@zuplo/runtime 5.1954.0 → 5.1958.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/index.min.cjs +21 -21
- package/index.min.js +22 -22
- package/internal.d.ts +6 -0
- package/internal.min.cjs +1 -1
- package/package.json +1 -1
- package/types-beta.d.ts +2 -22
- package/types-public.d.ts +2 -16
package/index.min.cjs
CHANGED
|
@@ -22,23 +22,23 @@
|
|
|
22
22
|
* DEALINGS IN THE SOFTWARE.
|
|
23
23
|
*--------------------------------------------------------------------------------------------*/
|
|
24
24
|
|
|
25
|
-
"use strict";var
|
|
26
|
-
`).map(u=>u.trim()).join(" ");case"%O":return t(n[r++]);case"%j":try{return JSON.stringify(n[r++])}catch{return"[Circular]"}default:return a}});for(let a of n.splice(r))a===null||!(typeof a=="object"&&a!==null)?s+=" "+a:s+=" "+t(a);return s}i(
|
|
25
|
+
"use strict";var _u=Object.create;var ht=Object.defineProperty;var Lu=Object.getOwnPropertyDescriptor;var Nu=Object.getOwnPropertyNames;var ku=Object.getPrototypeOf,Mu=Object.prototype.hasOwnProperty;var i=(t,e)=>ht(t,"name",{value:e,configurable:!0});var We=(t,e)=>()=>(e||t((e={exports:{}}).exports,e),e.exports),Du=(t,e)=>{for(var n in e)ht(t,n,{get:e[n],enumerable:!0})},oi=(t,e,n,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let o of Nu(e))!Mu.call(t,o)&&o!==n&&ht(t,o,{get:()=>e[o],enumerable:!(r=Lu(e,o))||r.enumerable});return t};var Ce=(t,e,n)=>(n=t!=null?_u(ku(t)):{},oi(e||!t||!t.__esModule?ht(n,"default",{value:t,enumerable:!0}):n,t)),Hu=t=>oi(ht({},"__esModule",{value:!0}),t);var ki=We(x=>{"use strict";Object.defineProperty(x,"__esModule",{value:!0});x.generateColor=x.colorFunctions=x.stripColor=x.bgRgb24=x.rgb24=x.bgRgb8=x.rgb8=x.bgBrightWhite=x.bgBrightCyan=x.bgBrightMagenta=x.bgBrightBlue=x.bgBrightYellow=x.bgBrightGreen=x.bgBrightRed=x.bgBrightBlack=x.bgWhite=x.bgCyan=x.bgMagenta=x.bgBlue=x.bgYellow=x.bgGreen=x.bgRed=x.bgBlack=x.brightWhite=x.brightCyan=x.brightMagenta=x.brightBlue=x.brightYellow=x.brightGreen=x.brightRed=x.brightBlack=x.gray=x.white=x.cyan=x.magenta=x.blue=x.yellow=x.green=x.red=x.black=x.strikethrough=x.hidden=x.inverse=x.underline=x.italic=x.dim=x.bold=x.reset=x.getColorEnabled=x.setColorEnabled=void 0;var vi=!0,Sr=!vi;function Uu(t){vi||(Sr=t)}i(Uu,"setColorEnabled");x.setColorEnabled=Uu;function Zu(){return Sr}i(Zu,"getColorEnabled");x.getColorEnabled=Zu;function U(t,e){return{open:`\x1B[${t.join(";")}m`,close:`\x1B[${e}m`,regexp:new RegExp(`\\x1b\\[${e}m`,"g")}}i(U,"code");function Z(t,e){return Sr?`${e.open}${t.replace(e.regexp,e.open)}${e.close}`:t}i(Z,"run");function qu(t){return Z(t,U([0],0))}i(qu,"reset");x.reset=qu;function $u(t){return Z(t,U([1],22))}i($u,"bold");x.bold=$u;function Fu(t){return Z(t,U([2],22))}i(Fu,"dim");x.dim=Fu;function Bu(t){return Z(t,U([3],23))}i(Bu,"italic");x.italic=Bu;function zu(t){return Z(t,U([4],24))}i(zu,"underline");x.underline=zu;function ju(t){return Z(t,U([7],27))}i(ju,"inverse");x.inverse=ju;function Vu(t){return Z(t,U([8],28))}i(Vu,"hidden");x.hidden=Vu;function Gu(t){return Z(t,U([9],29))}i(Gu,"strikethrough");x.strikethrough=Gu;function Wu(t){return Z(t,U([30],39))}i(Wu,"black");x.black=Wu;function Oi(t){return Z(t,U([31],39))}i(Oi,"red");x.red=Oi;function Si(t){return Z(t,U([32],39))}i(Si,"green");x.green=Si;function Ci(t){return Z(t,U([33],39))}i(Ci,"yellow");x.yellow=Ci;function Ai(t){return Z(t,U([34],39))}i(Ai,"blue");x.blue=Ai;function _i(t){return Z(t,U([35],39))}i(_i,"magenta");x.magenta=_i;function Li(t){return Z(t,U([36],39))}i(Li,"cyan");x.cyan=Li;function Ju(t){return Z(t,U([37],39))}i(Ju,"white");x.white=Ju;function Ku(t){return Ni(t)}i(Ku,"gray");x.gray=Ku;function Ni(t){return Z(t,U([90],39))}i(Ni,"brightBlack");x.brightBlack=Ni;function Yu(t){return Z(t,U([91],39))}i(Yu,"brightRed");x.brightRed=Yu;function Qu(t){return Z(t,U([92],39))}i(Qu,"brightGreen");x.brightGreen=Qu;function Xu(t){return Z(t,U([93],39))}i(Xu,"brightYellow");x.brightYellow=Xu;function ec(t){return Z(t,U([94],39))}i(ec,"brightBlue");x.brightBlue=ec;function tc(t){return Z(t,U([95],39))}i(tc,"brightMagenta");x.brightMagenta=tc;function nc(t){return Z(t,U([96],39))}i(nc,"brightCyan");x.brightCyan=nc;function rc(t){return Z(t,U([97],39))}i(rc,"brightWhite");x.brightWhite=rc;function oc(t){return Z(t,U([40],49))}i(oc,"bgBlack");x.bgBlack=oc;function ic(t){return Z(t,U([41],49))}i(ic,"bgRed");x.bgRed=ic;function sc(t){return Z(t,U([42],49))}i(sc,"bgGreen");x.bgGreen=sc;function ac(t){return Z(t,U([43],49))}i(ac,"bgYellow");x.bgYellow=ac;function uc(t){return Z(t,U([44],49))}i(uc,"bgBlue");x.bgBlue=uc;function cc(t){return Z(t,U([45],49))}i(cc,"bgMagenta");x.bgMagenta=cc;function lc(t){return Z(t,U([46],49))}i(lc,"bgCyan");x.bgCyan=lc;function dc(t){return Z(t,U([47],49))}i(dc,"bgWhite");x.bgWhite=dc;function pc(t){return Z(t,U([100],49))}i(pc,"bgBrightBlack");x.bgBrightBlack=pc;function mc(t){return Z(t,U([101],49))}i(mc,"bgBrightRed");x.bgBrightRed=mc;function gc(t){return Z(t,U([102],49))}i(gc,"bgBrightGreen");x.bgBrightGreen=gc;function fc(t){return Z(t,U([103],49))}i(fc,"bgBrightYellow");x.bgBrightYellow=fc;function hc(t){return Z(t,U([104],49))}i(hc,"bgBrightBlue");x.bgBrightBlue=hc;function yc(t){return Z(t,U([105],49))}i(yc,"bgBrightMagenta");x.bgBrightMagenta=yc;function bc(t){return Z(t,U([106],49))}i(bc,"bgBrightCyan");x.bgBrightCyan=bc;function wc(t){return Z(t,U([107],49))}i(wc,"bgBrightWhite");x.bgBrightWhite=wc;function Ae(t,e=255,n=0){return Math.trunc(Math.max(Math.min(t,e),n))}i(Ae,"clampAndTruncate");function Rc(t,e){return Z(t,U([38,5,Ae(e)],39))}i(Rc,"rgb8");x.rgb8=Rc;function Pc(t,e){return Z(t,U([48,5,Ae(e)],49))}i(Pc,"bgRgb8");x.bgRgb8=Pc;function Ec(t,e){return typeof e=="number"?Z(t,U([38,2,e>>16&255,e>>8&255,e&255],39)):Z(t,U([38,2,Ae(e.r),Ae(e.g),Ae(e.b)],39))}i(Ec,"rgb24");x.rgb24=Ec;function Ic(t,e){return typeof e=="number"?Z(t,U([48,2,e>>16&255,e>>8&255,e&255],49)):Z(t,U([48,2,Ae(e.r),Ae(e.g),Ae(e.b)],49))}i(Ic,"bgRgb24");x.bgRgb24=Ic;var Tc=new RegExp(["[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:[a-zA-Z\\d]*(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)","(?:(?:\\d{1,4}(?:;\\d{0,4})*)?[\\dA-PR-TZcf-ntqry=><~]))"].join("|"),"g");function xc(t){return t.replace(Tc,"")}i(xc,"stripColor");x.stripColor=xc;x.colorFunctions=[Oi,Si,Ci,Ai,_i,Li];function vc(t){let e=0,n=t.length,r=0;if(n>0)for(;r<n;)e=(e<<5)-e+t.charCodeAt(r++)|0;return e}i(vc,"hashCode");function Oc(t){let e=Math.abs(vc(t));return x.colorFunctions[e%x.colorFunctions.length]}i(Oc,"generateColor");x.generateColor=Oc});var Mi=We(qt=>{"use strict";Object.defineProperty(qt,"__esModule",{value:!0});qt.format=void 0;function Sc(t,e,...n){let r=0,o=n.length,s=String(e).replace(/%[sdjoO%]/g,a=>{if(a==="%%")return"%";if(r>=o)return a;switch(a){case"%s":return String(n[r++]);case"%d":return Number(n[r++]).toString();case"%o":return t(n[r++]).split(`
|
|
26
|
+
`).map(u=>u.trim()).join(" ");case"%O":return t(n[r++]);case"%j":try{return JSON.stringify(n[r++])}catch{return"[Circular]"}default:return a}});for(let a of n.splice(r))a===null||!(typeof a=="object"&&a!==null)?s+=" "+a:s+=" "+t(a);return s}i(Sc,"format");qt.format=Sc});var $i=We(Ft=>{"use strict";Object.defineProperty(Ft,"__esModule",{value:!0});Ft.inspect=void 0;function Fe(t,e,n,r){let o={seen:[],stylize:Cc,showHidden:e??!1,depth:n??2,colors:r??!1,customInspect:!0};return o.colors&&(o.stylize=_c),$t(o,t,o.depth)}i(Fe,"inspect");Ft.inspect=Fe;Fe.colors={bold:[1,22],italic:[3,23],underline:[4,24],inverse:[7,27],white:[37,39],grey:[90,39],black:[30,39],blue:[34,39],cyan:[36,39],green:[32,39],magenta:[35,39],red:[31,39],yellow:[33,39]};Fe.styles={special:"cyan",number:"yellow",boolean:"yellow",undefined:"grey",null:"bold",string:"green",date:"magenta",regexp:"red"};function Cc(t,e){return t}i(Cc,"stylizeNoColor");function Ac(t){return typeof t=="boolean"}i(Ac,"isBoolean");function Hi(t){return t===void 0}i(Hi,"isUndefined");function _c(t,e){let n=Fe.styles[e];return n?"\x1B["+Fe.colors[n][0]+"m"+t+"\x1B["+Fe.colors[n][1]+"m":t}i(_c,"stylizeWithColor");function Cr(t){return typeof t=="function"}i(Cr,"isFunction");function Ui(t){return typeof t=="string"}i(Ui,"isString");function Lc(t){return typeof t=="number"}i(Lc,"isNumber");function Zi(t){return t===null}i(Zi,"isNull");function qi(t,e){return Object.prototype.hasOwnProperty.call(t,e)}i(qi,"hasOwn");function Ar(t){return kr(t)&&Mr(t)==="[object RegExp]"}i(Ar,"isRegExp");function kr(t){return typeof t=="object"&&t!==null}i(kr,"isObject");function _r(t){return kr(t)&&(Mr(t)==="[object Error]"||t instanceof Error)}i(_r,"isError");function Di(t){return kr(t)&&Mr(t)==="[object Date]"}i(Di,"isDate");function Mr(t){return Object.prototype.toString.call(t)}i(Mr,"objectToString");function Nc(t){let e={};return t.forEach(function(n,r){e[n]=!0}),e}i(Nc,"arrayToHash");function kc(t,e,n,r,o){let s=[];for(let a=0,u=e.length;a<u;++a)qi(e,String(a))?s.push(Nr(t,e,n,r,String(a),!0)):s.push("");return o.forEach(function(a){a.match(/^\d+$/)||s.push(Nr(t,e,n,r,a,!0))}),s}i(kc,"formatArray");function Lr(t){return"["+Error.prototype.toString.call(t)+"]"}i(Lr,"formatError");function $t(t,e,n){if(t.customInspect&&e&&Cr(e.inspect)&&e.inspect!==Fe&&!(e.constructor&&e.constructor.prototype===e)){let d=e.inspect(n,t);return Ui(d)||(d=$t(t,d,n)),d}let r=Mc(t,e);if(r)return r;let o=Object.keys(e),s=Nc(o);try{t.showHidden&&Object.getOwnPropertyNames&&(o=Object.getOwnPropertyNames(e))}catch{}if(_r(e)&&(o.indexOf("message")>=0||o.indexOf("description")>=0))return Lr(e);if(o.length===0){if(Cr(e)){let d=e.name?": "+e.name:"";return t.stylize("[Function"+d+"]","special")}if(Ar(e))return t.stylize(RegExp.prototype.toString.call(e),"regexp");if(Di(e))return t.stylize(Date.prototype.toString.call(e),"date");if(_r(e))return Lr(e)}let a="",u=!1,c=["{","}"];if(Array.isArray(e)&&(u=!0,c=["[","]"]),Cr(e)&&(a=" [Function"+(e.name?": "+e.name:"")+"]"),Ar(e)&&(a=" "+RegExp.prototype.toString.call(e)),Di(e)&&(a=" "+Date.prototype.toUTCString.call(e)),_r(e)&&(a=" "+Lr(e)),o.length===0&&(!u||e.length==0))return c[0]+a+c[1];if(n<0)return Ar(e)?t.stylize(RegExp.prototype.toString.call(e),"regexp"):t.stylize("[Object]","special");t.seen.push(e);let l;return u?l=kc(t,e,n,s,o):l=o.map(function(d){return Nr(t,e,n,s,d,u)}),t.seen.pop(),Dc(l,a,c)}i($t,"formatValue");function Nr(t,e,n,r,o,s){let a,u,c;c={value:void 0};try{c.value=e[o]}catch{}try{Object.getOwnPropertyDescriptor&&(c=Object.getOwnPropertyDescriptor(e,o)||c)}catch{}if(c.get?c.set?u=t.stylize("[Getter/Setter]","special"):u=t.stylize("[Getter]","special"):c.set&&(u=t.stylize("[Setter]","special")),qi(r,o)||(a="["+o+"]"),u||(t.seen.indexOf(c.value)<0?(Zi(n)?u=$t(t,c.value,null):u=$t(t,c.value,n-1),u.indexOf(`
|
|
27
27
|
`)>-1&&(s?u=u.split(`
|
|
28
28
|
`).map(function(l){return" "+l}).join(`
|
|
29
29
|
`).substr(2):u=`
|
|
30
30
|
`+u.split(`
|
|
31
31
|
`).map(function(l){return" "+l}).join(`
|
|
32
|
-
`))):u=t.stylize("[Circular]","special")),
|
|
32
|
+
`))):u=t.stylize("[Circular]","special")),Hi(a)){if(s&&o.match(/^\d+$/))return u;a=JSON.stringify(""+o),a.match(/^"([a-zA-Z_][a-zA-Z_0-9]*)"$/)?(a=a.substr(1,a.length-2),a=t.stylize(a,"name")):(a=a.replace(/'/g,"\\'").replace(/\\"/g,'"').replace(/(^"|"$)/g,"'"),a=t.stylize(a,"string"))}return a+": "+u}i(Nr,"formatProperty");function Mc(t,e){if(Hi(e))return t.stylize("undefined","undefined");if(Ui(e)){let n="'"+JSON.stringify(e).replace(/^"|"$/g,"").replace(/'/g,"\\'").replace(/\\"/g,'"')+"'";return t.stylize(n,"string")}if(Lc(e))return t.stylize(""+e,"number");if(Ac(e))return t.stylize(""+e,"boolean");if(Zi(e))return t.stylize("null","null")}i(Mc,"formatPrimitive");function Dc(t,e,n){let r=0;return t.reduce(function(s,a){return r++,a.indexOf(`
|
|
33
33
|
`)>=0&&r++,s+a.replace(/\u001b\[\d\d?m/g,"").length+1},0)>60?n[0]+(e===""?"":e+`
|
|
34
34
|
`)+" "+t.join(`,
|
|
35
|
-
`)+" "+n[1]:n[0]+e+" "+t.join(", ")+" "+n[1]}i(Dc,"reduceToSingleString")});var
|
|
36
|
-
`&&
|
|
37
|
-
`||f==="\r"}i(r,"isWhiteSpace"),D(r,"isWhiteSpace");function o(f,P){let O=P;for(;P<f.length;P++)if(f[P]=="?"||f[P]==" "){let H=f.substr(O,P-O);if(P>5&&H==="xml")return g("InvalidXml","XML declaration allowed only at the start of the document.",x(f,P));if(f[P]=="?"&&f[P+1]==">"){P++;break}else continue}return P}i(o,"readPI"),D(o,"readPI");function s(f,P){if(f.length>P+5&&f[P+1]==="-"&&f[P+2]==="-"){for(P+=3;P<f.length;P++)if(f[P]==="-"&&f[P+1]==="-"&&f[P+2]===">"){P+=2;break}}else if(f.length>P+8&&f[P+1]==="D"&&f[P+2]==="O"&&f[P+3]==="C"&&f[P+4]==="T"&&f[P+5]==="Y"&&f[P+6]==="P"&&f[P+7]==="E"){let O=1;for(P+=8;P<f.length;P++)if(f[P]==="<")O++;else if(f[P]===">"&&(O--,O===0))break}else if(f.length>P+9&&f[P+1]==="["&&f[P+2]==="C"&&f[P+3]==="D"&&f[P+4]==="A"&&f[P+5]==="T"&&f[P+6]==="A"&&f[P+7]==="["){for(P+=8;P<f.length;P++)if(f[P]==="]"&&f[P+1]==="]"&&f[P+2]===">"){P+=2;break}}return P}i(s,"readCommentAndCDATA"),D(s,"readCommentAndCDATA");var a='"',u="'";function c(f,P){let O="",H="",h=!1;for(;P<f.length;P++){if(f[P]===a||f[P]===u)H===""?H=f[P]:H!==f[P]||(H="");else if(f[P]===">"&&H===""){h=!0;break}O+=f[P]}return H!==""?!1:{value:O,index:P,tagClosed:h}}i(c,"readAttributeStr"),D(c,"readAttributeStr");var l=new RegExp(`(\\s*)([^\\s=]+)(\\s*=)?(\\s*(['"])(([\\s\\S])*?)\\5)?`,"g");function d(f,P){let O=e.getAllMatches(f,l),H={};for(let h=0;h<O.length;h++){if(O[h][1].length===0)return g("InvalidAttr","Attribute '"+O[h][2]+"' has no space in starting.",L(O[h]));if(O[h][3]!==void 0&&O[h][4]===void 0)return g("InvalidAttr","Attribute '"+O[h][2]+"' is without value.",L(O[h]));if(O[h][3]===void 0&&!P.allowBooleanAttributes)return g("InvalidAttr","boolean attribute '"+O[h][2]+"' is not allowed.",L(O[h]));let R=O[h][2];if(!I(R))return g("InvalidAttr","Attribute '"+R+"' is an invalid name.",L(O[h]));if(!H.hasOwnProperty(R))H[R]=1;else return g("InvalidAttr","Attribute '"+R+"' is repeated.",L(O[h]))}return!0}i(d,"validateAttributeString"),D(d,"validateAttributeString");function p(f,P){let O=/\d/;for(f[P]==="x"&&(P++,O=/[\da-fA-F]/);P<f.length;P++){if(f[P]===";")return P;if(!f[P].match(O))break}return-1}i(p,"validateNumberAmpersand"),D(p,"validateNumberAmpersand");function m(f,P){if(P++,f[P]===";")return-1;if(f[P]==="#")return P++,p(f,P);let O=0;for(;P<f.length;P++,O++)if(!(f[P].match(/\w/)&&O<20)){if(f[P]===";")break;return-1}return P}i(m,"validateAmpersand"),D(m,"validateAmpersand");function g(f,P,O){return{err:{code:f,msg:P,line:O.line||O,col:O.col}}}i(g,"getErrorObject"),D(g,"getErrorObject");function I(f){return e.isName(f)}i(I,"validateAttrName"),D(I,"validateAttrName");function b(f){return e.isName(f)}i(b,"validateTagName"),D(b,"validateTagName");function x(f,P){let O=f.substring(0,P).split(/\r?\n/);return{line:O.length,col:O[O.length-1].length+1}}i(x,"getLineNumberForPosition"),D(x,"getLineNumberForPosition");function L(f){return f.startIndex+f[1].length}i(L,"getPositionFromMatch"),D(L,"getPositionFromMatch")}}),qd=we({"node_modules/fast-xml-parser/src/xmlparser/OptionsBuilder.js"(t){var e={preserveOrder:!1,attributeNamePrefix:"@_",attributesGroupName:!1,textNodeName:"#text",ignoreAttributes:!0,removeNSPrefix:!1,allowBooleanAttributes:!1,parseTagValue:!0,parseAttributeValue:!1,trimValues:!0,cdataPropName:!1,numberParseOptions:{hex:!0,leadingZeros:!0,eNotation:!0},tagValueProcessor:function(r,o){return o},attributeValueProcessor:function(r,o){return o},stopNodes:[],alwaysCreateTextNode:!1,isArray:()=>!1,commentPropName:!1,unpairedTags:[],processEntities:!0,htmlEntities:!1,ignoreDeclaration:!1,ignorePiTags:!1,transformTagName:!1,transformAttributeName:!1,updateTag:function(r,o,s){return r}},n=D(function(r){return Object.assign({},e,r)},"buildOptions");t.buildOptions=n,t.defaultOptions=e}}),$d=we({"node_modules/fast-xml-parser/src/xmlparser/xmlNode.js"(t,e){"use strict";var n=class{static{i(this,"XmlNode")}static{D(this,"XmlNode")}constructor(r){this.tagname=r,this.child=[],this[":@"]={}}add(r,o){r==="__proto__"&&(r="#__proto__"),this.child.push({[r]:o})}addChild(r){r.tagname==="__proto__"&&(r.tagname="#__proto__"),r[":@"]&&Object.keys(r[":@"]).length>0?this.child.push({[r.tagname]:r.child,":@":r[":@"]}):this.child.push({[r.tagname]:r.child})}};e.exports=n}}),Fd=we({"node_modules/fast-xml-parser/src/xmlparser/DocTypeReader.js"(t,e){var n=ei();function r(p,m){let g={};if(p[m+3]==="O"&&p[m+4]==="C"&&p[m+5]==="T"&&p[m+6]==="Y"&&p[m+7]==="P"&&p[m+8]==="E"){m=m+9;let I=1,b=!1,x=!1,L="";for(;m<p.length;m++)if(p[m]==="<"&&!x){if(b&&a(p,m))m+=7,[entityName,val,m]=o(p,m+1),val.indexOf("&")===-1&&(g[d(entityName)]={regx:RegExp(`&${entityName};`,"g"),val});else if(b&&u(p,m))m+=8;else if(b&&c(p,m))m+=8;else if(b&&l(p,m))m+=9;else if(s)x=!0;else throw new Error("Invalid DOCTYPE");I++,L=""}else if(p[m]===">"){if(x?p[m-1]==="-"&&p[m-2]==="-"&&(x=!1,I--):I--,I===0)break}else p[m]==="["?b=!0:L+=p[m];if(I!==0)throw new Error("Unclosed DOCTYPE")}else throw new Error("Invalid Tag instead of DOCTYPE");return{entities:g,i:m}}i(r,"readDocType"),D(r,"readDocType");function o(p,m){let g="";for(;m<p.length&&p[m]!=="'"&&p[m]!=='"';m++)g+=p[m];if(g=g.trim(),g.indexOf(" ")!==-1)throw new Error("External entites are not supported");let I=p[m++],b="";for(;m<p.length&&p[m]!==I;m++)b+=p[m];return[g,b,m]}i(o,"readEntityExp"),D(o,"readEntityExp");function s(p,m){return p[m+1]==="!"&&p[m+2]==="-"&&p[m+3]==="-"}i(s,"isComment"),D(s,"isComment");function a(p,m){return p[m+1]==="!"&&p[m+2]==="E"&&p[m+3]==="N"&&p[m+4]==="T"&&p[m+5]==="I"&&p[m+6]==="T"&&p[m+7]==="Y"}i(a,"isEntity"),D(a,"isEntity");function u(p,m){return p[m+1]==="!"&&p[m+2]==="E"&&p[m+3]==="L"&&p[m+4]==="E"&&p[m+5]==="M"&&p[m+6]==="E"&&p[m+7]==="N"&&p[m+8]==="T"}i(u,"isElement"),D(u,"isElement");function c(p,m){return p[m+1]==="!"&&p[m+2]==="A"&&p[m+3]==="T"&&p[m+4]==="T"&&p[m+5]==="L"&&p[m+6]==="I"&&p[m+7]==="S"&&p[m+8]==="T"}i(c,"isAttlist"),D(c,"isAttlist");function l(p,m){return p[m+1]==="!"&&p[m+2]==="N"&&p[m+3]==="O"&&p[m+4]==="T"&&p[m+5]==="A"&&p[m+6]==="T"&&p[m+7]==="I"&&p[m+8]==="O"&&p[m+9]==="N"}i(l,"isNotation"),D(l,"isNotation");function d(p){if(n.isName(p))return p;throw new Error(`Invalid entity name ${p}`)}i(d,"validateEntityName"),D(d,"validateEntityName"),e.exports=r}}),Bd=we({"../../node_modules/strnum/strnum.js"(t,e){var n=/^[-+]?0x[a-fA-F0-9]+$/,r=/^([\-\+])?(0*)(\.[0-9]+([eE]\-?[0-9]+)?|[0-9]+(\.[0-9]+([eE]\-?[0-9]+)?)?)$/;!Number.parseInt&&window.parseInt&&(Number.parseInt=window.parseInt),!Number.parseFloat&&window.parseFloat&&(Number.parseFloat=window.parseFloat);var o={hex:!0,leadingZeros:!0,decimalPoint:".",eNotation:!0};function s(u,c={}){if(c=Object.assign({},o,c),!u||typeof u!="string")return u;let l=u.trim();if(c.skipLike!==void 0&&c.skipLike.test(l))return u;if(c.hex&&n.test(l))return Number.parseInt(l,16);{let d=r.exec(l);if(d){let p=d[1],m=d[2],g=a(d[3]),I=d[4]||d[6];if(!c.leadingZeros&&m.length>0&&p&&l[2]!==".")return u;if(!c.leadingZeros&&m.length>0&&!p&&l[1]!==".")return u;{let b=Number(l),x=""+b;return x.search(/[eE]/)!==-1||I?c.eNotation?b:u:l.indexOf(".")!==-1?x==="0"&&g===""||x===g||p&&x==="-"+g?b:u:m?g===x||p+g===x?b:u:l===x||l===p+x?b:u}}else return u}}i(s,"toNumber"),D(s,"toNumber");function a(u){return u&&u.indexOf(".")!==-1&&(u=u.replace(/0+$/,""),u==="."?u="0":u[0]==="."?u="0"+u:u[u.length-1]==="."&&(u=u.substr(0,u.length-1))),u}i(a,"trimZeros"),D(a,"trimZeros"),e.exports=s}}),zd=we({"node_modules/fast-xml-parser/src/xmlparser/OrderedObjParser.js"(t,e){"use strict";var n=ei(),r=$d(),o=Fd(),s=Bd(),a=class{static{i(this,"OrderedObjParser")}static{D(this,"OrderedObjParser")}constructor(h){this.options=h,this.currentNode=null,this.tagsNodeStack=[],this.docTypeEntities={},this.lastEntities={apos:{regex:/&(apos|#39|#x27);/g,val:"'"},gt:{regex:/&(gt|#62|#x3E);/g,val:">"},lt:{regex:/&(lt|#60|#x3C);/g,val:"<"},quot:{regex:/&(quot|#34|#x22);/g,val:'"'}},this.ampEntity={regex:/&(amp|#38|#x26);/g,val:"&"},this.htmlEntities={space:{regex:/&(nbsp|#160);/g,val:" "},cent:{regex:/&(cent|#162);/g,val:"\xA2"},pound:{regex:/&(pound|#163);/g,val:"\xA3"},yen:{regex:/&(yen|#165);/g,val:"\xA5"},euro:{regex:/&(euro|#8364);/g,val:"\u20AC"},copyright:{regex:/&(copy|#169);/g,val:"\xA9"},reg:{regex:/&(reg|#174);/g,val:"\xAE"},inr:{regex:/&(inr|#8377);/g,val:"\u20B9"}},this.addExternalEntities=u,this.parseXml=m,this.parseTextData=c,this.resolveNameSpace=l,this.buildAttributesMap=p,this.isItStopNode=x,this.replaceEntitiesValue=I,this.readStopNodeData=O,this.saveTextToParentTag=b,this.addChild=g}};function u(h){let R=Object.keys(h);for(let S=0;S<R.length;S++){let M=R[S];this.lastEntities[M]={regex:new RegExp("&"+M+";","g"),val:h[M]}}}i(u,"addExternalEntities"),D(u,"addExternalEntities");function c(h,R,S,M,C,_,B){if(h!==void 0&&(this.options.trimValues&&!M&&(h=h.trim()),h.length>0)){B||(h=this.replaceEntitiesValue(h));let k=this.options.tagValueProcessor(R,h,S,C,_);return k==null?h:typeof k!=typeof h||k!==h?k:this.options.trimValues?H(h,this.options.parseTagValue,this.options.numberParseOptions):h.trim()===h?H(h,this.options.parseTagValue,this.options.numberParseOptions):h}}i(c,"parseTextData"),D(c,"parseTextData");function l(h){if(this.options.removeNSPrefix){let R=h.split(":"),S=h.charAt(0)==="/"?"/":"";if(R[0]==="xmlns")return"";R.length===2&&(h=S+R[1])}return h}i(l,"resolveNameSpace"),D(l,"resolveNameSpace");var d=new RegExp(`([^\\s=]+)\\s*(=\\s*(['"])([\\s\\S]*?)\\3)?`,"gm");function p(h,R,S){if(!this.options.ignoreAttributes&&typeof h=="string"){let M=n.getAllMatches(h,d),C=M.length,_={};for(let B=0;B<C;B++){let k=this.resolveNameSpace(M[B][1]),N=M[B][4],W=this.options.attributeNamePrefix+k;if(k.length)if(this.options.transformAttributeName&&(W=this.options.transformAttributeName(W)),W==="__proto__"&&(W="#__proto__"),N!==void 0){this.options.trimValues&&(N=N.trim()),N=this.replaceEntitiesValue(N);let j=this.options.attributeValueProcessor(k,N,R);j==null?_[W]=N:typeof j!=typeof N||j!==N?_[W]=j:_[W]=H(N,this.options.parseAttributeValue,this.options.numberParseOptions)}else this.options.allowBooleanAttributes&&(_[W]=!0)}if(!Object.keys(_).length)return;if(this.options.attributesGroupName){let B={};return B[this.options.attributesGroupName]=_,B}return _}}i(p,"buildAttributesMap"),D(p,"buildAttributesMap");var m=D(function(h){h=h.replace(/\r\n?/g,`
|
|
38
|
-
`);let R=new r("!xml"),S=R,M="",C="";for(let
|
|
39
|
-
`;function r(l,d){let p="";return d.format&&d.indentBy.length>0&&(p=n),o(l,d,"",p)}i(r,"toXml"),D(r,"toXml");function o(l,d,p,m){let g="",I=!1;for(let b=0;b<l.length;b++){let
|
|
35
|
+
`)+" "+n[1]:n[0]+e+" "+t.join(", ")+" "+n[1]}i(Dc,"reduceToSingleString")});var Fi=We(Bt=>{"use strict";Object.defineProperty(Bt,"__esModule",{value:!0});Bt.format=void 0;var Hc=Mi(),Uc=$i(),Zc=i((t,...e)=>(0,Hc.format)(Uc.inspect,t,e),"format");Bt.format=Zc});var Le=We(_e=>{"use strict";Object.defineProperty(_e,"__esModule",{value:!0});_e.debug=_e.withoutEnv=_e.Debugger=void 0;var qc=ki(),$c=Fi(),zt=class{static{i(this,"Debugger")}manager;ns;color;last;enabled;constructor(e,n){this.manager=e,this.ns=n,this.color=(0,qc.generateColor)(n),this.last=0,this.enabled=e.enabled.some(r=>r.test(n))}log(...e){if(!this.enabled)return;let n,r=e[0];typeof r=="function"?n=r():n=String(r);let o=Date.now()-(this.last||Date.now());n=(0,$c.format)(n,...e);let s=`${this.color(this.ns)} ${n} ${this.color(`+${o}ms`)}`;console.log(s),this.last=Date.now()}};_e.Debugger=zt;var jt=class{static{i(this,"DebugManager")}debuggers;enabled;constructor(e){this.debuggers=new Map,this.enabled=e??[]}};function Bi(t){return!t||t.length===0?[]:(t=t.replace(/\s/g,"").replace(/\*/g,".+"),t.split(",").map(e=>new RegExp(`^${e}$`)))}i(Bi,"extract");var wt;function Fc(t){t||(t=[]),typeof t=="string"&&(t=Bi(t)),wt=new jt(t)}i(Fc,"withoutEnv");_e.withoutEnv=Fc;function Bc(t){let e=globalThis.DEBUG;wt||(wt=new jt(Bi(e)));let n=new zt(wt,t);return wt.debuggers.set(t,n),Object.assign(n.log.bind(n),{self:n})}i(Bc,"debug");_e.debug=Bc});var Cu=We((cO,Su)=>{"use strict";var qd=Object.defineProperty,$d=Object.getOwnPropertyNames,D=i((t,e)=>qd(t,"name",{value:e,configurable:!0}),"__name"),Re=i((t,e)=>i(function(){return e||(0,t[$d(t)[0]])((e={exports:{}}).exports,e),e.exports},"__require"),"__commonJS"),ei=Re({"node_modules/fast-xml-parser/src/util.js"(t){"use strict";var e=":A-Za-z_\\u00C0-\\u00D6\\u00D8-\\u00F6\\u00F8-\\u02FF\\u0370-\\u037D\\u037F-\\u1FFF\\u200C-\\u200D\\u2070-\\u218F\\u2C00-\\u2FEF\\u3001-\\uD7FF\\uF900-\\uFDCF\\uFDF0-\\uFFFD",n=e+"\\-.\\d\\u00B7\\u0300-\\u036F\\u203F-\\u2040",r="["+e+"]["+n+"]*",o=new RegExp("^"+r+"$"),s=D(function(u,c){let l=[],d=c.exec(u);for(;d;){let p=[];p.startIndex=c.lastIndex-d[0].length;let m=d.length;for(let g=0;g<m;g++)p.push(d[g]);l.push(p),d=c.exec(u)}return l},"getAllMatches"),a=D(function(u){let c=o.exec(u);return!(c===null||typeof c>"u")},"isName");t.isExist=function(u){return typeof u<"u"},t.isEmptyObject=function(u){return Object.keys(u).length===0},t.merge=function(u,c,l){if(c){let d=Object.keys(c),p=d.length;for(let m=0;m<p;m++)l==="strict"?u[d[m]]=[c[d[m]]]:u[d[m]]=c[d[m]]}},t.getValue=function(u){return t.isExist(u)?u:""},t.isName=a,t.getAllMatches=s,t.nameRegexp=r}}),Ou=Re({"node_modules/fast-xml-parser/src/validator.js"(t){"use strict";var e=ei(),n={allowBooleanAttributes:!1,unpairedTags:[]};t.validate=function(h,P){P=Object.assign({},n,P);let O=[],H=!1,f=!1;h[0]==="\uFEFF"&&(h=h.substr(1));for(let R=0;R<h.length;R++)if(h[R]==="<"&&h[R+1]==="?"){if(R+=2,R=o(h,R),R.err)return R}else if(h[R]==="<"){let S=R;if(R++,h[R]==="!"){R=s(h,R);continue}else{let M=!1;h[R]==="/"&&(M=!0,R++);let C="";for(;R<h.length&&h[R]!==">"&&h[R]!==" "&&h[R]!==" "&&h[R]!==`
|
|
36
|
+
`&&h[R]!=="\r";R++)C+=h[R];if(C=C.trim(),C[C.length-1]==="/"&&(C=C.substring(0,C.length-1),R--),!b(C)){let k;return C.trim().length===0?k="Invalid space after '<'.":k="Tag '"+C+"' is an invalid name.",g("InvalidTag",k,T(h,R))}let L=c(h,R);if(L===!1)return g("InvalidAttr","Attributes for '"+C+"' have open quote.",T(h,R));let F=L.value;if(R=L.index,F[F.length-1]==="/"){let k=R-F.length;F=F.substring(0,F.length-1);let N=d(F,P);if(N===!0)H=!0;else return g(N.err.code,N.err.msg,T(h,k+N.err.line))}else if(M)if(L.tagClosed){if(F.trim().length>0)return g("InvalidTag","Closing tag '"+C+"' can't have attributes or invalid starting.",T(h,S));{let k=O.pop();if(C!==k.tagName){let N=T(h,k.tagStartPos);return g("InvalidTag","Expected closing tag '"+k.tagName+"' (opened in line "+N.line+", col "+N.col+") instead of closing tag '"+C+"'.",T(h,S))}O.length==0&&(f=!0)}}else return g("InvalidTag","Closing tag '"+C+"' doesn't have proper closing.",T(h,R));else{let k=d(F,P);if(k!==!0)return g(k.err.code,k.err.msg,T(h,R-F.length+k.err.line));if(f===!0)return g("InvalidXml","Multiple possible root nodes found.",T(h,R));P.unpairedTags.indexOf(C)!==-1||O.push({tagName:C,tagStartPos:S}),H=!0}for(R++;R<h.length;R++)if(h[R]==="<")if(h[R+1]==="!"){R++,R=s(h,R);continue}else if(h[R+1]==="?"){if(R=o(h,++R),R.err)return R}else break;else if(h[R]==="&"){let k=m(h,R);if(k==-1)return g("InvalidChar","char '&' is not expected.",T(h,R));R=k}else if(f===!0&&!r(h[R]))return g("InvalidXml","Extra text at the end",T(h,R));h[R]==="<"&&R--}}else{if(r(h[R]))continue;return g("InvalidChar","char '"+h[R]+"' is not expected.",T(h,R))}if(H){if(O.length==1)return g("InvalidTag","Unclosed tag '"+O[0].tagName+"'.",T(h,O[0].tagStartPos));if(O.length>0)return g("InvalidXml","Invalid '"+JSON.stringify(O.map(R=>R.tagName),null,4).replace(/\r?\n/g,"")+"' found.",{line:1,col:1})}else return g("InvalidXml","Start tag expected.",1);return!0};function r(h){return h===" "||h===" "||h===`
|
|
37
|
+
`||h==="\r"}i(r,"isWhiteSpace"),D(r,"isWhiteSpace");function o(h,P){let O=P;for(;P<h.length;P++)if(h[P]=="?"||h[P]==" "){let H=h.substr(O,P-O);if(P>5&&H==="xml")return g("InvalidXml","XML declaration allowed only at the start of the document.",T(h,P));if(h[P]=="?"&&h[P+1]==">"){P++;break}else continue}return P}i(o,"readPI"),D(o,"readPI");function s(h,P){if(h.length>P+5&&h[P+1]==="-"&&h[P+2]==="-"){for(P+=3;P<h.length;P++)if(h[P]==="-"&&h[P+1]==="-"&&h[P+2]===">"){P+=2;break}}else if(h.length>P+8&&h[P+1]==="D"&&h[P+2]==="O"&&h[P+3]==="C"&&h[P+4]==="T"&&h[P+5]==="Y"&&h[P+6]==="P"&&h[P+7]==="E"){let O=1;for(P+=8;P<h.length;P++)if(h[P]==="<")O++;else if(h[P]===">"&&(O--,O===0))break}else if(h.length>P+9&&h[P+1]==="["&&h[P+2]==="C"&&h[P+3]==="D"&&h[P+4]==="A"&&h[P+5]==="T"&&h[P+6]==="A"&&h[P+7]==="["){for(P+=8;P<h.length;P++)if(h[P]==="]"&&h[P+1]==="]"&&h[P+2]===">"){P+=2;break}}return P}i(s,"readCommentAndCDATA"),D(s,"readCommentAndCDATA");var a='"',u="'";function c(h,P){let O="",H="",f=!1;for(;P<h.length;P++){if(h[P]===a||h[P]===u)H===""?H=h[P]:H!==h[P]||(H="");else if(h[P]===">"&&H===""){f=!0;break}O+=h[P]}return H!==""?!1:{value:O,index:P,tagClosed:f}}i(c,"readAttributeStr"),D(c,"readAttributeStr");var l=new RegExp(`(\\s*)([^\\s=]+)(\\s*=)?(\\s*(['"])(([\\s\\S])*?)\\5)?`,"g");function d(h,P){let O=e.getAllMatches(h,l),H={};for(let f=0;f<O.length;f++){if(O[f][1].length===0)return g("InvalidAttr","Attribute '"+O[f][2]+"' has no space in starting.",_(O[f]));if(O[f][3]!==void 0&&O[f][4]===void 0)return g("InvalidAttr","Attribute '"+O[f][2]+"' is without value.",_(O[f]));if(O[f][3]===void 0&&!P.allowBooleanAttributes)return g("InvalidAttr","boolean attribute '"+O[f][2]+"' is not allowed.",_(O[f]));let R=O[f][2];if(!I(R))return g("InvalidAttr","Attribute '"+R+"' is an invalid name.",_(O[f]));if(!H.hasOwnProperty(R))H[R]=1;else return g("InvalidAttr","Attribute '"+R+"' is repeated.",_(O[f]))}return!0}i(d,"validateAttributeString"),D(d,"validateAttributeString");function p(h,P){let O=/\d/;for(h[P]==="x"&&(P++,O=/[\da-fA-F]/);P<h.length;P++){if(h[P]===";")return P;if(!h[P].match(O))break}return-1}i(p,"validateNumberAmpersand"),D(p,"validateNumberAmpersand");function m(h,P){if(P++,h[P]===";")return-1;if(h[P]==="#")return P++,p(h,P);let O=0;for(;P<h.length;P++,O++)if(!(h[P].match(/\w/)&&O<20)){if(h[P]===";")break;return-1}return P}i(m,"validateAmpersand"),D(m,"validateAmpersand");function g(h,P,O){return{err:{code:h,msg:P,line:O.line||O,col:O.col}}}i(g,"getErrorObject"),D(g,"getErrorObject");function I(h){return e.isName(h)}i(I,"validateAttrName"),D(I,"validateAttrName");function b(h){return e.isName(h)}i(b,"validateTagName"),D(b,"validateTagName");function T(h,P){let O=h.substring(0,P).split(/\r?\n/);return{line:O.length,col:O[O.length-1].length+1}}i(T,"getLineNumberForPosition"),D(T,"getLineNumberForPosition");function _(h){return h.startIndex+h[1].length}i(_,"getPositionFromMatch"),D(_,"getPositionFromMatch")}}),Fd=Re({"node_modules/fast-xml-parser/src/xmlparser/OptionsBuilder.js"(t){var e={preserveOrder:!1,attributeNamePrefix:"@_",attributesGroupName:!1,textNodeName:"#text",ignoreAttributes:!0,removeNSPrefix:!1,allowBooleanAttributes:!1,parseTagValue:!0,parseAttributeValue:!1,trimValues:!0,cdataPropName:!1,numberParseOptions:{hex:!0,leadingZeros:!0,eNotation:!0},tagValueProcessor:function(r,o){return o},attributeValueProcessor:function(r,o){return o},stopNodes:[],alwaysCreateTextNode:!1,isArray:()=>!1,commentPropName:!1,unpairedTags:[],processEntities:!0,htmlEntities:!1,ignoreDeclaration:!1,ignorePiTags:!1,transformTagName:!1,transformAttributeName:!1,updateTag:function(r,o,s){return r}},n=D(function(r){return Object.assign({},e,r)},"buildOptions");t.buildOptions=n,t.defaultOptions=e}}),Bd=Re({"node_modules/fast-xml-parser/src/xmlparser/xmlNode.js"(t,e){"use strict";var n=class{static{i(this,"XmlNode")}static{D(this,"XmlNode")}constructor(r){this.tagname=r,this.child=[],this[":@"]={}}add(r,o){r==="__proto__"&&(r="#__proto__"),this.child.push({[r]:o})}addChild(r){r.tagname==="__proto__"&&(r.tagname="#__proto__"),r[":@"]&&Object.keys(r[":@"]).length>0?this.child.push({[r.tagname]:r.child,":@":r[":@"]}):this.child.push({[r.tagname]:r.child})}};e.exports=n}}),zd=Re({"node_modules/fast-xml-parser/src/xmlparser/DocTypeReader.js"(t,e){var n=ei();function r(p,m){let g={};if(p[m+3]==="O"&&p[m+4]==="C"&&p[m+5]==="T"&&p[m+6]==="Y"&&p[m+7]==="P"&&p[m+8]==="E"){m=m+9;let I=1,b=!1,T=!1,_="";for(;m<p.length;m++)if(p[m]==="<"&&!T){if(b&&a(p,m))m+=7,[entityName,val,m]=o(p,m+1),val.indexOf("&")===-1&&(g[d(entityName)]={regx:RegExp(`&${entityName};`,"g"),val});else if(b&&u(p,m))m+=8;else if(b&&c(p,m))m+=8;else if(b&&l(p,m))m+=9;else if(s)T=!0;else throw new Error("Invalid DOCTYPE");I++,_=""}else if(p[m]===">"){if(T?p[m-1]==="-"&&p[m-2]==="-"&&(T=!1,I--):I--,I===0)break}else p[m]==="["?b=!0:_+=p[m];if(I!==0)throw new Error("Unclosed DOCTYPE")}else throw new Error("Invalid Tag instead of DOCTYPE");return{entities:g,i:m}}i(r,"readDocType"),D(r,"readDocType");function o(p,m){let g="";for(;m<p.length&&p[m]!=="'"&&p[m]!=='"';m++)g+=p[m];if(g=g.trim(),g.indexOf(" ")!==-1)throw new Error("External entites are not supported");let I=p[m++],b="";for(;m<p.length&&p[m]!==I;m++)b+=p[m];return[g,b,m]}i(o,"readEntityExp"),D(o,"readEntityExp");function s(p,m){return p[m+1]==="!"&&p[m+2]==="-"&&p[m+3]==="-"}i(s,"isComment"),D(s,"isComment");function a(p,m){return p[m+1]==="!"&&p[m+2]==="E"&&p[m+3]==="N"&&p[m+4]==="T"&&p[m+5]==="I"&&p[m+6]==="T"&&p[m+7]==="Y"}i(a,"isEntity"),D(a,"isEntity");function u(p,m){return p[m+1]==="!"&&p[m+2]==="E"&&p[m+3]==="L"&&p[m+4]==="E"&&p[m+5]==="M"&&p[m+6]==="E"&&p[m+7]==="N"&&p[m+8]==="T"}i(u,"isElement"),D(u,"isElement");function c(p,m){return p[m+1]==="!"&&p[m+2]==="A"&&p[m+3]==="T"&&p[m+4]==="T"&&p[m+5]==="L"&&p[m+6]==="I"&&p[m+7]==="S"&&p[m+8]==="T"}i(c,"isAttlist"),D(c,"isAttlist");function l(p,m){return p[m+1]==="!"&&p[m+2]==="N"&&p[m+3]==="O"&&p[m+4]==="T"&&p[m+5]==="A"&&p[m+6]==="T"&&p[m+7]==="I"&&p[m+8]==="O"&&p[m+9]==="N"}i(l,"isNotation"),D(l,"isNotation");function d(p){if(n.isName(p))return p;throw new Error(`Invalid entity name ${p}`)}i(d,"validateEntityName"),D(d,"validateEntityName"),e.exports=r}}),jd=Re({"../../node_modules/strnum/strnum.js"(t,e){var n=/^[-+]?0x[a-fA-F0-9]+$/,r=/^([\-\+])?(0*)(\.[0-9]+([eE]\-?[0-9]+)?|[0-9]+(\.[0-9]+([eE]\-?[0-9]+)?)?)$/;!Number.parseInt&&window.parseInt&&(Number.parseInt=window.parseInt),!Number.parseFloat&&window.parseFloat&&(Number.parseFloat=window.parseFloat);var o={hex:!0,leadingZeros:!0,decimalPoint:".",eNotation:!0};function s(u,c={}){if(c=Object.assign({},o,c),!u||typeof u!="string")return u;let l=u.trim();if(c.skipLike!==void 0&&c.skipLike.test(l))return u;if(c.hex&&n.test(l))return Number.parseInt(l,16);{let d=r.exec(l);if(d){let p=d[1],m=d[2],g=a(d[3]),I=d[4]||d[6];if(!c.leadingZeros&&m.length>0&&p&&l[2]!==".")return u;if(!c.leadingZeros&&m.length>0&&!p&&l[1]!==".")return u;{let b=Number(l),T=""+b;return T.search(/[eE]/)!==-1||I?c.eNotation?b:u:l.indexOf(".")!==-1?T==="0"&&g===""||T===g||p&&T==="-"+g?b:u:m?g===T||p+g===T?b:u:l===T||l===p+T?b:u}}else return u}}i(s,"toNumber"),D(s,"toNumber");function a(u){return u&&u.indexOf(".")!==-1&&(u=u.replace(/0+$/,""),u==="."?u="0":u[0]==="."?u="0"+u:u[u.length-1]==="."&&(u=u.substr(0,u.length-1))),u}i(a,"trimZeros"),D(a,"trimZeros"),e.exports=s}}),Vd=Re({"node_modules/fast-xml-parser/src/xmlparser/OrderedObjParser.js"(t,e){"use strict";var n=ei(),r=Bd(),o=zd(),s=jd(),a=class{static{i(this,"OrderedObjParser")}static{D(this,"OrderedObjParser")}constructor(f){this.options=f,this.currentNode=null,this.tagsNodeStack=[],this.docTypeEntities={},this.lastEntities={apos:{regex:/&(apos|#39|#x27);/g,val:"'"},gt:{regex:/&(gt|#62|#x3E);/g,val:">"},lt:{regex:/&(lt|#60|#x3C);/g,val:"<"},quot:{regex:/&(quot|#34|#x22);/g,val:'"'}},this.ampEntity={regex:/&(amp|#38|#x26);/g,val:"&"},this.htmlEntities={space:{regex:/&(nbsp|#160);/g,val:" "},cent:{regex:/&(cent|#162);/g,val:"\xA2"},pound:{regex:/&(pound|#163);/g,val:"\xA3"},yen:{regex:/&(yen|#165);/g,val:"\xA5"},euro:{regex:/&(euro|#8364);/g,val:"\u20AC"},copyright:{regex:/&(copy|#169);/g,val:"\xA9"},reg:{regex:/&(reg|#174);/g,val:"\xAE"},inr:{regex:/&(inr|#8377);/g,val:"\u20B9"}},this.addExternalEntities=u,this.parseXml=m,this.parseTextData=c,this.resolveNameSpace=l,this.buildAttributesMap=p,this.isItStopNode=T,this.replaceEntitiesValue=I,this.readStopNodeData=O,this.saveTextToParentTag=b,this.addChild=g}};function u(f){let R=Object.keys(f);for(let S=0;S<R.length;S++){let M=R[S];this.lastEntities[M]={regex:new RegExp("&"+M+";","g"),val:f[M]}}}i(u,"addExternalEntities"),D(u,"addExternalEntities");function c(f,R,S,M,C,L,F){if(f!==void 0&&(this.options.trimValues&&!M&&(f=f.trim()),f.length>0)){F||(f=this.replaceEntitiesValue(f));let k=this.options.tagValueProcessor(R,f,S,C,L);return k==null?f:typeof k!=typeof f||k!==f?k:this.options.trimValues?H(f,this.options.parseTagValue,this.options.numberParseOptions):f.trim()===f?H(f,this.options.parseTagValue,this.options.numberParseOptions):f}}i(c,"parseTextData"),D(c,"parseTextData");function l(f){if(this.options.removeNSPrefix){let R=f.split(":"),S=f.charAt(0)==="/"?"/":"";if(R[0]==="xmlns")return"";R.length===2&&(f=S+R[1])}return f}i(l,"resolveNameSpace"),D(l,"resolveNameSpace");var d=new RegExp(`([^\\s=]+)\\s*(=\\s*(['"])([\\s\\S]*?)\\3)?`,"gm");function p(f,R,S){if(!this.options.ignoreAttributes&&typeof f=="string"){let M=n.getAllMatches(f,d),C=M.length,L={};for(let F=0;F<C;F++){let k=this.resolveNameSpace(M[F][1]),N=M[F][4],W=this.options.attributeNamePrefix+k;if(k.length)if(this.options.transformAttributeName&&(W=this.options.transformAttributeName(W)),W==="__proto__"&&(W="#__proto__"),N!==void 0){this.options.trimValues&&(N=N.trim()),N=this.replaceEntitiesValue(N);let j=this.options.attributeValueProcessor(k,N,R);j==null?L[W]=N:typeof j!=typeof N||j!==N?L[W]=j:L[W]=H(N,this.options.parseAttributeValue,this.options.numberParseOptions)}else this.options.allowBooleanAttributes&&(L[W]=!0)}if(!Object.keys(L).length)return;if(this.options.attributesGroupName){let F={};return F[this.options.attributesGroupName]=L,F}return L}}i(p,"buildAttributesMap"),D(p,"buildAttributesMap");var m=D(function(f){f=f.replace(/\r\n?/g,`
|
|
38
|
+
`);let R=new r("!xml"),S=R,M="",C="";for(let L=0;L<f.length;L++)if(f[L]==="<")if(f[L+1]==="/"){let k=h(f,">",L,"Closing Tag is not closed."),N=f.substring(L+2,k).trim();if(this.options.removeNSPrefix){let ge=N.indexOf(":");ge!==-1&&(N=N.substr(ge+1))}this.options.transformTagName&&(N=this.options.transformTagName(N)),S&&(M=this.saveTextToParentTag(M,S,C));let W=C.substring(C.lastIndexOf(".")+1);if(N&&this.options.unpairedTags.indexOf(N)!==-1)throw new Error(`Unpaired tag can not be used as closing tag: </${N}>`);let j=0;W&&this.options.unpairedTags.indexOf(W)!==-1?(j=C.lastIndexOf(".",C.lastIndexOf(".")-1),this.tagsNodeStack.pop()):j=C.lastIndexOf("."),C=C.substring(0,j),S=this.tagsNodeStack.pop(),M="",L=k}else if(f[L+1]==="?"){let k=P(f,L,!1,"?>");if(!k)throw new Error("Pi Tag is not closed.");if(M=this.saveTextToParentTag(M,S,C),!(this.options.ignoreDeclaration&&k.tagName==="?xml"||this.options.ignorePiTags)){let N=new r(k.tagName);N.add(this.options.textNodeName,""),k.tagName!==k.tagExp&&k.attrExpPresent&&(N[":@"]=this.buildAttributesMap(k.tagExp,C,k.tagName)),this.addChild(S,N,C)}L=k.closeIndex+1}else if(f.substr(L+1,3)==="!--"){let k=h(f,"-->",L+4,"Comment is not closed.");if(this.options.commentPropName){let N=f.substring(L+4,k-2);M=this.saveTextToParentTag(M,S,C),S.add(this.options.commentPropName,[{[this.options.textNodeName]:N}])}L=k}else if(f.substr(L+1,2)==="!D"){let k=o(f,L);this.docTypeEntities=k.entities,L=k.i}else if(f.substr(L+1,2)==="!["){let k=h(f,"]]>",L,"CDATA is not closed.")-2,N=f.substring(L+9,k);M=this.saveTextToParentTag(M,S,C);let W=this.parseTextData(N,S.tagname,C,!0,!1,!0,!0);W==null&&(W=""),this.options.cdataPropName?S.add(this.options.cdataPropName,[{[this.options.textNodeName]:N}]):S.add(this.options.textNodeName,W),L=k+2}else{let k=P(f,L,this.options.removeNSPrefix),N=k.tagName,W=k.rawTagName,j=k.tagExp,ge=k.attrExpPresent,ni=k.closeIndex;this.options.transformTagName&&(N=this.options.transformTagName(N)),S&&M&&S.tagname!=="!xml"&&(M=this.saveTextToParentTag(M,S,C,!1));let ri=S;if(ri&&this.options.unpairedTags.indexOf(ri.tagname)!==-1&&(S=this.tagsNodeStack.pop(),C=C.substring(0,C.lastIndexOf("."))),N!==R.tagname&&(C+=C?"."+N:N),this.isItStopNode(this.options.stopNodes,C,N)){let de="";if(j.length>0&&j.lastIndexOf("/")===j.length-1)L=k.closeIndex;else if(this.options.unpairedTags.indexOf(N)!==-1)L=k.closeIndex;else{let lr=this.readStopNodeData(f,W,ni+1);if(!lr)throw new Error(`Unexpected end of ${W}`);L=lr.i,de=lr.tagContent}let cr=new r(N);N!==j&&ge&&(cr[":@"]=this.buildAttributesMap(j,C,N)),de&&(de=this.parseTextData(de,N,C,!0,ge,!0,!0)),C=C.substr(0,C.lastIndexOf(".")),cr.add(this.options.textNodeName,de),this.addChild(S,cr,C)}else{if(j.length>0&&j.lastIndexOf("/")===j.length-1){N[N.length-1]==="/"?(N=N.substr(0,N.length-1),C=C.substr(0,C.length-1),j=N):j=j.substr(0,j.length-1),this.options.transformTagName&&(N=this.options.transformTagName(N));let de=new r(N);N!==j&&ge&&(de[":@"]=this.buildAttributesMap(j,C,N)),this.addChild(S,de,C),C=C.substr(0,C.lastIndexOf("."))}else{let de=new r(N);this.tagsNodeStack.push(S),N!==j&&ge&&(de[":@"]=this.buildAttributesMap(j,C,N)),this.addChild(S,de,C),S=de}M="",L=ni}}else M+=f[L];return R.child},"parseXml");function g(f,R,S){let M=this.options.updateTag(R.tagname,S,R[":@"]);M===!1||(typeof M=="string"&&(R.tagname=M),f.addChild(R))}i(g,"addChild"),D(g,"addChild");var I=D(function(f){if(this.options.processEntities){for(let R in this.docTypeEntities){let S=this.docTypeEntities[R];f=f.replace(S.regx,S.val)}for(let R in this.lastEntities){let S=this.lastEntities[R];f=f.replace(S.regex,S.val)}if(this.options.htmlEntities)for(let R in this.htmlEntities){let S=this.htmlEntities[R];f=f.replace(S.regex,S.val)}f=f.replace(this.ampEntity.regex,this.ampEntity.val)}return f},"replaceEntitiesValue");function b(f,R,S,M){return f&&(M===void 0&&(M=Object.keys(R.child).length===0),f=this.parseTextData(f,R.tagname,S,!1,R[":@"]?Object.keys(R[":@"]).length!==0:!1,M),f!==void 0&&f!==""&&R.add(this.options.textNodeName,f),f=""),f}i(b,"saveTextToParentTag"),D(b,"saveTextToParentTag");function T(f,R,S){let M="*."+S;for(let C in f){let L=f[C];if(M===L||R===L)return!0}return!1}i(T,"isItStopNode"),D(T,"isItStopNode");function _(f,R,S=">"){let M,C="";for(let L=R;L<f.length;L++){let F=f[L];if(M)F===M&&(M="");else if(F==='"'||F==="'")M=F;else if(F===S[0])if(S[1]){if(f[L+1]===S[1])return{data:C,index:L}}else return{data:C,index:L};else F===" "&&(F=" ");C+=F}}i(_,"tagExpWithClosingIndex"),D(_,"tagExpWithClosingIndex");function h(f,R,S,M){let C=f.indexOf(R,S);if(C===-1)throw new Error(M);return C+R.length-1}i(h,"findClosingIndex"),D(h,"findClosingIndex");function P(f,R,S,M=">"){let C=_(f,R+1,M);if(!C)return;let L=C.data,F=C.index,k=L.search(/\s/),N=L,W=!0;k!==-1&&(N=L.substring(0,k),L=L.substring(k+1).trimStart());let j=N;if(S){let ge=N.indexOf(":");ge!==-1&&(N=N.substr(ge+1),W=N!==C.data.substr(ge+1))}return{tagName:N,tagExp:L,closeIndex:F,attrExpPresent:W,rawTagName:j}}i(P,"readTagExp"),D(P,"readTagExp");function O(f,R,S){let M=S,C=1;for(;S<f.length;S++)if(f[S]==="<")if(f[S+1]==="/"){let L=h(f,">",S,`${R} is not closed`);if(f.substring(S+2,L).trim()===R&&(C--,C===0))return{tagContent:f.substring(M,S),i:L};S=L}else if(f[S+1]==="?")S=h(f,"?>",S+1,"StopNode is not closed.");else if(f.substr(S+1,3)==="!--")S=h(f,"-->",S+3,"StopNode is not closed.");else if(f.substr(S+1,2)==="![")S=h(f,"]]>",S,"StopNode is not closed.")-2;else{let L=P(f,S,">");L&&((L&&L.tagName)===R&&L.tagExp[L.tagExp.length-1]!=="/"&&C++,S=L.closeIndex)}}i(O,"readStopNodeData"),D(O,"readStopNodeData");function H(f,R,S){if(R&&typeof f=="string"){let M=f.trim();return M==="true"?!0:M==="false"?!1:s(f,S)}else return n.isExist(f)?f:""}i(H,"parseValue"),D(H,"parseValue"),e.exports=a}}),Gd=Re({"node_modules/fast-xml-parser/src/xmlparser/node2json.js"(t){"use strict";function e(a,u){return n(a,u)}i(e,"prettify"),D(e,"prettify");function n(a,u,c){let l,d={};for(let p=0;p<a.length;p++){let m=a[p],g=r(m),I="";if(c===void 0?I=g:I=c+"."+g,g===u.textNodeName)l===void 0?l=m[g]:l+=""+m[g];else{if(g===void 0)continue;if(m[g]){let b=n(m[g],u,I),T=s(b,u);m[":@"]?o(b,m[":@"],I,u):Object.keys(b).length===1&&b[u.textNodeName]!==void 0&&!u.alwaysCreateTextNode?b=b[u.textNodeName]:Object.keys(b).length===0&&(u.alwaysCreateTextNode?b[u.textNodeName]="":b=""),d[g]!==void 0&&d.hasOwnProperty(g)?(Array.isArray(d[g])||(d[g]=[d[g]]),d[g].push(b)):u.isArray(g,I,T)?d[g]=[b]:d[g]=b}}}return typeof l=="string"?l.length>0&&(d[u.textNodeName]=l):l!==void 0&&(d[u.textNodeName]=l),d}i(n,"compress"),D(n,"compress");function r(a){let u=Object.keys(a);for(let c=0;c<u.length;c++){let l=u[c];if(l!==":@")return l}}i(r,"propName"),D(r,"propName");function o(a,u,c,l){if(u){let d=Object.keys(u),p=d.length;for(let m=0;m<p;m++){let g=d[m];l.isArray(g,c+"."+g,!0,!0)?a[g]=[u[g]]:a[g]=u[g]}}}i(o,"assignAttributes"),D(o,"assignAttributes");function s(a,u){let{textNodeName:c}=u,l=Object.keys(a).length;return!!(l===0||l===1&&(a[c]||typeof a[c]=="boolean"||a[c]===0))}i(s,"isLeafTag"),D(s,"isLeafTag"),t.prettify=e}}),Wd=Re({"node_modules/fast-xml-parser/src/xmlparser/XMLParser.js"(t,e){var{buildOptions:n}=Fd(),r=Vd(),{prettify:o}=Gd(),s=Ou(),a=class{static{i(this,"XMLParser2")}static{D(this,"XMLParser")}constructor(u){this.externalEntities={},this.options=n(u)}parse(u,c){if(typeof u!="string")if(u.toString)u=u.toString();else throw new Error("XML data is accepted in String or Bytes[] form.");if(c){c===!0&&(c={});let p=s.validate(u,c);if(p!==!0)throw Error(`${p.err.msg}:${p.err.line}:${p.err.col}`)}let l=new r(this.options);l.addExternalEntities(this.externalEntities);let d=l.parseXml(u);return this.options.preserveOrder||d===void 0?d:o(d,this.options)}addEntity(u,c){if(c.indexOf("&")!==-1)throw new Error("Entity value can't have '&'");if(u.indexOf("&")!==-1||u.indexOf(";")!==-1)throw new Error("An entity must be set without '&' and ';'. Eg. use '#xD' for '
'");if(c==="&")throw new Error("An entity with value '&' is not permitted");this.externalEntities[u]=c}};e.exports=a}}),Jd=Re({"node_modules/fast-xml-parser/src/xmlbuilder/orderedJs2Xml.js"(t,e){var n=`
|
|
39
|
+
`;function r(l,d){let p="";return d.format&&d.indentBy.length>0&&(p=n),o(l,d,"",p)}i(r,"toXml"),D(r,"toXml");function o(l,d,p,m){let g="",I=!1;for(let b=0;b<l.length;b++){let T=l[b],_=s(T);if(_===void 0)continue;let h="";if(p.length===0?h=_:h=`${p}.${_}`,_===d.textNodeName){let R=T[_];u(h,d)||(R=d.tagValueProcessor(_,R),R=c(R,d)),I&&(g+=m),g+=R,I=!1;continue}else if(_===d.cdataPropName){I&&(g+=m),g+=`<![CDATA[${T[_][0][d.textNodeName]}]]>`,I=!1;continue}else if(_===d.commentPropName){g+=m+`<!--${T[_][0][d.textNodeName]}-->`,I=!0;continue}else if(_[0]==="?"){let R=a(T[":@"],d),S=_==="?xml"?"":m,M=T[_][0][d.textNodeName];M=M.length!==0?" "+M:"",g+=S+`<${_}${M}${R}?>`,I=!0;continue}let P=m;P!==""&&(P+=d.indentBy);let O=a(T[":@"],d),H=m+`<${_}${O}`,f=o(T[_],d,h,P);d.unpairedTags.indexOf(_)!==-1?d.suppressUnpairedNode?g+=H+">":g+=H+"/>":(!f||f.length===0)&&d.suppressEmptyNode?g+=H+"/>":f&&f.endsWith(">")?g+=H+`>${f}${m}</${_}>`:(g+=H+">",f&&m!==""&&(f.includes("/>")||f.includes("</"))?g+=m+d.indentBy+f+m:g+=f,g+=`</${_}>`),I=!0}return g}i(o,"arrToStr"),D(o,"arrToStr");function s(l){let d=Object.keys(l);for(let p=0;p<d.length;p++){let m=d[p];if(l.hasOwnProperty(m)&&m!==":@")return m}}i(s,"propName"),D(s,"propName");function a(l,d){let p="";if(l&&!d.ignoreAttributes)for(let m in l){if(!l.hasOwnProperty(m))continue;let g=d.attributeValueProcessor(m,l[m]);g=c(g,d),g===!0&&d.suppressBooleanAttributes?p+=` ${m.substr(d.attributeNamePrefix.length)}`:p+=` ${m.substr(d.attributeNamePrefix.length)}="${g}"`}return p}i(a,"attr_to_str"),D(a,"attr_to_str");function u(l,d){l=l.substr(0,l.length-d.textNodeName.length-1);let p=l.substr(l.lastIndexOf(".")+1);for(let m in d.stopNodes)if(d.stopNodes[m]===l||d.stopNodes[m]==="*."+p)return!0;return!1}i(u,"isStopNode"),D(u,"isStopNode");function c(l,d){if(l&&l.length>0&&d.processEntities)for(let p=0;p<d.entities.length;p++){let m=d.entities[p];l=l.replace(m.regex,m.val)}return l}i(c,"replaceEntitiesValue"),D(c,"replaceEntitiesValue"),e.exports=r}}),Kd=Re({"node_modules/fast-xml-parser/src/xmlbuilder/json2xml.js"(t,e){"use strict";var n=Jd(),r={attributeNamePrefix:"@_",attributesGroupName:!1,textNodeName:"#text",ignoreAttributes:!0,cdataPropName:!1,format:!1,indentBy:" ",suppressEmptyNode:!1,suppressUnpairedNode:!0,suppressBooleanAttributes:!0,tagValueProcessor:function(c,l){return l},attributeValueProcessor:function(c,l){return l},preserveOrder:!1,commentPropName:!1,unpairedTags:[],entities:[{regex:new RegExp("&","g"),val:"&"},{regex:new RegExp(">","g"),val:">"},{regex:new RegExp("<","g"),val:"<"},{regex:new RegExp("'","g"),val:"'"},{regex:new RegExp('"',"g"),val:"""}],processEntities:!0,stopNodes:[],oneListGroup:!1};function o(c){this.options=Object.assign({},r,c),this.options.ignoreAttributes||this.options.attributesGroupName?this.isAttribute=function(){return!1}:(this.attrPrefixLen=this.options.attributeNamePrefix.length,this.isAttribute=u),this.processTextOrObjNode=s,this.options.format?(this.indentate=a,this.tagEndChar=`>
