@rubytech/create-maxy-code 0.1.571 → 0.1.573

package/payload/server/chunk-6DQCFP2E.js

@@ -0,0 +1,4868 @@
+import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
+import {
+  BRAND_NAME,
+  BUNDLE_ALLOWLIST,
+  BUNDLE_MODE,
+  LOG_DIR,
+  MAXY_DIR,
+  PLATFORM_ROOT,
+  REMOTE_PASSWORD_FILE,
+  REMOTE_SESSION_SECRET_FILE,
+  USERS_FILE,
+  getConversationOwner,
+  init_account,
+  init_loop_registry,
+  init_neo4j_store,
+  init_paths,
+  isValidAccountId,
+  registerLoop
+} from "./chunk-PGGGWUBM.js";
+import {
+  __esm
+} from "./chunk-KVR2FT6O.js";
+
+// node_modules/hono/dist/compose.js
+var compose;
+var init_compose = __esm({
+  "node_modules/hono/dist/compose.js"() {
+    "use strict";
+    compose = (middleware, onError, onNotFound) => {
+      return (context, next) => {
+        let index = -1;
+        return dispatch(0);
+        async function dispatch(i) {
+          if (i <= index) {
+            throw new Error("next() called multiple times");
+          }
+          index = i;
+          let res;
+          let isError = false;
+          let handler;
+          if (middleware[i]) {
+            handler = middleware[i][0][0];
+            context.req.routeIndex = i;
+          } else {
+            handler = i === middleware.length && next || void 0;
+          }
+          if (handler) {
+            try {
+              res = await handler(context, () => dispatch(i + 1));
+            } catch (err) {
+              if (err instanceof Error && onError) {
+                context.error = err;
+                res = await onError(err, context);
+                isError = true;
+              } else {
+                throw err;
+              }
+            }
+          } else {
+            if (context.finalized === false && onNotFound) {
+              res = await onNotFound(context);
+            }
+          }
+          if (res && (context.finalized === false || isError)) {
+            context.res = res;
+          }
+          return context;
+        }
+      };
+    };
+  }
+});
+
+// node_modules/hono/dist/http-exception.js
+var HTTPException;
+var init_http_exception = __esm({
+  "node_modules/hono/dist/http-exception.js"() {
+    "use strict";
+    HTTPException = class extends Error {
+      res;
+      status;
+      /**
+       * Creates an instance of `HTTPException`.
+       * @param status - HTTP status code for the exception. Defaults to 500.
+       * @param options - Additional options for the exception.
+       */
+      constructor(status = 500, options) {
+        super(options?.message, { cause: options?.cause });
+        this.res = options?.res;
+        this.status = status;
+      }
+      /**
+       * Returns the response object associated with the exception.
+       * If a response object is not provided, a new response is created with the error message and status code.
+       * @returns The response object.
+       */
+      getResponse() {
+        if (this.res) {
+          const newResponse = new Response(this.res.body, {
+            status: this.status,
+            headers: this.res.headers
+          });
+          return newResponse;
+        }
+        return new Response(this.message, {
+          status: this.status
+        });
+      }
+    };
+  }
+});
+
+// node_modules/hono/dist/request/constants.js
+var GET_MATCH_RESULT;
+var init_constants = __esm({
+  "node_modules/hono/dist/request/constants.js"() {
+    "use strict";
+    GET_MATCH_RESULT = /* @__PURE__ */ Symbol();
+  }
+});
+
+// node_modules/hono/dist/utils/body.js
+async function parseFormData(request, options) {
+  const formData = await request.formData();
+  if (formData) {
+    return convertFormDataToBodyData(formData, options);
+  }
+  return {};
+}
+function convertFormDataToBodyData(formData, options) {
+  const form = /* @__PURE__ */ Object.create(null);
+  formData.forEach((value, key) => {
+    const shouldParseAllValues = options.all || key.endsWith("[]");
+    if (!shouldParseAllValues) {
+      form[key] = value;
+    } else {
+      handleParsingAllValues(form, key, value);
+    }
+  });
+  if (options.dot) {
+    Object.entries(form).forEach(([key, value]) => {
+      const shouldParseDotValues = key.includes(".");
+      if (shouldParseDotValues) {
+        handleParsingNestedValues(form, key, value);
+        delete form[key];
+      }
+    });
+  }
+  return form;
+}
+var parseBody, handleParsingAllValues, handleParsingNestedValues;
+var init_body = __esm({
+  "node_modules/hono/dist/utils/body.js"() {
+    "use strict";
+    init_request();
+    parseBody = async (request, options = /* @__PURE__ */ Object.create(null)) => {
+      const { all = false, dot = false } = options;
+      const headers = request instanceof HonoRequest ? request.raw.headers : request.headers;
+      const contentType = headers.get("Content-Type");
+      if (contentType?.startsWith("multipart/form-data") || contentType?.startsWith("application/x-www-form-urlencoded")) {
+        return parseFormData(request, { all, dot });
+      }
+      return {};
+    };
+    handleParsingAllValues = (form, key, value) => {
+      if (form[key] !== void 0) {
+        if (Array.isArray(form[key])) {
+          ;
+          form[key].push(value);
+        } else {
+          form[key] = [form[key], value];
+        }
+      } else {
+        if (!key.endsWith("[]")) {
+          form[key] = value;
+        } else {
+          form[key] = [value];
+        }
+      }
+    };
+    handleParsingNestedValues = (form, key, value) => {
+      if (/(?:^|\.)__proto__\./.test(key)) {
+        return;
+      }
+      let nestedForm = form;
+      const keys = key.split(".");
+      keys.forEach((key2, index) => {
+        if (index === keys.length - 1) {
+          nestedForm[key2] = value;
+        } else {
+          if (!nestedForm[key2] || typeof nestedForm[key2] !== "object" || Array.isArray(nestedForm[key2]) || nestedForm[key2] instanceof File) {
+            nestedForm[key2] = /* @__PURE__ */ Object.create(null);
+          }
+          nestedForm = nestedForm[key2];
+        }
+      });
+    };
+  }
+});
+
+// node_modules/hono/dist/utils/url.js
+var splitPath, splitRoutingPath, extractGroupsFromPath, replaceGroupMarks, patternCache, getPattern, tryDecode, tryDecodeURI, getPath, getPathNoStrict, mergePath, checkOptionalParameter, _decodeURI, _getQueryParam, getQueryParam, getQueryParams, decodeURIComponent_;
+var init_url = __esm({
+  "node_modules/hono/dist/utils/url.js"() {
+    "use strict";
+    splitPath = (path) => {
+      const paths = path.split("/");
+      if (paths[0] === "") {
+        paths.shift();
+      }
+      return paths;
+    };
+    splitRoutingPath = (routePath) => {
+      const { groups, path } = extractGroupsFromPath(routePath);
+      const paths = splitPath(path);
+      return replaceGroupMarks(paths, groups);
+    };
+    extractGroupsFromPath = (path) => {
+      const groups = [];
+      path = path.replace(/\{[^}]+\}/g, (match2, index) => {
+        const mark = `@${index}`;
+        groups.push([mark, match2]);
+        return mark;
+      });
+      return { groups, path };
+    };
+    replaceGroupMarks = (paths, groups) => {
+      for (let i = groups.length - 1; i >= 0; i--) {
+        const [mark] = groups[i];
+        for (let j = paths.length - 1; j >= 0; j--) {
+          if (paths[j].includes(mark)) {
+            paths[j] = paths[j].replace(mark, groups[i][1]);
+            break;
+          }
+        }
+      }
+      return paths;
+    };
+    patternCache = {};
+    getPattern = (label, next) => {
+      if (label === "*") {
+        return "*";
+      }
+      const match2 = label.match(/^\:([^\{\}]+)(?:\{(.+)\})?$/);
+      if (match2) {
+        const cacheKey2 = `${label}#${next}`;
+        if (!patternCache[cacheKey2]) {
+          if (match2[2]) {
+            patternCache[cacheKey2] = next && next[0] !== ":" && next[0] !== "*" ? [cacheKey2, match2[1], new RegExp(`^${match2[2]}(?=/${next})`)] : [label, match2[1], new RegExp(`^${match2[2]}$`)];
+          } else {
+            patternCache[cacheKey2] = [label, match2[1], true];
+          }
+        }
+        return patternCache[cacheKey2];
+      }
+      return null;
+    };
+    tryDecode = (str, decoder) => {
+      try {
+        return decoder(str);
+      } catch {
+        return str.replace(/(?:%[0-9A-Fa-f]{2})+/g, (match2) => {
+          try {
+            return decoder(match2);
+          } catch {
+            return match2;
+          }
+        });
+      }
+    };
+    tryDecodeURI = (str) => tryDecode(str, decodeURI);
+    getPath = (request) => {
+      const url = request.url;
+      const start = url.indexOf("/", url.indexOf(":") + 4);
+      let i = start;
+      for (; i < url.length; i++) {
+        const charCode = url.charCodeAt(i);
+        if (charCode === 37) {
+          const queryIndex = url.indexOf("?", i);
+          const hashIndex = url.indexOf("#", i);
+          const end = queryIndex === -1 ? hashIndex === -1 ? void 0 : hashIndex : hashIndex === -1 ? queryIndex : Math.min(queryIndex, hashIndex);
+          const path = url.slice(start, end);
+          return tryDecodeURI(path.includes("%25") ? path.replace(/%25/g, "%2525") : path);
+        } else if (charCode === 63 || charCode === 35) {
+          break;
+        }
+      }
+      return url.slice(start, i);
+    };
+    getPathNoStrict = (request) => {
+      const result = getPath(request);
+      return result.length > 1 && result.at(-1) === "/" ? result.slice(0, -1) : result;
+    };
+    mergePath = (base, sub, ...rest) => {
+      if (rest.length) {
+        sub = mergePath(sub, ...rest);
+      }
+      return `${base?.[0] === "/" ? "" : "/"}${base}${sub === "/" ? "" : `${base?.at(-1) === "/" ? "" : "/"}${sub?.[0] === "/" ? sub.slice(1) : sub}`}`;
+    };
+    checkOptionalParameter = (path) => {
+      if (path.charCodeAt(path.length - 1) !== 63 || !path.includes(":")) {
+        return null;
+      }
+      const segments = path.split("/");
+      const results = [];
+      let basePath = "";
+      segments.forEach((segment) => {
+        if (segment !== "" && !/\:/.test(segment)) {
+          basePath += "/" + segment;
+        } else if (/\:/.test(segment)) {
+          if (/\?/.test(segment)) {
+            if (results.length === 0 && basePath === "") {
+              results.push("/");
+            } else {
+              results.push(basePath);
+            }
+            const optionalSegment = segment.replace("?", "");
+            basePath += "/" + optionalSegment;
+            results.push(basePath);
+          } else {
+            basePath += "/" + segment;
+          }
+        }
+      });
+      return results.filter((v, i, a) => a.indexOf(v) === i);
+    };
+    _decodeURI = (value) => {
+      if (!/[%+]/.test(value)) {
+        return value;
+      }
+      if (value.indexOf("+") !== -1) {
+        value = value.replace(/\+/g, " ");
+      }
+      return value.indexOf("%") !== -1 ? tryDecode(value, decodeURIComponent_) : value;
+    };
+    _getQueryParam = (url, key, multiple) => {
+      let encoded;
+      if (!multiple && key && !/[%+]/.test(key)) {
+        let keyIndex2 = url.indexOf("?", 8);
+        if (keyIndex2 === -1) {
+          return void 0;
+        }
+        if (!url.startsWith(key, keyIndex2 + 1)) {
+          keyIndex2 = url.indexOf(`&${key}`, keyIndex2 + 1);
+        }
+        while (keyIndex2 !== -1) {
+          const trailingKeyCode = url.charCodeAt(keyIndex2 + key.length + 1);
+          if (trailingKeyCode === 61) {
+            const valueIndex = keyIndex2 + key.length + 2;
+            const endIndex = url.indexOf("&", valueIndex);
+            return _decodeURI(url.slice(valueIndex, endIndex === -1 ? void 0 : endIndex));
+          } else if (trailingKeyCode == 38 || isNaN(trailingKeyCode)) {
+            return "";
+          }
+          keyIndex2 = url.indexOf(`&${key}`, keyIndex2 + 1);
+        }
+        encoded = /[%+]/.test(url);
+        if (!encoded) {
+          return void 0;
+        }
+      }
+      const results = {};
+      encoded ??= /[%+]/.test(url);
+      let keyIndex = url.indexOf("?", 8);
+      while (keyIndex !== -1) {
+        const nextKeyIndex = url.indexOf("&", keyIndex + 1);
+        let valueIndex = url.indexOf("=", keyIndex);
+        if (valueIndex > nextKeyIndex && nextKeyIndex !== -1) {
+          valueIndex = -1;
+        }
+        let name = url.slice(
+          keyIndex + 1,
+          valueIndex === -1 ? nextKeyIndex === -1 ? void 0 : nextKeyIndex : valueIndex
+        );
+        if (encoded) {
+          name = _decodeURI(name);
+        }
+        keyIndex = nextKeyIndex;
+        if (name === "") {
+          continue;
+        }
+        let value;
+        if (valueIndex === -1) {
+          value = "";
+        } else {
+          value = url.slice(valueIndex + 1, nextKeyIndex === -1 ? void 0 : nextKeyIndex);
+          if (encoded) {
+            value = _decodeURI(value);
+          }
+        }
+        if (multiple) {
+          if (!(results[name] && Array.isArray(results[name]))) {
+            results[name] = [];
+          }
+          ;
+          results[name].push(value);
+        } else {
+          results[name] ??= value;
+        }
+      }
+      return key ? results[key] : results;
+    };
+    getQueryParam = _getQueryParam;
+    getQueryParams = (url, key) => {
+      return _getQueryParam(url, key, true);
+    };
+    decodeURIComponent_ = decodeURIComponent;
+  }
+});
+
+// node_modules/hono/dist/request.js
+var tryDecodeURIComponent, HonoRequest;
+var init_request = __esm({
+  "node_modules/hono/dist/request.js"() {
+    "use strict";
+    init_http_exception();
+    init_constants();
+    init_body();
+    init_url();
+    tryDecodeURIComponent = (str) => tryDecode(str, decodeURIComponent_);
+    HonoRequest = class {
+      /**
+       * `.raw` can get the raw Request object.
+       *
+       * @see {@link https://hono.dev/docs/api/request#raw}
+       *
+       * @example
+       * ```ts
+       * // For Cloudflare Workers
+       * app.post('/', async (c) => {
+       *   const metadata = c.req.raw.cf?.hostMetadata?
+       *   ...
+       * })
+       * ```
+       */
+      raw;
+      #validatedData;
+      // Short name of validatedData
+      #matchResult;
+      routeIndex = 0;
+      /**
+       * `.path` can get the pathname of the request.
+       *
+       * @see {@link https://hono.dev/docs/api/request#path}
+       *
+       * @example
+       * ```ts
+       * app.get('/about/me', (c) => {
+       *   const pathname = c.req.path // `/about/me`
+       * })
+       * ```
+       */
+      path;
+      bodyCache = {};
+      constructor(request, path = "/", matchResult = [[]]) {
+        this.raw = request;
+        this.path = path;
+        this.#matchResult = matchResult;
+        this.#validatedData = {};
+      }
+      param(key) {
+        return key ? this.#getDecodedParam(key) : this.#getAllDecodedParams();
+      }
+      #getDecodedParam(key) {
+        const paramKey = this.#matchResult[0][this.routeIndex][1][key];
+        const param = this.#getParamValue(paramKey);
+        return param && /\%/.test(param) ? tryDecodeURIComponent(param) : param;
+      }
+      #getAllDecodedParams() {
+        const decoded = {};
+        const keys = Object.keys(this.#matchResult[0][this.routeIndex][1]);
+        for (const key of keys) {
+          const value = this.#getParamValue(this.#matchResult[0][this.routeIndex][1][key]);
+          if (value !== void 0) {
+            decoded[key] = /\%/.test(value) ? tryDecodeURIComponent(value) : value;
+          }
+        }
+        return decoded;
+      }
+      #getParamValue(paramKey) {
+        return this.#matchResult[1] ? this.#matchResult[1][paramKey] : paramKey;
+      }
+      query(key) {
+        return getQueryParam(this.url, key);
+      }
+      queries(key) {
+        return getQueryParams(this.url, key);
+      }
+      header(name) {
+        if (name) {
+          return this.raw.headers.get(name) ?? void 0;
+        }
+        const headerData = {};
+        this.raw.headers.forEach((value, key) => {
+          headerData[key] = value;
+        });
+        return headerData;
+      }
+      async parseBody(options) {
+        return this.bodyCache.parsedBody ??= await parseBody(this, options);
+      }
+      #cachedBody = (key) => {
+        const { bodyCache, raw: raw2 } = this;
+        const cachedBody = bodyCache[key];
+        if (cachedBody) {
+          return cachedBody;
+        }
+        const anyCachedKey = Object.keys(bodyCache)[0];
+        if (anyCachedKey) {
+          return bodyCache[anyCachedKey].then((body) => {
+            if (anyCachedKey === "json") {
+              body = JSON.stringify(body);
+            }
+            return new Response(body)[key]();
+          });
+        }
+        return bodyCache[key] = raw2[key]();
+      };
+      /**
+       * `.json()` can parse Request body of type `application/json`
+       *
+       * @see {@link https://hono.dev/docs/api/request#json}
+       *
+       * @example
+       * ```ts
+       * app.post('/entry', async (c) => {
+       *   const body = await c.req.json()
+       * })
+       * ```
+       */
+      json() {
+        return this.#cachedBody("text").then((text) => JSON.parse(text));
+      }
+      /**
+       * `.text()` can parse Request body of type `text/plain`
+       *
+       * @see {@link https://hono.dev/docs/api/request#text}
+       *
+       * @example
+       * ```ts
+       * app.post('/entry', async (c) => {
+       *   const body = await c.req.text()
+       * })
+       * ```
+       */
+      text() {
+        return this.#cachedBody("text");
+      }
+      /**
+       * `.arrayBuffer()` parse Request body as an `ArrayBuffer`
+       *
+       * @see {@link https://hono.dev/docs/api/request#arraybuffer}
+       *
+       * @example
+       * ```ts
+       * app.post('/entry', async (c) => {
+       *   const body = await c.req.arrayBuffer()
+       * })
+       * ```
+       */
+      arrayBuffer() {
+        return this.#cachedBody("arrayBuffer");
+      }
+      /**
+       * Parses the request body as a `Blob`.
+       * @example
+       * ```ts
+       * app.post('/entry', async (c) => {
+       *   const body = await c.req.blob();
+       * });
+       * ```
+       * @see https://hono.dev/docs/api/request#blob
+       */
+      blob() {
+        return this.#cachedBody("blob");
+      }
+      /**
+       * Parses the request body as `FormData`.
+       * @example
+       * ```ts
+       * app.post('/entry', async (c) => {
+       *   const body = await c.req.formData();
+       * });
+       * ```
+       * @see https://hono.dev/docs/api/request#formdata
+       */
+      formData() {
+        return this.#cachedBody("formData");
+      }
+      /**
+       * Adds validated data to the request.
+       *
+       * @param target - The target of the validation.
+       * @param data - The validated data to add.
+       */
+      addValidatedData(target, data) {
+        this.#validatedData[target] = data;
+      }
+      valid(target) {
+        return this.#validatedData[target];
+      }
+      /**
+       * `.url()` can get the request url strings.
+       *
+       * @see {@link https://hono.dev/docs/api/request#url}
+       *
+       * @example
+       * ```ts
+       * app.get('/about/me', (c) => {
+       *   const url = c.req.url // `http://localhost:8787/about/me`
+       *   ...
+       * })
+       * ```
+       */
+      get url() {
+        return this.raw.url;
+      }
+      /**
+       * `.method()` can get the method name of the request.
+       *
+       * @see {@link https://hono.dev/docs/api/request#method}
+       *
+       * @example
+       * ```ts
+       * app.get('/about/me', (c) => {
+       *   const method = c.req.method // `GET`
+       * })
+       * ```
+       */
+      get method() {
+        return this.raw.method;
+      }
+      get [GET_MATCH_RESULT]() {
+        return this.#matchResult;
+      }
+      /**
+       * `.matchedRoutes()` can return a matched route in the handler
+       *
+       * @deprecated
+       *
+       * Use matchedRoutes helper defined in "hono/route" instead.
+       *
+       * @see {@link https://hono.dev/docs/api/request#matchedroutes}
+       *
+       * @example
+       * ```ts
+       * app.use('*', async function logger(c, next) {
+       *   await next()
+       *   c.req.matchedRoutes.forEach(({ handler, method, path }, i) => {
+       *     const name = handler.name || (handler.length < 2 ? '[handler]' : '[middleware]')
+       *     console.log(
+       *       method,
+       *       ' ',
+       *       path,
+       *       ' '.repeat(Math.max(10 - path.length, 0)),
+       *       name,
+       *       i === c.req.routeIndex ? '<- respond from here' : ''
+       *     )
+       *   })
+       * })
+       * ```
+       */
+      get matchedRoutes() {
+        return this.#matchResult[0].map(([[, route]]) => route);
+      }
+      /**
+       * `routePath()` can retrieve the path registered within the handler
+       *
+       * @deprecated
+       *
+       * Use routePath helper defined in "hono/route" instead.
