@selvajs/selva 2.0.10 → 3.0.0

package/build/server/chunks/_server.ts-Co2Yjt2k.js

@@ -0,0 +1,408 @@
+import { spawn } from 'child_process';
+import { join } from 'path';
+import { readFileSync, existsSync } from 'fs';
+import { p as private_env } from './shared-server-C3WdcJCQ.js';
+import { z as requirePermission } from './access.server-BPceukOr.js';
+import '@sveltejs/kit';
+import './context-WcuX1UXU.js';
+import 'zod';
+import './providers.server-DOymvucH.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import './api-errors-KUItADEX.js';
+
+const UPDATE_LOG_PATH = "/tmp/selva-update.log";
+function stripAnsi(str) {
+  return str.replace(/\x1B\[[0-9;]*[mGKHF]/g, "");
+}
+function readRuntimeVersion(dir) {
+  try {
+    const pkg = JSON.parse(
+      readFileSync(join(dir, "node_modules", "@selvajs", "selva", "package.json"), "utf8")
+    );
+    return typeof pkg.version === "string" ? pkg.version : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function shellQuote(s) {
+  return `'${s.replace(/'/g, `'\\''`)}'`;
+}
+function buildLauncher(runnerScript, prelude = []) {
+  const echoes = prelude.map((line) => `echo ${shellQuote(line)}`).join("\n");
+  return `
+LOGFILE=${shellQuote(UPDATE_LOG_PATH)}
+RUNNER=/tmp/selva-update-runner.sh
+mkdir -p "$(dirname "$LOGFILE")"
+: > "$LOGFILE"
+
+cat > "$RUNNER" <<'__SELVA_RUNNER_EOF__'
+${runnerScript}
+__SELVA_RUNNER_EOF__
+chmod +x "$RUNNER"
+
+trap '' PIPE
+exec > >(tee --output-error=warn-nopipe -a "$LOGFILE" 2>/dev/null) 2>&1
+${echoes}
+
+# Daemonize the runner so PM2's tree-kill of selva-compute can't reach it.
+# setsid puts it in a new session; the trailing & + disown + launcher exit
+# leaves the runner with PPID=1 once we're gone. stdin/stdout/stderr are
+# fully detached from this process (and from selva-compute's pipes).
+setsid bash "$RUNNER" </dev/null >>"$LOGFILE" 2>&1 &
+RUNNER_PID=$!
+disown
+echo "[INFO] Update runner started (PID $RUNNER_PID, log: $LOGFILE)"
+
+# Small pause so the runner has time to print its first line before SSE
+# closes — otherwise the frontend's first poll might see no progress.
+sleep 1
+exit 0
+`;
+}
+function buildNpmRunnerScript(npmArgs, versionBefore, ecosystemPath) {
+  const npmCommand = ["npm", ...npmArgs].map(shellQuote).join(" ");
+  const before = shellQuote(versionBefore ?? "");
+  const ecosystem = shellQuote(ecosystemPath);
+  return `#!/bin/bash
+set -o pipefail
+BEFORE=${before}
+ECOSYSTEM=${ecosystem}
+
+# Last-resort safety net. If the script exits with the app NOT online for
+# any reason (crash, kill -9, network blip, npm hang past timeout), try to
+# bring it back from ecosystem.config.cjs before we go. The whole point of
+# this script is to update the app; leaving it down is the worst possible
+# outcome.
+on_exit() {
+  STATUS=$(pm2 jlist 2>/dev/null | node -e "
+    try {
+      const list = JSON.parse(require('fs').readFileSync('/dev/stdin','utf8'));
+      const app = list.find(p => p.name === 'selva-compute');
+      process.stdout.write(app ? app.pm2_env.status : 'missing');
+    } catch { process.stdout.write('error'); }
+  " 2>/dev/null || echo "error")
+  if [ "$STATUS" != "online" ]; then
+    echo "[RECOVER] selva-compute is '$STATUS' — starting from ecosystem.config.cjs"
+    pm2 start "$ECOSYSTEM" --update-env >/dev/null 2>&1 || \\
+      echo "[RECOVER] pm2 start failed — manual intervention required: cd $(dirname "$ECOSYSTEM") && pm2 start ecosystem.config.cjs"
+  fi
+}
+trap on_exit EXIT
+
+# ---------------------------------------------------------------------------
+# 1. Pre-flight: skip the whole cycle if there's nothing to install.
+# ---------------------------------------------------------------------------
+# Without this, clicking "Update" on an already-current instance triggered
+# a full stop/install/start cycle and a downtime window for no reason. Now
+# we just check the registry first.
+echo "[STEP] Checking npm registry for available updates"
+LATEST=$(npm view @selvajs/selva version --silent 2>/dev/null || echo "")
+if [ -z "$LATEST" ]; then
+  echo "[WARN] Could not query npm registry — proceeding with update attempt anyway"
+elif [ -n "$BEFORE" ] && [ "$LATEST" = "$BEFORE" ]; then
+  echo "[INFO] Already on the latest version ($BEFORE)"
+  echo "[DONE] Nothing to do"
+  exit 0
+else
+  echo "[INFO] Available: $BEFORE → $LATEST"
+fi
+
+# ---------------------------------------------------------------------------
+# 2. Resync PM2 daemon if its in-memory version drifted from the CLI on disk.
+# ---------------------------------------------------------------------------
+# After a global pm2 upgrade the daemon keeps running its original version
+# while the CLI moves forward. Process commands then talk to a stale daemon
+# and the symptom is "stop works, start never lands". \`pm2 update\` dumps
+# processes, kills the daemon, respawns on the current CLI, restores the
+# dump. Doing it before we touch anything keeps the rest of the script
+# talking to a coherent daemon.
+echo "[STEP] Checking PM2 daemon/CLI version sync"
+if pm2 ping 2>&1 | grep -q "out-of-date" || pm2 list 2>&1 | grep -q "out-of-date"; then
+  echo "[STEP] PM2 daemon is out-of-date — running 'pm2 update' to resync"
+  if ! pm2 update; then
+    echo "[FATAL] pm2 update failed — aborting before stopping the running app"
+    exit 1
+  fi
+  echo "[INFO] PM2 daemon resynced"
+fi
+
+# ---------------------------------------------------------------------------
+# 3. Stop selva-compute BEFORE npm rewrites build/.
+# ---------------------------------------------------------------------------
+# SvelteKit's node adapter lazy-imports chunks from build/server/chunks/ on
+# every request. Letting npm rewrite build/ while the old process is still
+# serving traffic = in-flight requests hit ERR_MODULE_NOT_FOUND for chunks
+# whose hash just changed under their feet. Stopping first is a brief
+# downtime window (~1-2s longer than restart-in-place) for a much smaller
+# blast radius.
+#
+# This is also where the SSE connection to the frontend dies — selva-compute
+# IS the SSE server. From here on, the user sees output via the log-file
+# polling fallback in the admin UI, not over SSE.
+echo "[STEP] Stopping selva-compute"
+if ! pm2 stop selva-compute; then
+  echo "[WARN] pm2 stop failed — selva-compute may not be running yet. Continuing."
+fi
+
+# ---------------------------------------------------------------------------
+# 4. Run npm update.
