@selvajs/selva 2.0.10 → 3.0.0

package/build/server/chunks/_server.ts-DmTvYkS6.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-DmTvYkS6.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/orgs/_id_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { k as getOrganizationProvider, P as ProviderError } from \"../../../../../../chunks/providers.server.js\";\nimport { u as requireInstanceAdmin } from \"../../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../../chunks/api-errors.js\";\nimport { i as UpdateOrgSchema } from \"../../../../../../chunks/context.js\";\nconst PATCH = async ({ params, request, locals }) => {\n  requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) throw error(400, \"Missing org ID\");\n  const ctx = locals.ctx;\n  const body = await request.json().catch(() => null);\n  const parsed = UpdateOrgSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  try {\n    await getOrganizationProvider().updateOrg(ctx, id, parsed.data);\n    const updated = await getOrganizationProvider().getOrg(ctx, id);\n    return json(updated);\n  } catch (err) {\n    if (err instanceof ProviderError && err.statusCode === 409) {\n      throw error(409, err.message);\n    }\n    handleApiError(err, \"Failed to update org\");\n  }\n};\nconst DELETE = async ({ params, locals }) => {\n  requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) throw error(400, \"Missing org ID\");\n  const ctx = locals.ctx;\n  try {\n    await getOrganizationProvider().deleteOrg(ctx, id);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to delete org\");\n  }\n};\nexport {\n  DELETE,\n  PATCH\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;AAKK,MAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrD,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAChD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI;AACN,IAAI,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC;AACnE,IAAI,MAAM,OAAO,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AACnE,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC;AACxB,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE;AAChE,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC;AACnC,IAAI;AACJ,IAAI,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC/C,EAAE;AACF;AACK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI;AACN,IAAI,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC;AACtD,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC/C,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-DtqNIvuj.js

@@ -0,0 +1,30 @@
+import { error, json } from '@sveltejs/kit';
+import { a as definitionService } from './providers.server-DOymvucH.js';
+import { t as requireEditableDefinition } from './access.server-BPceukOr.js';
+import { h as handleApiError } from './api-errors-KUItADEX.js';
+import { G as GuidSchema } from './context-WcuX1UXU.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'zod';
+
+const DELETE = async ({ params, locals }) => {
+  const guidParsed = GuidSchema.safeParse(params.guid);
+  if (!guidParsed.success) throw error(400, "Invalid or missing GUID");
+  const versionParsed = GuidSchema.safeParse(params.versionId);
+  if (!versionParsed.success) throw error(400, "Invalid or missing version ID");
+  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
+  try {
+    await definitionService.deleteVersion(ctx, guidParsed.data, versionParsed.data);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to delete version");
+  }
+};
+
+export { DELETE };
+//# sourceMappingURL=_server.ts-DtqNIvuj.js.map

package/build/server/chunks/_server.ts-DtqNIvuj.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-DtqNIvuj.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_guid_/versions/_versionId_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { a as definitionService } from \"../../../../../../../chunks/providers.server.js\";\nimport { t as requireEditableDefinition } from \"../../../../../../../chunks/access.server.js\";\nimport { h as handleApiError } from \"../../../../../../../chunks/api-errors.js\";\nimport { G as GuidSchema } from \"../../../../../../../chunks/context.js\";\nconst DELETE = async ({ params, locals }) => {\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) throw error(400, \"Invalid or missing GUID\");\n  const versionParsed = GuidSchema.safeParse(params.versionId);\n  if (!versionParsed.success) throw error(400, \"Invalid or missing version ID\");\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  try {\n    await definitionService.deleteVersion(ctx, guidParsed.data, versionParsed.data);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to delete version\");\n  }\n};\nexport {\n  DELETE\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;AAKK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtE,EAAE,MAAM,aAAa,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;AAC9D,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,+BAA+B,CAAC;AAC/E,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,IAAI;AACN,IAAI,MAAM,iBAAiB,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC;AACnF,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACnD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-PC1ANpTi.js

@@ -0,0 +1,293 @@
+import { TreeBuilder, GrasshopperClient } from '@selvajs/compute';
+import { error, json, isHttpError } from '@sveltejs/kit';
+import { r as resolveServerForOrg } from './resolve.server-fKH_sqyC.js';
+import { b as MAX_SOLVE_DURATION_MS, D as DEFINITION_CACHE_TTL_MS, d as REMOTE_DEFINITION_FETCH_TIMEOUT_MS, e as REMOTE_DEFINITION_MAX_BYTES, c as RATE_LIMIT_WINDOW_MS, R as RATE_LIMIT_MAX_REQUESTS, C as COMPUTE_REQUEST_MAX_BYTES } from './computeLimits-CKK96OOR.js';
+import { e as requireMaxBodySize } from './admin-auth.server-45kKyH82.js';
+import { o as getStorageProvider, s as providers } from './providers.server-DOymvucH.js';
+import { k as requireCanEditDefinition, q as requireCanSolve } from './access.server-BPceukOr.js';
+import { t as tryResolveShareToken } from './resolve.server2-BnfeaGcZ.js';
+import './context-WcuX1UXU.js';
+import 'zod';
+import './utils2-BF28g2lj.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import './api-errors-KUItADEX.js';
+import './token.server-BGL9vwYS.js';
+
+function isSafeRemoteDefinitionUrl(raw) {
+  let parsed;
+  try {
+    parsed = new URL(raw);
+  } catch {
+    return false;
+  }
+  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") return false;
+  const host = parsed.hostname.toLowerCase();
+  if (!host) return false;
+  if (host === "localhost" || host === "0.0.0.0" || host.endsWith(".localhost")) return false;
+  if (host === "::1" || host === "[::1]") return false;
+  if (/^127\./.test(host)) return false;
+  if (/^10\./.test(host)) return false;
+  if (/^192\.168\./.test(host)) return false;
+  if (/^172\.(1[6-9]|2[0-9]|3[0-1])\./.test(host)) return false;
+  if (/^169\.254\./.test(host)) return false;
+  if (/^\[?(fc|fd)[0-9a-f]{2}:/i.test(host)) return false;
+  if (/^\[?fe[89ab][0-9a-f]:/i.test(host)) return false;
+  return true;
+}
+const WINDOW_MS = RATE_LIMIT_WINDOW_MS;
+const MAX_PER_WINDOW = RATE_LIMIT_MAX_REQUESTS;
+const buckets = /* @__PURE__ */ new Map();
+function checkComputeRateLimit(key) {
+  const now = Date.now();
+  const entry = buckets.get(key);
+  if (!entry || now > entry.resetAt) {
+    buckets.set(key, { count: 1, resetAt: now + WINDOW_MS });
