@hivemagnus/magnus-ui 1.0.1 → 1.0.2

package/dist/app/apps/dashboard/.next/server/chunks/_1vpikd37nriwr._.js

@@ -1,3 +1,3 @@
-(()=>{"use strict";module.exports=[84192,e=>{var t=e.i(89779);async function r(e){try{let r=e.body?.getReader();if(!r)return Response.json({error:"Invalid drain request"},{status:400});let a=[],n=0;for(;;){let{done:e,value:t}=await r.read();if(e)break;if((n+=t.byteLength)>4096)return await r.cancel(),Response.json({error:"Invalid drain request"},{status:413});a.push(t)}let i=Buffer.concat(a).toString("utf8"),o=await (0,t.I)(JSON.parse(i),e.headers.get("x-resource-drain-key")??"");return Response.json(o,{headers:{"cache-control":"no-store"}})}catch{return Response.json({error:"Drain proof unavailable"},{status:403,headers:{"cache-control":"no-store"}})}}e.s(["POST",0,r,"dynamic",0,"force-dynamic","runtime",0,"nodejs"])},19766,e=>{var t=e.i(47909),r=e.i(74017),a=e.i(96250),n=e.i(59756),i=e.i(61916),o=e.i(74677),s=e.i(69741),l=e.i(16795),u=e.i(87718),d=e.i(95169),c=e.i(47587),p=e.i(66012),h=e.i(70101),f=e.i(74838),v=e.i(10372),m=e.i(93695),w=e.i(9580);e.i(52474);var R=e.i(220);let x=new t.AppRouteRouteModule({definition:{kind:r.f.APP_ROUTE,page:"/api/internal/resource-enrollment/drain/route",pathname:"/api/internal/resource-enrollment/drain",filename:"route",bundlePath:""},distDir:".next",relativeProjectDir:"",resolvedPagePath:"[project]/apps/dashboard/src/app/api/internal/resource-enrollment/drain/route.ts",nextConfigOutput:"standalone",userland:()=>e.r(84192),...{}}),{workAsyncStorage:g,workUnitAsyncStorage:y,serverHooks:E}=x;async function b(e,t,a){a.requestMeta&&(0,n.R)(e,a.requestMeta),x.isDev&&(0,n.i)(e,"devRequestTimingInternalsEnd",process.hrtime.bigint());let g="/api/internal/resource-enrollment/drain/route";g=g.replace(/\/index$/,"")||"/";let y=await x.prepare(e,t,{srcPage:g,multiZoneDraftMode:!1});if(!y)return t.statusCode=400,t.end("Bad Request"),null==a.waitUntil||a.waitUntil.call(a,Promise.resolve()),null;let{buildId:E,deploymentId:b,params:C,nextConfig:P,parsedUrl:S,isDraftMode:A,prerenderManifest:T,routerServerContext:O,isOnDemandRevalidate:U,revalidateOnlyGenerated:k,resolvedPathname:q,clientReferenceManifest:I,serverActionsManifest:M,previewProps:j}=y,D=(0,s.f)(g),N=!!T.routes[q]&&(x.isDev||(0,w.f)(q,x.cacheOwner,T.routes[q])),_=!!(T.dynamicRoutes[D]||N),H=async()=>((null==O?void 0:O.render404)?await O.render404(e,t,S,!1):t.end("This page could not be found"),null);if(_&&!A){let e=T.dynamicRoutes[D];if(e&&!1===e.fallback&&!N){if(P.adapterPath)return await H();throw new m.NoFallbackError}}let L=null;!_||x.isDev||A||(L="/index"===(L=q)?"/":L),M&&I&&(0,o.f)({page:g,clientReferenceManifest:I,serverActionsManifest:M});let $=e.method||"GET",G=(0,i.v)(),B=G.getActiveScopeSpan(),F=!!(null==O?void 0:O.isWrappedByNextServer),J=!!(0,n.w)(e,"minimalMode"),K=(0,n.w)(e,"incrementalCache")||await x.getIncrementalCache(e,P,j,T,J);null==K||K.resetRequestCache(),globalThis.__incrementalCache=K;let V={params:C,previewProps:j,renderOpts:{experimental:{authInterrupts:!!P.experimental.authInterrupts,useCacheTimeout:P.experimental.useCacheTimeout,durableUseCacheEntries:!!P.experimental.durableUseCacheEntries},cacheComponents:!!P.cacheComponents,validationLevel:P.experimental.instantInsights.validationLevel,isDraftMode:A,incrementalCache:K,hmrRefreshHash:(0,n.w)(e,"hmrRefreshHash"),cacheLifeProfiles:P.cacheLife,staticPageGenerationTimeout:P.staticPageGenerationTimeout,waitUntil:a.waitUntil,onClose:e=>{t.on("close",e)},onAfterTaskError:void 0},sharedContext:{buildId:E,deploymentId:b}},Q=new l.x(e),W=new l.e(t),Z=u.k.fromNodeNextRequest(Q,(0,u.t)(t)),z=async({previousCacheEntry:r})=>{try{if(!J&&U&&k&&!r)return t.statusCode=404,t.setHeader("x-nextjs-cache","REVALIDATED"),t.end("This page could not be found"),null;let n=null===L?await x.handle(Z,V):await x.prerender(Z,V);e.fetchMetrics=V.renderOpts.fetchMetrics;let i=V.renderOpts.pendingWaitUntil;i&&a.waitUntil&&(a.waitUntil(i),i=void 0);let o=V.renderOpts.collectedTags;if(!_)return await (0,p.f)(Q,W,n,i),null;{let e=await n.blob(),t=(0,h.S)(n.headers);o&&(t[v.M]=o),!t["content-type"]&&e.type&&(t["content-type"]=e.type);let r=void 0!==V.renderOpts.collectedRevalidate&&!(V.renderOpts.collectedRevalidate>=v.Q)&&V.renderOpts.collectedRevalidate,a=void 0===V.renderOpts.collectedExpire||V.renderOpts.collectedExpire>=v.Q?!1!==r&&r>0?P.expireTime:void 0:V.renderOpts.collectedExpire;return{value:{kind:R.x.APP_ROUTE,status:n.status,body:Buffer.from(await e.arrayBuffer()),headers:t},cacheControl:{revalidate:r,expire:a}}}}catch(t){throw(null==r?void 0:r.isStale)&&await x.onRequestError(e,t,{routerKind:"App Router",routePath:g,routeType:"route",revalidateReason:(0,c.f)({isStaticGeneration:null!==L,isOnDemandRevalidate:U})},!1,O),t}},X=async(n,o)=>{try{var s,l;let n=await x.handleResponse({req:e,nextConfig:P,cacheKey:L,routeKind:r.f.APP_ROUTE,isFallback:!1,previewProps:j,prerenderManifest:T,isRoutePPREnabled:!1,isOnDemandRevalidate:U,revalidateOnlyGenerated:k,responseGenerator:z,waitUntil:a.waitUntil,isMinimalMode:J});if(null!==n&&"error"in n)throw n.error;if(!_)return;if((null==n||null==(s=n.value)?void 0:s.kind)!==R.x.APP_ROUTE)throw Error(`Invariant: app-route received invalid cache entry ${null==n||null==(l=n.value)?void 0:l.kind}`);J||t.setHeader("x-nextjs-cache",U?"REVALIDATED":n.isMiss?"MISS":n.isStale?"STALE":"HIT"),A&&t.setHeader("Cache-Control","private, no-cache, no-store, max-age=0, must-revalidate");let i=(0,h.G)(n.value.headers);J&&_||i.delete(v.M),!n.cacheControl||t.getHeader("Cache-Control")||i.get("Cache-Control")||i.set("Cache-Control",(0,f.f)(n.cacheControl)),await (0,p.f)(Q,W,new Response(n.value.body,{headers:i,status:n.value.status||200}));return}catch(r){if(r instanceof m.NoFallbackError||await x.onRequestError(e,r,{routerKind:"App Router",routePath:D,routeType:"route",revalidateReason:(0,c.f)({isStaticGeneration:null!==L,isOnDemandRevalidate:U})},!1,O),_)throw r;if(t.headersSent){if(n){let e=r instanceof Error?r:Error("Unknown app route error");n.recordException(e),n.setStatus({code:i.J.ERROR,message:e.message}),n.setAttribute("error.type",e.name)}t.writableEnded||t.destroyed||t.end()}else await (0,p.f)(Q,W,new Response(null,{status:500}));return}finally{(()=>{if(!n)return;let e=t.statusCode;n.setAttributes({"http.status_code":e,"next.rsc":!1}),e&&e>=500&&(n.setStatus({code:i.J.ERROR}),n.setAttribute("error.type",e.toString()));let r=G.getRootSpanAttributes();if(!r)return;if(r.get("next.span_type")!==d.q.handleRequest)return console.warn(`Unexpected root span type '${r.get("next.span_type")}'. Please report this Next.js issue https://github.com/vercel/next.js`);let a=r.get("next.route")||D,s=`${$} ${a}`;n.setAttributes({"next.route":a,"http.route":a,"next.span_name":s}),n.updateName(s),o&&o!==n&&(o.setAttribute("http.route",a),o.updateName(s))})()}};if(F&&B)await X(B,void 0);else{let t=G.getActiveScopeSpan();await G.withPropagatedContext(e.headers,()=>G.trace(d.q.handleRequest,{spanName:`${$} ${g}`,kind:i.C.SERVER,attributes:{"http.method":$,"http.target":e.url}},e=>X(e,t)),void 0,!F)}}e.s(["handler",0,b,"patchFetch",0,function(){return(0,a.f)({workAsyncStorage:g,workUnitAsyncStorage:y})},"routeModule",0,x,"serverHooks",0,E,"workAsyncStorage",0,g,"workUnitAsyncStorage",0,y])}]})();
+(()=>{"use strict";module.exports=[84192,e=>{var t=e.i(89779);async function r(e){try{let r=e.body?.getReader();if(!r)return Response.json({error:"Invalid drain request"},{status:400});let a=[],n=0;for(;;){let{done:e,value:t}=await r.read();if(e)break;if((n+=t.byteLength)>4096)return await r.cancel(),Response.json({error:"Invalid drain request"},{status:413});a.push(t)}let i=Buffer.concat(a).toString("utf8"),o=await (0,t.I)(JSON.parse(i),e.headers.get("x-resource-drain-key")??"");return Response.json(o,{headers:{"cache-control":"no-store"}})}catch{return Response.json({error:"Drain proof unavailable"},{status:403,headers:{"cache-control":"no-store"}})}}e.s(["POST",0,r,"dynamic",0,"force-dynamic","runtime",0,"nodejs"])},19766,e=>{var t=e.i(47909),r=e.i(74017),a=e.i(96250),n=e.i(59756),i=e.i(61916),o=e.i(74677),s=e.i(69741),l=e.i(16795),u=e.i(87718),c=e.i(95169),d=e.i(47587),p=e.i(66012),h=e.i(70101),f=e.i(74838),v=e.i(10372),m=e.i(93695),w=e.i(9580);e.i(52474);var R=e.i(220);let x=new t.AppRouteRouteModule({definition:{kind:r.f.APP_ROUTE,page:"/api/internal/resource-enrollment/drain/route",pathname:"/api/internal/resource-enrollment/drain",filename:"route",bundlePath:""},distDir:".next",relativeProjectDir:"",resolvedPagePath:"[project]/apps/dashboard/src/app/api/internal/resource-enrollment/drain/route.ts",nextConfigOutput:"standalone",userland:()=>e.r(84192),...{}}),{workAsyncStorage:y,workUnitAsyncStorage:g,serverHooks:b}=x;async function E(e,t,r){r.requestMeta&&(0,n.R)(e,r.requestMeta),x.isDev&&(0,n.i)(e,"devRequestTimingInternalsEnd",process.hrtime.bigint());let a="/api/internal/resource-enrollment/drain/route";a=a.replace(/\/index$/,"")||"/";let{instrumentation:o}=await x.ensureInstrumentation(e,{deferSpans:!0});return x.traceRequest(e,{tracer:(0,i.v)(),spanName:`${e.method||"GET"} ${a}`,httpTarget:e.url,instrumentation:o},(n,i)=>C(e,t,r,a,!1,n,i))}async function C(e,t,a,y,g,b,E){let C=await x.prepare(e,t,{srcPage:y,multiZoneDraftMode:g});if(!C)return t.statusCode=400,t.end("Bad Request"),null==a.waitUntil||a.waitUntil.call(a,Promise.resolve()),null;let{buildId:T,deploymentId:P,params:A,nextConfig:O,parsedUrl:S,isDraftMode:U,prerenderManifest:k,routerServerContext:I,isOnDemandRevalidate:q,revalidateOnlyGenerated:j,resolvedPathname:M,clientReferenceManifest:D,serverActionsManifest:N,previewProps:_}=C,H=(0,s.f)(y),L=!!k.routes[M]&&(x.isDev||(0,w.f)(M,x.cacheOwner,k.routes[M])),G=!!(k.dynamicRoutes[H]||L),$=async()=>((null==I?void 0:I.render404)?await I.render404(e,t,S,!1):t.end("This page could not be found"),null);if(G&&!U){let e=k.dynamicRoutes[H];if(e&&!1===e.fallback&&!L){if(O.adapterPath)return await $();throw new m.NoFallbackError}}let B=null;!G||x.isDev||U||(B="/index"===(B=M)?"/":B),N&&D&&(0,o.f)({page:y,clientReferenceManifest:D,serverActionsManifest:N});let F=e.method||"GET",J=(0,i.v)(),K=!!(null==I?void 0:I.isWrappedByNextServer),Q=!!(0,n.w)(e,"minimalMode"),V=(0,n.w)(e,"incrementalCache")||await x.getIncrementalCache(e,O,_,k,Q);null==V||V.resetRequestCache(),globalThis.__incrementalCache=V;let W={params:A,previewProps:_,renderOpts:{experimental:{authInterrupts:!!O.experimental.authInterrupts,useCacheTimeout:O.experimental.useCacheTimeout,durableUseCacheEntries:!!O.experimental.durableUseCacheEntries},cacheComponents:!!O.cacheComponents,validationLevel:O.experimental.instantInsights.validationLevel,isDraftMode:U,incrementalCache:V,hmrRefreshHash:(0,n.w)(e,"hmrRefreshHash"),cacheLifeProfiles:O.cacheLife,staticPageGenerationTimeout:O.staticPageGenerationTimeout,waitUntil:a.waitUntil,onClose:e=>{t.on("close",e)},onAfterTaskError:void 0},sharedContext:{buildId:T,deploymentId:P}},z=new l.x(e),X=new l.e(t),Y=u.k.fromNodeNextRequest(z,(0,u.t)(t)),Z=async({previousCacheEntry:r})=>{try{if(!Q&&q&&j&&!r)return t.statusCode=404,t.setHeader("x-nextjs-cache","REVALIDATED"),t.end("This page could not be found"),null;let n=null===B?await x.handle(Y,W):await x.prerender(Y,W);e.fetchMetrics=W.renderOpts.fetchMetrics;let i=W.renderOpts.pendingWaitUntil;i&&a.waitUntil&&(a.waitUntil(i),i=void 0);let o=W.renderOpts.collectedTags;if(!G)return await (0,p.f)(z,X,n,i),null;{let e=await n.blob(),t=(0,h.S)(n.headers);o&&(t[v.M]=o),!t["content-type"]&&e.type&&(t["content-type"]=e.type);let r=void 0!==W.renderOpts.collectedRevalidate&&!(W.renderOpts.collectedRevalidate>=v.Q)&&W.renderOpts.collectedRevalidate,a=void 0===W.renderOpts.collectedExpire||W.renderOpts.collectedExpire>=v.Q?!1!==r&&r>0?O.expireTime:void 0:W.renderOpts.collectedExpire;return{value:{kind:R.x.APP_ROUTE,status:n.status,body:Buffer.from(await e.arrayBuffer()),headers:t},cacheControl:{revalidate:r,expire:a}}}}catch(t){throw(null==r?void 0:r.isStale)&&await x.onRequestError(e,t,{routerKind:"App Router",routePath:y,routeType:"route",revalidateReason:(0,d.f)({isStaticGeneration:null!==B,isOnDemandRevalidate:q})},!1,I),t}},ee=async n=>{try{var o,s;let n=await x.handleResponse({req:e,nextConfig:O,cacheKey:B,routeKind:r.f.APP_ROUTE,isFallback:!1,previewProps:_,prerenderManifest:k,isRoutePPREnabled:!1,isOnDemandRevalidate:q,revalidateOnlyGenerated:j,responseGenerator:Z,waitUntil:a.waitUntil,isMinimalMode:Q});if(null!==n&&"error"in n)throw n.error;if(!G)return;if((null==n||null==(o=n.value)?void 0:o.kind)!==R.x.APP_ROUTE)throw Error(`Invariant: app-route received invalid cache entry ${null==n||null==(s=n.value)?void 0:s.kind}`);Q||t.setHeader("x-nextjs-cache",q?"REVALIDATED":n.isMiss?"MISS":n.isStale?"STALE":"HIT"),U&&t.setHeader("Cache-Control","private, no-cache, no-store, max-age=0, must-revalidate");let i=(0,h.G)(n.value.headers);Q&&G||i.delete(v.M),!n.cacheControl||t.getHeader("Cache-Control")||i.get("Cache-Control")||i.set("Cache-Control",(0,f.f)(n.cacheControl)),await (0,p.f)(z,X,new Response(n.value.body,{headers:i,status:n.value.status||200}));return}catch(r){if(r instanceof m.NoFallbackError||await x.onRequestError(e,r,{routerKind:"App Router",routePath:H,routeType:"route",revalidateReason:(0,d.f)({isStaticGeneration:null!==B,isOnDemandRevalidate:q})},!1,I),G)throw r;if(t.headersSent){if(n){let e=r instanceof Error?r:Error("Unknown app route error");n.recordException(e),n.setStatus({code:i.J.ERROR,message:e.message}),n.setAttribute("error.type",e.name)}t.writableEnded||t.destroyed||t.end()}else await (0,p.f)(z,X,new Response(null,{status:500}));return}finally{(()=>{if(!n)return;let e=t.statusCode;n.setAttributes({"http.status_code":e,"next.rsc":!1}),e&&e>=500&&(n.setStatus({code:i.J.ERROR}),n.setAttribute("error.type",e.toString()));let r=J.getRootSpanAttributes();if(!r)return;if(r.get("next.span_type")!==c.q.handleRequest)return console.warn(`Unexpected root span type '${r.get("next.span_type")}'. Please report this Next.js issue https://github.com/vercel/next.js`);let a=r.get("next.route")||H,o=`${F} ${a}`;n.setAttributes({"next.route":a,"http.route":a,"next.span_name":o}),n.updateName(o),E&&E!==n&&(E.setAttribute("http.route",a),E.updateName(o))})()}};K||void 0===e.url||null==b||b.setAttribute("http.target",e.url),await ee(b)}e.s(["handler",0,E,"patchFetch",0,function(){return(0,a.f)({workAsyncStorage:y,workUnitAsyncStorage:g})},"routeModule",0,x,"serverHooks",0,b,"workAsyncStorage",0,y,"workUnitAsyncStorage",0,g])}]})();
 
