@selvajs/selva 4.20.0-beta.12 → 4.20.0-beta.14

package/build/server/chunks/chunks/solve.server.js-DvmmuTYF.js

@@ -0,0 +1,315 @@
+import { y as getStorageProvider, p as providers, A as getSolveMetricSink, k as lazyLogger } from './providers.server.js-DbrdtkJK.js';
+import { r as renderThrown } from './definitions.js-B_LZcC8G.js';
+import { c as resolveServerForOrg, j as createRemoteDefinitionFetcher } from './compute.js-srroNvr-.js';
+import { f as ApiError, A as ApiErrorCode, t as toErrorBody, V as requireCanEditDefinition, P as scoped, O as requireCanSolve, g as isApiError, C as ComputeServerUnconfiguredError } from './access.js-DbWaEG7Y.js';
+import { f as fetchSchemaFromCompute } from './schema-extraction.js-DxFeK69H.js';
+import { z as chargeApiRateLimit, B as rateLimitedResponse, D as withRateLimitHeaders, k as assertScope } from './api.js-CWQeuHWw.js';
+import { t, e } from './grasshopper.js-CdYz2gPd.js';
+import { a as apiError } from './api-errors.js-Byazqvy4.js';
+import './src.js-BQFsdJf3.js';
+import { isHttpError } from '@sveltejs/kit';
+import { b as engine, C as COMPUTE_DEBUG } from './engine.server.js-BaQbE4CG.js';
+import { e as REMOTE_DEFINITION_CACHE_TTL_MS, f as REMOTE_DEFINITION_FETCH_TIMEOUT_MS, g as REMOTE_DEFINITION_MAX_BYTES, S as SOLVE_DEADLINE_MS } from './computeLimits.js-CQyJFKqu.js';
+import { c as checkComputeRateLimit, a as apiRateLimiter } from './computeRateLimit.server.js-DnvPu8b5.js';
+import { b as bindLiveSolve, l as liveOwnerKey, s as solveEndedKind } from './liveSolve.server.js-DpRBaHA5.js';
+
+// src/lib/server/compute/remoteDefinition.server.ts
+/**
+* App-wide instance of the remote-definition fetcher (SSRF guard, size cap,
+* deadline, TTL cache all live in `@selvajs/server`'s `createRemoteDefinitionFetcher`).
+*/
+var fetcher = createRemoteDefinitionFetcher({
+	maxBytes: REMOTE_DEFINITION_MAX_BYTES,
+	fetchTimeoutMs: REMOTE_DEFINITION_FETCH_TIMEOUT_MS,
+	cacheTtlMs: REMOTE_DEFINITION_CACHE_TTL_MS,
+	now: () => Date.now(),
+	logger: lazyLogger
+});
+/** Fetch (or return cached) remote `.gh` bytes. Throws on unsafe host / oversized / timeout. */
+function loadRemoteDefinition(url) {
+	return fetcher.load(url);
+}
+// src/lib/server/compute/solve.server.ts
+/**
+* The body-independent core of a solve request, shared by `POST /api/v1/compute`
+* (share-token and remote-URL capable) and `POST /api/v1/definitions/{guid}/solve`
+* (tenant-scoped, cookie or PAT).
+*
+* **Share-token resolution stays outside this module, in the route.** The caller
+* hands in an already-decided `SolveAccess`; the definition-addressed route only
+* ever constructs the `user` variant, so it cannot inherit the anonymous branch
+* by accident. Adding a token lookup here would silently give it one.
+*
+* What lives here: rate limiting, definition/version resolution, access checks,
+* compute-server routing, schema backfill, the engine call, metric recording, the
+* debug breakdown. What stays in a route: parsing its own body shape and deciding
+* who the caller is.
+*/
+/**
+* Run a solve and return the HTTP response.
+*
+* Throws `HttpError` (via `apiError`) for every refusal, and lets engine/network
+* failures propagate for the caller's outer catch to map — the two routes share
+* that mapping through `mapSolveError`.
+*/
+async function runSolve(params) {
+	const { access, definitionUrl, inputs, values, channel, versionId: explicitVersionId, request, locals, loadStart, prepMarks, concealAccessFailure = false, streamId = null } = params;
+	const storage = getStorageProvider();
+	const sharedAccess = access.kind === "share" ? access : null;
+	const solveCtx = access.ctx;
+	let prevMark = performance.now();
+	const mark = (label) => {
+		prepMarks.push([label, performance.now() - prevMark]);
+		prevMark = performance.now();
+	};
+	let definitionSource;
+	let localDefinitionRef = null;
+	let localVersionForBackfill = null;
+	let solveOrgId = null;
+	let definitionPin = null;
+	let metricDefinitionId = null;
+	let metricVersionId = null;
+	const isLocal = definitionUrl.startsWith("local:");
+	const guid = isLocal ? definitionUrl.substring(6) : null;
+	const recordMetric = (failureKind, extra = {}) => {
+		getSolveMetricSink().record(solveCtx, {
+			definitionUrl,
+			definitionId: metricDefinitionId,
+			versionId: metricVersionId,
+			channel,
+			orgId: solveOrgId,
+			durationMs: extra.durationMs ?? 0,
+			ok: failureKind === "ok",
+			failureKind,
+			errorCount: extra.errorCount ?? 0,
+			warningCount: extra.warningCount ?? 0
+		}).catch((err) => locals.log.error("Solve-metric record failed", {
+			component: "API/Compute",
+			err: renderThrown(err)
+		}));
+	};
+	const tokenVerdict = await chargeApiRateLimit(access.ctx, apiRateLimiter);
+	if (tokenVerdict && !tokenVerdict.allowed) {
+		recordMetric("rate_limited");
+		return rateLimitedResponse(tokenVerdict);
+	}
+	const rateLimit = checkComputeRateLimit(access.rateLimitKey);
+	if (!rateLimit.allowed) {
+		recordMetric("rate_limited");
+		const retryAfter = String(rateLimit.retryAfter ?? 1);
+		const err = new ApiError(429, ApiErrorCode.RATE_LIMITED, `Too many compute requests. Retry in ${retryAfter}s.`, void 0, { retryAfter });
+		return withRateLimitHeaders(new Response(JSON.stringify(toErrorBody(err)), {
+			status: 429,
+			headers: {
+				"Content-Type": "application/json",
+				"Retry-After": retryAfter
+			}
+		}), tokenVerdict);
+	}
+	if (isLocal && guid) {
+		let record;
+		try {
+			record = await providers.data.definitions.get(solveCtx, guid);
+		} catch (err) {
+			locals.log.error("Failed to load local definition", {
+				component: "API/Compute",
+				guid,
+				err: renderThrown(err)
+			});
+			apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' not found`);
+		}
+		if (!record) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' not found`);
+		mark("defRecord");
+		const project = await providers.data.projects.getProject(solveCtx, record.projectId);
+		solveOrgId = project?.orgId ?? null;
+		definitionPin = record.computeServerId ?? null;
+		mark("project");
+		if (!sharedAccess) try {
+			assertScope(access.ctx, "solve", {
+				projectId: record.projectId,
+				definitionId: guid
+			});
+			if (channel === "draft" || explicitVersionId) await requireCanEditDefinition(scoped(locals), record.projectId, guid, {
+				project,
+				definition: record
+			});
+			else await requireCanSolve(scoped(locals), record.projectId, project ?? void 0);
+		} catch (err) {
+			const status = isApiError(err) ? err.status : isHttpError(err) ? err.status : void 0;
+			if (concealAccessFailure && status === 403) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' not found`);
+			throw err;
+		}
+		mark("access");
+		const versionId = explicitVersionId ?? (channel === "live" ? record.liveVersionId : record.draftVersionId);
+		if (!versionId) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' has no ${channel} version yet`);
+		const version = await providers.data.definitions.getVersion(solveCtx, versionId);
+		if (!version || version.definitionId !== guid) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' version is missing`);
+		localVersionForBackfill = {
+			id: version.id,
+			hasSchema: version.schema !== void 0
+		};
+		metricDefinitionId = guid;
+		metricVersionId = version.id;
+		mark("version");
+		localDefinitionRef = engine.definitionRef(version.id, async () => {
+			const bytes = await storage.get(version.fileKey);
+			if (!bytes) throw new Error(`Version blob missing: ${version.fileKey}`);
+			return bytes;
+		});
+		definitionSource = localDefinitionRef;
+		mark("blob");
+	} else {
+		assertScope(access.ctx, "solve");
+		try {
+			definitionSource = await loadRemoteDefinition(definitionUrl);
+		} catch (err) {
+			locals.log.error("Failed to fetch remote definition", {
+				component: "API/Compute",
+				definitionUrl,
+				err: renderThrown(err)
+			});
