fest-gateway 0.1.0

package/dist/server/http/headers.js

@@ -0,0 +1,189 @@
+/**
+ * Header translation between Claude Code and Anthropic.
+ *
+ * This module is where a subscription pass-through is most easily broken, and
+ * the failures are silent: Anthropic validates an OAuth token against the shape
+ * of the request that carries it, and Claude Code reports "empty or malformed
+ * response" rather than anything actionable. So the rules here are hard
+ * requirements, not style preferences, and each one has a comment saying which
+ * observed failure it prevents.
+ */
+import { HOP_BY_HOP, SECRET_HEADERS } from "../secret/fingerprint.js";
+/** Default when the client omits it entirely. Never an override. */
+const DEFAULT_ANTHROPIC_VERSION = "2023-06-01";
+/**
+ * Headers Fest must never relay upstream regardless of posture.
+ *
+ * `content-length` is the caller's to set — it rewrites the body framing and a
+ * stale value from the inbound request truncates or hangs the upstream POST.
+ * `transfer-encoding` is hop-by-hop and undici sets its own.
+ */
+const NEVER_UPSTREAM = new Set(["content-length", "transfer-encoding"]);
+/**
+ * Build the upstream request headers.
+ *
+ * ON `posture === "subscription"` EVERYTHING NOT EXPLICITLY DROPPED IS FORWARDED
+ * BYTE-FOR-BYTE. Do not "tidy" this:
+ *
+ *  - Do NOT filter, dedupe, sort or canonicalise `anthropic-beta`. Claude Code
+ *    sends 15 comma-separated values (including `oauth-2025-04-20`) and the set
+ *    is part of what the OAuth token is validated against.
+ *  - Do NOT rewrite `user-agent` (`claude-cli/2.1.278 (external, sdk-cli)`) or
+ *    `x-app`, and do NOT drop the `x-stainless-*` telemetry.
+ *  - Do NOT inject attribution or telemetry headers of our own — no `x-title`,
+ *    no `http-referer`, no `x-fest-*`. Those are OpenRouter-style conventions
+ *    and Anthropic rejects the request shape. A future reader will be tempted to
+ *    add them "so usage is attributable"; attribution belongs in Fest's own
+ *    usage records, not on the wire.
+ *
+ * `posture` is taken rather than assumed because the key posture is where model
+ * routing and rewriting will later be permitted; today both postures forward
+ * the same way, which keeps the subscription guarantee the default.
+ */
+export function buildUpstreamHeaders(inbound, opts) {
+    const out = new Headers();
+    let sawAnthropicVersion = false;
+    for (const [name, value] of Object.entries(inbound)) {
+        const lower = name.toLowerCase();
+        if (value === undefined)
+            continue;
+        if (HOP_BY_HOP.has(lower))
+            continue;
+        if (NEVER_UPSTREAM.has(lower))
+            continue;
+        // Fest's identity carriers are ours alone; Anthropic must never see them.
+        if (lower.startsWith("x-fest-"))
+            continue;
+        const values = Array.isArray(value) ? value : [value];
+        for (const one of values)
+            out.append(lower, one);
+        if (lower === "anthropic-version")
+            sawAnthropicVersion = true;
+    }
+    // `host` is hop-by-hop above, so it is re-set here for the real upstream.
+    out.set("host", opts.upstreamHost);
+    if (!sawAnthropicVersion)
+        out.set("anthropic-version", DEFAULT_ANTHROPIC_VERSION);
+    // Metering tees the SSE stream to count tokens; a gzip/zstd-framed body would
+    // have to be inflated first, which means buffering a stream whose whole point
+    // is not being buffered. Verified against production: asking for `identity`
+    // does not change upstream acceptance of a subscription request.
+    if (opts.forceIdentityEncoding !== false)
+        out.set("accept-encoding", "identity");
+    return out;
+}
+/**
+ * Headers worth relaying back to Claude Code.
+ *
+ * An allowlist, not a denylist: anything new that appears upstream is more
+ * likely to confuse the client (or leak) than to help, and the client reads
+ * only these.