 //# sourceMappingURL=_1vpikd37nriwr._.js.map

package/dist/app/apps/dashboard/.next/server/chunks/_1xodprib7qa_j._.js

@@ -1,4 +1,4 @@
-(()=>{"use strict";module.exports=[70055,e=>{var t=e.i(89171),r=e.i(27721),a=e.i(54213),n=e.i(93458),o=e.i(30137),s=e.i(27147);class i extends Error{status;data;url;constructor(e,t,r,a){super(e),this.name="OrchestraFetchError",this.status=t,this.url=r,this.data=a}}async function l(){let e=await (0,n.cookies)(),t=e.get("magnus_active_node_id")?.value??"local";if("local"===t)return{id:"local"};if(!(await (0,s.D)()).some(e=>e.id===t))throw Error(`Selected control node '${t}' is unavailable`);return{id:t}}async function u(e){let t=await e.text().catch(()=>"");if(!t)return null;try{return JSON.parse(t)}catch{return t}}async function c(e,t){let r,a=await l(),n=`orchestra/${e.replace(/^\//,"")}`,s=new URL(`https://placeholder.invalid/api/v1/${n}`);!function(e,t){if(t){if(t instanceof URLSearchParams)return t.forEach((t,r)=>e.searchParams.append(r,t));for(let[r,a]of Object.entries(t))for(let t of Array.isArray(a)?a:[a])null!=t&&e.searchParams.append(r,String(t))}}(s,t?.searchParams);let c=new Headers(t?.headers),d=t?.body;null!=d&&("string"==typeof d||d instanceof ArrayBuffer||d instanceof Blob||d instanceof FormData||d instanceof URLSearchParams||d instanceof ReadableStream?r=d:(r=JSON.stringify(d),c.has("Content-Type")||c.set("Content-Type","application/json")));let h=await (0,o.d)(a.id,`${n}${s.search}`,{...t,body:r,headers:c,cache:"no-store"});if(!h.ok){let e=await u(h);throw new i(function(e,t){if(e&&"object"==typeof e){let t=e.error,r=e.message;if("string"==typeof t)return t;if("string"==typeof r)return r;if(t&&"object"==typeof t){let e=t.message;if("string"==typeof e)return e}}return"string"==typeof e&&e.trim()?e:`Orchestra fetch failed with HTTP ${t}`}(e,h.status),h.status,n,e)}return u(h)}var d=e.i(89779),h=e.i(47299),p=e.i(29072),f=e.i(66680),m=e.i(33909);e.i(2157);var y=e.i(12714),w=e.i(50227),g=e.i(72130);let v=new Set(["rejected_endpoint","invalid_session","rejected_origin","blocked_destination","connection_failed","connection_started","connection_closed","queue_pressure","backpressure","legacy_session_secret","host_key_mismatch"]),b=new Map;function E(e,t){return null==e?null:String(e).replace(/[\u0000-\u001f\u007f]/g," ").replace(/\b(authorization|cookie|password|passwd|secret|token|api[-_]?key)\s*[:=]\s*[^\s,;]+/gi,"$1=[REDACTED]").replace(/https?:\/\/[^\s/?#]+[^\s]*/gi,e=>{try{let t=new URL(e);return`${t.protocol}//${t.host}${t.pathname}`}catch{return"[REDACTED_URL]"}}).trim().slice(0,t)}async function x(e,t){await (0,y.mkdir)((0,w.dirname)(e),{recursive:!0,mode:448});try{(await (0,y.stat)(e)).size>=2097152&&await (0,y.rename)(e,`${e}.previous`)}catch(e){if(e?.code!=="ENOENT")throw e}await (0,y.appendFile)(e,t,{mode:384})}async function R(e,t){if(!t.running){for(t.running=!0;t.queue.length>0;){let r=t.queue.shift();(0,g.$)(-1);try{await x(e,r)}catch(e){console.error("[hermes-security] failed to record event",e)}}for(let e of(t.running=!1,t.waiters.splice(0)))e()}}function $(e,t={}){let r,a=function(e){var t;let r;if(!e||"object"!=typeof e||!v.has(e.type))return null;let a={timestamp:new Date("string"==typeof e.timestamp?e.timestamp:Date.now()).toISOString(),type:e.type};for(let t of["correlationId","installationId","nodeId","transport","direction"]){let r=function(e){let t=E(e,128);return t&&/^[A-Za-z0-9._:-]+$/.test(t)?t:null}(e[t]);r&&(a[t]=r)}let n=(t=e.hostname,(r=E(t,253)?.toLowerCase())?r.includes("@")||/[/?#]/.test(r)?"[REDACTED_HOST]":/^[a-z0-9](?:[a-z0-9.:-]*[a-z0-9])?$/.test(r)?r:"[INVALID_HOST]":null);n&&(a.hostname=n);let o=E(e.reason,256);o&&(a.reason=o);let s=function(e){let t=E(e,256);if(!t)return null;let r=t.split(/[?#]/,1)[0].replace(/\/{2,}/g,"/");return(r.startsWith("/")?r:`/${r}`).slice(0,256)}(e.path);for(let t of(s&&(a.path=s),null!=e.origin&&(a.origin=function(e){let t=E(e,512);if(!t)return null;try{let e=new URL(t);if(!["http:","https:"].includes(e.protocol)||e.username||e.password)return"[REDACTED_ORIGIN]";return e.origin.slice(0,256)}catch{return"[INVALID_ORIGIN]"}}(e.origin)),["durationMs","queuedBytes","backpressureDurationMs","peakBufferedBytes","droppedEvents"])){let r=function(e,t=Number.MAX_SAFE_INTEGER){let r=Number(e);return Number.isFinite(r)?Math.min(Math.max(Math.round(r),0),t):void 0}(e[t],t.endsWith("Bytes")?0x40000000:6048e5);void 0!==r&&(a[t]=r)}return a}(e);if(!a)return!1;let n=t.path??function(e=process.env){return e.HERMES_SECURITY_EVENT_PATH??(0,w.join)(process.cwd(),".magnus","hermes-proxy-security.jsonl")}(t.env),o=((r=b.get(n))||(r={queue:[],running:!1,dropped:0,waiters:[]},b.set(n,r)),r);return o.queue.length>=(t.maxPendingEvents??1e3)?(o.dropped+=1,(0,g.v)(),!1):(o.queue.push(`${JSON.stringify(a)}
-`),(0,g.$)(1),R(n,o),!0)}var _=e.i(33094);async function S(e,t=!1){let r,a,n=function(){let{username:e,password:t,privateKey:r}=(0,_.b)();return{username:e,password:t,privateKey:r}}();try{r=await (0,m.B)(e),t&&(a=(0,m.s)(e,r))}catch(r){let t=crypto.randomUUID();throw $({type:"blocked_destination",correlationId:t,installationId:e.id,nodeId:e.nodeId,hostname:e.hostname,reason:r instanceof Error?r.message:"destination_denied",transport:"http"}),Error(`Hermes SSH destination denied (correlation ${t})`,{cause:r})}let o=await (0,d._)(e.hostname,"hermes-http");return new Promise((t,s)=>{let i=new p.Client;i.once("close",()=>(0,d.G)(o));let l=!1,u=setTimeout(()=>{l||(l=!0,(0,d.G)(o),i.end(),s(Error(`Timed out connecting to ${e.hostname} over SSH`)))},15e3);i.on("ready",()=>{l||(l=!0,clearTimeout(u),t({conn:i,dashboardTarget:a}))}),i.on("error",e=>{(0,d.G)(o),l||(l=!0,clearTimeout(u),s(e))});try{i.connect({host:r.address,port:e.sshPort||22,username:n.username,...n.privateKey?{privateKey:n.privateKey}:{password:n.password??""},readyTimeout:12e3,hostVerifier:function(e,t={}){if(!Array.isArray(t.expectedFingerprints)||0===t.expectedFingerprints.length)throw Error(`Expected SSH host-key fingerprints are required for ${e}`);let r=new Set(t.expectedFingerprints);return a=>{let n,o=(n=Buffer.isBuffer(a)?a:Buffer.from(a),`SHA256:${(0,f.createHash)("sha256").update(n).digest("base64").replace(/=+$/,"")}`),s=r.has(o);return s||(console.error(`[ssh] host key mismatch for ${e}`),t.onMismatch?.({host:e,observedFingerprint:o})),s}}(`${e.id}:${e.nodeId}`,{expectedFingerprints:r.authorization.hostKeySha256,onMismatch:({observedFingerprint:t})=>{$({type:"host_key_mismatch",correlationId:crypto.randomUUID(),installationId:e.id,nodeId:e.nodeId,hostname:e.hostname,reason:`observed_${t}`,transport:"http"})}})})}catch(e){clearTimeout(u),(0,d.G)(o),s(e)}})}async function T(e){let{conn:t,dashboardTarget:r}=await S(e.installation,!0);try{let a=await function(e,t,r="127.0.0.1"){return new Promise((a,n)=>{e.forwardOut("127.0.0.1",0,r,t,(e,t)=>{e?n(e):(t.setNoDelay??=()=>t,t.setKeepAlive??=()=>t,t.setTimeout??=()=>t,a(t))})})}(t,r.port,r.address);return await new Promise((t,r)=>{let n=(0,h.request)({host:"127.0.0.1",port:e.installation.dashboardPort,path:`${e.upstreamPath}${e.search?`?${e.search}`:""}`,method:e.req.method,headers:function(e,t,r){let a={host:`127.0.0.1:${t}`,connection:"close","accept-encoding":"identity","x-forwarded-host":e.headers.get("host")??"magnus","x-forwarded-proto":e.nextUrl.protocol.replace(":","")};for(let t of["accept","content-type","user-agent","origin","referer"]){let r=e.headers.get(t);r&&(a[t]=r)}return{...a,...r??{}}}(e.req,e.installation.dashboardPort,e.headers),createConnection:()=>a,timeout:3e4},e=>{let r=[];e.on("data",e=>r.push(e)),e.on("end",()=>{t({status:e.statusCode??502,statusText:e.statusMessage??"",headers:e.headers,body:Buffer.concat(r)})})});n.on("timeout",()=>{n.destroy(Error("Hermes dashboard request timed out"))}),n.on("error",r),e.body&&n.write(e.body),n.end()})}finally{t.end()}}var A=e.i(32168);let I="/api/hermes/dashboard",P="magnus_hermes_dashboard_installation_id",U="magnus_hermes_dashboard_session_token",C=null,O=null;async function k(){if(C&&C.expiresAt>Date.now())return C.data;if(O)return O;O=(async()=>{let e=await c("installations"),t=(0,m.Q)(e.data);return C={data:t,expiresAt:Date.now()+5e3},t})();try{return await O}finally{O=null}}async function N(e){let n=e.cookies.get(a.B)?.value;return n&&await (0,r.L)(n)?null:t.NextResponse.json({error:"Unauthorized"},{status:401})}function D(e,t){let r=e.nextUrl.searchParams.get(t);return r&&r.trim()?r.trim():null}async function H(e){let t=D(e,"installationId"),r=D(e,"nodeId"),a=e.cookies.get(P)?.value??null;try{let e=(0,m.b)(await k(),t,r,a);return{target:e.installation?{installation:e.installation}:null,error:e.error}}catch(t){let e=crypto.randomUUID();return console.error(`[hermes-target:${e}] installation inventory failed`,t),{target:null,error:"control_api_unavailable"}}}function M(e,t){if(e.startsWith("api/"))return`${I}/${e}`;let r=e.includes("?")?"&":"?";return`${I}/${e}${r}installationId=${encodeURIComponent(t)}`}function j(e){let t=new Headers;return t.set("content-type",e),t.set("cache-control","no-cache, no-store"),t.set("content-security-policy","frame-ancestors 'self'"),t.set("x-frame-options","SAMEORIGIN"),t}function q(e,t,r){return t&&e.cookies.set(P,t.id,{httpOnly:!0,secure:!0,sameSite:"lax",path:"/"}),r&&e.cookies.set(U,r,{httpOnly:!0,secure:!0,sameSite:"lax",path:"/"}),e}async function L(e,{params:r}){let a,n=await N(e);if(n)return n;if(!(0,A.V)())return t.NextResponse.json({error:"Hermes Agent integration is not enabled. Set MAGNUS_HERMES_ENABLED=true to enable it."},{status:503});let{path:o}=await r,s=o?.join("/")??"",i=s?`/${s}`:"/",{target:l,error:u}=await H(e);if(!l)return t.NextResponse.json({success:!1,error:u??"installation_unavailable"},{status:"installation_required"===u?400:"control_api_unavailable"===u?502:404});let c=((a=new URLSearchParams(e.nextUrl.searchParams)).delete("installationId"),a.delete("nodeId"),a.toString()),d={},h=e.headers.get("accept");h&&(d.accept=h);let p=e.headers.get("content-type");p&&(d["content-type"]=p);let f=e.headers.get("authorization"),m=e.cookies.get(U)?.value??null;f?d.authorization=f:m&&(d.authorization=`Bearer ${m}`);let y={method:e.method,headers:d,cache:"no-store",redirect:"manual"};if("GET"!==e.method&&"HEAD"!==e.method){let t=await e.text().catch(()=>"");t&&(y.body=t)}try{let r=await T({installation:l.installation,req:e,upstreamPath:i,search:c,body:y.body,headers:d}),a=String(r.headers["content-type"]??"application/octet-stream");if(r.status>=300&&r.status<400){let a=r.headers.location;if("string"==typeof a){let n=t.NextResponse.redirect(function(e,t,r){try{let a=new URL(r,`http://127.0.0.1:${t.dashboardPort}`);if("127.0.0.1"!==a.hostname&&"localhost"!==a.hostname)return r;let n=e.nextUrl.clone();return n.pathname=`${I}${a.pathname}`,n.search=a.search,n.toString()}catch{return r}}(e,l.installation,a),r.status);return q(n,l.installation)}}if(a.includes("text/")||a.includes("javascript")||a.includes("json")){var w;let e=r.body.toString("utf-8"),n=a.includes("html")||a.includes("javascript")||a.includes("json")||a.includes("css");return q(new t.NextResponse(n?(w=l.installation.id,e.replaceAll("}/dashboard-plugins/${","}"+I+"/dashboard-plugins/${").replace(/(dashboard-plugins\/[^`"']+)([`"'])/g,(e,t,r)=>t.includes("installationId=")?`${t}${r}`:`${t}?installationId=${encodeURIComponent(w)}${r}`).replace(/\b(href|src|action)=(["'])\/(?!api\/hermes\/dashboard(?:\/|$))([^"']*)/g,(e,t,r,a)=>`${t}=${r}${M(a,w)}`).replace(/(["'`])\/(?!api\/hermes\/dashboard(?:\/|$))((?:api\/|ws(?:\/|$)|assets\/|dashboard-plugins\/|favicon\.ico)[^"'`]*)/g,(e,t,r)=>r.startsWith("api/hermes/dashboard")?`${t}/${r}`:`${t}${M(r,w)}`).replace(/url\((['"]?)\/(assets\/|fonts-terminal\/)([^)'"]+)\1\)/g,(e,t,r,a)=>`url(${t}${M(`${r}${a}`,w)}${t})`)):e,{status:r.status,statusText:r.statusText,headers:j(a)}),l.installation,e.match(/window\.__HERMES_SESSION_TOKEN__=\"([^\"]+)\"/)?.[1]??null)}return q(new t.NextResponse(new Uint8Array(r.body),{status:r.status,statusText:r.statusText,headers:j(a)}),l.installation)}catch(r){let e=crypto.randomUUID();return console.error(`[hermes-http:${e}] dashboard proxy failed`,r),t.NextResponse.json({success:!1,error:"hermes_proxy_unavailable",correlationId:e},{status:502,headers:{"x-correlation-id":e}})}}e.s(["DELETE",0,L,"GET",0,L,"PATCH",0,L,"POST",0,L,"PUT",0,L,"runtime",0,"nodejs"],70055)},22379,e=>{var t=e.i(47909),r=e.i(74017),a=e.i(96250),n=e.i(59756),o=e.i(61916),s=e.i(74677),i=e.i(69741),l=e.i(16795),u=e.i(87718),c=e.i(95169),d=e.i(47587),h=e.i(66012),p=e.i(70101),f=e.i(74838),m=e.i(10372),y=e.i(93695),w=e.i(9580);e.i(52474);var g=e.i(220);let v=new t.AppRouteRouteModule({definition:{kind:r.f.APP_ROUTE,page:"/api/hermes/dashboard/[[...path]]/route",pathname:"/api/hermes/dashboard/[[...path]]",filename:"route",bundlePath:""},distDir:".next",relativeProjectDir:"",resolvedPagePath:"[project]/apps/dashboard/src/app/api/hermes/dashboard/[[...path]]/route.ts",nextConfigOutput:"standalone",userland:()=>e.r(70055),...