fest-gateway 0.1.0

package/dist/server/pipeline/record.js

@@ -0,0 +1,49 @@
+/**
+ * Building a usage record.
+ *
+ * Shared by both pipelines — but only this. The two pipelines deliberately do
+ * not share a request path, because the byte-for-byte rule on the subscription
+ * side is only enforceable while there is no common code path tempting someone
+ * to add "just one" transform to it. What they SHOULD share is the shape of
+ * what they record, so that a field added for one is never silently absent for
+ * the other: a dashboard column that is populated on one path and blank on the
+ * other is worse than a column that does not exist.
+ */
+import { EMPTY_USAGE } from "../../shared/types.js";
+export function buildRecord(base, partial) {
+    return {
+        id: base.id,
+        startedAt: base.startedAt,
+        endedAt: Date.now(),
+        posture: base.posture,
+        identityCarrier: base.identityCarrier,
+        callerFingerprint: base.callerFingerprint,
+        userId: base.userId,
+        tokenId: base.tokenId,
+        credentialFingerprint: base.credentialFingerprint,
+        credentialOrigin: base.credentialOrigin,
+        sessionId: base.sessionId,
+        requestedModel: null,
+        servedModel: null,
+        upstream: base.upstream,
+        stream: false,
+        httpStatus: null,
+        partial: false,
+        usage: EMPTY_USAGE,
+        costUsd: null,
+        costBasis: "none",
+        notionalCostUsd: null,
+        ttfbMs: null,
+        durationMs: Date.now() - base.startedAt,
+        bytesIn: 0,
+        bytesOut: 0,
+        upstreamRequestId: null,
+        rateLimit: null,
+        clientVersion: base.clientVersion,
+        pipeline: base.pipeline,
+        routeId: base.routeId,
+        credentialsConsidered: base.credentialsConsidered,
+        ...partial,
+    };
+}
+//# sourceMappingURL=record.js.map

package/dist/server/pipeline/record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record.js","sourceRoot":"","sources":["../../../server/pipeline/record.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAQH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAoBpD,MAAM,UAAU,WAAW,CACzB,IAAgB,EAChB,OAAyD;IAEzD,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,cAAc,EAAE,IAAI;QACpB,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,KAAK;QACb,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,MAAM;QACjB,eAAe,EAAE,IAAI;QACrB,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS;QACvC,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,CAAC;QACX,iBAAiB,EAAE,IAAI;QACvB,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,GAAG,OAAO;KACX,CAAC;AACJ,CAAC"}

package/dist/server/pipeline/substitute.js

@@ -0,0 +1,287 @@
+/**
+ * The substitute pipeline: serve a request from a provider that is not the
+ * caller's own Anthropic subscription, on a credential the SERVER holds.
+ *
+ * This is the path where rewriting is allowed — and where the interesting risk
+ * lives. Three invariants hold it together, and each one is a test:
+ *
+ *  1. **The inbound credential is never forwarded.** The request is built from
+ *     scratch by the adapter; inbound headers are not copied. A developer's
+ *     Anthropic bearer reaching Fireworks would be disclosing their personal
+ *     credential to a third party, and the only reliable way to prevent it is
+ *     to never build a request from the inbound headers at all.
+ *  2. **A missing server credential refuses the request.** It does not fall
+ *     back to the subscription. Succeeding on the wrong credential — or with
+ *     the wrong model — is worse than a clear failure, because nobody
+ *     investigates a success.
+ *  3. **Every credential considered is recorded**, including the ones skipped
+ *     and why.
+ *
+ * Usage metering is unchanged from the pass-through path, because the adapter
+ * targets an Anthropic-compatible Messages endpoint: the same SSE parser and
+ * the same accumulator read the same `message_start` / `message_delta` events.
+ * A provider that needed a different stream shape would need its own reader —
+ * see `Adapter.readUsage`.
