@sudobility/shapeshyft_service 1.0.0 → 1.0.3

package/CLAUDE.md

@@ -21,6 +21,16 @@ The service never knows where a provider API key lives. The app passes a
 Optional `InvokeHooks`: `beforeInvoke` (after rate limiting; return a Response to
 stop) and `afterInvoke` (inside the usage_analytics transaction).
 
+## Client IP
+
+`getPeerAddress` (required) supplies the TCP peer, which the service cannot read
+without a runtime adapter; apps pass `getConnInfo` from `hono/bun`. The endpoint
+IP allowlist uses `resolveAllowlistIp` (`lib/client-ip.ts`): a public peer is the
+caller and its headers are ignored; forwarded headers are read only from a
+private peer (our proxy), preferring `CF-Connecting-IP`, then `X-Forwarded-For`
+right to left. Unknown peer means deny. Trusting `CF-Connecting-IP` assumes the
+origin accepts traffic only through Cloudflare and the internal proxy.
+
 ## Rules
 
 - No `process.env`. Add a field to `ShapeshyftServiceConfig` instead.

package/dist/context.d.ts

@@ -1,6 +1,7 @@
 /**
  * @fileoverview Service configuration and the context every router closes over
  */
+import type { Context } from "hono";
 import type { RateLimitsConfig } from "@sudobility/ratelimit_service";
 import { createLLMProvider } from "@sudobility/shapeshyft_engine";
 import type { AuthAdapter, EmailSender, InvokeHooks, Logger, ProviderCredentialResolver, ServiceDb } from "./contracts.js";
@@ -26,6 +27,14 @@ export interface ShapeshyftServiceConfig {
     auth: AuthAdapter;
     email: EmailSender;
     credentials: ProviderCredentialResolver;
+    /**
+     * The TCP peer address of a request, e.g.
+     * `c => getConnInfo(c).remote.address ?? null` with `getConnInfo` from
+     * `hono/bun`. The endpoint IP allowlist trusts forwarded headers only when
+     * this peer is private (our own proxy). Return null when unknown: an
+     * allowlisted endpoint then denies the request.
+     */
+    getPeerAddress: (c: Context) => string | null | undefined;
     /** Extra zod fields validated on endpoint create/update. */
     endpointBinding?: EndpointBindingShapes;
     hooks?: InvokeHooks;
@@ -44,6 +53,7 @@ export interface ServiceContext {
     auth: AuthAdapter;
     email: EmailSender;
     credentials: ProviderCredentialResolver;
+    getPeerAddress: (c: Context) => string | null | undefined;
     hooks: InvokeHooks;
     logger: Logger;
     createProvider: typeof createLLMProvider;

package/dist/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,KAAK,EACV,WAAW,EACX,WAAW,EACX,WAAW,EACX,MAAM,EACN,0BAA0B,EAC1B,SAAS,EACV,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC5E,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAChF,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,SAAS,CAAC;IACd,MAAM,EAAE,aAAa,CAAC;IACtB,yFAAyF;IACzF,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,UAAU,EAAE,UAAU,CAAC;IACvB,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,WAAW,CAAC;IACnB,WAAW,EAAE,0BAA0B,CAAC;IACxC,4DAA4D;IAC5D,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,yEAAyE;IACzE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,uBAAuB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,0BAA0B;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,cAAc,CAAC,EAAE,OAAO,iBAAiB,CAAC;CAC3C;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,SAAS,CAAC;IACd,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,WAAW,CAAC;IACnB,WAAW,EAAE,0BAA0B,CAAC;IACxC,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,OAAO,iBAAiB,CAAC;IACzC,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,UAAU,EAAE,UAAU,CAAC;IACvB,cAAc,EAAE,cAAc,CAAC;IAC/B,WAAW,EAAE,WAAW,CAAC;IACzB,eAAe,EAAE,eAAe,CAAC;IACjC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,YAAY,EAAE,YAAY,CAAC;IAC3B,YAAY,EAAE,kBAAkB,CAAC;IACjC,YAAY,EAAE,YAAY,CAAC;IAC3B,OAAO,EAAE,eAAe,CAAC;CAC1B;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,uBAAuB,GAAG,cAAc,CA2C5E"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,KAAK,EACV,WAAW,EACX,WAAW,EACX,WAAW,EACX,MAAM,EACN,0BAA0B,EAC1B,SAAS,EACV,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC5E,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAChF,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,SAAS,CAAC;IACd,MAAM,EAAE,aAAa,CAAC;IACtB,yFAAyF;IACzF,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,UAAU,EAAE,UAAU,CAAC;IACvB,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,WAAW,CAAC;IACnB,WAAW,EAAE,0BAA0B,CAAC;IACxC;;;;;;OAMG;IACH,cAAc,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC1D,4DAA4D;IAC5D,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,yEAAyE;IACzE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,uBAAuB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,0BAA0B;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,cAAc,CAAC,EAAE,OAAO,iBAAiB,CAAC;CAC3C;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,SAAS,CAAC;IACd,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,WAAW,CAAC;IACnB,WAAW,EAAE,0BAA0B,CAAC;IACxC,cAAc,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC1D,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,OAAO,iBAAiB,CAAC;IACzC,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,UAAU,EAAE,UAAU,CAAC;IACvB,cAAc,EAAE,cAAc,CAAC;IAC/B,WAAW,EAAE,WAAW,CAAC;IACzB,eAAe,EAAE,eAAe,CAAC;IACjC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,YAAY,EAAE,YAAY,CAAC;IAC3B,YAAY,EAAE,kBAAkB,CAAC;IACjC,YAAY,EAAE,YAAY,CAAC;IAC3B,OAAO,EAAE,eAAe,CAAC;CAC1B;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,uBAAuB,GAAG,cAAc,CA4C5E"}

package/dist/context.js

@@ -22,6 +22,7 @@ export function buildContext(config) {
         auth: config.auth,
         email: config.email,
         credentials: config.credentials,
+        getPeerAddress: config.getPeerAddress,
         hooks: config.hooks ?? {},
         logger,
         createProvider: config.createProvider ?? createLLMProvider,

package/dist/context.js.map

@@ -1 +1 @@
-{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAUlE,OAAO,EAAE,oBAAoB,EAAuB,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAoB,MAAM,uBAAuB,CAAC;AAC5E,OAAO,EACL,wBAAwB,GAEzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,GAEtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAqB,MAAM,yBAAyB,CAAC;AAChF,OAAO,EACL,wBAAwB,GAEzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kBAAkB,EAClB,iCAAiC,EACjC,0BAA0B,GAE3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,qBAAqB,GAGtB,MAAM,oBAAoB,CAAC;AA8C5B,MAAM,UAAU,YAAY,CAAC,MAA+B;IAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC;IACxC,MAAM,WAAW,GAAG,iBAAiB,CAAC;QACpC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAC;IAEH,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;QACzB,MAAM;QACN,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,iBAAiB;QAC1D,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,cAAc,EAAE,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC;QACvD,WAAW;QACX,eAAe,EAAE,qBAAqB,CAAC;YACrC,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,cAAc,EAAE,WAAW,CAAC,cAAc;YAC1C,MAAM;SACP,CAAC;QACF,kBAAkB,EAAE,wBAAwB,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;QACvE,YAAY,EAAE,kBAAkB,CAAC;YAC/B,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,eAAe,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM;SAC3C,CAAC;QACF,YAAY,EAAE,wBAAwB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC/D,YAAY,EAAE,kBAAkB,CAAC;YAC/B,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB;YAClD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,gBAAgB,EAAE,MAAM,CAAC,UAAU,IAAI,0BAA0B;YACjE,uBAAuB,EACrB,MAAM,CAAC,uBAAuB,IAAI,iCAAiC;SACtE,CAAC;QACF,OAAO,EAAE,qBAAqB,CAAC,MAAM,CAAC,eAAe,CAAC;KACvD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAUlE,OAAO,EAAE,oBAAoB,EAAuB,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAoB,MAAM,uBAAuB,CAAC;AAC5E,OAAO,EACL,wBAAwB,GAEzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,GAEtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAqB,MAAM,yBAAyB,CAAC;AAChF,OAAO,EACL,wBAAwB,GAEzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kBAAkB,EAClB,iCAAiC,EACjC,0BAA0B,GAE3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,qBAAqB,GAGtB,MAAM,oBAAoB,CAAC;AAuD5B,MAAM,UAAU,YAAY,CAAC,MAA+B;IAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC;IACxC,MAAM,WAAW,GAAG,iBAAiB,CAAC;QACpC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAC;IAEH,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;QACzB,MAAM;QACN,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,iBAAiB;QAC1D,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,cAAc,EAAE,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC;QACvD,WAAW;QACX,eAAe,EAAE,qBAAqB,CAAC;YACrC,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,cAAc,EAAE,WAAW,CAAC,cAAc;YAC1C,MAAM;SACP,CAAC;QACF,kBAAkB,EAAE,wBAAwB,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;QACvE,YAAY,EAAE,kBAAkB,CAAC;YAC/B,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,eAAe,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM;SAC3C,CAAC;QACF,YAAY,EAAE,wBAAwB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC/D,YAAY,EAAE,kBAAkB,CAAC;YAC/B,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB;YAClD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,gBAAgB,EAAE,MAAM,CAAC,UAAU,IAAI,0BAA0B;YACjE,uBAAuB,EACrB,MAAM,CAAC,uBAAuB,IAAI,iCAAiC;SACtE,CAAC;QACF,OAAO,EAAE,qBAAqB,CAAC,MAAM,CAAC,eAAe,CAAC;KACvD,CAAC;AACJ,CAAC"}

package/dist/hono-context.d.ts

@@ -0,0 +1,31 @@
+/**
+ * @fileoverview Context variables the auth middleware sets on every request
+ * @description Augments Hono's ContextVariableMap so `c.get("userId")` and
+ * friends are typed in the service and in every app that mounts routes on it.
+ * Re-exported from the package entry, which is what brings this augmentation
+ * into a consumer's compilation.
+ */
+import type { DecodedIdToken } from "firebase-admin/auth";
+export interface AuthContextVariables {
+    firebaseUser: DecodedIdToken;
+    userId: string;
+    userEmail: string | null;
+    siteAdmin: boolean;
+    /**
+     * How the caller authenticated. Neither key method has a firebaseUser.
+     * "api_key" is a personal key (acts as a user); "entity_api_key" is an
+     * entity key (acts as the entity itself).
+     */
+    authMethod: "firebase" | "api_key" | "entity_api_key";
+    /** UUID of the user API key used, when authMethod is "api_key" */
+    apiKeyId: string;
+    /** UUID of the entity API key used, when authMethod is "entity_api_key" */
+    entityApiKeyId: string;
+    /** Entity the request acts as, when authMethod is "entity_api_key" */
+    entityApiKeyEntityId: string;
+}
+declare module "hono" {
+    interface ContextVariableMap extends AuthContextVariables {
+    }
+}
+//# sourceMappingURL=hono-context.d.ts.map

package/dist/hono-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hono-context.d.ts","sourceRoot":"","sources":["../src/hono-context.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,cAAc,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB;;;;OAIG;IACH,UAAU,EAAE,UAAU,GAAG,SAAS,GAAG,gBAAgB,CAAC;IACtD,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,cAAc,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,OAAO,QAAQ,MAAM,CAAC;IACpB,UAAU,kBAAmB,SAAQ,oBAAoB;KAAG;CAC7D"}

package/dist/hono-context.js

@@ -0,0 +1,9 @@
+/**
+ * @fileoverview Context variables the auth middleware sets on every request
+ * @description Augments Hono's ContextVariableMap so `c.get("userId")` and
+ * friends are typed in the service and in every app that mounts routes on it.
+ * Re-exported from the package entry, which is what brings this augmentation
+ * into a consumer's compilation.
+ */
+export {};
+//# sourceMappingURL=hono-context.js.map

package/dist/hono-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hono-context.js","sourceRoot":"","sources":["../src/hono-context.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/index.d.ts

