@selvajs/selva 4.20.0-beta.14 → 4.20.0-beta.15

package/build/server/chunks/chunks/internal2.js-Dx1x8Dv4.js

@@ -1,219 +0,0 @@
-import { ag as render, a as setContext, ah as derived } from './server.js-Bn3s-cVB.js';
-import { a as asClassComponent$1 } from './legacy-client.js-C_nl-7NA.js';
-
-// \0virtual:__sveltekit/server
-var read_implementation = null;
-function set_read_implementation(fn) {
-	read_implementation = fn;
-}
-// ../../node_modules/.pnpm/svelte@5.57.2_@typescript-eslint+types@8.72.0/node_modules/svelte/src/legacy/legacy-server.js
-/** @import { SvelteComponent } from '../index.js' */
-/** @import { Csp } from '../server/public.js' */
-/** @typedef {{ head: string, html: string, css: { code: string, map: null }; hashes?: { script: `sha256-${string}`[] } }} LegacyRenderResult */
-/**
-* Takes a Svelte 5 component and returns a Svelte 4 compatible component constructor.
-*
-* @deprecated Use this only as a temporary solution to migrate your imperative component code to Svelte 5.
-*
-* @template {Record<string, any>} Props
-* @template {Record<string, any>} Exports
-* @template {Record<string, any>} Events
-* @template {Record<string, any>} Slots
-*
-* @param {SvelteComponent<Props, Events, Slots>} component
-* @returns {typeof SvelteComponent<Props, Events, Slots> & Exports}
-*/
-function asClassComponent(component) {
-	const component_constructor = asClassComponent$1(component);
-	/** @type {(props?: {}, opts?: { $$slots?: {}; context?: Map<any, any>; csp?: Csp; transformError?: (error: unknown) => unknown }) => LegacyRenderResult & PromiseLike<LegacyRenderResult> } */
-	const _render = (props, { context, csp, transformError } = {}) => {
-		const result = render(component, {
-			props,
-			context,
-			csp,
-			transformError
-		});
-		const munged = Object.defineProperties({}, {
-			css: { value: {
-				code: "",
-				map: null
-			} },
-			head: { get: () => result.head },
-			html: { get: () => result.body },
-			then: { 
-			/**
-			* this is not type-safe, but honestly it's the best I can do right now, and it's a straightforward function.
-			*
-			* @template TResult1
-			* @template [TResult2=never]
-			* @param { (value: LegacyRenderResult) => TResult1 } onfulfilled
-			* @param { (reason: unknown) => TResult2 } onrejected
-			*/
-value: (onfulfilled, onrejected) => {
-				{
-					const user_result = onfulfilled({
-						css: munged.css,
-						head: munged.head,
-						html: munged.html
-					});
-					return Promise.resolve(user_result);
-				}
-			} }
-		});
-		return munged;
-	};
-	component_constructor.render = _render;
-	return component_constructor;
-}
-// .svelte-kit/generated/root.svelte
-function Root($$renderer, $$props) {
-	$$renderer.component(($$renderer) => {
-		let { stores, page, constructors, components = [], form, data_0 = null, data_1 = null, data_2 = null } = $$props;
-		setContext("__svelte__", stores);
-		stores.page.set(page);
-		const Pyramid_2 = derived(() => constructors[2]);
-		if (constructors[1]) {
-			$$renderer.push("<!--[0-->");
-			const Pyramid_0 = constructors[0];
-			if (Pyramid_0) {
-				$$renderer.push("<!--[-->");
-				Pyramid_0($$renderer, {
-					data: data_0,
-					form,
-					params: page.params,
-					children: ($$renderer) => {
-						if (constructors[2]) {
-							$$renderer.push("<!--[0-->");
-							const Pyramid_1 = constructors[1];
-							if (Pyramid_1) {
-								$$renderer.push("<!--[-->");
-								Pyramid_1($$renderer, {
-									data: data_1,
-									form,
-									params: page.params,
-									children: ($$renderer) => {
-										if (Pyramid_2()) {
-											$$renderer.push("<!--[-->");
-											Pyramid_2()($$renderer, {
-												data: data_2,
-												form,
-												params: page.params
-											});
-											$$renderer.push("<!--]-->");
-										} else {
-											$$renderer.push("<!--[!-->");
-											$$renderer.push("<!--]-->");
-										}
-									},
-									$$slots: { default: true }
-								});
-								$$renderer.push("<!--]-->");
-							} else {
-								$$renderer.push("<!--[!-->");
-								$$renderer.push("<!--]-->");
-							}
-						} else {
-							$$renderer.push("<!--[-1-->");
-							const Pyramid_1 = constructors[1];
-							if (Pyramid_1) {
-								$$renderer.push("<!--[-->");
-								Pyramid_1($$renderer, {
-									data: data_1,
-									form,
-									params: page.params
-								});
-								$$renderer.push("<!--]-->");
-							} else {
-								$$renderer.push("<!--[!-->");
-								$$renderer.push("<!--]-->");
-							}
-						}
-						$$renderer.push(`<!--]-->`);
-					},
-					$$slots: { default: true }
-				});
-				$$renderer.push("<!--]-->");
-			} else {
-				$$renderer.push("<!--[!-->");
-				$$renderer.push("<!--]-->");
-			}
-		} else {
-			$$renderer.push("<!--[-1-->");
-			const Pyramid_0 = constructors[0];
-			if (Pyramid_0) {
-				$$renderer.push("<!--[-->");
