@selvajs/selva 4.5.1 → 4.6.0-beta.0

package/build/server/chunks/_server.ts-QOLW7NKA.js

@@ -0,0 +1,485 @@
+import { a as apiError, A as ApiErrorCode, r as resolveServerForOrg, f as fetchSchemaFromCompute, C as ComputeServerUnconfiguredError } from './api-errors-BrqxD-El.js';
+import { TreeBuilder, processInput, GrasshopperClient, enableDebugLogging } from '@selvajs/compute';
+import { p as private_env } from './shared-server-C3WdcJCQ.js';
+import { isHttpError } from '@sveltejs/kit';
+import { lookup } from 'node:dns/promises';
+import { isIP } from 'node:net';
+import { c as MAX_SOLVE_DURATION_MS, a as COMPUTE_RESPONSE_MAX_BYTES, D as DEFINITION_CACHE_TTL_MS, e as REMOTE_DEFINITION_FETCH_TIMEOUT_MS, f as REMOTE_DEFINITION_MAX_BYTES, d as RATE_LIMIT_WINDOW_MS, R as RATE_LIMIT_MAX_REQUESTS, C as COMPUTE_REQUEST_MAX_BYTES } from './computeLimits-DzIax1Yi.js';
+import { e as requireMaxBodySize } from './admin-auth.server-BNuZakYL.js';
+import { p as getStorageProvider, o as getSolveMetricSink, u as providers } from './providers.server-C3fQ7ZdV.js';
+import { k as requireCanEditDefinition, q as requireCanSolve } from './access.server-Rd56k7vs.js';
+import { t as tryResolveShareToken } from './resolve.server-t1UmqtsG.js';
+import './context-BJnJL8ES.js';
+import 'zod';
+import '@selvajs/compute/core';
+import './utils2-BqfluBM6.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import './token.server-BGL9vwYS.js';
+
+function isBlockedIp(ip) {
+  let addr = ip.toLowerCase();
+  const mappedDotted = /^::ffff:(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/.exec(addr);
+  if (mappedDotted) {
+    addr = mappedDotted[1];
+  } else {
+    const mappedHex = /^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/.exec(addr);
+    if (mappedHex) {
+      const hi = parseInt(mappedHex[1], 16);
+      const lo = parseInt(mappedHex[2], 16);
+      addr = [hi >> 8 & 255, hi & 255, lo >> 8 & 255, lo & 255].join(".");
+    }
+  }
+  if (isIP(addr) === 4) {
+    const octets = addr.split(".").map(Number);
+    if (octets.length !== 4 || octets.some((o) => o > 255)) return true;
+    const [a, b] = octets;
+    if (a === 0) return true;
+    if (a === 127) return true;
+    if (a === 10) return true;
+    if (a === 192 && b === 168) return true;
+    if (a === 172 && b >= 16 && b <= 31) return true;
+    if (a === 169 && b === 254) return true;
+    return false;
+  }
+  if (addr === "::1" || addr === "::") return true;
+  if (/^(fc|fd)[0-9a-f]{0,2}:/.test(addr)) return true;
+  if (/^fe[89ab][0-9a-f]:/.test(addr)) return true;
+  return false;
+}
+function canonicalizeNumericIpv4(host) {
+  if (isIP(host) === 4) return host;
+  const rawParts = host.split(".");
+  if (rawParts.length === 0 || rawParts.length > 4) return null;
+  const parseUInt = (s) => {
+    if (s === "") return null;
+    let n;
+    if (/^0x[0-9a-f]+$/i.test(s)) n = parseInt(s, 16);
+    else if (/^0[0-7]+$/.test(s)) n = parseInt(s, 8);
+    else if (/^[0-9]+$/.test(s)) n = parseInt(s, 10);
+    else return null;
+    return Number.isFinite(n) ? n : null;
+  };
+  const nums = rawParts.map(parseUInt);
+  if (nums.some((n) => n === null)) return null;
+  const parts = nums;
+  let value;
+  switch (parts.length) {
+    case 1:
+      value = parts[0];
+      break;
+    case 2:
+      if (parts[0] > 255 || parts[1] > 16777215) return null;
+      value = parts[0] << 24 | parts[1];
+      break;
+    case 3:
+      if (parts[0] > 255 || parts[1] > 255 || parts[2] > 65535) return null;
+      value = parts[0] << 24 | parts[1] << 16 | parts[2];
+      break;
+    default:
+      if (parts.some((p) => p > 255)) return null;
+      value = parts[0] << 24 | parts[1] << 16 | parts[2] << 8 | parts[3];
+  }
+  value = value >>> 0;
+  if (value > 4294967295) return null;
+  return [value >>> 24 & 255, value >>> 16 & 255, value >>> 8 & 255, value & 255].join(
+    "."
+  );
+}
+function isSafeRemoteDefinitionUrl(raw) {
+  let parsed;
+  try {
+    parsed = new URL(raw);
+  } catch {
+    return false;
+  }
+  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") return false;
+  let host = parsed.hostname.toLowerCase();
+  if (!host) return false;
+  if (host === "localhost" || host.endsWith(".localhost")) return false;
+  const isBracketed = host.startsWith("[") && host.endsWith("]");
+  if (isBracketed) host = host.slice(1, -1);
+  if (isIP(host) === 6) return !isBlockedIp(host);
+  const canonical = canonicalizeNumericIpv4(host);
+  if (canonical) return !isBlockedIp(canonical);
+  return true;
+}
+async function assertSafeRemoteDefinitionUrl(raw) {
+  if (!isSafeRemoteDefinitionUrl(raw)) {
+    throw new Error("Remote definition URL is not allowed");
+  }
+  const host = new URL(raw).hostname.toLowerCase().replace(/^\[|\]$/g, "");
+  if (isIP(host) !== 0 || canonicalizeNumericIpv4(host)) return raw;
+  let resolved;
+  try {
+    resolved = await lookup(host, { all: true });
+  } catch {
+    throw new Error("Remote definition URL is not allowed");
+  }
+  if (resolved.length === 0 || resolved.some((r) => isBlockedIp(r.address))) {
+    throw new Error("Remote definition URL is not allowed");
+  }
+  return raw;
+}
+const WINDOW_MS = RATE_LIMIT_WINDOW_MS;
+const MAX_PER_WINDOW = RATE_LIMIT_MAX_REQUESTS;
+const buckets = /* @__PURE__ */ new Map();
+function checkComputeRateLimit(key) {
+  const now = Date.now();
+  const entry = buckets.get(key);
+  if (!entry || now > entry.resetAt) {
+    buckets.set(key, { count: 1, resetAt: now + WINDOW_MS });
+    return { allowed: true };
+  }
+  if (entry.count >= MAX_PER_WINDOW) {
+    return { allowed: false, retryAfter: Math.ceil((entry.resetAt - now) / 1e3) };
+  }
+  entry.count += 1;
+  return { allowed: true };
+}
+function transformInputParameter(input, value) {
+  const raw = {
+    id: input.id,
+    name: input.nickname,
+    nickname: input.nickname || null,
+    description: input.description || "",
+    paramType: input.paramType,
+    treeAccess: input.inputStructure === "tree",
+    minimum: input.minimum ?? null,
+    maximum: input.maximum ?? null,
+    atLeast: 1,
+    atMost: 1,
+    stepSize: input.stepSize,
+    // The user's selection wins; otherwise the schema default.
+    default: value ?? input.default
+  };
+  return processInput(raw);
+}
+const COMPUTE_DEBUG = ["true", "1", "yes"].includes(
+  (private_env.SELVA_FLAG_COMPUTE_DEBUG ?? "").toLowerCase()
+);
+if (COMPUTE_DEBUG) enableDebugLogging();
+const definitionCache = /* @__PURE__ */ new Map();
+const MAX_CACHED_CLIENTS = 16;
+const clientCache = /* @__PURE__ */ new Map();
+function clientCacheKey(serverConfig) {
+  return `${serverConfig.serverUrl}\0${serverConfig.apiKey ?? ""}`;
+}
+async function getClient(serverConfig) {
+  const key = clientCacheKey(serverConfig);
+  const existing = clientCache.get(key);
+  if (existing) {
+    clientCache.delete(key);
+    clientCache.set(key, existing);
+    return existing;
+  }
+  const client = await GrasshopperClient.create({
+    serverUrl: serverConfig.serverUrl,
+    apiKey: serverConfig.apiKey,
+    debug: COMPUTE_DEBUG
+  });
+  const scheduler = client.createScheduler({
+    mode: "queue",
+    timeoutMs: MAX_SOLVE_DURATION_MS,
+    cache: { maxEntries: 20, ttlMs: 5 * 6e4 },
+    // VektorNode fork returns empty 200 on stale pointer; disable until it errors.
