@selvajs/selva 4.3.5 → 4.5.0

package/build/server/chunks/gauge-Az8B3w7C.js

@@ -1,87 +0,0 @@
-import { n as attr_class, T as escape_html, Q as ensure_array_like, m as attr, aA as spread_props } from './renderer-x4cX3Aau.js';
-import { p as page } from './index-CtiRmlms.js';
-import { I as Icon } from './Icon2-DbkwAOkZ.js';
-
-function SideNav($$renderer, $$props) {
-  $$renderer.component(($$renderer2) => {
-    let { items, eyebrow, header, footer, class: className = "" } = $$props;
-    function isActive(item) {
-      const path = page.url.pathname;
-      if (item.match === "prefix") return path.startsWith(item.href);
-      return path === item.href;
-    }
-    $$renderer2.push(`<aside${attr_class(`w-60 flex shrink-0 flex-col overflow-y-auto border-r border-border bg-background ${className}`)}>`);
-    if (eyebrow) {
-      $$renderer2.push("<!--[0-->");
-      $$renderer2.push(`<div class="px-4 pt-5 pb-3"><span class="text-xs font-medium tracking-wider text-muted-foreground uppercase">${escape_html(eyebrow)}</span></div>`);
-    } else {
-      $$renderer2.push("<!--[-1-->");
-    }
-    $$renderer2.push(`<!--]--> `);
-    if (header) {
-      $$renderer2.push("<!--[0-->");
-      $$renderer2.push(`<div class="px-3 pb-3">`);
-      header($$renderer2);
-      $$renderer2.push(`<!----></div>`);
-    } else {
-      $$renderer2.push("<!--[-1-->");
-    }
-    $$renderer2.push(`<!--]--> <nav class="pb-4 pr-2 flex-1 space-y-px"><!--[-->`);
-    const each_array = ensure_array_like(items);
-    for (let $$index = 0, $$length = each_array.length; $$index < $$length; $$index++) {
-      let item = each_array[$$index];
-      const active = isActive(item);
-      const Icon2 = item.icon;
-      $$renderer2.push(`<a${attr("href", item.href)}${attr_class(`group gap-2 py-1.5 pr-2.5 relative flex w-full items-center text-left transition-colors ${active ? "pl-4 rounded-r-md bg-accent text-accent-foreground" : "mx-2 pl-2.5 rounded-md text-muted-foreground hover:bg-muted/60 hover:text-foreground"}`)}>`);
-      if (active) {
-        $$renderer2.push("<!--[0-->");
-        $$renderer2.push(`<span class="left-0 top-0 bottom-0 w-0.75 absolute bg-primary" aria-hidden="true"></span>`);
-      } else {
-        $$renderer2.push("<!--[-1-->");
-      }
-      $$renderer2.push(`<!--]--> `);
-      if (Icon2) {
-        $$renderer2.push("<!--[0-->");
-        if (Icon2) {
-          $$renderer2.push("<!--[-->");
-          Icon2($$renderer2, { class: "h-3.5 w-3.5 shrink-0 opacity-70" });
-          $$renderer2.push("<!--]-->");
-        } else {
-          $$renderer2.push("<!--[!-->");
-          $$renderer2.push("<!--]-->");
-        }
-      } else {
-        $$renderer2.push("<!--[-1-->");
-      }
-      $$renderer2.push(`<!--]--> <span class="text-sm font-medium flex-1 truncate">${escape_html(item.label)}</span> `);
-      if (item.badge !== void 0) {
-        $$renderer2.push("<!--[0-->");
-        $$renderer2.push(`<span class="font-mono shrink-0 text-[11px] tabular-nums opacity-60">${escape_html(item.badge)}</span>`);
-      } else {
-        $$renderer2.push("<!--[-1-->");
-      }
-      $$renderer2.push(`<!--]--></a>`);
-    }
-    $$renderer2.push(`<!--]--></nav> `);
-    if (footer) {
-      $$renderer2.push("<!--[0-->");
-      $$renderer2.push(`<div class="px-3 py-3 border-t border-border/60">`);
-      footer($$renderer2);
-      $$renderer2.push(`<!----></div>`);
-    } else {
-      $$renderer2.push("<!--[-1-->");
-    }
-    $$renderer2.push(`<!--]--></aside>`);
-  });
-}
-function Gauge($$renderer, $$props) {
-  let { $$slots, $$events, ...props } = $$props;
-  const iconNode = [
-    ["path", { "d": "m12 14 4-4" }],
-    ["path", { "d": "M3.34 19a10 10 0 1 1 17.32 0" }]
-  ];
-  Icon($$renderer, spread_props([{ name: "gauge" }, props, { iconNode }]));
-}
-
-export { Gauge as G, SideNav as S };
-//# sourceMappingURL=gauge-Az8B3w7C.js.map

package/build/server/chunks/gauge-Az8B3w7C.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gauge-Az8B3w7C.js","sources":["../../../.svelte-kit/adapter-node/chunks/gauge.js"],"sourcesContent":["import { k as attr_class, I as escape_html, G as ensure_array_like, j as attr, aj as spread_props } from \"./renderer.js\";\nimport { p as page } from \"./index.js\";\nimport { I as Icon } from \"./Icon2.js\";\nfunction SideNav($$renderer, $$props) {\n  $$renderer.component(($$renderer2) => {\n    let { items, eyebrow, header, footer, class: className = \"\" } = $$props;\n    function isActive(item) {\n      const path = page.url.pathname;\n      if (item.match === \"prefix\") return path.startsWith(item.href);\n      return path === item.href;\n    }\n    $$renderer2.push(`<aside${attr_class(`w-60 flex shrink-0 flex-col overflow-y-auto border-r border-border bg-background ${className}`)}>`);\n    if (eyebrow) {\n      $$renderer2.push(\"<!