{}}),{workAsyncStorage:b,workUnitAsyncStorage:E,serverHooks:x}=v;async function R(e,t,a){a.requestMeta&&(0,n.R)(e,a.requestMeta),v.isDev&&(0,n.i)(e,"devRequestTimingInternalsEnd",process.hrtime.bigint());let b="/api/hermes/dashboard/[[...path]]/route";b=b.replace(/\/index$/,"")||"/";let E=await v.prepare(e,t,{srcPage:b,multiZoneDraftMode:!1});if(!E)return t.statusCode=400,t.end("Bad Request"),null==a.waitUntil||a.waitUntil.call(a,Promise.resolve()),null;let{buildId:x,deploymentId:R,params:$,nextConfig:_,parsedUrl:S,isDraftMode:T,prerenderManifest:A,routerServerContext:I,isOnDemandRevalidate:P,revalidateOnlyGenerated:U,resolvedPathname:C,clientReferenceManifest:O,serverActionsManifest:k,previewProps:N}=E,D=(0,i.f)(b),H=!!A.routes[C]&&(v.isDev||(0,w.f)(C,v.cacheOwner,A.routes[C])),M=!!(A.dynamicRoutes[D]||H),j=async()=>((null==I?void 0:I.render404)?await I.render404(e,t,S,!1):t.end("This page could not be found"),null);if(M&&!T){let e=A.dynamicRoutes[D];if(e&&!1===e.fallback&&!H){if(_.adapterPath)return await j();throw new y.NoFallbackError}}let q=null;!M||v.isDev||T||(q="/index"===(q=C)?"/":q),k&&O&&(0,s.f)({page:b,clientReferenceManifest:O,serverActionsManifest:k});let L=e.method||"GET",B=(0,o.v)(),G=B.getActiveScopeSpan(),F=!!(null==I?void 0:I.isWrappedByNextServer),z=!!(0,n.w)(e,"minimalMode"),K=(0,n.w)(e,"incrementalCache")||await v.getIncrementalCache(e,_,N,A,z);null==K||K.resetRequestCache(),globalThis.__incrementalCache=K;let V={params:$,previewProps:N,renderOpts:{experimental:{authInterrupts:!!_.experimental.authInterrupts,useCacheTimeout:_.experimental.useCacheTimeout,durableUseCacheEntries:!!_.experimental.durableUseCacheEntries},cacheComponents:!!_.cacheComponents,validationLevel:_.experimental.instantInsights.validationLevel,isDraftMode:T,incrementalCache:K,hmrRefreshHash:(0,n.w)(e,"hmrRefreshHash"),cacheLifeProfiles:_.cacheLife,staticPageGenerationTimeout:_.staticPageGenerationTimeout,waitUntil:a.waitUntil,onClose:e=>{t.on("close",e)},onAfterTaskError:void 0},sharedContext:{buildId:x,deploymentId:R}},W=new l.x(e),J=new l.e(t),Q=u.k.fromNodeNextRequest(W,(0,u.t)(t)),Z=async({previousCacheEntry:r})=>{try{if(!z&&P&&U&&!r)return t.statusCode=404,t.setHeader("x-nextjs-cache","REVALIDATED"),t.end("This page could not be found"),null;let n=null===q?await v.handle(Q,V):await v.prerender(Q,V);e.fetchMetrics=V.renderOpts.fetchMetrics;let o=V.renderOpts.pendingWaitUntil;o&&a.waitUntil&&(a.waitUntil(o),o=void 0);let s=V.renderOpts.collectedTags;if(!M)return await (0,h.f)(W,J,n,o),null;{let e=await n.blob(),t=(0,p.S)(n.headers);s&&(t[m.M]=s),!t["content-type"]&&e.type&&(t["content-type"]=e.type);let r=void 0!==V.renderOpts.collectedRevalidate&&!(V.renderOpts.collectedRevalidate>=m.Q)&&V.renderOpts.collectedRevalidate,a=void 0===V.renderOpts.collectedExpire||V.renderOpts.collectedExpire>=m.Q?!1!==r&&r>0?_.expireTime:void 0:V.renderOpts.collectedExpire;return{value:{kind:g.x.APP_ROUTE,status:n.status,body:Buffer.from(await e.arrayBuffer()),headers:t},cacheControl:{revalidate:r,expire:a}}}}catch(t){throw(null==r?void 0:r.isStale)&&await v.onRequestError(e,t,{routerKind:"App Router",routePath:b,routeType:"route",revalidateReason:(0,d.f)({isStaticGeneration:null!==q,isOnDemandRevalidate:P})},!1,I),t}},X=async(n,s)=>{try{var i,l;let n=await v.handleResponse({req:e,nextConfig:_,cacheKey:q,routeKind:r.f.APP_ROUTE,isFallback:!1,previewProps:N,prerenderManifest:A,isRoutePPREnabled:!1,isOnDemandRevalidate:P,revalidateOnlyGenerated:U,responseGenerator:Z,waitUntil:a.waitUntil,isMinimalMode:z});if(null!==n&&"error"in n)throw n.error;if(!M)return;if((null==n||null==(i=n.value)?void 0:i.kind)!==g.x.APP_ROUTE)throw Error(`Invariant: app-route received invalid cache entry ${null==n||null==(l=n.value)?void 0:l.kind}`);z||t.setHeader("x-nextjs-cache",P?"REVALIDATED":n.isMiss?"MISS":n.isStale?"STALE":"HIT"),T&&t.setHeader("Cache-Control","private, no-cache, no-store, max-age=0, must-revalidate");let o=(0,p.G)(n.value.headers);z&&M||o.delete(m.M),!n.cacheControl||t.getHeader("Cache-Control")||o.get("Cache-Control")||o.set("Cache-Control",(0,f.f)(n.cacheControl)),await (0,h.f)(W,J,new Response(n.value.body,{headers:o,status:n.value.status||200}));return}catch(r){if(r instanceof y.NoFallbackError||await v.onRequestError(e,r,{routerKind:"App Router",routePath:D,routeType:"route",revalidateReason:(0,d.f)({isStaticGeneration:null!==q,isOnDemandRevalidate:P})},!1,I),M)throw r;if(t.headersSent){if(n){let e=r instanceof Error?r:Error("Unknown app route error");n.recordException(e),n.setStatus({code:o.J.ERROR,message:e.message}),n.setAttribute("error.type",e.name)}t.writableEnded||t.destroyed||t.end()}else await (0,h.f)(W,J,new Response(null,{status:500}));return}finally{(()=>{if(!n)return;let e=t.statusCode;n.setAttributes({"http.status_code":e,"next.rsc":!1}),e&&e>=500&&(n.setStatus({code:o.J.ERROR}),n.setAttribute("error.type",e.toString()));let r=B.getRootSpanAttributes();if(!r)return;if(r.get("next.span_type")!==c.q.handleRequest)return console.warn(`Unexpected root span type '${r.get("next.span_type")}'. Please report this Next.js issue https://github.com/vercel/next.js`);let a=r.get("next.route")||D,i=`${L} ${a}`;n.setAttributes({"next.route":a,"http.route":a,"next.span_name":i}),n.updateName(i),s&&s!==n&&(s.setAttribute("http.route",a),s.updateName(i))})()}};if(F&&G)await X(G,void 0);else{let t=B.getActiveScopeSpan();await B.withPropagatedContext(e.headers,()=>B.trace(c.q.handleRequest,{spanName:`${L} ${b}`,kind:o.C.SERVER,attributes:{"http.method":L,"http.target":e.url}},e=>X(e,t)),void 0,!F)}}e.s(["handler",0,R,"patchFetch",0,function(){return(0,a.f)({workAsyncStorage:b,workUnitAsyncStorage:E})},"routeModule",0,v,"serverHooks",0,x,"workAsyncStorage",0,b,"workUnitAsyncStorage",0,E])}]})();
+(()=>{"use strict";module.exports=[70055,e=>{var t=e.i(89171),r=e.i(27721),a=e.i(54213),n=e.i(93458),s=e.i(30137),o=e.i(27147);class i extends Error{status;data;url;constructor(e,t,r,a){super(e),this.name="OrchestraFetchError",this.status=t,this.url=r,this.data=a}}async function l(){let e=await (0,n.cookies)(),t=e.get("magnus_active_node_id")?.value??"local";if("local"===t)return{id:"local"};if(!(await (0,o.D)()).some(e=>e.id===t))throw Error(`Selected control node '${t}' is unavailable`);return{id:t}}async function u(e){let t=await e.text().catch(()=>"");if(!t)return null;try{return JSON.parse(t)}catch{return t}}async function c(e,t){let r,a=await l(),n=`orchestra/${e.replace(/^\//,"")}`,o=new URL(`https://placeholder.invalid/api/v1/${n}`);!function(e,t){if(t){if(t instanceof URLSearchParams)return t.forEach((t,r)=>e.searchParams.append(r,t));for(let[r,a]of Object.entries(t))for(let t of Array.isArray(a)?a:[a])null!=t&&e.searchParams.append(r,String(t))}}(o,t?.searchParams);let c=new Headers(t?.headers),d=t?.body;null!=d&&("string"==typeof d||d instanceof ArrayBuffer||d instanceof Blob||d instanceof FormData||d instanceof URLSearchParams||d instanceof ReadableStream?r=d:(r=JSON.stringify(d),c.has("Content-Type")||c.set("Content-Type","application/json")));let h=await (0,s.d)(a.id,`${n}${o.search}`,{...t,body:r,headers:c,cache:"no-store"});if(!h.ok){let e=await u(h);throw new i(function(e,t){if(e&&"object"==typeof e){let t=e.error,r=e.message;if("string"==typeof t)return t;if("string"==typeof r)return r;if(t&&"object"==typeof t){let e=t.message;if("string"==typeof e)return e}}return"string"==typeof e&&e.trim()?e:`Orchestra fetch failed with HTTP ${t}`}(e,h.status),h.status,n,e)}return u(h)}var d=e.i(89779),h=e.i(47299),p=e.i(29072),f=e.i(66680),m=e.i(33909);e.i(2157);var y=e.i(12714),w=e.i(50227),g=e.i(72130);let v=new Set(["rejected_endpoint","invalid_session","rejected_origin","blocked_destination","connection_failed","connection_started","connection_closed","queue_pressure","backpressure","legacy_session_secret","host_key_mismatch"]),b=new Map;function E(e,t){return null==e?null:String(e).replace(/[\u0000-\u001f\u007f]/g," ").replace(/\b(authorization|cookie|password|passwd|secret|token|api[-_]?key)\s*[:=]\s*[^\s,;]+/gi,"$1=[REDACTED]").replace(/https?:\/\/[^\s/?#]+[^\s]*/gi,e=>{try{let t=new URL(e);return`${t.protocol}//${t.host}${t.pathname}`}catch{return"[REDACTED_URL]"}}).trim().slice(0,t)}async function x(e,t){await (0,y.mkdir)((0,w.dirname)(e),{recursive:!0,mode:448});try{(await (0,y.stat)(e)).size>=2097152&&await (0,y.rename)(e,`${e}.previous`)}catch(e){if(e?.code!=="ENOENT")throw e}await (0,y.appendFile)(e,t,{mode:384})}async function $(e,t){if(!t.running){for(t.running=!0;t.queue.length>0;){let r=t.queue.shift();(0,g.$)(-1);try{await x(e,r)}catch(e){console.error("[hermes-security] failed to record event",e)}}for(let e of(t.running=!1,t.waiters.splice(0)))e()}}function R(e,t={}){let r,a=function(e){var t;let r;if(!e||"object"!=typeof e||!v.has(e.type))return null;let a={timestamp:new Date("string"==typeof e.timestamp?e.timestamp:Date.now()).toISOString(),type:e.type};for(let t of["correlationId","installationId","nodeId","transport","direction"]){let r=function(e){let t=E(e,128);return t&&/^[A-Za-z0-9._:-]+$/.test(t)?t:null}(e[t]);r&&(a[t]=r)}let n=(t=e.hostname,(r=E(t,253)?.toLowerCase())?r.includes("@")||/[/?#]/.test(r)?"[REDACTED_HOST]":/^[a-z0-9](?:[a-z0-9.:-]*[a-z0-9])?$/.test(r)?r:"[INVALID_HOST]":null);n&&(a.hostname=n);let s=E(e.reason,256);s&&(a.reason=s);let o=function(e){let t=E(e,256);if(!t)return null;let r=t.split(/[?#]/,1)[0].replace(/\/{2,}/g,"/");return(r.startsWith("/")?r:`/${r}`).slice(0,256)}(e.path);for(let t of(o&&(a.path=o),null!=e.origin&&(a.origin=function(e){let t=E(e,512);if(!t)return null;try{let e=new URL(t);if(!["http:","https:"].includes(e.protocol)||e.username||e.password)return"[REDACTED_ORIGIN]";return e.origin.slice(0,256)}catch{return"[INVALID_ORIGIN]"}}(e.origin)),["durationMs","queuedBytes","backpressureDurationMs","peakBufferedBytes","droppedEvents"])){let r=function(e,t=Number.MAX_SAFE_INTEGER){let r=Number(e);return Number.isFinite(r)?Math.min(Math.max(Math.round(r),0),t):void 0}(e[t],t.endsWith("Bytes")?0x40000000:6048e5);void 0!==r&&(a[t]=r)}return a}(e);if(!a)return!1;let n=t.path??function(e=process.env){return e.HERMES_SECURITY_EVENT_PATH??(0,w.join)(process.cwd(),".magnus","hermes-proxy-security.jsonl")}(t.env),s=((r=b.get(n))||(r={queue:[],running:!1,dropped:0,waiters:[]},b.set(n,r)),r);return s.queue.length>=(t.maxPendingEvents??1e3)?(s.dropped+=1,(0,g.v)(),!1):(s.queue.push(`${JSON.stringify(a)}
