@selvajs/selva 4.11.0 → 4.12.0

package/build/server/chunks/chunks/activity.js--RZ2Glwe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity.js--RZ2Glwe.js","sources":["../../../../.svelte-kit/output/server/chunks/activity.js"],"sourcesContent":["import { d as spread_props } from \"./server.js\";\nimport { n as Icon } from \"./utils2.js\";\n//#region ../../node_modules/.pnpm/@lucide+svelte@1.31.0_svelte@5.56.8_@typescript-eslint+types@8.67.0_/node_modules/@lucide/svelte/dist/icons/activity.svelte\nfunction Activity($$renderer, $$props) {\n\tlet { $$slots, $$events, ...props } = $$props;\n\tIcon($$renderer, spread_props([\n\t\t{ name: \"activity\" },\n\t\tprops,\n\t\t{ iconNode: [[\"path\", { \"d\": \"M22 12h-2.48a2 2 0 0 0-1.93 1.46l-2.35 8.36a.25.25 0 0 1-.48 0L9.24 2.18a.25.25 0 0 0-.48 0l-2.35 8.36A2 2 0 0 1 4.49 12H2\" }]] }\n\t]));\n}\n//#endregion\nexport { Activity as t };\n"],"names":[],"mappings":";;;AAEA;AACA,SAAS,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE;AACvC,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,GAAG,OAAO;AAC9C,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC;AAC/B,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;AACtB,EAAE,KAAK;AACP,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,4HAA4H,EAAE,CAAC,CAAC;AAC/J,EAAE,CAAC,CAAC;AACJ;;;;"}

package/build/server/chunks/chunks/admin-auth.server.js-Bmh7GHbv.js

@@ -0,0 +1,175 @@
+import { b as private_env } from './shared-server.js-D2MyEK0i.js';
+import './src.js-B12bUNyu.js';
+import './providers.server.js-BSOw3gYp.js';
+import 'node:dns/promises';
+import 'node:net';
+import { error } from '@sveltejs/kit';
+
+/** Each limiter owns its own bucket `Map`, so distinct key-spaces don't collide. */
+function createComputeRateLimiter(config) {
+	const { windowMs, maxPerWindow } = config;
+	const maxKeys = Math.max(1, Math.floor(config.maxKeys ?? 1e5));
+	const sweepIntervalMs = Math.max(0, Math.floor(config.sweepIntervalMs ?? windowMs));
+	const resolvedConfig = Object.freeze({
+		...config,
+		maxKeys,
+		sweepIntervalMs
+	});
+	const buckets = /* @__PURE__ */ new Map();
+	let nextSweepAt = Number.POSITIVE_INFINITY;
+	/**
+	* Drop dead buckets, then enforce the hard cap. Runs at most once per
+	* `sweepIntervalMs` — except when the cap is already breached, which must be
+	* enforced on the spot regardless of the sweep clock.
+	*
+	* `headroom` is how many buckets the caller is about to insert. The cap is
+	* enforced against the post-insert size, so `maxKeys` is a true ceiling rather
+	* than one the very next write steps over.