+    reuseServerDefinitionCache: false
+  });
+  const entry = { client, scheduler };
+  if (clientCache.size >= MAX_CACHED_CLIENTS) {
+    const oldestKey = clientCache.keys().next().value;
+    if (oldestKey !== void 0) {
+      clientCache.get(oldestKey)?.scheduler.dispose();
+      clientCache.delete(oldestKey);
+    }
+  }
+  clientCache.set(key, entry);
+  return entry;
+}
+async function readBodyWithCap(response, maxBytes, controller) {
+  if (!response.body) {
+    const buffer = await response.arrayBuffer();
+    if (buffer.byteLength > maxBytes) throw new Error("Remote definition exceeds size limit");
+    return new Uint8Array(buffer);
+  }
+  const reader = response.body.getReader();
+  const chunks = [];
+  let total = 0;
+  while (true) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    total += value.byteLength;
+    if (total > maxBytes) {
+      controller.abort();
+      throw new Error("Remote definition exceeds size limit");
+    }
+    chunks.push(value);
+  }
+  const out = new Uint8Array(total);
+  let offset = 0;
+  for (const chunk of chunks) {
+    out.set(chunk, offset);
+    offset += chunk.byteLength;
+  }
+  return out;
+}
+async function loadRemoteDefinition(url) {
+  await assertSafeRemoteDefinitionUrl(url);
+  const now = Date.now();
+  const cached = definitionCache.get(url);
+  if (cached && now - cached.fetchedAt < DEFINITION_CACHE_TTL_MS) {
+    return cached.data;
+  }
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), REMOTE_DEFINITION_FETCH_TIMEOUT_MS);
+  let data;
+  try {
+    const response = await fetch(url, {
+      signal: controller.signal,
+      redirect: "error"
+    });
+    if (!response.ok) {
+      throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+    }
+    const declared = Number(response.headers.get("content-length"));
+    if (Number.isFinite(declared) && declared > REMOTE_DEFINITION_MAX_BYTES) {
+      throw new Error("Remote definition exceeds size limit");
+    }
+    data = await readBodyWithCap(response, REMOTE_DEFINITION_MAX_BYTES, controller);
+  } finally {
+    clearTimeout(timeout);
+  }
+  definitionCache.set(url, { data, fetchedAt: now });
+  if (definitionCache.size > 50) {
+    const entries = Array.from(definitionCache.entries());
+    entries.sort((a, b) => a[1].fetchedAt - b[1].fetchedAt);
+    for (let i = 0; i < 10; i++) {
+      definitionCache.delete(entries[i][0]);
+    }
+  }
+  return data;
+}
+const POST = async ({ request, locals, url }) => {
+  const storage = getStorageProvider();
+  requireMaxBodySize(request, COMPUTE_REQUEST_MAX_BYTES);
+  try {
+    const body = await request.json();
+    const { inputs, values } = body;
+    const definitionUrl = body.definitionUrl;
+    const channel = body.channel ?? "live";
+    if (!inputs || !values || !definitionUrl) {
+      apiError(
+        400,
+        ApiErrorCode.VALIDATION_FAILED,
+        "Missing required fields: inputs, values, or definitionUrl"
+      );
+    }
+    if (channel !== "live" && channel !== "draft") {
+      apiError(
+        400,
+        ApiErrorCode.VALIDATION_FAILED,
+        `Invalid channel: ${channel}. Must be 'live' or 'draft'.`
+      );
+    }
+    let definitionSource;
+    let localVersionForBackfill = null;
+    let solveOrgId = null;
+    let definitionPin = null;
+    let metricDefinitionId = null;
+    let metricVersionId = null;
+    const isLocal = definitionUrl.startsWith("local:");
+    const guid = isLocal ? definitionUrl.substring(6) : null;
+    const sharedAccess = isLocal && guid ? await tryResolveShareToken(request, url, guid, channel, { requireSolve: true }) : null;
+    if (!sharedAccess && (!locals.ctx || !locals.user)) {
+      apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
+    }
+    const solveCtx = sharedAccess?.ctx ?? locals.ctx;
+    const recordMetric = (failureKind, extra = {}) => {
+      void getSolveMetricSink().record(solveCtx, {
+        definitionUrl,
+        definitionId: metricDefinitionId,
+        versionId: metricVersionId,
+        channel,
+        orgId: solveOrgId,
+        durationMs: extra.durationMs ?? 0,
+        ok: failureKind === "ok",
+        failureKind,
+        errorCount: extra.errorCount ?? 0,
+        warningCount: extra.warningCount ?? 0
+      });
+    };
+    const rateLimitKey = sharedAccess ? `share:${sharedAccess.link.id}` : `user:${locals.user.id}`;
+    const rateLimit = checkComputeRateLimit(rateLimitKey);
+    if (!rateLimit.allowed) {
+      recordMetric("rate_limited");
+      const retryAfter = rateLimit.retryAfter ?? 1;
+      return new Response(
+        JSON.stringify({
+          message: `Too many compute requests. Retry in ${retryAfter}s.`,
+          retryAfter
+        }),
+        {
+          status: 429,
+          headers: {
+            "Content-Type": "application/json",
+            "Retry-After": String(retryAfter)
+          }
+        }
+      );
+    }
+    if (isLocal && guid) {
+      let record;
+      try {
+        record = await providers.data.definitions.get(solveCtx, guid);
+      } catch (err) {
+        console.error(`Failed to load local definition: ${guid}`, err);
+        apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' not found`);
+      }
+      if (!record) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' not found`);
+      const project = await providers.data.projects.getProject(solveCtx, record.projectId);
+      solveOrgId = project?.orgId ?? null;
+      definitionPin = record.computeServerId ?? null;
+      if (!sharedAccess) {
+        if (channel === "draft") {
+          await requireCanEditDefinition(locals, record.projectId, guid);
+        } else {
+          await requireCanSolve(locals, record.projectId);
+        }
+      }
+      const versionId = channel === "live" ? record.liveVersionId : record.draftVersionId;
+      if (!versionId) {
+        apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' has no ${channel} version yet`);
+      }
+      const version = await providers.data.definitions.getVersion(solveCtx, versionId);
+      if (!version || version.definitionId !== guid) {
+        apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' ${channel} version is missing`);
+      }
+      localVersionForBackfill = { id: version.id, hasSchema: version.schema !== void 0 };
+      metricDefinitionId = guid;
+      metricVersionId = version.id;
+      try {
+        const bytes = await storage.get(version.fileKey);
+        if (!bytes) throw new Error(`Version blob missing: ${version.fileKey}`);
+        definitionSource = bytes;
+      } catch (err) {
+        console.error(`Failed to load local definition blob: ${guid}`, err);
+        apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' not found`);
+      }
+    } else {
+      try {
+        definitionSource = await loadRemoteDefinition(definitionUrl);
+      } catch (err) {
+        console.error(`Failed to fetch definition from ${definitionUrl}:`, err);
+        apiError(
+          400,
+          ApiErrorCode.VALIDATION_FAILED,
+          `Failed to load definition: ${err instanceof Error ? err.message : String(err)}`
+        );
+      }
+    }
+    const inputTree = TreeBuilder.fromInputParams(
+      inputs.filter((input) => input.paramType).map((input) => transformInputParameter(input, values[input.id]))
+    );
+    if (sharedAccess) {
+      const next = await providers.data.shareLinks.tryIncrementSolveCount(
+        solveCtx,
+        sharedAccess.link.id
+      );
+      if (next === null) {
+        recordMetric("share_cap");
+        apiError(429, ApiErrorCode.INTERNAL, "Share link solve cap reached.");
+      }
+    }
+    const serverConfig = await resolveServerForOrg(solveCtx, solveOrgId, { definitionPin });
+    if (localVersionForBackfill && !localVersionForBackfill.hasSchema) {
+      const versionId = localVersionForBackfill.id;
+      try {
+        const schema = await fetchSchemaFromCompute(definitionSource, serverConfig);
+        await providers.data.definitions.setVersionSchema(solveCtx, versionId, schema);
+      } catch (err) {
+        console.warn(`[API/Compute] Schema backfill failed for version ${versionId}:`, err);
+      }
+    }
+    const { scheduler } = await getClient(serverConfig);
+    let solvedDefinition;
+    const solveStart = performance.now();
+    try {
+      solvedDefinition = await scheduler.solve(definitionSource, inputTree, {
+        signal: request.signal
+      });
+      recordMetric("ok", {
+        durationMs: performance.now() - solveStart,
+        errorCount: solvedDefinition.errors?.length ?? 0,
+        warningCount: solvedDefinition.warnings?.length ?? 0
+      });
+      if (metricDefinitionId) {
+        providers.data.definitions.incrementSolveCount(solveCtx, metricDefinitionId).catch(
+          (err) => console.warn(
+            `[API/Compute] solveCount increment failed for ${metricDefinitionId}:`,
+            err
+          )
+        );
+      }
+    } catch (err) {
+      const isAbort = err instanceof Error && err.name === "AbortError";
+      const timedOut = isAbort && !request.signal.aborted;
+      recordMetric(timedOut ? "timeout" : isAbort ? "client_abort" : "compute_error", {
+        durationMs: performance.now() - solveStart
+      });
+      if (isAbort) {
+        if (request.signal.aborted) {
+          apiError(499, ApiErrorCode.INTERNAL, "Client closed request");
+        }
+        apiError(
+          504,
+          ApiErrorCode.INTERNAL,
+          `Solve exceeded the ${Math.round(MAX_SOLVE_DURATION_MS / 1e3)}s deadline.`
+        );
+      }
+      throw err;
+    }
+    let serialized;
+    try {
+      serialized = JSON.stringify(solvedDefinition);
+    } catch (err) {
+      if (err instanceof RangeError) {
+        recordMetric("too_large");
+        apiError(
+          413,
+          ApiErrorCode.INTERNAL,
+          "Solve result is too large to return. This usually means a file output exceeds the supported size."
