@rubytech/create-maxy-code 0.1.0

package/payload/server/chunk-5FM432JB.js

@@ -0,0 +1,4148 @@
+import {
+  getConversationOwner
+} from "./chunk-6S5JTXAN.js";
+
+// node_modules/hono/dist/compose.js
+var compose = (middleware, onError, onNotFound) => {
+  return (context, next) => {
+    let index = -1;
+    return dispatch(0);
+    async function dispatch(i) {
+      if (i <= index) {
+        throw new Error("next() called multiple times");
+      }
+      index = i;
+      let res;
+      let isError = false;
+      let handler;
+      if (middleware[i]) {
+        handler = middleware[i][0][0];
+        context.req.routeIndex = i;
+      } else {
+        handler = i === middleware.length && next || void 0;
+      }
+      if (handler) {
+        try {
+          res = await handler(context, () => dispatch(i + 1));
+        } catch (err) {
+          if (err instanceof Error && onError) {
+            context.error = err;
+            res = await onError(err, context);
+            isError = true;
+          } else {
+            throw err;
+          }
+        }
+      } else {
+        if (context.finalized === false && onNotFound) {
+          res = await onNotFound(context);
+        }
+      }
+      if (res && (context.finalized === false || isError)) {
+        context.res = res;
+      }
+      return context;
+    }
+  };
+};
+
+// node_modules/hono/dist/request/constants.js
+var GET_MATCH_RESULT = /* @__PURE__ */ Symbol();
+
+// node_modules/hono/dist/utils/body.js
+var parseBody = async (request, options = /* @__PURE__ */ Object.create(null)) => {
+  const { all = false, dot = false } = options;
+  const headers = request instanceof HonoRequest ? request.raw.headers : request.headers;
+  const contentType = headers.get("Content-Type");
+  if (contentType?.startsWith("multipart/form-data") || contentType?.startsWith("application/x-www-form-urlencoded")) {
+    return parseFormData(request, { all, dot });
+  }
+  return {};
+};
+async function parseFormData(request, options) {
+  const formData = await request.formData();
+  if (formData) {
+    return convertFormDataToBodyData(formData, options);
+  }
+  return {};
+}
+function convertFormDataToBodyData(formData, options) {
+  const form = /* @__PURE__ */ Object.create(null);
+  formData.forEach((value, key) => {
+    const shouldParseAllValues = options.all || key.endsWith("[]");
+    if (!shouldParseAllValues) {
+      form[key] = value;
+    } else {
+      handleParsingAllValues(form, key, value);
+    }
+  });
+  if (options.dot) {
+    Object.entries(form).forEach(([key, value]) => {
+      const shouldParseDotValues = key.includes(".");
+      if (shouldParseDotValues) {
+        handleParsingNestedValues(form, key, value);
+        delete form[key];
+      }
+    });
+  }
+  return form;
+}
+var handleParsingAllValues = (form, key, value) => {
+  if (form[key] !== void 0) {
+    if (Array.isArray(form[key])) {
+      ;
+      form[key].push(value);
+    } else {
+      form[key] = [form[key], value];
+    }
+  } else {
+    if (!key.endsWith("[]")) {
+      form[key] = value;
+    } else {
+      form[key] = [value];
+    }
+  }
+};
+var handleParsingNestedValues = (form, key, value) => {
+  if (/(?:^|\.)__proto__\./.test(key)) {
+    return;
+  }
+  let nestedForm = form;
+  const keys = key.split(".");
+  keys.forEach((key2, index) => {
+    if (index === keys.length - 1) {
+      nestedForm[key2] = value;
+    } else {
+      if (!nestedForm[key2] || typeof nestedForm[key2] !== "object" || Array.isArray(nestedForm[key2]) || nestedForm[key2] instanceof File) {
+        nestedForm[key2] = /* @__PURE__ */ Object.create(null);
+      }
+      nestedForm = nestedForm[key2];
+    }
+  });
+};
+
+// node_modules/hono/dist/utils/url.js
+var splitPath = (path) => {
+  const paths = path.split("/");
+  if (paths[0] === "") {
+    paths.shift();
+  }
+  return paths;
+};
+var splitRoutingPath = (routePath) => {
+  const { groups, path } = extractGroupsFromPath(routePath);
+  const paths = splitPath(path);
+  return replaceGroupMarks(paths, groups);
+};
+var extractGroupsFromPath = (path) => {
+  const groups = [];
+  path = path.replace(/\{[^}]+\}/g, (match2, index) => {
+    const mark = `@${index}`;
+    groups.push([mark, match2]);
+    return mark;
+  });
+  return { groups, path };
+};
+var replaceGroupMarks = (paths, groups) => {
+  for (let i = groups.length - 1; i >= 0; i--) {
+    const [mark] = groups[i];
+    for (let j = paths.length - 1; j >= 0; j--) {
+      if (paths[j].includes(mark)) {
+        paths[j] = paths[j].replace(mark, groups[i][1]);
+        break;
+      }
+    }
+  }
+  return paths;
+};
+var patternCache = {};
+var getPattern = (label, next) => {
+  if (label === "*") {
+    return "*";
+  }
+  const match2 = label.match(/^\:([^\{\}]+)(?:\{(.+)\})?$/);
+  if (match2) {
+    const cacheKey2 = `${label}#${next}`;
+    if (!patternCache[cacheKey2]) {
+      if (match2[2]) {
+        patternCache[cacheKey2] = next && next[0] !== ":" && next[0] !== "*" ? [cacheKey2, match2[1], new RegExp(`^${match2[2]}(?=/${next})`)] : [label, match2[1], new RegExp(`^${match2[2]}$`)];
+      } else {
+        patternCache[cacheKey2] = [label, match2[1], true];
+      }
+    }
+    return patternCache[cacheKey2];
+  }
+  return null;
+};
+var tryDecode = (str, decoder) => {
+  try {
+    return decoder(str);
+  } catch {
+    return str.replace(/(?:%[0-9A-Fa-f]{2})+/g, (match2) => {
+      try {
+        return decoder(match2);
+      } catch {
+        return match2;
+      }
+    });
+  }
+};
+var tryDecodeURI = (str) => tryDecode(str, decodeURI);
+var getPath = (request) => {
+  const url = request.url;
+  const start = url.indexOf("/", url.indexOf(":") + 4);
+  let i = start;
+  for (; i < url.length; i++) {
+    const charCode = url.charCodeAt(i);
+    if (charCode === 37) {
+      const queryIndex = url.indexOf("?", i);
+      const hashIndex = url.indexOf("#", i);
+      const end = queryIndex === -1 ? hashIndex === -1 ? void 0 : hashIndex : hashIndex === -1 ? queryIndex : Math.min(queryIndex, hashIndex);
+      const path = url.slice(start, end);
+      return tryDecodeURI(path.includes("%25") ? path.replace(/%25/g, "%2525") : path);
+    } else if (charCode === 63 || charCode === 35) {
+      break;
+    }
+  }
+  return url.slice(start, i);
+};
+var getPathNoStrict = (request) => {
+  const result = getPath(request);
+  return result.length > 1 && result.at(-1) === "/" ? result.slice(0, -1) : result;
+};
+var mergePath = (base, sub, ...rest) => {
+  if (rest.length) {
+    sub = mergePath(sub, ...rest);
+  }
+  return `${base?.[0] === "/" ? "" : "/"}${base}${sub === "/" ? "" : `${base?.at(-1) === "/" ? "" : "/"}${sub?.[0] === "/" ? sub.slice(1) : sub}`}`;
+};
+var checkOptionalParameter = (path) => {
+  if (path.charCodeAt(path.length - 1) !== 63 || !path.includes(":")) {
+    return null;
+  }
+  const segments = path.split("/");
+  const results = [];
+  let basePath = "";
+  segments.forEach((segment) => {
+    if (segment !== "" && !/\:/.test(segment)) {
+      basePath += "/" + segment;
+    } else if (/\:/.test(segment)) {
+      if (/\?/.test(segment)) {
+        if (results.length === 0 && basePath === "") {
+          results.push("/");
+        } else {
+          results.push(basePath);
+        }
+        const optionalSegment = segment.replace("?", "");
+        basePath += "/" + optionalSegment;
+        results.push(basePath);
+      } else {
+        basePath += "/" + segment;
+      }
+    }
+  });
+  return results.filter((v, i, a) => a.indexOf(v) === i);
+};
+var _decodeURI = (value) => {
+  if (!/[%+]/.test(value)) {
+    return value;
+  }
+  if (value.indexOf("+") !== -1) {
+    value = value.replace(/\+/g, " ");
+  }
+  return value.indexOf("%") !== -1 ? tryDecode(value, decodeURIComponent_) : value;
+};
+var _getQueryParam = (url, key, multiple) => {
+  let encoded;
+  if (!multiple && key && !/[%+]/.test(key)) {
+    let keyIndex2 = url.indexOf("?", 8);
+    if (keyIndex2 === -1) {
+      return void 0;
+    }
+    if (!url.startsWith(key, keyIndex2 + 1)) {
+      keyIndex2 = url.indexOf(`&${key}`, keyIndex2 + 1);
+    }
+    while (keyIndex2 !== -1) {
+      const trailingKeyCode = url.charCodeAt(keyIndex2 + key.length + 1);
+      if (trailingKeyCode === 61) {
+        const valueIndex = keyIndex2 + key.length + 2;
+        const endIndex = url.indexOf("&", valueIndex);
+        return _decodeURI(url.slice(valueIndex, endIndex === -1 ? void 0 : endIndex));
+      } else if (trailingKeyCode == 38 || isNaN(trailingKeyCode)) {
+        return "";
+      }
+      keyIndex2 = url.indexOf(`&${key}`, keyIndex2 + 1);
+    }
+    encoded = /[%+]/.test(url);
+    if (!encoded) {
+      return void 0;
+    }
+  }
+  const results = {};
+  encoded ??= /[%+]/.test(url);
+  let keyIndex = url.indexOf("?", 8);
+  while (keyIndex !== -1) {
+    const nextKeyIndex = url.indexOf("&", keyIndex + 1);
+    let valueIndex = url.indexOf("=", keyIndex);
+    if (valueIndex > nextKeyIndex && nextKeyIndex !== -1) {
+      valueIndex = -1;
+    }
+    let name = url.slice(
+      keyIndex + 1,
+      valueIndex === -1 ? nextKeyIndex === -1 ? void 0 : nextKeyIndex : valueIndex
+    );
+    if (encoded) {
+      name = _decodeURI(name);
+    }
+    keyIndex = nextKeyIndex;
+    if (name === "") {
+      continue;
+    }
+    let value;
+    if (valueIndex === -1) {
+      value = "";
+    } else {
+      value = url.slice(valueIndex + 1, nextKeyIndex === -1 ? void 0 : nextKeyIndex);
+      if (encoded) {
+        value = _decodeURI(value);
+      }
+    }
+    if (multiple) {
+      if (!(results[name] && Array.isArray(results[name]))) {
+        results[name] = [];
+      }
+      ;
+      results[name].push(value);
+    } else {
+      results[name] ??= value;
+    }
+  }
+  return key ? results[key] : results;
+};
+var getQueryParam = _getQueryParam;
+var getQueryParams = (url, key) => {
+  return _getQueryParam(url, key, true);
+};
+var decodeURIComponent_ = decodeURIComponent;
+
+// node_modules/hono/dist/request.js
+var tryDecodeURIComponent = (str) => tryDecode(str, decodeURIComponent_);
+var HonoRequest = class {
+  /**
+   * `.raw` can get the raw Request object.
+   *
+   * @see {@link https://hono.dev/docs/api/request#raw}
+   *
+   * @example
+   * ```ts
+   * // For Cloudflare Workers
+   * app.post('/', async (c) => {
+   *   const metadata = c.req.raw.cf?.hostMetadata?
+   *   ...
+   * })
+   * ```
+   */
+  raw;
+  #validatedData;
+  // Short name of validatedData
+  #matchResult;
+  routeIndex = 0;
+  /**
+   * `.path` can get the pathname of the request.
+   *
+   * @see {@link https://hono.dev/docs/api/request#path}
+   *
+   * @example
+   * ```ts
+   * app.get('/about/me', (c) => {
+   *   const pathname = c.req.path // `/about/me`
+   * })
+   * ```
+   */
+  path;
+  bodyCache = {};
+  constructor(request, path = "/", matchResult = [[]]) {
+    this.raw = request;
+    this.path = path;
+    this.#matchResult = matchResult;
+    this.#validatedData = {};
+  }
+  param(key) {
+    return key ? this.#getDecodedParam(key) : this.#getAllDecodedParams();
+  }
+  #getDecodedParam(key) {
+    const paramKey = this.#matchResult[0][this.routeIndex][1][key];
+    const param = this.#getParamValue(paramKey);
+    return param && /\%/.test(param) ? tryDecodeURIComponent(param) : param;
+  }
+  #getAllDecodedParams() {
+    const decoded = {};
+    const keys = Object.keys(this.#matchResult[0][this.routeIndex][1]);
+    for (const key of keys) {
+      const value = this.#getParamValue(this.#matchResult[0][this.routeIndex][1][key]);
+      if (value !== void 0) {
+        decoded[key] = /\%/.test(value) ? tryDecodeURIComponent(value) : value;
+      }
+    }
+    return decoded;
+  }
+  #getParamValue(paramKey) {
+    return this.#matchResult[1] ? this.#matchResult[1][paramKey] : paramKey;
+  }
+  query(key) {
+    return getQueryParam(this.url, key);
+  }
+  queries(key) {
+    return getQueryParams(this.url, key);
+  }
+  header(name) {
+    if (name) {
+      return this.raw.headers.get(name) ?? void 0;
+    }
+    const headerData = {};
+    this.raw.headers.forEach((value, key) => {
+      headerData[key] = value;
+    });
+    return headerData;
+  }
+  async parseBody(options) {
+    return this.bodyCache.parsedBody ??= await parseBody(this, options);
+  }
+  #cachedBody = (key) => {
+    const { bodyCache, raw: raw2 } = this;
+    const cachedBody = bodyCache[key];
+    if (cachedBody) {
+      return cachedBody;
+    }
+    const anyCachedKey = Object.keys(bodyCache)[0];
+    if (anyCachedKey) {
+      return bodyCache[anyCachedKey].then((body) => {
+        if (anyCachedKey === "json") {
+          body = JSON.stringify(body);
+        }
+        return new Response(body)[key]();
+      });
+    }
+    return bodyCache[key] = raw2[key]();
+  };
+  /**
+   * `.json()` can parse Request body of type `application/json`
+   *
+   * @see {@link https://hono.dev/docs/api/request#json}
+   *
+   * @example
+   * ```ts
+   * app.post('/entry', async (c) => {
+   *   const body = await c.req.json()
+   * })
+   * ```
+   */
+  json() {
+    return this.#cachedBody("text").then((text) => JSON.parse(text));
+  }
+  /**
+   * `.text()` can parse Request body of type `text/plain`
+   *
+   * @see {@link https://hono.dev/docs/api/request#text}
+   *
+   * @example
+   * ```ts
+   * app.post('/entry', async (c) => {
+   *   const body = await c.req.text()
+   * })
+   * ```
+   */
+  text() {
+    return this.#cachedBody("text");
+  }
+  /**
+   * `.arrayBuffer()` parse Request body as an `ArrayBuffer`
+   *
+   * @see {@link https://hono.dev/docs/api/request#arraybuffer}
+   *
+   * @example
+   * ```ts
+   * app.post('/entry', async (c) => {
+   *   const body = await c.req.arrayBuffer()
+   * })
+   * ```
+   */
+  arrayBuffer() {
+    return this.#cachedBody("arrayBuffer");
+  }
+  /**
+   * Parses the request body as a `Blob`.
+   * @example
+   * ```ts
+   * app.post('/entry', async (c) => {
+   *   const body = await c.req.blob();
+   * });
+   * ```
+   * @see https://hono.dev/docs/api/request#blob
+   */
+  blob() {
+    return this.#cachedBody("blob");
+  }
+  /**
+   * Parses the request body as `FormData`.
+   * @example
+   * ```ts
+   * app.post('/entry', async (c) => {
+   *   const body = await c.req.formData();
+   * });
+   * ```
+   * @see https://hono.dev/docs/api/request#formdata
+   */
+  formData() {
+    return this.#cachedBody("formData");
+  }
+  /**
+   * Adds validated data to the request.
+   *
+   * @param target - The target of the validation.
+   * @param data - The validated data to add.
+   */
+  addValidatedData(target, data) {
+    this.#validatedData[target] = data;
+  }
+  valid(target) {
+    return this.#validatedData[target];
+  }
+  /**
+   * `.url()` can get the request url strings.
+   *
+   * @see {@link https://hono.dev/docs/api/request#url}
+   *
+   * @example
+   * ```ts
+   * app.get('/about/me', (c) => {
+   *   const url = c.req.url // `http://localhost:8787/about/me`
+   *   ...
+   * })
+   * ```
+   */
+  get url() {
+    return this.raw.url;
+  }
+  /**
+   * `.method()` can get the method name of the request.
+   *
+   * @see {@link https://hono.dev/docs/api/request#method}
+   *
+   * @example
+   * ```ts
+   * app.get('/about/me', (c) => {
+   *   const method = c.req.method // `GET`
+   * })
+   * ```
+   */
+  get method() {
+    return this.raw.method;
+  }
+  get [GET_MATCH_RESULT]() {
+    return this.#matchResult;
+  }
+  /**
+   * `.matchedRoutes()` can return a matched route in the handler
+   *
+   * @deprecated
+   *
+   * Use matchedRoutes helper defined in "hono/route" instead.
+   *
+   * @see {@link https://hono.dev/docs/api/request#matchedroutes}
+   *
+   * @example
+   * ```ts
+   * app.use('*', async function logger(c, next) {
+   *   await next()
+   *   c.req.matchedRoutes.forEach(({ handler, method, path }, i) => {
+   *     const name = handler.name || (handler.length < 2 ? '[handler]' : '[middleware]')
+   *     console.log(
+   *       method,
+   *       ' ',
+   *       path,
+   *       ' '.repeat(Math.max(10 - path.length, 0)),
+   *       name,
+   *       i === c.req.routeIndex ? '<- respond from here' : ''
+   *     )
+   *   })
+   * })
+   * ```
+   */
+  get matchedRoutes() {
+    return this.#matchResult[0].map(([[, route]]) => route);
+  }
+  /**
+   * `routePath()` can retrieve the path registered within the handler
+   *
+   * @deprecated
+   *
+   * Use routePath helper defined in "hono/route" instead.
