@srouterhq/server 0.0.0-stage → 0.9.0

package/dist/lib/setup-code.js

@@ -0,0 +1,35 @@
+import { createOneTimeCode } from './one-time-code.js';
+// One-time first-run setup code.
+//
+// POST /api/auth/setup creates the first admin account while there are zero
+// users. The server binds all interfaces by default, so an exposed fresh
+// install could be claimed by whoever reaches it first. To gate that without
+// hurting the local/desktop first-run experience, we mint a random code at boot
+// when the dashboard is unclaimed and log it. A browser on the same machine
+// (a loopback socket) never needs the code; a request from any other address
+// must present it. The code is regenerated once per boot and cleared as soon as
+// an account exists.
+const _code = createOneTimeCode();
+// Mint a fresh code and log it prominently. Call once at boot when there are
+// zero accounts. Returns the code (handy for tests).
+export function generateSetupCode() {
+    const code = _code.generate();
+    console.log('');
+    console.log('  First-run setup code: ' + code);
+    console.log('  A browser on this machine can finish setup without it. From any');
+    console.log('  other device, enter this code to create the first account.');
+    console.log('');
+    return code;
+}
+export function getSetupCode() {
+    return _code.get();
+}
+export function clearSetupCode() {
+    _code.clear();
+}
+// Constant-time comparison against the active code. Returns false when no code
+// is active or the input is not a matching string.
+export function setupCodeMatches(provided) {
+    return _code.matches(provided);
+}
+//# sourceMappingURL=setup-code.js.map

package/dist/lib/setup-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-code.js","sourceRoot":"","sources":["../../src/lib/setup-code.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,iCAAiC;AACjC,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,6EAA6E;AAC7E,gFAAgF;AAChF,4EAA4E;AAC5E,6EAA6E;AAC7E,gFAAgF;AAChF,qBAAqB;AAErB,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;AAElC,6EAA6E;AAC7E,qDAAqD;AACrD,MAAM,UAAU,iBAAiB;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC9B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,KAAK,CAAC,GAAG,EAAE,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,mDAAmD;AACnD,MAAM,UAAU,gBAAgB,CAAC,QAAiB;IAChD,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC"}

package/dist/lib/structured-output.d.ts

@@ -0,0 +1,9 @@
+export type JsonEnforcement = {
+    ok: true;
+    content: string;
+    healed: boolean;
+} | {
+    ok: false;
+};
+export declare function enforceJsonContent(content: string): JsonEnforcement;
+//# sourceMappingURL=structured-output.d.ts.map

package/dist/lib/structured-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"structured-output.d.ts","sourceRoot":"","sources":["../../src/lib/structured-output.ts"],"names":[],"mappings":"AAsBA,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC9C;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAAC;AAiClB,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAmBnE"}

package/dist/lib/structured-output.js

@@ -0,0 +1,72 @@
+// Structured-output enforcement for the fallback chain (#514 follow-up).
+//
+// Forwarding response_format is necessary but not sufficient: a free-tier
+// model that doesn't understand JSON mode often just answers in prose (or
+// wraps the JSON in a markdown fence) and the request LOOKS successful — the
+// worst failure mode, because the client asked for machine-readable output
+// and got an essay. On non-streaming responses the gateway can check, heal,
+// or fail over:
+//
+//   1. content parses as JSON            → pass through untouched
+//   2. content wraps JSON in ```fences``` or leading/trailing prose
+//                                        → heal: replace content with the JSON
+//   3. nothing parseable                 → retryable failure (skipBench: the
+//      provider is healthy, the MODEL ignored the format — no cooldown, no
+//      penalty; the chain just tries the next candidate)
+//
+// Streaming responses used to skip enforcement entirely (bytes already on
+// the wire). Since #933 the proxy's stream path buffers structured-output
+// requests in a 'json' hold mode — headers are held until the stream ends,
+// so the same check/heal/fail-over applies there too. The response cache
+// remains non-stream only.
+/** Match a fenced code block (```json ... ``` or bare ``` ... ```). */
+const FENCE_RE = /```(?:json)?\s*\n?([\s\S]*?)```/i;
+function parses(text) {
+    try {
+        JSON.parse(text);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Candidate slices from the first '{' to the last '}' and from the first '['
+ * to the last ']', longest first. Both bracket types must be tried
+ * independently: picking whichever opener appears FIRST turned
+ * `According to [1], here is the JSON: {"city":"Paris"}` into the citation
+ * marker `[1]` — a valid parse of the wrong value, silently delivered as the
+ * structured output. Longest-first means an incidental bracket token in prose
+ * can never shadow the real payload next to it.
+ */
+function candidateJsonSlices(text) {
+    const out = [];
+    for (const [open, close] of [['{', '}'], ['[', ']']]) {
+        const first = text.indexOf(open);
+        const last = text.lastIndexOf(close);
+        if (first !== -1 && last > first)
+            out.push(text.slice(first, last + 1));
+    }
+    return out.sort((a, b) => b.length - a.length);
+}
+export function enforceJsonContent(content) {
+    const trimmed = content.trim();
+    if (trimmed.length === 0)
+        return { ok: false };
+    if (parses(trimmed))
+        return { ok: true, content: trimmed === content ? content : trimmed, healed: trimmed !== content };
+    // Fenced block: the most common "almost right" shape free models produce.
+    const fence = FENCE_RE.exec(trimmed);
+    if (fence) {
+        const inner = fence[1].trim();
+        if (parses(inner))
+            return { ok: true, content: inner, healed: true };
+    }
+    // Leading/trailing prose around one JSON value ("Here is your JSON: {...}").
+    for (const slice of candidateJsonSlices(trimmed)) {
+        if (parses(slice))
+            return { ok: true, content: slice, healed: true };
+    }
+    return { ok: false };
+}
+//# sourceMappingURL=structured-output.js.map

