tapimo 0.15.0 → 0.15.1

package/dist/db/tables/verifiedTokenRequests.js

@@ -1,41 +1,56 @@
 import { sql } from 'kysely';
 import * as Id from '../../internal/Id.js';
+/** Maximum pending verification requests retained for one requester. */
+export const maxPendingPerRequester = 10;
 /**
  * Inserts a pending request; `undefined` when a pending request for
- * (chainId, address) already exists.
+ * (chainId, address) already exists. Throws `PendingLimitError` when the
+ * requester already has the maximum retained pending requests.
  */
 export function create(db, input) {
     const now = new Date().toISOString();
-    return db.kysely
-        .insertInto('verified_token_requests')
-        .values({
-        address: input.address,
-        chainId: input.chainId,
-        createdAt: now,
-        currency: input.currency,
-        decimals: input.decimals,
-        id: Id.generate('vtr'),
-        logo: input.logo ?? null,
-        logoUri: input.logoUri ?? null,
-        name: input.name,
-        note: input.note ?? null,
-        orgId: input.orgId,
-        requestedBy: input.requestedBy,
-        reviewNote: null,
-        reviewedAt: null,
-        reviewedBy: null,
-        status: 'pending',
-        symbol: input.symbol,
-        updatedAt: now,
-    })
-        .onConflict((oc) => oc
-        .columns(['chainId', 'address'])
-        // `sql.lit` keeps the predicate literal; a bound parameter would
-        // defeat partial-index inference for the conflict target.
-        .where('status', '=', sql.lit('pending'))
-        .doNothing())
-        .returningAll()
-        .executeTakeFirst();
+    return db.transaction(async (tx) => {
+        // Serialize admission per requester so parallel organizations cannot exceed the retained queue cap.
+        await sql `SELECT pg_advisory_xact_lock(hashtextextended(${`verified-token-requests:${input.requestedBy}`}, 0))`.execute(tx.kysely);
+        const pending = await tx.kysely
+            .selectFrom('verified_token_requests')
+            .select(({ fn }) => fn.countAll().as('count'))
+            .where('requestedBy', '=', input.requestedBy)
+            .where('status', '=', 'pending')
+            .executeTakeFirstOrThrow();
+        if (Number(pending.count) >= maxPendingPerRequester)
+            throw new PendingLimitError();
+        return tx.kysely
+            .insertInto('verified_token_requests')
+            .values({
+            address: input.address,
+            chainId: input.chainId,
+            createdAt: now,
+            currency: input.currency,
+            decimals: input.decimals,
+            id: Id.generate('vtr'),
+            logo: input.logo ?? null,
+            logoUri: input.logoUri ?? null,
+            name: input.name,
+            note: input.note ?? null,
+            orgId: input.orgId,
+            requestedBy: input.requestedBy,
+            reviewNote: null,
+            reviewedAt: null,
+            reviewedBy: null,
+            status: 'pending',
+            symbol: input.symbol,
+            updatedAt: now,
+        })
+            .onConflict((oc) => oc
+            .columns(['chainId', 'address'])
+            // `sql.lit` keeps the predicate literal; a bound parameter would
+            // defeat partial-index inference for the conflict target.
+            .where('status', '=', sql.lit('pending'))
+            .doNothing())
+            .returningAll()
+            .executeTakeFirst();
+    });
 }
 /** Lists an organization's requests, newest first. */
 export function list(db, orgId) {
@@ -50,14 +65,26 @@ export function list(db, orgId) {
  * Lists requests in one status globally, oldest first (review-queue order),
  * with the requesting organization's current name when it still exists.
  */
-export function listByStatus(db, status) {
-    return db.kysely
+export function listByStatus(db, status, options) {
+    const { cursor } = options;
+    let query = db.kysely
         .selectFrom('verified_token_requests')
         .leftJoin('organizations', 'organizations.id', 'verified_token_requests.orgId')
         .selectAll('verified_token_requests')
         .select('organizations.name as orgName')
-        .where('status', '=', status)
+        .where('status', '=', status);
+    if (cursor)
+        query = query.where((eb) => eb.or([
+            eb('verified_token_requests.createdAt', '>', cursor.createdAt),
+            eb.and([
+                eb('verified_token_requests.createdAt', '=', cursor.createdAt),
+                eb('verified_token_requests.id', '>', cursor.id),
+            ]),
+        ]));
+    return query
         .orderBy('verified_token_requests.createdAt', 'asc')
+        .orderBy('verified_token_requests.id', 'asc')
+        .limit(options.limit)
         .execute();
 }
 /** Gets a request by id. */
@@ -68,16 +95,6 @@ export function get(db, id) {
         .where('id', '=', id)
         .executeTakeFirst();
 }
-/** Counts an organization's pending requests. */
-export async function countPending(db, orgId) {
-    const row = await db.kysely
-        .selectFrom('verified_token_requests')
-        .select(({ fn }) => fn.countAll().as('count'))
-        .where('orgId', '=', orgId)
-        .where('status', '=', 'pending')
-        .executeTakeFirstOrThrow();
-    return Number(row.count);
-}
 /** Hard-deletes an org-scoped request while pending; `undefined` otherwise. */
 export function remove(db, orgId, id) {
     return db.kysely
@@ -117,4 +134,8 @@ export function toRequest(record) {
         ...(logoUri === null ? {} : { logoUri }),
     };
 }
+/** The requester already has the maximum retained pending requests. */
+export class PendingLimitError extends Error {
+    name = 'VerifiedTokenRequests.PendingLimitError';
+}
 //# sourceMappingURL=verifiedTokenRequests.js.map

package/dist/db/tables/verifiedTokenRequests.js.map

@@ -1 +1 @@
-{"version":3,"file":"verifiedTokenRequests.js","sourceRoot":"","sources":["../../../src/db/tables/verifiedTokenRequests.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,GAAG,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAW1C;;;GAGG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,KAAmB;IACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,yBAAyB,CAAC;SACrC,MAAM,CAAC;QACN,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,GAAG;QACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI;QACxB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;QAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,GAAG;KACf,CAAC;SACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CACjB,EAAE;SACC,OAAO,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAChC,iEAAiE;QACjE,0DAA0D;SACzD,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;SACxC,SAAS,EAAE,CACf;SACA,YAAY,EAAE;SACd,gBAAgB,EAAE,CAAA;AACvB,CAAC;AA8BD,sDAAsD;AACtD,MAAM,UAAU,IAAI,CAAC,EAAS,EAAE,KAAa;IAC3C,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,yBAAyB,CAAC;SACrC,SAAS,EAAE;SACX,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;SAC1B,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;SAC5B,OAAO,EAAE,CAAA;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,EAAS,EACT,MAAc;IAEd,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,yBAAyB,CAAC;SACrC,QAAQ,CAAC,eAAe,EAAE,kBAAkB,EAAE,+BAA+B,CAAC;SAC9E,SAAS,CAAC,yBAAyB,CAAC;SACpC,MAAM,CAAC,+BAA+B,CAAC;SACvC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;SAC5B,OAAO,CAAC,mCAAmC,EAAE,KAAK,CAAC;SACnD,OAAO,EAAE,CAAA;AACd,CAAC;AAED,4BAA4B;AAC5B,MAAM,UAAU,GAAG,CAAC,EAAS,EAAE,EAAU;IACvC,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,yBAAyB,CAAC;SACrC,SAAS,EAAE;SACX,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;SACpB,gBAAgB,EAAE,CAAA;AACvB,CAAC;AAED,iDAAiD;AACjD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAS,EAAE,KAAa;IACzD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,MAAM;SACxB,UAAU,CAAC,yBAAyB,CAAC;SACrC