+			apiError(400, ApiErrorCode.VALIDATION_FAILED, `Failed to load definition: ${err instanceof Error ? err.message : String(err)}`);
+		}
+		mark("remoteDef");
+	}
+	const defLoadMs = performance.now() - loadStart;
+	if (sharedAccess) {
+		if (await providers.data.shareLinks.tryIncrementSolveCount(solveCtx, sharedAccess.link.id) === null) {
+			recordMetric("share_cap");
+			apiError(429, ApiErrorCode.RATE_LIMITED, "Share link solve cap reached.");
+		}
+		mark("shareCap");
+	}
+	const serverConfig = await resolveServerForOrg(solveCtx, solveOrgId, locals.providers.data.computeServer, { definitionPin });
+	mark("resolveServer");
+	if (localVersionForBackfill && !localVersionForBackfill.hasSchema && localDefinitionRef) {
+		const versionId = localVersionForBackfill.id;
+		try {
+			const bytes = await localDefinitionRef.load();
+			const schema = await fetchSchemaFromCompute(bytes, serverConfig);
+			await providers.data.definitions.setVersionSchema(solveCtx, versionId, schema);
+		} catch (err) {
+			locals.log.warn("Schema backfill failed", {
+				component: "API/Compute",
+				versionId,
+				err: renderThrown(err)
+			});
+		}
+		mark("schemaBackfill");
+	}
+	const live = bindLiveSolve({
+		ownerKey: liveOwnerKey(access.kind === "user" ? access.ctx.userId : null),
+		streamId,
+		request,
+		tokenTtlMs: SOLVE_DEADLINE_MS + 6e4
+	});
+	let outcome;
+	try {
+		outcome = await engine.solve({
+			server: serverConfig,
+			definitionSource,
+			definitionKey: isLocal ? void 0 : definitionUrl,
+			inputs,
+			values,
+			signal: request.signal,
+			acceptEncoding: request.headers.get("accept-encoding") ?? "",
+			definitionGuid: guid ?? void 0,
+			loadStartMs: loadStart,
+			defLoadMs,
+			prepMarks,
+			selvaEvents: live.selvaEvents
+		});
+	} finally {
+		live.end(outcome ? solveEndedKind(outcome) : "error");
+	}
+	mark("solve");
+	if (outcome.kind === "timeout") recordMetric("timeout", { durationMs: outcome.durationMs });
+	else if (outcome.kind === "client_abort") recordMetric("client_abort", { durationMs: outcome.durationMs });
+	else if (outcome.kind === "too_large") recordMetric("too_large");
+	else if (outcome.kind === "shed") recordMetric("shed", { durationMs: outcome.durationMs });
+	else if (outcome.kind === "ok") {
+		recordMetric("ok", {
+			durationMs: outcome.solveMs,
+			errorCount: outcome.errorCount,
+			warningCount: outcome.warningCount
+		});
+		if (metricDefinitionId) providers.data.definitions.incrementSolveCount(solveCtx, metricDefinitionId).catch((err) => locals.log.warn("solveCount increment failed", {
+			component: "API/Compute",
+			definitionId: metricDefinitionId,
+			err: renderThrown(err)
+		}));
+		if (COMPUTE_DEBUG) logDebugBreakdown(locals, request, outcome, defLoadMs, prepMarks);
+	}
+	return withRateLimitHeaders(engine.toWebResponse(outcome), tokenVerdict);
+}
+/**
+* Both solve routes share this so they cannot drift on which failures read as
+* "compute is down" (503) versus a server bug (500).
+*/
+function mapSolveError(err, locals) {
+	if (isHttpError(err)) throw err;
+	if (isApiError(err)) apiError(err.status, err.code, err.message, err.fields, err.details);
+	if (err instanceof ComputeServerUnconfiguredError) apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, err.message);
+	const message = err instanceof Error ? err.message : "Unknown error";
+	locals.log.error("Solve request failed", {
+		component: "API/Compute",
+		err: renderThrown(err),
+		...err instanceof t && typeof err.context?.responseBody === "string" && { computeResponseBody: err.context.responseBody }
+	});
+	if (err instanceof t) {
+		if (err.code === e.NETWORK_ERROR || err.code === e.CORS_ERROR) apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, "Compute server is unreachable");
+		if (err.code === e.AUTH_ERROR) apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, "Compute server rejected this deployment's credentials — check the compute API key configuration.");
+		if (err.code === e.RATE_LIMIT) apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, "Compute server is rate-limiting requests. Retry shortly.");
+		if (err.code === e.TIMEOUT_ERROR) apiError(504, ApiErrorCode.COMPUTE_UNAVAILABLE, "Compute server timed out running the solve.");
+	}
+	if (err instanceof TypeError && message === "fetch failed") apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, "Compute server is unreachable");
+	apiError(500, ApiErrorCode.INTERNAL, message);
+}
+/**
+* DEBUG (SELVA_FLAG_COMPUTE_DEBUG): the server-side overhead the solve metric's
+* `durationMs` doesn't capture. `load` = auth + DB + definition fetch; `tree` =
+* input tree build; `serialize` = JSON.stringify of the result.
+*/
+function logDebugBreakdown(locals, request, outcome, defLoadMs, prepMarks) {
+	const { metrics } = outcome.envelope;
+	locals.log.debug("Solve server-side phase breakdown", {
+		component: "Compute/server",
+		loadMs: Math.round(defLoadMs),
+		treeBuildMs: Math.round(metrics.treeBuildMs),
+		solveMs: Math.round(metrics.solveMs),
+		serializeMs: Math.round(metrics.serializeMs),
+		gzipMs: Math.round(metrics.gzipMs),
+		serverTotalMs: Math.round(metrics.serverTotalMs),
+		serializedBytes: metrics.serializedBytes
+	});
+	if (metrics.compressedBytes !== null) locals.log.debug("Response gzipped", {
+		component: "Compute/server",
+		serializedBytes: metrics.serializedBytes,
+		compressedBytes: metrics.compressedBytes,
+		ratio: Number((metrics.serializedBytes / metrics.compressedBytes).toFixed(1))
+	});
+	else {
+		const acceptEncoding = request.headers.get("accept-encoding") ?? "";
+		locals.log.debug("Compression skipped", {
+			component: "Compute/server",
+			acceptEncoding,
+			hasAcceptEncoding: acceptEncoding !== ""
+		});
+	}
+	locals.log.debug("Prep breakdown", {
+		component: "Compute/server",
+		...Object.fromEntries(prepMarks.map(([label, ms]) => [`p_${label}Ms`, Math.round(ms)]))
+	});
+	const db = engine.stats().definitionBytes;
+	locals.log.debug("Definition byte-cache counters", {
+		component: "Compute/def-bytes",
+		hits: db.hits,
+		misses: db.misses,
+		evictions: db.evictions,
+		entries: db.entries,
+		retainedBytes: db.bytes
+	});
+}
+
+export { mapSolveError as m, runSolve as r };
+//# sourceMappingURL=solve.server.js-DvmmuTYF.js.map

package/build/server/chunks/chunks/solve.server.js-DvmmuTYF.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"solve.server.js-DvmmuTYF.js","sources":["../../../../.svelte-kit/output/server/chunks/solve.server.js"],"sourcesContent":["import { T as providers, b as getSolveMetricSink, w as lazyLogger, x as getStorageProvider } from \"./providers.server.js\";\nimport { a as renderThrown } from \"./definitions.js\";\nimport { a as createRemoteDefinitionFetcher, i as resolveServerForOrg } from \"./compute.js\";\nimport { D as ApiError, M as toErrorBody, N as ComputeServerUnconfiguredError, O as ApiErrorCode, T as scoped, j as isApiError, m as requireCanSolve, u as requireCanEditDefinition } from \"./access.js\";\nimport { r as fetchSchemaFromCompute } from \"./schema-extraction.js\";\nimport { D as chargeApiRateLimit, M as assertScope, j as withRateLimitHeaders, k as rateLimitedResponse } from \"./api.js\";\nimport { f as e, m as t } from \"./grasshopper.js\";\nimport { t as apiError } from \"./api-errors.js\";\nimport \"./access2.server.js\";\nimport { a as engine, t as COMPUTE_DEBUG } from \"./engine.server.js\";\nimport { d as REMOTE_DEFINITION_MAX_BYTES, f as SOLVE_DEADLINE_MS, l as REMOTE_DEFINITION_CACHE_TTL_MS, u as REMOTE_DEFINITION_FETCH_TIMEOUT_MS } from \"./computeLimits.js\";\nimport { n as checkComputeRateLimit, t as apiRateLimiter } from \"./computeRateLimit.server.js\";\nimport { n as liveOwnerKey, r as solveEndedKind, t as bindLiveSolve } from \"./liveSolve.server.js\";\nimport { isHttpError } from \"@sveltejs/kit\";\n// src/lib/server/compute/remoteDefinition.server.ts\n/**\n* App-wide instance of the remote-definition fetcher (SSRF guard, size cap,\n* deadline, TTL cache all live in `@selvajs/server`'s `createRemoteDefinitionFetcher`).