost&&"::1"!==c.bindHost;return(0,d.jsxs)("div",{className:"space-y-4",children:[(0,d.jsxs)("div",{className:"flex flex-col gap-3 rounded-2xl border border-primary/20 bg-primary/5 p-4 sm:flex-row sm:items-start sm:justify-between",children:[(0,d.jsxs)("div",{children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-2",children:[(0,d.jsx)("span",{className:"material-symbols-outlined text-primary",children:"policy"}),(0,d.jsx)("h1",{className:"text-lg font-bold text-text-main",children:"Enterprise AI Audit Proxy"}),(0,d.jsx)(o,{ok:J,children:J?"Running":"Stopped"}),(0,d.jsx)(o,{ok:!0===I.validated,children:"Root CA"}),(0,d.jsx)(o,{ok:c.verifyUpstreamTls,children:"Verified upstream TLS"}),(0,d.jsx)(o,{ok:!0,children:G.capabilities?.http2===!0?"HTTP/1.1 + HTTP/2":"HTTP/1.1"})]}),(0,d.jsx)("p",{className:"mt-2 max-w-5xl text-sm leading-6 text-text-muted",children:"Explicit HTTPS CONNECT proxy for Claude Code and Codex. Request method, path, query, authentication values and body bytes are forwarded without content rewriting. Standard hop-by-hop headers and BlueRouter internal headers remain intentionally removed."})]}),(0,d.jsxs)(g(),{href:"/dashboard/mitm",className:"inline-flex items-center gap-1 text-xs font-medium text-primary hover:underline",children:[(0,d.jsx)("span",{className:"material-symbols-outlined text-[16px]",children:"arrow_back"})," AI Traffic Gateway"]})]}),x?(0,d.jsx)("div",{className:"rounded-xl border border-red-500/30 bg-red-500/10 px-4 py-3 text-sm text-red-600 dark:text-red-400",children:x}):null,z?(0,d.jsx)("div",{className:"rounded-xl border border-green-500/30 bg-green-500/10 px-4 py-3 text-sm text-green-600 dark:text-green-400",children:z}):null,(0,d.jsxs)("div",{className:"flex w-fit items-center gap-1 rounded-xl border border-border bg-surface p-1",children:[(0,d.jsx)("button",{type:"button",onClick:()=>E("configuration"),className:`rounded-lg px-3 py-1.5 text-xs font-semibold transition ${"configuration"===D?"bg-primary text-white":"text-text-muted hover:bg-background hover:text-text-main"}`,children:"Configuration"}),(0,d.jsx)("button",{type:"button",onClick:()=>E("audit"),className:`rounded-lg px-3 py-1.5 text-xs font-semibold transition ${"audit"===D?"bg-primary text-white":"text-text-muted hover:bg-background hover:text-text-main"}`,children:"Audit & Usage"})]}),(0,d.jsxs)("div",{className:"configuration"===D?"space-y-4":"hidden",children:[H.lanExposedWithoutIpFilter?(0,d.jsxs)("div",{className:"rounded-xl border border-red-500/30 bg-red-500/10 px-4 py-3 text-sm text-red-700 dark:text-red-300",children:[(0,d.jsx)("strong",{children:"LAN listener has no Client IP filter."})," Enable the IP allowlist below before broad deployment. Plain HTTP, private destinations and CONNECT ports other than 443 are blocked, but the listener should still be restricted by firewall/VLAN."]}):S?(0,d.jsxs)("div",{className:"rounded-xl border border-amber-500/30 bg-amber-500/10 px-4 py-3 text-sm text-amber-700 dark:text-amber-300",children:[(0,d.jsx)("strong",{children:"LAN listener enabled."})," Keep TCP ",c.port," restricted to the intended LAN/VPN and maintain the Client IP allowlist."]}):null,I.expiringSoon?(0,d.jsx)("div",{className:"rounded-xl border border-amber-500/30 bg-amber-500/10 px-4 py-3 text-sm text-amber-700 dark:text-amber-300",children:"Root CA expires soon. Audit Proxy will not rotate enterprise CA material automatically; prepare and deploy the replacement CA through Advanced CA management."}):null,(0,d.jsxs)("div",{className:"grid gap-4 xl:grid-cols-[1.25fr_0.75fr]",children:[(0,d.jsxs)("section",{className:"rounded-2xl border border-border bg-surface p-4",children:[(0,d.jsxs)("div",{className:"mb-4 flex flex-wrap items-center justify-between gap-2",children:[(0,d.jsxs)("div",{children:[(0,d.jsx)("h2",{className:"font-semibold text-text-main",children:"Proxy configuration"}),(0,d.jsx)("p",{className:"mt-1 text-xs text-text-muted",children:"All server-side setup is managed here. No proxy daemon CLI is required."})]}),(0,d.jsxs)("div",{className:"flex flex-wrap gap-2",children:[(0,d.jsx)("button",{type:"button",onClick:()=>Q(l),disabled:J,className:"rounded-lg border border-border px-3 py-1.5 text-xs text-text-main hover:bg-background disabled:opacity-50",children:"+ Anthropic preset"}),(0,d.jsx)("button",{type:"button",onClick:()=>Q(m),disabled:J,className:"rounded-lg border border-border px-3 py-1.5 text-xs text-text-main hover:bg-background disabled:opacity-50",children:"+ OpenAI preset"})]})]}),(0,d.jsxs)("div",{className:"grid gap-4 md:grid-cols-2",children:[(0,d.jsx)(t,{label:"Bind address",hint:"127.0.0.1 = local only. Use 0.0.0.0 or a LAN IP for other workstations.",children:(0,d.jsx)("input",{value:c.bindHost,onChange:a=>L("bindHost",a.target.value),disabled:J,className:"rounded-lg border border-border bg-background px-3 py-2 text-sm text-text-main outline-none focus:border-primary disabled:opacity-60"})}),(0,d.jsx)(t,{label:"Proxy port",hint:"Default 3128; Docker deployments must publish this port explicitly.",children:(0,d.jsx)("input",{type:"number",min:"1",max:"65535",value:c.port,onChange:a=>L("port",Number(a.target.value)),disabled:J,className:"rounded-lg border border-border bg-background px-3 py-2 text-sm text-text-main outline-none focus:border-primary disabled:opacity-60"})}),(0,d.jsx)(t,{label:"Client proxy host",hint:"Manual persistent hostname/IP used only in deployment commands; it does not change the listener.",children:(0,d.jsxs)("div",{className:"flex gap-2",children:[(0,d.jsx)("input",{value:c.clientProxyHost||"",onChange:a=>L("clientProxyHost",a.target.value),placeholder:"172.16.6.8 or proxy.example.local",className:"min-w-0 flex-1 rounded-lg border border-border bg-background px-3 py-2 text-sm text-text-main outline-none focus:border-primary"}),(0,d.jsx)("button",{type:"button",onClick:O,disabled:!!v,className:"shrink-0 rounded-lg border border-primary/30 bg-primary/10 px-3 py-2 text-xs font-semibold text-primary disabled:opacity-50",children:"save-client-host"===v?"Saving…":"Save host"})]})}),(0,d.jsx)(t,{label:"Capture limit / request",hint:"Traffic streams immediately; only this bounded prefix is retained for audit.",children:(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)("input",{type:"number",min:"0",max:"16",step:"0.5",value:R,onChange:a=>L("captureLimitBytes",Math.round(1024*Number(a.target.value)*1024)),disabled:J||!c.captureBodies,className:"min-w-0 flex-1 rounded-lg border border-border bg-background px-3 py-2 text-sm text-text-main outline-none focus:border-primary disabled:opacity-60"}),(0,d.jsx)("span",{className:"text-xs text-text-muted",children:"MB"})]})})]}),(0,d.jsxs)("div",{className:"mt-4 grid gap-3 md:grid-cols-2",children:[(0,d.jsx)(u,{label:"Pass through non-audited hosts",description:"Unknown hosts use a blind TLS tunnel only when they resolve to public addresses on TCP 443. Private/reserved destinations are denied.",checked:c.passthroughUnknown,onChange:a=>L("passthroughUnknown",a),disabled:J}),(0,d.jsx)(u,{label:"Capture request/response bodies",description:"Credentials are redacted before persistence. Disable to retain metadata and wire hashes only.",checked:c.captureBodies,onChange:a=>L("captureBodies",a),disabled:J})]}),(0,d.jsxs)("div",{className:"mt-4 grid gap-3",children:[(0,d.jsx)(u,{label:"Restrict which client tools may connect",description:"Refuses a CONNECT whose User-Agent identifies a tool that is not listed. Catches a browser pointed at the proxy, or a script that inherited HTTPS_PROXY. It cannot catch a client that sends no User-Agent — Claude Code sends none at all and Codex only on its first tunnel, so those are always let through, and anyone can do the same by dropping the header. Hygiene, not access control: the client IP allowlist and who holds the root CA are what bound access.",checked:!0===c.clientToolFilterEnabled,onChange:a=>L("clientToolFilterEnabled",a),disabled:J}),c.clientToolFilterEnabled?