@sockethub/server 5.0.0-beta.0 → 5.0.0-beta.2

package/dist/index.js

@@ -58,6 +58,762 @@ var __esm = (fn, res, err) => () => {
 };
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
+// ../../node_modules/ms/index.js
+var require_ms = __commonJS(function(exports, module) {
+  var s = 1000;
+  var m = s * 60;
+  var h = m * 60;
+  var d = h * 24;
+  var w = d * 7;
+  var y = d * 365.25;
+  module.exports = function(val, options) {
+    options = options || {};
+    var type = typeof val;
+    if (type === "string" && val.length > 0) {
+      return parse(val);
+    } else if (type === "number" && isFinite(val)) {
+      return options.long ? fmtLong(val) : fmtShort(val);
+    }
+    throw new Error("val is not a non-empty string or a valid number. val=" + JSON.stringify(val));
+  };
+  function parse(str) {
+    str = String(str);
+    if (str.length > 100) {
+      return;
+    }
+    var match = /^(-?(?:\d+)?\.?\d+) *(milliseconds?|msecs?|ms|seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)?$/i.exec(str);
+    if (!match) {
+      return;
+    }
+    var n = parseFloat(match[1]);
+    var type = (match[2] || "ms").toLowerCase();
+    switch (type) {
+      case "years":
+      case "year":
+      case "yrs":
+      case "yr":
+      case "y":
+        return n * y;
+      case "weeks":
+      case "week":
+      case "w":
+        return n * w;
+      case "days":
+      case "day":
+      case "d":
+        return n * d;
+      case "hours":
+      case "hour":
+      case "hrs":
+      case "hr":
+      case "h":
+        return n * h;
+      case "minutes":
+      case "minute":
+      case "mins":
+      case "min":
+      case "m":
+        return n * m;
+      case "seconds":
+      case "second":
+      case "secs":
+      case "sec":
+      case "s":
+        return n * s;
+      case "milliseconds":
+      case "millisecond":
+      case "msecs":
+      case "msec":
+      case "ms":
+        return n;
+      default:
+        return;
+    }
+  }
+  function fmtShort(ms) {
+    var msAbs = Math.abs(ms);
+    if (msAbs >= d) {
+      return Math.round(ms / d) + "d";
+    }
+    if (msAbs >= h) {
+      return Math.round(ms / h) + "h";
+    }
+    if (msAbs >= m) {
+      return Math.round(ms / m) + "m";
+    }
+    if (msAbs >= s) {
+      return Math.round(ms / s) + "s";
+    }
+    return ms + "ms";
+  }
+  function fmtLong(ms) {
+    var msAbs = Math.abs(ms);
+    if (msAbs >= d) {
+      return plural(ms, msAbs, d, "day");
+    }
+    if (msAbs >= h) {
+      return plural(ms, msAbs, h, "hour");
+    }
+    if (msAbs >= m) {
+      return plural(ms, msAbs, m, "minute");
+    }
+    if (msAbs >= s) {
+      return plural(ms, msAbs, s, "second");
+    }
+    return ms + " ms";
+  }
+  function plural(ms, msAbs, n, name) {
+    var isPlural = msAbs >= n * 1.5;
+    return Math.round(ms / n) + " " + name + (isPlural ? "s" : "");
+  }
+});
+
+// ../../node_modules/debug/src/common.js
+var require_common = __commonJS(function(exports, module) {
+  function setup(env) {
+    createDebug.debug = createDebug;
+    createDebug.default = createDebug;
+    createDebug.coerce = coerce;
+    createDebug.disable = disable;
+    createDebug.enable = enable;
+    createDebug.enabled = enabled;
+    createDebug.humanize = require_ms();
+    createDebug.destroy = destroy;
+    Object.keys(env).forEach((key) => {
+      createDebug[key] = env[key];
+    });
+    createDebug.names = [];
+    createDebug.skips = [];
+    createDebug.formatters = {};
+    function selectColor(namespace) {
+      let hash = 0;
+      for (let i = 0;i < namespace.length; i++) {
+        hash = (hash << 5) - hash + namespace.charCodeAt(i);
+        hash |= 0;
+      }
+      return createDebug.colors[Math.abs(hash) % createDebug.colors.length];
+    }
+    createDebug.selectColor = selectColor;
+    function createDebug(namespace) {
+      let prevTime;
+      let enableOverride = null;
+      let namespacesCache;
+      let enabledCache;
+      function debug(...args) {
+        if (!debug.enabled) {
+          return;
+        }
+        const self2 = debug;
+        const curr = Number(new Date);
+        const ms = curr - (prevTime || curr);
+        self2.diff = ms;
+        self2.prev = prevTime;
+        self2.curr = curr;
+        prevTime = curr;
+        args[0] = createDebug.coerce(args[0]);
+        if (typeof args[0] !== "string") {
+          args.unshift("%O");
+        }
+        let index = 0;
+        args[0] = args[0].replace(/%([a-zA-Z%])/g, (match, format) => {
+          if (match === "%%") {
+            return "%";
+          }
+          index++;
+          const formatter = createDebug.formatters[format];
+          if (typeof formatter === "function") {
+            const val = args[index];
+            match = formatter.call(self2, val);
+            args.splice(index, 1);
+            index--;
+          }
+          return match;
+        });
+        createDebug.formatArgs.call(self2, args);
+        const logFn = self2.log || createDebug.log;
+        logFn.apply(self2, args);
+      }
+      debug.namespace = namespace;
+      debug.useColors = createDebug.useColors();
+      debug.color = createDebug.selectColor(namespace);
+      debug.extend = extend;
+      debug.destroy = createDebug.destroy;
+      Object.defineProperty(debug, "enabled", {
+        enumerable: true,
+        configurable: false,
+        get: () => {
+          if (enableOverride !== null) {
+            return enableOverride;
+          }
+          if (namespacesCache !== createDebug.namespaces) {
+            namespacesCache = createDebug.namespaces;
+            enabledCache = createDebug.enabled(namespace);
+          }
+          return enabledCache;
+        },
+        set: (v) => {
+          enableOverride = v;
+        }
+      });
+      if (typeof createDebug.init === "function") {
+        createDebug.init(debug);
+      }
+      return debug;
+    }
+    function extend(namespace, delimiter) {
+      const newDebug = createDebug(this.namespace + (typeof delimiter === "undefined" ? ":" : delimiter) + namespace);
+      newDebug.log = this.log;
+      return newDebug;
+    }
+    function enable(namespaces) {
+      createDebug.save(namespaces);
+      createDebug.namespaces = namespaces;
+      createDebug.names = [];
+      createDebug.skips = [];
+      const split = (typeof namespaces === "string" ? namespaces : "").trim().replace(/\s+/g, ",").split(",").filter(Boolean);
+      for (const ns of split) {
+        if (ns[0] === "-") {
+          createDebug.skips.push(ns.slice(1));
+        } else {
+          createDebug.names.push(ns);
+        }
+      }
+    }
+    function matchesTemplate(search, template) {
+      let searchIndex = 0;
+      let templateIndex = 0;
+      let starIndex = -1;
+      let matchIndex = 0;
+      while (searchIndex < search.length) {
+        if (templateIndex < template.length && (template[templateIndex] === search[searchIndex] || template[templateIndex] === "*")) {
+          if (template[templateIndex] === "*") {
+            starIndex = templateIndex;
+            matchIndex = searchIndex;
+            templateIndex++;
+          } else {
+            searchIndex++;
+            templateIndex++;
+          }
+        } else if (starIndex !== -1) {
+          templateIndex = starIndex + 1;
+          matchIndex++;
+          searchIndex = matchIndex;
+        } else {
+          return false;
+        }
+      }
+      while (templateIndex < template.length && template[templateIndex] === "*") {
+        templateIndex++;
+      }
+      return templateIndex === template.length;
+    }
+    function disable() {
+      const namespaces = [
+        ...createDebug.names,
+        ...createDebug.skips.map((namespace) => "-" + namespace)
+      ].join(",");
+      createDebug.enable("");
+      return namespaces;
+    }
+    function enabled(name) {
+      for (const skip of createDebug.skips) {
+        if (matchesTemplate(name, skip)) {
+          return false;
+        }
+      }
+      for (const ns of createDebug.names) {
+        if (matchesTemplate(name, ns)) {
+          return true;
+        }
+      }
+      return false;
+    }
+    function coerce(val) {
+      if (val instanceof Error) {
+        return val.stack || val.message;
+      }
+      return val;
+    }
+    function destroy() {
+      console.warn("Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.");
+    }
+    createDebug.enable(createDebug.load());
+    return createDebug;
+  }
+  module.exports = setup;
+});
+
+// ../../node_modules/debug/src/browser.js
+var require_browser = __commonJS(function(exports, module) {
+  exports.formatArgs = formatArgs;
+  exports.save = save;
+  exports.load = load;
+  exports.useColors = useColors;
+  exports.storage = localstorage();
+  exports.destroy = (() => {
+    let warned = false;
+    return () => {
+      if (!warned) {
+        warned = true;
+        console.warn("Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.");
+      }
+    };
+  })();
+  exports.colors = [
+    "#0000CC",
+    "#0000FF",
+    "#0033CC",
+    "#0033FF",
+    "#0066CC",
+    "#0066FF",
+    "#0099CC",
+    "#0099FF",
+    "#00CC00",
+    "#00CC33",
+    "#00CC66",
+    "#00CC99",
+    "#00CCCC",
+    "#00CCFF",
+    "#3300CC",
+    "#3300FF",
+    "#3333CC",
+    "#3333FF",
+    "#3366CC",
+    "#3366FF",
+    "#3399CC",
+    "#3399FF",
+    "#33CC00",
+    "#33CC33",
+    "#33CC66",
+    "#33CC99",
+    "#33CCCC",
+    "#33CCFF",
+    "#6600CC",
+    "#6600FF",
+    "#6633CC",
+    "#6633FF",
+    "#66CC00",
+    "#66CC33",
+    "#9900CC",
+    "#9900FF",
+    "#9933CC",
+    "#9933FF",
+    "#99CC00",
+    "#99CC33",
+    "#CC0000",
+    "#CC0033",
+    "#CC0066",
+    "#CC0099",
+    "#CC00CC",
+    "#CC00FF",
+    "#CC3300",
+    "#CC3333",
+    "#CC3366",
+    "#CC3399",
+    "#CC33CC",
+    "#CC33FF",
+    "#CC6600",
+    "#CC6633",
+    "#CC9900",
+    "#CC9933",
+    "#CCCC00",
+    "#CCCC33",
+    "#FF0000",
+    "#FF0033",
+    "#FF0066",
+    "#FF0099",
+    "#FF00CC",
+    "#FF00FF",
+    "#FF3300",
+    "#FF3333",
+    "#FF3366",
+    "#FF3399",
+    "#FF33CC",
+    "#FF33FF",
+    "#FF6600",
+    "#FF6633",
+    "#FF9900",
+    "#FF9933",
+    "#FFCC00",
+    "#FFCC33"
+  ];
+  function useColors() {
+    if (typeof window !== "undefined" && window.process && (window.process.type === "renderer" || window.process.__nwjs)) {
+      return true;
+    }
+    if (typeof navigator !== "undefined" && navigator.userAgent && navigator.userAgent.toLowerCase().match(/(edge|trident)\/(\d+)/)) {
+      return false;
+    }
+    let m;
+    return typeof document !== "undefined" && document.documentElement && document.documentElement.style && document.documentElement.style.WebkitAppearance || typeof window !== "undefined" && window.console && (window.console.firebug || window.console.exception && window.console.table) || typeof navigator !== "undefined" && navigator.userAgent && (m = navigator.userAgent.toLowerCase().match(/firefox\/(\d+)/)) && parseInt(m[1], 10) >= 31 || typeof navigator !== "undefined" && navigator.userAgent && navigator.userAgent.toLowerCase().match(/applewebkit\/(\d+)/);
+  }
+  function formatArgs(args) {
+    args[0] = (this.useColors ? "%c" : "") + this.namespace + (this.useColors ? " %c" : " ") + args[0] + (this.useColors ? "%c " : " ") + "+" + module.exports.humanize(this.diff);
+    if (!this.useColors) {
+      return;
+    }
+    const c = "color: " + this.color;
+    args.splice(1, 0, c, "color: inherit");
+    let index = 0;
+    let lastC = 0;
+    args[0].replace(/%[a-zA-Z%]/g, (match) => {
+      if (match === "%%") {
+        return;
+      }
+      index++;
+      if (match === "%c") {
+        lastC = index;
+      }
+    });
+    args.splice(lastC, 0, c);
+  }
+  exports.log = console.debug || console.log || (() => {});
+  function save(namespaces) {
+    try {
+      if (namespaces) {
+        exports.storage.setItem("debug", namespaces);
+      } else {
+        exports.storage.removeItem("debug");
+      }
+    } catch (error) {}
+  }
+  function load() {
+    let r;
+    try {
+      r = exports.storage.getItem("debug") || exports.storage.getItem("DEBUG");
+    } catch (error) {}
+    if (!r && typeof process !== "undefined" && "env" in process) {
+      r = process.env.DEBUG;
+    }
+    return r;
+  }
+  function localstorage() {
+    try {
+      return localStorage;
+    } catch (error) {}
+  }
+  module.exports = require_common()(exports);
+  var { formatters } = module.exports;
+  formatters.j = function(v) {
+    try {
+      return JSON.stringify(v);
+    } catch (error) {
+      return "[UnexpectedJSONParseError]: " + error.message;
+    }
+  };
+});
+
+// ../../node_modules/has-flag/index.js
+var require_has_flag = __commonJS(function(exports, module) {
+  module.exports = (flag, argv = process.argv) => {
+    const prefix = flag.startsWith("-") ? "" : flag.length === 1 ? "-" : "--";
+    const position = argv.indexOf(prefix + flag);
+    const terminatorPosition = argv.indexOf("--");
+    return position !== -1 && (terminatorPosition === -1 || position < terminatorPosition);
+  };
+});
+
+// ../../node_modules/supports-color/index.js
+var require_supports_color = __commonJS(function(exports, module) {
+  var os = __require("os");
+  var tty = __require("tty");
+  var hasFlag = require_has_flag();
+  var { env } = process;
+  var flagForceColor;
+  if (hasFlag("no-color") || hasFlag("no-colors") || hasFlag("color=false") || hasFlag("color=never")) {
+    flagForceColor = 0;
+  } else if (hasFlag("color") || hasFlag("colors") || hasFlag("color=true") || hasFlag("color=always")) {
+    flagForceColor = 1;
+  }
+  function envForceColor() {
+    if ("FORCE_COLOR" in env) {
+      if (env.FORCE_COLOR === "true") {
+        return 1;
+      }
+      if (env.FORCE_COLOR === "false") {
+        return 0;
+      }
+      return env.FORCE_COLOR.length === 0 ? 1 : Math.min(Number.parseInt(env.FORCE_COLOR, 10), 3);
+    }
+  }
+  function translateLevel(level) {
+    if (level === 0) {
+      return false;
+    }
+    return {
+      level,
+      hasBasic: true,
+      has256: level >= 2,
+      has16m: level >= 3
+    };
+  }
+  function supportsColor(haveStream, { streamIsTTY, sniffFlags = true } = {}) {
+    const noFlagForceColor = envForceColor();
+    if (noFlagForceColor !== undefined) {
+      flagForceColor = noFlagForceColor;
+    }
+    const forceColor = sniffFlags ? flagForceColor : noFlagForceColor;
+    if (forceColor === 0) {
+      return 0;
+    }
+    if (sniffFlags) {
+      if (hasFlag("color=16m") || hasFlag("color=full") || hasFlag("color=truecolor")) {
+        return 3;
+      }
+      if (hasFlag("color=256")) {
+        return 2;
+      }
+    }
+    if (haveStream && !streamIsTTY && forceColor === undefined) {
+      return 0;
+    }
+    const min = forceColor || 0;
+    if (env.TERM === "dumb") {
+      return min;
+    }
+    if (process.platform === "win32") {
+      const osRelease = os.release().split(".");
+      if (Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) {
+        return Number(osRelease[2]) >= 14931 ? 3 : 2;
+      }
+      return 1;
+    }
+    if ("CI" in env) {
+      if (["TRAVIS", "CIRCLECI", "APPVEYOR", "GITLAB_CI", "GITHUB_ACTIONS", "BUILDKITE", "DRONE"].some((sign) => (sign in env)) || env.CI_NAME === "codeship") {
+        return 1;
+      }
+      return min;
+    }
+    if ("TEAMCITY_VERSION" in env) {
+      return /^(9\.(0*[1-9]\d*)\.|\d{2,}\.)/.test(env.TEAMCITY_VERSION) ? 1 : 0;
+    }
+    if (env.COLORTERM === "truecolor") {
+      return 3;
+    }
+    if ("TERM_PROGRAM" in env) {
+      const version = Number.parseInt((env.TERM_PROGRAM_VERSION || "").split(".")[0], 10);
+      switch (env.TERM_PROGRAM) {
+        case "iTerm.app":
+          return version >= 3 ? 3 : 2;
+        case "Apple_Terminal":
+          return 2;
+      }
+    }
+    if (/-256(color)?$/i.test(env.TERM)) {
+      return 2;
+    }
+    if (/^screen|^xterm|^vt100|^vt220|^rxvt|color|ansi|cygwin|linux/i.test(env.TERM)) {
+      return 1;
+    }
+    if ("COLORTERM" in env) {
+      return 1;
+    }
+    return min;
+  }
+  function getSupportLevel(stream, options = {}) {
+    const level = supportsColor(stream, {
+      streamIsTTY: stream && stream.isTTY,
+      ...options
+    });
+    return translateLevel(level);
+  }
+  module.exports = {
+    supportsColor: getSupportLevel,
+    stdout: getSupportLevel({ isTTY: tty.isatty(1) }),
+    stderr: getSupportLevel({ isTTY: tty.isatty(2) })
+  };
+});
+
+// ../../node_modules/debug/src/node.js
+var require_node = __commonJS(function(exports, module) {
+  var tty = __require("tty");
+  var util = __require("util");
+  exports.init = init;
+  exports.log = log;
+  exports.formatArgs = formatArgs;
+  exports.save = save;
+  exports.load = load;
+  exports.useColors = useColors;
+  exports.destroy = util.deprecate(() => {}, "Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.");
+  exports.colors = [6, 2, 3, 4, 5, 1];
+  try {
+    const supportsColor = require_supports_color();
+    if (supportsColor && (supportsColor.stderr || supportsColor).level >= 2) {
+      exports.colors = [
+        20,
+        21,
+        26,
+        27,
+        32,
+        33,
+        38,
+        39,
+        40,
+        41,
+        42,
+        43,
+        44,
+        45,
+        56,
+        57,
+        62,
+        63,
+        68,
+        69,
+        74,
+        75,
+        76,
+        77,
+        78,
+        79,
+        80,
+        81,
+        92,
+        93,
+        98,
+        99,
+        112,
+        113,
+        128,
+        129,
+        134,
+        135,
+        148,
+        149,
+        160,
+        161,
+        162,
+        163,
+        164,
+        165,
+        166,
+        167,
+        168,
+        169,
+        170,
+        171,
+        172,
+        173,
+        178,
+        179,
+        184,
+        185,
+        196,
+        197,
+        198,
+        199,
+        200,
+        201,
+        202,
+        203,
+        204,
+        205,
+        206,
+        207,
+        208,
+        209,
+        214,
+        215,
+        220,
+        221
+      ];
+    }
+  } catch (error) {}
+  exports.inspectOpts = Object.keys(process.env).filter((key) => {
+    return /^debug_/i.test(key);
+  }).reduce((obj, key) => {
+    const prop = key.substring(6).toLowerCase().replace(/_([a-z])/g, (_, k) => {
+      return k.toUpperCase();
+    });
+    let val = process.env[key];
+    if (/^(yes|on|true|enabled)$/i.test(val)) {
+      val = true;
+    } else if (/^(no|off|false|disabled)$/i.test(val)) {
+      val = false;
+    } else if (val === "null") {
+      val = null;
+    } else {
+      val = Number(val);
+    }
+    obj[prop] = val;
+    return obj;
+  }, {});
+  function useColors() {
+    return "colors" in exports.inspectOpts ? Boolean(exports.inspectOpts.colors) : tty.isatty(process.stderr.fd);
+  }
+  function formatArgs(args) {
+    const { namespace: name, useColors } = this;
+    if (useColors) {
+      const c = this.color;
+      const colorCode = "\x1B[3" + (c < 8 ? c : "8;5;" + c);
+      const prefix = `  ${colorCode};1m${name} \x1B[0m`;
+      args[0] = prefix + args[0].split(`
+`).join(`
+` + prefix);
+      args.push(colorCode + "m+" + module.exports.humanize(this.diff) + "\x1B[0m");
+    } else {
+      args[0] = getDate() + name + " " + args[0];
+    }
+  }
+  function getDate() {
+    if (exports.inspectOpts.hideDate) {
+      return "";
+    }
+    return new Date().toISOString() + " ";
+  }
+  function log(...args) {
+    return process.stderr.write(util.formatWithOptions(exports.inspectOpts, ...args) + `
+`);
+  }
+  function save(namespaces) {
+    if (namespaces) {
+      process.env.DEBUG = namespaces;
+    } else {
+      delete process.env.DEBUG;
+    }
+  }
+  function load() {
+    return process.env.DEBUG;
+  }
+  function init(debug) {
+    debug.inspectOpts = {};
+    const keys = Object.keys(exports.inspectOpts);
+    for (let i = 0;i < keys.length; i++) {
+      debug.inspectOpts[keys[i]] = exports.inspectOpts[keys[i]];
+    }
+  }
+  module.exports = require_common()(exports);
+  var { formatters } = module.exports;
+  formatters.o = function(v) {
+    this.inspectOpts.colors = this.useColors;
+    return util.inspect(v, this.inspectOpts).split(`
+`).map((str) => str.trim()).join(" ");
+  };
+  formatters.O = function(v) {
+    this.inspectOpts.colors = this.useColors;
+    return util.inspect(v, this.inspectOpts);
+  };
+});
+
+// ../../node_modules/debug/src/index.js
+var require_src = __commonJS(function(exports, module) {
+  if (typeof process === "undefined" || process.type === "renderer" || false || process.__nwjs) {
+    module.exports = require_browser();
+  } else {
+    module.exports = require_node();
+  }
+});
+
+// src/payload-debug.ts
+function disablePayloadDebug() {
+  import_debug.default.enable(`${import_debug.default.disable()},-socket.io:socket,-socket.io-parser,-engine:ws,-engine:polling,-engine:socket,-engine`);
+}
+var import_debug;
+var init_payload_debug = __esm(() => {
+  import_debug = __toESM(require_src(), 1);
+  disablePayloadDebug();
+});
+
 // ../../node_modules/logform/format.js
 var require_format = __commonJS(function(exports, module) {
   class InvalidFormatError extends Error {
@@ -150,7 +906,7 @@ var require_styles = __commonJS(function(exports, module) {
 });
 