\n*/\nvar fetcher = createRemoteDefinitionFetcher({\n\tmaxBytes: REMOTE_DEFINITION_MAX_BYTES,\n\tfetchTimeoutMs: REMOTE_DEFINITION_FETCH_TIMEOUT_MS,\n\tcacheTtlMs: REMOTE_DEFINITION_CACHE_TTL_MS,\n\tnow: () => Date.now(),\n\tlogger: lazyLogger\n});\n/** Fetch (or return cached) remote `.gh` bytes. Throws on unsafe host / oversized / timeout. */\nfunction loadRemoteDefinition(url) {\n\treturn fetcher.load(url);\n}\n// src/lib/server/compute/solve.server.ts\n/**\n* The body-independent core of a solve request, shared by `POST /api/v1/compute`\n* (share-token and remote-URL capable) and `POST /api/v1/definitions/{guid}/solve`\n* (tenant-scoped, cookie or PAT).\n*\n* **Share-token resolution stays outside this module, in the route.** The caller\n* hands in an already-decided `SolveAccess`; the definition-addressed route only\n* ever constructs the `user` variant, so it cannot inherit the anonymous branch\n* by accident. Adding a token lookup here would silently give it one.\n*\n* What lives here: rate limiting, definition/version resolution, access checks,\n* compute-server routing, schema backfill, the engine call, metric recording, the\n* debug breakdown. What stays in a route: parsing its own body shape and deciding\n* who the caller is.\n*/\n/**\n* Run a solve and return the HTTP response.\n*\n* Throws `HttpError` (via `apiError`) for every refusal, and lets engine/network\n* failures propagate for the caller's outer catch to map — the two routes share\n* that mapping through `mapSolveError`.\n*/\nasync function runSolve(params) {\n\tconst { access, definitionUrl, inputs, values, channel, versionId: explicitVersionId, request, locals, loadStart, prepMarks, concealAccessFailure = false, streamId = null } = params;\n\tconst storage = getStorageProvider();\n\tconst sharedAccess = access.kind === \"share\" ? access : null;\n\tconst solveCtx = access.ctx;\n\tlet prevMark = performance.now();\n\tconst mark = (label) => {\n\t\tprepMarks.push([label, performance.now() - prevMark]);\n\t\tprevMark = performance.now();\n\t};\n\tlet definitionSource;\n\tlet localDefinitionRef = null;\n\tlet localVersionForBackfill = null;\n\tlet solveOrgId = null;\n\tlet definitionPin = null;\n\tlet metricDefinitionId = null;\n\tlet metricVersionId = null;\n\tconst isLocal = definitionUrl.startsWith(\"local:\");\n\tconst guid = isLocal ? definitionUrl.substring(6) : null;\n\tconst recordMetric = (failureKind, extra = {}) => {\n\t\tgetSolveMetricSink().record(solveCtx, {\n\t\t\tdefinitionUrl,\n\t\t\tdefinitionId: metricDefinitionId,\n\t\t\tversionId: metricVersionId,\n\t\t\tchannel,\n\t\t\torgId: solveOrgId,\n\t\t\tdurationMs: extra.durationMs ?? 0,\n\t\t\tok: failureKind === \"ok\",\n\t\t\tfailureKind,\n\t\t\terrorCount: extra.errorCount ?? 0,\n\t\t\twarningCount: extra.warningCount ?? 0\n\t\t}).catch((err) => locals.log.error(\"Solve-metric record failed\", {\n\t\t\tcomponent: \"API/Compute\",\n\t\t\terr: renderThrown(err)\n\t\t}));\n\t};\n\tconst tokenVerdict = await chargeApiRateLimit(access.ctx, apiRateLimiter);\n\tif (tokenVerdict && !tokenVerdict.allowed) {\n\t\trecordMetric(\"rate_limited\");\n\t\treturn rateLimitedResponse(tokenVerdict);\n\t}\n\tconst rateLimit = checkComputeRateLimit(access.rateLimitKey);\n\tif (!rateLimit.allowed) {\n\t\trecordMetric(\"rate_limited\");\n\t\tconst retryAfter = String(rateLimit.retryAfter ?? 1);\n\t\tconst err = new ApiError(429, ApiErrorCode.RATE_LIMITED, `Too many compute requests. Retry in ${retryAfter}s.`, void 0, { retryAfter });\n\t\treturn withRateLimitHeaders(new Response(JSON.stringify(toErrorBody(err)), {\n\t\t\tstatus: 429,\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\"Retry-After\": retryAfter\n\t\t\t}\n\t\t}), tokenVerdict);\n\t}\n\tif (isLocal && guid) {\n\t\tlet record;\n\t\ttry {\n\t\t\trecord = await providers.data.definitions.get(solveCtx, guid);\n\t\t} catch (err) {\n\t\t\tlocals.log.error(\"Failed to load local definition\", {\n\t\t\t\tcomponent: \"API/Compute\",\n\t\t\t\tguid,\n\t\t\t\terr: renderThrown(err)\n\t\t\t});\n\t\t\tapiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' not found`);\n\t\t}\n\t\tif (!record) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' not found`);\n\t\tmark(\"defRecord\");\n\t\tconst project = await providers.data.projects.getProject(solveCtx, record.projectId);\n\t\tsolveOrgId = project?.orgId ?? null;\n\t\tdefinitionPin = record.computeServerId ?? null;\n\t\tmark(\"project\");\n\t\tif (!sharedAccess) try {\n\t\t\tassertScope(access.ctx, \"solve\", {\n\t\t\t\tprojectId: record.projectId,\n\t\t\t\tdefinitionId: guid\n\t\t\t});\n\t\t\tif (channel === \"draft\" || explicitVersionId) await requireCanEditDefinition(scoped(locals), record.projectId, guid, {\n\t\t\t\tproject,\n\t\t\t\tdefinition: record\n\t\t\t});\n\t\t\telse await requireCanSolve(scoped(locals), record.projectId, project ?? void 0);\n\t\t} catch (err) {\n\t\t\tconst status = isApiError(err) ? err.status : isHttpError(err) ? err.status : void 0;\n\t\t\tif (concealAccessFailure && status === 403) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' not found`);\n\t\t\tthrow err;\n\t\t}\n\t\tmark(\"access\");\n\t\tconst versionId = explicitVersionId ?? (channel === \"live\" ? record.liveVersionId : record.draftVersionId);\n\t\tif (!versionId) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' has no ${channel} version yet`);\n\t\tconst version = await providers.data.definitions.getVersion(solveCtx, versionId);\n\t\tif (!version || version.definitionId !== guid) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' version is missing`);\n\t\tlocalVersionForBackfill = {\n\t\t\tid: version.id,\n\t\t\thasSchema: version.schema !== void 0\n\t\t};\n\t\tmetricDefinitionId = guid;\n\t\tmetricVersionId = version.id;\n\t\tmark(\"version\");\n\t\tlocalDefinitionRef = engine.definitionRef(version.id, async () => {\n\t\t\tconst bytes = await storage.get(version.fileKey);\n\t\t\tif (!bytes) throw new Error(`Version blob missing: ${version.fileKey}`);\n\t\t\treturn bytes;\n\t\t});\n\t\tdefinitionSource = localDefinitionRef;\n\t\tmark(\"blob\");\n\t} else {\n\t\tassertScope(access.ctx, \"solve\");\n\t\ttry {\n\t\t\tdefinitionSource = await loadRemoteDefinition(definitionUrl);\n\t\t} catch (err) {\n\t\t\tlocals.log.error(\"Failed to fetch remote definition\", {\n\t\t\t\tcomponent: \"API/Compute\",\n\t\t\t\tdefinitionUrl,\n\t\t\t\terr: renderThrown(err)\n\t\t\t});\n\t\t\tapiError(400, ApiErrorCode.VALIDATION_FAILED, `Failed to load definition: ${err instanceof Error ? err.message : String(err)}`);\n\t\t}\n\t\tmark(\"remoteDef\");\n\t}\n\tconst defLoadMs = performance.now() - loadStart;\n\tif (sharedAccess) {\n\t\tif (await providers.data.shareLinks.tryIncrementSolveCount(solveCtx, sharedAccess.link.id) === null) {\n\t\t\trecordMetric(\"share_cap\");\n\t\t\tapiError(429, ApiErrorCode.RATE_LIMITED, \"Share link solve cap reached.