@selvajs/selva 4.6.20 → 4.6.21-beta.1

package/build/server/chunks/chunks/redirect.js-1CZ30qn2.js

@@ -0,0 +1,9 @@
+function safeRedirectTarget(raw, fallback) {
+  if (typeof raw !== "string" || raw.length < 2) return fallback;
+  if (raw[0] !== "/") return fallback;
+  if (raw[1] === "/" || raw[1] === "\\") return fallback;
+  return raw;
+}
+
+export { safeRedirectTarget as s };
+//# sourceMappingURL=redirect.js-1CZ30qn2.js.map

package/build/server/chunks/chunks/redirect.js-1CZ30qn2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect.js-1CZ30qn2.js","sources":["../../../../.svelte-kit/output/server/chunks/redirect.js"],"sourcesContent":["function safeRedirectTarget(raw, fallback) {\n  if (typeof raw !== \"string\" || raw.length < 2) return fallback;\n  if (raw[0] !== \"/\") return fallback;\n  if (raw[1] === \"/\" || raw[1] === \"\\\\\") return fallback;\n  return raw;\n}\nexport {\n  safeRedirectTarget as s\n};\n"],"names":[],"mappings":"AAAA,SAAS,kBAAkB,CAAC,GAAG,EAAE,QAAQ,EAAE;AAC3C,EAAE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,QAAQ;AAChE,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,OAAO,QAAQ;AACrC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,OAAO,QAAQ;AACxD,EAAE,OAAO,GAAG;AACZ;;;;"}

package/build/server/chunks/chunks/refresh-cw.js-CWyfzhgM.js

@@ -0,0 +1,22 @@
+import { a7 as spread_props } from './index3.js-1TgPl-ig.js';
+import { I as Icon } from './utils3.js-DyHrfoD2.js';
+
+function Refresh_cw($$renderer, $$props) {
+  let { $$slots, $$events, ...props } = $$props;
+  const iconNode = [
+    [
+      "path",
+      { "d": "M3 12a9 9 0 0 1 9-9 9.75 9.75 0 0 1 6.74 2.74L21 8" }
+    ],
+    ["path", { "d": "M21 3v5h-5" }],
+    [
+      "path",
+      { "d": "M21 12a9 9 0 0 1-9 9 9.75 9.75 0 0 1-6.74-2.74L3 16" }
+    ],
+    ["path", { "d": "M8 16H3v5" }]
+  ];
+  Icon($$renderer, spread_props([{ name: "refresh-cw" }, props, { iconNode }]));
+}
+
+export { Refresh_cw as R };
+//# sourceMappingURL=refresh-cw.js-CWyfzhgM.js.map

package/build/server/chunks/chunks/refresh-cw.js-CWyfzhgM.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-cw.js-CWyfzhgM.js","sources":["../../../../.svelte-kit/output/server/chunks/refresh-cw.js"],"sourcesContent":["import { j as spread_props } from \"./index3.js\";\nimport { I as Icon } from \"./utils3.js\";\nfunction Refresh_cw($$renderer, $$props) {\n  let { $$slots, $$events, ...props } = $$props;\n  const iconNode = [\n    [\n      \"path\",\n      { \"d\": \"M3 12a9 9 0 0 1 9-9 9.75 9.75 0 0 1 6.74 2.74L21 8\" }\n    ],\n    [\"path\", { \"d\": \"M21 3v5h-5\" }],\n    [\n      \"path\",\n      { \"d\": \"M21 12a9 9 0 0 1-9 9 9.75 9.75 0 0 1-6.74-2.74L3 16\" }\n    ],\n    [\"path\", { \"d\": \"M8 16H3v5\" }]\n  ];\n  Icon($$renderer, spread_props([{ name: \"refresh-cw\" }, props, { iconNode }]));\n}\nexport {\n  Refresh_cw as R\n};\n"],"names":[],"mappings":";;;AAEA,SAAS,UAAU,CAAC,UAAU,EAAE,OAAO,EAAE;AACzC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,GAAG,OAAO;AAC/C,EAAE,MAAM,QAAQ,GAAG;AACnB,IAAI;AACJ,MAAM,MAAM;AACZ,MAAM,EAAE,GAAG,EAAE,oDAAoD;AACjE,KAAK;AACL,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;AACnC,IAAI;AACJ,MAAM,MAAM;AACZ,MAAM,EAAE,GAAG,EAAE,qDAAqD;AAClE,KAAK;AACL,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE;AACjC,GAAG;AACH,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;AAC/E;;;;"}