+ */
+import { randomUUID } from "node:crypto";
+import { EMPTY_USAGE } from "../../shared/types.js";
+import { anthropicError, statusForErrorType, sseErrorEvent, describeUpstreamFailure, } from "../http/errors.js";
+import { buildDownstreamHeaders } from "../http/headers.js";
+import { createSseParser } from "../http/sse.js";
+import { createUsageAccumulator, usageFromJson } from "../usage/accumulator.js";
+import { priceUsage } from "../usage/pricing.js";
+import { ADAPTER_PRICE_PROVIDERS } from "../adapters/registry.js";
+import { pipeWithTee, beginStream } from "../http/pipe.js";
+import { buildRecord } from "./record.js";
+import { log } from "../log.js";
+/** Refuse a request that cannot be served, having recorded why. */
+export function refuse(res, sink, base, decision, considered, message) {
+    const type = "invalid_request_error";
+    const status = statusForErrorType(type);
+    sink.record(buildRecord({
+        ...base,
+        pipeline: "substitute",
+        upstream: decision.upstream?.baseUrl ?? "",
+        routeId: decision.route?.id ?? null,
+        credentialsConsidered: considered,
+    }, {
+        status: "bad_request",
+        httpStatus: status,
+        requestedModel: decision.requestedModel,
+        servedModel: null,
+        errorType: type,
+        errorMessage: message,
+    }));
+    res.writeHead(status, {
+        "content-type": "application/json",
+        // A missing server credential is not fixed by trying again. Without this
+        // the client retries ten times with backoff before showing the developer a
+        // message that was accurate on the first attempt.
+        "x-should-retry": "false",
+    });
+    // Claude Code renders this to the developer mid-task, TRUNCATED, so the
+    // first sentence has to carry the whole actionable point.
+    res.end(anthropicError(type, message));
+}
+export async function handleSubstitute(_req, res, ctx) {
+    const { decision, adapter, sink } = ctx;
+    const upstream = decision.upstream;
+    if (upstream === null)
+        throw new Error("substitute pipeline reached with no upstream");
+    // The served model here is a provider-native id (`accounts/fireworks/models/…`)
+    // which is ambiguous on its own, so pricing needs to know whose catalog to
+    // look in. Derived from the adapter rather than the upstream id, because an
+    // operator can name an upstream anything they like.
+    const priceProvider = ADAPTER_PRICE_PROVIDERS[upstream.adapter];
+    const recordBase = {
+        ...ctx.base,
+        pipeline: "substitute",
+        upstream: upstream.baseUrl,
+        routeId: decision.route?.id ?? null,
+        credentialsConsidered: ctx.considered,
+    };
+    const finish = (partial) => {
+        sink.record(buildRecord(recordBase, partial));
+    };
+    const plan = adapter.plan({
+        path: ctx.path,
+        body: ctx.body,
+        servedModel: decision.servedModel,
+        betas: ctx.betas,
+        stream: ctx.stream,
+        secret: ctx.secret,
+        upstream,
+    });
+    const base = {
+        requestedModel: decision.requestedModel,
+        servedModel: decision.servedModel,
+        stream: ctx.stream,
+        bytesIn: plan.body.byteLength,
+    };
+    const abort = new AbortController();
+    let response;
+    try {
+        response = await fetch(plan.url, {
+            method: "POST",
+            headers: plan.headers,
+            body: plan.body,
+            signal: abort.signal,
+            redirect: "error",
+        });
+    }
+    catch (err) {
+        const type = "api_error";
+        log.warn("substitute upstream failed", {
+            id: ctx.base.id,
+            upstream: upstream.id,
+            route: decision.route?.id ?? null,
+            error: String(err).slice(0, 200),
+        });
+        finish({
+            ...base,
+            status: "upstream_error",
+            httpStatus: statusForErrorType(type),
+            errorType: type,
+            errorMessage: String(err).slice(0, 200),
+        });
+        res.writeHead(statusForErrorType(type), { "content-type": "application/json" });
+        res.end(anthropicError(type, `Fest: upstream ${JSON.stringify(upstream.id)} could not be reached. ` +
+            `This request was NOT retried against Anthropic — it would have used a different model.`));
+        return;
+    }
+    // A 401 here means the SERVER's credential is bad, which is an operator
+    // problem, not a developer one. Recorded as `rejected` so the posture screen
+    // can say which credential failed rather than just showing a 401.