\");\n\t\t}\n\t\tmark(\"shareCap\");\n\t}\n\tconst serverConfig = await resolveServerForOrg(solveCtx, solveOrgId, locals.providers.data.computeServer, { definitionPin });\n\tmark(\"resolveServer\");\n\tif (localVersionForBackfill && !localVersionForBackfill.hasSchema && localDefinitionRef) {\n\t\tconst versionId = localVersionForBackfill.id;\n\t\ttry {\n\t\t\tconst bytes = await localDefinitionRef.load();\n\t\t\tconst schema = await fetchSchemaFromCompute(bytes, serverConfig);\n\t\t\tawait providers.data.definitions.setVersionSchema(solveCtx, versionId, schema);\n\t\t} catch (err) {\n\t\t\tlocals.log.warn(\"Schema backfill failed\", {\n\t\t\t\tcomponent: \"API/Compute\",\n\t\t\t\tversionId,\n\t\t\t\terr: renderThrown(err)\n\t\t\t});\n\t\t}\n\t\tmark(\"schemaBackfill\");\n\t}\n\tconst live = bindLiveSolve({\n\t\townerKey: liveOwnerKey(access.kind === \"user\" ? access.ctx.userId : null),\n\t\tstreamId,\n\t\trequest,\n\t\ttokenTtlMs: SOLVE_DEADLINE_MS + 6e4\n\t});\n\tlet outcome;\n\ttry {\n\t\toutcome = await engine.solve({\n\t\t\tserver: serverConfig,\n\t\t\tdefinitionSource,\n\t\t\tdefinitionKey: isLocal ? void 0 : definitionUrl,\n\t\t\tinputs,\n\t\t\tvalues,\n\t\t\tsignal: request.signal,\n\t\t\tacceptEncoding: request.headers.get(\"accept-encoding\") ?? \"\",\n\t\t\tdefinitionGuid: guid ?? void 0,\n\t\t\tloadStartMs: loadStart,\n\t\t\tdefLoadMs,\n\t\t\tprepMarks,\n\t\t\tselvaEvents: live.selvaEvents\n\t\t});\n\t} finally {\n\t\tlive.end(outcome ? solveEndedKind(outcome) : \"error\");\n\t}\n\tmark(\"solve\");\n\tif (outcome.kind === \"timeout\") recordMetric(\"timeout\", { durationMs: outcome.durationMs });\n\telse if (outcome.kind === \"client_abort\") recordMetric(\"client_abort\", { durationMs: outcome.durationMs });\n\telse if (outcome.kind === \"too_large\") recordMetric(\"too_large\");\n\telse if (outcome.kind === \"shed\") recordMetric(\"shed\", { durationMs: outcome.durationMs });\n\telse if (outcome.kind === \"ok\") {\n\t\trecordMetric(\"ok\", {\n\t\t\tdurationMs: outcome.solveMs,\n\t\t\terrorCount: outcome.errorCount,\n\t\t\twarningCount: outcome.warningCount\n\t\t});\n\t\tif (metricDefinitionId) providers.data.definitions.incrementSolveCount(solveCtx, metricDefinitionId).catch((err) => locals.log.warn(\"solveCount increment failed\", {\n\t\t\tcomponent: \"API/Compute\",\n\t\t\tdefinitionId: metricDefinitionId,\n\t\t\terr: renderThrown(err)\n\t\t}));\n\t\tif (COMPUTE_DEBUG) logDebugBreakdown(locals, request, outcome, defLoadMs, prepMarks);\n\t}\n\treturn withRateLimitHeaders(engine.toWebResponse(outcome), tokenVerdict);\n}\n/**\n* Both solve routes share this so they cannot drift on which failures read as\n* \"compute is down\" (503) versus a server bug (500).\n*/\nfunction mapSolveError(err, locals) {\n\tif (isHttpError(err)) throw err;\n\tif (isApiError(err)) apiError(err.status, err.code, err.message, err.fields, err.details);\n\tif (err instanceof ComputeServerUnconfiguredError) apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, err.message);\n\tconst message = err instanceof Error ? err.message : \"Unknown error\";\n\tlocals.log.error(\"Solve request failed\", {\n\t\tcomponent: \"API/Compute\",\n\t\terr: renderThrown(err),\n\t\t...err instanceof t && typeof err.context?.responseBody === \"string\" && { computeResponseBody: err.context.responseBody }\n\t});\n\tif (err instanceof t) {\n\t\tif (err.code === e.NETWORK_ERROR || err.code === e.CORS_ERROR) apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, \"Compute server is unreachable\");\n\t\tif (err.code === e.AUTH_ERROR) apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, \"Compute server rejected this deployment's credentials — check the compute API key configuration.\");\n\t\tif (err.code === e.RATE_LIMIT) apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, \"Compute server is rate-limiting requests. Retry shortly.\");\n\t\tif (err.code === e.TIMEOUT_ERROR) apiError(504, ApiErrorCode.COMPUTE_UNAVAILABLE, \"Compute server timed out running the solve.\");\n\t}\n\tif (err instanceof TypeError && message === \"fetch failed\") apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, \"Compute server is unreachable\");\n\tapiError(500, ApiErrorCode.INTERNAL, message);\n}\n/**\n* DEBUG (SELVA_FLAG_COMPUTE_DEBUG): the server-side overhead the solve metric's\n* `durationMs` doesn't capture. `load` = auth + DB + definition fetch; `tree` =\n* input tree build; `serialize` = JSON.stringify of the result.\n*/\nfunction logDebugBreakdown(locals, request, outcome, defLoadMs, prepMarks) {\n\tconst { metrics } = outcome.envelope;\n\tlocals.log.debug(\"Solve server-side phase breakdown\", {\n\t\tcomponent: \"Compute/server\",\n\t\tloadMs: Math.round(defLoadMs),\n\t\ttreeBuildMs: Math.round(metrics.treeBuildMs),\n\t\tsolveMs: Math.round(metrics.solveMs),\n\t\tserializeMs: Math.round(metrics.serializeMs),\n\t\tgzipMs: Math.round(metrics.gzipMs),\n\t\tserverTotalMs: Math.round(metrics.serverTotalMs),\n\t\tserializedBytes: metrics.serializedBytes\n\t});\n\tif (metrics.compressedBytes !== null) locals.log.debug(\"Response gzipped\", {\n\t\tcomponent: \"Compute/server\",\n\t\tserializedBytes: metrics.serializedBytes,\n\t\tcompressedBytes: metrics.compressedBytes,\n\t\tratio: Number((metrics.serializedBytes / metrics.compressedBytes).toFixed(1))\n\t});\n\telse {\n\t\tconst acceptEncoding = request.headers.get(\"accept-encoding\") ?? \"\";\n\t\tlocals.log.debug(\"Compression skipped\", {\n\t\t\tcomponent: \"Compute/server\",\n\t\t\tacceptEncoding,\n\t\t\thasAcceptEncoding: acceptEncoding !== \"\"\n\t\t});\n\t}\n\tlocals.log.debug(\"Prep breakdown\", {\n\t\tcomponent: \"Compute/server\",\n\t\t...Object.fromEntries(prepMarks.map(([label, ms]) => [`p_${label}Ms`, Math.round(ms)]))\n\t});\n\tconst db = engine.stats().definitionBytes;\n\tlocals.log.debug(\"Definition byte-cache counters\", {\n\t\tcomponent: \"Compute/def-bytes\",\n\t\thits: db.hits,\n\t\tmisses: db.misses,\n\t\tevictions: db.evictions,\n\t\tentries: db.entries,\n\t\tretainedBytes: db.bytes\n\t});\n}\nexport { runSolve as n, mapSolveError as t };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAcA;AACA;AACA;AACA;AACA;AACA,IAAI,OAAO,GAAG,6BAA6B,CAAC;AAC5C,CAAC,QAAQ,EAAE,2BAA2B;AACtC,CAAC,cAAc,EAAE,kCAAkC;AACnD,CAAC,UAAU,EAAE,8BAA8B;AAC3C,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE;AACtB,CAAC,MAAM,EAAE;AACT,CAAC,CAAC;AACF;AACA,SAAS,oBAAoB,CAAC,GAAG,EAAE;AACnC,CAAC,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;AACzB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,QAAQ,CAAC,MAAM,EAAE;AAChC,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,oBAAoB,GAAG,KAAK,EAAE,QAAQ,GAAG,IAAI,EAAE,GAAG,MAAM;AACtL,CAAC,MAAM,OAAO,GAAG,kBAAkB,EAAE;AACrC,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,KAAK,OAAO,GAAG,MAAM,GAAG,IAAI;AAC7D,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG;AAC5B,CAAC,IAAI,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;AACjC,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK;AACzB,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC;AACvD,EAAE,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;AAC9B,CAAC,CAAC;AACF,CAAC,IAAI,gBAAgB;AACrB,CAAC,IAAI,kBAAkB,GAAG,IAAI;AAC9B,CAAC,IAAI,uBAAuB,GAAG,IAAI;AACnC,CAAC,IAAI,UAAU,GAAG,IAAI;AACtB,CAAC,IAAI,aAAa,GAAG,IAAI;AACzB,CAAC,IAAI,kBAAkB,GAAG,IAAI;AAC9B,CAAC,IAAI,eAAe,GAAG,IAAI;AAC3B,CAAC,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC;AACnD,CAAC,MAAM,IAAI,GAAG,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI;AACzD,CAAC,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,KAAK;AACnD,EAAE,kBAAkB,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE;AACxC,GAAG,aAAa;AAChB,GAAG,YAAY,EAAE,kBAAkB;AACnC,GAAG,SAAS,EAAE,eAAe;AAC7B,GAAG,OAAO;AACV,GAAG,KAAK,EAAE,UAAU;AACpB,GAAG,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC;AACpC,GAAG,EAAE,EAAE,WAAW,KAAK,IAAI;AAC3B,GAAG,WAAW;AACd,GAAG,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC;AACpC,GAAG,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI;AACvC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,4BAA4B,EAAE;AACnE,GAAG,SAAS,EAAE,aAAa;AAC3B,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC,CAAC;AACL,CAAC,CAAC;AACF,CAAC,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC;AAC1E,CAAC,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE;AAC5C,EAAE,YAAY,CAAC,cAAc,CAAC;AAC9B,EAAE,OAAO,mBAAmB,CAAC,YAAY,CAAC;AAC1C,CAAC;AACD,CAAC,MAAM,SAAS,GAAG,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC;AAC7D,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE;AACzB,EAAE,YAAY,CAAC,cAAc,CAAC;AAC9B,EAAE,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC;AACtD,EAAE,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,CAAC,oCAAoC,EAAE,UAAU,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC;AACzI,EAAE,OAAO,oBAAoB,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE;AAC7E,GAAG,MAAM,EAAE,GAAG;AACd,GAAG,OAAO,EAAE;AACZ,IAAI,cAAc,EAAE,kBAAkB;AACtC,IAAI,aAAa,EAAE;AACnB;AACA,GAAG,CAAC,EAAE,YAAY,CAAC;AACnB,CAAC;AACD,CAAC,IAAI,OAAO,