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAU,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;SACrD,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;SAC1B,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC;SAC/B,uBAAuB,EAAE,CAAA;IAC5B,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;AAC1B,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,KAAa,EAAE,EAAU;IACzD,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,yBAAyB,CAAC;SACrC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;SACpB,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;SAC1B,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC;SAC/B,YAAY,EAAE;SACd,gBAAgB,EAAE,CAAA;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,EAAU,EAAE,KAAmB;IAC/D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM;SACb,WAAW,CAAC,yBAAyB,CAAC;SACtC,GAAG,CAAC;QACH,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;QACpC,UAAU,EAAE,GAAG;QACf,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,GAAG;KACf,CAAC;SACD,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;SACpB,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC;SAC/B,YAAY,EAAE;SACd,gBAAgB,EAAE,CAAA;AACvB,CAAC;AAcD,iFAAiF;AACjF,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAA;IACzC,OAAO;QACL,GAAG,IAAI;QACP,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAClC,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;KACzC,CAAA;AACH,CAAC"}
+{"version":3,"file":"verifiedTokenRequests.js","sourceRoot":"","sources":["../../../src/db/tables/verifiedTokenRequests.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,GAAG,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAW1C,wEAAwE;AACxE,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAA;AAExC;;;;GAIG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,KAAmB;IACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACjC,oGAAoG;QACpG,MAAM,GAAG,CAAA,iDAAiD,2BAA2B,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CACrH,EAAE,CAAC,MAAM,CACV,CAAA;QACD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM;aAC5B,UAAU,CAAC,yBAAyB,CAAC;aACrC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAU,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;aACrD,KAAK,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,CAAC;aAC5C,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC;aAC/B,uBAAuB,EAAE,CAAA;QAC5B,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,sBAAsB;YAAE,MAAM,IAAI,iBAAiB,EAAE,CAAA;QAClF,OAAO,EAAE,CAAC,MAAM;aACb,UAAU,CAAC,yBAAyB,CAAC;aACrC,MAAM,CAAC;YACN,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,GAAG;YACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;YAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,GAAG;SACf,CAAC;aACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CACjB,EAAE;aACC,OAAO,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAChC,iEAAiE;YACjE,0DAA0D;aACzD,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;aACxC,SAAS,EAAE,CACf;aACA,YAAY,EAAE;aACd,gBAAgB,EAAE,CAAA;IACvB,CAAC,CAAC,CAAA;AACJ,CAAC;AA8BD,sDAAsD;AACtD,MAAM,UAAU,IAAI,CAAC,EAAS,EAAE,KAAa;IAC3C,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,yBAAyB,CAAC;SACrC,SAAS,EAAE;SACX,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;SAC1B,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;SAC5B,OAAO,EAAE,CAAA;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,EAAS,EACT,MAAc,EACd,OAA6B;IAE7B,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IAC1B,IAAI,KAAK,GAAG,EAAE,CAAC,MAAM;SAClB,UAAU,CAAC,yBAAyB,CAAC;SACrC,QAAQ,CAAC,eAAe,EAAE,kBAAkB,EAAE,+BAA+B,CAAC;SAC9E,SAAS,CAAC,yBAAyB,CAAC;SACpC,MAAM,CAAC,+BAA+B,CAAC;SACvC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;IAC/B,IAAI,MAAM;QACR,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CACzB,EAAE,CAAC,EAAE,CAAC;YACJ,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC;YAC9D,EAAE,CAAC,GAAG,CAAC;gBACL,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC;gBAC9D,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;aACjD,CAAC;SACH,CAAC,CACH,CAAA;IACH,OAAO,KAAK;SACT,OAAO,CAAC,mCAAmC,EAAE,KAAK,CAAC;SACnD,OAAO,CAAC,4BAA4B,EAAE,KAAK,CAAC;SAC5C,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;SACpB,OAAO,EAAE,CAAA;AACd,CAAC;AAYD,4BAA4B;AAC5B,MAAM,UAAU,GAAG,CAAC,EAAS,EAAE,EAAU;IACvC,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,yBAAyB,CAAC;SACrC,SAAS,EAAE;SACX,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;SACpB,gBAAgB,EAAE,CAAA;AACvB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,KAAa,EAAE,EAAU;IACzD,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,yBAAyB,CAAC;SACrC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;SACpB,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;SAC1B,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC;SAC/B,YAAY,EAAE;SACd,gBAAgB,EAAE,CAAA;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,EAAU,EAAE,KAAmB;IAC/D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM;SACb,WAAW,CAAC,yBAAyB,CAAC;SACtC,GAAG,CAAC;QACH,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;QACpC,UAAU,EAAE,GAAG;QACf,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,GAAG;KACf,CAAC;SACD,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;SACpB,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC;SAC/B,YAAY,EAAE;SACd,gBAAgB,EAAE,CAAA;AACvB,CAAC;AAcD,iFAAiF;AACjF,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAA;IACzC,OAAO;QACL,GAAG,IAAI;QACP,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAClC,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;KACzC,CAAA;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACxB,IAAI,GAAG,yCAAyC,CAAA;CACnE"}

package/dist/internal/Auth.d.ts

@@ -108,6 +108,8 @@ type MppHandler = {
 export type PolicyOverride = {
     /** API-key lane: pass quota/scopes overrides, or a boolean to enable/disable. */
     apiKey?: {
+        /** Optional counter bucket that isolates this route's quota. */
+        bucket?: string | undefined;
         /** API-key quota override for this route (a protective per-route cap). */
         rateLimit?: RateLimit.Limit | undefined;
         /** Required API-key scopes override for this route. */
@@ -115,6 +117,8 @@ export type PolicyOverride = {
     } | boolean | undefined;
     /** MPP paid lane: object to override the Session request, or boolean to enable/disable. */
     mpp?: {
+        /** Optional counter bucket that isolates this route's quota. */
+        bucket?: string | undefined;
         /** Paid-request quota override for this route (a protective per-route cap). */
         rateLimit?: RateLimit.Limit | undefined;
         /** Tempo Session request override for this route. */
@@ -122,6 +126,8 @@ export type PolicyOverride = {
     } | boolean | undefined;
     /** Public lane: object to override the quota, or boolean to enable/disable. */
     public?: {
+        /** Optional counter bucket that isolates this route's quota. */
+        bucket?: string | undefined;
         /** Anonymous public quota override for this route. */
         rateLimit?: RateLimit.Limit | undefined;
     } | boolean | undefined;
@@ -194,6 +200,10 @@ export type Variables = {
 export declare function getPrincipal<environment extends Environment>(c: hono_Context<environment>): NonNullable<(import("hono/utils/types").IsAny<environment> extends true ? {
     Variables: import("hono").ContextVariableMap & Record<string, any>;
 } : environment)["Variables"]["principal"]> | null;
+/** Resolves the caller IP from configured trusted metadata. */
+export declare function getTrustedClientIp<environment extends Environment>(c: hono_Context<environment>): string | undefined;
+/** Marks a synthesized in-process request with its trusted caller IP address. */
+export declare function trustClientIp(request: Request, address: string): void;
 /**
  * Guards `:orgId` routes and resolves the organization. Sessions require membership, API keys require ownership, and the super admin bypasses ownership.
