Fix YouTube playback: let Home Relay use fresh Firefox cookies; drop leaked secrets

Root cause of "no format" / import-cookies error despite Firefox auto-load:
resolvePlayer did `cookieHeader || firefoxCookiesStr`, so any cookie forwarded by
the Worker (always non-empty via CONSENT/SOCS) shadowed the freshly auto-loaded
Firefox session entirely, giving stale auth and LOGIN_REQUIRED.

- home-relay/server.js: merge forwarded cookies with the Firefox session, Firefox
last so slimCookieHeader keeps its fresher value per cookie name.
- worker.js: empty BUILTIN_YOUTUBE_COOKIE; it held a leaked, expired personal
Google session that both leaked credentials and shadowed the relay cookies.
- start-relay.ps1 / home-relay/run-relay.bat: read RELAY_SECRET from the
environment (generate and persist on first run) instead of hardcoding it.

Also adds relay/autostart tooling, docs, and the localtunnel devDependency.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

DIAGNOSE-RELAY.md

@@ -0,0 +1,90 @@
+# אבחון Relay / Tunnel (502 + health תקוע)
+
+## מה מצאנו (סיבת השורש) — מאומת בלוגים
+
+| תסמין | סיבה |
+|--------|------|
+| localtunnel 502 | השרת לא מגיע / מנהרה מתה / **URL לא תואם** |
+| Worker מצביע על `etrog-bypass-mirik-999.loca.lt` | בלוג בפועל נוצר `https://weak-crab-83.loca.lt` — subdomain קבוע **לא נשמר** |
+| `127.0.0.1:8788/health` timeout | תהליך Node **לא רץ** — connection refused (לא IPv6) |
+| cloudflared 502 | `Unable to reach origin … 127.0.0.1:8788 … refused` = **relay down**, לא באג tunnel |
+| LOGIN_REQUIRED מ-CF | צפוי — בלי relay חי אין resolve |
+
+**אימות:** אחרי restart של Node, `cloudflared --protocol http2` + `/health` הציבורי החזיר `ok: true`.
+
+**localtunnel** בשירות החינמי:
+- מתעלם לעיתים מ-subdomain ומחזיר שם אקראי
+- דורש לעיתים דף "tunnel password" בדפדפן (Worker לא עובר אותו)
+- 502 נפוץ מאוד
+
+**הפתרון:** `cloudflared` quick tunnel + עדכון `YT_RELAY_URL` ל-URL **האמיתי** שנוצר.
+
+---
+
+## הפעלה נכונה (Windows)
+
+```powershell
+cd "C:\Users\user\Documents\מעקף פרוקסי 2.0"
+
+# טוקן CF — רק מקומית, לא בצ'אט
+$env:CLOUDFLARE_API_TOKEN = "YOUR_NEW_TOKEN"
+
+# אופציונלי — אחרת משתמשים בברירת המחדל בסקריפט
+# $env:RELAY_SECRET = "same-secret-as-worker"
+
+.\stop-relay.ps1
+.\start-relay.ps1
+```
+
+בדיקות:
+
+```powershell
+Invoke-RestMethod http://127.0.0.1:8788/health
+Get-Content $env:TEMP\yt-relay-url.txt
+$url = (Get-Content $env:TEMP\yt-relay-url.txt).Trim()
+Invoke-RestMethod "$url/health"
+```
+
+Player:
+
+```text
+https://etrog-bypass-proxy.miriklain616.workers.dev/ytp
+```
+
+---
+
+## IPv4 / IPv6
+
+- השרת מאזין על `127.0.0.1` (IPv4 loopback) — זה מה ש-cloudflared מצפה.
+- אין צורך ב-`allow_invalid_cert` ל-localtunnel אם לא משתמשים בו.
+- אם health נכשל: `netstat -ano | findstr 8788` — חייב LISTENING.
+
+---
+
+## cloudflared מול localtunnel
+
+| | localtunnel | cloudflared |
+|--|-------------|-------------|
+| יציבות | גרועה | טובה ל-quick tunnel |
+| URL קבוע | כמעט לא | named tunnel + דומיין |
+| סיסמת דף | לפעמים | לא |
+| מומלץ לפרויקט | לא | **כן** |
+
+`http2: stream closed` ב-cloudflared לרוב = תהליך local מת / sleep / restart באמצע סטרים. שמור PC ער; לנגן מחדש אחרי reconnect.
+
+---
+
+## Etrog `RWC_BLOCK` / `lighttpd` ב-SW
+
+ה-SW בודק תשובות ל-`/assets/chunk-*` וכו'. אם **אין** `X-Etrog-Mode` / seal וה-filter שם `server: lighttpd` — מחזירים 502.
+
+זה אומר שהבקשה **לא** עברה דרך ה-Worker (או ש-MITM החליף את הגוף).  
+כשה-relay + worker מסמנים `X-Etrog-Mode: stream-unsealed` או sealed — הבדיקה אמורה לדלג.
+
+---
+
+## אבטחה
+
+- **בטל** כל Cloudflare API token שנשלח בצ'אט.
+- אל תשים טוקנים ב-`start-relay.ps1` (תוקן).
+- סובב גם `RELAY_SECRET` אם דלף.

RESTRICTED-MODE.md

@@ -0,0 +1,100 @@
+# Restricted Mode / Bot check / MRM — מדריך מעשי
+
+## שלוש שכבות חסימה שונות (לא לבלבל)
+
+| שכבה | הודעה טיפוסית | מי חוסם | פתרון |
+|------|----------------|---------|--------|
+| **A. Cloudflare IP** | LOGIN_REQUIRED מ-Worker | YouTube מול DC | Home Relay (כבר יש) |
+| **B. Bot / age / login** | "צריך להיכנס כדי לאמת שלא מדובר בבוט" | YouTube (חשבון/סשן) | עוגיות + SAPISIDHASH |
+| **C. Network Restricted Mode** | MRM / VIDEO_BLOCK_BY_MRM / מצב מוגן | אתרוג↔Google על ה-IP | חשבון Google בלי Restricted, או egress "נקי" |
+
+הרילאי הביתי פותר **A**.  
+**B** דורש סשן YouTube אמיתי ב-Firefox + הזרקה נכונה (עודכן ב-`server.js`).  
+**C** לא נפתר רק ע"י קליינט InnerTube אחר — Google רואה את ה-IP/הרשת המסוננת.
+
+---
+
+## מה תוקן ב-relay (B)
+
+1. עוגיות מ-Firefox גם מ-`.google.com` (SAPISID/SID)  
+2. `SAPISIDHASH` על WEB/MWEB  
+3. עוגיות גם ל-ANDROID (לא רק WEB)  
+4. רענון עוגיות כל 15 דקות  
+5. `RELAY_INSECURE_TLS=1` אם Node נכשל בגלל תעודת MITM של אתרוג  
+
+### בדיקה ידנית אחרי restart
+
+```powershell
+# ודא שיש session
+Invoke-RestMethod http://127.0.0.1:8788/health
+# בלוג: SAPISID=yes, session=yes
+
+# נגן סרטון "בעייתי"
+$secret = "YOUR_RELAY_SECRET"
+Invoke-RestMethod -Method POST http://127.0.0.1:8788/v1/yt/player `
+  -Headers @{ Authorization = "Bearer $secret" } `
+  -ContentType "application/json" `
+  -Body '{"videoId":"VIDEO_ID"}' | ConvertTo-Json -Depth 5
+```
+
+חפש ב-`attempts`: `WEB+ck` / `status: OK`.
+
+### אם עדיין LOGIN_REQUIRED
+
+1. בפיירפוקס: היכנס ל-YouTube, נגן סרטון אחד **ישירות** (אם האתר פתוח ברשת)  
+2. בחשבון Google:  
+   https://myaccount.google.com/u/0/restricted-mode  
+   וגם הגדרות YouTube → Restricted Mode = **Off**  
+3. הפעל מחדש relay (רענון cookies)  
+4. אם `fetch failed` / certificate:  
+   ```powershell
+   [Environment]::SetEnvironmentVariable("RELAY_INSECURE_TLS","1","User")
+   ```
+   ואז restart
+
+---
+
+## לגבי "איזה client עוקף Restricted Mode?"
+
+| Client | מתי עוזר |
+|--------|----------|
+| **WEB + cookies + SAPISIDHASH** | הכי טוב ל-bot check / age (שכבה B) |
+| **TVHTML5_SIMPLY_EMBEDDED** | חלק מהסרטונים בלי login |
+| **ANDROID בלי cookies** | רוב הסרטונים "רגילים"; נכשל על restricted |
+| **ANDROID_EMBEDDED / WEB_CREATOR** | לא קסם מול MRM רשתי |
+
+**אין client קסם** שעוקף Restricted Mode ברמת רשת (שכבה C) כש-Google/אתרוג כופים אותו על ה-IP.
+
+### אופציות אמיתיות ל-C (MRM רשתי)
+
+1. **Hotspot סלולרי** לבדיקה — אם שם עובד, זו שכבה C  
+2. **Egress נקי** (VPN resid שאינו מאחורי אתרוג / מחשב אחר / VPS) רק ל-InnerTube+googlevideo  
+3. **חשבון Google** עם Restricted Mode כבוי + cookies (עוזר לחלק מהמקרים שמסומנים כ"מוגן" ברמת חשבון)  
+4. לא לצפות ש-CF Worker יפתור MRM — ה-IP של CF גרוע יותר
+
+---
+
+## Windows autostart (בעיה #2)
+
+מומלץ: **Task Scheduler** (לא רק Startup VBS).
+
+```powershell
+cd "C:\Users\user\Documents\מעקף פרוקסי 2.0"
+
+# טוקן כבר אמור להיות ב-User env:
+# [Environment]::SetEnvironmentVariable("CLOUDFLARE_API_TOKEN","...","User")
+
+.\install-autostart.ps1
+schtasks /Run /TN EtrogYtHomeRelay
+```
+
+למה לא VBS בלבד:
+- נתיב עברית ב-Startup לפעמים נשבר בקידוד  
+- אין restart on failure  
+- Scheduled Task עם Delay 45s + RestartOnFailure יציב יותר  
+
+הסר כפילות:
+
+```powershell
+Remove-Item "$env:APPDATA\Microsoft\Windows\Start Menu\Programs\Startup\start_bypass_relay.vbs" -ErrorAction SilentlyContinue
+```

home-relay/README.md

@@ -0,0 +1,160 @@
+# YouTube Home Relay (residential egress)
+
+Small Node.js process that runs on your **home PC**. Your Cloudflare Worker calls it for:
+
+1. **InnerTube** `/youtubei/v1/player` (format resolve)
+2. **googlevideo** byte streams
+
+Both use the **same residential IP**, so YouTube stops returning `LOGIN_REQUIRED` / IP-bound 403s that you get from Cloudflare hosting ranges.
+
+```
+Browser ──► CF Worker ──► Home relay (this) ──► YouTube / googlevideo
+                 │
+                 └── other sites still direct from CF (Brave, etc.)
+```
+
+This is the simplest reliable solo-project option. Paid “residential proxy APIs” are optional; your home IP is free and real.
+
+---
+
+## 1. Run the relay on your PC
+
+Requirements: **Node 18+**
+
+```powershell
+cd home-relay
+# Generate a secret (keep private — same value goes into the Worker)
+$env:RELAY_SECRET = -join ((48..57 + 65..90 + 97..122 | Get-Random -Count 40 | ForEach-Object { [char]$_ }))
+$env:PORT = "8788"
+npm start
+```
+
+Health check (no auth):
+
+```text
+http://127.0.0.1:8788/health
+```
+
+---
+
+## 2. Expose it with Cloudflare Tunnel (free, no port-forward)
+
+Install [cloudflared](https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/install-and-setup/installation/), then:
+
+### Quick test (random `*.trycloudflare.com` URL — changes each run)
+
+```powershell
+cloudflared tunnel --url http://127.0.0.1:8788
+```
+
+Copy the `https://….trycloudflare.com` URL → that is `YT_RELAY_URL`.
+
+### Stable setup (recommended)
+
+```powershell
+cloudflared tunnel login
+cloudflared tunnel create etrog-yt-relay
+# route a subdomain you control, e.g. yt-relay.yourdomain.com
+cloudflared tunnel route dns etrog-yt-relay yt-relay.yourdomain.com
+```
+
+Config file example (`%USERPROFILE%\.cloudflared\config.yml`):
+
+```yaml
+tunnel: <TUNNEL_ID>
+credentials-file: C:\Users\YOU\.cloudflared\<TUNNEL_ID>.json
+
+ingress:
+  - hostname: yt-relay.yourdomain.com
+    service: http://127.0.0.1:8788
+  - service: http_status:404
+```
+
+```powershell
+cloudflared tunnel run etrog-yt-relay
+```
+
+Optional: install as a Windows service so it starts with the PC.
+
+---
+
+## 3. Wire the Worker
+
+Set secrets (do **not** commit them):
+
+```powershell
+npx wrangler secret put YT_RELAY_URL
+# paste: https://yt-relay.yourdomain.com   (no trailing slash)
+
+npx wrangler secret put YT_RELAY_SECRET
+# paste: same value as RELAY_SECRET on the PC
+```
+
+In `wrangler.toml` you only need the names documented; values come from secrets.
+
+Worker integration (minimal) — see [WORKER_HOOK.md](./WORKER_HOOK.md).
+
+---
+
+## 4. API (for debugging)
+
+All routes except `/health` require:
+
+```http
+Authorization: Bearer <RELAY_SECRET>
+```
+
+### Resolve formats (home IP)
+
+```powershell
+curl -s -X POST "https://YOUR-TUNNEL/v1/yt/player" `
+  -H "Authorization: Bearer $env:RELAY_SECRET" `
+  -H "Content-Type: application/json" `
+  -d "{\"videoId\":\"dQw4w9WgXcQ\"}"
+```
+
+### Stream media (same IP as resolve)
+
+```powershell
+# After you have a googlevideo URL from the player response:
+curl -L "https://YOUR-TUNNEL/v1/fetch?url=$( [uri]::EscapeDataString($gvUrl) )" `
+  -H "Authorization: Bearer $env:RELAY_SECRET" `
+  -o test.mp4
+```
+
+---
+
+## Security notes
+
+| Control | Why |
+|--------|-----|
+| Shared secret | Only your Worker can use the relay |
+| Host allowlist | Blocks SSRF (only YouTube-related hosts) |
+| Bind `127.0.0.1` | Local only; tunnel is the public front |
+| Tunnel HTTPS | Encryption in transit |
+
+Anyone with the secret can use **your home IP** for YouTube traffic — treat it like a password. Rotate if it leaks.
+
+This relay is for **your own lawful access** through over-blocking filters, same as the main proxy.
+
+---
+
+## Ops tips
+
+- PC must be **awake** (disable sleep while using YouTube through the proxy).
+- If formats work but media 403s, you resolved on relay but streamed from CF — both must go through the relay.
+- Cookies (optional): POST `{ "videoId":"…", "cookie":"…" }` to `/v1/yt/player`. Prefer cookies **on the home machine**, not CF.
+- Check public egress IP: open `https://api.ipify.org` from a quick script on the PC and confirm it is residential.
+
+---
+
+## Difficulty
+
+| Piece | Effort |
+|-------|--------|
+| This Node server | Done (copy folder, `npm start`) |
+| Quick cloudflared URL | ~5 minutes |
+| Named tunnel + DNS | ~15–30 minutes once |
+| Worker hooks | ~30–60 minutes (see WORKER_HOOK.md) |
+
+No extra paid services required.

home-relay/WORKER_HOOK.md

@@ -0,0 +1,170 @@
+# Worker integration hooks
+
+Minimal changes so `/ytp` media uses home egress when secrets are set.
+
+## Env secrets
+
+| Name | Example |
+|------|---------|
+| `YT_RELAY_URL` | `https://yt-relay.example.com` |
+| `YT_RELAY_SECRET` | same as PC `RELAY_SECRET` |
+
+Export in Worker:
+
+```js
+export default {
+  async fetch(request, env, ctx) {
+    // pass env into handlers that resolve/stream YouTube
+  }
+}
+```
+
+If your `worker.js` still uses the classic `addEventListener('fetch')` form without `env`, switch to module syntax **or** hardcode temporarily only for local tests (never commit secrets).
+
+With Wrangler module Worker, secrets appear as `env.YT_RELAY_URL`.
+
+---
+
+## Drop-in helpers (paste near top of worker.js)
+
+```js
+function relayConfigured(env) {
+  return !!(env && env.YT_RELAY_URL && env.YT_RELAY_SECRET);
+}
+
+function relayBase(env) {
+  return String(env.YT_RELAY_URL || '').replace(/\/+$/, '');
+}
+
+async function relayPlayer(env, videoId, cookie) {
+  const r = await fetch(relayBase(env) + '/v1/yt/player', {
+    method: 'POST',
+    headers: {
+      authorization: 'Bearer ' + env.YT_RELAY_SECRET,
+      'content-type': 'application/json',
+    },
+    body: JSON.stringify({ videoId, cookie: cookie || '' }),
+  });
+  const j = await r.json().catch(() => null);
+  if (!j || !j.ok || !j.formats || !j.formats.length) {
+    return { ok: false, playability: j?.playability, attemptsLog: j?.attempts || [], source: 'home-relay' };
+  }
+  return {
+    ok: true,
+    formats: j.formats.map((f) => ({
+      itag: f.itag,
+      url: f.url,
+      mime: (f.mimeType || '').split(';')[0],
+      progressive: !!f.progressive,
+      hasAudio: !!f.hasAudio,
+      hasVideo: !!f.hasVideo,
+      bitrate: f.bitrate || 0,
+      width: f.width || 0,
+      height: f.height || 0,
+    })),
+    playability: j.playability,
+    client: j.client,
+    hasCookies: !!cookie,
+    hasAuth: !!cookie,
+    attemptsLog: j.attempts || [],
+    via: 'home-relay',
+  };
+}
+
+/** Stream googlevideo (or any allowlisted URL) through home IP */
+async function relayFetch(env, targetUrl, init = {}) {
+  const u = new URL(relayBase(env) + '/v1/fetch');
+  u.searchParams.set('url', targetUrl);
+  const headers = {
+    authorization: 'Bearer ' + env.YT_RELAY_SECRET,
+  };
+  if (init.range) headers.range = init.range;
+  if (init.userAgent) headers['x-upstream-ua'] = init.userAgent;
+  return fetch(u.toString(), { headers, signal: init.signal });
+}
+```
+
+---
+
+## Where to call them
+
+### 1) Prefer relay in `fetchPlayerFormats` / `getPlayerFormatsCached`
+
+At the **start** of format resolve:
+
+```js
+async function fetchPlayerFormats(videoId, request, env) {
+  if (relayConfigured(env)) {
+    const ytCookies = await getYoutubeCookieHeader(request); // optional
+    const pack = await relayPlayer(env, videoId, ytCookies || '');
+    if (pack.ok) return pack;
+    // fall through to existing CF multi-client path only as last resort
+  }
+  // … existing tryInnertubeClient races …
+}
+```
+
+### 2) Prefer relay when fetching media bytes in `handleYtStream`
+
+Wherever you currently:
+
+```js
+const mediaRes = await fetch(directMediaUrl, { headers: fetchHeaders, ... });
+```
+
+change to:
+
+```js
+let mediaRes;
+if (relayConfigured(env)) {
+  mediaRes = await relayFetch(env, directMediaUrl, {
+    range: request.headers.get('range') || undefined,
+    userAgent: fetchHeaders['user-agent'],
+  });
+} else {
+  mediaRes = await fetch(directMediaUrl, { headers: fetchHeaders, redirect: 'follow' });
+}
+```
+
+**Critical:** formats from relay + media from relay (never mix CF media with home-resolved URLs).
+
+### 3) Pass `env` through
+
+Today many handlers only take `(request, url)`. Thread `env` from the top-level `fetch(request, env, ctx)`.
+
+---
+
+## Suggested policy once relay is online
+
+```text
+if (YT_RELAY configured):
+  resolve on home
+  stream on home
+  skip CF InnerTube races (saves CPU + avoids false LOGIN_REQUIRED cache)
+else:
+  existing behavior (client Origin:null iframe + CF best-effort)
+```
+
+---
+
+## Smoke test matrix
+
+| Test | Expect |
+|------|--------|
+| PC `curl` `/v1/yt/player` | `ok:true`, formats with `https://…googlevideo…` |
+| Worker `/api/health` (optional) | show `relay: up` if you add a check |
+| `/ytp?v=…` play | `X-Etrog-Source` or status text mentioning relay |
+| Kill home relay | Worker falls back or shows clear “egress offline” |
+
+Optional health from Worker:
+
+```js
+async function relayHealth(env) {
+  try {
+    const r = await fetch(relayBase(env) + '/health', { signal: AbortSignal.timeout(4000) });
+    return r.ok;
+  } catch { return false; }
+}
+```
+
+(Health is public on purpose so you can ping without shipping the secret to browsers.)