package/build/server/chunks/chunks/resolve.server.js-BQY6Vw9q.js

@@ -0,0 +1,50 @@
+import { error } from '@sveltejs/kit';
+import { S as SYSTEM_CONTEXT } from './context.js-D8E0GFTw.js';
+import { p as providers, m as getDefinitionMeta, e as getProjectProvider, i as flag } from './providers.server.js-BKhwGvoh.js';
+import { h as hashToken, l as looksLikeShareToken } from './token2.server.js-Cjb4XaWC.js';
+
+function readShareToken(request, url) {
+  if (!flag("ENABLE_SHARING")) return null;
+  const q = url.searchParams.get("token");
+  if (q && looksLikeShareToken(q)) return q;
+  const auth = request.headers.get("authorization");
+  if (auth?.startsWith("Bearer ")) {
+    const candidate = auth.slice("Bearer ".length).trim();
+    if (looksLikeShareToken(candidate)) return candidate;
+  }
+  return null;
+}
+async function tryResolveShareToken(request, url, requestedDefinitionId, requestedChannel, opts) {
+  const raw = readShareToken(request, url);
+  if (!raw) return null;
+  const tokenHash = hashToken(raw);
+  const link = await providers.data.shareLinks.getByTokenHash(SYSTEM_CONTEXT, tokenHash);
+  if (!link) throw error(401, "Invalid or revoked share token.");
+  if (link.expiresAt && new Date(link.expiresAt).getTime() <= Date.now()) {
+    throw error(401, "Share token has expired.");
+  }
+  if (link.definitionId !== requestedDefinitionId) {
+    throw error(403, "Share token is not valid for this definition.");
+  }
+  if (link.channel !== requestedChannel) {
+    throw error(403, `Share token is for the '${link.channel}' channel only.`);
+  }
+  if (opts.requireSolve && !link.allowSolve) {
+    throw error(403, "Share token grants view-only access.");
+  }
+  const def = await getDefinitionMeta().get(SYSTEM_CONTEXT, link.definitionId);
+  if (!def) throw error(401, "Share token target no longer exists.");
+  const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, def.projectId);
+  if (!project) throw error(401, "Share token target no longer exists.");
+  const ctx = {
+    userId: "",
+    actingOrgId: project.orgId,
+    platformPermissions: [],
+    orgPermissions: [],
+    system: true
+  };
+  return { link, ctx };
+}
+
+export { tryResolveShareToken as t };
+//# sourceMappingURL=resolve.server.js-BQY6Vw9q.js.map

