@selvajs/selva 4.7.0-beta.3 → 4.7.0-beta.4

package/build/server/chunks/entries/endpoints/api/org/compute/{_server.ts.js-DKhLOB_A.js.map → _server.ts.js-Cb3PJwZ1.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_server.ts.js-DKhLOB_A.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/org/compute/_server.ts.js"],"sourcesContent":["import \"../../../../../chunks/src.js\";\nimport { F as isPlatformServer, P as isOrgServer, a as getComputeServerConfigStore, t as flag } from \"../../../../../chunks/providers.server.js\";\nimport { a as serversVisibleTo } from \"../../../../../chunks/utils2.js\";\nimport { b as requireManageOrgCompute } from \"../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { t as evictChangedServers } from \"../../../../../chunks/evictChangedServers.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/org/compute/+server.ts\nfunction requireFlag() {\n\tif (!flag(\"ALLOW_ORG_COMPUTE_OVERRIDE\")) apiError(403, ApiErrorCode.FORBIDDEN, \"Per-org compute override is disabled on this instance (ALLOW_ORG_COMPUTE_OVERRIDE).\");\n}\nvar GET = async ({ locals }) => {\n\trequireFlag();\n\trequireManageOrgCompute(locals);\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tconst config = await getComputeServerConfigStore().getConfig(ctx);\n\tconst orgId = ctx.actingOrgId;\n\tconst owned = config.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => {\n\t\tconst { apiKey: _apiKey, hasApiKey, ...rest } = s;\n\t\treturn {\n\t\t\t...rest,\n\t\t\thasApiKey: !!hasApiKey\n\t\t};\n\t});\n\tconst catalog = serversVisibleTo(config, orgId).map((s) => ({\n\t\tid: s.id,\n\t\tlabel: s.label,\n\t\tserverUrl: s.serverUrl,\n\t\tscope: s.scope,\n\t\tsource: isPlatformServer(s) ? \"platform\" : \"org\",\n\t\ttimeoutMs: s.timeoutMs,\n\t\tretryCount: s.retryCount\n\t}));\n\treturn json({\n\t\tservers: owned,\n\t\tdefaultServerId: config.orgDefaults?.[orgId] ?? null,\n\t\tglobalDefaultServerId: config.defaultServerId ?? null,\n\t\tcatalog\n\t});\n};\nvar PUT = async ({ request, locals }) => {\n\trequireFlag();\n\trequireManageOrgCompute(locals);\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tconst orgId = ctx.actingOrgId;\n\tconst body = await request.json().catch(() => null);\n\tif (!body || typeof body !== \"object\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid request body\");\n\tconst incoming = body;\n\tif (!Array.isArray(incoming.servers)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"servers must be an array\");\n\tfor (const s of incoming.servers) {\n\t\tif (!s.id || typeof s.id !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs an id\");\n\t\tif (!s.label || typeof s.label !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs a label\");\n\t\tif (!s.serverUrl || typeof s.serverUrl !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs a serverUrl\");\n\t\ttry {\n\t\t\tnew URL(s.serverUrl);\n\t\t} catch {\n\t\t\tapiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid serverUrl: ${s.serverUrl}`);\n\t\t}\n\t\tif (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"apiKey must be a string, null, or omitted\");\n\t}\n\tconst provider = getComputeServerConfigStore();\n\tconst existing = await provider.getConfig(ctx, { includeApiKeys: true });\n\tconst storedKeyById = new Map(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => [s.id, s.apiKey]));\n\tconst next = incoming.servers.map((s) => ({\n\t\tid: s.id,\n\t\tscope: \"org\",\n\t\townerOrgId: orgId,\n\t\tlabel: s.label,\n\t\tserverUrl: s.serverUrl,\n\t\ttimeoutMs: s.timeoutMs,\n\t\tretryCount: s.retryCount,\n\t\tapiKey: s.apiKey === null ? void 0 : s.apiKey ? s.apiKey : storedKeyById.get(s.id)\n\t}));\n\tif (typeof incoming.defaultServerId === \"string\") {\n\t\tconst projected = {\n\t\t\tservers: [...existing.servers.filter((s) => !