@selvajs/selva 4.14.2 → 4.16.0

package/build/server/chunks/chunks/resolve.server.js-CrYcNT9R.js

@@ -1,63 +0,0 @@
-import { S as SYSTEM_CONTEXT } from './src.js-B12bUNyu.js';
-import { p as providers, o as getDefinitionMeta, f as getProjectProvider, k as flag } from './providers.server.js-D8WK4DPA.js';
-import { h as hashToken, l as looksLikeShareToken } from './token.server.js-qEsa9y7f.js';
-import { error } from '@sveltejs/kit';
-
-//#region src/lib/server/shareLinks/resolve.server.ts
-/**
-* Extract a candidate share-link token from the request.
-*   - `?token=share_…` query param (most embeddable)
-*   - `Authorization: Bearer share_…` header (server-to-server)
-*
-* Returns the raw token string, or null when none present. Does NOT validate.
-*/
-function readShareToken(request, url) {
-	if (!flag("ENABLE_SHARING")) return null;
-	const q = url.searchParams.get("token");
-	if (q && looksLikeShareToken(q)) return q;
-	const auth = request.headers.get("authorization");
-	if (auth?.startsWith("Bearer ")) {
-		const candidate = auth.slice(7).trim();
-		if (looksLikeShareToken(candidate)) return candidate;
-	}
-	return null;
-}
-/**
-* Run before user-based auth on definition-scoped routes. Returns the
-* resolved link + a synthetic ctx on success.
-*
-* Throws only when a token is *present but invalid* for the current request
-* (wrong definition, wrong channel, expired, revoked, view-only when solve
-* was requested) — those are deliberate 401/403/429 responses to a
-* misbehaving consumer. When no token is present at all, returns null and
-* the caller falls through to the user-based auth gate.
-*/
-async function tryResolveShareToken(request, url, requestedDefinitionId, requestedChannel, opts) {
-	const raw = readShareToken(request, url);
-	if (!raw) return null;
-	const tokenHash = hashToken(raw);
-	const link = await providers.data.shareLinks.getByTokenHash(SYSTEM_CONTEXT, tokenHash);
-	if (!link) throw error(401, "Invalid or revoked share token.");
-	if (link.expiresAt && new Date(link.expiresAt).getTime() <= Date.now()) throw error(401, "Share token has expired.");
-	if (link.definitionId !== requestedDefinitionId) throw error(403, "Share token is not valid for this definition.");
-	if (link.channel !== requestedChannel) throw error(403, `Share token is for the '${link.channel}' channel only.`);
-	if (opts.requireSolve && !link.allowSolve) throw error(403, "Share token grants view-only access.");
-	const def = await getDefinitionMeta().get(SYSTEM_CONTEXT, link.definitionId);
-	if (!def) throw error(401, "Share token target no longer exists.");
-	const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, def.projectId);
-	if (!project) throw error(401, "Share token target no longer exists.");
-	return {
-		link,
-		ctx: {
-			userId: `share:${link.id}`,
-			actingOrgId: project.orgId,
-			platformPermissions: [],
-			orgPermissions: [],
-			system: true,
-			shareLinkId: link.id
-		}
-	};
-}
-
-export { tryResolveShareToken as t };
-//# sourceMappingURL=resolve.server.js-CrYcNT9R.js.map