--[0-->\");\n      $$renderer2.push(`<div class=\"px-4 pt-5 pb-3\"><span class=\"text-xs font-medium tracking-wider text-muted-foreground uppercase\">${escape_html(eyebrow)}</span></div>`);\n    } else {\n      $$renderer2.push(\"<!--[-1-->\");\n    }\n    $$renderer2.push(`<!--]--> `);\n    if (header) {\n      $$renderer2.push(\"<!--[0-->\");\n      $$renderer2.push(`<div class=\"px-3 pb-3\">`);\n      header($$renderer2);\n      $$renderer2.push(`<!----></div>`);\n    } else {\n      $$renderer2.push(\"<!--[-1-->\");\n    }\n    $$renderer2.push(`<!--]--> <nav class=\"pb-4 pr-2 flex-1 space-y-px\"><!--[-->`);\n    const each_array = ensure_array_like(items);\n    for (let $$index = 0, $$length = each_array.length; $$index < $$length; $$index++) {\n      let item = each_array[$$index];\n      const active = isActive(item);\n      const Icon2 = item.icon;\n      $$renderer2.push(`<a${attr(\"href\", item.href)}${attr_class(`group gap-2 py-1.5 pr-2.5 relative flex w-full items-center text-left transition-colors ${active ? \"pl-4 rounded-r-md bg-accent text-accent-foreground\" : \"mx-2 pl-2.5 rounded-md text-muted-foreground hover:bg-muted/60 hover:text-foreground\"}`)}>`);\n      if (active) {\n        $$renderer2.push(\"<!--[0-->\");\n        $$renderer2.push(`<span class=\"left-0 top-0 bottom-0 w-0.75 absolute bg-primary\" aria-hidden=\"true\"></span>`);\n      } else {\n        $$renderer2.push(\"<!--[-1-->\");\n      }\n      $$renderer2.push(`<!--]--> `);\n      if (Icon2) {\n        $$renderer2.push(\"<!--[0-->\");\n        if (Icon2) {\n          $$renderer2.push(\"<!--[-->\");\n          Icon2($$renderer2, { class: \"h-3.5 w-3.5 shrink-0 opacity-70\" });\n          $$renderer2.push(\"<!--]-->\");\n        } else {\n          $$renderer2.push(\"<!--[!-->\");\n          $$renderer2.push(\"<!--]-->\");\n        }\n      } else {\n        $$renderer2.push(\"<!--[-1-->\");\n      }\n      $$renderer2.push(`<!--]--> <span class=\"text-sm font-medium flex-1 truncate\">${escape_html(item.label)}</span> `);\n      if (item.badge !== void 0) {\n        $$renderer2.push(\"<!--[0-->\");\n        $$renderer2.push(`<span class=\"font-mono shrink-0 text-[11px] tabular-nums opacity-60\">${escape_html(item.badge)}</span>`);\n      } else {\n        $$renderer2.push(\"<!--[-1-->\");\n      }\n      $$renderer2.push(`<!--]--></a>`);\n    }\n    $$renderer2.push(`<!--]--></nav> `);\n    if (footer) {\n      $$renderer2.push(\"<!--[0-->\");\n      $$renderer2.push(`<div class=\"px-3 py-3 border-t border-border/60\">`);\n      footer($$renderer2);\n      $$renderer2.push(`<!----></div>`);\n    } else {\n      $$renderer2.push(\"<!--[-1-->\");\n    }\n    $$renderer2.push(`<!--]--></aside>`);\n  });\n}\nfunction Gauge($$renderer, $$props) {\n  let { $$slots, $$events, ...props } = $$props;\n  const iconNode = [\n    [\"path\", { \"d\": \"m12 14 4-4\" }],\n    [\"path\", { \"d\": \"M3.34 19a10 10 0 1 1 17.32 0\" }]\n  ];\n  Icon($$renderer, spread_props([{ name: \"gauge\" }, props, { iconNode }]));\n}\nexport {\n  Gauge as G,\n  SideNav as S\n};\n"],"names":[],"mappings":";;;;AAGA,SAAS,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE;AACtC,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,WAAW,KAAK;AACxC,IAAI,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,EAAE,EAAE,GAAG,OAAO;AAC3E,IAAI,SAAS,QAAQ,CAAC,IAAI,EAAE;AAC5B,MAAM,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ;AACpC,MAAM,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;AACpE,MAAM,OAAO,IAAI,KAAK,IAAI,CAAC,IAAI;AAC/B,IAAI;AACJ,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,iFAAiF,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7I,IAAI,IAAI,OAAO,EAAE;AACjB,MAAM,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC;AACnC,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,6GAA6G,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC;AAC3K,IAAI,CAAC,MAAM;AACX,MAAM,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC;AACpC,IAAI;AACJ,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AACjC,IAAI,IAAI,MAAM,EAAE;AAChB,MAAM,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC;AACnC,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,uBAAuB,CAAC,CAAC;AACjD,MAAM,MAAM,CAAC,WAAW,CAAC;AACzB,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;AACvC,IAAI,CAAC,MAAM;AACX,MAAM,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC;AACpC,IAAI;AACJ,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,0DAA0D,CAAC,CAAC;AAClF,IAAI,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC;AAC/C,IAAI,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,EAAE;AACvF,MAAM,IAAI,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC;AACpC,MAAM,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC;AACnC,MAAM,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI;AAC7B,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,wFAAwF,EAAE,MAAM,GAAG,oDAAoD,GAAG,sFAAsF,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACzT,MAAM,IAAI,MAAM,EAAE;AAClB,QAAQ,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC;AACrC,QAAQ,WAAW,CAAC,IAAI,CAAC,CAAC,yFAAyF,CAAC,CAAC;AACrH,MAAM,CAAC,MAAM;AACb,QAAQ,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC;AACtC,MAAM;AACN,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AACnC,MAAM,IAAI,KAAK,EAAE;AACjB,QAAQ,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC;AACrC,QAAQ,IAAI,KAAK,EAAE;AACnB,UAAU,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC;AACtC,UAAU,KAAK,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;AAC1E,UAAU,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC;AACtC,QAAQ,CAAC,MAAM;AACf,UAAU,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC;AACvC,UAAU,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC;AACtC,QAAQ;AACR,MAAM,CAAC,MAAM;AACb,QAAQ,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC;AACtC,MAAM;AACN,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,2DAA2D,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;AACvH,MAAM,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE;AACjC,QAAQ,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC;AACrC,QAAQ,WAAW,CAAC,IAAI,CAAC,CAAC,qEAAqE,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;AAClI,MAAM,CAAC,MAAM;AACb,QAAQ,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC;AACtC,MAAM;AACN,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC;AACtC,IAAI;AACJ,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC;AACvC,IAAI,IAAI,MAAM,EAAE;AAChB,MAAM,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC;AACnC,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,iDAAiD,CAAC,CAAC;AAC3E,MAAM,MAAM,CAAC,WAAW,CAAC;AACzB,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;AACvC,IAAI,CAAC,MAAM;AACX,MAAM,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC;AACpC,IAAI;AACJ,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC,CAAC;AACxC,EAAE,CAAC,CAAC;AACJ;AACA,SAAS,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE;AACpC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,GAAG,OAAO;AAC/C,EAAE,MAAM,QAAQ,GAAG;AACnB,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;AACnC,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,8BAA8B,EAAE;AACpD,GAAG;AACH,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;AAC1E;;;;"}

package/build/server/chunks/hooks.server-CwDixHQc.js

@@ -1,218 +0,0 @@
-import { redirect, isHttpError } from '@sveltejs/kit';
-import { S as SYSTEM_CONTEXT } from './context-DKDYb-He.js';
-import { t as providers } from './providers.server-wGknM6CR.js';
-import { g as getBootHealth } from './bootHealth.server-CLLVkbZZ.js';
-import { w as wireHeaderAuthBootstrap, b as bootstrapUserSession } from './auth-bootstrap.server-zvPqZ6kt.js';
-import { g as getRefreshToken, h as setSessionCookie, f as setRefreshCookie, b as clearRefreshCookie } from './admin-auth.server-45kKyH82.js';
-import 'zod';
-import './shared-server-C3WdcJCQ.js';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:crypto';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import './slug-BGuFQjqe.js';
-
-function emptyProfile(userId) {
-  return { userId, starredDefinitions: [], recentRuns: [] };
-}
-let headerAuthBootstrapWired = false;
-let bootHealthKicked = false;
-let proxyAuthLoginMissWarned = false;
-let firstRunResolved = false;
-async function isFirstRun() {
-  if (firstRunResolved) return false;
-  const usersPage = await providers.auth.listUsers({ limit: 1 });
-  if (usersPage === null) {
-    firstRunResolved = true;
-    return false;
-  }
-  if (usersPage.items.length === 0) return true;
-  firstRunResolved = true;
-  return false;
-}
-async function buildContext(user, sessionToken) {
-  let actingOrgId;
-  let orgPermissions = [];
-  const platformPermissions = await providers.data.permissions.getFor(SYSTEM_CONTEXT, user.id);
-  const membership = await providers.data.orgs.findUserMembership(SYSTEM_CONTEXT, user.id);
-  if (membership) {
-    actingOrgId = membership.org.id;
-    orgPermissions = membership.member.permissions;
-  }
-  if (!actingOrgId && platformPermissions.includes("instance_admin")) {
-    const firstOrgPage = await providers.data.orgs.listOrgs(SYSTEM_CONTEXT, { limit: 1 });
-    const firstOrg = firstOrgPage.items[0];
-    if (firstOrg) actingOrgId = firstOrg.id;
-  }
-  return {
-    userId: user.id,
-    actingOrgId,
-    platformPermissions,
-    orgPermissions,