|
|
40
40
|
`,this.newLine=`
|
|
41
|
-
`):(this.indentate=function(){return""},this.tagEndChar=">",this.newLine="")}i(o,"Builder"),D(o,"Builder"),o.prototype.build=function(c){return this.options.preserveOrder?n(c,this.options):(Array.isArray(c)&&this.options.arrayNodeName&&this.options.arrayNodeName.length>1&&(c={[this.options.arrayNodeName]:c}),this.j2x(c,0).val)},o.prototype.j2x=function(c,l){let d="",p="";for(let m in c)if(Object.prototype.hasOwnProperty.call(c,m))if(typeof c[m]>"u")this.isAttribute(m)&&(p+="");else if(c[m]===null)this.isAttribute(m)?p+="":m[0]==="?"?p+=this.indentate(l)+"<"+m+"?"+this.tagEndChar:p+=this.indentate(l)+"<"+m+"/"+this.tagEndChar;else if(c[m]instanceof Date)p+=this.buildTextValNode(c[m],m,"",l);else if(typeof c[m]!="object"){let g=this.isAttribute(m);if(g)d+=this.buildAttrPairStr(g,""+c[m]);else if(m===this.options.textNodeName){let I=this.options.tagValueProcessor(m,""+c[m]);p+=this.replaceEntitiesValue(I)}else p+=this.buildTextValNode(c[m],m,"",l)}else if(Array.isArray(c[m])){let g=c[m].length,I="";for(let b=0;b<g;b++){let x=c[m][b];typeof x>"u"||(x===null?m[0]==="?"?p+=this.indentate(l)+"<"+m+"?"+this.tagEndChar:p+=this.indentate(l)+"<"+m+"/"+this.tagEndChar:typeof x=="object"?this.options.oneListGroup?I+=this.j2x(x,l+1).val:I+=this.processTextOrObjNode(x,m,l):I+=this.buildTextValNode(x,m,"",l))}this.options.oneListGroup&&(I=this.buildObjectNode(I,m,"",l)),p+=I}else if(this.options.attributesGroupName&&m===this.options.attributesGroupName){let g=Object.keys(c[m]),I=g.length;for(let b=0;b<I;b++)d+=this.buildAttrPairStr(g[b],""+c[m][g[b]])}else p+=this.processTextOrObjNode(c[m],m,l);return{attrStr:d,val:p}},o.prototype.buildAttrPairStr=function(c,l){return l=this.options.attributeValueProcessor(c,""+l),l=this.replaceEntitiesValue(l),this.options.suppressBooleanAttributes&&l==="true"?" "+c:" "+c+'="'+l+'"'};function s(c,l,d){let p=this.j2x(c,d+1);return c[this.options.textNodeName]!==void 0&&Object.keys(c).length===1?this.buildTextValNode(c[this.options.textNodeName],l,p.attrStr,d):this.buildObjectNode(p.val,l,p.attrStr,d)}i(s,"processTextOrObjNode"),D(s,"processTextOrObjNode"),o.prototype.buildObjectNode=function(c,l,d,p){if(c==="")return l[0]==="?"?this.indentate(p)+"<"+l+d+"?"+this.tagEndChar:this.indentate(p)+"<"+l+d+this.closeTag(l)+this.tagEndChar;{let m="</"+l+this.tagEndChar,g="";return l[0]==="?"&&(g="?",m=""),(d||d==="")&&c.indexOf("<")===-1?this.indentate(p)+"<"+l+d+g+">"+c+m:this.options.commentPropName!==!1&&l===this.options.commentPropName&&g.length===0?this.indentate(p)+`<!--${c}-->`+this.newLine:this.indentate(p)+"<"+l+d+g+this.tagEndChar+c+this.indentate(p)+m}},o.prototype.closeTag=function(c){let l="";return this.options.unpairedTags.indexOf(c)!==-1?this.options.suppressUnpairedNode||(l="/"):this.options.suppressEmptyNode?l="/":l=`></${c}`,l},o.prototype.buildTextValNode=function(c,l,d,p){if(this.options.cdataPropName!==!1&&l===this.options.cdataPropName)return this.indentate(p)+`<![CDATA[${c}]]>`+this.newLine;if(this.options.commentPropName!==!1&&l===this.options.commentPropName)return this.indentate(p)+`<!--${c}-->`+this.newLine;if(l[0]==="?")return this.indentate(p)+"<"+l+d+"?"+this.tagEndChar;{let m=this.options.tagValueProcessor(l,c);return m=this.replaceEntitiesValue(m),m===""?this.indentate(p)+"<"+l+d+this.closeTag(l)+this.tagEndChar:this.indentate(p)+"<"+l+d+">"+m+"</"+l+this.tagEndChar}},o.prototype.replaceEntitiesValue=function(c){if(c&&c.length>0&&this.options.processEntities)for(let l=0;l<this.options.entities.length;l++){let d=this.options.entities[l];c=c.replace(d.regex,d.val)}return c};function a(c){return this.options.indentBy.repeat(c)}i(a,"indentate"),D(a,"indentate");function u(c){return c.startsWith(this.options.attributeNamePrefix)&&c!==this.options.textNodeName?c.substr(this.attrPrefixLen):!1}i(u,"isAttribute"),D(u,"isAttribute"),e.exports=o}}),Kd=Su(),Jd=Vd(),Yd=Wd();Ou.exports={XMLParser:Jd,XMLValidator:Kd,XMLBuilder:Yd};});var Qd={};Du(Qd,{API_KEY:()=>ms,AWSLoggingPlugin:()=>Cn,AmberfloMeteringInboundPolicy:()=>da,AmberfloMeteringPolicy:()=>Dn,ApiAuthKeyInboundPolicy:()=>ga,ApiKeyInboundPolicy:()=>Un,AuditLogDataStaxProvider:()=>_n,AuditLogPlugin:()=>Nn,Auth0JwtInboundPolicy:()=>fa,AwsLambdaHandlerExtensions:()=>js,BackgroundDispatcher:()=>nr,BackgroundLoader:()=>rr,BasicAuthInboundPolicy:()=>ha,BasicRateLimitInboundPolicy:()=>Vo,BatchDispatch:()=>$,CachingInboundPolicy:()=>ya,ChangeMethodInboundPolicy:()=>ba,ClearHeadersInboundPolicy:()=>wa,ClearHeadersOutboundPolicy:()=>Ra,ClerkJwtInboundPolicy:()=>Pa,CognitoJwtInboundPolicy:()=>Ea,CompositeInboundPolicy:()=>Ia,ConfigurationError:()=>y,ContentTypes:()=>Kt,ContextData:()=>pe,CryptoBeta:()=>ir,CurityPhantomTokenInboundPolicy:()=>xa,DataDogLoggingPlugin:()=>gn,DataDogMetricsPlugin:()=>An,DynaTraceLoggingPlugin:()=>vn,DynatraceMetricsPlugin:()=>Ln,FirebaseJwtInboundPolicy:()=>va,FormDataToJsonInboundPolicy:()=>Ta,GeoFilterInboundPolicy:()=>Sa,GoogleCloudLoggingPlugin:()=>dn,Handler:()=>In,HttpProblems:()=>T,HttpStatusCode:()=>Xt,InboundPolicy:()=>ge,JWTScopeValidationInboundPolicy:()=>Oa,KeyValueStore:()=>ar,LokiLoggingPlugin:()=>Tn,LookupResult:()=>rt,MemoryZoneReadThroughCache:()=>Y,MockApiInboundPolicy:()=>Aa,MoesifInboundPolicy:()=>Da,MonetizationInboundPolicy:()=>qn,OktaJwtInboundPolicy:()=>$a,OpenIdJwtInboundPolicy:()=>te,OutboundPolicy:()=>Te,ProblemResponseFormatter:()=>Ne,PropelAuthJwtInboundPolicy:()=>Ba,RateLimitInboundPolicy:()=>Vo,ReadmeMetricsInboundPolicy:()=>Ya,RemoveHeadersInboundPolicy:()=>Qa,RemoveHeadersOutboundPolicy:()=>Xa,RemoveQueryParamsInboundPolicy:()=>eu,ReplaceStringOutboundPolicy:()=>tu,RequestSizeLimitInboundPolicy:()=>ru,RequestValidationInboundPolicy:()=>Ko,RequireOriginInboundPolicy:()=>du,ResponseSendingEvent:()=>Ye,ResponseSentEvent:()=>Qe,Router:()=>ot,RuntimeError:()=>A,SYSTEM_LOGGER:()=>xt,SchemaBasedRequestValidation:()=>lu,ServiceProviderImpl:()=>tr,SetBodyInboundPolicy:()=>pu,SetHeadersInboundPolicy:()=>mu,SetHeadersOutboundPolicy:()=>gu,SetQueryParamsInboundPolicy:()=>fu,SetStatusOutboundPolicy:()=>hu,SleepInboundPolicy:()=>yu,StripeMonetizationPlugin:()=>Uo,StripeWebhookVerificationInboundPolicy:()=>ct,SumoLogicLoggingPlugin:()=>Sn,SupabaseJwtInboundPolicy:()=>bu,SystemLogMap:()=>F,SystemRouteName:()=>Re,TelemetryPlugin:()=>Je,UpstreamAzureAdServiceAuthInboundPolicy:()=>wu,UpstreamFirebaseAdminAuthInboundPolicy:()=>Pu,UpstreamFirebaseUserAuthInboundPolicy:()=>Eu,UpstreamGcpJwtInboundPolicy:()=>Iu,UpstreamGcpServiceAuthInboundPolicy:()=>vu,VMWareLogInsightLoggingPlugin:()=>On,ValidateJsonSchemaInbound:()=>Tu,XmlToJsonOutboundPolicy:()=>er,ZoneCache:()=>Ke,ZuploRequest:()=>z,awsLambdaHandler:()=>Vs,environment:()=>oe,getIdForParameterSchema:()=>Qn,getIdForRefSchema:()=>iu,getIdForRequestBodySchema:()=>Xn,getRawOperationDataIdentifierName:()=>ou,httpStatuses:()=>en,isRestrictedEnvVariableName:()=>co,isZuploReadableEnvVariableName:()=>lo,openApiSpecHandler:()=>Gs,originalFetch:()=>it,purgeGatewayCache:()=>ks,redirectHandler:()=>Ws,sanitizedIdentifierName:()=>Ue,serialize:()=>Jt,setMoesifContext:()=>Ma,urlForwardHandler:()=>Ks,urlRewriteHandler:()=>Js,webSocketHandler:()=>Ys,webSocketPipelineHandler:()=>ea});module.exports=Hu(Qd);var q=class extends Error{static{i(this,"SystemError")}constructor(e,n){super(e,n),this.name="InternalError"}},A=class extends Error{static{i(this,"RuntimeError")}extensionMembers;constructor(e,n){typeof e=="string"?super(e,n):(super(e.message,n),this.extensionMembers=e.extensionMembers),this.name="RuntimeError"}},y=class extends A{static{i(this,"ConfigurationError")}constructor(e,n){super(e,n),this.name="ConfigurationError"}},Ht=class extends A{static{i(this,"FeatureNotEnabledError")}constructor(e,n){super(e,n),this.name="FeatureNotEnabledError"}};var w=class t{static{i(this,"Environment")}config;static#e;static initialize(e){this.#e||(this.#e=new t(e))}static get instance(){if(!this.#e)throw new q("Environment has not been initialized");return this.#e}constructor({build:e,runtime:n}){let r;try{if(n.__ZUPLO_CONFIG){let o=atob(n.__ZUPLO_CONFIG);r=JSON.parse(o)}}catch{console.warn("Failed to parse runtime configuration")}this.config=r??{},this.build=e,this.runtime=n,this.instanceId=crypto.randomUUID()}build;runtime;instanceId;get deploymentName(){return this.runtime.__ZUPLO_DEPLOYMENT_NAME??this.config.deployment_name??void 0}get useSha256ServiceRouting(){return this.config.use_sha256_service_routing??void 0}get useProxyForFetchFromZups(){return this.config.use_proxy_for_fetch_from_zups??void 0}get devPortalBaseUrl(){return this.runtime.__ZUPLO_DEV_PORTAL_URL??this.config.dev_portal_url??"https://dev-portal-v4-1.zuplo.com"}get buildAssetsUrl(){return this.runtime.__ZUPLO_BUILD_ASSETS_URL??this.config.build_assets_url??"https://build-assets.zuplo.com"}get remoteLogToken(){return this.runtime.__ZUPLO_REMOTE_LOG_TOKEN??this.config.remote_log_token??void 0}get managementApiURL(){return this.runtime.__ZUPLO_MANAGEMENT_API_URL??this.config.management_api_url??"https://api.zuplo.com"}get cdnURL(){return this.runtime.__ZUPLO_CDN_URL??this.config.cdn_url??"https://cdn.zuplo.com"}get remoteLogURL(){return this.runtime.__ZUPLO_REMOTE_LOG_URL??this.config.log_event_api??"https://ellie.zuplo.com"}get loggingId(){return this.runtime.__ZUPLO_LOGGING_ID??this.config.logging_id??void 0}get redisURL(){return this.runtime.__ZUPLO_REDIS_URL??this.config.redis_proxy_url??"https://redis-proxy.zuplo.com"}get apiKeyServiceUrl(){return this.runtime.__ZUPLO_API_KEY_SERVICE_URL??this.config.api_key_service_url??"https://apikey.zuplo.com"}get meteringServiceUrl(){return this.config.metering_service_url??"https://meters.zuplo.com"}get authApiJWT(){return this.runtime.__ZUPLO_AUTH_API_JWT??void 0}get userLogLevel(){return this.runtime.ZUPLO_LOG_LEVEL??this.runtime.__ZUPLO_LOG_LEVEL??this.config.user_log_level??"debug"}get systemLogLevel(){return this.runtime.__ZUPLO_LOG_LEVEL??this.config.system_log_level??"debug"}get logFormat(){return this.runtime.__ZUPLO_LOG_FORMAT??this.config.log_format??"cloudflare"}get isCloudflare(){return this.runtime.__ZUPLO_RUNTIME_TYPE?this.runtime.__ZUPLO_RUNTIME_TYPE==="cloudflare":this.config.runtime_type?this.config.runtime_type==="cloudflare":typeof WebSocketPair=="function"}get isDeno(){return this.runtime.__ZUPLO_RUNTIME_TYPE?this.runtime.__ZUPLO_RUNTIME_TYPE==="deno":this.config.runtime_type?this.config.runtime_type==="deno":typeof WebSocketPair!="function"}get isLocalDevelopment(){return this.build.ENVIRONMENT_TYPE?this.build.ENVIRONMENT_TYPE==="LOCAL_DEVELOPMENT":!1}get systemUserAgent(){return`Zuplo/${this.build.ZUPLO_VERSION}`}get loggingEnvironmentType(){return this.isCloudflare?"edge":this.isLocalDevelopment?"local":this.isDeno?"working-copy":"unknown"}get loggingEnvironmentStage(){return this.build.ENVIRONMENT_TYPE==="PRODUCTION"?"production":this.build.ENVIRONMENT_TYPE==="PREVIEW"?"preview":this.isLocalDevelopment?"local":this.isDeno?"working-copy":"unknown"}get isWorkingCopy(){return this.build.ENVIRONMENT_TYPE==="WORKING_COPY"}};Function.prototype.toString=function(){return"[native code]"};var Ut=globalThis,ii=Ut.caches;if(ii){let t=ii.open;Ut.caches.open=function(e){let n=w.instance.deploymentName??w.instance.build.BUILD_ID;return t.call(this,`${n}-${e}`)},delete Ut.caches.default,Object.freeze(Ut.caches)}var si=new Map,lr=class{static{i(this,"InnerCache")}constructor(e){this.#e=e.maxSize}#e;#t=0;#n=new Map;#r=[];get(e){let n=this.#n.get(e);if(!n)return;let r=Date.now();if(r>n.expiresAt){this.#n.delete(e);return}return n.lastUsed=r,this.#o(),n?.data}put(e,n,r){if(r<=0)return;if(this.#n.size>=this.#e){let a=this.#r.shift();a&&this.#n.delete(a)}let o=Date.now(),s={created:o,lastUsed:o,expiresAt:o+r*1e3,data:n};this.#r.push(e),this.#n.set(e,s)}delete(e){let n=this.#r.indexOf(e);n>=0&&this.#r.slice(n,1),this.#n.delete(e)}get size(){return this.#n.size}#o(){let e=Date.now();this.#t+1e4*1e3>e&&(this.purge(),this.#t=e)}purge(){let e=Date.now();this.#n.forEach((n,r)=>{n.expiresAt>=e&&this.#n.delete(r)})}},We=class{static{i(this,"MemoryCache")}constructor(e,n={maxSize:1e3}){this.name=e;let r=si.get(e);r||(r=new lr(n),si.set(e,r)),this.#e=r}name;#e;get(e){return this.#e.get(e)}put(e,n,r){return this.#e.put(e,n,r)}delete(e){return this.#e.delete(e)}get size(){return this.#e.size}purge(){this.#e.purge()}};var dr="__zuplo-expiry-header",Ke=class{static{i(this,"ZoneCache")}constructor(e,n){this.#t=e,this.#e=n}#e;#t;#n;async#r(){return this.#n||(this.#n=await caches.open(this.#t)),this.#n}#o(e){return new Request(`https://zone-cache.zuplo.app/${encodeURIComponent(e)}`)}async get(e){try{let n=await this.#r(),r=this.#o(e),o=await n.match(r);if(!o)return;let s=o.headers.get(dr);if(!s){try{await n.delete(r)}catch(c){this.logDebug("Handled failure to delete with CF cache because of missing expiryHeader",c),await this.deleteFallback(e)}return}let a=parseInt(s);if(Date.now()>=a){try{await n.delete(r)}catch(c){this.logDebug("Handled failure to delete with CF cache because of expiration",c),await this.deleteFallback(e)}return}return await o.json()}catch(n){this.logDebug(n)}}async put(e,n,r){let o=new Headers({"cache-control":`s-maxage=${r}, must-revalidate`,"content-type":"application/json"});o.set(dr,`${Date.now()+r*1e3}`);let s=await this.#r(),a=this.#o(e),u=new Response(JSON.stringify(n),{headers:o});await s.put(a,u)}async delete(e){let n=await this.#r(),r=this.#o(e);try{await n.delete(r)}catch(o){this.logDebug("Handled failure to delete with CF cache due to explicit delete call",o),await this.deleteFallback(e)}}async deleteFallback(e){let n=new Headers({"Cache-Control":"s-maxage=0, must-revalidate"});n.set(dr,`${Date.now()}`);let r=await this.#r(),o=this.#o(e),s=new Response("",{headers:n});await r.put(o,s)}logDebug(...e){"logger"in this.#e?this.#e.logger?.debug(`Error in ZoneCache: '${this.#t}'`,e):"log"in this.#e&&this.#e.log.debug(`Error in ZoneCache: '${this.#t}'`,e)}};var Y=class{static{i(this,"MemoryZoneReadThroughCache")}constructor(e,n){let r=`f6726488-fd18-4b7f-9c30-6070565e8042-${e}`;this.#e=e,this.#t=new We(r),this.#n=new Ke(r,n),this.#r=n}#e;#t;#n;#r;async get(e){let n=this.#t.get(e);if(n)return n;let r=await this.#n.get(e);if(r){let o=Math.floor((r.expires-Date.now())/1e3);if(o>0)return this.#t.put(e,r.data,o),r.data}}put(e,n,r){this.#t.put(e,n,r);let o={data:n,expires:Date.now()+r*1e3},s=this.#n.put(e,o,r).catch(a=>{this.#r.log.error(`Error in MemoryZoneReadThroughCache: '${this.#e}'`,a)});this.#r.waitUntil(s)}};var ai="zuplo-request-id",Ze="zp-rid",pr="zp-body-removed",qe="cf-ray",ui="x-real-ip",mr="cf-ipcity",gr="cf-ipcontinent",fr="cf-ipcountry",hr="cf-iplongitude",yr="cf-iplatitude",ci="cf-region",li="cf-region-code",di="cf-metro-code",pi="cf-postal-code",mi="cf-timezone",gi="zp-ipcity",fi="zp-ipcontinent",hi="zp-ipcountry",yi="zp-iplongitude",bi="zp-iplatitude",wi="true-client-ip",br="zp-asn",wr="zp-asorg",Rr="zp-colo",Pr="zp-postalcode",Er="zp-metrocode",Ir="zp-region",xr="zp-regioncode",vr="zp-timezone",Ri=[mr,gr,fr,hr,yr,br,wr,Rr,Pr,Er,Ir,xr,vr],Pi=["zp-","cf-"],Ei=[Ze,qe,pr],Ii=["x-b3-sampled","x-b3-spanid","x-b3-traceid","x-envoy-attempt-count","x-envoy-decorator-operation","x-envoy-external-address","x-envoy-peer-metadata","x-envoy-peer-metadata-id","k-proxy-request","fly-client-ip","fly-forwarded-port","fly-forwarded-proto","fly-forwarded-ssl","fly-region","fly-request-id","fly-traceparent","fly-tracestate"],ht="zuplo_meters_d7831150-6d8a-416d-b920-4a7bec209a49",Zt="zuplo_dynamic_meters_0c8cdc26-2514-4756-8adb-474a6e103d91";var uo=require("@opentelemetry/api"),Is=Oe(Le());var Yt=require("@opentelemetry/api");var ke=require("@opentelemetry/api");var Fi=i(t=>(e,n)=>t(e,n),"globalRequestHandlerProxy");function Bi(t){Fi=t}i(Bi,"setTelemetryInitFunction");var zi=i(t=>Fi(t),"proxyHandler");var _e=class{static{i(this,"RuntimePlugin")}},xe=class extends _e{static{i(this,"SystemRuntimePlugin")}async initialize(e){return Promise.resolve()}registerRoutes(e,n){}},Vt=class extends xe{static{i(this,"MeteringPlugin")}},Je=class extends _e{static{i(this,"TelemetryPlugin")}};var bt=class t{static{i(this,"InternalProblemResponseFormatter")}static problemResponseFormat=async e=>{let n=e.problem,r=JSON.stringify(n,null,2);return new Response(r,{status:e.problem.status,statusText:e.statusText,headers:{...e.additionalHeaders,"content-type":"application/problem+json"}})};static setProblemResponseFormat(e){e&&(t.problemResponseFormat=(n,r,o)=>{try{return e(n,r,o)}catch(s){throw new A("Error in custom 'problemResponseFormat'",{cause:s})}})}},Ne=class{static{i(this,"ProblemResponseFormatter")}static async format(e,n,r){return await bt.problemResponseFormat(e,n,r)}};function Gt(t){for(let e in t){let n=t[e];n&&typeof n=="object"&&Gt(n)}return Object.freeze(t)}i(Gt,"deepFreeze");var z=class t extends Request{static{i(this,"ZuploRequest")}#e=void 0;#t;constructor(e,n){super(e,n);let r=n?.params;r?this.#t=r:e instanceof t?this.#t=e.#t:this.#t={};let o=n?.user;o?this.user=o:e instanceof t&&(this.user=e.user)}get query(){if(this.#e===void 0){let e={},n=new URL(this.url).searchParams;for(let[r,o]of n.entries())e[r]=o;this.#e=e}return Gt(this.#e)}get params(){return Gt(this.#t)}user};var wt={},ve=[],kr=[],Mr=[],Dr=[];var Wt={addPlugin(t){ve.push(t)},addRequestHook(t){kr.push(t)},addResponseSendingHook(t){Mr.push(t)},addResponseSendingFinalHook(t){Dr.push(t)}},Vi=i(async(t,e)=>{if(kr.length===0)return t;let n=ke.trace.getTracer("extension");return n.startActiveSpan("onRequest",async r=>{try{let o=t;for(let s of kr){let a=await n.startActiveSpan(s.name,async u=>{let c=await s(o,e);if(c instanceof z||c instanceof Response)return u.end(),c;{let l=new y(`Invalid state - the OnRequest hook must return a ZuploRequest or Response. Received ${typeof o}.`);throw u.end(),u.recordException(l),u.setStatus({code:ke.SpanStatusCode.ERROR}),l}});if(a instanceof z)o=a;else return a}return o}finally{r.end()}})},"invokeOnRequestExtensions"),Gi=i(async(t,e,n)=>{if(Mr.length===0)return t;let r=ke.trace.getTracer("extension");return r.startActiveSpan("onResponseSending",async o=>{try{let s=t;for(let a of Mr)await r.startActiveSpan(a.name,async u=>{let c=await a(t,e,n);if(c instanceof Response)s=c,u.end();else{let l=new y(`Invalid state - the OnResponseSending hook must return a Response. Received ${typeof s}.`);throw u.recordException(l),u.setStatus({code:ke.SpanStatusCode.ERROR}),u.end(),l}});return s}finally{o.end()}})},"invokeOnResponseSendingExtensions"),Wi=i(async(t,e,n)=>{if(Dr.length===0)return;let r=ke.trace.getTracer("extension");return r.startActiveSpan("onResponseSendingFinal",async o=>{try{for(let s of Dr)await r.startActiveSpan(s.name,async a=>{try{await s(t,e,n)}catch(u){throw a.recordException(u),a.setStatus({code:ke.SpanStatusCode.ERROR}),a.end(),u}a.end()})}finally{o.end()}})},"invokeOnResponseSendingFinalExtensions"),ji=!1;async function Ki(t=()=>Promise.resolve()){if(!ji){await t(Wt),wt.value=Wt;for(let e of ve)if(e instanceof Je){let{requestHandlerProxy:n}=e.instrument({accountName:w.instance.build.ACCOUNT_NAME,projectName:w.instance.build.PROJECT_NAME,buildId:w.instance.build.BUILD_ID,zuploVersion:w.instance.build.ZUPLO_VERSION,compatibilityDate:w.instance.build.COMPATIBILITY_DATE,instanceId:w.instance.instanceId,environmentType:w.instance.loggingEnvironmentType,environmentStage:w.instance.loggingEnvironmentStage,deploymentName:w.instance.deploymentName});Bi(n)}for(let e of ve)e instanceof xe&&await e.initialize(Wt);bt.setProblemResponseFormat(Wt.problemResponseFormat),ji=!0}}i(Ki,"initializeRuntime");var Kt={Json:"application/json",Form:"application/x-www-form-urlencoded"};function Jt(t,e){if(t!==null)return e&&typeof t=="string"?t:typeof t=="object"&&e?.startsWith(Kt.Form)?new URLSearchParams(t).toString():typeof t=="object"&&e?.startsWith(Kt.Json)||!e?JSON.stringify(t):t}i(Jt,"serialize");function Rt(t){return X.instance.runtimeSettings.developerPortal.enabled&&t.pathname.startsWith(X.instance.runtimeSettings.developerPortal.sitePathname)||t.pathname.startsWith("/__zuplo/")||t.pathname.startsWith("/__/zuplo/")}i(Rt,"isSystemRoute");var J=class{static{i(this,"Pipeline")}constructor(e){this.execute=this.#t(e)}execute;#e=(e,n)=>async(r,o)=>Yt.trace.getTracer("pipeline").startActiveSpan("handler",async a=>{try{return await e(r,o)}catch(u){o.log.error("Error executing request handler.",u);let c=n.errorHandler(r,o,u);return a.setStatus({code:Yt.SpanStatusCode.ERROR}),c}finally{a.end()}});#t=({processors:e,gateway:n,handler:r})=>async(o,s)=>{let a=[...e],u=i(async b=>{let x=a.pop();return x?x(o,s,n,u):await this.#e(async P=>{let O=await r(P,s);return zc(O)},n)(b,s)},"nextPipe"),l=await u(o),d=new URL(o.url);if(Rt(d)&&w.instance.build.COMPATIBILITY_FLAGS.doNotRunHooksOnSystemRoutes)return l;let p=new Ye(o,l);s.dispatchEvent(p);let m=ne.getContextExtensions(s),g=m.latestRequest,I;try{I=await p.mutableResponse}catch(b){return s.log.error(b),n.errorHandler(o,s,b)}try{I=await m.onResponseSending(I,g,s)}catch(b){return s.log.error(`Error invoking 'context.onResponseSending' hook: '${b.message}'`,b),n.errorHandler(o,s,b)}try{I=await Gi(I,g,s)}catch(b){return s.log.error(`Error invoking 'context.onResponseSending' hook: '${b.message}'`,b),n.errorHandler(o,s,b)}s.dispatchEvent(new Qe(o,I));try{await m.onResponseSendingFinal(l,g,s)}catch(b){throw s.log.error(`Error invoking 'runtime.onResponseSending' hook: '${b.message}'`,b),b}try{await Wi(l,g,s)}catch(b){throw s.log.error(`Error invoking 'runtime.onResponseSending' hook: '${b.message}'`,b),b}return I}};function zc(t){return t instanceof Response?t:typeof t>"u"?new Response:new Response(Jt(t),{headers:{"content-type":"application/json"}})}i(zc,"resultToResponse");var Me=class extends _e{static{i(this,"MetricsPlugin")}};var F=class t{static{i(this,"SystemLogMap")}static#e=new WeakMap;static getLogger(e){let n=t.#e.get(e);if(!n){let r=`No system logger found for context with requestId '${e.requestId}'`;throw console.error(r),new q(r)}return n}static addLogger(e,n){t.#e.set(e,n)}};var $=class{static{i(this,"BatchDispatch")}constructor(e,n,r,o){this.#t=e,this.#i=n,this.#r=r,this.#n=o??console}#e=void 0;#t;#n;#r;#o=[];#i;enqueue=e=>{this.#o.push(e),this.#e||(this.#e=new Promise(n=>{setTimeout(()=>{if(this.#o.length>0){let r=[...this.#o];this.#o.length=0,this.#e=void 0,this.#r(r).catch(o=>{this.#n.error(`Uncaught error in BatchDispatcher named '${this.#t}'}`,o.message,o.stack)}).finally(()=>{n()})}},this.#i)}))};waitUntilFlushed=async()=>{if(this.#e)return this.#e}};var Qt=class{static{i(this,"EllieMetricsTransport")}#e;#t;#n;constructor(e){this.#n=w.instance.loggingId,this.#e=e,this.#t=new $("ellie-metrics-transport",10,this.dispatchFunction,F.getLogger(e))}pushMetrics(e,n){this.#n!==void 0&&(this.#t.enqueue(e),n.waitUntil(this.#t.waitUntilFlushed()))}dispatchFunction=async e=>{if(e.length===0)return;let n,{loggingId:r,remoteLogURL:o,deploymentName:s}=w.instance,a=e.map(u=>{let c=Object.assign({},u);return delete c.requestContentLength,delete c.responseContentLength,c});if(r&&s&&(n=`${o}/v1-alpha/metrics?loggingId=${encodeURI(r)}&deploymentName=${encodeURI(s)}`),n){let u=await fetch(n,{method:"POST",body:JSON.stringify(a),headers:{"content-type":"application/json","zp-dn":w.instance.deploymentName??"unknown","user-agent":w.instance.systemUserAgent}});if(!u.ok){let c=await u.text();F.getLogger(this.#e).error(`Metrics POST responded ${u.status}: ${u.statusText}`,c)}}}};var K=class{static{i(this,"SystemRouteConfiguration")}constructor({label:e,path:n,methods:r,systemRouteName:o,corsPolicy:s="none"}){this.label=e,this.path=n,this.methods=r,this.corsPolicy=s,this.version=Pt.name,this.handler={export:"SYSTEM_IGNORED",module:"SYSTEM_IGNORED"},this.systemRouteName=o}label;path;methods;handler;corsPolicy;version;policies;systemRouteName;raw(){return{}}},Pt={name:"__system-no-version",pathPrefix:""};var re=i(async(t,e,n,r)=>{let o=new Date,s=Date.now(),a=await r(t),u=t.headers.get(qe)??void 0,c=t.headers.get(wi)??void 0,l=e.incomingRequestProperties,d;e.route instanceof K&&(d=e.route.systemRouteName);let p=ne.getContextExtensions(e).latestRequest,m={timestamp:o,statusCode:a.status,durationMs:Date.now()-s,requestContentLength:t.headers.get("content-length")?Number(t.headers.get("content-length")):void 0,responseContentLength:a.headers.get("content-length")?Number(a.headers.get("content-length")):void 0,routePath:e.route?.path??"SYSTEM_OR_NOT_FOUND",systemRouteName:d,requestId:e.requestId,method:t.method,asn:l.asn,asOrganization:l.asOrganization,colo:l.colo,continent:l.continent,country:l.country,city:l.city,latitude:l.latitude,longitude:l.longitude,rayId:u,instanceId:w.instance.instanceId,userSub:p.user?.sub,clientIp:c},g=[];return g.push(new Qt(e)),ve.forEach(I=>{if(I instanceof Me){let b=I.getTransport();g.push(b)}}),g.forEach(I=>{I.pushMetrics(m,e)}),a},"metricsProcessor");var Re=(c=>(c.Build="build-data",c.CorsPreflight="cors-preflight",c.DeveloperPortal="developer-portal",c.DeveloperPortalLegacy="developer-portal-legacy",c.StripePlugin="stripe-plugin",c.EmptyGatewayCatchall="empty-gateway-catchall",c.Ping="ping",c.UnmatchedPath="unmatched-path",c))(Re||{});var Hr=i((t,e)=>{let n=i(async(s,a)=>{let c=new URL(s.url).hostname.toLowerCase();if(!c.endsWith(".zuplo.app")&&!c.endsWith(".zuplo.dev")&&!c.endsWith(".fly.dev")&&!c.endsWith("zuplotest.com")&&c!=="localhost")return T.notFound(s,a);let l=w.instance.build,d={buildId:l.BUILD_ID,zuploVersion:l.ZUPLO_VERSION,compatibilityDate:l.COMPATIBILITY_DATE,apiVersion:l.API_VERSION,gitSha:l.GIT_SHA,timestamp:l.TIMESTAMP,isProduction:l.IS_PRODUCTION},p=s.url.toString().split("?");return p.length>0&&new URLSearchParams(p[1]).get("system_log")==="true"&&F.getLogger(a).error("Test System Log",d),new Response(JSON.stringify(d,null,2),{status:200,headers:{"content-type":"application/json"}})},"buildRouteHandler"),r=new J({processors:[re],handler:n,gateway:e}),o=new K({label:"SYSTEM_BUILD_ROUTE",methods:["GET"],path:"/__zuplo/build",systemRouteName:"build-data"});t.addRoute(o,r.execute)},"registerBuildRoute");var Xt=(E=>(E[E.CONTINUE=100]="CONTINUE",E[E.SWITCHING_PROTOCOLS=101]="SWITCHING_PROTOCOLS",E[E.PROCESSING=102]="PROCESSING",E[E.EARLY_HINTS=103]="EARLY_HINTS",E[E.OK=200]="OK",E[E.CREATED=201]="CREATED",E[E.ACCEPTED=202]="ACCEPTED",E[E.NON_AUTHORITATIVE_INFORMATION=203]="NON_AUTHORITATIVE_INFORMATION",E[E.NO_CONTENT=204]="NO_CONTENT",E[E.RESET_CONTENT=205]="RESET_CONTENT",E[E.PARTIAL_CONTENT=206]="PARTIAL_CONTENT",E[E.MULTI_STATUS=207]="MULTI_STATUS",E[E.ALREADY_REPORTED=208]="ALREADY_REPORTED",E[E.IM_USED=226]="IM_USED",E[E.MULTIPLE_CHOICES=300]="MULTIPLE_CHOICES",E[E.MOVED_PERMANENTLY=301]="MOVED_PERMANENTLY",E[E.FOUND=302]="FOUND",E[E.SEE_OTHER=303]="SEE_OTHER",E[E.NOT_MODIFIED=304]="NOT_MODIFIED",E[E.USE_PROXY=305]="USE_PROXY",E[E.SWITCH_PROXY=306]="SWITCH_PROXY",E[E.TEMPORARY_REDIRECT=307]="TEMPORARY_REDIRECT",E[E.PERMANENT_REDIRECT=308]="PERMANENT_REDIRECT",E[E.BAD_REQUEST=400]="BAD_REQUEST",E[E.UNAUTHORIZED=401]="UNAUTHORIZED",E[E.PAYMENT_REQUIRED=402]="PAYMENT_REQUIRED",E[E.FORBIDDEN=403]="FORBIDDEN",E[E.NOT_FOUND=404]="NOT_FOUND",E[E.METHOD_NOT_ALLOWED=405]="METHOD_NOT_ALLOWED",E[E.NOT_ACCEPTABLE=406]="NOT_ACCEPTABLE",E[E.PROXY_AUTHENTICATION_REQUIRED=407]="PROXY_AUTHENTICATION_REQUIRED",E[E.REQUEST_TIMEOUT=408]="REQUEST_TIMEOUT",E[E.CONFLICT=409]="CONFLICT",E[E.GONE=410]="GONE",E[E.LENGTH_REQUIRED=411]="LENGTH_REQUIRED",E[E.PRECONDITION_FAILED=412]="PRECONDITION_FAILED",E[E.CONTENT_TOO_LARGE=413]="CONTENT_TOO_LARGE",E[E.PAYLOAD_TOO_LARGE=413]="PAYLOAD_TOO_LARGE",E[E.URI_TOO_LONG=414]="URI_TOO_LONG",E[E.UNSUPPORTED_MEDIA_TYPE=415]="UNSUPPORTED_MEDIA_TYPE",E[E.RANGE_NOT_SATISFIABLE=416]="RANGE_NOT_SATISFIABLE",E[E.EXPECTATION_FAILED=417]="EXPECTATION_FAILED",E[E.I_AM_A_TEAPOT=418]="I_AM_A_TEAPOT",E[E.MISDIRECTED_REQUEST=421]="MISDIRECTED_REQUEST",E[E.UNPROCESSABLE_ENTITY=422]="UNPROCESSABLE_ENTITY",E[E.UNPROCESSABLE_CONTENT=422]="UNPROCESSABLE_CONTENT",E[E.LOCKED=423]="LOCKED",E[E.FAILED_DEPENDENCY=424]="FAILED_DEPENDENCY",E[E.TOO_EARLY=425]="TOO_EARLY",E[E.UPGRADE_REQUIRED=426]="UPGRADE_REQUIRED",E[E.PRECONDITION_REQUIRED=428]="PRECONDITION_REQUIRED",E[E.TOO_MANY_REQUESTS=429]="TOO_MANY_REQUESTS",E[E.REQUEST_HEADER_FIELDS_TOO_LARGE=431]="REQUEST_HEADER_FIELDS_TOO_LARGE",E[E.UNAVAILABLE_FOR_LEGAL_REASONS=451]="UNAVAILABLE_FOR_LEGAL_REASONS",E[E.INTERNAL_SERVER_ERROR=500]="INTERNAL_SERVER_ERROR",E[E.NOT_IMPLEMENTED=501]="NOT_IMPLEMENTED",E[E.BAD_GATEWAY=502]="BAD_GATEWAY",E[E.SERVICE_UNAVAILABLE=503]="SERVICE_UNAVAILABLE",E[E.GATEWAY_TIMEOUT=504]="GATEWAY_TIMEOUT",E[E.HTTP_VERSION_NOT_SUPPORTED=505]="HTTP_VERSION_NOT_SUPPORTED",E[E.VARIANT_ALSO_NEGOTIATES=506]="VARIANT_ALSO_NEGOTIATES",E[E.INSUFFICIENT_STORAGE=507]="INSUFFICIENT_STORAGE",E[E.LOOP_DETECTED=508]="LOOP_DETECTED",E[E.NOT_EXTENDED=510]="NOT_EXTENDED",E[E.NETWORK_AUTHENTICATION_REQUIRED=511]="NETWORK_AUTHENTICATION_REQUIRED",E))(Xt||{}),Ji={100:"Continue",101:"Switching Protocols",102:"Processing",103:"Early Hints",200:"OK",201:"Created",202:"Accepted",203:"Non-Authoritative Information",204:"No Content",205:"Reset Content",206:"Partial Content",207:"Multi-Status",208:"Already Reported",226:"IM Used",300:"Multiple Choices",301:"Moved Permanently",302:"Found",303:"See Other",304:"Not Modified",305:"Use Proxy",306:"Switch Proxy",307:"Temporary Redirect",308:"Permanent Redirect",400:"Bad Request",401:"Unauthorized",402:"Payment Required",403:"Forbidden",404:"Not Found",405:"Method Not Allowed",406:"Not Acceptable",407:"Proxy Authentication Required",408:"Request Timeout",409:"Conflict",410:"Gone",411:"Length Required",412:"Precondition Failed",413:"Content Too Large",414:"URI Too Long",415:"Unsupported Media Type",416:"Range Not Satisfiable",417:"Expectation Failed",418:"I'm a teapot",421:"Misdirected Request",422:"Unprocessable Content",423:"Locked",424:"Failed Dependency",425:"Too Early",426:"Upgrade Required",428:"Precondition Required",429:"Too Many Requests",431:"Request Header Fields Too Large",451:"Unavailable For Legal Reasons",500:"Internal Server Error",501:"Not Implemented",502:"Bad Gateway",503:"Service Unavailable",504:"Gateway Timeout",505:"HTTP Version Not Supported",506:"Variant Also Negotiates",507:"Insufficient Storage",508:"Loop Detected",510:"Not Extended",511:"Network Authentication Required"};var jc={100:"Continue",101:"Switching Protocols",102:"Processing",103:"Early Hints",200:"OK",201:"Created",202:"Accepted",203:"Non-Authoritative Information",204:"No Content",205:"Reset Content",206:"Partial Content",207:"Multi-Status",208:"Already Reported",226:"IM Used",300:"Multiple Choices",301:"Moved Permanently",302:"Found",303:"See Other",304:"Not Modified",305:"Use Proxy",307:"Temporary Redirect",308:"Permanent Redirect",400:"Bad Request",401:"Unauthorized",402:"Payment Required",403:"Forbidden",404:"Not Found",405:"Method Not Allowed",406:"Not Acceptable",407:"Proxy Authentication Required",408:"Request Timeout",409:"Conflict",410:"Gone",411:"Length Required",412:"Precondition Failed",413:"Payload Too Large",414:"URI Too Long",415:"Unsupported Media Type",416:"Range Not Satisfiable",417:"Expectation Failed",418:"I'm a Teapot",421:"Misdirected Request",422:"Unprocessable Entity",423:"Locked",424:"Failed Dependency",425:"Too Early",426:"Upgrade Required",428:"Precondition Required",429:"Too Many Requests",431:"Request Header Fields Too Large",451:"Unavailable For Legal Reasons",500:"Internal Server Error",501:"Not Implemented",502:"Bad Gateway",503:"Service Unavailable",504:"Gateway Timeout",505:"HTTP Version Not Supported",506:"Variant Also Negotiates",507:"Insufficient Storage",508:"Loop Detected",509:"Bandwidth Limit Exceeded",510:"Not Extended",511:"Network Authentication Required"},en=jc;function Vc(t){return`${new URL(t.url).pathname}`}i(Vc,"instance");function Gc(t,e){let n={timestamp:new Date().toISOString(),requestId:e.requestId,buildId:w.instance.build.BUILD_ID},r=t.headers.get(qe);return r&&(n.rayId=r),n}i(Gc,"trace");var Wc=i((t,e,n,r,o)=>({problem:{type:t.type,title:t.title,status:t.status,detail:t.detail,instance:Vc(e),trace:Gc(e,n),...r},additionalHeaders:o,statusText:en[t.status]}),"merge"),Ur=class{static{i(this,"HttpProblemsBase")}static format=(e,n,r)=>"problem"in e?Ne.format(e,n,r):Ne.format({problem:e},n,r);static getProblemFromStatus(e,n){return{type:`https://httpproblems.com/http-status/${e}`,status:e,title:Ji[e],...n}}},T=class extends Ur{static{i(this,"HttpProblems")}static#e(e,n,r,o,s){let a=Wc(this.getProblemFromStatus(e),n,r,o,s);return Ne.format(a,n,r)}static continue=(e,n,r,o)=>this.#e(200,e,n,r,o);static switchingProtocols=(e,n,r,o)=>this.#e(101,e,n,r,o);static processing=(e,n,r,o)=>this.#e(102,e,n,r,o);static earlyHints=(e,n,r,o)=>this.#e(103,e,n,r,o);static ok=(e,n,r,o)=>this.#e(200,e,n,r,o);static created=(e,n,r,o)=>this.#e(201,e,n,r,o);static accepted=(e,n,r,o)=>this.#e(202,e,n,r,o);static nonAuthoritativeInformation=(e,n,r,o)=>this.#e(203,e,n,r,o);static noContent=(e,n,r,o)=>this.#e(204,e,n,r,o);static resetContent=(e,n,r,o)=>this.#e(205,e,n,r,o);static partialContent=(e,n,r,o)=>this.#e(206,e,n,r,o);static multiStatus=(e,n,r,o)=>this.#e(207,e,n,r,o);static alreadyReported=(e,n,r,o)=>this.#e(208,e,n,r,o);static imUsed=(e,n,r,o)=>this.#e(226,e,n,r,o);static multipleChoices=(e,n,r,o)=>this.#e(300,e,n,r,o);static movedPermanently=(e,n,r,o)=>this.#e(301,e,n,r,o);static found=(e,n,r,o)=>this.#e(302,e,n,r,o);static seeOther=(e,n,r,o)=>this.#e(303,e,n,r,o);static notModified=(e,n,r,o)=>this.#e(304,e,n,r,o);static useProxy=(e,n,r,o)=>this.#e(305,e,n,r,o);static switchProxy=(e,n,r,o)=>this.#e(306,e,n,r,o);static temporaryRedirect=(e,n,r,o)=>this.#e(307,e,n,r,o);static permanentRedirect=(e,n,r,o)=>this.#e(308,e,n,r,o);static badRequest=(e,n,r,o)=>this.#e(400,e,n,r,o);static unauthorized=(e,n,r,o)=>this.#e(401,e,n,r,o);static paymentRequired=(e,n,r,o)=>this.#e(402,e,n,r,o);static forbidden=(e,n,r,o)=>this.#e(403,e,n,r,o);static notFound=(e,n,r,o)=>this.#e(404,e,n,r,o);static methodNotAllowed=(e,n,r,o)=>this.#e(405,e,n,r,o);static notAcceptable=(e,n,r,o)=>this.#e(406,e,n,r,o);static proxyAuthenticationRequired=(e,n,r,o)=>this.#e(407,e,n,r,o);static requestTimeout=(e,n,r,o)=>this.#e(408,e,n,r,o);static conflict=(e,n,r,o)=>this.#e(409,e,n,r,o);static gone=(e,n,r,o)=>this.#e(410,e,n,r,o);static lengthRequired=(e,n,r,o)=>this.#e(411,e,n,r,o);static preconditionFailed=(e,n,r,o)=>this.#e(412,e,n,r,o);static contentTooLarge=(e,n,r,o)=>this.#e(413,e,n,r,o);static uriTooLong=(e,n,r,o)=>this.#e(414,e,n,r,o);static unsupportedMediaType=(e,n,r,o)=>this.#e(415,e,n,r,o);static rangeNotSatisfiable=(e,n,r,o)=>this.#e(416,e,n,r,o);static expectationFailed=(e,n,r,o)=>this.#e(417,e,n,r,o);static imATeapot=(e,n,r,o)=>this.#e(418,e,n,r,o);static misdirectedRequest=(e,n,r,o)=>this.#e(421,e,n,r,o);static unprocessableContent=(e,n,r,o)=>this.#e(422,e,n,r,o);static locked=(e,n,r,o)=>this.#e(423,e,n,r,o);static failedDependency=(e,n,r,o)=>this.#e(424,e,n,r,o);static tooEarly=(e,n,r,o)=>this.#e(425,e,n,r,o);static upgradeRequired=(e,n,r,o)=>this.#e(426,e,n,r,o);static preconditionRequired=(e,n,r,o)=>this.#e(428,e,n,r,o);static tooManyRequests=(e,n,r,o)=>this.#e(429,e,n,r,o);static requestHeaderFieldsTooLarge=(e,n,r,o)=>this.#e(431,e,n,r,o);static unavailableForLegalReasons=(e,n,r,o)=>this.#e(451,e,n,r,o);static internalServerError=(e,n,r,o)=>this.#e(500,e,n,r,o);static notImplemented=(e,n,r,o)=>this.#e(501,e,n,r,o);static badGateway=(e,n,r,o)=>this.#e(502,e,n,r,o);static serviceUnavailable=(e,n,r,o)=>this.#e(503,e,n,r,o);static gatewayTimeout=(e,n,r,o)=>this.#e(504,e,n,r,o);static httpVersionNotSupported=(e,n,r,o)=>this.#e(505,e,n,r,o);static variantAlsoNegotiates=(e,n,r,o)=>this.#e(506,e,n,r,o);static insufficientStorage=(e,n,r,o)=>this.#e(507,e,n,r,o);static loopDetected=(e,n,r,o)=>this.#e(508,e,n,r,o);static notExtended=(e,n,r,o)=>this.#e(510,e,n,r,o);static networkAuthenticationRequired=(e,n,r,o)=>this.#e(511,e,n,r,o)};var{toString:Kc}=Object.prototype,{propertyIsEnumerable:Jc}=Object.prototype;function Zr(t){return Kc.call(t)}i(Zr,"toString");function ae(t){return typeof t=="string"}i(ae,"isString");function Xe(t){return ae(t)&&t!==""}i(Xe,"isNonEmptyString");function Yi(t){return Zr(t)==="[object RegExp]"}i(Yi,"isRegexp");function Qi(t){return[...Object.keys(t),...Object.getOwnPropertySymbols(t).filter(e=>Jc.call(t,e))]}i(Qi,"getOwnEnumerableKeys");function Fe(t){return typeof t=="object"&&t!==null&&!Array.isArray(t)&&!(t instanceof RegExp)&&!(t instanceof Date)}i(Fe,"isObject");function qr(t){return typeof t=="number"&&!isNaN(t)}i(qr,"isNumber");function $r(t){return t===!0||t===!1}i($r,"isBoolean");function Xi(t){return typeof t>"u"}i(Xi,"isUndefined");function es(t){return Xi(t)||t===null}i(es,"isUndefinedOrNull");function Et(t){return!!t&&typeof t=="object"&&"name"in t&&"message"in t&&"stack"in t}i(Et,"isErrorLike");var ts=new Map;function et(t){if(Array.isArray(t)&&!t.some(o=>typeof o!="number"))return t;if(typeof t!="string")throw new Error("Input must be a string or an array of numbers");if(!/^\d+(?:-\d+)?(?:,\s*\d+(?:-\d+)?)*$/.test(t))throw new Error("Malformed input string");let e=ts.get(t);if(e)return e;let n=t.split(","),r=[];for(let o of n){let s=o.split("-");if(s.length===2){let a=parseInt(s[0],10),u=parseInt(s[1],10);for(let c=a;c<=u;c++)r.push(c)}else r.push(parseInt(o,10))}return ts.set(t,r),r}i(et,"statusCodesStringToNumberArray");function Be(t,e,n){if(!e.startsWith("."))throw new y(`Invalid ${n} - must start with '.' - '${e}' does not`);let r=e.split(".").splice(1),o=t;return r.forEach(s=>{if(o===void 0)throw new A(`Error applying ${n} '${e}', reading '${s}'`);o=o[s]}),`${o}`}i(Be,"getValueFromRequestUser");function ze(t){if(Array.isArray(t)){if(t.includes(n=>typeof n!="string"))throw new y("Received an array that contains non-string values.");return t}if(ae(t))return t.includes(",")?t.split(",").map(n=>n.trim()).filter(n=>n!==","&&n!==""):[t];throw new y(`Expected type of string, received type '${typeof t}'`)}i(ze,"parseValueToStringArray");function ns(t){if(t==null)return[];if(!Array.isArray(t))throw new y(`Invalid corsPolicy configuration. Expected an array of objects, received '${typeof t}'`);return t.map(n=>{if(!Fe(n))throw new y(`Invalid custom cors policy is set. Expected an object, received '${typeof n}'`);if(!Xe(n.name))throw new y("Value of 'name' on custom cors policies must be a non-empty string.");if(n.maxAge!==void 0&&!qr(n.maxAge))throw new y(`Value of 'maxAge' on custom cors policies must be a non-empty string. Received type '${typeof n.maxAge}'`);if(n.allowCredentials!==void 0&&!$r(n.allowCredentials))throw new y("Value of 'allowCredentials' on custom cors policies must be a boolean or not be set. If using an environment variable, check that it is set correctly.");let r=Fr(n,"allowedHeaders"),o=Fr(n,"allowedMethods"),s=Fr(n,"exposeHeaders"),a;try{a=ze(n.allowedOrigins)}catch(c){throw new y(`Value of 'allowedOrigins' on custom cors policies is invalid. ${c.message} If using an environment variable, check that it is set correctly.`)}return{name:n.name,allowCredentials:typeof n.allowCredentials=="boolean"?String(n.allowCredentials):void 0,allowedOrigins:a,allowedHeaders:r?r.join(", "):void 0,allowedMethods:o?o.join(", "):void 0,exposeHeaders:s?s.join(", "):void 0,maxAge:typeof n.maxAge=="number"?n.maxAge.toString():void 0}})}i(ns,"parseCorsPolicies");function Fr(t,e){let n;if(t[e]!==void 0)try{n=ze(t[e])}catch(r){throw new y(`Value of '${e}' on custom cors policies is invalid. ${r.message} If using an environment variable, check that it is set correctly.`)}return n}i(Fr,"parseOptionalProperty");var tn=i((t,e)=>{if(e===null)return;if(t.find(a=>a==="*"))return e;let r=t.map(a=>a.trim().toLowerCase()),o=e.toLowerCase();return r.find(a=>a===o)},"findMatchingOrigin"),nn=i((t,e)=>{let n={"access-control-allow-origin":e};t.allowedHeaders&&(n["access-control-allow-headers"]=t.allowedHeaders),t.allowedMethods&&(n["access-control-allow-methods"]=t.allowedMethods),t.exposeHeaders&&(n["access-control-expose-headers"]=t.exposeHeaders);let r=t.allowCredentials;r&&(n["access-control-allow-credentials"]=r);let o=t.maxAge?.toString()??void 0;return o&&(n["access-control-max-age"]=o),n},"generateCorsHeaders");var Br=i((t,e)=>{let n=e.routeData.corsPolicies,r=i(async(a,u)=>{let c=new URL(a.url.toString()).pathname,l=a.headers.get("access-control-request-method"),d=a.headers.get("access-control-request-headers"),p=a.headers.get("origin");if(p===null||l===null)return T.badRequest(a,u,{detail:"Expect headers origin and access-control-request-method"});let m=t.lookup(l,c);if(!m)return T.notFound(a,u);let g=m.routeConfiguration,I=Yc(l,d,p,g,n);return I.isValid?new Response(void 0,{status:200,statusText:"OK",headers:I.headers}):(I.error&&u.log.warn(I.error),T.notFound(a,u))},"optionsHandler"),o=new J({processors:[re],handler:r,gateway:e}),s=new K({label:"SYSTEM_CORS_ROUTE",methods:["OPTIONS"],path:"/(.*)",systemRouteName:"cors-preflight"});t.addRoute(s,o.execute)},"registerCorsRoute"),Yc=i((t,e,n,r,o)=>{let s={isValid:!1,headers:{}};if(r.corsPolicy==="anything-goes")return{isValid:!0,headers:{"access-control-allow-origin":n,"access-control-allow-methods":t,"access-control-allow-headers":e??"*","access-control-expose-headers":"*","access-control-allow-credentials":"true","access-control-max-age":"600"}};if(r.corsPolicy==="none")return{...s,error:`No CORS policy set for the route '${r.pathPattern}'`};let a=o?.find(l=>l.name===r.corsPolicy);if(!a)throw new y(`Invalid Configuration - corsPolicy '${r.corsPolicy}' not found in *.oas.json 'corsPolicies' section.`);let u=tn(a.allowedOrigins,n);return u?{isValid:!0,headers:nn(a,u)}:{...s,error:`The CORS policy '${a.name}' does not allow the origin '${n}'`}},"validateAndBuildResponseHeaders");var rs=i((t,e)=>{let n=i(async()=>new Response("You have no routes. Add a route in routes.oas.json to get started",{status:200}),"noRoutesHandler"),r=new J({processors:[re],handler:n,gateway:e}),o=new K({label:"SYSTEM_NO_ROUTES",methods:["CONNECT","DELETE","GET","HEAD","OPTIONS","PATCH","POST","PUT","TRACE"],path:"/(.*)",systemRouteName:"empty-gateway-catchall"});t.addRoute(o,r.execute)},"registerNoRoutes");var zr=new K({label:"SYSTEM_NOT_FOUND_ROUTE",methods:["CONNECT","DELETE","GET","HEAD","OPTIONS","PATCH","POST","PUT","TRACE"],path:"/(.*)",systemRouteName:"unmatched-path"}),os=i((t,e)=>{let n=i(async(o,s)=>{let a=wt.value?.notFoundHandler;if(a){let u=ne.getContextExtensions(s);return a(o,s,{routesMatchedByPathOnly:u.pathOnlyMatches??[]})}return T.notFound(o,s)},"notFoundHandler"),r=new J({processors:[re],handler:n,gateway:e});t.addRoute(zr,r.execute)},"registerNotMatchedHandler");var Qc=["access-control-allow-origin","access-control-allow-headers","access-control-expose-headers","access-control-allow-credentials","access-control-max-age"],is=i(t=>{Qc.forEach(e=>t.delete(e))},"stripCorsHeaders"),rn=i(async(t,e,n,r)=>{let o=e.route;if(!o.corsPolicy||o.corsPolicy==="none"){let d=await r(t),p=new Headers(d.headers);return is(p),new Response(d.body,{status:d.status,statusText:d.statusText,headers:p,webSocket:d.webSocket})}let s=await r(t);if(!(s instanceof Response))throw new q(`The CorsProcessor is in the wrong place in the pipeline. It should only receive HttpResponse type but got '${typeof s}'`);let a=Xc(o,n.routeData.corsPolicies),u=el(t,a),c=new Headers(s.headers);return is(c),Object.entries(u).forEach(([d,p])=>{c.set(d,p)}),new Response(s.body,{status:s.status,statusText:s.statusText,headers:c,webSocket:s.webSocket})},"corsProcessor"),Xc=i((t,e)=>{if(t.corsPolicy==="anything-goes")return{name:"anything-goes",allowedHeaders:"*",allowedOrigins:["*"],allowedMethods:t.methods.join(", "),exposeHeaders:"*",allowCredentials:"true",maxAge:"600"};let n=e?.find(r=>r.name===t.corsPolicy);if(n===void 0)throw new y(`Invalid Configuration - no corsPolicy '${t.corsPolicy}' found in *.oas.json`);return n},"getCorsPolicy"),el=i((t,e)=>{let n=tn(e.allowedOrigins,t.headers.get("origin"));return n?nn(e,n):{}},"getCorsHeaders");var jr=i((t,e)=>{let n=i(async()=>new Response(null,{status:200}),"pingRouteHandler"),r=new J({processors:[rn],handler:n,gateway:e}),o=new K({corsPolicy:"anything-goes",label:"SYSTEM_PING_ROUTE",methods:["GET"],path:"/__zuplo/ping",systemRouteName:"ping"});t.addRoute(o,r.execute)},"registerPingRoute");var tt=require("@opentelemetry/api");var on=class{static{i(this,"PolicyBase")}options;policyName;policyType;constructor(e,n){if(!ae(n))throw new A(`The name of a policy must be a string. Received '${n}' of type '${typeof n}'`);this.options=e,this.policyName=n,this.policyType=Object.getPrototypeOf(this).constructor.name}},ge=class extends on{static{i(this,"InboundPolicy")}},Te=class extends on{static{i(this,"OutboundPolicy")}};var Wr=class extends ge{static{i(this,"InboundFunctionOnlyPolicy")}#e;constructor(e,n,r){super(n,r),this.policyType=e.name,this.#e=e}handler(e,n){return this.#e(e,n,this.options,this.policyName)}},Kr=class extends Te{static{i(this,"OutboundFunctionOnlyPolicy")}#e;constructor(e,n,r){super(n,r),this.policyType=e.name,this.#e=e}handler(e,n,r){return this.#e(e,n,r,this.options,this.policyName)}},Vr=new Map;function It(t,e){let n,r;return Array.isArray(t)?n=t:(n=t.policies?.inbound??[],r=t.path),n.filter(s=>!Vr.has(s)).forEach(s=>{let a=e?.find(l=>l.name===s);if(!a)throw new y(`Invalid state - no Policy with the name '${s}' ${r&&`on route '${r}'`} was found in the policies configuration (check case).`);if(typeof a.handler?.module!="object")throw new y(`Invalid state - invalid policy '${s}' on route '${r}' (typeof policy '${typeof a.handler?.module}')`);let u=a.handler?.module[a.handler.export];if(typeof u!="function")throw new y(`Invalid state - invalid policy '${s}' on route '${r}' (typeof module '${typeof u}')`);let c;if(typeof u!="function")throw new y(`Invalid state - invalid policy '${s}' on route '${r}' (typeof module '${typeof u}')`);if(u.prototype instanceof ge)c=new u(a.handler.options,a.name);else if(typeof u=="function")c=new Wr(u,a.handler.options,a.name);else throw new y(`Invalid state - invalid policy '${s}' on route '${r}' (typeof policy '${typeof u}')`);if(typeof c.handler!="function")throw new y(`Invalid state - invalid handler on policy '${s}' on route '${r}' (typeof handler '${typeof c.handler}')`);Vr.set(a.name,c)}),n.map(s=>{let a=Vr.get(s);if(a===void 0)throw new A("Internal error. Policy not found in cache.");return a})}i(It,"getInboundPolicyInstances");var Gr=new Map;function tl(t,e){let n=t.policies?.outbound??[];return n.filter(o=>!Gr.has(o)).forEach(o=>{let s=e?.find(c=>c.name===o);if(!s)throw new y(`Invalid state - no Policy with the name '${o}' on route '${t.path}' was found in the policies configuration (check case).`);if(typeof s.handler?.module!="object")throw new y(`Invalid state - invalid policy '${o}' on route '${t.path}' (typeof policy '${typeof s.handler?.module}')`);let a=s.handler?.module[s.handler.export],u;if(typeof a!="function")throw new y(`Invalid state - invalid policy '${o}' on route '${t.path}' (typeof module '${typeof a}')`);if(a.prototype instanceof Te)u=new a(s.handler.options??{},s.name);else if(typeof a=="function")u=new Kr(a,s.handler.options??{},s.name);else throw new y(`Invalid state - invalid policy '${o}' on route '${t.path}' (typeof policy '${typeof a}')`);if(typeof u.handler!="function")throw new y(`Invalid state - invalid handler on policy '${o}' on route '${t.path}'`);Gr.set(s.name,u)}),n.map(o=>{let s=Gr.get(o);if(s===void 0)throw new A("Internal error. Policy not found in cache.");return s})}i(tl,"getOutboundPolicyInstances");var Jr=i(t=>async(e,n)=>{let r=ne.getContextExtensions(n),o=tt.trace.getTracer("pipeline");return await o.startActiveSpan("inbound-policies",async s=>{try{let a=[...t],u=e;for(;a.length>0;){let c=a.shift();if(!c)return u;let l=await o.startActiveSpan(c.policyName,async d=>{let p=await c.handler(u,n);if(p instanceof Request||p instanceof z||p instanceof Response)return d.end(),p;{let m=new y(`Invalid state - invalid handler on policy '${c.policyName}' on route '${n.route.path}. The result of an inbound policy must be a Response or Request.`);throw d.end(),d.setStatus({code:tt.SpanStatusCode.ERROR}),d.recordException(m),m}});if(l instanceof z)u=l;else if(l instanceof Request)u=new z(l);else if(l instanceof Response)return l;r.latestRequest=u}return u}finally{s.end()}})},"toStackedInboundHandler"),nl=i(t=>async(e,n,r)=>{let o=tt.trace.getTracer("pipeline");return await o.startActiveSpan("outbound-policies",async s=>{try{let a=[...t],u=e;for(;a.length>0;){let c=a.shift();if(!c)return u;u=await o.startActiveSpan(c.policyName,async d=>{try{d.setAttribute("zuplo.policy.name",c.policyName),d.setAttribute("zuplo.policy.type",c.policyType);let p=await c.handler(u,n,r);if(p instanceof Response)return p;{let m=new y(`Invalid state - invalid handler on policy '${c.policyName}' on route '${r.route.path}. The result of an outbound policy must be a Response.`);throw d.setStatus({code:tt.SpanStatusCode.ERROR}),d.recordException(m),m}}finally{d.end()}})}return u}finally{s.end()}})},"toStackedOutboundHandler"),sn=i(async(t,e,n,r)=>{let o=It(e.route,n.routeData.policies),s=tl(e.route,n.routeData.policies);return as({request:t,context:e,inboundPolicies:o,outboundPolicies:s,gateway:n,next:r})},"policyProcessor");function ss({inboundPolicies:t=[],outboundPolicies:e=[]}){return i(async(r,o,s,a)=>as({request:r,context:o,inboundPolicies:t,outboundPolicies:e,gateway:s,next:a}),"policyProcessor")}i(ss,"createInternalPolicyProcessor");async function as({request:t,context:e,inboundPolicies:n,outboundPolicies:r,gateway:o,next:s}){let a=Jr(n);try{let u=await a(t,e);if(u instanceof Response)return u;let c=await s(u),l=nl(r),d;return w.instance.build.COMPATIBILITY_FLAGS.runOutboundPoliciesOnHandlerOnAllStatuses?d=l(c,t,e):d=c.ok?l(c,t,e):c,d}catch(u){return e.log.error(u),o.errorHandler(t,e,u)}}i(as,"executePolicyProcessor");function us(t,e){if(typeof t!="string")throw new TypeError("argument str must be a string");let n={},o=(e||{}).decode||rl,s=0;for(;s<t.length;){let a=t.indexOf("=",s);if(a===-1)break;let u=t.indexOf(";",s);if(u===-1)u=t.length;else if(u<a){s=t.lastIndexOf(";",a-1)+1;continue}let c=t.slice(s,a).trim();if(n[c]===void 0){let l=t.slice(a+1,u).trim();l.charCodeAt(0)===34&&(l=l.slice(1,-1)),n[c]=ol(l,o)}s=u+1}return n}i(us,"parse");function rl(t){return t.indexOf("%")!==-1?decodeURIComponent(t):t}i(rl,"decode");function ol(t,e){try{return e(t)}catch{return t}}i(ol,"tryDecode");function cs(t,e){try{let n=/v\d+(-\d+)?/g,o=us(e.get("Cookie")||"")["zp-dev-portal"];return o!==null&&o&&n.test(o)?`https://dev-portal-${o}.zuplo.com`:t}catch{}return t}i(cs,"devPortalBaseURL");var ls="/__zuplo/dev-portal",il="dev-portal-id",sl="dev-portal-host",al="zp-account",ul="zp-project",cl="dev-portal-build",ll=`
