@selvajs/selva 4.14.2 → 4.16.0

package/build/server/chunks/chunks/admin-auth.server.js-B3sy0RSx.js

@@ -1,201 +0,0 @@
-import { b as private_env } from './shared-server.js-BZy9KN6u.js';
-import './src.js-B12bUNyu.js';
-import './providers.server.js-D8WK4DPA.js';
-import 'node:dns/promises';
-import 'node:net';
-import { error } from '@sveltejs/kit';
-
-/** Each limiter owns its own bucket `Map`, so distinct key-spaces don't collide. */
-function createComputeRateLimiter(config) {
-	const { windowMs, maxPerWindow } = config;
-	const maxKeys = Math.max(1, Math.floor(config.maxKeys ?? 1e5));
-	const sweepIntervalMs = Math.max(0, Math.floor(config.sweepIntervalMs ?? windowMs));
-	const resolvedConfig = Object.freeze({
-		...config,
-		maxKeys,
-		sweepIntervalMs
-	});
-	const buckets = /* @__PURE__ */ new Map();
-	let nextSweepAt = Number.POSITIVE_INFINITY;
-	/**
-	* Drop dead buckets, then enforce the hard cap. Runs at most once per
-	* `sweepIntervalMs` — except when the cap is already breached, which must be
-	* enforced on the spot regardless of the sweep clock.
-	*
-	* `headroom` is how many buckets the caller is about to insert. The cap is
-	* enforced against the post-insert size, so `maxKeys` is a true ceiling rather
-	* than one the very next write steps over.
-	*/
-	function maybeSweep(now, headroom = 0) {
-		const budget = Math.max(0, maxKeys - headroom);
-		if (!(sweepIntervalMs > 0 && now >= nextSweepAt) && buckets.size <= budget) return;
-		for (const [key, entry] of buckets) if (now > entry.resetAt) buckets.delete(key);
-		if (sweepIntervalMs > 0) nextSweepAt = now + sweepIntervalMs;
-		if (buckets.size > budget) {
-			const byResetAsc = [...buckets.entries()].sort((a, b) => a[1].resetAt - b[1].resetAt);
-			for (let i = 0; i < byResetAsc.length - budget; i++) buckets.delete(byResetAsc[i][0]);
-		}
-	}
-	return {
-		config: resolvedConfig,
-		check(key) {
-			const now = Date.now();
-			maybeSweep(now, buckets.has(key) ? 0 : 1);
-			const entry = buckets.get(key);
-			if (!entry || now > entry.resetAt) {
-				buckets.set(key, {
-					count: 1,
-					resetAt: now + windowMs
-				});
-				if (sweepIntervalMs > 0 && nextSweepAt === Number.POSITIVE_INFINITY) nextSweepAt = now + sweepIntervalMs;
-				return { allowed: true };
-			}
-			if (entry.count >= maxPerWindow) return {
-				allowed: false,
-				retryAfter: Math.ceil((entry.resetAt - now) / 1e3)
-			};
-			entry.count += 1;
-			return { allowed: true };
-		},
-		peek(key) {
-			const now = Date.now();
-			maybeSweep(now);
-			const entry = buckets.get(key);
-			if (!entry || now > entry.resetAt) return { allowed: true };
-			if (entry.count >= maxPerWindow) return {
-				allowed: false,
-				retryAfter: Math.ceil((entry.resetAt - now) / 1e3)
-			};
-			return { allowed: true };
-		},
-		clear(key) {
-			buckets.delete(key);
-		},
-		count(key) {
-			const entry = buckets.get(key);
-			if (!entry || Date.now() > entry.resetAt) return 0;
-			return entry.count;
-		},
-		reset() {
-			buckets.clear();
-			nextSweepAt = Number.POSITIVE_INFINITY;
-		},
-		size() {
-			return buckets.size;
-		}
-	};
-}
-//#endregion
-//#region ../server/src/http/body-size.ts
-/**
-* True when the request's declared `Content-Length` exceeds `maxBytes`. Call it
-* BEFORE reading the body, so a huge payload aimed at a small-body endpoint
-* can't burn memory; the route maps `true` to its transport's 413.