+ */
+const DOWNSTREAM_ALLOW = new Set([
+    "content-type",
+    "request-id",
+    "anthropic-request-id",
+    "retry-after",
+]);
+export function buildDownstreamHeaders(upstream, opts) {
+    const out = {};
+    upstream.forEach((value, name) => {
+        const lower = name.toLowerCase();
+        // `set-cookie` and friends are in SECRET_HEADERS; never echo a credential.
+        if (SECRET_HEADERS.has(lower))
+            return;
+        // We decode/re-frame the body (and tee it), so the upstream's encoding and
+        // length no longer describe what the client will actually receive.
+        if (lower === "content-encoding" || lower === "content-length")
+            return;
+        if (HOP_BY_HOP.has(lower))
+            return;
+        // The quota headers are not diagnostics: Claude Code's own `/status` reads
+        // them to show the developer their remaining 5h/7d window. Dropping them
+        // makes Fest look like it broke the client's quota display.
+        if (lower.startsWith("anthropic-ratelimit-")) {
+            out[lower] = value;
+            return;
+        }
+        if (DOWNSTREAM_ALLOW.has(lower))
+            out[lower] = value;
+    });
+    // A non-streaming reply served as `text/plain` makes Claude Code report
+    // "empty or malformed response" — it content-type-switches before parsing.
+    if (out["content-type"] === undefined)
+        out["content-type"] = "application/json";
+    if (opts.stream) {
+        // Any intermediary that buffers turns a token-by-token stream into one
+        // late blob. `no-transform` stops proxies re-compressing; `x-accel-buffering`
+        // is nginx's opt-out and is harmless elsewhere.
+        out["cache-control"] = "no-cache, no-transform";
+        out["x-accel-buffering"] = "no";
+        // Length is unknowable for a stream, and setting it truncates the response.
+        delete out["content-length"];
+    }
+    return out;
+}
+/** Coerce defensively: a malformed upstream value must omit the field, not poison it. */
+function num(raw) {
+    if (raw === null)
+        return undefined;
+    const trimmed = raw.trim();
+    if (trimmed === "")
+        return undefined;
+    const value = Number(trimmed);
+    return Number.isFinite(value) ? value : undefined;
+}
+function str(raw) {
+    if (raw === null)
+        return undefined;
+    const trimmed = raw.trim();
+    return trimmed === "" ? undefined : trimmed;
+}
+/**
+ * Read Anthropic's unified quota headers into a snapshot.
+ *
+ * Returns `null` when none are present, so callers can distinguish "upstream
+ * said nothing about quota" from "quota is at zero". `exactOptionalPropertyTypes`
+ * is on, so absent fields are omitted rather than set to `undefined`.
+ */
+export function parseRateLimit(upstream) {
+    const status = str(upstream.get("anthropic-ratelimit-unified-status"));
+    const fiveHourUtilization = num(upstream.get("anthropic-ratelimit-unified-5h-utilization"));
+    const fiveHourStatus = str(upstream.get("anthropic-ratelimit-unified-5h-status"));
+    const fiveHourResetAt = num(upstream.get("anthropic-ratelimit-unified-5h-reset"));
+    const sevenDayUtilization = num(upstream.get("anthropic-ratelimit-unified-7d-utilization"));
+    const sevenDayStatus = str(upstream.get("anthropic-ratelimit-unified-7d-status"));
+    const sevenDayResetAt = num(upstream.get("anthropic-ratelimit-unified-7d-reset"));
+    const representativeClaim = str(upstream.get("anthropic-ratelimit-unified-representative-claim"));
+    const overageStatus = str(upstream.get("anthropic-ratelimit-unified-overage-status"));
+    const overageDisabledReason = str(upstream.get("anthropic-ratelimit-unified-overage-disabled-reason"));
+    // Mutable mirror of the readonly snapshot, so fields can be omitted rather
+    // than assigned `undefined` (exactOptionalPropertyTypes).