 // ../../node_modules/@colors/colors/lib/system/has-flag.js
-var require_has_flag = __commonJS(function(exports, module) {
+var require_has_flag2 = __commonJS(function(exports, module) {
   module.exports = function(flag, argv) {
     argv = argv || process.argv || [];
     var terminatorPos = argv.indexOf("--");
@@ -163,7 +919,7 @@ var require_has_flag = __commonJS(function(exports, module) {
 // ../../node_modules/@colors/colors/lib/system/supports-colors.js
 var require_supports_colors = __commonJS(function(exports, module) {
   var os = __require("os");
-  var hasFlag = require_has_flag();
+  var hasFlag = require_has_flag2();
   var env = process.env;
   var forceColor = undefined;
   if (hasFlag("no-color") || hasFlag("no-colors") || hasFlag("color=false")) {
@@ -1714,116 +2470,6 @@ var require_metadata = __commonJS(function(exports, module) {
   });
 });
 
-// ../../node_modules/ms/index.js
-var require_ms = __commonJS(function(exports, module) {
-  var s = 1000;
-  var m = s * 60;
-  var h = m * 60;
-  var d = h * 24;
-  var w = d * 7;
-  var y = d * 365.25;
-  module.exports = function(val, options) {
-    options = options || {};
-    var type = typeof val;
-    if (type === "string" && val.length > 0) {
-      return parse(val);
-    } else if (type === "number" && isFinite(val)) {
-      return options.long ? fmtLong(val) : fmtShort(val);
-    }
-    throw new Error("val is not a non-empty string or a valid number. val=" + JSON.stringify(val));
-  };
-  function parse(str) {
-    str = String(str);
-    if (str.length > 100) {
-      return;
-    }
-    var match = /^(-?(?:\d+)?\.?\d+) *(milliseconds?|msecs?|ms|seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)?$/i.exec(str);
-    if (!match) {
-      return;
-    }
-    var n = parseFloat(match[1]);
-    var type = (match[2] || "ms").toLowerCase();
-    switch (type) {
-      case "years":
-      case "year":
-      case "yrs":
-      case "yr":
-      case "y":
-        return n * y;
-      case "weeks":
-      case "week":
-      case "w":
-        return n * w;
-      case "days":
-      case "day":
-      case "d":
-        return n * d;
-      case "hours":
-      case "hour":
-      case "hrs":
-      case "hr":
-      case "h":
-        return n * h;
-      case "minutes":
-      case "minute":
-      case "mins":
-      case "min":
-      case "m":
-        return n * m;
-      case "seconds":
-      case "second":
-      case "secs":
-      case "sec":
-      case "s":
-        return n * s;
-      case "milliseconds":
-      case "millisecond":
-      case "msecs":
-      case "msec":
-      case "ms":
-        return n;
-      default:
-        return;
-    }
-  }
-  function fmtShort(ms) {
-    var msAbs = Math.abs(ms);
-    if (msAbs >= d) {
-      return Math.round(ms / d) + "d";
-    }
-    if (msAbs >= h) {
-      return Math.round(ms / h) + "h";
-    }
-    if (msAbs >= m) {
-      return Math.round(ms / m) + "m";
-    }
-    if (msAbs >= s) {
-      return Math.round(ms / s) + "s";
-    }
-    return ms + "ms";
-  }
-  function fmtLong(ms) {
-    var msAbs = Math.abs(ms);
-    if (msAbs >= d) {
-      return plural(ms, msAbs, d, "day");
-    }
-    if (msAbs >= h) {
-      return plural(ms, msAbs, h, "hour");
-    }
-    if (msAbs >= m) {
-      return plural(ms, msAbs, m, "minute");
-    }
-    if (msAbs >= s) {
-      return plural(ms, msAbs, s, "second");
-    }
-    return ms + " ms";
-  }
-  function plural(ms, msAbs, n, name) {
-    var isPlural = msAbs >= n * 1.5;
-    return Math.round(ms / n) + " " + name + (isPlural ? "s" : "");
-  }
-});
-
 // ../../node_modules/logform/ms.js
 var require_ms2 = __commonJS(function(exports, module) {
   var format = require_format();
@@ -2458,7 +3104,7 @@ var require_logform = __commonJS(function(exports) {
 });
 
 // ../../node_modules/winston/lib/winston/common.js
-var require_common = __commonJS(function(exports) {
+var require_common2 = __commonJS(function(exports) {
   var { format } = __require("util");
   exports.warn = {
     deprecated(prop) {
@@ -2571,7 +3217,7 @@ var require_package = __commonJS(function(exports, module) {
 });
 
 // ../../node_modules/util-deprecate/node.js
-var require_node = __commonJS(function(exports, module) {
+var require_node2 = __commonJS(function(exports, module) {
   module.exports = __require("util").deprecate;
 });
 
@@ -4667,7 +5313,7 @@ var require__stream_writable = __commonJS(function(exports, module) {
   var Duplex;
   Writable.WritableState = WritableState;
   var internalUtil = {
-    deprecate: require_node()
+    deprecate: require_node2()
   };
   var Stream = __require("stream");
   var Buffer2 = __require("buffer").Buffer;
@@ -7917,7 +8563,7 @@ var require_development = __commonJS(function(exports, module) {
 });
 
 // ../../node_modules/@dabh/diagnostics/node/index.js
-var require_node2 = __commonJS(function(exports, module) {
+var require_node3 = __commonJS(function(exports, module) {
   if (false) {} else {
     module.exports = require_development();
   }
@@ -8023,7 +8669,7 @@ var require_file = __commonJS(function(exports, module) {
   var { MESSAGE } = require_triple_beam();
   var { Stream, PassThrough } = require_readable();
   var TransportStream = require_winston_transport();
-  var debug = require_node2()("winston:file");
+  var debug = require_node3()("winston:file");
   var os = __require("os");
   var tailFile = require_tail_file();
   module.exports = class File2 extends TransportStream {
@@ -9026,7 +9672,7 @@ var require_exception_stream = __commonJS(function(exports, module) {
 var require_exception_handler = __commonJS(function(exports, module) {
   var os = __require("os");
   var asyncForEach = require_forEach();
-  var debug = require_node2()("winston:exception");
+  var debug = require_node3()("winston:exception");
   var once = require_one_time();
   var stackTrace = require_stack_trace();
   var ExceptionStream = require_exception_stream();
@@ -9193,7 +9839,7 @@ var require_rejection_stream = __commonJS(function(exports, module) {
 var require_rejection_handler = __commonJS(function(exports, module) {
   var os = __require("os");
   var asyncForEach = require_forEach();
-  var debug = require_node2()("winston:rejection");
+  var debug = require_node3()("winston:rejection");
   var once = require_one_time();
   var stackTrace = require_stack_trace();
   var RejectionStream = require_rejection_stream();
@@ -9370,7 +10016,7 @@ var require_logger = __commonJS(function(exports, module) {
   var RejectionHandler = require_rejection_handler();
   var LegacyTransportStream = require_legacy();
   var Profiler = require_profiler();
-  var { warn } = require_common();
+  var { warn } = require_common2();
   var config = require_config2();
   var formatRegExp = /%[scdjifoO%]/g;
 