+    const considered = response.status === 401 || response.status === 403
+        ? ctx.considered.map((c) => c.result === "used"
+            ? { ...c, result: "rejected", reason: `upstream returned ${response.status}` }
+            : c)
+        : ctx.considered;
+    const withCreds = { ...recordBase, credentialsConsidered: considered };
+    const finishWith = (partial) => {
+        sink.record(buildRecord(withCreds, partial));
+    };
+    const downstream = buildDownstreamHeaders(response.headers, { stream: ctx.stream });
+    const upstreamRequestId = response.headers.get("request-id");
+    const common = { ...base, httpStatus: response.status, upstreamRequestId };
+    // ── upstream refused ───────────────────────────────────────────────────────
+    /**
+     * Handled before the stream/non-stream split — see the same block in
+     * `passthrough.ts` for why. It matters more here: this path can reach a
+     * provider whose validation rules are its own, so "which field did Fireworks
+     * object to" is a question only its error body can answer, and a substituted
+     * request that fails is exactly the one an operator has to explain.
+     */
+    if (!response.ok) {
+        const failure = describeUpstreamFailure(response.status, await response.text());
+        // Logged as well as recorded — see the same block in `passthrough.ts`. The
+        // route and upstream ids are here because on this path the first question
+        // is always "which provider, chosen by which rule".
+        log.warn("upstream refused", {
+            id: ctx.base.id,
+            status: response.status,
+            type: failure.type,
+            message: failure.message,
+            requestedModel: decision.requestedModel,
+            servedModel: decision.servedModel,
+            stream: ctx.stream,
+            bytesIn: plan.body.byteLength,
+            pipeline: "substitute",
+            upstream: upstream.id,
+            route: decision.route?.id ?? null,
+            upstreamRequestId,
+        });
+        res.writeHead(response.status, buildDownstreamHeaders(response.headers, { stream: false }));
+        res.end(failure.text);
+        finishWith({
+            ...common,
+            status: "upstream_error",
+            bytesOut: Buffer.byteLength(failure.text),
+            errorType: failure.type,
+            errorMessage: failure.message,
+        });
+        return;
+    }
+    // ── non-streaming ──────────────────────────────────────────────────────────
+    if (!ctx.stream || response.body === null) {
+        const text = await response.text();
+        let usage = EMPTY_USAGE;
+        try {
+            usage =
+                adapter.readUsage?.(JSON.parse(text)) ?? usageFromJson(JSON.parse(text)) ?? EMPTY_USAGE;
+        }
+        catch {
+            /* relay regardless; we simply report less */
+        }
+        // Never `subscription` on this path: a server-held credential is real org
+        // spend by definition, whatever the caller presented.
+        const priced = priceUsage(decision.servedModel, usage, false, priceProvider);
+        res.writeHead(response.status, downstream);
+        res.end(text);
+        finishWith({
+            ...common,
+            status: "ok",
+            usage,
+            costUsd: priced.cost,
+            costBasis: priced.basis,
+            notionalCostUsd: priced.notionalCost,
+            bytesOut: Buffer.byteLength(text),
+        });
+        return;
+    }
+    // ── streaming ──────────────────────────────────────────────────────────────
+    const parser = createSseParser();
+    const acc = createUsageAccumulator();
+    beginStream(res, response.status, downstream);
+    try {
+        const result = await pipeWithTee(response.body, res, {
+            abort,
+            startedAt: ctx.base.startedAt,
+            observe: (chunk) => {
+                for (const event of parser.push(chunk))
+                    acc.apply(event);
+            },
+        });
+        for (const event of parser.flush())
+            acc.apply(event);
+        const usage = acc.snapshot();
+        const priced = priceUsage(decision.servedModel, usage, false, priceProvider);
+        const streamErr = acc.streamError();
+        /**
+         * Only a 2xx reaches here — a non-2xx was recorded and relayed above, which
+         * is what keeps a provider that refuses everything from reading as a zero
+         * error rate. (It once did: status was derived purely from client aborts
+         * and in-band SSE error events, so a provider refusing before emitting any
+         * event produced a tidy, successful-looking record.)