+    return { allowed: true };
+  }
+  if (entry.count >= MAX_PER_WINDOW) {
+    return { allowed: false, retryAfter: Math.ceil((entry.resetAt - now) / 1e3) };
+  }
+  entry.count += 1;
+  return { allowed: true };
+}
+const definitionCache = /* @__PURE__ */ new Map();
+let cachedClient = null;
+let cachedScheduler = null;
+let cachedClientConfig = null;
+async function getClient(serverConfig) {
+  const currentConfig = {
+    serverUrl: serverConfig.serverUrl,
+    apiKey: serverConfig.apiKey
+  };
+  if (cachedClient && cachedScheduler && cachedClientConfig && cachedClientConfig.serverUrl === currentConfig.serverUrl && cachedClientConfig.apiKey === currentConfig.apiKey) {
+    return { client: cachedClient, scheduler: cachedScheduler };
+  }
+  cachedScheduler?.dispose();
+  cachedClient = await GrasshopperClient.create({
+    serverUrl: currentConfig.serverUrl,
+    apiKey: currentConfig.apiKey
+  });
+  cachedScheduler = cachedClient.createScheduler({
+    mode: "queue",
+    timeoutMs: MAX_SOLVE_DURATION_MS,
+    cache: { maxEntries: 20, ttlMs: 5 * 6e4 }
+  });
+  cachedClientConfig = currentConfig;
+  return { client: cachedClient, scheduler: cachedScheduler };
+}
+async function loadRemoteDefinition(url) {
+  if (!isSafeRemoteDefinitionUrl(url)) {
+    throw new Error("Remote definition URL is not allowed");
+  }
+  const now = Date.now();
+  const cached = definitionCache.get(url);
+  if (cached && now - cached.fetchedAt < DEFINITION_CACHE_TTL_MS) {
+    return cached.data;
+  }
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), REMOTE_DEFINITION_FETCH_TIMEOUT_MS);
+  let data;
+  try {
+    const response = await fetch(url, {
+      signal: controller.signal,
+      redirect: "error"
+    });
+    if (!response.ok) {
+      throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+    }
+    const declared = Number(response.headers.get("content-length"));
+    if (Number.isFinite(declared) && declared > REMOTE_DEFINITION_MAX_BYTES) {
+      throw new Error("Remote definition exceeds size limit");
+    }
+    const buffer = await response.arrayBuffer();
+    if (buffer.byteLength > REMOTE_DEFINITION_MAX_BYTES) {
+      throw new Error("Remote definition exceeds size limit");
+    }
+    data = new Uint8Array(buffer);
+  } finally {
+    clearTimeout(timeout);
+  }
+  definitionCache.set(url, { data, fetchedAt: now });
+  if (definitionCache.size > 50) {
+    const entries = Array.from(definitionCache.entries());
+    entries.sort((a, b) => a[1].fetchedAt - b[1].fetchedAt);
+    for (let i = 0; i < 10; i++) {
+      definitionCache.delete(entries[i][0]);
+    }
+  }
+  return data;
+}
+function transformInputParameter(input, value) {
+  const base = {
+    description: input.description || "",
+    name: input.nickname,
+    nickname: input.nickname || null,
+    id: input.id
+  };
+  if (input.paramType === "number" || input.paramType === "integer") {
+    return {
+      ...base,
+      paramType: input.paramType === "integer" ? "Integer" : "Number",
+      minimum: input.minimum,
+      maximum: input.maximum,
+      stepSize: input.paramType === "integer" ? 1 : input.stepSize,
+      default: value ?? input.default
+    };
+  } else if (input.paramType === "text") {
+    return {
+      ...base,
+      paramType: "Text",
+      default: value ?? input.default ?? ""
+    };
+  } else if (input.paramType === "boolean") {
+    return {
+      ...base,
+      paramType: "Boolean",
+      default: value ?? input.default ?? false
+    };
+  }
+  return {
+    ...base,
+    paramType: "Text",
+    default: value ?? ""
+  };
+}
+const POST = async ({ request, locals, url }) => {
+  const storage = getStorageProvider();
+  requireMaxBodySize(request, COMPUTE_REQUEST_MAX_BYTES);
+  try {
+    const body = await request.json();
+    const { inputs, values } = body;
+    const definitionUrl = body.definitionUrl;
+    const channel = body.channel ?? "live";
+    if (!inputs || !values || !definitionUrl) {
+      throw error(400, "Missing required fields: inputs, values, or definitionUrl");
+    }
+    if (channel !== "live" && channel !== "draft") {
+      throw error(400, `Invalid channel: ${channel}. Must be 'live' or 'draft'.`);
+    }
+    let definitionSource;
+    let solveOrgId = null;
+    let definitionPin = null;
+    const isLocal = definitionUrl.startsWith("local:");
+    const guid = isLocal ? definitionUrl.substring(6) : null;
+    const sharedAccess = isLocal && guid ? await tryResolveShareToken(request, url, guid, channel, { requireSolve: true }) : null;
+    if (!sharedAccess && (!locals.ctx || !locals.user)) {
+      throw error(401, "Unauthorized");
+    }
+    const solveCtx = sharedAccess?.ctx ?? locals.ctx;
+    const rateLimitKey = sharedAccess ? `share:${sharedAccess.link.id}` : `user:${locals.user.id}`;
+    const rateLimit = checkComputeRateLimit(rateLimitKey);
+    if (!rateLimit.allowed) {
+      const retryAfter = rateLimit.retryAfter ?? 1;
+      return new Response(
+        JSON.stringify({
+          message: `Too many compute requests. Retry in ${retryAfter}s.`,
+          retryAfter
+        }),
+        {
+          status: 429,
+          headers: {
+            "Content-Type": "application/json",
+            "Retry-After": String(retryAfter)
+          }
+        }
+      );
+    }
+    if (isLocal && guid) {
+      let record;
+      try {
+        record = await providers.data.definitions.get(solveCtx, guid);
+      } catch (err) {
+        console.error(`Failed to load local definition: ${guid}`, err);
+        throw error(404, `Definition '${guid}' not found`);
+      }
+      if (!record) throw error(404, `Definition '${guid}' not found`);
+      const project = await providers.data.projects.getProject(solveCtx, record.projectId);
+      solveOrgId = project?.orgId ?? null;
+      definitionPin = record.computeServerId ?? null;
+      if (!sharedAccess) {
+        if (channel === "draft") {
+          await requireCanEditDefinition(locals, record.projectId, guid);
+        } else {
+          await requireCanSolve(locals, record.projectId);
+        }
+      }
+      const versionId = channel === "live" ? record.liveVersionId : record.draftVersionId;
+      if (!versionId) {
+        throw error(404, `Definition '${guid}' has no ${channel} version yet`);
+      }
+      const version = await providers.data.definitions.getVersion(solveCtx, versionId);
+      if (!version || version.definitionId !== guid) {
+        throw error(404, `Definition '${guid}' ${channel} version is missing`);
+      }
+      try {
+        const bytes = await storage.get(version.fileKey);
+        if (!bytes) throw new Error(`Version blob missing: ${version.fileKey}`);
+        definitionSource = bytes;
+      } catch (err) {
+        console.error(`Failed to load local definition blob: ${guid}`, err);
+        throw error(404, `Definition '${guid}' not found`);
+      }
+    } else {
+      try {
+        definitionSource = await loadRemoteDefinition(definitionUrl);
+      } catch (err) {
+        console.error(`Failed to fetch definition from ${definitionUrl}:`, err);
+        throw error(
+          400,
+          `Failed to load definition: ${err instanceof Error ? err.message : String(err)}`
+        );
+      }
+    }
+    const inputTree = TreeBuilder.fromInputParams(