+       *
+       * @see {@link https://hono.dev/docs/api/request#routepath}
+       *
+       * @example
+       * ```ts
+       * app.get('/posts/:id', (c) => {
+       *   return c.json({ path: c.req.routePath })
+       * })
+       * ```
+       */
+      get routePath() {
+        return this.#matchResult[0].map(([[, route]]) => route)[this.routeIndex].path;
+      }
+    };
+  }
+});
+
+// node_modules/hono/dist/utils/html.js
+var HtmlEscapedCallbackPhase, raw, resolveCallback;
+var init_html = __esm({
+  "node_modules/hono/dist/utils/html.js"() {
+    "use strict";
+    HtmlEscapedCallbackPhase = {
+      Stringify: 1,
+      BeforeStream: 2,
+      Stream: 3
+    };
+    raw = (value, callbacks) => {
+      const escapedString = new String(value);
+      escapedString.isEscaped = true;
+      escapedString.callbacks = callbacks;
+      return escapedString;
+    };
+    resolveCallback = async (str, phase, preserveCallbacks, context, buffer) => {
+      if (typeof str === "object" && !(str instanceof String)) {
+        if (!(str instanceof Promise)) {
+          str = str.toString();
+        }
+        if (str instanceof Promise) {
+          str = await str;
+        }
+      }
+      const callbacks = str.callbacks;
+      if (!callbacks?.length) {
+        return Promise.resolve(str);
+      }
+      if (buffer) {
+        buffer[0] += str;
+      } else {
+        buffer = [str];
+      }
+      const resStr = Promise.all(callbacks.map((c) => c({ phase, buffer, context }))).then(
+        (res) => Promise.all(
+          res.filter(Boolean).map((str2) => resolveCallback(str2, phase, false, context, buffer))
+        ).then(() => buffer[0])
+      );
+      if (preserveCallbacks) {
+        return raw(await resStr, callbacks);
+      } else {
+        return resStr;
+      }
+    };
+  }
+});
+
+// node_modules/hono/dist/context.js
+var TEXT_PLAIN, setDefaultContentType, createResponseInstance, Context;
+var init_context = __esm({
+  "node_modules/hono/dist/context.js"() {
+    "use strict";
+    init_request();
+    init_html();
+    TEXT_PLAIN = "text/plain; charset=UTF-8";
+    setDefaultContentType = (contentType, headers) => {
+      return {
+        "Content-Type": contentType,
+        ...headers
+      };
+    };
+    createResponseInstance = (body, init) => new Response(body, init);
+    Context = class {
+      #rawRequest;
+      #req;
+      /**
+       * `.env` can get bindings (environment variables, secrets, KV namespaces, D1 database, R2 bucket etc.) in Cloudflare Workers.
+       *
+       * @see {@link https://hono.dev/docs/api/context#env}
+       *
+       * @example
+       * ```ts
+       * // Environment object for Cloudflare Workers
+       * app.get('*', async c => {
+       *   const counter = c.env.COUNTER
+       * })
+       * ```
+       */
+      env = {};
+      #var;
+      finalized = false;
+      /**
+       * `.error` can get the error object from the middleware if the Handler throws an error.
+       *
+       * @see {@link https://hono.dev/docs/api/context#error}
+       *
+       * @example
+       * ```ts
+       * app.use('*', async (c, next) => {
+       *   await next()
+       *   if (c.error) {
+       *     // do something...
+       *   }
+       * })
+       * ```
+       */
+      error;
+      #status;
+      #executionCtx;
+      #res;
+      #layout;
+      #renderer;
+      #notFoundHandler;
+      #preparedHeaders;
+      #matchResult;
+      #path;
+      /**
+       * Creates an instance of the Context class.
+       *
+       * @param req - The Request object.
+       * @param options - Optional configuration options for the context.
+       */
+      constructor(req, options) {
+        this.#rawRequest = req;
+        if (options) {
+          this.#executionCtx = options.executionCtx;
+          this.env = options.env;
+          this.#notFoundHandler = options.notFoundHandler;
+          this.#path = options.path;
+          this.#matchResult = options.matchResult;
+        }
+      }
+      /**
+       * `.req` is the instance of {@link HonoRequest}.
+       */
+      get req() {
+        this.#req ??= new HonoRequest(this.#rawRequest, this.#path, this.#matchResult);
+        return this.#req;
+      }
+      /**
+       * @see {@link https://hono.dev/docs/api/context#event}
+       * The FetchEvent associated with the current request.
+       *
+       * @throws Will throw an error if the context does not have a FetchEvent.
+       */
+      get event() {
+        if (this.#executionCtx && "respondWith" in this.#executionCtx) {
+          return this.#executionCtx;
+        } else {
+          throw Error("This context has no FetchEvent");
+        }
+      }
+      /**
+       * @see {@link https://hono.dev/docs/api/context#executionctx}
+       * The ExecutionContext associated with the current request.
+       *
+       * @throws Will throw an error if the context does not have an ExecutionContext.
+       */
+      get executionCtx() {
+        if (this.#executionCtx) {
+          return this.#executionCtx;
+        } else {
+          throw Error("This context has no ExecutionContext");
+        }
+      }
+      /**
+       * @see {@link https://hono.dev/docs/api/context#res}
+       * The Response object for the current request.
+       */
+      get res() {
+        return this.#res ||= createResponseInstance(null, {
+          headers: this.#preparedHeaders ??= new Headers()
+        });
+      }
+      /**
+       * Sets the Response object for the current request.
+       *
+       * @param _res - The Response object to set.
+       */
+      set res(_res) {
+        if (this.#res && _res) {
+          _res = createResponseInstance(_res.body, _res);
+          for (const [k, v] of this.#res.headers.entries()) {
+            if (k === "content-type") {
+              continue;
+            }
+            if (k === "set-cookie") {
+              const cookies = this.#res.headers.getSetCookie();
+              _res.headers.delete("set-cookie");
+              for (const cookie of cookies) {
+                _res.headers.append("set-cookie", cookie);
+              }
+            } else {
+              _res.headers.set(k, v);
+            }
+          }
+        }
+        this.#res = _res;
+        this.finalized = true;
+      }
+      /**
+       * `.render()` can create a response within a layout.
+       *
+       * @see {@link https://hono.dev/docs/api/context#render-setrenderer}
+       *
+       * @example
+       * ```ts
+       * app.get('/', (c) => {
+       *   return c.render('Hello!')
+       * })
+       * ```
+       */
+      render = (...args) => {
+        this.#renderer ??= (content) => this.html(content);
+        return this.#renderer(...args);
+      };
+      /**
+       * Sets the layout for the response.
+       *
+       * @param layout - The layout to set.
+       * @returns The layout function.
+       */
+      setLayout = (layout) => this.#layout = layout;
+      /**
+       * Gets the current layout for the response.
+       *
+       * @returns The current layout function.
+       */
+      getLayout = () => this.#layout;
+      /**
+       * `.setRenderer()` can set the layout in the custom middleware.
+       *
+       * @see {@link https://hono.dev/docs/api/context#render-setrenderer}
+       *
+       * @example
+       * ```tsx
+       * app.use('*', async (c, next) => {
+       *   c.setRenderer((content) => {
+       *     return c.html(
+       *       <html>
+       *         <body>
+       *           <p>{content}</p>
+       *         </body>
+       *       </html>
+       *     )
+       *   })
+       *   await next()
+       * })
+       * ```
+       */
+      setRenderer = (renderer) => {
+        this.#renderer = renderer;
+      };
+      /**
+       * `.header()` can set headers.
+       *
+       * @see {@link https://hono.dev/docs/api/context#header}
+       *
+       * @example
+       * ```ts
+       * app.get('/welcome', (c) => {
+       *   // Set headers
+       *   c.header('X-Message', 'Hello!')
+       *   c.header('Content-Type', 'text/plain')
+       *
+       *   return c.body('Thank you for coming')
+       * })
+       * ```
+       */
+      header = (name, value, options) => {
+        if (this.finalized) {
+          this.#res = createResponseInstance(this.#res.body, this.#res);
+        }
+        const headers = this.#res ? this.#res.headers : this.#preparedHeaders ??= new Headers();
+        if (value === void 0) {
+          headers.delete(name);
+        } else if (options?.append) {
+          headers.append(name, value);
+        } else {
+          headers.set(name, value);
+        }
+      };
+      status = (status) => {
+        this.#status = status;
+      };
+      /**
+       * `.set()` can set the value specified by the key.
+       *
+       * @see {@link https://hono.dev/docs/api/context#set-get}
+       *
+       * @example
+       * ```ts
+       * app.use('*', async (c, next) => {
+       *   c.set('message', 'Hono is hot!!')
+       *   await next()
+       * })
+       * ```
+       */
+      set = (key, value) => {
+        this.#var ??= /* @__PURE__ */ new Map();
+        this.#var.set(key, value);
+      };
+      /**
+       * `.get()` can use the value specified by the key.
+       *
+       * @see {@link https://hono.dev/docs/api/context#set-get}
+       *
+       * @example
+       * ```ts
+       * app.get('/', (c) => {
+       *   const message = c.get('message')
+       *   return c.text(`The message is "${message}"`)
+       * })
+       * ```
+       */
+      get = (key) => {
+        return this.#var ? this.#var.get(key) : void 0;
+      };
+      /**
+       * `.var` can access the value of a variable.
+       *
+       * @see {@link https://hono.dev/docs/api/context#var}
+       *
+       * @example
+       * ```ts
+       * const result = c.var.client.oneMethod()
+       * ```
+       */
+      // c.var.propName is a read-only
+      get var() {
+        if (!this.#var) {
+          return {};
+        }
+        return Object.fromEntries(this.#var);
+      }
+      #newResponse(data, arg, headers) {
+        const responseHeaders = this.#res ? new Headers(this.#res.headers) : this.#preparedHeaders ?? new Headers();
+        if (typeof arg === "object" && "headers" in arg) {
+          const argHeaders = arg.headers instanceof Headers ? arg.headers : new Headers(arg.headers);
+          for (const [key, value] of argHeaders) {
+            if (key.toLowerCase() === "set-cookie") {
+              responseHeaders.append(key, value);
+            } else {
+              responseHeaders.set(key, value);
+            }
+          }
+        }
+        if (headers) {
+          for (const [k, v] of Object.entries(headers)) {
+            if (typeof v === "string") {
+              responseHeaders.set(k, v);
+            } else {
+              responseHeaders.delete(k);
+              for (const v2 of v) {
+                responseHeaders.append(k, v2);
+              }
+            }
+          }
+        }
+        const status = typeof arg === "number" ? arg : arg?.status ?? this.#status;
+        return createResponseInstance(data, { status, headers: responseHeaders });
+      }
+      newResponse = (...args) => this.#newResponse(...args);
+      /**
+       * `.body()` can return the HTTP response.
+       * You can set headers with `.header()` and set HTTP status code with `.status`.
+       * This can also be set in `.text()`, `.json()` and so on.
+       *
+       * @see {@link https://hono.dev/docs/api/context#body}
+       *
+       * @example
+       * ```ts
+       * app.get('/welcome', (c) => {
+       *   // Set headers
+       *   c.header('X-Message', 'Hello!')
+       *   c.header('Content-Type', 'text/plain')
+       *   // Set HTTP status code
+       *   c.status(201)
+       *
+       *   // Return the response body
+       *   return c.body('Thank you for coming')
+       * })
+       * ```
+       */
+      body = (data, arg, headers) => this.#newResponse(data, arg, headers);
+      /**
+       * `.text()` can render text as `Content-Type:text/plain`.
+       *
+       * @see {@link https://hono.dev/docs/api/context#text}
+       *
+       * @example
+       * ```ts
+       * app.get('/say', (c) => {
+       *   return c.text('Hello!')
+       * })
+       * ```
+       */
+      text = (text, arg, headers) => {
+        return !this.#preparedHeaders && !this.#status && !arg && !headers && !this.finalized ? new Response(text) : this.#newResponse(
+          text,
+          arg,
+          setDefaultContentType(TEXT_PLAIN, headers)
+        );
+      };
+      /**
+       * `.json()` can render JSON as `Content-Type:application/json`.
+       *
+       * @see {@link https://hono.dev/docs/api/context#json}
+       *
+       * @example
+       * ```ts
+       * app.get('/api', (c) => {
+       *   return c.json({ message: 'Hello!' })
+       * })
+       * ```
+       */
+      json = (object, arg, headers) => {
+        return this.#newResponse(
+          JSON.stringify(object),
+          arg,
+          setDefaultContentType("application/json", headers)
+        );
+      };
+      html = (html, arg, headers) => {
+        const res = (html2) => this.#newResponse(html2, arg, setDefaultContentType("text/html; charset=UTF-8", headers));
+        return typeof html === "object" ? resolveCallback(html, HtmlEscapedCallbackPhase.Stringify, false, {}).then(res) : res(html);
+      };
+      /**
+       * `.redirect()` can Redirect, default status code is 302.
+       *
+       * @see {@link https://hono.dev/docs/api/context#redirect}
+       *
+       * @example
+       * ```ts
+       * app.get('/redirect', (c) => {
+       *   return c.redirect('/')
+       * })
+       * app.get('/redirect-permanently', (c) => {
+       *   return c.redirect('/', 301)
+       * })
+       * ```
+       */
+      redirect = (location, status) => {
+        const locationString = String(location);
+        this.header(
+          "Location",
+          // Multibyes should be encoded
+          // eslint-disable-next-line no-control-regex
+          !/[^\x00-\xFF]/.test(locationString) ? locationString : encodeURI(locationString)
+        );
+        return this.newResponse(null, status ?? 302);
+      };
+      /**
+       * `.notFound()` can return the Not Found Response.
+       *
+       * @see {@link https://hono.dev/docs/api/context#notfound}
+       *
+       * @example
+       * ```ts
+       * app.get('/notfound', (c) => {
+       *   return c.notFound()
+       * })
+       * ```
+       */
+      notFound = () => {
+        this.#notFoundHandler ??= () => createResponseInstance();
+        return this.#notFoundHandler(this);
+      };
+    };
+  }
+});
+
+// node_modules/hono/dist/router.js
+var METHOD_NAME_ALL, METHOD_NAME_ALL_LOWERCASE, METHODS, MESSAGE_MATCHER_IS_ALREADY_BUILT, UnsupportedPathError;
+var init_router = __esm({
+  "node_modules/hono/dist/router.js"() {
+    "use strict";
+    METHOD_NAME_ALL = "ALL";
+    METHOD_NAME_ALL_LOWERCASE = "all";
+    METHODS = ["get", "post", "put", "delete", "options", "patch"];
+    MESSAGE_MATCHER_IS_ALREADY_BUILT = "Can not add a route since the matcher is already built.";
+    UnsupportedPathError = class extends Error {
+    };
+  }
+});
+
+// node_modules/hono/dist/utils/constants.js
+var COMPOSED_HANDLER;
+var init_constants2 = __esm({
+  "node_modules/hono/dist/utils/constants.js"() {
+    "use strict";
+    COMPOSED_HANDLER = "__COMPOSED_HANDLER";
+  }
+});
+
+// node_modules/hono/dist/hono-base.js
+var notFoundHandler, errorHandler, Hono;
+var init_hono_base = __esm({
+  "node_modules/hono/dist/hono-base.js"() {
+    "use strict";
+    init_compose();
+    init_context();
+    init_router();
+    init_constants2();
+    init_url();
+    notFoundHandler = (c) => {
+      return c.text("404 Not Found", 404);
+    };
+    errorHandler = (err, c) => {
+      if ("getResponse" in err) {
+        const res = err.getResponse();
+        return c.newResponse(res.body, res);
+      }
+      console.error(err);
+      return c.text("Internal Server Error", 500);
+    };
+    Hono = class _Hono {
+      get;
+      post;
+      put;
+      delete;
+      options;
+      patch;
+      all;
+      on;
+      use;
+      /*
+        This class is like an abstract class and does not have a router.
+        To use it, inherit the class and implement router in the constructor.
+      */
+      router;
+      getPath;
+      // Cannot use `#` because it requires visibility at JavaScript runtime.
+      _basePath = "/";
+      #path = "/";
+      routes = [];
+      constructor(options = {}) {
+        const allMethods = [...METHODS, METHOD_NAME_ALL_LOWERCASE];
+        allMethods.forEach((method) => {
+          this[method] = (args1, ...args) => {
+            if (typeof args1 === "string") {
+              this.#path = args1;
+            } else {
+              this.#addRoute(method, this.#path, args1);
+            }
+            args.forEach((handler) => {
+              this.#addRoute(method, this.#path, handler);
+            });
+            return this;
+          };
+        });
+        this.on = (method, path, ...handlers) => {
+          for (const p of [path].flat()) {
+            this.#path = p;
+            for (const m of [method].flat()) {
+              handlers.map((handler) => {
+                this.#addRoute(m.toUpperCase(), this.#path, handler);
+              });
+            }
+          }
+          return this;
+        };
+        this.use = (arg1, ...handlers) => {
+          if (typeof arg1 === "string") {
+            this.#path = arg1;
+          } else {
+            this.#path = "*";
+            handlers.unshift(arg1);
+          }
+          handlers.forEach((handler) => {
+            this.#addRoute(METHOD_NAME_ALL, this.#path, handler);
+          });
+          return this;
+        };
+        const { strict, ...optionsWithoutStrict } = options;
+        Object.assign(this, optionsWithoutStrict);
+        this.getPath = strict ?? true ? options.getPath ?? getPath : getPathNoStrict;
+      }
+      #clone() {
+        const clone = new _Hono({
+          router: this.router,
+          getPath: this.getPath
+        });
+        clone.errorHandler = this.errorHandler;
+        clone.#notFoundHandler = this.#notFoundHandler;
+        clone.routes = this.routes;
+        return clone;
+      }
+      #notFoundHandler = notFoundHandler;
+      // Cannot use `#` because it requires visibility at JavaScript runtime.
+      errorHandler = errorHandler;
+      /**
+       * `.route()` allows grouping other Hono instance in routes.
+       *
+       * @see {@link https://hono.dev/docs/api/routing#grouping}
+       *
+       * @param {string} path - base Path
+       * @param {Hono} app - other Hono instance
+       * @returns {Hono} routed Hono instance
+       *
+       * @example
+       * ```ts
+       * const app = new Hono()
+       * const app2 = new Hono()
+       *
+       * app2.get("/user", (c) => c.text("user"))
+       * app.route("/api", app2) // GET /api/user
+       * ```
+       */
+      route(path, app) {
+        const subApp = this.basePath(path);
+        app.routes.map((r) => {
+          let handler;
+          if (app.errorHandler === errorHandler) {
+            handler = r.handler;
+          } else {
+            handler = async (c, next) => (await compose([], app.errorHandler)(c, () => r.handler(c, next))).res;
+            handler[COMPOSED_HANDLER] = r.handler;
+          }
+          subApp.#addRoute(r.method, r.path, handler);
+        });
+        return this;
+      }
+      /**
+       * `.basePath()` allows base paths to be specified.
+       *
+       * @see {@link https://hono.dev/docs/api/routing#base-path}
+       *
+       * @param {string} path - base Path
+       * @returns {Hono} changed Hono instance
+       *
+       * @example
+       * ```ts
+       * const api = new Hono().basePath('/api')
+       * ```
+       */
+      basePath(path) {
+        const subApp = this.#clone();
+        subApp._basePath = mergePath(this._basePath, path);
+        return subApp;
+      }
+      /**
+       * `.onError()` handles an error and returns a customized Response.
+       *
+       * @see {@link https://hono.dev/docs/api/hono#error-handling}
+       *
+       * @param {ErrorHandler} handler - request Handler for error
+       * @returns {Hono} changed Hono instance
+       *
+       * @example
+       * ```ts
+       * app.onError((err, c) => {
+       *   console.error(`${err}`)
+       *   return c.text('Custom Error Message', 500)
+       * })
+       * ```
+       */
+      onError = (handler) => {
+        this.errorHandler = handler;
+        return this;
+      };
+      /**
+       * `.notFound()` allows you to customize a Not Found Response.
+       *
+       * @see {@link https://hono.dev/docs/api/hono#not-found}
+       *
+       * @param {NotFoundHandler} handler - request handler for not-found
+       * @returns {Hono} changed Hono instance
+       *
+       * @example
+       * ```ts
+       * app.notFound((c) => {
+       *   return c.text('Custom 404 Message', 404)
+       * })
+       * ```
+       */
+      notFound = (handler) => {
+        this.#notFoundHandler = handler;
+        return this;
+      };
+      /**
+       * `.mount()` allows you to mount applications built with other frameworks into your Hono application.
+       *
+       * @see {@link https://hono.dev/docs/api/hono#mount}
+       *
+       * @param {string} path - base Path
+       * @param {Function} applicationHandler - other Request Handler
+       * @param {MountOptions} [options] - options of `.mount()`
+       * @returns {Hono} mounted Hono instance
+       *
+       * @example
+       * ```ts
+       * import { Router as IttyRouter } from 'itty-router'
+       * import { Hono } from 'hono'
+       * // Create itty-router application
+       * const ittyRouter = IttyRouter()
+       * // GET /itty-router/hello
+       * ittyRouter.get('/hello', () => new Response('Hello from itty-router'))
+       *
+       * const app = new Hono()
+       * app.mount('/itty-router', ittyRouter.handle)
+       * ```
+       *
+       * @example
+       * ```ts
+       * const app = new Hono()
+       * // Send the request to another application without modification.