-				Pyramid_0($$renderer, {
-					data: data_0,
-					form,
-					params: page.params
-				});
-				$$renderer.push("<!--]-->");
-			} else {
-				$$renderer.push("<!--[!-->");
-				$$renderer.push("<!--]-->");
-			}
-		}
-		$$renderer.push(`<!--]--> `);
-		$$renderer.push("<!--[-1-->");
-		$$renderer.push(`<!--]-->`);
-	});
-}
-// .svelte-kit/generated/root.js
-var root_default = asClassComponent(Root);
-// .svelte-kit/generated/shared/error-template.js
-var error_template_default = ({ status, message }) => "<!doctype html>\n<html lang=\"en\">\n	<head>\n		<meta charset=\"utf-8\" />\n		<title>" + message + "</title>\n\n		<style>\n			body {\n				--bg: white;\n				--fg: #222;\n				--divider: #ccc;\n				background: var(--bg);\n				color: var(--fg);\n				font-family:\n					system-ui,\n					-apple-system,\n					BlinkMacSystemFont,\n					'Segoe UI',\n					Roboto,\n					Oxygen,\n					Ubuntu,\n					Cantarell,\n					'Open Sans',\n					'Helvetica Neue',\n					sans-serif;\n				display: flex;\n				align-items: center;\n				justify-content: center;\n				height: 100vh;\n				margin: 0;\n			}\n\n			.error {\n				display: flex;\n				align-items: center;\n				max-width: 32rem;\n				margin: 0 1rem;\n			}\n\n			.status {\n				font-weight: 200;\n				font-size: 3rem;\n				line-height: 1;\n				position: relative;\n				top: -0.05rem;\n			}\n\n			.message {\n				border-left: 1px solid var(--divider);\n				padding: 0 0 0 1rem;\n				margin: 0 0 0 1rem;\n				min-height: 2.5rem;\n				display: flex;\n				align-items: center;\n			}\n\n			.message h1 {\n				font-weight: 400;\n				font-size: 1em;\n				margin: 0;\n			}\n\n			@media (prefers-color-scheme: dark) {\n				body {\n					--bg: #222;\n					--fg: #ddd;\n					--divider: #666;\n				}\n			}\n		</style>\n	</head>\n	<body>\n		<div class=\"error\">\n			<span class=\"status\">" + status + "</span>\n			<div class=\"message\">\n				<h1>" + message + "</h1>\n			</div>\n		</div>\n	</body>\n</html>\n";
-// .svelte-kit/generated/server/internal.js
-var options = {
-	app_template_contains_nonce: false,
-	async: false,
-	csp: {
-		"mode": "auto",
-		"directives": {
-			"upgrade-insecure-requests": false,
-			"block-all-mixed-content": false
-		},
-		"reportOnly": {
-			"upgrade-insecure-requests": false,
-			"block-all-mixed-content": false
-		}
-	},
-	csrf_check_origin: false,
-	csrf_trusted_origins: ["*"],
-	embedded: false,
-	env_public_prefix: "PUBLIC_",
-	env_private_prefix: "",
-	hash_routing: false,
-	hooks: null,
-	preload_strategy: "modulepreload",
-	root: root_default,
-	service_worker: false,
-	service_worker_options: void 0,
-	server_error_boundaries: false,
-	templates: {
-		app: ({ head, body, assets, nonce, env }) => "<!doctype html>\n<html lang=\"en\">\n	<head>\n		<meta charset=\"utf-8\" />\n		<meta content=\"width=device-width, initial-scale=1\" name=\"viewport\" />\n		<link rel=\"icon\" type=\"image/png\" href=\"/favicon/favicon-96x96.png\" sizes=\"96x96\" />\n		<link rel=\"icon\" type=\"image/svg+xml\" href=\"/favicon/favicon.svg\" />\n		<link rel=\"shortcut icon\" href=\"/favicon/favicon.ico\" />\n		<link rel=\"apple-touch-icon\" sizes=\"180x180\" href=\"/favicon/apple-touch-icon.png\" />\n		<meta name=\"apple-mobile-web-app-title\" content=\"Selva\" />\n		<link rel=\"manifest\" href=\"/favicon/site.webmanifest\" crossorigin=\"use-credentials\" />\n		" + head + "\n	</head>\n	<body data-sveltekit-preload-data=\"hover\">\n		<div style=\"display: contents\">" + body + "</div>\n	</body>\n</html>\n",
-		error: error_template_default
-	},
-	version_hash: "8t0rh4"
-};
-async function get_hooks() {
-	let handle;
-	let handleFetch;
-	let handleError;
-	let handleValidationError;
-	let init;
-	({handle, handleFetch, handleError, handleValidationError, init} = await import('../entries/hooks.server.js-BIZRBlZI.js'));
-	let reroute;
-	let transport;
-	return {
-		handle,
-		handleFetch,
-		handleError,
-		handleValidationError,
-		init,
-		reroute,
-		transport
-	};
-}
-
-export { get_hooks as g, options as o, read_implementation as r, set_read_implementation as s };
-//# sourceMappingURL=internal2.js-Dx1x8Dv4.js.map

package/build/server/chunks/chunks/internal2.js-Dx1x8Dv4.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"internal2.js-Dx1x8Dv4.js","sources":["../../../../.svelte-kit/output/server/chunks/internal2.js"],"sourcesContent":["import \"./index-server.js\";\nimport \"./internal.js\";\nimport { S as setContext, _t as async_mode_flag, a as derived, u as render } from \"./server.js\";\nimport { t as asClassComponent$1 } from \"./legacy-client.js\";\n// \\0virtual:__sveltekit/server\nvar read_implementation = null;\nfunction set_read_implementation(fn) {\n\tread_implementation = fn;\n}\nfunction set_manifest(_) {}\n// ../../node_modules/.pnpm/svelte@5.57.2_@typescript-eslint+types@8.72.0/node_modules/svelte/src/legacy/legacy-server.js\n/** @import { SvelteComponent } from '../index.js' */\n/** @import { Csp } from '../server/public.js' */\n/** @typedef {{ head: string, html: string, css: { code: string, map: null }; hashes?: { script: `sha256-${string}`[] } }} LegacyRenderResult */\n/**\n* Takes a Svelte 5 component and returns a Svelte 4 compatible component constructor.