@indx-workspace/embedded 0.0.0-bootstrap → 0.3.0

package/dist/web/.next-embedded/server/chunks/7395.js

@@ -0,0 +1 @@
+exports.id=7395,exports.ids=[7395],exports.modules={20532:(a,b,c)=>{"use strict";c.d(b,{gP:()=>e,gg:()=>d});let d=["owner","admin","builder","viewer"];function e(a){return"string"!=typeof a?null:d.find(b=>b===a)??null}},27437:(a,b,c)=>{"use strict";c.d(b,{eZ:()=>d,LS:()=>f,vj:()=>q,_Y:()=>e,ur:()=>g,Dh:()=>r});let d=["agents","api-keys","audit-events","connectors","engines","files","invitations","me","memberships","metrics","model-connections","models","projects","runs","runtime-connections","runtime-profiles","runtimes","secrets","sessions","shares","sharing-policies","skills","setup","tokens","users","workspaces"];function e(a){return"string"!=typeof a?null:d.find(b=>b===a)??null}let f=function(a,b){let c={...a},d=new Map;for(let[b,c]of Object.entries(a))for(let a of c)d.set(`${b}/${a}`,"apps/web/server/rbac/permissions.ts");for(let a of b){let b=`${a.resource}/${a.sub}`,e=d.get(b);if(void 0!==e)throw Error(`${a.owner} declares "${a.sub}" as a sub-resource of "${a.resource}", and ${e} already classifies it. One classification per (resource, sub) pair: two tasks deciding the same thing separately is what apps/web/server/rbac/declared-sub-resources.ts exists to prevent, so this is refused rather than de-duplicated.`);d.set(b,`apps/web/server/rbac/declarations/${a.owner}.ts`),c[a.resource]=[...c[a.resource],a.sub]}return Object.freeze(c)}({agents:["runs"],"api-keys":[],"audit-events":[],connectors:[],engines:[],files:[],invitations:[],me:[],memberships:[],metrics:[],"model-connections":[],models:[],projects:[],runs:["events"],"runtime-connections":[],"runtime-profiles":[],runtimes:[],secrets:[],sessions:["messages"],shares:[],"sharing-policies":[],skills:[],setup:[],tokens:[],users:[],workspaces:[]},[{owner:"DJ-80-08-PROMOTE-ROLLBACK-615",resource:"agents",sub:"promote",because:"\xa721 gives Builder and Admin agent-management access, and a promote points the production environment at a saved version of the agent definition, the same pointer move DJ-S1-06-AGENT-POINTERS-444 declared, so it inherits the parent agent authorization exactly as pointers do."},{owner:"DJ-80-08-PROMOTE-ROLLBACK-615",resource:"agents",sub:"rollback",because:"\xa721 gives Builder and Admin agent-management access, and a rollback points an environment back at a saved version of the agent definition it pointed at before, the same pointer move DJ-S1-06-AGENT-POINTERS-444 declared, so it inherits the parent agent authorization exactly as pointers do."},{owner:"DJ-80-11-EVALUATIONS-618",resource:"agents",sub:"evaluations",because:"\xa721 gives Builder and Admin agent-management access, and an evaluation scores a saved version of the agent definition and stores that score against it, so it is part of managing the agent and inherits the parent agent authorization exactly as DJ-S1-05-AGENT-VERSIONS-443 declared versions do."},{owner:"DJ-80-13-FEEDBACK-LIST-620",resource:"agents",sub:"feedback",because:"\xa721 lets every role read the agents of its workspace, and the ratings of an agent’s runs are read to improve that agent definition, so the list is a read of the agent; the handler then narrows the rows to the runs the caller’s own `runs` grant reads, exactly as `GET /api/runs` does."},{owner:"DJ-S1-05-AGENT-VERSIONS-443",resource:"agents",sub:"versions",because:"\xa721 gives Builder and Admin agent-management access, and ADR-0101 makes a version a numbered snapshot of the agent definition itself, so saving or listing one inherits the parent agent authorization exactly as SDK-02-AGENT-POLICY-234 declared policy does."},{owner:"DJ-S1-06-AGENT-POINTERS-444",resource:"agents",sub:"pointers",because:"\xa721 gives Builder and Admin agent-management access, and ADR-0101 makes an environment pointer the choice of which saved version of the agent definition runs, so moving one rewrites the agent itself and inherits the parent agent authorization exactly as DJ-S1-05-AGENT-VERSIONS-443 declared versions do."},{owner:"DJ-S2-05C-RUN-FEEDBACK-539",resource:"runs",sub:"feedback",because:'rating the answer a run gave you is part of running it, the same \xa721 verb as `interrupt` (SDK-03-RUN-CONTROL-235): Builder "Create/edit/run agents" and Viewer "Run permitted agents" both reach it for their own runs, so `parseOperation` reads its POST as `run`, not a write.'},{owner:"ENG-06-SESSION-STATE-305",resource:"sessions",sub:"state-entries",because:'\xa721 Viewer — "view their own sessions" — and Builder — "share own agents, projects and sessions". A session\'s engine state is what \xa720 makes the durable store exist for and what \xa714.9 calls "the Agent SDK session state, not only the session id", generalised past one engine. Reading, appending to or clearing it is reading, writing or clearing the session.'},{owner:"ENG-06-SESSION-STATE-305",resource:"sessions",sub:"state-streams",because:'\xa720 lists "Resume session" among the operations the platform must support, and a resume restores every stream the session has. A stream key names state of this same session, so listing them is reading the session; \xa721 gives no separate capability over them.'},{owner:"ENG-06-SESSION-STATE-305",resource:"sessions",sub:"state-blobs",because:"the same reading as state-entries, for an engine whose state is a file snapshot rather than an entry list. A blob is the session's own conversation in another shape, not a file the tenant owns — \xa716's files are a separate resource with their own grants, and nothing here touches them."},{owner:"SDK-02-AGENT-POLICY-234",resource:"agents",sub:"policy",because:"\xa721 gives Builder and Admin agent-management access, and \xa717 Step 4 makes the tool, skill and limit policy part of the agent definition it already governs, so it inherits the parent agent authorization exactly as W1-CP-05 declared resources does."},{owner:"SDK-03-RUN-CONTROL-235",resource:"runs",sub:"interrupt",because:'\xa721 names stopping a run you started as part of running it — Builder "Create/edit/run agents" and Viewer "Run permitted agents" both use "run" for the same verb `parseOperation` already reads a run-starting POST as, so an interrupt is that verb and not a write.'},{owner:"SDK-03-RUN-CONTROL-235",resource:"runs",sub:"revoke-tokens",because:"the rename of the existing `POST /api/runs/:id` (W1-CP-04, spec \xa724) to a named path: the capability and its role gate are unchanged, so the new path inherits the same parent classification the old one always had."},{owner:"SDK-05-AUTH-237",resource:"agents",sub:"grants",because:'\xa721 gives Viewer read access to agents and "Run permitted agents": GET treats the grant list as part of the parent agent row, while PUT applies the parent agent write width.'},{owner:"W1-CP-05",resource:"agents",sub:"resources",because:"\xa721 gives Builder and Admin agent-management access; \xa717 Step 3 makes resource assignments part of the agent definition, so they inherit the parent agent authorization."},{owner:"W2-CP-05",resource:"connectors",sub:"test-connection",because:'\xa721 Builder — "Create/edit/run agents, skills, files, connectors where permitted" — and Admin — "Users, agents, models, API keys, connectors, runtimes." Test Connection resolves and uses the connector\'s own stored credential, which is at least as sensitive as writing the connector row, so it is classified under the parent resource\'s generic write width rather than carved out narrower with no evidence for a different one.'},{owner:"W2-CP-07",resource:"sessions",sub:"transcript",because:'\xa721 Viewer — "view their own sessions" — and Builder — "share own agents, projects and sessions". A session\'s transcript is what \xa720 makes the SessionStore durable for and what \xa714.9 calls "the Agent SDK session state, not only the session id", so reading, appending to or archiving it is reading, writing or archiving the session. Same reading permissions.ts records for runs/events.'},{owner:"W2-CP-07",resource:"sessions",sub:"subkeys",because:'\xa720 lists "Resume session" among the operations the platform must support, and R-01 \xa77 makes a subagent transcript part of what a resume restores. A subkey names a transcript of this same session, so listing them is reading the session; \xa721 gives no separate capability over them.'},{owner:"W4-CP-08",resource:"model-connections",sub:"test",because:"Section 13 makes Test Connection an operation on one saved provider connection, so it inherits the model-connections grants rather than becoming a separate resource."},{owner:"W5-CP-02",resource:"projects",sub:"sessions",because:"Section 20.5 makes membership of a session an operation on its project, so moving one inherits the project grants."},{owner:"W9-PROJ-183",resource:"projects",sub:"archive",because:"Section 20.5 makes a project the owner of its own contents and lifecycle, so retiring one is a write on that project rather than an operation on a resource of its own."},{owner:"W9-PROJ-183",resource:"projects",sub:"restore",because:"The inverse transition of the same lifecycle, so it inherits the same project grants as archive rather than being classified separately."},{owner:"W9-PROV-126",resource:"model-connections",sub:"credential",because:'Issue #126 makes credential rotation a write-only operation on one saved provider connection, the same relationship W4-CP-08 already established for "test" under this resource, so it inherits the model-connections grants rather than becoming a separate resource.'},{owner:"W9-TEAM-121",resource:"invitations",sub:"resend",because:"Issue #121: resending a pending invitation — minting a fresh token and expiry for the same row — is administering the invitation, the same operation `PATCH /api/memberships/:id` is for a membership. It inherits `invitations`' own grants rather than becoming a separate resource."}]);function g(a,b){return"string"!=typeof b?null:f[a].find(a=>a===b)??null}let h={read:"none",write:"none",run:"none"},i={read:"any",write:"any",run:"any"},j={read:"any",write:"any",run:"none"},k={read:"any",write:"own",run:"own"},l={read:"own",write:"own",run:"none"},m={read:"own",write:"none",run:"none"},n={read:"any",write:"none",run:"none"},o={read:"own",write:"own",run:"none"},p={owner:{because:'\xa721 Owner — "Everything."',fallback:i,byResource:{workspaces:o}},admin:{because:'\xa721 Admin — "Users, agents, models, API keys, connectors, runtimes."',fallback:h,byResource:{agents:i,"api-keys":j,connectors:j,memberships:j,invitations:j,me:n,metrics:n,engines:n,"model-connections":j,models:j,"runtime-profiles":j,runtimes:j,"runtime-connections":j,shares:j,"sharing-policies":n,users:j,sessions:l,runs:{...n,run:"any"},workspaces:o,tokens:{read:"none",write:"any",run:"none"}}},builder:{because:'\xa721 Builder — "Create/edit/run agents, skills, files, connectors where permitted."',fallback:h,byResource:{agents:k,skills:k,files:k,connectors:k,"runtime-profiles":n,projects:l,sessions:l,shares:l,"sharing-policies":n,runs:{...m,run:"own"},me:n,metrics:n,engines:n,workspaces:o,tokens:{read:"none",write:"own",run:"none"}}},viewer:{because:'\xa721 Viewer — "Run permitted agents and view their own sessions."',fallback:h,byResource:{agents:{read:"any",write:"none",run:"permitted"},sessions:m,runs:{...m,run:"own"},shares:l,"sharing-policies":n,me:n,metrics:n,engines:n,workspaces:o}}};function q(a,b){let c=p[a];return c.byResource[b]??c.fallback}function r(a){return p[a].because}},3e4:(a,b,c)=>{"use strict";c.d(b,{EH:()=>i,O1:()=>g,VC:()=>h});var d=c(24147),e=c(85057);let f=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;function g(a){return"string"==typeof a&&f.test(a)}let h=d.YjP().regex(f,"must be a UUID"),i=e.w$()},31986:()=>{},55546:()=>{},82333:(a,b,c)=>{"use strict";c.d(b,{LD:()=>k});var d=c(3e4);let e="/api";function f(a,b){return a===b||a.startsWith(`${b}/`)}var g=c(27437),h=c(20532);let i=["GET","HEAD","POST","PUT","PATCH","DELETE","OPTIONS"],j={run:[{resource:"runs",operation:"read"}],session:[{resource:"runs",operation:"read"},{resource:"agents",operation:"run"},{resource:"runs",operation:"run",sub:"feedback"}]};function k(a){let b=(0,h.gP)(a.role);if(null===b)return{effect:"refuse",because:`${JSON.stringify(a.role)} is not one of spec \xa721's four roles, so no row of the permission table applies to it.`};let c=function(a){if("string"!=typeof a)return{surface:"api",reason:`pathname is ${typeof a}, not a string — denied`};if(0===a.length||!a.startsWith("/"))return{surface:"api",reason:"pathname is not an absolute path — denied"};let b=function(a){let b=new Set,c=a;for(let a=0;a<4;a+=1){let a,d=c.replace(/\\/gu,"/");b.add(d),b.add(function(a){let b=[];for(let c of a.split("/"))if(""!==c&&"."!==c){if(".."===c){b.pop();continue}b.push(c)}return`/${b.join("/")}`}(d));try{a=decodeURIComponent(d)}catch{return null}if(a===d)break;c=a}return[...b]}(a);if(null===b)return{surface:"api",reason:"pathname contains an invalid percent-escape — denied"};let c=b.find(a=>f(a.toLowerCase(),e));return void 0!==c?{surface:"api",reason:`"${c}" is under ${e}/ — session required`}:b.every(a=>f(a,"/p"))?{surface:"public",reason:"every reading is under /p/ — spec \xa734 public surface"}:{surface:"page",reason:"browser page surface — neither /api/ nor /p/"}}(a.path);switch(c.surface){case"public":return{effect:"allow",because:`spec \xa734 public surface: ${c.reason}`,facts:null};case"page":return{effect:"refuse",because:`"${a.path}" is a browser page, not a control-plane route (${c.reason}). Page-level authorisation is the server component's, and this table does not decide it.`};case"api":break;default:{let a=c.surface;throw Error(`unclassified surface ${JSON.stringify(a)} — refusing to allow`)}}let k=function(a){let[b,c,d,...e]=a.split("/");if(""!==b||"api"!==c||void 0===d)return{ok:!1,because:`"${a}" does not begin /api/<resource>, so this table cannot say which resource it acts on.`};let f=(0,g._Y)(d);if(null===f)return{ok:!1,because:`"${d}" is not a resource spec \xa721's permission split classifies. Add it to RESOURCES in apps/web/server/rbac/permissions.ts together with the grants each of the four roles has over it, citing the sentence of \xa721 that decides them. An unclassified resource is refused, not allowed (ADR-0015).`};if(0===e.length)return{ok:!0,resource:f,sub:null,id:null};if(1===e.length)return{ok:!0,resource:f,sub:null,id:e[0]??null};if(2===e.length){let a=e[1],b=(0,g.ur)(f,a);if(null===b){let b=g.LS[f];return{ok:!1,because:`"${String(a)}" is not a sub-resource spec \xa721's permission split classifies under "${f}" (`+(0===b.length?"no sub-resource of it is classified":`classified: ${b.join(", ")}`)+"). Add it to SUB_RESOURCES in apps/web/server/rbac/permissions.ts with the reading of \xa721 that decides its grants, or classify it as a resource of its own. An unclassified sub-resource is refused, never given its parent's grant (ADR-0015)."}}return{ok:!0,resource:f,sub:b,id:e[0]??null}}return{ok:!1,because:`"${a}" is deeper than /api/<resource>/:id/<sub>, which is the deepest shape \xa734 admits.`}}(a.path);if(!k.ok)return{effect:"refuse",because:k.because};if("POST"===a.method&&"runs"===k.resource&&null!==k.id&&(null===k.sub||"revoke-tokens"===k.sub)){if(null!==a.scope)return{effect:"deny",code:"token_out_of_scope",facts:null,because:"a browser token’s scope does not reach revoking run tokens."};let c="owner"===b||"admin"===b?"any":"none",d={resource:"runs",operation:"revoke",grant:c};return"any"===c?{effect:"allow",facts:d,because:"Owner and Admin may revoke run tokens."}:{effect:"deny",code:"run_token_revoke_forbidden",facts:d,because:"only a workspace owner or admin may revoke active run tokens."}}let l=function(a,b){if("POST"===a&&("runs"===b||"messages"===b||"interrupt"===b||"feedback"===b))return{ok:!0,operation:"run"};switch(a){case"GET":case"HEAD":return{ok:!0,operation:"read"};case"POST":case"PUT":case"PATCH":case"DELETE":return{ok:!0,operation:"write"};case"OPTIONS":return{ok:!1,because:"OPTIONS is not an operation spec \xa721 classifies, and this repository declares no OPTIONS route. Decide what it means before shipping one."};default:return{ok:!1,because:`"${a}" is not an HTTP method a Next.js route handler exports (${i.join(", ")}), so no operation can be derived from it.`}}}(a.method,k.sub);if(!l.ok)return{effect:"refuse",because:l.because};if(null!==a.scope){let b=function(a,b,c,e,f){let g=j[a.kind];if(void 0===g.find(a=>a.resource===b&&a.operation===c&&(void 0===a.sub||a.sub===e))){let d=(a,b)=>null==b?`"${a}"`:`"${a}/${b}"`;return{effect:"deny",code:"token_out_of_scope",facts:null,because:`a ${a.kind}-scoped browser token may only reach ${g.map(a=>`${a.operation} on ${d(a.resource,a.sub)}`).join(", ")}, and ${c} on ${d(b,e)} is neither.`}}if("runs"===b&&"read"===c&&null===f)return{effect:"deny",code:"token_out_of_scope",facts:null,because:`a ${a.kind}-scoped browser token may read one run by id, never the workspace's run list, and "${b}" here names no ":id".`};let h=f===a.id||(0,d.O1)(f)&&(0,d.O1)(a.id)&&f.toLowerCase()===a.id.toLowerCase();return"run"!==a.kind||"runs"!==b||h?null:{effect:"deny",code:"token_out_of_scope",facts:null,because:`this run-scoped browser token is scoped to run ${a.id}, and the ":id" segment of this request names a different row.`}}(a.scope,k.resource,l.operation,k.sub,k.id);if(null!==b)return b}let m=(0,g.vj)(b,k.resource)[l.operation],n=function(a,b){switch(a){case"any":return{allowed:!0,because:"the grant covers every row in the workspace"};case"own":if("own"===b)return{allowed:!0,because:"the row is the caller’s own"};if("not-applicable"===b)return{allowed:!0,because:"the grant covers the caller’s own rows and this route names no single row; the handler owes the result set the same filter"};return{allowed:!1,because:"other"===b?"the grant covers the caller’s own rows and this row is another member’s":"the grant covers the caller’s own rows and the handler could not establish whose this is; an undetermined owner denies rather than passes (ADR-0031)"};case"permitted":if("permitted"===b)return{allowed:!0,because:"an agent_grants row names this caller and this agent"};return{allowed:!1,because:"other"===b?"spec \xa721 grants this only for rows an agent_grants row names, and this row is not one of them":"spec \xa721 grants this only for rows an agent_grants row names, and the handler could not establish that; an undetermined grant denies rather than passes (ADR-0031)"};case"none":return{allowed:!1,because:"the role has no grant over this resource"};default:throw Error(`unclassified grant ${JSON.stringify(a)} — refusing to allow`)}}(m,a.ownership),o={resource:k.resource,operation:l.operation,grant:m},p=`${(0,g.Dh)(b)} → ${l.operation} on "${k.resource}" is granted "${m}", and ${n.because}.`;return n.allowed?{effect:"allow",because:p,facts:o}:{effect:"deny",because:p,facts:o}}}};