(0,d.jsxs)("div",{className:"grid gap-2",children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center gap-1.5",children:[(0,d.jsx)("span",{className:"text-[11px] font-medium text-text-muted",children:"Add:"}),n.map(a=>(0,d.jsx)("button",{type:"button",disabled:J||(c.allowedClientTools||[]).includes(a.id),onClick:()=>L("allowedClientTools",[...new Set([...c.allowedClientTools||[],a.id])]),className:"rounded-lg border border-border px-2 py-1 text-[11px] text-text-muted transition hover:border-primary hover:text-primary disabled:opacity-40",children:a.label},a.id))]}),(0,d.jsx)(t,{label:"Allowed client tools",hint:"One entry per line: a preset id above, or any substring matched against the User-Agent. Only clients that send a User-Agent are checked. Refused connections appear in the audit table with the User-Agent that was rejected, so you can add what you actually use.",children:(0,d.jsx)("textarea",{rows:4,value:(c.allowedClientTools||[]).join("\n"),onChange:a=>L("allowedClientTools",a.target.value.split(/\r?\n/).map(a=>a.trim().toLowerCase()).filter(Boolean)),disabled:J,placeholder:"claude-code\ncodex",className:"rounded-lg border border-border bg-background px-3 py-2 font-mono text-xs text-text-main outline-none focus:border-primary disabled:opacity-60"})})]}):null]}),(0,d.jsxs)("div",{className:"mt-4 grid gap-4 md:grid-cols-[1fr_190px]",children:[(0,d.jsx)(t,{label:"TLS inspection allowlist",hint:"One hostname/wildcard per line. Only these public HTTPS hosts are decrypted and audited.",children:(0,d.jsx)("textarea",{rows:9,value:K,onChange:a=>L("allowedHosts",a.target.value.split(/\r?\n/).map(a=>a.trim()).filter(Boolean)),disabled:J,className:"rounded-lg border border-border bg-background px-3 py-2 font-mono text-xs text-text-main outline-none focus:border-primary disabled:opacity-60"})}),(0,d.jsxs)("div",{className:"grid content-start gap-4",children:[(0,d.jsx)(t,{label:"Retention",hint:"Daily local JSONL segments older than this value are deleted hourly.",children:(0,d.jsxs)("div",{className:"flex items-center gap-2",children:[(0,d.jsx)("input",{type:"number",min:"1",max:"365",value:c.retentionDays,onChange:a=>L("retentionDays",Number(a.target.value)),disabled:J,className:"min-w-0 flex-1 rounded-lg border border-border bg-background px-3 py-2 text-sm text-text-main outline-none focus:border-primary disabled:opacity-60"}),(0,d.jsx)("span",{className:"text-xs text-text-muted",children:"days"})]})}),(0,d.jsxs)("div",{className:"rounded-xl border border-green-500/20 bg-green-500/5 p-3 text-xs leading-5 text-text-muted",children:[(0,d.jsx)("div",{className:"font-semibold text-green-600 dark:text-green-400",children:"Transport controls enforced"}),"TLS verification ON \xb7 HTTP/1.1 \xb7 HTTPS CONNECT only \xb7 public TCP 443 only."]})]})]}),(0,d.jsxs)("div",{className:"mt-4 flex flex-wrap gap-2",children:[(0,d.jsx)("button",{type:"button",onClick:N,disabled:!!v||J,className:"rounded-lg bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:"save"===v?"Saving…":"Save"}),J?(0,d.jsx)("button",{type:"button",onClick:()=>M("stop"),disabled:!!v,className:"rounded-lg border border-red-500/30 bg-red-500/10 px-4 py-2 text-sm font-semibold text-red-500 disabled:opacity-50",children:"stop"===v?"Stopping…":"Stop Proxy"}):(0,d.jsx)("button",{type:"button",onClick:()=>M("start",{config:c}),disabled:!!v,className:"rounded-lg border border-green-500/30 bg-green-500/10 px-4 py-2 text-sm font-semibold text-green-600 disabled:opacity-50",children:"start"===v?"Starting…":"Start Proxy"}),(0,d.jsx)("button",{type:"button",onClick:()=>M("restart",{config:c}),disabled:!!v,className:"rounded-lg border border-border px-4 py-2 text-sm font-semibold text-text-main hover:bg-background disabled:opacity-50",children:"restart"===v?"Restarting…":"Save & Restart"}),(0,d.jsx)("button",{type:"button",onClick:()=>M("test"),disabled:!!v,className:"rounded-lg border border-primary/30 bg-primary/10 px-4 py-2 text-sm font-semibold text-primary disabled:opacity-50",children:"test"===v?"Testing…":"Run Simulated Test"})]})]}),(0,d.jsxs)("div",{className:"space-y-4",children:[(0,d.jsxs)("section",{className:"rounded-2xl border border-border bg-surface p-4",children:[(0,d.jsx)("h2",{className:"font-semibold text-text-main",children:"Root CA"}),(0,d.jsx)("p",{className:"mt-1 text-xs leading-5 text-text-muted",children:"The existing Root CA/key pair is validated and reused. Audit Proxy never auto-rotates enterprise CA material."}),(0,d.jsxs)("div",{className:"mt-3 grid gap-2 text-xs",children:[(0,d.jsxs)("div",{className:"flex justify-between gap-3",children:[(0,d.jsx)("span",{className:"text-text-muted",children:"Status"}),(0,d.jsx)("span",{className:"font-medium text-text-main",children:I.validated?"Validated":I.certExists?"Needs attention":"Not generated"})]}),I.subject?(0,d.jsxs)("div",{className:"grid gap-1",children:[(0,d.jsx)("span",{className:"text-text-muted",children:"Subject"}),(0,d.jsx)("span",{className:"break-all font-mono text-[11px] text-text-main",children:I.subject})]}):null,I.fingerprint?(0,d.jsxs)("div",{className:"grid gap-1",children:[(0,d.jsx)("span",{className:"text-text-muted",children:"Public key fingerprint"}),(0,d.jsx)("span",{className:"break-all font-mono text-[11px] text-text-main",children:I.fingerprint})]}):null,I.notAfter?(0,d.jsxs)("div",{className:"flex justify-between gap-3",children:[(0,d.jsx)("span",{className:"text-text-muted",children:"Expires"}),(0,d.jsx)("span",{className:"text-text-main",children:new Date(I.notAfter).toLocaleString()})]}):null,I.error?(0,d.jsx)("div",{className:"rounded-lg bg-red-500/10 p-2 text-red-600 dark:text-red-300",children:I.error}):null]}),(0,d.jsxs)("div",{className:"mt-4 flex flex-wrap gap-2",children:[(0,d.jsx)("button",{type:"button",onClick:P,disabled:!!v||J,className:"rounded-lg border border-border px-3 py-2 text-xs font-semibold text-text-main hover:bg-background disabled:opacity-50",children:I.certExists?"Validate / Reuse CA":"Generate CA"}),(0,d.jsx)("a",{href:"/api/audit-proxy/ca?download=cert",className:`rounded-lg border border-primary/30 bg-primary/10 px-3 py-2 text-xs font-semibold text-primary ${!I.certExists?"pointer-events-none opacity-50":""}`,children:"Download Root CA"}),(0,d.jsx)(g(),{href:"/dashboard/mitm",className:"rounded-lg border border-border px-3 py-2 text-xs font-semibold text-text-main hover:bg-background",children:"Advanced CA management"})]})]}),(0,d.jsx)(k.Ay,{clientProxyHost:c.clientProxyHost,port:c.port,onError:y})]})]}),B?