(isOrgServer(s) && s.ownerOrgId === orgId)), ...next],\n\t\t\tdefaultServerId: existing.defaultServerId,\n\t\t\torgDefaults: existing.orgDefaults\n\t\t};\n\t\tif (!new Set(serversVisibleTo(projected, orgId).map((s) => s.id)).has(incoming.defaultServerId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"defaultServerId must reference a server visible to this organization\");\n\t}\n\tawait provider.saveOrgServers(ctx, orgId, next, incoming.defaultServerId);\n\tevictChangedServers(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId), next);\n\treturn new Response(null, { status: 204 });\n};\n//#endregion\nexport { GET, PUT };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA;AACA,SAAS,WAAW,GAAG;AACvB,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,qFAAqF,CAAC;AACtK;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAChC,CAAC,WAAW,EAAE;AACd,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC;AAClE,CAAC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC9B,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK;AACjG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC;AACnD,EAAE,OAAO;AACT,GAAG,GAAG,IAAI;AACV,GAAG,SAAS,EAAE,CAAC,CAAC;AAChB,GAAG;AACH,CAAC,CAAC,CAAC;AACH,CAAC,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC7D,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;AACV,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,KAAK;AAClD,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,UAAU,EAAE,CAAC,CAAC;AAChB,EAAE,CAAC,CAAC;AACJ,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,OAAO,EAAE,KAAK;AAChB,EAAE,eAAe,EAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,IAAI,IAAI;AACtD,EAAE,qBAAqB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;AACvD,EAAE;AACF,EAAE,CAAC;AACH;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACzC,CAAC,WAAW,EAAE;AACd,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC9B,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AAC7G,CAAC,MAAM,QAAQ,GAAG,IAAI;AACtB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;AAChH,CAAC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE;AACnC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACjH,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;AACzH,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,+BAA+B,CAAC;AACrI,EAAE,IAAI;AACN,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACvB,EAAE,CAAC,CAAC,MAAM;AACV,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACrF,EAAE;AACF,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2CAA2C,CAAC;AAC1K,CAAC;AACD,CAAC,MAAM,QAAQ,GAAG,2BAA2B,EAAE;AAC/C,CAAC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;AACzE,CAAC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACrI,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC3C,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;AACV,EAAE,KAAK,EAAE,KAAK;AACd,EAAE,UAAU,EAAE,KAAK;AACnB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;AAC1B,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;AACnF,EAAE,CAAC,CAAC;AACJ,CAAC,IAAI,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ,EAAE;AACnD,EAAE,MAAM,SAAS,GAAG;AACpB,GAAG,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC;AACrG,GAAG,eAAe,EAAE,QAAQ,CAAC,eAAe;AAC5C,GAAG,WAAW,EAAE,QAAQ,CAAC;AACzB,GAAG;AACH,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sEAAsE,CAAC;AACxN,CAAC;AACD,CAAC,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC;AAC1E,CAAC,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,EAAE,IAAI,CAAC;AACpG,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C;;;;"}
