@selvajs/selva 3.0.0 → 4.2.0

package/build/server/chunks/_server.ts-EnuOtr_j.js

@@ -0,0 +1,307 @@
+import { TreeBuilder, GrasshopperClient } from '@selvajs/compute';
+import { error, json, isHttpError } from '@sveltejs/kit';
+import { r as resolveServerForOrg, f as fetchSchemaFromCompute, C as ComputeServerUnconfiguredError } from './api-errors-agQVBoep.js';
+import { b as MAX_SOLVE_DURATION_MS, D as DEFINITION_CACHE_TTL_MS, d as REMOTE_DEFINITION_FETCH_TIMEOUT_MS, e as REMOTE_DEFINITION_MAX_BYTES, c as RATE_LIMIT_WINDOW_MS, R as RATE_LIMIT_MAX_REQUESTS, C as COMPUTE_REQUEST_MAX_BYTES } from './computeLimits-CKK96OOR.js';
+import { e as requireMaxBodySize } from './admin-auth.server-45kKyH82.js';
+import { o as getStorageProvider, s as providers } from './providers.server-MD7TK-zQ.js';
+import { k as requireCanEditDefinition, q as requireCanSolve } from './access.server-BBglojso.js';
+import { t as tryResolveShareToken } from './resolve.server-BXKCfGfg.js';
+import './context-DKDYb-He.js';
+import 'zod';
+import '@selvajs/compute/core';
+import './utils2-D38XWwRv.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import './token.server-BGL9vwYS.js';
+
+function isSafeRemoteDefinitionUrl(raw) {
+  let parsed;
+  try {
+    parsed = new URL(raw);
+  } catch {
+    return false;
+  }
+  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") return false;
+  const host = parsed.hostname.toLowerCase();
+  if (!host) return false;
+  if (host === "localhost" || host === "0.0.0.0" || host.endsWith(".localhost")) return false;
+  if (host === "::1" || host === "[::1]") return false;
+  if (/^127\./.test(host)) return false;
+  if (/^10\./.test(host)) return false;
+  if (/^192\.168\./.test(host)) return false;
+  if (/^172\.(1[6-9]|2[0-9]|3[0-1])\./.test(host)) return false;
+  if (/^169\.254\./.test(host)) return false;
+  if (/^\[?(fc|fd)[0-9a-f]{2}:/i.test(host)) return false;
+  if (/^\[?fe[89ab][0-9a-f]:/i.test(host)) return false;
+  return true;
+}
+const WINDOW_MS = RATE_LIMIT_WINDOW_MS;
+const MAX_PER_WINDOW = RATE_LIMIT_MAX_REQUESTS;
+const buckets = /* @__PURE__ */ new Map();
+function checkComputeRateLimit(key) {
+  const now = Date.now();
+  const entry = buckets.get(key);
+  if (!entry || now > entry.resetAt) {
+    buckets.set(key, { count: 1, resetAt: now + WINDOW_MS });
+    return { allowed: true };
+  }
+  if (entry.count >= MAX_PER_WINDOW) {
+    return { allowed: false, retryAfter: Math.ceil((entry.resetAt - now) / 1e3) };
+  }
+  entry.count += 1;
+  return { allowed: true };
+}
+const definitionCache = /* @__PURE__ */ new Map();
+let cachedClient = null;
+let cachedScheduler = null;
+let cachedClientConfig = null;
+async function getClient(serverConfig) {
+  const currentConfig = {
+    serverUrl: serverConfig.serverUrl,
+    apiKey: serverConfig.apiKey
+  };
+  if (cachedClient && cachedScheduler && cachedClientConfig && cachedClientConfig.serverUrl === currentConfig.serverUrl && cachedClientConfig.apiKey === currentConfig.apiKey) {
+    return { client: cachedClient, scheduler: cachedScheduler };
+  }
+  cachedScheduler?.dispose();
+  cachedClient = await GrasshopperClient.create({
+    serverUrl: currentConfig.serverUrl,
+    apiKey: currentConfig.apiKey
+  });
+  cachedScheduler = cachedClient.createScheduler({
+    mode: "queue",
+    timeoutMs: MAX_SOLVE_DURATION_MS,
+    cache: { maxEntries: 20, ttlMs: 5 * 6e4 }
+  });
+  cachedClientConfig = currentConfig;
+  return { client: cachedClient, scheduler: cachedScheduler };
+}
+async function loadRemoteDefinition(url) {
+  if (!isSafeRemoteDefinitionUrl(url)) {
+    throw new Error("Remote definition URL is not allowed");
+  }
+  const now = Date.now();
+  const cached = definitionCache.get(url);
+  if (cached && now - cached.fetchedAt < DEFINITION_CACHE_TTL_MS) {
+    return cached.data;
+  }
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), REMOTE_DEFINITION_FETCH_TIMEOUT_MS);
+  let data;
+  try {
+    const response = await fetch(url, {
+      signal: controller.signal,
+      redirect: "error"
+    });
+    if (!response.ok) {
+      throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+    }
+    const declared = Number(response.headers.get("content-length"));
+    if (Number.isFinite(declared) && declared > REMOTE_DEFINITION_MAX_BYTES) {
+      throw new Error("Remote definition exceeds size limit");
+    }
+    const buffer = await response.arrayBuffer();
+    if (buffer.byteLength > REMOTE_DEFINITION_MAX_BYTES) {
+      throw new Error("Remote definition exceeds size limit");
+    }
+    data = new Uint8Array(buffer);
+  } finally {
+    clearTimeout(timeout);
+  }
+  definitionCache.set(url, { data, fetchedAt: now });
+  if (definitionCache.size > 50) {
+    const entries = Array.from(definitionCache.entries());
+    entries.sort((a, b) => a[1].fetchedAt - b[1].fetchedAt);
+    for (let i = 0; i < 10; i++) {
+      definitionCache.delete(entries[i][0]);
+    }
+  }
+  return data;
+}
+function transformInputParameter(input, value) {
+  const base = {
+    description: input.description || "",
+    name: input.nickname,
+    nickname: input.nickname || null,
+    id: input.id
+  };
+  if (input.paramType === "number" || input.paramType === "integer") {
+    return {
+      ...base,
+      paramType: input.paramType === "integer" ? "Integer" : "Number",
+      minimum: input.minimum,
+      maximum: input.maximum,
+      stepSize: input.paramType === "integer" ? 1 : input.stepSize,
+      default: value ?? input.default
+    };
+  } else if (input.paramType === "text") {
+    return {
+      ...base,
+      paramType: "Text",
+      default: value ?? input.default ?? ""
+    };
+  } else if (input.paramType === "boolean") {
+    return {
+      ...base,
+      paramType: "Boolean",
+      default: value ?? input.default ?? false
+    };
+  }
+  return {
+    ...base,
+    paramType: "Text",
+    default: value ?? ""
+  };
+}
+const POST = async ({ request, locals, url }) => {
+  const storage = getStorageProvider();
+  requireMaxBodySize(request, COMPUTE_REQUEST_MAX_BYTES);
+  try {
+    const body = await request.json();
+    const { inputs, values } = body;
+    const definitionUrl = body.definitionUrl;
+    const channel = body.channel ?? "live";
+    if (!inputs || !values || !definitionUrl) {
+      throw error(400, "Missing required fields: inputs, values, or definitionUrl");
+    }
+    if (channel !== "live" && channel !== "draft") {
+      throw error(400, `Invalid channel: ${channel}. Must be 'live' or 'draft'.`);
+    }
+    let definitionSource;
+    let localVersionForBackfill = null;
+    let solveOrgId = null;
+    let definitionPin = null;
+    const isLocal = definitionUrl.startsWith("local:");
+    const guid = isLocal ? definitionUrl.substring(6) : null;
+    const sharedAccess = isLocal && guid ? await tryResolveShareToken(request, url, guid, channel, { requireSolve: true }) : null;
+    if (!sharedAccess && (!locals.ctx || !locals.user)) {
+      throw error(401, "Unauthorized");
+    }
+    const solveCtx = sharedAccess?.ctx ?? locals.ctx;
+    const rateLimitKey = sharedAccess ? `share:${sharedAccess.link.id}` : `user:${locals.user.id}`;
+    const rateLimit = checkComputeRateLimit(rateLimitKey);
