From e100645a00e48a339a2c9cd9dfd31da8b8e1589c Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Thu, 13 Aug 2026 09:37:56 -0400
Subject: [PATCH] Use the right subnet

---
 server/routers/aiGateway/pipeline.ts | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/server/routers/aiGateway/pipeline.ts b/server/routers/aiGateway/pipeline.ts
index 3cc94e30e..50d5e98eb 100644
--- a/server/routers/aiGateway/pipeline.ts
+++ b/server/routers/aiGateway/pipeline.ts
@@ -123,7 +123,12 @@ async function findClientByIp(ip: string): Promise<CachedClient> {
     const [client] = await db
         .select({ clientId: clients.clientId, userId: clients.userId })
         .from(clients)
-        .where(eq(clients.exitNodeSubnet, `${ip}/32`))
+        .where(
+            eq(
+                clients.exitNodeSubnet,
+                `${ip}/${config.getRawConfig().gerbil.site_block_size}`
+            )
+        )
         .limit(1);
 
     const result: CachedClient = client || null;
@@ -323,6 +328,8 @@ async function resolveRequestUser(
         return { user: null, virtualApiKeyId: null };
     }
 
+    logger.debug(`AI gateway request from IP ${ip} (site-resource)`);
+
     const exitNodeRanges = await getExitNodeRanges();
     const inExitNodeRange = exitNodeRanges.some((range) =>
         isIpInCidr(ip, range)