package/dist/web/.next-embedded/server/chunks/7466.js

@@ -0,0 +1 @@
+"use strict";exports.id=7466,exports.ids=[7466],exports.modules={9176:(a,b,c)=>{c.d(b,{W:()=>j});var d=c(99832);let e="X-Amz-S3session-Token",f=e.toLowerCase();class g extends d.B{async signWithCredentials(a,b,c){let d=h(b);return a.headers[f]=b.sessionToken,i(this,d),this.signRequest(a,c??{})}async presignWithCredentials(a,b,c){let d=h(b);return delete a.headers[f],a.headers[e]=b.sessionToken,a.query=a.query??{},a.query[e]=b.sessionToken,i(this,d),this.presign(a,c)}}function h(a){return{accessKeyId:a.accessKeyId,secretAccessKey:a.secretAccessKey,expiration:a.expiration}}function i(a,b){let c=a.credentialProvider;a.credentialProvider=()=>(a.credentialProvider=c,Promise.resolve(b))}class j{sigv4aSigner;sigv4Signer;signerOptions;static sigv4aDependency(){return"none"}constructor(a){this.sigv4Signer=new g(a),this.signerOptions=a}async sign(a,b={}){return"*"===b.signingRegion?this.getSigv4aSigner().sign(a,b):this.sigv4Signer.sign(a,b)}async signWithCredentials(a,b,c={}){if("*"===c.signingRegion){let a=this.getSigv4aSigner();!1;throw Error('signWithCredentials with signingRegion \'*\' is only supported when using the CRT dependency @aws-sdk/signature-v4-crt. Please check whether you have installed the "@aws-sdk/signature-v4-crt" package explicitly. You must also register the package by calling [require("@aws-sdk/signature-v4-crt");] or an ESM equivalent such as [import "@aws-sdk/signature-v4-crt";]. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt')}return this.sigv4Signer.signWithCredentials(a,b,c)}async presign(a,b={}){if("*"===b.signingRegion){let a=this.getSigv4aSigner();!1;throw Error('presign with signingRegion \'*\' is only supported when using the CRT dependency @aws-sdk/signature-v4-crt. Please check whether you have installed the "@aws-sdk/signature-v4-crt" package explicitly. You must also register the package by calling [require("@aws-sdk/signature-v4-crt");] or an ESM equivalent such as [import "@aws-sdk/signature-v4-crt";]. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt')}return this.sigv4Signer.presign(a,b)}async presignWithCredentials(a,b,c={}){if("*"===c.signingRegion)throw Error("Method presignWithCredentials is not supported for [signingRegion=*].");return this.sigv4Signer.presignWithCredentials(a,b,c)}getSigv4aSigner(){if(!this.sigv4aSigner)if("node"===this.signerOptions.runtime){!0;throw Error("Neither CRT nor JS SigV4a implementation is available. Please load either @aws-sdk/signature-v4-crt or @aws-sdk/signature-v4a. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt")}else{!0;throw Error("JS SigV4a implementation is not available or not a valid constructor. Please check whether you have installed the @aws-sdk/signature-v4a package explicitly. The CRT implementation is not available for browsers. You must also register the package by calling [require('@aws-sdk/signature-v4a');] or an ESM equivalent such as [import '@aws-sdk/signature-v4a';]. For more information please go to https://github.com/aws/aws-sdk-js-v3#using-javascript-non-crt-implementation-of-sigv4a")}return this.sigv4aSigner}}},97466:(a,b,c)=>{let d;c.d(b,{getDefaultRoleAssumer:()=>b3,getDefaultRoleAssumerWithWebIdentity:()=>b4});var e,f,g=c(42153),h=c(11864);let i=!1;var j=c(76766),k=c(34335),l=c(8830);let m=(0,k.k)({UseGlobalEndpoint:{type:"builtInParams",name:"useGlobalEndpoint"},UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},"AWSSecurityTokenServiceV20110615","STSClient",l.rD),n={},o=(a,b,c,d)=>[];var p=c(71441),q=c(19535);class r extends q.T{constructor(a){super(a),Object.setPrototypeOf(this,r.prototype)}}class s extends r{name="ExpiredTokenException";$fault="client";constructor(a){super({name:"ExpiredTokenException",$fault:"client",...a}),Object.setPrototypeOf(this,s.prototype)}}class t extends r{name="MalformedPolicyDocumentException";$fault="client";constructor(a){super({name:"MalformedPolicyDocumentException",$fault:"client",...a}),Object.setPrototypeOf(this,t.prototype)}}class u extends r{name="PackedPolicyTooLargeException";$fault="client";constructor(a){super({name:"PackedPolicyTooLargeException",$fault:"client",...a}),Object.setPrototypeOf(this,u.prototype)}}class v extends r{name="RegionDisabledException";$fault="client";constructor(a){super({name:"RegionDisabledException",$fault:"client",...a}),Object.setPrototypeOf(this,v.prototype)}}class w extends r{name="IDPRejectedClaimException";$fault="client";constructor(a){super({name:"IDPRejectedClaimException",$fault:"client",...a}),Object.setPrototypeOf(this,w.prototype)}}class x extends r{name="InvalidIdentityTokenException";$fault="client";constructor(a){super({name:"InvalidIdentityTokenException",$fault:"client",...a}),Object.setPrototypeOf(this,x.prototype)}}class y extends r{name="IDPCommunicationErrorException";$fault="client";$retryable={};constructor(a){super({name:"IDPCommunicationErrorException",$fault:"client",...a}),Object.setPrototypeOf(this,y.prototype)}}let z="AssumedRoleUser",A="Credentials",B="DurationSeconds",C="Policy",D="PolicyArns",E="PackedPolicySize",F="RoleArn",G="RoleSessionName",H="SourceIdentity",I="awsQueryError",J="client",K="error",L="httpError",M="message",N="smithy.ts.sdk.synthetic.com.amazonaws.sts",O="com.amazonaws.sts",P=p.O.for(N);var Q=[-3,N,"STSServiceException",0,[],[]];P.registerError(Q,r);let R=p.O.for(O);var S=[-3,O,"ExpiredTokenException",{[I]:["ExpiredTokenException",400],[K]:J,[L]:400},[M],[0]];R.registerError(S,s);var T=[-3,O,"IDPCommunicationErrorException",{[I]:["IDPCommunicationError",400],[K]:J,[L]:400},[M],[0]];R.registerError(T,y);var U=[-3,O,"IDPRejectedClaimException",{[I]:["IDPRejectedClaim",403],[K]:J,[L]:403},[M],[0]];R.registerError(U,w);var V=[-3,O,"InvalidIdentityTokenException",{[I]:["InvalidIdentityToken",400],[K]:J,[L]:400},[M],[0]];R.registerError(V,x);var W=[-3,O,"MalformedPolicyDocumentException",{[I]:["MalformedPolicyDocument",400],[K]:J,[L]:400},[M],[0]];R.registerError(W,t);var X=[-3,O,"PackedPolicyTooLargeException",{[I]:["PackedPolicyTooLarge",400],[K]:J,[L]:400},[M],[0]];R.registerError(X,u);var Y=[-3,O,"RegionDisabledException",{[I]:["RegionDisabledException",403],[K]:J,[L]:403},[M],[0]];R.registerError(Y,v);let Z=[P,R];var $=[0,O,"accessKeySecretType",8,0],_=[0,O,"clientTokenType",8,0],aa=[3,O,z,0,["AssumedRoleId","Arn"],[0,0],2],ab=[3,O,"AssumeRoleRequest",0,[F,G,D,C,B,"Tags","TransitiveTagKeys","ExternalId","SerialNumber","TokenCode",H,"ProvidedContexts"],[0,0,()=>aj,0,1,()=>al,64,0,0,0,0,()=>ak],2],ac=[3,O,"AssumeRoleResponse",0,[A,z,E,H],[[()=>af,0],()=>aa,1,0]],ad=[3,O,"AssumeRoleWithWebIdentityRequest",0,[F,G,"WebIdentityToken","ProviderId",D,C,B],[0,0,[()=>_,0],0,()=>aj,0,1],3],ae=[3,O,"AssumeRoleWithWebIdentityResponse",0,[A,"SubjectFromWebIdentityToken",z,E,"Provider","Audience",H],[[()=>af,0],0,()=>aa,1,0,0,0]],af=[3,O,A,0,["AccessKeyId","SecretAccessKey","SessionToken","Expiration"],[0,[()=>$,0],0,4],4],ag=[3,O,"PolicyDescriptorType",0,["arn"],[0]],ah=[3,O,"ProvidedContext",0,["ProviderArn","ContextAssertion"],[0,0]],ai=[3,O,"Tag",0,["Key","Value"],[0,0],2],aj=[1,O,"policyDescriptorListType",0,()=>ag],ak=[1,O,"ProvidedContextsListType",0,()=>ah],al=[1,O,"tagListType",0,()=>ai],am=[9,O,"AssumeRole",0,()=>ab,()=>ac],an=[9,O,"AssumeRoleWithWebIdentity",0,()=>ad,()=>ae];class ao extends m(n,o,"AssumeRole",am){}class ap extends m(n,o,"AssumeRoleWithWebIdentity",an){}let aq=a=>{if("string"==typeof a?.Arn){let b=a.Arn.split(":");if(b.length>4&&""!==b[4])return b[4]}},ar=async(a,b,c,d={})=>{let e="function"==typeof a?await a():a,f="function"==typeof b?await b():b,j="",k=e??f??(j=await (function(a={}){return(0,g.Z)({...h.GG,default:async()=>(i||console.warn("@aws-sdk - WARN - default STS region of us-east-1 used. See @aws-sdk/credential-providers README and set a region explicitly."),"us-east-1")},{...h.zH,...a})})(d)());return c?.debug?.("@aws-sdk/client-sts::resolveRegion","accepting first of:",`${e} (credential provider clientConfig)`,`${f} (contextual client)`,`${j} (STS default: AWS_REGION, profile region, or us-east-1)`),k},as=a=>a?.metadata?.handlerProtocol==="h2";var at=c(31743),au=c(3960),av=c(4277),aw=c(83365),ax=c(36372),ay=c(93698),az=c(10788),aA=c(26391),aB=c(78252),aC=c(15742),aD=c(55925),aE=c(38559),aF=c(61703),aG=c(14587),aH=c(85857),aI=c(13522),aJ=c(84202);let aK={environmentVariableSelector(a){if(a.AWS_SIGV4A_SIGNING_REGION_SET)return a.AWS_SIGV4A_SIGNING_REGION_SET.split(",").map(a=>a.trim());throw new aJ.m("AWS_SIGV4A_SIGNING_REGION_SET not set in env.",{tryNextLink:!0})},configFileSelector(a){if(a.sigv4a_signing_region_set)return(a.sigv4a_signing_region_set??"").split(",").map(a=>a.trim());throw new aJ.m("sigv4a_signing_region_set not set in profile.",{tryNextLink:!0})},default:void 0};var aL=c(9176),aM=c(35761),aN=c(11844),aO=c(38325),aP=c(84473),aQ=c(70741),aR=c(21284),aS=c(13086),aT=c(84198);let aU="isSet",aV="PartitionResult",aW="booleanEquals",aX="stringEquals",aY="getAttr",aZ="us-east-1",a$="sigv4",a_="https://sts.{Region}.{PartitionResult#dnsSuffix}",a0={ref:"Endpoint"},a1={ref:"Region"},a2={ref:aV},a3={},a4=[a1],a5=new Int32Array([-1,1,-1,0,30,3,1,4,0x5f5e10e,2,5,0x5f5e10e,3,25,6,4,24,7,5,0x5f5e101,8,6,9,0x5f5e10d,7,0x5f5e101,10,10,0x5f5e101,11,11,0x5f5e101,12,12,0x5f5e101,13,13,0x5f5e101,14,14,0x5f5e101,15,15,0x5f5e101,16,16,0x5f5e101,17,17,0x5f5e101,18,18,0x5f5e101,19,19,0x5f5e101,20,20,0x5f5e101,21,21,0x5f5e101,22,22,0x5f5e101,23,23,0x5f5e101,0x5f5e102,8,0x5f5e10b,0x5f5e10c,4,28,26,9,27,0x5f5e10a,24,0x5f5e108,0x5f5e109,8,29,0x5f5e107,9,0x5f5e106,0x5f5e107,3,0x5f5e103,31,4,0x5f5e104,0x5f5e105]),a6=aT.d.from(a5,2,[[aU,[a0]],[aU,a4],["aws.partition",a4,aV],[aW,[{ref:"UseFIPS"},!0]],[aW,[{ref:"UseDualStack"},!0]],[aX,[a1,"aws-global"]],[aW,[{ref:"UseGlobalEndpoint"},!0]],[aX,[a1,"eu-central-1"]],[aW,[{fn:aY,argv:[a2,"supportsDualStack"]},!0]],[aW,[{fn:aY,argv:[a2,"supportsFIPS"]},!0]],[aX,[a1,"ap-south-1"]],[aX,[a1,"eu-north-1"]],[aX,[a1,"eu-west-1"]],[aX,[a1,"eu-west-2"]],[aX,[a1,"eu-west-3"]],[aX,[a1,"sa-east-1"]],[aX,[a1,aZ]],[aX,[a1,"us-east-2"]],[aX,[a1,"us-west-2"]],[aX,[a1,"us-west-1"]],[aX,[a1,"ca-central-1"]],[aX,[a1,"ap-southeast-1"]],[aX,[a1,"ap-northeast-1"]],[aX,[a1,"ap-southeast-2"]],[aX,[{fn:aY,argv:[a2,"name"]},"aws-us-gov"]]],[[-1],["https://sts.amazonaws.com",{authSchemes:[{name:a$,signingName:"sts",signingRegion:aZ}]}],[a_,{authSchemes:[{name:a$,signingName:"sts",signingRegion:"{Region}"}]}],[-1,"Invalid Configuration: FIPS and custom endpoint are not supported"],[-1,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[a0,a3],["https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",a3],[-1,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://sts.{Region}.amazonaws.com",a3],["https://sts-fips.{Region}.{PartitionResult#dnsSuffix}",a3],[-1,"FIPS is enabled but this partition does not support FIPS"],["https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}",a3],[-1,"DualStack is enabled but this partition does not support DualStack"],[a_,a3],[-1,"Invalid Configuration: Missing Region"]]),a7=new aQ.k({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS","UseGlobalEndpoint"]}),a8=(a,b={})=>a7.get(a,()=>(0,aR.c)(a6,{endpointParams:a,logger:b.logger}));aS.m.aws=aP.U;let a9=(d=async(a,b,c)=>({operation:(0,aM.u)(b).operation,region:await (0,aN.t)(a.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}),async(a,b,c)=>{if(!c)throw Error("Could not find `input` for `defaultEndpointRuleSetHttpAuthSchemeParametersProvider`");let e=await d(a,b,c),f=(0,aM.u)(b)?.commandInstance?.constructor?.getEndpointParameterInstructions;if(!f)throw Error(`getEndpointParameterInstructions() is not defined on '${b.commandName}'`);return Object.assign(e,await (0,aO.x)(c,{getEndpointParameterInstructions:f},a))});function ba(a){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sts",region:a.region},propertiesExtractor:(a,b)=>({signingProperties:{config:a,context:b}})}}function bb(a){return{schemeId:"aws.auth#sigv4a",signingProperties:{name:"sts",region:a.region},propertiesExtractor:(a,b)=>({signingProperties:{config:a,context:b}})}}function bc(a){return{schemeId:"smithy.api#noAuth"}}let bd=(e=a=>{let b=[];return"AssumeRoleWithWebIdentity"===a.operation?b.push(bc(a)):b.push(ba(a)),b.push(bb(a)),b},f={"aws.auth#sigv4":ba,"aws.auth#sigv4a":bb,"smithy.api#noAuth":bc},a=>{let b=a8(a),c=b.properties?.authSchemes;if(!c)return e(a);let d=[];for(let b of c){let e,{name:g,properties:h={},...i}=b,j=g.toLowerCase();if(g!==j&&console.warn(`HttpAuthScheme has been normalized with lowercasing: '${g}' to '${j}'`),"sigv4a"===j){e="aws.auth#sigv4a";let a=c.find(a=>{let b=a.name.toLowerCase();return"sigv4a"!==b&&b.startsWith("sigv4")});if("none"===aL.W.sigv4aDependency()&&a)continue}else if(j.startsWith("sigv4"))e="aws.auth#sigv4";else throw Error(`Unknown HttpAuthScheme found in '@smithy.rules#endpointRuleSet': '${j}'`);let k=f[e];if(!k)throw Error(`Could not find HttpAuthOption create function for '${e}'`);let l=k(a);l.schemeId=e,l.signingProperties={...l.signingProperties||{},...i,...h},d.push(l)}return d});var be=c(66553),bf=c(55866),bg=c(60734),bh=c(18029),bi=c(95164),bj=c(7472),bk=c(97869),bl=c(23447);class bm extends bj.f2{async sign(a,b,c){if(!bk.K.isInstance(a))throw Error("The request is not an instance of `HttpRequest` and cannot be signed");let{config:d,signer:e,signingRegion:f,signingRegionSet:g,signingName:h}=await (0,bj.pz)(c),i=(await d.sigv4aSigningRegionSet?.()??g??[f]).join(","),j=await d.disableClockSkewCorrection?.()===!0;return c._disableClockSkewCorrection=j,j||(c._preRequestSystemClockOffset=d.systemClockOffset,c._requestSentAt=Date.now()),await e.sign(a,{signingDate:j?new Date:(0,bl.C)(d.systemClockOffset),signingRegion:i,signingService:h})}}var bn=c(9482),bo=c(53990),bp=c(43213),bq=c(5910),br=c(77528),bs=c(88736),bt=c(79085),bu=c(55721),bv=c(24809),bw=c(34128),bx=c(55634),by=c(74397),bz=c(72982),bA=c(66818);class bB extends bz.t{async serializeRequest(a,b,c){let d,e=this.serializer,f={},g={},h=await c.endpoint(),i=by.l1.of(a?.input),j=i.getSchema(),k=b&&"object"==typeof b?b:{},l=new bk.K({protocol:"",hostname:"",port:void 0,path:"/",fragment:void 0,query:f,headers:g,body:void 0});if(h&&(this.updateServiceEndpoint(l,h),this.setHostPrefix(l,a,k)),k){let a=i.getEventStreamMember();if(a){if(k[a]){let b={};for(let[c]of i.structIterator())c!==a&&null!=k[c]&&(b[c]=k[c]);d=await this.serializeEventStream({eventStream:k[a],requestSchema:i,initialRequest:b})}}else e.write(j,k),d=e.flush()}return l.headers=Object.assign(l.headers,g),l.query=f,l.body=d,l.method="POST",l}async deserializeResponse(a,b,c){let d=this.deserializer,e=by.l1.of(a.output),f={};if(c.statusCode>=300){let e=await (0,bA.P)(c.body,b);throw e.byteLength>0&&Object.assign(f,await d.read(15,e)),await this.handleError(a,b,c,f,this.deserializeMetadata(c)),Error("@smithy/core/protocols - RPC Protocol error handler failed to throw.")}for(let a in c.headers){if(!(0,bx.$)(c.headers,a))continue;let b=c.headers[a];delete c.headers[a],c.headers[a.toLowerCase()]=b}let g=e.getEventStreamMember();if(g)f[g]=await this.deserializeEventStream({response:c,responseSchema:e,initialResponseContainer:f});else{let a=await (0,bA.P)(c.body,b);a.byteLength>0&&Object.assign(f,await d.read(e,a))}return f.$metadata=this.deserializeMetadata(c),f}}var bC=c(69888),bD=c(28486);function bE(a){Object.defineProperty(a,"__proto__",{value:void 0,writable:!0,enumerable:!0,configurable:!0})}class bF{x;i=0;z;constructor(a){this.x=a,this.x=a.replace(/\r\n?/g,"\n"),this.z=this.x.length}parse(){let{z:a}=this;for(;this.i<a&&(this.trim(),!(this.i>=a));)if(this.isNext("<?"))this.readTo("?>"),this.trim();else if(this.isNext("\x3c!--"))this.readTo("--\x3e"),this.trim();else if(this.isNext("<!DOCTYPE",!1))this.skipDoctype(),this.trim();else if("<"===this.x[this.i]){let a=this.parseTag();return{[a.tag]:a.value}}else throw Error("@aws-sdk XML parse error: unexpected content.");throw Error("@aws-sdk XML parse error: no root element.")}isNext(a,b=!0){return b?this.x.startsWith(a,this.i):this.x.toLowerCase().startsWith(a.toLowerCase(),this.i)}readTo(a){let b=this.x.indexOf(a,this.i);if(-1===b)throw Error(`@aws-sdk XML parse error: expected "${a}" not found.`);let c=this.x.slice(this.i,b);return this.i=b+a.length,c}trim(){for(;this.i<this.z&&" 	\r\n".includes(this.x[this.i]);)++this.i}readAttrValue(){let a=this.x[this.i];++this.i;let b="";for(;this.i<this.z&&this.x[this.i]!==a;)b+=this.x[this.i++];return++this.i,this.decodeEntities(b)}parseTag(){++this.i;let a="";for(;this.i<this.z&&!" 	\r\n>/".includes(this.x[this.i]);)a+=this.x[this.i++];let b=!1,c={};for(;this.i<this.z&&(this.trim(),!">/".includes(this.x[this.i]));){let a="";for(;this.i<this.z&&!"= 	\r\n>/?".includes(this.x[this.i]);)a+=this.x[this.i++];if(this.trim(),"="!==this.x[this.i])break;++this.i,this.trim(),"__proto__"===a&&bE(c),c[a]=this.readAttrValue(),b=!0}if(this.i>=this.z)throw Error("@aws-sdk XML parse error: unexpected end of input.");if("/"===this.x[this.i]){if(++this.i,this.i>=this.z||">"!==this.x[this.i])throw Error("@aws-sdk XML parse error: expected > at the end of self-closing tag.");return++this.i,{tag:a,value:b?c:""}}if(">"!==this.x[this.i])throw Error("@aws-sdk XML parse error: expected > at the end of opening tag.");++this.i;let d=[],e=[],f=!1;for(;this.i<this.z&&!this.isNext("</");)if("<"===this.x[this.i])this.isNext("\x3c!--")?this.readTo("--\x3e"):this.isNext("<![CDATA[")?(this.i+=9,d.push(this.readTo("]]>"))):this.isNext("<?")?this.readTo("?>"):(f=!0,e.push(this.parseTag()));else{let a="";for(;this.i<this.z&&"<"!==this.x[this.i];)a+=this.x[this.i++];d.push(this.decodeEntities(a))}if(!this.isNext("</"))throw Error(`@aws-sdk XML parse error: missing closing tag </${a}>.`);this.i+=2;let g=this.readTo(">").trim();if(g!==a)throw Error(`@aws-sdk XML parse error: mismatched tags <${a}> and </${g}>.`);if(!b&&0===d.length&&!f)return{tag:a,value:""};if(!b&&!f){let b=1===d.length?d[0]:d.join("");return""===b.trim()&&b.includes("\n")?{tag:a,value:""}:{tag:a,value:b}}let h={};for(let a of d)""===a.trim()&&a.includes("\n")||(h["#text"]="#text"in h?h["#text"]+a:a);for(let a of e)"__proto__"===a.tag&&bE(h),a.tag in h?Array.isArray(h[a.tag])?h[a.tag].push(a.value):h[a.tag]=[h[a.tag],a.value]:h[a.tag]=a.value;for(let[a,b]of Object.entries(c))"__proto__"===a&&bE(h),h[a]=b;return{tag:a,value:h}}static ENTITIES={amp:"&",lt:"<",gt:">",quot:'"',apos:"'"};skipDoctype(){this.i+=9;let a=0;for(;this.i<this.z;){let b=this.x[this.i];if("["===b)++a;else if("]"===b)--a;else if(">"===b&&0===a)return void++this.i;++this.i}throw Error("@aws-sdk XML parse error: unclosed DOCTYPE.")}decodeEntities(a){return a.replace(/&(?:#x([0-9a-fA-F]{1,6})|#(\d{1,7})|([a-zA-Z][a-zA-Z0-9]{0,30}));/g,(a,b,c,d)=>b?String.fromCharCode(parseInt(b,16)):c?String.fromCharCode(parseInt(c,10)):bF.ENTITIES[d]??"")}}let bG=a=>{let b="#text";for(let c in a)(0,bx.$)(a,c)&&(void 0!==a[c][b]?a[c]=a[c][b]:"object"==typeof a[c]&&null!==a[c]&&(a[c]=bG(a[c])));return a};var bH=c(92956),bI=c(19687),bJ=c(18986),bK=c(72613),bL=c(44983);class bM extends bJ.B{settings;stringDeserializer;constructor(a){super(),this.settings=a,this.stringDeserializer=new bH.k(a)}setSerdeContext(a){this.serdeContext=a,this.stringDeserializer.setSerdeContext(a)}read(a,b,c){let d=by.l1.of(a),e=d.getMemberSchemas();if(d.isStructSchema()&&d.isMemberSchema()&&Object.values(e).find(a=>!!a.getMemberTraits().eventPayload)){let a={},c=Object.keys(e)[0];return e[c].isBlobSchema()?a[c]=b:a[c]=this.read(e[c],b),a}let f=(this.serdeContext?.utf8Encoder??bI.P)(b),g=this.parseXml(f);return this.readSchema(a,c?g[c]:g)}readSchema(a,b){let c=by.l1.of(a);if(c.isUnitSchema())return;let d=c.getMergedTraits();if(c.isListSchema()&&!Array.isArray(b))return this.readSchema(c,[b]);if(null==b)return b;if("object"==typeof b){let a=!!d.xmlFlattened;if(c.isListSchema()){let d=c.getValueSchema(),e=[],f=d.getMergedTraits().xmlName??"member",g=a?b:(b[0]??b)[f];if(null==g)return e;for(let a of Array.isArray(g)?g:[g])e.push(this.readSchema(d,a));return e}let e={};if(c.isMapSchema()){let d,f=c.getKeySchema(),g=c.getValueSchema();d=a?Array.isArray(b)?b:[b]:Array.isArray(b.entry)?b.entry:[b.entry];let h=f.getMergedTraits().xmlName??"key",i=g.getMergedTraits().xmlName??"value";for(let a of d){let b=a[h],c=a[i];"__proto__"===b&&(0,bL.T)(e),e[b]=this.readSchema(g,c)}return e}if(c.isStructSchema()){let a,d=c.isUnionSchema();for(let[f,g]of(d&&(a=new bK.F(b,e)),c.structIterator())){let c=g.getMergedTraits(),h=c.httpPayload?c.xmlName??g.getName():g.getMemberTraits().xmlName??f;d&&a.mark(h),null!=b[h]&&(e[f]=this.readSchema(g,b[h]))}return d&&a.writeUnknown(),e}if(c.isDocumentSchema())return b;throw Error(`@aws-sdk/core/protocols - xml deserializer unhandled schema type for ${c.getName(!0)}`)}return c.isListSchema()?[]:c.isMapSchema()||c.isStructSchema()?{}:this.stringDeserializer.read(c,b)}parseXml(a){if(a.length){let b;try{b=new bF(a).parse()}catch(b){throw b&&"object"==typeof b&&Object.defineProperty(b,"$responseBodyText",{value:a}),b}let c="#text",d=Object.keys(b)[0],e=b[d];return e[c]&&(e[d]=e[c],delete e[c]),bG(e)}return{}}}var bN=c(97312),bO=c(66219),bP=c(25944),bQ=c(88959),bR=c(7558),bS=c(92656);class bT extends bJ.B{settings;buffer;constructor(a){super(),this.settings=a}write(a,b,c=""){void 0===this.buffer&&(this.buffer="");let d=by.l1.of(a);if(c&&!c.endsWith(".")&&(c+="."),d.isBlobSchema())("string"==typeof b||b instanceof Uint8Array)&&(this.writeKey(c),this.writeValue((this.serdeContext?.base64Encoder??bQ.n)(b)));else if(d.isBooleanSchema()||d.isNumericSchema()||d.isStringSchema())null!=b?(this.writeKey(c),this.writeValue(String(b))):d.isIdempotencyToken()&&(this.writeKey(c),this.writeValue((0,bR.ec)()));else if(d.isBigIntegerSchema())null!=b&&(this.writeKey(c),this.writeValue(String(b)));else if(d.isBigDecimalSchema())null!=b&&(this.writeKey(c),this.writeValue(b instanceof bS.D?b.string:String(b)));else if(d.isTimestampSchema()){if(b instanceof Date)switch(this.writeKey(c),(0,bN.V)(d,this.settings)){case 5:this.writeValue(b.toISOString().replace(".000Z","Z"));break;case 6:this.writeValue((0,bP.JV)(b));break;case 7:this.writeValue(String(b.getTime()/1e3))}}else if(d.isDocumentSchema())Array.isArray(b)?this.write(79,b,c):b instanceof Date?this.write(4,b,c):b instanceof Uint8Array?this.write(21,b,c):b&&"object"==typeof b?this.write(143,b,c):(this.writeKey(c),this.writeValue(String(b)));else if(d.isListSchema()){if(Array.isArray(b))if(0===b.length)this.settings.serializeEmptyLists&&(this.writeKey(c),this.writeValue(""));else{let a=d.getValueSchema(),e=this.settings.flattenLists||d.getMergedTraits().xmlFlattened,f=1;for(let d of b){if(null==d)continue;let b=a.getMergedTraits(),g=this.getKey("member",b.xmlName,b.ec2QueryName),h=e?`${c}${f}`:`${c}${g}.${f}`;this.write(a,d,h),++f}}}else if(d.isMapSchema()){if(b&&"object"==typeof b){let a=d.getKeySchema(),e=d.getValueSchema(),f=d.getMergedTraits().xmlFlattened,g=1;for(let d in b){let h=b[d];if(null==h)continue;let i=a.getMergedTraits(),j=this.getKey("key",i.xmlName,i.ec2QueryName),k=f?`${c}${g}.${j}`:`${c}entry.${g}.${j}`,l=e.getMergedTraits(),m=this.getKey("value",l.xmlName,l.ec2QueryName),n=f?`${c}${g}.${m}`:`${c}entry.${g}.${m}`;this.write(a,d,k),this.write(e,h,n),++g}}}else if(d.isStructSchema()){if(b&&"object"==typeof b){let a=!1;for(let[e,f]of d.structIterator()){if(null==b[e]&&!f.isIdempotencyToken())continue;let d=f.getMergedTraits(),g=this.getKey(e,d.xmlName,d.ec2QueryName,"struct"),h=`${c}${g}`;this.write(f,b[e],h),a=!0}if(!a&&d.isUnionSchema()){let{$unknown:a}=b;if(Array.isArray(a)){let[b,d]=a,e=`${c}${b}`;this.write(15,d,e)}}}}else if(d.isUnitSchema());else throw Error(`@aws-sdk/core/protocols - QuerySerializer unrecognized schema type ${d.getName(!0)}`)}flush(){if(void 0===this.buffer)throw Error("@aws-sdk/core/protocols - QuerySerializer cannot flush with nothing written to buffer.");let a=this.buffer;return delete this.buffer,a}getKey(a,b,c,d){let{ec2:e,capitalizeKeys:f}=this.settings;if(e&&c)return c;let g=b??a;return f&&"struct"===d?g[0].toUpperCase()+g.slice(1):g}writeKey(a){a.endsWith(".")&&(a=a.slice(0,a.length-1)),this.buffer+=`&${(0,bO.$)(a)}=`}writeValue(a){this.buffer+=(0,bO.$)(a)}}class bU extends bB{options;serializer;deserializer;mixin=new bD.U;constructor(a){super({defaultNamespace:a.defaultNamespace,errorTypeRegistries:a.errorTypeRegistries}),this.options=a;const b={timestampFormat:{useTrait:!0,default:5},httpBindings:!1,xmlNamespace:a.xmlNamespace,serviceNamespace:a.defaultNamespace,serializeEmptyLists:!0};this.serializer=new bT(b),this.deserializer=new bM(b)}getShapeId(){return"aws.protocols#awsQuery"}setSerdeContext(a){this.serializer.setSerdeContext(a),this.deserializer.setSerdeContext(a)}getPayloadCodec(){throw Error("AWSQuery protocol has no payload codec.")}async serializeRequest(a,b,c){let d=await super.serializeRequest(a,b,c);d.path.endsWith("/")||(d.path+="/"),d.headers["content-type"]="application/x-www-form-urlencoded","unit"!==(0,bC.L)(a.input)&&d.body||(d.body="");let e=a.name.split("#")[1]??a.name;return d.body=`Action=${e}&Version=${this.options.version}`+d.body,d.body.endsWith("&")&&(d.body=d.body.slice(-1)),d}async deserializeResponse(a,b,c){let d=this.deserializer,e=by.l1.of(a.output),f={};if(c.statusCode>=300){let e=await (0,bA.P)(c.body,b);e.byteLength>0&&Object.assign(f,await d.read(15,e)),await this.handleError(a,b,c,f,this.deserializeMetadata(c))}for(let a in c.headers){let b=c.headers[a];delete c.headers[a],c.headers[a.toLowerCase()]=b}let g=a.name.split("#")[1]??a.name,h=e.isStructSchema()&&this.useNestedResult()?g+"Result":void 0,i=await (0,bA.P)(c.body,b);return i.byteLength>0&&Object.assign(f,await d.read(e,i,h)),f.$metadata=this.deserializeMetadata(c),f}useNestedResult(){return!0}async handleError(a,b,c,d,e){let f=this.loadQueryErrorCode(c,d)??"Unknown";this.mixin.compose(this.compositeErrorRegistry,f,this.options.defaultNamespace);let g=this.loadQueryError(d)??{},h=this.loadQueryErrorMessage(d);g.message=h,g.Error={Type:g.Type,Code:g.Code,Message:h};let{errorSchema:i,errorMetadata:j}=await this.mixin.getErrorSchemaOrThrowBaseException(f,this.options.defaultNamespace,c,g,e,this.mixin.findQueryCompatibleError),k=by.l1.of(i),l=new(this.compositeErrorRegistry.getErrorCtor(i)??Error)({}),m={Type:g.Error.Type,Code:g.Error.Code,Error:g.Error};for(let[a,b]of k.structIterator()){let c=b.getMergedTraits().xmlName??a,e=g[c]??d[c];m[a]=this.deserializer.readSchema(b,e)}throw this.mixin.decorateServiceException(Object.assign(l,j,{$fault:k.getMergedTraits().error,message:h},m),d)}loadQueryErrorCode(a,b){let c=(b.Errors?.[0]?.Error??b.Errors?.Error??b.Error)?.Code;return void 0!==c?c:404==a.statusCode?"NotFound":void 0}loadQueryError(a){return a.Errors?.[0]?.Error??a.Errors?.Error??a.Error}loadQueryErrorMessage(a){let b=this.loadQueryError(a);return b?.message??b?.Message??a.message??a.Message??"Unknown"}getDefaultContentType(){return"application/x-www-form-urlencoded"}}var bV=c(73313),bW=c(97653),bX=c(82444),bY=c(82828),bZ=c(74476),b$=c(66452),b_=c(56973),b0=c(28308);class b1 extends aB.K{config;constructor(...[a]){const b=(a=>{(0,bo.I)(process.version);let b=(0,bq.I)(a),c=()=>b().then(bp.l),d={apiVersion:"2011-06-15",base64Decoder:a?.base64Decoder??bY.E,base64Encoder:a?.base64Encoder??bQ.n,disableHostPrefix:a?.disableHostPrefix??!1,endpointProvider:a?.endpointProvider??a8,extensions:a?.extensions??[],httpAuthSchemeProvider:a?.httpAuthSchemeProvider??bd,httpAuthSchemes:a?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:a=>a.getIdentityProvider("aws.auth#sigv4"),signer:new bj.f2},{schemeId:"aws.auth#sigv4a",identityProvider:a=>a.getIdentityProvider("aws.auth#sigv4a"),signer:new bm},{schemeId:"smithy.api#noAuth",identityProvider:a=>a.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new bn.m}],logger:a?.logger??new bW.N,protocol:a?.protocol??bU,protocolSettings:a?.protocolSettings??{defaultNamespace:"com.amazonaws.sts",errorTypeRegistries:Z,xmlNamespace:"https://sts.amazonaws.com/doc/2011-06-15/",version:"2011-06-15",serviceTarget:"AWSSecurityTokenServiceV20110615"},serviceId:a?.serviceId??"STS",sha256:a?.sha256??bV.k,signerConstructor:a?.signerConstructor??aL.W,urlParser:a?.urlParser??bX.D,utf8Decoder:a?.utf8Decoder??bZ.a,utf8Encoder:a?.utf8Encoder??bI.P};(0,bf.I)(process.version);let e={profile:a?.profile,logger:d.logger};return{...d,...a,runtime:"node",defaultsMode:b,authSchemePreference:a?.authSchemePreference??(0,g.Z)(bi.$,e),bodyLengthChecker:a?.bodyLengthChecker??bu.n,defaultUserAgentProvider:a?.defaultUserAgentProvider??(0,bg.pf)({serviceId:d.serviceId,clientVersion:be.rE}),httpAuthSchemes:a?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:b=>b.getIdentityProvider("aws.auth#sigv4")||(async b=>await a.credentialDefaultProvider(b?.__config||{})()),signer:new bj.f2},{schemeId:"aws.auth#sigv4a",identityProvider:a=>a.getIdentityProvider("aws.auth#sigv4a"),signer:new bm},{schemeId:"smithy.api#noAuth",identityProvider:a=>a.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new bn.m}],maxAttempts:a?.maxAttempts??(0,g.Z)(aE.qs,a),region:a?.region??(0,g.Z)(h.GG,{...h.zH,...e}),requestHandler:bv.$.create(a?.requestHandler??c),retryMode:a?.retryMode??(0,g.Z)({...aE.kN,default:async()=>(await c()).retryMode||bt.L0},a),sigv4aSigningRegionSet:a?.sigv4aSigningRegionSet??(0,g.Z)(aK,e),streamCollector:a?.streamCollector??bw.k,useDualstackEndpoint:a?.useDualstackEndpoint??(0,g.Z)(br.e$,e),useFipsEndpoint:a?.useFipsEndpoint??(0,g.Z)(bs.Ko,e),userAgentAppId:a?.userAgentAppId??(0,g.Z)(bh.hV,e)}})(a||{});super(b),this.initConfig=b;const c=(a=>Object.assign(a,{useDualstackEndpoint:a.useDualstackEndpoint??!1,useFipsEndpoint:a.useFipsEndpoint??!1,useGlobalEndpoint:a.useGlobalEndpoint??!1,defaultSigningName:"sts"}))(b),d=(0,at.D)(c),e=(0,aE.$z)(d),f=(0,aC.T)(e),i=(0,au.OV)(f),j=((a,b)=>{let c,d,e,f=Object.assign((0,b$.R)(a),(0,b_.xA)(a),(0,b0.e)(a),(c=a.httpAuthSchemes,d=a.httpAuthSchemeProvider,e=a.credentials,{setHttpAuthScheme(a){let b=c.findIndex(b=>b.schemeId===a.schemeId);-1===b?c.push(a):c.splice(b,1,a)},httpAuthSchemes:()=>c,setHttpAuthSchemeProvider(a){d=a},httpAuthSchemeProvider:()=>d,setCredentials(a){e=a},credentials:()=>e}));return b.forEach(a=>a.configure(f)),Object.assign(a,(0,b$.$)(f),(0,b_.uv)(f),(0,b0.j)(f),{httpAuthSchemes:f.httpAuthSchemes(),httpAuthSchemeProvider:f.httpAuthSchemeProvider(),credentials:f.credentials()})})((a=>{var b;return Object.assign(((b=(0,aH.ho)(a)).sigv4aSigningRegionSet=(0,aI.t)(b.sigv4aSigningRegionSet),b),{authSchemePreference:(0,aN.t)(a.authSchemePreference??[])})})((0,l.Co)(i)),a?.extensions||[]);this.config=j,this.middlewareStack.use((0,aG.wq)(this.config)),this.middlewareStack.use((0,av.sM)(this.config)),this.middlewareStack.use((0,aF.ey)(this.config)),this.middlewareStack.use((0,aD.vK)(this.config)),this.middlewareStack.use((0,au.TC)(this.config)),this.middlewareStack.use((0,aw.Y7)(this.config)),this.middlewareStack.use((0,ax.n)(this.config)),this.middlewareStack.use((0,ay.w)(this.config,{httpAuthSchemeParametersProvider:a9,identityProviderConfigProvider:async a=>new az.h({"aws.auth#sigv4":a.credentials,"aws.auth#sigv4a":a.credentials})})),this.middlewareStack.use((0,aA.l)(this.config))}destroy(){super.destroy()}}let b2=(a,b)=>b?class extends a{constructor(a){for(const c of(super(a),b))this.middlewareStack.use(c)}}:a,b3=(a={},b)=>{var c;let d,e;return c=b2(b1,b),async(b,f)=>{if(e=b,!d){let{logger:b=a?.parentClientConfig?.logger,profile:f=a?.parentClientConfig?.profile,region:g,requestHandler:h=a?.parentClientConfig?.requestHandler,credentialProviderLogger:i,userAgentAppId:j=a?.parentClientConfig?.userAgentAppId}=a,k=await ar(g,a?.parentClientConfig?.region,i,{logger:b,profile:f}),l=!as(h);d=new c({...a,userAgentAppId:j,profile:f,credentialDefaultProvider:()=>async()=>e,region:k,requestHandler:l?h:void 0,logger:b})}let{Credentials:g,AssumedRoleUser:h}=await d.send(new ao(f));if(!g||!g.AccessKeyId||!g.SecretAccessKey)throw Error(`Invalid response from STS.assumeRole call with role ${f.RoleArn}`);let i=aq(h),k={accessKeyId:g.AccessKeyId,secretAccessKey:g.SecretAccessKey,sessionToken:g.SessionToken,expiration:g.Expiration,...g.CredentialScope&&{credentialScope:g.CredentialScope},...i&&{accountId:i}};return(0,j.g)(k,"CREDENTIALS_STS_ASSUME_ROLE","i"),k}},b4=(a={},b)=>{var c;let d;return c=b2(b1,b),async b=>{if(!d){let{logger:b=a?.parentClientConfig?.logger,profile:e=a?.parentClientConfig?.profile,region:f,requestHandler:g=a?.parentClientConfig?.requestHandler,credentialProviderLogger:h,userAgentAppId:i=a?.parentClientConfig?.userAgentAppId}=a,j=await ar(f,a?.parentClientConfig?.region,h,{logger:b,profile:e}),k=!as(g);d=new c({...a,userAgentAppId:i,profile:e,region:j,requestHandler:k?g:void 0,logger:b})}let{Credentials:e,AssumedRoleUser:f}=await d.send(new ap(b));if(!e||!e.AccessKeyId||!e.SecretAccessKey)throw Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${b.RoleArn}`);let g=aq(f),h={accessKeyId:e.AccessKeyId,secretAccessKey:e.SecretAccessKey,sessionToken:e.SessionToken,expiration:e.Expiration,...e.CredentialScope&&{credentialScope:e.CredentialScope},...g&&{accountId:g}};return g&&(0,j.g)(h,"RESOLVED_ACCOUNT_ID","T"),(0,j.g)(h,"CREDENTIALS_STS_ASSUME_ROLE_WEB_ID","k"),h}}}};