+         *
+         * A client abort still wins over an in-band stream error: the developer
+         * walking away is the more specific fact about what happened.
+         */
+        let status = "ok";
+        if (result.clientAborted)
+            status = "client_abort";
+        else if (streamErr)
+            status = "stream_error";
+        if (!result.clientAborted)
+            res.end();
+        finishWith({
+            ...common,
+            status,
+            partial: result.clientAborted || !result.completed,
+            usage,
+            costUsd: priced.cost,
+            costBasis: priced.basis,
+            notionalCostUsd: priced.notionalCost,
+            ttfbMs: result.ttfbMs,
+            bytesOut: result.bytesOut,
+            ...(streamErr ? { errorType: streamErr.type, errorMessage: streamErr.message } : {}),
+        });
+    }
+    catch (err) {
+        for (const event of parser.flush())
+            acc.apply(event);
+        const usage = acc.snapshot();
+        const priced = priceUsage(decision.servedModel, usage, false, priceProvider);
+        log.warn("substitute stream failed mid-flight", {
+            id: ctx.base.id,
+            upstream: upstream.id,
+            error: String(err).slice(0, 200),
+        });
+        if (!res.writableEnded) {
+            res.write(sseErrorEvent("api_error", "Fest: upstream connection closed mid-stream."));
+            res.end();
+        }
+        finishWith({
+            ...common,
+            status: "stream_error",
+            partial: true,
+            usage,
+            costUsd: priced.cost,
+            costBasis: priced.basis,
+            notionalCostUsd: priced.notionalCost,
+            errorType: "api_error",
+            errorMessage: String(err).slice(0, 200),
+        });
+    }
+}
+//# sourceMappingURL=substitute.js.map

package/dist/server/pipeline/substitute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"substitute.js","sourceRoot":"","sources":["../../../server/pipeline/substitute.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAM1C,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAgBhC,mEAAmE;AACnE,MAAM,UAAU,MAAM,CACpB,GAAmB,EACnB,IAAe,EACf,IAAqF,EACrF,QAAuB,EACvB,UAAwC,EACxC,OAAe;IAEf,MAAM,IAAI,GAAG,uBAAuB,CAAC;IACrC,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CACT,WAAW,CACT;QACE,GAAG,IAAI;QACP,QAAQ,EAAE,YAAY;QACtB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE;QAC1C,OAAO,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,IAAI,IAAI;QACnC,qBAAqB,EAAE,UAAU;KAClC,EACD;QACE,MAAM,EAAE,aAAa;QACrB,UAAU,EAAE,MAAM;QAClB,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,WAAW,EAAE,IAAI;QACjB,SAAS,EAAE,IAAI;QACf,YAAY,EAAE,OAAO;KACtB,CACF,CACF,CAAC;IACF,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,cAAc,EAAE,kBAAkB;QAClC,yEAAyE;QACzE,2EAA2E;QAC3E,kDAAkD;QAClD,gBAAgB,EAAE,OAAO;KAC1B,CAAC,CAAC;IACH,wEAAwE;IACxE,0DAA0D;IAC1D,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAqB,EACrB,GAAmB,EACnB,GAAsB;IAEtB,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;IACxC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACnC,IAAI,QAAQ,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAEvF,gFAAgF;IAChF,2EAA2E;IAC3E,4EAA4E;IAC5E,oDAAoD;IACpD,MAAM,aAAa,GAAG,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEhE,MAAM,UAAU,GAAe;QAC7B,GAAG,GAAG,CAAC,IAAI;QACX,QAAQ,EAAE,YAAY;QACtB,QAAQ,EAAE,QAAQ,CAAC,OAAO;QAC1B,OAAO,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,IAAI,IAAI;QACnC,qBAAqB,EAAE,GAAG,CAAC,UAAU;KACtC,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,OAAyD,EAAQ,EAAE;QACjF,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACxB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ;KACT,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG;QACX,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;KAC9B,CAAC;IAEF,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;YAC/B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,WAAW,