@@ -9741,7 +10387,7 @@ var require_create_logger = __commonJS(function(exports, module) {
   var { LEVEL } = require_triple_beam();
   var config = require_config2();
   var Logger = require_logger();
-  var debug = require_node2()("winston:create-logger");
+  var debug = require_node3()("winston:create-logger");
   function isLevelEnabledFunctionName(level) {
     return "is" + level.charAt(0).toUpperCase() + level.slice(1) + "Enabled";
   }
@@ -9836,7 +10482,7 @@ var require_container = __commonJS(function(exports, module) {
 // ../../node_modules/winston/lib/winston.js
 var require_winston = __commonJS(function(exports) {
   var logform = require_logform();
-  var { warn } = require_common();
+  var { warn } = require_common2();
   exports.version = require_package().version;
   exports.transports = require_transports();
   exports.config = require_config2();
@@ -10411,7 +11057,7 @@ var init_package = __esm(() => {
   package_default = {
     name: "@sockethub/schemas",
     description: "JSON schema files for validating Sockethub Activity Streams",
-    version: "3.0.0-beta.0",
+    version: "3.0.0-beta.2",
     type: "module",
     private: false,
     author: "Nick Jennings <nick@silverbucket.net>",
@@ -10481,7 +11127,7 @@ var init_package = __esm(() => {
       "ajv-formats": "^2.1.1",
       "ajv-formats-draft2019": "^1.6.1"
     },
-    gitHead: "75002ae8f15d7679bd58a9327f5a1d7eeaffa237",
+    gitHead: "1f74d4e07311496f0acc021855137bc197d79eab",
     types: "./dist/index.d.ts"
   };
 });
@@ -10590,8 +11236,11 @@ var init_sockethub_config = __esm(() => {
           "@sockethub/platform-caldav",
           "@sockethub/platform-dummy",
           "@sockethub/platform-feeds",
+          "@sockethub/platform-email",
           "@sockethub/platform-irc",
           "@sockethub/platform-metadata",
+          "@sockethub/platform-messenger",
+          "@sockethub/platform-instagram",
           "@sockethub/platform-xmpp"
         ]
       },
@@ -10607,7 +11256,8 @@ var init_sockethub_config = __esm(() => {
               connectTimeoutMs: { type: "integer", minimum: 1 },
               allowPrivateAddresses: { type: "boolean" },
               allowInsecureHttp: { type: "boolean" },
-              concurrency: { type: "integer", minimum: 1 }
+              concurrency: { type: "integer", minimum: 1 },
+              discoveryCacheTtlMs: { type: "integer", minimum: 0 }
             }
           },
           "@sockethub/platform-caldav": {
@@ -10617,7 +11267,20 @@ var init_sockethub_config = __esm(() => {
               connectTimeoutMs: { type: "integer", minimum: 1 },
               allowPrivateAddresses: { type: "boolean" },
               allowInsecureHttp: { type: "boolean" },
-              concurrency: { type: "integer", minimum: 1 }
+              concurrency: { type: "integer", minimum: 1 },
+              discoveryCacheTtlMs: { type: "integer", minimum: 0 }
+            }
+          },
+          "@sockethub/platform-email": {
+            type: "object",
+            additionalProperties: false,
+            properties: {
+              connectTimeoutMs: {
+                type: "integer",
+                minimum: 5000,
+                maximum: 120000
+              },
+              allowPrivateAddresses: { type: "boolean" }
             }
           },
           "@sockethub/platform-dummy": {
@@ -10640,14 +11303,16 @@ var init_sockethub_config = __esm(() => {
             type: "object",
             additionalProperties: false,
             properties: {
-              connectTimeoutMs: { type: "number" }
+              connectTimeoutMs: { type: "number" },
+              allowPrivateAddresses: { type: "boolean" }
             }
           },
           "@sockethub/platform-xmpp": {
             type: "object",
             additionalProperties: false,
             properties: {
-              connectTimeoutMs: { type: "number" }
+              connectTimeoutMs: { type: "number" },
+              allowPrivateAddresses: { type: "boolean" }
             }
           },
           "@sockethub/platform-metadata": {
@@ -10737,11 +11402,29 @@ var init_sockethub_config = __esm(() => {
         type: "object",
         additionalProperties: false,
         properties: {
+          maxInstancesPerSession: {
+            type: "integer",
+            minimum: 0,
+            default: 10,
+            description: "Maximum persistent instances per socket session. 0 disables the cap."
+          },
+          maxInstancesPerIp: {
+            type: "integer",
+            minimum: 0,
+            default: 20,
+            description: "Maximum persistent instances per client IP, including HTTP actions. 0 disables the cap."
+          },
+          maxStartsPerIpPerMinute: {
+            type: "integer",
+            minimum: 0,
+            default: 60,
+            description: "Maximum new persistent instances a client IP may start per minute, " + "including HTTP actions. Bounds fork/teardown churn that the " + "concurrent caps allow. Reusing a running instance does not count. " + "0 disables the cap."
+          },
           maxPlatformInstances: {
             type: "number",
             minimum: 0,
             default: 100,
-            description: "Upper bound on concurrently running platform instances " + "(child processes). Each persistent-platform actor forks " + "its own process, so an unbounded count is a resource " + "exhaustion risk on public instances. 0 disables the cap."
+            description: "Upper bound on concurrently running persistent platform instances " + "(child processes). Each persistent-platform actor forks " + "its own process, so an unbounded count is a resource " + "exhaustion risk on public instances. 0 disables the cap."
           }
         }
       },
@@ -17110,15 +17793,33 @@ var require_ajv = __commonJS(function(exports, module) {
   } });
 });
 
+// ../schemas/src/helpers/codegen.ts
+function isCodegenAvailable() {
+  if (available === undefined) {
+    try {
+      new Function("return true");
+      available = true;
+    } catch {
+      available = false;
+    }
+  }
+  return available;
+}
+function warnCodegenUnavailable() {
+  if (warned) {
+    return;
+  }
+  warned = true;
+  console.warn("[@sockethub/schemas] Schema validation is disabled: this environment's Content Security Policy blocks `new Function`, which Ajv needs to compile schemas. The Sockethub server still validates every message.");
+}
+var available, warned = false;
+
 // ../schemas/src/schemas/service-descriptor.ts
 var init_service_descriptor = () => {};
 
 // ../schemas/src/service-descriptor.ts
-var import_ajv, ajv;
 var init_service_descriptor2 = __esm(() => {
   init_service_descriptor();
-  import_ajv = __toESM(require_ajv(), 1);
-  ajv = new import_ajv.default({ strictTypes: false, allErrors: true });
 });
 
 // ../../node_modules/ajv-formats/dist/formats.js
@@ -26670,8 +27371,11 @@ function parseMsg(error) {
   }
   return err;
 }
-function getTypeList(msg) {
+function getTypeList(msg, depth = 0) {
   const types = [];
+  if (depth > MAX_TYPE_LIST_DEPTH) {
+    return types;
+  }
   if (msg?.type) {
     types.push(msg.type);
   }
@@ -26679,7 +27383,7 @@ function getTypeList(msg) {
   for (const prop in record) {
     const value = record[prop];
     if (value && typeof value === "object" && "type" in value) {
-      types.push(...getTypeList(value));
+      types.push(...getTypeList(value, depth + 1));
     }
   }
   return types;
@@ -26759,20 +27463,41 @@ function composeFinalError(error, options) {
   }
   return msg;
 }
+var MAX_TYPE_LIST_DEPTH = 64;
 var init_error_parser = __esm(() => {
   init_objects();
 });
 
 // ../schemas/src/validator.ts
+function getAjv() {
+  if (!isCodegenAvailable()) {
+    warnCodegenUnavailable();
+    return;
+  }
+  if (!ajv) {
+    const instance = new import_ajv.default({ strictTypes: false, allErrors: true });
+    import_ajv_formats.default(instance);
+    import_ajv_formats_draft2019.default(instance);
+    for (const uri in schemas) {
+      instance.addSchema(schemas[uri], uri);
+    }
+    ajv = instance;
+  }
+  return ajv;
+}
 function registerSystemContext(platformId, contextUrl) {
   registerPlatformContext(platformId, contextUrl, `${schemaURL}/context/${platformId}/messages`, `${schemaURL}/context/${platformId}/credentials`);
+  const instance = getAjv();
+  if (!instance) {
+    return;
+  }
   const messageSchemaRef = `${schemaURL}/context/${platformId}/messages`;
-  if (!ajv2.getSchema(messageSchemaRef)) {
-    ajv2.addSchema({}, messageSchemaRef);
+  if (!instance.getSchema(messageSchemaRef)) {
+    instance.addSchema({}, messageSchemaRef);
   }
   const credentialsSchemaRef = `${schemaURL}/context/${platformId}/credentials`;
-  if (!ajv2.getSchema(credentialsSchemaRef)) {
-    ajv2.addSchema({}, credentialsSchemaRef);
+  if (!instance.getSchema(credentialsSchemaRef)) {
+    instance.addSchema({}, credentialsSchemaRef);
   }
 }
 function registerSystemPlatformContexts() {
@@ -26784,7 +27509,11 @@ function registerSystemPlatformContexts() {
   systemContextsRegistered = true;
 }
 function handleValidation(schemaRef, msg) {
-  const validator = ajv2.getSchema(schemaRef);
+  const instance = getAjv();
+  if (!instance) {
+    return "";
+  }
+  const validator = instance.getSchema(schemaRef);
   if (!validator) {
     return `schema ${schemaRef} not found`;
   }
@@ -26808,17 +27537,25 @@ function setValidationErrorOptions(options) {
   validationErrorOptions = { ...validationErrorOptions, ...options };
 }
 function validateSockethubConfig(config) {
+  const instance = getAjv();
+  if (!instance) {
+    return "";
+  }
   if (!sockethubConfigValidator) {
-    sockethubConfigValidator = ajv2.compile(SockethubConfigSchema);
+    sockethubConfigValidator = instance.compile(SockethubConfigSchema);
   }
   if (sockethubConfigValidator(config)) {
     return "";
   }
-  return ajv2.errorsText(sockethubConfigValidator.errors, {
+  return instance.errorsText(sockethubConfigValidator.errors, {
     dataVar: "config"
   });
 }
 function validateActivityStream(msg) {
+  if (!isCodegenAvailable()) {
+    warnCodegenUnavailable();
+    return "";
+  }
   const streamValidationError = handleValidation(`${schemaURL}/activity-stream`, msg);
   if (streamValidationError) {
     return streamValidationError;
@@ -26834,6 +27571,10 @@ function validateActivityStream(msg) {
   return handleValidation(schemaId, msg);
 }
 function validateActivityStreamResponse(msg) {
+  if (!isCodegenAvailable()) {
+    warnCodegenUnavailable();
+    return "";
+  }
   const platformContextUrl = resolvePlatformContextUrl(msg);
   if (!platformContextUrl) {
     return "";
@@ -26843,12 +27584,17 @@ function validateActivityStreamResponse(msg) {
     return "";
   }
   const responsesSchemaId = `${schemaURL}/context/${platformId}/responses`;
-  if (!ajv2.getSchema(responsesSchemaId)) {
+  const instance = getAjv();
+  if (!instance || !instance.getSchema(responsesSchemaId)) {
     return "";
   }
   return handleValidation(responsesSchemaId, msg);
 }
 function validateCredentials(msg) {
+  if (!isCodegenAvailable()) {
+    warnCodegenUnavailable();
+    return "";
+  }
   if (!Array.isArray(msg["@context"])) {
     return "credential activity streams must have an @context set";
   }
@@ -26870,15 +27616,18 @@ function validateCredentials(msg) {
   return handleValidation(credentialsSchemaId, msg);
 }
 function validatePlatformSchema(schema) {
-  const validate = ajv2.compile(PlatformSchema);
-  const err = validate(schema);
-  if (!err) {
-    const validationError = validate.errors[0];
-    let message = `${validationError.instancePath} ${validationError.message}`;
-    if (validationError.keyword === "additionalProperties") {
-      message += `: ${validationError.params.additionalProperty}`;
+  const instance = getAjv();
+  if (instance) {
+    const validate = instance.compile(PlatformSchema);
+    const err = validate(schema);
+    if (!err) {
+      const validationError = validate.errors?.[0];
+      let message = `${validationError?.instancePath ?? ""} ${validationError?.message ?? "is invalid"}`;
+      if (validationError?.keyword === "additionalProperties") {
+        message += `: ${validationError.params.additionalProperty}`;
+      }
+      return `platform schema failed to validate: ${message}`;
     }
-    return `platform schema failed to validate: ${message}`;
   }
   const platform = schema;
   const messages = platform.messages;
@@ -26920,10 +27669,13 @@ function validatePlatformSchema(schema) {
   return "";
 }
 function addPlatformSchema(schema, platform_type) {
-  const schemaRef = `${schemaURL}/context/${platform_type}`;
-  if (!ajv2.getSchema(schemaRef)) {
-    ajv2.addSchema(schema, schemaRef);
+  const instance = getAjv();
+  if (!instance) {
+    return;
   }
+  const schemaRef = `${schemaURL}/context/${platform_type}`;
+  instance.removeSchema(schemaRef);
+  instance.addSchema(schema, schemaRef);
 }
 function addPlatformContext(platformId, platformContextUrl) {
   registerPlatformContext(platformId, platformContextUrl, `${schemaURL}/context/${platformId}/messages`, `${schemaURL}/context/${platformId}/credentials`);
@@ -26935,7 +27687,7 @@ function resolvePlatformId(msg) {
   }
   return getPlatformIdByContextUrl(platformContextUrl) ?? null;
 }
-var import_ajv2, import_ajv_formats, import_ajv_formats_draft2019, ajv2, schemaURL = "https://sockethub.org/schemas/v0", schemas, validationErrorOptions, systemContextsRegistered = false, sockethubConfigValidator;
+var import_ajv, import_ajv_formats, import_ajv_formats_draft2019, schemaURL = "https://sockethub.org/schemas/v0", schemas, validationErrorOptions, systemContextsRegistered = false, ajv, sockethubConfigValidator;
 var init_validator = __esm(() => {
   init_context();
   init_error_parser();
@@ -26943,18 +27695,12 @@ var init_validator = __esm(() => {
   init_activity_stream();
   init_platform();
   init_sockethub_config();
-  import_ajv2 = __toESM(require_ajv(), 1);
+  import_ajv = __toESM(require_ajv(), 1);
   import_ajv_formats = __toESM(require_dist(), 1);
   import_ajv_formats_draft2019 = __toESM(require_ajv_formats_draft2019(), 1);
-  ajv2 = new import_ajv2.default({ strictTypes: false, allErrors: true });
-  import_ajv_formats.default(ajv2);
-  import_ajv_formats_draft2019.default(ajv2);
   schemas = {};
   validationErrorOptions = {};
   schemas[`${schemaURL}/activity-stream`] = ActivityStreamSchema;
-  for (const uri in schemas) {
-    ajv2.addSchema(schemas[uri], uri);
-  }
   registerSystemPlatformContexts();
 });
 