package/dist/web/.next-embedded/server/chunks/7571.js

@@ -0,0 +1 @@
+exports.id=7571,exports.ids=[7571],exports.modules={69952:(a,b,c)=>{"use strict";let d=c(82178);a.exports=a=>{if(!((Number.isInteger(a)||a===1/0)&&a>0))throw TypeError("Expected `concurrency` to be a number from 1 and up");let b=new d,c=0,e=async(a,d,...e)=>{c++;let f=(async()=>a(...e))();d(f);try{await f}catch{}c--,b.size>0&&b.dequeue()()},f=(d,...f)=>new Promise(g=>{((d,f,...g)=>{b.enqueue(e.bind(null,d,f,...g)),(async()=>{await Promise.resolve(),c<a&&b.size>0&&b.dequeue()()})()})(d,g,...f)});return Object.defineProperties(f,{activeCount:{get:()=>c},pendingCount:{get:()=>b.size},clearQueue:{value:()=>{b.clear()}}}),f}},82178:a=>{class b{constructor(a){this.value=a,this.next=void 0}}class c{constructor(){this.clear()}enqueue(a){let c=new b(a);this._head?this._tail.next=c:this._head=c,this._tail=c,this._size++}dequeue(){let a=this._head;if(a)return this._head=this._head.next,this._size--,a.value}clear(){this._head=void 0,this._tail=void 0,this._size=0}get size(){return this._size}*[Symbol.iterator](){let a=this._head;for(;a;)yield a.value,a=a.next}}a.exports=c}};

package/dist/web/.next-embedded/server/chunks/769.js

@@ -0,0 +1 @@
+"use strict";exports.id=769,exports.ids=[769],exports.modules={40769:(a,b,c)=>{c.r(b),c.d(b,{createRepositoryModelsStoreProvider:()=>h,modelConnectionSecretName:()=>f}),c(10659);let d={anthropic:{allowed:["baseUrl"],required:[]},"anthropic-compatible":{allowed:["baseUrl"],required:[]},openai:{allowed:["baseUrl"],required:[]},"openai-compatible":{allowed:["baseUrl"],required:["baseUrl"]},"azure-openai":{allowed:["baseUrl","apiVersion","deployment"],required:["baseUrl","apiVersion","deployment"]}};function e(a,b){var c,e;return{id:a.id,name:a.name,provider:a.provider,config:a.config,hasCredential:b,ready:b&&(c=a.provider,e=a.config,d[c].required.every(a=>{let b=e[a];return"string"==typeof b&&""!==b.trim()})),createdAt:a.createdAt.toISOString(),updatedAt:a.updatedAt.toISOString()}}function f(a){return`MODEL_CONNECTION_${a.replace(/-/g,"").toUpperCase()}`}async function g(a,b){return new Set((await a.list(b)).map(a=>a.name))}function h(a){return{forWorkspace(b){let c=null,d=async()=>c??=(async()=>{let c=await a.scopes.forWorkspaceId(b);if(null===c)throw Error(`unknown workspace ${b}`);return{scope:c,repository:a.repositories.forScope(c)}})(),h=async b=>{let{scope:c}=await d();return e(b,(await g(a.secrets,c)).has(f(b.id)))};return{async list(){let{repository:b,scope:c}=await d(),[h,i]=await Promise.all([b.list(),g(a.secrets,c)]);return h.map(a=>e(a,i.has(f(a.id))))},async get(a){let b=await (await d()).repository.get(a);return null===b?null:h(b)},async create(b){let c,{repository:e,scope:g}=await d(),h=crypto.randomUUID(),i=await a.secrets.create(g,{name:f(h),value:Buffer.from(b.apiKey,"utf8")});if("created"!==i.kind)throw Error(`fresh model-connection secret was refused: ${i.kind}`);try{c=await e.create({id:h,name:b.name,provider:b.provider,config:b.config})}catch(b){throw await a.secrets.delete(g,i.secret.id).catch(()=>void 0),b}return"created"!==c.kind&&await a.secrets.delete(g,i.secret.id).catch(()=>void 0),c},update:async(a,b)=>(await d()).repository.update(a,b),async delete(b){let{repository:c,scope:e}=await d(),g=await c.delete(b);if("not-found"===g.kind)return{kind:"not-found"};let h=f(b),i=(await a.secrets.list(e)).find(a=>a.name===h);return void 0!==i&&await a.secrets.delete(e,i.id).catch(()=>void 0),{kind:"deleted",referencedBy:g.referencedBy}},async resolve(b){let{repository:c,scope:e}=await d(),g=await c.get(b);if(null===g)return null;let h=await a.secrets.resolveByName(e,f(b));return null===h?null:{connection:g,credential:h.value.toString("utf8")}},async replaceCredential(b,c){let{repository:e,scope:g}=await d();if(await e.get(b)===null)return!1;let h=f(b),i=(await a.secrets.list(g)).find(a=>a.name===h);return void 0!==i&&"replaced"===(await a.secrets.replace(g,i.id,Buffer.from(c,"utf8"))).kind},async writeCredential(b,c){let{repository:e,scope:g}=await d();if(await e.get(b)===null)return!1;let h=f(b),i=Buffer.from(c,"utf8"),j=(await a.secrets.list(g)).find(a=>a.name===h);return void 0!==j?"replaced"===(await a.secrets.replace(g,j.id,i)).kind:"created"===(await a.secrets.create(g,{name:h,value:i})).kind},async reconcileOrphanedCredentials(){let{repository:b,scope:c}=await d(),[e,h]=await Promise.all([b.list(),g(a.secrets,c)]),i=new Set(e.map(a=>f(a.id)));return{orphanedSecretNames:[...h].filter(a=>a.startsWith("MODEL_CONNECTION_")&&!i.has(a))}}}}}}}};

package/dist/web/.next-embedded/server/chunks/784.js

@@ -0,0 +1 @@
+"use strict";exports.id=784,exports.ids=[784],exports.modules={20784:(a,b,c)=>{c.d(b,{UL:()=>d.U,b3:()=>e.b});var d=c(25792),e=c(30417);c(29082)},25792:(a,b,c)=>{Object.defineProperty(b,"U",{enumerable:!0,get:function(){return n}});let d=c(39788),e=c(58797),f=c(29294),g=c(63033),h=c(4436),i=c(63896),j=c(30361),k=c(13093),l=c(86502),m=c(15612);function n(){let a="cookies",b=f.workAsyncStorage.getStore(),c=g.workUnitAsyncStorage.getStore();if(b){if(c&&!(0,l.isRequestApiAllowedInCurrentPhase)(c))throw Object.defineProperty(Error(`Route ${b.route} used \`cookies()\` inside \`after()\` while rendering. This is not supported. If you need this data inside an \`after()\` callback, use \`cookies()\` outside of the callback. See more info here: https://nextjs.org/docs/app/api-reference/functions/after`),"__NEXT_ERROR_CODE",{value:"E1381",enumerable:!1,configurable:!0});if(b.forceStatic)return p(d.RequestCookiesAdapter.seal(new e.RequestCookies(new Headers({}))));if(b.dynamicShouldError)throw Object.defineProperty(new i.StaticGenBailoutError(`Route ${b.route} with \`dynamic = "error"\` couldn't be rendered statically because it used \`cookies()\`. See more info here: https://nextjs.org/docs/app/building-your-application/rendering/static-and-dynamic#dynamic-rendering`),"__NEXT_ERROR_CODE",{value:"E849",enumerable:!1,configurable:!0});if(c)switch(c.type){case"cache":let f=Object.defineProperty(Error(`Route ${b.route} used \`cookies()\` inside "use cache". Accessing Dynamic data sources inside a cache scope is not supported. If you need this data inside a cached function use \`cookies()\` outside of the cached function and pass the required dynamic data in as an argument. See more info here: https://nextjs.org/docs/messages/next-request-in-use-cache`),"__NEXT_ERROR_CODE",{value:"E831",enumerable:!1,configurable:!0});throw Error.captureStackTrace(f,n),(0,j.applyOwnerStack)(f),b.invalidDynamicUsageError??=f,f;case"unstable-cache":throw Object.defineProperty(Error(`Route ${b.route} used \`cookies()\` inside a function cached with \`unstable_cache()\`. Accessing Dynamic data sources inside a cache scope is not supported. If you need this data inside a cached function use \`cookies()\` outside of the cached function and pass the required dynamic data in as an argument. See more info here: https://nextjs.org/docs/app/api-reference/functions/unstable_cache`),"__NEXT_ERROR_CODE",{value:"E846",enumerable:!1,configurable:!0});case"generate-static-params":throw Object.defineProperty(Error(`Route ${b.route} used \`cookies()\` inside \`generateStaticParams\`. This is not supported because \`generateStaticParams\` runs at build time without an HTTP request. Read more: https://nextjs.org/docs/messages/next-dynamic-api-wrong-context`),"__NEXT_ERROR_CODE",{value:"E1123",enumerable:!1,configurable:!0});case"prerender":var k=b,q=c;let g=o.get(q);if(g)return g;let r=(0,j.makeRuntimeHangingPromise)(q.renderSignal,k.route,"`cookies()`",q);return o.set(q,r),r;case"prerender-client":case"validation-client":let s="`cookies`";throw Object.defineProperty(new m.InvariantError(`${s} must not be used within a Client Component. Next.js should be preventing ${s} from being included in Client Components statically, but did not in this case.`),"__NEXT_ERROR_CODE",{value:"E1037",enumerable:!1,configurable:!0});case"prerender-ppr":return(0,h.postponeWithTracking)(b.route,a,c.dynamicTracking);case"prerender-legacy":return(0,h.throwToInterruptStaticGeneration)(a,b,c);case"prerender-runtime":{let{stagedRendering:a}=c;if(a)return a.delayUntilStage(j.RENDER_STAGES_BY_DATA_KIND.sessionData,"cookies",c.cookies);return p(c.cookies)}case"private-cache":return p(c.cookies);case"request":let t;if((0,h.trackDynamicDataInDynamicRender)(c),t=(0,d.areCookiesMutableInCurrentPhase)(c)?c.userspaceMutableCookies:c.cookies,!c.asyncApiPromises)return p(t);if(t===c.mutableCookies)return c.asyncApiPromises.mutableCookies;return c.asyncApiPromises.cookies}}(0,g.throwForMissingRequestStore)(a)}let o=new WeakMap;function p(a){let b=o.get(a);if(b)return b;let c=Promise.resolve(a);return o.set(a,c),c}(0,k.createDedupedByCallsiteServerErrorLoggerDev)(function(a,b){let c=a?`Route "${a}" `:"This route ";return Object.defineProperty(Error(`${c}used ${b}. \`cookies()\` returns a Promise and must be unwrapped with \`await\` or \`React.use()\` before accessing its properties. Learn more: https://nextjs.org/docs/messages/sync-dynamic-apis`),"__NEXT_ERROR_CODE",{value:"E830",enumerable:!1,configurable:!0})})},29082:(a,b,c)=>{let d=c(63033),e=c(29294),f=c(4436),g=c(13093),h=c(63896),i=c(96522),j=c(15612);c(29366);c(30361);new WeakMap;(0,g.createDedupedByCallsiteServerErrorLoggerDev)(function(a,b){let c=a?`Route "${a}" `:"This route ";return Object.defineProperty(Error(`${c}used ${b}. \`draftMode()\` returns a Promise and must be unwrapped with \`await\` or \`React.use()\` before accessing its properties. Learn more: https://nextjs.org/docs/messages/sync-dynamic-apis`),"__NEXT_ERROR_CODE",{value:"E835",enumerable:!1,configurable:!0})})},30417:(a,b,c)=>{Object.defineProperty(b,"b",{enumerable:!0,get:function(){return m}});let d=c(56553),e=c(29294),f=c(63033),g=c(4436),h=c(63896),i=c(30361),j=c(13093),k=c(86502),l=c(15612);function m(){let a="headers",b=e.workAsyncStorage.getStore(),c=f.workUnitAsyncStorage.getStore();if(b){if(c&&!(0,k.isRequestApiAllowedInCurrentPhase)(c))throw Object.defineProperty(Error(`Route ${b.route} used \`headers()\` inside \`after()\` while rendering. This is not supported. If you need this data inside an \`after()\` callback, use \`headers()\` outside of the callback. See more info here: https://nextjs.org/docs/app/api-reference/functions/after`),"__NEXT_ERROR_CODE",{value:"E1378",enumerable:!1,configurable:!0});if(b.forceStatic)return o(d.HeadersAdapter.seal(new Headers({})));if(c)switch(c.type){case"cache":{let a=Object.defineProperty(Error(`Route ${b.route} used \`headers()\` inside "use cache". Accessing Dynamic data sources inside a cache scope is not supported. If you need this data inside a cached function use \`headers()\` outside of the cached function and pass the required dynamic data in as an argument. See more info here: https://nextjs.org/docs/messages/next-request-in-use-cache`),"__NEXT_ERROR_CODE",{value:"E833",enumerable:!1,configurable:!0});throw Error.captureStackTrace(a,m),(0,i.applyOwnerStack)(a),b.invalidDynamicUsageError??=a,a}case"unstable-cache":throw Object.defineProperty(Error(`Route ${b.route} used \`headers()\` inside a function cached with \`unstable_cache()\`. Accessing Dynamic data sources inside a cache scope is not supported. If you need this data inside a cached function use \`headers()\` outside of the cached function and pass the required dynamic data in as an argument. See more info here: https://nextjs.org/docs/app/api-reference/functions/unstable_cache`),"__NEXT_ERROR_CODE",{value:"E838",enumerable:!1,configurable:!0});case"generate-static-params":throw Object.defineProperty(Error(`Route ${b.route} used \`headers()\` inside \`generateStaticParams\`. This is not supported because \`generateStaticParams\` runs at build time without an HTTP request. Read more: https://nextjs.org/docs/messages/next-dynamic-api-wrong-context`),"__NEXT_ERROR_CODE",{value:"E1134",enumerable:!1,configurable:!0})}if(b.dynamicShouldError)throw Object.defineProperty(new h.StaticGenBailoutError(`Route ${b.route} with \`dynamic = "error"\` couldn't be rendered statically because it used \`headers()\`. See more info here: https://nextjs.org/docs/app/building-your-application/rendering/static-and-dynamic#dynamic-rendering`),"__NEXT_ERROR_CODE",{value:"E828",enumerable:!1,configurable:!0});if(c)switch(c.type){case"prerender":var j=b,p=c;let e=n.get(p);if(e)return e;let f=(0,i.makeRuntimeHangingPromise)(p.renderSignal,j.route,"`headers()`",p);return n.set(p,f),f;case"prerender-client":case"validation-client":let q="`headers`";throw Object.defineProperty(new l.InvariantError(`${q} must not be used within a client component. Next.js should be preventing ${q} from being included in client components statically, but did not in this case.`),"__NEXT_ERROR_CODE",{value:"E1017",enumerable:!1,configurable:!0});case"prerender-ppr":return(0,g.postponeWithTracking)(b.route,a,c.dynamicTracking);case"prerender-legacy":return(0,g.throwToInterruptStaticGeneration)(a,b,c);case"prerender-runtime":{let{stagedRendering:a}=c;if(a)return a.delayUntilStage(i.RENDER_STAGES_BY_DATA_KIND.sessionData,"headers",c.headers);return o(c.headers)}case"private-cache":return o(c.headers);case"request":if((0,g.trackDynamicDataInDynamicRender)(c),c.asyncApiPromises)return c.asyncApiPromises.headers;return o(c.headers)}}(0,f.throwForMissingRequestStore)(a)}let n=new WeakMap;function o(a){let b=n.get(a);if(b)return b;let c=Promise.resolve(a);return n.set(a,c),c}(0,j.createDedupedByCallsiteServerErrorLoggerDev)(function(a,b){let c=a?`Route "${a}" `:"This route ";return Object.defineProperty(Error(`${c}used ${b}. \`headers()\` returns a Promise and must be unwrapped with \`await\` or \`React.use()\` before accessing its properties. Learn more: https://nextjs.org/docs/messages/sync-dynamic-apis`),"__NEXT_ERROR_CODE",{value:"E836",enumerable:!1,configurable:!0})})}};

package/dist/web/.next-embedded/server/chunks/7861.js

@@ -0,0 +1 @@
+"use strict";exports.id=7861,exports.ids=[7861],exports.modules={24576:(a,b,c)=>{c.d(b,{a:()=>f,n:()=>g});let d={},e={};for(let a=0;a<256;a++){let b=a.toString(16).toLowerCase();1===b.length&&(b=`0${b}`),d[a]=b,e[b]=a}function f(a){if(a.length%2!=0)throw Error("Hex encoded strings must have an even number length");let b=new Uint8Array(a.length/2);for(let c=0;c<a.length;c+=2){let d=a.slice(c,c+2).toLowerCase();if(d in e)b[c/2]=e[d];else throw Error(`Cannot decode unrecognized sequence ${d} as hexadecimal`)}return b}function g(a){let b="";for(let c=0;c<a.byteLength;c++)b+=d[a[c]];return b}},34336:(a,b,c)=>{c.d(b,{k:()=>i});var d,e=c(38522);let f=new Uint32Array(256);for(let a=0;a<256;++a){let b=a;for(let a=0;a<8;++a)b=1&b?0xedb88320^b>>>1:b>>>1;f[a]=b>>>0}class g{digestLength=4;checksum=0xffffffff;update(a){for(let b=0;b<a.length;++b)this.checksum=this.checksum>>>8^f[(this.checksum^a[b])&255]}digestSync(){return(0xffffffff^this.checksum)>>>0}async digest(){let a=this.digestSync(),b=new Uint8Array(4);return new DataView(b.buffer).setUint32(0,a,!1),b}reset(){this.checksum=0xffffffff}}let h="function"==typeof e.crc32?e.crc32:void 0,i=h?(d=h,class{digestLength=4;value=0;update(a){this.value=d(a,this.value)}digestSync(){return this.value>>>0}async digest(){let a=new Uint8Array(4);return new DataView(a.buffer).setUint32(0,this.digestSync(),!1),a}reset(){this.value=0}}):g},57861:(a,b,c)=>{c.d(b,{J2:()=>E});var d,e,f=c(57075),g=c(34336),h=c(79758),i=c(24576);class j{bytes;constructor(a){if(this.bytes=a,8!==a.byteLength)throw Error("Int64 buffers must be exactly 8 bytes")}static fromNumber(a){if(a>0x8000000000000000||a<-0x8000000000000000)throw Error(`${a} is too large (or, if negative, too small) to represent as an Int64`);let b=new Uint8Array(8);for(let c=7,d=Math.abs(Math.round(a));c>-1&&d>0;c--,d/=256)b[c]=d;return a<0&&k(b),new j(b)}valueOf(){let a=this.bytes.slice(0),b=128&a[0];return b&&k(a),parseInt((0,i.n)(a),16)*(b?-1:1)}toString(){return String(this.valueOf())}}function k(a){for(let b=0;b<8;b++)a[b]^=255;for(let b=7;b>-1&&(a[b]++,0===a[b]);b--);}class l{toUtf8;fromUtf8;constructor(a,b){this.toUtf8=a,this.fromUtf8=b}format(a){let b=[];for(let c in a){if(!(0,h.$)(a,c))continue;let d=this.fromUtf8(c);b.push(Uint8Array.from([d.byteLength]),d,this.formatHeaderValue(a[c]))}let c=new Uint8Array(b.reduce((a,b)=>a+b.byteLength,0)),d=0;for(let a of b)c.set(a,d),d+=a.byteLength;return c}formatHeaderValue(a){switch(a.type){case"boolean":return Uint8Array.from([+!a.value]);case"byte":return Uint8Array.from([2,a.value]);case"short":let b=new DataView(new ArrayBuffer(3));return b.setUint8(0,3),b.setInt16(1,a.value,!1),new Uint8Array(b.buffer);case"integer":let c=new DataView(new ArrayBuffer(5));return c.setUint8(0,4),c.setInt32(1,a.value,!1),new Uint8Array(c.buffer);case"long":let d=new Uint8Array(9);return d[0]=5,d.set(a.value.bytes,1),d;case"binary":let e=new DataView(new ArrayBuffer(3+a.value.byteLength));e.setUint8(0,6),e.setUint16(1,a.value.byteLength,!1);let f=new Uint8Array(e.buffer);return f.set(a.value,3),f;case"string":let g=this.fromUtf8(a.value),h=new DataView(new ArrayBuffer(3+g.byteLength));h.setUint8(0,7),h.setUint16(1,g.byteLength,!1);let k=new Uint8Array(h.buffer);return k.set(g,3),k;case"timestamp":let l=new Uint8Array(9);return l[0]=8,l.set(j.fromNumber(a.value.valueOf()).bytes,1),l;case"uuid":if(!v.test(a.value))throw Error(`Invalid UUID received: ${a.value}`);let m=new Uint8Array(17);return m[0]=9,m.set((0,i.a)(a.value.replace(/-/g,"")),1),m}}parse(a){let b={},c=0;for(;c<a.byteLength;){let d=a.getUint8(c++),e=this.toUtf8(new Uint8Array(a.buffer,a.byteOffset+c,d));switch(c+=d,a.getUint8(c++)){case 0:b[e]={type:m,value:!0};break;case 1:b[e]={type:m,value:!1};break;case 2:b[e]={type:n,value:a.getInt8(c++)};break;case 3:b[e]={type:o,value:a.getInt16(c,!1)},c+=2;break;case 4:b[e]={type:p,value:a.getInt32(c,!1)},c+=4;break;case 5:b[e]={type:q,value:new j(new Uint8Array(a.buffer,a.byteOffset+c,8))},c+=8;break;case 6:let f=a.getUint16(c,!1);c+=2,b[e]={type:r,value:new Uint8Array(a.buffer,a.byteOffset+c,f)},c+=f;break;case 7:let g=a.getUint16(c,!1);c+=2,b[e]={type:s,value:this.toUtf8(new Uint8Array(a.buffer,a.byteOffset+c,g))},c+=g;break;case 8:b[e]={type:t,value:new Date(new j(new Uint8Array(a.buffer,a.byteOffset+c,8)).valueOf())},c+=8;break;case 9:let h=new Uint8Array(a.buffer,a.byteOffset+c,16);c+=16,b[e]={type:u,value:`${(0,i.n)(h.subarray(0,4))}-${(0,i.n)(h.subarray(4,6))}-${(0,i.n)(h.subarray(6,8))}-${(0,i.n)(h.subarray(8,10))}-${(0,i.n)(h.subarray(10))}`};break;default:throw Error("Unrecognized header type tag")}}return b}}(d=e||(e={}))[d.boolTrue=0]="boolTrue",d[d.boolFalse=1]="boolFalse",d[d.byte=2]="byte",d[d.short=3]="short",d[d.integer=4]="integer",d[d.long=5]="long",d[d.byteArray=6]="byteArray",d[d.string=7]="string",d[d.timestamp=8]="timestamp",d[d.uuid=9]="uuid";let m="boolean",n="byte",o="short",p="integer",q="long",r="binary",s="string",t="timestamp",u="uuid",v=/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/,w=16;class x{headerMarshaller;messageBuffer;isEndOfStream;constructor(a,b){this.headerMarshaller=new l(a,b),this.messageBuffer=[],this.isEndOfStream=!1}feed(a){this.messageBuffer.push(this.decode(a))}endOfStream(){this.isEndOfStream=!0}getMessage(){let a=this.messageBuffer.pop(),b=this.isEndOfStream;return{getMessage:()=>a,isEndOfStream:()=>b}}getAvailableMessages(){let a=this.messageBuffer;this.messageBuffer=[];let b=this.isEndOfStream;return{getMessages:()=>a,isEndOfStream:()=>b}}encode({headers:a,body:b}){let c=this.headerMarshaller.format(a),d=c.byteLength+b.byteLength+16,e=new Uint8Array(d),f=new DataView(e.buffer,e.byteOffset,e.byteLength),h=new g.k;return f.setUint32(0,d,!1),f.setUint32(4,c.byteLength,!1),h.update(e.subarray(0,8)),f.setUint32(8,h.digestSync(),!1),e.set(c,12),e.set(b,c.byteLength+12),h.update(e.subarray(8,d-4)),f.setUint32(d-4,h.digestSync(),!1),e}decode(a){let{headers:b,body:c}=function({byteLength:a,byteOffset:b,buffer:c}){if(a<w)throw Error("Provided message too short to accommodate event stream message overhead");let d=new DataView(c,b,a),e=d.getUint32(0,!1);if(a!==e)throw Error("Reported message length does not match received message length");let f=d.getUint32(4,!1),h=d.getUint32(8,!1),i=d.getUint32(a-4,!1),j=new g.k;if(j.update(new Uint8Array(c,b,8)),h!==j.digestSync())throw Error(`The prelude checksum specified in the message (${h}) does not match the calculated CRC32 checksum (${j.digestSync()})`);if(j.update(new Uint8Array(c,b+8,a-12)),i!==j.digestSync())throw Error(`The message checksum (${j.digestSync()}) did not match the expected value of ${i}`);return{headers:new DataView(c,b+8+4,f),body:new Uint8Array(c,b+8+4+f,e-f-16)}}(a);return{headers:this.headerMarshaller.parse(b),body:c}}formatHeaders(a){return this.headerMarshaller.format(a)}}class y{options;constructor(a){this.options=a}[Symbol.asyncIterator](){return this.asyncIterator()}async *asyncIterator(){for await(let a of this.options.inputStream){let b=this.options.decoder.decode(a);yield b}}}class z{options;constructor(a){this.options=a}[Symbol.asyncIterator](){return this.asyncIterator()}async *asyncIterator(){for await(let a of this.options.messageStream){let b=this.options.encoder.encode(a);yield b}this.options.includeEndFrame&&(yield new Uint8Array(0))}}class A{options;constructor(a){this.options=a}[Symbol.asyncIterator](){return this.asyncIterator()}async *asyncIterator(){for await(let a of this.options.messageStream){let b=await this.options.deserializer(a);void 0!==b&&(yield b)}}}class B{options;constructor(a){this.options=a}[Symbol.asyncIterator](){return this.asyncIterator()}async *asyncIterator(){for await(let a of this.options.inputStream){let b=this.options.serializer(a);yield b}}}class C{eventStreamCodec;utfEncoder;constructor({utf8Encoder:a,utf8Decoder:b}){this.eventStreamCodec=new x(a,b),this.utfEncoder=a}deserialize(a,b){var c;let d,e,f,g,h;return new A({messageStream:new y({inputStream:(d=0,e=0,f=null,g=null,h=a=>{if("number"!=typeof a)throw Error("Attempted to allocate an event message where size was not a number: "+a);d=a,e=4,new DataView((f=new Uint8Array(a)).buffer).setUint32(0,a,!1)},{[Symbol.asyncIterator]:async function*(){let b=a[Symbol.asyncIterator]();for(;;){let{value:a,done:c}=await b.next();if(c){if(d)if(d===e)yield f;else throw Error("Truncated event message received.");return}let i=a.length,j=0;for(;j<i;){if(!f){let b=i-j;g||(g=new Uint8Array(4));let c=Math.min(4-e,b);if(g.set(a.slice(j,j+c),e),e+=c,j+=c,e<4)break;h(new DataView(g.buffer).getUint32(0,!1)),g=null}let b=Math.min(d-e,i-j);f.set(a.slice(j,j+b),e),e+=b,j+=b,d&&d===e&&(yield f,f=null,d=0,e=0)}}}}),decoder:this.eventStreamCodec}),deserializer:(c=this.utfEncoder,async function(a){let{value:d}=a.headers[":message-type"];if("error"===d){let b=Error(a.headers[":error-message"].value||"UnknownError");throw b.name=a.headers[":error-code"].value,b}if("exception"===d){let d=a.headers[":exception-type"].value,e=await b({[d]:a});if(e.$unknown){let b=Error(c(a.body));throw b.name=d,b}throw e[d]}if("event"===d){let c={[a.headers[":event-type"].value]:a},d=await b(c);if(d.$unknown)return;return d}throw Error(`Unrecognizable event type: ${a.headers[":event-type"].value}`)})})}serialize(a,b){return new z({messageStream:new B({inputStream:a,serializer:b}),encoder:this.eventStreamCodec,includeEndFrame:!0})}}class D{universalMarshaller;constructor({utf8Encoder:a,utf8Decoder:b}){this.universalMarshaller=new C({utf8Decoder:b,utf8Encoder:a})}deserialize(a,b){let c="function"==typeof a[Symbol.asyncIterator]?a:F(a);return this.universalMarshaller.deserialize(c,b)}serialize(a,b){return f.Readable.from(this.universalMarshaller.serialize(a,b))}}let E=a=>new D(a);async function*F(a){let b=!1,c=!1,d=[];for(a.on("error",a=>{if(b||(b=!0),a)throw a}),a.on("data",a=>{d.push(a)}),a.on("end",()=>{b=!0});!c;){let a=await new Promise(a=>setTimeout(()=>a(d.shift()),0));a&&(yield a),c=b&&0===d.length}}}};