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE;YACrC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;YACf,QAAQ,EAAE,QAAQ,CAAC,EAAE;YACrB,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,IAAI,IAAI;YACjC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACjC,CAAC,CAAC;QACH,MAAM,CAAC;YACL,GAAG,IAAI;YACP,MAAM,EAAE,gBAAgB;YACxB,UAAU,EAAE,kBAAkB,CAAC,IAAI,CAAC;YACpC,SAAS,EAAE,IAAI;YACf,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACxC,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAChF,GAAG,CAAC,GAAG,CACL,cAAc,CACZ,IAAI,EACJ,kBAAkB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,yBAAyB;YACpE,wFAAwF,CAC3F,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,wEAAwE;IACxE,6EAA6E;IAC7E,kEAAkE;IAClE,MAAM,UAAU,GACd,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAChD,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACvB,CAAC,CAAC,MAAM,KAAK,MAAM;YACjB,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,UAAmB,EAAE,MAAM,EAAE,qBAAqB,QAAQ,CAAC,MAAM,EAAE,EAAE;YACvF,CAAC,CAAC,CAAC,CACN;QACH,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;IACrB,MAAM,SAAS,GAAe,EAAE,GAAG,UAAU,EAAE,qBAAqB,EAAE,UAAU,EAAE,CAAC;IACnF,MAAM,UAAU,GAAG,CAAC,OAAyD,EAAQ,EAAE;QACrF,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,sBAAsB,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACpF,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAE3E,8EAA8E;IAC9E;;;;;;OAMG;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,uBAAuB,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAChF,2EAA2E;QAC3E,0EAA0E;QAC1E,oDAAoD;QACpD,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE;YAC3B,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;YACf,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;YAC7B,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,QAAQ,CAAC,EAAE;YACrB,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,IAAI,IAAI;YACjC,iBAAiB;SAClB,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5F,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtB,UAAU,CAAC;YACT,GAAG,MAAM;YACT,MAAM,EAAE,gBAAgB;YACxB,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC;YACzC,SAAS,EAAE,OAAO,CAAC,IAAI;YACvB,YAAY,EAAE,OAAO,CAAC,OAAO;SAC9B,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,8EAA8E;IAC9E,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,KAAK,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC;YACH,KAAK;gBACH,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,WAAW,CAAC;QAC5F,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;QACD,0EAA0E;QAC1E,sDAAsD;QACtD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAC7E,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACd,UAAU,CAAC;YACT,GAAG,MAAM;YACT,MAAM,EAAE,IAAI;YACZ,KAAK;YACL,OAAO,EAAE,MAAM,CAAC,IAAI;YACpB,SAAS,EAAE,MAAM,CAAC,KAAK;YACvB,eAAe,EAAE,MAAM,CAAC,YAAY;YACpC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,8EAA8E;IAC9E,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,sBAAsB,EAAE,CAAC;IAErC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAE9C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE;YACnD,KAAK;YACL,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS;YAC7B,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;oBAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3D,CAAC;SACF,CAAC,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE;YAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAErD,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAC7E,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAEpC;;;;;;;;;WASG;QACH,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,MAAM,CAAC,aAAa;YAAE,MAAM,GAAG,cAAc,CAAC;aAC7C,IAAI,SAAS;YAAE,MAAM,GAAG,cAAc,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,aAAa;YAAE,GAAG,CAAC,GAAG,EAAE,CAAC;QAErC,UAAU,CAAC;YACT,GAAG,MAAM;YACT,MAAM;YACN,OAAO,EAAE,MAAM,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,SAAS;YAClD,KAAK;YACL,OAAO,EAAE,MAAM,CAAC,IAAI;YACpB,SAAS,EAAE,MAAM,CAAC,KAAK;YACvB,eAAe,EAAE,MAAM,CAAC,YAAY;YACpC