+    const snapshot = {};
+    if (status !== undefined)
+        snapshot.status = status;
+    if (fiveHourUtilization !== undefined)
+        snapshot.fiveHourUtilization = fiveHourUtilization;
+    if (fiveHourStatus !== undefined)
+        snapshot.fiveHourStatus = fiveHourStatus;
+    if (fiveHourResetAt !== undefined)
+        snapshot.fiveHourResetAt = fiveHourResetAt;
+    if (sevenDayUtilization !== undefined)
+        snapshot.sevenDayUtilization = sevenDayUtilization;
+    if (sevenDayStatus !== undefined)
+        snapshot.sevenDayStatus = sevenDayStatus;
+    if (sevenDayResetAt !== undefined)
+        snapshot.sevenDayResetAt = sevenDayResetAt;
+    if (representativeClaim !== undefined)
+        snapshot.representativeClaim = representativeClaim;
+    if (overageStatus !== undefined)
+        snapshot.overageStatus = overageStatus;
+    if (overageDisabledReason !== undefined) {
+        snapshot.overageDisabledReason = overageDisabledReason;
+    }
+    // Nothing recognised — including the case where every value was garbage.
+    if (Object.keys(snapshot).length === 0)
+        return null;
+    return snapshot;
+}
+//# sourceMappingURL=headers.js.map

package/dist/server/http/headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.js","sourceRoot":"","sources":["../../../server/http/headers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAStE,oEAAoE;AACpE,MAAM,yBAAyB,GAAG,YAAY,CAAC;AAE/C;;;;;;GAMG;AACH,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAE7F;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAgE,EAChE,IAA2B;IAE3B,MAAM,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC;IAC1B,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAEhC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QACpC,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QACxC,0EAA0E;QAC1E,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QAE1C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACtD,KAAK,MAAM,GAAG,IAAI,MAAM;YAAE,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,KAAK,KAAK,mBAAmB;YAAE,mBAAmB,GAAG,IAAI,CAAC;IAChE,CAAC;IAED,0EAA0E;IAC1E,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAEnC,IAAI,CAAC,mBAAmB;QAAE,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,yBAAyB,CAAC,CAAC;IAElF,8EAA8E;IAC9E,8EAA8E;IAC9E,4EAA4E;IAC5E,iEAAiE;IACjE,IAAI,IAAI,CAAC,qBAAqB,KAAK,KAAK;QAAE,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;IAEjF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IACpD,cAAc;IACd,YAAY;IACZ,sBAAsB;IACtB,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,UAAU,sBAAsB,CACpC,QAAiB,EACjB,IAAyB;IAEzB,MAAM,GAAG,GAA2B,EAAE,CAAC;IAEvC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,2EAA2E;QAC3E,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO;QACtC,2EAA2E;QAC3E,mEAAmE;QACnE,IAAI,KAAK,KAAK,kBAAkB,IAAI,KAAK,KAAK,gBAAgB;YAAE,OAAO;QACvE,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO;QAElC,2EAA2E;QAC3E,yEAAyE;QACzE,4DAA4D;QAC5D,IAAI,KAAK,CAAC,UAAU,CAAC,sBAAsB,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;YACnB,OAAO;QACT,CAAC;QACD,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,2EAA2E;IAC3E,IAAI,GAAG,CAAC,cAAc,CAAC,KAAK,SAAS;QAAE,GAAG,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IAEhF,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,uEAAuE;QACvE,8EAA8E;QAC9E,gDAAgD;QAChD,GAAG,CAAC,eAAe,CAAC,GAAG,wBAAwB,CAAC;QAChD,GAAG,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC;QAChC,4EAA4E;QAC5E,OAAO,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yFAAyF;AACzF,SAAS,GAAG,CAAC,GAAkB;IAC7B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACnC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,SAAS,GAAG,CAAC,GAAkB;IAC7B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACnC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,QAAiB;IAC9C,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC,CAAC;IACvE,MAAM,mBAAmB,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC,CAAC;IAC5F,MAAM,cAAc,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC,CAAC;IAClF,MAAM,eAAe,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC;IAClF,MAAM,mBAAmB,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC,CAAC;IAC5F,MAAM,cAAc,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC,CAAC;IAClF,MAAM,eAAe,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC;IAClF,MAAM,mBAAmB,GAAG,GAAG,CAC7B,QAAQ,CAAC,GAAG,CAAC,kDAAkD,CAAC,CACjE,CAAC;IACF,MAAM,aAAa,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC,CAAC;IACtF,MAAM,qBAAqB,GAAG,GAAG,CAC/B,QAAQ,CAAC,GAAG,CAAC,qDAAqD,CAAC,CACpE,CAAC;IAEF,2EAA2E;IAC3E,0DAA0D;IAC1D,MAAM,QAAQ,GAAwE,EAAE,CAAC;IACzF,IAAI,MAAM,KAAK,SAAS;QAAE,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC;IACnD,IAAI,mBAAmB,KAAK,SAAS;QAAE,QAAQ,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;IAC1F,IAAI,cAAc,KAAK,SAAS;QAAE,QAAQ,CAAC,cAAc,GAAG,cAAc,CAAC;IAC3E,IAAI,eAAe,KAAK,SAAS;QAAE,QAAQ,CAAC,eAAe,GAAG,eAAe,CAAC;IAC9E,IAAI,mBAAmB,KAAK,SAAS;QAAE,QAAQ,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;IAC1F,IAAI,cAAc,KAAK,SAAS;QAAE,QAAQ,CAAC,cAAc,GAAG,cAAc,CAAC;IAC3E,IAAI,eAAe,KAAK,SAAS;QAAE,QAAQ,CAAC,eAAe,GAAG,eAAe,CAAC;IAC9E,IAAI,mBAAmB,KAAK,SAAS;QAAE,QAAQ,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;IAC1F,IAAI,aAAa,KAAK,SAAS;QAAE,QAAQ,CAAC,aAAa,GAAG,aAAa,CAAC;IACxE,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;QACxC,QAAQ,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;IACzD,CAAC;IAED,yEAAyE;IACzE,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/server/http/pipe.js

@@ -0,0 +1,97 @@
+/**
+ * Streaming relay with a read-only observation tee.
+ *
+ * The ordering here is the whole point: bytes go to the client FIRST, then the
+ * same buffer is handed to the observer. Metering must never sit between the
+ * upstream and the developer's terminal, because first-token latency is the
+ * thing people feel.
+ *
+ * Correspondingly, the observer is never allowed to break a request. It runs
+ * inside a try/catch and its failures are counted, not thrown: an accounting
+ * record is worth less than a developer's in-flight session.
+ */
+import { once } from "node:events";
+/**
+ * Relay an upstream body to the client, teeing each chunk to `observe`.
+ *
+ * Backpressure is honoured: if the socket buffer is full we await `drain`
+ * rather than queueing indefinitely, otherwise one slow client becomes
+ * unbounded memory growth in a shared gateway.
+ */
+export async function pipeWithTee(body, res, opts) {
+    const startedAt = opts.startedAt;
+    let bytesOut = 0;
+    let ttfbMs = null;
+    let observerErrors = 0;
+    let clientAborted = false;
+    let completed = false;
+    // A client that hangs up must not leave the upstream request running: on a
+    // subscription that would keep consuming the developer's own quota for output
+    // nobody will ever read.
+    const onClose = () => {
+        if (!completed) {
+            clientAborted = true;
+            opts.abort.abort();
+        }
+    };
+    res.on("close", onClose);
+    // The explicit reader API rather than `for await`: Node's web ReadableStream
+    // is async-iterable at runtime but not in the DOM type surface, and casting
+    // to AsyncIterable to paper over that hides a real difference. The reader also
+    // gives us `cancel()`, which is how we release the upstream on client abort.
+    const reader = body.getReader();
+    try {
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done || clientAborted)
+                break;
+            if (value === undefined)
+                continue;
+            if (ttfbMs === null)
+                ttfbMs = Date.now() - startedAt;
+            bytesOut += value.byteLength;
+            // Client first, always.
+            const flushed = res.write(value);
+            if (!flushed)
+                await once(res, "drain");
+            try {
+                opts.observe(value);
+            }
+            catch {
+                observerErrors += 1;
+            }
+        }
+        completed = !clientAborted;
+    }
+    catch (err) {
+        // Upstream died mid-stream. Headers are already sent, so the status cannot
+        // be changed; the caller decides whether to synthesise a terminal SSE error
+        // frame. Never retry here — the client has already rendered partial text.
+        if (!clientAborted)
+            throw err;
+    }
+    finally {
+        res.off("close", onClose);
+        // Release the upstream body so an aborted client does not leave us holding
+        // a half-read stream (which on a subscription would keep burning the
+        // developer's own quota for output nobody will read).
+        if (!completed)
+            await reader.cancel().catch(() => undefined);
+        reader.releaseLock();
+    }
+    return { bytesOut, ttfbMs, completed, clientAborted, observerErrors };
+}
+/**
+ * Prepare a response for streaming.