+    if (!rateLimit.allowed) {
+      const retryAfter = rateLimit.retryAfter ?? 1;
+      return new Response(
+        JSON.stringify({
+          message: `Too many compute requests. Retry in ${retryAfter}s.`,
+          retryAfter
+        }),
+        {
+          status: 429,
+          headers: {
+            "Content-Type": "application/json",
+            "Retry-After": String(retryAfter)
+          }
+        }
+      );
+    }
+    if (isLocal && guid) {
+      let record;
+      try {
+        record = await providers.data.definitions.get(solveCtx, guid);
+      } catch (err) {
+        console.error(`Failed to load local definition: ${guid}`, err);
+        throw error(404, `Definition '${guid}' not found`);
+      }
+      if (!record) throw error(404, `Definition '${guid}' not found`);
+      const project = await providers.data.projects.getProject(solveCtx, record.projectId);
+      solveOrgId = project?.orgId ?? null;
+      definitionPin = record.computeServerId ?? null;
+      if (!sharedAccess) {
+        if (channel === "draft") {
+          await requireCanEditDefinition(locals, record.projectId, guid);
+        } else {
+          await requireCanSolve(locals, record.projectId);
+        }
+      }
+      const versionId = channel === "live" ? record.liveVersionId : record.draftVersionId;
+      if (!versionId) {
+        throw error(404, `Definition '${guid}' has no ${channel} version yet`);
+      }
+      const version = await providers.data.definitions.getVersion(solveCtx, versionId);
+      if (!version || version.definitionId !== guid) {
+        throw error(404, `Definition '${guid}' ${channel} version is missing`);
+      }
+      localVersionForBackfill = { id: version.id, hasSchema: version.schema !== void 0 };
+      try {
+        const bytes = await storage.get(version.fileKey);
+        if (!bytes) throw new Error(`Version blob missing: ${version.fileKey}`);
+        definitionSource = bytes;
+      } catch (err) {
+        console.error(`Failed to load local definition blob: ${guid}`, err);
+        throw error(404, `Definition '${guid}' not found`);
+      }
+    } else {
+      try {
+        definitionSource = await loadRemoteDefinition(definitionUrl);
+      } catch (err) {
+        console.error(`Failed to fetch definition from ${definitionUrl}:`, err);
+        throw error(
+          400,
+          `Failed to load definition: ${err instanceof Error ? err.message : String(err)}`
+        );
+      }
+    }
+    const inputTree = TreeBuilder.fromInputParams(
+      inputs.filter((input) => input.paramType).map((input) => transformInputParameter(input, values[input.id]))
+    );
+    if (sharedAccess) {
+      const next = await providers.data.shareLinks.tryIncrementSolveCount(
+        solveCtx,
+        sharedAccess.link.id
+      );
+      if (next === null) {
+        throw error(429, "Share link solve cap reached.");
+      }
+    }
+    const serverConfig = await resolveServerForOrg(solveCtx, solveOrgId, { definitionPin });
+    if (localVersionForBackfill && !localVersionForBackfill.hasSchema) {
+      const versionId = localVersionForBackfill.id;
+      try {
+        const schema = await fetchSchemaFromCompute(definitionSource, serverConfig);
+        await providers.data.definitions.setVersionSchema(solveCtx, versionId, schema);
+      } catch (err) {
+        console.warn(`[API/Compute] Schema backfill failed for version ${versionId}:`, err);
+      }
+    }
+    const { scheduler } = await getClient(serverConfig);
+    let solvedDefinition;
+    try {
+      solvedDefinition = await scheduler.solve(definitionSource, inputTree, {
+        signal: request.signal
+      });
+    } catch (err) {
+      if (err instanceof Error && err.name === "AbortError") {
+        if (request.signal.aborted) {
+          throw error(499, "Client closed request");
+        }
+        throw error(
+          504,
+          `Solve exceeded the ${Math.round(MAX_SOLVE_DURATION_MS / 1e3)}s deadline.`
+        );
+      }
+      throw err;
+    }
+    return json(solvedDefinition);
+  } catch (err) {
+    if (isHttpError(err)) throw err;
+    if (err instanceof ComputeServerUnconfiguredError) {
+      throw error(503, err.message);
+    }
+    const message = err instanceof Error ? err.message : "Unknown error";
+    console.error("[API/Compute] Error:", message);
+    if (err instanceof TypeError && message === "fetch failed") {
+      throw error(503, "Compute server is unreachable");
+    }
+    throw error(500, message);
+  }
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-EnuOtr_j.js.map

package/build/server/chunks/_server.ts-EnuOtr_j.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-EnuOtr_j.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/compute/_server.ts.js"],"sourcesContent":["import { TreeBuilder, GrasshopperClient } from \"@selvajs/compute\";\nimport { error, json, isHttpError } from \"@sveltejs/kit\";\nimport { r as resolveServerForOrg, f as fetchSchemaFromCompute, C as ComputeServerUnconfiguredError } from \"../../../../chunks/api-errors.js\";\nimport { c as RATE_LIMIT_WINDOW_MS, R as RATE_LIMIT_MAX_REQUESTS, b as MAX_SOLVE_DURATION_MS, D as DEFINITION_CACHE_TTL_MS, d as REMOTE_DEFINITION_FETCH_TIMEOUT_MS, e as REMOTE_DEFINITION_MAX_BYTES, C as COMPUTE_REQUEST_MAX_BYTES } from \"../../../../chunks/computeLimits.js\";\nimport { e as requireMaxBodySize } from \"../../../../chunks/admin-auth.server.js\";\nimport { o as getStorageProvider, s as providers } from \"../../../../chunks/providers.server.js\";\nimport { k as requireCanEditDefinition, q as requireCanSolve } from \"../../../../chunks/access.server.js\";\nimport { t as tryResolveShareToken } from \"../../../../chunks/resolve.server.js\";\nfunction isSafeRemoteDefinitionUrl(raw) {\n  let parsed;\n  try {\n    parsed = new URL(raw);\n  } catch {\n    return false;\n  }\n  if (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") return false;\n  const host = parsed.hostname.toLowerCase();\n  if (!host) return false;\n  if (host === \"localhost\" || host === \"0.0.0.0\" || host.endsWith(\".localhost\")) return false;\n  if (host === \"::1\" || host === \"[::1]\") return false;\n  if (/^127\\./.test(host)) return false;\n  if (/^10\\./.test(host)) return false;\n  if (/^192\\.168\\./.test(host)) return false;\n  if (/^172\\.(1[6-9]|2[0-9]|3[0-1])\\./.test(host)) return false;\n  if (/^169\\.254\\./.test(host)) return false;\n  if (/^\\[?