+       * app.mount('/app', anotherApp, {
+       *   replaceRequest: (req) => req,
+       * })
+       * ```
+       */
+      mount(path, applicationHandler, options) {
+        let replaceRequest;
+        let optionHandler;
+        if (options) {
+          if (typeof options === "function") {
+            optionHandler = options;
+          } else {
+            optionHandler = options.optionHandler;
+            if (options.replaceRequest === false) {
+              replaceRequest = (request) => request;
+            } else {
+              replaceRequest = options.replaceRequest;
+            }
+          }
+        }
+        const getOptions = optionHandler ? (c) => {
+          const options2 = optionHandler(c);
+          return Array.isArray(options2) ? options2 : [options2];
+        } : (c) => {
+          let executionContext = void 0;
+          try {
+            executionContext = c.executionCtx;
+          } catch {
+          }
+          return [c.env, executionContext];
+        };
+        replaceRequest ||= (() => {
+          const mergedPath = mergePath(this._basePath, path);
+          const pathPrefixLength = mergedPath === "/" ? 0 : mergedPath.length;
+          return (request) => {
+            const url = new URL(request.url);
+            url.pathname = url.pathname.slice(pathPrefixLength) || "/";
+            return new Request(url, request);
+          };
+        })();
+        const handler = async (c, next) => {
+          const res = await applicationHandler(replaceRequest(c.req.raw), ...getOptions(c));
+          if (res) {
+            return res;
+          }
+          await next();
+        };
+        this.#addRoute(METHOD_NAME_ALL, mergePath(path, "*"), handler);
+        return this;
+      }
+      #addRoute(method, path, handler) {
+        method = method.toUpperCase();
+        path = mergePath(this._basePath, path);
+        const r = { basePath: this._basePath, path, method, handler };
+        this.router.add(method, path, [handler, r]);
+        this.routes.push(r);
+      }
+      #handleError(err, c) {
+        if (err instanceof Error) {
+          return this.errorHandler(err, c);
+        }
+        throw err;
+      }
+      #dispatch(request, executionCtx, env, method) {
+        if (method === "HEAD") {
+          return (async () => new Response(null, await this.#dispatch(request, executionCtx, env, "GET")))();
+        }
+        const path = this.getPath(request, { env });
+        const matchResult = this.router.match(method, path);
+        const c = new Context(request, {
+          path,
+          matchResult,
+          env,
+          executionCtx,
+          notFoundHandler: this.#notFoundHandler
+        });
+        if (matchResult[0].length === 1) {
+          let res;
+          try {
+            res = matchResult[0][0][0][0](c, async () => {
+              c.res = await this.#notFoundHandler(c);
+            });
+          } catch (err) {
+            return this.#handleError(err, c);
+          }
+          return res instanceof Promise ? res.then(
+            (resolved) => resolved || (c.finalized ? c.res : this.#notFoundHandler(c))
+          ).catch((err) => this.#handleError(err, c)) : res ?? this.#notFoundHandler(c);
+        }
+        const composed = compose(matchResult[0], this.errorHandler, this.#notFoundHandler);
+        return (async () => {
+          try {
+            const context = await composed(c);
+            if (!context.finalized) {
+              throw new Error(
+                "Context is not finalized. Did you forget to return a Response object or `await next()`?"
+              );
+            }
+            return context.res;
+          } catch (err) {
+            return this.#handleError(err, c);
+          }
+        })();
+      }
+      /**
+       * `.fetch()` will be entry point of your app.
+       *
+       * @see {@link https://hono.dev/docs/api/hono#fetch}
+       *
+       * @param {Request} request - request Object of request
+       * @param {Env} Env - env Object
+       * @param {ExecutionContext} - context of execution
+       * @returns {Response | Promise<Response>} response of request
+       *
+       */
+      fetch = (request, ...rest) => {
+        return this.#dispatch(request, rest[1], rest[0], request.method);
+      };
+      /**
+       * `.request()` is a useful method for testing.
+       * You can pass a URL or pathname to send a GET request.
+       * app will return a Response object.
+       * ```ts
+       * test('GET /hello is ok', async () => {
+       *   const res = await app.request('/hello')
+       *   expect(res.status).toBe(200)
+       * })
+       * ```
+       * @see https://hono.dev/docs/api/hono#request
+       */
+      request = (input, requestInit, Env, executionCtx) => {
+        if (input instanceof Request) {
+          return this.fetch(requestInit ? new Request(input, requestInit) : input, Env, executionCtx);
+        }
+        input = input.toString();
+        return this.fetch(
+          new Request(
+            /^https?:\/\//.test(input) ? input : `http://localhost${mergePath("/", input)}`,
+            requestInit
+          ),
+          Env,
+          executionCtx
+        );
+      };
+      /**
+       * `.fire()` automatically adds a global fetch event listener.
+       * This can be useful for environments that adhere to the Service Worker API, such as non-ES module Cloudflare Workers.
+       * @deprecated
+       * Use `fire` from `hono/service-worker` instead.
+       * ```ts
+       * import { Hono } from 'hono'
+       * import { fire } from 'hono/service-worker'
+       *
+       * const app = new Hono()
+       * // ...
+       * fire(app)
+       * ```
+       * @see https://hono.dev/docs/api/hono#fire
+       * @see https://developer.mozilla.org/en-US/docs/Web/API/Service_Worker_API
+       * @see https://developers.cloudflare.com/workers/reference/migrate-to-module-workers/
+       */
+      fire = () => {
+        addEventListener("fetch", (event) => {
+          event.respondWith(this.#dispatch(event.request, event, void 0, event.request.method));
+        });
+      };
+    };
+  }
+});
+
+// node_modules/hono/dist/router/reg-exp-router/matcher.js
+function match(method, path) {
+  const matchers = this.buildAllMatchers();
+  const match2 = ((method2, path2) => {
+    const matcher = matchers[method2] || matchers[METHOD_NAME_ALL];
+    const staticMatch = matcher[2][path2];
+    if (staticMatch) {
+      return staticMatch;
+    }
+    const match3 = path2.match(matcher[0]);
+    if (!match3) {
+      return [[], emptyParam];
+    }
+    const index = match3.indexOf("", 1);
+    return [matcher[1][index], match3];
+  });
+  this.match = match2;
+  return match2(method, path);
+}
+var emptyParam;
+var init_matcher = __esm({
+  "node_modules/hono/dist/router/reg-exp-router/matcher.js"() {
+    "use strict";
+    init_router();
+    emptyParam = [];
+  }
+});
+
+// node_modules/hono/dist/router/reg-exp-router/node.js
+function compareKey(a, b) {
+  if (a.length === 1) {
+    return b.length === 1 ? a < b ? -1 : 1 : -1;
+  }
+  if (b.length === 1) {
+    return 1;
+  }
+  if (a === ONLY_WILDCARD_REG_EXP_STR || a === TAIL_WILDCARD_REG_EXP_STR) {
+    return 1;
+  } else if (b === ONLY_WILDCARD_REG_EXP_STR || b === TAIL_WILDCARD_REG_EXP_STR) {
+    return -1;
+  }
+  if (a === LABEL_REG_EXP_STR) {
+    return 1;
+  } else if (b === LABEL_REG_EXP_STR) {
+    return -1;
+  }
+  return a.length === b.length ? a < b ? -1 : 1 : b.length - a.length;
+}
+var LABEL_REG_EXP_STR, ONLY_WILDCARD_REG_EXP_STR, TAIL_WILDCARD_REG_EXP_STR, PATH_ERROR, regExpMetaChars, Node;
+var init_node = __esm({
+  "node_modules/hono/dist/router/reg-exp-router/node.js"() {
+    "use strict";
+    LABEL_REG_EXP_STR = "[^/]+";
+    ONLY_WILDCARD_REG_EXP_STR = ".*";
+    TAIL_WILDCARD_REG_EXP_STR = "(?:|/.*)";
+    PATH_ERROR = /* @__PURE__ */ Symbol();
+    regExpMetaChars = new Set(".\\+*[^]$()");
+    Node = class _Node {
+      #index;
+      #varIndex;
+      #children = /* @__PURE__ */ Object.create(null);
+      insert(tokens, index, paramMap, context, pathErrorCheckOnly) {
+        if (tokens.length === 0) {
+          if (this.#index !== void 0) {
+            throw PATH_ERROR;
+          }
+          if (pathErrorCheckOnly) {
+            return;
+          }
+          this.#index = index;
+          return;
+        }
+        const [token, ...restTokens] = tokens;
+        const pattern = token === "*" ? restTokens.length === 0 ? ["", "", ONLY_WILDCARD_REG_EXP_STR] : ["", "", LABEL_REG_EXP_STR] : token === "/*" ? ["", "", TAIL_WILDCARD_REG_EXP_STR] : token.match(/^\:([^\{\}]+)(?:\{(.+)\})?$/);
+        let node;
+        if (pattern) {
+          const name = pattern[1];
+          let regexpStr = pattern[2] || LABEL_REG_EXP_STR;
+          if (name && pattern[2]) {
+            if (regexpStr === ".*") {
+              throw PATH_ERROR;
+            }
+            regexpStr = regexpStr.replace(/^\((?!\?:)(?=[^)]+\)$)/, "(?:");
+            if (/\((?!\?:)/.test(regexpStr)) {
+              throw PATH_ERROR;
+            }
+          }
+          node = this.#children[regexpStr];
+          if (!node) {
+            if (Object.keys(this.#children).some(
+              (k) => k !== ONLY_WILDCARD_REG_EXP_STR && k !== TAIL_WILDCARD_REG_EXP_STR
+            )) {
+              throw PATH_ERROR;
+            }
+            if (pathErrorCheckOnly) {
+              return;
+            }
+            node = this.#children[regexpStr] = new _Node();
+            if (name !== "") {
+              node.#varIndex = context.varIndex++;
+            }
+          }
+          if (!pathErrorCheckOnly && name !== "") {
+            paramMap.push([name, node.#varIndex]);
+          }
+        } else {
+          node = this.#children[token];
+          if (!node) {
+            if (Object.keys(this.#children).some(
+              (k) => k.length > 1 && k !== ONLY_WILDCARD_REG_EXP_STR && k !== TAIL_WILDCARD_REG_EXP_STR
+            )) {
+              throw PATH_ERROR;
+            }
+            if (pathErrorCheckOnly) {
+              return;
+            }
+            node = this.#children[token] = new _Node();
+          }
+        }
+        node.insert(restTokens, index, paramMap, context, pathErrorCheckOnly);
+      }
+      buildRegExpStr() {
+        const childKeys = Object.keys(this.#children).sort(compareKey);
+        const strList = childKeys.map((k) => {
+          const c = this.#children[k];
+          return (typeof c.#varIndex === "number" ? `(${k})@${c.#varIndex}` : regExpMetaChars.has(k) ? `\\${k}` : k) + c.buildRegExpStr();
+        });
+        if (typeof this.#index === "number") {
+          strList.unshift(`#${this.#index}`);
+        }
+        if (strList.length === 0) {
+          return "";
+        }
+        if (strList.length === 1) {
+          return strList[0];
+        }
+        return "(?:" + strList.join("|") + ")";
+      }
+    };
+  }
+});
+
+// node_modules/hono/dist/router/reg-exp-router/trie.js
+var Trie;
+var init_trie = __esm({
+  "node_modules/hono/dist/router/reg-exp-router/trie.js"() {
+    "use strict";
+    init_node();
+    Trie = class {
+      #context = { varIndex: 0 };
+      #root = new Node();
+      insert(path, index, pathErrorCheckOnly) {
+        const paramAssoc = [];
+        const groups = [];
+        for (let i = 0; ; ) {
+          let replaced = false;
+          path = path.replace(/\{[^}]+\}/g, (m) => {
+            const mark = `@\\${i}`;
+            groups[i] = [mark, m];
+            i++;
+            replaced = true;
+            return mark;
+          });
+          if (!replaced) {
+            break;
+          }
+        }
+        const tokens = path.match(/(?::[^\/]+)|(?:\/\*$)|./g) || [];
+        for (let i = groups.length - 1; i >= 0; i--) {
+          const [mark] = groups[i];
+          for (let j = tokens.length - 1; j >= 0; j--) {
+            if (tokens[j].indexOf(mark) !== -1) {
+              tokens[j] = tokens[j].replace(mark, groups[i][1]);
+              break;
+            }
+          }
+        }
+        this.#root.insert(tokens, index, paramAssoc, this.#context, pathErrorCheckOnly);
+        return paramAssoc;
+      }
+      buildRegExp() {
+        let regexp = this.#root.buildRegExpStr();
+        if (regexp === "") {
+          return [/^$/, [], []];
+        }
+        let captureIndex = 0;
+        const indexReplacementMap = [];
+        const paramReplacementMap = [];
+        regexp = regexp.replace(/#(\d+)|@(\d+)|\.\*\$/g, (_, handlerIndex, paramIndex) => {
+          if (handlerIndex !== void 0) {
+            indexReplacementMap[++captureIndex] = Number(handlerIndex);
+            return "$()";
+          }
+          if (paramIndex !== void 0) {
+            paramReplacementMap[Number(paramIndex)] = ++captureIndex;
+            return "";
+          }
+          return "";
+        });
+        return [new RegExp(`^${regexp}`), indexReplacementMap, paramReplacementMap];
+      }
+    };
+  }
+});
+
+// node_modules/hono/dist/router/reg-exp-router/router.js
+function buildWildcardRegExp(path) {
+  return wildcardRegExpCache[path] ??= new RegExp(
+    path === "*" ? "" : `^${path.replace(
+      /\/\*$|([.\\+*[^\]$()])/g,
+      (_, metaChar) => metaChar ? `\\${metaChar}` : "(?:|/.*)"
+    )}$`
+  );
+}
+function clearWildcardRegExpCache() {
+  wildcardRegExpCache = /* @__PURE__ */ Object.create(null);
+}
+function buildMatcherFromPreprocessedRoutes(routes) {
+  const trie = new Trie();
+  const handlerData = [];
+  if (routes.length === 0) {
+    return nullMatcher;
+  }
+  const routesWithStaticPathFlag = routes.map(
+    (route) => [!/\*|\/:/.test(route[0]), ...route]
+  ).sort(
+    ([isStaticA, pathA], [isStaticB, pathB]) => isStaticA ? 1 : isStaticB ? -1 : pathA.length - pathB.length
+  );
+  const staticMap = /* @__PURE__ */ Object.create(null);
+  for (let i = 0, j = -1, len = routesWithStaticPathFlag.length; i < len; i++) {
+    const [pathErrorCheckOnly, path, handlers] = routesWithStaticPathFlag[i];
+    if (pathErrorCheckOnly) {
+      staticMap[path] = [handlers.map(([h]) => [h, /* @__PURE__ */ Object.create(null)]), emptyParam];
+    } else {
+      j++;
+    }
+    let paramAssoc;
+    try {
+      paramAssoc = trie.insert(path, j, pathErrorCheckOnly);
+    } catch (e) {
+      throw e === PATH_ERROR ? new UnsupportedPathError(path) : e;
+    }
+    if (pathErrorCheckOnly) {
+      continue;
+    }
+    handlerData[j] = handlers.map(([h, paramCount]) => {
+      const paramIndexMap = /* @__PURE__ */ Object.create(null);
+      paramCount -= 1;
+      for (; paramCount >= 0; paramCount--) {
+        const [key, value] = paramAssoc[paramCount];
+        paramIndexMap[key] = value;
+      }
+      return [h, paramIndexMap];
+    });
+  }
+  const [regexp, indexReplacementMap, paramReplacementMap] = trie.buildRegExp();
+  for (let i = 0, len = handlerData.length; i < len; i++) {
+    for (let j = 0, len2 = handlerData[i].length; j < len2; j++) {
+      const map = handlerData[i][j]?.[1];
+      if (!map) {
+        continue;
+      }
+      const keys = Object.keys(map);
+      for (let k = 0, len3 = keys.length; k < len3; k++) {
+        map[keys[k]] = paramReplacementMap[map[keys[k]]];
+      }
+    }
+  }
+  const handlerMap = [];
+  for (const i in indexReplacementMap) {
+    handlerMap[i] = handlerData[indexReplacementMap[i]];
+  }
+  return [regexp, handlerMap, staticMap];
+}
+function findMiddleware(middleware, path) {
+  if (!middleware) {
+    return void 0;
+  }
+  for (const k of Object.keys(middleware).sort((a, b) => b.length - a.length)) {
+    if (buildWildcardRegExp(k).test(path)) {
+      return [...middleware[k]];
+    }
+  }
+  return void 0;
+}
+var nullMatcher, wildcardRegExpCache, RegExpRouter;
+var init_router2 = __esm({
+  "node_modules/hono/dist/router/reg-exp-router/router.js"() {
+    "use strict";
+    init_router();
+    init_url();
+    init_matcher();
+    init_node();
+    init_trie();
+    nullMatcher = [/^$/, [], /* @__PURE__ */ Object.create(null)];
+    wildcardRegExpCache = /* @__PURE__ */ Object.create(null);
+    RegExpRouter = class {
+      name = "RegExpRouter";
+      #middleware;
+      #routes;
+      constructor() {
+        this.#middleware = { [METHOD_NAME_ALL]: /* @__PURE__ */ Object.create(null) };
+        this.#routes = { [METHOD_NAME_ALL]: /* @__PURE__ */ Object.create(null) };
+      }
+      add(method, path, handler) {
+        const middleware = this.#middleware;
+        const routes = this.#routes;
+        if (!middleware || !routes) {
+          throw new Error(MESSAGE_MATCHER_IS_ALREADY_BUILT);
+        }
+        if (!middleware[method]) {
+          ;
+          [middleware, routes].forEach((handlerMap) => {
+            handlerMap[method] = /* @__PURE__ */ Object.create(null);
+            Object.keys(handlerMap[METHOD_NAME_ALL]).forEach((p) => {
+              handlerMap[method][p] = [...handlerMap[METHOD_NAME_ALL][p]];
+            });
+          });
+        }
+        if (path === "/*") {
+          path = "*";
+        }
+        const paramCount = (path.match(/\/:/g) || []).length;
+        if (/\*$/.test(path)) {
+          const re = buildWildcardRegExp(path);
+          if (method === METHOD_NAME_ALL) {
+            Object.keys(middleware).forEach((m) => {
+              middleware[m][path] ||= findMiddleware(middleware[m], path) || findMiddleware(middleware[METHOD_NAME_ALL], path) || [];
+            });
+          } else {
+            middleware[method][path] ||= findMiddleware(middleware[method], path) || findMiddleware(middleware[METHOD_NAME_ALL], path) || [];
+          }
+          Object.keys(middleware).forEach((m) => {
+            if (method === METHOD_NAME_ALL || method === m) {
+              Object.keys(middleware[m]).forEach((p) => {
+                re.test(p) && middleware[m][p].push([handler, paramCount]);
+              });
+            }
+          });
+          Object.keys(routes).forEach((m) => {
+            if (method === METHOD_NAME_ALL || method === m) {
+              Object.keys(routes[m]).forEach(
+                (p) => re.test(p) && routes[m][p].push([handler, paramCount])
+              );
+            }
+          });
+          return;
+        }
+        const paths = checkOptionalParameter(path) || [path];
+        for (let i = 0, len = paths.length; i < len; i++) {
+          const path2 = paths[i];
+          Object.keys(routes).forEach((m) => {
+            if (method === METHOD_NAME_ALL || method === m) {
+              routes[m][path2] ||= [
+                ...findMiddleware(middleware[m], path2) || findMiddleware(middleware[METHOD_NAME_ALL], path2) || []
+              ];
+              routes[m][path2].push([handler, paramCount - len + i + 1]);
+            }
+          });
+        }
+      }
+      match = match;
+      buildAllMatchers() {
+        const matchers = /* @__PURE__ */ Object.create(null);
+        Object.keys(this.#routes).concat(Object.keys(this.#middleware)).forEach((method) => {
+          matchers[method] ||= this.#buildMatcher(method);
+        });
+        this.#middleware = this.#routes = void 0;
+        clearWildcardRegExpCache();
+        return matchers;
+      }
+      #buildMatcher(method) {
+        const routes = [];
+        let hasOwnRoute = method === METHOD_NAME_ALL;
+        [this.#middleware, this.#routes].forEach((r) => {
+          const ownRoute = r[method] ? Object.keys(r[method]).map((path) => [path, r[method][path]]) : [];
+          if (ownRoute.length !== 0) {
+            hasOwnRoute ||= true;
+            routes.push(...ownRoute);
+          } else if (method !== METHOD_NAME_ALL) {
+            routes.push(
+              ...Object.keys(r[METHOD_NAME_ALL]).map((path) => [path, r[METHOD_NAME_ALL][path]])
+            );
+          }
+        });
+        if (!hasOwnRoute) {
+          return null;
+        } else {
+          return buildMatcherFromPreprocessedRoutes(routes);
+        }
+      }
+    };
+  }
+});
+
+// node_modules/hono/dist/router/reg-exp-router/prepared-router.js
+var init_prepared_router = __esm({
+  "node_modules/hono/dist/router/reg-exp-router/prepared-router.js"() {
+    "use strict";
+    init_router();
+    init_matcher();
+    init_router2();
+  }
+});
+
+// node_modules/hono/dist/router/reg-exp-router/index.js
+var init_reg_exp_router = __esm({
+  "node_modules/hono/dist/router/reg-exp-router/index.js"() {
+    "use strict";
+    init_router2();
+    init_prepared_router();
+  }
+});
+
+// node_modules/hono/dist/router/smart-router/router.js
+var SmartRouter;
+var init_router3 = __esm({
+  "node_modules/hono/dist/router/smart-router/router.js"() {
+    "use strict";
+    init_router();
+    SmartRouter = class {
+      name = "SmartRouter";
+      #routers = [];
+      #routes = [];
+      constructor(init) {
+        this.#routers = init.routers;
+      }
+      add(method, path, handler) {
+        if (!this.#routes) {
+          throw new Error(MESSAGE_MATCHER_IS_ALREADY_BUILT);
+        }
+        this.#routes.push([method, path, handler]);
+      }
+      match(method, path) {
+        if (!this.#routes) {
+          throw new Error("Fatal error");
+        }
+        const routers = this.#routers;
+        const routes = this.#routes;
+        const len = routers.length;
+        let i = 0;
+        let res;
+        for (; i < len; i++) {
+          const router = routers[i];
+          try {
+            for (let i2 = 0, len2 = routes.length; i2 < len2; i2++) {
+              router.add(...routes[i2]);
+            }
+            res = router.match(method, path);
+          } catch (e) {
+            if (e instanceof UnsupportedPathError) {
+              continue;
+            }
+            throw e;
+          }
+          this.match = router.match.bind(router);
+          this.#routers = [router];
+          this.#routes = void 0;
+          break;
+        }
+        if (i === len) {
+          throw new Error("Fatal error");
+        }
+        this.name = `SmartRouter + ${this.activeRouter.name}`;
+        return res;
+      }
+      get activeRouter() {
+        if (this.#routes || this.#routers.length !== 1) {
+          throw new Error("No active router has been determined yet.");
+        }
+        return this.#routers[0];
+      }
+    };
+  }
+});
+
+// node_modules/hono/dist/router/smart-router/index.js
+var init_smart_router = __esm({
+  "node_modules/hono/dist/router/smart-router/index.js"() {