(0,d.jsxs)("section",{className:`rounded-2xl border p-4 ${B.ok?"border-green-500/30 bg-green-500/5":"border-red-500/30 bg-red-500/5"}`,children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center justify-between gap-2",children:[(0,d.jsxs)("div",{children:[(0,d.jsx)("h2",{className:"font-semibold text-text-main",children:"Simulated end-to-end test"}),(0,d.jsx)("p",{className:"mt-1 text-xs text-text-muted",children:"Local throwaway TLS endpoints; no cloud credential or external API call is used."})]}),(0,d.jsxs)(o,{ok:B.ok,children:[B.passed,"/",B.total," passed \xb7 ",B.durationMs," ms"]})]}),(0,d.jsx)("div",{className:"mt-3 grid gap-2 md:grid-cols-2 xl:grid-cols-3",children:B.checks?.map(a=>(0,d.jsxs)("div",{className:"flex items-start gap-2 rounded-lg border border-border/70 bg-background/60 px-3 py-2 text-xs",children:[(0,d.jsx)("span",{className:`material-symbols-outlined text-[16px] ${a.ok?"text-green-500":"text-red-500"}`,children:a.ok?"check_circle":"error"}),(0,d.jsxs)("span",{children:[(0,d.jsx)("span",{className:"font-medium text-text-main",children:a.name}),a.detail?(0,d.jsx)("span",{className:"mt-0.5 block text-text-muted",children:a.detail}):null]})]},a.name))})]}):null,(0,d.jsx)(j,{onChanged:()=>F(!0)}),(0,d.jsx)(h,{}),(0,d.jsx)(i,{})]}),(0,d.jsxs)("div",{className:"audit"===D?"space-y-4":"hidden",children:[(0,d.jsxs)("section",{className:"rounded-2xl border border-border bg-surface p-4",children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center justify-between gap-2",children:[(0,d.jsxs)("div",{children:[(0,d.jsx)("h2",{className:"font-semibold text-text-main",children:"Token usage"}),(0,d.jsxs)("p",{className:"mt-1 text-xs text-text-muted",children:["Counts are read out of the audited provider responses themselves — ",(0,d.jsx)("code",{className:"font-mono",children:"message_start"})," carries input and cache tokens, the closing ",(0,d.jsx)("code",{className:"font-mono",children:"message_delta"})," carries output. Scope is the same window as the table below."]})]}),a?.usageSummary?.incompleteUsageCount?(0,d.jsxs)("span",{className:"rounded-lg border border-amber-500/30 bg-amber-500/10 px-2.5 py-1 text-[11px] font-medium text-amber-700 dark:text-amber-300",children:[a.usageSummary.incompleteUsageCount," response(s) truncated before the final usage event — output tokens under-counted"]}):null]}),a?.usageSummary?.totals?.requests?(0,d.jsxs)(d.Fragment,{children:[(0,d.jsxs)("div",{className:"mt-3 grid gap-2 sm:grid-cols-2 lg:grid-cols-5",children:[(0,d.jsx)(r,{label:"Requests with usage",value:a.usageSummary.totals.requests}),(0,d.jsx)(r,{label:"Input",value:p(a.usageSummary.totals.inputTokens),hint:"new (uncached) input tokens"}),(0,d.jsx)(r,{label:"Output",value:p(a.usageSummary.totals.outputTokens)}),(0,d.jsx)(r,{label:"Cache read / write",value:`${p(a.usageSummary.totals.cacheReadTokens)} / ${p(a.usageSummary.totals.cacheCreationTokens)}`}),(0,d.jsx)(r,{label:"Est. cost",value:q(a.usageSummary.totals.cost),hint:"from the pricing table"})]}),(0,d.jsxs)("div",{className:"mt-4 grid gap-5 lg:grid-cols-2",children:[(0,d.jsx)(s,{title:"By model",rows:a.usageSummary.byModel}),(0,d.jsx)(s,{title:"By client tool",rows:a.usageSummary.bySourceTool})]})]}):(0,d.jsx)("p",{className:"mt-3 rounded-xl border border-border bg-background/50 p-3 text-xs text-text-muted",children:"No token usage recorded yet. Usage appears once an audited request reaches a provider that reports it (Anthropic and OpenAI both do)."})]}),(0,d.jsxs)("section",{className:"rounded-2xl border border-border bg-surface p-4",children:[(0,d.jsxs)("div",{className:"flex flex-wrap items-center justify-between gap-2",children:[(0,d.jsxs)("div",{children:[(0,d.jsx)("h2",{className:"font-semibold text-text-main",children:"Recent audit requests"}),(0,d.jsx)("p",{className:"mt-1 text-xs text-text-muted",children:"Credentials are redacted before persistence. Local writes and MySQL mirroring run through a bounded asynchronous queue."})]}),(0,d.jsxs)("div",{className:"flex items-center gap-3 text-xs text-text-muted",children:[(0,d.jsxs)("span",{children:["Queue ",G.auditStore?.queueDepth||0,"/",G.auditStore?.queueLimit||1e3]}),(0,d.jsx)("button",{type:"button",onClick:()=>M("clear-logs"),disabled:!!v,className:"rounded-lg border border-border px-3 py-1.5 hover:bg-background disabled:opacity-50",children:"Clear logs"})]})]}),(0,d.jsx)("div",{className:"mt-3 overflow-x-auto",children:(0,d.jsxs)("table",{className:"w-full min-w-[1250px] text-left text-xs",children:[(0,d.jsx)("thead",{className:"border-b border-border text-text-muted",children:(0,d.jsxs)("tr",{children:[(0,d.jsx)("th",{className:"px-2 py-2 font-medium",children:"Time"}),(0,d.jsx)("th",{className:"px-2 py-2 font-medium",children:"Protocol"}),(0,d.jsx)("th",{className:"px-2 py-2 font-medium",children:"Client"}),(0,d.jsx)("th",{className:"px-2 py-2 font-medium",children:"User"}),(0,d.jsx)("th",{className:"px-2 py-2 font-medium",children:"Provider"}),(0,d.jsx)("th",{className:"px-2 py-2 font-medium",children:"Host"}),(0,d.jsx)("th",{className:"px-2 py-2 font-medium",children:"Model"}),(0,d.jsx)("th",{className:"px-2 py-2 font-medium",children:"Request"}),(0,d.jsx)("th",{className:"px-2 py-2 text-right font-medium",children:"Tokens (in/out)"}),(0,d.jsx)("th",{className:"px-2 py-2 text-right font-medium",children:"Cache (r/w)"}),(0,d.jsx)("th",{className:"px-2 py-2 font-medium",children:"Status"}),(0,d.jsx)("th",{className:"px-2 py-2 font-medium",children:"Latency"})]})}),(0,d.jsxs)("tbody",{children:[(a?.events||[]).map(a=>(0,d.jsxs)("tr",{className:"border-b border-border/60 align-top text-text-main",children:[(0,d.jsx)("td",{className:"whitespace-nowrap px-2 py-2 text-text-muted",children:new Date(a.timestamp).toLocaleTimeString()}),(0,d.jsx)("td",{className:"px-2 py-2",children:a.protocol||"http/1.1"}),(0,d.jsx)("td",{className:"px-2 py-2 font-mono text-[11px]",children:a.client?.ip||"-"}),(0,d.jsx)("td",{className:"px-2 py-2",children:a.client?.proxyUser||"-"}),(0,d.jsx)("td",{className:"px-2 py-2",children:a.provider||"-"}),(0,d.jsx)("td",{className:"px-2 py-2 font-mono text-[11px]",children:a.host||"-"}),(0,d.jsx)("td",{className:"px-2 py-2",children:a.model||"-"}),(0,d.jsx)("td",{className:"max-w-[300px] px-2 py-2",children:(0,d.jsxs)("details",{children:[(0,d.jsxs)("summary",{className:"cursor-pointer truncate",children:[a.method," ",a.path]}),(0,d.jsx)("pre",{className:"mt-2 max-h-72 overflow-auto whitespace-pre-wrap rounded-lg bg-background p-2 text-[10px] leading-4 text-text-muted",children:JSON.stringify({request:a.request,response:a.response,error:a.error},null,2)})]})}),(0,d.jsx)("td",{className:"whitespace-nowrap px-2 py-2 text-right",children:a.usage?(0,d.jsxs)("span",{title:!1===a.usage.complete?"Response was truncated before the final usage event; output is a lower bound":void 0,children:[p(a.usage.inputTokens),"/",p(a.usage.outputTokens),!1===a.usage.complete?