-*
-* This is the per-route lower bound. A global limit (e.g. adapter-node's
-* `BODY_SIZE_LIMIT`) has to clear the largest legitimate upload, so every small
-* JSON endpoint would otherwise inherit that ceiling.
-*
-* Requests without `Content-Length` (chunked encoding) slip past this check —
-* the global limit is the backstop there.
-*/
-function declaredBodySizeExceeds(headers, maxBytes) {
-	const declared = Number(headers.get("content-length"));
-	return Number.isFinite(declared) && declared > maxBytes;
-}
-//#endregion
-//#region src/lib/server/admin-auth.server.ts
-var SESSION_COOKIE_NAME = "admin_session";
-var SESSION_MAX_AGE_MS = 288e5;
-var REFRESH_COOKIE_NAME = "admin_refresh";
-var REFRESH_MAX_AGE_MS = 2592e6;
-var LOGIN_WINDOW_MS = 9e5;
-var loginRateLimiter = createComputeRateLimiter({
-	windowMs: LOGIN_WINDOW_MS,
-	maxPerWindow: 5
-});
-var accountRateLimiter = createComputeRateLimiter({
-	windowMs: LOGIN_WINDOW_MS,
-	maxPerWindow: 20
-});
-function accountKey(email) {
-	return `account:${email.trim().toLowerCase()}`;
-}
-/**
-* Gate one login attempt. `email` may be empty — the local provider allows a
-* password-only login when no user store is configured — in which case only the
-* address bucket applies.
-*/
-function checkRateLimit(ip, email) {
-	const byAddress = loginRateLimiter.peek(ip);
-	if (!byAddress.allowed) return byAddress;
-	if (!email) return byAddress;
-	return accountRateLimiter.peek(accountKey(email));
-}
-function recordFailedAttempt(ip, email) {
-	loginRateLimiter.check(ip);
-	if (email) accountRateLimiter.check(accountKey(email));
-}
-function clearRateLimit(ip, email) {
-	loginRateLimiter.clear(ip);
-	if (email) accountRateLimiter.clear(accountKey(email));
-}
-var addressWarningIssued = false;
-function warnIfAddressKeysCollapse(ip, log) {
-	if (addressWarningIssued) return;
-	if (private_env.ADDRESS_HEADER) return;
-	if (ip !== "127.0.0.1" && ip !== "::1" && ip !== "::ffff:127.0.0.1") return;
-	addressWarningIssued = true;
-	log.warn("Login rate limiting is keyed to the loopback address for every request. The app is behind a proxy but ADDRESS_HEADER is unset, so getClientAddress() returns the socket peer and all clients share one bucket — five failed logins lock out the whole instance. Set ADDRESS_HEADER=X-Forwarded-For and XFF_DEPTH to your proxy count (see .env.example).", { component: "auth/rate-limit" });
-}
-function setSessionCookie(cookies, sessionToken) {
-	const isSecure = process.env.NODE_ENV === "production" && private_env.ALLOW_INSECURE_COOKIES !== "true";
-	cookies.set(SESSION_COOKIE_NAME, sessionToken, {
-		path: "/",
-		httpOnly: true,
-		sameSite: "lax",
-		secure: isSecure,
-		maxAge: SESSION_MAX_AGE_MS / 1e3
-	});
-}
-/** Read before `destroySession` — logout needs the token to revoke it provider-side. */
-function getSessionToken(cookies) {
-	return cookies.get(SESSION_COOKIE_NAME);
-}
-function destroySession(cookies) {
-	cookies.delete(SESSION_COOKIE_NAME, { path: "/" });
-	cookies.delete(REFRESH_COOKIE_NAME, { path: "/" });
-}
-/**
-* Refresh-token cookie for the OAuth/Supabase flow — `hooks.server.ts`'s
-* session-refresh middleware swaps an expired access token for a fresh one
-* using this. Local/HMAC sessions don't need it.
