@selvajs/selva 4.20.0-beta.6 → 4.20.0-beta.7

package/build/server/chunks/chunks/request.js-bLOak8ZP.js

@@ -1,119 +0,0 @@
-import { a as apiError, A as ApiErrorCode } from './errors.js-BNBva9oZ.js';
-
-//#region ../server/src/api/request.ts
-/**
-* The authenticated caller, or a 401.
-*
-* `ctx` and `user` are optional on `ApiRequest` because a host builds one for
-* anonymous requests too (share-token solves reach handlers with a `ctx` and no
-* `user`). Every handler that needs an identity narrows it here rather than
-* asserting the fields non-null, so the unauthenticated path fails as a denial
-* instead of a crash.
-*/
-function requireCaller(req) {
-	if (!req.ctx || !req.user) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
-	return {
-		ctx: req.ctx,
-		user: req.user
-	};
-}
-/**
-* Fail with a Zod error's messages, one per field.
-*
-* The top-level `message` names the first problem so a human reading the
-* response learns something without parsing `fields`.
-*/
-function throwZodError(err) {
-	const fields = {};
-	for (const issue of err.issues) {
-		const key = issue.path.length ? issue.path.join(".") : "_";
-		if (!(key in fields)) fields[key] = issue.message;
-	}
-	const first = err.issues[0];
-	const path = first.path.length ? `${first.path.join(".")}: ` : "";
-	apiError(400, ApiErrorCode.VALIDATION_FAILED, `${path}${first.message}`, fields);
-}
-/**
-* Read required path params, 400ing on any that is missing or blank.
-*
-* A router types every param as `string`, but a route can be reached with an
-* empty segment — this catches that instead of letting a stale non-null
-* assertion paper over it.
-*
-* Does **not** validate format — a guid-shaped param still goes through a
-* schema where the route cares. Replaces the `if (!id) apiError(...)` preamble,
-* not the schema check.
-*/
-function requireParams(params, ...names) {
-	const out = {};
-	const missing = [];
-	for (const name of names) {
-		const value = params[name];
-		if (!value) {
-			missing.push(name);
-			continue;
-		}
-		out[name] = value;
-	}
-	if (missing.length) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Missing path parameter${missing.length > 1 ? "s" : ""}: ${missing.join(", ")}`);
-	return out;
-}
-/**
-* Read a path param through a Zod schema, 400ing on a bad value.
-*
-* The format-checking counterpart to `requireParams` — for guids, enum-shaped
-* segments, anything where "present" isn't the same as "valid".
-*/
-function parseParam(value, schema, name) {
-	const parsed = schema.safeParse(value);
-	if (!parsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid or missing ${name}`);
-	return parsed.data;
-}
-/**
-* Parse and validate a JSON body. A malformed body becomes `null` rather than
-* throwing, so it fails the schema as a validation error — broken JSON gets a
-* 400 naming the problem, not a 500 from `request.json()`.
-*
-* `missingAs` covers endpoints whose fields are all optional: passing `{}` lets
-* an empty body mean "no changes" instead of a validation failure.
-*/
-async function parseBody(request, schema, { missingAs } = {}) {
-	const raw = await request.json().catch(() => null);
-	const parsed = schema.safeParse(raw ?? missingAs ?? null);
-	if (!parsed.success) throwZodError(parsed.error);
-	return parsed.data;
-}
-/**
-* Pull a required file out of a multipart body and check its size and, where
-* given, its extension.
-*
-* A second line of defence, not the first: a host's body-size guard should
-* reject an oversized request before it is buffered. This catches a file that
-* is individually too large inside a request that isn't.
-*
-* Caps are passed in rather than read here — they are deployment config, and a
-* package that resolved them would pin every host to one source of truth.