+	*/
+	function maybeSweep(now, headroom = 0) {
+		const budget = Math.max(0, maxKeys - headroom);
+		if (!(sweepIntervalMs > 0 && now >= nextSweepAt) && buckets.size <= budget) return;
+		for (const [key, entry] of buckets) if (now > entry.resetAt) buckets.delete(key);
+		if (sweepIntervalMs > 0) nextSweepAt = now + sweepIntervalMs;
+		if (buckets.size > budget) {
+			const byResetAsc = [...buckets.entries()].sort((a, b) => a[1].resetAt - b[1].resetAt);
+			for (let i = 0; i < byResetAsc.length - budget; i++) buckets.delete(byResetAsc[i][0]);
+		}
+	}
+	return {
+		config: resolvedConfig,
+		check(key) {
+			const now = Date.now();
+			maybeSweep(now, buckets.has(key) ? 0 : 1);
+			const entry = buckets.get(key);
+			if (!entry || now > entry.resetAt) {
+				buckets.set(key, {
+					count: 1,
+					resetAt: now + windowMs
+				});
+				if (sweepIntervalMs > 0 && nextSweepAt === Number.POSITIVE_INFINITY) nextSweepAt = now + sweepIntervalMs;
+				return { allowed: true };
+			}
+			if (entry.count >= maxPerWindow) return {
+				allowed: false,
+				retryAfter: Math.ceil((entry.resetAt - now) / 1e3)
+			};
+			entry.count += 1;
+			return { allowed: true };
+		},
+		peek(key) {
+			const now = Date.now();
+			maybeSweep(now);
+			const entry = buckets.get(key);
+			if (!entry || now > entry.resetAt) return { allowed: true };
+			if (entry.count >= maxPerWindow) return {
+				allowed: false,
+				retryAfter: Math.ceil((entry.resetAt - now) / 1e3)
+			};
+			return { allowed: true };
+		},
+		clear(key) {
+			buckets.delete(key);
+		},
+		count(key) {
+			const entry = buckets.get(key);
+			if (!entry || Date.now() > entry.resetAt) return 0;
+			return entry.count;
+		},
+		reset() {
+			buckets.clear();
+			nextSweepAt = Number.POSITIVE_INFINITY;
+		},
+		size() {
+			return buckets.size;
+		}
+	};
+}
+//#endregion
+//#region ../server/src/http/body-size.ts
+/**
+* True when the request's declared `Content-Length` exceeds `maxBytes`. Call it
+* BEFORE reading the body, so a huge payload aimed at a small-body endpoint
+* can't burn memory; the route maps `true` to its transport's 413.
+*
+* This is the per-route lower bound. A global limit (e.g. adapter-node's
+* `BODY_SIZE_LIMIT`) has to clear the largest legitimate upload, so every small
+* JSON endpoint would otherwise inherit that ceiling.
+*
+* Requests without `Content-Length` (chunked encoding) slip past this check —
+* the global limit is the backstop there.
+*/
+function declaredBodySizeExceeds(headers, maxBytes) {
+	const declared = Number(headers.get("content-length"));
+	return Number.isFinite(declared) && declared > maxBytes;
+}
+//#endregion
+//#region src/lib/server/admin-auth.server.ts
+var SESSION_COOKIE_NAME = "admin_session";
+var SESSION_MAX_AGE_MS = 288e5;
+var REFRESH_COOKIE_NAME = "admin_refresh";
+var REFRESH_MAX_AGE_MS = 2592e6;
+var loginRateLimiter = createComputeRateLimiter({
+	windowMs: 9e5,
+	maxPerWindow: 5
+});
+function checkRateLimit(ip) {
+	return loginRateLimiter.peek(ip);
+}
+function recordFailedAttempt(ip) {
+	loginRateLimiter.check(ip);
+}
+function clearRateLimit(ip) {
+	loginRateLimiter.clear(ip);
+}
+function setSessionCookie(cookies, sessionToken) {
+	const isSecure = process.env.NODE_ENV === "production" && private_env.ALLOW_INSECURE_COOKIES !== "true";
+	cookies.set(SESSION_COOKIE_NAME, sessionToken, {
+		path: "/",
+		httpOnly: true,
+		sameSite: "lax",
+		secure: isSecure,
+		maxAge: SESSION_MAX_AGE_MS / 1e3
+	});
+}
+/** Read before `destroySession` — logout needs the token to revoke it provider-side. */
+function getSessionToken(cookies) {
+	return cookies.get(SESSION_COOKIE_NAME);
+}
+function destroySession(cookies) {
+	cookies.delete(SESSION_COOKIE_NAME, { path: "/" });
+	cookies.delete(REFRESH_COOKIE_NAME, { path: "/" });
+}
+/**
+* Refresh-token cookie for the OAuth/Supabase flow — `hooks.server.ts`'s
+* session-refresh middleware swaps an expired access token for a fresh one
+* using this. Local/HMAC sessions don't need it.