  */
@@ -548,6 +558,8 @@ export declare namespace require {
     type Policy = {
         /** API-key access policy. */
         apiKey?: {
+            /** Optional counter bucket that isolates this route's quota. */
+            bucket?: string | undefined;
             /** API-key quota override for this route (a protective per-route cap). */
             rateLimit?: RateLimit.Limit | undefined;
             /**
@@ -559,6 +571,8 @@ export declare namespace require {
         } | undefined;
         /** MPP payment access policy. */
         mpp?: {
+            /** Optional counter bucket that isolates this route's quota. */
+            bucket?: string | undefined;
             /** Paid-request quota override for this route (a protective per-route cap). */
             rateLimit?: RateLimit.Limit | undefined;
             /** Tempo Session request policy. */
@@ -566,6 +580,8 @@ export declare namespace require {
         } | undefined;
         /** Public access policy. */
         public?: {
+            /** Optional counter bucket that isolates this route's quota. */
+            bucket?: string | undefined;
             /** Anonymous public quota for this route. */
             rateLimit: RateLimit.Limit;
         } | undefined;

package/dist/internal/Auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Auth.d.ts","sourceRoot":"","sources":["../../src/internal/Auth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,KAAK,EAAE,OAAO,IAAI,YAAY,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AAEtE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAG9C,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,IAAI,WAAW,EAAE,MAAM,YAAY,CAAA;AAI/E,OAAO,EAAyB,KAAK,MAAM,EAAE,MAAM,MAAM,CAAA;AACzD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAMvC,OAAO,KAAK,KAAK,GAAG,MAAM,WAAW,CAAA;AACrC,OAAO,KAAK,MAAM,MAAM,cAAc,CAAA;AAMtC,OAAO,KAAK,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,KAAK,KAAK,KAAK,MAAM,YAAY,CAAA;AACxC,OAAO,KAAK,WAAW,MAAM,6BAA6B,CAAA;AAI1D,OAAO,KAAK,aAAa,MAAM,+BAA+B,CAAA;AAE9D,OAAO,KAAK,QAAQ,MAAM,0BAA0B,CAAA;AACpD,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AAEzC,OAAO,KAAK,KAAK,MAAM,aAAa,CAAA;AACpC,OAAO,KAAK,KAAK,KAAK,MAAM,YAAY,CAAA;AAGxC,OAAO,KAAK,KAAK,IAAI,MAAM,WAAW,CAAA;AA2CtC,mDAAmD;AACnD,MAAM,MAAM,OAAO,GAAG;IACpB,4CAA4C;IAC5C,MAAM,CAAC,EACH;QACE;;;;WAIG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,SAAS,CAAA;QACxD,oEAAoE;QACpE,OAAO,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;KAC3E,GACD,SAAS,CAAA;IACb,iCAAiC;IACjC,GAAG,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;IAC5B;;;;;OAKG;IACH,eAAe,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;IAC7C,8DAA8D;IAC9D,cAAc,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,KAAK,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,CAAA;IACvE,6CAA6C;IAC7C,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;IACvC,4GAA4G;IAC5G,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,oGAAoG;IACpG,UAAU,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAA;CAC/C,CAAA;AAED,yDAAyD;AACzD,MAAM,MAAM,WAAW,GAAG;IACxB,SAAS,EAAE,SAAS,CAAA;CACrB,CAAA;AAED;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,CAAC,GAAG,SAAS,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,KAAK,SAAS,MAAM,GAAG,GAAG,IACzE,GAAG,SAAS,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,SAAS,WAAW,EAAE,GAAG,CAAC,GAC5D,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,GAClC,KAAK,CAAA;AAEX,wCAAwC;AACxC,MAAM,MAAM,OAAO,GAAG;IACpB,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,gDAAgD;IAChD,MAAM,EAAE,oBAAoB,GAAG,mBAAmB,CAAA;IAClD,6BAA6B;IAC7B,IAAI,EAAE,KAAK,CAAA;CACZ,CAAA;AAED,wFAAwF;AACxF,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAA;AAE/E,2FAA2F;AAC3F,MAAM,CAAC,OAAO,WAAW,GAAG,CAAC;IAC3B,iEAAiE;IACjE,KAAK,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG;QACxE,mDAAmD;QACnD,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAChC,uDAAuD;QACvD,OAAO,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,SAAS,CAAA;QACnC,gDAAgD;QAChD,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAA;QACzC,4DAA4D;QAC5D,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,CAAA;CACF;AAED,qDAAqD;AACrD,KAAK,UAAU,GAAG;IAChB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;IACvC,6DAA6D;IAC7D,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,GAAG,iBAAiB,CAAA;IAChD,iEAAiE;IACjE,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,KAAK,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,CAAA;IACtE,2EAA2E;IAC3E,eAAe,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,SAAS,CAAA;CAClD,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,iFAAiF;IACjF,MAAM,CAAC,EACH;QACE,0EAA0E;QAC1E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;QACvC,uDAAuD;QACvD,MAAM,CAAC,EAAE,SAAS,KAAK,CAAC,EAAE,EAAE,GAAG,SAAS,CAAA;KACzC,GACD,OAAO,GACP,SAAS,CAAA;IACb,2FAA2F;IAC3F,GAAG,CAAC,EACA;QACE,+EAA+E;QAC/E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;QACvC,qDAAqD;QACrD,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,GAAG,SAAS,CAAA;KAClC,GACD,OAAO,GACP,SAAS,CAAA;IACb,+EAA+E;IAC/E,MAAM,CAAC,EACH;QACE,sDAAsD;QACtD,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;KACxC,GACD,OAAO,GACP,SAAS,CAAA;IACb,wEAAwE;IACxE,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC9B,CAAA;AAED,yCAAyC;AACzC,MAAM,MAAM,SAAS,GACjB;IACE,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAA;IACrB,wFAAwF;IACxF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IACzC,oBAAoB;IACpB,EAAE,EAAE,MAAM,CAAA;IACV,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAA;CAChB,GACD;IACE,6BAA6B;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,sBAAsB;IACtB,IAAI,EAAE,QAAQ,CAAA;CACf,GACD;IACE,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,2CAA2C;IAC3C,EAAE,EAAE,MAAM,CAAA;IACV,sGAAsG;IACtG,QAAQ,EAAE;QACR,+DAA+D;QAC/D,QAAQ,EAAE,MAAM,CAAA;QAChB,iEAAiE;QACjE,OAAO,EAAE,MAAM,CAAA;KAChB,CAAA;IACD,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAA;CAChB,GACD;IACE,2FAA2F;IAC3F,KAAK,EAAE,MAAM,CAAA;IACb,oBAAoB;IACpB,EAAE,EAAE,MAAM,CAAA;IACV,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