|
|
41
|
+
`):(this.indentate=function(){return""},this.tagEndChar=">",this.newLine="")}i(o,"Builder"),D(o,"Builder"),o.prototype.build=function(c){return this.options.preserveOrder?n(c,this.options):(Array.isArray(c)&&this.options.arrayNodeName&&this.options.arrayNodeName.length>1&&(c={[this.options.arrayNodeName]:c}),this.j2x(c,0).val)},o.prototype.j2x=function(c,l){let d="",p="";for(let m in c)if(Object.prototype.hasOwnProperty.call(c,m))if(typeof c[m]>"u")this.isAttribute(m)&&(p+="");else if(c[m]===null)this.isAttribute(m)?p+="":m[0]==="?"?p+=this.indentate(l)+"<"+m+"?"+this.tagEndChar:p+=this.indentate(l)+"<"+m+"/"+this.tagEndChar;else if(c[m]instanceof Date)p+=this.buildTextValNode(c[m],m,"",l);else if(typeof c[m]!="object"){let g=this.isAttribute(m);if(g)d+=this.buildAttrPairStr(g,""+c[m]);else if(m===this.options.textNodeName){let I=this.options.tagValueProcessor(m,""+c[m]);p+=this.replaceEntitiesValue(I)}else p+=this.buildTextValNode(c[m],m,"",l)}else if(Array.isArray(c[m])){let g=c[m].length,I="";for(let b=0;b<g;b++){let T=c[m][b];typeof T>"u"||(T===null?m[0]==="?"?p+=this.indentate(l)+"<"+m+"?"+this.tagEndChar:p+=this.indentate(l)+"<"+m+"/"+this.tagEndChar:typeof T=="object"?this.options.oneListGroup?I+=this.j2x(T,l+1).val:I+=this.processTextOrObjNode(T,m,l):I+=this.buildTextValNode(T,m,"",l))}this.options.oneListGroup&&(I=this.buildObjectNode(I,m,"",l)),p+=I}else if(this.options.attributesGroupName&&m===this.options.attributesGroupName){let g=Object.keys(c[m]),I=g.length;for(let b=0;b<I;b++)d+=this.buildAttrPairStr(g[b],""+c[m][g[b]])}else p+=this.processTextOrObjNode(c[m],m,l);return{attrStr:d,val:p}},o.prototype.buildAttrPairStr=function(c,l){return l=this.options.attributeValueProcessor(c,""+l),l=this.replaceEntitiesValue(l),this.options.suppressBooleanAttributes&&l==="true"?" "+c:" "+c+'="'+l+'"'};function s(c,l,d){let p=this.j2x(c,d+1);return c[this.options.textNodeName]!==void 0&&Object.keys(c).length===1?this.buildTextValNode(c[this.options.textNodeName],l,p.attrStr,d):this.buildObjectNode(p.val,l,p.attrStr,d)}i(s,"processTextOrObjNode"),D(s,"processTextOrObjNode"),o.prototype.buildObjectNode=function(c,l,d,p){if(c==="")return l[0]==="?"?this.indentate(p)+"<"+l+d+"?"+this.tagEndChar:this.indentate(p)+"<"+l+d+this.closeTag(l)+this.tagEndChar;{let m="</"+l+this.tagEndChar,g="";return l[0]==="?"&&(g="?",m=""),(d||d==="")&&c.indexOf("<")===-1?this.indentate(p)+"<"+l+d+g+">"+c+m:this.options.commentPropName!==!1&&l===this.options.commentPropName&&g.length===0?this.indentate(p)+`<!--${c}-->`+this.newLine:this.indentate(p)+"<"+l+d+g+this.tagEndChar+c+this.indentate(p)+m}},o.prototype.closeTag=function(c){let l="";return this.options.unpairedTags.indexOf(c)!==-1?this.options.suppressUnpairedNode||(l="/"):this.options.suppressEmptyNode?l="/":l=`></${c}`,l},o.prototype.buildTextValNode=function(c,l,d,p){if(this.options.cdataPropName!==!1&&l===this.options.cdataPropName)return this.indentate(p)+`<![CDATA[${c}]]>`+this.newLine;if(this.options.commentPropName!==!1&&l===this.options.commentPropName)return this.indentate(p)+`<!--${c}-->`+this.newLine;if(l[0]==="?")return this.indentate(p)+"<"+l+d+"?"+this.tagEndChar;{let m=this.options.tagValueProcessor(l,c);return m=this.replaceEntitiesValue(m),m===""?this.indentate(p)+"<"+l+d+this.closeTag(l)+this.tagEndChar:this.indentate(p)+"<"+l+d+">"+m+"</"+l+this.tagEndChar}},o.prototype.replaceEntitiesValue=function(c){if(c&&c.length>0&&this.options.processEntities)for(let l=0;l<this.options.entities.length;l++){let d=this.options.entities[l];c=c.replace(d.regex,d.val)}return c};function a(c){return this.options.indentBy.repeat(c)}i(a,"indentate"),D(a,"indentate");function u(c){return c.startsWith(this.options.attributeNamePrefix)&&c!==this.options.textNodeName?c.substr(this.attrPrefixLen):!1}i(u,"isAttribute"),D(u,"isAttribute"),e.exports=o}}),Yd=Ou(),Qd=Wd(),Xd=Kd();Su.exports={XMLParser:Qd,XMLValidator:Yd,XMLBuilder:Xd};});var ep={};Du(ep,{AWSLoggingPlugin:()=>An,AmberfloMeteringInboundPolicy:()=>da,AmberfloMeteringPolicy:()=>Hn,ApiAuthKeyInboundPolicy:()=>ga,ApiKeyInboundPolicy:()=>Zn,AuditLogDataStaxProvider:()=>Nn,AuditLogPlugin:()=>kn,Auth0JwtInboundPolicy:()=>fa,AwsLambdaHandlerExtensions:()=>Us,BackgroundDispatcher:()=>rr,BackgroundLoader:()=>or,BasicAuthInboundPolicy:()=>ha,BasicRateLimitInboundPolicy:()=>Vo,BatchDispatch:()=>q,CachingInboundPolicy:()=>ya,ChangeMethodInboundPolicy:()=>ba,ClearHeadersInboundPolicy:()=>wa,ClearHeadersOutboundPolicy:()=>Ra,ClerkJwtInboundPolicy:()=>Pa,CognitoJwtInboundPolicy:()=>Ea,CompositeInboundPolicy:()=>Ia,ConfigurationError:()=>y,ContentTypes:()=>Jt,ContextData:()=>me,CryptoBeta:()=>sr,CurityPhantomTokenInboundPolicy:()=>Ta,DataDogLoggingPlugin:()=>gn,DataDogMetricsPlugin:()=>_n,DynaTraceLoggingPlugin:()=>vn,DynatraceMetricsPlugin:()=>Ln,FirebaseJwtInboundPolicy:()=>xa,FormDataToJsonInboundPolicy:()=>va,GeoFilterInboundPolicy:()=>Oa,GoogleCloudLoggingPlugin:()=>dn,Handler:()=>In,HttpProblems:()=>v,HttpStatusCode:()=>Xt,InboundPolicy:()=>fe,JWTScopeValidationInboundPolicy:()=>Sa,KeyValueStore:()=>ur,LokiLoggingPlugin:()=>On,LookupResult:()=>it,MemoryZoneReadThroughCache:()=>Y,MockApiInboundPolicy:()=>Aa,MoesifInboundPolicy:()=>Da,MonetizationInboundPolicy:()=>$n,OktaJwtInboundPolicy:()=>$a,OpenIdJwtInboundPolicy:()=>ee,OutboundPolicy:()=>Oe,ProblemResponseFormatter:()=>ke,PropelAuthJwtInboundPolicy:()=>Ba,RateLimitInboundPolicy:()=>Vo,ReadmeMetricsInboundPolicy:()=>Ya,RemoveHeadersInboundPolicy:()=>Qa,RemoveHeadersOutboundPolicy:()=>Xa,RemoveQueryParamsInboundPolicy:()=>eu,ReplaceStringOutboundPolicy:()=>tu,RequestSizeLimitInboundPolicy:()=>ru,RequestValidationInboundPolicy:()=>Jo,RequireOriginInboundPolicy:()=>du,ResponseSendingEvent:()=>Xe,ResponseSentEvent:()=>et,Router:()=>st,RuntimeError:()=>A,SYSTEM_LOGGER:()=>bt,SchemaBasedRequestValidation:()=>lu,SemanticAttributes:()=>pe,ServiceProviderImpl:()=>nr,SetBodyInboundPolicy:()=>pu,SetHeadersInboundPolicy:()=>mu,SetHeadersOutboundPolicy:()=>gu,SetQueryParamsInboundPolicy:()=>fu,SetStatusOutboundPolicy:()=>hu,SleepInboundPolicy:()=>yu,StripeMonetizationPlugin:()=>Uo,StripeWebhookVerificationInboundPolicy:()=>lt,SumoLogicLoggingPlugin:()=>Sn,SupabaseJwtInboundPolicy:()=>bu,SystemRouteName:()=>Pe,TelemetryPlugin:()=>Ye,UpstreamAzureAdServiceAuthInboundPolicy:()=>wu,UpstreamFirebaseAdminAuthInboundPolicy:()=>Pu,UpstreamFirebaseUserAuthInboundPolicy:()=>Eu,UpstreamGcpJwtInboundPolicy:()=>Iu,UpstreamGcpServiceAuthInboundPolicy:()=>xu,VMWareLogInsightLoggingPlugin:()=>Cn,ValidateJsonSchemaInbound:()=>vu,XmlToJsonOutboundPolicy:()=>tr,ZoneCache:()=>Ke,ZuploRequest:()=>z,awsLambdaHandler:()=>Zs,environment:()=>oe,getIdForParameterSchema:()=>Xn,getIdForRefSchema:()=>iu,getIdForRequestBodySchema:()=>er,getRawOperationDataIdentifierName:()=>ou,httpStatuses:()=>en,openApiSpecHandler:()=>qs,redirectHandler:()=>$s,sanitizedIdentifierName:()=>Ze,serialize:()=>Kt,setMoesifContext:()=>Ma,urlForwardHandler:()=>Fs,urlRewriteHandler:()=>Bs,webSocketHandler:()=>Ys,webSocketPipelineHandler:()=>ea});module.exports=Hu(ep);var dr="2024-01-15",ii=Object.freeze({none:{runOutboundPoliciesOnHandlerOnAllStatuses:!1,doNotRunHooksOnSystemRoutes:!1,removeAllVendorHeadersExceptListed:!1},"2023-03-14":{runOutboundPoliciesOnHandlerOnAllStatuses:!1,doNotRunHooksOnSystemRoutes:!1,removeAllVendorHeadersExceptListed:!1},"2024-01-15":{runOutboundPoliciesOnHandlerOnAllStatuses:!0,doNotRunHooksOnSystemRoutes:!0,removeAllVendorHeadersExceptListed:!0}});function si(){return new w({build:{ACCOUNT_NAME:"mock-account-name",PROJECT_NAME:"mock-project-name",API_VERSION:"0.0.0",BUILD_ID:crypto.randomUUID(),TIMESTAMP:new Date().toISOString(),IS_PRODUCTION:!1,BUILD_ENV:"test",ZUPLO_VERSION:"0.0.0",COMPATIBILITY_DATE:dr,ENVIRONMENT_TYPE:"mock-environment-type",GIT_SHA:void 0,COMPATIBILITY_FLAGS:ii[dr]},runtime:{RUNTIME_ENV:"test",RUNTIME_STAGE:"test",__ZUPLO_DEPLOYMENT_NAME:"mock-deployment-name",__ZUPLO_LOG_LEVEL:"debug",__ZUPLO_LOG_FORMAT:"pretty",__ZUPLO_MANAGEMENT_API_URL:"",__ZUPLO_RUNTIME_TYPE:"deno",__ZUPLO_AUTH_API_JWT:""}})}i(si,"getMockEnvironment");var w=class t{static{i(this,"Environment")}config;static#e;static#t=!1;static initialize(e){this.#e||(this.#e=new t(e),this.#t=!0)}static get instance(){return this.#t||(console.debug("Environment has not been initialized. This is okay when running tests, a mock environment will be used."),this.#e=si()),this.#e}constructor({build:e,runtime:n}){let r;try{if(n.__ZUPLO_CONFIG){let o=atob(n.__ZUPLO_CONFIG);r=JSON.parse(o)}}catch{console.warn("Failed to parse runtime configuration")}this.config=r??{},this.build=e,this.runtime=n,this.instanceId=crypto.randomUUID()}build;runtime;instanceId;get deploymentName(){return this.runtime.__ZUPLO_DEPLOYMENT_NAME??this.config.deployment_name??void 0}get useSha256ServiceRouting(){return this.config.use_sha256_service_routing??void 0}get useProxyForFetchFromZups(){return this.config.use_proxy_for_fetch_from_zups??void 0}get devPortalBaseUrl(){return this.runtime.__ZUPLO_DEV_PORTAL_URL??this.config.dev_portal_url??"https://dev-portal-v4-1.zuplo.com"}get buildAssetsUrl(){return this.runtime.__ZUPLO_BUILD_ASSETS_URL??this.config.build_assets_url??"https://build-assets.zuplo.com"}get remoteLogToken(){return this.runtime.__ZUPLO_REMOTE_LOG_TOKEN??this.config.remote_log_token??void 0}get managementApiURL(){return this.runtime.__ZUPLO_MANAGEMENT_API_URL??this.config.management_api_url??"https://api.zuplo.com"}get cdnURL(){return this.runtime.__ZUPLO_CDN_URL??this.config.cdn_url??"https://cdn.zuplo.com"}get remoteLogURL(){return this.runtime.__ZUPLO_REMOTE_LOG_URL??this.config.log_event_api??"https://ellie.zuplo.com"}get loggingId(){return this.runtime.__ZUPLO_LOGGING_ID??this.config.logging_id??void 0}get redisURL(){return this.runtime.__ZUPLO_REDIS_URL??this.config.redis_proxy_url??"https://redis-proxy.zuplo.com"}get apiKeyServiceUrl(){return this.runtime.__ZUPLO_API_KEY_SERVICE_URL??this.config.api_key_service_url??"https://apikey.zuplo.com"}get meteringServiceUrl(){return this.config.metering_service_url??"https://meters.zuplo.com"}get authApiJWT(){return this.runtime.__ZUPLO_AUTH_API_JWT??void 0}get userLogLevel(){return this.runtime.ZUPLO_LOG_LEVEL??this.runtime.__ZUPLO_LOG_LEVEL??this.config.user_log_level??"debug"}get systemLogLevel(){return this.runtime.__ZUPLO_LOG_LEVEL??this.config.system_log_level??"debug"}get logFormat(){return this.runtime.__ZUPLO_LOG_FORMAT??this.config.log_format??"cloudflare"}get isCloudflare(){return this.runtime.__ZUPLO_RUNTIME_TYPE?this.runtime.__ZUPLO_RUNTIME_TYPE==="cloudflare":this.config.runtime_type?this.config.runtime_type==="cloudflare":typeof WebSocketPair=="function"}get isDeno(){return this.runtime.__ZUPLO_RUNTIME_TYPE?this.runtime.__ZUPLO_RUNTIME_TYPE==="deno":this.config.runtime_type?this.config.runtime_type==="deno":typeof WebSocketPair!="function"}get isLocalDevelopment(){return this.build.ENVIRONMENT_TYPE?this.build.ENVIRONMENT_TYPE==="LOCAL_DEVELOPMENT":!1}get systemUserAgent(){return`Zuplo/${this.build.ZUPLO_VERSION}`}get loggingEnvironmentType(){return this.isCloudflare?"edge":this.isLocalDevelopment?"local":this.isDeno?"working-copy":"unknown"}get loggingEnvironmentStage(){return this.build.ENVIRONMENT_TYPE==="PRODUCTION"?"production":this.build.ENVIRONMENT_TYPE==="PREVIEW"?"preview":this.isLocalDevelopment?"local":this.isDeno?"working-copy":"unknown"}get isWorkingCopy(){return this.build.ENVIRONMENT_TYPE==="WORKING_COPY"}};Function.prototype.toString=function(){return"[native code]"};var Ht=globalThis,ai=Ht.caches;if(ai){let t=ai.open;Ht.caches.open=function(e){let n=w.instance.deploymentName??w.instance.build.BUILD_ID;return t.call(this,`${n}-${e}`)},delete Ht.caches.default,Object.freeze(Ht.caches)}var ui=new Map,pr=class{static{i(this,"InnerCache")}constructor(e){this.#e=e.maxSize}#e;#t=0;#n=new Map;#r=[];get(e){let n=this.#n.get(e);if(!n)return;let r=Date.now();if(r>n.expiresAt){this.#n.delete(e);return}return n.lastUsed=r,this.#o(),n?.data}put(e,n,r){if(r<=0)return;if(this.#n.size>=this.#e){let a=this.#r.shift();a&&this.#n.delete(a)}let o=Date.now(),s={created:o,lastUsed:o,expiresAt:o+r*1e3,data:n};this.#r.push(e),this.#n.set(e,s)}delete(e){let n=this.#r.indexOf(e);n>=0&&this.#r.slice(n,1),this.#n.delete(e)}get size(){return this.#n.size}#o(){let e=Date.now();this.#t+1e4*1e3>e&&(this.purge(),this.#t=e)}purge(){let e=Date.now();this.#n.forEach((n,r)=>{n.expiresAt>=e&&this.#n.delete(r)})}},Je=class{static{i(this,"MemoryCache")}constructor(e,n={maxSize:1e3}){this.name=e;let r=ui.get(e);r||(r=new pr(n),ui.set(e,r)),this.#e=r}name;#e;get(e){return this.#e.get(e)}put(e,n,r){return this.#e.put(e,n,r)}delete(e){return this.#e.delete(e)}get size(){return this.#e.size}purge(){this.#e.purge()}};var mr="__zuplo-expiry-header",Ke=class{static{i(this,"ZoneCache")}constructor(e,n){this.#t=e,this.#e=n}#e;#t;#n;async#r(){return this.#n||(this.#n=await caches.open(this.#t)),this.#n}#o(e){return new Request(`https://zone-cache.zuplo.app/${encodeURIComponent(e)}`)}async get(e){try{let n=await this.#r(),r=this.#o(e),o=await n.match(r);if(!o)return;let s=o.headers.get(mr);if(!s){try{await n.delete(r)}catch(c){this.logDebug("Handled failure to delete with CF cache because of missing expiryHeader",c),await this.deleteFallback(e)}return}let a=parseInt(s);if(Date.now()>=a){try{await n.delete(r)}catch(c){this.logDebug("Handled failure to delete with CF cache because of expiration",c),await this.deleteFallback(e)}return}return await o.json()}catch(n){this.logDebug(n)}}async put(e,n,r){let o=new Headers({"cache-control":`s-maxage=${r}, must-revalidate`,"content-type":"application/json"});o.set(mr,`${Date.now()+r*1e3}`);let s=await this.#r(),a=this.#o(e),u=new Response(JSON.stringify(n),{headers:o});await s.put(a,u)}async delete(e){let n=await this.#r(),r=this.#o(e);try{await n.delete(r)}catch(o){this.logDebug("Handled failure to delete with CF cache due to explicit delete call",o),await this.deleteFallback(e)}}async deleteFallback(e){let n=new Headers({"Cache-Control":"s-maxage=0, must-revalidate"});n.set(mr,`${Date.now()}`);let r=await this.#r(),o=this.#o(e),s=new Response("",{headers:n});await r.put(o,s)}logDebug(...e){"logger"in this.#e?this.#e.logger?.debug(`Error in ZoneCache: '${this.#t}'`,e):"log"in this.#e&&this.#e.log.debug(`Error in ZoneCache: '${this.#t}'`,e)}};var Y=class{static{i(this,"MemoryZoneReadThroughCache")}constructor(e,n){let r=`f6726488-fd18-4b7f-9c30-6070565e8042-${e}`;this.#e=e,this.#t=new Je(r),this.#n=new Ke(r,n),this.#r=n}#e;#t;#n;#r;async get(e){let n=this.#t.get(e);if(n)return n;let r=await this.#n.get(e);if(r){let o=Math.floor((r.expires-Date.now())/1e3);if(o>0)return this.#t.put(e,r.data,o),r.data}}put(e,n,r){this.#t.put(e,n,r);let o={data:n,expires:Date.now()+r*1e3},s=this.#n.put(e,o,r).catch(a=>{this.#r.log.error(`Error in MemoryZoneReadThroughCache: '${this.#e}'`,a)});this.#r.waitUntil(s)}};var ci="zuplo-request-id",qe="zp-rid",gr="zp-body-removed",$e="cf-ray",li="x-real-ip",fr="cf-ipcity",hr="cf-ipcontinent",yr="cf-ipcountry",br="cf-iplongitude",wr="cf-iplatitude",di="cf-region",pi="cf-region-code",mi="cf-metro-code",gi="cf-postal-code",fi="cf-timezone",hi="zp-ipcity",yi="zp-ipcontinent",bi="zp-ipcountry",wi="zp-iplongitude",Ri="zp-iplatitude",Pi="true-client-ip",Rr="zp-asn",Pr="zp-asorg",Er="zp-colo",Ir="zp-postalcode",Tr="zp-metrocode",xr="zp-region",vr="zp-regioncode",Or="zp-timezone",Ei=[fr,hr,yr,br,wr,Rr,Pr,Er,Ir,Tr,xr,vr,Or],Ii=["zp-","cf-"],Ti=[qe,$e,gr],xi=["x-b3-sampled","x-b3-spanid","x-b3-traceid","x-envoy-attempt-count","x-envoy-decorator-operation","x-envoy-external-address","x-envoy-peer-metadata","x-envoy-peer-metadata-id","k-proxy-request","fly-client-ip","fly-forwarded-port","fly-forwarded-proto","fly-forwarded-ssl","fly-region","fly-request-id","fly-traceparent","fly-tracestate"],yt="zuplo_meters_d7831150-6d8a-416d-b920-4a7bec209a49",Ut="zuplo_dynamic_meters_0c8cdc26-2514-4756-8adb-474a6e103d91",bt="system-logger";var $=class extends Error{static{i(this,"SystemError")}constructor(e,n){super(e,n),this.name="InternalError"}},A=class extends Error{static{i(this,"RuntimeError")}extensionMembers;constructor(e,n){typeof e=="string"?super(e,n):(super(e.message,n),this.extensionMembers=e.extensionMembers),this.name="RuntimeError"}},y=class extends A{static{i(this,"ConfigurationError")}constructor(e,n){super(e,n),this.name="ConfigurationError"}},Zt=class extends A{static{i(this,"FeatureNotEnabledError")}constructor(e,n){super(e,n),this.name="FeatureNotEnabledError"}};var lo=require("@opentelemetry/api"),Ts=Ce(Le());var Yt=require("@opentelemetry/api");var Me=require("@opentelemetry/api");var zi=i(t=>(e,n)=>t(e,n),"globalRequestHandlerProxy");function ji(t){zi=t}i(ji,"setTelemetryInitFunction");var Vi=i(t=>zi(t),"proxyHandler");var Ne=class{static{i(this,"RuntimePlugin")}},xe=class extends Ne{static{i(this,"SystemRuntimePlugin")}async initialize(e){return Promise.resolve()}registerRoutes(e,n){}},Vt=class extends xe{static{i(this,"MeteringPlugin")}},Ye=class extends Ne{static{i(this,"TelemetryPlugin")}};var Rt=class t{static{i(this,"InternalProblemResponseFormatter")}static problemResponseFormat=async e=>{let n=e.problem,r=JSON.stringify(n,null,2);return new Response(r,{status:e.problem.status,statusText:e.statusText,headers:{...e.additionalHeaders,"content-type":"application/problem+json"}})};static setProblemResponseFormat(e){e&&(t.problemResponseFormat=(n,r,o)=>{try{return e(n,r,o)}catch(s){throw new A("Error in custom 'problemResponseFormat'",{cause:s})}})}},ke=class{static{i(this,"ProblemResponseFormatter")}static async format(e,n,r){return await Rt.problemResponseFormat(e,n,r)}};function Gt(t){for(let e in t){let n=t[e];n&&typeof n=="object"&&Gt(n)}return Object.freeze(t)}i(Gt,"deepFreeze");var z=class t extends Request{static{i(this,"ZuploRequest")}#e=void 0;#t;constructor(e,n){super(e,n);let r=n?.params;r?this.#t=r:e instanceof t?this.#t=e.#t:this.#t={};let o=n?.user;o?this.user=o:e instanceof t&&(this.user=e.user)}get query(){if(this.#e===void 0){let e={},n=new URL(this.url).searchParams;for(let[r,o]of n.entries())e[r]=o;this.#e=e}return Gt(this.#e)}get params(){return Gt(this.#t)}user};var Pt={},ve=[],Dr=[],Hr=[],Ur=[];var Wt={addPlugin(t){ve.push(t)},addRequestHook(t){Dr.push(t)},addResponseSendingHook(t){Hr.push(t)},addResponseSendingFinalHook(t){Ur.push(t)}},Wi=i(async(t,e)=>{if(Dr.length===0)return t;let n=Me.trace.getTracer("extension");return n.startActiveSpan("hook:onRequest",async r=>{try{let o=t;for(let s of Dr){let a=await n.startActiveSpan(s.name,async u=>{let c=await s(o,e);if(c instanceof z||c instanceof Response)return u.end(),c;{let l=new y(`Invalid state - the OnRequest hook must return a ZuploRequest or Response. Received ${typeof o}.`);throw u.end(),u.recordException(l),u.setStatus({code:Me.SpanStatusCode.ERROR}),l}});if(a instanceof z)o=a;else return a}return o}finally{r.end()}})},"invokeOnRequestExtensions"),Ji=i(async(t,e,n)=>{if(Hr.length===0)return t;let r=Me.trace.getTracer("extension");return r.startActiveSpan("hook:onResponseSending",async o=>{try{let s=t;for(let a of Hr)await r.startActiveSpan(a.name,async u=>{let c=await a(t,e,n);if(c instanceof Response)s=c,u.end();else{let l=new y(`Invalid state - the OnResponseSending hook must return a Response. Received ${typeof s}.`);throw u.recordException(l),u.setStatus({code:Me.SpanStatusCode.ERROR}),u.end(),l}});return s}finally{o.end()}})},"invokeOnResponseSendingExtensions"),Ki=i(async(t,e,n)=>{if(Ur.length===0)return;let r=Me.trace.getTracer("extension");return r.startActiveSpan("hook:onResponseSendingFinal",async o=>{try{for(let s of Ur)await r.startActiveSpan(s.name,async a=>{try{await s(t,e,n)}catch(u){throw a.recordException(u),a.setStatus({code:Me.SpanStatusCode.ERROR}),a.end(),u}a.end()})}finally{o.end()}})},"invokeOnResponseSendingFinalExtensions"),Gi=!1;async function Yi(t=()=>Promise.resolve()){if(!Gi){await t(Wt),Pt.value=Wt;for(let e of ve)if(e instanceof Ye){let{requestHandlerProxy:n}=e.instrument({accountName:w.instance.build.ACCOUNT_NAME,projectName:w.instance.build.PROJECT_NAME,buildId:w.instance.build.BUILD_ID,zuploVersion:w.instance.build.ZUPLO_VERSION,compatibilityDate:w.instance.build.COMPATIBILITY_DATE,instanceId:w.instance.instanceId,environmentType:w.instance.loggingEnvironmentType,environmentStage:w.instance.loggingEnvironmentStage,deploymentName:w.instance.deploymentName});ji(n)}for(let e of ve)e instanceof xe&&await e.initialize(Wt);Rt.setProblemResponseFormat(Wt.problemResponseFormat),Gi=!0}}i(Yi,"initializeRuntime");var Jt={Json:"application/json",Form:"application/x-www-form-urlencoded"};function Kt(t,e){if(t!==null)return e&&typeof t=="string"?t:typeof t=="object"&&e?.startsWith(Jt.Form)?new URLSearchParams(t).toString():typeof t=="object"&&e?.startsWith(Jt.Json)||!e?JSON.stringify(t):t}i(Kt,"serialize");function Qe(t){return te.instance.runtimeSettings.developerPortal.enabled&&t.pathname.startsWith(te.instance.runtimeSettings.developerPortal.sitePathname)||t.pathname.startsWith("/__zuplo/")||t.pathname.startsWith("/__/zuplo/")}i(Qe,"isSystemRoute");var K=class{static{i(this,"Pipeline")}constructor(e){this.execute=this.#t(e)}execute;#e=(e,n)=>async(r,o)=>Yt.trace.getTracer("pipeline").startActiveSpan("handler",async a=>{try{return await e(r,o)}catch(u){o.log.error("Error executing request handler.",u);let c=n.errorHandler(r,o,u);return a.setStatus({code:Yt.SpanStatusCode.ERROR}),c}finally{a.end()}});#t=({processors:e,gateway:n,handler:r})=>async(o,s)=>{let a=[...e],u=i(async b=>{let T=a.pop();return T?T(o,s,n,u):await this.#e(async P=>{let O=await r(P,s);return zc(O)},n)(b,s)},"nextPipe"),l=await u(o),d=new URL(o.url);if(Qe(d)&&w.instance.build.COMPATIBILITY_FLAGS.doNotRunHooksOnSystemRoutes)return l;let p=new Xe(o,l);s.dispatchEvent(p);let m=ne.getContextExtensions(s),g=m.latestRequest,I;try{I=await p.mutableResponse}catch(b){return s.log.error(b),n.errorHandler(o,s,b)}try{I=await m.onResponseSending(I,g,s)}catch(b){return s.log.error(`Error invoking 'context.onResponseSending' hook: '${b.message}'`,b),n.errorHandler(o,s,b)}try{I=await Ji(I,g,s)}catch(b){return s.log.error(`Error invoking 'context.onResponseSending' hook: '${b.message}'`,b),n.errorHandler(o,s,b)}s.dispatchEvent(new et(o,I));try{await m.onResponseSendingFinal(l,g,s)}catch(b){throw s.log.error(`Error invoking 'runtime.onResponseSending' hook: '${b.message}'`,b),b}try{await Ki(l,g,s)}catch(b){throw s.log.error(`Error invoking 'runtime.onResponseSending' hook: '${b.message}'`,b),b}return I}};function zc(t){return t instanceof Response?t:typeof t>"u"?new Response:new Response(Kt(t),{headers:{"content-type":"application/json"}})}i(zc,"resultToResponse");var De=class extends Ne{static{i(this,"MetricsPlugin")}};var B=class t{static{i(this,"SystemLogMap")}static#e=new WeakMap;static getLogger(e){let n=t.#e.get(e);if(!n){let r=`No system logger found for context with requestId '${e.requestId}'`;throw console.error(r),new $(r)}return n}static addLogger(e,n){t.#e.set(e,n)}};var q=class{static{i(this,"BatchDispatch")}constructor(e,n,r,o){this.#t=e,this.#i=n,this.#r=r,this.#n=o??console}#e=void 0;#t;#n;#r;#o=[];#i;enqueue=e=>{this.#o.push(e),this.#e||(this.#e=new Promise(n=>{setTimeout(()=>{if(this.#o.length>0){let r=[...this.#o];this.#o.length=0,this.#e=void 0,this.#r(r).catch(o=>{this.#n.error(`Uncaught error in BatchDispatcher named '${this.#t}'}`,o.message,o.stack)}).finally(()=>{n()})}},this.#i)}))};waitUntilFlushed=async()=>{if(this.#e)return this.#e}};var Qt=class{static{i(this,"EllieMetricsTransport")}#e;#t;#n;constructor(e){this.#n=w.instance.loggingId,this.#e=e,this.#t=new q("ellie-metrics-transport",10,this.dispatchFunction,B.getLogger(e))}pushMetrics(e,n){this.#n!==void 0&&(this.#t.enqueue(e),n.waitUntil(this.#t.waitUntilFlushed()))}dispatchFunction=async e=>{if(e.length===0)return;let n,{loggingId:r,remoteLogURL:o,deploymentName:s}=w.instance,a=e.map(u=>{let c=Object.assign({},u);return delete c.requestContentLength,delete c.responseContentLength,c});if(r&&s&&(n=`${o}/v1-alpha/metrics?loggingId=${encodeURI(r)}&deploymentName=${encodeURI(s)}`),n){let u=await fetch(n,{method:"POST",body:JSON.stringify(a),headers:{"content-type":"application/json","zp-dn":w.instance.deploymentName??"unknown","user-agent":w.instance.systemUserAgent}});if(!u.ok){let c=await u.text();B.getLogger(this.#e).error(`Metrics POST responded ${u.status}: ${u.statusText}`,c)}}}};var J=class{static{i(this,"SystemRouteConfiguration")}constructor({label:e,path:n,methods:r,systemRouteName:o,corsPolicy:s="none"}){this.label=e,this.path=n,this.methods=r,this.corsPolicy=s,this.version=Et.name,this.handler={export:"SYSTEM_IGNORED",module:"SYSTEM_IGNORED"},this.systemRouteName=o}label;path;methods;handler;corsPolicy;version;policies;systemRouteName;raw(){return{}}},Et={name:"__system-no-version",pathPrefix:""};var re=i(async(t,e,n,r)=>{let o=new Date,s=Date.now(),a=await r(t),u=t.headers.get($e)??void 0,c=t.headers.get(Pi)??void 0,l=e.incomingRequestProperties,d;e.route instanceof J&&(d=e.route.systemRouteName);let p=ne.getContextExtensions(e).latestRequest,m={timestamp:o,statusCode:a.status,durationMs:Date.now()-s,requestContentLength:t.headers.get("content-length")?Number(t.headers.get("content-length")):void 0,responseContentLength:a.headers.get("content-length")?Number(a.headers.get("content-length")):void 0,routePath:e.route?.path??"SYSTEM_OR_NOT_FOUND",systemRouteName:d,requestId:e.requestId,method:t.method,asn:l.asn,asOrganization:l.asOrganization,colo:l.colo,continent:l.continent,country:l.country,city:l.city,latitude:l.latitude,longitude:l.longitude,rayId:u,instanceId:w.instance.instanceId,userSub:p.user?.sub,clientIp:c},g=[];return g.push(new Qt(e)),ve.forEach(I=>{if(I instanceof De){let b=I.getTransport();g.push(b)}}),g.forEach(I=>{I.pushMetrics(m,e)}),a},"metricsProcessor");var Pe=(c=>(c.Build="build-data",c.CorsPreflight="cors-preflight",c.DeveloperPortal="developer-portal",c.DeveloperPortalLegacy="developer-portal-legacy",c.StripePlugin="stripe-plugin",c.EmptyGatewayCatchall="empty-gateway-catchall",c.Ping="ping",c.UnmatchedPath="unmatched-path",c))(Pe||{});var Zr=i((t,e)=>{let n=i(async(s,a)=>{let c=new URL(s.url).hostname.toLowerCase();if(!c.endsWith(".zuplo.app")&&!c.endsWith(".zuplo.dev")&&!c.endsWith(".fly.dev")&&!c.endsWith("zuplotest.com")&&c!=="localhost")return v.notFound(s,a);let l=w.instance.build,d={buildId:l.BUILD_ID,zuploVersion:l.ZUPLO_VERSION,compatibilityDate:l.COMPATIBILITY_DATE,apiVersion:l.API_VERSION,gitSha:l.GIT_SHA,timestamp:l.TIMESTAMP,isProduction:l.IS_PRODUCTION},p=s.url.toString().split("?");return p.length>0&&new URLSearchParams(p[1]).get("system_log")==="true"&&B.getLogger(a).error("Test System Log",d),new Response(JSON.stringify(d,null,2),{status:200,headers:{"content-type":"application/json"}})},"buildRouteHandler"),r=new K({processors:[re],handler:n,gateway:e}),o=new J({label:"SYSTEM_BUILD_ROUTE",methods:["GET"],path:"/__zuplo/build",systemRouteName:"build-data"});t.addRoute(o,r.execute)},"registerBuildRoute");var Xt=(E=>(E[E.CONTINUE=100]="CONTINUE",E[E.SWITCHING_PROTOCOLS=101]="SWITCHING_PROTOCOLS",E[E.PROCESSING=102]="PROCESSING",E[E.EARLY_HINTS=103]="EARLY_HINTS",E[E.OK=200]="OK",E[E.CREATED=201]="CREATED",E[E.ACCEPTED=202]="ACCEPTED",E[E.NON_AUTHORITATIVE_INFORMATION=203]="NON_AUTHORITATIVE_INFORMATION",E[E.NO_CONTENT=204]="NO_CONTENT",E[E.RESET_CONTENT=205]="RESET_CONTENT",E[E.PARTIAL_CONTENT=206]="PARTIAL_CONTENT",E[E.MULTI_STATUS=207]="MULTI_STATUS",E[E.ALREADY_REPORTED=208]="ALREADY_REPORTED",E[E.IM_USED=226]="IM_USED",E[E.MULTIPLE_CHOICES=300]="MULTIPLE_CHOICES",E[E.MOVED_PERMANENTLY=301]="MOVED_PERMANENTLY",E[E.FOUND=302]="FOUND",E[E.SEE_OTHER=303]="SEE_OTHER",E[E.NOT_MODIFIED=304]="NOT_MODIFIED",E[E.USE_PROXY=305]="USE_PROXY",E[E.SWITCH_PROXY=306]="SWITCH_PROXY",E[E.TEMPORARY_REDIRECT=307]="TEMPORARY_REDIRECT",E[E.PERMANENT_REDIRECT=308]="PERMANENT_REDIRECT",E[E.BAD_REQUEST=400]="BAD_REQUEST",E[E.UNAUTHORIZED=401]="UNAUTHORIZED",E[E.PAYMENT_REQUIRED=402]="PAYMENT_REQUIRED",E[E.FORBIDDEN=403]="FORBIDDEN",E[E.NOT_FOUND=404]="NOT_FOUND",E[E.METHOD_NOT_ALLOWED=405]="METHOD_NOT_ALLOWED",E[E.NOT_ACCEPTABLE=406]="NOT_ACCEPTABLE",E[E.PROXY_AUTHENTICATION_REQUIRED=407]="PROXY_AUTHENTICATION_REQUIRED",E[E.REQUEST_TIMEOUT=408]="REQUEST_TIMEOUT",E[E.CONFLICT=409]="CONFLICT",E[E.GONE=410]="GONE",E[E.LENGTH_REQUIRED=411]="LENGTH_REQUIRED",E[E.PRECONDITION_FAILED=412]="PRECONDITION_FAILED",E[E.CONTENT_TOO_LARGE=413]="CONTENT_TOO_LARGE",E[E.PAYLOAD_TOO_LARGE=413]="PAYLOAD_TOO_LARGE",E[E.URI_TOO_LONG=414]="URI_TOO_LONG",E[E.UNSUPPORTED_MEDIA_TYPE=415]="UNSUPPORTED_MEDIA_TYPE",E[E.RANGE_NOT_SATISFIABLE=416]="RANGE_NOT_SATISFIABLE",E[E.EXPECTATION_FAILED=417]="EXPECTATION_FAILED",E[E.I_AM_A_TEAPOT=418]="I_AM_A_TEAPOT",E[E.MISDIRECTED_REQUEST=421]="MISDIRECTED_REQUEST",E[E.UNPROCESSABLE_ENTITY=422]="UNPROCESSABLE_ENTITY",E[E.UNPROCESSABLE_CONTENT=422]="UNPROCESSABLE_CONTENT",E[E.LOCKED=423]="LOCKED",E[E.FAILED_DEPENDENCY=424]="FAILED_DEPENDENCY",E[E.TOO_EARLY=425]="TOO_EARLY",E[E.UPGRADE_REQUIRED=426]="UPGRADE_REQUIRED",E[E.PRECONDITION_REQUIRED=428]="PRECONDITION_REQUIRED",E[E.TOO_MANY_REQUESTS=429]="TOO_MANY_REQUESTS",E[E.REQUEST_HEADER_FIELDS_TOO_LARGE=431]="REQUEST_HEADER_FIELDS_TOO_LARGE",E[E.UNAVAILABLE_FOR_LEGAL_REASONS=451]="UNAVAILABLE_FOR_LEGAL_REASONS",E[E.INTERNAL_SERVER_ERROR=500]="INTERNAL_SERVER_ERROR",E[E.NOT_IMPLEMENTED=501]="NOT_IMPLEMENTED",E[E.BAD_GATEWAY=502]="BAD_GATEWAY",E[E.SERVICE_UNAVAILABLE=503]="SERVICE_UNAVAILABLE",E[E.GATEWAY_TIMEOUT=504]="GATEWAY_TIMEOUT",E[E.HTTP_VERSION_NOT_SUPPORTED=505]="HTTP_VERSION_NOT_SUPPORTED",E[E.VARIANT_ALSO_NEGOTIATES=506]="VARIANT_ALSO_NEGOTIATES",E[E.INSUFFICIENT_STORAGE=507]="INSUFFICIENT_STORAGE",E[E.LOOP_DETECTED=508]="LOOP_DETECTED",E[E.NOT_EXTENDED=510]="NOT_EXTENDED",E[E.NETWORK_AUTHENTICATION_REQUIRED=511]="NETWORK_AUTHENTICATION_REQUIRED",E))(Xt||{}),Qi={100:"Continue",101:"Switching Protocols",102:"Processing",103:"Early Hints",200:"OK",201:"Created",202:"Accepted",203:"Non-Authoritative Information",204:"No Content",205:"Reset Content",206:"Partial Content",207:"Multi-Status",208:"Already Reported",226:"IM Used",300:"Multiple Choices",301:"Moved Permanently",302:"Found",303:"See Other",304:"Not Modified",305:"Use Proxy",306:"Switch Proxy",307:"Temporary Redirect",308:"Permanent Redirect",400:"Bad Request",401:"Unauthorized",402:"Payment Required",403:"Forbidden",404:"Not Found",405:"Method Not Allowed",406:"Not Acceptable",407:"Proxy Authentication Required",408:"Request Timeout",409:"Conflict",410:"Gone",411:"Length Required",412:"Precondition Failed",413:"Content Too Large",414:"URI Too Long",415:"Unsupported Media Type",416:"Range Not Satisfiable",417:"Expectation Failed",418:"I'm a teapot",421:"Misdirected Request",422:"Unprocessable Content",423:"Locked",424:"Failed Dependency",425:"Too Early",426:"Upgrade Required",428:"Precondition Required",429:"Too Many Requests",431:"Request Header Fields Too Large",451:"Unavailable For Legal Reasons",500:"Internal Server Error",501:"Not Implemented",502:"Bad Gateway",503:"Service Unavailable",504:"Gateway Timeout",505:"HTTP Version Not Supported",506:"Variant Also Negotiates",507:"Insufficient Storage",508:"Loop Detected",510:"Not Extended",511:"Network Authentication Required"};var jc={100:"Continue",101:"Switching Protocols",102:"Processing",103:"Early Hints",200:"OK",201:"Created",202:"Accepted",203:"Non-Authoritative Information",204:"No Content",205:"Reset Content",206:"Partial Content",207:"Multi-Status",208:"Already Reported",226:"IM Used",300:"Multiple Choices",301:"Moved Permanently",302:"Found",303:"See Other",304:"Not Modified",305:"Use Proxy",307:"Temporary Redirect",308:"Permanent Redirect",400:"Bad Request",401:"Unauthorized",402:"Payment Required",403:"Forbidden",404:"Not Found",405:"Method Not Allowed",406:"Not Acceptable",407:"Proxy Authentication Required",408:"Request Timeout",409:"Conflict",410:"Gone",411:"Length Required",412:"Precondition Failed",413:"Payload Too Large",414:"URI Too Long",415:"Unsupported Media Type",416:"Range Not Satisfiable",417:"Expectation Failed",418:"I'm a Teapot",421:"Misdirected Request",422:"Unprocessable Entity",423:"Locked",424:"Failed Dependency",425:"Too Early",426:"Upgrade Required",428:"Precondition Required",429:"Too Many Requests",431:"Request Header Fields Too Large",451:"Unavailable For Legal Reasons",500:"Internal Server Error",501:"Not Implemented",502:"Bad Gateway",503:"Service Unavailable",504:"Gateway Timeout",505:"HTTP Version Not Supported",506:"Variant Also Negotiates",507:"Insufficient Storage",508:"Loop Detected",509:"Bandwidth Limit Exceeded",510:"Not Extended",511:"Network Authentication Required"},en=jc;function Vc(t){return`${new URL(t.url).pathname}`}i(Vc,"instance");function Gc(t,e){let n={timestamp:new Date().toISOString(),requestId:e.requestId,buildId:w.instance.build.BUILD_ID},r=t.headers.get($e);return r&&(n.rayId=r),n}i(Gc,"trace");var Wc=i((t,e,n,r,o)=>({problem:{type:t.type,title:t.title,status:t.status,detail:t.detail,instance:Vc(e),trace:Gc(e,n),...r},additionalHeaders:o,statusText:en[t.status]}),"merge"),qr=class{static{i(this,"HttpProblemsBase")}static format=(e,n,r)=>"problem"in e?ke.format(e,n,r):ke.format({problem:e},n,r);static getProblemFromStatus(e,n){return{type:`https://httpproblems.com/http-status/${e}`,status:e,title:Qi[e],...n}}},v=class extends qr{static{i(this,"HttpProblems")}static#e(e,n,r,o,s){let a=Wc(this.getProblemFromStatus(e),n,r,o,s);return ke.format(a,n,r)}static continue=(e,n,r,o)=>this.#e(200,e,n,r,o);static switchingProtocols=(e,n,r,o)=>this.#e(101,e,n,r,o);static processing=(e,n,r,o)=>this.#e(102,e,n,r,o);static earlyHints=(e,n,r,o)=>this.#e(103,e,n,r,o);static ok=(e,n,r,o)=>this.#e(200,e,n,r,o);static created=(e,n,r,o)=>this.#e(201,e,n,r,o);static accepted=(e,n,r,o)=>this.#e(202,e,n,r,o);static nonAuthoritativeInformation=(e,n,r,o)=>this.#e(203,e,n,r,o);static noContent=(e,n,r,o)=>this.#e(204,e,n,r,o);static resetContent=(e,n,r,o)=>this.#e(205,e,n,r,o);static partialContent=(e,n,r,o)=>this.#e(206,e,n,r,o);static multiStatus=(e,n,r,o)=>this.#e(207,e,n,r,o);static alreadyReported=(e,n,r,o)=>this.#e(208,e,n,r,o);static imUsed=(e,n,r,o)=>this.#e(226,e,n,r,o);static multipleChoices=(e,n,r,o)=>this.#e(300,e,n,r,o);static movedPermanently=(e,n,r,o)=>this.#e(301,e,n,r,o);static found=(e,n,r,o)=>this.#e(302,e,n,r,o);static seeOther=(e,n,r,o)=>this.#e(303,e,n,r,o);static notModified=(e,n,r,o)=>this.#e(304,e,n,r,o);static useProxy=(e,n,r,o)=>this.#e(305,e,n,r,o);static switchProxy=(e,n,r,o)=>this.#e(306,e,n,r,o);static temporaryRedirect=(e,n,r,o)=>this.#e(307,e,n,r,o);static permanentRedirect=(e,n,r,o)=>this.#e(308,e,n,r,o);static badRequest=(e,n,r,o)=>this.#e(400,e,n,r,o);static unauthorized=(e,n,r,o)=>this.#e(401,e,n,r,o);static paymentRequired=(e,n,r,o)=>this.#e(402,e,n,r,o);static forbidden=(e,n,r,o)=>this.#e(403,e,n,r,o);static notFound=(e,n,r,o)=>this.#e(404,e,n,r,o);static methodNotAllowed=(e,n,r,o)=>this.#e(405,e,n,r,o);static notAcceptable=(e,n,r,o)=>this.#e(406,e,n,r,o);static proxyAuthenticationRequired=(e,n,r,o)=>this.#e(407,e,n,r,o);static requestTimeout=(e,n,r,o)=>this.#e(408,e,n,r,o);static conflict=(e,n,r,o)=>this.#e(409,e,n,r,o);static gone=(e,n,r,o)=>this.#e(410,e,n,r,o);static lengthRequired=(e,n,r,o)=>this.#e(411,e,n,r,o);static preconditionFailed=(e,n,r,o)=>this.#e(412,e,n,r,o);static contentTooLarge=(e,n,r,o)=>this.#e(413,e,n,r,o);static uriTooLong=(e,n,r,o)=>this.#e(414,e,n,r,o);static unsupportedMediaType=(e,n,r,o)=>this.#e(415,e,n,r,o);static rangeNotSatisfiable=(e,n,r,o)=>this.#e(416,e,n,r,o);static expectationFailed=(e,n,r,o)=>this.#e(417,e,n,r,o);static imATeapot=(e,n,r,o)=>this.#e(418,e,n,r,o);static misdirectedRequest=(e,n,r,o)=>this.#e(421,e,n,r,o);static unprocessableContent=(e,n,r,o)=>this.#e(422,e,n,r,o);static locked=(e,n,r,o)=>this.#e(423,e,n,r,o);static failedDependency=(e,n,r,o)=>this.#e(424,e,n,r,o);static tooEarly=(e,n,r,o)=>this.#e(425,e,n,r,o);static upgradeRequired=(e,n,r,o)=>this.#e(426,e,n,r,o);static preconditionRequired=(e,n,r,o)=>this.#e(428,e,n,r,o);static tooManyRequests=(e,n,r,o)=>this.#e(429,e,n,r,o);static requestHeaderFieldsTooLarge=(e,n,r,o)=>this.#e(431,e,n,r,o);static unavailableForLegalReasons=(e,n,r,o)=>this.#e(451,e,n,r,o);static internalServerError=(e,n,r,o)=>this.#e(500,e,n,r,o);static notImplemented=(e,n,r,o)=>this.#e(501,e,n,r,o);static badGateway=(e,n,r,o)=>this.#e(502,e,n,r,o);static serviceUnavailable=(e,n,r,o)=>this.#e(503,e,n,r,o);static gatewayTimeout=(e,n,r,o)=>this.#e(504,e,n,r,o);static httpVersionNotSupported=(e,n,r,o)=>this.#e(505,e,n,r,o);static variantAlsoNegotiates=(e,n,r,o)=>this.#e(506,e,n,r,o);static insufficientStorage=(e,n,r,o)=>this.#e(507,e,n,r,o);static loopDetected=(e,n,r,o)=>this.#e(508,e,n,r,o);static notExtended=(e,n,r,o)=>this.#e(510,e,n,r,o);static networkAuthenticationRequired=(e,n,r,o)=>this.#e(511,e,n,r,o)};var{toString:Jc}=Object.prototype,{propertyIsEnumerable:Kc}=Object.prototype;function $r(t){return Jc.call(t)}i($r,"toString");function ae(t){return typeof t=="string"}i(ae,"isString");function tt(t){return ae(t)&&t!==""}i(tt,"isNonEmptyString");function Xi(t){return $r(t)==="[object RegExp]"}i(Xi,"isRegexp");function es(t){return[...Object.keys(t),...Object.getOwnPropertySymbols(t).filter(e=>Kc.call(t,e))]}i(es,"getOwnEnumerableKeys");function Be(t){return typeof t=="object"&&t!==null&&!Array.isArray(t)&&!(t instanceof RegExp)&&!(t instanceof Date)}i(Be,"isObject");function Fr(t){return typeof t=="number"&&!isNaN(t)}i(Fr,"isNumber");function Br(t){return t===!0||t===!1}i(Br,"isBoolean");function ts(t){return typeof t>"u"}i(ts,"isUndefined");function ns(t){return ts(t)||t===null}i(ns,"isUndefinedOrNull");function It(t){return!!t&&typeof t=="object"&&"name"in t&&"message"in t&&"stack"in t}i(It,"isErrorLike");var rs=new Map;function nt(t){if(Array.isArray(t)&&!t.some(o=>typeof o!="number"))return t;if(typeof t!="string")throw new Error("Input must be a string or an array of numbers");if(!/^\d+(?:-\d+)?(?:,\s*\d+(?:-\d+)?)*$/.test(t))throw new Error("Malformed input string");let e=rs.get(t);if(e)return e;let n=t.split(","),r=[];for(let o of n){let s=o.split("-");if(s.length===2){let a=parseInt(s[0],10),u=parseInt(s[1],10);for(let c=a;c<=u;c++)r.push(c)}else r.push(parseInt(o,10))}return rs.set(t,r),r}i(nt,"statusCodesStringToNumberArray");function ze(t,e,n){if(!e.startsWith("."))throw new y(`Invalid ${n} - must start with '.' - '${e}' does not`);let r=e.split(".").splice(1),o=t;return r.forEach(s=>{if(o===void 0)throw new A(`Error applying ${n} '${e}', reading '${s}'`);o=o[s]}),`${o}`}i(ze,"getValueFromRequestUser");function je(t){if(Array.isArray(t)){if(t.includes(n=>typeof n!="string"))throw new y("Received an array that contains non-string values.");return t}if(ae(t))return t.includes(",")?t.split(",").map(n=>n.trim()).filter(n=>n!==","&&n!==""):[t];throw new y(`Expected type of string, received type '${typeof t}'`)}i(je,"parseValueToStringArray");function os(t){if(t==null)return[];if(!Array.isArray(t))throw new y(`Invalid corsPolicy configuration. Expected an array of objects, received '${typeof t}'`);return t.map(n=>{if(!Be(n))throw new y(`Invalid custom cors policy is set. Expected an object, received '${typeof n}'`);if(!tt(n.name))throw new y("Value of 'name' on custom cors policies must be a non-empty string.");if(n.maxAge!==void 0&&!Fr(n.maxAge))throw new y(`Value of 'maxAge' on custom cors policies must be a non-empty string. Received type '${typeof n.maxAge}'`);if(n.allowCredentials!==void 0&&!Br(n.allowCredentials))throw new y("Value of 'allowCredentials' on custom cors policies must be a boolean or not be set. If using an environment variable, check that it is set correctly.");let r=zr(n,"allowedHeaders"),o=zr(n,"allowedMethods"),s=zr(n,"exposeHeaders"),a;try{a=je(n.allowedOrigins)}catch(c){throw new y(`Value of 'allowedOrigins' on custom cors policies is invalid. ${c.message} If using an environment variable, check that it is set correctly.`)}return{name:n.name,allowCredentials:typeof n.allowCredentials=="boolean"?String(n.allowCredentials):void 0,allowedOrigins:a,allowedHeaders:r?r.join(", "):void 0,allowedMethods:o?o.join(", "):void 0,exposeHeaders:s?s.join(", "):void 0,maxAge:typeof n.maxAge=="number"?n.maxAge.toString():void 0}})}i(os,"parseCorsPolicies");function zr(t,e){let n;if(t[e]!==void 0)try{n=je(t[e])}catch(r){throw new y(`Value of '${e}' on custom cors policies is invalid. ${r.message} If using an environment variable, check that it is set correctly.`)}return n}i(zr,"parseOptionalProperty");var tn=i((t,e)=>{if(e===null)return;if(t.find(a=>a==="*"))return e;let r=t.map(a=>a.trim().toLowerCase()),o=e.toLowerCase();return r.find(a=>a===o)},"findMatchingOrigin"),nn=i((t,e)=>{let n={"access-control-allow-origin":e};t.allowedHeaders&&(n["access-control-allow-headers"]=t.allowedHeaders),t.allowedMethods&&(n["access-control-allow-methods"]=t.allowedMethods),t.exposeHeaders&&(n["access-control-expose-headers"]=t.exposeHeaders);let r=t.allowCredentials;r&&(n["access-control-allow-credentials"]=r);let o=t.maxAge?.toString()??void 0;return o&&(n["access-control-max-age"]=o),n},"generateCorsHeaders");var jr=i((t,e)=>{let n=e.routeData.corsPolicies,r=i(async(a,u)=>{let c=new URL(a.url.toString()).pathname,l=a.headers.get("access-control-request-method"),d=a.headers.get("access-control-request-headers"),p=a.headers.get("origin");if(p===null||l===null)return v.badRequest(a,u,{detail:"Expect headers origin and access-control-request-method"});let m=t.lookup(l,c);if(!m)return v.notFound(a,u);let g=m.routeConfiguration,I=Yc(l,d,p,g,n);return I.isValid?new Response(void 0,{status:200,statusText:"OK",headers:I.headers}):(I.error&&u.log.warn(I.error),v.notFound(a,u))},"optionsHandler"),o=new K({processors:[re],handler:r,gateway:e}),s=new J({label:"SYSTEM_CORS_ROUTE",methods:["OPTIONS"],path:"/(.*)",systemRouteName:"cors-preflight"});t.addRoute(s,o.execute)},"registerCorsRoute"),Yc=i((t,e,n,r,o)=>{let s={isValid:!1,headers:{}};if(r.corsPolicy==="anything-goes")return{isValid:!0,headers:{"access-control-allow-origin":n,"access-control-allow-methods":t,"access-control-allow-headers":e??"*","access-control-expose-headers":"*","access-control-allow-credentials":"true","access-control-max-age":"600"}};if(r.corsPolicy==="none")return{...s,error:`No CORS policy set for the route '${r.pathPattern}'`};let a=o?.find(l=>l.name===r.corsPolicy);if(!a)throw new y(`Invalid Configuration - corsPolicy '${r.corsPolicy}' not found in *.oas.json 'corsPolicies' section.`);let u=tn(a.allowedOrigins,n);return u?{isValid:!0,headers:nn(a,u)}:{...s,error:`The CORS policy '${a.name}' does not allow the origin '${n}'`}},"validateAndBuildResponseHeaders");var is=i((t,e)=>{let n=i(async()=>new Response("You have no routes. Add a route in routes.oas.json to get started",{status:200}),"noRoutesHandler"),r=new K({processors:[re],handler:n,gateway:e}),o=new J({label:"SYSTEM_NO_ROUTES",methods:["CONNECT","DELETE","GET","HEAD","OPTIONS","PATCH","POST","PUT","TRACE"],path:"/(.*)",systemRouteName:"empty-gateway-catchall"});t.addRoute(o,r.execute)},"registerNoRoutes");var Vr=new J({label:"SYSTEM_NOT_FOUND_ROUTE",methods:["CONNECT","DELETE","GET","HEAD","OPTIONS","PATCH","POST","PUT","TRACE"],path:"/(.*)",systemRouteName:"unmatched-path"}),ss=i((t,e)=>{let n=i(async(o,s)=>{let a=Pt.value?.notFoundHandler;if(a){let u=ne.getContextExtensions(s);return a(o,s,{routesMatchedByPathOnly:u.pathOnlyMatches??[]})}return v.notFound(o,s)},"notFoundHandler"),r=new K({processors:[re],handler:n,gateway:e});t.addRoute(Vr,r.execute)},"registerNotMatchedHandler");var Qc=["access-control-allow-origin","access-control-allow-headers","access-control-expose-headers","access-control-allow-credentials","access-control-max-age"],as=i(t=>{Qc.forEach(e=>t.delete(e))},"stripCorsHeaders"),rn=i(async(t,e,n,r)=>{let o=e.route;if(!o.corsPolicy||o.corsPolicy==="none"){let d=await r(t),p=new Headers(d.headers);return as(p),new Response(d.body,{status:d.status,statusText:d.statusText,headers:p,webSocket:d.webSocket})}let s=await r(t);if(!(s instanceof Response))throw new $(`The CorsProcessor is in the wrong place in the pipeline. It should only receive HttpResponse type but got '${typeof s}'`);let a=Xc(o,n.routeData.corsPolicies),u=el(t,a),c=new Headers(s.headers);return as(c),Object.entries(u).forEach(([d,p])=>{c.set(d,p)}),new Response(s.body,{status:s.status,statusText:s.statusText,headers:c,webSocket:s.webSocket})},"corsProcessor"),Xc=i((t,e)=>{if(t.corsPolicy==="anything-goes")return{name:"anything-goes",allowedHeaders:"*",allowedOrigins:["*"],allowedMethods:t.methods.join(", "),exposeHeaders:"*",allowCredentials:"true",maxAge:"600"};let n=e?.find(r=>r.name===t.corsPolicy);if(n===void 0)throw new y(`Invalid Configuration - no corsPolicy '${t.corsPolicy}' found in *.oas.json`);return n},"getCorsPolicy"),el=i((t,e)=>{let n=tn(e.allowedOrigins,t.headers.get("origin"));return n?nn(e,n):{}},"getCorsHeaders");var Gr=i((t,e)=>{let n=i(async()=>new Response(null,{status:200}),"pingRouteHandler"),r=new K({processors:[rn],handler:n,gateway:e}),o=new J({corsPolicy:"anything-goes",label:"SYSTEM_PING_ROUTE",methods:["GET"],path:"/__zuplo/ping",systemRouteName:"ping"});t.addRoute(o,r.execute)},"registerPingRoute");var rt=require("@opentelemetry/api");var pe={RoutePathPattern:"zuplo.route.path_pattern",RouteOperationId:"zuplo.route.operation_id",RouteTrace:"zuplo.route.trace",RouteSystem:"zuplo.route.system",SystemTrace:"zuplo.system",PolicyName:"zuplo.policy.name",PolicyType:"zuplo.policy.type",ZuploBuildId:"zuplo.build.id",ZuploBuildVersion:"zuplo.build.version",ZuploBuildCompatibilityDate:"zuplo.build.compatibility_date",ZuploEnvironmentType:"zuplo.environment_type"};var on=class{static{i(this,"PolicyBase")}options;policyName;policyType;constructor(e,n){if(!ae(n))throw new A(`The name of a policy must be a string. Received '${n}' of type '${typeof n}'`);this.options=e,this.policyName=n,this.policyType=Object.getPrototypeOf(this).constructor.name}},fe=class extends on{static{i(this,"InboundPolicy")}},Oe=class extends on{static{i(this,"OutboundPolicy")}};var Kr=class extends fe{static{i(this,"InboundFunctionOnlyPolicy")}#e;constructor(e,n,r){super(n,r),this.policyType=e.name,this.#e=e}handler(e,n){return this.#e(e,n,this.options,this.policyName)}},Yr=class extends Oe{static{i(this,"OutboundFunctionOnlyPolicy")}#e;constructor(e,n,r){super(n,r),this.policyType=e.name,this.#e=e}handler(e,n,r){return this.#e(e,n,r,this.options,this.policyName)}},Wr=new Map;function Tt(t,e){let n,r;return Array.isArray(t)?n=t:(n=t.policies?.inbound??[],r=t.path),n.filter(s=>!Wr.has(s)).forEach(s=>{let a=e?.find(l=>l.name===s);if(!a)throw new y(`Invalid state - no Policy with the name '${s}' ${r&&`on route '${r}'`} was found in the policies configuration (check case).`);if(typeof a.handler?.module!="object")throw new y(`Invalid state - invalid policy '${s}' on route '${r}' (typeof policy '${typeof a.handler?.module}')`);let u=a.handler?.module[a.handler.export];if(typeof u!="function")throw new y(`Invalid state - invalid policy '${s}' on route '${r}' (typeof module '${typeof u}')`);let c;if(typeof u!="function")throw new y(`Invalid state - invalid policy '${s}' on route '${r}' (typeof module '${typeof u}')`);if(u.prototype instanceof fe)c=new u(a.handler.options,a.name);else if(typeof u=="function")c=new Kr(u,a.handler.options,a.name);else throw new y(`Invalid state - invalid policy '${s}' on route '${r}' (typeof policy '${typeof u}')`);if(typeof c.handler!="function")throw new y(`Invalid state - invalid handler on policy '${s}' on route '${r}' (typeof handler '${typeof c.handler}')`);Wr.set(a.name,c)}),n.map(s=>{let a=Wr.get(s);if(a===void 0)throw new A("Internal error. Policy not found in cache.");return a})}i(Tt,"getInboundPolicyInstances");var Jr=new Map;function tl(t,e){let n=t.policies?.outbound??[];return n.filter(o=>!Jr.has(o)).forEach(o=>{let s=e?.find(c=>c.name===o);if(!s)throw new y(`Invalid state - no Policy with the name '${o}' on route '${t.path}' was found in the policies configuration (check case).`);if(typeof s.handler?.module!="object")throw new y(`Invalid state - invalid policy '${o}' on route '${t.path}' (typeof policy '${typeof s.handler?.module}')`);let a=s.handler?.module[s.handler.export],u;if(typeof a!="function")throw new y(`Invalid state - invalid policy '${o}' on route '${t.path}' (typeof module '${typeof a}')`);if(a.prototype instanceof Oe)u=new a(s.handler.options??{},s.name);else if(typeof a=="function")u=new Yr(a,s.handler.options??{},s.name);else throw new y(`Invalid state - invalid policy '${o}' on route '${t.path}' (typeof policy '${typeof a}')`);if(typeof u.handler!="function")throw new y(`Invalid state - invalid handler on policy '${o}' on route '${t.path}'`);Jr.set(s.name,u)}),n.map(o=>{let s=Jr.get(o);if(s===void 0)throw new A("Internal error. Policy not found in cache.");return s})}i(tl,"getOutboundPolicyInstances");var Qr=i(t=>async(e,n)=>{let r=ne.getContextExtensions(n),o=rt.trace.getTracer("pipeline");return await o.startActiveSpan("policies:inbound",async s=>{try{let a=[...t],u=e;for(;a.length>0;){let c=a.shift();if(!c)return u;let l=await o.startActiveSpan(`policy:${c.policyName}`,async d=>{let p=await c.handler(u,n);if(p instanceof Request||p instanceof z||p instanceof Response)return d.end(),p;{let m=new y(`Invalid state - invalid handler on policy '${c.policyName}' on route '${n.route.path}. The result of an inbound policy must be a Response or Request.`);throw d.end(),d.setStatus({code:rt.SpanStatusCode.ERROR}),d.recordException(m),m}});if(l instanceof z)u=l;else if(l instanceof Request)u=new z(l);else if(l instanceof Response)return l;r.latestRequest=u}return u}finally{s.end()}})},"toStackedInboundHandler"),nl=i(t=>async(e,n,r)=>{let o=rt.trace.getTracer("pipeline");return await o.startActiveSpan("policies:outbound",async s=>{try{let a=[...t],u=e;for(;a.length>0;){let c=a.shift();if(!c)return u;u=await o.startActiveSpan(`policy:${c.policyName}`,async d=>{try{d.setAttribute(pe.PolicyName,c.policyName),d.setAttribute(pe.PolicyType,c.policyType);let p=await c.handler(u,n,r);if(p instanceof Response)return p;{let m=new y(`Invalid state - invalid handler on policy '${c.policyName}' on route '${r.route.path}. The result of an outbound policy must be a Response.`);throw d.setStatus({code:rt.SpanStatusCode.ERROR}),d.recordException(m),m}}finally{d.end()}})}return u}finally{s.end()}})},"toStackedOutboundHandler"),sn=i(async(t,e,n,r)=>{let o=Tt(e.route,n.routeData.policies),s=tl(e.route,n.routeData.policies);return cs({request:t,context:e,inboundPolicies:o,outboundPolicies:s,gateway:n,next:r})},"policyProcessor");function us({inboundPolicies:t=[],outboundPolicies:e=[]}){return i(async(r,o,s,a)=>cs({request:r,context:o,inboundPolicies:t,outboundPolicies:e,gateway:s,next:a}),"policyProcessor")}i(us,"createInternalPolicyProcessor");async function cs({request:t,context:e,inboundPolicies:n,outboundPolicies:r,gateway:o,next:s}){let a=Qr(n);try{let u=await a(t,e);if(u instanceof Response)return u;let c=await s(u),l=nl(r),d;return w.instance.build.COMPATIBILITY_FLAGS.runOutboundPoliciesOnHandlerOnAllStatuses?d=l(c,t,e):d=c.ok?l(c,t,e):c,d}catch(u){return e.log.error(u),o.errorHandler(t,e,u)}}i(cs,"executePolicyProcessor");function ls(t,e){if(typeof t!="string")throw new TypeError("argument str must be a string");let n={},o=(e||{}).decode||rl,s=0;for(;s<t.length;){let a=t.indexOf("=",s);if(a===-1)break;let u=t.indexOf(";",s);if(u===-1)u=t.length;else if(u<a){s=t.lastIndexOf(";",a-1)+1;continue}let c=t.slice(s,a).trim();if(n[c]===void 0){let l=t.slice(a+1,u).trim();l.charCodeAt(0)===34&&(l=l.slice(1,-1)),n[c]=ol(l,o)}s=u+1}return n}i(ls,"parse");function rl(t){return t.indexOf("%")!==-1?decodeURIComponent(t):t}i(rl,"decode");function ol(t,e){try{return e(t)}catch{return t}}i(ol,"tryDecode");function ds(t,e){try{let n=/v\d+(-\d+)?/g,o=ls(e.get("Cookie")||"")["zp-dev-portal"];return o!==null&&o&&n.test(o)?`https://dev-portal-${o}.zuplo.com`:t}catch{}return t}i(ds,"devPortalBaseURL");var ps="/__zuplo/dev-portal",il="dev-portal-id",sl="dev-portal-host",al="zp-account",ul="zp-project",cl="dev-portal-build",ll=`