\n*\n* @deprecated Use this only as a temporary solution to migrate your imperative component code to Svelte 5.\n*\n* @template {Record<string, any>} Props\n* @template {Record<string, any>} Exports\n* @template {Record<string, any>} Events\n* @template {Record<string, any>} Slots\n*\n* @param {SvelteComponent<Props, Events, Slots>} component\n* @returns {typeof SvelteComponent<Props, Events, Slots> & Exports}\n*/\nfunction asClassComponent(component) {\n\tconst component_constructor = asClassComponent$1(component);\n\t/** @type {(props?: {}, opts?: { $$slots?: {}; context?: Map<any, any>; csp?: Csp; transformError?: (error: unknown) => unknown }) => LegacyRenderResult & PromiseLike<LegacyRenderResult> } */\n\tconst _render = (props, { context, csp, transformError } = {}) => {\n\t\tconst result = render(component, {\n\t\t\tprops,\n\t\t\tcontext,\n\t\t\tcsp,\n\t\t\ttransformError\n\t\t});\n\t\tconst munged = Object.defineProperties({}, {\n\t\t\tcss: { value: {\n\t\t\t\tcode: \"\",\n\t\t\t\tmap: null\n\t\t\t} },\n\t\t\thead: { get: () => result.head },\n\t\t\thtml: { get: () => result.body },\n\t\t\tthen: { \n\t\t\t/**\n\t\t\t* this is not type-safe, but honestly it's the best I can do right now, and it's a straightforward function.\n\t\t\t*\n\t\t\t* @template TResult1\n\t\t\t* @template [TResult2=never]\n\t\t\t* @param { (value: LegacyRenderResult) => TResult1 } onfulfilled\n\t\t\t* @param { (reason: unknown) => TResult2 } onrejected\n\t\t\t*/\nvalue: (onfulfilled, onrejected) => {\n\t\t\t\tif (!async_mode_flag) {\n\t\t\t\t\tconst user_result = onfulfilled({\n\t\t\t\t\t\tcss: munged.css,\n\t\t\t\t\t\thead: munged.head,\n\t\t\t\t\t\thtml: munged.html\n\t\t\t\t\t});\n\t\t\t\t\treturn Promise.resolve(user_result);\n\t\t\t\t}\n\t\t\t\treturn result.then((result) => {\n\t\t\t\t\treturn onfulfilled({\n\t\t\t\t\t\tcss: munged.css,\n\t\t\t\t\t\thead: result.head,\n\t\t\t\t\t\thtml: result.body,\n\t\t\t\t\t\thashes: result.hashes\n\t\t\t\t\t});\n\t\t\t\t}, onrejected);\n\t\t\t} }\n\t\t});\n\t\treturn munged;\n\t};\n\tcomponent_constructor.render = _render;\n\treturn component_constructor;\n}\n// .svelte-kit/generated/root.svelte\nfunction Root($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\tlet { stores, page, constructors, components = [], form, data_0 = null, data_1 = null, data_2 = null } = $$props;\n\t\tsetContext(\"__svelte__\", stores);\n\t\tstores.page.set(page);\n\t\tconst Pyramid_2 = derived(() => constructors[2]);\n\t\tif (constructors[1]) {\n\t\t\t$$renderer.push(\"<!--[0-->\");\n\t\t\tconst Pyramid_0 = constructors[0];\n\t\t\tif (Pyramid_0) {\n\t\t\t\t$$renderer.push(\"<!--[-->\");\n\t\t\t\tPyramid_0($$renderer, {\n\t\t\t\t\tdata: data_0,\n\t\t\t\t\tform,\n\t\t\t\t\tparams: page.params,\n\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\tif (constructors[2]) {\n\t\t\t\t\t\t\t$$renderer.push(\"<!--[0-->\");\n\t\t\t\t\t\t\tconst Pyramid_1 = constructors[1];\n\t\t\t\t\t\t\tif (Pyramid_1) {\n\t\t\t\t\t\t\t\t$$renderer.push(\"<!--[-->\");\n\t\t\t\t\t\t\t\tPyramid_1($$renderer, {\n\t\t\t\t\t\t\t\t\tdata: data_1,\n\t\t\t\t\t\t\t\t\tform,\n\t\t\t\t\t\t\t\t\tparams: page.params,\n\t\t\t\t\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t\t\t\t\tif (Pyramid_2()) {\n\t\t\t\t\t\t\t\t\t\t\t$$renderer.push(\"<!--[-->\");\n\t\t\t\t\t\t\t\t\t\t\tPyramid_2()($$renderer, {\n\t\t\t\t\t\t\t\t\t\t\t\tdata: data_2,\n\t\t\t\t\t\t\t\t\t\t\t\tform,\n\t\t\t\t\t\t\t\t\t\t\t\tparams: page.params\n\t\t\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t\t\t\t$$renderer.push(\"<!--]-->\");\n\t\t\t\t\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\t\t\t\t\t$$renderer.push(\"<!--[!-->\");\n\t\t\t\t\t\t\t\t\t\t\t$$renderer.push(\"<!--]-->\");\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t$$renderer.push(\"<!--]-->\");\n\t\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\t\t$$renderer.push(\"<!--[!-->\");\n\t\t\t\t\t\t\t\t$$renderer.push(\"<!--]-->\");\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\t$$renderer.push(\"<!--[-1-->\");\n\t\t\t\t\t\t\tconst Pyramid_1 = constructors[1];\n\t\t\t\t\t\t\tif (Pyramid_1) {\n\t\t\t\t\t\t\t\t$$renderer.push(\"<!--[-->\");\n\t\t\t\t\t\t\t\tPyramid_1($$renderer, {\n\t\t\t\t\t\t\t\t\tdata: data_1,\n\t\t\t\t\t\t\t\t\tform,\n\t\t\t\t\t\t\t\t\tparams: page.params\n\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t$$renderer.push(\"<!--]-->\");\n\t\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\t\t$$renderer.push(\"<!--[!-->\");\n\t\t\t\t\t\t\t\t$$renderer.push(\"<!--]-->\");\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t\t$$renderer.push(`<!