+      inputs.filter((input) => input.paramType).map((input) => transformInputParameter(input, values[input.id]))
+    );
+    if (sharedAccess) {
+      const next = await providers.data.shareLinks.tryIncrementSolveCount(
+        solveCtx,
+        sharedAccess.link.id
+      );
+      if (next === null) {
+        throw error(429, "Share link solve cap reached.");
+      }
+    }
+    const serverConfig = await resolveServerForOrg(solveCtx, solveOrgId, { definitionPin });
+    const { scheduler } = await getClient(serverConfig);
+    let solvedDefinition;
+    try {
+      solvedDefinition = await scheduler.solve(definitionSource, inputTree, {
+        signal: request.signal
+      });
+    } catch (err) {
+      if (err instanceof Error && err.name === "AbortError") {
+        if (request.signal.aborted) {
+          throw error(499, "Client closed request");
+        }
+        throw error(
+          504,
+          `Solve exceeded the ${Math.round(MAX_SOLVE_DURATION_MS / 1e3)}s deadline.`
+        );
+      }
+      throw err;
+    }
+    return json(solvedDefinition);
+  } catch (err) {
+    if (isHttpError(err)) throw err;
+    const message = err instanceof Error ? err.message : "Unknown error";
+    console.error("[API/Compute] Error:", message);
+    if (err instanceof TypeError && message === "fetch failed") {
+      throw error(503, "Compute server is unreachable");
+    }
+    throw error(500, message);
+  }
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-PC1ANpTi.js.map

package/build/server/chunks/_server.ts-PC1ANpTi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-PC1ANpTi.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/compute/_server.ts.js"],"sourcesContent":["import { TreeBuilder, GrasshopperClient } from \"@selvajs/compute\";\nimport { error, json, isHttpError } from \"@sveltejs/kit\";\nimport { r as resolveServerForOrg } from \"../../../../chunks/resolve.server.js\";\nimport { c as RATE_LIMIT_WINDOW_MS, R as RATE_LIMIT_MAX_REQUESTS, b as MAX_SOLVE_DURATION_MS, D as DEFINITION_CACHE_TTL_MS, d as REMOTE_DEFINITION_FETCH_TIMEOUT_MS, e as REMOTE_DEFINITION_MAX_BYTES, C as COMPUTE_REQUEST_MAX_BYTES } from \"../../../../chunks/computeLimits.js\";\nimport { e as requireMaxBodySize } from \"../../../../chunks/admin-auth.server.js\";\nimport { o as getStorageProvider, s as providers } from \"../../../../chunks/providers.server.js\";\nimport { k as requireCanEditDefinition, q as requireCanSolve } from \"../../../../chunks/access.server.js\";\nimport { t as tryResolveShareToken } from \"../../../../chunks/resolve.server2.js\";\nfunction isSafeRemoteDefinitionUrl(raw) {\n  let parsed;\n  try {\n    parsed = new URL(raw);\n  } catch {\n    return false;\n  }\n  if (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") return false;\n  const host = parsed.hostname.toLowerCase();\n  if (!host) return false;\n  if (host === \"localhost\" || host === \"0.0.0.0\" || host.endsWith(\".localhost\")) return false;\n  if (host === \"::1\" || host === \"[::1]\") return false;\n  if (/^127\\./.test(host)) return false;\n  if (/^10\\./.test(host)) return false;\n  if (/^192\\.168\\./.test(host)) return false;\n  if (/^172\\.(1[6-9]|2[0-9]|3[0-1])\\./.test(host)) return false;\n  if (/^169\\.254\\./.test(host)) return false;\n  if (/^\\[?(fc|fd)[0-9a-f]{2}:/i.test(host)) return false;\n  if (/^\\[?fe[89ab][0-9a-f]:/i.test(host)) return false;\n  return true;\n}\nconst WINDOW_MS = RATE_LIMIT_WINDOW_MS;\nconst MAX_PER_WINDOW = RATE_LIMIT_MAX_REQUESTS;\nconst buckets = /* @__PURE__ */ new Map();\nfunction checkComputeRateLimit(key) {\n  const now = Date.now();\n  const entry = buckets.get(key);\n  if (!entry || now > entry.resetAt) {\n    buckets.set(key, { count: 1, resetAt: now + WINDOW_MS });\n    return { allowed: true };\n  }\n  if (entry.count >= MAX_PER_WINDOW) {\n    return { allowed: false, retryAfter: Math.ceil((entry.resetAt - now) / 1e3) };\n  }\n  entry.count += 1;\n  return { allowed: true };\n}\nconst definitionCache = /* @__PURE__ */ new Map();\nlet cachedClient = null;\nlet cachedScheduler = null;\nlet cachedClientConfig = null;\nasync function getClient(serverConfig) {\n  const currentConfig = {\n    serverUrl: serverConfig.serverUrl,\n    apiKey: serverConfig.apiKey\n  };\n  if (cachedClient && cachedScheduler && cachedClientConfig && cachedClientConfig.serverUrl === currentConfig.serverUrl && cachedClientConfig.apiKey === currentConfig.apiKey) {\n    return { client: cachedClient, scheduler: cachedScheduler };\n  }\n  cachedScheduler?.dispose();\n  cachedClient = await GrasshopperClient.create({\n    serverUrl: currentConfig.serverUrl,\n    apiKey: currentConfig.apiKey\n  });\n  cachedScheduler = cachedClient.createScheduler({\n    mode: \"queue\",\n    timeoutMs: MAX_SOLVE_DURATION_MS,\n    cache: { maxEntries: 20, ttlMs: 5 * 6e4 }\n  });\n  cachedClientConfig = currentConfig;\n  return { client: cachedClient, scheduler: cachedScheduler };\n}\nasync function loadRemoteDefinition(url) {\n  if (!isSafeRemoteDefinitionUrl(url)) {\n    throw new Error(\"Remote definition URL is not allowed\");\n  }\n  const now = Date.now();\n  const cached = definitionCache.get(url);\n  if (cached && now - cached.fetchedAt < DEFINITION_CACHE_TTL_MS) {\n    return cached.data;\n  }\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), REMOTE_DEFINITION_FETCH_TIMEOUT_MS);\n  let data;\n  try {\n    const response = await fetch(url, {\n      signal: controller.signal,\n      redirect: \"error\"\n    });\n    if (!response.ok) {\n      throw new Error(`HTTP ${response.status}: ${response.statusText}`);\n    }\n    const declared = Number(response.headers.get(\"content-length\"));\n    if (Number.isFinite(declared) && declared > REMOTE_DEFINITION_MAX_BYTES) {\n      throw new Error(\"Remote definition exceeds size limit\");\n    }\n    const buffer = await response.arrayBuffer();\n    if (buffer.byteLength > REMOTE_DEFINITION_MAX_BYTES) {\n      throw new Error(\"Remote definition exceeds size limit\");\n    }\n    data = new Uint8Array(buffer);\n  } finally {\n    clearTimeout(timeout);\n  }\n  definitionCache.set(url, { data, fetchedAt: now });\n  if (definitionCache.size > 50) {\n    const entries = Array.from(definitionCache.entries());\n    entries.sort((a, b) => a[1].fetchedAt - b[1].fetchedAt);\n    for (let i = 0; i < 10; i++) {\n      definitionCache.delete(entries[i][0]);\n    }\n  }\n  return data;\n}\nfunction transformInputParameter(input, value) {\n  const base = {\n    description: input.description || \"\",\n    name: input.nickname,\n    nickname: input.nickname || null,\n    id: input.id\n  };\n  if (input.paramType === \"number\" || input.paramType === \"integer\") {\n    return {\n      ...base,\n      paramType: input.paramType === \"integer\" ? \"Integer\" : \"Number\",\n      minimum: input.minimum,\n      maximum: input.maximum,\n      stepSize: input.paramType === \"integer\" ? 