package/dist/lib/structured-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"structured-output.js","sourceRoot":"","sources":["../../src/lib/structured-output.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,0EAA0E;AAC1E,0EAA0E;AAC1E,6EAA6E;AAC7E,2EAA2E;AAC3E,4EAA4E;AAC5E,gBAAgB;AAChB,EAAE;AACF,kEAAkE;AAClE,oEAAoE;AACpE,+EAA+E;AAC/E,6EAA6E;AAC7E,2EAA2E;AAC3E,yDAAyD;AACzD,EAAE;AACF,0EAA0E;AAC1E,0EAA0E;AAC1E,2EAA2E;AAC3E,yEAAyE;AACzE,2BAA2B;AAM3B,uEAAuE;AACvE,MAAM,QAAQ,GAAG,kCAAkC,CAAC;AAEpD,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAU,EAAE,CAAC;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,IAAI,GAAG,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IAE/C,IAAI,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,KAAK,OAAO,EAAE,CAAC;IAExH,0EAA0E;IAC1E,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACvE,CAAC;IAED,6EAA6E;IAC7E,KAAK,MAAM,KAAK,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACvE,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AACvB,CAAC"}

package/dist/lib/system-prompt.d.ts

@@ -0,0 +1,30 @@
+import type { ChatMessage } from '@srouter/shared/types.js';
+export declare const CLIENT_PROFILE_KEY_PREFIX = "sk-cp-";
+export declare function timingSafeStringEqual(provided: string, expected: string): boolean;
+export declare function mintClientProfileKey(): string;
+export declare function hashClientProfileKey(key: string): string;
+export type ResolvedAuth = {
+    kind: 'unified';
+    systemPrompt: null;
+} | {
+    kind: 'profile';
+    profileId: number;
+    name: string;
+    systemPrompt: string | null;
+};
+/**
+ * Resolve an inference credential. The unified key maps to today's behavior
+ * (no enforced prompt); a client-profile key carries its own prompt; a
+ * disabled profile is rejected exactly like an unknown key so a revoked
+ * client can't distinguish "disabled" from "deleted".
+ */
+export declare function resolveAuth(token: string | undefined): ResolvedAuth | null;
+/**
+ * Prepend the server-enforced system prompt. It goes FIRST, ahead of any
+ * caller-supplied system message, so the enforced instructions take priority
+ * while the caller's own system message is preserved after it — the caller
+ * can add context but cannot override or remove the profile's prompt.
+ * An empty/null prompt is a neutral passthrough: nothing is injected.
+ */
+export declare function prependSystemPrompt(messages: ChatMessage[], prompt: string | null | undefined): ChatMessage[];
+//# sourceMappingURL=system-prompt.d.ts.map

package/dist/lib/system-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-prompt.d.ts","sourceRoot":"","sources":["../../src/lib/system-prompt.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAS5D,eAAO,MAAM,yBAAyB,WAAW,CAAC;AAKlD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CASjF;AAED,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAMD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,YAAY,EAAE,IAAI,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAStF;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,YAAY,GAAG,IAAI,CAc1E;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,WAAW,EAAE,CAG7G"}