-*/
-function requireUpload(form, field, { maxBytes, extensions, contentTypes, label = "File" }) {
-	const file = form.get(field);
-	if (!(file instanceof File) || file.size === 0) apiError(400, ApiErrorCode.VALIDATION_FAILED, `A ${label.toLowerCase()} is required`);
-	const extension = file.name.slice(file.name.lastIndexOf(".")).toLowerCase();
-	if (extensions && !extensions.includes(extension)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `File type not allowed. Allowed: ${extensions.join(", ")}`);
-	if (contentTypes && !contentTypes.allowed.has(file.type)) apiError(400, ApiErrorCode.VALIDATION_FAILED, contentTypes.message);
-	if (file.size > maxBytes) apiError(400, ApiErrorCode.VALIDATION_FAILED, `${label} too large. Max size: ${maxBytes / 1048576} MB`);
-	return {
-		file,
-		extension
-	};
-}
-/** A multipart text field, trimmed and length-capped. Absent stays `undefined`. */
-function formText(form, field, { maxLength } = {}) {
-	const raw = form.get(field);
-	if (typeof raw !== "string") return void 0;
-	const trimmed = raw.trim();
-	if (!trimmed) return void 0;
-	return maxLength ? trimmed.slice(0, maxLength) : trimmed;
-}
-
-export { requireUpload as a, parseBody as b, requireParams as c, formText as f, parseParam as p, requireCaller as r, throwZodError as t };
-//# sourceMappingURL=request.js-bLOak8ZP.js.map

package/build/server/chunks/chunks/request.js-bLOak8ZP.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"request.js-bLOak8ZP.js","sources":["../../../../.svelte-kit/output/server/chunks/request.js"],"sourcesContent":["import { n as ApiErrorCode, r as apiError } from \"./errors.js\";\n//#region ../server/src/api/request.ts\n/**\n* The authenticated caller, or a 401.\n*\n* `ctx` and `user` are optional on `ApiRequest` because a host builds one for\n* anonymous requests too (share-token solves reach handlers with a `ctx` and no\n* `user`). Every handler that needs an identity narrows it here rather than\n* asserting the fields non-null, so the unauthenticated path fails as a denial\n* instead of a crash.\n*/\nfunction requireCaller(req) {\n\tif (!req.ctx || !req.user) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n\treturn {\n\t\tctx: req.ctx,\n\t\tuser: req.user\n\t};\n}\n/**\n* Fail with a Zod error's messages, one per field.\n*\n* The top-level `message` names the first problem so a human reading the\n* response learns something without parsing `fields`.\n*/\nfunction throwZodError(err) {\n\tconst fields = {};\n\tfor (const issue of err.issues) {\n\t\tconst key = issue.path.length ? issue.path.join(\".\") : \"_\";\n\t\tif (!(key in fields)) fields[key] = issue.message;\n\t}\n\tconst first = err.issues[0];\n\tconst path = first.path.length ? `${first.path.join(\".\")}: ` : \"\";\n\tapiError(400, ApiErrorCode.VALIDATION_FAILED, `${path}${first.message}`, fields);\n}\n/**\n* Read required path params, 400ing on any that is missing or blank.\n*\n* A router types every param as `string`, but a route can be reached with an\n* empty segment — this catches that instead of letting a stale non-null\n* assertion paper over it.\n*\n* Does **not** validate format — a guid-shaped param still goes through a\n* schema where the route cares. Replaces the `if (!id) apiError(...)` preamble,\n* not the schema check.\n*/\nfunction requireParams(params, ...names) {\n\tconst out = {};\n\tconst missing = [];\n\tfor (const name of names) {\n\t\tconst value = params[name];\n\t\tif (!value) {\n\t\t\tmissing.push(name);\n\t\t\tcontinue;\n\t\t}\n\t\tout[name] = value;\n\t}\n\tif (missing.length) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Missing path parameter${missing.length > 1 ? \"s\" : \"\"}: ${missing.join(\", \")}`);\n\treturn out;\n}\n/**\n* Read a path param through a Zod schema, 400ing on a bad value.\n*\n* The format-checking counterpart to `requireParams` — for guids, enum-shaped\n* segments, anything where \"present\" isn't the same as \"valid\".\n*/\nfunction parseParam(value, schema, name) {\n\tconst parsed = schema.safeParse(value);\n\tif (!parsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid or missing ${name}`);\n\treturn parsed.data;\n}\n/**\n* Parse and validate a JSON body. A malformed body becomes `null` rather than\n* throwing, so it fails the schema as a validation error — broken JSON gets a\n* 400 naming the problem, not a 500 from `request.json()`.\n*\n* `missingAs` covers endpoints whose fields are all optional: passing `{}` lets\n* an empty body mean \"no changes\" instead of a validation failure.\n*/\nasync function parseBody(request, schema, { missingAs } = {}) {\n\tconst raw = await request.json().catch(() => null);\n\tconst parsed = schema.safeParse(raw ?? missingAs ?? null);\n\tif (!parsed.success) throwZodError(parsed.error);\n\treturn parsed.data;\n}\n/**\n* Pull a required file out of a multipart body and check its size and, where\n* given, its extension.\n*\n* A second line of defence, not the first: a host's body-size guard should\n* reject an oversized request before it is buffered. This catches a file that\n* is individually too large inside a request that isn't.\n*\n* Caps are passed in rather than read here — they are deployment config, and a\n* package that resolved them would pin every host to one source of truth.\n*/\nfunction requireUpload(form, field, { maxBytes, extensions, contentTypes, label = \"File\" }) {\n\tconst file = form.get(field);\n\tif (!(file instanceof File) || file.size === 0) apiError(400, ApiErrorCode.VALIDATION_FAILED, `A ${label.toLowerCase()} is required`);\n\tconst extension = file.name.slice(file.name.lastIndexOf(\".