home-relay/launch-relay.vbs

@@ -0,0 +1,15 @@
+Set sh = CreateObject("WScript.Shell")
+Dim relayDir, relayLog, relayErr, secret, nodeExe
+relayDir = WScript.Arguments(0)
+relayLog = WScript.Arguments(1)
+relayErr = WScript.Arguments(2)
+secret = WScript.Arguments(3)
+
+sh.Environment("Process")("RELAY_SECRET") = secret
+sh.Environment("Process")("PORT") = "8788"
+
+Dim cmd
+cmd = "cmd.exe /c node server.js >> """ & relayLog & """ 2>> """ & relayErr & """"
+
+sh.CurrentDirectory = relayDir
+sh.Run cmd, 0, False

home-relay/launch-tunnel.vbs

@@ -0,0 +1,9 @@
+Set sh = CreateObject("WScript.Shell")
+Dim cfExe, cfLog
+cfExe = WScript.Arguments(0)
+cfLog = WScript.Arguments(1)
+
+Dim cmd
+cmd = "cmd.exe /c """ & cfExe & """ tunnel --protocol http2 --url http://127.0.0.1:8788 --logfile """ & cfLog & """"
+
+sh.Run cmd, 0, False

home-relay/package-lock.json

@@ -0,0 +1,729 @@
+{
+  "name": "etrog-yt-home-relay",
+  "version": "1.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "etrog-yt-home-relay",
+      "version": "1.0.0",
+      "dependencies": {
+        "sqlite3": "^6.0.1"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@isaacs/fs-minipass": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/@isaacs/fs-minipass/-/fs-minipass-4.0.1.tgz",
+      "integrity": "sha512-wgm9Ehl2jpeqP3zw/7mo3kRHFp5MEDhqAdwy1fTGkHAwnkGOVsgpvQhL8B5n1qlb01jV3n/bI0ZfZp5lWA1k4w==",
+      "license": "ISC",
+      "dependencies": {
+        "minipass": "^7.0.4"
+      },
+      "engines": {
+        "node": ">=18.0.0"
+      }
+    },
+    "node_modules/abbrev": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/abbrev/-/abbrev-4.0.0.tgz",
+      "integrity": "sha512-a1wflyaL0tHtJSmLSOVybYhy22vRih4eduhhrkcjgrWGnRfrZtovJ2FRjxuTtkkj47O/baf0R86QU5OuYpz8fA==",
+      "license": "ISC",
+      "optional": true,
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
+    "node_modules/base64-js": {
+      "version": "1.5.1",
+      "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz",
+      "integrity": "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT"
+    },
+    "node_modules/bindings": {
+      "version": "1.5.0",
+      "resolved": "https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz",
+      "integrity": "sha512-p2q/t/mhvuOj/UeLlV6566GD/guowlr0hHxClI0W9m7MWYkL1F0hLo+0Aexs9HSPCtR1SXQ0TD3MMKrXZajbiQ==",
+      "license": "MIT",
+      "dependencies": {
+        "file-uri-to-path": "1.0.0"
+      }
+    },
+    "node_modules/bl": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz",
+      "integrity": "sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==",
+      "license": "MIT",
+      "dependencies": {
+        "buffer": "^5.5.0",
+        "inherits": "^2.0.4",
+        "readable-stream": "^3.4.0"
+      }
+    },
+    "node_modules/buffer": {
+      "version": "5.7.1",
+      "resolved": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz",
+      "integrity": "sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "base64-js": "^1.3.1",
+        "ieee754": "^1.1.13"
+      }
+    },
+    "node_modules/chownr": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/chownr/-/chownr-3.0.0.tgz",
+      "integrity": "sha512-+IxzY9BZOQd/XuYPRmrvEVjF/nqj5kgT4kEq7VofrDoM1MxoRjEWkrCC3EtLi59TVawxTAn+orJwFQcrqEN1+g==",
+      "license": "BlueOak-1.0.0",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/decompress-response": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/decompress-response/-/decompress-response-6.0.0.tgz",
+      "integrity": "sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ==",
+      "license": "MIT",
+      "dependencies": {
+        "mimic-response": "^3.1.0"
+      },
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/deep-extend": {
+      "version": "0.6.0",
+      "resolved": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.6.0.tgz",
+      "integrity": "sha512-LOHxIOaPYdHlJRtCQfDIVZtfw/ufM8+rVj649RIHzcm/vGwQRXFt6OPqIFWsm2XEMrNIEtWR64sY1LEKD2vAOA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=4.0.0"
+      }
+    },
+    "node_modules/detect-libc": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz",
+      "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/end-of-stream": {
+      "version": "1.4.5",
+      "resolved": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.5.tgz",
+      "integrity": "sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==",
+      "license": "MIT",
+      "dependencies": {
+        "once": "^1.4.0"
+      }
+    },
+    "node_modules/env-paths": {
+      "version": "2.2.1",
+      "resolved": "https://registry.npmjs.org/env-paths/-/env-paths-2.2.1.tgz",
+      "integrity": "sha512-+h1lkLKhZMTYjog1VEpJNG7NZJWcuc2DDk/qsqSTRRCOXiLjeQ1d1/udrUGhqMxUgAlwKNZ0cf2uqan5GLuS2A==",
+      "license": "MIT",
+      "optional": true,
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/expand-template": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/expand-template/-/expand-template-2.0.3.tgz",
+      "integrity": "sha512-XYfuKMvj4O35f/pOXLObndIRvyQ+/+6AhODh+OKWj9S9498pHHn/IMszH+gt0fBCRWMNfk1ZSp5x3AifmnI2vg==",
+      "license": "(MIT OR WTFPL)",
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/exponential-backoff": {
+      "version": "3.1.3",
+      "resolved": "https://registry.npmjs.org/exponential-backoff/-/exponential-backoff-3.1.3.tgz",
+      "integrity": "sha512-ZgEeZXj30q+I0EN+CbSSpIyPaJ5HVQD18Z1m+u1FXbAeT94mr1zw50q4q6jiiC447Nl/YTcIYSAftiGqetwXCA==",
+      "license": "Apache-2.0",
+      "optional": true
+    },
+    "node_modules/fdir": {
+      "version": "6.5.0",
+      "resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz",
+      "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==",
+      "license": "MIT",
+      "optional": true,
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "peerDependencies": {
+        "picomatch": "^3 || ^4"
+      },
+      "peerDependenciesMeta": {
+        "picomatch": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/file-uri-to-path": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz",
+      "integrity": "sha512-0Zt+s3L7Vf1biwWZ29aARiVYLx7iMGnEUl9x33fbB/j3jR81u/O2LbqK+Bm1CDSNDKVtJ/YjwY7TUd5SkeLQLw==",
+      "license": "MIT"
+    },
+    "node_modules/fs-constants": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/fs-constants/-/fs-constants-1.0.0.tgz",
+      "integrity": "sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow==",
+      "license": "MIT"
+    },
+    "node_modules/github-from-package": {
+      "version": "0.0.0",
+      "resolved": "https://registry.npmjs.org/github-from-package/-/github-from-package-0.0.0.tgz",
+      "integrity": "sha512-SyHy3T1v2NUXn29OsWdxmK6RwHD+vkj3v8en8AOBZ1wBQ/hCAQ5bAQTD02kW4W9tUp/3Qh6J8r9EvntiyCmOOw==",
+      "license": "MIT"
+    },
+    "node_modules/graceful-fs": {
+      "version": "4.2.11",
+      "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz",
+      "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==",
+      "license": "ISC",
+      "optional": true
+    },
+    "node_modules/ieee754": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz",
+      "integrity": "sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/inherits": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
+      "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==",
+      "license": "ISC"
+    },
+    "node_modules/ini": {
+      "version": "1.3.8",
+      "resolved": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz",
+      "integrity": "sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==",
+      "license": "ISC"
+    },
+    "node_modules/isexe": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/isexe/-/isexe-4.0.0.tgz",
+      "integrity": "sha512-FFUtZMpoZ8RqHS3XeXEmHWLA4thH+ZxCv2lOiPIn1Xc7CxrqhWzNSDzD+/chS/zbYezmiwWLdQC09JdQKmthOw==",
+      "license": "BlueOak-1.0.0",
+      "optional": true,
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/mimic-response": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/mimic-response/-/mimic-response-3.1.0.tgz",
+      "integrity": "sha512-z0yWI+4FDrrweS8Zmt4Ej5HdJmky15+L2e6Wgn3+iK5fWzb6T3fhNFq2+MeTRb064c6Wr4N/wv0DzQTjNzHNGQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/minimist": {
+      "version": "1.2.8",
+      "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz",
+      "integrity": "sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/minipass": {
+      "version": "7.1.3",
+      "resolved": "https://registry.npmjs.org/minipass/-/minipass-7.1.3.tgz",
+      "integrity": "sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==",
+      "license": "BlueOak-1.0.0",
+      "engines": {
+        "node": ">=16 || 14 >=14.17"
+      }
+    },
+    "node_modules/minizlib": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/minizlib/-/minizlib-3.1.0.tgz",
+      "integrity": "sha512-KZxYo1BUkWD2TVFLr0MQoM8vUUigWD3LlD83a/75BqC+4qE0Hb1Vo5v1FgcfaNXvfXzr+5EhQ6ing/CaBijTlw==",
+      "license": "MIT",
+      "dependencies": {
+        "minipass": "^7.1.2"
+      },
+      "engines": {
+        "node": ">= 18"
+      }
+    },
+    "node_modules/mkdirp-classic": {
+      "version": "0.5.3",
+      "resolved": "https://registry.npmjs.org/mkdirp-classic/-/mkdirp-classic-0.5.3.tgz",
+      "integrity": "sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A==",
+      "license": "MIT"
+    },
+    "node_modules/napi-build-utils": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/napi-build-utils/-/napi-build-utils-2.0.0.tgz",
+      "integrity": "sha512-GEbrYkbfF7MoNaoh2iGG84Mnf/WZfB0GdGEsM8wz7Expx/LlWf5U8t9nvJKXSp3qr5IsEbK04cBGhol/KwOsWA==",
+      "license": "MIT"
+    },
+    "node_modules/node-abi": {
+      "version": "3.94.0",
+      "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-3.94.0.tgz",
+      "integrity": "sha512-W5ZNO5KRPB5TkYmGVD9F6YqhsglXJzE6etpbmT+f6EQElhiX/UTG551cnsRGvLG3fyZEg9HwaDmNmj5nwJ4z9g==",
+      "license": "MIT",
+      "dependencies": {
+        "semver": "^7.3.5"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/node-addon-api": {
+      "version": "8.9.0",
+      "resolved": "https://registry.npmjs.org/node-addon-api/-/node-addon-api-8.9.0.tgz",
+      "integrity": "sha512-ekZMeaaIzSQTSpr7X2X3iJM7lTzgnx8ahAG9pJfT/7+14mlEM8ZYQ9cgCDvSSRbReFK0oHli3WrZdCiRsgAT9Q==",
+      "license": "MIT",
+      "engines": {
+        "node": "^18 || ^20 || >= 21"
+      }
+    },
+    "node_modules/node-gyp": {
+      "version": "12.4.0",
+      "resolved": "https://registry.npmjs.org/node-gyp/-/node-gyp-12.4.0.tgz",
+      "integrity": "sha512-OMcPNvqTCFUnNaBlmdgq+lfNqY7gTiSmNRDjY3uAXRyudeKZEZxu3CLtjMQrx4zZxCX2b/mpNqTtwuCJgXhHkw==",
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "env-paths": "^2.2.0",
+        "exponential-backoff": "^3.1.1",
+        "graceful-fs": "^4.2.6",
+        "nopt": "^9.0.0",
+        "proc-log": "^6.0.0",
+        "semver": "^7.3.5",
+        "tar": "^7.5.4",
+        "tinyglobby": "^0.2.12",
+        "undici": "^6.25.0",
+        "which": "^6.0.0"
+      },
+      "bin": {
+        "node-gyp": "bin/node-gyp.js"
+      },
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
+    "node_modules/nopt": {
+      "version": "9.0.0",
+      "resolved": "https://registry.npmjs.org/nopt/-/nopt-9.0.0.tgz",
+      "integrity": "sha512-Zhq3a+yFKrYwSBluL4H9XP3m3y5uvQkB/09CwDruCiRmR/UJYnn9W4R48ry0uGC70aeTPKLynBtscP9efFFcPw==",
+      "license": "ISC",
+      "optional": true,
+      "dependencies": {
+        "abbrev": "^4.0.0"
+      },
+      "bin": {
+        "nopt": "bin/nopt.js"
+      },
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
+    "node_modules/once": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
+      "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==",
+      "license": "ISC",
+      "dependencies": {
+        "wrappy": "1"
+      }
+    },
+    "node_modules/picomatch": {
+      "version": "4.0.5",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.5.tgz",
+      "integrity": "sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==",
+      "license": "MIT",
+      "optional": true,
+      "peer": true,
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/jonschlinkert"
+      }
+    },
+    "node_modules/prebuild-install": {
+      "version": "7.1.3",
+      "resolved": "https://registry.npmjs.org/prebuild-install/-/prebuild-install-7.1.3.tgz",
+      "integrity": "sha512-8Mf2cbV7x1cXPUILADGI3wuhfqWvtiLA1iclTDbFRZkgRQS0NqsPZphna9V+HyTEadheuPmjaJMsbzKQFOzLug==",
+      "deprecated": "No longer maintained. Please contact the author of the relevant native addon; alternatives are available.",
+      "license": "MIT",
+      "dependencies": {
+        "detect-libc": "^2.0.0",
+        "expand-template": "^2.0.3",
+        "github-from-package": "0.0.0",
+        "minimist": "^1.2.3",
+        "mkdirp-classic": "^0.5.3",
+        "napi-build-utils": "^2.0.0",
+        "node-abi": "^3.3.0",
+        "pump": "^3.0.0",
+        "rc": "^1.2.7",
+        "simple-get": "^4.0.0",
+        "tar-fs": "^2.0.0",
+        "tunnel-agent": "^0.6.0"
+      },
+      "bin": {
+        "prebuild-install": "bin.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/proc-log": {
+      "version": "6.1.0",
+      "resolved": "https://registry.npmjs.org/proc-log/-/proc-log-6.1.0.tgz",
+      "integrity": "sha512-iG+GYldRf2BQ0UDUAd6JQ/RwzaQy6mXmsk/IzlYyal4A4SNFw54MeH4/tLkF4I5WoWG9SQwuqWzS99jaFQHBuQ==",
+      "license": "ISC",
+      "optional": true,
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
+    "node_modules/pump": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.4.tgz",
+      "integrity": "sha512-VS7sjc6KR7e1ukRFhQSY5LM2uBWAUPiOPa/A3mkKmiMwSmRFUITt0xuj+/lesgnCv+dPIEYlkzrcyXgquIHMcA==",
+      "license": "MIT",
+      "dependencies": {
+        "end-of-stream": "^1.1.0",
+        "once": "^1.3.1"
+      }
+    },
+    "node_modules/rc": {
+      "version": "1.2.8",
+      "resolved": "https://registry.npmjs.org/rc/-/rc-1.2.8.tgz",
+      "integrity": "sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==",
+      "license": "(BSD-2-Clause OR MIT OR Apache-2.0)",
+      "dependencies": {
+        "deep-extend": "^0.6.0",
+        "ini": "~1.3.0",
+        "minimist": "^1.2.0",
+        "strip-json-comments": "~2.0.1"
+      },
+      "bin": {
+        "rc": "cli.js"
+      }
+    },
+    "node_modules/readable-stream": {
+      "version": "3.6.2",
+      "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz",
+      "integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==",
+      "license": "MIT",
+      "dependencies": {
+        "inherits": "^2.0.3",
+        "string_decoder": "^1.1.1",
+        "util-deprecate": "^1.0.1"
+      },
+      "engines": {
+        "node": ">= 6"
+      }
+    },
+    "node_modules/safe-buffer": {
+      "version": "5.2.1",
+      "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
+      "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT"
+    },
+    "node_modules/semver": {
+      "version": "7.8.5",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
+      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/simple-concat": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/simple-concat/-/simple-concat-1.0.1.tgz",
+      "integrity": "sha512-cSFtAPtRhljv69IK0hTVZQ+OfE9nePi/rtJmw5UjHeVyVroEqJXP1sFztKUy1qU+xvz3u/sfYJLa947b7nAN2Q==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT"
+    },
+    "node_modules/simple-get": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/simple-get/-/simple-get-4.0.1.tgz",
+      "integrity": "sha512-brv7p5WgH0jmQJr1ZDDfKDOSeWWg+OVypG99A/5vYGPqJ6pxiaHLy8nxtFjBA7oMa01ebA9gfh1uMCFqOuXxvA==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "decompress-response": "^6.0.0",
+        "once": "^1.3.1",
+        "simple-concat": "^1.0.0"
+      }
+    },
+    "node_modules/sqlite3": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/sqlite3/-/sqlite3-6.0.1.tgz",
+      "integrity": "sha512-X0czUUMG2tmSqJpEQa3tCuZSHKIx8PwM53vLZzKp/o6Rpy25fiVfjdbnZ988M8+O3ZWR1ih0K255VumCb3MAnQ==",
+      "hasInstallScript": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "bindings": "^1.5.0",
+        "node-addon-api": "^8.0.0",
+        "prebuild-install": "^7.1.3",
+        "tar": "^7.5.10"
+      },
+      "engines": {
+        "node": ">=20.17.0"
+      },
+      "optionalDependencies": {
+        "node-gyp": "12.x"
+      },
+      "peerDependencies": {
+        "node-gyp": "12.x"
+      },
+      "peerDependenciesMeta": {
+        "node-gyp": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/string_decoder": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz",
+      "integrity": "sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==",
+      "license": "MIT",
+      "dependencies": {
+        "safe-buffer": "~5.2.0"
+      }
+    },
+    "node_modules/strip-json-comments": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz",
+      "integrity": "sha512-4gB8na07fecVVkOI6Rs4e7T6NOTki5EmL7TUduTs6bu3EdnSycntVJ4re8kgZA+wx9IueI2Y11bfbgwtzuE0KQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/tar": {
+      "version": "7.5.20",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.20.tgz",
+      "integrity": "sha512-9FcyK4PA6+WbzlTM9WhQm6vB5W7cP7dUiPsv1g7YDwEQnQ1CGpK3MGlKk/ITVWMk05kHZuBhmVhiv8LZoy/PFQ==",
+      "license": "BlueOak-1.0.0",
+      "dependencies": {
+        "@isaacs/fs-minipass": "^4.0.0",
+        "chownr": "^3.0.0",
+        "minipass": "^7.1.2",
+        "minizlib": "^3.1.0",
+        "yallist": "^5.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tar-fs": {
+      "version": "2.1.5",
+      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.5.tgz",
+      "integrity": "sha512-OboTd8mmMhZDNPV+UjQcK9yKAatXu2aJ+r1w4im1Otd4M4fl2hwvdoXUxIYHFTHWK/3y3FarBP70v3vwmGlOxw==",
+      "license": "MIT",
+      "dependencies": {
+        "chownr": "^1.1.1",
+        "mkdirp-classic": "^0.5.2",
+        "pump": "^3.0.0",
+        "tar-stream": "^2.1.4"
+      }
+    },
+    "node_modules/tar-fs/node_modules/chownr": {
+      "version": "1.1.4",
+      "resolved": "https://registry.npmjs.org/chownr/-/chownr-1.1.4.tgz",
+      "integrity": "sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg==",
+      "license": "ISC"
+    },
+    "node_modules/tar-stream": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/tar-stream/-/tar-stream-2.2.0.tgz",
+      "integrity": "sha512-ujeqbceABgwMZxEJnk2HDY2DlnUZ+9oEcb1KzTVfYHio0UE6dG71n60d8D2I4qNvleWrrXpmjpt7vZeF1LnMZQ==",
+      "license": "MIT",
+      "dependencies": {
+        "bl": "^4.0.3",
+        "end-of-stream": "^1.4.1",
+        "fs-constants": "^1.0.0",
+        "inherits": "^2.0.3",
+        "readable-stream": "^3.1.1"
+      },
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/tinyglobby": {
+      "version": "0.2.17",
+      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.17.tgz",
+      "integrity": "sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==",
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "fdir": "^6.5.0",
+        "picomatch": "^4.0.4"
+      },
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/SuperchupuDev"
+      }
+    },
+    "node_modules/tunnel-agent": {
+      "version": "0.6.0",
+      "resolved": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz",
+      "integrity": "sha512-McnNiV1l8RYeY8tBgEpuodCC1mLUdbSN+CYBL7kJsJNInOP8UjDDEwdk6Mw60vdLLrr5NHKZhMAOSrR2NZuQ+w==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "safe-buffer": "^5.0.1"
+      },
+      "engines": {
+        "node": "*"
+      }
+    },
+    "node_modules/undici": {
+      "version": "6.27.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-6.27.0.tgz",
+      "integrity": "sha512-YmfV3YnEDzXRC5lZ2jWtWWHKGUm1zIt8AhesR1tens+HTNv+YZlN/dp6G727LOvMJ8xjP9Be7Y2Sdr96LDm+pg==",
+      "license": "MIT",
+      "optional": true,
+      "engines": {
+        "node": ">=18.17"
+      }
+    },
+    "node_modules/util-deprecate": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz",
+      "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==",
+      "license": "MIT"
+    },
+    "node_modules/which": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/which/-/which-6.0.1.tgz",
+      "integrity": "sha512-oGLe46MIrCRqX7ytPUf66EAYvdeMIZYn3WaocqqKZAxrBpkqHfL/qvTyJ/bTk5+AqHCjXmrv3CEWgy368zhRUg==",
+      "license": "ISC",
+      "optional": true,
+      "dependencies": {
+        "isexe": "^4.0.0"
+      },
+      "bin": {
+        "node-which": "bin/which.js"
+      },
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
+    "node_modules/wrappy": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
+      "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==",
+      "license": "ISC"
+    },
+    "node_modules/yallist": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/yallist/-/yallist-5.0.0.tgz",
+      "integrity": "sha512-YgvUTfwqyc7UXVMrB+SImsVYSmTS8X/tSrtdNZMImM+n7+QTriRXyXim0mBrTXNeqzVF0KWGgHPeiyViFFrNDw==",
+      "license": "BlueOak-1.0.0",
+      "engines": {
+        "node": ">=18"
+      }
+    }
+  }
+}