+    "use strict";
+    init_router3();
+  }
+});
+
+// node_modules/hono/dist/router/trie-router/node.js
+var emptyParams, hasChildren, Node2;
+var init_node2 = __esm({
+  "node_modules/hono/dist/router/trie-router/node.js"() {
+    "use strict";
+    init_router();
+    init_url();
+    emptyParams = /* @__PURE__ */ Object.create(null);
+    hasChildren = (children) => {
+      for (const _ in children) {
+        return true;
+      }
+      return false;
+    };
+    Node2 = class _Node2 {
+      #methods;
+      #children;
+      #patterns;
+      #order = 0;
+      #params = emptyParams;
+      constructor(method, handler, children) {
+        this.#children = children || /* @__PURE__ */ Object.create(null);
+        this.#methods = [];
+        if (method && handler) {
+          const m = /* @__PURE__ */ Object.create(null);
+          m[method] = { handler, possibleKeys: [], score: 0 };
+          this.#methods = [m];
+        }
+        this.#patterns = [];
+      }
+      insert(method, path, handler) {
+        this.#order = ++this.#order;
+        let curNode = this;
+        const parts = splitRoutingPath(path);
+        const possibleKeys = [];
+        for (let i = 0, len = parts.length; i < len; i++) {
+          const p = parts[i];
+          const nextP = parts[i + 1];
+          const pattern = getPattern(p, nextP);
+          const key = Array.isArray(pattern) ? pattern[0] : p;
+          if (key in curNode.#children) {
+            curNode = curNode.#children[key];
+            if (pattern) {
+              possibleKeys.push(pattern[1]);
+            }
+            continue;
+          }
+          curNode.#children[key] = new _Node2();
+          if (pattern) {
+            curNode.#patterns.push(pattern);
+            possibleKeys.push(pattern[1]);
+          }
+          curNode = curNode.#children[key];
+        }
+        curNode.#methods.push({
+          [method]: {
+            handler,
+            possibleKeys: possibleKeys.filter((v, i, a) => a.indexOf(v) === i),
+            score: this.#order
+          }
+        });
+        return curNode;
+      }
+      #pushHandlerSets(handlerSets, node, method, nodeParams, params) {
+        for (let i = 0, len = node.#methods.length; i < len; i++) {
+          const m = node.#methods[i];
+          const handlerSet = m[method] || m[METHOD_NAME_ALL];
+          const processedSet = {};
+          if (handlerSet !== void 0) {
+            handlerSet.params = /* @__PURE__ */ Object.create(null);
+            handlerSets.push(handlerSet);
+            if (nodeParams !== emptyParams || params && params !== emptyParams) {
+              for (let i2 = 0, len2 = handlerSet.possibleKeys.length; i2 < len2; i2++) {
+                const key = handlerSet.possibleKeys[i2];
+                const processed = processedSet[handlerSet.score];
+                handlerSet.params[key] = params?.[key] && !processed ? params[key] : nodeParams[key] ?? params?.[key];
+                processedSet[handlerSet.score] = true;
+              }
+            }
+          }
+        }
+      }
+      search(method, path) {
+        const handlerSets = [];
+        this.#params = emptyParams;
+        const curNode = this;
+        let curNodes = [curNode];
+        const parts = splitPath(path);
+        const curNodesQueue = [];
+        const len = parts.length;
+        let partOffsets = null;
+        for (let i = 0; i < len; i++) {
+          const part = parts[i];
+          const isLast = i === len - 1;
+          const tempNodes = [];
+          for (let j = 0, len2 = curNodes.length; j < len2; j++) {
+            const node = curNodes[j];
+            const nextNode = node.#children[part];
+            if (nextNode) {
+              nextNode.#params = node.#params;
+              if (isLast) {
+                if (nextNode.#children["*"]) {
+                  this.#pushHandlerSets(handlerSets, nextNode.#children["*"], method, node.#params);
+                }
+                this.#pushHandlerSets(handlerSets, nextNode, method, node.#params);
+              } else {
+                tempNodes.push(nextNode);
+              }
+            }
+            for (let k = 0, len3 = node.#patterns.length; k < len3; k++) {
+              const pattern = node.#patterns[k];
+              const params = node.#params === emptyParams ? {} : { ...node.#params };
+              if (pattern === "*") {
+                const astNode = node.#children["*"];
+                if (astNode) {
+                  this.#pushHandlerSets(handlerSets, astNode, method, node.#params);
+                  astNode.#params = params;
+                  tempNodes.push(astNode);
+                }
+                continue;
+              }
+              const [key, name, matcher] = pattern;
+              if (!part && !(matcher instanceof RegExp)) {
+                continue;
+              }
+              const child = node.#children[key];
+              if (matcher instanceof RegExp) {
+                if (partOffsets === null) {
+                  partOffsets = new Array(len);
+                  let offset = path[0] === "/" ? 1 : 0;
+                  for (let p = 0; p < len; p++) {
+                    partOffsets[p] = offset;
+                    offset += parts[p].length + 1;
+                  }
+                }
+                const restPathString = path.substring(partOffsets[i]);
+                const m = matcher.exec(restPathString);
+                if (m) {
+                  params[name] = m[0];
+                  this.#pushHandlerSets(handlerSets, child, method, node.#params, params);
+                  if (hasChildren(child.#children)) {
+                    child.#params = params;
+                    const componentCount = m[0].match(/\//)?.length ?? 0;
+                    const targetCurNodes = curNodesQueue[componentCount] ||= [];
+                    targetCurNodes.push(child);
+                  }
+                  continue;
+                }
+              }
+              if (matcher === true || matcher.test(part)) {
+                params[name] = part;
+                if (isLast) {
+                  this.#pushHandlerSets(handlerSets, child, method, params, node.#params);
+                  if (child.#children["*"]) {
+                    this.#pushHandlerSets(
+                      handlerSets,
+                      child.#children["*"],
+                      method,
+                      params,
+                      node.#params
+                    );
+                  }
+                } else {
+                  child.#params = params;
+                  tempNodes.push(child);
+                }
+              }
+            }
+          }
+          const shifted = curNodesQueue.shift();
+          curNodes = shifted ? tempNodes.concat(shifted) : tempNodes;
+        }
+        if (handlerSets.length > 1) {
+          handlerSets.sort((a, b) => {
+            return a.score - b.score;
+          });
+        }
+        return [handlerSets.map(({ handler, params }) => [handler, params])];
+      }
+    };
+  }
+});
+
+// node_modules/hono/dist/router/trie-router/router.js
+var TrieRouter;
+var init_router4 = __esm({
+  "node_modules/hono/dist/router/trie-router/router.js"() {
+    "use strict";
+    init_url();
+    init_node2();
+    TrieRouter = class {
+      name = "TrieRouter";
+      #node;
+      constructor() {
+        this.#node = new Node2();
+      }
+      add(method, path, handler) {
+        const results = checkOptionalParameter(path);
+        if (results) {
+          for (let i = 0, len = results.length; i < len; i++) {
+            this.#node.insert(method, results[i], handler);
+          }
+          return;
+        }
+        this.#node.insert(method, path, handler);
+      }
+      match(method, path) {
+        return this.#node.search(method, path);
+      }
+    };
+  }
+});
+
+// node_modules/hono/dist/router/trie-router/index.js
+var init_trie_router = __esm({
+  "node_modules/hono/dist/router/trie-router/index.js"() {
+    "use strict";
+    init_router4();
+  }
+});
+
+// node_modules/hono/dist/hono.js
+var Hono2;
+var init_hono = __esm({
+  "node_modules/hono/dist/hono.js"() {
+    "use strict";
+    init_hono_base();
+    init_reg_exp_router();
+    init_smart_router();
+    init_trie_router();
+    Hono2 = class extends Hono {
+      /**
+       * Creates an instance of the Hono class.
+       *
+       * @param options - Optional configuration options for the Hono instance.
+       */
+      constructor(options = {}) {
+        super(options);
+        this.router = options.router ?? new SmartRouter({
+          routers: [new RegExpRouter(), new TrieRouter()]
+        });
+      }
+    };
+  }
+});
+
+// node_modules/hono/dist/index.js
+var init_dist = __esm({
+  "node_modules/hono/dist/index.js"() {
+    "use strict";
+    init_hono();
+  }
+});
+
+// ../lib/require-port-env/src/index.ts
+function requirePortEnv(envName, options = {}) {
+  const tag = options.tag ?? "port-env";
+  const failLine = options.failLine ?? "missing-port-env";
+  const raw2 = process.env[envName];
+  if (raw2 === void 0 || raw2 === "") {
+    const msg = `[${tag}] ${failLine} reason=missing-env env=${envName}`;
+    throw new MissingPortEnvError(envName, tag, failLine, msg);
+  }
+  const parsed = Number.parseInt(raw2, 10);
+  if (!Number.isInteger(parsed) || parsed < VALID_PORT_MIN || parsed > VALID_PORT_MAX || String(parsed) !== raw2.trim()) {
+    const msg = `[${tag}] ${failLine} reason=invalid-port-env env=${envName} value=${JSON.stringify(raw2)}`;
+    throw new MissingPortEnvError(envName, tag, failLine, msg);
+  }
+  return parsed;
+}
+var MissingPortEnvError, VALID_PORT_MIN, VALID_PORT_MAX;
+var init_src = __esm({
+  "../lib/require-port-env/src/index.ts"() {
+    "use strict";
+    MissingPortEnvError = class extends Error {
+      envName;
+      tag;
+      failLine;
+      constructor(envName, tag, failLine, message) {
+        super(message);
+        this.name = "MissingPortEnvError";
+        this.envName = envName;
+        this.tag = tag;
+        this.failLine = failLine;
+      }
+    };
+    VALID_PORT_MIN = 1;
+    VALID_PORT_MAX = 65535;
+  }
+});
+
+// app/lib/claude-agent/session-store.ts
+import { createHash } from "crypto";
+function fingerprintSessionKey(raw2) {
+  if (typeof raw2 !== "string" || !raw2) return raw2;
+  if (/^sk_[a-f0-9]{16}$/.test(raw2)) return raw2;
+  if (!raw2.startsWith("v1.")) return raw2;
+  return `sk_${createHash("sha256").update(raw2).digest("hex").slice(0, 16)}`;
+}
+function registerSession(cacheKey2, agentType, accountId, _unused, userId, userName, role) {
+  const existing = sessionStore.get(cacheKey2);
+  if (existing) {
+    existing.agentType = agentType;
+    existing.accountId = accountId;
+    existing.userId = userId ?? existing.userId;
+    existing.userName = userName ?? existing.userName;
+    existing.role = role ?? existing.role;
+    return;
+  }
+  sessionStore.set(cacheKey2, { agentType, createdAt: Date.now(), accountId, userId, userName, role });
+}
+function validateSession(cacheKey2, agentType, _signedSessionToken) {
+  const session = sessionStore.get(cacheKey2);
+  if (!session) return { ok: false, reason: "session-not-registered" };
+  if (session.agentType !== agentType) return { ok: false, reason: "agent-type-mismatch" };
+  if (Date.now() - session.createdAt > SESSION_TTL_MS) {
+    sessionStore.delete(cacheKey2);
+    return { ok: false, reason: "session-expired-age" };
+  }
+  return { ok: true };
+}
+function getAccountIdForSession(cacheKey2) {
+  return sessionStore.get(cacheKey2)?.accountId;
+}
+function getUserIdForSession(cacheKey2) {
+  return sessionStore.get(cacheKey2)?.userId;
+}
+function getUserNameForSession(cacheKey2) {
+  return sessionStore.get(cacheKey2)?.userName;
+}
+function getRoleForSession(cacheKey2) {
+  return sessionStore.get(cacheKey2)?.role;
+}
+function getSessionIdForSession(cacheKey2) {
+  return sessionStore.get(cacheKey2)?.sessionId;
+}
+function setSessionIdForSession(cacheKey2, sessionId) {
+  const session = sessionStore.get(cacheKey2);
+  if (!session) return false;
+  session.sessionId = sessionId;
+  return true;
+}
+function setWantsPriorConversation(cacheKey2) {
+  const session = sessionStore.get(cacheKey2);
+  if (session) session.wantsPriorConversation = true;
+}
+function unregisterSession(cacheKey2) {
+  return sessionStore.delete(cacheKey2);
+}
+function getSessionKeyBySessionId(_sessionId) {
+  return void 0;
+}
+var SESSION_TTL_MS, sessionStore;
+var init_session_store = __esm({
+  "app/lib/claude-agent/session-store.ts"() {
+    "use strict";
+    SESSION_TTL_MS = 24 * 60 * 60 * 1e3;
+    sessionStore = /* @__PURE__ */ new Map();
+  }
+});
+
+// ../lib/admin-access-password/src/index.ts
+import { scrypt, randomBytes, timingSafeEqual } from "crypto";
+import { existsSync, readFileSync, writeFileSync, renameSync, unlinkSync, appendFileSync as appendFileSync2, mkdirSync as mkdirSync2 } from "fs";
+import { dirname } from "path";
+function id8(value) {
+  return value.slice(0, 8);
+}
+function rowIds(users) {
+  return users.map((u) => id8(u.userId)).join(",");
+}
+function appendUsersAuditLine(audit, fields) {
+  const sess = audit.session ? ` session=${id8(audit.session)}` : "";
+  const actor = audit.actor.includes("-") ? id8(audit.actor) : audit.actor;
+  const targetFields = audit.target !== void 0 ? ` target=${audit.target.includes("-") ? id8(audit.target) : audit.target} explicitUserId=${audit.explicitUserId ? "true" : "false"}` : "";
+  const line = `[users-audit] action=${fields.action} actor=${actor}${targetFields}${sess} field=${fields.field} rowsBefore=${fields.rowsBefore} rowsAfter=${fields.rowsAfter} ts=${(/* @__PURE__ */ new Date()).toISOString()}
+`;
+  try {
+    mkdirSync2(dirname(audit.logFile), { recursive: true, mode: 448 });
+    appendFileSync2(audit.logFile, line, { mode: 384 });
+  } catch (err) {
+    console.error(
+      `[users-audit] op=write-failed logFile=${audit.logFile} error=${err instanceof Error ? err.message : String(err)}`
+    );
+  }
+}
+function scryptAsync(password, salt) {
+  return new Promise((resolve4, reject) => {
+    scrypt(password, salt, SCRYPT_KEYLEN, { N: SCRYPT_N, r: SCRYPT_R, p: SCRYPT_P }, (err, key) => {
+      if (err) reject(err);
+      else resolve4(key);
+    });
+  });
+}
+async function hashAccessPassword(password) {
+  const salt = randomBytes(32);
+  const hash = await scryptAsync(password, salt);
+  return `${salt.toString("hex")}:${hash.toString("hex")}`;
+}
+async function matchesHash(password, stored) {
+  const colon = stored.indexOf(":");
+  if (colon === -1) return false;
+  const salt = Buffer.from(stored.slice(0, colon), "hex");
+  const storedHash = Buffer.from(stored.slice(colon + 1), "hex");
+  if (storedHash.length !== SCRYPT_KEYLEN) return false;
+  let computed;
+  try {
+    computed = await scryptAsync(password, salt);
+  } catch {
+    return false;
+  }
+  return timingSafeEqual(computed, storedHash);
+}
+function readUsers(usersFile) {
+  if (!existsSync(usersFile)) return [];
+  const raw2 = readFileSync(usersFile, "utf-8").trim();
+  if (!raw2) return [];
+  const parsed = JSON.parse(raw2);
+  if (!Array.isArray(parsed)) throw new Error("users.json is not an array");
+  return parsed;
+}
+function writeUsersAtomic(usersFile, users) {
+  const tmp = `${usersFile}.tmp-${process.pid}`;
+  writeFileSync(tmp, JSON.stringify(users, null, 2) + "\n", { mode: 384 });
+  renameSync(tmp, usersFile);
+}
+async function setAccessPassword(userId, password, usersFile, audit) {
+  const users = readUsers(usersFile);
+  const idx = users.findIndex((u) => u.userId === userId);
+  if (idx === -1) throw new Error(`no users.json record for userId=${userId}`);
+  if (await accessPasswordCollides(password, usersFile, userId)) {
+    throw new Error("accessHash collision: password already in use by another admin");
+  }
+  const rows = rowIds(users);
+  users[idx] = { ...users[idx], accessHash: await hashAccessPassword(password) };
+  writeUsersAtomic(usersFile, users);
+  appendUsersAuditLine(audit, { action: "set-access", field: "accessHash", rowsBefore: rows, rowsAfter: rows });
+}
+async function verifyAccessPassword(password, usersFile) {
+  let users;
+  try {
+    users = readUsers(usersFile);
+  } catch {
+    return null;
+  }
+  for (const u of users) {
+    if (typeof u.accessHash === "string" && await matchesHash(password, u.accessHash)) {
+      return u.userId;
+    }
+  }
+  return null;
+}
+async function accessPasswordCollides(password, usersFile, excludeUserId) {
+  let users;
+  try {
+    users = readUsers(usersFile);
+  } catch {
+    return false;
+  }
+  for (const u of users) {
+    if (u.userId === excludeUserId) continue;
+    if (typeof u.accessHash === "string" && await matchesHash(password, u.accessHash)) {
+      return true;
+    }
+  }
+  return false;
+}
+function anyAccessPasswordConfigured(usersFile) {
+  let users;
+  try {
+    users = readUsers(usersFile);
+  } catch {
+    return false;
+  }
+  return users.some((u) => typeof u.accessHash === "string" && u.accessHash.length > 0);
+}
+function accessStoreUnreadable(usersFile) {
+  if (!existsSync(usersFile)) return false;
+  try {
+    readUsers(usersFile);
+    return false;
+  } catch {
+    return true;
+  }
+}
+function migrateLegacyRemotePassword(usersFile, legacyFile, ownerUserId, audit) {
+  if (!existsSync(legacyFile)) return "noop-no-legacy";
+  const legacy = readFileSync(legacyFile, "utf-8").trim();
+  const users = readUsers(usersFile);
+  const idx = users.findIndex((u) => u.userId === ownerUserId);
+  if (idx === -1) return "noop-no-owner";
+  const existing = users[idx].accessHash;
+  if (typeof existing === "string" && existing.length > 0) {
+    unlinkSync(legacyFile);
+    return "noop-owner-has-hash";
+  }
+  if (!legacy.includes(":")) {
+    unlinkSync(legacyFile);
+    return "noop-no-legacy";
+  }
+  const rows = rowIds(users);
+  users[idx] = { ...users[idx], accessHash: legacy };
+  writeUsersAtomic(usersFile, users);
+  unlinkSync(legacyFile);
+  appendUsersAuditLine(audit, { action: "migrate", field: "accessHash", rowsBefore: rows, rowsAfter: rows });
+  return "migrated";
+}
+function readLegacyRemoteHash(legacyFile) {
+  if (!existsSync(legacyFile)) return null;
+  const raw2 = readFileSync(legacyFile, "utf-8").trim();
+  return raw2.includes(":") ? raw2 : null;
+}
+var SCRYPT_N, SCRYPT_R, SCRYPT_P, SCRYPT_KEYLEN;
+var init_src2 = __esm({
+  "../lib/admin-access-password/src/index.ts"() {
+    "use strict";
+    SCRYPT_N = 16384;
+    SCRYPT_R = 8;
+    SCRYPT_P = 1;
+    SCRYPT_KEYLEN = 64;
+  }
+});
+
+// app/lib/password-strength.ts
+function validatePasswordStrength(password) {
+  return [
+    { key: "length", label: "At least 8 characters", met: password.length >= 8 },
+    { key: "number", label: "Contains a number", met: /\d/.test(password) },
+    { key: "special", label: "Contains a special character", met: /[^A-Za-z0-9]/.test(password) },
+    { key: "whitespace", label: "No spaces", met: password.length > 0 && !/\s/.test(password) }
+  ];
+}
+function isPasswordValid(password) {
+  return validatePasswordStrength(password).every((r) => r.met);
+}
+var init_password_strength = __esm({
+  "app/lib/password-strength.ts"() {
+    "use strict";
+  }
+});
+
+// app/lib/remote-auth.ts
+import { scrypt as scrypt2, randomBytes as randomBytes2, timingSafeEqual as timingSafeEqual2, createHmac } from "crypto";
+import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, mkdirSync as mkdirSync3 } from "fs";
+import { dirname as dirname2 } from "path";
+function scryptAsync2(password, salt) {
+  return new Promise((resolve4, reject) => {
+    scrypt2(password, salt, SCRYPT_KEYLEN2, { N: SCRYPT_N2, r: SCRYPT_R2, p: SCRYPT_P2 }, (err, key) => {
+      if (err) reject(err);
+      else resolve4(key);
+    });
+  });
+}
+async function hashPassword(password) {
+  const salt = randomBytes2(32);
+  const hash = await scryptAsync2(password, salt);
+  return `${salt.toString("hex")}:${hash.toString("hex")}`;
+}
+function isRemoteAuthConfigured() {
+  if (anyAccessPasswordConfigured(USERS_FILE)) return true;
+  if (accessStoreUnreadable(USERS_FILE)) return true;
+  return readLegacyRemoteHash(REMOTE_PASSWORD_FILE) !== null;
+}
+async function setRemotePassword(password) {
+  const hash = await hashPassword(password);
+  writeFileSync2(REMOTE_PASSWORD_FILE, hash, "utf-8");
+}
+async function verifyRemotePassword(password) {
+  const matchedUserId = await verifyAccessPassword(password, USERS_FILE);
+  if (matchedUserId) return { ok: true, hashBytes: SCRYPT_KEYLEN2, userId: matchedUserId };
+  const legacy = readLegacyRemoteHash(REMOTE_PASSWORD_FILE);
+  if (legacy && await matchesHash(password, legacy)) {
+    return { ok: true, hashBytes: SCRYPT_KEYLEN2, userId: null };
+  }
+  const configured = anyAccessPasswordConfigured(USERS_FILE) || legacy !== null;
+  return { ok: false, why: configured ? "password-mismatch" : "no-password-file", hashBytes: 0 };
+}
+function getSecret() {
+  if (cachedSecret) return cachedSecret;
+  try {
+    const hex2 = readFileSync2(REMOTE_SESSION_SECRET_FILE, "utf-8").trim();
+    if (hex2.length === SECRET_BYTES * 2) {
+      cachedSecret = Buffer.from(hex2, "hex");
+      return cachedSecret;
+    }
+  } catch {
+  }
+  const fresh = randomBytes2(SECRET_BYTES).toString("hex");
+  try {
+    mkdirSync3(dirname2(REMOTE_SESSION_SECRET_FILE), { recursive: true, mode: 448 });
+    writeFileSync2(REMOTE_SESSION_SECRET_FILE, fresh, { mode: 384, flag: "wx" });
+  } catch {
+  }
+  const hex = readFileSync2(REMOTE_SESSION_SECRET_FILE, "utf-8").trim();
+  cachedSecret = Buffer.from(hex, "hex");
+  return cachedSecret;
+}
+function base64urlEncode(buf) {
+  return buf.toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function base64urlDecode(s) {
+  const padded = s.replace(/-/g, "+").replace(/_/g, "/") + "=".repeat((4 - s.length % 4) % 4);
+  return Buffer.from(padded, "base64");
+}
+function signPayload(payloadJson, secret) {
+  return base64urlEncode(createHmac("sha256", secret).update(payloadJson).digest());
+}
+function createRemoteSession(opts = {}) {
+  const payload = { c: opts.now ?? Date.now(), n: randomBytes2(NONCE_BYTES).toString("hex") };
+  const payloadJson = JSON.stringify(payload);
+  const payloadB64 = base64urlEncode(Buffer.from(payloadJson, "utf-8"));
+  const sig = signPayload(payloadJson, getSecret());