--]-->`);\n\t\t\t\t\t},\n\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t});\n\t\t\t\t$$renderer.push(\"<!--]-->\");\n\t\t\t} else {\n\t\t\t\t$$renderer.push(\"<!--[!-->\");\n\t\t\t\t$$renderer.push(\"<!--]-->\");\n\t\t\t}\n\t\t} else {\n\t\t\t$$renderer.push(\"<!--[-1-->\");\n\t\t\tconst Pyramid_0 = constructors[0];\n\t\t\tif (Pyramid_0) {\n\t\t\t\t$$renderer.push(\"<!--[-->\");\n\t\t\t\tPyramid_0($$renderer, {\n\t\t\t\t\tdata: data_0,\n\t\t\t\t\tform,\n\t\t\t\t\tparams: page.params\n\t\t\t\t});\n\t\t\t\t$$renderer.push(\"<!--]-->\");\n\t\t\t} else {\n\t\t\t\t$$renderer.push(\"<!--[!-->\");\n\t\t\t\t$$renderer.push(\"<!--]-->\");\n\t\t\t}\n\t\t}\n\t\t$$renderer.push(`<!--]--> `);\n\t\t$$renderer.push(\"<!--[-1-->\");\n\t\t$$renderer.push(`<!--]-->`);\n\t});\n}\n// .svelte-kit/generated/root.js\nvar root_default = asClassComponent(Root);\n// .svelte-kit/generated/shared/error-template.js\nvar error_template_default = ({ status, message }) => \"<!doctype html>\\n<html lang=\\\"en\\\">\\n\t<head>\\n\t\t<meta charset=\\\"utf-8\\\" />\\n\t\t<title>\" + message + \"</title>\\n\\n\t\t<style>\\n\t\t\tbody {\\n\t\t\t\t--bg: white;\\n\t\t\t\t--fg: #222;\\n\t\t\t\t--divider: #ccc;\\n\t\t\t\tbackground: var(--bg);\\n\t\t\t\tcolor: var(--fg);\\n\t\t\t\tfont-family:\\n\t\t\t\t\tsystem-ui,\\n\t\t\t\t\t-apple-system,\\n\t\t\t\t\tBlinkMacSystemFont,\\n\t\t\t\t\t'Segoe UI',\\n\t\t\t\t\tRoboto,\\n\t\t\t\t\tOxygen,\\n\t\t\t\t\tUbuntu,\\n\t\t\t\t\tCantarell,\\n\t\t\t\t\t'Open Sans',\\n\t\t\t\t\t'Helvetica Neue',\\n\t\t\t\t\tsans-serif;\\n\t\t\t\tdisplay: flex;\\n\t\t\t\talign-items: center;\\n\t\t\t\tjustify-content: center;\\n\t\t\t\theight: 100vh;\\n\t\t\t\tmargin: 0;\\n\t\t\t}\\n\\n\t\t\t.error {\\n\t\t\t\tdisplay: flex;\\n\t\t\t\talign-items: center;\\n\t\t\t\tmax-width: 32rem;\\n\t\t\t\tmargin: 0 1rem;\\n\t\t\t}\\n\\n\t\t\t.status {\\n\t\t\t\tfont-weight: 200;\\n\t\t\t\tfont-size: 3rem;\\n\t\t\t\tline-height: 1;\\n\t\t\t\tposition: relative;\\n\t\t\t\ttop: -0.05rem;\\n\t\t\t}\\n\\n\t\t\t.message {\\n\t\t\t\tborder-left: 1px solid var(--divider);\\n\t\t\t\tpadding: 0 0 0 1rem;\\n\t\t\t\tmargin: 0 0 0 1rem;\\n\t\t\t\tmin-height: 2.5rem;\\n\t\t\t\tdisplay: flex;\\n\t\t\t\talign-items: center;\\n\t\t\t}\\n\\n\t\t\t.message h1 {\\n\t\t\t\tfont-weight: 400;\\n\t\t\t\tfont-size: 1em;\\n\t\t\t\tmargin: 0;\\n\t\t\t}\\n\\n\t\t\t@media (prefers-color-scheme: dark) {\\n\t\t\t\tbody {\\n\t\t\t\t\t--bg: #222;\\n\t\t\t\t\t--fg: #ddd;\\n\t\t\t\t\t--divider: #666;\\n\t\t\t\t}\\n\t\t\t}\\n\t\t</style>\\n\t</head>\\n\t<body>\\n\t\t<div class=\\\"error\\\">\\n\t\t\t<span class=\\\"status\\\">\" + status + \"</span>\\n\t\t\t<div class=\\\"message\\\">\\n\t\t\t\t<h1>\" + message + \"</h1>\\n\t\t\t</div>\\n\t\t</div>\\n\t</body>\\n</html>\\n\";\n// .svelte-kit/generated/server/internal.js\nvar options = {\n\tapp_template_contains_nonce: false,\n\tasync: false,\n\tcsp: {\n\t\t\"mode\": \"auto\",\n\t\t\"directives\": {\n\t\t\t\"upgrade-insecure-requests\": false,\n\t\t\t\"block-all-mixed-content\": false\n\t\t},\n\t\t\"reportOnly\": {\n\t\t\t\"upgrade-insecure-requests\": false,\n\t\t\t\"block-all-mixed-content\": false\n\t\t}\n\t},\n\tcsrf_check_origin: false,\n\tcsrf_trusted_origins: [\"*\"],\n\tembedded: false,\n\tenv_public_prefix: \"PUBLIC_\",\n\tenv_private_prefix: \"\",\n\thash_routing: false,\n\thooks: null,\n\tpreload_strategy: \"modulepreload\",\n\troot: root_default,\n\tservice_worker: false,\n\tservice_worker_options: void 0,\n\tserver_error_boundaries: false,\n\ttemplates: {\n\t\tapp: ({ head, body, assets, nonce, env }) => \"<!doctype html>\\n<html lang=\\\"en\\\">\\n\t<head>\\n\t\t<meta charset=\\\"utf-8\\\" />\\n\t\t<meta content=\\\"width=device-width, initial-scale=1\\\" name=\\\"viewport\\\" />\\n\t\t<link rel=\\\"icon\\\" type=\\\"image/png\\\" href=\\\"/favicon/favicon-96x96.png\\\" sizes=\\\"96x96\\\" />\\n\t\t<link rel=\\\"icon\\\" type=\\\"image/svg+xml\\\" href=\\\"/favicon/favicon.svg\\\" />\\n\t\t<link rel=\\\"shortcut icon\\\" href=\\\"/favicon/favicon.ico\\\" />\\n\t\t<link rel=\\\"apple-touch-icon\\\" sizes=\\\"180x180\\\" href=\\\"/favicon/apple-touch-icon.png\\\" />\\n\t\t<meta name=\\\"apple-mobile-web-app-title\\\" content=\\\"Selva\\\" />\\n\t\t<link rel=\\\"manifest\\\" href=\\\"/favicon/site.webmanifest\\\" crossorigin=\\\"use-credentials\\\" />\\n\t\t\" + head + \"\\n\t</head>\\n\t<body data-sveltekit-preload-data=\\\"hover\\\">\\n\t\t<div style=\\\"display: contents\\\">\" + body + \"</div>\\n\t</body>\\n</html>\\n\",\n\t\terror: error_template_default\n\t},\n\tversion_hash: \"8t0rh4\"\n};\nasync function get_hooks() {\n\tlet handle;\n\tlet handleFetch;\n\tlet handleError;\n\tlet handleValidationError;\n\tlet init;\n\t({handle, handleFetch, handleError, handleValidationError, init} = await import(\"../entries/hooks.server.js\"));\n\tlet reroute;\n\tlet transport;\n\treturn {\n\t\thandle,\n\t\thandleFetch,\n\t\thandleError,\n\t\thandleValidationError,\n\t\tinit,\n\t\treroute,\n\t\ttransport\n\t};\n}\nexport { set_read_implementation as a, set_manifest as i, options as n, read_implementation as r, get_hooks as t };\n"],"names":[],"mappings":";;;AAIA;AACG,IAAC,mBAAmB,GAAG;AAC1B,SAAS,uBAAuB,CAAC,EAAE,EAAE;AACrC,CAAC,mBAAmB,GAAG,EAAE;AACzB;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,gBAAgB,CAAC,SAAS,EAAE;AACrC,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC,SAAS,CAAC;AAC5D;AACA,CAAC,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,KAAK;AACnE,EAAE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE;AACnC,GAAG,KAAK;AACR,GAAG,OAAO;AACV,GAAG,GAAG;AACN,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,MAAM,MAAM,GAAG,MAAM,CAAC,gBAAgB,CAAC,EAAE,EAAE;AAC7C,GAAG,GAAG,EAAE,EAAE,KAAK,EAAE;AACjB,IAAI,IAAI,EAAE,EAAE;AACZ,IAAI,GAAG,EAAE;AACT,IAAI,EAAE;AACN,GAAG,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC,IAAI,EAAE;AACnC,GAAG,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC,IAAI,EAAE;AACnC,GAAG,IAAI,EAAE;AACT;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,KAAK;AACpC,IAA0B;AAC1B,KAAK,MAAM,WAAW,GAAG,WAAW,CAAC;AACrC,MAAM,GAAG,EAAE,MAAM,CAAC,GAAG;AACrB,MAAM,IAAI,EAAE,MAAM,CAAC,IAAI;AACvB,MAAM,IAAI,EAAE,MAAM,CAAC;AACnB,MAAM,CAAC;AACP,KAAK,OAAO,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;AACxC,IAAI;AASJ,GAAG,CAAC;AACJ,GAAG,CAAC;AACJ,EAAE,OAAO,MAAM;AACf,CAAC,CAAC;AACF,CAAC,qBAAqB,CAAC,MAAM,GAAG,OAAO;AACvC,CAAC,OAAO,qBAAqB;AAC7B;AACA;AACA,SAAS,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE;AACnC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,OAAO;AAClH,EAAE,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC;AAClC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;AACvB,EAAE,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;AAClD,EAAE,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE;AACvB,GAAG,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AAC/B,GAAG,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC;AACpC,GAAG,IAAI,SAAS,EAAE;AAClB,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AAC/B,IAAI,SAAS,CAAC,UAAU,EAAE;AAC1B,KAAK,IAAI,EAAE,MAAM;AACjB,KAAK,IAAI;AACT,KAAK,MAAM,EAAE,IAAI,CAAC,MAAM;AACxB,KAAK,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC/B,MAAM,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE;AAC3B,OAAO,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AACnC,OAAO,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC;AACxC,OAAO,IAAI,SAAS,EAAE;AACtB,QAAQ,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AACnC,QAAQ,SAAS,CAAC,UAAU,EAAE;AAC9B,SAAS,IAAI,EAAE,MAAM;AACrB,SAAS,IAAI;AACb,SAAS,MAAM,EAAE,IAAI,CAAC,MAAM;AAC5B,SAAS,QAAQ,EAAE,CAAC,UAAU,KAAK;AACnC,UAAU,IAAI,SAAS,EAAE,EAAE;AAC3B,WAAW,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AACtC,WAAW,SAAS,EAAE,CAAC,UAAU,EAAE;AACnC,YAAY,IAAI,EAAE,MAAM;AACxB,YAAY,IAAI;AAChB,YAAY,MAAM,EAAE,IAAI,CAAC;AACzB,YAAY,CAAC;AACb,WAAW,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AACtC,UAAU,CAAC,MAAM;AACjB,WAAW,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AACvC,WAAW,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AACtC,UAAU;AACV,SAAS,CAAC;AACV,SAAS,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AACjC,SAAS,CAAC;AACV,QAAQ,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AACnC,OAAO,CAAC,MAAM;AACd,QAAQ,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AACpC,QAAQ,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AACnC,OAAO;AACP,MAAM,CAAC,MAAM;AACb,OAAO,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACpC,OAAO,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC;AACxC,OAAO,IAAI,SAAS,EAAE;AACtB,QAAQ,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AACnC,QAAQ,SAAS,CAAC,UAAU,EAAE;AAC9B,SAAS,IAAI,EAAE,MAAM;AACrB,SAAS,IAAI;AACb,SAAS,MAAM,EAAE,IAAI,CAAC;AACtB,SAAS,CAAC;AACV,QAAQ,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AACnC,OAAO,CAAC,MAAM;AACd,QAAQ,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AACpC,QAAQ,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AACnC,OAAO;AACP,MAAM;AACN,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AACjC,KAAK,CAAC;AACN,KAAK,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC7B,KAAK,CAAC;AACN,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AAC/B,GAAG,CAAC,MAAM;AACV,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AAChC,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AAC/B,GAAG;AACH,EAAE,CAAC,MAAM;AACT,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AAChC,GAAG,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC;AACpC,GAAG,IAAI,SAAS,EAAE;AAClB,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AAC/B,IAAI,SAAS,CAAC,UAAU,EAAE;AAC1B,KAAK,IAAI,EAAE,MAAM;AACjB,KAAK,IAAI;AACT,KAAK,MAAM,EAAE,IAAI,CAAC;AAClB,KAAK,CAAC;AACN,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AAC/B,GAAG,CAAC,MAAM;AACV,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AAChC,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AAC/B,GAAG;AACH,EAAE;AACF,