home-relay/package.json

@@ -0,0 +1,17 @@
+{
+  "name": "etrog-yt-home-relay",
+  "version": "1.0.0",
+  "private": true,
+  "description": "Home residential egress for YouTube InnerTube + googlevideo (pairs with etrog-bypass-proxy Worker)",
+  "type": "module",
+  "scripts": {
+    "start": "node server.js",
+    "dev": "node --watch server.js"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "dependencies": {
+    "sqlite3": "^6.0.1"
+  }
+}

home-relay/run-relay.bat

@@ -0,0 +1,12 @@
+@echo off
+rem RELAY_SECRET must come from the environment (set once via start-relay.ps1 or setx).
+rem Never hardcode it here — this file is committed.
+if "%RELAY_SECRET%"=="" (
+  echo ERROR: RELAY_SECRET is not set.
+  echo   Set it once:  setx RELAY_SECRET "your-long-random-secret"
+  echo   Then open a NEW terminal and re-run this script.
+  exit /b 1
+)
+set PORT=8788
+cd /d "%~dp0"
+node server.js >> "%TEMP%\relay.log" 2>> "%TEMP%\relay-error.log"

home-relay/run-tunnel.bat

@@ -0,0 +1,2 @@
+@echo off
+"C:\Program Files (x86)\cloudflared\cloudflared.exe" tunnel --protocol http2 --url http://127.0.0.1:8788 --logfile "%TEMP%\cloudflared-relay.log"

home-relay/server.js

@@ -0,0 +1,871 @@
+/**
+ * Etrog YT Home Relay — residential egress for YouTube only
+ * ─────────────────────────────────────────────────────────
+ * Runs on your home PC (real residential IP). Cloudflare Worker calls this
+ * for InnerTube /player and googlevideo bytes so both share the SAME IP.
+ *
+ * Endpoints (all require Authorization: Bearer <RELAY_SECRET>):
+ *   GET  /health              → { ok, ip hint }
+ *   POST /v1/yt/player        → { videoId } → formats + playability (from home IP)
+ *   GET  /v1/fetch?url=…      → stream arbitrary allowed URL (googlevideo, etc.)
+ *   POST /v1/fetch            → { url, method?, headers?, body? } JSON or stream
+ *
+ * Quick start:
+ *   set RELAY_SECRET=long-random-string
+ *   npm start
+ *   cloudflared tunnel --url http://127.0.0.1:8788
+ *   # put the https URL + secret into Worker env (YT_RELAY_URL, YT_RELAY_SECRET)
+ */
+
+import http from 'node:http';
+import { URL } from 'node:url';
+import { randomUUID, createHash } from 'node:crypto';
+import { Readable } from 'node:stream';
+import fs from 'node:fs';
+import path from 'node:path';
+import sqlite3Pkg from 'sqlite3';
+const sqlite3 = sqlite3Pkg.default || sqlite3Pkg;
+
+// Always bind loopback — cloudflared/localtunnel connect here.
+// Do NOT use 0.0.0.0 unless you intentionally expose the port on LAN.
+const PORT = Number(process.env.PORT || 8788);
+const HOST = process.env.HOST || '127.0.0.1';
+const RELAY_SECRET = process.env.RELAY_SECRET || '';
+const FETCH_TIMEOUT_MS = Number(process.env.FETCH_TIMEOUT_MS || 25000);
+// Etrog/Rimon MITM: set RELAY_INSECURE_TLS=1 if Node fetch fails with cert errors
+const INSECURE_TLS = process.env.RELAY_INSECURE_TLS === '1' || process.env.RELAY_INSECURE_TLS === 'true';
+if (INSECURE_TLS) {
+  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
+  console.warn('[relay] RELAY_INSECURE_TLS=1 — TLS cert verification DISABLED (filter MITM mode)');
+}
+
+// Cookies that matter for Innertube auth (keep header small)
+const AUTH_COOKIE_NAMES = new Set([
+  'LOGIN_INFO', 'SID', 'HSID', 'SSID', 'APISID', 'SAPISID',
+  '__Secure-1PSID', '__Secure-3PSID', '__Secure-1PAPISID', '__Secure-3PAPISID',
+  '__Secure-1PSIDTS', '__Secure-3PSIDTS', '__Secure-1PSIDCC', '__Secure-3PSIDCC',
+  'PREF', 'SOCS', 'VISITOR_INFO1_LIVE', 'YSC', 'CONSENT',
+]);
+
+// Only these host suffixes may be fetched through the relay (SSRF guard)
+const ALLOWED_HOST_SUFFIXES = [
+  'youtube.com',
+  'youtubei.googleapis.com',
+  'googleapis.com',
+  'googlevideo.com',
+  'gvt1.com',
+  'gvt2.com',
+  'ytimg.com',
+  'ggpht.com',
+  'googleusercontent.com',
+];
+
+const INNERTUBE_KEY_ANDROID = 'AIzaSyA8eiZmM1FaDVjRy-df2KTyQ_vz_yYM39w';
+const INNERTUBE_KEY_WEB = 'AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8';
+
+// ── helpers ──────────────────────────────────────────────────────────────
+
+function log(...args) {
+  const ts = new Date().toISOString().slice(11, 19);
+  console.log(`[${ts}]`, ...args);
+}
+
+function json(res, status, obj) {
+  const body = JSON.stringify(obj);
+  res.writeHead(status, {
+    'content-type': 'application/json; charset=utf-8',
+    'cache-control': 'no-store',
+    'access-control-allow-origin': '*',
+  });
+  res.end(body);
+}
+
+function unauthorized(res) {
+  json(res, 401, { error: 'unauthorized' });
+}
+
+function badRequest(res, msg) {
+  json(res, 400, { error: msg || 'bad request' });
+}
+
+function readBody(req, limit = 2 * 1024 * 1024) {
+  return new Promise((resolve, reject) => {
+    const chunks = [];
+    let size = 0;
+    req.on('data', (c) => {
+      size += c.length;
+      if (size > limit) {
+        reject(new Error('body too large'));
+        req.destroy();
+        return;
+      }
+      chunks.push(c);
+    });
+    req.on('end', () => resolve(Buffer.concat(chunks)));
+    req.on('error', reject);
+  });
+}
+
+function checkAuth(req) {
+  if (!RELAY_SECRET) return false;
+  const h = req.headers.authorization || '';
+  if (h === `Bearer ${RELAY_SECRET}`) return true;
+  // Also accept header used by some gateways
+  if (req.headers['x-relay-secret'] === RELAY_SECRET) return true;
+  return false;
+}
+
+function hostAllowed(hostname) {
+  const h = String(hostname || '').toLowerCase().replace(/\.$/, '');
+  if (!h) return false;
+  return ALLOWED_HOST_SUFFIXES.some(
+    (s) => h === s || h.endsWith('.' + s)
+  );
+}
+
+function assertAllowedUrl(urlStr) {
+  let u;
+  try {
+    u = new URL(urlStr);
+  } catch {
+    throw new Error('invalid url');
+  }
+  if (u.protocol !== 'https:' && u.protocol !== 'http:') {
+    throw new Error('only http(s)');
+  }
+  if (!hostAllowed(u.hostname)) {
+    throw new Error('host not allowed: ' + u.hostname);
+  }
+  return u;
+}
+
+/** WEB Innertube expects SAPISIDHASH authorization when cookies are present */
+function computeSapisidHash(cookieStr) {
+  try {
+    const m = String(cookieStr || '').match(
+      /(?:^|;\s*)(?:__Secure-3PAPISID|__Secure-1PAPISID|SAPISID)=([^;]+)/
+    );
+    if (!m) return null;
+    const ts = Math.floor(Date.now() / 1000).toString();
+    const origin = 'https://www.youtube.com';
+    const hash = createHash('sha1').update(`${ts} ${m[1]} ${origin}`).digest('hex');
+    return `SAPISIDHASH ${ts}_${hash}`;
+  } catch {
+    return null;
+  }
+}
+
+function slimCookieHeader(cookieStr) {
+  if (!cookieStr) return '';
+  const map = new Map();
+  for (const part of String(cookieStr).split(';')) {
+    const eq = part.indexOf('=');
+    if (eq === -1) continue;
+    const name = part.slice(0, eq).trim();
+    const val = part.slice(eq + 1).trim();
+    if (!name || !AUTH_COOKIE_NAMES.has(name)) continue;
+    // Later hosts overwrite earlier — prefer youtube-specific values already in string order
+    map.set(name, val);
+  }
+  return [...map.entries()].map(([k, v]) => `${k}=${v}`).join('; ');
+}
+
+function collectFormats(playerJson) {
+  const sd = (playerJson && playerJson.streamingData) || {};
+  const raw = [].concat(sd.formats || [], sd.adaptiveFormats || []);
+  const out = [];
+  for (const f of raw) {
+    if (!f) continue;
+    // Prefer cipher-free URLs; skip signatureCipher-only (needs nsig on client)
+    const url = f.url || null;
+    if (!url) continue;
+    const mt = String(f.mimeType || '');
+    const hasA = !!(
+      f.audioQuality ||
+      f.audioSampleRate ||
+      mt.includes('audio') ||
+      f.audioChannels != null
+    );
+    const hasV = !!(f.width || f.height || mt.includes('video'));
+    if (mt.includes('mp4') && f.audioChannels != null) {
+      // progressive mp4 often has both
+    }
+    out.push({
+      itag: f.itag,
+      url,
+      mimeType: mt,
+      bitrate: f.bitrate || 0,
+      width: f.width || 0,
+      height: f.height || 0,
+      contentLength: f.contentLength || f.content_length || null,
+      hasAudio: hasA,
+      hasVideo: hasV,
+      progressive: !!(hasA && hasV),
+    });
+  }
+  return out;
+}
+
+async function tryPlayerClient(videoId, cl, workerUrl = null) {
+  if (workerUrl) {
+    const ac = new AbortController();
+    const t = setTimeout(() => ac.abort(), cl.timeoutMs || 12000);
+    try {
+      const helperEndpoint = workerUrl.replace(/\/+$/, '') + '/api/resolve-helper';
+      const helperRes = await fetch(helperEndpoint, {
+        method: 'POST',
+        headers: {
+          'content-type': 'application/json',
+          authorization: 'Bearer ' + RELAY_SECRET,
+        },
+        body: JSON.stringify({
+          videoId,
+          client: cl,
+          cookie: cl.cookie || '',
+        }),
+        signal: ac.signal,
+      });
+      clearTimeout(t);
+      if (helperRes.ok) {
+        const j = await helperRes.json();
+        if (j && j.source) {
+          j.source = j.source + '+cloud';
+          return j;
+        }
+      }
+    } catch (_) {
+      clearTimeout(t);
+    }
+  }
+
+  const endpoint =
+    (cl.host || 'https://www.youtube.com') +
+    '/youtubei/v1/player?prettyPrint=false&key=' +
+    encodeURIComponent(cl.apiKey);
+
+  const client = {
+    clientName: cl.clientName,
+    clientVersion: cl.clientVersion,
+    hl: cl.hl || 'en',
+    gl: cl.gl || 'US',
+    userAgent: cl.ua,
+    ...(cl.extra || {}),
+  };
+
+  const body = {
+    context: { client, user: { lockedSafetyMode: false } },
+    videoId,
+    contentCheckOk: true,
+    racyCheckOk: true,
+  };
+
+  if (cl.playbackContext) {
+    body.playbackContext = cl.playbackContext;
+  }
+
+  const isWebFamily = /WEB|TVHTML5|MWEB/i.test(cl.clientName);
+  const headers = {
+    'content-type': 'application/json',
+    'user-agent': cl.ua,
+    'x-youtube-client-name': String(cl.clientNameHeader || ''),
+    'x-youtube-client-version': cl.clientVersion,
+    origin: 'https://www.youtube.com',
+    referer: cl.embedded
+      ? 'https://www.youtube.com/embed/' + videoId
+      : 'https://www.youtube.com/watch?v=' + videoId,
+    'accept-language': 'he-IL,he;q=0.9,en-US;q=0.8,en;q=0.7',
+    'x-goog-api-key': cl.apiKey,
+  };
+  if (cl.cookie) {
+    headers.cookie = cl.cookie;
+    // WEB-family: SAPISIDHASH proves cookie ownership (fixes many LOGIN_REQUIRED / bot checks)
+    if (isWebFamily || cl.forceAuth) {
+      const auth = computeSapisidHash(cl.cookie);
+      if (auth) {
+        headers.authorization = auth;
+        headers['x-origin'] = 'https://www.youtube.com';
+        headers['x-goog-authuser'] = '0';
+      }
+    }
+  }
+
+  const ac = new AbortController();
+  const t = setTimeout(() => ac.abort(), cl.timeoutMs || 12000);
+  try {
+    const r = await fetch(endpoint, {
+      method: 'POST',
+      headers,
+      body: JSON.stringify(body),
+      signal: ac.signal,
+    });
+    const j = await r.json().catch(() => null);
+    const formats = collectFormats(j);
+    const playability = (j && j.playabilityStatus) || {};
+    const status = playability.status || null;
+    const reason = playability.reason || playability.messages?.[0] || null;
+    const errScreen = playability.errorScreen || null;
+    let errorCode = null;
+    try {
+      errorCode =
+        errScreen?.playerErrorMessageRenderer?.errorMessage?.runs?.[0]?.text ||
+        errScreen?.playerErrorMessageRenderer?.reason?.simpleText ||
+        playability.reason ||
+        null;
+    } catch (_) {}
+    return {
+      ok: formats.length > 0 && status !== 'LOGIN_REQUIRED' && status !== 'UNPLAYABLE',
+      source: cl.clientName + (cl.cookie ? '+ck' : ''),
+      http: r.status,
+      playability: {
+        status,
+        reason,
+        errorCode: errorCode || null,
+      },
+      formats,
+      rawStatus: status,
+    };
+  } catch (e) {
+    return {
+      ok: false,
+      source: cl.clientName + (cl.cookie ? '+ck' : ''),
+      error: String(e && e.message ? e.message : e),
+      formats: [],
+    };
+  } finally {
+    clearTimeout(t);
+  }
+}
+
+async function resolvePlayer(videoId, cookieHeader, workerUrl = null) {
+  // The freshly auto-loaded Firefox session is the whole point of this relay, so it
+  // must win per-cookie over whatever the Worker forwarded — the Worker may send a
+  // stale/hardcoded builtin cookie, and slimCookieHeader keeps the LAST value per name,
+  // so Firefox goes last. Falls back to the forwarded cookie for any name Firefox lacks.
+  const merged = [cookieHeader || '', firefoxCookiesStr || ''].filter(Boolean).join('; ');
+  const ck = slimCookieHeader(merged);
+  const hasAuth = /SAPISID|__Secure-3PAPISID|LOGIN_INFO|__Secure-3PSID/i.test(ck);
+
+  // Order matters: authenticated WEB first for Restricted Mode / age / bot checks.
+  // ANDROID without cookies often hits MRM / LOGIN_REQUIRED on filtered ISPs.
+  const clients = [];
+
+  if (hasAuth) {
+    clients.push({
+      clientName: 'WEB',
+      clientVersion: '2.20250620.00.00',
+      clientNameHeader: '1',
+      ua: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36',
+      apiKey: INNERTUBE_KEY_WEB,
+      host: 'https://www.youtube.com',
+      cookie: ck,
+      forceAuth: true,
+      playbackContext: {
+        contentPlaybackContext: {
+          html5Preference: 'HTML5_PREF_WANTS',
+          signatureTimestamp: 20468,
+        },
+      },
+      timeoutMs: 14000,
+    });
+    clients.push({
+      clientName: 'MWEB',
+      clientVersion: '2.20250620.00.00',
+      clientNameHeader: '2',
+      ua: 'Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36',
+      apiKey: INNERTUBE_KEY_WEB,
+      host: 'https://www.youtube.com',
+      cookie: ck,
+      forceAuth: true,
+      playbackContext: {
+        contentPlaybackContext: {
+          html5Preference: 'HTML5_PREF_WANTS',
+          signatureTimestamp: 20468,
+        },
+      },
+      timeoutMs: 12000,
+    });
+    // Mobile clients WITH account cookies (helps age-gate; not always)
+    clients.push({
+      clientName: 'ANDROID',
+      clientVersion: '20.50.37',
+      clientNameHeader: '3',
+      ua: 'com.google.android.youtube/20.50.37 (Linux; U; Android 14) gzip',
+      apiKey: INNERTUBE_KEY_ANDROID,
+      host: 'https://youtubei.googleapis.com',
+      cookie: ck,
+      forceAuth: true,
+      extra: { androidSdkVersion: 34, osName: 'Android', osVersion: '14' },
+      timeoutMs: 12000,
+    });
+  }
+
+  // Embedded TV player — sometimes returns progressive formats without login
+  clients.push({
+    clientName: 'TVHTML5_SIMPLY_EMBEDDED_PLAYER',
+    clientVersion: '2.0',
+    clientNameHeader: '85',
+    ua: 'Mozilla/5.0 (ChromiumStylePlatform) Cobalt/Version',
+    apiKey: INNERTUBE_KEY_WEB,
+    host: 'https://www.youtube.com',
+    embedded: true,
+    cookie: hasAuth ? ck : undefined,
+    playbackContext: {
+      contentPlaybackContext: {
+        html5Preference: 'HTML5_PREF_WANTS',
+        signatureTimestamp: 20468,
+      },
+    },
+    timeoutMs: 12000,
+  });
+
+  // Anonymous ANDROID / IOS fallback (works for many non-restricted videos)
+  clients.push(
+    {
+      clientName: 'ANDROID',
+      clientVersion: '20.50.37',
+      clientNameHeader: '3',
+      ua: 'com.google.android.youtube/20.50.37 (Linux; U; Android 14) gzip',
+      apiKey: INNERTUBE_KEY_ANDROID,
+      host: 'https://youtubei.googleapis.com',
+      extra: { androidSdkVersion: 34, osName: 'Android', osVersion: '14' },
+      timeoutMs: 12000,
+    },
+    {
+      clientName: 'IOS',
+      clientVersion: '20.12.4',
+      clientNameHeader: '5',
+      ua: 'com.google.ios.youtube/20.12.4 (iPhone16,2; U; CPU iOS 18_0 like Mac OS X;)',
+      apiKey: 'AIzaSyB-63vPrdThhKuerbB2N_l7Kwwcxj6yUAc',
+      host: 'https://www.youtube.com',
+      extra: {
+        deviceModel: 'iPhone16,2',
+        osName: 'iPhone',
+        osVersion: '18.0',
+      },
+      timeoutMs: 12000,
+    }
+  );
+
+  if (!hasAuth) {
+    clients.push({
+      clientName: 'WEB',
+      clientVersion: '2.20250620.00.00',
+      clientNameHeader: '1',
+      ua: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36',
+      apiKey: INNERTUBE_KEY_WEB,
+      host: 'https://www.youtube.com',
+      playbackContext: {
+        contentPlaybackContext: {
+          html5Preference: 'HTML5_PREF_WANTS',
+          signatureTimestamp: 20468,
+        },
+      },
+      timeoutMs: 12000,
+    });
+  }
+
+  const attempts = [];
+  // Sequential for auth clients first would be slower; race all, pick best
+  const results = await Promise.all(clients.map((c) => tryPlayerClient(videoId, c, workerUrl)));
+
+  // Prefer any ok with formats; among failures surface LOGIN_REQUIRED / MRM clearly
+  let bestFail = null;
+  for (const r of results) {
+    attempts.push({
+      source: r.source,
+      ok: r.ok,
+      http: r.http,
+      status: r.playability?.status,
+      reason: r.playability?.reason || r.playability?.errorCode,
+      n: (r.formats || []).length,
+      error: r.error,
+    });
+    if (r.ok && r.formats.length) {
+      return {
+        ok: true,
+        videoId,
+        client: r.source,
+        playability: r.playability,
+        formats: r.formats,
+        attempts,
+        hasAuthCookies: hasAuth,
+        egress: 'home-relay',
+      };
+    }
+    if (
+      r.playability?.status === 'LOGIN_REQUIRED' ||
+      /MRM|bot|restricted|login/i.test(String(r.playability?.reason || r.playability?.errorCode || ''))
+    ) {
+      bestFail = r;
+    }
+  }
+
+  const last = bestFail || results[results.length - 1] || {};
+  return {
+    ok: false,
+    videoId,
+    playability: last.playability || { status: 'ERROR' },
+    formats: [],
+    attempts,
+    hasAuthCookies: hasAuth,
+    hint: hasAuth
+      ? 'Auth cookies present but YouTube still blocked — try re-login in Firefox, disable Restricted Mode on Google account, or use mobile hotspot without Etrog for test.'
+      : 'No SAPISID/LOGIN_INFO from Firefox — open YouTube in Firefox while logged in, then restart relay.',
+    egress: 'home-relay',
+  };
+}
+
+async function proxyFetch(urlStr, opts = {}) {
+  const u = assertAllowedUrl(urlStr);
+  const method = (opts.method || 'GET').toUpperCase();
+  const headers = { ...(opts.headers || {}) };
+  // Strip hop-by-hop / dangerous
+  for (const k of [
+    'host',
+    'connection',
+    'content-length',
+    'transfer-encoding',
+    'authorization', // never forward Worker→relay auth upstream
+  ]) {
+    delete headers[k];
+    delete headers[k.toLowerCase()];
+  }
+
+  const ac = new AbortController();
+  const t = setTimeout(() => ac.abort(), opts.timeoutMs || FETCH_TIMEOUT_MS);
+  try {
+    const init = {
+      method,
+      headers,
+      redirect: 'follow',
+      signal: ac.signal,
+    };
+    if (opts.body != null && method !== 'GET' && method !== 'HEAD') {
+      init.body = opts.body;
+    }
+    const upstream = await fetch(u.toString(), init);
+    return upstream;
+  } finally {
+    clearTimeout(t);
+  }
+}
+
+function pipeWebToNode(webRes, nodeRes, extraHeaders = {}) {
+  const headers = { ...extraHeaders };
+  // Forward useful upstream headers
+  const pass = [
+    'content-type',
+    'content-length',
+    'content-range',
+    'accept-ranges',
+    'cache-control',
+    'etag',
+    'last-modified',
+  ];
+  for (const name of pass) {
+    const v = webRes.headers.get(name);
+    if (v) headers[name] = v;
+  }
+  headers['x-relay'] = 'home';
+  headers['access-control-allow-origin'] = '*';
+  headers['access-control-expose-headers'] =
+    'Content-Length, Content-Range, Accept-Ranges, Content-Type, X-Relay';
+
+  nodeRes.writeHead(webRes.status, headers);
+
+  if (!webRes.body) {
+    nodeRes.end();
+    return Promise.resolve();
+  }
+
+  const readable = Readable.fromWeb(webRes.body);
+  readable.pipe(nodeRes);
+
+  return new Promise((resolve) => {
+    readable.on('end', resolve);
+    readable.on('error', (err) => {
+      log('pipe error', err.message);
+      try { nodeRes.destroy(err); } catch (_) {}
+      resolve();
+    });
+  });
+}
+
+// ── server ───────────────────────────────────────────────────────────────
+
+const server = http.createServer(async (req, res) => {
+  const reqId = randomUUID().slice(0, 8);
+  const url = new URL(req.url || '/', `http://${req.headers.host || 'localhost'}`);
+
+  // CORS preflight (Worker browser tooling / curl)
+  if (req.method === 'OPTIONS') {
+    res.writeHead(204, {
+      'access-control-allow-origin': '*',
+      'access-control-allow-methods': 'GET,POST,OPTIONS',
+      'access-control-allow-headers': 'Authorization, Content-Type, X-Relay-Secret, Range',
+      'access-control-max-age': '86400',
+    });
+    res.end();
+    return;
+  }
+
+  // Health must stay synchronous and tiny — used by start scripts + tunnel probes
+  if (url.pathname === '/health' || url.pathname === '/') {
+    json(res, 200, {
+      ok: true,
+      service: 'etrog-yt-home-relay',
+      secretConfigured: !!RELAY_SECRET,
+      host: HOST,
+      port: PORT,
+      cookies: firefoxCookiesStr ? 'loaded' : 'none',
+      time: new Date().toISOString(),
+    });
+    return;
+  }
+
+  if (!checkAuth(req)) {
+    log(reqId, '401', req.method, url.pathname);
+    unauthorized(res);
+    return;
+  }
+
+  try {
+    // ── POST /v1/yt/player ──
+    if (req.method === 'POST' && url.pathname === '/v1/yt/player') {
+      const raw = await readBody(req);
+      let body = {};
+      try {
+        body = JSON.parse(raw.toString('utf8') || '{}');
+      } catch {
+        return badRequest(res, 'invalid json');
+      }
+      const videoId = String(body.videoId || body.v || '').trim();
+      if (!/^[a-zA-Z0-9_-]{6,20}$/.test(videoId)) {
+        return badRequest(res, 'invalid videoId');
+      }
+      log(reqId, 'player', videoId);
+      const workerUrl = req.headers['x-worker-url'] || null;
+      const pack = await resolvePlayer(videoId, body.cookie || firefoxCookiesStr || '', workerUrl);
+      log(
+        reqId,
+        'player done',
+        videoId,
+        pack.ok ? `ok n=${pack.formats.length} via ${pack.client}` : 'fail',
+        pack.playability?.status || ''
+      );
+      return json(res, pack.ok ? 200 : 502, pack);
+    }
+
+    // ── GET /v1/fetch?url= ──
+    if (req.method === 'GET' && url.pathname === '/v1/fetch') {
+      const target = url.searchParams.get('url');
+      if (!target) return badRequest(res, 'missing url');
+      const range = req.headers.range;
+      const headers = {
+        'user-agent':
+          req.headers['x-upstream-ua'] ||
+          'com.google.android.youtube/20.50.37 (Linux; U; Android 14) gzip',
+        accept: '*/*',
+        origin: 'https://www.youtube.com',
+        referer: 'https://www.youtube.com/',
+      };
+      if (range) headers.range = range;
+      log(reqId, 'fetch GET', target.slice(0, 80));
+      try {
+        const upstream = await proxyFetch(target, { method: 'GET', headers });
+        log(reqId, 'upstream status:', upstream.status);
+        await pipeWebToNode(upstream, res);
+        log(reqId, 'pipe complete');
+      } catch (err) {
+        log(reqId, 'fetch error:', err.message || err);
+        throw err;
+      }
+      return;
+    }
+
+    // ── POST /v1/fetch ──
+    if (req.method === 'POST' && url.pathname === '/v1/fetch') {
+      const raw = await readBody(req, 8 * 1024 * 1024);
+      let body = {};
+      try {
+        body = JSON.parse(raw.toString('utf8') || '{}');
+      } catch {
+        return badRequest(res, 'invalid json');
+      }
+      if (!body.url) return badRequest(res, 'missing url');
+      const method = (body.method || 'GET').toUpperCase();
+      const headers = body.headers || {};
+      let upstreamBody = body.body;
+      if (body.bodyBase64) {
+        upstreamBody = Buffer.from(body.bodyBase64, 'base64');
+      }
+      // Response mode: stream (default for media) or json envelope
+      const mode = body.mode || 'stream';
+      log(reqId, 'fetch POST', method, String(body.url).slice(0, 80));
+      const upstream = await proxyFetch(body.url, {
+        method,
+        headers,
+        body: upstreamBody,
+      });
+
+      if (mode === 'json') {
+        const buf = Buffer.from(await upstream.arrayBuffer());
+        const ct = upstream.headers.get('content-type') || '';
+        let parsed = null;
+        if (ct.includes('json') || buf[0] === 0x7b) {
+          try {
+            parsed = JSON.parse(buf.toString('utf8'));
+          } catch {
+            /* keep null */
+          }
+        }
+        return json(res, 200, {
+          ok: upstream.ok,
+          status: upstream.status,
+          headers: Object.fromEntries(upstream.headers.entries()),
+          bodyBase64: parsed ? undefined : buf.toString('base64'),
+          json: parsed,
+        });
+      }
+      return pipeWebToNode(upstream, res);
+    }
+
+    json(res, 404, { error: 'not found', path: url.pathname });
+  } catch (e) {
+    log(reqId, 'error', e.message || e);
+    json(res, 502, { error: String(e && e.message ? e.message : e) });
+  }
+});
+
+if (!RELAY_SECRET) {
+  console.error('');
+  console.error('ERROR: set RELAY_SECRET to a long random string before starting.');
+  console.error('  Windows:  set RELAY_SECRET=your-secret-here');
+  console.error('  PowerShell: $env:RELAY_SECRET="your-secret-here"');
+  console.error('  Linux/mac: export RELAY_SECRET=your-secret-here');
+  console.error('');
+  process.exit(1);
+}
+
+let firefoxCookiesStr = '';
+
+function extractFirefoxCookies() {
+  return new Promise((resolve) => {
+    const appData = process.env.APPDATA;
+    if (!appData) {
+      log('[Firefox Cookies] APPDATA env var not found.');
+      return resolve();
+    }
+
+    const profilesDir = path.join(appData, 'Mozilla', 'Firefox', 'Profiles');
+    if (!fs.existsSync(profilesDir)) {
+      log('[Firefox Cookies] Firefox profiles directory not found.');
+      return resolve();
+    }
+
+    try {
+      const profiles = fs.readdirSync(profilesDir);
+      let cookiesPath = null;
+
+      for (const profile of profiles) {
+        const p = path.join(profilesDir, profile, 'cookies.sqlite');
+        if (fs.existsSync(p)) {
+          cookiesPath = p;
+          if (profile.includes('default-release')) break;
+        }
+      }
+
+      if (!cookiesPath) {
+        log('[Firefox Cookies] cookies.sqlite not found.');
+        return resolve();
+      }
+
+      log(`[Firefox Cookies] Reading database from: ${cookiesPath}`);
+      const tempDbPath = path.join(process.env.TEMP || '.', `cookies_temp_${Date.now()}.sqlite`);
+      fs.copyFileSync(cookiesPath, tempDbPath);
+
+      const db = new sqlite3.Database(tempDbPath, (openErr) => {
+        if (openErr) {
+          log(`[Firefox Cookies] Open error: ${openErr.message}`);
+          try { fs.unlinkSync(tempDbPath); } catch {}
+          return resolve();
+        }
+        // youtube.com + google.com (SAPISID/SID often live on .google.com)
+        db.all(
+          `SELECT name, value, host FROM moz_cookies
+           WHERE (host LIKE '%youtube.com' OR host LIKE '%google.com')
+             AND name IN (
+               'LOGIN_INFO','SID','HSID','SSID','APISID','SAPISID',
+               '__Secure-1PSID','__Secure-3PSID','__Secure-1PAPISID','__Secure-3PAPISID',
+               '__Secure-1PSIDTS','__Secure-3PSIDTS','__Secure-1PSIDCC','__Secure-3PSIDCC',
+               'PREF','SOCS','VISITOR_INFO1_LIVE','YSC','CONSENT'
+             )`,
+          [],
+          (err, rows) => {
+            db.close(() => {
+              try { fs.unlinkSync(tempDbPath); } catch {}
+            });
+            if (err) {
+              log(`[Firefox Cookies] Query error: ${err.message}`);
+              return resolve();
+            }
+            if (rows && rows.length > 0) {
+              // Prefer .youtube.com over .google.com when same name
+              const byName = new Map();
+              const score = (host) =>
+                String(host).includes('youtube.com') ? 2 : String(host).includes('google.com') ? 1 : 0;
+              for (const r of rows) {
+                const prev = byName.get(r.name);
+                if (!prev || score(r.host) >= score(prev.host)) byName.set(r.name, r);
+              }
+              firefoxCookiesStr = [...byName.values()].map((r) => `${r.name}=${r.value}`).join('; ');
+              const hasSapisid = byName.has('SAPISID') || byName.has('__Secure-3PAPISID');
+              const hasLogin = byName.has('LOGIN_INFO') || byName.has('__Secure-3PSID');
+              log(
+                `[Firefox Cookies] Extracted ${byName.size} auth cookies` +
+                  ` (SAPISID=${hasSapisid ? 'yes' : 'NO'}, session=${hasLogin ? 'yes' : 'NO'}).`
+              );
+              if (!hasSapisid || !hasLogin) {
+                log('[Firefox Cookies] WARNING: incomplete session — log into YouTube in Firefox and restart relay.');
+              }
+            } else {
+              log('[Firefox Cookies] No cookies found for youtube/google.');
+            }
+            resolve();
+          }
+        );
+      });
+    } catch (e) {
+      log(`[Firefox Cookies] Error: ${e.message}`);
+      resolve();
+    }
+  });
+}
+
+server.on('error', (err) => {
+  if (err && err.code === 'EADDRINUSE') {
+    console.error(`Port ${PORT} already in use. Run stop-relay.ps1 or: Get-NetTCPConnection -LocalPort ${PORT}`);
+  } else {
+    console.error('Server listen error:', err);
+  }
+  process.exit(1);
+});
+
+// Listen FIRST so /health works immediately; cookies load in background.
+// Tunnel is external (start-relay.ps1 → cloudflared) — not embedded localtunnel.
+// Why: localtunnel often returns a *different* URL than the requested subdomain,
+// while start scripts hardcoded etrog-bypass-mirik-999.loca.lt → Worker 502.
+server.listen(PORT, HOST, () => {
+  log(`YT home relay listening on http://${HOST}:${PORT}`);
+  log('Health: GET http://127.0.0.1:' + PORT + '/health');
+  log('Expose with cloudflared (preferred):');
+  log('  cloudflared tunnel --url http://127.0.0.1:' + PORT);
+  log('Or run ..\\start-relay.ps1 from the project root.');
+
+  // Non-blocking cookie load (Firefox may lock cookies.sqlite)
+  extractFirefoxCookies().catch((e) => log('[Firefox Cookies]', e.message || e));
+  // Refresh often — YouTube rotates PSIDTS; 24h was too stale for bot checks
+  setInterval(() => {
+    extractFirefoxCookies().catch(() => {});
+  }, 15 * 60 * 1000);
+});