+ *
+ * Every line here is defensive against something buffering the stream and
+ * destroying perceived latency. `setNoDelay` disables Nagle, which otherwise
+ * coalesces small SSE frames and adds tens of milliseconds of jitter per token
+ * batch; `x-accel-buffering` and `no-transform` are for intermediaries.
+ */
+export function beginStream(res, status, headers) {
+    res.writeHead(status, headers);
+    res.socket?.setNoDelay(true);
+    res.flushHeaders();
+}
+//# sourceMappingURL=pipe.js.map

package/dist/server/http/pipe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipe.js","sourceRoot":"","sources":["../../../server/http/pipe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AA8BnC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAgC,EAChC,GAAmB,EACnB,IAAiB;IAEjB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,2EAA2E;IAC3E,8EAA8E;IAC9E,yBAAyB;IACzB,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,aAAa,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC;IACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAEzB,6EAA6E;IAC7E,4EAA4E;IAC5E,+EAA+E;IAC/E,6EAA6E;IAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAEhC,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI,IAAI,aAAa;gBAAE,MAAM;YACjC,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAElC,IAAI,MAAM,KAAK,IAAI;gBAAE,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACrD,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC;YAE7B,wBAAwB;YACxB,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAEvC,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc,IAAI,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QACD,SAAS,GAAG,CAAC,aAAa,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,2EAA2E;QAC3E,4EAA4E;QAC5E,0EAA0E;QAC1E,IAAI,CAAC,aAAa;YAAE,MAAM,GAAG,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1B,2EAA2E;QAC3E,qEAAqE;QACrE,sDAAsD;QACtD,IAAI,CAAC,SAAS;YAAE,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC;AACxE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,GAAmB,EAAE,MAAc,EAAE,OAA+B;IAC9F,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,GAAG,CAAC,YAAY,EAAE,CAAC;AACrB,CAAC"}

package/dist/server/http/server.js

@@ -0,0 +1,226 @@
+/**
+ * HTTP surface.
+ *
+ * Routing works off the path with any Fest identity prefix removed, so
+ * `/t/<token>/v1/messages?beta=true` and `/v1/messages?beta=true` reach the
+ * same handler. The query string is preserved throughout: Phase 0 showed Claude
+ * Code calls `/v1/messages?beta=true`, not `/v1/messages`.
+ */
+import http from "node:http";
+import { parseIdentityPath } from "../auth/posture.js";
+import { anthropicError } from "./errors.js";
+import { dispatchMessages } from "../pipeline/dispatch.js";
+import { EMPTY_ROUTE_TABLE } from "../routes/table.js";
+import { createEnvResolver } from "../credentials/provider.js";
+import { handleApi } from "../api/routes.js";
+import { handleAuth } from "../api/auth.js";
+import { authorizeApi } from "../auth/guard.js";
+import { handleModels } from "../api/models.js";
+import { handleCountTokens } from "../pipeline/count-tokens.js";
+import { detectInbound } from "../auth/posture.js";
+import { createStaticHost } from "./static.js";
+import { fileURLToPath } from "node:url";
+import { dirname, resolve } from "node:path";
+import { log } from "../log.js";
+function pathnameOf(url) {
+    const q = url.indexOf("?");
+    return q === -1 ? url : url.slice(0, q);
+}
+/** `web/dist`, relative to this file, so it resolves from any cwd. */
+const WEB_DIST = resolve(dirname(fileURLToPath(import.meta.url)), "../../web/dist");
+/**
+ * Drop the mount prefix from an incoming path, if it is still on it.
+ *
+ * Whether it is depends on the proxy: Caddy's `handle_path` and nginx's
+ * `proxy_pass` with a trailing slash strip it, a bare `reverse_proxy` inside a
+ * `handle` block does not. Accepting both means a working deployment does not
+ * hinge on which of those the operator reached for. `/fest` with nothing after
+ * it becomes `/`, not the empty string, because everything downstream matches
+ * on a leading slash.
+ */
+export function stripBasePath(url, basePath) {
+    if (basePath === "" || !url.startsWith(basePath))
+        return url;
+    const rest = url.slice(basePath.length);
+    if (rest === "")
+        return "/";
+    if (rest.startsWith("?"))
