@zuplo/graphql 5.1706.0 → 5.1710.0

package/index.minified.js

@@ -22,7 +22,7 @@
  *  DEALINGS IN THE SOFTWARE.
  *--------------------------------------------------------------------------------------------*/
     
-"use strict";var yE=Object.create;var Zn=Object.defineProperty;var gE=Object.getOwnPropertyDescriptor;var bE=Object.getOwnPropertyNames;var _E=Object.getPrototypeOf,EE=Object.prototype.hasOwnProperty;var s=(e,t)=>Zn(e,"name",{value:t,configurable:!0});var I=(e,t)=>()=>(e&&(t=e(e=0)),t);var g=(e,t)=>()=>(t||e((t={exports:{}}).exports,t),t.exports),Zi=(e,t)=>{for(var r in t)Zn(e,r,{get:t[r],enumerable:!0})},mh=(e,t,r,n)=>{if(t&&typeof t=="object"||typeof t=="function")for(let i of bE(t))!EE.call(e,i)&&i!==r&&Zn(e,i,{get:()=>t[i],enumerable:!(n=gE(t,i))||n.enumerable});return e};var yh=(e,t,r)=>(r=e!=null?yE(_E(e)):{},mh(t||!e||!e.__esModule?Zn(r,"default",{value:e,enumerable:!0}):r,e)),Xi=e=>mh(Zn({},"__esModule",{value:!0}),e);var L=g(yt=>{"use strict";Object.defineProperty(yt,"__esModule",{value:!0});yt.FeatureNotEnabledError=yt.ConfigurationError=yt.RuntimeError=yt.SystemError=void 0;var iu=class extends Error{static{s(this,"SystemError")}constructor(t,r){super(t,r),this.name="InternalError"}};yt.SystemError=iu;var Xn=class extends Error{static{s(this,"RuntimeError")}extensionMembers;constructor(t,r){typeof t=="string"?super(t,r):(super(t.message,r),this.extensionMembers=t.extensionMembers),this.name="RuntimeError"}};yt.RuntimeError=Xn;var ou=class extends Xn{static{s(this,"ConfigurationError")}constructor(t,r){super(t,r),this.name="ConfigurationError"}};yt.ConfigurationError=ou;var su=class extends Xn{static{s(this,"FeatureNotEnabledError")}constructor(t,r){super(t,r),this.name="FeatureNotEnabledError"}};yt.FeatureNotEnabledError=su});var Y=g(eo=>{"use strict";Object.defineProperty(eo,"__esModule",{value:!0});eo.Environment=void 0;var wE=L(),au=class e{static{s(this,"Environment")}config;static#e;static initialize(t,r){this.#e||(this.#e=new e(t,r))}static get instance(){if(!this.#e)throw new wE.SystemError("Environment has not been initialized");return this.#e}constructor(t,r){let n;try{if(r.__ZUPLO_CONFIG){let i=atob(r.__ZUPLO_CONFIG);n=JSON.parse(i)}}catch{console.warn("Failed to parse runtime configuration")}this.config=n??{},this.build=t,this.runtime=r}build;runtime;get deploymentName(){return this.runtime.__ZUPLO_DEPLOYMENT_NAME??this.config.deployment_name??void 0}get useSha256ServiceRouting(){return this.config.use_sha256_service_routing??void 0}get useProxyForFetchFromZups(){return this.config.use_proxy_for_fetch_from_zups??void 0}get devPortalBaseUrl(){return this.runtime.__ZUPLO_DEV_PORTAL_URL??this.config.dev_portal_url??"https://dev-portal-v4-1.zuplo.com"}get buildAssetsUrl(){return this.runtime.__ZUPLO_BUILD_ASSETS_URL??this.config.build_assets_url??"https://build-assets.zuplo.dev"}get remoteLogToken(){return this.runtime.__ZUPLO_REMOTE_LOG_TOKEN??this.config.remote_log_token??void 0}get managementApiURL(){return this.runtime.__ZUPLO_MANAGEMENT_API_URL??this.config.management_api_url??"https://api.zuplo.com"}get cdnURL(){return this.runtime.__ZUPLO_CDN_URL??this.config.cdn_url??"https://cdn.zuplo.com"}get remoteLogURL(){return this.runtime.__ZUPLO_REMOTE_LOG_URL??this.config.log_event_api??"https://ellie.zuplo.com"}get loggingId(){return this.runtime.__ZUPLO_LOGGING_ID??this.config.logging_id??void 0}get redisURL(){return this.runtime.__ZUPLO_REDIS_URL??this.config.redis_proxy_url??"https://redis-proxy.zuplo.com"}get apiKeyServiceUrl(){return this.runtime.__ZUPLO_API_KEY_SERVICE_URL??this.config.api_key_service_url??"https://apikey.zuplo.com"}get meteringServiceUrl(){return this.runtime.__ZUPLO_API_KEY_SERVICE_URL??this.config.api_key_service_url??"https://meters.zuplo.com"}get authApiJWT(){return this.runtime.__ZUPLO_AUTH_API_JWT??void 0}get userLogLevel(){return this.runtime.ZUPLO_LOG_LEVEL??this.runtime.__ZUPLO_LOG_LEVEL??this.config.user_log_level??"debug"}get systemLogLevel(){return this.runtime.__ZUPLO_LOG_LEVEL??this.config.system_log_level??"debug"}get logFormat(){return this.runtime.__ZUPLO_LOG_FORMAT??this.config.log_format??"cloudflare"}get isCloudflare(){return this.runtime.__ZUPLO_RUNTIME_TYPE?this.runtime.__ZUPLO_RUNTIME_TYPE==="cloudflare":this.config.runtime_type?this.config.runtime_type==="cloudflare":typeof WebSocketPair=="function"}get isDeno(){return this.runtime.__ZUPLO_RUNTIME_TYPE?this.runtime.__ZUPLO_RUNTIME_TYPE==="deno":this.config.runtime_type?this.config.runtime_type==="deno":typeof WebSocketPair!="function"}get isLocalDevelopment(){return this.build.ENVIRONMENT_TYPE?this.build.ENVIRONMENT_TYPE==="LOCAL_DEVELOPMENT":!1}get systemUserAgent(){return`Zuplo/${this.build.ZUPLO_VERSION}`}get loggingEnvironmentType(){return this.isCloudflare?"edge":this.isLocalDevelopment?"local":this.isDeno?"working-copy":"unknown"}get loggingEnvironmentStage(){return this.build.ENVIRONMENT_TYPE==="PRODUCTION"?"production":this.build.ENVIRONMENT_TYPE==="PREVIEW"?"preview":this.isLocalDevelopment?"local":this.isDeno?"working-copy":"unknown"}};eo.Environment=au});var Eh=g(_h=>{"use strict";Object.defineProperty(_h,"__esModule",{value:!0});var gh=Y();Function.prototype.toString=function(){return"[native code]"};var to=globalThis,bh=to.caches;if(bh){let e=bh.open;to.caches.open=function(t){let r=gh.Environment.instance.deploymentName??gh.Environment.instance.build.BUILD_ID;return e.call(this,`${r}-${t}`)},delete to.caches.default,Object.freeze(to.caches)}});var lu=g(ro=>{"use strict";Object.defineProperty(ro,"__esModule",{value:!0});ro.MemoryCache=void 0;var vE=1e4,TE=1e3,wh=new Map,cu=class{static{s(this,"InnerCache")}constructor(t){this.#e=t.maxSize}#e;#t=0;#r=new Map;#n=[];get(t){let r=this.#r.get(t);if(!r)return;let n=Date.now();if(n>r.expiresAt){this.#r.delete(t);return}return r.lastUsed=n,this.#i(),r?.data}put(t,r,n){if(n<=0)return;if(this.#r.size>=this.#e){let a=this.#n.shift();a&&this.#r.delete(a)}let i=Date.now(),o={created:i,lastUsed:i,expiresAt:i+n*1e3,data:r};this.#n.push(t),this.#r.set(t,o)}delete(t){let r=this.#n.indexOf(t);r>=0&&this.#n.slice(r,1),this.#r.delete(t)}get size(){return this.#r.size}#i(){let t=Date.now();this.#t+vE*1e3>t&&(this.purge(),this.#t=t)}purge(){let t=Date.now();this.#r.forEach((r,n)=>{r.expiresAt>=t&&this.#r.delete(n)})}},uu=class{static{s(this,"MemoryCache")}constructor(t,r={maxSize:TE}){this.name=t;let n=wh.get(t);n||(n=new cu(r),wh.set(t,n)),this.#e=n}name;#e;get(t){return this.#e.get(t)}put(t,r,n){return this.#e.put(t,r,n)}delete(t){return this.#e.delete(t)}get size(){return this.#e.size}purge(){this.#e.purge()}};ro.MemoryCache=uu});var io=g(no=>{"use strict";Object.defineProperty(no,"__esModule",{value:!0});no.ZoneCache=void 0;var du="__zuplo-expiry-header",pu=class{static{s(this,"ZoneCache")}constructor(t,r){this.#t=t,this.#e=r}#e;#t;#r;async#n(){return this.#r||(this.#r=await caches.open(this.#t)),this.#r}#i(t){return new Request(`https://zone-cache.zuplo.app/${encodeURIComponent(t)}`)}async get(t){try{let r=await this.#n(),n=this.#i(t),i=await r.match(n);if(!i)return;let o=i.headers.get(du);if(!o){try{await r.delete(n)}catch(u){this.logDebug("Handled failure to delete with CF cache because of missing expiryHeader",u),await this.deleteFallback(t)}return}let a=parseInt(o);if(Date.now()>=a){try{await r.delete(n)}catch(u){this.logDebug("Handled failure to delete with CF cache because of expiration",u),await this.deleteFallback(t)}return}return await i.json()}catch(r){this.logDebug(r)}}async put(t,r,n){let i=new Headers({"cache-control":`s-maxage=${n}, must-revalidate`,"content-type":"application/json"});i.set(du,`${Date.now()+n*1e3}`);let o=await this.#n(),a=this.#i(t),c=new Response(JSON.stringify(r),{headers:i});await o.put(a,c)}async delete(t){let r=await this.#n(),n=this.#i(t);try{await r.delete(n)}catch(i){this.logDebug("Handled failure to delete with CF cache due to explicit delete call",i),await this.deleteFallback(t)}}async deleteFallback(t){let r=new Headers({"Cache-Control":"s-maxage=0, must-revalidate"});r.set(du,`${Date.now()}`);let n=await this.#n(),i=this.#i(t),o=new Response("",{headers:r});await n.put(i,o)}logDebug(...t){"logger"in this.#e?this.#e.logger?.debug(`Error in ZoneCache: '${this.#t}'`,t):"log"in this.#e&&this.#e.log.debug(`Error in ZoneCache: '${this.#t}'`,t)}};no.ZoneCache=pu});var Jt=g(oo=>{"use strict";Object.defineProperty(oo,"__esModule",{value:!0});oo.MemoryZoneReadThroughCache=void 0;var SE=lu(),IE=io(),hu=class{static{s(this,"MemoryZoneReadThroughCache")}constructor(t,r){let n=`f6726488-fd18-4b7f-9c30-6070565e8042-${t}`;this.#e=t,this.#t=new SE.MemoryCache(n),this.#r=new IE.ZoneCache(n,r),this.#n=r}#e;#t;#r;#n;async get(t){let r=this.#t.get(t);if(r)return r;let n=await this.#r.get(t);if(n){let i=Math.floor((n.expires-Date.now())/1e3);if(i>0)return this.#t.put(t,n.data,i),n.data}}put(t,r,n){this.#t.put(t,r,n);let i={data:r,expires:Date.now()+n*1e3};this.#r.put(t,i,n).catch(o=>{"logger"in this.#n?this.#n.logger?.error(`Error in MemoryZoneReadThroughCache: '${this.#e}'`,o):"log"in this.#n&&this.#n.log.error(`Error in MemoryZoneReadThroughCache: '${this.#e}'`,o)})}};oo.MemoryZoneReadThroughCache=hu});var ei=g(R=>{"use strict";Object.defineProperty(R,"__esModule",{value:!0});R.INTERNAL_HEADERS_TO_REMOVE=R.DISPATCH_HEADERS_TO_REMOVE=R.ZP_TIMEZONE_HEADER=R.ZP_REGION_CODE_HEADER=R.ZP_REGION_HEADER=R.ZP_METRO_CODE_HEADER=R.ZP_POSTAL_CODE_HEADER=R.ZP_COLO_HEADER=R.ZP_AS_ORG_HEADER=R.ZP_ASN_HEADER=R.TRUE_CLIENT_IP=R.ZP_IP_LATITUDE_HEADER=R.ZP_IP_LONGITUDE_HEADER=R.ZP_IP_COUNTRY_HEADER=R.ZP_IP_CONTINENT_HEADER=R.ZP_IP_CITY_HEADER=R.CF_IP_LATITUDE_HEADER=R.CF_IP_LONGITUDE_HEADER=R.CF_IP_COUNTRY_HEADER=R.CF_IP_CONTINENT_HEADER=R.CF_IP_CITY_HEADER=R.RAY_ID_HEADER=R.BODY_REMOVED_HEADER=R.REQUEST_ID_HEADER=R.LEGACY_REQUEST_ID_HEADER=void 0;R.LEGACY_REQUEST_ID_HEADER="zuplo-request-id";R.REQUEST_ID_HEADER="zp-rid";R.BODY_REMOVED_HEADER="zp-body-removed";R.RAY_ID_HEADER="cf-ray";R.CF_IP_CITY_HEADER="cf-ipcity";R.CF_IP_CONTINENT_HEADER="cf-ipcontinent";R.CF_IP_COUNTRY_HEADER="cf-ipcountry";R.CF_IP_LONGITUDE_HEADER="cf-iplongitude";R.CF_IP_LATITUDE_HEADER="cf-iplatitude";R.ZP_IP_CITY_HEADER="zp-ipcity";R.ZP_IP_CONTINENT_HEADER="zp-ipcontinent";R.ZP_IP_COUNTRY_HEADER="zp-ipcountry";R.ZP_IP_LONGITUDE_HEADER="zp-iplongitude";R.ZP_IP_LATITUDE_HEADER="zp-iplatitude";R.TRUE_CLIENT_IP="true-client-ip";R.ZP_ASN_HEADER="zp-asn";R.ZP_AS_ORG_HEADER="zp-asorg";R.ZP_COLO_HEADER="zp-colo";R.ZP_POSTAL_CODE_HEADER="zp-postalcode";R.ZP_METRO_CODE_HEADER="zp-metrocode";R.ZP_REGION_HEADER="zp-region";R.ZP_REGION_CODE_HEADER="zp-regioncode";R.ZP_TIMEZONE_HEADER="zp-timezone";R.DISPATCH_HEADERS_TO_REMOVE=[R.CF_IP_CITY_HEADER,R.CF_IP_CONTINENT_HEADER,R.CF_IP_COUNTRY_HEADER,R.CF_IP_LONGITUDE_HEADER,R.CF_IP_LATITUDE_HEADER,R.ZP_ASN_HEADER,R.ZP_AS_ORG_HEADER,R.ZP_COLO_HEADER,R.ZP_POSTAL_CODE_HEADER,R.ZP_METRO_CODE_HEADER,R.ZP_REGION_HEADER,R.ZP_REGION_CODE_HEADER,R.ZP_TIMEZONE_HEADER];R.INTERNAL_HEADERS_TO_REMOVE=["x-b3-sampled","x-b3-spanid","x-b3-traceid","x-envoy-attempt-count","x-envoy-decorator-operation","x-envoy-external-address","x-envoy-peer-metadata","x-envoy-peer-metadata-id","k-proxy-request","fly-client-ip","fly-forwarded-port","fly-forwarded-proto","fly-forwarded-ssl","fly-region","fly-request-id","fly-traceparent","fly-tracestate"]});var xh=g(w=>{"use strict";Object.defineProperty(w,"__esModule",{value:!0});w.generateColor=w.colorFunctions=w.stripColor=w.bgRgb24=w.rgb24=w.bgRgb8=w.rgb8=w.bgBrightWhite=w.bgBrightCyan=w.bgBrightMagenta=w.bgBrightBlue=w.bgBrightYellow=w.bgBrightGreen=w.bgBrightRed=w.bgBrightBlack=w.bgWhite=w.bgCyan=w.bgMagenta=w.bgBlue=w.bgYellow=w.bgGreen=w.bgRed=w.bgBlack=w.brightWhite=w.brightCyan=w.brightMagenta=w.brightBlue=w.brightYellow=w.brightGreen=w.brightRed=w.brightBlack=w.gray=w.white=w.cyan=w.magenta=w.blue=w.yellow=w.green=w.red=w.black=w.strikethrough=w.hidden=w.inverse=w.underline=w.italic=w.dim=w.bold=w.reset=w.getColorEnabled=w.setColorEnabled=void 0;var vh=!0,fu=!vh;function PE(e){vh||(fu=e)}s(PE,"setColorEnabled");w.setColorEnabled=PE;function AE(){return fu}s(AE,"getColorEnabled");w.getColorEnabled=AE;function F(e,t){return{open:`\x1B[${e.join(";")}m`,close:`\x1B[${t}m`,regexp:new RegExp(`\\x1b\\[${t}m`,"g")}}s(F,"code");function q(e,t){return fu?`${t.open}${e.replace(t.regexp,t.open)}${t.close}`:e}s(q,"run");function RE(e){return q(e,F([0],0))}s(RE,"reset");w.reset=RE;function OE(e){return q(e,F([1],22))}s(OE,"bold");w.bold=OE;function xE(e){return q(e,F([2],22))}s(xE,"dim");w.dim=xE;function NE(e){return q(e,F([3],23))}s(NE,"italic");w.italic=NE;function CE(e){return q(e,F([4],24))}s(CE,"underline");w.underline=CE;function LE(e){return q(e,F([7],27))}s(LE,"inverse");w.inverse=LE;function DE(e){return q(e,F([8],28))}s(DE,"hidden");w.hidden=DE;function UE(e){return q(e,F([9],29))}s(UE,"strikethrough");w.strikethrough=UE;function kE(e){return q(e,F([30],39))}s(kE,"black");w.black=kE;function Th(e){return q(e,F([31],39))}s(Th,"red");w.red=Th;function Sh(e){return q(e,F([32],39))}s(Sh,"green");w.green=Sh;function Ih(e){return q(e,F([33],39))}s(Ih,"yellow");w.yellow=Ih;function Ph(e){return q(e,F([34],39))}s(Ph,"blue");w.blue=Ph;function Ah(e){return q(e,F([35],39))}s(Ah,"magenta");w.magenta=Ah;function Rh(e){return q(e,F([36],39))}s(Rh,"cyan");w.cyan=Rh;function ME(e){return q(e,F([37],39))}s(ME,"white");w.white=ME;function HE(e){return Oh(e)}s(HE,"gray");w.gray=HE;function Oh(e){return q(e,F([90],39))}s(Oh,"brightBlack");w.brightBlack=Oh;function FE(e){return q(e,F([91],39))}s(FE,"brightRed");w.brightRed=FE;function qE(e){return q(e,F([92],39))}s(qE,"brightGreen");w.brightGreen=qE;function $E(e){return q(e,F([93],39))}s($E,"brightYellow");w.brightYellow=$E;function jE(e){return q(e,F([94],39))}s(jE,"brightBlue");w.brightBlue=jE;function VE(e){return q(e,F([95],39))}s(VE,"brightMagenta");w.brightMagenta=VE;function GE(e){return q(e,F([96],39))}s(GE,"brightCyan");w.brightCyan=GE;function BE(e){return q(e,F([97],39))}s(BE,"brightWhite");w.brightWhite=BE;function KE(e){return q(e,F([40],49))}s(KE,"bgBlack");w.bgBlack=KE;function JE(e){return q(e,F([41],49))}s(JE,"bgRed");w.bgRed=JE;function zE(e){return q(e,F([42],49))}s(zE,"bgGreen");w.bgGreen=zE;function WE(e){return q(e,F([43],49))}s(WE,"bgYellow");w.bgYellow=WE;function QE(e){return q(e,F([44],49))}s(QE,"bgBlue");w.bgBlue=QE;function YE(e){return q(e,F([45],49))}s(YE,"bgMagenta");w.bgMagenta=YE;function ZE(e){return q(e,F([46],49))}s(ZE,"bgCyan");w.bgCyan=ZE;function XE(e){return q(e,F([47],49))}s(XE,"bgWhite");w.bgWhite=XE;function ew(e){return q(e,F([100],49))}s(ew,"bgBrightBlack");w.bgBrightBlack=ew;function tw(e){return q(e,F([101],49))}s(tw,"bgBrightRed");w.bgBrightRed=tw;function rw(e){return q(e,F([102],49))}s(rw,"bgBrightGreen");w.bgBrightGreen=rw;function nw(e){return q(e,F([103],49))}s(nw,"bgBrightYellow");w.bgBrightYellow=nw;function iw(e){return q(e,F([104],49))}s(iw,"bgBrightBlue");w.bgBrightBlue=iw;function ow(e){return q(e,F([105],49))}s(ow,"bgBrightMagenta");w.bgBrightMagenta=ow;function sw(e){return q(e,F([106],49))}s(sw,"bgBrightCyan");w.bgBrightCyan=sw;function aw(e){return q(e,F([107],49))}s(aw,"bgBrightWhite");w.bgBrightWhite=aw;function zt(e,t=255,r=0){return Math.trunc(Math.max(Math.min(e,t),r))}s(zt,"clampAndTruncate");function cw(e,t){return q(e,F([38,5,zt(t)],39))}s(cw,"rgb8");w.rgb8=cw;function uw(e,t){return q(e,F([48,5,zt(t)],49))}s(uw,"bgRgb8");w.bgRgb8=uw;function lw(e,t){return typeof t=="number"?q(e,F([38,2,t>>16&255,t>>8&255,t&255],39)):q(e,F([38,2,zt(t.r),zt(t.g),zt(t.b)],39))}s(lw,"rgb24");w.rgb24=lw;function dw(e,t){return typeof t=="number"?q(e,F([48,2,t>>16&255,t>>8&255,t&255],49)):q(e,F([48,2,zt(t.r),zt(t.g),zt(t.b)],49))}s(dw,"bgRgb24");w.bgRgb24=dw;var pw=new RegExp(["[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:[a-zA-Z\\d]*(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)","(?:(?:\\d{1,4}(?:;\\d{0,4})*)?[\\dA-PR-TZcf-ntqry=><~]))"].join("|"),"g");function hw(e){return e.replace(pw,"")}s(hw,"stripColor");w.stripColor=hw;w.colorFunctions=[Th,Sh,Ih,Ph,Ah,Rh];function fw(e){let t=0,r=e.length,n=0;if(r>0)for(;n<r;)t=(t<<5)-t+e.charCodeAt(n++)|0;return t}s(fw,"hashCode");function mw(e){let t=Math.abs(fw(e));return w.colorFunctions[t%w.colorFunctions.length]}s(mw,"generateColor");w.generateColor=mw});var Nh=g(so=>{"use strict";Object.defineProperty(so,"__esModule",{value:!0});so.format=void 0;function yw(e,t,...r){let n=0,i=r.length,o=String(t).replace(/%[sdjoO%]/g,a=>{if(a==="%%")return"%";if(n>=i)return a;switch(a){case"%s":return String(r[n++]);case"%d":return Number(r[n++]).toString();case"%o":return e(r[n++]).split(`
+"use strict";var yE=Object.create;var Zn=Object.defineProperty;var gE=Object.getOwnPropertyDescriptor;var bE=Object.getOwnPropertyNames;var _E=Object.getPrototypeOf,EE=Object.prototype.hasOwnProperty;var s=(e,t)=>Zn(e,"name",{value:t,configurable:!0});var I=(e,t)=>()=>(e&&(t=e(e=0)),t);var g=(e,t)=>()=>(t||e((t={exports:{}}).exports,t),t.exports),Zi=(e,t)=>{for(var r in t)Zn(e,r,{get:t[r],enumerable:!0})},mh=(e,t,r,n)=>{if(t&&typeof t=="object"||typeof t=="function")for(let i of bE(t))!EE.call(e,i)&&i!==r&&Zn(e,i,{get:()=>t[i],enumerable:!(n=gE(t,i))||n.enumerable});return e};var yh=(e,t,r)=>(r=e!=null?yE(_E(e)):{},mh(t||!e||!e.__esModule?Zn(r,"default",{value:e,enumerable:!0}):r,e)),Xi=e=>mh(Zn({},"__esModule",{value:!0}),e);var L=g(yt=>{"use strict";Object.defineProperty(yt,"__esModule",{value:!0});yt.FeatureNotEnabledError=yt.ConfigurationError=yt.RuntimeError=yt.SystemError=void 0;var iu=class extends Error{static{s(this,"SystemError")}constructor(t,r){super(t,r),this.name="InternalError"}};yt.SystemError=iu;var Xn=class extends Error{static{s(this,"RuntimeError")}extensionMembers;constructor(t,r){typeof t=="string"?super(t,r):(super(t.message,r),this.extensionMembers=t.extensionMembers),this.name="RuntimeError"}};yt.RuntimeError=Xn;var ou=class extends Xn{static{s(this,"ConfigurationError")}constructor(t,r){super(t,r),this.name="ConfigurationError"}};yt.ConfigurationError=ou;var su=class extends Xn{static{s(this,"FeatureNotEnabledError")}constructor(t,r){super(t,r),this.name="FeatureNotEnabledError"}};yt.FeatureNotEnabledError=su});var Y=g(eo=>{"use strict";Object.defineProperty(eo,"__esModule",{value:!0});eo.Environment=void 0;var wE=L(),au=class e{static{s(this,"Environment")}config;static#e;static initialize(t,r){this.#e||(this.#e=new e(t,r))}static get instance(){if(!this.#e)throw new wE.SystemError("Environment has not been initialized");return this.#e}constructor(t,r){let n;try{if(r.__ZUPLO_CONFIG){let i=atob(r.__ZUPLO_CONFIG);n=JSON.parse(i)}}catch{console.warn("Failed to parse runtime configuration")}this.config=n??{},this.build=t,this.runtime=r}build;runtime;get deploymentName(){return this.runtime.__ZUPLO_DEPLOYMENT_NAME??this.config.deployment_name??void 0}get useSha256ServiceRouting(){return this.config.use_sha256_service_routing??void 0}get useProxyForFetchFromZups(){return this.config.use_proxy_for_fetch_from_zups??void 0}get devPortalBaseUrl(){return this.runtime.__ZUPLO_DEV_PORTAL_URL??this.config.dev_portal_url??"https://dev-portal-v4-1.zuplo.com"}get buildAssetsUrl(){return this.runtime.__ZUPLO_BUILD_ASSETS_URL??this.config.build_assets_url??"https://build-assets.zuplo.dev"}get remoteLogToken(){return this.runtime.__ZUPLO_REMOTE_LOG_TOKEN??this.config.remote_log_token??void 0}get managementApiURL(){return this.runtime.__ZUPLO_MANAGEMENT_API_URL??this.config.management_api_url??"https://api.zuplo.com"}get cdnURL(){return this.runtime.__ZUPLO_CDN_URL??this.config.cdn_url??"https://cdn.zuplo.com"}get remoteLogURL(){return this.runtime.__ZUPLO_REMOTE_LOG_URL??this.config.log_event_api??"https://ellie.zuplo.com"}get loggingId(){return this.runtime.__ZUPLO_LOGGING_ID??this.config.logging_id??void 0}get redisURL(){return this.runtime.__ZUPLO_REDIS_URL??this.config.redis_proxy_url??"https://redis-proxy.zuplo.com"}get apiKeyServiceUrl(){return this.runtime.__ZUPLO_API_KEY_SERVICE_URL??this.config.api_key_service_url??"https://apikey.zuplo.com"}get meteringServiceUrl(){return this.config.metering_service_url??"https://meters.zuplo.com"}get authApiJWT(){return this.runtime.__ZUPLO_AUTH_API_JWT??void 0}get userLogLevel(){return this.runtime.ZUPLO_LOG_LEVEL??this.runtime.__ZUPLO_LOG_LEVEL??this.config.user_log_level??"debug"}get systemLogLevel(){return this.runtime.__ZUPLO_LOG_LEVEL??this.config.system_log_level??"debug"}get logFormat(){return this.runtime.__ZUPLO_LOG_FORMAT??this.config.log_format??"cloudflare"}get isCloudflare(){return this.runtime.__ZUPLO_RUNTIME_TYPE?this.runtime.__ZUPLO_RUNTIME_TYPE==="cloudflare":this.config.runtime_type?this.config.runtime_type==="cloudflare":typeof WebSocketPair=="function"}get isDeno(){return this.runtime.__ZUPLO_RUNTIME_TYPE?this.runtime.__ZUPLO_RUNTIME_TYPE==="deno":this.config.runtime_type?this.config.runtime_type==="deno":typeof WebSocketPair!="function"}get isLocalDevelopment(){return this.build.ENVIRONMENT_TYPE?this.build.ENVIRONMENT_TYPE==="LOCAL_DEVELOPMENT":!1}get systemUserAgent(){return`Zuplo/${this.build.ZUPLO_VERSION}`}get loggingEnvironmentType(){return this.isCloudflare?"edge":this.isLocalDevelopment?"local":this.isDeno?"working-copy":"unknown"}get loggingEnvironmentStage(){return this.build.ENVIRONMENT_TYPE==="PRODUCTION"?"production":this.build.ENVIRONMENT_TYPE==="PREVIEW"?"preview":this.isLocalDevelopment?"local":this.isDeno?"working-copy":"unknown"}};eo.Environment=au});var Eh=g(_h=>{"use strict";Object.defineProperty(_h,"__esModule",{value:!0});var gh=Y();Function.prototype.toString=function(){return"[native code]"};var to=globalThis,bh=to.caches;if(bh){let e=bh.open;to.caches.open=function(t){let r=gh.Environment.instance.deploymentName??gh.Environment.instance.build.BUILD_ID;return e.call(this,`${r}-${t}`)},delete to.caches.default,Object.freeze(to.caches)}});var lu=g(ro=>{"use strict";Object.defineProperty(ro,"__esModule",{value:!0});ro.MemoryCache=void 0;var vE=1e4,TE=1e3,wh=new Map,cu=class{static{s(this,"InnerCache")}constructor(t){this.#e=t.maxSize}#e;#t=0;#r=new Map;#n=[];get(t){let r=this.#r.get(t);if(!r)return;let n=Date.now();if(n>r.expiresAt){this.#r.delete(t);return}return r.lastUsed=n,this.#i(),r?.data}put(t,r,n){if(n<=0)return;if(this.#r.size>=this.#e){let a=this.#n.shift();a&&this.#r.delete(a)}let i=Date.now(),o={created:i,lastUsed:i,expiresAt:i+n*1e3,data:r};this.#n.push(t),this.#r.set(t,o)}delete(t){let r=this.#n.indexOf(t);r>=0&&this.#n.slice(r,1),this.#r.delete(t)}get size(){return this.#r.size}#i(){let t=Date.now();this.#t+vE*1e3>t&&(this.purge(),this.#t=t)}purge(){let t=Date.now();this.#r.forEach((r,n)=>{r.expiresAt>=t&&this.#r.delete(n)})}},uu=class{static{s(this,"MemoryCache")}constructor(t,r={maxSize:TE}){this.name=t;let n=wh.get(t);n||(n=new cu(r),wh.set(t,n)),this.#e=n}name;#e;get(t){return this.#e.get(t)}put(t,r,n){return this.#e.put(t,r,n)}delete(t){return this.#e.delete(t)}get size(){return this.#e.size}purge(){this.#e.purge()}};ro.MemoryCache=uu});var io=g(no=>{"use strict";Object.defineProperty(no,"__esModule",{value:!0});no.ZoneCache=void 0;var du="__zuplo-expiry-header",pu=class{static{s(this,"ZoneCache")}constructor(t,r){this.#t=t,this.#e=r}#e;#t;#r;async#n(){return this.#r||(this.#r=await caches.open(this.#t)),this.#r}#i(t){return new Request(`https://zone-cache.zuplo.app/${encodeURIComponent(t)}`)}async get(t){try{let r=await this.#n(),n=this.#i(t),i=await r.match(n);if(!i)return;let o=i.headers.get(du);if(!o){try{await r.delete(n)}catch(u){this.logDebug("Handled failure to delete with CF cache because of missing expiryHeader",u),await this.deleteFallback(t)}return}let a=parseInt(o);if(Date.now()>=a){try{await r.delete(n)}catch(u){this.logDebug("Handled failure to delete with CF cache because of expiration",u),await this.deleteFallback(t)}return}return await i.json()}catch(r){this.logDebug(r)}}async put(t,r,n){let i=new Headers({"cache-control":`s-maxage=${n}, must-revalidate`,"content-type":"application/json"});i.set(du,`${Date.now()+n*1e3}`);let o=await this.#n(),a=this.#i(t),c=new Response(JSON.stringify(r),{headers:i});await o.put(a,c)}async delete(t){let r=await this.#n(),n=this.#i(t);try{await r.delete(n)}catch(i){this.logDebug("Handled failure to delete with CF cache due to explicit delete call",i),await this.deleteFallback(t)}}async deleteFallback(t){let r=new Headers({"Cache-Control":"s-maxage=0, must-revalidate"});r.set(du,`${Date.now()}`);let n=await this.#n(),i=this.#i(t),o=new Response("",{headers:r});await n.put(i,o)}logDebug(...t){"logger"in this.#e?this.#e.logger?.debug(`Error in ZoneCache: '${this.#t}'`,t):"log"in this.#e&&this.#e.log.debug(`Error in ZoneCache: '${this.#t}'`,t)}};no.ZoneCache=pu});var Jt=g(oo=>{"use strict";Object.defineProperty(oo,"__esModule",{value:!0});oo.MemoryZoneReadThroughCache=void 0;var SE=lu(),IE=io(),hu=class{static{s(this,"MemoryZoneReadThroughCache")}constructor(t,r){let n=`f6726488-fd18-4b7f-9c30-6070565e8042-${t}`;this.#e=t,this.#t=new SE.MemoryCache(n),this.#r=new IE.ZoneCache(n,r),this.#n=r}#e;#t;#r;#n;async get(t){let r=this.#t.get(t);if(r)return r;let n=await this.#r.get(t);if(n){let i=Math.floor((n.expires-Date.now())/1e3);if(i>0)return this.#t.put(t,n.data,i),n.data}}put(t,r,n){this.#t.put(t,r,n);let i={data:r,expires:Date.now()+n*1e3};this.#r.put(t,i,n).catch(o=>{"logger"in this.#n?this.#n.logger?.error(`Error in MemoryZoneReadThroughCache: '${this.#e}'`,o):"log"in this.#n&&this.#n.log.error(`Error in MemoryZoneReadThroughCache: '${this.#e}'`,o)})}};oo.MemoryZoneReadThroughCache=hu});var ei=g(R=>{"use strict";Object.defineProperty(R,"__esModule",{value:!0});R.INTERNAL_HEADERS_TO_REMOVE=R.DISPATCH_HEADERS_TO_REMOVE=R.ZP_TIMEZONE_HEADER=R.ZP_REGION_CODE_HEADER=R.ZP_REGION_HEADER=R.ZP_METRO_CODE_HEADER=R.ZP_POSTAL_CODE_HEADER=R.ZP_COLO_HEADER=R.ZP_AS_ORG_HEADER=R.ZP_ASN_HEADER=R.TRUE_CLIENT_IP=R.ZP_IP_LATITUDE_HEADER=R.ZP_IP_LONGITUDE_HEADER=R.ZP_IP_COUNTRY_HEADER=R.ZP_IP_CONTINENT_HEADER=R.ZP_IP_CITY_HEADER=R.CF_IP_LATITUDE_HEADER=R.CF_IP_LONGITUDE_HEADER=R.CF_IP_COUNTRY_HEADER=R.CF_IP_CONTINENT_HEADER=R.CF_IP_CITY_HEADER=R.RAY_ID_HEADER=R.BODY_REMOVED_HEADER=R.REQUEST_ID_HEADER=R.LEGACY_REQUEST_ID_HEADER=void 0;R.LEGACY_REQUEST_ID_HEADER="zuplo-request-id";R.REQUEST_ID_HEADER="zp-rid";R.BODY_REMOVED_HEADER="zp-body-removed";R.RAY_ID_HEADER="cf-ray";R.CF_IP_CITY_HEADER="cf-ipcity";R.CF_IP_CONTINENT_HEADER="cf-ipcontinent";R.CF_IP_COUNTRY_HEADER="cf-ipcountry";R.CF_IP_LONGITUDE_HEADER="cf-iplongitude";R.CF_IP_LATITUDE_HEADER="cf-iplatitude";R.ZP_IP_CITY_HEADER="zp-ipcity";R.ZP_IP_CONTINENT_HEADER="zp-ipcontinent";R.ZP_IP_COUNTRY_HEADER="zp-ipcountry";R.ZP_IP_LONGITUDE_HEADER="zp-iplongitude";R.ZP_IP_LATITUDE_HEADER="zp-iplatitude";R.TRUE_CLIENT_IP="true-client-ip";R.ZP_ASN_HEADER="zp-asn";R.ZP_AS_ORG_HEADER="zp-asorg";R.ZP_COLO_HEADER="zp-colo";R.ZP_POSTAL_CODE_HEADER="zp-postalcode";R.ZP_METRO_CODE_HEADER="zp-metrocode";R.ZP_REGION_HEADER="zp-region";R.ZP_REGION_CODE_HEADER="zp-regioncode";R.ZP_TIMEZONE_HEADER="zp-timezone";R.DISPATCH_HEADERS_TO_REMOVE=[R.CF_IP_CITY_HEADER,R.CF_IP_CONTINENT_HEADER,R.CF_IP_COUNTRY_HEADER,R.CF_IP_LONGITUDE_HEADER,R.CF_IP_LATITUDE_HEADER,R.ZP_ASN_HEADER,R.ZP_AS_ORG_HEADER,R.ZP_COLO_HEADER,R.ZP_POSTAL_CODE_HEADER,R.ZP_METRO_CODE_HEADER,R.ZP_REGION_HEADER,R.ZP_REGION_CODE_HEADER,R.ZP_TIMEZONE_HEADER];R.INTERNAL_HEADERS_TO_REMOVE=["x-b3-sampled","x-b3-spanid","x-b3-traceid","x-envoy-attempt-count","x-envoy-decorator-operation","x-envoy-external-address","x-envoy-peer-metadata","x-envoy-peer-metadata-id","k-proxy-request","fly-client-ip","fly-forwarded-port","fly-forwarded-proto","fly-forwarded-ssl","fly-region","fly-request-id","fly-traceparent","fly-tracestate"]});var xh=g(w=>{"use strict";Object.defineProperty(w,"__esModule",{value:!0});w.generateColor=w.colorFunctions=w.stripColor=w.bgRgb24=w.rgb24=w.bgRgb8=w.rgb8=w.bgBrightWhite=w.bgBrightCyan=w.bgBrightMagenta=w.bgBrightBlue=w.bgBrightYellow=w.bgBrightGreen=w.bgBrightRed=w.bgBrightBlack=w.bgWhite=w.bgCyan=w.bgMagenta=w.bgBlue=w.bgYellow=w.bgGreen=w.bgRed=w.bgBlack=w.brightWhite=w.brightCyan=w.brightMagenta=w.brightBlue=w.brightYellow=w.brightGreen=w.brightRed=w.brightBlack=w.gray=w.white=w.cyan=w.magenta=w.blue=w.yellow=w.green=w.red=w.black=w.strikethrough=w.hidden=w.inverse=w.underline=w.italic=w.dim=w.bold=w.reset=w.getColorEnabled=w.setColorEnabled=void 0;var vh=!0,fu=!vh;function PE(e){vh||(fu=e)}s(PE,"setColorEnabled");w.setColorEnabled=PE;function AE(){return fu}s(AE,"getColorEnabled");w.getColorEnabled=AE;function F(e,t){return{open:`\x1B[${e.join(";")}m`,close:`\x1B[${t}m`,regexp:new RegExp(`\\x1b\\[${t}m`,"g")}}s(F,"code");function q(e,t){return fu?