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AAC9B,EAAE,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AAC/B,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC,CAAC,CAAC;AACH;AACA;AACA,IAAI,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC;AACzC;AACA,IAAI,sBAAsB,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,uFAAuF,GAAG,OAAO,GAAG,2rCAA2rC,GAAG,MAAM,GAAG,+CAA+C,GAAG,OAAO,GAAG,iDAAiD;AAC98C;AACG,IAAC,OAAO,GAAG;AACd,CAAC,2BAA2B,EAAE,KAAK;AACnC,CAAC,KAAK,EAAE,KAAK;AACb,CAAC,GAAG,EAAE;AACN,EAAE,MAAM,EAAE,MAAM;AAChB,EAAE,YAAY,EAAE;AAChB,GAAG,2BAA2B,EAAE,KAAK;AACrC,GAAG,yBAAyB,EAAE;AAC9B,GAAG;AACH,EAAE,YAAY,EAAE;AAChB,GAAG,2BAA2B,EAAE,KAAK;AACrC,GAAG,yBAAyB,EAAE;AAC9B;AACA,EAAE;AACF,CAAC,iBAAiB,EAAE,KAAK;AACzB,CAAC,oBAAoB,EAAE,CAAC,GAAG,CAAC;AAC5B,CAAC,QAAQ,EAAE,KAAK;AAChB,CAAC,iBAAiB,EAAE,SAAS;AAC7B,CAAC,kBAAkB,EAAE,EAAE;AACvB,CAAC,YAAY,EAAE,KAAK;AACpB,CAAC,KAAK,EAAE,IAAI;AACZ,CAAC,gBAAgB,EAAE,eAAe;AAClC,CAAC,IAAI,EAAE,YAAY;AACnB,CAAC,cAAc,EAAE,KAAK;AACtB,CAAC,sBAAsB,EAAE,MAAM;AAC/B,CAAC,uBAAuB,EAAE,KAAK;AAC/B,CAAC,SAAS,EAAE;AACZ,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,4oBAA4oB,GAAG,IAAI,GAAG,gGAAgG,GAAG,IAAI,GAAG,6BAA6B;AAC50B,EAAE,KAAK,EAAE;AACT,EAAE;AACF,CAAC,YAAY,EAAE;AACf;AACA,eAAe,SAAS,GAAG;AAC3B,CAAC,IAAI,MAAM;AACX,CAAC,IAAI,WAAW;AAChB,CAAC,IAAI,WAAW;AAChB,CAAC,IAAI,qBAAqB;AAC1B,CAAC,IAAI,IAAI;AACT,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,qBAAqB,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,wCAA4B,CAAC;AAC9G,CAAC,IAAI,OAAO;AACZ,CAAC,IAAI,SAAS;AACd,CAAC,OAAO;AACR,EAAE,MAAM;AACR,EAAE,WAAW;AACb,EAAE,WAAW;AACb,EAAE,qBAAqB;AACvB,EAAE,IAAI;AACN,EAAE,OAAO;AACT,EAAE;AACF,EAAE;AACF;;;;"}

package/build/server/chunks/chunks/navigation.js-CCPK1Yl5.js

@@ -1,2 +0,0 @@
-import './client.js-D26R0bt6.js';
-//# sourceMappingURL=navigation.js-CCPK1Yl5.js.map

package/build/server/chunks/chunks/navigation.js-CCPK1Yl5.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"navigation.js-CCPK1Yl5.js","sources":[],"sourcesContent":[],"names":[],"mappings":""}

package/build/server/chunks/chunks/oauth.js-WZFWOYa1.js

@@ -1,415 +0,0 @@
-import { hkdfSync, createHash, createDecipheriv, timingSafeEqual, randomBytes, createCipheriv, createHmac } from 'node:crypto';
-
-// ../server/src/oauth/index.ts
-/**
-* OAuth 2.1 for MCP clients and the Grasshopper plugin, with this instance as
-* its own authorization server.
-*
-* The access token is an ordinary API token. The host mints it while the user is
-* signed in, at consent, through the same path as Team → API tokens; this
-* module seals the raw key into the authorization code and hands it over at the
-* token endpoint. So `/mcp` and `/api/v1` keep one credential type.
-*
-* Nothing here is stored. A registered client's id is its own signed metadata,
-* and a code is its own encrypted grant, bound to the issuing origin. The only
-* state is the set of redeemed codes, in the host's memory, so on several
-* replicas a code could be redeemed once per replica within its minute, and only
-* by whoever holds the PKCE verifier.
-*/
-/** The scopes a grant can carry. Each maps to one org-wide API scope. */
-var OAUTH_SCOPES = [
-	"read",
-	"solve",
-	"upload"
-];
-/**
-* All a registered (DCR or CIMD) client can be granted. Its name and redirects
-* are whatever the registrant chose, so `upload`, which puts code on the org's
-* Compute server, stays with the built-in client and a look-alike can't phish for it.
-*/
-var REGISTERED_CLIENT_SCOPES = ["read", "solve"];
-var GRASSHOPPER_CLIENT = {
-	clientId: "selva-grasshopper",
-	name: "Selva for Grasshopper",
-	redirectUris: ["http://127.0.0.1/callback"],
-	builtIn: true,
-	scopes: ["read", "upload"]
-};
-var MCP_PATH = "/mcp";
-var CODE_TTL_MS = 6e4;
-var CLIENT_NAME_MAX = 100;
-var REDIRECT_URIS_MAX = 10;
-var CIMD_TTL_MS = 36e5;
-var CIMD_FAILURE_TTL_MS = 6e4;
-var CIMD_CACHE_MAX = 500;
-var LOOPBACK_HOSTS = /* @__PURE__ */ new Set([
-	"localhost",
-	"127.0.0.1",
-	"[::1]"
-]);
-var OAuthError = class extends Error {
-	error;
-	status;
-	constructor(error, description, status = 400) {
-		super(description);
-		this.error = error;
-		this.status = status;
-		this.name = "OAuthError";
-	}
-	toBody() {
-		return {
-			error: this.error,
-			error_description: this.message
-		};
-	}
-};
-function mcpResourceUrl(origin) {
-	return origin + MCP_PATH;
-}
-function resourceMetadataUrl(origin) {
-	return `${origin}/.well-known/oauth-protected-resource${MCP_PATH}`;
-}
-/** RFC 9728. Claude uses only the first authorization server. */
-function protectedResourceMetadata(origin) {
-	return {
-		resource: mcpResourceUrl(origin),
-		authorization_servers: [origin],
-		scopes_supported: [...REGISTERED_CLIENT_SCOPES],
-		bearer_methods_supported: ["header"]
-	};
-}
-/**
-* RFC 8414. Claude picks Client ID Metadata Documents only when both
-* `client_id_metadata_document_supported` and the `none` auth method appear.