@@ -14,4 +14,6 @@ export { toMicroCents } from "./lib/money.js";
 export { getActor, getPermissionErrorStatus, userActor, ENTITY_API_KEY_PERMISSIONS, type EntityAccess, type EntityActor, type EntityPermissionResult, } from "./lib/entity-helpers.js";
 export { DEFAULT_RATE_LIMITS_CONFIG, DEFAULT_ENTITLEMENT_DISPLAY_NAMES, } from "./middleware/rateLimit.js";
 export * from "./schemas/index.js";
+export { collectForwardingHeaders, FORWARDING_HEADERS, isIpLiteral, isIpv4, isIpv6, isRoutableClientIp, normalizeClientIp, resolveAllowlistIp, resolveCallerIp, } from "./lib/client-ip.js";
+export type { AuthContextVariables } from "./hono-context.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,YAAY,EACZ,KAAK,cAAc,EACnB,KAAK,uBAAuB,GAC7B,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,WAAW,EACX,aAAa,EACb,WAAW,EACX,eAAe,EACf,cAAc,EACd,WAAW,EACX,SAAS,EACT,WAAW,EACX,MAAM,EACN,UAAU,EACV,0BAA0B,EAC1B,kBAAkB,EAClB,eAAe,EACf,SAAS,GACV,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,KAAK,aAAa,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,UAAU,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EACL,QAAQ,EACR,wBAAwB,EACxB,SAAS,EACT,0BAA0B,EAC1B,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,sBAAsB,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,GAClC,MAAM,2BAA2B,CAAC;AACnC,cAAc,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,YAAY,EACZ,KAAK,cAAc,EACnB,KAAK,uBAAuB,GAC7B,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,WAAW,EACX,aAAa,EACb,WAAW,EACX,eAAe,EACf,cAAc,EACd,WAAW,EACX,SAAS,EACT,WAAW,EACX,MAAM,EACN,UAAU,EACV,0BAA0B,EAC1B,kBAAkB,EAClB,eAAe,EACf,SAAS,GACV,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,KAAK,aAAa,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,UAAU,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EACL,QAAQ,EACR,wBAAwB,EACxB,SAAS,EACT,0BAA0B,EAC1B,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,sBAAsB,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,GAClC,MAAM,2BAA2B,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,WAAW,EACX,MAAM,EACN,MAAM,EACN,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/index.js

@@ -13,4 +13,5 @@ export { toMicroCents } from "./lib/money.js";
 export { getActor, getPermissionErrorStatus, userActor, ENTITY_API_KEY_PERMISSIONS, } from "./lib/entity-helpers.js";
 export { DEFAULT_RATE_LIMITS_CONFIG, DEFAULT_ENTITLEMENT_DISPLAY_NAMES, } from "./middleware/rateLimit.js";
 export * from "./schemas/index.js";
+export { collectForwardingHeaders, FORWARDING_HEADERS, isIpLiteral, isIpv4, isIpv6, isRoutableClientIp, normalizeClientIp, resolveAllowlistIp, resolveCallerIp, } from "./lib/client-ip.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,uBAAuB,GAGxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,YAAY,GAGb,MAAM,cAAc,CAAC;AAiBtB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GAEpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EACL,gBAAgB,EAChB,qBAAqB,GAEtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EACL,QAAQ,EACR,wBAAwB,EACxB,SAAS,EACT,0BAA0B,GAI3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,GAClC,MAAM,2BAA2B,CAAC;AACnC,cAAc,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,uBAAuB,GAGxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,YAAY,GAGb,MAAM,cAAc,CAAC;AAiBtB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GAEpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EACL,gBAAgB,EAChB,qBAAqB,GAEtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EACL,QAAQ,EACR,wBAAwB,EACxB,SAAS,EACT,0BAA0B,GAI3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,GAClC,MAAM,2BAA2B,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,WAAW,EACX,MAAM,EACN,MAAM,EACN,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,GAChB,MAAM,oBAAoB,CAAC"}

package/dist/lib/client-ip.d.ts

@@ -0,0 +1,132 @@
+/**
+ * @fileoverview Client IP resolution
+ * @description Who is really calling, given the connection's peer address and
+ * its forwarded headers. Used by the endpoint IP allowlist, and by products
+ * that point self-hosted providers at the caller (ShapeShyft's provider sync).
+ *
+ * Kept free of Hono and the database so the address parsing -- which is where
+ * the sharp edges are -- can be tested directly. The peer address itself comes
+ * from the runtime (`getConnInfo` from `hono/bun`), which the app supplies as
+ * `getPeerAddress`.
+ */
+/** Is this an IPv4 literal? */
+export declare function isIpv4(value: string): boolean;
+/**
+ * Is this an IPv6 literal?
+ *
+ * Parsed rather than pattern-matched. The regex this replaced accepted `":"`,
+ * `"a:"`, and `"1:2"` as valid, which meant a malformed forwarded header could
+ * be treated as a routable client address and written into a provider URL.
+ *
+ * A zone index (`fe80::1%eth0`) is rejected: it is a valid address but cannot be
+ * used as a URL host, which is the only thing this library does with one.
+ */
+export declare function isIpv6(value: string): boolean;
+/** Is this any IP literal, as opposed to a DNS hostname? */
+export declare function isIpLiteral(value: string): boolean;
+/**
+ * Normalize a peer address reported by the server.
+ *
+ * Bun reports an IPv4 peer as an IPv4-mapped IPv6 address
+ * (`::ffff:142.254.88.21`), which is the same address wearing a hat. Unwrap it
+ * so what gets written into a provider URL is the address a person would type.
+ *
+ * @param raw - The address from `getConnInfo(c).remote.address`
+ * @returns A bare IP literal, or null when there is nothing usable
+ */
+export declare function normalizeClientIp(raw: string | undefined | null): string | null;
+/**
+ * Is this an address worth writing into a provider URL?
+ *
+ * A loopback, private, or link-local peer means the request did not come from
+ * the internet -- a local test, a sidecar, or a proxy on the same host. Writing
+ * one of those would quietly break every endpoint using the provider, so the
+ * sync refuses rather than "succeeding" with an address that resolves nowhere
+ * useful from the API's perspective.
+ */
+export declare function isRoutableClientIp(ip: string): boolean;
+/**
+ * Headers that may carry a client address, and are safe to echo back.
+ *
+ * An explicit allowlist, never "every header": the request also carries the
+ * caller's `X-API-Key`, and a diagnostic that reflected the whole header set
+ * back would hand a credential to anything reading the response or the logs.
+ */
+export declare const FORWARDING_HEADERS: readonly ["x-forwarded-for", "x-real-ip", "cf-connecting-ip", "true-client-ip", "x-client-ip", "x-cluster-client-ip", "fastly-client-ip", "x-original-forwarded-for", "forwarded", "x-forwarded-host", "x-forwarded-proto", "cf-ray", "cf-ipcountry", "via"];
+/**
+ * Gather the forwarding-related headers actually present on a request.
+ *
+ * For diagnosing what a deployment's proxies really send, which is the only
+ * reliable way to know which header holds the client address -- guessing it
+ * from an infrastructure repo is how a Cloudflare edge IP ends up written into
+ * a provider URL.
+ *
+ * @param getHeader - Case-insensitive header lookup
+ * @returns Only the allowlisted headers that are present
+ */
+export declare function collectForwardingHeaders(getHeader: (name: string) => string | undefined): Record<string, string>;
+/**
+ * Resolve who is really calling, given the connection's peer and its headers.
+ *
+ * A forwarded header is written by whoever is upstream, so it is only worth
+ * anything once we know the hop that sent it is our own infrastructure. The
+ * peer address settles that: an attacker on the internet cannot make their TCP
+ * connection appear to originate from a private address.
+ *
+ * - **Public peer** -- the client reached us directly. Use the peer and ignore
+ *   every header, forged or not.
+ * - **Private or loopback peer** -- we are behind our own reverse proxy
+ *   (Traefik on the Docker network, in this deployment). Read the client from
+ *   the forwarded headers it set.
+ *
+ * On the trusted branch the headers are consulted in a deliberate order:
+ *
+ * 1. `CF-Connecting-IP` / `True-Client-IP` -- a CDN's own client header, which
+ *    it overwrites on every request and a client therefore cannot forge.
+ * 2. `X-Forwarded-For`, read **right to left**, taking the first public entry.
+ *    Each proxy appends the address that connected to it, so the right-hand
+ *    entries were written by trusted infrastructure while the leftmost may have
+ *    come from the client.
+ * 3. `X-Real-Ip`.
+ *
+ * The CDN header must come first, and this is not theoretical. On
+ * api.shapeshyft.ai the chain is Cloudflare -> Traefik -> API, and Traefik has
+ * no `forwardedHeaders.trustedIPs`, so it *discards* Cloudflare's
+ * `X-Forwarded-For` and rewrites it with the Cloudflare edge address. That edge
+ * address is public, so every "is this routable" check passes and it looks like
+ * a perfectly good client IP -- it just is not one, and it changes from request
+ * to request. `CF-Connecting-IP` is the only header in that chain carrying the
+ * real client.
+ *
+ * @param peerAddress - The connection's peer, from `getConnInfo(c).remote.address`
+ * @param getHeader - Case-insensitive header lookup
+ * @returns The caller's IP, or null when it cannot be established
+ */
+export declare function resolveCallerIp(peerAddress: string | null | undefined, getHeader: (name: string) => string | undefined): string | null;
+/** Outcome of rewriting one provider URL. */
+export type UrlRewrite = {
+    status: "updated";
+    url: string;
+} | {
+    status: "unchanged";
+} | {
+    status: "skipped";
+    reason: string;
+};
+/**
+ * The address an endpoint's IP allowlist is checked against.
+ *
+ * `resolveCallerIp`, falling back to the peer itself. The fallback covers a
+ * caller on the private network that reached us without a proxy: its peer
+ * address is private, so `resolveCallerIp` looks for forwarded headers and finds
+ * none -- but the peer is a TCP fact and cannot be forged, so it is the answer.
+ *
+ * What this replaced trusted the leftmost `X-Forwarded-For` entry from anyone,
+ * which let a caller holding a project key claim any allowlisted address.
+ *
+ * @param peerAddress - The connection's peer; null when the runtime cannot say
+ * @param getHeader - Case-insensitive header lookup
+ * @returns The caller's IP, or null when it cannot be established (deny)
+ */
+export declare function resolveAllowlistIp(peerAddress: string | null | undefined, getHeader: (name: string) => string | undefined): string | null;
+//# sourceMappingURL=client-ip.d.ts.map

package/dist/lib/client-ip.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-ip.d.ts","sourceRoot":"","sources":["../../src/lib/client-ip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AASH,+BAA+B;AAC/B,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE7C;AAiCD;;;;;;;;;GASG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAiB7C;AAED,4DAA4D;AAC5D,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAElD;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAC7B,MAAM,GAAG,IAAI,CASf;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAgBtD;AAED;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,8PAerB,CAAC;AAEX;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAC9C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASxB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAgB,eAAe,CAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACtC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAC9C,MAAM,GAAG,IAAI,CAsCf;AAED,6CAA6C;AAC7C,MAAM,MAAM,UAAU,GAClB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACtC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAC9C,MAAM,GAAG,IAAI,CAIf"}

