@sockethub/server 5.0.0-beta.0 → 5.0.0-beta.1

package/dist/index.js

@@ -58,6 +58,762 @@ var __esm = (fn, res, err) => () => {
 };
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
+// ../../node_modules/ms/index.js
+var require_ms = __commonJS(function(exports, module) {
+  var s = 1000;
+  var m = s * 60;
+  var h = m * 60;
+  var d = h * 24;
+  var w = d * 7;
+  var y = d * 365.25;
+  module.exports = function(val, options) {
+    options = options || {};
+    var type = typeof val;
+    if (type === "string" && val.length > 0) {
+      return parse(val);
+    } else if (type === "number" && isFinite(val)) {
+      return options.long ? fmtLong(val) : fmtShort(val);
+    }
+    throw new Error("val is not a non-empty string or a valid number. val=" + JSON.stringify(val));
+  };
+  function parse(str) {
+    str = String(str);
+    if (str.length > 100) {
+      return;
+    }
+    var match = /^(-?(?:\d+)?\.?\d+) *(milliseconds?|msecs?|ms|seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)?$/i.exec(str);
+    if (!match) {
+      return;
+    }
+    var n = parseFloat(match[1]);
+    var type = (match[2] || "ms").toLowerCase();
+    switch (type) {
+      case "years":
+      case "year":
+      case "yrs":
+      case "yr":
+      case "y":
+        return n * y;
+      case "weeks":
+      case "week":
+      case "w":
+        return n * w;
+      case "days":
+      case "day":
+      case "d":
+        return n * d;
+      case "hours":
+      case "hour":
+      case "hrs":
+      case "hr":
+      case "h":
+        return n * h;
+      case "minutes":
+      case "minute":
+      case "mins":
+      case "min":
+      case "m":
+        return n * m;
+      case "seconds":
+      case "second":
+      case "secs":
+      case "sec":
+      case "s":
+        return n * s;
+      case "milliseconds":
+      case "millisecond":
+      case "msecs":
+      case "msec":
+      case "ms":
+        return n;
+      default:
+        return;
+    }
+  }
+  function fmtShort(ms) {
+    var msAbs = Math.abs(ms);
+    if (msAbs >= d) {
+      return Math.round(ms / d) + "d";
+    }
+    if (msAbs >= h) {
+      return Math.round(ms / h) + "h";
+    }
+    if (msAbs >= m) {
+      return Math.round(ms / m) + "m";
+    }
+    if (msAbs >= s) {
+      return Math.round(ms / s) + "s";
+    }
+    return ms + "ms";
+  }
+  function fmtLong(ms) {
+    var msAbs = Math.abs(ms);
+    if (msAbs >= d) {
+      return plural(ms, msAbs, d, "day");
+    }
+    if (msAbs >= h) {
+      return plural(ms, msAbs, h, "hour");
+    }
+    if (msAbs >= m) {
+      return plural(ms, msAbs, m, "minute");
+    }
+    if (msAbs >= s) {
+      return plural(ms, msAbs, s, "second");
+    }
+    return ms + " ms";
+  }
+  function plural(ms, msAbs, n, name) {
+    var isPlural = msAbs >= n * 1.5;
+    return Math.round(ms / n) + " " + name + (isPlural ? "s" : "");
+  }
+});
+
+// ../../node_modules/debug/src/common.js
+var require_common = __commonJS(function(exports, module) {
+  function setup(env) {
+    createDebug.debug = createDebug;
+    createDebug.default = createDebug;
+    createDebug.coerce = coerce;
+    createDebug.disable = disable;
+    createDebug.enable = enable;
+    createDebug.enabled = enabled;
+    createDebug.humanize = require_ms();
+    createDebug.destroy = destroy;
+    Object.keys(env).forEach((key) => {
+      createDebug[key] = env[key];
+    });
+    createDebug.names = [];
+    createDebug.skips = [];
+    createDebug.formatters = {};
+    function selectColor(namespace) {
+      let hash = 0;
+      for (let i = 0;i < namespace.length; i++) {
+        hash = (hash << 5) - hash + namespace.charCodeAt(i);
+        hash |= 0;
+      }
+      return createDebug.colors[Math.abs(hash) % createDebug.colors.length];
+    }
+    createDebug.selectColor = selectColor;
+    function createDebug(namespace) {
+      let prevTime;
+      let enableOverride = null;
+      let namespacesCache;
+      let enabledCache;
+      function debug(...args) {
+        if (!debug.enabled) {
+          return;
+        }
+        const self2 = debug;
+        const curr = Number(new Date);
+        const ms = curr - (prevTime || curr);
+        self2.diff = ms;
+        self2.prev = prevTime;
+        self2.curr = curr;
+        prevTime = curr;
+        args[0] = createDebug.coerce(args[0]);
+        if (typeof args[0] !== "string") {
+          args.unshift("%O");
+        }
+        let index = 0;
+        args[0] = args[0].replace(/%([a-zA-Z%])/g, (match, format) => {
+          if (match === "%%") {
+            return "%";
+          }
+          index++;
+          const formatter = createDebug.formatters[format];
+          if (typeof formatter === "function") {
+            const val = args[index];
+            match = formatter.call(self2, val);
+            args.splice(index, 1);
+            index--;
+          }
+          return match;
+        });
+        createDebug.formatArgs.call(self2, args);
+        const logFn = self2.log || createDebug.log;
+        logFn.apply(self2, args);
+      }
+      debug.namespace = namespace;
+      debug.useColors = createDebug.useColors();
+      debug.color = createDebug.selectColor(namespace);
+      debug.extend = extend;
+      debug.destroy = createDebug.destroy;
+      Object.defineProperty(debug, "enabled", {
+        enumerable: true,
+        configurable: false,
+        get: () => {
+          if (enableOverride !== null) {
+            return enableOverride;
+          }
+          if (namespacesCache !== createDebug.namespaces) {
+            namespacesCache = createDebug.namespaces;
+            enabledCache = createDebug.enabled(namespace);
+          }
+          return enabledCache;
+        },
+        set: (v) => {
+          enableOverride = v;
+        }
+      });
+      if (typeof createDebug.init === "function") {
+        createDebug.init(debug);
+      }
+      return debug;
+    }
+    function extend(namespace, delimiter) {
+      const newDebug = createDebug(this.namespace + (typeof delimiter === "undefined" ? ":" : delimiter) + namespace);
+      newDebug.log = this.log;
+      return newDebug;
+    }
+    function enable(namespaces) {
+      createDebug.save(namespaces);
+      createDebug.namespaces = namespaces;
+      createDebug.names = [];
+      createDebug.skips = [];
+      const split = (typeof namespaces === "string" ? namespaces : "").trim().replace(/\s+/g, ",").split(",").filter(Boolean);
+      for (const ns of split) {
+        if (ns[0] === "-") {
+          createDebug.skips.push(ns.slice(1));
+        } else {
+          createDebug.names.push(ns);
+        }
+      }
+    }
+    function matchesTemplate(search, template) {
+      let searchIndex = 0;
+      let templateIndex = 0;
+      let starIndex = -1;
+      let matchIndex = 0;
+      while (searchIndex < search.length) {
+        if (templateIndex < template.length && (template[templateIndex] === search[searchIndex] || template[templateIndex] === "*")) {
+          if (template[templateIndex] === "*") {
+            starIndex = templateIndex;
+            matchIndex = searchIndex;
+            templateIndex++;
+          } else {
+            searchIndex++;
+            templateIndex++;
+          }
+        } else if (starIndex !== -1) {
+          templateIndex = starIndex + 1;
+          matchIndex++;
+          searchIndex = matchIndex;
+        } else {
+          return false;
+        }
+      }
+      while (templateIndex < template.length && template[templateIndex] === "*") {
+        templateIndex++;
+      }
+      return templateIndex === template.length;
+    }
+    function disable() {
+      const namespaces = [
+        ...createDebug.names,
+        ...createDebug.skips.map((namespace) => "-" + namespace)
+      ].join(",");
+      createDebug.enable("");
+      return namespaces;
+    }
+    function enabled(name) {
+      for (const skip of createDebug.skips) {
+        if (matchesTemplate(name, skip)) {
+          return false;
+        }
+      }
+      for (const ns of createDebug.names) {
+        if (matchesTemplate(name, ns)) {
+          return true;
+        }
+      }
+      return false;
+    }
+    function coerce(val) {
+      if (val instanceof Error) {
+        return val.stack || val.message;
+      }
+      return val;
+    }
+    function destroy() {
+      console.warn("Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.");
+    }
+    createDebug.enable(createDebug.load());
+    return createDebug;
+  }
+  module.exports = setup;
+});
+
+// ../../node_modules/debug/src/browser.js
+var require_browser = __commonJS(function(exports, module) {
+  exports.formatArgs = formatArgs;
+  exports.save = save;
+  exports.load = load;
+  exports.useColors = useColors;
+  exports.storage = localstorage();
+  exports.destroy = (() => {
+    let warned = false;
+    return () => {
+      if (!warned) {
+        warned = true;
+        console.warn("Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.");
+      }
+    };
+  })();
+  exports.colors = [
+    "#0000CC",
+    "#0000FF",
+    "#0033CC",
+    "#0033FF",
+    "#0066CC",
+    "#0066FF",
+    "#0099CC",
+    "#0099FF",
+    "#00CC00",
+    "#00CC33",
+    "#00CC66",
+    "#00CC99",
+    "#00CCCC",
+    "#00CCFF",
+    "#3300CC",
+    "#3300FF",
+    "#3333CC",
+    "#3333FF",
+    "#3366CC",
+    "#3366FF",
+    "#3399CC",
+    "#3399FF",
+    "#33CC00",
+    "#33CC33",
+    "#33CC66",
+    "#33CC99",
+    "#33CCCC",
+    "#33CCFF",
+    "#6600CC",
+    "#6600FF",
+    "#6633CC",
+    "#6633FF",
+    "#66CC00",
+    "#66CC33",
+    "#9900CC",
+    "#9900FF",
+    "#9933CC",
+    "#9933FF",
+    "#99CC00",
+    "#99CC33",
+    "#CC0000",
+    "#CC0033",
+    "#CC0066",
+    "#CC0099",
+    "#CC00CC",
+    "#CC00FF",
+    "#CC3300",
+    "#CC3333",
+    "#CC3366",
+    "#CC3399",
+    "#CC33CC",
+    "#CC33FF",
+    "#CC6600",
+    "#CC6633",
+    "#CC9900",
+    "#CC9933",
+    "#CCCC00",
+    "#CCCC33",
+    "#FF0000",
+    "#FF0033",
+    "#FF0066",
+    "#FF0099",
+    "#FF00CC",
+    "#FF00FF",
+    "#FF3300",
+    "#FF3333",
+    "#FF3366",
+    "#FF3399",
+    "#FF33CC",
+    "#FF33FF",
+    "#FF6600",
+    "#FF6633",
+    "#FF9900",
+    "#FF9933",
+    "#FFCC00",
+    "#FFCC33"
+  ];
+  function useColors() {
+    if (typeof window !== "undefined" && window.process && (window.process.type === "renderer" || window.process.__nwjs)) {
+      return true;
+    }
+    if (typeof navigator !== "undefined" && navigator.userAgent && navigator.userAgent.toLowerCase().match(/(edge|trident)\/(\d+)/)) {
+      return false;
+    }
+    let m;
+    return typeof document !== "undefined" && document.documentElement && document.documentElement.style && document.documentElement.style.WebkitAppearance || typeof window !== "undefined" && window.console && (window.console.firebug || window.console.exception && window.console.table) || typeof navigator !== "undefined" && navigator.userAgent && (m = navigator.userAgent.toLowerCase().match(/firefox\/(\d+)/)) && parseInt(m[1], 10) >= 31 || typeof navigator !== "undefined" && navigator.userAgent && navigator.userAgent.toLowerCase().match(/applewebkit\/(\d+)/);
+  }
+  function formatArgs(args) {
+    args[0] = (this.useColors ? "%c" : "") + this.namespace + (this.useColors ? " %c" : " ") + args[0] + (this.useColors ? "%c " : " ") + "+" + module.exports.humanize(this.diff);
+    if (!this.useColors) {
+      return;
+    }
+    const c = "color: " + this.color;
+    args.splice(1, 0, c, "color: inherit");
+    let index = 0;
+    let lastC = 0;
+    args[0].replace(/%[a-zA-Z%]/g, (match) => {
+      if (match === "%%") {
+        return;
+      }
+      index++;
+      if (match === "%c") {
+        lastC = index;
+      }
+    });
+    args.splice(lastC, 0, c);
+  }
+  exports.log = console.debug || console.log || (() => {});
+  function save(namespaces) {
+    try {
+      if (namespaces) {
+        exports.storage.setItem("debug", namespaces);
+      } else {
+        exports.storage.removeItem("debug");
+      }
+    } catch (error) {}
+  }
+  function load() {
+    let r;
+    try {
+      r = exports.storage.getItem("debug") || exports.storage.getItem("DEBUG");
+    } catch (error) {}
+    if (!r && typeof process !== "undefined" && "env" in process) {
+      r = process.env.DEBUG;
+    }
+    return r;
+  }
+  function localstorage() {
+    try {
+      return localStorage;
+    } catch (error) {}
+  }
+  module.exports = require_common()(exports);
+  var { formatters } = module.exports;
+  formatters.j = function(v) {
+    try {
+      return JSON.stringify(v);
+    } catch (error) {
+      return "[UnexpectedJSONParseError]: " + error.message;
+    }
+  };
+});
+
+// ../../node_modules/has-flag/index.js
+var require_has_flag = __commonJS(function(exports, module) {
+  module.exports = (flag, argv = process.argv) => {
+    const prefix = flag.startsWith("-") ? "" : flag.length === 1 ? "-" : "--";
+    const position = argv.indexOf(prefix + flag);
+    const terminatorPosition = argv.indexOf("--");
+    return position !== -1 && (terminatorPosition === -1 || position < terminatorPosition);
+  };
+});
+
+// ../../node_modules/supports-color/index.js
+var require_supports_color = __commonJS(function(exports, module) {
+  var os = __require("os");
+  var tty = __require("tty");
+  var hasFlag = require_has_flag();
+  var { env } = process;
+  var flagForceColor;
+  if (hasFlag("no-color") || hasFlag("no-colors") || hasFlag("color=false") || hasFlag("color=never")) {
+    flagForceColor = 0;
+  } else if (hasFlag("color") || hasFlag("colors") || hasFlag("color=true") || hasFlag("color=always")) {
+    flagForceColor = 1;
+  }
+  function envForceColor() {
+    if ("FORCE_COLOR" in env) {
+      if (env.FORCE_COLOR === "true") {
+        return 1;
+      }
+      if (env.FORCE_COLOR === "false") {
+        return 0;
+      }
+      return env.FORCE_COLOR.length === 0 ? 1 : Math.min(Number.parseInt(env.FORCE_COLOR, 10), 3);
+    }
+  }
+  function translateLevel(level) {
+    if (level === 0) {
+      return false;
+    }
+    return {
+      level,
+      hasBasic: true,
+      has256: level >= 2,
+      has16m: level >= 3
+    };
+  }
+  function supportsColor(haveStream, { streamIsTTY, sniffFlags = true } = {}) {
+    const noFlagForceColor = envForceColor();
+    if (noFlagForceColor !== undefined) {
+      flagForceColor = noFlagForceColor;
+    }
+    const forceColor = sniffFlags ? flagForceColor : noFlagForceColor;
+    if (forceColor === 0) {
+      return 0;
+    }
+    if (sniffFlags) {
+      if (hasFlag("color=16m") || hasFlag("color=full") || hasFlag("color=truecolor")) {
+        return 3;
+      }
+      if (hasFlag("color=256")) {
+        return 2;
+      }
+    }
+    if (haveStream && !streamIsTTY && forceColor === undefined) {
+      return 0;
+    }
+    const min = forceColor || 0;
+    if (env.TERM === "dumb") {
+      return min;
+    }
+    if (process.platform === "win32") {
+      const osRelease = os.release().split(".");
+      if (Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) {
+        return Number(osRelease[2]) >= 14931 ? 3 : 2;
+      }
+      return 1;
+    }
+    if ("CI" in env) {
+      if (["TRAVIS", "CIRCLECI", "APPVEYOR", "GITLAB_CI", "GITHUB_ACTIONS", "BUILDKITE", "DRONE"].some((sign) => (sign in env)) || env.CI_NAME === "codeship") {
+        return 1;
+      }
+      return min;
+    }
+    if ("TEAMCITY_VERSION" in env) {
+      return /^(9\.(0*[1-9]\d*)\.|\d{2,}\.)/.test(env.TEAMCITY_VERSION) ? 1 : 0;
+    }
+    if (env.COLORTERM === "truecolor") {
+      return 3;
+    }
+    if ("TERM_PROGRAM" in env) {
+      const version = Number.parseInt((env.TERM_PROGRAM_VERSION || "").split(".")[0], 10);
+      switch (env.TERM_PROGRAM) {
+        case "iTerm.app":
+          return version >= 3 ? 3 : 2;
+        case "Apple_Terminal":
+          return 2;
+      }
+    }
+    if (/-256(color)?$/i.test(env.TERM)) {
+      return 2;
+    }
+    if (/^screen|^xterm|^vt100|^vt220|^rxvt|color|ansi|cygwin|linux/i.test(env.TERM)) {
+      return 1;
+    }
+    if ("COLORTERM" in env) {
+      return 1;
+    }
+    return min;
+  }
+  function getSupportLevel(stream, options = {}) {
+    const level = supportsColor(stream, {
+      streamIsTTY: stream && stream.isTTY,
+      ...options
+    });
+    return translateLevel(level);
+  }
+  module.exports = {
+    supportsColor: getSupportLevel,
+    stdout: getSupportLevel({ isTTY: tty.isatty(1) }),
+    stderr: getSupportLevel({ isTTY: tty.isatty(2) })
+  };
+});
+
+// ../../node_modules/debug/src/node.js
+var require_node = __commonJS(function(exports, module) {
+  var tty = __require("tty");
+  var util = __require("util");
+  exports.init = init;
+  exports.log = log;
+  exports.formatArgs = formatArgs;
+  exports.save = save;
+  exports.load = load;
+  exports.useColors = useColors;
+  exports.destroy = util.deprecate(() => {}, "Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.");
+  exports.colors = [6, 2, 3, 4, 5, 1];
+  try {
+    const supportsColor = require_supports_color();
+    if (supportsColor && (supportsColor.stderr || supportsColor).level >= 2) {
+      exports.colors = [
+        20,
+        21,
+        26,
+        27,
+        32,
+        33,
+        38,
+        39,
+        40,
+        41,
+        42,
+        43,
+        44,
+        45,
+        56,
+        57,
+        62,
+        63,
+        68,
+        69,
+        74,
+        75,
+        76,
+        77,
+        78,
+        79,
+        80,
+        81,
+        92,
+        93,
+        98,
+        99,
+        112,
+        113,
+        128,
+        129,
+        134,
+        135,
+        148,
+        149,
+        160,
+        161,
+        162,
+        163,
+        164,
+        165,
+        166,
+        167,
+        168,
+        169,
+        170,
+        171,
+        172,
+        173,
+        178,
+        179,
+        184,
+        185,
+        196,
+        197,
+        198,
+        199,
+        200,
+        201,
+        202,
+        203,
+        204,
+        205,
+        206,
+        207,
+        208,
+        209,
+        214,
+        215,
+        220,
+        221
+      ];
+    }
+  } catch (error) {}
+  exports.inspectOpts = Object.keys(process.env).filter((key) => {
+    return /^debug_/i.test(key);
+  }).reduce((obj, key) => {
+    const prop = key.substring(6).toLowerCase().replace(/_([a-z])/g, (_, k) => {
+      return k.toUpperCase();
+    });
+    let val = process.env[key];
+    if (/^(yes|on|true|enabled)$/i.test(val)) {
+      val = true;
+    } else if (/^(no|off|false|disabled)$/i.test(val)) {
+      val = false;
+    } else if (val === "null") {
+      val = null;
+    } else {
+      val = Number(val);
+    }
+    obj[prop] = val;
+    return obj;
+  }, {});
+  function useColors() {
+    return "colors" in exports.inspectOpts ? Boolean(exports.inspectOpts.colors) : tty.isatty(process.stderr.fd);
+  }
+  function formatArgs(args) {
+    const { namespace: name, useColors } = this;
+    if (useColors) {
+      const c = this.color;
+      const colorCode = "\x1B[3" + (c < 8 ? c : "8;5;" + c);
+      const prefix = `  ${colorCode};1m${name} \x1B[0m`;
+      args[0] = prefix + args[0].split(`
+`).join(`
+` + prefix);
+      args.push(colorCode + "m+" + module.exports.humanize(this.diff) + "\x1B[0m");
+    } else {
+      args[0] = getDate() + name + " " + args[0];
+    }
+  }
+  function getDate() {
+    if (exports.inspectOpts.hideDate) {
+      return "";
+    }
+    return new Date().toISOString() + " ";
+  }
+  function log(...args) {
+    return process.stderr.write(util.formatWithOptions(exports.inspectOpts, ...args) + `
+`);
+  }
+  function save(namespaces) {
+    if (namespaces) {
+      process.env.DEBUG = namespaces;
+    } else {
+      delete process.env.DEBUG;
+    }
+  }
+  function load() {
+    return process.env.DEBUG;
+  }
+  function init(debug) {
+    debug.inspectOpts = {};
+    const keys = Object.keys(exports.inspectOpts);
+    for (let i = 0;i < keys.length; i++) {
+      debug.inspectOpts[keys[i]] = exports.inspectOpts[keys[i]];
+    }
+  }
+  module.exports = require_common()(exports);
+  var { formatters } = module.exports;
+  formatters.o = function(v) {
+    this.inspectOpts.colors = this.useColors;
+    return util.inspect(v, this.inspectOpts).split(`
+`).map((str) => str.trim()).join(" ");
+  };
+  formatters.O = function(v) {
+    this.inspectOpts.colors = this.useColors;
+    return util.inspect(v, this.inspectOpts);
+  };
+});
+
+// ../../node_modules/debug/src/index.js
+var require_src = __commonJS(function(exports, module) {
+  if (typeof process === "undefined" || process.type === "renderer" || false || process.__nwjs) {
+    module.exports = require_browser();
+  } else {
+    module.exports = require_node();
+  }
+});
+
+// src/payload-debug.ts
+function disablePayloadDebug() {
+  import_debug.default.enable(`${import_debug.default.disable()},-socket.io:socket,-socket.io-parser,-engine:ws,-engine:polling,-engine:socket,-engine`);
+}
+var import_debug;
+var init_payload_debug = __esm(() => {
+  import_debug = __toESM(require_src(), 1);
+  disablePayloadDebug();
+});
+
 // ../../node_modules/logform/format.js
 var require_format = __commonJS(function(exports, module) {
   class InvalidFormatError extends Error {
@@ -150,7 +906,7 @@ var require_styles = __commonJS(function(exports, module) {
 });
 