+# ---------------------------------------------------------------------------
+echo "[STEP] Updating @selvajs/* packages"
+if ! ${npmCommand}; then
+  echo "[FATAL] npm update failed — EXIT trap will restart the previous build"
+  exit 1
+fi
+
+AFTER=$(node -e "try{console.log(require('./node_modules/@selvajs/selva/package.json').version)}catch(e){}" 2>/dev/null)
+echo "[INFO] New @selvajs/selva: \${AFTER:-unknown}"
+
+if [ -n "$BEFORE" ] && [ "$BEFORE" = "$AFTER" ]; then
+  echo "[WARN] No version change ($BEFORE). Your npm cache may be stale."
+  echo "[WARN] Recover with:"
+  echo "[WARN]   npm cache clean --force"
+  echo "[WARN]   rm -rf node_modules package-lock.json"
+  echo "[WARN]   npm install --prefer-online"
+fi
+
+# ---------------------------------------------------------------------------
+# 5. Start selva-compute with the new build.
+# ---------------------------------------------------------------------------
+# Start from ecosystem.config.cjs, NOT \`pm2 start selva-compute\` — the
+# latter requires selva-compute to already be in pm2's in-memory process
+# list. After a \`pm2 update\` (step 2) that's not guaranteed.
+echo "[STEP] Starting selva-compute with new build"
+if ! pm2 start "$ECOSYSTEM" --update-env; then
+  echo "[FATAL] pm2 start failed — investigate with \\\`pm2 logs selva-compute\\\`"
+  exit 2
+fi
+
+# ---------------------------------------------------------------------------
+# 6. Health probe the new process.
+# ---------------------------------------------------------------------------
+# Read PORT from .env the same way scripts/update.sh does, so non-default
+# ports are respected.
+PORT=$(grep "^PORT=" .env 2>/dev/null \\
+  | head -1 \\
+  | cut -d'=' -f2 \\
+  | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//' -e 's/^["'"'"']//' -e 's/["'"'"']$//' -e 's/[[:space:]]*#.*//')
+PORT=\${PORT:-3000}
+
+echo "[STEP] Health-probing the new process on port $PORT"
+HEALTHY=0
+for i in $(seq 1 15); do
+  sleep 2
+  CODE=$(curl -sS -o /tmp/selva-health.$$ -w "%{http_code}" --max-time 5 "http://localhost:$PORT/api/health" 2>/dev/null || echo "000")
+  if [ "$CODE" = "200" ]; then
+    HEALTHY=1
+    echo "[INFO] Health probe passed after \${i} attempt(s)"
+    rm -f /tmp/selva-health.$$
+    break
+  fi
+  echo "[INFO] Probe attempt $i/15: HTTP $CODE — retrying"
+done
+
+if [ "$HEALTHY" = "1" ]; then
+  echo "[DONE] Update complete"
+  exit 0
+fi
+
+# ---------------------------------------------------------------------------
+# 7. Rollback path.
+# ---------------------------------------------------------------------------
+echo "[FATAL] New process failed health check after 30s"
+if [ -f /tmp/selva-health.$$ ]; then
+  echo "[FATAL] Last response body:"
+  cat /tmp/selva-health.$$
+  rm -f /tmp/selva-health.$$
+fi
+
+if [ -z "$BEFORE" ]; then
+  echo "[FATAL] No prior version recorded — cannot roll back automatically."
+  echo "[FATAL] EXIT trap will attempt to restart the current build anyway."
+  exit 3
+fi
+
+echo "[STEP] Rolling back @selvajs/selva to $BEFORE"
+pm2 stop selva-compute >/dev/null 2>&1 || true
+if ! npm install --save "@selvajs/selva@$BEFORE"; then
+  echo "[FATAL] Rollback npm install failed — EXIT trap will retry restart."
+  exit 4
+fi
+
+pm2 start "$ECOSYSTEM" --update-env || true
+sleep 3
+ROLLBACK_CODE=$(curl -sS -o /dev/null -w "%{http_code}" --max-time 5 "http://localhost:$PORT/api/health" 2>/dev/null || echo "000")
+if [ "$ROLLBACK_CODE" = "200" ]; then
+  echo "[DONE] Rolled back to $BEFORE — previous version is online"
+  exit 5
+fi
+
+echo "[FATAL] Rollback restart also failed health check (HTTP $ROLLBACK_CODE)"
+echo "[FATAL] Manual recovery required. Check: pm2 logs selva-compute"
+exit 6
+`;
+}
+function detectUpdatePlan() {
+  if (private_env.INSTALL_DIR && existsSync(join(private_env.INSTALL_DIR, "scripts", "update.sh"))) {
+    return {
+      mode: "git",
+      cwd: private_env.INSTALL_DIR,
+      cmd: "bash",
+      args: [join(private_env.INSTALL_DIR, "scripts", "update.sh")]
+    };
+  }
+  let dir = process.cwd();
+  for (let i = 0; i < 6; i++) {
+    if (existsSync(join(dir, "scripts", "update.sh"))) {
+      return {
+        mode: "git",
+        cwd: dir,
+        cmd: "bash",
+        args: [join(dir, "scripts", "update.sh")]
+      };
+    }
+    if (existsSync(join(dir, "node_modules", "@selvajs", "selva", "package.json"))) {
+      return {
+        mode: "npm",
+        cwd: dir,
+        cmd: "npm",
+        args: ["update", "--save", "--prefer-online", "@selvajs/cli", "@selvajs/selva"]
+      };
+    }
+    const parent = join(dir, "..");
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return null;
+}
+const POST = async ({ locals }) => {
+  requirePermission(locals, "instance_admin");
+  const plan = detectUpdatePlan();
+  if (!plan) {
+    return new Response(
+      JSON.stringify({
+        error: "Couldn't determine how to update this deployment. Expected either scripts/update.sh (monorepo) or node_modules/@selvajs/selva (CLI scaffold) in the cwd or a parent."