package/dist/web/.next-embedded/server/chunks/7944.js

@@ -0,0 +1 @@
+"use strict";exports.id=7944,exports.ids=[7944],exports.modules={12733:(a,b,c)=>{c.d(b,{AH:()=>m,Dq:()=>q,G6:()=>r,O1:()=>f,xq:()=>s});var d=c(84888);let e=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;function f(a){return"string"==typeof a&&e.test(a)}function g(a){if(null===a)return"null";if(Array.isArray(a))return"an array";let b=typeof a;return"string"===b?"a string":"object"===b?"an object":`a ${b}`}function h(a){if("object"!=typeof a||null===a||Array.isArray(a))return!1;let b=Object.getPrototypeOf(a);return b===Object.prototype||null===b}function i(a,b){return Object.prototype.hasOwnProperty.call(a,b)}function j(a){if("string"!=typeof a)return{ok:!1,errors:[`name must be a string; received ${g(a)}.`]};let b=a.trim();return 0===b.length?{ok:!1,errors:["name must not be blank."]}:b.length>d.CD?{ok:!1,errors:[`name must be at most ${String(d.CD)} characters; received ${String(b.length)}.`]}:{ok:!0,value:b}}function k(a){return"string"!=typeof a?{ok:!1,errors:[`instructions must be a string; received ${g(a)}.`]}:a.length>d.wd?{ok:!1,errors:[`instructions must be at most ${String(d.wd)} characters; received ${String(a.length)}.`]}:{ok:!0,value:a}}function l(a){return null===a?{ok:!0,value:null}:f(a)?{ok:!0,value:a}:{ok:!1,errors:[`modelConnectionId must be a UUID string or null; received ${g(a)}.`]}}function m(a){return null===a?{ok:!0,value:null}:f(a)?{ok:!0,value:a}:{ok:!1,errors:[`runtimeProfileId must be a UUID string or null; received ${g(a)}.`]}}function n(a){if(null===a)return{ok:!0,value:null};if("string"!=typeof a)return{ok:!1,errors:[`model must be a string or null; received ${g(a)}.`]};let b=a.trim();return 0===b.length?{ok:!1,errors:['model must not be blank; use null to mean "the workspace default model".']}:b.length>d.A8?{ok:!1,errors:[`model must be at most ${String(d.A8)} characters; received ${String(b.length)}.`]}:{ok:!0,value:b}}function o(a){if(!h(a))return{ok:!1,errors:[`permissions must be an object; received ${g(a)}.`]};let b=[],c=new Set(d.BW);for(let e of Object.keys(a))c.has(e)||b.push(`permissions.${e} is not a permission this platform knows; expected exactly ${d.BW.join(", ")}.`);let e={};for(let c of d.BW){if(!i(a,c)){b.push(`permissions.${c} is required; it has no default.`);continue}let d=a[c];if("boolean"!=typeof d){b.push(`permissions.${c} must be a boolean; received ${g(d)}.`);continue}e[c]=d}return b.length>0?{ok:!1,errors:b}:{ok:!0,value:{readFiles:!0===e.readFiles,writeFiles:!0===e.writeFiles,runCommands:!0===e.runCommands,unrestrictedNetwork:!0===e.unrestrictedNetwork}}}function p(a){let b=new Set(d.hi);return Object.keys(a).filter(a=>!b.has(a)).map(a=>`${a} is not a field of an agent; expected some of ${d.hi.join(", ")}.`)}function q(a){if(!h(a))return{ok:!1,errors:[`the request body must be a JSON object; received ${g(a)}.`]};let b=[...p(a)],c=j(a.name);c.ok||b.push(...c.errors);let d=k(a.instructions);d.ok||b.push(...d.errors);let e=l(i(a,"modelConnectionId")?a.modelConnectionId:void 0);e.ok||b.push(...e.errors);let f=n(i(a,"model")?a.model:void 0);f.ok||b.push(...f.errors);let q=m(i(a,"runtimeProfileId")?a.runtimeProfileId:null);q.ok||b.push(...q.errors);let r=o(a.permissions);return(r.ok||b.push(...r.errors),b.length>0)?{ok:!1,errors:b}:c.ok&&d.ok&&e.ok&&f.ok&&q.ok&&r.ok?{ok:!0,value:{name:c.value,instructions:d.value,modelConnectionId:e.value,model:f.value,runtimeProfileId:q.value,permissions:r.value}}:{ok:!1,errors:["the request body could not be parsed."]}}function r(a){if(!h(a))return{ok:!1,errors:[`the request body must be a JSON object; received ${g(a)}.`]};let b=[...p(a)],c={},e=0;for(let f of d.hi){if(!i(a,f))continue;e+=1;let d=a[f];if(void 0===d){b.push(`${f} was sent with no value; omit the key instead of setting it to undefined.`);continue}switch(f){case"name":{let a=j(d);a.ok?c.name=a.value:b.push(...a.errors);break}case"instructions":{let a=k(d);a.ok?c.instructions=a.value:b.push(...a.errors);break}case"modelConnectionId":{let a=l(d);a.ok?c.modelConnectionId=a.value:b.push(...a.errors);break}case"model":{let a=n(d);a.ok?c.model=a.value:b.push(...a.errors);break}case"runtimeProfileId":{let a=m(d);a.ok?c.runtimeProfileId=a.value:b.push(...a.errors);break}case"permissions":{let a=o(d);a.ok?c.permissions=a.value:b.push(...a.errors);break}default:b.push(`${String(f)} has no parser.`)}}return(0===e&&b.push(`the request body changed nothing; supply at least one of ${d.hi.join(", ")}.`),b.length>0)?{ok:!1,errors:b}:{ok:!0,value:c}}function s(a){return{id:a.id,workspaceId:a.workspaceId,name:a.name,instructions:a.instructions,modelConnectionId:a.modelConnectionId,model:a.model,runtimeProfileId:a.runtimeProfileId,permissions:{...a.permissions},createdBy:a.createdBy,ownerPrincipalId:a.ownerPrincipalId,createdAt:a.createdAt.toISOString(),updatedAt:a.updatedAt.toISOString()}}},53978:(a,b,c)=>{c.d(b,{CC:()=>e,HT:()=>l,RB:()=>k,Sn:()=>g,WU:()=>i,vc:()=>h,x4:()=>j});var d=c(12733);function e(a,b,c,d){return{status:a,body:{error:void 0===d||0===d.length?{code:b,message:c}:{code:b,message:c,details:[...d]}}}}function f(a){return(0,d.O1)(a)?{ok:!0,id:a}:{ok:!1,result:e(400,"invalid_agent_id","The agent id in the path is not a UUID.")}}async function g(a,b,c,f){let g=(0,d.Dq)(b);if(!g.ok)return e(400,"invalid_body","The agent could not be created from this body.",g.errors);let h=void 0===f?null:await f(g.value);if(null!==h)return h;let i=await a.create(g.value,c);switch(i.kind){case"created":return{status:201,body:(0,d.xq)(i.agent)};case"name-conflict":return e(409,"agent_name_conflict",`This workspace already has an agent named ${JSON.stringify(i.name)}.`);case"unknown-model-connection":return e(400,"unknown_model_connection","modelConnectionId does not name a model connection in this workspace.");case"unknown-runtime-profile":return e(400,"unknown_runtime_profile","runtimeProfileId does not name a runtime profile in this workspace.");default:return e(500,"unhandled_store_outcome",`The store returned an outcome this route does not handle: ${JSON.stringify(i)}.`)}}async function h(a){return{status:200,body:{agents:(await a.list()).map(d.xq)}}}async function i(a,b){let c=f(b);if(!c.ok)return c.result;let e=await a.get(c.id);return null===e?l():{status:200,body:(0,d.xq)(e)}}async function j(a,b,c,g,h){let i=f(b);if(!i.ok)return i.result;let j=(0,d.G6)(c);if(!j.ok)return e(400,"invalid_body","The agent could not be updated from this body.",j.errors);let k=void 0===g?null:await g(j.value);if(null!==k)return k;if(void 0!==h){let b=await h(j.value);if(null!==b)return b;let c=await a.get(i.id);return null===c?l():{status:200,body:(0,d.xq)(c)}}let m=await a.update(i.id,j.value);switch(m.kind){case"updated":return{status:200,body:(0,d.xq)(m.agent)};case"not-found":return l();case"name-conflict":return e(409,"agent_name_conflict",`This workspace already has an agent named ${JSON.stringify(m.name)}.`);case"unknown-model-connection":return e(400,"unknown_model_connection","modelConnectionId does not name a model connection in this workspace.");case"unknown-runtime-profile":return e(400,"unknown_runtime_profile","runtimeProfileId does not name a runtime profile in this workspace.");default:return e(500,"unhandled_store_outcome",`The store returned an outcome this route does not handle: ${JSON.stringify(m)}.`)}}async function k(a,b){let c=f(b);if(!c.ok)return c.result;let d=await a.delete(c.id);switch(d.kind){case"deleted":return{status:204,body:null};case"not-found":return l();default:return e(500,"unhandled_store_outcome",`The store returned an outcome this route does not handle: ${JSON.stringify(d)}.`)}}function l(){return e(404,"agent_not_found","This workspace has no agent with that id.")}},62003:(a,b,c)=>{c.d(b,{iG:()=>e});let d=globalThis;function e(){return d.__agentWorkspaceAgentsRuntime__??null}}};

package/dist/web/.next-embedded/server/chunks/8020.js

@@ -0,0 +1 @@
+"use strict";exports.id=8020,exports.ids=[8020],exports.modules={88020:(a,b,c)=>{c.r(b),c.d(b,{createPostgresDirectory:()=>k});var d=c(16713);async function e(){let a=(0,d.randomToken)(32);return{token:a,tokenHash:await (0,d.hashApiKeySecret)(a)}}let f=a=>null===a?null:a.toISOString();function g(a){return{...a,createdAt:a.createdAt.toISOString()}}function h(a){return{id:a.id,principalId:a.principalId,userId:a.userId,email:a.email,name:a.name,role:a.role,createdAt:a.createdAt.toISOString()}}function i(a){return{id:a.id,email:a.email,role:a.role,invitedBy:a.invitedBy,expiresAt:a.expiresAt.toISOString(),acceptedAt:f(a.acceptedAt),revokedAt:f(a.revokedAt),createdAt:a.createdAt.toISOString()}}function j(a){return{id:a.id,name:a.name,role:a.role,keyPrefix:a.keyPrefix,lastUsedAt:f(a.lastUsedAt),expiresAt:f(a.expiresAt),revokedAt:f(a.revokedAt),createdAt:a.createdAt.toISOString()}}function k(a,b=()=>new Date){return{forWorkspace:c=>{let f=a.forWorkspace(c);return{listUsers:async()=>(await f.listUsers()).map(g),async createUser(a){let b=await f.createUser(a);return"email-taken"===b.kind?b:{kind:"created",user:g(b.user),membership:h(b.membership)}},listMemberships:async()=>(await f.listMemberships()).map(h),async createMembership(a){let b=await f.createMembership(a);return"created"===b.kind?{kind:"created",membership:h(b.membership)}:b},async changeMembershipRole(a,b){let c=await f.changeMembershipRole(a,b);return"changed"===c.kind?{kind:"changed",membership:h(c.membership)}:c},deleteMembership:a=>f.deleteMembership(a),listApiKeys:async()=>(await f.listApiKeys()).map(j),async createApiKey(a){let c=b(),e=null;if(null!==a.expiresAt&&(Number.isNaN((e=new Date(a.expiresAt)).getTime())||e.getTime()<=c.getTime()))return{kind:"expiry-in-the-past",expiresAt:a.expiresAt};let g=await (0,d.mintApiKey)(),h=await f.createApiKey({name:a.name.trim(),role:a.role,keyPrefix:g.keyPrefix,keyHash:g.keyHash,expiresAt:e});return"name-taken"===h.kind?h:{kind:"created",key:j(h.key),presented:g.presented}},async revokeApiKey(a){let c=await f.revokeApiKey(a,b());return"no-such-key"===c.kind?c:{kind:c.kind,key:j(c.key)}},async readStoredApiKey(a){let b=await f.readApiKey(a);return null===b?null:{...j(b),workspaceId:b.workspaceId,keyHash:b.keyHash,keyId:b.keyPrefix.replace(/^ak_live_/u,"")}},listInvitations:async()=>(await f.listInvitations()).map(i),async createInvitation(a){let c=await e(),d=await f.createInvitation({email:a.email,role:a.role,invitedBy:a.invitedBy,tokenHash:c.tokenHash,expiresAt:new Date(b().getTime()+6048e5)});return"already-invited"===d.kind?d:{kind:"created",invitation:i(d.invitation),token:c.token}},async resendInvitation(a){let c=await e(),d=await f.resendInvitation(a,c.tokenHash,new Date(b().getTime()+6048e5));switch(d.kind){case"resent":return{kind:"resent",invitation:i(d.invitation),token:c.token};case"no-such-invitation":return d;case"already-accepted":case"revoked":return{kind:d.kind,invitation:i(d.invitation)};default:throw Error(`unhandled resendInvitation outcome ${JSON.stringify(d)}`)}},async revokeInvitation(a){let c=await f.revokeInvitation(a,b());switch(c.kind){case"no-such-invitation":return c;case"revoked":case"already-revoked":case"already-accepted":return{kind:c.kind,invitation:i(c.invitation)};default:throw Error(`unhandled revokeInvitation outcome ${JSON.stringify(c)}`)}}}},async authenticateApiKey(b,c){let e=(0,d.parsePresentedKey)(b);if(null===e)return null;let f=await a.authenticateApiKeyHash(await (0,d.hashApiKeySecret)(e.secret),c);return null===f?null:{principalId:f.principalId,apiKeyId:f.id,workspaceId:f.workspaceId,role:f.role,label:f.name,actsForPrincipalId:f.actsForPrincipalId}},resolveRole:(b,c)=>a.resolveRole(b,c),async findUserByEmail(b){let c=await a.findUserByEmail(b);return null===c?null:g(c)},findIdentity:(b,c)=>a.findIdentity(b,c),linkIdentity:(b,c,d)=>a.linkIdentity(b,c,d),membershipsForUser:b=>a.membershipsForUser(b),async acceptInvitation(c,e,f){let i=await (0,d.hashApiKeySecret)(e),j=await a.acceptInvitation(c,i,f,b());switch(j.kind){case"accepted":return{kind:"accepted",workspaceId:j.workspaceId,workspaceSlug:j.workspaceSlug,user:g(j.user),membership:h(j.membership)};case"already-member":return{kind:"already-member",workspaceId:j.workspaceId,userId:j.userId,principalId:j.principalId};case"invalid":case"expired":case"revoked":case"already-accepted":return{kind:j.kind};default:throw Error(`unhandled acceptInvitation outcome ${JSON.stringify(j)}`)}}}}}};

package/dist/web/.next-embedded/server/chunks/8061.js

@@ -0,0 +1,2 @@
+"use strict";exports.id=8061,exports.ids=[8061],exports.modules={38061:(a,b,c)=>{let d,e,f,g;c.r(b),c.d(b,{apps:()=>T,default:()=>U,openApp:()=>Q});var h=c(1708),i=c(4573),j=c(76760),k=c(73136),l=c(57975),m=c(31421),n=c(51455),o=c(48161),p=c(73024);function q(){return void 0===e&&(e=(()=>{try{return p.statSync("/run/.containerenv"),!0}catch{return!1}})()||(void 0===d&&(d=function(){try{return p.statSync("/.dockerenv"),!0}catch{return!1}}()||function(){try{return p.readFileSync("/proc/self/cgroup","utf8").includes("docker")}catch{return!1}}()),d)),e}let r=()=>{if("linux"!==h.platform)return!1;if(o.release().toLowerCase().includes("microsoft"))return!q();try{if(p.readFileSync("/proc/version","utf8").toLowerCase().includes("microsoft"))return!q()}catch{}return!!(p.existsSync("/proc/sys/fs/binfmt_misc/WSLInterop")||p.existsSync("/run/WSL"))&&!q()},s=h.env.__IS_WSL_TEST__?r:r(),t=(g="/mnt/",async function(){if(f)return f;let a="/etc/wsl.conf",b=!1;try{await n.access(a,n.constants.F_OK),b=!0}catch{}if(!b)return g;let c=await n.readFile(a,{encoding:"utf8"}),d=/(?<!#.*)root\s*=\s*(?<mountPoint>.*)/g.exec(c);return d?f=(f=d.groups.mountPoint.trim()).endsWith("/")?f:`${f}/`:g}),u=async()=>{let a=await t();return`${a}c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe`},v=async()=>s?u():`${h.env.SYSTEMROOT||h.env.windir||String.raw`C:\Windows`}\\System32\\WindowsPowerShell\\v1.0\\powershell.exe`;function w(a,b,c){let d=c=>Object.defineProperty(a,b,{value:c,enumerable:!0,writable:!0});return Object.defineProperty(a,b,{configurable:!0,enumerable:!0,get(){let a=c();return d(a),a},set(a){d(a)}}),a}let x=(0,l.promisify)(m.execFile);async function y(){if("darwin"!==h.platform)throw Error("macOS only");let{stdout:a}=await x("defaults",["read","com.apple.LaunchServices/com.apple.launchservices.secure","LSHandlers"]),b=/LSHandlerRoleAll = "(?!-)(?<id>[^"]+?)";\s+?LSHandlerURLScheme = (?:http|https);/.exec(a),c=b?.groups.id??"com.apple.Safari";return"com.apple.safari"===c?"com.apple.Safari":c}let z=(0,l.promisify)(m.execFile);async function A(a,{humanReadableOutput:b=!0,signal:c}={}){if("darwin"!==h.platform)throw Error("macOS only");let d={};c&&(d.signal=c);let{stdout:e}=await z("osascript",["-e",a,b?[]:["-ss"]],d);return e.trim()}async function B(a){return A(`tell application "Finder" to set app_path to application file id "${a}" as string
+tell application "System Events" to get value of property list item "CFBundleName" of property list file (app_path & ":Contents:Info.plist")`)}let C=(0,l.promisify)(m.execFile),D={MSEdgeHTM:{name:"Edge",id:"com.microsoft.edge"},MSEdgeBHTML:{name:"Edge Beta",id:"com.microsoft.edge.beta"},MSEdgeDHTML:{name:"Edge Dev",id:"com.microsoft.edge.dev"},AppXq0fevzme2pys62n3e0fbqa7peapykr8v:{name:"Edge",id:"com.microsoft.edge.old"},ChromeHTML:{name:"Chrome",id:"com.google.chrome"},ChromeBHTML:{name:"Chrome Beta",id:"com.google.chrome.beta"},ChromeDHTML:{name:"Chrome Dev",id:"com.google.chrome.dev"},ChromiumHTM:{name:"Chromium",id:"org.chromium.Chromium"},BraveHTML:{name:"Brave",id:"com.brave.Browser"},BraveBHTML:{name:"Brave Beta",id:"com.brave.Browser.beta"},BraveDHTML:{name:"Brave Dev",id:"com.brave.Browser.dev"},BraveSSHTM:{name:"Brave Nightly",id:"com.brave.Browser.nightly"},FirefoxURL:{name:"Firefox",id:"org.mozilla.firefox"},OperaStable:{name:"Opera",id:"com.operasoftware.Opera"},VivaldiHTM:{name:"Vivaldi",id:"com.vivaldi.Vivaldi"},"IE.HTTP":{name:"Internet Explorer",id:"com.microsoft.ie"}};Object.entries(D);class E extends Error{}async function F(a=C){let b=`${h.env.SYSTEMROOT??h.env.windir??"C:\\Windows"}\\System32\\reg.exe`,{stdout:c}=await a(b,["QUERY"," HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\http\\UserChoice","/v","ProgId"]),d=/ProgId\s*REG_SZ\s*(?<id>\S+)/.exec(c);if(!d)throw new E(`Cannot find Windows browser in stdout: ${JSON.stringify(c)}`);let{id:e}=d.groups,f=e.lastIndexOf("."),g=e.lastIndexOf("-"),i=-1===f?void 0:e.slice(0,f),j=-1===g?void 0:e.slice(0,g);return D[e]??D[i]??D[j]??{name:e,id:e}}let G=(0,l.promisify)(m.execFile);async function H(){if("darwin"===h.platform){let a=await y();return{name:await B(a),id:a}}if("linux"===h.platform){let{stdout:a}=await G("xdg-mime",["query","default","x-scheme-handler/http"]),b=a.trim();return{name:b.replace(/.desktop$/,"").replace("-"," ").toLowerCase().replaceAll(/(?:^|\s|-)\S/g,a=>a.toUpperCase()),id:b}}if("win32"===h.platform)return F();throw Error("Only macOS, Linux, and Windows are supported")}let I=(0,l.promisify)(m.execFile),J=j.dirname((0,k.fileURLToPath)("file:///home/runner/work/claude-agent-workspace/claude-agent-workspace/node_modules/.pnpm/open@10.2.0/node_modules/open/index.js")),K=j.join(J,"xdg-open"),{platform:L,arch:M}=h;async function N(){let a=await v(),b=String.raw`(Get-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice").ProgId`,c=i.Buffer.from(b,"utf16le").toString("base64"),{stdout:d}=await I(a,["-NoProfile","-NonInteractive","-ExecutionPolicy","Bypass","-EncodedCommand",c],{encoding:"utf8"}),e=d.trim(),f={ChromeHTML:"com.google.chrome",BraveHTML:"com.brave.Browser",MSEdgeHTM:"com.microsoft.edge",FirefoxURL:"org.mozilla.firefox"};return f[e]?{id:f[e]}:{}}let O=async(a,b)=>{let c;for(let d of a)try{return await b(d)}catch(a){c=a}throw c},P=async a=>{let b;if(Array.isArray((a={wait:!1,background:!1,newInstance:!1,allowNonzeroExitCode:!1,...a}).app))return O(a.app,b=>P({...a,app:b}));let{name:c,arguments:d=[]}=a.app??{};if(d=[...d],Array.isArray(c))return O(c,b=>P({...a,app:{name:b,arguments:d}}));if("browser"===c||"browserPrivate"===c){let b={"com.google.chrome":"chrome","google-chrome.desktop":"chrome","com.brave.Browser":"brave","org.mozilla.firefox":"firefox","firefox.desktop":"firefox","com.microsoft.msedge":"edge","com.microsoft.edge":"edge","com.microsoft.edgemac":"edge","microsoft-edge.desktop":"edge"},e=s?await N():await H();if(e.id in b){let f=b[e.id];return"browserPrivate"===c&&d.push({chrome:"--incognito",brave:"--incognito",firefox:"--private-window",edge:"--inPrivate"}[f]),P({...a,app:{name:T[f],arguments:d}})}throw Error(`${e.name} is not supported as a default browser`)}let e=[],f={};if("darwin"===L)b="open",a.wait&&e.push("--wait-apps"),a.background&&e.push("--background"),a.newInstance&&e.push("--new"),c&&e.push("-a",c);else if("win32"!==L&&(!s||q()||c)){if(c)b=c;else{let a=!1;try{await n.access(K,n.constants.X_OK),a=!0}catch{}b=h.versions.electron??("android"===L||!J||"/"===J||!a)?"xdg-open":K}d.length>0&&e.push(...d),a.wait||(f.stdio="ignore",f.detached=!0)}else{b=await v(),e.push("-NoProfile","-NonInteractive","-ExecutionPolicy","Bypass","-EncodedCommand"),s||(f.windowsVerbatimArguments=!0);let g=["Start"];a.wait&&g.push("-Wait"),c?(g.push(`"\`"${c}\`""`),a.target&&d.push(a.target)):a.target&&g.push(`"${a.target}"`),d.length>0&&g.push("-ArgumentList",(d=d.map(a=>`"\`"${a}\`""`)).join(",")),a.target=i.Buffer.from(g.join(" "),"utf16le").toString("base64")}"darwin"===L&&d.length>0&&e.push("--args",...d),a.target&&e.push(a.target);let g=m.spawn(b,e,f);return a.wait?new Promise((b,c)=>{g.once("error",c),g.once("close",d=>{!a.allowNonzeroExitCode&&d>0?c(Error(`Exited with code ${d}`)):b(g)})}):(g.unref(),g)},Q=(a,b)=>{if("string"!=typeof a&&!Array.isArray(a))throw TypeError("Expected a valid `name`");let{arguments:c=[]}=b??{};if(null!=c&&!Array.isArray(c))throw TypeError("Expected `appArguments` as Array type");return P({...b,app:{name:a,arguments:c}})};function R(a){if("string"==typeof a||Array.isArray(a))return a;let{[M]:b}=a;if(!b)throw Error(`${M} is not supported`);return b}function S({[L]:a},{wsl:b}){if(b&&s)return R(b);if(!a)throw Error(`${L} is not supported`);return R(a)}let T={};w(T,"chrome",()=>S({darwin:"google chrome",win32:"chrome",linux:["google-chrome","google-chrome-stable","chromium"]},{wsl:{ia32:"/mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe",x64:["/mnt/c/Program Files/Google/Chrome/Application/chrome.exe","/mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe"]}})),w(T,"brave",()=>S({darwin:"brave browser",win32:"brave",linux:["brave-browser","brave"]},{wsl:{ia32:"/mnt/c/Program Files (x86)/BraveSoftware/Brave-Browser/Application/brave.exe",x64:["/mnt/c/Program Files/BraveSoftware/Brave-Browser/Application/brave.exe","/mnt/c/Program Files (x86)/BraveSoftware/Brave-Browser/Application/brave.exe"]}})),w(T,"firefox",()=>S({darwin:"firefox",win32:String.raw`C:\Program Files\Mozilla Firefox\firefox.exe`,linux:"firefox"},{wsl:"/mnt/c/Program Files/Mozilla Firefox/firefox.exe"})),w(T,"edge",()=>S({darwin:"microsoft edge",win32:"msedge",linux:["microsoft-edge","microsoft-edge-dev"]},{wsl:"/mnt/c/Program Files (x86)/Microsoft/Edge/Application/msedge.exe"})),w(T,"browser",()=>"browser"),w(T,"browserPrivate",()=>"browserPrivate");let U=(a,b)=>{if("string"!=typeof a)throw TypeError("Expected a `target`");return P({...b,target:a})}}};

package/dist/web/.next-embedded/server/chunks/822.js

@@ -0,0 +1 @@
+"use strict";exports.id=822,exports.ids=[822],exports.modules={23893:(a,b,c)=>{c.d(b,{k:()=>g});let d=new Set(["GET","HEAD","OPTIONS"]),e=/^[a-z][a-z0-9+.-]*:\/\//iu;function f(a){if("string"!=typeof a)return null;let b=a.split(",")[0]?.trim()??"";if(0===b.length)return null;if(e.test(b))try{let a=new URL(b).host.toLowerCase();return a.length>0?a:null}catch{return null}return b.toLowerCase()}function g(a){if("string"!=typeof a.method||0===a.method.length)return{ok:!1,reason:"request method is missing — refusing to treat it as safe"};let b=a.method.toUpperCase();if(d.has(b))return{ok:!0,reason:`${b} does not change state`};if("string"!=typeof a.origin||0===a.origin.trim().length)return{ok:!1,reason:`${b} carries no Origin header. Browsers always send one on an unsafe method; a non-browser client must send \`Origin: <the base URL it is calling>\`.`};if("null"===a.origin.trim())return{ok:!1,reason:`${b} carries Origin: null, which matches no host`};let c=f(a.origin);if(null===c)return{ok:!1,reason:`${b} carries an Origin header that is not a URL`};let e=new Set([f(a.requestHost),f(a.hostHeader),f(a.forwardedHost)].filter(a=>null!==a));return 0===e.size?{ok:!1,reason:"no host could be determined for this request — cannot compare"}:e.has(c)?{ok:!0,reason:`Origin host "${c}" matches the request host`}:{ok:!1,reason:`Origin host "${c}" is none of ${[...e].map(a=>`"${a}"`).join(", ")}`}}},90822:(a,b,c)=>{c.d(b,{Yl:()=>u,ko:()=>F.k,iE:()=>M,hU:()=>K,S6:()=>v,Ht:()=>N,_h:()=>L,Hl:()=>H,zL:()=>m,K1:()=>C,YP:()=>E.YP,oO:()=>E.oO,$t:()=>I,gG:()=>s,Tq:()=>E.Tq,dF:()=>J,uW:()=>G,BW:()=>E.BW,W5:()=>E.W5,WH:()=>n,T4:()=>D,zP:()=>E.zP});var d=c(20784);let e=new TextEncoder,f="awinv1",g=/^[^\s@]+@[^\s@]+\.[^\s@]+$/u,h=["email","issuer","subject","iat","exp"],i="__Host-aw_invitation_identity";function j(a){let b="";for(let c of a)b+=String.fromCharCode(c);return btoa(b).replace(/\+/gu,"-").replace(/\//gu,"_").replace(/=+$/u,"")}function k(a){let b;if(!/^[A-Za-z0-9_-]+$/u.test(a))return null;let c=(4-a.length%4)%4,d=a.replace(/-/gu,"+").replace(/_/gu,"/")+"=".repeat(c);try{b=atob(d)}catch{return null}let e=new Uint8Array(new ArrayBuffer(b.length));for(let a=0;a<b.length;a+=1)e[a]=b.charCodeAt(a);return e}function l(a){return crypto.subtle.importKey("raw",e.encode(a),{name:"HMAC",hash:"SHA-256"},!1,["sign","verify"])}async function m(a,b,c=Date.now()){let d=a.email.trim().toLowerCase();if(!g.test(d)||""===a.issuer.trim()||""===a.subject.trim())throw Error("cannot mint an invitation identity token from an incomplete OIDC identity");let h=Math.floor(c/1e3),i={email:d,issuer:a.issuer,subject:a.subject,iat:h,exp:h+600},k=j(e.encode(JSON.stringify(i))),n=`${f}.${k}`,o=await crypto.subtle.sign("HMAC",await l(b),e.encode(n));return`${n}.${j(new Uint8Array(o))}`}async function n(a,b,c=Date.now()){let d;if("string"!=typeof a||0===a.length)return{ok:!1,reason:"no invitation identity cookie on the request"};let i=a.split(".");if(3!==i.length)return{ok:!1,reason:"malformed invitation identity token"};let[j,m,o]=i;if(j!==f||void 0===m||void 0===o)return{ok:!1,reason:"invitation identity token version is not accepted"};let p=k(o);if(null===p)return{ok:!1,reason:"signature segment is not base64url"};if(!await crypto.subtle.verify("HMAC",await l(b),p,e.encode(`${j}.${m}`)))return{ok:!1,reason:"signature does not verify"};let q=k(m);if(null===q)return{ok:!1,reason:"payload segment is not base64url"};try{d=JSON.parse(new TextDecoder().decode(q))}catch{return{ok:!1,reason:"payload is not JSON"}}if("object"!=typeof d||null===d||Array.isArray(d))return{ok:!1,reason:"payload is not a JSON object"};let r=d;if(Object.keys(r).length!==h.length||h.some(a=>!Object.hasOwn(r,a)))return{ok:!1,reason:"payload does not have the exact invitation identity claim set"};let{email:s,issuer:t,subject:u,iat:v,exp:w}=r;return"string"==typeof s&&s===s.trim().toLowerCase()&&g.test(s)?"string"!=typeof t||""===t.trim()?{ok:!1,reason:"issuer is missing or blank"}:"string"!=typeof u||""===u.trim()?{ok:!1,reason:"subject is missing or blank"}:"number"==typeof v&&Number.isSafeInteger(v)?"number"==typeof w&&Number.isSafeInteger(w)?v>Math.floor(c/1e3)+60?{ok:!1,reason:"iat is materially in the future"}:w<=v?{ok:!1,reason:"exp is not after iat"}:w-v>600?{ok:!1,reason:"invitation identity lifetime exceeds the maximum"}:1e3*w<=c?{ok:!1,reason:"invitation identity expired"}:{ok:!0,claims:{email:s,issuer:t,subject:u,iat:v,exp:w}}:{ok:!1,reason:"exp is missing or not an integer timestamp"}:{ok:!1,reason:"iat is missing or not an integer timestamp"}:{ok:!1,reason:"email is missing or not normalized"}}var o=c(63358),p=c(30232),q=c(82472);let r=new TextEncoder;function s(a=process.env){let b=a.OIDC_ISSUER_URL?.trim(),c=a.OIDC_CLIENT_ID?.trim(),d=a.OIDC_CLIENT_SECRET?.trim(),e=a.OIDC_REDIRECT_URI?.trim();if(!b&&!c&&!d&&!e)return null;if(!b||!c||!d||!e)throw Error("OIDC requires OIDC_ISSUER_URL, OIDC_CLIENT_ID, OIDC_CLIENT_SECRET and OIDC_REDIRECT_URI together.");return{issuer:b,clientId:c,clientSecret:d,redirectUri:e,scopes:["openid","profile","email"]}}async function t(a){return o.HD(new URL(a.issuer),a.clientId,a.clientSecret)}async function u(a,b,c=Date.now()){let d=await t(a),e=o.Wm(),f=await o.Yv(e),g=o.Du();return{url:o.Zw(d,{redirect_uri:a.redirectUri,scope:a.scopes.join(" "),code_challenge:f,code_challenge_method:"S256",state:g,response_mode:"form_post"}),transaction:await new p.P({verifier:e,state:g}).setProtectedHeader({alg:"HS256",typ:"JWT"}).setIssuedAt(Math.floor(c/1e3)).setExpirationTime(Math.floor(c/1e3)+600).sign(r.encode(b))}}async function v(a,b,c,d){let e=await (0,q.V)(d,r.encode(b),{algorithms:["HS256"]}),f=e.payload.verifier,g=e.payload.state;if("string"!=typeof f||"string"!=typeof g)throw Error("OIDC transaction is malformed.");let h=await t(a),i=(await o.vI(h,c,{pkceCodeVerifier:f,expectedState:g})).claims(),j=i?.sub,k=i?.email,l=i?.name;if("string"!=typeof j||"string"!=typeof k)throw Error("OIDC identity token must contain sub and email claims.");return{subject:j,email:k.toLowerCase(),name:"string"==typeof l?l:null}}let w=new TextEncoder,x="awsel1",y="__Host-aw_workspace_selection";function z(a){let b="";for(let c of a)b+=String.fromCharCode(c);return btoa(b).replace(/\+/gu,"-").replace(/\//gu,"_").replace(/=+$/u,"")}function A(a){let b;if(!/^[A-Za-z0-9_-]+$/u.test(a))return null;let c=(4-a.length%4)%4,d=a.replace(/-/gu,"+").replace(/_/gu,"/")+"=".repeat(c);try{b=atob(d)}catch{return null}let e=new Uint8Array(new ArrayBuffer(b.length));for(let a=0;a<b.length;a+=1)e[a]=b.charCodeAt(a);return e}function B(a){return crypto.subtle.importKey("raw",w.encode(a),{name:"HMAC",hash:"SHA-256"},!1,["sign","verify"])}async function C(a,b,c,d=Date.now()){let e=Math.floor(d/1e3),f=z(w.encode(JSON.stringify({userId:a,email:b,iat:e,exp:e+600}))),g=`${x}.${f}`,h=await crypto.subtle.sign("HMAC",await B(c),w.encode(g));return`${g}.${z(new Uint8Array(h))}`}async function D(a,b,c=Date.now()){let d;if("string"!=typeof a||0===a.length)return{ok:!1,reason:"no selection cookie on the request"};let e=a.split(".");if(3!==e.length)return{ok:!1,reason:"malformed selection token"};let[f,g,h]=e;if(f!==x||void 0===g||void 0===h)return{ok:!1,reason:"selection token version tag is not the one this build issues"};let i=A(h);if(null===i)return{ok:!1,reason:"signature segment is not base64url"};if(!await crypto.subtle.verify("HMAC",await B(b),i,w.encode(`${f}.${g}`)))return{ok:!1,reason:"signature does not verify"};let j=A(g);if(null===j)return{ok:!1,reason:"payload segment is not base64url"};try{d=JSON.parse(new TextDecoder().decode(j))}catch{return{ok:!1,reason:"payload is not JSON"}}if("object"!=typeof d||null===d||Array.isArray(d))return{ok:!1,reason:"payload is not a JSON object"};let{userId:k,email:l,iat:m,exp:n}=d;return"string"!=typeof k||0===k.length?{ok:!1,reason:"userId is missing or not a non-empty string"}:"string"!=typeof l||0===l.length?{ok:!1,reason:"email is missing or not a non-empty string"}:"number"==typeof m&&Number.isFinite(m)?"number"==typeof n&&Number.isFinite(n)?n<=m?{ok:!1,reason:"exp is not after iat"}:1e3*n<=c?{ok:!1,reason:"selection expired"}:n-m>600?{ok:!1,reason:"selection lifetime exceeds the maximum this build issues"}:{ok:!0,claims:{userId:k,email:l,iat:m,exp:n}}:{ok:!1,reason:"exp is missing or not a finite number"}:{ok:!1,reason:"iat is missing or not a finite number"}}var E=c(1987),F=c(23893);function G(){return(0,E.S)(y)}function H(){return(0,E.S)(i)}function I(){return(0,E.S)("aw_oidc_transaction")}function J(a,b=600){return{...function(a,b=600){return{name:y,value:a,httpOnly:!0,secure:!0,sameSite:"lax",path:"/",maxAge:b}}(a,b),name:G()}}function K(){return{...J(""),maxAge:0}}function L(a,b=600){return{...function(a,b=600){return{name:i,value:a,httpOnly:!0,secure:!0,sameSite:"lax",path:"/",maxAge:b}}(a,b),name:H()}}function M(){return{...L(""),maxAge:0}}async function N(){let a=(0,E.Tq)(process.env);if(!a.ok)return null;let b=await (0,d.UL)(),c=await (0,E.zP)(b.get((0,E.W5)())?.value,a.secret);return c.ok?c.claims:null}}};