`${t.open}${e.replace(t.regexp,t.open)}${t.close}`:e}s(q,"run");function RE(e){return q(e,F([0],0))}s(RE,"reset");w.reset=RE;function OE(e){return q(e,F([1],22))}s(OE,"bold");w.bold=OE;function xE(e){return q(e,F([2],22))}s(xE,"dim");w.dim=xE;function NE(e){return q(e,F([3],23))}s(NE,"italic");w.italic=NE;function CE(e){return q(e,F([4],24))}s(CE,"underline");w.underline=CE;function LE(e){return q(e,F([7],27))}s(LE,"inverse");w.inverse=LE;function DE(e){return q(e,F([8],28))}s(DE,"hidden");w.hidden=DE;function UE(e){return q(e,F([9],29))}s(UE,"strikethrough");w.strikethrough=UE;function kE(e){return q(e,F([30],39))}s(kE,"black");w.black=kE;function Th(e){return q(e,F([31],39))}s(Th,"red");w.red=Th;function Sh(e){return q(e,F([32],39))}s(Sh,"green");w.green=Sh;function Ih(e){return q(e,F([33],39))}s(Ih,"yellow");w.yellow=Ih;function Ph(e){return q(e,F([34],39))}s(Ph,"blue");w.blue=Ph;function Ah(e){return q(e,F([35],39))}s(Ah,"magenta");w.magenta=Ah;function Rh(e){return q(e,F([36],39))}s(Rh,"cyan");w.cyan=Rh;function ME(e){return q(e,F([37],39))}s(ME,"white");w.white=ME;function HE(e){return Oh(e)}s(HE,"gray");w.gray=HE;function Oh(e){return q(e,F([90],39))}s(Oh,"brightBlack");w.brightBlack=Oh;function FE(e){return q(e,F([91],39))}s(FE,"brightRed");w.brightRed=FE;function qE(e){return q(e,F([92],39))}s(qE,"brightGreen");w.brightGreen=qE;function $E(e){return q(e,F([93],39))}s($E,"brightYellow");w.brightYellow=$E;function jE(e){return q(e,F([94],39))}s(jE,"brightBlue");w.brightBlue=jE;function VE(e){return q(e,F([95],39))}s(VE,"brightMagenta");w.brightMagenta=VE;function GE(e){return q(e,F([96],39))}s(GE,"brightCyan");w.brightCyan=GE;function BE(e){return q(e,F([97],39))}s(BE,"brightWhite");w.brightWhite=BE;function KE(e){return q(e,F([40],49))}s(KE,"bgBlack");w.bgBlack=KE;function JE(e){return q(e,F([41],49))}s(JE,"bgRed");w.bgRed=JE;function zE(e){return q(e,F([42],49))}s(zE,"bgGreen");w.bgGreen=zE;function WE(e){return q(e,F([43],49))}s(WE,"bgYellow");w.bgYellow=WE;function QE(e){return q(e,F([44],49))}s(QE,"bgBlue");w.bgBlue=QE;function YE(e){return q(e,F([45],49))}s(YE,"bgMagenta");w.bgMagenta=YE;function ZE(e){return q(e,F([46],49))}s(ZE,"bgCyan");w.bgCyan=ZE;function XE(e){return q(e,F([47],49))}s(XE,"bgWhite");w.bgWhite=XE;function ew(e){return q(e,F([100],49))}s(ew,"bgBrightBlack");w.bgBrightBlack=ew;function tw(e){return q(e,F([101],49))}s(tw,"bgBrightRed");w.bgBrightRed=tw;function rw(e){return q(e,F([102],49))}s(rw,"bgBrightGreen");w.bgBrightGreen=rw;function nw(e){return q(e,F([103],49))}s(nw,"bgBrightYellow");w.bgBrightYellow=nw;function iw(e){return q(e,F([104],49))}s(iw,"bgBrightBlue");w.bgBrightBlue=iw;function ow(e){return q(e,F([105],49))}s(ow,"bgBrightMagenta");w.bgBrightMagenta=ow;function sw(e){return q(e,F([106],49))}s(sw,"bgBrightCyan");w.bgBrightCyan=sw;function aw(e){return q(e,F([107],49))}s(aw,"bgBrightWhite");w.bgBrightWhite=aw;function zt(e,t=255,r=0){return Math.trunc(Math.max(Math.min(e,t),r))}s(zt,"clampAndTruncate");function cw(e,t){return q(e,F([38,5,zt(t)],39))}s(cw,"rgb8");w.rgb8=cw;function uw(e,t){return q(e,F([48,5,zt(t)],49))}s(uw,"bgRgb8");w.bgRgb8=uw;function lw(e,t){return typeof t=="number"?q(e,F([38,2,t>>16&255,t>>8&255,t&255],39)):q(e,F([38,2,zt(t.r),zt(t.g),zt(t.b)],39))}s(lw,"rgb24");w.rgb24=lw;function dw(e,t){return typeof t=="number"?q(e,F([48,2,t>>16&255,t>>8&255,t&255],49)):q(e,F([48,2,zt(t.r),zt(t.g),zt(t.b)],49))}s(dw,"bgRgb24");w.bgRgb24=dw;var pw=new RegExp(["[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:[a-zA-Z\\d]*(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)","(?:(?:\\d{1,4}(?:;\\d{0,4})*)?[\\dA-PR-TZcf-ntqry=><~]))"].join("|"),"g");function hw(e){return e.replace(pw,"")}s(hw,"stripColor");w.stripColor=hw;w.colorFunctions=[Th,Sh,Ih,Ph,Ah,Rh];function fw(e){let t=0,r=e.length,n=0;if(r>0)for(;n<r;)t=(t<<5)-t+e.charCodeAt(n++)|0;return t}s(fw,"hashCode");function mw(e){let t=Math.abs(fw(e));return w.colorFunctions[t%w.colorFunctions.length]}s(mw,"generateColor");w.generateColor=mw});var Nh=g(so=>{"use strict";Object.defineProperty(so,"__esModule",{value:!0});so.format=void 0;function yw(e,t,...r){let n=0,i=r.length,o=String(t).replace(/%[sdjoO%]/g,a=>{if(a==="%%")return"%";if(n>=i)return a;switch(a){case"%s":return String(r[n++]);case"%d":return Number(r[n++]).toString();case"%o":return e(r[n++]).split(`
 `).map(c=>c.trim()).join(" ");case"%O":return e(r[n++]);case"%j":try{return JSON.stringify(r[n++])}catch{return"[Circular]"}default:return a}});for(let a of r.splice(n))a===null||!(typeof a=="object"&&a!==null)?o+=" "+a:o+=" "+e(a);return o}s(yw,"format");so.format=yw});var Mh=g(co=>{"use strict";Object.defineProperty(co,"__esModule",{value:!0});co.inspect=void 0;function Tr(e,t,r,n){let i={seen:[],stylize:gw,showHidden:t??!1,depth:r??2,colors:n??!1,customInspect:!0};return i.colors&&(i.stylize=_w),ao(i,e,i.depth)}s(Tr,"inspect");co.inspect=Tr;Tr.colors={bold:[1,22],italic:[3,23],underline:[4,24],inverse:[7,27],white:[37,39],grey:[90,39],black:[30,39],blue:[34,39],cyan:[36,39],green:[32,39],magenta:[35,39],red:[31,39],yellow:[33,39]};Tr.styles={special:"cyan",number:"yellow",boolean:"yellow",undefined:"grey",null:"bold",string:"green",date:"magenta",regexp:"red"};function gw(e,t){return e}s(gw,"stylizeNoColor");function bw(e){return typeof e=="boolean"}s(bw,"isBoolean");function Lh(e){return e===void 0}s(Lh,"isUndefined");function _w(e,t){let r=Tr.styles[t];return r?"\x1B["+Tr.colors[r][0]+"m"+e+"\x1B["+Tr.colors[r][1]+"m":e}s(_w,"stylizeWithColor");function mu(e){return typeof e=="function"}s(mu,"isFunction");function Dh(e){return typeof e=="string"}s(Dh,"isString");function Ew(e){return typeof e=="number"}s(Ew,"isNumber");function Uh(e){return e===null}s(Uh,"isNull");function kh(e,t){return Object.prototype.hasOwnProperty.call(e,t)}s(kh,"hasOwn");function yu(e){return Eu(e)&&wu(e)==="[object RegExp]"}s(yu,"isRegExp");function Eu(e){return typeof e=="object"&&e!==null}s(Eu,"isObject");function gu(e){return Eu(e)&&(wu(e)==="[object Error]"||e instanceof Error)}s(gu,"isError");function Ch(e){return Eu(e)&&wu(e)==="[object Date]"}s(Ch,"isDate");function wu(e){return Object.prototype.toString.call(e)}s(wu,"objectToString");function ww(e){let t={};return e.forEach(function(r,n){t[r]=!0}),t}s(ww,"arrayToHash");function vw(e,t,r,n,i){let o=[];for(let a=0,c=t.length;a<c;++a)kh(t,String(a))?o.push(_u(e,t,r,n,String(a),!0)):o.push("");return i.forEach(function(a){a.match(/^\d+$/)||o.push(_u(e,t,r,n,a,!0))}),o}s(vw,"formatArray");function bu(e){return"["+Error.prototype.toString.call(e)+"]"}s(bu,"formatError");function ao(e,t,r){if(e.customInspect&&t&&mu(t.inspect)&&t.inspect!==Tr&&!(t.constructor&&t.constructor.prototype===t)){let d=t.inspect(r,e);return Dh(d)||(d=ao(e,d,r)),d}let n=Tw(e,t);if(n)return n;let i=Object.keys(t),o=ww(i);try{e.showHidden&&Object.getOwnPropertyNames&&(i=Object.getOwnPropertyNames(t))}catch{}if(gu(t)&&(i.indexOf("message")>=0||i.indexOf("description")>=0))return bu(t);if(i.length===0){if(mu(t)){let d=t.name?": "+t.name:"";return e.stylize("[Function"+d+"]","special")}if(yu(t))return e.stylize(RegExp.prototype.toString.call(t),"regexp");if(Ch(t))return e.stylize(Date.prototype.toString.call(t),"date");if(gu(t))return bu(t)}let a="",c=!1,u=["{","}"];if(Array.isArray(t)&&(c=!0,u=["[","]"]),mu(t)&&(a=" [Function"+(t.name?": "+t.name:"")+"]"),yu(t)&&(a=" "+RegExp.prototype.toString.call(t)),Ch(t)&&(a=" "+Date.prototype.toUTCString.call(t)),gu(t)&&(a=" "+bu(t)),i.length===0&&(!c||t.length==0))return u[0]+a+u[1];if(r<0)return yu(t)?e.stylize(RegExp.prototype.toString.call(t),"regexp"):e.stylize("[Object]","special");e.seen.push(t);let l;return c?l=vw(e,t,r,o,i):l=i.map(function(d){return _u(e,t,r,o,d,c)}),e.seen.pop(),Sw(l,a,u)}s(ao,"formatValue");function _u(e,t,r,n,i,o){let a,c,u;u={value:void 0};try{u.value=t[i]}catch{}try{Object.getOwnPropertyDescriptor&&(u=Object.getOwnPropertyDescriptor(t,i)||u)}catch{}if(u.get?u.set?c=e.stylize("[Getter/Setter]","special"):c=e.stylize("[Getter]","special"):u.set&&(c=e.stylize("[Setter]","special")),kh(n,i)||(a="["+i+"]"),c||(e.seen.indexOf(u.value)<0?(Uh(r)?c=ao(e,u.value,null):c=ao(e,u.value,r-1),c.indexOf(`
 `)>-1&&(o?c=c.split(`
 `).map(function(l){return"  "+l}).join(`
@@ -71,7 +71,7 @@ Signature verification is impossible without access to the original signed mater
 `+d}):new kr.StripeSignatureVerificationError(t,e,{message:`No signatures found matching the expected signature for payload. Are you passing the raw request body you received from Stripe? 
  If a webhook request is being forwarded by a third-party tool, ensure that the exact request body, including JSON formatting and new line style, is preserved.
 `+l+`
-`+d});let p=Math.floor((typeof c=="number"?c:Date.now())/1e3)-r.timestamp;if(i>0&&p>i)throw new kr.StripeSignatureVerificationError(t,e,{message:"Timestamp outside the tolerance zone"});return!0}s(YA,"validateComputedSignature");function ZA(e,t){return typeof e!="string"?null:e.split(",").reduce((r,n)=>{let i=n.split("=");return i[0]==="t"&&(r.timestamp=parseInt(i[1],10)),i[0]===t&&r.signatures.push(i[1]),r},{timestamp:-1,signatures:[]})}s(ZA,"parseHeader");function XA(e,t){if(e.length!==t.length)return!1;let r=e.length,n=0;for(let i=0;i<r;++i)n|=e.charCodeAt(i)^t.charCodeAt(i);return n===0}s(XA,"secureCompare");async function Fg(e,t){let r=new TextEncoder,n=await crypto.subtle.importKey("raw",r.encode(t),{name:"HMAC",hash:{name:"SHA-256"}},!1,["sign"]),i=await crypto.subtle.sign("hmac",n,r.encode(e)),o=new Uint8Array(i),a=new Array(o.length);for(let c=0;c<o.length;c++)a[c]=np[o[c]];return a.join("")}s(Fg,"computeHMACSignatureAsync");On.computeHMACSignatureAsync=Fg;var np=new Array(256);for(let e=0;e<np.length;e++)np[e]=e.toString(16).padStart(2,"0")});var qt=g(la=>{"use strict";Object.defineProperty(la,"__esModule",{value:!0});la.optionValidator=void 0;var Pi=L();function eR(e,t){let r=s((o,a,c)=>{let u=e[o];if(!(c&&u===void 0)){if(u===void 0)throw new Pi.ConfigurationError(`Value of '${String(o)}' on policy '${t}' is required, but no value was set. If using an environment variable, check that it is set correctly.`);if(a==="array"&&Array.isArray(u))throw new Pi.ConfigurationError(`Value of '${String(o)}' on policy '${t}' must be an array. Received type ${typeof u}.`);if(typeof u!==a)throw new Pi.ConfigurationError(`Value of '${String(o)}' on policy '${t}' must be of type ${a}. Received type ${typeof u}.`);if(typeof u=="string"&&u.length===0)throw new Pi.ConfigurationError(`Value of '${String(o)}' on policy '${t}' must be a non-empty string. The value received is empty. If using an environment variable, check that it is set correctly.`);if(typeof u=="number"&&isNaN(u))throw new Pi.ConfigurationError(`Value of '${String(o)}' on policy '${t}' must be valid number. If using an environment variable, check that it is set correctly.`)}},"validate"),n=s((o,a)=>(r(o,a,!0),{optional:n,required:i}),"optional"),i=s((o,a)=>(r(o,a,!1),{optional:n,required:i}),"required");return{optional:n,required:i}}s(eR,"optionValidator");la.optionValidator=eR});var ip=g(da=>{"use strict";Object.defineProperty(da,"__esModule",{value:!0});da.StripeWebhookVerificationInboundPolicy=void 0;var tR=se(),rR=qg(),nR=qt(),iR=s(async(e,t,r,n)=>{(0,nR.optionValidator)(r,n).required("signingSecret","string").optional("tolerance","number");let i=e.headers.get("stripe-signature");try{let o=await e.clone().text();await(0,rR.constructEventAsync)(o,i,r.signingSecret)}catch(o){return t.log.error("Error validating stripe webhook",o),tR.HttpProblems.badRequest(e,t,{title:"Webhook Error",detail:o.message})}return e},"StripeWebhookVerificationInboundPolicy");da.StripeWebhookVerificationInboundPolicy=iR});var $g=g(pa=>{"use strict";Object.defineProperty(pa,"__esModule",{value:!0});pa.MeteringPlugin=void 0;var oR=gt(),op=class extends oR.SystemRuntimePlugin{static{s(this,"MeteringPlugin")}};pa.MeteringPlugin=op});var jg=g(ha=>{"use strict";Object.defineProperty(ha,"__esModule",{value:!0});ha.StripeMeteringPlugin=void 0;var lt=L(),sR=Ct(),aR=ip(),xn=se(),cR=Yt(),uR=zr(),lR=Lu(),dR=ot(),sp=Y(),ap=Dt(),pR=$g(),hR="checkout.session.completed",cp=class extends pR.MeteringPlugin{static{s(this,"StripeMeteringPlugin")}options;constructor(t){super(),this.options=t}registerRoutes(t,r){let n=s(async(c,u)=>{if(this.options.__testMode===!0)return u.log.warn("Received Stripe webhook event of in test mode."),"success";let{meteringBucketId:l}=this.options;if(!l)throw new lt.ConfigurationError("StripeMeteringPlugin - No 'meteringBucketId' property provided");let d=this.options.meteringBucketRegion??"us-central1";if(!bR(d))throw new lt.ConfigurationError(`StripeMeteringPlugin - The value '${d}' on the property 'meteringBucketRegion' is invalid.`);let p=await c.json();if(!gR(p))return xn.HttpProblems.badRequest(c,u,{detail:"The received body was not in the expected format."});u.log.info(`Received Stripe webhook event of type '${p.type}' with ID '${p.id}'.`);let f;try{f=await fR({event:p,stripeSecretKey:this.options.stripeSecretKey,logger:u.log})}catch(h){return xn.HttpProblems.internalServerError(c,u,{detail:h.message??"Unknown error getting subscription info"})}if(f){let h;if(this.options.apiKeyBucketName&&sp.Environment.instance.build.ACCOUNT_NAME&&this.options.zuploAccountApiKey?h=await mR({bucketName:this.options.apiKeyBucketName,accountName:sp.Environment.instance.build.ACCOUNT_NAME,stripeProductId:f.productId,stripeSubscriptionId:f.subscriptionId,stripeCustomerId:f.customerId,managerEmail:f.customerEmail,zuploAccountApiKey:this.options.zuploAccountApiKey,logger:u.log}):u.log.debug("Skipping consumer creation. No 'apiKeyBucketName', 'zuploAccountApiKey', or account variable set."),!h)return xn.HttpProblems.internalServerError(c,u,{detail:"No consumer was created, skipping creation of subscription"});let y="routes.oas.json";return yR({request:c,context:u,stripeProductId:f.productId,stripeSubscriptionId:f.subscriptionId,customerKey:h,productKey:y,meteringBucketId:l,meteringBucketRegion:d})}return xn.HttpProblems.ok(c,u,{detail:"Event was ignored by Stripe metering plugin webhook."})},"stripeWebhookHandler"),i=(0,uR.createInternalPolicyProcessor)({inboundPolicies:[{handler:aR.StripeWebhookVerificationInboundPolicy,options:{signingSecret:this.options.webhooks.signingSecret,tolerance:this.options.webhooks.tolerance}}]}),o=new sR.Pipeline({processors:[cR.metricsProcessor,i],handler:n,gateway:r}),a=new dR.SystemRouteConfiguration({label:"PLUGIN_STRIPE_WEBHOOK_ROUTE",methods:["POST"],path:this.options.webhooks.routePath??"/__plugins/stripe/webhooks",systemRouteName:lR.SystemRouteName.StripePlugin});t.addRoute(a,o.execute)}};ha.StripeMeteringPlugin=cp;async function fR({event:e,stripeSecretKey:t,logger:r}){let n;if(e.type===hR){let l=e,d=l.data?.object?.subscription;if(!d)throw new lt.RuntimeError("Invalid Stripe Webhook event. Expected '.data.object.id' to be the subscription ID.");if(!l.data?.object?.client_reference_id)throw new lt.RuntimeError("Invalid Stripe Webhook event. Expected '.data.object.id' to be the subscription ID.");let f=await fetch(`https://api.stripe.com/v1/subscriptions/${d}`,{headers:{Authorization:`Bearer ${t}`}}),h=await f.json();if(f.status!==200){let y="Error retrieving subscription from Stripe API.";throw r.error(y,h),new lt.RuntimeError(y)}n=h}if(!n)return;let i=n.id;if(!i)throw new lt.RuntimeError("Invalid Stripe Webhook event. Expected '.data.object.id' to be the subscription ID.");let o=n.items?.data.find(l=>l.object==="subscription_item");if(!o||!o.id)throw new Error("Invalid Stripe Webhook event. Expected '.data.object.items.data[]' to contain a subscription_item.");let a=o.plan;if(!a||!a.product)throw new lt.RuntimeError("Invalid Stripe Webhook event. Expected '.data.object.items.data[].plan'.");let c=await fetch(`https://api.stripe.com/v1/customers/${n.customer}`,{headers:{Authorization:`Bearer ${t}`}}),u=await c.json();if(c.status!==200){let l="Error retrieving customer from Stripe API.";throw r.error(l,u),new lt.RuntimeError(l)}return{subscriptionId:i,productId:a.product,customerId:n.customer,customerEmail:u.email}}s(fR,"getStripeSubscription");async function mR({accountName:e,bucketName:t,zuploAccountApiKey:r,stripeSubscriptionId:n,stripeProductId:i,stripeCustomerId:o,managerEmail:a,logger:c}){let u=new URL(`/v1/accounts/${e}/key-buckets/${t}/consumers`,"https://dev.zuplo.com");u.searchParams.set("with-api-key","true");let l=crypto.randomUUID(),d={name:l,description:`Consumer for Stripe subscription ${n}`,tags:{providerSubscriptionKey:n,planProviderKey:i},metadata:{stripeSubscriptionId:n,stripeProductId:i,stripeCustomerId:o},managers:[a]},p=await fetch(u,{method:"POST",headers:{Authorization:`Bearer ${r}`,"content-type":"application/json"},body:JSON.stringify(d)}),f=await p.json();if(p.status!==200){let h="Error creating API Key Consumer";throw c.error(h,f),new lt.RuntimeError(h)}return c.info("Successfully created API Key Consumer",{consumerId:l,stripeSubscriptionId:n,stripeProductId:i}),l}s(mR,"createConsumer");async function yR({request:e,context:t,stripeSubscriptionId:r,stripeProductId:n,customerKey:i,productKey:o,meteringBucketId:a,meteringBucketRegion:c}){let u={status:"active",type:"periodic",renewalStrategy:"monthly",region:c,providerKey:r,planProviderKey:n,customerKey:i,productKey:o};try{let{authApiJWT:l,meteringServiceUrl:d}=sp.Environment.instance;if(!(0,ap.isNonEmptyString)(l))throw new lt.SystemError("No Zuplo JWT token set.");let p=await fetch(`${d}/internal/v1/metering/${a}/subscriptions`,{headers:{Authorization:`Bearer ${l}`,"Content-Type":"application/json"},method:"POST",body:JSON.stringify(u)});if(!p.ok){let f="Error creating metering subscription.",h;try{h=await p.json()}catch{h={status:p.status,statusText:p.statusText}}throw t.log.error(f,h),new lt.RuntimeError(f)}}catch(l){return xn.HttpProblems.internalServerError(e,t,{detail:l.message})}return t.log.info("Successfully created/updated metering subscription.",u),xn.HttpProblems.ok(e,t)}s(yR,"saveSubscription");function gR(e){return e!==null&&typeof e=="object"&&"id"in e&&(0,ap.isString)(e.id)&&"type"in e&&(0,ap.isString)(e.type)}s(gR,"isStripeWebhookEvent");function bR(e){return e!==null&&typeof e=="string"&&["us-central1","europe-west4"].includes(e)}s(bR,"isMetricsRegion")});var Jg=g(Nn=>{"use strict";Object.defineProperty(Nn,"__esModule",{value:!0});Nn.AmberfloMeteringInboundPolicy=Nn.AmberfloMeteringPolicy=void 0;var Vg=L(),_R=ve(),Gg=ni(),Kg=new WeakMap,Bg={},up=class{static{s(this,"AmberfloMeteringPolicy")}static setRequestProperties(t,r){Kg.set(t,r)}};Nn.AmberfloMeteringPolicy=up;async function ER(e,t,r,n){if(!r.statusCodes)throw new Vg.ConfigurationError(`Invalid AmberfloMeterInboundPolicy '${n}': options.statusCodes must be an array of HTTP status code numbers`);let i=Array.isArray(r.statusCodes)?r.statusCodes:(0,Gg.statusCodesStringToNumberArray)(r.statusCodes);return t.addResponseSendingFinalHook(async o=>{if(i.includes(o.status)){let a=Kg.get(t),c=r.customerId;if(r.customerIdPropertyPath){if(!e.user)throw new Vg.RuntimeError(`Unable to apply customerIdPropertyPath '${r.customerIdPropertyPath}' as request.user is 'undefined'.`);c=(0,Gg.getValueFromRequestUser)(e.user,r.customerIdPropertyPath,"customerIdPropertyPath")}let u=a?.customerId??c;if(!u){t.log.error(`Error in AmberfloMeterInboundPolicy '${n}': customerId cannot be undefined`);return}let l=a?.meterApiName??r.meterApiName;if(!l){t.log.error(`Error in AmberfloMeterInboundPolicy '${n}': meterApiName cannot be undefined`);return}let d=a?.meterValue??r.meterValue;if(!d){t.log.error(`Error in AmberfloMeterInboundPolicy '${n}': meterValue cannot be undefined`);return}let p={customerId:u,meterApiName:l,meterValue:d,meterTimeInMillis:Date.now(),dimensions:Object.apply(r.dimensions??{},a?.dimensions)},f=Bg[r.apiKey];if(!f){let h=r.apiKey,y=e.headers.get("zm-test-id")??"";f=new _R.BatchDispatch("amberflo-ingest-meter",10,async v=>{try{let T=r.url??"https://app.amberflo.io/ingest",S=await fetch(T,{method:"POST",body:JSON.stringify(v),headers:{"content-type":"application/json","x-api-key":h,"zm-test-id":y}});S.ok||t.log.error(`Unexpected response in AmberfloMeteringInboundPolicy '${n}'. ${S.status}: ${await S.text()}`)}catch(T){throw t.log.error(`Error in AmberfloMeteringInboundPolicy '${n}': ${T.message}`),T}}),Bg[h]=f}f.enqueue(p),t.waitUntil(f.waitUntilFlushed())}}),e}s(ER,"AmberfloMeteringInboundPolicy");Nn.AmberfloMeteringInboundPolicy=ER});var lp=g(fa=>{"use strict";Object.defineProperty(fa,"__esModule",{value:!0});fa.sha256=void 0;async function wR(e){let t=new TextEncoder().encode(e),r=await crypto.subtle.digest({name:"SHA-256"},t);return[...new Uint8Array(r)].map(i=>i.toString(16).padStart(2,"0")).join("")}s(wR,"sha256");fa.sha256=wR});var $t=g(ma=>{"use strict";Object.defineProperty(ma,"__esModule",{value:!0});ma.getPolicyCacheName=void 0;var vR=lp(),zg=new Map;async function TR(e,t){let r,n=zg.get(e);return n!==void 0?r=n:(r=`zuplo-policy-${await(0,vR.sha256)(JSON.stringify({policyName:e,options:t}))}`,zg.set(e,r)),r}s(TR,"getPolicyCacheName");ma.getPolicyCacheName=TR});var fp=g(ya=>{"use strict";Object.defineProperty(ya,"__esModule",{value:!0});ya.ApiKeyInboundPolicy=void 0;var SR=$t(),IR=Jt(),Wg=wd(),dp=L(),PR=Lt(),pp=Le(),hp=Y(),AR=Ss(),Qg="key-metadata-cache-type";function RR(e,t){return t.authScheme===""?e:e.replace(`${t.authScheme} `,"")}s(RR,"getKeyValue");async function OR(e,t,r,n){if(!r.bucketName)if(Wg.environment.ZUPLO_API_KEY_SERVICE_BUCKET_NAME)r.bucketName=Wg.environment.ZUPLO_API_KEY_SERVICE_BUCKET_NAME;else throw new dp.ConfigurationError(`ApiKeyInboundPolicy '${n}' - no bucketName property provided`);let i={authHeader:r.authHeader??"authorization",authScheme:r.authScheme??"Bearer",bucketName:r.bucketName,cacheTtlSeconds:r.cacheTtlSeconds??60,allowUnauthenticatedRequests:r.allowUnauthenticatedRequests??!1,disableAutomaticallyAddingKeyHeaderToOpenApi:r.disableAutomaticallyAddingKeyHeaderToOpenApi??!1};if(i.cacheTtlSeconds<60)throw new dp.ConfigurationError(`ApiKeyInboundPolicy '${n}' - minimum cacheTtlSeconds value is 60s, '${i.cacheTtlSeconds}' is invalid`);let o=s(T=>i.allowUnauthenticatedRequests?e:PR.HttpProblems.unauthorized(e,t,{detail:T}),"unauthorizedResponse"),a=e.headers.get(i.authHeader);if(!a)return o("No Authorization Header");if(!a.toLowerCase().startsWith(i.authScheme.toLowerCase()))return o("Invalid Authorization Scheme");let c=RR(a,i);if(!c||c==="")return o("No key present");let u=await xR(c),l=await(0,SR.getPolicyCacheName)(n,i),d=new IR.MemoryZoneReadThroughCache(l,{logger:pp.SystemLogMap.getLogger(t)}),p=await d.get(u);if(p&&p.isValid===!0)return e.user=p.user,e;if(p&&!p.isValid)return p.typeId!==Qg&&pp.SystemLogMap.getLogger(t).error(`ApiKeyInboundPolicy '${n}' - cached metadata has invalid typeId '${p.typeId}'`,p),o("Authorization Failed");let f={key:c},h=await(0,AR.fetchRetry)({retryDelayMs:5,retries:2,logger:pp.SystemLogMap.getLogger(t)},`${hp.Environment.instance.apiKeyServiceUrl}/v1/$validate/${i.bucketName}`,{method:"POST",headers:{"content-type":"application/json","zp-rid":t.requestId,"zp-dn":hp.Environment.instance.deploymentName??"unknown","User-Agent":hp.Environment.instance.systemUserAgent},body:JSON.stringify(f)});if(h.status===401)return t.log.info(`ApiKeyInboundPolicy '${n}' - 401 response from Key Service`),o("Authorization Failed");if(h.status!==200){try{let T=await h.text(),S=JSON.parse(T);t.log.error("Unexpected response from key service",S)}catch{t.log.error("Invalid response from key service")}throw new dp.RuntimeError(`ApiKeyInboundPolicy '${n}' - unexpected response from Key Service. Status: ${h.status}`)}let y=await h.json(),v={isValid:!0,typeId:Qg,user:{sub:y.name,data:y.metadata}};return e.user=v.user,d.put(u,v,i.cacheTtlSeconds),e}s(OR,"ApiKeyInboundPolicy");ya.ApiKeyInboundPolicy=OR;async function xR(e){let t=new TextEncoder().encode(e),r=await crypto.subtle.digest("SHA-256",t);return Array.from(new Uint8Array(r)).map(o=>o.toString(16).padStart(2,"0")).join("")}s(xR,"hashValue")});var Yg=g(ga=>{"use strict";Object.defineProperty(ga,"__esModule",{value:!0});ga.ApiAuthKeyInboundPolicy=void 0;var NR=fp();ga.ApiAuthKeyInboundPolicy=NR.ApiKeyInboundPolicy});var jt=g(ba=>{"use strict";Object.defineProperty(ba,"__esModule",{value:!0});ba.OpenIdJwtInboundPolicy=void 0;var yp=(vs(),Xi(ws)),gp=L(),CR=se(),mp={},LR=s(async(e,t)=>{if(!t.jwkUrl||typeof t.jwkUrl!="string")throw new gp.ConfigurationError("Invalid State - jwkUrl not set");mp[t.jwkUrl]||(mp[t.jwkUrl]=(0,yp.createRemoteJWKSet)(new URL(t.jwkUrl),t.headers?{headers:t.headers}:void 0));let{payload:r}=await(0,yp.jwtVerify)(e,mp[t.jwkUrl],{issuer:t.issuer,audience:t.audience});return r},"jwkVerifier"),DR=s(async(e,t)=>{let r;if(t.secret===void 0)throw new Error("secretVerifier requires secret to be defined");if(typeof t.secret=="string"){let o=new TextEncoder().encode(t.secret);r=new Uint8Array(o)}else r=t.secret;let{payload:n}=await(0,yp.jwtVerify)(e,r,{issuer:t.issuer,audience:t.audience});return n},"secretVerifier"),UR=s(async(e,t,r,n)=>{let i=e.headers.get("Authorization"),o="bearer ",a=s(f=>CR.HttpProblems.unauthorized(e,t,{detail:f}),"unauthorizedResponse");if(!r.jwkUrl&&!r.secret)throw new gp.ConfigurationError(`OpenIdJwtInboundPolicy policy '${n}': One of 'jwkUrl' or 'secret' options are required.`);if(r.jwkUrl&&r.secret)throw new gp.ConfigurationError(`OpenIdJwtInboundPolicy policy '${n}': Only one of 'jwkUrl' and 'secret' options should be provided.`);let c=r.jwkUrl?LR:DR,l=await s(async()=>{if(!i)return a("No authorization header");if(i.toLowerCase().indexOf(o)!==0)return a("Invalid bearer token format for authorization header");let f=i.substring(o.length);if(!f||f.length===0)return a("No bearer token on authorization header");try{return await c(f,r)}catch(h){let y=new URL(e.url);return"code"in h&&h.code==="ERR_JWT_EXPIRED"?t.log.warn(`Expired token used on url: ${y.pathname} `,h):t.log.warn(`Invalid token on: ${e.method} ${y.pathname}`,h),a("Invalid token")}},"getJwtOrRejectedResponse")();if(l instanceof Response)return r.allowUnauthenticatedRequests===!0?e:l;let d=r.subPropertyName??"sub",p=l[d];return p?(e.user={sub:p,data:l},e):a(`Token is not valid, no '${d}' property found.`)},"OpenIdJwtInboundPolicy");ba.OpenIdJwtInboundPolicy=UR});var Zg=g(_a=>{"use strict";Object.defineProperty(_a,"__esModule",{value:!0});_a.Auth0JwtInboundPolicy=void 0;var kR=jt(),MR=s(async(e,t,r,n)=>(0,kR.OpenIdJwtInboundPolicy)(e,t,{issuer:`https://${r.auth0Domain}/`,audience:r.audience,jwkUrl:`https://${r.auth0Domain}/.well-known/jwks.json`,allowUnauthenticatedRequests:r.allowUnauthenticatedRequests},n),"Auth0JwtInboundPolicy");_a.Auth0JwtInboundPolicy=MR});var Xg=g(Ea=>{"use strict";Object.defineProperty(Ea,"__esModule",{value:!0});Ea.BasicAuthInboundPolicy=void 0;var HR=se(),FR=s(async(e,t,r)=>{let n=e.headers.get("Authorization"),i="basic ",o=s(l=>HR.HttpProblems.unauthorized(e,t,{detail:l}),"unauthorizedResponse"),c=await s(async()=>{if(!n)return await o("No Authorization header");if(n.toLowerCase().indexOf(i)!