+*/
+function setRefreshCookie(cookies, refreshToken) {
+	const isSecure = process.env.NODE_ENV === "production" && private_env.ALLOW_INSECURE_COOKIES !== "true";
+	cookies.set(REFRESH_COOKIE_NAME, refreshToken, {
+		path: "/",
+		httpOnly: true,
+		sameSite: "lax",
+		secure: isSecure,
+		maxAge: REFRESH_MAX_AGE_MS / 1e3
+	});
+}
+function getRefreshToken(cookies) {
+	return cookies.get(REFRESH_COOKIE_NAME);
+}
+function clearRefreshCookie(cookies) {
+	cookies.delete(REFRESH_COOKIE_NAME, { path: "/" });
+}
+/**
+* Rejects a request whose declared `Content-Length` exceeds `maxBytes` — a
+* per-route lower bound under the global adapter-node `BODY_SIZE_LIMIT`
+* (which must stay high enough for 50MB .gh uploads). Throws 413 before the
+* body is read; see `declaredBodySizeExceeds` for the chunked-encoding caveat.
+*/
+function requireMaxBodySize(request, maxBytes) {
+	if (declaredBodySizeExceeds(request.headers, maxBytes)) throw error(413, `Request body exceeds the limit for this endpoint.`);
+}
+
+export { setRefreshCookie as a, checkRateLimit as b, clearRefreshCookie as c, clearRateLimit as d, getSessionToken as e, destroySession as f, getRefreshToken as g, createComputeRateLimiter as h, requireMaxBodySize as i, recordFailedAttempt as r, setSessionCookie as s };
+//# sourceMappingURL=admin-auth.server.js-Bmh7GHbv.js.map

package/build/server/chunks/chunks/admin-auth.server.js-Bmh7GHbv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-auth.server.js-Bmh7GHbv.js","sources":["../../../../.svelte-kit/output/server/chunks/admin-auth.server.js"],"sourcesContent":["import { t as private_env } from \"./shared-server.js\";\nimport \"./compute.js\";\nimport { error } from \"@sveltejs/kit\";\n/** Each limiter owns its own bucket `Map`, so distinct key-spaces don't collide. */\nfunction createComputeRateLimiter(config) {\n\tconst { windowMs, maxPerWindow } = config;\n\tconst maxKeys = Math.max(1, Math.floor(config.maxKeys ?? 1e5));\n\tconst sweepIntervalMs = Math.max(0, Math.floor(config.sweepIntervalMs ?? windowMs));\n\tconst resolvedConfig = Object.freeze({\n\t\t...config,\n\t\tmaxKeys,\n\t\tsweepIntervalMs\n\t});\n\tconst buckets = /* @__PURE__ */ new Map();\n\tlet nextSweepAt = Number.POSITIVE_INFINITY;\n\t/**\n\t* Drop dead buckets, then enforce the hard cap. Runs at most once per\n\t* `sweepIntervalMs` — except when the cap is already breached, which must be\n\t* enforced on the spot regardless of the sweep clock.\n\t*\n\t* `headroom` is how many buckets the caller is about to insert. The cap is\n\t* enforced against the post-insert size, so `maxKeys` is a true ceiling rather\n\t* than one the very next write steps over.\n\t*/\n\tfunction maybeSweep(now, headroom = 0) {\n\t\tconst budget = Math.max(0, maxKeys - headroom);\n\t\tif (!(sweepIntervalMs > 0 && now >= nextSweepAt) && buckets.size <= budget) return;\n\t\tfor (const [key, entry] of buckets) if (now > entry.resetAt) buckets.delete(key);\n\t\tif (sweepIntervalMs > 0) nextSweepAt = now + sweepIntervalMs;\n\t\tif (buckets.size > budget) {\n\t\t\tconst byResetAsc = [...buckets.entries()].sort((a, b) => a[1].resetAt - b[1].resetAt);\n\t\t\tfor (let i = 0; i < byResetAsc.length - budget; i++) buckets.delete(byResetAsc[i][0]);\n\t\t}\n\t}\n\treturn {\n\t\tconfig: resolvedConfig,\n\t\tcheck(key) {\n\t\t\tconst now = Date.now();\n\t\t\tmaybeSweep(now, buckets.has(key) ? 