\")).toLowerCase();\n\tif (extensions && !extensions.includes(extension)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `File type not allowed. Allowed: ${extensions.join(\", \")}`);\n\tif (contentTypes && !contentTypes.allowed.has(file.type)) apiError(400, ApiErrorCode.VALIDATION_FAILED, contentTypes.message);\n\tif (file.size > maxBytes) apiError(400, ApiErrorCode.VALIDATION_FAILED, `${label} too large. Max size: ${maxBytes / 1048576} MB`);\n\treturn {\n\t\tfile,\n\t\textension\n\t};\n}\n/** A multipart text field, trimmed and length-capped. Absent stays `undefined`. */\nfunction formText(form, field, { maxLength } = {}) {\n\tconst raw = form.get(field);\n\tif (typeof raw !== \"string\") return void 0;\n\tconst trimmed = raw.trim();\n\tif (!trimmed) return void 0;\n\treturn maxLength ? trimmed.slice(0, maxLength) : trimmed;\n}\n//#endregion\nexport { requireParams as a, requireCaller as i, parseBody as n, requireUpload as o, parseParam as r, throwZodError as s, formText as t };\n"],"names":[],"mappings":";;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,aAAa,CAAC,GAAG,EAAE;AAC5B,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AACpF,CAAC,OAAO;AACR,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG;AACd,EAAE,IAAI,EAAE,GAAG,CAAC;AACZ,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,aAAa,CAAC,GAAG,EAAE;AAC5B,CAAC,MAAM,MAAM,GAAG,EAAE;AAClB,CAAC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE;AACjC,EAAE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG;AAC5D,EAAE,IAAI,EAAE,GAAG,IAAI,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO;AACnD,CAAC;AACD,CAAC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5B,CAAC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE;AAClE,CAAC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC;AACjF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,aAAa,CAAC,MAAM,EAAE,GAAG,KAAK,EAAE;AACzC,CAAC,MAAM,GAAG,GAAG,EAAE;AACf,CAAC,MAAM,OAAO,GAAG,EAAE;AACnB,CAAC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;AAC3B,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;AAC5B,EAAE,IAAI,CAAC,KAAK,EAAE;AACd,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;AACrB,GAAG;AACH,EAAE;AACF,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK;AACnB,CAAC;AACD,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,sBAAsB,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACnJ,CAAC,OAAO,GAAG;AACX;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;AACzC,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;AACvC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC;AACjG,CAAC,OAAO,MAAM,CAAC,IAAI;AACnB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE;AAC9D,CAAC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACnD,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,SAAS,IAAI,IAAI,CAAC;AAC1D,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,OAAO,MAAM,CAAC,IAAI;AACnB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,GAAG,MAAM,EAAE,EAAE;AAC5F,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;AAC7B,CAAC,IAAI,EAAE,IAAI,YAAY,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,YAAY,CAAC,CAAC;AACtI,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE;AAC5E,CAAC,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,gCAAgC,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC7J,CAAC,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,YAAY,CAAC,OAAO,CAAC;AAC9H,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,EAAE,KAAK,CAAC,sBAAsB,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;AAClI,CAAC,OAAO;AACR,EAAE,IAAI;AACN,EAAE;AACF,EAAE;AACF;AACA;AACA,SAAS,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE;AACnD,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;AAC5B,CAAC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,OAAO,MAAM;AAC3C,CAAC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE;AAC3B,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,MAAM;AAC5B,CAAC,OAAO,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,OAAO;AACzD;;;;"}

package/build/server/chunks/chunks/resolve.server.js-DoxIQHGn.js

@@ -1,59 +0,0 @@
-import { S as SYSTEM_CONTEXT } from './src.js-CkL6l768.js';
-import { p as providers, o as getDefinitionMeta, f as getProjectProvider, j as flag } from './providers.server.js-CqUutXkw.js';
-import { h as hashToken, l as looksLikeShareToken } from './token2.server.js-B8_2nZWx.js';
-import { error } from '@sveltejs/kit';
-
-//#region src/lib/server/shareLinks/resolve.server.ts
-/**
-* Extracts a candidate share-link token from the request — `?token=share_…`
-* query param, or `Authorization: Bearer share_…` header. Returns the raw
-* token, or null when none present. Does NOT validate.
-*/
-function readShareToken(request, url) {
-	if (!flag("ENABLE_SHARING")) return null;
-	const q = url.searchParams.get("token");
-	if (q && looksLikeShareToken(q)) return q;
-	const auth = request.headers.get("authorization");
-	if (auth?.startsWith("Bearer ")) {
-		const candidate = auth.slice(7).trim();
-		if (looksLikeShareToken(candidate)) return candidate;
-	}
-	return null;
-}
-/**
-* Runs before user-based auth on definition-scoped routes.
-*
-* Throws only when a token is *present but invalid* (wrong definition, wrong
-* channel, expired, revoked, view-only when solve was requested) — deliberate
-* 401/403/429 responses to a misbehaving consumer. When no token is present
-* at all, returns null and the caller falls through to user-based auth.