package/dist/lib/system-prompt.js

@@ -0,0 +1,66 @@
+import crypto from 'crypto';
+import { getDb, getUnifiedApiKey } from '../db/index.js';
+// Per-client API keys with server-enforced system prompts (#411). A client
+// profile is a second kind of inference credential: it authenticates ONLY the
+// /v1 inference surface (proxy + responses), never the /api dashboard routes —
+// those require a dashboard session (middleware/requireAuth). The unified key
+// keeps today's behavior exactly: full inference access, no injected prompt.
+export const CLIENT_PROFILE_KEY_PREFIX = 'sk-cp-';
+// Constant-time string comparison for inference credentials. Plain `===` leaks
+// length and per-character timing, which a network attacker could in principle
+// use to recover the key one byte at a time.
+export function timingSafeStringEqual(provided, expected) {
+    // Use HMAC to produce fixed-length digests so timingSafeEqual always
+    // receives same-length buffers regardless of input length. This eliminates
+    // both the per-character timing leak and the length-branch timing leak that
+    // the Buffer.alloc-on-mismatch approach had.
+    const key = Buffer.alloc(32);
+    const a = crypto.createHmac('sha256', key).update(provided).digest();
+    const b = crypto.createHmac('sha256', key).update(expected).digest();
+    return crypto.timingSafeEqual(a, b);
+}
+export function mintClientProfileKey() {
+    return `${CLIENT_PROFILE_KEY_PREFIX}${crypto.randomBytes(24).toString('hex')}`;
+}
+// Profile keys are stored and looked up by SHA-256 digest, so the DB never
+// holds the plaintext for auth purposes (the encrypted copy exists only for
+// masked display in the dashboard). The digest also makes the indexed lookup
+// timing-independent of the secret's bytes.
+export function hashClientProfileKey(key) {
+    return crypto.createHash('sha256').update(key).digest('hex');
+}
+/**
+ * Resolve an inference credential. The unified key maps to today's behavior
+ * (no enforced prompt); a client-profile key carries its own prompt; a
+ * disabled profile is rejected exactly like an unknown key so a revoked
+ * client can't distinguish "disabled" from "deleted".
+ */
+export function resolveAuth(token) {
+    if (!token)
+        return null;
+    if (timingSafeStringEqual(token, getUnifiedApiKey())) {
+        return { kind: 'unified', systemPrompt: null };
+    }
+    if (!token.startsWith(CLIENT_PROFILE_KEY_PREFIX))
+        return null;
+    const row = getDb().prepare('SELECT id, name, system_prompt, enabled FROM client_profiles WHERE token_hash = ?').get(hashClientProfileKey(token));
+    if (!row || !row.enabled)
+        return null;
+    const prompt = row.system_prompt != null && row.system_prompt.trim().length > 0
+        ? row.system_prompt
+        : null;
+    return { kind: 'profile', profileId: row.id, name: row.name, systemPrompt: prompt };
+}
+/**
+ * Prepend the server-enforced system prompt. It goes FIRST, ahead of any
+ * caller-supplied system message, so the enforced instructions take priority
+ * while the caller's own system message is preserved after it — the caller
+ * can add context but cannot override or remove the profile's prompt.
+ * An empty/null prompt is a neutral passthrough: nothing is injected.
+ */
+export function prependSystemPrompt(messages, prompt) {
+    if (prompt == null || prompt.trim().length === 0)
+        return messages;
+    return [{ role: 'system', content: prompt }, ...messages];
+}
+//# sourceMappingURL=system-prompt.js.map

package/dist/lib/system-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-prompt.js","sourceRoot":"","sources":["../../src/lib/system-prompt.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,2EAA2E;AAC3E,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,6EAA6E;AAE7E,MAAM,CAAC,MAAM,yBAAyB,GAAG,QAAQ,CAAC;AAElD,+EAA+E;AAC/E,+EAA+E;AAC/E,6CAA6C;AAC7C,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,QAAgB;IACtE,qEAAqE;IACrE,2EAA2E;IAC3E,4EAA4E;IAC5E,6CAA6C;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;IACrE,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;IACrE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,GAAG,yBAAyB,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,2EAA2E;AAC3E,4EAA4E;AAC5E,6EAA6E;AAC7E,4CAA4C;AAC5C,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAaD;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAyB;IACnD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,qBAAqB,CAAC,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;QACrD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,yBAAyB,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC,OAAO,CACzB,mFAAmF,CACpF,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAA2B,CAAC;IAC7D,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,MAAM,GAAG,GAAG,CAAC,aAAa,IAAI,IAAI,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC7E,CAAC,CAAC,GAAG,CAAC,aAAa;QACnB,CAAC,CAAC,IAAI,CAAC;IACT,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;AACtF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAuB,EAAE,MAAiC;IAC5F,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAClE,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,QAAQ,CAAC,CAAC;AAC5D,CAAC"}

package/dist/lib/task-type.d.ts

@@ -0,0 +1,18 @@
+import type { Request } from 'express';
+import type { ChatMessage } from '@srouter/shared/types.js';
+export type TaskType = 'code' | 'chat' | 'auto';
+export declare const TASK_TYPE_HEADER = "x-freellm-task-type";
+/** Read the client-declared task type from the request header (default 'auto'). */
+export declare function parseTaskTypeHeader(req: Request): TaskType;
+/** Derive a concrete task type from the request shape. Bounded, never throws. */
+export declare function deriveTaskType(tools: unknown[] | undefined, messages: ChatMessage[] | undefined): 'code' | 'chat';
+/**
+ * Resolve the effective task bias for a request: the explicit header wins;
+ * `auto` falls back to derivation. Returns undefined when there is no signal
+ * worth biasing for — callers then leave the routing weights untouched, so the
+ * default behaviour is unchanged. `auto` only ever biases UP toward `code`:
+ * `chat` is the ordinary case, and silently re-weighting the bulk of traffic
+ * in `auto` mode would defeat the point of an opt-in knob.
+ */
+export declare function resolveTaskType(req: Request, tools: unknown[] | undefined, messages: ChatMessage[] | undefined): 'code' | 'chat' | undefined;
+//# sourceMappingURL=task-type.d.ts.map