+        return `/${rest}`;
+    // Only a real segment boundary counts: `/festival` must not be read as
+    // `/fest` + `ival`.
+    return rest.startsWith("/") ? rest : url;
+}
+export function createServer(deps) {
+    const basePath = deps.config.basePath;
+    const web = createStaticHost(WEB_DIST, basePath);
+    if (!web.available) {
+        log.info("dashboard bundle not built; serving API only", { expected: WEB_DIST });
+    }
+    const configured = deps.routes;
+    const routesOf = typeof configured === "function" ? configured : () => configured ?? EMPTY_ROUTE_TABLE;
+    const ctx = {
+        upstreamBaseUrl: deps.config.upstreamBaseUrl,
+        sink: deps.sink,
+        requireIdentity: deps.config.requireIdentity,
+        orgId: deps.orgId,
+        resolveIdentity: deps.resolveIdentity,
+        touchToken: deps.touchToken,
+        routes: EMPTY_ROUTE_TABLE,
+        secrets: deps.secrets ?? createEnvResolver(),
+    };
+    const server = http.createServer((req, res) => {
+        const url = stripBasePath(req.url ?? "/", basePath);
+        const { remainder } = parseIdentityPath(url);
+        const path = pathnameOf(remainder);
+        const method = req.method ?? "GET";
+        void (async () => {
+            try {
+                // Claude Code's runtime probes this before any inference, with no
+                // credentials. Discovered empirically in Phase 0; it is not part of the
+                // documented Anthropic surface, so it would have been missed.
+                if (path === "/api/hello") {
+                    res.writeHead(200, { "content-type": "application/json" });
+                    res.end("{}");
+                    return;
+                }
+                // Everything under /api/ is the dashboard, and needs a human session.
+                // The proxy path below is authenticated completely differently, by a
+                // developer's identity token — a developer must never have to sign in
+                // to a web page before their editor works.
+                if (path.startsWith("/api/")) {
+                    const decision = authorizeApi(req, {
+                        store: deps.store,
+                        orgId: deps.orgId,
+                        bindHost: deps.config.host,
+                        secureCookies: deps.config.secureCookies,
+                    });
+                    // Login and "who am I" are reachable without a session, by
+                    // definition. They still see the decision's session when there is one.
+                    if (await handleAuth(req, res, path, {
+                        store: deps.store,
+                        orgId: deps.orgId,
+                        secureCookies: deps.config.secureCookies,
+                        config: deps.config,
+                    }, decision.allow ? decision.session : null)) {
+                        return;
+                    }
+                    if (!decision.allow) {
+                        res.writeHead(decision.status, {
+                            "content-type": "application/json",
+                            "cache-control": "no-store",
+                        });
+                        res.end(JSON.stringify({ error: decision.error }));
+                        return;
+                    }
+                    // Every endpoint is a projection of one function in
+                    // store/queries.ts, where org and member scoping is enforced.
+                    // A member sees their own traffic and nobody else's, so their scope
+                    // carries the user id the query layer filters on. The query layer
+                    // fails closed without it — a member scope with no userId throws
+                    // rather than quietly widening to the whole org — which is how this
+                    // wiring bug surfaced as a 500 in a test instead of as a data leak.
+                    const scope = decision.session === null
+                        // Unclaimed and on loopback: the guard already refused this case on
+                        // any other interface.
+                        ? { orgId: deps.orgId, role: "admin" }
+                        : {
+                            orgId: decision.session.orgId,
+                            role: decision.session.role,
+                            ...(decision.session.role === "member" ? { userId: decision.session.userId } : {}),
+                        };
+                    if (handleApi(req, res, path, {
+                        store: deps.store,
+                        sink: deps.sink,
+                        bus: deps.bus,
+                        routes: routesOf(),
+                        secrets: ctx.secrets,
+                        scope,
+                    })) {
+                        return;
+                    }
+                }
+                if (path === "/healthz") {
+                    res.writeHead(200, { "content-type": "application/json" });
+                    res.end(JSON.stringify({ ok: true, sink: deps.sink.stats() }));
+                    return;
+                }
+                // Phase 1 stand-in for the dashboard: proves metering end to end
+                // without a database.