-*/
-async function tryResolveShareToken(request, url, requestedDefinitionId, requestedChannel, opts) {
-	const raw = readShareToken(request, url);
-	if (!raw) return null;
-	const tokenHash = hashToken(raw);
-	const link = await providers.data.shareLinks.getByTokenHash(SYSTEM_CONTEXT, tokenHash);
-	if (!link) throw error(401, "Invalid or revoked share token.");
-	if (link.expiresAt && new Date(link.expiresAt).getTime() <= Date.now()) throw error(401, "Share token has expired.");
-	if (link.definitionId !== requestedDefinitionId) throw error(403, "Share token is not valid for this definition.");
-	if (link.channel !== requestedChannel) throw error(403, `Share token is for the '${link.channel}' channel only.`);
-	if (opts.requireSolve && !link.allowSolve) throw error(403, "Share token grants view-only access.");
-	const def = await getDefinitionMeta().get(SYSTEM_CONTEXT, link.definitionId);
-	if (!def) throw error(401, "Share token target no longer exists.");
-	const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, def.projectId);
-	if (!project) throw error(401, "Share token target no longer exists.");
-	return {
-		link,
-		ctx: {
-			userId: `share:${link.id}`,
-			actingOrgId: project.orgId,
-			platformPermissions: [],
-			orgPermissions: [],
-			system: true,
-			shareLinkId: link.id
-		}
-	};
-}
-
-export { tryResolveShareToken as t };
-//# sourceMappingURL=resolve.server.js-DoxIQHGn.js.map

package/build/server/chunks/chunks/resolve.server.js-DoxIQHGn.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolve.server.js-DoxIQHGn.js","sources":["../../../../.svelte-kit/output/server/chunks/resolve.server.js"],"sourcesContent":["import { t as SYSTEM_CONTEXT } from \"./src.js\";\nimport { T as providers, s as getDefinitionMeta, t as flag, v as getProjectProvider } from \"./providers.server.js\";\nimport { n as looksLikeShareToken, t as hashToken } from \"./token2.server.js\";\nimport { error } from \"@sveltejs/kit\";\n//#region src/lib/server/shareLinks/resolve.server.ts\n/**\n* Extracts a candidate share-link token from the request — `?token=share_…`\n* query param, or `Authorization: Bearer share_…` header. Returns the raw\n* token, or null when none present. Does NOT validate.\n*/\nfunction readShareToken(request, url) {\n\tif (!flag(\"ENABLE_SHARING\")) return null;\n\tconst q = url.searchParams.get(\"token\");\n\tif (q && looksLikeShareToken(q)) return q;\n\tconst auth = request.headers.get(\"authorization\");\n\tif (auth?.startsWith(\"Bearer \")) {\n\t\tconst candidate = auth.slice(7).trim();\n\t\tif (looksLikeShareToken(candidate)) return candidate;\n\t}\n\treturn null;\n}\n/**\n* Runs before user-based auth on definition-scoped routes.\n*\n* Throws only when a token is *present but invalid* (wrong definition, wrong\n* channel, expired, revoked, view-only when solve was requested) — deliberate\n* 401/403/429 responses to a misbehaving consumer. When no token is present\n* at all, returns null and the caller falls through to user-based auth.\n*/\nasync function tryResolveShareToken(request, url, requestedDefinitionId, requestedChannel, opts) {\n\tconst raw = readShareToken(request, url);\n\tif (!raw) return null;\n\tconst tokenHash = hashToken(raw);\n\tconst link = await providers.data.shareLinks.getByTokenHash(SYSTEM_CONTEXT, tokenHash);\n\tif (!link) throw error(401, \"Invalid or revoked share token.\");\n\tif (link.expiresAt && new Date(link.expiresAt).getTime() <= Date.now()) throw error(401, \"Share token has expired.\");\n\tif (link.definitionId !== requestedDefinitionId) throw error(403, \"Share token is not valid for this definition.\");\n\tif (link.channel !== requestedChannel) throw error(403, `Share token is for the '${link.channel}' channel only.`);\n\tif (opts.requireSolve && !link.allowSolve) throw error(403, \"Share token grants view-only access.\");\n\tconst def = await getDefinitionMeta().get(SYSTEM_CONTEXT, link.definitionId);\n\tif (!def) throw error(401, \"Share token target no longer exists.\");\n\tconst project = await getProjectProvider().getProject(SYSTEM_CONTEXT, def.projectId);\n\tif (!project) throw error(401, \"Share token target no longer exists.\");\n\treturn {\n\t\tlink,\n\t\tctx: {\n\t\t\tuserId: `share:${link.id}`,\n\t\t\tactingOrgId: project.orgId,\n\t\t\tplatformPermissions: [],\n\t\t\torgPermissions: [],\n\t\t\tsystem: true,\n\t\t\tshareLinkId: link.id\n\t\t}\n\t};\n}\n//#endregion\nexport { tryResolveShareToken as t };\n"],"names":[],"mappings":";;;;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE;AACtC,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,OAAO,IAAI;AACzC,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;AACxC,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;AAC1C,CAAC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;AAClD,CAAC,IAAI,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE;AAClC,EAAE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;AACxC,EAAE,IAAI,mBAAmB,CAAC,SAAS,CAAC,EAAE,OAAO,SAAS;AACtD,CAAC;AACD,CAAC,OAAO,IAAI;AACZ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,oBAAoB,CAAC,OAAO,EAAE,GAAG,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,IAAI,EAAE;AACjG,CAAC,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC;AACzC,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,IAAI;AACtB,CAAC,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC;AACjC,CAAC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,cAAc,EAAE,SAAS,CAAC;AACvF,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,iCAAiC,CAAC;AAC/D,CAAC,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACrH,CAAC,IAAI,IAAI,CAAC,YAAY,KAAK,qBAAqB,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,+CAA+C,CAAC;AACnH,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,gBAAgB,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,wBAAwB,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;AAClH,CAAC,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,sCAAsC,CAAC;AACpG,CAAC,MAAM,GAAG,GAAG,MAAM,iBAAiB,EAAE,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC;AAC7E,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,sCAAsC,CAAC;AACnE,CAAC,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,GAAG,CAAC,SAAS,CAAC;AACrF,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,sCAAsC,CAAC;AACvE,CAAC,OAAO;AACR,EAAE,IAAI;AACN,EAAE,GAAG,EAAE;AACP,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;AAC7B,GAAG,WAAW,EAAE,OAAO,CAAC,KAAK;AAC7B,GAAG,mBAAmB,EAAE,EAAE;AAC1B,GAAG,cAAc,EAAE,EAAE;AACrB,GAAG,MAAM,EAAE,IAAI;AACf,GAAG,WAAW,EAAE,IAAI,CAAC;AACrB;AACA,EAAE;AACF;;;;"}

package/build/server/chunks/chunks/schema-extraction.js-BYMAfcf8.js

@@ -1,146 +0,0 @@
-import { t as tt, U as UI_SCHEMA_VERSION, Z as Ze } from './schema.js-CCefMgzX.js';
-
-//#region ../platform/src/events/interface.ts
-/**
-* `ctx.userId === ''` is the `SYSTEM_CONTEXT` convention for a server-internal
-* caller (bootstrap, janitors, migrations), which resolves to `'system'` here.