package/dist/lib/client-ip.js

@@ -0,0 +1,267 @@
+/**
+ * @fileoverview Client IP resolution
+ * @description Who is really calling, given the connection's peer address and
+ * its forwarded headers. Used by the endpoint IP allowlist, and by products
+ * that point self-hosted providers at the caller (ShapeShyft's provider sync).
+ *
+ * Kept free of Hono and the database so the address parsing -- which is where
+ * the sharp edges are -- can be tested directly. The peer address itself comes
+ * from the runtime (`getConnInfo` from `hono/bun`), which the app supplies as
+ * `getPeerAddress`.
+ */
+/** IPv4 dotted quad, each octet 0-255. */
+const IPV4_RE = /^(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}$/;
+/** A single IPv6 group: one to four hex digits. */
+const IPV6_GROUP_RE = /^[0-9a-f]{1,4}$/i;
+/** Is this an IPv4 literal? */
+export function isIpv4(value) {
+    return IPV4_RE.test(value);
+}
+/**
+ * Count the groups on one side of a `::`, or null if the side is malformed.
+ *
+ * An embedded IPv4 tail (`::ffff:1.2.3.4`) is only legal as the final group and
+ * occupies two of the eight, which is why this returns a count rather than a
+ * boolean.
+ */
+function countIpv6Groups(side) {
+    if (side === "")
+        return 0;
+    const groups = side.split(":");
+    let count = 0;
+    for (let i = 0; i < groups.length; i++) {
+        const group = groups[i];
+        if (group === "")
+            return null; // a stray colon, e.g. "a:" or ":a"
+        if (group.includes(".")) {
+            // A dotted quad is only an address here in the final position.
+            if (i !== groups.length - 1 || !isIpv4(group))
+                return null;
+            count += 2;
+            continue;
+        }
+        if (!IPV6_GROUP_RE.test(group))
+            return null;
+        count += 1;
+    }
+    return count;
+}
+/**
+ * Is this an IPv6 literal?
+ *
+ * Parsed rather than pattern-matched. The regex this replaced accepted `":"`,
+ * `"a:"`, and `"1:2"` as valid, which meant a malformed forwarded header could
+ * be treated as a routable client address and written into a provider URL.
+ *
+ * A zone index (`fe80::1%eth0`) is rejected: it is a valid address but cannot be
+ * used as a URL host, which is the only thing this library does with one.
+ */
+export function isIpv6(value) {
+    if (!value.includes(":") || value.includes("%"))
+        return false;
+    const sides = value.split("::");
+    if (sides.length > 2)
+        return false; // "::" may appear at most once
+    const head = countIpv6Groups(sides[0]);
+    if (head === null)
+        return false;
+    // Uncompressed: all eight groups must be spelled out.
+    if (sides.length === 1)
+        return head === 8;
+    const tail = countIpv6Groups(sides[1]);
+    if (tail === null)
+        return false;
+    // "::" must stand in for at least one omitted group.
+    return head + tail <= 7;
+}
+/** Is this any IP literal, as opposed to a DNS hostname? */
+export function isIpLiteral(value) {
+    return isIpv4(value) || isIpv6(value);
+}
+/**
+ * Normalize a peer address reported by the server.
+ *
+ * Bun reports an IPv4 peer as an IPv4-mapped IPv6 address
+ * (`::ffff:142.254.88.21`), which is the same address wearing a hat. Unwrap it
+ * so what gets written into a provider URL is the address a person would type.
+ *
+ * @param raw - The address from `getConnInfo(c).remote.address`
+ * @returns A bare IP literal, or null when there is nothing usable
+ */
+export function normalizeClientIp(raw) {
+    if (typeof raw !== "string")
+        return null;
+    const trimmed = raw.trim();
+    if (trimmed.length === 0)
+        return null;
+    const mapped = /^::ffff:(.+)$/i.exec(trimmed);
+    const candidate = mapped?.[1] ?? trimmed;
+    return isIpLiteral(candidate) ? candidate : null;
+}
+/**
+ * Is this an address worth writing into a provider URL?
+ *
+ * A loopback, private, or link-local peer means the request did not come from
+ * the internet -- a local test, a sidecar, or a proxy on the same host. Writing
+ * one of those would quietly break every endpoint using the provider, so the
+ * sync refuses rather than "succeeding" with an address that resolves nowhere
+ * useful from the API's perspective.
+ */
+export function isRoutableClientIp(ip) {
+    if (isIpv4(ip)) {
+        const [a, b] = ip.split(".").map(Number);
+        if (a === 0 || a === 127)
+            return false; // unspecified, loopback
+        if (a === 10)
+            return false; // 10/8
+        if (a === 172 && b >= 16 && b <= 31)
+            return false; // 172.16/12
+        if (a === 192 && b === 168)
+            return false; // 192.168/16
+        if (a === 169 && b === 254)
+            return false; // 169.254/16 link-local
+        return true;
+    }
+    const lower = ip.toLowerCase();
+    if (lower === "::" || lower === "::1")
+        return false; // unspecified, loopback
+    if (/^f[cd][0-9a-f]{2}:/.test(lower))
+        return false; // fc00::/7 unique-local
+    if (/^fe[89ab][0-9a-f]:/.test(lower))
+        return false; // fe80::/10 link-local
+    return true;
+}
+/**
+ * Headers that may carry a client address, and are safe to echo back.
+ *
+ * An explicit allowlist, never "every header": the request also carries the
+ * caller's `X-API-Key`, and a diagnostic that reflected the whole header set
+ * back would hand a credential to anything reading the response or the logs.
+ */
+export const FORWARDING_HEADERS = [
+    "x-forwarded-for",
+    "x-real-ip",
+    "cf-connecting-ip",
+    "true-client-ip",
+    "x-client-ip",
+    "x-cluster-client-ip",
+    "fastly-client-ip",
+    "x-original-forwarded-for",
+    "forwarded",
+    "x-forwarded-host",
+    "x-forwarded-proto",
+    "cf-ray",
+    "cf-ipcountry",
+    "via",
+];
+/**
+ * Gather the forwarding-related headers actually present on a request.
+ *
+ * For diagnosing what a deployment's proxies really send, which is the only
+ * reliable way to know which header holds the client address -- guessing it
+ * from an infrastructure repo is how a Cloudflare edge IP ends up written into
+ * a provider URL.
+ *
+ * @param getHeader - Case-insensitive header lookup
+ * @returns Only the allowlisted headers that are present
+ */
+export function collectForwardingHeaders(getHeader) {
+    const found = {};
+    for (const name of FORWARDING_HEADERS) {
+        const value = getHeader(name);
+        if (value !== undefined && value !== "") {
+            found[name] = value;
+        }
+    }
+    return found;
+}
+/**
+ * Resolve who is really calling, given the connection's peer and its headers.
+ *
+ * A forwarded header is written by whoever is upstream, so it is only worth
+ * anything once we know the hop that sent it is our own infrastructure. The
+ * peer address settles that: an attacker on the internet cannot make their TCP
+ * connection appear to originate from a private address.
+ *
+ * - **Public peer** -- the client reached us directly. Use the peer and ignore
+ *   every header, forged or not.
+ * - **Private or loopback peer** -- we are behind our own reverse proxy
+ *   (Traefik on the Docker network, in this deployment). Read the client from
+ *   the forwarded headers it set.
+ *
+ * On the trusted branch the headers are consulted in a deliberate order:
+ *
+ * 1. `CF-Connecting-IP` / `True-Client-IP` -- a CDN's own client header, which
+ *    it overwrites on every request and a client therefore cannot forge.
+ * 2. `X-Forwarded-For`, read **right to left**, taking the first public entry.
+ *    Each proxy appends the address that connected to it, so the right-hand
+ *    entries were written by trusted infrastructure while the leftmost may have
+ *    come from the client.
+ * 3. `X-Real-Ip`.
+ *
+ * The CDN header must come first, and this is not theoretical. On
+ * api.shapeshyft.ai the chain is Cloudflare -> Traefik -> API, and Traefik has
+ * no `forwardedHeaders.trustedIPs`, so it *discards* Cloudflare's
+ * `X-Forwarded-For` and rewrites it with the Cloudflare edge address. That edge
+ * address is public, so every "is this routable" check passes and it looks like
+ * a perfectly good client IP -- it just is not one, and it changes from request
+ * to request. `CF-Connecting-IP` is the only header in that chain carrying the
+ * real client.
+ *
+ * @param peerAddress - The connection's peer, from `getConnInfo(c).remote.address`
+ * @param getHeader - Case-insensitive header lookup
+ * @returns The caller's IP, or null when it cannot be established
+ */
+export function resolveCallerIp(peerAddress, getHeader) {
+    const peer = normalizeClientIp(peerAddress);
+    if (!peer)
+        return null;
+    // A public peer is the client itself. Headers add nothing and can only lie.
+    if (isRoutableClientIp(peer)) {
+        return peer;
+    }
+    // Private peer: a hop inside our own network, so its headers are worth reading.
+    // A CDN's client header first: it is overwritten upstream on every request,
+    // whereas X-Forwarded-For may have been rewritten by an intermediate proxy
+    // that does not trust the CDN.
+    for (const name of ["cf-connecting-ip", "true-client-ip"]) {
+        const cdnClient = normalizeClientIp(getHeader(name));
+        if (cdnClient && isRoutableClientIp(cdnClient)) {
+            return cdnClient;
+        }
+    }
+    const forwardedFor = getHeader("x-forwarded-for");
+    if (forwardedFor) {
+        const hops = forwardedFor.split(",");
+        for (let i = hops.length - 1; i >= 0; i--) {
+            const candidate = normalizeClientIp(hops[i].trim());
+            if (candidate && isRoutableClientIp(candidate)) {
+                return candidate;
+            }
+        }
+    }
+    const realIp = normalizeClientIp(getHeader("x-real-ip"));
+    if (realIp && isRoutableClientIp(realIp)) {
+        return realIp;
+    }
+    return null;
+}
+/**
+ * The address an endpoint's IP allowlist is checked against.
+ *
+ * `resolveCallerIp`, falling back to the peer itself. The fallback covers a
+ * caller on the private network that reached us without a proxy: its peer
+ * address is private, so `resolveCallerIp` looks for forwarded headers and finds
+ * none -- but the peer is a TCP fact and cannot be forged, so it is the answer.
+ *
+ * What this replaced trusted the leftmost `X-Forwarded-For` entry from anyone,
+ * which let a caller holding a project key claim any allowlisted address.
+ *
+ * @param peerAddress - The connection's peer; null when the runtime cannot say
+ * @param getHeader - Case-insensitive header lookup
+ * @returns The caller's IP, or null when it cannot be established (deny)
+ */
+export function resolveAllowlistIp(peerAddress, getHeader) {
+    return (resolveCallerIp(peerAddress, getHeader) ?? normalizeClientIp(peerAddress));
+}
+//# sourceMappingURL=client-ip.js.map