+   *
+   * @see {@link https://hono.dev/docs/api/request#routepath}
+   *
+   * @example
+   * ```ts
+   * app.get('/posts/:id', (c) => {
+   *   return c.json({ path: c.req.routePath })
+   * })
+   * ```
+   */
+  get routePath() {
+    return this.#matchResult[0].map(([[, route]]) => route)[this.routeIndex].path;
+  }
+};
+
+// node_modules/hono/dist/utils/html.js
+var HtmlEscapedCallbackPhase = {
+  Stringify: 1,
+  BeforeStream: 2,
+  Stream: 3
+};
+var raw = (value, callbacks) => {
+  const escapedString = new String(value);
+  escapedString.isEscaped = true;
+  escapedString.callbacks = callbacks;
+  return escapedString;
+};
+var resolveCallback = async (str, phase, preserveCallbacks, context, buffer) => {
+  if (typeof str === "object" && !(str instanceof String)) {
+    if (!(str instanceof Promise)) {
+      str = str.toString();
+    }
+    if (str instanceof Promise) {
+      str = await str;
+    }
+  }
+  const callbacks = str.callbacks;
+  if (!callbacks?.length) {
+    return Promise.resolve(str);
+  }
+  if (buffer) {
+    buffer[0] += str;
+  } else {
+    buffer = [str];
+  }
+  const resStr = Promise.all(callbacks.map((c) => c({ phase, buffer, context }))).then(
+    (res) => Promise.all(
+      res.filter(Boolean).map((str2) => resolveCallback(str2, phase, false, context, buffer))
+    ).then(() => buffer[0])
+  );
+  if (preserveCallbacks) {
+    return raw(await resStr, callbacks);
+  } else {
+    return resStr;
+  }
+};
+
+// node_modules/hono/dist/context.js
+var TEXT_PLAIN = "text/plain; charset=UTF-8";
+var setDefaultContentType = (contentType, headers) => {
+  return {
+    "Content-Type": contentType,
+    ...headers
+  };
+};
+var createResponseInstance = (body, init) => new Response(body, init);
+var Context = class {
+  #rawRequest;
+  #req;
+  /**
+   * `.env` can get bindings (environment variables, secrets, KV namespaces, D1 database, R2 bucket etc.) in Cloudflare Workers.
+   *
+   * @see {@link https://hono.dev/docs/api/context#env}
+   *
+   * @example
+   * ```ts
+   * // Environment object for Cloudflare Workers
+   * app.get('*', async c => {
+   *   const counter = c.env.COUNTER
+   * })
+   * ```
+   */
+  env = {};
+  #var;
+  finalized = false;
+  /**
+   * `.error` can get the error object from the middleware if the Handler throws an error.
+   *
+   * @see {@link https://hono.dev/docs/api/context#error}
+   *
+   * @example
+   * ```ts
+   * app.use('*', async (c, next) => {
+   *   await next()
+   *   if (c.error) {
+   *     // do something...
+   *   }
+   * })
+   * ```
+   */
+  error;
+  #status;
+  #executionCtx;
+  #res;
+  #layout;
+  #renderer;
+  #notFoundHandler;
+  #preparedHeaders;
+  #matchResult;
+  #path;
+  /**
+   * Creates an instance of the Context class.
+   *
+   * @param req - The Request object.
+   * @param options - Optional configuration options for the context.
+   */
+  constructor(req, options) {
+    this.#rawRequest = req;
+    if (options) {
+      this.#executionCtx = options.executionCtx;
+      this.env = options.env;
+      this.#notFoundHandler = options.notFoundHandler;
+      this.#path = options.path;
+      this.#matchResult = options.matchResult;
+    }
+  }
+  /**
+   * `.req` is the instance of {@link HonoRequest}.
+   */
+  get req() {
+    this.#req ??= new HonoRequest(this.#rawRequest, this.#path, this.#matchResult);
+    return this.#req;
+  }
+  /**
+   * @see {@link https://hono.dev/docs/api/context#event}
+   * The FetchEvent associated with the current request.
+   *
+   * @throws Will throw an error if the context does not have a FetchEvent.
+   */
+  get event() {
+    if (this.#executionCtx && "respondWith" in this.#executionCtx) {
+      return this.#executionCtx;
+    } else {
+      throw Error("This context has no FetchEvent");
+    }
+  }
+  /**
+   * @see {@link https://hono.dev/docs/api/context#executionctx}
+   * The ExecutionContext associated with the current request.
+   *
+   * @throws Will throw an error if the context does not have an ExecutionContext.
+   */
+  get executionCtx() {
+    if (this.#executionCtx) {
+      return this.#executionCtx;
+    } else {
+      throw Error("This context has no ExecutionContext");
+    }
+  }
+  /**
+   * @see {@link https://hono.dev/docs/api/context#res}
+   * The Response object for the current request.
+   */
+  get res() {
+    return this.#res ||= createResponseInstance(null, {
+      headers: this.#preparedHeaders ??= new Headers()
+    });
+  }
+  /**
+   * Sets the Response object for the current request.
+   *
+   * @param _res - The Response object to set.
+   */
+  set res(_res) {
+    if (this.#res && _res) {
+      _res = createResponseInstance(_res.body, _res);
+      for (const [k, v] of this.#res.headers.entries()) {
+        if (k === "content-type") {
+          continue;
+        }
+        if (k === "set-cookie") {
+          const cookies = this.#res.headers.getSetCookie();
+          _res.headers.delete("set-cookie");
+          for (const cookie of cookies) {
+            _res.headers.append("set-cookie", cookie);
+          }
+        } else {
+          _res.headers.set(k, v);
+        }
+      }
+    }
+    this.#res = _res;
+    this.finalized = true;
+  }
+  /**
+   * `.render()` can create a response within a layout.
+   *
+   * @see {@link https://hono.dev/docs/api/context#render-setrenderer}
+   *
+   * @example
+   * ```ts
+   * app.get('/', (c) => {
+   *   return c.render('Hello!')
+   * })
+   * ```
+   */
+  render = (...args) => {
+    this.#renderer ??= (content) => this.html(content);
+    return this.#renderer(...args);
+  };
+  /**
+   * Sets the layout for the response.
+   *
+   * @param layout - The layout to set.
+   * @returns The layout function.
+   */
+  setLayout = (layout) => this.#layout = layout;
+  /**
+   * Gets the current layout for the response.
+   *
+   * @returns The current layout function.
+   */
+  getLayout = () => this.#layout;
+  /**
+   * `.setRenderer()` can set the layout in the custom middleware.
+   *
+   * @see {@link https://hono.dev/docs/api/context#render-setrenderer}
+   *
+   * @example
+   * ```tsx
+   * app.use('*', async (c, next) => {
+   *   c.setRenderer((content) => {
+   *     return c.html(
+   *       <html>
+   *         <body>
+   *           <p>{content}</p>
+   *         </body>
+   *       </html>
+   *     )
+   *   })
+   *   await next()
+   * })
+   * ```
+   */
+  setRenderer = (renderer) => {
+    this.#renderer = renderer;
+  };
+  /**
+   * `.header()` can set headers.
+   *
+   * @see {@link https://hono.dev/docs/api/context#header}
+   *
+   * @example
+   * ```ts
+   * app.get('/welcome', (c) => {
+   *   // Set headers
+   *   c.header('X-Message', 'Hello!')
+   *   c.header('Content-Type', 'text/plain')
+   *
+   *   return c.body('Thank you for coming')
+   * })
+   * ```
+   */
+  header = (name, value, options) => {
+    if (this.finalized) {
+      this.#res = createResponseInstance(this.#res.body, this.#res);
+    }
+    const headers = this.#res ? this.#res.headers : this.#preparedHeaders ??= new Headers();
+    if (value === void 0) {
+      headers.delete(name);
+    } else if (options?.append) {
+      headers.append(name, value);
+    } else {
+      headers.set(name, value);
+    }
+  };
+  status = (status) => {
+    this.#status = status;
+  };
+  /**
+   * `.set()` can set the value specified by the key.
+   *
+   * @see {@link https://hono.dev/docs/api/context#set-get}
+   *
+   * @example
+   * ```ts
+   * app.use('*', async (c, next) => {
+   *   c.set('message', 'Hono is hot!!')
+   *   await next()
+   * })
+   * ```
+   */
+  set = (key, value) => {
+    this.#var ??= /* @__PURE__ */ new Map();
+    this.#var.set(key, value);
+  };
+  /**
+   * `.get()` can use the value specified by the key.
+   *
+   * @see {@link https://hono.dev/docs/api/context#set-get}
+   *
+   * @example
+   * ```ts
+   * app.get('/', (c) => {
+   *   const message = c.get('message')
+   *   return c.text(`The message is "${message}"`)
+   * })
+   * ```
+   */
+  get = (key) => {
+    return this.#var ? this.#var.get(key) : void 0;
+  };
+  /**
+   * `.var` can access the value of a variable.
+   *
+   * @see {@link https://hono.dev/docs/api/context#var}
+   *
+   * @example
+   * ```ts
+   * const result = c.var.client.oneMethod()
+   * ```
+   */
+  // c.var.propName is a read-only
+  get var() {
+    if (!this.#var) {
+      return {};
+    }
+    return Object.fromEntries(this.#var);
+  }
+  #newResponse(data, arg, headers) {
+    const responseHeaders = this.#res ? new Headers(this.#res.headers) : this.#preparedHeaders ?? new Headers();
+    if (typeof arg === "object" && "headers" in arg) {
+      const argHeaders = arg.headers instanceof Headers ? arg.headers : new Headers(arg.headers);
+      for (const [key, value] of argHeaders) {
+        if (key.toLowerCase() === "set-cookie") {
+          responseHeaders.append(key, value);
+        } else {
+          responseHeaders.set(key, value);
+        }
+      }
+    }
+    if (headers) {
+      for (const [k, v] of Object.entries(headers)) {
+        if (typeof v === "string") {
+          responseHeaders.set(k, v);
+        } else {
+          responseHeaders.delete(k);
+          for (const v2 of v) {
+            responseHeaders.append(k, v2);
+          }
+        }
+      }
+    }
+    const status = typeof arg === "number" ? arg : arg?.status ?? this.#status;
+    return createResponseInstance(data, { status, headers: responseHeaders });
+  }
+  newResponse = (...args) => this.#newResponse(...args);
+  /**
+   * `.body()` can return the HTTP response.
+   * You can set headers with `.header()` and set HTTP status code with `.status`.
+   * This can also be set in `.text()`, `.json()` and so on.
+   *
+   * @see {@link https://hono.dev/docs/api/context#body}
+   *
+   * @example
+   * ```ts
+   * app.get('/welcome', (c) => {
+   *   // Set headers
+   *   c.header('X-Message', 'Hello!')
+   *   c.header('Content-Type', 'text/plain')
+   *   // Set HTTP status code
+   *   c.status(201)
+   *
+   *   // Return the response body
+   *   return c.body('Thank you for coming')
+   * })
+   * ```
+   */
+  body = (data, arg, headers) => this.#newResponse(data, arg, headers);
+  /**
+   * `.text()` can render text as `Content-Type:text/plain`.
+   *
+   * @see {@link https://hono.dev/docs/api/context#text}
+   *
+   * @example
+   * ```ts
+   * app.get('/say', (c) => {
+   *   return c.text('Hello!')
+   * })
+   * ```
+   */
+  text = (text, arg, headers) => {
+    return !this.#preparedHeaders && !this.#status && !arg && !headers && !this.finalized ? new Response(text) : this.#newResponse(
+      text,
+      arg,
+      setDefaultContentType(TEXT_PLAIN, headers)
+    );
+  };
+  /**
+   * `.json()` can render JSON as `Content-Type:application/json`.
+   *
+   * @see {@link https://hono.dev/docs/api/context#json}
+   *
+   * @example
+   * ```ts
+   * app.get('/api', (c) => {
+   *   return c.json({ message: 'Hello!' })
+   * })
+   * ```
+   */
+  json = (object, arg, headers) => {
+    return this.#newResponse(
+      JSON.stringify(object),
+      arg,
+      setDefaultContentType("application/json", headers)
+    );
+  };
+  html = (html, arg, headers) => {
+    const res = (html2) => this.#newResponse(html2, arg, setDefaultContentType("text/html; charset=UTF-8", headers));
+    return typeof html === "object" ? resolveCallback(html, HtmlEscapedCallbackPhase.Stringify, false, {}).then(res) : res(html);
+  };
+  /**
+   * `.redirect()` can Redirect, default status code is 302.
+   *
+   * @see {@link https://hono.dev/docs/api/context#redirect}
+   *
+   * @example
+   * ```ts
+   * app.get('/redirect', (c) => {
+   *   return c.redirect('/')
+   * })
+   * app.get('/redirect-permanently', (c) => {
+   *   return c.redirect('/', 301)
+   * })
+   * ```
+   */
+  redirect = (location, status) => {
+    const locationString = String(location);
+    this.header(
+      "Location",
+      // Multibyes should be encoded
+      // eslint-disable-next-line no-control-regex
+      !/[^\x00-\xFF]/.test(locationString) ? locationString : encodeURI(locationString)
+    );
+    return this.newResponse(null, status ?? 302);
+  };
+  /**
+   * `.notFound()` can return the Not Found Response.
+   *
+   * @see {@link https://hono.dev/docs/api/context#notfound}
+   *
+   * @example
+   * ```ts
+   * app.get('/notfound', (c) => {
+   *   return c.notFound()
+   * })
+   * ```
+   */
+  notFound = () => {
+    this.#notFoundHandler ??= () => createResponseInstance();
+    return this.#notFoundHandler(this);
+  };
+};
+
+// node_modules/hono/dist/router.js
+var METHOD_NAME_ALL = "ALL";
+var METHOD_NAME_ALL_LOWERCASE = "all";
+var METHODS = ["get", "post", "put", "delete", "options", "patch"];
+var MESSAGE_MATCHER_IS_ALREADY_BUILT = "Can not add a route since the matcher is already built.";
+var UnsupportedPathError = class extends Error {
+};
+
+// node_modules/hono/dist/utils/constants.js
+var COMPOSED_HANDLER = "__COMPOSED_HANDLER";
+
+// node_modules/hono/dist/hono-base.js
+var notFoundHandler = (c) => {
+  return c.text("404 Not Found", 404);
+};
+var errorHandler = (err, c) => {
+  if ("getResponse" in err) {
+    const res = err.getResponse();
+    return c.newResponse(res.body, res);
+  }
+  console.error(err);
+  return c.text("Internal Server Error", 500);
+};
+var Hono = class _Hono {
+  get;
+  post;
+  put;
+  delete;
+  options;
+  patch;
+  all;
+  on;
+  use;
+  /*
+    This class is like an abstract class and does not have a router.
+    To use it, inherit the class and implement router in the constructor.
+  */
+  router;
+  getPath;
+  // Cannot use `#` because it requires visibility at JavaScript runtime.
+  _basePath = "/";
+  #path = "/";
+  routes = [];
+  constructor(options = {}) {
+    const allMethods = [...METHODS, METHOD_NAME_ALL_LOWERCASE];
+    allMethods.forEach((method) => {
+      this[method] = (args1, ...args) => {
+        if (typeof args1 === "string") {
+          this.#path = args1;
+        } else {
+          this.#addRoute(method, this.#path, args1);
+        }
+        args.forEach((handler) => {
+          this.#addRoute(method, this.#path, handler);
+        });
+        return this;
+      };
+    });
+    this.on = (method, path, ...handlers) => {
+      for (const p of [path].flat()) {
+        this.#path = p;
+        for (const m of [method].flat()) {
+          handlers.map((handler) => {
+            this.#addRoute(m.toUpperCase(), this.#path, handler);
+          });
+        }
+      }
+      return this;
+    };
+    this.use = (arg1, ...handlers) => {
+      if (typeof arg1 === "string") {
+        this.#path = arg1;
+      } else {
+        this.#path = "*";
+        handlers.unshift(arg1);
+      }
+      handlers.forEach((handler) => {
+        this.#addRoute(METHOD_NAME_ALL, this.#path, handler);
+      });
+      return this;
+    };
+    const { strict, ...optionsWithoutStrict } = options;
+    Object.assign(this, optionsWithoutStrict);
+    this.getPath = strict ?? true ? options.getPath ?? getPath : getPathNoStrict;
+  }
+  #clone() {
+    const clone = new _Hono({
+      router: this.router,
+      getPath: this.getPath
+    });
+    clone.errorHandler = this.errorHandler;
+    clone.#notFoundHandler = this.#notFoundHandler;
+    clone.routes = this.routes;
+    return clone;
+  }
+  #notFoundHandler = notFoundHandler;
+  // Cannot use `#` because it requires visibility at JavaScript runtime.
+  errorHandler = errorHandler;
+  /**
+   * `.route()` allows grouping other Hono instance in routes.
+   *
+   * @see {@link https://hono.dev/docs/api/routing#grouping}
+   *
+   * @param {string} path - base Path
+   * @param {Hono} app - other Hono instance
+   * @returns {Hono} routed Hono instance
+   *
+   * @example
+   * ```ts
+   * const app = new Hono()
+   * const app2 = new Hono()
+   *
+   * app2.get("/user", (c) => c.text("user"))
+   * app.route("/api", app2) // GET /api/user
+   * ```
+   */
+  route(path, app) {
+    const subApp = this.basePath(path);
+    app.routes.map((r) => {
+      let handler;
+      if (app.errorHandler === errorHandler) {
+        handler = r.handler;
+      } else {
+        handler = async (c, next) => (await compose([], app.errorHandler)(c, () => r.handler(c, next))).res;
+        handler[COMPOSED_HANDLER] = r.handler;
+      }
+      subApp.#addRoute(r.method, r.path, handler);
+    });
+    return this;
+  }
+  /**
+   * `.basePath()` allows base paths to be specified.
+   *
+   * @see {@link https://hono.dev/docs/api/routing#base-path}
+   *
+   * @param {string} path - base Path
+   * @returns {Hono} changed Hono instance
+   *
+   * @example
+   * ```ts
+   * const api = new Hono().basePath('/api')
+   * ```
+   */
+  basePath(path) {
+    const subApp = this.#clone();
+    subApp._basePath = mergePath(this._basePath, path);
+    return subApp;
+  }
+  /**
+   * `.onError()` handles an error and returns a customized Response.