+                if (path === "/_admin/usage" && method === "GET") {
+                    res.writeHead(200, { "content-type": "application/json" });
+                    res.end(JSON.stringify({ stats: deps.sink.stats(), recent: deps.sink.recent(100) }, null, 2));
+                    return;
+                }
+                // The cheapest possible test for "is something between me and the
+                // client buffering my stream". If these arrive one per second, nothing
+                // is buffering; if they arrive in a clump at the end, something is.
+                if (path === "/_debug/slow-stream") {
+                    res.writeHead(200, {
+                        "content-type": "text/event-stream",
+                        "cache-control": "no-cache, no-transform",
+                        "x-accel-buffering": "no",
+                    });
+                    res.socket?.setNoDelay(true);
+                    res.flushHeaders();
+                    for (let i = 1; i <= 10; i += 1) {
+                        if (res.writableEnded)
+                            return;
+                        res.write(`event: tick\ndata: {"n":${i},"at":${Date.now()}}\n\n`);
+                        await new Promise((r) => setTimeout(r, 1000));
+                    }
+                    res.end();
+                    return;
+                }
+                // The model menu Claude Code renders under `/model`, labelled "From
+                // gateway". Only ever reached in the key posture — discovery needs a
+                // credential in ANTHROPIC_AUTH_TOKEN, which is what disables
+                // subscription auth in the first place.
+                if (path === "/v1/models" && (method === "GET" || method === "HEAD")) {
+                    const inm = req.headers["if-none-match"];
+                    handleModels(res, routesOf(), Array.isArray(inm) ? inm[0] : inm);
+                    return;
+                }
+                // Relayed, never metered: it consumes no tokens, and counting it would
+                // drag every per-request average toward zero.
+                if (path === "/v1/messages/count_tokens" && method === "POST") {
+                    const inbound = detectInbound(url, req.headers);
+                    await handleCountTokens(req, res, {
+                        upstreamBaseUrl: deps.config.upstreamBaseUrl,
+                        path: inbound.effectivePath,
+                        posture: inbound.posture,
+                    });
+                    return;
+                }
+                if (path === "/v1/messages" && method === "POST") {
+                    await dispatchMessages(req, res, { ...ctx, routes: routesOf() });
+                    return;
+                }
+                // The dashboard, when built. Last, so it can never shadow the proxy or
+                // the API, and narrow enough that an unknown /v1/ path still 404s.
+                if ((method === "GET" || method === "HEAD") && web.serve(res, path))
+                    return;
+                // Unknown paths are the early-warning system for Claude Code releases
+                // adding endpoints: a warn line here is how we find out before users do.
+                log.warn("unhandled path", { method, path });
+                res.writeHead(404, { "content-type": "application/json" });
+                res.end(anthropicError("not_found_error", `Fest: ${method} ${path} is not implemented.`));
+            }
+            catch (err) {
+                log.error("unhandled request error", { path, error: String(err).slice(0, 300) });
+                if (!res.headersSent) {
+                    res.writeHead(500, { "content-type": "application/json" });
+                    res.end(anthropicError("api_error", "Fest: internal error."));
+                }
+                else if (!res.writableEnded) {
+                    res.end();
+                }
+            }
+        })();
+    });
+    // A long thinking turn must not be killed mid-stream.