==0)return await o("Invalid Basic token format for Authorization header");let l=n.substring(i.length);if(!l||l.length===0)return await o("No username:password provided");let d=atob(l).normalize(),p=d.indexOf(":");if(p===-1||/[\0-\x1F\x7F]/.test(d))return await o("Invalid basic token value - see https://tools.ietf.org/html/rfc5234#appendix-B.1");let f=d.substring(0,p),h=d.substring(p+1),y=r.accounts.find(v=>v.username===f&&v.password===h);return y||await o("Invalid username or password")},"getAccountOrRejectedResponse")();if(c instanceof Response)return r.allowUnauthenticatedRequests?e:c;let u=c.username;return e.user={sub:u,data:c.data},e},"BasicAuthInboundPolicy");Ea.BasicAuthInboundPolicy=FR});var eb=g(wa=>{"use strict";Object.defineProperty(wa,"__esModule",{value:!0});wa.CachingInboundPolicy=void 0;var qR=$t(),$R=["cdn-cache-control","cloudflare-cdn-cache-control","surrogate-control","cache-tag","expires"];async function jR(e){let t=new TextEncoder().encode(e),r=await crypto.subtle.digest("SHA-256",t);return Array.from(new Uint8Array(r)).map(o=>o.toString(16).padStart(2,"0")).join("")}s(jR,"digestMessage");var VR=s(async(e,t)=>{let r=[...t.dangerouslyIgnoreAuthorizationHeader===!0?[]:["authorization"],...t.headers??[]],n=[];for(let[d,p]of e.headers.entries())r.includes(d)&&n.push({key:d.toLowerCase(),value:p});n.sort((d,p)=>d.key.localeCompare(p.key));let i=await jR(JSON.stringify(n)),o=new URL(e.url),a=new URLSearchParams(o.searchParams);a.set("_z-hdr-dgst",i);let c=t.cacheHttpMethods?.includes(e.method.toUpperCase())&&e.method.toUpperCase()!=="GET";c&&a.set("_z-original-method",e.method);let u=`${o.origin}${o.pathname}?${a}`;return new Request(u,{method:c?"GET":e.method})},"createCacheKeyRequest");async function GR(e,t,r,n){let i=await(0,qR.getPolicyCacheName)(n,r),o=await caches.open(i),a=r?.cacheHttpMethods?.map(l=>l.toUpperCase())??["GET"],c=await VR(e,r),u=await o.match(c);return u||(t.addEventListener("responseSent",l=>{try{let d=r.statusCodes??[200,206,301,302,303,404,410],p=l.response.clone();if(!d.includes(p.status)||!a.includes(e.method.toUpperCase()))return;let f=r?.expirationSecondsTtl??60,h=new Response(p.body,p);$R.forEach(y=>h.headers.delete(y)),h.headers.set("cache-control",`s-maxage=${f}`),t.waitUntil(o.put(c,h))}catch(d){t.log.error(`Error in caching-inbound-policy '${n}': "${d.message}"`,d)}}),e)}s(GR,"CachingInboundPolicy");wa.CachingInboundPolicy=GR});var tb=g(va=>{"use strict";Object.defineProperty(va,"__esModule",{value:!0});va.ChangeMethodInboundPolicy=void 0;var BR=L(),KR=He(),JR=s(async(e,t,r,n)=>{if(!r.method)throw new BR.ConfigurationError(`ChangeMethodInboundPolicy '${n}' options.method must be valid HttpMethod`);return new KR.ZuploRequest(e,{method:r.method})},"ChangeMethodInboundPolicy");va.ChangeMethodInboundPolicy=JR});var rb=g(Ta=>{"use strict";Object.defineProperty(Ta,"__esModule",{value:!0});Ta.ClearHeadersInboundPolicy=void 0;var zR=He(),WR=s(async(e,t,r)=>{let n=[...r.exclude??[]],i=new Headers;return n.forEach(a=>{let c=e.headers.get(a);c&&i.set(a,c)}),new zR.ZuploRequest(e,{headers:i})},"ClearHeadersInboundPolicy");Ta.ClearHeadersInboundPolicy=WR});var nb=g(Sa=>{"use strict";Object.defineProperty(Sa,"__esModule",{value:!0});Sa.ClearHeadersOutboundPolicy=void 0;var QR=s(async(e,t,r,n)=>{let i=[...n.exclude??[]],o=new Headers;return i.forEach(c=>{let u=e.headers.get(c);u&&o.set(c,u)}),new Response(e.body,{headers:o,status:e.status,statusText:e.statusText})},"ClearHeadersOutboundPolicy");Sa.ClearHeadersOutboundPolicy=QR});var ib=g(Ia=>{"use strict";Object.defineProperty(Ia,"__esModule",{value:!0});Ia.ClerkJwtInboundPolicy=void 0;var YR=jt(),ZR=s(async(e,t,r,n)=>{let i=new URL(r.frontendApiUrl.startsWith("https://")||r.frontendApiUrl.startsWith("http://")?r.frontendApiUrl:`https://${r.frontendApiUrl}`),o=new URL(i);return o.pathname="/.well-known/jwks.json",(0,YR.OpenIdJwtInboundPolicy)(e,t,{issuer:i.href.slice(0,-1),jwkUrl:o.toString(),allowUnauthenticatedRequests:r.allowUnauthenticatedRequests},n)},"ClerkJwtInboundPolicy");Ia.ClerkJwtInboundPolicy=ZR});var sb=g(Pa=>{"use strict";Object.defineProperty(Pa,"__esModule",{value:!0});Pa.CognitoJwtInboundPolicy=void 0;var ob=L(),XR=jt(),e0=s(async(e,t,r,n)=>{if(!r.userPoolId)throw new ob.ConfigurationError("userPoolId must be set in the options for CognitoJwtInboundPolicy");if(!r.region)throw new ob.ConfigurationError("region must be set in the options for CognitoJwtInboundPolicy");return(0,XR.OpenIdJwtInboundPolicy)(e,t,{issuer:`https://cognito-idp.${r.region}.amazonaws.com/${r.userPoolId}`,jwkUrl:`https://cognito-idp.${r.region}.amazonaws.com/${r.userPoolId}/.well-known/jwks.json`,allowUnauthenticatedRequests:r.allowUnauthenticatedRequests},n)},"CognitoJwtInboundPolicy");Pa.CognitoJwtInboundPolicy=e0});var cb=g(Aa=>{"use strict";Object.defineProperty(Aa,"__esModule",{value:!0});Aa.CompositeInboundPolicy=void 0;var t0=L(),r0=mn(),ab=zr(),n0=s(async(e,t,r,n)=>{if(!r.policies||r.policies.length===0)throw new t0.ConfigurationError(`CompositeInboundPolicy '${n}' must have valid policies defined`);let i=r0.Gateway.instance,o=(0,ab.getInboundPolicyHandlerAndOptions)(r.policies,i?.routeData.policies);return(0,ab.toStackedInboundHandler)(o)(e,t)},"CompositeInboundPolicy");Aa.CompositeInboundPolicy=n0});var lb=g(Ra=>{"use strict";Object.defineProperty(Ra,"__esModule",{value:!0});Ra.CreditsMeteringInboundPolicy=void 0;var Ai=se(),ub=Y(),i0=s(async(e,t,r)=>{let n=e.user;if(!n)return Ai.HttpProblems.unauthorized(e,t,{title:"Unable to check subscription for anonymous user",detail:"No user data on request"});let{sub:i}=n;if(!r.bucketId)return Ai.HttpProblems.unauthorized(e,t,{title:"Metering bucket not configured",detail:"Specify one using the bucketId option on the policy"});let o=r.bucketId,a=await o0(o,i,t);if(!a)return Ai.HttpProblems.unauthorized(e,t,{title:"No valid, active subscription found"});if(!a.quotas)return Ai.HttpProblems.forbidden(e,t,{title:"Insufficient credits"});for(let c of Object.keys(a.quotas))if(a.quotas[c]<=0)return Ai.HttpProblems.forbidden(e,t,{title:"Insufficient credits"});return t.custom.subscription=a,t.addResponseSendingFinalHook(async()=>{let c=t.custom.meters,u={};for(let l of Object.keys(c))u[l]=c[l];await s0(o,a.id,u,t)}),e},"CreditsMeteringInboundPolicy");Ra.CreditsMeteringInboundPolicy=i0;async function o0(e,t,r){let{authApiJWT:n,meteringServiceUrl:i}=ub.Environment.instance,o=new URL(`${i}/internal/v1/metering/${e}/subscriptions`);o.search=new URLSearchParams({customerRef:t,status:"active"}).toString();let a=await fetch(o,{method:"GET",headers:{Authorization:`Bearer ${n}`}});if(!a.ok)throw new Error(`Error retrieving subscriptions for credits metering ': ${a.status} - ${await a.text()}`);let c=await a.json();if(c.data.length!==0)return c.data.length>1&&r.log.warn(`Found more than one active subscription for customer ${t} -- using the first one.`),c.data[0]}s(o0,"getSubscription");async function s0(e,t,r,n){let{authApiJWT:i,meteringServiceUrl:o}=ub.Environment.instance,a=new URL(`${o}/internal/v1/metering/${e}/subscriptions/${t}/quotas/consume`),c=await fetch(a,{method:"POST",body:JSON.stringify({meters:r}),headers:{Authorization:`Bearer ${i}`}});c.ok||n.log.error(`Error consuming subscription quotas for credits metering ': ${c.status} - ${await c.text()}`)}s(s0,"consumeSubscription")});var db=g(xa=>{"use strict";Object.defineProperty(xa,"__esModule",{value:!0});xa.CurityPhantomTokenInboundPolicy=void 0;var a0=$t(),c0=Jt(),Oa=se(),u0=s(async(e,t,r,n)=>{let i=e.headers.get("Authorization");if(!i)return Oa.HttpProblems.unauthorized(e,t,{detail:"No authorization header"});let o=l0(i);if(!o)return Oa.HttpProblems.unauthorized(e,t,{detail:"Failed to parse token from Authorization header"});let a=await(0,a0.getPolicyCacheName)(n,r),c=new c0.MemoryZoneReadThroughCache(a,t),u=await c.get(o);if(!u){let l=await fetch(r.introspectionUrl,{headers:{Authorization:"Basic "+btoa(`${r.clientId}:${r.clientSecret}`),Accept:"application/jwt","Content-Type":"application/x-www-form-urlencoded"},method:"POST",body:"token="+o+"&token_type_hint=access_token"}),d=await l.text();if(l.status===200)u=d,c.put(o,u,r.cacheDurationSeconds??600);else return l.status>=500?(t.log.error(`Error introspecting token - ${l.status}: '${d}'`),Oa.HttpProblems.internalServerError(e,t,{detail:"Problem encountered authorizing the HTTP request"})):Oa.HttpProblems.unauthorized(e,t)}return e.headers.set("Authorization",`Bearer ${u}`),e},"CurityPhantomTokenInboundPolicy");xa.CurityPhantomTokenInboundPolicy=u0;function l0(e){return e.split(" ")[0]==="Bearer"?e.split(" ")[1]:null}s(l0,"getToken")});var pb=g(Na=>{"use strict";Object.defineProperty(Na,"__esModule",{value:!0});Na.FirebaseJwtInboundPolicy=void 0;var d0=qt(),p0=jt(),h0=s(async(e,t,r,n)=>((0,d0.optionValidator)(r,n).required("projectId","string").optional("allowUnauthenticatedRequests","boolean"),(0,p0.OpenIdJwtInboundPolicy)(e,t,{issuer:`https://securetoken.google.com/${r.projectId}`,audience:r.projectId,jwkUrl:"https://www.googleapis.com/service_accounts/v1/jwk/securetoken@system.gserviceaccount.com",allowUnauthenticatedRequests:r.allowUnauthenticatedRequests},n)),"FirebaseJwtInboundPolicy");Na.FirebaseJwtInboundPolicy=h0});var hb=g(Ca=>{"use strict";Object.defineProperty(Ca,"__esModule",{value:!0});Ca.FormDataToJsonInboundPolicy=void 0;var f0=He(),m0=s(async(e,t,r)=>{let n="application/x-www-form-urlencoded",i="multipart/form-data",o=e.headers.get("content-type")?.toLowerCase();if(!o||![i,n].includes(o))return r&&r.badRequestIfNotFormData?new Response(`Bad Request - expected content-type '${n}' or ${i}`,{status:400,statusText:"Bad Request"}):e;let a=await e.formData();if(r&&r.optionalHoneypotName&&a.get(r.optionalHoneypotName)!=="")return new Response("Bad Request",{status:400,statusText:"Bad Request"});let c={};for(let[d,p]of a)c[d]=p.toString();let u=new Headers(e.headers);return u.set("content-type","application/json"),u.delete("content-length"),new f0.ZuploRequest(e,{body:JSON.stringify(c),headers:u})},"FormDataToJsonInboundPolicy");Ca.FormDataToJsonInboundPolicy=m0});var fb=g(La=>{"use strict";Object.defineProperty(La,"__esModule",{value:!0});La.GeoFilterInboundPolicy=void 0;var y0=L(),g0=se(),Cn="__unknown__",b0=s(async(e,t,r,n)=>{let i={allow:{countries:Dn(r.allow?.countries,"allow.countries",n),regionCodes:Dn(r.allow?.regionCodes,"allow.regionCode",n),asns:Dn(r.allow?.asns,"allow.asOrganization",n)},block:{countries:Dn(r.block?.countries,"block.countries",n),regionCodes:Dn(r.block?.regionCodes,"block.regionCode",n),asns:Dn(r.block?.asns,"block.asOrganization",n)},ignoreUnknown:r.ignoreUnknown!==!1},o=t.incomingRequestProperties.country?.toLowerCase()??Cn,a=t.incomingRequestProperties.regionCode?.toLowerCase()??Cn,c=t.incomingRequestProperties.asn?.toString()??Cn,u=i.ignoreUnknown&&o===Cn,l=i.ignoreUnknown&&a===Cn,d=i.ignoreUnknown&&c===Cn,p=i.allow.countries,f=i.allow.regionCodes,h=i.allow.asns;if(p.length>0&&!p.includes(o)&&!u||f.length>0&&!f.includes(a)&&!l||h.length>0&&!h.includes(c)&&!d)return Ln(e,t,n,o,a,c);let y=i.block.countries,v=i.block.regionCodes,T=i.block.asns;return y.length>0&&y.includes(o)&&!u||v.length>0&&v.includes(a)&&!l||T.length>0&&T.includes(c)&&!d?Ln(e,t,n,o,a,c):e},"GeoFilterInboundPolicy");La.GeoFilterInboundPolicy=b0;function Ln(e,t,r,n,i,o){return t.log.debug(`Request blocked by GeoFilterInboundPolicy '${r}' (country: '${n}', regionCode: '${i}', asn: '${o}')`),g0.HttpProblems.forbidden(e,t,{geographicContext:{country:n,regionCode:i,asn:o}})}s(Ln,"blockedResponse");function Dn(e,t,r){if(typeof e=="string")return e.split(",").map(n=>n.trim().toLowerCase());if(typeof e>"u")return[];if(Array.isArray(e))return e.map(n=>n.trim().toLowerCase());throw new y0.ConfigurationError(`Invalid '${t}' for GeoFilterInboundPolicy '${r}': '${e}', must be a string or string[]`)}s(Dn,"toLowerStringArray")});var mb=g(Da=>{"use strict";Object.defineProperty(Da,"__esModule",{value:!0});Da.JWTScopeValidationInboundPolicy=void 0;var _0=s(async(e,t,r)=>{let n=e.user?.data.scope.split(" ")||[];if(!s((o,a)=>a.every(c=>o.includes(c)),"scopeChecker")(n,r.scopes)){let o={code:"UNAUTHORIZED",help_url:"https://zup.fail/UNAUTHORIZED",message:`JWT must have all the following scopes: ${r.scopes}`};return new Response(JSON.stringify(o),{status:401,statusText:"Unauthorized",headers:{"content-type":"application/json"}})}return e},"JWTScopeValidationInboundPolicy");Da.JWTScopeValidationInboundPolicy=_0});var gb=g(Ua=>{"use strict";Object.defineProperty(Ua,"__esModule",{value:!0});Ua.MockApiInboundPolicy=void 0;var E0=se(),w0=s(async(e,t,r,n)=>{let i=t.route.raw().responses;if(!i)return bp(n,e,t,"No responses defined in the OpenAPI document. Add some responses with examples to use this policy.");let o=Object.keys(i),a=[];if(o.length===0)return bp(n,e,t,"No response object defined under responses in the OpenAPI document. Add some response objects with examples to use this policy.");if(o.forEach(c=>{i[c].content&&Object.keys(i[c].content).forEach(l=>{let d=i[c].content[l].examples;d&&Object.keys(d).forEach(f=>{a.push({responseName:c,contentName:l,exampleName:f,exampleValue:d[f]})})})}),a=a.filter(c=>!(r.responsePrefixFilter&&!c.responseName.startsWith(r.responsePrefixFilter)||r.contentType&&c.contentName!==r.contentType||r.exampleName&&c.exampleName!==r.exampleName)),r.random&&a.length>1){let c=Math.floor(Math.random()*a.length);return yb(a[c])}else return a.length>0?yb(a[0]):bp(n,e,t,"No examples matching the mocking options found in the OpenAPI document. Add examples to the OpenAPI document matching the options for this policy or change the mocking options to match the examples in the OpenAPI document.")},"MockApiInboundPolicy");Ua.MockApiInboundPolicy=w0;function yb(e){let t=JSON.stringify(e.exampleValue,null,2),r=new Headers;switch(r.set("Content-Type",e.contentName),e.responseName){case"1XX":return new Response(t,{status:100,headers:r});case"2XX":return new Response(t,{status:200,headers:r});case"3XX":return new Response(t,{status:300,headers:r});case"4XX":return new Response(t,{status:400,headers:r});case"5XX":case"default":return new Response(t,{status:500,headers:r});default:return new Response(t,{status:Number(e.responseName),headers:r})}}s(yb,"generateResponse");var bp=s((e,t,r,n)=>{let i=`Error in policy: ${e} - On route ${t.method} ${r.route.path}. ${n}`;return E0.HttpProblems.internalServerError(t,r,{detail:i})},"getProblemDetailResponse")});var vb=g(Un=>{"use strict";Object.defineProperty(Un,"__esModule",{value:!0});Un.MoesifInboundPolicy=Un.setMoesifContext=void 0;var v0=L(),T0=ve(),S0="Incoming",I0={logRequestBody:!0,logResponseBody:!0};function bb(e){let t={};return e.forEach((r,n)=>{t[n]=r}),t}s(bb,"headersToObject");function _b(){return new Date().toISOString()}s(_b,"timestamp");var _p=new WeakMap,P0={};function A0(e,t){let r=_p.get(e);r||(r=P0);let n=Object.assign({...r},t);_p.set(e,n)}s(A0,"setMoesifContext");Un.setMoesifContext=A0;async function Eb(e,t){let r=e.headers.get("content-type");if(r&&r.indexOf("json")!==0)try{return await e.clone().json()}catch(i){t.log.error(i)}let n=await e.clone().text();return t.log.debug({textBody:n}),n}s(Eb,"readBody");var R0={},Ep;function wb(){if(!Ep)throw new v0.RuntimeError("Invalid State - no _lastLogger");return Ep}s(wb,"getLastLogger");function O0(e){let t=R0[e];return t||(t=new T0.BatchDispatch("moesif-inbound",100,async r=>{let n=JSON.stringify(r);wb().debug("posting",n);let i=await fetch("https://api.moesif.net/v1/events/batch",{method:"POST",headers:{"content-type":"application/json","X-Moesif-Application-Id":e},body:n});i.ok||wb().error({status:i.status,body:await i.text()})})),t}s(O0,"getDispatcher");async function x0(e,t,r,n){Ep=t.log;let i=_b(),o=Object.assign(I0,r);if(!o.applicationId)throw new Error(`Invalid configuration for MoesifInboundPolicy '${n}' - applicationId is required`);let a=o.logRequestBody?await Eb(e,t):void 0;return t.addResponseSendingFinalHook(async(c,u)=>{let l=O0(o.applicationId),d=e.headers.get("true-client-ip"),p=_p.get(t)??{},f={time:i,uri:e.url,verb:e.method,body:a,ip_address:d??void 0,api_version:p.apiVersion,headers:bb(e.headers)},h=o.logResponseBody?await Eb(c,t):void 0,y={time:_b(),status:c.status,headers:bb(c.headers),body:h},v={request:f,response:y,user_id:p.userId??u.user?.sub,session_token:p.sessionToken,company_id:p.companyId,metadata:p.metadata,direction:S0};l.enqueue(v),t.waitUntil(l.waitUntilFlushed())}),e}s(x0,"MoesifInboundPolicy");Un.MoesifInboundPolicy=x0});var Tb=g(ka=>{"use strict";Object.defineProperty(ka,"__esModule",{value:!0});ka.OktaJwtInboundPolicy=void 0;var N0=jt(),C0=s(async(e,t,r,n)=>(0,N0.OpenIdJwtInboundPolicy)(e,t,{issuer:r.issuerUrl,audience:r.audience,jwkUrl:`${r.issuerUrl}/v1/keys`,allowUnauthenticatedRequests:r.allowUnauthenticatedRequests},n),"OktaJwtInboundPolicy");ka.OktaJwtInboundPolicy=C0});var Sb=g(Ma=>{"use strict";Object.defineProperty(Ma,"__esModule",{value:!0});Ma.PropelAuthJwtInboundPolicy=void 0;var L0=(vs(),Xi(ws)),D0=jt(),wp,U0=s(async(e,t,r,n)=>{if(!wp)try{wp=await(0,L0.importSPKI)(r.verifierKey,"RS256")}catch(i){throw t.log.error("Could not import verifier key"),i}return(0,D0.OpenIdJwtInboundPolicy)(e,t,{issuer:r.authUrl,secret:wp,allowUnauthenticatedRequests:r.allowUnauthenticatedRequests,subPropertyName:"user_id"},n)},"PropelAuthJwtInboundPolicy");Ma.PropelAuthJwtInboundPolicy=U0});var Ib=g(G=>{"use strict";Object.defineProperty(G,"__esModule",{value:!0});G.throwIfStateNotObject=G.throwIfStateNotNumber=G.throwIfStateNotString=G.throwIfStateUndefinedOrNull=G.throwIfStateUndefined=G.throwIfOptionNotObject=G.throwIfOptionNotNumber=G.throwIfOptionNotString=G.throwIfOptionUndefinedOrNull=G.throwIfOptionUndefined=G.OptionTypeError=G.OptionUndefinedError=G.throwIfNotNumber=G.throwIfNotString=G.throwIfUndefinedOrNull=G.throwIfUndefined=G.ArgumentTypeError=G.ArgumentUndefinedError=G.ValidationError=void 0;var je=Dt(),et=class extends Error{static{s(this,"ValidationError")}constructor(t){super(t)}};G.ValidationError=et;var Ri=class extends et{static{s(this,"ArgumentUndefinedError")}constructor(t){super(`The argument '${t}' is undefined.`)}};G.ArgumentUndefinedError=Ri;var Oi=class extends et{static{s(this,"ArgumentTypeError")}constructor(t,r){super(`The argument '${t}' must be of type '${r}'.`)}};G.ArgumentTypeError=Oi;function k0(e,t){if((0,je.isUndefined)(e))throw new Ri(t)}s(k0,"throwIfUndefined");G.throwIfUndefined=k0;function vp(e,t){if((0,je.isUndefinedOrNull)(e))throw new Ri(t)}s(vp,"throwIfUndefinedOrNull");G.throwIfUndefinedOrNull=vp;function M0(e,t){if(vp(e,t),!(0,je.isString)(e))throw new Oi(t,"string")}s(M0,"throwIfNotString");G.throwIfNotString=M0;function H0(e,t){if(vp(e,t),!(0,je.isNumber)(e))throw new Oi(t,"number")}s(H0,"throwIfNotNumber");G.throwIfNotNumber=H0;var xi=class extends et{static{s(this,"OptionUndefinedError")}constructor(t,r,n){super(`The option '${n}' on the ${t} named '${r}' is undefined.`)}};G.OptionUndefinedError=xi;var kn=class extends et{static{s(this,"OptionTypeError")}constructor(t,r,n,i){super(`The option '${n}' on the ${t} named '${r}' must be of type '${i}'.`)}};G.OptionTypeError=kn;function F0(e,t,r,n){if((0,je.isUndefined)(n))throw new xi(e,t,r)}s(F0,"throwIfOptionUndefined");G.throwIfOptionUndefined=F0;function Ha(e,t,r,n){if((0,je.isUndefinedOrNull)(n))throw new xi(e,t,r)}s(Ha,"throwIfOptionUndefinedOrNull");G.throwIfOptionUndefinedOrNull=Ha;function q0(e,t,r,n){if(Ha(e,t,r,n),!(0,je.isString)(n))throw new kn(e,t,r,"string")}s(q0,"throwIfOptionNotString");G.throwIfOptionNotString=q0;function $0(e,t,r,n){if(Ha(e,t,r,n),!(0,je.isNumber)(n))throw new kn(e,t,r,"number")}s($0,"throwIfOptionNotNumber");G.throwIfOptionNotNumber=$0;function j0(e,t,r,n){if(Ha(e,t,r,n),!(0,je.isObject)(n))throw new kn(e,t,r,"object")}s(j0,"throwIfOptionNotObject");G.throwIfOptionNotObject=j0;function V0(e,t){if((0,je.isUndefined)(e))throw new et(t)}s(V0,"throwIfStateUndefined");G.throwIfStateUndefined=V0;function Fa(e,t){if((0,je.isUndefinedOrNull)(e))throw new et(t)}s(Fa,"throwIfStateUndefinedOrNull");G.throwIfStateUndefinedOrNull=Fa;function G0(e,t){if(Fa(e,t),!(0,je.isString)(e))throw new et(t);return!0}s(G0,"throwIfStateNotString");G.throwIfStateNotString=G0;function B0(e,t){if(Fa(e,t),!(0,je.isNumber)(e))throw new et(t);return!0}s(B0,"throwIfStateNotNumber");G.throwIfStateNotNumber=B0;function K0(e,t){if(Fa(e,t),!(0,je.isObject)(e))throw new et(t);return!0}s(K0,"throwIfStateNotObject");G.throwIfStateNotObject=K0});var Pb=g(Mn=>{"use strict";Object.defineProperty(Mn,"__esModule",{value:!0});Mn.InMemoryRedisClient=Mn.StandardRedisClient=void 0;var Tp=L(),qa=Ib(),Sp=class e{static{s(this,"StandardRedisClient")}static instance;redisClientUrl;clientAuthToken;userAgent;deploymentName;constructor(t,r,n,i){this.redisClientUrl=t,this.clientAuthToken=r,this.deploymentName=n,this.userAgent=i}static initialize(t,r,n,i){return(0,qa.throwIfNotString)(t,"redisClientUrl"),(0,qa.throwIfNotString)(r,"clientAuthToken"),e.instance||(e.instance=new e(t,r,n,i)),e.instance}isEnabled(){return this.redisClientUrl!==void 0&&this.clientAuthToken!==void 0}async fetch({url:t,body:r,method:n,requestId:i}){(0,qa.throwIfNotString)(t,"url");let o=await fetch(`${this.redisClientUrl}${t}`,{method:n,body:r,headers:{"content-type":"application/json",authorization:`Bearer ${this.clientAuthToken}`,"zp-rid":i,"zp-dn":this.deploymentName,"User-Agent":this.userAgent}}),a=o.headers.get("Content-Type")?.includes("application/json")?await o.json():await o.text();if(o.ok)return a;throw o.status===401?new Tp.SystemError("Redis client failed with 401: Unauthorized"):new Tp.SystemError(`Redis client failed with (${o.status}): ${typeof a=="string"?a:JSON.stringify(a,null,2)}`)}};Mn.StandardRedisClient=Sp;var Ip=class{static{s(this,"InMemoryRedisClient")}keyValueStore;constructor(){this.keyValueStore=new Map}isEnabled(){return!0}fetch({url:t,body:r,method:n}){if((0,qa.throwIfNotString)(t,"url"),n==="POST"&&t==="/rate-limit"){let{incrBy:i,expire:o,key:a}=JSON.parse(r),c=Date.now()+o*1e3,u=this.keyValueStore.get(a);u?Date.now()>u.expiresAt?this.keyValueStore.set(a,{value:i,expiresAt:c}):this.keyValueStore.set(a,{value:u.value+i,expiresAt:u.expiresAt}):this.keyValueStore.set(a,{value:i,expiresAt:c});let l=this.keyValueStore.get(a);return Promise.resolve({count:l.value,ttlSeconds:Math.round((l.expiresAt-Date.now())/1e3)})}throw new Tp.SystemError("The in-memory redis client only supports /rate-limit calls")}};Mn.InMemoryRedisClient=Ip});var Nb=g(Va=>{"use strict";Object.defineProperty(Va,"__esModule",{value:!0});Va.RateLimitInboundPolicy=void 0;var J0=Sr(),z0=$t(),W0=io(),Vt=L(),Q0=se(),Ab=Le(),Ni=Y(),Rb=Pb(),Ob=Dt(),$a=(0,J0.debug)("zuplo:policies:RateLimitInboundPolicy"),Y0="strict",Z0=s(e=>{let t=e.headers.get("cf-connecting-ip")??e.headers.get("true-client-ip");if(t)return t;let r=e.headers.get("x-forwarded-for");return r?r.split(",")[0]:"127.0.0.1"},"getRealIP"),X0=s(async e=>({key:`ip-${Z0(e)}`}),"getIP"),eO=s(async e=>({key:`user-${e.user?.sub??"anonymous"}`}),"getUser"),tO=s(async()=>({key:"all-2d77ce9d-9a3c-4206-9ab2-668cfd271095"}),"getAll"),ja;function rO(e,t){let r;if(ja)return ja;if(Ni.Environment.instance.isLocalDevelopment)return t.info("Using in-memory redis client for local development."),r=new Rb.InMemoryRedisClient,ja=r,r;let{authApiJWT:n,redisURL:i}=Ni.Environment.instance;if(!(0,Ob.isString)(i))throw new Vt.SystemError(`RateLimitInboundPolicy '${e}' - rate limit service URL not configured`);if(!(0,Ob.isString)(n))throw new Vt.SystemError(`RateLimitInboundPolicy '${e}' - service authentication not configured`);if(i&&(r=Rb.StandardRedisClient.initialize(i,n,Ni.Environment.instance.deploymentName??"unknown",Ni.Environment.instance.systemUserAgent)),!r||!r.isEnabled())throw new Vt.SystemError(`RateLimitInboundPolicy '${e}' - no redis ('${r}') or redis.isEnabled ('${r?.isEnabled}) is false`);return ja=r,r}s(rO,"getRedisClient");async function xb(e,t,r,n,i){let o=Math.floor(t*60);return await r.fetch({url:"/rate-limit",method:"POST",body:JSON.stringify({incrBy:1,expire:o,key:e}),requestId:i})}s(xb,"getCountAndUpdateExpiry");function nO(e,t){let r;if(e.rateLimitBy==="function"){if(!e.identifier)throw new Vt.ConfigurationError(`RateLimitInboundPolicy '${t}' - If rateLimitBy set to 'function' options.identifier must be specified`);if(!e.identifier.module)throw new Vt.ConfigurationError(`RateLimitInboundPolicy '${t}' - If rateLimitBy set to 'function' options.identifier.module must be specified`);if(!e.identifier.export)throw new Vt.ConfigurationError(`RateLimitInboundPolicy '${t}' - If rateLimitBy set to 'function' options.identifier.export must be specified`);if(r=e.identifier.module[e.identifier.export],!r||typeof r!="function")throw new Vt.ConfigurationError(`RateLimitInboundPolicy '${t}' - Custom rate limit function must be a valid function`)}return s(async(i,o,a)=>{let c=await r(i,o,a);if(!c.key){let u=`RateLimitInboundPolicy '${a}' - Custom rate limit function must return a valid key property '${JSON.stringify(c,null,2)}'`;throw o.log.error(u),new Vt.RuntimeError(u)}return c},"outerFunction")}s(nO,"wrapUserFunction");var iO="Retry-After",oO=s(async(e,t,r,n)=>{let i=Date.now(),o=Ab.SystemLogMap.getLogger(t),a=s((u,l)=>{if(r.throwOnFailure)throw new Vt.SystemError(u,{cause:l});o.error(u,l)},"throwOrLog"),c=s((u,l)=>{let d={};return(!u||u==="retry-after")&&(d[iO]=l.toString()),Q0.HttpProblems.tooManyRequests(e,t,void 0,d)},"rateLimited");try{let l={function:nO(r,n),user:eO,ip:X0,all:tO}[r.rateLimitBy],d=await l(e,t,n),p=d.key,f=d.requestsAllowed??r.requestsAllowed,h=d.timeWindowMinutes??r.timeWindowMinutes,y=r.headerMode??"retry-after",v=rO(n,o),S=`bucket/${Ni.Environment.instance.build.BUILD_ID}/${n}/${p}`;if((r.mode??Y0)==="async"){let C=await(0,z0.getPolicyCacheName)(n,r),re=new W0.ZoneCache(C,{logger:Ab.SystemLogMap.getLogger(t)}),ne=xb(S,h,v,o,t.requestId),me=await re.get(S);if(me!==void 0&&me<=Date.now()){$a(`RateLimitInboundPolicy '${n}' - returning 429 from cache for '${S}' (async mode)`);let Be=Math.round((me-Date.now())/1e3);return c(y,Be)}return t.addEventListener("responseSending",Be=>{try{let E=Be,H=E.mutableResponse;E.mutableResponse=(async()=>{let Ce=await ne;if(Ce.count>f){let nu=Date.now()+Ce.ttlSeconds*1e3;return re.put(S,nu,Ce.ttlSeconds).catch(fh=>{throw o.error(fh),fh}),$a(`RateLimitInboundPolicy '${n}' - returning 429 from redis for '${S}' (async mode)`),c(y,Ce.ttlSeconds)}return H})()}catch(E){o.error(`RateLimitInboundPolicy '${n}' -error in responseSending`,E)}}),e}let j=await xb(S,h,v,o,t.requestId);return j.count>f?($a(`RateLimitInboundPolicy '${n}' - returning 429 from redis for '${S}' (strict mode)`),c(y,j.ttlSeconds)):e}catch(u){return a(u.message,u),e}finally{let u=Date.now()-i;$a(`RateLimitInboundPolicy '${n}' - latency ${u}ms`)}},"RateLimitInboundPolicy");Va.RateLimitInboundPolicy=oO});var Ub=g(Ga=>{"use strict";Object.defineProperty(Ga,"__esModule",{value:!0});Ga.ReadmeMetricsInboundPolicy=void 0;var sO=ve(),Pp=Y(),Cb=ni(),Ap;function Lb(e){let t=[];for(let[r,n]of e)t.push({name:r,value:n});return t}s(Lb,"headersToNameValuePairs");function aO(e){let t=[];return Object.entries(e).forEach(([r,n])=>{t.push({name:r,value:n})}),t}s(aO,"queryToNameValueParis");function cO(e){if(e===null)return;let t=parseFloat(e);if(!isNaN(t))return t}s(cO,"parseIntOrUndefined");var Db={};async function uO(e,t,r,n){let i=new Date,o=Date.now();return Ap||(Ap={name:"zuplo",version:Pp.Environment.instance.build.ZUPLO_VERSION,comment:`zuplo/${Pp.Environment.instance.build.ZUPLO_VERSION}`}),t.addResponseSendingFinalHook(async a=>{try{let c=r.userLabelPropertyPath&&e.user?(0,Cb.getValueFromRequestUser)(e.user,r.userLabelPropertyPath,"userLabelPropertyPath"):e.user?.sub,u=r.userEmailPropertyPath&&e.user?(0,Cb.getValueFromRequestUser)(e.user,r.userEmailPropertyPath,"userEmailPropertyPath"):void 0,l={clientIPAddress:e.headers.get("true-client-ip")??"",development:r.development!