+   *
+   * @see {@link https://hono.dev/docs/api/hono#error-handling}
+   *
+   * @param {ErrorHandler} handler - request Handler for error
+   * @returns {Hono} changed Hono instance
+   *
+   * @example
+   * ```ts
+   * app.onError((err, c) => {
+   *   console.error(`${err}`)
+   *   return c.text('Custom Error Message', 500)
+   * })
+   * ```
+   */
+  onError = (handler) => {
+    this.errorHandler = handler;
+    return this;
+  };
+  /**
+   * `.notFound()` allows you to customize a Not Found Response.
+   *
+   * @see {@link https://hono.dev/docs/api/hono#not-found}
+   *
+   * @param {NotFoundHandler} handler - request handler for not-found
+   * @returns {Hono} changed Hono instance
+   *
+   * @example
+   * ```ts
+   * app.notFound((c) => {
+   *   return c.text('Custom 404 Message', 404)
+   * })
+   * ```
+   */
+  notFound = (handler) => {
+    this.#notFoundHandler = handler;
+    return this;
+  };
+  /**
+   * `.mount()` allows you to mount applications built with other frameworks into your Hono application.
+   *
+   * @see {@link https://hono.dev/docs/api/hono#mount}
+   *
+   * @param {string} path - base Path
+   * @param {Function} applicationHandler - other Request Handler
+   * @param {MountOptions} [options] - options of `.mount()`
+   * @returns {Hono} mounted Hono instance
+   *
+   * @example
+   * ```ts
+   * import { Router as IttyRouter } from 'itty-router'
+   * import { Hono } from 'hono'
+   * // Create itty-router application
+   * const ittyRouter = IttyRouter()
+   * // GET /itty-router/hello
+   * ittyRouter.get('/hello', () => new Response('Hello from itty-router'))
+   *
+   * const app = new Hono()
+   * app.mount('/itty-router', ittyRouter.handle)
+   * ```
+   *
+   * @example
+   * ```ts
+   * const app = new Hono()
+   * // Send the request to another application without modification.
+   * app.mount('/app', anotherApp, {
+   *   replaceRequest: (req) => req,
+   * })
+   * ```
+   */
+  mount(path, applicationHandler, options) {
+    let replaceRequest;
+    let optionHandler;
+    if (options) {
+      if (typeof options === "function") {
+        optionHandler = options;
+      } else {
+        optionHandler = options.optionHandler;
+        if (options.replaceRequest === false) {
+          replaceRequest = (request) => request;
+        } else {
+          replaceRequest = options.replaceRequest;
+        }
+      }
+    }
+    const getOptions = optionHandler ? (c) => {
+      const options2 = optionHandler(c);
+      return Array.isArray(options2) ? options2 : [options2];
+    } : (c) => {
+      let executionContext = void 0;
+      try {
+        executionContext = c.executionCtx;
+      } catch {
+      }
+      return [c.env, executionContext];
+    };
+    replaceRequest ||= (() => {
+      const mergedPath = mergePath(this._basePath, path);
+      const pathPrefixLength = mergedPath === "/" ? 0 : mergedPath.length;
+      return (request) => {
+        const url = new URL(request.url);
+        url.pathname = url.pathname.slice(pathPrefixLength) || "/";
+        return new Request(url, request);
+      };
+    })();
+    const handler = async (c, next) => {
+      const res = await applicationHandler(replaceRequest(c.req.raw), ...getOptions(c));
+      if (res) {
+        return res;
+      }
+      await next();
+    };
+    this.#addRoute(METHOD_NAME_ALL, mergePath(path, "*"), handler);
+    return this;
+  }
+  #addRoute(method, path, handler) {
+    method = method.toUpperCase();
+    path = mergePath(this._basePath, path);
+    const r = { basePath: this._basePath, path, method, handler };
+    this.router.add(method, path, [handler, r]);
+    this.routes.push(r);
+  }
+  #handleError(err, c) {
+    if (err instanceof Error) {
+      return this.errorHandler(err, c);
+    }
+    throw err;
+  }
+  #dispatch(request, executionCtx, env, method) {
+    if (method === "HEAD") {
+      return (async () => new Response(null, await this.#dispatch(request, executionCtx, env, "GET")))();
+    }
+    const path = this.getPath(request, { env });
+    const matchResult = this.router.match(method, path);
+    const c = new Context(request, {
+      path,
+      matchResult,
+      env,
+      executionCtx,
+      notFoundHandler: this.#notFoundHandler
+    });
+    if (matchResult[0].length === 1) {
+      let res;
+      try {
+        res = matchResult[0][0][0][0](c, async () => {
+          c.res = await this.#notFoundHandler(c);
+        });
+      } catch (err) {
+        return this.#handleError(err, c);
+      }
+      return res instanceof Promise ? res.then(
+        (resolved) => resolved || (c.finalized ? c.res : this.#notFoundHandler(c))
+      ).catch((err) => this.#handleError(err, c)) : res ?? this.#notFoundHandler(c);
+    }
+    const composed = compose(matchResult[0], this.errorHandler, this.#notFoundHandler);
+    return (async () => {
+      try {
+        const context = await composed(c);
+        if (!context.finalized) {
+          throw new Error(
+            "Context is not finalized. Did you forget to return a Response object or `await next()`?"
+          );
+        }
+        return context.res;
+      } catch (err) {
+        return this.#handleError(err, c);
+      }
+    })();
+  }
+  /**
+   * `.fetch()` will be entry point of your app.
+   *
+   * @see {@link https://hono.dev/docs/api/hono#fetch}
+   *
+   * @param {Request} request - request Object of request
+   * @param {Env} Env - env Object
+   * @param {ExecutionContext} - context of execution
+   * @returns {Response | Promise<Response>} response of request
+   *
+   */
+  fetch = (request, ...rest) => {
+    return this.#dispatch(request, rest[1], rest[0], request.method);
+  };
+  /**
+   * `.request()` is a useful method for testing.
+   * You can pass a URL or pathname to send a GET request.
+   * app will return a Response object.
+   * ```ts
+   * test('GET /hello is ok', async () => {
+   *   const res = await app.request('/hello')
+   *   expect(res.status).toBe(200)
+   * })
+   * ```
+   * @see https://hono.dev/docs/api/hono#request
+   */
+  request = (input, requestInit, Env, executionCtx) => {
+    if (input instanceof Request) {
+      return this.fetch(requestInit ? new Request(input, requestInit) : input, Env, executionCtx);
+    }
+    input = input.toString();
+    return this.fetch(
+      new Request(
+        /^https?:\/\//.test(input) ? input : `http://localhost${mergePath("/", input)}`,
+        requestInit
+      ),
+      Env,
+      executionCtx
+    );
+  };
+  /**
+   * `.fire()` automatically adds a global fetch event listener.
+   * This can be useful for environments that adhere to the Service Worker API, such as non-ES module Cloudflare Workers.
+   * @deprecated
+   * Use `fire` from `hono/service-worker` instead.
+   * ```ts
+   * import { Hono } from 'hono'
+   * import { fire } from 'hono/service-worker'
+   *
+   * const app = new Hono()
+   * // ...
+   * fire(app)
+   * ```
+   * @see https://hono.dev/docs/api/hono#fire
+   * @see https://developer.mozilla.org/en-US/docs/Web/API/Service_Worker_API
+   * @see https://developers.cloudflare.com/workers/reference/migrate-to-module-workers/
+   */
+  fire = () => {
+    addEventListener("fetch", (event) => {
+      event.respondWith(this.#dispatch(event.request, event, void 0, event.request.method));
+    });
+  };
+};
+
+// node_modules/hono/dist/router/reg-exp-router/matcher.js
+var emptyParam = [];
+function match(method, path) {
+  const matchers = this.buildAllMatchers();
+  const match2 = ((method2, path2) => {
+    const matcher = matchers[method2] || matchers[METHOD_NAME_ALL];
+    const staticMatch = matcher[2][path2];
+    if (staticMatch) {
+      return staticMatch;
+    }
+    const match3 = path2.match(matcher[0]);
+    if (!match3) {
+      return [[], emptyParam];
+    }
+    const index = match3.indexOf("", 1);
+    return [matcher[1][index], match3];
+  });
+  this.match = match2;
+  return match2(method, path);
+}
+
+// node_modules/hono/dist/router/reg-exp-router/node.js
+var LABEL_REG_EXP_STR = "[^/]+";
+var ONLY_WILDCARD_REG_EXP_STR = ".*";
+var TAIL_WILDCARD_REG_EXP_STR = "(?:|/.*)";
+var PATH_ERROR = /* @__PURE__ */ Symbol();
+var regExpMetaChars = new Set(".\\+*[^]$()");
+function compareKey(a, b) {
+  if (a.length === 1) {
+    return b.length === 1 ? a < b ? -1 : 1 : -1;
+  }
+  if (b.length === 1) {
+    return 1;
+  }
+  if (a === ONLY_WILDCARD_REG_EXP_STR || a === TAIL_WILDCARD_REG_EXP_STR) {
+    return 1;
+  } else if (b === ONLY_WILDCARD_REG_EXP_STR || b === TAIL_WILDCARD_REG_EXP_STR) {
+    return -1;
+  }
+  if (a === LABEL_REG_EXP_STR) {
+    return 1;
+  } else if (b === LABEL_REG_EXP_STR) {
+    return -1;
+  }
+  return a.length === b.length ? a < b ? -1 : 1 : b.length - a.length;
+}
+var Node = class _Node {
+  #index;
+  #varIndex;
+  #children = /* @__PURE__ */ Object.create(null);
+  insert(tokens, index, paramMap, context, pathErrorCheckOnly) {
+    if (tokens.length === 0) {
+      if (this.#index !== void 0) {
+        throw PATH_ERROR;
+      }
+      if (pathErrorCheckOnly) {
+        return;
+      }
+      this.#index = index;
+      return;
+    }
+    const [token, ...restTokens] = tokens;
+    const pattern = token === "*" ? restTokens.length === 0 ? ["", "", ONLY_WILDCARD_REG_EXP_STR] : ["", "", LABEL_REG_EXP_STR] : token === "/*" ? ["", "", TAIL_WILDCARD_REG_EXP_STR] : token.match(/^\:([^\{\}]+)(?:\{(.+)\})?$/);
+    let node;
+    if (pattern) {
+      const name = pattern[1];
+      let regexpStr = pattern[2] || LABEL_REG_EXP_STR;
+      if (name && pattern[2]) {
+        if (regexpStr === ".*") {
+          throw PATH_ERROR;
+        }
+        regexpStr = regexpStr.replace(/^\((?!\?:)(?=[^)]+\)$)/, "(?:");
+        if (/\((?!\?:)/.test(regexpStr)) {
+          throw PATH_ERROR;
+        }
+      }
+      node = this.#children[regexpStr];
+      if (!node) {
+        if (Object.keys(this.#children).some(
+          (k) => k !== ONLY_WILDCARD_REG_EXP_STR && k !== TAIL_WILDCARD_REG_EXP_STR
+        )) {
+          throw PATH_ERROR;
+        }
+        if (pathErrorCheckOnly) {
+          return;
+        }
+        node = this.#children[regexpStr] = new _Node();
+        if (name !== "") {
+          node.#varIndex = context.varIndex++;
+        }
+      }
+      if (!pathErrorCheckOnly && name !== "") {
+        paramMap.push([name, node.#varIndex]);
+      }
+    } else {
+      node = this.#children[token];
+      if (!node) {
+        if (Object.keys(this.#children).some(
+          (k) => k.length > 1 && k !== ONLY_WILDCARD_REG_EXP_STR && k !== TAIL_WILDCARD_REG_EXP_STR
+        )) {
+          throw PATH_ERROR;
+        }
+        if (pathErrorCheckOnly) {
+          return;
+        }
+        node = this.#children[token] = new _Node();
+      }
+    }
+    node.insert(restTokens, index, paramMap, context, pathErrorCheckOnly);
+  }
+  buildRegExpStr() {
+    const childKeys = Object.keys(this.#children).sort(compareKey);
+    const strList = childKeys.map((k) => {
+      const c = this.#children[k];
+      return (typeof c.#varIndex === "number" ? `(${k})@${c.#varIndex}` : regExpMetaChars.has(k) ? `\\${k}` : k) + c.buildRegExpStr();
+    });
+    if (typeof this.#index === "number") {
+      strList.unshift(`#${this.#index}`);
+    }
+    if (strList.length === 0) {
+      return "";
+    }
+    if (strList.length === 1) {
+      return strList[0];
+    }
+    return "(?:" + strList.join("|") + ")";
+  }
+};
+
+// node_modules/hono/dist/router/reg-exp-router/trie.js
+var Trie = class {
+  #context = { varIndex: 0 };
+  #root = new Node();
+  insert(path, index, pathErrorCheckOnly) {
+    const paramAssoc = [];
+    const groups = [];
+    for (let i = 0; ; ) {
+      let replaced = false;
+      path = path.replace(/\{[^}]+\}/g, (m) => {
+        const mark = `@\\${i}`;
+        groups[i] = [mark, m];
+        i++;
+        replaced = true;
+        return mark;
+      });
+      if (!replaced) {
+        break;
+      }
+    }
+    const tokens = path.match(/(?::[^\/]+)|(?:\/\*$)|./g) || [];
+    for (let i = groups.length - 1; i >= 0; i--) {
+      const [mark] = groups[i];
+      for (let j = tokens.length - 1; j >= 0; j--) {
+        if (tokens[j].indexOf(mark) !== -1) {
+          tokens[j] = tokens[j].replace(mark, groups[i][1]);
+          break;
+        }
+      }
+    }
+    this.#root.insert(tokens, index, paramAssoc, this.#context, pathErrorCheckOnly);
+    return paramAssoc;
+  }
+  buildRegExp() {
+    let regexp = this.#root.buildRegExpStr();
+    if (regexp === "") {
+      return [/^$/, [], []];
+    }
+    let captureIndex = 0;
+    const indexReplacementMap = [];
+    const paramReplacementMap = [];
+    regexp = regexp.replace(/#(\d+)|@(\d+)|\.\*\$/g, (_, handlerIndex, paramIndex) => {
+      if (handlerIndex !== void 0) {
+        indexReplacementMap[++captureIndex] = Number(handlerIndex);
+        return "$()";
+      }
+      if (paramIndex !== void 0) {
+        paramReplacementMap[Number(paramIndex)] = ++captureIndex;
+        return "";
+      }
+      return "";
+    });
+    return [new RegExp(`^${regexp}`), indexReplacementMap, paramReplacementMap];
+  }
+};
+
+// node_modules/hono/dist/router/reg-exp-router/router.js
+var nullMatcher = [/^$/, [], /* @__PURE__ */ Object.create(null)];
+var wildcardRegExpCache = /* @__PURE__ */ Object.create(null);
+function buildWildcardRegExp(path) {
+  return wildcardRegExpCache[path] ??= new RegExp(
+    path === "*" ? "" : `^${path.replace(
+      /\/\*$|([.\\+*[^\]$()])/g,
+      (_, metaChar) => metaChar ? `\\${metaChar}` : "(?:|/.*)"
+    )}$`
+  );
+}
+function clearWildcardRegExpCache() {
+  wildcardRegExpCache = /* @__PURE__ */ Object.create(null);
+}
+function buildMatcherFromPreprocessedRoutes(routes) {
+  const trie = new Trie();
+  const handlerData = [];
+  if (routes.length === 0) {
+    return nullMatcher;
+  }
+  const routesWithStaticPathFlag = routes.map(
+    (route) => [!/\*|\/:/.test(route[0]), ...route]
+  ).sort(
+    ([isStaticA, pathA], [isStaticB, pathB]) => isStaticA ? 1 : isStaticB ? -1 : pathA.length - pathB.length
+  );
+  const staticMap = /* @__PURE__ */ Object.create(null);
+  for (let i = 0, j = -1, len = routesWithStaticPathFlag.length; i < len; i++) {
+    const [pathErrorCheckOnly, path, handlers] = routesWithStaticPathFlag[i];
+    if (pathErrorCheckOnly) {
+      staticMap[path] = [handlers.map(([h]) => [h, /* @__PURE__ */ Object.create(null)]), emptyParam];
+    } else {
+      j++;
+    }
+    let paramAssoc;
+    try {
+      paramAssoc = trie.insert(path, j, pathErrorCheckOnly);
+    } catch (e) {
+      throw e === PATH_ERROR ? new UnsupportedPathError(path) : e;
+    }
+    if (pathErrorCheckOnly) {
+      continue;
+    }
+    handlerData[j] = handlers.map(([h, paramCount]) => {
+      const paramIndexMap = /* @__PURE__ */ Object.create(null);
+      paramCount -= 1;
+      for (; paramCount >= 0; paramCount--) {
+        const [key, value] = paramAssoc[paramCount];
+        paramIndexMap[key] = value;
+      }
+      return [h, paramIndexMap];
+    });
+  }
+  const [regexp, indexReplacementMap, paramReplacementMap] = trie.buildRegExp();
+  for (let i = 0, len = handlerData.length; i < len; i++) {
+    for (let j = 0, len2 = handlerData[i].length; j < len2; j++) {
+      const map = handlerData[i][j]?.[1];
+      if (!map) {
+        continue;
+      }
+      const keys = Object.keys(map);
+      for (let k = 0, len3 = keys.length; k < len3; k++) {
+        map[keys[k]] = paramReplacementMap[map[keys[k]]];
+      }
+    }
+  }
+  const handlerMap = [];
+  for (const i in indexReplacementMap) {
+    handlerMap[i] = handlerData[indexReplacementMap[i]];
+  }
+  return [regexp, handlerMap, staticMap];
+}
+function findMiddleware(middleware, path) {
+  if (!middleware) {
+    return void 0;
+  }
+  for (const k of Object.keys(middleware).sort((a, b) => b.length - a.length)) {
+    if (buildWildcardRegExp(k).test(path)) {
+      return [...middleware[k]];
+    }
+  }
+  return void 0;
+}
+var RegExpRouter = class {
+  name = "RegExpRouter";
+  #middleware;
+  #routes;
+  constructor() {
+    this.#middleware = { [METHOD_NAME_ALL]: /* @__PURE__ */ Object.create(null) };
+    this.#routes = { [METHOD_NAME_ALL]: /* @__PURE__ */ Object.create(null) };
+  }
+  add(method, path, handler) {
+    const middleware = this.#middleware;