install-autostart.ps1

@@ -0,0 +1,119 @@
+# install-autostart.ps1
+# Registers a Windows Scheduled Task that starts the home relay + cloudflared
+# at user logon — more reliable than Startup-folder VBS (Hebrew paths, no window).
+#
+# Run once (as the same user who uses Firefox/YouTube):
+#   powershell -ExecutionPolicy Bypass -File .\install-autostart.ps1
+#
+# Prerequisites:
+#   - CLOUDFLARE_API_TOKEN already set as User environment variable
+#   - cloudflared installed
+#   - start-relay.ps1 works when run manually
+
+$ErrorActionPreference = "Stop"
+$TaskName = "EtrogYtHomeRelay"
+$ProjectDir = $PSScriptRoot
+$StartScript = Join-Path $ProjectDir "start-relay.ps1"
+
+if (-not (Test-Path $StartScript)) {
+  Write-Host "ERROR: missing $StartScript" -ForegroundColor Red
+  exit 1
+}
+
+# Verify token is available to this user (User-level env)
+$token = [Environment]::GetEnvironmentVariable("CLOUDFLARE_API_TOKEN", "User")
+if (-not $token) {
+  $token = $env:CLOUDFLARE_API_TOKEN
+}
+if (-not $token) {
+  Write-Host "WARNING: CLOUDFLARE_API_TOKEN not found in User env." -ForegroundColor Yellow
+  Write-Host "  Set it once:" -ForegroundColor Yellow
+  Write-Host '  [Environment]::SetEnvironmentVariable("CLOUDFLARE_API_TOKEN","YOUR_TOKEN","User")' -ForegroundColor Gray
+  Write-Host "  Then log off/on (or reboot) so Scheduled Tasks inherit it." -ForegroundColor Gray
+}
+
+# Optional: RELAY_INSECURE_TLS for filter MITM cert errors
+# [Environment]::SetEnvironmentVariable("RELAY_INSECURE_TLS","1","User")
+
+$psExe = Join-Path $env:SystemRoot "System32\WindowsPowerShell\v1.0\powershell.exe"
+$arg = "-NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File `"$StartScript`""
+
+# Remove old task if present
+try { schtasks /Delete /TN $TaskName /F 2>$null } catch {}
+
+# Create: at logon, highest privileges not required, run whether user is logged on only when logged on
+# Delay 45s so network + Firefox profile are ready
+$xml = @"
+<?xml version="1.0" encoding="UTF-16"?>
+<Task version="1.4" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
+  <RegistrationInfo>
+    <Description>Etrog YT Home Relay + cloudflared (auto start)</Description>
+  </RegistrationInfo>
+  <Triggers>
+    <LogonTrigger>
+      <Enabled>true</Enabled>
+      <Delay>PT45S</Delay>
+    </LogonTrigger>
+  </Triggers>
+  <Principals>
+    <Principal id="Author">
+      <LogonType>InteractiveToken</LogonType>
+      <RunLevel>LeastPrivilege</RunLevel>
+    </Principal>
+  </Principals>
+  <Settings>
+    <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
+    <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>
+    <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries>
+    <AllowHardTerminate>true</AllowHardTerminate>
+    <StartWhenAvailable>true</StartWhenAvailable>
+    <RunOnlyIfNetworkAvailable>true</RunOnlyIfNetworkAvailable>
+    <IdleSettings>
+      <StopOnIdleEnd>false</StopOnIdleEnd>
+      <RestartOnIdle>false</RestartOnIdle>
+    </IdleSettings>
+    <AllowStartOnDemand>true</AllowStartOnDemand>
+    <Enabled>true</Enabled>
+    <Hidden>true</Hidden>
+    <ExecutionTimeLimit>PT0S</ExecutionTimeLimit>
+    <Priority>7</Priority>
+    <RestartOnFailure>
+      <Interval>PT2M</Interval>
+      <Count>5</Count>
+    </RestartOnFailure>
+  </Settings>
+  <Actions Context="Author">
+    <Exec>
+      <Command>$psExe</Command>
+      <Arguments>$arg</Arguments>
+      <WorkingDirectory>$ProjectDir</WorkingDirectory>
+    </Exec>
+  </Actions>
+</Task>
+"@
+
+$xmlPath = Join-Path $env:TEMP "etrog-relay-task.xml"
+# Task Scheduler wants UTF-16 LE XML
+[System.IO.File]::WriteAllText($xmlPath, $xml, [System.Text.Encoding]::Unicode)
+
+schtasks /Create /TN $TaskName /XML $xmlPath /F | Out-Host
+Remove-Item $xmlPath -ErrorAction SilentlyContinue
+
+# Also ensure Startup VBS (if any) does not double-start — optional note
+$startup = [Environment]::GetFolderPath("Startup")
+$vbs = Join-Path $startup "start_bypass_relay.vbs"
+if (Test-Path $vbs) {
+  Write-Host "NOTE: Found Startup VBS: $vbs" -ForegroundColor Yellow
+  Write-Host "  Prefer ONLY the Scheduled Task (remove VBS to avoid double start)." -ForegroundColor Yellow
+  Write-Host "  Remove-Item `"$vbs`"" -ForegroundColor Gray
+}
+
+Write-Host ""
+Write-Host "Installed task: $TaskName" -ForegroundColor Green
+Write-Host "  Test now:  schtasks /Run /TN $TaskName" -ForegroundColor Cyan
+Write-Host "  Status:    schtasks /Query /TN $TaskName /V /FO LIST" -ForegroundColor Cyan
+Write-Host "  Remove:    schtasks /Delete /TN $TaskName /F" -ForegroundColor Cyan
+Write-Host ""
+Write-Host "After reboot: wait ~1 min, then:" -ForegroundColor Cyan
+Write-Host "  Invoke-RestMethod http://127.0.0.1:8788/health" -ForegroundColor Gray
+Write-Host "  Get-Content `$env:TEMP\yt-relay-url.txt" -ForegroundColor Gray