==void 0?r.development:Pp.Environment.instance.isDeno,group:{label:c,email:u,id:e.user?.sub??"anonymous"},request:{log:{creator:Ap,entries:[{startedDateTime:i.toISOString(),time:Date.now()-o,request:{method:e.method,url:r.useFullRequestPath?new URL(e.url).pathname:t.route.path,httpVersion:"2",headers:Lb(e.headers),queryString:aO(e.query)},response:{status:a.status,statusText:a.statusText,headers:Lb(a.headers),content:{size:cO(e.headers.get("content-length"))}}}]}}},d=Db[r.apiKey];if(!d){let p=r.apiKey;d=new sO.BatchDispatch("readme-metering-inbound-policy",10,async f=>{try{let h=r.url??"https://metrics.readme.io/request",y=await fetch(h,{method:"POST",body:JSON.stringify(f),headers:{"content-type":"application/json",authorization:`Basic ${btoa(p+":")}`}});y.status!==202&&t.log.error(`Unexpected response in ReadmeMeteringInboundPolicy '${n}'. ${y.status}: '${await y.text()}'`)}catch(h){throw t.log.error(`Error in ReadmeMeteringInboundPolicy '${n}': '${h.message}'`),h}}),Db[p]=d}d.enqueue(l),t.waitUntil(d.waitUntilFlushed())}catch(c){t.log.error(c)}}),e}s(uO,"ReadmeMetricsInboundPolicy");Ga.ReadmeMetricsInboundPolicy=uO});var kb=g(Ba=>{"use strict";Object.defineProperty(Ba,"__esModule",{value:!0});Ba.RemoveHeadersInboundPolicy=void 0;var lO=L(),dO=He(),pO=s(async(e,t,r,n)=>{let i=r?.headers;if(!i||!Array.isArray(i)||i.length===0)throw new lO.ConfigurationError(`RemoveHeadersInboundPolicy '${n}' options.headers must be a non-empty string array of header names`);let o=new Headers(e.headers);return i.forEach(c=>{o.delete(c)}),new dO.ZuploRequest(e,{headers:o})},"RemoveHeadersInboundPolicy");Ba.RemoveHeadersInboundPolicy=pO});var Mb=g(Ka=>{"use strict";Object.defineProperty(Ka,"__esModule",{value:!0});Ka.RemoveHeadersOutboundPolicy=void 0;var hO=L(),fO=s(async(e,t,r,n,i)=>{let o=n?.headers;if(!o||!Array.isArray(o)||o.length===0)throw new hO.ConfigurationError(`RemoveHeadersOutboundPolicy '${i}' options.headers must be a non-empty string array of header names`);let a=new Headers(e.headers);return o.forEach(u=>{a.delete(u)}),new Response(e.body,{headers:a,status:e.status,statusText:e.statusText})},"RemoveHeadersOutboundPolicy");Ka.RemoveHeadersOutboundPolicy=fO});var Hb=g(Ja=>{"use strict";Object.defineProperty(Ja,"__esModule",{value:!0});Ja.RemoveQueryParamsInboundPolicy=void 0;var mO=L(),yO=He(),gO=s(async(e,t,r,n)=>{let i=r.params;if(!i||!Array.isArray(i)||i.length===0)throw new mO.ConfigurationError(`RemoveQueryParamsInboundPolicy '${n}' options.params must be a non-empty string array of header names`);let o=new URL(e.url);return i.forEach(c=>{o.searchParams.delete(c)}),new yO.ZuploRequest(o.toString(),e)},"RemoveQueryParamsInboundPolicy");Ja.RemoveQueryParamsInboundPolicy=gO});var Fb=g(za=>{"use strict";Object.defineProperty(za,"__esModule",{value:!0});za.ReplaceStringOutboundPolicy=void 0;var bO=s(async(e,t,r,n)=>{let i=await e.text(),o=n.mode==="regexp"?new RegExp(n.match,"gm"):n.match,a=i.replaceAll(o,n.replaceWith);return new Response(a,{headers:e.headers,status:e.status,statusText:e.statusText})},"ReplaceStringOutboundPolicy");za.ReplaceStringOutboundPolicy=bO});var $b=g(Wa=>{"use strict";Object.defineProperty(Wa,"__esModule",{value:!0});Wa.RequestSizeLimitInboundPolicy=void 0;var qb=s(()=>new Response("Maximum request size exceeded",{status:413,statusText:"Payload Too Large"}),"payloadTooLarge"),_O=s(async(e,t,r)=>{let n=r.trustContentLengthHeader??!1;if(["GET","HEAD"].includes(e.method))return e;let i=e.headers.get("content-length"),o=i!==null?parseInt(i):void 0;return o&&!isNaN(o)&&o>r.maxSizeInBytes?qb():o&&n?e:(await e.clone().text()).length>r.maxSizeInBytes?qb():e},"RequestSizeLimitInboundPolicy");Wa.RequestSizeLimitInboundPolicy=_O});var Qa=g(tt=>{"use strict";Object.defineProperty(tt,"__esModule",{value:!0});tt.sanitizedIdentifierName=tt.getIdForRefSchema=tt.getIdForRequestBodySchema=tt.getIdForParameterSchema=tt.getRawOperationDataIdentifierName=void 0;function EO(e,t,r){return`_${Mr(e+"_"+t+"_"+r)}`}s(EO,"getRawOperationDataIdentifierName");tt.getRawOperationDataIdentifierName=EO;function wO(e,t,r,n){return`_${Mr(e.toLowerCase())}_`+t.toLowerCase()+"_"+r.toLowerCase()+`_${n.toLowerCase()}`}s(wO,"getIdForParameterSchema");tt.getIdForParameterSchema=wO;function vO(e,t,r){return`_${Mr(e.toLowerCase())}_`+t.toLowerCase()+`_rb_${Mr(r.toLowerCase())}`}s(vO,"getIdForRequestBodySchema");tt.getIdForRequestBodySchema=vO;function TO(e,t){return`_${Mr(e)}__${Mr(t)}`}s(TO,"getIdForRefSchema");tt.getIdForRefSchema=TO;function Mr(e){let t=[];for(let r=0;r<e.length;r++){let n=e.charCodeAt(r);n>="0".charCodeAt(0)&&n<="9".charCodeAt(0)||n>="A".charCodeAt(0)&&n<="Z".charCodeAt(0)||n>="a".charCodeAt(0)&&n<="z".charCodeAt(0)?t.push(e.charAt(r)):t.push("_")}return t.join("")}s(Mr,"sanitizedIdentifierName");tt.sanitizedIdentifierName=Mr});var Ci=g(De=>{"use strict";Object.defineProperty(De,"__esModule",{value:!0});De.getErrorsFromValidator=De.shouldReject=De.shouldLog=De.logErrors=De.validateParameters=De.getParametersForOperation=void 0;var SO=mn(),IO=Qa(),PO=s(e=>{let t=e.route.raw();return t.parameters?t.parameters.map(n=>({name:n.name,location:n.in,required:n.required,deprecated:n.deprecated,allowEmptyValue:n.allowEmptyValue})):[]},"getParametersForOperation");De.getParametersForOperation=PO;var AO=s((e,t,r,n,i)=>{let o=[],a=!0,c=[];return e.forEach(u=>{if(u.required&&!t[u.name])a=!1,o.push(`Required ${i} parameter '${u.name}' not found`);else{let l=(0,IO.getIdForParameterSchema)(r,n,i,u.name),d=SO.Gateway.instance.schemaValidator[l],p=d(t[u.name]),f=(0,De.getErrorsFromValidator)(d.errors);p||(a=!1,c.push(`${i} parameter: ${u.name} : ${t[u.name]}`),o.push(`Invalid value for ${i} parameter: '${u.name}' ${f.join(", ")}`))}}),{isValid:a,invalidValues:c,errors:o}},"validateParameters");De.validateParameters=AO;var RO=s((e,t,r,n,i)=>{n?e.log[t](r,n,i):e.log[t](r,i)},"logErrors");De.logErrors=RO;var OO=s(e=>e==="log-only"||e==="reject-and-log","shouldLog");De.shouldLog=OO;var xO=s(e=>e==="reject-only"||e==="reject-and-log","shouldReject");De.shouldReject=xO;var NO=s(e=>e?.map(t=>t.instancePath===void 0||t.instancePath===""?t.message??"Unknown validation error":t.instancePath.replace("/","")+" "+t.message)??["Unknown validation error"],"getErrorsFromValidator");De.getErrorsFromValidator=NO});var jb=g(Za=>{"use strict";Object.defineProperty(Za,"__esModule",{value:!0});Za.handleBodyValidation=void 0;var CO=mn(),Ya=se(),LO=Qa(),Je=Ci();async function DO(e,t,r){if(!r.validateBody||r.validateBody==="none")return;let n;try{n=await t.clone().json()}catch(h){let y=`Error in request body for method : ${t.method} in route: ${e.route.path} with content-type: ${t.headers.get("Content-Type")}`,v=Ya.HttpProblems.badRequest(t,e,{detail:`${y}, see errors property for more details`,errors:`${h}`});if((0,Je.shouldLog)(r.validateBody)&&(0,Je.logErrors)(e,r.logLevel??"info",y,[n],h),(0,Je.shouldReject)(r.validateBody))return v}if(!t.headers.get("Content-Type")){let h=`No content-type header defined in incoming request to ${t.method} in route: ${e.route.path}`,y=Ya.HttpProblems.badRequest(t,e,{detail:h});return(0,Je.shouldLog)(r.validateBody)&&(0,Je.logErrors)(e,r.logLevel??"info",h,[n],[h]),(0,Je.shouldReject)(r.validateBody)?y:void 0}let i=t.headers.get("Content-Type"),o=i.indexOf(";");o>-1&&(i=i.substring(0,o));let a=(0,LO.getIdForRequestBodySchema)(e.route.path,t.method,i),c=CO.Gateway.instance.schemaValidator[a];if(!c){let h=`No schema defined for method: ${t.method} in route: ${e.route.path} with content-type: ${t.headers.get("Content-Type")}`,y=Ya.HttpProblems.badRequest(t,e,{detail:h});return(0,Je.shouldLog)(r.validateBody)&&(0,Je.logErrors)(e,r.logLevel??"info",h,[n],[h]),(0,Je.shouldReject)(r.validateBody)?y:void 0}if(c(n))return;let l=c.errors,d="Request body did not pass validation",p=(0,Je.getErrorsFromValidator)(l),f=Ya.HttpProblems.badRequest(t,e,{detail:`${d}, see errors property for more details`,errors:p});if((0,Je.shouldLog)(r.validateBody)&&(0,Je.logErrors)(e,r.logLevel??"info",d,[n],p),(0,Je.shouldReject)(r.validateBody))return f}s(DO,"handleBodyValidation");Za.handleBodyValidation=DO});var Vb=g(Xa=>{"use strict";Object.defineProperty(Xa,"__esModule",{value:!0});Xa.handleHeadersValidation=void 0;var UO=se(),Li=Ci();function kO(e,t,r){if(!r.validateHeaders||r.validateHeaders==="none")return;let n={};t.headers.forEach((a,c)=>{n[c]=a});let i=(0,Li.getParametersForOperation)(e),o=(0,Li.validateParameters)(i.filter(a=>a.location==="header"),n,e.route.path,t.method.toLowerCase(),"header");if(!o.isValid){let a="Header validation failed",c=UO.HttpProblems.badRequest(t,e,{detail:`${a}, see errors property for more details`,errors:o.errors});if((0,Li.shouldLog)(r.validateHeaders)&&(0,Li.logErrors)(e,r.logLevel??"info",a,o.invalidValues,o.errors),(0,Li.shouldReject)(r.validateHeaders))return c}}s(kO,"handleHeadersValidation");Xa.handleHeadersValidation=kO});var Gb=g(ec=>{"use strict";Object.defineProperty(ec,"__esModule",{value:!0});ec.handlePathParameterValidation=void 0;var MO=se(),Di=Ci();function HO(e,t,r){if(!r.validatePathParameters||r.validatePathParameters==="none")return;let n=(0,Di.getParametersForOperation)(e),i=(0,Di.validateParameters)(n.filter(o=>o.location==="path"),t.params,e.route.path,t.method.toLowerCase(),"path");if(!i.isValid){let o="Path parameters validation failed",a=MO.HttpProblems.badRequest(t,e,{detail:`${o}, see errors property for more details`,errors:i.errors});if((0,Di.shouldLog)(r.validatePathParameters)&&(0,Di.logErrors)(e,r.logLevel??"info",o,i.invalidValues,i.errors),(0,Di.shouldReject)(r.validatePathParameters))return a}}s(HO,"handlePathParameterValidation");ec.handlePathParameterValidation=HO});var Bb=g(tc=>{"use strict";Object.defineProperty(tc,"__esModule",{value:!0});tc.handleQueryParameterValidation=void 0;var FO=se(),Ui=Ci();function qO(e,t,r){if(!r.validateQueryParameters||r.validateQueryParameters==="none")return;let n=(0,Ui.getParametersForOperation)(e),i=(0,Ui.validateParameters)(n.filter(o=>o.location==="query"),t.query,e.route.path,t.method.toLowerCase(),"query");if(!i.isValid){let o="Query parameters validation failed",a=FO.HttpProblems.badRequest(t,e,{detail:`${o}, see errors property for more details`,errors:i.errors});if((0,Ui.shouldLog)(r.validateQueryParameters)&&(0,Ui.logErrors)(e,r.logLevel??"info",o,i.invalidValues,i.errors),(0,Ui.shouldReject)(r.validateQueryParameters))return a}}s(qO,"handleQueryParameterValidation");tc.handleQueryParameterValidation=qO});var Kb=g(Hr=>{"use strict";Object.defineProperty(Hr,"__esModule",{value:!0});Hr.SchemaBasedRequestValidation=Hr.RequestValidationInboundPolicy=void 0;var $O=jb(),jO=Vb(),VO=Gb(),GO=Bb(),BO=s(async(e,t,r)=>{let n=(0,GO.handleQueryParameterValidation)(t,e,r);if(n!==void 0||(n=(0,VO.handlePathParameterValidation)(t,e,r),n!==void 0)||(n=(0,jO.handleHeadersValidation)(t,e,r),n!==void 0))return n;let i=await(0,$O.handleBodyValidation)(t,e,r);return i!==void 0?i:e},"RequestValidationInboundPolicy");Hr.RequestValidationInboundPolicy=BO;Hr.SchemaBasedRequestValidation=Hr.RequestValidationInboundPolicy});var Jb=g(rc=>{"use strict";Object.defineProperty(rc,"__esModule",{value:!0});rc.RequireOriginInboundPolicy=void 0;var KO=L(),JO=se(),zO=s(async(e,t,r,n)=>{if(r.origins===void 0||r.origins.length===0)throw new KO.ConfigurationError(`RequireOriginInboundPolicy '${n}' configuration error - no allowed origins specified`);let i=typeof r.origins=="string"?r.origins.split(","):r.origins;i=i.map(a=>a.trim());let o=e.headers.get("origin");if(!o||!i.includes(o)){let a=r.failureDetail??"Forbidden";return JO.HttpProblems.forbidden(e,t,{detail:a})}return e},"RequireOriginInboundPolicy");rc.RequireOriginInboundPolicy=zO});var zb=g(nc=>{"use strict";Object.defineProperty(nc,"__esModule",{value:!0});nc.SetBodyInboundPolicy=void 0;var WO=He(),QO=s(async(e,t,r)=>new WO.ZuploRequest(e,{body:r.body}),"SetBodyInboundPolicy");nc.SetBodyInboundPolicy=QO});var Qb=g(ic=>{"use strict";Object.defineProperty(ic,"__esModule",{value:!0});ic.SetHeadersInboundPolicy=void 0;var Wb=L(),YO=He(),ZO=s(async(e,t,r,n)=>{let i=r.headers;if(!i||!Array.isArray(i)||i.length==0)throw new Wb.ConfigurationError(`SetHeadersInboundPolicy '${n}' options.headers must be a valid array of { name, value }`);let o=new Headers(e.headers);return i.forEach(c=>{if(!c.name||c.name.length===0)throw new Wb.ConfigurationError(`SetHeadersInboundPolicy '${n}' each option.headers[] entry must have a name property`);let u=c.overwrite===void 0?!0:c.overwrite;(!o.has(c.name)||u)&&o.set(c.name,c.value)}),new YO.ZuploRequest(e,{headers:o})},"SetHeadersInboundPolicy");ic.SetHeadersInboundPolicy=ZO});var Zb=g(oc=>{"use strict";Object.defineProperty(oc,"__esModule",{value:!0});oc.SetHeadersOutboundPolicy=void 0;var Yb=L(),XO=s(async(e,t,r,n,i)=>{let o=n.headers;if(!o||!Array.isArray(o)||o.length==0)throw new Yb.ConfigurationError(`SetHeadersOutboundPolicy '${i}' options.headers must be a valid array of { name, value }`);let a=new Headers(e.headers);return o.forEach(u=>{if(!u.name||u.name.length===0)throw new Yb.ConfigurationError(`SetHeadersOutboundPolicy '${i}' each option.headers[] entry must have a name property`);let l=u.overwrite===void 0?!0:u.overwrite;(!a.has(u.name)||l)&&a.set(u.name,u.value)}),new Response(e.body,{headers:a,status:e.status,statusText:e.statusText})},"SetHeadersOutboundPolicy");oc.SetHeadersOutboundPolicy=XO});var e_=g(sc=>{"use strict";Object.defineProperty(sc,"__esModule",{value:!0});sc.SetQueryParamsInboundPolicy=void 0;var Xb=L(),ex=He(),tx=s(async(e,t,r,n)=>{let i=r.params;if(!i||!Array.isArray(i)||i.length==0)throw new Xb.ConfigurationError(`SetQueryParamsInboundPolicy '${n}' options.params must be a valid array of { name, value }`);let o=new URL(e.url);return i.forEach(c=>{if(!c.name||c.name.length===0)throw new Xb.ConfigurationError(`SetQueryParamsInboundPolicy '${n}' each option.params[] entry must have a name property`);let u=c.overwrite===void 0?!0:c.overwrite;(!o.searchParams.has(c.name)||u)&&o.searchParams.set(c.name,c.value)}),new ex.ZuploRequest(o.toString(),e)},"SetQueryParamsInboundPolicy");sc.SetQueryParamsInboundPolicy=tx});var t_=g(ac=>{"use strict";Object.defineProperty(ac,"__esModule",{value:!0});ac.SetStatusOutboundPolicy=void 0;var rx=s(async(e,t,r,n,i)=>{if(!n.status||isNaN(n.status)||n.status<100||n.status>599)throw new Error(`Invalid SetStatusOutboundPolicy '${i}' - status must be a valid number between 100 and 599, not '${n.status}'`);return new Response(e.body,{headers:e.headers,status:n.status,statusText:n.statusText??e.statusText})},"SetStatusOutboundPolicy");ac.SetStatusOutboundPolicy=rx});var r_=g(cc=>{"use strict";Object.defineProperty(cc,"__esModule",{value:!0});cc.SleepInboundPolicy=void 0;var nx=L(),ix=s(async e=>new Promise(r=>{setTimeout(r,e)}),"sleep"),ox=s(async(e,t,r,n)=>{if(!r||r.sleepInMs===void 0||isNaN(r.sleepInMs))throw new nx.ConfigurationError(`SleepInboundPolicy '${n} must have a valid options.sleepInMs value`);return await ix(r.sleepInMs),e},"SleepInboundPolicy");cc.SleepInboundPolicy=ox});var i_=g(uc=>{"use strict";Object.defineProperty(uc,"__esModule",{value:!0});uc.SupabaseJwtInboundPolicy=void 0;var n_=L(),sx=se(),ax=He(),cx=qt(),ux=jt(),lx=s(async(e,t,r,n)=>{(0,cx.optionValidator)(r,n).required("secret","string").optional("allowUnauthenticatedRequests","boolean").optional("requiredClaims","object");let i={secret:r.secret,allowUnauthenticatedRequests:r.allowUnauthenticatedRequests??!1},o=await(0,ux.OpenIdJwtInboundPolicy)(e,t,i,n);if(o instanceof Response)return o;if(!(o instanceof ax.ZuploRequest))throw new n_.SystemError("Invalid State - SupabaseJwtInboundPolicy encountered a non-response that wasn't a ZuploRequest type')");let a=r.requiredClaims;if(!a)return o;let c=e.user?.data.app_metadata;if(!c)throw new n_.RuntimeError(`SupabaseJwtInboundPolicy policy '${n}' - has requiredClaims but the JWT token had no app_metadata property`);let u=Object.keys(a),l=[];return u.forEach(d=>{let p=a[d];Array.isArray(p)?p.includes(c[d])||l.push(d):p!==c[d]&&l.push(d)}),l.length>0?sx.HttpProblems.unauthorized(e,t,{detail:`Invalid JWT token - missing valid claims ${l.join(", ")}`}):o},"SupabaseJwtInboundPolicy");uc.SupabaseJwtInboundPolicy=lx});var s_=g(lc=>{"use strict";Object.defineProperty(lc,"__esModule",{value:!0});lc.UpstreamAzureAdServiceAuthInboundPolicy=void 0;var dx=$t(),px=Jt(),o_=L(),hx=Le(),fx=Ss(),mx=qt(),yx=s(async(e,t,r,n)=>{(0,mx.optionValidator)(r,n).required("activeDirectoryTenantId","string").required("activeDirectoryClientId","string").required("activeDirectoryClientSecret","string").optional("tokenRetries","number").optional("expirationOffsetSeconds","number");let i=await(0,dx.getPolicyCacheName)(n,r),o=new px.MemoryZoneReadThroughCache(i,{logger:hx.SystemLogMap.getLogger(t)}),a=await o.get(n);if(!a){let c=await gx(r,t);o.put(n,c.access_token,c.expires_in-(r.expirationOffsetSeconds??300)),a=c.access_token}return e.headers.set("Authorization",`Bearer ${a}`),e},"UpstreamAzureAdServiceAuthInboundPolicy");lc.UpstreamAzureAdServiceAuthInboundPolicy=yx;async function gx(e,t){let r=new URLSearchParams({client_id:e.activeDirectoryClientId,scope:`${e.activeDirectoryClientId}/.default`,client_secret:e.activeDirectoryClientSecret,grant_type:"client_credentials"}),n=await(0,fx.fetchRetry)({retries:e.tokenRetries??3,retryDelayMs:10},`https://login.microsoftonline.com/${e.activeDirectoryTenantId}/oauth2/v2.0/token`,{headers:{"content-type":"application/x-www-form-urlencoded"},method:"POST",body:r});if(n.status!==200){try{let o=await n.text();t.log.error("Could not get token from Azure AD",o)}catch{}throw new o_.RuntimeError("Could not get token from Azure AD")}let i=await n.json();if(i&&typeof i=="object"&&"access_token"in i&&typeof i.access_token=="string"&&"expires_in"in i&&typeof i.expires_in=="number")return{access_token:i.access_token,expires_in:i.expires_in};throw new o_.RuntimeError("Response returned from Azure AD is not in the expected format.")}s(gx,"getAccessToken")});var c_=g(dc=>{"use strict";Object.defineProperty(dc,"__esModule",{value:!0});dc.UpstreamFirebaseAdminAuthInboundPolicy=void 0;var bx=$t(),_x=Jt(),Ex=L(),wx=Le(),Rp=pn(),vx=qt(),a_="https://accounts.google.com/o/oauth2/token",Op,Tx=s(async(e,t,r,n)=>{(0,vx.optionValidator)(r,n).required("serviceAccountJson","string"),Op||(Op=await Rp.GcpServiceAccount.init(r.serviceAccountJson));let i={scope:["https://www.googleapis.com/auth/cloud-platform","https://www.googleapis.com/auth/firebase.database","https://www.googleapis.com/auth/firebase.messaging","https://www.googleapis.com/auth/identitytoolkit","https://www.googleapis.com/auth/userinfo.email"].join(" ")},o=await(0,bx.getPolicyCacheName)(n,r),a=new _x.MemoryZoneReadThroughCache(o,{logger:wx.SystemLogMap.getLogger(t)}),c=await a.get(n);if(!c){let u=await(0,Rp.getTokenFromGcpServiceAccount)({serviceAccount:Op,audience:a_,payload:i}),l=await(0,Rp.exchangeGgpJwtForIdToken)(a_,u,{retries:r.tokenRetries??3,retryDelayMs:10});if(!l.access_token)throw new Ex.RuntimeError("Invalid OAuth response from Firebase");c=l.access_token,a.put(n,c,(l.expires_in??3600)-(r.expirationOffsetSeconds??300))}return e.headers.set("Authorization",`Bearer ${c}`),e},"UpstreamFirebaseAdminAuthInboundPolicy");dc.UpstreamFirebaseAdminAuthInboundPolicy=Tx});var u_=g(pc=>{"use strict";Object.defineProperty(pc,"__esModule",{value:!0});pc.UpstreamFirebaseUserAuthInboundPolicy=void 0;var Sx=$t(),Ix=Jt(),Hn=L(),Px=Le(),Ax=lp(),xp=pn(),Rx=ni(),Ox=qt(),xx="https://identitytoolkit.googleapis.com/google.identity.identitytoolkit.v1.IdentityToolkit",Nx=["acr","amr","at_hash","aud","auth_time","azp","cnf","c_hash","exp","iat","iss","jti","nbf","nonce"],Np,Cx=s(async(e,t,r,n)=>{if((0,Ox.optionValidator)(r,n).required("serviceAccountJson","string").required("webApiKey","string").optional("developerClaims","object").optional("userId","string").optional("userIdPropertyPath","string"),!r.userId&&!r.userIdPropertyPath)throw new Hn.ConfigurationError(`Either 'userId' or 'userIdPropertyPath' options must be set on policy '${n}'.`);let i={};if(typeof r.developerClaims<"u"){for(let p in r.developerClaims)if(Object.prototype.hasOwnProperty.call(r.developerClaims,p)){if(Nx.indexOf(p)!==-1)throw new Hn.ConfigurationError(`Developer claim "${p}" is reserved and cannot be specified.`);i[p]=r.developerClaims[p]}}Np||(Np=await xp.GcpServiceAccount.init(r.serviceAccountJson));let o=r.userId;if(!o&&!r.userIdPropertyPath){if(!e.user)throw new Hn.RuntimeError("Unable to set userId for upstream auth policy as request.user is 'undefined'. Do you have an authentication policy before this policy?.");o=e.user?.sub}else if(r.userIdPropertyPath){if(!e.user)throw new Hn.RuntimeError(`Unable to apply userIdPropertyPath '${r.userIdPropertyPath}' as request.user is 'undefined'. Do you have an authentication policy before this policy?`);o=(0,Rx.getValueFromRequestUser)(e.user,r.userIdPropertyPath,"userIdPropertyPath")}if(!o)throw new Hn.RuntimeError(`Unable to determine user from for the policy ${n}`);let a=await(0,Sx.getPolicyCacheName)(n,r),c=new Ix.MemoryZoneReadThroughCache(a,{logger:Px.SystemLogMap.getLogger(t)}),u={uid:o,claims:i},l=await(0,Ax.sha256)(JSON.stringify(u)),d=await c.get(l);if(!d){let p=await(0,xp.getTokenFromGcpServiceAccount)({serviceAccount:Np,audience:xx,payload:u}),f=`https://identitytoolkit.googleapis.com/v1/accounts:signInWithCustomToken?key=${r.webApiKey}`,h=await(0,xp.exchangeFirebaseJwtForIdToken)(f,p,{retries:r.tokenRetries??3,retryDelayMs:10});if(!h.idToken)throw new Hn.RuntimeError("Invalid token response from Firebase");d=h.idToken,c.put(l,d,(h.expiresIn?parseInt(h.expiresIn):3600)-(r.expirationOffsetSeconds??300))}return e.headers.set("Authorization",`Bearer ${d}`),e},"UpstreamFirebaseUserAuthInboundPolicy");pc.UpstreamFirebaseUserAuthInboundPolicy=Cx});var d_=g(hc=>{"use strict";Object.defineProperty(hc,"__esModule",{value:!0});hc.UpstreamGcpJwtInboundPolicy=void 0;var l_=pn(),Lx=qt(),Cp,Dx=s(async(e,t,r,n)=>{(0,Lx.optionValidator)(r,n).required("audience","string").required("serviceAccountJson","string"),Cp||(Cp=await l_.GcpServiceAccount.init(r.serviceAccountJson));let i=await(0,l_.getTokenFromGcpServiceAccount)({serviceAccount:Cp,audience:r.audience});return e.headers.set("Authorization",`Bearer ${i}`),e},"UpstreamGcpJwtInboundPolicy");hc.UpstreamGcpJwtInboundPolicy=Dx});var h_=g(fc=>{"use strict";Object.defineProperty(fc,"__esModule",{value:!0});fc.UpstreamGcpServiceAuthInboundPolicy=void 0;var Ux=$t(),kx=lu(),Mx=Jt(),Hx=L(),Lp=pn(),Fx=qt(),p_="https://www.googleapis.com/oauth2/v4/token",Dp,qx=s(async(e,t,r,n)=>{(0,Fx.optionValidator)(r,n).required("audience","string").required("serviceAccountJson","string").optional("tokenRetries","number").optional("expirationOffsetSeconds","number"),Dp||(Dp=await Lp.GcpServiceAccount.init(r.serviceAccountJson));let i=await(0,Ux.getPolicyCacheName)(n,r),o;r.useMemoryCacheOnly?o=new kx.MemoryCache(i):o=new Mx.MemoryZoneReadThroughCache(i,t);let a=await o.get(n);if(!a){let c=await(0,Lp.getTokenFromGcpServiceAccount)({serviceAccount:Dp,audience:p_,payload:{target_audience:`${r.audience}`}}),{id_token:u}=await(0,Lp.exchangeGgpJwtForIdToken)(p_,c,{retries:r.tokenRetries??3,retryDelayMs:10});if(!u)throw new Hx.RuntimeError("Invalid token response from GCP");a=u,o.put(n,a,3600-(r.expirationOffsetSeconds??300))}return e.headers.set("Authorization",`Bearer ${a}`),e},"UpstreamGcpServiceAuthInboundPolicy");fc.UpstreamGcpServiceAuthInboundPolicy=qx});var m_=g(mc=>{"use strict";Object.defineProperty(mc,"__esModule",{value:!0});mc.ValidateJsonSchemaInbound=void 0;var $x=L(),f_=se(),jx=s(async(e,t,r)=>{let n=e.clone(),i;try{i=await n.json()}catch{return f_.HttpProblems.badRequest(e,t,{detail:"Invalid JSON body - expected well-formed JSON document"})}if(r.validator(i))return e;let{errors:a}=r.validator;if(!a)throw new $x.SystemError("Invalid state - validator error object is undefined even though validation failed.");let c=a.map(u=>u.instancePath===void 0||u.instancePath===""?"Body "+u.message:u.instancePath.replace("/","")+" "+u.message);return f_.HttpProblems.badRequest(e,t,{detail:"Incoming body did not pass schema validation",errors:c})},"ValidateJsonSchemaInbound");mc.ValidateJsonSchemaInbound=jx});var g_=g(yc=>{"use strict";Object.defineProperty(yc,"__esModule",{value:!0});yc.MeteringInboundPolicy=void 0;var y_=js(),Up=L(),Vx=se(),Gx=Le(),Bx=Y(),Kx=s(async(e,t,r,n)=>{let i=Gx.SystemLogMap.getLogger(t);t.addResponseSendingFinalHook(async(d,p,f)=>{let h=y_.ContextData.get(f,"subscription");if((r.allowRequestsWithoutSubscription??!1)&&!h)return;let v=r.bucketId;if(!v){f.log.error(`MeteringInboundPolicy '${n}' - no bucketName property provided`);return}let{authApiJWT:T,meteringServiceUrl:S}=Bx.Environment.instance;d.ok&&h&&r.meters&&fetch(`${S}/internal/v1/metering/${v}/subscriptions/${h.id}/quotas/consume`,{headers:{Authorization:`Bearer ${T}`},method:"POST",body:JSON.stringify({meters:r.meters})}).catch(M=>{f.log.error(`MeteringInboundPolicy '${n}' -error in serviceResponse`),i.error(`MeteringInboundPolicy '${n}' -error in serviceResponse`,M)})});let o=y_.ContextData.get(t,"subscription"),a=r.allowRequestsWithoutSubscription??!1,c=r.allowRequestsOverQuota??!1;if(!o){if(a)return e;throw new Up.ConfigurationError("Subscription is not available for user")}if(o&&Object.keys(o.quotas).length===0)throw new Up.ConfigurationError("Quota is not set up for the user's subscription");let l=Object.keys(r.meters).filter(d=>!Object.keys(o.quotas).includes(d));if(l.length>0)throw new Up.ConfigurationError(`The following policy meters are not present in the subscription: ${l.join(", ")}`);for(let d of Object.keys(o.quotas))if(o.quotas[d]<=0&&!c)return Vx.HttpProblems.tooManyRequests(e,t,{detail:`Quota exceeded for meter '${d}'`,title:"Quota Exceeded"});return e},"MeteringInboundPolicy");yc.MeteringInboundPolicy=Kx});var b_=g(gc=>{"use strict";Object.defineProperty(gc,"__esModule",{value:!0});gc.LoadSubscriptionInboundPolicy=void 0;var Jx=js(),zx=L(),kp=se(),Wx=Le(),Qx=Y(),Yx=s(async(e,t,r,n)=>{let i=Wx.SystemLogMap.getLogger(t),o=r.allowRequestsWithoutSubscription??!1,a=e.user;if(!a)return o?e:kp.HttpProblems.unauthorized(e,t,{detail:"Unable to check subscription for anonymous user"});let c=r.bucketId;if(!c)throw new zx.ConfigurationError(`LoadSubscriptionInboundPolicy '${n}' - no bucketName property provided`);let{authApiJWT:u,meteringServiceUrl:l}=Qx.Environment.instance,{sub:d}=a,p,f;try{if(p=await fetch(`${l}/internal/v1/metering/${c}/subscriptions?customerRef=${d}&status=active`,{headers:{Authorization:`Bearer ${u}`},method:"GET"}),!p.ok)return t.log.error(await p.text()),kp.HttpProblems.forbidden(e,t);f=await p.json()}catch(y){i.error(`LoadSubscriptionInboundPolicy '${n}' -error in serviceResponse`,y)}if((!f||!f.data||f.data.length===0)&&!o)return kp.HttpProblems.unauthorized(e,t,{detail:"No valid, active subscription found"});if((!f||!f.data||f.data.length===0)&&o)return e;let h=f&&f.data?f.data[0]:void 0;return Jx.ContextData.set(t,"subscription",h),e},"LoadSubscriptionInboundPolicy");gc.LoadSubscriptionInboundPolicy=Yx});var __=g(bc=>{"use strict";Object.defineProperty(bc,"__esModule",{value:!0});bc.ServiceProviderImpl=void 0;var Zx=L(),Mp=class e{static{s(this,"ServiceProviderImpl")}static#e;services=new Map;constructor(){}static getInstance(){return e.#e||(e.#e=new e),e.#e}setInstance(t){e.#e=t}addService(t,r){if(this.services.get(t))throw new Zx.SystemError(`A service with the name ${t} already exists -- you cannot have duplicate services`);this.services.set(t,r)}getService(t){return this.services.get(t)}};bc.ServiceProviderImpl=Mp});var x_=g(m=>{"use strict";var Xx=m&&m.__createBinding||(Object.create?function(e,t,r,n){n===void 0&&(n=r);var i=Object.getOwnPropertyDescriptor(t,r);(!i||("get"in i?!t.