(fc|fd)[0-9a-f]{2}:/i.test(host)) return false;\n  if (/^\\[?fe[89ab][0-9a-f]:/i.test(host)) return false;\n  return true;\n}\nconst WINDOW_MS = RATE_LIMIT_WINDOW_MS;\nconst MAX_PER_WINDOW = RATE_LIMIT_MAX_REQUESTS;\nconst buckets = /* @__PURE__ */ new Map();\nfunction checkComputeRateLimit(key) {\n  const now = Date.now();\n  const entry = buckets.get(key);\n  if (!entry || now > entry.resetAt) {\n    buckets.set(key, { count: 1, resetAt: now + WINDOW_MS });\n    return { allowed: true };\n  }\n  if (entry.count >= MAX_PER_WINDOW) {\n    return { allowed: false, retryAfter: Math.ceil((entry.resetAt - now) / 1e3) };\n  }\n  entry.count += 1;\n  return { allowed: true };\n}\nconst definitionCache = /* @__PURE__ */ new Map();\nlet cachedClient = null;\nlet cachedScheduler = null;\nlet cachedClientConfig = null;\nasync function getClient(serverConfig) {\n  const currentConfig = {\n    serverUrl: serverConfig.serverUrl,\n    apiKey: serverConfig.apiKey\n  };\n  if (cachedClient && cachedScheduler && cachedClientConfig && cachedClientConfig.serverUrl === currentConfig.serverUrl && cachedClientConfig.apiKey === currentConfig.apiKey) {\n    return { client: cachedClient, scheduler: cachedScheduler };\n  }\n  cachedScheduler?.dispose();\n  cachedClient = await GrasshopperClient.create({\n    serverUrl: currentConfig.serverUrl,\n    apiKey: currentConfig.apiKey\n  });\n  cachedScheduler = cachedClient.createScheduler({\n    mode: \"queue\",\n    timeoutMs: MAX_SOLVE_DURATION_MS,\n    cache: { maxEntries: 20, ttlMs: 5 * 6e4 }\n  });\n  cachedClientConfig = currentConfig;\n  return { client: cachedClient, scheduler: cachedScheduler };\n}\nasync function loadRemoteDefinition(url) {\n  if (!isSafeRemoteDefinitionUrl(url)) {\n    throw new Error(\"Remote definition URL is not allowed\");\n  }\n  const now = Date.now();\n  const cached = definitionCache.get(url);\n  if (cached && now - cached.fetchedAt < DEFINITION_CACHE_TTL_MS) {\n    return cached.data;\n  }\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), REMOTE_DEFINITION_FETCH_TIMEOUT_MS);\n  let data;\n  try {\n    const response = await fetch(url, {\n      signal: controller.signal,\n      redirect: \"error\"\n    });\n    if (!response.ok) {\n      throw new Error(`HTTP ${response.status}: ${response.statusText}`);\n    }\n    const declared = Number(response.headers.get(\"content-length\"));\n    if (Number.isFinite(declared) && declared > REMOTE_DEFINITION_MAX_BYTES) {\n      throw new Error(\"Remote definition exceeds size limit\");\n    }\n    const buffer = await response.arrayBuffer();\n    if (buffer.byteLength > REMOTE_DEFINITION_MAX_BYTES) {\n      throw new Error(\"Remote definition exceeds size limit\");\n    }\n    data = new Uint8Array(buffer);\n  } finally {\n    clearTimeout(timeout);\n  }\n  definitionCache.set(url, { data, fetchedAt: now });\n  if (definitionCache.size > 50) {\n    const entries = Array.from(definitionCache.entries());\n    entries.sort((a, b) => a[1].fetchedAt - b[1].fetchedAt);\n    for (let i = 0; i < 10; i++) {\n      definitionCache.delete(entries[i][0]);\n    }\n  }\n  return data;\n}\nfunction transformInputParameter(input, value) {\n  const base = {\n    description: input.description || \"\",\n    name: input.nickname,\n    nickname: input.nickname || null,\n    id: input.id\n  };\n  if (input.paramType === \"number\" || input.paramType === \"integer\") {\n    return {\n      ...base,\n      paramType: input.paramType === \"integer\" ? \"Integer\" : \"Number\",\n      minimum: input.minimum,\n      maximum: input.maximum,\n      stepSize: input.paramType === \"integer\" ? 1 : input.stepSize,\n      default: value ?? input.default\n    };\n  } else if (input.paramType === \"text\") {\n    return {\n      ...base,\n      paramType: \"Text\",\n      default: value ?? input.default ?? \"\"\n    };\n  } else if (input.paramType === \"boolean\") {\n    return {\n      ...base,\n      paramType: \"Boolean\",\n      default: value ?? input.default ?? false\n    };\n  }\n  return {\n    ...base,\n    paramType: \"Text\",\n    default: value ?? \"\"\n  };\n}\nconst POST = async ({ request, locals, url }) => {\n  const storage = getStorageProvider();\n  requireMaxBodySize(request, COMPUTE_REQUEST_MAX_BYTES);\n  try {\n    const body = await request.json();\n    const { inputs, values } = body;\n    const definitionUrl = body.definitionUrl;\n    const channel = body.channel ?? \"live\";\n    if (!inputs || !values || !definitionUrl) {\n      throw error(400, \"Missing required fields: inputs, values, or definitionUrl\");\n    }\n    if (channel !== \"live\" && channel !== \"draft\") {\n      throw error(400, `Invalid channel: ${channel}. Must be 'live' or 'draft'.`);\n    }\n    let definitionSource;\n    let localVersionForBackfill = null;\n    let solveOrgId = null;\n    let definitionPin = null;\n    const isLocal = definitionUrl.startsWith(\"local:\");\n    const guid = isLocal ? definitionUrl.substring(6) : null;\n    const sharedAccess = isLocal && guid ? await tryResolveShareToken(request, url, guid, channel, { requireSolve: true }) : null;\n    if (!sharedAccess && (!locals.ctx || !locals.user)) {\n      throw error(401, \"Unauthorized\");\n    }\n    const solveCtx = sharedAccess?.ctx ?? locals.ctx;\n    const rateLimitKey = sharedAccess ? `share:${sharedAccess.link.id}` : `user:${locals.user.id}`;\n    const rateLimit = checkComputeRateLimit(rateLimitKey);\n    if (!rateLimit.allowed) {\n      const retryAfter = rateLimit.retryAfter ?? 1;\n      return new Response(\n        JSON.stringify({\n          message: `Too many compute requests. Retry in ${retryAfter}s.`,\n          retryAfter\n        }),\n        {\n          status: 429,\n          headers: {\n            \"Content-Type\": \"application/json\",\n            \"Retry-After\": String(retryAfter)\n          }\n        }\n      );\n    }\n    if (isLocal && guid) {\n      let record;\n      try {\n        record = await providers.data.definitions.get(solveCtx, guid);\n      } catch (err) {\n        console.error(`Failed to load local definition: ${guid}`, err);\n        throw error(404, `Definition '${guid}' not found`);\n      }\n      if (!record) throw error(404, `Definition '${guid}' not found`);\n      const project = await providers.data.projects.getProject(solveCtx, record.projectId);\n      solveOrgId = project?.orgId ?? null;\n      definitionPin = record.computeServerId ?? null;\n      if (!sharedAccess) {\n        if (channel === \"draft\") {\n          await requireCanEditDefinition(locals, record.projectId, guid);\n        } else {\n          await requireCanSolve(locals, record.projectId);\n        }\n      }\n      const versionId = channel === \"live\" ? record.liveVersionId : record.draftVersionId;\n      if (!versionId) {\n        throw error(404, `Definition '${guid}' has no ${channel} version yet`);\n      }\n      const version = await providers.data.definitions.getVersion(solveCtx, versionId);\n      if (!version || version.definitionId !== guid) {\n        throw error(404, `Definition '${guid}' ${channel} version is missing`);\n      }\n      localVersionForBackfill = { id: version.id, hasSchema: version.schema !== void 0 };\n      try {\n        const bytes = await storage.get(version.fileKey);\n        if (!bytes) throw new Error(`Version blob missing: ${version.fileKey}`);\n        definitionSource = bytes;\n      } catch (err) {\n        console.error(`Failed to load local definition blob: ${guid}`, err);\n        throw error(404, `Definition '${guid}' not found`);\n      }\n    } else {\n      try {\n        definitionSource = await loadRemoteDefinition(definitionUrl);\n      } catch (err) {\n        console.error(`Failed to fetch definition from ${definitionUrl}:`, err);\n        throw error(\n          400,\n          `Failed to load definition: ${err instanceof Error ? err.message : String(err)}`\n        );\n      }\n    }\n    const inputTree = TreeBuilder.fromInputParams(\n      inputs.filter((input) => input.paramType).map((input) => transformInputParameter(input, values[input.id]))\n    );\n    if (sharedAccess) {\n      const next = await providers.data.shareLinks.tryIncrementSolveCount(\n        solveCtx,\n        sharedAccess.link.id\n      );\n      if (next === null) {\n        throw error(429, \"Share link solve cap reached.