+{"version":3,"file":"_server.ts.js-Cb3PJwZ1.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/org/compute/_server.ts.js"],"sourcesContent":["import \"../../../../../chunks/src.js\";\nimport { F as isPlatformServer, P as isOrgServer, a as getComputeServerConfigStore, t as flag } from \"../../../../../chunks/providers.server.js\";\nimport { a as serversVisibleTo } from \"../../../../../chunks/utils2.js\";\nimport { b as requireManageOrgCompute } from \"../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { t as evictChangedServers } from \"../../../../../chunks/evictChangedServers.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/org/compute/+server.ts\nfunction requireFlag() {\n\tif (!flag(\"ALLOW_ORG_COMPUTE_OVERRIDE\")) apiError(403, ApiErrorCode.FORBIDDEN, \"Per-org compute override is disabled on this instance (ALLOW_ORG_COMPUTE_OVERRIDE).\");\n}\nvar GET = async ({ locals }) => {\n\trequireFlag();\n\trequireManageOrgCompute(locals);\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tconst config = await getComputeServerConfigStore().getConfig(ctx);\n\tconst orgId = ctx.actingOrgId;\n\tconst owned = config.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => {\n\t\tconst { apiKey: _apiKey, hasApiKey, ...rest } = s;\n\t\treturn {\n\t\t\t...rest,\n\t\t\thasApiKey: !!hasApiKey\n\t\t};\n\t});\n\tconst catalog = serversVisibleTo(config, orgId).map((s) => ({\n\t\tid: s.id,\n\t\tlabel: s.label,\n\t\tserverUrl: s.serverUrl,\n\t\tscope: s.scope,\n\t\tsource: isPlatformServer(s) ? \"platform\" : \"org\",\n\t\ttimeoutMs: s.timeoutMs,\n\t\tretryCount: s.retryCount\n\t}));\n\treturn json({\n\t\tservers: owned,\n\t\tdefaultServerId: config.orgDefaults?.[orgId] ?? null,\n\t\tglobalDefaultServerId: config.defaultServerId ?? null,\n\t\tcatalog\n\t});\n};\nvar PUT = async ({ request, locals }) => {\n\trequireFlag();\n\trequireManageOrgCompute(locals);\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tconst orgId = ctx.actingOrgId;\n\tconst body = await request.json().catch(() => null);\n\tif (!body || typeof body !== \"object\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid request body\");\n\tconst incoming = body;\n\tif (!Array.isArray(incoming.servers)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"servers must be an array\");\n\tfor (const s of incoming.servers) {\n\t\tif (!s.id || typeof s.id !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs an id\");\n\t\tif (!s.label || typeof s.label !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs a label\");\n\t\tif (!s.serverUrl || typeof s.serverUrl !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs a serverUrl\");\n\t\ttry {\n\t\t\tnew URL(s.serverUrl);\n\t\t} catch {\n\t\t\tapiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid serverUrl: ${s.serverUrl}`);\n\t\t}\n\t\tif (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"apiKey must be a string, null, or omitted\");\n\t}\n\tconst provider = getComputeServerConfigStore();\n\tconst existing = await provider.getConfig(ctx, { includeApiKeys: true });\n\tconst storedKeyById = new Map(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => [s.id, s.apiKey]));\n\tconst next = incoming.servers.map((s) => ({\n\t\tid: s.id,\n\t\tscope: \"org\",\n\t\townerOrgId: orgId,\n\t\tlabel: s.label,\n\t\tserverUrl: s.serverUrl,\n\t\ttimeoutMs: s.timeoutMs,\n\t\tretryCount: s.retryCount,\n\t\tapiKey: s.apiKey === null ? void 0 : s.apiKey ? s.apiKey : storedKeyById.get(s.id)\n\t}));\n\tif (typeof incoming.defaultServerId === \"string\") {\n\t\tconst projected = {\n\t\t\tservers: [...existing.servers.filter((s) => !(isOrgServer(s) && s.ownerOrgId === orgId)), ...next],\n\t\t\tdefaultServerId: existing.defaultServerId,\n\t\t\torgDefaults: existing.orgDefaults\n\t\t};\n\t\tif (!new Set(serversVisibleTo(projected, orgId).map((s) => s.id)).has(incoming.defaultServerId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"defaultServerId must reference a server visible to this organization\");\n\t}\n\tawait provider.saveOrgServers(ctx, orgId, next, incoming.defaultServerId);\n\tevictChangedServers(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId), next);\n\treturn new Response(null, { status: 204 });\n};\n//#endregion\nexport { GET, PUT };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA;AACA,SAAS,WAAW,GAAG;AACvB,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,qFAAqF,CAAC;AACtK;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAChC,CAAC,WAAW,EAAE;AACd,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC;AAClE,CAAC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC9B,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK;AACjG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC;AACnD,EAAE,OAAO;AACT,GAAG,GAAG,IAAI;AACV,GAAG,SAAS,EAAE,CAAC,CAAC;AAChB,GAAG;AACH,CAAC,CAAC,CAAC;AACH,CAAC,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC7D,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;AACV,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,KAAK;AAClD,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,UAAU,EAAE,CAAC,CAAC;AAChB,EAAE,CAAC,CAAC;AACJ,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,OAAO,EAAE,KAAK;AAChB,EAAE,eAAe,EAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,IAAI,IAAI;AACtD,EAAE,qBAAqB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;AACvD,EAAE;AACF,EAAE,CAAC;AACH;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACzC,CAAC,WAAW,EAAE;AACd,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC9B,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AAC7G,CAAC,MAAM,QAAQ,GAAG,IAAI;AACtB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;AAChH,CAAC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE;AACnC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACjH,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;AACzH,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,+BAA+B,CAAC;AACrI,EAAE,IAAI;AACN,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACvB,EAAE,CAAC,CAAC,MAAM;AACV,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACrF,EAAE;AACF,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2CAA2C,CAAC;AAC1K,CAAC;AACD,CAAC,MAAM,QAAQ,GAAG,2BAA2B,EAAE;AAC/C,CAAC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;AACzE,CAAC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACrI,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC3C,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;AACV,EAAE,KAAK,EAAE,KAAK;AACd,EAAE,UAAU,EAAE,KAAK;AACnB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;AAC1B,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;AACnF,EAAE,CAAC,CAAC;AACJ,CAAC,IAAI,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ,EAAE;AACnD,EAAE,MAAM,SAAS,GAAG;AACpB,GAAG,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC;AACrG,GAAG,eAAe,EAAE,QAAQ,CAAC,eAAe;AAC5C,GAAG,WAAW,EAAE,QAAQ,CAAC;AACzB,GAAG;AACH,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sEAAsE,CAAC;AACxN,CAAC;AACD,CAAC,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC;AAC1E,CAAC,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,EAAE,IAAI,CAAC;AACpG,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C;;;;"}

package/build/server/chunks/entries/endpoints/auth/email/callback/{_server.ts.js-DCjY9UXh.js → _server.ts.js-BLbLoQ6f.js}

@@ -1,6 +1,6 @@
 import { a as getAuthProvider } from '../../../../../chunks/providers.server.js-Ck45V_zF.js';
 import { a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-DNy3MKq4.js';
-import { s as setSessionCookie, a as setRefreshCookie } from '../../../../../chunks/admin-auth.server.js-CpJLI73r.js';
+import { s as setSessionCookie, a as setRefreshCookie } from '../../../../../chunks/admin-auth.server.js-DBasnefm.js';
 import { s as safeRedirectTarget } from '../../../../../chunks/redirect.js-B4i9gSkt.js';
 import { b as bootstrapUserSession } from '../../../../../chunks/auth-bootstrap.server.js-BkR4caMr.js';
 import { redirect } from '@sveltejs/kit';
@@ -17,8 +17,8 @@ import 'node:fs';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
 import '../../../../../chunks/utils2.js-B5FjFEwk.js';
-import '../../../../../chunks/compute.js-C2CcEWW8.js';
-import '../../../../../chunks/chunk-3SEQKFGD.js-hLBC6n0U.js';
+import '../../../../../chunks/compute.js-DGTy3YjO.js';
+import '../../../../../chunks/chunk-6TMSTNHN.js-3Bz2KNTb.js';