+        );
+      }
+      throw err;
+    }
+    if (serialized.length > COMPUTE_RESPONSE_MAX_BYTES) {
+      recordMetric("too_large");
+      apiError(
+        413,
+        ApiErrorCode.INTERNAL,
+        "Solve result is too large to return. This usually means a file output exceeds the supported size."
+      );
+    }
+    return new Response(serialized, {
+      headers: { "Content-Type": "application/json" }
+    });
+  } catch (err) {
+    if (isHttpError(err)) throw err;
+    if (err instanceof ComputeServerUnconfiguredError) {
+      apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, err.message);
+    }
+    const message = err instanceof Error ? err.message : "Unknown error";
+    console.error("[API/Compute] Error:", message);
+    if (err instanceof TypeError && message === "fetch failed") {
+      apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, "Compute server is unreachable");
+    }
+    apiError(500, ApiErrorCode.INTERNAL, message);
+  }
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-QOLW7NKA.js.map

package/build/server/chunks/_server.ts-QOLW7NKA.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-QOLW7NKA.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/compute/_server.ts.js"],"sourcesContent":["import { a as apiError, A as ApiErrorCode, r as resolveServerForOrg, f as fetchSchemaFromCompute, C as ComputeServerUnconfiguredError } from \"../../../../chunks/api-errors.js\";\nimport { processInput, enableDebugLogging, TreeBuilder, GrasshopperClient } from \"@selvajs/compute\";\nimport { p as private_env } from \"../../../../chunks/shared-server.js\";\nimport { isHttpError } from \"@sveltejs/kit\";\nimport { lookup } from \"node:dns/promises\";\nimport { isIP } from \"node:net\";\nimport { d as RATE_LIMIT_WINDOW_MS, R as RATE_LIMIT_MAX_REQUESTS, c as MAX_SOLVE_DURATION_MS, a as COMPUTE_RESPONSE_MAX_BYTES, D as DEFINITION_CACHE_TTL_MS, e as REMOTE_DEFINITION_FETCH_TIMEOUT_MS, f as REMOTE_DEFINITION_MAX_BYTES, C as COMPUTE_REQUEST_MAX_BYTES } from \"../../../../chunks/computeLimits.js\";\nimport { e as requireMaxBodySize } from \"../../../../chunks/admin-auth.server.js\";\nimport { p as getStorageProvider, o as getSolveMetricSink, u as providers } from \"../../../../chunks/providers.server.js\";\nimport { k as requireCanEditDefinition, q as requireCanSolve } from \"../../../../chunks/access.server.js\";\nimport { t as tryResolveShareToken } from \"../../../../chunks/resolve.server.js\";\nfunction isBlockedIp(ip) {\n  let addr = ip.toLowerCase();\n  const mappedDotted = /^::ffff:(\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3})$/.exec(addr);\n  if (mappedDotted) {\n    addr = mappedDotted[1];\n  } else {\n    const mappedHex = /^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/.exec(addr);\n    if (mappedHex) {\n      const hi = parseInt(mappedHex[1], 16);\n      const lo = parseInt(mappedHex[2], 16);\n      addr = [hi >> 8 & 255, hi & 255, lo >> 8 & 255, lo & 255].join(\".\");\n    }\n  }\n  if (isIP(addr) === 4) {\n    const octets = addr.split(\".\").map(Number);\n    if (octets.length !== 4 || octets.some((o) => o > 255)) return true;\n    const [a, b] = octets;\n    if (a === 0) return true;\n    if (a === 127) return true;\n    if (a === 10) return true;\n    if (a === 192 && b === 168) return true;\n    if (a === 172 && b >= 16 && b <= 31) return true;\n    if (a === 169 && b === 254) return true;\n    return false;\n  }\n  if (addr === \"::1\" || addr === \"::\") return true;\n  if (/^(fc|fd)[0-9a-f]{0,2}:/.test(addr)) return true;\n  if (/^fe[89ab][0-9a-f]:/.test(addr)) return true;\n  return false;\n}\nfunction canonicalizeNumericIpv4(host) {\n  if (isIP(host) === 4) return host;\n  const rawParts = host.split(\".\");\n  if (rawParts.length === 0 || rawParts.length > 4) return null;\n  const parseUInt = (s) => {\n    if (s === \"\") return null;\n    let n;\n    if (/^0x[0-9a-f]+$/i.test(s)) n = parseInt(s, 16);\n    else if (/^0[0-7]+$/.test(s)) n = parseInt(s, 8);\n    else if (/^[0-9]+$/.test(s)) n = parseInt(s, 10);\n    else return null;\n    return Number.isFinite(n) ? n : null;\n  };\n  const nums = rawParts.map(parseUInt);\n  if (nums.some((n) => n === null)) return null;\n  const parts = nums;\n  let value;\n  switch (parts.length) {\n    case 1:\n      value = parts[0];\n      break;\n    case 2:\n      if (parts[0] > 255 || parts[1] > 16777215) return null;\n      value = parts[0] << 24 | parts[1];\n      break;\n    case 3:\n      if (parts[0] > 255 || parts[1] > 255 || parts[2] > 65535) return null;\n      value = parts[0] << 24 | parts[1] << 16 | parts[2];\n      break;\n    default:\n      if (parts.some((p) => p > 255)) return null;\n      value = parts[0] << 24 | parts[1] << 16 | parts[2] << 8 | parts[3];\n  }\n  value = value >>> 0;\n  if (value > 4294967295) return null;\n  return [value >>> 24 & 255, value >>> 16 & 255, value >>> 8 & 255, value & 255].join(\n    \".\"\n  );\n}\nfunction isSafeRemoteDefinitionUrl(raw) {\n  let parsed;\n  try {\n    parsed = new URL(raw);\n  } catch {\n    return false;\n  }\n  if (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") return false;\n  let host = parsed.hostname.toLowerCase();\n  if (!host) return false;\n  if (host === \"localhost\" || host.endsWith(\".localhost\")) return false;\n  const isBracketed = host.startsWith(\"[\") && host.endsWith(\"]\");\n  if (isBracketed) host = host.slice(1, -1);\n  if (isIP(host) === 6) return !isBlockedIp(host);\n  const canonical = canonicalizeNumericIpv4(host);\n  if (canonical) return !isBlockedIp(canonical);\n  return true;\n}\nasync function assertSafeRemoteDefinitionUrl(raw) {\n  if (!isSafeRemoteDefinitionUrl(raw)) {\n    throw new Error(\"Remote definition URL is not allowed\");\n  }\n  const host = new URL(raw).hostname.toLowerCase().replace(/^\\[|\\]$/g, \"\");\n  if (isIP(host) !== 0 || canonicalizeNumericIpv4(host)) return raw;\n  let resolved;\n  try {\n    resolved = await lookup(host, { all: true });\n  } catch {\n    throw new Error(\"Remote definition URL is not allowed\");\n  }\n  if (resolved.length === 0 || resolved.some((r) => isBlockedIp(r.address))) {\n    throw new Error(\"Remote definition URL is not allowed\");\n  }\n  return raw;\n}\nconst WINDOW_MS = RATE_LIMIT_WINDOW_MS;\nconst MAX_PER_WINDOW = RATE_LIMIT_MAX_REQUESTS;\nconst buckets = /* @__PURE__ */ new Map();\nfunction checkComputeRateLimit(key) {\n  const now = Date.now();\n  const entry = buckets.get(key);\n  if (!entry || now > entry.resetAt) {\n    buckets.set(key, { count: 1, resetAt: now + WINDOW_MS });\n    return { allowed: true };\n  }\n  if (entry.count >= MAX_PER_WINDOW) {\n    return { allowed: false, retryAfter: Math.ceil((entry.resetAt - now) / 1e3) };\n  }\n  entry.count += 1;\n  return { allowed: true };\n}\nfunction transformInputParameter(input, value) {\n  const raw = {\n    id: input.id,\n    name: input.nickname,\n    nickname: input.nickname || null,\n    description: input.description || \"\",\n    paramType: input.paramType,\n    treeAccess: input.inputStructure === \"tree\",\n    minimum: input.minimum ?? null,\n    maximum: input.maximum ?? null,\n    atLeast: 1,\n    atMost: 1,\n    stepSize: input.stepSize,\n    // The user's selection wins; otherwise the schema default.\n    default: value ?? input.default\n  };\n  return processInput(raw);\n}\nconst COMPUTE_DEBUG = [\"true\", \"1\", \"yes\"].includes(\n  (private_env.SELVA_FLAG_COMPUTE_DEBUG ?? \"\").toLowerCase()\n);\nif (COMPUTE_DEBUG) enableDebugLogging();\nconst definitionCache = /* @__PURE__ */ new Map();\nconst MAX_CACHED_CLIENTS = 16;\nconst clientCache = /* @__PURE__ */ new Map();\nfunction clientCacheKey(serverConfig) {\n  return `${serverConfig.serverUrl}\\0${serverConfig.apiKey ?? \"\"}`;\n}\nasync function getClient(serverConfig) {\n  const key = clientCacheKey(serverConfig);\n  const existing = clientCache.get(key);\n  if (existing) {\n    clientCache.delete(key);\n    clientCache.set(key, existing);\n    return existing;\n  }\n  const client = await GrasshopperClient.create({\n    serverUrl: serverConfig.serverUrl,\n    apiKey: serverConfig.apiKey,\n    debug: COMPUTE_DEBUG\n  });\n  const scheduler = client.createScheduler({\n    mode: \"queue\",\n    timeoutMs: MAX_SOLVE_DURATION_MS,\n    cache: { maxEntries: 20, ttlMs: 5 * 6e4 },\n    // VektorNode fork returns empty 200 on stale pointer; disable until it errors.