package-lock.json

@@ -0,0 +1,1780 @@
+{
+  "name": "etrog-bypass-proxy",
+  "version": "2.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "etrog-bypass-proxy",
+      "version": "2.0.0",
+      "devDependencies": {
+        "localtunnel": "^2.0.2",
+        "wrangler": "^4.110.0"
+      }
+    },
+    "node_modules/@cloudflare/kv-asset-handler": {
+      "version": "0.5.0",
+      "resolved": "https://registry.npmjs.org/@cloudflare/kv-asset-handler/-/kv-asset-handler-0.5.0.tgz",
+      "integrity": "sha512-jxQYkj8dSIzc0cD6cMMNdOc1UVjqSqu8BZdor5s8cGjW2I8BjODt/kWPVdY+u9zj3ms75Q5qaZgnxUad83+eAg==",
+      "dev": true,
+      "license": "MIT OR Apache-2.0",
+      "engines": {
+        "node": ">=22.0.0"
+      }
+    },
+    "node_modules/@cloudflare/unenv-preset": {
+      "version": "2.16.1",
+      "resolved": "https://registry.npmjs.org/@cloudflare/unenv-preset/-/unenv-preset-2.16.1.tgz",
+      "integrity": "sha512-ECxObrMfyTl5bhQf/lZCXwo5G6xX9IAUo+nDMKK4SZ8m4Jvvxp52vilxyySSWh2YTZz8+HQ07qGH/2rEom1vDw==",
+      "dev": true,
+      "license": "MIT OR Apache-2.0",
+      "peerDependencies": {
+        "unenv": "2.0.0-rc.24",
+        "workerd": ">1.20260305.0 <2.0.0-0"
+      },
+      "peerDependenciesMeta": {
+        "workerd": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/@cloudflare/workerd-darwin-64": {
+      "version": "1.20260710.1",
+      "resolved": "https://registry.npmjs.org/@cloudflare/workerd-darwin-64/-/workerd-darwin-64-1.20260710.1.tgz",
+      "integrity": "sha512-OqJl2eWF5+y9jarMm3YqqCTUe7Hd4ihogX5jyRU8iaAgOVyDr/Bk6aXpPCVUi1/MHzO93a18R/TmSTtzmB0sQw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=16"
+      }
+    },
+    "node_modules/@cloudflare/workerd-darwin-arm64": {
+      "version": "1.20260710.1",
+      "resolved": "https://registry.npmjs.org/@cloudflare/workerd-darwin-arm64/-/workerd-darwin-arm64-1.20260710.1.tgz",
+      "integrity": "sha512-MYBqWgUblO+VlGvO73zYsH3hB9tdRj+yLyt5IHDFWryipb2l1efmNiWtAOkIhSRfypqLYGFrfpaDm2Hg00XVKw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=16"
+      }
+    },
+    "node_modules/@cloudflare/workerd-linux-64": {
+      "version": "1.20260710.1",
+      "resolved": "https://registry.npmjs.org/@cloudflare/workerd-linux-64/-/workerd-linux-64-1.20260710.1.tgz",
+      "integrity": "sha512-lVWUgqI8qrkqvaCBGElu1kdaUFdAvaS2RD8K4qkCFP9hI3f5TCXumEs5qWSeZkvKum0+X/uJZ5hBFWsYI5SmoQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=16"
+      }
+    },
+    "node_modules/@cloudflare/workerd-linux-arm64": {
+      "version": "1.20260710.1",
+      "resolved": "https://registry.npmjs.org/@cloudflare/workerd-linux-arm64/-/workerd-linux-arm64-1.20260710.1.tgz",
+      "integrity": "sha512-kDwDPItBjAI4JL0df9Fma2N+Qggbm77IB/DnroAkEGQ79fpR80sYMyuB/ZQKyjEk9f48Ocq7HCCLq59qVSyNqA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=16"
+      }
+    },
+    "node_modules/@cloudflare/workerd-windows-64": {
+      "version": "1.20260710.1",
+      "resolved": "https://registry.npmjs.org/@cloudflare/workerd-windows-64/-/workerd-windows-64-1.20260710.1.tgz",
+      "integrity": "sha512-GcLHy1oN1dfK6g1Z7UDV9f5xMGyTfPwcjWQ0sfWKH31IsoEVCRapnj3IC0PoIrDbnoo6irGPP0CwVs3WzdTajw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=16"
+      }
+    },
+    "node_modules/@cspotcode/source-map-support": {
+      "version": "0.8.1",
+      "resolved": "https://registry.npmjs.org/@cspotcode/source-map-support/-/source-map-support-0.8.1.tgz",
+      "integrity": "sha512-IchNf6dN4tHoMFIn/7OE8LWZ19Y6q/67Bmf6vnGREv8RSbBVb9LPJxEcnwrcwX6ixSvaiGoomAUvu4YSxXrVgw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/trace-mapping": "0.3.9"
+      },
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@emnapi/runtime": {
+      "version": "1.11.2",
+      "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.2.tgz",
+      "integrity": "sha512-kyOl3X0DuTiT1h2ft8r2fYO8JYtU9a9Xis/zBSiGArNaagCOWx90N1k2wxp18czFDH+OgcWGb5ZP/XMt3dcyPA==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "tslib": "^2.4.0"
+      }
+    },
+    "node_modules/@esbuild/aix-ppc64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.28.1.tgz",
+      "integrity": "sha512-Svl7tq8k/08+p6CXPpRjQ1fKX+1odH/BQbb48fV6fj3CWHhsoIOoY87w1oHXm0qEpkIK3ZfVgp0hed3XBXzXMQ==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "aix"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/android-arm": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.28.1.tgz",
+      "integrity": "sha512-0k2F129Xdio1TdJfzJ8sy1Q47vUD2NnwdhiAf7drUN1EBTfPf4hsFCtmMgu/6m8JSzsBrlmVjudMBQqOfG8usQ==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/android-arm64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.28.1.tgz",
+      "integrity": "sha512-34EGEbCIAgosYz6goLcopX6Mo7NyGv9tfwEM2/7Ce2VcVRk568iSvniGWcUXIy7wEDR1wzolcxcriFVrWYcwBg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/android-x64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.28.1.tgz",
+      "integrity": "sha512-dbwY7ltSMDWsRatcRpCnES4F+im88OCUgGZjy52shC7GqHRE/cYlxNbB4Z4UpJswpcc4Qxd2oE/ufM0p61IKng==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/darwin-arm64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.28.1.tgz",
+      "integrity": "sha512-TZbWkQY7kvTAXbXUT7uVACR5cMHsDiSz9z7ZKAX/RTq/WJEk3QyRr0wZpNhBDX+/0CtdqUIJlOiodQcta6tY3Q==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/darwin-x64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.28.1.tgz",
+      "integrity": "sha512-zfdzgK9ACBNZLI/CyHTOx81SyNbM6YXn7rxSgX97VjyiPl9W1i4Ka4fgKECEoFCKGpvBj5qArWIGgQjOwkgskQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/freebsd-arm64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.28.1.tgz",
+      "integrity": "sha512-wG2EA8ENdEI0qhkSZMjfqrdY+ziCYCPMmtZjjIwOmXFjmyzEHn+UUxk5of+SYsjtfs3VpnlC7QLzSI5hY/rOAw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/freebsd-x64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.28.1.tgz",
+      "integrity": "sha512-i7dZ9vQgnvSCzi/rYCXNgtF/U+eKZNJBzu3eTQbRgHnM7tNSizLOkRFAl3qzVc/Op/u5YkHHa4pf/3DOYHthLQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-arm": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.28.1.tgz",
+      "integrity": "sha512-qVXBOHQS+d5Y722GwJzJUtOLlX7km3CraOaGormF1pDtPd2C/l1SHRPgjLunLGe51Sh5YYWKMFDyV4SxgMQYTQ==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-arm64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.28.1.tgz",
+      "integrity": "sha512-yHs+0uc8+nvEAfAfxrWQKK5peSNzBc4PegcMO0EJ2hT71uA7vB8Ihg2e77R2P7SG5uYjPbHlLLmve4LLLRCf0g==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-ia32": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.28.1.tgz",
+      "integrity": "sha512-d1z4ZuP0ajrfz/FhGT4vv278rX8KnPPJx8i5+AtK7TYbx9Le9F1hyzurZpkEyjkGa9dUGhQow4C1NmeGvqxN2w==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-loong64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.28.1.tgz",
+      "integrity": "sha512-M5sRjUVZrkm1OAPR3dlOYzNmN+loZKGVi1VUQGrwuqLcbR6qeAz+famMhjASeH3YVKvZz+zT1jlh/keC3Rj/lg==",
+      "cpu": [
+        "loong64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-mips64el": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.28.1.tgz",
+      "integrity": "sha512-mRObBZeHh2OxcBFPWE/FjylkRgZdYuiTR3vaTozquCGOH14iP9oN4x4Ge81CoIDYQrXmIxpFumJBu5MtZpnQJQ==",
+      "cpu": [
+        "mips64el"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-ppc64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.28.1.tgz",
+      "integrity": "sha512-slScBsMAb3GFDcdrCgLwZtPYRoH2H/youv10QiZyRjmsP48fznoveWytSgCI/R0ZcUgpc0ZhIUEx6LHts8yrfQ==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-riscv64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.28.1.tgz",
+      "integrity": "sha512-kw0owk1o0GFETUJyW0jc0G4Yzs0BHZn0JDZ8JRT088vjJYX777BAs1fDGxAC+q831qOs2DTC96mNsG2opdfyyQ==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-s390x": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.28.1.tgz",
+      "integrity": "sha512-/lAIjX8aYFRByhh6L5rYtPEDRqa9de/4V/juOXcta5frjvzXO4/sqEtyytse0g3zZFuWu5cDN0MkLz2qRDD2Ag==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-x64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.28.1.tgz",
+      "integrity": "sha512-u/anNYF2mmVOEDwLtnQ1wOr3EZ9sTNGLWrsYGYwHWzGA3Si84IOkHXlbWTD1NB+9/1lcnweYKO54uhxZydNzfA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/netbsd-arm64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.28.1.tgz",
+      "integrity": "sha512-oks0DYbLwWMmaakTsCb+zL4E+aHRVLom9IJZOAthMQEPiQmydXHkziYEsGYRx0uNV/IjEKGAV941JzH02pflqw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/netbsd-x64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.28.1.tgz",
+      "integrity": "sha512-aeL6lAnN89Hz43Mlh1G8ARasbuoYvSITDEx0tHh5b7jJnHcssqgjy9Yx430GDpmCa6OyrKoS0aNRjKundRizGg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openbsd-arm64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.28.1.tgz",
+      "integrity": "sha512-MEFJe5C3R8pwXdZ5Y21oo6m7ePiS0d9pWucn99O/wvyJZChoIQKrQDxKrGeW8F5+T0okTHesAmDeiHDTIq0V/Q==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openbsd-x64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.28.1.tgz",
+      "integrity": "sha512-i/ZLIOafE0Z8cI/XANJAixoJL/uRAoS2xOA3rb0xN+KK0K177cMAsQYkzHtBrtMXAKuAc7HGgcWiZ/sRC1Nxgw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openharmony-arm64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.28.1.tgz",
+      "integrity": "sha512-ge+Z7EXFNt2BO1oAMsVpiQ8EwndV9i1xXerAeTIK7AtPs3bKFXQM7nlRxDSIUIMeueR1CNXxqztLzdNeReKBJg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/sunos-x64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.28.1.tgz",
+      "integrity": "sha512-BEjgtECkL3vY+SaSQ6nzVfiALUeFxpawyp8Jmf5PtYhf1Ug40N1h/hxlhts+f1FvSvarEigdxS3BlSMI2PJLcQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "sunos"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-arm64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.28.1.tgz",
+      "integrity": "sha512-lCv9eK/H6ZJWbE7bh2nw54CZ9M2nupBxJcTsdk/QQnWkdSjKGuxmmH8/GWrlT1eMmZfn4dGcCjRte397WqfQXA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-ia32": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.28.1.tgz",
+      "integrity": "sha512-zvb/mB2bSCoJOpoCBgYKKpX6YM6mJBlBUVUtVj41DlZJVEB6/0CKlRYxP5wWl1C1ILiCoAU5wZZ4q1P3qeS6Eg==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-x64": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.28.1.tgz",
+      "integrity": "sha512-bm4Mowrv+GXMlpWX++EcXw/iLyd1o3+bJkC2DkWXYVvgZCqD/bSj9ctZeAMC3cIxgjRVR2Dufaiu4YPxr5gW1A==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@img/colour": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@img/colour/-/colour-1.1.0.tgz",
+      "integrity": "sha512-Td76q7j57o/tLVdgS746cYARfSyxk8iEfRxewL9h4OMzYhbW4TAcppl0mT4eyqXddh6L/jwoM75mo7ixa/pCeQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@img/sharp-darwin-arm64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-arm64/-/sharp-darwin-arm64-0.34.5.tgz",
+      "integrity": "sha512-imtQ3WMJXbMY4fxb/Ndp6HBTNVtWCUI0WdobyheGf5+ad6xX8VIDO8u2xE4qc/fr08CKG/7dDseFtn6M6g/r3w==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-darwin-arm64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-darwin-x64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.34.5.tgz",
+      "integrity": "sha512-YNEFAF/4KQ/PeW0N+r+aVVsoIY0/qxxikF2SWdp+NRkmMB7y9LBZAVqQ4yhGCm/H3H270OSykqmQMKLBhBJDEw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-darwin-x64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-libvips-darwin-arm64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-arm64/-/sharp-libvips-darwin-arm64-1.2.4.tgz",
+      "integrity": "sha512-zqjjo7RatFfFoP0MkQ51jfuFZBnVE2pRiaydKJ1G/rHZvnsrHAOcQALIi9sA5co5xenQdTugCvtb1cuf78Vf4g==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-darwin-x64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-x64/-/sharp-libvips-darwin-x64-1.2.4.tgz",
+      "integrity": "sha512-1IOd5xfVhlGwX+zXv2N93k0yMONvUlANylbJw1eTah8K/Jtpi15KC+WSiaX/nBmbm2HxRM1gZ0nSdjSsrZbGKg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-arm": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm/-/sharp-libvips-linux-arm-1.2.4.tgz",
+      "integrity": "sha512-bFI7xcKFELdiNCVov8e44Ia4u2byA+l3XtsAj+Q8tfCwO6BQ8iDojYdvoPMqsKDkuoOo+X6HZA0s0q11ANMQ8A==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-arm64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm64/-/sharp-libvips-linux-arm64-1.2.4.tgz",
+      "integrity": "sha512-excjX8DfsIcJ10x1Kzr4RcWe1edC9PquDRRPx3YVCvQv+U5p7Yin2s32ftzikXojb1PIFc/9Mt28/y+iRklkrw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-ppc64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-ppc64/-/sharp-libvips-linux-ppc64-1.2.4.tgz",
+      "integrity": "sha512-FMuvGijLDYG6lW+b/UvyilUWu5Ayu+3r2d1S8notiGCIyYU/76eig1UfMmkZ7vwgOrzKzlQbFSuQfgm7GYUPpA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-riscv64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-riscv64/-/sharp-libvips-linux-riscv64-1.2.4.tgz",
+      "integrity": "sha512-oVDbcR4zUC0ce82teubSm+x6ETixtKZBh/qbREIOcI3cULzDyb18Sr/Wcyx7NRQeQzOiHTNbZFF1UwPS2scyGA==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-s390x": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-s390x/-/sharp-libvips-linux-s390x-1.2.4.tgz",
+      "integrity": "sha512-qmp9VrzgPgMoGZyPvrQHqk02uyjA0/QrTO26Tqk6l4ZV0MPWIW6LTkqOIov+J1yEu7MbFQaDpwdwJKhbJvuRxQ==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-x64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-x64/-/sharp-libvips-linux-x64-1.2.4.tgz",
+      "integrity": "sha512-tJxiiLsmHc9Ax1bz3oaOYBURTXGIRDODBqhveVHonrHJ9/+k89qbLl0bcJns+e4t4rvaNBxaEZsFtSfAdquPrw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linuxmusl-arm64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-arm64/-/sharp-libvips-linuxmusl-arm64-1.2.4.tgz",
+      "integrity": "sha512-FVQHuwx1IIuNow9QAbYUzJ+En8KcVm9Lk5+uGUQJHaZmMECZmOlix9HnH7n1TRkXMS0pGxIJokIVB9SuqZGGXw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linuxmusl-x64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-x64/-/sharp-libvips-linuxmusl-x64-1.2.4.tgz",
+      "integrity": "sha512-+LpyBk7L44ZIXwz/VYfglaX/okxezESc6UxDSoyo2Ks6Jxc4Y7sGjpgU9s4PMgqgjj1gZCylTieNamqA1MF7Dg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-linux-arm": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm/-/sharp-linux-arm-0.34.5.tgz",
+      "integrity": "sha512-9dLqsvwtg1uuXBGZKsxem9595+ujv0sJ6Vi8wcTANSFpwV/GONat5eCkzQo/1O6zRIkh0m/8+5BjrRr7jDUSZw==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-arm": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-arm64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm64/-/sharp-linux-arm64-0.34.5.tgz",
+      "integrity": "sha512-bKQzaJRY/bkPOXyKx5EVup7qkaojECG6NLYswgktOZjaXecSAeCWiZwwiFf3/Y+O1HrauiE3FVsGxFg8c24rZg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-arm64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-ppc64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-ppc64/-/sharp-linux-ppc64-0.34.5.tgz",
+      "integrity": "sha512-7zznwNaqW6YtsfrGGDA6BRkISKAAE1Jo0QdpNYXNMHu2+0dTrPflTLNkpc8l7MUP5M16ZJcUvysVWWrMefZquA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-ppc64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-riscv64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-riscv64/-/sharp-linux-riscv64-0.34.5.tgz",
+      "integrity": "sha512-51gJuLPTKa7piYPaVs8GmByo7/U7/7TZOq+cnXJIHZKavIRHAP77e3N2HEl3dgiqdD/w0yUfiJnII77PuDDFdw==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-riscv64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-s390x": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-s390x/-/sharp-linux-s390x-0.34.5.tgz",
+      "integrity": "sha512-nQtCk0PdKfho3eC5MrbQoigJ2gd1CgddUMkabUj+rBevs8tZ2cULOx46E7oyX+04WGfABgIwmMC0VqieTiR4jg==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-s390x": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-x64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-x64/-/sharp-linux-x64-0.34.5.tgz",
+      "integrity": "sha512-MEzd8HPKxVxVenwAa+JRPwEC7QFjoPWuS5NZnBt6B3pu7EG2Ge0id1oLHZpPJdn3OQK+BQDiw9zStiHBTJQQQQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-x64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-linuxmusl-arm64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-arm64/-/sharp-linuxmusl-arm64-0.34.5.tgz",
+      "integrity": "sha512-fprJR6GtRsMt6Kyfq44IsChVZeGN97gTD331weR1ex1c1rypDEABN6Tm2xa1wE6lYb5DdEnk03NZPqA7Id21yg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linuxmusl-arm64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-linuxmusl-x64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-x64/-/sharp-linuxmusl-x64-0.34.5.tgz",
+      "integrity": "sha512-Jg8wNT1MUzIvhBFxViqrEhWDGzqymo3sV7z7ZsaWbZNDLXRJZoRGrjulp60YYtV4wfY8VIKcWidjojlLcWrd8Q==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linuxmusl-x64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-wasm32": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-wasm32/-/sharp-wasm32-0.34.5.tgz",
+      "integrity": "sha512-OdWTEiVkY2PHwqkbBI8frFxQQFekHaSSkUIJkwzclWZe64O1X4UlUjqqqLaPbUpMOQk6FBu/HtlGXNblIs0huw==",
+      "cpu": [
+        "wasm32"
+      ],
+      "dev": true,
+      "license": "Apache-2.0 AND LGPL-3.0-or-later AND MIT",
+      "optional": true,
+      "dependencies": {
+        "@emnapi/runtime": "^1.7.0"
+      },
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-win32-arm64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-arm64/-/sharp-win32-arm64-0.34.5.tgz",
+      "integrity": "sha512-WQ3AgWCWYSb2yt+IG8mnC6Jdk9Whs7O0gxphblsLvdhSpSTtmu69ZG1Gkb6NuvxsNACwiPV6cNSZNzt0KPsw7g==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0 AND LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-win32-ia32": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-ia32/-/sharp-win32-ia32-0.34.5.tgz",
+      "integrity": "sha512-FV9m/7NmeCmSHDD5j4+4pNI8Cp3aW+JvLoXcTUo0IqyjSfAZJ8dIUmijx1qaJsIiU+Hosw6xM5KijAWRJCSgNg==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "Apache-2.0 AND LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-win32-x64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-x64/-/sharp-win32-x64-0.34.5.tgz",
+      "integrity": "sha512-+29YMsqY2/9eFEiW93eqWnuLcWcufowXewwSNIT6UwZdUUCrM3oFjMWH/Z6/TMmb4hlFenmfAVbpWeup2jryCw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0 AND LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@jridgewell/resolve-uri": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz",
+      "integrity": "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
+    "node_modules/@jridgewell/sourcemap-codec": {
+      "version": "1.5.5",
+      "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz",
+      "integrity": "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@jridgewell/trace-mapping": {
+      "version": "0.3.9",
+      "resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.9.tgz",