package/build/server/chunks/chunks/resolve.server.js-BQY6Vw9q.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.server.js-BQY6Vw9q.js","sources":["../../../../.svelte-kit/output/server/chunks/resolve.server.js"],"sourcesContent":["import { error } from \"@sveltejs/kit\";\nimport { S as SYSTEM_CONTEXT } from \"./context.js\";\nimport { p as providers, s as getDefinitionMeta, m as getProjectProvider, f as flag } from \"./providers.server.js\";\nimport { h as hashToken, l as looksLikeShareToken } from \"./token2.server.js\";\nfunction readShareToken(request, url) {\n  if (!flag(\"ENABLE_SHARING\")) return null;\n  const q = url.searchParams.get(\"token\");\n  if (q && looksLikeShareToken(q)) return q;\n  const auth = request.headers.get(\"authorization\");\n  if (auth?.startsWith(\"Bearer \")) {\n    const candidate = auth.slice(\"Bearer \".length).trim();\n    if (looksLikeShareToken(candidate)) return candidate;\n  }\n  return null;\n}\nasync function tryResolveShareToken(request, url, requestedDefinitionId, requestedChannel, opts) {\n  const raw = readShareToken(request, url);\n  if (!raw) return null;\n  const tokenHash = hashToken(raw);\n  const link = await providers.data.shareLinks.getByTokenHash(SYSTEM_CONTEXT, tokenHash);\n  if (!link) throw error(401, \"Invalid or revoked share token.\");\n  if (link.expiresAt && new Date(link.expiresAt).getTime() <= Date.now()) {\n    throw error(401, \"Share token has expired.\");\n  }\n  if (link.definitionId !== requestedDefinitionId) {\n    throw error(403, \"Share token is not valid for this definition.\");\n  }\n  if (link.channel !== requestedChannel) {\n    throw error(403, `Share token is for the '${link.channel}' channel only.`);\n  }\n  if (opts.requireSolve && !link.allowSolve) {\n    throw error(403, \"Share token grants view-only access.\");\n  }\n  const def = await getDefinitionMeta().get(SYSTEM_CONTEXT, link.definitionId);\n  if (!def) throw error(401, \"Share token target no longer exists.\");\n  const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, def.projectId);\n  if (!project) throw error(401, \"Share token target no longer exists.\");\n  const ctx = {\n    userId: \"\",\n    actingOrgId: project.orgId,\n    platformPermissions: [],\n    orgPermissions: [],\n    system: true\n  };\n  return { link, ctx };\n}\nexport {\n  tryResolveShareToken as t\n};\n"],"names":[],"mappings":";;;;;AAIA,SAAS,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE;AACtC,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,OAAO,IAAI;AAC1C,EAAE,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;AACzC,EAAE,IAAI,CAAC,IAAI,mBAAmB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;AAC3C,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;AACnD,EAAE,IAAI,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE;AACnC,IAAI,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;AACzD,IAAI,IAAI,mBAAmB,CAAC,SAAS,CAAC,EAAE,OAAO,SAAS;AACxD,EAAE;AACF,EAAE,OAAO,IAAI;AACb;AACA,eAAe,oBAAoB,CAAC,OAAO,EAAE,GAAG,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,IAAI,EAAE;AACjG,EAAE,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC;AAC1C,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,IAAI;AACvB,EAAE,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC;AAClC,EAAE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,cAAc,EAAE,SAAS,CAAC;AACxF,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,iCAAiC,CAAC;AAChE,EAAE,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;AAC1E,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,0BAA0B,CAAC;AAChD,EAAE;AACF,EAAE,IAAI,IAAI,CAAC,YAAY,KAAK,qBAAqB,EAAE;AACnD,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,+CAA+C,CAAC;AACrE,EAAE;AACF,EAAE,IAAI,IAAI,CAAC,OAAO,KAAK,gBAAgB,EAAE;AACzC,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,wBAAwB,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;AAC9E,EAAE;AACF,EAAE,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;AAC7C,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,sCAAsC,CAAC;AAC5D,EAAE;AACF,EAAE,MAAM,GAAG,GAAG,MAAM,iBAAiB,EAAE,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC;AAC9E,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,sCAAsC,CAAC;AACpE,EAAE,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,GAAG,CAAC,SAAS,CAAC;AACtF,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,sCAAsC,CAAC;AACxE,EAAE,MAAM,GAAG,GAAG;AACd,IAAI,MAAM,EAAE,EAAE;AACd,IAAI,WAAW,EAAE,OAAO,CAAC,KAAK;AAC9B,IAAI,mBAAmB,EAAE,EAAE;AAC3B,IAAI,cAAc,EAAE,EAAE;AACtB,IAAI,MAAM,EAAE;AACZ,GAAG;AACH,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE;AACtB;;;;"}