\n    reuseServerDefinitionCache: false\n  });\n  const entry = { client, scheduler };\n  if (clientCache.size >= MAX_CACHED_CLIENTS) {\n    const oldestKey = clientCache.keys().next().value;\n    if (oldestKey !== void 0) {\n      clientCache.get(oldestKey)?.scheduler.dispose();\n      clientCache.delete(oldestKey);\n    }\n  }\n  clientCache.set(key, entry);\n  return entry;\n}\nasync function readBodyWithCap(response, maxBytes, controller) {\n  if (!response.body) {\n    const buffer = await response.arrayBuffer();\n    if (buffer.byteLength > maxBytes) throw new Error(\"Remote definition exceeds size limit\");\n    return new Uint8Array(buffer);\n  }\n  const reader = response.body.getReader();\n  const chunks = [];\n  let total = 0;\n  while (true) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    total += value.byteLength;\n    if (total > maxBytes) {\n      controller.abort();\n      throw new Error(\"Remote definition exceeds size limit\");\n    }\n    chunks.push(value);\n  }\n  const out = new Uint8Array(total);\n  let offset = 0;\n  for (const chunk of chunks) {\n    out.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n  return out;\n}\nasync function loadRemoteDefinition(url) {\n  await assertSafeRemoteDefinitionUrl(url);\n  const now = Date.now();\n  const cached = definitionCache.get(url);\n  if (cached && now - cached.fetchedAt < DEFINITION_CACHE_TTL_MS) {\n    return cached.data;\n  }\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), REMOTE_DEFINITION_FETCH_TIMEOUT_MS);\n  let data;\n  try {\n    const response = await fetch(url, {\n      signal: controller.signal,\n      redirect: \"error\"\n    });\n    if (!response.ok) {\n      throw new Error(`HTTP ${response.status}: ${response.statusText}`);\n    }\n    const declared = Number(response.headers.get(\"content-length\"));\n    if (Number.isFinite(declared) && declared > REMOTE_DEFINITION_MAX_BYTES) {\n      throw new Error(\"Remote definition exceeds size limit\");\n    }\n    data = await readBodyWithCap(response, REMOTE_DEFINITION_MAX_BYTES, controller);\n  } finally {\n    clearTimeout(timeout);\n  }\n  definitionCache.set(url, { data, fetchedAt: now });\n  if (definitionCache.size > 50) {\n    const entries = Array.from(definitionCache.entries());\n    entries.sort((a, b) => a[1].fetchedAt - b[1].fetchedAt);\n    for (let i = 0; i < 10; i++) {\n      definitionCache.delete(entries[i][0]);\n    }\n  }\n  return data;\n}\nconst POST = async ({ request, locals, url }) => {\n  const storage = getStorageProvider();\n  requireMaxBodySize(request, COMPUTE_REQUEST_MAX_BYTES);\n  try {\n    const body = await request.json();\n    const { inputs, values } = body;\n    const definitionUrl = body.definitionUrl;\n    const channel = body.channel ?? \"live\";\n    if (!inputs || !values || !definitionUrl) {\n      apiError(\n        400,\n        ApiErrorCode.VALIDATION_FAILED,\n        \"Missing required fields: inputs, values, or definitionUrl\"\n      );\n    }\n    if (channel !== \"live\" && channel !== \"draft\") {\n      apiError(\n        400,\n        ApiErrorCode.VALIDATION_FAILED,\n        `Invalid channel: ${channel}. Must be 'live' or 'draft'.`\n      );\n    }\n    let definitionSource;\n    let localVersionForBackfill = null;\n    let solveOrgId = null;\n    let definitionPin = null;\n    let metricDefinitionId = null;\n    let metricVersionId = null;\n    const isLocal = definitionUrl.startsWith(\"local:\");\n    const guid = isLocal ? definitionUrl.substring(6) : null;\n    const sharedAccess = isLocal && guid ? await tryResolveShareToken(request, url, guid, channel, { requireSolve: true }) : null;\n    if (!sharedAccess && (!locals.ctx || !locals.user)) {\n      apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n    }\n    const solveCtx = sharedAccess?.ctx ?? locals.ctx;\n    const recordMetric = (failureKind, extra = {}) => {\n      void getSolveMetricSink().record(solveCtx, {\n        definitionUrl,\n        definitionId: metricDefinitionId,\n        versionId: metricVersionId,\n        channel,\n        orgId: solveOrgId,\n        durationMs: extra.durationMs ?? 0,\n        ok: failureKind === \"ok\",\n        failureKind,\n        errorCount: extra.errorCount ?? 0,\n        warningCount: extra.warningCount ?? 0\n      });\n    };\n    const rateLimitKey = sharedAccess ? `share:${sharedAccess.link.id}` : `user:${locals.user.id}`;\n    const rateLimit = checkComputeRateLimit(rateLimitKey);\n    if (!rateLimit.allowed) {\n      recordMetric(\"rate_limited\");\n      const retryAfter = rateLimit.retryAfter ?? 1;\n      return new Response(\n        JSON.stringify({\n          message: `Too many compute requests. Retry in ${retryAfter}s.`,\n          retryAfter\n        }),\n        {\n          status: 429,\n          headers: {\n            \"Content-Type\": \"application/json\",\n            \"Retry-After\": String(retryAfter)\n          }\n        }\n      );\n    }\n    if (isLocal && guid) {\n      let record;\n      try {\n        record = await providers.data.definitions.get(solveCtx, guid);\n      } catch (err) {\n        console.error(`Failed to load local definition: ${guid}`, err);\n        apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' not found`);\n      }\n      if (!record) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' not found`);\n      const project = await providers.data.projects.getProject(solveCtx, record.projectId);\n      solveOrgId = project?.orgId ?? null;\n      definitionPin = record.computeServerId ?? null;\n      if (!sharedAccess) {\n        if (channel === \"draft\") {\n          await requireCanEditDefinition(locals, record.projectId, guid);\n        } else {\n          await requireCanSolve(locals, record.projectId);\n        }\n      }\n      const versionId = channel === \"live\" ? record.liveVersionId : record.draftVersionId;\n      if (!versionId) {\n        apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' has no ${channel} version yet`);\n      }\n      const version = await providers.data.definitions.getVersion(solveCtx, versionId);\n      if (!version || version.definitionId !== guid) {\n        apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' ${channel} version is missing`);\n      }\n      localVersionForBackfill = { id: version.id, hasSchema: version.schema !== void 0 };\n      metricDefinitionId = guid;\n      metricVersionId = version.id;\n      try {\n        const bytes = await storage.get(version.fileKey);\n        if (!bytes) throw new Error(`Version blob missing: ${version.fileKey}`);\n        definitionSource = bytes;\n      } catch (err) {\n        console.error(`Failed to load local definition blob: ${guid}`, err);\n        apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' not found`);\n      }\n    } else {\n      try {\n        definitionSource = await loadRemoteDefinition(definitionUrl);\n      } catch (err) {\n        console.error(`Failed to fetch definition from ${definitionUrl}:`, err);\n        apiError(\n          400,\n          ApiErrorCode.VALIDATION_FAILED,\n          `Failed to load definition: ${err instanceof Error ? err.message : String(err)}`\n        );\n      }\n    }\n    const inputTree = TreeBuilder.fromInputParams(\n      inputs.filter((input) => input.paramType).map((input) => transformInputParameter(input, values[input.id]))\n    );\n    if (sharedAccess) {\n      const next = await providers.data.shareLinks.tryIncrementSolveCount(\n        solveCtx,\n        sharedAccess.link.id\n      );\n      if (next === null) {\n        recordMetric(\"share_cap\");\n        apiError(429, ApiErrorCode.INTERNAL, \"Share link solve cap reached.