-*/
-function setRefreshCookie(cookies, refreshToken) {
-	const isSecure = process.env.NODE_ENV === "production" && private_env.ALLOW_INSECURE_COOKIES !== "true";
-	cookies.set(REFRESH_COOKIE_NAME, refreshToken, {
-		path: "/",
-		httpOnly: true,
-		sameSite: "lax",
-		secure: isSecure,
-		maxAge: REFRESH_MAX_AGE_MS / 1e3
-	});
-}
-function getRefreshToken(cookies) {
-	return cookies.get(REFRESH_COOKIE_NAME);
-}
-function clearRefreshCookie(cookies) {
-	cookies.delete(REFRESH_COOKIE_NAME, { path: "/" });
-}
-/**
-* Rejects a request whose declared `Content-Length` exceeds `maxBytes` — a
-* per-route lower bound under the global adapter-node `BODY_SIZE_LIMIT`
-* (which must stay high enough for 50MB .gh uploads). Throws 413 before the
-* body is read; see `declaredBodySizeExceeds` for the chunked-encoding caveat.
-*/
-function requireMaxBodySize(request, maxBytes) {
-	if (declaredBodySizeExceeds(request.headers, maxBytes)) throw error(413, `Request body exceeds the limit for this endpoint.`);
-}
-
-export { setRefreshCookie as a, checkRateLimit as b, clearRefreshCookie as c, clearRateLimit as d, getSessionToken as e, destroySession as f, getRefreshToken as g, createComputeRateLimiter as h, requireMaxBodySize as i, recordFailedAttempt as r, setSessionCookie as s, warnIfAddressKeysCollapse as w };
-//# sourceMappingURL=admin-auth.server.js-B3sy0RSx.js.map

package/build/server/chunks/chunks/admin-auth.server.js-B3sy0RSx.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin-auth.server.js-B3sy0RSx.js","sources":["../../../../.svelte-kit/output/server/chunks/admin-auth.server.js"],"sourcesContent":["import { t as private_env } from \"./shared-server.js\";\nimport \"./compute.js\";\nimport { error } from \"@sveltejs/kit\";\n/** Each limiter owns its own bucket `Map`, so distinct key-spaces don't collide. */\nfunction createComputeRateLimiter(config) {\n\tconst { windowMs, maxPerWindow } = config;\n\tconst maxKeys = Math.max(1, Math.floor(config.maxKeys ?? 1e5));\n\tconst sweepIntervalMs = Math.max(0, Math.floor(config.sweepIntervalMs ?? windowMs));\n\tconst resolvedConfig = Object.freeze({\n\t\t...config,\n\t\tmaxKeys,\n\t\tsweepIntervalMs\n\t});\n\tconst buckets = /* @__PURE__ */ new Map();\n\tlet nextSweepAt = Number.POSITIVE_INFINITY;\n\t/**\n\t* Drop dead buckets, then enforce the hard cap. Runs at most once per\n\t* `sweepIntervalMs` — except when the cap is already breached, which must be\n\t* enforced on the spot regardless of the sweep clock.\n\t*\n\t* `headroom` is how many buckets the caller is about to insert. The cap is\n\t* enforced against the post-insert size, so `maxKeys` is a true ceiling rather\n\t* than one the very next write steps over.\n\t*/\n\tfunction maybeSweep(now, headroom = 0) {\n\t\tconst budget = Math.max(0, maxKeys - headroom);\n\t\tif (!(sweepIntervalMs > 0 && now >= nextSweepAt) && buckets.size <= budget) return;\n\t\tfor (const [key, entry] of buckets) if (now > entry.resetAt) buckets.delete(key);\n\t\tif (sweepIntervalMs > 0) nextSweepAt = now + sweepIntervalMs;\n\t\tif (buckets.size > budget) {\n\t\t\tconst byResetAsc = [...buckets.entries()].sort((a, b) => a[1].resetAt - b[1].resetAt);\n\t\t\tfor (let i = 0; i < byResetAsc.length - budget; i++) buckets.delete(byResetAsc[i][0]);\n\t\t}\n\t}\n\treturn {\n\t\tconfig: resolvedConfig,\n\t\tcheck(key) {\n\t\t\tconst now = Date.now();\n\t\t\tmaybeSweep(now, buckets.has(key) ? 