+      "integrity": "sha512-3Belt6tdc8bPgAtbcmdtNJlirVoTmEb5e2gC94PnkwEW9jI6CAHUeoG85tjWP5WquqfavoMtMwiG4P926ZKKuQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/resolve-uri": "^3.0.3",
+        "@jridgewell/sourcemap-codec": "^1.4.10"
+      }
+    },
+    "node_modules/@poppinss/colors": {
+      "version": "4.1.6",
+      "resolved": "https://registry.npmjs.org/@poppinss/colors/-/colors-4.1.6.tgz",
+      "integrity": "sha512-H9xkIdFswbS8n1d6vmRd8+c10t2Qe+rZITbbDHHkQixH5+2x1FDGmi/0K+WgWiqQFKPSlIYB7jlH6Kpfn6Fleg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "kleur": "^4.1.5"
+      }
+    },
+    "node_modules/@poppinss/dumper": {
+      "version": "0.6.5",
+      "resolved": "https://registry.npmjs.org/@poppinss/dumper/-/dumper-0.6.5.tgz",
+      "integrity": "sha512-NBdYIb90J7LfOI32dOewKI1r7wnkiH6m920puQ3qHUeZkxNkQiFnXVWoE6YtFSv6QOiPPf7ys6i+HWWecDz7sw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@poppinss/colors": "^4.1.5",
+        "@sindresorhus/is": "^7.0.2",
+        "supports-color": "^10.0.0"
+      }
+    },
+    "node_modules/@poppinss/exception": {
+      "version": "1.2.3",
+      "resolved": "https://registry.npmjs.org/@poppinss/exception/-/exception-1.2.3.tgz",
+      "integrity": "sha512-dCED+QRChTVatE9ibtoaxc+WkdzOSjYTKi/+uacHWIsfodVfpsueo3+DKpgU5Px8qXjgmXkSvhXvSCz3fnP9lw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@sindresorhus/is": {
+      "version": "7.2.0",
+      "resolved": "https://registry.npmjs.org/@sindresorhus/is/-/is-7.2.0.tgz",
+      "integrity": "sha512-P1Cz1dWaFfR4IR+U13mqqiGsLFf1KbayybWwdd2vfctdV6hDpUkgCY0nKOLLTMSoRd/jJNjtbqzf13K8DCCXQw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sindresorhus/is?sponsor=1"
+      }
+    },
+    "node_modules/@speed-highlight/core": {
+      "version": "1.2.17",
+      "resolved": "https://registry.npmjs.org/@speed-highlight/core/-/core-1.2.17.tgz",
+      "integrity": "sha512-Z92FwKpCtfaW1V0jTU/fh3QzYEZN8wDwrzRIBoADCJfn4mJCNcJN/XegifX7BDrQ8/h9Xh/JnbyMchL0FqXrkg==",
+      "dev": true,
+      "license": "CC0-1.0"
+    },
+    "node_modules/ansi-regex": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
+      "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/ansi-styles": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz",
+      "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "color-convert": "^2.0.1"
+      },
+      "engines": {
+        "node": ">=8"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/ansi-styles?sponsor=1"
+      }
+    },
+    "node_modules/axios": {
+      "version": "0.21.4",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-0.21.4.tgz",
+      "integrity": "sha512-ut5vewkiu8jjGBdqpM44XxjuCjq9LAKeHVmoVfHVzy8eHgxxq8SbAVQNovDA8mVi05kP0Ea/n/UzcSHcTJQfNg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "follow-redirects": "^1.14.0"
+      }
+    },
+    "node_modules/blake3-wasm": {
+      "version": "2.1.5",
+      "resolved": "https://registry.npmjs.org/blake3-wasm/-/blake3-wasm-2.1.5.tgz",
+      "integrity": "sha512-F1+K8EbfOZE49dtoPtmxUQrpXaBIl3ICvasLh+nJta0xkz+9kF/7uet9fLnwKqhDrmj6g+6K3Tw9yQPUg2ka5g==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/cliui": {
+      "version": "7.0.4",
+      "resolved": "https://registry.npmjs.org/cliui/-/cliui-7.0.4.tgz",
+      "integrity": "sha512-OcRE68cOsVMXp1Yvonl/fzkQOyjLSu/8bhPDfQt0e0/Eb283TKP20Fs2MqoPsr9SwA595rRCA+QMzYc9nBP+JQ==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "string-width": "^4.2.0",
+        "strip-ansi": "^6.0.0",
+        "wrap-ansi": "^7.0.0"
+      }
+    },
+    "node_modules/color-convert": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
+      "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "color-name": "~1.1.4"
+      },
+      "engines": {
+        "node": ">=7.0.0"
+      }
+    },
+    "node_modules/color-name": {
+      "version": "1.1.4",
+      "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
+      "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/cookie": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-1.1.1.tgz",
+      "integrity": "sha512-ei8Aos7ja0weRpFzJnEA9UHJ/7XQmqglbRwnf2ATjcB9Wq874VKH9kfjjirM6UhU2/E5fFYadylyhFldcqSidQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/debug": {
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.2.tgz",
+      "integrity": "sha512-mOp8wKcvj7XxC78zLgw/ZA+6TSgkoE2C/ienthhRD298T7UNwAg9diBpLRxC0mOezLl4B0xV7M0cCO6P/O0Xhw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ms": "2.1.2"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/detect-libc": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz",
+      "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/emoji-regex": {
+      "version": "8.0.0",
+      "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
+      "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/error-stack-parser-es": {
+      "version": "1.0.5",
+      "resolved": "https://registry.npmjs.org/error-stack-parser-es/-/error-stack-parser-es-1.0.5.tgz",
+      "integrity": "sha512-5qucVt2XcuGMcEGgWI7i+yZpmpByQ8J1lHhcL7PwqCwu9FPP3VUXzT4ltHe5i2z9dePwEHcDVOAfSnHsOlCXRA==",
+      "dev": true,
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/antfu"
+      }
+    },
+    "node_modules/esbuild": {
+      "version": "0.28.1",
+      "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.28.1.tgz",
+      "integrity": "sha512-HrJrvZv5ayxBzPfwphOoNzkzOIIlifzk0KJrGK2c8R4+LKpMtpYLQeUdjnwjWv/LZlkH2laZk+4w78pi99D4Vw==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "bin": {
+        "esbuild": "bin/esbuild"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "optionalDependencies": {
+        "@esbuild/aix-ppc64": "0.28.1",
+        "@esbuild/android-arm": "0.28.1",
+        "@esbuild/android-arm64": "0.28.1",
+        "@esbuild/android-x64": "0.28.1",
+        "@esbuild/darwin-arm64": "0.28.1",
+        "@esbuild/darwin-x64": "0.28.1",
+        "@esbuild/freebsd-arm64": "0.28.1",
+        "@esbuild/freebsd-x64": "0.28.1",
+        "@esbuild/linux-arm": "0.28.1",
+        "@esbuild/linux-arm64": "0.28.1",
+        "@esbuild/linux-ia32": "0.28.1",
+        "@esbuild/linux-loong64": "0.28.1",
+        "@esbuild/linux-mips64el": "0.28.1",
+        "@esbuild/linux-ppc64": "0.28.1",
+        "@esbuild/linux-riscv64": "0.28.1",
+        "@esbuild/linux-s390x": "0.28.1",
+        "@esbuild/linux-x64": "0.28.1",
+        "@esbuild/netbsd-arm64": "0.28.1",
+        "@esbuild/netbsd-x64": "0.28.1",
+        "@esbuild/openbsd-arm64": "0.28.1",
+        "@esbuild/openbsd-x64": "0.28.1",
+        "@esbuild/openharmony-arm64": "0.28.1",
+        "@esbuild/sunos-x64": "0.28.1",
+        "@esbuild/win32-arm64": "0.28.1",
+        "@esbuild/win32-ia32": "0.28.1",
+        "@esbuild/win32-x64": "0.28.1"
+      }
+    },
+    "node_modules/escalade": {
+      "version": "3.2.0",
+      "resolved": "https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz",
+      "integrity": "sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/follow-redirects": {
+      "version": "1.16.0",
+      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.0.tgz",
+      "integrity": "sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "individual",
+          "url": "https://github.com/sponsors/RubenVerborgh"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=4.0"
+      },
+      "peerDependenciesMeta": {
+        "debug": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/fsevents": {
+      "version": "2.3.3",
+      "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",
+      "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
+      }
+    },
+    "node_modules/get-caller-file": {
+      "version": "2.0.5",
+      "resolved": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz",
+      "integrity": "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==",
+      "dev": true,
+      "license": "ISC",
+      "engines": {
+        "node": "6.* || 8.* || >= 10.*"
+      }
+    },
+    "node_modules/is-fullwidth-code-point": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz",
+      "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/kleur": {
+      "version": "4.1.5",
+      "resolved": "https://registry.npmjs.org/kleur/-/kleur-4.1.5.tgz",
+      "integrity": "sha512-o+NO+8WrRiQEE4/7nwRJhN1HWpVmJm511pBHUxPLtp0BUISzlBplORYSmTclCnJvQq2tKu/sgl3xVpkc7ZWuQQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/localtunnel": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/localtunnel/-/localtunnel-2.0.2.tgz",
+      "integrity": "sha512-n418Cn5ynvJd7m/N1d9WVJISLJF/ellZnfsLnx8WBWGzxv/ntNcFkJ1o6se5quUhCplfLGBNL5tYHiq5WF3Nug==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "axios": "0.21.4",
+        "debug": "4.3.2",
+        "openurl": "1.1.1",
+        "yargs": "17.1.1"
+      },
+      "bin": {
+        "lt": "bin/lt.js"
+      },
+      "engines": {
+        "node": ">=8.3.0"
+      }
+    },
+    "node_modules/miniflare": {
+      "version": "4.20260710.0",
+      "resolved": "https://registry.npmjs.org/miniflare/-/miniflare-4.20260710.0.tgz",
+      "integrity": "sha512-x1LLRkU6o1p7hiKrB0TRnL0MJn6xFOT+/vrlEQINz5cRDKLP8ru4hBqWTIvXAetzr1acKAnmAaG84pQ4W/K14g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@cspotcode/source-map-support": "0.8.1",
+        "sharp": "0.34.5",
+        "undici": "7.28.0",
+        "workerd": "1.20260710.1",
+        "ws": "8.21.0",
+        "youch": "4.1.0-beta.10"
+      },
+      "bin": {
+        "miniflare": "bootstrap.js"
+      },
+      "engines": {
+        "node": ">=22.0.0"
+      }
+    },
+    "node_modules/ms": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz",
+      "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/openurl": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/openurl/-/openurl-1.1.1.tgz",
+      "integrity": "sha512-d/gTkTb1i1GKz5k3XE3XFV/PxQ1k45zDqGP2OA7YhgsaLoqm6qRvARAZOFer1fcXritWlGBRCu/UgeS4HAnXAA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/path-to-regexp": {
+      "version": "6.3.0",
+      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-6.3.0.tgz",
+      "integrity": "sha512-Yhpw4T9C6hPpgPeA28us07OJeqZ5EzQTkbfwuhsUg0c237RomFoETJgmp2sa3F/41gfLE6G5cqcYwznmeEeOlQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/pathe": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz",
+      "integrity": "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/require-directory": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
+      "integrity": "sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/semver": {
+      "version": "7.8.5",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
+      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
+      "dev": true,
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/sharp": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/sharp/-/sharp-0.34.5.tgz",
+      "integrity": "sha512-Ou9I5Ft9WNcCbXrU9cMgPBcCK8LiwLqcbywW3t4oDV37n1pzpuNLsYiAV8eODnjbtQlSDwZ2cUEeQz4E54Hltg==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@img/colour": "^1.0.0",
+        "detect-libc": "^2.1.2",
+        "semver": "^7.7.3"
+      },
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-darwin-arm64": "0.34.5",
+        "@img/sharp-darwin-x64": "0.34.5",
+        "@img/sharp-libvips-darwin-arm64": "1.2.4",
+        "@img/sharp-libvips-darwin-x64": "1.2.4",
+        "@img/sharp-libvips-linux-arm": "1.2.4",
+        "@img/sharp-libvips-linux-arm64": "1.2.4",
+        "@img/sharp-libvips-linux-ppc64": "1.2.4",
+        "@img/sharp-libvips-linux-riscv64": "1.2.4",
+        "@img/sharp-libvips-linux-s390x": "1.2.4",
+        "@img/sharp-libvips-linux-x64": "1.2.4",
+        "@img/sharp-libvips-linuxmusl-arm64": "1.2.4",
+        "@img/sharp-libvips-linuxmusl-x64": "1.2.4",
+        "@img/sharp-linux-arm": "0.34.5",
+        "@img/sharp-linux-arm64": "0.34.5",
+        "@img/sharp-linux-ppc64": "0.34.5",
+        "@img/sharp-linux-riscv64": "0.34.5",
+        "@img/sharp-linux-s390x": "0.34.5",
+        "@img/sharp-linux-x64": "0.34.5",
+        "@img/sharp-linuxmusl-arm64": "0.34.5",
+        "@img/sharp-linuxmusl-x64": "0.34.5",
+        "@img/sharp-wasm32": "0.34.5",
+        "@img/sharp-win32-arm64": "0.34.5",
+        "@img/sharp-win32-ia32": "0.34.5",
+        "@img/sharp-win32-x64": "0.34.5"
+      }
+    },
+    "node_modules/string-width": {
+      "version": "4.2.3",
+      "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
+      "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "emoji-regex": "^8.0.0",
+        "is-fullwidth-code-point": "^3.0.0",
+        "strip-ansi": "^6.0.1"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/strip-ansi": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
+      "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ansi-regex": "^5.0.1"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/supports-color": {
+      "version": "10.2.2",
+      "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-10.2.2.tgz",
+      "integrity": "sha512-SS+jx45GF1QjgEXQx4NJZV9ImqmO2NPz5FNsIHrsDjh2YsHnawpan7SNQ1o8NuhrbHZy9AZhIoCUiCeaW/C80g==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/supports-color?sponsor=1"
+      }
+    },
+    "node_modules/tslib": {
+      "version": "2.8.1",
+      "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz",
+      "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==",
+      "dev": true,
+      "license": "0BSD",
+      "optional": true
+    },
+    "node_modules/undici": {
+      "version": "7.28.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.28.0.tgz",
+      "integrity": "sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=20.18.1"
+      }
+    },
+    "node_modules/unenv": {
+      "version": "2.0.0-rc.24",
+      "resolved": "https://registry.npmjs.org/unenv/-/unenv-2.0.0-rc.24.tgz",
+      "integrity": "sha512-i7qRCmY42zmCwnYlh9H2SvLEypEFGye5iRmEMKjcGi7zk9UquigRjFtTLz0TYqr0ZGLZhaMHl/foy1bZR+Cwlw==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "pathe": "^2.0.3"
+      }
+    },
+    "node_modules/workerd": {
+      "version": "1.20260710.1",
+      "resolved": "https://registry.npmjs.org/workerd/-/workerd-1.20260710.1.tgz",
+      "integrity": "sha512-U2sBPPrb9U97sBKnnMN6Kv8p65903P35nwMkPE9vSH/bRuRqkZ3a1EjUw3jV28RhiyXpkLF77Evzw8XimFxyTw==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "Apache-2.0",
+      "peer": true,
+      "bin": {
+        "workerd": "bin/workerd"
+      },
+      "engines": {
+        "node": ">=16"
+      },
+      "optionalDependencies": {
+        "@cloudflare/workerd-darwin-64": "1.20260710.1",
+        "@cloudflare/workerd-darwin-arm64": "1.20260710.1",
+        "@cloudflare/workerd-linux-64": "1.20260710.1",
+        "@cloudflare/workerd-linux-arm64": "1.20260710.1",
+        "@cloudflare/workerd-windows-64": "1.20260710.1"
+      }
+    },
+    "node_modules/wrangler": {
+      "version": "4.111.0",
+      "resolved": "https://registry.npmjs.org/wrangler/-/wrangler-4.111.0.tgz",
+      "integrity": "sha512-bffpI9EyrnpKkF/1S+RaIv8oRD93GtbsA7TlfWwOsGJGB7VO3jVbdGzpC9TU7Bqom3z7jUxcte4Z9MPhaQ4HoQ==",
+      "dev": true,
+      "license": "MIT OR Apache-2.0",
+      "dependencies": {
+        "@cloudflare/kv-asset-handler": "0.5.0",
+        "@cloudflare/unenv-preset": "2.16.1",
+        "blake3-wasm": "2.1.5",
+        "esbuild": "0.28.1",
+        "miniflare": "4.20260710.0",
+        "path-to-regexp": "6.3.0",
+        "unenv": "2.0.0-rc.24",
+        "workerd": "1.20260710.1"
+      },
+      "bin": {
+        "cf-wrangler": "bin/cf-wrangler.js",
+        "wrangler": "bin/wrangler.js",
+        "wrangler2": "bin/wrangler.js"
+      },
+      "engines": {
+        "node": ">=22.0.0"
+      },
+      "optionalDependencies": {
+        "fsevents": "2.3.3"
+      },
+      "peerDependencies": {
+        "@cloudflare/workers-types": "^5.20260710.1"
+      },
+      "peerDependenciesMeta": {
+        "@cloudflare/workers-types": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/wrap-ansi": {
+      "version": "7.0.0",
+      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz",
+      "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ansi-styles": "^4.0.0",
+        "string-width": "^4.1.0",
+        "strip-ansi": "^6.0.0"
+      },
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
+      }
+    },
+    "node_modules/ws": {
+      "version": "8.21.0",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-8.21.0.tgz",
+      "integrity": "sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=10.0.0"
+      },
+      "peerDependencies": {
+        "bufferutil": "^4.0.1",
+        "utf-8-validate": ">=5.0.2"
+      },
+      "peerDependenciesMeta": {
+        "bufferutil": {
+          "optional": true
+        },
+        "utf-8-validate": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/y18n": {
+      "version": "5.0.8",
+      "resolved": "https://registry.npmjs.org/y18n/-/y18n-5.0.8.tgz",
+      "integrity": "sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==",
+      "dev": true,
+      "license": "ISC",
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/yargs": {
+      "version": "17.1.1",
+      "resolved": "https://registry.npmjs.org/yargs/-/yargs-17.1.1.tgz",
+      "integrity": "sha512-c2k48R0PwKIqKhPMWjeiF6y2xY/gPMUlro0sgxqXpbOIohWiLNXWslsootttv7E1e73QPAMQSg5FeySbVcpsPQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "cliui": "^7.0.2",
+        "escalade": "^3.1.1",
+        "get-caller-file": "^2.0.5",
+        "require-directory": "^2.1.1",
+        "string-width": "^4.2.0",
+        "y18n": "^5.0.5",
+        "yargs-parser": "^20.2.2"
+      },
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/yargs-parser": {
+      "version": "20.2.9",
+      "resolved": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-20.2.9.tgz",
+      "integrity": "sha512-y11nGElTIV+CT3Zv9t7VKl+Q3hTQoT9a1Qzezhhl6Rp21gJ/IVTW7Z3y9EWXhuUBC2Shnf+DX0antecpAwSP8w==",
+      "dev": true,
+      "license": "ISC",
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/youch": {
+      "version": "4.1.0-beta.10",
+      "resolved": "https://registry.npmjs.org/youch/-/youch-4.1.0-beta.10.tgz",
+      "integrity": "sha512-rLfVLB4FgQneDr0dv1oddCVZmKjcJ6yX6mS4pU82Mq/Dt9a3cLZQ62pDBL4AUO+uVrCvtWz3ZFUL2HFAFJ/BXQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@poppinss/colors": "^4.1.5",
+        "@poppinss/dumper": "^0.6.4",
+        "@speed-highlight/core": "^1.2.7",
+        "cookie": "^1.0.2",
+        "youch-core": "^0.3.3"
+      }
+    },
+    "node_modules/youch-core": {
+      "version": "0.3.3",
+      "resolved": "https://registry.npmjs.org/youch-core/-/youch-core-0.3.3.tgz",
+      "integrity": "sha512-ho7XuGjLaJ2hWHoK8yFnsUGy2Y5uDpqSTq1FkHLK4/oqKtyUU1AFbOOxY4IpC9f0fTLjwYbslUz0Po5BpD1wrA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@poppinss/exception": "^1.2.2",
+        "error-stack-parser-es": "^1.0.5"
+      }
+    }
+  }
+}