\");\n      }\n    }\n    const serverConfig = await resolveServerForOrg(solveCtx, solveOrgId, { definitionPin });\n    if (localVersionForBackfill && !localVersionForBackfill.hasSchema) {\n      const versionId = localVersionForBackfill.id;\n      try {\n        const schema = await fetchSchemaFromCompute(definitionSource, serverConfig);\n        await providers.data.definitions.setVersionSchema(solveCtx, versionId, schema);\n      } catch (err) {\n        console.warn(`[API/Compute] Schema backfill failed for version ${versionId}:`, err);\n      }\n    }\n    const { scheduler } = await getClient(serverConfig);\n    let solvedDefinition;\n    const solveStart = performance.now();\n    try {\n      solvedDefinition = await scheduler.solve(definitionSource, inputTree, {\n        signal: request.signal\n      });\n      recordMetric(\"ok\", {\n        durationMs: performance.now() - solveStart,\n        errorCount: solvedDefinition.errors?.length ?? 0,\n        warningCount: solvedDefinition.warnings?.length ?? 0\n      });\n      if (metricDefinitionId) {\n        providers.data.definitions.incrementSolveCount(solveCtx, metricDefinitionId).catch(\n          (err) => console.warn(\n            `[API/Compute] solveCount increment failed for ${metricDefinitionId}:`,\n            err\n          )\n        );\n      }\n    } catch (err) {\n      const isAbort = err instanceof Error && err.name === \"AbortError\";\n      const timedOut = isAbort && !request.signal.aborted;\n      recordMetric(timedOut ? \"timeout\" : isAbort ? \"client_abort\" : \"compute_error\", {\n        durationMs: performance.now() - solveStart\n      });\n      if (isAbort) {\n        if (request.signal.aborted) {\n          apiError(499, ApiErrorCode.INTERNAL, \"Client closed request\");\n        }\n        apiError(\n          504,\n          ApiErrorCode.INTERNAL,\n          `Solve exceeded the ${Math.round(MAX_SOLVE_DURATION_MS / 1e3)}s deadline.`\n        );\n      }\n      throw err;\n    }\n    let serialized;\n    try {\n      serialized = JSON.stringify(solvedDefinition);\n    } catch (err) {\n      if (err instanceof RangeError) {\n        recordMetric(\"too_large\");\n        apiError(\n          413,\n          ApiErrorCode.INTERNAL,\n          \"Solve result is too large to return. This usually means a file output exceeds the supported size.\"\n        );\n      }\n      throw err;\n    }\n    if (serialized.length > COMPUTE_RESPONSE_MAX_BYTES) {\n      recordMetric(\"too_large\");\n      apiError(\n        413,\n        ApiErrorCode.INTERNAL,\n        \"Solve result is too large to return. This usually means a file output exceeds the supported size.\"\n      );\n    }\n    return new Response(serialized, {\n      headers: { \"Content-Type\": \"application/json\" }\n    });\n  } catch (err) {\n    if (isHttpError(err)) throw err;\n    if (err instanceof ComputeServerUnconfiguredError) {\n      apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, err.message);\n    }\n    const message = err instanceof Error ? err.message : \"Unknown error\";\n    console.error(\"[API/Compute] Error:\", message);\n    if (err instanceof TypeError && message === \"fetch failed\") {\n      apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, \"Compute server is unreachable\");\n    }\n    apiError(500, ApiErrorCode.INTERNAL, message);\n  }\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAWA,SAAS,WAAW,CAAC,EAAE,EAAE;AACzB,EAAE,IAAI,IAAI,GAAG,EAAE,CAAC,WAAW,EAAE;AAC7B,EAAE,MAAM,YAAY,GAAG,+CAA+C,CAAC,IAAI,CAAC,IAAI,CAAC;AACjF,EAAE,IAAI,YAAY,EAAE;AACpB,IAAI,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC;AAC1B,EAAE,CAAC,MAAM;AACT,IAAI,MAAM,SAAS,GAAG,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC;AAC3E,IAAI,IAAI,SAAS,EAAE;AACnB,MAAM,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC3C,MAAM,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC3C,MAAM,IAAI,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,GAAG,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;AACzE,IAAI;AACJ,EAAE;AACF,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;AACxB,IAAI,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;AAC9C,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,OAAO,IAAI;AACvE,IAAI,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM;AACzB,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,IAAI;AAC5B,IAAI,IAAI,CAAC,KAAK,GAAG,EAAE,OAAO,IAAI;AAC9B,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,IAAI;AAC7B,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,OAAO,IAAI;AAC3C,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,IAAI;AACpD,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,OAAO,IAAI;AAC3C,IAAI,OAAO,KAAK;AAChB,EAAE;AACF,EAAE,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,IAAI,EAAE,OAAO,IAAI;AAClD,EAAE,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI;AACtD,EAAE,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI;AAClD,EAAE,OAAO,KAAK;AACd;AACA,SAAS,uBAAuB,CAAC,IAAI,EAAE;AACvC,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,IAAI;AACnC,EAAE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;AAClC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,IAAI;AAC/D,EAAE,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK;AAC3B,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,IAAI;AAC7B,IAAI,IAAI,CAAC;AACT,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;AACrD,SAAS,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;AACpD,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;AACpD,SAAS,OAAO,IAAI;AACpB,IAAI,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI;AACxC,EAAE,CAAC;AACH,EAAE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;AACtC,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,EAAE,OAAO,IAAI;AAC/C,EAAE,MAAM,KAAK,GAAG,IAAI;AACpB,EAAE,IAAI,KAAK;AACX,EAAE,QAAQ,KAAK,CAAC,MAAM;AACtB,IAAI,KAAK,CAAC;AACV,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC;AACtB,MAAM;AACN,IAAI,KAAK,CAAC;AACV,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,OAAO,IAAI;AAC5D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;AACvC,MAAM;AACN,IAAI,KAAK,CAAC;AACV,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,OAAO,IAAI;AAC3E,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;AACxD,MAAM;AACN,IAAI;AACJ,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,OAAO,IAAI;AACjD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;AACxE;AACA,EAAE,KAAK,GAAG,KAAK,KAAK,CAAC;AACrB,EAAE,IAAI,KAAK,GAAG,UAAU,EAAE,OAAO,IAAI;AACrC,EAAE,OAAO,CAAC,KAAK,KAAK,EAAE,GAAG,GAAG,EAAE,KAAK,KAAK,EAAE,GAAG,GAAG,EAAE,KAAK,KAAK,CAAC,GAAG,GAAG,EAAE,KAAK,GAAG,GAAG,CAAC,CAAC,IAAI;AACtF,IAAI;AACJ,GAAG;AACH;AACA,SAAS,yBAAyB,CAAC,GAAG,EAAE;AACxC,EAAE,IAAI,MAAM;AACZ,EAAE,IAAI;AACN,IAAI,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC;AACzB,EAAE,CAAC,CAAC,MAAM;AACV,IAAI,OAAO,KAAK;AAChB,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,OAAO,KAAK;AAC/E,EAAE,IAAI,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE;AAC1C,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,KAAK;AACzB,EAAE,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,KAAK;AACvE,EAAE,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;AAChE,EAAE,IAAI,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;AAC3C,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC;AACjD,EAAE,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC;AACjD,EAAE,IAAI,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC;AAC/C,EAAE,OAAO,IAAI;AACb;AACA,eAAe,6BAA6B,CAAC,GAAG,EAAE;AAClD,EAAE,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,EAAE;AACvC,IAAI,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AAC3D,EAAE;AACF,EAAE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;AAC1E,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG;AACnE,EAAE,IAAI,QAAQ;AACd,EAAE,IAAI;AACN,IAAI,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAChD,EAAE,CAAC,CAAC,MAAM;AACV,IAAI,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