1 : input.stepSize,\n      default: value ?? input.default\n    };\n  } else if (input.paramType === \"text\") {\n    return {\n      ...base,\n      paramType: \"Text\",\n      default: value ?? input.default ?? \"\"\n    };\n  } else if (input.paramType === \"boolean\") {\n    return {\n      ...base,\n      paramType: \"Boolean\",\n      default: value ?? input.default ?? false\n    };\n  }\n  return {\n    ...base,\n    paramType: \"Text\",\n    default: value ?? \"\"\n  };\n}\nconst POST = async ({ request, locals, url }) => {\n  const storage = getStorageProvider();\n  requireMaxBodySize(request, COMPUTE_REQUEST_MAX_BYTES);\n  try {\n    const body = await request.json();\n    const { inputs, values } = body;\n    const definitionUrl = body.definitionUrl;\n    const channel = body.channel ?? \"live\";\n    if (!inputs || !values || !definitionUrl) {\n      throw error(400, \"Missing required fields: inputs, values, or definitionUrl\");\n    }\n    if (channel !== \"live\" && channel !== \"draft\") {\n      throw error(400, `Invalid channel: ${channel}. Must be 'live' or 'draft'.`);\n    }\n    let definitionSource;\n    let solveOrgId = null;\n    let definitionPin = null;\n    const isLocal = definitionUrl.startsWith(\"local:\");\n    const guid = isLocal ? definitionUrl.substring(6) : null;\n    const sharedAccess = isLocal && guid ? await tryResolveShareToken(request, url, guid, channel, { requireSolve: true }) : null;\n    if (!sharedAccess && (!locals.ctx || !locals.user)) {\n      throw error(401, \"Unauthorized\");\n    }\n    const solveCtx = sharedAccess?.ctx ?? locals.ctx;\n    const rateLimitKey = sharedAccess ? `share:${sharedAccess.link.id}` : `user:${locals.user.id}`;\n    const rateLimit = checkComputeRateLimit(rateLimitKey);\n    if (!rateLimit.allowed) {\n      const retryAfter = rateLimit.retryAfter ?? 1;\n      return new Response(\n        JSON.stringify({\n          message: `Too many compute requests. Retry in ${retryAfter}s.`,\n          retryAfter\n        }),\n        {\n          status: 429,\n          headers: {\n            \"Content-Type\": \"application/json\",\n            \"Retry-After\": String(retryAfter)\n          }\n        }\n      );\n    }\n    if (isLocal && guid) {\n      let record;\n      try {\n        record = await providers.data.definitions.get(solveCtx, guid);\n      } catch (err) {\n        console.error(`Failed to load local definition: ${guid}`, err);\n        throw error(404, `Definition '${guid}' not found`);\n      }\n      if (!record) throw error(404, `Definition '${guid}' not found`);\n      const project = await providers.data.projects.getProject(solveCtx, record.projectId);\n      solveOrgId = project?.orgId ?? null;\n      definitionPin = record.computeServerId ?? null;\n      if (!sharedAccess) {\n        if (channel === \"draft\") {\n          await requireCanEditDefinition(locals, record.projectId, guid);\n        } else {\n          await requireCanSolve(locals, record.projectId);\n        }\n      }\n      const versionId = channel === \"live\" ? record.liveVersionId : record.draftVersionId;\n      if (!versionId) {\n        throw error(404, `Definition '${guid}' has no ${channel} version yet`);\n      }\n      const version = await providers.data.definitions.getVersion(solveCtx, versionId);\n      if (!version || version.definitionId !== guid) {\n        throw error(404, `Definition '${guid}' ${channel} version is missing`);\n      }\n      try {\n        const bytes = await storage.get(version.fileKey);\n        if (!bytes) throw new Error(`Version blob missing: ${version.fileKey}`);\n        definitionSource = bytes;\n      } catch (err) {\n        console.error(`Failed to load local definition blob: ${guid}`, err);\n        throw error(404, `Definition '${guid}' not found`);\n      }\n    } else {\n      try {\n        definitionSource = await loadRemoteDefinition(definitionUrl);\n      } catch (err) {\n        console.error(`Failed to fetch definition from ${definitionUrl}:`, err);\n        throw error(\n          400,\n          `Failed to load definition: ${err instanceof Error ? err.message : String(err)}`\n        );\n      }\n    }\n    const inputTree = TreeBuilder.fromInputParams(\n      inputs.filter((input) => input.paramType).map((input) => transformInputParameter(input, values[input.id]))\n    );\n    if (sharedAccess) {\n      const next = await providers.data.shareLinks.tryIncrementSolveCount(\n        solveCtx,\n        sharedAccess.link.id\n      );\n      if (next === null) {\n        throw error(429, \"Share link solve cap reached.\");\n      }\n    }\n    const serverConfig = await resolveServerForOrg(solveCtx, solveOrgId, { definitionPin });\n    const { scheduler } = await getClient(serverConfig);\n    let solvedDefinition;\n    try {\n      solvedDefinition = await scheduler.solve(definitionSource, inputTree, {\n        signal: request.signal\n      });\n    } catch (err) {\n      if (err instanceof Error && err.name === \"AbortError\") {\n        if (request.signal.aborted) {\n          throw error(499, \"Client closed request\");\n        }\n        throw error(\n          504,\n          `Solve exceeded the ${Math.round(MAX_SOLVE_DURATION_MS / 1e3)}s deadline.`\n        );\n      }\n      throw err;\n    }\n    return json(solvedDefinition);\n  } catch (err) {\n    if (isHttpError(err)) throw err;\n    const message = err instanceof Error ? err.message : \"Unknown error\";\n    console.error(\"[API/Compute] Error:\", message);\n    if (err instanceof TypeError && message === \"fetch failed\") {\n      throw error(503, \"Compute server is unreachable\");\n    }\n    throw error(500, message);\n  }\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAQA,SAAS,yBAAyB,CAAC,GAAG,EAAE;AACxC,EAAE,IAAI,MAAM;AACZ,EAAE,IAAI;AACN,IAAI,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC;AACzB,EAAE,CAAC,CAAC,MAAM;AACV,IAAI,OAAO,KAAK;AAChB,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,OAAO,KAAK;AAC/E,EAAE,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE;AAC5C,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,KAAK;AACzB,EAAE,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,KAAK;AAC7F,EAAE,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,EAAE,OAAO,KAAK;AACtD,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AACvC,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AACtC,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AAC5C,EAAE,IAAI,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AAC/D,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AAC5C,EAAE,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AACzD,EAAE,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AACvD,EAAE,OAAO,IAAI;AACb;AACA,MAAM,SAAS,GAAG,oBAAoB;AACtC,MAAM,cAAc,GAAG,uBAAuB;AAC9C,MAAM,OAAO,mBAAmB,IAAI,GAAG,EAAE;AACzC,SAAS,qBAAqB,CAAC,GAAG,EAAE;AACpC,EAAE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;AACxB,EAAE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;AAChC,EAAE,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE;AACrC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,SAAS,EAAE,CAAC;AAC5D,IAAI,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;AAC5B,EAAE;AACF,EAAE,IAAI,KAAK,CAAC,KAAK,IAAI,cAAc,EAAE;AACrC,IAAI,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE;AACjF,EAAE;AACF,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;AAClB,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;AAC1B;AACA,MAAM,eAAe,mBAAmB,IAAI,GAAG,EAAE;AACjD,IAAI,YAAY,GAAG,IAAI;AACvB,IAAI,eAAe,GAAG,IAAI;AAC1B,IAAI,kBAAkB,GAAG,IAAI;AAC7B,eAAe,SAAS,CAAC,YAAY,EAAE;AACvC,EAAE,MAAM,aAAa,GAAG;AACxB,IAAI,SAAS,EAAE,YAAY,CAAC,SAAS;AACrC,IAAI,MAAM,EAAE,YAAY,CAAC;AACzB,GAAG;AACH,EAAE,IAAI,YAAY,IAAI,eAAe,IAAI,kBAAkB,IAAI,