\");\n      }\n    }\n    const serverConfig = await resolveServerForOrg(solveCtx, solveOrgId, { definitionPin });\n    if (localVersionForBackfill && !localVersionForBackfill.hasSchema) {\n      const versionId = localVersionForBackfill.id;\n      try {\n        const schema = await fetchSchemaFromCompute(definitionSource, serverConfig);\n        await providers.data.definitions.setVersionSchema(solveCtx, versionId, schema);\n      } catch (err) {\n        console.warn(`[API/Compute] Schema backfill failed for version ${versionId}:`, err);\n      }\n    }\n    const { scheduler } = await getClient(serverConfig);\n    let solvedDefinition;\n    try {\n      solvedDefinition = await scheduler.solve(definitionSource, inputTree, {\n        signal: request.signal\n      });\n    } catch (err) {\n      if (err instanceof Error && err.name === \"AbortError\") {\n        if (request.signal.aborted) {\n          throw error(499, \"Client closed request\");\n        }\n        throw error(\n          504,\n          `Solve exceeded the ${Math.round(MAX_SOLVE_DURATION_MS / 1e3)}s deadline.`\n        );\n      }\n      throw err;\n    }\n    return json(solvedDefinition);\n  } catch (err) {\n    if (isHttpError(err)) throw err;\n    if (err instanceof ComputeServerUnconfiguredError) {\n      throw error(503, err.message);\n    }\n    const message = err instanceof Error ? err.message : \"Unknown error\";\n    console.error(\"[API/Compute] Error:\", message);\n    if (err instanceof TypeError && message === \"fetch failed\") {\n      throw error(503, \"Compute server is unreachable\");\n    }\n    throw error(500, message);\n  }\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAQA,SAAS,yBAAyB,CAAC,GAAG,EAAE;AACxC,EAAE,IAAI,MAAM;AACZ,EAAE,IAAI;AACN,IAAI,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC;AACzB,EAAE,CAAC,CAAC,MAAM;AACV,IAAI,OAAO,KAAK;AAChB,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,OAAO,KAAK;AAC/E,EAAE,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE;AAC5C,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,KAAK;AACzB,EAAE,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,KAAK;AAC7F,EAAE,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,EAAE,OAAO,KAAK;AACtD,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AACvC,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AACtC,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AAC5C,EAAE,IAAI,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AAC/D,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AAC5C,EAAE,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AACzD,EAAE,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AACvD,EAAE,OAAO,IAAI;AACb;AACA,MAAM,SAAS,GAAG,oBAAoB;AACtC,MAAM,cAAc,GAAG,uBAAuB;AAC9C,MAAM,OAAO,mBAAmB,IAAI,GAAG,EAAE;AACzC,SAAS,qBAAqB,CAAC,GAAG,EAAE;AACpC,EAAE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;AACxB,EAAE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;AAChC,EAAE,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE;AACrC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,SAAS,EAAE,CAAC;AAC5D,IAAI,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;AAC5B,EAAE;AACF,EAAE,IAAI,KAAK,CAAC,KAAK,IAAI,cAAc,EAAE;AACrC,IAAI,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE;AACjF,EAAE;AACF,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;AAClB,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;AAC1B;AACA,MAAM,eAAe,mBAAmB,IAAI,GAAG,EAAE;AACjD,IAAI,YAAY,GAAG,IAAI;AACvB,IAAI,eAAe,GAAG,IAAI;AAC1B,IAAI,kBAAkB,GAAG,IAAI;AAC7B,eAAe,SAAS,CAAC,YAAY,EAAE;AACvC,EAAE,MAAM,aAAa,GAAG;AACxB,IAAI,SAAS,EAAE,YAAY,CAAC,SAAS;AACrC,IAAI,MAAM,EAAE,YAAY,CAAC;AACzB,GAAG;AACH,EAAE,IAAI,YAAY,IAAI,eAAe,IAAI,kBAAkB,IAAI,kBAAkB,CAAC,SAAS,KAAK,aAAa,CAAC,SAAS,IAAI,kBAAkB,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM,EAAE;AAC/K,IAAI,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE;AAC/D,EAAE;AACF,EAAE,eAAe,EAAE,OAAO,EAAE;AAC5B,EAAE,YAAY,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC;AAChD,IAAI,SAAS,EAAE,aAAa,CAAC,SAAS;AACtC,IAAI,MAAM,EAAE,aAAa,CAAC;AAC1B,GAAG,CAAC;AACJ,EAAE,eAAe,GAAG,YAAY,CAAC,eAAe,CAAC;AACjD,IAAI,IAAI,EAAE,OAAO;AACjB,IAAI,SAAS,EAAE,qBAAqB;AACpC,IAAI,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,GAAG;AAC3C,GAAG,CAAC;AACJ,EAAE,kBAAkB,GAAG,aAAa;AACpC,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE;AAC7D;AACA,eAAe,oBAAoB,CAAC,GAAG,EAAE;AACzC,EAAE,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,EAAE;AACvC,IAAI,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AAC3D,EAAE;AACF,EAAE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;AACxB,EAAE,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;AACzC,EAAE,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,uBAAuB,EAAE;AAClE,IAAI,OAAO,MAAM,CAAC,IAAI;AACtB,EAAE;AACF,EAAE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE;AAC1C,EAAE,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,kCAAkC,CAAC;AAC1F,EAAE,IAAI,IAAI;AACV,EAAE,IAAI;AACN,IAAI,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;AACtC,MAAM,MAAM,EAAE,UAAU,CAAC,MAAM;AAC/B,MAAM,QAAQ,EAAE;AAChB,KAAK,CAAC;AACN,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;AACtB,MAAM,MAAM,IAAI,KAAK,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;AACxE,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AACnE,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,2BAA2B,EAAE;AAC7E,MAAM,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AAC7D,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE;AAC/C,IAAI,IAAI,MAAM,CAAC,UAAU,GAAG,2BAA2B,EAAE;AACzD,MAAM,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AAC7D,IAAI;AACJ,IAAI,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC;AACjC,EAAE,CAAC,SAAS;AACZ,IAAI,YAAY,CAAC,OAAO,CAAC;AACzB,EAAE;AACF,EAAE,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;AACpD,EAAE,IAAI,eAAe,CAAC,IAAI,GAAG,EAAE,EAAE;AACjC,IAAI,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;AACzD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;AACjC,MAAM,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3C,IAAI;AACJ,EAAE;AACF,EAAE,OAAO,IAAI;AACb;AACA,SAAS,uBAAuB,CAAC,KAAK,EAAE,KAAK,EAAE;AAC/C,EAAE,MAAM,IAAI,GAAG;AACf,IAAI,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;AACxC,IAAI,IAAI,EAAE,KAAK,CAAC,QAAQ;AACxB,IAAI,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;AACpC,IAAI,EAAE,EAAE,KAAK,CAAC;AACd,GAAG;AACH,EAAE,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE;AACrE,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,SAAS,EAAE,KAAK,CAAC,SAAS,KAAK,SAAS,GAAG,SAAS,GAAG,QAAQ;AACrE,MAAM,OAAO,EAAE,KAAK,CAAC,OAAO;AAC5B,MAAM,OAAO,EAAE,KAAK,CAAC,OAAO;AAC5B,MAAM,QAAQ,EAAE,KAAK,CAAC,SAAS,KAAK,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ;AAClE,MAAM,OAAO,EAAE,KAAK,IAAI,KAAK,CAAC;AAC9B,KAAK;AACL,EAAE,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,EAAE;AACzC,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,SAAS,EAAE,MAAM;AACvB,MAAM,OAAO,EAAE,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI;AACzC,KAAK;AACL,EAAE,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE;AAC5C,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,SAAS,EAAE,SAAS;AAC1B,MAAM,OAAO,EAAE,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI;AACzC,KAAK;AACL,EAAE;AACF,EAAE,OAAO;AACT,IAAI,GAAG,IAAI;AACX,IAAI,SAAS,EAAE,MAAM;AACrB,IAAI,OAAO,EAAE,KAAK,IAAI;AACtB,GAAG;AACH;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACjD,EAAE,MAAM,OAAO,GAAG,kBAAkB,EAAE;AACtC,EAAE,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,CAAC;AACxD,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE;AACrC,IAAI,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI;AACnC,IAAI,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa;AAC5C,IAAI,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM;AAC1C,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE;AAC9C,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,2DAA2D,CAAC;AACnF,IAAI;AACJ,IAAI,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,OAAO,EAAE;AACnD,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,iBAAiB,EAAE,OAAO,CAAC,4BAA4B,CAAC,CAAC;AACjF,IAAI;AACJ,IAAI,IAAI,gBAAgB;AACxB,IAAI,IAAI,uBAAuB,GAAG,IAAI;AACtC,IAAI,IAAI,UAAU,GAAG,IAAI;AACzB,IAAI,IAAI,aAAa,GAAG,IAAI;AAC5B,IAAI,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC;AACtD,IAAI,MAAM,IAAI,GAAG,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI;AAC5D,IAAI,MAAM,YAAY,GAAG,OAAO,IAAI,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI;AACjI,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;AACxD,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG,YAAY,EAAE,GAAG,IAAI,MAAM,CAAC,GAAG;AACpD,IAAI,MAAM,YAAY,GAAG,YAAY,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAClG,IAAI,MAAM,SAAS,GAAG,qBAAqB,CAAC,YAAY,CAAC;AACzD,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE;AAC5B,MAAM,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,IAAI,CAAC;AAClD,MAAM,OAAO,IAAI,QAAQ;AACzB,QAAQ,IAAI,CAAC,SAAS,CAAC;AACvB,UAAU,OAAO,EAAE,CAAC,oCAAoC,EAAE,UAAU,CAAC,EAAE,CAAC;AACxE,UAAU;AACV,SAAS,CAAC;AACV,QAAQ;AACR,UAAU,MAAM,EAAE,GAAG;AACrB,UAAU,OAAO,EAAE;AACnB,YAAY,cAAc,EAAE,kBAAkB;AAC9C,YAAY,aAAa,EAAE,MAAM,CAAC,UAAU;AAC5C;AACA;AACA,OAAO;AACP,IAAI;AACJ,IAAI,IAAI,OAAO,IAAI,IAAI,EAAE;AACzB,MAAM,IAAI,MAAM;AAChB,MAAM,IAAI;AACV,QAAQ,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC;AACrE,MAAM,CAAC,CAAC,OAAO,GAAG,EAAE;AACpB,QAAQ,OAAO,CAAC,KAAK,CAAC,CAAC,iCAAiC,EAAE,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC;AACtE,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;AAC1D,MAAM;AACN,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;AACrE,MAAM,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC;AAC1F,MAAM,UAAU,GAAG,OAAO,EAAE,KAAK,IAAI,IAAI;AACzC,MAAM,aAAa,GAAG,MAAM,CAAC,eAAe,IAAI,IAAI;AACpD,MAAM,IAAI,CAAC,YAAY,EAAE;AACzB,QAAQ,IAAI,OAAO,KAAK,OAAO,EAAE;AACjC,UAAU,MAAM,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC;AACxE,QAAQ,CAAC,MAAM;AACf,UAAU,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC;AACzD,QAAQ;AACR,MAAM;AACN,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,MAAM,GAAG,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,cAAc;AACzF,MAAM,IAAI,CAAC,SAAS,EAAE;AACtB,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;AAC9E,MAAM;AACN,MAAM,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC;AACtF,MAAM,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE;AACrD,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAC9E,MAAM;AACN,MAAM,uBAAuB,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,EAAE;AACxF,MAAM,IAAI;AACV,QAAQ,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;AACxD,QAAQ,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,sBAAsB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/E,QAAQ,gBAAgB,GAAG,KAAK;AAChC,MAAM,CAAC,CAAC,OAAO,GAAG,EAAE;AACpB,QAAQ,OAAO,CAAC,KAAK,CAAC,CAAC,sCAAsC,EAAE,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;AAC1D,MAAM;AACN,IAAI,CAAC,MAAM;AACX,MAAM,IAAI;AACV,QAAQ,gBAAgB,GAAG,MAAM,oBAAoB,CAAC,aAAa,CAAC;AACpE,MAAM,CAAC,CAAC,OAAO,GAAG,EAAE;AACpB,QAAQ,OAAO,CAAC,KAAK,CAAC,CAAC,gCAAgC,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;AAC/E,QAAQ,MAAM,KAAK;AACnB,UAAU,GAAG;AACb,UAAU,CAAC,2BAA2B,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;AACzF,SAAS;AACT,MAAM;AACN,IAAI;AACJ,IAAI,MAAM,SAAS,GAAG,WAAW,CAAC,eAAe;AACjD,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,uBAAuB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC/G,KAAK;AACL,IAAI,IAAI,YAAY,EAAE;AACtB,MAAM,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB;AACzE,QAAQ,QAAQ;AAChB,QAAQ,YAAY,CAAC,IAAI,CAAC;AAC1B,OAAO;AACP,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE;AACzB,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,+BAA+B,CAAC;AACzD,MAAM;AACN,IAAI;AACJ,IAAI,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,CAAC;AAC3F,IAAI,IAAI,uBAAuB,IAAI,CAAC,uBAAuB,CAAC,SAAS,EAAE;AACvE,MAAM,MAAM,SAAS,GAAG,uBAAuB,CAAC,EAAE;AAClD,MAAM,IAAI;AACV,QAAQ,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,gBAAgB,EAAE,YAAY,CAAC;AACnF,QAAQ,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;AACtF,MAAM,CAAC,CAAC,OAAO,GAAG,EAAE;AACpB,QAAQ,OAAO,CAAC,IAAI,CAAC,CAAC,iDAAiD,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;AAC3F,MAAM;AACN,IAAI;AACJ,IAAI,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC;AACvD,IAAI,IAAI,gBAAgB;AACxB,IAAI,IAAI;AACR,MAAM,gBAAgB,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,gBAAgB,EAAE,SAAS,EAAE;AAC5E,QAAQ,MAAM,EAAE,OAAO,CAAC;AACxB,OAAO,CAAC;AACR,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE;AAC7D,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE;AACpC,UAAU,MAAM,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC;AACnD,QAAQ;AACR,QAAQ,MAAM,KAAK;AACnB,UAAU,GAAG;AACb,UAAU,CAAC,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,qBAAqB,GAAG,GAAG,CAAC,CAAC,WAAW;AACnF,SAAS;AACT,MAAM;AACN,MAAM,MAAM,GAAG;AACf,IAAI;AACJ,IAAI,OAAO,IAAI,CAAC,gBAAgB,CAAC;AACjC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG;AACnC,IAAI,IAAI,GAAG,YAAY,8BAA8B,EAAE;AACvD,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC;AACnC,IAAI;AACJ,IAAI,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,eAAe;AACxE,IAAI,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,OAAO,CAAC;AAClD,IAAI,IAAI,GAAG,YAAY,SAAS,IAAI,OAAO,KAAK,cAAc,EAAE;AAChE,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,+BAA+B,CAAC;AACvD,IAAI;AACJ,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC;AAC7B,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-ODEutN30.js

@@ -0,0 +1,75 @@
+import { json } from '@sveltejs/kit';
+import './context-DKDYb-He.js';
+import { s as providers, L as LocalComputeServerStore } from './providers.server-MD7TK-zQ.js';
+import { z as requirePermission } from './access.server-BBglojso.js';
+import 'zod';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import './api-errors-agQVBoep.js';
+import '@selvajs/compute/core';
+import './utils2-D38XWwRv.js';
+
+function atRestSecretsCheck(report) {
+  const base = { id: "at-rest-secrets", label: "Compute server secrets" };
+  if (report === null) {
+    return {
+      ...base,
+      status: "not_applicable",
+      summary: "The active data provider does not encrypt secrets at this layer — nothing to verify."