package/dist/web/.next-embedded/server/chunks/8302.js

@@ -0,0 +1 @@
+"use strict";exports.id=8302,exports.ids=[8302],exports.modules={30232:(a,b,c)=>{c.d(b,{P:()=>n});var d=c(98107),e=c(58138),f=c(86654),g=c(35324),h=c(54504),i=c(53905);async function j(a,b,c){let[j,k,l,m]=a,n="";if(void 0!==k){let a=(0,f.ji)(g.Ye,k);k=a[0],n=(0,d.l)(a[1])}if(void 0!==l&&(l=(0,f.ji)(g.Ye,l)[0]),!k&&!l)throw new g.Ye("either setProtectedHeader or setUnprotectedHeader must be called before #sign()");if(!(0,f.fz)(k,l))throw new g.Ye("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");let o={...k,...l};(0,f.BU)(g.Ye,k);let p=(0,f.J0)(k,(0,f.nI)(g.Ye,f.qc,m,k,o));p||c?.();let{alg:q}=o;if("string"!=typeof q||!q)throw new g.Ye('JWS "alg" (Algorithm) Header Parameter missing or invalid');let r=(0,e.q)(q),s="",t=j,u;if(p){let b=a[4];b?(s=b[0]??=(0,d.l)(j),t=b[1]??=(0,h.lF)(s)):(s=(0,d.l)(j),u=h.Rd.encode(`${n}.${s}`))}u??=(0,h.xW)((0,h.lF)(n),(0,h.lF)("."),t);let v=await (0,i.GK)(await (0,i.dT)(r,b,"sign"),r.subtle,"sign");r.minRsaBits&&(0,i.or)(r.alg,v);let w={signature:(0,d.l)(new Uint8Array(await crypto.subtle.sign(r.signing,v,u))),payload:s};return k&&(w.protected=n),l&&(w.header=l),[w,p]}async function k(a,b,c,d,e){let[f]=await j([a,b,void 0,c],d,e);return`${f.protected}.${f.payload}.${f.signature}`}var l=c(48680);let m=l.cE;class n extends m{#a;setProtectedHeader(a){return(0,f.ac)(this.#a,"setProtectedHeader"),this.#a=a,this}async sign(a,b){return k((0,l.ub)(this),this.#a,b?.crit,a,()=>{throw new g.Dp("JWTs MUST NOT use unencoded payload")})}}},35324:(a,b,c)=>{c.d(b,{Dp:()=>j,Rb:()=>g,T0:()=>h,Ye:()=>i,h2:()=>k,ie:()=>e,n:()=>f});class d extends Error{static code="ERR_JOSE_GENERIC";code="ERR_JOSE_GENERIC";constructor(a,b){super(a,b),this.name=this.constructor.name,Error.captureStackTrace?.(this,this.constructor)}}class e extends d{static code="ERR_JWT_CLAIM_VALIDATION_FAILED";code="ERR_JWT_CLAIM_VALIDATION_FAILED";claim;reason;payload;constructor(a,b,c="unspecified",d="unspecified"){super(a,{cause:{claim:c,reason:d,payload:b}}),this.claim=c,this.reason=d,this.payload=b}}class f extends d{static code="ERR_JWT_EXPIRED";code="ERR_JWT_EXPIRED";claim;reason;payload;constructor(a,b,c="unspecified",d="unspecified"){super(a,{cause:{claim:c,reason:d,payload:b}}),this.claim=c,this.reason=d,this.payload=b}}class g extends d{static code="ERR_JOSE_ALG_NOT_ALLOWED";code="ERR_JOSE_ALG_NOT_ALLOWED"}class h extends d{static code="ERR_JOSE_NOT_SUPPORTED";code="ERR_JOSE_NOT_SUPPORTED"}class i extends d{static code="ERR_JWS_INVALID";code="ERR_JWS_INVALID"}class j extends d{static code="ERR_JWT_INVALID";code="ERR_JWT_INVALID"}class k extends d{static code="ERR_JWS_SIGNATURE_VERIFICATION_FAILED";code="ERR_JWS_SIGNATURE_VERIFICATION_FAILED";constructor(a="signature verification failed",b){super(a,b)}}},48680:(a,b,c)=>{let d;c.d(b,{cE:()=>w,k6:()=>t,ub:()=>v});var e=c(35324),f=c(54504),g=c(86654);let h=a=>Math.floor(a.getTime()/1e3),i={s:1,m:60,h:3600,d:86400,w:604800,y:0x1e187e0},j=/^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i,k="check_failed";function l(){throw TypeError("Invalid time period format")}function m(a){"string"!=typeof a&&l();let b=j.exec(a);(!b||b[4]&&b[1])&&l();let c=Math.round(parseFloat(b[2])*i[b[3][0].toLowerCase()]);return Number.isFinite(c)||l(),"-"===b[1]||"ago"===b[4]?-c:c}function n(a,b){if(!Number.isFinite(b))throw TypeError(`Invalid ${a} input`);return b}function o(a,b){if("string"!=typeof b)throw TypeError(`"${a}" claim must be a string`)}function p(a,b){return"number"==typeof a?n(b,a):a instanceof Date?n(b,h(a)):h(new Date)+m(a)}let q=a=>{let b=a.toLowerCase();return a.includes("/")?b:`application/${b}`};function r(a,b,c=!1){let d=a[b];if(!(void 0===d&&!c)){if("number"!=typeof d)throw new e.ie(`"${b}" claim must be a number`,a,b,"invalid");return d}}function s(a,b){throw new e.ie(`unexpected "${b}" claim value`,a,b,k)}function t(a,b,c={}){let d,i,j;try{d=JSON.parse(f.u8.decode(b))}catch{}if(!(0,g.Gv)(d))throw new e.Dp("JWT Claims Set must be a top-level JSON object");let{typ:l}=c;if(void 0!==l&&("string"!=typeof a.typ||q(a.typ)!==q(l)))throw new e.ie('unexpected "typ" JWT header value',d,"typ",k);let{requiredClaims:o=[],issuer:p,subject:u,audience:v,maxTokenAge:w}=c,x=[...o];for(let a of(void 0!==w&&x.push("iat"),void 0!==v&&x.push("aud"),void 0!==u&&x.push("sub"),void 0!==p&&x.push("iss"),new Set(x.reverse())))if(!Object.hasOwn(d,a))throw new e.ie(`missing required "${a}" claim`,d,a,"missing");void 0===p||(Array.isArray(p)?p:[p]).includes(d.iss)||s(d,"iss"),void 0!==u&&d.sub!==u&&s(d,"sub"),void 0===v||(i=d.aud,j="string"==typeof v?[v]:v,"string"==typeof i?j.includes(i):!!Array.isArray(i)&&j.some(a=>i.includes(a)))||s(d,"aud");let{clockTolerance:y}=c,z=0;if("string"==typeof y)z=m(y);else if(void 0!==y){if("number"!=typeof y)throw TypeError("Invalid clockTolerance option type");z=y}n("clockTolerance option",z);let{currentDate:A}=c,B=n("currentDate option",h(void 0===A?new Date:A)),C=r(d,"iat",void 0!==w),D=r(d,"nbf");if(void 0!==D&&D>B+z)throw new e.ie('"nbf" claim timestamp check failed',d,"nbf",k);let E=r(d,"exp");if(void 0!==E&&E<=B-z)throw new e.n('"exp" claim timestamp check failed',d,"exp",k);if(void 0!==w){let a=B-C;if(a-z>n("maxTokenAge option","number"==typeof w?w:m(w)))throw new e.n('"iat" claim timestamp check failed (too far in the past)',d,"iat",k);if(a<-z)throw new e.ie('"iat" claim timestamp check failed (it should be in the past)',d,"iat",k)}return d}function u(a){return d.get(a)}function v(a){let b=u(a);for(let a of["iat","nbf","exp"]){let c=b[a];if("number"==typeof c&&!Number.isFinite(c))throw TypeError(`"${a}" claim must be a finite number`)}return f.Rd.encode(JSON.stringify(b))}class w{constructor(a={}){if(!(0,g.Gv)(a))throw TypeError("JWT Claims Set MUST be an object");(d||=new WeakMap).set(this,structuredClone(a))}setIssuer(a){return o("iss",a),u(this).iss=a,this}setSubject(a){return o("sub",a),u(this).sub=a,this}setAudience(a){return function(a){if("string"!=typeof a&&(!Array.isArray(a)||Array.from(a).some(a=>"string"!=typeof a)))throw TypeError('"aud" claim must be a string or an array of strings')}(a),u(this).aud=a,this}setJti(a){return o("jti",a),u(this).jti=a,this}setNotBefore(a){return u(this).nbf=p(a,"setNotBefore"),this}setExpirationTime(a){return u(this).exp=p(a,"setExpirationTime"),this}setIssuedAt(a){let b=u(this);return void 0===a?b.iat=h(new Date):"string"==typeof a?b.iat=n("setIssuedAt",h(new Date)+m(a)):b.iat=p(a,"setIssuedAt"),this}}},53905:(a,b,c)=>{let d;c.d(b,{GK:()=>p,dT:()=>h,or:()=>n});var e=c(86654),f=c(98107),g=c(35324);async function h(a,b,c){let g,h,{alg:m,secret:n}=a,p="decrypt"===c||"sign"===c;if(n&&b instanceof Uint8Array)return b;if((0,e.Gv)(b)){if("string"!=typeof(g=function(a){let b={__proto__:null,...a};if(void 0!==b.ext&&"boolean"!=typeof b.ext)throw TypeError('"ext" (Extractable) Parameter must be a boolean');if(void 0!==b.key_ops){let a=b.key_ops,c=Array.isArray(a)?[...a]:void 0;if(!c||c.some(a=>"string"!=typeof a)||new Set(c).size!==c.length)throw TypeError('"key_ops" (Key Operations) Parameter must be an array of unique strings');b.key_ops=c}return b}(b)).kty)throw l(m,b,n);if(!(n?"oct"===g.kty&&"string"==typeof g.k:"oct"!==g.kty&&(p?"AKP"===g.kty&&"string"==typeof g.priv||"string"==typeof g.d:void 0===g.d&&void 0===g.priv)))throw TypeError(n?'JSON Web Key for symmetric algorithms must have JWK "kty" (Key Type) equal to "oct" and the JWK "k" (Key Value) present':`JSON Web Key for this operation must be a ${p?"private":"public"} JWK`);if(((a,b,c)=>{let{alg:d}=a;if(void 0!==b.use){let a="sign"===c||"verify"===c?"sig":"enc";if(b.use!==a)throw TypeError(`Invalid key for this operation, its "use" must be "${a}" when present`)}if(void 0!==b.alg&&b.alg!==d)throw TypeError(`Invalid key for this operation, its "alg" must be "${d}" when present`);if(Array.isArray(b.key_ops)){let d="encrypt"===c||"decrypt"===c?a.ops?.[+("encrypt"!==c)]:c;if(d&&!b.key_ops.includes(d))throw TypeError(`Invalid key for this operation, its "key_ops" must include "${d}" when present`)}})(a,g,c),"oct"===g.kty)return(0,f.D)(g.k);if(!Object.isFrozen(b)){let{key_ops:a}=b;Array.isArray(a)&&Object.freeze(a),Object.freeze(b)}}else{if(!k(b))throw l(m,b,n);let a=n?"secret":p?"private":"public";if(b.type!==a&&(n||["secret","public","private"].includes(b.type)))throw TypeError(`${b[Symbol.toStringTag]} instances must be of type "${a}" for the ${m} algorithm`);if(j(b))return b;if("secret"===(h=b).type)return h.export()}let q=(d||=new WeakMap).get(b);if(q?.[m])return q[m];if(q||d.set(b,q={}),h&&"function"==typeof h.toCryptoKey){let b="public"===h.type,c=i[h.asymmetricKeyDetails?.namedCurve],d=a.resolve?.({crv:c,asymmetricKeyType:h.asymmetricKeyType})??a.subtle;return q[m]=h.toCryptoKey(d,b,a.usages[+!b])}return(g??=h.export({format:"jwk"})).alg=m,q[m]=await o(a,g)}let i={__proto__:null,prime256v1:"P-256",secp384r1:"P-384",secp521r1:"P-521"},j=a=>{if(a?.[Symbol.toStringTag]==="CryptoKey")return!0;try{return a instanceof CryptoKey}catch{return!1}},k=a=>j(a)||a?.[Symbol.toStringTag]==="KeyObject";function l(a,b,c){let d=["CryptoKey","KeyObject","JSON Web Key"];return c&&d.push("Uint8Array"),TypeError(function(a,b,...c){if(c.length>2){let b=c.pop();a+=`one of type ${c.join(", ")}, or ${b}.`}else 2===c.length?a+=`one of type ${c[0]} or ${c[1]}.`:a+=`of type ${c[0]}.`;return null==b?a+=` Received ${b}`:"function"==typeof b&&b.name?a+=` Received function ${b.name}`:"object"==typeof b&&null!=b&&b.constructor?.name&&(a+=` Received an instance of ${b.constructor.name}`),a}(`Key for the ${a} algorithm must be `,b,...d))}let m=(a,b="algorithm.name")=>TypeError(`CryptoKey does not support this operation, its ${b} must be ${a}`);function n(a,b){let{modulusLength:c}=b.algorithm;if("number"!=typeof c||c<2048)throw TypeError(`${a} requires key modulusLength to be 2048 bits or larger`)}async function o(a,b,c){if(!a.kty.includes(b.kty))throw new g.T0('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');let d=a.resolve?.({kty:b.kty,crv:b.crv})??a.subtle,e=!!(b.d||b.priv),f={...b,ext:c??b.ext};return"AKP"!==f.kty&&delete f.alg,delete f.use,crypto.subtle.importKey("jwk",f,d,f.ext??!e,b.key_ops??a.usages[+!!e])}async function p(a,b,c,d=!1){return a instanceof Uint8Array&&(a=await crypto.subtle.importKey("raw",a,b,d,[c])),function(a,b,c){let d=a.algorithm;if(d.name!==b.name)throw m(b.name);if(b.hash&&d.hash?.name!==b.hash)throw m(b.hash,"algorithm.hash");if(b.namedCurve&&d.namedCurve!==b.namedCurve)throw m(b.namedCurve,"algorithm.namedCurve");if(void 0!==b.length&&d.length!==b.length)throw m(b.length,"algorithm.length");if(c&&!a.usages.includes(c))throw TypeError(`CryptoKey does not support this operation, its usages must include ${c}.`)}(a,b,c),a}},54504:(a,b,c)=>{c.d(b,{D0:()=>e,Rd:()=>d,WG:()=>j,lF:()=>i,u8:()=>f,xW:()=>g,y4:()=>k});let d=new TextEncoder,e=new TextDecoder,f=new TextDecoder("utf-8",{fatal:!0});function g(...a){let b=new Uint8Array(a.reduce((a,{length:b})=>a+b,0)),c=0;for(let d of a)b.set(d,c),c+=d.length;return b}let h=/[^\x00-\x7f]/;function i(a){if("string"==typeof a&&a.length>=128){if(h.test(a))throw TypeError("non-ASCII string encountered in encode()");return d.encode(a)}let b=new Uint8Array(a.length);for(let c=0;c<a.length;c++){let d=a.charCodeAt(c);if(d>127)throw TypeError("non-ASCII string encountered in encode()");b[c]=d}return b}function j(a,b=!1){if(Uint8Array.prototype.toBase64)return a.toBase64({alphabet:b?"base64url":"base64",omitPadding:b});let c=[];for(let b=0;b<a.length;b+=32768)c.push(String.fromCharCode.apply(null,a.subarray(b,b+32768)));let d=btoa(c.join(""));return b?d.replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_"):d}function k(a,b=!1){if(Uint8Array.fromBase64)return Uint8Array.fromBase64(a,{alphabet:b?"base64url":"base64"});if(b){if(a.includes("+")||a.includes("/"))throw TypeError("Invalid base64url");a=a.replace(/-/g,"+").replace(/_/g,"/")}let c=atob(a),d=new Uint8Array(c.length);for(let a=0;a<c.length;a++)d[a]=c.charCodeAt(a);return d}},58138:(a,b,c)=>{c.d(b,{q:()=>l});var d=c(35324);let e=[["verify"],["sign"]];function f(a){let b={name:"HMAC",hash:`SHA-${a}`};return{kty:["oct"],secret:!0,subtle:b,signing:b,usages:e}}function g(a,b){let c={name:b?"RSA-PSS":"RSASSA-PKCS1-v1_5",hash:`SHA-${a}`};return{kty:["RSA"],subtle:c,signing:b?{...c,saltLength:b}:c,usages:e,minRsaBits:2048}}function h(a,b){return{kty:["EC"],crv:a,subtle:{name:"ECDSA",namedCurve:a},signing:{name:"ECDSA",hash:`SHA-${b}`},usages:e}}function i(){let a={name:"Ed25519"};return{kty:["OKP"],crv:"Ed25519",subtle:a,signing:a,usages:e}}function j(a){let b={name:`ML-DSA-${a}`};return{kty:["AKP"],subtle:b,signing:b,usages:e}}let k=function(a){let b={__proto__:null};for(let c in a)b[c]={...a[c],alg:c};return b}({HS256:f(256),HS384:f(384),HS512:f(512),RS256:g(256),RS384:g(384),RS512:g(512),PS256:g(256,32),PS384:g(384,48),PS512:g(512,64),ES256:h("P-256",256),ES384:h("P-384",384),ES512:h("P-521",512),EdDSA:i(),Ed25519:i(),"ML-DSA-44":j(44),"ML-DSA-65":j(65),"ML-DSA-87":j(87)});function l(a){let b="string"==typeof a?k[a]:void 0;if(!b)throw new d.T0(`alg ${a} is not supported either by JOSE or your javascript runtime`);return b}},63358:(a,b,c)=>{let d,e,f,g,h;function i(a,b){if(null==a)return!1;try{return a instanceof b||Object.getPrototypeOf(a)[Symbol.toStringTag]===b.prototype[Symbol.toStringTag]}catch{return!1}}c.d(b,{vI:()=>bb,Zw:()=>bc,Yv:()=>a0,HD:()=>a6,Wm:()=>a1,Du:()=>a2}),("u"<typeof navigator||!navigator.userAgent?.startsWith?.("Mozilla/5.0 "))&&(d="oauth4webapi/v3.8.8");let j="ERR_INVALID_ARG_VALUE",k="ERR_INVALID_ARG_TYPE";function l(a,b,c){let d=TypeError(a,{cause:c});return Object.assign(d,{code:b}),d}let m=Symbol(),n=Symbol(),o=Symbol(),p=Symbol();Symbol();let q=Symbol();Symbol();let r=new TextEncoder,s=new TextDecoder;function t(a){return"string"==typeof a?r.encode(a):s.decode(a)}function u(a){return"string"==typeof a?f(a):e(a)}e=Uint8Array.prototype.toBase64?a=>(a instanceof ArrayBuffer&&(a=new Uint8Array(a)),a.toBase64({alphabet:"base64url",omitPadding:!0})):a=>{a instanceof ArrayBuffer&&(a=new Uint8Array(a));let b=[];for(let c=0;c<a.byteLength;c+=32768)b.push(String.fromCharCode.apply(null,a.subarray(c,c+32768)));return btoa(b.join("")).replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_")},f=Uint8Array.fromBase64?a=>{try{return Uint8Array.fromBase64(a,{alphabet:"base64url"})}catch(a){throw l("The input to be decoded is not correctly encoded.",j,a)}}:a=>{try{let b=atob(a.replace(/-/g,"+").replace(/_/g,"/").replace(/\s/g,"")),c=new Uint8Array(b.length);for(let a=0;a<b.length;a++)c[a]=b.charCodeAt(a);return c}catch(a){throw l("The input to be decoded is not correctly encoded.",j,a)}};class v extends Error{code;constructor(a,b){super(a,b),this.name=this.constructor.name,this.code=aB,Error.captureStackTrace?.(this,this.constructor)}}class w extends Error{code;constructor(a,b){super(a,b),this.name=this.constructor.name,b?.code&&(this.code=b?.code),Error.captureStackTrace?.(this,this.constructor)}}function x(a,b,c){return new w(a,{code:b,cause:c})}function y(a){return!(null===a||"object"!=typeof a||Array.isArray(a))}function z(a){i(a,Headers)&&(a=Object.fromEntries(a.entries()));let b=new Headers(a??{});if(d&&!b.has("user-agent")&&b.set("user-agent",d),b.has("authorization"))throw l('"options.headers" must not include the "authorization" header name',j);return b}function A(a,b){if(void 0!==b){if("function"==typeof b&&(b=b(a.href)),!(b instanceof AbortSignal))throw l('"options.signal" must return or be an instance of AbortSignal',k);return b}}function B(a){return a.includes("//")?a.replace("//","/"):a}async function C(a,b,c,d){if(!(a instanceof URL))throw l(`"${b}" must be an instance of URL`,k);R(a,d?.[m]!==!0);let e=c(new URL(a.href)),f=z(d?.headers);return f.set("accept","application/json"),(d?.[p]||fetch)(e.href,{body:void 0,headers:Object.fromEntries(f.entries()),method:"GET",redirect:"manual",signal:A(e,d?.signal)})}async function D(a,b){return C(a,"issuerIdentifier",a=>{switch(b?.algorithm){case void 0:case"oidc":a.pathname=B(`${a.pathname}/.well-known/openid-configuration`);break;case"oauth2":!function(a,b,c=!1){"/"===a.pathname?a.pathname=b:a.pathname=B(`${b}/${c?a.pathname:a.pathname.replace(/(\/)$/,"")}`)}(a,".well-known/oauth-authorization-server");break;default:throw l('"options.algorithm" must be "oidc" (default), or "oauth2"',j)}return a},b)}function E(a,b,c,d,e){try{if("number"!=typeof a||!Number.isFinite(a))throw l(`${c} must be a number`,k,e);if(a>0)return;if(b){if(0!==a)throw l(`${c} must be a non-negative number`,j,e);return}throw l(`${c} must be a positive number`,j,e)}catch(a){if(d)throw x(a.message,d,e);throw a}}function F(a,b,c,d){try{if("string"!=typeof a)throw l(`${b} must be a string`,k,d);if(0===a.length)throw l(`${b} must not be empty`,j,d)}catch(a){if(c)throw x(a.message,c,d);throw a}}async function G(a,b){if(!(a instanceof URL)&&a!==aX)throw l('"expectedIssuerIdentifier" must be an instance of URL',k);if(!i(b,Response))throw l('"response" must be an instance of Response',k);if(200!==b.status)throw x('"response" is not a conform Authorization Server Metadata response (unexpected HTTP status code)',aG,b);aO(b);let c=await aW(b);if(F(c.issuer,'"response" body "issuer" property',aE,{body:c}),a!==aX&&new URL(c.issuer).href!==a.href)throw x('"response" body "issuer" property does not match the expected value',aL,{expected:a.href,body:c,attribute:"issuer"});return c}function H(a){var b=a,c="application/json";if(ac(b)!==c)throw function(a,...b){let c='"response" content-type must be ';if(b.length>2){let a=b.pop();c+=`${b.join(", ")}, or ${a}`}else 2===b.length?c+=`${b[0]} or ${b[1]}`:c+=b[0];return x(c,aF,a)}(b,c)}function I(){return u(crypto.getRandomValues(new Uint8Array(32)))}async function J(a){return F(a,"codeVerifier"),u(await crypto.subtle.digest("SHA-256",t(a)))}function K(a){let b=a?.[n];return"number"==typeof b&&Number.isFinite(b)?b:0}function L(a){let b=a?.[o];return"number"==typeof b&&Number.isFinite(b)&&-1!==Math.sign(b)?b:30}function M(){return Math.floor(Date.now()/1e3)}function N(a){if("object"!=typeof a||null===a)throw l('"as" must be an object',k);F(a.issuer,'"as.issuer"')}function O(a){if("object"!=typeof a||null===a)throw l('"client" must be an object',k);F(a.client_id,'"client.client_id"')}function P(a){return F(a,'"clientSecret"'),(b,c,d,e)=>{d.set("client_id",c.client_id),d.set("client_secret",a)}}let Q=URL.parse?(a,b)=>URL.parse(a,b):(a,b)=>{try{return new URL(a,b)}catch{return null}};function R(a,b){if(b&&"https:"!==a.protocol)throw x("only requests to HTTPS are allowed",aH,a);if("https:"!==a.protocol&&"http:"!==a.protocol)throw x("only HTTP and HTTPS requests are allowed",aI,a)}function S(a,b,c,d){let e;if("string"!=typeof a||!(e=Q(a)))throw x(`authorization server metadata does not contain a valid ${c?`"as.mtls_endpoint_aliases.${b}"`:`"as.${b}"`}`,void 0===a?aM:aN,{attribute:c?`mtls_endpoint_aliases.${b}`:b});return R(e,d),e}function T(a,b,c,d){return c&&a.mtls_endpoint_aliases&&b in a.mtls_endpoint_aliases?S(a.mtls_endpoint_aliases[b],b,c,d):S(a[b],b,c,d)}class U extends Error{cause;code;error;status;error_description;response;constructor(a,b){super(a,b),this.name=this.constructor.name,this.code=aA,this.cause=b.cause,this.error=b.cause.error,this.status=b.response.status,this.error_description=b.cause.error_description,Object.defineProperty(this,"response",{enumerable:!1,value:b.response}),Error.captureStackTrace?.(this,this.constructor)}}class V extends Error{cause;code;error;error_description;constructor(a,b){super(a,b),this.name=this.constructor.name,this.code=aC,this.cause=b.cause,this.error=b.cause.get("error"),this.error_description=b.cause.get("error_description")??void 0,Error.captureStackTrace?.(this,this.constructor)}}class W extends Error{cause;code;response;status;constructor(a,b){super(a,b),this.name=this.constructor.name,this.code=az,this.cause=b.cause,this.status=b.response.status,this.response=b.response,Object.defineProperty(this,"response",{enumerable:!1}),Error.captureStackTrace?.(this,this.constructor)}}let X="[a-zA-Z0-9!#$%&\\'\\*\\+\\-\\.\\^_`\\|~]+",Y=RegExp("^[,\\s]*("+X+")"),Z=RegExp("^[,\\s]*("+X+')\\s*=\\s*"((?:[^"\\\\]|\\\\[\\s\\S])*)"[,\\s]*(.*)'),$=RegExp("^[,\\s]*"+("("+X+")\\s*=\\s*(")+X+")[,\\s]*(.*)"),_=RegExp("^([a-zA-Z0-9\\-\\._\\~\\+\\/]+={0,2})(?:$|[,\\s])(.*)");async function aa(a){if(a.status>399&&a.status<500){aO(a),H(a);try{let b=await a.clone().json();if(y(b)&&"string"==typeof b.error&&b.error.length)return b}catch{}}}async function ab(a,b,c){if(a.status!==b){let b;if(function(a){let b;if(b=function(a){if(!i(a,Response))throw l('"response" must be an instance of Response',k);let b=a.headers.get("www-authenticate");if(null===b)return;let c=[],d=b;for(;d;){let a,b=d.match(Y),e=b?.["1"].toLowerCase();if(!e)return;let f=d.substring(b[0].length);if(f&&!f.match(/^[\s,]/))return;let g=f.match(/^\s+(.*)$/),h=!!g;d=g?g[1]:void 0;let i={};if(h)for(;d;){let c,e;if(b=d.match(Z)){[,c,e,d]=b,e.includes("\\")&&(e=e.replace(/\\([\s\S])/g,"$1")),i[c.toLowerCase()]=e;continue}if(b=d.match($)){[,c,e,d]=b,i[c.toLowerCase()]=e;continue}if(b=d.match(_)){if(Object.keys(i).length)break;[,a,d]=b;break}return}else d=f||void 0;let j={scheme:e,parameters:i};a&&(j.token68=a),c.push(j)}if(c.length)return c}(a))throw new W("server responded with a challenge in the WWW-Authenticate HTTP Header",{cause:b,response:a})}(a),b=await aa(a))throw await a.body?.cancel(),new U("server responded with an error in the response body",{cause:b,response:a});throw x(`"response" is not a conform ${c} response (unexpected HTTP status code)`,aG,a)}}function ac(a){return a.headers.get("content-type")?.split(";")[0]}async function ad(a,b,c,d,e,f,g){return await c(a,b,e,f),f.set("content-type","application/x-www-form-urlencoded;charset=UTF-8"),(g?.[p]||fetch)(d.href,{body:e,headers:Object.fromEntries(f.entries()),method:"POST",redirect:"manual",signal:A(d,g?.signal)})}async function ae(a,b,c,d,e,f){let g=T(a,"token_endpoint",b.use_mtls_endpoint_aliases,f?.