+      }),
+      { status: 500, headers: { "Content-Type": "application/json" } }
+    );
+  }
+  const stream = new ReadableStream({
+    start(controller) {
+      const encoder = new TextEncoder();
+      function sendEvent(type, data) {
+        const message = `data: ${JSON.stringify({ type, ...data })}
+
+`;
+        controller.enqueue(encoder.encode(message));
+      }
+      try {
+        const versionBefore = plan.mode === "npm" ? readRuntimeVersion(plan.cwd) : void 0;
+        const prelude = [
+          `[INFO] Update mode: ${plan.mode} (cwd: ${plan.cwd})`,
+          ...versionBefore ? [`[INFO] Current @selvajs/selva: ${versionBefore}`] : []
+        ];
+        const runnerScript = plan.mode === "git" ? `#!/bin/bash
+exec ${shellQuote(plan.cmd)} ${plan.args.map(shellQuote).join(" ")}
+` : buildNpmRunnerScript(
+          plan.args,
+          versionBefore,
+          join(plan.cwd, "ecosystem.config.cjs")
+        );
+        const cmd = "bash";
+        const args = ["-c", buildLauncher(runnerScript, prelude)];
+        const localBin = join(plan.cwd, "node_modules", ".bin");
+        const child = spawn(cmd, args, {
+          cwd: plan.cwd,
+          env: {
+            PATH: `${localBin}:${process.env.PATH ?? ""}`,
+            HOME: process.env.HOME,
+            INSTALL_DIR: plan.cwd
+          },
+          detached: true,
+          stdio: ["ignore", "pipe", "pipe"]
+        });
+        child.unref();
+        const timeout = setTimeout(
+          () => {
+            try {
+              if (child.pid) process.kill(-child.pid, "SIGTERM");
+            } catch {
+            }
+            sendEvent("log", { data: "[FATAL] Update timed out after 15 minutes" });
+            sendEvent("exit", { code: -1 });
+            controller.close();
+          },
+          15 * 60 * 1e3
+        );
+        let restarting = false;
+        child.stdout.on("data", (data) => {
+          const lines = data.toString().split("\n");
+          for (const line of lines) {
+            const clean = stripAnsi(line).trim();
+            if (clean) {
+              if (!restarting && (clean.includes("Applying action stopProcessId") || clean.includes("Applying action restartProcessId"))) {
+                restarting = true;
+                sendEvent("restarting", { data: clean });
+              } else {
+                sendEvent("log", { data: clean });
+              }
+            }
+          }
+        });
+        child.stderr.on("data", (data) => {
+          const lines = data.toString().split("\n");
+          for (const line of lines) {
+            const clean = stripAnsi(line).trim();
+            if (clean) {
+              sendEvent("log", { data: `[ERROR] ${clean}` });
+            }
+          }
+        });
+        child.on("close", (code) => {
+          clearTimeout(timeout);
+          sendEvent("exit", { code: code ?? -1 });
+          controller.close();
+        });
+        child.on("error", (err) => {
+          clearTimeout(timeout);
+          sendEvent("log", { data: `[FATAL] ${err.message}` });
+          sendEvent("exit", { code: -1 });
+          controller.close();
+        });
+      } catch (err) {
+        sendEvent("log", { data: `[FATAL] Failed to spawn process: ${err}` });
+        sendEvent("exit", { code: -1 });
+        controller.close();
+      }
+    }
+  });
+  return new Response(stream, {
+    headers: {
+      "Content-Type": "text/event-stream",
+      "Cache-Control": "no-cache",
+      Connection: "keep-alive"
+    }
+  });
+};
+const GET = async ({ locals }) => {
+  requirePermission(locals, "instance_admin");
+  let body = "";
+  try {
+    body = readFileSync(UPDATE_LOG_PATH, "utf8");
+  } catch {
+  }
+  return new Response(body, {
+    headers: {
+      "Content-Type": "text/plain; charset=utf-8",
+      "Cache-Control": "no-store"
+    }
+  });
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts-Co2Yjt2k.js.map

package/build/server/chunks/_server.ts-Co2Yjt2k.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-Co2Yjt2k.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/system/update/_server.ts.js"],"sourcesContent":["import { spawn } from \"child_process\";\nimport { join } from \"path\";\nimport { readFileSync, existsSync } from \"fs\";\nimport { p as private_env } from \"../../../../../../chunks/shared-server.js\";\nimport { z as requirePermission } from \"../../../../../../chunks/access.server.js\";\nconst UPDATE_LOG_PATH = \"/tmp/selva-update.log\";\nfunction stripAnsi(str) {\n  return str.replace(/\\x1B\\[[0-9;]*[mGKHF]/g, \"\");\n}\nfunction readRuntimeVersion(dir) {\n  try {\n    const pkg = JSON.parse(\n      readFileSync(join(dir, \"node_modules\", \"@selvajs\", \"selva\", \"package.json\"), \"utf8\")\n    );\n    return typeof pkg.version === \"string\" ? pkg.version : void 0;\n  } catch {\n    return void 0;\n  }\n}\nfunction shellQuote(s) {\n  return `'${s.replace(/'/g, `'\\\\''`)}'`;\n}\nfunction buildLauncher(runnerScript, prelude = []) {\n  const echoes = prelude.map((line) => `echo ${shellQuote(line)}`).join(\"\\n\");\n  return `\nLOGFILE=${shellQuote(UPDATE_LOG_PATH)}\nRUNNER=/tmp/selva-update-runner.sh\nmkdir -p \"$(dirname \"$LOGFILE\")\"\n: > \"$LOGFILE\"\n\ncat > \"$RUNNER\" <<'__SELVA_RUNNER_EOF__'\n${runnerScript}\n__SELVA_RUNNER_EOF__\nchmod +x \"$RUNNER\"\n\ntrap '' PIPE\nexec > >(tee --output-error=warn-nopipe -a \"$LOGFILE\" 2>/dev/null) 2>&1\n${echoes}\n\n# Daemonize the runner so PM2's tree-kill of selva-compute can't reach it.\n# setsid puts it in a new session; the trailing & + disown + launcher exit\n# leaves the runner with PPID=1 once we're gone. stdin/stdout/stderr are\n# fully detached from this process (and from selva-compute's pipes).\nsetsid bash \"$RUNNER\" </dev/null >>\"$LOGFILE\" 2>&1 &\nRUNNER_PID=$!\ndisown\necho \"[INFO] Update runner started (PID $RUNNER_PID, log: $LOGFILE)\"\n\n# Small pause so the runner has time to print its first line before SSE\n# closes — otherwise the frontend's first poll might see no progress.\nsleep 1\nexit 0\n`;\n}\nfunction buildNpmRunnerScript(npmArgs, versionBefore, ecosystemPath) {\n  const npmCommand = [\"npm\", ...npmArgs].map(shellQuote).join(\" \");\n  const before = shellQuote(versionBefore ?? \"\");\n  const ecosystem = shellQuote(ecosystemPath);\n  return `#!/bin/bash\nset -o pipefail\nBEFORE=${before}\nECOSYSTEM=${ecosystem}\n\n# Last-resort safety net. If the script exits with the app NOT online for\n# any reason (crash, kill -9, network blip, npm hang past timeout), try to\n# bring it back from ecosystem.config.cjs before we go. The whole point of\n# this script is to update the app; leaving it down is the worst possible\n# outcome.