,sBAAsB;IACtB,IAAI,EAAE,aAAa,CAAA;CACpB,CAAA;AAEL,6CAA6C;AAC7C,MAAM,MAAM,SAAS,GAAG;IACtB,mDAAmD;IACnD,IAAI,EAAE,OAAO,CAAA;IACb,yHAAyH;IACzH,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,GAAG,SAAS,CAAA;IAC3C,mGAAmG;IACnG,GAAG,CAAC,EAAE,aAAa,CAAC,MAAM,GAAG,SAAS,CAAA;IACtC,yCAAyC;IACzC,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;IACjC,yEAAyE;IACzE,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAA;CACtC,CAAA;AAED,6DAA6D;AAC7D,wBAAgB,YAAY,CAAC,WAAW,SAAS,WAAW,EAAE,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC;;mDAEzF;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,OAAO,GAAE,SAAS,CAAC,OAAY,GAAG,iBAAiB,CAuC5E;AAED,MAAM,CAAC,OAAO,WAAW,SAAS,CAAC;IACjC,iCAAiC;IACjC,KAAK,OAAO,GAAG;QACb,kDAAkD;QAClD,IAAI,CAAC,EAAE,WAAW,CAAC,IAAI,GAAG,SAAS,CAAA;KACpC,CAAA;CACF;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,iBAAiB,CAgDjD;AAED;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAY,OAAO,CAAA;AAE3C,2GAA2G;AAC3G,eAAO,MAAM,aAAa,EAAY,OAAO,CAAA;AAE7C,0FAA0F;AAC1F,wBAAgB,cAAc,CAAC,CAAC,EAAE,YAAY;;;;;;;gBAM7C;AAED,kGAAkG;AAClG,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,YAAY;;;;;;;gBAMjD;AAED,8FAA8F;AAC9F,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,YAAY;;;;;;;gBAWjD;AAED,+HAA+H;AAC/H,wBAAgB,UAAU,CAAC,WAAW,SAAS,WAAW,EACxD,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAC3B,WAAW,CAAC,MAAM,GAAG,SAAS,CAEhC;AAED,gHAAgH;AAChH,wBAAgB,GAAG,CAAC,WAAW,SAAS,WAAW,EACjD,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAC3B,aAAa,CAAC,MAAM,CAKtB;AAED,mGAAmG;AACnG,wBAAgB,OAAO,CAAC,WAAW,SAAS,WAAW,EACrD,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAC3B,QAAQ,CAAC,MAAM,CAIjB;AAQD;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAY,OAAO,CAAA;AAE5C,6FAA6F;AAC7F,wBAAgB,WAAW,CAAC,CAAC,EAAE,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsC1C;AAED,iGAAiG;AACjG,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,YAAY;;;;;;;;;;;;;;;;;;;;;iBAwBpD;AAED,6FAA6F;AAC7F,wBAAgB,eAAe,CAAC,CAAC,EAAE,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;gFAM9C;AAED,4DAA4D;AAC5D,wBAAgB,UAAU,CACxB,QAAQ,SAAS,MAAM,GAAG,MAAM,EAChC,WAAW,SAAS,WAAW,GAAG,WAAW,EAC7C,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAMvE;AAiMD,MAAM,CAAC,OAAO,WAAW,UAAU,CAAC;IAClC,yDAAyD;IACzD,KAAK,SAAS,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,IAAI,OAAO,CACxD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,cAAc,GAAG,KAAK,GAAG,SAAS,CAAC,CAC9D,CAAA;IAED,4CAA4C;IAC5C,KAAK,OAAO,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,IAAI;QAC/C,2EAA2E;QAC3E,MAAM,CAAC,EACH;YACE;;;;;eAKG;YACH,KAAK,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,CAAA;YACjC,kFAAkF;YAClF,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,SAAS,CAAA;YACxD,+BAA+B;YAC/B,MAAM,CAAC,EAAE,SAAS,KAAK,CAAC,EAAE,EAAE,GAAG,SAAS,CAAA;SACzC,GACD,KAAK,GACL,SAAS,CAAA;QACb,gEAAgE;QAChE,GAAG,CAAC,EAAE,UAAU,GAAG,KAAK,GAAG,SAAS,CAAA;QACpC,oFAAoF;QACpF,SAAS,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAA;QAC3C,4EAA4E;QAC5E,MAAM,CAAC,EACH;YACE,yHAAyH;YACzH,QAAQ,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,KAAK,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,CAAA;YACjE,mDAAmD;YACnD,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;SACxC,GACD,KAAK,GACL,SAAS,CAAA;QACb,gCAAgC;QAChC,SAAS,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO,GAAG,SAAS,CAAA;QAChD,8DAA8D;QAC9D,YAAY,CAAC,EAAE,KAAK,CAAC,OAAO,GAAG,SAAS,CAAA;QACxC,yGAAyG;QACzG,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;QAC7B;;;;WAIG;QACH,UAAU,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAA;KAC5C,CAAA;IAED,mDAAmD;IACnD,KAAK,KAAK,GAAG;QACX,kEAAkE;QAClE,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAChC,6BAA6B;QAC7B,GAAG,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAA;QAChC,yDAAyD;QACzD,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KACzB,CAAA;IAED,mDAAmD;IACnD,KAAK,UAAU,GAAG,IAAI,CACpB,UAAU,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAC9E,SAAS,CACV,GAAG;QACF,2EAA2E;QAC3E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;QACvC,0EAA0E;QAC1E,OAAO,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAA;QACtE,4HAA4H;QAC5H,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAA;KAChD,CAAA;CACF;AAwHD;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO;;;;;;EAuf/C;AAED,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,qDAAqD;IACrD,KAAK,OAAO,GAAG;QACb,IAAI,EACA,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,SAAS,CAAC,GAAG;YACtD,kFAAkF;YAClF,aAAa,CAAC,EAAE,aAAa,GAAG,SAAS,CAAA;YACzC,iIAAiI;YACjI,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;SAC9B,CAAC,GACF,KAAK,GACL,SAAS,CAAA;QACb,6DAA6D;QAC7D,QAAQ,EAAE,MAAM,CAAA;QAChB,gDAAgD;QAChD,EAAE,EAAE,EAAE,CAAC,MAAM,CAAA;QACb,yFAAyF;QACzF,KAAK,EAAE,MAAM,KAAK,CAAC,MAAM,GAAG,SAAS,CAAA;QACrC,qFAAqF;QACrF,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,UAAU,CAAA;QACzD,4DAA4D;QAC5D,EAAE,EAAE;YAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAA;SAAE,GAAG,SAAS,CAAA;QACtC,8DAA8D;QAC9D,YAAY,EAAE,KAAK,CAAC,OAAO,CAAA;KAC5B,CAAA;IAED,6CAA6C;IAC7C,KAAK,OAAO,GAAG;QACb,2CAA2C;QAC3C,MAAM,CAAC,EACH;YACE,+BAA+B;YAC/B,QAAQ,EAAE,MAAM,CAAA;YAChB,2BAA2B;YAC3B,YAAY,EAAE,MAAM,CAAA;SACrB,GACD,SAAS,CAAA;QACb,mEAAmE;QACnE,QAAQ,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;QAC/B,mEAAmE;QACnE,MAAM,EAAE,MAAM,CAAA;QACd,0DAA0D;QAC1D,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAA;QAC9C,yCAAyC;QACzC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAC5B,CAAA;IAED,mEAAmE;IACnE,KAAK,QAAQ,GAAG;QACd,2DAA2D;QAC3D,QAAQ,EAAE,MAAM,CAAA;QAChB,0DAA0D;QAC1D,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC3B,yDAAyD;QACzD,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KACzB,CAAA;IAED,yCAAyC;IACzC,KAAK,MAAM,GAAG;QACZ,uGAAuG;QACvG,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC3B,sIAAsI;QACtI,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC3B,yEAAyE;QACzE,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;QAClC,uDAAuD;QACvD,GAAG,CAAC,EAAE;YAAE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;SAAE,GAAG,SAAS,CAAA;KACnF,CAAA