[m]!==!0);e.set("grant_type",d);let h=z(f?.headers);if(h.set("accept","application/json"),f?.DPoP!==void 0){var i=f.DPoP;if(!al.has(i))throw l('"options.DPoP" is not a valid DPoPHandle',j);await f.DPoP.addProof(g,h,"POST")}let k=await ad(a,b,c,g,e,h,f);return f?.DPoP?.cacheNonce(k,g),k}Symbol();let af=new WeakMap,ag=new WeakMap;function ah(a){if(!a.id_token)return;let b=af.get(a);if(!b)throw l('"ref" was already garbage collected or did not resolve from the proper sources',j);return b}async function ai(a,b,c,d,e,f){if(N(a),O(b),!i(c,Response))throw l('"response" must be an instance of Response',k);await ab(c,200,"Token Endpoint"),aO(c);let g=await aW(c);if(F(g.access_token,'"response" body "access_token" property',aE,{body:g}),F(g.token_type,'"response" body "token_type" property',aE,{body:g}),g.token_type=g.token_type.toLowerCase(),void 0!==g.expires_in){let a="number"!=typeof g.expires_in?parseFloat(g.expires_in):g.expires_in;E(a,!0,'"response" body "expires_in" property',aE,{body:g}),g.expires_in=a}if(void 0!==g.refresh_token&&F(g.refresh_token,'"response" body "refresh_token" property',aE,{body:g}),void 0!==g.scope&&"string"!=typeof g.scope)throw x('"response" body "scope" property must be a string',aE,{body:g});if(void 0!==g.id_token){var h,j,m,n,o,p;F(g.id_token,'"response" body "id_token" property',aE,{body:g});let f=[];!0===b.require_auth_time&&f.push("auth_time"),void 0!==b.default_max_age&&(E(b.default_max_age,!0,'"client.default_max_age"'),f.push("auth_time")),d?.length&&f.push(...d);let{claims:i,jwt:k}=await (h=a,j=b,m=g.id_token,n=f,o=e,aP(m,aS.bind(void 0,j.id_token_signed_response_alg,h.id_token_signing_alg_values_supported,"RS256"),K(j),L(j),o).then(ap.bind(void 0,["aud","exp","iat","iss","sub",...n])).then(ak.bind(void 0,h)).then(aj.bind(void 0,j.client_id)).then(aq.bind(void 0,"sub")));(function(a,b){if(Array.isArray(b.aud)&&1!==b.aud.length){if(void 0===b.azp)throw x('ID Token "aud" (audience) claim includes additional untrusted audiences',aK,{claims:b,claim:"aud"});if(b.azp!==a.client_id)throw x('unexpected ID Token "azp" (authorized party) claim value',aK,{expected:a.client_id,claims:b,claim:"azp"})}})(b,i),void 0!==(p=i).auth_time&&E(p.auth_time,!0,'ID Token "auth_time" (authentication time)',aE,{claims:p}),ag.set(c,k),af.set(g,i)}if(f?.[g.token_type]!==void 0)f[g.token_type](c,g);else if("dpop"!==g.token_type&&"bearer"!==g.token_type)throw new v("unsupported `token_type` value",{cause:{body:g}});return g}function aj(a,b){if(Array.isArray(b.claims.aud)){if(!b.claims.aud.includes(a))throw x('unexpected JWT "aud" (audience) claim value',aK,{expected:a,claims:b.claims,claim:"aud"})}else if(b.claims.aud!==a)throw x('unexpected JWT "aud" (audience) claim value',aK,{expected:a,claims:b.claims,claim:"aud"});return b}function ak(a,b){let c=a[aY]?.(b)??a.issuer;if(b.claims.iss!==c)throw x('unexpected JWT "iss" (issuer) claim value',aK,{expected:c,claims:b.claims,claim:"iss"});return b}let al=new WeakSet,am=Symbol();async function an(a,b,c,d,e,f,g){if(N(a),O(b),!al.has(d))throw l('"callbackParameters" must be an instance of URLSearchParams obtained from "validateAuthResponse()", or "validateJwtAuthResponse()',j);F(e,'"redirectUri"');let h=aT(d,"code");if(!h)throw x('no authorization code in "callbackParameters"',aE);let i=new URLSearchParams(g?.additionalParameters);return i.set("redirect_uri",e),i.set("code",h),f!==am&&(F(f,'"codeVerifier"'),i.set("code_verifier",f)),ae(a,b,c,"authorization_code",i,g)}let ao={aud:"audience",c_hash:"code hash",client_id:"client id",exp:"expiration time",iat:"issued at",iss:"issuer",jti:"jwt id",nonce:"nonce",s_hash:"state hash",sub:"subject",ath:"access token hash",htm:"http method",htu:"http uri",cnf:"confirmation",auth_time:"authentication time"};function ap(a,b){for(let c of a)if(void 0===b.claims[c])throw x(`JWT "${c}" (${ao[c]}) claim missing`,aE,{claims:b.claims});return b}function aq(a,b){if("string"!=typeof b.claims[a])throw x(`unexpected JWT "${a}" (${ao[a]}) claim type`,aE,{claims:b.claims});return b}function ar(a,b){if(b===av)return b;let c=void 0===b;return(c&&(b=a.default_max_age),void 0===b)?av:(E(b,!0,c?'"client.default_max_age"':'"maxAge" argument'),b)}function as(a,b,c){if(c===av)return;let d=M()+K(a),e=L(a);if(b.auth_time+c<d-e)throw x("too much time has elapsed since the last End-User authentication",aJ,{claims:b,now:d,tolerance:e,claim:"auth_time"})}function at(a,b){let c=b===au?void 0:b;if(a.nonce!==c)throw x('unexpected ID Token "nonce" claim value',aK,{expected:c,claims:a,claim:"nonce"})}let au=Symbol(),av=Symbol();async function aw(a,b,c,d){return"string"==typeof d?.expectedNonce||"number"==typeof d?.maxAge||d?.requireIdToken?ax(a,b,c,d.expectedNonce,d.maxAge,d[q],d.recognizedTokenTypes):ay(a,b,c,d?.maxAge,d?.[q],d?.recognizedTokenTypes)}async function ax(a,b,c,d,e,f,g){let h=[];switch(d){case void 0:d=au;break;case au:break;default:F(d,'"expectedNonce" argument'),h.push("nonce")}(e=ar(b,e))!==av&&h.push("auth_time");let i=await ai(a,b,c,h,f,g);F(i.id_token,'"response" body "id_token" property',aE,{body:i});let j=ah(i);return as(b,j,e),at(j,d),i}async function ay(a,b,c,d,e,f){let g=await ai(a,b,c,void 0,e,f),h=ah(g);return h&&(as(b,h,ar(b,d)),at(h,au)),g}let az="OAUTH_WWW_AUTHENTICATE_CHALLENGE",aA="OAUTH_RESPONSE_BODY_ERROR",aB="OAUTH_UNSUPPORTED_OPERATION",aC="OAUTH_AUTHORIZATION_RESPONSE_ERROR",aD="OAUTH_PARSE_ERROR",aE="OAUTH_INVALID_RESPONSE",aF="OAUTH_RESPONSE_IS_NOT_JSON",aG="OAUTH_RESPONSE_IS_NOT_CONFORM",aH="OAUTH_HTTP_REQUEST_FORBIDDEN",aI="OAUTH_REQUEST_PROTOCOL_FORBIDDEN",aJ="OAUTH_JWT_TIMESTAMP_CHECK_FAILED",aK="OAUTH_JWT_CLAIM_COMPARISON_FAILED",aL="OAUTH_JSON_ATTRIBUTE_COMPARISON_FAILED",aM="OAUTH_MISSING_SERVER_METADATA",aN="OAUTH_INVALID_SERVER_METADATA";function aO(a){if(a.bodyUsed)throw l('"response" body has been used already',j)}async function aP(a,b,c,d,e){let f,g,{0:h,1:i,length:j}=a.split(".");if(5===j)if(void 0!==e)a=await e(a),{0:h,1:i,length:j}=a.split(".");else throw new v("JWE decryption is not configured",{cause:a});if(3!==j)throw x("Invalid JWT",aE,a);try{f=JSON.parse(t(u(h)))}catch(a){throw x("failed to parse JWT Header body as base64url encoded JSON",aD,a)}if(!y(f))throw x("JWT Header must be a top level object",aE,a);if(b(f),void 0!==f.crit)throw new v('no JWT "crit" header parameter extensions are supported',{cause:{header:f}});try{g=JSON.parse(t(u(i)))}catch(a){throw x("failed to parse JWT Payload body as base64url encoded JSON",aD,a)}if(!y(g))throw x("JWT Payload must be a top level object",aE,a);let k=M()+c;if(void 0!==g.exp){if("number"!=typeof g.exp)throw x('unexpected JWT "exp" (expiration time) claim type',aE,{claims:g});if(g.exp<=k-d)throw x('unexpected JWT "exp" (expiration time) claim value, expiration is past current timestamp',aJ,{claims:g,now:k,tolerance:d,claim:"exp"})}if(void 0!==g.iat&&"number"!=typeof g.iat)throw x('unexpected JWT "iat" (issued at) claim type',aE,{claims:g});if(void 0!==g.iss&&"string"!=typeof g.iss)throw x('unexpected JWT "iss" (issuer) claim type',aE,{claims:g});if(void 0!==g.nbf){if("number"!=typeof g.nbf)throw x('unexpected JWT "nbf" (not before) claim type',aE,{claims:g});if(g.nbf>k+d)throw x('unexpected JWT "nbf" (not before) claim value',aJ,{claims:g,now:k,tolerance:d,claim:"nbf"})}if(void 0!==g.aud&&"string"!=typeof g.aud&&!Array.isArray(g.aud))throw x('unexpected JWT "aud" (audience) claim type',aE,{claims:g});return{header:f,claims:g,jwt:a}}async function aQ(a){if(a.bodyUsed)throw l("form_post Request instances must contain a readable body",j,{cause:a});return a.text()}async function aR(a){if("POST"!==a.method)throw l("form_post responses are expected to use the POST method",j,{cause:a});if("application/x-www-form-urlencoded"!==ac(a))throw l("form_post responses are expected to use the application/x-www-form-urlencoded content-type",j,{cause:a});return aQ(a)}function aS(a,b,c,d){if(void 0!==a){if("string"==typeof a?d.alg!==a:!a.includes(d.alg))throw x('unexpected JWT "alg" header parameter',aE,{header:d,expected:a,reason:"client configuration"});return}if(Array.isArray(b)){if(!b.includes(d.alg))throw x('unexpected JWT "alg" header parameter',aE,{header:d,expected:b,reason:"authorization server metadata"});return}if(void 0!==c){if("string"==typeof c?d.alg!==c:"function"==typeof c?!c(d.alg):!c.includes(d.alg))throw x('unexpected JWT "alg" header parameter',aE,{header:d,expected:c,reason:"default value"});return}throw x('missing client or server configuration to verify used JWT "alg" header parameter',void 0,{client:a,issuer:b,fallback:c})}function aT(a,b){let{0:c,length:d}=a.getAll(b);if(d>1)throw x(`"${b}" parameter must be provided only once`,aE);return c}let aU=Symbol(),aV=Symbol();async function aW(a,b=H){let c;try{c=await a.json()}catch(c){throw b(a),x('failed to parse "response" body as JSON',aD,c)}if(!y(c))throw x('"response" body must be a top level object',aE,{body:c});return c}let aX=Symbol(),aY=Symbol();("u"<typeof navigator||!navigator.userAgent?.startsWith?.("Mozilla/5.0 "))&&(g={"user-agent":"openid-client/v6.8.8"});let aZ="ERR_INVALID_ARG_VALUE",a$="ERR_INVALID_ARG_TYPE";function a_(a,b,c){let d=TypeError(a,{cause:c});return Object.assign(d,{code:b}),d}function a0(a){return J(a)}function a1(){return I()}function a2(){return I()}class a3 extends Error{code;constructor(a,b){super(a,b),this.name=this.constructor.name,this.code=b?.code,Error.captureStackTrace?.(this,this.constructor)}}function a4(a,b,c){return new a3(a,{cause:b,code:c})}function a5(a){if(a instanceof TypeError||a instanceof a3||a instanceof U||a instanceof V||a instanceof W)throw a;if(a instanceof w)switch(a.code){case aH:throw a4("only requests to HTTPS are allowed",a,a.code);case aI:throw a4("only requests to HTTP or HTTPS are allowed",a,a.code);case aG:throw a4("unexpected HTTP response status code",a.cause,a.code);case aF:throw a4("unexpected response content-type",a.cause,a.code);case aD:throw a4("parsing error occured",a,a.code);case aE:throw a4("invalid response encountered",a,a.code);case aK:throw a4("unexpected JWT claim value encountered",a,a.code);case aL:throw a4("unexpected JSON attribute value encountered",a,a.code);case aJ:throw a4("JWT timestamp claim value failed validation",a,a.code);default:throw a4(a.message,a,a.code)}if(a instanceof v)throw a4("unsupported operation",a,a.code);if(a instanceof DOMException)switch(a.name){case"OperationError":throw a4("runtime operation error",a,aB);case"NotSupportedError":throw a4("runtime unsupported operation",a,aB);case"TimeoutError":throw a4("operation timed out",a,"OAUTH_TIMEOUT");case"AbortError":throw a4("operation aborted",a,"OAUTH_ABORT")}throw new a3("something went wrong",{cause:a})}async function a6(a,b,c,d,e){let f=new a9(await a7(a,e),b,c,d),g=h.get(f);if(e?.[p]&&(g.fetch=e[p]),e?.timeout!==void 0&&(g.timeout=e.timeout),e?.execute)for(let a of e.execute)a(f);return f}async function a7(a,b){if(!(a instanceof URL))throw a_('"server" must be an instance of URL',a$);let c=!a.href.includes("/.well-known/"),d=b?.timeout??30,e=AbortSignal.timeout(1e3*d),f=await (c?D(a,{algorithm:b?.algorithm,[p]:b?.[p],[m]:b?.execute?.includes(ba),signal:e,headers:new Headers(g)}):(b?.[p]||fetch)((R(a,!b?.execute?.includes(ba)),a.href),{headers:Object.fromEntries(new Headers({accept:"application/json",...g}).entries()),body:void 0,method:"GET",redirect:"manual",signal:e})).then(a=>G(aX,a)).catch(a5);return c&&new URL(f.issuer).href!==a.href&&(!("https://login.microsoftonline.com"!==a.origin||b?.algorithm&&"oidc"!==b.algorithm)&&(f[a8]=!0,1)||!(!a.hostname.endsWith(".b2clogin.com")||b?.algorithm&&"oidc"!==b.algorithm)||0||(()=>{throw new a3("discovered metadata issuer does not match the expected issuer",{code:aL,cause:{expected:a.href,body:f,attribute:"issuer"}})})()),f}new TextDecoder;let a8=Symbol();class a9{constructor(a,b,c,d){let e;if("string"!=typeof b||!b.length)throw a_('"clientId" must be a non-empty string',a$);if("string"==typeof c&&(c={client_secret:c}),c?.client_id!==void 0&&b!==c.client_id)throw a_('"clientId" and "metadata.client_id" must be the same',aZ);const f={...structuredClone(c),client_id:b};f[n]=c?.[n]??0,f[o]=c?.[o]??30,e=d||("string"==typeof f.client_secret&&f.client_secret.length?function(a){if(void 0!==a)return P(a);let b=new WeakMap;return(a,c,d,e)=>{let f;return(f=b.get(c))||(function(a,b){if("string"!=typeof a)throw a_(`${b} must be a string`,a$);if(0===a.length)throw a_(`${b} must not be empty`,aZ)}(c.client_secret,'"metadata.client_secret"'),f=P(c.client_secret),b.set(c,f)),f(a,c,d,e)}}(f.client_secret):(a,b,c,d)=>{c.set("client_id",b.client_id)});let g=Object.freeze(f);const i=structuredClone(a);a8 in a&&(i[aY]=({claims:{tid:b}})=>a.issuer.replace("{tenantid}",b));let j=Object.freeze(i);(h||=new WeakMap).set(this,{__proto__:null,as:j,c:g,auth:e,tlsOnly:!0,timeout:30,jwksCache:{}})}serverMetadata(){let a=structuredClone(h.get(this).as);return Object.defineProperties(a,{supportsPKCE:{__proto__:null,value:(b="S256")=>a.code_challenge_methods_supported?.includes(b)===!0}}),a}clientMetadata(){return structuredClone(h.get(this).c)}get timeout(){return h.get(this).timeout}set timeout(a){h.get(this).timeout=a}get[p](){return h.get(this).fetch}set[p](a){h.get(this).fetch=a}}function ba(a){h.get(a).tlsOnly=!1}async function bb(a,b,c,d,e){var f,i,j;let n,o,r,s;if(bd(a),e?.flag!==be&&!(b instanceof URL)&&!function(a,b){try{return Object.getPrototypeOf(a)[Symbol.toStringTag]===b}catch{return!1}}(b,"Request"))throw a_('"currentUrl" must be an instance of URL, or Request',a$);let{as:t,c:u,auth:w,fetch:y,tlsOnly:z,jarm:A,hybrid:B,nonRepudiation:C,timeout:D,decrypt:E,implicit:G}=h.get(a);if(e?.flag===be)n=e.authResponse,o=e.redirectUri;else{if(!(b instanceof URL)){let a=b;switch(b=new URL(b.url),a.method){case"GET":break;case"POST":let c=new URLSearchParams(await aR(a));if(B)b.hash=c.toString();else for(let[a,d]of c.entries())b.searchParams.append(a,d);break;default:throw a_("unexpected Request HTTP method",aZ)}}switch((f=new URL(f=b)).search="",f.hash="",o=f.href,!0){case!!A:n=await A(b,c?.expectedState);break;case!!B:n=await B(b,c?.expectedNonce,c?.expectedState,c?.maxAge);break;case!!G:throw TypeError("authorizationCodeGrant() cannot be used by response_type=id_token clients");default:try{n=function(a,b,c,d){var e;if(N(a),O(b),c instanceof URL&&(c=c.searchParams),!(c instanceof URLSearchParams))throw l('"parameters" must be an instance of URLSearchParams, or URL',k);if(aT(c,"response"))throw x('"parameters" contains a JARM response, use validateJwtAuthResponse() instead of validateAuthResponse()',aE,{parameters:c});let f=aT(c,"iss"),g=aT(c,"state");if(!f&&a.authorization_response_iss_parameter_supported)throw x('response parameter "iss" (issuer) missing',aE,{parameters:c});if(f&&f!==a.issuer)throw x('unexpected "iss" (issuer) response parameter value',aE,{expected:a.issuer,parameters:c});switch(d){case void 0:case aV:if(void 0!==g)throw x('unexpected "state" response parameter encountered',aE,{expected:void 0,parameters:c});break;case aU:break;default:if(F(d,'"expectedState" argument'),g!==d)throw x(void 0===g?'response parameter "state" missing':'unexpected "state" response parameter value',aE,{expected:d,parameters:c})}if(aT(c,"error"))throw new V("authorization response from the server is an error",{cause:c});let h=aT(c,"id_token"),i=aT(c,"token");if(void 0!==h||void 0!==i)throw new v("implicit and hybrid flows are not supported");return e=new URLSearchParams(c),al.add(e),e}(t,u,b.searchParams,c?.expectedState)}catch(a){a5(a)}}}let H=await an(t,u,w,n,o,c?.pkceCodeVerifier||am,{additionalParameters:d,[p]:y,[m]:!z,DPoP:e?.DPoP,headers:new Headers(g),signal:(j=D)?AbortSignal.timeout(1e3*j):void 0}).catch(a5);("string"==typeof c?.expectedNonce||"number"==typeof c?.maxAge)&&(c.idTokenExpected=!0);let I=aw(t,u,H,{expectedNonce:c?.expectedNonce,maxAge:c?.maxAge,requireIdToken:c?.idTokenExpected,[q]:E});try{r=await I}catch(b){if(function(a,b){if(b?.DPoP&&b.flag!==be)return a instanceof W?a.cause.some(a=>"dpop"===a.scheme&&"use_dpop_nonce"===a.parameters.error):a instanceof U&&"use_dpop_nonce"===a.error;return!1}(b,e))return bb(a,void 0,c,d,{...e,flag:be,authResponse:n,redirectUri:o});a5(b)}return r.id_token&&await C?.(H),Object.defineProperties(i=r,(void 0!==i.expires_in&&(s=Date.now()+1e3*i.expires_in),{expiresIn:{__proto__:null,value(){if(s){let a=Date.now();return s>a?Math.floor((s-a)/1e3):0}}},claims:{__proto__:null,value:()=>ah(i)}})),r}function bc(a,b){bd(a);let{as:c,c:d,tlsOnly:e,hybrid:f,jarm:g,implicit:i}=h.get(a),j=T(c,"authorization_endpoint",!1,e);if((b=new URLSearchParams(b)).has("client_id")||b.set("client_id",d.client_id),!b.has("request_uri")&&!b.has("request")){if(b.has("response_type")||b.set("response_type",f?"code id_token":i?"id_token":"code"),i&&!b.has("nonce"))throw a_("response_type=id_token clients must provide a nonce parameter in their authorization request parameters",aZ);g&&b.set("response_mode","jwt")}for(let[a,c]of b.entries())j.searchParams.append(a,c);return j}function bd(a){if(!(a instanceof a9))throw a_('"config" must be an instance of Configuration',a$);if(Object.getPrototypeOf(a)!==a9.prototype)throw a_("subclassing Configuration is not allowed",aZ)}Object.freeze(a9.prototype);let be=Symbol()},82472:(a,b,c)=>{c.d(b,{V:()=>m});var d=c(58138),e=c(35324),f=c(54504),g=c(86654),h=c(53905);function i(a){try{return(0,f.lF)(a)}catch{throw new e.Ye("JWS Compact Serialization payload must use only ASCII characters")}}async function j(a,b,c,i,j){let{protected:k,header:l,payload:m}=a,n=j??(void 0===k?{}:(0,g.OX)(k,e.Ye,"JWS Protected Header is invalid"));if(!(0,g.fz)(n,l))throw new e.Ye("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");let o={...n,...l},p=(0,g.J0)(n,(0,g.nI)(e.Ye,g.qc,b[1],n,o)),{alg:q}=o;if("string"!=typeof q||!q)throw new e.Ye('JWS "alg" (Algorithm) Header Parameter missing or invalid');if(b[0]&&!b[0].has(q))throw new e.Rb('"alg" (Algorithm) Header Parameter value not allowed');if(p){if("string"!=typeof m)throw new e.Ye("JWS Payload must be a string")}else if("string"!=typeof m&&!(m instanceof Uint8Array))throw new e.Ye("JWS Payload must be a string or an Uint8Array instance");let r=p||"string"!=typeof m?m:i(m),s=!1;"function"==typeof c&&(c=await c(n,a),s=!0);let t=(0,d.q)(q),u=(0,f.xW)(void 0!==k?(0,f.lF)(k):new Uint8Array,(0,f.lF)("."),"string"==typeof r?b[2]??=(0,g.Fo)(r,"payload",e.Ye):r),v=(0,g.h2)(a.signature,"signature",e.Ye),w=await (0,h.dT)(t,c,"verify"),x=await (0,h.GK)(w,t.subtle,"verify");t.minRsaBits&&(0,h.or)(t.alg,x);let y=!1;try{y=await crypto.subtle.verify(t.signing,x,v,u)}catch{}if(!y)throw new e.h2;let z={payload:"string"==typeof r?(0,g.h2)(r,"payload",e.Ye):r};return void 0!==k&&(z.protectedHeader=n),void 0!==l&&(z.unprotectedHeader=l),s?[{...z,key:w},p]:[z,p]}async function k(a,b,c){if(a instanceof Uint8Array&&(a=f.D0.decode(a)),"string"!=typeof a)throw new e.Ye("Compact JWS must be a string or Uint8Array");let{0:d,1:g,2:h,length:k}=a.split(".");if(3!==k)throw new e.Ye("Invalid Compact JWS");return j({payload:g,protected:d,signature:h},b,c,i)}var l=c(48680);async function m(a,b,c){let[d,f]=await k(a,[c&&(0,g.Fw)("algorithms",c.algorithms),c?.crit],b);if(!f)throw new e.Dp("JWTs MUST NOT use unencoded payload");let h=(0,l.k6)(d.protectedHeader,d.payload,c);return{...d,payload:h}}},86654:(a,b,c)=>{c.d(b,{BU:()=>o,Fo:()=>k,Fw:()=>n,Gv:()=>g,J0:()=>q,OX:()=>l,ac:()=>i,fz:()=>h,h2:()=>j,ji:()=>r,nI:()=>p,qc:()=>m});var d=c(35324),e=c(98107),f=c(54504);function g(a){if("object"!=typeof a||null===a||"[object Object]"!==Object.prototype.toString.call(a))return!1;let b=Object.getPrototypeOf(a);return null===b||null===Object.getPrototypeOf(b)}function h(...a){let b=new Set;for(let c of a)if(c)for(let a of Object.keys(c)){if(b.has(a))return!1;b.add(a)}return!0}function i(a,b){if(void 0!==a)throw TypeError(`${b} can only be called once`)}function j(a,b,c){try{return(0,e.D)(a)}catch{throw new c(`Failed to base64url decode the ${b}`)}}function k(a,b,c){try{return(0,f.lF)(a)}catch{throw new c(`The ${b} is not a valid base64url string`)}}function l(a,b,c){let d;try{d=JSON.parse(f.u8.decode((0,e.D)(a)))}catch{throw new b(c)}if(!g(d))throw new b(c);return d}let m={__proto__:null,b64:!0};function n(a,b){if(void 0!==b&&(!Array.isArray(b)||b.some(a=>"string"!=typeof a)))throw TypeError(`"${a}" option must be an array of strings`);return void 0===b?void 0:new Set(b)}function o(a,b){let{crit:c}=b??{};if(Array.isArray(c)&&new Set(c).size!==c.length)throw new a('"crit" (Critical) Header Parameter MUST NOT contain duplicate values')}function p(a,b,c,e,f){if(void 0!==f.crit&&e?.crit===void 0)throw new a('"crit" (Critical) Header Parameter MUST be integrity protected');if(!e||void 0===e.crit)return[];if(!Array.isArray(e.crit)||0===e.crit.length||e.crit.some(a=>"string"!=typeof a||0===a.length))throw new a('"crit" (Critical) Header Parameter MUST be an array of non-empty strings when present');let g=void 0===c?b:{__proto__:null,...c,...b};for(let b of e.crit){if(!(b in g))throw new d.T0(`Extension Header Parameter "${b}" is not recognized`);if(!Object.hasOwn(f,b)||void 0===f[b])throw new a(`Extension Header Parameter "${b}" is missing`);if(g[b]&&(!Object.hasOwn(e,b)||void 0===e[b]))throw new a(`Extension Header Parameter "${b}" MUST be integrity protected`)}return e.crit}function q(a,b){if(b.includes("b64")){let b=a.b64;if("boolean"!=typeof b)throw new d.Ye('The "b64" (base64url-encode payload) Header Parameter must be a boolean');return b}return!0}function r(a,b){let c,d;try{c=JSON.stringify(b),d=JSON.parse(c)}catch(b){throw new a("JOSE Header is not valid JSON",{cause:b})}if(!g(d))throw new a("JOSE Header is not a JSON object");return[d,c]}},98107:(a,b,c)=>{c.d(b,{D:()=>e,l:()=>f});var d=c(54504);function e(a){try{return(0,d.y4)("string"==typeof a?a:d.D0.decode(a),!0)}catch(a){throw TypeError("The input to be decoded is not correctly encoded.",{cause:a})}}function f(a){return(0,d.WG)("string"==typeof a?d.Rd.encode(a):a,!0)}}};