__esModule:i.writable||i.configurable))&&(i={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,i)}:function(e,t,r,n){n===void 0&&(n=r),e[n]=t[r]}),Hp=m&&m.__exportStar||function(e,t){for(var r in e)r!=="default"&&!Object.prototype.hasOwnProperty.call(t,r)&&Xx(t,e,r)},eN=m&&m.__importDefault||function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(m,"__esModule",{value:!0});m.RateLimitInboundPolicy=m.BasicRateLimitInboundPolicy=m.PropelAuthJwtInboundPolicy=m.OpenIdJwtInboundPolicy=m.OktaJwtInboundPolicy=m.setMoesifContext=m.MoesifInboundPolicy=m.MockApiInboundPolicy=m.JWTScopeValidationInboundPolicy=m.GeoFilterInboundPolicy=m.FormDataToJsonInboundPolicy=m.FirebaseJwtInboundPolicy=m.CurityPhantomTokenInboundPolicy=m.CreditsMeteringInboundPolicy=m.CompositeInboundPolicy=m.CognitoJwtInboundPolicy=m.ClerkJwtInboundPolicy=m.ClearHeadersOutboundPolicy=m.ClearHeadersInboundPolicy=m.ChangeMethodInboundPolicy=m.CachingInboundPolicy=m.BasicAuthInboundPolicy=m.Auth0JwtInboundPolicy=m.ApiKeyInboundPolicy=m.ApiAuthKeyInboundPolicy=m.AmberfloMeteringPolicy=m.AmberfloMeteringInboundPolicy=m.AuditLogPlugin=m.AuditLogDataStaxProvider=m.HttpStatusCode=m.webSocketPipelineHandler=m.webSocketHandler=m.urlRewriteHandler=m.urlForwardHandler=m.redirectHandler=m.openApiSpecHandler=m.awsLambdaHandler=m.AwsLambdaHandlerExtensions=m.purgeGatewayCache=m.Handler=m.originalFetch=m.ConfigurationError=m.isZuploReadableEnvVariableName=m.isRestrictedEnvVariableName=m.environment=m.ContextData=m.ResponseSentEvent=m.ResponseSendingEvent=m.ZoneCache=m.MemoryZoneReadThroughCache=void 0;m.sanitizedIdentifierName=m.getRawOperationDataIdentifierName=m.getIdForRequestBodySchema=m.getIdForRefSchema=m.getIdForParameterSchema=m.SystemLogMap=m.httpStatuses=m.SYSTEM_LOGGER=m.API_KEY=m.ServiceProviderImpl=m.serialize=m.ContentTypes=m.Router=m.LookupResult=m.SystemRouteName=m.ZuploRequest=m.ProblemResponseFormatter=m.HttpProblems=m.LoadSubscriptionInboundPolicy=m.MeteringInboundPolicy=m.ValidateJsonSchemaInbound=m.UpstreamGcpServiceAuthInboundPolicy=m.UpstreamGcpJwtInboundPolicy=m.UpstreamFirebaseUserAuthInboundPolicy=m.UpstreamFirebaseAdminAuthInboundPolicy=m.UpstreamAzureAdServiceAuthInboundPolicy=m.SupabaseJwtInboundPolicy=m.StripeWebhookVerificationInboundPolicy=m.SleepInboundPolicy=m.SetStatusOutboundPolicy=m.SetQueryParamsInboundPolicy=m.SetHeadersOutboundPolicy=m.SetHeadersInboundPolicy=m.SetBodyInboundPolicy=m.RequireOriginInboundPolicy=m.SchemaBasedRequestValidation=m.RequestValidationInboundPolicy=m.RequestSizeLimitInboundPolicy=m.ReplaceStringOutboundPolicy=m.RemoveQueryParamsInboundPolicy=m.RemoveHeadersOutboundPolicy=m.RemoveHeadersInboundPolicy=m.ReadmeMetricsInboundPolicy=void 0;Eh();var tN=Jt();Object.defineProperty(m,"MemoryZoneReadThroughCache",{enumerable:!0,get:function(){return tN.MemoryZoneReadThroughCache}});var rN=io();Object.defineProperty(m,"ZoneCache",{enumerable:!0,get:function(){return rN.ZoneCache}});var E_=Ir();Object.defineProperty(m,"ResponseSendingEvent",{enumerable:!0,get:function(){return E_.ResponseSendingEvent}});Object.defineProperty(m,"ResponseSentEvent",{enumerable:!0,get:function(){return E_.ResponseSentEvent}});var nN=js();Object.defineProperty(m,"ContextData",{enumerable:!0,get:function(){return nN.ContextData}});var Fp=wd();Object.defineProperty(m,"environment",{enumerable:!0,get:function(){return Fp.environment}});Object.defineProperty(m,"isRestrictedEnvVariableName",{enumerable:!0,get:function(){return Fp.isRestrictedEnvVariableName}});Object.defineProperty(m,"isZuploReadableEnvVariableName",{enumerable:!0,get:function(){return Fp.isZuploReadableEnvVariableName}});var iN=L();Object.defineProperty(m,"ConfigurationError",{enumerable:!0,get:function(){return iN.ConfigurationError}});var oN=Td();Object.defineProperty(m,"originalFetch",{enumerable:!0,get:function(){return oN.originalFetch}});var w_=zy();Object.defineProperty(m,"Handler",{enumerable:!0,get:function(){return w_.Handler}});Object.defineProperty(m,"purgeGatewayCache",{enumerable:!0,get:function(){return w_.purgeGatewayCache}});var v_=dg();Object.defineProperty(m,"AwsLambdaHandlerExtensions",{enumerable:!0,get:function(){return v_.AwsLambdaHandlerExtensions}});Object.defineProperty(m,"awsLambdaHandler",{enumerable:!0,get:function(){return v_.awsLambdaHandler}});var sN=hg();Object.defineProperty(m,"openApiSpecHandler",{enumerable:!0,get:function(){return sN.openApiSpecHandler}});var aN=fg();Object.defineProperty(m,"redirectHandler",{enumerable:!0,get:function(){return aN.redirectHandler}});var cN=yg();Object.defineProperty(m,"urlForwardHandler",{enumerable:!0,get:function(){return cN.urlForwardHandler}});var uN=bg();Object.defineProperty(m,"urlRewriteHandler",{enumerable:!0,get:function(){return uN.urlRewriteHandler}});var lN=Eg();Object.defineProperty(m,"webSocketHandler",{enumerable:!0,get:function(){return lN.webSocketHandler}});var dN=Tg();Object.defineProperty(m,"webSocketPipelineHandler",{enumerable:!0,get:function(){return dN.webSocketPipelineHandler}});var pN=Du();Object.defineProperty(m,"HttpStatusCode",{enumerable:!0,get:function(){return pN.HttpStatusCode}});Hp(Ng(),m);Hp(Dg(),m);var hN=Ug();Object.defineProperty(m,"AuditLogDataStaxProvider",{enumerable:!0,get:function(){return hN.AuditLogDataStaxProvider}});var fN=Mg();Object.defineProperty(m,"AuditLogPlugin",{enumerable:!0,get:function(){return fN.AuditLogPlugin}});Hp(jg(),m);var T_=Jg();Object.defineProperty(m,"AmberfloMeteringInboundPolicy",{enumerable:!0,get:function(){return T_.AmberfloMeteringInboundPolicy}});Object.defineProperty(m,"AmberfloMeteringPolicy",{enumerable:!0,get:function(){return T_.AmberfloMeteringPolicy}});var mN=Yg();Object.defineProperty(m,"ApiAuthKeyInboundPolicy",{enumerable:!0,get:function(){return mN.ApiAuthKeyInboundPolicy}});var yN=fp();Object.defineProperty(m,"ApiKeyInboundPolicy",{enumerable:!0,get:function(){return yN.ApiKeyInboundPolicy}});var gN=Zg();Object.defineProperty(m,"Auth0JwtInboundPolicy",{enumerable:!0,get:function(){return gN.Auth0JwtInboundPolicy}});var bN=Xg();Object.defineProperty(m,"BasicAuthInboundPolicy",{enumerable:!0,get:function(){return bN.BasicAuthInboundPolicy}});var _N=eb();Object.defineProperty(m,"CachingInboundPolicy",{enumerable:!0,get:function(){return _N.CachingInboundPolicy}});var EN=tb();Object.defineProperty(m,"ChangeMethodInboundPolicy",{enumerable:!0,get:function(){return EN.ChangeMethodInboundPolicy}});var wN=rb();Object.defineProperty(m,"ClearHeadersInboundPolicy",{enumerable:!0,get:function(){return wN.ClearHeadersInboundPolicy}});var vN=nb();Object.defineProperty(m,"ClearHeadersOutboundPolicy",{enumerable:!0,get:function(){return vN.ClearHeadersOutboundPolicy}});var TN=ib();Object.defineProperty(m,"ClerkJwtInboundPolicy",{enumerable:!0,get:function(){return TN.ClerkJwtInboundPolicy}});var SN=sb();Object.defineProperty(m,"CognitoJwtInboundPolicy",{enumerable:!0,get:function(){return SN.CognitoJwtInboundPolicy}});var IN=cb();Object.defineProperty(m,"CompositeInboundPolicy",{enumerable:!0,get:function(){return IN.CompositeInboundPolicy}});var PN=lb();Object.defineProperty(m,"CreditsMeteringInboundPolicy",{enumerable:!0,get:function(){return PN.CreditsMeteringInboundPolicy}});var AN=db();Object.defineProperty(m,"CurityPhantomTokenInboundPolicy",{enumerable:!0,get:function(){return AN.CurityPhantomTokenInboundPolicy}});var RN=pb();Object.defineProperty(m,"FirebaseJwtInboundPolicy",{enumerable:!0,get:function(){return RN.FirebaseJwtInboundPolicy}});var ON=hb();Object.defineProperty(m,"FormDataToJsonInboundPolicy",{enumerable:!0,get:function(){return ON.FormDataToJsonInboundPolicy}});var xN=fb();Object.defineProperty(m,"GeoFilterInboundPolicy",{enumerable:!0,get:function(){return xN.GeoFilterInboundPolicy}});var NN=mb();Object.defineProperty(m,"JWTScopeValidationInboundPolicy",{enumerable:!0,get:function(){return NN.JWTScopeValidationInboundPolicy}});var CN=gb();Object.defineProperty(m,"MockApiInboundPolicy",{enumerable:!0,get:function(){return CN.MockApiInboundPolicy}});var S_=vb();Object.defineProperty(m,"MoesifInboundPolicy",{enumerable:!0,get:function(){return S_.MoesifInboundPolicy}});Object.defineProperty(m,"setMoesifContext",{enumerable:!0,get:function(){return S_.setMoesifContext}});var LN=Tb();Object.defineProperty(m,"OktaJwtInboundPolicy",{enumerable:!0,get:function(){return LN.OktaJwtInboundPolicy}});var DN=jt();Object.defineProperty(m,"OpenIdJwtInboundPolicy",{enumerable:!0,get:function(){return DN.OpenIdJwtInboundPolicy}});var UN=Sb();Object.defineProperty(m,"PropelAuthJwtInboundPolicy",{enumerable:!0,get:function(){return UN.PropelAuthJwtInboundPolicy}});var I_=Nb();Object.defineProperty(m,"BasicRateLimitInboundPolicy",{enumerable:!0,get:function(){return I_.RateLimitInboundPolicy}});Object.defineProperty(m,"RateLimitInboundPolicy",{enumerable:!0,get:function(){return I_.RateLimitInboundPolicy}});var kN=Ub();Object.defineProperty(m,"ReadmeMetricsInboundPolicy",{enumerable:!0,get:function(){return kN.ReadmeMetricsInboundPolicy}});var MN=kb();Object.defineProperty(m,"RemoveHeadersInboundPolicy",{enumerable:!0,get:function(){return MN.RemoveHeadersInboundPolicy}});var HN=Mb();Object.defineProperty(m,"RemoveHeadersOutboundPolicy",{enumerable:!0,get:function(){return HN.RemoveHeadersOutboundPolicy}});var FN=Hb();Object.defineProperty(m,"RemoveQueryParamsInboundPolicy",{enumerable:!0,get:function(){return FN.RemoveQueryParamsInboundPolicy}});var qN=Fb();Object.defineProperty(m,"ReplaceStringOutboundPolicy",{enumerable:!0,get:function(){return qN.ReplaceStringOutboundPolicy}});var $N=$b();Object.defineProperty(m,"RequestSizeLimitInboundPolicy",{enumerable:!0,get:function(){return $N.RequestSizeLimitInboundPolicy}});var P_=Kb();Object.defineProperty(m,"RequestValidationInboundPolicy",{enumerable:!0,get:function(){return P_.RequestValidationInboundPolicy}});Object.defineProperty(m,"SchemaBasedRequestValidation",{enumerable:!0,get:function(){return P_.SchemaBasedRequestValidation}});var jN=Jb();Object.defineProperty(m,"RequireOriginInboundPolicy",{enumerable:!0,get:function(){return jN.RequireOriginInboundPolicy}});var VN=zb();Object.defineProperty(m,"SetBodyInboundPolicy",{enumerable:!0,get:function(){return VN.SetBodyInboundPolicy}});var GN=Qb();Object.defineProperty(m,"SetHeadersInboundPolicy",{enumerable:!0,get:function(){return GN.SetHeadersInboundPolicy}});var BN=Zb();Object.defineProperty(m,"SetHeadersOutboundPolicy",{enumerable:!0,get:function(){return BN.SetHeadersOutboundPolicy}});var KN=e_();Object.defineProperty(m,"SetQueryParamsInboundPolicy",{enumerable:!0,get:function(){return KN.SetQueryParamsInboundPolicy}});var JN=t_();Object.defineProperty(m,"SetStatusOutboundPolicy",{enumerable:!0,get:function(){return JN.SetStatusOutboundPolicy}});var zN=r_();Object.defineProperty(m,"SleepInboundPolicy",{enumerable:!0,get:function(){return zN.SleepInboundPolicy}});var WN=ip();Object.defineProperty(m,"StripeWebhookVerificationInboundPolicy",{enumerable:!0,get:function(){return WN.StripeWebhookVerificationInboundPolicy}});var QN=i_();Object.defineProperty(m,"SupabaseJwtInboundPolicy",{enumerable:!0,get:function(){return QN.SupabaseJwtInboundPolicy}});var YN=s_();Object.defineProperty(m,"UpstreamAzureAdServiceAuthInboundPolicy",{enumerable:!0,get:function(){return YN.UpstreamAzureAdServiceAuthInboundPolicy}});var ZN=c_();Object.defineProperty(m,"UpstreamFirebaseAdminAuthInboundPolicy",{enumerable:!0,get:function(){return ZN.UpstreamFirebaseAdminAuthInboundPolicy}});var XN=u_();Object.defineProperty(m,"UpstreamFirebaseUserAuthInboundPolicy",{enumerable:!0,get:function(){return XN.UpstreamFirebaseUserAuthInboundPolicy}});var eC=d_();Object.defineProperty(m,"UpstreamGcpJwtInboundPolicy",{enumerable:!0,get:function(){return eC.UpstreamGcpJwtInboundPolicy}});var tC=h_();Object.defineProperty(m,"UpstreamGcpServiceAuthInboundPolicy",{enumerable:!0,get:function(){return tC.UpstreamGcpServiceAuthInboundPolicy}});var rC=m_();Object.defineProperty(m,"ValidateJsonSchemaInbound",{enumerable:!0,get:function(){return rC.ValidateJsonSchemaInbound}});var nC=g_();Object.defineProperty(m,"MeteringInboundPolicy",{enumerable:!0,get:function(){return nC.MeteringInboundPolicy}});var iC=b_();Object.defineProperty(m,"LoadSubscriptionInboundPolicy",{enumerable:!0,get:function(){return iC.LoadSubscriptionInboundPolicy}});var oC=se();Object.defineProperty(m,"HttpProblems",{enumerable:!0,get:function(){return oC.HttpProblems}});var sC=fo();Object.defineProperty(m,"ProblemResponseFormatter",{enumerable:!0,get:function(){return sC.ProblemResponseFormatter}});var aC=He();Object.defineProperty(m,"ZuploRequest",{enumerable:!0,get:function(){return aC.ZuploRequest}});var cC=Ar();Object.defineProperty(m,"SystemRouteName",{enumerable:!0,get:function(){return cC.SystemRouteName}});var A_=hd();Object.defineProperty(m,"LookupResult",{enumerable:!0,get:function(){return A_.LookupResult}});Object.defineProperty(m,"Router",{enumerable:!0,get:function(){return A_.Router}});var R_=Iu();Object.defineProperty(m,"ContentTypes",{enumerable:!0,get:function(){return R_.ContentTypes}});Object.defineProperty(m,"serialize",{enumerable:!0,get:function(){return R_.serialize}});var uC=__();Object.defineProperty(m,"ServiceProviderImpl",{enumerable:!0,get:function(){return uC.ServiceProviderImpl}});var O_=Ju();Object.defineProperty(m,"API_KEY",{enumerable:!0,get:function(){return O_.API_KEY}});Object.defineProperty(m,"SYSTEM_LOGGER",{enumerable:!0,get:function(){return O_.SYSTEM_LOGGER}});var lC=ku();Object.defineProperty(m,"httpStatuses",{enumerable:!0,get:function(){return eN(lC).default}});var dC=Le();Object.defineProperty(m,"SystemLogMap",{enumerable:!0,get:function(){return dC.SystemLogMap}});var ki=Qa();Object.defineProperty(m,"getIdForParameterSchema",{enumerable:!0,get:function(){return ki.getIdForParameterSchema}});Object.defineProperty(m,"getIdForRefSchema",{enumerable:!0,get:function(){return ki.getIdForRefSchema}});Object.defineProperty(m,"getIdForRequestBodySchema",{enumerable:!0,get:function(){return ki.getIdForRequestBodySchema}});Object.defineProperty(m,"getRawOperationDataIdentifierName",{enumerable:!0,get:function(){return ki.getRawOperationDataIdentifierName}});Object.defineProperty(m,"sanitizedIdentifierName",{enumerable:!0,get:function(){return ki.sanitizedIdentifierName}})});var N_=g(Fn=>{"use strict";Object.defineProperty(Fn,"__esModule",{value:!0});Fn.BaseCryptoBeta=Fn.supportedDigests=void 0;Fn.supportedDigests=["sha-1","sha-256","sha-384","sha-512"];var qp=class{static{s(this,"BaseCryptoBeta")}};Fn.BaseCryptoBeta=qp});var C_=g(_c=>{"use strict";Object.defineProperty(_c,"__esModule",{value:!0});_c.WorkerCryptoBeta=void 0;var $p=N_(),pC=L(),jp=class extends $p.BaseCryptoBeta{static{s(this,"WorkerCryptoBeta")}async digest(t,r){if(!$p.supportedDigests.includes(t.toLowerCase()))throw new pC.RuntimeError(`Algorithm ${t} is not supported. Try using ${$p.supportedDigests.join(", ")}`);let n=new TextEncoder().encode(r),i=await crypto.subtle.digest(t,n);return Array.from(new Uint8Array(i)).map(c=>c.toString(16).padStart(2,"0")).join("")}};_c.WorkerCryptoBeta=jp});var L_=g(Ec=>{"use strict";Object.defineProperty(Ec,"__esModule",{value:!0});Ec.BaseKeyValueStore=void 0;var Vp=class{static{s(this,"BaseKeyValueStore")}context;constructor(t){this.context=t}};Ec.BaseKeyValueStore=Vp});var U_=g(wc=>{"use strict";Object.defineProperty(wc,"__esModule",{value:!0});wc.WorkerKeyValueStore=void 0;var D_=L(),hC=L_(),Gp=class extends hC.BaseKeyValueStore{static{s(this,"WorkerKeyValueStore")}#e;constructor(t){super(t);let n=globalThis.ZUPLO_KV;if(!n)throw new D_.FeatureNotEnabledError("The Key Value Store feature is not enabled for this project.");this.#e=n}put(t,r,n){if(typeof t!="string")throw new D_.ConfigurationError("value must be of type string");return this.#e.put(t,r,n?{expirationTtl:n.expirationSecondsTtl}:void 0)}get(t,r){return this.#e.get(t,{type:"text",cacheTtl:r?.cacheSecondsTtl})}delete(t){return this.#e.delete(t)}};wc.WorkerKeyValueStore=Gp});var Lt=g(dt=>{"use strict";var fC=dt&&dt.__createBinding||(Object.create?function(e,t,r,n){n===void 0&&(n=r);var i=Object.getOwnPropertyDescriptor(t,r);(!i||("get"in i?!t.__esModule:i.writable||i.configurable))&&(i={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,i)}:function(e,t,r,n){n===void 0&&(n=r),e[n]=t[r]}),mC=dt&&dt.__exportStar||function(e,t){for(var r in e)r!=="default"&&!Object.prototype.hasOwnProperty.call(t,r)&&fC(t,e,r)};Object.defineProperty(dt,"__esModule",{value:!0});dt.KeyValueStore=dt.CryptoBeta=void 0;mC(x_(),dt);var yC=C_();Object.defineProperty(dt,"CryptoBeta",{enumerable:!0,get:function(){return yC.WorkerCryptoBeta}});var gC=U_();Object.defineProperty(dt,"KeyValueStore",{enumerable:!0,get:function(){return gC.WorkerKeyValueStore}})});var SL={};Zi(SL,{GraphQLComplexityLimitInboundPolicy:()=>hE,GraphQLDisableIntrospectionInboundPolicy:()=>mE});module.exports=Xi(SL);var Yn=yh(Lt());function B(e,t){if(!!!e)throw new Error(t)}s(B,"devAssert");function Ee(e){return typeof e=="object"&&e!==null}s(Ee,"isObjectLike");function At(e,t){if(!!!e)throw new Error(t??"Unexpected invariant triggered.")}s(At,"invariant");var bC=/\r\n|[\n\r]/g;function qn(e,t){let r=0,n=1;for(let i of e.body.matchAll(bC)){if(typeof i.index=="number"||At(!1),i.index>=t)break;r=i.index+i[0].length,n+=1}return{line:n,column:t+1-r}}s(qn,"getLocation");function Bp(e){return vc(e.source,qn(e.source,e.start))}s(Bp,"printLocation");function vc(e,t){let r=e.locationOffset.column-1,n="".padStart(r)+e.body,i=t.line-1,o=e.locationOffset.line-1,a=t.line+o,c=t.line===1?r:0,u=t.column+c,l=`${e.name}:${a}:${u}
+`+d});let p=Math.floor((typeof c=="number"?c:Date.now())/1e3)-r.timestamp;if(i>0&&p>i)throw new kr.StripeSignatureVerificationError(t,e,{message:"Timestamp outside the tolerance zone"});return!0}s(YA,"validateComputedSignature");function ZA(e,t){return typeof e!="string"?null:e.split(",").reduce((r,n)=>{let i=n.split("=");return i[0]==="t"&&(r.timestamp=parseInt(i[1],10)),i[0]===t&&r.signatures.push(i[1]),r},{timestamp:-1,signatures:[]})}s(ZA,"parseHeader");function XA(e,t){if(e.length!==t.length)return!1;let r=e.length,n=0;for(let i=0;i<r;++i)n|=e.charCodeAt(i)^t.charCodeAt(i);return n===0}s(XA,"secureCompare");async function Fg(e,t){let r=new TextEncoder,n=await crypto.subtle.importKey("raw",r.encode(t),{name:"HMAC",hash:{name:"SHA-256"}},!1,["sign"]),i=await crypto.subtle.sign("hmac",n,r.encode(e)),o=new Uint8Array(i),a=new Array(o.length);for(let c=0;c<o.length;c++)a[c]=np[o[c]];return a.join("")}s(Fg,"computeHMACSignatureAsync");On.computeHMACSignatureAsync=Fg;var np=new Array(256);for(let e=0;e<np.length;e++)np[e]=e.toString(16).padStart(2,"0")});var qt=g(la=>{"use strict";Object.defineProperty(la,"__esModule",{value:!0});la.optionValidator=void 0;var Pi=L();function eR(e,t){let r=s((o,a,c)=>{let u=e[o];if(!(c&&u===void 0)){if(u===void 0)throw new Pi.ConfigurationError(`Value of '${String(o)}' on policy '${t}' is required, but no value was set. If using an environment variable, check that it is set correctly.`);if(a==="array"&&Array.isArray(u))throw new Pi.ConfigurationError(`Value of '${String(o)}' on policy '${t}' must be an array. Received type ${typeof u}.`);if(typeof u!==a)throw new Pi.ConfigurationError(`Value of '${String(o)}' on policy '${t}' must be of type ${a}. Received type ${typeof u}.`);if(typeof u=="string"&&u.length===0)throw new Pi.ConfigurationError(`Value of '${String(o)}' on policy '${t}' must be a non-empty string. The value received is empty. If using an environment variable, check that it is set correctly.`);if(typeof u=="number"&&isNaN(u))throw new Pi.ConfigurationError(`Value of '${String(o)}' on policy '${t}' must be valid number. If using an environment variable, check that it is set correctly.`)}},"validate"),n=s((o,a)=>(r(o,a,!0),{optional:n,required:i}),"optional"),i=s((o,a)=>(r(o,a,!1),{optional:n,required:i}),"required");return{optional:n,required:i}}s(eR,"optionValidator");la.optionValidator=eR});var ip=g(da=>{"use strict";Object.defineProperty(da,"__esModule",{value:!0});da.StripeWebhookVerificationInboundPolicy=void 0;var tR=se(),rR=qg(),nR=qt(),iR=s(async(e,t,r,n)=>{(0,nR.optionValidator)(r,n).required("signingSecret","string").optional("tolerance","number");let i=e.headers.get("stripe-signature");try{let o=await e.clone().text();await(0,rR.constructEventAsync)(o,i,r.signingSecret)}catch(o){return t.log.error("Error validating stripe webhook",o),tR.HttpProblems.badRequest(e,t,{title:"Webhook Error",detail:o.message})}return e},"StripeWebhookVerificationInboundPolicy");da.StripeWebhookVerificationInboundPolicy=iR});var $g=g(pa=>{"use strict";Object.defineProperty(pa,"__esModule",{value:!0});pa.MeteringPlugin=void 0;var oR=gt(),op=class extends oR.SystemRuntimePlugin{static{s(this,"MeteringPlugin")}};pa.MeteringPlugin=op});var jg=g(ha=>{"use strict";Object.defineProperty(ha,"__esModule",{value:!0});ha.StripeMeteringPlugin=void 0;var lt=L(),sR=Ct(),aR=ip(),xn=se(),cR=Yt(),uR=zr(),lR=Lu(),dR=ot(),sp=Y(),ap=Dt(),pR=$g(),hR="checkout.session.completed",cp=class extends pR.MeteringPlugin{static{s(this,"StripeMeteringPlugin")}options;constructor(t){super(),this.options=t}registerRoutes(t,r){let n=s(async(c,u)=>{if(this.options.__testMode===!0)return u.log.warn("Received Stripe webhook event of in test mode."),"success";let{meteringBucketId:l}=this.options;if(!l)throw new lt.ConfigurationError("StripeMeteringPlugin - No 'meteringBucketId' property provided");let d=this.options.meteringBucketRegion??"us-central1";if(!bR(d))throw new lt.ConfigurationError(`StripeMeteringPlugin - The value '${d}' on the property 'meteringBucketRegion' is invalid.`);let p=await c.json();if(!gR(p))return xn.HttpProblems.badRequest(c,u,{detail:"The received body was not in the expected format."});u.log.info(`Received Stripe webhook event of type '${p.type}' with ID '${p.id}'.`);let f;try{f=await fR({event:p,stripeSecretKey:this.options.stripeSecretKey,logger:u.log})}catch(h){return xn.HttpProblems.internalServerError(c,u,{detail:h.message??"Unknown error getting subscription info"})}if(f){let h;if(this.options.apiKeyBucketName&&sp.Environment.instance.build.ACCOUNT_NAME&&this.options.zuploAccountApiKey?h=await mR({bucketName:this.options.apiKeyBucketName,accountName:sp.Environment.instance.build.ACCOUNT_NAME,stripeProductId:f.productId,stripeSubscriptionId:f.subscriptionId,stripeCustomerId:f.customerId,managerEmail:f.customerEmail,zuploAccountApiKey:this.options.zuploAccountApiKey,logger:u.log}):u.log.debug("Skipping consumer creation. No 'apiKeyBucketName', 'zuploAccountApiKey', or account variable set."),!h)return xn.HttpProblems.internalServerError(c,u,{detail:"No consumer was created, skipping creation of subscription"});let y="routes.oas.json";return yR({request:c,context:u,stripeProductId:f.productId,stripeSubscriptionId:f.subscriptionId,customerKey:h,productKey:y,meteringBucketId:l,meteringBucketRegion:d})}return xn.HttpProblems.ok(c,u,{detail:"Event was ignored by Stripe metering plugin webhook."})},"stripeWebhookHandler"),i=(0,uR.createInternalPolicyProcessor)({inboundPolicies:[{handler:aR.StripeWebhookVerificationInboundPolicy,options:{signingSecret:this.options.webhooks.signingSecret,tolerance:this.options.webhooks.tolerance}}]}),o=new sR.Pipeline({processors:[cR.metricsProcessor,i],handler:n,gateway:r}),a=new dR.SystemRouteConfiguration({label:"PLUGIN_STRIPE_WEBHOOK_ROUTE",methods:["POST"],path:this.options.webhooks.routePath??"/__plugins/stripe/webhooks",systemRouteName:lR.SystemRouteName.StripePlugin});t.addRoute(a,o.execute)}};ha.StripeMeteringPlugin=cp;async function fR({event:e,stripeSecretKey:t,logger:r}){let n;if(e.type===hR){let l=e,d=l.data?.object?.subscription;if(!d)throw new lt.RuntimeError("Invalid Stripe Webhook event. Expected '.data.object.id' to be the subscription ID.");if(!l.data?.object?.client_reference_id)throw new lt.RuntimeError("Invalid Stripe Webhook event. Expected '.data.object.id' to be the subscription ID.");let f=await fetch(`https://api.stripe.com/v1/subscriptions/${d}`,{headers:{Authorization:`Bearer ${t}`}}),h=await f.json();if(f.status!==200){let y="Error retrieving subscription from Stripe API.";throw r.error(y,h),new lt.RuntimeError(y)}n=h}if(!n)return;let i=n.id;if(!i)throw new lt.RuntimeError("Invalid Stripe Webhook event. Expected '.data.object.id' to be the subscription ID.");let o=n.items?.data.find(l=>l.object==="subscription_item");if(!o||!o.id)throw new Error("Invalid Stripe Webhook event. Expected '.data.object.items.data[]' to contain a subscription_item.");let a=o.plan;if(!a||!a.product)throw new lt.RuntimeError("Invalid Stripe Webhook event. Expected '.data.object.items.data[].plan'.");let c=await fetch(`https://api.stripe.com/v1/customers/${n.customer}`,{headers:{Authorization:`Bearer ${t}`}}),u=await c.json();if(c.status!==200){let l="Error retrieving customer from Stripe API.";throw r.error(l,u),new lt.RuntimeError(l)}return{subscriptionId:i,productId:a.product,customerId:n.customer,customerEmail:u.email}}s(fR,"getStripeSubscription");async function mR({accountName:e,bucketName:t,zuploAccountApiKey:r,stripeSubscriptionId:n,stripeProductId:i,stripeCustomerId:o,managerEmail:a,logger:c}){let u=new URL(`/v1/accounts/${e}/key-buckets/${t}/consumers`,"https://dev.zuplo.com");u.searchParams.set("with-api-key","true");let l=crypto.randomUUID(),d={name:l,description:`Consumer for Stripe subscription ${n}`,tags:{providerSubscriptionKey:n,planProviderKey:i},metadata:{stripeSubscriptionId:n,stripeProductId:i,stripeCustomerId:o},managers:[a]},p=await fetch(u,{method:"POST",headers:{Authorization:`Bearer ${r}`,"content-type":"application/json"},body:JSON.stringify(d)}),f=await p.json();if(p.status!==200){let h="Error creating API Key Consumer";throw c.error(h,f),new lt.RuntimeError(h)}return c.info("Successfully created API Key Consumer",{consumerId:l,stripeSubscriptionId:n,stripeProductId:i}),l}s(mR,"createConsumer");async function yR({request:e,context:t,stripeSubscriptionId:r,stripeProductId:n,customerKey:i,productKey:o,meteringBucketId:a,meteringBucketRegion:c}){let u={status:"active",type:"periodic",renewalStrategy:"monthly",region:c,providerKey:r,planProviderKey:n,customerKey:i,productKey:o};try{let{authApiJWT:l,meteringServiceUrl:d}=sp.Environment.instance;if(!(0,ap.isNonEmptyString)(l))throw new lt.SystemError("No Zuplo JWT token set.");let p=await fetch(`${d}/internal/v1/metering/${a}/subscriptions`,{headers:{Authorization:`Bearer ${l}`,"Content-Type":"application/json"},method:"POST",body:JSON.stringify(u)});if(!p.ok){let f="Error creating metering subscription.",h;try{h=await p.json()}catch{h={status:p.status,statusText:p.statusText}}throw t.log.error(f,h),new lt.RuntimeError(f)}}catch(l){return xn.HttpProblems.internalServerError(e,t,{detail:l.message})}return t.log.info("Successfully created/updated metering subscription.",u),xn.HttpProblems.ok(e,t)}s(yR,"saveSubscription");function gR(e){return e!==null&&typeof e=="object"&&"id"in e&&(0,ap.isString)(e.id)&&"type"in e&&(0,ap.isString)(e.type)}s(gR,"isStripeWebhookEvent");function bR(e){return e!==null&&typeof e=="string"&&["us-central1","europe-west4"].includes(e)}s(bR,"isMetricsRegion")});var Jg=g(Nn=>{"use strict";Object.defineProperty(Nn,"__esModule",{value:!0});Nn.AmberfloMeteringInboundPolicy=Nn.AmberfloMeteringPolicy=void 0;var Vg=L(),_R=ve(),Gg=ni(),Kg=new WeakMap,Bg={},up=class{static{s(this,"AmberfloMeteringPolicy")}static setRequestProperties(t,r){Kg.set(t,r)}};Nn.AmberfloMeteringPolicy=up;async function ER(e,t,r,n){if(!r.statusCodes)throw new Vg.ConfigurationError(`Invalid AmberfloMeterInboundPolicy '${n}': options.statusCodes must be an array of HTTP status code numbers`);let i=Array.isArray(r.statusCodes)?r.statusCodes:(0,Gg.statusCodesStringToNumberArray)(r.statusCodes);return t.addResponseSendingFinalHook(async o=>{if(i.includes(o.status)){let a=Kg.get(t),c=r.customerId;if(r.customerIdPropertyPath){if(!e.user)throw new Vg.RuntimeError(`Unable to apply customerIdPropertyPath '${r.customerIdPropertyPath}' as request.user is 'undefined'.