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE;YAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAC7E,GAAG,CAAC,IAAI,CAAC,qCAAqC,EAAE;YAC9C,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;YACf,QAAQ,EAAE,QAAQ,CAAC,EAAE;YACrB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACvB,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,WAAW,EAAE,8CAA8C,CAAC,CAAC,CAAC;YACtF,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC;QACD,UAAU,CAAC;YACT,GAAG,MAAM;YACT,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,IAAI;YACb,KAAK;YACL,OAAO,EAAE,MAAM,CAAC,IAAI;YACpB,SAAS,EAAE,MAAM,CAAC,KAAK;YACvB,eAAe,EAAE,MAAM,CAAC,YAAY;YACpC,SAAS,EAAE,WAAW;YACtB,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACxC,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/server/routes/resolve.js

@@ -0,0 +1,176 @@
+/**
+ * Pick a route for a requested model.
+ *
+ * Matching is first-match-wins in file order, with exact matches preferred over
+ * wildcards regardless of where they sit in the file.
+ *
+ * That last rule is worth stating plainly, because "first match wins" and
+ * "exact beats wildcard" are the two conventions people expect and they
+ * disagree. The reason exactness wins here: a table almost always contains a
+ * broad rule (`claude-*` -> somewhere cheap) plus a handful of deliberate
+ * exceptions. If file order alone decided, adding a new exception would require
+ * remembering to put it above the catch-all, and forgetting would silently
+ * route a model somewhere the operator did not intend — with no error, because
+ * both rules are individually valid.
+ *
+ * Within a tier, longer patterns win before file order, so `claude-opus-*`
+ * beats `claude-*` however they are written down.
+ */
+function matches(pattern, model) {
+    if (pattern.endsWith("*"))
+        return model.startsWith(pattern.slice(0, -1));
+    return pattern === model;
+}
+/**
+ * Does this route claim this model id?
+ *
+ * A route's `expose` alias is an exact match for it. The menu and the router
+ * therefore agree by construction: every id Fest publishes is an id Fest can
+ * route, and there is no way to publish one without routing it.
+ */
+export function claimsModel(route, model) {
+    return route.expose === model || matches(route.match, model);
+}
+/** Exact rules first, then longest pattern, then file order. */
+function rank(route, index, model) {
+    // An alias hit is always exact, however wildcard the route's own match is:
+    // the developer selected this entry by name from the menu.
+    const exact = model !== undefined && route.expose === model ? true : !route.match.endsWith("*");
+    return [exact ? 0 : 1, -route.match.length, index];
+}
+function better(a, b) {
+    return a[0] !== b[0] ? a[0] < b[0] : a[1] !== b[1] ? a[1] < b[1] : a[2] < b[2];
+}
+export function resolveRoute(table, requestedModel) {
+    const passthrough = {
+        route: null,
+        upstream: null,
+        requestedModel,
+        servedModel: requestedModel,
+        pipeline: "passthrough",
+    };
+    // A request with no readable model cannot be routed. It stays on the
+    // pass-through path rather than falling into a wildcard: routing a request we
+    // could not identify is exactly how traffic ends up somewhere unintended.
+    if (requestedModel === null || requestedModel === "")
+        return passthrough;
+    let best = null;
+    let bestRank = null;
+    table.routes.forEach((route, index) => {
+        if (!claimsModel(route, requestedModel))
+            return;
+        const r = rank(route, index, requestedModel);
+        if (bestRank === null || better(r, bestRank)) {
+            best = route;
+            bestRank = r;
+        }
+    });
+    if (best === null)
+        return passthrough;
+    const route = best;
+    // A route with a null upstream is a deliberate "keep this one on the
+    // subscription", which is how an operator carves an exception out of a
+    // broad substitution rule.