0 : 1);\n\t\t\tconst entry = buckets.get(key);\n\t\t\tif (!entry || now > entry.resetAt) {\n\t\t\t\tbuckets.set(key, {\n\t\t\t\t\tcount: 1,\n\t\t\t\t\tresetAt: now + windowMs\n\t\t\t\t});\n\t\t\t\tif (sweepIntervalMs > 0 && nextSweepAt === Number.POSITIVE_INFINITY) nextSweepAt = now + sweepIntervalMs;\n\t\t\t\treturn { allowed: true };\n\t\t\t}\n\t\t\tif (entry.count >= maxPerWindow) return {\n\t\t\t\tallowed: false,\n\t\t\t\tretryAfter: Math.ceil((entry.resetAt - now) / 1e3)\n\t\t\t};\n\t\t\tentry.count += 1;\n\t\t\treturn { allowed: true };\n\t\t},\n\t\tpeek(key) {\n\t\t\tconst now = Date.now();\n\t\t\tmaybeSweep(now);\n\t\t\tconst entry = buckets.get(key);\n\t\t\tif (!entry || now > entry.resetAt) return { allowed: true };\n\t\t\tif (entry.count >= maxPerWindow) return {\n\t\t\t\tallowed: false,\n\t\t\t\tretryAfter: Math.ceil((entry.resetAt - now) / 1e3)\n\t\t\t};\n\t\t\treturn { allowed: true };\n\t\t},\n\t\tclear(key) {\n\t\t\tbuckets.delete(key);\n\t\t},\n\t\tcount(key) {\n\t\t\tconst entry = buckets.get(key);\n\t\t\tif (!entry || Date.now() > entry.resetAt) return 0;\n\t\t\treturn entry.count;\n\t\t},\n\t\treset() {\n\t\t\tbuckets.clear();\n\t\t\tnextSweepAt = Number.POSITIVE_INFINITY;\n\t\t},\n\t\tsize() {\n\t\t\treturn buckets.size;\n\t\t}\n\t};\n}\n//#endregion\n//#region ../server/src/http/body-size.ts\n/**\n* True when the request's declared `Content-Length` exceeds `maxBytes`. Call it\n* BEFORE reading the body, so a huge payload aimed at a small-body endpoint\n* can't burn memory; the route maps `true` to its transport's 413.\n*\n* This is the per-route lower bound. A global limit (e.g. adapter-node's\n* `BODY_SIZE_LIMIT`) has to clear the largest legitimate upload, so every small\n* JSON endpoint would otherwise inherit that ceiling.\n*\n* Requests without `Content-Length` (chunked encoding) slip past this check —\n* the global limit is the backstop there.\n*/\nfunction declaredBodySizeExceeds(headers, maxBytes) {\n\tconst declared = Number(headers.get(\"content-length\"));\n\treturn Number.isFinite(declared) && declared > maxBytes;\n}\n//#endregion\n//#region src/lib/server/admin-auth.server.ts\nvar SESSION_COOKIE_NAME = \"admin_session\";\nvar SESSION_MAX_AGE_MS = 288e5;\nvar REFRESH_COOKIE_NAME = \"admin_refresh\";\nvar REFRESH_MAX_AGE_MS = 2592e6;\nvar loginRateLimiter = createComputeRateLimiter({\n\twindowMs: 9e5,\n\tmaxPerWindow: 5\n});\nfunction checkRateLimit(ip) {\n\treturn loginRateLimiter.peek(ip);\n}\nfunction recordFailedAttempt(ip) {\n\tloginRateLimiter.check(ip);\n}\nfunction clearRateLimit(ip) {\n\tloginRateLimiter.clear(ip);\n}\nfunction setSessionCookie(cookies, sessionToken) {\n\tconst isSecure = process.env.NODE_ENV === \"production\" && private_env.ALLOW_INSECURE_COOKIES !== \"true\";\n\tcookies.set(SESSION_COOKIE_NAME, sessionToken, {\n\t\tpath: \"/\",\n\t\thttpOnly: true,\n\t\tsameSite: \"lax\",\n\t\tsecure: isSecure,\n\t\tmaxAge: SESSION_MAX_AGE_MS / 1e3\n\t});\n}\n/** Read before `destroySession` — logout needs the token to revoke it provider-side. */\nfunction getSessionToken(cookies) {\n\treturn cookies.get(SESSION_COOKIE_NAME);\n}\nfunction destroySession(cookies) {\n\tcookies.delete(SESSION_COOKIE_NAME, { path: \"/\" });\n\tcookies.delete(REFRESH_COOKIE_NAME, { path: \"/\" });\n}\n/**\n* Refresh-token cookie for the OAuth/Supabase flow — `hooks.server.ts`'s\n* session-refresh middleware swaps an expired access token for a fresh one\n* using this. Local/HMAC sessions don't need it.