kBAAkB,CAAC,SAAS,KAAK,aAAa,CAAC,SAAS,IAAI,kBAAkB,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM,EAAE;AAC/K,IAAI,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE;AAC/D,EAAE;AACF,EAAE,eAAe,EAAE,OAAO,EAAE;AAC5B,EAAE,YAAY,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC;AAChD,IAAI,SAAS,EAAE,aAAa,CAAC,SAAS;AACtC,IAAI,MAAM,EAAE,aAAa,CAAC;AAC1B,GAAG,CAAC;AACJ,EAAE,eAAe,GAAG,YAAY,CAAC,eAAe,CAAC;AACjD,IAAI,IAAI,EAAE,OAAO;AACjB,IAAI,SAAS,EAAE,qBAAqB;AACpC,IAAI,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,GAAG;AAC3C,GAAG,CAAC;AACJ,EAAE,kBAAkB,GAAG,aAAa;AACpC,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE;AAC7D;AACA,eAAe,oBAAoB,CAAC,GAAG,EAAE;AACzC,EAAE,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,EAAE;AACvC,IAAI,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AAC3D,EAAE;AACF,EAAE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;AACxB,EAAE,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;AACzC,EAAE,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,uBAAuB,EAAE;AAClE,IAAI,OAAO,MAAM,CAAC,IAAI;AACtB,EAAE;AACF,EAAE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE;AAC1C,EAAE,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,kCAAkC,CAAC;AAC1F,EAAE,IAAI,IAAI;AACV,EAAE,IAAI;AACN,IAAI,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;AACtC,MAAM,MAAM,EAAE,UAAU,CAAC,MAAM;AAC/B,MAAM,QAAQ,EAAE;AAChB,KAAK,CAAC;AACN,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;AACtB,MAAM,MAAM,IAAI,KAAK,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;AACxE,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AACnE,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,2BAA2B,EAAE;AAC7E,MAAM,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AAC7D,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE;AAC/C,IAAI,IAAI,MAAM,CAAC,UAAU,GAAG,2BAA2B,EAAE;AACzD,MAAM,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AAC7D,IAAI;AACJ,IAAI,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC;AACjC,EAAE,CAAC,SAAS;AACZ,IAAI,YAAY,CAAC,OAAO,CAAC;AACzB,EAAE;AACF,EAAE,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;AACpD,EAAE,IAAI,eAAe,CAAC,IAAI,GAAG,EAAE,EAAE;AACjC,IAAI,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;AACzD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;AACjC,MAAM,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3C,IAAI;AACJ,EAAE;AACF,EAAE,OAAO,IAAI;AACb;AACA,SAAS,uBAAuB,CAAC,KAAK,EAAE,KAAK,EAAE;AAC/C,EAAE,MAAM,IAAI,GAAG;AACf,IAAI,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;AACxC,IAAI,IAAI,EAAE,KAAK,CAAC,QAAQ;AACxB,IAAI,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;AACpC,IAAI,EAAE,EAAE,KAAK,CAAC;AACd,GAAG;AACH,EAAE,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE;AACrE,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,SAAS,EAAE,KAAK,CAAC,SAAS,KAAK,SAAS,GAAG,SAAS,GAAG,QAAQ;AACrE,MAAM,OAAO,EAAE,KAAK,CAAC,OAAO;AAC5B,MAAM,OAAO,EAAE,KAAK,CAAC,OAAO;AAC5B,MAAM,QAAQ,EAAE,KAAK,CAAC,SAAS,KAAK,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ;AAClE,MAAM,OAAO,EAAE,KAAK,IAAI,KAAK,CAAC;AAC9B,KAAK;AACL,EAAE,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,EAAE;AACzC,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,SAAS,EAAE,MAAM;AACvB,MAAM,OAAO,EAAE,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI;AACzC,KAAK;AACL,EAAE,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE;AAC5C,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,SAAS,EAAE,SAAS;AAC1B,MAAM,OAAO,EAAE,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI;AACzC,KAAK;AACL,EAAE;AACF,EAAE,OAAO;AACT,IAAI,GAAG,IAAI;AACX,IAAI,SAAS,EAAE,MAAM;AACrB,IAAI,OAAO,EAAE,KAAK,IAAI;AACtB,GAAG;AACH;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACjD,EAAE,MAAM,OAAO,GAAG,kBAAkB,EAAE;AACtC,EAAE,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,CAAC;AACxD,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE;AACrC,IAAI,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI;AACnC,IAAI,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa;AAC5C,IAAI,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM;AAC1C,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE;AAC9C,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,2DAA2D,CAAC;AACnF,IAAI;AACJ,IAAI,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,OAAO,EAAE;AACnD,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,iBAAiB,EAAE,OAAO,CAAC,4BAA4B,CAAC,CAAC;AACjF,IAAI;AACJ,IAAI,IAAI,gBAAgB;AACxB,IAAI,IAAI,UAAU,GAAG,IAAI;AACzB,IAAI,IAAI,aAAa,GAAG,IAAI;AAC5B,IAAI,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC;AACtD,IAAI,MAAM,IAAI,GAAG,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI;AAC5D,IAAI,MAAM,YAAY,GAAG,OAAO,IAAI,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI;AACjI,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;AACxD,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG,YAAY,EAAE,GAAG,IAAI,MAAM,CAAC,GAAG;AACpD,IAAI,MAAM,YAAY,GAAG,YAAY,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAClG,IAAI,MAAM,SAAS,GAAG,qBAAqB,CAAC,YAAY,CAAC;AACzD,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE;AAC5B,MAAM,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,IAAI,CAAC;AAClD,MAAM,OAAO,IAAI,QAAQ;AACzB,QAAQ,IAAI,CAAC,SAAS,CAAC;AACvB,UAAU,OAAO,EAAE,CAAC,oCAAoC,EAAE,UAAU,CAAC,EAAE,CAAC;AACxE,UAAU;AACV,SAAS,CAAC;AACV,QAAQ;AACR,UAAU,MAAM,EAAE,GAAG;AACrB,UAAU,OAAO,EAAE;AACnB,YAAY,cAAc,EAAE,kBAAkB;AAC9C,YAAY,aAAa,EAAE,MAAM,CAAC,UAAU;AAC5C;AACA;AACA,OAAO;AACP,IAAI;AACJ,IAAI,IAAI,OAAO,IAAI,IAAI,EAAE;AACzB,MAAM,IAAI,MAAM;AAChB,MAAM,IAAI;AACV,QAAQ,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC;AACrE,MAAM,CAAC,CAAC,OAAO,GAAG,EAAE;AACpB,QAAQ,OAAO,CAAC,KAAK,CAAC,CAAC,iCAAiC,EAAE,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC;AACtE,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;AAC1D,MAAM;AACN,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;AACrE,MAAM,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC;AAC1F,MAAM,UAAU,GAAG,OAAO,EAAE,KAAK,IAAI,IAAI;AACzC,MAAM,aAAa,GAAG,MAAM,CAAC,eAAe,IAAI,IAAI;AACpD,MAAM,IAAI,CAAC,YAAY,EAAE;AACzB,QAAQ,IAAI,OAAO,KAAK,OAAO,EAAE;AACjC,UAAU,MAAM,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC;AACxE,QAAQ,CAAC,MAAM;AACf,UAAU,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC;AACzD,QAAQ;AACR,MAAM;AACN,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,MAAM,GAAG,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,cAAc;AACzF,MAAM,IAAI,CAAC,SAAS,EAAE;AACtB,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;AAC9E,MAAM;AACN,MAAM,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC;AACtF,MAAM,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE;AACrD,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAC9E,MAAM;AACN,MAAM,IAAI;AACV,QAAQ,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;AACxD,QAAQ,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,sBAAsB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/E,QAAQ,gBAAgB,GAAG,KAAK;AAChC,MAAM,CAAC,CAAC,OAAO,GAAG,EAAE;AACpB,QAAQ,OAAO,CAAC,KAAK,CAAC,CAAC,sCAAsC,EAAE,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;AAC1D,MAAM;AACN,IAAI,CAAC,MAAM;AACX,MAAM,IAAI;AACV,QAAQ,gBAAgB,GAAG,MAAM,oBAAoB,CAAC,aAAa,CAAC;AACpE,MAAM,CAAC,CAAC,OAAO,GAAG,EAAE;AACpB,QAAQ,OAAO,CAAC,KAAK,CAAC,CAAC,gCAAgC,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;AAC/E,QAAQ,MAAM,KAAK;AACnB,UAAU,GAAG;AACb,UAAU,CAAC,2BAA2B,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;AACzF,SAAS;