AAC3D,EAAE;AACF,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE;AAC7E,IAAI,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AAC3D,EAAE;AACF,EAAE,OAAO,GAAG;AACZ;AACA,MAAM,SAAS,GAAG,oBAAoB;AACtC,MAAM,cAAc,GAAG,uBAAuB;AAC9C,MAAM,OAAO,mBAAmB,IAAI,GAAG,EAAE;AACzC,SAAS,qBAAqB,CAAC,GAAG,EAAE;AACpC,EAAE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;AACxB,EAAE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;AAChC,EAAE,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE;AACrC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,SAAS,EAAE,CAAC;AAC5D,IAAI,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;AAC5B,EAAE;AACF,EAAE,IAAI,KAAK,CAAC,KAAK,IAAI,cAAc,EAAE;AACrC,IAAI,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE;AACjF,EAAE;AACF,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;AAClB,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;AAC1B;AACA,SAAS,uBAAuB,CAAC,KAAK,EAAE,KAAK,EAAE;AAC/C,EAAE,MAAM,GAAG,GAAG;AACd,IAAI,EAAE,EAAE,KAAK,CAAC,EAAE;AAChB,IAAI,IAAI,EAAE,KAAK,CAAC,QAAQ;AACxB,IAAI,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;AACpC,IAAI,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;AACxC,IAAI,SAAS,EAAE,KAAK,CAAC,SAAS;AAC9B,IAAI,UAAU,EAAE,KAAK,CAAC,cAAc,KAAK,MAAM;AAC/C,IAAI,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;AAClC,IAAI,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;AAClC,IAAI,OAAO,EAAE,CAAC;AACd,IAAI,MAAM,EAAE,CAAC;AACb,IAAI,QAAQ,EAAE,KAAK,CAAC,QAAQ;AAC5B;AACA,IAAI,OAAO,EAAE,KAAK,IAAI,KAAK,CAAC;AAC5B,GAAG;AACH,EAAE,OAAO,YAAY,CAAC,GAAG,CAAC;AAC1B;AACA,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,QAAQ;AACnD,EAAE,CAAC,WAAW,CAAC,wBAAwB,IAAI,EAAE,EAAE,WAAW;AAC1D,CAAC;AACD,IAAI,aAAa,EAAE,kBAAkB,EAAE;AACvC,MAAM,eAAe,mBAAmB,IAAI,GAAG,EAAE;AACjD,MAAM,kBAAkB,GAAG,EAAE;AAC7B,MAAM,WAAW,mBAAmB,IAAI,GAAG,EAAE;AAC7C,SAAS,cAAc,CAAC,YAAY,EAAE;AACtC,EAAE,OAAO,CAAC,EAAE,YAAY,CAAC,SAAS,CAAC,EAAE,EAAE,YAAY,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;AAClE;AACA,eAAe,SAAS,CAAC,YAAY,EAAE;AACvC,EAAE,MAAM,GAAG,GAAG,cAAc,CAAC,YAAY,CAAC;AAC1C,EAAE,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;AACvC,EAAE,IAAI,QAAQ,EAAE;AAChB,IAAI,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC;AAC3B,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC;AAClC,IAAI,OAAO,QAAQ;AACnB,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC;AAChD,IAAI,SAAS,EAAE,YAAY,CAAC,SAAS;AACrC,IAAI,MAAM,EAAE,YAAY,CAAC,MAAM;AAC/B,IAAI,KAAK,EAAE;AACX,GAAG,CAAC;AACJ,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC;AAC3C,IAAI,IAAI,EAAE,OAAO;AACjB,IAAI,SAAS,EAAE,qBAAqB;AACpC,IAAI,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,GAAG,EAAE;AAC7C;AACA,IAAI,0BAA0B,EAAE;AAChC,GAAG,CAAC;AACJ,EAAE,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE;AACrC,EAAE,IAAI,WAAW,CAAC,IAAI,IAAI,kBAAkB,EAAE;AAC9C,IAAI,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK;AACrD,IAAI,IAAI,SAAS,KAAK,MAAM,EAAE;AAC9B,MAAM,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,OAAO,EAAE;AACrD,MAAM,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC;AACnC,IAAI;AACJ,EAAE;AACF,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC;AAC7B,EAAE,OAAO,KAAK;AACd;AACA,eAAe,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE;AAC/D,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;AACtB,IAAI,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE;AAC/C,IAAI,IAAI,MAAM,CAAC,UAAU,GAAG,QAAQ,EAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AAC7F,IAAI,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC;AACjC,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE;AAC1C,EAAE,MAAM,MAAM,GAAG,EAAE;AACnB,EAAE,IAAI,KAAK,GAAG,CAAC;AACf,EAAE,OAAO,IAAI,EAAE;AACf,IAAI,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE;AAC/C,IAAI,IAAI,IAAI,EAAE;AACd,IAAI,KAAK,IAAI,KAAK,CAAC,UAAU;AAC7B,IAAI,IAAI,KAAK,GAAG,QAAQ,EAAE;AAC1B,MAAM,UAAU,CAAC,KAAK,EAAE;AACxB,MAAM,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AAC7D,IAAI;AACJ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;AACtB,EAAE;AACF,EAAE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC;AACnC,EAAE,IAAI,MAAM,GAAG,CAAC;AAChB,EAAE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE;AAC9B,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC;AAC1B,IAAI,MAAM,IAAI,KAAK,CAAC,UAAU;AAC9B,EAAE;AACF,EAAE,OAAO,GAAG;AACZ;AACA,eAAe,oBAAoB,CAAC,GAAG,EAAE;AACzC,EAAE,MAAM,6BAA6B,CAAC,GAAG,CAAC;AAC1C,EAAE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;AACxB,EAAE,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;AACzC,EAAE,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,uBAAuB,EAAE;AAClE,IAAI,OAAO,MAAM,CAAC,IAAI;AACtB,EAAE;AACF,EAAE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE;AAC1C,EAAE,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,kCAAkC,CAAC;AAC1F,EAAE,IAAI,IAAI;AACV,EAAE,IAAI;AACN,IAAI,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;AACtC,MAAM,MAAM,EAAE,UAAU,CAAC,MAAM;AAC/B,MAAM,QAAQ,EAAE;AAChB,KAAK,CAAC;AACN,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;AACtB,MAAM,MAAM,IAAI,KAAK,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;AACxE,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AACnE,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,2BAA2B,EAAE;AAC7E,MAAM,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AAC7D,IAAI;AACJ,IAAI,IAAI,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,2BAA2B,EAAE,UAAU,CAAC;AACnF,EAAE,CAAC,SAAS;AACZ,IAAI,YAAY,CAAC,OAAO,CAAC;AACzB,EAAE;AACF,EAAE,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;AACpD,EAAE,IAAI,eAAe,CAAC,IAAI,GAAG,EAAE,EAAE;AACjC,IAAI,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;AACzD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;AACjC,MAAM,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3C,IAAI;AACJ,EAAE;AACF,EAAE,OAAO,IAAI;AACb;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACjD,EAAE,MAAM,OAAO,GAAG,kBAAkB,EAAE;AACtC,EAAE,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,CAAC;AACxD,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE;AACrC,IAAI,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI;AACnC,IAAI,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa;AAC5C,IAAI,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM;AAC1C,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE;AAC9C,MAAM,QAAQ;AACd,QAAQ,GAAG;AACX,QAAQ,YAAY,CAAC,iBAAiB;AACtC,QAAQ;AACR,OAAO;AACP,IAAI;AACJ,IAAI,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,OAAO,EAAE;AACnD,MAAM,QAAQ;AACd,QAAQ,GAAG;AACX,QAAQ,YAAY,CAAC,iBAAiB;AACtC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC,4BAA4B;AAChE,OAAO;AACP,IAAI;AACJ,IAAI,IAAI,gBAAgB;AACxB,IAAI,IAAI,uBAAuB,GAAG,IAAI;AACtC,IAAI,IAAI,UAAU,GAAG,IAAI;AACzB,IAAI,IAAI,aAAa,GAAG,IAAI;AAC5B,IAAI,IAAI,kBAAkB,GAAG,IAAI;AACjC,IAAI,IAAI,eAAe,GAAG,IAAI;AAC9B,IAAI,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC;AACtD,IAAI,MAAM,IAAI,GAAG,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI;AAC5D,IAAI,MAAM,YAAY,GAAG,OAAO,IAAI,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI;AACjI,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;AACxD,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC9D,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG,YAAY,EAAE,GAAG,IAAI,MAAM,CAAC,GAAG;AACpD,IAAI,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,KAAK;AACtD,MAAM,KAAK,kBAAkB,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE;AACjD,QAAQ,aAAa;AACrB,QAAQ,YAAY,EAAE,kBAAkB;AACxC,QAAQ,SAAS,EAAE,eAAe;AAClC,QAAQ,OAAO;AACf,QAAQ,KAAK,EAAE,UAAU;AACzB,QAAQ,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC;AACzC,QAAQ,EAAE,EAAE,WAAW,KAAK,IAAI;AAChC,QAAQ,WAAW;AACnB,QAAQ,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC;AACzC,QAAQ,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI;AAC5C,OAAO,CAAC;AACR,IAAI,CAAC;AACL,IAAI,MAAM,YAAY,GAAG,YAAY,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAClG,IAAI,MAAM,SAAS,GAAG,qBAAqB,CAAC,YAAY,CAAC;AACzD,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE;AAC5B,MAAM,YAAY,CAAC,cAAc,CAAC;AAClC,MAAM,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,IAAI,CAAC