|
|
42
42
|
<!DOCTYPE html>
|
|
43
43
|
<html lang="en">
|
|
44
44
|
<head>
|
|
@@ -52,27 +52,27 @@
|
|
|
52
52
|
<p>For more information, see <a href="https://zuplo.com/docs/articles/developer-portal">https://zuplo.com/docs/articles/developer-portal</a>.</p>
|
|
53
53
|
</body>
|
|
54
54
|
</html>
|
|
55
|
-
`,
|
|
55
|
+
`,ms=i((t,e)=>{let{sitePathname:n}=e.runtimeSettings.developerPortal,r=w.instance.deploymentName,o=w.instance.devPortalBaseUrl,s=i(async(c,l)=>{if(w.instance.isLocalDevelopment)return new Response(ll,{headers:{"content-type":"text/html"}});if(!r)return v.internalServerError(c,l,{detail:"Unable to retrieve deployment name. Please contact support for assistance."});let d=new URL(c.url),p=ds(o,c.headers),m=new URL(`${d.pathname}${d.search}`,p),{headers:g,method:I,body:b}=c;return w.instance.build.ACCOUNT_NAME&&g.set(al,w.instance.build.ACCOUNT_NAME),w.instance.build.PROJECT_NAME&&g.set(ul,w.instance.build.PROJECT_NAME),g.set(il,r),g.set(sl,d.host),g.set(cl,w.instance.build.BUILD_ID),await fetch(m.toString(),{headers:g,method:I,body:b,redirect:"manual"})},"devPortalRoute"),a=new K({processors:[re,sn],handler:s,gateway:e}),u=new J({label:"SYSTEM_API_DOCS_V3_ROUTE",methods:["GET","PUT","POST","DELETE","PATCH","HEAD"],path:`(${n}|/_next)(.*)`,systemRouteName:"developer-portal"});t.addRoute(u,a.execute)},"registerDevPortalV3Route"),gs=i((t,e)=>{let{sitePathname:n}=e.runtimeSettings.developerPortal,r=i(async a=>{let u=new URL(a.url);return u.pathname=`${n}${u.pathname.substring(ps.length)}`,Response.redirect(u.toString(),302)},"devPortalRedirectRoute"),o=new K({processors:[re],handler:r,gateway:e}),s=new J({label:"SYSTEM_API_DOCS_REDIRECT_ROUTE",methods:["GET"],path:`${ps}(.*)`,systemRouteName:"developer-portal-legacy"});t.addRoute(s,o.execute)},"registerDevPortalLegacyRedirectRoute");var Ps=Ce(Le());var Xr=0,xt=class{static{i(this,"CoreLogger")}constructor(e,n,r,o,s){this.#n=n,this.#r=r??"local",this.#o=o,this.#i=s,this.#e(e)}#e=e=>{let n=["error","warn","info","debug"],r=!1,o=i(()=>{},"emptyFunction"),s=i((a,u)=>{this.#i.forEach(c=>{c.log(a,u)})},"pushFunction");n.forEach(a=>{this.#t[a]=r?o:s,a==e&&(r=!0)})};#t={};#n;#r;#o;#i;log(e,n,r,o,s,a){Xr>=Number.MAX_SAFE_INTEGER&&(Xr=0);let u={requestId:r,rayId:o,level:e,logSource:n,messages:s,timestamp:new Date,logOwner:this.#n,loggingId:this.#r,buildId:this.#o,vectorClock:Xr++};this.#t[e](u,a)}};var Q=class extends Ne{static{i(this,"LogPlugin")}};var an=class{static{i(this,"LoggingContext")}constructor(e,n,r){this.#e=e,this.custom=n,this.originalRequest=r}#e;custom;originalRequest;waitUntil=e=>{this.#e.waitUntil(e)}};var vt=class{static{i(this,"RequestLogger")}constructor(e,n,r,o){this.#t=e,this.#n=n,this.#r=r,this.#o=o}#e="request";#t;#n;#r;#o;debug=(...e)=>{this.#r.log("debug",this.#e,this.#t,this.#n,e,this.#o)};info=(...e)=>{this.#r.log("info",this.#e,this.#t,this.#n,e,this.#o)};log=(...e)=>{this.#r.log("info",this.#e,this.#t,this.#n,e,this.#o)};warn=(...e)=>{this.#r.log("warn",this.#e,this.#t,this.#n,e,this.#o)};error=(...e)=>{this.#r.log("error",this.#e,this.#t,this.#n,e,this.#o)}};var dl=[EvalError,RangeError,ReferenceError,SyntaxError,TypeError,URIError].filter(Boolean).map(t=>[t.name,t]),pl=new Map(dl);var ml=[{property:"name",enumerable:!1},{property:"message",enumerable:!1},{property:"stack",enumerable:!1},{property:"code",enumerable:!0},{property:"cause",enumerable:!1}],eo=Symbol(".toJSON was called"),gl=i(t=>{t[eo]=!0;let e=t.toJSON();return delete t[eo],e},"toJSON"),fl=i(t=>pl.get(t)??Error,"getErrorConstructor"),fs=i(({from:t,seen:e,to:n,forceEnumerable:r,maxDepth:o,depth:s,useToJSON:a,serialize:u})=>{if(!n)if(Array.isArray(t))n=[];else if(!u&&It(t)){let l=fl(t.name);n=new l}else n={};if(e.push(t),s>=o)return n;if(a&&typeof t.toJSON=="function"&&t[eo]!==!0)return gl(t);let c=i(l=>fs({from:l,seen:[...e],forceEnumerable:r,maxDepth:o,depth:s,useToJSON:a,serialize:u}),"continueDestroyCircular");for(let[l,d]of Object.entries(t)){if(typeof Buffer=="function"&&Buffer.isBuffer(d)){n[l]="[object Buffer]";continue}if(d!==null&&typeof d=="object"&&typeof d.pipe=="function"){n[l]="[object Stream]";continue}if(typeof d!="function"){if(!d||typeof d!="object"){n[l]=d;continue}if(!e.includes(t[l])){s++,n[l]=c(t[l]);continue}n[l]="[Circular]"}}for(let{property:l,enumerable:d}of ml)typeof t[l]<"u"&&t[l]!==null&&Object.defineProperty(n,l,{value:It(t[l])?c(t[l]):t[l],enumerable:r?!0:d,configurable:!0,writable:!0});return n},"destroyCircular");function ie(t,e){let n=e?.maxDepth??Number.POSITIVE_INFINITY,r=e?.useToJSON??!0;return typeof t=="object"&&t!==null?fs({from:t,seen:[],forceEnumerable:!0,maxDepth:n,depth:0,useToJSON:r,serialize:!0}):typeof t=="function"?`[Function: ${t.name??"anonymous"}]`:t}i(ie,"serializeError");var hl=/file:\/\/\/(.*?)\/dist\//g,yl=/\(https:\/\/raw\.githubusercontent\.com\/.*?\)/g,bl="at async Event.respondWith";function hs(t){return typeof t!="string"?t:t.split(`
|
|
56
56
|
`).filter(e=>!e.trim().startsWith("at async file")).map((e,n)=>{let r=e.replaceAll(hl,"").replaceAll(yl,"").replaceAll(bl,"").trim();return n===0||r.length===0?r:` ${r}`}).filter(e=>e.length>0).join(`
|
|
57
|
-
`)}i(
|
|
57
|
+
`)}i(hs,"cleanStack");function un(t,e,n=""){let r=[],o=e?.maxDepth??3;return i(function s(a,u={},c,l){let d=u.indent||" ",p;u.inlineCharacterLimit===void 0?p={newline:`
|
|
58
58
|
`,newlineOrSpace:`
|
|
59
59
|
`,pad:c,indent:c+d}:p={newline:"@@__STRINGIFY_OBJECT_NEW_LINE__@@",newlineOrSpace:"@@__STRINGIFY_OBJECT_NEW_LINE_OR_SPACE__@@",pad:"@@__STRINGIFY_OBJECT_PAD__@@",indent:"@@__STRINGIFY_OBJECT_INDENT__@@"};let m=i(g=>{if(u.inlineCharacterLimit===void 0)return g;let I=g.replace(new RegExp(p.newline,"g"),"").replace(new RegExp(p.newlineOrSpace,"g")," ").replace(new RegExp(p.pad+"|"+p.indent,"g"),"");return I.length<=u.inlineCharacterLimit?I:g.replace(new RegExp(p.newline+"|"+p.newlineOrSpace,"g"),`
|
|
60
|
-
`).replace(new RegExp(p.pad,"g"),c).replace(new RegExp(p.indent,"g"),c+d)},"expandWhiteSpace");if(r.includes(a))return'"[Circular]"';if(a==null||typeof a=="number"||typeof a=="boolean"||typeof a=="function"||typeof a=="symbol"||
|
|
61
|
-
`?"\\n":"\\r"),u.singleQuotes===!1?(a=a.replace(/"/g,'\\"'),`"${a}"`):(a=a.replace(/'/g,"\\'"),`'${a}'`)},"stringify")(t,e,n,0)}i(un,"stringifyObject");function
|
|
62
|
-
`)}i(hs,"messagesToMultilineText");function Se(t){return typeof t=="string"?t:JSON.stringify(t)}i(Se,"stringifyNonString");function Xr(t){return typeof t=="string"?t:t===null?"null":typeof t>"u"?"undefined":typeof t=="number"||typeof t=="boolean"||typeof t=="bigint"||typeof t=="symbol"?t.toString():typeof t=="function"?`[function ${t.name}]`:typeof t=="object"&&Array.isArray(t)?`[array ${t.length}]`:t instanceof Error?`${t.name??"Error"}: ${t.message??"unknown"}`:typeof t=="object"?Zr(t):"unknown"}i(Xr,"stringifyNonStringToText");var cn=require("jose");async function se(t,e,n){for(let r=0;r<=t.retries;r++){let o=fetch(e,n);if(r===t.retries)return o;let s=await o;if(s.status<500&&s.status!==429)return s;t?.logger?.error("Request failed, retrying",{method:typeof e=="string"?"GET":e.method,url:typeof e=="string"?e:e.url,status:s.status}),await new Promise(a=>setTimeout(a,t.retryDelayMs*Math.pow(2,r)))}throw new y("An unknown error occurred, ensure retries is not negative")}i(se,"fetchRetry");async function Pe({serviceAccount:t,audience:e,expirationTime:n="1h",payload:r={}}){let{clientEmail:o,privateKeyId:s,privateKey:a}=t;return await new cn.SignJWT(r).setProtectedHeader({alg:"RS256",kid:s}).setIssuer(o).setSubject(o).setAudience(e).setIssuedAt().setExpirationTime(n).sign(a)}i(Pe,"getTokenFromGcpServiceAccount");async function ys(t,e,n){return bs(t,{token:e,returnSecureToken:!0},n)}i(ys,"exchangeFirebaseJwtForIdToken");async function ln(t,e,n){return bs(t,{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:e},n)}i(ln,"exchangeGgpJwtForIdToken");async function bs(t,e,n){let r=await se(n,t,{method:"POST",headers:{"Content-Type":"application/json"},redirect:"follow",body:JSON.stringify(e)});if(r.status!==200){let s;try{let a=await r.text(),u=JSON.parse(a);s={cause:u.error??u}}catch{}throw new A({message:"Could not get token from Google Identity",extensionMembers:s})}return await r.json()}i(bs,"fetchToken");var ue=class t{static{i(this,"GcpServiceAccount")}#e;#t;constructor({serviceAccount:e,privateKey:n}){this.#t=e,this.#e=n}static async init(e){let n=JSON.parse(e),r=await(0,cn.importPKCS8)(n.private_key.trim(),"RS256");return new t({serviceAccount:n,privateKey:r})}get type(){return this.#t.type}get projectId(){return this.#t.project_id}get privateKeyId(){return this.#t.private_key_id}get privateKey(){return this.#e}get clientEmail(){return this.#t.client_email}get clientId(){return this.#t.client_id}get authUri(){return this.#t.auth_uri}get tokenUrl(){return this.#t.token_url}get authProviderX509CertUrl(){return this.#t.auth_provider_x509_cert_url}get clientX509CertUrl(){return this.#t.client_x509_cert_url}get universalDomain(){return this.#t.universe_domain}};var dn=class extends Q{constructor(n){super();this.options=n}static{i(this,"GoogleCloudLoggingPlugin")}getTransport(){return new St(this.options)}},wl="https://logging.googleapis.com/v2/entries:write?alt=json",eo={error:"ERROR",warn:"WARNING",info:"INFO",debug:"DEBUG"},St=class{static{i(this,"GoogleLogTransport")}constructor(e){this.#n=e.logName,this.#e=e.serviceAccountJson,this.#o=w.instance.loggingEnvironmentType,this.#i=w.instance.loggingEnvironmentStage,this.#r=w.instance.deploymentName}#e;#t;#n;#r;#o;#i;async init(){this.#t=await ue.init(this.#e)}log(e,n){if(!this.#t)throw new q("Invalid state - Google log transport is not initialized");if(e.messages.length===0)return;let r={allMessages:De(e.messages)},o=this.#t.projectId??"zuplo-production",s={logName:this.#n,resource:{type:"global"},severity:eo[e.level],timestamp:e.timestamp,trace:`projects/${o}/traces/${e.requestId}`,labels:{requestId:e.requestId,buildId:e.buildId,source:e.logSource,loggingId:e.loggingId,logOwner:e.logOwner,environment:this.#r,environmentType:this.#o,environmentStage:this.#i}};e.rayId&&(s.labels.rayId=e.rayId);let a=nt(r.allMessages);s.jsonPayload={...r,message:a},this.batcher.enqueue(s),n.waitUntil(this.batcher.waitUntilFlushed())}dispatchFunction=async e=>{if(e.length===0)return;this.#t||(this.#t=await ue.init(this.#e));let n=await Pe({serviceAccount:this.#t,audience:"https://logging.googleapis.com/google.logging.v2.LoggingServiceV2"}),r=await fetch(wl,{method:"POST",body:JSON.stringify({entries:e}),headers:{Authorization:`Bearer ${n}`,"content-type":"application/json;charset=UTF-8"}});r.ok||console.error(r.status,r.statusText,await r.text())};batcher=new $("google-log-transport",1,this.dispatchFunction)};var pn="gcp";function mn(t){let e={allMessages:De(t.messages)},n="zuplo-production",r=nt(e.allMessages),o={logName:`projects/${n}/logs/runtime-user`,message:r,severity:eo[t.level],timestamp:t.timestamp,"logging.googleapis.com/labels":{buildId:t.buildId,source:t.logSource,loggingId:t.loggingId,logOwner:t.logOwner},"logging.googleapis.com/trace":`projects/${n}/traces/${t.requestId}`,allMessages:e.allMessages};return t.rayId&&(o["logging.googleapis.com/labels"].rayId=t.rayId),o}i(mn,"gcpLogFormat");var Ot=class{static{i(this,"ConsoleTransport")}constructor(e,n){this.#e=e??console,this.#t=n}#e;#t;log(e){if(this.#t===pn){if(e.messages.length===0)return;this.#e[e.level].apply(null,[mn(e)])}else this.#e[e.level].apply(null,[...e.messages,{logOwner:e.logOwner,logSource:e.logSource,level:e.level,timestamp:e.timestamp,loggingId:e.loggingId,rayId:e.rayId,requestId:e.requestId,buildId:e.buildId}])}};var gn=class extends Q{constructor(n){super();this.options=n}static{i(this,"DataDogLoggingPlugin")}getTransport(){return new Ct(this.options)}},to="__ddtags",no="__ddattr",ro=i(t=>t.replaceAll(",","_").replaceAll(":","_"),"cleanTagText"),Rl=i(t=>{let e=Object.keys(t),n=[];return e.forEach(r=>{let o=t[r];o==null?n.push(ro(r)):n.push(`${ro(r)}:${ro(o.toString())}`)}),n.join(",")},"formatTags"),Ct=class{static{i(this,"DataDogTransport")}constructor(e){this.#e=e.apiKey,this.#t=e.url??"https://http-intake.logs.datadoghq.com/api/v2/logs",this.#r=w.instance.loggingEnvironmentType,this.#o=w.instance.loggingEnvironmentStage,this.#n=w.instance.deploymentName}#e;#t;#n;#r;#o;log(e,n){let r={},o=n.custom[to];o&&typeof o=="object"&&Object.assign(r,o);let s=[...e.messages],a=e.messages.findIndex(g=>g[to]!==void 0);a>-1&&(Object.assign(r,s[a][to]),s.splice(a,1));let u={},c=n.custom[no];c&&typeof c=="object"&&Object.assign(u,c);let l=e.messages.findIndex(g=>g[no]!==void 0);l>-1&&(Object.assign(u,s[l][no]),s.splice(l,1));let d=De(s),m={message:{...{...e,activityId:e.requestId,trace:e.requestId},messages:d},ddsource:"Zuplo",hostname:new URL(n.originalRequest.url).hostname,msg:nt(d),service:e.loggingId,ddtags:Rl(r),environment:this.#n,environment_type:this.#r,environment_stage:this.#o};Object.assign(m,u),this.batcher.enqueue(m),n.waitUntil(this.batcher.waitUntilFlushed())}dispatchFunction=async e=>{e.length!==0&&await fetch(this.#t,{method:"POST",body:JSON.stringify([...e]),headers:{"content-type":"application/json","DD-API-KEY":this.#e}})};batcher=new $("data-dog-transport",10,this.dispatchFunction)};var At=class{static{i(this,"ProcessTransport")}constructor(e,n){this.#e=e,this.#t=n}#e;#t;log(e){if(this.#t===pn){if(e.messages.length===0)return;this.#e[e.level].apply(null,[mn(e)])}else this.#e[e.level].apply(null,[...e.messages,{logOwner:e.logOwner,logSource:e.logSource,timestamp:e.timestamp,loggingId:e.loggingId,rayId:e.rayId,requestId:e.requestId,buildId:e.buildId,vectorClock:e.vectorClock}])}};var Pl=i(({url:t,remoteLogToken:e,loggingId:n,sendOnlyErrors:r})=>async o=>{let s;if(r===!0?s=o.filter(a=>a.level==="error"):s=o,s.length!==0)try{await fetch(`${t}/publish/${n}`,{method:"POST",body:JSON.stringify({timestamp:Date.now(),type:"log",message:s.map(a=>({...a,messages:De(a.messages)}))}),headers:{"content-type":"application/json",authentication:`Bearer ${e}`,"user-agent":w.instance.systemUserAgent,"zp-dn":w.instance.deploymentName??"unknown"}})}catch(a){console.error(a)}},"dispatchFunction"),fn,hn=class{static{i(this,"RemoteLogTransport")}constructor(e){fn||(fn=new $("remote-log-transport",1,Pl(e)))}log(e,n){fn.enqueue(e),n.waitUntil(fn.waitUntilFlushed())}};var El={internal:1,trace:2,debug:5,info:9,warn:13,error:17,fatal:21},ws=i((t,e)=>n=>{let r={};return r.deploymentName=t,r.labels={requestId:n.requestId,source:n.logSource,loggingId:n.loggingId,logOwner:n.logOwner},r.rayId=n.rayId??"",r.runtime={buildId:e.BUILD_ID,buildTimestamp:e.TIMESTAMP,gitSHA:e.GIT_SHA,version:e.ZUPLO_VERSION},r.atomicCounter=n.vectorClock,{timestamp:n.timestamp,observerdTimestamp:n.timestamp,traceId:n.requestId,severityText:n.level,severityNumber:El[n.level],body:n.messages,attributes:r}},"unifiedFormatter");var Il=i(({url:t,remoteLogToken:e,deploymentName:n,build:r})=>async o=>{if(o.length===0)return;let s=ws(n,r);try{await fetch(`${t}/v1/runtime-logs`,{method:"POST",body:JSON.stringify({entries:o.map(s)}),headers:{"content-type":"application/json",authentication:`Bearer ${e}`,"user-agent":w.instance.systemUserAgent,"zp-dn":w.instance.deploymentName??"unknown"}})}catch(a){console.error(a)}},"dispatchFunction"),yn,bn=class{static{i(this,"UnifiedLogTransport")}constructor(e){yn||(yn=new $("unified-log-transport",1,Il(e)))}async log(e,n){yn.enqueue(e),n.waitUntil(yn.waitUntilFlushed())}};var oo=(0,Rs.debug)("zuplo:logging"),wn=class t{static{i(this,"LogInitializer")}systemCoreLogger;userCoreLogger;constructor({systemCoreLogger:e,userCoreLogger:n}){this.systemCoreLogger=e,this.userCoreLogger=n}static async init(e){let n=await t.setupSystemCoreLogger(w.instance,e),r=await t.setupUserCoreLogger(w.instance,e);return new t({systemCoreLogger:n,userCoreLogger:r})}static async setupSystemCoreLogger(e,n){let{build:r}=e;oo("Gateway.setupSystemCoreLogger");let o=[],s=n.getService(xt);return s?o.push(new At(s.logger,e.logFormat)):e.isDeno&&o.push(new Ot(console,e.logFormat)),e.isCloudflare&&e.deploymentName&&e.remoteLogToken&&o.push(new bn({url:e.remoteLogURL,deploymentName:e.deploymentName,remoteLogToken:e.remoteLogToken,build:e.build})),await Promise.all(o.map(async a=>{a.init&&await a.init()})),new vt(e.systemLogLevel,"system",e.loggingId,r.BUILD_ID,o)}static async setupUserCoreLogger(e,n){oo("Gateway.setupUserCoreLogger");let r=[],{runtime:o,build:s}=e,a=n.getService(xt);if(a&&a.captureUserLogs===!0?r.push(new At(a.logger,e.logFormat)):e.isDeno&&r.push(new Ot(console,e.logFormat)),e.remoteLogToken&&e.loggingId&&r.push(new hn({loggingId:e.loggingId,url:e.remoteLogURL,remoteLogToken:e.remoteLogToken,sendOnlyErrors:!e.isWorkingCopy})),o.GCP_USER_LOG_NAME&&o.GCP_USER_LOG_SVC_ACCT_JSON&&r.push(new St({serviceAccountJson:o.GCP_USER_LOG_SVC_ACCT_JSON,logName:o.GCP_USER_LOG_NAME})),o.ZUPLO_USER_LOGGER_DATA_DOG_API_KEY){let u=o.ZUPLO_USER_LOGGER_DATA_DOG_URL;r.push(new Ct({apiKey:o.ZUPLO_USER_LOGGER_DATA_DOG_API_KEY,url:u}))}return ve.forEach(u=>{u instanceof Q&&r.push(u.getTransport())}),await Promise.all(r.map(async u=>{u.init&&await u.init()})),new vt(e.userLogLevel,"user",e.loggingId,s.BUILD_ID,r)}createRequestLoggers(e,n,r,o,s){oo("Gateway.createRequestLoggers");let a=new an(r,o,s),u=new Tt(e,n,this.systemCoreLogger,a);return{userRequestLogger:new Tt(e,n,this.userCoreLogger,a),systemRequestLogger:u}}};var je=class{static{i(this,"UserRouteConfiguration")}constructor(e){this.path=e.path,this.methods=e.methods,this.label=e.label,this.key=e.key,this.handler=e.handler,this.corsPolicy=e.corsPolicy,this.custom=e.custom,this.version=e.version,this.policies=e.policies,this.excludeFromOpenApi=e.excludeFromOpenApi,this.pathPattern=e.pathPattern,e.raw?(this.#e=e.raw(),this.operationId=this.raw()?.operationId,this.summary=this.raw()?.summary,this.tags=this.raw()?.tags,this.parameters=this.raw()?.parameters,this.responses=this.raw()?.responses):(this.operationId=e.operationId,this.summary=e.summary,this.tags=e.tags,this.parameters=e.parameters,this.responses=e.responses)}raw(){return this.#e}#e;label;key;path;summary;operationId;tags;parameters;responses;excludeFromOpenApi;pathPattern;custom;methods;handler;corsPolicy;version;policies};var io=class{static{i(this,"RouterEntry")}constructor(e,n,r,o){this.fullPath=e,this.urlPattern=n,this.config=r,this.executableHandler=o}fullPath;urlPattern;config;executableHandler},rt=class{static{i(this,"LookupResult")}constructor(e,n,r){this.routeConfiguration=e,this.params=r??{},this.executableHandler=n}executableHandler;routeConfiguration;params},so=class extends Error{static{i(this,"RouterError")}constructor(e,n){super(e,n)}},ot=class{static{i(this,"Router")}constructor(e){this.routeEntries=[],this.versions=e}versions;routeEntries;addRoute(e,n){if(!(e instanceof je||e instanceof K))throw new q("Config must be a UserRouteConfiguration or SystemRouteConfiguration");let r=this.versions.find(s=>s.name===e.version)?.pathPrefix,o;"pathPattern"in e&&e.pathPattern?o=`${r??""}${e.pathPattern}`:o=`${r??""}${e.path}`;try{let s=new URLPattern({pathname:o}),a=new io(o,s,e,n);Object.freeze(a.config),this.routeEntries.push(a)}catch(s){throw new so(`addRoute-error: Invalid path '${o}'. '${s.message}'`,{cause:s})}}lookup(e,n){if(typeof e>"u")throw new y(`Invalid request - Method was undefined. Path: '${n}'`);let r=this.routeEntries.filter(o=>o.config.methods.includes(e));if(r.length!==0)for(let o=0;o<r.length;o++){let s=r[o],u=s.urlPattern.exec({pathname:n});if(u!==null)return new rt(s.config,s.executableHandler,u.pathname.groups)}}lookupByPathOnly(e){let n=[];for(let r=0;r<this.routeEntries.length;r++){let o=this.routeEntries[r],a=o.urlPattern.exec({pathname:e});if(a!==null){let u=new rt(o.config,o.executableHandler,a.pathname.groups);n.push(u)}}return n}};var ao;function Ps(t){ao=t}i(Ps,"setGlobalZuploEventContext");function Rn(){if(ao===void 0)throw new Error("global ZuploEventContext has not been defined - invalid runtime state");return ao}i(Rn,"getGlobalZuploEventContext");function Es({headers:t,removeAllVendorHeadersExceptListed:e,isDeno:n}){let r=new Headers(t);if(e){for(let[o]of t){let s=o.substring(0,3);Pi.includes(s.toLowerCase())&&!Ei.includes(o.toLowerCase())&&r.delete(o)}r.delete(ui)}else Ri.forEach(o=>{r.delete(o)});return n&&Ii.forEach(o=>{r.delete(o)}),r}i(Es,"normalizeIncomingRequestHeaders");var Ee=(0,Is.debug)("zuplo:runtime"),xl=i(t=>{let e=t.findIndex(n=>n.name===Pt.name);return e>-1?[...t.splice(e),Pt]:[...t,Pt]},"setupSystemNoVersion"),X=class t{constructor(e,n,r,o){this.routeData=e;this.runtimeSettings=n;this.schemaValidator=o;Ee("Gateway.constructor"),this.#n=this.setupRoutes(),this.#o=this.setupErrorHandler(),this.#t=r}static{i(this,"Gateway")}static#e;static async initialize(e,n,r,o){if(Ee("Gateway.initialize"),t.#e||await uo.trace.getTracer("gateway").startActiveSpan("gateway:initialize",async a=>{try{let u=await wn.init(r),c=e(),l={...c,corsPolicies:ns(c.corsPolicies)},d=new t(l,n,u,o);t.#e=d}finally{a.end()}}),!t.#e)throw new q("Invalid state - Gateway not initialized after trace call. The trace provider is likely not functioning correctly.");return t.#e}static purgeGatewayCache(){Ee("Gateway.purgeGatewayCache"),t.#e=void 0}static get instance(){if(!t.#e)throw new q("Gateway cannot be used before it is initialized");return t.#e}#t;#n;#r=[sn,rn,re];#o;setupRoutes=()=>{Ee("Gateway.setupRoutes");let e=this.routeData,n=xl(e.versions),r=new ot(n);if(e.routes.length===0)return Hr(r,this),jr(r,this),Br(r,this),rs(r,this),r;let{enabled:o}=this.runtimeSettings.developerPortal;o&&(ps(r,this),ds(r,this)),Hr(r,this),jr(r,this),Br(r,this);for(let s of ve)s instanceof xe&&s.registerRoutes(r,this);return e.routes.forEach(s=>{let a;if(typeof s.handler?.module=="object"&&(a=s.handler?.module[s.handler.export]),typeof a!="function")throw new y(`Invalid state - No handler on route for path '${s.path}'`);let u=new J({processors:this.#r,handler:a,gateway:this}),c=new je(s);r.addRoute(c,u.execute)}),os(r,this),r};setupErrorHandler=()=>{let e;if(typeof this.routeData.requestErrorHandler?.module=="object"){if(e=this.routeData.requestErrorHandler.module[this.routeData.requestErrorHandler.export],typeof e!="function")throw new y("Invalid state - Module and export set for 'errorHandler' is not a function")}else e=i((n,r,o)=>this.#i(n,r,o),"errorHandler");return e};errorHandler(e,n,r){try{return this.#o(e,n,r)}catch(o){return Ee("An error occurred in the user's errorHandler",o),this.#i(e,n,o)}}#i(e,n,r){Ee("Gateway.internalErrorResponse");let o={};if(w.instance.isWorkingCopy){if(r instanceof A&&r.extensionMembers)o=r.extensionMembers;else if(r.cause){let s=ie(r.cause);"stack"in s&&(s.stack=fs(s.stack)),o={cause:s}}}return T.internalServerError(e,n,{detail:r.message,...o})}async handleRequest(e,n,r){let{requestId:o,rayId:s}=n;Ps(r);let a=Es({headers:e.headers,removeAllVendorHeadersExceptListed:w.instance.build.COMPATIBILITY_FLAGS.removeAllVendorHeadersExceptListed,isDeno:w.instance.isDeno});a.set(Ze,o);let u=new Request(e,{headers:a});if(["GET","HEAD"].includes(u.method)&&u.body){let f=new Headers(u.headers);f.set(pr,"true"),u=new Request(u,{headers:f,body:null})}let c={},{userRequestLogger:l,systemRequestLogger:d}=this.#t.createRequestLoggers(o,s,r,c,u),p=new URL(u.url),m=p.pathname,g=this.#n.lookup(u.method,m);if(!g)throw new q(`Invalid state - no route match - should have been picked up by the not found handler, path: '${m}'`);let I=new Pn(e.headers),b=new z(u,{params:g.params}),x=new En({logger:l,route:g.routeConfiguration,requestId:o,event:r,custom:c,incomingRequestProperties:I});uo.trace.getActiveSpan()?.setAttributes({"http.route":x.route.pathPattern??x.route.path,"cloud.region":x.incomingRequestProperties.colo});let L=ne.initialize(x,b);if(g.routeConfiguration===zr&&wt.value?.notFoundHandler!==void 0){let f=this.#n.lookupByPathOnly(m);L.pathOnlyMatches=f.map(P=>P.routeConfiguration).filter(P=>P instanceof je)}try{if(F.addLogger(x,d),w.instance.build.COMPATIBILITY_FLAGS.doNotRunHooksOnSystemRoutes?!Rt(p):!p.pathname.startsWith("/__zuplo")){let H=await Vi(b,x);if(H instanceof Response)return H;{let h=ne.getContextExtensions(x);b=H,h.latestRequest=b}}Rt(p)||l.debug(`Request received '${p.pathname}'`,{method:u.method,url:p.pathname,hostname:p.hostname,route:g.routeConfiguration.path});let f=g.executableHandler;vl(f,g,u),Ee("Gateway.handleRequest - call user handler");let P=await f(b,x);if(Ee("Gateway.handleRequest - user handler"),!(P instanceof Response))throw new A(`Invalid Response type from the request handler: ${typeof P}`);if(P.bodyUsed)throw new A("The response object has already been used. Return a new response instead.");let O;if(P.headers.get(Ze)===null&&!P.webSocket){let H=new Headers(P.headers);H.set(Ze,o),O=new Response(P.body,{status:P.status,statusText:P.statusText,headers:H,cf:P.cf})}else O=P;return O}catch(f){return Ee("Gateway - error executing handler",f),f instanceof A?(l.error(f),d.warn(f)):d.error(f),await this.#i(b,x,f)}}};function vl(t,e,n){if(Ee("Gateway.checkHandler"),!t)throw typeof e.routeConfiguration>"u"?new y(`Invalid state - no routeConfiguration for '${n.method}:${n.url}`):new y(`Invalid state. No handler for request '${n.method}':'${e.routeConfiguration.path}'`)}i(vl,"checkHandler");var xs=i(async(t,e,n)=>{let r=X.instance.routeData.policies,o=It([t],r);if(o.length===0)throw new A(`Invalid 'invokeInboundPolicy call' - no policy '${t}' found.`);return o[0].handler(e,n)},"invokeInboundPolicy");var Pn=class{static{i(this,"HeaderIncomingRequestProperties")}#e;constructor(e){this.#e=e}get asn(){try{let e=this.#e.get(br);if(typeof e=="string")return parseInt(e)}catch{}}get asOrganization(){return this.#e.get(wr)??void 0}get city(){return this.#e.get(mr)??this.#e.get(gi)??void 0}get continent(){return this.#e.get(gr)??this.#e.get(fi)??void 0}get country(){return this.#e.get(fr)??this.#e.get(hi)??void 0}get latitude(){return this.#e.get(yr)??this.#e.get(bi)??void 0}get longitude(){return this.#e.get(hr)??this.#e.get(yi)??void 0}get colo(){return this.#e.get(Rr)??void 0}get postalCode(){return this.#e.get(pi)??this.#e.get(Pr)??void 0}get metroCode(){return this.#e.get(di)??this.#e.get(Er)??void 0}get region(){return this.#e.get(ci)??this.#e.get(Ir)??void 0}get regionCode(){return this.#e.get(li)??this.#e.get(xr)??void 0}get timezone(){return this.#e.get(mi)??this.#e.get(vr)??void 0}toJSON(){return{asn:this.asn,asOrganization:this.asOrganization,city:this.city,continent:this.continent,country:this.country,latitude:this.latitude,longitude:this.longitude,colo:this.colo,postalCode:this.postalCode,metroCode:this.metroCode,region:this.region,regionCode:this.regionCode,timezone:this.timezone}}},Ye=class extends Event{static{i(this,"ResponseSendingEvent")}constructor(e,n){super("responseSending"),this.request=e,this.mutableResponse=n}request;mutableResponse},Qe=class extends Event{static{i(this,"ResponseSentEvent")}constructor(e,n){super("responseSent"),this.request=e,this.response=n}request;response},ne=class t{static{i(this,"ZuploContextExtensions")}static#e=new WeakMap;static initialize(e,n){if(!t.#e.has(e)){let r=new t(n);return t.#e.set(e,r),r}throw new Error(`ZuploContextExtensions already initialized for context with requestId '${e.requestId}'`)}static getContextExtensions(e){let n=t.#e.get(e);if(!n)throw new A(`Invalid state, could not get ZuploContext extensions for context with requestId '${e.requestId}'`);return n}latestRequest;pathOnlyMatches;#t;#n;constructor(e){this.latestRequest=e,this.#t=[],this.#n=[]}addResponseSendingHook(e){this.#n.push(e)}addResponseSendingFinalHook(e){this.#t.push(e)}onResponseSendingFinal=async(e,n,r)=>{for(let o of this.#t)await o(e,n,r)};onResponseSending=async(e,n,r)=>{let o=e;for(let s of this.#n)o=await s(e,n,r);return o}},En=class extends EventTarget{static{i(this,"SystemZuploContext")}constructor({logger:e,route:n,requestId:r,event:o,custom:s,incomingRequestProperties:a}){super(),this.log=Object.freeze(e),this.route=n,this.requestId=r,this.custom=s,this.incomingRequestProperties=a,this.#e=o,this.invokeInboundPolicy=(u,c)=>xs(u,c,this),this.waitUntil=u=>{this.#e.waitUntil(u)},this.addResponseSendingHook=u=>{ne.getContextExtensions(this).addResponseSendingHook(u)},this.addResponseSendingFinalHook=u=>{ne.getContextExtensions(this).addResponseSendingFinalHook(u)},Object.freeze(this)}#e;requestId;log;route;custom;incomingRequestProperties;invokeInboundPolicy;waitUntil;addResponseSendingHook;addResponseSendingFinalHook;addEventListener(e,n,r){let o=i(s=>{try{typeof n=="function"?n(s):n.handleEvent(s)}catch(a){throw this.log.error(`Error invoking event ${e}. See following logs for details.`),a}},"wrapped");super.addEventListener(e,o,r)}};var pe=class t{static{i(this,"ContextData")}static#e;#t;constructor(e){this.#t=e}set(e,n){t.set(e,this.#t,n)}get(e){return t.get(e,this.#t)}static set(e,n,r){t.#e||(t.#e=new WeakMap);let o=t.#e.get(e);o||(o=new Map),o.set(n,r),t.#e.set(e,o)}static get(e,n){return t.#e||(t.#e=new WeakMap),t.#e.get(e)?.get(n)}};var Tl=["ZUPLO_USER_LOGGER_DATA_DOG_API_KEY","ZUPLO_USER_LOGGER_DATA_DOG_URL","ZUPLO_LOG_LEVEL","ZUPLO_HANDLER_WRITE_LOG_LEVEL"];function co(t){return t.startsWith("__ZUPLO")||t.startsWith("ZUPLO_")?!Tl.includes(t)&&!t.startsWith("ZUPLO_PUBLIC_"):!1}i(co,"isRestrictedEnvVariableName");function lo(t){return!!t.startsWith("ZUPLO_")}i(lo,"isZuploReadableEnvVariableName");var oe=new Proxy({},{get(t,e){if(!(co(String(e))&&!lo(String(e))))return w.instance.runtime[String(e)]}});var Ts=Oe(Le());var fe=(0,Ts.debug)("zuplo:runtime:external-service");function Ss(){let t,{__ZUPLO_EXTERNAL_SERVICE_TOKEN:e}=w.instance.runtime;if(e&&e!=="undefined")try{let n=atob(e);t=JSON.parse(n)}catch{}return t}i(Ss,"getServiceAuth");async function Os(t){let e=Ss();if(!e)throw fe("There is no external service auth configured for this zup."),new A("There are no external services configured for this zup.");if(typeof t!="string")throw fe("Cannot call external service with Request object"),new A("Currently, we only support fetch(<some_string>, ...).");let r=new URL(t).hostname,o={};o["CF-Access-Client-Id"]=e.clientId,o["CF-Access-Client-Secret"]=e.clientSecret;let s;if(e.customServiceMapping&&e.customServiceMapping[r])s=`https://${e.customServiceMapping[r]}`;else if(w.instance.useSha256ServiceRouting){fe("Using sha256 service routing");let a=w.instance.build;if(a.ACCOUNT_NAME&&a.PROJECT_NAME&&a.ENVIRONMENT_TYPE)s=`https://${await As(r,a.ACCOUNT_NAME,a.PROJECT_NAME,a.ENVIRONMENT_TYPE)}.zuptunnel.com`;else throw fe("Cannot use sha256 service routing, missing build variables"),new A("Failed to generate fully qualified tunnel url.")}else s=`https://${r}.zuptunnel.com`;return{serviceBaseUrl:s,tunnelHeaders:o}}i(Os,"externalServiceTunnelConfig");async function Cs(t,e){let n=Ss();if(n)if(fe(`Using external service auth. ClientId: ${n.clientId})`),typeof t=="string"){let r=new URL(t),o=r.hostname,s=e??{},a=new Headers(s.headers||{});a.set("CF-Access-Client-Id",n.clientId),a.set("CF-Access-Client-Secret",n.clientSecret),s.headers=a;let u;if(n.customServiceMapping&&n.customServiceMapping[o])u=`https://${n.customServiceMapping[o]}`;else if(w.instance.useSha256ServiceRouting){fe("Using sha256 service routing");let d=w.instance.build;if(d.ACCOUNT_NAME&&d.PROJECT_NAME&&d.ENVIRONMENT_TYPE)u=`https://${await As(o,d.ACCOUNT_NAME,d.PROJECT_NAME,d.ENVIRONMENT_TYPE)}.zuptunnel.com`;else throw fe("Cannot use sha256 service routing, missing build variables"),new A("Failed to generate fully qualified tunnel url.")}else u=`https://${o}.zuptunnel.com`;let c=new URL(`${u}${r.pathname}${r.search}`);fe(`Calling external service: ${c.toString()}`);let l=await it(c.toString(),s);if(l.status===403&&l.headers.get("cf-access-domain")!==null)throw console.error("403 Forbidden when calling external service.",{clientId:n.clientId,tunnelHost:u}),new A("Could not connect to secure tunnel.");return l}else throw fe("Cannot call external service with Request object"),new A("Currently, we only support fetch(<some_string>, ...).");else throw fe("There is no external service auth configured for this zup."),new A("There are no external services configured for this zup.")}i(Cs,"externalServiceHandler");async function As(t,e,n,r){let o=t.toLowerCase(),s=e.toLowerCase(),a=n.toLowerCase(),u=Sl(r);fe(`Hashing service name: ${s}-${o}.${s}-${a}-${u}`);let c=await vs(`${s}-${o}`),l=await vs(`${s}-${a}-${u}`);return`${c}.${l}`}i(As,"hashServiceName");async function vs(t){let e=new TextEncoder().encode(t),n=await crypto.subtle.digest("SHA-256",e);return Array.from(new Uint8Array(n)).map(s=>s.toString(16).padStart(2,"0")).join("").slice(0,-1)}i(vs,"hashSegment");function Sl(t){let e=t.toLowerCase();switch(e){case"production":case"preview":return e;default:return"working-copy"}}i(Sl,"sanitizeEnvironmentType");var Ls=new Map;Ls.set("service:",Cs);var it=globalThis.fetch;globalThis.fetch=function(t,e){let n=Ol(e);if(typeof t=="string"){let r=new URL(t),o=Ls.get(r.protocol);return o?o(t,n):it(t,n)}else return it(t,n)};var Ol=i(t=>{if(!t||t instanceof Request)return t;let e=t;if(!e.zuplo)return t;let n=t;return n.cf={cacheEverything:e.zuplo?.cacheEverything,cacheTtl:e.zuplo?.cacheTtlSeconds},delete t.zuplo,t},"transformInit");var _s=require("node:async_hooks");var Ns={request:new _s.AsyncLocalStorage};var ks=i(()=>{X.purgeGatewayCache()},"purgeGatewayCache"),Cl="Error initializing gateway. Check your configuration for errors or contact support.",Al="Error initializing gateway. Check your 'zuplo.runtime.ts' for errors or contact support.",In=class{constructor(e,n,r,o,s,a){this.routeLoader=e;this.buildEnvironment=n;this.runtimeSettings=r;this.serviceProvider=o;this.schemaValidations=s;this.runtimeInit=a}static{i(this,"Handler")}requestHandler=async(e,n,r)=>{let o=e.headers.get(Ze)??e.headers.get(ai)??crypto.randomUUID(),s=e.headers.get(qe),a={requestId:o,rayId:s};return Ns.request.run(a,async()=>{w.initialize({build:this.buildEnvironment,runtime:n});try{await Ki(this.runtimeInit)}catch(c){this.handleError(c,Al,e)}return zi(i(async(c,l)=>{let d;try{d=await X.initialize(this.routeLoader,this.runtimeSettings,this.serviceProvider,this.schemaValidations)}catch(p){return this.handleError(p,Cl,c)}return d.handleRequest(c,a,l)},"innerHandler"))(e,r)})};handleError(e,n,r){console.error("Error initializing gateway.",e),e instanceof y&&(n=e.message);let o={status:500,title:"Gateway Initialization Error",type:"https://httpproblems.com/http-status/500",detail:n,instance:r.url,trace:{timestamp:Date.now(),rayId:r.headers.get("cf-ray")??void 0,buildId:this.buildEnvironment.BUILD_ID},message:w.instance.isWorkingCopy?e.message:void 0};return new Response(JSON.stringify(o,null,2),{status:500,headers:{"content-type":"application/json"}})}};var Bs=Oe(Le());function Ll(t){for(var e=[],n=0;n<t.length;){var r=t[n];if(r==="*"||r==="+"||r==="?"){e.push({type:"MODIFIER",index:n,value:t[n++]});continue}if(r==="\\"){e.push({type:"ESCAPED_CHAR",index:n++,value:t[n++]});continue}if(r==="{"){e.push({type:"OPEN",index:n,value:t[n++]});continue}if(r==="}"){e.push({type:"CLOSE",index:n,value:t[n++]});continue}if(r===":"){for(var o="",s=n+1;s<t.length;){var a=t.charCodeAt(s);if(a>=48&&a<=57||a>=65&&a<=90||a>=97&&a<=122||a===95){o+=t[s++];continue}break}if(!o)throw new TypeError("Missing parameter name at ".concat(n));e.push({type:"NAME",index:n,value:o}),n=s;continue}if(r==="("){var u=1,c="",s=n+1;if(t[s]==="?")throw new TypeError('Pattern cannot start with "?" at '.concat(s));for(;s<t.length;){if(t[s]==="\\"){c+=t[s++]+t[s++];continue}if(t[s]===")"){if(u--,u===0){s++;break}}else if(t[s]==="("&&(u++,t[s+1]!=="?"))throw new TypeError("Capturing groups are not allowed at ".concat(s));c+=t[s++]}if(u)throw new TypeError("Unbalanced pattern at ".concat(n));if(!c)throw new TypeError("Missing pattern at ".concat(n));e.push({type:"PATTERN",index:n,value:c}),n=s;continue}e.push({type:"CHAR",index:n,value:t[n++]})}return e.push({type:"END",index:n,value:""}),e}i(Ll,"lexer");function po(t,e){e===void 0&&(e={});for(var n=Ll(t),r=e.prefixes,o=r===void 0?"./":r,s="[^".concat(Nl(e.delimiter||"/#?"),"]+?"),a=[],u=0,c=0,l="",d=i(function(h){if(c<n.length&&n[c].type===h)return n[c++].value},"tryConsume"),p=i(function(h){var R=d(h);if(R!==void 0)return R;var S=n[c],M=S.type,C=S.index;throw new TypeError("Unexpected ".concat(M," at ").concat(C,", expected ").concat(h))},"mustConsume"),m=i(function(){for(var h="",R;R=d("CHAR")||d("ESCAPED_CHAR");)h+=R;return h},"consumeText");c<n.length;){var g=d("CHAR"),I=d("NAME"),b=d("PATTERN");if(I||b){var x=g||"";o.indexOf(x)===-1&&(l+=x,x=""),l&&(a.push(l),l=""),a.push({name:I||u++,prefix:x,suffix:"",pattern:b||s,modifier:d("MODIFIER")||""});continue}var L=g||d("ESCAPED_CHAR");if(L){l+=L;continue}l&&(a.push(l),l="");var f=d("OPEN");if(f){var x=m(),P=d("NAME")||"",O=d("PATTERN")||"",H=m();p("CLOSE"),a.push({name:P||(O?u++:""),pattern:P&&!O?s:O,prefix:x,suffix:H,modifier:d("MODIFIER")||""});continue}p("END")}return a}i(po,"parse");function Ms(t,e){return _l(po(t,e),e)}i(Ms,"compile");function _l(t,e){e===void 0&&(e={});var n=kl(e),r=e.encode,o=r===void 0?function(c){return c}:r,s=e.validate,a=s===void 0?!0:s,u=t.map(function(c){if(typeof c=="object")return new RegExp("^(?:".concat(c.pattern,")$"),n)});return function(c){for(var l="",d=0;d<t.length;d++){var p=t[d];if(typeof p=="string"){l+=p;continue}var m=c?c[p.name]:void 0,g=p.modifier==="?"||p.modifier==="*",I=p.modifier==="*"||p.modifier==="+";if(Array.isArray(m)){if(!I)throw new TypeError('Expected "'.concat(p.name,'" to not repeat, but got an array'));if(m.length===0){if(g)continue;throw new TypeError('Expected "'.concat(p.name,'" to not be empty'))}for(var b=0;b<m.length;b++){var x=o(m[b],p);if(a&&!u[d].test(x))throw new TypeError('Expected all "'.concat(p.name,'" to match "').concat(p.pattern,'", but got "').concat(x,'"'));l+=p.prefix+x+p.suffix}continue}if(typeof m=="string"||typeof m=="number"){var x=o(String(m),p);if(a&&!u[d].test(x))throw new TypeError('Expected "'.concat(p.name,'" to match "').concat(p.pattern,'", but got "').concat(x,'"'));l+=p.prefix+x+p.suffix;continue}if(!g){var L=I?"an array":"a string";throw new TypeError('Expected "'.concat(p.name,'" to be ').concat(L))}}return l}}i(_l,"tokensToFunction");function Nl(t){return t.replace(/([.+*?=^!:${}()[\]|/\\])/g,"\\$1")}i(Nl,"escapeString");function kl(t){return t&&t.sensitive?"":"i"}i(kl,"flags");var Zs=Oe(Le());var Ml=(0,Zs.debug)("zuplo:runtime"),go=new TextEncoder,Ds={appstream2:"appstream",cloudhsmv2:"cloudhsm",email:"ses",marketplace:"aws-marketplace",mobile:"AWSMobileHubService",pinpoint:"mobiletargeting",queue:"sqs","git-codecommit":"codecommit","mturk-requester-sandbox":"mturk-requester","personalize-runtime":"personalize"},Dl=["authorization","content-type","content-length","user-agent","presigned-expires","expect","x-amzn-trace-id","range","connection"],st=class{static{i(this,"AwsClient")}accessKeyId;secretAccessKey;sessionToken;service;region;cache;retries;initRetryMs;constructor({accessKeyId:e,secretAccessKey:n,sessionToken:r,service:o,region:s,cache:a,retries:u,initRetryMs:c}){if(e==null)throw new TypeError("accessKeyId is a required option");if(n==null)throw new TypeError("secretAccessKey is a required option");this.accessKeyId=e,this.secretAccessKey=n,this.sessionToken=r,this.service=o,this.region=s,this.cache=a||new Map,this.retries=u??0,this.initRetryMs=c||50}async sign(e,n){let r=new fo(Object.assign({url:e},n,this,n&&n.aws)),o=Object.assign({},n,await r.sign());return delete o.aws,{url:o.url.toString(),request:o}}async fetch(e,n){Ml("AWS fetch",e);for(let r=0;r<=this.retries;r++){let{url:o,request:s}=await this.sign(e,n),a=fetch(o,s);if(r===this.retries)return a;let u=await a;if(u.status<500&&u.status!==429)return u;await new Promise(c=>setTimeout(c,Math.random()*this.initRetryMs*Math.pow(2,r)))}throw new y("An unknown error occurred, ensure retries is not negative")}},fo=class{static{i(this,"AwsV4Signer")}method;url;headers;body;accessKeyId;secretAccessKey;sessionToken;service;region;cache;datetime;signQuery;appendSessionToken;signableHeaders;signedHeaders;canonicalHeaders;credentialString;encodedPath;encodedSearch;constructor({method:e,url:n,headers:r,body:o,accessKeyId:s,secretAccessKey:a,sessionToken:u,service:c,region:l,cache:d,datetime:p,signQuery:m,appendSessionToken:g,allHeaders:I,singleEncode:b}){if(n==null)throw new TypeError("url is a required option");if(s==null)throw new TypeError("accessKeyId is a required option");if(a==null)throw new TypeError("secretAccessKey is a required option");this.method=e||(o?"POST":"GET"),this.url=new URL(n),this.headers=new Headers(r||{}),this.body=o,this.accessKeyId=s,this.secretAccessKey=a,this.sessionToken=u;let x,L;(!c||!l)&&([x,L]=Hl(this.url,this.headers)),this.service=c||x||"",this.region=l||L||"us-east-1",this.cache=d||new Map,this.datetime=p||new Date().toISOString().replace(/[:-]|\.\d{3}/g,""),this.signQuery=m,this.appendSessionToken=g||this.service==="iotdevicegateway",this.headers.delete("Host");let f=this.signQuery?this.url.searchParams:this.headers;if(this.service==="s3"&&!this.headers.has("X-Amz-Content-Sha256")&&this.headers.set("X-Amz-Content-Sha256","UNSIGNED-PAYLOAD"),f.set("X-Amz-Date",this.datetime),this.sessionToken&&!this.appendSessionToken&&f.set("X-Amz-Security-Token",this.sessionToken),this.signableHeaders=["host",...this.headers.keys()].filter(O=>I||!Dl.includes(O)).sort(),this.signedHeaders=this.signableHeaders.join(";"),this.canonicalHeaders=this.signableHeaders.map(O=>O+":"+(O==="host"?this.url.host:(this.headers.get(O)||"").replace(/\s+/g," "))).join(`
|
|
63
|
-
`),this.credentialString=[this.datetime.slice(0,8),this.region,this.service,"aws4_request"].join("/"),this.signQuery&&(this.service==="s3"&&!