package/build/server/chunks/chunks/resolve.server.js-CrYcNT9R.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolve.server.js-CrYcNT9R.js","sources":["../../../../.svelte-kit/output/server/chunks/resolve.server.js"],"sourcesContent":["import { t as SYSTEM_CONTEXT } from \"./src.js\";\nimport { _ as getProjectProvider, s as getDefinitionMeta, t as flag, w as providers } from \"./providers.server.js\";\nimport { n as looksLikeShareToken, t as hashToken } from \"./token.server.js\";\nimport { error } from \"@sveltejs/kit\";\n//#region src/lib/server/shareLinks/resolve.server.ts\n/**\n* Extract a candidate share-link token from the request.\n*   - `?token=share_…` query param (most embeddable)\n*   - `Authorization: Bearer share_…` header (server-to-server)\n*\n* Returns the raw token string, or null when none present. Does NOT validate.\n*/\nfunction readShareToken(request, url) {\n\tif (!flag(\"ENABLE_SHARING\")) return null;\n\tconst q = url.searchParams.get(\"token\");\n\tif (q && looksLikeShareToken(q)) return q;\n\tconst auth = request.headers.get(\"authorization\");\n\tif (auth?.startsWith(\"Bearer \")) {\n\t\tconst candidate = auth.slice(7).trim();\n\t\tif (looksLikeShareToken(candidate)) return candidate;\n\t}\n\treturn null;\n}\n/**\n* Run before user-based auth on definition-scoped routes. Returns the\n* resolved link + a synthetic ctx on success.\n*\n* Throws only when a token is *present but invalid* for the current request\n* (wrong definition, wrong channel, expired, revoked, view-only when solve\n* was requested) — those are deliberate 401/403/429 responses to a\n* misbehaving consumer. When no token is present at all, returns null and\n* the caller falls through to the user-based auth gate.\n*/\nasync function tryResolveShareToken(request, url, requestedDefinitionId, requestedChannel, opts) {\n\tconst raw = readShareToken(request, url);\n\tif (!raw) return null;\n\tconst tokenHash = hashToken(raw);\n\tconst link = await providers.data.shareLinks.getByTokenHash(SYSTEM_CONTEXT, tokenHash);\n\tif (!link) throw error(401, \"Invalid or revoked share token.\");\n\tif (link.expiresAt && new Date(link.expiresAt).getTime() <= Date.now()) throw error(401, \"Share token has expired.\");\n\tif (link.definitionId !== requestedDefinitionId) throw error(403, \"Share token is not valid for this definition.\");\n\tif (link.channel !== requestedChannel) throw error(403, `Share token is for the '${link.channel}' channel only.`);\n\tif (opts.requireSolve && !link.allowSolve) throw error(403, \"Share token grants view-only access.\");\n\tconst def = await getDefinitionMeta().get(SYSTEM_CONTEXT, link.definitionId);\n\tif (!def) throw error(401, \"Share token target no longer exists.\");\n\tconst project = await getProjectProvider().getProject(SYSTEM_CONTEXT, def.projectId);\n\tif (!project) throw error(401, \"Share token target no longer exists.\");\n\treturn {\n\t\tlink,\n\t\tctx: {\n\t\t\tuserId: `share:${link.id}`,\n\t\t\tactingOrgId: project.orgId,\n\t\t\tplatformPermissions: [],\n\t\t\torgPermissions: [],\n\t\t\tsystem: true,\n\t\t\tshareLinkId: link.id\n\t\t}\n\t};\n}\n//#endregion\nexport { tryResolveShareToken as t };\n"],"names":[],"mappings":";;;;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE;AACtC,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,OAAO,IAAI;AACzC,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;AACxC,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;AAC1C,CAAC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;AAClD,CAAC,IAAI,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE;AAClC,EAAE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;AACxC,EAAE,IAAI,mBAAmB,CAAC,SAAS,CAAC,EAAE,OAAO,SAAS;AACtD,CAAC;AACD,CAAC,OAAO,IAAI;AACZ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,oBAAoB,CAAC,OAAO,EAAE,GAAG,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,IAAI,EAAE;AACjG,CAAC,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC;AACzC,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,IAAI;AACtB,CAAC,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC;AACjC,CAAC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,cAAc,EAAE,SAAS,CAAC;AACvF,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,iCAAiC,CAAC;AAC/D,CAAC,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACrH,CAAC,IAAI,IAAI,CAAC,YAAY,KAAK,qBAAqB,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,+CAA+C,CAAC;AACnH,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,gBAAgB,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,wBAAwB,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;AAClH,CAAC,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,sCAAsC,CAAC;AACpG,CAAC,MAAM,GAAG,GAAG,MAAM,iBAAiB,EAAE,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC;AAC7E,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,sCAAsC,CAAC;AACnE,CAAC,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,GAAG,CAAC,SAAS,CAAC;AACrF,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,sCAAsC,CAAC;AACvE,CAAC,OAAO;AACR,EAAE,IAAI;AACN,EAAE,GAAG,EAAE;AACP,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;AAC7B,GAAG,WAAW,EAAE,OAAO,CAAC,KAAK;AAC7B,GAAG,mBAAmB,EAAE,EAAE;AAC1B,GAAG,cAAc,EAAE,EAAE;AACrB,GAAG,MAAM,EAAE,IAAI;AACf,GAAG,WAAW,EAAE,IAAI,CAAC;AACrB;AACA,EAAE;AACF;;;;"}