`);c=(0,Gg.getValueFromRequestUser)(e.user,r.customerIdPropertyPath,"customerIdPropertyPath")}let u=a?.customerId??c;if(!u){t.log.error(`Error in AmberfloMeterInboundPolicy '${n}': customerId cannot be undefined`);return}let l=a?.meterApiName??r.meterApiName;if(!l){t.log.error(`Error in AmberfloMeterInboundPolicy '${n}': meterApiName cannot be undefined`);return}let d=a?.meterValue??r.meterValue;if(!d){t.log.error(`Error in AmberfloMeterInboundPolicy '${n}': meterValue cannot be undefined`);return}let p={customerId:u,meterApiName:l,meterValue:d,meterTimeInMillis:Date.now(),dimensions:Object.apply(r.dimensions??{},a?.dimensions)},f=Bg[r.apiKey];if(!f){let h=r.apiKey,y=e.headers.get("zm-test-id")??"";f=new _R.BatchDispatch("amberflo-ingest-meter",10,async v=>{try{let T=r.url??"https://app.amberflo.io/ingest",S=await fetch(T,{method:"POST",body:JSON.stringify(v),headers:{"content-type":"application/json","x-api-key":h,"zm-test-id":y}});S.ok||t.log.error(`Unexpected response in AmberfloMeteringInboundPolicy '${n}'. ${S.status}: ${await S.text()}`)}catch(T){throw t.log.error(`Error in AmberfloMeteringInboundPolicy '${n}': ${T.message}`),T}}),Bg[h]=f}f.enqueue(p),t.waitUntil(f.waitUntilFlushed())}}),e}s(ER,"AmberfloMeteringInboundPolicy");Nn.AmberfloMeteringInboundPolicy=ER});var lp=g(fa=>{"use strict";Object.defineProperty(fa,"__esModule",{value:!0});fa.sha256=void 0;async function wR(e){let t=new TextEncoder().encode(e),r=await crypto.subtle.digest({name:"SHA-256"},t);return[...new Uint8Array(r)].map(i=>i.toString(16).padStart(2,"0")).join("")}s(wR,"sha256");fa.sha256=wR});var $t=g(ma=>{"use strict";Object.defineProperty(ma,"__esModule",{value:!0});ma.getPolicyCacheName=void 0;var vR=lp(),zg=new Map;async function TR(e,t){let r,n=zg.get(e);return n!==void 0?r=n:(r=`zuplo-policy-${await(0,vR.sha256)(JSON.stringify({policyName:e,options:t}))}`,zg.set(e,r)),r}s(TR,"getPolicyCacheName");ma.getPolicyCacheName=TR});var fp=g(ya=>{"use strict";Object.defineProperty(ya,"__esModule",{value:!0});ya.ApiKeyInboundPolicy=void 0;var SR=$t(),IR=Jt(),Wg=wd(),dp=L(),PR=Lt(),pp=Le(),hp=Y(),AR=Ss(),Qg="key-metadata-cache-type";function RR(e,t){return t.authScheme===""?e:e.replace(`${t.authScheme} `,"")}s(RR,"getKeyValue");async function OR(e,t,r,n){if(!r.bucketName)if(Wg.environment.ZUPLO_API_KEY_SERVICE_BUCKET_NAME)r.bucketName=Wg.environment.ZUPLO_API_KEY_SERVICE_BUCKET_NAME;else throw new dp.ConfigurationError(`ApiKeyInboundPolicy '${n}' - no bucketName property provided`);let i={authHeader:r.authHeader??"authorization",authScheme:r.authScheme??"Bearer",bucketName:r.bucketName,cacheTtlSeconds:r.cacheTtlSeconds??60,allowUnauthenticatedRequests:r.allowUnauthenticatedRequests??!1,disableAutomaticallyAddingKeyHeaderToOpenApi:r.disableAutomaticallyAddingKeyHeaderToOpenApi??!1};if(i.cacheTtlSeconds<60)throw new dp.ConfigurationError(`ApiKeyInboundPolicy '${n}' - minimum cacheTtlSeconds value is 60s, '${i.cacheTtlSeconds}' is invalid`);let o=s(T=>i.allowUnauthenticatedRequests?e:PR.HttpProblems.unauthorized(e,t,{detail:T}),"unauthorizedResponse"),a=e.headers.get(i.authHeader);if(!a)return o("No Authorization Header");if(!a.toLowerCase().startsWith(i.authScheme.toLowerCase()))return o("Invalid Authorization Scheme");let c=RR(a,i);if(!c||c==="")return o("No key present");let u=await xR(c),l=await(0,SR.getPolicyCacheName)(n,i),d=new IR.MemoryZoneReadThroughCache(l,{logger:pp.SystemLogMap.getLogger(t)}),p=await d.get(u);if(p&&p.isValid===!0)return e.user=p.user,e;if(p&&!p.isValid)return p.typeId!==Qg&&pp.SystemLogMap.getLogger(t).error(`ApiKeyInboundPolicy '${n}' - cached metadata has invalid typeId '${p.typeId}'`,p),o("Authorization Failed");let f={key:c},h=await(0,AR.fetchRetry)({retryDelayMs:5,retries:2,logger:pp.SystemLogMap.getLogger(t)},`${hp.Environment.instance.apiKeyServiceUrl}/v1/$validate/${i.bucketName}`,{method:"POST",headers:{"content-type":"application/json","zp-rid":t.requestId,"zp-dn":hp.Environment.instance.deploymentName??"unknown","User-Agent":hp.Environment.instance.systemUserAgent},body:JSON.stringify(f)});if(h.status===401)return t.log.info(`ApiKeyInboundPolicy '${n}' - 401 response from Key Service`),o("Authorization Failed");if(h.status!==200){try{let T=await h.text(),S=JSON.parse(T);t.log.error("Unexpected response from key service",S)}catch{t.log.error("Invalid response from key service")}throw new dp.RuntimeError(`ApiKeyInboundPolicy '${n}' - unexpected response from Key Service. Status: ${h.status}`)}let y=await h.json(),v={isValid:!0,typeId:Qg,user:{sub:y.name,data:y.metadata}};return e.user=v.user,d.put(u,v,i.cacheTtlSeconds),e}s(OR,"ApiKeyInboundPolicy");ya.ApiKeyInboundPolicy=OR;async function xR(e){let t=new TextEncoder().encode(e),r=await crypto.subtle.digest("SHA-256",t);return Array.from(new Uint8Array(r)).map(o=>o.toString(16).padStart(2,"0")).join("")}s(xR,"hashValue")});var Yg=g(ga=>{"use strict";Object.defineProperty(ga,"__esModule",{value:!0});ga.ApiAuthKeyInboundPolicy=void 0;var NR=fp();ga.ApiAuthKeyInboundPolicy=NR.ApiKeyInboundPolicy});var jt=g(ba=>{"use strict";Object.defineProperty(ba,"__esModule",{value:!0});ba.OpenIdJwtInboundPolicy=void 0;var yp=(vs(),Xi(ws)),gp=L(),CR=se(),mp={},LR=s(async(e,t)=>{if(!t.jwkUrl||typeof t.jwkUrl!="string")throw new gp.ConfigurationError("Invalid State - jwkUrl not set");mp[t.jwkUrl]||(mp[t.jwkUrl]=(0,yp.createRemoteJWKSet)(new URL(t.jwkUrl),t.headers?{headers:t.headers}:void 0));let{payload:r}=await(0,yp.jwtVerify)(e,mp[t.jwkUrl],{issuer:t.issuer,audience:t.audience});return r},"jwkVerifier"),DR=s(async(e,t)=>{let r;if(t.secret===void 0)throw new Error("secretVerifier requires secret to be defined");if(typeof t.secret=="string"){let o=new TextEncoder().encode(t.secret);r=new Uint8Array(o)}else r=t.secret;let{payload:n}=await(0,yp.jwtVerify)(e,r,{issuer:t.issuer,audience:t.audience});return n},"secretVerifier"),UR=s(async(e,t,r,n)=>{let i=e.headers.get("Authorization"),o="bearer ",a=s(f=>CR.HttpProblems.unauthorized(e,t,{detail:f}),"unauthorizedResponse");if(!r.jwkUrl&&!r.secret)throw new gp.ConfigurationError(`OpenIdJwtInboundPolicy policy '${n}': One of 'jwkUrl' or 'secret' options are required.`);if(r.jwkUrl&&r.secret)throw new gp.ConfigurationError(`OpenIdJwtInboundPolicy policy '${n}': Only one of 'jwkUrl' and 'secret' options should be provided.`);let c=r.jwkUrl?LR:DR,l=await s(async()=>{if(!i)return a("No authorization header");if(i.toLowerCase().indexOf(o)!==0)return a("Invalid bearer token format for authorization header");let f=i.substring(o.length);if(!f||f.length===0)return a("No bearer token on authorization header");try{return await c(f,r)}catch(h){let y=new URL(e.url);return"code"in h&&h.code==="ERR_JWT_EXPIRED"?t.log.warn(`Expired token used on url: ${y.pathname} `,h):t.log.warn(`Invalid token on: ${e.method} ${y.pathname}`,h),a("Invalid token")}},"getJwtOrRejectedResponse")();if(l instanceof Response)return r.allowUnauthenticatedRequests===!0?e:l;let d=r.subPropertyName??"sub",p=l[d];return p?(e.user={sub:p,data:l},e):a(`Token is not valid, no '${d}' property found.`)},"OpenIdJwtInboundPolicy");ba.OpenIdJwtInboundPolicy=UR});var Zg=g(_a=>{"use strict";Object.defineProperty(_a,"__esModule",{value:!0});_a.Auth0JwtInboundPolicy=void 0;var kR=jt(),MR=s(async(e,t,r,n)=>(0,kR.OpenIdJwtInboundPolicy)(e,t,{issuer:`https://${r.auth0Domain}/`,audience:r.audience,jwkUrl:`https://${r.auth0Domain}/.well-known/jwks.json`,allowUnauthenticatedRequests:r.allowUnauthenticatedRequests},n),"Auth0JwtInboundPolicy");_a.Auth0JwtInboundPolicy=MR});var Xg=g(Ea=>{"use strict";Object.defineProperty(Ea,"__esModule",{value:!0});Ea.BasicAuthInboundPolicy=void 0;var HR=se(),FR=s(async(e,t,r)=>{let n=e.headers.get("Authorization"),i="basic ",o=s(l=>HR.HttpProblems.unauthorized(e,t,{detail:l}),"unauthorizedResponse"),c=await s(async()=>{if(!n)return await o("No Authorization header");if(n.toLowerCase().indexOf(i)!==0)return await o("Invalid Basic token format for Authorization header");let l=n.substring(i.length);if(!l||l.length===0)return await o("No username:password provided");let d=atob(l).normalize(),p=d.indexOf(":");if(p===-1||/[\0-\x1F\x7F]/.test(d))return await o("Invalid basic token value - see https://tools.ietf.org/html/rfc5234#appendix-B.1");let f=d.substring(0,p),h=d.substring(p+1),y=r.accounts.find(v=>v.username===f&&v.password===h);return y||await o("Invalid username or password")},"getAccountOrRejectedResponse")();if(c instanceof Response)return r.allowUnauthenticatedRequests?e:c;let u=c.username;return e.user={sub:u,data:c.data},e},"BasicAuthInboundPolicy");Ea.BasicAuthInboundPolicy=FR});var eb=g(wa=>{"use strict";Object.defineProperty(wa,"__esModule",{value:!0});wa.CachingInboundPolicy=void 0;var qR=$t(),$R=["cdn-cache-control","cloudflare-cdn-cache-control","surrogate-control","cache-tag","expires"];async function jR(e){let t=new TextEncoder().encode(e),r=await crypto.subtle.digest("SHA-256",t);return Array.from(new Uint8Array(r)).map(o=>o.toString(16).padStart(2,"0")).join("")}s(jR,"digestMessage");var VR=s(async(e,t)=>{let r=[...t.dangerouslyIgnoreAuthorizationHeader===!0?[]:["authorization"],...t.headers??[]],n=[];for(let[d,p]of e.headers.entries())r.includes(d)&&n.push({key:d.toLowerCase(),value:p});n.sort((d,p)=>d.key.localeCompare(p.key));let i=await jR(JSON.stringify(n)),o=new URL(e.url),a=new URLSearchParams(o.searchParams);a.set("_z-hdr-dgst",i);let c=t.cacheHttpMethods?.includes(e.method.toUpperCase())&&e.method.toUpperCase()!=="GET";c&&a.set("_z-original-method",e.method);let u=`${o.origin}${o.pathname}?${a}`;return new Request(u,{method:c?"GET":e.method})},"createCacheKeyRequest");async function GR(e,t,r,n){let i=await(0,qR.getPolicyCacheName)(n,r),o=await caches.open(i),a=r?.cacheHttpMethods?.map(l=>l.toUpperCase())??["GET"],c=await VR(e,r),u=await o.match(c);return u||(t.addEventListener("responseSent",l=>{try{let d=r.statusCodes??[200,206,301,302,303,404,410],p=l.response.clone();if(!d.includes(p.status)||!a.includes(e.method.toUpperCase()))return;let f=r?.expirationSecondsTtl??60,h=new Response(p.body,p);$R.forEach(y=>h.headers.delete(y)),h.headers.set("cache-control",`s-maxage=${f}`),t.waitUntil(o.put(c,h))}catch(d){t.log.error(`Error in caching-inbound-policy '${n}': "${d.message}"`,d)}}),e)}s(GR,"CachingInboundPolicy");wa.CachingInboundPolicy=GR});var tb=g(va=>{"use strict";Object.defineProperty(va,"__esModule",{value:!0});va.ChangeMethodInboundPolicy=void 0;var BR=L(),KR=He(),JR=s(async(e,t,r,n)=>{if(!r.method)throw new BR.ConfigurationError(`ChangeMethodInboundPolicy '${n}' options.method must be valid HttpMethod`);return new KR.ZuploRequest(e,{method:r.method})},"ChangeMethodInboundPolicy");va.ChangeMethodInboundPolicy=JR});var rb=g(Ta=>{"use strict";Object.defineProperty(Ta,"__esModule",{value:!0});Ta.ClearHeadersInboundPolicy=void 0;var zR=He(),WR=s(async(e,t,r)=>{let n=[...r.exclude??[]],i=new Headers;return n.forEach(a=>{let c=e.headers.get(a);c&&i.set(a,c)}),new zR.ZuploRequest(e,{headers:i})},"ClearHeadersInboundPolicy");Ta.ClearHeadersInboundPolicy=WR});var nb=g(Sa=>{"use strict";Object.defineProperty(Sa,"__esModule",{value:!0});Sa.ClearHeadersOutboundPolicy=void 0;var QR=s(async(e,t,r,n)=>{let i=[...n.exclude??[]],o=new Headers;return i.forEach(c=>{let u=e.headers.get(c);u&&o.set(c,u)}),new Response(e.body,{headers:o,status:e.status,statusText:e.statusText})},"ClearHeadersOutboundPolicy");Sa.ClearHeadersOutboundPolicy=QR});var ib=g(Ia=>{"use strict";Object.defineProperty(Ia,"__esModule",{value:!0});Ia.ClerkJwtInboundPolicy=void 0;var YR=jt(),ZR=s(async(e,t,r,n)=>{let i=new URL(r.frontendApiUrl.startsWith("https://")||r.frontendApiUrl.startsWith("http://")?r.frontendApiUrl:`https://${r.frontendApiUrl}`),o=new URL(i);return o.pathname="/.well-known/jwks.json",(0,YR.OpenIdJwtInboundPolicy)(e,t,{issuer:i.href.slice(0,-1),jwkUrl:o.toString(),allowUnauthenticatedRequests:r.allowUnauthenticatedRequests},n)},"ClerkJwtInboundPolicy");Ia.ClerkJwtInboundPolicy=ZR});var sb=g(Pa=>{"use strict";Object.defineProperty(Pa,"__esModule",{value:!0});Pa.CognitoJwtInboundPolicy=void 0;var ob=L(),XR=jt(),e0=s(async(e,t,r,n)=>{if(!r.userPoolId)throw new ob.ConfigurationError("userPoolId must be set in the options for CognitoJwtInboundPolicy");if(!r.region)throw new ob.ConfigurationError("region must be set in the options for CognitoJwtInboundPolicy");return(0,XR.OpenIdJwtInboundPolicy)(e,t,{issuer:`https://cognito-idp.${r.region}.amazonaws.com/${r.userPoolId}`,jwkUrl:`https://cognito-idp.${r.region}.amazonaws.com/${r.userPoolId}/.well-known/jwks.json`,allowUnauthenticatedRequests:r.allowUnauthenticatedRequests},n)},"CognitoJwtInboundPolicy");Pa.CognitoJwtInboundPolicy=e0});var cb=g(Aa=>{"use strict";Object.defineProperty(Aa,"__esModule",{value:!0});Aa.CompositeInboundPolicy=void 0;var t0=L(),r0=mn(),ab=zr(),n0=s(async(e,t,r,n)=>{if(!r.policies||r.policies.length===0)throw new t0.ConfigurationError(`CompositeInboundPolicy '${n}' must have valid policies defined`);let i=r0.Gateway.instance,o=(0,ab.getInboundPolicyHandlerAndOptions)(r.policies,i?.routeData.policies);return(0,ab.toStackedInboundHandler)(o)(e,t)},"CompositeInboundPolicy");Aa.CompositeInboundPolicy=n0});var lb=g(Ra=>{"use strict";Object.defineProperty(Ra,"__esModule",{value:!0});Ra.CreditsMeteringInboundPolicy=void 0;var Ai=se(),ub=Y(),i0=s(async(e,t,r)=>{let n=e.user;if(!n)return Ai.HttpProblems.unauthorized(e,t,{title:"Unable to check subscription for anonymous user",detail:"No user data on request"});let{sub:i}=n;if(!r.bucketId)return Ai.HttpProblems.unauthorized(e,t,{title:"Metering bucket not configured",detail:"Specify one using the bucketId option on the policy"});let o=r.bucketId,a=await o0(o,i,t);if(!a)return Ai.HttpProblems.unauthorized(e,t,{title:"No valid, active subscription found"});if(!a.quotas)return Ai.HttpProblems.forbidden(e,t,{title:"Insufficient credits"});for(let c of Object.keys(a.quotas))if(a.quotas[c]<=0)return Ai.HttpProblems.forbidden(e,t,{title:"Insufficient credits"});return t.custom.subscription=a,t.addResponseSendingFinalHook(async()=>{let c=t.custom.meters,u={};for(let l of Object.keys(c))u[l]=c[l];await s0(o,a.id,u,t)}),e},"CreditsMeteringInboundPolicy");Ra.CreditsMeteringInboundPolicy=i0;async function o0(e,t,r){let{authApiJWT:n,meteringServiceUrl:i}=ub.Environment.instance,o=new URL(`${i}/internal/v1/metering/${e}/subscriptions`);o.search=new URLSearchParams({customerKey:t,status:"active"}).toString();let a=await fetch(o,{method:"GET",headers:{Authorization:`Bearer ${n}`}});if(!a.ok)throw new Error(`Error retrieving subscriptions for credits metering ': ${a.status} - ${await a.text()}`);let c=await a.json();if(c.data.length!==0)return c.data.length>1&&r.log.warn(`Found more than one active subscription for customer ${t} -- using the first one.`),c.data[0]}s(o0,"getSubscription");async function s0(e,t,r,n){let{authApiJWT:i,meteringServiceUrl:o}=ub.Environment.instance,a=new URL(`${o}/internal/v1/metering/${e}/subscriptions/${t}/quotas/consume`),c=await fetch(a,{method:"POST",body:JSON.stringify({meters:r}),headers:{Authorization:`Bearer ${i}`}});c.ok||n.log.error(`Error consuming subscription quotas for credits metering ': ${c.status} - ${await c.text()}`)}s(s0,"consumeSubscription")});var db=g(xa=>{"use strict";Object.defineProperty(xa,"__esModule",{value:!0});xa.CurityPhantomTokenInboundPolicy=void 0;var a0=$t(),c0=Jt(),Oa=se(),u0=s(async(e,t,r,n)=>{let i=e.headers.get("Authorization");if(!i)return Oa.HttpProblems.unauthorized(e,t,{detail:"No authorization header"});let o=l0(i);if(!o)return Oa.HttpProblems.unauthorized(e,t,{detail:"Failed to parse token from Authorization header"});let a=await(0,a0.getPolicyCacheName)(n,r),c=new c0.MemoryZoneReadThroughCache(a,t),u=await c.get(o);if(!u){let l=await fetch(r.introspectionUrl,{headers:{Authorization:"Basic "+btoa(`${r.clientId}:${r.clientSecret}`),Accept:"application/jwt","Content-Type":"application/x-www-form-urlencoded"},method:"POST",body:"token="+o+"&token_type_hint=access_token"}),d=await l.text();if(l.status===200)u=d,c.put(o,u,r.cacheDurationSeconds??600);else return l.status>=500?(t.log.error(`Error introspecting token - ${l.status}: '${d}'`),Oa.HttpProblems.internalServerError(e,t,{detail:"Problem encountered authorizing the HTTP request"})):Oa.HttpProblems.unauthorized(e,t)}return e.headers.set("Authorization",`Bearer ${u}`),e},"CurityPhantomTokenInboundPolicy");xa.CurityPhantomTokenInboundPolicy=u0;function l0(e){return e.split(" ")[0]==="Bearer"?e.split(" ")[1]:null}s(l0,"getToken")});var pb=g(Na=>{"use strict";Object.defineProperty(Na,"__esModule",{value:!0});Na.FirebaseJwtInboundPolicy=void 0;var d0=qt(),p0=jt(),h0=s(async(e,t,r,n)=>((0,d0.optionValidator)(r,n).required("projectId","string").optional("allowUnauthenticatedRequests","boolean"),(0,p0.OpenIdJwtInboundPolicy)(e,t,{issuer:`https://securetoken.google.com/${r.projectId}`,audience:r.projectId,jwkUrl:"https://www.googleapis.com/service_accounts/v1/jwk/securetoken@system.gserviceaccount.com",allowUnauthenticatedRequests:r.allowUnauthenticatedRequests},n)),"FirebaseJwtInboundPolicy");Na.FirebaseJwtInboundPolicy=h0});var hb=g(Ca=>{"use strict";Object.defineProperty(Ca,"__esModule",{value:!0});Ca.FormDataToJsonInboundPolicy=void 0;var f0=He(),m0=s(async(e,t,r)=>{let n="application/x-www-form-urlencoded",i="multipart/form-data",o=e.headers.get("content-type")?.toLowerCase();if(!o||![i,n].includes(o))return r&&r.badRequestIfNotFormData?new Response(`Bad Request - expected content-type '${n}' or ${i}`,{status:400,statusText:"Bad Request"}):e;let a=await e.formData();if(r&&r.optionalHoneypotName&&a.get(r.optionalHoneypotName)!=="")return new Response("Bad Request",{status:400,statusText:"Bad Request"});let c={};for(let[d,p]of a)c[d]=p.toString();let u=new Headers(e.headers);return u.set("content-type","application/json"),u.delete("content-length"),new f0.ZuploRequest(e,{body:JSON.stringify(c),headers:u})},"FormDataToJsonInboundPolicy");Ca.FormDataToJsonInboundPolicy=m0});var fb=g(La=>{"use strict";Object.defineProperty(La,"__esModule",{value:!0});La.GeoFilterInboundPolicy=void 0;var y0=L(),g0=se(),Cn="__unknown__",b0=s(async(e,t,r,n)=>{let i={allow:{countries:Dn(r.allow?.countries,"allow.countries",n),regionCodes:Dn(r.allow?.regionCodes,"allow.regionCode",n),asns:Dn(r.allow?.asns,"allow.asOrganization",n)},block:{countries:Dn(r.block?.countries,"block.countries",n),regionCodes:Dn(r.block?.regionCodes,"block.regionCode",n),asns:Dn(r.block?.asns,"block.asOrganization",n)},ignoreUnknown:r.ignoreUnknown!==!1},o=t.incomingRequestProperties.country?.toLowerCase()??Cn,a=t.incomingRequestProperties.regionCode?.toLowerCase()??Cn,c=t.incomingRequestProperties.asn?.toString()??Cn,u=i.ignoreUnknown&&o===Cn,l=i.ignoreUnknown&&a===Cn,d=i.ignoreUnknown&&c===Cn,p=i.allow.countries,f=i.allow.regionCodes,h=i.allow.asns;if(p.length>0&&!p.includes(o)&&!u||f.length>0&&!f.includes(a)&&!l||h.length>0&&!h.includes(c)&&!d)return Ln(e,t,n,o,a,c);let y=i.block.countries,v=i.block.regionCodes,T=i.block.asns;return y.length>0&&y.includes(o)&&!u||v.length>0&&v.includes(a)&&!l||T.length>0&&T.includes(c)&&!d?Ln(e,t,n,o,a,c):e},"GeoFilterInboundPolicy");La.GeoFilterInboundPolicy=b0;function Ln(e,t,r,n,i,o){return t.log.debug(`Request blocked by GeoFilterInboundPolicy '${r}' (country: '${n}', regionCode: '${i}', asn: '${o}')`),g0.HttpProblems.forbidden(e,t,{geographicContext:{country:n,regionCode:i,asn:o}})}s(Ln,"blockedResponse");function Dn(e,t,r){if(typeof e=="string")return e.split(",").map(n=>n.trim().toLowerCase());if(typeof e>"u")return[];if(Array.isArray(e))return e.map(n=>n.trim().toLowerCase());throw new y0.ConfigurationError(`Invalid '${t}' for GeoFilterInboundPolicy '${r}': '${e}', must be a string or string[]`)}s(Dn,"toLowerStringArray")});var mb=g(Da=>{"use strict";Object.defineProperty(Da,"__esModule",{value:!0});Da.JWTScopeValidationInboundPolicy=void 0;var _0=s(async(e,t,r)=>{let n=e.user?.data.scope.split(" ")||[];if(!s((o,a)=>a.every(c=>o.includes(c)),"scopeChecker")(n,r.scopes)){let o={code:"UNAUTHORIZED",help_url:"https://zup.fail/UNAUTHORIZED",message:`JWT must have all the following scopes: ${r.scopes}`};return new Response(JSON.stringify(o),{status:401,statusText:"Unauthorized",headers:{"content-type":"application/json"}})}return e},"JWTScopeValidationInboundPolicy");Da.JWTScopeValidationInboundPolicy=_0});var gb=g(Ua=>{"use strict";Object.defineProperty(Ua,"__esModule",{value:!0});Ua.MockApiInboundPolicy=void 0;var E0=se(),w0=s(async(e,t,r,n)=>{let i=t.route.raw().responses;if(!i)return bp(n,e,t,"No responses defined in the OpenAPI document. Add some responses with examples to use this policy.");let o=Object.keys(i),a=[];if(o.length===0)return bp(n,e,t,"No response object defined under responses in the OpenAPI document. Add some response objects with examples to use this policy.");if(o.forEach(c=>{i[c].content&&Object.keys(i[c].content).forEach(l=>{let d=i[c].content[l].examples;d&&Object.keys(d).forEach(f=>{a.push({responseName:c,contentName:l,exampleName:f,exampleValue:d[f]})})})}),a=a.filter(c=>!(r.responsePrefixFilter&&!c.responseName.startsWith(r.responsePrefixFilter)||r.contentType&&c.contentName!==r.contentType||r.exampleName&&c.exampleName!==r.exampleName)),r.random&&a.length>1){let c=Math.floor(Math.random()*a.length);return yb(a[c])}else return a.length>0?yb(a[0]):bp(n,e,t,"No examples matching the mocking options found in the OpenAPI document. Add examples to the OpenAPI document matching the options for this policy or change the mocking options to match the examples in the OpenAPI document.")},"MockApiInboundPolicy");Ua.MockApiInboundPolicy=w0;function yb(e){let t=JSON.stringify(e.exampleValue,null,2),r=new Headers;switch(r.set("Content-Type",e.contentName),e.responseName){case"1XX":return new Response(t,{status:100,headers:r});case"2XX":return new Response(t,{status:200,headers:r});case"3XX":return new Response(t,{status:300,headers:r});case"4XX":return new Response(t,{status:400,headers:r});case"5XX":case"default":return new Response(t,{status:500,headers:r});default:return new Response(t,{status:Number(e.responseName),headers:r})}}s(yb,"generateResponse");var bp=s((e,t,r,n)=>{let i=`Error in policy: ${e} - On route ${t.method} ${r.route.path}. ${n}`;return E0.HttpProblems.internalServerError(t,r,{detail:i})},"getProblemDetailResponse")});var vb=g(Un=>{"use strict";Object.defineProperty(Un,"__esModule",{value:!0});Un.MoesifInboundPolicy=Un.setMoesifContext=void 0;var v0=L(),T0=ve(),S0="Incoming",I0={logRequestBody:!0,logResponseBody:!0};function bb(e){let t={};return e.forEach((r,n)=>{t[n]=r}),t}s(bb,"headersToObject");function _b(){return new Date().toISOString()}s(_b,"timestamp");var _p=new WeakMap,P0={};function A0(e,t){let r=_p.get(e);r||(r=P0);let n=Object.assign({...r},t);_p.set(e,n)}s(A0,"setMoesifContext");Un.setMoesifContext=A0;async function Eb(e,t){let r=e.headers.get("content-type");if(r&&r.indexOf("json")!==0)try{return await e.clone().json()}catch(i){t.log.error(i)}let n=await e.clone().text();return t.log.debug({textBody:n}),n}s(Eb,"readBody");var R0={},Ep;function wb(){if(!Ep)throw new v0.RuntimeError("Invalid State - no _lastLogger");return Ep}s(wb,"getLastLogger");function O0(e){let t=R0[e];return t||(t=new T0.BatchDispatch("moesif-inbound",100,async r=>{let n=JSON.stringify(r);wb().debug("posting",n);let i=await fetch("https://api.moesif.net/v1/events/batch",{method:"POST",headers:{"content-type":"application/json","X-Moesif-Application-Id":e},body:n});i.ok||wb().error({status:i.status,body:await i.text()})})),t}s(O0,"getDispatcher");async function x0(e,t,r,n){Ep=t.log;let i=_b(),o=Object.assign(I0,r);if(!o.applicationId)throw new Error(`Invalid configuration for MoesifInboundPolicy '${n}' - applicationId is required`);let a=o.logRequestBody?await Eb(e,t):void 0;return t.addResponseSendingFinalHook(async(c,u)=>{let l=O0(o.applicationId),d=e.headers.get("true-client-ip"),p=_p.get(t)??{},f={time:i,uri:e.url,verb:e.method,body:a,ip_address:d??void 0,api_version:p.apiVersion,headers:bb(e.headers)},h=o.logResponseBody?await Eb(c,t):void 0,y={time:_b(),status:c.status,headers:bb(c.headers),body:h},v={request:f,response:y,user_id:p.userId??u.user?.sub,session_token:p.sessionToken,company_id:p.companyId,metadata:p.metadata,direction:S0};l.enqueue(v),t.waitUntil(l.waitUntilFlushed())}),e}s(x0,"MoesifInboundPolicy");Un.MoesifInboundPolicy=x0});var Tb=g(ka=>{"use strict";Object.defineProperty(ka,"__esModule",{value:!0});ka.OktaJwtInboundPolicy=void 0;var N0=jt(),C0=s(async(e,t,r,n)=>(0,N0.OpenIdJwtInboundPolicy)(e,t,{issuer:r.issuerUrl,audience:r.audience,jwkUrl:`${r.issuerUrl}/v1/keys`,allowUnauthenticatedRequests:r.allowUnauthenticatedRequests},n),"OktaJwtInboundPolicy");ka.OktaJwtInboundPolicy=C0});var Sb=g(Ma=>{"use strict";Object.defineProperty(Ma,"__esModule",{value:!0});Ma.PropelAuthJwtInboundPolicy=void 0;var L0=(vs(),Xi(ws)),D0=jt(),wp,U0=s(async(e,t,r,n)=>{if(!wp)try{wp=await(0,L0.importSPKI)(r.verifierKey,"RS256")}catch(i){throw t.log.error("Could not import verifier key"),i}return(0,D0.OpenIdJwtInboundPolicy)(e,t,{issuer:r.authUrl,secret:wp,allowUnauthenticatedRequests:r.allowUnauthenticatedRequests,subPropertyName:"user_id"},n)},"PropelAuthJwtInboundPolicy");Ma.PropelAuthJwtInboundPolicy=U0});var Ib=g(G=>{"use strict";Object.defineProperty(G,"__esModule",{value:!0});G.throwIfStateNotObject=G.throwIfStateNotNumber=G.throwIfStateNotString=G.throwIfStateUndefinedOrNull=G.throwIfStateUndefined=G.throwIfOptionNotObject=G.throwIfOptionNotNumber=G.throwIfOptionNotString=G.throwIfOptionUndefinedOrNull=G.throwIfOptionUndefined=G.OptionTypeError=G.OptionUndefinedError=G.throwIfNotNumber=G.throwIfNotString=G.throwIfUndefinedOrNull=G.throwIfUndefined=G.ArgumentTypeError=G.ArgumentUndefinedError=G.ValidationError=void 0;var je=Dt(),et=class extends Error{static{s(this,"ValidationError")}constructor(t){super(t)}};G.ValidationError=et;var Ri=class extends et{static{s(this,"ArgumentUndefinedError")}constructor(t){super(`The argument '${t}' is undefined.`)}};G.ArgumentUndefinedError=Ri;var Oi=class extends et{static{s(this,"ArgumentTypeError")}constructor(t,r){super(`The argument '${t}' must be of type '${r}'.`)}};G.ArgumentTypeError=Oi;function k0(e,t){if((0,je.isUndefined)(e))throw new Ri(t)}s(k0,"throwIfUndefined");G.throwIfUndefined=k0;function vp(e,t){if((0,je.isUndefinedOrNull)(e))throw new Ri(t)}s(vp,"throwIfUndefinedOrNull");G.throwIfUndefinedOrNull=vp;function M0(e,t){if(vp(e,t),!(0,je.isString)(e))throw new Oi(t,"string")}s(M0,"throwIfNotString");G.throwIfNotString=M0;function H0(e,t){if(vp(e,t),!(0,je.isNumber)(e))throw new Oi(t,"number")}s(H0,"throwIfNotNumber");G.throwIfNotNumber=H0;var xi=class extends et{static{s(this,"OptionUndefinedError")}constructor(t,r,n){super(`The option '${n}' on the ${t} named '${r}' is undefined.`)}};G.OptionUndefinedError=xi;var kn=class extends et{static{s(this,"OptionTypeError")}constructor(t,r,n,i){super(`The option '${n}' on the ${t} named '${r}' must be of type '${i}'.`)}};G.OptionTypeError=kn;function F0(e,t,r,n){if((0,je.isUndefined)(n))throw new xi(e,t,r)}s(F0,"throwIfOptionUndefined");G.throwIfOptionUndefined=F0;function Ha(e,t,r,n){if((0,je.isUndefinedOrNull)(n))throw new xi(e,t,r)}s(Ha,"throwIfOptionUndefinedOrNull");G.throwIfOptionUndefinedOrNull=Ha;function q0(e,t,r,n){if(Ha(e,t,r,n),!(0,je.isString)(n))throw new kn(e,t,r,"string")}s(q0,"throwIfOptionNotString");G.throwIfOptionNotString=q0;function $0(e,t,r,n){if(Ha(e,t,r,n),!(0,je.isNumber)(n))throw new kn(e,t,r,"number")}s($0,"throwIfOptionNotNumber");G.throwIfOptionNotNumber=$0;function j0(e,t,r,n){if(Ha(e,t,r,n),!