|
|
60
|
+
`).replace(new RegExp(p.pad,"g"),c).replace(new RegExp(p.indent,"g"),c+d)},"expandWhiteSpace");if(r.includes(a))return'"[Circular]"';if(a==null||typeof a=="number"||typeof a=="boolean"||typeof a=="function"||typeof a=="symbol"||Xi(a))return String(a);if(a instanceof Date)return`new Date('${a.toISOString()}')`;if(l>o)return"...";if(Array.isArray(a)){if(a.length===0)return"[]";r.push(a);let g="["+p.newline+a.map((I,b)=>{let T=a.length-1===b?p.newline:","+p.newlineOrSpace,_=s(I,u,c+d,l+1);return u.transform&&(_=u.transform(a,b,_)),p.indent+_+T}).join("")+p.pad+"]";return r.pop(),m(g)}if(Be(a)){let g=es(a);if(u.filter&&(g=g.filter(b=>u.filter?.(a,b))),g.length===0)return"{}";r.push(a);let I="{"+p.newline+g.map((b,T)=>{let _=g.length-1===T?p.newline:","+p.newlineOrSpace,h=typeof b=="symbol",P=!h&&/^[a-z$_][$\w]*$/i.test(b),O=h||P?b:s(b,u,"",l+1),H=s(a[b],u,c+d,l+1);return u.transform&&(H=u.transform(a,b,H)),p.indent+String(O)+": "+H+_}).join("")+p.pad+"}";return r.pop(),m(I)}return a=a.replace(/\\/g,"\\\\"),a=String(a).replace(/[\r\n]/g,g=>g===`
|
|
61
|
+
`?"\\n":"\\r"),u.singleQuotes===!1?(a=a.replace(/"/g,'\\"'),`"${a}"`):(a=a.replace(/'/g,"\\'"),`'${a}'`)},"stringify")(t,e,n,0)}i(un,"stringifyObject");function He(t){return t.map(e=>ie(e))}i(He,"makeErrorsSerializable");function ot(t){if(t.length===0)return"<no data provided to log>";let e=t[0];return typeof e=="string"?e:e instanceof Error?e.message:Se(ie(e))}i(ot,"extractBestMessage");function ys(t){let e=[];return t.forEach(n=>{if(typeof n=="string")e.push(n);else if(It(n))if(n.stack)e.push(n.stack);else{let r=un(ie(n));e.push(r)}else if(typeof n=="object"){let r=un(n);e.push(r)}else{let r=to(n);e.push(r)}}),e.join(`
|
|
62
|
+
`)}i(ys,"messagesToMultilineText");function Se(t){return typeof t=="string"?t:JSON.stringify(t)}i(Se,"stringifyNonString");function to(t){return typeof t=="string"?t:t===null?"null":typeof t>"u"?"undefined":typeof t=="number"||typeof t=="boolean"||typeof t=="bigint"||typeof t=="symbol"?t.toString():typeof t=="function"?`[function ${t.name}]`:typeof t=="object"&&Array.isArray(t)?`[array ${t.length}]`:t instanceof Error?`${t.name??"Error"}: ${t.message??"unknown"}`:typeof t=="object"?$r(t):"unknown"}i(to,"stringifyNonStringToText");var cn=require("jose");async function se(t,e,n){for(let r=0;r<=t.retries;r++){let o=fetch(e,n);if(r===t.retries)return o;let s=await o;if(s.status<500&&s.status!==429)return s;t?.logger?.error("Request failed, retrying",{method:typeof e=="string"?"GET":e.method,url:typeof e=="string"?e:e.url,status:s.status}),await new Promise(a=>setTimeout(a,t.retryDelayMs*Math.pow(2,r)))}throw new y("An unknown error occurred, ensure retries is not negative")}i(se,"fetchRetry");async function Ee({serviceAccount:t,audience:e,expirationTime:n="1h",payload:r={}}){let{clientEmail:o,privateKeyId:s,privateKey:a}=t;return await new cn.SignJWT(r).setProtectedHeader({alg:"RS256",kid:s}).setIssuer(o).setSubject(o).setAudience(e).setIssuedAt().setExpirationTime(n).sign(a)}i(Ee,"getTokenFromGcpServiceAccount");async function bs(t,e,n){return ws(t,{token:e,returnSecureToken:!0},n)}i(bs,"exchangeFirebaseJwtForIdToken");async function ln(t,e,n){return ws(t,{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:e},n)}i(ln,"exchangeGgpJwtForIdToken");async function ws(t,e,n){let r=await se(n,t,{method:"POST",headers:{"Content-Type":"application/json"},redirect:"follow",body:JSON.stringify(e)});if(r.status!==200){let s;try{let a=await r.text(),u=JSON.parse(a);s={cause:u.error??u}}catch{}throw new A({message:"Could not get token from Google Identity",extensionMembers:s})}return await r.json()}i(ws,"fetchToken");var ue=class t{static{i(this,"GcpServiceAccount")}#e;#t;constructor({serviceAccount:e,privateKey:n}){this.#t=e,this.#e=n}static async init(e){let n=JSON.parse(e),r=await(0,cn.importPKCS8)(n.private_key.trim(),"RS256");return new t({serviceAccount:n,privateKey:r})}get type(){return this.#t.type}get projectId(){return this.#t.project_id}get privateKeyId(){return this.#t.private_key_id}get privateKey(){return this.#e}get clientEmail(){return this.#t.client_email}get clientId(){return this.#t.client_id}get authUri(){return this.#t.auth_uri}get tokenUrl(){return this.#t.token_url}get authProviderX509CertUrl(){return this.#t.auth_provider_x509_cert_url}get clientX509CertUrl(){return this.#t.client_x509_cert_url}get universalDomain(){return this.#t.universe_domain}};var dn=class extends Q{constructor(n){super();this.options=n}static{i(this,"GoogleCloudLoggingPlugin")}getTransport(){return new Ot(this.options)}},wl="https://logging.googleapis.com/v2/entries:write?alt=json",no={error:"ERROR",warn:"WARNING",info:"INFO",debug:"DEBUG"},Ot=class{static{i(this,"GoogleLogTransport")}constructor(e){this.#n=e.logName,this.#e=e.serviceAccountJson,this.#o=w.instance.loggingEnvironmentType,this.#i=w.instance.loggingEnvironmentStage,this.#r=w.instance.deploymentName}#e;#t;#n;#r;#o;#i;async init(){this.#t=await ue.init(this.#e)}log(e,n){if(!this.#t)throw new $("Invalid state - Google log transport is not initialized");if(e.messages.length===0)return;let r={allMessages:He(e.messages)},o=this.#t.projectId??"zuplo-production",s={logName:this.#n,resource:{type:"global"},severity:no[e.level],timestamp:e.timestamp,trace:`projects/${o}/traces/${e.requestId}`,labels:{requestId:e.requestId,buildId:e.buildId,source:e.logSource,loggingId:e.loggingId,logOwner:e.logOwner,environment:this.#r,environmentType:this.#o,environmentStage:this.#i}};e.rayId&&(s.labels.rayId=e.rayId);let a=ot(r.allMessages);s.jsonPayload={...r,message:a},this.batcher.enqueue(s),n.waitUntil(this.batcher.waitUntilFlushed())}dispatchFunction=async e=>{if(e.length===0)return;this.#t||(this.#t=await ue.init(this.#e));let n=await Ee({serviceAccount:this.#t,audience:"https://logging.googleapis.com/google.logging.v2.LoggingServiceV2"}),r=await fetch(wl,{method:"POST",body:JSON.stringify({entries:e}),headers:{Authorization:`Bearer ${n}`,"content-type":"application/json;charset=UTF-8"}});r.ok||console.error(r.status,r.statusText,await r.text())};batcher=new q("google-log-transport",1,this.dispatchFunction)};var pn="gcp";function mn(t){let e={allMessages:He(t.messages)},n="zuplo-production",r=ot(e.allMessages),o={logName:`projects/${n}/logs/runtime-user`,message:r,severity:no[t.level],timestamp:t.timestamp,"logging.googleapis.com/labels":{buildId:t.buildId,source:t.logSource,loggingId:t.loggingId,logOwner:t.logOwner},"logging.googleapis.com/trace":`projects/${n}/traces/${t.requestId}`,allMessages:e.allMessages};return t.rayId&&(o["logging.googleapis.com/labels"].rayId=t.rayId),o}i(mn,"gcpLogFormat");var St=class{static{i(this,"ConsoleTransport")}constructor(e,n){this.#e=e??console,this.#t=n}#e;#t;log(e){if(this.#t===pn){if(e.messages.length===0)return;this.#e[e.level].apply(null,[mn(e)])}else this.#e[e.level].apply(null,[...e.messages,{logOwner:e.logOwner,logSource:e.logSource,level:e.level,timestamp:e.timestamp,loggingId:e.loggingId,rayId:e.rayId,requestId:e.requestId,buildId:e.buildId}])}};var gn=class extends Q{constructor(n){super();this.options=n}static{i(this,"DataDogLoggingPlugin")}getTransport(){return new Ct(this.options)}},ro="__ddtags",oo="__ddattr",io=i(t=>t.replaceAll(",","_").replaceAll(":","_"),"cleanTagText"),Rl=i(t=>{let e=Object.keys(t),n=[];return e.forEach(r=>{let o=t[r];o==null?n.push(io(r)):n.push(`${io(r)}:${io(o.toString())}`)}),n.join(",")},"formatTags"),Ct=class{static{i(this,"DataDogTransport")}constructor(e){this.#e=e.apiKey,this.#t=e.url??"https://http-intake.logs.datadoghq.com/api/v2/logs",this.#r=w.instance.loggingEnvironmentType,this.#o=w.instance.loggingEnvironmentStage,this.#n=w.instance.deploymentName}#e;#t;#n;#r;#o;log(e,n){let r={},o=n.custom[ro];o&&typeof o=="object"&&Object.assign(r,o);let s=[...e.messages],a=e.messages.findIndex(g=>g[ro]!==void 0);a>-1&&(Object.assign(r,s[a][ro]),s.splice(a,1));let u={},c=n.custom[oo];c&&typeof c=="object"&&Object.assign(u,c);let l=e.messages.findIndex(g=>g[oo]!==void 0);l>-1&&(Object.assign(u,s[l][oo]),s.splice(l,1));let d=He(s),m={message:{...{...e,activityId:e.requestId,trace:e.requestId},messages:d},ddsource:"Zuplo",hostname:new URL(n.originalRequest.url).hostname,msg:ot(d),service:e.loggingId,ddtags:Rl(r),environment:this.#n,environment_type:this.#r,environment_stage:this.#o};Object.assign(m,u),this.batcher.enqueue(m),n.waitUntil(this.batcher.waitUntilFlushed())}dispatchFunction=async e=>{e.length!==0&&await fetch(this.#t,{method:"POST",body:JSON.stringify([...e]),headers:{"content-type":"application/json","DD-API-KEY":this.#e}})};batcher=new q("data-dog-transport",10,this.dispatchFunction)};var At=class{static{i(this,"ProcessTransport")}constructor(e,n){this.#e=e,this.#t=n}#e;#t;log(e){if(this.#t===pn){if(e.messages.length===0)return;this.#e[e.level].apply(null,[mn(e)])}else this.#e[e.level].apply(null,[...e.messages,{logOwner:e.logOwner,logSource:e.logSource,timestamp:e.timestamp,loggingId:e.loggingId,rayId:e.rayId,requestId:e.requestId,buildId:e.buildId,vectorClock:e.vectorClock}])}};var Pl=i(({url:t,remoteLogToken:e,loggingId:n,sendOnlyErrors:r})=>async o=>{let s;if(r===!0?s=o.filter(a=>a.level==="error"):s=o,s.length!==0)try{await fetch(`${t}/publish/${n}`,{method:"POST",body:JSON.stringify({timestamp:Date.now(),type:"log",message:s.map(a=>({...a,messages:He(a.messages)}))}),headers:{"content-type":"application/json",authentication:`Bearer ${e}`,"user-agent":w.instance.systemUserAgent,"zp-dn":w.instance.deploymentName??"unknown"}})}catch(a){console.error(a)}},"dispatchFunction"),fn,hn=class{static{i(this,"RemoteLogTransport")}constructor(e){fn||(fn=new q("remote-log-transport",1,Pl(e)))}log(e,n){fn.enqueue(e),n.waitUntil(fn.waitUntilFlushed())}};var El={internal:1,trace:2,debug:5,info:9,warn:13,error:17,fatal:21},Rs=i((t,e)=>n=>{let r={};return r.deploymentName=t,r.labels={requestId:n.requestId,source:n.logSource,loggingId:n.loggingId,logOwner:n.logOwner},r.rayId=n.rayId??"",r.runtime={buildId:e.BUILD_ID,buildTimestamp:e.TIMESTAMP,gitSHA:e.GIT_SHA,version:e.ZUPLO_VERSION},r.atomicCounter=n.vectorClock,{timestamp:n.timestamp,observerdTimestamp:n.timestamp,traceId:n.requestId,severityText:n.level,severityNumber:El[n.level],body:n.messages,attributes:r}},"unifiedFormatter");var Il=i(({url:t,remoteLogToken:e,deploymentName:n,build:r})=>async o=>{if(o.length===0)return;let s=Rs(n,r);try{await fetch(`${t}/v1/runtime-logs`,{method:"POST",body:JSON.stringify({entries:o.map(s)}),headers:{"content-type":"application/json",authentication:`Bearer ${e}`,"user-agent":w.instance.systemUserAgent,"zp-dn":w.instance.deploymentName??"unknown"}})}catch(a){console.error(a)}},"dispatchFunction"),yn,bn=class{static{i(this,"UnifiedLogTransport")}constructor(e){yn||(yn=new q("unified-log-transport",1,Il(e)))}async log(e,n){yn.enqueue(e),n.waitUntil(yn.waitUntilFlushed())}};var so=(0,Ps.debug)("zuplo:logging"),wn=class t{static{i(this,"LogInitializer")}systemCoreLogger;userCoreLogger;constructor({systemCoreLogger:e,userCoreLogger:n}){this.systemCoreLogger=e,this.userCoreLogger=n}static async init(e){let n=await t.setupSystemCoreLogger(w.instance,e),r=await t.setupUserCoreLogger(w.instance,e);return new t({systemCoreLogger:n,userCoreLogger:r})}static async setupSystemCoreLogger(e,n){let{build:r}=e;so("Gateway.setupSystemCoreLogger");let o=[],s=n.getService(bt);return s?o.push(new At(s.logger,e.logFormat)):e.isDeno&&o.push(new St(console,e.logFormat)),e.isCloudflare&&e.deploymentName&&e.remoteLogToken&&o.push(new bn({url:e.remoteLogURL,deploymentName:e.deploymentName,remoteLogToken:e.remoteLogToken,build:e.build})),await Promise.all(o.map(async a=>{a.init&&await a.init()})),new xt(e.systemLogLevel,"system",e.loggingId,r.BUILD_ID,o)}static async setupUserCoreLogger(e,n){so("Gateway.setupUserCoreLogger");let r=[],{runtime:o,build:s}=e,a=n.getService(bt);if(a&&a.captureUserLogs===!0?r.push(new At(a.logger,e.logFormat)):e.isDeno&&r.push(new St(console,e.logFormat)),e.remoteLogToken&&e.loggingId&&r.push(new hn({loggingId:e.loggingId,url:e.remoteLogURL,remoteLogToken:e.remoteLogToken,sendOnlyErrors:!e.isWorkingCopy})),o.GCP_USER_LOG_NAME&&o.GCP_USER_LOG_SVC_ACCT_JSON&&r.push(new Ot({serviceAccountJson:o.GCP_USER_LOG_SVC_ACCT_JSON,logName:o.GCP_USER_LOG_NAME})),o.ZUPLO_USER_LOGGER_DATA_DOG_API_KEY){let u=o.ZUPLO_USER_LOGGER_DATA_DOG_URL;r.push(new Ct({apiKey:o.ZUPLO_USER_LOGGER_DATA_DOG_API_KEY,url:u}))}return ve.forEach(u=>{u instanceof Q&&r.push(u.getTransport())}),await Promise.all(r.map(async u=>{u.init&&await u.init()})),new xt(e.userLogLevel,"user",e.loggingId,s.BUILD_ID,r)}createRequestLoggers(e,n,r,o,s){so("Gateway.createRequestLoggers");let a=new an(r,o,s),u=new vt(e,n,this.systemCoreLogger,a);return{userRequestLogger:new vt(e,n,this.userCoreLogger,a),systemRequestLogger:u}}};var Ve=class{static{i(this,"UserRouteConfiguration")}constructor(e){this.path=e.path,this.methods=e.methods,this.label=e.label,this.key=e.key,this.handler=e.handler,this.corsPolicy=e.corsPolicy,this.custom=e.custom,this.version=e.version,this.policies=e.policies,this.excludeFromOpenApi=e.excludeFromOpenApi,this.pathPattern=e.pathPattern,e.raw?(this.#e=e.raw(),this.operationId=this.raw()?.operationId,this.summary=this.raw()?.summary,this.tags=this.raw()?.tags,this.parameters=this.raw()?.parameters,this.responses=this.raw()?.responses):(this.operationId=e.operationId,this.summary=e.summary,this.tags=e.tags,this.parameters=e.parameters,this.responses=e.responses)}raw(){return this.#e}#e;label;key;path;summary;operationId;tags;parameters;responses;excludeFromOpenApi;pathPattern;custom;methods;handler;corsPolicy;version;policies};var ao=class{static{i(this,"RouterEntry")}constructor(e,n,r,o){this.fullPath=e,this.urlPattern=n,this.config=r,this.executableHandler=o}fullPath;urlPattern;config;executableHandler},it=class{static{i(this,"LookupResult")}constructor(e,n,r){this.routeConfiguration=e,this.params=r??{},this.executableHandler=n}executableHandler;routeConfiguration;params},uo=class extends Error{static{i(this,"RouterError")}constructor(e,n){super(e,n)}},st=class{static{i(this,"Router")}constructor(e){this.routeEntries=[],this.versions=e}versions;routeEntries;addRoute(e,n){if(!(e instanceof Ve||e instanceof J))throw new $("Config must be a UserRouteConfiguration or SystemRouteConfiguration");let r=this.versions.find(s=>s.name===e.version)?.pathPrefix,o;"pathPattern"in e&&e.pathPattern?o=`${r??""}${e.pathPattern}`:o=`${r??""}${e.path}`;try{let s=new URLPattern({pathname:o}),a=new ao(o,s,e,n);Object.freeze(a.config),this.routeEntries.push(a)}catch(s){throw new uo(`addRoute-error: Invalid path '${o}'. '${s.message}'`,{cause:s})}}lookup(e,n){if(typeof e>"u")throw new y(`Invalid request - Method was undefined. Path: '${n}'`);let r=this.routeEntries.filter(o=>o.config.methods.includes(e));if(r.length!==0)for(let o=0;o<r.length;o++){let s=r[o],u=s.urlPattern.exec({pathname:n});if(u!==null)return new it(s.config,s.executableHandler,u.pathname.groups)}}lookupByPathOnly(e){let n=[];for(let r=0;r<this.routeEntries.length;r++){let o=this.routeEntries[r],a=o.urlPattern.exec({pathname:e});if(a!==null){let u=new it(o.config,o.executableHandler,a.pathname.groups);n.push(u)}}return n}};var co;function Es(t){co=t}i(Es,"setGlobalZuploEventContext");function Rn(){if(co===void 0)throw new Error("global ZuploEventContext has not been defined - invalid runtime state");return co}i(Rn,"getGlobalZuploEventContext");function Is({headers:t,removeAllVendorHeadersExceptListed:e,isDeno:n}){let r=new Headers(t);if(e){for(let[o]of t){let s=o.substring(0,3);Ii.includes(s.toLowerCase())&&!Ti.includes(o.toLowerCase())&&r.delete(o)}r.delete(li)}else Ei.forEach(o=>{r.delete(o)});return n&&xi.forEach(o=>{r.delete(o)}),r}i(Is,"normalizeIncomingRequestHeaders");var Ie=(0,Ts.debug)("zuplo:runtime"),Tl=i(t=>{let e=t.findIndex(n=>n.name===Et.name);return e>-1?[...t.splice(e),Et]:[...t,Et]},"setupSystemNoVersion"),te=class t{constructor(e,n,r,o){this.routeData=e;this.runtimeSettings=n;this.schemaValidator=o;Ie("Gateway.constructor"),pe,this.#n=this.setupRoutes(),this.#o=this.setupErrorHandler(),this.#t=r}static{i(this,"Gateway")}static#e;static async initialize(e,n,r,o){if(Ie("Gateway.initialize"),t.#e||await lo.trace.getTracer("gateway").startActiveSpan("gateway:initialize",{attributes:{[pe.SystemTrace]:!0}},async a=>{try{let u=await wn.init(r),c=e(),l={...c,corsPolicies:os(c.corsPolicies)},d=new t(l,n,u,o);t.#e=d}finally{a.end()}}),!t.#e)throw new $("Invalid state - Gateway not initialized after trace call. The trace provider is likely not functioning correctly.");return t.#e}static purgeGatewayCache(){Ie("Gateway.purgeGatewayCache"),t.#e=void 0}static get instance(){if(!t.#e)throw new $("Gateway cannot be used before it is initialized");return t.#e}#t;#n;#r=[sn,rn,re];#o;setupRoutes=()=>{Ie("Gateway.setupRoutes");let e=this.routeData,n=Tl(e.versions),r=new st(n);if(e.routes.length===0)return Zr(r,this),Gr(r,this),jr(r,this),is(r,this),r;let{enabled:o}=this.runtimeSettings.developerPortal;o&&(gs(r,this),ms(r,this)),Zr(r,this),Gr(r,this),jr(r,this);for(let s of ve)s instanceof xe&&s.registerRoutes(r,this);return e.routes.forEach(s=>{let a;if(typeof s.handler?.module=="object"&&(a=s.handler?.module[s.handler.export]),typeof a!="function")throw new y(`Invalid state - No handler on route for path '${s.path}'`);let u=new K({processors:this.#r,handler:a,gateway:this}),c=new Ve(s);r.addRoute(c,u.execute)}),ss(r,this),r};setupErrorHandler=()=>{let e;if(typeof this.routeData.requestErrorHandler?.module=="object"){if(e=this.routeData.requestErrorHandler.module[this.routeData.requestErrorHandler.export],typeof e!="function")throw new y("Invalid state - Module and export set for 'errorHandler' is not a function")}else e=i((n,r,o)=>this.#i(n,r,o),"errorHandler");return e};errorHandler(e,n,r){try{return this.#o(e,n,r)}catch(o){return Ie("An error occurred in the user's errorHandler",o),this.#i(e,n,o)}}#i(e,n,r){Ie("Gateway.internalErrorResponse");let o={};if(w.instance.isWorkingCopy){if(r instanceof A&&r.extensionMembers)o=r.extensionMembers;else if(r.cause){let s=ie(r.cause);"stack"in s&&(s.stack=hs(s.stack)),o={cause:s}}}return v.internalServerError(e,n,{detail:r.message,...o})}async handleRequest(e,n,r){let{requestId:o,rayId:s}=n;Es(r);let a=Is({headers:e.headers,removeAllVendorHeadersExceptListed:w.instance.build.COMPATIBILITY_FLAGS.removeAllVendorHeadersExceptListed,isDeno:w.instance.isDeno});a.set(qe,o);let u=new Request(e,{headers:a});if(["GET","HEAD"].includes(u.method)&&u.body){let P=new Headers(u.headers);P.set(gr,"true"),u=new Request(u,{headers:P,body:null})}let c={},{userRequestLogger:l,systemRequestLogger:d}=this.#t.createRequestLoggers(o,s,r,c,u),p=new URL(u.url),m=p.pathname,g=this.#n.lookup(u.method,m);if(!g)throw new $(`Invalid state - no route match - should have been picked up by the not found handler, path: '${m}'`);let I=new Pn(e.headers),b=new z(u,{params:g.params}),T=new En({logger:l,route:g.routeConfiguration,requestId:o,event:r,custom:c,incomingRequestProperties:I}),_=g.routeConfiguration.raw();lo.trace.getActiveSpan()?.setAttributes({"http.route":T.route.path??T.route.pathPattern,"cloud.region":T.incomingRequestProperties.colo,[pe.RoutePathPattern]:T.route.pathPattern,[pe.RouteOperationId]:_.operationId,[pe.RouteTrace]:_["x-zuplo-trace"],[pe.RouteSystem]:Qe(p)?!0:void 0});let h=ne.initialize(T,b);if(g.routeConfiguration===Vr&&Pt.value?.notFoundHandler!==void 0){let P=this.#n.lookupByPathOnly(m);h.pathOnlyMatches=P.map(O=>O.routeConfiguration).filter(O=>O instanceof Ve)}try{if(B.addLogger(T,d),w.instance.build.COMPATIBILITY_FLAGS.doNotRunHooksOnSystemRoutes?!Qe(p):!p.pathname.startsWith("/__zuplo")){let f=await Wi(b,T);if(f instanceof Response)return f;{let R=ne.getContextExtensions(T);b=f,R.latestRequest=b}}Qe(p)||l.debug(`Request received '${p.pathname}'`,{method:u.method,url:p.pathname,hostname:p.hostname,route:g.routeConfiguration.path});let P=g.executableHandler;xl(P,g,u),Ie("Gateway.handleRequest - call user handler");let O=await P(b,T);if(Ie("Gateway.handleRequest - user handler"),!(O instanceof Response))throw new A(`Invalid Response type from the request handler: ${typeof O}`);if(O.bodyUsed)throw new A("The response object has already been used. Return a new response instead.");let H;if(O.headers.get(qe)===null&&!O.webSocket){let f=new Headers(O.headers);f.set(qe,o),H=new Response(O.body,{status:O.status,statusText:O.statusText,headers:f,cf:O.cf})}else H=O;return H}catch(P){return Ie("Gateway - error executing handler",P),P instanceof A?(l.error(P),d.warn(P)):d.error(P),await this.#i(b,T,P)}}};function xl(t,e,n){if(Ie("Gateway.checkHandler"),!t)throw typeof e.routeConfiguration>"u"?new y(`Invalid state - no routeConfiguration for '${n.method}:${n.url}`):new y(`Invalid state. No handler for request '${n.method}':'${e.routeConfiguration.path}'`)}i(xl,"checkHandler");var xs=i(async(t,e,n)=>{let r=te.instance.routeData.policies,o=Tt([t],r);if(o.length===0)throw new A(`Invalid 'invokeInboundPolicy call' - no policy '${t}' found.`);return o[0].handler(e,n)},"invokeInboundPolicy");var Pn=class{static{i(this,"HeaderIncomingRequestProperties")}#e;constructor(e){this.#e=e}get asn(){try{let e=this.#e.get(Rr);if(typeof e=="string")return parseInt(e)}catch{}}get asOrganization(){return this.#e.get(Pr)??void 0}get city(){return this.#e.get(fr)??this.#e.get(hi)??void 0}get continent(){return this.#e.get(hr)??this.#e.get(yi)??void 0}get country(){return this.#e.get(yr)??this.#e.get(bi)??void 0}get latitude(){return this.#e.get(wr)??this.#e.get(Ri)??void 0}get longitude(){return this.#e.get(br)??this.#e.get(wi)??void 0}get colo(){return this.#e.get(Er)??void 0}get postalCode(){return this.#e.get(gi)??this.#e.get(Ir)??void 0}get metroCode(){return this.#e.get(mi)??this.#e.get(Tr)??void 0}get region(){return this.#e.get(di)??this.#e.get(xr)??void 0}get regionCode(){return this.#e.get(pi)??this.#e.get(vr)??void 0}get timezone(){return this.#e.get(fi)??this.#e.get(Or)??void 0}toJSON(){return{asn:this.asn,asOrganization:this.asOrganization,city:this.city,continent:this.continent,country:this.country,latitude:this.latitude,longitude:this.longitude,colo:this.colo,postalCode:this.postalCode,metroCode:this.metroCode,region:this.region,regionCode:this.regionCode,timezone:this.timezone}}},Xe=class extends Event{static{i(this,"ResponseSendingEvent")}constructor(e,n){super("responseSending"),this.request=e,this.mutableResponse=n}request;mutableResponse},et=class extends Event{static{i(this,"ResponseSentEvent")}constructor(e,n){super("responseSent"),this.request=e,this.response=n}request;response},ne=class t{static{i(this,"ZuploContextExtensions")}static#e=new WeakMap;static initialize(e,n){if(!t.#e.has(e)){let r=new t(n);return t.#e.set(e,r),r}throw new Error(`ZuploContextExtensions already initialized for context with requestId '${e.requestId}'`)}static getContextExtensions(e){let n=t.#e.get(e);if(!n)throw new A(`Invalid state, could not get ZuploContext extensions for context with requestId '${e.requestId}'`);return n}latestRequest;pathOnlyMatches;#t;#n;constructor(e){this.latestRequest=e,this.#t=[],this.#n=[]}addResponseSendingHook(e){this.#n.push(e)}addResponseSendingFinalHook(e){this.#t.push(e)}onResponseSendingFinal=async(e,n,r)=>{for(let o of this.#t)await o(e,n,r)};onResponseSending=async(e,n,r)=>{let o=e;for(let s of this.#n)o=await s(e,n,r);return o}},En=class extends EventTarget{static{i(this,"SystemZuploContext")}constructor({logger:e,route:n,requestId:r,event:o,custom:s,incomingRequestProperties:a}){super(),this.log=Object.freeze(e),this.route=n,this.requestId=r,this.custom=s,this.incomingRequestProperties=a,this.#e=o,this.invokeInboundPolicy=(u,c)=>xs(u,c,this),this.waitUntil=u=>{this.#e.waitUntil(u)},this.addResponseSendingHook=u=>{ne.getContextExtensions(this).addResponseSendingHook(u)},this.addResponseSendingFinalHook=u=>{ne.getContextExtensions(this).addResponseSendingFinalHook(u)},Object.freeze(this)}#e;requestId;log;route;custom;incomingRequestProperties;invokeInboundPolicy;waitUntil;addResponseSendingHook;addResponseSendingFinalHook;addEventListener(e,n,r){let o=i(s=>{try{typeof n=="function"?n(s):n.handleEvent(s)}catch(a){throw this.log.error(`Error invoking event ${e}. See following logs for details.`),a}},"wrapped");super.addEventListener(e,o,r)}};var me=class t{static{i(this,"ContextData")}static#e;#t;constructor(e){this.#t=e}set(e,n){t.set(e,this.#t,n)}get(e){return t.get(e,this.#t)}static set(e,n,r){t.#e||(t.#e=new WeakMap);let o=t.#e.get(e);o||(o=new Map),o.set(n,r),t.#e.set(e,o)}static get(e,n){return t.#e||(t.#e=new WeakMap),t.#e.get(e)?.get(n)}};var vl=["ZUPLO_USER_LOGGER_DATA_DOG_API_KEY","ZUPLO_USER_LOGGER_DATA_DOG_URL","ZUPLO_LOG_LEVEL","ZUPLO_HANDLER_WRITE_LOG_LEVEL"];function Ol(t){return t.startsWith("__ZUPLO")||t.startsWith("ZUPLO_")?!vl.includes(t)&&!t.startsWith("ZUPLO_PUBLIC_"):!1}i(Ol,"isRestrictedEnvVariableName");function Sl(t){return!!t.startsWith("ZUPLO_")}i(Sl,"isZuploReadableEnvVariableName");var oe=new Proxy({},{get(t,e){if(!(Ol(String(e))&&!Sl(String(e))))return w.instance.runtime[String(e)]}});var vs=require("node:async_hooks");var Os={request:new vs.AsyncLocalStorage};var Cl="Error initializing gateway. Check your configuration for errors or contact support.",Al="Error initializing gateway. Check your 'zuplo.runtime.ts' for errors or contact support.",In=class{constructor(e,n,r,o,s,a){this.routeLoader=e;this.buildEnvironment=n;this.runtimeSettings=r;this.serviceProvider=o;this.schemaValidations=s;this.runtimeInit=a}static{i(this,"Handler")}requestHandler=async(e,n,r)=>{let o=e.headers.get(qe)??e.headers.get(ci)??crypto.randomUUID(),s=e.headers.get($e),a={requestId:o,rayId:s};return Os.request.run(a,async()=>{w.initialize({build:this.buildEnvironment,runtime:n});try{await Yi(this.runtimeInit)}catch(c){this.handleError(c,Al,e)}return Vi(i(async(c,l)=>{let d;try{d=await te.initialize(this.routeLoader,this.runtimeSettings,this.serviceProvider,this.schemaValidations)}catch(p){return this.handleError(p,Cl,c)}return d.handleRequest(c,a,l)},"innerHandler"))(e,r)})};handleError(e,n,r){console.error("Error initializing gateway.",e),e instanceof y&&(n=e.message);let o={status:500,title:"Gateway Initialization Error",type:"https://httpproblems.com/http-status/500",detail:n,instance:r.url,trace:{timestamp:Date.now(),rayId:r.headers.get("cf-ray")??void 0,buildId:this.buildEnvironment.BUILD_ID},message:w.instance.isWorkingCopy?e.message:void 0};return new Response(JSON.stringify(o,null,2),{status:500,headers:{"content-type":"application/json"}})}};var Ds=Ce(Le());function _l(t){for(var e=[],n=0;n<t.length;){var r=t[n];if(r==="*"||r==="+"||r==="?"){e.push({type:"MODIFIER",index:n,value:t[n++]});continue}if(r==="\\"){e.push({type:"ESCAPED_CHAR",index:n++,value:t[n++]});continue}if(r==="{"){e.push({type:"OPEN",index:n,value:t[n++]});continue}if(r==="}"){e.push({type:"CLOSE",index:n,value:t[n++]});continue}if(r===":"){for(var o="",s=n+1;s<t.length;){var a=t.charCodeAt(s);if(a>=48&&a<=57||a>=65&&a<=90||a>=97&&a<=122||a===95){o+=t[s++];continue}break}if(!o)throw new TypeError("Missing parameter name at ".concat(n));e.push({type:"NAME",index:n,value:o}),n=s;continue}if(r==="("){var u=1,c="",s=n+1;if(t[s]==="?")throw new TypeError('Pattern cannot start with "?" at '.concat(s));for(;s<t.length;){if(t[s]==="\\"){c+=t[s++]+t[s++];continue}if(t[s]===")"){if(u--,u===0){s++;break}}else if(t[s]==="("&&(u++,t[s+1]!=="?"))throw new TypeError("Capturing groups are not allowed at ".concat(s));c+=t[s++]}if(u)throw new TypeError("Unbalanced pattern at ".concat(n));if(!c)throw new TypeError("Missing pattern at ".concat(n));e.push({type:"PATTERN",index:n,value:c}),n=s;continue}e.push({type:"CHAR",index:n,value:t[n++]})}return e.push({type:"END",index:n,value:""}),e}i(_l,"lexer");function po(t,e){e===void 0&&(e={});for(var n=_l(t),r=e.prefixes,o=r===void 0?"./":r,s="[^".concat(Nl(e.delimiter||"/#?"),"]+?"),a=[],u=0,c=0,l="",d=i(function(f){if(c<n.length&&n[c].type===f)return n[c++].value},"tryConsume"),p=i(function(f){var R=d(f);if(R!==void 0)return R;var S=n[c],M=S.type,C=S.index;throw new TypeError("Unexpected ".concat(M," at ").concat(C,", expected ").concat(f))},"mustConsume"),m=i(function(){for(var f="",R;R=d("CHAR")||d("ESCAPED_CHAR");)f+=R;return f},"consumeText");c<n.length;){var g=d("CHAR"),I=d("NAME"),b=d("PATTERN");if(I||b){var T=g||"";o.indexOf(T)===-1&&(l+=T,T=""),l&&(a.push(l),l=""),a.push({name:I||u++,prefix:T,suffix:"",pattern:b||s,modifier:d("MODIFIER")||""});continue}var _=g||d("ESCAPED_CHAR");if(_){l+=_;continue}l&&(a.push(l),l="");var h=d("OPEN");if(h){var T=m(),P=d("NAME")||"",O=d("PATTERN")||"",H=m();p("CLOSE"),a.push({name:P||(O?u++:""),pattern:P&&!O?s:O,prefix:T,suffix:H,modifier:d("MODIFIER")||""});continue}p("END")}return a}i(po,"parse");function Ss(t,e){return Ll(po(t,e),e)}i(Ss,"compile");function Ll(t,e){e===void 0&&(e={});var n=kl(e),r=e.encode,o=r===void 0?function(c){return c}:r,s=e.validate,a=s===void 0?!0:s,u=t.map(function(c){if(typeof c=="object")return new RegExp("^(?:".concat(c.pattern,")$"),n)});return function(c){for(var l="",d=0;d<t.length;d++){var p=t[d];if(typeof p=="string"){l+=p;continue}var m=c?c[p.name]:void 0,g=p.modifier==="?"||p.modifier==="*",I=p.modifier==="*"||p.modifier==="+";if(Array.isArray(m)){if(!I)throw new TypeError('Expected "'.concat(p.name,'" to not repeat, but got an array'));if(m.length===0){if(g)continue;throw new TypeError('Expected "'.concat(p.name,'" to not be empty'))}for(var b=0;b<m.length;b++){var T=o(m[b],p);if(a&&!u[d].test(T))throw new TypeError('Expected all "'.concat(p.name,'" to match "').concat(p.pattern,'", but got "').concat(T,'"'));l+=p.prefix+T+p.suffix}continue}if(typeof m=="string"||typeof m=="number"){var T=o(String(m),p);if(a&&!u[d].test(T))throw new TypeError('Expected "'.concat(p.name,'" to match "').concat(p.pattern,'", but got "').concat(T,'"'));l+=p.prefix+T+p.suffix;continue}if(!g){var _=I?"an array":"a string";throw new TypeError('Expected "'.concat(p.name,'" to be ').concat(_))}}return l}}i(Ll,"tokensToFunction");function Nl(t){return t.replace(/([.+*?=^!:${}()[\]|/\\])/g,"\\$1")}i(Nl,"escapeString");function kl(t){return t&&t.sensitive?"":"i"}i(kl,"flags");var Ls=Ce(Le());var Ml=(0,Ls.debug)("zuplo:runtime"),go=new TextEncoder,Cs={appstream2:"appstream",cloudhsmv2:"cloudhsm",email:"ses",marketplace:"aws-marketplace",mobile:"AWSMobileHubService",pinpoint:"mobiletargeting",queue:"sqs","git-codecommit":"codecommit","mturk-requester-sandbox":"mturk-requester","personalize-runtime":"personalize"},Dl=["authorization","content-type","content-length","user-agent","presigned-expires","expect","x-amzn-trace-id","range","connection"],at=class{static{i(this,"AwsClient")}accessKeyId;secretAccessKey;sessionToken;service;region;cache;retries;initRetryMs;constructor({accessKeyId:e,secretAccessKey:n,sessionToken:r,service:o,region:s,cache:a,retries:u,initRetryMs:c}){if(e==null)throw new TypeError("accessKeyId is a required option");if(n==null)throw new TypeError("secretAccessKey is a required option");this.accessKeyId=e,this.secretAccessKey=n,this.sessionToken=r,this.service=o,this.region=s,this.cache=a||new Map,this.retries=u??0,this.initRetryMs=c||50}async sign(e,n){let r=new fo(Object.assign({url:e},n,this,n&&n.aws)),o=Object.assign({},n,await r.sign());return delete o.aws,{url:o.url.toString(),request:o}}async fetch(e,n){Ml("AWS fetch",e);for(let r=0;r<=this.retries;r++){let{url:o,request:s}=await this.sign(e,n),a=fetch(o,s);if(r===this.retries)return a;let u=await a;if(u.status<500&&u.status!==429)return u;await new Promise(c=>setTimeout(c,Math.random()*this.initRetryMs*Math.pow(2,r)))}throw new y("An unknown error occurred, ensure retries is not negative")}},fo=class{static{i(this,"AwsV4Signer")}method;url;headers;body;accessKeyId;secretAccessKey;sessionToken;service;region;cache;datetime;signQuery;appendSessionToken;signableHeaders;signedHeaders;canonicalHeaders;credentialString;encodedPath;encodedSearch;constructor({method:e,url:n,headers:r,body:o,accessKeyId:s,secretAccessKey:a,sessionToken:u,service:c,region:l,cache:d,datetime:p,signQuery:m,appendSessionToken:g,allHeaders:I,singleEncode:b}){if(n==null)throw new TypeError("url is a required option");if(s==null)throw new TypeError("accessKeyId is a required option");if(a==null)throw new TypeError("secretAccessKey is a required option");this.method=e||(o?"POST":"GET"),this.url=new URL(n),this.headers=new Headers(r||{}),this.body=o,this.accessKeyId=s,this.secretAccessKey=a,this.sessionToken=u;let T,_;(!c||!l)&&([T,_]=Hl(this.url,this.headers)),this.service=c||T||"",this.region=l||_||"us-east-1",this.cache=d||new Map,this.datetime=p||new Date().toISOString().replace(/[:-]|\.\d{3}/g,""),this.signQuery=m,this.appendSessionToken=g||this.service==="iotdevicegateway",this.headers.delete("Host");let h=this.signQuery?this.url.searchParams:this.headers;if(this.service==="s3"&&!this.headers.has("X-Amz-Content-Sha256")&&this.headers.set("X-Amz-Content-Sha256","UNSIGNED-PAYLOAD"),h.set("X-Amz-Date",this.datetime),this.sessionToken&&!this.appendSessionToken&&h.set("X-Amz-Security-Token",this.sessionToken),this.signableHeaders=["host",...this.headers.keys()].filter(O=>I||!Dl.includes(O)).sort(),this.signedHeaders=this.signableHeaders.join(";"),this.canonicalHeaders=this.signableHeaders.map(O=>O+":"+(O==="host"?this.url.host:(this.headers.get(O)||"").replace(/\s+/g," "))).join(`
|
|
63
|
+
`),this.credentialString=[this.datetime.slice(0,8),this.region,this.service,"aws4_request"].join("/"),this.signQuery&&(this.service==="s3"&&!h.has("X-Amz-Expires")&&h.set("X-Amz-Expires","86400"),h.set("X-Amz-Algorithm","AWS4-HMAC-SHA256"),h.set("X-Amz-Credential",this.accessKeyId+"/"+this.credentialString),h.set("X-Amz-SignedHeaders",this.signedHeaders)),this.service==="s3")try{this.encodedPath=decodeURIComponent(this.url.pathname.replace(/\+/g," "))}catch{this.encodedPath=this.url.pathname}else this.encodedPath=this.url.pathname.replace(/\/+/g,"/");b||(this.encodedPath=encodeURIComponent(this.encodedPath).replace(/%2F/g,"/")),this.encodedPath=_s(this.encodedPath);let P=new Set;this.encodedSearch=[...this.url.searchParams].filter(([O])=>{if(!O)return!1;if(this.service==="s3"){if(P.has(O))return!1;P.add(O)}return!0}).map(O=>O.map(H=>_s(encodeURIComponent(H)))).sort(([O,H],[f,R])=>O<f?-1:O>f?1:H<R?-1:H>R?1:0).map(O=>O.join("=")).join("&")}async sign(){return this.signQuery?(this.url.searchParams.set("X-Amz-Signature",await this.signature()),this.sessionToken&&this.appendSessionToken&&this.url.searchParams.set("X-Amz-Security-Token",this.sessionToken)):this.headers.set("Authorization",await this.authHeader()),{method:this.method,url:this.url,headers:this.headers,body:this.body}}async authHeader(){return["AWS4-HMAC-SHA256 Credential="+this.accessKeyId+"/"+this.credentialString,"SignedHeaders="+this.signedHeaders,"Signature="+await this.signature()].join(", ")}async signature(){let e=this.datetime.slice(0,8),n=[this.secretAccessKey,e,this.region,this.service].join(),r=this.cache.get(n);if(!r){let o=await _t("AWS4"+this.secretAccessKey,e),s=await _t(o,this.region),a=await _t(s,this.service);r=await _t(a,"aws4_request"),this.cache.set(n,r)}return mo(await _t(r,await this.stringToSign()))}async stringToSign(){return["AWS4-HMAC-SHA256",this.datetime,this.credentialString,mo(await As(await this.canonicalString()))].join(`
|
|
64
64
|
`)}async canonicalString(){return[this.method.toUpperCase(),this.encodedPath,this.encodedSearch,this.canonicalHeaders+`
|
|
65
65
|
`,this.signedHeaders,await this.hexBodyHash()].join(`
|
|
66
|
-
`)}async hexBodyHash(){let e=this.headers.get("X-Amz-Content-Sha256");if(e==null){if(this.body&&typeof this.body!="string"&&!("byteLength"in this.body))throw new A("body must be a string, ArrayBuffer or ArrayBufferView, unless you include the X-Amz-Content-Sha256 header");e=mo(await Hs(this.body||""))}return e}};async function Lt(t,e){let n=await crypto.subtle.importKey("raw",typeof t=="string"?go.encode(t):t,{name:"HMAC",hash:{name:"SHA-256"}},!1,["sign"]);return crypto.subtle.sign("HMAC",n,go.encode(e))}i(Lt,"hmac");async function Hs(t){return crypto.subtle.digest("SHA-256",typeof t=="string"?go.encode(t):t)}i(Hs,"hash");function mo(t){return Array.prototype.map.call(new Uint8Array(t),e=>("0"+e.toString(16)).slice(-2)).join("")}i(mo,"buf2hex");function Us(t){return t.replace(/[!'()*]/g,e=>"%"+e.charCodeAt(0).toString(16).toUpperCase())}i(Us,"encodeRfc3986");function Hl(t,e){let{hostname:n,pathname:r}=t,o=n.replace("dualstack.","").match(/([^.]+)\.(?:([^.]*)\.)?amazonaws\.com(?:\.cn)?$/),[s,a]=(o||["",""]).slice(1,3);if(a==="us-gov")a="us-gov-west-1";else if(a==="s3"||a==="s3-accelerate")a="us-east-1",s="s3";else if(s==="iot")n.startsWith("iot.")?s="execute-api":n.startsWith("data.jobs.iot.")?s="iot-jobs-data":s=r==="/mqtt"?"iotdevicegateway":"iotdata";else if(s==="autoscaling"){let u=(e.get("X-Amz-Target")||"").split(".")[0];u==="AnyScaleFrontendService"?s="application-autoscaling":u==="AnyScaleScalingPlannerFrontendService"&&(s="autoscaling-plans")}else a==null&&s.startsWith("s3-")?(a=s.slice(3).replace(/^fips-|^external-1/,""),s="s3"):s.endsWith("-fips")?s=s.slice(0,-5):a&&/-\d$/.test(s)&&!/-\d$/.test(a)&&([s,a]=[a,s]);return s in Ds?[Ds[s],a]:[s,a]}i(Hl,"guessServiceRegion");function Ul(t){return t>64&&t<91?t-65:t>96&&t<123?t-71:t>47&&t<58?t+4:t===43?62:t===47?63:0}i(Ul,"b64ToUint6");function qs(t,e){let n=t.replace(/[^A-Za-z0-9+/]/g,""),r=n.length,o=e?Math.ceil((r*3+1>>2)/e)*e:r*3+1>>2,s=new Uint8Array(o),a,u,c=0,l=0;for(let d=0;d<r;d++)if(u=d&3,c|=Ul(n.charCodeAt(d))<<6*(3-u),u===3||r-d===1){for(a=0;a<3&&l<o;)s[l]=c>>>(16>>>a&24)&255,a++,l++;c=0}return s}i(qs,"base64Decode");function xn(t){return t<26?t+65:t<52?t+71:t<62?t-4:t===62?43:t===63?47:65}i(xn,"uint6ToB64");function $s(t){let e=2,n="",r=t.length,o=0;for(let s=0;s<r;s++)e=s%3,o|=t[s]<<(16>>>e&24),(e===2||t.length-s===1)&&(n+=String.fromCodePoint(xn(o>>>18&63),xn(o>>>12&63),xn(o>>>6&63),xn(o&63)),o=0);return n.substring(0,n.length-2+e)+(e===2?"":e===1?"=":"==")}i($s,"base64Encode");function at(t){let e=t.toString();return`${e.length===1?"0":""}${e}`}i(at,"numberToString");function Zl(t){let e=t.getTimezoneOffset(),n=Math.abs(e),r=e>0?"-":"+",o=at(Math.floor(n/60)),s=at(n%60);return`${r}${o}${s}`}i(Zl,"getCLFOffset");function ho(t=new Date){if(!(t instanceof Date))throw new Error("clf-date: invalid parameter");let e=["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],n=at(t.getDate()),r=e[t.getMonth()],o=t.getFullYear(),s=at(t.getHours()),a=at(t.getMinutes()),u=at(t.getSeconds()),c=Zl(t);return`${n}/${r}/${o}:${s}:${a}:${u} ${c}`}i(ho,"toCLFDate");var Fs=(0,Bs.debug)("zuplo:runtime"),ql="X-Amzn-Trace-Id",$l="x-amzn-errortype",zs=[],Fl=i(async(t,e,n)=>{let r=n;for await(let o of zs)r=await o(t,e,n);return r},"onSendingAwsLambdaEvent"),ce=class extends A{static{i(this,"AwsLambdaError")}traceId;errorType;constructor(e,n){super(`Failed to invoke AWS Lambda function. ${e}`),this.traceId=n.get(ql)??void 0,this.errorType=n.get($l)??void 0}},js={addSendingAwsLambdaEventHook:t=>{zs.push(t)}};async function Vs(t,e){let{accessKeyId:n,secretAccessKey:r,region:o,functionName:s,useLambdaProxyIntegration:a=!0,useAwsResourcePathStyle:u=!1,binaryMediaTypes:c}=e.route.handler.options;if(!n)throw new y("awsAccessKeyId is not set in the handler options");if(!r)throw new y("secretAccessKey is not set in the handler options");if(!o)throw new y("region is not set in the handler options");if(!s)throw new y("functionName is not set in the handler options");let l=new st({accessKeyId:n,secretAccessKey:r}),d=`https://lambda.${o}.amazonaws.com/2015-03-31/functions/${s}/invocations`;if(Fs(`AWS Lambda URL: ${d}`),!a)return l.fetch(d,{body:await t.arrayBuffer()});let[p,m]=await Vl(t,{binaryMediaTypes:c}),{options:g}=e.route.handler,I;g&&typeof g=="object"&&"payloadFormatVersion"in g&&g.payloadFormatVersion==="2.0"?I=jl(t,e):I=await zl(t,e,{useAwsResourcePathStyle:u}),Fs("Calling onSendingAwsLambdaEvent hook");let b=await Fl(t,e,I);b.body=p,b.isBase64Encoded=m;let x=await l.fetch(d,{body:JSON.stringify(b)});try{return Bl(x)}catch(L){if(L instanceof ce){let f=g&&typeof g=="object"&&"returnAmazonTraceIdHeader"in g&&g.returnAmazonTraceIdHeader&&L.traceId?{AMZN_TRACE_ID_HEADER:L.traceId}:void 0;return T.internalServerError(t,e,void 0,f)}throw L}}i(Vs,"awsLambdaHandler");async function Bl(t){let e;try{e=await t.json()}catch{throw new ce("Lambda response did not contain valid JSON",t.headers)}if(t.status!==200)throw e&&typeof e=="object"&&"message"in e&&typeof e.message=="string"?new ce(e.message,t.headers):new ce(`Status: ${t.statusText}`,t.headers);if(e&&typeof e=="object"&&"errorMessage"in e&&typeof e.errorMessage=="string")throw new ce(e.errorMessage,t.headers);if(!e||typeof e!="object"||!("statusCode"in e)||typeof e.statusCode!="number")return new Response(JSON.stringify(e),{status:t.status,headers:{"content-type":"application/json"}});let n=new Headers;if("headers"in e&&e.headers){if(typeof e.headers!="object")throw new ce(`Response headers must be an object. Received ${typeof e.headers}`,t.headers);for(let[o,s]of Object.entries(e.headers))n.set(o,s)}if("cookies"in e&&e.cookies){if(!Array.isArray(e.cookies))throw new ce(`Response cookies must be an array. Received ${typeof e.cookies}`,t.headers);n.set("cookie",e.cookies.join(";"))}let r;if("isBase64Encoded"in e&&typeof e.isBase64Encoded!="boolean")throw new ce(`Response property isBase64Encoded must be a boolean. Received ${typeof e.isBase64Encoded}`,t.headers);if("isBase64Encoded"in e&&e.isBase64Encoded===!0){if(!("body"in e))throw new ce("Response was set to base64 encoded but no body was set",t.headers);if(typeof e.body!="string")throw new ce("Response was set to base64 encoded but body was not a string",t.headers);r=qs(e.body)}else"body"in e&&typeof e.body=="string"?r=e.statusCode===204&&e.body===""?null:e.body:"body"in e&&e.body!==null&&e.body!==void 0?r=JSON.stringify(e.body):r=null;if(r!==null&&"bodyEncoding"in e){if(typeof e.bodyEncoding!="string"||!(e.bodyEncoding==="gzip"||e.bodyEncoding==="deflate"))throw new ce(`Response property bodyEncoding can only be set to 'gzip' or 'deflate'. Received ${e.bodyEncoding}`,t.headers);let o=new Blob([r]).stream().pipeThrough(new DecompressionStream(e.bodyEncoding));r=await new Response(o).arrayBuffer()}return new Response(r,{headers:n,status:e.statusCode})}i(Bl,"getResponse");async function zl(t,e,{useAwsResourcePathStyle:n}){let r={},o={};t.headers.forEach((l,d)=>{r[d]=l,o[d]=[l]});let s=t.query,a={};for(let[l,d]of Object.entries(s))a[l]=[d];let u=new URL(t.url);return{version:"1.0",resource:u.pathname,path:u.pathname,httpMethod:t.method,headers:r,multiValueHeaders:o,queryStringParameters:s,multiValueQueryStringParameters:a,requestContext:{accountId:null,apiId:null,authorizer:{claims:{},scopes:[]},domainName:u.hostname,domainPrefix:null,extendedRequestId:e.requestId,httpMethod:t.method,identity:{accessKey:null,accountId:null,caller:null,cognitoAuthenticationProvider:null,cognitoAuthenticationType:null,cognitoIdentityId:null,cognitoIdentityPoolId:null,principalOrgId:null,sourceIp:t.headers.get("CF-Connecting-IP"),user:null,userAgent:t.headers.get("user-agent"),userArn:null,clientCert:{clientCertPem:null,subjectDN:null,issuerDN:null,serialNumber:null,validity:{notBefore:null,notAfter:null}}},path:u.pathname,protocol:"HTTP/1.1",requestId:e.requestId,requestTime:ho(),requestTimeEpoch:new Date().valueOf(),resourceId:e.route.operationId??null,resourcePath:Wl(e.route.path,n),stage:null},pathParameters:t.params,stageVariables:null}}i(zl,"buildEventVersion1");function jl(t,e){let n={};t.headers.forEach((s,a)=>{n[a]=s});let r=new URL(t.url);return{version:"2.0",routeKey:null,rawPath:r.pathname,rawQueryString:r.search,cookies:[],headers:n,queryStringParameters:t.query,requestContext:{accountId:null,apiId:null,authentication:{clientCert:{clientCertPem:null,subjectDN:null,issuerDN:null,serialNumber:null,validity:{notBefore:null,notAfter:null}}},authorizer:{jwt:{claims:{},scopes:[]}},domainName:r.hostname,domainPrefix:null,http:{method:t.method,path:r.pathname,protocol:"HTTP/1.1",sourceIp:t.headers.get("CF-Connecting-IP"),userAgent:t.headers.get("user-agent")},requestId:e.requestId,routeKey:null,stage:null,time:ho(),timeEpoch:new Date().valueOf()},pathParameters:t.params,stageVariables:null}}i(jl,"buildEventVersion2");async function Vl(t,{binaryMediaTypes:e}){let n,r=!1,o=t.headers.get("content-type");if(t.method==="GET"||t.method==="HEAD")n=null;else if(e&&o&&Gl(e,o)){let s=await t.arrayBuffer();n=$s(new Uint8Array(s)),r=!0}else n=await t.clone().text();return[n,r]}i(Vl,"getBodyResult");function Gl(t,e){let n=e.split(";")[0].trim().toLowerCase();return t.findIndex(r=>r==="*/*"?!0:r.toLowerCase()===n)>-1}i(Gl,"matchesContentType");function Wl(t,e=!1){if(!e)return t;let n=po(t),r=Ms(t),o={};return n.forEach(s=>{typeof s=="string"?o[s]=`{${s}}`:o[s.name]=`{${s.name}}`}),r(o)}i(Wl,"getResourcePath");var Kl=[502,503,504];async function ut(t,e){if(Kl.includes(t.status)){let n=F.getLogger(e),o=await t.clone().text(),s={};for(let[a,u]of t.headers)s[a]=u;n.warn(`BadGatewayResponse ${t.status}`,{status:t.status,statusText:t.statusText,body:o,headers:s})}}i(ut,"logBadGatewayResponses");var yo;function He(t){if(yo===void 0){let n=w.instance.runtime.ZUPLO_HANDLER_WRITE_LOG_LEVEL;["debug","info","warn","error"].includes(n??"")||(n="debug"),yo=n}return t.log[yo]}i(He,"getHandlerUserLogFunction");async function Gs(t,e){let n=w.instance.build.BUILD_ID,{buildAssetsUrl:r}=w.instance,o=e.route.handler.options,{openApiFilePath:s}=o;if(!s)throw new y("Open API Spec Handler must have 'openApiFilePath' specified");let a=Jl(s);if(!a.isValid)throw new y(a.error);let u;w.instance.isLocalDevelopment?u=`${r}/${s.substring(1)}`:u=`${r}/${n}${s.substring(1)}`;let c=await fetch(u,{method:t.method,body:t.body,headers:t.headers});if(c.status!==200)return T.notFound(t,e,{detail:"OpenAPI file could not be found."});let l=new Response(c.body,{headers:{"content-type":"application/json"},status:c.status,statusText:c.statusText});return ut(l,e),l}i(Gs,"openApiSpecHandler");var Jl=i(t=>t.startsWith("./")?t.startsWith("./config")?t.endsWith(".oas.json")?{isValid:!0}:{isValid:!1,error:"'openApiFilePath' must point to a file ending in '.oas.json'"}:{isValid:!1,error:"'openApiFilePath' must point to a file in your /config directory"}:{isValid:!1,error:"'openApiFilePath' must start with './'"},"validateOpenApiPath");async function Ws(t,e){let n=e.route.handler.options;if(!n.location)throw new y("Redirect Handler must have 'location' specified");let r=n.status??302;return new Response(null,{status:r,headers:{location:n.location}})}i(Ws,"redirectHandler");function Yl(t,e){let n=t.endsWith("/"),r=e.startsWith("/");return n&&r?`${t.substring(0,t.length-1)}${e}`:!n&&!r?`${t}/${e}`:`${t}${e}`}i(Yl,"join");async function Ks(t,e){let n=He(e),r=e.route.handler.options,o=r.forwardSearch!==!1;if(!r.baseUrl)throw new Error("URL Forward Handler must have 'baseUrl' specified");if(!r||typeof r.__rewriteFunction!="function")throw new y("Invalid options for this route");let s={incomingRequestProperties:e.incomingRequestProperties,requestId:e.requestId,route:e.route,custom:e.custom},a=new URL(t.url),u=r.__rewriteFunction(t,s),c=Yl(u,a.pathname),l=o?`${c}${a.search}`:c.toString(),d=Date.now();n(`URL Forwarding to '${l}'`);let p=await fetch(l,{method:t.method,body:t.body,headers:t.headers}),m=Date.now()-d;return n(`URL Forward received response ${p.status} - ${p.statusText} in ${m}ms`),ut(p,e),p}i(Ks,"urlForwardHandler");var Ql=i((t,e)=>{let n=new URL(t),r=new URL(e);for(let[o,s]of r.searchParams.entries())n.searchParams.append(o,s);return n.toString()},"addQuery");async function Js(t,e){let n=He(e),r=e.route.handler.options,o=r.forwardSearch!==!1,s=r.followRedirects??!1;if(!r||typeof r.__rewriteFunction!="function")throw new y("Invalid options for this route");let a={incomingRequestProperties:e.incomingRequestProperties,requestId:e.requestId,route:e.route,custom:e.custom},u=r.__rewriteFunction(t,a),c=o?Ql(u,t.url):u,l=Date.now();n(`URL Rewriting to '${c}'`);let d=await fetch(c.toString(),{method:t.method,body:t.body,headers:t.headers,redirect:s?"follow":"manual"}),p=Date.now()-l;return n(`URL Rewrite received response ${d.status} - ${d.statusText} in ${p}ms`),ut(d,e),d}i(Js,"urlRewriteHandler");async function Ys(t,e){let n=w.instance,r=e.route.handler.options,o=He(e);if(!r||!r.rewritePattern)throw new y("WebSocket Handler must have option 'rewritePattern' specified");let s=t.headers.get("Upgrade");if(!s||s!=="websocket")return T.badRequest(t,e,{detail:"Request must include header 'Upgrade: websocket'"});if(!r||typeof r.__rewriteFunction!="function")throw new y("Invalid options for this route");let a={incomingRequestProperties:e.incomingRequestProperties,requestId:e.requestId,route:e.route,custom:e.custom},u=r.__rewriteFunction(t,a),c=Date.now();if(o(`Attempting WebSocket connection to '${u}'`),n.isDeno){let p=new Headers(t.headers);if(u.startsWith("service:")){let g=await Os(u),I=new URL(u);u=new URL(`${g.serviceBaseUrl}${I.pathname}${I.search}`).toString();for(let x in g.tunnelHeaders)p.set(x,g.tunnelHeaders[x])}u=u.replace(/^(http)/,"ws");try{if(p.get("Authorization")){let g=p.get("Authorization")?.replace("Bearer ","");u+=`?apiKey=${g}`}}catch{}let m=JSON.stringify({url:u});return new Response(m,{headers:p})}u=u.replace(/^(ws)/,"http");let l=await fetch(u,{method:t.method,headers:t.headers,body:t.body});if(l.status!==101||!l.webSocket){let p=await l.text(),m=`WebSocket connection error - ${l.status}: ${l.statusText}, content: '${p}'`;throw new Error(m)}let d=Date.now()-c;return o(`WebSocket connected, received response ${l.status} - ${l.statusText} in ${d}ms`),new Response(null,{status:101,webSocket:l.webSocket})}i(Ys,"webSocketHandler");var bo=i((t,e)=>t.map((r,o)=>{let s;if(typeof r.module=="object"&&(s=r.module[r.export]),!s||typeof s!="function"){let a=e==="inbound"?"WebSocketInboundPolicy":"WebSocketOutboundPolicy",u=`policy in position: ${o+1}, export name: ${r.export}`;throw new y(`${a} - Websocket policy must be a valid function (${u})`)}return s}),"getWebSocketPolicyFunctions"),Qs=i(async(t,e,n,r,o,s)=>{let a=t.data;if(s&&s.length>0){let u=[...s];for(;u.length>0;){let c=u.shift();if(!c)return a;if(a=await c(a,n,e,r,o),a===void 0)return}}return a},"webSocketPolicyProcessor");function Xs(t,e,n,r,o){t.addEventListener("close",()=>{e.close()}),t.addEventListener("error",s=>{r.log.error("WebSocket error: ",s),e.send(JSON.stringify(s))}),t.addEventListener("message",s=>{try{let u=i(async c=>{let l=await Qs(c,t,e,n,r,o);l!==void 0&&e.send(l)},"innerPipeline")(s).catch(r.log.error);r.waitUntil(u)}catch(a){r.log.error(a)}})}i(Xs,"wireUpListeners");async function ea(t,e){let n=w.instance,r=e.route.handler.options,o=He(e);if(!r||!r.rewritePattern)throw new y("WebSocket Pipeline Handler must have option 'rewritePattern' specified");let s=t.headers.get("Upgrade");if(!s||s!=="websocket")return T.badRequest(t,e,{detail:"Request must include header 'Upgrade: websocket'"});if(!r||typeof r.__rewriteFunction!="function")throw new y("Invalid options for this route");let a={incomingRequestProperties:e.incomingRequestProperties,requestId:e.requestId,route:e.route,custom:e.custom},u=r.__rewriteFunction(t,a),c=Date.now();if(o(`Attempting WebSocket connection to '${u}'`),n.isDeno)throw new y("Websocket pipeline handler is currently not supported on working-copy environments");u=u.replace(/^(ws)/,"http");let l=await fetch(u,{method:t.method,headers:t.headers,body:t.body});if(l.status!==101||!l.webSocket){let L=await l.text(),f=`WebSocket connection error - ${l.status}: ${l.statusText}, content: '${L}'`;throw new Error(f)}let d=new WebSocketPair,[p,m]=Object.values(d),g=Date.now()-c;o(`WebSocket connected, received response ${l.status} - ${l.statusText} in ${g}ms`);let I=l.webSocket;I.accept(),m.accept();let b=r.policies&&r.policies.inbound?bo(r.policies.inbound,"inbound"):[],x=r.policies&&r.policies.outbound?bo(r.policies.outbound,"outbound"):[];return Xs(m,I,t,e,b),Xs(I,m,t,e,x),new Response(null,{status:101,webSocket:p})}i(ea,"webSocketPipelineHandler");var vn=class extends Q{constructor(n){super();this.options=n}static{i(this,"DynaTraceLoggingPlugin")}getTransport(){return new wo(this.options)}},wo=class{static{i(this,"DynaTraceTransport")}constructor(e){this.#e=e.url,this.#t=e.apiToken,this.#r=w.instance.loggingEnvironmentType,this.#o=w.instance.loggingEnvironmentStage,this.#n=w.instance.deploymentName}#e;#t;#n;#r;#o;log(e,n){e.messages.forEach(r=>{let o={timestamp:new Date().toISOString(),message:Se(ie(r)),severity:e.level,"log.source":e.logSource,requestId:e.requestId,"custom.environment":this.#n,"custom.environmentStage":this.#o,"custom.environmentType":this.#r,"custom.loggingId":e.loggingId,"custom.rayId":e.rayId===null?void 0:e.rayId};this.batcher.enqueue(o)}),n.waitUntil(this.batcher.waitUntilFlushed())}#i=async e=>{e.length!==0&&await fetch(this.#e,{method:"POST",body:JSON.stringify(e),headers:{"content-type":"application/json; charset=utf-8",authorization:`Api-Token ${this.#t}`}})};batcher=new $("dyna-trace-log-transport",10,this.#i)};var Tn=class extends Q{constructor(n){super();this.options=n}static{i(this,"LokiLoggingPlugin")}getTransport(){return new Po(this.options)}},Ro=class{static{i(this,"LokiStream")}constructor(e,n,r,o,s){this.level=e,this.environment=n,this.environmentType=r,this.environmentStage=o,this.requestId=s}job="zuplo";level;environment;environmentType;environmentStage;requestId;equals=e=>this.level===e.level&&this.requestId===e.requestId};function Xl(t,e){return btoa(`${t}:${e}`)}i(Xl,"createBasicDigest");var Po=class{static{i(this,"LokiTransport")}constructor(e){this.#e=e.url,this.#t=Xl(e.username,e.password),this.#r=w.instance.loggingEnvironmentType,this.#o=w.instance.loggingEnvironmentStage,this.#n=w.instance.deploymentName}#e;#t;#n;#r;#o;log(e,n){let r=new Ro(e.level,this.#n,this.#r,this.#o,e.requestId);e.messages.forEach(o=>{let s={stream:r,message:Se(ie(o)),nanoSecondEpoch:`${e.timestamp.getTime()}000000`};this.batcher.enqueue(s)}),n.waitUntil(this.batcher.waitUntilFlushed())}#i=e=>{let n={streams:[]};return e.forEach(r=>{let o=n.streams.find(s=>s.stream.equals(r.stream));o||(o={stream:r.stream,values:[]},n.streams.push(o)),o.values.push([r.nanoSecondEpoch,r.message])}),n};#s=async e=>{if(e.length===0)return;let n=this.#i(e);await fetch(this.#e,{method:"POST",body:JSON.stringify(n),headers:{"content-type":"application/json",authorization:`Basic ${this.#t}`}})};batcher=new $("loki-log-transport",10,this.#s)};var Sn=class extends Q{constructor(n){super();this.options=n}static{i(this,"SumoLogicLoggingPlugin")}getTransport(){return new Eo(this.options)}},Eo=class{static{i(this,"SumoLogicTransport")}constructor(e){this.#e=e.url,this.#o=e.category,this.#i=e.name,this.#n=w.instance.loggingEnvironmentType,this.#r=w.instance.loggingEnvironmentStage,this.#t=w.instance.deploymentName}#e;#t;#n;#r;#o;#i;log(e,n){e.messages.forEach(r=>{let o={timestamp:new Date().toISOString(),message:Se(ie(r)),severity:e.level,source:e.logSource,requestId:e.requestId,environment:this.#t,environmentType:this.#n,environmentStage:this.#r,rayId:e.rayId===null?void 0:e.rayId};this.batcher.enqueue(o)}),n.waitUntil(this.batcher.waitUntilFlushed())}#s=async e=>{if(e.length===0)return;let n=e.map(o=>JSON.stringify(o)).join(`
|
|
67
|
-
`),r=new Headers({"content-type":"application/json; charset=utf-8"});this.#i&&r.set("X-Sumo-Name",this.#i),this.#o&&r.set("X-Sumo-Category",this.#o),await fetch(this.#e,{method:"POST",body:n,headers:r})};batcher=new
|
|
68
|
-
`),r=await fetch(this.#e,{method:"POST",body:n,headers:{"content-type":"text/plain",Authorization:`Api-Token ${this.apiToken}`}});if(!r.ok)throw new Ao(await r.text())}},Ao=class t extends Error{static{i(this,"DynaTraceMetricsError")}constructor(e){super(e),Object.setPrototypeOf(this,t.prototype)}};var
|
|
66
|
+