\n*/\nfunction setRefreshCookie(cookies, refreshToken) {\n\tconst isSecure = process.env.NODE_ENV === \"production\" && private_env.ALLOW_INSECURE_COOKIES !== \"true\";\n\tcookies.set(REFRESH_COOKIE_NAME, refreshToken, {\n\t\tpath: \"/\",\n\t\thttpOnly: true,\n\t\tsameSite: \"lax\",\n\t\tsecure: isSecure,\n\t\tmaxAge: REFRESH_MAX_AGE_MS / 1e3\n\t});\n}\nfunction getRefreshToken(cookies) {\n\treturn cookies.get(REFRESH_COOKIE_NAME);\n}\nfunction clearRefreshCookie(cookies) {\n\tcookies.delete(REFRESH_COOKIE_NAME, { path: \"/\" });\n}\n/**\n* Rejects a request whose declared `Content-Length` exceeds `maxBytes` — a\n* per-route lower bound under the global adapter-node `BODY_SIZE_LIMIT`\n* (which must stay high enough for 50MB .gh uploads). Throws 413 before the\n* body is read; see `declaredBodySizeExceeds` for the chunked-encoding caveat.\n*/\nfunction requireMaxBodySize(request, maxBytes) {\n\tif (declaredBodySizeExceeds(request.headers, maxBytes)) throw error(413, `Request body exceeds the limit for this endpoint.`);\n}\n//#endregion\nexport { getRefreshToken as a, requireMaxBodySize as c, createComputeRateLimiter as d, destroySession as i, setRefreshCookie as l, clearRateLimit as n, getSessionToken as o, clearRefreshCookie as r, recordFailedAttempt as s, checkRateLimit as t, setSessionCookie as u };\n"],"names":[],"mappings":";;;;;;;AAGA;AACA,SAAS,wBAAwB,CAAC,MAAM,EAAE;AAC1C,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,MAAM;AAC1C,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;AAC/D,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,IAAI,QAAQ,CAAC,CAAC;AACpF,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;AACtC,EAAE,GAAG,MAAM;AACX,EAAE,OAAO;AACT,EAAE;AACF,EAAE,CAAC;AACH,CAAC,MAAM,OAAO,mBAAmB,IAAI,GAAG,EAAE;AAC1C,CAAC,IAAI,WAAW,GAAG,MAAM,CAAC,iBAAiB;AAC3C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,CAAC,SAAS,UAAU,CAAC,GAAG,EAAE,QAAQ,GAAG,CAAC,EAAE;AACxC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;AAChD,EAAE,IAAI,EAAE,eAAe,GAAG,CAAC,IAAI,GAAG,IAAI,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,IAAI,MAAM,EAAE;AAC9E,EAAE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;AAClF,EAAE,IAAI,eAAe,GAAG,CAAC,EAAE,WAAW,GAAG,GAAG,GAAG,eAAe;AAC9D,EAAE,IAAI,OAAO,CAAC,IAAI,GAAG,MAAM,EAAE;AAC7B,GAAG,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACxF,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxF,EAAE;AACF,CAAC;AACD,CAAC,OAAO;AACR,EAAE,MAAM,EAAE,cAAc;AACxB,EAAE,KAAK,CAAC,GAAG,EAAE;AACb,GAAG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;AACzB,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC5C,GAAG,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;AACjC,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE;AACtC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;AACrB,KAAK,KAAK,EAAE,CAAC;AACb,KAAK,OAAO,EAAE,GAAG,GAAG;AACpB,KAAK,CAAC;AACN,IAAI,IAAI,eAAe,GAAG,CAAC,IAAI,WAAW,KAAK,MAAM,CAAC,iBAAiB,EAAE,WAAW,GAAG,GAAG,GAAG,eAAe;AAC5G,IAAI,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;AAC5B,GAAG;AACH,GAAG,IAAI,KAAK,CAAC,KAAK,IAAI,YAAY,EAAE,OAAO;AAC3C,IAAI,OAAO,EAAE,KAAK;AAClB,IAAI,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,IAAI,GAAG;AACrD,IAAI;AACJ,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC;AACnB,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;AAC3B,EAAE,CAAC;AACH,EAAE,IAAI,CAAC,GAAG,EAAE;AACZ,GAAG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;AACzB,GAAG,UAAU,CAAC,GAAG,CAAC;AAClB,GAAG,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;AACjC,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;AAC9D,GAAG,IAAI,KAAK,CAAC,KAAK,IAAI,YAAY,EAAE,OAAO;AAC3C,IAAI,OAAO,EAAE,KAAK;AAClB,IAAI,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,IAAI,GAAG;AACrD,IAAI;AACJ,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;AAC3B,EAAE,CAAC;AACH,EAAE,KAAK,CAAC,GAAG,EAAE;AACb,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;AACtB,EAAE,CAAC;AACH,EAAE,KAAK,CAAC,GAAG,EAAE;AACb,GAAG,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;AACjC,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC;AACrD,GAAG,OAAO,KAAK,CAAC,KAAK;AACrB,EAAE,CAAC;AACH,EAAE,KAAK,GAAG;AACV,GAAG,OAAO,CAAC,KAAK,EAAE;AAClB,GAAG,WAAW,GAAG,MAAM,CAAC,iBAAiB;AACzC,EAAE,CAAC;AACH,EAAE,IAAI,GAAG;AACT,GAAG,OAAO,OAAO,CAAC,IAAI;AACtB,EAAE;AACF,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,uBAAuB,CAAC,OAAO,EAAE,QAAQ,EAAE;AACpD,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AACvD,CAAC,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,QAAQ;AACxD;AACA;AACA;AACA,IAAI,mBAAmB,GAAG,eAAe;AACzC,IAAI,kBAAkB,GAAG,KAAK;AAC9B,IAAI,mBAAmB,GAAG,eAAe;AACzC,IAAI,kBAAkB,GAAG,MAAM;AAC/B,IAAI,gBAAgB,GAAG,wBAAwB,CAAC;AAChD,CAAC,QAAQ,EAAE,GAAG;AACd,CAAC,YAAY,EAAE;AACf,CAAC,CAAC;AACF,SAAS,cAAc,CAAC,EAAE,EAAE;AAC5B,CAAC,OAAO,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;AACjC;AACA,SAAS,mBAAmB,CAAC,EAAE,EAAE;AACjC,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;AAC3B;AACA,SAAS,cAAc,CAAC,EAAE,EAAE;AAC5B,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;AAC3B;AACA,SAAS,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE;AACjD,CAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,WAAW,CAAC,sBAAsB,KAAK,MAAM;AACxG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,YAAY,EAAE;AAChD,EAAE,IAAI,EAAE,GAAG;AACX,EAAE,QAAQ,EAAE,IAAI;AAChB,EAAE,QAAQ,EAAE,KAAK;AACjB,EAAE,MAAM,EAAE,QAAQ;AAClB,EAAE,MAAM,EAAE,kBAAkB,GAAG;AAC/B,EAAE,CAAC;AACH;AACA;AACA,SAAS,eAAe,CAAC,OAAO,EAAE;AAClC,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;AACxC;AACA,SAAS,cAAc,CAAC,OAAO,EAAE;AACjC,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACnD,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACnD;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE;AACjD,CAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,WAAW,CAAC,sBAAsB,KAAK,MAAM;AACxG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,YAAY,EAAE;AAChD,EAAE,IAAI,EAAE,GAAG;AACX,EAAE,QAAQ,EAAE,IAAI;AAChB,EAAE,QAAQ,EAAE,KAAK;AACjB,EAAE,MAAM,EAAE,QAAQ;AAClB,EAAE,MAAM,EAAE,kBAAkB,GAAG;AAC/B,EAAE,CAAC;AACH;AACA,SAAS,eAAe,CAAC,OAAO,EAAE;AAClC,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;AACxC;AACA,SAAS,kBAAkB,CAAC,OAAO,EAAE;AACrC,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACnD;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,kBAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE;AAC/C,CAAC,IAAI,uBAAuB,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,iDAAiD,CAAC,CAAC;AAC9H;;;;"}