 // ../../node_modules/@colors/colors/lib/system/has-flag.js
-var require_has_flag = __commonJS(function(exports, module) {
+var require_has_flag2 = __commonJS(function(exports, module) {
   module.exports = function(flag, argv) {
     argv = argv || process.argv || [];
     var terminatorPos = argv.indexOf("--");
@@ -163,7 +919,7 @@ var require_has_flag = __commonJS(function(exports, module) {
 // ../../node_modules/@colors/colors/lib/system/supports-colors.js
 var require_supports_colors = __commonJS(function(exports, module) {
   var os = __require("os");
-  var hasFlag = require_has_flag();
+  var hasFlag = require_has_flag2();
   var env = process.env;
   var forceColor = undefined;
   if (hasFlag("no-color") || hasFlag("no-colors") || hasFlag("color=false")) {
@@ -1714,116 +2470,6 @@ var require_metadata = __commonJS(function(exports, module) {
   });
 });
 
-// ../../node_modules/ms/index.js
-var require_ms = __commonJS(function(exports, module) {
-  var s = 1000;
-  var m = s * 60;
-  var h = m * 60;
-  var d = h * 24;
-  var w = d * 7;
-  var y = d * 365.25;
-  module.exports = function(val, options) {
-    options = options || {};
-    var type = typeof val;
-    if (type === "string" && val.length > 0) {
-      return parse(val);
-    } else if (type === "number" && isFinite(val)) {
-      return options.long ? fmtLong(val) : fmtShort(val);
-    }
-    throw new Error("val is not a non-empty string or a valid number. val=" + JSON.stringify(val));
-  };
-  function parse(str) {
-    str = String(str);
-    if (str.length > 100) {
-      return;
-    }
-    var match = /^(-?(?:\d+)?\.?\d+) *(milliseconds?|msecs?|ms|seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)?$/i.exec(str);
-    if (!match) {
-      return;
-    }
-    var n = parseFloat(match[1]);
-    var type = (match[2] || "ms").toLowerCase();
-    switch (type) {
-      case "years":
-      case "year":
-      case "yrs":
-      case "yr":
-      case "y":
-        return n * y;
-      case "weeks":
-      case "week":
-      case "w":
-        return n * w;
-      case "days":
-      case "day":
-      case "d":
-        return n * d;
-      case "hours":
-      case "hour":
-      case "hrs":
-      case "hr":
-      case "h":
-        return n * h;
-      case "minutes":
-      case "minute":
-      case "mins":
-      case "min":
-      case "m":
-        return n * m;
-      case "seconds":
-      case "second":
-      case "secs":
-      case "sec":
-      case "s":
-        return n * s;
-      case "milliseconds":
-      case "millisecond":
-      case "msecs":
-      case "msec":
-      case "ms":
-        return n;
-      default:
-        return;
-    }
-  }
-  function fmtShort(ms) {
-    var msAbs = Math.abs(ms);
-    if (msAbs >= d) {
-      return Math.round(ms / d) + "d";
-    }
-    if (msAbs >= h) {
-      return Math.round(ms / h) + "h";
-    }
-    if (msAbs >= m) {
-      return Math.round(ms / m) + "m";
-    }
-    if (msAbs >= s) {
-      return Math.round(ms / s) + "s";
-    }
-    return ms + "ms";
-  }
-  function fmtLong(ms) {
-    var msAbs = Math.abs(ms);
-    if (msAbs >= d) {
-      return plural(ms, msAbs, d, "day");
-    }
-    if (msAbs >= h) {
-      return plural(ms, msAbs, h, "hour");
-    }
-    if (msAbs >= m) {
-      return plural(ms, msAbs, m, "minute");
-    }
-    if (msAbs >= s) {
-      return plural(ms, msAbs, s, "second");
-    }
-    return ms + " ms";
-  }
-  function plural(ms, msAbs, n, name) {
-    var isPlural = msAbs >= n * 1.5;
-    return Math.round(ms / n) + " " + name + (isPlural ? "s" : "");
-  }
-});
-
 // ../../node_modules/logform/ms.js
 var require_ms2 = __commonJS(function(exports, module) {
   var format = require_format();
@@ -2458,7 +3104,7 @@ var require_logform = __commonJS(function(exports) {
 });
 