package/dist/lib/task-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-type.d.ts","sourceRoot":"","sources":["../../src/lib/task-type.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAG5D,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEhD,eAAO,MAAM,gBAAgB,wBAAwB,CAAC;AAgDtD,mFAAmF;AACnF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,QAAQ,CAK1D;AAOD,iFAAiF;AACjF,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAOjH;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,OAAO,EAAE,GAAG,SAAS,EAC5B,QAAQ,EAAE,WAAW,EAAE,GAAG,SAAS,GAClC,MAAM,GAAG,MAAM,GAAG,SAAS,CAI7B"}

package/dist/lib/task-type.js

@@ -0,0 +1,92 @@
+// Task-type-aware routing (#1127): lets a client declare what kind of work a
+// request is (code vs chat) so the router can bias the bandit weights toward
+// quality or speed. A coding turn is quality-sensitive — a weak model
+// "completes" it with wrong code the user must manually verify; a chat turn is
+// budget/speed-sensitive. The declared header is the strongest signal; when it
+// is absent or `auto`, a cheap bounded rule derives the type from the request
+// shape (tool-bearing requests → code; code markers in the last user message →
+// code). The result is a SOFT preference: capability gates and the failover
+// chain are untouched, and `undefined` means "leave the preset weights alone".
+import { contentToString } from './content.js';
+export const TASK_TYPE_HEADER = 'x-freellm-task-type';
+// Bounded scan so a huge user message never costs the router a full read.
+const MAX_SCAN_CHARS = 4000;
+/**
+ * Markers that a turn is about code. Every one of these is SYNTAX, not
+ * vocabulary: an earlier revision matched bare English words (`function`,
+ * `class`, `cargo`, `docker`, `git`) and a bare `=>`, which classified
+ * "What class of animals are dolphins?" and "Explain the function of the
+ * mitochondria" as code. Auto-derivation is silent — the user never asked for
+ * it — so it has to err toward `chat`: a missed code turn just routes the way
+ * it always did, while a false positive quietly re-weights ordinary chat
+ * traffic. Hence: a marker has to be something that essentially cannot occur
+ * in prose.
+ */
+const CODE_MARKERS = [
+    // Fenced code block (with or without a language tag).
+    /```/,
+    // Shell prompt at the start of a line, followed by a command-looking word.
+    // The word gate keeps "$ 20 per seat" out.
+    /^[ \t]*\$[ \t]+[a-z][\w./-]*(?=[ \t]|$)/m,
+    // Declarations and definitions.
+    /\b(?:const|let|var)\s+[A-Za-z_$][\w$]*\s*=/,
+    /\bfunction\s*\*?\s*[A-Za-z_$][\w$]*\s*\(/,
+    /\bdef\s+[A-Za-z_]\w*\s*\(/,
+    // `class Foo:` / `class Foo {` / `class Foo(Base)` at the start of a line,
+    // or `class Foo extends Bar` anywhere. Bare "class" never matches.
+    /^[ \t]*class\s+[A-Za-z_$][\w$]*\s*[({:]/m,
+    /\bclass\s+[A-Za-z_$][\w$]*\s+extends\s+[A-Za-z_$][\w$]*/,
+    // ES imports: `import {` , or an import whose source is a quoted module.
+    /\bimport\s*\{/,
+    /\bimport\s[^\n;]{0,200}?\bfrom\s*['"][^'"\n]+['"]/,
+    // Python: `from x.y import z` at the start of a line.
+    /^[ \t]*from\s+[A-Za-z_.][\w.]*\s+import\s+\S/m,
+    /\brequire\s*\(\s*['"]/,
+    /^[ \t]*#\s*include\s*[<"]/m,
+    // A source file path next to a line number: `src/router.ts:214`.
+    /\b[\w./-]+\.(?:[jt]sx?|mjs|cjs|py|rb|go|rs|java|kt|swift|php|cs|cpp|cc|hpp|sh|sql|css|scss|html|vue|svelte|ya?ml|json|toml)\s*:\s*\d+/,
+    // Same, for the one-letter C extensions — the base name must start with a
+    // letter so an enumerated prose clause ("4.c: twelve") cannot match.
+    /\b[A-Za-z_][\w./-]*\.[ch]\s*:\s*\d+/,
+    // Stack frames: V8 (`at fn (file.js:1:2)`), Python (`File "x.py", line 3`).
+    /^\s*at\s+\S.*\(.*:\d+:\d+\)/m,
+    /^\s*File\s+"[^"\n]+",\s*line\s+\d+/m,
+    /\bTraceback\s+\(most recent call last\)/,
+];
+/** Read the client-declared task type from the request header (default 'auto'). */
+export function parseTaskTypeHeader(req) {
+    const raw = req.headers[TASK_TYPE_HEADER];
+    const value = Array.isArray(raw) ? raw[0] : raw;
+    const trimmed = value?.trim().toLowerCase();
+    return trimmed === 'code' || trimmed === 'chat' || trimmed === 'auto' ? trimmed : 'auto';
+}
+/** True when `text` carries at least one unambiguous code marker. */
+function hasCodeMarker(text) {
+    return CODE_MARKERS.some(re => re.test(text));
+}
+/** Derive a concrete task type from the request shape. Bounded, never throws. */
+export function deriveTaskType(tools, messages) {
+    // Tool-bearing requests are overwhelmingly agent/coding turns.
+    if (tools && tools.length > 0)
+        return 'code';
+    const lastUser = messages ? [...messages].reverse().find((m) => m.role === 'user') : undefined;
+    const text = lastUser ? contentToString(lastUser.content) : '';
+    if (text.length > 0 && hasCodeMarker(text.slice(0, MAX_SCAN_CHARS)))
+        return 'code';
+    return 'chat';
+}
+/**
+ * Resolve the effective task bias for a request: the explicit header wins;
+ * `auto` falls back to derivation. Returns undefined when there is no signal
+ * worth biasing for — callers then leave the routing weights untouched, so the
+ * default behaviour is unchanged. `auto` only ever biases UP toward `code`:
+ * `chat` is the ordinary case, and silently re-weighting the bulk of traffic
+ * in `auto` mode would defeat the point of an opt-in knob.
+ */
+export function resolveTaskType(req, tools, messages) {
+    const declared = parseTaskTypeHeader(req);
+    if (declared === 'code' || declared === 'chat')
+        return declared;
+    return deriveTaskType(tools, messages) === 'code' ? 'code' : undefined;
+}
+//# sourceMappingURL=task-type.js.map