package/build/server/chunks/chunks/responses.js-C3TpfP9h.js

@@ -1,103 +0,0 @@
-import { z } from 'zod';
-
-//#region src/lib/server/api/v1/responses.ts
-/**
-* Response schemas for the v1 payloads that must not carry a stored secret.
-*
-* Three store types hold a credential next to fields a client legitimately
-* reads: `ShareLink.tokenHash` and `Invite.tokenHash` are HMACs of a token,
-* `ComputeServerCommon.apiKey` is a live Rhino.Compute key. Handlers used to
-* strip them by destructuring — `const { tokenHash: _omit, ...rest } = invite`
-* — which works until someone adds a field to the stored type or edits the line
-* away. Nothing fails at build time; the credential just starts appearing in a
-* response.
-*
-* Parsing through these schemas inverts the default: the response carries only
-* what the schema names, so a new field on the stored type is invisible to
-* clients until added here on purpose. Use them via `shaped`/`shapedCollection`
-* in `./route.ts`.
-*
-* These describe **responses**, not stored records — where the two differ (an
-* invite's one-time `acceptUrl`, a share link's `hasToken` sentinel) the
-* response is the authority.
-*/
-var ShareLinkResponseSchema = z.object({
-	id: z.string(),
-	definitionId: z.string(),
-	channel: z.enum(["live", "draft"]),
-	name: z.string().optional(),
-	createdBy: z.string(),
-	createdAt: z.string(),
-	expiresAt: z.string().nullish(),
-	revokedAt: z.string().nullish(),
-	allowSolve: z.boolean(),
-	maxSolves: z.number().nullish(),
-	solveCount: z.number(),
-	/** Sentinel replacing `tokenHash`: a token exists, its hash is not yours. */
-	hasToken: z.literal(true)
-});
-/** The mint response. `token` is the plaintext, returned exactly once. */
-var CreatedShareLinkResponseSchema = z.object({
-	link: ShareLinkResponseSchema,
-	token: z.string()
-});
-var InviteResponseSchema = z.object({
-	id: z.string(),
-	email: z.string(),
-	orgId: z.string(),
-	orgRole: z.string(),
-	orgPermissions: z.array(z.string()),
-	platformPermissions: z.array(z.string()).default([]),
-	invitedBy: z.string(),
-	createdAt: z.string(),
-	expiresAt: z.string(),
-	acceptedAt: z.string().optional(),
-	acceptedByUserId: z.string().optional()
-});
-/**
-* The create response: the invite plus the link to send, built per request.
-*
-* `acceptUrl` is returned whatever `delivery` says — mail is best-effort, and
-* manual sharing is the fallback when it is off or the send failed.
-*/
-var CreatedInviteResponseSchema = InviteResponseSchema.extend({
-	acceptUrl: z.string(),
-	delivery: z.enum([
-		"sent",
-		"not-configured",
-		"failed"
-	])
-});
-/**
-* An org-owned compute server. `apiKey` is replaced by `hasApiKey`, so a picker
-* can render "key set" without any store decrypting a secret to throw away.
-*/
-var OrgComputeServerResponseSchema = z.object({
-	id: z.string(),
-	label: z.string(),
-	serverUrl: z.string(),
-	scope: z.literal("org"),
-	ownerOrgId: z.string(),
-	timeoutMs: z.number().optional(),
-	retryCount: z.number().optional(),
-	hasApiKey: z.boolean()
-});
-/** A server this org may select but not edit. Never carries a key either. */
-var ComputeCatalogEntrySchema = z.object({
-	id: z.string(),
-	label: z.string(),
-	serverUrl: z.string(),
-	scope: z.enum(["platform", "org"]),
-	source: z.enum(["platform", "org"]),
-	timeoutMs: z.number().optional(),
-	retryCount: z.number().optional()
-});
-var OrgComputeResponseSchema = z.object({
-	servers: z.array(OrgComputeServerResponseSchema),
-	defaultServerId: z.string().nullish(),
-	globalDefaultServerId: z.string().nullish(),
-	catalog: z.array(ComputeCatalogEntrySchema)
-});
-
-export { CreatedShareLinkResponseSchema as C, InviteResponseSchema as I, OrgComputeResponseSchema as O, ShareLinkResponseSchema as S, CreatedInviteResponseSchema as a };
-//# sourceMappingURL=responses.js-C3TpfP9h.js.map