 // ../../node_modules/winston/lib/winston/common.js
-var require_common = __commonJS(function(exports) {
+var require_common2 = __commonJS(function(exports) {
   var { format } = __require("util");
   exports.warn = {
     deprecated(prop) {
@@ -2571,7 +3217,7 @@ var require_package = __commonJS(function(exports, module) {
 });
 
 // ../../node_modules/util-deprecate/node.js
-var require_node = __commonJS(function(exports, module) {
+var require_node2 = __commonJS(function(exports, module) {
   module.exports = __require("util").deprecate;
 });
 
@@ -4667,7 +5313,7 @@ var require__stream_writable = __commonJS(function(exports, module) {
   var Duplex;
   Writable.WritableState = WritableState;
   var internalUtil = {
-    deprecate: require_node()
+    deprecate: require_node2()
   };
   var Stream = __require("stream");
   var Buffer2 = __require("buffer").Buffer;
@@ -7917,7 +8563,7 @@ var require_development = __commonJS(function(exports, module) {
 });
 
 // ../../node_modules/@dabh/diagnostics/node/index.js
-var require_node2 = __commonJS(function(exports, module) {
+var require_node3 = __commonJS(function(exports, module) {
   if (false) {} else {
     module.exports = require_development();
   }
@@ -8023,7 +8669,7 @@ var require_file = __commonJS(function(exports, module) {
   var { MESSAGE } = require_triple_beam();
   var { Stream, PassThrough } = require_readable();
   var TransportStream = require_winston_transport();
-  var debug = require_node2()("winston:file");
+  var debug = require_node3()("winston:file");
   var os = __require("os");
   var tailFile = require_tail_file();
   module.exports = class File2 extends TransportStream {
@@ -9026,7 +9672,7 @@ var require_exception_stream = __commonJS(function(exports, module) {
 var require_exception_handler = __commonJS(function(exports, module) {
   var os = __require("os");
   var asyncForEach = require_forEach();
-  var debug = require_node2()("winston:exception");
+  var debug = require_node3()("winston:exception");
   var once = require_one_time();
   var stackTrace = require_stack_trace();
   var ExceptionStream = require_exception_stream();
@@ -9193,7 +9839,7 @@ var require_rejection_stream = __commonJS(function(exports, module) {
 var require_rejection_handler = __commonJS(function(exports, module) {
   var os = __require("os");
   var asyncForEach = require_forEach();
-  var debug = require_node2()("winston:rejection");
+  var debug = require_node3()("winston:rejection");
   var once = require_one_time();
   var stackTrace = require_stack_trace();
   var RejectionStream = require_rejection_stream();
@@ -9370,7 +10016,7 @@ var require_logger = __commonJS(function(exports, module) {
   var RejectionHandler = require_rejection_handler();
   var LegacyTransportStream = require_legacy();
   var Profiler = require_profiler();
-  var { warn } = require_common();
+  var { warn } = require_common2();
   var config = require_config2();
   var formatRegExp = /%[scdjifoO%]/g;
 
@@ -9741,7 +10387,7 @@ var require_create_logger = __commonJS(function(exports, module) {
   var { LEVEL } = require_triple_beam();
   var config = require_config2();
   var Logger = require_logger();
-  var debug = require_node2()("winston:create-logger");
+  var debug = require_node3()("winston:create-logger");
   function isLevelEnabledFunctionName(level) {
     return "is" + level.charAt(0).toUpperCase() + level.slice(1) + "Enabled";
   }
@@ -9836,7 +10482,7 @@ var require_container = __commonJS(function(exports, module) {
 // ../../node_modules/winston/lib/winston.js
 var require_winston = __commonJS(function(exports) {
   var logform = require_logform();
-  var { warn } = require_common();
+  var { warn } = require_common2();
   exports.version = require_package().version;
   exports.transports = require_transports();
   exports.config = require_config2();
@@ -10411,7 +11057,7 @@ var init_package = __esm(() => {
   package_default = {
     name: "@sockethub/schemas",
     description: "JSON schema files for validating Sockethub Activity Streams",
-    version: "3.0.0-beta.0",
+    version: "3.0.0-beta.1",
     type: "module",
     private: false,
     author: "Nick Jennings <nick@silverbucket.net>",
@@ -10481,7 +11127,7 @@ var init_package = __esm(() => {
       "ajv-formats": "^2.1.1",
       "ajv-formats-draft2019": "^1.6.1"
     },
-    gitHead: "75002ae8f15d7679bd58a9327f5a1d7eeaffa237",
+    gitHead: "06c9062f1cb5f0c0599fd979e6e91da79f08eda0",
     types: "./dist/index.d.ts"
   };
 });
@@ -10647,7 +11293,8 @@ var init_sockethub_config = __esm(() => {
             type: "object",
             additionalProperties: false,
             properties: {
-              connectTimeoutMs: { type: "number" }
+              connectTimeoutMs: { type: "number" },
+              allowPrivateAddresses: { type: "boolean" }
             }
           },
           "@sockethub/platform-metadata": {
@@ -10737,11 +11384,23 @@ var init_sockethub_config = __esm(() => {
         type: "object",
         additionalProperties: false,
         properties: {
+          maxInstancesPerSession: {
+            type: "integer",
+            minimum: 0,
+            default: 10,
+            description: "Maximum persistent instances per socket session. 0 disables the cap."
+          },
+          maxInstancesPerIp: {
+            type: "integer",
+            minimum: 0,
+            default: 20,
+            description: "Maximum persistent instances per client IP, including HTTP actions. 0 disables the cap."
+          },
           maxPlatformInstances: {
             type: "number",
             minimum: 0,
             default: 100,
-            description: "Upper bound on concurrently running platform instances " + "(child processes). Each persistent-platform actor forks " + "its own process, so an unbounded count is a resource " + "exhaustion risk on public instances. 0 disables the cap."
+            description: "Upper bound on concurrently running persistent platform instances " + "(child processes). Each persistent-platform actor forks " + "its own process, so an unbounded count is a resource " + "exhaustion risk on public instances. 0 disables the cap."
           }
         }
       },
@@ -17110,15 +17769,33 @@ var require_ajv = __commonJS(function(exports, module) {
   } });
 });
 
+// ../schemas/src/helpers/codegen.ts
+function isCodegenAvailable() {
+  if (available === undefined) {
+    try {
+      new Function("return true");
+      available = true;
+    } catch {
+      available = false;
+    }
+  }
+  return available;
+}
+function warnCodegenUnavailable() {
+  if (warned) {
+    return;
+  }
+  warned = true;
+  console.warn("[@sockethub/schemas] Schema validation is disabled: this environment's Content Security Policy blocks `new Function`, which Ajv needs to compile schemas. The Sockethub server still validates every message.");
+}
+var available, warned = false;
+
 // ../schemas/src/schemas/service-descriptor.ts
 var init_service_descriptor = () => {};
 
 // ../schemas/src/service-descriptor.ts
-var import_ajv, ajv;
 var init_service_descriptor2 = __esm(() => {
   init_service_descriptor();
-  import_ajv = __toESM(require_ajv(), 1);
-  ajv = new import_ajv.default({ strictTypes: false, allErrors: true });
 });
 
 // ../../node_modules/ajv-formats/dist/formats.js
@@ -26670,8 +27347,11 @@ function parseMsg(error) {
   }
   return err;
 }
-function getTypeList(msg) {
+function getTypeList(msg, depth = 0) {
   const types = [];
+  if (depth > MAX_TYPE_LIST_DEPTH) {
+    return types;
+  }
   if (msg?.type) {
     types.push(msg.type);
   }
@@ -26679,7 +27359,7 @@ function getTypeList(msg) {
   for (const prop in record) {
     const value = record[prop];
     if (value && typeof value === "object" && "type" in value) {
-      types.push(...getTypeList(value));
+      types.push(...getTypeList(value, depth + 1));
     }
   }
   return types;
@@ -26759,20 +27439,41 @@ function composeFinalError(error, options) {
   }
   return msg;
 }
+var MAX_TYPE_LIST_DEPTH = 64;
 var init_error_parser = __esm(() => {
   init_objects();
 });
 