 import 'node:zlib';
 import 'node:util';
 import 'node:dns/promises';
@@ -46,4 +46,4 @@ var GET = async ({ url, cookies }) => {
 };
 
 export { GET };
-//# sourceMappingURL=_server.ts.js-DCjY9UXh.js.map
+//# sourceMappingURL=_server.ts.js-BLbLoQ6f.js.map

package/build/server/chunks/entries/endpoints/auth/email/callback/{_server.ts.js-DCjY9UXh.js.map → _server.ts.js-BLbLoQ6f.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_server.ts.js-DCjY9UXh.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/auth/email/callback/_server.ts.js"],"sourcesContent":["import { r as getAuthProvider } from \"../../../../../chunks/providers.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { c as setRefreshCookie, l as setSessionCookie } from \"../../../../../chunks/admin-auth.server.js\";\nimport \"../../../../../chunks/auth.server.js\";\nimport { t as safeRedirectTarget } from \"../../../../../chunks/redirect.js\";\nimport { t as bootstrapUserSession } from \"../../../../../chunks/auth-bootstrap.server.js\";\nimport { redirect } from \"@sveltejs/kit\";\n//#region src/routes/auth/email/callback/+server.ts\n/**\n* GET /auth/email/callback?token_hash=...&type=...&redirectTo=/library\n*\n* The user clicked the magic link in their inbox. Hand the full URL to the\n* adapter (it knows its own token format), set cookies on success, redirect\n* to the destination. Mirrors `/auth/supabase/callback` but capability-named\n* — this route doesn't know which IdP brokered the email.\n*/\nvar GET = async ({ url, cookies }) => {\n\tconst emailLink = getAuthProvider().emailLink;\n\tif (!emailLink) apiError(501, ApiErrorCode.INTERNAL, \"Email sign-in is not supported by this provider.\");\n\tconst result = await emailLink.verifyMagicLink(url.toString());\n\tif (!result) apiError(401, ApiErrorCode.UNAUTHORIZED, \"This sign-in link is invalid or has expired.\");\n\tawait bootstrapUserSession(result.user);\n\tsetSessionCookie(cookies, result.sessionToken);\n\tif (result.refreshToken) setRefreshCookie(cookies, result.refreshToken);\n\tredirect(303, safeRedirectTarget(url.searchParams.get(\"redirectTo\"), \"/library\"));\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK;AACtC,CAAC,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC,SAAS;AAC9C,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,kDAAkD,CAAC;AACzG,CAAC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;AAC/D,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,8CAA8C,CAAC;AACtG,CAAC,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;AACxC,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAC/C,CAAC,IAAI,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACxE,CAAC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC,CAAC;AAClF;;;;"}
+{"version":3,"file":"_server.ts.js-BLbLoQ6f.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/auth/email/callback/_server.ts.js"],"sourcesContent":["import { r as getAuthProvider } from \"../../../../../chunks/providers.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { c as setRefreshCookie, l as setSessionCookie } from \"../../../../../chunks/admin-auth.server.js\";\nimport \"../../../../../chunks/auth.server.js\";\nimport { t as safeRedirectTarget } from \"../../../../../chunks/redirect.js\";\nimport { t as bootstrapUserSession } from \"../../../../../chunks/auth-bootstrap.server.js\";\nimport { redirect } from \"@sveltejs/kit\";\n//#region src/routes/auth/email/callback/+server.ts\n/**\n* GET /auth/email/callback?token_hash=...&type=...&redirectTo=/library\n*\n* The user clicked the magic link in their inbox. Hand the full URL to the\n* adapter (it knows its own token format), set cookies on success, redirect\n* to the destination. Mirrors `/auth/supabase/callback` but capability-named\n* — this route doesn't know which IdP brokered the email.\n*/\nvar GET = async ({ url, cookies }) => {\n\tconst emailLink = getAuthProvider().emailLink;\n\tif (!emailLink) apiError(501, ApiErrorCode.INTERNAL, \"Email sign-in is not supported by this provider.