+    const routes = this.#routes;
+    if (!middleware || !routes) {
+      throw new Error(MESSAGE_MATCHER_IS_ALREADY_BUILT);
+    }
+    if (!middleware[method]) {
+      ;
+      [middleware, routes].forEach((handlerMap) => {
+        handlerMap[method] = /* @__PURE__ */ Object.create(null);
+        Object.keys(handlerMap[METHOD_NAME_ALL]).forEach((p) => {
+          handlerMap[method][p] = [...handlerMap[METHOD_NAME_ALL][p]];
+        });
+      });
+    }
+    if (path === "/*") {
+      path = "*";
+    }
+    const paramCount = (path.match(/\/:/g) || []).length;
+    if (/\*$/.test(path)) {
+      const re = buildWildcardRegExp(path);
+      if (method === METHOD_NAME_ALL) {
+        Object.keys(middleware).forEach((m) => {
+          middleware[m][path] ||= findMiddleware(middleware[m], path) || findMiddleware(middleware[METHOD_NAME_ALL], path) || [];
+        });
+      } else {
+        middleware[method][path] ||= findMiddleware(middleware[method], path) || findMiddleware(middleware[METHOD_NAME_ALL], path) || [];
+      }
+      Object.keys(middleware).forEach((m) => {
+        if (method === METHOD_NAME_ALL || method === m) {
+          Object.keys(middleware[m]).forEach((p) => {
+            re.test(p) && middleware[m][p].push([handler, paramCount]);
+          });
+        }
+      });
+      Object.keys(routes).forEach((m) => {
+        if (method === METHOD_NAME_ALL || method === m) {
+          Object.keys(routes[m]).forEach(
+            (p) => re.test(p) && routes[m][p].push([handler, paramCount])
+          );
+        }
+      });
+      return;
+    }
+    const paths = checkOptionalParameter(path) || [path];
+    for (let i = 0, len = paths.length; i < len; i++) {
+      const path2 = paths[i];
+      Object.keys(routes).forEach((m) => {
+        if (method === METHOD_NAME_ALL || method === m) {
+          routes[m][path2] ||= [
+            ...findMiddleware(middleware[m], path2) || findMiddleware(middleware[METHOD_NAME_ALL], path2) || []
+          ];
+          routes[m][path2].push([handler, paramCount - len + i + 1]);
+        }
+      });
+    }
+  }
+  match = match;
+  buildAllMatchers() {
+    const matchers = /* @__PURE__ */ Object.create(null);
+    Object.keys(this.#routes).concat(Object.keys(this.#middleware)).forEach((method) => {
+      matchers[method] ||= this.#buildMatcher(method);
+    });
+    this.#middleware = this.#routes = void 0;
+    clearWildcardRegExpCache();
+    return matchers;
+  }
+  #buildMatcher(method) {
+    const routes = [];
+    let hasOwnRoute = method === METHOD_NAME_ALL;
+    [this.#middleware, this.#routes].forEach((r) => {
+      const ownRoute = r[method] ? Object.keys(r[method]).map((path) => [path, r[method][path]]) : [];
+      if (ownRoute.length !== 0) {
+        hasOwnRoute ||= true;
+        routes.push(...ownRoute);
+      } else if (method !== METHOD_NAME_ALL) {
+        routes.push(
+          ...Object.keys(r[METHOD_NAME_ALL]).map((path) => [path, r[METHOD_NAME_ALL][path]])
+        );
+      }
+    });
+    if (!hasOwnRoute) {
+      return null;
+    } else {
+      return buildMatcherFromPreprocessedRoutes(routes);
+    }
+  }
+};
+
+// node_modules/hono/dist/router/smart-router/router.js
+var SmartRouter = class {
+  name = "SmartRouter";
+  #routers = [];
+  #routes = [];
+  constructor(init) {
+    this.#routers = init.routers;
+  }
+  add(method, path, handler) {
+    if (!this.#routes) {
+      throw new Error(MESSAGE_MATCHER_IS_ALREADY_BUILT);
+    }
+    this.#routes.push([method, path, handler]);
+  }
+  match(method, path) {
+    if (!this.#routes) {
+      throw new Error("Fatal error");
+    }
+    const routers = this.#routers;
+    const routes = this.#routes;
+    const len = routers.length;
+    let i = 0;
+    let res;
+    for (; i < len; i++) {
+      const router = routers[i];
+      try {
+        for (let i2 = 0, len2 = routes.length; i2 < len2; i2++) {
+          router.add(...routes[i2]);
+        }
+        res = router.match(method, path);
+      } catch (e) {
+        if (e instanceof UnsupportedPathError) {
+          continue;
+        }
+        throw e;
+      }
+      this.match = router.match.bind(router);
+      this.#routers = [router];
+      this.#routes = void 0;
+      break;
+    }
+    if (i === len) {
+      throw new Error("Fatal error");
+    }
+    this.name = `SmartRouter + ${this.activeRouter.name}`;
+    return res;
+  }
+  get activeRouter() {
+    if (this.#routes || this.#routers.length !== 1) {
+      throw new Error("No active router has been determined yet.");
+    }
+    return this.#routers[0];
+  }
+};
+
+// node_modules/hono/dist/router/trie-router/node.js
+var emptyParams = /* @__PURE__ */ Object.create(null);
+var hasChildren = (children) => {
+  for (const _ in children) {
+    return true;
+  }
+  return false;
+};
+var Node2 = class _Node2 {
+  #methods;
+  #children;
+  #patterns;
+  #order = 0;
+  #params = emptyParams;
+  constructor(method, handler, children) {
+    this.#children = children || /* @__PURE__ */ Object.create(null);
+    this.#methods = [];
+    if (method && handler) {
+      const m = /* @__PURE__ */ Object.create(null);
+      m[method] = { handler, possibleKeys: [], score: 0 };
+      this.#methods = [m];
+    }
+    this.#patterns = [];
+  }
+  insert(method, path, handler) {
+    this.#order = ++this.#order;
+    let curNode = this;
+    const parts = splitRoutingPath(path);
+    const possibleKeys = [];
+    for (let i = 0, len = parts.length; i < len; i++) {
+      const p = parts[i];
+      const nextP = parts[i + 1];
+      const pattern = getPattern(p, nextP);
+      const key = Array.isArray(pattern) ? pattern[0] : p;
+      if (key in curNode.#children) {
+        curNode = curNode.#children[key];
+        if (pattern) {
+          possibleKeys.push(pattern[1]);
+        }
+        continue;
+      }
+      curNode.#children[key] = new _Node2();
+      if (pattern) {
+        curNode.#patterns.push(pattern);
+        possibleKeys.push(pattern[1]);
+      }
+      curNode = curNode.#children[key];
+    }
+    curNode.#methods.push({
+      [method]: {
+        handler,
+        possibleKeys: possibleKeys.filter((v, i, a) => a.indexOf(v) === i),
+        score: this.#order
+      }
+    });
+    return curNode;
+  }
+  #pushHandlerSets(handlerSets, node, method, nodeParams, params) {
+    for (let i = 0, len = node.#methods.length; i < len; i++) {
+      const m = node.#methods[i];
+      const handlerSet = m[method] || m[METHOD_NAME_ALL];
+      const processedSet = {};
+      if (handlerSet !== void 0) {
+        handlerSet.params = /* @__PURE__ */ Object.create(null);
+        handlerSets.push(handlerSet);
+        if (nodeParams !== emptyParams || params && params !== emptyParams) {
+          for (let i2 = 0, len2 = handlerSet.possibleKeys.length; i2 < len2; i2++) {
+            const key = handlerSet.possibleKeys[i2];
+            const processed = processedSet[handlerSet.score];
+            handlerSet.params[key] = params?.[key] && !processed ? params[key] : nodeParams[key] ?? params?.[key];
+            processedSet[handlerSet.score] = true;
+          }
+        }
+      }
+    }
+  }
+  search(method, path) {
+    const handlerSets = [];
+    this.#params = emptyParams;
+    const curNode = this;
+    let curNodes = [curNode];
+    const parts = splitPath(path);
+    const curNodesQueue = [];
+    const len = parts.length;
+    let partOffsets = null;
+    for (let i = 0; i < len; i++) {
+      const part = parts[i];
+      const isLast = i === len - 1;
+      const tempNodes = [];
+      for (let j = 0, len2 = curNodes.length; j < len2; j++) {
+        const node = curNodes[j];
+        const nextNode = node.#children[part];
+        if (nextNode) {
+          nextNode.#params = node.#params;
+          if (isLast) {
+            if (nextNode.#children["*"]) {
+              this.#pushHandlerSets(handlerSets, nextNode.#children["*"], method, node.#params);
+            }
+            this.#pushHandlerSets(handlerSets, nextNode, method, node.#params);
+          } else {
+            tempNodes.push(nextNode);
+          }
+        }
+        for (let k = 0, len3 = node.#patterns.length; k < len3; k++) {
+          const pattern = node.#patterns[k];
+          const params = node.#params === emptyParams ? {} : { ...node.#params };
+          if (pattern === "*") {
+            const astNode = node.#children["*"];
+            if (astNode) {
+              this.#pushHandlerSets(handlerSets, astNode, method, node.#params);
+              astNode.#params = params;
+              tempNodes.push(astNode);
+            }
+            continue;
+          }
+          const [key, name, matcher] = pattern;
+          if (!part && !(matcher instanceof RegExp)) {
+            continue;
+          }
+          const child = node.#children[key];
+          if (matcher instanceof RegExp) {
+            if (partOffsets === null) {
+              partOffsets = new Array(len);
+              let offset = path[0] === "/" ? 1 : 0;
+              for (let p = 0; p < len; p++) {
+                partOffsets[p] = offset;
+                offset += parts[p].length + 1;
+              }
+            }
+            const restPathString = path.substring(partOffsets[i]);
+            const m = matcher.exec(restPathString);
+            if (m) {
+              params[name] = m[0];
+              this.#pushHandlerSets(handlerSets, child, method, node.#params, params);
+              if (hasChildren(child.#children)) {
+                child.#params = params;
+                const componentCount = m[0].match(/\//)?.length ?? 0;
+                const targetCurNodes = curNodesQueue[componentCount] ||= [];
+                targetCurNodes.push(child);
+              }
+              continue;
+            }
+          }
+          if (matcher === true || matcher.test(part)) {
+            params[name] = part;
+            if (isLast) {
+              this.#pushHandlerSets(handlerSets, child, method, params, node.#params);
+              if (child.#children["*"]) {
+                this.#pushHandlerSets(
+                  handlerSets,
+                  child.#children["*"],
+                  method,
+                  params,
+                  node.#params
+                );
+              }
+            } else {
+              child.#params = params;
+              tempNodes.push(child);
+            }
+          }
+        }
+      }
+      const shifted = curNodesQueue.shift();
+      curNodes = shifted ? tempNodes.concat(shifted) : tempNodes;
+    }
+    if (handlerSets.length > 1) {
+      handlerSets.sort((a, b) => {
+        return a.score - b.score;
+      });
+    }
+    return [handlerSets.map(({ handler, params }) => [handler, params])];
+  }
+};
+
+// node_modules/hono/dist/router/trie-router/router.js
+var TrieRouter = class {
+  name = "TrieRouter";
+  #node;
+  constructor() {
+    this.#node = new Node2();
+  }
+  add(method, path, handler) {
+    const results = checkOptionalParameter(path);
+    if (results) {
+      for (let i = 0, len = results.length; i < len; i++) {
+        this.#node.insert(method, results[i], handler);
+      }
+      return;
+    }
+    this.#node.insert(method, path, handler);
+  }
+  match(method, path) {
+    return this.#node.search(method, path);
+  }
+};
+
+// node_modules/hono/dist/hono.js
+var Hono2 = class extends Hono {
+  /**
+   * Creates an instance of the Hono class.
+   *
+   * @param options - Optional configuration options for the Hono instance.
+   */
+  constructor(options = {}) {
+    super(options);
+    this.router = options.router ?? new SmartRouter({
+      routers: [new RegExpRouter(), new TrieRouter()]
+    });
+  }
+};
+
+// node_modules/@hono/node-server/dist/index.mjs
+import { createServer as createServerHTTP } from "http";
+import { Http2ServerRequest as Http2ServerRequest2 } from "http2";
+import { Http2ServerRequest } from "http2";
+import { Readable } from "stream";
+import crypto from "crypto";
+var RequestError = class extends Error {
+  constructor(message, options) {
+    super(message, options);
+    this.name = "RequestError";
+  }
+};
+var toRequestError = (e) => {
+  if (e instanceof RequestError) {
+    return e;
+  }
+  return new RequestError(e.message, { cause: e });
+};
+var GlobalRequest = global.Request;
+var Request2 = class extends GlobalRequest {
+  constructor(input, options) {
+    if (typeof input === "object" && getRequestCache in input) {
+      input = input[getRequestCache]();
+    }
+    if (typeof options?.body?.getReader !== "undefined") {
+      ;
+      options.duplex ??= "half";
+    }
+    super(input, options);
+  }
+};
+var newHeadersFromIncoming = (incoming) => {
+  const headerRecord = [];
+  const rawHeaders = incoming.rawHeaders;
+  for (let i = 0; i < rawHeaders.length; i += 2) {
+    const { [i]: key, [i + 1]: value } = rawHeaders;
+    if (key.charCodeAt(0) !== /*:*/
+    58) {
+      headerRecord.push([key, value]);
+    }
+  }
+  return new Headers(headerRecord);
+};
+var wrapBodyStream = /* @__PURE__ */ Symbol("wrapBodyStream");
+var newRequestFromIncoming = (method, url, headers, incoming, abortController) => {
+  const init = {
+    method,
+    headers,
+    signal: abortController.signal
+  };
+  if (method === "TRACE") {
+    init.method = "GET";
+    const req = new Request2(url, init);
+    Object.defineProperty(req, "method", {
+      get() {
+        return "TRACE";
+      }
+    });
+    return req;
+  }
+  if (!(method === "GET" || method === "HEAD")) {
+    if ("rawBody" in incoming && incoming.rawBody instanceof Buffer) {
+      init.body = new ReadableStream({
+        start(controller) {
+          controller.enqueue(incoming.rawBody);
+          controller.close();
+        }
+      });
+    } else if (incoming[wrapBodyStream]) {
+      let reader;
+      init.body = new ReadableStream({
+        async pull(controller) {
+          try {
+            reader ||= Readable.toWeb(incoming).getReader();
+            const { done, value } = await reader.read();
+            if (done) {
+              controller.close();
+            } else {
+              controller.enqueue(value);
+            }
+          } catch (error) {
+            controller.error(error);
+          }
+        }
+      });
+    } else {
+      init.body = Readable.toWeb(incoming);
+    }
+  }
+  return new Request2(url, init);
+};
+var getRequestCache = /* @__PURE__ */ Symbol("getRequestCache");
+var requestCache = /* @__PURE__ */ Symbol("requestCache");
+var incomingKey = /* @__PURE__ */ Symbol("incomingKey");
+var urlKey = /* @__PURE__ */ Symbol("urlKey");
+var headersKey = /* @__PURE__ */ Symbol("headersKey");
+var abortControllerKey = /* @__PURE__ */ Symbol("abortControllerKey");
+var getAbortController = /* @__PURE__ */ Symbol("getAbortController");
+var requestPrototype = {
+  get method() {
+    return this[incomingKey].method || "GET";
+  },
+  get url() {
+    return this[urlKey];
+  },
+  get headers() {
+    return this[headersKey] ||= newHeadersFromIncoming(this[incomingKey]);
+  },
+  [getAbortController]() {
+    this[getRequestCache]();
+    return this[abortControllerKey];
+  },
+  [getRequestCache]() {
+    this[abortControllerKey] ||= new AbortController();
+    return this[requestCache] ||= newRequestFromIncoming(
+      this.method,
+      this[urlKey],
+      this.headers,
+      this[incomingKey],
+      this[abortControllerKey]
+    );
+  }
+};
+[
+  "body",
+  "bodyUsed",
+  "cache",
+  "credentials",
+  "destination",
+  "integrity",
+  "mode",
+  "redirect",
+  "referrer",
+  "referrerPolicy",
+  "signal",
+  "keepalive"
+].forEach((k) => {
+  Object.defineProperty(requestPrototype, k, {
+    get() {
+      return this[getRequestCache]()[k];
+    }
+  });
+});
+["arrayBuffer", "blob", "clone", "formData", "json", "text"].forEach((k) => {
+  Object.defineProperty(requestPrototype, k, {
+    value: function() {
+      return this[getRequestCache]()[k]();
+    }
+  });
+});
+Object.setPrototypeOf(requestPrototype, Request2.prototype);
+var newRequest = (incoming, defaultHostname) => {
+  const req = Object.create(requestPrototype);
+  req[incomingKey] = incoming;
+  const incomingUrl = incoming.url || "";
+  if (incomingUrl[0] !== "/" && // short-circuit for performance. most requests are relative URL.