+  return `${TOKEN_PREFIX}${payloadB64}.${sig}`;
+}
+function parseToken(token) {
+  if (!token.startsWith(TOKEN_PREFIX)) return null;
+  const rest = token.slice(TOKEN_PREFIX.length);
+  const dot = rest.indexOf(".");
+  if (dot === -1) return null;
+  const payloadB64 = rest.slice(0, dot);
+  const sigB64 = rest.slice(dot + 1);
+  if (!payloadB64 || !sigB64) return null;
+  let payloadJson;
+  try {
+    payloadJson = base64urlDecode(payloadB64).toString("utf-8");
+  } catch {
+    return null;
+  }
+  const expected = signPayload(payloadJson, getSecret());
+  const expectedBuf = Buffer.from(expected, "utf-8");
+  const provBuf = Buffer.from(sigB64, "utf-8");
+  const signatureValid = expectedBuf.length === provBuf.length && timingSafeEqual2(expectedBuf, provBuf);
+  let payload;
+  try {
+    payload = JSON.parse(payloadJson);
+  } catch {
+    return null;
+  }
+  if (!payload || typeof payload !== "object" || typeof payload.c !== "number" || typeof payload.n !== "string") {
+    return null;
+  }
+  return { payload, signatureValid };
+}
+function validateRemoteSession(token, now = Date.now()) {
+  if (!token) return false;
+  const parsed = parseToken(token);
+  if (!parsed || !parsed.signatureValid) return false;
+  return now - parsed.payload.c <= SESSION_TTL_MS2;
+}
+function describeRemoteSession(token, now = Date.now()) {
+  if (!token) return { present: false, expired: false };
+  const parsed = parseToken(token);
+  if (!parsed || !parsed.signatureValid) return { present: false, expired: false };
+  return { present: true, expired: now - parsed.payload.c > SESSION_TTL_MS2 };
+}
+function normalizeIp(ip) {
+  if (!ip) return void 0;
+  const trimmed = ip.trim();
+  if (trimmed.startsWith("::ffff:")) return trimmed.slice(7);
+  return trimmed;
+}
+function isLoopback(ip) {
+  return ip === "127.0.0.1" || ip.startsWith("127.") || ip === "::1";
+}
+function isPrivateIp(ip) {
+  const parts = ip.split(".");
+  if (parts.length !== 4) return false;
+  const a = parseInt(parts[0], 10);
+  const b = parseInt(parts[1], 10);
+  if (Number.isNaN(a) || Number.isNaN(b)) return false;
+  if (a === 10) return true;
+  if (a === 172 && b >= 16 && b <= 31) return true;
+  if (a === 192 && b === 168) return true;
+  if (a === 169 && b === 254) return true;
+  return false;
+}
+function classifyNormalizedIp(ip) {
+  if (isLoopback(ip) || isPrivateIp(ip)) return "lan";
+  return "external";
+}
+function resolveClientIp(remoteAddress, xForwardedFor) {
+  const remote = normalizeIp(remoteAddress);
+  if (!remote) return { ip: "", kind: "unknown" };
+  if (isLoopback(remote) && xForwardedFor) {
+    const firstIp = normalizeIp(xForwardedFor.split(",")[0]?.trim());
+    if (firstIp) {
+      return { ip: firstIp, kind: classifyNormalizedIp(firstIp) };
+    }
+  }
+  return { ip: remote, kind: classifyNormalizedIp(remote) };
+}
+function bucketKey(client) {
+  return client.kind === "external" ? client.ip : LOCAL_BUCKET;
+}
+function checkRateLimit(client) {
+  const key = bucketKey(client);
+  const rec = rateLimitMap.get(key);
+  if (!rec) return null;
+  if (rec.lockedUntil > Date.now()) {
+    const remaining = Math.ceil((rec.lockedUntil - Date.now()) / 1e3);
+    return `Too many attempts. Try again in ${remaining}s`;
+  }
+  if (rec.lockedUntil > 0) {
+    rateLimitMap.delete(key);
+  }
+  return null;
+}
+function recordFailedAttempt(client) {
+  const key = bucketKey(client);
+  const rec = rateLimitMap.get(key) ?? { count: 0, lockedUntil: 0 };
+  rec.count++;
+  if (rec.count >= MAX_ATTEMPTS) {
+    rec.lockedUntil = Date.now() + LOCKOUT_MS;
+    rec.count = 0;
+  }
+  rateLimitMap.set(key, rec);
+}
+function clearRateLimit(client) {
+  rateLimitMap.delete(bucketKey(client));
+}
+function renderLoginPage(opts) {
+  const error = opts?.error ?? "";
+  const lockout = opts?.lockoutSeconds ?? 0;
+  const redirect = opts?.redirect ?? "/";
+  const mode = opts?.mode ?? "login";
+  const changeError = opts?.changeError ?? "";
+  const success = opts?.success ?? "";
+  const setupError = opts?.setupError ?? "";
+  const primaryColor = opts?.primaryColor ?? "#7C8C72";
+  const primaryHoverColor = opts?.primaryHoverColor ?? "#6A7A62";
+  const primarySubtle = opts?.primarySubtle ?? "rgba(124,140,114,0.08)";
+  const productName = opts?.productName ?? "Maxy";
+  const logoPath = opts?.logoPath ?? "/brand/maxy-monochrome.png";
+  const faviconPath = opts?.faviconPath ?? "/favicon.ico";
+  const displayFont = opts?.displayFont ?? "'Newsreader', Georgia, serif";
+  const bodyFont = opts?.bodyFont ?? "'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif";
+  const logoContainsName = opts?.logoContainsName ?? false;
+  const tagline = opts?.tagline ?? "";
+  const origin = opts?.origin ?? "";
+  const ogCardPath = opts?.ogCardPath ?? "";
+  const manifestPath = opts?.manifestPath ?? "";
+  const appleTouchIconPath = opts?.appleTouchIconPath ?? "";
+  const pwaThemeColor = opts?.themeColor ?? "";
+  const ogBlock = origin && ogCardPath ? [
+    `<meta property="og:title" content="Sign in \u2014 ${escapeHtml(productName)}">`,
+    `<meta property="og:description" content="${escapeHtml(tagline)}">`,
+    `<meta property="og:type" content="website">`,
+    `<meta property="og:url" content="${escapeHtml(origin)}">`,
+    `<meta property="og:image" content="${escapeHtml(origin + ogCardPath)}">`,
+    `<meta property="og:image:width" content="1200">`,
+    `<meta property="og:image:height" content="630">`,
+    `<meta name="twitter:card" content="summary_large_image">`,
+    `<meta name="twitter:title" content="Sign in \u2014 ${escapeHtml(productName)}">`,
+    `<meta name="twitter:description" content="${escapeHtml(tagline)}">`,
+    `<meta name="twitter:image" content="${escapeHtml(origin + ogCardPath)}">`
+  ].join("\n  ") : "";
+  const pwaInstallBlock = manifestPath && appleTouchIconPath ? [
+    `<link rel="manifest" href="${escapeHtml(manifestPath)}">`,
+    `<link rel="apple-touch-icon" href="${escapeHtml(appleTouchIconPath)}">`,
+    `<meta name="mobile-web-app-capable" content="yes">`,
+    `<meta name="apple-mobile-web-app-capable" content="yes">`,
+    pwaThemeColor ? `<meta name="theme-color" content="${escapeHtml(pwaThemeColor)}">` : ""
+  ].filter(Boolean).join("\n  ") : "";
+  const errorHtml = error ? `<p class="msg msg--error">${escapeHtml(error)}</p>` : "";
+  const changeErrorHtml = changeError ? `<p class="msg msg--error">${escapeHtml(changeError)}</p>` : "";
+  const successHtml = success ? `<p class="msg msg--success">${escapeHtml(success)}</p>` : "";
+  const lockoutHtml = lockout > 0 ? `<p class="msg msg--error">Too many attempts. Try again in <span id="countdown">${lockout}</span>s</p>
+       <script>
+         (function() {
+           var s = ${lockout};
+           var el = document.getElementById('countdown');
+           var iv = setInterval(function() { s--; el.textContent = s; if (s <= 0) { clearInterval(iv); location.reload(); } }, 1000);
+         })();
+       </script>` : "";
+  const setupErrorHtml = setupError ? `<p class="msg msg--error">${escapeHtml(setupError)}</p>` : "";
+  const formDisabled = lockout > 0 ? "disabled" : "";
+  const loginDisplay = mode === "login" ? "block" : "none";
+  const changeDisplay = mode === "change" ? "block" : "none";
+  const setupDisplay = mode === "setup" ? "block" : "none";
+  const successDisplay = mode === "success" ? "block" : "none";
+  const subtitleText = mode === "setup" ? "Set your remote password" : "Remote access";
+  const displayFontName = displayFont.match(/^'([^']+)'/)?.[1] ?? "";
+  const bodyFontName = bodyFont.match(/^'([^']+)'/)?.[1] ?? "";
+  const googleFontsLink = displayFontName || bodyFontName ? [
+    '<link rel="preconnect" href="https://fonts.googleapis.com">',
+    '<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>',
+    '<link href="https://fonts.googleapis.com/css2?' + [
+      displayFontName ? `family=${displayFontName.replace(/ /g, "+")}:wght@300;400` : "",
+      bodyFontName ? `family=${bodyFontName.replace(/ /g, "+")}:wght@400;500` : ""
+    ].filter(Boolean).join("&") + '&display=swap" rel="stylesheet">'
+  ].join("\n  ") : "";
+  return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Sign in \u2014 ${escapeHtml(productName)}</title>
+  <link rel="icon" href="${escapeHtml(faviconPath)}">
+  ${pwaInstallBlock}
+  ${ogBlock}
+  ${googleFontsLink}
+  <style>
+    * { margin: 0; padding: 0; box-sizing: border-box; }
+    body {
+      font-family: ${bodyFont};
+      background: #F6F5F2;
+      color: #2A2D38;
+      min-height: 100vh;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+    }
+    .page {
+      display: flex;
+      flex-direction: column;
+      align-items: center;
+      gap: 24px;
+      max-width: 420px;
+      width: 100%;
+      padding: 40px 20px;
+    }
+    .logo-img {
+      width: 110px;
+      height: 110px;
+      margin: -11px;
+      object-fit: contain;
+    }
+    .title {
+      font-family: ${displayFont};
+      font-weight: 300;
+      font-size: 28px;
+      color: #2A2D38;
+      text-align: center;
+      letter-spacing: -0.01em;
+      line-height: 1.3;
+    }
+    .subtitle {
+      font-size: 15px;
+      color: #4A4D58;
+      text-align: center;
+      margin-top: -8px;
+    }
+    .form-wrap {
+      width: 100%;
+      max-width: 300px;
+    }
+    .field { margin-bottom: 12px; }
+    .field-label {
+      display: block;
+      font-size: 13px;
+      font-weight: 500;
+      color: #4A4D58;
+      margin-bottom: 6px;
+    }
+    .field-input {
+      width: 100%;
+      padding: 10px 12px;
+      border: 1px solid #E4E3DE;
+      border-radius: 8px;
+      font-size: 15px;
+      font-family: inherit;
+      outline: none;
+      background: #fff;
+      transition: border-color 0.15s, box-shadow 0.15s;
+    }
+    .field-input:focus {
+      border-color: ${primaryColor};
+      box-shadow: 0 0 0 3px ${primarySubtle};
+    }
+    .options {
+      display: flex;
+      align-items: center;
+      justify-content: space-between;
+      gap: 12px;
+      margin-top: 8px;
+    }
+
+    /* Checkbox \u2014 matches Maxy shared checkbox (asterisk-in-square) */
+    .check {
+      position: relative;
+      display: flex;
+      align-items: center;
+      gap: 8px;
+      cursor: pointer;
+      user-select: none;
+    }
+    .check input { position: absolute; opacity: 0; width: 0; height: 0; pointer-events: none; }
+    .check-box {
+      width: 14px;
+      height: 14px;
+      border: 1px solid #E4E3DE;
+      border-radius: 2px;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      font-size: 10px;
+      color: transparent;
+      transition: border-color 0.15s, color 0.15s;
+      flex-shrink: 0;
+    }
+    .check input:checked + .check-box {
+      border-color: ${primaryColor};
+      color: ${primaryColor};
+    }
+    .check-label {
+      font-size: 13px;
+      color: #4A4D58;
+    }
+
+    /* Ghost button \u2014 matches Maxy ghost variant */
+    .ghost {
+      background: none;
+      border: none;
+      font-family: inherit;
+      font-size: 13px;
+      color: #4A4D58;
+      cursor: pointer;
+      padding: 4px 0;
+      transition: color 0.15s;
+    }
+    .ghost:hover { color: #2A2D38; }
+
+    /* Primary button */
+    .btn {
+      width: 100%;
+      padding: 12px;
+      margin-top: 16px;
+      background: ${primaryColor};
+      color: #fff;
+      border: none;
+      border-radius: 10px;
+      font-size: 15px;
+      font-weight: 500;
+      font-family: inherit;
+      cursor: pointer;
+      transition: background 0.15s;
+    }
+    .btn:hover:not(:disabled) { background: ${primaryHoverColor}; }
+    .btn:disabled { opacity: 0.5; cursor: not-allowed; }
+
+    /* Messages */
+    .msg {
+      font-size: 13px;
+      text-align: center;
+      margin-top: 8px;
+    }
+    .msg--error { color: #c44; }
+    .msg--success { color: ${primaryColor}; }
+
+    /* Strength checklist (setup mode) */
+    .strength-checklist { margin: 8px 0; }
+    .strength-item {
+      font-size: 13px;
+      color: #4A4D58;
+      padding: 2px 0;
+      transition: color 0.15s;
+    }
+    .strength-icon {
+      display: inline-block;
+      width: 16px;
+      text-align: center;
+    }
+
+    @media (max-width: 440px) {
+      .page { padding: 24px 16px; }
+    }
+  </style>
+</head>
+<body>
+  <div class="page">
+    <img src="${escapeHtml(logoPath)}" alt="${escapeHtml(productName)}" class="logo-img">
+    <h1 class="title"${logoContainsName ? ' style="display:none"' : ""}>${escapeHtml(productName)}</h1>
+    <p class="subtitle">${escapeHtml(subtitleText)}</p>
+
+    ${successHtml}
+
+    <!-- Login -->
+    <div id="login-section" class="form-wrap" style="display:${loginDisplay}">
+      <form method="POST" action="/__remote-auth/login">
+        <input type="hidden" name="redirect" value="${escapeHtml(redirect)}">
+        <div class="field">
+          <label class="field-label" for="password">Password</label>
+          <input class="field-input" type="password" id="password" name="password" required autofocus ${formDisabled}>
+        </div>
+        <div class="options">
+          <label class="check">
+            <input type="checkbox" id="show-login-pw">
+            <span class="check-box">\u2731</span>
+            <span class="check-label">Show password</span>
+          </label>
+          <button type="button" class="ghost" onclick="toggleMode('change')">Change password</button>
+        </div>
+        <button type="submit" class="btn" ${formDisabled}>Sign in</button>
+      </form>
+      ${errorHtml}
+      ${lockoutHtml}
+    </div>
+
+    <!-- Change password -->
+    <div id="change-section" class="form-wrap" style="display:${changeDisplay}">
+      <form method="POST" action="/__remote-auth/change-password">
+        <input type="hidden" name="redirect" value="${escapeHtml(redirect)}">
+        <div class="field">
+          <label class="field-label" for="current_password">Current password</label>
+          <input class="field-input" type="password" id="current_password" name="current_password" required ${formDisabled}>
+        </div>
+        <div class="field">
+          <label class="field-label" for="new_password">New password</label>
+          <input class="field-input" type="password" id="new_password" name="new_password" required ${formDisabled}>
+        </div>
+        <div class="field">
+          <label class="field-label" for="confirm_password">Confirm new password</label>
+          <input class="field-input" type="password" id="confirm_password" name="confirm_password" required ${formDisabled}>
+        </div>
+        <div class="options">
+          <label class="check">
+            <input type="checkbox" id="show-change-pw">
+            <span class="check-box">\u2731</span>
+            <span class="check-label">Show passwords</span>
+          </label>
+          <button type="button" class="ghost" onclick="toggleMode('login')">Back to sign in</button>
+        </div>
+        <button type="submit" class="btn" ${formDisabled}>Change password</button>
+      </form>
+      ${changeErrorHtml}
+    </div>
+
+    <!-- Setup (initial password) -->
+    <div id="setup-section" class="form-wrap" style="display:${setupDisplay}">
+      <form method="POST" action="/__remote-auth/set-initial-password">
+        <div class="field">
+          <label class="field-label" for="setup_password">Password</label>
+          <input class="field-input" type="password" id="setup_password" name="password" required autofocus>
+        </div>
+        <div class="field">
+          <label class="field-label" for="setup_confirm">Confirm password</label>
+          <input class="field-input" type="password" id="setup_confirm" name="confirm_password" required>
+        </div>
+        <div id="strength-checklist" class="strength-checklist">
+          <div class="strength-item" id="req-length"><span class="strength-icon">\u25CB</span> At least 8 characters</div>
+          <div class="strength-item" id="req-number"><span class="strength-icon">\u25CB</span> Contains a number</div>
+          <div class="strength-item" id="req-special"><span class="strength-icon">\u25CB</span> Contains a special character</div>
+          <div class="strength-item" id="req-spaces"><span class="strength-icon">\u25CB</span> No spaces</div>
+        </div>
+        <div class="options">
+          <label class="check">
+            <input type="checkbox" id="show-setup-pw">
+            <span class="check-box">\u2731</span>
+            <span class="check-label">Show passwords</span>
+          </label>
+        </div>
+        <button type="submit" class="btn" id="setup-submit" disabled>Set password</button>
+      </form>
+      ${setupErrorHtml}
+    </div>
+
+    <!-- Success (after initial password set) -->
+    <div id="success-section" class="form-wrap" style="display:${successDisplay}">
+      <p class="msg msg--success" style="font-size:15px;margin-bottom:4px;">\u2713 Password set</p>
+      <p style="font-size:14px;color:#4A4D58;text-align:center;">You can close this tab and return to the onboarding tab.</p>
+      <a href="/" style="display:block;text-align:center;margin-top:16px;font-size:13px;color:#4A4D58;text-decoration:none;" onmouseover="this.style.color='#2A2D38'" onmouseout="this.style.color='#4A4D58'">Sign in \u2192</a>
+      <script>
+        (function() {
+          try {
+            var ch = new BroadcastChannel('platform-onboarding');
+            setTimeout(function() {
+              ch.postMessage({ type: 'remote-password-set' });
+              ch.close();
+            }, 2500);
+          } catch(e) {}
+        })();
+      </script>
+    </div>
+  </div>
+
+  <script>
+    /* Toggle between login and change-password modes */
+    function toggleMode(mode) {
+      document.getElementById('login-section').style.display = mode === 'login' ? 'block' : 'none';
+      document.getElementById('change-section').style.display = mode === 'change' ? 'block' : 'none';
+      /* Focus first input in the active section */
+      var id = mode === 'login' ? 'password' : 'current_password';
+      var el = document.getElementById(id);
+      if (el) el.focus();
+    }
+
+    /* Show/hide password toggles */
+    function bindShowHide(checkboxId, inputIds) {
+      var cb = document.getElementById(checkboxId);
+      if (!cb) return;
+      cb.addEventListener('change', function() {
+        var type = cb.checked ? 'text' : 'password';
+        inputIds.forEach(function(id) {
+          var el = document.getElementById(id);
+          if (el) el.type = type;
+        });
+      });
+    }
+    bindShowHide('show-login-pw', ['password']);
+    bindShowHide('show-change-pw', ['current_password', 'new_password', 'confirm_password']);
+    bindShowHide('show-setup-pw', ['setup_password', 'setup_confirm']);
+
+    /* Explicit Enter-to-submit for the login password field */
+    var loginPw = document.getElementById('password');
+    if (loginPw) {
+      loginPw.addEventListener('keydown', function(e) {
+        if (e.key === 'Enter') {
+          e.preventDefault();
+          this.closest('form').requestSubmit();
+        }
+      });
+    }
+
+    /* Live password strength validation (setup mode) */
+    (function() {
+      var pw = document.getElementById('setup_password');
+      var confirm = document.getElementById('setup_confirm');
+      var btn = document.getElementById('setup-submit');
+      if (!pw || !confirm || !btn) return;
+
+      var rules = [
+        { id: 'req-length', test: function(p) { return p.length >= 8; } },
+        { id: 'req-number', test: function(p) { return /\\d/.test(p); } },
+        { id: 'req-special', test: function(p) { return /[^A-Za-z0-9]/.test(p); } },
+        { id: 'req-spaces', test: function(p) { return p.length > 0 && !/\\s/.test(p); } }
+      ];
+
+      function check() {
+        var p = pw.value;
+        var allMet = true;
+        rules.forEach(function(r) {
+          var el = document.getElementById(r.id);
+          var met = r.test(p);
+          if (!met) allMet = false;
+          el.querySelector('.strength-icon').textContent = met ? '\\u2713' : '\\u25CB';
+          el.style.color = met ? '${primaryColor}' : '#4A4D58';
+        });
+        var match = p.length > 0 && p === confirm.value;
+        btn.disabled = !(allMet && match);
+      }
+
+      pw.addEventListener('input', check);
+      confirm.addEventListener('input', check);
+    })();
+  </script>
+</body>
+</html>`;
+}
+function escapeHtml(str) {
+  return str.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
+var SCRYPT_N2, SCRYPT_R2, SCRYPT_P2, SCRYPT_KEYLEN2, SESSION_TTL_MS2, TOKEN_PREFIX, SECRET_BYTES, NONCE_BYTES, cachedSecret, MAX_ATTEMPTS, LOCKOUT_MS, LOCAL_BUCKET, rateLimitMap;
+var init_remote_auth = __esm({
+  "app/lib/remote-auth.ts"() {
+    "use strict";
+    init_paths();
+    init_loop_registry();
+    init_src2();
+    init_password_strength();
+    SCRYPT_N2 = 16384;
+    SCRYPT_R2 = 8;
+    SCRYPT_P2 = 1;
+    SCRYPT_KEYLEN2 = 64;
+    SESSION_TTL_MS2 = 24 * 60 * 60 * 1e3;
+    TOKEN_PREFIX = "v1.";
+    SECRET_BYTES = 32;
+    NONCE_BYTES = 16;
+    cachedSecret = null;
+    MAX_ATTEMPTS = 5;
+    LOCKOUT_MS = 15 * 60 * 1e3;
+    LOCAL_BUCKET = "__local__";
+    rateLimitMap = /* @__PURE__ */ new Map();
+    registerLoop({
+      name: "rate-limit-cleanup",
+      intervalMs: 15 * 60 * 1e3,
+      run: () => {
+        const now = Date.now();
+        let purged = 0;
+        for (const [key, rec] of rateLimitMap) {
+          if (rec.lockedUntil > 0 && rec.lockedUntil <= now) {
+            rateLimitMap.delete(key);
+            purged += 1;
+          }
+        }
+        return `purged ${purged}, ${rateLimitMap.size} tracked`;
+      }
+    });
+  }
+});
+
+// app/lib/pwa.ts
+function pwaSurfaceForShell(file) {
+  return PWA_SURFACES.find((s) => s.shellFile === file);
+}
+function buildManifest(s, b) {
+  const name = `${b.productName}${s.nameSuffix}`;
+  return {
+    id: s.id,
+    name,
+    short_name: name,
+    start_url: s.startUrl,
+    scope: s.scope,
+    display: "standalone",
+    theme_color: b.themeColor,
+    background_color: b.backgroundColor,
+    // Explicit 192/512 `any` icons (iOS/macOS composite transparency onto black,
+    // so these are opaque) plus a wider-safe-zone `maskable` entry for Android's
+    // circular crop. background_color sets only the splash; the tile background
+    // is baked into the PNGs.