0 : 1);\n\t\t\tconst entry = buckets.get(key);\n\t\t\tif (!entry || now > entry.resetAt) {\n\t\t\t\tbuckets.set(key, {\n\t\t\t\t\tcount: 1,\n\t\t\t\t\tresetAt: now + windowMs\n\t\t\t\t});\n\t\t\t\tif (sweepIntervalMs > 0 && nextSweepAt === Number.POSITIVE_INFINITY) nextSweepAt = now + sweepIntervalMs;\n\t\t\t\treturn { allowed: true };\n\t\t\t}\n\t\t\tif (entry.count >= maxPerWindow) return {\n\t\t\t\tallowed: false,\n\t\t\t\tretryAfter: Math.ceil((entry.resetAt - now) / 1e3)\n\t\t\t};\n\t\t\tentry.count += 1;\n\t\t\treturn { allowed: true };\n\t\t},\n\t\tpeek(key) {\n\t\t\tconst now = Date.now();\n\t\t\tmaybeSweep(now);\n\t\t\tconst entry = buckets.get(key);\n\t\t\tif (!entry || now > entry.resetAt) return { allowed: true };\n\t\t\tif (entry.count >= maxPerWindow) return {\n\t\t\t\tallowed: false,\n\t\t\t\tretryAfter: Math.ceil((entry.resetAt - now) / 1e3)\n\t\t\t};\n\t\t\treturn { allowed: true };\n\t\t},\n\t\tclear(key) {\n\t\t\tbuckets.delete(key);\n\t\t},\n\t\tcount(key) {\n\t\t\tconst entry = buckets.get(key);\n\t\t\tif (!entry || Date.now() > entry.resetAt) return 0;\n\t\t\treturn entry.count;\n\t\t},\n\t\treset() {\n\t\t\tbuckets.clear();\n\t\t\tnextSweepAt = Number.POSITIVE_INFINITY;\n\t\t},\n\t\tsize() {\n\t\t\treturn buckets.size;\n\t\t}\n\t};\n}\n//#endregion\n//#region ../server/src/http/body-size.ts\n/**\n* True when the request's declared `Content-Length` exceeds `maxBytes`. Call it\n* BEFORE reading the body, so a huge payload aimed at a small-body endpoint\n* can't burn memory; the route maps `true` to its transport's 413.\n*\n* This is the per-route lower bound. A global limit (e.g. adapter-node's\n* `BODY_SIZE_LIMIT`) has to clear the largest legitimate upload, so every small\n* JSON endpoint would otherwise inherit that ceiling.\n*\n* Requests without `Content-Length` (chunked encoding) slip past this check —\n* the global limit is the backstop there.\n*/\nfunction declaredBodySizeExceeds(headers, maxBytes) {\n\tconst declared = Number(headers.get(\"content-length\"));\n\treturn Number.isFinite(declared) && declared > maxBytes;\n}\n//#endregion\n//#region src/lib/server/admin-auth.server.ts\nvar SESSION_COOKIE_NAME = \"admin_session\";\nvar SESSION_MAX_AGE_MS = 288e5;\nvar REFRESH_COOKIE_NAME = \"admin_refresh\";\nvar REFRESH_MAX_AGE_MS = 2592e6;\nvar LOGIN_WINDOW_MS = 9e5;\nvar loginRateLimiter = createComputeRateLimiter({\n\twindowMs: LOGIN_WINDOW_MS,\n\tmaxPerWindow: 5\n});\nvar accountRateLimiter = createComputeRateLimiter({\n\twindowMs: LOGIN_WINDOW_MS,\n\tmaxPerWindow: 20\n});\nfunction accountKey(email) {\n\treturn `account:${email.trim().toLowerCase()}`;\n}\n/**\n* Gate one login attempt. `email` may be empty — the local provider allows a\n* password-only login when no user store is configured — in which case only the\n* address bucket applies.