+    };
+  }
+  if (report.ok) {
+    return {
+      ...base,
+      status: "ok",
+      summary: "All stored compute server API keys decrypt under the current SELVA_AT_REST_KEY."
+    };
+  }
+  const failed = report.failures.map((f) => `"${f.serverLabel}" (${f.reason}${f.cause ? `: ${f.cause}` : ""})`).join(", ");
+  const plaintext = report.plaintextFound;
+  return {
+    ...base,
+    status: "degraded",
+    summary: `${report.failures.length} compute server key(s) could not be loaded: ${failed}.`,
+    remediation: plaintext ? "A key is stored in plaintext on disk — re-enter it via /admin/compute so it is encrypted." : "The stored ciphertext does not match the current SELVA_AT_REST_KEY (rotated key or restored backup). Re-enter the affected keys via /admin/compute, or restore the original SELVA_AT_REST_KEY, then run this check again."
+  };
+}
+const GET = async ({ locals }) => {
+  requirePermission(locals, "instance_admin");
+  const checks = [];
+  const store = providers.data.computeServer;
+  if (store instanceof LocalComputeServerStore) {
+    try {
+      checks.push(atRestSecretsCheck(await store.verifySecrets()));
+    } catch (err) {
+      checks.push({
+        id: "at-rest-secrets",
+        label: "Compute server secrets",
+        status: "error",
+        summary: `Verification threw: ${err instanceof Error ? err.message : String(err)}`,
+        remediation: "Check server logs (`pm2 logs selva-compute`) for the underlying error."
+      });
+    }
+  } else {
+    checks.push(atRestSecretsCheck(null));
+  }
+  const rank = {
+    ok: 0,
+    not_applicable: 0,
+    degraded: 2,
+    error: 3
+  };
+  const overall = checks.reduce(
+    (worst, c) => rank[c.status] > rank[worst] ? c.status : worst,
+    "ok"
+  );
+  return json({ overall, checkedAt: (/* @__PURE__ */ new Date()).toISOString(), checks });
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts-ODEutN30.js.map

package/build/server/chunks/_server.ts-ODEutN30.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-ODEutN30.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/system/health/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport \"../../../../../../chunks/context.js\";\nimport { s as providers, L as LocalComputeServerStore } from \"../../../../../../chunks/providers.server.js\";\nimport { z as requirePermission } from \"../../../../../../chunks/access.server.js\";\nfunction atRestSecretsCheck(report) {\n  const base = { id: \"at-rest-secrets\", label: \"Compute server secrets\" };\n  if (report === null) {\n    return {\n      ...base,\n      status: \"not_applicable\",\n      summary: \"The active data provider does not encrypt secrets at this layer — nothing to verify.\"\n    };\n  }\n  if (report.ok) {\n    return {\n      ...base,\n      status: \"ok\",\n      summary: \"All stored compute server API keys decrypt under the current SELVA_AT_REST_KEY.\"\n    };\n  }\n  const failed = report.failures.map((f) => `\"${f.serverLabel}\" (${f.reason}${f.cause ? `: ${f.cause}` : \"\"})`).join(\", \");\n  const plaintext = report.plaintextFound;\n  return {\n    ...base,\n    status: \"degraded\",\n    summary: `${report.failures.length} compute server key(s) could not be loaded: ${failed}.`,\n    remediation: plaintext ? \"A key is stored in plaintext on disk — re-enter it via /admin/compute so it is encrypted.\" : \"The stored ciphertext does not match the current SELVA_AT_REST_KEY (rotated key or restored backup). Re-enter the affected keys via /admin/compute, or restore the original SELVA_AT_REST_KEY, then run this check again.\"\n  };\n}\nconst GET = async ({ locals }) => {\n  requirePermission(locals, \"instance_admin\");\n  const checks = [];\n  const store = providers.data.computeServer;\n  if (store instanceof LocalComputeServerStore) {\n    try {\n      checks.push(atRestSecretsCheck(await store.verifySecrets()));\n    } catch (err) {\n      checks.push({\n        id: \"at-rest-secrets\",\n        label: \"Compute server secrets\",\n        status: \"error\",\n        summary: `Verification threw: ${err instanceof Error ? err.message : String(err)}`,\n        remediation: \"Check server logs (`pm2 logs selva-compute`) for the underlying error.\"\n      });\n    }\n  } else {\n    checks.push(atRestSecretsCheck(null));\n  }\n  const rank = {\n    ok: 0,\n    not_applicable: 0,\n    degraded: 2,\n    error: 3\n  };\n  const overall = checks.reduce(\n    (worst, c) => rank[c.status] > rank[worst] ? c.status : worst,\n    \"ok\"\n  );\n  return json({ overall, checkedAt: (/* @__PURE__ */ new Date()).toISOString(), checks });\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIA,SAAS,kBAAkB,CAAC,MAAM,EAAE;AACpC,EAAE,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,wBAAwB,EAAE;AACzE,EAAE,IAAI,MAAM,KAAK,IAAI,EAAE;AACvB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,gBAAgB;AAC9B,MAAM,OAAO,EAAE;AACf,KAAK;AACL,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,EAAE,EAAE;AACjB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,IAAI;AAClB,MAAM,OAAO,EAAE;AACf,KAAK;AACL,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AAC1H,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc;AACzC,EAAE,OAAO;AACT,IAAI,GAAG,IAAI;AACX,IAAI,MAAM,EAAE,UAAU;AACtB,IAAI,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,4CAA4C,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9F,IAAI,WAAW,EAAE,SAAS,GAAG,2FAA2F,GAAG;AAC3H,GAAG;AACH;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,MAAM,GAAG,EAAE;AACnB,EAAE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa;AAC5C,EAAE,IAAI,KAAK,YAAY,uBAAuB,EAAE;AAChD,IAAI,IAAI;AACR,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;AAClE,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,MAAM,CAAC,IAAI,CAAC;AAClB,QAAQ,EAAE,EAAE,iBAAiB;AAC7B,QAAQ,KAAK,EAAE,wBAAwB;AACvC,QAAQ,MAAM,EAAE,OAAO;AACvB,QAAQ,OAAO,EAAE,CAAC,oBAAoB,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1F,QAAQ,WAAW,EAAE;AACrB,OAAO,CAAC;AACR,IAAI;AACJ,EAAE,CAAC,MAAM;AACT,IAAI,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;AACzC,EAAE;AACF,EAAE,MAAM,IAAI,GAAG;AACf,IAAI,EAAE,EAAE,CAAC;AACT,IAAI,cAAc,EAAE,CAAC;AACrB,IAAI,QAAQ,EAAE,CAAC;AACf,IAAI,KAAK,EAAE;AACX,GAAG;AACH,EAAE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM;AAC/B,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,KAAK;AACjE,IAAI;AACJ,GAAG;AACH,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC;AACzF;;;;"}

package/build/server/chunks/_server.ts-bONEWPMV.js

@@ -0,0 +1,105 @@
+import { error, json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { randomUUID } from 'node:crypto';
+import { f as flag, k as getOrganizationProvider, n as getProjectProvider, P as ProviderError } from './providers.server-MD7TK-zQ.js';
+import { u as requireInstanceAdmin } from './access.server-BBglojso.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-agQVBoep.js';
+import { s as slugify } from './slug-BGuFQjqe.js';
+import { S as SYSTEM_CONTEXT } from './context-DKDYb-He.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@selvajs/compute/core';
+import './utils2-D38XWwRv.js';
+
+const MAX_SLUG_ATTEMPTS = 25;
+function isSlugConflict(err) {
+  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);
+}
+function isNameConflict(err) {
+  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);
+}
+const CreatePlatformProjectBody = z.object({
+  name: z.string().min(1, "Project name is required").max(128).trim(),
+  description: z.string().max(2e3).optional(),
+  /**
+   * Org that physically hosts the project. Storage routing and compute
+   * resolution use this — but org membership in this org does NOT grant
+   * access. Visibility = 'platform' overrides those defaults.