(0,d.jsx)("span",{className:"text-amber-600 dark:text-amber-400",children:"*"}):null]}):(0,d.jsx)("span",{className:"text-text-muted",children:"-"})}),(0,d.jsx)("td",{className:"whitespace-nowrap px-2 py-2 text-right text-text-muted",children:a.usage?`${p(a.usage.cacheReadTokens)}/${p(a.usage.cacheCreationTokens)}`:"-"}),(0,d.jsx)("td",{className:"px-2 py-2",children:a.status||"ERR"}),(0,d.jsxs)("td",{className:"whitespace-nowrap px-2 py-2",children:[a.durationMs??"-"," ms"]})]},a.id)),a?.events?.length?null:(0,d.jsx)("tr",{children:(0,d.jsx)("td",{colSpan:"12",className:"px-2 py-8 text-center text-text-muted",children:"No audited requests yet."})})]})]})})]})]})]})}},94735:a=>{"use strict";a.exports=require("events")},98621:(a,b,c)=>{"use strict";Object.defineProperty(b,"__esModule",{value:!0}),Object.defineProperty(b,"unstable_rethrow",{enumerable:!0,get:function(){return function a(b){if((0,g.isNextRouterError)(b)||(0,f.isBailoutToCSRError)(b)||(0,i.isDynamicServerError)(b)||(0,h.isDynamicPostpone)(b)||(0,e.isPostpone)(b)||(0,d.isHangingPromiseRejectionError)(b)||(0,h.isPrerenderInterruptedError)(b))throw b;b instanceof Error&&"cause"in b&&a(b.cause)}}});let d=c(48894),e=c(64491),f=c(62880),g=c(76484),h=c(23445),i=c(43449);("function"==typeof b.default||"object"==typeof b.default&&null!==b.default)&&void 0===b.default.__esModule&&(Object.defineProperty(b.default,"__esModule",{value:!0}),Object.assign(b.default,b),a.exports=b.default)}};var b=require("../../../../webpack-runtime.js");b.C(a);var c=b.X(0,[4741,5592,5573,4433,2430,8316,8946,4432,402,5681,4404,6064,6328,8640,7007],()=>b(b.s=63314));module.exports=c})();

package/app/.next-cli-build/server/app/(dashboard)/dashboard/audit-proxy/page.js.nft.json

@@ -1 +1 @@
-{"version":1,"files":["../../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/backups/upgrade-5.3.76-to-5.3.77-5.3.77-20260823-171507/data.sqlite","../../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/backups/upgrade-5.3.77-to-5.3.78-5.3.78-20260823-172736/data.sqlite","../../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/backups/upgrade-5.3.78-to-5.3.79-5.3.79-20260823-174256/data.sqlite","../../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/backups/upgrade-5.3.79-to-5.3.80-5.3.80-20260823-175511/data.sqlite","../../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/backups/upgrade-5.3.80-to-5.3.81-5.3.81-20260823-185938/data.sqlite","../../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/data.sqlite","../../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/data.sqlite-shm","../../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/data.sqlite-wal","../../../../../../cli/.build-home/AppData/Roaming/bluerouter/jwt-secret","../../../../../../cli/.build-home/AppData/Roaming/bluerouter/machine-id","../../../../../../cli/.build-home/AppData/Roaming/nextjs-nodejs/Config/config.json","../../../../../../node_modules/@swc/helpers/_/_interop_require_default/package.json","../../../../../../node_modules/@swc/helpers/cjs/_interop_require_default.cjs","../../../../../../node_modules/@swc/helpers/package.json","../../../../../../node_modules/better-sqlite3/build/Release/better_sqlite3.node","../../../../../../node_modules/better-sqlite3/lib/database.js","../../../../../../node_modules/better-sqlite3/lib/index.js","../../../../../../node_modules/better-sqlite3/lib/methods/aggregate.js","../../../../../../node_modules/better-sqlite3/lib/methods/backup.js","../../../../../../node_modules/better-sqlite3/lib/methods/function.js","../../../../../../node_modules/better-sqlite3/lib/methods/inspect.js","../../../../../../node_modules/better-sqlite3/lib/methods/pragma.js","../../../../../../node_modules/better-sqlite3/lib/methods/serialize.js","../../../../../../node_modules/better-sqlite3/lib/methods/table.js","../../../../../../node_modules/better-sqlite3/lib/methods/transaction.js","../../../../../../node_modules/better-sqlite3/lib/methods/wrappers.js","../../../../../../node_modules/better-sqlite3/lib/sqlite-error.js","../../../../../../node_modules/better-sqlite3/lib/util.js","../../../../../../node_modules/better-sqlite3/package.json","../../../../../../node_modules/bindings/bindings.js","../../../../../../node_modules/bindings/package.json","../../../../../../node_modules/file-uri-to-path/index.js","../../../../../../node_modules/file-uri-to-path/package.json","../../../../../../node_modules/next/dist/build/adapter/setup-node-env.external.js","../../../../../../node_modules/next/dist/client/components/hooks-server-context.js","../../../../../../node_modules/next/dist/client/components/static-generation-bailout.js","../../../../../../node_modules/next/dist/client/lib/console.js","../../../../../../node_modules/next/dist/compiled/@opentelemetry/api/index.js","../../../../../../node_modules/next/dist/compiled/@opentelemetry/api/package.json","../../../../../../node_modules/next/dist/compiled/jsonwebtoken/index.js","../../../../../../node_modules/next/dist/compiled/jsonwebtoken/package.json","../../../../../../node_modules/next/dist/compiled/next-server/app-page.runtime.prod.js","../../../../../../node_modules/next/dist/compiled/source-map/package.json","../../../../../../node_modules/next/dist/compiled/source-map/source-map.js","../../../../../../node_modules/next/dist/compiled/stacktrace-parser/package.json","../../../../../../node_modules/next/dist/compiled/stacktrace-parser/stack-trace-parser.cjs.js","../../../../../../node_modules/next/dist/compiled/ws/index.js","../../../../../../node_modules/next/dist/compiled/ws/package.json","../../../../../../node_modules/next/dist/lib/client-and-server-references.js","../../../../../../node_modules/next/dist/lib/constants.js","../../../../../../node_modules/next/dist/lib/framework/boundary-constants.js","../../../../../../node_modules/next/dist/lib/interop-default.js","../../../../../../node_modules/next/dist/lib/is-error.js","../../../../../../node_modules/next/dist/lib/picocolors.js","../../../../../../node_modules/next/dist/lib/scheduler.js","../../../../../../node_modules/next/dist/lib/semver-noop.js","../../../../../../node_modules/next/dist/server/app-render/action-async-storage-instance.js","../../../../../../node_modules/next/dist/server/app-render/action-async-storage.external.js","../../../../../../node_modules/next/dist/server/app-render/after-task-async-storage-instance.js","../../../../../../node_modules/next/dist/server/app-render/after-task-async-storage.external.js","../../../../../../node_modules/next/dist/server/app-render/async-local-storage.js","../../../../../../node_modules/next/dist/server/app-render/blocking-route-messages.js","../../../../../../node_modules/next/dist/server/app-render/cache-signal.js","../../../../../../node_modules/next/dist/server/app-render/console-async-storage-instance.js","../../../../../../node_modules/next/dist/server/app-render/console-async-storage.external.js","../../../../../../node_modules/next/dist/server/app-render/dynamic-access-async-storage-instance.js","../../../../../../node_modules/next/dist/server/app-render/dynamic-access-async-storage.external.js","../../../../../../node_modules/next/dist/server/app-render/dynamic-rendering.js","../../../../../../node_modules/next/dist/server/app-render/instant-validation/boundary-constants.js","../../../../../../node_modules/next/dist/server/app-render/instant-validation/boundary-tracking.js","../../../../../../node_modules/next/dist/server/app-render/module-loading/track-module-loading.external.js","../../../../../../node_modules/next/dist/server/app-render/module-loading/track-module-loading.instance.js","../../../../../../node_modules/next/dist/server/app-render/staged-rendering.js","../../../../../../node_modules/next/dist/server/app-render/sync-io-messages.js","../../../../../../node_modules/next/dist/server/app-render/work-async-storage-instance.js","../../../../../../node_modules/next/dist/server/app-render/work-async-storage.external.js","../../../../../../node_modules/next/dist/server/app-render/work-unit-async-storage-instance.js","../../../../../../node_modules/next/dist/server/app-render/work-unit-async-storage.external.js","../../../../../../node_modules/next/dist/server/dev/browser-logs/file-logger.js","../../../../../../node_modules/next/dist/server/dynamic-rendering-utils.js","../../../../../../node_modules/next/dist/server/lib/incremental-cache/memory-cache.external.js","../../../../../../node_modules/next/dist/server/lib/incremental-cache/shared-cache-controls.external.js","../../../../../../node_modules/next/dist/server/lib/incremental-cache/tags-manifest.external.js","../../../../../../node_modules/next/dist/server/lib/lru-cache.js","../../../../../../node_modules/next/dist/server/lib/parse-stack.js","../../../../../../node_modules/next/dist/server/lib/router-utils/instrumentation-globals.external.js","../../../../../../node_modules/next/dist/server/lib/router-utils/instrumentation-node-extensions.js","../../../../../../node_modules/next/dist/server/lib/source-maps.js","../../../../../../node_modules/next/dist/server/lib/trace/constants.js","../../../../../../node_modules/next/dist/server/lib/trace/tracer.js","../../../../../../node_modules/next/dist/server/load-manifest.external.js","../../../../../../node_modules/next/dist/server/node-environment-baseline.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/console-dim.external.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/console-exit.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/console-file.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/date.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/error-inspect.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/fast-set-immediate.external.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/io-utils.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/node-crypto.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/random.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/unhandled-rejection.external.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/web-crypto.js","../../../../../../node_modules/next/dist/server/node-environment.js","../../../../../../node_modules/next/dist/server/node-polyfill-crypto.js","../../../../../../node_modules/next/dist/server/patch-error-inspect.js","../../../../../../node_modules/next/dist/server/require-hook.js","../../../../../../node_modules/next/dist/server/response-cache/types.js","../../../../../../node_modules/next/dist/server/runtime-reacts.external.js","../../../../../../node_modules/next/dist/shared/lib/deep-freeze.js","../../../../../../node_modules/next/dist/shared/lib/instant-messages.js","../../../../../../node_modules/next/dist/shared/lib/invariant-error.js","../../../../../../node_modules/next/dist/shared/lib/is-plain-object.js","../../../../../../node_modules/next/dist/shared/lib/is-thenable.js","../../../../../../node_modules/next/dist/shared/lib/lazy-dynamic/bailout-to-csr.js","../../../../../../node_modules/next/dist/shared/lib/no-fallback-error.external.js","../../../../../../node_modules/next/dist/shared/lib/promise-with-resolvers.js","../../../../../../node_modules/next/dist/shared/lib/server-reference-info.js","../../../../../../node_modules/next/package.json","../../../../../../node_modules/pg-cloudflare/dist/empty.js","../../../../../../node_modules/pg-cloudflare/dist/index.js","../../../../../../node_modules/pg-cloudflare/package.json","../../../../../../node_modules/pg-connection-string/index.js","../../../../../../node_modules/pg-connection-string/package.json","../../../../../../node_modules/pg-int8/index.js","../../../../../../node_modules/pg-int8/package.json","../../../../../../node_modules/pg-pool/index.js","../../../../../../node_modules/pg-pool/package.json","../../../../../../node_modules/pg-protocol/dist/buffer-reader.js","../../../../../../node_modules/pg-protocol/dist/buffer-writer.js","../../../../../../node_modules/pg-protocol/dist/index.js","../../../../../../node_modules/pg-protocol/dist/messages.js","../../../../../../node_modules/pg-protocol/dist/parser.js","../../../../../../node_modules/pg-protocol/dist/serializer.js","../../../../../../node_modules/pg-protocol/package.json","../../../../../../node_modules/pg-types/index.js","../../../../../../node_modules/pg-types/lib/arrayParser.js","../../../../../../node_modules/pg-types/lib/binaryParsers.js","../../../../../../node_modules/pg-types/lib/builtins.js","../../../../../../node_modules/pg-types/lib/textParsers.js","../../../../../../node_modules/pg-types/package.json","../../../../../../node_modules/pg/esm/index.mjs","../../../../../../node_modules/pg/lib/client.js","../../../../../../node_modules/pg/lib/connection-parameters.js","../../../../../../node_modules/pg/lib/connection.js","../../../../../../node_modules/pg/lib/crypto/cert-signatures.js","../../../../../../node_modules/pg/lib/crypto/sasl.js","../../../../../../node_modules/pg/lib/crypto/utils.js","../../../../../../node_modules/pg/lib/defaults.js","../../../../../../node_modules/pg/lib/index.js","../../../../../../node_modules/pg/lib/native/client.js","../../../../../../node_modules/pg/lib/native/index.js","../../../../../../node_modules/pg/lib/native/query.js","../../../../../../node_modules/pg/lib/query.js","../../../../../../node_modules/pg/lib/result.js","../../../../../../node_modules/pg/lib/stream.js","../../../../../../node_modules/pg/lib/type-overrides.js","../../../../../../node_modules/pg/lib/utils.js","../../../../../../node_modules/pg/package.json","../../../../../../node_modules/pgpass/lib/helper.js","../../../../../../node_modules/pgpass/lib/index.js","../../../../../../node_modules/pgpass/package.json","../../../../../../node_modules/postgres-array/index.js","../../../../../../node_modules/postgres-array/package.json","../../../../../../node_modules/postgres-bytea/index.js","../../../../../../node_modules/postgres-bytea/package.json","../../../../../../node_modules/postgres-date/index.js","../../../../../../node_modules/postgres-date/package.json","../../../../../../node_modules/postgres-interval/index.js","../../../../../../node_modules/postgres-interval/package.json","../../../../../../node_modules/react/cjs/react.development.js","../../../../../../node_modules/react/cjs/react.production.js","../