;CACF;AA+BD,+GAA+G;AAC/G,wBAAgB,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,KAAK,GAAG,iBAAiB,CAIzE;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,4DAA4D;IAC5D,KAAK,OAAO,GAAG,cAAc,GAAG;QAC9B,wFAAwF;QACxF,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAC1C,CAAA;CACF;AAED,sEAAsE;AACtE,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EACnB,OAAO,GAAE,oBAAyB,QA4CnC;AAED,MAAM,CAAC,OAAO,WAAW,QAAQ,CAAC;IAChC;;;;;;OAMG;IACH,KAAK,UAAU,CAAC,MAAM,SAAS,WAAW,EAAE,KAAK,SAAS,MAAM,GAAG,GAAG,IAAI,MAAM,SAAS,MAAM,CAAC,GAC5F;SACG,IAAI,IAAI,MAAM,CAAC,GAAG,MAAM,GAAG;aACzB,MAAM,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,GACtB,IAAI,MAAM,EAAE,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE;SACrE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,MAAM,EAAE,CAAC;KAChC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GACnB,KAAK,CAAA;IAET,kEAAkE;IAClE,KAAK,MAAM,CAAC,MAAM,SAAS,MAAM,IAAI,MAAM,SAAS,IAAI,MAAM,KAAK,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,KAAK,CAAA;IAEhG,sEAAsE;IACtE,KAAK,IAAI,CAAC,IAAI,SAAS,MAAM,IAAI,IAAI,SAAS,GAAG,MAAM,IAAI,IAAI,MAAM,IAAI,EAAE,GACvE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,GAChC,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjB,sEAAsE;IACtE,KAAK,OAAO,CAAC,OAAO,SAAS,MAAM,IAAI,OAAO,SAAS,IAAI,MAAM,SAAS,IAAI,MAAM,EAAE,GAClF,IAAI,SAAS,EAAE,GACf,OAAO,CAAA;CACZ;AA6BD,KAAK,oBAAoB,GAAG;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,KAAK,GAAG,SAAS,CAAC,GAAG,SAAS,CAAA;CAC3E,CAAA;AA2LD,0DAA0D;AAC1D,MAAM,MAAM,eAAe,GAAG;IAC5B,yCAAyC;IACzC,MAAM,EAAE,OAAO,CAAA;IACf,+FAA+F;IAC/F,MAAM,CAAC,EAAE,IAAI,GAAG,SAAS,CAAA;IACzB,sFAAsF;IACtF,GAAG,EAAE,OAAO,CAAA;IACZ,8FAA8F;IAC9F,MAAM,EAAE,OAAO,CAAA;IACf,qGAAqG;IACrG,MAAM,EAAE,SAAS,KAAK,CAAC,EAAE,EAAE,CAAA;IAC3B,8CAA8C;IAC9C,OAAO,EAAE,OAAO,CAAA;CACjB,CAAA;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CA2CnF;AA+BD,2EAA2E;AAC3E,wBAAgB,OAAO,CAAC,WAAW,SAAS,WAAW,GAAG,WAAW,EACnE,MAAM,EAAE,OAAO,CAAC,MAAM,GACrB,iBAAiB,CAAC,WAAW,CAAC,CA6PhC;AAED,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,2BAA2B;IAC3B,KAAK,MAAM,GAAG;QACZ,6BAA6B;QAC7B,MAAM,CAAC,EACH;YACE,0EAA0E;YAC1E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;YACvC;;;;eAIG;YACH,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAA;SACtD,GACD,SAAS,CAAA;QACb,iCAAiC;QACjC,GAAG,CAAC,EACA;YACE,+EAA+E;YAC/E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;YACvC,oCAAoC;YACpC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAA;SACrB,GACD,SAAS,CAAA;QACb,4BAA4B;QAC5B,MAAM,CAAC,EACH;YACE,6CAA6C;YAC7C,SAAS,EAAE,SAAS,CAAC,KAAK,CAAA;SAC3B,GACD,SAAS,CAAA;QACb,+DAA+D;QAC/D,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAC9B,CAAA;CACF;AA2BD,0GAA0G;AAC1G,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,cAAc,GACtC,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,CAclC;AAuID,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,YAAY,WAInD;AAkLD,sDAAsD;AACtD,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,SAAS,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,CAAA;AAEtE;;;;GAIG;AACH,MAAM,MAAM,OAAO,GAAG;IACpB,8EAA8E;IAC9E,OAAO,EAAE,CAAC,CAAC,EAAE,YAAY,KAAK,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAA;CAC/D,CAAA;AA2ED,gFAAgF;AAChF,qBAAa,qBAAsB,SAAQ,KAAK;IACrC,IAAI,SAA+B;IAC5C,YAAY,EAAE,EAAE,MAAM,EAErB;CACF"}
+{"version":3,"file":"Auth.d.ts","sourceRoot":"","sources":["../../src/internal/Auth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,KAAK,EAAE,OAAO,IAAI,YAAY,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AAEtE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAG9C,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,IAAI,WAAW,EAAE,MAAM,YAAY,CAAA;AAI/E,OAAO,EAAyB,KAAK,MAAM,EAAE,MAAM,MAAM,CAAA;AACzD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAMvC,OAAO,KAAK,KAAK,GAAG,MAAM,WAAW,CAAA;AACrC,OAAO,KAAK,MAAM,MAAM,cAAc,CAAA;AAMtC,OAAO,KAAK,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,KAAK,KAAK,KAAK,MAAM,YAAY,CAAA;AACxC,OAAO,KAAK,WAAW,MAAM,6BAA6B,CAAA;AAI1D,OAAO,KAAK,aAAa,MAAM,+BAA+B,CAAA;AAE9D,OAAO,KAAK,QAAQ,MAAM,0BAA0B,CAAA;AACpD,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAC3C,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AAEzC,OAAO,KAAK,KAAK,MAAM,aAAa,CAAA;AACpC,OAAO,KAAK,KAAK,KAAK,MAAM,YAAY,CAAA;AAGxC,OAAO,KAAK,KAAK,IAAI,MAAM,WAAW,CAAA;AA4CtC,mDAAmD;AACnD,MAAM,MAAM,OAAO,GAAG;IACpB,4CAA4C;IAC5C,MAAM,CAAC,EACH;QACE;;;;WAIG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,SAAS,CAAA;QACxD,oEAAoE;QACpE,OAAO,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;KAC3E,GACD,SAAS,CAAA;IACb,iCAAiC;IACjC,GAAG,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;IAC5B;;;;;OAKG;IACH,eAAe,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;IAC7C,8DAA8D;IAC9D,cAAc,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,KAAK,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,CAAA;IACvE,6CAA6C;IAC7C,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;IACvC,4GAA4G;IAC5G,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,oGAAoG;IACpG,UAAU,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAA;CAC/C,CAAA;AAED,yDAAyD;AACzD,MAAM,MAAM,WAAW,GAAG;IACxB,SAAS,EAAE,SAAS,CAAA;CACrB,CAAA;AAED;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,CAAC,GAAG,SAAS,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,KAAK,SAAS,MAAM,GAAG,GAAG,IACzE,GAAG,SAAS,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,SAAS,WAAW,EAAE,GAAG,CAAC,GAC5D,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,GAClC,KAAK,CAAA;AAEX,wCAAwC;AACxC,MAAM,MAAM,OAAO,GAAG;IACpB,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,gDAAgD;IAChD,MAAM,EAAE,oBAAoB,GAAG,mBAAmB,CAAA;IAClD,6BAA6B;IAC7B,IAAI,EAAE,KAAK,CAAA;CACZ,CAAA;AAED,wFAAwF;AACxF,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAA;AAE/E,2FAA2F;AAC3F,MAAM,CAAC,OAAO,WAAW,GAAG,CAAC;IAC3B,iEAAiE;IACjE,KAAK,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG;QACxE,mDAAmD;QACnD,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAChC,uDAAuD;QACvD,OAAO,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,SAAS,CAAA;QACnC,gDAAgD;QAChD,