IAAI,IAAI,EAAE;AACtB,EAAE,IAAI,MAAM;AACZ,EAAE,IAAI;AACN,GAAG,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC;AAChE,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,iCAAiC,EAAE;AACvD,IAAI,SAAS,EAAE,aAAa;AAC5B,IAAI,IAAI;AACR,IAAI,GAAG,EAAE,YAAY,CAAC,GAAG;AACzB,IAAI,CAAC;AACL,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;AAC1E,EAAE;AACF,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;AACtF,EAAE,IAAI,CAAC,WAAW,CAAC;AACnB,EAAE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC;AACtF,EAAE,UAAU,GAAG,OAAO,EAAE,KAAK,IAAI,IAAI;AACrC,EAAE,aAAa,GAAG,MAAM,CAAC,eAAe,IAAI,IAAI;AAChD,EAAE,IAAI,CAAC,SAAS,CAAC;AACjB,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI;AACzB,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE;AACpC,IAAI,SAAS,EAAE,MAAM,CAAC,SAAS;AAC/B,IAAI,YAAY,EAAE;AAClB,IAAI,CAAC;AACL,GAAG,IAAI,OAAO,KAAK,OAAO,IAAI,iBAAiB,EAAE,MAAM,wBAAwB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE;AACxH,IAAI,OAAO;AACX,IAAI,UAAU,EAAE;AAChB,IAAI,CAAC;AACL,QAAQ,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,IAAI,KAAK,CAAC,CAAC;AAClF,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,MAAM;AACvF,GAAG,IAAI,oBAAoB,IAAI,MAAM,KAAK,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;AACtH,GAAG,MAAM,GAAG;AACZ,EAAE;AACF,EAAE,IAAI,CAAC,QAAQ,CAAC;AAChB,EAAE,MAAM,SAAS,GAAG,iBAAiB,KAAK,OAAO,KAAK,MAAM,GAAG,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC;AAC5G,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;AAC7G,EAAE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC;AAClF,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;AACjI,EAAE,uBAAuB,GAAG;AAC5B,GAAG,EAAE,EAAE,OAAO,CAAC,EAAE;AACjB,GAAG,SAAS,EAAE,OAAO,CAAC,MAAM,KAAK;AACjC,GAAG;AACH,EAAE,kBAAkB,GAAG,IAAI;AAC3B,EAAE,eAAe,GAAG,OAAO,CAAC,EAAE;AAC9B,EAAE,IAAI,CAAC,SAAS,CAAC;AACjB,EAAE,kBAAkB,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY;AACpE,GAAG,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;AACnD,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,sBAAsB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1E,GAAG,OAAO,KAAK;AACf,EAAE,CAAC,CAAC;AACJ,EAAE,gBAAgB,GAAG,kBAAkB;AACvC,EAAE,IAAI,CAAC,MAAM,CAAC;AACd,CAAC,CAAC,MAAM;AACR,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC;AAClC,EAAE,IAAI;AACN,GAAG,gBAAgB,GAAG,MAAM,oBAAoB,CAAC,aAAa,CAAC;AAC/D,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,mCAAmC,EAAE;AACzD,IAAI,SAAS,EAAE,aAAa;AAC5B,IAAI,aAAa;AACjB,IAAI,GAAG,EAAE,YAAY,CAAC,GAAG;AACzB,IAAI,CAAC;AACL,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,2BAA2B,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAClI,EAAE;AACF,EAAE,IAAI,CAAC,WAAW,CAAC;AACnB,CAAC;AACD,CAAC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;AAChD,CAAC,IAAI,YAAY,EAAE;AACnB,EAAE,IAAI,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;AACvG,GAAG,YAAY,CAAC,WAAW,CAAC;AAC5B,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,+BAA+B,CAAC;AAC5E,EAAE;AACF,EAAE,IAAI,CAAC,UAAU,CAAC;AAClB,CAAC;AACD,CAAC,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,aAAa,EAAE,CAAC;AAC7H,CAAC,IAAI,CAAC,eAAe,CAAC;AACtB,CAAC,IAAI,uBAAuB,IAAI,CAAC,uBAAuB,CAAC,SAAS,IAAI,kBAAkB,EAAE;AAC1F,EAAE,MAAM,SAAS,GAAG,uBAAuB,CAAC,EAAE;AAC9C,EAAE,IAAI;AACN,GAAG,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE;AAChD,GAAG,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,KAAK,EAAE,YAAY,CAAC;AACnE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;AACjF,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE;AAC7C,IAAI,SAAS,EAAE,aAAa;AAC5B,IAAI,SAAS;AACb,IAAI,GAAG,EAAE,YAAY,CAAC,GAAG;AACzB,IAAI,CAAC;AACL,EAAE;AACF,EAAE,IAAI,CAAC,gBAAgB,CAAC;AACxB,CAAC;AACD,CAAC,MAAM,IAAI,GAAG,aAAa,CAAC;AAC5B,EAAE,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC;AAC3E,EAAE,QAAQ;AACV,EAAE,OAAO;AACT,EAAE,UAAU,EAAE,iBAAiB,GAAG;AAClC,EAAE,CAAC;AACH,CAAC,IAAI,OAAO;AACZ,CAAC,IAAI;AACL,EAAE,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC;AAC/B,GAAG,MAAM,EAAE,YAAY;AACvB,GAAG,gBAAgB;AACnB,GAAG,aAAa,EAAE,OAAO,GAAG,KAAK,CAAC,GAAG,aAAa;AAClD,GAAG,MAAM;AACT,GAAG,MAAM;AACT,GAAG,MAAM,EAAE,OAAO,CAAC,MAAM;AACzB,GAAG,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE;AAC/D,GAAG,cAAc,EAAE,IAAI,IAAI,KAAK,CAAC;AACjC,GAAG,WAAW,EAAE,SAAS;AACzB,GAAG,SAAS;AACZ,GAAG,SAAS;AACZ,GAAG,WAAW,EAAE,IAAI,CAAC;AACrB,GAAG,CAAC;AACJ,CAAC,CAAC,SAAS;AACX,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AACvD,CAAC;AACD,CAAC,IAAI,CAAC,OAAO,CAAC;AACd,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,YAAY,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;AAC5F,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,YAAY,CAAC,cAAc,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;AAC3G,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,YAAY,CAAC,WAAW,CAAC;AACjE,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;AAC3F,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE;AACjC,EAAE,YAAY,CAAC,IAAI,EAAE;AACrB,GAAG,UAAU,EAAE,OAAO,CAAC,OAAO;AAC9B,GAAG,UAAU,EAAE,OAAO,CAAC,UAAU;AACjC,GAAG,YAAY,EAAE,OAAO,CAAC;AACzB,GAAG,CAAC;AACJ,EAAE,IAAI,kBAAkB,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE;AACrK,GAAG,SAAS,EAAE,aAAa;AAC3B,GAAG,YAAY,EAAE,kBAAkB;AACnC,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC,CAAC;AACL,EAAE,IAAI,aAAa,EAAE,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC;AACtF,CAAC;AACD,CAAC,OAAO,oBAAoB,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC;AACzE;AACA;AACA;AACA;AACA;AACA,SAAS,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE;AACpC,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG;AAChC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC;AAC1F,CAAC,IAAI,GAAG,YAAY,8BAA8B,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,mBAAmB,EAAE,GAAG,CAAC,OAAO,CAAC;AAChH,CAAC,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,eAAe;AACrE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,sBAAsB,EAAE;AAC1C,EAAE,SAAS,EAAE,aAAa;AAC1B,EAAE,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC;AACxB,EAAE,GAAG,GAAG,YAAY,CAAC,IAAI,OAAO,GAAG,CAAC,OAAO,EAAE,YAAY,KAAK,QAAQ,IAAI,EAAE,mBAAmB,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY;AACzH,EAAE,CAAC;AACH,CAAC,IAAI,GAAG,YAAY,CAAC,EAAE;AACvB,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,aAAa,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,mBAAmB,EAAE,+BAA+B,CAAC;AACjJ,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,mBAAmB,EAAE,kGAAkG,CAAC;AACpL,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,mBAAmB,EAAE,0DAA0D,CAAC;AAC5I,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,mBAAmB,EAAE,6CAA6C,CAAC;AAClI,CAAC;AACD,CAAC,IAAI,GAAG,YAAY,SAAS,IAAI,OAAO,KAAK,cAAc,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,mBAAmB,EAAE,+BAA+B,CAAC;AAC7I,CAAC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC;AAC9C;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE;AAC3E,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,QAAQ;AACrC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,mCAAmC,EAAE;AACvD,EAAE,SAAS,EAAE,gBAAgB;AAC7B,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;AAC/B,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;AAC9C,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;AACtC,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;AAC9C,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;AACpC,EAAE,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;AAClD,EAAE,eAAe,EAAE,OAAO,CAAC;AAC3B,EAAE,CAAC;AACH,CAAC,IAAI,OAAO,CAAC,eAAe,KAAK,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,EAAE;AAC5E,EAAE,SAAS,EAAE,gBAAgB;AAC7B,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe;AAC1C,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe;AAC1C,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;AAC9E,EAAE,CAAC;AACH,MAAM;AACN,EAAE,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE;AACrE,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE;AAC1C,GAAG,SAAS,EAAE,gBAAgB;AAC9B,GAAG,cAAc;AACjB,GAAG,iBAAiB,EAAE,cAAc,KAAK;AACzC,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE;AACpC,EAAE,SAAS,EAAE,gBAAgB;AAC7B,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AACxF,EAAE,CAAC;AACH,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,eAAe;AAC1C,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,gCAAgC,EAAE;AACpD,EAAE,SAAS,EAAE,mBAAmB;AAChC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI;AACf,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM;AACnB,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS;AACzB,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO;AACrB,EAAE,aAAa,EAAE,EAAE,CAAC;AACpB,EAAE,CAAC;AACH;;;;"}