(0,je.isObject)(n))throw new kn(e,t,r,"object")}s(j0,"throwIfOptionNotObject");G.throwIfOptionNotObject=j0;function V0(e,t){if((0,je.isUndefined)(e))throw new et(t)}s(V0,"throwIfStateUndefined");G.throwIfStateUndefined=V0;function Fa(e,t){if((0,je.isUndefinedOrNull)(e))throw new et(t)}s(Fa,"throwIfStateUndefinedOrNull");G.throwIfStateUndefinedOrNull=Fa;function G0(e,t){if(Fa(e,t),!(0,je.isString)(e))throw new et(t);return!0}s(G0,"throwIfStateNotString");G.throwIfStateNotString=G0;function B0(e,t){if(Fa(e,t),!(0,je.isNumber)(e))throw new et(t);return!0}s(B0,"throwIfStateNotNumber");G.throwIfStateNotNumber=B0;function K0(e,t){if(Fa(e,t),!(0,je.isObject)(e))throw new et(t);return!0}s(K0,"throwIfStateNotObject");G.throwIfStateNotObject=K0});var Pb=g(Mn=>{"use strict";Object.defineProperty(Mn,"__esModule",{value:!0});Mn.InMemoryRedisClient=Mn.StandardRedisClient=void 0;var Tp=L(),qa=Ib(),Sp=class e{static{s(this,"StandardRedisClient")}static instance;redisClientUrl;clientAuthToken;userAgent;deploymentName;constructor(t,r,n,i){this.redisClientUrl=t,this.clientAuthToken=r,this.deploymentName=n,this.userAgent=i}static initialize(t,r,n,i){return(0,qa.throwIfNotString)(t,"redisClientUrl"),(0,qa.throwIfNotString)(r,"clientAuthToken"),e.instance||(e.instance=new e(t,r,n,i)),e.instance}isEnabled(){return this.redisClientUrl!==void 0&&this.clientAuthToken!==void 0}async fetch({url:t,body:r,method:n,requestId:i}){(0,qa.throwIfNotString)(t,"url");let o=await fetch(`${this.redisClientUrl}${t}`,{method:n,body:r,headers:{"content-type":"application/json",authorization:`Bearer ${this.clientAuthToken}`,"zp-rid":i,"zp-dn":this.deploymentName,"User-Agent":this.userAgent}}),a=o.headers.get("Content-Type")?.includes("application/json")?await o.json():await o.text();if(o.ok)return a;throw o.status===401?new Tp.SystemError("Redis client failed with 401: Unauthorized"):new Tp.SystemError(`Redis client failed with (${o.status}): ${typeof a=="string"?a:JSON.stringify(a,null,2)}`)}};Mn.StandardRedisClient=Sp;var Ip=class{static{s(this,"InMemoryRedisClient")}keyValueStore;constructor(){this.keyValueStore=new Map}isEnabled(){return!0}fetch({url:t,body:r,method:n}){if((0,qa.throwIfNotString)(t,"url"),n==="POST"&&t==="/rate-limit"){let{incrBy:i,expire:o,key:a}=JSON.parse(r),c=Date.now()+o*1e3,u=this.keyValueStore.get(a);u?Date.now()>u.expiresAt?this.keyValueStore.set(a,{value:i,expiresAt:c}):this.keyValueStore.set(a,{value:u.value+i,expiresAt:u.expiresAt}):this.keyValueStore.set(a,{value:i,expiresAt:c});let l=this.keyValueStore.get(a);return Promise.resolve({count:l.value,ttlSeconds:Math.round((l.expiresAt-Date.now())/1e3)})}throw new Tp.SystemError("The in-memory redis client only supports /rate-limit calls")}};Mn.InMemoryRedisClient=Ip});var Nb=g(Va=>{"use strict";Object.defineProperty(Va,"__esModule",{value:!0});Va.RateLimitInboundPolicy=void 0;var J0=Sr(),z0=$t(),W0=io(),Vt=L(),Q0=se(),Ab=Le(),Ni=Y(),Rb=Pb(),Ob=Dt(),$a=(0,J0.debug)("zuplo:policies:RateLimitInboundPolicy"),Y0="strict",Z0=s(e=>{let t=e.headers.get("cf-connecting-ip")??e.headers.get("true-client-ip");if(t)return t;let r=e.headers.get("x-forwarded-for");return r?r.split(",")[0]:"127.0.0.1"},"getRealIP"),X0=s(async e=>({key:`ip-${Z0(e)}`}),"getIP"),eO=s(async e=>({key:`user-${e.user?.sub??"anonymous"}`}),"getUser"),tO=s(async()=>({key:"all-2d77ce9d-9a3c-4206-9ab2-668cfd271095"}),"getAll"),ja;function rO(e,t){let r;if(ja)return ja;if(Ni.Environment.instance.isLocalDevelopment)return t.info("Using in-memory redis client for local development."),r=new Rb.InMemoryRedisClient,ja=r,r;let{authApiJWT:n,redisURL:i}=Ni.Environment.instance;if(!(0,Ob.isString)(i))throw new Vt.SystemError(`RateLimitInboundPolicy '${e}' - rate limit service URL not configured`);if(!(0,Ob.isString)(n))throw new Vt.SystemError(`RateLimitInboundPolicy '${e}' - service authentication not configured`);if(i&&(r=Rb.StandardRedisClient.initialize(i,n,Ni.Environment.instance.deploymentName??"unknown",Ni.Environment.instance.systemUserAgent)),!r||!r.isEnabled())throw new Vt.SystemError(`RateLimitInboundPolicy '${e}' - no redis ('${r}') or redis.isEnabled ('${r?.isEnabled}) is false`);return ja=r,r}s(rO,"getRedisClient");async function xb(e,t,r,n,i){let o=Math.floor(t*60);return await r.fetch({url:"/rate-limit",method:"POST",body:JSON.stringify({incrBy:1,expire:o,key:e}),requestId:i})}s(xb,"getCountAndUpdateExpiry");function nO(e,t){let r;if(e.rateLimitBy==="function"){if(!e.identifier)throw new Vt.ConfigurationError(`RateLimitInboundPolicy '${t}' - If rateLimitBy set to 'function' options.identifier must be specified`);if(!e.identifier.module)throw new Vt.ConfigurationError(`RateLimitInboundPolicy '${t}' - If rateLimitBy set to 'function' options.identifier.module must be specified`);if(!e.identifier.export)throw new Vt.ConfigurationError(`RateLimitInboundPolicy '${t}' - If rateLimitBy set to 'function' options.identifier.export must be specified`);if(r=e.identifier.module[e.identifier.export],!r||typeof r!="function")throw new Vt.ConfigurationError(`RateLimitInboundPolicy '${t}' - Custom rate limit function must be a valid function`)}return s(async(i,o,a)=>{let c=await r(i,o,a);if(!c.key){let u=`RateLimitInboundPolicy '${a}' - Custom rate limit function must return a valid key property '${JSON.stringify(c,null,2)}'`;throw o.log.error(u),new Vt.RuntimeError(u)}return c},"outerFunction")}s(nO,"wrapUserFunction");var iO="Retry-After",oO=s(async(e,t,r,n)=>{let i=Date.now(),o=Ab.SystemLogMap.getLogger(t),a=s((u,l)=>{if(r.throwOnFailure)throw new Vt.SystemError(u,{cause:l});o.error(u,l)},"throwOrLog"),c=s((u,l)=>{let d={};return(!u||u==="retry-after")&&(d[iO]=l.toString()),Q0.HttpProblems.tooManyRequests(e,t,void 0,d)},"rateLimited");try{let l={function:nO(r,n),user:eO,ip:X0,all:tO}[r.rateLimitBy],d=await l(e,t,n),p=d.key,f=d.requestsAllowed??r.requestsAllowed,h=d.timeWindowMinutes??r.timeWindowMinutes,y=r.headerMode??"retry-after",v=rO(n,o),S=`bucket/${Ni.Environment.instance.build.BUILD_ID}/${n}/${p}`;if((r.mode??Y0)==="async"){let C=await(0,z0.getPolicyCacheName)(n,r),re=new W0.ZoneCache(C,{logger:Ab.SystemLogMap.getLogger(t)}),ne=xb(S,h,v,o,t.requestId),me=await re.get(S);if(me!==void 0&&me<=Date.now()){$a(`RateLimitInboundPolicy '${n}' - returning 429 from cache for '${S}' (async mode)`);let Be=Math.round((me-Date.now())/1e3);return c(y,Be)}return t.addEventListener("responseSending",Be=>{try{let E=Be,H=E.mutableResponse;E.mutableResponse=(async()=>{let Ce=await ne;if(Ce.count>f){let nu=Date.now()+Ce.ttlSeconds*1e3;return re.put(S,nu,Ce.ttlSeconds).catch(fh=>{throw o.error(fh),fh}),$a(`RateLimitInboundPolicy '${n}' - returning 429 from redis for '${S}' (async mode)`),c(y,Ce.ttlSeconds)}return H})()}catch(E){o.error(`RateLimitInboundPolicy '${n}' -error in responseSending`,E)}}),e}let j=await xb(S,h,v,o,t.requestId);return j.count>f?($a(`RateLimitInboundPolicy '${n}' - returning 429 from redis for '${S}' (strict mode)`),c(y,j.ttlSeconds)):e}catch(u){return a(u.message,u),e}finally{let u=Date.now()-i;$a(`RateLimitInboundPolicy '${n}' - latency ${u}ms`)}},"RateLimitInboundPolicy");Va.RateLimitInboundPolicy=oO});var Ub=g(Ga=>{"use strict";Object.defineProperty(Ga,"__esModule",{value:!0});Ga.ReadmeMetricsInboundPolicy=void 0;var sO=ve(),Pp=Y(),Cb=ni(),Ap;function Lb(e){let t=[];for(let[r,n]of e)t.push({name:r,value:n});return t}s(Lb,"headersToNameValuePairs");function aO(e){let t=[];return Object.entries(e).forEach(([r,n])=>{t.push({name:r,value:n})}),t}s(aO,"queryToNameValueParis");function cO(e){if(e===null)return;let t=parseFloat(e);if(!isNaN(t))return t}s(cO,"parseIntOrUndefined");var Db={};async function uO(e,t,r,n){let i=new Date,o=Date.now();return Ap||(Ap={name:"zuplo",version:Pp.Environment.instance.build.ZUPLO_VERSION,comment:`zuplo/${Pp.Environment.instance.build.ZUPLO_VERSION}`}),t.addResponseSendingFinalHook(async a=>{try{let c=r.userLabelPropertyPath&&e.user?(0,Cb.getValueFromRequestUser)(e.user,r.userLabelPropertyPath,"userLabelPropertyPath"):e.user?.sub,u=r.userEmailPropertyPath&&e.user?(0,Cb.getValueFromRequestUser)(e.user,r.userEmailPropertyPath,"userEmailPropertyPath"):void 0,l={clientIPAddress:e.headers.get("true-client-ip")??"",development:r.development!==void 0?r.development:Pp.Environment.instance.isDeno,group:{label:c,email:u,id:e.user?.sub??"anonymous"},request:{log:{creator:Ap,entries:[{startedDateTime:i.toISOString(),time:Date.now()-o,request:{method:e.method,url:r.useFullRequestPath?new URL(e.url).pathname:t.route.path,httpVersion:"2",headers:Lb(e.headers),queryString:aO(e.query)},response:{status:a.status,statusText:a.statusText,headers:Lb(a.headers),content:{size:cO(e.headers.get("content-length"))}}}]}}},d=Db[r.apiKey];if(!d){let p=r.apiKey;d=new sO.BatchDispatch("readme-metering-inbound-policy",10,async f=>{try{let h=r.url??"https://metrics.readme.io/request",y=await fetch(h,{method:"POST",body:JSON.stringify(f),headers:{"content-type":"application/json",authorization:`Basic ${btoa(p+":")}`}});y.status!==202&&t.log.error(`Unexpected response in ReadmeMeteringInboundPolicy '${n}'. ${y.status}: '${await y.text()}'`)}catch(h){throw t.log.error(`Error in ReadmeMeteringInboundPolicy '${n}': '${h.message}'`),h}}),Db[p]=d}d.enqueue(l),t.waitUntil(d.waitUntilFlushed())}catch(c){t.log.error(c)}}),e}s(uO,"ReadmeMetricsInboundPolicy");Ga.ReadmeMetricsInboundPolicy=uO});var kb=g(Ba=>{"use strict";Object.defineProperty(Ba,"__esModule",{value:!0});Ba.RemoveHeadersInboundPolicy=void 0;var lO=L(),dO=He(),pO=s(async(e,t,r,n)=>{let i=r?.headers;if(!i||!Array.isArray(i)||i.length===0)throw new lO.ConfigurationError(`RemoveHeadersInboundPolicy '${n}' options.headers must be a non-empty string array of header names`);let o=new Headers(e.headers);return i.forEach(c=>{o.delete(c)}),new dO.ZuploRequest(e,{headers:o})},"RemoveHeadersInboundPolicy");Ba.RemoveHeadersInboundPolicy=pO});var Mb=g(Ka=>{"use strict";Object.defineProperty(Ka,"__esModule",{value:!0});Ka.RemoveHeadersOutboundPolicy=void 0;var hO=L(),fO=s(async(e,t,r,n,i)=>{let o=n?.headers;if(!o||!Array.isArray(o)||o.length===0)throw new hO.ConfigurationError(`RemoveHeadersOutboundPolicy '${i}' options.headers must be a non-empty string array of header names`);let a=new Headers(e.headers);return o.forEach(u=>{a.delete(u)}),new Response(e.body,{headers:a,status:e.status,statusText:e.statusText})},"RemoveHeadersOutboundPolicy");Ka.RemoveHeadersOutboundPolicy=fO});var Hb=g(Ja=>{"use strict";Object.defineProperty(Ja,"__esModule",{value:!0});Ja.RemoveQueryParamsInboundPolicy=void 0;var mO=L(),yO=He(),gO=s(async(e,t,r,n)=>{let i=r.params;if(!i||!Array.isArray(i)||i.length===0)throw new mO.ConfigurationError(`RemoveQueryParamsInboundPolicy '${n}' options.params must be a non-empty string array of header names`);let o=new URL(e.url);return i.forEach(c=>{o.searchParams.delete(c)}),new yO.ZuploRequest(o.toString(),e)},"RemoveQueryParamsInboundPolicy");Ja.RemoveQueryParamsInboundPolicy=gO});var Fb=g(za=>{"use strict";Object.defineProperty(za,"__esModule",{value:!0});za.ReplaceStringOutboundPolicy=void 0;var bO=s(async(e,t,r,n)=>{let i=await e.text(),o=n.mode==="regexp"?new RegExp(n.match,"gm"):n.match,a=i.replaceAll(o,n.replaceWith);return new Response(a,{headers:e.headers,status:e.status,statusText:e.statusText})},"ReplaceStringOutboundPolicy");za.ReplaceStringOutboundPolicy=bO});var $b=g(Wa=>{"use strict";Object.defineProperty(Wa,"__esModule",{value:!0});Wa.RequestSizeLimitInboundPolicy=void 0;var qb=s(()=>new Response("Maximum request size exceeded",{status:413,statusText:"Payload Too Large"}),"payloadTooLarge"),_O=s(async(e,t,r)=>{let n=r.trustContentLengthHeader??!1;if(["GET","HEAD"].includes(e.method))return e;let i=e.headers.get("content-length"),o=i!==null?parseInt(i):void 0;return o&&!isNaN(o)&&o>r.maxSizeInBytes?qb():o&&n?e:(await e.clone().text()).length>r.maxSizeInBytes?qb():e},"RequestSizeLimitInboundPolicy");Wa.RequestSizeLimitInboundPolicy=_O});var Qa=g(tt=>{"use strict";Object.defineProperty(tt,"__esModule",{value:!0});tt.sanitizedIdentifierName=tt.getIdForRefSchema=tt.getIdForRequestBodySchema=tt.getIdForParameterSchema=tt.getRawOperationDataIdentifierName=void 0;function EO(e,t,r){return`_${Mr(e+"_"+t+"_"+r)}`}s(EO,"getRawOperationDataIdentifierName");tt.getRawOperationDataIdentifierName=EO;function wO(e,t,r,n){return`_${Mr(e.toLowerCase())}_`+t.toLowerCase()+"_"+r.toLowerCase()+`_${n.toLowerCase()}`}s(wO,"getIdForParameterSchema");tt.getIdForParameterSchema=wO;function vO(e,t,r){return`_${Mr(e.toLowerCase())}_`+t.toLowerCase()+`_rb_${Mr(r.toLowerCase())}`}s(vO,"getIdForRequestBodySchema");tt.getIdForRequestBodySchema=vO;function TO(e,t){return`_${Mr(e)}__${Mr(t)}`}s(TO,"getIdForRefSchema");tt.getIdForRefSchema=TO;function Mr(e){let t=[];for(let r=0;r<e.length;r++){let n=e.charCodeAt(r);n>="0".charCodeAt(0)&&n<="9".charCodeAt(0)||n>="A".charCodeAt(0)&&n<="Z".charCodeAt(0)||n>="a".charCodeAt(0)&&n<="z".charCodeAt(0)?t.push(e.charAt(r)):t.push("_")}return t.join("")}s(Mr,"sanitizedIdentifierName");tt.sanitizedIdentifierName=Mr});var Ci=g(De=>{"use strict";Object.defineProperty(De,"__esModule",{value:!0});De.getErrorsFromValidator=De.shouldReject=De.shouldLog=De.logErrors=De.validateParameters=De.getParametersForOperation=void 0;var SO=mn(),IO=Qa(),PO=s(e=>{let t=e.route.raw();return t.parameters?t.parameters.map(n=>({name:n.name,location:n.in,required:n.required,deprecated:n.deprecated,allowEmptyValue:n.allowEmptyValue})):[]},"getParametersForOperation");De.getParametersForOperation=PO;var AO=s((e,t,r,n,i)=>{let o=[],a=!0,c=[];return e.forEach(u=>{if(u.required&&!t[u.name])a=!1,o.push(`Required ${i} parameter '${u.name}' not found`);else{let l=(0,IO.getIdForParameterSchema)(r,n,i,u.name),d=SO.Gateway.instance.schemaValidator[l],p=d(t[u.name]),f=(0,De.getErrorsFromValidator)(d.errors);p||(a=!1,c.push(`${i} parameter: ${u.name} : ${t[u.name]}`),o.push(`Invalid value for ${i} parameter: '${u.name}' ${f.join(", ")}`))}}),{isValid:a,invalidValues:c,errors:o}},"validateParameters");De.validateParameters=AO;var RO=s((e,t,r,n,i)=>{n?e.log[t](r,n,i):e.log[t](r,i)},"logErrors");De.logErrors=RO;var OO=s(e=>e==="log-only"||e==="reject-and-log","shouldLog");De.shouldLog=OO;var xO=s(e=>e==="reject-only"||e==="reject-and-log","shouldReject");De.shouldReject=xO;var NO=s(e=>e?.map(t=>t.instancePath===void 0||t.instancePath===""?t.message??"Unknown validation error":t.instancePath.replace("/","")+" "+t.message)??["Unknown validation error"],"getErrorsFromValidator");De.getErrorsFromValidator=NO});var jb=g(Za=>{"use strict";Object.defineProperty(Za,"__esModule",{value:!0});Za.handleBodyValidation=void 0;var CO=mn(),Ya=se(),LO=Qa(),Je=Ci();async function DO(e,t,r){if(!r.validateBody||r.validateBody==="none")return;let n;try{n=await t.clone().json()}catch(h){let y=`Error in request body for method : ${t.method} in route: ${e.route.path} with content-type: ${t.headers.get("Content-Type")}`,v=Ya.HttpProblems.badRequest(t,e,{detail:`${y}, see errors property for more details`,errors:`${h}`});if((0,Je.shouldLog)(r.validateBody)&&(0,Je.logErrors)(e,r.logLevel??"info",y,[n],h),(0,Je.shouldReject)(r.validateBody))return v}if(!t.headers.get("Content-Type")){let h=`No content-type header defined in incoming request to ${t.method} in route: ${e.route.path}`,y=Ya.HttpProblems.badRequest(t,e,{detail:h});return(0,Je.shouldLog)(r.validateBody)&&(0,Je.logErrors)(e,r.logLevel??"info",h,[n],[h]),(0,Je.shouldReject)(r.validateBody)?y:void 0}let i=t.headers.get("Content-Type"),o=i.indexOf(";");o>-1&&(i=i.substring(0,o));let a=(0,LO.getIdForRequestBodySchema)(e.route.path,t.method,i),c=CO.Gateway.instance.schemaValidator[a];if(!c){let h=`No schema defined for method: ${t.method} in route: ${e.route.path} with content-type: ${t.headers.get("Content-Type")}`,y=Ya.HttpProblems.badRequest(t,e,{detail:h});return(0,Je.shouldLog)(r.validateBody)&&(0,Je.logErrors)(e,r.logLevel??"info",h,[n],[h]),(0,Je.shouldReject)(r.validateBody)?y:void 0}if(c(n))return;let l=c.errors,d="Request body did not pass validation",p=(0,Je.getErrorsFromValidator)(l),f=Ya.HttpProblems.badRequest(t,e,{detail:`${d}, see errors property for more details`,errors:p});if((0,Je.shouldLog)(r.validateBody)&&(0,Je.logErrors)(e,r.logLevel??"info",d,[n],p),(0,Je.shouldReject)(r.validateBody))return f}s(DO,"handleBodyValidation");Za.handleBodyValidation=DO});var Vb=g(Xa=>{"use strict";Object.defineProperty(Xa,"__esModule",{value:!0});Xa.handleHeadersValidation=void 0;var UO=se(),Li=Ci();function kO(e,t,r){if(!r.validateHeaders||r.validateHeaders==="none")return;let n={};t.headers.forEach((a,c)=>{n[c]=a});let i=(0,Li.getParametersForOperation)(e),o=(0,Li.validateParameters)(i.filter(a=>a.location==="header"),n,e.route.path,t.method.toLowerCase(),"header");if(!o.isValid){let a="Header validation failed",c=UO.HttpProblems.badRequest(t,e,{detail:`${a}, see errors property for more details`,errors:o.errors});if((0,Li.shouldLog)(r.validateHeaders)&&(0,Li.logErrors)(e,r.logLevel??"info",a,o.invalidValues,o.errors),(0,Li.shouldReject)(r.validateHeaders))return c}}s(kO,"handleHeadersValidation");Xa.handleHeadersValidation=kO});var Gb=g(ec=>{"use strict";Object.defineProperty(ec,"__esModule",{value:!0});ec.handlePathParameterValidation=void 0;var MO=se(),Di=Ci();function HO(e,t,r){if(!r.validatePathParameters||r.validatePathParameters==="none")return;let n=(0,Di.getParametersForOperation)(e),i=(0,Di.validateParameters)(n.filter(o=>o.location==="path"),t.params,e.route.path,t.method.toLowerCase(),"path");if(!i.isValid){let o="Path parameters validation failed",a=MO.HttpProblems.badRequest(t,e,{detail:`${o}, see errors property for more details`,errors:i.errors});if((0,Di.shouldLog)(r.validatePathParameters)&&(0,Di.logErrors)(e,r.logLevel??"info",o,i.invalidValues,i.errors),(0,Di.shouldReject)(r.validatePathParameters))return a}}s(HO,"handlePathParameterValidation");ec.handlePathParameterValidation=HO});var Bb=g(tc=>{"use strict";Object.defineProperty(tc,"__esModule",{value:!0});tc.handleQueryParameterValidation=void 0;var FO=se(),Ui=Ci();function qO(e,t,r){if(!r.validateQueryParameters||r.validateQueryParameters==="none")return;let n=(0,Ui.getParametersForOperation)(e),i=(0,Ui.validateParameters)(n.filter(o=>o.location==="query"),t.query,e.route.path,t.method.toLowerCase(),"query");if(!i.isValid){let o="Query parameters validation failed",a=FO.HttpProblems.badRequest(t,e,{detail:`${o}, see errors property for more details`,errors:i.errors});if((0,Ui.shouldLog)(r.validateQueryParameters)&&(0,Ui.logErrors)(e,r.logLevel??"info",o,i.invalidValues,i.errors),(0,Ui.shouldReject)(r.validateQueryParameters))return a}}s(qO,"handleQueryParameterValidation");tc.handleQueryParameterValidation=qO});var Kb=g(Hr=>{"use strict";Object.defineProperty(Hr,"__esModule",{value:!0});Hr.SchemaBasedRequestValidation=Hr.RequestValidationInboundPolicy=void 0;var $O=jb(),jO=Vb(),VO=Gb(),GO=Bb(),BO=s(async(e,t,r)=>{let n=(0,GO.handleQueryParameterValidation)(t,e,r);if(n!==void 0||(n=(0,VO.handlePathParameterValidation)(t,e,r),n!==void 0)||(n=(0,jO.handleHeadersValidation)(t,e,r),n!==void 0))return n;let i=await(0,$O.handleBodyValidation)(t,e,r);return i!==void 0?i:e},"RequestValidationInboundPolicy");Hr.RequestValidationInboundPolicy=BO;Hr.SchemaBasedRequestValidation=Hr.RequestValidationInboundPolicy});var Jb=g(rc=>{"use strict";Object.defineProperty(rc,"__esModule",{value:!0});rc.RequireOriginInboundPolicy=void 0;var KO=L(),JO=se(),zO=s(async(e,t,r,n)=>{if(r.origins===void 0||r.origins.length===0)throw new KO.ConfigurationError(`RequireOriginInboundPolicy '${n}' configuration error - no allowed origins specified`);let i=typeof r.origins=="string"?r.origins.split(","):r.origins;i=i.map(a=>a.trim());let o=e.headers.get("origin");if(!o||!i.includes(o)){let a=r.failureDetail??"Forbidden";return JO.HttpProblems.forbidden(e,t,{detail:a})}return e},"RequireOriginInboundPolicy");rc.RequireOriginInboundPolicy=zO});var zb=g(nc=>{"use strict";Object.defineProperty(nc,"__esModule",{value:!0});nc.SetBodyInboundPolicy=void 0;var WO=He(),QO=s(async(e,t,r)=>new WO.ZuploRequest(e,{body:r.body}),"SetBodyInboundPolicy");nc.SetBodyInboundPolicy=QO});var Qb=g(ic=>{"use strict";Object.defineProperty(ic,"__esModule",{value:!0});ic.SetHeadersInboundPolicy=void 0;var Wb=L(),YO=He(),ZO=s(async(e,t,r,n)=>{let i=r.headers;if(!i||!Array.isArray(i)||i.length==0)throw new Wb.ConfigurationError(`SetHeadersInboundPolicy '${n}' options.headers must be a valid array of { name, value }`);let o=new Headers(e.headers);return i.forEach(c=>{if(!c.name||c.name.length===0)throw new Wb.ConfigurationError(`SetHeadersInboundPolicy '${n}' each option.headers[] entry must have a name property`);let u=c.overwrite===void 0?!0:c.overwrite;(!o.has(c.name)||u)&&o.set(c.name,c.value)}),new YO.ZuploRequest(e,{headers:o})},"SetHeadersInboundPolicy");ic.SetHeadersInboundPolicy=ZO});var Zb=g(oc=>{"use strict";Object.defineProperty(oc,"__esModule",{value:!0});oc.SetHeadersOutboundPolicy=void 0;var Yb=L(),XO=s(async(e,t,r,n,i)=>{let o=n.headers;if(!o||!Array.isArray(o)||o.length==0)throw new Yb.ConfigurationError(`SetHeadersOutboundPolicy '${i}' options.headers must be a valid array of { name, value }`);let a=new Headers(e.headers);return o.forEach(u=>{if(!u.name||u.name.length===0)throw new Yb.ConfigurationError(`SetHeadersOutboundPolicy '${i}' each option.headers[] entry must have a name property`);let l=u.overwrite===void 0?!0:u.overwrite;(!a.has(u.name)||l)&&a.set(u.name,u.value)}),new Response(e.body,{headers:a,status:e.status,statusText:e.statusText})},"SetHeadersOutboundPolicy");oc.SetHeadersOutboundPolicy=XO});var e_=g(sc=>{"use strict";Object.defineProperty(sc,"__esModule",{value:!0});sc.SetQueryParamsInboundPolicy=void 0;var Xb=L(),ex=He(),tx=s(async(e,t,r,n)=>{let i=r.params;if(!i||!Array.isArray(i)||i.length==0)throw new Xb.ConfigurationError(`SetQueryParamsInboundPolicy '${n}' options.params must be a valid array of { name, value }`);let o=new URL(e.url);return i.forEach(c=>{if(!c.name||c.name.length===0)throw new Xb.ConfigurationError(`SetQueryParamsInboundPolicy '${n}' each option.params[] entry must have a name property`);let u=c.overwrite===void 0?!0:c.overwrite;(!o.searchParams.has(c.name)||u)&&o.searchParams.set(c.name,c.value)}),new ex.ZuploRequest(o.toString(),e)},"SetQueryParamsInboundPolicy");sc.SetQueryParamsInboundPolicy=tx});var t_=g(ac=>{"use strict";Object.defineProperty(ac,"__esModule",{value:!0});ac.SetStatusOutboundPolicy=void 0;var rx=s(async(e,t,r,n,i)=>{if(!n.status||isNaN(n.status)||n.status<100||n.status>599)throw new Error(`Invalid SetStatusOutboundPolicy '${i}' - status must be a valid number between 100 and 599, not '${n.status}'`);return new Response(e.body,{headers:e.headers,status:n.status,statusText:n.statusText??e.statusText})},"SetStatusOutboundPolicy");ac.SetStatusOutboundPolicy=rx});var r_=g(cc=>{"use strict";Object.defineProperty(cc,"__esModule",{value:!0});cc.SleepInboundPolicy=void 0;var nx=L(),ix=s(async e=>new Promise(r=>{setTimeout(r,e)}),"sleep"),ox=s(async(e,t,r,n)=>{if(!r||r.sleepInMs===void 0||isNaN(r.sleepInMs))throw new nx.ConfigurationError(`SleepInboundPolicy '${n} must have a valid options.sleepInMs value`);return await ix(r.sleepInMs),e},"SleepInboundPolicy");cc.SleepInboundPolicy=ox});var i_=g(uc=>{"use strict";Object.defineProperty(uc,"__esModule",{value:!0});uc.SupabaseJwtInboundPolicy=void 0;var n_=L(),sx=se(),ax=He(),cx=qt(),ux=jt(),lx=s(async(e,t,r,n)=>{(0,cx.optionValidator)(r,n).required("secret","string").optional("allowUnauthenticatedRequests","boolean").optional("requiredClaims","object");let i={secret:r.secret,allowUnauthenticatedRequests:r.allowUnauthenticatedRequests??!1},o=await(0,ux.OpenIdJwtInboundPolicy)(e,t,i,n);if(o instanceof Response)return o;if(!(o instanceof ax.ZuploRequest))throw new n_.SystemError("Invalid State - SupabaseJwtInboundPolicy encountered a non-response that wasn't a ZuploRequest type')");let a=r.requiredClaims;if(!a)return o;let c=e.user?.data.app_metadata;if(!c)throw new n_.RuntimeError(`SupabaseJwtInboundPolicy policy '${n}' - has requiredClaims but the JWT token had no app_metadata property`);let u=Object.keys(a),l=[];return u.forEach(d=>{let p=a[d];Array.isArray(p)?p.includes(c[d])||l.push(d):p!==c[d]&&l.push(d)}),l.length>0?sx.HttpProblems.unauthorized(e,t,{detail:`Invalid JWT token - missing valid claims ${l.join(", ")}`}):o},"SupabaseJwtInboundPolicy");uc.SupabaseJwtInboundPolicy=lx});var s_=g(lc=>{"use strict";Object.defineProperty(lc,"__esModule",{value:!0});lc.UpstreamAzureAdServiceAuthInboundPolicy=void 0;var dx=$t(),px=Jt(),o_=L(),hx=Le(),fx=Ss(),mx=qt(),yx=s(async(e,t,r,n)=>{(0,mx.optionValidator)(r,n).required("activeDirectoryTenantId","string").required("activeDirectoryClientId","string").required("activeDirectoryClientSecret","string").optional("tokenRetries","number").optional("expirationOffsetSeconds","number");let i=await(0,dx.getPolicyCacheName)(n,r),o=new px.MemoryZoneReadThroughCache(i,{logger:hx.SystemLogMap.getLogger(t)}),a=await o.get(n);if(!a){let c=await gx(r,t);o.put(n,c.access_token,c.expires_in-(r.expirationOffsetSeconds??300)),a=c.access_token}return e.headers.set("Authorization",`Bearer ${a}`),e},"UpstreamAzureAdServiceAuthInboundPolicy");lc.UpstreamAzureAdServiceAuthInboundPolicy=yx;async function gx(e,t){let r=new URLSearchParams({client_id:e.activeDirectoryClientId,scope:`${e.activeDirectoryClientId}/.default`,client_secret:e.activeDirectoryClientSecret,grant_type:"client_credentials"}),n=await(0,fx.fetchRetry)({retries:e.tokenRetries??3,retryDelayMs:10},`https://login.microsoftonline.com/${e.activeDirectoryTenantId}/oauth2/v2.0/token`,{headers:{"content-type":"application/x-www-form-urlencoded"},method:"POST",body:r});if(n.status!==200){try{let o=await n.text();t.log.error("Could not get token from Azure AD",o)}catch{}throw new o_.RuntimeError("Could not get token from Azure AD")}let i=await n.json();if(i&&typeof i=="object"&&"access_token"in i&&typeof i.access_token=="string"&&"expires_in"in i&&typeof i.expires_in=="number")return{access_token:i.access_token,expires_in:i.expires_in};throw new o_.RuntimeError("Response returned from Azure AD is not in the expected format.")}s(gx,"getAccessToken")});var c_=g(dc=>{"use strict";Object.defineProperty(dc,"__esModule",{value:!0});dc.UpstreamFirebaseAdminAuthInboundPolicy=void 0;var bx=$t(),_x=Jt(),Ex=L(),wx=Le(),Rp=pn(),vx=qt(),a_="https://accounts.google.com/o/oauth2/token",Op,Tx=s(async(e,t,r,n)=>{(0,vx.optionValidator)(r,n).required("serviceAccountJson","string"),Op||(Op=await Rp.GcpServiceAccount.init(r.serviceAccountJson));let i={scope:["https://www.googleapis.com/auth/cloud-platform","https://www.googleapis.com/auth/firebase.database","https://www.googleapis.com/auth/firebase.messaging","https://www.googleapis.com/auth/identitytoolkit","https://www.googleapis.com/auth/userinfo.email"].join(" ")},o=await(0,bx.getPolicyCacheName)(n,r),a=new _x.MemoryZoneReadThroughCache(o,{logger:wx.SystemLogMap.getLogger(t)}),c=await a.get(n);if(!c){let u=await(0,Rp.getTokenFromGcpServiceAccount)({serviceAccount:Op,audience:a_,payload:i}),l=await(0,Rp.exchangeGgpJwtForIdToken)(a_,u,{retries:r.tokenRetries??3,retryDelayMs:10});if(!l.access_token)throw new Ex.RuntimeError("Invalid OAuth response from Firebase");c=l.access_token,a.put(n,c,(l.expires_in??3600)-(r.expirationOffsetSeconds??300))}return e.headers.set("Authorization",`Bearer ${c}`),e},"UpstreamFirebaseAdminAuthInboundPolicy");dc.UpstreamFirebaseAdminAuthInboundPolicy=Tx});var u_=g(pc=>{"use strict";Object.defineProperty(pc,"__esModule",{value:!0});pc.UpstreamFirebaseUserAuthInboundPolicy=void 0;var Sx=$t(),Ix=Jt(),Hn=L(),Px=Le(),Ax=lp(),xp=pn(),Rx=ni(),Ox=qt(),xx="https://identitytoolkit.googleapis.com/google.identity.identitytoolkit.v1.IdentityToolkit",Nx=["acr","amr","at_hash","aud","auth_time","azp","cnf","c_hash","exp","iat","iss","jti","nbf","nonce"],Np,Cx=s(async(e,t,r,n)=>{if((0,Ox.optionValidator)(r,n).required("serviceAccountJson","string").required("webApiKey","string").optional("developerClaims","object").optional("userId","string").optional("userIdPropertyPath","string"),!r.userId&&!r.userIdPropertyPath)throw new Hn.ConfigurationError(`Either 'userId' or 'userIdPropertyPath' options must be set on policy '${n}'.