+   *
+   * If omitted, the platform admin's first available org is used.
+   */
+  orgId: z.string().uuid().optional()
+});
+const GET = async ({ locals }) => {
+  requireInstanceAdmin(locals);
+  if (!flag("ENABLE_PLATFORM_PROJECTS")) throw error(404, "Not found");
+  try {
+    const orgs = await getOrganizationProvider().listOrgs(SYSTEM_CONTEXT, { limit: 1e3 });
+    const all = [];
+    for (const org of orgs.items) {
+      const page = await getProjectProvider().listProjects(SYSTEM_CONTEXT, org.id, {
+        limit: 1e3
+      });
+      for (const p of page.items) {
+        if (p.visibility === "platform") all.push(p);
+      }
+    }
+    return json({ projects: all });
+  } catch (err) {
+    handleApiError(err, "Failed to list platform projects");
+  }
+};
+const POST = async ({ request, locals }) => {
+  const user = requireInstanceAdmin(locals);
+  if (!flag("ENABLE_PLATFORM_PROJECTS")) throw error(404, "Not found");
+  const ctx = locals.ctx;
+  const body = await request.json().catch(() => null);
+  const parsed = CreatePlatformProjectBody.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  const hostOrgId = parsed.data.orgId ?? ctx.actingOrgId;
+  if (!hostOrgId) {
+    throw error(400, "A host orgId is required (no active organization in context).");
+  }
+  const hostOrg = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, hostOrgId);
+  if (!hostOrg) throw error(400, `Host organization '${hostOrgId}' not found.`);
+  const projectStore = getProjectProvider();
+  const baseSlug = slugify(parsed.data.name) || "platform-project";
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const projectId = randomUUID();
+  for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {
+    const slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;
+    const project = {
+      id: projectId,
+      orgId: hostOrgId,
+      name: parsed.data.name,
+      slug,
+      description: parsed.data.description,
+      visibility: "platform",
+      ownerId: user.id,
+      createdBy: user.id,
+      updatedBy: user.id,
+      autoJoinOnUpload: false,
+      createdAt: now,
+      updatedAt: now,
+      deletedAt: null
+    };
+    try {
+      await projectStore.createProject(SYSTEM_CONTEXT, project);
+      return json(project, { status: 201 });
+    } catch (err) {
+      if (isNameConflict(err)) {
+        throw error(409, "A project with that name already exists in the host organization.");
+      }
+      if (isSlugConflict(err)) continue;
+      handleApiError(err, "Failed to create platform project");
+    }
+  }
+  throw error(409, "Could not pick a unique project slug after several attempts.");
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts-bONEWPMV.js.map

package/build/server/chunks/_server.ts-bONEWPMV.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-bONEWPMV.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/projects/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\nimport { f as flag, k as getOrganizationProvider, n as getProjectProvider, P as ProviderError } from \"../../../../../chunks/providers.server.js\";\nimport { u as requireInstanceAdmin } from \"../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../chunks/api-errors.js\";\nimport { s as slugify } from \"../../../../../chunks/slug.js\";\nimport { S as SYSTEM_CONTEXT } from \"../../../../../chunks/context.js\";\nconst MAX_SLUG_ATTEMPTS = 25;\nfunction isSlugConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);\n}\nfunction isNameConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);\n}\nconst CreatePlatformProjectBody = z.object({\n  name: z.string().min(1, \"Project name is required\").max(128).trim(),\n  description: z.string().max(2e3).optional(),\n  /**\n   * Org that physically hosts the project. Storage routing and compute\n   * resolution use this — but org membership in this org does NOT grant\n   * access. Visibility = 'platform' overrides those defaults.\n   *\n   * If omitted, the platform admin's first available org is used.\n   */\n  orgId: z.string().uuid().optional()\n});\nconst GET = async ({ locals }) => {\n  requireInstanceAdmin(locals);\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) throw error(404, \"Not found\");\n  try {\n    const orgs = await getOrganizationProvider().listOrgs(SYSTEM_CONTEXT, { limit: 1e3 });\n    const all = [];\n    for (const org of orgs.items) {\n      const page = await getProjectProvider().listProjects(SYSTEM_CONTEXT, org.id, {\n        limit: 1e3\n      });\n      for (const p of page.items) {\n        if (p.visibility === \"platform\") all.push(p);\n      }\n    }\n    return json({ projects: all });\n  } catch (err) {\n    handleApiError(err, \"Failed to list platform projects\");\n  }\n};\nconst POST = async ({ request, locals }) => {\n  const user = requireInstanceAdmin(locals);\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) throw error(404, \"Not found\");\n  const ctx = locals.ctx;\n  const body = await request.json().catch(() => null);\n  const parsed = CreatePlatformProjectBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const hostOrgId = parsed.data.orgId ?? ctx.actingOrgId;\n  if (!hostOrgId) {\n    throw error(400, \"A host orgId is required (no active organization in context).\");\n  }\n  const hostOrg = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, hostOrgId);\n  if (!hostOrg) throw error(400, `Host organization '${hostOrgId}' not found.`);\n  const projectStore = getProjectProvider();\n  const baseSlug = slugify(parsed.data.name) || \"platform-project\";\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const projectId = randomUUID();\n  for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {\n    const slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;\n    const project = {\n      id: projectId,\n      orgId: hostOrgId,\n      name: parsed.data.name,\n      slug,\n      description: parsed.data.description,\n      visibility: \"platform\",\n      ownerId: user.id,\n      createdBy: user.id,\n      updatedBy: user.id,\n      autoJoinOnUpload: false,\n      createdAt: now,\n      updatedAt: now,\n      deletedAt: null\n    };\n    try {\n      await projectStore.createProject(SYSTEM_CONTEXT, project);\n      return json(project, { status: 201 });\n    } catch (err) {\n      if (isNameConflict(err)) {\n        throw error(409, \"A project with that name already exists in the host organization.\");\n      }\n      if (isSlugConflict(err)) continue;\n      handleApiError(err, \"Failed to create platform project\");\n    }\n  }\n  throw error(409, \"Could not pick a unique project slug after several attempts.