-    adapterContext: sessionToken ? { sessionToken } : void 0
-  };
-}
-const PUBLIC_PAGE_ROUTES = /* @__PURE__ */ new Set([
-  "/",
-  // landing — guests see it; authed users get redirected by +page.server.ts
-  "/login",
-  "/setup",
-  "/accept-invite"
-]);
-const PUBLIC_PATH_PREFIXES = ["/auth/", "/logout"];
-const PUBLIC_API_ROUTES = /* @__PURE__ */ new Set(["/api/health"]);
-const STATIC_ASSET_PREFIXES = ["/_app/", "/favicon/"];
-const STATIC_ASSET_PATHS = /* @__PURE__ */ new Set(["/favicon.svg", "/robots.txt"]);
-function isStaticAsset(pathname) {
-  if (STATIC_ASSET_PATHS.has(pathname)) return true;
-  return STATIC_ASSET_PREFIXES.some((p) => pathname.startsWith(p));
-}
-function isPublicRoute(pathname) {
-  if (PUBLIC_PAGE_ROUTES.has(pathname)) return true;
-  if (PUBLIC_API_ROUTES.has(pathname)) return true;
-  return PUBLIC_PATH_PREFIXES.some((p) => pathname.startsWith(p));
-}
-const handle = async ({ event, resolve }) => {
-  event.locals.providers = providers;
-  if (!headerAuthBootstrapWired) {
-    wireHeaderAuthBootstrap();
-    headerAuthBootstrapWired = true;
-  }
-  if (!bootHealthKicked) {
-    bootHealthKicked = true;
-    void getBootHealth();
-  }
-  const { pathname } = event.url;
-  if (isStaticAsset(pathname)) {
-    return applySecurityHeaders(await resolve(event), pathname);
-  }
-  if (pathname === "/api/health") {
-    return applySecurityHeaders(await resolve(event), pathname);
-  }
-  const publicRoute = isPublicRoute(pathname);
-  const isJsonApiRoute = pathname.startsWith("/api/") || pathname.startsWith("/admin/api/");
-  if (!publicRoute) {
-    if (await isFirstRun()) {
-      if (isJsonApiRoute) {
-        return applySecurityHeaders(
-          new Response(JSON.stringify({ error: "Setup required" }), {
-            status: 503,
-            headers: { "Content-Type": "application/json" }
-          }),
-          pathname
-        );
-      }
-      redirect(303, "/setup");
-    }
-  }
-  const needsAuth = !publicRoute;
-  if (needsAuth) {
-    let token = event.cookies.get("admin_session") ?? "";
-    let user = await providers.auth.verifyToken(token);
-    if (!user) {
-      const refreshToken = getRefreshToken(event.cookies);
-      const oauth = providers.auth.oauth;
-      if (refreshToken && oauth) {
-        const refreshed = await oauth.refreshSession(refreshToken);
-        if (refreshed) {
-          setSessionCookie(event.cookies, refreshed.sessionToken);
-          setRefreshCookie(event.cookies, refreshed.refreshToken);
-          token = refreshed.sessionToken;
-          user = await providers.auth.verifyToken(token);
-        } else {
-          clearRefreshCookie(event.cookies);
-        }
-      }
-    }
-    if (!user && providers.auth.proxyAuth) {
-      user = await providers.auth.proxyAuth.identifyFromHeaders(event.request.headers);
-      if (user) await bootstrapUserSession(user);
-    }
-    if (!user) {
-      if (isJsonApiRoute) {
-        return applySecurityHeaders(
-          new Response(JSON.stringify({ error: "Unauthorized" }), {
-            status: 401,
-            headers: { "Content-Type": "application/json" }
-          }),
-          pathname
-        );
-      }
-      redirect(303, `/login?redirectTo=${encodeURIComponent(pathname)}`);
-    }
-    await providers.data.ensureUser(SYSTEM_CONTEXT, user.id);
-    event.locals.user = user;
-    event.locals.profile = await providers.data.userProfile.getProfile(SYSTEM_CONTEXT, user.id) ?? emptyProfile(user.id);
-    event.locals.ctx = await buildContext(user, token);
-  } else {
-    const isPublicPage = PUBLIC_PAGE_ROUTES.has(pathname);
-    const token = isPublicPage ? event.cookies.get("admin_session") ?? "" : "";
-    let user = token ? await providers.auth.verifyToken(token) : null;
-    if (!user && isPublicPage && providers.auth.proxyAuth) {
-      user = await providers.auth.proxyAuth.identifyFromHeaders(event.request.headers);
-      if (!user && pathname === "/login" && !proxyAuthLoginMissWarned) {
-        proxyAuthLoginMissWarned = true;
-        const proxyAuth = providers.auth.proxyAuth;
-        const noHeaders = proxyAuth.hasNoIdentityHeaders(event.request.headers);
-        const configured = proxyAuth.configuredHeaderNames.join(", ");
-        if (noHeaders) {
-          console.warn(
-            `[HeaderAuth] /login was hit and NONE of the configured identity headers (${configured}) arrived on the request. The forward-auth proxy is not reaching this process, or it is not forwarding the configured headers. See the @selvajs/header-auth-provider README "Verification" section.`
-          );
-        } else {
-          console.warn(