+  (incomingUrl.startsWith("http://") || incomingUrl.startsWith("https://"))) {
+    if (incoming instanceof Http2ServerRequest) {
+      throw new RequestError("Absolute URL for :path is not allowed in HTTP/2");
+    }
+    try {
+      const url2 = new URL(incomingUrl);
+      req[urlKey] = url2.href;
+    } catch (e) {
+      throw new RequestError("Invalid absolute URL", { cause: e });
+    }
+    return req;
+  }
+  const host = (incoming instanceof Http2ServerRequest ? incoming.authority : incoming.headers.host) || defaultHostname;
+  if (!host) {
+    throw new RequestError("Missing host header");
+  }
+  let scheme;
+  if (incoming instanceof Http2ServerRequest) {
+    scheme = incoming.scheme;
+    if (!(scheme === "http" || scheme === "https")) {
+      throw new RequestError("Unsupported scheme");
+    }
+  } else {
+    scheme = incoming.socket && incoming.socket.encrypted ? "https" : "http";
+  }
+  const url = new URL(`${scheme}://${host}${incomingUrl}`);
+  if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
+    throw new RequestError("Invalid host header");
+  }
+  req[urlKey] = url.href;
+  return req;
+};
+var responseCache = /* @__PURE__ */ Symbol("responseCache");
+var getResponseCache = /* @__PURE__ */ Symbol("getResponseCache");
+var cacheKey = /* @__PURE__ */ Symbol("cache");
+var GlobalResponse = global.Response;
+var Response2 = class _Response {
+  #body;
+  #init;
+  [getResponseCache]() {
+    delete this[cacheKey];
+    return this[responseCache] ||= new GlobalResponse(this.#body, this.#init);
+  }
+  constructor(body, init) {
+    let headers;
+    this.#body = body;
+    if (init instanceof _Response) {
+      const cachedGlobalResponse = init[responseCache];
+      if (cachedGlobalResponse) {
+        this.#init = cachedGlobalResponse;
+        this[getResponseCache]();
+        return;
+      } else {
+        this.#init = init.#init;
+        headers = new Headers(init.#init.headers);
+      }
+    } else {
+      this.#init = init;
+    }
+    if (typeof body === "string" || typeof body?.getReader !== "undefined" || body instanceof Blob || body instanceof Uint8Array) {
+      ;
+      this[cacheKey] = [init?.status || 200, body, headers || init?.headers];
+    }
+  }
+  get headers() {
+    const cache = this[cacheKey];
+    if (cache) {
+      if (!(cache[2] instanceof Headers)) {
+        cache[2] = new Headers(
+          cache[2] || { "content-type": "text/plain; charset=UTF-8" }
+        );
+      }
+      return cache[2];
+    }
+    return this[getResponseCache]().headers;
+  }
+  get status() {
+    return this[cacheKey]?.[0] ?? this[getResponseCache]().status;
+  }
+  get ok() {
+    const status = this.status;
+    return status >= 200 && status < 300;
+  }
+};
+["body", "bodyUsed", "redirected", "statusText", "trailers", "type", "url"].forEach((k) => {
+  Object.defineProperty(Response2.prototype, k, {
+    get() {
+      return this[getResponseCache]()[k];
+    }
+  });
+});
+["arrayBuffer", "blob", "clone", "formData", "json", "text"].forEach((k) => {
+  Object.defineProperty(Response2.prototype, k, {
+    value: function() {
+      return this[getResponseCache]()[k]();
+    }
+  });
+});
+Object.setPrototypeOf(Response2, GlobalResponse);
+Object.setPrototypeOf(Response2.prototype, GlobalResponse.prototype);
+async function readWithoutBlocking(readPromise) {
+  return Promise.race([readPromise, Promise.resolve().then(() => Promise.resolve(void 0))]);
+}
+function writeFromReadableStreamDefaultReader(reader, writable, currentReadPromise) {
+  const cancel = (error) => {
+    reader.cancel(error).catch(() => {
+    });
+  };
+  writable.on("close", cancel);
+  writable.on("error", cancel);
+  (currentReadPromise ?? reader.read()).then(flow, handleStreamError);
+  return reader.closed.finally(() => {
+    writable.off("close", cancel);
+    writable.off("error", cancel);
+  });
+  function handleStreamError(error) {
+    if (error) {
+      writable.destroy(error);
+    }
+  }
+  function onDrain() {
+    reader.read().then(flow, handleStreamError);
+  }
+  function flow({ done, value }) {
+    try {
+      if (done) {
+        writable.end();
+      } else if (!writable.write(value)) {
+        writable.once("drain", onDrain);
+      } else {
+        return reader.read().then(flow, handleStreamError);
+      }
+    } catch (e) {
+      handleStreamError(e);
+    }
+  }
+}
+function writeFromReadableStream(stream, writable) {
+  if (stream.locked) {
+    throw new TypeError("ReadableStream is locked.");
+  } else if (writable.destroyed) {
+    return;
+  }
+  return writeFromReadableStreamDefaultReader(stream.getReader(), writable);
+}
+var buildOutgoingHttpHeaders = (headers) => {
+  const res = {};
+  if (!(headers instanceof Headers)) {
+    headers = new Headers(headers ?? void 0);
+  }
+  const cookies = [];
+  for (const [k, v] of headers) {
+    if (k === "set-cookie") {
+      cookies.push(v);
+    } else {
+      res[k] = v;
+    }
+  }
+  if (cookies.length > 0) {
+    res["set-cookie"] = cookies;
+  }
+  res["content-type"] ??= "text/plain; charset=UTF-8";
+  return res;
+};
+var X_ALREADY_SENT = "x-hono-already-sent";
+if (typeof global.crypto === "undefined") {
+  global.crypto = crypto;
+}
+var outgoingEnded = /* @__PURE__ */ Symbol("outgoingEnded");
+var handleRequestError = () => new Response(null, {
+  status: 400
+});
+var handleFetchError = (e) => new Response(null, {
+  status: e instanceof Error && (e.name === "TimeoutError" || e.constructor.name === "TimeoutError") ? 504 : 500
+});
+var handleResponseError = (e, outgoing) => {
+  const err = e instanceof Error ? e : new Error("unknown error", { cause: e });
+  if (err.code === "ERR_STREAM_PREMATURE_CLOSE") {
+    console.info("The user aborted a request.");
+  } else {
+    console.error(e);
+    if (!outgoing.headersSent) {
+      outgoing.writeHead(500, { "Content-Type": "text/plain" });
+    }
+    outgoing.end(`Error: ${err.message}`);
+    outgoing.destroy(err);
+  }
+};
+var flushHeaders = (outgoing) => {
+  if ("flushHeaders" in outgoing && outgoing.writable) {
+    outgoing.flushHeaders();
+  }
+};
+var responseViaCache = async (res, outgoing) => {
+  let [status, body, header] = res[cacheKey];
+  let hasContentLength = false;
+  if (!header) {
+    header = { "content-type": "text/plain; charset=UTF-8" };
+  } else if (header instanceof Headers) {
+    hasContentLength = header.has("content-length");
+    header = buildOutgoingHttpHeaders(header);
+  } else if (Array.isArray(header)) {
+    const headerObj = new Headers(header);
+    hasContentLength = headerObj.has("content-length");
+    header = buildOutgoingHttpHeaders(headerObj);
+  } else {
+    for (const key in header) {
+      if (key.length === 14 && key.toLowerCase() === "content-length") {
+        hasContentLength = true;
+        break;
+      }
+    }
+  }
+  if (!hasContentLength) {
+    if (typeof body === "string") {
+      header["Content-Length"] = Buffer.byteLength(body);
+    } else if (body instanceof Uint8Array) {
+      header["Content-Length"] = body.byteLength;
+    } else if (body instanceof Blob) {
+      header["Content-Length"] = body.size;
+    }
+  }
+  outgoing.writeHead(status, header);
+  if (typeof body === "string" || body instanceof Uint8Array) {
+    outgoing.end(body);
+  } else if (body instanceof Blob) {
+    outgoing.end(new Uint8Array(await body.arrayBuffer()));
+  } else {
+    flushHeaders(outgoing);
+    await writeFromReadableStream(body, outgoing)?.catch(
+      (e) => handleResponseError(e, outgoing)
+    );
+  }
+  ;
+  outgoing[outgoingEnded]?.();
+};
+var isPromise = (res) => typeof res.then === "function";
+var responseViaResponseObject = async (res, outgoing, options = {}) => {
+  if (isPromise(res)) {
+    if (options.errorHandler) {
+      try {
+        res = await res;
+      } catch (err) {
+        const errRes = await options.errorHandler(err);
+        if (!errRes) {
+          return;
+        }
+        res = errRes;
+      }
+    } else {
+      res = await res.catch(handleFetchError);
+    }
+  }
+  if (cacheKey in res) {
+    return responseViaCache(res, outgoing);
+  }
+  const resHeaderRecord = buildOutgoingHttpHeaders(res.headers);
+  if (res.body) {
+    const reader = res.body.getReader();
+    const values = [];
+    let done = false;
+    let currentReadPromise = void 0;
+    if (resHeaderRecord["transfer-encoding"] !== "chunked") {
+      let maxReadCount = 2;
+      for (let i = 0; i < maxReadCount; i++) {
+        currentReadPromise ||= reader.read();
+        const chunk = await readWithoutBlocking(currentReadPromise).catch((e) => {
+          console.error(e);
+          done = true;
+        });
+        if (!chunk) {
+          if (i === 1) {
+            await new Promise((resolve4) => setTimeout(resolve4));
+            maxReadCount = 3;
+            continue;
+          }
+          break;
+        }
+        currentReadPromise = void 0;
+        if (chunk.value) {
+          values.push(chunk.value);
+        }
+        if (chunk.done) {
+          done = true;
+          break;
+        }
+      }
+      if (done && !("content-length" in resHeaderRecord)) {
+        resHeaderRecord["content-length"] = values.reduce((acc, value) => acc + value.length, 0);
+      }
+    }
+    outgoing.writeHead(res.status, resHeaderRecord);
+    values.forEach((value) => {
+      ;
+      outgoing.write(value);
+    });
+    if (done) {
+      outgoing.end();
+    } else {
+      if (values.length === 0) {
+        flushHeaders(outgoing);
+      }
+      await writeFromReadableStreamDefaultReader(reader, outgoing, currentReadPromise);
+    }
+  } else if (resHeaderRecord[X_ALREADY_SENT]) {
+  } else {
+    outgoing.writeHead(res.status, resHeaderRecord);
+    outgoing.end();
+  }
+  ;
+  outgoing[outgoingEnded]?.();
+};
+var getRequestListener = (fetchCallback, options = {}) => {
+  const autoCleanupIncoming = options.autoCleanupIncoming ?? true;
+  if (options.overrideGlobalObjects !== false && global.Request !== Request2) {
+    Object.defineProperty(global, "Request", {
+      value: Request2
+    });
+    Object.defineProperty(global, "Response", {
+      value: Response2
+    });
+  }
+  return async (incoming, outgoing) => {
+    let res, req;
+    try {
+      req = newRequest(incoming, options.hostname);
+      let incomingEnded = !autoCleanupIncoming || incoming.method === "GET" || incoming.method === "HEAD";
+      if (!incomingEnded) {
+        ;
+        incoming[wrapBodyStream] = true;
+        incoming.on("end", () => {
+          incomingEnded = true;
+        });
+        if (incoming instanceof Http2ServerRequest2) {
+          ;
+          outgoing[outgoingEnded] = () => {
+            if (!incomingEnded) {
+              setTimeout(() => {
+                if (!incomingEnded) {
+                  setTimeout(() => {
+                    incoming.destroy();
+                    outgoing.destroy();
+                  });
+                }
+              });
+            }
+          };
+        }
+      }
+      outgoing.on("close", () => {
+        const abortController = req[abortControllerKey];
+        if (abortController) {
+          if (incoming.errored) {
+            req[abortControllerKey].abort(incoming.errored.toString());
+          } else if (!outgoing.writableFinished) {
+            req[abortControllerKey].abort("Client connection prematurely closed.");
+          }
+        }
+        if (!incomingEnded) {
+          setTimeout(() => {
+            if (!incomingEnded) {
+              setTimeout(() => {
+                incoming.destroy();
+              });
+            }
+          });
+        }
+      });
+      res = fetchCallback(req, { incoming, outgoing });
+      if (cacheKey in res) {
+        return responseViaCache(res, outgoing);
+      }
+    } catch (e) {
+      if (!res) {
+        if (options.errorHandler) {
+          res = await options.errorHandler(req ? e : toRequestError(e));
+          if (!res) {
+            return;
+          }
+        } else if (!req) {
+          res = handleRequestError();
+        } else {
+          res = handleFetchError(e);
+        }
+      } else {
+        return handleResponseError(e, outgoing);
+      }
+    }
+    try {
+      return await responseViaResponseObject(res, outgoing, options);
+    } catch (e) {
+      return handleResponseError(e, outgoing);
+    }
+  };
+};
+var createAdaptorServer = (options) => {
+  const fetchCallback = options.fetch;
+  const requestListener = getRequestListener(fetchCallback, {
+    hostname: options.hostname,
+    overrideGlobalObjects: options.overrideGlobalObjects,
+    autoCleanupIncoming: options.autoCleanupIncoming
+  });
+  const createServer = options.createServer || createServerHTTP;
+  const server = createServer(options.serverOptions || {}, requestListener);
+  return server;
+};
+var serve = (options, listeningListener) => {
+  const server = createAdaptorServer(options);
+  server.listen(options?.port ?? 3e3, options.hostname, () => {
+    const serverInfo = server.address();
+    listeningListener && listeningListener(serverInfo);
+  });
+  return server;
+};
+
+// app/lib/paths.ts
+import { homedir } from "os";
+import { resolve, join } from "path";
+import { existsSync, readFileSync } from "fs";
+var configDirName = ".maxy";
+var commercialMode = false;
+var vncDisplayNum = 99;
+var rfbPortNum = 5900;
+var websockifyPortNum = 6080;
+var cdpPortNum = 9222;
+var portSource = "dev-default";
+var platformRoot = process.env.MAXY_PLATFORM_ROOT;
+if (platformRoot) {
+  const brandPath = join(platformRoot, "config", "brand.json");
+  if (existsSync(brandPath)) {
+    let brand;
+    try {
+      brand = JSON.parse(readFileSync(brandPath, "utf-8"));
+    } catch (err) {
+      const detail = (err instanceof Error ? err.message : String(err)).slice(0, 160);
+      console.error(`[paths] error reason=brand-config-missing path=${brandPath} detail="parse failed: ${detail.replace(/"/g, "'")}"`);
+      throw err;
+    }
+    if (typeof brand.configDir === "string") configDirName = brand.configDir;
+    if (brand.commercialMode === true) commercialMode = true;
+    if (typeof brand.vncDisplay === "number") vncDisplayNum = brand.vncDisplay;
+    const brandLabel = configDirName.replace(/^\./, "");
+    const required = [
+      ["rfbPort", brand.rfbPort],
+      ["websockifyPort", brand.websockifyPort],
+      ["cdpPort", brand.cdpPort]
+    ];
+    for (const [field, value] of required) {
+      if (typeof value !== "number") {
+        const keys = Object.keys(brand).join(",");
+        console.error(`[paths] error reason=cdp-port-unresolved brand=${brandLabel} path=${brandPath} field=${field} json_keys=${keys}`);
+        throw new Error(`brand.json at ${brandPath} missing required field: ${field}`);
+      }
+    }
+    rfbPortNum = brand.rfbPort;
+    websockifyPortNum = brand.websockifyPort;
+    cdpPortNum = brand.cdpPort;
+    portSource = "brand.json";
+  }
+}
+var MAXY_DIR = resolve(homedir(), configDirName);
+var BRAND_NAME = configDirName.replace(/^\./, "");
+var COMMERCIAL_MODE = commercialMode;
+var VNC_DISPLAY = `:${vncDisplayNum}`;
+var RFB_PORT = rfbPortNum;
+var WEBSOCKIFY_PORT = websockifyPortNum;
+var CDP_PORT = cdpPortNum;
+console.log(
+  `[paths] brand=${configDirName.replace(/^\./, "")} vncDisplay=${vncDisplayNum} rfbPort=${RFB_PORT} websockifyPort=${WEBSOCKIFY_PORT} cdpPort=${CDP_PORT} source=${portSource}`
+);
+var CHROMIUM_PROFILE_DIR = resolve(homedir(), configDirName, "chromium-profile");
+var PLATFORM_ROOT = process.env.MAXY_PLATFORM_ROOT ?? resolve(process.cwd(), "..");
+var USERS_FILE = resolve(MAXY_DIR, "users.json");
+var LOG_DIR = resolve(MAXY_DIR, "logs");
+var BIN_DIR = resolve(MAXY_DIR, "bin");
+var REMOTE_PASSWORD_FILE = resolve(MAXY_DIR, ".remote-password");
+var REMOTE_SESSION_SECRET_FILE = resolve(MAXY_DIR, "credentials", "remote-session-secret");
+var ADMIN_SESSION_SECRET_FILE = resolve(MAXY_DIR, "credentials", "admin-session-secret");
+var TELEGRAM_WEBHOOK_SECRET_FILE = resolve(MAXY_DIR, ".telegram-webhook-secret");
+var TELEGRAM_ADMIN_WEBHOOK_SECRET_FILE = resolve(MAXY_DIR, ".telegram-admin-webhook-secret");
+var CLAUDE_CREDENTIALS_FILE = resolve(MAXY_DIR, ".claude", ".credentials.json");
+
+// app/lib/vnc-logger.ts
+import { appendFileSync, mkdirSync } from "fs";
+import { resolve as resolve2 } from "path";
+var VNC_LOG_FILE = resolve2(LOG_DIR, "vnc-boot.log");
+try {
+  mkdirSync(LOG_DIR, { recursive: true });
+} catch (err) {
+  console.error(`[vnc-log-fail] mkdir ${LOG_DIR} failed: ${err.message}`);
+}
+function vncLog(phase, fields = {}) {
+  const ts = (/* @__PURE__ */ new Date()).toISOString();
+  const kv = Object.entries(fields).map(([k, v]) => `${k}=${JSON.stringify(v)}`).join(" ");
+  const line = kv.length > 0 ? `[${ts}] [${phase}] ${kv}
+` : `[${ts}] [${phase}]
+`;
+  try {
+    appendFileSync(VNC_LOG_FILE, line);
+  } catch (err) {
+    console.error(`[vnc-log-fail] ${err.message} \u2014 dropped: ${line.slice(0, 300).trim()}`);
+  }
+}
+var corrCounter = 0;
+function newCorrId() {
+  corrCounter = corrCounter + 1 & 4294967295;
+  const counterHex = corrCounter.toString(16).padStart(8, "0");