package/dist/web/.next-embedded/server/chunks/8336.js

@@ -0,0 +1 @@
+exports.id=8336,exports.ids=[8336],exports.modules={4428:(a,b)=>{"use strict";b.byteLength=function(a){var b=i(a),c=b[0],d=b[1];return(c+d)*3/4-d},b.toByteArray=function(a){var b,c,f=i(a),g=f[0],h=f[1],j=new e((g+h)*3/4-h),k=0,l=h>0?g-4:g;for(c=0;c<l;c+=4)b=d[a.charCodeAt(c)]<<18|d[a.charCodeAt(c+1)]<<12|d[a.charCodeAt(c+2)]<<6|d[a.charCodeAt(c+3)],j[k++]=b>>16&255,j[k++]=b>>8&255,j[k++]=255&b;return 2===h&&(b=d[a.charCodeAt(c)]<<2|d[a.charCodeAt(c+1)]>>4,j[k++]=255&b),1===h&&(b=d[a.charCodeAt(c)]<<10|d[a.charCodeAt(c+1)]<<4|d[a.charCodeAt(c+2)]>>2,j[k++]=b>>8&255,j[k++]=255&b),j},b.fromByteArray=function(a){for(var b,d=a.length,e=d%3,f=[],g=0,h=d-e;g<h;g+=16383)f.push(function(a,b,d){for(var e,f=[],g=b;g<d;g+=3)e=(a[g]<<16&0xff0000)+(a[g+1]<<8&65280)+(255&a[g+2]),f.push(c[e>>18&63]+c[e>>12&63]+c[e>>6&63]+c[63&e]);return f.join("")}(a,g,g+16383>h?h:g+16383));return 1===e?f.push(c[(b=a[d-1])>>2]+c[b<<4&63]+"=="):2===e&&f.push(c[(b=(a[d-2]<<8)+a[d-1])>>10]+c[b>>4&63]+c[b<<2&63]+"="),f.join("")};for(var c=[],d=[],e="u">typeof Uint8Array?Uint8Array:Array,f="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",g=0,h=f.length;g<h;++g)c[g]=f[g],d[f.charCodeAt(g)]=g;function i(a){var b=a.length;if(b%4>0)throw Error("Invalid string. Length must be a multiple of 4");var c=a.indexOf("=");-1===c&&(c=b);var d=c===b?0:4-c%4;return[c,d]}d[45]=62,d[95]=63},13716:a=>{"use strict";var b=Object.prototype.hasOwnProperty,c=Object.prototype.toString,d=Object.defineProperty,e=Object.getOwnPropertyDescriptor,f=function(a){return"function"==typeof Array.isArray?Array.isArray(a):"[object Array]"===c.call(a)},g=function(a){if(!a||"[object Object]"!==c.call(a))return!1;var d,e=b.call(a,"constructor"),f=a.constructor&&a.constructor.prototype&&b.call(a.constructor.prototype,"isPrototypeOf");if(a.constructor&&!e&&!f)return!1;for(d in a);return void 0===d||b.call(a,d)},h=function(a,b){d&&"__proto__"===b.name?d(a,b.name,{enumerable:!0,configurable:!0,value:b.newValue,writable:!0}):a[b.name]=b.newValue},i=function(a,c){if("__proto__"===c){if(!b.call(a,c))return;else if(e)return e(a,c).value}return a[c]};a.exports=function a(){var b,c,d,e,j,k,l=arguments[0],m=1,n=arguments.length,o=!1;for("boolean"==typeof l&&(o=l,l=arguments[1]||{},m=2),(null==l||"object"!=typeof l&&"function"!=typeof l)&&(l={});m<n;++m)if(b=arguments[m],null!=b)for(c in b)d=i(l,c),l!==(e=i(b,c))&&(o&&e&&(g(e)||(j=f(e)))?(j?(j=!1,k=d&&f(d)?d:[]):k=d&&g(d)?d:{},h(l,{name:c,newValue:a(o,k,e)})):void 0!==e&&h(l,{name:c,newValue:e}));return l}},42935:(a,b,c)=>{var d=c(50115),e=function(){},f=global.Bare?queueMicrotask:process.nextTick.bind(process),g=function(a,b,c){if("function"==typeof b)return g(a,null,b);b||(b={}),c=d(c||e);var h=a._writableState,i=a._readableState,j=b.readable||!1!==b.readable&&a.readable,k=b.writable||!1!==b.writable&&a.writable,l=!1,m=function(){a.writable||n()},n=function(){k=!1,j||c.call(a)},o=function(){j=!1,k||c.call(a)},p=function(b){c.call(a,b?Error("exited with error code: "+b):null)},q=function(b){c.call(a,b)},r=function(){f(s)},s=function(){if(!l&&(j&&!(i&&i.ended&&!i.destroyed)||k&&!(h&&h.ended&&!h.destroyed)))return c.call(a,Error("premature close"))},t=function(){a.req.on("finish",n)};return a.setHeader&&"function"==typeof a.abort?(a.on("complete",n),a.on("abort",r),a.req?t():a.on("request",t)):k&&!h&&(a.on("end",m),a.on("close",m)),a.stdio&&Array.isArray(a.stdio)&&3===a.stdio.length&&a.on("exit",p),a.on("end",o),a.on("finish",n),!1!==b.error&&a.on("error",q),a.on("close",r),function(){l=!0,a.removeListener("complete",n),a.removeListener("abort",r),a.removeListener("request",t),a.req&&a.req.removeListener("finish",n),a.removeListener("end",m),a.removeListener("close",m),a.removeListener("finish",n),a.removeListener("exit",p),a.removeListener("end",o),a.removeListener("error",q),a.removeListener("close",r)}};a.exports=g},50115:(a,b,c)=>{var d=c(57243);function e(a){var b=function(){return b.called?b.value:(b.called=!0,b.value=a.apply(this,arguments))};return b.called=!1,b}function f(a){var b=function(){if(b.called)throw Error(b.onceError);return b.called=!0,b.value=a.apply(this,arguments)};return b.onceError=(a.name||"Function wrapped with `once`")+" shouldn't be called more than once",b.called=!1,b}a.exports=d(e),a.exports.strict=d(f),e.proto=e(function(){Object.defineProperty(Function.prototype,"once",{value:function(){return e(this)},configurable:!0}),Object.defineProperty(Function.prototype,"onceStrict",{value:function(){return f(this)},configurable:!0})})},57243:a=>{a.exports=function a(b,c){if(b&&c)return a(b)(c);if("function"!=typeof b)throw TypeError("need wrapper function");return Object.keys(b).forEach(function(a){d[a]=b[a]}),d;function d(){for(var a=Array(arguments.length),c=0;c<a.length;c++)a[c]=arguments[c];var d=b.apply(this,a),e=a[a.length-1];return"function"==typeof d&&d!==e&&Object.keys(e).forEach(function(a){d[a]=e[a]}),d}}},66357:(a,b,c)=>{var d=null;let e=/(?:_|\\u005[Ff])(?:_|\\u005[Ff])(?:p|\\u0070)(?:r|\\u0072)(?:o|\\u006[Ff])(?:t|\\u0074)(?:o|\\u006[Ff])(?:_|\\u005[Ff])(?:_|\\u005[Ff])/,f=/(?:c|\\u0063)(?:o|\\u006[Ff])(?:n|\\u006[Ee])(?:s|\\u0073)(?:t|\\u0074)(?:r|\\u0072)(?:u|\\u0075)(?:c|\\u0063)(?:t|\\u0074)(?:o|\\u006[Ff])(?:r|\\u0072)/;a.exports=function(a){"use strict";var b={strict:!1,storeAsString:!1,alwaysParseAsBig:!1,useNativeBigInt:!1,protoAction:"error",constructorAction:"error"};if(null!=a){if(!0===a.strict&&(b.strict=!0),!0===a.storeAsString&&(b.storeAsString=!0),b.alwaysParseAsBig=!0===a.alwaysParseAsBig&&a.alwaysParseAsBig,b.useNativeBigInt=!0===a.useNativeBigInt&&a.useNativeBigInt,void 0!==a.constructorAction)if("error"===a.constructorAction||"ignore"===a.constructorAction||"preserve"===a.constructorAction)b.constructorAction=a.constructorAction;else throw Error(`Incorrect value for constructorAction option, must be "error", "ignore" or undefined but passed ${a.constructorAction}`);if(void 0!==a.protoAction)if("error"===a.protoAction||"ignore"===a.protoAction||"preserve"===a.protoAction)b.protoAction=a.protoAction;else throw Error(`Incorrect value for protoAction option, must be "error", "ignore" or undefined but passed ${a.protoAction}`)}var g,h,i,j,k={'"':'"',"\\":"\\","/":"/",b:"\b",f:"\f",n:"\n",r:"\r",t:"	"},l=function(a){throw{name:"SyntaxError",message:a,at:g,text:i}},m=function(a){return a&&a!==h&&l("Expected '"+a+"' instead of '"+h+"'"),h=i.charAt(g),g+=1,h},n=function(){var a,e="";for("-"===h&&(e="-",m("-"));h>="0"&&h<="9";)e+=h,m();if("."===h)for(e+=".";m()&&h>="0"&&h<="9";)e+=h;if("e"===h||"E"===h)for(e+=h,m(),("-"===h||"+"===h)&&(e+=h,m());h>="0"&&h<="9";)e+=h,m();if(isFinite(a=+e))return(null==d&&(d=c(91461)),e.length>15)?b.storeAsString?e:b.useNativeBigInt?BigInt(e):new d(e):b.alwaysParseAsBig?b.useNativeBigInt?BigInt(a):new d(a):a;l("Bad number")},o=function(){var a,b,c,d="";if('"'===h)for(var e=g;m();){if('"'===h)return g-1>e&&(d+=i.substring(e,g-1)),m(),d;if("\\"===h){if(g-1>e&&(d+=i.substring(e,g-1)),m(),"u"===h){for(b=0,c=0;b<4&&isFinite(a=parseInt(m(),16));b+=1)c=16*c+a;d+=String.fromCharCode(c)}else if("string"==typeof k[h])d+=k[h];else break;e=g}}l("Bad string")},p=function(){for(;h&&h<=" ";)m()},q=function(){switch(h){case"t":return m("t"),m("r"),m("u"),m("e"),!0;case"f":return m("f"),m("a"),m("l"),m("s"),m("e"),!1;case"n":return m("n"),m("u"),m("l"),m("l"),null}l("Unexpected '"+h+"'")},r=function(){var a=[];if("["===h){if(m("["),p(),"]"===h)return m("]"),a;for(;h;){if(a.push(j()),p(),"]"===h)return m("]"),a;m(","),p()}}l("Bad array")},s=function(){var a,c=Object.create(null);if("{"===h){if(m("{"),p(),"}"===h)return m("}"),c;for(;h;){if(a=o(),p(),m(":"),!0===b.strict&&Object.hasOwnProperty.call(c,a)&&l('Duplicate key "'+a+'"'),!0===e.test(a)?"error"===b.protoAction?l("Object contains forbidden prototype property"):"ignore"===b.protoAction?j():c[a]=j():!0===f.test(a)?"error"===b.constructorAction?l("Object contains forbidden constructor property"):"ignore"===b.constructorAction?j():c[a]=j():c[a]=j(),p(),"}"===h)return m("}"),c;m(","),p()}}l("Bad object")};return j=function(){switch(p(),h){case"{":return s();case"[":return r();case'"':return o();case"-":return n();default:return h>="0"&&h<="9"?n():q()}},function(a,b){var c;return i=a+"",g=0,h=" ",c=j(),p(),h&&l("Syntax error"),"function"==typeof b?function a(c,d){var e,f=c[d];return f&&"object"==typeof f&&Object.keys(f).forEach(function(b){void 0!==(e=a(f,b))?f[b]=e:delete f[b]}),b.call(c,d,f)}({"":c},""):c}}},68295:(a,b,c)=>{var d=c(91461),e=a.exports;!function(){"use strict";var a,b,c,f=/[\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,g={"\b":"\\b","	":"\\t","\n":"\\n","\f":"\\f","\r":"\\r",'"':'\\"',"\\":"\\\\"};function h(a){return f.lastIndex=0,f.test(a)?'"'+a.replace(f,function(a){var b=g[a];return"string"==typeof b?b:"\\u"+("0000"+a.charCodeAt(0).toString(16)).slice(-4)})+'"':'"'+a+'"'}"function"!=typeof e.stringify&&(e.stringify=function(e,f,g){var i;if(a="",b="","number"==typeof g)for(i=0;i<g;i+=1)b+=" ";else"string"==typeof g&&(b=g);if(c=f,f&&"function"!=typeof f&&("object"!=typeof f||"number"!=typeof f.length))throw Error("JSON.stringify");return function e(f,g){var i,j,k,l,m,n=a,o=g[f],p=null!=o&&(o instanceof d||d.isBigNumber(o));switch(o&&"object"==typeof o&&"function"==typeof o.toJSON&&(o=o.toJSON(f)),"function"==typeof c&&(o=c.call(g,f,o)),typeof o){case"string":if(p)return o;return h(o);case"number":return isFinite(o)?String(o):"null";case"boolean":case"null":case"bigint":return String(o);case"object":if(!o)return"null";if(a+=b,m=[],"[object Array]"===Object.prototype.toString.apply(o)){for(l=o.length,i=0;i<l;i+=1)m[i]=e(i,o)||"null";return k=0===m.length?"[]":a?"[\n"+a+m.join(",\n"+a)+"\n"+n+"]":"["+m.join(",")+"]",a=n,k}if(c&&"object"==typeof c)for(l=c.length,i=0;i<l;i+=1)"string"==typeof c[i]&&(k=e(j=c[i],o))&&m.push(h(j)+(a?": ":":")+k);else Object.keys(o).forEach(function(b){var c=e(b,o);c&&m.push(h(b)+(a?": ":":")+c)});return k=0===m.length?"{}":a?"{\n"+a+m.join(",\n"+a)+"\n"+n+"}":"{"+m.join(",")+"}",a=n,k}}("",{"":e})})}()},74678:(a,b,c)=>{var d=c(68295).stringify,e=c(66357);a.exports=function(a){return{parse:e(a),stringify:d}},a.exports.parse=e(),a.exports.stringify=d},91461:function(a,b,c){var d;!function(){"use strict";var e,f=/^-?(?:\d+(?:\.\d*)?|\.\d+)(?:e[+-]?\d+)?$/i,g=Math.ceil,h=Math.floor,i="[BigNumber Error] ",j=i+"Number primitive has more than 15 significant digits: ",k=[1,10,100,1e3,1e4,1e5,1e6,1e7,1e8,1e9,1e10,1e11,1e12,1e13];function l(a){var b=0|a;return a>0||a===b?b:b-1}function m(a){for(var b,c,d=1,e=a.length,f=a[0]+"";d<e;){for(c=14-(b=a[d++]+"").length;c--;b="0"+b);f+=b}for(e=f.length;48===f.charCodeAt(--e););return f.slice(0,e+1||1)}function n(a,b){var c,d,e=a.c,f=b.c,g=a.s,h=b.s,i=a.e,j=b.e;if(!g||!h)return null;if(c=e&&!e[0],d=f&&!f[0],c||d)return c?d?0:-h:g;if(g!=h)return g;if(c=g<0,d=i==j,!e||!f)return d?0:!e^c?1:-1;if(!d)return i>j^c?1:-1;for(h=(i=e.length)<(j=f.length)?i:j,g=0;g<h;g++)if(e[g]!=f[g])return e[g]>f[g]^c?1:-1;return i==j?0:i>j^c?1:-1}function o(a,b,c,d){if(a<b||a>c||a!==h(a))throw Error(i+(d||"Argument")+("number"==typeof a?a<b||a>c?" out of range: ":" not an integer: ":" not a primitive number: ")+String(a))}function p(a){var b=a.c.length-1;return l(a.e/14)==b&&a.c[b]%2!=0}function q(a,b){return(a.length>1?a.charAt(0)+"."+a.slice(1):a)+(b<0?"e":"e+")+b}function r(a,b,c){var d,e;if(b<0){for(e=c+".";++b;e+=c);a=e+a}else if(d=a.length,++b>d){for(e=c,b-=d;--b;e+=c);a+=e}else b<d&&(a=a.slice(0,b)+"."+a.slice(b));return a}(e=function a(b){var c,d,e,s,t,u,v,w,x,y=M.prototype={constructor:M,toString:null,valueOf:null},z=new M(1),A=20,B=4,C=-7,D=21,E=-1e7,F=1e7,G=!1,H=1,I=0,J={prefix:"",groupSize:3,secondaryGroupSize:0,groupSeparator:",",decimalSeparator:".",fractionGroupSize:0,fractionGroupSeparator:"\xa0",suffix:""},K="0123456789abcdefghijklmnopqrstuvwxyz",L=!0;function M(a,b){var c,d,e,g,i,k,l,m,n=this;if(!(n instanceof M))return new M(a,b);if(null==b){if(a&&!0===a._isBigNumber){n.s=a.s,!a.c||a.e>F?n.c=n.e=null:a.e<E?n.c=[n.e=0]:(n.e=a.e,n.c=a.c.slice());return}if((k="number"==typeof a)&&0*a==0){if(n.s=1/a<0?(a=-a,-1):1,a===~~a){for(g=0,i=a;i>=10;i/=10,g++);g>F?n.c=n.e=null:(n.e=g,n.c=[a]);return}m=String(a)}else{if(!f.test(m=String(a)))return x(n,m,k);n.s=45==m.charCodeAt(0)?(m=m.slice(1),-1):1}(g=m.indexOf("."))>-1&&(m=m.replace(".","")),(i=m.search(/e/i))>0?(g<0&&(g=i),g+=+m.slice(i+1),m=m.substring(0,i)):g<0&&(g=m.length)}else{if(o(b,2,K.length,"Base"),10==b&&L)return Q(n=new M(a),A+n.e+1,B);if(m=String(a),k="number"==typeof a){if(0*a!=0)return x(n,m,k,b);if(n.s=1/a<0?(m=m.slice(1),-1):1,M.DEBUG&&m.replace(/^0\.0*|\./,"").length>15)throw Error(j+a)}else n.s=45===m.charCodeAt(0)?(m=m.slice(1),-1):1;for(c=K.slice(0,b),g=i=0,l=m.length;i<l;i++)if(0>c.indexOf(d=m.charAt(i))){if("."==d){if(i>g){g=l;continue}}else if(!e&&(m==m.toUpperCase()&&(m=m.toLowerCase())||m==m.toLowerCase()&&(m=m.toUpperCase()))){e=!0,i=-1,g=0;continue}return x(n,String(a),k,b)}k=!1,(g=(m=w(m,b,10,n.s)).indexOf("."))>-1?m=m.replace(".",""):g=m.length}for(i=0;48===m.charCodeAt(i);i++);for(l=m.length;48===m.charCodeAt(--l););if(m=m.slice(i,++l)){if(l-=i,k&&M.DEBUG&&l>15&&(a>0x1fffffffffffff||a!==h(a)))throw Error(j+n.s*a);if((g=g-i-1)>F)n.c=n.e=null;else if(g<E)n.c=[n.e=0];else{if(n.e=g,n.c=[],i=(g+1)%14,g<0&&(i+=14),i<l){for(i&&n.c.push(+m.slice(0,i)),l-=14;i<l;)n.c.push(+m.slice(i,i+=14));i=14-(m=m.slice(i)).length}else i-=l;for(;i--;m+="0");n.c.push(+m)}}else n.c=[n.e=0]}function N(a,b,c,d){var e,f,g,h,i;if(null==c?c=B:o(c,0,8),!a.c)return a.toString();if(e=a.c[0],g=a.e,null==b)i=m(a.c),i=1==d||2==d&&(g<=C||g>=D)?q(i,g):r(i,g,"0");else if(f=(a=Q(new M(a),b,c)).e,h=(i=m(a.c)).length,1==d||2==d&&(b<=f||f<=C)){for(;h<b;i+="0",h++);i=q(i,f)}else if(b-=g+(2===d&&f>g),i=r(i,f,"0"),f+1>h){if(--b>0)for(i+=".";b--;i+="0");}else if((b+=f-h)>0)for(f+1==h&&(i+=".");b--;i+="0");return a.s<0&&e?"-"+i:i}function O(a,b){for(var c,d,e=1,f=new M(a[0]);e<a.length;e++)(d=new M(a[e])).s&&(c=n(f,d))!==b&&(0!==c||f.s!==b)||(f=d);return f}function P(a,b,c){for(var d=1,e=b.length;!b[--e];b.pop());for(e=b[0];e>=10;e/=10,d++);return(c=d+14*c-1)>F?a.c=a.e=null:c<E?a.c=[a.e=0]:(a.e=c,a.c=b),a}function Q(a,b,c,d){var e,f,i,j,l,m,n,o=a.c;if(o){a:{for(e=1,j=o[0];j>=10;j/=10,e++);if((f=b-e)<0)f+=14,i=b,n=h((l=o[m=0])/k[e-i-1]%10);else if((m=g((f+1)/14))>=o.length)if(d){for(;o.length<=m;o.push(0));l=n=0,e=1,f%=14,i=f-14+1}else break a;else{for(l=j=o[m],e=1;j>=10;j/=10,e++);f%=14,n=(i=f-14+e)<0?0:h(l/k[e-i-1]%10)}if(d=d||b<0||null!=o[m+1]||(i<0?l:l%k[e-i-1]),d=c<4?(n||d)&&(0==c||c==(a.s<0?3:2)):n>5||5==n&&(4==c||d||6==c&&(f>0?i>0?l/k[e-i]:0:o[m-1])%10&1||c==(a.s<0?8:7)),b<1||!o[0])return o.length=0,d?(b-=a.e+1,o[0]=k[(14-b%14)%14],a.e=-b||0):o[0]=a.e=0,a;if(0==f?(o.length=m,j=1,m--):(o.length=m+1,j=k[14-f],o[m]=i>0?h(l/k[e-i]%k[i])*j:0),d)for(;;)if(0==m){for(f=1,i=o[0];i>=10;i/=10,f++);for(i=o[0]+=j,j=1;i>=10;i/=10,j++);f!=j&&(a.e++,1e14==o[0]&&(o[0]=1));break}else{if(o[m]+=j,1e14!=o[m])break;o[m--]=0,j=1}for(f=o.length;0===o[--f];o.pop());}a.e>F?a.c=a.e=null:a.e<E&&(a.c=[a.e=0])}return a}function R(a){var b,c=a.e;return null===c?a.toString():(b=m(a.c),b=c<=C||c>=D?q(b,c):r(b,c,"0"),a.s<0?"-"+b:b)}return M.clone=a,M.ROUND_UP=0,M.ROUND_DOWN=1,M.ROUND_CEIL=2,M.ROUND_FLOOR=3,M.ROUND_HALF_UP=4,M.ROUND_HALF_DOWN=5,M.ROUND_HALF_EVEN=6,M.ROUND_HALF_CEIL=7,M.ROUND_HALF_FLOOR=8,M.EUCLID=9,M.config=M.set=function(a){var b,c;if(null!=a)if("object"==typeof a){if(a.hasOwnProperty(b="DECIMAL_PLACES")&&(o(c=a[b],0,1e9,b),A=c),a.hasOwnProperty(b="ROUNDING_MODE")&&(o(c=a[b],0,8,b),B=c),a.hasOwnProperty(b="EXPONENTIAL_AT")&&((c=a[b])&&c.pop?(o(c[0],-1e9,0,b),o(c[1],0,1e9,b),C=c[0],D=c[1]):(o(c,-1e9,1e9,b),C=-(D=c<0?-c:c))),a.hasOwnProperty(b="RANGE"))if((c=a[b])&&c.pop)o(c[0],-1e9,-1,b),o(c[1],1,1e9,b),E=c[0],F=c[1];else if(o(c,-1e9,1e9,b),c)E=-(F=c<0?-c:c);else throw Error(i+b+" cannot be zero: "+c);if(a.hasOwnProperty(b="CRYPTO"))if(!!(c=a[b])===c)if(c)if("u">typeof crypto&&crypto&&(crypto.getRandomValues||crypto.randomBytes))G=c;else throw G=!c,Error(i+"crypto unavailable");else G=c;else throw Error(i+b+" not true or false: "+c);if(a.hasOwnProperty(b="MODULO_MODE")&&(o(c=a[b],0,9,b),H=c),a.hasOwnProperty(b="POW_PRECISION")&&(o(c=a[b],0,1e9,b),I=c),a.hasOwnProperty(b="FORMAT"))if("object"==typeof(c=a[b]))J=c;else throw Error(i+b+" not an object: "+c);if(a.hasOwnProperty(b="ALPHABET")){if("string"!=typeof(c=a[b])||/^.?$|[+\-.\s]|(.).*\1/.test(c))throw Error(i+b+" invalid: "+c);L="0123456789"==c.slice(0,10),K=c}}else throw Error(i+"Object expected: "+a);return{DECIMAL_PLACES:A,ROUNDING_MODE:B,EXPONENTIAL_AT:[C,D],RANGE:[E,F],CRYPTO:G,MODULO_MODE:H,POW_PRECISION:I,FORMAT:J,ALPHABET:K}},M.isBigNumber=function(a){if(!a||!0!==a._isBigNumber)return!1;if(!M.DEBUG)return!0;var b,c,d=a.c,e=a.e,f=a.s;a:if("[object Array]"==({}).toString.call(d)){if((1===f||-1===f)&&e>=-1e9&&e<=1e9&&e===h(e)){if(0===d[0]){if(0===e&&1===d.length)return!0;break a}if((b=(e+1)%14)<1&&(b+=14),String(d[0]).length==b){for(b=0;b<d.length;b++)if((c=d[b])<0||c>=1e14||c!==h(c))break a;if(0!==c)return!0}}}else if(null===d&&null===e&&(null===f||1===f||-1===f))return!0;throw Error(i+"Invalid BigNumber: "+a)},M.maximum=M.max=function(){return O(arguments,-1)},M.minimum=M.min=function(){return O(arguments,1)},c=0x20000000000000*Math.random()&2097151?function(){return h(0x20000000000000*Math.random())}:function(){return(0x40000000*Math.random()|0)*8388608+(8388608*Math.random()|0)},M.random=function(a){var b,d,e,f,j,l=0,m=[],n=new M(z);if(null==a?a=A:o(a,0,1e9),f=g(a/14),G)if(crypto.getRandomValues){for(b=crypto.getRandomValues(new Uint32Array(f*=2));l<f;)(j=131072*b[l]+(b[l+1]>>>11))>=9e15?(d=crypto.getRandomValues(new Uint32Array(2)),b[l]=d[0],b[l+1]=d[1]):(m.push(j%1e14),l+=2);l=f/2}else if(crypto.randomBytes){for(b=crypto.randomBytes(f*=7);l<f;)(j=(31&b[l])*0x1000000000000+0x10000000000*b[l+1]+0x100000000*b[l+2]+0x1000000*b[l+3]+(b[l+4]<<16)+(b[l+5]<<8)+b[l+6])>=9e15?crypto.randomBytes(7).copy(b,l):(m.push(j%1e14),l+=7);l=f/7}else throw G=!1,Error(i+"crypto unavailable");if(!G)for(;l<f;)(j=c())<9e15&&(m[l++]=j%1e14);for(f=m[--l],a%=14,f&&a&&(j=k[14-a],m[l]=h(f/j)*j);0===m[l];m.pop(),l--);if(l<0)m=[e=0];else{for(e=-1;0===m[0];m.splice(0,1),e-=14);for(l=1,j=m[0];j>=10;j/=10,l++);l<14&&(e-=14-l)}return n.e=e,n.c=m,n},M.sum=function(){for(var a=1,b=arguments,c=new M(b[0]);a<b.length;)c=c.plus(b[a++]);return c},w=function(){var a="0123456789";function b(a,b,c,d){for(var e,f,g=[0],h=0,i=a.length;h<i;){for(f=g.length;f--;g[f]*=b);for(g[0]+=d.indexOf(a.charAt(h++)),e=0;e<g.length;e++)g[e]>c-1&&(null==g[e+1]&&(g[e+1]=0),g[e+1]+=g[e]/c|0,g[e]%=c)}return g.reverse()}return function(c,d,e,f,g){var h,i,j,k,l,n,o,p,q=c.indexOf("."),s=A,t=B;for(q>=0&&(k=I,I=0,c=c.replace(".",""),n=(p=new M(d)).pow(c.length-q),I=k,p.c=b(r(m(n.c),n.e,"0"),10,e,a),p.e=p.c.length),j=k=(o=b(c,d,e,g?(h=K,a):(h=a,K))).length;0==o[--k];o.pop());if(!o[0])return h.charAt(0);if(q<0?--j:(n.c=o,n.e=j,n.s=f,o=(n=v(n,p,s,t,e)).c,l=n.r,j=n.e),q=o[i=j+s+1],k=e/2,l=l||i<0||null!=o[i+1],l=t<4?(null!=q||l)&&(0==t||t==(n.s<0?3:2)):q>k||q==k&&(4==t||l||6==t&&1&o[i-1]||t==(n.s<0?8:7)),i<1||!o[0])c=l?r(h.charAt(1),-s,h.charAt(0)):h.charAt(0);else{if(o.length=i,l)for(--e;++o[--i]>e;)o[i]=0,i||(++j,o=[1].concat(o));for(k=o.length;!o[--k];);for(q=0,c="";q<=k;c+=h.charAt(o[q++]));c=r(c,j,h.charAt(0))}return c}}(),v=function(){function a(a,b,c){var d,e,f,g,h=0,i=a.length,j=b%1e7,k=b/1e7|0;for(a=a.slice();i--;)d=k*(f=a[i]%1e7)+(g=a[i]/1e7|0)*j,h=((e=j*f+d%1e7*1e7+h)/c|0)+(d/1e7|0)+k*g,a[i]=e%c;return h&&(a=[h].concat(a)),a}function b(a,b,c,d){var e,f;if(c!=d)f=c>d?1:-1;else for(e=f=0;e<c;e++)if(a[e]!=b[e]){f=a[e]>b[e]?1:-1;break}return f}function c(a,b,c,d){for(var e=0;c--;)a[c]-=e,e=+(a[c]<b[c]),a[c]=e*d+a[c]-b[c];for(;!a[0]&&a.length>1;a.splice(0,1));}return function(d,e,f,g,i){var j,k,m,n,o,p,q,r,s,t,u,v,w,x,y,z,A,B=d.s==e.s?1:-1,C=d.c,D=e.c;if(!C||!C[0]||!D||!D[0])return new M(!d.s||!e.s||(C?D&&C[0]==D[0]:!D)?NaN:C&&0==C[0]||!D?0*B:B/0);for(s=(r=new M(B)).c=[],B=f+(k=d.e-e.e)+1,i||(i=1e14,k=l(d.e/14)-l(e.e/14),B=B/14|0),m=0;D[m]==(C[m]||0);m++);if(D[m]>(C[m]||0)&&k--,B<0)s.push(1),n=!0;else{for(x=C.length,z=D.length,m=0,B+=2,(o=h(i/(D[0]+1)))>1&&(D=a(D,o,i),C=a(C,o,i),z=D.length,x=C.length),w=z,u=(t=C.slice(0,z)).length;u<z;t[u++]=0);A=[0].concat(A=D.slice()),y=D[0],D[1]>=i/2&&y++;do{if(o=0,(j=b(D,t,z,u))<0){if(v=t[0],z!=u&&(v=v*i+(t[1]||0)),(o=h(v/y))>1)for(o>=i&&(o=i-1),q=(p=a(D,o,i)).length,u=t.length;1==b(p,t,q,u);)o--,c(p,z<q?A:D,q,i),q=p.length,j=1;else 0==o&&(j=o=1),q=(p=D.slice()).length;if(q<u&&(p=[0].concat(p)),c(t,p,u,i),u=t.length,-1==j)for(;1>b(D,t,z,u);)o++,c(t,z<u?A:D,u,i),u=t.length}else 0===j&&(o++,t=[0]);s[m++]=o,t[0]?t[u++]=C[w]||0:(t=[C[w]],u=1)}while((w++<x||null!=t[0])&&B--);n=null!=t[0],s[0]||s.splice(0,1)}if(1e14==i){for(m=1,B=s[0];B>=10;B/=10,m++);Q(r,f+(r.e=m+14*k-1)+1,g,n)}else r.e=k,r.r=+n;return r}}(),d=/^(-?)0([xbo])(?=\w[\w.]*$)/i,e=/^([^.]+)\.$/,s=/^\.([^.]+)$/,t=/^-?(Infinity|NaN)$/,u=/^\s*\+(?=[\w.])|^\s+|\s+$/g,x=function(a,b,c,f){var g,h=c?b:b.replace(u,"");if(t.test(h))a.s=isNaN(h)?null:h<0?-1:1;else{if(!c&&(h=h.replace(d,function(a,b,c){return g="x"==(c=c.toLowerCase())?16:"b"==c?2:8,f&&f!=g?a:b}),f&&(g=f,h=h.replace(e,"$1").replace(s,"0.$1")),b!=h))return new M(h,g);if(M.DEBUG)throw Error(i+"Not a"+(f?" base "+f:"")+" number: "+b);a.s=null}a.c=a.e=null},y.absoluteValue=y.abs=function(){var a=new M(this);return a.s<0&&(a.s=1),a},y.comparedTo=function(a,b){return n(this,new M(a,b))},y.decimalPlaces=y.dp=function(a,b){var c,d,e;if(null!=a)return o(a,0,1e9),null==b?b=B:o(b,0,8),Q(new M(this),a+this.e+1,b);if(!(c=this.c))return null;if(d=((e=c.length-1)-l(this.e/14))*14,e=c[e])for(;e%10==0;e/=10,d--);return d<0&&(d=0),d},y.dividedBy=y.div=function(a,b){return v(this,new M(a,b),A,B)},y.dividedToIntegerBy=y.idiv=function(a,b){return v(this,new M(a,b),0,1)},y.exponentiatedBy=y.pow=function(a,b){var c,d,e,f,j,k,l,m,n,o=this;if((a=new M(a)).c&&!a.isInteger())throw Error(i+"Exponent not an integer: "+R(a));if(null!=b&&(b=new M(b)),k=a.e>14,!o.c||!o.c[0]||1==o.c[0]&&!o.e&&1==o.c.length||!a.c||!a.c[0])return n=new M(Math.pow(+R(o),k?a.s*(2-p(a)):+R(a))),b?n.mod(b):n;if(l=a.s<0,b){if(b.c?!b.c[0]:!b.s)return new M(NaN);(d=!l&&o.isInteger()&&b.isInteger())&&(o=o.mod(b))}else{if(a.e>9&&(o.e>0||o.e<-1||(0==o.e?o.c[0]>1||k&&o.c[1]>=24e7:o.c[0]<8e13||k&&o.c[0]<=9999975e7)))return f=o.s<0&&p(a)?-0:0,o.e>-1&&(f=1/f),new M(l?1/f:f);I&&(f=g(I/14+2))}for(k?(c=new M(.5),l&&(a.s=1),m=p(a)):m=(e=Math.abs(+R(a)))%2,n=new M(z);;){if(m){if(!(n=n.times(o)).c)break;f?n.c.length>f&&(n.c.length=f):d&&(n=n.mod(b))}if(e){if(0===(e=h(e/2)))break;m=e%2}else if(Q(a=a.times(c),a.e+1,1),a.e>14)m=p(a);else{if(0==(e=+R(a)))break;m=e%2}o=o.times(o),f?o.c&&o.c.length>f&&(o.c.length=f):d&&(o=o.mod(b))}return d?n:(l&&(n=z.div(n)),b?n.mod(b):f?Q(n,I,B,j):n)},y.integerValue=function(a){var b=new M(this);return null==a?a=B:o(a,0,8),Q(b,b.e+1,a)},y.isEqualTo=y.eq=function(a,b){return 0===n(this,new M(a,b))},y.isFinite=function(){return!!this.c},y.isGreaterThan=y.gt=function(a,b){return n(this,new M(a,b))>0},y.isGreaterThanOrEqualTo=y.gte=function(a,b){return 1===(b=n(this,new M(a,b)))||0===b},y.isInteger=function(){return!!this.c&&l(this.e/14)>this.c.length-2},y.isLessThan=y.lt=function(a,b){return 0>n(this,new M(a,b))},y.isLessThanOrEqualTo=y.lte=function(a,b){return -1===(b=n(this,new M(a,b)))||0===b},y.isNaN=function(){return!this.s},y.isNegative=function(){return this.s<0},y.isPositive=function(){return this.s>0},y.isZero=function(){return!!this.c&&0==this.c[0]},y.minus=function(a,b){var c,d,e,f,g=this.s;if(b=(a=new M(a,b)).s,!g||!b)return new M(NaN);if(g!=b)return a.s=-b,this.plus(a);var h=this.e/14,i=a.e/14,j=this.c,k=a.c;if(!h||!i){if(!j||!k)return j?(a.s=-b,a):new M(k?this:NaN);if(!j[0]||!k[0])return k[0]?(a.s=-b,a):new M(j[0]?this:3==B?-0:0)}if(h=l(h),i=l(i),j=j.slice(),g=h-i){for((f=g<0)?(g=-g,e=j):(i=h,e=k),e.reverse(),b=g;b--;e.push(0));e.reverse()}else for(d=(f=(g=j.length)<(b=k.length))?g:b,g=b=0;b<d;b++)if(j[b]!=k[b]){f=j[b]<k[b];break}if(f&&(e=j,j=k,k=e,a.s=-a.s),(b=(d=k.length)-(c=j.length))>0)for(;b--;j[c++]=0);for(b=1e14-1;d>g;){if(j[--d]<k[d]){for(c=d;c&&!j[--c];j[c]=b);--j[c],j[d]+=1e14}j[d]-=k[d]}for(;0==j[0];j.splice(0,1),--i);return j[0]?P(a,j,i):(a.s=3==B?-1:1,a.c=[a.e=0],a)},y.modulo=y.mod=function(a,b){var c,d;return(a=new M(a,b),this.c&&a.s&&(!a.c||a.c[0]))?a.c&&(!this.c||this.c[0])?(9==H?(d=a.s,a.s=1,c=v(this,a,0,3),a.s=d,c.s*=d):c=v(this,a,0,H),(a=this.minus(c.times(a))).c[0]||1!=H||(a.s=this.s),a):new M(this):new M(NaN)},y.multipliedBy=y.times=function(a,b){var c,d,e,f,g,h,i,j,k,m,n,o,p,q=this.c,r=(a=new M(a,b)).c;if(!q||!r||!q[0]||!r[0])return this.s&&a.s&&(!q||q[0]||r)&&(!r||r[0]||q)?(a.s*=this.s,q&&r?(a.c=[0],a.e=0):a.c=a.e=null):a.c=a.e=a.s=null,a;for(d=l(this.e/14)+l(a.e/14),a.s*=this.s,(i=q.length)<(m=r.length)&&(p=q,q=r,r=p,e=i,i=m,m=e),e=i+m,p=[];e--;p.push(0));for(e=m;--e>=0;){for(c=0,n=r[e]%1e7,o=r[e]/1e7|0,f=e+(g=i);f>e;)h=o*(j=q[--g]%1e7)+(k=q[g]/1e7|0)*n,c=((j=n*j+h%1e7*1e7+p[f]+c)/1e14|0)+(h/1e7|0)+o*k,p[f--]=j%1e14;p[f]=c}return c?++d:p.splice(0,1),P(a,p,d)},y.negated=function(){var a=new M(this);return a.s=-a.s||null,a},y.plus=function(a,b){var c,d=this.s;if(b=(a=new M(a,b)).s,!d||!b)return new M(NaN);if(d!=b)return a.s=-b,this.minus(a);var e=this.e/14,f=a.e/14,g=this.c,h=a.c;if(!e||!f){if(!g||!h)return new M(d/0);if(!g[0]||!h[0])return h[0]?a:new M(g[0]?this:0*d)}if(e=l(e),f=l(f),g=g.slice(),d=e-f){for(d>0?(f=e,c=h):(d=-d,c=g),c.reverse();d--;c.push(0));c.reverse()}for((d=g.length)-(b=h.length)<0&&(c=h,h=g,g=c,b=d),d=0;b;)d=(g[--b]=g[b]+h[b]+d)/1e14|0,g[b]=1e14===g[b]?0:g[b]%1e14;return d&&(g=[d].concat(g),++f),P(a,g,f)},y.precision=y.sd=function(a,b){var c,d,e;if(null!=a&&!!a!==a)return o(a,1,1e9),null==b?b=B:o(b,0,8),Q(new M(this),a,b);if(!(c=this.c))return null;if(d=14*(e=c.length-1)+1,e=c[e]){for(;e%10==0;e/=10,d--);for(e=c[0];e>=10;e/=10,d++);}return a&&this.e+1>d&&(d=this.e+1),d},y.shiftedBy=function(a){return o(a,-0x1fffffffffffff,0x1fffffffffffff),this.times("1e"+a)},y.squareRoot=y.sqrt=function(){var a,b,c,d,e,f=this.c,g=this.s,h=this.e,i=A+4,j=new M("0.5");if(1!==g||!f||!f[0])return new M(!g||g<0&&(!f||f[0])?NaN:f?this:1/0);if(0==(g=Math.sqrt(+R(this)))||g==1/0?(((b=m(f)).length+h)%2==0&&(b+="0"),g=Math.sqrt(+b),h=l((h+1)/2)-(h<0||h%2),c=new M(b=g==1/0?"5e"+h:(b=g.toExponential()).slice(0,b.indexOf("e")+1)+h)):c=new M(g+""),c.c[0]){for((g=(h=c.e)+i)<3&&(g=0);;)if(e=c,c=j.times(e.plus(v(this,e,i,1))),m(e.c).slice(0,g)===(b=m(c.c)).slice(0,g)){if(c.e<h&&--g,"9999"!=(b=b.slice(g-3,g+1))&&(d||"4999"!=b)){+b&&(+b.slice(1)||"5"!=b.charAt(0))||(Q(c,c.e+A+2,1),a=!c.times(c).eq(this));break}if(!d&&(Q(e,e.e+A+2,0),e.times(e).eq(this))){c=e;break}i+=4,g+=4,d=1}}return Q(c,c.e+A+1,B,a)},y.toExponential=function(a,b){return null!=a&&(o(a,0,1e9),a++),N(this,a,b,1)},y.toFixed=function(a,b){return null!=a&&(o(a,0,1e9),a=a+this.e+1),N(this,a,b)},y.toFormat=function(a,b,c){var d;if(null==c)null!=a&&b&&"object"==typeof b?(c=b,b=null):a&&"object"==typeof a?(c=a,a=b=null):c=J;else if("object"!=typeof c)throw Error(i+"Argument not an object: "+c);if(d=this.toFixed(a,b),this.c){var e,f=d.split("."),g=+c.groupSize,h=+c.secondaryGroupSize,j=c.groupSeparator||"",k=f[0],l=f[1],m=this.s<0,n=m?k.slice(1):k,o=n.length;if(h&&(e=g,g=h,h=e,o-=e),g>0&&o>0){for(e=o%g||g,k=n.substr(0,e);e<o;e+=g)k+=j+n.substr(e,g);h>0&&(k+=j+n.slice(e)),m&&(k="-"+k)}d=l?k+(c.decimalSeparator||"")+((h=+c.fractionGroupSize)?l.replace(RegExp("\\d{"+h+"}\\B","g"),"$&"+(c.fractionGroupSeparator||"")):l):k}return(c.prefix||"")+d+(c.suffix||"")},y.toFraction=function(a){var b,c,d,e,f,g,h,j,l,n,o,p,q=this.c;if(null!=a&&(!(h=new M(a)).isInteger()&&(h.c||1!==h.s)||h.lt(z)))throw Error(i+"Argument "+(h.isInteger()?"out of range: ":"not an integer: ")+R(h));if(!q)return new M(this);for(b=new M(z),l=c=new M(z),d=j=new M(z),p=m(q),f=b.e=p.length-this.e-1,b.c[0]=k[(g=f%14)<0?14+g:g],a=!a||h.comparedTo(b)>0?f>0?b:l:h,g=F,F=1/0,h=new M(p),j.c[0]=0;n=v(h,b,0,1),1!=(e=c.plus(n.times(d))).comparedTo(a);)c=d,d=e,l=j.plus(n.times(e=l)),j=e,b=h.minus(n.times(e=b)),h=e;return e=v(a.minus(c),d,0,1),j=j.plus(e.times(l)),c=c.plus(e.times(d)),j.s=l.s=this.s,f*=2,o=1>v(l,d,f,B).minus(this).abs().comparedTo(v(j,c,f,B).minus(this).abs())?[l,d]:[j,c],F=g,o},y.toNumber=function(){return+R(this)},y.toPrecision=function(a,b){return null!=a&&o(a,1,1e9),N(this,a,b,2)},y.toString=function(a){var b,c=this,d=c.s,e=c.e;return null===e?d?(b="Infinity",d<0&&(b="-"+b)):b="NaN":(null==a?b=e<=C||e>=D?q(m(c.c),e):r(m(c.c),e,"0"):10===a&&L?b=r(m((c=Q(new M(c),A+e+1,B)).c),c.e,"0"):(o(a,2,K.length,"Base"),b=w(r(m(c.c),e,"0"),10,a,d,!0)),d<0&&c.c[0]&&(b="-"+b)),b},y.valueOf=y.toJSON=function(){return R(this)},y._isBigNumber=!0,null!=b&&M.set(b),M}()).default=e.BigNumber=e,void 0===(d=(function(){return e}).call(b,c,b,a))||(a.exports=d)}()}};