;AAClD,MAAM,OAAO,IAAI,QAAQ;AACzB,QAAQ,IAAI,CAAC,SAAS,CAAC;AACvB,UAAU,OAAO,EAAE,CAAC,oCAAoC,EAAE,UAAU,CAAC,EAAE,CAAC;AACxE,UAAU;AACV,SAAS,CAAC;AACV,QAAQ;AACR,UAAU,MAAM,EAAE,GAAG;AACrB,UAAU,OAAO,EAAE;AACnB,YAAY,cAAc,EAAE,kBAAkB;AAC9C,YAAY,aAAa,EAAE,MAAM,CAAC,UAAU;AAC5C;AACA;AACA,OAAO;AACP,IAAI;AACJ,IAAI,IAAI,OAAO,IAAI,IAAI,EAAE;AACzB,MAAM,IAAI,MAAM;AAChB,MAAM,IAAI;AACV,QAAQ,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC;AACrE,MAAM,CAAC,CAAC,OAAO,GAAG,EAAE;AACpB,QAAQ,OAAO,CAAC,KAAK,CAAC,CAAC,iCAAiC,EAAE,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC;AACtE,QAAQ,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;AAC/E,MAAM;AACN,MAAM,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;AAC1F,MAAM,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC;AAC1F,MAAM,UAAU,GAAG,OAAO,EAAE,KAAK,IAAI,IAAI;AACzC,MAAM,aAAa,GAAG,MAAM,CAAC,eAAe,IAAI,IAAI;AACpD,MAAM,IAAI,CAAC,YAAY,EAAE;AACzB,QAAQ,IAAI,OAAO,KAAK,OAAO,EAAE;AACjC,UAAU,MAAM,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC;AACxE,QAAQ,CAAC,MAAM;AACf,UAAU,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC;AACzD,QAAQ;AACR,MAAM;AACN,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,MAAM,GAAG,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,cAAc;AACzF,MAAM,IAAI,CAAC,SAAS,EAAE;AACtB,QAAQ,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;AACnG,MAAM;AACN,MAAM,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC;AACtF,MAAM,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE;AACrD,QAAQ,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;AACnG,MAAM;AACN,MAAM,uBAAuB,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,EAAE;AACxF,MAAM,kBAAkB,GAAG,IAAI;AAC/B,MAAM,eAAe,GAAG,OAAO,CAAC,EAAE;AAClC,MAAM,IAAI;AACV,QAAQ,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;AACxD,QAAQ,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,sBAAsB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/E,QAAQ,gBAAgB,GAAG,KAAK;AAChC,MAAM,CAAC,CAAC,OAAO,GAAG,EAAE;AACpB,QAAQ,OAAO,CAAC,KAAK,CAAC,CAAC,sCAAsC,EAAE,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC;AAC3E,QAAQ,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;AAC/E,MAAM;AACN,IAAI,CAAC,MAAM;AACX,MAAM,IAAI;AACV,QAAQ,gBAAgB,GAAG,MAAM,oBAAoB,CAAC,aAAa,CAAC;AACpE,MAAM,CAAC,CAAC,OAAO,GAAG,EAAE;AACpB,QAAQ,OAAO,CAAC,KAAK,CAAC,CAAC,gCAAgC,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;AAC/E,QAAQ,QAAQ;AAChB,UAAU,GAAG;AACb,UAAU,YAAY,CAAC,iBAAiB;AACxC,UAAU,CAAC,2BAA2B,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;AACzF,SAAS;AACT,MAAM;AACN,IAAI;AACJ,IAAI,MAAM,SAAS,GAAG,WAAW,CAAC,eAAe;AACjD,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,uBAAuB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC/G,KAAK;AACL,IAAI,IAAI,YAAY,EAAE;AACtB,MAAM,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB;AACzE,QAAQ,QAAQ;AAChB,QAAQ,YAAY,CAAC,IAAI,CAAC;AAC1B,OAAO;AACP,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE;AACzB,QAAQ,YAAY,CAAC,WAAW,CAAC;AACjC,QAAQ,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,+BAA+B,CAAC;AAC7E,MAAM;AACN,IAAI;AACJ,IAAI,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,CAAC;AAC3F,IAAI,IAAI,uBAAuB,IAAI,CAAC,uBAAuB,CAAC,SAAS,EAAE;AACvE,MAAM,MAAM,SAAS,GAAG,uBAAuB,CAAC,EAAE;AAClD,MAAM,IAAI;AACV,QAAQ,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,gBAAgB,EAAE,YAAY,CAAC;AACnF,QAAQ,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;AACtF,MAAM,CAAC,CAAC,OAAO,GAAG,EAAE;AACpB,QAAQ,OAAO,CAAC,IAAI,CAAC,CAAC,iDAAiD,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;AAC3F,MAAM;AACN,IAAI;AACJ,IAAI,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC;AACvD,IAAI,IAAI,gBAAgB;AACxB,IAAI,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;AACxC,IAAI,IAAI;AACR,MAAM,gBAAgB,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,gBAAgB,EAAE,SAAS,EAAE;AAC5E,QAAQ,MAAM,EAAE,OAAO,CAAC;AACxB,OAAO,CAAC;AACR,MAAM,YAAY,CAAC,IAAI,EAAE;AACzB,QAAQ,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,UAAU;AAClD,QAAQ,UAAU,EAAE,gBAAgB,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;AACxD,QAAQ,YAAY,EAAE,gBAAgB,CAAC,QAAQ,EAAE,MAAM,IAAI;AAC3D,OAAO,CAAC;AACR,MAAM,IAAI,kBAAkB,EAAE;AAC9B,QAAQ,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,KAAK;AAC1F,UAAU,CAAC,GAAG,KAAK,OAAO,CAAC,IAAI;AAC/B,YAAY,CAAC,8CAA8C,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAClF,YAAY;AACZ;AACA,SAAS;AACT,MAAM;AACN,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;AACvE,MAAM,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO;AACzD,MAAM,YAAY,CAAC,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,cAAc,GAAG,eAAe,EAAE;AACtF,QAAQ,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG;AACxC,OAAO,CAAC;AACR,MAAM,IAAI,OAAO,EAAE;AACnB,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE;AACpC,UAAU,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,uBAAuB,CAAC;AACvE,QAAQ;AACR,QAAQ,QAAQ;AAChB,UAAU,GAAG;AACb,UAAU,YAAY,CAAC,QAAQ;AAC/B,UAAU,CAAC,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,qBAAqB,GAAG,GAAG,CAAC,CAAC,WAAW;AACnF,SAAS;AACT,MAAM;AACN,MAAM,MAAM,GAAG;AACf,IAAI;AACJ,IAAI,IAAI,UAAU;AAClB,IAAI,IAAI;AACR,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC;AACnD,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,IAAI,GAAG,YAAY,UAAU,EAAE;AACrC,QAAQ,YAAY,CAAC,WAAW,CAAC;AACjC,QAAQ,QAAQ;AAChB,UAAU,GAAG;AACb,UAAU,YAAY,CAAC,QAAQ;AAC/B,UAAU;AACV,SAAS;AACT,MAAM;AACN,MAAM,MAAM,GAAG;AACf,IAAI;AACJ,IAAI,IAAI,UAAU,CAAC,MAAM,GAAG,0BAA0B,EAAE;AACxD,MAAM,YAAY,CAAC,WAAW,CAAC;AAC/B,MAAM,QAAQ;AACd,QAAQ,GAAG;AACX,QAAQ,YAAY,CAAC,QAAQ;AAC7B,QAAQ;AACR,OAAO;AACP,IAAI;AACJ,IAAI,OAAO,IAAI,QAAQ,CAAC,UAAU,EAAE;AACpC,MAAM,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB;AACnD,KAAK,CAAC;AACN,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG;AACnC,IAAI,IAAI,GAAG,YAAY,8BAA8B,EAAE;AACvD,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,mBAAmB,EAAE,GAAG,CAAC,OAAO,CAAC;AAClE,IAAI;AACJ,IAAI,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,eAAe;AACxE,IAAI,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,OAAO,CAAC;AAClD,IAAI,IAAI,GAAG,YAAY,SAAS,IAAI,OAAO,KAAK,cAAc,EAAE;AAChE,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,mBAAmB,EAAE,+BAA+B,CAAC;AACtF,IAAI;AACJ,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC;AACjD,EAAE;AACF;;;;"}

package/build/server/chunks/admin-auth.server-BNuZakYL.js

@@ -0,0 +1,85 @@
+import { error } from '@sveltejs/kit';
+import { p as private_env } from './shared-server-C3WdcJCQ.js';
+
+const SESSION_COOKIE_NAME = "admin_session";
+const SESSION_MAX_AGE_MS = 8 * 60 * 60 * 1e3;
+const REFRESH_COOKIE_NAME = "admin_refresh";
+const REFRESH_MAX_AGE_MS = 30 * 24 * 60 * 60 * 1e3;
+const RATE_LIMIT_MAX = 5;
+const RATE_LIMIT_WINDOW_MS = 15 * 60 * 1e3;
+const rateLimitStore = /* @__PURE__ */ new Map();
+function checkRateLimit(ip) {
+  const now = Date.now();
+  const entry = rateLimitStore.get(ip);
+  if (!entry || now > entry.resetAt) {
+    return { allowed: true };
+  }
+  if (entry.count >= RATE_LIMIT_MAX) {
+    const retryAfter = Math.ceil((entry.resetAt - now) / 1e3);
+    return { allowed: false, retryAfter };
+  }
+  return { allowed: true };
+}
+function recordFailedAttempt(ip) {
+  const now = Date.now();
+  const entry = rateLimitStore.get(ip);
+  if (!entry || now > entry.resetAt) {
+    rateLimitStore.set(ip, { count: 1, resetAt: now + RATE_LIMIT_WINDOW_MS });
+  } else {
+    entry.count += 1;
+  }
+}
+function clearRateLimit(ip) {
+  rateLimitStore.delete(ip);
+}
+function setSessionCookie(cookies, sessionToken) {
+  const isSecure = (
+    // eslint-disable-next-line no-restricted-properties -- NODE_ENV is OS-level, set by Node/Vite, not loaded from .env
+    process.env.NODE_ENV === "production" && private_env.ALLOW_INSECURE_COOKIES !== "true"
+  );
+  cookies.set(SESSION_COOKIE_NAME, sessionToken, {
+    path: "/",
+    httpOnly: true,
+    sameSite: "lax",
+    secure: isSecure,
+    maxAge: SESSION_MAX_AGE_MS / 1e3
+  });
+}
+function destroySession(cookies) {
+  cookies.delete(SESSION_COOKIE_NAME, { path: "/" });
+  cookies.delete(REFRESH_COOKIE_NAME, { path: "/" });