\");\n\tconst result = await emailLink.verifyMagicLink(url.toString());\n\tif (!result) apiError(401, ApiErrorCode.UNAUTHORIZED, \"This sign-in link is invalid or has expired.\");\n\tawait bootstrapUserSession(result.user);\n\tsetSessionCookie(cookies, result.sessionToken);\n\tif (result.refreshToken) setRefreshCookie(cookies, result.refreshToken);\n\tredirect(303, safeRedirectTarget(url.searchParams.get(\"redirectTo\"), \"/library\"));\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK;AACtC,CAAC,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC,SAAS;AAC9C,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,kDAAkD,CAAC;AACzG,CAAC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;AAC/D,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,8CAA8C,CAAC;AACtG,CAAC,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;AACxC,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAC/C,CAAC,IAAI,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACxE,CAAC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC,CAAC;AAClF;;;;"}

package/build/server/chunks/entries/endpoints/auth/supabase/callback/{_server.ts.js-BG9aKYc1.js → _server.ts.js-BXmQuVvj.js}

@@ -1,6 +1,6 @@
 import { a as getAuthProvider } from '../../../../../chunks/providers.server.js-Ck45V_zF.js';
 import { a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-DNy3MKq4.js';
-import { s as setSessionCookie, a as setRefreshCookie } from '../../../../../chunks/admin-auth.server.js-CpJLI73r.js';
+import { s as setSessionCookie, a as setRefreshCookie } from '../../../../../chunks/admin-auth.server.js-DBasnefm.js';
 import { s as safeRedirectTarget } from '../../../../../chunks/redirect.js-B4i9gSkt.js';
 import { b as bootstrapUserSession } from '../../../../../chunks/auth-bootstrap.server.js-BkR4caMr.js';
 import { redirect } from '@sveltejs/kit';
@@ -17,8 +17,8 @@ import 'node:fs';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
 import '../../../../../chunks/utils2.js-B5FjFEwk.js';
-import '../../../../../chunks/compute.js-C2CcEWW8.js';
-import '../../../../../chunks/chunk-3SEQKFGD.js-hLBC6n0U.js';
+import '../../../../../chunks/compute.js-DGTy3YjO.js';
+import '../../../../../chunks/chunk-6TMSTNHN.js-3Bz2KNTb.js';
 import 'node:zlib';
 import 'node:util';
 import 'node:dns/promises';
@@ -50,4 +50,4 @@ var GET = async ({ url, cookies }) => {
 };
 
 export { GET };
-//# sourceMappingURL=_server.ts.js-BG9aKYc1.js.map
+//# sourceMappingURL=_server.ts.js-BXmQuVvj.js.map

package/build/server/chunks/entries/endpoints/auth/supabase/callback/{_server.ts.js-BG9aKYc1.js.map → _server.ts.js-BXmQuVvj.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_server.ts.js-BG9aKYc1.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/auth/supabase/callback/_server.ts.js"],"sourcesContent":["import { r as getAuthProvider } from \"../../../../../chunks/providers.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { c as setRefreshCookie, l as setSessionCookie } from \"../../../../../chunks/admin-auth.server.js\";\nimport \"../../../../../chunks/auth.server.js\";\nimport { t as safeRedirectTarget } from \"../../../../../chunks/redirect.js\";\nimport { t as bootstrapUserSession } from \"../../../../../chunks/auth-bootstrap.server.js\";\nimport { redirect } from \"@sveltejs/kit\";\n//#region src/routes/auth/supabase/callback/+server.ts\n/**\n* GET /auth/supabase/callback?code=...&redirectTo=/library\n*\n* Completes a Supabase OAuth round-trip. Exchanges the authorization code\n* for a session, sets the session cookie, and redirects to `redirectTo`.\n*\n* Post-verification flow (data-row seeding + first-admin bootstrap) lives in\n* `bootstrapUserSession` so the email-link and OAuth paths follow the same\n* sequence in the same order.