-*/
-function actorFrom(ctx) {
-	return ctx.userId || "system";
-}
-/** `actorId` plus, for an API-token request, `tokenId`. Spread into an event. */
-function actorOf(ctx) {
-	const actorId = actorFrom(ctx);
-	return ctx.apiScope ? {
-		actorId,
-		tokenId: ctx.apiScope.tokenId
-	} : { actorId };
-}
-/** Discards every event. Used when `SelvaConfig.events` is omitted. */
-var NoopEventSink = class {
-	async emit(_event) {}
-};
-//#endregion
-//#region ../platform/src/config.ts
-function isFlagEnabled(config, flag) {
-	return Boolean(config.flags?.[flag]);
-}
-//#endregion
-//#region ../server/src/definitions/schema-extraction.ts
-/** Thin re-export of @selvajs/compute's unwrap, typed to `UISchema`. */
-function readSchemaResults(raw) {
-	return Ze(raw);
-}
-/** Thrown when compute is reachable but the definition yields no usable schema. */
-var SchemaExtractionError = class extends Error {
-	kind;
-	constructor(kind, message) {
-		super(message);
-		this.kind = kind;
-		this.name = "SchemaExtractionError";
-	}
-};
-/**
-* Rejects a schema whose keys are not camelCase by the time it reaches a consumer.
-*
-* Compute serializes the plugin's `UISchema` POCO, whose camelCase names live in
-* `[JsonProperty]` attributes. `Selva.gha` ILRepack-merges Newtonsoft, so those
-* attributes have type `Selva!Newtonsoft.Json.JsonPropertyAttribute`; a compute
-* server serializing with its OWN Newtonsoft does not recognize them, reads no
-* attributes, and falls back to raw CLR member names — `Inputs`, `Layout`.
-* Nothing throws on the wire: every consumer just reads `schema.inputs` as
-* undefined and renders a definition with no inputs.
-*
-* `postSchemaFormData` repairs that casing via `normalizeUISchemaCasing`, so a
-* schema fresh off the wire never trips this. It stays because schemas are also
-* PERSISTED: a row cached before the normalizer existed still holds PascalCase,
-* and it reaches consumers without passing through `postSchemaFormData` again.
-* A schema with no `inputs` in any casing lands here too. It is a backstop, not
-* the primary defense — which is why it names the missing key rather than telling
-* the operator to go update their compute server.
-*
-* Checked structurally rather than by plugin version, because the casing depends
-* on which assembly serialized the schema, not on any version number.
-*/
-function assertCamelCaseSchema(schema) {
-	const raw = schema;
-	if (Array.isArray(raw.inputs)) return;
-	const pascalKeys = [
-		"Inputs",
-		"Outputs",
-		"Layout",
-		"SchemaVersion"
-	].filter((k) => k in raw);
-	if (pascalKeys.length > 0) throw new SchemaExtractionError("malformed", `Schema keys are PascalCase (found ${pascalKeys.join(", ")}), so every property name is wrong and the definition would render with no inputs. Compute serialized it with its own Newtonsoft instead of the one merged into Selva.gha. Fresh responses are normalized, so this is most likely a schema cached before that fix — re-save the definition version to re-extract it.`);
-	throw new SchemaExtractionError("malformed", `Compute returned a schema with no 'inputs' array (got keys: ${Object.keys(raw).slice(0, 12).join(", ")}).`);
-}
-function parseSemver(version) {
-	const m = /^(\d+)\.(\d+)\.(\d+)$/.exec(version);
-	return m ? [
-		Number(m[1]),
-		Number(m[2]),
-		Number(m[3])
-	] : null;
-}
-/**
-* Rejects a schema from a NEWER plugin than this app was built against — its
-* shape may contain constructs the renderer doesn't know. Older (or missing)
-* versions pass: the compute-side C# migrator always emits its own current
-* version, and an older shape only lacks optional additions.
-*/
-function assertSupportedSchemaVersion(schema) {
-	const version = schema.schemaVersion;
-	if (!version) return;
-	const extracted = parseSemver(version);
-	const supported = parseSemver(UI_SCHEMA_VERSION);
-	if (!extracted || !supported) return;
-	if (extracted[0] > supported[0] || extracted[0] === supported[0] && (extracted[1] > supported[1] || extracted[1] === supported[1] && extracted[2] > supported[2])) throw new SchemaExtractionError("unsupported", `This definition was authored with a newer Selva plugin (schema format ${version}); this server supports schema format ≤ ${UI_SCHEMA_VERSION}. Update the server, or re-save the definition with a matching plugin version.`);
-}
-/**
-* POSTs a multipart form to Rhino Compute's `/grasshopper/schema` endpoint (no
-* solve required). Throws 'unreachable' on a network failure or non-2xx. The
-* per-file `error` Compute reports on its 200-with-no-schemas case is left to
-* the caller — single-file and multi-file callers want different messages.
-*/
-async function postSchemaFormData(formData, server) {
-	const schemaUrl = new URL("/grasshopper/schema", server.serverUrl).toString();
-	const headers = {};
-	if (server.apiKey) headers["RhinoComputeKey"] = server.apiKey;
-	let response;
-	try {
-		response = await fetch(schemaUrl, {
-			method: "POST",
-			headers,
-			body: formData
-		});
-	} catch (err) {
-		throw new SchemaExtractionError("unreachable", `Compute server is unreachable: ${err instanceof Error ? err.message : String(err)}`);
-	}
-	if (!response.ok) throw new SchemaExtractionError("unreachable", `Schema endpoint returned ${response.status}: ${response.statusText}`);
-	return readSchemaResults(await response.json()).map((result) => ({
-		...result,
-		schemas: result.schemas?.map((schema) => tt(schema))
-	}));
-}
-/**
-* Throws `SchemaExtractionError` so callers can map to the right HTTP status:
-* 503 unreachable / 422 invalid or unsupported.
-*/
-async function fetchSchemaFromCompute(definitionBytes, server) {
-	const formData = new FormData();
-	const blob = new Blob([new Uint8Array(definitionBytes)], { type: "application/octet-stream" });
-	formData.append("file", blob, "definition.gh");
-	const results = await postSchemaFormData(formData, server);
-	const schemas = results.flatMap((r) => r.schemas ?? []);
-	if (schemas.length === 0) {
-		const diagnosis = results.map((r) => r.error).filter(Boolean);
-		if (diagnosis.length > 0) throw new SchemaExtractionError("invalid", diagnosis.join("\n"));
-		throw new SchemaExtractionError("invalid", "No schemas found in definition.\n\nIn Grasshopper, verify a Context Bake component with the output name \"Schema\" is present and wired to the solver.");
-	}
-	assertSupportedSchemaVersion(schemas[0]);
-	assertCamelCaseSchema(schemas[0]);
-	return schemas[0];
-}
-
-export { NoopEventSink as N, SchemaExtractionError as S, actorOf as a, actorFrom as b, assertCamelCaseSchema as c, fetchSchemaFromCompute as f, isFlagEnabled as i, postSchemaFormData as p };
-//# sourceMappingURL=schema-extraction.js-BYMAfcf8.js.map

package/build/server/chunks/chunks/schema-extraction.js-BYMAfcf8.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schema-extraction.js-BYMAfcf8.js","sources":["../../../../.svelte-kit/output/server/chunks/schema-extraction.js"],"sourcesContent":["import { f as Ze, g as tt, t as UI_SCHEMA_VERSION } from \"./schema.js\";\n//#region ../platform/src/events/interface.ts\n/**\n* `ctx.userId === ''` is the `SYSTEM_CONTEXT` convention for a server-internal\n* caller (bootstrap, janitors, migrations), which resolves to `'system'` here.\n*/\nfunction actorFrom(ctx) {\n\treturn ctx.userId || \"system\";\n}\n/** `actorId` plus, for an API-token request, `tokenId`. Spread into an event. */\nfunction actorOf(ctx) {\n\tconst actorId = actorFrom(ctx);\n\treturn ctx.apiScope ? {\n\t\tactorId,\n\t\ttokenId: ctx.apiScope.tokenId\n\t} : { actorId };\n}\n/** Discards every event. Used when `SelvaConfig.events` is omitted. */\nvar NoopEventSink = class {\n\tasync emit(_event) {}\n};\n//#endregion\n//#region ../platform/src/config.ts\nfunction isFlagEnabled(config, flag) {\n\treturn Boolean(config.flags?.[flag]);\n}\n//#endregion\n//#region ../server/src/definitions/schema-extraction.ts\n/** Thin re-export of @selvajs/compute's unwrap, typed to `UISchema`. */\nfunction readSchemaResults(raw) {\n\treturn Ze(raw);\n}\n/** Thrown when compute is reachable but the definition yields no usable schema. */\nvar SchemaExtractionError = class extends Error {\n\tkind;\n\tconstructor(kind, message) {\n\t\tsuper(message);\n\t\tthis.kind = kind;\n\t\tthis.name = \"SchemaExtractionError\";\n\t}\n};\n/**\n* Rejects a schema whose keys are not camelCase by the time it reaches a consumer.