package/dist/lib/task-type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-type.js","sourceRoot":"","sources":["../../src/lib/task-type.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,6EAA6E;AAC7E,sEAAsE;AACtE,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,4EAA4E;AAC5E,+EAA+E;AAI/E,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAI/C,MAAM,CAAC,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAEtD,0EAA0E;AAC1E,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B;;;;;;;;;;GAUG;AACH,MAAM,YAAY,GAAsB;IACtC,sDAAsD;IACtD,KAAK;IACL,2EAA2E;IAC3E,2CAA2C;IAC3C,0CAA0C;IAC1C,gCAAgC;IAChC,4CAA4C;IAC5C,0CAA0C;IAC1C,2BAA2B;IAC3B,2EAA2E;IAC3E,mEAAmE;IACnE,0CAA0C;IAC1C,yDAAyD;IACzD,yEAAyE;IACzE,eAAe;IACf,mDAAmD;IACnD,sDAAsD;IACtD,+CAA+C;IAC/C,uBAAuB;IACvB,4BAA4B;IAC5B,iEAAiE;IACjE,uIAAuI;IACvI,0EAA0E;IAC1E,qEAAqE;IACrE,qCAAqC;IACrC,4EAA4E;IAC5E,8BAA8B;IAC9B,qCAAqC;IACrC,yCAAyC;CAC1C,CAAC;AAEF,mFAAmF;AACnF,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,OAAO,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3F,CAAC;AAED,qEAAqE;AACrE,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,cAAc,CAAC,KAA4B,EAAE,QAAmC;IAC9F,+DAA+D;IAC/D,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACnF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAY,EACZ,KAA4B,EAC5B,QAAmC;IAEnC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC;IAChE,OAAO,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzE,CAAC"}

package/dist/lib/think-tags.d.ts

@@ -0,0 +1,37 @@
+import type { ChatCompletionChunk } from '@srouter/shared/types.js';
+export interface ThinkSplit {
+    content: string;
+    reasoning: string;
+}
+export declare class ThinkTagStreamFilter {
+    private state;
+    private pending;
+    /** Feed a text delta; returns the content/reasoning to emit for it. */
+    push(text: string): ThinkSplit;
+    /** Stream ended: release whatever is held. Unclosed `<think>` flushes as
+     *  reasoning; an undecided lead buffer flushes as content. */
+    flush(): ThinkSplit;
+}
+/** Non-streaming split of a complete message body. Returns the original text
+ *  as `content` (reasoning: '') when the message doesn't open with `<think>`. */
+export declare function splitThinkTag(text: string): ThinkSplit;
+/**
+ * In-place extraction for a non-streaming choice message: moves a leading
+ * `<think>…</think>` block out of `content` into `reasoning_content`
+ * (appending when the provider already set one). No-op for messages without
+ * an opening tag, so no-knob/no-tag responses are byte-identical.
+ */
+export declare function extractThinkFromMessage(msg: {
+    content?: unknown;
+    reasoning_content?: string;
+}): void;
+/**
+ * Streaming wrapper: rewrites `choices[0].delta.content` through the filter,
+ * emitting extracted reasoning as `delta.reasoning_content` on the same
+ * chunk. Chunks without text (role preambles, tool_call deltas, usage frames,
+ * native reasoning deltas) pass through untouched. When the source ends with
+ * held bytes (unclosed tag / undecided prefix) a final synthetic chunk
+ * carries them, so text is never lost.
+ */
+export declare function extractThinkTagsFromStream(source: AsyncGenerator<ChatCompletionChunk>): AsyncGenerator<ChatCompletionChunk>;
+//# sourceMappingURL=think-tags.d.ts.map