\n*/\nvar GET = async ({ url, cookies }) => {\n\tconst code = url.searchParams.get(\"code\");\n\tif (!code) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing authorization code\");\n\tconst oauth = getAuthProvider().oauth;\n\tif (!oauth) apiError(501, ApiErrorCode.INTERNAL, \"OAuth is not supported by the configured auth provider.\");\n\tconst result = await oauth.exchangeOAuthCode(code);\n\tif (!result) apiError(401, ApiErrorCode.UNAUTHORIZED, \"OAuth exchange failed\");\n\tawait bootstrapUserSession(result.user);\n\tsetSessionCookie(cookies, result.sessionToken);\n\tsetRefreshCookie(cookies, result.refreshToken);\n\tredirect(303, safeRedirectTarget(url.searchParams.get(\"redirectTo\"), \"/library\"));\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK;AACtC,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;AAC1C,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,4BAA4B,CAAC;AACvF,CAAC,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC,KAAK;AACtC,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,yDAAyD,CAAC;AAC5G,CAAC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC;AACnD,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,uBAAuB,CAAC;AAC/E,CAAC,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;AACxC,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAC/C,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAC/C,CAAC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC,CAAC;AAClF;;;;"}
+{"version":3,"file":"_server.ts.js-BXmQuVvj.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/auth/supabase/callback/_server.ts.js"],"sourcesContent":["import { r as getAuthProvider } from \"../../../../../chunks/providers.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { c as setRefreshCookie, l as setSessionCookie } from \"../../../../../chunks/admin-auth.server.js\";\nimport \"../../../../../chunks/auth.server.js\";\nimport { t as safeRedirectTarget } from \"../../../../../chunks/redirect.js\";\nimport { t as bootstrapUserSession } from \"../../../../../chunks/auth-bootstrap.server.js\";\nimport { redirect } from \"@sveltejs/kit\";\n//#region src/routes/auth/supabase/callback/+server.ts\n/**\n* GET /auth/supabase/callback?code=...&redirectTo=/library\n*\n* Completes a Supabase OAuth round-trip. Exchanges the authorization code\n* for a session, sets the session cookie, and redirects to `redirectTo`.\n*\n* Post-verification flow (data-row seeding + first-admin bootstrap) lives in\n* `bootstrapUserSession` so the email-link and OAuth paths follow the same\n* sequence in the same order.\n*/\nvar GET = async ({ url, cookies }) => {\n\tconst code = url.searchParams.get(\"code\");\n\tif (!code) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing authorization code\");\n\tconst oauth = getAuthProvider().oauth;\n\tif (!oauth) apiError(501, ApiErrorCode.INTERNAL, \"OAuth is not supported by the configured auth provider.\");\n\tconst result = await oauth.exchangeOAuthCode(code);\n\tif (!result) apiError(401, ApiErrorCode.UNAUTHORIZED, \"OAuth exchange failed\");\n\tawait bootstrapUserSession(result.user);\n\tsetSessionCookie(cookies, result.sessionToken);\n\tsetRefreshCookie(cookies, result.refreshToken);\n\tredirect(303, safeRedirectTarget(url.searchParams.get(\"redirectTo\"), \"/library\"));\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK;AACtC,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;AAC1C,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,4BAA4B,CAAC;AACvF,CAAC,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC,KAAK;AACtC,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,yDAAyD,CAAC;AAC5G,CAAC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC;AACnD,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,uBAAuB,CAAC;AAC/E,CAAC,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;AACxC,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAC/C,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAC/C,CAAC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC,CAAC;AAClF;;;;"}