package/dist/lib/client-ip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-ip.js","sourceRoot":"","sources":["../../src/lib/client-ip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,0CAA0C;AAC1C,MAAM,OAAO,GACX,6EAA6E,CAAC;AAEhF,mDAAmD;AACnD,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAEzC,+BAA+B;AAC/B,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,CAAC,CAAC;IAE1B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QACzB,IAAI,KAAK,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC,CAAC,mCAAmC;QAElE,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,+DAA+D;YAC/D,IAAI,CAAC,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC3D,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAE9D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,+BAA+B;IAEnE,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAEhC,sDAAsD;IACtD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,CAAC;IAE1C,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAEhC,qDAAqD;IACrD,OAAO,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAA8B;IAE9B,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;IAEzC,OAAO,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAU;IAC3C,IAAI,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACf,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAqB,CAAC;QAC7D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC,CAAC,wBAAwB;QAChE,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC,CAAC,OAAO;QACnC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC,CAAC,YAAY;QAC/D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC,CAAC,aAAa;QACvD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC,CAAC,wBAAwB;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,wBAAwB;IAC7E,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,wBAAwB;IAC5E,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,uBAAuB;IAC3E,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,iBAAiB;IACjB,WAAW;IACX,kBAAkB;IAClB,gBAAgB;IAChB,aAAa;IACb,qBAAqB;IACrB,kBAAkB;IAClB,0BAA0B;IAC1B,WAAW;IACX,kBAAkB;IAClB,mBAAmB;IACnB,QAAQ;IACR,cAAc;IACd,KAAK;CACG,CAAC;AAEX;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CACtC,SAA+C;IAE/C,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,UAAU,eAAe,CAC7B,WAAsC,EACtC,SAA+C;IAE/C,MAAM,IAAI,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,4EAA4E;IAC5E,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gFAAgF;IAEhF,4EAA4E;IAC5E,2EAA2E;IAC3E,+BAA+B;IAC/B,KAAK,MAAM,IAAI,IAAI,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,IAAI,SAAS,IAAI,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/C,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAClD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACrD,IAAI,SAAS,IAAI,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/C,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;IACzD,IAAI,MAAM,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAQD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAAsC,EACtC,SAA+C;IAE/C,OAAO,CACL,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,iBAAiB,CAAC,WAAW,CAAC,CAC1E,CAAC;AACJ,CAAC"}

package/dist/middleware/firebaseAuth.d.ts

@@ -5,30 +5,6 @@
  * prefixes, auth functions, and storage all come from the service context.
  */
 import type { MiddlewareHandler } from "hono";
-import type { DecodedIdToken } from "firebase-admin/auth";
 import type { ServiceContext } from "../context.js";
-/**
- * Augment Hono's ContextVariableMap for type-safe context access.
- */
-declare module "hono" {
-    interface ContextVariableMap {
-        firebaseUser: DecodedIdToken;
-        userId: string;
-        userEmail: string | null;
-        siteAdmin: boolean;
-        /**
-         * How the caller authenticated. Neither key method has a firebaseUser.
-         * "api_key" is a personal key (acts as a user); "entity_api_key" is an
-         * entity key (acts as the entity itself).
-         */
-        authMethod: "firebase" | "api_key" | "entity_api_key";
-        /** UUID of the user API key used, when authMethod is "api_key" */
-        apiKeyId: string;
-        /** UUID of the entity API key used, when authMethod is "entity_api_key" */
-        entityApiKeyId: string;
-        /** Entity the request acts as, when authMethod is "entity_api_key" */
-        entityApiKeyEntityId: string;
-    }
-}
 export declare function createFirebaseAuthMiddleware(ctx: ServiceContext): MiddlewareHandler;
 //# sourceMappingURL=firebaseAuth.d.ts.map

package/dist/middleware/firebaseAuth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"firebaseAuth.d.ts","sourceRoot":"","sources":["../../src/middleware/firebaseAuth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAW,iBAAiB,EAAQ,MAAM,MAAM,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAG1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD;;GAEG;AACH,OAAO,QAAQ,MAAM,CAAC;IACpB,UAAU,kBAAkB;QAC1B,YAAY,EAAE,cAAc,CAAC;QAC7B,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,SAAS,EAAE,OAAO,CAAC;QACnB;;;;WAIG;QACH,UAAU,EAAE,UAAU,GAAG,SAAS,GAAG,gBAAgB,CAAC;QACtD,kEAAkE;QAClE,QAAQ,EAAE,MAAM,CAAC;QACjB,2EAA2E;QAC3E,cAAc,EAAE,MAAM,CAAC;QACvB,sEAAsE;QACtE,oBAAoB,EAAE,MAAM,CAAC;KAC9B;CACF;AAYD,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,cAAc,GAClB,iBAAiB,CA8JnB"}
+{"version":3,"file":"firebaseAuth.d.ts","sourceRoot":"","sources":["../../src/middleware/firebaseAuth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAW,iBAAiB,EAAQ,MAAM,MAAM,CAAC;AAG7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAYpD,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,cAAc,GAClB,iBAAiB,CA8JnB"}

package/dist/middleware/firebaseAuth.js.map

@@ -1 +1 @@
-{"version":3,"file":"firebaseAuth.js","sourceRoot":"","sources":["../../src/middleware/firebaseAuth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AA2BjC;;;;;;;GAOG;AACH,MAAM,0BAA0B,GAAG,YAAY,CAAC;AAEhD,MAAM,UAAU,4BAA4B,CAC1C,GAAmB;IAEnB,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAC3B,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAC7B,MAAM,EAAE,4BAA4B,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC;IACzD,MAAM,EAAE,iBAAiB,EAAE,GAAG,GAAG,CAAC,eAAe,CAAC;IAClD,MAAM,EAAE,8BAA8B,EAAE,GAAG,GAAG,CAAC,kBAAkB,CAAC;IAClE,MAAM,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC;IAC3C,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IACjE,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC;IAC1C,MAAM,YAAY,GAAG,GAAG,CAAC,kBAAkB,CAAC,mBAAmB,CAAC;IAEhE;;;OAGG;IACH,KAAK,UAAU,gBAAgB,CAC7B,WAAmB,EACnB,KAAqB;QAErB,MAAM,QAAQ,GAAG,MAAM,EAAE;aACtB,MAAM,EAAE;aACR,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;QAE9C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;gBAC5B,YAAY,EAAE,WAAW;gBACzB,KAAK,EAAE,KAAK,IAAI,IAAI;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,UAAU,sBAAsB,CAAC,CAAU,EAAE,IAAU;QAC1D,qFAAqF;QACrF,8EAA8E;QAC9E,iEAAiE;QACjE,MAAM,UAAU,GAAG,4BAA4B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAC;YACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,6BAA6B,CAAC,EAAE,GAAG,CAAC,CAAC;YACnE,CAAC;YAED,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;YACvC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;YACpD,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;YAC/B,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAElC,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,oFAAoF;QACpF,6EAA6E;QAC7E,6EAA6E;QAC7E,8BAA8B;QAC9B,MAAM,YAAY,GAAG,8BAA8B,CAAC,IAAI,CAAC,EAAE,CACzD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CACnB,CAAC;QACF,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC3B,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,iCAAiC,CAAC,EAAE,GAAG,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YACrE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,6BAA6B,CAAC,EAAE,GAAG,CAAC,CAAC;YACnE,CAAC;YAED,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;gBACrD,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CACX,kHAAkH,CACnH,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;YAC1C,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACzB,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAC1B,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;YACtC,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YACxC,CAAC,CAAC,GAAG,CAAC,sBAAsB,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAEjD,0DAA0D;YAC1D,aAAa,CAAC,OAAO;iBAClB,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC;iBAC7B,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC,CAAC;YAErE,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,uBAAuB;QACvB,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAEjD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CACX,6HAA6H,UAAU,6CAA6C,YAAY,MAAM,CACvM,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE5C,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;YAChC,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,mDAAmD,CAAC,EAClE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;YAEhD,IAAI,eAAe,CAAC,YAAY,CAAC,EAAE,CAAC;gBAClC,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,6CAA6C,CAAC,EAC5D,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC;YAChC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,IAAI,IAAI,CAAC;YAE7C,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;YACpC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACxB,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAC9B,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;YAC3C,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;YAEhC,mDAAmD;YACnD,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAC9C,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,GAAG,CAAC,CACnD,CAAC;YAEF,MAAM,IAAI,EAAE,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,mCAAmC,CAAC,EAAE,GAAG,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,OAAO,sBAAsB,CAAC;AAChC,CAAC"}
+{"version":3,"file":"firebaseAuth.js","sourceRoot":"","sources":["../../src/middleware/firebaseAuth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAGjC;;;;;;;GAOG;AACH,MAAM,0BAA0B,GAAG,YAAY,CAAC;AAEhD,MAAM,UAAU,4BAA4B,CAC1C,GAAmB;IAEnB,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAC3B,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAC7B,MAAM,EAAE,4BAA4B,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC;IACzD,MAAM,EAAE,iBAAiB,EAAE,GAAG,GAAG,CAAC,eAAe,CAAC;IAClD,MAAM,EAAE,8BAA8B,EAAE,GAAG,GAAG,CAAC,kBAAkB,CAAC;IAClE,MAAM,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC;IAC3C,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IACjE,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC;IAC1C,MAAM,YAAY,GAAG,GAAG,CAAC,kBAAkB,CAAC,mBAAmB,CAAC;IAEhE;;;OAGG;IACH,KAAK,UAAU,gBAAgB,CAC7B,WAAmB,EACnB,KAAqB;QAErB,MAAM,QAAQ,GAAG,MAAM,EAAE;aACtB,MAAM,EAAE;aACR,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;QAE9C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;gBAC5B,YAAY,EAAE,WAAW;gBACzB,KAAK,EAAE,KAAK,IAAI,IAAI;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,UAAU,sBAAsB,CAAC,CAAU,EAAE,IAAU;QAC1D,qFAAqF;QACrF,8EAA8E;QAC9E,iEAAiE;QACjE,MAAM,UAAU,GAAG,4BAA4B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAC;YACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,6BAA6B,CAAC,EAAE,GAAG,CAAC,CAAC;YACnE,CAAC;YAED,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;YACvC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;YACpD,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;YAC/B,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAElC,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,oFAAoF;QACpF,6EAA6E;QAC7E,6EAA6E;QAC7E,8BAA8B;QAC9B,MAAM,YAAY,GAAG,8BAA8B,CAAC,IAAI,CAAC,EAAE,CACzD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CACnB,CAAC;QACF,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC3B,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,iCAAiC,CAAC,EAAE,GAAG,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YACrE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,6BAA6B,CAAC,EAAE,GAAG,CAAC,CAAC;YACnE,CAAC;YAED,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;gBACrD,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CACX,kHAAkH,CACnH,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;YAC1C,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACzB,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAC1B,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;YACtC,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YACxC,CAAC,CAAC,GAAG,CAAC,sBAAsB,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAEjD,0DAA0D;YAC1D,aAAa,CAAC,OAAO;iBAClB,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC;iBAC7B,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC,CAAC;YAErE,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,uBAAuB;QACvB,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAEjD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CACX,6HAA6H,UAAU,6CAA6C,YAAY,MAAM,CACvM,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE5C,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;YAChC,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,mDAAmD,CAAC,EAClE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;YAEhD,IAAI,eAAe,CAAC,YAAY,CAAC,EAAE,CAAC;gBAClC,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,6CAA6C,CAAC,EAC5D,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC;YAChC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,IAAI,IAAI,CAAC;YAE7C,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;YACpC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACxB,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAC9B,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;YAC3C,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;YAEhC,mDAAmD;YACnD,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAC9C,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,GAAG,CAAC,CACnD,CAAC;YAEF,MAAM,IAAI,EAAE,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,mCAAmC,CAAC,EAAE,GAAG,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,OAAO,sBAAsB,CAAC;AAChC,CAAC"}

package/dist/routes/ai.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ai.d.ts","sourceRoot":"","sources":["../../src/routes/ai.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AA6B5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AASpD,wBAAgB,cAAc,CAAC,GAAG,EAAE,cAAc,8EAm5BjD"}
+{"version":3,"file":"ai.d.ts","sourceRoot":"","sources":["../../src/routes/ai.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AA6B5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAUpD,wBAAgB,cAAc,CAAC,GAAG,EAAE,cAAc,8EAg5BjD"}