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAA;QACzC,4DAA4D;QAC5D,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,CAAA;CACF;AAED,qDAAqD;AACrD,KAAK,UAAU,GAAG;IAChB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;IACvC,6DAA6D;IAC7D,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,GAAG,iBAAiB,CAAA;IAChD,iEAAiE;IACjE,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,KAAK,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,CAAA;IACtE,2EAA2E;IAC3E,eAAe,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,SAAS,CAAA;CAClD,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,iFAAiF;IACjF,MAAM,CAAC,EACH;QACE,gEAAgE;QAChE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC3B,0EAA0E;QAC1E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;QACvC,uDAAuD;QACvD,MAAM,CAAC,EAAE,SAAS,KAAK,CAAC,EAAE,EAAE,GAAG,SAAS,CAAA;KACzC,GACD,OAAO,GACP,SAAS,CAAA;IACb,2FAA2F;IAC3F,GAAG,CAAC,EACA;QACE,gEAAgE;QAChE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC3B,+EAA+E;QAC/E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;QACvC,qDAAqD;QACrD,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,GAAG,SAAS,CAAA;KAClC,GACD,OAAO,GACP,SAAS,CAAA;IACb,+EAA+E;IAC/E,MAAM,CAAC,EACH;QACE,gEAAgE;QAChE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC3B,sDAAsD;QACtD,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;KACxC,GACD,OAAO,GACP,SAAS,CAAA;IACb,wEAAwE;IACxE,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC9B,CAAA;AAED,yCAAyC;AACzC,MAAM,MAAM,SAAS,GACjB;IACE,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAA;IACrB,wFAAwF;IACxF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IACzC,oBAAoB;IACpB,EAAE,EAAE,MAAM,CAAA;IACV,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAA;CAChB,GACD;IACE,6BAA6B;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,sBAAsB;IACtB,IAAI,EAAE,QAAQ,CAAA;CACf,GACD;IACE,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,2CAA2C;IAC3C,EAAE,EAAE,MAAM,CAAA;IACV,sGAAsG;IACtG,QAAQ,EAAE;QACR,+DAA+D;QAC/D,QAAQ,EAAE,MAAM,CAAA;QAChB,iEAAiE;QACjE,OAAO,EAAE,MAAM,CAAA;KAChB,CAAA;IACD,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAA;CAChB,GACD;IACE,2FAA2F;IAC3F,KAAK,EAAE,MAAM,CAAA;IACb,oBAAoB;IACpB,EAAE,EAAE,MAAM,CAAA;IACV,mDAAmD;IACnD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,sBAAsB;IACtB,IAAI,EAAE,aAAa,CAAA;CACpB,CAAA;AAEL,6CAA6C;AAC7C,MAAM,MAAM,SAAS,GAAG;IACtB,mDAAmD;IACnD,IAAI,EAAE,OAAO,CAAA;IACb,yHAAyH;IACzH,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,GAAG,SAAS,CAAA;IAC3C,mGAAmG;IACnG,GAAG,CAAC,EAAE,aAAa,CAAC,MAAM,GAAG,SAAS,CAAA;IACtC,yCAAyC;IACzC,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;IACjC,yEAAyE;IACzE,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAA;CACtC,CAAA;AAED,6DAA6D;AAC7D,wBAAgB,YAAY,CAAC,WAAW,SAAS,WAAW,EAAE,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC;;mDAEzF;AAED,+DAA+D;AAC/D,wBAAgB,kBAAkB,CAAC,WAAW,SAAS,WAAW,EAAE,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,sBAG/F;AAED,iFAAiF;AACjF,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,QAE9D;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,OAAO,GAAE,SAAS,CAAC,OAAY,GAAG,iBAAiB,CAuC5E;AAED,MAAM,CAAC,OAAO,WAAW,SAAS,CAAC;IACjC,iCAAiC;IACjC,KAAK,OAAO,GAAG;QACb,kDAAkD;QAClD,IAAI,CAAC,EAAE,WAAW,CAAC,IAAI,GAAG,SAAS,CAAA;KACpC,CAAA;CACF;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,iBAAiB,CAgDjD;AAED;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAY,OAAO,CAAA;AAE3C,2GAA2G;AAC3G,eAAO,MAAM,aAAa,EAAY,OAAO,CAAA;AAE7C,0FAA0F;AAC1F,wBAAgB,cAAc,CAAC,CAAC,EAAE,YAAY;;;;;;;gBAM7C;AAED,kGAAkG;AAClG,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,YAAY;;;;;;;gBAMjD;AAED,8FAA8F;AAC9F,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,YAAY;;;;;;;gBAWjD;AAED,+HAA+H;AAC/H,wBAAgB,UAAU,CAAC,WAAW,SAAS,WAAW,EACxD,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAC3B,WAAW,CAAC,MAAM,GAAG,SAAS,CAEhC;AAED,gHAAgH;AAChH,wBAAgB,GAAG,CAAC,WAAW,SAAS,WAAW,EACjD,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAC3B,aAAa,CAAC,MAAM,CAKtB;AAED,mGAAmG;AACnG,wBAAgB,OAAO,CAAC,WAAW,SAAS,WAAW,EACrD,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,GAC3B,QAAQ,CAAC,MAAM,CAIjB;AAQD;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAY,OAAO,CAAA;AAE5C,6FAA6F;AAC7F,wBAAgB,WAAW,CAAC,CAAC,EAAE,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsC1C;AAED,iGAAiG;AACjG,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,YAAY;;;;;;;;;;;;;;;;;;;;;iBAwBpD;AAED,6FAA6F;AAC7F,wBAAgB,eAAe,CAAC,CAAC,EAAE,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;gFAM9C;AAED,4DAA4D;AAC5D,wBAAgB,UAAU,CACxB,QAAQ,SAAS,MAAM,GAAG,MAAM,EAChC,WAAW,SAAS,WAAW,GAAG,WAAW,EAC7C,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAMvE;AAkMD,MAAM,CAAC,OAAO,WAAW,UAAU,CAAC;IAClC,yDAAyD;IACzD,KAAK,SAAS,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,IAAI,OAAO,CACxD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,cAAc,GAAG,KAAK,GAAG,SAAS,CAAC,CAC9D,CAAA;IAED,4CAA4C;IAC5C,KAAK,OAAO,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,IAAI;QAC/C,2EAA2E;QAC3E,MAAM,CAAC,EACH;YACE;;;;;eAKG;YACH,KAAK,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,CAAA;YACjC,kFAAkF;YAClF,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,SAAS,CAAA;YACxD,+BAA+B;YAC/B,MAAM,CAAC,EAAE,SAAS,KAAK,CAAC,EAAE,EAAE,GAAG,SAAS,CAAA;SACzC,GACD,KAAK,GACL,SAAS,CAAA;QACb,gEAAgE;QAChE,GAAG,CAAC,EAAE,UAAU,GAAG,KAAK,GAAG,SAAS,CAAA;QACpC,oFAAoF;QACpF,SAAS,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAA;QAC3C,4EAA4E;QAC5E,MAAM,CAAC,EACH;YACE,yHAAyH;YACzH,QAAQ,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,KAAK,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,CAAA;YACjE,mDAAmD;YACnD,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;SACxC,GACD,KAAK,GACL,SAAS,CAAA;QACb,gCAAgC;QAChC,SAAS,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO,GAAG,SAAS,CAAA;QAChD,8DAA8D;QAC9D,YAAY,CAAC,EAAE,KAAK,CAAC,OAAO,GAAG,SAAS,CAAA;QACxC,yGAAyG;QACzG,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;QAC7B;;;;WAIG;QACH,UAAU,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAA;KAC5C,CAAA;IAED,mDAAmD;IACnD,KAAK,KAAK,GAAG;