\non_exit() {\n  STATUS=$(pm2 jlist 2>/dev/null | node -e \"\n    try {\n      const list = JSON.parse(require('fs').readFileSync('/dev/stdin','utf8'));\n      const app = list.find(p => p.name === 'selva-compute');\n      process.stdout.write(app ? app.pm2_env.status : 'missing');\n    } catch { process.stdout.write('error'); }\n  \" 2>/dev/null || echo \"error\")\n  if [ \"$STATUS\" != \"online\" ]; then\n    echo \"[RECOVER] selva-compute is '$STATUS' — starting from ecosystem.config.cjs\"\n    pm2 start \"$ECOSYSTEM\" --update-env >/dev/null 2>&1 || \\\\\n      echo \"[RECOVER] pm2 start failed — manual intervention required: cd $(dirname \"$ECOSYSTEM\") && pm2 start ecosystem.config.cjs\"\n  fi\n}\ntrap on_exit EXIT\n\n# ---------------------------------------------------------------------------\n# 1. Pre-flight: skip the whole cycle if there's nothing to install.\n# ---------------------------------------------------------------------------\n# Without this, clicking \"Update\" on an already-current instance triggered\n# a full stop/install/start cycle and a downtime window for no reason. Now\n# we just check the registry first.\necho \"[STEP] Checking npm registry for available updates\"\nLATEST=$(npm view @selvajs/selva version --silent 2>/dev/null || echo \"\")\nif [ -z \"$LATEST\" ]; then\n  echo \"[WARN] Could not query npm registry — proceeding with update attempt anyway\"\nelif [ -n \"$BEFORE\" ] && [ \"$LATEST\" = \"$BEFORE\" ]; then\n  echo \"[INFO] Already on the latest version ($BEFORE)\"\n  echo \"[DONE] Nothing to do\"\n  exit 0\nelse\n  echo \"[INFO] Available: $BEFORE → $LATEST\"\nfi\n\n# ---------------------------------------------------------------------------\n# 2. Resync PM2 daemon if its in-memory version drifted from the CLI on disk.\n# ---------------------------------------------------------------------------\n# After a global pm2 upgrade the daemon keeps running its original version\n# while the CLI moves forward. Process commands then talk to a stale daemon\n# and the symptom is \"stop works, start never lands\". \\`pm2 update\\` dumps\n# processes, kills the daemon, respawns on the current CLI, restores the\n# dump. Doing it before we touch anything keeps the rest of the script\n# talking to a coherent daemon.\necho \"[STEP] Checking PM2 daemon/CLI version sync\"\nif pm2 ping 2>&1 | grep -q \"out-of-date\" || pm2 list 2>&1 | grep -q \"out-of-date\"; then\n  echo \"[STEP] PM2 daemon is out-of-date — running 'pm2 update' to resync\"\n  if ! pm2 update; then\n    echo \"[FATAL] pm2 update failed — aborting before stopping the running app\"\n    exit 1\n  fi\n  echo \"[INFO] PM2 daemon resynced\"\nfi\n\n# ---------------------------------------------------------------------------\n# 3. Stop selva-compute BEFORE npm rewrites build/.\n# ---------------------------------------------------------------------------\n# SvelteKit's node adapter lazy-imports chunks from build/server/chunks/ on\n# every request. Letting npm rewrite build/ while the old process is still\n# serving traffic = in-flight requests hit ERR_MODULE_NOT_FOUND for chunks\n# whose hash just changed under their feet. Stopping first is a brief\n# downtime window (~1-2s longer than restart-in-place) for a much smaller\n# blast radius.\n#\n# This is also where the SSE connection to the frontend dies — selva-compute\n# IS the SSE server. From here on, the user sees output via the log-file\n# polling fallback in the admin UI, not over SSE.\necho \"[STEP] Stopping selva-compute\"\nif ! pm2 stop selva-compute; then\n  echo \"[WARN] pm2 stop failed — selva-compute may not be running yet. Continuing.\"\nfi\n\n# ---------------------------------------------------------------------------\n# 4. Run npm update.\n# ---------------------------------------------------------------------------\necho \"[STEP] Updating @selvajs/* packages\"\nif ! ${npmCommand}; then\n  echo \"[FATAL] npm update failed — EXIT trap will restart the previous build\"\n  exit 1\nfi\n\nAFTER=$(node -e \"try{console.log(require('./node_modules/@selvajs/selva/package.json').version)}catch(e){}\" 2>/dev/null)\necho \"[INFO] New @selvajs/selva: \\${AFTER:-unknown}\"\n\nif [ -n \"$BEFORE\" ] && [ \"$BEFORE\" = \"$AFTER\" ]; then\n  echo \"[WARN] No version change ($BEFORE). Your npm cache may be stale.\"\n  echo \"[WARN] Recover with:\"\n  echo \"[WARN]   npm cache clean --force\"\n  echo \"[WARN]   rm -rf node_modules package-lock.json\"\n  echo \"[WARN]   npm install --prefer-online\"\nfi\n\n# ---------------------------------------------------------------------------\n# 5. Start selva-compute with the new build.\n# ---------------------------------------------------------------------------\n# Start from ecosystem.config.cjs, NOT \\`pm2 start selva-compute\\` — the\n# latter requires selva-compute to already be in pm2's in-memory process\n# list. After a \\`pm2 update\\` (step 2) that's not guaranteed.\necho \"[STEP] Starting selva-compute with new build\"\nif ! pm2 start \"$ECOSYSTEM\" --update-env; then\n  echo \"[FATAL] pm2 start failed — investigate with \\\\\\`pm2 logs selva-compute\\\\\\`\"\n  exit 2\nfi\n\n# ---------------------------------------------------------------------------\n# 6. Health probe the new process.\n# ---------------------------------------------------------------------------\n# Read PORT from .env the same way scripts/update.sh does, so non-default\n# ports are respected.\nPORT=$(grep \"^PORT=\" .env 2>/dev/null \\\\\n  | head -1 \\\\\n  | cut -d'=' -f2 \\\\\n  | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//' -e 's/^[\"'\"'\"']//' -e 's/[\"'\"'\"']$//' -e 's/[[:space:]]*#.*//')\nPORT=\\${PORT:-3000}\n\necho \"[STEP] Health-probing the new process on port $PORT\"\nHEALTHY=0\nfor i in $(seq 1 15); do\n  sleep 2\n  CODE=$(curl -sS -o /tmp/selva-health.$$ -w \"%{http_code}\" --max-time 5 \"http://localhost:$PORT/api/health\" 2>/dev/null || echo \"000\")\n  if [ \"$CODE\" = \"200\" ]; then\n    HEALTHY=1\n    echo \"[INFO] Health probe passed after \\${i} attempt(s)\"\n    rm -f /tmp/selva-health.$$\n    break\n  fi\n  echo \"[INFO] Probe attempt $i/15: HTTP $CODE — retrying\"\ndone\n\nif [ \"$HEALTHY\" = \"1\" ]; then\n  echo \"[DONE] Update complete\"\n  exit 0\nfi\n\n# ---------------------------------------------------------------------------\n# 7. Rollback path.\n# ---------------------------------------------------------------------------\necho \"[FATAL] New process failed health check after 30s\"\nif [ -f /tmp/selva-health.$$ ]; then\n  echo \"[FATAL] Last response body:\"\n  cat /tmp/selva-health.$$\n  rm -f /tmp/selva-health.$$\nfi\n\nif [ -z \"$BEFORE\" ]; then\n  echo \"[FATAL] No prior version recorded — cannot roll back automatically.\"\n  echo \"[FATAL] EXIT trap will attempt to restart the current build anyway.\"\n  exit 3\nfi\n\necho \"[STEP] Rolling back @selvajs/selva to $BEFORE\"\npm2 stop selva-compute >/dev/null 2>&1 || true\nif ! npm install --save \"@selvajs/selva@$BEFORE\"; then\n  echo \"[FATAL] Rollback npm install failed — EXIT trap will retry restart.