../../../../../node_modules/react/index.js","../../../../../../node_modules/react/package.json","../../../../../../node_modules/split2/index.js","../../../../../../node_modules/split2/package.json","../../../../../../node_modules/sql.js/dist/sql-wasm.js","../../../../../../node_modules/sql.js/package.json","../../../../../../node_modules/xtend/mutable.js","../../../../../../node_modules/xtend/package.json","../../../../../../package.json","../../../../../../src/lib/db/adapters/betterSqliteAdapter.js","../../../../../../src/lib/db/adapters/bunSqliteAdapter.js","../../../../../../src/lib/db/adapters/nodeSqliteAdapter.js","../../../../../../src/lib/db/adapters/sqljsAdapter.js","../../../../../../src/lib/db/migrate.js","../../../../../../src/shared/utils/apiKey.js","../../../../../package.json","../../../../chunks/1002.js","../../../../chunks/1455.js","../../../../chunks/181.js","../../../../chunks/1817.js","../../../../chunks/1998.js","../../../../chunks/2155.js","../../../../chunks/2242.js","../../../../chunks/241.js","../../../../chunks/2430.js","../../../../chunks/2506.js","../../../../chunks/2507.js","../../../../chunks/2512.js","../../../../chunks/2556.js","../../../../chunks/2566.js","../../../../chunks/2611.js","../../../../chunks/2650.js","../../../../chunks/2664.js","../../../../chunks/2731.js","../../../../chunks/2891.js","../../../../chunks/2944.js","../../../../chunks/3104.js","../../../../chunks/318.js","../../../../chunks/3399.js","../../../../chunks/3433.js","../../../../chunks/3593.js","../../../../chunks/3609.js","../../../../chunks/3696.js","../../../../chunks/3738.js","../../../../chunks/3767.js","../../../../chunks/3801.js","../../../../chunks/3824.js","../../../../chunks/3958.js","../../../../chunks/3960.js","../../../../chunks/4013.js","../../../../chunks/4017.js","../../../../chunks/402.js","../../../../chunks/4123.js","../../../../chunks/4177.js","../../../../chunks/4298.js","../../../../chunks/4315.js","../../../../chunks/4350.js","../../../../chunks/436.js","../../../../chunks/4404.js","../../../../chunks/4433.js","../../../../chunks/4632.js","../../../../chunks/4696.js","../../../../chunks/4739.js","../../../../chunks/4741.js","../../../../chunks/4746.js","../../../../chunks/4778.js","../../../../chunks/4780.js","../../../../chunks/4790.js","../../../../chunks/4803.js","../../../../chunks/507.js","../../../../chunks/5206.js","../../../../chunks/5210.js","../../../../chunks/5213.js","../../../../chunks/5258.js","../../../../chunks/5312.js","../../../../chunks/541.js","../../../../chunks/5424.js","../../../../chunks/5433.js","../../../../chunks/5573.js","../../../../chunks/5592.js","../../../../chunks/5681.js","../../../../chunks/5852.js","../../../../chunks/5901.js","../../../../chunks/5915.js","../../../../chunks/595.js","../../../../chunks/6053.js","../../../../chunks/6064.js","../../../../chunks/607.js","../../../../chunks/6103.js","../../../../chunks/6108.js","../../../../chunks/6118.js","../../../../chunks/6182.js","../../../../chunks/6252.js","../../../../chunks/6328.js","../../../../chunks/6404.js","../../../../chunks/6492.js","../../../../chunks/6684.js","../../../../chunks/6811.js","../../../../chunks/6844.js","../../../../chunks/689.js","../../../../chunks/6936.js","../../../../chunks/6956.js","../../../../chunks/6977.js","../../../../chunks/6979.js","../../../../chunks/698.js","../../../../chunks/6992.js","../../../../chunks/7126.js","../../../../chunks/7242.js","../../../../chunks/7341.js","../../../../chunks/7464.js","../../../../chunks/7669.js","../../../../chunks/7707.js","../../../../chunks/7753.js","../../../../chunks/7774.js","../../../../chunks/7812.js","../../../../chunks/7828.js","../../../../chunks/7965.js","../../../../chunks/7986.js","../../../../chunks/8023.js","../../../../chunks/8049.js","../../../../chunks/8062.js","../../../../chunks/8099.js","../../../../chunks/8255.js","../../../../chunks/8316.js","../../../../chunks/8347.js","../../../../chunks/8352.js","../../../../chunks/8360.js","../../../../chunks/8469.js","../../../../chunks/8491.js","../../../../chunks/8520.js","../../../../chunks/8590.js","../../../../chunks/8640.js","../../../../chunks/8895.js","../../../../chunks/8946.js","../../../../chunks/9.js","../../../../chunks/9012.js","../../../../chunks/9483.js","../../../../chunks/9489.js","../../../../chunks/9609.js","../../../../chunks/9868.js","../../../../webpack-runtime.js","page_client-reference-manifest.js"]}
+{"version":1,"files":["../../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/backups/upgrade-5.3.79-to-5.3.80-5.3.80-20260823-175511/data.sqlite","../../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/backups/upgrade-5.3.80-to-5.3.81-5.3.81-20260823-185938/data.sqlite","../../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/backups/upgrade-5.3.81-to-5.3.82-5.3.82-20260823-201609/data.sqlite","../../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/backups/upgrade-5.3.82-to-5.3.83-5.3.83-20260823-202359/data.sqlite","../../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/backups/upgrade-5.3.83-to-5.3.84-5.3.84-20260823-203807/data.sqlite","../../../../../../cli/.build-home/AppData/Roaming/bluerouter/db/data.sqlite","../../../../../../cli/.build-home/AppData/Roaming/bluerouter/jwt-secret","../../../../../../cli/.build-home/AppData/Roaming/bluerouter/machine-id","../../../../../../cli/.build-home/AppData/Roaming/nextjs-nodejs/Config/config.json","../../../../../../node_modules/@swc/helpers/_/_interop_require_default/package.json","../../../../../../node_modules/@swc/helpers/cjs/_interop_require_default.cjs","../../../../../../node_modules/@swc/helpers/package.json","../../../../../../node_modules/better-sqlite3/build/Release/better_sqlite3.node","../../../../../../node_modules/better-sqlite3/lib/database.js","../../../../../../node_modules/better-sqlite3/lib/index.js","../../../../../../node_modules/better-sqlite3/lib/methods/aggregate.js","../../../../../../node_modules/better-sqlite3/lib/methods/backup.js","../../../../../../node_modules/better-sqlite3/lib/methods/function.js","../../../../../../node_modules/better-sqlite3/lib/methods/inspect.js","../../../../../../node_modules/better-sqlite3/lib/methods/pragma.js","../../../../../../node_modules/better-sqlite3/lib/methods/serialize.js","../../../../../../node_modules/better-sqlite3/lib/methods/table.js","../../../../../../node_modules/better-sqlite3/lib/methods/transaction.js","../../../../../../node_modules/better-sqlite3/lib/methods/wrappers.js","../../../../../../node_modules/better-sqlite3/lib/sqlite-error.js","../../../../../../node_modules/better-sqlite3/lib/util.js","../../../../../../node_modules/better-sqlite3/package.json","../../../../../../node_modules/bindings/bindings.js","../../../../../../node_modules/bindings/package.json","../../../../../../node_modules/file-uri-to-path/index.js","../../../../../../node_modules/file-uri-to-path/package.json","../../../../../../node_modules/next/dist/build/adapter/setup-node-env.external.js","../../../../../../node_modules/next/dist/client/components/hooks-server-context.js","../../../../../../node_modules/next/dist