@@ -29275,6 +30021,9 @@ var init_config_schema = __esm(() => {
     "rateLimiter.maxRequests": { format: "nat" },
     "rateLimiter.blockDurationMs": { format: "nat" },
     "rateLimiter.maxConnectionsPerIp": { format: "nat" },
+    "limits.maxInstancesPerSession": { format: "nat" },
+    "limits.maxInstancesPerIp": { format: "nat" },
+    "limits.maxStartsPerIpPerMinute": { format: "nat" },
     "limits.maxPlatformInstances": { format: "nat" },
     "credentials.ttlMs": {
       format: "nat",
@@ -29927,7 +30676,7 @@ var __create2, __getProtoOf2, __defProp2, __getOwnPropNames2, __hasOwnProp2, __t
   if (canCache)
     cache.set(mod, to);
   return to;
-}, __commonJS22 = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports), __require22, require_ms3, require_common2, require_browser, require_node3, require_src, require_commands, require_built, require_utils2, require_built2, require_old, require_modern2, require_redis_errors, require_lib2, require_defaults3, require_isArguments, require_lodash2, require_debug, require_TLSProfiles, require_utils22, require_argumentParsers, require_Command, require_ClusterAllFailedError, require_ScanStream, require_autoPipelining, require_Script, require_Commander, require_Pipeline, require_tracing, require_transaction, require_applyMixin, require_ClusterOptions, require_util3, require_ClusterSubscriber, require_ConnectionPool, require_denque, require_DelayQueue, require_ShardedSubscriber, require_ClusterSubscriberGroup, require_cluster, require_AbstractConnector, require_StandaloneConnector, require_SentinelIterator, require_FailoverDetector, require_SentinelConnector, require_connectors, require_MaxRetriesPerRequestError, require_errors5, require_parser, require_SubscriptionSet, require_DataHandler, require_event_handler, require_RedisOptions, require_Redis, require_built3, import_debug, import_ioredis, log, ALGORITHM = "aes-256-cbc", IV_LENGTH = 16, crypto;
+}, __commonJS22 = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports), __require22, require_ms3, require_common3, require_browser2, require_node4, require_src2, require_commands, require_built, require_utils2, require_built2, require_old, require_modern2, require_redis_errors, require_lib2, require_defaults3, require_isArguments, require_lodash2, require_debug, require_TLSProfiles, require_utils22, require_argumentParsers, require_Command, require_ClusterAllFailedError, require_ScanStream, require_autoPipelining, require_Script, require_Commander, require_Pipeline, require_tracing, require_transaction, require_applyMixin, require_ClusterOptions, require_util3, require_ClusterSubscriber, require_ConnectionPool, require_denque, require_DelayQueue, require_ShardedSubscriber, require_ClusterSubscriberGroup, require_cluster, require_AbstractConnector, require_StandaloneConnector, require_SentinelIterator, require_FailoverDetector, require_SentinelConnector, require_connectors, require_MaxRetriesPerRequestError, require_errors5, require_parser, require_SubscriptionSet, require_DataHandler, require_event_handler, require_RedisOptions, require_Redis, require_built3, import_debug2, import_ioredis, log, ALGORITHM = "aes-256-cbc", IV_LENGTH = 16, crypto;
 var init_crypto = __esm(() => {
   __create2 = Object.create;
   __getProtoOf2 = Object.getPrototypeOf;
@@ -30425,7 +31174,7 @@ var init_crypto = __esm(() => {
       return Math.round(ms / n) + " " + name + (isPlural ? "s" : "");
     }
   });
-  require_common2 = __commonJS22((exports, module) => {
+  require_common3 = __commonJS22((exports, module) => {
     function setup(env) {
       createDebug.debug = createDebug;
       createDebug.default = createDebug;
@@ -30598,7 +31347,7 @@ var init_crypto = __esm(() => {
     }
     module.exports = setup;
   });
-  require_browser = __commonJS22((exports, module) => {
+  require_browser2 = __commonJS22((exports, module) => {
     exports.formatArgs = formatArgs;
     exports.save = save;
     exports.load = load;
@@ -30746,7 +31495,7 @@ var init_crypto = __esm(() => {
         return localStorage;
       } catch (error) {}
     }
-    module.exports = require_common2()(exports);
+    module.exports = require_common3()(exports);
     var { formatters } = module.exports;
     formatters.j = function(v) {
       try {
@@ -30756,7 +31505,7 @@ var init_crypto = __esm(() => {
       }
     };
   });
-  require_node3 = __commonJS22((exports, module) => {
+  require_node4 = __commonJS22((exports, module) => {
     var tty = __require22("tty");
     var util = __require22("util");
     exports.init = init;
@@ -30915,7 +31664,7 @@ var init_crypto = __esm(() => {
         debug.inspectOpts[keys[i]] = exports.inspectOpts[keys[i]];
       }
     }
-    module.exports = require_common2()(exports);
+    module.exports = require_common3()(exports);
     var { formatters } = module.exports;
     formatters.o = function(v) {
       this.inspectOpts.colors = this.useColors;
@@ -30927,11 +31676,11 @@ var init_crypto = __esm(() => {
       return util.inspect(v, this.inspectOpts);
     };
   });
-  require_src = __commonJS22((exports, module) => {
+  require_src2 = __commonJS22((exports, module) => {
     if (typeof process === "undefined" || process.type === "renderer" || false || process.__nwjs) {
-      module.exports = require_browser();
+      module.exports = require_browser2();
     } else {
-      module.exports = require_node3();
+      module.exports = require_node4();
     }
   });
   require_commands = __commonJS22((exports, module) => {
@@ -34678,7 +35427,7 @@ var init_crypto = __esm(() => {
   require_debug = __commonJS22((exports) => {
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.genRedactedString = exports.getStringValue = exports.MAX_ARGUMENT_LENGTH = undefined;
-    var debug_1 = require_src();
+    var debug_1 = require_src2();
     var MAX_ARGUMENT_LENGTH = 200;
     exports.MAX_ARGUMENT_LENGTH = MAX_ARGUMENT_LENGTH;
     var NAMESPACE_PREFIX = "ioredis";
@@ -40420,9 +41169,9 @@ $` + Buffer.byteLength(this.name) + `\r
     }
     exports.print = print;
   });
-  import_debug = __toESM22(require_src(), 1);
+  import_debug2 = __toESM22(require_src2(), 1);
   import_ioredis = __toESM22(require_built3(), 1);
-  log = import_debug.default("secure-store-redis");
+  log = import_debug2.default("secure-store-redis");
   crypto = new Crypto;
 });
 
@@ -44189,647 +44938,11 @@ var require_lodash3 = __commonJS(function(exports) {
   __exportStar(require_isArguments2(), exports);
 });
 