+`),(0,g.$)(1),$(n,s),!0)}var _=e.i(33094);async function S(e,t=!1){let r,a,n=function(){let{username:e,password:t,privateKey:r}=(0,_.b)();return{username:e,password:t,privateKey:r}}();try{r=await (0,m.B)(e),t&&(a=(0,m.s)(e,r))}catch(r){let t=crypto.randomUUID();throw R({type:"blocked_destination",correlationId:t,installationId:e.id,nodeId:e.nodeId,hostname:e.hostname,reason:r instanceof Error?r.message:"destination_denied",transport:"http"}),Error(`Hermes SSH destination denied (correlation ${t})`,{cause:r})}let s=await (0,d._)(e.hostname,"hermes-http");return new Promise((t,o)=>{let i=new p.Client;i.once("close",()=>(0,d.G)(s));let l=!1,u=setTimeout(()=>{l||(l=!0,(0,d.G)(s),i.end(),o(Error(`Timed out connecting to ${e.hostname} over SSH`)))},15e3);i.on("ready",()=>{l||(l=!0,clearTimeout(u),t({conn:i,dashboardTarget:a}))}),i.on("error",e=>{(0,d.G)(s),l||(l=!0,clearTimeout(u),o(e))});try{i.connect({host:r.address,port:e.sshPort||22,username:n.username,...n.privateKey?{privateKey:n.privateKey}:{password:n.password??""},readyTimeout:12e3,hostVerifier:function(e,t={}){if(!Array.isArray(t.expectedFingerprints)||0===t.expectedFingerprints.length)throw Error(`Expected SSH host-key fingerprints are required for ${e}`);let r=new Set(t.expectedFingerprints);return a=>{let n,s=(n=Buffer.isBuffer(a)?a:Buffer.from(a),`SHA256:${(0,f.createHash)("sha256").update(n).digest("base64").replace(/=+$/,"")}`),o=r.has(s);return o||(console.error(`[ssh] host key mismatch for ${e}`),t.onMismatch?.({host:e,observedFingerprint:s})),o}}(`${e.id}:${e.nodeId}`,{expectedFingerprints:r.authorization.hostKeySha256,onMismatch:({observedFingerprint:t})=>{R({type:"host_key_mismatch",correlationId:crypto.randomUUID(),installationId:e.id,nodeId:e.nodeId,hostname:e.hostname,reason:`observed_${t}`,transport:"http"})}})})}catch(e){clearTimeout(u),(0,d.G)(s),o(e)}})}async function T(e){let{conn:t,dashboardTarget:r}=await S(e.installation,!0);try{let a=await function(e,t,r="127.0.0.1"){return new Promise((a,n)=>{e.forwardOut("127.0.0.1",0,r,t,(e,t)=>{e?n(e):(t.setNoDelay??=()=>t,t.setKeepAlive??=()=>t,t.setTimeout??=()=>t,a(t))})})}(t,r.port,r.address);return await new Promise((t,r)=>{let n=(0,h.request)({host:"127.0.0.1",port:e.installation.dashboardPort,path:`${e.upstreamPath}${e.search?`?${e.search}`:""}`,method:e.req.method,headers:function(e,t,r){let a={host:`127.0.0.1:${t}`,connection:"close","accept-encoding":"identity","x-forwarded-host":e.headers.get("host")??"magnus","x-forwarded-proto":e.nextUrl.protocol.replace(":","")};for(let t of["accept","content-type","user-agent","origin","referer"]){let r=e.headers.get(t);r&&(a[t]=r)}return{...a,...r??{}}}(e.req,e.installation.dashboardPort,e.headers),createConnection:()=>a,timeout:3e4},e=>{let r=[];e.on("data",e=>r.push(e)),e.on("end",()=>{t({status:e.statusCode??502,statusText:e.statusMessage??"",headers:e.headers,body:Buffer.concat(r)})})});n.on("timeout",()=>{n.destroy(Error("Hermes dashboard request timed out"))}),n.on("error",r),e.body&&n.write(e.body),n.end()})}finally{t.end()}}var A=e.i(32168);let I="/api/hermes/dashboard",U="magnus_hermes_dashboard_installation_id",P="magnus_hermes_dashboard_session_token",C=null,O=null;async function N(){if(C&&C.expiresAt>Date.now())return C.data;if(O)return O;O=(async()=>{let e=await c("installations"),t=(0,m.Q)(e.data);return C={data:t,expiresAt:Date.now()+5e3},t})();try{return await O}finally{O=null}}async function k(e){let n=e.cookies.get(a.B)?.value;return n&&await (0,r.L)(n)?null:t.NextResponse.json({error:"Unauthorized"},{status:401})}function D(e,t){let r=e.nextUrl.searchParams.get(t);return r&&r.trim()?r.trim():null}async function H(e){let t=D(e,"installationId"),r=D(e,"nodeId"),a=e.cookies.get(U)?.value??null;try{let e=(0,m.b)(await N(),t,r,a);return{target:e.installation?{installation:e.installation}:null,error:e.error}}catch(t){let e=crypto.randomUUID();return console.error(`[hermes-target:${e}] installation inventory failed`,t),{target:null,error:"control_api_unavailable"}}}function M(e,t){if(e.startsWith("api/"))return`${I}/${e}`;let r=e.includes("?")?"&":"?";return`${I}/${e}${r}installationId=${encodeURIComponent(t)}`}function j(e){let t=new Headers;return t.set("content-type",e),t.set("cache-control","no-cache, no-store"),t.set("content-security-policy","frame-ancestors 'self'"),t.set("x-frame-options","SAMEORIGIN"),t}function q(e,t,r){return t&&e.cookies.set(U,t.id,{httpOnly:!0,secure:!0,sameSite:"lax",path:"/"}),r&&e.cookies.set(P,r,{httpOnly:!0,secure:!0,sameSite:"lax",path:"/"}),e}async function L(e,{params:r}){let a,n=await k(e);if(n)return n;if(!(0,A.V)())return t.NextResponse.json({error:"Hermes Agent integration is not enabled. Set MAGNUS_HERMES_ENABLED=true to enable it."},{status:503});let{path:s}=await r,o=s?.join("/")??"",i=o?`/${o}`:"/",{target:l,error:u}=await H(e);if(!l)return t.NextResponse.json({success:!1,error:u??"installation_unavailable"},{status:"installation_required"===u?400:"control_api_unavailable"===u?502:404});let c=((a=new URLSearchParams(e.nextUrl.searchParams)).delete("installationId"),a.delete("nodeId"),a.toString()),d={},h=e.headers.get("accept");h&&(d.accept=h);let p=e.headers.get("content-type");p&&(d["content-type"]=p);let f=e.headers.get("authorization"),m=e.cookies.get(P)?.value??null;f?d.authorization=f:m&&(d.authorization=`Bearer ${m}`);let y={method:e.method,headers:d,cache:"no-store",redirect:"manual"};if("GET"!==e.method&&"HEAD"!==e.method){let t=await e.text().catch(()=>"");t&&(y.body=t)}try{let r=await T({installation:l.installation,req:e,upstreamPath:i,search:c,body:y.body,headers:d}),a=String(r.headers["content-type"]??"application/octet-stream");if(r.status>=300&&r.status<400){let a=r.headers.location;if("string"==typeof a){let n=t.NextResponse.redirect(function(e,t,r){try{let a=new URL(r,`http://127.0.0.1:${t.dashboardPort}`);if("127.0.0.1"!==a.hostname&&"localhost"!==a.hostname)return r;let n=e.nextUrl.clone();return n.pathname=`${I}${a.pathname}`,n.search=a.search,n.toString()}catch{return r}}(e,l.installation,a),r.status);return q(n,l.installation)}}if(a.includes("text/")||a.includes("javascript")||a.includes("json")){var w;let e=r.body.toString("utf-8"),n=a.includes("html")||a.includes("javascript")||a.includes("json")||a.includes("css");return q(new t.NextResponse(n?(w=l.installation.id,e.replaceAll("}/dashboard-plugins/${","}"+I+"/dashboard-plugins/${").replace(/(dashboard-plugins\/[^`"']+)([`"'])/g,(e,t,r)=>t.includes("installationId=")?`${t}${r}`:`${t}?installationId=${encodeURIComponent(w)}${r}`).replace(/\b(href|src|action)=(["'])\/(?!api\/hermes\/dashboard(?:\/|$))([^"']*)/g,(e,t,r,a)=>`${t}=${r}${M(a,w)}`).replace(/(["'`])\/(?!api\/hermes\/dashboard(?:\/|$))((?:api\/|ws(?:\/|$)|assets\/|dashboard-plugins\/|favicon\.ico)[^"'`]*)/g,(e,t,r)=>r.startsWith("api/hermes/dashboard")?`${t}/${r}`:`${t}${M(r,w)}`).replace(/url\((['"]?)\/(assets\/|fonts-terminal\/)([^)'"]+)\1\)/g,(e,t,r,a)=>`url(${t}${M(`${r}${a}`,w)}${t})`)):e,{status:r.status,statusText:r.statusText,headers:j(a)}),l.installation,e.match(/window\.__HERMES_SESSION_TOKEN__=\"([^\"]+)\"/)?.[1]??null)}return q(new t.NextResponse(new Uint8Array(r.body),{status:r.status,statusText:r.statusText,headers:j(a)}),l.installation)}catch(r){let e=crypto.randomUUID();return console.error(`[hermes-http:${e}] dashboard proxy failed`,r),t.NextResponse.json({success:!1,error:"hermes_proxy_unavailable",correlationId:e},{status:502,headers:{"x-correlation-id":e}})}}e.s(["DELETE",0,L,"GET",0,L,"PATCH",0,L,"POST",0,L,"PUT",0,L,"runtime",0,"nodejs"],70055)},22379,e=>{var t=e.i(47909),r=e.i(74017),a=e.i(96250),n=e.i(59756),s=e.i(61916),o=e.i(74677),i=e.i(69741),l=e.i(16795),u=e.i(87718),c=e.i(95169),d=e.i(47587),h=e.i(66012),p=e.i(70101),f=e.i(74838),m=e.i(10372),y=e.i(93695),w=e.i(9580);e.i(52474);var g=e.i(220);let v=new t.AppRouteRouteModule({definition:{kind:r.f.APP_ROUTE,page:"/api/hermes/dashboard/[[...path]]/route",pathname:"/api/hermes/dashboard/[[...path]]",filename:"route",bundlePath:""},distDir:".next",relativeProjectDir:"",resolvedPagePath:"[project]/apps/dashboard/src/app/api/hermes/dashboard/[[...path]]/route.ts",nextConfigOutput:"standalone",userland:()=>e.r(70055),...{}}),{workAsyncStorage:b,workUnitAsyncStorage:E,serverHooks:x}=v;async function $(e,t,r){r.requestMeta&&(0,n.R)(e,r.requestMeta),v.isDev&&(0,n.i)(e,"devRequestTimingInternalsEnd",process.hrtime.bigint());let a="/api/hermes/dashboard/[[...path]]/route";a=a.replace(/\/index$/,"")||"/";let{instrumentation:o}=await v.ensureInstrumentation(e,{deferSpans:!0});return v.traceRequest(e,{tracer:(0,s.v)(),spanName:`${e.method||"GET"} ${a}`,httpTarget:e.url,instrumentation:o},(n,s)=>R(e,t,r,a,!1,n,s))}async function R(e,t,a,b,E,x,$){let R=await v.prepare(e,t,{srcPage:b,multiZoneDraftMode:E});if(!R)return t.statusCode=400,t.end("Bad Request"),null==a.waitUntil||a.waitUntil.call(a,Promise.resolve()),null;let{buildId:_,deploymentId:S,params:T,nextConfig:A,parsedUrl:I,isDraftMode:U,prerenderManifest:P,routerServerContext:C,isOnDemandRevalidate:O,revalidateOnlyGenerated:N,resolvedPathname:k,clientReferenceManifest:D,serverActionsManifest:H,previewProps:M}=R,j=(0,i.f)(b),q=!!P.routes[k]&&(v.isDev||(0,w.f)(k,v.cacheOwner,P.routes[k])),L=!!(P.dynamicRoutes[j]||q),B=async()=>((null==C?void 0:C.render404)?await C.render404(e,t,I,!1):t.end("This page could not be found"),null);if(L&&!U){let e=P.dynamicRoutes[j];if(e&&!1===e.fallback&&!q){if(A.adapterPath)return await B();throw new y.NoFallbackError}}let G=null;!L||v.isDev||U||(G="/index"===(G=k)?"/":G),H&&D&&(0,o.f)({page:b,clientReferenceManifest:D,serverActionsManifest:H});let F=e.method||"GET",z=(0,s.v)(),K=!!(null==C?void 0:C.isWrappedByNextServer),V=!!(0,n.w)(e,"minimalMode"),W=(0,n.w)(e,"incrementalCache")||await v.getIncrementalCache(e,A,M,P,V);null==W||W.resetRequestCache(),globalThis.__incrementalCache=W;let J={params:T,previewProps:M,renderOpts:{experimental:{authInterrupts:!!A.experimental.authInterrupts,useCacheTimeout:A.experimental.useCacheTimeout,durableUseCacheEntries:!!A.experimental.durableUseCacheEntries},cacheComponents:!!A.cacheComponents,validationLevel:A.experimental.instantInsights.validationLevel,isDraftMode:U,incrementalCache:W,hmrRefreshHash:(0,n.w)(e,"hmrRefreshHash"),cacheLifeProfiles:A.cacheLife,staticPageGenerationTimeout:A.staticPageGenerationTimeout,waitUntil:a.waitUntil,onClose:e=>{t.on("close",e)},onAfterTaskError:void 0},sharedContext:{buildId:_,deploymentId:S}},Q=new l.x(e),X=new l.e(t),Y=u.k.fromNodeNextRequest(Q,(0,u.t)(t)),Z=async({previousCacheEntry:r})=>{try{if(!V&&O&&N&&!r)return t.statusCode=404,t.setHeader("x-nextjs-cache","REVALIDATED"),t.end("This page could not be found"),null;let n=null===G?await v.handle(Y,J):await v.prerender(Y,J);e.fetchMetrics=J.renderOpts.fetchMetrics;let s=J.renderOpts.pendingWaitUntil;s&&a.waitUntil&&(a.waitUntil(s),s=void 0);let o=J.renderOpts.collectedTags;if(!L)return await (0,h.f)(Q,X,n,s),null;{let e=await n.blob(),t=(0,p.S)(n.headers);o&&(t[m.M]=o),!t["content-type"]&&e.type&&(t["content-type"]=e.type);let r=void 0!==J.renderOpts.collectedRevalidate&&!(J.renderOpts.collectedRevalidate>=m.Q)&&J.renderOpts.collectedRevalidate,a=void 0===J.renderOpts.collectedExpire||J.renderOpts.collectedExpire>=m.Q?!1!==r&&r>0?A.expireTime:void 0:J.renderOpts.collectedExpire;return{value:{kind:g.x.APP_ROUTE,status:n.status,body:Buffer.from(await e.arrayBuffer()),headers:t},cacheControl:{revalidate:r,expire:a}}}}catch(t){throw(null==r?void 0:r.isStale)&&await v.onRequestError(e,t,{routerKind:"App Router",routePath:b,routeType:"route",revalidateReason:(0,d.f)({isStaticGeneration:null!==G,isOnDemandRevalidate:O})},!1,C),t}},ee=async n=>{try{var o,i;let n=await v.handleResponse({req:e,nextConfig:A,cacheKey:G,routeKind:r.f.APP_ROUTE,isFallback:!1,previewProps:M,prerenderManifest:P,isRoutePPREnabled:!1,isOnDemandRevalidate:O,revalidateOnlyGenerated:N,responseGenerator:Z,waitUntil:a.waitUntil,isMinimalMode:V});if(null!==n&&"error"in n)throw n.error;if(!L)return;if((null==n||null==(o=n.value)?void 0:o.kind)!==g.x.APP_ROUTE)throw Error(`Invariant: app-route received invalid cache entry ${null==n||null==(i=n.value)?void 0:i.kind}`);V||t.setHeader("x-nextjs-cache",O?"REVALIDATED":n.isMiss?"MISS":n.isStale?"STALE":"HIT"),U&&t.setHeader("Cache-Control","private, no-cache, no-store, max-age=0, must-revalidate");let s=(0,p.G)(n.value.headers);V&&L||s.delete(m.M),!n.cacheControl||t.getHeader("Cache-Control")||s.get("Cache-Control")||s.set("Cache-Control",(0,f.f)(n.cacheControl)),await (0,h.f)(Q,X,new Response(n.value.body,{headers:s,status:n.value.status||200}));return}catch(r){if(r instanceof y.NoFallbackError||await v.onRequestError(e,r,{routerKind:"App Router",routePath:j,routeType:"route",revalidateReason:(0,d.f)({isStaticGeneration:null!==G,isOnDemandRevalidate:O})},!1,C),L)throw r;if(t.headersSent){if(n){let e=r instanceof Error?r:Error("Unknown app route error");n.recordException(e),n.setStatus({code:s.J.ERROR,message:e.message}),n.setAttribute("error.type",e.name)}t.writableEnded||t.destroyed||t.end()}else await (0,h.f)(Q,X,new Response(null,{status:500}));return}finally{(()=>{if(!n)return;let e=t.statusCode;n.setAttributes({"http.status_code":e,"next.rsc":!1}),e&&e>=500&&(n.setStatus({code:s.J.ERROR}),n.setAttribute("error.type",e.toString()));let r=z.getRootSpanAttributes();if(!r)return;if(r.get("next.span_type")!==c.q.handleRequest)return console.warn(`Unexpected root span type '${r.get("next.span_type")}'. Please report this Next.js issue https://github.com/vercel/next.js`);let a=r.get("next.route")||j,o=`${F} ${a}`;n.setAttributes({"next.route":a,"http.route":a,"next.span_name":o}),n.updateName(o),$&&$!==n&&($.setAttribute("http.route",a),$.updateName(o))})()}};K||void 0===e.url||null==x||x.setAttribute("http.target",e.url),await ee(x)}e.s(["handler",0,$,"patchFetch",0,function(){return(0,a.f)({workAsyncStorage:b,workUnitAsyncStorage:E})},"routeModule",0,v,"serverHooks",0,x,"workAsyncStorage",0,b,"workUnitAsyncStorage",0,E])}]})();
 