package/dist/lib/think-tags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"think-tags.d.ts","sourceRoot":"","sources":["../../src/lib/think-tags.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAmCpE,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAaD,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,KAAK,CAAuB;IAIpC,OAAO,CAAC,OAAO,CAAM;IAErB,uEAAuE;IACvE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU;IAwD9B;kEAC8D;IAC9D,KAAK,IAAI,UAAU;CAUpB;AAED;iFACiF;AACjF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAKtD;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAQpG;AAED;;;;;;;GAOG;AACH,wBAAuB,0BAA0B,CAC/C,MAAM,EAAE,cAAc,CAAC,mBAAmB,CAAC,GAC1C,cAAc,CAAC,mBAAmB,CAAC,CA8CrC"}

package/dist/lib/think-tags.js

@@ -0,0 +1,203 @@
+// Inline `<think>…</think>` extraction (DeepSeek-style reasoning models).
+//
+// Some models serialize their reasoning trace INTO `content` as a leading
+// `<think>…</think>` block instead of the separate `reasoning_content` field
+// other providers use (Z.ai, Ollama, Gemini thought parts — all already
+// normalized elsewhere). Forwarding the tags verbatim makes downstream tools
+// render thinking as answer text. This module splits it back out into the
+// OpenAI-convention `reasoning_content` field (non-streaming) and
+// `delta.reasoning_content` chunks (streaming).
+//
+// Deliberately conservative: only a `<think>` that OPENS the message (after
+// optional whitespace) starts extraction — a model *quoting* the literal tag
+// mid-answer is left untouched. Once the block closes, everything after it is
+// passed through verbatim (no re-arming), so at most one block per message is
+// extracted. Matching is exact and lowercase — the only spelling observed live.
+//
+// Streaming buffer strategy (the tag can split across chunk boundaries):
+//  - 'lead': holds at most leading whitespace plus a strict prefix of
+//    `<think>` (7 chars); decides passthrough the moment a byte diverges.
+//  - 'thinking': emits reasoning incrementally, holding back only the longest
+//    trailing run that is a strict prefix of `</think>` (≤ 7 chars).
+//  - 'passthrough': zero-copy.
+// The whole stream is never buffered. An unclosed tag at stream end flushes
+// the held bytes as reasoning; an undecided lead buffer (e.g. a message that
+// is just "<thi") flushes as content — text is never lost.
+const OPEN_TAG = '<think>';
+const CLOSE_TAG = '</think>';
+// A lead buffer longer than this cannot plausibly be "whitespace before
+// <think>" — bail to passthrough so a pathological all-whitespace stream
+// can't grow the hold buffer unboundedly.
+const MAX_LEAD_HOLD = 512;
+/** Length of the longest suffix of `s` that is a strict prefix of `tag`. */
+function partialTagSuffix(s, tag) {
+    const max = Math.min(s.length, tag.length - 1);
+    for (let len = max; len > 0; len--) {
+        if (s.endsWith(tag.slice(0, len)))
+            return len;
+    }
+    return 0;
+}
+export class ThinkTagStreamFilter {
+    state = 'lead';
+    // 'lead': optional whitespace + a strict prefix of OPEN_TAG.
+    // 'thinking': a strict prefix of CLOSE_TAG.
+    // Other states: always empty.
+    pending = '';
+    /** Feed a text delta; returns the content/reasoning to emit for it. */
+    push(text) {
+        let content = '';
+        let reasoning = '';
+        let input = this.pending + text;
+        this.pending = '';
+        while (input.length > 0) {
+            if (this.state === 'lead') {
+                const trimmed = input.replace(/^\s+/, '');
+                if (trimmed.length === 0) {
+                    // All whitespace so far — could still precede a tag. Hold (bounded).
+                    if (input.length > MAX_LEAD_HOLD) {
+                        this.state = 'passthrough';
+                        content += input;
+                    }
+                    else {
+                        this.pending = input;
+                    }
+                    input = '';
+                }
+                else if (trimmed.startsWith(OPEN_TAG)) {
+                    this.state = 'thinking';
+                    input = trimmed.slice(OPEN_TAG.length);
+                }
+                else if (OPEN_TAG.startsWith(trimmed)) {
+                    // Strict prefix of the tag — wait for the next delta to decide.
+                    this.pending = input;
+                    input = '';
+                }
+                else {
+                    // Provably not a think-opened message: everything is content.
+                    this.state = 'passthrough';
+                    content += input;
+                    input = '';
+                }
+            }
+            else if (this.state === 'thinking') {
+                const idx = input.indexOf(CLOSE_TAG);
+                if (idx !== -1) {
+                    reasoning += input.slice(0, idx);