QACX,kEAAkE;QAClE,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAChC,6BAA6B;QAC7B,GAAG,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAA;QAChC,yDAAyD;QACzD,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KACzB,CAAA;IAED,mDAAmD;IACnD,KAAK,UAAU,GAAG,IAAI,CACpB,UAAU,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAC9E,SAAS,CACV,GAAG;QACF,2EAA2E;QAC3E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;QACvC,0EAA0E;QAC1E,OAAO,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAA;QACtE,4HAA4H;QAC5H,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAA;KAChD,CAAA;CACF;AAwHD;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO;;;;;;EAuf/C;AAED,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,qDAAqD;IACrD,KAAK,OAAO,GAAG;QACb,IAAI,EACA,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,SAAS,CAAC,GAAG;YACtD,kFAAkF;YAClF,aAAa,CAAC,EAAE,aAAa,GAAG,SAAS,CAAA;YACzC,iIAAiI;YACjI,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;SAC9B,CAAC,GACF,KAAK,GACL,SAAS,CAAA;QACb,6DAA6D;QAC7D,QAAQ,EAAE,MAAM,CAAA;QAChB,gDAAgD;QAChD,EAAE,EAAE,EAAE,CAAC,MAAM,CAAA;QACb,yFAAyF;QACzF,KAAK,EAAE,MAAM,KAAK,CAAC,MAAM,GAAG,SAAS,CAAA;QACrC,qFAAqF;QACrF,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,UAAU,CAAA;QACzD,4DAA4D;QAC5D,EAAE,EAAE;YAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAA;SAAE,GAAG,SAAS,CAAA;QACtC,8DAA8D;QAC9D,YAAY,EAAE,KAAK,CAAC,OAAO,CAAA;KAC5B,CAAA;IAED,6CAA6C;IAC7C,KAAK,OAAO,GAAG;QACb,2CAA2C;QAC3C,MAAM,CAAC,EACH;YACE,+BAA+B;YAC/B,QAAQ,EAAE,MAAM,CAAA;YAChB,2BAA2B;YAC3B,YAAY,EAAE,MAAM,CAAA;SACrB,GACD,SAAS,CAAA;QACb,mEAAmE;QACnE,QAAQ,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;QAC/B,mEAAmE;QACnE,MAAM,EAAE,MAAM,CAAA;QACd,0DAA0D;QAC1D,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAA;QAC9C,yCAAyC;QACzC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAC5B,CAAA;IAED,mEAAmE;IACnE,KAAK,QAAQ,GAAG;QACd,2DAA2D;QAC3D,QAAQ,EAAE,MAAM,CAAA;QAChB,0DAA0D;QAC1D,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC3B,yDAAyD;QACzD,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KACzB,CAAA;IAED,yCAAyC;IACzC,KAAK,MAAM,GAAG;QACZ,uGAAuG;QACvG,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC3B,sIAAsI;QACtI,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC3B,yEAAyE;QACzE,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;QAClC,uDAAuD;QACvD,GAAG,CAAC,EAAE;YAAE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;SAAE,GAAG,SAAS,CAAA;KACnF,CAAA;CACF;AA+BD,+GAA+G;AAC/G,wBAAgB,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,KAAK,GAAG,iBAAiB,CAIzE;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,4DAA4D;IAC5D,KAAK,OAAO,GAAG,cAAc,GAAG;QAC9B,wFAAwF;QACxF,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAC1C,CAAA;CACF;AAED,sEAAsE;AACtE,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EACnB,OAAO,GAAE,oBAAyB,QA8CnC;AAED,MAAM,CAAC,OAAO,WAAW,QAAQ,CAAC;IAChC;;;;;;OAMG;IACH,KAAK,UAAU,CAAC,MAAM,SAAS,WAAW,EAAE,KAAK,SAAS,MAAM,GAAG,GAAG,IAAI,MAAM,SAAS,MAAM,CAAC,GAC5F;SACG,IAAI,IAAI,MAAM,CAAC,GAAG,MAAM,GAAG;aACzB,MAAM,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,GACtB,IAAI,MAAM,EAAE,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE;SACrE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,MAAM,EAAE,CAAC;KAChC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GACnB,KAAK,CAAA;IAET,kEAAkE;IAClE,KAAK,MAAM,CAAC,MAAM,SAAS,MAAM,IAAI,MAAM,SAAS,IAAI,MAAM,KAAK,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,KAAK,CAAA;IAEhG,sEAAsE;IACtE,KAAK,IAAI,CAAC,IAAI,SAAS,MAAM,IAAI,IAAI,SAAS,GAAG,MAAM,IAAI,IAAI,MAAM,IAAI,EAAE,GACvE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,GAChC,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjB,sEAAsE;IACtE,KAAK,OAAO,CAAC,OAAO,SAAS,MAAM,IAAI,OAAO,SAAS,IAAI,MAAM,SAAS,IAAI,MAAM,EAAE,GAClF,IAAI,SAAS,EAAE,GACf,OAAO,CAAA;CACZ;AA6BD,KAAK,oBAAoB,GAAG;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,KAAK,GAAG,SAAS,CAAC,GAAG,SAAS,CAAA;CAC3E,CAAA;AAgMD,0DAA0D;AAC1D,MAAM,MAAM,eAAe,GAAG;IAC5B,yCAAyC;IACzC,MAAM,EAAE,OAAO,CAAA;IACf,+FAA+F;IAC/F,MAAM,CAAC,EAAE,IAAI,GAAG,SAAS,CAAA;IACzB,sFAAsF;IACtF,GAAG,EAAE,OAAO,CAAA;IACZ,8FAA8F;IAC9F,MAAM,EAAE,OAAO,CAAA;IACf,qGAAqG;IACrG,MAAM,EAAE,SAAS,KAAK,CAAC,EAAE,EAAE,CAAA;IAC3B,8CAA8C;IAC9C,OAAO,EAAE,OAAO,CAAA;CACjB,CAAA;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CA2CnF;AA+BD,2EAA2E;AAC3E,wBAAgB,OAAO,CAAC,WAAW,SAAS,WAAW,GAAG,WAAW,EACnE,MAAM,EAAE,OAAO,CAAC,MAAM,GACrB,iBAAiB,CAAC,WAAW,CAAC,CA6PhC;AAED,MAAM,CAAC,OAAO,WAAW,OAAO,CAAC;IAC/B,2BAA2B;IAC3B,KAAK,MAAM,GAAG;QACZ,6BAA6B;QAC7B,MAAM,CAAC,EACH;YACE,gEAAgE;YAChE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;YAC3B,0EAA0E;YAC1E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;YACvC;;;;eAIG;YACH,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAA;SACtD,GACD,SAAS,CAAA;QACb,iCAAiC;QACjC,GAAG,CAAC,EACA;YACE,gEAAgE;YAChE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;YAC3B,+EAA+E;YAC/E,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;YACvC,oCAAoC;YACpC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAA;SACrB,GACD,SAAS,CAAA;QACb,4BAA4B;QAC5B,MAAM,CAAC,EACH;YACE,gEAAgE;YAChE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;YAC3B,6CAA6C;YAC7C,SAAS,EAAE,SAAS,CAAC,KAAK,CAAA;SAC3B,GACD,SAAS,CAAA;QACb,+DAA+D;QAC/D,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAC9B,CAAA;CACF;AA2BD,0GAA0G;AAC1G,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,cAAc,GACtC,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,CAclC;AA0ID,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,YAAY,WAInD;AAyLD,sDAAsD;AACtD,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,SAAS,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,CAAA;AAEtE;;;;GAIG;AACH,MAAM,MAAM,OAAO,GAAG;IACpB,8EAA8E;IAC9E,OAAO,EAAE,CAAC,CAAC,EAAE,YAAY,KAAK,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAA;CAC/D,CAAA;AA2ED,gFAAgF;AAChF,qBAAa,qBAAsB,SAAQ,KAAK;IACrC,IAAI,SAA+B;IAC5C,YAAY,EAAE,EAAE,MAAM,EAErB;CACF"}

package/dist/internal/Auth.js

@@ -35,6 +35,7 @@ import * as Timing from './Timing.js';
 import * as Users from '../db/tables/users.js';