 //# sourceMappingURL=_1xodprib7qa_j._.js.map

package/dist/app/apps/dashboard/.next/server/chunks/_1xoy6p0t2si_y._.js

@@ -1,3 +1,3 @@
-(()=>{"use strict";module.exports=[30480,e=>{var t=e.i(89171),a=e.i(69464);async function r(){try{let e=await (0,a.m)(),r=t.NextResponse.redirect(e.url);return r.cookies.set("magnus_hive_state",e.state,{secure:!0,httpOnly:!0,sameSite:"lax",path:"/api/auth/hive/callback",maxAge:300}),r}catch{return t.NextResponse.json({error:"Hive login unavailable"},{status:503})}}e.s(["GET",0,r])},57504,e=>{var t=e.i(47909),a=e.i(74017),r=e.i(96250),n=e.i(59756),i=e.i(61916),o=e.i(74677),s=e.i(69741),l=e.i(16795),u=e.i(87718),c=e.i(95169),d=e.i(47587),p=e.i(66012),h=e.i(70101),v=e.i(74838),f=e.i(10372),m=e.i(93695),w=e.i(9580);e.i(52474);var R=e.i(220);let x=new t.AppRouteRouteModule({definition:{kind:a.f.APP_ROUTE,page:"/api/auth/hive/start/route",pathname:"/api/auth/hive/start",filename:"route",bundlePath:""},distDir:".next",relativeProjectDir:"",resolvedPagePath:"[project]/apps/dashboard/src/app/api/auth/hive/start/route.ts",nextConfigOutput:"standalone",userland:()=>e.r(30480),...{}}),{workAsyncStorage:g,workUnitAsyncStorage:E,serverHooks:y}=x;async function C(e,t,r){r.requestMeta&&(0,n.R)(e,r.requestMeta),x.isDev&&(0,n.i)(e,"devRequestTimingInternalsEnd",process.hrtime.bigint());let g="/api/auth/hive/start/route";g=g.replace(/\/index$/,"")||"/";let E=await x.prepare(e,t,{srcPage:g,multiZoneDraftMode:!1});if(!E)return t.statusCode=400,t.end("Bad Request"),null==r.waitUntil||r.waitUntil.call(r,Promise.resolve()),null;let{buildId:y,deploymentId:C,params:b,nextConfig:A,parsedUrl:P,isDraftMode:T,prerenderManifest:S,routerServerContext:O,isOnDemandRevalidate:U,revalidateOnlyGenerated:k,resolvedPathname:q,clientReferenceManifest:M,serverActionsManifest:_,previewProps:N}=E,D=(0,s.f)(g),I=!!S.routes[q]&&(x.isDev||(0,w.f)(q,x.cacheOwner,S.routes[q])),H=!!(S.dynamicRoutes[D]||I),j=async()=>((null==O?void 0:O.render404)?await O.render404(e,t,P,!1):t.end("This page could not be found"),null);if(H&&!T){let e=S.dynamicRoutes[D];if(e&&!1===e.fallback&&!I){if(A.adapterPath)return await j();throw new m.NoFallbackError}}let G=null;!H||x.isDev||T||(G="/index"===(G=q)?"/":G),_&&M&&(0,o.f)({page:g,clientReferenceManifest:M,serverActionsManifest:_});let L=e.method||"GET",$=(0,i.v)(),B=$.getActiveScopeSpan(),F=!!(null==O?void 0:O.isWrappedByNextServer),K=!!(0,n.w)(e,"minimalMode"),V=(0,n.w)(e,"incrementalCache")||await x.getIncrementalCache(e,A,N,S,K);null==V||V.resetRequestCache(),globalThis.__incrementalCache=V;let J={params:b,previewProps:N,renderOpts:{experimental:{authInterrupts:!!A.experimental.authInterrupts,useCacheTimeout:A.experimental.useCacheTimeout,durableUseCacheEntries:!!A.experimental.durableUseCacheEntries},cacheComponents:!!A.cacheComponents,validationLevel:A.experimental.instantInsights.validationLevel,isDraftMode:T,incrementalCache:V,hmrRefreshHash:(0,n.w)(e,"hmrRefreshHash"),cacheLifeProfiles:A.cacheLife,staticPageGenerationTimeout:A.staticPageGenerationTimeout,waitUntil:r.waitUntil,onClose:e=>{t.on("close",e)},onAfterTaskError:void 0},sharedContext:{buildId:y,deploymentId:C}},Q=new l.x(e),W=new l.e(t),Z=u.k.fromNodeNextRequest(Q,(0,u.t)(t)),z=async({previousCacheEntry:a})=>{try{if(!K&&U&&k&&!a)return t.statusCode=404,t.setHeader("x-nextjs-cache","REVALIDATED"),t.end("This page could not be found"),null;let n=null===G?await x.handle(Z,J):await x.prerender(Z,J);e.fetchMetrics=J.renderOpts.fetchMetrics;let i=J.renderOpts.pendingWaitUntil;i&&r.waitUntil&&(r.waitUntil(i),i=void 0);let o=J.renderOpts.collectedTags;if(!H)return await (0,p.f)(Q,W,n,i),null;{let e=await n.blob(),t=(0,h.S)(n.headers);o&&(t[f.M]=o),!t["content-type"]&&e.type&&(t["content-type"]=e.type);let a=void 0!==J.renderOpts.collectedRevalidate&&!(J.renderOpts.collectedRevalidate>=f.Q)&&J.renderOpts.collectedRevalidate,r=void 0===J.renderOpts.collectedExpire||J.renderOpts.collectedExpire>=f.Q?!1!==a&&a>0?A.expireTime:void 0:J.renderOpts.collectedExpire;return{value:{kind:R.x.APP_ROUTE,status:n.status,body:Buffer.from(await e.arrayBuffer()),headers:t},cacheControl:{revalidate:a,expire:r}}}}catch(t){throw(null==a?void 0:a.isStale)&&await x.onRequestError(e,t,{routerKind:"App Router",routePath:g,routeType:"route",revalidateReason:(0,d.f)({isStaticGeneration:null!==G,isOnDemandRevalidate:U})},!1,O),t}},X=async(n,o)=>{try{var s,l;let n=await x.handleResponse({req:e,nextConfig:A,cacheKey:G,routeKind:a.f.APP_ROUTE,isFallback:!1,previewProps:N,prerenderManifest:S,isRoutePPREnabled:!1,isOnDemandRevalidate:U,revalidateOnlyGenerated:k,responseGenerator:z,waitUntil:r.waitUntil,isMinimalMode:K});if(null!==n&&"error"in n)throw n.error;if(!H)return;if((null==n||null==(s=n.value)?void 0:s.kind)!==R.x.APP_ROUTE)throw Error(`Invariant: app-route received invalid cache entry ${null==n||null==(l=n.value)?void 0:l.kind}`);K||t.setHeader("x-nextjs-cache",U?"REVALIDATED":n.isMiss?"MISS":n.isStale?"STALE":"HIT"),T&&t.setHeader("Cache-Control","private, no-cache, no-store, max-age=0, must-revalidate");let i=(0,h.G)(n.value.headers);K&&H||i.delete(f.M),!n.cacheControl||t.getHeader("Cache-Control")||i.get("Cache-Control")||i.set("Cache-Control",(0,v.f)(n.cacheControl)),await (0,p.f)(Q,W,new Response(n.value.body,{headers:i,status:n.value.status||200}));return}catch(a){if(a instanceof m.NoFallbackError||await x.onRequestError(e,a,{routerKind:"App Router",routePath:D,routeType:"route",revalidateReason:(0,d.f)({isStaticGeneration:null!==G,isOnDemandRevalidate:U})},!1,O),H)throw a;if(t.headersSent){if(n){let e=a instanceof Error?a:Error("Unknown app route error");n.recordException(e),n.setStatus({code:i.J.ERROR,message:e.message}),n.setAttribute("error.type",e.name)}t.writableEnded||t.destroyed||t.end()}else await (0,p.f)(Q,W,new Response(null,{status:500}));return}finally{(()=>{if(!n)return;let e=t.statusCode;n.setAttributes({"http.status_code":e,"next.rsc":!1}),e&&e>=500&&(n.setStatus({code:i.J.ERROR}),n.setAttribute("error.type",e.toString()));let a=$.getRootSpanAttributes();if(!a)return;if(a.get("next.span_type")!==c.q.handleRequest)return console.warn(`Unexpected root span type '${a.get("next.span_type")}'. Please report this Next.js issue https://github.com/vercel/next.js`);let r=a.get("next.route")||D,s=`${L} ${r}`;n.setAttributes({"next.route":r,"http.route":r,"next.span_name":s}),n.updateName(s),o&&o!==n&&(o.setAttribute("http.route",r),o.updateName(s))})()}};if(F&&B)await X(B,void 0);else{let t=$.getActiveScopeSpan();await $.withPropagatedContext(e.headers,()=>$.trace(c.q.handleRequest,{spanName:`${L} ${g}`,kind:i.C.SERVER,attributes:{"http.method":L,"http.target":e.url}},e=>X(e,t)),void 0,!F)}}e.s(["handler",0,C,"patchFetch",0,function(){return(0,r.f)({workAsyncStorage:g,workUnitAsyncStorage:E})},"routeModule",0,x,"serverHooks",0,y,"workAsyncStorage",0,g,"workUnitAsyncStorage",0,E])}]})();
+(()=>{"use strict";module.exports=[30480,e=>{var t=e.i(89171),r=e.i(69464);async function a(){try{let e=await (0,r.m)(),a=t.NextResponse.redirect(e.url);return a.cookies.set("magnus_hive_state",e.state,{secure:!0,httpOnly:!0,sameSite:"lax",path:"/api/auth/hive/callback",maxAge:300}),a}catch{return t.NextResponse.json({error:"Hive login unavailable"},{status:503})}}e.s(["GET",0,a])},57504,e=>{var t=e.i(47909),r=e.i(74017),a=e.i(96250),n=e.i(59756),i=e.i(61916),s=e.i(74677),o=e.i(69741),l=e.i(16795),u=e.i(87718),c=e.i(95169),d=e.i(47587),p=e.i(66012),h=e.i(70101),f=e.i(74838),v=e.i(10372),m=e.i(93695),w=e.i(9580);e.i(52474);var R=e.i(220);let x=new t.AppRouteRouteModule({definition:{kind:r.f.APP_ROUTE,page:"/api/auth/hive/start/route",pathname:"/api/auth/hive/start",filename:"route",bundlePath:""},distDir:".next",relativeProjectDir:"",resolvedPagePath:"[project]/apps/dashboard/src/app/api/auth/hive/start/route.ts",nextConfigOutput:"standalone",userland:()=>e.r(30480),...{}}),{workAsyncStorage:g,workUnitAsyncStorage:y,serverHooks:E}=x;async function b(e,t,r){r.requestMeta&&(0,n.R)(e,r.requestMeta),x.isDev&&(0,n.i)(e,"devRequestTimingInternalsEnd",process.hrtime.bigint());let a="/api/auth/hive/start/route";a=a.replace(/\/index$/,"")||"/";let{instrumentation:s}=await x.ensureInstrumentation(e,{deferSpans:!0});return x.traceRequest(e,{tracer:(0,i.v)(),spanName:`${e.method||"GET"} ${a}`,httpTarget:e.url,instrumentation:s},(n,i)=>C(e,t,r,a,!1,n,i))}async function C(e,t,a,g,y,E,b){let C=await x.prepare(e,t,{srcPage:g,multiZoneDraftMode:y});if(!C)return t.statusCode=400,t.end("Bad Request"),null==a.waitUntil||a.waitUntil.call(a,Promise.resolve()),null;let{buildId:T,deploymentId:A,params:P,nextConfig:O,parsedUrl:S,isDraftMode:U,prerenderManifest:k,routerServerContext:_,isOnDemandRevalidate:q,revalidateOnlyGenerated:I,resolvedPathname:M,clientReferenceManifest:N,serverActionsManifest:D,previewProps:H}=C,G=(0,o.f)(g),j=!!k.routes[M]&&(x.isDev||(0,w.f)(M,x.cacheOwner,k.routes[M])),L=!!(k.dynamicRoutes[G]||j),$=async()=>((null==_?void 0:_.render404)?await _.render404(e,t,S,!1):t.end("This page could not be found"),null);if(L&&!U){let e=k.dynamicRoutes[G];if(e&&!1===e.fallback&&!j){if(O.adapterPath)return await $();throw new m.NoFallbackError}}let B=null;!L||x.isDev||U||(B="/index"===(B=M)?"/":B),D&&N&&(0,s.f)({page:g,clientReferenceManifest:N,serverActionsManifest:D});let F=e.method||"GET",K=(0,i.v)(),J=!!(null==_?void 0:_.isWrappedByNextServer),Q=!!(0,n.w)(e,"minimalMode"),V=(0,n.w)(e,"incrementalCache")||await x.getIncrementalCache(e,O,H,k,Q);null==V||V.resetRequestCache(),globalThis.__incrementalCache=V;let W={params:P,previewProps:H,renderOpts:{experimental:{authInterrupts:!!O.experimental.authInterrupts,useCacheTimeout:O.experimental.useCacheTimeout,durableUseCacheEntries:!!O.experimental.durableUseCacheEntries},cacheComponents:!!O.cacheComponents,validationLevel:O.experimental.instantInsights.validationLevel,isDraftMode:U,incrementalCache:V,hmrRefreshHash:(0,n.w)(e,"hmrRefreshHash"),cacheLifeProfiles:O.cacheLife,staticPageGenerationTimeout:O.staticPageGenerationTimeout,waitUntil:a.waitUntil,onClose:e=>{t.on("close",e)},onAfterTaskError:void 0},sharedContext:{buildId:T,deploymentId:A}},z=new l.x(e),X=new l.e(t),Y=u.k.fromNodeNextRequest(z,(0,u.t)(t)),Z=async({previousCacheEntry:r})=>{try{if(!Q&&q&&I&&!r)return t.statusCode=404,t.setHeader("x-nextjs-cache","REVALIDATED"),t.end("This page could not be found"),null;let n=null===B?await x.handle(Y,W):await x.prerender(Y,W);e.fetchMetrics=W.renderOpts.fetchMetrics;let i=W.renderOpts.pendingWaitUntil;i&&a.waitUntil&&(a.waitUntil(i),i=void 0);let s=W.renderOpts.collectedTags;if(!L)return await (0,p.f)(z,X,n,i),null;{let e=await n.blob(),t=(0,h.S)(n.headers);s&&(t[v.M]=s),!t["content-type"]&&e.type&&(t["content-type"]=e.type);let r=void 0!==W.renderOpts.collectedRevalidate&&!(W.renderOpts.collectedRevalidate>=v.Q)&&W.renderOpts.collectedRevalidate,a=void 0===W.renderOpts.collectedExpire||W.renderOpts.collectedExpire>=v.Q?!1!==r&&r>0?O.expireTime:void 0:W.renderOpts.collectedExpire;return{value:{kind:R.x.APP_ROUTE,status:n.status,body:Buffer.from(await e.arrayBuffer()),headers:t},cacheControl:{revalidate:r,expire:a}}}}catch(t){throw(null==r?void 0:r.isStale)&&await x.onRequestError(e,t,{routerKind:"App Router",routePath:g,routeType:"route",revalidateReason:(0,d.f)({isStaticGeneration:null!==B,isOnDemandRevalidate:q})},!1,_),t}},ee=async n=>{try{var s,o;let n=await x.handleResponse({req:e,nextConfig:O,cacheKey:B,routeKind:r.f.APP_ROUTE,isFallback:!1,previewProps:H,prerenderManifest:k,isRoutePPREnabled:!1,isOnDemandRevalidate:q,revalidateOnlyGenerated:I,responseGenerator:Z,waitUntil:a.waitUntil,isMinimalMode:Q});if(null!==n&&"error"in n)throw n.error;if(!L)return;if((null==n||null==(s=n.value)?void 0:s.kind)!==R.x.APP_ROUTE)throw Error(`Invariant: app-route received invalid cache entry ${null==n||null==(o=n.value)?void 0:o.kind}`);Q||t.setHeader("x-nextjs-cache",q?"REVALIDATED":n.isMiss?"MISS":n.isStale?"STALE":"HIT"),U&&t.setHeader("Cache-Control","private, no-cache, no-store, max-age=0, must-revalidate");let i=(0,h.G)(n.value.headers);Q&&L||i.delete(v.M),!n.cacheControl||t.getHeader("Cache-Control")||i.get("Cache-Control")||i.set("Cache-Control",(0,f.f)(n.cacheControl)),await (0,p.f)(z,X,new Response(n.value.body,{headers:i,status:n.value.status||200}));return}catch(r){if(r instanceof m.NoFallbackError||await x.onRequestError(e,r,{routerKind:"App Router",routePath:G,routeType:"route",revalidateReason:(0,d.f)({isStaticGeneration:null!==B,isOnDemandRevalidate:q})},!1,_),L)throw r;if(t.headersSent){if(n){let e=r instanceof Error?r:Error("Unknown app route error");n.recordException(e),n.setStatus({code:i.J.ERROR,message:e.message}),n.setAttribute("error.type",e.name)}t.writableEnded||t.destroyed||t.end()}else await (0,p.f)(z,X,new Response(null,{status:500}));return}finally{(()=>{if(!n)return;let e=t.statusCode;n.setAttributes({"http.status_code":e,"next.rsc":!1}),e&&e>=500&&(n.setStatus({code:i.J.ERROR}),n.setAttribute("error.type",e.toString()));let r=K.getRootSpanAttributes();if(!r)return;if(r.get("next.span_type")!==c.q.handleRequest)return console.warn(`Unexpected root span type '${r.get("next.span_type")}'. Please report this Next.js issue https://github.com/vercel/next.js`);let a=r.get("next.route")||G,s=`${F} ${a}`;n.setAttributes({"next.route":a,"http.route":a,"next.span_name":s}),n.updateName(s),b&&b!==n&&(b.setAttribute("http.route",a),b.updateName(s))})()}};J||void 0===e.url||null==E||E.setAttribute("http.target",e.url),await ee(E)}e.s(["handler",0,b,"patchFetch",0,function(){return(0,a.f)({workAsyncStorage:g,workUnitAsyncStorage:y})},"routeModule",0,x,"serverHooks",0,E,"workAsyncStorage",0,g,"workUnitAsyncStorage",0,y])}]})();
 