\"\n  exit 4\nfi\n\npm2 start \"$ECOSYSTEM\" --update-env || true\nsleep 3\nROLLBACK_CODE=$(curl -sS -o /dev/null -w \"%{http_code}\" --max-time 5 \"http://localhost:$PORT/api/health\" 2>/dev/null || echo \"000\")\nif [ \"$ROLLBACK_CODE\" = \"200\" ]; then\n  echo \"[DONE] Rolled back to $BEFORE — previous version is online\"\n  exit 5\nfi\n\necho \"[FATAL] Rollback restart also failed health check (HTTP $ROLLBACK_CODE)\"\necho \"[FATAL] Manual recovery required. Check: pm2 logs selva-compute\"\nexit 6\n`;\n}\nfunction detectUpdatePlan() {\n  if (private_env.INSTALL_DIR && existsSync(join(private_env.INSTALL_DIR, \"scripts\", \"update.sh\"))) {\n    return {\n      mode: \"git\",\n      cwd: private_env.INSTALL_DIR,\n      cmd: \"bash\",\n      args: [join(private_env.INSTALL_DIR, \"scripts\", \"update.sh\")]\n    };\n  }\n  let dir = process.cwd();\n  for (let i = 0; i < 6; i++) {\n    if (existsSync(join(dir, \"scripts\", \"update.sh\"))) {\n      return {\n        mode: \"git\",\n        cwd: dir,\n        cmd: \"bash\",\n        args: [join(dir, \"scripts\", \"update.sh\")]\n      };\n    }\n    if (existsSync(join(dir, \"node_modules\", \"@selvajs\", \"selva\", \"package.json\"))) {\n      return {\n        mode: \"npm\",\n        cwd: dir,\n        cmd: \"npm\",\n        args: [\"update\", \"--save\", \"--prefer-online\", \"@selvajs/cli\", \"@selvajs/selva\"]\n      };\n    }\n    const parent = join(dir, \"..\");\n    if (parent === dir) break;\n    dir = parent;\n  }\n  return null;\n}\nconst POST = async ({ locals }) => {\n  requirePermission(locals, \"instance_admin\");\n  const plan = detectUpdatePlan();\n  if (!plan) {\n    return new Response(\n      JSON.stringify({\n        error: \"Couldn't determine how to update this deployment. Expected either scripts/update.sh (monorepo) or node_modules/@selvajs/selva (CLI scaffold) in the cwd or a parent.\"\n      }),\n      { status: 500, headers: { \"Content-Type\": \"application/json\" } }\n    );\n  }\n  const stream = new ReadableStream({\n    start(controller) {\n      const encoder = new TextEncoder();\n      function sendEvent(type, data) {\n        const message = `data: ${JSON.stringify({ type, ...data })}\n\n`;\n        controller.enqueue(encoder.encode(message));\n      }\n      try {\n        const versionBefore = plan.mode === \"npm\" ? readRuntimeVersion(plan.cwd) : void 0;\n        const prelude = [\n          `[INFO] Update mode: ${plan.mode} (cwd: ${plan.cwd})`,\n          ...versionBefore ? [`[INFO] Current @selvajs/selva: ${versionBefore}`] : []\n        ];\n        const runnerScript = plan.mode === \"git\" ? `#!/bin/bash\nexec ${shellQuote(plan.cmd)} ${plan.args.map(shellQuote).join(\" \")}\n` : buildNpmRunnerScript(\n          plan.args,\n          versionBefore,\n          join(plan.cwd, \"ecosystem.config.cjs\")\n        );\n        const cmd = \"bash\";\n        const args = [\"-c\", buildLauncher(runnerScript, prelude)];\n        const localBin = join(plan.cwd, \"node_modules\", \".bin\");\n        const child = spawn(cmd, args, {\n          cwd: plan.cwd,\n          env: {\n            PATH: `${localBin}:${process.env.PATH ?? \"\"}`,\n            HOME: process.env.HOME,\n            INSTALL_DIR: plan.cwd\n          },\n          detached: true,\n          stdio: [\"ignore\", \"pipe\", \"pipe\"]\n        });\n        child.unref();\n        const timeout = setTimeout(\n          () => {\n            try {\n              if (child.pid) process.kill(-child.pid, \"SIGTERM\");\n            } catch {\n            }\n            sendEvent(\"log\", { data: \"[FATAL] Update timed out after 15 minutes\" });\n            sendEvent(\"exit\", { code: -1 });\n            controller.close();\n          },\n          15 * 60 * 1e3\n        );\n        let restarting = false;\n        child.stdout.on(\"data\", (data) => {\n          const lines = data.toString().split(\"\\n\");\n          for (const line of lines) {\n            const clean = stripAnsi(line).trim();\n            if (clean) {\n              if (!restarting && (clean.includes(\"Applying action stopProcessId\") || clean.includes(\"Applying action restartProcessId\"))) {\n                restarting = true;\n                sendEvent(\"restarting\", { data: clean });\n              } else {\n                sendEvent(\"log\", { data: clean });\n              }\n            }\n          }\n        });\n        child.stderr.on(\"data\", (data) => {\n          const lines = data.toString().split(\"\\n\");\n          for (const line of lines) {\n            const clean = stripAnsi(line).trim();\n            if (clean) {\n              sendEvent(\"log\", { data: `[ERROR] ${clean}` });\n            }\n          }\n        });\n        child.on(\"close\", (code) => {\n          clearTimeout(timeout);\n          sendEvent(\"exit\", { code: code ?? -1 });\n          controller.close();\n        });\n        child.on(\"error\", (err) => {\n          clearTimeout(timeout);\n          sendEvent(\"log\", { data: `[FATAL] ${err.message}` });\n          sendEvent(\"exit\", { code: -1 });\n          controller.close();\n        });\n      } catch (err) {\n        sendEvent(\"log\", { data: `[FATAL] Failed to spawn process: ${err}` });\n        sendEvent(\"exit\", { code: -1 });\n        controller.close();\n      }\n    }\n  });\n  return new Response(stream, {\n    headers: {\n      \"Content-Type\": \"text/event-stream\",\n      \"Cache-Control\": \"no-cache\",\n      Connection: \"keep-alive\"\n    }\n  });\n};\nconst GET = async ({ locals }) => {\n  requirePermission(locals, \"instance_admin\");\n  let body = \"\";\n  try {\n    body = readFileSync(UPDATE_LOG_PATH, \"utf8\");\n  } catch {\n  }\n  return new Response(body, {\n    headers: {\n      \"Content-Type\": \"text/plain; charset=utf-8\",\n      \"Cache-Control\": \"no-store\"\n    }\n  });\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAKA,MAAM,eAAe,GAAG,uBAAuB;AAC/C,SAAS,SAAS,CAAC,GAAG,EAAE;AACxB,EAAE,OAAO,GAAG,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC;AACjD;AACA,SAAS,kBAAkB,CAAC,GAAG,EAAE;AACjC,EAAE,IAAI;AACN,IAAI,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK;AAC1B,MAAM,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,MAAM;AACzF,KAAK;AACL,IAAI,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,GAAG,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC;AACjE,EAAE,CAAC,CAAC,MAAM;AACV,IAAI,OAAO,MAAM;AACjB,EAAE;AACF;AACA,SAAS,UAAU,CAAC,CAAC,EAAE;AACvB,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACxC;AACA,SAAS,aAAa,CAAC,YAAY,EAAE,OAAO,GAAG,EAAE,EAAE;AACnD,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AAC7E,EAAE,OAAO;AACT,QAAQ,EAAE,UAAU,CAAC,eAAe,CAAC;AACrC;AACA;AACA;;AAEA;AACA,EAAE,YAAY;AACd;AACA;;AAEA;AACA;AACA,EAAE,MAAM;;AAER;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA,CAAC;AACD;AACA,SAAS,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE;AACrE,EAAE,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;AAClE,EAAE,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,IAAI,EAAE,CAAC;AAChD,EAAE,MAAM,SAAS,GAAG,UAAU,CAAC,aAAa,CAAC;AAC7C,EAAE,OAAO,CAAC;AACV;AACA,OAAO,EAAE,MAAM;AACf,UAAU,EAAE,SAAS;;AAErB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA,KAAK,EAAE,UAAU,CAAC;AAClB;AACA;AACA;;AAEA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA,CAAC;AACD;AACA,SAAS,gBAAgB,GAAG;AAC5B,EAAE,IAAI,WAAW,CAAC,WAAW,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,EAAE;AACpG,IAAI,OAAO;AACX,MAAM,IAAI,EAAE,KAAK;AACjB,MAAM,GAAG,EAAE,WAAW,CAAC,WAAW;AAClC,MAAM,GAAG,EAAE,MAAM;AACjB,MAAM,IAAI,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,SAAS,EAAE,WAAW,CAAC;AAClE,KAAK;AACL,EAAE;AACF,EAAE,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;AACzB,EAAE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;AAC9B,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,EAAE;AACvD,MAAM,OAAO;AACb,QAAQ,IAAI,EAAE,KAAK;AACnB,QAAQ,GAAG,EAAE,GAAG;AAChB,QAAQ,GAAG,EAAE,MAAM;AACnB,QAAQ,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC;AAChD,OAAO;AACP,IAAI;AACJ,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,EAAE;AACpF,MAAM,OAAO;AACb,QAAQ,IAAI,EAAE,KAAK;AACnB,QAAQ,GAAG,EAAE,GAAG;AAChB,QAAQ,GAAG,EAAE,KAAK;AAClB,QAAQ,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,EAAE,cAAc,EAAE,gBAAgB;AACtF,OAAO;AACP,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;AAClC,IAAI,IAAI,MAAM,KAAK,GAAG,EAAE;AACxB,IAAI,GAAG,GAAG,MAAM;AAChB,EAAE;AACF,EAAE,OAAO,IAAI;AACb;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AACnC,EAAE,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,IAAI,GAAG,gBAAgB,EAAE;AACjC,EAAE,IAAI,CAAC,IAAI,EAAE;AACb,IAAI,OAAO,IAAI,QAAQ;AACvB,MAAM,IAAI,CAAC,SAAS,CAAC;AACrB,QAAQ,KAAK,EAAE;AACf,OAAO,CAAC;AACR,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;AACpE,KAAK;AACL,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC;AACpC,IAAI,KAAK,CAAC,UAAU,EAAE;AACtB,MAAM,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE;AACvC,MAAM,SAAS,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE;AACrC,QAAQ,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;;AAElE,CAAC;AACD,QAAQ,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACnD,MAAM;AACN,MAAM,IAAI;AACV,QAAQ,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,KAAK,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;AACzF,QAAQ,MAAM,OAAO,GAAG;AACxB,UAAU,CAAC,oBAAoB,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,UAAU,GAAG,aAAa,GAAG,CAAC,CAAC,+BAA+B,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG;AACnF,SAAS;AACT,QAAQ,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,KAAK,KAAK,GAAG,CAAC;AACpD,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;AAClE,CAAC,GAAG,oBAAoB;AACxB,UAAU,IAAI,CAAC,IAAI;AACnB,UAAU,aAAa;AACvB,UAAU,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB;AAC/C,SAAS;AACT,QAAQ,MAAM,GAAG,GAAG,MAAM;AAC1B,QAAQ,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;AACjE,QAAQ,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,CAAC;AAC/D,QAAQ,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;AACvC,UAAU,GAAG,EAAE,IAAI,CAAC,GAAG;AACvB,UAAU,GAAG,EAAE;AACf,YAAY,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AACzD,YAAY,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;AAClC,YAAY,WAAW,EAAE,IAAI,CAAC;AAC9B,WAAW;AACX,UAAU,QAAQ,EAAE,IAAI;AACxB,UAAU,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM;AAC1C,SAAS,CAAC;AACV,QAAQ,KAAK,CAAC,KAAK,EAAE;AACrB,QAAQ,MAAM,OAAO,GAAG,UAAU;AAClC,UAAU,MAAM;AAChB,YAAY,IAAI;AAChB,cAAc,IAAI,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC;AAChE,YAAY,CAAC,CAAC,MAAM;AACpB,YAAY;AACZ,YAAY,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,2CAA2C,EAAE,CAAC;AACnF,YAAY,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;AAC3C,YAAY,UAAU,CAAC,KAAK,EAAE;AAC9B,UAAU,CAAC;AACX,UAAU,EAAE,GAAG,EAAE,GAAG;AACpB,SAAS;AACT,QAAQ,IAAI,UAAU,GAAG,KAAK;AAC9B,QAAQ,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK;AAC1C,UAAU,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;AACnD,UAAU,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;AACpC,YAAY,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;AAChD,YAAY,IAAI,KAAK,EAAE;AACvB,cAAc,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,QAAQ,CAAC,+BAA+B,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC,EAAE;AAC1I,gBAAgB,UAAU,GAAG,IAAI;AACjC,gBAAgB,SAAS,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACxD,cAAc,CAAC,MAAM;AACrB,gBAAgB,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACjD,cAAc;AACd,YAAY;AACZ,UAAU;AACV,QAAQ,CAAC,CAAC;AACV,QAAQ,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK;AAC1C,UAAU,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;AACnD,UAAU,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;AACpC,YAAY,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;AAChD,YAAY,IAAI,KAAK,EAAE;AACvB,cAAc,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;AAC5D,YAAY;AACZ,UAAU;AACV,QAAQ,CAAC,CAAC;AACV,QAAQ,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,KAAK;AACpC,UAAU,YAAY,CAAC,OAAO,CAAC;AAC/B,UAAU,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC;AACjD,UAAU,UAAU,CAAC,KAAK,EAAE;AAC5B,QAAQ,CAAC,CAAC;AACV,QAAQ,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,KAAK;AACnC,UAAU,YAAY,CAAC,OAAO,CAAC;AAC/B,UAAU,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;AAC9D,UAAU,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;AACzC,UAAU,UAAU,CAAC,KAAK,EAAE;AAC5B,QAAQ,CAAC,CAAC;AACV,MAAM,CAAC,CAAC,OAAO,GAAG,EAAE;AACpB,QAAQ,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;AAC7E,QAAQ,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACvC,QAAQ,UAAU,CAAC,KAAK,EAAE;AAC1B,MAAM;AACN,IAAI;AACJ,GAAG,CAAC;AACJ,EAAE,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;AAC9B,IAAI,OAAO,EAAE;AACb,MAAM,cAAc,EAAE,mBAAmB;AACzC,MAAM,eAAe,EAAE,UAAU;AACjC,MAAM,UAAU,EAAE;AAClB;AACA,GAAG,CAAC;AACJ;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC7C,EAAE,IAAI,IAAI,GAAG,EAAE;AACf,EAAE,IAAI;AACN,IAAI,IAAI,GAAG,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC;AAChD,EAAE,CAAC,CAAC,MAAM;AACV,EAAE;AACF,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;AAC5B,IAAI,OAAO,EAAE;AACb,MAAM,cAAc,EAAE,2BAA2B;AACjD,MAAM,eAAe,EAAE;AACvB;AACA,GAAG,CAAC;AACJ;;;;"}

package/build/server/chunks/_server.ts-CpyLZir2.js

@@ -0,0 +1,106 @@
+import { error, json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { c as getAuthProvider, k as getOrganizationProvider, l as getPermissionStore } from './providers.server-DOymvucH.js';
+import { w as requireManageInstanceUsers } from './access.server-BPceukOr.js';
+import { s as setUserPlatformPermissions } from './permissions.server-Ba-N3_W5.js';
+import { t as throwZodError, h as handleApiError } from './api-errors-KUItADEX.js';
+import { S as SYSTEM_CONTEXT, j as hasPermission, M as MEMBER_ASSIGNABLE_PERMISSIONS, P as PlatformPermissionSchema, d as OrgPermissionSchema } from './context-WcuX1UXU.js';
+import { f as flattenPermissions, s as splitFlatPermissions } from './permissions-compat.server-CAfCu77g.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+const FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);
+const BaseUserBody = z.object({
+  email: z.string().email("Valid email is required"),
+  permissions: z.array(FlatPermissionSchema)
+});
+const PasswordUserBody = BaseUserBody.extend({
+  password: z.string().min(8, "Password must be at least 8 characters").optional()
+});
+const GET = async ({ locals }) => {
+  requireManageInstanceUsers(locals);
+  const page = await getAuthProvider().listUsers({ limit: 200 });
+  if (page === null) {
+    throw error(
+      501,
+      "User management is not supported by the current auth provider. Configure DATA_PATH (local provider) or check your provider wiring."