`)}async hexBodyHash(){let e=this.headers.get("X-Amz-Content-Sha256");if(e==null){if(this.body&&typeof this.body!="string"&&!("byteLength"in this.body))throw new A("body must be a string, ArrayBuffer or ArrayBufferView, unless you include the X-Amz-Content-Sha256 header");e=mo(await As(this.body||""))}return e}};async function _t(t,e){let n=await crypto.subtle.importKey("raw",typeof t=="string"?go.encode(t):t,{name:"HMAC",hash:{name:"SHA-256"}},!1,["sign"]);return crypto.subtle.sign("HMAC",n,go.encode(e))}i(_t,"hmac");async function As(t){return crypto.subtle.digest("SHA-256",typeof t=="string"?go.encode(t):t)}i(As,"hash");function mo(t){return Array.prototype.map.call(new Uint8Array(t),e=>("0"+e.toString(16)).slice(-2)).join("")}i(mo,"buf2hex");function _s(t){return t.replace(/[!'()*]/g,e=>"%"+e.charCodeAt(0).toString(16).toUpperCase())}i(_s,"encodeRfc3986");function Hl(t,e){let{hostname:n,pathname:r}=t,o=n.replace("dualstack.","").match(/([^.]+)\.(?:([^.]*)\.)?amazonaws\.com(?:\.cn)?$/),[s,a]=(o||["",""]).slice(1,3);if(a==="us-gov")a="us-gov-west-1";else if(a==="s3"||a==="s3-accelerate")a="us-east-1",s="s3";else if(s==="iot")n.startsWith("iot.")?s="execute-api":n.startsWith("data.jobs.iot.")?s="iot-jobs-data":s=r==="/mqtt"?"iotdevicegateway":"iotdata";else if(s==="autoscaling"){let u=(e.get("X-Amz-Target")||"").split(".")[0];u==="AnyScaleFrontendService"?s="application-autoscaling":u==="AnyScaleScalingPlannerFrontendService"&&(s="autoscaling-plans")}else a==null&&s.startsWith("s3-")?(a=s.slice(3).replace(/^fips-|^external-1/,""),s="s3"):s.endsWith("-fips")?s=s.slice(0,-5):a&&/-\d$/.test(s)&&!/-\d$/.test(a)&&([s,a]=[a,s]);return s in Cs?[Cs[s],a]:[s,a]}i(Hl,"guessServiceRegion");function Ul(t){return t>64&&t<91?t-65:t>96&&t<123?t-71:t>47&&t<58?t+4:t===43?62:t===47?63:0}i(Ul,"b64ToUint6");function Ns(t,e){let n=t.replace(/[^A-Za-z0-9+/]/g,""),r=n.length,o=e?Math.ceil((r*3+1>>2)/e)*e:r*3+1>>2,s=new Uint8Array(o),a,u,c=0,l=0;for(let d=0;d<r;d++)if(u=d&3,c|=Ul(n.charCodeAt(d))<<6*(3-u),u===3||r-d===1){for(a=0;a<3&&l<o;)s[l]=c>>>(16>>>a&24)&255,a++,l++;c=0}return s}i(Ns,"base64Decode");function Tn(t){return t<26?t+65:t<52?t+71:t<62?t-4:t===62?43:t===63?47:65}i(Tn,"uint6ToB64");function ks(t){let e=2,n="",r=t.length,o=0;for(let s=0;s<r;s++)e=s%3,o|=t[s]<<(16>>>e&24),(e===2||t.length-s===1)&&(n+=String.fromCodePoint(Tn(o>>>18&63),Tn(o>>>12&63),Tn(o>>>6&63),Tn(o&63)),o=0);return n.substring(0,n.length-2+e)+(e===2?"":e===1?"=":"==")}i(ks,"base64Encode");function ut(t){let e=t.toString();return`${e.length===1?"0":""}${e}`}i(ut,"numberToString");function Zl(t){let e=t.getTimezoneOffset(),n=Math.abs(e),r=e>0?"-":"+",o=ut(Math.floor(n/60)),s=ut(n%60);return`${r}${o}${s}`}i(Zl,"getCLFOffset");function ho(t=new Date){if(!(t instanceof Date))throw new Error("clf-date: invalid parameter");let e=["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],n=ut(t.getDate()),r=e[t.getMonth()],o=t.getFullYear(),s=ut(t.getHours()),a=ut(t.getMinutes()),u=ut(t.getSeconds()),c=Zl(t);return`${n}/${r}/${o}:${s}:${a}:${u} ${c}`}i(ho,"toCLFDate");var Ms=(0,Ds.debug)("zuplo:runtime"),ql="X-Amzn-Trace-Id",$l="x-amzn-errortype",Hs=[],Fl=i(async(t,e,n)=>{let r=n;for await(let o of Hs)r=await o(t,e,n);return r},"onSendingAwsLambdaEvent"),ce=class extends A{static{i(this,"AwsLambdaError")}traceId;errorType;constructor(e,n){super(`Failed to invoke AWS Lambda function. ${e}`),this.traceId=n.get(ql)??void 0,this.errorType=n.get($l)??void 0}},Us={addSendingAwsLambdaEventHook:t=>{Hs.push(t)}};async function Zs(t,e){let{accessKeyId:n,secretAccessKey:r,region:o,functionName:s,useLambdaProxyIntegration:a=!0,useAwsResourcePathStyle:u=!1,binaryMediaTypes:c}=e.route.handler.options;if(!n)throw new y("awsAccessKeyId is not set in the handler options");if(!r)throw new y("secretAccessKey is not set in the handler options");if(!o)throw new y("region is not set in the handler options");if(!s)throw new y("functionName is not set in the handler options");let l=new at({accessKeyId:n,secretAccessKey:r}),d=`https://lambda.${o}.amazonaws.com/2015-03-31/functions/${s}/invocations`;if(Ms(`AWS Lambda URL: ${d}`),!a)return l.fetch(d,{body:await t.arrayBuffer()});let[p,m]=await Vl(t,{binaryMediaTypes:c}),{options:g}=e.route.handler,I;g&&typeof g=="object"&&"payloadFormatVersion"in g&&g.payloadFormatVersion==="2.0"?I=jl(t,e):I=await zl(t,e,{useAwsResourcePathStyle:u}),Ms("Calling onSendingAwsLambdaEvent hook");let b=await Fl(t,e,I);b.body=p,b.isBase64Encoded=m;let T=await l.fetch(d,{body:JSON.stringify(b)});try{return Bl(T)}catch(_){if(_ instanceof ce){let h=g&&typeof g=="object"&&"returnAmazonTraceIdHeader"in g&&g.returnAmazonTraceIdHeader&&_.traceId?{AMZN_TRACE_ID_HEADER:_.traceId}:void 0;return v.internalServerError(t,e,void 0,h)}throw _}}i(Zs,"awsLambdaHandler");async function Bl(t){let e;try{e=await t.json()}catch{throw new ce("Lambda response did not contain valid JSON",t.headers)}if(t.status!==200)throw e&&typeof e=="object"&&"message"in e&&typeof e.message=="string"?new ce(e.message,t.headers):new ce(`Status: ${t.statusText}`,t.headers);if(e&&typeof e=="object"&&"errorMessage"in e&&typeof e.errorMessage=="string")throw new ce(e.errorMessage,t.headers);if(!e||typeof e!="object"||!("statusCode"in e)||typeof e.statusCode!="number")return new Response(JSON.stringify(e),{status:t.status,headers:{"content-type":"application/json"}});let n=new Headers;if("headers"in e&&e.headers){if(typeof e.headers!="object")throw new ce(`Response headers must be an object. Received ${typeof e.headers}`,t.headers);for(let[o,s]of Object.entries(e.headers))n.set(o,s)}if("cookies"in e&&e.cookies){if(!Array.isArray(e.cookies))throw new ce(`Response cookies must be an array. Received ${typeof e.cookies}`,t.headers);n.set("cookie",e.cookies.join(";"))}let r;if("isBase64Encoded"in e&&typeof e.isBase64Encoded!="boolean")throw new ce(`Response property isBase64Encoded must be a boolean. Received ${typeof e.isBase64Encoded}`,t.headers);if("isBase64Encoded"in e&&e.isBase64Encoded===!0){if(!("body"in e))throw new ce("Response was set to base64 encoded but no body was set",t.headers);if(typeof e.body!="string")throw new ce("Response was set to base64 encoded but body was not a string",t.headers);r=Ns(e.body)}else"body"in e&&typeof e.body=="string"?r=e.statusCode===204&&e.body===""?null:e.body:"body"in e&&e.body!==null&&e.body!==void 0?r=JSON.stringify(e.body):r=null;if(r!==null&&"bodyEncoding"in e){if(typeof e.bodyEncoding!="string"||!(e.bodyEncoding==="gzip"||e.bodyEncoding==="deflate"))throw new ce(`Response property bodyEncoding can only be set to 'gzip' or 'deflate'. Received ${e.bodyEncoding}`,t.headers);let o=new Blob([r]).stream().pipeThrough(new DecompressionStream(e.bodyEncoding));r=await new Response(o).arrayBuffer()}return new Response(r,{headers:n,status:e.statusCode})}i(Bl,"getResponse");async function zl(t,e,{useAwsResourcePathStyle:n}){let r={},o={};t.headers.forEach((l,d)=>{r[d]=l,o[d]=[l]});let s=t.query,a={};for(let[l,d]of Object.entries(s))a[l]=[d];let u=new URL(t.url);return{version:"1.0",resource:u.pathname,path:u.pathname,httpMethod:t.method,headers:r,multiValueHeaders:o,queryStringParameters:s,multiValueQueryStringParameters:a,requestContext:{accountId:null,apiId:null,authorizer:{claims:{},scopes:[]},domainName:u.hostname,domainPrefix:null,extendedRequestId:e.requestId,httpMethod:t.method,identity:{accessKey:null,accountId:null,caller:null,cognitoAuthenticationProvider:null,cognitoAuthenticationType:null,cognitoIdentityId:null,cognitoIdentityPoolId:null,principalOrgId:null,sourceIp:t.headers.get("CF-Connecting-IP"),user:null,userAgent:t.headers.get("user-agent"),userArn:null,clientCert:{clientCertPem:null,subjectDN:null,issuerDN:null,serialNumber:null,validity:{notBefore:null,notAfter:null}}},path:u.pathname,protocol:"HTTP/1.1",requestId:e.requestId,requestTime:ho(),requestTimeEpoch:new Date().valueOf(),resourceId:e.route.operationId??null,resourcePath:Wl(e.route.path,n),stage:null},pathParameters:t.params,stageVariables:null}}i(zl,"buildEventVersion1");function jl(t,e){let n={};t.headers.forEach((s,a)=>{n[a]=s});let r=new URL(t.url);return{version:"2.0",routeKey:null,rawPath:r.pathname,rawQueryString:r.search,cookies:[],headers:n,queryStringParameters:t.query,requestContext:{accountId:null,apiId:null,authentication:{clientCert:{clientCertPem:null,subjectDN:null,issuerDN:null,serialNumber:null,validity:{notBefore:null,notAfter:null}}},authorizer:{jwt:{claims:{},scopes:[]}},domainName:r.hostname,domainPrefix:null,http:{method:t.method,path:r.pathname,protocol:"HTTP/1.1",sourceIp:t.headers.get("CF-Connecting-IP"),userAgent:t.headers.get("user-agent")},requestId:e.requestId,routeKey:null,stage:null,time:ho(),timeEpoch:new Date().valueOf()},pathParameters:t.params,stageVariables:null}}i(jl,"buildEventVersion2");async function Vl(t,{binaryMediaTypes:e}){let n,r=!1,o=t.headers.get("content-type");if(t.method==="GET"||t.method==="HEAD")n=null;else if(e&&o&&Gl(e,o)){let s=await t.arrayBuffer();n=ks(new Uint8Array(s)),r=!0}else n=await t.clone().text();return[n,r]}i(Vl,"getBodyResult");function Gl(t,e){let n=e.split(";")[0].trim().toLowerCase();return t.findIndex(r=>r==="*/*"?!0:r.toLowerCase()===n)>-1}i(Gl,"matchesContentType");function Wl(t,e=!1){if(!e)return t;let n=po(t),r=Ss(t),o={};return n.forEach(s=>{typeof s=="string"?o[s]=`{${s}}`:o[s.name]=`{${s.name}}`}),r(o)}i(Wl,"getResourcePath");var Jl=[502,503,504];async function ct(t,e){if(Jl.includes(t.status)){let n=B.getLogger(e),o=await t.clone().text(),s={};for(let[a,u]of t.headers)s[a]=u;n.warn(`BadGatewayResponse ${t.status}`,{status:t.status,statusText:t.statusText,body:o,headers:s})}}i(ct,"logBadGatewayResponses");var yo;function Ue(t){if(yo===void 0){let n=w.instance.runtime.ZUPLO_HANDLER_WRITE_LOG_LEVEL;["debug","info","warn","error"].includes(n??"")||(n="debug"),yo=n}return t.log[yo]}i(Ue,"getHandlerUserLogFunction");async function qs(t,e){let n=w.instance.build.BUILD_ID,{buildAssetsUrl:r}=w.instance,o=e.route.handler.options,{openApiFilePath:s}=o;if(!s)throw new y("Open API Spec Handler must have 'openApiFilePath' specified");let a=Kl(s);if(!a.isValid)throw new y(a.error);let u;w.instance.isLocalDevelopment?u=`${r}/${s.substring(1)}`:u=`${r}/${n}${s.substring(1)}`;let c=await fetch(u,{method:t.method,body:t.body,headers:t.headers});if(c.status!==200)return v.notFound(t,e,{detail:"OpenAPI file could not be found."});let l=new Response(c.body,{headers:{"content-type":"application/json"},status:c.status,statusText:c.statusText});return ct(l,e),l}i(qs,"openApiSpecHandler");var Kl=i(t=>t.startsWith("./")?t.startsWith("./config")?t.endsWith(".oas.json")?{isValid:!0}:{isValid:!1,error:"'openApiFilePath' must point to a file ending in '.oas.json'"}:{isValid:!1,error:"'openApiFilePath' must point to a file in your /config directory"}:{isValid:!1,error:"'openApiFilePath' must start with './'"},"validateOpenApiPath");async function $s(t,e){let n=e.route.handler.options;if(!n.location)throw new y("Redirect Handler must have 'location' specified");let r=n.status??302;return new Response(null,{status:r,headers:{location:n.location}})}i($s,"redirectHandler");function Yl(t,e){let n=t.endsWith("/"),r=e.startsWith("/");return n&&r?`${t.substring(0,t.length-1)}${e}`:!n&&!r?`${t}/${e}`:`${t}${e}`}i(Yl,"join");async function Fs(t,e){let n=Ue(e),r=e.route.handler.options,o=r.forwardSearch!==!1;if(!r.baseUrl)throw new Error("URL Forward Handler must have 'baseUrl' specified");if(!r||typeof r.__rewriteFunction!="function")throw new y("Invalid options for this route");let s={incomingRequestProperties:e.incomingRequestProperties,requestId:e.requestId,route:e.route,custom:e.custom},a=new URL(t.url),u=r.__rewriteFunction(t,s),c=Yl(u,a.pathname),l=o?`${c}${a.search}`:c.toString(),d=Date.now();n(`URL Forwarding to '${l}'`);let p=await fetch(l,{method:t.method,body:t.body,headers:t.headers}),m=Date.now()-d;return n(`URL Forward received response ${p.status} - ${p.statusText} in ${m}ms`),ct(p,e),p}i(Fs,"urlForwardHandler");var Ql=i((t,e)=>{let n=new URL(t),r=new URL(e);for(let[o,s]of r.searchParams.entries())n.searchParams.append(o,s);return n.toString()},"addQuery");async function Bs(t,e){let n=Ue(e),r=e.route.handler.options,o=r.forwardSearch!==!1,s=r.followRedirects??!1;if(!r||typeof r.__rewriteFunction!="function")throw new y("Invalid options for this route");let a={incomingRequestProperties:e.incomingRequestProperties,requestId:e.requestId,route:e.route,custom:e.custom},u=r.__rewriteFunction(t,a),c=o?Ql(u,t.url):u,l=Date.now();n(`URL Rewriting to '${c}'`);let d=await fetch(c.toString(),{method:t.method,body:t.body,headers:t.headers,redirect:s?"follow":"manual"}),p=Date.now()-l;return n(`URL Rewrite received response ${d.status} - ${d.statusText} in ${p}ms`),ct(d,e),d}i(Bs,"urlRewriteHandler");var Gs=Ce(Le());var zs=new Map;zs.set("service:",js);var xn=globalThis.fetch;globalThis.fetch=function(t,e){let n=Xl(e);if(typeof t=="string"){let r=new URL(t),o=zs.get(r.protocol);return o?o(t,n):xn(t,n)}else return xn(t,n)};var Xl=i(t=>{if(!t||t instanceof Request)return t;let e=t;if(!e.zuplo)return t;let n=t;return n.cf={cacheEverything:e.zuplo?.cacheEverything,cacheTtl:e.zuplo?.cacheTtlSeconds},delete t.zuplo,t},"transformInit");var he=(0,Gs.debug)("zuplo:runtime:external-service");function Ws(){let t,{__ZUPLO_EXTERNAL_SERVICE_TOKEN:e}=w.instance.runtime;if(e&&e!=="undefined")try{let n=atob(e);t=JSON.parse(n)}catch{}return t}i(Ws,"getServiceAuth");async function Js(t){let e=Ws();if(!e)throw he("There is no external service auth configured for this zup."),new A("There are no external services configured for this zup.");if(typeof t!="string")throw he("Cannot call external service with Request object"),new A("Currently, we only support fetch(<some_string>, ...).");let r=new URL(t).hostname,o={};o["CF-Access-Client-Id"]=e.clientId,o["CF-Access-Client-Secret"]=e.clientSecret;let s;if(e.customServiceMapping&&e.customServiceMapping[r])s=`https://${e.customServiceMapping[r]}`;else if(w.instance.useSha256ServiceRouting){he("Using sha256 service routing");let a=w.instance.build;if(a.ACCOUNT_NAME&&a.PROJECT_NAME&&a.ENVIRONMENT_TYPE)s=`https://${await Ks(r,a.ACCOUNT_NAME,a.PROJECT_NAME,a.ENVIRONMENT_TYPE)}.zuptunnel.com`;else throw he("Cannot use sha256 service routing, missing build variables"),new A("Failed to generate fully qualified tunnel url.")}else s=`https://${r}.zuptunnel.com`;return{serviceBaseUrl:s,tunnelHeaders:o}}i(Js,"externalServiceTunnelConfig");async function js(t,e){let n=Ws();if(n)if(he(`Using external service auth. ClientId: ${n.clientId})`),typeof t=="string"){let r=new URL(t),o=r.hostname,s=e??{},a=new Headers(s.headers||{});a.set("CF-Access-Client-Id",n.clientId),a.set("CF-Access-Client-Secret",n.clientSecret),s.headers=a;let u;if(n.customServiceMapping&&n.customServiceMapping[o])u=`https://${n.customServiceMapping[o]}`;else if(w.instance.useSha256ServiceRouting){he("Using sha256 service routing");let d=w.instance.build;if(d.ACCOUNT_NAME&&d.PROJECT_NAME&&d.ENVIRONMENT_TYPE)u=`https://${await Ks(o,d.ACCOUNT_NAME,d.PROJECT_NAME,d.ENVIRONMENT_TYPE)}.zuptunnel.com`;else throw he("Cannot use sha256 service routing, missing build variables"),new A("Failed to generate fully qualified tunnel url.")}else u=`https://${o}.zuptunnel.com`;let c=new URL(`${u}${r.pathname}${r.search}`);he(`Calling external service: ${c.toString()}`);let l=await xn(c.toString(),s);if(l.status===403&&l.headers.get("cf-access-domain")!==null)throw console.error("403 Forbidden when calling external service.",{clientId:n.clientId,tunnelHost:u}),new A("Could not connect to secure tunnel.");return l}else throw he("Cannot call external service with Request object"),new A("Currently, we only support fetch(<some_string>, ...).");else throw he("There is no external service auth configured for this zup."),new A("There are no external services configured for this zup.")}i(js,"externalServiceHandler");async function Ks(t,e,n,r){let o=t.toLowerCase(),s=e.toLowerCase(),a=n.toLowerCase(),u=ed(r);he(`Hashing service name: ${s}-${o}.${s}-${a}-${u}`);let c=await Vs(`${s}-${o}`),l=await Vs(`${s}-${a}-${u}`);return`${c}.${l}`}i(Ks,"hashServiceName");async function Vs(t){let e=new TextEncoder().encode(t),n=await crypto.subtle.digest("SHA-256",e);return Array.from(new Uint8Array(n)).map(s=>s.toString(16).padStart(2,"0")).join("").slice(0,-1)}i(Vs,"hashSegment");function ed(t){let e=t.toLowerCase();switch(e){case"production":case"preview":return e;default:return"working-copy"}}i(ed,"sanitizeEnvironmentType");async function Ys(t,e){let n=w.instance,r=e.route.handler.options,o=Ue(e);if(!r||!r.rewritePattern)throw new y("WebSocket Handler must have option 'rewritePattern' specified");let s=t.headers.get("Upgrade");if(!s||s!=="websocket")return v.badRequest(t,e,{detail:"Request must include header 'Upgrade: websocket'"});if(!r||typeof r.__rewriteFunction!="function")throw new y("Invalid options for this route");let a={incomingRequestProperties:e.incomingRequestProperties,requestId:e.requestId,route:e.route,custom:e.custom},u=r.__rewriteFunction(t,a),c=Date.now();if(o(`Attempting WebSocket connection to '${u}'`),n.isDeno){let p=new Headers(t.headers);if(u.startsWith("service:")){let g=await Js(u),I=new URL(u);u=new URL(`${g.serviceBaseUrl}${I.pathname}${I.search}`).toString();for(let T in g.tunnelHeaders)p.set(T,g.tunnelHeaders[T])}u=u.replace(/^(http)/,"ws");try{if(p.get("Authorization")){let g=p.get("Authorization")?.replace("Bearer ","");u+=`?apiKey=${g}`}}catch{}let m=JSON.stringify({url:u});return new Response(m,{headers:p})}u=u.replace(/^(ws)/,"http");let l=await fetch(u,{method:t.method,headers:t.headers,body:t.body});if(l.status!==101||!l.webSocket){let p=await l.text(),m=`WebSocket connection error - ${l.status}: ${l.statusText}, content: '${p}'`;throw new Error(m)}let d=Date.now()-c;return o(`WebSocket connected, received response ${l.status} - ${l.statusText} in ${d}ms`),new Response(null,{status:101,webSocket:l.webSocket})}i(Ys,"webSocketHandler");var bo=i((t,e)=>t.map((r,o)=>{let s;if(typeof r.module=="object"&&(s=r.module[r.export]),!s||typeof s!="function"){let a=e==="inbound"?"WebSocketInboundPolicy":"WebSocketOutboundPolicy",u=`policy in position: ${o+1}, export name: ${r.export}`;throw new y(`${a} - Websocket policy must be a valid function (${u})`)}return s}),"getWebSocketPolicyFunctions"),Qs=i(async(t,e,n,r,o,s)=>{let a=t.data;if(s&&s.length>0){let u=[...s];for(;u.length>0;){let c=u.shift();if(!c)return a;if(a=await c(a,n,e,r,o),a===void 0)return}}return a},"webSocketPolicyProcessor");function Xs(t,e,n,r,o){t.addEventListener("close",()=>{e.close()}),t.addEventListener("error",s=>{r.log.error("WebSocket error: ",s),e.send(JSON.stringify(s))}),t.addEventListener("message",s=>{try{let u=i(async c=>{let l=await Qs(c,t,e,n,r,o);l!==void 0&&e.send(l)},"innerPipeline")(s).catch(r.log.error);r.waitUntil(u)}catch(a){r.log.error(a)}})}i(Xs,"wireUpListeners");async function ea(t,e){let n=w.instance,r=e.route.handler.options,o=Ue(e);if(!r||!r.rewritePattern)throw new y("WebSocket Pipeline Handler must have option 'rewritePattern' specified");let s=t.headers.get("Upgrade");if(!s||s!=="websocket")return v.badRequest(t,e,{detail:"Request must include header 'Upgrade: websocket'"});if(!r||typeof r.__rewriteFunction!="function")throw new y("Invalid options for this route");let a={incomingRequestProperties:e.incomingRequestProperties,requestId:e.requestId,route:e.route,custom:e.custom},u=r.__rewriteFunction(t,a),c=Date.now();if(o(`Attempting WebSocket connection to '${u}'`),n.isDeno)throw new y("Websocket pipeline handler is currently not supported on working-copy environments");u=u.replace(/^(ws)/,"http");let l=await fetch(u,{method:t.method,headers:t.headers,body:t.body});if(l.status!==101||!l.webSocket){let _=await l.text(),h=`WebSocket connection error - ${l.status}: ${l.statusText}, content: '${_}'`;throw new Error(h)}let d=new WebSocketPair,[p,m]=Object.values(d),g=Date.now()-c;o(`WebSocket connected, received response ${l.status} - ${l.statusText} in ${g}ms`);let I=l.webSocket;I.accept(),m.accept();let b=r.policies&&r.policies.inbound?bo(r.policies.inbound,"inbound"):[],T=r.policies&&r.policies.outbound?bo(r.policies.outbound,"outbound"):[];return Xs(m,I,t,e,b),Xs(I,m,t,e,T),new Response(null,{status:101,webSocket:p})}i(ea,"webSocketPipelineHandler");var vn=class extends Q{constructor(n){super();this.options=n}static{i(this,"DynaTraceLoggingPlugin")}getTransport(){return new wo(this.options)}},wo=class{static{i(this,"DynaTraceTransport")}constructor(e){this.#e=e.url,this.#t=e.apiToken,this.#r=w.instance.loggingEnvironmentType,this.#o=w.instance.loggingEnvironmentStage,this.#n=w.instance.deploymentName}#e;#t;#n;#r;#o;log(e,n){e.messages.forEach(r=>{let o={timestamp:new Date().toISOString(),message:Se(ie(r)),severity:e.level,"log.source":e.logSource,requestId:e.requestId,"custom.environment":this.#n,"custom.environmentStage":this.#o,"custom.environmentType":this.#r,"custom.loggingId":e.loggingId,"custom.rayId":e.rayId===null?void 0:e.rayId};this.batcher.enqueue(o)}),n.waitUntil(this.batcher.waitUntilFlushed())}#i=async e=>{e.length!==0&&await fetch(this.#e,{method:"POST",body:JSON.stringify(e),headers:{"content-type":"application/json; charset=utf-8",authorization:`Api-Token ${this.#t}`}})};batcher=new q("dyna-trace-log-transport",10,this.#i)};var On=class extends Q{constructor(n){super();this.options=n}static{i(this,"LokiLoggingPlugin")}getTransport(){return new Po(this.options)}},Ro=class{static{i(this,"LokiStream")}constructor(e,n,r,o,s){this.level=e,this.environment=n,this.environmentType=r,this.environmentStage=o,this.requestId=s}job="zuplo";level;environment;environmentType;environmentStage;requestId;equals=e=>this.level===e.level&&this.requestId===e.requestId};function td(t,e){return btoa(`${t}:${e}`)}i(td,"createBasicDigest");var Po=class{static{i(this,"LokiTransport")}constructor(e){this.#e=e.url,this.#t=td(e.username,e.password),this.#r=w.instance.loggingEnvironmentType,this.#o=w.instance.loggingEnvironmentStage,this.#n=w.instance.deploymentName}#e;#t;#n;#r;#o;log(e,n){let r=new Ro(e.level,this.#n,this.#r,this.#o,e.requestId);e.messages.forEach(o=>{let s={stream:r,message:Se(ie(o)),nanoSecondEpoch:`${e.timestamp.getTime()}000000`};this.batcher.enqueue(s)}),n.waitUntil(this.batcher.waitUntilFlushed())}#i=e=>{let n={streams:[]};return e.forEach(r=>{let o=n.streams.find(s=>s.stream.equals(r.stream));o||(o={stream:r.stream,values:[]},n.streams.push(o)),o.values.push([r.nanoSecondEpoch,r.message])}),n};#s=async e=>{if(e.length===0)return;let n=this.#i(e);await fetch(this.#e,{method:"POST",body:JSON.stringify(n),headers:{"content-type":"application/json",authorization:`Basic ${this.#t}`}})};batcher=new q("loki-log-transport",10,this.#s)};var Sn=class extends Q{constructor(n){super();this.options=n}static{i(this,"SumoLogicLoggingPlugin")}getTransport(){return new Eo(this.options)}},Eo=class{static{i(this,"SumoLogicTransport")}constructor(e){this.#e=e.url,this.#o=e.category,this.#i=e.name,this.#n=w.instance.loggingEnvironmentType,this.#r=w.instance.loggingEnvironmentStage,this.#t=w.instance.deploymentName}#e;#t;#n;#r;#o;#i;log(e,n){e.messages.forEach(r=>{let o={timestamp:new Date().toISOString(),message:Se(ie(r)),severity:e.level,source:e.logSource,requestId:e.requestId,environment:this.#t,environmentType:this.#n,environmentStage:this.#r,rayId:e.rayId===null?void 0:e.rayId};this.batcher.enqueue(o)}),n.waitUntil(this.batcher.waitUntilFlushed())}#s=async e=>{if(e.length===0)return;let n=e.map(o=>JSON.stringify(o)).join(`
|
|
67
|
+
`),r=new Headers({"content-type":"application/json; charset=utf-8"});this.#i&&r.set("X-Sumo-Name",this.#i),this.#o&&r.set("X-Sumo-Category",this.#o),await fetch(this.#e,{method:"POST",body:n,headers:r})};batcher=new q("sumo-logic-log-transport",10,this.#s)};var nd="d3a5b78f823648f5b1df4fe269d41172",Cn=class extends Q{constructor(n){super();this.options=n}static{i(this,"VMWareLogInsightLoggingPlugin")}getTransport(){return new Io(this.options)}},Io=class{static{i(this,"VMWareLogInsightTransport")}constructor(e){let n;try{n=new URL(e.url),n.pathname==="/"&&(n.pathname=`/api/v1/events/ingest/${e.agentId??nd}`)}catch{throw new y(`Invalid option 'url' on 'VMWareLogInsightTransport' plugin. Must be a valid URL, received '${e.url}'`)}this.#e=n.toString(),this.#r=w.instance.loggingEnvironmentType,this.#o=w.instance.loggingEnvironmentStage,this.#n=w.instance.deploymentName,this.#i=e.onMessageSending,this.#t=e.textReplacements,e.fields&&(this.#s=Object.entries(e.fields).map(([r,o])=>({name:r,content:o})))}#e;#t;#n;#r;#o;#i;#s;log(e,n){let r=this.buildEntry(e,n);this.batcher.enqueue(r),n.waitUntil(this.batcher.waitUntilFlushed())}buildEntry(e,n){let r=ys(e.messages);this.#t?.forEach(s=>{r=r.replaceAll(s[0],s[1])});let o={timestamp:Date.now(),text:r,fields:[{name:"severity",content:e.level.toUpperCase()},{name:"request_id",content:e.requestId},{name:"environment_type",content:this.#r},{name:"environment_stage",content:this.#o},{name:"log_source",content:e.logSource},{name:"atomic_counter",content:e.vectorClock}]};return e.rayId&&o.fields.push({name:"request_ray_id",content:e.rayId}),this.#n&&o.fields.push({name:"environment",content:this.#n}),this.#s&&o.fields.push(...this.#s),n.custom&&Object.entries(n.custom).forEach(([s,a])=>{let u=to(a);u&&o.fields.push({name:s,content:u})}),this.#i&&(o=this.#i(o)),o}#a=async e=>{if(e.length===0)return;let n=await fetch(this.#e,{method:"POST",body:JSON.stringify({events:e}),headers:{"content-type":"application/json; charset=utf-8"}});if(n.status!==200)try{let r=await n.text();console.error("Error logging to Log Insight",r)}catch(r){console.error(r)}};batcher=new q("vmware-log-insights-log-transport",10,this.#a)};var An=class extends Q{constructor(n){super();this.options=n}static{i(this,"AWSLoggingPlugin")}getTransport(){return new To(this.options)}},To=class{static{i(this,"AWSLogTransport")}awsClient;environment;environmentType;logGroupName;logStreamName;region;batcher=new q("aws-log-transport",10,async e=>{if(e.length===0)return;let n=JSON.stringify({logGroupName:this.logGroupName,logStreamName:this.logStreamName,logEvents:e});await this.awsClient.fetch(`https://logs.${this.region}.amazonaws.com`,{headers:{"Content-Type":"application/x-amz-json-1.1","x-amz-Target":"Logs_20140328.PutLogEvents"},body:n,aws:{accessKeyId:this.awsClient.accessKeyId,secretAccessKey:this.awsClient.secretAccessKey,service:this.awsClient.service,region:this.awsClient.region}})});constructor({accessKeyId:e,logStreamName:n,logGroupName:r,secretAccessKey:o,region:s}){this.awsClient=new at({accessKeyId:e,secretAccessKey:o,service:"logs",region:s}),this.logGroupName=r,this.logStreamName=n,this.region=s,this.environmentType=w.instance.loggingEnvironmentType,this.environment=w.instance.deploymentName}log(e,n){e.messages.forEach(r=>{let o={timestamp:new Date().getTime(),message:JSON.stringify({data:Se(ie(r)),severity:e.level,source:e.logSource,environment:this.environment,requestId:e.requestId,environmentType:this.environmentType,rayId:e.rayId===null?void 0:e.rayId})};this.batcher.enqueue(o)}),n.waitUntil(this.batcher.waitUntilFlushed())}};var xo=new WeakMap,rd={tags:[]},_n=class extends De{constructor(n){super();this.options=n}static{i(this,"DataDogMetricsPlugin")}getTransport(){return new vo(this.options)}static setContext(n,r){let o=xo.get(n);o||(o=rd);let s=Object.assign({...o},r);xo.set(n,s)}},vo=class{static{i(this,"DataDogMetricsTransport")}#e;#t;#n;#r;#o;#i=void 0;constructor(e){this.#e=e.apiKey,this.#t=e.url??"https://api.datadoghq.com/api/v2/series",this.#n=Object.assign({latency:!0,requestContentLength:!0,responseContentLength:!0},e.metrics),this.#o=e.include??{},this.#r=e.tags??[]}pushMetrics(e,n){this.#i===void 0&&(this.#i=new q("data-dog-metrics-transport",10,this.dispatchFunction,B.getLogger(n)));let r=Math.floor(e.timestamp.getTime()/1e3),o=this.#r.concat(xo.get(n)?.tags??[]);if(this.#o.country&&o.push(`country:${e.country}`),this.#o.httpMethod&&o.push(`httpMethod:${e.method}`),this.#o.statusCode&&o.push(`statusCode:${e.statusCode}`),this.#o.path){let s=e.systemRouteName||e.routePath;o.push(`path:${s}`)}this.#n.latency&&this.#i.enqueue({metric:"zuplo.request.latency",type:3,points:[{timestamp:r,value:e.durationMs}],tags:o}),this.#n.requestContentLength&&e.requestContentLength&&this.#i.enqueue({metric:"zuplo.request.content_length",type:3,points:[{timestamp:r,value:e.requestContentLength}],tags:o}),this.#n.responseContentLength&&e.responseContentLength&&this.#i.enqueue({metric:"zuplo.response.content_length",type:3,points:[{timestamp:r,value:e.responseContentLength}],tags:o}),n.waitUntil(this.#i.waitUntilFlushed())}dispatchFunction=async e=>{if(e.length===0)return;let n=JSON.stringify({series:e}),r=await fetch(this.#t,{method:"POST",body:n,headers:{"content-type":"application/json","DD-API-KEY":this.#e}});if(!r.ok)throw new Oo(await r.text())}},Oo=class t extends Error{static{i(this,"DataDogMetricsError")}constructor(e){super(e),Object.setPrototypeOf(this,t.prototype)}};var So=new WeakMap,od={dimensions:[]},Ln=class extends De{constructor(n){super();this.options=n}static{i(this,"DynatraceMetricsPlugin")}getTransport(){return new Co(this.options)}static setContext(n,r){let o=So.get(n);o||(o=od);let s=Object.assign({...o},r);So.set(n,s)}},Co=class{static{i(this,"DynaTraceMetricsTransport")}apiToken;#e;#t;dimensions;#n;#r=void 0;constructor(e){this.apiToken=e.apiToken,this.#e=e.url,this.#t=Object.assign({latency:!0,requestContentLength:!0,responseContentLength:!0},e.metrics),this.#n=e.include??{},this.dimensions=e.dimensions??[]}pushMetrics(e,n){this.#r===void 0&&(this.#r=new q("dynatrace-metrics-transport",10,this.dispatchFunction,B.getLogger(n)));let r=Math.floor(e.timestamp.getTime()),o=this.dimensions.concat(So.get(n)?.dimensions??[]);if(this.#n.country&&o.push(`country="${e.country}"`),this.#n.httpMethod&&o.push(`http_method="${e.method}"`),this.#n.statusCode&&o.push(`status_code="${e.statusCode}"`),this.#n.path){let a=e.systemRouteName||e.routePath;o.push(`path="${a}"`)}let s=o.join(",");this.#t.latency&&this.#r.enqueue(`zuplo.request.latency,${s} ${e.durationMs} ${r}`),this.#t.requestContentLength&&e.requestContentLength&&this.#r.enqueue(`zuplo.request.content_length,${s} ${e.requestContentLength} ${r}`),this.#t.responseContentLength&&e.responseContentLength&&this.#r.enqueue(`zuplo.response.content_length,${s} ${e.responseContentLength} ${r}`),n.waitUntil(this.#r.waitUntilFlushed())}dispatchFunction=async e=>{if(e.length===0)return;let n=e.join(`
|
|
68
|
+
`),r=await fetch(this.#e,{method:"POST",body:n,headers:{"content-type":"text/plain",Authorization:`Api-Token ${this.apiToken}`}});if(!r.ok)throw new Ao(await r.text())}},Ao=class t extends Error{static{i(this,"DynaTraceMetricsError")}constructor(e){super(e),Object.setPrototypeOf(this,t.prototype)}};var Nn=class{static{i(this,"AuditLogDataStaxProvider")}constructor(e){this.#e=e}#e;writeLogBatch=async e=>{await Promise.allSettled(e.map(async n=>{await fetch(this.#e.url,{method:"POST",headers:{"X-Cassandra-Token":this.#e.xCassandraToken,"content-type":"application/json"},body:JSON.stringify(n)})}))}};var kn=class extends xe{static{i(this,"AuditLogPlugin")}constructor(e,n){super(),this.#e=e,this.#t=n}#e;#t;async initialize(e){new _o(e,this.#e,this.#t)}},ta=i(t=>{let e={};return t.forEach((n,r)=>{e[r]=n}),e},"serializableHeaders"),id={requestFilter:async()=>!0,include:{request:{headers:!0,body:!0},response:{headers:!0,body:!0}}},_o=class{static{i(this,"AuditPluginImpl")}constructor(e,n,r){this.#t=n;let o={...id};r?.requestFilter&&(o.requestFilter=r.requestFilter),r?.include?.request&&Object.assign(o,r.include.request),r?.include?.response&&Object.assign(o,r.include.response),this.#e=o,e.addRequestHook(this.#i),this.#n=new q("audit-log",10,this.#r)}#e;#t;#n;#r=async e=>{await this.#t.writeLogBatch(e)};#o=async(e,n,r,o,s,a)=>{try{let u={timestamp:o,durationMs:s,routePath:r.route.path,requestId:r.requestId,userSub:a,request:{url:n.url,method:n.method,headers:this.#e.include?.request?.headers?ta(n.headers):void 0,body:this.#e.include?.request?.body?await n.text():void 0},response:{status:e.status,statusText:e.statusText,headers:this.#e.include?.response?.headers?ta(e.headers):void 0,body:this.#e.include?.response?.body?await e.text():void 0}};this.#n.enqueue(u),r.waitUntil(this.#n.waitUntilFlushed())}catch(u){r.log.error(u)}};#i=async(e,n)=>{try{if(!await this.#e.requestFilter(e,n))return e;let o=new Date,s=Date.now(),a=e.clone();return n.addResponseSendingFinalHook(async(u,c)=>{let l=Date.now(),d=u.clone(),p=this.#o(d,a,n,o,l-s,c.user?.sub).catch(m=>{n.log.error(m)});n.waitUntil(p)}),e}catch(r){return n.log.error(r),e}}};var Lo=class extends Error{static{i(this,"StripeError")}message;type;raw;rawType;headers;requestId;code;doc_url;param;detail;statusCode;charge;decline_code;payment_method_type;payment_intent;payment_method;setup_intent;source;constructor(e={}){super(e.message),this.type=this.constructor.name,this.raw=e,this.rawType=e.type,this.code=e.code,this.doc_url=e.doc_url,this.param=e.param,this.detail=e.detail,this.headers=e.headers,this.requestId=e.requestId,this.statusCode=e.statusCode,this.message=e.message,this.charge=e.charge,this.decline_code=e.decline_code,this.payment_intent=e.payment_intent,this.payment_method=e.payment_method,this.payment_method_type=e.payment_method_type,this.setup_intent=e.setup_intent,this.source=e.source}},Te=class extends Lo{static{i(this,"StripeSignatureVerificationError")}header;payload;constructor(e,n,r={}){super(r),this.header=e,this.payload=n}};var sd="v1",ad=300;async function na(t,e,n,r=ad,o){return await cd(t,e,n,r,o),t instanceof Uint8Array?JSON.parse(new TextDecoder("utf8").decode(t)):JSON.parse(t)}i(na,"constructEventAsync");function ud(t,e){return`${e.timestamp}.${t}`}i(ud,"makeHMACContent");async function cd(t,e,n,r,o){let{decodedHeader:s,decodedPayload:a,details:u,suspectPayloadType:c}=ld(t,e,sd),l=/\s/.test(n),d=await gd(ud(a,u),n);return dd(a,s,u,d,r,c,l,o)}i(cd,"verifyHeaderAsync");function ld(t,e,n){if(!t)throw new Te(e,t,{message:"No webhook payload was provided."});let r=typeof t!="string"&&!(t instanceof Uint8Array),o=new TextDecoder("utf8"),s=t instanceof Uint8Array?o.decode(t):t;if(Array.isArray(e))throw new Error("Unexpected: An array was passed as a header, which should not be possible for the stripe-signature header.");if(e==null||e=="")throw new Te(e,t,{message:"No stripe-signature header value was provided."});let a=e instanceof Uint8Array?o.decode(e):e,u=pd(a,n);if(!u||u.timestamp===-1)throw new Te(a,s,{message:"Unable to extract timestamp and signatures from header"});if(!u.signatures.length)throw new Te(a,s,{message:"No signatures found with expected scheme"});return{decodedPayload:s,decodedHeader:a,details:u,suspectPayloadType:r}}i(ld,"parseEventDetails");function dd(t,e,n,r,o,s,a,u){let c=!!n.signatures.filter(m=>md(m,r)).length,l=`
|
|
69
69
|
Learn more about webhook signing and explore webhook integration examples for various frameworks at https://github.com/stripe/stripe-node#webhook-signing`,d=a?`
|
|
70
70
|
|
|
71
|
-
Note: The provided signing secret contains whitespace. This often indicates an extra newline or space is in the value`:"";if(!c)throw s?new
|
|
71
|
+
Note: The provided signing secret contains whitespace. This often indicates an extra newline or space is in the value`:"";if(!c)throw s?new Te(e,t,{message:`Webhook payload must be provided as a string or a Buffer (https://nodejs.org/api/buffer.html) instance representing the _raw_ request body.Payload was provided as a parsed JavaScript object instead.
|
|
72
72
|
Signature verification is impossible without access to the original signed material.
|
|
73
73
|
`+l+`
|
|
74
|
-
`+d}):new
|
|
74
|
+
`+d}):new Te(e,t,{message:`No signatures found matching the expected signature for payload. Are you passing the raw request body you received from Stripe?
|
|
75
75
|
If a webhook request is being forwarded by a third-party tool, ensure that the exact request body, including JSON formatting and new line style, is preserved.
|
|
76
76
|
`+l+`
|
|
77
|
-
`+d});let p=Math.floor((typeof u=="number"?u:Date.now())/1e3)-n.timestamp;if(o>0&&p>o)throw new Ie(e,t,{message:"Timestamp outside the tolerance zone"});return!0}i(cd,"validateComputedSignature");function ld(t,e){return typeof t!="string"?null:t.split(",").reduce((n,r)=>{let o=r.split("=");return o[0]==="t"&&(n.timestamp=parseInt(o[1],10)),o[0]===e&&n.signatures.push(o[1]),n},{timestamp:-1,signatures:[]})}i(ld,"parseHeader");function dd(t,e){if(t.length!==e.length)return!1;let n=t.length,r=0;for(let o=0;o<n;++o)r|=t.charCodeAt(o)^e.charCodeAt(o);return r===0}i(dd,"secureCompare");async function pd(t,e){let n=new TextEncoder,r=await crypto.subtle.importKey("raw",n.encode(e),{name:"HMAC",hash:{name:"SHA-256"}},!1,["sign"]),o=await crypto.subtle.sign("hmac",r,n.encode(t)),s=new Uint8Array(o),a=new Array(s.length);for(let u=0;u<s.length;u++)a[u]=No[s[u]];return a.join("")}i(pd,"computeHMACSignatureAsync");var No=new Array(256);for(let t=0;t<No.length;t++)No[t]=t.toString(16).padStart(2,"0");function G(t,e,n="policy"){let r=`${n} '${e}'`;if(!Fe(t))throw new y(`Options on ${r} is expected to be an object. Received the type '${typeof t}'.`);let o=i((u,c,l)=>{let d=t[u];if(!(l&&d===void 0)){if(d===void 0)throw new y(`Value of '${String(u)}' on ${r} is required, but no value was set. If using an environment variable, check that it is set correctly.`);if(c==="array"&&Array.isArray(d))throw new y(`Value of '${String(u)}' on ${r} must be an array. Received type ${typeof d}.`);if(typeof d!==c)throw new y(`Value of '${String(u)}' on ${r} must be of type ${c}. Received type ${typeof d}.`);if(typeof d=="string"&&d.length===0)throw new y(`Value of '${String(u)}' on ${r} must be a non-empty string. The value received is empty. If using an environment variable, check that it is set correctly.`);if(typeof d=="number"&&isNaN(d))throw new y(`Value of '${String(u)}' on ${r} must be valid number. If using an environment variable, check that it is set correctly.`)}},"validate"),s=i((u,c)=>(o(u,c,!0),{optional:s,required:a}),"optional"),a=i((u,c)=>(o(u,c,!1),{optional:s,required:a}),"required");return{optional:s,required:a}}i(G,"optionValidator");var ct=class extends ge{static{i(this,"StripeWebhookVerificationInboundPolicy")}async handler(e,n){G(this.options,this.policyName).required("signingSecret","string").optional("tolerance","number");let r=e.headers.get("stripe-signature");try{let o=await e.clone().text();await na(o,r,this.options.signingSecret)}catch(o){let s=o.message;if(o.type&&o.type==="StripeSignatureVerificationError"){let a=o.message,c=/Note:(.*)/g.exec(a);s=c?c[1].trim():a,s.startsWith("No signatures found matching the expected signature for payload")&&(s="The Stripe Webhook Signature Secret provided is incorrect and does not match to the signature on the event received. Make sure your Zuplo configuration is correct.")}return n.log.error("Error validating stripe webhook",s),T.badRequest(e,n,{title:"Webhook Error",detail:s})}return e}};function ra(t){return t!==null&&typeof t=="object"&&"id"in t&&ae(t.id)&&"type"in t&&ae(t.type)}i(ra,"isStripeWebhookEvent");var md={getSubscription:async({subscriptionId:t,stripeSecretKey:e,logger:n})=>{let r=await fetch(`https://api.stripe.com/v1/subscriptions/${t}`,{headers:{Authorization:`Bearer ${e}`}}),o=await r.json();if(r.status!==200){let s="Error retrieving subscription from Stripe API.";throw n.error(s,o),new A(s)}return o},getCustomer:async({customerId:t,stripeSecretKey:e,logger:n})=>{let r=await fetch(`https://api.stripe.com/v1/customers/${t}`,{headers:{Authorization:`Bearer ${e}`}}),o=await r.json();if(r.status!==200){let s="Error retrieving customer from Stripe API.";throw n.error(s,o),new A(s)}return o},getUpcomingInvoice:async({customerId:t,stripeSecretKey:e,logger:n})=>{let r=await fetch(`https://api.stripe.com/v1/invoices/upcoming?customer=${t}`,{headers:{Authorization:`Bearer ${e}`}}),o=await r.json();if(r.status!==200){let s="Error retrieving customer upcoming invoice from Stripe API.";throw n.error(s,o),new A(s)}return o}},kn=md;var ko="https://api-key-management-service-eq7z4lly2a-ue.a.run.app",oa="My API Key";async function ia({apiKeyBucketName:t,stripeSubscriptionId:e,stripeProductId:n,stripeCustomerId:r,managerEmail:o,managerSub:s,context:a}){let{authApiJWT:u}=w.instance,c=new URL(`/v1/buckets/${t}/consumers`,ko);c.searchParams.set("with-api-key","true");let l=crypto.randomUUID(),d={name:l,description:oa,tags:{subscriptionExternalId:e,planExternalIds:[n]},metadata:{stripeSubscriptionId:e,stripeProductId:n,stripeCustomerId:r},managers:[{sub:s,email:o}]},p=await se({retryDelayMs:5,retries:2,logger:F.getLogger(a)},c.toString(),{method:"POST",headers:{Authorization:`Bearer ${u}`,"content-type":"application/json"},body:JSON.stringify(d)}),m=await p.json();if(p.status!==200){let g="Error creating API Key Consumer";throw a.log.error(g,m),new A(g)}return a.log.info("Successfully created API Key Consumer",{consumerId:l,stripeSubscriptionId:e,stripeProductId:n}),l}i(ia,"createConsumer");async function sa({apiKeyBucketName:t,stripeSubscriptionId:e,stripeProductId:n,stripeCustomerId:r,managerEmail:o,context:s}){let{authApiJWT:a}=w.instance,u=new URL(`/v1/buckets/${t}/consumers`,ko);u.searchParams.set("with-api-key","true");let c=crypto.randomUUID(),l={name:c,description:oa,tags:{subscriptionExternalId:e,planExternalIds:[n]},metadata:{stripeSubscriptionId:e,stripeProductId:n,stripeCustomerId:r},managers:[o]},d=await se({retryDelayMs:5,retries:2,logger:F.getLogger(s)},u.toString(),{method:"POST",headers:{Authorization:`Bearer ${a}`,"content-type":"application/json"},body:JSON.stringify(l)}),p=await d.json();if(d.status!==200){let m="Error creating API Key Consumer";throw s.log.error(m,p),new A(m)}return s.log.info("Successfully created API Key Consumer with Manager Invite",{consumerId:c,stripeSubscriptionId:e,stripeProductId:n}),c}i(sa,"createConsumerInvite");async function aa({apiKeyBucketName:t,consumerId:e,context:n}){let{authApiJWT:r}=w.instance,o=new URL(`/v1/buckets/${t}/consumers/${e}`,ko);o.searchParams.set("with-api-key","true");let s=await se({retryDelayMs:5,retries:2,logger:F.getLogger(n)},o.toString(),{method:"DELETE",headers:{Authorization:`Bearer ${r}`,"content-type":"application/json"},body:JSON.stringify({})});if(s.status!==204){let a=await s.json(),u="Error invalidating API Key Consumer";throw n.log.error(u,a),new A(u)}return n.log.info(`Successfully invalidated API Key Consumer '${e}`),e}i(aa,"deleteConsumer");async function ua({context:t,stripeSubscriptionId:e,stripeProductId:n,customerKey:r,meteringBucketId:o,meteringBucketRegion:s,customerExternalId:a,subscriptionStatus:u,metadata:c}){let l={status:u,type:"periodic",renewalStrategy:"monthly",region:s,subscriptionExternalId:e,planExternalIds:[n],customerKey:r,customerExternalId:a,metadata:c},{authApiJWT:d,meteringServiceUrl:p}=w.instance;if(!Xe(d))throw new q("No Zuplo JWT token set.");let m=await se({retryDelayMs:5,retries:2,logger:F.getLogger(t)},`${p}/internal/v1/metering/${o}/subscriptions`,{headers:{Authorization:`Bearer ${d}`,"Content-Type":"application/json","zp-rid":t.requestId},method:"POST",body:JSON.stringify(l)});if(!m.ok){let g=`Unable to create a monetization subscription for Stripe subscription '${e}'.`,I,b="";try{I=await m.json(),b=I.detail??I.title}catch{I={type:"https://zup.fail/http-status/500",title:"Internal Server Error",status:m.status,detail:m.statusText}}throw t.log.error(g,I),new A(`${g} ${b}`)}t.log.info("Successfully created monetization subscription.",l)}i(ua,"createSubscription");async function _t({context:t,meteringSubscriptionId:e,meteringBucketId:n,requestBody:r}){let{authApiJWT:o,meteringServiceUrl:s}=w.instance;if(!Xe(o))throw new q("No Zuplo JWT token set.");let a=await se({retryDelayMs:5,retries:2,logger:F.getLogger(t)},`${s}/internal/v1/metering/${n}/subscriptions/${e}`,{headers:{Authorization:`Bearer ${o}`,"Content-Type":"application/json","zp-rid":t.requestId},method:"PATCH",body:JSON.stringify(r)});if(!a.ok){let u=`Unable to update monetization subscription with: '${JSON.stringify(r)}'.`,c,l="";try{c=await a.json(),l=c.detail??c.title}catch{c={type:"https://zup.fail/http-status/500",title:"Internal Server Error",status:a.status,detail:a.statusText}}throw t.log.error(u,c),new A(`${u} ${l}`)}t.log.info(`Successfully updated monetization subscription with: '${JSON.stringify(r)}'.`)}i(_t,"updateSubscription");async function Nt({context:t,stripeSubscriptionId:e,stripeCustomerId:n,meteringBucketId:r}){let{authApiJWT:o,meteringServiceUrl:s}=w.instance;if(!Xe(o))throw new q("No Zuplo JWT token set.");let a=await se({retryDelayMs:5,retries:2,logger:F.getLogger(t)},`${s}/internal/v1/metering/${r}/subscriptions?subscriptionExternalId=${e}`,{headers:{Authorization:`Bearer ${o}`,"zp-rid":t.requestId},method:"GET"});if(!a.ok){let c=`Unable to retrieve the monetization subscription for Stripe subscription '${e}'.`,l,d="";try{l=await a.json(),d=l.detail??l.title}catch{l={type:"https://zup.fail/http-status/500",title:"Internal Server Error",status:a.status,detail:a.statusText}}throw t.log.error(c,l),new A(`${c} ${d}`)}let u=await a.json();if(u.data.length===0){let c=`Subscription was not found for Stripe subscription '${e}' and the event was ignored by Zuplo.`;throw t.log.error(c),new A(c)}if(u.data[0].customerExternalId!==n){let c=`Subscription was not found for Stripe customer '${n}' and the event was ignored by Zuplo.`;throw t.log.error(c),new A(c)}return u.data[0]}i(Nt,"getSubscription");var V="Unable to process webhook event.",Ve="Successfully processed webhook event",le="See https://zuplo.com/docs/articles/monetization-troubleshooting for more details.";function Mn(t){return t.replaceAll("_","-")}i(Mn,"stripeStatusToMeteringStatus");async function Mo(t,e,n,r){let o=n.data.object.id;if(!o)return e.log.warn(`Invalid Stripe webhook event. Expected event '${n.id}' to have '.data.object.id' be the subscription ID.`),T.badRequest(t,e,{title:V,detail:"Invalid Stripe webhook event. Expected '.data.object.id' to be the subscription ID."});let s=n.data.object.plan;if(!s||!s.product)return e.log.warn(`Invalid Stripe API result. Expected event '${n.id}' to have a plan data.`),T.badRequest(t,e,{title:V,detail:"Invalid Stripe API result. Expected event to have a plan data."});let a=n.data.object.customer;if(!a)return e.log.warn(`Invalid Stripe webhook event. Expected '.data.object.customer' to be provided by event '${n.id}'`),T.badRequest(t,e,{title:V,detail:"Invalid Stripe webhook event. Expected '.data.object.customer' to be provided"});if(n.data.object.metadata&&n.data.object.metadata.zuplo_created_by_deploymentName&&n.data.object.metadata.zuplo_created_by_deploymentName!==w.instance.deploymentName)return e.log.warn(`Subscription event '${n.id}' will not be handled since it was not issued for this Zuplo environment. It was intended for '${n.data.object.metadata.zuplo_created_by_deploymentName}'.`),T.badRequest(t,e,{title:V,detail:`This subscription event is not meant to be handled by this environment's Stripe monetization plugin. It was intended for '${n.data.object.metadata.zuplo_created_by_deploymentName}'. This can happen because of a misconfiguration of Stripe or your Zuplo API.`+le});let u=s.product,c,l,d;if(n.data.object.metadata&&n.data.object.metadata.zuplo_created_by_email&&n.data.object.metadata.zuplo_created_by_sub)l=n.data.object.metadata.zuplo_created_by_email,d=n.data.object.metadata.zuplo_created_by_sub,c=await ia({apiKeyBucketName:r.apiKeyBucketName,stripeProductId:u,stripeSubscriptionId:o,stripeCustomerId:a,managerEmail:l,managerSub:d,context:e});else{let p=await kn.getCustomer({logger:e.log,stripeSecretKey:r.stripeSecretKey,customerId:a});if(!p.email)return e.log.warn(`Invalid Stripe API result. Expected customer '${a}' to contain email address.`),T.badRequest(t,e,{title:V,detail:"Invalid Stripe API result. Expected customer to contain email address."});c=await sa({apiKeyBucketName:r.apiKeyBucketName,stripeProductId:u,stripeSubscriptionId:o,stripeCustomerId:a,managerEmail:p.email,context:e})}if(!c)return T.internalServerError(t,e,{title:V,detail:"No API Key Consumer was created, skipping creation of subscription."});try{let p=Mn(n.data.object.status),m;l&&d&&(m={subscriber:{sub:d,email:l}}),await ua({context:e,stripeProductId:u,stripeSubscriptionId:o,customerKey:c,meteringBucketId:r.meteringBucketId,meteringBucketRegion:r.meteringBucketRegion,customerExternalId:a,subscriptionStatus:p,metadata:m})}catch(p){return await aa({apiKeyBucketName:r.apiKeyBucketName,consumerId:c,context:e}),T.internalServerError(t,e,{title:V,detail:p.message})}return T.ok(t,e,{title:Ve})}i(Mo,"onCustomerSubscriptionCreated");async function Do(t,e,n,r){let o=n.data.object.id;if(!o)return e.log.warn(`Invalid Stripe webhook event. Expected event '${n.id}' to have '.data.object.id' be the subscription ID.`),T.badRequest(t,e,{title:V,detail:"Invalid Stripe webhook event. Expected '.data.object.id' to be the subscription ID."});let s=n.data.object.customer;if(!s)return e.log.warn(`Invalid Stripe webhook event. Expected '.data.object.customer' to be provided by event '${n.id}'`),T.badRequest(t,e,{title:V,detail:"Invalid Stripe webhook event. Expected '.data.object.customer' to be provided"});if(n.data.object.metadata&&n.data.object.metadata.zuplo_created_by_deploymentName&&n.data.object.metadata.zuplo_created_by_deploymentName!==w.instance.deploymentName)return e.log.warn(`Subscription event '${n.id}' will not be handled since it was not issued for this Zuplo environment. It was intended for '${n.data.object.metadata.zuplo_created_by_deploymentName}'.`),T.badRequest(t,e,{title:V,detail:`This 'customer.subscription.deleted' event is not meant to be handled by this environment's Stripe monetization plugin. It was intended for '${n.data.object.metadata.zuplo_created_by_deploymentName}'.This can happen because of a misconfiguration of Stripe or your Zuplo API.`+le});try{let a=await Nt({context:e,stripeSubscriptionId:o,stripeCustomerId:s,meteringBucketId:r.meteringBucketId});await _t({context:e,meteringSubscriptionId:a.id,meteringBucketId:r.meteringBucketId,requestBody:{status:"canceled",planExternalIds:a.planExternalIds}})}catch(a){return T.internalServerError(t,e,{title:V,detail:`The event 'customer.subscription.deleted' could not be processed. ${a.message} This can happen because of a misconfiguration of Stripe or your Zuplo API. `+le})}return T.ok(t,e,{title:Ve})}i(Do,"onCustomerSubscriptionDeleted");async function Ho(t,e,n,r){let o=n.data.object.id;if(!o)return e.log.warn(`Invalid Stripe webhook event. Expected event '${n.id}' to include '.data.object.id' as the subscription ID.`),T.badRequest(t,e,{title:V,detail:"Invalid Stripe webhook event. Expected '.data.object.id' to be the subscription ID."});let s=n.data.object.customer;if(!s)return e.log.warn(`Invalid Stripe webhook event. Expected '.data.object.customer' to be provided by event '${n.id}'`),T.badRequest(t,e,{title:V,detail:"Invalid Stripe webhook event. Expected '.data.object.customer' to be provided"});if(n.data.object.metadata&&n.data.object.metadata.zuplo_created_by_deploymentName&&n.data.object.metadata.zuplo_created_by_deploymentName!==w.instance.deploymentName)return e.log.warn(`Subscription event '${n.id}' will not be handled since it was not issued for this Zuplo environment. It was intended for '${n.data.object.metadata.zuplo_created_by_deploymentName}'.`),T.badRequest(t,e,{title:V,detail:`This 'customer.subscription.updated' event is not meant to be handled by this environment's Stripe monetization plugin. It was intended for '${n.data.object.metadata.zuplo_created_by_deploymentName}'.This can happen because of a misconfiguration of Stripe or your Zuplo API.`+le});if(n.data.previous_attributes){let a=n.data.previous_attributes;if(a.status&&a.status!==n.data.object.status){try{e.log.debug(`Processing subscription status change from Stripe event '${n.id}'.`);let u=await Nt({context:e,stripeSubscriptionId:o,stripeCustomerId:s,meteringBucketId:r.meteringBucketId}),c=Mn(n.data.object.status);await _t({context:e,meteringSubscriptionId:u.id,meteringBucketId:r.meteringBucketId,requestBody:{status:c,planExternalIds:u.planExternalIds}})}catch(u){return T.internalServerError(t,e,{title:V,detail:`The event 'customer.subscription.updated' could not be processed. ${u.message} This can happen because of a misconfiguration of Stripe or your Zuplo API. However, it also could be a temporary condition that happens when a subscription is created due to events being sent out of order. `+le})}return T.ok(t,e,{title:Ve})}if(a.plan&&a.plan.product!==n.data.object.plan.product){try{e.log.debug(`Processing subscription plan change from Stripe event '${n.id}'.`);let u=await Nt({context:e,stripeSubscriptionId:o,stripeCustomerId:s,meteringBucketId:r.meteringBucketId}),c=n.data.object.plan.product,d=(await kn.getUpcomingInvoice({customerId:s,logger:e.log,stripeSecretKey:r.stripeSecretKey})).lines.data.filter(m=>m.proration&&m.price.product===c),p=0;d.length===0?e.log.warn(`The plan change does not include proration details. Subscription event '${n.id}'`):p=parseFloat(d[0].unit_amount_excluding_tax)/d[0].price.unit_amount,await _t({context:e,meteringSubscriptionId:u.id,meteringBucketId:r.meteringBucketId,requestBody:{status:u.status,planExternalIds:[c],prorate:p}})}catch(u){return T.internalServerError(t,e,{title:V,detail:`The event 'customer.subscription.updated' could not be processed. ${u.message} This can happen because of a misconfiguration of Stripe or your Zuplo API. However, it also could be a temporary condition that happens when a subscription is created due to events being sent out of order. `+le})}return T.ok(t,e,{title:Ve})}}return e.log.warn(`This update event '${n.id}' is not supported by Stripe monetization plugin webhook.`),T.badRequest(t,e,{title:V,detail:"This 'customer.subscription.updated' event could not be processed. The Stripe monetization plugin only supports update events for subscription plan changes or subscription status changes."+le})}i(Ho,"onCustomerSubscriptionUpdated");var Uo=class extends Vt{constructor(n){super();this.options=n}static{i(this,"StripeMonetizationPlugin")}registerRoutes(n,r){let o=i(async(c,l)=>{if(this.options.__testMode===!0)return l.log.warn("Received Stripe webhook event of in test mode."),"success";let{meteringBucketId:d,apiKeyBucketName:p}=this.options;if(!d)if(oe.ZUPLO_METERING_SERVICE_BUCKET_ID)d=oe.ZUPLO_METERING_SERVICE_BUCKET_ID;else throw new y("StripeMonetizationPlugin - No 'meteringBucketId' property provided");if(!p)if(oe.ZUPLO_API_KEY_SERVICE_BUCKET_NAME)p=oe.ZUPLO_API_KEY_SERVICE_BUCKET_NAME;else throw new y("StripeMonetizationPlugin - No 'apiKeyBucketName' property provided");if(!w.instance.build.ACCOUNT_NAME)throw new q("Build environment is not configured correctly. Expected 'ACCOUNT_NAME' to be set.");let m=this.options.primaryDataRegion??"us-central1";if(!gd(m))throw new y(`StripeMonetizationPlugin - The value '${m}' on the property 'primaryDataRegion' is invalid.`);let g=await c.json();if(!ra(g))return T.badRequest(c,l,{title:V,detail:"The event payload received was not in the expected format. This can happen because of a misconfiguration of Stripe or your Zuplo API. "+le});switch(l.log.info(`Received Stripe webhook event of type '${g.type}' with ID '${g.id}'.`),g.type){case"customer.subscription.created":return await Mo(c,l,g,{meteringBucketId:d,apiKeyBucketName:p,meteringBucketRegion:m,stripeSecretKey:this.options.stripeSecretKey});case"customer.subscription.updated":return await Ho(c,l,g,{meteringBucketId:d,apiKeyBucketName:p,meteringBucketRegion:m,stripeSecretKey:this.options.stripeSecretKey});case"customer.subscription.deleted":return await Do(c,l,g,{meteringBucketId:d});default:return T.badRequest(c,l,{title:V,detail:`Event '${g.type}' could not be processed because it is not supported by Stripe monetization plugin webhook. This can happen because of a misconfiguration of Stripe or your Zuplo API.`+le})}},"stripeWebhookHandler"),s=ss({inboundPolicies:[new ct({signingSecret:this.options.webhooks.signingSecret,tolerance:this.options.webhooks.tolerance},"stripe-webhook-verification")]});G(this.options.webhooks,"StripeMonetizationPlugin","plugin").required("signingSecret","string").optional("tolerance","number");let a=new J({processors:[re,s],handler:o,gateway:r}),u=new K({label:"PLUGIN_STRIPE_WEBHOOK_ROUTE",methods:["POST"],path:this.options.webhooks.routePath??"/__plugins/stripe/webhooks",systemRouteName:"stripe-plugin"});n.addRoute(u,a.execute)}};function gd(t){return t!==null&&typeof t=="string"&&["us-central1","us-east1","europe-west4"].includes(t)}i(gd,"isMetricsRegion");var la=new WeakMap,ca={},Dn=class{static{i(this,"AmberfloMeteringPolicy")}static setRequestProperties(e,n){la.set(e,n)}};async function da(t,e,n,r){if(!n.statusCodes)throw new y(`Invalid AmberfloMeterInboundPolicy '${r}': options.statusCodes must be an array of HTTP status code numbers`);let o=et(n.statusCodes);return e.addResponseSendingFinalHook(async s=>{if(o.includes(s.status)){let a=la.get(e),u=n.customerId;if(n.customerIdPropertyPath){if(!t.user)throw new A(`Unable to apply customerIdPropertyPath '${n.customerIdPropertyPath}' as request.user is 'undefined'.`);u=Be(t.user,n.customerIdPropertyPath,"customerIdPropertyPath")}let c=a?.customerId??u;if(!c){e.log.error(`Error in AmberfloMeterInboundPolicy '${r}': customerId cannot be undefined`);return}let l=a?.meterApiName??n.meterApiName;if(!l){e.log.error(`Error in AmberfloMeterInboundPolicy '${r}': meterApiName cannot be undefined`);return}let d=a?.meterValue??n.meterValue;if(!d){e.log.error(`Error in AmberfloMeterInboundPolicy '${r}': meterValue cannot be undefined`);return}let p={customerId:c,meterApiName:l,meterValue:d,meterTimeInMillis:Date.now(),dimensions:Object.apply(n.dimensions??{},a?.dimensions)},m=ca[n.apiKey];if(!m){let g=n.apiKey,I=t.headers.get("zm-test-id")??"";m=new $("amberflo-ingest-meter",10,async b=>{try{let x=n.url??"https://app.amberflo.io/ingest",L=await fetch(x,{method:"POST",body:JSON.stringify(b),headers:{"content-type":"application/json","x-api-key":g,"zm-test-id":I}});L.ok||e.log.error(`Unexpected response in AmberfloMeteringInboundPolicy '${r}'. ${L.status}: ${await L.text()}`)}catch(x){throw e.log.error(`Error in AmberfloMeteringInboundPolicy '${r}': ${x.message}`),x}}),ca[g]=m}m.enqueue(p),e.waitUntil(m.waitUntilFlushed())}}),t}i(da,"AmberfloMeteringInboundPolicy");async function Hn(t){let e=new TextEncoder().encode(t),n=await crypto.subtle.digest({name:"SHA-256"},e);return[...new Uint8Array(n)].map(o=>o.toString(16).padStart(2,"0")).join("")}i(Hn,"sha256");var pa=new Map;async function ee(t,e){let n,r=pa.get(t);return r!==void 0?n=r:(n=`zuplo-policy-${await Hn(JSON.stringify({policyName:t,options:e}))}`,pa.set(t,n)),n}i(ee,"getPolicyCacheName");var ma="key-metadata-cache-type";function fd(t,e){return e.authScheme===""?t:t.replace(`${e.authScheme} `,"")}i(fd,"getKeyValue");async function Un(t,e,n,r){if(!n.bucketName)if(oe.ZUPLO_API_KEY_SERVICE_BUCKET_NAME)n.bucketName=oe.ZUPLO_API_KEY_SERVICE_BUCKET_NAME;else throw new y(`ApiKeyInboundPolicy '${r}' - no bucketName property provided`);let o={authHeader:n.authHeader??"authorization",authScheme:n.authScheme??"Bearer",bucketName:n.bucketName,cacheTtlSeconds:n.cacheTtlSeconds??60,allowUnauthenticatedRequests:n.allowUnauthenticatedRequests??!1,disableAutomaticallyAddingKeyHeaderToOpenApi:n.disableAutomaticallyAddingKeyHeaderToOpenApi??!1};if(o.cacheTtlSeconds<60)throw new y(`ApiKeyInboundPolicy '${r}' - minimum cacheTtlSeconds value is 60s, '${o.cacheTtlSeconds}' is invalid`);let s=i(x=>o.allowUnauthenticatedRequests?t:T.unauthorized(t,e,{detail:x}),"unauthorizedResponse"),a=t.headers.get(o.authHeader);if(!a)return s("No Authorization Header");if(!a.toLowerCase().startsWith(o.authScheme.toLowerCase()))return s("Invalid Authorization Scheme");let u=fd(a,o);if(!u||u==="")return s("No key present");let c=await hd(u),l=await ee(r,o),d=new Y(l,e),p=await d.get(c);if(p&&p.isValid===!0)return t.user=p.user,t;if(p&&!p.isValid)return p.typeId!==ma&&F.getLogger(e).error(`ApiKeyInboundPolicy '${r}' - cached metadata has invalid typeId '${p.typeId}'`,p),s("Authorization Failed");let m={key:u},g=await se({retryDelayMs:5,retries:2,logger:F.getLogger(e)},`${w.instance.apiKeyServiceUrl}/v1/$validate/${o.bucketName}`,{method:"POST",headers:{"content-type":"application/json","zp-rid":e.requestId,"zp-dn":w.instance.deploymentName??"unknown","User-Agent":w.instance.systemUserAgent},body:JSON.stringify(m)});if(g.status===401)return e.log.info(`ApiKeyInboundPolicy '${r}' - 401 response from Key Service`),s("Authorization Failed");if(g.status!==200){try{let x=await g.text(),L=JSON.parse(x);e.log.error("Unexpected response from key service",L)}catch{e.log.error("Invalid response from key service")}throw new A(`ApiKeyInboundPolicy '${r}' - unexpected response from Key Service. Status: ${g.status}`)}let I=await g.json(),b={isValid:!0,typeId:ma,user:{sub:I.name,data:I.metadata}};return t.user=b.user,d.put(c,b,o.cacheTtlSeconds),t}i(Un,"ApiKeyInboundPolicy");async function hd(t){let e=new TextEncoder().encode(t),n=await crypto.subtle.digest("SHA-256",e);return Array.from(new Uint8Array(n)).map(s=>s.toString(16).padStart(2,"0")).join("")}i(hd,"hashValue");var ga=Un;var kt=require("jose");var Zo={},yd=i(async(t,e)=>{if(!e.jwkUrl||typeof e.jwkUrl!="string")throw new y("Invalid State - jwkUrl not set");Zo[e.jwkUrl]||(Zo[e.jwkUrl]=(0,kt.createRemoteJWKSet)(new URL(e.jwkUrl),e.headers?{headers:e.headers}:void 0));let{payload:n}=await(0,kt.jwtVerify)(t,Zo[e.jwkUrl],{issuer:e.issuer,audience:e.audience});return n},"jwkVerifier"),bd=i(async(t,e)=>{let n;if(e.secret===void 0)throw new Error("secretVerifier requires secret to be defined");if(typeof e.secret=="string"){let s=new TextEncoder().encode(e.secret);n=new Uint8Array(s)}else n=e.secret;let{payload:r}=await(0,kt.jwtVerify)(t,n,{issuer:e.issuer,audience:e.audience});return r},"secretVerifier"),te=i(async(t,e,n,r)=>{let o=t.headers.get("Authorization"),s="bearer ",a=i(m=>T.unauthorized(t,e,{detail:m}),"unauthorizedResponse");if(!n.jwkUrl&&!n.secret)throw new y(`OpenIdJwtInboundPolicy policy '${r}': One of 'jwkUrl' or 'secret' options are required.`);if(n.jwkUrl&&n.secret)throw new y(`OpenIdJwtInboundPolicy policy '${r}': Only one of 'jwkUrl' and 'secret' options should be provided.`);let u=n.jwkUrl?yd:bd,l=await i(async()=>{if(!o)return a("No authorization header");if(o.toLowerCase().indexOf(s)!==0)return a("Invalid bearer token format for authorization header");let m=o.substring(s.length);if(!m||m.length===0)return a("No bearer token on authorization header");try{return await u(m,n)}catch(g){let I=new URL(t.url);return"code"in g&&g.code==="ERR_JWT_EXPIRED"?e.log.warn(`Expired token used on url: ${I.pathname} `,g):e.log.warn(`Invalid token on: ${t.method} ${I.pathname}`,g),a("Invalid token")}},"getJwtOrRejectedResponse")();if(l instanceof Response)return n.allowUnauthenticatedRequests===!0?t:l;let d=n.subPropertyName??"sub",p=l[d];return p?(t.user={sub:p,data:l},t):a(`Token is not valid, no '${d}' property found.`)},"OpenIdJwtInboundPolicy");var fa=i(async(t,e,n,r)=>te(t,e,{issuer:`https://${n.auth0Domain}/`,audience:n.audience,jwkUrl:`https://${n.auth0Domain}/.well-known/jwks.json`,allowUnauthenticatedRequests:n.allowUnauthenticatedRequests},r),"Auth0JwtInboundPolicy");var ha=i(async(t,e,n)=>{let r=t.headers.get("Authorization"),o="basic ",s=i(l=>T.unauthorized(t,e,{detail:l}),"unauthorizedResponse"),u=await i(async()=>{if(!r)return await s("No Authorization header");if(r.toLowerCase().indexOf(o)!==0)return await s("Invalid Basic token format for Authorization header");let l=r.substring(o.length);if(!l||l.length===0)return await s("No username:password provided");let d=atob(l).normalize(),p=d.indexOf(":");if(p===-1||/[\0-\x1F\x7F]/.test(d))return await s("Invalid basic token value - see https://tools.ietf.org/html/rfc5234#appendix-B.1");let m=d.substring(0,p),g=d.substring(p+1),I=n.accounts.find(b=>b.username===m&&b.password===g);return I||await s("Invalid username or password")},"getAccountOrRejectedResponse")();if(u instanceof Response)return n.allowUnauthenticatedRequests?t:u;let c=u.username;return t.user={sub:c,data:u.data},t},"BasicAuthInboundPolicy");var wd=["cdn-cache-control","cloudflare-cdn-cache-control","surrogate-control","cache-tag","expires"];async function Rd(t){let e=new TextEncoder().encode(t),n=await crypto.subtle.digest("SHA-256",e);return Array.from(new Uint8Array(n)).map(s=>s.toString(16).padStart(2,"0")).join("")}i(Rd,"digestMessage");var Pd=i(async(t,e)=>{let n=[...e.dangerouslyIgnoreAuthorizationHeader===!0?