+    icons: [
+      { src: b.appIcon192, sizes: "192x192", purpose: "any" },
+      { src: b.appIcon512, sizes: "512x512", purpose: "any" },
+      { src: b.maskableIcon, sizes: "512x512", purpose: "maskable" }
+    ]
+  };
+}
+function escAttr(s) {
+  return s.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+function swRegisterScript(s) {
+  return [
+    "<script>",
+    "if('serviceWorker' in navigator){navigator.serviceWorker.register('/sw.js').catch(function(e){",
+    `try{fetch('/api/_client-error',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({kind:'event',source:'pwa',op:'sw-register-fail',surface:'${s.surface}',scope:'${s.scope}',err:String((e&&e.message)||e)}),keepalive:true}).catch(function(){});}catch(_){}`,
+    "});}",
+    "</script>"
+  ].join("\n");
+}
+function installHeadLines(manifestPath, b) {
+  return [
+    `<link rel="manifest" href="${escAttr(manifestPath)}">`,
+    `<link rel="apple-touch-icon" href="${escAttr(b.appleTouchIcon)}">`,
+    // Both the standards-based and the legacy Apple capable meta: Chromium
+    // deprecates `apple-mobile-web-app-capable` in favour of
+    // `mobile-web-app-capable`, while iOS Safari still reads the apple one.
+    '<meta name="mobile-web-app-capable" content="yes">',
+    '<meta name="apple-mobile-web-app-capable" content="yes">',
+    `<meta name="theme-color" content="${escAttr(b.themeColor)}">`
+  ];
+}
+function pwaHeadTags(s, b) {
+  return [...installHeadLines(s.manifestPath, b), swRegisterScript(s)].join("\n");
+}
+function pwaCensus(d) {
+  const manifestLinked = PWA_SURFACES.filter((s) => {
+    const html = d.shellHtml(s.shellFile);
+    return html != null && html.includes(`"${s.manifestPath}"`);
+  }).length;
+  const iconsPresent = d.iconExists() ? PWA_SURFACES.length : 0;
+  return { surfaces: PWA_SURFACES.length, manifestLinked, iconsPresent };
+}
+var PWA_SURFACES, MANIFEST_CONTENT_TYPE, SW_CONTENT_TYPE;
+var init_pwa = __esm({
+  "app/lib/pwa.ts"() {
+    "use strict";
+    PWA_SURFACES = [
+      {
+        surface: "admin",
+        shellFile: "index.html",
+        manifestPath: "/manifest-admin.webmanifest",
+        nameSuffix: "",
+        startUrl: "/",
+        scope: "/",
+        id: "/?pwa=admin"
+      },
+      {
+        surface: "operator",
+        shellFile: "operator.html",
+        manifestPath: "/manifest-operator.webmanifest",
+        nameSuffix: " Operator",
+        startUrl: "/",
+        scope: "/",
+        id: "/?pwa=operator"
+      },
+      {
+        surface: "chat",
+        shellFile: "chat.html",
+        manifestPath: "/manifest-chat.webmanifest",
+        nameSuffix: " Chat",
+        startUrl: "/chat",
+        scope: "/chat",
+        id: "/chat?pwa=chat"
+      }
+    ];
+    MANIFEST_CONTENT_TYPE = "application/manifest+json";
+    SW_CONTENT_TYPE = "application/javascript";
+  }
+});
+
+// app/lib/auth-gate.ts
+function canAccessAdmin(input) {
+  const client = resolveClientIp(input.remoteAddress, input.xForwardedFor);
+  if (input.isPublicHost(input.host)) {
+    return { allow: false, reason: "public-host", client };
+  }
+  if (client.kind !== "external") {
+    return { allow: true, client };
+  }
+  if (!isRemoteAuthConfigured()) {
+    return { allow: false, reason: "remote-unconfigured", client };
+  }
+  const token = parseCookieValue(input.cookieHeader, "__remote_session");
+  if (token && validateRemoteSession(token)) {
+    return { allow: true, client };
+  }
+  return { allow: false, reason: "unauthorized", client };
+}
+function parseCookieValue(cookieHeader, name) {
+  if (!cookieHeader) return null;
+  const match2 = cookieHeader.match(new RegExp(`(?:^|;\\s*)${name}=([^;]*)`));
+  if (!match2) return null;
+  try {
+    return decodeURIComponent(match2[1]);
+  } catch {
+    return null;
+  }
+}
+function isApiRequestPath(path) {
+  return path.startsWith("/api/");
+}
+function isRemoteAuthBypassPath(path) {
+  return path === "/favicon.ico" || path.startsWith("/assets/") || path.startsWith("/brand/") || // Public free/busy is read by the booking page (a separate Cloudflare Pages
+  // origin) against the brand host with no admin cookie. It is public by
+  // design — open slots only, no :Meeting detail — so it bypasses the gate
+  // exactly like /brand/. The detail-leak guard lives in the route + its test.
+  path === "/api/calendar/free-busy" || // Task 2365 — Telegram POSTs the webhook from its own servers, which hold
+  // no __remote_session cookie and can never obtain one, so every delivery
+  // was answered 401 here before the route ever ran. The route authenticates
+  // the request itself against the per-account secret header
+  // (server/routes/telegram.ts), exactly the request-borne-auth precedent the
+  // free-busy entry above sets. The trailing slash keeps a sibling path such
+  // as /api/telegram-admin/ outside the exemption.
+  path.startsWith("/api/telegram/") || // Task 2502 — the field job sheet runs inside Telegram's webview on a
+  // worker's phone, which reaches the brand host over the public tunnel and
+  // holds no __remote_session cookie. The route authenticates every request
+  // itself against the bot's own token (server/routes/field.ts), exactly the
+  // request-borne-auth precedent the two entries above set. The document is
+  // exempt as well as the API because it is the page Telegram opens, and it
+  // carries no data of its own.
+  //
+  // The trailing slash on the API prefix is load-bearing: without it a
+  // sibling such as /api/field-admin/ would be exempted by accident.
+  path === "/field" || path.startsWith("/api/field/") || PWA_PUBLIC_PATHS.has(path);
+}
+var PWA_PUBLIC_PATHS;
+var init_auth_gate = __esm({
+  "app/lib/auth-gate.ts"() {
+    "use strict";
+    init_remote_auth();
+    init_pwa();
+    PWA_PUBLIC_PATHS = /* @__PURE__ */ new Set(["/sw.js", ...PWA_SURFACES.map((s) => s.manifestPath)]);
+  }
+});
+
+// app/lib/claude-agent/plugin-manifest.ts
+import { resolve as resolve3, join } from "path";
+import {
+  readFileSync as readFileSync4,
+  writeFileSync as writeFileSync4,
+  readdirSync,
+  existsSync as existsSync3,
+  statSync,
+  rmSync
+} from "fs";
+import { createHash as createHash2 } from "crypto";
+function isMissingPluginDir(pluginDir) {
+  const pluginRoot = resolve3(PLATFORM_ROOT, "plugins", pluginDir);
+  if (existsSync3(resolve3(pluginRoot, "PLUGIN.md"))) return false;
+  if (existsSync3(resolve3(pluginRoot, "mcp/dist/index.js"))) return false;
+  return true;
+}
+function findMissingPlugins(enabledPlugins) {
+  if (!Array.isArray(enabledPlugins) || enabledPlugins.length === 0) return [];
+  return enabledPlugins.filter(isMissingPluginDir);
+}
+function readBundleSubPlugins(bundlePath) {
+  if (!existsSync3(bundlePath)) return [];
+  let raw2;
+  try {
+    raw2 = readFileSync4(bundlePath, "utf-8");
+  } catch {
+    return [];
+  }
+  const fm = raw2.match(/^---\n([\s\S]*?)\n---/);
+  if (!fm) return [];
+  const subs = [];
+  let inPlugins = false;
+  for (const line of fm[1].split("\n")) {
+    if (/^plugins:/.test(line)) {
+      inPlugins = true;
+      continue;
+    }
+    if (inPlugins) {
+      const m = line.match(/^\s+- (.+)/);
+      if (m) subs.push(m[1].trim());
+      else break;
+    }
+  }
+  return subs;
+}
+function walkPremiumBundles() {
+  const TAG = "[premium-auto-deliver]";
+  if (BUNDLE_MODE === "none") {
+    console.log(`${TAG} gate brand=${BRAND_NAME} mode=none bundles=[]`);
+    return [];
+  }
+  const onDisk = walkPremiumBundlesOnDisk();
+  if (BUNDLE_MODE === "all") {
+    console.log(`${TAG} gate brand=${BRAND_NAME} mode=all bundles=[${onDisk.map((b) => b.bundle).join(",")}]`);
+    return onDisk;
+  }
+  const allow = new Set(BUNDLE_ALLOWLIST);
+  const kept = onDisk.filter((b) => allow.has(b.bundle));
+  const onDiskNames = new Set(onDisk.map((b) => b.bundle));
+  const missing = BUNDLE_ALLOWLIST.filter((name) => !onDiskNames.has(name));
+  console.log(
+    `${TAG} gate brand=${BRAND_NAME} mode=allowlist bundles=[${kept.map((b) => b.bundle).join(",")}]` + (missing.length > 0 ? ` missing=[${missing.join(",")}]` : "")
+  );
+  return kept;
+}
+function walkPremiumBundlesOnDisk() {
+  const stagingRoot = resolve3(PLATFORM_ROOT, "../premium-plugins");
+  if (!existsSync3(stagingRoot)) return [];
+  let entries;
+  try {
+    entries = readdirSync(stagingRoot);
+  } catch {
+    return [];
+  }
+  const result = [];
+  for (const bundle of entries) {
+    if (bundle.startsWith(".")) continue;
+    const bundleDir = resolve3(stagingRoot, bundle);
+    try {
+      if (!statSync(bundleDir).isDirectory()) continue;
+    } catch {
+      continue;
+    }
+    const declared = readBundleSubPlugins(join(bundleDir, "BUNDLE.md"));
+    result.push({ bundle, subs: declared.length > 0 ? declared : [bundle] });
+  }
+  return result;
+}
+function reapDuplicateFlatPremiumSubs(bundles, stagingRoot, pluginsDir) {
+  const TAG = "[premium-auto-deliver]";
+  for (const { bundle, subs } of bundles) {
+    const isBundle = existsSync3(join(stagingRoot, bundle, "BUNDLE.md"));
+    for (const sub of subs) {
+      const premiumManifest = isBundle ? resolve3(stagingRoot, bundle, "plugins", sub, "PLUGIN.md") : resolve3(stagingRoot, bundle, "PLUGIN.md");
+      const flatDir = resolve3(pluginsDir, sub);
+      const flatManifest = resolve3(flatDir, "PLUGIN.md");
+      if (!existsSync3(premiumManifest) || !existsSync3(flatManifest)) continue;
+      const premiumSha = createHash2("sha256").update(readFileSync4(premiumManifest)).digest("hex");
+      const flatSha = createHash2("sha256").update(readFileSync4(flatManifest)).digest("hex");
+      if (isBundle) {
+        if (premiumSha === flatSha) {
+          try {
+            rmSync(flatDir, { recursive: true });
+            console.log(`${TAG} reaped sub=${sub} reason=duplicate-of-premium-tree`);
+          } catch (err) {
+            console.log(`${TAG} reap-failed sub=${sub} err=${err instanceof Error ? err.message : String(err)}`);
+          }
+        } else {
+          console.log(`${TAG} flat-copy-divergent sub=${sub} action=skip-keep`);
+        }
+      } else {
+        try {
+          rmSync(flatDir, { recursive: true });
+          console.log(`${TAG} reaped standalone=${sub} matches-source=${flatSha === premiumSha}`);
+        } catch (err) {
+          console.log(`${TAG} reap-failed standalone=${sub} err=${err instanceof Error ? err.message : String(err)}`);
+        }
+      }
+    }
+  }
+}
+function autoDeliverPremiumPlugins() {
+  const bundles = walkPremiumBundles();
+  if (bundles.length === 0) return;
+  const stagingRoot = resolve3(PLATFORM_ROOT, "../premium-plugins");
+  const pluginsDir = resolve3(PLATFORM_ROOT, "plugins");
+  reapDuplicateFlatPremiumSubs(bundles, stagingRoot, pluginsDir);
+}
+function reconcileEnabledPlugins(accountDir, config, accountId) {
+  const TAG = "[premium-auto-deliver]";
+  if (!accountDir || !config) return;
+  const bundles = walkPremiumBundles();
+  const stagingRoot = resolve3(PLATFORM_ROOT, "../premium-plugins");
+  const bundleNames = [];
+  const allSubs = [];
+  for (const { bundle, subs } of bundles) {
+    bundleNames.push(bundle);
+    const bundlePath = join(stagingRoot, bundle, "BUNDLE.md");
+    const isBundle = existsSync3(bundlePath);
+    for (const sub of subs) {
+      const subManifest = isBundle ? resolve3(stagingRoot, bundle, "plugins", sub, "PLUGIN.md") : resolve3(stagingRoot, bundle, "PLUGIN.md");
+      if (!existsSync3(subManifest)) continue;
+      allSubs.push(sub);
+    }
+  }
+  const current = Array.isArray(config.enabledPlugins) ? config.enabledPlugins : [];
+  const currentSet = new Set(current);
+  const added = [];
+  for (const sub of allSubs) {
+    if (currentSet.has(sub)) continue;
+    currentSet.add(sub);
+    added.push(sub);
+  }
+  console.log(
+    `${TAG} stamp accountId=${accountId ?? "unknown"} brand=${BRAND_NAME} mode=${BUNDLE_MODE} bundles=[${bundleNames.join(",")}] added=[${added.join(",")}]`
+  );
+  if (added.length === 0) return;
+  const merged = [...currentSet];
+  const configPath = resolve3(accountDir, "account.json");
+  try {
+    const raw2 = readFileSync4(configPath, "utf-8");
+    const parsed = JSON.parse(raw2);
+    parsed.enabledPlugins = merged;
+    writeFileSync4(configPath, JSON.stringify(parsed, null, 2) + "\n");
+    config.enabledPlugins = merged;
+  } catch (err) {
+    console.error(`${TAG} enabled-stamp write failed: ${err instanceof Error ? err.message : String(err)}`);
+  }
+}
+function reconcileEnabledPluginsForAccounts(accounts) {
+  for (const acct of accounts) {
+    reconcileEnabledPlugins(acct.accountDir, acct.config, acct.accountId);
+  }
+}
+function cleanupLeakedPremiumSubs(accountDir, config, accountId) {
+  const TAG = "[premium-auto-deliver]";
+  if (!accountDir || !config) return;
+  if (BUNDLE_MODE === "all") return;
+  const current = Array.isArray(config.enabledPlugins) ? config.enabledPlugins : [];
+  if (current.length === 0) return;
+  const allow = new Set(BUNDLE_ALLOWLIST);
+  const leakedNames = /* @__PURE__ */ new Set();
+  for (const { bundle, subs } of walkPremiumBundlesOnDisk()) {
+    if (BUNDLE_MODE === "allowlist" && allow.has(bundle)) continue;
+    for (const sub of subs) leakedNames.add(sub);
+  }
+  if (leakedNames.size === 0) return;
+  const removed = [];
+  const kept = [];
+  for (const name of current) {
+    if (leakedNames.has(name)) removed.push(name);
+    else kept.push(name);
+  }
+  if (removed.length === 0) return;
+  const configPath = resolve3(accountDir, "account.json");
+  try {
+    const raw2 = readFileSync4(configPath, "utf-8");
+    const parsed = JSON.parse(raw2);
+    parsed.enabledPlugins = kept;
+    writeFileSync4(configPath, JSON.stringify(parsed, null, 2) + "\n");
+    config.enabledPlugins = kept;
+    console.log(`${TAG} cleanup accountId=${accountId ?? "unknown"} removed=[${removed.join(",")}]`);
+  } catch (err) {
+    console.error(`${TAG} cleanup write failed accountId=${accountId ?? "unknown"}: ${err instanceof Error ? err.message : String(err)}`);
+  }
+}
+var init_plugin_manifest = __esm({
+  "app/lib/claude-agent/plugin-manifest.ts"() {
+    "use strict";
+    init_account();
+    init_paths();
+  }
+});
+
+// app/lib/claude-agent/logging.ts
+var emitMissingOnResolve;
+var init_logging = __esm({
+  "app/lib/claude-agent/logging.ts"() {
+    "use strict";
+    emitMissingOnResolve = (..._args) => null;
+  }
+});
+
+// app/lib/claude-agent/stream-log-writer.ts
+var init_stream_log_writer = __esm({
+  "app/lib/claude-agent/stream-log-writer.ts"() {
+    "use strict";
+  }
+});
+
+// app/lib/claude-agent/summary-helpers.ts
+var stripAttachmentMetaSuffix;
+var init_summary_helpers = __esm({
+  "app/lib/claude-agent/summary-helpers.ts"() {
+    "use strict";
+    stripAttachmentMetaSuffix = (..._args) => null;
+  }
+});
+
+// app/lib/claude-agent.ts
+var init_claude_agent = __esm({
+  "app/lib/claude-agent.ts"() {
+    "use strict";
+    init_account();
+    init_session_store();
+    init_plugin_manifest();
+    init_logging();
+    init_stream_log_writer();
+    init_summary_helpers();
+  }
+});
+
+// server/routes/_helpers.ts
+async function safeJson(c) {
+  try {
+    return await c.req.json();
+  } catch {
+    return null;
+  }
+}
+async function resolveCacheKey(c) {
+  const raw2 = await resolveRawSessionKey(c);
+  if (!raw2) return { fingerprint: "", signedSessionToken: "" };
+  return { fingerprint: fingerprintSessionKey(raw2), signedSessionToken: raw2 };
+}
+async function resolveRawSessionKey(c) {
+  const fromQuery = c.req.query("session_key");
+  if (fromQuery) return fromQuery;
+  const contentType = c.req.header("content-type") ?? "";
+  if (contentType.includes("application/json")) {
+    try {
+      const body = await c.req.json();
+      if (body && typeof body.session_key === "string" && body.session_key) {
+        return body.session_key;
+      }
+    } catch {
+    }
+  }
+  if (contentType.includes("multipart/form-data") || contentType.includes("application/x-www-form-urlencoded")) {
+    try {
+      const form = await c.req.formData();
+      const sk = form.get("session_key");
+      if (typeof sk === "string" && sk) return sk;
+    } catch {
+    }
+  }
+  return "";
+}
+async function tryCookieBridgeForConversation(c, cacheKey2, sessionId) {
+  const path = c.req.path;
+  const sk8 = cacheKey2.slice(0, 8);
+  const cid8 = sessionId.slice(0, 8);
+  const client = resolveClientIp(
+    c.env?.incoming?.socket?.remoteAddress,
+    c.req.header("x-forwarded-for")
+  );
+  if (client.kind === "external") {
+    const cookieToken = parseCookieValue(c.req.header("cookie"), "__remote_session");
+    if (!cookieToken) {
+      console.error(`[session] cookie-bridge-rejected reason=no-cookie path=${path} cacheKey=${sk8}\u2026 sessionId=${cid8}\u2026`);
+      return { ok: false, reason: "no-cookie" };
+    }
+    const desc = describeRemoteSession(cookieToken);
+    if (!desc.present) {
+      console.error(`[session] cookie-bridge-rejected reason=cookie-invalid path=${path} cacheKey=${sk8}\u2026 sessionId=${cid8}\u2026`);
+      return { ok: false, reason: "cookie-invalid" };
+    }
+    if (desc.expired) {
+      console.error(`[session] cookie-bridge-rejected reason=cookie-expired path=${path} cacheKey=${sk8}\u2026 sessionId=${cid8}\u2026`);
+      return { ok: false, reason: "cookie-expired" };
+    }
+  }
+  const owner = await getConversationOwner(sessionId);
+  if (!owner) {
+    console.error(`[session] cookie-bridge-rejected reason=conversation-not-found path=${path} cacheKey=${sk8}\u2026 sessionId=${cid8}\u2026`);
+    return { ok: false, reason: "conversation-not-found" };
+  }
+  if (!isValidAccountId(owner.accountId)) {
+    console.error(`[session] cookie-bridge-rejected reason=account-mismatch path=${path} cacheKey=${sk8}\u2026 sessionId=${cid8}\u2026 conversationAccountId=${owner.accountId.slice(0, 8)}\u2026`);
+    return { ok: false, reason: "account-mismatch" };
+  }
+  registerSession(cacheKey2, "admin", owner.accountId, void 0, owner.userId ?? void 0);
+  console.log(`[session] cookie-bridge accountId=${owner.accountId.slice(0, 8)}\u2026 cacheKey=${sk8}\u2026 sessionId=${cid8}\u2026 path=${path}`);
+  return { ok: true };
+}
+function requireAdminCookie(isPublicHost) {
+  return async (c, next) => {
+    const host = (c.req.header("host") ?? "").split(":")[0];
+    const decision = canAccessAdmin({
+      host,
+      remoteAddress: c.env?.incoming?.socket?.remoteAddress,
+      xForwardedFor: c.req.header("x-forwarded-for"),
+      cookieHeader: c.req.header("cookie"),
+      isPublicHost
+    });
+    if (decision.allow) {
+      await next();
+      return;
+    }
+    if (decision.reason === "public-host") {
+      return c.json({ error: "Not found" }, 404);
+    }
+    const clientIp = c.var.clientIp ?? "unknown";
+    console.error(`[admin-cookie] reject reason=${decision.reason} ip=${clientIp} path=${c.req.path}`);
+    return c.json({ error: "Unauthorized" }, 401);
+  };
+}
+var requireAdminSession, clientIpMiddleware;
+var init_helpers = __esm({
+  "server/routes/_helpers.ts"() {
+    "use strict";
+    init_claude_agent();
+    init_remote_auth();
+    init_auth_gate();
+    init_neo4j_store();
+    requireAdminSession = async (c, next) => {
+      const { fingerprint, signedSessionToken } = await resolveCacheKey(c);
+      if (!fingerprint) {
+        console.error(`[admin-auth] outcome=reject status=400 code=session-missing path=${c.req.path}`);
+        return c.json({ error: "session_key required", code: "session-missing" }, 400);
+      }
+      const result = validateSession(fingerprint, "admin", signedSessionToken);
+      if (!result.ok) {
+        const code = result.reason === "agent-type-mismatch" ? "session-not-registered" : result.reason;
+        const tail = fingerprint.slice(0, 8);
+        console.error(`[admin-auth] outcome=reject status=401 code=${code} path=${c.req.path} cacheKey=${tail}\u2026`);
+        return c.json({ error: "Invalid or expired admin session", code }, 401);
+      }
+      c.set("cacheKey", fingerprint);
+      c.set("signedSessionToken", signedSessionToken);