+    );
+  }
+  const orgId = locals.ctx?.actingOrgId;
+  const orgs = getOrganizationProvider();
+  const userIds = page.items.map((u) => u.id);
+  const platformByUser = await getPermissionStore().getForBatch(locals.ctx, userIds);
+  const flattened = await Promise.all(
+    page.items.map(async (u) => {
+      let orgPerms = [];
+      if (orgId) {
+        const member = await orgs.getOrgMember(SYSTEM_CONTEXT, orgId, u.id);
+        orgPerms = member?.permissions ?? [];
+      }
+      const platformPerms = platformByUser.get(u.id) ?? [];
+      return {
+        ...u,
+        platformPermissions: platformPerms,
+        permissions: flattenPermissions(
+          platformPerms,
+          orgPerms
+        )
+      };
+    })
+  );
+  return json(flattened);
+};
+const POST = async ({ request, locals }) => {
+  requireManageInstanceUsers(locals);
+  const auth = getAuthProvider();
+  const body = await request.json().catch(() => null);
+  const parsed = PasswordUserBody.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  const { email, password, permissions } = parsed.data;
+  const { platform, org } = splitFlatPermissions(permissions);
+  if (platform.length > 0 && !hasPermission(locals.ctx, "instance_admin")) {
+    throw error(403, "Only a platform admin can grant platform-scope permissions");
+  }
+  try {
+    let user;
+    if (auth.passwordAuth) {
+      if (!password) throw error(400, "Password is required");
+      user = await auth.passwordAuth.createUserWithPassword(email, password);
+    } else if (auth.createUser) {
+      user = await auth.createUser(email);
+    } else {
+      throw error(
+        501,
+        `User creation is not supported by ${auth.name}. Users are managed externally.`
+      );
+    }
+    if (platform.length > 0) {
+      await setUserPlatformPermissions(locals.ctx, user.id, platform);
+    }
+    const orgId = locals.ctx?.actingOrgId;
+    if (orgId) {
+      const joinedAt = (/* @__PURE__ */ new Date()).toISOString();
+      await getOrganizationProvider().addOrgMember(SYSTEM_CONTEXT, {
+        orgId,
+        userId: user.id,
+        role: "member",
+        permissions: org.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)),
+        joinedAt,
+        updatedAt: joinedAt,
+        updatedBy: locals.user?.id ?? user.id,
+        deletedAt: null
+      });
+    }
+    return json(user, { status: 201 });
+  } catch (err) {
+    handleApiError(err, "Failed to create user");
+  }
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts-CpyLZir2.js.map

package/build/server/chunks/_server.ts-CpyLZir2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-CpyLZir2.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/users/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { c as getAuthProvider, k as getOrganizationProvider, l as getPermissionStore } from \"../../../../../chunks/providers.server.js\";\nimport { w as requireManageInstanceUsers } from \"../../../../../chunks/access.server.js\";\nimport { s as setUserPlatformPermissions } from \"../../../../../chunks/permissions.server.js\";\nimport { t as throwZodError, h as handleApiError } from \"../../../../../chunks/api-errors.js\";\nimport { P as PlatformPermissionSchema, d as OrgPermissionSchema, S as SYSTEM_CONTEXT, j as hasPermission, M as MEMBER_ASSIGNABLE_PERMISSIONS } from \"../../../../../chunks/context.js\";\nimport { f as flattenPermissions, s as splitFlatPermissions } from \"../../../../../chunks/permissions-compat.server.js\";\nconst FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);\nconst BaseUserBody = z.object({\n  email: z.string().email(\"Valid email is required\"),\n  permissions: z.array(FlatPermissionSchema)\n});\nconst PasswordUserBody = BaseUserBody.extend({\n  password: z.string().min(8, \"Password must be at least 8 characters\").optional()\n});\nconst GET = async ({ locals }) => {\n  requireManageInstanceUsers(locals);\n  const page = await getAuthProvider().listUsers({ limit: 200 });\n  if (page === null) {\n    throw error(\n      501,\n      \"User management is not supported by the current auth provider. Configure DATA_PATH (local provider) or check your provider wiring.\"\n    );\n  }\n  const orgId = locals.ctx?.actingOrgId;\n  const orgs = getOrganizationProvider();\n  const userIds = page.items.map((u) => u.id);\n  const platformByUser = await getPermissionStore().getForBatch(locals.ctx, userIds);\n  const flattened = await Promise.all(\n    page.items.map(async (u) => {\n      let orgPerms = [];\n      if (orgId) {\n        const member = await orgs.getOrgMember(SYSTEM_CONTEXT, orgId, u.id);\n        orgPerms = member?.permissions ?? [];\n      }\n      const platformPerms = platformByUser.get(u.id) ?? [];\n      return {\n        ...u,\n        platformPermissions: platformPerms,\n        permissions: flattenPermissions(\n          platformPerms,\n          orgPerms\n        )\n      };\n    })\n  );\n  return json(flattened);\n};\nconst POST = async ({ request, locals }) => {\n  requireManageInstanceUsers(locals);\n  const auth = getAuthProvider();\n  const body = await request.json().catch(() => null);\n  const parsed = PasswordUserBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const { email, password, permissions } = parsed.data;\n  const { platform, org } = splitFlatPermissions(permissions);\n  if (platform.length > 0 && !hasPermission(locals.ctx, \"instance_admin\")) {\n    throw error(403, \"Only a platform admin can grant platform-scope permissions\");\n  }\n  try {\n    let user;\n    if (auth.passwordAuth) {\n      if (!password) throw error(400, \"Password is required\");\n      user = await auth.passwordAuth.createUserWithPassword(email, password);\n    } else if (auth.createUser) {\n      user = await auth.createUser(email);\n    } else {\n      throw error(\n        501,\n        `User creation is not supported by ${auth.name}. Users are managed externally.`\n      );\n    }\n    if (platform.length > 0) {\n      await setUserPlatformPermissions(locals.ctx, user.id, platform);\n    }\n    const orgId = locals.ctx?.actingOrgId;\n    if (orgId) {\n      const joinedAt = (/* @__PURE__ */ new Date()).toISOString();\n      await getOrganizationProvider().addOrgMember(SYSTEM_CONTEXT, {\n        orgId,\n        userId: user.id,\n        role: \"member\",\n        permissions: org.