+                    input = input.slice(idx + CLOSE_TAG.length);
+                    this.state = 'afterClose';
+                }
+                else {
+                    const hold = partialTagSuffix(input, CLOSE_TAG);
+                    reasoning += input.slice(0, input.length - hold);
+                    this.pending = hold > 0 ? input.slice(input.length - hold) : '';
+                    input = '';
+                }
+            }
+            else if (this.state === 'afterClose') {
+                // Drop the whitespace models emit between `</think>` and the answer.
+                const trimmed = input.replace(/^\s+/, '');
+                if (trimmed.length > 0)
+                    this.state = 'passthrough';
+                input = trimmed;
+            }
+            else {
+                content += input;
+                input = '';
+            }
+        }
+        return { content, reasoning };
+    }
+    /** Stream ended: release whatever is held. Unclosed `<think>` flushes as
+     *  reasoning; an undecided lead buffer flushes as content. */
+    flush() {
+        const held = this.pending;
+        this.pending = '';
+        if (this.state === 'thinking') {
+            this.state = 'passthrough';
+            return { content: '', reasoning: held };
+        }
+        this.state = 'passthrough';
+        return { content: held, reasoning: '' };
+    }
+}
+/** Non-streaming split of a complete message body. Returns the original text
+ *  as `content` (reasoning: '') when the message doesn't open with `<think>`. */
+export function splitThinkTag(text) {
+    const filter = new ThinkTagStreamFilter();
+    const main = filter.push(text);
+    const tail = filter.flush();
+    return { content: main.content + tail.content, reasoning: main.reasoning + tail.reasoning };
+}
+/**
+ * In-place extraction for a non-streaming choice message: moves a leading
+ * `<think>…</think>` block out of `content` into `reasoning_content`
+ * (appending when the provider already set one). No-op for messages without
+ * an opening tag, so no-knob/no-tag responses are byte-identical.
+ */
+export function extractThinkFromMessage(msg) {
+    if (typeof msg.content !== 'string' || !msg.content.includes(OPEN_TAG))
+        return;
+    const { content, reasoning } = splitThinkTag(msg.content);
+    if (reasoning.length === 0)
+        return;
+    msg.content = content;
+    msg.reasoning_content = msg.reasoning_content && msg.reasoning_content.length > 0
+        ? `${msg.reasoning_content}\n${reasoning}`
+        : reasoning;
+}
+/**
+ * Streaming wrapper: rewrites `choices[0].delta.content` through the filter,
+ * emitting extracted reasoning as `delta.reasoning_content` on the same
+ * chunk. Chunks without text (role preambles, tool_call deltas, usage frames,
+ * native reasoning deltas) pass through untouched. When the source ends with
+ * held bytes (unclosed tag / undecided prefix) a final synthetic chunk
+ * carries them, so text is never lost.
+ */
+export async function* extractThinkTagsFromStream(source) {
+    const filter = new ThinkTagStreamFilter();
+    let meta = null;
+    for await (const chunk of source) {
+        if (chunk?.id)
+            meta = { id: chunk.id, model: chunk.model, created: chunk.created };
+        const choice = chunk?.choices?.[0];
+        const raw = choice?.delta?.content;
+        if (typeof raw !== 'string' || raw.length === 0) {
+            yield chunk;
+            continue;
+        }
+        const { content, reasoning } = filter.push(raw);
+        if (content === raw && reasoning.length === 0) {
+            // Fast path (passthrough state): forward untouched.
+            yield chunk;
+            continue;
+        }
+        // Chunks are parsed fresh from JSON per SSE frame, so in-place mutation is
+        // safe — same rationale as normalizeOutboundContent.
+        choice.delta.content = content;
+        if (reasoning.length > 0) {
+            choice.delta.reasoning_content = choice.delta.reasoning_content
+                ? choice.delta.reasoning_content + reasoning
+                : reasoning;
+        }
+        yield chunk;
+    }
+    const tail = filter.flush();
+    if (tail.content.length > 0 || tail.reasoning.length > 0) {
+        yield {
+            id: meta?.id ?? `chatcmpl-${Date.now()}`,
+            object: 'chat.completion.chunk',
+            created: meta?.created ?? Math.floor(Date.now() / 1000),
+            model: meta?.model ?? '',
+            choices: [{
+                    index: 0,
+                    delta: {
+                        ...(tail.content.length > 0 ? { content: tail.content } : {}),
+                        ...(tail.reasoning.length > 0 ? { reasoning_content: tail.reasoning } : {}),
+                    },
+                    finish_reason: null,
+                }],
+        };
+    }
+}
+//# sourceMappingURL=think-tags.js.map