package/dist/web/.next-embedded/server/chunks/8376.js

@@ -0,0 +1 @@
+"use strict";exports.id=8376,exports.ids=[8376],exports.modules={8376:(a,b,c)=>{c.r(b),c.d(b,{UnknownWorkspaceError:()=>k,createInMemoryRuntimeConnectionStoreProvider:()=>j,createRuntimeConnection:()=>o,createSecretsRuntimeConnectionStoreProvider:()=>l,listRuntimeConnections:()=>p,parseCreateRuntimeConnectionInput:()=>n,toRuntimeConnectionResource:()=>m});var d=c(10659);function e(a,b,c,d){return{status:a,body:{error:void 0===d||0===d.length?{code:b,message:c}:{code:b,message:c,details:[...d]}}}}let f="RUNTIME_CONNECTION__",g=/^[A-Z][A-Z0-9_]*$/u;function h(a){return a.toUpperCase().replaceAll(/[^A-Z0-9]/gu,"_")}function i(a,b){let c=h(b);if(!g.test(c))return{ok:!1};let d=`${f}${h(a)}__${c}`;return d.length<=128?{ok:!0,name:d}:{ok:!1}}function j(){let a=new Map,b=1;return{forWorkspace(c){let d=()=>{let b=a.get(c);return void 0===b&&(b=new Map,a.set(c,b)),b};return{list:()=>Promise.resolve([...d().values()].sort((a,b)=>a.createdAt.getTime()-b.createdAt.getTime())),create(a){let c=i(a.driver,a.name);if(!c.ok)return Promise.resolve({kind:"name-conflict",name:a.name});for(let b of d().values())if(b.name===c.name)return Promise.resolve({kind:"name-conflict",name:a.name});let e={id:`00000000-0000-4000-9000-${String(b).padStart(12,"0")}`,name:c.name,driver:a.driver,createdAt:new Date};return b+=1,d().set(e.id,e),Promise.resolve({kind:"created",connection:e})}}}}}class k extends Error{constructor(a){super(`no workspace has id ${a}; a runtime-connection store cannot be scoped to a workspace that does not exist`),this.name="UnknownWorkspaceError",this.workspaceId=a}}function l(a){return{forWorkspace(b){let c=null,d=()=>c??=(async()=>{let c=await a.scopes.forWorkspaceId(b);if(null===c)throw new k(b);return c})();return{async list(){let b=await a.secrets.list(await d()),c=[];for(let a of b){let b=function(a){if(!a.startsWith(f))return null;let b=a.slice(f.length),c=b.indexOf("__");return -1===c?null:b.slice(0,c).toLowerCase().replaceAll("_","-")}(a.name);null!==b&&c.push({id:a.id,name:a.name,driver:b,createdAt:a.createdAt})}return c},async create(b){let c=i(b.driver,b.name);if(!c.ok)return{kind:"name-conflict",name:b.name};let e=Buffer.from(JSON.stringify({endpoint:b.endpoint,credential:b.credential}),"utf8"),f=await a.secrets.create(await d(),{name:c.name,value:e});return"name-conflict"===f.kind?{kind:"name-conflict",name:b.name}:{kind:"created",connection:{id:f.secret.id,name:f.secret.name,driver:b.driver,createdAt:f.secret.createdAt}}}}}}}function m(a){return{id:a.id,name:a.name,driver:a.driver,createdAt:a.createdAt.toISOString()}}function n(a){if("object"!=typeof a||null===a||Array.isArray(a))return{ok:!1,errors:["(root): a runtime connection body must be a JSON object"]};let b=[],c=a.name;("string"!=typeof c||""===c.trim())&&b.push("name: must be a non-empty string");let e=a.driver;"string"==typeof e&&d.d2.includes(e)||b.push(`driver: must be one of ${d.d2.join(", ")}`);let f=a.endpoint;("string"!=typeof f||""===f.trim())&&b.push("endpoint: must be a non-empty string");let g=a.credential;return(("string"!=typeof g||""===g)&&b.push("credential: must be a non-empty string"),b.length>0)?{ok:!1,errors:b}:{ok:!0,value:{name:c,driver:e,endpoint:f,credential:g}}}async function o(a,b){let c=n(b);if(!c.ok)return e(400,"invalid_body","The runtime connection could not be created from this body.",c.errors);let d=await a.create(c.value);switch(d.kind){case"created":return{status:201,body:m(d.connection)};case"name-conflict":return e(409,"runtime_connection_name_conflict",`This workspace already has a runtime connection named ${JSON.stringify(d.name)} for that driver, or the name cannot be stored.`);default:return e(500,"unhandled_store_outcome",`The store returned an outcome this route does not handle: ${JSON.stringify(d)}.`)}}async function p(a){return{status:200,body:{runtimeConnections:(await a.list()).map(m)}}}}};

package/dist/web/.next-embedded/server/chunks/841.js

@@ -0,0 +1,2 @@
+"use strict";exports.id=841,exports.ids=[841],exports.modules={42153:(a,b,c)=>{c.d(b,{Z:()=>j});var d=c(81230),e=c(45485),f=c(12050);function g(a){try{let b=new Set(Array.from(a.match(/([A-Z_]){3,}/g)??[]));return b.delete("CONFIG"),b.delete("CONFIG_PREFIX_SEPARATOR"),b.delete("ENV"),[...b].join(", ")}catch(b){return a}}var h=c(59923),i=c(71610);let j=({environmentVariableSelector:a,configFileSelector:b,default:c},j={})=>{let k,{signingName:l,logger:m}=j;return(0,e.B)((0,d.c)((k={signingName:l,logger:m},async()=>{try{let b=a(process.env,k);if(void 0===b)throw Error();return b}catch(b){throw new f.C(b.message||`Not found in ENV: ${g(a.toString())}`,{logger:k?.logger})}}),((a,{preferredFile:b="config",...c}={})=>async()=>{let d=(0,h.Bz)(c),{configFile:e,credentialsFile:j}=await (0,i.p)(c),k=j[d]||{},l=e[d]||{},m="config"===b?{...k,...l}:{...l,...k};try{let c="config"===b?e:j,d=a(m,c);if(void 0===d)throw Error();return d}catch(b){throw new f.C(b.message||`Not found in config files w/ profile [${d}]: ${g(a.toString())}`,{logger:c.logger})}})(b,j),(a=>"function"==typeof a?async()=>await a():()=>Promise.resolve(a))(c)))}},45485:(a,b,c)=>{c.d(b,{B:()=>d});let d=(a,b,c)=>{let d,e,f,g=!1,h=async()=>{e||(e=a());try{d=await e,f=!0,g=!1}finally{e=void 0}return d};return void 0===b?async a=>((!f||a?.forceRefresh)&&(d=await h()),d):async a=>((!f||a?.forceRefresh)&&(d=await h()),g||(c&&!c(d)?g=!0:b(d)&&await h()),d)}},63222:(a,b,c)=>{c.d(b,{ENV_CMDS_FULL_URI:()=>s,ENV_CMDS_RELATIVE_URI:()=>t,fromContainerMetadata:()=>v,fromInstanceMetadata:()=>N});var d,e,f,g,h=c(12050);let i=a=>!!a&&"object"==typeof a&&"string"==typeof a.AccessKeyId&&"string"==typeof a.SecretAccessKey&&"string"==typeof a.Token&&"string"==typeof a.Expiration,j=a=>({accessKeyId:a.AccessKeyId,secretAccessKey:a.SecretAccessKey,sessionToken:a.Token,expiration:new Date(a.Expiration),...a.AccountId&&{accountId:a.AccountId}}),k=1e3,l=0,m=({maxRetries:a=l,timeout:b=k})=>({maxRetries:a,timeout:b});var n=c(84202),o=c(37067),p=c.n(o);function q(a){return new Promise((b,c)=>{let d=p().request({method:"GET",...a,hostname:a.hostname?.replace(/^\[(.+)\]$/,"$1")});d.on("error",a=>{c(Object.assign(new n.m("Unable to connect to instance metadata service"),a)),d.destroy()}),d.on("timeout",()=>{c(new n.m("TimeoutError from instance metadata service")),d.destroy()}),d.on("response",a=>{let{statusCode:e=400}=a;(e<200||300<=e)&&(c(Object.assign(new n.m("Error response received from instance metadata service"),{statusCode:e})),d.destroy());let f=[];a.on("data",a=>{f.push(a)}),a.on("end",()=>{b(Buffer.concat(f)),d.destroy()})}),d.end()})}let r=(a,b)=>{let c=a();for(let d=0;d<b;d++)c=c.catch(a);return c},s="AWS_CONTAINER_CREDENTIALS_FULL_URI",t="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",u="AWS_CONTAINER_AUTHORIZATION_TOKEN",v=(a={})=>{let{timeout:b,maxRetries:c}=m(a);return()=>r(async()=>{let c=await z({logger:a.logger}),d=JSON.parse(await w(b,c));if(!i(d))throw new h.C("Invalid response received from instance metadata service.",{logger:a.logger});return j(d)},c)},w=async(a,b)=>(process.env[u]&&(b.headers={...b.headers,Authorization:process.env[u]}),(await q({...b,timeout:a})).toString()),x=new Set(["localhost","127.0.0.1"]),y=new Set(["http:","https:"]),z=async({logger:a})=>{if(process.env[t])return{hostname:"169.254.170.2",path:process.env[t]};if(process.env[s]){let b;try{b=new URL(process.env[s])}catch{throw new h.C(`${process.env[s]} is not a valid container metadata service URL`,{tryNextLink:!1,logger:a})}if(!b.hostname||!x.has(b.hostname))throw new h.C(`${b.hostname} is not a valid container metadata service hostname`,{tryNextLink:!1,logger:a});if(!b.protocol||!y.has(b.protocol))throw new h.C(`${b.protocol} is not a valid container metadata service protocol`,{tryNextLink:!1,logger:a});return{protocol:b.protocol,hostname:b.hostname,path:b.pathname+b.search,port:b.port?parseInt(b.port,10):void 0}}throw new h.C(`The container metadata credential provider cannot be used unless the ${t} or ${s} environment variable is set`,{tryNextLink:!1,logger:a})};var A=c(42153);class B extends h.C{tryNextLink;name="InstanceMetadataV1FallbackError";constructor(a,b=!0){super(a,b),this.tryNextLink=b,Object.setPrototypeOf(this,B.prototype)}}var C=c(82444);(d=f||(f={})).IPv4="http://169.254.169.254",d.IPv6="http://[fd00:ec2::254]";let D={environmentVariableSelector:a=>a.AWS_EC2_METADATA_SERVICE_ENDPOINT,configFileSelector:a=>a.ec2_metadata_service_endpoint,default:void 0};(e=g||(g={})).IPv4="IPv4",e.IPv6="IPv6";let E={environmentVariableSelector:a=>a.AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE,configFileSelector:a=>a.ec2_metadata_service_endpoint_mode,default:g.IPv4},F=async()=>(0,C.D)(await G()||await H()),G=async()=>(0,A.Z)(D)(),H=async()=>{let a=await (0,A.Z)(E)();switch(a){case g.IPv4:return f.IPv4;case g.IPv6:return f.IPv6;default:throw Error(`Unsupported endpoint mode: ${a}. Select from ${Object.values(g)}`)}},I=(a,b)=>{let c=300+Math.floor(300*Math.random()),d=new Date(Date.now()+1e3*c);b.warn(`Attempting credential expiration extension due to a credential service availability issue. A refresh of these credentials will be attempted after ${new Date(d)}.
+For more information, please visit: https://docs.aws.amazon.com/sdkref/latest/guide/feature-static-credentials.html`);let e=a.originalExpiration??a.expiration;return{...a,...e?{originalExpiration:e}:{},expiration:d}},J="/latest/meta-data/iam/security-credentials/",K="AWS_EC2_METADATA_V1_DISABLED",L="ec2_metadata_v1_disabled",M="x-aws-ec2-metadata-token",N=(a={})=>((a,b={})=>{let c,d=b?.logger||console;return async()=>{let b;try{(b=await a()).expiration&&b.expiration.getTime()<Date.now()&&(b=I(b,d))}catch(a){if(c)d.warn("Credential renew failed: ",a),b=I(c,d);else throw a}return c=b,b}})(O(a),{logger:a.logger}),O=(a={})=>{let b=!1,{logger:c,profile:d}=a,{timeout:e,maxRetries:f}=m(a),g=async(c,e)=>{if(b||e.headers?.[M]==null){let b=!1,c=!1,e=await (0,A.Z)({environmentVariableSelector:b=>{let d=b[K];if(c=!!d&&"false"!==d,void 0===d)throw new h.C(`${K} not set in env, checking config file next.`,{logger:a.logger});return c},configFileSelector:a=>{let c=a[L];return b=!!c&&"false"!==c},default:!1},{profile:d})();if(a.ec2MetadataV1Disabled||e){let d=[];throw a.ec2MetadataV1Disabled&&d.push("credential provider initialization (runtime option ec2MetadataV1Disabled)"),b&&d.push(`config file profile (${L})`),c&&d.push(`process environment variable (${K})`),new B(`AWS EC2 Metadata v1 fallback has been blocked by AWS SDK configuration in the following: [${d.join(", ")}].`)}}let f=(await r(async()=>{let a;try{a=await Q(e)}catch(a){throw 401===a.statusCode&&(b=!1),a}return a},c)).trim();return r(async()=>{let c;try{c=await R(f,e,a)}catch(a){throw 401===a.statusCode&&(b=!1),a}return c},c)};return async()=>{let a=await F();if(b)return c?.debug("AWS SDK Instance Metadata","using v1 fallback (no token fetch)"),g(f,{...a,timeout:e});{let d;try{d=(await P({...a,timeout:e})).toString()}catch(d){if(d?.statusCode===400)throw Object.assign(d,{message:"EC2 Metadata token request returned error"});return("TimeoutError"===d.message||[403,404,405].includes(d.statusCode))&&(b=!0),c?.debug("AWS SDK Instance Metadata","using v1 fallback (initial)"),g(f,{...a,timeout:e})}return g(f,{...a,headers:{[M]:d},timeout:e})}}},P=async a=>q({...a,path:"/latest/api/token",method:"PUT",headers:{"x-aws-ec2-metadata-token-ttl-seconds":"21600"}}),Q=async a=>(await q({...a,path:J})).toString(),R=async(a,b,c)=>{let d=JSON.parse((await q({...b,path:J+a})).toString());if(!i(d))throw new h.C("Invalid response received from instance metadata service.",{logger:c.logger});return j(d)}},82444:(a,b,c)=>{c.d(b,{D:()=>d});let d=a=>{let b;if("string"==typeof a)return d(new URL(a));let{hostname:c,pathname:e,port:f,protocol:g,search:h}=a;return h&&(b=function(a){let b={};if(a=a.replace(/^\?/,""))for(let c of a.split("&")){let[a,d=null]=c.split("=");a=decodeURIComponent(a),d&&(d=decodeURIComponent(d)),a in b?Array.isArray(b[a])?b[a].push(d):b[a]=[b[a],d]:b[a]=d}return b}(h)),{hostname:c,port:f?parseInt(f):void 0,protocol:g,path:e,query:b}}}};

package/dist/web/.next-embedded/server/chunks/8430.js

@@ -0,0 +1 @@
+"use strict";exports.id=8430,exports.ids=[8430],exports.modules={17337:(a,b,c)=>{c.d(b,{cg:()=>e});let d=globalThis;function e(){return d.__agentWorkspaceRbacRuntime__??null}},32867:(a,b,c)=>{c.d(b,{Fm:()=>m,Gu:()=>n,Zr:()=>k,nE:()=>j,qG:()=>i,tD:()=>l});var d=c(84888),e=c(53978),f=c(62003),g=c(99711),h=c(80061);let i=6*d.wd+65536;async function j(a){return(0,g.g5)(a,{maxBytes:i,problem:e.CC})}function k(a){return(0,g.Dj)(a)}async function l(a,b,c){let d=(0,f.iG)();if(null===d)return(0,e.CC)(503,"agents_runtime_not_configured","The agent API has no store or workspace resolver wired into it. This deployment cannot serve agent requests; it is not that the request was rejected.");if(void 0!==c)return b(d.agents.forWorkspace(c),d,c);let g=await d.resolveWorkspace(a);switch(g.kind){case"workspace":return b(d.agents.forWorkspace(g.workspaceId),d,g.workspaceId);case"unauthenticated":return(0,e.CC)(401,"unauthenticated",g.reason);case"forbidden":return(0,e.CC)(403,"forbidden",g.reason);default:return(0,e.CC)(500,"unhandled_workspace_resolution",`The workspace resolver returned a case this route does not handle: ${JSON.stringify(g)}.`)}}async function m(a,b,c){return l(a,(d,f,g)=>(0,h.Z_)(a,"function"==typeof b?b(d):b,({principal:a})=>a.workspaceId===g?c(d,f,g,a):Promise.resolve((0,e.CC)(403,"forbidden","The authorisation identity resolved another workspace."))))}async function n(a){return(0,g.rc)(a,"id")}},78572:(a,b,c)=>{c.d(b,{A:()=>e});var d=c(80061);async function e(a,b){let c=null,e=await (0,d.Z_)(a,b,a=>(c=a.principal,Promise.resolve({status:204,body:null})));if(204!==e.status)return{ok:!1,response:(0,d.Zr)(e)};if(null===c)throw Error("RBAC allowed a resource request without retaining its verified principal.");return{ok:!0,principal:c}}},80061:(a,b,c)=>{c.d(b,{CC:()=>g,Z_:()=>j,Zr:()=>h,nE:()=>i,tW:()=>k});var d=c(82333),e=c(17337);let f="application/json";function g(a,b,c){return{status:a,body:{error:{code:b,message:c,detail:c}}}}function h(a){let b={...a.headers,"cache-control":"no-store"};return 204===a.status||null===a.body?new Response(null,{status:a.status,headers:b}):new Response(JSON.stringify(a.body),{status:a.status,headers:{...b,"content-type":"application/json; charset=utf-8"}})}async function i(a){let b,c=a.headers.get("content-type"),d=null===c?"":(c.split(";")[0]??"").trim().toLowerCase();if(d!==f)return{ok:!1,result:g(415,"unsupported_media_type",`This route accepts ${f}; the request declared ${""===d?"no Content-Type":JSON.stringify(d)}.`)};try{let c=await a.arrayBuffer();if(c.byteLength>16384)return{ok:!1,result:g(413,"request_body_too_large",`This route reads at most ${String(16384)} bytes of request body.`)};b=new TextDecoder("utf-8",{fatal:!0}).decode(c)}catch{return{ok:!1,result:g(400,"malformed_body","The request body could not be read as UTF-8.")}}if(""===b.trim())return{ok:!1,result:g(400,"malformed_body","This route requires a JSON object body.")};try{return{ok:!0,value:JSON.parse(b)}}catch{return{ok:!1,result:g(400,"malformed_body","The request body is not valid JSON.")}}}async function j(a,b,c){let f,h,i=(0,e.cg)();if(null===i)return g(503,"rbac_runtime_not_configured","The users, memberships and API-key routes have no directory or identity resolver wired into them. This deployment cannot serve them; it is not that the request was rejected.");let j=await i.identify(a);if(null===j)return g(401,"unauthenticated",'This route requires a verified session cookie or an API key presented as "Authorization: Bearer ak_live_…".');let k=i.directory.forWorkspace(j.workspaceId);if("function"==typeof b){let a=await b(j,k);if("refuse"===a.kind)return a.result;f=a.ownership}else f=b;try{h=new URL(a.url).pathname}catch{return g(500,"authorisation_undecidable",`The request URL ${JSON.stringify(a.url)} could not be read as a URL, so no route could be derived from it and no authorisation decision was made.`)}let l=(0,d.LD)({role:j.role,method:a.method,path:h,ownership:f,scope:j.scope});switch(l.effect){case"allow":return c({principal:j,directory:k,decision:l});case"deny":return g(403,l.code??"forbidden",l.because);case"refuse":return g(500,"authorisation_undecidable",`${l.because} No authorisation decision was made, so this request was neither allowed nor refused on its merits.`);default:throw Error(`unclassified decision ${JSON.stringify(l)} — refusing to serve the request`)}}async function k(a){let b=await a.params;if("object"==typeof b&&null!==b)return b.id}},99711:(a,b,c)=>{c.d(b,{Dj:()=>j,Ml:()=>i,OP:()=>h,g5:()=>g,rc:()=>k});let d="application/json";function e(a,b,c,d){return{ok:!1,result:a.problem(b,c,d)}}async function f(a,b){let c=a.headers.get("content-length");if(null!==c){let a=Number(c);if(!Number.isInteger(a)||a<0)return e(b,400,"malformed_body",`The Content-Length header is ${JSON.stringify(c)}, which is not a byte count.`);if(a>b.maxBytes)return e(b,413,"request_body_too_large",`This route reads at most ${String(b.maxBytes)} bytes of request body; the request declared a Content-Length of ${String(a)}.`)}let d=a.body;if(null===d)return{ok:!0,bytes:new Uint8Array(0)};let f=d.getReader(),g=[],h=0;try{for(;;){let{done:a,value:c}=await f.read();if(a)break;if(void 0!==c){if((h+=c.byteLength)>b.maxBytes){try{await f.cancel()}catch{}return e(b,413,"request_body_too_large",`This route reads at most ${String(b.maxBytes)} bytes of request body; the request sent more than that and was not read to the end.`)}g.push(c)}}}catch{return e(b,400,"malformed_body","The request body could not be read.")}let i=new Uint8Array(h),j=0;for(let a of g)i.set(a,j),j+=a.byteLength;return{ok:!0,bytes:i}}async function g(a,b){let c=await h(a,b);return c.ok?{ok:!0,value:c.value}:c}async function h(a,b){let c,g=a.headers.get("content-type"),h=null===g?"":(g.split(";")[0]??"").trim().toLowerCase();if(h!==d)return e(b,415,"unsupported_media_type",`This route accepts ${d}; the request declared ${""===h?"no Content-Type":JSON.stringify(h)}.`);let i=await f(a,b);if(!i.ok)return i;try{c=new TextDecoder("utf-8",{fatal:!0}).decode(i.bytes)}catch{return e(b,400,"malformed_body","The request body is not valid UTF-8.")}if(""===c.trim())return e(b,400,"malformed_body","The request body is empty; a JSON object is required.");try{return{ok:!0,value:JSON.parse(c),bytes:i.bytes.byteLength}}catch{return e(b,400,"malformed_body","The request body is not valid JSON.")}}function i(a,b,c={}){return new Response(JSON.stringify(b),{status:a,headers:{...c,"content-type":"application/json; charset=utf-8"}})}function j(a){return 204===a.status||null===a.body?new Response(null,{status:a.status}):i(a.status,a.body)}async function k(a,b){let c=await a.params;if("object"==typeof c&&null!==c)return c[b]}}};