\n*/\nfunction checkRateLimit(ip, email) {\n\tconst byAddress = loginRateLimiter.peek(ip);\n\tif (!byAddress.allowed) return byAddress;\n\tif (!email) return byAddress;\n\treturn accountRateLimiter.peek(accountKey(email));\n}\nfunction recordFailedAttempt(ip, email) {\n\tloginRateLimiter.check(ip);\n\tif (email) accountRateLimiter.check(accountKey(email));\n}\nfunction clearRateLimit(ip, email) {\n\tloginRateLimiter.clear(ip);\n\tif (email) accountRateLimiter.clear(accountKey(email));\n}\nvar addressWarningIssued = false;\nfunction warnIfAddressKeysCollapse(ip, log) {\n\tif (addressWarningIssued) return;\n\tif (private_env.ADDRESS_HEADER) return;\n\tif (ip !== \"127.0.0.1\" && ip !== \"::1\" && ip !== \"::ffff:127.0.0.1\") return;\n\taddressWarningIssued = true;\n\tlog.warn(\"Login rate limiting is keyed to the loopback address for every request. The app is behind a proxy but ADDRESS_HEADER is unset, so getClientAddress() returns the socket peer and all clients share one bucket — five failed logins lock out the whole instance. Set ADDRESS_HEADER=X-Forwarded-For and XFF_DEPTH to your proxy count (see .env.example).\", { component: \"auth/rate-limit\" });\n}\nfunction setSessionCookie(cookies, sessionToken) {\n\tconst isSecure = process.env.NODE_ENV === \"production\" && private_env.ALLOW_INSECURE_COOKIES !== \"true\";\n\tcookies.set(SESSION_COOKIE_NAME, sessionToken, {\n\t\tpath: \"/\",\n\t\thttpOnly: true,\n\t\tsameSite: \"lax\",\n\t\tsecure: isSecure,\n\t\tmaxAge: SESSION_MAX_AGE_MS / 1e3\n\t});\n}\n/** Read before `destroySession` — logout needs the token to revoke it provider-side. */\nfunction getSessionToken(cookies) {\n\treturn cookies.get(SESSION_COOKIE_NAME);\n}\nfunction destroySession(cookies) {\n\tcookies.delete(SESSION_COOKIE_NAME, { path: \"/\" });\n\tcookies.delete(REFRESH_COOKIE_NAME, { path: \"/\" });\n}\n/**\n* Refresh-token cookie for the OAuth/Supabase flow — `hooks.server.ts`'s\n* session-refresh middleware swaps an expired access token for a fresh one\n* using this. Local/HMAC sessions don't need it.\n*/\nfunction setRefreshCookie(cookies, refreshToken) {\n\tconst isSecure = process.env.NODE_ENV === \"production\" && private_env.ALLOW_INSECURE_COOKIES !== \"true\";\n\tcookies.set(REFRESH_COOKIE_NAME, refreshToken, {\n\t\tpath: \"/\",\n\t\thttpOnly: true,\n\t\tsameSite: \"lax\",\n\t\tsecure: isSecure,\n\t\tmaxAge: REFRESH_MAX_AGE_MS / 1e3\n\t});\n}\nfunction getRefreshToken(cookies) {\n\treturn cookies.get(REFRESH_COOKIE_NAME);\n}\nfunction clearRefreshCookie(cookies) {\n\tcookies.delete(REFRESH_COOKIE_NAME, { path: \"/\" });\n}\n/**\n* Rejects a request whose declared `Content-Length` exceeds `maxBytes` — a\n* per-route lower bound under the global adapter-node `BODY_SIZE_LIMIT`\n* (which must stay high enough for 50MB .gh uploads). Throws 413 before the\n* body is read; see `declaredBodySizeExceeds` for the chunked-encoding caveat.\n*/\nfunction requireMaxBodySize(request, maxBytes) {\n\tif (declaredBodySizeExceeds(request.headers, maxBytes)) throw error(413, `Request body exceeds the limit for this endpoint.