-            `[HeaderAuth] /login was hit but the UPN header was missing or the user is not allowlisted. Configured headers: ${configured}. Some headers arrived but identification still failed — check that the UPN header is populated and that the user has been added to header-allowlist.json.`
-          );
-        }
-      }
-    }
-    if (user) {
-      await providers.data.ensureUser(SYSTEM_CONTEXT, user.id);
-      event.locals.user = user;
-      event.locals.profile = await providers.data.userProfile.getProfile(SYSTEM_CONTEXT, user.id) ?? emptyProfile(user.id);
-      event.locals.ctx = await buildContext(user, token);
-    }
-  }
-  return applySecurityHeaders(await resolve(event), pathname);
-};
-function applySecurityHeaders(response, pathname) {
-  response.headers.set("X-Content-Type-Options", "nosniff");
-  response.headers.set("Referrer-Policy", "strict-origin-when-cross-origin");
-  response.headers.set(
-    "Permissions-Policy",
-    "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()"
-  );
-  if (process.env.NODE_ENV === "production") {
-    response.headers.set("Strict-Transport-Security", "max-age=31536000; includeSubDomains");
-  }
-  if (pathname.startsWith("/_app/")) {
-    response.headers.set("Cache-Control", "public, max-age=31536000, immutable");
-  } else if (pathname.startsWith("/favicon/") || pathname === "/favicon.svg" || pathname === "/robots.txt") {
-    response.headers.set("Cache-Control", "public, max-age=604800");
-  }
-  return response;
-}
-const handleError = ({
-  error,
-  status,
-  event
-}) => {
-  if (isHttpError(error)) {
-    return { message: error.body.message };
-  }
-  if (status === 404) {
-    return { message: "Page not found." };
-  }
-  const cause = error instanceof Error && error.cause ? `
-  caused by: ${error.cause}` : "";
-  console.error(
-    `[Unhandled error] ${event.request.method} ${event.url.pathname}
-  ${error}${cause}`
-  );
-  return { message: "An unexpected error occurred." };
-};
-
-export { handle, handleError, isPublicRoute, isStaticAsset };
-//# sourceMappingURL=hooks.server-CwDixHQc.js.map

package/build/server/chunks/hooks.server-CwDixHQc.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hooks.server-CwDixHQc.js","sources":["../../../.svelte-kit/adapter-node/entries/hooks.server.js"],"sourcesContent":["import { redirect, isHttpError } from \"@sveltejs/kit\";\nimport { S as SYSTEM_CONTEXT } from \"../chunks/context.js\";\nimport { t as providers } from \"../chunks/providers.server.js\";\nimport { g as getBootHealth } from \"../chunks/bootHealth.server.js\";\nimport { w as wireHeaderAuthBootstrap, b as bootstrapUserSession } from \"../chunks/auth-bootstrap.server.js\";\nimport { g as getRefreshToken, h as setSessionCookie, f as setRefreshCookie, b as clearRefreshCookie } from \"../chunks/admin-auth.server.js\";\nfunction emptyProfile(userId) {\n  return { userId, starredDefinitions: [], recentRuns: [] };\n}\nlet headerAuthBootstrapWired = false;\nlet bootHealthKicked = false;\nlet proxyAuthLoginMissWarned = false;\nlet firstRunResolved = false;\nasync function isFirstRun() {\n  if (firstRunResolved) return false;\n  const usersPage = await providers.auth.listUsers({ limit: 1 });\n  if (usersPage === null) {\n    firstRunResolved = true;\n    return false;\n  }\n  if (usersPage.items.length === 0) return true;\n  firstRunResolved = true;\n  return false;\n}\nasync function buildContext(user, sessionToken) {\n  let actingOrgId;\n  let orgPermissions = [];\n  const platformPermissions = await providers.data.permissions.getFor(SYSTEM_CONTEXT, user.id);\n  const membership = await providers.data.orgs.findUserMembership(SYSTEM_CONTEXT, user.id);\n  if (membership) {\n    actingOrgId = membership.org.id;\n    orgPermissions = membership.member.permissions;\n  }\n  if (!actingOrgId && platformPermissions.includes(\"instance_admin\")) {\n    const firstOrgPage = await providers.data.orgs.listOrgs(SYSTEM_CONTEXT, { limit: 1 });\n    const firstOrg = firstOrgPage.items[0];\n    if (firstOrg) actingOrgId = firstOrg.id;\n  }\n  return {\n    userId: user.id,\n    actingOrgId,\n    platformPermissions,\n    orgPermissions,\n    adapterContext: sessionToken ? { sessionToken } : void 0\n  };\n}\nconst PUBLIC_PAGE_ROUTES = /* @__PURE__ */ new Set([\n  \"/\",\n  // landing — guests see it; authed users get redirected by +page.server.ts\n  \"/login\",\n  \"/setup\",\n  \"/accept-invite\"\n]);\nconst PUBLIC_PATH_PREFIXES = [\"/auth/\", \"/logout\"];\nconst PUBLIC_API_ROUTES = /* @__PURE__ */ new Set([\"/api/health\"]);\nconst STATIC_ASSET_PREFIXES = [\"/_app/\", \"/favicon/\"];\nconst STATIC_ASSET_PATHS = /* @__PURE__ */ new Set([\"/favicon.svg\", \"/robots.txt\"]);\nfunction isStaticAsset(pathname) {\n  if (STATIC_ASSET_PATHS.has(pathname)) return true;\n  