package/build/server/chunks/chunks/admin-config.js-Cr7SNsgi.js

@@ -0,0 +1,3 @@
+import './src.js-B12bUNyu.js';
+import './computeLimits.js-DPlUBeVz.js';
+//# sourceMappingURL=admin-config.js-Cr7SNsgi.js.map

package/build/server/chunks/chunks/admin-config.js-Cr7SNsgi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-config.js-Cr7SNsgi.js","sources":[],"sourcesContent":[],"names":[],"mappings":";"}

package/build/server/chunks/chunks/alert-description.js-DfT_X1Es.js

@@ -0,0 +1,45 @@
+import { a0 as attributes, a1 as clsx$1, a6 as bind_props } from './server.js-BBls-Hb5.js';
+import { c as cn } from './utils2.js-AVgqWIzH.js';
+import { tv } from 'tailwind-variants';
+
+//#region ../ui/dist/components/primitives/alert/alert.svelte
+var alertVariants = tv({
+	base: "relative grid w-full grid-cols-[0_1fr] items-start gap-y-0.5 rounded-lg border px-4 py-3 text-sm has-[>svg]:grid-cols-[calc(var(--spacing)*4)_1fr] has-[>svg]:gap-x-3 [&>svg]:size-4 [&>svg]:translate-y-0.5 [&>svg]:text-current",
+	variants: { variant: {
+		default: "bg-card text-card-foreground",
+		destructive: "text-destructive bg-card *:data-[slot=alert-description]:text-destructive/90 [&>svg]:text-current"
+	} },
+	defaultVariants: { variant: "default" }
+});
+function Alert($$renderer, $$props) {
+	$$renderer.component(($$renderer) => {
+		let { ref = null, class: className, variant = "default", children, $$slots, $$events, ...restProps } = $$props;
+		$$renderer.push(`<div${attributes({
+			"data-slot": "alert",
+			class: clsx$1(cn(alertVariants({ variant }), className)),
+			...restProps,
+			role: "alert"
+		})}>`);
+		children?.($$renderer);
+		$$renderer.push(`<!----></div>`);
+		bind_props($$props, { ref });
+	});
+}
+//#endregion
+//#region ../ui/dist/components/primitives/alert/alert-description.svelte
+function Alert_description($$renderer, $$props) {
+	$$renderer.component(($$renderer) => {
+		let { ref = null, class: className, children, $$slots, $$events, ...restProps } = $$props;
+		$$renderer.push(`<div${attributes({
+			"data-slot": "alert-description",
+			class: clsx$1(cn("gap-1 text-sm [&_p]:leading-relaxed col-start-2 grid justify-items-start text-muted-foreground", className)),
+			...restProps
+		})}>`);
+		children?.($$renderer);
+		$$renderer.push(`<!----></div>`);
+		bind_props($$props, { ref });
+	});
+}
+
+export { Alert as A, Alert_description as a };
+//# sourceMappingURL=alert-description.js-DfT_X1Es.js.map

package/build/server/chunks/chunks/alert-description.js-DfT_X1Es.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alert-description.js-DfT_X1Es.js","sources":["../../../../.svelte-kit/output/server/chunks/alert-description.js"],"sourcesContent":["import { i as bind_props, k as clsx, r as attributes } from \"./server.js\";\nimport { t as cn } from \"./utils2.js\";\nimport { tv } from \"tailwind-variants\";\n//#region ../ui/dist/components/primitives/alert/alert.svelte\nvar alertVariants = tv({\n\tbase: \"relative grid w-full grid-cols-[0_1fr] items-start gap-y-0.5 