 // ../schemas/src/validator.ts
+function getAjv() {
+  if (!isCodegenAvailable()) {
+    warnCodegenUnavailable();
+    return;
+  }
+  if (!ajv) {
+    const instance = new import_ajv.default({ strictTypes: false, allErrors: true });
+    import_ajv_formats.default(instance);
+    import_ajv_formats_draft2019.default(instance);
+    for (const uri in schemas) {
+      instance.addSchema(schemas[uri], uri);
+    }
+    ajv = instance;
+  }
+  return ajv;
+}
 function registerSystemContext(platformId, contextUrl) {
   registerPlatformContext(platformId, contextUrl, `${schemaURL}/context/${platformId}/messages`, `${schemaURL}/context/${platformId}/credentials`);
+  const instance = getAjv();
+  if (!instance) {
+    return;
+  }
   const messageSchemaRef = `${schemaURL}/context/${platformId}/messages`;
-  if (!ajv2.getSchema(messageSchemaRef)) {
-    ajv2.addSchema({}, messageSchemaRef);
+  if (!instance.getSchema(messageSchemaRef)) {
+    instance.addSchema({}, messageSchemaRef);
   }
   const credentialsSchemaRef = `${schemaURL}/context/${platformId}/credentials`;
-  if (!ajv2.getSchema(credentialsSchemaRef)) {
-    ajv2.addSchema({}, credentialsSchemaRef);
+  if (!instance.getSchema(credentialsSchemaRef)) {
+    instance.addSchema({}, credentialsSchemaRef);
   }
 }
 function registerSystemPlatformContexts() {
@@ -26784,7 +27485,11 @@ function registerSystemPlatformContexts() {
   systemContextsRegistered = true;
 }
 function handleValidation(schemaRef, msg) {
-  const validator = ajv2.getSchema(schemaRef);
+  const instance = getAjv();
+  if (!instance) {
+    return "";
+  }
+  const validator = instance.getSchema(schemaRef);
   if (!validator) {
     return `schema ${schemaRef} not found`;
   }
@@ -26808,17 +27513,25 @@ function setValidationErrorOptions(options) {
   validationErrorOptions = { ...validationErrorOptions, ...options };
 }
 function validateSockethubConfig(config) {
+  const instance = getAjv();
+  if (!instance) {
+    return "";
+  }
   if (!sockethubConfigValidator) {
-    sockethubConfigValidator = ajv2.compile(SockethubConfigSchema);
+    sockethubConfigValidator = instance.compile(SockethubConfigSchema);
   }
   if (sockethubConfigValidator(config)) {
     return "";
   }
-  return ajv2.errorsText(sockethubConfigValidator.errors, {
+  return instance.errorsText(sockethubConfigValidator.errors, {
     dataVar: "config"
   });
 }
 function validateActivityStream(msg) {
+  if (!isCodegenAvailable()) {
+    warnCodegenUnavailable();
+    return "";
+  }
   const streamValidationError = handleValidation(`${schemaURL}/activity-stream`, msg);
   if (streamValidationError) {
     return streamValidationError;
@@ -26834,6 +27547,10 @@ function validateActivityStream(msg) {
   return handleValidation(schemaId, msg);
 }
 function validateActivityStreamResponse(msg) {
+  if (!isCodegenAvailable()) {
+    warnCodegenUnavailable();
+    return "";
+  }
   const platformContextUrl = resolvePlatformContextUrl(msg);
   if (!platformContextUrl) {
     return "";
@@ -26843,12 +27560,17 @@ function validateActivityStreamResponse(msg) {
     return "";
   }
   const responsesSchemaId = `${schemaURL}/context/${platformId}/responses`;
-  if (!ajv2.getSchema(responsesSchemaId)) {
+  const instance = getAjv();
+  if (!instance || !instance.getSchema(responsesSchemaId)) {
     return "";
   }
   return handleValidation(responsesSchemaId, msg);
 }
 function validateCredentials(msg) {
+  if (!isCodegenAvailable()) {
+    warnCodegenUnavailable();
+    return "";
+  }
   if (!Array.isArray(msg["@context"])) {
     return "credential activity streams must have an @context set";
   }
@@ -26870,15 +27592,18 @@ function validateCredentials(msg) {
   return handleValidation(credentialsSchemaId, msg);
 }
 function validatePlatformSchema(schema) {
-  const validate = ajv2.compile(PlatformSchema);
-  const err = validate(schema);
-  if (!err) {
-    const validationError = validate.errors[0];
-    let message = `${validationError.instancePath} ${validationError.message}`;
-    if (validationError.keyword === "additionalProperties") {
-      message += `: ${validationError.params.additionalProperty}`;
+  const instance = getAjv();
+  if (instance) {
+    const validate = instance.compile(PlatformSchema);
+    const err = validate(schema);
+    if (!err) {
+      const validationError = validate.errors?.[0];
+      let message = `${validationError?.instancePath ?? ""} ${validationError?.message ?? "is invalid"}`;
+      if (validationError?.keyword === "additionalProperties") {
+        message += `: ${validationError.params.additionalProperty}`;
+      }
+      return `platform schema failed to validate: ${message}`;
     }
-    return `platform schema failed to validate: ${message}`;
   }
   const platform = schema;
   const messages = platform.messages;
@@ -26920,9 +27645,13 @@ function validatePlatformSchema(schema) {
   return "";
 }
 function addPlatformSchema(schema, platform_type) {
+  const instance = getAjv();
+  if (!instance) {
+    return;
+  }
   const schemaRef = `${schemaURL}/context/${platform_type}`;
-  if (!ajv2.getSchema(schemaRef)) {
-    ajv2.addSchema(schema, schemaRef);
+  if (!instance.getSchema(schemaRef)) {
+    instance.addSchema(schema, schemaRef);
   }
 }
 function addPlatformContext(platformId, platformContextUrl) {
@@ -26935,7 +27664,7 @@ function resolvePlatformId(msg) {
   }
   return getPlatformIdByContextUrl(platformContextUrl) ?? null;
 }
-var import_ajv2, import_ajv_formats, import_ajv_formats_draft2019, ajv2, schemaURL = "https://sockethub.org/schemas/v0", schemas, validationErrorOptions, systemContextsRegistered = false, sockethubConfigValidator;
+var import_ajv, import_ajv_formats, import_ajv_formats_draft2019, schemaURL = "https://sockethub.org/schemas/v0", schemas, validationErrorOptions, systemContextsRegistered = false, ajv, sockethubConfigValidator;
 var init_validator = __esm(() => {
   init_context();
   init_error_parser();
@@ -26943,18 +27672,12 @@ var init_validator = __esm(() => {
   init_activity_stream();
   init_platform();
   init_sockethub_config();
-  import_ajv2 = __toESM(require_ajv(), 1);
+  import_ajv = __toESM(require_ajv(), 1);
   import_ajv_formats = __toESM(require_dist(), 1);
   import_ajv_formats_draft2019 = __toESM(require_ajv_formats_draft2019(), 1);
-  ajv2 = new import_ajv2.default({ strictTypes: false, allErrors: true });
-  import_ajv_formats.default(ajv2);
-  import_ajv_formats_draft2019.default(ajv2);
   schemas = {};
   validationErrorOptions = {};
   schemas[`${schemaURL}/activity-stream`] = ActivityStreamSchema;
-  for (const uri in schemas) {
-    ajv2.addSchema(schemas[uri], uri);
-  }
   registerSystemPlatformContexts();
 });
 
@@ -29275,6 +29998,8 @@ var init_config_schema = __esm(() => {
     "rateLimiter.maxRequests": { format: "nat" },
     "rateLimiter.blockDurationMs": { format: "nat" },
     "rateLimiter.maxConnectionsPerIp": { format: "nat" },
+    "limits.maxInstancesPerSession": { format: "nat" },
+    "limits.maxInstancesPerIp": { format: "nat" },
     "limits.maxPlatformInstances": { format: "nat" },
     "credentials.ttlMs": {
       format: "nat",
@@ -29927,7 +30652,7 @@ var __create2, __getProtoOf2, __defProp2, __getOwnPropNames2, __hasOwnProp2, __t
   if (canCache)
     cache.set(mod, to);
   return to;
-}, __commonJS22 = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports), __require22, require_ms3, require_common2, require_browser, require_node3, require_src, require_commands, require_built, require_utils2, require_built2, require_old, require_modern2, require_redis_errors, require_lib2, require_defaults3, require_isArguments, require_lodash2, require_debug, require_TLSProfiles, require_utils22, require_argumentParsers, require_Command, require_ClusterAllFailedError, require_ScanStream, require_autoPipelining, require_Script, require_Commander, require_Pipeline, require_tracing, require_transaction, require_applyMixin, require_ClusterOptions, require_util3, require_ClusterSubscriber, require_ConnectionPool, require_denque, require_DelayQueue, require_ShardedSubscriber, require_ClusterSubscriberGroup, require_cluster, require_AbstractConnector, require_StandaloneConnector, require_SentinelIterator, require_FailoverDetector, require_SentinelConnector, require_connectors, require_MaxRetriesPerRequestError, require_errors5, require_parser, require_SubscriptionSet, require_DataHandler, require_event_handler, require_RedisOptions, require_Redis, require_built3, import_debug, import_ioredis, log, ALGORITHM = "aes-256-cbc", IV_LENGTH = 16, crypto;
+}, __commonJS22 = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports), __require22, require_ms3, require_common3, require_browser2, require_node4, require_src2, require_commands, require_built, require_utils2, require_built2, require_old, require_modern2, require_redis_errors, require_lib2, require_defaults3, require_isArguments, require_lodash2, require_debug, require_TLSProfiles, require_utils22, require_argumentParsers, require_Command, require_ClusterAllFailedError, require_ScanStream, require_autoPipelining, require_Script, require_Commander, require_Pipeline, require_tracing, require_transaction, require_applyMixin, require_ClusterOptions, require_util3, require_ClusterSubscriber, require_ConnectionPool, require_denque, require_DelayQueue, require_ShardedSubscriber, require_ClusterSubscriberGroup, require_cluster, require_AbstractConnector, require_StandaloneConnector, require_SentinelIterator, require_FailoverDetector, require_SentinelConnector, require_connectors, require_MaxRetriesPerRequestError, require_errors5, require_parser, require_SubscriptionSet, require_DataHandler, require_event_handler, require_RedisOptions, require_Redis, require_built3, import_debug2, import_ioredis, log, ALGORITHM = "aes-256-cbc", IV_LENGTH = 16, crypto;
 var init_crypto = __esm(() => {
   __create2 = Object.create;
   __getProtoOf2 = Object.getPrototypeOf;
@@ -30425,7 +31150,7 @@ var init_crypto = __esm(() => {
       return Math.round(ms / n) + " " + name + (isPlural ? "s" : "");
     }
   });
-  require_common2 = __commonJS22((exports, module) => {
+  require_common3 = __commonJS22((exports, module) => {
     function setup(env) {
       createDebug.debug = createDebug;
       createDebug.default = createDebug;
@@ -30598,7 +31323,7 @@ var init_crypto = __esm(() => {
     }
     module.exports = setup;
   });
-  require_browser = __commonJS22((exports, module) => {
+  require_browser2 = __commonJS22((exports, module) => {
     exports.formatArgs = formatArgs;
     exports.save = save;
     exports.load = load;
@@ -30746,7 +31471,7 @@ var init_crypto = __esm(() => {
         return localStorage;
       } catch (error) {}
     }
-    module.exports = require_common2()(exports);
+    module.exports = require_common3()(exports);
     var { formatters } = module.exports;
     formatters.j = function(v) {
       try {
@@ -30756,7 +31481,7 @@ var init_crypto = __esm(() => {
       }
     };
   });
-  require_node3 = __commonJS22((exports, module) => {
+  require_node4 = __commonJS22((exports, module) => {
     var tty = __require22("tty");
     var util = __require22("util");
     exports.init = init;
@@ -30915,7 +31640,7 @@ var init_crypto = __esm(() => {
         debug.inspectOpts[keys[i]] = exports.inspectOpts[keys[i]];
       }
     }
-    module.exports = require_common2()(exports);
+    module.exports = require_common3()(exports);
     var { formatters } = module.exports;
     formatters.o = function(v) {
       this.inspectOpts.colors = this.useColors;
@@ -30927,11 +31652,11 @@ var init_crypto = __esm(() => {
       return util.inspect(v, this.inspectOpts);
     };
   });
-  require_src = __commonJS22((exports, module) => {
+  require_src2 = __commonJS22((exports, module) => {
     if (typeof process === "undefined" || process.type === "renderer" || false || process.__nwjs) {
-      module.exports = require_browser();
+      module.exports = require_browser2();
     } else {
-      module.exports = require_node3();
+      module.exports = require_node4();
     }
   });
   require_commands = __commonJS22((exports, module) => {
@@ -34678,7 +35403,7 @@ var init_crypto = __esm(() => {
   require_debug = __commonJS22((exports) => {
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.genRedactedString = exports.getStringValue = exports.MAX_ARGUMENT_LENGTH = undefined;
-    var debug_1 = require_src();
+    var debug_1 = require_src2();
     var MAX_ARGUMENT_LENGTH = 200;
     exports.MAX_ARGUMENT_LENGTH = MAX_ARGUMENT_LENGTH;
     var NAMESPACE_PREFIX = "ioredis";
@@ -40420,9 +41145,9 @@ $` + Buffer.byteLength(this.name) + `\r
     }
     exports.print = print;
   });
-  import_debug = __toESM22(require_src(), 1);
+  import_debug2 = __toESM22(require_src2(), 1);
   import_ioredis = __toESM22(require_built3(), 1);
-  log = import_debug.default("secure-store-redis");
+  log = import_debug2.default("secure-store-redis");
   crypto = new Crypto;
 });
 
@@ -44189,647 +44914,11 @@ var require_lodash3 = __commonJS(function(exports) {
   __exportStar(require_isArguments2(), exports);
 });
 