 const policySymbol = Symbol('tempo-api.auth.policy');
 const mppManagementSymbol = Symbol('tempo-api.auth.mpp-management');
+const trustedClientIps = new WeakMap();
 const defaultApiKeyRateLimit = { limit: 10_000, period: 'minute' };
 const defaultIdentitySessionTtl = 24 * 60 * 60;
 const defaultMppRateLimit = { limit: 100, period: 'minute' };
@@ -56,6 +57,15 @@ function isIdentityTokenError(error) {
 export function getPrincipal(c) {
     return c.get('principal') ?? null;
 }
+/** Resolves the caller IP from configured trusted metadata. */
+export function getTrustedClientIp(c) {
+    const auth = c.get('auth');
+    return auth ? trustedClientIp(c, auth) : resolveTrustedClientIp(c.req.raw, undefined);
+}
+/** Marks a synthesized in-process request with its trusted caller IP address. */
+export function trustClientIp(request, address) {
+    trustedClientIps.set(request, address);
+}
 /**
  * Guards `:orgId` routes and resolves the organization. Sessions require membership, API keys require ownership, and the super admin bypasses ownership.
  */
@@ -386,7 +396,9 @@ function resolveRequestPolicy(c, options) {
         const inheritedKey = `${inheritedMethod.toUpperCase()} ${key.slice(key.indexOf(' ') + 1)}`;
         return overrides?.[inheritedKey];
     })();
-    const routeOverride = management && configuredOverride ? { mpp: configuredOverride.mpp } : configuredOverride;
+    // Generated management routes already materialize the GET's MPP contract.
+    // Reapplying its override would also copy GET-only quota controls.
+    const routeOverride = management ? undefined : configuredOverride;
     return {
         management,
         policy: bindMppScope(resolvePolicy(options.base, options.defaults, [...routePolicies, routeOverride], description), scope),
@@ -1026,7 +1038,9 @@ export function installMppManagementRoutes(app, options = {}) {
             continue;
         if (postPaths.has(target.path))
             throw new Error(`MPP management POST conflicts with an existing route: ${target.path}`);
-        const management = policy({ mpp });
+        const management = policy({
+            mpp: { session: mpp.session },
+        });
         management[mppManagementSymbol] = { description: target.description };
         app.post(stripBasePath(target.path, options.basePath), management, OpenApi.describeRoute({ hide: true }));
     }
@@ -1101,6 +1115,7 @@ function resolveApiKeyLane(current, override, default_) {
         return current ?? default_;
     const base = current ?? default_;
     return {
+        bucket: override.bucket ?? base.bucket,
         rateLimit: override.rateLimit ?? base.rateLimit,
         scopes: override.scopes ?? base.scopes,
     };
@@ -1114,6 +1129,7 @@ function resolveMppLane(current, override, default_) {
         return current ?? default_;
     const base = current ?? default_;
     return {
+        bucket: override.bucket ?? base.bucket,
         rateLimit: override.rateLimit ?? base.rateLimit,
         session: { ...base.session, ...override.session },
     };
@@ -1126,7 +1142,10 @@ function resolvePublicLane(current, override, default_) {
     if (override === true)
         return current ?? default_;
     const base = current ?? default_;
-    return { rateLimit: override.rateLimit ?? base.rateLimit };
+    return {
+        bucket: override.bucket ?? base.bucket,
+        rateLimit: override.rateLimit ?? base.rateLimit,
+    };
 }
 function resolveSessionLane(current, override, default_) {
     if (override === undefined)
@@ -1363,7 +1382,7 @@ export function require(policy) {
             const result = paid
                 ? null
                 : await consumeRateLimit(auth, {
-                    key: `api_key:${apiKey.id}:scope:${scope}`,
+                    key: rateLimitKey(`api_key:${apiKey.id}:scope:${scope}`, policy.apiKey.bucket),
                     limit,
                 });
             if (result) {
@@ -1446,7 +1465,7 @@ export function require(policy) {
         const limit = policy.public?.rateLimit;
         if (limit) {
             const result = await consumeRateLimit(auth, {
-                key: `public:${publicPrincipal.id}`,
+                key: rateLimitKey(`public:${publicPrincipal.id}`, policy.public?.bucket),
                 limit,
             });
             if (result)
@@ -1573,10 +1592,11 @@ function getApiKeyCredential(c) {
     return null;
 }
 function clientIp(c, auth) {
-    return auth.publicClientIp ? auth.publicClientIp(c.req.raw) : c.req.header('cf-connecting-ip');
+    return (trustedClientIps.get(c.req.raw) ??
+        (auth.publicClientIp ? auth.publicClientIp(c.req.raw) : c.req.header('cf-connecting-ip')));
 }
 function trustedClientIp(c, auth) {
-    return resolveTrustedClientIp(c.req.raw, auth.publicClientIp);
+    return trustedClientIps.get(c.req.raw) ?? resolveTrustedClientIp(c.req.raw, auth.publicClientIp);
 }
 function resolveTrustedClientIp(request, resolve) {
     if (resolve)
@@ -1698,7 +1718,7 @@ function principalFromPublic(c, auth) {
 async function requirePayment(c, next, options) {
     if (hasPaymentCredential(c)) {
         const result = await consumeRateLimit(options.auth, {
-            key: `mpp:${options.principal.type}:${options.principal.id}`,
+            key: rateLimitKey(`mpp:${options.principal.type}:${options.principal.id}`, options.policy.mpp?.bucket),
             limit: options.policy.mpp?.rateLimit ?? options.auth.mpp?.rateLimit ?? defaultMppRateLimit,
         });
         if (result) {
@@ -1748,6 +1768,9 @@ function requirePaymentOrRateLimit(c, next, options) {
         return requirePayment(c, next, options);
     return rateLimitExceeded(c, options.rateLimit);
 }
+function rateLimitKey(key, bucket) {
+    return bucket === undefined ? key : `${key}:bucket:${bucket}`;
+}
 /** Emits a `429` with a `Retry-After` derived from the window reset. */
 function rateLimitExceeded(c, result) {
     c.header('Retry-After', String(Math.max(result.reset - Math.ceil(Date.now() / 1_000), 1)));