+    server.requestTimeout = 0;
+    server.headersTimeout = 60_000;
+    server.keepAliveTimeout = 76_000;
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/server/http/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../server/http/server.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAK/D,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAsBhC,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,sEAAsE;AACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;AAEpF;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,QAAgB;IACzD,IAAI,QAAQ,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,GAAG,CAAC;IAC7D,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC;IAC5B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,IAAI,EAAE,CAAC;IAC5C,uEAAuE;IACvE,oBAAoB;IACpB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAgB;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IACtC,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjD,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,8CAA8C,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;IAC/B,MAAM,QAAQ,GACZ,OAAO,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,UAAU,IAAI,iBAAiB,CAAC;IAExF,MAAM,GAAG,GAAoB;QAC3B,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;QAC5C,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;QAC5C,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,MAAM,EAAE,iBAAiB;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,iBAAiB,EAAE;KAC7C,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,QAAQ,CAAC,CAAC;QACpD,MAAM,EAAE,SAAS,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QAEnC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,kEAAkE;gBAClE,wEAAwE;gBACxE,8DAA8D;gBAC9D,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACd,OAAO;gBACT,CAAC;gBAED,sEAAsE;gBACtE,qEAAqE;gBACrE,sEAAsE;gBACtE,2CAA2C;gBAC3C,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC7B,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,EAAE;wBACjC,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;wBAC1B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;qBACzC,CAAC,CAAC;oBAEH,2DAA2D;oBAC3D,uEAAuE;oBACvE,IACE,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE;wBAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;wBACxC,MAAM,EAAE,IAAI,CAAC,MAAM;qBACpB,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAC5C,CAAC;wBACD,OAAO;oBACT,CAAC;oBAED,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;wBACpB,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE;4BAC7B,cAAc,EAAE,kBAAkB;4BAClC,eAAe,EAAE,UAAU;yBAC5B,CAAC,CAAC;wBACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;wBACnD,OAAO;oBACT,CAAC;oBAED,oDAAoD;oBACpD,8DAA8D;oBAC9D,oEAAoE;oBACpE,kEAAkE;oBAClE,iEAAiE;oBACjE,oEAAoE;oBACpE,oEAAoE;oBACpE,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,KAAK,IAAI;wBACrC,oEAAoE;wBACpE,uBAAuB;wBACvB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,OAAgB,EAAE;wBAC/C,CAAC,CAAC;4BACE,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK;4BAC7B,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI;4BAC3B,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBACnF,CAAC;oBAEN,IACE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE;wBACxB,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,GAAG,EAAE,IAAI,CAAC,GAAG;wBACb,MAAM,EAAE,QAAQ,EAAE;wBAClB,OAAO,EAAE,GAAG,CAAC,OAAO;wBACpB,KAAK;qBACN,CAAC,EACF,CAAC;wBACD,OAAO;oBACT,CAAC;gBACH,CAAC;gBAED,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;oBACxB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;oBAC/D,OAAO;gBACT,CAAC;gBAED,iEAAiE;gBACjE,sBAAsB;gBACtB,IAAI,IAAI,KAAK,eAAe,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;oBACjD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CACZ,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAC3D,IAAI,EACJ,CAAC,CACF,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,kEAAkE;gBAClE,uEAAuE;gBACvE,oEAAoE;gBACpE,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;oBACnC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;wBACjB,cAAc,EAAE,mBAAmB;wBACnC,eAAe,EAAE,wBAAwB;wBACzC,mBAAmB,EAAE,IAAI;qBAC1B,CAAC,CAAC;oBACH,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;oBAC7B,GAAG,CAAC,YAAY,EAAE,CAAC;oBACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;wBAChC,IAAI,GAAG,CAAC,aAAa;4BAAE,OAAO;wBAC9B,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;wBAClE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;oBAChD,CAAC;oBACD,GAAG,CAAC,GAAG,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBAED,oEAAoE;gBACpE,qEAAqE;gBACrE,6DAA6D;gBAC7D,wCAAwC;gBACxC,IAAI,IAAI,KAAK,YAAY,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;oBACrE,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;oBACzC,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;oBACjE,OAAO;gBACT,CAAC;gBAED,uEAAuE;gBACvE,8CAA8C;gBAC9C,IAAI,IAAI,KAAK,2BAA2B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC9D,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;oBAChD,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE;wBAChC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;wBAC5C,IAAI,EAAE,OAAO,CAAC,aAAa;wBAC3B,OAAO,EAAE,OAAO,CAAC,OAAO;qBACzB,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,IAAI,IAAI,KAAK,cAAc,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACjD,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;oBACjE,OAAO;gBACT,CAAC;gBAED,uEAAuE;gBACvE,mEAAmE;gBACnE,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC;oBAAE,OAAO;gBAE5E,sEAAsE;gBACtE,yEAAyE;gBACzE,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,iBAAiB,EAAE,SAAS,MAAM,IAAI,IAAI,sBAAsB,CAAC,CAAC,CAAC;YAC5F,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBACjF,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC,CAAC;gBAChE,CAAC;qBAAM,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;oBAC9B,GAAG,CAAC,GAAG,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,sDAAsD;IACtD,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC;IAC1B,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;IAC/B,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC;IAEjC,OAAO,MAAM,CAAC;AAChB,CAAC"}