AACT,MAAM;AACN,IAAI;AACJ,IAAI,MAAM,SAAS,GAAG,WAAW,CAAC,eAAe;AACjD,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,uBAAuB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC/G,KAAK;AACL,IAAI,IAAI,YAAY,EAAE;AACtB,MAAM,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB;AACzE,QAAQ,QAAQ;AAChB,QAAQ,YAAY,CAAC,IAAI,CAAC;AAC1B,OAAO;AACP,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE;AACzB,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,+BAA+B,CAAC;AACzD,MAAM;AACN,IAAI;AACJ,IAAI,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,CAAC;AAC3F,IAAI,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC;AACvD,IAAI,IAAI,gBAAgB;AACxB,IAAI,IAAI;AACR,MAAM,gBAAgB,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,gBAAgB,EAAE,SAAS,EAAE;AAC5E,QAAQ,MAAM,EAAE,OAAO,CAAC;AACxB,OAAO,CAAC;AACR,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE;AAC7D,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE;AACpC,UAAU,MAAM,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC;AACnD,QAAQ;AACR,QAAQ,MAAM,KAAK;AACnB,UAAU,GAAG;AACb,UAAU,CAAC,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,qBAAqB,GAAG,GAAG,CAAC,CAAC,WAAW;AACnF,SAAS;AACT,MAAM;AACN,MAAM,MAAM,GAAG;AACf,IAAI;AACJ,IAAI,OAAO,IAAI,CAAC,gBAAgB,CAAC;AACjC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG;AACnC,IAAI,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,eAAe;AACxE,IAAI,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,OAAO,CAAC;AAClD,IAAI,IAAI,GAAG,YAAY,SAAS,IAAI,OAAO,KAAK,cAAc,EAAE;AAChE,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,+BAA+B,CAAC;AACvD,IAAI;AACJ,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC;AAC7B,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-VVJtskXo.js

@@ -0,0 +1,64 @@
+import { error, json } from '@sveltejs/kit';
+import { e as getComputeServerConfigStore } from './providers.server-DOymvucH.js';
+import './context-WcuX1UXU.js';
+import { f as findServerById } from './utils2-BF28g2lj.js';
+import { v as requireManageCompute } from './access.server-BPceukOr.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'zod';
+import './api-errors-KUItADEX.js';
+
+const TIMEOUT_MS = 8e3;
+function fetchFromServer(serverUrl, apiKey, path) {
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), TIMEOUT_MS);
+  const headers = {};
+  if (apiKey) headers["RhinoComputeKey"] = apiKey;
+  return fetch(new URL(path, serverUrl).toString(), { signal: controller.signal, headers }).finally(
+    () => clearTimeout(timer)
+  );
+}
+const GET = async ({ url, locals }) => {
+  requireManageCompute(locals);
+  const serverId = url.searchParams.get("serverId");
+  if (!serverId) throw error(400, "serverId required");
+  const config = await getComputeServerConfigStore().getConfig(locals.ctx);
+  const server = findServerById(config, serverId);
+  if (!server) throw error(404, "Server not found");
+  try {
+    const [healthRes, versionRes, pluginsRes] = await Promise.all([
+      fetchFromServer(server.serverUrl, server.apiKey, "/healthcheck"),
+      fetchFromServer(server.serverUrl, server.apiKey, "/version"),
+      fetchFromServer(server.serverUrl, server.apiKey, "/plugins/gh/installed")
+    ]);
+    const reachable = healthRes.ok;
+    const version = versionRes.ok ? await versionRes.json() : null;
+    const plugins = pluginsRes.ok ? await pluginsRes.json() : {};
+    const selvaVersion = plugins["Selva"] ?? null;
+    return json({
+      reachable,
+      rhinoVersion: version?.rhino ?? null,
+      computeVersion: version?.compute ?? null,
+      selvaInstalled: selvaVersion !== null,
+      selvaVersion,
+      plugins
+    });
+  } catch {
+    return json({
+      reachable: false,
+      rhinoVersion: null,
+      computeVersion: null,
+      selvaInstalled: false,
+      selvaVersion: null,
+      plugins: {}
+    });
+  }
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts-VVJtskXo.js.map

package/build/server/chunks/_server.ts-VVJtskXo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-VVJtskXo.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/compute/status/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { e as getComputeServerConfigStore } from \"../../../../../../chunks/providers.server.js\";\nimport \"../../../../../../chunks/context.js\";\nimport { f as findServerById } from \"../../../../../../chunks/utils2.js\";\nimport { v as requireManageCompute } from \"../../../../../../chunks/access.server.js\";\nconst TIMEOUT_MS = 8e3;\nfunction fetchFromServer(serverUrl, apiKey, path) {\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), TIMEOUT_MS);\n  const headers = {};\n  if (apiKey) headers[\"RhinoComputeKey\"] = apiKey;\n  return fetch(new URL(path, serverUrl).toString(), { signal: controller.signal, headers }).finally(\n    () => clearTimeout(timer)\n  );\n}\nconst GET = async ({ url, locals }) => {\n  requireManageCompute(locals);\n  const serverId = url.searchParams.get(\"serverId\");\n  if (!serverId) throw error(400, \"serverId required\");\n  const config = await getComputeServerConfigStore().getConfig(locals.ctx);\n  const server = findServerById(config, serverId);\n  if (!server) throw error(404, \"Server not found\");\n  try {\n    const [healthRes, versionRes, pluginsRes] = await Promise.all([\n      fetchFromServer(server.serverUrl, server.apiKey, \"/healthcheck\"),\n      fetchFromServer(server.serverUrl, server.apiKey, \"/version\"),\n      fetchFromServer(server.serverUrl, server.apiKey, \"/plugins/gh/installed\")\n    ]);\n    const reachable = healthRes.ok;\n    const version = versionRes.ok ? await versionRes.json() : null;\n    const plugins = pluginsRes.ok ? await pluginsRes.json() : {};\n    const selvaVersion = plugins[\"Selva\"] ?? null;\n    return json({\n      reachable,\n      rhinoVersion: version?.rhino ?? null,\n      computeVersion: version?.compute ?? null,\n      selvaInstalled: selvaVersion !== null,\n      selvaVersion,\n      plugins\n    });\n  } catch {\n    return json({\n      reachable: false,\n      rhinoVersion: null,\n      computeVersion: null,\n      selvaInstalled: false,\n      selvaVersion: null,\n      plugins: {}\n    });\n  }\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAKA,MAAM,UAAU,GAAG,GAAG;AACtB,SAAS,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE;AAClD,EAAE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE;AAC1C,EAAE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC;AAChE,EAAE,MAAM,OAAO,GAAG,EAAE;AACpB,EAAE,IAAI,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,MAAM;AACjD,EAAE,OAAO,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO;AACnG,IAAI,MAAM,YAAY,CAAC,KAAK;AAC5B,GAAG;AACH;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK;AACvC,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;AACnD,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,mBAAmB,CAAC;AACtD,EAAE,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;AAC1E,EAAE,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC;AACjD,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,kBAAkB,CAAC;AACnD,EAAE,IAAI;AACN,IAAI,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AAClE,MAAM,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC;AACtE,MAAM,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC;AAClE,MAAM,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB;AAC9E,KAAK,CAAC;AACN,IAAI,MAAM,SAAS,GAAG,SAAS,CAAC,EAAE;AAClC,IAAI,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI;AAClE,IAAI,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE;AAChE,IAAI,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI;AACjD,IAAI,OAAO,IAAI,CAAC;AAChB,MAAM,SAAS;AACf,MAAM,YAAY,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI;AAC1C,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,IAAI,IAAI;AAC9C,MAAM,cAAc,EAAE,YAAY,KAAK,IAAI;AAC3C,MAAM,YAAY;AAClB,MAAM;AACN,KAAK,CAAC;AACN,EAAE,CAAC,CAAC,MAAM;AACV,IAAI,OAAO,IAAI,CAAC;AAChB,MAAM,SAAS,EAAE,KAAK;AACtB,MAAM,YAAY,EAAE,IAAI;AACxB,MAAM,cAAc,EAAE,IAAI;AAC1B,MAAM,cAAc,EAAE,KAAK;AAC3B,MAAM,YAAY,EAAE,IAAI;AACxB,MAAM,OAAO,EAAE;AACf,KAAK,CAAC;AACN,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-mpVOvyBh.js