/client/components/static-generation-bailout.js","../../../../../../node_modules/next/dist/client/lib/console.js","../../../../../../node_modules/next/dist/compiled/@opentelemetry/api/index.js","../../../../../../node_modules/next/dist/compiled/@opentelemetry/api/package.json","../../../../../../node_modules/next/dist/compiled/jsonwebtoken/index.js","../../../../../../node_modules/next/dist/compiled/jsonwebtoken/package.json","../../../../../../node_modules/next/dist/compiled/next-server/app-page.runtime.prod.js","../../../../../../node_modules/next/dist/compiled/source-map/package.json","../../../../../../node_modules/next/dist/compiled/source-map/source-map.js","../../../../../../node_modules/next/dist/compiled/stacktrace-parser/package.json","../../../../../../node_modules/next/dist/compiled/stacktrace-parser/stack-trace-parser.cjs.js","../../../../../../node_modules/next/dist/compiled/ws/index.js","../../../../../../node_modules/next/dist/compiled/ws/package.json","../../../../../../node_modules/next/dist/lib/client-and-server-references.js","../../../../../../node_modules/next/dist/lib/constants.js","../../../../../../node_modules/next/dist/lib/framework/boundary-constants.js","../../../../../../node_modules/next/dist/lib/interop-default.js","../../../../../../node_modules/next/dist/lib/is-error.js","../../../../../../node_modules/next/dist/lib/picocolors.js","../../../../../../node_modules/next/dist/lib/scheduler.js","../../../../../../node_modules/next/dist/lib/semver-noop.js","../../../../../../node_modules/next/dist/server/app-render/action-async-storage-instance.js","../../../../../../node_modules/next/dist/server/app-render/action-async-storage.external.js","../../../../../../node_modules/next/dist/server/app-render/after-task-async-storage-instance.js","../../../../../../node_modules/next/dist/server/app-render/after-task-async-storage.external.js","../../../../../../node_modules/next/dist/server/app-render/async-local-storage.js","../../../../../../node_modules/next/dist/server/app-render/blocking-route-messages.js","../../../../../../node_modules/next/dist/server/app-render/cache-signal.js","../../../../../../node_modules/next/dist/server/app-render/console-async-storage-instance.js","../../../../../../node_modules/next/dist/server/app-render/console-async-storage.external.js","../../../../../../node_modules/next/dist/server/app-render/dynamic-access-async-storage-instance.js","../../../../../../node_modules/next/dist/server/app-render/dynamic-access-async-storage.external.js","../../../../../../node_modules/next/dist/server/app-render/dynamic-rendering.js","../../../../../../node_modules/next/dist/server/app-render/instant-validation/boundary-constants.js","../../../../../../node_modules/next/dist/server/app-render/instant-validation/boundary-tracking.js","../../../../../../node_modules/next/dist/server/app-render/module-loading/track-module-loading.external.js","../../../../../../node_modules/next/dist/server/app-render/module-loading/track-module-loading.instance.js","../../../../../../node_modules/next/dist/server/app-render/staged-rendering.js","../../../../../../node_modules/next/dist/server/app-render/sync-io-messages.js","../../../../../../node_modules/next/dist/server/app-render/work-async-storage-instance.js","../../../../../../node_modules/next/dist/server/app-render/work-async-storage.external.js","../../../../../../node_modules/next/dist/server/app-render/work-unit-async-storage-instance.js","../../../../../../node_modules/next/dist/server/app-render/work-unit-async-storage.external.js","../../../../../../node_modules/next/dist/server/dev/browser-logs/file-logger.js","../../../../../../node_modules/next/dist/server/dynamic-rendering-utils.js","../../../../../../node_modules/next/dist/server/lib/incremental-cache/memory-cache.external.js","../../../../../../node_modules/next/dist/server/lib/incremental-cache/shared-cache-controls.external.js","../../../../../../node_modules/next/dist/server/lib/incremental-cache/tags-manifest.external.js","../../../../../../node_modules/next/dist/server/lib/lru-cache.js","../../../../../../node_modules/next/dist/server/lib/parse-stack.js","../../../../../../node_modules/next/dist/server/lib/router-utils/instrumentation-globals.external.js","../../../../../../node_modules/next/dist/server/lib/router-utils/instrumentation-node-extensions.js","../../../../../../node_modules/next/dist/server/lib/source-maps.js","../../../../../../node_modules/next/dist/server/lib/trace/constants.js","../../../../../../node_modules/next/dist/server/lib/trace/tracer.js","../../../../../../node_modules/next/dist/server/load-manifest.external.js","../../../../../../node_modules/next/dist/server/node-environment-baseline.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/console-dim.external.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/console-exit.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/console-file.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/date.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/error-inspect.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/fast-set-immediate.external.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/io-utils.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/node-crypto.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/random.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/unhandled-rejection.external.js","../../../../../../node_modules/next/dist/server/node-environment-extensions/web-crypto.js","../../../../../../node_modules/next/dist/server/node-environment.js","../../../../../../node_modules/next/dist/server/node-polyfill-crypto.js","../../../../../../node_modules/next/dist/server/patch-error-inspect.js","../../../../../../node_modules/next/dist/server/require-hook.js","../../../../../../node_modules/next/dist/server/response-cache/types.js","../../../../../../node_modules/next/dist/server/runtime-reacts.external.js","../../../../../../node_modules/next/dist/shared/lib/deep-freeze.js","../../../../../../node_modules/next/dist/shared/lib/instant-messages.js","../../../../../../node_modules/next/dist/shared/lib/invariant-error.js","../../../../../../node_modules/next/dist/shared/lib/is-plain-object.js","../../../../../../node_modules/next/dist/shared/lib/is-thenable.js","../../../../../../node_modules/next/dist/shared/lib/lazy-dynamic/bailout-to-csr.js","../../../../../../node_modules/next/dist/shared/lib/no-fallback-error.external.js","../../../../../../node_modules/next/dist/shared/lib/promise-with-resolvers.js","../../../../../../node_modules/next/dist/shared/lib/server-reference-info.js","../../../../../../node_modules/next/package.json","../../../../../../node_modules/pg-cloudflare/dist/empty.js","../../../../../../node_modules/pg-cloudflare/dist/index.js","../../../../../../node_modules/pg-cloudflare/package.json","../../../../../../node_modules/pg-connection-string/index.js","../../../../../../node_modules/pg-connection-string/package.json","../../../../../../node_modules/pg-int8/index.js","../../../../../../node_modules/pg-int8/package.json","../../../../../../node_modules/pg-pool/index.js","../../../../../../node_modules/pg-pool/package.json","../../../../../../node_modules/pg-protocol/dist/buffer-reader.js","../../../../../../node_modules/pg-protocol/dist/buffer-writer.js","../../../../../../node_modules/pg-protocol/dist/index.js","../../../../../../node_modules/pg-protocol/dist/messages.js","../../../../../../node_modules/pg-protocol/dist/parser.js","../../../../../../node_modules/pg-protocol/dist/serializer.js","../../../../../../node_modules/pg-protocol/package.json","../../../../../../node_modules/pg-types/index.js","../../../../../../node_modules/pg-types/lib/arrayParser.js","../../../../../../node_modules/pg-types/lib/binaryParsers.js","../../../../../../node_modules/pg-types/lib/builtins.js","../../../../../../node_modules/pg-types/lib/textParsers.js","../../../../../../node_modules/pg-types/package.json","../../../../../../node_modules/pg/esm/index.mjs","../../../../../../node_modules/pg/lib/client.js","../../../../../../node_modules/pg/lib/connection-parameters.js","../../../../../../node_modules/pg/lib/connection.js","../../../../../../node_modules/pg/lib/crypto/cert-signatures.js","../../../../../../node_modules/pg/lib/crypto/sasl.js","../../../../../../node_modules/pg/lib/crypto/utils.js","../../../../../../node_modules/pg/lib/defaults.js","../../../../../../node_modules/pg/lib/index.js","../../../../../../node_modules/pg/lib/native/client.js","../../../../../../node_modules/pg/lib/native/index.js","../../../../../../node_modules/pg/lib/native/query.js","../../../../../../node_modules/pg/lib/query.js","../../../../../../node_modules/pg/lib/result.js","../../../../../../node_modules/pg/lib/stream.js","../../../../../../node_modules/pg/lib/type-overrides.js","../../../../../../node_modules/pg/lib/utils.js","../../../../../../node_modules/pg/package.json","../../../../../../node_modules/pgpass/lib/helper.js","../../../../../../node_modules/pgpass/lib/index.js","../../../../../../node_modules/pgpass/package.json","../../../../../../node_modules/postgres-array/index.js","../../../../../../node_modules/postgres-array/package.json","../../../../../../node_modules/postgres-bytea/index.js","../../../../../../node_modules/postgres-bytea/package.json","../../../../../../node_modules/postgres-date/index.js","../../../../../../node_modules/postgres-date/package.json","../../../../../../node_modules/postgres-interval/index.js","../../../../../../node_modules/postgres-interval/package.json","../../../../../../node_modules/react/cjs/react.development.js","../../../../../../node_modules/react/cjs/react.production.js","../../../../../../node_modules/react/index.js","../../../../../../node_modules/react/package.json","../../../../../../node_modules/split2/index.js","../../../../../../node_modules/split2/package.json","../../../../../../node_modules/sql.js/dist/sql-wasm.js","../../../../../../node_modules/sql.js/package.json","../../../../../../node_modules/xtend/mutable.js","../../../../../../node_modules/xtend/package.json","../../../../../../package.json","../../../../../../src/lib/db/adapters/betterSqliteAdapter.js","../../../../../../src/lib/db/adapters/bunSqliteAdapter.js","../../../../../../src/lib/db/adapters/nodeSqliteAdapter.js","../../../../../../src/lib/db/adapters/sqljsAdapter.js","../../../../../../src/lib/db/migrate.js","../../../../../../src/shared/utils/apiKey.js","../../../../../package.json","../../../../chunks/1002.js","../../../../chunks/1455.js","../../../../chunks/181.js","../../../../chunks/1817.js","../../../../chunks/1998.js","../../../../chunks/2155.js","../../../../chunks/2242.js","../../../../chunks/241.js","../../../../chunks/2430.js","../../../../chunks/2506.js","../../../../chunks/2507.js","../../../../chunks/2512.js","../../../../chunks/2556.js","../../../../chunks/2566.js","../../../../chunks/2611.js","../../../../chunks/2650.js","../../../../chunks/2664.js","../../../../chunks/2731.js","../../../../chunks/2891.js","../../../../chunks/2944.js","../../../../chunks/3104.js","../../../../chunks/318.js","../../../../chunks/3399.js","../../../../chunks/3433.js","../../../../chunks/3593.js","../../../../chunks/3609.js","../../../../chunks/3696.js","../../../../chunks/3738.js","../../../../chunks/3801.js","../../../../chunks/3824.js","../../../../chunks/3958.js","../../../../chunks/3960.js","../../../../chunks/4013.js","../../../../chunks/4017.js","../../../../chunks/402.js","../../../../chunks/4123.js","../../../../chunks/4177.js","../../../../chunks/4298.js","../../../../chunks/4315.js","../../../../chunks/4350.js","../../../../chunks/436.js","../../../../chunks/4404.js","../../../../chunks/4432.js","../../../../chunks/4433.js","../../../../chunks/4632.js","../../../../chunks/4696.js","../../../../chunks/4739.js","../../../../chunks/4741.js","../../../../chunks/4746.js","../../../../chunks/4778.js","../../../../chunks/4780.js","../../../../chunks/4790.js","../../../../chunks/4803.js","../../../../chunks/507.js","../../../../chunks/5206.js","../../../../chunks/5210.js","../../../../chunks/5213.js","../../../../chunks/5258.js","../../../../chunks/5312.js","../../../../chunks/541.js","../../../../chunks/5424.js","../../../../chunks/5433.js","../../../../chunks/5530.js","../../../../chunks/5573.js","../../../../chunks/5592.js","../../../../chunks/5681.js","../../../../chunks/5852.js","../../../../chunks/5901.js","../../../../chunks/5915.js","../../../../chunks/595.js","../../../../chunks/6053.js","../../../../chunks/6064.js","../../../../chunks/607.js","../../../../chunks/6103.js","../../../../chunks/6108.js","../../../../chunks/6118.js","../../../../chunks/6182.js","../../../../chunks/6252.js","../../../../chunks/6328.js","../../../../chunks/6404.js","../../../../chunks/6492.js","../../../../chunks/6684.js","../../../../chunks/6811.js","../../../../chunks/6844.js","../../../../chunks/689.js","../../../../chunks/6936.js","../../../../chunks/6956.js","../../../../chunks/6977.js","../../../../chunks/6979.js","../../../../chunks/698.js","../../../../chunks/6992.js","../../../../chunks/7007.js","../../../../chunks/7126.js","../../../../chunks/7242.js","../../../../chunks/7341.js","../../../../chunks/7464.js","../../../../chunks/7669.js","../../../../chunks/7707.js","../../../../chunks/7753.js","../../../../chunks/7774.js","../../../../chunks/7812.js","../../../../chunks/7828.js","../../../../chunks/7965.js","../../../../chunks/7986.js","../../../../chunks/8023.js","../../../../chunks/8049.js","../../../../chunks/8062.js","../../../../chunks/8099.js","../../../../chunks/8255.js","../../../../chunks/8316.js","../../../../chunks/8347.js","../../../../chunks/8352.js","../../../../chunks/8360.js","../../../../chunks/8469.js","../../../../chunks/8491.js","../../../../chunks/8520.js","../../../../chunks/8590.js","../../../../chunks/8640.js","../../../../chunks/8895.js","../../../../chunks/8946.js","../../../../chunks/9.js","../../../../chunks/9012.js","../../../../chunks/9083.js","../../../../chunks/9483.js","../../../../chunks/9489.js","../../../../chunks/9609.js","../../../../chunks/9868.js","../../../../webpack-runtime.js","page_client-reference-manifest.js"]}