package.json

@@ -9,6 +9,7 @@
     "tail": "wrangler tail"
   },
   "devDependencies": {
+    "localtunnel": "^2.0.2",
     "wrangler": "^4.110.0"
   }
 }

start-relay.ps1

@@ -0,0 +1,126 @@
+# start-relay.ps1
+# הרץ את הסקריפט הזה מ-PowerShell שלך (לא דרך כלי אוטומציה).
+# התהליכים ישארו חיים ברקע עד שתכבה את המחשב.
+#
+# שימוש:
+#   $env:CLOUDFLARE_API_TOKEN = "cfut_YOUR_TOKEN_HERE"
+#   .\start-relay.ps1
+#
+# לעצירה: .\stop-relay.ps1
+
+param()
+Set-StrictMode -Off
+$ErrorActionPreference = "Continue"
+
+$RelayDir       = Join-Path $PSScriptRoot "home-relay"
+$WranglerDir    = $PSScriptRoot
+$CloudflaredExe = "C:\Program Files (x86)\cloudflared\cloudflared.exe"
+
+# RELAY_SECRET — never hardcode it here (this file is committed). Read from the
+# User-persisted env var; generate a strong random one on first run and save it.
+# Step 5 pushes this same value to the Worker (YT_RELAY_SECRET) so the two stay in sync.
+$Secret = $env:RELAY_SECRET
+if (-not $Secret) { $Secret = [Environment]::GetEnvironmentVariable("RELAY_SECRET", "User") }
+if (-not $Secret) {
+    $bytes = New-Object 'System.Byte[]' 32
+    [System.Security.Cryptography.RandomNumberGenerator]::Create().GetBytes($bytes)
+    $Secret = (($bytes | ForEach-Object { $_.ToString("x2") }) -join "")
+    [Environment]::SetEnvironmentVariable("RELAY_SECRET", $Secret, "User")
+    Write-Host "Generated a new RELAY_SECRET and saved it to your User environment." -ForegroundColor Yellow
+    Write-Host "NOTE: set CLOUDFLARE_API_TOKEN this run so step 5 pushes it to the Worker." -ForegroundColor Yellow
+}
+
+$RelayLog    = Join-Path $env:TEMP "relay.log"
+$RelayErrLog = Join-Path $env:TEMP "relay-error.log"
+$CfLog       = Join-Path $env:TEMP "cloudflared-relay.log"
+$UrlFile     = Join-Path $env:TEMP "yt-relay-url.txt"
+
+# ── 1. Kill old processes ─────────────────────────────────────────────────────
+Write-Host "[1/5] Stopping old processes..." -ForegroundColor Yellow
+Get-Process -Name "cloudflared" -ErrorAction SilentlyContinue | Stop-Process -Force
+Get-CimInstance Win32_Process -Filter "Name='node.exe' AND CommandLine LIKE '%server.js%'" |
+    ForEach-Object { Stop-Process -Id $_.ProcessId -Force -ErrorAction SilentlyContinue }
+Start-Sleep -Seconds 2
+Remove-Item $RelayLog,$RelayErrLog,$CfLog,$UrlFile -ErrorAction SilentlyContinue
+
+# ── 2. Start Node relay (truly detached — no stdout redirect) ─────────────────
+Write-Host "[2/5] Starting home relay (node)..." -ForegroundColor Cyan
+$env:RELAY_SECRET = $Secret
+$env:PORT         = "8788"
+$env:HOST         = "127.0.0.1"
+# If Node fails with CERT_HAS_EXPIRED / UNABLE_TO_VERIFY — filter MITM on YouTube TLS
+if (-not $env:RELAY_INSECURE_TLS) {
+    $env:RELAY_INSECURE_TLS = [Environment]::GetEnvironmentVariable("RELAY_INSECURE_TLS", "User")
+}
+# Start-Process WITHOUT -RedirectStandardOutput = truly detached child process
+# Pass env via cmd so child inherits RELAY_* cleanly
+$nodeArgs = "server.js"
+Start-Process -FilePath "node" `
+    -ArgumentList $nodeArgs `
+    -WorkingDirectory $RelayDir `
+    -WindowStyle Hidden
+
+# ── 3. Wait for /health ───────────────────────────────────────────────────────
+Write-Host "[3/5] Waiting for /health on :8788..." -ForegroundColor Cyan
+$ok = $false
+for ($i = 1; $i -le 20; $i++) {
+    Start-Sleep -Seconds 1
+    try {
+        $r = Invoke-RestMethod "http://127.0.0.1:8788/health" -TimeoutSec 2 -ErrorAction Stop
+        if ($r.ok) { $ok = $true; break }
+    } catch {}
+    Write-Host "  ...($i/20)"
+}
+if (-not $ok) {
+    Write-Host "ERROR: relay did not come up on :8788" -ForegroundColor Red
+    exit 1
+}
+Write-Host "OK: relay is up." -ForegroundColor Green
+
+# ── 4. Start cloudflared (truly detached) ────────────────────────────────────
+Write-Host "[4/5] Starting cloudflared tunnel..." -ForegroundColor Cyan
+Remove-Item $CfLog -ErrorAction SilentlyContinue
+Start-Process -FilePath $CloudflaredExe `
+    -ArgumentList "tunnel","--protocol","http2","--url","http://127.0.0.1:8788","--logfile",$CfLog `
+    -WindowStyle Hidden
+
+$tunnelUrl = $null
+for ($i = 1; $i -le 25; $i++) {
+    Start-Sleep -Seconds 1
+    if (Test-Path $CfLog) {
+        $txt = Get-Content $CfLog -Raw -ErrorAction SilentlyContinue
+        if ($txt -match 'https://[a-z0-9-]+\.trycloudflare\.com') {
+            $tunnelUrl = $Matches[0]; break
+        }
+    }
+    Write-Host "  ...waiting for tunnel URL ($i/25)"
+}
+
+if (-not $tunnelUrl) {
+    Write-Host "ERROR: no tunnel URL. Check: $CfLog" -ForegroundColor Red
+    Get-Content $CfLog -Tail 10 -ErrorAction SilentlyContinue
+    exit 1
+}
+
+$tunnelUrl | Set-Content $UrlFile
+Write-Host "OK: tunnel = $tunnelUrl" -ForegroundColor Green
+
+# ── 5. Update Worker secrets ─────────────────────────────────────────���────────
+Write-Host "[5/5] Updating Cloudflare Worker secrets..." -ForegroundColor Cyan
+if (-not $env:CLOUDFLARE_API_TOKEN) {
+    Write-Host "WARNING: CLOUDFLARE_API_TOKEN not set - skipping Worker update." -ForegroundColor Yellow
+    Write-Host "  Run: echo '$tunnelUrl' | npx wrangler secret put YT_RELAY_URL" -ForegroundColor Gray
+} else {
+    Push-Location $WranglerDir
+    $tunnelUrl | npx wrangler secret put YT_RELAY_URL
+    $Secret    | npx wrangler secret put YT_RELAY_SECRET
+    Pop-Location
+}
+
+Write-Host ""
+Write-Host "================================================" -ForegroundColor Green
+Write-Host " SUCCESS - relay + tunnel running in background" -ForegroundColor Green
+Write-Host " Tunnel : $tunnelUrl" -ForegroundColor Green
+Write-Host " Relay  : http://127.0.0.1:8788/health" -ForegroundColor Green
+Write-Host " Stop   : .\stop-relay.ps1" -ForegroundColor Green
+Write-Host "================================================" -ForegroundColor Green

start_bypass_relay.vbs

@@ -0,0 +1,2 @@
+Set WshShell = CreateObject("WScript.Shell")
+WshShell.Run "powershell.exe -WindowStyle Hidden -ExecutionPolicy Bypass -File ""C:\Users\user\Documents\מעקף פרוקסי 2.0\start-relay.ps1""", 0, False

stop-relay.ps1

@@ -0,0 +1,11 @@
+# stop-relay.ps1 - Stops Node relay and cloudflared Scheduled Tasks
+
+Write-Host "Stopping EtrogRelay and EtrogTunnel tasks..." -ForegroundColor Yellow
+schtasks /end   /tn "EtrogRelay"  2>$null | Out-Null
+schtasks /end   /tn "EtrogTunnel" 2>$null | Out-Null
+schtasks /delete /tn "EtrogRelay"  /f 2>$null | Out-Null
+schtasks /delete /tn "EtrogTunnel" /f 2>$null | Out-Null
+Get-Process -Name "cloudflared" -ErrorAction SilentlyContinue | Stop-Process -Force
+Get-CimInstance Win32_Process -Filter "Name='node.exe' AND CommandLine LIKE '%server.js%'" |
+    ForEach-Object { Stop-Process -Id $_.ProcessId -Force -ErrorAction SilentlyContinue }
+Write-Host "Done." -ForegroundColor Green

worker.js

@@ -7,16 +7,78 @@
 
 const PROXY_PATH = '/cdn/';
 const KEY = [97, 110, 116, 105, 103, 114, 97, 118, 105, 116, 121]; // "antigravity"
-const SW_VERSION = 97;
+const SW_VERSION = 101;
 
 // ── Access gate (password) ──────────────────────────────────────────────────
 // Session cookie only (no Max-Age) → cleared when the browser is closed.
 const GATE_PASSWORD = 'מוישי';
 const GATE_COOKIE = '__proxy_gate';
 const GATE_PEPPER = 'etrog-gate-v1-antigravity'; // used only to HMAC the session token
+// Built-in YouTube cookie slot. Leave EMPTY: fresh auth comes from the Home Relay
+// (Firefox session) via YT_RELAY_URL. Do NOT paste a personal Google session here.
+const BUILTIN_YOUTUBE_COOKIE = ""; // was a leaked live Google session — removed
 
-// Built-in YouTube cookies (from user cookies.txt) — always available
-const BUILTIN_YOUTUBE_COOKIE = "LOGIN_INFO=AFmmF2swRAIgOG8sdpkCPpH5qrWLOJre1oBYXaN6786g2yLudsx-ERsCIDaMfFg-v8we_C7Nsw4fYoZgDR1Zv5BA2-tDzkQPmDKN:QUQ3MjNmeEpDVGhFUUlPbXFtN2ZNS3hKNkc3VlB5dTRVRHNvYVlpNzNrU2tjallGdXRzZlkzS0NCcHZUNHc2QUNxTXNfeWZvU09MajRjWFV4VE5KUDBhNWVnR3ZiMG00ZDU2MFQyWXF4RDhOWk80bFRLc3VBRlF6NHBQUjlfSGc0bGd0NkxieFQ1R2t6cnRid1d1VzNiX3NqVDVEYWpTXzVR; __Secure-YENID=16.YTE=vUVwcBrwqrh9dHwLyT2Iee4UvjHi6cbOxlFiqNbRcZoOb9leeRAv8pwH6CpiyO3aOG5zUjYq-1-od8Any5ic_1mlpfhOakad-mekIiQXOHPb3hJTkilk_F8MkZNdLb0UatxpPeZQ_ClGgt2jwx94859bZaAQdtDM41qUhlRYO6f2l3u69UiQJNvBQmNdjJNHfo7QnupRsOg-KZWuBu936DosufDu_NUALoO4lgH4YnzBG85alAEUH5utV_b83G9As3ZWpLdmSwbLWA6944R977eDGc2lB1VTHDP67s1F5z-yqtHkl3LtOEKYuAVGWaQqXVtTN6k_kkMOuxh5-OV-8A; VISITOR_INFO1_LIVE=CdhV9Fm2uW0; VISITOR_PRIVACY_METADATA=CgJJTBIEGgAgRQ%3D%3D; SID=g.a000_wiShz57yp_RAOUIJUdjiMQRK74oMiT3hicRAXCRo3vExltlDo4PpKx74Ygu20bVHjAwCgACgYKAYsSARISFQHGX2MidSJSW5So8D8Ji2UnpSE8ihoVAUF8yKoa8Lx0YfRwR1Kt9LNpqSbV0076; __Secure-1PSID=g.a000_wiShz57yp_RAOUIJUdjiMQRK74oMiT3hicRAXCRo3vExltlnNMhzk7Ir67iGpM6btI_WgACgYKAacSARISFQHGX2MiOJNazm--Up7LodT9R3Gd8hoVAUF8yKq7FcEpifvn4Xmr14B2fvvt0076; __Secure-3PSID=g.a000_wiShz57yp_RAOUIJUdjiMQRK74oMiT3hicRAXCRo3vExltlSM9lOIW-RrXxfaIBbuxdIQACgYKAdwSARISFQHGX2Mi0OHeaUt70yxrhuOK_BrnFxoVAUF8yKqyMbnBo0BDfxt3TLLMcLGS0076; HSID=A16gUIUrjykjJvquB; SSID=A-DZIwGa5SOmGskOH; APISID=seam9EHryTHIXW_C/Ai-ENWjhjvltAB3FC; SAPISID=UL6Vh_S22fpeIdM8/AD6Qb4wlcTslni3Dk; __Secure-1PAPISID=UL6Vh_S22fpeIdM8/AD6Qb4wlcTslni3Dk; __Secure-3PAPISID=UL6Vh_S22fpeIdM8/AD6Qb4wlcTslni3Dk; __Secure-YNID=20.YT=mfSyVx7S9-0fvC-4Fd6Z-6QotdeXj03RqxEHJ_AhqjV7PbakeVCMIeNSaGVNDRwHY_uJFNdqYXNua9hqc2o0XtKFWW9oZG-modg3eDQNl2RKP2oKZnhka95cL900NUYtt6Ibh_Kb3NBf28jwmwlpN45KJnb42I1zVI_oyuOhS6j2nPj4sXoA29idQAoC2zWr82gyUf4dyA_uElutXLDwYGv8uQTyUx7URSpSB1k9-VlZyKn4s4Y1JYm-RAP2YsinX_v5W6s4sOxTx5EfWrTNzRBGJtTTIlbETTEGMeomkEqN4KwqV22q9X1Sj1hhvwecIDJCd1wPB1gPhWkxNZqI-Q; __Secure-ROLLOUT_TOKEN=CN7OiKbF28Le4wEQ1fCLirrQlQMYxdydsbvUlQM%3D; YSC=nrmfHve5buM; __Secure-1PSIDTS=sidts-CjUBPWEu2ZsyRswaKGEYXXuInu_3QBs1ghx318R2_5T3loFIK151gIokQBwSEToggO69liodZRAA; __Secure-3PSIDTS=sidts-CjUBPWEu2ZsyRswaKGEYXXuInu_3QBs1ghx318R2_5T3loFIK151gIokQBwSEToggO69liodZRAA; PREF=tz=Asia.Jerusalem&f7=100&f4=4000000; SIDCC=AKEyXzXludlRyX974UsrW53iBaD1CNFsbDoD1-X_yvUdvEEKXBURHEUg8AaMqZcBvuFjuXjb_lY; __Secure-1PSIDCC=AKEyXzV5-4jIT_jCuN-oii0bgLPTNAMnHOBsBVgKSpgikrvWER6hlFpPuYAGu2ApwpZdkYLD7Bk; __Secure-3PSIDCC=AKEyXzUddIiONDJegYPJ38eDn3Y7xzdapx7Xe-l1zDn6FU04oZzyKu3l2rcwgIX86q_HbtwQF4Q";
+// ── Home Relay Helpers ───────────────────────────────────────────────────────
+function relayConfigured(env) {
+  return !!(env && env.YT_RELAY_URL && env.YT_RELAY_SECRET);
+}
+function relayBase(env) {
+  return String(env.YT_RELAY_URL || '').replace(/\/+$/, '');
+}
+async function relayPlayer(env, videoId, cookie, workerOrigin = null) {
+  let r, j, relayErr = null;
+  try {
+    r = await fetch(relayBase(env) + '/v1/yt/player', {
+      method: 'POST',
+      headers: {
+        authorization: 'Bearer ' + env.YT_RELAY_SECRET,
+        'content-type': 'application/json',
+        'Bypass-Tunnel-Reminder': 'true',
+        ...(workerOrigin ? { 'X-Worker-Url': workerOrigin } : {}),
+      },
+      body: JSON.stringify({ videoId, cookie: cookie || '' }),
+      signal: AbortSignal.timeout(20000),
+    });
+    j = await r.json().catch((e) => { relayErr = 'json-parse:' + e.message; return null; });
+  } catch (e) {
+    return { ok: false, playability: null, attemptsLog: [], source: 'home-relay', relayErr: 'fetch-fail:' + e.message };
+  }
+  if (!j || !j.ok || !j.formats || !j.formats.length) {
+    return { ok: false, playability: j?.playability, attemptsLog: j?.attempts || [], source: 'home-relay', relayErr: relayErr || ('relay-http:' + (r?.status || '?')) };
+  }
+  return {
+    ok: true,
+    formats: j.formats.map((f) => ({
+      itag: f.itag,
+      url: f.url,
+      mime: (f.mimeType || '').split(';')[0],
+      progressive: !!f.progressive,
+      hasAudio: !!f.hasAudio,
+      hasVideo: !!f.hasVideo,
+      bitrate: f.bitrate || 0,
+      width: f.width || 0,
+      height: f.height || 0,
+    })),
+    playability: j.playability,
+    client: j.client,
+    hasCookies: !!cookie,
+    hasAuth: !!cookie,
+    attemptsLog: j.attempts || [],
+    via: 'home-relay',
+  };
+}
+
+async function relayFetch(env, targetUrl, init = {}) {
+  const u = new URL(relayBase(env) + '/v1/fetch');
+  u.searchParams.set('url', targetUrl);
+  const headers = {
+    authorization: 'Bearer ' + env.YT_RELAY_SECRET,
+    'Bypass-Tunnel-Reminder': 'true',
+  };
+  if (init.range) headers.range = init.range;
+  if (init.userAgent) headers['x-upstream-ua'] = init.userAgent;
+  return fetch(u.toString(), { headers, signal: init.signal });
+}
 
 async function gateToken() {
   const data = new TextEncoder().encode(GATE_PEPPER + '|' + GATE_PASSWORD);
@@ -45,7 +107,11 @@ function getCookieValue(cookieHeader, name) {
   return '';
 }
 
-async function isGateOpen(request) {
+async function isGateOpen(request, env) {
+  const auth = request.headers.get('authorization');
+  if (auth && env && env.YT_RELAY_SECRET && auth === 'Bearer ' + env.YT_RELAY_SECRET) {
+    return true;
+  }
   const got = getCookieValue(request.headers.get('cookie') || '', GATE_COOKIE);
   if (!got) return false;
   const expect = await gateToken();
@@ -149,7 +215,7 @@ async function handleGatePost(request, url) {
   });
 }
 
-async function requireGate(request, url) {
+async function requireGate(request, url, env) {
   // Login endpoint always reachable
   if (url.pathname === '/__gate') {
     if (request.method === 'POST') return handleGatePost(request, url);
@@ -166,7 +232,7 @@ async function requireGate(request, url) {
       },
     });
   }
-  if (await isGateOpen(request)) return null; // allowed
+  if (await isGateOpen(request, env)) return null; // allowed
 
   // API / media / XHR: 401 JSON so clients don't get HTML as media
   const dest = (request.headers.get('sec-fetch-dest') || '').toLowerCase();
@@ -226,10 +292,10 @@ function cacheSetFormats(videoId, pack) {
     FORMAT_CACHE.delete(first);
   }
 }
-async function getPlayerFormatsCached(videoId, request) {
+async function getPlayerFormatsCached(videoId, request, env) {
   const cached = cacheGetFormats(videoId);
   if (cached) return { ...cached, fromCache: true };
-  const pack = await fetchPlayerFormats(videoId, request);
+  const pack = await fetchPlayerFormats(videoId, request, env);
   if (pack && pack.ok) cacheSetFormats(videoId, pack);
   return pack;
 }
@@ -452,7 +518,7 @@ function sealedStreamResponse(readable, status, origCt, extraHeaders = {}, range
   h.set('cache-control', 'no-store');
   h.set(
     'Access-Control-Expose-Headers',
-    'Content-Length, Content-Range, Accept-Ranges, Content-Type, X-Proxy-Obfuscated, X-Original-Content-Type, X-Seal-Offset, X-Etrog-Mode, X-Etrog-Itag, X-Etrog-Bytes'
+    'Content-Length, Content-Range, Accept-Ranges, Content-Type, Content-Disposition, X-Proxy-Obfuscated, X-Original-Content-Type, X-Seal-Offset, X-Etrog-Mode, X-Etrog-Itag, X-Etrog-Bytes, X-Etrog-Len, X-Etrog-Cache, X-Etrog-Client, X-Etrog-Resolved-Url'
   );
   if (contentLength != null && contentLength !== '') h.set('content-length', String(contentLength));
   const sealed = sealTransformStream(readable, rangeStart || 0);
@@ -787,7 +853,8 @@ self.addEventListener('fetch', function(e) {
 