+    if (route.upstream === null) {
+        return { ...passthrough, route };
+    }
+    const upstream = table.upstreams.get(route.upstream);
+    if (upstream === undefined) {
+        // Unreachable via parseRouteTable, which rejects unknown upstreams at boot.
+        // Kept as a fail-safe rather than a `!`: if it ever happens, passing the
+        // request through is the outcome that cannot leak a credential.
+        return { ...passthrough, route };
+    }
+    return {
+        route,
+        upstream,
+        requestedModel,
+        servedModel: route.model ?? requestedModel,
+        pipeline: "substitute",
+    };
+}
+/** Client-visible Anthropic-ish ids — the same filter Claude Code applies. */
+const ANTHROPIC_MODEL = /(claude|anthropic)/i;
+/**
+ * The upstream that serves Anthropic models nothing else claims.
+ *
+ * Identified by ADAPTER, not by the id an operator happened to type: the
+ * `anthropic` adapter is by definition "Anthropic's own API on a key the server
+ * holds", and that is the property that makes it a safe default. Naming an
+ * upstream `anthropic` while pointing it somewhere else would otherwise decide
+ * where unrouted traffic goes.
+ */
+export function defaultAnthropicUpstream(table) {
+    for (const upstream of table.upstreams.values()) {
+        if (upstream.adapter === "anthropic")
+            return upstream;
+    }
+    return null;
+}
+/**
+ * Resolve for a request that has NO caller credential to pass through.
+ *
+ * This is the key posture: the credential position holds Fest's own identity
+ * token, which is never forwarded, so pass-through cannot serve anything. An
+ * unrouted model there is not "left on the subscription" — there is no
+ * subscription — it is a guaranteed failure on the first message.
+ *
+ * So when the operator has defined an `anthropic` upstream, every Anthropic
+ * model that no route claims is served there, on the org's own key. The
+ * alternative was one exact-match route per model id, which has to be updated
+ * every time Anthropic ships a model and fails silently — as a first-message
+ * 401 — when someone forgets.
+ *
+ * Three things it deliberately does NOT do:
+ *
+ *  - **It never runs in the subscription posture.** That path keeps a caller
+ *    credential, and diverting it to a server-held key would bill the org for
+ *    a request the developer's own plan had already covered. This function is
+ *    reached only where `upstreamCredential === null`, and a plain wildcard
+ *    route in `routes.json` could not express that distinction — `resolveRoute`
+ *    is posture-blind, so `claude-*` -> anthropic would capture subscription
+ *    traffic too. That is why this is code and not config.
+ *  - **It never overrides an explicit route.** A model claimed by any route,
+ *    including an `upstream: null` "keep this on pass-through" carve-out, is
+ *    left exactly where the operator put it.
+ *  - **It never routes a non-Anthropic id.** Sending `gpt-oss-120b` to
+ *    api.anthropic.com buys a confusing 404 from a vendor who never had that
+ *    model, in place of Fest's own message naming the gateway.
+ */
+export function resolveWithoutCallerCredential(table, requestedModel) {
+    const decision = resolveRoute(table, requestedModel);
+    // Already substituted, or claimed by an explicit route: not ours to redirect.
+    if (decision.pipeline === "substitute" || decision.route !== null)
+        return decision;
+    if (requestedModel === null || requestedModel === "")
+        return decision;
+    if (!ANTHROPIC_MODEL.test(requestedModel))
+        return decision;
+    const upstream = defaultAnthropicUpstream(table);
+    if (upstream === null)
+        return decision;
+    return {
+        route: null,
+        upstream,
+        requestedModel,
+        // Anthropic's own id, unchanged. This is a credential substitution, not a
+        // model one: the developer asked for Sonnet and gets Sonnet.