+      console.log(`[admin-auth] outcome=accept path=${c.req.path} cacheKey=${fingerprint.slice(0, 8)}\u2026`);
+      await next();
+    };
+    clientIpMiddleware = async (c, next) => {
+      const client = resolveClientIp(
+        c.env?.incoming?.socket?.remoteAddress,
+        c.req.header("x-forwarded-for")
+      );
+      c.set("clientIp", client.ip);
+      await next();
+    };
+  }
+});
+
+// node_modules/@hono/node-server/dist/index.mjs
+import { createServer as createServerHTTP } from "http";
+import { Http2ServerRequest as Http2ServerRequest2 } from "http2";
+import { Http2ServerRequest } from "http2";
+import { Readable } from "stream";
+import crypto from "crypto";
+var RequestError = class extends Error {
+  constructor(message, options) {
+    super(message, options);
+    this.name = "RequestError";
+  }
+};
+var toRequestError = (e) => {
+  if (e instanceof RequestError) {
+    return e;
+  }
+  return new RequestError(e.message, { cause: e });
+};
+var GlobalRequest = global.Request;
+var Request2 = class extends GlobalRequest {
+  constructor(input, options) {
+    if (typeof input === "object" && getRequestCache in input) {
+      input = input[getRequestCache]();
+    }
+    if (typeof options?.body?.getReader !== "undefined") {
+      ;
+      options.duplex ??= "half";
+    }
+    super(input, options);
+  }
+};
+var newHeadersFromIncoming = (incoming) => {
+  const headerRecord = [];
+  const rawHeaders = incoming.rawHeaders;
+  for (let i = 0; i < rawHeaders.length; i += 2) {
+    const { [i]: key, [i + 1]: value } = rawHeaders;
+    if (key.charCodeAt(0) !== /*:*/
+    58) {
+      headerRecord.push([key, value]);
+    }
+  }
+  return new Headers(headerRecord);
+};
+var wrapBodyStream = /* @__PURE__ */ Symbol("wrapBodyStream");
+var newRequestFromIncoming = (method, url, headers, incoming, abortController) => {
+  const init = {
+    method,
+    headers,
+    signal: abortController.signal
+  };
+  if (method === "TRACE") {
+    init.method = "GET";
+    const req = new Request2(url, init);
+    Object.defineProperty(req, "method", {
+      get() {
+        return "TRACE";
+      }
+    });
+    return req;
+  }
+  if (!(method === "GET" || method === "HEAD")) {
+    if ("rawBody" in incoming && incoming.rawBody instanceof Buffer) {
+      init.body = new ReadableStream({
+        start(controller) {
+          controller.enqueue(incoming.rawBody);
+          controller.close();
+        }
+      });
+    } else if (incoming[wrapBodyStream]) {
+      let reader;
+      init.body = new ReadableStream({
+        async pull(controller) {
+          try {
+            reader ||= Readable.toWeb(incoming).getReader();
+            const { done, value } = await reader.read();
+            if (done) {
+              controller.close();
+            } else {
+              controller.enqueue(value);
+            }
+          } catch (error) {
+            controller.error(error);
+          }
+        }
+      });
+    } else {
+      init.body = Readable.toWeb(incoming);
+    }
+  }
+  return new Request2(url, init);
+};
+var getRequestCache = /* @__PURE__ */ Symbol("getRequestCache");
+var requestCache = /* @__PURE__ */ Symbol("requestCache");
+var incomingKey = /* @__PURE__ */ Symbol("incomingKey");
+var urlKey = /* @__PURE__ */ Symbol("urlKey");
+var headersKey = /* @__PURE__ */ Symbol("headersKey");
+var abortControllerKey = /* @__PURE__ */ Symbol("abortControllerKey");
+var getAbortController = /* @__PURE__ */ Symbol("getAbortController");
+var requestPrototype = {
+  get method() {
+    return this[incomingKey].method || "GET";
+  },
+  get url() {
+    return this[urlKey];
+  },
+  get headers() {
+    return this[headersKey] ||= newHeadersFromIncoming(this[incomingKey]);
+  },
+  [getAbortController]() {
+    this[getRequestCache]();
+    return this[abortControllerKey];
+  },
+  [getRequestCache]() {
+    this[abortControllerKey] ||= new AbortController();
+    return this[requestCache] ||= newRequestFromIncoming(
+      this.method,
+      this[urlKey],
+      this.headers,
+      this[incomingKey],
+      this[abortControllerKey]
+    );
+  }
+};
+[
+  "body",
+  "bodyUsed",
+  "cache",
+  "credentials",
+  "destination",
+  "integrity",
+  "mode",
+  "redirect",
+  "referrer",
+  "referrerPolicy",
+  "signal",
+  "keepalive"
+].forEach((k) => {
+  Object.defineProperty(requestPrototype, k, {
+    get() {
+      return this[getRequestCache]()[k];
+    }
+  });
+});
+["arrayBuffer", "blob", "clone", "formData", "json", "text"].forEach((k) => {
+  Object.defineProperty(requestPrototype, k, {
+    value: function() {
+      return this[getRequestCache]()[k]();
+    }
+  });
+});
+Object.setPrototypeOf(requestPrototype, Request2.prototype);
+var newRequest = (incoming, defaultHostname) => {
+  const req = Object.create(requestPrototype);
+  req[incomingKey] = incoming;
+  const incomingUrl = incoming.url || "";
+  if (incomingUrl[0] !== "/" && // short-circuit for performance. most requests are relative URL.
+  (incomingUrl.startsWith("http://") || incomingUrl.startsWith("https://"))) {
+    if (incoming instanceof Http2ServerRequest) {
+      throw new RequestError("Absolute URL for :path is not allowed in HTTP/2");
+    }
+    try {
+      const url2 = new URL(incomingUrl);
+      req[urlKey] = url2.href;
+    } catch (e) {
+      throw new RequestError("Invalid absolute URL", { cause: e });
+    }
+    return req;
+  }
+  const host = (incoming instanceof Http2ServerRequest ? incoming.authority : incoming.headers.host) || defaultHostname;
+  if (!host) {
+    throw new RequestError("Missing host header");
+  }
+  let scheme;
+  if (incoming instanceof Http2ServerRequest) {
+    scheme = incoming.scheme;
+    if (!(scheme === "http" || scheme === "https")) {
+      throw new RequestError("Unsupported scheme");
+    }
+  } else {
+    scheme = incoming.socket && incoming.socket.encrypted ? "https" : "http";
+  }
+  const url = new URL(`${scheme}://${host}${incomingUrl}`);
+  if (url.hostname.length !== host.length && url.hostname !== host.replace(/:\d+$/, "")) {
+    throw new RequestError("Invalid host header");
+  }
+  req[urlKey] = url.href;
+  return req;
+};
+var responseCache = /* @__PURE__ */ Symbol("responseCache");
+var getResponseCache = /* @__PURE__ */ Symbol("getResponseCache");
+var cacheKey = /* @__PURE__ */ Symbol("cache");
+var GlobalResponse = global.Response;
+var Response2 = class _Response {
+  #body;
+  #init;
+  [getResponseCache]() {
+    delete this[cacheKey];
+    return this[responseCache] ||= new GlobalResponse(this.#body, this.#init);
+  }
+  constructor(body, init) {
+    let headers;
+    this.#body = body;
+    if (init instanceof _Response) {
+      const cachedGlobalResponse = init[responseCache];
+      if (cachedGlobalResponse) {
+        this.#init = cachedGlobalResponse;
+        this[getResponseCache]();
+        return;
+      } else {
+        this.#init = init.#init;
+        headers = new Headers(init.#init.headers);
+      }
+    } else {
+      this.#init = init;
+    }
+    if (typeof body === "string" || typeof body?.getReader !== "undefined" || body instanceof Blob || body instanceof Uint8Array) {
+      ;
+      this[cacheKey] = [init?.status || 200, body, headers || init?.headers];
+    }
+  }
+  get headers() {
+    const cache = this[cacheKey];
+    if (cache) {
+      if (!(cache[2] instanceof Headers)) {
+        cache[2] = new Headers(
+          cache[2] || { "content-type": "text/plain; charset=UTF-8" }
+        );
+      }
+      return cache[2];
+    }
+    return this[getResponseCache]().headers;
+  }
+  get status() {
+    return this[cacheKey]?.[0] ?? this[getResponseCache]().status;
+  }
+  get ok() {
+    const status = this.status;
+    return status >= 200 && status < 300;
+  }
+};
+["body", "bodyUsed", "redirected", "statusText", "trailers", "type", "url"].forEach((k) => {
+  Object.defineProperty(Response2.prototype, k, {
+    get() {
+      return this[getResponseCache]()[k];
+    }
+  });
+});
+["arrayBuffer", "blob", "clone", "formData", "json", "text"].forEach((k) => {
+  Object.defineProperty(Response2.prototype, k, {
+    value: function() {
+      return this[getResponseCache]()[k]();
+    }
+  });
+});
+Object.setPrototypeOf(Response2, GlobalResponse);
+Object.setPrototypeOf(Response2.prototype, GlobalResponse.prototype);
+async function readWithoutBlocking(readPromise) {
+  return Promise.race([readPromise, Promise.resolve().then(() => Promise.resolve(void 0))]);
+}
+function writeFromReadableStreamDefaultReader(reader, writable, currentReadPromise) {
+  const cancel = (error) => {
+    reader.cancel(error).catch(() => {
+    });
+  };
+  writable.on("close", cancel);
+  writable.on("error", cancel);
+  (currentReadPromise ?? reader.read()).then(flow, handleStreamError);
+  return reader.closed.finally(() => {
+    writable.off("close", cancel);
+    writable.off("error", cancel);
+  });
+  function handleStreamError(error) {
+    if (error) {
+      writable.destroy(error);
+    }
+  }
+  function onDrain() {
+    reader.read().then(flow, handleStreamError);
+  }
+  function flow({ done, value }) {
+    try {
+      if (done) {
+        writable.end();
+      } else if (!writable.write(value)) {
+        writable.once("drain", onDrain);
+      } else {
+        return reader.read().then(flow, handleStreamError);
+      }
+    } catch (e) {
+      handleStreamError(e);
+    }
+  }
+}
+function writeFromReadableStream(stream, writable) {
+  if (stream.locked) {
+    throw new TypeError("ReadableStream is locked.");
+  } else if (writable.destroyed) {
+    return;
+  }
+  return writeFromReadableStreamDefaultReader(stream.getReader(), writable);
+}
+var buildOutgoingHttpHeaders = (headers) => {
+  const res = {};
+  if (!(headers instanceof Headers)) {
+    headers = new Headers(headers ?? void 0);
+  }
+  const cookies = [];
+  for (const [k, v] of headers) {
+    if (k === "set-cookie") {
+      cookies.push(v);
+    } else {
+      res[k] = v;
+    }
+  }
+  if (cookies.length > 0) {
+    res["set-cookie"] = cookies;
+  }
+  res["content-type"] ??= "text/plain; charset=UTF-8";
+  return res;
+};
+var X_ALREADY_SENT = "x-hono-already-sent";
+if (typeof global.crypto === "undefined") {
+  global.crypto = crypto;
+}
+var outgoingEnded = /* @__PURE__ */ Symbol("outgoingEnded");
+var handleRequestError = () => new Response(null, {
+  status: 400
+});
+var handleFetchError = (e) => new Response(null, {
+  status: e instanceof Error && (e.name === "TimeoutError" || e.constructor.name === "TimeoutError") ? 504 : 500
+});
+var handleResponseError = (e, outgoing) => {
+  const err = e instanceof Error ? e : new Error("unknown error", { cause: e });
+  if (err.code === "ERR_STREAM_PREMATURE_CLOSE") {
+    console.info("The user aborted a request.");
+  } else {
+    console.error(e);
+    if (!outgoing.headersSent) {
+      outgoing.writeHead(500, { "Content-Type": "text/plain" });
+    }
+    outgoing.end(`Error: ${err.message}`);
+    outgoing.destroy(err);
+  }
+};
+var flushHeaders = (outgoing) => {
+  if ("flushHeaders" in outgoing && outgoing.writable) {
+    outgoing.flushHeaders();
+  }
+};
+var responseViaCache = async (res, outgoing) => {
+  let [status, body, header] = res[cacheKey];
+  let hasContentLength = false;
+  if (!header) {
+    header = { "content-type": "text/plain; charset=UTF-8" };
+  } else if (header instanceof Headers) {
+    hasContentLength = header.has("content-length");
+    header = buildOutgoingHttpHeaders(header);
+  } else if (Array.isArray(header)) {
+    const headerObj = new Headers(header);
+    hasContentLength = headerObj.has("content-length");
+    header = buildOutgoingHttpHeaders(headerObj);
+  } else {
+    for (const key in header) {
+      if (key.length === 14 && key.toLowerCase() === "content-length") {
+        hasContentLength = true;
+        break;
+      }
+    }
+  }
+  if (!hasContentLength) {
+    if (typeof body === "string") {
+      header["Content-Length"] = Buffer.byteLength(body);
+    } else if (body instanceof Uint8Array) {
+      header["Content-Length"] = body.byteLength;
+    } else if (body instanceof Blob) {
+      header["Content-Length"] = body.size;
+    }
+  }
+  outgoing.writeHead(status, header);
+  if (typeof body === "string" || body instanceof Uint8Array) {
+    outgoing.end(body);
+  } else if (body instanceof Blob) {
+    outgoing.end(new Uint8Array(await body.arrayBuffer()));
+  } else {
+    flushHeaders(outgoing);
+    await writeFromReadableStream(body, outgoing)?.catch(
+      (e) => handleResponseError(e, outgoing)
+    );
+  }
+  ;
+  outgoing[outgoingEnded]?.();
+};
+var isPromise = (res) => typeof res.then === "function";
+var responseViaResponseObject = async (res, outgoing, options = {}) => {
+  if (isPromise(res)) {
+    if (options.errorHandler) {
+      try {
+        res = await res;
+      } catch (err) {
+        const errRes = await options.errorHandler(err);
+        if (!errRes) {
+          return;
+        }
+        res = errRes;
+      }
+    } else {
+      res = await res.catch(handleFetchError);
+    }
+  }
+  if (cacheKey in res) {
+    return responseViaCache(res, outgoing);
+  }
+  const resHeaderRecord = buildOutgoingHttpHeaders(res.headers);
+  if (res.body) {
+    const reader = res.body.getReader();
+    const values = [];
+    let done = false;
+    let currentReadPromise = void 0;
+    if (resHeaderRecord["transfer-encoding"] !== "chunked") {
+      let maxReadCount = 2;
+      for (let i = 0; i < maxReadCount; i++) {
+        currentReadPromise ||= reader.read();
+        const chunk = await readWithoutBlocking(currentReadPromise).catch((e) => {
+          console.error(e);
+          done = true;
+        });
+        if (!chunk) {
+          if (i === 1) {
+            await new Promise((resolve4) => setTimeout(resolve4));
+            maxReadCount = 3;
+            continue;
+          }
+          break;
+        }
+        currentReadPromise = void 0;
+        if (chunk.value) {
+          values.push(chunk.value);
+        }
+        if (chunk.done) {
+          done = true;
+          break;
+        }
+      }
+      if (done && !("content-length" in resHeaderRecord)) {
+        resHeaderRecord["content-length"] = values.reduce((acc, value) => acc + value.length, 0);
+      }
+    }
+    outgoing.writeHead(res.status, resHeaderRecord);
+    values.forEach((value) => {
+      ;
+      outgoing.write(value);
+    });
+    if (done) {
+      outgoing.end();
+    } else {
+      if (values.length === 0) {
+        flushHeaders(outgoing);
+      }
+      await writeFromReadableStreamDefaultReader(reader, outgoing, currentReadPromise);
+    }
+  } else if (resHeaderRecord[X_ALREADY_SENT]) {
+  } else {
+    outgoing.writeHead(res.status, resHeaderRecord);
+    outgoing.end();
+  }
+  ;
+  outgoing[outgoingEnded]?.();
+};
+var getRequestListener = (fetchCallback, options = {}) => {
+  const autoCleanupIncoming = options.autoCleanupIncoming ?? true;
+  if (options.overrideGlobalObjects !== false && global.Request !== Request2) {
+    Object.defineProperty(global, "Request", {
+      value: Request2
+    });
+    Object.defineProperty(global, "Response", {
+      value: Response2
+    });
+  }
+  return async (incoming, outgoing) => {
+    let res, req;
+    try {
+      req = newRequest(incoming, options.hostname);
+      let incomingEnded = !autoCleanupIncoming || incoming.method === "GET" || incoming.method === "HEAD";
+      if (!incomingEnded) {
+        ;
+        incoming[wrapBodyStream] = true;
+        incoming.on("end", () => {
+          incomingEnded = true;
+        });
+        if (incoming instanceof Http2ServerRequest2) {
+          ;
+          outgoing[outgoingEnded] = () => {
+            if (!incomingEnded) {
+              setTimeout(() => {
+                if (!incomingEnded) {
+                  setTimeout(() => {
+                    incoming.destroy();
+                    outgoing.destroy();
+                  });
+                }
+              });
+            }
+          };
+        }
+      }
+      outgoing.on("close", () => {
+        const abortController = req[abortControllerKey];
+        if (abortController) {
+          if (incoming.errored) {
+            req[abortControllerKey].abort(incoming.errored.toString());
+          } else if (!outgoing.writableFinished) {
+            req[abortControllerKey].abort("Client connection prematurely closed.");
+          }
+        }
+        if (!incomingEnded) {
+          setTimeout(() => {
+            if (!incomingEnded) {
+              setTimeout(() => {
+                incoming.destroy();
+              });
+            }
+          });
+        }
+      });
+      res = fetchCallback(req, { incoming, outgoing });
+      if (cacheKey in res) {
+        return responseViaCache(res, outgoing);
+      }
+    } catch (e) {
+      if (!res) {
+        if (options.errorHandler) {
+          res = await options.errorHandler(req ? e : toRequestError(e));
+          if (!res) {
+            return;
+          }
+        } else if (!req) {
+          res = handleRequestError();
+        } else {
+          res = handleFetchError(e);
+        }
+      } else {
+        return handleResponseError(e, outgoing);
+      }
+    }
+    try {
+      return await responseViaResponseObject(res, outgoing, options);
+    } catch (e) {
+      return handleResponseError(e, outgoing);
+    }
+  };
+};
+var createAdaptorServer = (options) => {
+  const fetchCallback = options.fetch;
+  const requestListener = getRequestListener(fetchCallback, {
+    hostname: options.hostname,
+    overrideGlobalObjects: options.overrideGlobalObjects,
+    autoCleanupIncoming: options.autoCleanupIncoming
+  });
+  const createServer = options.createServer || createServerHTTP;
+  const server = createServer(options.serverOptions || {}, requestListener);
+  return server;
+};
+var serve = (options, listeningListener) => {
+  const server = createAdaptorServer(options);
+  server.listen(options?.port ?? 3e3, options.hostname, () => {
+    const serverInfo = server.address();
+    listeningListener && listeningListener(serverInfo);
+  });
+  return server;
+};
+
+// app/lib/vnc-logger.ts
+init_paths();
+import { appendFileSync, mkdirSync } from "fs";
+import { resolve } from "path";
+var VNC_LOG_FILE = resolve(LOG_DIR, "vnc-boot.log");
+try {
+  mkdirSync(LOG_DIR, { recursive: true });
+} catch (err) {
+  console.error(`[vnc-log-fail] mkdir ${LOG_DIR} failed: ${err.message}`);
+}
+function vncLog(phase, fields = {}) {
+  const ts = (/* @__PURE__ */ new Date()).toISOString();
+  const kv = Object.entries(fields).map(([k, v]) => `${k}=${JSON.stringify(v)}`).join(" ");
+  const line = kv.length > 0 ? `[${ts}] [${phase}] ${kv}
+` : `[${ts}] [${phase}]
+`;
+  try {
+    appendFileSync(VNC_LOG_FILE, line);
+  } catch (err) {
+    console.error(`[vnc-log-fail] ${err.message} \u2014 dropped: ${line.slice(0, 300).trim()}`);
+  }
+}
+var corrCounter = 0;
+function newCorrId() {
+  corrCounter = corrCounter + 1 & 4294967295;
+  const counterHex = corrCounter.toString(16).padStart(8, "0");
+  const randomHex = Math.floor(Math.random() * 16777215).toString(16).padStart(6, "0");
+  return `${counterHex}-${randomHex}`;
+}
+function sanitizeClientCorrId(raw2) {
+  if (!raw2) return null;
+  if (raw2.length > 32) return null;
+  if (!/^[A-Za-z0-9_-]+$/.test(raw2)) return null;
+  return raw2;
+}
+function formatKv(fields) {
+  return Object.entries(fields).filter(([, v]) => v !== void 0).map(([k, v]) => `${k}=${JSON.stringify(v)}`).join(" ");
+}
+function httpLog(fields) {
+  console.error(`[http] ${formatKv(fields)}`);
+}
+function websockifyLog(event, fields = {}) {
+  console.error(`[websockify] ${formatKv({ event, ...fields })}`);
+}
+
+// app/lib/agent-slug-pattern.ts
+var AGENT_SLUG_PATTERN = /^\/([a-z][a-z0-9-]{2,49})$/;
+
+// server/public-host-gate.ts
+var PUBLIC_ALLOWED_PREFIXES = [
+  "/api/session",
+  "/api/chat",
+  // Task 873 — the detooled public surface's visitor-authed reader (pointer +
+  // server-filtered SSE stream). Reached by the visitor browser on the public
+  // host; authenticated by the __access_session grant inside the route.