\n*\n* Compute serializes the plugin's `UISchema` POCO, whose camelCase names live in\n* `[JsonProperty]` attributes. `Selva.gha` ILRepack-merges Newtonsoft, so those\n* attributes have type `Selva!Newtonsoft.Json.JsonPropertyAttribute`; a compute\n* server serializing with its OWN Newtonsoft does not recognize them, reads no\n* attributes, and falls back to raw CLR member names — `Inputs`, `Layout`.\n* Nothing throws on the wire: every consumer just reads `schema.inputs` as\n* undefined and renders a definition with no inputs.\n*\n* `postSchemaFormData` repairs that casing via `normalizeUISchemaCasing`, so a\n* schema fresh off the wire never trips this. It stays because schemas are also\n* PERSISTED: a row cached before the normalizer existed still holds PascalCase,\n* and it reaches consumers without passing through `postSchemaFormData` again.\n* A schema with no `inputs` in any casing lands here too. It is a backstop, not\n* the primary defense — which is why it names the missing key rather than telling\n* the operator to go update their compute server.\n*\n* Checked structurally rather than by plugin version, because the casing depends\n* on which assembly serialized the schema, not on any version number.\n*/\nfunction assertCamelCaseSchema(schema) {\n\tconst raw = schema;\n\tif (Array.isArray(raw.inputs)) return;\n\tconst pascalKeys = [\n\t\t\"Inputs\",\n\t\t\"Outputs\",\n\t\t\"Layout\",\n\t\t\"SchemaVersion\"\n\t].filter((k) => k in raw);\n\tif (pascalKeys.length > 0) throw new SchemaExtractionError(\"malformed\", `Schema keys are PascalCase (found ${pascalKeys.join(\", \")}), so every property name is wrong and the definition would render with no inputs. Compute serialized it with its own Newtonsoft instead of the one merged into Selva.gha. Fresh responses are normalized, so this is most likely a schema cached before that fix — re-save the definition version to re-extract it.`);\n\tthrow new SchemaExtractionError(\"malformed\", `Compute returned a schema with no 'inputs' array (got keys: ${Object.keys(raw).slice(0, 12).join(\", \")}).`);\n}\nfunction parseSemver(version) {\n\tconst m = /^(\\d+)\\.(\\d+)\\.(\\d+)$/.exec(version);\n\treturn m ? [\n\t\tNumber(m[1]),\n\t\tNumber(m[2]),\n\t\tNumber(m[3])\n\t] : null;\n}\n/**\n* Rejects a schema from a NEWER plugin than this app was built against — its\n* shape may contain constructs the renderer doesn't know. Older (or missing)\n* versions pass: the compute-side C# migrator always emits its own current\n* version, and an older shape only lacks optional additions.\n*/\nfunction assertSupportedSchemaVersion(schema) {\n\tconst version = schema.schemaVersion;\n\tif (!version) return;\n\tconst extracted = parseSemver(version);\n\tconst supported = parseSemver(UI_SCHEMA_VERSION);\n\tif (!extracted || !supported) return;\n\tif (extracted[0] > supported[0] || extracted[0] === supported[0] && (extracted[1] > supported[1] || extracted[1] === supported[1] && extracted[2] > supported[2])) throw new SchemaExtractionError(\"unsupported\", `This definition was authored with a newer Selva plugin (schema format ${version}); this server supports schema format ≤ ${UI_SCHEMA_VERSION}. Update the server, or re-save the definition with a matching plugin version.`);\n}\n/**\n* POSTs a multipart form to Rhino Compute's `/grasshopper/schema` endpoint (no\n* solve required). Throws 'unreachable' on a network failure or non-2xx. The\n* per-file `error` Compute reports on its 200-with-no-schemas case is left to\n* the caller — single-file and multi-file callers want different messages.\n*/\nasync function postSchemaFormData(formData, server) {\n\tconst schemaUrl = new URL(\"/grasshopper/schema\", server.serverUrl).toString();\n\tconst headers = {};\n\tif (server.apiKey) headers[\"RhinoComputeKey\"] = server.apiKey;\n\tlet response;\n\ttry {\n\t\tresponse = await fetch(schemaUrl, {\n\t\t\tmethod: \"POST\",\n\t\t\theaders,\n\t\t\tbody: formData\n\t\t});\n\t} catch (err) {\n\t\tthrow new SchemaExtractionError(\"unreachable\", `Compute server is unreachable: ${err instanceof Error ? err.message : String(err)}`);\n\t}\n\tif (!response.ok) throw new SchemaExtractionError(\"unreachable\", `Schema endpoint returned ${response.status}: ${response.statusText}`);\n\treturn readSchemaResults(await response.json()).map((result) => ({\n\t\t...result,\n\t\tschemas: result.schemas?.map((schema) => tt(schema))\n\t}));\n}\n/**\n* Throws `SchemaExtractionError` so callers can map to the right HTTP status:\n* 503 unreachable / 422 invalid or unsupported.\n*/\nasync function fetchSchemaFromCompute(definitionBytes, server) {\n\tconst formData = new FormData();\n\tconst blob = new Blob([new Uint8Array(definitionBytes)], { type: \"application/octet-stream\" });\n\tformData.append(\"file\", blob, \"definition.gh\");\n\tconst results = await postSchemaFormData(formData, server);\n\tconst schemas = results.flatMap((r) => r.schemas ?? []);\n\tif (schemas.length === 0) {\n\t\tconst diagnosis = results.map((r) => r.error).filter(Boolean);\n\t\tif (diagnosis.length > 0) throw new SchemaExtractionError(\"invalid\", diagnosis.join(\"\\n\"));\n\t\tthrow new SchemaExtractionError(\"invalid\", \"No schemas found in definition.