return STATIC_ASSET_PREFIXES.some((p) => pathname.startsWith(p));\n}\nfunction isPublicRoute(pathname) {\n  if (PUBLIC_PAGE_ROUTES.has(pathname)) return true;\n  if (PUBLIC_API_ROUTES.has(pathname)) return true;\n  return PUBLIC_PATH_PREFIXES.some((p) => pathname.startsWith(p));\n}\nconst handle = async ({ event, resolve }) => {\n  event.locals.providers = providers;\n  if (!headerAuthBootstrapWired) {\n    wireHeaderAuthBootstrap();\n    headerAuthBootstrapWired = true;\n  }\n  if (!bootHealthKicked) {\n    bootHealthKicked = true;\n    void getBootHealth();\n  }\n  const { pathname } = event.url;\n  if (isStaticAsset(pathname)) {\n    return applySecurityHeaders(await resolve(event), pathname);\n  }\n  if (pathname === \"/api/health\") {\n    return applySecurityHeaders(await resolve(event), pathname);\n  }\n  const publicRoute = isPublicRoute(pathname);\n  const isJsonApiRoute = pathname.startsWith(\"/api/\") || pathname.startsWith(\"/admin/api/\");\n  if (!publicRoute) {\n    if (await isFirstRun()) {\n      if (isJsonApiRoute) {\n        return applySecurityHeaders(\n          new Response(JSON.stringify({ error: \"Setup required\" }), {\n            status: 503,\n            headers: { \"Content-Type\": \"application/json\" }\n          }),\n          pathname\n        );\n      }\n      redirect(303, \"/setup\");\n    }\n  }\n  const needsAuth = !publicRoute;\n  if (needsAuth) {\n    let token = event.cookies.get(\"admin_session\") ?? \"\";\n    let user = await providers.auth.verifyToken(token);\n    if (!user) {\n      const refreshToken = getRefreshToken(event.cookies);\n      const oauth = providers.auth.oauth;\n      if (refreshToken && oauth) {\n        const refreshed = await oauth.refreshSession(refreshToken);\n        if (refreshed) {\n          setSessionCookie(event.cookies, refreshed.sessionToken);\n          setRefreshCookie(event.cookies, refreshed.refreshToken);\n          token = refreshed.sessionToken;\n          user = await providers.auth.verifyToken(token);\n        } else {\n          clearRefreshCookie(event.cookies);\n        }\n      }\n    }\n    if (!user && providers.auth.proxyAuth) {\n      user = await providers.auth.proxyAuth.identifyFromHeaders(event.request.headers);\n      if (user) await bootstrapUserSession(user);\n    }\n    if (!user) {\n      if (isJsonApiRoute) {\n        return applySecurityHeaders(\n          new Response(JSON.stringify({ error: \"Unauthorized\" }), {\n            status: 401,\n            headers: { \"Content-Type\": \"application/json\" }\n          }),\n          pathname\n        );\n      }\n      redirect(303, `/login?redirectTo=${encodeURIComponent(pathname)}`);\n    }\n    await providers.data.ensureUser(SYSTEM_CONTEXT, user.id);\n    event.locals.user = user;\n    event.locals.profile = await providers.data.userProfile.getProfile(SYSTEM_CONTEXT, user.id) ?? emptyProfile(user.id);\n    event.locals.ctx = await buildContext(user, token);\n  } else {\n    const isPublicPage = PUBLIC_PAGE_ROUTES.has(pathname);\n    const token = isPublicPage ? event.cookies.get(\"admin_session\") ?? \"\" : \"\";\n    let user = token ? await providers.auth.verifyToken(token) : null;\n    if (!user && isPublicPage && providers.auth.proxyAuth) {\n      user = await providers.auth.proxyAuth.identifyFromHeaders(event.request.headers);\n      if (!user && pathname === \"/login\" && !proxyAuthLoginMissWarned) {\n        proxyAuthLoginMissWarned = true;\n        const proxyAuth = providers.auth.proxyAuth;\n        const noHeaders = proxyAuth.hasNoIdentityHeaders(event.request.headers);\n        const configured = proxyAuth.configuredHeaderNames.join(\", \");\n        if (noHeaders) {\n          console.warn(\n            `[HeaderAuth] /login was hit and NONE of the configured identity headers (${configured}) arrived on the request. The forward-auth proxy is not reaching this process, or it is not forwarding the configured headers. See the @selvajs/header-auth-provider README \"Verification\" section.`\n          );\n        } else {\n          console.warn(\n            `[HeaderAuth] /login was hit but the UPN header was missing or the user is not allowlisted. Configured headers: ${configured}. Some headers arrived but identification still failed — check that the UPN header is populated and that the user has been added to header-allowlist.json.