package/dist/routes/ai.js

@@ -13,6 +13,7 @@ import { ApiHelper, estimateCost, getModelPricing, extractMediaFromInput, conver
 import { EntitlementHelper, RateLimitChecker, } from "@sudobility/ratelimit_service";
 import { SubscriptionHelper } from "@sudobility/subscription_service";
 import { toMicroCents } from "../lib/money.js";
+import { resolveAllowlistIp } from "../lib/client-ip.js";
 export function createAiRouter(ctx) {
     const { db } = ctx;
     const { projects, endpoints, usageAnalytics, entities, entityMembers, users, rateLimitCounters, } = ctx.tables;
@@ -60,22 +61,22 @@ export function createAiRouter(ctx) {
         return null;
     }
     /**
-     * Get client IP address from request
+     * The caller's IP, for the endpoint allowlist.
+     *
+     * Forwarded headers are believed only when the connection itself comes from a
+     * private address -- our own proxy. A caller that connects directly is judged
+     * by its connection, so it cannot name an allowlisted address in a header.
+     * Null (deny) when the runtime cannot report the peer.
      */
     function getClientIp(c) {
-        // Check common proxy headers first
-        const xForwardedFor = c.req.header("X-Forwarded-For");
-        if (xForwardedFor) {
-            // X-Forwarded-For can be comma-separated list; take the first (client) IP
-            return xForwardedFor.split(",")[0]?.trim() ?? null;
-        }
-        const xRealIp = c.req.header("X-Real-IP");
-        if (xRealIp) {
-            return xRealIp;
-        }
-        // Fallback to connection info if available
-        // Note: This may not work in all environments
-        return c.req.raw?.socket?.remoteAddress ?? null;
+        let peer;
+        try {
+            peer = ctx.getPeerAddress(c);
+        }
+        catch {
+            peer = null;
+        }
+        return resolveAllowlistIp(peer, name => c.req.header(name));
     }
     /**
      * Check if IP is in the allowlist