-// ../../node_modules/debug/src/common.js
-var require_common3 = __commonJS(function(exports, module) {
-  function setup(env) {
-    createDebug.debug = createDebug;
-    createDebug.default = createDebug;
-    createDebug.coerce = coerce;
-    createDebug.disable = disable;
-    createDebug.enable = enable;
-    createDebug.enabled = enabled;
-    createDebug.humanize = require_ms();
-    createDebug.destroy = destroy;
-    Object.keys(env).forEach((key) => {
-      createDebug[key] = env[key];
-    });
-    createDebug.names = [];
-    createDebug.skips = [];
-    createDebug.formatters = {};
-    function selectColor(namespace) {
-      let hash = 0;
-      for (let i = 0;i < namespace.length; i++) {
-        hash = (hash << 5) - hash + namespace.charCodeAt(i);
-        hash |= 0;
-      }
-      return createDebug.colors[Math.abs(hash) % createDebug.colors.length];
-    }
-    createDebug.selectColor = selectColor;
-    function createDebug(namespace) {
-      let prevTime;
-      let enableOverride = null;
-      let namespacesCache;
-      let enabledCache;
-      function debug(...args) {
-        if (!debug.enabled) {
-          return;
-        }
-        const self2 = debug;
-        const curr = Number(new Date);
-        const ms = curr - (prevTime || curr);
-        self2.diff = ms;
-        self2.prev = prevTime;
-        self2.curr = curr;
-        prevTime = curr;
-        args[0] = createDebug.coerce(args[0]);
-        if (typeof args[0] !== "string") {
-          args.unshift("%O");
-        }
-        let index = 0;
-        args[0] = args[0].replace(/%([a-zA-Z%])/g, (match, format) => {
-          if (match === "%%") {
-            return "%";
-          }
-          index++;
-          const formatter = createDebug.formatters[format];
-          if (typeof formatter === "function") {
-            const val = args[index];
-            match = formatter.call(self2, val);
-            args.splice(index, 1);
-            index--;
-          }
-          return match;
-        });
-        createDebug.formatArgs.call(self2, args);
-        const logFn = self2.log || createDebug.log;
-        logFn.apply(self2, args);
-      }
-      debug.namespace = namespace;
-      debug.useColors = createDebug.useColors();
-      debug.color = createDebug.selectColor(namespace);
-      debug.extend = extend;
-      debug.destroy = createDebug.destroy;
-      Object.defineProperty(debug, "enabled", {
-        enumerable: true,
-        configurable: false,
-        get: () => {
-          if (enableOverride !== null) {
-            return enableOverride;
-          }
-          if (namespacesCache !== createDebug.namespaces) {
-            namespacesCache = createDebug.namespaces;
-            enabledCache = createDebug.enabled(namespace);
-          }
-          return enabledCache;
-        },
-        set: (v) => {
-          enableOverride = v;
-        }
-      });
-      if (typeof createDebug.init === "function") {
-        createDebug.init(debug);
-      }
-      return debug;
-    }
-    function extend(namespace, delimiter) {
-      const newDebug = createDebug(this.namespace + (typeof delimiter === "undefined" ? ":" : delimiter) + namespace);
-      newDebug.log = this.log;
-      return newDebug;
-    }
-    function enable(namespaces) {
-      createDebug.save(namespaces);
-      createDebug.namespaces = namespaces;
-      createDebug.names = [];
-      createDebug.skips = [];
-      const split = (typeof namespaces === "string" ? namespaces : "").trim().replace(/\s+/g, ",").split(",").filter(Boolean);
-      for (const ns of split) {
-        if (ns[0] === "-") {
-          createDebug.skips.push(ns.slice(1));
-        } else {
-          createDebug.names.push(ns);
-        }
-      }
-    }
-    function matchesTemplate(search, template) {
-      let searchIndex = 0;
-      let templateIndex = 0;
-      let starIndex = -1;
-      let matchIndex = 0;
-      while (searchIndex < search.length) {
-        if (templateIndex < template.length && (template[templateIndex] === search[searchIndex] || template[templateIndex] === "*")) {
-          if (template[templateIndex] === "*") {
-            starIndex = templateIndex;
-            matchIndex = searchIndex;
-            templateIndex++;
-          } else {
-            searchIndex++;
-            templateIndex++;
-          }
-        } else if (starIndex !== -1) {
-          templateIndex = starIndex + 1;
-          matchIndex++;
-          searchIndex = matchIndex;
-        } else {
-          return false;
-        }
-      }
-      while (templateIndex < template.length && template[templateIndex] === "*") {
-        templateIndex++;
-      }
-      return templateIndex === template.length;
-    }
-    function disable() {
-      const namespaces = [
-        ...createDebug.names,
-        ...createDebug.skips.map((namespace) => "-" + namespace)
-      ].join(",");
-      createDebug.enable("");
-      return namespaces;
-    }
-    function enabled(name) {
-      for (const skip of createDebug.skips) {
-        if (matchesTemplate(name, skip)) {
-          return false;
-        }
-      }
-      for (const ns of createDebug.names) {
-        if (matchesTemplate(name, ns)) {
-          return true;
-        }
-      }
-      return false;
-    }
-    function coerce(val) {
-      if (val instanceof Error) {
-        return val.stack || val.message;
-      }
-      return val;
-    }
-    function destroy() {
-      console.warn("Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.");
-    }
-    createDebug.enable(createDebug.load());
-    return createDebug;
-  }
-  module.exports = setup;
-});
-
-// ../../node_modules/debug/src/browser.js
-var require_browser2 = __commonJS(function(exports, module) {
-  exports.formatArgs = formatArgs;
-  exports.save = save;
-  exports.load = load;
-  exports.useColors = useColors;
-  exports.storage = localstorage();
-  exports.destroy = (() => {
-    let warned = false;
-    return () => {
-      if (!warned) {
-        warned = true;
-        console.warn("Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.");
-      }
-    };
-  })();
-  exports.colors = [
-    "#0000CC",
-    "#0000FF",
-    "#0033CC",
-    "#0033FF",
-    "#0066CC",
-    "#0066FF",
-    "#0099CC",
-    "#0099FF",
-    "#00CC00",
-    "#00CC33",
-    "#00CC66",
-    "#00CC99",
-    "#00CCCC",
-    "#00CCFF",
-    "#3300CC",
-    "#3300FF",
-    "#3333CC",
-    "#3333FF",
-    "#3366CC",
-    "#3366FF",
-    "#3399CC",
-    "#3399FF",
-    "#33CC00",
-    "#33CC33",
-    "#33CC66",
-    "#33CC99",
-    "#33CCCC",
-    "#33CCFF",
-    "#6600CC",
-    "#6600FF",
-    "#6633CC",
-    "#6633FF",
-    "#66CC00",
-    "#66CC33",
-    "#9900CC",
-    "#9900FF",
-    "#9933CC",
-    "#9933FF",
-    "#99CC00",
-    "#99CC33",
-    "#CC0000",
-    "#CC0033",
-    "#CC0066",
-    "#CC0099",
-    "#CC00CC",
-    "#CC00FF",
-    "#CC3300",
-    "#CC3333",
-    "#CC3366",
-    "#CC3399",
-    "#CC33CC",
-    "#CC33FF",
-    "#CC6600",
-    "#CC6633",
-    "#CC9900",
-    "#CC9933",
-    "#CCCC00",
-    "#CCCC33",
-    "#FF0000",
-    "#FF0033",
-    "#FF0066",
-    "#FF0099",
-    "#FF00CC",
-    "#FF00FF",
-    "#FF3300",
-    "#FF3333",
-    "#FF3366",
-    "#FF3399",
-    "#FF33CC",
-    "#FF33FF",
-    "#FF6600",
-    "#FF6633",
-    "#FF9900",
-    "#FF9933",
-    "#FFCC00",
-    "#FFCC33"
-  ];
-  function useColors() {
-    if (typeof window !== "undefined" && window.process && (window.process.type === "renderer" || window.process.__nwjs)) {
-      return true;
-    }
-    if (typeof navigator !== "undefined" && navigator.userAgent && navigator.userAgent.toLowerCase().match(/(edge|trident)\/(\d+)/)) {
-      return false;
-    }
-    let m;
-    return typeof document !== "undefined" && document.documentElement && document.documentElement.style && document.documentElement.style.WebkitAppearance || typeof window !== "undefined" && window.console && (window.console.firebug || window.console.exception && window.console.table) || typeof navigator !== "undefined" && navigator.userAgent && (m = navigator.userAgent.toLowerCase().match(/firefox\/(\d+)/)) && parseInt(m[1], 10) >= 31 || typeof navigator !== "undefined" && navigator.userAgent && navigator.userAgent.toLowerCase().match(/applewebkit\/(\d+)/);
-  }
-  function formatArgs(args) {
-    args[0] = (this.useColors ? "%c" : "") + this.namespace + (this.useColors ? " %c" : " ") + args[0] + (this.useColors ? "%c " : " ") + "+" + module.exports.humanize(this.diff);
-    if (!this.useColors) {
-      return;
-    }
-    const c = "color: " + this.color;
-    args.splice(1, 0, c, "color: inherit");
-    let index = 0;
-    let lastC = 0;
-    args[0].replace(/%[a-zA-Z%]/g, (match) => {
-      if (match === "%%") {
-        return;
-      }
-      index++;
-      if (match === "%c") {
-        lastC = index;
-      }
-    });
-    args.splice(lastC, 0, c);
-  }
-  exports.log = console.debug || console.log || (() => {});
-  function save(namespaces) {
-    try {
-      if (namespaces) {
-        exports.storage.setItem("debug", namespaces);
-      } else {
-        exports.storage.removeItem("debug");
-      }
-    } catch (error) {}
-  }
-  function load() {
-    let r;
-    try {
-      r = exports.storage.getItem("debug") || exports.storage.getItem("DEBUG");
-    } catch (error) {}
-    if (!r && typeof process !== "undefined" && "env" in process) {
-      r = process.env.DEBUG;
-    }
-    return r;
-  }
-  function localstorage() {
-    try {
-      return localStorage;
-    } catch (error) {}
-  }
-  module.exports = require_common3()(exports);
-  var { formatters } = module.exports;
-  formatters.j = function(v) {
-    try {
-      return JSON.stringify(v);
-    } catch (error) {
-      return "[UnexpectedJSONParseError]: " + error.message;
-    }
-  };
-});
-
-// ../../node_modules/has-flag/index.js
-var require_has_flag2 = __commonJS(function(exports, module) {
-  module.exports = (flag, argv = process.argv) => {
-    const prefix = flag.startsWith("-") ? "" : flag.length === 1 ? "-" : "--";
-    const position = argv.indexOf(prefix + flag);
-    const terminatorPosition = argv.indexOf("--");
-    return position !== -1 && (terminatorPosition === -1 || position < terminatorPosition);
-  };
-});
-
-// ../../node_modules/supports-color/index.js
-var require_supports_color = __commonJS(function(exports, module) {
-  var os = __require("os");
-  var tty = __require("tty");
-  var hasFlag = require_has_flag2();
-  var { env } = process;
-  var flagForceColor;
-  if (hasFlag("no-color") || hasFlag("no-colors") || hasFlag("color=false") || hasFlag("color=never")) {
-    flagForceColor = 0;
-  } else if (hasFlag("color") || hasFlag("colors") || hasFlag("color=true") || hasFlag("color=always")) {
-    flagForceColor = 1;
-  }
-  function envForceColor() {
-    if ("FORCE_COLOR" in env) {
-      if (env.FORCE_COLOR === "true") {
-        return 1;
-      }
-      if (env.FORCE_COLOR === "false") {
-        return 0;
-      }
-      return env.FORCE_COLOR.length === 0 ? 1 : Math.min(Number.parseInt(env.FORCE_COLOR, 10), 3);
-    }
-  }
-  function translateLevel(level) {
-    if (level === 0) {
-      return false;
-    }
-    return {
-      level,
-      hasBasic: true,
-      has256: level >= 2,
-      has16m: level >= 3
-    };
-  }
-  function supportsColor(haveStream, { streamIsTTY, sniffFlags = true } = {}) {
-    const noFlagForceColor = envForceColor();
-    if (noFlagForceColor !== undefined) {
-      flagForceColor = noFlagForceColor;
-    }
-    const forceColor = sniffFlags ? flagForceColor : noFlagForceColor;
-    if (forceColor === 0) {
-      return 0;
-    }
-    if (sniffFlags) {
-      if (hasFlag("color=16m") || hasFlag("color=full") || hasFlag("color=truecolor")) {
-        return 3;
-      }
-      if (hasFlag("color=256")) {
-        return 2;
-      }
-    }
-    if (haveStream && !streamIsTTY && forceColor === undefined) {
-      return 0;
-    }
-    const min = forceColor || 0;
-    if (env.TERM === "dumb") {
-      return min;
-    }
-    if (process.platform === "win32") {
-      const osRelease = os.release().split(".");
-      if (Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) {
-        return Number(osRelease[2]) >= 14931 ? 3 : 2;
-      }
-      return 1;
-    }
-    if ("CI" in env) {
-      if (["TRAVIS", "CIRCLECI", "APPVEYOR", "GITLAB_CI", "GITHUB_ACTIONS", "BUILDKITE", "DRONE"].some((sign) => (sign in env)) || env.CI_NAME === "codeship") {
-        return 1;
-      }
-      return min;
-    }
-    if ("TEAMCITY_VERSION" in env) {
-      return /^(9\.(0*[1-9]\d*)\.|\d{2,}\.)/.test(env.TEAMCITY_VERSION) ? 1 : 0;
-    }
-    if (env.COLORTERM === "truecolor") {
-      return 3;
-    }
-    if ("TERM_PROGRAM" in env) {
-      const version = Number.parseInt((env.TERM_PROGRAM_VERSION || "").split(".")[0], 10);
-      switch (env.TERM_PROGRAM) {
-        case "iTerm.app":
-          return version >= 3 ? 3 : 2;
-        case "Apple_Terminal":
-          return 2;
-      }
-    }
-    if (/-256(color)?$/i.test(env.TERM)) {
-      return 2;
-    }
-    if (/^screen|^xterm|^vt100|^vt220|^rxvt|color|ansi|cygwin|linux/i.test(env.TERM)) {
-      return 1;
-    }
-    if ("COLORTERM" in env) {
-      return 1;
-    }
-    return min;
-  }
-  function getSupportLevel(stream, options = {}) {
-    const level = supportsColor(stream, {
-      streamIsTTY: stream && stream.isTTY,
-      ...options
-    });
-    return translateLevel(level);
-  }
-  module.exports = {
-    supportsColor: getSupportLevel,
-    stdout: getSupportLevel({ isTTY: tty.isatty(1) }),
-    stderr: getSupportLevel({ isTTY: tty.isatty(2) })
-  };
-});
-
-// ../../node_modules/debug/src/node.js
-var require_node4 = __commonJS(function(exports, module) {
-  var tty = __require("tty");
-  var util = __require("util");
-  exports.init = init;
-  exports.log = log;
-  exports.formatArgs = formatArgs;
-  exports.save = save;
-  exports.load = load;
-  exports.useColors = useColors;
-  exports.destroy = util.deprecate(() => {}, "Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.");
-  exports.colors = [6, 2, 3, 4, 5, 1];
-  try {
-    const supportsColor = require_supports_color();
-    if (supportsColor && (supportsColor.stderr || supportsColor).level >= 2) {
-      exports.colors = [
-        20,
-        21,
-        26,
-        27,
-        32,
-        33,
-        38,
-        39,
-        40,
-        41,
-        42,
-        43,
-        44,
-        45,
-        56,
-        57,
-        62,
-        63,
-        68,
-        69,
-        74,
-        75,
-        76,
-        77,
-        78,
-        79,
-        80,
-        81,
-        92,
-        93,
-        98,
-        99,
-        112,
-        113,
-        128,
-        129,
-        134,
-        135,
-        148,
-        149,
-        160,
-        161,
-        162,
-        163,
-        164,
-        165,
-        166,
-        167,
-        168,
-        169,
-        170,
-        171,
-        172,
-        173,
-        178,
-        179,
-        184,
-        185,
-        196,
-        197,
-        198,
-        199,
-        200,
-        201,
-        202,
-        203,
-        204,
-        205,
-        206,
-        207,
-        208,
-        209,
-        214,
-        215,
-        220,
-        221
-      ];
-    }
-  } catch (error) {}
-  exports.inspectOpts = Object.keys(process.env).filter((key) => {
-    return /^debug_/i.test(key);
-  }).reduce((obj, key) => {
-    const prop = key.substring(6).toLowerCase().replace(/_([a-z])/g, (_, k) => {
-      return k.toUpperCase();
-    });
-    let val = process.env[key];
-    if (/^(yes|on|true|enabled)$/i.test(val)) {
-      val = true;
-    } else if (/^(no|off|false|disabled)$/i.test(val)) {
-      val = false;
-    } else if (val === "null") {
-      val = null;
-    } else {
-      val = Number(val);
-    }
-    obj[prop] = val;
-    return obj;
-  }, {});
-  function useColors() {
-    return "colors" in exports.inspectOpts ? Boolean(exports.inspectOpts.colors) : tty.isatty(process.stderr.fd);
-  }
-  function formatArgs(args) {
-    const { namespace: name, useColors } = this;
-    if (useColors) {
-      const c = this.color;
-      const colorCode = "\x1B[3" + (c < 8 ? c : "8;5;" + c);
-      const prefix = `  ${colorCode};1m${name} \x1B[0m`;
-      args[0] = prefix + args[0].split(`
-`).join(`
-` + prefix);
-      args.push(colorCode + "m+" + module.exports.humanize(this.diff) + "\x1B[0m");
-    } else {
-      args[0] = getDate() + name + " " + args[0];
-    }
-  }
-  function getDate() {
-    if (exports.inspectOpts.hideDate) {
-      return "";
-    }
-    return new Date().toISOString() + " ";
-  }
-  function log(...args) {
-    return process.stderr.write(util.formatWithOptions(exports.inspectOpts, ...args) + `
-`);
-  }
-  function save(namespaces) {
-    if (namespaces) {
-      process.env.DEBUG = namespaces;
-    } else {
-      delete process.env.DEBUG;
-    }
-  }
-  function load() {
-    return process.env.DEBUG;
-  }
-  function init(debug) {
-    debug.inspectOpts = {};
-    const keys = Object.keys(exports.inspectOpts);
-    for (let i = 0;i < keys.length; i++) {
-      debug.inspectOpts[keys[i]] = exports.inspectOpts[keys[i]];
-    }
-  }
-  module.exports = require_common3()(exports);
-  var { formatters } = module.exports;
-  formatters.o = function(v) {
-    this.inspectOpts.colors = this.useColors;
-    return util.inspect(v, this.inspectOpts).split(`
-`).map((str) => str.trim()).join(" ");
-  };
-  formatters.O = function(v) {
-    this.inspectOpts.colors = this.useColors;
-    return util.inspect(v, this.inspectOpts);
-  };
-});
-
-// ../../node_modules/debug/src/index.js
-var require_src2 = __commonJS(function(exports, module) {
-  if (typeof process === "undefined" || process.type === "renderer" || false || process.__nwjs) {
-    module.exports = require_browser2();
-  } else {
-    module.exports = require_node4();
-  }
-});
-
 // ../../node_modules/ioredis/built/utils/debug.js
 var require_debug2 = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.genRedactedString = exports.getStringValue = exports.MAX_ARGUMENT_LENGTH = undefined;
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var MAX_ARGUMENT_LENGTH = 200;
   exports.MAX_ARGUMENT_LENGTH = MAX_ARGUMENT_LENGTH;
   var NAMESPACE_PREFIX = "ioredis";
@@ -51010,7 +51123,7 @@ var __create3, __getProtoOf3, __defProp3, __getOwnPropNames3, __hasOwnProp3, __t
   if (canCache)
     cache.set(mod, to);
   return to;
-}, __commonJS3 = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports), __require3, require_ms4, require_common4, require_browser3, require_node5, require_src3, require_commands3, require_built7, require_utils5, require_built22, require_old3, require_modern4, require_redis_errors3, require_lib4, require_defaults5, require_isArguments3, require_lodash4, require_debug3, require_TLSProfiles3, require_utils23, require_argumentParsers3, require_Command3, require_ClusterAllFailedError3, require_ScanStream3, require_autoPipelining3, require_Script3, require_Commander3, require_Pipeline3, require_tracing3, require_transaction3, require_applyMixin3, require_ClusterOptions3, require_util5, require_ClusterSubscriber3, require_ConnectionPool3, require_denque3, require_DelayQueue3, require_ShardedSubscriber3, require_ClusterSubscriberGroup3, require_cluster3, require_AbstractConnector3, require_StandaloneConnector3, require_SentinelIterator3, require_FailoverDetector3, require_SentinelConnector3, require_connectors3, require_MaxRetriesPerRequestError3, require_errors7, require_parser3, require_SubscriptionSet3, require_DataHandler3, require_event_handler3, require_RedisOptions3, require_Redis3, require_built32, import_debug2, import_ioredis2, ALGORITHM2 = "aes-256-gcm", IV_LENGTH2 = 16, AUTH_TAG_LENGTH = 16, log2, SecureStoreError, ConnectionError, EncryptionError, ValidationError;
+}, __commonJS3 = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports), __require3, require_ms4, require_common4, require_browser3, require_node5, require_src3, require_commands3, require_built7, require_utils5, require_built22, require_old3, require_modern4, require_redis_errors3, require_lib4, require_defaults5, require_isArguments3, require_lodash4, require_debug3, require_TLSProfiles3, require_utils23, require_argumentParsers3, require_Command3, require_ClusterAllFailedError3, require_ScanStream3, require_autoPipelining3, require_Script3, require_Commander3, require_Pipeline3, require_tracing3, require_transaction3, require_applyMixin3, require_ClusterOptions3, require_util5, require_ClusterSubscriber3, require_ConnectionPool3, require_denque3, require_DelayQueue3, require_ShardedSubscriber3, require_ClusterSubscriberGroup3, require_cluster3, require_AbstractConnector3, require_StandaloneConnector3, require_SentinelIterator3, require_FailoverDetector3, require_SentinelConnector3, require_connectors3, require_MaxRetriesPerRequestError3, require_errors7, require_parser3, require_SubscriptionSet3, require_DataHandler3, require_event_handler3, require_RedisOptions3, require_Redis3, require_built32, import_debug3, import_ioredis2, ALGORITHM2 = "aes-256-gcm", IV_LENGTH2 = 16, AUTH_TAG_LENGTH = 16, log2, SecureStoreError, ConnectionError, EncryptionError, ValidationError;
 var init_dist = __esm(() => {
   __create3 = Object.create;
   __getProtoOf3 = Object.getPrototypeOf;
@@ -61121,9 +61234,9 @@ $` + Buffer.byteLength(this.name) + `\r
     }
     exports.print = print;
   });
-  import_debug2 = __toESM3(require_src3(), 1);
+  import_debug3 = __toESM3(require_src3(), 1);
   import_ioredis2 = __toESM3(require_built32(), 1);
-  log2 = import_debug2.default("secure-store-redis");
+  log2 = import_debug3.default("secure-store-redis");
   SecureStoreError = class SecureStoreError extends Error {
     code;
     constructor(message, code) {
@@ -65769,7 +65882,7 @@ var require_lodash7 = __commonJS(function(exports) {
 var require_debug4 = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.genRedactedString = exports.getStringValue = exports.MAX_ARGUMENT_LENGTH = undefined;
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var MAX_ARGUMENT_LENGTH = 200;
   exports.MAX_ARGUMENT_LENGTH = MAX_ARGUMENT_LENGTH;
   var NAMESPACE_PREFIX = "ioredis";
@@ -98626,6 +98739,10 @@ function createCorsMiddleware(getConfig) {
   const allowedOrigins = parseCorsOrigins(getConfig("sockethub:cors:origin"));
   return (req, res, next) => {
     const allowOrigin = resolveAllowedOrigin(allowedOrigins, req.headers.origin);
+    if (req.headers.origin !== undefined && allowOrigin === undefined) {
+      res.status(403).json({ error: "origin not allowed" });
+      return;
+    }
     if (allowOrigin) {
       res.setHeader("Access-Control-Allow-Origin", allowOrigin);
       if (allowOrigin !== "*") {
@@ -98975,7 +99092,7 @@ var require_package2 = __commonJS(function(exports, module) {
   module.exports = {
     name: "@sockethub/server",
     description: "A polyglot messaging service, server libraries",
-    version: "5.0.0-beta.0",
+    version: "5.0.0-beta.2",
     type: "module",
     private: false,
     author: "Nick Jennings <nick@silverbucket.net>",
@@ -99000,7 +99117,7 @@ var require_package2 = __commonJS(function(exports, module) {
     bin: "bin/sockethub",
     preferGlobal: true,
     engines: {
-      node: ">=20"
+      node: ">=20.19"
     },
     keywords: [
       "sockethub",
@@ -99027,17 +99144,19 @@ var require_package2 = __commonJS(function(exports, module) {
     dependencies: {
       "@sentry/node": "^10.36.0",
       "@sentry/profiling-node": "10.36.0",
-      "@sockethub/client": "^5.0.0-beta.0",
-      "@sockethub/data-layer": "^1.0.0-beta.0",
-      "@sockethub/logger": "^1.0.0-beta.0",
-      "@sockethub/schemas": "^3.0.0-beta.0",
-      "@sockethub/util": "^1.0.0-beta.0",
+      "@sockethub/client": "^5.0.0-beta.2",
+      "@sockethub/data-layer": "^1.0.0-beta.2",
+      "@sockethub/logger": "^1.0.0-beta.2",
+      "@sockethub/schemas": "^3.0.0-beta.2",
+      "@sockethub/util": "^1.0.0-beta.2",
       chalk: "^5.6.2",
       convict: "^6.2.5",
+      debug: "^4.4.3",
       ejs: "^3.1.10",
       express: "^5.1.0",
       "express-rate-limit": "^8.2.1",
       jquery: "^3.7.1",
+      "proxy-addr": "^2.0.7",
       "rate-limit-redis": "^4.2.0",
       "socket.io": "^4.8.3"
     },
@@ -99056,22 +99175,26 @@ var require_package2 = __commonJS(function(exports, module) {
       "@types/debug": "^4.1.12",
       "@types/express": "^5.0.0",
       "@types/jquery": "^3.5.33",
+      "@types/proxy-addr": "^2.0.3",
       "@types/sinon": "^17.0.4",
       jaribu: "^2.2.3",
       sinon: "^17.0.2",
       "web-streams-polyfill": "^3.3.3"
     },
     optionalDependencies: {
-      "@sockethub/examples": "^1.0.0-beta.0",
-      "@sockethub/platform-caldav": "^1.0.0-beta.0",
-      "@sockethub/platform-carddav": "^1.0.0-beta.0",
-      "@sockethub/platform-dummy": "^3.0.0-beta.0",
-      "@sockethub/platform-feeds": "^4.0.0-beta.0",
-      "@sockethub/platform-irc": "^4.0.0-beta.0",
-      "@sockethub/platform-metadata": "^1.0.1-beta.0",
-      "@sockethub/platform-xmpp": "^5.0.0-beta.0"
-    },
-    gitHead: "75002ae8f15d7679bd58a9327f5a1d7eeaffa237",
+      "@sockethub/examples": "^1.0.0-beta.2",
+      "@sockethub/platform-caldav": "^1.0.0-beta.2",
+      "@sockethub/platform-carddav": "^1.0.0-beta.2",
+      "@sockethub/platform-dummy": "^3.0.0-beta.2",
+      "@sockethub/platform-email": "^1.0.0-beta.2",
+      "@sockethub/platform-feeds": "^4.0.0-beta.2",
+      "@sockethub/platform-instagram": "^1.0.0-beta.2",
+      "@sockethub/platform-irc": "^4.0.0-beta.2",
+      "@sockethub/platform-messenger": "^1.0.0-beta.2",
+      "@sockethub/platform-metadata": "^1.0.1-beta.2",
+      "@sockethub/platform-xmpp": "^5.0.0-beta.2"
+    },
+    gitHead: "1f74d4e07311496f0acc021855137bc197d79eab",
     types: "./dist/index.d.ts"
   };
 });
@@ -100015,7 +100138,7 @@ var require_safer = __commonJS(function(exports, module) {
   module.exports = safer;
 });
 