-*/
-function authorizationServerMetadata(origin) {
-	return {
-		issuer: origin,
-		authorization_endpoint: `${origin}/oauth/authorize`,
-		token_endpoint: `${origin}/oauth/token`,
-		registration_endpoint: `${origin}/oauth/register`,
-		response_types_supported: ["code"],
-		grant_types_supported: ["authorization_code"],
-		code_challenge_methods_supported: ["S256"],
-		token_endpoint_auth_methods_supported: ["none"],
-		scopes_supported: [...OAUTH_SCOPES],
-		client_id_metadata_document_supported: true,
-		authorization_response_iss_parameter_supported: true
-	};
-}
-function createOAuthServer(options) {
-	const { origin } = options;
-	const now = options.now ?? Date.now;
-	const signKey = derive(options.secret, "selva-oauth-client");
-	const codeKey = derive(options.secret, `selva-oauth-code:${origin}`);
-	const redeemed = options.redeemedCodes ?? /* @__PURE__ */ new Map();
-	const metadataCache = /* @__PURE__ */ new Map();
-	/** RFC 7591. The client id carries the metadata, signed, so nothing is stored. */
-	function register(input) {
-		try {
-			const meta = input ?? {};
-			const redirectUris = checkRedirectUris(meta.redirect_uris);
-			const name = typeof meta.client_name === "string" ? meta.client_name.trim() : "";
-			const payload = b64(JSON.stringify({
-				n: name.slice(0, CLIENT_NAME_MAX),
-				r: redirectUris,
-				t: now()
-			}));
-			return {
-				status: 201,
-				body: {
-					client_id: `dcr_${payload}.${sign$1(signKey, payload)}`,
-					client_id_issued_at: Math.floor(now() / 1e3),
-					client_name: name || void 0,
-					redirect_uris: redirectUris,
-					grant_types: ["authorization_code"],
-					response_types: ["code"],
-					token_endpoint_auth_method: "none"
-				}
-			};
-		} catch (err) {
-			if (err instanceof OAuthError) return {
-				status: err.status,
-				body: err.toBody()
-			};
-			throw err;
-		}
-	}
-	async function resolveClient(clientId) {
-		if (clientId === "selva-grasshopper") return GRASSHOPPER_CLIENT;
-		if (clientId.startsWith("dcr_")) return registeredClient(clientId);
-		if (clientId.startsWith("https://")) return metadataClient(clientId);
-		throw new OAuthError("invalid_client", "Unknown client.");
-	}
-	function registeredClient(clientId) {
-		const [payload, signature] = clientId.slice(4).split(".");
-		if (!payload || !signature || !safeEqual(signature, sign$1(signKey, payload))) throw new OAuthError("invalid_client", "Unknown client.");
-		const meta = JSON.parse(unb64(payload));
-		return {
-			clientId,
-			name: meta.n || "An MCP client",
-			redirectUris: meta.r,
-			builtIn: false,
-			scopes: REGISTERED_CLIENT_SCOPES
-		};
-	}
-	async function metadataClient(url) {
-		const cached = metadataCache.get(url);
-		if (cached) {
-			if ("client" in cached && now() - cached.at < CIMD_TTL_MS) return cached.client;
-			if ("failure" in cached && now() - cached.at < CIMD_FAILURE_TTL_MS) throw cached.failure;
-		}
-		if (!options.fetchClientMetadata) throw new OAuthError("invalid_client", "This server does not accept URL client ids.");
-		try {
-			const client = await readMetadata(url, options.fetchClientMetadata);
-			remember(url, {
-				at: now(),
-				client
-			});
-			return client;
-		} catch (err) {
-			if (!(err instanceof OAuthError)) throw err;
-			remember(url, {
-				at: now(),
-				failure: err
-			});
-			throw err;
-		}
-	}
-	function remember(url, entry) {
-		if (metadataCache.size >= CIMD_CACHE_MAX) metadataCache.delete(metadataCache.keys().next().value);
-		metadataCache.set(url, entry);
-	}
-	/**
-	* Validates the query `/oauth/authorize` arrives with. An `OAuthError` from a
-	* bad client or redirect URI must be shown, not redirected: the redirect target
-	* is exactly what can't be trusted.
-	*/
-	async function parseAuthorizeRequest(query) {
-		const client = await resolveClient(query.get("client_id") ?? "");
-		const redirectUri = query.get("redirect_uri") ?? "";
-		if (!client.redirectUris.some((r) => redirectMatches(r, redirectUri))) throw new OAuthError("invalid_request", "The redirect URI is not registered for this client.");
-		if (query.get("response_type") !== "code") throw new OAuthError("unsupported_response_type", "Only response_type=code is supported.");
-		const codeChallenge = query.get("code_challenge") ?? "";
-		if (!codeChallenge || query.get("code_challenge_method") !== "S256") throw new OAuthError("invalid_request", "PKCE with code_challenge_method=S256 is required.");
-		const resource = query.get("resource") ?? mcpResourceUrl(origin);
-		if (!isThisResource(resource)) throw new OAuthError("invalid_target", "The resource is not this server.");
-		return {
-			client,
-			redirectUri,
-			state: query.get("state") ?? void 0,
-			codeChallenge,
-			scopes: parseScopes(query.get("scope"), client.scopes),
-			resource
-		};
-	}
-	/** Where to send the browser after consent: the client's redirect URI with a code. */
-	function approve(request, grant) {
-		const code = seal(codeKey, {
-			c: request.client.clientId,
-			r: request.redirectUri,
-			p: request.codeChallenge,
-			x: now() + CODE_TTL_MS,
-			g: grant
-		});
-		return withParams(request.redirectUri, {
-			code,
-			state: request.state,
-			iss: origin
-		});
-	}
-	function deny(request) {
-		return withParams(request.redirectUri, {
-			error: "access_denied",
-			state: request.state,
-			iss: origin
-		});
-	}
-	function exchange(form) {
-		try {
-			if (form.get("grant_type") !== "authorization_code") throw new OAuthError("unsupported_grant_type", "Only authorization_code is supported.");
-			const code = form.get("code") ?? "";
-			const sealed = open(codeKey, code);
-			if (!sealed || sealed.x < now()) throw new OAuthError("invalid_grant", "The code is invalid or expired.");
-			if (sealed.c !== form.get("client_id") || sealed.r !== form.get("redirect_uri")) throw new OAuthError("invalid_grant", "The code was issued to another client.");
-			const verifier = form.get("code_verifier") ?? "";
-			if (!safeEqual(createHash("sha256").update(verifier).digest("base64url"), sealed.p)) throw new OAuthError("invalid_grant", "The code_verifier does not match.");
-			const resource = form.get("resource");
-			if (resource !== null && !isThisResource(resource)) throw new OAuthError("invalid_target", "The resource is not this server.");