+  "/api/public-reader/",
+  "/api/access/",
+  "/api/health",
+  // Public free/busy for the booking page. Open slots only, no :Meeting detail
+  // (server/routes/calendar-public.ts). Admitted on public hosts; on the brand
+  // host the remote-auth gate bypasses the same path (server/index.ts).
+  "/api/calendar/free-busy",
+  "/api/telegram/",
+  // Task 1881 — the data portal's device-held-file fetch. Reached by the edge
+  // Pages Function's signed HEAD/GET probe on the public host; authenticated by
+  // the per-account HMAC signature the route re-verifies (portal-fetch.ts), not
+  // the remote-auth gate. Pointing PORTAL_INSTALL_ORIGIN at the admin host
+  // instead made every download 503 (remote-auth-required on the probe).
+  "/api/portal/fetch",
+  // QuickBooks OAuth consent callback. Intuit redirects the operator's browser
+  // here with no admin cookie; the route authenticates by validating the OAuth
+  // `state` nonce, not the remote-auth gate (same model as /api/telegram/).
+  "/api/quickbooks/",
+  // Task 2502 — the dispatch field job sheet's API. Reached by a worker's phone
+  // inside Telegram's webview, which holds no admin cookie and can never obtain
+  // one; the route verifies the Telegram initData signature itself
+  // (server/routes/field.ts), the same request-borne-auth model as
+  // /api/telegram/ above. Both gates need the entry: this one admits it on a
+  // public host, and isRemoteAuthBypassPath in app/lib/auth-gate.ts admits it on
+  // the brand host. Listing it in only one makes the sheet reachable on whichever
+  // host the operator happened to point the menu button at, and dead on the
+  // other. __tests__/field-gates-agree.test.ts asserts they stay in step.
+  "/api/field/",
+  "/assets/",
+  "/brand/",
+  "/agent-assets/",
+  "/generated/",
+  "/g/",
+  "/sites/"
+];
+var PUBLIC_ALLOWED_EXACT = [
+  "/favicon.ico",
+  "/brand-defaults.css",
+  // Task 2502 — the field job sheet's document. Exact rather than a prefix: the
+  // page is one path and carries no dispatch data of its own, so nothing below
+  // it needs admitting. Its bundle already arrives through /assets/.
+  "/field"
+];
+function isPublicPathAllowed(path) {
+  if (path === "/") return true;
+  if (PUBLIC_ALLOWED_EXACT.includes(path)) return true;
+  if (PUBLIC_ALLOWED_PREFIXES.some((prefix) => path.startsWith(prefix))) return true;
+  return AGENT_SLUG_PATTERN.test(path);
+}
+function isOperatorHost(host, operatorDomains2) {
+  return operatorDomains2.has(host);
+}
+function classifyHost(host, operatorDomains2, isPublicHost) {
+  if (operatorDomains2.has(host)) return "operator";
+  if (isPublicHost(host)) return "public";
+  return "admin";
+}
+
+// server/operator-domains-reader.ts
+import { watchFile } from "fs";
+
+// app/lib/operator-domains.ts
+init_paths();
+import { existsSync as existsSync2, mkdirSync as mkdirSync4, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
+import { dirname as dirname3, resolve as resolve2 } from "path";
+var OPERATOR_DOMAINS_PATH = resolve2(MAXY_DIR, "operator-domains.json");
+function loadOperatorDomains() {
+  if (!existsSync2(OPERATOR_DOMAINS_PATH)) return /* @__PURE__ */ new Set();
+  try {
+    const parsed = JSON.parse(readFileSync3(OPERATOR_DOMAINS_PATH, "utf-8"));
+    if (!Array.isArray(parsed)) return /* @__PURE__ */ new Set();
+    return new Set(parsed.filter((h) => typeof h === "string"));
+  } catch {
+    return /* @__PURE__ */ new Set();
+  }
+}
+
+// server/operator-domains-reader.ts
+var operatorDomains = loadOperatorDomains();
+if (operatorDomains.size > 0) {
+  console.log(
+    `[operator-domains] loaded ${operatorDomains.size} operator domain(s): ${[...operatorDomains].join(", ")}`
+  );
+}
+watchFile(OPERATOR_DOMAINS_PATH, { interval: 2e3 }, () => {
+  operatorDomains = loadOperatorDomains();
+  console.log(
+    `[operator-domains] reloaded ${operatorDomains.size} operator domain(s): ${[...operatorDomains].join(", ")}`
+  );
+});
+function getOperatorDomains() {
+  return operatorDomains;
+}
+
+// app/lib/cdp-screencast.ts
+var CDP_WS_PATH = "/cdp-screencast";
+var TARGET_ID_RE = /^[0-9A-Fa-f]{32}$/;
+function selectPageTargets(parsed) {
+  if (!Array.isArray(parsed)) return [];
+  const out = [];
+  for (const raw2 of parsed) {
+    if (raw2?.type !== "page") continue;
+    const id = typeof raw2.id === "string" ? raw2.id : "";
+    if (!TARGET_ID_RE.test(id)) continue;
+    const url = typeof raw2.url === "string" ? raw2.url : "";
+    const title = typeof raw2.title === "string" && raw2.title.length > 0 ? raw2.title : url;
+    out.push({ id, title, url });
+  }
+  return out;
+}
+var CLIENT_SCREENCAST_OPS = [
+  "request",
+  "screencast-started",
+  "start-failed",
+  "send-failed",
+  "frame",
+  "input",
+  "teardown",
+  // Task 2264 — the chrome's own ops. They belong on this side of the allowlist
+  // because each is an action the browser observes itself taking, not a decision
+  // the server made; admitting them cannot let a client forge a security line.
+  "navigate",
+  "history",
+  "chrome-mounted"
+];
+function isClientScreencastOp(v) {
+  return typeof v === "string" && CLIENT_SCREENCAST_OPS.includes(v);
+}
+
+// app/lib/cdp-screencast-server.ts
+var HOP_BY_HOP = /* @__PURE__ */ new Set([
+  "connection",
+  "keep-alive",
+  "proxy-authenticate",
+  "proxy-authorization",
+  "te",
+  "trailer",
+  "transfer-encoding",
+  "upgrade"
+]);
+var DROP_UPSTREAM = /* @__PURE__ */ new Set(["origin", "cookie"]);
+function decideCdpUpgrade(input) {
+  const corrId = newCorrId();
+  const qsIndex = input.url.indexOf("?");
+  const pathname = qsIndex === -1 ? input.url : input.url.slice(0, qsIndex);
+  const query = qsIndex === -1 ? "" : input.url.slice(qsIndex + 1);
+  const sid = sanitizeClientCorrId(parseQueryParam(query, "sid"));
+  if (pathname !== CDP_WS_PATH) {
+    return { allow: false, reason: "wrong-path", status: 0, sid, corrId };
+  }
+  const access = input.canAccess({
+    host: input.host,
+    remoteAddress: input.remoteAddress,
+    xForwardedFor: input.xForwardedFor,
+    cookieHeader: input.cookieHeader,
+    isPublicHost: input.isPublicHost
+  });
+  if (!access.allow) {
+    const publicHost = access.reason === "public-host";
+    return {
+      allow: false,
+      reason: publicHost ? "public-host" : "unauthorized",
+      status: publicHost ? 404 : 401,
+      sid,
+      corrId
+    };
+  }
+  const originHost = parseOriginHost(input.origin);
+  if (!originHost) {
+    return { allow: false, reason: "origin-missing-or-invalid", status: 403, sid, corrId };
+  }
+  if (originHost !== input.host) {
+    return { allow: false, reason: "origin-mismatch", status: 403, sid, corrId };
+  }
+  if (input.isPublicHost(originHost)) {
+    return { allow: false, reason: "origin-public-host", status: 403, sid, corrId };
+  }
+  if (input.isOperatorHost(originHost)) {
+    return { allow: false, reason: "origin-operator-host", status: 403, sid, corrId };
+  }
+  const targetId = parseQueryParam(query, "targetId");
+  if (!targetId || !TARGET_ID_RE.test(targetId)) {
+    return { allow: false, reason: "target-id-invalid", status: 400, sid, corrId };
+  }
+  return { allow: true, targetId, sid, corrId };
+}
+function buildCdpUpstreamRequest(input) {
+  const lines = [];
+  lines.push(`${input.method} /devtools/page/${input.targetId} HTTP/${input.httpVersion}`);
+  lines.push(`host: ${input.upstreamHost}:${input.upstreamPort}`);
+  for (const [rawName, value] of Object.entries(input.headers)) {
+    const name = rawName.toLowerCase();
+    if (name === "host") continue;
+    if (HOP_BY_HOP.has(name)) continue;
+    if (DROP_UPSTREAM.has(name)) continue;
+    if (value == null) continue;
+    if (Array.isArray(value)) {
+      for (const v of value) lines.push(`${name}: ${v}`);
+    } else {
+      lines.push(`${name}: ${value}`);
+    }
+  }
+  const upgrade = headerString(input.headers.upgrade);
+  const connection = headerString(input.headers.connection);
+  if (upgrade) lines.push(`upgrade: ${upgrade}`);
+  if (connection) lines.push(`connection: ${connection}`);
+  return lines.join("\r\n") + "\r\n\r\n";
+}
+async function fetchPageTargets(deps) {
+  if (deps.platform !== "linux") {
+    return {
+      ok: false,
+      status: 501,
+      error: "The device browser is available on the Linux display stack only."
+    };
+  }
+  let res;
+  try {
+    res = await deps.fetchImpl(`http://127.0.0.1:${deps.cdpPort}/json/list`, {
+      signal: AbortSignal.timeout(5e3)
+    });
+  } catch {
+    return { ok: false, status: 502, error: "Chromium is not reachable on this device." };
+  }
+  if (!res.ok) {
+    return { ok: false, status: 502, error: `CDP /json/list returned ${res.status}` };
+  }
+  let parsed;
+  try {
+    parsed = await res.json();
+  } catch {
+    return { ok: false, status: 502, error: "CDP /json/list response was not JSON." };
+  }
+  return { ok: true, targets: selectPageTargets(parsed) };
+}
+var EVENT_DETAIL_KEYS = [
+  "seq",
+  "kind",
+  "count",
+  "format",
+  "everyNthFrame",
+  "stopSent",
+  "ackMs",
+  "err",
+  "method",
+  // Task 2264 — `host` is the navigate target's HOST ONLY. A full URL is the
+  // operator's private browsing and server.log is not the place for it, which is
+  // why the client sends the host rather than the log line truncating one.
+  // `surface` and `chrome` carry the mount marker that detects a stale bundle.
+  "host",
+  "dir",
+  "outcome",
+  "surface",
+  "chrome"
+];
+var DETAIL_MAX_LEN = 128;
+function parseScreencastEvent(body) {
+  if (typeof body !== "object" || body === null) return { ok: false };
+  const raw2 = body;
+  if (!isClientScreencastOp(raw2.op)) return { ok: false };
+  const detail = {
+    sid: sanitizeClientCorrId(typeof raw2.sid === "string" ? raw2.sid : null)
+  };
+  for (const key of EVENT_DETAIL_KEYS) {
+    const v = raw2[key];
+    if (typeof v === "number" || typeof v === "boolean") {
+      detail[key] = v;
+    } else if (typeof v === "string") {
+      detail[key] = sanitizeLogValue(v);
+    }
+  }
+  return { ok: true, op: raw2.op, detail };
+}
+function sanitizeLogValue(v) {
+  return v.replace(/[\r\n]+/g, " ").slice(0, DETAIL_MAX_LEN);
+}
+function renderFields(fields) {
+  return Object.entries(fields).filter(([, v]) => v !== void 0).map(([k, v]) => {
+    const s = v === null ? "null" : String(v);
+    return `${k}=${sanitizeLogValue(s)}`;
+  }).join(" ");
+}
+function screencastLog(op, fields = {}) {
+  const rendered = renderFields(fields);
+  console.error(`[browser/screencast] op=${sanitizeLogValue(op)}${rendered ? " " + rendered : ""}`);
+}
+function cdpWsCensusLog(fields) {
+  console.error(`[cdp-ws-census] ${renderFields(fields)}`);
+}
+function parseQueryParam(query, key) {
+  if (!query) return null;
+  for (const pair of query.split("&")) {
+    const eq = pair.indexOf("=");
+    const k = eq === -1 ? pair : pair.slice(0, eq);
+    if (k !== key) continue;
+    const v = eq === -1 ? "" : pair.slice(eq + 1);
+    try {
+      return decodeURIComponent(v);
+    } catch {
+      return null;
+    }
+  }
+  return null;
+}
+function headerString(value) {
+  if (value == null) return void 0;
+  return Array.isArray(value) ? value[0] : value;
+}
+function parseOriginHost(origin) {
+  if (!origin) return null;
+  try {
+    return new URL(origin).hostname;
+  } catch {
+    return null;
+  }
+}
+function tabsLog(op, fields = {}) {
+  const rendered = renderFields(fields);
+  console.error(`[admin/browser/tabs] op=${sanitizeLogValue(op)}${rendered ? " " + rendered : ""}`);
+}
+async function createPageTarget(deps) {
+  if (deps.platform !== "linux") {
+    return { ok: false, status: 501, error: "The device browser is available on the Linux display stack only." };
+  }
+  let res;
+  try {
+    res = await deps.fetchImpl(`http://127.0.0.1:${deps.cdpPort}/json/new`, {
+      method: "PUT",
+      signal: AbortSignal.timeout(5e3)
+    });
+  } catch {
+    return { ok: false, status: 502, error: "Chromium is not reachable on this device." };
+  }
+  if (!res.ok) return { ok: false, status: 502, error: `CDP /json/new returned ${res.status}` };
+  let parsed;
+  try {
+    parsed = await res.json();
+  } catch {
+    return { ok: false, status: 502, error: "CDP /json/new response was not JSON." };
+  }
+  const id = typeof parsed.id === "string" ? parsed.id : "";
+  if (!TARGET_ID_RE.test(id)) {
+    return { ok: false, status: 502, error: "CDP /json/new returned no usable target id." };
+  }
+  return { ok: true, id };
+}
+async function closePageTarget(deps, targetId) {
+  if (deps.platform !== "linux") {
+    return { ok: false, status: 501, error: "The device browser is available on the Linux display stack only." };
+  }
+  if (!TARGET_ID_RE.test(targetId)) {
+    return { ok: false, status: 400, error: "Not a target id." };
+  }
+  let res;
+  try {
+    res = await deps.fetchImpl(`http://127.0.0.1:${deps.cdpPort}/json/close/${targetId}`, {
+      method: "PUT",
+      signal: AbortSignal.timeout(5e3)
+    });
+  } catch {
+    return { ok: false, status: 502, error: "Chromium is not reachable on this device." };
+  }
+  if (!res.ok) return { ok: false, status: 502, error: `CDP /json/close returned ${res.status}` };
+  return { ok: true };
+}
+
+export {
+  HTTPException,
+  init_http_exception,
+  HtmlEscapedCallbackPhase,
+  resolveCallback,
+  init_html,
+  init_context,
+  Hono2 as Hono,
+  init_dist,
+  getRequestListener,
+  serve,
+  requirePortEnv,
+  init_src,
+  fingerprintSessionKey,
+  registerSession,
+  validateSession,
+  getAccountIdForSession,
+  getUserIdForSession,
+  getUserNameForSession,
+  getRoleForSession,
+  getSessionIdForSession,
+  setSessionIdForSession,
+  setWantsPriorConversation,
+  unregisterSession,
+  getSessionKeyBySessionId,
+  init_session_store,
+  vncLog,
+  newCorrId,
+  sanitizeClientCorrId,
+  httpLog,
+  websockifyLog,
+  setAccessPassword,
+  accessPasswordCollides,
+  migrateLegacyRemotePassword,
+  init_src2,
+  validatePasswordStrength,
+  isPasswordValid,
+  isRemoteAuthConfigured,
+  setRemotePassword,
+  verifyRemotePassword,
+  createRemoteSession,
+  describeRemoteSession,
+  resolveClientIp,
+  checkRateLimit,
+  recordFailedAttempt,
+  clearRateLimit,
+  renderLoginPage,
+  init_remote_auth,
+  PWA_SURFACES,
+  MANIFEST_CONTENT_TYPE,
+  SW_CONTENT_TYPE,
+  pwaSurfaceForShell,
+  buildManifest,
+  pwaHeadTags,
+  pwaCensus,
+  init_pwa,
+  canAccessAdmin,
+  parseCookieValue,
+  isApiRequestPath,
+  isRemoteAuthBypassPath,
+  init_auth_gate,
+  AGENT_SLUG_PATTERN,
+  PUBLIC_ALLOWED_PREFIXES,
+  PUBLIC_ALLOWED_EXACT,
+  isPublicPathAllowed,
+  isOperatorHost,
+  classifyHost,
+  getOperatorDomains,
+  findMissingPlugins,
+  walkPremiumBundles,
+  autoDeliverPremiumPlugins,
+  reconcileEnabledPluginsForAccounts,
+  cleanupLeakedPremiumSubs,
+  init_plugin_manifest,
+  emitMissingOnResolve,
+  init_logging,
+  stripAttachmentMetaSuffix,
+  init_summary_helpers,
+  init_claude_agent,
+  safeJson,
+  resolveCacheKey,
+  requireAdminSession,
+  tryCookieBridgeForConversation,
+  requireAdminCookie,
+  clientIpMiddleware,
+  init_helpers,
+  CDP_WS_PATH,
+  decideCdpUpgrade,
+  buildCdpUpstreamRequest,
+  fetchPageTargets,
+  parseScreencastEvent,
+  screencastLog,
+  cdpWsCensusLog,
+  tabsLog,
+  createPageTarget,
+  closePageTarget
+};