package/build/server/chunks/chunks/state.js-DaNGuhKE.js

@@ -0,0 +1,74 @@
+import { g as getContext } from './server.js-Bn3s-cVB.js';
+import './client.js-D26R0bt6.js';
+
+// ../../node_modules/.pnpm/@sveltejs+kit@2.70.3_@opentelemetry+api@1.9.1_@sveltejs+vite-plugin-svelte@7.3.1_svelte_47ca0476217d3a67b8821de8a7850a17/node_modules/@sveltejs/kit/src/runtime/app/state/server.js
+function context() {
+	return getContext("__request__");
+}
+// ../../node_modules/.pnpm/@sveltejs+kit@2.70.3_@opentelemetry+api@1.9.1_@sveltejs+vite-plugin-svelte@7.3.1_svelte_47ca0476217d3a67b8821de8a7850a17/node_modules/@sveltejs/kit/src/runtime/app/state/index.js
+/**
+* A read-only reactive object with information about the current page, serving several use cases:
+* - retrieving the combined `data` of all pages/layouts anywhere in your component tree (also see [loading data](https://svelte.dev/docs/kit/load))
+* - retrieving the current value of the `form` prop anywhere in your component tree (also see [form actions](https://svelte.dev/docs/kit/form-actions))
+* - retrieving the page state that was set through `goto`, `pushState` or `replaceState` (also see [goto](https://svelte.dev/docs/kit/$app-navigation#goto) and [shallow routing](https://svelte.dev/docs/kit/shallow-routing))
+* - retrieving metadata such as the URL you're on, the current route and its parameters, and whether or not there was an error
+*
+* ```svelte
+* <!--- file: +layout.svelte --->
+* <script>
+* 	import { page } from '$app/state';
+* <\/script>
+*
+* <p>Currently at {page.url.pathname}</p>
+*
+* {#if page.error}
+* 	<span class="red">Problem detected</span>
+* {:else}
+* 	<span class="small">All systems operational</span>
+* {/if}
+* ```
+*
+* Changes to `page` are available exclusively with runes. (The legacy reactivity syntax will not reflect any changes)
+*
+* ```svelte
+* <!--- file: +page.svelte --->
+* <script>
+* 	import { page } from '$app/state';
+* 	const id = $derived(page.params.id); // This will correctly update id for usage on this page
+* 	$: badId = page.params.id; // Do not use; will never update after initial load
+* <\/script>
+* ```
+*
+* On the server, values can only be read during rendering (in other words _not_ in e.g. `load` functions). In the browser, the values can be read at any time.
+*
+* @type {import('@sveltejs/kit').Page}
+*/
+var page = {
+	get data() {
+		return context().page.data;
+	},
+	get error() {
+		return context().page.error;
+	},
+	get form() {
+		return context().page.form;
+	},
+	get params() {
+		return context().page.params;
+	},
+	get route() {
+		return context().page.route;
+	},
+	get state() {
+		return context().page.state;
+	},
+	get status() {
+		return context().page.status;
+	},
+	get url() {
+		return context().page.url;
+	}
+};
+
+export { page as p };
+//# sourceMappingURL=state.js-DaNGuhKE.js.map

package/build/server/chunks/chunks/state.js-DaNGuhKE.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js-DaNGuhKE.js","sources":["../../../../.svelte-kit/output/server/chunks/state.js"],"sourcesContent":["import \"./index-server.js\";\nimport { b as getContext } from \"./server.js\";\nimport \"./client.js\";\n// ../../node_modules/.pnpm/@sveltejs+kit@2.70.3_@opentelemetry+api@1.9.1_@sveltejs+vite-plugin-svelte@7.3.1_svelte_47ca0476217d3a67b8821de8a7850a17/node_modules/@sveltejs/kit/src/runtime/app/state/server.js\nfunction context() {\n\treturn getContext(\"__request__\");\n}\n// ../../node_modules/.pnpm/@sveltejs+kit@2.70.3_@opentelemetry+api@1.9.1_@sveltejs+vite-plugin-svelte@7.3.1_svelte_47ca0476217d3a67b8821de8a7850a17/node_modules/@sveltejs/kit/src/runtime/app/state/index.js\n/**\n* A read-only reactive object with information about the current page, serving several use cases:\n* - retrieving the combined `data` of all pages/layouts anywhere in your component tree (also see [loading data](https://svelte.dev/docs/kit/load))\n* - retrieving the current value of the `form` prop anywhere in your component tree (also see [form actions](https://svelte.dev/docs/kit/form-actions))\n* - retrieving the page state that was set through `goto`, `pushState` or `replaceState` (also see [goto](https://svelte.dev/docs/kit/$app-navigation#goto) and [shallow routing](https://svelte.dev/docs/kit/shallow-routing))\n* - retrieving metadata such as the URL you're on, the current route and its parameters, and whether or not there was an error\n*\n* ```svelte\n* <!--- file: +layout.svelte --->\n* <script>\n* \timport { page } from '$app/state';\n* <\\/script>\n*\n* <p>Currently at {page.url.pathname}</p>\n*\n* {#if page.error}\n* \t<span class=\"red\">Problem detected</span>\n* {:else}\n* \t<span class=\"small\">All systems operational</span>\n* {/if}\n* ```\n*\n* Changes to `page` are available exclusively with runes. (The legacy reactivity syntax will not reflect any changes)\n*\n* ```svelte\n* <!--- file: +page.svelte --->\n* <script>\n* \timport { page } from '$app/state';\n* \tconst id = $derived(page.params.id); // This will correctly update id for usage on this page\n* \t$: badId = page.params.id; // Do not use; will never update after initial load\n* <\\/script>\n* ```\n*\n* On the server, values can only be read during rendering (in other words _not_ in e.g. `load` functions). In the browser, the values can be read at any time.\n*\n* @type {import('@sveltejs/kit').Page}\n*/\nvar page = {\n\tget data() {\n\t\treturn context().page.data;\n\t},\n\tget error() {\n\t\treturn context().page.error;\n\t},\n\tget form() {\n\t\treturn context().page.form;\n\t},\n\tget params() {\n\t\treturn context().page.params;\n\t},\n\tget route() {\n\t\treturn context().page.route;\n\t},\n\tget state() {\n\t\treturn context().page.state;\n\t},\n\tget status() {\n\t\treturn context().page.status;\n\t},\n\tget url() {\n\t\treturn context().page.url;\n\t}\n};\nexport { page as t };\n"],"names":[],"mappings":";;;AAGA;AACA,SAAS,OAAO,GAAG;AACnB,CAAC,OAAO,UAAU,CAAC,aAAa,CAAC;AACjC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,IAAI,GAAG;AACX,CAAC,IAAI,IAAI,GAAG;AACZ,EAAE,OAAO,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI;AAC5B,CAAC,CAAC;AACF,CAAC,IAAI,KAAK,GAAG;AACb,EAAE,OAAO,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK;AAC7B,CAAC,CAAC;AACF,CAAC,IAAI,IAAI,GAAG;AACZ,EAAE,OAAO,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI;AAC5B,CAAC,CAAC;AACF,CAAC,IAAI,MAAM,GAAG;AACd,EAAE,OAAO,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM;AAC9B,CAAC,CAAC;AACF,CAAC,IAAI,KAAK,GAAG;AACb,EAAE,OAAO,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK;AAC7B,CAAC,CAAC;AACF,CAAC,IAAI,KAAK,GAAG;AACb,EAAE,OAAO,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK;AAC7B,CAAC,CAAC;AACF,CAAC,IAAI,MAAM,GAAG;AACd,EAAE,OAAO,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM;AAC9B,CAAC,CAAC;AACF,CAAC,IAAI,GAAG,GAAG;AACX,EAAE,OAAO,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG;AAC3B,CAAC;AACD;;;;"}

package/build/server/chunks/chunks/stores.js-BAFlDJra.js

@@ -0,0 +1,35 @@
+import { g as getContext } from './server.js-Bn3s-cVB.js';
+import './client.js-D26R0bt6.js';
+
+// ../../node_modules/.pnpm/@sveltejs+kit@2.70.3_@opentelemetry+api@1.9.1_@sveltejs+vite-plugin-svelte@7.3.1_svelte_47ca0476217d3a67b8821de8a7850a17/node_modules/@sveltejs/kit/src/runtime/app/stores.js
+/**
+* A function that returns all of the contextual stores. On the server, this must be called during component initialization.