package/dist/lib/think-tags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"think-tags.js","sourceRoot":"","sources":["../../src/lib/think-tags.ts"],"names":[],"mappings":"AAEA,0EAA0E;AAC1E,EAAE;AACF,0EAA0E;AAC1E,6EAA6E;AAC7E,wEAAwE;AACxE,6EAA6E;AAC7E,0EAA0E;AAC1E,kEAAkE;AAClE,gDAAgD;AAChD,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,EAAE;AACF,yEAAyE;AACzE,sEAAsE;AACtE,0EAA0E;AAC1E,8EAA8E;AAC9E,qEAAqE;AACrE,+BAA+B;AAC/B,4EAA4E;AAC5E,6EAA6E;AAC7E,2DAA2D;AAE3D,MAAM,QAAQ,GAAG,SAAS,CAAC;AAC3B,MAAM,SAAS,GAAG,UAAU,CAAC;AAC7B,wEAAwE;AACxE,yEAAyE;AACzE,0CAA0C;AAC1C,MAAM,aAAa,GAAG,GAAG,CAAC;AAO1B,4EAA4E;AAC5E,SAAS,gBAAgB,CAAC,CAAS,EAAE,GAAW;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/C,KAAK,IAAI,GAAG,GAAG,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;IAChD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAID,MAAM,OAAO,oBAAoB;IACvB,KAAK,GAAgB,MAAM,CAAC;IACpC,6DAA6D;IAC7D,4CAA4C;IAC5C,8BAA8B;IACtB,OAAO,GAAG,EAAE,CAAC;IAErB,uEAAuE;IACvE,IAAI,CAAC,IAAY;QACf,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAElB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,qEAAqE;oBACrE,IAAI,KAAK,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;wBACjC,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC;wBAC3B,OAAO,IAAI,KAAK,CAAC;oBACnB,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;oBACvB,CAAC;oBACD,KAAK,GAAG,EAAE,CAAC;gBACb,CAAC;qBAAM,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACxC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC;oBACxB,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACzC,CAAC;qBAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBACxC,gEAAgE;oBAChE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;oBACrB,KAAK,GAAG,EAAE,CAAC;gBACb,CAAC;qBAAM,CAAC;oBACN,8DAA8D;oBAC9D,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC;oBAC3B,OAAO,IAAI,KAAK,CAAC;oBACjB,KAAK,GAAG,EAAE,CAAC;gBACb,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBACrC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACrC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;oBACf,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oBACjC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;oBAC5C,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC;gBAC5B,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;oBAChD,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;oBACjD,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChE,KAAK,GAAG,EAAE,CAAC;gBACb,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;gBACvC,qEAAqE;gBACrE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC1C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;oBAAE,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC;gBACnD,KAAK,GAAG,OAAO,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,KAAK,CAAC;gBACjB,KAAK,GAAG,EAAE,CAAC;YACb,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAChC,CAAC;IAED;kEAC8D;IAC9D,KAAK;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC9B,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC;YAC3B,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC;QAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC1C,CAAC;CACF;AAED;iFACiF;AACjF,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;IAC5B,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;AAC9F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAsD;IAC5F,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO;IAC/E,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACnC,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;IACtB,GAAG,CAAC,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC;QAC/E,CAAC,CAAC,GAAG,GAAG,CAAC,iBAAiB,KAAK,SAAS,EAAE;QAC1C,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,0BAA0B,CAC/C,MAA2C;IAE3C,MAAM,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC1C,IAAI,IAAI,GAA0D,IAAI,CAAC;IAEvE,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,IAAI,KAAK,EAAE,EAAE;YAAE,IAAI,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACnF,MAAM,MAAM,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC;QACnC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,KAAK,CAAC;YACZ,SAAS;QACX,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,OAAO,KAAK,GAAG,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,oDAAoD;YACpD,MAAM,KAAK,CAAC;YACZ,SAAS;QACX,CAAC;QACD,2EAA2E;QAC3E,qDAAqD;QACrD,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC/B,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB;gBAC7D,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,SAAS;gBAC5C,CAAC,CAAC,SAAS,CAAC;QAChB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;IAC5B,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM;YACJ,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,YAAY,IAAI,CAAC,GAAG,EAAE,EAAE;YACxC,MAAM,EAAE,uBAAuB;YAC/B,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YACvD,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;YACxB,OAAO,EAAE,CAAC;oBACR,KAAK,EAAE,CAAC;oBACR,KAAK,EAAE;wBACL,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC7D,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC5E;oBACD,aAAa,EAAE,IAAI;iBACpB,CAAC;SACH,CAAC;IACJ,CAAC;AACH,CAAC"}