-// ../../node_modules/debug/src/common.js
-var require_common3 = __commonJS(function(exports, module) {
-  function setup(env) {
-    createDebug.debug = createDebug;
-    createDebug.default = createDebug;
-    createDebug.coerce = coerce;
-    createDebug.disable = disable;
-    createDebug.enable = enable;
-    createDebug.enabled = enabled;
-    createDebug.humanize = require_ms();
-    createDebug.destroy = destroy;
-    Object.keys(env).forEach((key) => {
-      createDebug[key] = env[key];
-    });
-    createDebug.names = [];
-    createDebug.skips = [];
-    createDebug.formatters = {};
-    function selectColor(namespace) {
-      let hash = 0;
-      for (let i = 0;i < namespace.length; i++) {
-        hash = (hash << 5) - hash + namespace.charCodeAt(i);
-        hash |= 0;
-      }
-      return createDebug.colors[Math.abs(hash) % createDebug.colors.length];
-    }
-    createDebug.selectColor = selectColor;
-    function createDebug(namespace) {
-      let prevTime;
-      let enableOverride = null;
-      let namespacesCache;
-      let enabledCache;
-      function debug(...args) {
-        if (!debug.enabled) {
-          return;
-        }
-        const self2 = debug;
-        const curr = Number(new Date);
-        const ms = curr - (prevTime || curr);
-        self2.diff = ms;
-        self2.prev = prevTime;
-        self2.curr = curr;
-        prevTime = curr;
-        args[0] = createDebug.coerce(args[0]);
-        if (typeof args[0] !== "string") {
-          args.unshift("%O");
-        }
-        let index = 0;
-        args[0] = args[0].replace(/%([a-zA-Z%])/g, (match, format) => {
-          if (match === "%%") {
-            return "%";
-          }
-          index++;
-          const formatter = createDebug.formatters[format];
-          if (typeof formatter === "function") {
-            const val = args[index];
-            match = formatter.call(self2, val);
-            args.splice(index, 1);
-            index--;
-          }
-          return match;
-        });
-        createDebug.formatArgs.call(self2, args);
-        const logFn = self2.log || createDebug.log;
-        logFn.apply(self2, args);
-      }
-      debug.namespace = namespace;
-      debug.useColors = createDebug.useColors();
-      debug.color = createDebug.selectColor(namespace);
-      debug.extend = extend;
-      debug.destroy = createDebug.destroy;
-      Object.defineProperty(debug, "enabled", {
-        enumerable: true,
-        configurable: false,
-        get: () => {
-          if (enableOverride !== null) {
-            return enableOverride;
-          }
-          if (namespacesCache !== createDebug.namespaces) {
-            namespacesCache = createDebug.namespaces;
-            enabledCache = createDebug.enabled(namespace);
-          }
-          return enabledCache;
-        },
-        set: (v) => {
-          enableOverride = v;
-        }
-      });
-      if (typeof createDebug.init === "function") {
-        createDebug.init(debug);
-      }
-      return debug;
-    }
-    function extend(namespace, delimiter) {
-      const newDebug = createDebug(this.namespace + (typeof delimiter === "undefined" ? ":" : delimiter) + namespace);
-      newDebug.log = this.log;
-      return newDebug;
-    }
-    function enable(namespaces) {
-      createDebug.save(namespaces);
-      createDebug.namespaces = namespaces;
-      createDebug.names = [];
-      createDebug.skips = [];
-      const split = (typeof namespaces === "string" ? namespaces : "").trim().replace(/\s+/g, ",").split(",").filter(Boolean);
-      for (const ns of split) {
-        if (ns[0] === "-") {
-          createDebug.skips.push(ns.slice(1));
-        } else {
-          createDebug.names.push(ns);
-        }
-      }
-    }
-    function matchesTemplate(search, template) {
-      let searchIndex = 0;
-      let templateIndex = 0;
-      let starIndex = -1;
-      let matchIndex = 0;
-      while (searchIndex < search.length) {
-        if (templateIndex < template.length && (template[templateIndex] === search[searchIndex] || template[templateIndex] === "*")) {
-          if (template[templateIndex] === "*") {
-            starIndex = templateIndex;
-            matchIndex = searchIndex;
-            templateIndex++;
-          } else {
-            searchIndex++;
-            templateIndex++;
-          }
-        } else if (starIndex !== -1) {
-          templateIndex = starIndex + 1;
-          matchIndex++;
-          searchIndex = matchIndex;
-        } else {
-          return false;
-        }
-      }
-      while (templateIndex < template.length && template[templateIndex] === "*") {
-        templateIndex++;
-      }
-      return templateIndex === template.length;
-    }
-    function disable() {
-      const namespaces = [
-        ...createDebug.names,
-        ...createDebug.skips.map((namespace) => "-" + namespace)
-      ].join(",");
-      createDebug.enable("");
-      return namespaces;
-    }
-    function enabled(name) {
-      for (const skip of createDebug.skips) {
-        if (matchesTemplate(name, skip)) {
-          return false;
-        }
-      }
-      for (const ns of createDebug.names) {
-        if (matchesTemplate(name, ns)) {
-          return true;
-        }
-      }
-      return false;
-    }
-    function coerce(val) {
-      if (val instanceof Error) {
-        return val.stack || val.message;
-      }
-      return val;
-    }
-    function destroy() {
-      console.warn("Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.");
-    }
-    createDebug.enable(createDebug.load());
-    return createDebug;
-  }
-  module.exports = setup;
-});
-
-// ../../node_modules/debug/src/browser.js
-var require_browser2 = __commonJS(function(exports, module) {
-  exports.formatArgs = formatArgs;
-  exports.save = save;
-  exports.load = load;
-  exports.useColors = useColors;
-  exports.storage = localstorage();
-  exports.destroy = (() => {
-    let warned = false;
-    return () => {
-      if (!warned) {
-        warned = true;
-        console.warn("Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.");
-      }
-    };
-  })();
-  exports.colors = [
-    "#0000CC",
-    "#0000FF",
-    "#0033CC",
-    "#0033FF",
-    "#0066CC",
-    "#0066FF",
-    "#0099CC",
-    "#0099FF",
-    "#00CC00",
-    "#00CC33",
-    "#00CC66",
-    "#00CC99",
-    "#00CCCC",
-    "#00CCFF",
-    "#3300CC",
-    "#3300FF",
-    "#3333CC",
-    "#3333FF",
-    "#3366CC",
-    "#3366FF",
-    "#3399CC",
-    "#3399FF",
-    "#33CC00",
-    "#33CC33",
-    "#33CC66",
-    "#33CC99",
-    "#33CCCC",
-    "#33CCFF",
-    "#6600CC",
-    "#6600FF",
-    "#6633CC",
-    "#6633FF",
-    "#66CC00",
-    "#66CC33",
-    "#9900CC",
-    "#9900FF",
-    "#9933CC",
-    "#9933FF",
-    "#99CC00",
-    "#99CC33",
-    "#CC0000",
-    "#CC0033",
-    "#CC0066",
-    "#CC0099",
-    "#CC00CC",
-    "#CC00FF",
-    "#CC3300",
-    "#CC3333",
-    "#CC3366",
-    "#CC3399",
-    "#CC33CC",
-    "#CC33FF",
-    "#CC6600",
-    "#CC6633",
-    "#CC9900",
-    "#CC9933",
-    "#CCCC00",
-    "#CCCC33",
-    "#FF0000",
-    "#FF0033",
-    "#FF0066",
-    "#FF0099",
-    "#FF00CC",
-    "#FF00FF",
-    "#FF3300",
-    "#FF3333",
-    "#FF3366",
-    "#FF3399",
-    "#FF33CC",
-    "#FF33FF",
-    "#FF6600",
-    "#FF6633",
-    "#FF9900",
-    "#FF9933",
-    "#FFCC00",
-    "#FFCC33"
-  ];
-  function useColors() {
-    if (typeof window !== "undefined" && window.process && (window.process.type === "renderer" || window.process.__nwjs)) {
-      return true;
-    }
-    if (typeof navigator !== "undefined" && navigator.userAgent && navigator.userAgent.toLowerCase().match(/(edge|trident)\/(\d+)/)) {
-      return false;
-    }
-    let m;
-    return typeof document !== "undefined" && document.documentElement && document.documentElement.style && document.documentElement.style.WebkitAppearance || typeof window !== "undefined" && window.console && (window.console.firebug || window.console.exception && window.console.table) || typeof navigator !== "undefined" && navigator.userAgent && (m = navigator.userAgent.toLowerCase().match(/firefox\/(\d+)/)) && parseInt(m[1], 10) >= 31 || typeof navigator !== "undefined" && navigator.userAgent && navigator.userAgent.toLowerCase().match(/applewebkit\/(\d+)/);
-  }
-  function formatArgs(args) {
-    args[0] = (this.useColors ? "%c" : "") + this.namespace + (this.useColors ? " %c" : " ") + args[0] + (this.useColors ? "%c " : " ") + "+" + module.exports.humanize(this.diff);
-    if (!this.useColors) {
-      return;
-    }
-    const c = "color: " + this.color;
-    args.splice(1, 0, c, "color: inherit");
-    let index = 0;
-    let lastC = 0;
-    args[0].replace(/%[a-zA-Z%]/g, (match) => {
-      if (match === "%%") {
-        return;
-      }
-      index++;
-      if (match === "%c") {
-        lastC = index;
-      }
-    });
-    args.splice(lastC, 0, c);
-  }
-  exports.log = console.debug || console.log || (() => {});
-  function save(namespaces) {
-    try {
-      if (namespaces) {
-        exports.storage.setItem("debug", namespaces);
-      } else {
-        exports.storage.removeItem("debug");
-      }
-    } catch (error) {}
-  }
-  function load() {
-    let r;
-    try {
-      r = exports.storage.getItem("debug") || exports.storage.getItem("DEBUG");
-    } catch (error) {}
-    if (!r && typeof process !== "undefined" && "env" in process) {
-      r = process.env.DEBUG;
-    }
-    return r;
-  }
-  function localstorage() {
-    try {
-      return localStorage;
-    } catch (error) {}
-  }
-  module.exports = require_common3()(exports);
-  var { formatters } = module.exports;
-  formatters.j = function(v) {
-    try {
-      return JSON.stringify(v);
-    } catch (error) {
-      return "[UnexpectedJSONParseError]: " + error.message;
-    }
-  };
-});
-
-// ../../node_modules/has-flag/index.js
-var require_has_flag2 = __commonJS(function(exports, module) {
-  module.exports = (flag, argv = process.argv) => {
-    const prefix = flag.startsWith("-") ? "" : flag.length === 1 ? "-" : "--";
-    const position = argv.indexOf(prefix + flag);
-    const terminatorPosition = argv.indexOf("--");
-    return position !== -1 && (terminatorPosition === -1 || position < terminatorPosition);
-  };
-});
-
-// ../../node_modules/supports-color/index.js
-var require_supports_color = __commonJS(function(exports, module) {
-  var os = __require("os");
-  var tty = __require("tty");
-  var hasFlag = require_has_flag2();
-  var { env } = process;
-  var flagForceColor;
-  if (hasFlag("no-color") || hasFlag("no-colors") || hasFlag("color=false") || hasFlag("color=never")) {
-    flagForceColor = 0;
-  } else if (hasFlag("color") || hasFlag("colors") || hasFlag("color=true") || hasFlag("color=always")) {
-    flagForceColor = 1;
-  }
-  function envForceColor() {
-    if ("FORCE_COLOR" in env) {
-      if (env.FORCE_COLOR === "true") {
-        return 1;
-      }
-      if (env.FORCE_COLOR === "false") {
-        return 0;
-      }
-      return env.FORCE_COLOR.length === 0 ? 1 : Math.min(Number.parseInt(env.FORCE_COLOR, 10), 3);
-    }
-  }
-  function translateLevel(level) {
-    if (level === 0) {
-      return false;
-    }
-    return {
-      level,
-      hasBasic: true,
-      has256: level >= 2,
-      has16m: level >= 3
-    };
-  }
-  function supportsColor(haveStream, { streamIsTTY, sniffFlags = true } = {}) {
-    const noFlagForceColor = envForceColor();
-    if (noFlagForceColor !== undefined) {
-      flagForceColor = noFlagForceColor;
-    }
-    const forceColor = sniffFlags ? flagForceColor : noFlagForceColor;
-    if (forceColor === 0) {
-      return 0;
-    }
-    if (sniffFlags) {
-      if (hasFlag("color=16m") || hasFlag("color=full") || hasFlag("color=truecolor")) {
-        return 3;
-      }
-      if (hasFlag("color=256")) {
-        return 2;
-      }
-    }
-    if (haveStream && !streamIsTTY && forceColor === undefined) {
-      return 0;
-    }
-    const min = forceColor || 0;
-    if (env.TERM === "dumb") {
-      return min;
-    }
-    if (process.platform === "win32") {
-      const osRelease = os.release().split(".");
-      if (Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) {
-        return Number(osRelease[2]) >= 14931 ? 3 : 2;
-      }
-      return 1;
-    }
-    if ("CI" in env) {
-      if (["TRAVIS", "CIRCLECI", "APPVEYOR", "GITLAB_CI", "GITHUB_ACTIONS", "BUILDKITE", "DRONE"].some((sign) => (sign in env)) || env.CI_NAME === "codeship") {
-        return 1;
-      }
-      return min;
-    }
-    if ("TEAMCITY_VERSION" in env) {
-      return /^(9\.(0*[1-9]\d*)\.|\d{2,}\.)/.test(env.TEAMCITY_VERSION) ? 1 : 0;
-    }
-    if (env.COLORTERM === "truecolor") {
-      return 3;
-    }
-    if ("TERM_PROGRAM" in env) {
-      const version = Number.parseInt((env.TERM_PROGRAM_VERSION || "").split(".")[0], 10);
-      switch (env.TERM_PROGRAM) {
-        case "iTerm.app":
-          return version >= 3 ? 3 : 2;
-        case "Apple_Terminal":
-          return 2;
-      }
-    }
-    if (/-256(color)?$/i.test(env.TERM)) {
-      return 2;
-    }
-    if (/^screen|^xterm|^vt100|^vt220|^rxvt|color|ansi|cygwin|linux/i.test(env.TERM)) {
-      return 1;
-    }
-    if ("COLORTERM" in env) {
-      return 1;
-    }
-    return min;
-  }
-  function getSupportLevel(stream, options = {}) {
-    const level = supportsColor(stream, {
-      streamIsTTY: stream && stream.isTTY,
-      ...options
-    });
-    return translateLevel(level);
-  }
-  module.exports = {
-    supportsColor: getSupportLevel,
-    stdout: getSupportLevel({ isTTY: tty.isatty(1) }),
-    stderr: getSupportLevel({ isTTY: tty.isatty(2) })
-  };
-});
-
-// ../../node_modules/debug/src/node.js
-var require_node4 = __commonJS(function(exports, module) {
-  var tty = __require("tty");
-  var util = __require("util");
-  exports.init = init;
-  exports.log = log;
-  exports.formatArgs = formatArgs;
-  exports.save = save;
-  exports.load = load;
-  exports.useColors = useColors;
-  exports.destroy = util.deprecate(() => {}, "Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.");
-  exports.colors = [6, 2, 3, 4, 5, 1];
-  try {
-    const supportsColor = require_supports_color();
-    if (supportsColor && (supportsColor.stderr || supportsColor).level >= 2) {
-      exports.colors = [
-        20,
-        21,
-        26,
-        27,
-        32,
-        33,
-        38,
-        39,
-        40,
-        41,
-        42,
-        43,
-        44,
-        45,
-        56,
-        57,
-        62,
-        63,
-        68,
-        69,
-        74,
-        75,
-        76,
-        77,
-        78,
-        79,
-        80,
-        81,
-        92,
-        93,
-        98,
-        99,
-        112,
-        113,
-        128,
-        129,
-        134,
-        135,
-        148,
-        149,
-        160,
-        161,
-        162,
-        163,
-        164,
-        165,
-        166,
-        167,
-        168,
-        169,
-        170,
-        171,
-        172,