rounded-lg border px-4 py-3 text-sm has-[>svg]:grid-cols-[calc(var(--spacing)*4)_1fr] has-[>svg]:gap-x-3 [&>svg]:size-4 [&>svg]:translate-y-0.5 [&>svg]:text-current\",\n\tvariants: { variant: {\n\t\tdefault: \"bg-card text-card-foreground\",\n\t\tdestructive: \"text-destructive bg-card *:data-[slot=alert-description]:text-destructive/90 [&>svg]:text-current\"\n\t} },\n\tdefaultVariants: { variant: \"default\" }\n});\nfunction Alert($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\tlet { ref = null, class: className, variant = \"default\", children, $$slots, $$events, ...restProps } = $$props;\n\t\t$$renderer.push(`<div${attributes({\n\t\t\t\"data-slot\": \"alert\",\n\t\t\tclass: clsx(cn(alertVariants({ variant }), className)),\n\t\t\t...restProps,\n\t\t\trole: \"alert\"\n\t\t})}>`);\n\t\tchildren?.($$renderer);\n\t\t$$renderer.push(`<!----></div>`);\n\t\tbind_props($$props, { ref });\n\t});\n}\n//#endregion\n//#region ../ui/dist/components/primitives/alert/alert-description.svelte\nfunction Alert_description($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\tlet { ref = null, class: className, children, $$slots, $$events, ...restProps } = $$props;\n\t\t$$renderer.push(`<div${attributes({\n\t\t\t\"data-slot\": \"alert-description\",\n\t\t\tclass: clsx(cn(\"gap-1 text-sm [&_p]:leading-relaxed col-start-2 grid justify-items-start text-muted-foreground\", className)),\n\t\t\t...restProps\n\t\t})}>`);\n\t\tchildren?.($$renderer);\n\t\t$$renderer.push(`<!----></div>`);\n\t\tbind_props($$props, { ref });\n\t});\n}\n//#endregion\nexport { Alert as n, Alert_description as t };\n"],"names":["clsx"],"mappings":";;;;AAGA;AACA,IAAI,aAAa,GAAG,EAAE,CAAC;AACvB,CAAC,IAAI,EAAE,mOAAmO;AAC1O,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE;AACtB,EAAE,OAAO,EAAE,8BAA8B;AACzC,EAAE,WAAW,EAAE;AACf,EAAE,EAAE;AACJ,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,SAAS;AACtC,CAAC,CAAC;AACF,SAAS,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE;AACpC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,IAAI,EAAE,GAAG,GAAG,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,GAAG,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,SAAS,EAAE,GAAG,OAAO;AAChH,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC;AACpC,GAAG,WAAW,EAAE,OAAO;AACvB,GAAG,KAAK,EAAEA,MAAI,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;AACzD,GAAG,GAAG,SAAS;AACf,GAAG,IAAI,EAAE;AACT,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACR,EAAE,QAAQ,GAAG,UAAU,CAAC;AACxB,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;AAClC,EAAE,UAAU,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC;AAC9B,CAAC,CAAC,CAAC;AACH;AACA;AACA;AACA,SAAS,iBAAiB,CAAC,UAAU,EAAE,OAAO,EAAE;AAChD,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,IAAI,EAAE,GAAG,GAAG,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,SAAS,EAAE,GAAG,OAAO;AAC3F,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC;AACpC,GAAG,WAAW,EAAE,mBAAmB;AACnC,GAAG,KAAK,EAAEA,MAAI,CAAC,EAAE,CAAC,gGAAgG,EAAE,SAAS,CAAC,CAAC;AAC/H,GAAG,GAAG;AACN,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACR,EAAE,QAAQ,GAAG,UAAU,CAAC;AACxB,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;AAClC,EAAE,UAAU,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC;AAC9B,CAAC,CAAC,CAAC;AACH;;;;"}