[]:["authorization"],...e.headers??[]],r=[];for(let[d,p]of t.headers.entries())n.includes(d)&&r.push({key:d.toLowerCase(),value:p});r.sort((d,p)=>d.key.localeCompare(p.key));let o=await Rd(JSON.stringify(r)),s=new URL(t.url),a=new URLSearchParams(s.searchParams);a.set("_z-hdr-dgst",o);let u=e.cacheHttpMethods?.includes(t.method.toUpperCase())&&t.method.toUpperCase()!=="GET";u&&a.set("_z-original-method",t.method);let c=`${s.origin}${s.pathname}?${a}`;return new Request(c,{method:u?"GET":t.method})},"createCacheKeyRequest");async function ya(t,e,n,r){let o=await ee(r,n),s=await caches.open(o),a=n?.cacheHttpMethods?.map(l=>l.toUpperCase())??["GET"],u=await Pd(t,n),c=await s.match(u);return c||(e.addEventListener("responseSent",l=>{try{let d=n.statusCodes??[200,206,301,302,303,404,410],p=l.response.clone();if(!d.includes(p.status)||!a.includes(t.method.toUpperCase()))return;let m=n?.expirationSecondsTtl??60,g=new Response(p.body,p);wd.forEach(I=>g.headers.delete(I)),g.headers.set("cache-control",`s-maxage=${m}`),e.waitUntil(s.put(u,g))}catch(d){e.log.error(`Error in caching-inbound-policy '${r}': "${d.message}"`,d)}}),t)}i(ya,"CachingInboundPolicy");var ba=i(async(t,e,n,r)=>{if(!n.method)throw new y(`ChangeMethodInboundPolicy '${r}' options.method must be valid HttpMethod`);return new z(t,{method:n.method})},"ChangeMethodInboundPolicy");var wa=i(async(t,e,n)=>{let r=[...n.exclude??[]],o=new Headers;return r.forEach(a=>{let u=t.headers.get(a);u&&o.set(a,u)}),new z(t,{headers:o})},"ClearHeadersInboundPolicy");var Ra=i(async(t,e,n,r)=>{let o=[...r.exclude??[]],s=new Headers;return o.forEach(u=>{let c=t.headers.get(u);c&&s.set(u,c)}),new Response(t.body,{headers:s,status:t.status,statusText:t.statusText})},"ClearHeadersOutboundPolicy");var Pa=i(async(t,e,n,r)=>{let o=new URL(n.frontendApiUrl.startsWith("https://")||n.frontendApiUrl.startsWith("http://")?n.frontendApiUrl:`https://${n.frontendApiUrl}`),s=new URL(o);return s.pathname="/.well-known/jwks.json",te(t,e,{issuer:o.href.slice(0,-1),jwkUrl:s.toString(),allowUnauthenticatedRequests:n.allowUnauthenticatedRequests},r)},"ClerkJwtInboundPolicy");var Ea=i(async(t,e,n,r)=>{if(!n.userPoolId)throw new y("userPoolId must be set in the options for CognitoJwtInboundPolicy");if(!n.region)throw new y("region must be set in the options for CognitoJwtInboundPolicy");return te(t,e,{issuer:`https://cognito-idp.${n.region}.amazonaws.com/${n.userPoolId}`,jwkUrl:`https://cognito-idp.${n.region}.amazonaws.com/${n.userPoolId}/.well-known/jwks.json`,allowUnauthenticatedRequests:n.allowUnauthenticatedRequests},r)},"CognitoJwtInboundPolicy");var Ia=i(async(t,e,n,r)=>{if(!n.policies||n.policies.length===0)throw new y(`CompositeInboundPolicy '${r}' must have valid policies defined`);let o=X.instance,s=It(n.policies,o?.routeData.policies);return Jr(s)(t,e)},"CompositeInboundPolicy");var xa=i(async(t,e,n,r)=>{let o=t.headers.get("Authorization");if(!o)return T.unauthorized(t,e,{detail:"No authorization header"});let s=Ed(o);if(!s)return T.unauthorized(t,e,{detail:"Failed to parse token from Authorization header"});let a=await ee(r,n),u=new Y(a,e),c=await u.get(s);if(!c){let l=await fetch(n.introspectionUrl,{headers:{Authorization:"Basic "+btoa(`${n.clientId}:${n.clientSecret}`),Accept:"application/jwt","Content-Type":"application/x-www-form-urlencoded"},method:"POST",body:"token="+s+"&token_type_hint=access_token"}),d=await l.text();if(l.status===200)c=d,u.put(s,c,n.cacheDurationSeconds??600);else return l.status>=500?(e.log.error(`Error introspecting token - ${l.status}: '${d}'`),T.internalServerError(t,e,{detail:"Problem encountered authorizing the HTTP request"})):T.unauthorized(t,e)}return t.headers.set("Authorization",`Bearer ${c}`),t},"CurityPhantomTokenInboundPolicy");function Ed(t){return t.split(" ")[0]==="Bearer"?t.split(" ")[1]:null}i(Ed,"getToken");var va=i(async(t,e,n,r)=>(G(n,r).required("projectId","string").optional("allowUnauthenticatedRequests","boolean"),te(t,e,{issuer:`https://securetoken.google.com/${n.projectId}`,audience:n.projectId,jwkUrl:"https://www.googleapis.com/service_accounts/v1/jwk/securetoken@system.gserviceaccount.com",allowUnauthenticatedRequests:n.allowUnauthenticatedRequests},r)),"FirebaseJwtInboundPolicy");var Ta=i(async(t,e,n)=>{let r="application/x-www-form-urlencoded",o="multipart/form-data",s=t.headers.get("content-type")?.toLowerCase();if(!s||![o,r].includes(s))return n&&n.badRequestIfNotFormData?new Response(`Bad Request - expected content-type '${r}' or ${o}`,{status:400,statusText:"Bad Request"}):t;let a=await t.formData();if(n&&n.optionalHoneypotName&&a.get(n.optionalHoneypotName)!=="")return new Response("Bad Request",{status:400,statusText:"Bad Request"});let u={};for(let[d,p]of a)u[d]=p.toString();let c=new Headers(t.headers);return c.set("content-type","application/json"),c.delete("content-length"),new z(t,{body:JSON.stringify(u),headers:c})},"FormDataToJsonInboundPolicy");var lt="__unknown__",Sa=i(async(t,e,n,r)=>{let o={allow:{countries:pt(n.allow?.countries,"allow.countries",r),regionCodes:pt(n.allow?.regionCodes,"allow.regionCode",r),asns:pt(n.allow?.asns,"allow.asOrganization",r)},block:{countries:pt(n.block?.countries,"block.countries",r),regionCodes:pt(n.block?.regionCodes,"block.regionCode",r),asns:pt(n.block?.asns,"block.asOrganization",r)},ignoreUnknown:n.ignoreUnknown!==!1},s=e.incomingRequestProperties.country?.toLowerCase()??lt,a=e.incomingRequestProperties.regionCode?.toLowerCase()??lt,u=e.incomingRequestProperties.asn?.toString()??lt,c=o.ignoreUnknown&&s===lt,l=o.ignoreUnknown&&a===lt,d=o.ignoreUnknown&&u===lt,p=o.allow.countries,m=o.allow.regionCodes,g=o.allow.asns;if(p.length>0&&!p.includes(s)&&!c||m.length>0&&!m.includes(a)&&!l||g.length>0&&!g.includes(u)&&!d)return dt(t,e,r,s,a,u);let I=o.block.countries,b=o.block.regionCodes,x=o.block.asns;return I.length>0&&I.includes(s)&&!c||b.length>0&&b.includes(a)&&!l||x.length>0&&x.includes(u)&&!d?dt(t,e,r,s,a,u):t},"GeoFilterInboundPolicy");function dt(t,e,n,r,o,s){return e.log.debug(`Request blocked by GeoFilterInboundPolicy '${n}' (country: '${r}', regionCode: '${o}', asn: '${s}')`),T.forbidden(t,e,{geographicContext:{country:r,regionCode:o,asn:s}})}i(dt,"blockedResponse");function pt(t,e,n){if(typeof t=="string")return t.split(",").map(r=>r.trim().toLowerCase());if(typeof t>"u")return[];if(Array.isArray(t))return t.map(r=>r.trim().toLowerCase());throw new y(`Invalid '${e}' for GeoFilterInboundPolicy '${n}': '${t}', must be a string or string[]`)}i(pt,"toLowerStringArray");var Oa=i(async(t,e,n)=>{let r=t.user?.data.scope.split(" ")||[];if(!i((s,a)=>a.every(u=>s.includes(u)),"scopeChecker")(r,n.scopes)){let s={code:"UNAUTHORIZED",help_url:"https://zup.fail/UNAUTHORIZED",message:`JWT must have all the following scopes: ${n.scopes}`};return new Response(JSON.stringify(s),{status:401,statusText:"Unauthorized",headers:{"content-type":"application/json"}})}return t},"JWTScopeValidationInboundPolicy");var Aa=i(async(t,e,n,r)=>{let o=e.route.raw().responses;if(!o)return qo(r,t,e,"No responses defined in the OpenAPI document. Add some responses with examples to use this policy.");let s=Object.keys(o),a=[];if(s.length===0)return qo(r,t,e,"No response object defined under responses in the OpenAPI document. Add some response objects with examples to use this policy.");if(s.forEach(u=>{o[u].content&&Object.keys(o[u].content).forEach(l=>{let d=o[u].content[l].examples;d&&Object.keys(d).forEach(m=>{a.push({responseName:u,contentName:l,exampleName:m,exampleValue:d[m]})})})}),a=a.filter(u=>!(n.responsePrefixFilter&&!u.responseName.startsWith(n.responsePrefixFilter)||n.contentType&&u.contentName!==n.contentType||n.exampleName&&u.exampleName!==n.exampleName)),n.random&&a.length>1){let u=Math.floor(Math.random()*a.length);return Ca(a[u])}else return a.length>0?Ca(a[0]):qo(r,t,e,"No examples matching the mocking options found in the OpenAPI document. Add examples to the OpenAPI document matching the options for this policy or change the mocking options to match the examples in the OpenAPI document.")},"MockApiInboundPolicy");function Ca(t){let e=JSON.stringify(t.exampleValue,null,2),n=new Headers;switch(n.set("Content-Type",t.contentName),t.responseName){case"1XX":return new Response(e,{status:100,headers:n});case"2XX":return new Response(e,{status:200,headers:n});case"3XX":return new Response(e,{status:300,headers:n});case"4XX":return new Response(e,{status:400,headers:n});case"5XX":case"default":return new Response(e,{status:500,headers:n});default:return new Response(e,{status:Number(t.responseName),headers:n})}}i(Ca,"generateResponse");var qo=i((t,e,n,r)=>{let o=`Error in policy: ${t} - On route ${e.method} ${n.route.path}. ${r}`;return T.internalServerError(e,n,{detail:o})},"getProblemDetailResponse");var Id="Incoming",xd={logRequestBody:!0,logResponseBody:!0};function La(t){let e={};return t.forEach((n,r)=>{e[r]=n}),e}i(La,"headersToObject");function _a(){return new Date().toISOString()}i(_a,"timestamp");var $o=new WeakMap,vd={};function Ma(t,e){let n=$o.get(t);n||(n=vd);let r=Object.assign({...n},e);$o.set(t,r)}i(Ma,"setMoesifContext");async function Na(t,e){let n=t.headers.get("content-type");if(n&&n.indexOf("json")!==0)try{return await t.clone().json()}catch(o){e.log.error(o)}let r=await t.clone().text();return e.log.debug({textBody:r}),r}i(Na,"readBody");var Td={},Fo;function ka(){if(!Fo)throw new A("Invalid State - no _lastLogger");return Fo}i(ka,"getLastLogger");function Sd(t){let e=Td[t];return e||(e=new $("moesif-inbound",100,async n=>{let r=JSON.stringify(n);ka().debug("posting",r);let o=await fetch("https://api.moesif.net/v1/events/batch",{method:"POST",headers:{"content-type":"application/json","X-Moesif-Application-Id":t},body:r});o.ok||ka().error({status:o.status,body:await o.text()})})),e}i(Sd,"getDispatcher");async function Da(t,e,n,r){Fo=e.log;let o=_a(),s=Object.assign(xd,n);if(!s.applicationId)throw new Error(`Invalid configuration for MoesifInboundPolicy '${r}' - applicationId is required`);let a=s.logRequestBody?await Na(t,e):void 0;return e.addResponseSendingFinalHook(async(u,c)=>{let l=Sd(s.applicationId),d=t.headers.get("true-client-ip"),p=$o.get(e)??{},m={time:o,uri:t.url,verb:t.method,body:a,ip_address:d??void 0,api_version:p.apiVersion,headers:La(t.headers)},g=s.logResponseBody?await Na(u,e):void 0,I={time:_a(),status:u.status,headers:La(u.headers),body:g},b={request:m,response:I,user_id:p.userId??c.user?.sub,session_token:p.sessionToken,company_id:p.companyId,metadata:p.metadata,direction:Id};l.enqueue(b),e.waitUntil(l.waitUntilFlushed())}),t}i(Da,"MoesifInboundPolicy");async function Ha(t,e,n,r){let o=F.getLogger(t),{authApiJWT:s,meteringServiceUrl:a}=w.instance,u;try{let l=await fetch(`${a}/internal/v1/metering/${r}/subscriptions?customerKey=${e}`,{headers:{Authorization:`Bearer ${s}`,"zp-rid":t.requestId},method:"GET"});if(l.ok)u=await l.json();else{let d=await l.json(),p=d.detail??d.title??"Unknown error on quota consumption.";t.log.error(`MonetizationInboundPolicy '${n}' - Error loading subscription. ${l.status} - ${p}`),o.error(`MonetizationInboundPolicy '${n}' - Error loading subscription.${l.status} - ${p}`)}}catch(l){o.error(`MonetizationInboundPolicy '${n}' - Error loading subscription`,l)}return u&&u.data&&u.data.length>0?u.data[0]:void 0}i(Ha,"loadSubscription");async function Ua(t,e,n,r,o){let{authApiJWT:s,meteringServiceUrl:a}=w.instance,u=F.getLogger(t);try{let c=await fetch(`${a}/internal/v1/metering/${r}/subscriptions/${e}/quotas/consume`,{headers:{Authorization:`Bearer ${s}`,"zp-rid":t.requestId},method:"POST",body:JSON.stringify({meters:o})});if(!c.ok){let l=await c.json(),d=l.detail??l.title??"Unknown error on quota consumption.";t.log.error(`MonetizationInboundPolicy '${n}' - Error updating subscription quota. ${c.status} - ${d}`),u.error(`MonetizationInboundPolicy '${n}' - Error updating subscription quota. ${c.status} - ${d}`)}}catch(c){t.log.error(`MonetizationInboundPolicy '${n}' - Error updating subscription quota.`),u.error(`MonetizationInboundPolicy '${n}' - Error updating subscription quota.`,c)}}i(Ua,"consumeSubcriptionQuotas");var Od=new Set(["active","inactive","incomplete","incomplete-expired","trialing","past-due","canceled","unpaid"]);function Zn(t,e){try{let n=[];for(let r in t)typeof t[r]!="number"&&!(Number.isInteger(t[r])&&/^-?\d+$/.test(t[r].toString()))&&n.push(r);if(n.length>0)throw new y(n.length>1?`The values found in these properties are not integers : ${n.join(", ")}`:`The value in property '${n[0]}' is not an integer`)}catch(n){throw n instanceof y?new y(`MonetizationInboundPolicy '${e}' - The property 'meters' is invalid. ${n.message}`):n}}i(Zn,"validateMeters");function Za(t,e){if(t)try{if(t.length===0)throw new y("Must set valid subscription statuses");let n=ze(t),r=[];for(let o of n)Od.has(o)||r.push(o);if(r.length>0)throw new y(`Found the following invalid statuses: ${r.join(", ")}`);return t}catch(n){throw n instanceof y?new y(`MonetizationInboundPolicy '${e}' - The property 'allowedSubscriptionStatuses' is invalid. ${n.message}`):n}else return["active","incomplete","trialing"]}i(Za,"parseAllowedSubscriptionStatuses");function qa(t,e){let n={},r={};for(let o in e)t.hasOwnProperty(o)?n[o]=e[o]:r[o]=e[o];return{metersInSubscription:n,metersNotInSubscription:r}}i(qa,"compareMeters");var qn=class extends ge{static{i(this,"MonetizationInboundPolicy")}static getSubscription(e){return pe.get(e,ht)}static setMeters(e,n){Zn(n,"setMeters"),pe.set(e,Zt,n)}async handler(e,n){G(this.options,this.policyName).optional("allowRequestsWithoutSubscription","boolean").optional("allowRequestsOverQuota","boolean").optional("bucketId","string"),this.options.meterOnStatusCodes||(this.options.meterOnStatusCodes="200-399");let r=this.options.allowRequestsOverQuota??!1,o=et(this.options.meterOnStatusCodes),s=pe.get(n,Zt),a={...this.options.meters,...s};Zn(a,this.policyName);let u=this.options.allowRequestsWithoutSubscription??!1,c=Za(this.options.allowedSubscriptionStatuses,this.policyName);n.addResponseSendingFinalHook(async(b,x,L)=>{let f=pe.get(L,ht);if((this.options.allowRequestsWithoutSubscription??!1)&&!f){L.log.debug(`MonetizationInboundPolicy '${this.policyName}' - No subscription found and property 'allowRequestsWithoutSubscription' is true`);return}if(!this.options.bucketId)if(oe.ZUPLO_METERING_SERVICE_BUCKET_ID)this.options.bucketId=oe.ZUPLO_METERING_SERVICE_BUCKET_ID;else throw new y(`MonetizationInboundPolicy '${this.policyName}' - No bucketId property provided`);let O=pe.get(L,Zt),H={...this.options.meters,...O};if(Zn(H,this.policyName),o.includes(b.status)&&f&&H){L.log.debug(`MonetizationInboundPolicy '${this.policyName}' - Updating subscription '${f.id}' with meters '${JSON.stringify(H)} on response status '${b.status}'`);let{metersInSubscription:h,metersNotInSubscription:R}=qa(f.meters,H);if(R&&Object.keys(R).length>0){let S=Object.keys(R);L.log.warn(`The following meters cannot be applied since they are not present in the subscription: '${S}'`)}await Ua(L,f.id,this.policyName,this.options.bucketId,h)}});let l=e.user;if(!l)return u?e:T.unauthorized(e,n,{detail:"Unable to check subscription for anonymous user"});if(!this.options.bucketId)if(oe.ZUPLO_METERING_SERVICE_BUCKET_ID)this.options.bucketId=oe.ZUPLO_METERING_SERVICE_BUCKET_ID;else throw new y(`MonetizationInboundPolicy '${this.policyName}' - No bucketId property provided`);let{sub:d}=l,p=await Ha(n,d,this.policyName,this.options.bucketId);if(!p)return n.log.warn("No valid subscription found"),u?e:T.unauthorized(e,n,{detail:"No valid subscription found"});if(!c.includes(p.status)&&!u)return n.log.warn(`Subscription '${p.id}' has status '${p.status}' which is not part of the allowed statuses.`),T.unauthorized(e,n,{detail:"No valid subscription found"});c.includes(p.status)&&(n.log.debug(`Loading subscription '${p.id}' for user sub '${d}' to ContextData`),pe.set(n,ht,p));let m=pe.get(n,ht);if(!m)return u?e:(n.log.warn("Subscription is not available for user"),T.paymentRequired(e,n,{detail:"Subscription is not available for user",title:"No Subscription"}));if(m&&Object.keys(m.meters).length===0)return n.log.error(`Quota is not set up for subscription '${m.id}'`),T.tooManyRequests(e,n,{detail:"Quota is not set up for the user's subscription",title:"Quota Exceeded"});let I=Object.keys(a).filter(b=>!Object.keys(m.meters).includes(b));if(I.length>0)return n.log.warn(`The following policy meters are not present in the subscription: ${I.join(", ")}`),T.tooManyRequests(e,n,{detail:`The following policy meters are not present in the subscription: ${I.join(", ")}`,title:"Quota Exceeded"});for(let b of Object.keys(a))if(m.meters[b].available<=0&&!r)return T.tooManyRequests(e,n,{detail:`Quota exceeded for meter '${b}'`,title:"Quota Exceeded"});return e}};var $a=i(async(t,e,n,r)=>te(t,e,{issuer:n.issuerUrl,audience:n.audience,jwkUrl:`${n.issuerUrl}/v1/keys`,allowUnauthenticatedRequests:n.allowUnauthenticatedRequests},r),"OktaJwtInboundPolicy");var Fa=require("jose");var Bo,Ba=i(async(t,e,n,r)=>{if(!Bo)try{Bo=await(0,Fa.importSPKI)(n.verifierKey,"RS256")}catch(o){throw e.log.error("Could not import verifier key"),o}return te(t,e,{issuer:n.authUrl,secret:Bo,allowUnauthenticatedRequests:n.allowUnauthenticatedRequests,subPropertyName:"user_id"},r)},"PropelAuthJwtInboundPolicy");var Wa=Oe(Le());var ja=Oe(Le());var $n=class extends Error{static{i(this,"ValidationError")}constructor(e){super(e)}},zo=class extends $n{static{i(this,"ArgumentUndefinedError")}constructor(e){super(`The argument '${e}' is undefined.`)}},jo=class extends $n{static{i(this,"ArgumentTypeError")}constructor(e,n){super(`The argument '${e}' must be of type '${n}'.`)}};function Cd(t,e){if(es(t))throw new zo(e)}i(Cd,"throwIfUndefinedOrNull");function Mt(t,e){if(Cd(t,e),!ae(t))throw new jo(e,"string")}i(Mt,"throwIfNotString");var Fn=class t{static{i(this,"StandardRedisClient")}static instance;redisClientUrl;clientAuthToken;userAgent;deploymentName;constructor(e,n,r,o){this.redisClientUrl=e,this.clientAuthToken=n,this.deploymentName=r,this.userAgent=o}static initialize(e,n,r,o){return Mt(e,"redisClientUrl"),Mt(n,"clientAuthToken"),t.instance||(t.instance=new t(e,n,r,o)),t.instance}isEnabled(){return this.redisClientUrl!==void 0&&this.clientAuthToken!==void 0}async fetch({url:e,body:n,method:r,requestId:o}){Mt(e,"url");let s=await fetch(`${this.redisClientUrl}${e}`,{method:r,body:n,headers:{"content-type":"application/json",authorization:`Bearer ${this.clientAuthToken}`,"zp-rid":o,"zp-dn":this.deploymentName,"User-Agent":this.userAgent}}),a=s.headers.get("Content-Type")?.includes("application/json")?await s.json():await s.text();if(s.ok)return a;throw s.status===401?new q("Redis client failed with 401: Unauthorized"):new q(`Redis client failed with (${s.status}): ${typeof a=="string"?a:JSON.stringify(a,null,2)}`)}},Bn=class{static{i(this,"InMemoryRedisClient")}keyValueStore;constructor(){this.keyValueStore=new Map}isEnabled(){return!0}fetch({url:e,body:n,method:r}){if(Mt(e,"url"),r==="POST"&&e==="/rate-limit"){let{incrBy:o,expire:s,key:a}=JSON.parse(n),u=Date.now()+s*1e3,c=this.keyValueStore.get(a);c?Date.now()>c.expiresAt?this.keyValueStore.set(a,{value:o,expiresAt:u}):this.keyValueStore.set(a,{value:c.value+o,expiresAt:c.expiresAt}):this.keyValueStore.set(a,{value:o,expiresAt:u});let l=this.keyValueStore.get(a);return Promise.resolve({count:l.value,ttlSeconds:Math.round((l.expiresAt-Date.now())/1e3)})}throw new q("The in-memory redis client only supports /rate-limit calls")}};var Ad=i(t=>{let e=t.headers.get("x-real-ip")??t.headers.get("true-client-ip")??t.headers.get("cf-connecting-ip");if(e)return e;let n=t.headers.get("x-forwarded-for");return n?n.split(",")[0]:"127.0.0.1"},"getRealIP"),jn=i(async t=>({key:`ip-${Ad(t)}`}),"getIP"),Vn=i(async t=>({key:`user-${t.user?.sub??"anonymous"}`}),"getUser"),Gn=i(async()=>({key:"all-2d77ce9d-9a3c-4206-9ab2-668cfd271095"}),"getAll"),zn;function Wn(t,e){let n;if(zn)return zn;if(w.instance.isLocalDevelopment)return e.info("Using in-memory redis client for local development."),n=new Bn,zn=n,n;let{authApiJWT:r,redisURL:o}=w.instance;if(!ae(o))throw new q(`RateLimitInboundPolicy '${t}' - rate limit service URL not configured`);if(!ae(r))throw new q(`RateLimitInboundPolicy '${t}' - service authentication not configured`);if(o&&(n=Fn.initialize(o,r,w.instance.deploymentName??"unknown",w.instance.systemUserAgent)),!n||!n.isEnabled())throw new q(`RateLimitInboundPolicy '${t}' - no redis ('${n}') or redis.isEnabled ('${n?.isEnabled}) is false`);return zn=n,n}i(Wn,"getRedisClient");async function Kn(t,e,n,r,o){let s=Math.floor(e*60);return await n.fetch({url:"/rate-limit",method:"POST",body:JSON.stringify({incrBy:1,expire:s,key:t}),requestId:o})}i(Kn,"getCountAndUpdateExpiry");function Jn(t,e){let n;if(t.rateLimitBy==="function"){if(!t.identifier)throw new y(`RateLimitInboundPolicy '${e}' - If rateLimitBy set to 'function' options.identifier must be specified`);if(!t.identifier.module)throw new y(`RateLimitInboundPolicy '${e}' - If rateLimitBy set to 'function' options.identifier.module must be specified`);if(!t.identifier.export)throw new y(`RateLimitInboundPolicy '${e}' - If rateLimitBy set to 'function' options.identifier.export must be specified`);if(n=t.identifier.module[t.identifier.export],!n||typeof n!="function")throw new y(`RateLimitInboundPolicy '${e}' - Custom rate limit function must be a valid function`)}return i(async(o,s,a)=>{let u=await n(o,s,a);if(!u.key){let c=`RateLimitInboundPolicy '${a}' - Custom rate limit function must return a valid key property '${JSON.stringify(u,null,2)}'`;throw s.log.error(c),new A(c)}return u},"outerFunction")}i(Jn,"wrapUserFunction");var Yn="Retry-After";var za=(0,ja.debug)("zuplo:policies:RateLimitInboundPolicy"),Va=i(async(t,e,n,r)=>{let o=F.getLogger(e),s=i((h,R)=>{let S={};return(!h||h==="retry-after")&&(S[Yn]=R.toString()),T.tooManyRequests(t,e,void 0,S)},"rateLimited"),u={function:Jn(n,r),user:Vn,ip:jn,all:Gn}[n.rateLimitBy],c=await u(t,e,r),l=c.key,d=c.requestsAllowed??n.requestsAllowed,p=c.timeWindowMinutes??n.timeWindowMinutes,m=n.headerMode??"retry-after",g=Wn(r,o),b=`bucket/${w.instance.build.BUILD_ID}/${r}/${l}`,x=await ee(r,n),L=new Y(x,e),f=Kn(b,p,g,o,e.requestId),P;i(async()=>{let h=await f;if(h.count>d){let R=Date.now()+h.ttlSeconds*1e3;L.put(b,R,h.ttlSeconds),za(`RateLimitInboundPolicy '${r}' - returning 429 from redis for '${b}' (async mode)`),P=s(m,h.ttlSeconds)}},"asyncCheck")();let H=await L.get(b);if(H!==void 0&&H>Date.now()){za(`RateLimitInboundPolicy '${r}' - returning 429 from cache for '${b}' (async mode)`);let h=Math.round((H-Date.now())/1e3);return s(m,h)}return e.addResponseSendingHook(async h=>P??h),t},"AsyncRateLimitInboundPolicy");var Ga=(0,Wa.debug)("zuplo:policies:RateLimitInboundPolicy"),Ld="strict",Vo=i(async(t,e,n,r)=>{if((n.mode??Ld)==="async")return Va(t,e,n,r);let s=Date.now(),a=F.getLogger(e),u=i((l,d)=>{if(n.throwOnFailure)throw new q(l,{cause:d});a.error(l,d)},"throwOrLog"),c=i((l,d)=>{let p={};return(!l||l==="retry-after")&&(p[Yn]=d.toString()),T.tooManyRequests(t,e,void 0,p)},"rateLimited");try{let d={function:Jn(n,r),user:Vn,ip:jn,all:Gn}[n.rateLimitBy],p=await d(t,e,r),m=p.key,g=p.requestsAllowed??n.requestsAllowed,I=p.timeWindowMinutes??n.timeWindowMinutes,b=n.headerMode??"retry-after",x=Wn(r,a),f=`bucket/${w.instance.build.BUILD_ID}/${r}/${m}`,P=await Kn(f,I,x,a,e.requestId);return P.count>g?(Ga(`RateLimitInboundPolicy '${r}' - returning 429 from redis for '${f}' (strict mode)`),c(b,P.ttlSeconds)):t}catch(l){return u(l.message,l),t}finally{let l=Date.now()-s;Ga(`RateLimitInboundPolicy '${r}' - latency ${l}ms`)}},"RateLimitInboundPolicy");var Go;function Ka(t){let e=[];for(let[n,r]of t)e.push({name:n,value:r});return e}i(Ka,"headersToNameValuePairs");function _d(t){let e=[];return Object.entries(t).forEach(([n,r])=>{e.push({name:n,value:r})}),e}i(_d,"queryToNameValueParis");function Nd(t){if(t===null)return;let e=parseFloat(t);if(!isNaN(e))return e}i(Nd,"parseIntOrUndefined");var Ja={};async function Ya(t,e,n,r){let o=new Date,s=Date.now();return Go||(Go={name:"zuplo",version:w.instance.build.ZUPLO_VERSION,comment:`zuplo/${w.instance.build.ZUPLO_VERSION}`}),e.addResponseSendingFinalHook(async a=>{try{let u=n.userLabelPropertyPath&&t.user?Be(t.user,n.userLabelPropertyPath,"userLabelPropertyPath"):t.user?.sub,c=n.userEmailPropertyPath&&t.user?Be(t.user,n.userEmailPropertyPath,"userEmailPropertyPath"):void 0,l={clientIPAddress:t.headers.get("true-client-ip")??"",development:n.development!==void 0?n.development:w.instance.isWorkingCopy||w.instance.isLocalDevelopment,group:{label:u,email:c,id:t.user?.sub??"anonymous"},request:{log:{creator:Go,entries:[{startedDateTime:o.toISOString(),time:Date.now()-s,request:{method:t.method,url:n.useFullRequestPath?new URL(t.url).pathname:e.route.path,httpVersion:"2",headers:Ka(t.headers),queryString:_d(t.query)},response:{status:a.status,statusText:a.statusText,headers:Ka(a.headers),content:{size:Nd(t.headers.get("content-length"))}}}]}}},d=Ja[n.apiKey];if(!d){let p=n.apiKey;d=new $("readme-metering-inbound-policy",10,async m=>{try{let g=n.url??"https://metrics.readme.io/request",I=await fetch(g,{method:"POST",body:JSON.stringify(m),headers:{"content-type":"application/json",authorization:`Basic ${btoa(p+":")}`}});I.status!==202&&e.log.error(`Unexpected response in ReadmeMeteringInboundPolicy '${r}'. ${I.status}: '${await I.text()}'`)}catch(g){throw e.log.error(`Error in ReadmeMeteringInboundPolicy '${r}': '${g.message}'`),g}}),Ja[p]=d}d.enqueue(l),e.waitUntil(d.waitUntilFlushed())}catch(u){e.log.error(u)}}),t}i(Ya,"ReadmeMetricsInboundPolicy");var Qa=i(async(t,e,n,r)=>{let o=n?.headers;if(!o||!Array.isArray(o)||o.length===0)throw new y(`RemoveHeadersInboundPolicy '${r}' options.headers must be a non-empty string array of header names`);let s=new Headers(t.headers);return o.forEach(u=>{s.delete(u)}),new z(t,{headers:s})},"RemoveHeadersInboundPolicy");var Xa=i(async(t,e,n,r,o)=>{let s=r?.headers;if(!s||!Array.isArray(s)||s.length===0)throw new y(`RemoveHeadersOutboundPolicy '${o}' options.headers must be a non-empty string array of header names`);let a=new Headers(t.headers);return s.forEach(c=>{a.delete(c)}),new Response(t.body,{headers:a,status:t.status,statusText:t.statusText})},"RemoveHeadersOutboundPolicy");var eu=i(async(t,e,n,r)=>{let o=n.params;if(!o||!Array.isArray(o)||o.length===0)throw new y(`RemoveQueryParamsInboundPolicy '${r}' options.params must be a non-empty string array of header names`);let s=new URL(t.url);return o.forEach(u=>{s.searchParams.delete(u)}),new z(s.toString(),t)},"RemoveQueryParamsInboundPolicy");var tu=i(async(t,e,n,r)=>{let o=await t.text(),s=r.mode==="regexp"?new RegExp(r.match,"gm"):r.match,a=o.replaceAll(s,r.replaceWith);return new Response(a,{headers:t.headers,status:t.status,statusText:t.statusText})},"ReplaceStringOutboundPolicy");var nu=i(()=>new Response("Maximum request size exceeded",{status:413,statusText:"Payload Too Large"}),"payloadTooLarge"),ru=i(async(t,e,n)=>{let r=n.trustContentLengthHeader??!1;if(["GET","HEAD"].includes(t.method))return t;let o=t.headers.get("content-length"),s=o!==null?parseInt(o):void 0;return s&&!isNaN(s)&&s>n.maxSizeInBytes?nu():s&&r?t:(await t.clone().text()).length>n.maxSizeInBytes?nu():t},"RequestSizeLimitInboundPolicy");function ou(t,e,n){return`_${Ue(t+"_"+e+"_"+n)}`}i(ou,"getRawOperationDataIdentifierName");function Qn(t,e,n,r){return`_${Ue(t.toLowerCase())}_`+e.toLowerCase()+"_"+n.toLowerCase()+`_${r.toLowerCase()}`}i(Qn,"getIdForParameterSchema");function Xn(t,e,n){return`_${Ue(t.toLowerCase())}_`+e.toLowerCase()+`_rb_${Ue(n.toLowerCase())}`}i(Xn,"getIdForRequestBodySchema");function iu(t,e){return`_${Ue(t)}__${Ue(e)}`}i(iu,"getIdForRefSchema");function Ue(t){let e=[];for(let n=0;n<t.length;n++){let r=t.charCodeAt(n);r>="0".charCodeAt(0)&&r<="9".charCodeAt(0)||r>="A".charCodeAt(0)&&r<="Z".charCodeAt(0)||r>="a".charCodeAt(0)&&r<="z".charCodeAt(0)?e.push(t.charAt(n)):e.push("_")}return e.join("")}i(Ue,"sanitizedIdentifierName");var mt=i(t=>{let e=t.route.raw();return e.parameters?e.parameters.map(r=>({name:r.name,location:r.in,required:r.required,deprecated:r.deprecated,allowEmptyValue:r.allowEmptyValue})):[]},"getParametersForOperation"),gt=i((t,e,n,r,o)=>{let s=[],a=!0,u=[];return t.forEach(c=>{let l=c.required||o==="path";if(l&&!e[c.name])a=!1,s.push(`Required ${o} parameter '${c.name}' not found`);else if(!(!l&&!e[c.name])){let d=Qn(n,r,o,c.name),p=X.instance.schemaValidator[d],m=p(e[c.name]),g=Wo(p.errors);m||(a=!1,u.push(`${o} parameter: ${c.name} : ${e[c.name]}`),s.push(`Invalid value for ${o} parameter: '${c.name}' ${g.join(", ")}`))}}),{isValid:a,invalidValues:u,errors:s}},"validateParameters"),he=i((t,e,n,r,o)=>{r?t.log[e](n,r,o):t.log[e](n,o)},"logErrors"),ye=i(t=>t==="log-only"||t==="reject-and-log","shouldLog"),be=i(t=>t==="reject-only"||t==="reject-and-log","shouldReject"),Wo=i(t=>t?.map(e=>e.instancePath===void 0||e.instancePath===""?e.message??"Unknown validation error":e.instancePath.replace("/","")+" "+e.message)??["Unknown validation error"],"getErrorsFromValidator");async function su(t,e,n){if(!n.validateBody||n.validateBody==="none")return;let r;try{r=await e.clone().json()}catch(g){let I=`Error in request body for method : ${e.method} in route: ${t.route.path} with content-type: ${e.headers.get("Content-Type")}`,b=T.badRequest(e,t,{detail:`${I}, see errors property for more details`,errors:`${g}`});if(ye(n.validateBody)&&he(t,n.logLevel??"info",I,[r],g),be(n.validateBody))return b}if(!e.headers.get("Content-Type")){let g=`No content-type header defined in incoming request to ${e.method} in route: ${t.route.path}`,I=T.badRequest(e,t,{detail:g});return ye(n.validateBody)&&he(t,n.logLevel??"info",g,[r],[g]),be(n.validateBody)?I:void 0}let o=e.headers.get("Content-Type"),s=o.indexOf(";");s>-1&&(o=o.substring(0,s));let a=Xn(t.route.path,e.method,o),u=X.instance.schemaValidator[a];if(!u){let g=`No schema defined for method: ${e.method} in route: ${t.route.path} with content-type: ${e.headers.get("Content-Type")}`,I=T.badRequest(e,t,{detail:g});return ye(n.validateBody)&&he(t,n.logLevel??"info",g,[r],[g]),be(n.validateBody)?I:void 0}if(u(r))return;let l=u.errors,d="Request body did not pass validation",p=Wo(l),m=T.badRequest(e,t,{detail:`${d}, see errors property for more details`,errors:p});if(ye(n.validateBody)&&he(t,n.logLevel??"info",d,[r],p),be(n.validateBody))return m}i(su,"handleBodyValidation");function au(t,e,n){if(!n.validateHeaders||n.validateHeaders==="none")return;let r={};e.headers.forEach((a,u)=>{r[u]=a});let o=mt(t),s=gt(o.filter(a=>a.location==="header"),r,t.route.path,e.method.toLowerCase(),"header");if(!s.isValid){let a="Header validation failed",u=T.badRequest(e,t,{detail:`${a}, see errors property for more details`,errors:s.errors});if(ye(n.validateHeaders)&&he(t,n.logLevel??"info",a,s.invalidValues,s.errors),be(n.validateHeaders))return u}}i(au,"handleHeadersValidation");function uu(t,e,n){if(!n.validatePathParameters||n.validatePathParameters==="none")return;let r=mt(t),o=gt(r.filter(s=>s.location==="path"),e.params,t.route.path,e.method.toLowerCase(),"path");if(!o.isValid){let s="Path parameters validation failed",a=T.badRequest(e,t,{detail:`${s}, see errors property for more details`,errors:o.errors});if(ye(n.validatePathParameters)&&he(t,n.logLevel??"info",s,o.invalidValues,o.errors),be(n.validatePathParameters))return a}}i(uu,"handlePathParameterValidation");function cu(t,e,n){if(!n.validateQueryParameters||n.validateQueryParameters==="none")return;let r=mt(t),o=gt(r.filter(s=>s.location==="query"),e.query,t.route.path,e.method.toLowerCase(),"query");if(!o.isValid){let s="Query parameters validation failed",a=T.badRequest(e,t,{detail:`${s}, see errors property for more details`,errors:o.errors});if(ye(n.validateQueryParameters)&&he(t,n.logLevel??"info",s,o.invalidValues,o.errors),be(n.validateQueryParameters))return a}}i(cu,"handleQueryParameterValidation");var Ko=i(async(t,e,n)=>{let r=cu(e,t,n);if(r!==void 0||(r=uu(e,t,n),r!==void 0)||(r=au(e,t,n),r!==void 0))return r;let o=await su(e,t,n);return o!==void 0?o:t},"RequestValidationInboundPolicy"),lu=Ko;var du=i(async(t,e,n,r)=>{if(n.origins===void 0||n.origins.length===0)throw new y(`RequireOriginInboundPolicy '${r}' configuration error - no allowed origins specified`);let o=typeof n.origins=="string"?n.origins.split(","):n.origins;o=o.map(a=>a.trim());let s=t.headers.get("origin");if(!s||!o.includes(s)){let a=n.failureDetail??"Forbidden";return T.forbidden(t,e,{detail:a})}return t},"RequireOriginInboundPolicy");var pu=i(async(t,e,n)=>new z(t,{body:n.body}),"SetBodyInboundPolicy");var mu=i(async(t,e,n,r)=>{let o=n.headers;if(!o||!Array.isArray(o)||o.length==0)throw new y(`SetHeadersInboundPolicy '${r}' options.headers must be a valid array of { name, value }`);let s=new Headers(t.headers);return o.forEach(u=>{if(!u.name||u.name.length===0)throw new y(`SetHeadersInboundPolicy '${r}' each option.headers[] entry must have a name property`);let c=u.overwrite===void 0?!0:u.overwrite;(!s.has(u.name)||c)&&s.set(u.name,u.value)}),new z(t,{headers:s})},"SetHeadersInboundPolicy");var gu=i(async(t,e,n,r,o)=>{let s=r.headers;if(!s||!Array.isArray(s)||s.length==0)throw new y(`SetHeadersOutboundPolicy '${o}' options.headers must be a valid array of { name, value }`);let a=new Headers(t.headers);return s.forEach(c=>{if(!c.name||c.name.length===0)throw new y(`SetHeadersOutboundPolicy '${o}' each option.headers[] entry must have a name property`);let l=c.overwrite===void 0?!0:c.overwrite;(!a.has(c.name)||l)&&a.set(c.name,c.value)}),new Response(t.body,{headers:a,status:t.status,statusText:t.statusText})},"SetHeadersOutboundPolicy");var fu=i(async(t,e,n,r)=>{let o=n.params;if(!o||!Array.isArray(o)||o.length==0)throw new y(`SetQueryParamsInboundPolicy '${r}' options.params must be a valid array of { name, value }`);let s=new URL(t.url);return o.forEach(u=>{if(!u.name||u.name.length===0)throw new y(`SetQueryParamsInboundPolicy '${r}' each option.params[] entry must have a name property`);let c=u.overwrite===void 0?!0:u.overwrite;(!s.searchParams.has(u.name)||c)&&s.searchParams.set(u.name,u.value)}),new z(s.toString(),t)},"SetQueryParamsInboundPolicy");var hu=i(async(t,e,n,r,o)=>{if(!r.status||isNaN(r.status)||r.status<100||r.status>599)throw new Error(`Invalid SetStatusOutboundPolicy '${o}' - status must be a valid number between 100 and 599, not '${r.status}'`);return new Response(t.body,{headers:t.headers,status:r.status,statusText:r.statusText??t.statusText})},"SetStatusOutboundPolicy");var kd=i(async t=>new Promise(n=>{setTimeout(n,t)}),"sleep"),yu=i(async(t,e,n,r)=>{if(!n||n.sleepInMs===void 0||isNaN(n.sleepInMs))throw new y(`SleepInboundPolicy '${r} must have a valid options.sleepInMs value`);return await kd(n.sleepInMs),t},"SleepInboundPolicy");var bu=i(async(t,e,n,r)=>{G(n,r).required("secret","string").optional("allowUnauthenticatedRequests","boolean").optional("requiredClaims","object");let o={secret:n.secret,allowUnauthenticatedRequests:n.allowUnauthenticatedRequests??!1},s=await te(t,e,o,r);if(s instanceof Response)return s;if(!(s instanceof z))throw new q("Invalid State - SupabaseJwtInboundPolicy encountered a non-response that wasn't a ZuploRequest type')");let a=n.requiredClaims;if(!a)return s;let u=t.user?.data.app_metadata;if(!u)throw new A(`SupabaseJwtInboundPolicy policy '${r}' - has requiredClaims but the JWT token had no app_metadata property`);let c=Object.keys(a),l=[];return c.forEach(d=>{let p=a[d];Array.isArray(p)?p.includes(u[d])||l.push(d):p!==u[d]&&l.push(d)}),l.length>0?T.unauthorized(t,e,{detail:`Invalid JWT token - missing valid claims ${l.join(", ")}`}):s},"SupabaseJwtInboundPolicy");var wu=i(async(t,e,n,r)=>{G(n,r).required("activeDirectoryTenantId","string").required("activeDirectoryClientId","string").required("activeDirectoryClientSecret","string").optional("tokenRetries","number").optional("expirationOffsetSeconds","number");let o=await ee(r,n),s=new Y(o,e),a=await s.get(r);if(!a){let u=await Md(n,e);s.put(r,u.access_token,u.expires_in-(n.expirationOffsetSeconds??300)),a=u.access_token}return t.headers.set("Authorization",`Bearer ${a}`),t},"UpstreamAzureAdServiceAuthInboundPolicy");async function Md(t,e){let n=new URLSearchParams({client_id:t.activeDirectoryClientId,scope:`${t.activeDirectoryClientId}/.default`,client_secret:t.activeDirectoryClientSecret,grant_type:"client_credentials"}),r=await se({retries:t.tokenRetries??3,retryDelayMs:10},`https://login.microsoftonline.com/${t.activeDirectoryTenantId}/oauth2/v2.0/token`,{headers:{"content-type":"application/x-www-form-urlencoded"},method:"POST",body:n});if(r.status!==200){try{let s=await r.text();e.log.error("Could not get token from Azure AD",s)}catch{}throw new A("Could not get token from Azure AD")}let o=await r.json();if(o&&typeof o=="object"&&"access_token"in o&&typeof o.access_token=="string"&&"expires_in"in o&&typeof o.expires_in=="number")return{access_token:o.access_token,expires_in:o.expires_in};throw new A("Response returned from Azure AD is not in the expected format.")}i(Md,"getAccessToken");var Ru="https://accounts.google.com/o/oauth2/token",Jo,Pu=i(async(t,e,n,r)=>{G(n,r).required("serviceAccountJson","string"),Jo||(Jo=await ue.init(n.serviceAccountJson));let o={scope:["https://www.googleapis.com/auth/cloud-platform","https://www.googleapis.com/auth/firebase.database","https://www.googleapis.com/auth/firebase.messaging","https://www.googleapis.com/auth/identitytoolkit","https://www.googleapis.com/auth/userinfo.email"].join(" ")},s=await ee(r,n),a=new Y(s,e),u=await a.get(r);if(!u){let c=await Pe({serviceAccount:Jo,audience:Ru,payload:o}),l=await ln(Ru,c,{retries:n.tokenRetries??3,retryDelayMs:10});if(!l.access_token)throw new A("Invalid OAuth response from Firebase");u=l.access_token,a.put(r,u,(l.expires_in??3600)-(n.expirationOffsetSeconds??300))}return t.headers.set("Authorization",`Bearer ${u}`),t},"UpstreamFirebaseAdminAuthInboundPolicy");var Dd="https://identitytoolkit.googleapis.com/google.identity.identitytoolkit.v1.IdentityToolkit",Hd=["acr","amr","at_hash","aud","auth_time","azp","cnf","c_hash","exp","iat","iss","jti","nbf","nonce"],Yo,Eu=i(async(t,e,n,r)=>{if(G(n,r).required("serviceAccountJson","string").required("webApiKey","string").optional("developerClaims","object").optional("userId","string").optional("userIdPropertyPath","string"),!n.userId&&!n.userIdPropertyPath)throw new y(`Either 'userId' or 'userIdPropertyPath' options must be set on policy '${r}'.`);let o={};if(typeof n.developerClaims<"u"){for(let p in n.developerClaims)if(Object.prototype.hasOwnProperty.call(n.developerClaims,p)){if(Hd.indexOf(p)!==-1)throw new y(`Developer claim "${p}" is reserved and cannot be specified.`);o[p]=n.developerClaims[p]}}Yo||(Yo=await ue.init(n.serviceAccountJson));let s=n.userId;if(!s&&!n.userIdPropertyPath){if(!t.user)throw new A("Unable to set userId for upstream auth policy as request.user is 'undefined'. Do you have an authentication policy before this policy?.");s=t.user?.sub}else if(n.userIdPropertyPath){if(!t.user)throw new A(`Unable to apply userIdPropertyPath '${n.userIdPropertyPath}' as request.user is 'undefined'. Do you have an authentication policy before this policy?`);s=Be(t.user,n.userIdPropertyPath,"userIdPropertyPath")}if(!s)throw new A(`Unable to determine user from for the policy ${r}`);let a=await ee(r,n),u=new Y(a,e),c={uid:s,claims:o},l=await Hn(JSON.stringify(c)),d=await u.get(l);if(!d){let p=await Pe({serviceAccount:Yo,audience:Dd,payload:c}),m=`https://identitytoolkit.googleapis.com/v1/accounts:signInWithCustomToken?key=${n.webApiKey}`,g=await ys(m,p,{retries:n.tokenRetries??3,retryDelayMs:10});if(!g.idToken)throw new A("Invalid token response from Firebase");d=g.idToken,u.put(l,d,(g.expiresIn?parseInt(g.expiresIn):3600)-(n.expirationOffsetSeconds??300))}return t.headers.set("Authorization",`Bearer ${d}`),t},"UpstreamFirebaseUserAuthInboundPolicy");var Qo,Iu=i(async(t,e,n,r)=>{G(n,r).required("audience","string").required("serviceAccountJson","string"),Qo||(Qo=await ue.init(n.serviceAccountJson));let o=await Pe({serviceAccount:Qo,audience:n.audience});return t.headers.set("Authorization",`Bearer ${o}`),t},"UpstreamGcpJwtInboundPolicy");var xu="https://www.googleapis.com/oauth2/v4/token",Xo,vu=i(async(t,e,n,r)=>{G(n,r).required("serviceAccountJson","string").optional("audience","string").optional("tokenRetries","number").optional("expirationOffsetSeconds","number"),Xo||(Xo=await ue.init(n.serviceAccountJson));let o={};if(n.scopes&&n.audience)throw new y("UpstreamGcpServiceAuthInboundPolicy - Either the 'scopes' or the 'audience' property can be set, not both.");if(n.scopes)try{let c=ze(n.scopes);o.scope=c.join(" ")}catch(c){throw c instanceof y?new y(`UpstreamGcpServiceAuthInboundPolicy - The property 'scopes' is invalid. ${c.message}`):c}n.audience&&(o.target_audience=`${n.audience}`);let s=await ee(r,n),a;n.useMemoryCacheOnly?a=new We(s):a=new Y(s,e);let u=await a.get(r);if(!u){let c=await Pe({serviceAccount:Xo,audience:xu,payload:o}),l=await ln(xu,c,{retries:n.tokenRetries??3,retryDelayMs:10});if(n.audience){if(!l.id_token)throw new A("Invalid token response from GCP");u=l.id_token}else{if(!l.access_token)throw new A("Invalid token response from GCP");u=l.access_token}a.put(r,u,3600-(n.expirationOffsetSeconds??300))}return t.headers.set("Authorization",`Bearer ${u}`),t},"UpstreamGcpServiceAuthInboundPolicy");var Tu=i(async(t,e,n)=>{let r=t.clone(),o;try{o=await r.json()}catch{return T.badRequest(t,e,{detail:"Invalid JSON body - expected well-formed JSON document"})}if(n.validator(o))return t;let{errors:a}=n.validator;if(!a)throw new q("Invalid state - validator error object is undefined even though validation failed.");let u=a.map(c=>c.instancePath===void 0||c.instancePath===""?"Body "+c.message:c.instancePath.replace("/","")+" "+c.message);return T.badRequest(t,e,{detail:"Incoming body did not pass schema validation",errors:u})},"ValidateJsonSchemaInbound");var Au=Oe(Cu());var er=class extends Te{static{i(this,"XmlToJsonOutboundPolicy")}parser;parseOnStatusCodes;constructor(e,n){super(e,n),G(this.options,this.policyName).optional("removeNSPrefix","boolean").optional("ignoreProcessingInstructions","boolean").optional("ignoreDeclarations","boolean").optional("ignoreAttributes","boolean").optional("stopNodes","array").optional("attributeNamePrefix","string").optional("textNodeName","string").optional("trimValues","boolean"),this.parseOnStatusCodes=e.parseOnStatusCodes?et(e.parseOnStatusCodes):void 0,this.parser=new Au.XMLParser({removeNSPrefix:e?.removeNSPrefix??!0,ignorePiTags:e?.ignoreProcessingInstructions??!0,ignoreDeclaration:e?.ignoreDeclarations??!0,ignoreAttributes:e?.ignoreAttributes??!0,stopNodes:e?.stopNodes??[],attributeNamePrefix:e?.attributeNamePrefix??"@_",textNodeName:e?.textNodeName??"#text",trimValues:e?.trimValues??!0})}async handler(e,n,r){if(this.parseOnStatusCodes&&!this.parseOnStatusCodes.includes(e.status))return e;let o;try{let u=await e.text();o=this.parser.parse(u)}catch(u){let c=`XmlToJsonOutboundPolicy - Error parsing XML contents in policy '${this.policyName}'.`;throw r.log.error(c,u),new A(c)}let s=new Headers(e.headers);return s.set("content-type","application/json"),new Response(JSON.stringify(o),{status:e.status,statusText:e.statusText,headers:s})}};var tr=class{static{i(this,"ServiceProviderImpl")}services=new Map;addService(e,n){if(this.services.get(e))throw new q(`A service with the name ${e} already exists -- you cannot have duplicate services`);this.services.set(e,n)}getService(e){return this.services.get(e)}};var nr=class{static{i(this,"BackgroundDispatcher")}#e;constructor(e,n){if(!n||n.msDelay===void 0)throw new Error("BackgroundDispatcher: options.msDelay is required");this.#e=new $(n.name??"",n.msDelay,e)}enqueue=e=>{this.#e.enqueue(e),Rn().waitUntil(this.#e.waitUntilFlushed())}};var rr=class{static{i(this,"BackgroundLoader")}#e=new Map;#t;#n;#r=new Map;constructor(e,n){this.#t=e,this.#n=n*1e3}#o(e){let n=this.#e.get(e);n&&(n.expiry=new Date(Date.now()+this.#n))}#i(e){return e.expiry<=new Date}async get(e){let n=this.#e.get(e);return n&&!this.#i(n)?(this.#s(e),n.data):this.#a(e)}async#s(e){let n=this.#r.get(e);if(n!==void 0)return n.wrap();let r=this.#a(e);return this.#r.set(e,new Dt(r)),await new Dt(r).wrap(),this.#r.delete(e),r}async#a(e){let n=this.#r.get(e);if(n===void 0){let r=this.#t(e);n=new Dt(r),this.#o(e);let o=await n.wrap();this.#e.set(e,{data:o,expiry:new Date(Date.now()+this.#n)})}return n.wrap()}},Dt=class{static{i(this,"WrappedPromise")}#e;#t=[];#n;#r;constructor(e){Rn().waitUntil(e),this.#e=e,this.#e.then(r=>{this.#t.forEach(o=>o.resolve(r)),this.#n=r}).catch(r=>{this.#t.forEach(o=>o.reject(r)),this.#r=r})}async wrap(){if(this.#r)throw this.#r;if(this.#n)return this.#n;let e=this;return new Promise((r,o)=>{e.#t.push({resolve:r,reject:o})})}};var ti=["sha-1","sha-256","sha-384","sha-512"],or=class{static{i(this,"BaseCryptoBeta")}};var ir=class extends or{static{i(this,"WorkerCryptoBeta")}async digest(e,n){if(!ti.includes(e.toLowerCase()))throw new A(`Algorithm ${e} is not supported. Try using ${ti.join(", ")}`);let r=new TextEncoder().encode(n),o=await crypto.subtle.digest(e,r);return Array.from(new Uint8Array(o)).map(u=>u.toString(16).padStart(2,"0")).join("")}};var sr=class{constructor(e){this.context=e}static{i(this,"BaseKeyValueStore")}};var ar=class extends sr{static{i(this,"WorkerKeyValueStore")}#e;constructor(e){super(e);let n=w.instance.runtime.ZUPLO_KV;if(!n)throw new Ht("The Key Value Store feature is not enabled for this project.");this.#e=n}put(e,n,r){if(typeof e!="string")throw new y("value must be of type string");return this.#e.put(e,n,r?{expirationTtl:r.expirationSecondsTtl}:void 0)}get(e,n){return this.#e.get(e,{type:"text",cacheTtl:n?.cacheSecondsTtl})}delete(e){return this.#e.delete(e)}};
|
|
77
|
+
`+d});let p=Math.floor((typeof u=="number"?u:Date.now())/1e3)-n.timestamp;if(o>0&&p>o)throw new Te(e,t,{message:"Timestamp outside the tolerance zone"});return!0}i(dd,"validateComputedSignature");function pd(t,e){return typeof t!="string"?null:t.split(",").reduce((n,r)=>{let o=r.split("=");return o[0]==="t"&&(n.timestamp=parseInt(o[1],10)),o[0]===e&&n.signatures.push(o[1]),n},{timestamp:-1,signatures:[]})}i(pd,"parseHeader");function md(t,e){if(t.length!==e.length)return!1;let n=t.length,r=0;for(let o=0;o<n;++o)r|=t.charCodeAt(o)^e.charCodeAt(o);return r===0}i(md,"secureCompare");async function gd(t,e){let n=new TextEncoder,r=await crypto.subtle.importKey("raw",n.encode(e),{name:"HMAC",hash:{name:"SHA-256"}},!1,["sign"]),o=await crypto.subtle.sign("hmac",r,n.encode(t)),s=new Uint8Array(o),a=new Array(s.length);for(let u=0;u<s.length;u++)a[u]=No[s[u]];return a.join("")}i(gd,"computeHMACSignatureAsync");var No=new Array(256);for(let t=0;t<No.length;t++)No[t]=t.toString(16).padStart(2,"0");function G(t,e,n="policy"){let r=`${n} '${e}'`;if(!Be(t))throw new y(`Options on ${r} is expected to be an object. Received the type '${typeof t}'.`);let o=i((u,c,l)=>{let d=t[u];if(!(l&&d===void 0)){if(d===void 0)throw new y(`Value of '${String(u)}' on ${r} is required, but no value was set. If using an environment variable, check that it is set correctly.`);if(c==="array"&&Array.isArray(d))throw new y(`Value of '${String(u)}' on ${r} must be an array. Received type ${typeof d}.`);if(typeof d!==c)throw new y(`Value of '${String(u)}' on ${r} must be of type ${c}. Received type ${typeof d}.`);if(typeof d=="string"&&d.length===0)throw new y(`Value of '${String(u)}' on ${r} must be a non-empty string. The value received is empty. If using an environment variable, check that it is set correctly.`);if(typeof d=="number"&&isNaN(d))throw new y(`Value of '${String(u)}' on ${r} must be valid number. If using an environment variable, check that it is set correctly.`)}},"validate"),s=i((u,c)=>(o(u,c,!0),{optional:s,required:a}),"optional"),a=i((u,c)=>(o(u,c,!1),{optional:s,required:a}),"required");return{optional:s,required:a}}i(G,"optionValidator");var lt=class extends fe{static{i(this,"StripeWebhookVerificationInboundPolicy")}async handler(e,n){G(this.options,this.policyName).required("signingSecret","string").optional("tolerance","number");let r=e.headers.get("stripe-signature");try{let o=await e.clone().text();await na(o,r,this.options.signingSecret)}catch(o){let s=o.message;if(o.type&&o.type==="StripeSignatureVerificationError"){let a=o.message,c=/Note:(.*)/g.exec(a);s=c?c[1].trim():a,s.startsWith("No signatures found matching the expected signature for payload")&&(s="The Stripe Webhook Signature Secret provided is incorrect and does not match to the signature on the event received. Make sure your Zuplo configuration is correct.")}return n.log.error("Error validating stripe webhook",s),v.badRequest(e,n,{title:"Webhook Error",detail:s})}return e}};function ra(t){return t!==null&&typeof t=="object"&&"id"in t&&ae(t.id)&&"type"in t&&ae(t.type)}i(ra,"isStripeWebhookEvent");var fd={getSubscription:async({subscriptionId:t,stripeSecretKey:e,logger:n})=>{let r=await fetch(`https://api.stripe.com/v1/subscriptions/${t}`,{headers:{Authorization:`Bearer ${e}`}}),o=await r.json();if(r.status!==200){let s="Error retrieving subscription from Stripe API.";throw n.error(s,o),new A(s)}return o},getCustomer:async({customerId:t,stripeSecretKey:e,logger:n})=>{let r=await fetch(`https://api.stripe.com/v1/customers/${t}`,{headers:{Authorization:`Bearer ${e}`}}),o=await r.json();if(r.status!==200){let s="Error retrieving customer from Stripe API.";throw n.error(s,o),new A(s)}return o},getUpcomingInvoice:async({customerId:t,stripeSecretKey:e,logger:n})=>{let r=await fetch(`https://api.stripe.com/v1/invoices/upcoming?customer=${t}`,{headers:{Authorization:`Bearer ${e}`}}),o=await r.json();if(r.status!==200){let s="Error retrieving customer upcoming invoice from Stripe API.";throw n.error(s,o),new A(s)}return o}},Mn=fd;var ko="https://api-key-management-service-eq7z4lly2a-ue.a.run.app",oa="My API Key";async function ia({apiKeyBucketName:t,stripeSubscriptionId:e,stripeProductId:n,stripeCustomerId:r,managerEmail:o,managerSub:s,context:a}){let{authApiJWT:u}=w.instance,c=new URL(`/v1/buckets/${t}/consumers`,ko);c.searchParams.set("with-api-key","true");let l=crypto.randomUUID(),d={name:l,description:oa,tags:{subscriptionExternalId:e,planExternalIds:[n]},metadata:{stripeSubscriptionId:e,stripeProductId:n,stripeCustomerId:r},managers:[{sub:s,email:o}]},p=await se({retryDelayMs:5,retries:2,logger:B.getLogger(a)},c.toString(),{method:"POST",headers:{Authorization:`Bearer ${u}`,"content-type":"application/json"},body:JSON.stringify(d)}),m=await p.json();if(p.status!==200){let g="Error creating API Key Consumer";throw a.log.error(g,m),new A(g)}return a.log.info("Successfully created API Key Consumer",{consumerId:l,stripeSubscriptionId:e,stripeProductId:n}),l}i(ia,"createConsumer");async function sa({apiKeyBucketName:t,stripeSubscriptionId:e,stripeProductId:n,stripeCustomerId:r,managerEmail:o,context:s}){let{authApiJWT:a}=w.instance,u=new URL(`/v1/buckets/${t}/consumers`,ko);u.searchParams.set("with-api-key","true");let c=crypto.randomUUID(),l={name:c,description:oa,tags:{subscriptionExternalId:e,planExternalIds:[n]},metadata:{stripeSubscriptionId:e,stripeProductId:n,stripeCustomerId:r},managers:[o]},d=await se({retryDelayMs:5,retries:2,logger:B.getLogger(s)},u.toString(),{method:"POST",headers:{Authorization:`Bearer ${a}`,"content-type":"application/json"},body:JSON.stringify(l)}),p=await d.json();if(d.status!==200){let m="Error creating API Key Consumer";throw s.log.error(m,p),new A(m)}return s.log.info("Successfully created API Key Consumer with Manager Invite",{consumerId:c,stripeSubscriptionId:e,stripeProductId:n}),c}i(sa,"createConsumerInvite");async function aa({apiKeyBucketName:t,consumerId:e,context:n}){let{authApiJWT:r}=w.instance,o=new URL(`/v1/buckets/${t}/consumers/${e}`,ko);o.searchParams.set("with-api-key","true");let s=await se({retryDelayMs:5,retries:2,logger:B.getLogger(n)},o.toString(),{method:"DELETE",headers:{Authorization:`Bearer ${r}`,"content-type":"application/json"},body:JSON.stringify({})});if(s.status!==204){let a=await s.json(),u="Error invalidating API Key Consumer";throw n.log.error(u,a),new A(u)}return n.log.info(`Successfully invalidated API Key Consumer '${e}`),e}i(aa,"deleteConsumer");async function ua({context:t,stripeSubscriptionId:e,stripeProductId:n,customerKey:r,meteringBucketId:o,meteringBucketRegion:s,customerExternalId:a,subscriptionStatus:u,metadata:c}){let l={status:u,type:"periodic",renewalStrategy:"monthly",region:s,subscriptionExternalId:e,planExternalIds:[n],customerKey:r,customerExternalId:a,metadata:c},{authApiJWT:d,meteringServiceUrl:p}=w.instance;if(!tt(d))throw new $("No Zuplo JWT token set.");let m=await se({retryDelayMs:5,retries:2,logger:B.getLogger(t)},`${p}/internal/v1/metering/${o}/subscriptions`,{headers:{Authorization:`Bearer ${d}`,"Content-Type":"application/json","zp-rid":t.requestId},method:"POST",body:JSON.stringify(l)});if(!m.ok){let g=`Unable to create a monetization subscription for Stripe subscription '${e}'.`,I,b="";try{I=await m.json(),b=I.detail??I.title}catch{I={type:"https://zup.fail/http-status/500",title:"Internal Server Error",status:m.status,detail:m.statusText}}throw t.log.error(g,I),new A(`${g} ${b}`)}t.log.info("Successfully created monetization subscription.",l)}i(ua,"createSubscription");async function Lt({context:t,meteringSubscriptionId:e,meteringBucketId:n,requestBody:r}){let{authApiJWT:o,meteringServiceUrl:s}=w.instance;if(!tt(o))throw new $("No Zuplo JWT token set.");let a=await se({retryDelayMs:5,retries:2,logger:B.getLogger(t)},`${s}/internal/v1/metering/${n}/subscriptions/${e}`,{headers:{Authorization:`Bearer ${o}`,"Content-Type":"application/json","zp-rid":t.requestId},method:"PATCH",body:JSON.stringify(r)});if(!a.ok){let u=`Unable to update monetization subscription with: '${JSON.stringify(r)}'.`,c,l="";try{c=await a.json(),l=c.detail??c.title}catch{c={type:"https://zup.fail/http-status/500",title:"Internal Server Error",status:a.status,detail:a.statusText}}throw t.log.error(u,c),new A(`${u} ${l}`)}t.log.info(`Successfully updated monetization subscription with: '${JSON.stringify(r)}'.`)}i(Lt,"updateSubscription");async function Nt({context:t,stripeSubscriptionId:e,stripeCustomerId:n,meteringBucketId:r}){let{authApiJWT:o,meteringServiceUrl:s}=w.instance;if(!tt(o))throw new $("No Zuplo JWT token set.");let a=await se({retryDelayMs:5,retries:2,logger:B.getLogger(t)},`${s}/internal/v1/metering/${r}/subscriptions?subscriptionExternalId=${e}`,{headers:{Authorization:`Bearer ${o}`,"zp-rid":t.requestId},method:"GET"});if(!a.ok){let c=`Unable to retrieve the monetization subscription for Stripe subscription '${e}'.`,l,d="";try{l=await a.json(),d=l.detail??l.title}catch{l={type:"https://zup.fail/http-status/500",title:"Internal Server Error",status:a.status,detail:a.statusText}}throw t.log.error(c,l),new A(`${c} ${d}`)}let u=await a.json();if(u.data.length===0){let c=`Subscription was not found for Stripe subscription '${e}' and the event was ignored by Zuplo.`;throw t.log.error(c),new A(c)}if(u.data[0].customerExternalId!==n){let c=`Subscription was not found for Stripe customer '${n}' and the event was ignored by Zuplo.`;throw t.log.error(c),new A(c)}return u.data[0]}i(Nt,"getSubscription");var V="Unable to process webhook event.",Ge="Successfully processed webhook event",le="See https://zuplo.com/docs/articles/monetization-troubleshooting for more details.";function Dn(t){return t.replaceAll("_","-")}i(Dn,"stripeStatusToMeteringStatus");async function Mo(t,e,n,r){let o=n.data.object.id;if(!o)return e.log.warn(`Invalid Stripe webhook event. Expected event '${n.id}' to have '.data.object.id' be the subscription ID.`),v.badRequest(t,e,{title:V,detail:"Invalid Stripe webhook event. Expected '.data.object.id' to be the subscription ID."});let s=n.data.object.plan;if(!s||!s.product)return e.log.warn(`Invalid Stripe API result. Expected event '${n.id}' to have a plan data.`),v.badRequest(t,e,{title:V,detail:"Invalid Stripe API result. Expected event to have a plan data."});let a=n.data.object.customer;if(!a)return e.log.warn(`Invalid Stripe webhook event. Expected '.data.object.customer' to be provided by event '${n.id}'`),v.badRequest(t,e,{title:V,detail:"Invalid Stripe webhook event. Expected '.data.object.customer' to be provided"});if(n.data.object.metadata&&n.data.object.metadata.zuplo_created_by_deploymentName&&n.data.object.metadata.zuplo_created_by_deploymentName!==w.instance.deploymentName)return e.log.warn(`Subscription event '${n.id}' will not be handled since it was not issued for this Zuplo environment. It was intended for '${n.data.object.metadata.zuplo_created_by_deploymentName}'.`),v.badRequest(t,e,{title:V,detail:`This subscription event is not meant to be handled by this environment's Stripe monetization plugin. It was intended for '${n.data.object.metadata.zuplo_created_by_deploymentName}'. This can happen because of a misconfiguration of Stripe or your Zuplo API.`+le});let u=s.product,c,l,d;if(n.data.object.metadata&&n.data.object.metadata.zuplo_created_by_email&&n.data.object.metadata.zuplo_created_by_sub)l=n.data.object.metadata.zuplo_created_by_email,d=n.data.object.metadata.zuplo_created_by_sub,c=await ia({apiKeyBucketName:r.apiKeyBucketName,stripeProductId:u,stripeSubscriptionId:o,stripeCustomerId:a,managerEmail:l,managerSub:d,context:e});else{let p=await Mn.getCustomer({logger:e.log,stripeSecretKey:r.stripeSecretKey,customerId:a});if(!p.email)return e.log.warn(`Invalid Stripe API result. Expected customer '${a}' to contain email address.`),v.badRequest(t,e,{title:V,detail:"Invalid Stripe API result. Expected customer to contain email address."});c=await sa({apiKeyBucketName:r.apiKeyBucketName,stripeProductId:u,stripeSubscriptionId:o,stripeCustomerId:a,managerEmail:p.email,context:e})}if(!c)return v.internalServerError(t,e,{title:V,detail:"No API Key Consumer was created, skipping creation of subscription."});try{let p=Dn(n.data.object.status),m;l&&d&&(m={subscriber:{sub:d,email:l}}),await ua({context:e,stripeProductId:u,stripeSubscriptionId:o,customerKey:c,meteringBucketId:r.meteringBucketId,meteringBucketRegion:r.meteringBucketRegion,customerExternalId:a,subscriptionStatus:p,metadata:m})}catch(p){return await aa({apiKeyBucketName:r.apiKeyBucketName,consumerId:c,context:e}),v.internalServerError(t,e,{title:V,detail:p.message})}return v.ok(t,e,{title:Ge})}i(Mo,"onCustomerSubscriptionCreated");async function Do(t,e,n,r){let o=n.data.object.id;if(!o)return e.log.warn(`Invalid Stripe webhook event. Expected event '${n.id}' to have '.data.object.id' be the subscription ID.`),v.badRequest(t,e,{title:V,detail:"Invalid Stripe webhook event. Expected '.data.object.id' to be the subscription ID."});let s=n.data.object.customer;if(!s)return e.log.warn(`Invalid Stripe webhook event. Expected '.data.object.customer' to be provided by event '${n.id}'`),v.badRequest(t,e,{title:V,detail:"Invalid Stripe webhook event. Expected '.data.object.customer' to be provided"});if(n.data.object.metadata&&n.data.object.metadata.zuplo_created_by_deploymentName&&n.data.object.metadata.zuplo_created_by_deploymentName!==w.instance.deploymentName)return e.log.warn(`Subscription event '${n.id}' will not be handled since it was not issued for this Zuplo environment. It was intended for '${n.data.object.metadata.zuplo_created_by_deploymentName}'.`),v.badRequest(t,e,{title:V,detail:`This 'customer.subscription.deleted' event is not meant to be handled by this environment's Stripe monetization plugin. It was intended for '${n.data.object.metadata.zuplo_created_by_deploymentName}'.This can happen because of a misconfiguration of Stripe or your Zuplo API.`+le});try{let a=await Nt({context:e,stripeSubscriptionId:o,stripeCustomerId:s,meteringBucketId:r.meteringBucketId});await Lt({context:e,meteringSubscriptionId:a.id,meteringBucketId:r.meteringBucketId,requestBody:{status:"canceled",planExternalIds:a.planExternalIds}})}catch(a){return v.internalServerError(t,e,{title:V,detail:`The event 'customer.subscription.deleted' could not be processed. ${a.message} This can happen because of a misconfiguration of Stripe or your Zuplo API. `+le})}return v.ok(t,e,{title:Ge})}i(Do,"onCustomerSubscriptionDeleted");async function Ho(t,e,n,r){let o=n.data.object.id;if(!o)return e.log.warn(`Invalid Stripe webhook event. Expected event '${n.id}' to include '.data.object.id' as the subscription ID.