-// ../../node_modules/iconv-lite/lib/bom-handling.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/lib/bom-handling.js
 var require_bom_handling = __commonJS(function(exports) {
   var BOMChar = "\uFEFF";
   exports.PrependBOM = PrependBOMWrapper;
@@ -100058,7 +100181,7 @@ var require_bom_handling = __commonJS(function(exports) {
   };
 });
 
-// ../../node_modules/iconv-lite/lib/helpers/merge-exports.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/lib/helpers/merge-exports.js
 var require_merge_exports = __commonJS(function(exports, module) {
   var hasOwn = typeof Object.hasOwn === "undefined" ? Function.call.bind(Object.prototype.hasOwnProperty) : Object.hasOwn;
   function mergeModules(target, module2) {
@@ -100071,7 +100194,7 @@ var require_merge_exports = __commonJS(function(exports, module) {
   module.exports = mergeModules;
 });
 
-// ../../node_modules/iconv-lite/encodings/internal.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/internal.js
 var require_internal = __commonJS(function(exports, module) {
   var Buffer2 = require_safer().Buffer;
   module.exports = {
@@ -100244,7 +100367,7 @@ var require_internal = __commonJS(function(exports, module) {
   };
 });
 
-// ../../node_modules/iconv-lite/encodings/utf32.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/utf32.js
 var require_utf32 = __commonJS(function(exports) {
   var Buffer2 = require_safer().Buffer;
   exports._utf32 = Utf32Codec;
@@ -100478,7 +100601,7 @@ var require_utf32 = __commonJS(function(exports) {
   }
 });
 
-// ../../node_modules/iconv-lite/encodings/utf16.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/utf16.js
 var require_utf16 = __commonJS(function(exports) {
   var Buffer2 = require_safer().Buffer;
   exports.utf16be = Utf16BECodec;
@@ -100621,7 +100744,7 @@ var require_utf16 = __commonJS(function(exports) {
   }
 });
 
-// ../../node_modules/iconv-lite/encodings/utf7.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/utf7.js
 var require_utf7 = __commonJS(function(exports) {
   var Buffer2 = require_safer().Buffer;
   exports.utf7 = Utf7Codec;
@@ -100835,7 +100958,7 @@ var require_utf7 = __commonJS(function(exports) {
   };
 });
 
-// ../../node_modules/iconv-lite/encodings/sbcs-codec.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/sbcs-codec.js
 var require_sbcs_codec = __commonJS(function(exports) {
   var Buffer2 = require_safer().Buffer;
   exports._sbcs = SBCSCodec;
@@ -100892,7 +101015,7 @@ var require_sbcs_codec = __commonJS(function(exports) {
   SBCSDecoder.prototype.end = function() {};
 });
 
-// ../../node_modules/iconv-lite/encodings/sbcs-data.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/sbcs-data.js
 var require_sbcs_data = __commonJS(function(exports, module) {
   module.exports = {
     10029: "maccenteuro",
@@ -101040,7 +101163,7 @@ var require_sbcs_data = __commonJS(function(exports, module) {
   };
 });
 
-// ../../node_modules/iconv-lite/encodings/sbcs-data-generated.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/sbcs-data-generated.js
 var require_sbcs_data_generated = __commonJS(function(exports, module) {
   module.exports = {
     "437": "cp437",
@@ -101497,7 +101620,7 @@ var require_sbcs_data_generated = __commonJS(function(exports, module) {
   };
 });
 
-// ../../node_modules/iconv-lite/encodings/dbcs-codec.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/dbcs-codec.js
 var require_dbcs_codec = __commonJS(function(exports) {
   var Buffer2 = require_safer().Buffer;
   exports._dbcs = DBCSCodec;
@@ -101955,7 +102078,7 @@ var require_dbcs_codec = __commonJS(function(exports) {
   }
 });
 
-// ../../node_modules/iconv-lite/encodings/tables/shiftjis.json
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/tables/shiftjis.json
 var require_shiftjis = __commonJS(function(exports, module) {
   module.exports = [
     ["0", "\x00", 128],
@@ -102084,7 +102207,7 @@ var require_shiftjis = __commonJS(function(exports, module) {
   ];
 });
 
-// ../../node_modules/iconv-lite/encodings/tables/eucjp.json
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/tables/eucjp.json
 var require_eucjp = __commonJS(function(exports, module) {
   module.exports = [
     ["0", "\x00", 127],
@@ -102270,7 +102393,7 @@ var require_eucjp = __commonJS(function(exports, module) {
   ];
 });
 
-// ../../node_modules/iconv-lite/encodings/tables/cp936.json
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/tables/cp936.json
 var require_cp936 = __commonJS(function(exports, module) {
   module.exports = [
     ["0", "\x00", 127, "€"],
@@ -102538,7 +102661,7 @@ var require_cp936 = __commonJS(function(exports, module) {
   ];
 });
 
-// ../../node_modules/iconv-lite/encodings/tables/gbk-added.json
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/tables/gbk-added.json
 var require_gbk_added = __commonJS(function(exports, module) {
   module.exports = [
     ["a140", "", 62],
@@ -102598,12 +102721,12 @@ var require_gbk_added = __commonJS(function(exports, module) {
   ];
 });
 
-// ../../node_modules/iconv-lite/encodings/tables/gb18030-ranges.json
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/tables/gb18030-ranges.json
 var require_gb18030_ranges = __commonJS(function(exports, module) {
   module.exports = { uChars: [128, 165, 169, 178, 184, 216, 226, 235, 238, 244, 248, 251, 253, 258, 276, 284, 300, 325, 329, 334, 364, 463, 465, 467, 469, 471, 473, 475, 477, 506, 594, 610, 712, 716, 730, 930, 938, 962, 970, 1026, 1104, 1106, 8209, 8215, 8218, 8222, 8231, 8241, 8244, 8246, 8252, 8365, 8452, 8454, 8458, 8471, 8482, 8556, 8570, 8596, 8602, 8713, 8720, 8722, 8726, 8731, 8737, 8740, 8742, 8748, 8751, 8760, 8766, 8777, 8781, 8787, 8802, 8808, 8816, 8854, 8858, 8870, 8896, 8979, 9322, 9372, 9548, 9588, 9616, 9622, 9634, 9652, 9662, 9672, 9676, 9680, 9702, 9735, 9738, 9793, 9795, 11906, 11909, 11913, 11917, 11928, 11944, 11947, 11951, 11956, 11960, 11964, 11979, 12284, 12292, 12312, 12319, 12330, 12351, 12436, 12447, 12535, 12543, 12586, 12842, 12850, 12964, 13200, 13215, 13218, 13253, 13263, 13267, 13270, 13384, 13428, 13727, 13839, 13851, 14617, 14703, 14801, 14816, 14964, 15183, 15471, 15585, 16471, 16736, 17208, 17325, 17330, 17374, 17623, 17997, 18018, 18212, 18218, 18301, 18318, 18760, 18811, 18814, 18820, 18823, 18844, 18848, 18872, 19576, 19620, 19738, 19887, 40870, 59244, 59336, 59367, 59413, 59417, 59423, 59431, 59437, 59443, 59452, 59460, 59478, 59493, 63789, 63866, 63894, 63976, 63986, 64016, 64018, 64021, 64025, 64034, 64037, 64042, 65074, 65093, 65107, 65112, 65127, 65132, 65375, 65510, 65536], gbChars: [0, 36, 38, 45, 50, 81, 89, 95, 96, 100, 103, 104, 105, 109, 126, 133, 148, 172, 175, 179, 208, 306, 307, 308, 309, 310, 311, 312, 313, 341, 428, 443, 544, 545, 558, 741, 742, 749, 750, 805, 819, 820, 7922, 7924, 7925, 7927, 7934, 7943, 7944, 7945, 7950, 8062, 8148, 8149, 8152, 8164, 8174, 8236, 8240, 8262, 8264, 8374, 8380, 8381, 8384, 8388, 8390, 8392, 8393, 8394, 8396, 8401, 8406, 8416, 8419, 8424, 8437, 8439, 8445, 8482, 8485, 8496, 8521, 8603, 8936, 8946, 9046, 9050, 9063, 9066, 9076, 9092, 9100, 9108, 9111, 9113, 9131, 9162, 9164, 9218, 9219, 11329, 11331, 11334, 11336, 11346, 11361, 11363, 11366, 11370, 11372, 11375, 11389, 11682, 11686, 11687, 11692, 11694, 11714, 11716, 11723, 11725, 11730, 11736, 11982, 11989, 12102, 12336, 12348, 12350, 12384, 12393, 12395, 12397, 12510, 12553, 12851, 12962, 12973, 13738, 13823, 13919, 13933, 14080, 14298, 14585, 14698, 15583, 15847, 16318, 16434, 16438, 16481, 16729, 17102, 17122, 17315, 17320, 17402, 17418, 17859, 17909, 17911, 17915, 17916, 17936, 17939, 17961, 18664, 18703, 18814, 18962, 19043, 33469, 33470, 33471, 33484, 33485, 33490, 33497, 33501, 33505, 33513, 33520, 33536, 33550, 37845, 37921, 37948, 38029, 38038, 38064, 38065, 38066, 38069, 38075, 38076, 38078, 39108, 39109, 39113, 39114, 39115, 39116, 39265, 39394, 189000] };
 });
 
-// ../../node_modules/iconv-lite/encodings/tables/cp949.json
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/tables/cp949.json
 var require_cp949 = __commonJS(function(exports, module) {
   module.exports = [
     ["0", "\x00", 127],
@@ -102880,7 +103003,7 @@ var require_cp949 = __commonJS(function(exports, module) {
   ];
 });
 
-// ../../node_modules/iconv-lite/encodings/tables/cp950.json
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/tables/cp950.json
 var require_cp950 = __commonJS(function(exports, module) {
   module.exports = [
     ["0", "\x00", 127],
@@ -103061,7 +103184,7 @@ var require_cp950 = __commonJS(function(exports, module) {
   ];
 });
 
-// ../../node_modules/iconv-lite/encodings/tables/big5-added.json
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/tables/big5-added.json
 var require_big5_added = __commonJS(function(exports, module) {
   module.exports = [
     ["8740", "䏰䰲䘃䖦䕸𧉧䵷䖳𧲱䳢𧳅㮕䜶䝄䱇䱀𤊿𣘗𧍒𦺋𧃒䱗𪍑䝏䗚䲅𧱬䴇䪤䚡𦬣爥𥩔𡩣𣸆𣽡晍囻"],
@@ -103187,7 +103310,7 @@ var require_big5_added = __commonJS(function(exports, module) {
   ];
 });
 
-// ../../node_modules/iconv-lite/encodings/dbcs-data.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/dbcs-data.js
 var require_dbcs_data = __commonJS(function(exports, module) {
   module.exports = {
     shiftjis: {
@@ -103358,7 +103481,7 @@ var require_dbcs_data = __commonJS(function(exports, module) {
   };
 });
 
-// ../../node_modules/iconv-lite/encodings/index.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/index.js
 var require_encodings = __commonJS(function(exports, module) {
   var mergeModules = require_merge_exports();
   var modules = [
@@ -103380,7 +103503,7 @@ var require_encodings = __commonJS(function(exports, module) {
   var i;
 });
 
-// ../../node_modules/iconv-lite/lib/streams.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/lib/streams.js
 var require_streams = __commonJS(function(exports, module) {
   var Buffer2 = require_safer().Buffer;
   module.exports = function(streamModule) {
@@ -103478,7 +103601,7 @@ var require_streams = __commonJS(function(exports, module) {
   };
 });
 