-			if (!markRedeemed(code, sealed.x)) throw new OAuthError("invalid_grant", "The code was already used.");
-			const { g } = sealed;
-			options.onRedeemed?.(g.tokenId);
-			return {
-				status: 200,
-				body: {
-					access_token: g.secret,
-					token_type: "Bearer",
-					expires_in: Math.max(0, Math.floor((Date.parse(g.expiresAt) - now()) / 1e3)),
-					scope: g.scopes.join(" ")
-				}
-			};
-		} catch (err) {
-			if (err instanceof OAuthError) return {
-				status: err.status,
-				body: err.toBody()
-			};
-			throw err;
-		}
-	}
-	function markRedeemed(code, expiresAt) {
-		const t = now();
-		for (const [k, x] of redeemed) if (x < t) redeemed.delete(k);
-		const id = createHash("sha256").update(code).digest("base64url");
-		if (redeemed.has(id)) return false;
-		redeemed.set(id, expiresAt);
-		return true;
-	}
-	function isThisResource(resource) {
-		const r = resource.replace(/\/$/, "");
-		return r === origin || r === mcpResourceUrl(origin);
-	}
-	return {
-		register,
-		resolveClient,
-		parseAuthorizeRequest,
-		approve,
-		deny,
-		exchange,
-		protectedResourceMetadata: () => protectedResourceMetadata(origin),
-		authorizationServerMetadata: () => authorizationServerMetadata(origin)
-	};
-}
-/** OAuth scopes to the API scopes a minted token gets. */
-function apiScopesFor(scopes) {
-	return scopes.map((s) => `${s}:all`);
-}
-async function readMetadata(url, fetchClientMetadata) {
-	let doc;
-	try {
-		doc = await fetchClientMetadata(url);
-	} catch {
-		throw new OAuthError("invalid_client", "The client metadata document could not be read.");
-	}
-	if (doc?.client_id !== url) throw new OAuthError("invalid_client", "The metadata document names a different client_id.");
-	return {
-		clientId: url,
-		name: typeof doc.client_name === "string" && doc.client_name.trim() ? doc.client_name.trim().slice(0, CLIENT_NAME_MAX) : new URL(url).host,
-		redirectUris: checkRedirectUris(doc.redirect_uris),
-		builtIn: false,
-		scopes: REGISTERED_CLIENT_SCOPES
-	};
-}
-/**
-* What the request asks for, within what its client may have. A scope outside
-* that is dropped, not refused, so a client that asks for every advertised
-* scope still signs in with what it may have. Asking for none of them means all
-* of them. `read` rides along with `solve`, which the consent page offers as
-* "read and run solves".
-*/
-function parseScopes(raw, allowed) {
-	const asked = (raw ?? "").split(" ").filter((s) => allowed.includes(s));
-	if (!asked.length) return [...allowed];
-	return allowed.filter((s) => asked.includes(s) || s === "read" && asked.includes("solve"));
-}
-/**
-* The access levels a consent page offers for a request, narrowest first. The
-* user may narrow what the client asked for, never widen it. An upload request
-* is offered as asked: narrowing it to read would leave the client unable to
-* do the one thing it signed in for.
-*/
-function consentChoices(scopes) {
-	if (scopes.includes("upload")) return [{
-		access: "upload",
-		scopes: [...scopes]
-	}];
-	const choices = [{
-		access: "read",
-		scopes: ["read"]
-	}];
-	if (scopes.includes("solve")) choices.push({
-		access: "solve",
-		scopes: [...scopes]
-	});
-	return choices;
-}
-function checkRedirectUris(value) {
-	if (!Array.isArray(value) || !value.length || value.length > REDIRECT_URIS_MAX) throw new OAuthError("invalid_redirect_uri", "Give between 1 and 10 redirect_uris.");
-	for (const uri of value) if (typeof uri !== "string" || !isAllowedRedirect(uri)) throw new OAuthError("invalid_redirect_uri", "Redirect URIs must be https, or http on a loopback address.");
-	return value;
-}
-function isAllowedRedirect(uri) {
-	let url;
-	try {
-		url = new URL(uri);
-	} catch {
-		return false;
-	}
-	if (url.hash) return false;
-	return url.protocol === "https:" || url.protocol === "http:" && LOOPBACK_HOSTS.has(url.hostname);
-}
-/** A redirect to a program on the user's own machine, which any local process can claim. */
-function isLoopbackRedirect(uri) {
-	try {
-		return LOOPBACK_HOSTS.has(new URL(uri).hostname);
-	} catch {
-		return false;
-	}
-}
-/** Exact, except a loopback redirect matches on any port (RFC 8252 §7.3). */
-function redirectMatches(registered, requested) {
-	if (registered === requested) return true;
-	let a, b;
-	try {
-		a = new URL(registered);
-		b = new URL(requested);
-	} catch {
-		return false;
-	}
-	return a.protocol === "http:" && b.protocol === "http:" && LOOPBACK_HOSTS.has(a.hostname) && a.hostname === b.hostname && a.pathname === b.pathname && a.search === b.search && !b.hash && !b.username && !b.password;
-}
-function withParams(uri, params) {
-	const url = new URL(uri);
-	for (const [k, v] of Object.entries(params)) if (v !== void 0) url.searchParams.set(k, v);
-	return url.toString();
-}
-function derive(secret, info) {
-	return Buffer.from(hkdfSync("sha256", secret, "", info, 32));
-}
-function sign$1(key, data) {
-	return createHmac("sha256", key).update(data).digest("base64url");
-}
-function seal(key, value) {
-	const iv = randomBytes(12);
-	const cipher = createCipheriv("aes-256-gcm", key, iv);
-	const body = Buffer.concat([cipher.update(JSON.stringify(value)), cipher.final()]);
-	return Buffer.concat([
-		iv,
-		cipher.getAuthTag(),
-		body
-	]).toString("base64url");
-}
-function open(key, sealed) {
-	try {
-		const raw = Buffer.from(sealed, "base64url");
-		const decipher = createDecipheriv("aes-256-gcm", key, raw.subarray(0, 12), { authTagLength: 16 });
-		decipher.setAuthTag(raw.subarray(12, 28));
-		const body = Buffer.concat([decipher.update(raw.subarray(28)), decipher.final()]);
-		return JSON.parse(body.toString("utf8"));
-	} catch {
-		return null;
-	}
-}
-function b64(text) {
-	return Buffer.from(text).toString("base64url");
-}
-function unb64(text) {
-	return Buffer.from(text, "base64url").toString("utf8");
-}
-function safeEqual(a, b) {
-	const x = Buffer.from(a);
-	const y = Buffer.from(b);
-	return x.length === y.length && timingSafeEqual(x, y);
-}
-
-export { CODE_TTL_MS as C, OAuthError as O, REGISTERED_CLIENT_SCOPES as R, consentChoices as a, apiScopesFor as b, createOAuthServer as c, authorizationServerMetadata as d, isLoopbackRedirect as i, protectedResourceMetadata as p, resourceMetadataUrl as r };
-//# sourceMappingURL=oauth.js-WZFWOYa1.js.map