+* Only use this if you need to defer store subscription until after the component has mounted, for some reason.
+*
+* @deprecated Use `$app/state` instead (requires Svelte 5, [see docs for more info](https://svelte.dev/docs/kit/migrating-to-sveltekit-2#SvelteKit-2.12:-$app-stores-deprecated))
+*/
+var getStores = () => {
+	const stores$1 = getContext("__svelte__");
+	return {
+		/** @type {typeof page} */
+		page: { subscribe: stores$1.page.subscribe },
+		/** @type {typeof navigating} */
+		navigating: { subscribe: stores$1.navigating.subscribe },
+		/** @type {typeof updated} */
+		updated: stores$1.updated
+	};
+};
+/**
+* A readable store whose value contains page data.
+*
+* On the server, this store can only be subscribed to during component initialization. In the browser, it can be subscribed to at any time.
+*
+* @deprecated Use `page` from `$app/state` instead (requires Svelte 5, [see docs for more info](https://svelte.dev/docs/kit/migrating-to-sveltekit-2#SvelteKit-2.12:-$app-stores-deprecated))
+* @type {import('svelte/store').Readable<import('@sveltejs/kit').Page>}
+*/
+var page = { subscribe(fn) {
+	return getStores().page.subscribe(fn);
+} };
+
+export { page as p };
+//# sourceMappingURL=stores.js-BAFlDJra.js.map

package/build/server/chunks/chunks/stores.js-BAFlDJra.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stores.js-BAFlDJra.js","sources":["../../../../.svelte-kit/output/server/chunks/stores.js"],"sourcesContent":["import \"./index-server.js\";\nimport { b as getContext } from \"./server.js\";\nimport \"./client.js\";\n// ../../node_modules/.pnpm/@sveltejs+kit@2.70.3_@opentelemetry+api@1.9.1_@sveltejs+vite-plugin-svelte@7.3.1_svelte_47ca0476217d3a67b8821de8a7850a17/node_modules/@sveltejs/kit/src/runtime/app/stores.js\n/**\n* A function that returns all of the contextual stores. On the server, this must be called during component initialization.\n* Only use this if you need to defer store subscription until after the component has mounted, for some reason.\n*\n* @deprecated Use `$app/state` instead (requires Svelte 5, [see docs for more info](https://svelte.dev/docs/kit/migrating-to-sveltekit-2#SvelteKit-2.12:-$app-stores-deprecated))\n*/\nvar getStores = () => {\n\tconst stores$1 = getContext(\"__svelte__\");\n\treturn {\n\t\t/** @type {typeof page} */\n\t\tpage: { subscribe: stores$1.page.subscribe },\n\t\t/** @type {typeof navigating} */\n\t\tnavigating: { subscribe: stores$1.navigating.subscribe },\n\t\t/** @type {typeof updated} */\n\t\tupdated: stores$1.updated\n\t};\n};\n/**\n* A readable store whose value contains page data.\n*\n* On the server, this store can only be subscribed to during component initialization. In the browser, it can be subscribed to at any time.\n*\n* @deprecated Use `page` from `$app/state` instead (requires Svelte 5, [see docs for more info](https://svelte.dev/docs/kit/migrating-to-sveltekit-2#SvelteKit-2.12:-$app-stores-deprecated))\n* @type {import('svelte/store').Readable<import('@sveltejs/kit').Page>}\n*/\nvar page = { subscribe(fn) {\n\treturn getStores().page.subscribe(fn);\n} };\nexport { page as t };\n"],"names":[],"mappings":";;;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,SAAS,GAAG,MAAM;AACtB,CAAC,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC;AAC1C,CAAC,OAAO;AACR;AACA,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE;AAC9C;AACA,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE;AAC1D;AACA,EAAE,OAAO,EAAE,QAAQ,CAAC;AACpB,EAAE;AACF,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,IAAI,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE;AAC3B,CAAC,OAAO,SAAS,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;AACtC,CAAC;;;;"}

package/build/server/chunks/chunks/sveltekit.js-CwkcUXXi.js

@@ -0,0 +1,102 @@
+import { m as getBranding, n as getNotificationProvider, o as getOrgAssetService, q as getDefinitionService } from './providers.server.js-DbrdtkJK.js';
+import { f as ApiError, k as codeForStatus } from './access.js-DbWaEG7Y.js';
+import { z as chargeApiRateLimit, B as rateLimitedResponse, D as withRateLimitHeaders, E as runHandler, F as depsFromConfig, G as mapCoreError } from './api.js-CWQeuHWw.js';
+import { e as evictComputeClient } from './engine.server.js-BaQbE4CG.js';
+import { M as MAX_IMAGE_FILE_SIZE, b as MAX_DEFINITION_FILE_SIZE } from './computeLimits.js-CQyJFKqu.js';
+import { s as shareLinkCodec } from './token2.server.js-Dv9oGmUn.js';
+import { a as apiRateLimiter } from './computeRateLimit.server.js-DnvPu8b5.js';
+import { i as inviteCodec } from './token3.server.js-CHgzJAXs.js';
+import { a as apiTokenCodec } from './token4.server.js-2COCjTDd.js';
+import { isHttpError, json } from '@sveltejs/kit';
+
+// src/lib/server/api/sveltekit.ts
+/**
+* The SvelteKit binding for the transport-free handlers in `@selvajs/server/api`.
+*
+* The only file in the app that knows both worlds: it turns a `RequestEvent`
+* into an `ApiRequest` and folds this app's domain errors into the shared
+* envelope. A handler mounted through here names no framework, so the same
+* handler runs under Next or Hono behind a sibling adapter roughly this size.
+*/
+/**
+* This app's own errors, folded into the shared envelope.
+*
+* SvelteKit's `HttpError` is the only one left here — everything else the v1
+* handlers throw ships from `@selvajs/server`, so `mapCoreError` owns those
+* rules and a second host gets the same statuses without copying them.
+*/
+function mapAppError(err) {
+	if (isHttpError(err)) {
+		const body = err.body;
+		if (typeof body === "string") return new ApiError(err.status, codeForStatus(err.status), body);
+		return new ApiError(err.status, body?.code ?? codeForStatus(err.status), body?.message ?? "Request failed", body?.fields, body?.details);
+	}
+	return mapCoreError(err);
+}
+function buildDeps(event) {
+	return depsFromConfig(event.locals.providers, {
+		definitions: getDefinitionService(),
+		orgAssets: getOrgAssetService()
+	}, {
+		tokens: {
+			shareLinks: shareLinkCodec(),
+			invites: inviteCodec(),
+			apiTokens: apiTokenCodec()
+		},
+		uploadLimits: {
+			maxDefinitionFileSize: MAX_DEFINITION_FILE_SIZE,
+			maxImageFileSize: MAX_IMAGE_FILE_SIZE
+		},
+		evictComputeClient,
+		notifications: getNotificationProvider(),
+		instanceName: getBranding().name,
+		apiTokenSettingsPath: "/team/tokens",
+		apiRateLimiter
+	});
+}
+function toApiRequest(event) {
+	return {
+		ctx: event.locals.ctx,
+		user: event.locals.user,
+		profile: event.locals.profile,
+		log: event.locals.log,
+		params: event.params,
+		url: event.url,
+		request: event.request,
+		deps: buildDeps(event)
+	};
+}
+/**
+* Mount a transport-free handler as a SvelteKit `RequestHandler`.
+*
+* Routes addressed by a project or definition pass `scopeTarget`, so a key
+* scoped to that project or definition can reach them; solve routes pass
+* `action: 'solve'`; creates pass `idempotent: true`.
+*/
+function mount(fallback, handler, opts = {}) {
+	return (event) => runHandler(handler, toApiRequest(event), {
+		fallback,
+		mapError: mapAppError,
+		...opts
+	});
+}
+/**
+* The per-token rate limit for a route that builds its own `Response` instead
+* of going through `mount`: charged before the handler runs, and `RateLimit-*`
+* on every token response, thrown errors included.