@@ -0,0 +1,42 @@
+import { error, json } from '@sveltejs/kit';
+import { i as getDefinitionMeta, M as MAX_PAGE_LIMIT } from './providers.server-DOymvucH.js';
+import { h as handleApiError } from './api-errors-KUItADEX.js';
+import { s as requireCanViewProject } from './access.server-BPceukOr.js';
+import { G as GuidSchema } from './context-WcuX1UXU.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'zod';
+
+const GET = async ({ params, locals, url }) => {
+  const guidParsed = GuidSchema.safeParse(params.guid);
+  if (!guidParsed.success) throw error(400, "Invalid or missing GUID");
+  if (!locals.ctx) throw error(401, "Unauthorized");
+  const rawLimit = Number(url.searchParams.get("limit") ?? 50);
+  const limit = Number.isFinite(rawLimit) ? Math.min(Math.max(rawLimit, 1), MAX_PAGE_LIMIT) : 50;
+  const cursor = url.searchParams.get("cursor") ?? void 0;
+  try {
+    const def = await getDefinitionMeta().get(locals.ctx, guidParsed.data);
+    if (!def) throw error(404, "Definition not found");
+    await requireCanViewProject(locals, def.projectId);
+    const page = await getDefinitionMeta().listVersions(locals.ctx, guidParsed.data, {
+      limit,
+      cursor
+    });
+    return json({
+      versions: page.items,
+      nextCursor: page.nextCursor,
+      liveVersionId: def.liveVersionId,
+      draftVersionId: def.draftVersionId
+    });
+  } catch (err) {
+    handleApiError(err, "Failed to list versions");
+  }
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts-mpVOvyBh.js.map

package/build/server/chunks/_server.ts-mpVOvyBh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-mpVOvyBh.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_guid_/versions/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { i as getDefinitionMeta, M as MAX_PAGE_LIMIT } from \"../../../../../../chunks/providers.server.js\";\nimport { h as handleApiError } from \"../../../../../../chunks/api-errors.js\";\nimport { s as requireCanViewProject } from \"../../../../../../chunks/access.server.js\";\nimport { G as GuidSchema } from \"../../../../../../chunks/context.js\";\nconst GET = async ({ params, locals, url }) => {\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) throw error(400, \"Invalid or missing GUID\");\n  if (!locals.ctx) throw error(401, \"Unauthorized\");\n  const rawLimit = Number(url.searchParams.get(\"limit\") ?? 50);\n  const limit = Number.isFinite(rawLimit) ? Math.min(Math.max(rawLimit, 1), MAX_PAGE_LIMIT) : 50;\n  const cursor = url.searchParams.get(\"cursor\") ?? void 0;\n  try {\n    const def = await getDefinitionMeta().get(locals.ctx, guidParsed.data);\n    if (!def) throw error(404, \"Definition not found\");\n    await requireCanViewProject(locals, def.projectId);\n    const page = await getDefinitionMeta().listVersions(locals.ctx, guidParsed.data, {\n      limit,\n      cursor\n    });\n    return json({\n      versions: page.items,\n      nextCursor: page.nextCursor,\n      liveVersionId: def.liveVersionId,\n      draftVersionId: def.draftVersionId\n    });\n  } catch (err) {\n    handleApiError(err, \"Failed to list versions\");\n  }\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;AAKK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AAC/C,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtE,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC;AACnD,EAAE,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;AAC9D,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,EAAE;AAChG,EAAE,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,MAAM;AACzD,EAAE,IAAI;AACN,IAAI,MAAM,GAAG,GAAG,MAAM,iBAAiB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,sBAAsB,CAAC;AACtD,IAAI,MAAM,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC;AACtD,IAAI,MAAM,IAAI,GAAG,MAAM,iBAAiB,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE;AACrF,MAAM,KAAK;AACX,MAAM;AACN,KAAK,CAAC;AACN,IAAI,OAAO,IAAI,CAAC;AAChB,MAAM,QAAQ,EAAE,IAAI,CAAC,KAAK;AAC1B,MAAM,UAAU,EAAE,IAAI,CAAC,UAAU;AACjC,MAAM,aAAa,EAAE,GAAG,CAAC,aAAa;AACtC,MAAM,cAAc,EAAE,GAAG,CAAC;AAC1B,KAAK,CAAC;AACN,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAClD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-rck08O_p.js

@@ -0,0 +1,78 @@
+import { error, json } from '@sveltejs/kit';
+import { randomUUID } from 'node:crypto';
+import { s as providers, f as flag } from './providers.server-DOymvucH.js';
+import { t as requireEditableDefinition } from './access.server-BPceukOr.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-KUItADEX.js';
+import { G as GuidSchema, c as CreateShareLinkInputSchema } from './context-WcuX1UXU.js';
+import { D as DEFAULT_SHARE_LINK_MAX_SOLVES } from './types2-DdHhYSMF.js';
+import { m as mintRawToken, h as hashToken } from './token.server-BGL9vwYS.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'zod';
+
+function assertSharingEnabled() {
+  if (!flag("ENABLE_SHARING")) {
+    throw error(404, "Share links are disabled on this instance (ENABLE_SHARING).");
+  }
+}
+function strip(link) {
+  const { tokenHash: _omit, ...rest } = link;
+  return { ...rest, hasToken: true };
+}
+const GET = async ({ params, locals }) => {
+  assertSharingEnabled();
+  const guidParsed = GuidSchema.safeParse(params.guid);
+  if (!guidParsed.success) throw error(400, "Invalid or missing GUID");
+  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
+  try {
+    const page = await providers.data.shareLinks.listByDefinition(ctx, guidParsed.data, {
+      limit: 200
+    });
+    return json({
+      links: page.items.map(strip),
+      nextCursor: page.nextCursor
+    });
+  } catch (err) {
+    handleApiError(err, "Failed to list share links");
+  }
+};
+const POST = async ({ params, request, locals }) => {
+  assertSharingEnabled();
+  const guidParsed = GuidSchema.safeParse(params.guid);
+  if (!guidParsed.success) throw error(400, "Invalid or missing GUID");
+  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
+  const body = await request.json().catch(() => ({}));
+  const parsed = CreateShareLinkInputSchema.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  const raw = mintRawToken();
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const link = {
+    id: randomUUID(),
+    definitionId: guidParsed.data,
+    channel: parsed.data.channel,
+    tokenHash: hashToken(raw),
+    name: parsed.data.name,
+    createdBy: locals.user.id,
+    createdAt: now,
+    expiresAt: parsed.data.expiresAt ?? null,
+    revokedAt: null,
+    allowSolve: parsed.data.allowSolve,
+    // Default applied only when the field is absent. `null` is a deliberate
+    // "uncap" choice and is preserved.