\\n\\nIn Grasshopper, verify a Context Bake component with the output name \\\"Schema\\\" is present and wired to the solver.\");\n\t}\n\tassertSupportedSchemaVersion(schemas[0]);\n\tassertCamelCaseSchema(schemas[0]);\n\treturn schemas[0];\n}\n//#endregion\nexport { isFlagEnabled as a, actorOf as c, postSchemaFormData as i, assertCamelCaseSchema as n, NoopEventSink as o, fetchSchemaFromCompute as r, actorFrom as s, SchemaExtractionError as t };\n"],"names":[],"mappings":";;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,SAAS,CAAC,GAAG,EAAE;AACxB,CAAC,OAAO,GAAG,CAAC,MAAM,IAAI,QAAQ;AAC9B;AACA;AACA,SAAS,OAAO,CAAC,GAAG,EAAE;AACtB,CAAC,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC;AAC/B,CAAC,OAAO,GAAG,CAAC,QAAQ,GAAG;AACvB,EAAE,OAAO;AACT,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC;AACxB,EAAE,GAAG,EAAE,OAAO,EAAE;AAChB;AACA;AACG,IAAC,aAAa,GAAG,MAAM;AAC1B,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;AACrB;AACA;AACA;AACA,SAAS,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE;AACrC,CAAC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;AACrC;AACA;AACA;AACA;AACA,SAAS,iBAAiB,CAAC,GAAG,EAAE;AAChC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC;AACf;AACA;AACG,IAAC,qBAAqB,GAAG,cAAc,KAAK,CAAC;AAChD,CAAC,IAAI;AACL,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE;AAC5B,EAAE,KAAK,CAAC,OAAO,CAAC;AAChB,EAAE,IAAI,CAAC,IAAI,GAAG,IAAI;AAClB,EAAE,IAAI,CAAC,IAAI,GAAG,uBAAuB;AACrC,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,qBAAqB,CAAC,MAAM,EAAE;AACvC,CAAC,MAAM,GAAG,GAAG,MAAM;AACnB,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;AAChC,CAAC,MAAM,UAAU,GAAG;AACpB,EAAE,QAAQ;AACV,EAAE,SAAS;AACX,EAAE,QAAQ;AACV,EAAE;AACF,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;AAC1B,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,CAAC,kCAAkC,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,oTAAoT,CAAC,CAAC;AAC1b,CAAC,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,CAAC,4DAA4D,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;AAC1J;AACA,SAAS,WAAW,CAAC,OAAO,EAAE;AAC9B,CAAC,MAAM,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC;AAChD,CAAC,OAAO,CAAC,GAAG;AACZ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACd,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACd,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AACb,EAAE,GAAG,IAAI;AACT;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,4BAA4B,CAAC,MAAM,EAAE;AAC9C,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa;AACrC,CAAC,IAAI,CAAC,OAAO,EAAE;AACf,CAAC,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC;AACvC,CAAC,MAAM,SAAS,GAAG,WAAW,CAAC,iBAAiB,CAAC;AACjD,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE;AAC/B,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,qBAAqB,CAAC,aAAa,EAAE,CAAC,sEAAsE,EAAE,OAAO,CAAC,wCAAwC,EAAE,iBAAiB,CAAC,8EAA8E,CAAC,CAAC;AAChb;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE;AACpD,CAAC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;AAC9E,CAAC,MAAM,OAAO,GAAG,EAAE;AACnB,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC,MAAM;AAC9D,CAAC,IAAI,QAAQ;AACb,CAAC,IAAI;AACL,EAAE,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;AACpC,GAAG,MAAM,EAAE,MAAM;AACjB,GAAG,OAAO;AACV,GAAG,IAAI,EAAE;AACT,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,IAAI,qBAAqB,CAAC,aAAa,EAAE,CAAC,+BAA+B,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACtI,CAAC;AACD,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,IAAI,qBAAqB,CAAC,aAAa,EAAE,CAAC,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;AACxI,CAAC,OAAO,iBAAiB,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,MAAM;AAClE,EAAE,GAAG,MAAM;AACX,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,CAAC;AACrD,EAAE,CAAC,CAAC;AACJ;AACA;AACA;AACA;AACA;AACA,eAAe,sBAAsB,CAAC,eAAe,EAAE,MAAM,EAAE;AAC/D,CAAC,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE;AAChC,CAAC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;AAC/F,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC;AAC/C,CAAC,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC;AAC3D,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;AACxD,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE;AAC3B,EAAE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;AAC/D,EAAE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,IAAI,qBAAqB,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5F,EAAE,MAAM,IAAI,qBAAqB,CAAC,SAAS,EAAE,wJAAwJ,CAAC;AACtM,CAAC;AACD,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClC,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC;AAClB;;;;"}