`),v.badRequest(t,e,{title:V,detail:"Invalid Stripe webhook event. Expected '.data.object.id' to be the subscription ID."});let s=n.data.object.customer;if(!s)return e.log.warn(`Invalid Stripe webhook event. Expected '.data.object.customer' to be provided by event '${n.id}'`),v.badRequest(t,e,{title:V,detail:"Invalid Stripe webhook event. Expected '.data.object.customer' to be provided"});if(n.data.object.metadata&&n.data.object.metadata.zuplo_created_by_deploymentName&&n.data.object.metadata.zuplo_created_by_deploymentName!==w.instance.deploymentName)return e.log.warn(`Subscription event '${n.id}' will not be handled since it was not issued for this Zuplo environment. It was intended for '${n.data.object.metadata.zuplo_created_by_deploymentName}'.`),v.badRequest(t,e,{title:V,detail:`This 'customer.subscription.updated' event is not meant to be handled by this environment's Stripe monetization plugin. It was intended for '${n.data.object.metadata.zuplo_created_by_deploymentName}'.This can happen because of a misconfiguration of Stripe or your Zuplo API.`+le});if(n.data.previous_attributes){let a=n.data.previous_attributes;if(a.status&&a.status!==n.data.object.status){try{e.log.debug(`Processing subscription status change from Stripe event '${n.id}'.`);let u=await Nt({context:e,stripeSubscriptionId:o,stripeCustomerId:s,meteringBucketId:r.meteringBucketId}),c=Dn(n.data.object.status);await Lt({context:e,meteringSubscriptionId:u.id,meteringBucketId:r.meteringBucketId,requestBody:{status:c,planExternalIds:u.planExternalIds}})}catch(u){return v.internalServerError(t,e,{title:V,detail:`The event 'customer.subscription.updated' could not be processed. ${u.message} This can happen because of a misconfiguration of Stripe or your Zuplo API. However, it also could be a temporary condition that happens when a subscription is created due to events being sent out of order. `+le})}return v.ok(t,e,{title:Ge})}if(a.plan&&a.plan.product!==n.data.object.plan.product){try{e.log.debug(`Processing subscription plan change from Stripe event '${n.id}'.`);let u=await Nt({context:e,stripeSubscriptionId:o,stripeCustomerId:s,meteringBucketId:r.meteringBucketId}),c=n.data.object.plan.product,d=(await Mn.getUpcomingInvoice({customerId:s,logger:e.log,stripeSecretKey:r.stripeSecretKey})).lines.data.filter(m=>m.proration&&m.price.product===c),p=0;d.length===0?e.log.warn(`The plan change does not include proration details. Subscription event '${n.id}'`):p=parseFloat(d[0].unit_amount_excluding_tax)/d[0].price.unit_amount,await Lt({context:e,meteringSubscriptionId:u.id,meteringBucketId:r.meteringBucketId,requestBody:{status:u.status,planExternalIds:[c],prorate:p}})}catch(u){return v.internalServerError(t,e,{title:V,detail:`The event 'customer.subscription.updated' could not be processed. ${u.message} This can happen because of a misconfiguration of Stripe or your Zuplo API. However, it also could be a temporary condition that happens when a subscription is created due to events being sent out of order. `+le})}return v.ok(t,e,{title:Ge})}}return e.log.warn(`This update event '${n.id}' is not supported by Stripe monetization plugin webhook.`),v.badRequest(t,e,{title:V,detail:"This 'customer.subscription.updated' event could not be processed. The Stripe monetization plugin only supports update events for subscription plan changes or subscription status changes."+le})}i(Ho,"onCustomerSubscriptionUpdated");var Uo=class extends Vt{constructor(n){super();this.options=n}static{i(this,"StripeMonetizationPlugin")}registerRoutes(n,r){let o=i(async(c,l)=>{if(this.options.__testMode===!0)return l.log.warn("Received Stripe webhook event of in test mode."),"success";let{meteringBucketId:d,apiKeyBucketName:p}=this.options;if(!d)if(oe.ZUPLO_METERING_SERVICE_BUCKET_ID)d=oe.ZUPLO_METERING_SERVICE_BUCKET_ID;else throw new y("StripeMonetizationPlugin - No 'meteringBucketId' property provided");if(!p)if(oe.ZUPLO_API_KEY_SERVICE_BUCKET_NAME)p=oe.ZUPLO_API_KEY_SERVICE_BUCKET_NAME;else throw new y("StripeMonetizationPlugin - No 'apiKeyBucketName' property provided");if(!w.instance.build.ACCOUNT_NAME)throw new $("Build environment is not configured correctly. Expected 'ACCOUNT_NAME' to be set.");let m=this.options.primaryDataRegion??"us-central1";if(!hd(m))throw new y(`StripeMonetizationPlugin - The value '${m}' on the property 'primaryDataRegion' is invalid.`);let g=await c.json();if(!ra(g))return v.badRequest(c,l,{title:V,detail:"The event payload received was not in the expected format. This can happen because of a misconfiguration of Stripe or your Zuplo API. "+le});switch(l.log.info(`Received Stripe webhook event of type '${g.type}' with ID '${g.id}'.`),g.type){case"customer.subscription.created":return await Mo(c,l,g,{meteringBucketId:d,apiKeyBucketName:p,meteringBucketRegion:m,stripeSecretKey:this.options.stripeSecretKey});case"customer.subscription.updated":return await Ho(c,l,g,{meteringBucketId:d,apiKeyBucketName:p,meteringBucketRegion:m,stripeSecretKey:this.options.stripeSecretKey});case"customer.subscription.deleted":return await Do(c,l,g,{meteringBucketId:d});default:return v.badRequest(c,l,{title:V,detail:`Event '${g.type}' could not be processed because it is not supported by Stripe monetization plugin webhook. This can happen because of a misconfiguration of Stripe or your Zuplo API.`+le})}},"stripeWebhookHandler"),s=us({inboundPolicies:[new lt({signingSecret:this.options.webhooks.signingSecret,tolerance:this.options.webhooks.tolerance},"stripe-webhook-verification")]});G(this.options.webhooks,"StripeMonetizationPlugin","plugin").required("signingSecret","string").optional("tolerance","number");let a=new K({processors:[re,s],handler:o,gateway:r}),u=new J({label:"PLUGIN_STRIPE_WEBHOOK_ROUTE",methods:["POST"],path:this.options.webhooks.routePath??"/__plugins/stripe/webhooks",systemRouteName:"stripe-plugin"});n.addRoute(u,a.execute)}};function hd(t){return t!==null&&typeof t=="string"&&["us-central1","us-east1","europe-west4"].includes(t)}i(hd,"isMetricsRegion");var la=new WeakMap,ca={},Hn=class{static{i(this,"AmberfloMeteringPolicy")}static setRequestProperties(e,n){la.set(e,n)}};async function da(t,e,n,r){if(!n.statusCodes)throw new y(`Invalid AmberfloMeterInboundPolicy '${r}': options.statusCodes must be an array of HTTP status code numbers`);let o=nt(n.statusCodes);return e.addResponseSendingFinalHook(async s=>{if(o.includes(s.status)){let a=la.get(e),u=n.customerId;if(n.customerIdPropertyPath){if(!t.user)throw new A(`Unable to apply customerIdPropertyPath '${n.customerIdPropertyPath}' as request.user is 'undefined'.`);u=ze(t.user,n.customerIdPropertyPath,"customerIdPropertyPath")}let c=a?.customerId??u;if(!c){e.log.error(`Error in AmberfloMeterInboundPolicy '${r}': customerId cannot be undefined`);return}let l=a?.meterApiName??n.meterApiName;if(!l){e.log.error(`Error in AmberfloMeterInboundPolicy '${r}': meterApiName cannot be undefined`);return}let d=a?.meterValue??n.meterValue;if(!d){e.log.error(`Error in AmberfloMeterInboundPolicy '${r}': meterValue cannot be undefined`);return}let p={customerId:c,meterApiName:l,meterValue:d,meterTimeInMillis:Date.now(),dimensions:Object.apply(n.dimensions??{},a?.dimensions)},m=ca[n.apiKey];if(!m){let g=n.apiKey,I=t.headers.get("zm-test-id")??"";m=new q("amberflo-ingest-meter",10,async b=>{try{let T=n.url??"https://app.amberflo.io/ingest",_=await fetch(T,{method:"POST",body:JSON.stringify(b),headers:{"content-type":"application/json","x-api-key":g,"zm-test-id":I}});_.ok||e.log.error(`Unexpected response in AmberfloMeteringInboundPolicy '${r}'. ${_.status}: ${await _.text()}`)}catch(T){throw e.log.error(`Error in AmberfloMeteringInboundPolicy '${r}': ${T.message}`),T}}),ca[g]=m}m.enqueue(p),e.waitUntil(m.waitUntilFlushed())}}),t}i(da,"AmberfloMeteringInboundPolicy");async function Un(t){let e=new TextEncoder().encode(t),n=await crypto.subtle.digest({name:"SHA-256"},e);return[...new Uint8Array(n)].map(o=>o.toString(16).padStart(2,"0")).join("")}i(Un,"sha256");var pa=new Map;async function X(t,e){let n,r=pa.get(t);return r!==void 0?n=r:(n=`zuplo-policy-${await Un(JSON.stringify({policyName:t,options:e}))}`,pa.set(t,n)),n}i(X,"getPolicyCacheName");var ma="key-metadata-cache-type";function yd(t,e){return e.authScheme===""?t:t.replace(`${e.authScheme} `,"")}i(yd,"getKeyValue");async function Zn(t,e,n,r){if(!n.bucketName)if(oe.ZUPLO_API_KEY_SERVICE_BUCKET_NAME)n.bucketName=oe.ZUPLO_API_KEY_SERVICE_BUCKET_NAME;else throw new y(`ApiKeyInboundPolicy '${r}' - no bucketName property provided`);let o={authHeader:n.authHeader??"authorization",authScheme:n.authScheme??"Bearer",bucketName:n.bucketName,cacheTtlSeconds:n.cacheTtlSeconds??60,allowUnauthenticatedRequests:n.allowUnauthenticatedRequests??!1,disableAutomaticallyAddingKeyHeaderToOpenApi:n.disableAutomaticallyAddingKeyHeaderToOpenApi??!1};if(o.cacheTtlSeconds<60)throw new y(`ApiKeyInboundPolicy '${r}' - minimum cacheTtlSeconds value is 60s, '${o.cacheTtlSeconds}' is invalid`);let s=i(T=>o.allowUnauthenticatedRequests?t:v.unauthorized(t,e,{detail:T}),"unauthorizedResponse"),a=t.headers.get(o.authHeader);if(!a)return s("No Authorization Header");if(!a.toLowerCase().startsWith(o.authScheme.toLowerCase()))return s("Invalid Authorization Scheme");let u=yd(a,o);if(!u||u==="")return s("No key present");let c=await bd(u),l=await X(r,o),d=new Y(l,e),p=await d.get(c);if(p&&p.isValid===!0)return t.user=p.user,t;if(p&&!p.isValid)return p.typeId!==ma&&B.getLogger(e).error(`ApiKeyInboundPolicy '${r}' - cached metadata has invalid typeId '${p.typeId}'`,p),s("Authorization Failed");let m={key:u},g=await se({retryDelayMs:5,retries:2,logger:B.getLogger(e)},`${w.instance.apiKeyServiceUrl}/v1/$validate/${o.bucketName}`,{method:"POST",headers:{"content-type":"application/json","zp-rid":e.requestId,"zp-dn":w.instance.deploymentName??"unknown","User-Agent":w.instance.systemUserAgent},body:JSON.stringify(m)});if(g.status===401)return e.log.info(`ApiKeyInboundPolicy '${r}' - 401 response from Key Service`),s("Authorization Failed");if(g.status!==200){try{let T=await g.text(),_=JSON.parse(T);e.log.error("Unexpected response from key service",_)}catch{e.log.error("Invalid response from key service")}throw new A(`ApiKeyInboundPolicy '${r}' - unexpected response from Key Service. Status: ${g.status}`)}let I=await g.json(),b={isValid:!0,typeId:ma,user:{sub:I.name,data:I.metadata}};return t.user=b.user,d.put(c,b,o.cacheTtlSeconds),t}i(Zn,"ApiKeyInboundPolicy");async function bd(t){let e=new TextEncoder().encode(t),n=await crypto.subtle.digest("SHA-256",e);return Array.from(new Uint8Array(n)).map(s=>s.toString(16).padStart(2,"0")).join("")}i(bd,"hashValue");var ga=Zn;var kt=require("jose");var Zo={},wd=i(async(t,e)=>{if(!e.jwkUrl||typeof e.jwkUrl!="string")throw new y("Invalid State - jwkUrl not set");Zo[e.jwkUrl]||(Zo[e.jwkUrl]=(0,kt.createRemoteJWKSet)(new URL(e.jwkUrl),e.headers?{headers:e.headers}:void 0));let{payload:n}=await(0,kt.jwtVerify)(t,Zo[e.jwkUrl],{issuer:e.issuer,audience:e.audience});return n},"jwkVerifier"),Rd=i(async(t,e)=>{let n;if(e.secret===void 0)throw new Error("secretVerifier requires secret to be defined");if(typeof e.secret=="string"){let s=new TextEncoder().encode(e.secret);n=new Uint8Array(s)}else n=e.secret;let{payload:r}=await(0,kt.jwtVerify)(t,n,{issuer:e.issuer,audience:e.audience});return r},"secretVerifier"),ee=i(async(t,e,n,r)=>{let o=t.headers.get("Authorization"),s="bearer ",a=i(m=>v.unauthorized(t,e,{detail:m}),"unauthorizedResponse");if(!n.jwkUrl&&!n.secret)throw new y(`OpenIdJwtInboundPolicy policy '${r}': One of 'jwkUrl' or 'secret' options are required.`);if(n.jwkUrl&&n.secret)throw new y(`OpenIdJwtInboundPolicy policy '${r}': Only one of 'jwkUrl' and 'secret' options should be provided.`);let u=n.jwkUrl?wd:Rd,l=await i(async()=>{if(!o)return a("No authorization header");if(o.toLowerCase().indexOf(s)!==0)return a("Invalid bearer token format for authorization header");let m=o.substring(s.length);if(!m||m.length===0)return a("No bearer token on authorization header");try{return await u(m,n)}catch(g){let I=new URL(t.url);return"code"in g&&g.code==="ERR_JWT_EXPIRED"?e.log.warn(`Expired token used on url: ${I.pathname} `,g):e.log.warn(`Invalid token on: ${t.method} ${I.pathname}`,g),a("Invalid token")}},"getJwtOrRejectedResponse")();if(l instanceof Response)return n.allowUnauthenticatedRequests===!0?t:l;let d=n.subPropertyName??"sub",p=l[d];return p?(t.user={sub:p,data:l},t):a(`Token is not valid, no '${d}' property found.`)},"OpenIdJwtInboundPolicy");var fa=i(async(t,e,n,r)=>ee(t,e,{issuer:`https://${n.auth0Domain}/`,audience:n.audience,jwkUrl:`https://${n.auth0Domain}/.well-known/jwks.json`,allowUnauthenticatedRequests:n.allowUnauthenticatedRequests},r),"Auth0JwtInboundPolicy");var ha=i(async(t,e,n)=>{let r=t.headers.get("Authorization"),o="basic ",s=i(l=>v.unauthorized(t,e,{detail:l}),"unauthorizedResponse"),u=await i(async()=>{if(!r)return await s("No Authorization header");if(r.toLowerCase().indexOf(o)!==0)return await s("Invalid Basic token format for Authorization header");let l=r.substring(o.length);if(!l||l.length===0)return await s("No username:password provided");let d=atob(l).normalize(),p=d.indexOf(":");if(p===-1||/[\0-\x1F\x7F]/.test(d))return await s("Invalid basic token value - see https://tools.ietf.org/html/rfc5234#appendix-B.1");let m=d.substring(0,p),g=d.substring(p+1),I=n.accounts.find(b=>b.username===m&&b.password===g);return I||await s("Invalid username or password")},"getAccountOrRejectedResponse")();if(u instanceof Response)return n.allowUnauthenticatedRequests?t:u;let c=u.username;return t.user={sub:c,data:u.data},t},"BasicAuthInboundPolicy");var Pd=["cdn-cache-control","cloudflare-cdn-cache-control","surrogate-control","cache-tag","expires"];async function Ed(t){let e=new TextEncoder().encode(t),n=await crypto.subtle.digest("SHA-256",e);return Array.from(new Uint8Array(n)).map(s=>s.toString(16).padStart(2,"0")).join("")}i(Ed,"digestMessage");var Id=i(async(t,e)=>{let n=[...e.dangerouslyIgnoreAuthorizationHeader===!0?[]:["authorization"],...e.headers??[]],r=[];for(let[d,p]of t.headers.entries())n.includes(d)&&r.push({key:d.toLowerCase(),value:p});r.sort((d,p)=>d.key.localeCompare(p.key));let o=await Ed(JSON.stringify(r)),s=new URL(t.url),a=new URLSearchParams(s.searchParams);a.set("_z-hdr-dgst",o);let u=e.cacheHttpMethods?.includes(t.method.toUpperCase())&&t.method.toUpperCase()!=="GET";u&&a.set("_z-original-method",t.method);let c=`${s.origin}${s.pathname}?${a}`;return new Request(c,{method:u?"GET":t.method})},"createCacheKeyRequest");async function ya(t,e,n,r){let o=await X(r,n),s=await caches.open(o),a=n?.cacheHttpMethods?.map(l=>l.toUpperCase())??["GET"],u=await Id(t,n),c=await s.match(u);return c||(e.addEventListener("responseSent",l=>{try{let d=n.statusCodes??[200,206,301,302,303,404,410],p=l.response.clone();if(!d.includes(p.status)||!a.includes(t.method.toUpperCase()))return;let m=n?.expirationSecondsTtl??60,g=new Response(p.body,p);Pd.forEach(I=>g.headers.delete(I)),g.headers.set("cache-control",`s-maxage=${m}`),e.waitUntil(s.put(u,g))}catch(d){e.log.error(`Error in caching-inbound-policy '${r}': "${d.message}"`,d)}}),t)}i(ya,"CachingInboundPolicy");var ba=i(async(t,e,n,r)=>{if(!n.method)throw new y(`ChangeMethodInboundPolicy '${r}' options.method must be valid HttpMethod`);return new z(t,{method:n.method})},"ChangeMethodInboundPolicy");var wa=i(async(t,e,n)=>{let r=[...n.exclude??[]],o=new Headers;return r.forEach(a=>{let u=t.headers.get(a);u&&o.set(a,u)}),new z(t,{headers:o})},"ClearHeadersInboundPolicy");var Ra=i(async(t,e,n,r)=>{let o=[...r.exclude??[]],s=new Headers;return o.forEach(u=>{let c=t.headers.get(u);c&&s.set(u,c)}),new Response(t.body,{headers:s,status:t.status,statusText:t.statusText})},"ClearHeadersOutboundPolicy");var Pa=i(async(t,e,n,r)=>{let o=new URL(n.frontendApiUrl.startsWith("https://")||n.frontendApiUrl.startsWith("http://")?n.frontendApiUrl:`https://${n.frontendApiUrl}`),s=new URL(o);return s.pathname="/.well-known/jwks.json",ee(t,e,{issuer:o.href.slice(0,-1),jwkUrl:s.toString(),allowUnauthenticatedRequests:n.allowUnauthenticatedRequests},r)},"ClerkJwtInboundPolicy");var Ea=i(async(t,e,n,r)=>{if(!n.userPoolId)throw new y("userPoolId must be set in the options for CognitoJwtInboundPolicy");if(!n.region)throw new y("region must be set in the options for CognitoJwtInboundPolicy");return ee(t,e,{issuer:`https://cognito-idp.${n.region}.amazonaws.com/${n.userPoolId}`,jwkUrl:`https://cognito-idp.${n.region}.amazonaws.com/${n.userPoolId}/.well-known/jwks.json`,allowUnauthenticatedRequests:n.allowUnauthenticatedRequests},r)},"CognitoJwtInboundPolicy");var Ia=i(async(t,e,n,r)=>{if(!n.policies||n.policies.length===0)throw new y(`CompositeInboundPolicy '${r}' must have valid policies defined`);let o=te.instance,s=Tt(n.policies,o?.routeData.policies);return Qr(s)(t,e)},"CompositeInboundPolicy");var Ta=i(async(t,e,n,r)=>{let o=t.headers.get("Authorization");if(!o)return v.unauthorized(t,e,{detail:"No authorization header"});let s=Td(o);if(!s)return v.unauthorized(t,e,{detail:"Failed to parse token from Authorization header"});let a=await X(r,n),u=new Y(a,e),c=await u.get(s);if(!c){let l=await fetch(n.introspectionUrl,{headers:{Authorization:"Basic "+btoa(`${n.clientId}:${n.clientSecret}`),Accept:"application/jwt","Content-Type":"application/x-www-form-urlencoded"},method:"POST",body:"token="+s+"&token_type_hint=access_token"}),d=await l.text();if(l.status===200)c=d,u.put(s,c,n.cacheDurationSeconds??600);else return l.status>=500?(e.log.error(`Error introspecting token - ${l.status}: '${d}'`),v.internalServerError(t,e,{detail:"Problem encountered authorizing the HTTP request"})):v.unauthorized(t,e)}return t.headers.set("Authorization",`Bearer ${c}`),t},"CurityPhantomTokenInboundPolicy");function Td(t){return t.split(" ")[0]==="Bearer"?t.split(" ")[1]:null}i(Td,"getToken");var xa=i(async(t,e,n,r)=>(G(n,r).required("projectId","string").optional("allowUnauthenticatedRequests","boolean"),ee(t,e,{issuer:`https://securetoken.google.com/${n.projectId}`,audience:n.projectId,jwkUrl:"https://www.googleapis.com/service_accounts/v1/jwk/securetoken@system.gserviceaccount.com",allowUnauthenticatedRequests:n.allowUnauthenticatedRequests},r)),"FirebaseJwtInboundPolicy");var va=i(async(t,e,n)=>{let r="application/x-www-form-urlencoded",o="multipart/form-data",s=t.headers.get("content-type")?.toLowerCase();if(!s||![o,r].includes(s))return n&&n.badRequestIfNotFormData?new Response(`Bad Request - expected content-type '${r}' or ${o}`,{status:400,statusText:"Bad Request"}):t;let a=await t.formData();if(n&&n.optionalHoneypotName&&a.get(n.optionalHoneypotName)!=="")return new Response("Bad Request",{status:400,statusText:"Bad Request"});let u={};for(let[d,p]of a)u[d]=p.toString();let c=new Headers(t.headers);return c.set("content-type","application/json"),c.delete("content-length"),new z(t,{body:JSON.stringify(u),headers:c})},"FormDataToJsonInboundPolicy");var dt="__unknown__",Oa=i(async(t,e,n,r)=>{let o={allow:{countries:mt(n.allow?.countries,"allow.countries",r),regionCodes:mt(n.allow?.regionCodes,"allow.regionCode",r),asns:mt(n.allow?.asns,"allow.asOrganization",r)},block:{countries:mt(n.block?.countries,"block.countries",r),regionCodes:mt(n.block?.regionCodes,"block.regionCode",r),asns:mt(n.block?.asns,"block.asOrganization",r)},ignoreUnknown:n.ignoreUnknown!==!1},s=e.incomingRequestProperties.country?.toLowerCase()??dt,a=e.incomingRequestProperties.regionCode?.toLowerCase()??dt,u=e.incomingRequestProperties.asn?.toString()??dt,c=o.ignoreUnknown&&s===dt,l=o.ignoreUnknown&&a===dt,d=o.ignoreUnknown&&u===dt,p=o.allow.countries,m=o.allow.regionCodes,g=o.allow.asns;if(p.length>0&&!p.includes(s)&&!c||m.length>0&&!m.includes(a)&&!l||g.length>0&&!g.includes(u)&&!d)return pt(t,e,r,s,a,u);let I=o.block.countries,b=o.block.regionCodes,T=o.block.asns;return I.length>0&&I.includes(s)&&!c||b.length>0&&b.includes(a)&&!l||T.length>0&&T.includes(u)&&!d?pt(t,e,r,s,a,u):t},"GeoFilterInboundPolicy");function pt(t,e,n,r,o,s){return e.log.debug(`Request blocked by GeoFilterInboundPolicy '${n}' (country: '${r}', regionCode: '${o}', asn: '${s}')`),v.forbidden(t,e,{geographicContext:{country:r,regionCode:o,asn:s}})}i(pt,"blockedResponse");function mt(t,e,n){if(typeof t=="string")return t.split(",").map(r=>r.trim().toLowerCase());if(typeof t>"u")return[];if(Array.isArray(t))return t.map(r=>r.trim().toLowerCase());throw new y(`Invalid '${e}' for GeoFilterInboundPolicy '${n}': '${t}', must be a string or string[]`)}i(mt,"toLowerStringArray");var Sa=i(async(t,e,n)=>{let r=t.user?.data.scope.split(" ")||[];if(!i((s,a)=>a.every(u=>s.includes(u)),"scopeChecker")(r,n.scopes)){let s={code:"UNAUTHORIZED",help_url:"https://zup.fail/UNAUTHORIZED",message:`JWT must have all the following scopes: ${n.scopes}`};return new Response(JSON.stringify(s),{status:401,statusText:"Unauthorized",headers:{"content-type":"application/json"}})}return t},"JWTScopeValidationInboundPolicy");var Aa=i(async(t,e,n,r)=>{let o=e.route.raw().responses;if(!o)return qo(r,t,e,"No responses defined in the OpenAPI document. Add some responses with examples to use this policy.");let s=Object.keys(o),a=[];if(s.length===0)return qo(r,t,e,"No response object defined under responses in the OpenAPI document. Add some response objects with examples to use this policy.");if(s.forEach(u=>{o[u].content&&Object.keys(o[u].content).forEach(l=>{let d=o[u].content[l].examples;d&&Object.keys(d).forEach(m=>{a.push({responseName:u,contentName:l,exampleName:m,exampleValue:d[m]})})})}),a=a.filter(u=>!(n.responsePrefixFilter&&!u.responseName.startsWith(n.responsePrefixFilter)||n.contentType&&u.contentName!==n.contentType||n.exampleName&&u.exampleName!==n.exampleName)),n.random&&a.length>1){let u=Math.floor(Math.random()*a.length);return Ca(a[u])}else return a.length>0?Ca(a[0]):qo(r,t,e,"No examples matching the mocking options found in the OpenAPI document. Add examples to the OpenAPI document matching the options for this policy or change the mocking options to match the examples in the OpenAPI document.")},"MockApiInboundPolicy");function Ca(t){let e=JSON.stringify(t.exampleValue,null,2),n=new Headers;switch(n.set("Content-Type",t.contentName),t.responseName){case"1XX":return new Response(e,{status:100,headers:n});case"2XX":return new Response(e,{status:200,headers:n});case"3XX":return new Response(e,{status:300,headers:n});case"4XX":return new Response(e,{status:400,headers:n});case"5XX":case"default":return new Response(e,{status:500,headers:n});default:return new Response(e,{status:Number(t.responseName),headers:n})}}i(Ca,"generateResponse");var qo=i((t,e,n,r)=>{let o=`Error in policy: ${t} - On route ${e.method} ${n.route.path}. ${r}`;return v.internalServerError(e,n,{detail:o})},"getProblemDetailResponse");var xd="Incoming",vd={logRequestBody:!0,logResponseBody:!0};function _a(t){let e={};return t.forEach((n,r)=>{e[r]=n}),e}i(_a,"headersToObject");function La(){return new Date().toISOString()}i(La,"timestamp");var $o=new WeakMap,Od={};function Ma(t,e){let n=$o.get(t);n||(n=Od);let r=Object.assign({...n},e);$o.set(t,r)}i(Ma,"setMoesifContext");async function Na(t,e){let n=t.headers.get("content-type");if(n&&n.indexOf("json")!==0)try{return await t.clone().json()}catch(o){e.log.error(o)}let r=await t.clone().text();return e.log.debug({textBody:r}),r}i(Na,"readBody");var Sd={},Fo;function ka(){if(!Fo)throw new A("Invalid State - no _lastLogger");return Fo}i(ka,"getLastLogger");function Cd(t){let e=Sd[t];return e||(e=new q("moesif-inbound",100,async n=>{let r=JSON.stringify(n);ka().debug("posting",r);let o=await fetch("https://api.moesif.net/v1/events/batch",{method:"POST",headers:{"content-type":"application/json","X-Moesif-Application-Id":t},body:r});o.ok||ka().error({status:o.status,body:await o.text()})})),e}i(Cd,"getDispatcher");async function Da(t,e,n,r){Fo=e.log;let o=La(),s=Object.assign(vd,n);if(!s.applicationId)throw new Error(`Invalid configuration for MoesifInboundPolicy '${r}' - applicationId is required`);let a=s.logRequestBody?await Na(t,e):void 0;return e.addResponseSendingFinalHook(async(u,c)=>{let l=Cd(s.applicationId),d=t.headers.get("true-client-ip"),p=$o.get(e)??{},m={time:o,uri:t.url,verb:t.method,body:a,ip_address:d??void 0,api_version:p.apiVersion,headers:_a(t.headers)},g=s.logResponseBody?await Na(u,e):void 0,I={time:La(),status:u.status,headers:_a(u.headers),body:g},b={request:m,response:I,user_id:p.userId??c.user?.sub,session_token:p.sessionToken,company_id:p.companyId,metadata:p.metadata,direction:xd};l.enqueue(b),e.waitUntil(l.waitUntilFlushed())}),t}i(Da,"MoesifInboundPolicy");async function Ha(t,e,n,r){let o=B.getLogger(t),{authApiJWT:s,meteringServiceUrl:a}=w.instance,u;try{let l=await fetch(`${a}/internal/v1/metering/${r}/subscriptions?customerKey=${e}`,{headers:{Authorization:`Bearer ${s}`,"zp-rid":t.requestId},method:"GET"});if(l.ok)u=await l.json();else{let d=await l.json(),p=d.detail??d.title??"Unknown error on quota consumption.";t.log.error(`MonetizationInboundPolicy '${n}' - Error loading subscription. ${l.status} - ${p}`),o.error(`MonetizationInboundPolicy '${n}' - Error loading subscription.${l.status} - ${p}`)}}catch(l){o.error(`MonetizationInboundPolicy '${n}' - Error loading subscription`,l)}return u&&u.data&&u.data.length>0?u.data[0]:void 0}i(Ha,"loadSubscription");async function Ua(t,e,n,r,o){let{authApiJWT:s,meteringServiceUrl:a}=w.instance,u=B.getLogger(t);try{let c=await fetch(`${a}/internal/v1/metering/${r}/subscriptions/${e}/quotas/consume`,{headers:{Authorization:`Bearer ${s}`,"zp-rid":t.requestId},method:"POST",body:JSON.stringify({meters:o})});if(!c.ok){let l=await c.json(),d=l.detail??l.title??"Unknown error on quota consumption.";t.log.error(`MonetizationInboundPolicy '${n}' - Error updating subscription quota. ${c.status} - ${d}`),u.error(`MonetizationInboundPolicy '${n}' - Error updating subscription quota. ${c.status} - ${d}`)}}catch(c){t.log.error(`MonetizationInboundPolicy '${n}' - Error updating subscription quota.`),u.error(`MonetizationInboundPolicy '${n}' - Error updating subscription quota.`,c)}}i(Ua,"consumeSubcriptionQuotas");var Ad=new Set(["active","inactive","incomplete","incomplete-expired","trialing","past-due","canceled","unpaid"]);function qn(t,e){try{let n=[];for(let r in t)typeof t[r]!="number"&&!(Number.isInteger(t[r])&&/^-?\d+$/.test(t[r].toString()))&&n.push(r);if(n.length>0)throw new y(n.length>1?`The values found in these properties are not integers : ${n.join(", ")}`:`The value in property '${n[0]}' is not an integer`)}catch(n){throw n instanceof y?new y(`MonetizationInboundPolicy '${e}' - The property 'meters' is invalid. ${n.message}`):n}}i(qn,"validateMeters");function Za(t,e){if(t)try{if(t.length===0)throw new y("Must set valid subscription statuses");let n=je(t),r=[];for(let o of n)Ad.has(o)||r.push(o);if(r.length>0)throw new y(`Found the following invalid statuses: ${r.join(", ")}`);return t}catch(n){throw n instanceof y?new y(`MonetizationInboundPolicy '${e}' - The property 'allowedSubscriptionStatuses' is invalid. ${n.message}`):n}else return["active","incomplete","trialing"]}i(Za,"parseAllowedSubscriptionStatuses");function qa(t,e){let n={},r={};for(let o in e)t.hasOwnProperty(o)?n[o]=e[o]:r[o]=e[o];return{metersInSubscription:n,metersNotInSubscription:r}}i(qa,"compareMeters");var $n=class extends fe{static{i(this,"MonetizationInboundPolicy")}static getSubscription(e){return me.get(e,yt)}static setMeters(e,n){qn(n,"setMeters"),me.set(e,Ut,n)}async handler(e,n){G(this.options,this.policyName).optional("allowRequestsWithoutSubscription","boolean").optional("allowRequestsOverQuota","boolean").optional("bucketId","string"),this.options.meterOnStatusCodes||(this.options.meterOnStatusCodes="200-399");let r=this.options.allowRequestsOverQuota??!1,o=nt(this.options.meterOnStatusCodes),s=me.get(n,Ut),a={...this.options.meters,...s};qn(a,this.policyName);let u=this.options.allowRequestsWithoutSubscription??!1,c=Za(this.options.allowedSubscriptionStatuses,this.policyName);n.addResponseSendingFinalHook(async(b,T,_)=>{let h=me.get(_,yt);if((this.options.allowRequestsWithoutSubscription??!1)&&!h){_.log.debug(`MonetizationInboundPolicy '${this.policyName}' - No subscription found and property 'allowRequestsWithoutSubscription' is true`);return}if(!this.options.bucketId)if(oe.ZUPLO_METERING_SERVICE_BUCKET_ID)this.options.bucketId=oe.ZUPLO_METERING_SERVICE_BUCKET_ID;else throw new y(`MonetizationInboundPolicy '${this.policyName}' - No bucketId property provided`);let O=me.get(_,Ut),H={...this.options.meters,...O};if(qn(H,this.policyName),o.includes(b.status)&&h&&H){_.log.debug(`MonetizationInboundPolicy '${this.policyName}' - Updating subscription '${h.id}' with meters '${JSON.stringify(H)} on response status '${b.status}'`);let{metersInSubscription:f,metersNotInSubscription:R}=qa(h.meters,H);if(R&&Object.keys(R).length>0){let S=Object.keys(R);_.log.warn(`The following meters cannot be applied since they are not present in the subscription: '${S}'`)}await Ua(_,h.id,this.policyName,this.options.bucketId,f)}});let l=e.user;if(!l)return u?e:v.unauthorized(e,n,{detail:"Unable to check subscription for anonymous user"});if(!this.options.bucketId)if(oe.ZUPLO_METERING_SERVICE_BUCKET_ID)this.options.bucketId=oe.ZUPLO_METERING_SERVICE_BUCKET_ID;else throw new y(`MonetizationInboundPolicy '${this.policyName}' - No bucketId property provided`);let{sub:d}=l,p=await Ha(n,d,this.policyName,this.options.bucketId);if(!p)return n.log.warn("No valid subscription found"),u?e:v.unauthorized(e,n,{detail:"No valid subscription found"});if(!c.includes(p.status)&&!u)return n.log.warn(`Subscription '${p.id}' has status '${p.status}' which is not part of the allowed statuses.`),v.unauthorized(e,n,{detail:"No valid subscription found"});c.includes(p.status)&&(n.log.debug(`Loading subscription '${p.id}' for user sub '${d}' to ContextData`),me.set(n,yt,p));let m=me.get(n,yt);if(!m)return u?e:(n.log.warn("Subscription is not available for user"),v.paymentRequired(e,n,{detail:"Subscription is not available for user",title:"No Subscription"}));if(m&&Object.keys(m.meters).length===0)return n.log.error(`Quota is not set up for subscription '${m.id}'`),v.tooManyRequests(e,n,{detail:"Quota is not set up for the user's subscription",title:"Quota Exceeded"});let I=Object.keys(a).filter(b=>!Object.keys(m.meters).includes(b));if(I.length>0)return n.log.warn(`The following policy meters are not present in the subscription: ${I.join(", ")}`),v.tooManyRequests(e,n,{detail:`The following policy meters are not present in the subscription: ${I.join(", ")}`,title:"Quota Exceeded"});for(let b of Object.keys(a))if(m.meters[b].available<=0&&!r)return v.tooManyRequests(e,n,{detail:`Quota exceeded for meter '${b}'`,title:"Quota Exceeded"});return e}};var $a=i(async(t,e,n,r)=>ee(t,e,{issuer:n.issuerUrl,audience:n.audience,jwkUrl:`${n.issuerUrl}/v1/keys`,allowUnauthenticatedRequests:n.allowUnauthenticatedRequests},r),"OktaJwtInboundPolicy");var Fa=require("jose");var Bo,Ba=i(async(t,e,n,r)=>{if(!Bo)try{Bo=await(0,Fa.importSPKI)(n.verifierKey,"RS256")}catch(o){throw e.log.error("Could not import verifier key"),o}return ee(t,e,{issuer:n.authUrl,secret:Bo,allowUnauthenticatedRequests:n.allowUnauthenticatedRequests,subPropertyName:"user_id"},r)},"PropelAuthJwtInboundPolicy");var Wa=Ce(Le());var ja=Ce(Le());var Fn=class extends Error{static{i(this,"ValidationError")}constructor(e){super(e)}},zo=class extends Fn{static{i(this,"ArgumentUndefinedError")}constructor(e){super(`The argument '${e}' is undefined.`)}},jo=class extends Fn{static{i(this,"ArgumentTypeError")}constructor(e,n){super(`The argument '${e}' must be of type '${n}'.`)}};function _d(t,e){if(ns(t))throw new zo(e)}i(_d,"throwIfUndefinedOrNull");function Mt(t,e){if(_d(t,e),!ae(t))throw new jo(e,"string")}i(Mt,"throwIfNotString");var Bn=class t{static{i(this,"StandardRedisClient")}static instance;redisClientUrl;clientAuthToken;userAgent;deploymentName;constructor(e,n,r,o){this.redisClientUrl=e,this.clientAuthToken=n,this.deploymentName=r,this.userAgent=o}static initialize(e,n,r,o){return Mt(e,"redisClientUrl"),Mt(n,"clientAuthToken"),t.instance||(t.instance=new t(e,n,r,o)),t.instance}isEnabled(){return this.redisClientUrl!==void 0&&this.clientAuthToken!==void 0}async fetch({url:e,body:n,method:r,requestId:o}){Mt(e,"url");let s=await fetch(`${this.redisClientUrl}${e}`,{method:r,body:n,headers:{"content-type":"application/json",authorization:`Bearer ${this.clientAuthToken}`,"zp-rid":o,"zp-dn":this.deploymentName,"User-Agent":this.userAgent}}),a=s.headers.get("Content-Type")?.includes("application/json")?await s.json():await s.text();if(s.ok)return a;throw s.status===401?new $("Redis client failed with 401: Unauthorized"):new $(`Redis client failed with (${s.status}): ${typeof a=="string"?a:JSON.stringify(a,null,2)}`)}},zn=class{static{i(this,"InMemoryRedisClient")}keyValueStore;constructor(){this.keyValueStore=new Map}isEnabled(){return!0}fetch({url:e,body:n,method:r}){if(Mt(e,"url"),r==="POST"&&e==="/rate-limit"){let{incrBy:o,expire:s,key:a}=JSON.parse(n),u=Date.now()+s*1e3,c=this.keyValueStore.get(a);c?Date.now()>c.expiresAt?this.keyValueStore.set(a,{value:o,expiresAt:u}):this.keyValueStore.set(a,{value:c.value+o,expiresAt:c.expiresAt}):this.keyValueStore.set(a,{value:o,expiresAt:u});let l=this.keyValueStore.get(a);return Promise.resolve({count:l.value,ttlSeconds:Math.round((l.expiresAt-Date.now())/1e3)})}throw new $("The in-memory redis client only supports /rate-limit calls")}};var Ld=i(t=>{let e=t.headers.get("x-real-ip")??t.headers.get("true-client-ip")??t.headers.get("cf-connecting-ip");if(e)return e;let n=t.headers.get("x-forwarded-for");return n?n.split(",")[0]:"127.0.0.1"},"getRealIP"),Vn=i(async t=>({key:`ip-${Ld(t)}`}),"getIP"),Gn=i(async t=>({key:`user-${t.user?.sub??"anonymous"}`}),"getUser"),Wn=i(async()=>({key:"all-2d77ce9d-9a3c-4206-9ab2-668cfd271095"}),"getAll"),jn;function Jn(t,e){let n;if(jn)return jn;if(w.instance.isLocalDevelopment)return e.info("Using in-memory redis client for local development."),n=new zn,jn=n,n;let{authApiJWT:r,redisURL:o}=w.instance;if(!ae(o))throw new $(`RateLimitInboundPolicy '${t}' - rate limit service URL not configured`);if(!ae(r))throw new $(`RateLimitInboundPolicy '${t}' - service authentication not configured`);if(o&&(n=Bn.initialize(o,r,w.instance.deploymentName??"unknown",w.instance.systemUserAgent)),!n||!n.isEnabled())throw new $(`RateLimitInboundPolicy '${t}' - no redis ('${n}') or redis.isEnabled ('${n?.isEnabled}) is false`);return jn=n,n}i(Jn,"getRedisClient");async function Kn(t,e,n,r,o){let s=Math.floor(e*60);return await n.fetch({url:"/rate-limit",method:"POST",body:JSON.stringify({incrBy:1,expire:s,key:t}),requestId:o})}i(Kn,"getCountAndUpdateExpiry");function Yn(t,e){let n;if(t.rateLimitBy==="function"){if(!t.identifier)throw new y(`RateLimitInboundPolicy '${e}' - If rateLimitBy set to 'function' options.identifier must be specified`);if(!t.identifier.module)throw new y(`RateLimitInboundPolicy '${e}' - If rateLimitBy set to 'function' options.identifier.module must be specified`);if(!t.identifier.export)throw new y(`RateLimitInboundPolicy '${e}' - If rateLimitBy set to 'function' options.identifier.export must be specified`);if(n=t.identifier.module[t.identifier.export],!n||typeof n!="function")throw new y(`RateLimitInboundPolicy '${e}' - Custom rate limit function must be a valid function`)}return i(async(o,s,a)=>{let u=await n(o,s,a);if(!u.key){let c=`RateLimitInboundPolicy '${a}' - Custom rate limit function must return a valid key property '${JSON.stringify(u,null,2)}'`;throw s.log.error(c),new A(c)}return u},"outerFunction")}i(Yn,"wrapUserFunction");var Qn="Retry-After";var za=(0,ja.debug)("zuplo:policies:RateLimitInboundPolicy"),Va=i(async(t,e,n,r)=>{let o=B.getLogger(e),s=i((f,R)=>{let S={};return(!f||f==="retry-after")&&(S[Qn]=R.toString()),v.tooManyRequests(t,e,void 0,S)},"rateLimited"),u={function:Yn(n,r),user:Gn,ip:Vn,all:Wn}[n.rateLimitBy],c=await u(t,e,r),l=c.key,d=c.requestsAllowed??n.requestsAllowed,p=c.timeWindowMinutes??n.timeWindowMinutes,m=n.headerMode??"retry-after",g=Jn(r,o),b=`bucket/${w.instance.build.BUILD_ID}/${r}/${l}`,T=await X(r,n),_=new Y(T,e),h=Kn(b,p,g,o,e.requestId),P;i(async()=>{let f=await h;if(f.count>d){let R=Date.now()+f.ttlSeconds*1e3;_.put(b,R,f.ttlSeconds),za(`RateLimitInboundPolicy '${r}' - returning 429 from redis for '${b}' (async mode)`),P=s(m,f.ttlSeconds)}},"asyncCheck")();let H=await _.get(b);if(H!==void 0&&H>Date.now()){za(`RateLimitInboundPolicy '${r}' - returning 429 from cache for '${b}' (async mode)`);let f=Math.round((H-Date.now())/1e3);return s(m,f)}return e.addResponseSendingHook(async f=>P??f),t},"AsyncRateLimitInboundPolicy");var Ga=(0,Wa.debug)("zuplo:policies:RateLimitInboundPolicy"),Nd="strict",Vo=i(async(t,e,n,r)=>{if((n.mode??Nd)==="async")return Va(t,e,n,r);let s=Date.now(),a=B.getLogger(e),u=i((l,d)=>{if(n.throwOnFailure)throw new $(l,{cause:d});a.error(l,d)},"throwOrLog"),c=i((l,d)=>{let p={};return(!l||l==="retry-after")&&(p[Qn]=d.toString()),v.tooManyRequests(t,e,void 0,p)},"rateLimited");try{let d={function:Yn(n,r),user:Gn,ip:Vn,all:Wn}[n.rateLimitBy],p=await d(t,e,r),m=p.key,g=p.requestsAllowed??n.requestsAllowed,I=p.timeWindowMinutes??n.timeWindowMinutes,b=n.headerMode??"retry-after",T=Jn(r,a),h=`bucket/${w.instance.build.BUILD_ID}/${r}/${m}`,P=await Kn(h,I,T,a,e.requestId);return P.count>g?(Ga(`RateLimitInboundPolicy '${r}' - returning 429 from redis for '${h}' (strict mode)`),c(b,P.ttlSeconds)):t}catch(l){return u(l.message,l),t}finally{let l=Date.now()-s;Ga(`RateLimitInboundPolicy '${r}' - latency ${l}ms`)}},"RateLimitInboundPolicy");var Go;function Ja(t){let e=[];for(let[n,r]of t)e.push({name:n,value:r});return e}i(Ja,"headersToNameValuePairs");function kd(t){let e=[];return Object.entries(t).forEach(([n,r])=>{e.push({name:n,value:r})}),e}i(kd,"queryToNameValueParis");function Md(t){if(t===null)return;let e=parseFloat(t);if(!isNaN(e))return e}i(Md,"parseIntOrUndefined");var Ka={};async function Ya(t,e,n,r){let o=new Date,s=Date.now();return Go||(Go={name:"zuplo",version:w.instance.build.ZUPLO_VERSION,comment:`zuplo/${w.instance.build.ZUPLO_VERSION}`}),e.addResponseSendingFinalHook(async a=>{try{let u=n.userLabelPropertyPath&&t.user?ze(t.user,n.userLabelPropertyPath,"userLabelPropertyPath"):t.user?.sub,c=n.userEmailPropertyPath&&t.user?ze(t.user,n.userEmailPropertyPath,"userEmailPropertyPath"):void 0,l={clientIPAddress:t.headers.get("true-client-ip")??"",development:n.development!==void 0?n.development:w.instance.isWorkingCopy||w.instance.isLocalDevelopment,group:{label:u,email:c,id:t.user?.sub??"anonymous"},request:{log:{creator:Go,entries:[{startedDateTime:o.toISOString(),time:Date.now()-s,request:{method:t.method,url:n.useFullRequestPath?new URL(t.url).pathname:e.route.path,httpVersion:"2",headers:Ja(t.headers),queryString:kd(t.query)},response:{status:a.status,statusText:a.statusText,headers:Ja(a.headers),content:{size:Md(t.headers.get("content-length"))}}}]}}},d=Ka[n.apiKey];if(!d){let p=n.apiKey;d=new q("readme-metering-inbound-policy",10,async m=>{try{let g=n.url??"https://metrics.readme.io/request",I=await fetch(g,{method:"POST",body:JSON.stringify(m),headers:{"content-type":"application/json",authorization:`Basic ${btoa(p+":")}`}});I.status!==202&&e.log.error(`Unexpected response in ReadmeMeteringInboundPolicy '${r}'. ${I.status}: '${await I.text()}'`)}catch(g){throw e.log.error(`Error in ReadmeMeteringInboundPolicy '${r}': '${g.message}'`),g}}),Ka[p]=d}d.enqueue(l),e.waitUntil(d.waitUntilFlushed())}catch(u){e.log.error(u)}}),t}i(Ya,"ReadmeMetricsInboundPolicy");var Qa=i(async(t,e,n,r)=>{let o=n?.headers;if(!o||!Array.isArray(o)||o.length===0)throw new y(`RemoveHeadersInboundPolicy '${r}' options.headers must be a non-empty string array of header names`);let s=new Headers(t.headers);return o.forEach(u=>{s.delete(u)}),new z(t,{headers:s})},"RemoveHeadersInboundPolicy");var Xa=i(async(t,e,n,r,o)=>{let s=r?.headers;if(!s||!Array.isArray(s)||s.length===0)throw new y(`RemoveHeadersOutboundPolicy '${o}' options.headers must be a non-empty string array of header names`);let a=new Headers(t.headers);return s.forEach(c=>{a.delete(c)}),new Response(t.body,{headers:a,status:t.status,statusText:t.statusText})},"RemoveHeadersOutboundPolicy");var eu=i(async(t,e,n,r)=>{let o=n.params;if(!o||!Array.isArray(o)||o.length===0)throw new y(`RemoveQueryParamsInboundPolicy '${r}' options.params must be a non-empty string array of header names`);let s=new URL(t.url);return o.forEach(u=>{s.searchParams.delete(u)}),new z(s.toString(),t)},"RemoveQueryParamsInboundPolicy");var tu=i(async(t,e,n,r)=>{let o=await t.text(),s=r.mode==="regexp"?new RegExp(r.match,"gm"):r.match,a=o.replaceAll(s,r.replaceWith);return new Response(a,{headers:t.headers,status:t.status,statusText:t.statusText})},"ReplaceStringOutboundPolicy");var nu=i(()=>new Response("Maximum request size exceeded",{status:413,statusText:"Payload Too Large"}),"payloadTooLarge"),ru=i(async(t,e,n)=>{let r=n.trustContentLengthHeader??!1;if(["GET","HEAD"].includes(t.method))return t;let o=t.headers.get("content-length"),s=o!==null?parseInt(o):void 0;return s&&!isNaN(s)&&s>n.maxSizeInBytes?nu():s&&r?t:(await t.clone().text()).length>n.maxSizeInBytes?nu():t},"RequestSizeLimitInboundPolicy");function ou(t,e,n){return`_${Ze(t+"_"+e+"_"+n)}`}i(ou,"getRawOperationDataIdentifierName");function Xn(t,e,n,r){return`_${Ze(t.toLowerCase())}_`+e.toLowerCase()+"_"+n.toLowerCase()+`_${r.toLowerCase()}`}i(Xn,"getIdForParameterSchema");function er(t,e,n){return`_${Ze(t.toLowerCase())}_`+e.toLowerCase()+`_rb_${Ze(n.toLowerCase())}`}i(er,"getIdForRequestBodySchema");function iu(t,e){return`_${Ze(t)}__${Ze(e)}`}i(iu,"getIdForRefSchema");function Ze(t){let e=[];for(let n=0;n<t.length;n++){let r=t.charCodeAt(n);r>="0".charCodeAt(0)&&r<="9".charCodeAt(0)||r>="A".charCodeAt(0)&&r<="Z".charCodeAt(0)||r>="a".charCodeAt(0)&&r<="z".charCodeAt(0)?e.push(t.charAt(n)):e.push("_")}return e.join("")}i(Ze,"sanitizedIdentifierName");var gt=i(t=>{let e=t.route.raw();return e.parameters?e.parameters.map(r=>({name:r.name,location:r.in,required:r.required,deprecated:r.deprecated,allowEmptyValue:r.allowEmptyValue})):[]},"getParametersForOperation"),ft=i((t,e,n,r,o)=>{let s=[],a=!0,u=[];return t.forEach(c=>{let l=c.required||o==="path";if(l&&!e[c.name])a=!1,s.push(`Required ${o} parameter '${c.name}' not found`);else if(!(!l&&!e[c.name])){let d=Xn(n,r,o,c.name),p=te.instance.schemaValidator[d],m=p(e[c.name]),g=Wo(p.errors);m||(a=!1,u.push(`${o} parameter: ${c.name} : ${e[c.name]}`),s.push(`Invalid value for ${o} parameter: '${c.name}' ${g.join(", ")}`))}}),{isValid:a,invalidValues:u,errors:s}},"validateParameters"),ye=i((t,e,n,r,o)=>{r?t.log[e](n,r,o):t.log[e](n,o)},"logErrors"),be=i(t=>t==="log-only"||t==="reject-and-log","shouldLog"),we=i(t=>t==="reject-only"||t==="reject-and-log","shouldReject"),Wo=i(t=>t?.map(e=>e.instancePath===void 0||e.instancePath===""?e.message??"Unknown validation error":e.instancePath.replace("/","")+" "+e.message)??["Unknown validation error"],"getErrorsFromValidator");async function su(t,e,n){if(!n.validateBody||n.validateBody==="none")return;let r;try{r=await e.clone().json()}catch(g){let I=`Error in request body for method : ${e.method} in route: ${t.route.path} with content-type: ${e.headers.get("Content-Type")}`,b=v.badRequest(e,t,{detail:`${I}, see errors property for more details`,errors:`${g}`});if(be(n.validateBody)&&ye(t,n.logLevel??"info",I,[r],g),we(n.validateBody))return b}if(!e.headers.get("Content-Type")){let g=`No content-type header defined in incoming request to ${e.method} in route: ${t.route.path}`,I=v.badRequest(e,t,{detail:g});return be(n.validateBody)&&ye(t,n.logLevel??"info",g,[r],[g]),we(n.validateBody)?I:void 0}let o=e.headers.get("Content-Type"),s=o.indexOf(";");s>-1&&(o=o.substring(0,s));let a=er(t.route.path,e.method,o),u=te.instance.schemaValidator[a];if(!u){let g=`No schema defined for method: ${e.method} in route: ${t.route.path} with content-type: ${e.headers.get("Content-Type")}`,I=v.badRequest(e,t,{detail:g});return be(n.validateBody)&&ye(t,n.logLevel??"info",g,[r],[g]),we(n.validateBody)?I:void 0}if(u(r))return;let l=u.errors,d="Request body did not pass validation",p=Wo(l),m=v.badRequest(e,t,{detail:`${d}, see errors property for more details`,errors:p});if(be(n.validateBody)&&ye(t,n.logLevel??"info",d,[r],p),we(n.validateBody))return m}i(su,"handleBodyValidation");function au(t,e,n){if(!n.validateHeaders||n.validateHeaders==="none")return;let r={};e.headers.forEach((a,u)=>{r[u]=a});let o=gt(t),s=ft(o.filter(a=>a.location==="header"),r,t.route.path,e.method.toLowerCase(),"header");if(!s.isValid){let a="Header validation failed",u=v.badRequest(e,t,{detail:`${a}, see errors property for more details`,errors:s.errors});if(be(n.validateHeaders)&&ye(t,n.logLevel??"info",a,s.invalidValues,s.errors),we(n.validateHeaders))return u}}i(au,"handleHeadersValidation");function uu(t,e,n){if(!n.validatePathParameters||n.validatePathParameters==="none")return;let r=gt(t),o=ft(r.filter(s=>s.location==="path"),e.params,t.route.path,e.method.toLowerCase(),"path");if(!o.isValid){let s="Path parameters validation failed",a=v.badRequest(e,t,{detail:`${s}, see errors property for more details`,errors:o.errors});if(be(n.validatePathParameters)&&ye(t,n.logLevel??"info",s,o.invalidValues,o.errors),we(n.validatePathParameters))return a}}i(uu,"handlePathParameterValidation");function cu(t,e,n){if(!n.validateQueryParameters||n.validateQueryParameters==="none")return;let r=gt(t),o=ft(r.filter(s=>s.location==="query"),e.query,t.route.path,e.method.toLowerCase(),"query");if(!o.isValid){let s="Query parameters validation failed",a=v.badRequest(e,t,{detail:`${s}, see errors property for more details`,errors:o.errors});if(be(n.validateQueryParameters)&&ye(t,n.logLevel??"info",s,o.invalidValues,o.errors),we(n.validateQueryParameters))return a}}i(cu,"handleQueryParameterValidation");var Jo=i(async(t,e,n)=>{let r=cu(e,t,n);if(r!==void 0||(r=uu(e,t,n),r!==void 0)||(r=au(e,t,n),r!==void 0))return r;let o=await su(e,t,n);return o!==void 0?o:t},"RequestValidationInboundPolicy"),lu=Jo;var du=i(async(t,e,n,r)=>{if(n.origins===void 0||n.origins.length===0)throw new y(`RequireOriginInboundPolicy '${r}' configuration error - no allowed origins specified`);let o=typeof n.origins=="string"?n.origins.split(","):n.origins;o=o.map(a=>a.trim());let s=t.headers.get("origin");if(!s||!o.includes(s)){let a=n.failureDetail??"Forbidden";return v.forbidden(t,e,{detail:a})}return t},"RequireOriginInboundPolicy");var pu=i(async(t,e,n)=>new z(t,{body:n.body}),"SetBodyInboundPolicy");var mu=i(async(t,e,n,r)=>{let o=n.headers;if(!o||!Array.isArray(o)||o.length==0)throw new y(`SetHeadersInboundPolicy '${r}' options.headers must be a valid array of { name, value }`);let s=new Headers(t.headers);return o.forEach(u=>{if(!u.name||u.name.length===0)throw new y(`SetHeadersInboundPolicy '${r}' each option.headers[] entry must have a name property`);let c=u.overwrite===void 0?!0:u.overwrite;(!s.has(u.name)||c)&&s.set(u.name,u.value)}),new z(t,{headers:s})},"SetHeadersInboundPolicy");var gu=i(async(t,e,n,r,o)=>{let s=r.headers;if(!s||!Array.isArray(s)||s.length==0)throw new y(`SetHeadersOutboundPolicy '${o}' options.headers must be a valid array of { name, value }`);let a=new Headers(t.headers);return s.forEach(c=>{if(!c.name||c.name.length===0)throw new y(`SetHeadersOutboundPolicy '${o}' each option.headers[] entry must have a name property`);let l=c.overwrite===void 0?!0:c.overwrite;(!a.has(c.name)||l)&&a.set(c.name,c.value)}),new Response(t.body,{headers:a,status:t.status,statusText:t.statusText})},"SetHeadersOutboundPolicy");var fu=i(async(t,e,n,r)=>{let o=n.params;if(!o||!Array.isArray(o)||o.length==0)throw new y(`SetQueryParamsInboundPolicy '${r}' options.params must be a valid array of { name, value }`);let s=new URL(t.url);return o.forEach(u=>{if(!u.name||u.name.length===0)throw new y(`SetQueryParamsInboundPolicy '${r}' each option.params[] entry must have a name property`);let c=u.overwrite===void 0?!0:u.overwrite;(!s.searchParams.has(u.name)||c)&&s.searchParams.set(u.name,u.value)}),new z(s.toString(),t)},"SetQueryParamsInboundPolicy");var hu=i(async(t,e,n,r,o)=>{if(!r.status||isNaN(r.status)||r.status<100||r.status>599)throw new Error(`Invalid SetStatusOutboundPolicy '${o}' - status must be a valid number between 100 and 599, not '${r.status}'`);return new Response(t.body,{headers:t.headers,status:r.status,statusText:r.statusText??t.statusText})},"SetStatusOutboundPolicy");var Dd=i(async t=>new Promise(n=>{setTimeout(n,t)}),"sleep"),yu=i(async(t,e,n,r)=>{if(!n||n.sleepInMs===void 0||isNaN(n.sleepInMs))throw new y(`SleepInboundPolicy '${r} must have a valid options.sleepInMs value`);return await Dd(n.sleepInMs),t},"SleepInboundPolicy");var bu=i(async(t,e,n,r)=>{G(n,r).required("secret","string").optional("allowUnauthenticatedRequests","boolean").optional("requiredClaims","object");let o={secret:n.secret,allowUnauthenticatedRequests:n.allowUnauthenticatedRequests??!1},s=await ee(t,e,o,r);if(s instanceof Response)return s;if(!(s instanceof z))throw new $("Invalid State - SupabaseJwtInboundPolicy encountered a non-response that wasn't a ZuploRequest type')");let a=n.requiredClaims;if(!a)return s;let u=t.user?.data.app_metadata;if(!u)throw new A(`SupabaseJwtInboundPolicy policy '${r}' - has requiredClaims but the JWT token had no app_metadata property`);let c=Object.keys(a),l=[];return c.forEach(d=>{let p=a[d];Array.isArray(p)?p.includes(u[d])||l.push(d):p!==u[d]&&l.push(d)}),l.length>0?v.unauthorized(t,e,{detail:`Invalid JWT token - missing valid claims ${l.join(", ")}`}):s},"SupabaseJwtInboundPolicy");var wu=i(async(t,e,n,r)=>{G(n,r).required("activeDirectoryTenantId","string").required("activeDirectoryClientId","string").required("activeDirectoryClientSecret","string").optional("tokenRetries","number").optional("expirationOffsetSeconds","number");let o=await X(r,n),s=new Y(o,e),a=await s.get(r);if(!a){let u=await Hd(n,e);s.put(r,u.access_token,u.expires_in-(n.expirationOffsetSeconds??300)),a=u.access_token}return t.headers.set("Authorization",`Bearer ${a}`),t},"UpstreamAzureAdServiceAuthInboundPolicy");async function Hd(t,e){let n=new URLSearchParams({client_id:t.activeDirectoryClientId,scope:`${t.activeDirectoryClientId}/.default`,client_secret:t.activeDirectoryClientSecret,grant_type:"client_credentials"}),r=await se({retries:t.tokenRetries??3,retryDelayMs:10},`https://login.microsoftonline.com/${t.activeDirectoryTenantId}/oauth2/v2.0/token`,{headers:{"content-type":"application/x-www-form-urlencoded"},method:"POST",body:n});if(r.status!==200){try{let s=await r.text();e.log.error("Could not get token from Azure AD",s)}catch{}throw new A("Could not get token from Azure AD")}let o=await r.json();if(o&&typeof o=="object"&&"access_token"in o&&typeof o.access_token=="string"&&"expires_in"in o&&typeof o.expires_in=="number")return{access_token:o.access_token,expires_in:o.expires_in};throw new A("Response returned from Azure AD is not in the expected format.")}i(Hd,"getAccessToken");var Ru="https://accounts.google.com/o/oauth2/token",Ko,Pu=i(async(t,e,n,r)=>{G(n,r).required("serviceAccountJson","string"),Ko||(Ko=await ue.init(n.serviceAccountJson));let o={scope:["https://www.googleapis.com/auth/cloud-platform","https://www.googleapis.com/auth/firebase.database","https://www.googleapis.com/auth/firebase.messaging","https://www.googleapis.com/auth/identitytoolkit","https://www.googleapis.com/auth/userinfo.email"].join(" ")},s=await X(r,n),a=new Y(s,e),u=await a.get(r);if(!u){let c=await Ee({serviceAccount:Ko,audience:Ru,payload:o}),l=await ln(Ru,c,{retries:n.tokenRetries??3,retryDelayMs:10});if(!l.access_token)throw new A("Invalid OAuth response from Firebase");u=l.access_token,a.put(r,u,(l.expires_in??3600)-(n.expirationOffsetSeconds??300))}return t.headers.set("Authorization",`Bearer ${u}`),t},"UpstreamFirebaseAdminAuthInboundPolicy");var Ud="https://identitytoolkit.googleapis.com/google.identity.identitytoolkit.v1.IdentityToolkit",Zd=["acr","amr","at_hash","aud","auth_time","azp","cnf","c_hash","exp","iat","iss","jti","nbf","nonce"],Yo,Eu=i(async(t,e,n,r)=>{if(G(n,r).required("serviceAccountJson","string").required("webApiKey","string").optional("developerClaims","object").optional("userId","string").optional("userIdPropertyPath","string"),!n.userId&&!n.userIdPropertyPath)throw new y(`Either 'userId' or 'userIdPropertyPath' options must be set on policy '${r}'.`);let o={};if(typeof n.developerClaims<"u"){for(let p in n.developerClaims)if(Object.prototype.hasOwnProperty.call(n.developerClaims,p)){if(Zd.indexOf(p)!==-1)throw new y(`Developer claim "${p}" is reserved and cannot be specified.`);o[p]=n.developerClaims[p]}}Yo||(Yo=await ue.init(n.serviceAccountJson));let s=n.userId;if(!s&&!n.userIdPropertyPath){if(!t.user)throw new A("Unable to set userId for upstream auth policy as request.user is 'undefined'. Do you have an authentication policy before this policy?.");s=t.user?.sub}else if(n.userIdPropertyPath){if(!t.user)throw new A(`Unable to apply userIdPropertyPath '${n.userIdPropertyPath}' as request.user is 'undefined'. Do you have an authentication policy before this policy?`);s=ze(t.user,n.userIdPropertyPath,"userIdPropertyPath")}if(!s)throw new A(`Unable to determine user from for the policy ${r}`);let a=await X(r,n),u=new Y(a,e),c={uid:s,claims:o},l=await Un(JSON.stringify(c)),d=await u.get(l);if(!d){let p=await Ee({serviceAccount:Yo,audience:Ud,payload:c}),m=`https://identitytoolkit.googleapis.com/v1/accounts:signInWithCustomToken?key=${n.webApiKey}`,g=await bs(m,p,{retries:n.tokenRetries??3,retryDelayMs:10});if(!g.idToken)throw new A("Invalid token response from Firebase");d=g.idToken,u.put(l,d,(g.expiresIn?parseInt(g.expiresIn):3600)-(n.expirationOffsetSeconds??300))}return t.headers.set("Authorization",`Bearer ${d}`),t},"UpstreamFirebaseUserAuthInboundPolicy");var Qo,Iu=i(async(t,e,n,r)=>{G(n,r).required("audience","string").required("serviceAccountJson","string"),Qo||(Qo=await ue.init(n.serviceAccountJson));let o=await Ee({serviceAccount:Qo,audience:n.audience});return t.headers.set("Authorization",`Bearer ${o}`),t},"UpstreamGcpJwtInboundPolicy");var Tu="https://www.googleapis.com/oauth2/v4/token",Xo,xu=i(async(t,e,n,r)=>{G(n,r).required("serviceAccountJson","string").optional("audience","string").optional("tokenRetries","number").optional("expirationOffsetSeconds","number"),Xo||(Xo=await ue.init(n.serviceAccountJson));let o={};if(n.scopes&&n.audience)throw new y("UpstreamGcpServiceAuthInboundPolicy - Either the 'scopes' or the 'audience' property can be set, not both.");if(n.scopes)try{let c=je(n.scopes);o.scope=c.join(" ")}catch(c){throw c instanceof y?new y(`UpstreamGcpServiceAuthInboundPolicy - The property 'scopes' is invalid. ${c.message}`):c}n.audience&&(o.target_audience=`${n.audience}`);let s=await X(r,n),a;n.useMemoryCacheOnly?a=new Je(s):a=new Y(s,e);let u=await a.get(r);if(!u){let c=await Ee({serviceAccount:Xo,audience:Tu,payload:o}),l=await ln(Tu,c,{retries:n.tokenRetries??3,retryDelayMs:10});if(n.audience){if(!l.id_token)throw new A("Invalid token response from GCP");u=l.id_token}else{if(!l.access_token)throw new A("Invalid token response from GCP");u=l.access_token}a.put(r,u,3600-(n.expirationOffsetSeconds??300))}return t.headers.set("Authorization",`Bearer ${u}`),t},"UpstreamGcpServiceAuthInboundPolicy");var vu=i(async(t,e,n)=>{let r=t.clone(),o;try{o=await r.json()}catch{return v.badRequest(t,e,{detail:"Invalid JSON body - expected well-formed JSON document"})}if(n.validator(o))return t;let{errors:a}=n.validator;if(!a)throw new $("Invalid state - validator error object is undefined even though validation failed.");let u=a.map(c=>c.instancePath===void 0||c.instancePath===""?"Body "+c.message:c.instancePath.replace("/","")+" "+c.message);return v.badRequest(t,e,{detail:"Incoming body did not pass schema validation",errors:u})},"ValidateJsonSchemaInbound");var Au=Ce(Cu());var tr=class extends Oe{static{i(this,"XmlToJsonOutboundPolicy")}parser;parseOnStatusCodes;constructor(e,n){super(e,n),G(this.options,this.policyName).optional("removeNSPrefix","boolean").optional("ignoreProcessingInstructions","boolean").optional("ignoreDeclarations","boolean").optional("ignoreAttributes","boolean").optional("stopNodes","array").optional("attributeNamePrefix","string").optional("textNodeName","string").optional("trimValues","boolean"),this.parseOnStatusCodes=e.parseOnStatusCodes?nt(e.parseOnStatusCodes):void 0,this.parser=new Au.XMLParser({removeNSPrefix:e?.removeNSPrefix??!0,ignorePiTags:e?.ignoreProcessingInstructions??!0,ignoreDeclaration:e?.ignoreDeclarations??!0,ignoreAttributes:e?.ignoreAttributes??!0,stopNodes:e?.stopNodes??[],attributeNamePrefix:e?.attributeNamePrefix??"@_",textNodeName:e?.textNodeName??"#text",trimValues:e?.trimValues??!0})}async handler(e,n,r){if(this.parseOnStatusCodes&&!this.parseOnStatusCodes.includes(e.status))return e;let o;try{let u=await e.text();o=this.parser.parse(u)}catch(u){let c=`XmlToJsonOutboundPolicy - Error parsing XML contents in policy '${this.policyName}'.`;throw r.log.error(c,u),new A(c)}let s=new Headers(e.headers);return s.set("content-type","application/json"),new Response(JSON.stringify(o),{status:e.status,statusText:e.statusText,headers:s})}};var nr=class{static{i(this,"ServiceProviderImpl")}services=new Map;addService(e,n){if(this.services.get(e))throw new $(`A service with the name ${e} already exists -- you cannot have duplicate services`);this.services.set(e,n)}getService(e){return this.services.get(e)}};var rr=class{static{i(this,"BackgroundDispatcher")}#e;constructor(e,n){if(!n||n.msDelay===void 0)throw new Error("BackgroundDispatcher: options.msDelay is required");this.#e=new q(n.name??"",n.msDelay,e)}enqueue=e=>{this.#e.enqueue(e),Rn().waitUntil(this.#e.waitUntilFlushed())}};var or=class{static{i(this,"BackgroundLoader")}#e=new Map;#t;#n;#r=new Map;constructor(e,n){this.#t=e,this.#n=n*1e3}#o(e){let n=this.#e.get(e);n&&(n.expiry=new Date(Date.now()+this.#n))}#i(e){return e.expiry<=new Date}async get(e){let n=this.#e.get(e);return n&&!this.#i(n)?(this.#s(e),n.data):this.#a(e)}async#s(e){let n=this.#r.get(e);if(n!==void 0)return n.wrap();let r=this.#a(e);return this.#r.set(e,new Dt(r)),await new Dt(r).wrap(),this.#r.delete(e),r}async#a(e){let n=this.#r.get(e);if(n===void 0){let r=this.#t(e);n=new Dt(r),this.#o(e);let o=await n.wrap();this.#e.set(e,{data:o,expiry:new Date(Date.now()+this.#n)})}return n.wrap()}},Dt=class{static{i(this,"WrappedPromise")}#e;#t=[];#n;#r;constructor(e){Rn().waitUntil(e),this.#e=e,this.#e.then(r=>{this.#t.forEach(o=>o.resolve(r)),this.#n=r}).catch(r=>{this.#t.forEach(o=>o.reject(r)),this.#r=r})}async wrap(){if(this.#r)throw this.#r;if(this.#n)return this.#n;let e=this;return new Promise((r,o)=>{e.#t.push({resolve:r,reject:o})})}};var ti=["sha-1","sha-256","sha-384","sha-512"],ir=class{static{i(this,"BaseCryptoBeta")}};var sr=class extends ir{static{i(this,"WorkerCryptoBeta")}async digest(e,n){if(!ti.includes(e.toLowerCase()))throw new A(`Algorithm ${e} is not supported. Try using ${ti.join(", ")}`);let r=new TextEncoder().encode(n),o=await crypto.subtle.digest(e,r);return Array.from(new Uint8Array(o)).map(u=>u.toString(16).padStart(2,"0")).join("")}};var ar=class{constructor(e){this.context=e}static{i(this,"BaseKeyValueStore")}};var ur=class extends ar{static{i(this,"WorkerKeyValueStore")}#e;constructor(e){super(e);let n=w.instance.runtime.ZUPLO_KV;if(!n)throw new Zt("The Key Value Store feature is not enabled for this project.");this.#e=n}put(e,n,r){if(typeof e!="string")throw new y("value must be of type string");return this.#e.put(e,n,r?{expirationTtl:r.expirationSecondsTtl}:void 0)}get(e,n){return this.#e.get(e,{type:"text",cacheTtl:n?.cacheSecondsTtl})}delete(e){return this.#e.delete(e)}};
|
|
78
78
|
/*! For license information please see index.min.cjs.LEGAL.txt */
|