\");\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAQA,MAAM,iBAAiB,GAAG,EAAE;AAC5B,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;AAC3C,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACrE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;AAC7C;AACA;AACA;AACA;AACA;AACA;AACA;AACA,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ;AACnC,CAAC,CAAC;AACG,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC;AACtE,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,uBAAuB,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACzF,IAAI,MAAM,GAAG,GAAG,EAAE;AAClB,IAAI,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE;AAClC,MAAM,MAAM,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,EAAE;AACnF,QAAQ,KAAK,EAAE;AACf,OAAO,CAAC;AACR,MAAM,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE;AAClC,QAAQ,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACpD,MAAM;AACN,IAAI;AACJ,IAAI,OAAO,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,kCAAkC,CAAC;AAC3D,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC3C,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC;AACtE,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1D,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,WAAW;AACxD,EAAE,IAAI,CAAC,SAAS,EAAE;AAClB,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,+DAA+D,CAAC;AACrF,EAAE;AACF,EAAE,MAAM,OAAO,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC;AACnF,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,mBAAmB,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;AAC/E,EAAE,MAAM,YAAY,GAAG,kBAAkB,EAAE;AAC3C,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,kBAAkB;AAClE,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,SAAS,GAAG,UAAU,EAAE;AAChC,EAAE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,iBAAiB,EAAE,OAAO,EAAE,EAAE;AAChE,IAAI,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;AACxE,IAAI,MAAM,OAAO,GAAG;AACpB,MAAM,EAAE,EAAE,SAAS;AACnB,MAAM,KAAK,EAAE,SAAS;AACtB,MAAM,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC5B,MAAM,IAAI;AACV,MAAM,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AAC1C,MAAM,UAAU,EAAE,UAAU;AAC5B,MAAM,OAAO,EAAE,IAAI,CAAC,EAAE;AACtB,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,gBAAgB,EAAE,KAAK;AAC7B,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE;AACjB,KAAK;AACL,IAAI,IAAI;AACR,MAAM,MAAM,YAAY,CAAC,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC;AAC/D,MAAM,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,mEAAmE,CAAC;AAC7F,MAAM;AACN,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,MAAM,cAAc,CAAC,GAAG,EAAE,mCAAmC,CAAC;AAC9D,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,8DAA8D,CAAC;AAClF;;;;"}

package/build/server/chunks/_server.ts-hg9WxMNg.js

@@ -0,0 +1,36 @@
+import { error, redirect } from '@sveltejs/kit';
+import { c as getAuthProvider } from './providers.server-MD7TK-zQ.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import './context-DKDYb-He.js';
+import 'zod';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+const ALLOWED_PROVIDERS = ["google", "github", "azure", "gitlab"];
+function isAllowedProvider(value) {
+  return value !== null && ALLOWED_PROVIDERS.includes(value);
+}
+const GET = async ({ url }) => {
+  const provider = url.searchParams.get("provider");
+  if (!isAllowedProvider(provider)) {
+    throw error(400, `Invalid provider. Allowed: ${ALLOWED_PROVIDERS.join(", ")}`);
+  }
+  const oauth = getAuthProvider().oauth;
+  if (!oauth) {
+    throw error(501, "OAuth is not supported by the configured auth provider.");
+  }
+  const redirectTo = url.searchParams.get("redirectTo") ?? "/library";
+  const callbackUrl = new URL("/auth/supabase/callback", url.origin);
+  if (redirectTo.startsWith("/")) {
+    callbackUrl.searchParams.set("redirectTo", redirectTo);
+  }
+  const authorizationUrl = await oauth.getOAuthAuthorizationUrl(provider, callbackUrl.toString());
+  redirect(303, authorizationUrl);
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts-hg9WxMNg.js.map

package/build/server/chunks/_server.ts-hg9WxMNg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-hg9WxMNg.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/auth/supabase/start/_server.ts.js"],"sourcesContent":["import { error, redirect } from \"@sveltejs/kit\";\nimport { c as getAuthProvider } from \"../../../../../chunks/providers.server.js\";\nconst ALLOWED_PROVIDERS = [\"google\", \"github\", \"azure\", \"gitlab\"];\nfunction isAllowedProvider(value) {\n  return value !== null && ALLOWED_PROVIDERS.includes(value);\n}\nconst GET = async ({ url }) => {\n  const provider = url.searchParams.get(\"provider\");\n  if (!isAllowedProvider(provider)) {\n    throw error(400, `Invalid provider. Allowed: ${ALLOWED_PROVIDERS.join(\", \")}`);\n  }\n  const oauth = getAuthProvider().oauth;\n  if (!oauth) {\n    throw error(501, \"OAuth is not supported by the configured auth provider.\");\n  }\n  const redirectTo = url.searchParams.get(\"redirectTo\") ?? \"/library\";\n  const callbackUrl = new URL(\"/auth/supabase/callback\", url.origin);\n  if (redirectTo.startsWith(\"/\")) {\n    callbackUrl.searchParams.set(\"redirectTo\", redirectTo);\n  }\n  const authorizationUrl = await oauth.getOAuthAuthorizationUrl(provider, callbackUrl.toString());\n  redirect(303, authorizationUrl);\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;AAEA,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;AACjE,SAAS,iBAAiB,CAAC,KAAK,EAAE;AAClC,EAAE,OAAO,KAAK,KAAK,IAAI,IAAI,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC;AAC5D;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,KAAK;AAC/B,EAAE,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;AACnD,EAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE;AACpC,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,2BAA2B,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClF,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC,KAAK;AACvC,EAAE,IAAI,CAAC,KAAK,EAAE;AACd,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,yDAAyD,CAAC;AAC/E,EAAE;AACF,EAAE,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,UAAU;AACrE,EAAE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,yBAAyB,EAAE,GAAG,CAAC,MAAM,CAAC;AACpE,EAAE,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;AAClC,IAAI,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC;AAC1D,EAAE;AACF,EAAE,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,wBAAwB,CAAC,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC;AACjG,EAAE,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC;AACjC;;;;"}

package/build/server/chunks/_server.ts-t9_veBtJ.js

@@ -0,0 +1,40 @@
+import { error, json } from '@sveltejs/kit';
+import { p as getUserProfileStore } from './providers.server-MD7TK-zQ.js';
+import { h as handleApiError } from './api-errors-agQVBoep.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import './context-DKDYb-He.js';
+import 'zod';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@selvajs/compute/core';
+import './utils2-D38XWwRv.js';
+
+const POST = async ({ params, locals }) => {
+  if (!locals.user || !locals.ctx) throw error(401, "Unauthorized");
+  const guid = params.guid;
+  if (!guid) throw error(400, "Missing definition guid");
+  try {
+    await getUserProfileStore().starDefinition(locals.ctx, locals.user.id, guid);
+    return json({ starred: true });
+  } catch (err) {
+    handleApiError(err, "Failed to star definition");
+  }
+};
+const DELETE = async ({ params, locals }) => {
+  if (!locals.user || !locals.ctx) throw error(401, "Unauthorized");
+  const guid = params.guid;
+  if (!guid) throw error(400, "Missing definition guid");
+  try {
+    await getUserProfileStore().unstarDefinition(locals.ctx, locals.user.id, guid);
+    return json({ starred: false });
+  } catch (err) {
+    handleApiError(err, "Failed to unstar definition");
+  }
+};
+
+export { DELETE, POST };
+//# sourceMappingURL=_server.ts-t9_veBtJ.js.map