+*/
+function withApiRateLimit(handler) {
+	return async (event) => {
+		const verdict = await chargeApiRateLimit(event.locals.ctx, apiRateLimiter);
+		if (verdict && !verdict.allowed) return rateLimitedResponse(verdict);
+		try {
+			return withRateLimitHeaders(await handler(event), verdict);
+		} catch (err) {
+			if (!verdict || !isHttpError(err)) throw err;
+			return withRateLimitHeaders(json(err.body, { status: err.status }), verdict);
+		}
+	};
+}
+
+export { mount as m, toApiRequest as t, withApiRateLimit as w };
+//# sourceMappingURL=sveltekit.js-CwkcUXXi.js.map

package/build/server/chunks/chunks/sveltekit.js-CwkcUXXi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sveltekit.js-CwkcUXXi.js","sources":["../../../../.svelte-kit/output/server/chunks/sveltekit.js"],"sourcesContent":["import { c as getDefinitionService, i as getBranding, m as getOrgAssetService, p as getNotificationProvider } from \"./providers.server.js\";\nimport { A as codeForStatus, D as ApiError } from \"./access.js\";\nimport { D as chargeApiRateLimit, W as depsFromConfig, b as mapCoreError, j as withRateLimitHeaders, k as rateLimitedResponse, x as runHandler } from \"./api.js\";\nimport { o as evictComputeClient } from \"./engine.server.js\";\nimport { a as MAX_DEFINITION_FILE_SIZE, o as MAX_IMAGE_FILE_SIZE } from \"./computeLimits.js\";\nimport { r as shareLinkCodec } from \"./token2.server.js\";\nimport { t as apiRateLimiter } from \"./computeRateLimit.server.js\";\nimport { n as inviteCodec } from \"./token3.server.js\";\nimport { t as apiTokenCodec } from \"./token4.server.js\";\nimport { isHttpError, json } from \"@sveltejs/kit\";\n// src/lib/server/api/sveltekit.ts\n/**\n* The SvelteKit binding for the transport-free handlers in `@selvajs/server/api`.\n*\n* The only file in the app that knows both worlds: it turns a `RequestEvent`\n* into an `ApiRequest` and folds this app's domain errors into the shared\n* envelope. A handler mounted through here names no framework, so the same\n* handler runs under Next or Hono behind a sibling adapter roughly this size.\n*/\n/**\n* This app's own errors, folded into the shared envelope.\n*\n* SvelteKit's `HttpError` is the only one left here — everything else the v1\n* handlers throw ships from `@selvajs/server`, so `mapCoreError` owns those\n* rules and a second host gets the same statuses without copying them.\n*/\nfunction mapAppError(err) {\n\tif (isHttpError(err)) {\n\t\tconst body = err.body;\n\t\tif (typeof body === \"string\") return new ApiError(err.status, codeForStatus(err.status), body);\n\t\treturn new ApiError(err.status, body?.code ?? codeForStatus(err.status), body?.message ?? \"Request failed\", body?.fields, body?.details);\n\t}\n\treturn mapCoreError(err);\n}\nfunction buildDeps(event) {\n\treturn depsFromConfig(event.locals.providers, {\n\t\tdefinitions: getDefinitionService(),\n\t\torgAssets: getOrgAssetService()\n\t}, {\n\t\ttokens: {\n\t\t\tshareLinks: shareLinkCodec(),\n\t\t\tinvites: inviteCodec(),\n\t\t\tapiTokens: apiTokenCodec()\n\t\t},\n\t\tuploadLimits: {\n\t\t\tmaxDefinitionFileSize: MAX_DEFINITION_FILE_SIZE,\n\t\t\tmaxImageFileSize: MAX_IMAGE_FILE_SIZE\n\t\t},\n\t\tevictComputeClient,\n\t\tnotifications: getNotificationProvider(),\n\t\tinstanceName: getBranding().name,\n\t\tapiTokenSettingsPath: \"/team/tokens\",\n\t\tapiRateLimiter\n\t});\n}\nfunction toApiRequest(event) {\n\treturn {\n\t\tctx: event.locals.ctx,\n\t\tuser: event.locals.user,\n\t\tprofile: event.locals.profile,\n\t\tlog: event.locals.log,\n\t\tparams: event.params,\n\t\turl: event.url,\n\t\trequest: event.request,\n\t\tdeps: buildDeps(event)\n\t};\n}\n/**\n* Mount a transport-free handler as a SvelteKit `RequestHandler`.\n*\n* Routes addressed by a project or definition pass `scopeTarget`, so a key\n* scoped to that project or definition can reach them; solve routes pass\n* `action: 'solve'`; creates pass `idempotent: true`.\n*/\nfunction mount(fallback, handler, opts = {}) {\n\treturn (event) => runHandler(handler, toApiRequest(event), {\n\t\tfallback,\n\t\tmapError: mapAppError,\n\t\t...opts\n\t});\n}\n/**\n* The per-token rate limit for a route that builds its own `Response` instead\n* of going through `mount`: charged before the handler runs, and `RateLimit-*`\n* on every token response, thrown errors included.\n*/\nfunction withApiRateLimit(handler) {\n\treturn async (event) => {\n\t\tconst verdict = await chargeApiRateLimit(event.locals.ctx, apiRateLimiter);\n\t\tif (verdict && !verdict.allowed) return rateLimitedResponse(verdict);\n\t\ttry {\n\t\t\treturn withRateLimitHeaders(await handler(event), verdict);\n\t\t} catch (err) {\n\t\t\tif (!verdict || !isHttpError(err)) throw err;\n\t\t\treturn withRateLimitHeaders(json(err.body, { status: err.status }), verdict);\n\t\t}\n\t};\n}\nexport { toApiRequest as n, withApiRateLimit as r, mount as t };\n"],"names":[],"mappings":";;;;;;;;;;;AAUA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,WAAW,CAAC,GAAG,EAAE;AAC1B,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE;AACvB,EAAE,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI;AACvB,EAAE,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;AAChG,EAAE,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,IAAI,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC;AAC1I,CAAC;AACD,CAAC,OAAO,YAAY,CAAC,GAAG,CAAC;AACzB;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,CAAC,OAAO,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE;AAC/C,EAAE,WAAW,EAAE,oBAAoB,EAAE;AACrC,EAAE,SAAS,EAAE,kBAAkB;AAC/B,EAAE,EAAE;AACJ,EAAE,MAAM,EAAE;AACV,GAAG,UAAU,EAAE,cAAc,EAAE;AAC/B,GAAG,OAAO,EAAE,WAAW,EAAE;AACzB,GAAG,SAAS,EAAE,aAAa;AAC3B,GAAG;AACH,EAAE,YAAY,EAAE;AAChB,GAAG,qBAAqB,EAAE,wBAAwB;AAClD,GAAG,gBAAgB,EAAE;AACrB,GAAG;AACH,EAAE,kBAAkB;AACpB,EAAE,aAAa,EAAE,uBAAuB,EAAE;AAC1C,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,IAAI;AAClC,EAAE,oBAAoB,EAAE,cAAc;AACtC,EAAE;AACF,EAAE,CAAC;AACH;AACA,SAAS,YAAY,CAAC,KAAK,EAAE;AAC7B,CAAC,OAAO;AACR,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG;AACvB,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;AACzB,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;AAC/B,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG;AACvB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM;AACtB,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG;AAChB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;AACxB,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK;AACvB,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE;AAC7C,CAAC,OAAO,CAAC,KAAK,KAAK,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE;AAC5D,EAAE,QAAQ;AACV,EAAE,QAAQ,EAAE,WAAW;AACvB,EAAE,GAAG;AACL,EAAE,CAAC;AACH;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,gBAAgB,CAAC,OAAO,EAAE;AACnC,CAAC,OAAO,OAAO,KAAK,KAAK;AACzB,EAAE,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC;AAC5E,EAAE,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,mBAAmB,CAAC,OAAO,CAAC;AACtE,EAAE,IAAI;AACN,GAAG,OAAO,oBAAoB,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;AAC7D,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG;AAC/C,GAAG,OAAO,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC;AAC/E,EAAE;AACF,CAAC,CAAC;AACF;;;;"}

package/build/server/chunks/chunks/tokens.js-C1iFCpCz.js

@@ -0,0 +1,25 @@
+import { p as parseApiScope, h as hasPermission } from './src.js-BQFsdJf3.js';
+import { c as canCreateDefinitionInOrg } from './visibility.js-DHIz9MAP.js';
+
+// ../server/src/tokens/api-token-holder.ts
+/**
+* May `ctx` hold a key with `scopes` in its acting org? Without a host policy:
+*
+* - `manage_api_tokens` holds any key.
+* - A key that only reads and uploads needs only the right to create a
+*   definition in one project of the org. It can do nothing the owner's
+*   browser session can't.
+*
+* A scope this version can't parse counts as broad, so it needs
+* `manage_api_tokens`.
+*/
+async function canHoldApiTokens(ctx, scopes, { policy, deps }) {
+	const parsed = scopes.map(parseApiScope).filter((s) => s !== null);
+	if (policy) return policy(ctx, parsed);
+	if (hasPermission(ctx, "manage_api_tokens")) return true;
+	if (!(parsed.length > 0 && parsed.length === scopes.length && parsed.every((s) => s.action === "read" || s.action === "upload")) || !ctx.actingOrgId) return false;
+	return canCreateDefinitionInOrg(ctx, ctx.actingOrgId, deps);
+}
+
+export { canHoldApiTokens as c };
+//# sourceMappingURL=tokens.js-C1iFCpCz.js.map