+    maxSolves: parsed.data.maxSolves === void 0 ? DEFAULT_SHARE_LINK_MAX_SOLVES : parsed.data.maxSolves,
+    solveCount: 0
+  };
+  try {
+    await providers.data.shareLinks.create(ctx, link);
+    return json({ link: strip(link), token: raw }, { status: 201 });
+  } catch (err) {
+    handleApiError(err, "Failed to create share link");
+  }
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts-rck08O_p.js.map

package/build/server/chunks/_server.ts-rck08O_p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-rck08O_p.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_guid_/share-links/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\nimport { s as providers, f as flag } from \"../../../../../../chunks/providers.server.js\";\nimport { t as requireEditableDefinition } from \"../../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../../chunks/api-errors.js\";\nimport { G as GuidSchema, c as CreateShareLinkInputSchema } from \"../../../../../../chunks/context.js\";\nimport { D as DEFAULT_SHARE_LINK_MAX_SOLVES } from \"../../../../../../chunks/types2.js\";\nimport { m as mintRawToken, h as hashToken } from \"../../../../../../chunks/token.server.js\";\nfunction assertSharingEnabled() {\n  if (!flag(\"ENABLE_SHARING\")) {\n    throw error(404, \"Share links are disabled on this instance (ENABLE_SHARING).\");\n  }\n}\nfunction strip(link) {\n  const { tokenHash: _omit, ...rest } = link;\n  return { ...rest, hasToken: true };\n}\nconst GET = async ({ params, locals }) => {\n  assertSharingEnabled();\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) throw error(400, \"Invalid or missing GUID\");\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  try {\n    const page = await providers.data.shareLinks.listByDefinition(ctx, guidParsed.data, {\n      limit: 200\n    });\n    return json({\n      links: page.items.map(strip),\n      nextCursor: page.nextCursor\n    });\n  } catch (err) {\n    handleApiError(err, \"Failed to list share links\");\n  }\n};\nconst POST = async ({ params, request, locals }) => {\n  assertSharingEnabled();\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) throw error(400, \"Invalid or missing GUID\");\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  const body = await request.json().catch(() => ({}));\n  const parsed = CreateShareLinkInputSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const raw = mintRawToken();\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const link = {\n    id: randomUUID(),\n    definitionId: guidParsed.data,\n    channel: parsed.data.channel,\n    tokenHash: hashToken(raw),\n    name: parsed.data.name,\n    createdBy: locals.user.id,\n    createdAt: now,\n    expiresAt: parsed.data.expiresAt ?? null,\n    revokedAt: null,\n    allowSolve: parsed.data.allowSolve,\n    // Default applied only when the field is absent. `null` is a deliberate\n    // \"uncap\" choice and is preserved.\n    maxSolves: parsed.data.maxSolves === void 0 ? DEFAULT_SHARE_LINK_MAX_SOLVES : parsed.data.maxSolves,\n    solveCount: 0\n  };\n  try {\n    await providers.data.shareLinks.create(ctx, link);\n    return json({ link: strip(link), token: raw }, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to create share link\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAQA,SAAS,oBAAoB,GAAG;AAChC,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE;AAC/B,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,6DAA6D,CAAC;AACnF,EAAE;AACF;AACA,SAAS,KAAK,CAAC,IAAI,EAAE;AACrB,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI;AAC5C,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;AACpC;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC1C,EAAE,oBAAoB,EAAE;AACxB,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtE,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE;AACxF,MAAM,KAAK,EAAE;AACb,KAAK,CAAC;AACN,IAAI,OAAO,IAAI,CAAC;AAChB,MAAM,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;AAClC,MAAM,UAAU,EAAE,IAAI,CAAC;AACvB,KAAK,CAAC;AACN,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,4BAA4B,CAAC;AACrD,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpD,EAAE,oBAAoB,EAAE;AACxB,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtE,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,IAAI,CAAC;AAC3D,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,GAAG,GAAG,YAAY,EAAE;AAC5B,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,IAAI,GAAG;AACf,IAAI,EAAE,EAAE,UAAU,EAAE;AACpB,IAAI,YAAY,EAAE,UAAU,CAAC,IAAI;AACjC,IAAI,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;AAChC,IAAI,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC;AAC7B,IAAI,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC1B,IAAI,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC7B,IAAI,SAAS,EAAE,GAAG;AAClB,IAAI,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI;AAC5C,IAAI,SAAS,EAAE,IAAI;AACnB,IAAI,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;AACtC;AACA;AACA,IAAI,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,MAAM,GAAG,6BAA6B,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS;AACvG,IAAI,UAAU,EAAE;AAChB,GAAG;AACH,EAAE,IAAI;AACN,IAAI,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC;AACrD,IAAI,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACnE,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACtD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-sBiGcMzk.js

@@ -0,0 +1,39 @@
+import { error } from '@sveltejs/kit';
+import { i as getDefinitionMeta, o as getStorageProvider, d as definitionPaths } from './providers.server-DOymvucH.js';
+import { s as requireCanViewProject } from './access.server-BPceukOr.js';
+import { C as COVER_IMAGE_CONTENT_TYPES } from './types-DxzJoaA4.js';
+import { G as GuidSchema } from './context-WcuX1UXU.js';
+import './computeLimits-CKK96OOR.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import './api-errors-KUItADEX.js';
+import 'zod';
+
+const GET = async ({ params, locals }) => {
+  const guidParsed = GuidSchema.safeParse(params.guid);
+  if (!guidParsed.success) throw error(400, "Invalid GUID");
+  const guid = guidParsed.data;
+  const ctx = locals.ctx;
+  const record = await getDefinitionMeta().get(ctx, guid);
+  if (!record?.coverImage) throw error(404, "Image not found");
+  await requireCanViewProject(locals, record.projectId);
+  const storedFilename = record.coverImage.split("/").pop() ?? "cover.webp";
+  const ext = storedFilename.substring(storedFilename.lastIndexOf(".")).toLowerCase();
+  const contentType = COVER_IMAGE_CONTENT_TYPES[ext] ?? "image/webp";
+  const bytes = await getStorageProvider().get(definitionPaths.image(guid));
+  if (!bytes) throw error(404, "Image not found");
+  return new Response(Buffer.from(bytes), {
+    headers: {
+      "Content-Type": contentType,
+      "Cache-Control": "public, max-age=3600"
+    }
+  });
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts-sBiGcMzk.js.map