-        173,
-        178,
-        179,
-        184,
-        185,
-        196,
-        197,
-        198,
-        199,
-        200,
-        201,
-        202,
-        203,
-        204,
-        205,
-        206,
-        207,
-        208,
-        209,
-        214,
-        215,
-        220,
-        221
-      ];
-    }
-  } catch (error) {}
-  exports.inspectOpts = Object.keys(process.env).filter((key) => {
-    return /^debug_/i.test(key);
-  }).reduce((obj, key) => {
-    const prop = key.substring(6).toLowerCase().replace(/_([a-z])/g, (_, k) => {
-      return k.toUpperCase();
-    });
-    let val = process.env[key];
-    if (/^(yes|on|true|enabled)$/i.test(val)) {
-      val = true;
-    } else if (/^(no|off|false|disabled)$/i.test(val)) {
-      val = false;
-    } else if (val === "null") {
-      val = null;
-    } else {
-      val = Number(val);
-    }
-    obj[prop] = val;
-    return obj;
-  }, {});
-  function useColors() {
-    return "colors" in exports.inspectOpts ? Boolean(exports.inspectOpts.colors) : tty.isatty(process.stderr.fd);
-  }
-  function formatArgs(args) {
-    const { namespace: name, useColors } = this;
-    if (useColors) {
-      const c = this.color;
-      const colorCode = "\x1B[3" + (c < 8 ? c : "8;5;" + c);
-      const prefix = `  ${colorCode};1m${name} \x1B[0m`;
-      args[0] = prefix + args[0].split(`
-`).join(`
-` + prefix);
-      args.push(colorCode + "m+" + module.exports.humanize(this.diff) + "\x1B[0m");
-    } else {
-      args[0] = getDate() + name + " " + args[0];
-    }
-  }
-  function getDate() {
-    if (exports.inspectOpts.hideDate) {
-      return "";
-    }
-    return new Date().toISOString() + " ";
-  }
-  function log(...args) {
-    return process.stderr.write(util.formatWithOptions(exports.inspectOpts, ...args) + `
-`);
-  }
-  function save(namespaces) {
-    if (namespaces) {
-      process.env.DEBUG = namespaces;
-    } else {
-      delete process.env.DEBUG;
-    }
-  }
-  function load() {
-    return process.env.DEBUG;
-  }
-  function init(debug) {
-    debug.inspectOpts = {};
-    const keys = Object.keys(exports.inspectOpts);
-    for (let i = 0;i < keys.length; i++) {
-      debug.inspectOpts[keys[i]] = exports.inspectOpts[keys[i]];
-    }
-  }
-  module.exports = require_common3()(exports);
-  var { formatters } = module.exports;
-  formatters.o = function(v) {
-    this.inspectOpts.colors = this.useColors;
-    return util.inspect(v, this.inspectOpts).split(`
-`).map((str) => str.trim()).join(" ");
-  };
-  formatters.O = function(v) {
-    this.inspectOpts.colors = this.useColors;
-    return util.inspect(v, this.inspectOpts);
-  };
-});
-
-// ../../node_modules/debug/src/index.js
-var require_src2 = __commonJS(function(exports, module) {
-  if (typeof process === "undefined" || process.type === "renderer" || false || process.__nwjs) {
-    module.exports = require_browser2();
-  } else {
-    module.exports = require_node4();
-  }
-});
-
 // ../../node_modules/ioredis/built/utils/debug.js
 var require_debug2 = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.genRedactedString = exports.getStringValue = exports.MAX_ARGUMENT_LENGTH = undefined;
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var MAX_ARGUMENT_LENGTH = 200;
   exports.MAX_ARGUMENT_LENGTH = MAX_ARGUMENT_LENGTH;
   var NAMESPACE_PREFIX = "ioredis";
@@ -51010,7 +51099,7 @@ var __create3, __getProtoOf3, __defProp3, __getOwnPropNames3, __hasOwnProp3, __t
   if (canCache)
     cache.set(mod, to);
   return to;
-}, __commonJS3 = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports), __require3, require_ms4, require_common4, require_browser3, require_node5, require_src3, require_commands3, require_built7, require_utils5, require_built22, require_old3, require_modern4, require_redis_errors3, require_lib4, require_defaults5, require_isArguments3, require_lodash4, require_debug3, require_TLSProfiles3, require_utils23, require_argumentParsers3, require_Command3, require_ClusterAllFailedError3, require_ScanStream3, require_autoPipelining3, require_Script3, require_Commander3, require_Pipeline3, require_tracing3, require_transaction3, require_applyMixin3, require_ClusterOptions3, require_util5, require_ClusterSubscriber3, require_ConnectionPool3, require_denque3, require_DelayQueue3, require_ShardedSubscriber3, require_ClusterSubscriberGroup3, require_cluster3, require_AbstractConnector3, require_StandaloneConnector3, require_SentinelIterator3, require_FailoverDetector3, require_SentinelConnector3, require_connectors3, require_MaxRetriesPerRequestError3, require_errors7, require_parser3, require_SubscriptionSet3, require_DataHandler3, require_event_handler3, require_RedisOptions3, require_Redis3, require_built32, import_debug2, import_ioredis2, ALGORITHM2 = "aes-256-gcm", IV_LENGTH2 = 16, AUTH_TAG_LENGTH = 16, log2, SecureStoreError, ConnectionError, EncryptionError, ValidationError;
+}, __commonJS3 = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports), __require3, require_ms4, require_common4, require_browser3, require_node5, require_src3, require_commands3, require_built7, require_utils5, require_built22, require_old3, require_modern4, require_redis_errors3, require_lib4, require_defaults5, require_isArguments3, require_lodash4, require_debug3, require_TLSProfiles3, require_utils23, require_argumentParsers3, require_Command3, require_ClusterAllFailedError3, require_ScanStream3, require_autoPipelining3, require_Script3, require_Commander3, require_Pipeline3, require_tracing3, require_transaction3, require_applyMixin3, require_ClusterOptions3, require_util5, require_ClusterSubscriber3, require_ConnectionPool3, require_denque3, require_DelayQueue3, require_ShardedSubscriber3, require_ClusterSubscriberGroup3, require_cluster3, require_AbstractConnector3, require_StandaloneConnector3, require_SentinelIterator3, require_FailoverDetector3, require_SentinelConnector3, require_connectors3, require_MaxRetriesPerRequestError3, require_errors7, require_parser3, require_SubscriptionSet3, require_DataHandler3, require_event_handler3, require_RedisOptions3, require_Redis3, require_built32, import_debug3, import_ioredis2, ALGORITHM2 = "aes-256-gcm", IV_LENGTH2 = 16, AUTH_TAG_LENGTH = 16, log2, SecureStoreError, ConnectionError, EncryptionError, ValidationError;
 var init_dist = __esm(() => {
   __create3 = Object.create;
   __getProtoOf3 = Object.getPrototypeOf;
@@ -61121,9 +61210,9 @@ $` + Buffer.byteLength(this.name) + `\r
     }
     exports.print = print;
   });
-  import_debug2 = __toESM3(require_src3(), 1);
+  import_debug3 = __toESM3(require_src3(), 1);
   import_ioredis2 = __toESM3(require_built32(), 1);
-  log2 = import_debug2.default("secure-store-redis");
+  log2 = import_debug3.default("secure-store-redis");
   SecureStoreError = class SecureStoreError extends Error {
     code;
     constructor(message, code) {
@@ -65769,7 +65858,7 @@ var require_lodash7 = __commonJS(function(exports) {
 var require_debug4 = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.genRedactedString = exports.getStringValue = exports.MAX_ARGUMENT_LENGTH = undefined;
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var MAX_ARGUMENT_LENGTH = 200;
   exports.MAX_ARGUMENT_LENGTH = MAX_ARGUMENT_LENGTH;
   var NAMESPACE_PREFIX = "ioredis";
@@ -98626,6 +98715,10 @@ function createCorsMiddleware(getConfig) {
   const allowedOrigins = parseCorsOrigins(getConfig("sockethub:cors:origin"));
   return (req, res, next) => {
     const allowOrigin = resolveAllowedOrigin(allowedOrigins, req.headers.origin);
+    if (req.headers.origin !== undefined && allowOrigin === undefined) {
+      res.status(403).json({ error: "origin not allowed" });
+      return;
+    }
     if (allowOrigin) {
       res.setHeader("Access-Control-Allow-Origin", allowOrigin);
       if (allowOrigin !== "*") {
@@ -98975,7 +99068,7 @@ var require_package2 = __commonJS(function(exports, module) {
   module.exports = {
     name: "@sockethub/server",
     description: "A polyglot messaging service, server libraries",
-    version: "5.0.0-beta.0",
+    version: "5.0.0-beta.1",
     type: "module",
     private: false,
     author: "Nick Jennings <nick@silverbucket.net>",
@@ -99027,17 +99120,19 @@ var require_package2 = __commonJS(function(exports, module) {
     dependencies: {
       "@sentry/node": "^10.36.0",
       "@sentry/profiling-node": "10.36.0",
-      "@sockethub/client": "^5.0.0-beta.0",
-      "@sockethub/data-layer": "^1.0.0-beta.0",
-      "@sockethub/logger": "^1.0.0-beta.0",
-      "@sockethub/schemas": "^3.0.0-beta.0",
-      "@sockethub/util": "^1.0.0-beta.0",
+      "@sockethub/client": "^5.0.0-beta.1",
+      "@sockethub/data-layer": "^1.0.0-beta.1",
+      "@sockethub/logger": "^1.0.0-beta.1",
+      "@sockethub/schemas": "^3.0.0-beta.1",
+      "@sockethub/util": "^1.0.0-beta.1",
       chalk: "^5.6.2",
       convict: "^6.2.5",
+      debug: "^4.4.3",
       ejs: "^3.1.10",
       express: "^5.1.0",
       "express-rate-limit": "^8.2.1",
       jquery: "^3.7.1",
+      "proxy-addr": "^2.0.7",
       "rate-limit-redis": "^4.2.0",
       "socket.io": "^4.8.3"
     },
@@ -99056,22 +99151,23 @@ var require_package2 = __commonJS(function(exports, module) {
       "@types/debug": "^4.1.12",
       "@types/express": "^5.0.0",
       "@types/jquery": "^3.5.33",
+      "@types/proxy-addr": "^2.0.3",
       "@types/sinon": "^17.0.4",
       jaribu: "^2.2.3",
       sinon: "^17.0.2",
       "web-streams-polyfill": "^3.3.3"
     },
     optionalDependencies: {
-      "@sockethub/examples": "^1.0.0-beta.0",
-      "@sockethub/platform-caldav": "^1.0.0-beta.0",
-      "@sockethub/platform-carddav": "^1.0.0-beta.0",
-      "@sockethub/platform-dummy": "^3.0.0-beta.0",
-      "@sockethub/platform-feeds": "^4.0.0-beta.0",
-      "@sockethub/platform-irc": "^4.0.0-beta.0",
-      "@sockethub/platform-metadata": "^1.0.1-beta.0",
-      "@sockethub/platform-xmpp": "^5.0.0-beta.0"
-    },
-    gitHead: "75002ae8f15d7679bd58a9327f5a1d7eeaffa237",
+      "@sockethub/examples": "^1.0.0-beta.1",
+      "@sockethub/platform-caldav": "^1.0.0-beta.1",
+      "@sockethub/platform-carddav": "^1.0.0-beta.1",
+      "@sockethub/platform-dummy": "^3.0.0-beta.1",
+      "@sockethub/platform-feeds": "^4.0.0-beta.1",
+      "@sockethub/platform-irc": "^4.0.0-beta.1",
+      "@sockethub/platform-metadata": "^1.0.1-beta.1",
+      "@sockethub/platform-xmpp": "^5.0.0-beta.1"
+    },
+    gitHead: "06c9062f1cb5f0c0599fd979e6e91da79f08eda0",
     types: "./dist/index.d.ts"
   };
 });
@@ -114153,7 +114249,7 @@ var require_json2 = __commonJS(function(exports, module) {
    * Copyright(c) 2014-2015 Douglas Christopher Wilson
    * MIT Licensed
    */
-  var debug = require_src2()("body-parser:json");
+  var debug = require_src()("body-parser:json");
   var read = require_read();
   var { normalizeOptions } = require_utils8();
   module.exports = json;
@@ -114253,7 +114349,7 @@ var require_raw = __commonJS(function(exports, module) {
    * Copyright(c) 2014-2015 Douglas Christopher Wilson
    * MIT Licensed
    */
-  var debug = require_src2()("body-parser:raw");
+  var debug = require_src()("body-parser:raw");
   var read = require_read();
   var { normalizeOptions, passthrough } = require_utils8();
   module.exports = raw;
@@ -114276,7 +114372,7 @@ var require_text = __commonJS(function(exports, module) {
    * Copyright(c) 2014-2015 Douglas Christopher Wilson
    * MIT Licensed
    */
-  var debug = require_src2()("body-parser:text");
+  var debug = require_src()("body-parser:text");
   var read = require_read();
   var { normalizeOptions, passthrough } = require_utils8();
   module.exports = text;
@@ -116642,7 +116738,7 @@ var require_urlencoded = __commonJS(function(exports, module) {
    * MIT Licensed
    */
   var createError = require_http_errors();
-  var debug = require_src2()("body-parser:urlencoded");
+  var debug = require_src()("body-parser:urlencoded");
   var read = require_read();
   var qs = require_lib7();
   var { normalizeOptions } = require_utils8();
@@ -116916,7 +117012,7 @@ var require_finalhandler = __commonJS(function(exports, module) {
    * Copyright(c) 2014-2022 Douglas Christopher Wilson
    * MIT Licensed
    */
-  var debug = require_src2()("finalhandler");
+  var debug = require_src()("finalhandler");
   var encodeUrl = require_encodeurl();
   var escapeHtml = require_escape_html();
   var onFinished = require_on_finished();
@@ -117058,7 +117154,7 @@ var require_view = __commonJS(function(exports, module) {
    * Copyright(c) 2014-2015 Douglas Christopher Wilson
    * MIT Licensed
    */
-  var debug = require_src2()("express:view");
+  var debug = require_src()("express:view");
   var path = __require("node:path");
   var fs = __require("node:fs");
   var dirname = path.dirname;
@@ -119618,7 +119714,7 @@ var require_layer = __commonJS(function(exports, module) {
    */
   var isPromise = require_is_promise();
   var pathRegexp = require_dist4();
-  var debug = require_src2()("router:layer");
+  var debug = require_src()("router:layer");
   var deprecate = require_depd()("router");
   var TRAILING_SLASH_REGEXP = /\/+$/;
   var MATCHING_GROUP_REGEXP = /\((?:\?<(.*?)>)?(?!\?)/g;
@@ -119769,7 +119865,7 @@ var require_route = __commonJS(function(exports, module) {
    * Copyright(c) 2014-2022 Douglas Christopher Wilson
    * MIT Licensed
    */
-  var debug = require_src2()("router:route");
+  var debug = require_src()("router:route");
   var Layer = require_layer();
   var { METHODS } = __require("node:http");
   var slice = Array.prototype.slice;
@@ -119897,7 +119993,7 @@ var require_router = __commonJS(function(exports, module) {
   var { METHODS } = __require("node:http");
   var parseUrl = require_parseurl();
   var Route = require_route();
-  var debug = require_src2()("router");
+  var debug = require_src()("router");
   var deprecate = require_depd()("router");
   var slice = Array.prototype.slice;
   var flatten = Array.prototype.flat;
@@ -120295,7 +120391,7 @@ var require_application = __commonJS(function(exports, module) {
    * MIT Licensed
    */
   var finalhandler = require_finalhandler();
-  var debug = require_src2()("express:application");
+  var debug = require_src()("express:application");
   var View = require_view();
   var http = __require("node:http");
   var methods = require_utils11().methods;
@@ -121875,7 +121971,7 @@ var require_send = __commonJS(function(exports, module) {
    * MIT Licensed
    */
   var createError = require_http_errors();
-  var debug = require_src2()("send");
+  var debug = require_src()("send");
   var encodeUrl = require_encodeurl();
   var escapeHtml = require_escape_html();
   var etag = require_etag();
@@ -133084,7 +133180,7 @@ var require_transport = __commonJS(function(exports) {
   var events_1 = __require("events");
   var parser_v4 = require_cjs3();
   var parser_v3 = require_parser_v3();
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var debug = (0, debug_1.default)("engine:transport");
   function noop() {}
 