 //# sourceMappingURL=_1xoy6p0t2si_y._.js.map

package/dist/app/apps/dashboard/.next/server/chunks/apps_dashboard_src_lib_auth_ts_1hhq1tq6hjj-e._.js

@@ -1,4 +1,4 @@
-module.exports=[27721,90823,94228,e=>{"use strict";let t;var r=e.i(66680),s=e.i(42512);let a="2026-10-01T00:00:00.000Z",i=!1;var n=e.i(33094);let o=()=>new TextEncoder().encode(function(e=process.env,t=Date.now()){if(e.SESSION_SECRET)return e.SESSION_SECRET;if(function(e=process.env,t=Date.now()){let r=!!e.SESSION_SECRET,s=!!e.JWT_SECRET,i="true"===e.ALLOW_LEGACY_SESSION_SECRET,n=t>=Date.parse(a);return{configured:r||s&&i&&!n,source:r?"dedicated":s&&i&&!n?"legacy_jwt_secret":"missing",legacyFallbackActive:!r&&s&&i&&!n,legacyFallbackAllowed:i&&!n,migrationDeadline:a}}(e,t).legacyFallbackActive)return i||(i=!0,console.error(`[SECURITY:HIGH] ALLOW_LEGACY_SESSION_SECRET=true is reusing JWT_SECRET for dashboard sessions; migrate before ${a}`)),e.JWT_SECRET;if(e.JWT_SECRET&&"true"!==e.ALLOW_LEGACY_SESSION_SECRET)throw Error("SESSION_SECRET is required; JWT_SECRET fallback requires ALLOW_LEGACY_SESSION_SECRET=true");if(e.JWT_SECRET)throw Error(`Legacy JWT_SECRET session fallback expired on ${a}`);throw Error("SESSION_SECRET is required")}());async function d(){return t||(t=new s.Redis(process.env.REDIS_URL??"redis://127.0.0.1:6379",{maxRetriesPerRequest:1,connectTimeout:2e3,commandTimeout:2500,enableOfflineQueue:!1})).on("error",()=>void 0),("connecting"===t.status||"connect"===t.status)&&await new Promise((e,r)=>{let s=()=>{t.off("error",a),e()},a=e=>{t.off("ready",s),r(e)};t.once("ready",s),t.once("error",a)}),t}function c(e){return`magnus_session:local:${(0,r.createHmac)("sha256",o()).update(e).digest("hex")}`}function l(){let e=(0,n.a)();return(0,r.createHmac)("sha256",o()).update(JSON.stringify([e.username,e.passwordHash??e.password,process.env.LOCAL_SESSION_GENERATION??""])).digest("hex")}let u=`
+module.exports=[27721,90823,94228,e=>{"use strict";let t;var r=e.i(66680),a=e.i(42512);let n="2026-10-01T00:00:00.000Z",i=!1;var s=e.i(33094);let o=()=>new TextEncoder().encode(function(e=process.env,t=Date.now()){if(e.SESSION_SECRET)return e.SESSION_SECRET;if(function(e=process.env,t=Date.now()){let r=!!e.SESSION_SECRET,a=!!e.JWT_SECRET,i="true"===e.ALLOW_LEGACY_SESSION_SECRET,s=t>=Date.parse(n);return{configured:r||a&&i&&!s,source:r?"dedicated":a&&i&&!s?"legacy_jwt_secret":"missing",legacyFallbackActive:!r&&a&&i&&!s,legacyFallbackAllowed:i&&!s,migrationDeadline:n}}(e,t).legacyFallbackActive)return i||(i=!0,console.error(`[SECURITY:HIGH] ALLOW_LEGACY_SESSION_SECRET=true is reusing JWT_SECRET for dashboard sessions; migrate before ${n}`)),e.JWT_SECRET;if(e.JWT_SECRET&&"true"!==e.ALLOW_LEGACY_SESSION_SECRET)throw Error("SESSION_SECRET is required; JWT_SECRET fallback requires ALLOW_LEGACY_SESSION_SECRET=true");if(e.JWT_SECRET)throw Error(`Legacy JWT_SECRET session fallback expired on ${n}`);throw Error("SESSION_SECRET is required")}());async function l(){return t||(t=new a.Redis(process.env.REDIS_URL??"redis://127.0.0.1:6379",{maxRetriesPerRequest:1,connectTimeout:2e3,commandTimeout:2500,enableOfflineQueue:!1})).on("error",()=>void 0),("connecting"===t.status||"connect"===t.status)&&await new Promise((e,r)=>{let a=()=>{t.off("error",n),e()},n=e=>{t.off("ready",a),r(e)};t.once("ready",a),t.once("error",n)}),t}function c(e){return`magnus_session:local:${(0,r.createHmac)("sha256",o()).update(e).digest("hex")}`}function d(){let e=(0,s.a)();return(0,r.createHmac)("sha256",o()).update(JSON.stringify([e.username,e.passwordHash??e.password,process.env.LOCAL_SESSION_GENERATION??""])).digest("hex")}let u=`
 local generation = redis.call('GET', KEYS[1]) or ARGV[1]
 redis.call('SET', KEYS[1], generation, 'EX', ARGV[4])
 local time = redis.call('TIME')
@@ -10,6 +10,6 @@ redis.call('ZADD', KEYS[2], now + ARGV[4] * 1000000, ARGV[2])
 redis.call('EXPIRE', KEYS[2], ARGV[4])
 redis.call('SET', KEYS[3], generation .. ':' .. ARGV[3], 'EX', ARGV[4])
 return generation
-`;async function h(e){let t=(0,r.randomUUID)(),s=c(e);return await (await d()).eval(u,3,`${s}:generation`,`${s}:sessions`,`${s}:session:${t}`,(0,r.randomUUID)(),t,l(),86400,Math.floor(Date.now()/1e3),`${s}:session:`),t}async function E(e){if("hive"===e.provider)return!0;if("string"!=typeof e.username||!e.sessionId||!/^[a-f0-9-]{36}$/.test(e.sessionId))return!1;let t=c(e.username),[r,s]=await (await d()).mget(`${t}:generation`,`${t}:session:${e.sessionId}`);return!!(r&&s===`${r}:${l()}`)}async function f(e,t=!1){if("hive"===e.provider)return;let s=c(e.username);t?await (await d()).set(`${s}:generation`,(0,r.randomUUID)(),"EX",86400):e.sessionId&&await (await d()).del(`${s}:session:${e.sessionId}`)}e.s(["t",0,h,"P",0,f,"x",0,E],90823),e.s([],94228);var p=e.i(63370),S=e.i(93233),w=e.i(77278),H=e.i(65466),g=e.i(32802),m=e.i(48215),y=e.i(52665),T=e.i(18083),R=e.i(13658);class A{#e;#t;#r;constructor(e){if(!(e instanceof Uint8Array))throw TypeError("payload must be an instance of Uint8Array");this.#e=e}setProtectedHeader(e){return(0,R.x)(this.#t,"setProtectedHeader"),this.#t=e,this}setUnprotectedHeader(e){return(0,R.x)(this.#r,"setUnprotectedHeader"),this.#r=e,this}async sign(e,t){let r,s,a,i;if(!this.#t&&!this.#r)throw new H.p("either setProtectedHeader or setUnprotectedHeader must be called before #sign()");if(!(0,w.J)(this.#t,this.#r))throw new H.p("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");let n={...this.#t,...this.#r},o=(0,y.f)(H.p,new Map([["b64",!0]]),t?.crit,this.#t,n),d=!0;if(o.has("b64")&&"boolean"!=typeof(d=this.#t.b64))throw new H.p('The "b64" (base64url-encode payload) Header Parameter must be a boolean');let{alg:c}=n;if("string"!=typeof c||!c)throw new H.p('JWS "alg" (Algorithm) Header Parameter missing or invalid');(0,m.f)(c,e,"sign"),d?(r=(0,p.q)(this.#e),s=(0,g.q)(r)):(s=this.#e,r=""),this.#t?(a=(0,p.q)(JSON.stringify(this.#t)),i=(0,g.q)(a)):(a="",i=new Uint8Array);let l=(0,g.w)(i,(0,g.q)("."),s),u=await (0,T.f)(e,c),h=await (0,S.H)(c,u,l),E={signature:(0,p.q)(h),payload:r};return this.#r&&(E.header=this.#r),this.#t&&(E.protected=a),E}}class _{#s;constructor(e){this.#s=new A(e)}setProtectedHeader(e){return this.#s.setProtectedHeader(e),this}async sign(e,t){let r=await this.#s.sign(e,t);if(void 0===r.payload)throw TypeError("use the flattened module for creating JWS with b64: false");return`${r.protected}.${r.payload}.${r.signature}`}}var I=e.i(24472);class b{#t;#a;constructor(e={}){this.#a=new I.C(e)}setIssuer(e){return this.#a.iss=e,this}setSubject(e){return this.#a.sub=e,this}setAudience(e){return this.#a.aud=e,this}setJti(e){return this.#a.jti=e,this}setNotBefore(e){return this.#a.nbf=e,this}setExpirationTime(e){return this.#a.exp=e,this}setIssuedAt(e){return this.#a.iat=e,this}setProtectedHeader(e){return this.#t=e,this}async sign(e,t){let r=new _(this.#a.data());if(r.setProtectedHeader(this.#t),Array.isArray(this.#t?.crit)&&this.#t.crit.includes("b64")&&!1===this.#t.b64)throw new H.H("JWTs MUST NOT use unencoded payload");return r.sign(e,t)}}var C=e.i(9939),v=e.i(54213);async function O(t,r){let s,a,i;try{let e=(0,n.a)();s=e.username,a=e.password,i=e.passwordHash}catch{return!1}let{timingSafeEqual:o}=await e.A(70729),d=Buffer.from(t),c=Buffer.from(s),l=d.length===c.length&&o(d,c),u=!1;if(i){let{verify:t}=await e.A(777);u=await t(i,r).catch(()=>!1)}else if(null!=a){let e=Buffer.from(r),t=Buffer.from(a);u=e.length===t.length&&o(e,t)}return l&&u}async function $(e,t){let r=t?.provider==="hive"?t.sessionId:await h(e);return new b({username:e,...t,sessionId:r}).setProtectedHeader({alg:"HS256"}).setIssuer(v.W).setAudience(v.m).setIssuedAt().setExpirationTime(`${v.E}s`).sign((0,v._)())}async function L(e,t=!1){let r;try{let{payload:t}=await (0,C.f)(e,(0,v._)(),(0,v.c)());r=t}catch{return null}try{return await E(r)?r:null}catch(e){if(t)throw e;return null}}e.s(["z",0,$,"K",0,O,"L",0,L],27721)}];
+`;async function E(e){let t=(0,r.randomUUID)(),a=c(e);return await (await l()).eval(u,3,`${a}:generation`,`${a}:sessions`,`${a}:session:${t}`,(0,r.randomUUID)(),t,d(),86400,Math.floor(Date.now()/1e3),`${a}:session:`),t}async function S(e){if("hive"===e.provider)return!0;if("string"!=typeof e.username||!e.sessionId||!/^[a-f0-9-]{36}$/.test(e.sessionId))return!1;let t=c(e.username),[r,a]=await (await l()).mget(`${t}:generation`,`${t}:session:${e.sessionId}`);return!!(r&&a===`${r}:${d()}`)}async function f(e,t=!1){if("hive"===e.provider)return;let a=c(e.username);t?await (await l()).set(`${a}:generation`,(0,r.randomUUID)(),"EX",86400):e.sessionId&&await (await l()).del(`${a}:session:${e.sessionId}`)}e.s(["t",0,E,"P",0,f,"x",0,S],90823),e.s([],94228);var w=e.i(63370),g=e.i(16760),m=e.i(83817),p=e.i(65466),R=e.i(32802),h=e.i(92449);async function T(e,t,r){let[a,n,i,s]=e,o="";if(void 0!==n){let e=(0,m.M)(p.p,n);n=e[0],o=(0,w.q)(e[1])}if(void 0!==i&&(i=(0,m.M)(p.p,i)[0]),!n&&!i)throw new p.p("either setProtectedHeader or setUnprotectedHeader must be called before #sign()");if(!(0,m.J)(n,i))throw new p.p("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");let l={...n,...i};(0,m.h)(p.p,n);let c=(0,m.e)(n,(0,m.l)(p.p,m.U,s,n,l));c||r?.();let{alg:d}=l;if("string"!=typeof d||!d)throw new p.p('JWS "alg" (Algorithm) Header Parameter missing or invalid');let u=(0,g.l)(d),E="",S=a,f;if(c){let t=e[4];t?(E=t[0]??=(0,w.q)(a),S=t[1]??=(0,R.q)(E)):(E=(0,w.q)(a),f=R.h.encode(`${o}.${E}`))}f??=(0,R.w)((0,R.q)(o),(0,R.q)("."),S);let T=await (0,h.c)(await (0,h.X)(u,t,"sign"),u.subtle,"sign");u.minRsaBits&&(0,h.y)(u.alg,T);let _={signature:(0,w.q)(new Uint8Array(await crypto.subtle.sign(u.signing,T,f))),payload:E};return n&&(_.protected=o),i&&(_.header=i),[_,c]}async function _(e,t,r,a,n){let[i]=await T([e,t,void 0,r],a,n);return`${i.protected}.${i.payload}.${i.signature}`}var A=e.i(24472);let y=A.C;class I extends y{#e;setProtectedHeader(e){return(0,m.x)(this.#e,"setProtectedHeader"),this.#e=e,this}async sign(e,t){return _((0,A.w)(this),this.#e,t?.crit,e,()=>{throw new p.H("JWTs MUST NOT use unencoded payload")})}}var C=e.i(9939),v=e.i(54213);async function $(t,r){let a,n,i;try{let e=(0,s.a)();a=e.username,n=e.password,i=e.passwordHash}catch{return!1}let{timingSafeEqual:o}=await e.A(70729),l=Buffer.from(t),c=Buffer.from(a),d=l.length===c.length&&o(l,c),u=!1;if(i){let{verify:t}=await e.A(777);u=await t(i,r).catch(()=>!1)}else if(null!=n){let e=Buffer.from(r),t=Buffer.from(n);u=e.length===t.length&&o(e,t)}return d&&u}async function O(e,t){let r=t?.provider==="hive"?t.sessionId:await E(e);return new I({username:e,...t,sessionId:r}).setProtectedHeader({alg:"HS256"}).setIssuer(v.W).setAudience(v.m).setIssuedAt().setExpirationTime(`${v.E}s`).sign((0,v._)())}async function H(e,t=!1){let r;try{let{payload:t}=await (0,C.f)(e,(0,v._)(),(0,v.c)());r=t}catch{return null}try{return await S(r)?r:null}catch(e){if(t)throw e;return null}}e.s(["z",0,O,"K",0,$,"L",0,H],27721)}];
 