`\n          );\n        }\n      }\n    }\n    if (user) {\n      await providers.data.ensureUser(SYSTEM_CONTEXT, user.id);\n      event.locals.user = user;\n      event.locals.profile = await providers.data.userProfile.getProfile(SYSTEM_CONTEXT, user.id) ?? emptyProfile(user.id);\n      event.locals.ctx = await buildContext(user, token);\n    }\n  }\n  return applySecurityHeaders(await resolve(event), pathname);\n};\nfunction applySecurityHeaders(response, pathname) {\n  response.headers.set(\"X-Content-Type-Options\", \"nosniff\");\n  response.headers.set(\"Referrer-Policy\", \"strict-origin-when-cross-origin\");\n  response.headers.set(\n    \"Permissions-Policy\",\n    \"accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\"\n  );\n  if (process.env.NODE_ENV === \"production\") {\n    response.headers.set(\"Strict-Transport-Security\", \"max-age=31536000; includeSubDomains\");\n  }\n  if (pathname.startsWith(\"/_app/\")) {\n    response.headers.set(\"Cache-Control\", \"public, max-age=31536000, immutable\");\n  } else if (pathname.startsWith(\"/favicon/\") || pathname === \"/favicon.svg\" || pathname === \"/robots.txt\") {\n    response.headers.set(\"Cache-Control\", \"public, max-age=604800\");\n  }\n  return response;\n}\nconst handleError = ({\n  error,\n  status,\n  event\n}) => {\n  if (isHttpError(error)) {\n    return { message: error.body.message };\n  }\n  if (status === 404) {\n    return { message: \"Page not found.\" };\n  }\n  const cause = error instanceof Error && error.cause ? `\n  caused by: ${error.cause}` : \"\";\n  console.error(\n    `[Unhandled error] ${event.request.method} ${event.url.pathname}\n  ${error}${cause}`\n  );\n  return { message: \"An unexpected error occurred.\" };\n};\nexport {\n  handle,\n  handleError,\n  isPublicRoute,\n  isStaticAsset\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAMA,SAAS,YAAY,CAAC,MAAM,EAAE;AAC9B,EAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;AAC3D;AACA,IAAI,wBAAwB,GAAG,KAAK;AACpC,IAAI,gBAAgB,GAAG,KAAK;AAC5B,IAAI,wBAAwB,GAAG,KAAK;AACpC,IAAI,gBAAgB,GAAG,KAAK;AAC5B,eAAe,UAAU,GAAG;AAC5B,EAAE,IAAI,gBAAgB,EAAE,OAAO,KAAK;AACpC,EAAE,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAChE,EAAE,IAAI,SAAS,KAAK,IAAI,EAAE;AAC1B,IAAI,gBAAgB,GAAG,IAAI;AAC3B,IAAI,OAAO,KAAK;AAChB,EAAE;AACF,EAAE,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,IAAI;AAC/C,EAAE,gBAAgB,GAAG,IAAI;AACzB,EAAE,OAAO,KAAK;AACd;AACA,eAAe,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE;AAChD,EAAE,IAAI,WAAW;AACjB,EAAE,IAAI,cAAc,GAAG,EAAE;AACzB,EAAE,MAAM,mBAAmB,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;AAC9F,EAAE,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;AAC1F,EAAE,IAAI,UAAU,EAAE;AAClB,IAAI,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE;AACnC,IAAI,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,WAAW;AAClD,EAAE;AACF,EAAE,IAAI,CAAC,WAAW,IAAI,mBAAmB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE;AACtE,IAAI,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AACzF,IAAI,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1C,IAAI,IAAI,QAAQ,EAAE,WAAW,GAAG,QAAQ,CAAC,EAAE;AAC3C,EAAE;AACF,EAAE,OAAO;AACT,IAAI,MAAM,EAAE,IAAI,CAAC,EAAE;AACnB,IAAI,WAAW;AACf,IAAI,mBAAmB;AACvB,IAAI,cAAc;AAClB,IAAI,cAAc,EAAE,YAAY,GAAG,EAAE,YAAY,EAAE,GAAG;AACtD,GAAG;AACH;AACA,MAAM,kBAAkB,mBAAmB,IAAI,GAAG,CAAC;AACnD,EAAE,GAAG;AACL;AACA,EAAE,QAAQ;AACV,EAAE,QAAQ;AACV,EAAE;AACF,CAAC,CAAC;AACF,MAAM,oBAAoB,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC;AAClD,MAAM,iBAAiB,mBAAmB,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC;AAClE,MAAM,qBAAqB,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC;AACrD,MAAM,kBAAkB,mBAAmB,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;AACnF,SAAS,aAAa,CAAC,QAAQ,EAAE;AACjC,EAAE,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,OAAO,IAAI;AACnD,EAAE,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AAClE;AACA,SAAS,aAAa,CAAC,QAAQ,EAAE;AACjC,EAAE,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,OAAO,IAAI;AACnD,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,OAAO,IAAI;AAClD,EAAE,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AACjE;AACK,MAAC,MAAM,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK;AAC7C,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG,SAAS;AACpC,EAAE,IAAI,CAAC,wBAAwB,EAAE;AACjC,IAAI,uBAAuB,EAAE;AAC7B,IAAI,wBAAwB,GAAG,IAAI;AACnC,EAAE;AACF,EAAE,IAAI,CAAC,gBAAgB,EAAE;AACzB,IAAI,gBAAgB,GAAG,IAAI;AAC3B,IAAI,KAAK,aAAa,EAAE;AACxB,EAAE;AACF,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,GAAG;AAChC,EAAE,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE;AAC/B,IAAI,OAAO,oBAAoB,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;AAC/D,EAAE;AACF,EAAE,IAAI,QAAQ,KAAK,aAAa,EAAE;AAClC,IAAI,OAAO,oBAAoB,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;AAC/D,EAAE;AACF,EAAE,MAAM,WAAW,GAAG,aAAa,CAAC,QAAQ,CAAC;AAC7C,EAAE,MAAM,cAAc,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC;AAC3F,EAAE,IAAI,CAAC,WAAW,EAAE;AACpB,IAAI,IAAI,MAAM,UAAU,EAAE,EAAE;AAC5B,MAAM,IAAI,cAAc,EAAE;AAC1B,QAAQ,OAAO,oBAAoB;AACnC,UAAU,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAAE;AACpE,YAAY,MAAM,EAAE,GAAG;AACvB,YAAY,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB;AACzD,WAAW,CAAC;AACZ,UAAU;AACV,SAAS;AACT,MAAM;AACN,MAAM,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;AAC7B,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,SAAS,GAAG,CAAC,WAAW;AAChC,EAAE,IAAI,SAAS,EAAE;AACjB,IAAI,IAAI,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE;AACxD,IAAI,IAAI,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;AACtD,IAAI,IAAI,CAAC,IAAI,EAAE;AACf,MAAM,MAAM,YAAY,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC;AACzD,MAAM,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK;AACxC,MAAM,IAAI,YAAY,IAAI,KAAK,EAAE;AACjC,QAAQ,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,YAAY,CAAC;AAClE,QAAQ,IAAI,SAAS,EAAE;AACvB,UAAU,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,YAAY,CAAC;AACjE,UAAU,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,YAAY,CAAC;AACjE,UAAU,KAAK,GAAG,SAAS,CAAC,YAAY;AACxC,UAAU,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;AACxD,QAAQ,CAAC,MAAM;AACf,UAAU,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC;AAC3C,QAAQ;AACR,MAAM;AACN,IAAI;AACJ,IAAI,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE;AAC3C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;AACtF,MAAM,IAAI,IAAI,EAAE,MAAM,oBAAoB,CAAC,IAAI,CAAC;AAChD,IAAI;AACJ,IAAI,IAAI,CAAC,IAAI,EAAE;AACf,MAAM,IAAI,cAAc,EAAE;AAC1B,QAAQ,OAAO,oBAAoB;AACnC,UAAU,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE;AAClE,YAAY,MAAM,EAAE,GAAG;AACvB,YAAY,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB;AACzD,WAAW,CAAC;AACZ,UAAU;AACV,SAAS;AACT,MAAM;AACN,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACxE,IAAI;AACJ,IAAI,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;AAC5D,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI;AAC5B,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;AACxH,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC;AACtD,EAAE,CAAC,MAAM;AACT,IAAI,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC;AACzD,IAAI,MAAM,KAAK,GAAG,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE;AAC9E,IAAI,IAAI,IAAI,GAAG,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,IAAI;AACrE,IAAI,IAAI,CAAC,IAAI,IAAI,YAAY,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE;AAC3D,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;AACtF,MAAM,IAAI,CAAC,IAAI,IAAI,QAAQ,KAAK,QAAQ,IAAI,CAAC,wBAAwB,EAAE;AACvE,QAAQ,wBAAwB,GAAG,IAAI;AACvC,QAAQ,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS;AAClD,QAAQ,MAAM,SAAS,GAAG,SAAS,CAAC,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;AAC/E,QAAQ,MAAM,UAAU,GAAG,SAAS,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;AACrE,QAAQ,IAAI,SAAS,EAAE;AACvB,UAAU,OAAO,CAAC,IAAI;AACtB,YAAY,CAAC,yEAAyE,EAAE,UAAU,CAAC,mMAAmM;AACtS,WAAW;AACX,QAAQ,CAAC,MAAM;AACf,UAAU,OAAO,CAAC,IAAI;AACtB,YAAY,CAAC,+GAA+G,EAAE,UAAU,CAAC,0JAA0J;AACnS,WAAW;AACX,QAAQ;AACR,MAAM;AACN,IAAI;AACJ,IAAI,IAAI,IAAI,EAAE;AACd,MAAM,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;AAC9D,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI;AAC9B,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;AAC1H,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC;AACxD,IAAI;AACJ,EAAE;AACF,EAAE,OAAO,oBAAoB,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;AAC7D;AACA,SAAS,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,EAAE;AAClD,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,SAAS,CAAC;AAC3D,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,iCAAiC,CAAC;AAC5E,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG;AACtB,IAAI,oBAAoB;AACxB,IAAI;AACJ,GAAG;AACH,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE;AAC7C,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,qCAAqC,CAAC;AAC5F,EAAE;AACF,EAAE,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;AACrC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,qCAAqC,CAAC;AAChF,EAAE,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,QAAQ,KAAK,cAAc,IAAI,QAAQ,KAAK,aAAa,EAAE;AAC5G,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,wBAAwB,CAAC;AACnE,EAAE;AACF,EAAE,OAAO,QAAQ;AACjB;AACK,MAAC,WAAW,GAAG,CAAC;AACrB,EAAE,KAAK;AACP,EAAE,MAAM;AACR,EAAE;AACF,CAAC,KAAK;AACN,EAAE,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE;AAC1B,IAAI,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;AAC1C,EAAE;AACF,EAAE,IAAI,MAAM,KAAK,GAAG,EAAE;AACtB,IAAI,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE;AACzC,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,KAAK,GAAG;AACxD,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE;AACjC,EAAE,OAAO,CAAC,KAAK;AACf,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ;AACnE,EAAE,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC;AAClB,GAAG;AACH,EAAE,OAAO,EAAE,OAAO,EAAE,+BAA+B,EAAE;AACrD;;;;"}