package/build/server/chunks/chunks/responses.js-C3TpfP9h.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"responses.js-C3TpfP9h.js","sources":["../../../../.svelte-kit/output/server/chunks/responses.js"],"sourcesContent":["import { z } from \"zod\";\n//#region src/lib/server/api/v1/responses.ts\n/**\n* Response schemas for the v1 payloads that must not carry a stored secret.\n*\n* Three store types hold a credential next to fields a client legitimately\n* reads: `ShareLink.tokenHash` and `Invite.tokenHash` are HMACs of a token,\n* `ComputeServerCommon.apiKey` is a live Rhino.Compute key. Handlers used to\n* strip them by destructuring — `const { tokenHash: _omit, ...rest } = invite`\n* — which works until someone adds a field to the stored type or edits the line\n* away. Nothing fails at build time; the credential just starts appearing in a\n* response.\n*\n* Parsing through these schemas inverts the default: the response carries only\n* what the schema names, so a new field on the stored type is invisible to\n* clients until added here on purpose. Use them via `shaped`/`shapedCollection`\n* in `./route.ts`.\n*\n* These describe **responses**, not stored records — where the two differ (an\n* invite's one-time `acceptUrl`, a share link's `hasToken` sentinel) the\n* response is the authority.\n*/\nvar ShareLinkResponseSchema = z.object({\n\tid: z.string(),\n\tdefinitionId: z.string(),\n\tchannel: z.enum([\"live\", \"draft\"]),\n\tname: z.string().optional(),\n\tcreatedBy: z.string(),\n\tcreatedAt: z.string(),\n\texpiresAt: z.string().nullish(),\n\trevokedAt: z.string().nullish(),\n\tallowSolve: z.boolean(),\n\tmaxSolves: z.number().nullish(),\n\tsolveCount: z.number(),\n\t/** Sentinel replacing `tokenHash`: a token exists, its hash is not yours. */\n\thasToken: z.literal(true)\n});\n/** The mint response. `token` is the plaintext, returned exactly once. */\nvar CreatedShareLinkResponseSchema = z.object({\n\tlink: ShareLinkResponseSchema,\n\ttoken: z.string()\n});\nvar InviteResponseSchema = z.object({\n\tid: z.string(),\n\temail: z.string(),\n\torgId: z.string(),\n\torgRole: z.string(),\n\torgPermissions: z.array(z.string()),\n\tplatformPermissions: z.array(z.string()).default([]),\n\tinvitedBy: z.string(),\n\tcreatedAt: z.string(),\n\texpiresAt: z.string(),\n\tacceptedAt: z.string().optional(),\n\tacceptedByUserId: z.string().optional()\n});\n/**\n* The create response: the invite plus the link to send, built per request.\n*\n* `acceptUrl` is returned whatever `delivery` says — mail is best-effort, and\n* manual sharing is the fallback when it is off or the send failed.\n*/\nvar CreatedInviteResponseSchema = InviteResponseSchema.extend({\n\tacceptUrl: z.string(),\n\tdelivery: z.enum([\n\t\t\"sent\",\n\t\t\"not-configured\",\n\t\t\"failed\"\n\t])\n});\n/**\n* An org-owned compute server. `apiKey` is replaced by `hasApiKey`, so a picker\n* can render \"key set\" without any store decrypting a secret to throw away.\n*/\nvar OrgComputeServerResponseSchema = z.object({\n\tid: z.string(),\n\tlabel: z.string(),\n\tserverUrl: z.string(),\n\tscope: z.literal(\"org\"),\n\townerOrgId: z.string(),\n\ttimeoutMs: z.number().optional(),\n\tretryCount: z.number().optional(),\n\thasApiKey: z.boolean()\n});\n/** A server this org may select but not edit. Never carries a key either. */\nvar ComputeCatalogEntrySchema = z.object({\n\tid: z.string(),\n\tlabel: z.string(),\n\tserverUrl: z.string(),\n\tscope: z.enum([\"platform\", \"org\"]),\n\tsource: z.enum([\"platform\", \"org\"]),\n\ttimeoutMs: z.number().optional(),\n\tretryCount: z.number().optional()\n});\nvar OrgComputeResponseSchema = z.object({\n\tservers: z.array(OrgComputeServerResponseSchema),\n\tdefaultServerId: z.string().nullish(),\n\tglobalDefaultServerId: z.string().nullish(),\n\tcatalog: z.array(ComputeCatalogEntrySchema)\n});\n//#endregion\nexport { ShareLinkResponseSchema as a, OrgComputeResponseSchema as