 //# sourceMappingURL=apps_dashboard_src_lib_auth_ts_1hhq1tq6hjj-e._.js.map

package/dist/app/apps/dashboard/.next/server/chunks/apps_dashboard_src_lib_hive-login_ts_0ab2iq7-rpy13._.js

@@ -1,3 +1,3 @@
-module.exports=[69464,e=>{"use strict";let t,r;var i=e.i(66680),a=e.i(65466),s=e.i(63370),o=e.i(77942),n=e.i(77278);async function c(e,t,r){let i;if(!(0,n.C)(e))throw TypeError("JWK must be an object");switch(t??=e.alg,i??=r?.extractable??e.ext,e.kty){case"oct":if("string"!=typeof e.k||!e.k)throw TypeError('missing "k" (Key Value) Parameter value');return(0,s.G)(e.k);case"RSA":if("oth"in e&&void 0!==e.oth)throw new a.u('RSA JWK "oth" (Other Primes Info) Parameter value is not supported');return(0,o.f)({...e,alg:t,ext:i});case"AKP":if("string"!=typeof e.alg||!e.alg)throw TypeError('missing "alg" (Algorithm) Parameter value');if(void 0!==t&&t!==e.alg)throw TypeError("JWK alg and alg option value mismatch");return(0,o.f)({...e,ext:i});case"EC":case"OKP":return(0,o.f)({...e,alg:t,ext:i});default:throw new a.u('Unsupported "kty" (Key Type) Parameter value')}}function u(e){return(0,n.C)(e)}class l{#e;#t=new WeakMap;constructor(e){if(!(e&&"object"==typeof e&&Array.isArray(e.keys)&&e.keys.every(u)))throw new a.P("JSON Web Key Set malformed");this.#e=structuredClone(e)}jwks(){return this.#e}async getKey(e,t){let{alg:r,kid:i}={...e,...t?.header},s=function(e){switch("string"==typeof e&&e.slice(0,2)){case"RS":case"PS":return"RSA";case"ES":return"EC";case"Ed":return"OKP";case"ML":return"AKP";default:throw new a.u('Unsupported "alg" value for a JSON Web Key Set')}}(r),o=this.#e.keys.filter(e=>{let t=s===e.kty;if(t&&"string"==typeof i&&(t=i===e.kid),t&&("string"==typeof e.alg||"AKP"===s)&&(t=r===e.alg),t&&"string"==typeof e.use&&(t="sig"===e.use),t&&Array.isArray(e.key_ops)&&(t=e.key_ops.includes("verify")),t)switch(r){case"ES256":t="P-256"===e.crv;break;case"ES384":t="P-384"===e.crv;break;case"ES512":t="P-521"===e.crv;break;case"Ed25519":case"EdDSA":t="Ed25519"===e.crv}return t}),{0:n,length:c}=o;if(0===c)throw new a.W;if(1!==c){let e=new a.o,t=this.#t;throw e[Symbol.asyncIterator]=async function*(){for(let e of o)try{yield await h(t,e,r)}catch{}},e}return h(this.#t,n,r)}}async function h(e,t,r){let i=e.get(t)||e.set(t,{}).get(t);if(void 0===i[r]){let e=await c({...t,ext:!0},r);if(e instanceof Uint8Array||"public"!==e.type)throw new a.P("JSON Web Key Set members must be public keys");i[r]=e}return i[r]}function d(e){let t=new l(e),r=async(e,r)=>t.getKey(e,r);return Object.defineProperties(r,{jwks:{value:()=>structuredClone(t.jwks()),enumerable:!1,configurable:!1,writable:!1}}),r}("u"<typeof navigator||!navigator.userAgent?.startsWith?.("Mozilla/5.0 "))&&(t="jose/v6.2.3");let f=Symbol();async function w(e,t,r,i=fetch){let s=await i(e,{method:"GET",signal:r,redirect:"manual",headers:t}).catch(e=>{if("TimeoutError"===e.name)throw new a.B;throw e});if(200!==s.status)throw new a.J("Expected 200 OK from the JSON Web Key Set HTTP response");try{return await s.json()}catch{throw new a.J("Failed to parse the JSON Web Key Set HTTP response as JSON")}}let p=Symbol();class g{#r;#i;#a;#s;#o;#n;#c;#u;#l;#h;constructor(e,r){if(!(e instanceof URL))throw TypeError("url must be an instance of URL");if(this.#r=new URL(e.href),this.#i="number"==typeof r?.timeoutDuration?r?.timeoutDuration:5e3,this.#a="number"==typeof r?.cooldownDuration?r?.cooldownDuration:3e4,this.#s="number"==typeof r?.cacheMaxAge?r?.cacheMaxAge:6e5,this.#c=new Headers(r?.headers),t&&!this.#c.has("User-Agent")&&this.#c.set("User-Agent",t),this.#c.has("accept")||(this.#c.set("accept","application/json"),this.#c.append("accept","application/jwk-set+json")),this.#u=r?.[f],r?.[p]!==void 0){var i,a;this.#h=r?.[p],i=r?.[p],a=this.#s,!("object"!=typeof i||null===i||!("uat"in i)||"number"!=typeof i.uat||Date.now()-i.uat>=a)&&"jwks"in i&&(0,n.C)(i.jwks)&&Array.isArray(i.jwks.keys)&&Array.prototype.every.call(i.jwks.keys,n.C)&&1&&(this.#o=this.#h.uat,this.#l=d(this.#h.jwks))}}pendingFetch(){return!!this.#n}coolingDown(){return"number"==typeof this.#o&&Date.now()<this.#o+this.#a}fresh(){return"number"==typeof this.#o&&Date.now()<this.#o+this.#s}jwks(){return this.#l?.jwks()}async getKey(e,t){this.#l&&this.fresh()||await this.reload();try{return await this.#l(e,t)}catch(r){if(r instanceof a.W&&!1===this.coolingDown())return await this.reload(),this.#l(e,t);throw r}}async reload(){this.#n&&("u">typeof WebSocketPair||"u">typeof navigator&&"Cloudflare-Workers"===navigator.userAgent||"u">typeof EdgeRuntime&&"vercel"===EdgeRuntime)&&(this.#n=void 0),this.#n||=w(this.#r.href,this.#c,AbortSignal.timeout(this.#i),this.#u).then(e=>{this.#l=d(e),this.#h&&(this.#h.uat=Date.now(),this.#h.jwks=e),this.#o=Date.now(),this.#n=void 0}).catch(e=>{throw this.#n=void 0,e}),await this.#n}}var y=e.i(9939),m=e.i(42512),v=e.i(54213),b=e.i(32168);async function k(){let e=(r||(r=new m.Redis(process.env.REDIS_URL??"redis://127.0.0.1:6379",{maxRetriesPerRequest:1,enableOfflineQueue:!1,lazyConnect:!0})).on("error",()=>void 0),r);return"wait"===e.status&&await e.connect(),e}let E=()=>(0,i.createHash)("sha256").update("magnus:hive-session:v1\0").update((0,v._)()).digest();function A(e,t){let r=(0,i.randomBytes)(12),a=(0,i.createCipheriv)("aes-256-gcm",E(),r);a.setAAD(Buffer.from(t));let s=Buffer.concat([a.update(JSON.stringify(e)),a.final()]);return Buffer.concat([r,a.getAuthTag(),s]).toString("base64url")}function S(e,t){let r=Buffer.from(e,"base64url"),a=(0,i.createDecipheriv)("aes-256-gcm",E(),r.subarray(0,12));return a.setAAD(Buffer.from(t)),a.setAuthTag(r.subarray(12,28)),JSON.parse(Buffer.concat([a.update(r.subarray(28)),a.final()]).toString("utf8"))}function _(){return(0,b.r)(process.env)}async function I(e,t){let r=await fetch(e,{...t,redirect:"error",signal:AbortSignal.timeout(8e3),cache:"no-store"});if(!r.ok)throw Error("Hive identity request failed");let i=r.body?.getReader();if(!i)throw Error("Empty Hive response");let a=[],s=0;try{for(;;){let e=await i.read();if(e.done)break;if((s+=e.value.byteLength)>65536)throw Error("Hive identity response too large");a.push(e.value)}}finally{await i.cancel()}return JSON.parse(Buffer.concat(a).toString("utf8"))}async function T(){let e=function(){if(!_())throw Error("Hive login is not configured");let e=new URL(process.env.HIVE_OAUTH_DISCOVERY_URL),t=new URL(process.env.DASHBOARD_PUBLIC_ORIGIN);if([e,t].some(e=>"https:"!==e.protocol||e.username||e.password||e.hash))throw Error("Hive login requires HTTPS");return{discovery:e,origin:t,clientId:process.env.HIVE_OAUTH_CLIENT_ID,issuer:process.env.HIVE_OAUTH_ISSUER,audience:process.env.HIVE_OAUTH_API_AUDIENCE,callback:`${t.origin}/api/auth/hive/callback`}}(),t=await I(e.discovery.toString());if(t.issuer!==e.issuer)throw Error("Hive issuer mismatch");for(let r of["authorization_endpoint","token_endpoint","jwks_uri"]){if("string"!=typeof t[r])throw Error("Incomplete Hive discovery");let i=new URL(t[r]);if(i.origin!==e.discovery.origin||i.username||i.password)throw Error("Unexpected Hive endpoint origin")}return{config:e,doc:t}}async function R(){let{config:e,doc:t}=await T(),r=(0,i.randomBytes)(32).toString("base64url"),a=(0,i.randomBytes)(32).toString("base64url");await (await k()).set(`magnus:hive:oauth:${r}`,A({verifier:a,callback:e.callback},r),"EX",300);let s=new URL(t.authorization_endpoint);return s.search=new URLSearchParams({response_type:"code",client_id:e.clientId,redirect_uri:e.callback,scope:process.env.HIVE_OAUTH_SCOPE??"openid profile email",state:r,code_challenge:(0,i.createHash)("sha256").update(a).digest("base64url"),code_challenge_method:"S256"}).toString(),{state:r,url:s.toString()}}async function O(e,t){let r,a;if(!/^[A-Za-z0-9_-]{43}$/.test(e)||!t||t.length>4096)throw Error("Invalid OAuth callback");let s=await (await k()).getdel(`magnus:hive:oauth:${e}`);if(!s)throw Error("OAuth state expired or already consumed");let o=S(s,e),{config:n,doc:c}=await T();if(o.callback!==n.callback)throw Error("Callback configuration changed");let u=await I(c.token_endpoint,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"authorization_code",code:t,client_id:n.clientId,redirect_uri:n.callback,code_verifier:o.verifier,...process.env.HIVE_OAUTH_CLIENT_SECRET?{client_secret:process.env.HIVE_OAUTH_CLIENT_SECRET}:{}})});if("string"!=typeof u.access_token)throw Error("Missing Hive access token");let{payload:l}=await (0,y.f)(u.access_token,(r=new g(new URL(c.jwks_uri),void 0),Object.defineProperties(a=async(e,t)=>r.getKey(e,t),{coolingDown:{get:()=>r.coolingDown(),enumerable:!0,configurable:!1},fresh:{get:()=>r.fresh(),enumerable:!0,configurable:!1},reload:{value:()=>r.reload(),enumerable:!0,configurable:!1,writable:!1},reloading:{get:()=>r.pendingFetch(),enumerable:!0,configurable:!1},jwks:{value:()=>r.jwks(),enumerable:!0,configurable:!1,writable:!1}}),a),{algorithms:["RS256"],issuer:n.issuer,audience:n.audience});if(!l.sub||!l.exp||"SERVICE_ACCOUNT"===l.actorType)throw Error("Named user identity required");let h=Math.min(3600,l.exp-Math.floor(Date.now()/1e3));if(h<=0)throw Error("Hive session expired");let d=(0,i.randomBytes)(32).toString("base64url");return await (await k()).set(`magnus:hive:session:${d}`,A({accessToken:u.access_token,userId:l.sub,expiresAt:l.exp},d),"EX",h),{username:String(l.preferred_username??l.sub),userId:l.sub,role:function(e){for(let t of Array.isArray(e)?e:[]){if("SUPER_ADMIN"===t||"IAM_ADMIN"===t)return"ADMIN";if("OPERATOR"===t)return"OPERATOR";if("VIEWER"===t)break}return"VIEWER"}(l.roles),provider:"hive",sessionId:d,ttl:h}}async function j(e,t){if("hive"!==e.provider)return null;if(!e.sessionId||!/^[A-Za-z0-9_-]{43}$/.test(e.sessionId))throw Error("Invalid Hive session");let r=new URL(process.env.CONTROL_API_URL);if(new URL(t).origin!==r.origin)throw Error("Hive delegation is limited to the canonical Control API");let i=await (await k()).get(`magnus:hive:session:${e.sessionId}`);if(!i)throw Error("Hive session expired");let a=S(i,e.sessionId);if(a.userId!==e.userId||a.expiresAt<=Date.now()/1e3)throw Error("Hive session identity expired");return a.accessToken}async function D(e){"hive"===e.provider&&e.sessionId&&await (await k()).del(`magnus:hive:session:${e.sessionId}`)}e.s(["m",0,R,"N",0,O,"o",0,j,"r",0,_,"D",0,D],69464)}];