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)),\n        joinedAt,\n        updatedAt: joinedAt,\n        updatedBy: locals.user?.id ?? user.id,\n        deletedAt: null\n      });\n    }\n    return json(user, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to create user\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAQA,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;AACrF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;AAC9B,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC;AACpD,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB;AAC3C,CAAC,CAAC;AACF,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC;AAC7C,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wCAAwC,CAAC,CAAC,QAAQ;AAChF,CAAC,CAAC;AACG,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,0BAA0B,CAAC,MAAM,CAAC;AACpC,EAAE,MAAM,IAAI,GAAG,MAAM,eAAe,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAChE,EAAE,IAAI,IAAI,KAAK,IAAI,EAAE;AACrB,IAAI,MAAM,KAAK;AACf,MAAM,GAAG;AACT,MAAM;AACN,KAAK;AACL,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,WAAW;AACvC,EAAE,MAAM,IAAI,GAAG,uBAAuB,EAAE;AACxC,EAAE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AAC7C,EAAE,MAAM,cAAc,GAAG,MAAM,kBAAkB,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC;AACpF,EAAE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG;AACrC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK;AAChC,MAAM,IAAI,QAAQ,GAAG,EAAE;AACvB,MAAM,IAAI,KAAK,EAAE;AACjB,QAAQ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;AAC3E,QAAQ,QAAQ,GAAG,MAAM,EAAE,WAAW,IAAI,EAAE;AAC5C,MAAM;AACN,MAAM,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE;AAC1D,MAAM,OAAO;AACb,QAAQ,GAAG,CAAC;AACZ,QAAQ,mBAAmB,EAAE,aAAa;AAC1C,QAAQ,WAAW,EAAE,kBAAkB;AACvC,UAAU,aAAa;AACvB,UAAU;AACV;AACA,OAAO;AACP,IAAI,CAAC;AACL,GAAG;AACH,EAAE,OAAO,IAAI,CAAC,SAAS,CAAC;AACxB;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,0BAA0B,CAAC,MAAM,CAAC;AACpC,EAAE,MAAM,IAAI,GAAG,eAAe,EAAE;AAChC,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC;AACjD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,IAAI;AACtD,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,oBAAoB,CAAC,WAAW,CAAC;AAC7D,EAAE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE;AAC3E,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,4DAA4D,CAAC;AAClF,EAAE;AACF,EAAE,IAAI;AACN,IAAI,IAAI,IAAI;AACZ,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE;AAC3B,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC;AAC5E,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE;AAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;AACzC,IAAI,CAAC,MAAM;AACX,MAAM,MAAM,KAAK;AACjB,QAAQ,GAAG;AACX,QAAQ,CAAC,kCAAkC,EAAE,IAAI,CAAC,IAAI,CAAC,+BAA+B;AACtF,OAAO;AACP,IAAI;AACJ,IAAI,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE;AAC7B,MAAM,MAAM,0BAA0B,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC;AACrE,IAAI;AACJ,IAAI,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,WAAW;AACzC,IAAI,IAAI,KAAK,EAAE;AACf,MAAM,MAAM,QAAQ,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACjE,MAAM,MAAM,uBAAuB,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE;AACnE,QAAQ,KAAK;AACb,QAAQ,MAAM,EAAE,IAAI,CAAC,EAAE;AACvB,QAAQ,IAAI,EAAE,QAAQ;AACtB,QAAQ,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACjF,QAAQ,QAAQ;AAChB,QAAQ,SAAS,EAAE,QAAQ;AAC3B,QAAQ,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE;AAC7C,QAAQ,SAAS,EAAE;AACnB,OAAO,CAAC;AACR,IAAI;AACJ,IAAI,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACtC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,uBAAuB,CAAC;AAChD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-CuIFnCAh.js

@@ -0,0 +1,31 @@
+import { error, redirect } from '@sveltejs/kit';
+import { c as getAuthProvider } from './providers.server-DOymvucH.js';
+import { b as bootstrapUserSession } from './auth-bootstrap.server-C1OnV0V5.js';
+import { h as setSessionCookie, f as setRefreshCookie, s as safeRedirectTarget } from './admin-auth.server-45kKyH82.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import './context-WcuX1UXU.js';
+import 'zod';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import './slug-BGuFQjqe.js';
+
+const GET = async ({ url, cookies }) => {
+  const emailLink = getAuthProvider().emailLink;
+  if (!emailLink) {
+    throw error(501, "Email sign-in is not supported by this provider.");
+  }
+  const result = await emailLink.verifyMagicLink(url.toString());
+  if (!result) throw error(401, "This sign-in link is invalid or has expired.");
+  await bootstrapUserSession(result.user);
+  setSessionCookie(cookies, result.sessionToken);
+  if (result.refreshToken) setRefreshCookie(cookies, result.refreshToken);
+  const dest = safeRedirectTarget(url.searchParams.get("redirectTo"), "/library");
+  redirect(303, dest);
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts-CuIFnCAh.js.map

package/build/server/chunks/_server.ts-CuIFnCAh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-CuIFnCAh.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/auth/email/callback/_server.ts.js"],"sourcesContent":["import { error, redirect } from \"@sveltejs/kit\";\nimport { c as getAuthProvider } from \"../../../../../chunks/providers.server.js\";\nimport { b as bootstrapUserSession } from \"../../../../../chunks/auth-bootstrap.server.js\";\nimport { h as setSessionCookie, f as setRefreshCookie, s as safeRedirectTarget } from \"../../../../../chunks/admin-auth.server.js\";\nconst GET = async ({ url, cookies }) => {\n  const emailLink = getAuthProvider().emailLink;\n  if (!emailLink) {\n    throw error(501, \"Email sign-in is not supported by this provider.\");\n  }\n  const result = await emailLink.verifyMagicLink(url.toString());\n  if (!result) throw error(401, \"This sign-in link is invalid or has expired.\");\n  await bootstrapUserSession(result.user);\n  setSessionCookie(cookies, result.sessionToken);\n  if (result.refreshToken) setRefreshCookie(cookies, result.refreshToken);\n  const dest = safeRedirectTarget(url.searchParams.get(\"redirectTo\"), \"/library\");\n  redirect(303, dest);\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAIK,MAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK;AACxC,EAAE,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC,SAAS;AAC/C,EAAE,IAAI,CAAC,SAAS,EAAE;AAClB,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,kDAAkD,CAAC;AACxE,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;AAChE,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,8CAA8C,CAAC;AAC/E,EAAE,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;AACzC,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAChD,EAAE,IAAI,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACzE,EAAE,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;AACjF,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;AACrB;;;;"}