+        servedModel: requestedModel,
+        pipeline: "substitute",
+    };
+}
+/**
+ * Routes in the order they are actually evaluated.
+ *
+ * Exposed for the dashboard because the file's order is NOT the evaluation
+ * order, and showing an operator the file would be showing them something
+ * subtly untrue. Seeing exceptions sorted above the catch-all they override is
+ * the fastest way to confirm a table does what its author meant.
+ */
+export function evaluationOrder(table) {
+    return table.routes
+        .map((route, index) => ({ route, r: rank(route, index) }))
+        .sort((a, b) => (better(a.r, b.r) ? -1 : 1))
+        .map((x) => x.route);
+}
+//# sourceMappingURL=resolve.js.map

package/dist/server/routes/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../../server/routes/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAwBH,SAAS,OAAO,CAAC,OAAe,EAAE,KAAa;IAC7C,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,OAAO,OAAO,KAAK,KAAK,CAAC;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,KAAY,EAAE,KAAa;IACrD,OAAO,KAAK,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,gEAAgE;AAChE,SAAS,IAAI,CAAC,KAAY,EAAE,KAAa,EAAE,KAAc;IACvD,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,KAAK,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,MAAM,CAAC,CAA2B,EAAE,CAA2B;IACtE,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAiB,EAAE,cAA6B;IAC3E,MAAM,WAAW,GAAkB;QACjC,KAAK,EAAE,IAAI;QACX,QAAQ,EAAE,IAAI;QACd,cAAc;QACd,WAAW,EAAE,cAAc;QAC3B,QAAQ,EAAE,aAAa;KACxB,CAAC;IAEF,qEAAqE;IACrE,8EAA8E;IAC9E,0EAA0E;IAC1E,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,KAAK,EAAE;QAAE,OAAO,WAAW,CAAC;IAEzE,IAAI,IAAI,GAAiB,IAAI,CAAC;IAC9B,IAAI,QAAQ,GAAoC,IAAI,CAAC;IAErD,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACpC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,cAAc,CAAC;YAAE,OAAO;QAChD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;QAC7C,IAAI,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC7C,IAAI,GAAG,KAAK,CAAC;YACb,QAAQ,GAAG,CAAC,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC;IACtC,MAAM,KAAK,GAAU,IAAI,CAAC;IAE1B,qEAAqE;IACrE,uEAAuE;IACvE,2BAA2B;IAC3B,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,EAAE,GAAG,WAAW,EAAE,KAAK,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,4EAA4E;QAC5E,yEAAyE;QACzE,gEAAgE;QAChE,OAAO,EAAE,GAAG,WAAW,EAAE,KAAK,EAAE,CAAC;IACnC,CAAC;IAED,OAAO;QACL,KAAK;QACL,QAAQ;QACR,cAAc;QACd,WAAW,EAAE,KAAK,CAAC,KAAK,IAAI,cAAc;QAC1C,QAAQ,EAAE,YAAY;KACvB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAE9C;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAiB;IACxD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;QAChD,IAAI,QAAQ,CAAC,OAAO,KAAK,WAAW;YAAE,OAAO,QAAQ,CAAC;IACxD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,8BAA8B,CAC5C,KAAiB,EACjB,cAA6B;IAE7B,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACrD,8EAA8E;IAC9E,IAAI,QAAQ,CAAC,QAAQ,KAAK,YAAY,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IACnF,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IACtE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC;QAAE,OAAO,QAAQ,CAAC;IAE3D,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IAEvC,OAAO;QACL,KAAK,EAAE,IAAI;QACX,QAAQ;QACR,cAAc;QACd,0EAA0E;QAC1E,6DAA6D;QAC7D,WAAW,EAAE,cAAc;QAC3B,QAAQ,EAAE,YAAY;KACvB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,KAAiB;IAC/C,OAAO,KAAK,CAAC,MAAM;SAChB,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;SACzD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAC3C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC"}