package/dist/routes/ai.js.map

@@ -1 +1 @@
-{"version":3,"file":"ai.js","sourceRoot":"","sources":["../../src/routes/ai.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,eAAe,EACf,aAAa,GAId,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,SAAS,EACT,YAAY,EACZ,eAAe,EAEf,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAQtE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,UAAU,cAAc,CAAC,GAAmB;IAChD,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACnB,MAAM,EACJ,QAAQ,EACR,SAAS,EACT,cAAc,EACd,QAAQ,EACR,aAAa,EACb,KAAK,EACL,iBAAiB,GAClB,GAAG,GAAG,CAAC,MAAM,CAAC;IACf,MAAM,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,GAAG,GAAG,CAAC,cAAc,CAAC;IAE1E,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;IAE5B;;;;;;;;;OASG;IACH,KAAK,UAAU,kBAAkB,CAAC,UAAkB;QAClD,IAAI,CAAC;YACH,MAAM,EAAE;iBACL,MAAM,CAAC,SAAS,CAAC;iBACjB,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,CAAA,GAAG,SAAS,CAAC,UAAU,MAAM,EAAE,CAAC;iBACrD,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAuBD,gFAAgF;IAChF,mBAAmB;IACnB,gFAAgF;IAEhF;;OAEG;IACH,SAAS,aAAa,CAAC,CAAM;QAC3B,2BAA2B;QAC3B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,+CAA+C;QAC/C,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACjD,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,SAAS,WAAW,CAAC,CAAM;QACzB,mCAAmC;QACnC,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACtD,IAAI,aAAa,EAAE,CAAC;YAClB,0EAA0E;YAC1E,OAAO,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;QACrD,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1C,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,2CAA2C;QAC3C,8CAA8C;QAC9C,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,IAAI,IAAI,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,SAAS,WAAW,CAClB,QAAuB,EACvB,SAA0B;QAE1B,oCAAoC;QACpC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,6CAA6C;QAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED,gFAAgF;IAChF,2BAA2B;IAC3B,gFAAgF;IAEhF,gFAAgF;IAChF,sDAAsD;IAEtD,gFAAgF;IAChF,0BAA0B;IAC1B,gFAAgF;IAEhF;;;OAGG;IACH,KAAK,UAAU,gBAAgB,CAC7B,UAAkB;QAElB,MAAM,UAAU,GAAG,MAAM,EAAE;aACxB,MAAM,EAAE;aACR,IAAI,CAAC,QAAQ,CAAC;aACd,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;QAE/C,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC/B,CAAC;IAED,sCAAsC;IACtC,IAAI,mBAAmB,GAA8B,IAAI,CAAC;IAC1D,IAAI,kBAAkB,GAA6B,IAAI,CAAC;IACxD,IAAI,iBAAiB,GAA4B,IAAI,CAAC;IAEtD;;;OAGG;IACH,SAAS,qBAAqB;QAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,CAAC;QACpC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,mBAAmB,GAAG,IAAI,kBAAkB,CAAC;gBAC3C,gBAAgB,EAAE,MAAM;aACzB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,SAAS,oBAAoB;QAC3B,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,kBAAkB,GAAG,IAAI,iBAAiB,CACxC,GAAG,CAAC,YAAY,CAAC,gBAAgB,CAClC,CAAC;QACJ,CAAC;QACD,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,SAAS,mBAAmB;QAC1B,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,iBAAiB,GAAG,IAAI,gBAAgB,CAAC;gBACvC,EAAE,EAAE,EAAS;gBACb,KAAK,EAAE,iBAAwB;aAChC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,SAAS,WAAW,CAAC,CAAM;QACzB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,OAAO,QAAQ,KAAK,MAAM,CAAC;IAC7B,CAAC;IAED;;;;;;;;;OASG;IACH,SAAS,gBAAgB,CACvB,eAAwB,EACxB,gBAAqC;QAErC,IAAI,CAAC,eAAe;YAAE,OAAO,KAAK,CAAC;QACnC,OAAO,gBAAgB,IAAI,IAAI,CAAC;IAClC,CAAC;IAED;;;;OAIG;IACH,KAAK,UAAU,wBAAwB,CAAC,MAAiB;QACvD,+BAA+B;QAC/B,MAAM,WAAW,GAAG,MAAM,EAAE;aACzB,MAAM,EAAE;aACR,IAAI,CAAC,aAAa,CAAC;aACnB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,EACtC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,EAC/B,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAClC,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,6CAA6C;QAC7C,MAAM,SAAS,GAAG,MAAM,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC;aACtD,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,KAAK,EAAE,CAAC;YACnD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,6CAA6C;QAC7C,OAAO,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;IAED;;;;;OAKG;IACH,KAAK,UAAU,cAAc,CAC3B,CAAM,EACN,MAAiB;QAEjB,gEAAgE;QAChE,IAAI,MAAM,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAC;QAC1C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,iDAAiD;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,2CAA2C;YAC3C,oEAAoE;YACpE,MAAM,gBAAgB,GAAG,MAAM,SAAS,CAAC,mBAAmB,CAC1D,MAAM,CAAC,EAAE,EACT,QAAQ,CACT,CAAC;YACF,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC,aAAa,CACjD,gBAAgB,CAAC,YAAY,CAC9B,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,mBAAmB,EAAE,CAAC,iBAAiB,CAC1D,MAAM,CAAC,EAAE,EACT,MAAM,EACN,gBAAgB,CAAC,qBAAqB,CACvC,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CACX,wBAAwB,MAAM,CAAC,aAAa,IAAI,SAAS,WAAW;oBAClE,qBAAqB,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,GAAG,IAAI;oBACvD,SAAS,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,GAAG,IAAI;oBAC1C,WAAW,MAAM,CAAC,SAAS,CAAC,OAAO,IAAI,GAAG,EAAE,CAC/C,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,OAAO,IAAI,CAAC,CAAC,UAAU;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gEAAgE;YAChE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,UAAU,qBAAqB,CAAC,CAAM;QACzC,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,YAAY,EAAE,GACnD,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEvB,gEAAgE;QAChE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,EAAE,GAAG,CAAC;aAC/D,CAAC;QACJ,CAAC;QAED,wCAAwC;QACxC,MAAM,WAAW,GAAG,MAAM,EAAE;aACzB,MAAM,EAAE;aACR,IAAI,CAAC,QAAQ,CAAC;aACd,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,EACjC,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,EACtC,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAC7B,CACF,CAAC;QAEJ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,EAAE,GAAG,CAAC;aAC1D,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAE,CAAC;QAEhC,sBAAsB;QACtB,MAAM,cAAc,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CACd,aAAa,CACX,+EAA+E,CAChF,EACD,GAAG,CACJ;aACF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,cAAc,CAAC,EAAE,CAAC;YACzC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,EAAE,GAAG,CAAC;aAC/D,CAAC;QACJ,CAAC;QAED,6CAA6C;QAC7C,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACtD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,gCAAgC,CAAC,EAAE,GAAG,CAAC;aACvE,CAAC;QACJ,CAAC;QAED,6DAA6D;QAC7D,MAAM,UAAU,GAAG,qBAAqB,CACtC,cAAc,EACd,OAAO,CAAC,iBAAiB,EACzB,OAAO,CAAC,UAAU,CACnB,CAAC;QAEF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,EAAE,GAAG,CAAC;aACxD,CAAC;QACJ,CAAC;QAED,0CAA0C;QAC1C,MAAM,YAAY,GAAG,MAAM,EAAE;aAC1B,MAAM,EAAE;aACR,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,EACtC,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,YAAY,CAAC,EACzC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAC9B,CACF,CAAC;QAEJ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,EAAE,GAAG,CAAC;aAC3D,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAE,CAAC;QAElC,uDAAuD;QACvD,MAAM,WAAW,GAAG,QAAQ,CAAC,YAA+B,CAAC;QAC7D,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;gBACxC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CACd,aAAa,CACX,cAAc,QAAQ,IAAI,SAAS,yCAAyC,CAC7E,EACD,GAAG,CACJ;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,sDAAsD;QACtD,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACnC,IAAI,QAAQ,CAAC,WAAW,KAAK,aAAa,EAAE,CAAC;YAC3C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CACd,aAAa,CACX,UAAU,aAAa,qBAAqB,QAAQ,CAAC,WAAW,EAAE,CACnE,EACD,GAAG,CACJ;aACF,CAAC;QACJ,CAAC;QAED,oCAAoC;QACpC,IAAI,SAAkB,CAAC;QACvB,IAAI,CAAC;YACH,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;gBAC5B,yBAAyB;gBACzB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC/B,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,kBAAkB;gBAClB,SAAS,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACjC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC,EAAE,GAAG,CAAC;aAC7D,CAAC;QACJ,CAAC;QAED,uEAAuE;QACvE,wEAAwE;QACxE,0EAA0E;QAC1E,wDAAwD;QACxD,IAAI,UAA8B,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC;gBAC7C,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,QAAQ;aACT,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC;iBACnE,CAAC;YACJ,CAAC;YACD,UAAU,GAAG,QAAQ,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;YACzD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CACd,aAAa,CAAC,uCAAuC,CAAC,EACtD,GAAG,CACJ;aACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM;YACN,OAAO;YACP,QAAQ;YACR,UAAU;YACV,SAAS;SACV,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,0BAA0B;IAC1B,gFAAgF;IAEhF;;OAEG;IACH,KAAK,UAAU,mBAAmB,CAAC,CAAM;QACvC,MAAM,gBAAgB,GAAG,MAAM,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;YAC9B,OAAO,gBAAgB,CAAC,QAAQ,CAAC;QACnC,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,gBAAgB,CAAC;QAErE,gDAAgD;QAChD,MAAM,iBAAiB,GAAG,MAAM,cAAc,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,iBAAiB,EAAE,CAAC;YACtB,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QAED,6EAA6E;QAC7E,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,GAC9C,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAEnC,+CAA+C;QAC/C,gFAAgF;QAChF,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;YAC9B,SAAS,EAAE,YAAY;YACvB,YAAY,EAAE,QAAQ,CAAC,aAAkC;YACzD,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,OAAO,EAAE,eAAe,IAAI,QAAQ,CAAC,OAAO;YAC5C,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAC9B,CAAC,CAAC;QAEH,MAAM,cAAc,GAAqB,EAAE,MAAM,EAAE,CAAC;QACpD,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAmB,cAAc,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,gFAAgF;IAChF,2BAA2B;IAC3B,gFAAgF;IAEhF;;OAEG;IACH,KAAK,UAAU,eAAe,CAAC,CAAM;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,MAAM,gBAAgB,GAAG,MAAM,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;YAC9B,OAAO,gBAAgB,CAAC,QAAQ,CAAC;QACnC,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,GACxD,gBAAgB,CAAC;QAEnB,gDAAgD;QAChD,MAAM,iBAAiB,GAAG,MAAM,cAAc,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,iBAAiB,EAAE,CAAC;YACtB,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QAED,mEAAmE;QACnE,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC;gBACxC,CAAC;gBACD,MAAM;gBACN,OAAO;gBACP,QAAQ;gBACR,QAAQ,EAAE,UAAU,CAAC,QAAQ;aAC9B,CAAC,CAAC;YACH,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC;QACxB,CAAC;QAED,6EAA6E;QAC7E,MAAM,EACJ,OAAO,EAAE,eAAe,EACxB,SAAS,EAAE,mBAAmB,EAC9B,eAAe,EAAE,wBAAwB,EACzC,YAAY,EAAE,oBAAoB,GACnC,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAErC,4EAA4E;QAC5E,2EAA2E;QAC3E,kCAAkC;QAClC,MAAM,OAAO,GAAG,sBAAsB,CACpC,QAAQ,CAAC,iBAAiB,EAC1B,wBAAwB,CACzB,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QACnD,CAAC;QAED,iEAAiE;QACjE,MAAM,gBAAgB,GAAG,qBAAqB,CAC5C,oBAA+C,CAChD,CAAC;QACF,IAAI,gBAAgB,CAAC,KAAK,EAAE,CAAC;YAC3B,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,gBAAgB,CAAC,MAAO,CAAC;QAEzE,6DAA6D;QAC7D,IAAI,KAAK,GAAG,cAAc,CAAC;QAC3B,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,uBAAuB,CAAC,cAAc,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,eAAe,EAAE,CAAC;gBACzB,MAAM,YAAY,GAChB,eAAe,YAAY,KAAK;oBAC9B,CAAC,CAAC,eAAe,CAAC,OAAO;oBACzB,CAAC,CAAC,gCAAgC,CAAC;gBACvC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAED,yCAAyC;QACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,SAAS,CAAC;QAE1C,qDAAqD;QACrD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,yBAAyB,CAAC;gBAC3C,KAAK;gBACL,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,UAAU,EAAE,KAAK;gBACjB,aAAa,EAAE;gBACb,6DAA6D;gBAC7D,wDAAwD;iBACzD;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtB,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAClE,CAAC;YAED,gCAAgC;YAChC,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC/D,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;oBAC7B,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAClD,GAAG,CACJ,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,uDAAuD;QACvD,gFAAgF;QAChF,MAAM,OAAO,GAAG,SAAS,CAAC,kBAAkB,CAAC;YAC3C,SAAS,EAAE,YAAY;YACvB,YAAY,EAAE,QAAQ,CAAC,aAAkC;YACzD,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,OAAO,EAAE,eAAe,IAAI,QAAQ,CAAC,OAAO;YAC5C,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAC9B,CAAC,CAAC;QAEH,iDAAiD;QACjD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,oBAI5B,CAAC;QAET,gCAAgC;QAChC,wDAAwD;QACxD,MAAM,WAAW,GAAG;YAClB,MAAM,EAAE,OAAO,CAAC,IAAI;YACpB,YAAY,EAAE,OAAO,CAAC,MAAM;YAC5B,YAAY,EAAG,QAAQ,CAAC,aAA4B,IAAI;gBACtD,IAAI,EAAE,QAAQ;aACf;YACD,KAAK;YACL,