@@ -142344,7 +142440,7 @@ var require_polling = __commonJS(function(exports) {
   var transport_1 = require_transport();
   var zlib_1 = __require("zlib");
   var accepts = require_accepts3();
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var debug = (0, debug_1.default)("engine:polling");
   var compressionMethods = {
     gzip: zlib_1.createGzip,
@@ -142627,7 +142723,7 @@ var require_websocket = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebSocket = undefined;
   var transport_1 = require_transport();
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var debug = (0, debug_1.default)("engine:ws");
 
   class WebSocket extends transport_1.Transport {
@@ -142700,7 +142796,7 @@ var require_webtransport = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebTransport = undefined;
   var transport_1 = require_transport();
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var engine_io_parser_1 = require_cjs3();
   var debug = (0, debug_1.default)("engine:webtransport");
 
@@ -142784,7 +142880,7 @@ var require_socket = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.Socket = undefined;
   var events_1 = __require("events");
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var timers_1 = __require("timers");
   var debug = (0, debug_1.default)("engine:socket");
 
@@ -146709,7 +146805,7 @@ var require_server = __commonJS(function(exports) {
   var transports_1 = require_transports2();
   var events_1 = __require("events");
   var socket_1 = require_socket();
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var cookie_1 = require_cookie2();
   var ws_1 = require_ws();
   var webtransport_1 = require_webtransport();
@@ -147572,7 +147668,7 @@ var require_polling2 = __commonJS(function(exports) {
   var transport_1 = require_transport();
   var zlib_1 = __require("zlib");
   var accepts = require_accepts3();
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var debug = (0, debug_1.default)("engine:polling");
   var compressionMethods = {
     gzip: zlib_1.createGzip,
@@ -147843,7 +147939,7 @@ var require_websocket3 = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebSocket = undefined;
   var transport_1 = require_transport();
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var debug = (0, debug_1.default)("engine:ws");
 
   class WebSocket extends transport_1.Transport {
@@ -147905,7 +148001,7 @@ var require_transports_uws = __commonJS(function(exports) {
 var require_userver = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.uServer = undefined;
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var server_1 = require_server();
   var transports_uws_1 = require_transports_uws();
   var debug = (0, debug_1.default)("engine:uws");
@@ -149230,7 +149326,7 @@ var require_client = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.Client = undefined;
   var socket_io_parser_1 = require_cjs5();
-  var debug_1 = __importDefault(require_src2());
+  var debug_1 = __importDefault(require_src());
   var debug = (0, debug_1.default)("socket.io:client");
 
   class Client {
@@ -149649,7 +149745,7 @@ var require_socket2 = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.Socket = undefined;
   var socket_io_parser_1 = require_cjs5();
-  var debug_1 = __importDefault(require_src2());
+  var debug_1 = __importDefault(require_src());
   var typed_events_1 = require_typed_events();
   var base64id_1 = __importDefault(require_base64id());
   var broadcast_operator_1 = require_broadcast_operator();
@@ -150078,7 +150174,7 @@ var require_namespace = __commonJS(function(exports) {
   exports.Namespace = exports.RESERVED_EVENTS = undefined;
   var socket_1 = require_socket2();
   var typed_events_1 = require_typed_events();
-  var debug_1 = __importDefault(require_src2());
+  var debug_1 = __importDefault(require_src());
   var broadcast_operator_1 = require_broadcast_operator();
   var debug = (0, debug_1.default)("socket.io:namespace");
   exports.RESERVED_EVENTS = new Set(["connect", "connection", "new_namespace"]);
@@ -154595,7 +154691,7 @@ var require_parent_namespace = __commonJS(function(exports) {
   exports.ParentNamespace = undefined;
   var namespace_1 = require_namespace();
   var socket_io_adapter_1 = require_dist5();
-  var debug_1 = __importDefault(require_src2());
+  var debug_1 = __importDefault(require_src());
   var debug = (0, debug_1.default)("socket.io:parent-namespace");
 
   class ParentNamespace extends namespace_1.Namespace {
@@ -154662,7 +154758,7 @@ var require_uws = __commonJS(function(exports) {
   exports.serveFile = serveFile;
   var socket_io_adapter_1 = require_dist5();
   var fs_1 = __require("fs");
-  var debug_1 = __importDefault(require_src2());
+  var debug_1 = __importDefault(require_src());
   var debug = (0, debug_1.default)("socket.io:adapter-uws");
   var SEPARATOR = "\x1F";
   var { addAll, del, broadcast } = socket_io_adapter_1.Adapter.prototype;
@@ -154925,7 +155021,7 @@ var require_dist6 = __commonJS(function(exports, module) {
   var parent_namespace_1 = require_parent_namespace();
   var socket_io_adapter_1 = require_dist5();
   var parser = __importStar(require_cjs5());
-  var debug_1 = __importDefault(require_src2());
+  var debug_1 = __importDefault(require_src());
   var socket_1 = require_socket2();
   Object.defineProperty(exports, "Socket", { enumerable: true, get: function() {
     return socket_1.Socket;
@@ -155368,6 +155464,30 @@ var init_routes = __esm(() => {
 });
 
 // src/trust-proxy.ts
+function configuredProxyHeader(proxyHeader) {
+  return typeof proxyHeader === "string" && proxyHeader.trim() !== "" ? proxyHeader.trim().toLowerCase() : EXPRESS_FORWARDED_HEADER;
+}
+function getRequestClientIp(request, app) {
+  return normalizeIp(import_proxy_addr.default(request, app.get("trust proxy fn")));
+}
+function resolveSocketClientIp(request, app, reconnectIpSource, proxyHeader, fallbackAddress) {
+  const header = configuredProxyHeader(proxyHeader);
+  if (reconnectIpSource === "proxy" && header !== EXPRESS_FORWARDED_HEADER) {
+    const value = request.headers[header];
+    const raw = Array.isArray(value) ? value[0] : value;
+    if (typeof raw === "string") {
+      const normalized = normalizeIp(raw);
+      if (normalized) {
+        return normalized;
+      }
+    }
+    return normalizeIp(fallbackAddress);
+  }
+  if (app) {
+    return getRequestClientIp(request, app);
+  }
+  return normalizeIp(fallbackAddress);
+}
 function normalize(value) {
   if (typeof value === "boolean" || typeof value === "number") {
     return value;
@@ -155392,10 +155512,14 @@ function resolveTrustProxy(configured, reconnectIpSource, proxyHeader) {
   if (normalized !== false || reconnectIpSource !== "proxy") {
     return normalized;
   }
-  const header = typeof proxyHeader === "string" && proxyHeader.trim() !== "" ? proxyHeader.trim().toLowerCase() : EXPRESS_FORWARDED_HEADER;
+  const header = configuredProxyHeader(proxyHeader);
   return header === EXPRESS_FORWARDED_HEADER ? 1 : false;
 }
-var EXPRESS_FORWARDED_HEADER = "x-forwarded-for";
+var import_proxy_addr, EXPRESS_FORWARDED_HEADER = "x-forwarded-for";
+var init_trust_proxy = __esm(() => {
+  init_connection_scope();
+  import_proxy_addr = __toESM(require_proxy_addr(), 1);
+});
 