i, CreatedShareLinkResponseSchema as n, InviteResponseSchema as r, CreatedInviteResponseSchema as t };\n"],"names":[],"mappings":";;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;AACvC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;AACf,CAAC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;AACzB,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACnC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;AAC5B,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;AACtB,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;AACtB,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;AAChC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;AAChC,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;AACxB,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;AAChC,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;AACvB;AACA,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI;AACzB,CAAC;AACD;AACG,IAAC,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;AAC9C,CAAC,IAAI,EAAE,uBAAuB;AAC9B,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM;AAChB,CAAC;AACE,IAAC,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;AACpC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;AACf,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;AAClB,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;AAClB,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;AACpB,CAAC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;AACpC,CAAC,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;AACrD,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;AACtB,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;AACtB,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;AACtB,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;AAClC,CAAC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ;AACtC,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,2BAA2B,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC9D,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;AACtB,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC;AAClB,EAAE,MAAM;AACR,EAAE,gBAAgB;AAClB,EAAE;AACF,EAAE;AACF,CAAC;AACD;AACA;AACA;AACA;AACA,IAAI,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;AAC9C,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;AACf,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;AAClB,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;AACtB,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;AACxB,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;AACvB,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;AACjC,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;AAClC,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO;AACrB,CAAC,CAAC;AACF;AACA,IAAI,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;AACzC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;AACf,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;AAClB,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;AACtB,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AACnC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AACpC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;AACjC,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ;AAChC,CAAC,CAAC;AACC,IAAC,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;AACxC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC;AACjD,CAAC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;AACtC,CAAC,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;AAC5C,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB;AAC3C,CAAC;;;;"}

package/build/server/chunks/chunks/route.js-Ubof1fIp.js

@@ -1,4 +0,0 @@
-import './src.js-B12bUNyu.js';
-import './providers.server.js-D8WK4DPA.js';
-import '@sveltejs/kit';
-//# sourceMappingURL=route.js-Ubof1fIp.js.map

package/build/server/chunks/chunks/route.js-Ubof1fIp.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"route.js-Ubof1fIp.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;"}