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YAC3C,kBAAkB,EAAE,kBAAkB,IAAI,SAAS;YACnD,SAAS,EAAE,gBAAgB,CACzB,QAAQ,CAAC,UAAU,IAAI,KAAK,EAC5B,mBAAmB,CACpB;YACD,yEAAyE;YACzE,iCAAiC;YACjC,SAAS,EAAE,OAAO,CAAC,KAAK,IAAI,SAAS;YACrC;;;;;;;;cAQE;YACF,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,SAAS;SAC/C,CAAC;QAEF,MAAM,UAAU,GACd,QAAQ,CAAC,mBAAmB,KAAK,KAAK;YACpC,CAAC,CAAC;gBACE,GAAG,WAAW;gBACd,iBAAiB,EAAE,KAAc;gBACjC,QAAQ,EAAE,QAAQ,CAAC,IAAI;aACxB;YACH,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,iBAAiB,EAAE,QAAiB,EAAE,CAAC;QAE/D,kCAAkC;QAClC,MAAM,QAAQ,GAAG,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,QAAQ,EAAE;YACvD,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,SAAS,EAAE,UAAU,CAAC,SAAS;SAChC,CAAC,CAAC;QAEH,6EAA6E;QAC7E,MAAM,iBAAiB,GACrB,gBAAgB,IAAI,QAAQ;YAC1B,CAAC,CAAE,QAA6C,CAAC,cAAc,EAAE;YACjE,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC;QAC7B,MAAM,SAAS,GAAG;YAChB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,WAAW,EAAE,iBAAiB;YAC9B,OAAO,EAAE,UAAU;SACpB,CAAC;QAEF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,0BAA0B,EAAE;YACzC,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,KAAK;YACL,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,YAAY,EAAE,OAAO,CAAC,MAAM;YAC5B,UAAU,EAAE,OAAO,CAAC,IAAI;SACzB,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAExD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE;gBACnC,QAAQ,EAAE,WAAW,CAAC,QAAQ;gBAC9B,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,SAAS,EAAE,WAAW,CAAC,SAAS;aACjC,CAAC,CAAC;YAEH,oBAAoB;YACpB,MAAM,OAAO,GAAG,eAAe,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,YAAY,CAC5B,OAAO,EACP,WAAW,CAAC,KAAK,CAAC,YAAY,EAC9B,WAAW,CAAC,KAAK,CAAC,gBAAgB,CACnC,CAAC;YAEF,sCAAsC;YACtC,MAAM,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,eAAe,GAAG;gBACtB,WAAW,EAAE,QAAQ,CAAC,IAAI;gBAC1B,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,YAAY;gBAC5C,aAAa,EAAE,WAAW,CAAC,KAAK,CAAC,gBAAgB;gBACjD,UAAU,EAAE,WAAW,CAAC,SAAS;gBACjC,oBAAoB,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC3C,gBAAgB,EAAE;oBAChB,KAAK,EAAE,WAAW,CAAC,KAAK;oBACxB,QAAQ,EAAE,WAAW,CAAC,QAAQ;oBAC9B,GAAG,CAAC,WAAW,CAAC,YAAY;wBAC1B,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,CAAC,YAAY,EAAE;wBAC7C,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI;wBACxB,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,KAAK,EAAE;wBACtC,CAAC,CAAC,EAAE,CAAC;iBACR;aACF,CAAC;YAEF,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;YAC1C,IAAI,WAAW,EAAE,CAAC;gBAChB,oEAAoE;gBACpE,oEAAoE;gBACpE,8CAA8C;gBAC9C,IAAI,CAAC;oBACH,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAC,EAAE,EAAC,EAAE;wBAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;6BACnB,MAAM,CAAC,cAAc,CAAC;6BACtB,MAAM,CAAC,eAAe,CAAC;6BACvB,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;wBAC5C,MAAM,WAAW,CAAC;4BAChB,EAAE;4BACF,MAAM;4BACN,QAAQ;4BACR,gBAAgB,EAAE,GAAI,CAAC,IAAI;4BAC3B,QAAQ,EAAE,UAAU,CAAC,QAAQ;4BAC7B,KAAK,EAAE,WAAW,CAAC,KAAK;4BACxB,KAAK,EAAE;gCACL,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,YAAY;gCAC5C,gBAAgB,EAAE,WAAW,CAAC,KAAK,CAAC,gBAAgB;6BACrD;4BACD,sBAAsB,EAAE,YAAY,CAAC,SAAS,CAAC;yBAChD,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,WAAW,CAAC,CAAC;oBAC1D,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,sCAAsC,CAAC,EACrD,GAAG,CACJ,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC1D,CAAC;YAED,qDAAqD;YACrD,MAAM,QAAQ,GAAwB;gBACpC,MAAM,EAAE,WAAW,CAAC,OAAO;gBAC3B,KAAK,EAAE;oBACL,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,YAAY;oBAC5C,aAAa,EAAE,WAAW,CAAC,KAAK,CAAC,gBAAgB;oBACjD,UAAU,EAAE,WAAW,CAAC,SAAS;oBACjC,oBAAoB,EAAE,SAAS;oBAC/B,GAAG,CAAC,WAAW,CAAC,YAAY;wBAC1B,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,CAAC,YAAY,EAAE;wBAC7C,CAAC,CAAC,EAAE,CAAC;iBACR;aACF,CAAC;YAEF,qEAAqE;YACrE,4EAA4E;YAC5E,mEAAmE;YACnE,2EAA2E;YAC3E,IAAI,WAAW,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;gBAC1C,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC;gBAC1B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE;oBACzD,QAAQ,EAAE,QAAQ,CAAC,aAAa;oBAChC,eAAe,EAAE,OAAO,CAAC,KAAK;oBAC9B,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,gBAAgB;iBACjD,CAAC,CAAC;YACL,CAAC;YAED,qCAAqC;YACrC,IAAI,WAAW,CAAC,cAAc,IAAI,WAAW,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxE,QAAQ,CAAC,eAAe,GAAG,WAAW,CAAC,cAAc,CAAC;YACxD,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAsB,QAAQ,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACzC,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK;gBACtB,SAAS,IAAI,KAAK;gBAClB,KAAK,CAAC,OAAO;gBACb,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;gBAC/B,CAAC,CAAE,KAAK,CAAC,OAAmC;gBAC5C,CAAC,CAAC,SAAS,CAAC;YAEhB,2EAA2E;YAC3E,+CAA+C;YAC/C,MAAM,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC;gBACrC,WAAW,EAAE,QAAQ,CAAC,IAAI;gBAC1B,OAAO,EAAE,KAAK;gBACd,aAAa,EAAE,YAAY;gBAC3B,UAAU,EAAE,SAAS;gBACrB,gBAAgB,EAAE,YAAY;oBAC5B,CAAC,CAAC;wBACE,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK;wBAC9B,QAAQ,EAAE,SAAS,CAAC,QAAQ;wBAC5B,aAAa,EAAE,YAAY;qBAC5B;oBACH,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;YAEH,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,YAAY,EAAE;gBACvD,GAAG,SAAS;gBACZ,YAAY;aACb,CAAC,CAAC;YAEH,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,GAAG,aAAa,CAAC,0BAA0B,YAAY,EAAE,CAAC;gBAC1D,OAAO,EAAE,YAAY;aACtB,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,qBAAqB;IACrB,gFAAgF;IAEhF,4DAA4D;IAC5D,qEAAqE;IAErE,8BAA8B;IAC9B,QAAQ,CAAC,GAAG,CACV,sDAAsD,EACtD,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,EAClC,mBAAmB,CACpB,CAAC;IAEF,QAAQ,CAAC,IAAI,CACX,sDAAsD,EACtD,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,EAClC,mBAAmB,CACpB,CAAC;IAEF,8BAA8B;IAC9B,QAAQ,CAAC,GAAG,CACV,+CAA+C,EAC/C,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,EAClC,eAAe,CAChB,CAAC;IAEF,QAAQ,CAAC,IAAI,CACX,+CAA+C,EAC/C,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,EAClC,eAAe,CAChB,CAAC;IAEF,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"ai.js","sourceRoot":"","sources":["../../src/routes/ai.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,eAAe,EACf,aAAa,GAId,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,SAAS,EACT,YAAY,EACZ,eAAe,EAEf,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAQtE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,UAAU,cAAc,CAAC,GAAmB;IAChD,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACnB,MAAM,EACJ,QAAQ,EACR,SAAS,EACT,cAAc,EACd,QAAQ,EACR,aAAa,EACb,KAAK,EACL,iBAAiB,GAClB,GAAG,GAAG,CAAC,MAAM,CAAC;IACf,MAAM,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,GAAG,GAAG,CAAC,cAAc,CAAC;IAE1E,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;IAE5B;;;;;;;;;OASG;IACH,KAAK,UAAU,kBAAkB,CAAC,UAAkB;QAClD,IAAI,CAAC;YACH,MAAM,EAAE;iBACL,MAAM,CAAC,SAAS,CAAC;iBACjB,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,CAAA,GAAG,SAAS,CAAC,UAAU,MAAM,EAAE,CAAC;iBACrD,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAuBD,gFAAgF;IAChF,mBAAmB;IACnB,gFAAgF;IAEhF;;OAEG;IACH,SAAS,aAAa,CAAC,CAAM;QAC3B,2BAA2B;QAC3B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,+CAA+C;QAC/C,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACjD,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;OAOG;IACH,SAAS,WAAW,CAAC,CAAM;QACzB,IAAI,IAA+B,CAAC;QACpC,IAAI,CAAC;YACH,IAAI,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QACD,OAAO,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,SAAS,WAAW,CAClB,QAAuB,EACvB,SAA0B;QAE1B,oCAAoC;QACpC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,6CAA6C;QAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED,gFAAgF;IAChF,2BAA2B;IAC3B,gFAAgF;IAEhF,gFAAgF;IAChF,sDAAsD;IAEtD,gFAAgF;IAChF,0BAA0B;IAC1B,gFAAgF;IAEhF;;;OAGG;IACH,KAAK,UAAU,gBAAgB,CAC7B,UAAkB;QAElB,MAAM,UAAU,GAAG,MAAM,EAAE;aACxB,MAAM,EAAE;aACR,IAAI,CAAC,QAAQ,CAAC;aACd,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;QAE/C,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC/B,CAAC;IAED,sCAAsC;IACtC,IAAI,mBAAmB,GAA8B,IAAI,CAAC;IAC1D,IAAI,kBAAkB,GAA6B,IAAI,CAAC;IACxD,IAAI,iBAAiB,GAA4B,IAAI,CAAC;IAEtD;;;OAGG;IACH,SAAS,qBAAqB;QAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,CAAC;QACpC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,mBAAmB,GAAG,IAAI,kBAAkB,CAAC;gBAC3C,gBAAgB,EAAE,MAAM;aACzB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,SAAS,oBAAoB;QAC3B,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,kBAAkB,GAAG,IAAI,iBAAiB,CACxC,GAAG,CAAC,YAAY,CAAC,gBAAgB,CAClC,CAAC;QACJ,CAAC;QACD,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,SAAS,mBAAmB;QAC1B,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,iBAAiB,GAAG,IAAI,gBAAgB,CAAC;gBACvC,EAAE,EAAE,EAAS;gBACb,KAAK,EAAE,iBAAwB;aAChC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,SAAS,WAAW,CAAC,CAAM;QACzB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,OAAO,QAAQ,KAAK,MAAM,CAAC;IAC7B,CAAC;IAED;;;;;;;;;OASG;IACH,SAAS,gBAAgB,CACvB,eAAwB,EACxB,gBAAqC;QAErC,IAAI,CAAC,eAAe;YAAE,OAAO,KAAK,CAAC;QACnC,OAAO,gBAAgB,IAAI,IAAI,CAAC;IAClC,CAAC;IAED;;;;OAIG;IACH,KAAK,UAAU,wBAAwB,CAAC,MAAiB;QACvD,+BAA+B;QAC/B,MAAM,WAAW,GAAG,MAAM,EAAE;aACzB,MAAM,EAAE;aACR,IAAI,CAAC,aAAa,CAAC;aACnB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,EACtC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,EAC/B,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAClC,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,6CAA6C;QAC7C,MAAM,SAAS,GAAG,MAAM,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC;aACtD,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,KAAK,EAAE,CAAC;YACnD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,6CAA6C;QAC7C,OAAO,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;IAED;;;;;OAKG;IACH,KAAK,UAAU,cAAc,CAC3B,CAAM,EACN,MAAiB;QAEjB,gEAAgE;QAChE,IAAI,MAAM,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAC;QAC1C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,iDAAiD;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,2CAA2C;YAC3C,oEAAoE;YACpE,MAAM,gBAAgB,GAAG,MAAM,SAAS,CAAC,mBAAmB,CAC1D,MAAM,CAAC,EAAE,EACT,QAAQ,CACT,CAAC;YACF,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC,aAAa,CACjD,gBAAgB,CAAC,YAAY,CAC9B,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,mBAAmB,EAAE,CAAC,iBAAiB,CAC1D,MAAM,CAAC,EAAE,EACT,MAAM,EACN,gBAAgB,CAAC,qBAAqB,CACvC,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CACX,wBAAwB,MAAM,CAAC,aAAa,IAAI,SAAS,WAAW;oBAClE,qBAAqB,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,GAAG,IAAI;oBACvD,SAAS,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,GAAG,IAAI;oBAC1C,WAAW,MAAM,CAAC,SAAS,CAAC,OAAO,IAAI,GAAG,EAAE,CAC/C,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,OAAO,IAAI,CAAC,CAAC,UAAU;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gEAAgE;YAChE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,UAAU,qBAAqB,CAAC,CAAM;QACzC,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,YAAY,EAAE,GACnD,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEvB,gEAAgE;QAChE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,EAAE,GAAG,CAAC;aAC/D,CAAC;QACJ,CAAC;QAED,wCAAwC;QACxC,MAAM,WAAW,GAAG,MAAM,EAAE;aACzB,MAAM,EAAE;aACR,IAAI,CAAC,QAAQ,CAAC;aACd,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,EACjC,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,EACtC,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAC7B,CACF,CAAC;QAEJ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,EAAE,GAAG,CAAC;aAC1D,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAE,CAAC;QAEhC,sBAAsB;QACtB,MAAM,cAAc,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CACd,aAAa,CACX,+EAA+E,CAChF,EACD,GAAG,CACJ;aACF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,cAAc,CAAC,EAAE,CAAC;YACzC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,EAAE,GAAG,CAAC;aAC/D,CAAC;QACJ,CAAC;QAED,6CAA6C;QAC7C,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACtD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,gCAAgC,CAAC,EAAE,GAAG,CAAC;aACvE,CAAC;QACJ,CAAC;QAED,6DAA6D;QAC7D,MAAM,UAAU,GAAG,qBAAqB,CACtC,cAAc,EACd,OAAO,CAAC,iBAAiB,EACzB,OAAO,CAAC,UAAU,CACnB,CAAC;QAEF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,EAAE,GAAG,CAAC;aACxD,CAAC;QACJ,CAAC;QAED,0CAA0C;QAC1C,MAAM,YAAY,GAAG,MAAM,EAAE;aAC1B,MAAM,EAAE;aACR,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,EACtC,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,YAAY,CAAC,EACzC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAC9B,CACF,CAAC;QAEJ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,EAAE,GAAG,CAAC;aAC3D,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAE,CAAC;QAElC,uDAAuD;QACvD,MAAM,WAAW,GAAG,QAAQ,CAAC,YAA+B,CAAC;QAC7D,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;gBACxC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CACd,aAAa,CACX,cAAc,QAAQ,IAAI,SAAS,yCAAyC,CAC7E,EACD,GAAG,CACJ;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,sDAAsD;QACtD,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACnC,IAAI,QAAQ,CAAC,WAAW,KAAK,aAAa,EAAE,CAAC;YAC3C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CACd,aAAa,CACX,UAAU,aAAa,qBAAqB,QAAQ,CAAC,WAAW,EAAE,CACnE,EACD,GAAG,CACJ;aACF,CAAC;QACJ,CAAC;QAED,oCAAoC;QACpC,IAAI,SAAkB,CAAC;QACvB,IAAI,CAAC;YACH,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;gBAC5B,yBAAyB;gBACzB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC/B,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,kBAAkB;gBAClB,SAAS,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACjC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC,EAAE,GAAG,CAAC;aAC7D,CAAC;QACJ,CAAC;QAED,uEAAuE;QACvE,wEAAwE;QACxE,0EAA0E;QAC1E,wDAAwD;QACxD,IAAI,UAA8B,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC;gBAC7C,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,QAAQ;aACT,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC;iBACnE,CAAC;YACJ,CAAC;YACD,UAAU,GAAG,QAAQ,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;YACzD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,IAAI,CACd,aAAa,CAAC,uCAAuC,CAAC,EACtD,GAAG,CACJ;aACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM;YACN,OAAO;YACP,QAAQ;YACR,UAAU;YACV,SAAS;SACV,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,0BAA0B;IAC1B,gFAAgF;IAEhF;;OAEG;IACH,KAAK,UAAU,mBAAmB,CAAC,CAAM;QACvC,MAAM,gBAAgB,GAAG,MAAM,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;YAC9B,OAAO,gBAAgB,CAAC,QAAQ,CAAC;QACnC,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,gBAAgB,CAAC;QAErE,gDAAgD;QAChD,MAAM,iBAAiB,GAAG,MAAM,cAAc,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,iBAAiB,EAAE,CAAC;YACtB,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QAED,6EAA6E;QAC7E,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,GAC9C,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAEnC,+CAA+C;QAC/C,gFAAgF;QAChF,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;YAC9B,SAAS,EAAE,YAAY;YACvB,YAAY,EAAE,QAAQ,CAAC,aAAkC;YACzD,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,OAAO,EAAE,eAAe,IAAI,QAAQ,CAAC,OAAO;YAC5C,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAC9B,CAAC,CAAC;QAEH,MAAM,cAAc,GAAqB,EAAE,MAAM,EAAE,CAAC;QACpD,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAmB,cAAc,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,gFAAgF;IAChF,2BAA2B;IAC3B,gFAAgF;IAEhF;;OAEG;IACH,KAAK,UAAU,eAAe,CAAC,CAAM;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,MAAM,gBAAgB,GAAG,MAAM,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;YAC9B,OAAO,gBAAgB,CAAC,QAAQ,CAAC;QACnC,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,GACxD,gBAAgB,CAAC;QAEnB,gDAAgD;QAChD,MAAM,iBAAiB,GAAG,MAAM,cAAc,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,iBAAiB,EAAE,CAAC;YACtB,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QAED,mEAAmE;QACnE,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC;gBACxC,CAAC;gBACD,MAAM;gBACN,OAAO;gBACP,QAAQ;gBACR,QAAQ,EAAE,UAAU,CAAC,QAAQ;aAC9B,CAAC,CAAC;YACH,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC;QACxB,CAAC;QAED,6EAA6E;QAC7E,MAAM,EACJ,OAAO,EAAE,eAAe,EACxB,SAAS,EAAE,mBAAmB,EAC9B,eAAe,EAAE,wBAAwB,EACzC,YAAY,EAAE,oBAAoB,GACnC,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAErC,4EAA4E;QAC5E,2EAA2E;QAC3E,kCAAkC;QAClC,MAAM,OAAO,GAAG,sBAAsB,CACpC,QAAQ,CAAC,iBAAiB,EAC1B,wBAAwB,CACzB,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QACnD,CAAC;QAED,iEAAiE;QACjE,MAAM,gBAAgB,GAAG,qBAAqB,CAC5C,oBAA+C,CAChD,CAAC;QACF,IAAI,gBAAgB,CAAC,KAAK,EAAE,CAAC;YAC3B,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,gBAAgB,CAAC,MAAO,CAAC;QAEzE,6DAA6D;QAC7D,IAAI,KAAK,GAAG,cAAc,CAAC;QAC3B,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,uBAAuB,CAAC,cAAc,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,eAAe,EAAE,CAAC;gBACzB,MAAM,YAAY,GAChB,eAAe,YAAY,KAAK;oBAC9B,CAAC,CAAC,eAAe,CAAC,OAAO;oBACzB,CAAC,CAAC,gCAAgC,CAAC;gBACvC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAED,yCAAyC;QACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,SAAS,CAAC;QAE1C,qDAAqD;QACrD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,yBAAyB,CAAC;gBAC3C,KAAK;gBACL,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,UAAU,EAAE,KAAK;gBACjB,aAAa,EAAE;gBACb,6DAA6D;gBAC7D,wDAAwD;iBACzD;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtB,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAClE,CAAC;YAED,gCAAgC;YAChC,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC/D,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;oBAC7B,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAClD,GAAG,CACJ,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,uDAAuD;QACvD,gFAAgF;QAChF,MAAM,OAAO,GAAG,SAAS,CAAC,kBAAkB,CAAC;YAC3C,SAAS,EAAE,YAAY;YACvB,YAAY,EAAE,QAAQ,CAAC,aAAkC;YACzD,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,OAAO,EAAE,eAAe,IAAI,QAAQ,CAAC,OAAO;YAC5C,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAC9B,CAAC,CAAC;QAEH,iDAAiD;QACjD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,oBAI5B,CAAC;QAET,gCAAgC;QAChC,wDAAwD;QACxD,MAAM,WAAW,GAAG;YAClB,MAAM,EAAE,OAAO,CAAC,IAAI;YACpB,YAAY,EAAE,OAAO,CAAC,MAAM;YAC5B,YAAY,EAAG,QAAQ,CAAC,aAA4B,IAAI;gBACtD,IAAI,EAAE,QAAQ;aACf;YACD,KAAK;YACL,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YAC3C,kBAAkB,EAAE,kBAAkB,IAAI,SAAS;YACnD,SAAS,EAAE,gBAAgB,CACzB,QAAQ,CAAC,UAAU,IAAI,KAAK,EAC5B,mBAAmB,CACpB;YACD,yEAAyE;YACzE,iCAAiC;YACjC,SAAS,EAAE,OAAO,CAAC,KAAK,IAAI,SAAS;YACrC;;;;;;;;cAQE;YACF,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,SAAS;SAC/C,CAAC;QAEF,MAAM,UAAU,GACd,QAAQ,CAAC,mBAAmB,KAAK,KAAK;YACpC,CAAC,CAAC;gBACE,GAAG,WAAW;gBACd,iBAAiB,EAAE,KAAc;gBACjC,QAAQ,EAAE,QAAQ,CAAC,IAAI;aACxB;YACH,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,iBAAiB,EAAE,QAAiB,EAAE,CAAC;QAE/D,kCAAkC;QAClC,MAAM,QAAQ,GAAG,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,QAAQ,EAAE;YACvD,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,SAAS,EAAE,UAAU,CAAC,SAAS;SAChC,CAAC,CAAC;QAEH,6EAA6E;QAC7E,MAAM,iBAAiB,GACrB,gBAAgB,IAAI,QAAQ;YAC1B,CAAC,CAAE,QAA6C,CAAC,cAAc,EAAE;YACjE,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC;QAC7B,MAAM,SAAS,GAAG;YAChB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,WAAW,EAAE,iBAAiB;YAC9B,OAAO,EAAE,UAAU;SACpB,CAAC;QAEF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,0BAA0B,EAAE;YACzC,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,KAAK;YACL,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,YAAY,EAAE,OAAO,CAAC,MAAM;YAC5B,UAAU,EAAE,OAAO,CAAC,IAAI;SACzB,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAExD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE;gBACnC,QAAQ,EAAE,WAAW,CAAC,QAAQ;gBAC9B,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,SAAS,EAAE,WAAW,CAAC,SAAS;aACjC,CAAC,CAAC;YAEH,oBAAoB;YACpB,MAAM,OAAO,GAAG,eAAe,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,YAAY,CAC5B,OAAO,EACP,WAAW,CAAC,KAAK,CAAC,YAAY,EAC9B,WAAW,CAAC,KAAK,CAAC,gBAAgB,CACnC,CAAC;YAEF,sCAAsC;YACtC,MAAM,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,eAAe,GAAG;gBACtB,WAAW,EAAE,QAAQ,CAAC,IAAI;gBAC1B,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,YAAY;gBAC5C,aAAa,EAAE,WAAW,CAAC,KAAK,CAAC,gBAAgB;gBACjD,UAAU,EAAE,WAAW,CAAC,SAAS;gBACjC,oBAAoB,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC3C,gBAAgB,EAAE;oBAChB,KAAK,EAAE,WAAW,CAAC,KAAK;oBACxB,QAAQ,EAAE,WAAW,CAAC,QAAQ;oBAC9B,GAAG,CAAC,WAAW,CAAC,YAAY;wBAC1B,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,CAAC,YAAY,EAAE;wBAC7C,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI;wBACxB,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,KAAK,EAAE;wBACtC,CAAC,CAAC,EAAE,CAAC;iBACR;aACF,CAAC;YAEF,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;YAC1C,IAAI,WAAW,EAAE,CAAC;gBAChB,oEAAoE;gBACpE,oEAAoE;gBACpE,8CAA8C;gBAC9C,IAAI,CAAC;oBACH,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAC,EAAE,EAAC,EAAE;wBAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;6BACnB,MAAM,CAAC,cAAc,CAAC;6BACtB,MAAM,CAAC,eAAe,CAAC;6BACvB,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;wBAC5C,MAAM,WAAW,CAAC;4BAChB,EAAE;4BACF,MAAM;4BACN,QAAQ;4BACR,gBAAgB,EAAE,GAAI,CAAC,IAAI;4BAC3B,QAAQ,EAAE,UAAU,CAAC,QAAQ;4BAC7B,KAAK,EAAE,WAAW,CAAC,KAAK;4BACxB,KAAK,EAAE;gCACL,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,YAAY;gCAC5C,gBAAgB,EAAE,WAAW,CAAC,KAAK,CAAC,gBAAgB;6BACrD;4BACD,sBAAsB,EAAE,YAAY,CAAC,SAAS,CAAC;yBAChD,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,WAAW,CAAC,CAAC;oBAC1D,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,sCAAsC,CAAC,EACrD,GAAG,CACJ,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC1D,CAAC;YAED,qDAAqD;YACrD,MAAM,QAAQ,GAAwB;gBACpC,MAAM,EAAE,WAAW,CAAC,OAAO;gBAC3B,KAAK,EAAE;oBACL,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,YAAY;oBAC5C,aAAa,EAAE,WAAW,CAAC,KAAK,CAAC,gBAAgB;oBACjD,UAAU,EAAE,WAAW,CAAC,SAAS;oBACjC,oBAAoB,EAAE,SAAS;oBAC/B,GAAG,CAAC,WAAW,CAAC,YAAY;wBAC1B,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,CAAC,YAAY,EAAE;wBAC7C,CAAC,CAAC,EAAE,CAAC;iBACR;aACF,CAAC;YAEF,qEAAqE;YACrE,4EAA4E;YAC5E,mEAAmE;YACnE,2EAA2E;YAC3E,IAAI,WAAW,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;gBAC1C,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC;gBAC1B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE;oBACzD,QAAQ,EAAE,QAAQ,CAAC,aAAa;oBAChC,eAAe,EAAE,OAAO,CAAC,KAAK;oBAC9B,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,gBAAgB;iBACjD,CAAC,CAAC;YACL,CAAC;YAED,qCAAqC;YACrC,IAAI,WAAW,CAAC,cAAc,IAAI,WAAW,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxE,QAAQ,CAAC,eAAe,GAAG,WAAW,CAAC,cAAc,CAAC;YACxD,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAsB,QAAQ,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACzC,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK;gBACtB,SAAS,IAAI,KAAK;gBAClB,KAAK,CAAC,OAAO;gBACb,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;gBAC/B,CAAC,CAAE,KAAK,CAAC,OAAmC;gBAC5C,CAAC,CAAC,SAAS,CAAC;YAEhB,2EAA2E;YAC3E,+CAA+C;YAC/C,MAAM,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC;gBACrC,WAAW,EAAE,QAAQ,CAAC,IAAI;gBAC1B,OAAO,EAAE,KAAK;gBACd,aAAa,EAAE,YAAY;gBAC3B,UAAU,EAAE,SAAS;gBACrB,gBAAgB,EAAE,YAAY;oBAC5B,CAAC,CAAC;wBACE,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK;wBAC9B,QAAQ,EAAE,SAAS,CAAC,QAAQ;wBAC5B,aAAa,EAAE,YAAY;qBAC5B;oBACH,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;YAEH,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,YAAY,EAAE;gBACvD,GAAG,SAAS;gBACZ,YAAY;aACb,CAAC,CAAC;YAEH,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,GAAG,aAAa,CAAC,0BAA0B,YAAY,EAAE,CAAC;gBAC1D,OAAO,EAAE,YAAY;aACtB,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,qBAAqB;IACrB,gFAAgF;IAEhF,4DAA4D;IAC5D,qEAAqE;IAErE,8BAA8B;IAC9B,QAAQ,CAAC,GAAG,CACV,sDAAsD,EACtD,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,EAClC,mBAAmB,CACpB,CAAC;IAEF,QAAQ,CAAC,IAAI,CACX,sDAAsD,EACtD,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,EAClC,mBAAmB,CACpB,CAAC;IAEF,8BAA8B;IAC9B,QAAQ,CAAC,GAAG,CACV,+CAA+C,EAC/C,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,EAClC,eAAe,CAChB,CAAC;IAEF,QAAQ,CAAC,IAAI,CACX,+CAA+C,EAC/C,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,EAClC,eAAe,CAChB,CAAC;IAEF,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sudobility/shapeshyft_service",
-  "version": "1.0.0",
+  "version": "1.0.3",
   "description": "Shared tables, routes and middleware for ShapeShyft-style structured-output APIs",
   "type": "module",
   "main": "./dist/index.js",
@@ -32,7 +32,7 @@
   "license": "BUSL-1.1",
   "dependencies": {
     "@hono/zod-validator": "^0.7.5",
-    "@sudobility/shapeshyft_engine": "^1.0.0",
+    "@sudobility/shapeshyft_engine": "^1.0.1",
     "zod": "^3.24.0"
   },
   "peerDependencies": {
@@ -68,7 +68,7 @@
     "openai": "^4.77.0",
     "postgres": "^3.4.7",
     "prettier": "^3.7.4",
-    "sharp": "^0.34.5",
+    "sharp": "^0.35.4",
     "typescript": "^5.9.3",
     "vitest": "^4.0.4"
   },