   // 3. Cross-origin requests: proxy through worker
   if (requestUrl.origin !== self.location.origin) {
-    if (requestUrl.searchParams.has('etrog_direct') || requestUrl.href.indexOf('etrog_direct') !== -1) {
+    var PASSTHROUGH = ['cdn.search.brave.com'];
+    if (PASSTHROUGH.indexOf(requestUrl.hostname) !== -1 || requestUrl.searchParams.has('etrog_direct') || requestUrl.href.indexOf('etrog_direct') !== -1) {
       return;
     }
     if (shouldBlock(requestUrl.href)) {
@@ -842,7 +909,9 @@ self.addEventListener('fetch', function(e) {
       requestUrl.pathname === '/api/i' ||
       requestUrl.pathname === '/x/s' ||
       requestUrl.pathname === '/x/t' ||
-      requestUrl.pathname.indexOf('/x/s/') === 0) {
+      requestUrl.pathname.indexOf('/x/s/') === 0 ||
+      requestUrl.pathname === '/assets/chunk' ||
+      requestUrl.pathname.indexOf('/assets/chunk-') === 0) {
     e.respondWith(
       fetch(e.request).then(function(res) {
         // Error JSON (502/4xx) — never XOR-decrypt
@@ -854,7 +923,8 @@ self.addEventListener('fetch', function(e) {
         var ct = (res.headers.get('content-type') || '').toLowerCase();
         // Block Rimon MITM only when response is NOT from our worker markers
         if (!mode && !sealed && (rimon.indexOf('BLOCK') !== -1 || srv.indexOf('lighttpd') !== -1)) {
-          return new Response(JSON.stringify({ error: 'filter_block', hint: 'Etrog/Rimon intercepted stream' }), {
+          console.error('[SW Filter Block] URL:', e.request.url, 'Rimon:', rimon, 'Server:', srv);
+          return new Response(JSON.stringify({ error: 'filter_block', hint: 'Etrog/Rimon intercepted stream: ' + e.request.url }), {
             status: 502,
             headers: { 'content-type': 'application/json', 'cache-control': 'no-store' }
           });
@@ -1821,9 +1891,9 @@ const UI_HTML = `<!DOCTYPE html>
                 return;
               }
               document.cookie = '__proxy_target=' + encodeURIComponent(u.origin) + '; Path=/; max-age=31536000; SameSite=Lax; Secure';
-              window.location.href = '/cdn/' + encodeUrl(u.href);
+              window.location.href = '/gate?to=' + encodeURIComponent(encodeUrl(u.href));
             } catch (e) {
-              window.location.href = '/cdn/' + encodeUrl(url);
+              window.location.href = '/gate?to=' + encodeURIComponent(encodeUrl(url));
             }
         }
 
@@ -2149,10 +2219,67 @@ async function importCookiesPost(request) {
   }
 }
 
-// ג”€ג”€ג”€ Section 9: Error / Sorry Page ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€ג”€
+function makeGateResponse(toEncoded, origin) {
+  return new Response(`<!DOCTYPE html>
+<html lang="he" dir="rtl">
+<head>
+  <meta charset="UTF-8">
+  <title>מתחבר...</title>
+  <link href="https://fonts.googleapis.com/css2?family=Assistant:wght@400;600;700&display=swap" rel="stylesheet">
+  <style>
+    body {
+      background: #07070f; color: #f8fafc; font-family: 'Assistant', sans-serif;
+      display: flex; flex-direction: column; justify-content: center; align-items: center; min-height: 100vh; margin: 0;
+    }
+    .spinner {
+      border: 3px solid rgba(99, 102, 241, 0.1); width: 50px; height: 50px;
+      border-radius: 50%; border-left-color: #6366f1; animation: spin 1s linear infinite;
+      margin-bottom: 1.5rem;
+    }
+    h1 { font-size: 1.5rem; font-weight: 700; margin: 0; }
+    p { color: #94a3b8; font-size: 0.95rem; margin: 0.5rem 0 0 0; }
+    @keyframes spin { 0% { transform: rotate(0deg); } 100% { transform: rotate(360deg); } }
+  </style>
+</head>
+<body>
+  <div class="spinner"></div>
+  <h1>מכין חיבור מאובטח...</h1>
+  <p>אנא המתן רגע קט</p>
+  <script>
+    var to = \`\${toEncoded}\`;
+    var targetUrl = '/cdn/' + to;
+    
+    function go() {
+      window.location.replace(targetUrl);
+    }
+    
+    if ('serviceWorker' in navigator) {
+      navigator.serviceWorker.register('/sw.js?v=${SW_VERSION}', { scope: '/' }).then(function() {
+        return navigator.serviceWorker.ready;
+      }).then(function() {
+        if (navigator.serviceWorker.controller) {
+          go();
+        } else {
+          navigator.serviceWorker.addEventListener('controllerchange', function() {
+            go();
+          });
+          setTimeout(go, 1200);
+        }
+      }).catch(function() {
+        go();
+      });
+    } else {
+      go();
+    }
+  </script>
+</body>
+</html>`, { headers: { 'Content-Type': 'text/html; charset=utf-8' } });
+}
+
+// ─── Section 9: Error / Sorry Page ───
 
-function makeSorryResponse(origin, videoId) {
-  if (videoId) return youtubeNativePlayerPage(videoId, origin);
+function makeSorryResponse(origin, videoId, env) {
+  if (videoId) return youtubeNativePlayerPage(videoId, origin, null, '', env);
   return makeSorryResponsePlain(origin);
 }
 function makeSorryResponsePlain(origin) {
@@ -2423,7 +2550,7 @@ function isAllowedMediaDirectUrl(u) {
   }
 }
 
-function youtubeNativePlayerPage(videoId, origin, title, prefillQ) {
+function youtubeNativePlayerPage(videoId, origin, title, prefillQ, env) {
   const safeId = String(videoId || '').replace(/[^\w-]/g, '');
   const q0 = String(prefillQ || '').replace(/[<>&"]/g, '');
   const pageTitle = (title || 'YouTube') + (safeId ? (' — ' + safeId) : '');
@@ -2715,7 +2842,7 @@ function youtubeNativePlayerPage(videoId, origin, title, prefillQ) {
       '</div>' +
     '</div>' +
     '<input id="vid" value="' + safeId.replace(/"/g, '') + '" tabindex="-1"/>' +
-    '<script>\n' + PLAYER_CLIENT_JS + '\n</script></body></html>';
+    '<script>\nwindow.YT_RELAY_ACTIVE = ' + JSON.stringify(relayConfigured(env)) + ';\nwindow.SW_VERSION = ' + SW_VERSION + ';\n' + PLAYER_CLIENT_JS + '\n</script></body></html>';
 
   return new Response(html, {
     status: 200,
@@ -2807,13 +2934,12 @@ const PLAYER_CLIENT_JS = [
 "  function mediaUrl(id,itag,dl,strict,directUrl){",
 "    // Stealth path + XOR token only (no clear video id — harder for Etrog URL filters)",
 "    var it=String(itag||currentItag||'18');",
-"    var payload={v:id,i:it,t:Date.now(),s:strict?1:0};",
+"    // itag, strict, dl are encoded inside payload (inside tok) — NOT exposed as URL params",
+"    var payload={v:id,i:it,t:Date.now(),s:strict?1:0,d:dl?1:0};",
 "    if(directUrl) payload.u=String(directUrl);",
 "    var tok=encodeTok(payload);",
-"    // Path looks like static asset chunk (less likely to trigger video URL heuristics)",
-"    var u='/x/s/'+tok.slice(0,12)+'.bin?d='+encodeURIComponent(tok)+'&i='+encodeURIComponent(it);",
-"    if(strict) u+='&strict=1';",
-"    if(dl) u+='&dl=1';",
+"    // Short generic path — no YouTube-specific params visible to network filters",
+"    var u='/x/s/'+tok.slice(0,12)+'.bin?d='+encodeURIComponent(tok)+'&i='+encodeURIComponent(String(it.length));",
 "    return u;",
 "  }",
 "  // Client-side Innertube via sandboxed iframe (Origin:null). CF Worker IPs get LOGIN_REQUIRED;",
@@ -2875,7 +3001,7 @@ const PLAYER_CLIENT_JS = [
 "  }",
 "  function ensureSw(){",
 "    if(!('serviceWorker' in navigator)) return Promise.resolve();",
-"    return navigator.serviceWorker.register('/sw.js?v=97',{scope:'/'}).then(function(){",
+"    return navigator.serviceWorker.register('/sw.js?v=' + (window.SW_VERSION || '98'),{scope:'/'}).then(function(){",
 "      return navigator.serviceWorker.ready;",
 "    }).then(function(){",
 "      if(navigator.serviceWorker.controller) return;",
@@ -3234,6 +3360,7 @@ const PLAYER_CLIENT_JS = [
 "    var last=null;",
 "    // 1) Client-side format resolve (Origin:null iframe) — bypasses CF LOGIN_REQUIRED",
 "    try{",
+"      if(window.YT_RELAY_ACTIVE) throw new Error('relay active');",
 "      setStatus('מאתר זרם מהדפדפן…');",
 "      var cFormats=await resolveFormatsClient(id);",
 "      if(gen!==playGen) return;",
@@ -4808,7 +4935,15 @@ async function tryHtmlPlayer(videoId, pageUrl, cookieHeader) {
   }
 }
 
-async function fetchPlayerFormats(videoId, request) {
+async function fetchPlayerFormats(videoId, request, env) {
+  if (relayConfigured(env)) {
+    const ytCookies = await getYoutubeCookieHeader(request);
+    let workerOrigin = '';
+    try { workerOrigin = new URL(request.url).origin; } catch (_) {}
+    const pack = await relayPlayer(env, videoId, ytCookies || '', workerOrigin);
+    if (pack.ok) return pack;
+  }
+
   let lastPlayability = null;
   let lastStatus = 0;
   let lastSource = '';
@@ -5231,11 +5366,11 @@ async function serveYoutubeThumb(v, quality, request) {
   return sealedResponse(tiny, 200, 'image/jpeg', { 'Cache-Control': 'public, max-age=120', 'X-Etrog-Thumb': 'fallback' }, 0);
 }
 
-async function handleYtStream(request, url) {
+async function handleYtStream(request, url, env) {
   let videoId = url.searchParams.get('v') || url.searchParams.get('id');
   let itag = url.searchParams.get('i') || url.searchParams.get('itag') || '18';
   let directMediaUrl = '';
-  const token = url.searchParams.get('d');
+  const token = url.searchParams.get('hash') || url.searchParams.get('d');
   if (token) {
     const decoded = decodeMediaToken(token);
     if (decoded) {
@@ -5358,26 +5493,16 @@ async function handleYtStream(request, url) {
               },
             });
             const h = new Headers();
-            applyCorsHeaders(h, request);
             const ctOut = origCt.startsWith('video/') || origCt.startsWith('audio/') ? origCt : 'video/mp4';
-            h.set('content-type', ctOut);
-            h.set('cache-control', 'no-store');
-            h.set('X-Etrog-Mode', 'stream-unsealed');
             h.set('X-Etrog-Itag', String(prefer));
             h.set('X-Etrog-Source', 'client-direct-url');
             if (directMediaUrl) h.set('X-Etrog-Resolved-Url', directMediaUrl);
-            h.set('accept-ranges', 'bytes');
             const cr = mediaRes.headers.get('content-range');
             const cl = mediaRes.headers.get('content-length');
             if (cr) h.set('content-range', cr);
-            if (cl) h.set('content-length', cl);
             if (wantDownload) {
               h.set('content-disposition', 'attachment; filename="' + String(videoId).replace(/[^\w-]+/g, '_') + '.mp4"');
             }
-            h.set(
-              'Access-Control-Expose-Headers',
-              'Content-Length, Content-Range, Accept-Ranges, Content-Type, Content-Disposition, X-Etrog-Mode, X-Etrog-Itag, X-Etrog-Source, X-Etrog-Resolved-Url'
-            );
             // Cache this direct URL for the itag briefly
             try {
               const vid = String(videoId);
@@ -5393,7 +5518,7 @@ async function handleYtStream(request, url) {
                 exp: Date.now() + 6 * 60 * 1000,
               };
             } catch (_) {}
-            return new Response(plainBody, { status: mediaRes.status === 206 ? 206 : 200, headers: h });
+            return sealedStreamResponse(plainBody, mediaRes.status === 206 ? 206 : 200, ctOut, h, parseRangeStart(clientRange), cl);
           } catch (_) {}
         }
       }
@@ -5421,13 +5546,13 @@ async function handleYtStream(request, url) {
       ? [{ itag: String(prefer), url: directMediaUrl, mime: 'video/mp4', progressive: true }]
       : [];
 
-    let pack = await getPlayerFormatsCached(videoId, request);
+    let pack = await getPlayerFormatsCached(videoId, request, env);
     // Only one retry if cache was stale empty (not LOGIN_REQUIRED)
     if (!pack?.ok || !pack.formats.length) {
       const st0 = pack?.playability?.status || '';
       if (st0 !== 'LOGIN_REQUIRED' && !/LOGIN_REQUIRED/i.test(String(pack?.attemptsLog || ''))) {
         FORMAT_CACHE.delete(String(videoId));
-        pack = await getPlayerFormatsCached(videoId, request);
+        pack = await getPlayerFormatsCached(videoId, request, env);
       }
     }
     if (!pack?.ok || !pack.formats.length) {
@@ -5451,6 +5576,7 @@ async function handleYtStream(request, url) {
           lastStatus: pack?.lastStatus,
           lastSource: pack?.lastSource || '',
           attempts: pack?.attemptsLog || [],
+          relayErr: pack?.relayErr || null,
           hasCookies: !!pack?.hasCookies,
           hasAuth: !!pack?.hasAuth,
           // Only now hand client the residential googlevideo URL (after server resolve failed)
@@ -5586,18 +5712,11 @@ async function handleYtStream(request, url) {
             const cr = mediaRes.headers.get('content-range');
             const cl = mediaRes.headers.get('content-length');
             const h = new Headers();
-            applyCorsHeaders(h, request);
-            h.set('content-type', origCt.startsWith('video/') ? origCt : 'video/mp4');
-            h.set('cache-control', 'no-store');
-            h.set('X-Etrog-Mode', 'stream-unsealed');
             h.set('X-Etrog-Itag', prefer);
             h.set('X-Etrog-Cache', 'media-url');
             h.set('X-Etrog-Resolved-Url', mediaHit.url);
-            h.set('accept-ranges', 'bytes');
             if (cr) h.set('content-range', cr);
-            if (cl) h.set('content-length', cl);
-            h.set('Access-Control-Expose-Headers', 'Content-Length, Content-Range, Accept-Ranges, Content-Type, X-Etrog-Mode, X-Etrog-Itag, X-Etrog-Cache, X-Etrog-Resolved-Url');
-            return new Response(mediaRes.body, { status: mediaRes.status, headers: h });
+            return sealedStreamResponse(mediaRes.body, mediaRes.status, origCt.startsWith('video/') ? origCt : 'video/mp4', h, parseRangeStart(clientRange), cl);
           }
         } else if (vidCache?.byItag) {
           delete vidCache.byItag[String(prefer)];
@@ -5613,6 +5732,17 @@ async function handleYtStream(request, url) {
     ];
 
     async function tryFetchMedia(fmtUrl) {
+      if (relayConfigured(env)) {
+        try {
+          return await relayFetch(env, fmtUrl, {
+            range: clientRange || undefined,
+            userAgent: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36',
+            signal: AbortSignal.timeout(8000),
+          });
+        } catch (_) {
+          return null;
+        }
+      }
       // 2 UAs × cookies-off first — hard 5s timeout so CF Worker never hangs → 502
       for (const ua of mediaUAs) {
         for (const useCk of ytAuthForMedia ? [false, true] : [false]) {
@@ -5708,29 +5838,19 @@ async function handleYtStream(request, url) {
       // XOR-seal broke <video> when Service Worker was missing/outdated → error 4.
       // Thumbs remain sealed via /x/t.
       const h = new Headers();
-      applyCorsHeaders(h, request);
       const ctOut = origCt.startsWith('video/') || origCt.startsWith('audio/') ? origCt : 'video/mp4';
-      h.set('content-type', ctOut);
-      h.set('cache-control', 'no-store');
-      h.set('X-Etrog-Mode', 'stream-unsealed');
       h.set('X-Etrog-Itag', String(fmt.itag));
       if (fmt.url) h.set('X-Etrog-Resolved-Url', fmt.url);
       h.set('X-Etrog-Client', pack.client || '');
       h.set('X-Etrog-Len', contentLength ? String(contentLength) : 'unknown');
-      h.set('accept-ranges', 'bytes');
-      h.set(
-        'Access-Control-Expose-Headers',
-        'Content-Length, Content-Range, Accept-Ranges, Content-Type, X-Etrog-Mode, X-Etrog-Itag, X-Etrog-Bytes, X-Etrog-Len, X-Etrog-Resolved-Url'
-      );
       if (wantDownload) {
         h.set(
           'content-disposition',
           'attachment; filename="' + String(videoId).replace(/[^\w-]+/g, '_') + '.mp4"'
         );
       }
-      if (clHeader) h.set('content-length', clHeader);
       if (cr) h.set('content-range', cr);
-      return new Response(plainBody, { status: statusOut, headers: h });
+      return sealedStreamResponse(plainBody, statusOut, ctOut, h, parseRangeStart(clientRange), clHeader);
     }
 
     // Pass 1: try ordered formats
@@ -5748,7 +5868,7 @@ async function handleYtStream(request, url) {
     if (lastMediaStatus === 403 || lastMediaStatus === 0 || lastMediaStatus === 451) {
       try {
         FORMAT_CACHE.delete(String(videoId));
-        const pack2 = await getPlayerFormatsCached(videoId, request);
+        const pack2 = await getPlayerFormatsCached(videoId, request, env);
         if (pack2?.ok && pack2.formats?.length) {
           pack = pack2;
           const by2 = new Map(pack2.formats.map((f) => [String(f.itag), f]));
@@ -5886,7 +6006,7 @@ export default {
     // ── Password gate: blocks ALL routes (/, /ytp, /cdn/, /api/*, /sw.js, …) ──
     // Session cookie only — re-prompt after browser close. Direct links need same session.
     {
-      const gateRes = await requireGate(request, url);
+      const gateRes = await requireGate(request, url, env);
       if (gateRes) return gateRes;
     }
 
@@ -5896,9 +6016,11 @@ export default {
       url.pathname === '/api/m' ||
       url.pathname === '/api/media' ||
       url.pathname === '/x/s' ||
-      url.pathname.startsWith('/x/s/')
+      url.pathname.startsWith('/x/s/') ||
+      url.pathname === '/assets/chunk' ||
+      url.pathname.startsWith('/assets/chunk-')
     ) {
-      return handleYtStream(request, url);
+      return handleYtStream(request, url, env);
     }
 
     // ── Stealth thumbs /x/t (token) + legacy /api/i ──
@@ -5932,7 +6054,7 @@ export default {
         } catch {}
       }
       // Allow empty v — player opens search UI (no forced sample video)
-      return youtubeNativePlayerPage(v, url.origin, null, prefillQ);
+      return youtubeNativePlayerPage(v, url.origin, null, prefillQ, env);
     }
 
     // ── Route: /api/health ──
@@ -6020,6 +6142,32 @@ export default {
       }
     }
 
+    // ── Route: /api/resolve-helper ──
+    if (url.pathname === '/api/resolve-helper') {
+      if (request.method !== 'POST') {
+        return new Response('method not allowed', { status: 405 });
+      }
+      const auth = request.headers.get('authorization');
+      if (auth !== 'Bearer ' + env.YT_RELAY_SECRET) {
+        return new Response('unauthorized', { status: 401 });
+      }
+      try {
+        const body = await request.json();
+        const videoId = body.videoId;
+        const client = body.client;
+        const cookie = body.cookie || '';
+        const res = await tryInnertubeClient(videoId, client, cookie);
+        return new Response(JSON.stringify(res), {
+          headers: { 'content-type': 'application/json; charset=utf-8' }
+        });
+      } catch (e) {
+        return new Response(JSON.stringify({ ok: false, error: e.message }), {
+          status: 500,
+          headers: { 'content-type': 'application/json' }
+        });
+      }
+    }
+
     // ── Route: /sw.js ──
     if (url.pathname === '/sw.js') {
       return new Response(SW_JS, {
@@ -6047,6 +6195,12 @@ export default {
       return request.method === 'POST' ? importCookiesPost(request) : importCookiesForm();
     }
 
+    // ── Route: /gate (Pre-SW gate for SPAs) ──
+    if (url.pathname === '/gate') {
+      const to = url.searchParams.get('to') || '';
+      return makeGateResponse(to, url.origin);
+    }
+
     // ג”€ג”€ Parse cookies ג”€ג”€
     const cookieHeader = request.headers.get('cookie') || '';
     const cookies = parseCookies(cookieHeader);
@@ -6234,7 +6388,7 @@ export default {
         const streamUrl = new URL(url.origin + '/api/m');
         streamUrl.searchParams.set('v', vid);
         streamUrl.searchParams.set('i', itag);
-        return handleYtStream(request, streamUrl);
+        return handleYtStream(request, streamUrl, env);
       }
       return new Response(null, {
         status: 204,
@@ -6463,7 +6617,7 @@ export default {
         if (location) {
           const absLoc = new URL(location, targetStr).toString();
           if (absLoc.includes('google.com/sorry/')) {
-            return makeSorryResponse(url.origin, extractYoutubeVideoId(targetUrl) || extractYoutubeVideoId(absLoc));
+            return makeSorryResponse(url.origin, extractYoutubeVideoId(targetUrl) || extractYoutubeVideoId(absLoc), env);
           }
           const rh = new Headers(response.headers);
           rh.set('location', url.origin + PROXY_PATH + encodeUrl(absLoc));
@@ -6610,7 +6764,7 @@ export default {
           return new Response(body, { status: 502, headers: ah });
         }
         if (targetUrl.hostname.includes('google.com') && targetUrl.pathname.includes('/sorry/')) {
-          return makeSorryResponse(url.origin);
+          return makeSorryResponse(url.origin, null, env);
         }
         const rewritten = rewriteHtmlResponse(response, targetUrl, url.origin, baseProxyTarget);
         let htmlText = await rewritten.text();