-// ../../node_modules/iconv-lite/lib/index.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/lib/index.js
 var require_lib6 = __commonJS(function(exports, module) {
   var Buffer2 = require_safer().Buffer;
   var bomHandling = require_bom_handling();
@@ -114153,7 +114276,7 @@ var require_json2 = __commonJS(function(exports, module) {
    * Copyright(c) 2014-2015 Douglas Christopher Wilson
    * MIT Licensed
    */
-  var debug = require_src2()("body-parser:json");
+  var debug = require_src()("body-parser:json");
   var read = require_read();
   var { normalizeOptions } = require_utils8();
   module.exports = json;
@@ -114253,7 +114376,7 @@ var require_raw = __commonJS(function(exports, module) {
    * Copyright(c) 2014-2015 Douglas Christopher Wilson
    * MIT Licensed
    */
-  var debug = require_src2()("body-parser:raw");
+  var debug = require_src()("body-parser:raw");
   var read = require_read();
   var { normalizeOptions, passthrough } = require_utils8();
   module.exports = raw;
@@ -114276,7 +114399,7 @@ var require_text = __commonJS(function(exports, module) {
    * Copyright(c) 2014-2015 Douglas Christopher Wilson
    * MIT Licensed
    */
-  var debug = require_src2()("body-parser:text");
+  var debug = require_src()("body-parser:text");
   var read = require_read();
   var { normalizeOptions, passthrough } = require_utils8();
   module.exports = text;
@@ -116642,7 +116765,7 @@ var require_urlencoded = __commonJS(function(exports, module) {
    * MIT Licensed
    */
   var createError = require_http_errors();
-  var debug = require_src2()("body-parser:urlencoded");
+  var debug = require_src()("body-parser:urlencoded");
   var read = require_read();
   var qs = require_lib7();
   var { normalizeOptions } = require_utils8();
@@ -116916,7 +117039,7 @@ var require_finalhandler = __commonJS(function(exports, module) {
    * Copyright(c) 2014-2022 Douglas Christopher Wilson
    * MIT Licensed
    */
-  var debug = require_src2()("finalhandler");
+  var debug = require_src()("finalhandler");
   var encodeUrl = require_encodeurl();
   var escapeHtml = require_escape_html();
   var onFinished = require_on_finished();
@@ -117058,7 +117181,7 @@ var require_view = __commonJS(function(exports, module) {
    * Copyright(c) 2014-2015 Douglas Christopher Wilson
    * MIT Licensed
    */
-  var debug = require_src2()("express:view");
+  var debug = require_src()("express:view");
   var path = __require("node:path");
   var fs = __require("node:fs");
   var dirname = path.dirname;
@@ -119618,7 +119741,7 @@ var require_layer = __commonJS(function(exports, module) {
    */
   var isPromise = require_is_promise();
   var pathRegexp = require_dist4();
-  var debug = require_src2()("router:layer");
+  var debug = require_src()("router:layer");
   var deprecate = require_depd()("router");
   var TRAILING_SLASH_REGEXP = /\/+$/;
   var MATCHING_GROUP_REGEXP = /\((?:\?<(.*?)>)?(?!\?)/g;
@@ -119769,7 +119892,7 @@ var require_route = __commonJS(function(exports, module) {
    * Copyright(c) 2014-2022 Douglas Christopher Wilson
    * MIT Licensed
    */
-  var debug = require_src2()("router:route");
+  var debug = require_src()("router:route");
   var Layer = require_layer();
   var { METHODS } = __require("node:http");
   var slice = Array.prototype.slice;
@@ -119897,7 +120020,7 @@ var require_router = __commonJS(function(exports, module) {
   var { METHODS } = __require("node:http");
   var parseUrl = require_parseurl();
   var Route = require_route();
-  var debug = require_src2()("router");
+  var debug = require_src()("router");
   var deprecate = require_depd()("router");
   var slice = Array.prototype.slice;
   var flatten = Array.prototype.flat;
@@ -120295,7 +120418,7 @@ var require_application = __commonJS(function(exports, module) {
    * MIT Licensed
    */
   var finalhandler = require_finalhandler();
-  var debug = require_src2()("express:application");
+  var debug = require_src()("express:application");
   var View = require_view();
   var http = __require("node:http");
   var methods = require_utils11().methods;
@@ -121875,7 +121998,7 @@ var require_send = __commonJS(function(exports, module) {
    * MIT Licensed
    */
   var createError = require_http_errors();
-  var debug = require_src2()("send");
+  var debug = require_src()("send");
   var encodeUrl = require_encodeurl();
   var escapeHtml = require_escape_html();
   var etag = require_etag();
@@ -133084,7 +133207,7 @@ var require_transport = __commonJS(function(exports) {
   var events_1 = __require("events");
   var parser_v4 = require_cjs3();
   var parser_v3 = require_parser_v3();
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var debug = (0, debug_1.default)("engine:transport");
   function noop() {}
 
@@ -142344,7 +142467,7 @@ var require_polling = __commonJS(function(exports) {
   var transport_1 = require_transport();
   var zlib_1 = __require("zlib");
   var accepts = require_accepts3();
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var debug = (0, debug_1.default)("engine:polling");
   var compressionMethods = {
     gzip: zlib_1.createGzip,
@@ -142627,7 +142750,7 @@ var require_websocket = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebSocket = undefined;
   var transport_1 = require_transport();
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var debug = (0, debug_1.default)("engine:ws");
 
   class WebSocket extends transport_1.Transport {
@@ -142700,7 +142823,7 @@ var require_webtransport = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebTransport = undefined;
   var transport_1 = require_transport();
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var engine_io_parser_1 = require_cjs3();
   var debug = (0, debug_1.default)("engine:webtransport");
 
@@ -142784,7 +142907,7 @@ var require_socket = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.Socket = undefined;
   var events_1 = __require("events");
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var timers_1 = __require("timers");
   var debug = (0, debug_1.default)("engine:socket");
 
@@ -146709,7 +146832,7 @@ var require_server = __commonJS(function(exports) {
   var transports_1 = require_transports2();
   var events_1 = __require("events");
   var socket_1 = require_socket();
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var cookie_1 = require_cookie2();
   var ws_1 = require_ws();
   var webtransport_1 = require_webtransport();
@@ -147572,7 +147695,7 @@ var require_polling2 = __commonJS(function(exports) {
   var transport_1 = require_transport();
   var zlib_1 = __require("zlib");
   var accepts = require_accepts3();
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var debug = (0, debug_1.default)("engine:polling");
   var compressionMethods = {
     gzip: zlib_1.createGzip,
@@ -147843,7 +147966,7 @@ var require_websocket3 = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.WebSocket = undefined;
   var transport_1 = require_transport();
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var debug = (0, debug_1.default)("engine:ws");
 
   class WebSocket extends transport_1.Transport {
@@ -147905,7 +148028,7 @@ var require_transports_uws = __commonJS(function(exports) {
 var require_userver = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.uServer = undefined;
-  var debug_1 = require_src2();
+  var debug_1 = require_src();
   var server_1 = require_server();
   var transports_uws_1 = require_transports_uws();
   var debug = (0, debug_1.default)("engine:uws");
@@ -149230,7 +149353,7 @@ var require_client = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.Client = undefined;
   var socket_io_parser_1 = require_cjs5();
-  var debug_1 = __importDefault(require_src2());
+  var debug_1 = __importDefault(require_src());
   var debug = (0, debug_1.default)("socket.io:client");
 
   class Client {
@@ -149649,7 +149772,7 @@ var require_socket2 = __commonJS(function(exports) {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.Socket = undefined;
   var socket_io_parser_1 = require_cjs5();
-  var debug_1 = __importDefault(require_src2());
+  var debug_1 = __importDefault(require_src());
   var typed_events_1 = require_typed_events();
   var base64id_1 = __importDefault(require_base64id());
   var broadcast_operator_1 = require_broadcast_operator();
@@ -150078,7 +150201,7 @@ var require_namespace = __commonJS(function(exports) {
   exports.Namespace = exports.RESERVED_EVENTS = undefined;
   var socket_1 = require_socket2();
   var typed_events_1 = require_typed_events();
-  var debug_1 = __importDefault(require_src2());
+  var debug_1 = __importDefault(require_src());
   var broadcast_operator_1 = require_broadcast_operator();
   var debug = (0, debug_1.default)("socket.io:namespace");
   exports.RESERVED_EVENTS = new Set(["connect", "connection", "new_namespace"]);
@@ -154595,7 +154718,7 @@ var require_parent_namespace = __commonJS(function(exports) {
   exports.ParentNamespace = undefined;
   var namespace_1 = require_namespace();
   var socket_io_adapter_1 = require_dist5();
-  var debug_1 = __importDefault(require_src2());
+  var debug_1 = __importDefault(require_src());
   var debug = (0, debug_1.default)("socket.io:parent-namespace");
 
   class ParentNamespace extends namespace_1.Namespace {
@@ -154662,7 +154785,7 @@ var require_uws = __commonJS(function(exports) {
   exports.serveFile = serveFile;
   var socket_io_adapter_1 = require_dist5();
   var fs_1 = __require("fs");
-  var debug_1 = __importDefault(require_src2());
+  var debug_1 = __importDefault(require_src());
   var debug = (0, debug_1.default)("socket.io:adapter-uws");
   var SEPARATOR = "\x1F";
   var { addAll, del, broadcast } = socket_io_adapter_1.Adapter.prototype;
@@ -154925,7 +155048,7 @@ var require_dist6 = __commonJS(function(exports, module) {
   var parent_namespace_1 = require_parent_namespace();
   var socket_io_adapter_1 = require_dist5();
   var parser = __importStar(require_cjs5());
-  var debug_1 = __importDefault(require_src2());
+  var debug_1 = __importDefault(require_src());
   var socket_1 = require_socket2();
   Object.defineProperty(exports, "Socket", { enumerable: true, get: function() {
     return socket_1.Socket;
@@ -155368,6 +155491,30 @@ var init_routes = __esm(() => {
 });
 
 // src/trust-proxy.ts
+function configuredProxyHeader(proxyHeader) {
+  return typeof proxyHeader === "string" && proxyHeader.trim() !== "" ? proxyHeader.trim().toLowerCase() : EXPRESS_FORWARDED_HEADER;
+}
+function getRequestClientIp(request, app) {
+  return normalizeIp(import_proxy_addr.default(request, app.get("trust proxy fn")));
+}
+function resolveSocketClientIp(request, app, reconnectIpSource, proxyHeader, fallbackAddress) {
+  const header = configuredProxyHeader(proxyHeader);
+  if (reconnectIpSource === "proxy" && header !== EXPRESS_FORWARDED_HEADER) {
+    const value = request.headers[header];
+    const raw = Array.isArray(value) ? value[0] : value;
+    if (typeof raw === "string") {
+      const normalized = normalizeIp(raw);
+      if (normalized) {
+        return normalized;
+      }
+    }
+    return normalizeIp(fallbackAddress);
+  }
+  if (app) {
+    return getRequestClientIp(request, app);
+  }
+  return normalizeIp(fallbackAddress);
+}
 function normalize(value) {
   if (typeof value === "boolean" || typeof value === "number") {
     return value;
@@ -155392,10 +155539,14 @@ function resolveTrustProxy(configured, reconnectIpSource, proxyHeader) {
   if (normalized !== false || reconnectIpSource !== "proxy") {
     return normalized;
   }
-  const header = typeof proxyHeader === "string" && proxyHeader.trim() !== "" ? proxyHeader.trim().toLowerCase() : EXPRESS_FORWARDED_HEADER;
+  const header = configuredProxyHeader(proxyHeader);
   return header === EXPRESS_FORWARDED_HEADER ? 1 : false;
 }
-var EXPRESS_FORWARDED_HEADER = "x-forwarded-for";
+var import_proxy_addr, EXPRESS_FORWARDED_HEADER = "x-forwarded-for";
+var init_trust_proxy = __esm(() => {
+  init_connection_scope();
+  import_proxy_addr = __toESM(require_proxy_addr(), 1);
+});
 
 // src/listener.ts
 import { existsSync as existsSync2 } from "node:fs";
@@ -155408,17 +155559,27 @@ class Listener {
   io;
   http;
   start() {
+    disablePayloadDebug();
     const app = Listener.initExpress();
     this.app = app;
     this.http = new HTTP.Server(app);
+    const allowedOrigins = Listener.corsOrigin();
     this.io = new Server(this.http, {
       path: config_default.get("sockethub:path"),
       maxHttpBufferSize: config_default.get("sockethub:maxPayloadBytes"),
       cors: {
-        origin: Listener.corsOrigin(),
+        origin: allowedOrigins,
         methods: ["GET", "POST"]
       }
     });
+    this.io.engine.use((req, _res, next) => {
+      const origin = req.headers.origin;
+      if (origin !== undefined && resolveAllowedOrigin(allowedOrigins, origin) === undefined) {
+        next(new Error("origin not allowed"));
+        return;
+      }
+      next();
+    });
     routes_default.setup(app);
     if (config_default.get("examples")) {
       this.addExamplesRoutes(app);
@@ -155499,7 +155660,6 @@ class Listener {
       log6.info(`trusting proxy headers (trust proxy: ${trustProxy})`);
     }
     app.set("view engine", "ejs");
-    app.use(import_express.default.urlencoded({ extended: true }));
     return app;
   }
   getApp() {
@@ -155519,8 +155679,10 @@ var init_listener = __esm(() => {
   init_wrapper();
   init_config();
   init_cors();
+  init_payload_debug();
   init_routes();
   init_server_info();
+  init_trust_proxy();
   init_version();
   import_express = __toESM(require_express(), 1);
   require3 = createRequire5(import.meta.url);
@@ -155552,9 +155714,12 @@ function fingerprint(credentials) {
   if (!object) {
     return null;
   }
-  const password = object.password;
-  const token = object.token;
-  const hasSecret = typeof password === "string" && password.length > 0 || typeof token === "string" && token.length > 0;
+  const hasSecret = [object, object.imap, object.smtp].some((candidate) => {
+    if (!candidate || typeof candidate !== "object")
+      return false;
+    const { password, token } = candidate;
+    return typeof password === "string" && password.length > 0 || typeof token === "string" && token.length > 0;
+  });
   if (!hasSecret) {
     return null;
   }
@@ -155602,10 +155767,21 @@ async function resolveConnectionScope(platform, actorId, request = {}) {
     if (pending) {
       const resolved = await pending;
       if (resolved) {
-        return { scope: resolved };
+        return {
+          scope: request.shareConnections === false ? crypto.objectHash({
+            credentials: resolved,
+            session: socketSessionId ?? credentialSessionId
+          }) : resolved
+        };
       }
     }
   }
+  if (request.shareConnections === false) {
+    const session = socketSessionId ?? credentialSessionId;
+    if (!session)
+      throw new Error("session required for private connection");
+    return { scope: crypto.objectHash({ session }) };
+  }
   return anonymousScope(platform, actorId, {
     credentialSessionId,
     socketSessionId,
@@ -155874,9 +156050,27 @@ var init_dist3 = __esm(() => {
 function ensureObject(msg) {
   return typeof msg === "object" && msg !== null && !Array.isArray(msg);
 }
+function exceedsDepth(root, max = MAX_MESSAGE_DEPTH) {
+  const stack = [[root, 0]];
+  while (stack.length > 0) {
+    const [value, depth] = stack.pop();
+    if (value === null || typeof value !== "object") {
+      continue;
+    }
+    if (depth > max) {
+      return true;
+    }
+    for (const child of Object.values(value)) {
+      stack.push([child, depth + 1]);
+    }
+  }
+  return false;
+}
 function normalizeActivityStreamMiddleware(msg, done) {
   if (!ensureObject(msg)) {
     done(new Error("message received is not an object."));
+  } else if (exceedsDepth(msg)) {
+    done(new Error("activity stream nesting too deep."));
   } else if (!Array.isArray(msg["@context"]) || !msg["@context"].every((entry) => typeof entry === "string")) {
     done(new Error("activity stream must contain an @context array."));
   } else if (typeof msg.type !== "string") {
@@ -155890,6 +156084,7 @@ function normalizeActivityStreamMiddleware(msg, done) {
     }
   }
 }
+var MAX_MESSAGE_DEPTH = 64;
 var init_normalize_activity_stream = __esm(() => {
   init_src2();
 });
@@ -156046,15 +156241,16 @@ var init_middleware = __esm(() => {
 