+module.exports=[69464,e=>{"use strict";let t,r;var i=e.i(66680),o=e.i(65466),n=e.i(92449),a=e.i(16760),s=e.i(83817);async function c(e,t,r){let i=e.get(t)||e.set(t,{}).get(t),{alg:a}=r;if(void 0===i[a]){let e=(0,n.e)(r,t,!0).then(e=>{if("public"!==e.type)throw new o.P("JSON Web Key Set members must be public keys");return i[a]=e,e}).catch(t=>{throw i[a]===e&&delete i[a],t});i[a]=e}return i[a]}function u(e){let t;try{t=structuredClone(e)}catch(e){throw new o.P("JSON Web Key Set malformed",{cause:e})}if(!(0,s.q)(t))throw new o.P("JSON Web Key Set malformed");let r=t.keys.map(e=>{let t=(0,n.C)(e);return Array.isArray(t.key_ops)&&(t.key_ops=[...t.key_ops]),t}),i=new WeakMap;return Object.defineProperty(async(e,n)=>{let{alg:s,kid:u}={...e,...n?.header},l="string"==typeof s?a.K[s]:void 0;if(!l||l.secret)throw new o.u('Unsupported "alg" value for a JSON Web Key Set');let f=t.keys.filter((e,t)=>(function(e,t,r,i){let{kty:o,key_ops:n,ext:a,kid:s,alg:c,use:u,crv:l}=e;return(void 0===a||"boolean"==typeof a)&&(void 0===n||Array.isArray(n)&&n.every((e,t)=>"string"==typeof e&&n.indexOf(e)===t)&&n.includes("verify"))&&t.kty.includes(o)&&(void 0===i||"string"==typeof i&&i===s)&&(void 0===c?"AKP"!==o:r===c)&&(void 0===u||"sig"===u)&&(!t.crv||l===t.crv)})(r[t],l,s,u)),{0:d,length:h}=f;if(!h)throw new o.W;if(1!==h){let e=new o.o;throw e[Symbol.asyncIterator]=async function*(){for(let e of f)try{yield await c(i,e,l)}catch{}},e}return c(i,d,l)},"jwks",{value:()=>structuredClone(t)})}(typeof navigator>"u"||!navigator.userAgent?.startsWith?.("Mozilla/5.0 "))&&(t="jose/v6.2.14");let l=Symbol();async function f(e,t,r,i=fetch){let n=await i(e,{method:"GET",signal:r,redirect:"manual",headers:t}).catch(e=>{throw"TimeoutError"===e.name?new o.B(void 0,{cause:e}):e});if(200!==n.status)throw new o.J("Expected 200 OK from the JSON Web Key Set HTTP response");try{return await n.json()}catch(e){throw new o.J("Failed to parse the JSON Web Key Set HTTP response as JSON",{cause:e})}}let d=Symbol();function h(e,t){return Number.isFinite(e)&&Date.now()<e+t}function p(e,t,r){if(Number.isNaN(e))throw TypeError(`"${r}" option must not be NaN`);return"number"==typeof e?e:t}var w=e.i(9939),y=e.i(42512),g=e.i(54213),v=e.i(32168);async function m(){let e=(r||(r=new y.Redis(process.env.REDIS_URL??"redis://127.0.0.1:6379",{maxRetriesPerRequest:1,enableOfflineQueue:!1,lazyConnect:!0})).on("error",()=>void 0),r);return"wait"===e.status&&await e.connect(),e}let b=()=>(0,i.createHash)("sha256").update("magnus:hive-session:v1\0").update((0,g._)()).digest();function E(e,t){let r=(0,i.randomBytes)(12),o=(0,i.createCipheriv)("aes-256-gcm",b(),r);o.setAAD(Buffer.from(t));let n=Buffer.concat([o.update(JSON.stringify(e)),o.final()]);return Buffer.concat([r,o.getAuthTag(),n]).toString("base64url")}function _(e,t){let r=Buffer.from(e,"base64url"),o=(0,i.createDecipheriv)("aes-256-gcm",b(),r.subarray(0,12));return o.setAAD(Buffer.from(t)),o.setAuthTag(r.subarray(12,28)),JSON.parse(Buffer.concat([o.update(r.subarray(28)),o.final()]).toString("utf8"))}function S(){return(0,v.r)(process.env)}async function A(e,t){let r=await fetch(e,{...t,redirect:"error",signal:AbortSignal.timeout(8e3),cache:"no-store"});if(!r.ok)throw Error("Hive identity request failed");let i=r.body?.getReader();if(!i)throw Error("Empty Hive response");let o=[],n=0;try{for(;;){let e=await i.read();if(e.done)break;if((n+=e.value.byteLength)>65536)throw Error("Hive identity response too large");o.push(e.value)}}finally{await i.cancel()}return JSON.parse(Buffer.concat(o).toString("utf8"))}async function I(){let e=function(){if(!S())throw Error("Hive login is not configured");let e=new URL(process.env.HIVE_OAUTH_DISCOVERY_URL),t=new URL(process.env.DASHBOARD_PUBLIC_ORIGIN);if([e,t].some(e=>"https:"!==e.protocol||e.username||e.password||e.hash))throw Error("Hive login requires HTTPS");return{discovery:e,origin:t,clientId:process.env.HIVE_OAUTH_CLIENT_ID,issuer:process.env.HIVE_OAUTH_ISSUER,audience:process.env.HIVE_OAUTH_API_AUDIENCE,callback:`${t.origin}/api/auth/hive/callback`}}(),t=await A(e.discovery.toString());if(t.issuer!==e.issuer)throw Error("Hive issuer mismatch");for(let r of["authorization_endpoint","token_endpoint","jwks_uri"]){if("string"!=typeof t[r])throw Error("Incomplete Hive discovery");let i=new URL(t[r]);if(i.origin!==e.discovery.origin||i.username||i.password)throw Error("Unexpected Hive endpoint origin")}return{config:e,doc:t}}async function k(){let{config:e,doc:t}=await I(),r=(0,i.randomBytes)(32).toString("base64url"),o=(0,i.randomBytes)(32).toString("base64url");await (await m()).set(`magnus:hive:oauth:${r}`,E({verifier:o,callback:e.callback},r),"EX",300);let n=new URL(t.authorization_endpoint);return n.search=new URLSearchParams({response_type:"code",client_id:e.clientId,redirect_uri:e.callback,scope:process.env.HIVE_OAUTH_SCOPE??"openid profile email",state:r,code_challenge:(0,i.createHash)("sha256").update(o).digest("base64url"),code_challenge_method:"S256"}).toString(),{state:r,url:n.toString()}}async function R(e,r){if(!/^[A-Za-z0-9_-]{43}$/.test(e)||!r||r.length>4096)throw Error("Invalid OAuth callback");let n=await (await m()).getdel(`magnus:hive:oauth:${e}`);if(!n)throw Error("OAuth state expired or already consumed");let a=_(n,e),{config:c,doc:y}=await I();if(a.callback!==c.callback)throw Error("Callback configuration changed");let g=await A(y.token_endpoint,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"authorization_code",code:r,client_id:c.clientId,redirect_uri:c.callback,code_verifier:a.verifier,...process.env.HIVE_OAUTH_CLIENT_SECRET?{client_secret:process.env.HIVE_OAUTH_CLIENT_SECRET}:{}})});if("string"!=typeof g.access_token)throw Error("Missing Hive access token");let{payload:v}=await (0,w.f)(g.access_token,function(e){if(!(e instanceof URL))throw TypeError("url must be an instance of URL");let r=new URL(e.href).href,i=(void 0)??{},n=i.timeoutDuration;if("number"==typeof n&&(!Number.isInteger(n)||n<0))throw TypeError('"timeoutDuration" option must be a non-negative integer');let a="number"==typeof n?n:5e3,c=p(i.cooldownDuration,3e4,"cooldownDuration"),w=p(i.cacheMaxAge,6e5,"cacheMaxAge"),y=new Headers(i.headers);t&&!y.has("User-Agent")&&y.set("User-Agent",t),y.has("accept")||y.set("accept","application/json, application/jwk-set+json");let g=i[l],v=i[d],m,b,E=0,_=0,S;if(v&&"object"==typeof v){let{uat:e,jwks:t}=v;h(e,w)&&(0,s.q)(t)&&(m=e,S=u(t))}let A=async()=>{if(b&&("u">typeof WebSocketPair||"u">typeof navigator&&"Cloudflare-Workers"===navigator.userAgent||"u">typeof EdgeRuntime&&"vercel"===EdgeRuntime)&&(b=void 0),!b){let e=++E,t=b=f(r,y,AbortSignal.timeout(a),g).then(t=>{let r=u(t);if(e<=_)return;S=r;let i=Date.now();v&&(v.uat=i,v.jwks=t),m=i,_=e}).finally(()=>{b===t&&(b=void 0)})}await b};return Object.defineProperties(async(e,t)=>{S&&h(m,w)||await A();try{return await S(e,t)}catch(r){if(r instanceof o.W&&!h(m,c))return await A(),S(e,t);throw r}},{coolingDown:{get:()=>h(m,c),enumerable:!0},fresh:{get:()=>h(m,w),enumerable:!0},reload:{value:A,enumerable:!0},reloading:{get:()=>!!b,enumerable:!0},jwks:{value:()=>S?.jwks(),enumerable:!0}})}(new URL(y.jwks_uri)),{algorithms:["RS256"],issuer:c.issuer,audience:c.audience});if(!v.sub||!v.exp||"SERVICE_ACCOUNT"===v.actorType)throw Error("Named user identity required");let b=Math.min(3600,v.exp-Math.floor(Date.now()/1e3));if(b<=0)throw Error("Hive session expired");let S=(0,i.randomBytes)(32).toString("base64url");return await (await m()).set(`magnus:hive:session:${S}`,E({accessToken:g.access_token,userId:v.sub,expiresAt:v.exp},S),"EX",b),{username:String(v.preferred_username??v.sub),userId:v.sub,role:function(e){for(let t of Array.isArray(e)?e:[]){if("SUPER_ADMIN"===t||"IAM_ADMIN"===t)return"ADMIN";if("OPERATOR"===t)return"OPERATOR";if("VIEWER"===t)break}return"VIEWER"}(v.roles),provider:"hive",sessionId:S,ttl:b}}async function O(e,t){if("hive"!==e.provider)return null;if(!e.sessionId||!/^[A-Za-z0-9_-]{43}$/.test(e.sessionId))throw Error("Invalid Hive session");let r=new URL(process.env.CONTROL_API_URL);if(new URL(t).origin!==r.origin)throw Error("Hive delegation is limited to the canonical Control API");let i=await (await m()).get(`magnus:hive:session:${e.sessionId}`);if(!i)throw Error("Hive session expired");let o=_(i,e.sessionId);if(o.userId!==e.userId||o.expiresAt<=Date.now()/1e3)throw Error("Hive session identity expired");return o.accessToken}async function H(e){"hive"===e.provider&&e.sessionId&&await (await m()).del(`magnus:hive:session:${e.sessionId}`)}e.s(["m",0,k,"N",0,R,"o",0,O,"r",0,S,"D",0,H],69464)}];
 
 //# sourceMappingURL=apps_dashboard_src_lib_hive-login_ts_0ab2iq7-rpy13._.js.map