+  const randomHex = Math.floor(Math.random() * 16777215).toString(16).padStart(6, "0");
+  return `${counterHex}-${randomHex}`;
+}
+function sanitizeClientCorrId(raw2) {
+  if (!raw2) return null;
+  if (raw2.length > 32) return null;
+  if (!/^[A-Za-z0-9_-]+$/.test(raw2)) return null;
+  return raw2;
+}
+function formatKv(fields) {
+  return Object.entries(fields).filter(([, v]) => v !== void 0).map(([k, v]) => `${k}=${JSON.stringify(v)}`).join(" ");
+}
+function httpLog(fields) {
+  console.error(`[http] ${formatKv(fields)}`);
+}
+function websockifyLog(event, fields = {}) {
+  console.error(`[websockify] ${formatKv({ event, ...fields })}`);
+}
+function browserViewerLog(event, fields = {}) {
+  console.error(`[browser-viewer] ${formatKv({ event, ...fields })}`);
+}
+
+// app/lib/password-strength.ts
+function validatePasswordStrength(password) {
+  return [
+    { key: "length", label: "At least 8 characters", met: password.length >= 8 },
+    { key: "number", label: "Contains a number", met: /\d/.test(password) },
+    { key: "special", label: "Contains a special character", met: /[^A-Za-z0-9]/.test(password) },
+    { key: "whitespace", label: "No spaces", met: password.length > 0 && !/\s/.test(password) }
+  ];
+}
+function isPasswordValid(password) {
+  return validatePasswordStrength(password).every((r) => r.met);
+}
+
+// app/lib/remote-auth.ts
+import { scrypt, randomBytes, timingSafeEqual, createHmac } from "crypto";
+import { readFileSync as readFileSync2, writeFileSync, existsSync as existsSync2, mkdirSync as mkdirSync2 } from "fs";
+import { dirname } from "path";
+var SCRYPT_N = 16384;
+var SCRYPT_R = 8;
+var SCRYPT_P = 1;
+var SCRYPT_KEYLEN = 64;
+function scryptAsync(password, salt) {
+  return new Promise((resolve4, reject) => {
+    scrypt(password, salt, SCRYPT_KEYLEN, { N: SCRYPT_N, r: SCRYPT_R, p: SCRYPT_P }, (err, key) => {
+      if (err) reject(err);
+      else resolve4(key);
+    });
+  });
+}
+async function hashPassword(password) {
+  const salt = randomBytes(32);
+  const hash = await scryptAsync(password, salt);
+  return `${salt.toString("hex")}:${hash.toString("hex")}`;
+}
+async function verifyPassword(password, stored) {
+  const colonIndex = stored.indexOf(":");
+  if (colonIndex === -1) return { ok: false, why: "bad-hash-format", hashBytes: 0 };
+  const saltHex = stored.slice(0, colonIndex);
+  const hashHex = stored.slice(colonIndex + 1);
+  if (!saltHex || !hashHex) return { ok: false, why: "bad-hash-format", hashBytes: 0 };
+  const salt = Buffer.from(saltHex, "hex");
+  const storedHash = Buffer.from(hashHex, "hex");
+  if (storedHash.length !== SCRYPT_KEYLEN) {
+    return { ok: false, why: "hash-length", hashBytes: storedHash.length };
+  }
+  let computed;
+  try {
+    computed = await scryptAsync(password, salt);
+  } catch {
+    return { ok: false, why: "scrypt-throw", hashBytes: storedHash.length };
+  }
+  if (timingSafeEqual(computed, storedHash)) {
+    return { ok: true, hashBytes: storedHash.length };
+  }
+  return { ok: false, why: "password-mismatch", hashBytes: storedHash.length };
+}
+function isRemoteAuthConfigured() {
+  if (!existsSync2(REMOTE_PASSWORD_FILE)) return false;
+  const content = readFileSync2(REMOTE_PASSWORD_FILE, "utf-8").trim();
+  return content.length > 0 && content.includes(":");
+}
+function readPasswordHash() {
+  try {
+    if (!existsSync2(REMOTE_PASSWORD_FILE)) return null;
+    const content = readFileSync2(REMOTE_PASSWORD_FILE, "utf-8").trim();
+    if (!content || !content.includes(":")) return null;
+    return content;
+  } catch {
+    return null;
+  }
+}
+async function setRemotePassword(password) {
+  const hash = await hashPassword(password);
+  writeFileSync(REMOTE_PASSWORD_FILE, hash, "utf-8");
+}
+async function verifyRemotePassword(password) {
+  const stored = readPasswordHash();
+  if (!stored) return { ok: false, why: "no-password-file", hashBytes: 0 };
+  return verifyPassword(password, stored);
+}
+var SESSION_TTL_MS = 24 * 60 * 60 * 1e3;
+var TOKEN_PREFIX = "v1.";
+var SECRET_BYTES = 32;
+var NONCE_BYTES = 16;
+var cachedSecret = null;
+function getSecret() {
+  if (cachedSecret) return cachedSecret;
+  try {
+    const hex2 = readFileSync2(REMOTE_SESSION_SECRET_FILE, "utf-8").trim();
+    if (hex2.length === SECRET_BYTES * 2) {
+      cachedSecret = Buffer.from(hex2, "hex");
+      return cachedSecret;
+    }
+  } catch {
+  }
+  const fresh = randomBytes(SECRET_BYTES).toString("hex");
+  try {
+    mkdirSync2(dirname(REMOTE_SESSION_SECRET_FILE), { recursive: true, mode: 448 });
+    writeFileSync(REMOTE_SESSION_SECRET_FILE, fresh, { mode: 384, flag: "wx" });
+  } catch {
+  }
+  const hex = readFileSync2(REMOTE_SESSION_SECRET_FILE, "utf-8").trim();
+  cachedSecret = Buffer.from(hex, "hex");
+  return cachedSecret;
+}
+function base64urlEncode(buf) {
+  return buf.toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function base64urlDecode(s) {
+  const padded = s.replace(/-/g, "+").replace(/_/g, "/") + "=".repeat((4 - s.length % 4) % 4);
+  return Buffer.from(padded, "base64");
+}
+function signPayload(payloadJson, secret) {
+  return base64urlEncode(createHmac("sha256", secret).update(payloadJson).digest());
+}
+function createRemoteSession(opts = {}) {
+  const payload = { c: opts.now ?? Date.now(), n: randomBytes(NONCE_BYTES).toString("hex") };
+  const payloadJson = JSON.stringify(payload);
+  const payloadB64 = base64urlEncode(Buffer.from(payloadJson, "utf-8"));
+  const sig = signPayload(payloadJson, getSecret());
+  return `${TOKEN_PREFIX}${payloadB64}.${sig}`;
+}
+function parseToken(token) {
+  if (!token.startsWith(TOKEN_PREFIX)) return null;
+  const rest = token.slice(TOKEN_PREFIX.length);
+  const dot = rest.indexOf(".");
+  if (dot === -1) return null;
+  const payloadB64 = rest.slice(0, dot);
+  const sigB64 = rest.slice(dot + 1);
+  if (!payloadB64 || !sigB64) return null;
+  let payloadJson;
+  try {
+    payloadJson = base64urlDecode(payloadB64).toString("utf-8");
+  } catch {
+    return null;
+  }
+  const expected = signPayload(payloadJson, getSecret());
+  const expectedBuf = Buffer.from(expected, "utf-8");
+  const provBuf = Buffer.from(sigB64, "utf-8");
+  const signatureValid = expectedBuf.length === provBuf.length && timingSafeEqual(expectedBuf, provBuf);
+  let payload;
+  try {
+    payload = JSON.parse(payloadJson);
+  } catch {
+    return null;
+  }
+  if (!payload || typeof payload !== "object" || typeof payload.c !== "number" || typeof payload.n !== "string") {
+    return null;
+  }
+  return { payload, signatureValid };
+}
+function validateRemoteSession(token, now = Date.now()) {
+  if (!token) return false;
+  const parsed = parseToken(token);
+  if (!parsed || !parsed.signatureValid) return false;
+  return now - parsed.payload.c <= SESSION_TTL_MS;
+}
+function describeRemoteSession(token, now = Date.now()) {
+  if (!token) return { present: false, expired: false };
+  const parsed = parseToken(token);
+  if (!parsed || !parsed.signatureValid) return { present: false, expired: false };
+  return { present: true, expired: now - parsed.payload.c > SESSION_TTL_MS };
+}
+function normalizeIp(ip) {
+  if (!ip) return void 0;
+  const trimmed = ip.trim();
+  if (trimmed.startsWith("::ffff:")) return trimmed.slice(7);
+  return trimmed;
+}
+function isLoopback(ip) {
+  return ip === "127.0.0.1" || ip.startsWith("127.") || ip === "::1";
+}
+function isPrivateIp(ip) {
+  const parts = ip.split(".");
+  if (parts.length !== 4) return false;
+  const a = parseInt(parts[0], 10);
+  const b = parseInt(parts[1], 10);
+  if (Number.isNaN(a) || Number.isNaN(b)) return false;
+  if (a === 10) return true;
+  if (a === 172 && b >= 16 && b <= 31) return true;
+  if (a === 192 && b === 168) return true;
+  if (a === 169 && b === 254) return true;
+  return false;
+}
+function classifyNormalizedIp(ip) {
+  if (isLoopback(ip) || isPrivateIp(ip)) return "lan";
+  return "external";
+}
+function resolveClientIp(remoteAddress, xForwardedFor) {
+  const remote = normalizeIp(remoteAddress);
+  if (!remote) return { ip: "", kind: "unknown" };
+  if (isLoopback(remote) && xForwardedFor) {
+    const firstIp = normalizeIp(xForwardedFor.split(",")[0]?.trim());
+    if (firstIp) {
+      return { ip: firstIp, kind: classifyNormalizedIp(firstIp) };
+    }
+  }
+  return { ip: remote, kind: classifyNormalizedIp(remote) };
+}
+var MAX_ATTEMPTS = 5;
+var LOCKOUT_MS = 15 * 60 * 1e3;
+var LOCAL_BUCKET = "__local__";
+var rateLimitMap = /* @__PURE__ */ new Map();
+function bucketKey(client) {
+  return client.kind === "external" ? client.ip : LOCAL_BUCKET;
+}
+function checkRateLimit(client) {
+  const key = bucketKey(client);
+  const rec = rateLimitMap.get(key);
+  if (!rec) return null;
+  if (rec.lockedUntil > Date.now()) {
+    const remaining = Math.ceil((rec.lockedUntil - Date.now()) / 1e3);
+    return `Too many attempts. Try again in ${remaining}s`;
+  }
+  if (rec.lockedUntil > 0) {
+    rateLimitMap.delete(key);
+  }
+  return null;
+}
+function recordFailedAttempt(client) {
+  const key = bucketKey(client);
+  const rec = rateLimitMap.get(key) ?? { count: 0, lockedUntil: 0 };
+  rec.count++;
+  if (rec.count >= MAX_ATTEMPTS) {
+    rec.lockedUntil = Date.now() + LOCKOUT_MS;
+    rec.count = 0;
+  }
+  rateLimitMap.set(key, rec);
+}
+function clearRateLimit(client) {
+  rateLimitMap.delete(bucketKey(client));
+}
+setInterval(() => {
+  const now = Date.now();
+  for (const [key, rec] of rateLimitMap) {
+    if (rec.lockedUntil > 0 && rec.lockedUntil <= now) {
+      rateLimitMap.delete(key);
+    }
+  }
+}, 15 * 60 * 1e3).unref();
+function renderLoginPage(opts) {
+  const error = opts?.error ?? "";
+  const lockout = opts?.lockoutSeconds ?? 0;
+  const redirect = opts?.redirect ?? "/";
+  const mode = opts?.mode ?? "login";
+  const changeError = opts?.changeError ?? "";
+  const success = opts?.success ?? "";
+  const setupError = opts?.setupError ?? "";
+  const primaryColor = opts?.primaryColor ?? "#7C8C72";
+  const primaryHoverColor = opts?.primaryHoverColor ?? "#6A7A62";
+  const primarySubtle = opts?.primarySubtle ?? "rgba(124,140,114,0.08)";
+  const productName = opts?.productName ?? "Maxy";
+  const logoPath = opts?.logoPath ?? "/brand/maxy-monochrome.png";
+  const faviconPath = opts?.faviconPath ?? "/favicon.ico";
+  const displayFont = opts?.displayFont ?? "'Cormorant', Georgia, serif";
+  const bodyFont = opts?.bodyFont ?? "'DM Sans', -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif";
+  const logoContainsName = opts?.logoContainsName ?? false;
+  const errorHtml = error ? `<p class="msg msg--error">${escapeHtml(error)}</p>` : "";
+  const changeErrorHtml = changeError ? `<p class="msg msg--error">${escapeHtml(changeError)}</p>` : "";
+  const successHtml = success ? `<p class="msg msg--success">${escapeHtml(success)}</p>` : "";
+  const lockoutHtml = lockout > 0 ? `<p class="msg msg--error">Too many attempts. Try again in <span id="countdown">${lockout}</span>s</p>
+       <script>
+         (function() {
+           var s = ${lockout};
+           var el = document.getElementById('countdown');
+           var iv = setInterval(function() { s--; el.textContent = s; if (s <= 0) { clearInterval(iv); location.reload(); } }, 1000);
+         })();
+       </script>` : "";
+  const setupErrorHtml = setupError ? `<p class="msg msg--error">${escapeHtml(setupError)}</p>` : "";
+  const formDisabled = lockout > 0 ? "disabled" : "";
+  const loginDisplay = mode === "login" ? "block" : "none";
+  const changeDisplay = mode === "change" ? "block" : "none";
+  const setupDisplay = mode === "setup" ? "block" : "none";
+  const successDisplay = mode === "success" ? "block" : "none";
+  const subtitleText = mode === "setup" ? "Set your remote password" : "Remote access";
+  const displayFontName = displayFont.match(/^'([^']+)'/)?.[1] ?? "";
+  const bodyFontName = bodyFont.match(/^'([^']+)'/)?.[1] ?? "";
+  const googleFontsLink = displayFontName || bodyFontName ? [
+    '<link rel="preconnect" href="https://fonts.googleapis.com">',
+    '<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>',
+    '<link href="https://fonts.googleapis.com/css2?' + [
+      displayFontName ? `family=${displayFontName.replace(/ /g, "+")}:wght@300;400` : "",
+      bodyFontName ? `family=${bodyFontName.replace(/ /g, "+")}:wght@400;500` : ""
+    ].filter(Boolean).join("&") + '&display=swap" rel="stylesheet">'
+  ].join("\n  ") : "";
+  return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Sign in \u2014 ${escapeHtml(productName)}</title>
+  <link rel="icon" href="${escapeHtml(faviconPath)}">
+  ${googleFontsLink}
+  <style>
+    * { margin: 0; padding: 0; box-sizing: border-box; }
+    body {
+      font-family: ${bodyFont};
+      background: #FAFAF8;
+      color: #1A1A1A;
+      min-height: 100vh;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+    }
+    .page {
+      display: flex;
+      flex-direction: column;
+      align-items: center;
+      gap: 24px;
+      max-width: 420px;
+      width: 100%;
+      padding: 40px 20px;
+    }
+    .logo-img {
+      width: 110px;
+      height: 110px;
+      margin: -11px;
+      object-fit: contain;
+    }
+    .title {
+      font-family: ${displayFont};
+      font-weight: 300;
+      font-size: 28px;
+      color: #1A1A1A;
+      text-align: center;
+      letter-spacing: -0.01em;
+      line-height: 1.3;
+    }
+    .subtitle {
+      font-size: 15px;
+      color: #6B6B6B;
+      text-align: center;
+      margin-top: -8px;
+    }
+    .form-wrap {
+      width: 100%;
+      max-width: 300px;
+    }
+    .field { margin-bottom: 12px; }
+    .field-label {
+      display: block;
+      font-size: 13px;
+      font-weight: 500;
+      color: #6B6B6B;
+      margin-bottom: 6px;
+    }
+    .field-input {
+      width: 100%;
+      padding: 10px 12px;
+      border: 1px solid rgba(0,0,0,0.1);
+      border-radius: 8px;
+      font-size: 15px;
+      font-family: inherit;
+      outline: none;
+      background: #fff;
+      transition: border-color 0.15s, box-shadow 0.15s;
+    }
+    .field-input:focus {
+      border-color: ${primaryColor};
+      box-shadow: 0 0 0 3px ${primarySubtle};
+    }
+    .options {
+      display: flex;
+      align-items: center;
+      justify-content: space-between;
+      gap: 12px;
+      margin-top: 8px;
+    }
+
+    /* Checkbox \u2014 matches Maxy shared checkbox (asterisk-in-square) */
+    .check {
+      position: relative;
+      display: flex;
+      align-items: center;
+      gap: 8px;
+      cursor: pointer;
+      user-select: none;
+    }
+    .check input { position: absolute; opacity: 0; width: 0; height: 0; pointer-events: none; }
+    .check-box {
+      width: 14px;
+      height: 14px;
+      border: 1px solid rgba(0,0,0,0.1);
+      border-radius: 2px;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      font-size: 10px;
+      color: transparent;
+      transition: border-color 0.15s, color 0.15s;
+      flex-shrink: 0;
+    }
+    .check input:checked + .check-box {
+      border-color: ${primaryColor};
+      color: ${primaryColor};
+    }
+    .check-label {
+      font-size: 13px;
+      color: #6B6B6B;
+    }
+
+    /* Ghost button \u2014 matches Maxy ghost variant */
+    .ghost {
+      background: none;
+      border: none;
+      font-family: inherit;
+      font-size: 13px;
+      color: #6B6B6B;
+      cursor: pointer;
+      padding: 4px 0;
+      transition: color 0.15s;
+    }
+    .ghost:hover { color: #1A1A1A; }
+
+    /* Primary button */
+    .btn {
+      width: 100%;
+      padding: 12px;
+      margin-top: 16px;
+      background: ${primaryColor};
+      color: #fff;
+      border: none;
+      border-radius: 10px;
+      font-size: 15px;
+      font-weight: 500;
+      font-family: inherit;
+      cursor: pointer;
+      transition: background 0.15s;
+    }
+    .btn:hover:not(:disabled) { background: ${primaryHoverColor}; }
+    .btn:disabled { opacity: 0.5; cursor: not-allowed; }
+
+    /* Messages */
+    .msg {
+      font-size: 13px;
+      text-align: center;
+      margin-top: 8px;
+    }
+    .msg--error { color: #c44; }
+    .msg--success { color: ${primaryColor}; }
+
+    /* Strength checklist (setup mode) */
+    .strength-checklist { margin: 8px 0; }
+    .strength-item {
+      font-size: 13px;
+      color: #6B6B6B;
+      padding: 2px 0;
+      transition: color 0.15s;
+    }
+    .strength-icon {
+      display: inline-block;
+      width: 16px;
+      text-align: center;
+    }
+
+    @media (max-width: 440px) {
+      .page { padding: 24px 16px; }
+    }
+  </style>
+</head>
+<body>
+  <div class="page">
+    <img src="${escapeHtml(logoPath)}" alt="${escapeHtml(productName)}" class="logo-img">
+    <h1 class="title"${logoContainsName ? ' style="display:none"' : ""}>${escapeHtml(productName)}</h1>
+    <p class="subtitle">${escapeHtml(subtitleText)}</p>
+
+    ${successHtml}
+
+    <!-- Login -->
+    <div id="login-section" class="form-wrap" style="display:${loginDisplay}">
+      <form method="POST" action="/__remote-auth/login">
+        <input type="hidden" name="redirect" value="${escapeHtml(redirect)}">
+        <div class="field">
+          <label class="field-label" for="password">Password</label>