 // src/message-handlers.ts
 function attachError(err, msg) {
-  const message = errorMessage(err);
+  const message = errorMessage(err).slice(0, 256);
   if (!msg) {
     return new Error(message);
   }
-  const cleaned = { ...msg, error: message };
-  if ("sessionSecret" in cleaned) {
-    delete cleaned.sessionSecret;
-  }
-  return cleaned;
+  const context = msg["@context"];
+  return {
+    ...Array.isArray(context) && context.length <= 8 && context.every((entry) => typeof entry === "string" && entry.length <= 256) ? { "@context": context } : {},
+    ...typeof msg.type === "string" && msg.type.length <= 64 ? { type: msg.type } : {},
+    error: message
+  };
 }
 function createMessageHandlers(options) {
   const {
@@ -156171,6 +156367,9 @@ function classifyPayload(payload) {
   if (!isObject(payload)) {
     return "unknown";
   }
+  if (exceedsDepth(payload)) {
+    return "message";
+  }
   if ("type" in payload && "actor" in payload) {
     const typeValue = String(payload.type);
     if (typeValue === "credentials") {
@@ -156201,9 +156400,9 @@ function buildCredentialsAck(payload, result) {
   }
   const actor = isObject(payload) ? payload.actor : undefined;
   const actorId = isObject(actor) && typeof actor.id === "string" ? actor.id : undefined;
-  if (!actorId) {
-    const message = isObject(result) && typeof result.error === "string" ? result.error : "invalid credentials payload";
-    return new Error(message);
+  const error = isObject(result) && typeof result.error === "string" ? result.error : undefined;
+  if (!actorId || error !== undefined && actorId.length > MAX_ERROR_ACTOR_ID_LENGTH) {
+    return new Error(error ?? "invalid credentials payload");
   }
   const ack = {
     "@context": buildCanonicalContext(INTERNAL_PLATFORM_CONTEXT_URL),
@@ -156213,8 +156412,8 @@ function buildCredentialsAck(payload, result) {
       type: "person"
     }
   };
-  if (isObject(result) && typeof result.error === "string") {
-    ack.error = result.error;
+  if (error !== undefined) {
+    ack.error = error;
   }
   return ack;
 }
@@ -156450,7 +156649,15 @@ function registerHttpActionsRoutes(app, options, deps = {}) {
   app.options(`${routePath}/:requestId`, cors);
   app.get(routePath, cors, rateLimiter, handleGet);
   app.get(`${routePath}/:requestId`, cors, rateLimiter, handleGet);
-  app.post(routePath, cors, rateLimiter, parseJson, async (req, res) => {
+  app.post(routePath, cors, rateLimiter, (req, res, next) => {
+    if (!req.is("application/json")) {
+      res.status(415).json({
+        error: "content-type must be application/json"
+      });
+      return;
+    }
+    next();
+  }, parseJson, async (req, res) => {
     const payloads = normalizePayloads(req.body);
     if (payloads.length === 0) {
       res.status(400).json({
@@ -156522,6 +156729,7 @@ function registerHttpActionsRoutes(app, options, deps = {}) {
       sessionSecret,
       credentialsStore,
       transport: "http",
+      clientIp: normalizeIp(req.ip ?? req.socket.remoteAddress),
       onPlatformInstance: (platformInstance) => {
         if (!platformInstance.config.persist) {
           return;
@@ -156708,7 +156916,7 @@ function registerHttpActionsRoutes(app, options, deps = {}) {
   });
   log7.info(`http actions enabled at ${routePath}`);
 }
-var import_express2, log7, REQUEST_ID_HEADER = "x-request-id", SOCKETHUB_REQUEST_ID_HEADER = "x-sockethub-request-id", DEFAULT_HTTP_ACTIONS_PATH = "/sockethub-http", IDEMPOTENCY_PREFIX = "sockethub:http-actions", IDEMPOTENCY_BATCH_SIZE = 100, MAX_REQUEST_ID_LENGTH = 128, REQUEST_ID_PATTERN;
+var import_express2, log7, REQUEST_ID_HEADER = "x-request-id", SOCKETHUB_REQUEST_ID_HEADER = "x-sockethub-request-id", DEFAULT_HTTP_ACTIONS_PATH = "/sockethub-http", IDEMPOTENCY_PREFIX = "sockethub:http-actions", IDEMPOTENCY_BATCH_SIZE = 100, MAX_REQUEST_ID_LENGTH = 128, MAX_ERROR_ACTOR_ID_LENGTH = 256, REQUEST_ID_PATTERN;
 var init_actions = __esm(() => {
   init_src3();
   init_src();
@@ -156721,6 +156929,7 @@ var init_actions = __esm(() => {
   init_connection_scope();
   init_cors();
   init_message_handlers();
+  init_normalize_activity_stream();
   init_session_registry();
   import_express2 = __toESM(require_express(), 1);
   log7 = createLogger("server:http:actions");
@@ -156839,6 +157048,7 @@ class PlatformInstance {
   parentId;
   parentSecret1;
   sessions = new Set;
+  ownerIps = new Set;
   sessionIps = new Map;
   sessionSecrets = new Map;
   processMessageListener;
@@ -156847,7 +157057,11 @@ class PlatformInstance {
   heartbeatFailureHandled = false;
   replaced = false;
   shutdownResult;
+  retirementError;
   actor;
+  get actorId() {
+    return this.actor;
+  }
   constructor(params) {
     this.id = params.identifier;
     this.queueId = params.queueId ?? crypto.randId(16);
@@ -156871,6 +157085,9 @@ class PlatformInstance {
     if (process.env.LOG_LEVEL) {
       env.LOG_LEVEL = process.env.LOG_LEVEL;
     }
+    if (process.env.NODE_EXTRA_CA_CERTS) {
+      env.NODE_EXTRA_CA_CERTS = process.env.NODE_EXTRA_CA_CERTS;
+    }
     const credentialsTtl = config_default.get("credentials:ttlMs");
     if (typeof credentialsTtl !== "undefined") {
       env.SOCKETHUB_CREDENTIALS_TTL_MS = String(credentialsTtl);
@@ -156919,7 +157136,15 @@ class PlatformInstance {
     this.replaced = true;
     this.flaggedForTermination = true;
   }
-  shutdown() {
+  shutdown(pendingJobError) {
+    if (pendingJobError && !this.retirementError) {
+      this.retirementError = pendingJobError;
+      const pending = [...this.completedJobHandlers.values()];
+      this.completedJobHandlers.clear();
+      this.completedJobHandlerTimestamps.clear();
+      for (const handler of pending)
+        this.failRetiredJob(handler);
+    }
     if (!this.shutdownResult) {
       this.shutdownResult = this.teardown();
     }
@@ -156968,10 +157193,26 @@ class PlatformInstance {
     });
   }
   registerCompletedJobHandler(title, handler) {
+    if (this.retirementError) {
+      this.failRetiredJob(handler);
+      return;
+    }
     this.pruneExpiredJobHandlers();
     this.completedJobHandlers.set(title, handler);
     this.completedJobHandlerTimestamps.set(title, Date.now());
   }
+  failRetiredJob(handler) {
+    try {
+      handler({
+        "@context": buildCanonicalContext(this.contextUrl ?? INTERNAL_PLATFORM_CONTEXT_URL),
+        type: "error",
+        actor: { id: this.actor ?? this.name, type: "service" },
+        error: this.retirementError
+      });
+    } catch (error) {
+      this.log.error(`failed to acknowledge retired job: ${errorMessage(error)}`);
+    }
+  }
   takeCompletedJobHandler(title) {
     const handler = this.completedJobHandlers.get(title);
     if (handler) {
@@ -157046,6 +157287,8 @@ class PlatformInstance {
     return payload;
   }
   async handleJobResult(state, job, result) {
+    if (this.retirementError)
+      return;
     let payload = result;
     if (state === "failed") {
       payload = job.msg;
@@ -157391,6 +157634,8 @@ class ProcessManager {
   parentSecret2;
   init;
   ensureChains = new Map;
+  startsPerIp = new Map;
+  startsWindowBegan = 0;
   constructor(parentId, parentSecret1, parentSecret2, init) {
     this.parentId = parentId;
     this.parentSecret1 = parentSecret1;
@@ -157402,7 +157647,8 @@ class ProcessManager {
     const connectionScope = platformDetails.config.persist ? await resolveConnectionScope(platform, actorId, {
       credentialSessionId: credentialSessionId ?? sessionId,
       socketSessionId: sessionId,
-      sessionIp
+      sessionIp,
+      shareConnections: platformDetails.config.shareConnections
     }) : undefined;
     const pi = platformDetails.config.persist ? await this.ensureProcess(platform, sessionId, actorId, sessionIp, connectionScope) : await this.ensureProcess(platform);
     pi.config = platformDetails.config;
@@ -157433,34 +157679,53 @@ class ProcessManager {
   }
   ensureProcess(platform, sessionId, actor, sessionIp, connectionScope) {
     const identifier = getPlatformId(platform, actor, connectionScope?.scope);
-    const prior = this.ensureChains.get(identifier) ?? Promise.resolve();
+    const platformConfig = this.init.platforms.get(platform).config;
+    const privateSession = platformConfig.persist && platformConfig.shareConnections === false && sessionId;
+    const chainKey = privateSession ? JSON.stringify([platform, actor, sessionId]) : identifier;
+    const prior = this.ensureChains.get(chainKey) ?? Promise.resolve();
     const run = prior.then(() => this.ensureProcessNow(identifier, platform, sessionId, actor, sessionIp, connectionScope));
     const settled = run.then(() => {
       return;
     }, () => {
       return;
     });
-    this.ensureChains.set(identifier, settled);
+    this.ensureChains.set(chainKey, settled);
     settled.then(() => {
-      if (this.ensureChains.get(identifier) === settled) {
-        this.ensureChains.delete(identifier);
+      if (this.ensureChains.get(chainKey) === settled) {
+        this.ensureChains.delete(chainKey);
       }
     });
     return run;
   }
   async ensureProcessNow(identifier, platform, sessionId, actor, sessionIp, connectionScope) {
+    const platformConfig = this.init.platforms.get(platform).config;
     const existing = platformInstances.get(identifier);
-    const reusable = existing && this.isProcessAlive(existing);
-    if (!reusable) {
-      this.assertInstanceCapacity(platform, identifier);
+    if (actor !== undefined && !(existing && this.isProcessAlive(existing)))
+      this.assertStartRate(sessionIp, false);
+    if (platformConfig.persist && platformConfig.shareConnections === false && sessionId) {
+      for (const previous of platformInstances.values()) {
+        if (previous.id === identifier || previous.name !== platform || previous.actorId !== actor || !previous.sessions.has(sessionId))
+          continue;
+        previous.deregisterSession(sessionId);
+        if (!previous.sessions.size)
+          await previous.shutdown("credentials replaced; pending operation interrupted; message submission may already have succeeded; do not automatically retry sends");
+      }
     }
+    const reusable = existing && this.isProcessAlive(existing);
+    this.assertInstanceCapacity(platform, identifier, actor === undefined, sessionId, sessionIp, !!reusable);
     let inheritedQueueId;
     if (existing && !reusable) {
       inheritedQueueId = existing.queueId;
       existing.markReplaced();
       await existing.shutdown();
+      this.assertInstanceCapacity(platform, identifier, actor === undefined, sessionId, sessionIp, !!reusable);
     }
+    if (!reusable && actor !== undefined)
+      this.assertStartRate(sessionIp, true);
     const platformInstance = reusable ? existing : this.createPlatformInstance(identifier, platform, actor, connectionScope?.scope, inheritedQueueId);
+    if (sessionIp && !platformInstance.global) {
+      platformInstance.ownerIps.add(sessionIp);
+    }
     if (sessionId) {
       platformInstance.registerSession(sessionId, sessionIp);
     }
@@ -157470,15 +157735,38 @@ class ProcessManager {
     }
     return platformInstance;
   }
-  assertInstanceCapacity(platform, identifier) {
+  assertInstanceCapacity(platform, identifier, global2, sessionId, sessionIp, reusable = false) {
+    if (global2)
+      return;
+    const others = [...platformInstances.values()].filter((pi) => pi.id !== identifier && !pi.global);
     const max = Number(config_default.get("limits:maxPlatformInstances") ?? 0);
-    if (!Number.isFinite(max) || max <= 0) {
+    if (!reusable && max > 0 && others.length >= max) {
+      throw new Error(`platform instance limit reached (${max}); cannot start new ${platform} instance`);
+    }
+    const perSession = Number(config_default.get("limits:maxInstancesPerSession") ?? 0);
+    if (perSession > 0 && sessionId && others.filter((pi) => pi.sessions.has(sessionId)).length >= perSession) {
+      throw new Error(`per-session platform instance limit reached (${perSession})`);
+    }
+    const perIp = Number(config_default.get("limits:maxInstancesPerIp") ?? 0);
+    if (perIp > 0 && sessionIp && others.filter((pi) => pi.ownerIps.has(sessionIp)).length >= perIp) {
+      throw new Error(`per-address platform instance limit reached (${perIp})`);
+    }
+  }
+  assertStartRate(sessionIp, charge) {
+    const max = Number(config_default.get("limits:maxStartsPerIpPerMinute") ?? 0);
+    if (!(max > 0) || !sessionIp)
       return;
+    const now = Date.now();
+    if (now - this.startsWindowBegan >= 60000) {
+      this.startsPerIp.clear();
+      this.startsWindowBegan = now;
     }
-    const occupied = platformInstances.has(identifier) ? platformInstances.size - 1 : platformInstances.size;
-    if (occupied >= max) {
-      throw new Error(`platform instance limit reached (${max}); cannot start new ${platform} instance`);
+    const starts = this.startsPerIp.get(sessionIp) ?? 0;
+    if (starts >= max) {
+      throw new Error(`per-address platform start rate limit reached (${max} per minute)`);
     }
+    if (charge)
+      this.startsPerIp.set(sessionIp, starts + 1);
   }
   isProcessAlive(platformInstance) {
     const pid = platformInstance.process?.pid;
@@ -157608,23 +157896,7 @@ function getProxyHeaderName() {
   return config_default.get("credentialCheck:proxyHeader")?.toLowerCase() || "x-forwarded-for";
 }
 function getClientIp(socket) {
-  const ipSource = config_default.get("credentialCheck:reconnectIpSource") === "proxy" ? "proxy" : "socket";
-  if (ipSource === "proxy") {
-    const proxyHeader = getProxyHeaderName();
-    const headerValue = socket.handshake.headers[proxyHeader];
-    if (typeof headerValue === "string") {
-      const normalized = normalizeIp(headerValue);
-      if (normalized) {
-        return normalized;
-      }
-    } else if (Array.isArray(headerValue) && headerValue.length > 0) {
-      const normalized = normalizeIp(headerValue[0]);
-      if (normalized) {
-        return normalized;
-      }
-    }
-  }
-  return normalizeIp(socket.handshake.address);
+  return resolveSocketClientIp(socket.request, listener_default.app, config_default.get("credentialCheck:reconnectIpSource"), config_default.get("credentialCheck:proxyHeader"), socket.handshake.address);
 }
 
 class Sockethub {
@@ -157675,7 +157947,7 @@ class Sockethub {
     this.rateLimiter = createRateLimiter(config_default.get("rateLimiter"));
     if (config_default.get("credentialCheck:reconnectIpSource") === "proxy") {
       const proxyHeader = getProxyHeaderName();
-      log9.warn(`credentialCheck.reconnectIpSource=proxy enabled; only use this behind a trusted reverse proxy that overwrites '${proxyHeader}'`);
+      log9.warn(`credentialCheck.reconnectIpSource=proxy enabled; only use this behind a trusted reverse proxy that sets '${proxyHeader}' to the connecting client`);
     }
     log9.debug("active platforms: ", [...init.platforms.keys()]);
     listener_default.start();
@@ -157811,11 +158083,13 @@ var init_sockethub = __esm(() => {
   init_process_manager();
   init_rate_limiter();
   init_server_info();
+  init_trust_proxy();
   log9 = createLogger("server:core");
   sockethub_default = Sockethub;
 });
 
 // src/index.ts
+init_payload_debug();
 init_src();
 init_error();
 import path5 from "node:path";
@@ -157959,6 +158233,12 @@ async function server() {
     }
     return;
   }
+  await Promise.resolve().then(() => init_src2());
+  if (!isCodegenAvailable()) {
+    console.error("Sockethub requires schema validation, but this environment forbids code generation (new Function).");
+    process.exitCode = 1;
+    return;
+  }
   await Promise.resolve().then(() => init_config());
   const loggingConfig = config_default.get("logging");
   const logFile = loggingConfig.file ? path5.resolve(loggingConfig.file) : "";