+}
+function setRefreshCookie(cookies, refreshToken) {
+  const isSecure = (
+    // eslint-disable-next-line no-restricted-properties -- NODE_ENV is OS-level, set by Node/Vite, not loaded from .env
+    process.env.NODE_ENV === "production" && private_env.ALLOW_INSECURE_COOKIES !== "true"
+  );
+  cookies.set(REFRESH_COOKIE_NAME, refreshToken, {
+    path: "/",
+    httpOnly: true,
+    sameSite: "lax",
+    secure: isSecure,
+    maxAge: REFRESH_MAX_AGE_MS / 1e3
+  });
+}
+function getRefreshToken(cookies) {
+  return cookies.get(REFRESH_COOKIE_NAME);
+}
+function clearRefreshCookie(cookies) {
+  cookies.delete(REFRESH_COOKIE_NAME, { path: "/" });
+}
+function requireMaxBodySize(request, maxBytes) {
+  const declared = Number(request.headers.get("content-length"));
+  if (Number.isFinite(declared) && declared > maxBytes) {
+    throw error(413, `Request body exceeds the limit for this endpoint.`);
+  }
+}
+function safeRedirectTarget(raw, fallback) {
+  if (typeof raw !== "string" || raw.length < 2) return fallback;
+  if (raw[0] !== "/") return fallback;
+  if (raw[1] === "/" || raw[1] === "\\") return fallback;
+  return raw;
+}
+
+export { clearRateLimit as a, clearRefreshCookie as b, checkRateLimit as c, destroySession as d, requireMaxBodySize as e, setRefreshCookie as f, getRefreshToken as g, setSessionCookie as h, recordFailedAttempt as r, safeRedirectTarget as s };
+//# sourceMappingURL=admin-auth.server-BNuZakYL.js.map

package/build/server/chunks/admin-auth.server-BNuZakYL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-auth.server-BNuZakYL.js","sources":["../../../.svelte-kit/adapter-node/chunks/admin-auth.server.js"],"sourcesContent":["import { error } from \"@sveltejs/kit\";\nimport { p as private_env } from \"./shared-server.js\";\nconst SESSION_COOKIE_NAME = \"admin_session\";\nconst SESSION_MAX_AGE_MS = 8 * 60 * 60 * 1e3;\nconst REFRESH_COOKIE_NAME = \"admin_refresh\";\nconst REFRESH_MAX_AGE_MS = 30 * 24 * 60 * 60 * 1e3;\nconst RATE_LIMIT_MAX = 5;\nconst RATE_LIMIT_WINDOW_MS = 15 * 60 * 1e3;\nconst rateLimitStore = /* @__PURE__ */ new Map();\nfunction checkRateLimit(ip) {\n  const now = Date.now();\n  const entry = rateLimitStore.get(ip);\n  if (!entry || now > entry.resetAt) {\n    return { allowed: true };\n  }\n  if (entry.count >= RATE_LIMIT_MAX) {\n    const retryAfter = Math.ceil((entry.resetAt - now) / 1e3);\n    return { allowed: false, retryAfter };\n  }\n  return { allowed: true };\n}\nfunction recordFailedAttempt(ip) {\n  const now = Date.now();\n  const entry = rateLimitStore.get(ip);\n  if (!entry || now > entry.resetAt) {\n    rateLimitStore.set(ip, { count: 1, resetAt: now + RATE_LIMIT_WINDOW_MS });\n  } else {\n    entry.count += 1;\n  }\n}\nfunction clearRateLimit(ip) {\n  rateLimitStore.delete(ip);\n}\nfunction setSessionCookie(cookies, sessionToken) {\n  const isSecure = (\n    // eslint-disable-next-line no-restricted-properties -- NODE_ENV is OS-level, set by Node/Vite, not loaded from .env\n    process.env.NODE_ENV === \"production\" && private_env.ALLOW_INSECURE_COOKIES !== \"true\"\n  );\n  cookies.set(SESSION_COOKIE_NAME, sessionToken, {\n    path: \"/\",\n    httpOnly: true,\n    sameSite: \"lax\",\n    secure: isSecure,\n    maxAge: SESSION_MAX_AGE_MS / 1e3\n  });\n}\nfunction destroySession(cookies) {\n  cookies.delete(SESSION_COOKIE_NAME, { path: \"/\" });\n  cookies.delete(REFRESH_COOKIE_NAME, { path: \"/\" });\n}\nfunction setRefreshCookie(cookies, refreshToken) {\n  const isSecure = (\n    // eslint-disable-next-line no-restricted-properties -- NODE_ENV is OS-level, set by Node/Vite, not loaded from .env\n    process.env.NODE_ENV === \"production\" && private_env.ALLOW_INSECURE_COOKIES !== \"true\"\n  );\n  cookies.set(REFRESH_COOKIE_NAME, refreshToken, {\n    path: \"/\",\n    httpOnly: true,\n    sameSite: \"lax\",\n    secure: isSecure,\n    maxAge: REFRESH_MAX_AGE_MS / 1e3\n  });\n}\nfunction getRefreshToken(cookies) {\n  return cookies.get(REFRESH_COOKIE_NAME);\n}\nfunction clearRefreshCookie(cookies) {\n  cookies.delete(REFRESH_COOKIE_NAME, { path: \"/\" });\n}\nfunction requireMaxBodySize(request, maxBytes) {\n  const declared = Number(request.headers.get(\"content-length\"));\n  if (Number.isFinite(declared) && declared > maxBytes) {\n    throw error(413, `Request body exceeds the limit for this endpoint.`);\n  }\n}\nfunction safeRedirectTarget(raw, fallback) {\n  if (typeof raw !== \"string\" || raw.length < 2) return fallback;\n  if (raw[0] !== \"/\") return fallback;\n  if (raw[1] === \"/\" || raw[1] === \"\\\\\") return fallback;\n  return raw;\n}\nexport {\n  clearRateLimit as a,\n  clearRefreshCookie as b,\n  checkRateLimit as c,\n  destroySession as d,\n  requireMaxBodySize as e,\n  setRefreshCookie as f,\n  getRefreshToken as g,\n  setSessionCookie as h,\n  recordFailedAttempt as r,\n  safeRedirectTarget as s\n};\n"],"names":[],"mappings":";;;AAEA,MAAM,mBAAmB,GAAG,eAAe;AAC3C,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG;AAC5C,MAAM,mBAAmB,GAAG,eAAe;AAC3C,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG;AAClD,MAAM,cAAc,GAAG,CAAC;AACxB,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG;AAC1C,MAAM,cAAc,mBAAmB,IAAI,GAAG,EAAE;AAChD,SAAS,cAAc,CAAC,EAAE,EAAE;AAC5B,EAAE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;AACxB,EAAE,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;AACtC,EAAE,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE;AACrC,IAAI,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;AAC5B,EAAE;AACF,EAAE,IAAI,KAAK,CAAC,KAAK,IAAI,cAAc,EAAE;AACrC,IAAI,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,IAAI,GAAG,CAAC;AAC7D,IAAI,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE;AACzC,EAAE;AACF,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;AAC1B;AACA,SAAS,mBAAmB,CAAC,EAAE,EAAE;AACjC,EAAE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;AACxB,EAAE,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;AACtC,EAAE,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE;AACrC,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,oBAAoB,EAAE,CAAC;AAC7E,EAAE,CAAC,MAAM;AACT,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC;AACpB,EAAE;AACF;AACA,SAAS,cAAc,CAAC,EAAE,EAAE;AAC5B,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;AAC3B;AACA,SAAS,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE;AACjD,EAAE,MAAM,QAAQ;AAChB;AACA,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,WAAW,CAAC,sBAAsB,KAAK;AACpF,GAAG;AACH,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,YAAY,EAAE;AACjD,IAAI,IAAI,EAAE,GAAG;AACb,IAAI,QAAQ,EAAE,IAAI;AAClB,IAAI,QAAQ,EAAE,KAAK;AACnB,IAAI,MAAM,EAAE,QAAQ;AACpB,IAAI,MAAM,EAAE,kBAAkB,GAAG;AACjC,GAAG,CAAC;AACJ;AACA,SAAS,cAAc,CAAC,OAAO,EAAE;AACjC,EAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACpD,EAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACpD;AACA,SAAS,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE;AACjD,EAAE,MAAM,QAAQ;AAChB;AACA,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,WAAW,CAAC,sBAAsB,KAAK;AACpF,GAAG;AACH,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,YAAY,EAAE;AACjD,IAAI,IAAI,EAAE,GAAG;AACb,IAAI,QAAQ,EAAE,IAAI;AAClB,IAAI,QAAQ,EAAE,KAAK;AACnB,IAAI,MAAM,EAAE,QAAQ;AACpB,IAAI,MAAM,EAAE,kBAAkB,GAAG;AACjC,GAAG,CAAC;AACJ;AACA,SAAS,eAAe,CAAC,OAAO,EAAE;AAClC,EAAE,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;AACzC;AACA,SAAS,kBAAkB,CAAC,OAAO,EAAE;AACrC,EAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACpD;AACA,SAAS,kBAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE;AAC/C,EAAE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAChE,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,QAAQ,EAAE;AACxD,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,iDAAiD,CAAC,CAAC;AACzE,EAAE;AACF;AACA,SAAS,kBAAkB,CAAC,GAAG,EAAE,QAAQ,EAAE;AAC3C,EAAE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,QAAQ;AAChE,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,OAAO,QAAQ;AACrC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,OAAO,QAAQ;AACxD,EAAE,OAAO,GAAG;AACZ;;;;"}