+          <input class="field-input" type="password" id="password" name="password" required autofocus ${formDisabled}>
+        </div>
+        <div class="options">
+          <label class="check">
+            <input type="checkbox" id="show-login-pw">
+            <span class="check-box">\u2731</span>
+            <span class="check-label">Show password</span>
+          </label>
+          <button type="button" class="ghost" onclick="toggleMode('change')">Change password</button>
+        </div>
+        <button type="submit" class="btn" ${formDisabled}>Sign in</button>
+      </form>
+      ${errorHtml}
+      ${lockoutHtml}
+    </div>
+
+    <!-- Change password -->
+    <div id="change-section" class="form-wrap" style="display:${changeDisplay}">
+      <form method="POST" action="/__remote-auth/change-password">
+        <input type="hidden" name="redirect" value="${escapeHtml(redirect)}">
+        <div class="field">
+          <label class="field-label" for="current_password">Current password</label>
+          <input class="field-input" type="password" id="current_password" name="current_password" required ${formDisabled}>
+        </div>
+        <div class="field">
+          <label class="field-label" for="new_password">New password</label>
+          <input class="field-input" type="password" id="new_password" name="new_password" required ${formDisabled}>
+        </div>
+        <div class="field">
+          <label class="field-label" for="confirm_password">Confirm new password</label>
+          <input class="field-input" type="password" id="confirm_password" name="confirm_password" required ${formDisabled}>
+        </div>
+        <div class="options">
+          <label class="check">
+            <input type="checkbox" id="show-change-pw">
+            <span class="check-box">\u2731</span>
+            <span class="check-label">Show passwords</span>
+          </label>
+          <button type="button" class="ghost" onclick="toggleMode('login')">Back to sign in</button>
+        </div>
+        <button type="submit" class="btn" ${formDisabled}>Change password</button>
+      </form>
+      ${changeErrorHtml}
+    </div>
+
+    <!-- Setup (initial password) -->
+    <div id="setup-section" class="form-wrap" style="display:${setupDisplay}">
+      <form method="POST" action="/__remote-auth/set-initial-password">
+        <div class="field">
+          <label class="field-label" for="setup_password">Password</label>
+          <input class="field-input" type="password" id="setup_password" name="password" required autofocus>
+        </div>
+        <div class="field">
+          <label class="field-label" for="setup_confirm">Confirm password</label>
+          <input class="field-input" type="password" id="setup_confirm" name="confirm_password" required>
+        </div>
+        <div id="strength-checklist" class="strength-checklist">
+          <div class="strength-item" id="req-length"><span class="strength-icon">\u25CB</span> At least 8 characters</div>
+          <div class="strength-item" id="req-number"><span class="strength-icon">\u25CB</span> Contains a number</div>
+          <div class="strength-item" id="req-special"><span class="strength-icon">\u25CB</span> Contains a special character</div>
+          <div class="strength-item" id="req-spaces"><span class="strength-icon">\u25CB</span> No spaces</div>
+        </div>
+        <div class="options">
+          <label class="check">
+            <input type="checkbox" id="show-setup-pw">
+            <span class="check-box">\u2731</span>
+            <span class="check-label">Show passwords</span>
+          </label>
+        </div>
+        <button type="submit" class="btn" id="setup-submit" disabled>Set password</button>
+      </form>
+      ${setupErrorHtml}
+    </div>
+
+    <!-- Success (after initial password set) -->
+    <div id="success-section" class="form-wrap" style="display:${successDisplay}">
+      <p class="msg msg--success" style="font-size:15px;margin-bottom:4px;">\u2713 Password set</p>
+      <p style="font-size:14px;color:#6B6B6B;text-align:center;">You can close this tab and return to the onboarding tab.</p>
+      <script>
+        (function() {
+          try {
+            var ch = new BroadcastChannel('platform-onboarding');
+            setTimeout(function() {
+              ch.postMessage({ type: 'remote-password-set' });
+              ch.close();
+            }, 2500);
+          } catch(e) {}
+        })();
+      </script>
+    </div>
+  </div>
+
+  <script>
+    /* Toggle between login and change-password modes */
+    function toggleMode(mode) {
+      document.getElementById('login-section').style.display = mode === 'login' ? 'block' : 'none';
+      document.getElementById('change-section').style.display = mode === 'change' ? 'block' : 'none';
+      /* Focus first input in the active section */
+      var id = mode === 'login' ? 'password' : 'current_password';
+      var el = document.getElementById(id);
+      if (el) el.focus();
+    }
+
+    /* Show/hide password toggles */
+    function bindShowHide(checkboxId, inputIds) {
+      var cb = document.getElementById(checkboxId);
+      if (!cb) return;
+      cb.addEventListener('change', function() {
+        var type = cb.checked ? 'text' : 'password';
+        inputIds.forEach(function(id) {
+          var el = document.getElementById(id);
+          if (el) el.type = type;
+        });
+      });
+    }
+    bindShowHide('show-login-pw', ['password']);
+    bindShowHide('show-change-pw', ['current_password', 'new_password', 'confirm_password']);
+    bindShowHide('show-setup-pw', ['setup_password', 'setup_confirm']);
+
+    /* Explicit Enter-to-submit for the login password field */
+    var loginPw = document.getElementById('password');
+    if (loginPw) {
+      loginPw.addEventListener('keydown', function(e) {
+        if (e.key === 'Enter') {
+          e.preventDefault();
+          this.closest('form').requestSubmit();
+        }
+      });
+    }
+
+    /* Live password strength validation (setup mode) */
+    (function() {
+      var pw = document.getElementById('setup_password');
+      var confirm = document.getElementById('setup_confirm');
+      var btn = document.getElementById('setup-submit');
+      if (!pw || !confirm || !btn) return;
+
+      var rules = [
+        { id: 'req-length', test: function(p) { return p.length >= 8; } },
+        { id: 'req-number', test: function(p) { return /\\d/.test(p); } },
+        { id: 'req-special', test: function(p) { return /[^A-Za-z0-9]/.test(p); } },
+        { id: 'req-spaces', test: function(p) { return p.length > 0 && !/\\s/.test(p); } }
+      ];
+
+      function check() {
+        var p = pw.value;
+        var allMet = true;
+        rules.forEach(function(r) {
+          var el = document.getElementById(r.id);
+          var met = r.test(p);
+          if (!met) allMet = false;
+          el.querySelector('.strength-icon').textContent = met ? '\\u2713' : '\\u25CB';
+          el.style.color = met ? '${primaryColor}' : '#6B6B6B';
+        });
+        var match = p.length > 0 && p === confirm.value;
+        btn.disabled = !(allMet && match);
+      }
+
+      pw.addEventListener('input', check);
+      confirm.addEventListener('input', check);
+    })();
+  </script>
+</body>
+</html>`;
+}
+function escapeHtml(str) {
+  return str.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
+
+// app/lib/auth-gate.ts
+function canAccessAdmin(input) {
+  const client = resolveClientIp(input.remoteAddress, input.xForwardedFor);
+  if (input.isPublicHost(input.host)) {
+    return { allow: false, reason: "public-host", client };
+  }
+  if (client.kind !== "external") {
+    return { allow: true, client };
+  }
+  if (!isRemoteAuthConfigured()) {
+    return { allow: false, reason: "remote-unconfigured", client };
+  }
+  const token = parseCookieValue(input.cookieHeader, "__remote_session");
+  if (token && validateRemoteSession(token)) {
+    return { allow: true, client };
+  }
+  return { allow: false, reason: "unauthorized", client };
+}
+function parseCookieValue(cookieHeader, name) {
+  if (!cookieHeader) return null;
+  const match2 = cookieHeader.match(new RegExp(`(?:^|;\\s*)${name}=([^;]*)`));
+  if (!match2) return null;
+  try {
+    return decodeURIComponent(match2[1]);
+  } catch {
+    return null;
+  }
+}
+
+// app/lib/claude-agent.ts
+var agentLogStream = (..._args) => null;
+var clearSessionHistory = (..._args) => null;
+var compactSession = (..._args) => null;
+var completeGrantSetup = (..._args) => null;
+var findMissingPlugins = (..._args) => null;
+var fingerprintSessionKey = (..._args) => null;
+var getAccountIdForSession = (..._args) => null;
+var getAgentNameForSession = (..._args) => null;
+var getConversationIdForSession = (..._args) => null;
+var getDefaultAccountId = (..._args) => null;
+var getGrantForSession = (..._args) => null;
+var getGroupSlugForSession = (..._args) => null;
+var getRoleForSession = (..._args) => null;
+var getSessionMessages = (..._args) => null;
+var getStreamLogHandle = (..._args) => null;
+var getUserIdForSession = (..._args) => null;
+var getUserNameForSession = (..._args) => null;
+var getVisitorIdForSession = (..._args) => null;
+var hasStubAccountDir = (..._args) => null;
+var invokeAgent = (..._args) => null;
+var listAdminSessionsInProgress = (..._args) => null;
+var mintAdminSessionToken = (..._args) => null;
+var registerGrantSession = (..._args) => null;
+var registerResumedSession = (..._args) => null;
+var registerSession = (..._args) => null;
+var resolveAccount = (..._args) => null;
+var resolveAgentConfig = (..._args) => null;
+var resolveDefaultAgentSlug = (..._args) => null;
+var resolveUserAccounts = (..._args) => null;
+var setAgentSessionId = (..._args) => null;
+var setConversationIdForSession = (..._args) => null;
+var setGroupContextForSession = (..._args) => null;
+var setWantsPriorConversation = (..._args) => null;
+var sigtermFlushStreamLogs = (..._args) => null;
+var streamLogPathFor = (..._args) => null;
+var unregisterSession = (..._args) => null;
+var validateAgentSlug = (..._args) => null;
+var validateSession = (..._args) => null;
+
+// server/routes/_helpers.ts
+async function safeJson(c) {
+  try {
+    return await c.req.json();
+  } catch {
+    return null;
+  }
+}
+async function resolveCacheKey(c) {
+  const raw2 = await resolveRawSessionKey(c);
+  if (!raw2) return { fingerprint: "", signedSessionToken: "" };
+  return { fingerprint: fingerprintSessionKey(raw2), signedSessionToken: raw2 };
+}
+async function resolveRawSessionKey(c) {
+  const fromQuery = c.req.query("session_key");
+  if (fromQuery) return fromQuery;
+  const contentType = c.req.header("content-type") ?? "";
+  if (contentType.includes("application/json")) {
+    try {
+      const body = await c.req.json();
+      if (body && typeof body.session_key === "string" && body.session_key) {
+        return body.session_key;
+      }
+    } catch {
+    }
+  }
+  if (contentType.includes("multipart/form-data") || contentType.includes("application/x-www-form-urlencoded")) {
+    try {
+      const form = await c.req.formData();
+      const sk = form.get("session_key");
+      if (typeof sk === "string" && sk) return sk;
+    } catch {
+    }
+  }
+  return "";
+}
+var requireAdminSession = async (c, next) => {
+  const { fingerprint, signedSessionToken } = await resolveCacheKey(c);
+  if (!fingerprint) {
+    console.error(`[admin-auth] outcome=reject status=400 code=session-missing path=${c.req.path}`);
+    return c.json({ error: "session_key required", code: "session-missing" }, 400);
+  }
+  const result = validateSession(fingerprint, "admin", signedSessionToken);
+  if (!result.ok) {
+    const code = result.reason === "agent-type-mismatch" ? "session-not-registered" : result.reason;
+    const tail = fingerprint.slice(0, 8);
+    console.error(`[admin-auth] outcome=reject status=401 code=${code} path=${c.req.path} cacheKey=${tail}\u2026`);
+    return c.json({ error: "Invalid or expired admin session", code }, 401);
+  }
+  c.set("cacheKey", fingerprint);
+  c.set("signedSessionToken", signedSessionToken);
+  console.log(`[admin-auth] outcome=accept path=${c.req.path} cacheKey=${fingerprint.slice(0, 8)}\u2026`);
+  await next();
+};
+async function tryCookieBridgeForConversation(c, cacheKey2, conversationId) {
+  const path = c.req.path;
+  const sk8 = cacheKey2.slice(0, 8);
+  const cid8 = conversationId.slice(0, 8);
+  const client = resolveClientIp(
+    c.env?.incoming?.socket?.remoteAddress,
+    c.req.header("x-forwarded-for")
+  );
+  if (client.kind === "external") {
+    const cookieToken = parseCookieValue(c.req.header("cookie"), "__remote_session");
+    if (!cookieToken) {
+      console.error(`[session] cookie-bridge-rejected reason=no-cookie path=${path} cacheKey=${sk8}\u2026 conversationId=${cid8}\u2026`);
+      return { ok: false, reason: "no-cookie" };
+    }
+    const desc = describeRemoteSession(cookieToken);
+    if (!desc.present) {
+      console.error(`[session] cookie-bridge-rejected reason=cookie-invalid path=${path} cacheKey=${sk8}\u2026 conversationId=${cid8}\u2026`);
+      return { ok: false, reason: "cookie-invalid" };
+    }
+    if (desc.expired) {
+      console.error(`[session] cookie-bridge-rejected reason=cookie-expired path=${path} cacheKey=${sk8}\u2026 conversationId=${cid8}\u2026`);
+      return { ok: false, reason: "cookie-expired" };
+    }
+  }
+  const owner = await getConversationOwner(conversationId);
+  if (!owner) {
+    console.error(`[session] cookie-bridge-rejected reason=conversation-not-found path=${path} cacheKey=${sk8}\u2026 conversationId=${cid8}\u2026`);
+    return { ok: false, reason: "conversation-not-found" };
+  }
+  const deviceAccount = resolveAccount();
+  if (!deviceAccount || owner.accountId !== deviceAccount.accountId) {
+    console.error(`[session] cookie-bridge-rejected reason=account-mismatch path=${path} cacheKey=${sk8}\u2026 conversationId=${cid8}\u2026 conversationAccountId=${owner.accountId.slice(0, 8)}\u2026 deviceAccountId=${(deviceAccount?.accountId ?? "none").slice(0, 8)}\u2026`);
+    return { ok: false, reason: "account-mismatch" };
+  }
+  registerSession(cacheKey2, "admin", owner.accountId, void 0, owner.userId ?? void 0);
+  console.log(`[session] cookie-bridge accountId=${owner.accountId.slice(0, 8)}\u2026 cacheKey=${sk8}\u2026 conversationId=${cid8}\u2026 path=${path}`);
+  return { ok: true };
+}
+function requireAdminCookie(isPublicHost) {
+  return async (c, next) => {
+    const host = (c.req.header("host") ?? "").split(":")[0];
+    const decision = canAccessAdmin({
+      host,
+      remoteAddress: c.env?.incoming?.socket?.remoteAddress,
+      xForwardedFor: c.req.header("x-forwarded-for"),
+      cookieHeader: c.req.header("cookie"),
+      isPublicHost
+    });
+    if (decision.allow) {
+      await next();
+      return;
+    }
+    if (decision.reason === "public-host") {
+      return c.json({ error: "Not found" }, 404);
+    }
+    const clientIp = c.var.clientIp ?? "unknown";
+    console.error(`[admin-cookie] reject reason=${decision.reason} ip=${clientIp} path=${c.req.path}`);
+    return c.json({ error: "Unauthorized" }, 401);
+  };
+}
+var clientIpMiddleware = async (c, next) => {
+  const client = resolveClientIp(
+    c.env?.incoming?.socket?.remoteAddress,
+    c.req.header("x-forwarded-for")
+  );
+  c.set("clientIp", client.ip);
+  await next();
+};
+
+// server/lib/action-runner.ts
+import { spawn } from "child_process";
+import { createReadStream, existsSync as existsSync3, mkdirSync as mkdirSync3, readdirSync, statSync, unlinkSync, watch } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join2, resolve as resolve3 } from "path";
+import { readFileSync as readFileSync3 } from "fs";
+import { setTimeout as delay } from "timers/promises";
+function loadBrandInfo() {
+  const platformRoot2 = process.env.MAXY_PLATFORM_ROOT ?? resolve3(process.cwd(), "..");
+  const brandPath = resolve3(platformRoot2, "config", "brand.json");
+  try {
+    const parsed = JSON.parse(readFileSync3(brandPath, "utf-8"));
+    const hostname = typeof parsed.hostname === "string" && parsed.hostname ? parsed.hostname : "maxy";
+    const configDir = typeof parsed.configDir === "string" && parsed.configDir ? parsed.configDir : ".maxy";
+    return { hostname, configDir };
+  } catch {
+    return { hostname: "maxy", configDir: ".maxy" };
+  }
+}
+function actionLogDir() {
+  const { configDir } = loadBrandInfo();
+  return join2(homedir2(), configDir, "logs", "actions");
+}
+function actionLogPath(actionId) {
+  return join2(actionLogDir(), `${actionId}.log`);
+}
+var WHITELIST = {
+  upgrade: {
+    build: ({ sudoPassword }) => {
+      const { hostname } = loadBrandInfo();
+      const pkg = `@rubytech/create-${hostname}`;
+      const cmd = [
+        // prime: read pw from stdin, silently cache
+        'printf %s "$SUDO_PASSWORD"',
+        "|",
+        "sudo -S -v 2>/dev/null",
+        "&&",
+        // run installer — it will re-prompt only if the cache expires
+        `npx -y ${pkg}@latest`
+      ].join(" ");
+      return {
+        argv: ["bash", "-c", cmd],