`);\n}\n//#endregion\nexport { getRefreshToken as a, requireMaxBodySize as c, warnIfAddressKeysCollapse as d, createComputeRateLimiter as f, destroySession as i, setRefreshCookie as l, clearRateLimit as n, getSessionToken as o, clearRefreshCookie as r, recordFailedAttempt as s, checkRateLimit as t, setSessionCookie as u };\n"],"names":[],"mappings":";;;;;;;AAGA;AACA,SAAS,wBAAwB,CAAC,MAAM,EAAE;AAC1C,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,MAAM;AAC1C,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;AAC/D,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,IAAI,QAAQ,CAAC,CAAC;AACpF,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;AACtC,EAAE,GAAG,MAAM;AACX,EAAE,OAAO;AACT,EAAE;AACF,EAAE,CAAC;AACH,CAAC,MAAM,OAAO,mBAAmB,IAAI,GAAG,EAAE;AAC1C,CAAC,IAAI,WAAW,GAAG,MAAM,CAAC,iBAAiB;AAC3C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,CAAC,SAAS,UAAU,CAAC,GAAG,EAAE,QAAQ,GAAG,CAAC,EAAE;AACxC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;AAChD,EAAE,IAAI,EAAE,eAAe,GAAG,CAAC,IAAI,GAAG,IAAI,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,IAAI,MAAM,EAAE;AAC9E,EAAE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;AAClF,EAAE,IAAI,eAAe,GAAG,CAAC,EAAE,WAAW,GAAG,GAAG,GAAG,eAAe;AAC9D,EAAE,IAAI,OAAO,CAAC,IAAI,GAAG,MAAM,EAAE;AAC7B,GAAG,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACxF,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxF,EAAE;AACF,CAAC;AACD,CAAC,OAAO;AACR,EAAE,MAAM,EAAE,cAAc;AACxB,EAAE,KAAK,CAAC,GAAG,EAAE;AACb,GAAG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;AACzB,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC5C,GAAG,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;AACjC,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE;AACtC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;AACrB,KAAK,KAAK,EAAE,CAAC;AACb,KAAK,OAAO,EAAE,GAAG,GAAG;AACpB,KAAK,CAAC;AACN,IAAI,IAAI,eAAe,GAAG,CAAC,IAAI,WAAW,KAAK,MAAM,CAAC,iBAAiB,EAAE,WAAW,GAAG,GAAG,GAAG,eAAe;AAC5G,IAAI,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;AAC5B,GAAG;AACH,GAAG,IAAI,KAAK,CAAC,KAAK,IAAI,YAAY,EAAE,OAAO;AAC3C,IAAI,OAAO,EAAE,KAAK;AAClB,IAAI,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,IAAI,GAAG;AACrD,IAAI;AACJ,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC;AACnB,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;AAC3B,EAAE,CAAC;AACH,EAAE,IAAI,CAAC,GAAG,EAAE;AACZ,GAAG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;AACzB,GAAG,UAAU,CAAC,GAAG,CAAC;AAClB,GAAG,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;AACjC,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;AAC9D,GAAG,IAAI,KAAK,CAAC,KAAK,IAAI,YAAY,EAAE,OAAO;AAC3C,IAAI,OAAO,EAAE,KAAK;AAClB,IAAI,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,IAAI,GAAG;AACrD,IAAI;AACJ,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;AAC3B,EAAE,CAAC;AACH,EAAE,KAAK,CAAC,GAAG,EAAE;AACb,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;AACtB,EAAE,CAAC;AACH,EAAE,KAAK,CAAC,GAAG,EAAE;AACb,GAAG,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;AACjC,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC;AACrD,GAAG,OAAO,KAAK,CAAC,KAAK;AACrB,EAAE,CAAC;AACH,EAAE,KAAK,GAAG;AACV,GAAG,OAAO,CAAC,KAAK,EAAE;AAClB,GAAG,WAAW,GAAG,MAAM,CAAC,iBAAiB;AACzC,EAAE,CAAC;AACH,EAAE,IAAI,GAAG;AACT,GAAG,OAAO,OAAO,CAAC,IAAI;AACtB,EAAE;AACF,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,uBAAuB,CAAC,OAAO,EAAE,QAAQ,EAAE;AACpD,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AACvD,CAAC,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,QAAQ;AACxD;AACA;AACA;AACA,IAAI,mBAAmB,GAAG,eAAe;AACzC,IAAI,kBAAkB,GAAG,KAAK;AAC9B,IAAI,mBAAmB,GAAG,eAAe;AACzC,IAAI,kBAAkB,GAAG,MAAM;AAC/B,IAAI,eAAe,GAAG,GAAG;AACzB,IAAI,gBAAgB,GAAG,wBAAwB,CAAC;AAChD,CAAC,QAAQ,EAAE,eAAe;AAC1B,CAAC,YAAY,EAAE;AACf,CAAC,CAAC;AACF,IAAI,kBAAkB,GAAG,wBAAwB,CAAC;AAClD,CAAC,QAAQ,EAAE,eAAe;AAC1B,CAAC,YAAY,EAAE;AACf,CAAC,CAAC;AACF,SAAS,UAAU,CAAC,KAAK,EAAE;AAC3B,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AAC/C;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE;AACnC,CAAC,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;AAC5C,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,SAAS;AACzC,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,SAAS;AAC7B,CAAC,OAAO,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAClD;AACA,SAAS,mBAAmB,CAAC,EAAE,EAAE,KAAK,EAAE;AACxC,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;AAC3B,CAAC,IAAI,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AACvD;AACA,SAAS,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE;AACnC,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;AAC3B,CAAC,IAAI,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AACvD;AACA,IAAI,oBAAoB,GAAG,KAAK;AAChC,SAAS,yBAAyB,CAAC,EAAE,EAAE,GAAG,EAAE;AAC5C,CAAC,IAAI,oBAAoB,EAAE;AAC3B,CAAC,IAAI,WAAW,CAAC,cAAc,EAAE;AACjC,CAAC,IAAI,EAAE,KAAK,WAAW,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,kBAAkB,EAAE;AACtE,CAAC,oBAAoB,GAAG,IAAI;AAC5B,CAAC,GAAG,CAAC,IAAI,CAAC,0VAA0V,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;AACvY;AACA,SAAS,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE;AACjD,CAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,WAAW,CAAC,sBAAsB,KAAK,MAAM;AACxG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,YAAY,EAAE;AAChD,EAAE,IAAI,EAAE,GAAG;AACX,EAAE,QAAQ,EAAE,IAAI;AAChB,EAAE,QAAQ,EAAE,KAAK;AACjB,EAAE,MAAM,EAAE,QAAQ;AAClB,EAAE,MAAM,EAAE,kBAAkB,GAAG;AAC/B,EAAE,CAAC;AACH;AACA;AACA,SAAS,eAAe,CAAC,OAAO,EAAE;AAClC,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;AACxC;AACA,SAAS,cAAc,CAAC,OAAO,EAAE;AACjC,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACnD,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACnD;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE;AACjD,CAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,WAAW,CAAC,sBAAsB,KAAK,MAAM;AACxG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,YAAY,EAAE;AAChD,EAAE,IAAI,EAAE,GAAG;AACX,EAAE,QAAQ,EAAE,IAAI;AAChB,EAAE,QAAQ,EAAE,KAAK;AACjB,EAAE,MAAM,EAAE,QAAQ;AAClB,EAAE,MAAM,EAAE,kBAAkB,GAAG;AAC/B,EAAE,CAAC;AACH;AACA,SAAS,eAAe,CAAC,OAAO,EAAE;AAClC,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;AACxC;AACA,SAAS,kBAAkB,CAAC,OAAO,EAAE;AACrC,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACnD;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,kBAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE;AAC/C,CAAC,IAAI,uBAAuB,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,iDAAiD,CAAC,CAAC;AAC9H;;;;"}

package/build/server/chunks/chunks/admin-config.js-b8oqF23o.js

@@ -1,3 +0,0 @@
-import './src.js-B12bUNyu.js';
-import './computeLimits.js-Du0cIhYp.js';
-//# sourceMappingURL=admin-config.js-b8oqF23o.js.map

package/build/server/chunks/chunks/admin-config.js-b8oqF23o.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin-config.js-b8oqF23o.js","sources":[],"sourcesContent":[],"names":[],"mappings":";"}