 // src/listener.ts
 import { existsSync as existsSync2 } from "node:fs";
@@ -155408,17 +155532,27 @@ class Listener {
   io;
   http;
   start() {
+    disablePayloadDebug();
     const app = Listener.initExpress();
     this.app = app;
     this.http = new HTTP.Server(app);
+    const allowedOrigins = Listener.corsOrigin();
     this.io = new Server(this.http, {
       path: config_default.get("sockethub:path"),
       maxHttpBufferSize: config_default.get("sockethub:maxPayloadBytes"),
       cors: {
-        origin: Listener.corsOrigin(),
+        origin: allowedOrigins,
         methods: ["GET", "POST"]
       }
     });
+    this.io.engine.use((req, _res, next) => {
+      const origin = req.headers.origin;
+      if (origin !== undefined && resolveAllowedOrigin(allowedOrigins, origin) === undefined) {
+        next(new Error("origin not allowed"));
+        return;
+      }
+      next();
+    });
     routes_default.setup(app);
     if (config_default.get("examples")) {
       this.addExamplesRoutes(app);
@@ -155499,7 +155633,6 @@ class Listener {
       log6.info(`trusting proxy headers (trust proxy: ${trustProxy})`);
     }
     app.set("view engine", "ejs");
-    app.use(import_express.default.urlencoded({ extended: true }));
     return app;
   }
   getApp() {
@@ -155519,8 +155652,10 @@ var init_listener = __esm(() => {
   init_wrapper();
   init_config();
   init_cors();
+  init_payload_debug();
   init_routes();
   init_server_info();
+  init_trust_proxy();
   init_version();
   import_express = __toESM(require_express(), 1);
   require3 = createRequire5(import.meta.url);
@@ -155874,9 +156009,27 @@ var init_dist3 = __esm(() => {
 function ensureObject(msg) {
   return typeof msg === "object" && msg !== null && !Array.isArray(msg);
 }
+function exceedsDepth(root, max = MAX_MESSAGE_DEPTH) {
+  const stack = [[root, 0]];
+  while (stack.length > 0) {
+    const [value, depth] = stack.pop();
+    if (value === null || typeof value !== "object") {
+      continue;
+    }
+    if (depth > max) {
+      return true;
+    }
+    for (const child of Object.values(value)) {
+      stack.push([child, depth + 1]);
+    }
+  }
+  return false;
+}
 function normalizeActivityStreamMiddleware(msg, done) {
   if (!ensureObject(msg)) {
     done(new Error("message received is not an object."));
+  } else if (exceedsDepth(msg)) {
+    done(new Error("activity stream nesting too deep."));
   } else if (!Array.isArray(msg["@context"]) || !msg["@context"].every((entry) => typeof entry === "string")) {
     done(new Error("activity stream must contain an @context array."));
   } else if (typeof msg.type !== "string") {
@@ -155890,6 +156043,7 @@ function normalizeActivityStreamMiddleware(msg, done) {
     }
   }
 }
+var MAX_MESSAGE_DEPTH = 64;
 var init_normalize_activity_stream = __esm(() => {
   init_src2();
 });
@@ -156046,15 +156200,16 @@ var init_middleware = __esm(() => {
 
 // src/message-handlers.ts
 function attachError(err, msg) {
-  const message = errorMessage(err);
+  const message = errorMessage(err).slice(0, 256);
   if (!msg) {
     return new Error(message);
   }
-  const cleaned = { ...msg, error: message };
-  if ("sessionSecret" in cleaned) {
-    delete cleaned.sessionSecret;
-  }
-  return cleaned;
+  const context = msg["@context"];
+  return {
+    ...Array.isArray(context) && context.length <= 8 && context.every((entry) => typeof entry === "string" && entry.length <= 256) ? { "@context": context } : {},
+    ...typeof msg.type === "string" && msg.type.length <= 64 ? { type: msg.type } : {},
+    error: message
+  };
 }
 function createMessageHandlers(options) {
   const {
@@ -156171,6 +156326,9 @@ function classifyPayload(payload) {
   if (!isObject(payload)) {
     return "unknown";
   }
+  if (exceedsDepth(payload)) {
+    return "message";
+  }
   if ("type" in payload && "actor" in payload) {
     const typeValue = String(payload.type);
     if (typeValue === "credentials") {
@@ -156201,9 +156359,9 @@ function buildCredentialsAck(payload, result) {
   }
   const actor = isObject(payload) ? payload.actor : undefined;
   const actorId = isObject(actor) && typeof actor.id === "string" ? actor.id : undefined;
-  if (!actorId) {
-    const message = isObject(result) && typeof result.error === "string" ? result.error : "invalid credentials payload";
-    return new Error(message);
+  const error = isObject(result) && typeof result.error === "string" ? result.error : undefined;
+  if (!actorId || error !== undefined && actorId.length > MAX_ERROR_ACTOR_ID_LENGTH) {
+    return new Error(error ?? "invalid credentials payload");
   }
   const ack = {
     "@context": buildCanonicalContext(INTERNAL_PLATFORM_CONTEXT_URL),
@@ -156213,8 +156371,8 @@ function buildCredentialsAck(payload, result) {
       type: "person"
     }
   };
-  if (isObject(result) && typeof result.error === "string") {
-    ack.error = result.error;
+  if (error !== undefined) {
+    ack.error = error;
   }
   return ack;
 }
@@ -156450,7 +156608,15 @@ function registerHttpActionsRoutes(app, options, deps = {}) {
   app.options(`${routePath}/:requestId`, cors);
   app.get(routePath, cors, rateLimiter, handleGet);
   app.get(`${routePath}/:requestId`, cors, rateLimiter, handleGet);
-  app.post(routePath, cors, rateLimiter, parseJson, async (req, res) => {
+  app.post(routePath, cors, rateLimiter, (req, res, next) => {
+    if (!req.is("application/json")) {
+      res.status(415).json({
+        error: "content-type must be application/json"
+      });
+      return;
+    }
+    next();
+  }, parseJson, async (req, res) => {
     const payloads = normalizePayloads(req.body);
     if (payloads.length === 0) {
       res.status(400).json({
@@ -156522,6 +156688,7 @@ function registerHttpActionsRoutes(app, options, deps = {}) {
       sessionSecret,
       credentialsStore,
       transport: "http",
+      clientIp: normalizeIp(req.ip ?? req.socket.remoteAddress),
       onPlatformInstance: (platformInstance) => {
         if (!platformInstance.config.persist) {
           return;
@@ -156708,7 +156875,7 @@ function registerHttpActionsRoutes(app, options, deps = {}) {
   });
   log7.info(`http actions enabled at ${routePath}`);
 }
-var import_express2, log7, REQUEST_ID_HEADER = "x-request-id", SOCKETHUB_REQUEST_ID_HEADER = "x-sockethub-request-id", DEFAULT_HTTP_ACTIONS_PATH = "/sockethub-http", IDEMPOTENCY_PREFIX = "sockethub:http-actions", IDEMPOTENCY_BATCH_SIZE = 100, MAX_REQUEST_ID_LENGTH = 128, REQUEST_ID_PATTERN;
+var import_express2, log7, REQUEST_ID_HEADER = "x-request-id", SOCKETHUB_REQUEST_ID_HEADER = "x-sockethub-request-id", DEFAULT_HTTP_ACTIONS_PATH = "/sockethub-http", IDEMPOTENCY_PREFIX = "sockethub:http-actions", IDEMPOTENCY_BATCH_SIZE = 100, MAX_REQUEST_ID_LENGTH = 128, MAX_ERROR_ACTOR_ID_LENGTH = 256, REQUEST_ID_PATTERN;
 var init_actions = __esm(() => {
   init_src3();
   init_src();
@@ -156721,6 +156888,7 @@ var init_actions = __esm(() => {
   init_connection_scope();
   init_cors();
   init_message_handlers();
+  init_normalize_activity_stream();
   init_session_registry();
   import_express2 = __toESM(require_express(), 1);
   log7 = createLogger("server:http:actions");
@@ -156839,6 +157007,7 @@ class PlatformInstance {
   parentId;
   parentSecret1;
   sessions = new Set;
+  ownerIps = new Set;
   sessionIps = new Map;
   sessionSecrets = new Map;
   processMessageListener;
@@ -156871,6 +157040,9 @@ class PlatformInstance {
     if (process.env.LOG_LEVEL) {
       env.LOG_LEVEL = process.env.LOG_LEVEL;
     }
+    if (process.env.NODE_EXTRA_CA_CERTS) {
+      env.NODE_EXTRA_CA_CERTS = process.env.NODE_EXTRA_CA_CERTS;
+    }
     const credentialsTtl = config_default.get("credentials:ttlMs");
     if (typeof credentialsTtl !== "undefined") {
       env.SOCKETHUB_CREDENTIALS_TTL_MS = String(credentialsTtl);
@@ -157451,16 +157623,18 @@ class ProcessManager {
   async ensureProcessNow(identifier, platform, sessionId, actor, sessionIp, connectionScope) {
     const existing = platformInstances.get(identifier);
     const reusable = existing && this.isProcessAlive(existing);
-    if (!reusable) {
-      this.assertInstanceCapacity(platform, identifier);
-    }
+    this.assertInstanceCapacity(platform, identifier, actor === undefined, sessionId, sessionIp, !!reusable);
     let inheritedQueueId;
     if (existing && !reusable) {
       inheritedQueueId = existing.queueId;
       existing.markReplaced();
       await existing.shutdown();
+      this.assertInstanceCapacity(platform, identifier, actor === undefined, sessionId, sessionIp, !!reusable);
     }
     const platformInstance = reusable ? existing : this.createPlatformInstance(identifier, platform, actor, connectionScope?.scope, inheritedQueueId);
+    if (sessionIp && !platformInstance.global) {
+      platformInstance.ownerIps.add(sessionIp);
+    }
     if (sessionId) {
       platformInstance.registerSession(sessionId, sessionIp);
     }
@@ -157470,15 +157644,22 @@ class ProcessManager {
     }
     return platformInstance;
   }
-  assertInstanceCapacity(platform, identifier) {
-    const max = Number(config_default.get("limits:maxPlatformInstances") ?? 0);
-    if (!Number.isFinite(max) || max <= 0) {
+  assertInstanceCapacity(platform, identifier, global2, sessionId, sessionIp, reusable = false) {
+    if (global2)
       return;
-    }
-    const occupied = platformInstances.has(identifier) ? platformInstances.size - 1 : platformInstances.size;
-    if (occupied >= max) {
+    const others = [...platformInstances.values()].filter((pi) => pi.id !== identifier && !pi.global);
+    const max = Number(config_default.get("limits:maxPlatformInstances") ?? 0);
+    if (!reusable && max > 0 && others.length >= max) {
       throw new Error(`platform instance limit reached (${max}); cannot start new ${platform} instance`);
     }
+    const perSession = Number(config_default.get("limits:maxInstancesPerSession") ?? 0);
+    if (perSession > 0 && sessionId && others.filter((pi) => pi.sessions.has(sessionId)).length >= perSession) {
+      throw new Error(`per-session platform instance limit reached (${perSession})`);
+    }
+    const perIp = Number(config_default.get("limits:maxInstancesPerIp") ?? 0);
+    if (perIp > 0 && sessionIp && others.filter((pi) => pi.ownerIps.has(sessionIp)).length >= perIp) {
+      throw new Error(`per-address platform instance limit reached (${perIp})`);
+    }
   }
   isProcessAlive(platformInstance) {
     const pid = platformInstance.process?.pid;
@@ -157608,23 +157789,7 @@ function getProxyHeaderName() {
   return config_default.get("credentialCheck:proxyHeader")?.toLowerCase() || "x-forwarded-for";
 }
 function getClientIp(socket) {
-  const ipSource = config_default.get("credentialCheck:reconnectIpSource") === "proxy" ? "proxy" : "socket";
-  if (ipSource === "proxy") {
-    const proxyHeader = getProxyHeaderName();
-    const headerValue = socket.handshake.headers[proxyHeader];
-    if (typeof headerValue === "string") {
-      const normalized = normalizeIp(headerValue);
-      if (normalized) {
-        return normalized;
-      }
-    } else if (Array.isArray(headerValue) && headerValue.length > 0) {
-      const normalized = normalizeIp(headerValue[0]);
-      if (normalized) {
-        return normalized;
-      }
-    }
-  }
-  return normalizeIp(socket.handshake.address);
+  return resolveSocketClientIp(socket.request, listener_default.app, config_default.get("credentialCheck:reconnectIpSource"), config_default.get("credentialCheck:proxyHeader"), socket.handshake.address);
 }
 
 class Sockethub {
@@ -157675,7 +157840,7 @@ class Sockethub {
     this.rateLimiter = createRateLimiter(config_default.get("rateLimiter"));
     if (config_default.get("credentialCheck:reconnectIpSource") === "proxy") {
       const proxyHeader = getProxyHeaderName();
-      log9.warn(`credentialCheck.reconnectIpSource=proxy enabled; only use this behind a trusted reverse proxy that overwrites '${proxyHeader}'`);
+      log9.warn(`credentialCheck.reconnectIpSource=proxy enabled; only use this behind a trusted reverse proxy that sets '${proxyHeader}' to the connecting client`);
     }
     log9.debug("active platforms: ", [...init.platforms.keys()]);
     listener_default.start();
@@ -157811,11 +157976,13 @@ var init_sockethub = __esm(() => {
   init_process_manager();
   init_rate_limiter();
   init_server_info();
+  init_trust_proxy();
   log9 = createLogger("server:core");
   sockethub_default = Sockethub;
 });
 
 // src/index.ts
+init_payload_debug();
 init_src();
 init_error();
 import path5 from "node:path";
@@ -157959,6 +158126,12 @@ async function server() {
     }
     return;
   }
+  await Promise.resolve().then(() => init_src2());
+  if (!isCodegenAvailable()) {
+    console.error("Sockethub requires schema validation, but this environment forbids code generation (new Function).");
+    process.exitCode = 1;
+    return;
+  }
   await Promise.resolve().then(() => init_config());
   const loggingConfig = config_default.get("logging");
   const logFile = loggingConfig.file ? path5.resolve(loggingConfig.file) : "";