+        env: sudoPassword ? { SUDO_PASSWORD: sudoPassword } : void 0
+      };
+    }
+  },
+  "cloudflare-setup": {
+    build: ({ positional, streamLogPath, accountDir, tunnelId, tunnelName }) => {
+      if (!positional || positional.length < 3) {
+        throw new Error("cloudflare-setup requires [brand, port, ...hostnames]");
+      }
+      if (!accountDir) {
+        throw new Error("cloudflare-setup requires accountDir");
+      }
+      const idSet = typeof tunnelId === "string" && tunnelId.length > 0;
+      const nameSet = typeof tunnelName === "string" && tunnelName.length > 0;
+      if (idSet && nameSet) {
+        throw new Error("cloudflare-setup: tunnelId and tunnelName are mutually exclusive \u2014 pass exactly one");
+      }
+      if (!idSet && !nameSet) {
+        throw new Error("cloudflare-setup: requires tunnelId (operator-selected) OR tunnelName (operator-created)");
+      }
+      const scriptPath = join2(homedir2(), "setup-tunnel.sh");
+      if (!existsSync3(scriptPath)) {
+        throw new Error(
+          `cloudflare-setup: ~/setup-tunnel.sh not found. Re-run the installer to repair the symlink.`
+        );
+      }
+      const platformRoot2 = process.env.MAXY_PLATFORM_ROOT ?? resolve3(process.cwd(), "..");
+      return {
+        argv: [scriptPath, ...positional],
+        env: {
+          MAXY_PLATFORM_ROOT: platformRoot2,
+          ...streamLogPath ? { STREAM_LOG_PATH: streamLogPath } : {},
+          ACCOUNT_DIR: accountDir,
+          ...idSet ? { TUNNEL_ID: tunnelId } : {},
+          ...nameSet ? { TUNNEL_NAME: tunnelName } : {}
+        }
+      };
+    },
+    reconcileFromLog: reconcileCloudflareSetupFromLog
+  }
+};
+var ARMING_LINE_RE = /\bstep=service-restart-armed\b[^\n]*\bexit=0\b/;
+var DONE_LINE_RE = /\bstep=done\b/;
+var ERROR_LINE_RE = /\bresult=error\b/;
+function reconcileCloudflareSetupFromLog(lines) {
+  let hasArming = false;
+  let hasDone = false;
+  let hasError = false;
+  for (const line of lines) {
+    if (!hasArming && ARMING_LINE_RE.test(line)) hasArming = true;
+    if (!hasDone && DONE_LINE_RE.test(line)) hasDone = true;
+    if (!hasError && ERROR_LINE_RE.test(line)) hasError = true;
+  }
+  if (hasDone && hasArming) return { kind: "succeeded", code: 0 };
+  if (hasError) return { kind: "failed", code: 1 };
+  if (hasArming && !hasDone) return { kind: "restart-in-progress", code: null };
+  return null;
+}
+function isKnownAction(name) {
+  return Object.prototype.hasOwnProperty.call(WHITELIST, name);
+}
+function generateActionId(name) {
+  const ts = Date.now().toString(36);
+  const nonce = Math.floor(Math.random() * 4294967295).toString(16).padStart(8, "0");
+  return `${name}-${ts}-${nonce}`;
+}
+function actionNameFromId(actionId) {
+  for (const name of Object.keys(WHITELIST)) {
+    if (actionId.startsWith(`${name}-`)) return name;
+  }
+  return "unknown";
+}
+function cleanupStaleLogs() {
+  const dir = actionLogDir();
+  if (!existsSync3(dir)) return;
+  const cutoff = Date.now() - 7 * 24 * 60 * 60 * 1e3;
+  for (const entry of readdirSync(dir)) {
+    const full = join2(dir, entry);
+    try {
+      const st = statSync(full);
+      if (st.isFile() && st.mtimeMs < cutoff) unlinkSync(full);
+    } catch {
+    }
+  }
+}
+async function isActionActive(actionName) {
+  return new Promise((resolveP) => {
+    const proc = spawn(
+      "systemctl",
+      ["--user", "list-units", "--no-legend", "--state=active", `maxy-action-${actionName}-*`],
+      { stdio: ["ignore", "pipe", "pipe"] }
+    );
+    let out = "";
+    proc.stdout.on("data", (chunk) => {
+      out += chunk.toString();
+    });
+    proc.on("close", () => resolveP(out.trim().length > 0));
+    proc.on("error", () => resolveP(false));
+  });
+}
+function buildSystemdArgs(name, args, actionId, logPath) {
+  const unit = `maxy-action-${actionId}`;
+  const built = WHITELIST[name].build(args);
+  const systemdArgs = [
+    "--user",
+    `--unit=${unit}`,
+    "--collect",
+    "--property=RemainAfterExit=false",
+    `--property=StandardOutput=append:${logPath}`,
+    `--property=StandardError=append:${logPath}`,
+    `--description=Maxy action ${name} (${actionId})`
+  ];
+  if (built.env) {
+    for (const [k, v] of Object.entries(built.env)) {
+      systemdArgs.push(`--setenv=${k}=${v}`);
+    }
+  }
+  systemdArgs.push("--", ...built.argv);
+  return systemdArgs;
+}
+async function launchAction(name, args) {
+  const actionId = generateActionId(name);
+  const dir = actionLogDir();
+  mkdirSync3(dir, { recursive: true });
+  cleanupStaleLogs();
+  const logPath = actionLogPath(actionId);
+  const unit = `maxy-action-${actionId}`;
+  const systemdArgs = buildSystemdArgs(name, args, actionId, logPath);
+  await new Promise((resolveP, rejectP) => {
+    const proc = spawn("systemd-run", systemdArgs, { stdio: ["ignore", "pipe", "pipe"] });
+    let stderr = "";
+    proc.stderr.on("data", (chunk) => {
+      stderr += chunk.toString();
+    });
+    proc.on("close", (code) => {
+      if (code === 0) resolveP();
+      else rejectP(new Error(`systemd-run exited ${code}: ${stderr.trim().slice(0, 400)}`));
+    });
+    proc.on("error", rejectP);
+  });
+  console.log(`[action-runner] launched action=${name} id=${actionId} unit=${unit} log=${logPath}`);
+  return { actionId, unit, logPath };
+}
+function parseUnitShow(out) {
+  const kv = {};
+  for (const line of out.split("\n")) {
+    const eq = line.indexOf("=");
+    if (eq > 0) kv[line.slice(0, eq)] = line.slice(eq + 1);
+  }
+  const loadState = kv.LoadState ?? "";
+  if (loadState !== "loaded" || !kv.ActiveState) {
+    return { status: null, loadState };
+  }
+  return {
+    status: {
+      activeState: kv.ActiveState,
+      subState: kv.SubState ?? "",
+      mainPid: kv.MainPID ? Number(kv.MainPID) || null : null,
+      execMainStatus: kv.ExecMainStatus ? Number(kv.ExecMainStatus) : null,
+      execMainSignal: null
+      // systemd reports signal in SIGNAL (SIGTERM etc.), deferred — code is enough for our contract
+    },
+    loadState
+  };
+}
+async function showUnit(unit) {
+  return new Promise((resolveP) => {
+    const proc = spawn(
+      "systemctl",
+      ["--user", "show", unit, "--property=ActiveState,SubState,MainPID,ExecMainStatus,ExecMainCode,LoadState"],
+      { stdio: ["ignore", "pipe", "pipe"] }
+    );
+    let out = "";
+    proc.stdout.on("data", (chunk) => {
+      out += chunk.toString();
+    });
+    proc.on("close", () => resolveP(parseUnitShow(out)));
+    proc.on("error", () => resolveP({ status: null, loadState: "error" }));
+  });
+}
+async function getUnitStatus(unit) {
+  return (await showUnit(unit)).status;
+}
+var HEARTBEAT_INTERVAL_MS = 5e3;
+var exitEmittedFor = /* @__PURE__ */ new Set();
+var PHASE_BRACKETED = /\[(\d+)\/(\d+)\]/;
+var PHASE_STREAM_LOG = /step=([a-z0-9-]+)/;
+function extractPhase(text) {
+  const m1 = text.match(PHASE_BRACKETED);
+  if (m1) return m1[0];
+  const m2 = text.match(PHASE_STREAM_LOG);
+  if (m2) return m2[1];
+  return null;
+}
+function readLogTailLines(path, tailLines) {
+  if (!existsSync3(path)) return [];
+  let raw2;
+  try {
+    raw2 = readFileSync3(path, "utf-8");
+  } catch {
+    return [];
+  }
+  const all = raw2.split("\n");
+  if (all.length <= tailLines) return all;
+  return all.slice(all.length - tailLines);
+}
+async function* streamActionEvents(opts) {
+  const { actionId, unit, signal } = opts;
+  const logPath = actionLogPath(actionId);
+  const startedAt = Date.now();
+  let lastLineAt = startedAt;
+  let lastPhase = null;
+  let byteOffset = opts.fromByteOffset ?? 0;
+  const actionName = actionNameFromId(actionId);
+  const reconcileFromLog = isKnownAction(actionName) ? WHITELIST[actionName].reconcileFromLog : void 0;
+  if (existsSync3(logPath)) {
+    const snapshot = statSync(logPath).size;
+    if (byteOffset < snapshot) {
+      for await (const ev of readLogLines(logPath, byteOffset, snapshot)) {
+        const phase = extractPhase(ev.text);
+        if (phase) lastPhase = phase;
+        lastLineAt = ev.ts;
+        byteOffset = ev.byteOffset;
+        yield ev;
+        if (signal.aborted) return;
+      }
+    }
+  }
+  if (exitEmittedFor.has(actionId)) {
+    return;
+  }
+  let watching = true;
+  let hbTimer = null;
+  const queue = [];
+  let resolveNext = null;
+  function push(ev) {
+    queue.push(ev);
+    if (resolveNext) {
+      const r = resolveNext;
+      resolveNext = null;
+      r();
+    }
+  }
+  const watcher = existsSync3(logPath) ? watch(logPath, async () => {
+    if (!watching) return;
+    try {
+      const size = statSync(logPath).size;
+      if (size <= byteOffset) return;
+      for await (const ev of readLogLines(logPath, byteOffset, size)) {
+        const phase = extractPhase(ev.text);
+        if (phase) lastPhase = phase;
+        lastLineAt = ev.ts;
+        byteOffset = ev.byteOffset;
+        push(ev);
+      }
+    } catch (err) {
+      console.error(`[action-runner] watcher error action=${actionId}: ${err}`);
+    }
+  }) : null;
+  hbTimer = setInterval(async () => {
+    const probe = await showUnit(unit);
+    const status = probe.status;
+    const now = Date.now();
+    push({
+      type: "heartbeat",
+      ts: now,
+      elapsed_since_last_line_ms: now - lastLineAt,
+      systemd_state: status ? status.activeState : "unknown",
+      pid: status ? status.mainPid : null,
+      last_phase: lastPhase
+    });
+    if (!status) {
+      if (exitEmittedFor.has(actionId)) {
+        watching = false;
+        return;
+      }
+      exitEmittedFor.add(actionId);
+      console.log(`[action-runner] unit-not-loaded action=${actionNameFromId(actionId)} id=${actionId} loadState=${probe.loadState || "empty"}`);
+      const reconciled = reconcileFromLog ? reconcileFromLog(readLogTailLines(logPath, 200)) : null;
+      const reconcileMs = Date.now() - startedAt;
+      if (reconciled) {
+        console.log(
+          `[action-runner] reconcile actionId=${actionId} result=${reconciled.kind} source=persisted-log ms=${reconcileMs}`
+        );
+        push({
+          type: "exit",
+          ts: Date.now(),
+          code: reconciled.code,
+          signal: null,
+          duration_ms: reconcileMs,
+          source: "persisted-log",
+          ...reconciled.kind === "restart-in-progress" ? { kind: "restart-in-progress" } : {}
+        });
+      } else {
+        console.log(
+          `[action-runner] reconcile actionId=${actionId} result=unresolved source=persisted-log ms=${reconcileMs}`
+        );
+        push({
+          type: "exit",
+          ts: Date.now(),
+          code: null,
+          signal: null,
+          duration_ms: reconcileMs,
+          source: "persisted-log"
+        });
+      }
+      watching = false;
+      return;
+    }
+    if (status.activeState !== "active" && status.activeState !== "activating") {
+      if (exitEmittedFor.has(actionId)) {
+        watching = false;
+        return;
+      }
+      exitEmittedFor.add(actionId);
+      const finalStatus = await getUnitStatus(unit);
+      if (finalStatus?.execMainStatus == null && reconcileFromLog) {
+        const reconciled = reconcileFromLog(readLogTailLines(logPath, 200));
+        const reconcileMs = Date.now() - startedAt;
+        if (reconciled) {
+          console.log(
+            `[action-runner] reconcile actionId=${actionId} result=${reconciled.kind} source=persisted-log ms=${reconcileMs}`
+          );
+          push({
+            type: "exit",
+            ts: Date.now(),
+            code: reconciled.code,
+            signal: null,
+            duration_ms: reconcileMs,
+            source: "persisted-log",
+            ...reconciled.kind === "restart-in-progress" ? { kind: "restart-in-progress" } : {}
+          });
+          watching = false;
+          return;
+        }
+      }
+      const ms = Date.now() - startedAt;
+      const source = finalStatus?.execMainStatus != null ? "systemd" : "persisted-log";
+      const result = finalStatus?.execMainStatus === 0 ? "succeeded" : finalStatus?.execMainStatus != null ? "failed" : "unresolved";
+      console.log(
+        `[action-runner] reconcile actionId=${actionId} result=${result} source=${source} ms=${ms}`
+      );
+      push({
+        type: "exit",
+        ts: Date.now(),
+        code: finalStatus?.execMainStatus ?? null,
+        signal: null,
+        duration_ms: ms,
+        source
+      });
+      watching = false;
+    }
+  }, HEARTBEAT_INTERVAL_MS);
+  try {
+    while (watching && !signal.aborted) {
+      if (queue.length === 0) {
+        await new Promise((r) => {
+          resolveNext = r;
+        });
+      }
+      while (queue.length > 0) {
+        const ev = queue.shift();
+        yield ev;
+        if (ev.type === "exit") {
+          watching = false;
+          break;
+        }
+      }
+    }
+  } finally {
+    if (hbTimer) clearInterval(hbTimer);
+    watcher?.close();
+  }
+}
+async function* readLogLines(path, fromOffset, toOffset) {
+  const stream = createReadStream(path, { start: fromOffset, end: toOffset - 1, encoding: "utf-8" });
+  let buffer = "";
+  let offset = fromOffset;
+  for await (const chunk of stream) {
+    buffer += chunk;
+    let nl;
+    while ((nl = buffer.indexOf("\n")) !== -1) {
+      const text = buffer.slice(0, nl);
+      offset += Buffer.byteLength(text, "utf-8") + 1;
+      buffer = buffer.slice(nl + 1);
+      yield { type: "line", ts: Date.now(), stream: "stdout", text, byteOffset: offset };
+    }
+  }
+}
+var RATE_LIMIT_WINDOW_MS = 6e4;
+var RATE_LIMIT_MAX_ATTEMPTS = 5;
+var rateLimitBuckets = /* @__PURE__ */ new Map();
+function rateLimitCheck(ip) {
+  const now = Date.now();
+  const bucket = rateLimitBuckets.get(ip);
+  if (!bucket || now - bucket.windowStart > RATE_LIMIT_WINDOW_MS) {
+    rateLimitBuckets.set(ip, { count: 1, windowStart: now });
+    return "ok";
+  }
+  bucket.count += 1;
+  if (bucket.count > RATE_LIMIT_MAX_ATTEMPTS) return "limited";
+  return "ok";
+}
+async function primeSudo(password, clientIp) {
+  if (!password) return "invalid";
+  if (rateLimitCheck(clientIp) === "limited") return "limited";
+  return new Promise((resolveP) => {
+    const proc = spawn("sudo", ["-S", "-v"], { stdio: ["pipe", "ignore", "pipe"] });
+    let stderr = "";
+    proc.stderr.on("data", (chunk) => {
+      stderr += chunk.toString();
+    });
+    proc.on("close", (code) => {
+      if (code === 0) return resolveP("ok");
+      if (/incorrect password|authentication failure/i.test(stderr)) return resolveP("invalid");
+      console.error(`[action-runner] sudo-prime failed code=${code} stderr=${stderr.slice(0, 200)}`);
+      resolveP("error");
+    });
+    proc.on("error", (err) => {
+      console.error(`[action-runner] sudo-prime spawn error: ${err}`);
+      resolveP("error");
+    });
+    proc.stdin.write(`${password}
+`);
+    proc.stdin.end();
+  });
+}
+async function waitForExit(unit, timeoutMs = 10 * 60 * 1e3) {
+  const deadline = Date.now() + timeoutMs;
+  while (Date.now() < deadline) {
+    const status = await getUnitStatus(unit);
+    if (!status) return null;
+    if (status.activeState !== "active" && status.activeState !== "activating") return status;
+    await delay(500);
+  }
+  return null;
+}
+
+export {
+  Hono2 as Hono,
+  getRequestListener,
+  serve,
+  MAXY_DIR,
+  BRAND_NAME,
+  COMMERCIAL_MODE,
+  VNC_DISPLAY,
+  RFB_PORT,
+  WEBSOCKIFY_PORT,
+  CDP_PORT,
+  CHROMIUM_PROFILE_DIR,
+  USERS_FILE,
+  LOG_DIR,
+  BIN_DIR,
+  TELEGRAM_WEBHOOK_SECRET_FILE,
+  TELEGRAM_ADMIN_WEBHOOK_SECRET_FILE,
+  CLAUDE_CREDENTIALS_FILE,
+  vncLog,
+  newCorrId,
+  sanitizeClientCorrId,
+  httpLog,
+  websockifyLog,
+  browserViewerLog,
+  validatePasswordStrength,
+  isPasswordValid,
+  hashPassword,
+  verifyPassword,
+  isRemoteAuthConfigured,
+  setRemotePassword,
+  verifyRemotePassword,
+  createRemoteSession,
+  describeRemoteSession,
+  resolveClientIp,
+  checkRateLimit,
+  recordFailedAttempt,
+  clearRateLimit,
+  renderLoginPage,
+  canAccessAdmin,
+  parseCookieValue,
+  agentLogStream,
+  clearSessionHistory,
+  compactSession,
+  completeGrantSetup,
+  findMissingPlugins,
+  fingerprintSessionKey,
+  getAccountIdForSession,
+  getAgentNameForSession,
+  getConversationIdForSession,
+  getDefaultAccountId,
+  getGrantForSession,
+  getGroupSlugForSession,
+  getRoleForSession,
+  getSessionMessages,
+  getStreamLogHandle,
+  getUserIdForSession,
+  getUserNameForSession,
+  getVisitorIdForSession,
+  hasStubAccountDir,
+  invokeAgent,
+  listAdminSessionsInProgress,
+  mintAdminSessionToken,
+  registerGrantSession,
+  registerResumedSession,
+  registerSession,
+  resolveAccount,
+  resolveAgentConfig,
+  resolveDefaultAgentSlug,
+  resolveUserAccounts,
+  setAgentSessionId,
+  setConversationIdForSession,
+  setGroupContextForSession,
+  setWantsPriorConversation,
+  sigtermFlushStreamLogs,
+  streamLogPathFor,
+  unregisterSession,
+  validateAgentSlug,
+  validateSession,
+  safeJson,
+  requireAdminSession,
+  tryCookieBridgeForConversation,
+  requireAdminCookie,
+  clientIpMiddleware,
+  actionLogPath,
+  isKnownAction,
+  isActionActive,
+  launchAction,
+  streamActionEvents,
+  primeSudo,
+  waitForExit
+};