`);let i={};if(typeof r.developerClaims<"u"){for(let p in r.developerClaims)if(Object.prototype.hasOwnProperty.call(r.developerClaims,p)){if(Nx.indexOf(p)!==-1)throw new Hn.ConfigurationError(`Developer claim "${p}" is reserved and cannot be specified.`);i[p]=r.developerClaims[p]}}Np||(Np=await xp.GcpServiceAccount.init(r.serviceAccountJson));let o=r.userId;if(!o&&!r.userIdPropertyPath){if(!e.user)throw new Hn.RuntimeError("Unable to set userId for upstream auth policy as request.user is 'undefined'. Do you have an authentication policy before this policy?.");o=e.user?.sub}else if(r.userIdPropertyPath){if(!e.user)throw new Hn.RuntimeError(`Unable to apply userIdPropertyPath '${r.userIdPropertyPath}' as request.user is 'undefined'. Do you have an authentication policy before this policy?`);o=(0,Rx.getValueFromRequestUser)(e.user,r.userIdPropertyPath,"userIdPropertyPath")}if(!o)throw new Hn.RuntimeError(`Unable to determine user from for the policy ${n}`);let a=await(0,Sx.getPolicyCacheName)(n,r),c=new Ix.MemoryZoneReadThroughCache(a,{logger:Px.SystemLogMap.getLogger(t)}),u={uid:o,claims:i},l=await(0,Ax.sha256)(JSON.stringify(u)),d=await c.get(l);if(!d){let p=await(0,xp.getTokenFromGcpServiceAccount)({serviceAccount:Np,audience:xx,payload:u}),f=`https://identitytoolkit.googleapis.com/v1/accounts:signInWithCustomToken?key=${r.webApiKey}`,h=await(0,xp.exchangeFirebaseJwtForIdToken)(f,p,{retries:r.tokenRetries??3,retryDelayMs:10});if(!h.idToken)throw new Hn.RuntimeError("Invalid token response from Firebase");d=h.idToken,c.put(l,d,(h.expiresIn?parseInt(h.expiresIn):3600)-(r.expirationOffsetSeconds??300))}return e.headers.set("Authorization",`Bearer ${d}`),e},"UpstreamFirebaseUserAuthInboundPolicy");pc.UpstreamFirebaseUserAuthInboundPolicy=Cx});var d_=g(hc=>{"use strict";Object.defineProperty(hc,"__esModule",{value:!0});hc.UpstreamGcpJwtInboundPolicy=void 0;var l_=pn(),Lx=qt(),Cp,Dx=s(async(e,t,r,n)=>{(0,Lx.optionValidator)(r,n).required("audience","string").required("serviceAccountJson","string"),Cp||(Cp=await l_.GcpServiceAccount.init(r.serviceAccountJson));let i=await(0,l_.getTokenFromGcpServiceAccount)({serviceAccount:Cp,audience:r.audience});return e.headers.set("Authorization",`Bearer ${i}`),e},"UpstreamGcpJwtInboundPolicy");hc.UpstreamGcpJwtInboundPolicy=Dx});var h_=g(fc=>{"use strict";Object.defineProperty(fc,"__esModule",{value:!0});fc.UpstreamGcpServiceAuthInboundPolicy=void 0;var Ux=$t(),kx=lu(),Mx=Jt(),Hx=L(),Lp=pn(),Fx=qt(),p_="https://www.googleapis.com/oauth2/v4/token",Dp,qx=s(async(e,t,r,n)=>{(0,Fx.optionValidator)(r,n).required("audience","string").required("serviceAccountJson","string").optional("tokenRetries","number").optional("expirationOffsetSeconds","number"),Dp||(Dp=await Lp.GcpServiceAccount.init(r.serviceAccountJson));let i=await(0,Ux.getPolicyCacheName)(n,r),o;r.useMemoryCacheOnly?o=new kx.MemoryCache(i):o=new Mx.MemoryZoneReadThroughCache(i,t);let a=await o.get(n);if(!a){let c=await(0,Lp.getTokenFromGcpServiceAccount)({serviceAccount:Dp,audience:p_,payload:{target_audience:`${r.audience}`}}),{id_token:u}=await(0,Lp.exchangeGgpJwtForIdToken)(p_,c,{retries:r.tokenRetries??3,retryDelayMs:10});if(!u)throw new Hx.RuntimeError("Invalid token response from GCP");a=u,o.put(n,a,3600-(r.expirationOffsetSeconds??300))}return e.headers.set("Authorization",`Bearer ${a}`),e},"UpstreamGcpServiceAuthInboundPolicy");fc.UpstreamGcpServiceAuthInboundPolicy=qx});var m_=g(mc=>{"use strict";Object.defineProperty(mc,"__esModule",{value:!0});mc.ValidateJsonSchemaInbound=void 0;var $x=L(),f_=se(),jx=s(async(e,t,r)=>{let n=e.clone(),i;try{i=await n.json()}catch{return f_.HttpProblems.badRequest(e,t,{detail:"Invalid JSON body - expected well-formed JSON document"})}if(r.validator(i))return e;let{errors:a}=r.validator;if(!a)throw new $x.SystemError("Invalid state - validator error object is undefined even though validation failed.");let c=a.map(u=>u.instancePath===void 0||u.instancePath===""?"Body "+u.message:u.instancePath.replace("/","")+" "+u.message);return f_.HttpProblems.badRequest(e,t,{detail:"Incoming body did not pass schema validation",errors:c})},"ValidateJsonSchemaInbound");mc.ValidateJsonSchemaInbound=jx});var g_=g(yc=>{"use strict";Object.defineProperty(yc,"__esModule",{value:!0});yc.MeteringInboundPolicy=void 0;var y_=js(),Up=L(),Vx=se(),Gx=Le(),Bx=Y(),Kx=s(async(e,t,r,n)=>{let i=Gx.SystemLogMap.getLogger(t);t.addResponseSendingFinalHook(async(d,p,f)=>{let h=y_.ContextData.get(f,"subscription");if((r.allowRequestsWithoutSubscription??!1)&&!h)return;let v=r.bucketId;if(!v){f.log.error(`MeteringInboundPolicy '${n}' - no bucketName property provided`);return}let{authApiJWT:T,meteringServiceUrl:S}=Bx.Environment.instance;d.ok&&h&&r.meters&&fetch(`${S}/internal/v1/metering/${v}/subscriptions/${h.id}/quotas/consume`,{headers:{Authorization:`Bearer ${T}`},method:"POST",body:JSON.stringify({meters:r.meters})}).catch(M=>{f.log.error(`MeteringInboundPolicy '${n}' -error in serviceResponse`),i.error(`MeteringInboundPolicy '${n}' -error in serviceResponse`,M)})});let o=y_.ContextData.get(t,"subscription"),a=r.allowRequestsWithoutSubscription??!1,c=r.allowRequestsOverQuota??!1;if(!o){if(a)return e;throw new Up.ConfigurationError("Subscription is not available for user")}if(o&&Object.keys(o.quotas).length===0)throw new Up.ConfigurationError("Quota is not set up for the user's subscription");let l=Object.keys(r.meters).filter(d=>!Object.keys(o.quotas).includes(d));if(l.length>0)throw new Up.ConfigurationError(`The following policy meters are not present in the subscription: ${l.join(", ")}`);for(let d of Object.keys(o.quotas))if(o.quotas[d]<=0&&!c)return Vx.HttpProblems.tooManyRequests(e,t,{detail:`Quota exceeded for meter '${d}'`,title:"Quota Exceeded"});return e},"MeteringInboundPolicy");yc.MeteringInboundPolicy=Kx});var b_=g(gc=>{"use strict";Object.defineProperty(gc,"__esModule",{value:!0});gc.LoadSubscriptionInboundPolicy=void 0;var Jx=js(),zx=L(),kp=se(),Wx=Le(),Qx=Y(),Yx=s(async(e,t,r,n)=>{let i=Wx.SystemLogMap.getLogger(t),o=r.allowRequestsWithoutSubscription??!1,a=e.user;if(!a)return o?e:kp.HttpProblems.unauthorized(e,t,{detail:"Unable to check subscription for anonymous user"});let c=r.bucketId;if(!c)throw new zx.ConfigurationError(`LoadSubscriptionInboundPolicy '${n}' - no bucketName property provided`);let{authApiJWT:u,meteringServiceUrl:l}=Qx.Environment.instance,{sub:d}=a,p,f;try{if(p=await fetch(`${l}/internal/v1/metering/${c}/subscriptions?customerKey=${d}&status=active`,{headers:{Authorization:`Bearer ${u}`},method:"GET"}),!p.ok)return t.log.error(await p.text()),kp.HttpProblems.forbidden(e,t);f=await p.json()}catch(y){i.error(`LoadSubscriptionInboundPolicy '${n}' -error in serviceResponse`,y)}if((!f||!f.data||f.data.length===0)&&!o)return kp.HttpProblems.unauthorized(e,t,{detail:"No valid, active subscription found"});if((!f||!f.data||f.data.length===0)&&o)return e;let h=f&&f.data?f.data[0]:void 0;return Jx.ContextData.set(t,"subscription",h),e},"LoadSubscriptionInboundPolicy");gc.LoadSubscriptionInboundPolicy=Yx});var __=g(bc=>{"use strict";Object.defineProperty(bc,"__esModule",{value:!0});bc.ServiceProviderImpl=void 0;var Zx=L(),Mp=class e{static{s(this,"ServiceProviderImpl")}static#e;services=new Map;constructor(){}static getInstance(){return e.#e||(e.#e=new e),e.#e}setInstance(t){e.#e=t}addService(t,r){if(this.services.get(t))throw new Zx.SystemError(`A service with the name ${t} already exists -- you cannot have duplicate services`);this.services.set(t,r)}getService(t){return this.services.get(t)}};bc.ServiceProviderImpl=Mp});var x_=g(m=>{"use strict";var Xx=m&&m.__createBinding||(Object.create?function(e,t,r,n){n===void 0&&(n=r);var i=Object.getOwnPropertyDescriptor(t,r);(!i||("get"in i?!t.__esModule:i.writable||i.configurable))&&(i={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,i)}:function(e,t,r,n){n===void 0&&(n=r),e[n]=t[r]}),Hp=m&&m.__exportStar||function(e,t){for(var r in e)r!=="default"&&!Object.prototype.hasOwnProperty.call(t,r)&&Xx(t,e,r)},eN=m&&m.__importDefault||function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(m,"__esModule",{value:!0});m.RateLimitInboundPolicy=m.BasicRateLimitInboundPolicy=m.PropelAuthJwtInboundPolicy=m.OpenIdJwtInboundPolicy=m.OktaJwtInboundPolicy=m.setMoesifContext=m.MoesifInboundPolicy=m.MockApiInboundPolicy=m.JWTScopeValidationInboundPolicy=m.GeoFilterInboundPolicy=m.FormDataToJsonInboundPolicy=m.FirebaseJwtInboundPolicy=m.CurityPhantomTokenInboundPolicy=m.CreditsMeteringInboundPolicy=m.CompositeInboundPolicy=m.CognitoJwtInboundPolicy=m.ClerkJwtInboundPolicy=m.ClearHeadersOutboundPolicy=m.ClearHeadersInboundPolicy=m.ChangeMethodInboundPolicy=m.CachingInboundPolicy=m.BasicAuthInboundPolicy=m.Auth0JwtInboundPolicy=m.ApiKeyInboundPolicy=m.ApiAuthKeyInboundPolicy=m.AmberfloMeteringPolicy=m.AmberfloMeteringInboundPolicy=m.AuditLogPlugin=m.AuditLogDataStaxProvider=m.HttpStatusCode=m.webSocketPipelineHandler=m.webSocketHandler=m.urlRewriteHandler=m.urlForwardHandler=m.redirectHandler=m.openApiSpecHandler=m.awsLambdaHandler=m.AwsLambdaHandlerExtensions=m.purgeGatewayCache=m.Handler=m.originalFetch=m.ConfigurationError=m.isZuploReadableEnvVariableName=m.isRestrictedEnvVariableName=m.environment=m.ContextData=m.ResponseSentEvent=m.ResponseSendingEvent=m.ZoneCache=m.MemoryZoneReadThroughCache=void 0;m.sanitizedIdentifierName=m.getRawOperationDataIdentifierName=m.getIdForRequestBodySchema=m.getIdForRefSchema=m.getIdForParameterSchema=m.SystemLogMap=m.httpStatuses=m.SYSTEM_LOGGER=m.API_KEY=m.ServiceProviderImpl=m.serialize=m.ContentTypes=m.Router=m.LookupResult=m.SystemRouteName=m.ZuploRequest=m.ProblemResponseFormatter=m.HttpProblems=m.LoadSubscriptionInboundPolicy=m.MeteringInboundPolicy=m.ValidateJsonSchemaInbound=m.UpstreamGcpServiceAuthInboundPolicy=m.UpstreamGcpJwtInboundPolicy=m.UpstreamFirebaseUserAuthInboundPolicy=m.UpstreamFirebaseAdminAuthInboundPolicy=m.UpstreamAzureAdServiceAuthInboundPolicy=m.SupabaseJwtInboundPolicy=m.StripeWebhookVerificationInboundPolicy=m.SleepInboundPolicy=m.SetStatusOutboundPolicy=m.SetQueryParamsInboundPolicy=m.SetHeadersOutboundPolicy=m.SetHeadersInboundPolicy=m.SetBodyInboundPolicy=m.RequireOriginInboundPolicy=m.SchemaBasedRequestValidation=m.RequestValidationInboundPolicy=m.RequestSizeLimitInboundPolicy=m.ReplaceStringOutboundPolicy=m.RemoveQueryParamsInboundPolicy=m.RemoveHeadersOutboundPolicy=m.RemoveHeadersInboundPolicy=m.ReadmeMetricsInboundPolicy=void 0;Eh();var tN=Jt();Object.defineProperty(m,"MemoryZoneReadThroughCache",{enumerable:!0,get:function(){return tN.MemoryZoneReadThroughCache}});var rN=io();Object.defineProperty(m,"ZoneCache",{enumerable:!0,get:function(){return rN.ZoneCache}});var E_=Ir();Object.defineProperty(m,"ResponseSendingEvent",{enumerable:!0,get:function(){return E_.ResponseSendingEvent}});Object.defineProperty(m,"ResponseSentEvent",{enumerable:!0,get:function(){return E_.ResponseSentEvent}});var nN=js();Object.defineProperty(m,"ContextData",{enumerable:!0,get:function(){return nN.ContextData}});var Fp=wd();Object.defineProperty(m,"environment",{enumerable:!0,get:function(){return Fp.environment}});Object.defineProperty(m,"isRestrictedEnvVariableName",{enumerable:!0,get:function(){return Fp.isRestrictedEnvVariableName}});Object.defineProperty(m,"isZuploReadableEnvVariableName",{enumerable:!0,get:function(){return Fp.isZuploReadableEnvVariableName}});var iN=L();Object.defineProperty(m,"ConfigurationError",{enumerable:!0,get:function(){return iN.ConfigurationError}});var oN=Td();Object.defineProperty(m,"originalFetch",{enumerable:!0,get:function(){return oN.originalFetch}});var w_=zy();Object.defineProperty(m,"Handler",{enumerable:!0,get:function(){return w_.Handler}});Object.defineProperty(m,"purgeGatewayCache",{enumerable:!0,get:function(){return w_.purgeGatewayCache}});var v_=dg();Object.defineProperty(m,"AwsLambdaHandlerExtensions",{enumerable:!0,get:function(){return v_.AwsLambdaHandlerExtensions}});Object.defineProperty(m,"awsLambdaHandler",{enumerable:!0,get:function(){return v_.awsLambdaHandler}});var sN=hg();Object.defineProperty(m,"openApiSpecHandler",{enumerable:!0,get:function(){return sN.openApiSpecHandler}});var aN=fg();Object.defineProperty(m,"redirectHandler",{enumerable:!0,get:function(){return aN.redirectHandler}});var cN=yg();Object.defineProperty(m,"urlForwardHandler",{enumerable:!0,get:function(){return cN.urlForwardHandler}});var uN=bg();Object.defineProperty(m,"urlRewriteHandler",{enumerable:!0,get:function(){return uN.urlRewriteHandler}});var lN=Eg();Object.defineProperty(m,"webSocketHandler",{enumerable:!0,get:function(){return lN.webSocketHandler}});var dN=Tg();Object.defineProperty(m,"webSocketPipelineHandler",{enumerable:!0,get:function(){return dN.webSocketPipelineHandler}});var pN=Du();Object.defineProperty(m,"HttpStatusCode",{enumerable:!0,get:function(){return pN.HttpStatusCode}});Hp(Ng(),m);Hp(Dg(),m);var hN=Ug();Object.defineProperty(m,"AuditLogDataStaxProvider",{enumerable:!0,get:function(){return hN.AuditLogDataStaxProvider}});var fN=Mg();Object.defineProperty(m,"AuditLogPlugin",{enumerable:!0,get:function(){return fN.AuditLogPlugin}});Hp(jg(),m);var T_=Jg();Object.defineProperty(m,"AmberfloMeteringInboundPolicy",{enumerable:!0,get:function(){return T_.AmberfloMeteringInboundPolicy}});Object.defineProperty(m,"AmberfloMeteringPolicy",{enumerable:!0,get:function(){return T_.AmberfloMeteringPolicy}});var mN=Yg();Object.defineProperty(m,"ApiAuthKeyInboundPolicy",{enumerable:!0,get:function(){return mN.ApiAuthKeyInboundPolicy}});var yN=fp();Object.defineProperty(m,"ApiKeyInboundPolicy",{enumerable:!0,get:function(){return yN.ApiKeyInboundPolicy}});var gN=Zg();Object.defineProperty(m,"Auth0JwtInboundPolicy",{enumerable:!0,get:function(){return gN.Auth0JwtInboundPolicy}});var bN=Xg();Object.defineProperty(m,"BasicAuthInboundPolicy",{enumerable:!0,get:function(){return bN.BasicAuthInboundPolicy}});var _N=eb();Object.defineProperty(m,"CachingInboundPolicy",{enumerable:!0,get:function(){return _N.CachingInboundPolicy}});var EN=tb();Object.defineProperty(m,"ChangeMethodInboundPolicy",{enumerable:!0,get:function(){return EN.ChangeMethodInboundPolicy}});var wN=rb();Object.defineProperty(m,"ClearHeadersInboundPolicy",{enumerable:!0,get:function(){return wN.ClearHeadersInboundPolicy}});var vN=nb();Object.defineProperty(m,"ClearHeadersOutboundPolicy",{enumerable:!0,get:function(){return vN.ClearHeadersOutboundPolicy}});var TN=ib();Object.defineProperty(m,"ClerkJwtInboundPolicy",{enumerable:!0,get:function(){return TN.ClerkJwtInboundPolicy}});var SN=sb();Object.defineProperty(m,"CognitoJwtInboundPolicy",{enumerable:!0,get:function(){return SN.CognitoJwtInboundPolicy}});var IN=cb();Object.defineProperty(m,"CompositeInboundPolicy",{enumerable:!0,get:function(){return IN.CompositeInboundPolicy}});var PN=lb();Object.defineProperty(m,"CreditsMeteringInboundPolicy",{enumerable:!0,get:function(){return PN.CreditsMeteringInboundPolicy}});var AN=db();Object.defineProperty(m,"CurityPhantomTokenInboundPolicy",{enumerable:!0,get:function(){return AN.CurityPhantomTokenInboundPolicy}});var RN=pb();Object.defineProperty(m,"FirebaseJwtInboundPolicy",{enumerable:!0,get:function(){return RN.FirebaseJwtInboundPolicy}});var ON=hb();Object.defineProperty(m,"FormDataToJsonInboundPolicy",{enumerable:!0,get:function(){return ON.FormDataToJsonInboundPolicy}});var xN=fb();Object.defineProperty(m,"GeoFilterInboundPolicy",{enumerable:!0,get:function(){return xN.GeoFilterInboundPolicy}});var NN=mb();Object.defineProperty(m,"JWTScopeValidationInboundPolicy",{enumerable:!0,get:function(){return NN.JWTScopeValidationInboundPolicy}});var CN=gb();Object.defineProperty(m,"MockApiInboundPolicy",{enumerable:!0,get:function(){return CN.MockApiInboundPolicy}});var S_=vb();Object.defineProperty(m,"MoesifInboundPolicy",{enumerable:!0,get:function(){return S_.MoesifInboundPolicy}});Object.defineProperty(m,"setMoesifContext",{enumerable:!0,get:function(){return S_.setMoesifContext}});var LN=Tb();Object.defineProperty(m,"OktaJwtInboundPolicy",{enumerable:!0,get:function(){return LN.OktaJwtInboundPolicy}});var DN=jt();Object.defineProperty(m,"OpenIdJwtInboundPolicy",{enumerable:!0,get:function(){return DN.OpenIdJwtInboundPolicy}});var UN=Sb();Object.defineProperty(m,"PropelAuthJwtInboundPolicy",{enumerable:!0,get:function(){return UN.PropelAuthJwtInboundPolicy}});var I_=Nb();Object.defineProperty(m,"BasicRateLimitInboundPolicy",{enumerable:!0,get:function(){return I_.RateLimitInboundPolicy}});Object.defineProperty(m,"RateLimitInboundPolicy",{enumerable:!0,get:function(){return I_.RateLimitInboundPolicy}});var kN=Ub();Object.defineProperty(m,"ReadmeMetricsInboundPolicy",{enumerable:!0,get:function(){return kN.ReadmeMetricsInboundPolicy}});var MN=kb();Object.defineProperty(m,"RemoveHeadersInboundPolicy",{enumerable:!0,get:function(){return MN.RemoveHeadersInboundPolicy}});var HN=Mb();Object.defineProperty(m,"RemoveHeadersOutboundPolicy",{enumerable:!0,get:function(){return HN.RemoveHeadersOutboundPolicy}});var FN=Hb();Object.defineProperty(m,"RemoveQueryParamsInboundPolicy",{enumerable:!0,get:function(){return FN.RemoveQueryParamsInboundPolicy}});var qN=Fb();Object.defineProperty(m,"ReplaceStringOutboundPolicy",{enumerable:!0,get:function(){return qN.ReplaceStringOutboundPolicy}});var $N=$b();Object.defineProperty(m,"RequestSizeLimitInboundPolicy",{enumerable:!0,get:function(){return $N.RequestSizeLimitInboundPolicy}});var P_=Kb();Object.defineProperty(m,"RequestValidationInboundPolicy",{enumerable:!0,get:function(){return P_.RequestValidationInboundPolicy}});Object.defineProperty(m,"SchemaBasedRequestValidation",{enumerable:!0,get:function(){return P_.SchemaBasedRequestValidation}});var jN=Jb();Object.defineProperty(m,"RequireOriginInboundPolicy",{enumerable:!0,get:function(){return jN.RequireOriginInboundPolicy}});var VN=zb();Object.defineProperty(m,"SetBodyInboundPolicy",{enumerable:!0,get:function(){return VN.SetBodyInboundPolicy}});var GN=Qb();Object.defineProperty(m,"SetHeadersInboundPolicy",{enumerable:!0,get:function(){return GN.SetHeadersInboundPolicy}});var BN=Zb();Object.defineProperty(m,"SetHeadersOutboundPolicy",{enumerable:!0,get:function(){return BN.SetHeadersOutboundPolicy}});var KN=e_();Object.defineProperty(m,"SetQueryParamsInboundPolicy",{enumerable:!0,get:function(){return KN.SetQueryParamsInboundPolicy}});var JN=t_();Object.defineProperty(m,"SetStatusOutboundPolicy",{enumerable:!0,get:function(){return JN.SetStatusOutboundPolicy}});var zN=r_();Object.defineProperty(m,"SleepInboundPolicy",{enumerable:!0,get:function(){return zN.SleepInboundPolicy}});var WN=ip();Object.defineProperty(m,"StripeWebhookVerificationInboundPolicy",{enumerable:!0,get:function(){return WN.StripeWebhookVerificationInboundPolicy}});var QN=i_();Object.defineProperty(m,"SupabaseJwtInboundPolicy",{enumerable:!0,get:function(){return QN.SupabaseJwtInboundPolicy}});var YN=s_();Object.defineProperty(m,"UpstreamAzureAdServiceAuthInboundPolicy",{enumerable:!0,get:function(){return YN.UpstreamAzureAdServiceAuthInboundPolicy}});var ZN=c_();Object.defineProperty(m,"UpstreamFirebaseAdminAuthInboundPolicy",{enumerable:!0,get:function(){return ZN.UpstreamFirebaseAdminAuthInboundPolicy}});var XN=u_();Object.defineProperty(m,"UpstreamFirebaseUserAuthInboundPolicy",{enumerable:!0,get:function(){return XN.UpstreamFirebaseUserAuthInboundPolicy}});var eC=d_();Object.defineProperty(m,"UpstreamGcpJwtInboundPolicy",{enumerable:!0,get:function(){return eC.UpstreamGcpJwtInboundPolicy}});var tC=h_();Object.defineProperty(m,"UpstreamGcpServiceAuthInboundPolicy",{enumerable:!0,get:function(){return tC.UpstreamGcpServiceAuthInboundPolicy}});var rC=m_();Object.defineProperty(m,"ValidateJsonSchemaInbound",{enumerable:!0,get:function(){return rC.ValidateJsonSchemaInbound}});var nC=g_();Object.defineProperty(m,"MeteringInboundPolicy",{enumerable:!0,get:function(){return nC.MeteringInboundPolicy}});var iC=b_();Object.defineProperty(m,"LoadSubscriptionInboundPolicy",{enumerable:!0,get:function(){return iC.LoadSubscriptionInboundPolicy}});var oC=se();Object.defineProperty(m,"HttpProblems",{enumerable:!0,get:function(){return oC.HttpProblems}});var sC=fo();Object.defineProperty(m,"ProblemResponseFormatter",{enumerable:!0,get:function(){return sC.ProblemResponseFormatter}});var aC=He();Object.defineProperty(m,"ZuploRequest",{enumerable:!0,get:function(){return aC.ZuploRequest}});var cC=Ar();Object.defineProperty(m,"SystemRouteName",{enumerable:!0,get:function(){return cC.SystemRouteName}});var A_=hd();Object.defineProperty(m,"LookupResult",{enumerable:!0,get:function(){return A_.LookupResult}});Object.defineProperty(m,"Router",{enumerable:!0,get:function(){return A_.Router}});var R_=Iu();Object.defineProperty(m,"ContentTypes",{enumerable:!0,get:function(){return R_.ContentTypes}});Object.defineProperty(m,"serialize",{enumerable:!0,get:function(){return R_.serialize}});var uC=__();Object.defineProperty(m,"ServiceProviderImpl",{enumerable:!0,get:function(){return uC.ServiceProviderImpl}});var O_=Ju();Object.defineProperty(m,"API_KEY",{enumerable:!0,get:function(){return O_.API_KEY}});Object.defineProperty(m,"SYSTEM_LOGGER",{enumerable:!0,get:function(){return O_.SYSTEM_LOGGER}});var lC=ku();Object.defineProperty(m,"httpStatuses",{enumerable:!0,get:function(){return eN(lC).default}});var dC=Le();Object.defineProperty(m,"SystemLogMap",{enumerable:!0,get:function(){return dC.SystemLogMap}});var ki=Qa();Object.defineProperty(m,"getIdForParameterSchema",{enumerable:!0,get:function(){return ki.getIdForParameterSchema}});Object.defineProperty(m,"getIdForRefSchema",{enumerable:!0,get:function(){return ki.getIdForRefSchema}});Object.defineProperty(m,"getIdForRequestBodySchema",{enumerable:!0,get:function(){return ki.getIdForRequestBodySchema}});Object.defineProperty(m,"getRawOperationDataIdentifierName",{enumerable:!0,get:function(){return ki.getRawOperationDataIdentifierName}});Object.defineProperty(m,"sanitizedIdentifierName",{enumerable:!0,get:function(){return ki.sanitizedIdentifierName}})});var N_=g(Fn=>{"use strict";Object.defineProperty(Fn,"__esModule",{value:!0});Fn.BaseCryptoBeta=Fn.supportedDigests=void 0;Fn.supportedDigests=["sha-1","sha-256","sha-384","sha-512"];var qp=class{static{s(this,"BaseCryptoBeta")}};Fn.BaseCryptoBeta=qp});var C_=g(_c=>{"use strict";Object.defineProperty(_c,"__esModule",{value:!0});_c.WorkerCryptoBeta=void 0;var $p=N_(),pC=L(),jp=class extends $p.BaseCryptoBeta{static{s(this,"WorkerCryptoBeta")}async digest(t,r){if(!$p.supportedDigests.includes(t.toLowerCase()))throw new pC.RuntimeError(`Algorithm ${t} is not supported. Try using ${$p.supportedDigests.join(", ")}`);let n=new TextEncoder().encode(r),i=await crypto.subtle.digest(t,n);return Array.from(new Uint8Array(i)).map(c=>c.toString(16).padStart(2,"0")).join("")}};_c.WorkerCryptoBeta=jp});var L_=g(Ec=>{"use strict";Object.defineProperty(Ec,"__esModule",{value:!0});Ec.BaseKeyValueStore=void 0;var Vp=class{static{s(this,"BaseKeyValueStore")}context;constructor(t){this.context=t}};Ec.BaseKeyValueStore=Vp});var U_=g(wc=>{"use strict";Object.defineProperty(wc,"__esModule",{value:!0});wc.WorkerKeyValueStore=void 0;var D_=L(),hC=L_(),Gp=class extends hC.BaseKeyValueStore{static{s(this,"WorkerKeyValueStore")}#e;constructor(t){super(t);let n=globalThis.ZUPLO_KV;if(!n)throw new D_.FeatureNotEnabledError("The Key Value Store feature is not enabled for this project.");this.#e=n}put(t,r,n){if(typeof t!="string")throw new D_.ConfigurationError("value must be of type string");return this.#e.put(t,r,n?{expirationTtl:n.expirationSecondsTtl}:void 0)}get(t,r){return this.#e.get(t,{type:"text",cacheTtl:r?.cacheSecondsTtl})}delete(t){return this.#e.delete(t)}};wc.WorkerKeyValueStore=Gp});var Lt=g(dt=>{"use strict";var fC=dt&&dt.__createBinding||(Object.create?function(e,t,r,n){n===void 0&&(n=r);var i=Object.getOwnPropertyDescriptor(t,r);(!i||("get"in i?!t.__esModule:i.writable||i.configurable))&&(i={enumerable:!0,get:function(){return t[r]}}),Object.defineProperty(e,n,i)}:function(e,t,r,n){n===void 0&&(n=r),e[n]=t[r]}),mC=dt&&dt.__exportStar||function(e,t){for(var r in e)r!=="default"&&!Object.prototype.hasOwnProperty.call(t,r)&&fC(t,e,r)};Object.defineProperty(dt,"__esModule",{value:!0});dt.KeyValueStore=dt.CryptoBeta=void 0;mC(x_(),dt);var yC=C_();Object.defineProperty(dt,"CryptoBeta",{enumerable:!0,get:function(){return yC.WorkerCryptoBeta}});var gC=U_();Object.defineProperty(dt,"KeyValueStore",{enumerable:!0,get:function(){return gC.WorkerKeyValueStore}})});var SL={};Zi(SL,{GraphQLComplexityLimitInboundPolicy:()=>hE,GraphQLDisableIntrospectionInboundPolicy:()=>mE});module.exports=Xi(SL);var Yn=yh(Lt());function B(e,t){if(!!!e)throw new Error(t)}s(B,"devAssert");function Ee(e){return typeof e=="object"&&e!==null}s(Ee,"isObjectLike");function At(e,t){if(!!!e)throw new Error(t??"Unexpected invariant triggered.")}s(At,"invariant");var bC=/\r\n|[\n\r]/g;function qn(e,t){let r=0,n=1;for(let i of e.body.matchAll(bC)){if(typeof i.index=="number"||At(!1),i.index>=t)break;r=i.index+i[0].length,n+=1}return{line:n,column:t+1-r}}s(qn,"getLocation");function Bp(e){return vc(e.source,qn(e.source,e.start))}s(Bp,"printLocation");function vc(e,t){let r=e.locationOffset.column-1,n="".padStart(r)+e.body,i=t.line-1,o=e.locationOffset.line-1,a=t.line+o,c=t.line===1?r:0,u=t.column+c,l=`${e.name}:${a}:${u}
 `,d=n.split(/\r\n|[\n\r]/g),p=d[i];if(p.length>120){let f=Math.floor(u/80),h=u%80,y=[];for(let v=0;v<p.length;v+=80)y.push(p.slice(v,v+80));return l+k_([[`${a} |`,y[0]],...y.slice(1,f+1).map(v=>["|",v]),["|","^".padStart(h)],["|",y[f+1]]])}return l+k_([[`${a-1} |`,d[i-1]],[`${a} |`,p],["|","^".padStart(u)],[`${a+1} |`,d[i+1]]])}s(vc,"printSourceLocation");function k_(e){let t=e.filter(([n,i])=>i!==void 0),r=Math.max(...t.map(([n])=>n.length));return t.map(([n,i])=>n.padStart(r)+(i?" "+i:"")).join(`
 `)}s(k_,"printPrefixedLines");function _C(e){let t=e[0];return t==null||"kind"in t||"length"in t?{nodes:t,source:e[1],positions:e[2],path:e[3],originalError:e[4],extensions:e[5]}:t}s(_C,"toNormalizedOptions");var N=class e extends Error{static{s(this,"GraphQLError")}constructor(t,...r){var n,i,o;let{nodes:a,source:c,positions:u,path:l,originalError:d,extensions:p}=_C(r);super(t),this.name="GraphQLError",this.path=l??void 0,this.originalError=d??void 0,this.nodes=M_(Array.isArray(a)?a:a?[a]:void 0);let f=M_((n=this.nodes)===null||n===void 0?void 0:n.map(y=>y.loc).filter(y=>y!=null));this.source=c??(f==null||(i=f[0])===null||i===void 0?void 0:i.source),this.positions=u??f?.map(y=>y.start),this.locations=u&&c?u.map(y=>qn(c,y)):f?.map(y=>qn(y.source,y.start));let h=Ee(d?.extensions)?d?.extensions:void 0;this.extensions=(o=p??h)!==null&&o!==void 0?o:Object.create(null),Object.defineProperties(this,{message:{writable:!0,enumerable:!0},name:{enumerable:!1},nodes:{enumerable:!1},source:{enumerable:!1},positions:{enumerable:!1},originalError:{enumerable:!1}}),d!=null&&d.stack?Object.defineProperty(this,"stack",{value:d.stack,writable:!0,configurable:!0}):Error.captureStackTrace?Error.captureStackTrace(this,e):Object.defineProperty(this,"stack",{value:Error().stack,writable:!0,configurable:!0})}get[Symbol.toStringTag](){return"GraphQLError"}toString(){let t=this.message;if(this.nodes)for(let r of this.nodes)r.loc&&(t+=`
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zuplo/graphql",
-  "version": "5.1706.0",
+  "version": "5.1710.0",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "exports": {