package/build/server/chunks/entries/{hooks.server.js-XyglROqL.js → hooks.server.js-Bjj2EDCz.js}

@@ -1,7 +1,7 @@
 import { b as private_env } from '../chunks/shared-server.js-DA4m8f1m.js';
 import { S as SYSTEM_CONTEXT } from '../chunks/src.js-BeFXhqDJ.js';
 import { p as providers, h as resolveRequestId, g as getLogger, r as renderThrown, i as getErrorReporter, R as REQUEST_ID_HEADER, j as getEventSink } from '../chunks/providers.server.js-Ck45V_zF.js';
-import { g as getRefreshToken, s as setSessionCookie, a as setRefreshCookie, c as clearRefreshCookie } from '../chunks/admin-auth.server.js-CpJLI73r.js';
+import { g as getRefreshToken, s as setSessionCookie, a as setRefreshCookie, c as clearRefreshCookie } from '../chunks/admin-auth.server.js-DBasnefm.js';
 import { f as findDeploymentDir, s as startUpdateOutcomeReconciler } from '../chunks/selfUpdate.server.js-bukjfOvX.js';
 import { g as getBootHealth } from '../chunks/bootHealth.server.js-BGelIgfM.js';
 import { w as wireHeaderAuthBootstrap, b as bootstrapUserSession } from '../chunks/auth-bootstrap.server.js-BkR4caMr.js';
@@ -16,8 +16,8 @@ import 'node:path';
 import 'node:fs';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
-import '../chunks/compute.js-C2CcEWW8.js';
-import '../chunks/chunk-3SEQKFGD.js-hLBC6n0U.js';
+import '../chunks/compute.js-DGTy3YjO.js';
+import '../chunks/chunk-6TMSTNHN.js-3Bz2KNTb.js';
 import 'node:zlib';
 import 'node:util';
 import 'node:dns/promises';
@@ -339,4 +339,4 @@ var handleError = ({ error, status, event }) => {
 };
 
 export { buildContext, handle, handleError, isPublicRoute, isSelfGatingApiRoute, isStaticAsset };
-//# sourceMappingURL=hooks.server.js-XyglROqL.js.map
+//# sourceMappingURL=hooks.server.js-Bjj2EDCz.js.map

package/build/server/chunks/entries/{hooks.server.js-XyglROqL.js.map → hooks.server.js-Bjj2EDCz.js.map}

@@ -1 +1 @@
-{"version":3,"file":"hooks.server.js-XyglROqL.js","sources":["../../../../.svelte-kit/output/server/entries/hooks.server.js"],"sourcesContent":["import { t as private_env } from \"../chunks/shared-server.js\";\nimport { t as SYSTEM_CONTEXT } from \"../chunks/src.js\";\nimport { C as providers, E as resolveRequestId, T as renderThrown, f as getLogger, l as getErrorReporter, u as getEventSink, w as REQUEST_ID_HEADER } from \"../chunks/providers.server.js\";\nimport { a as getRefreshToken, c as setRefreshCookie, l as setSessionCookie, r as clearRefreshCookie } from \"../chunks/admin-auth.server.js\";\nimport { n as startUpdateOutcomeReconciler, t as findDeploymentDir } from \"../chunks/selfUpdate.server.js\";\nimport { t as getBootHealth } from \"../chunks/bootHealth.server.js\";\nimport { n as wireHeaderAuthBootstrap, t as bootstrapUserSession } from \"../chunks/auth-bootstrap.server.js\";\nimport { isHttpError, redirect } from \"@sveltejs/kit\";\n//#region ../platform/src/userProfile/types.ts\nfunction emptyProfile(userId) {\n\treturn {\n\t\tuserId,\n\t\tstarredDefinitions: [],\n\t\trecentRuns: []\n\t};\n}\n//#endregion\n//#region ../server/src/http/security-headers.ts\n/**\n* Apply baseline browser-hardening headers to a response. Cheap wins that\n* don't require UI verification:\n*\n*   - X-Content-Type-Options: nosniff — disables MIME sniffing.\n*   - Referrer-Policy: strict-origin-when-cross-origin — strips the path\n*     and query from cross-origin Referer headers; matches modern browser\n*     defaults but pins the behavior in case the default ever drifts.\n*   - Permissions-Policy: opt out of browser APIs Selva-engine apps don't\n*     use, so XSS can't enable them.\n*   - HSTS when `opts.hsts` (production).\n*\n* **Intentionally NOT set here:**\n*   - Content-Security-Policy + frame-ancestors. Selva-engine apps are built\n*     for iframe embedding, so a strict CSP needs UI-phase validation against\n*     real consumer sites before it can ship.\n*   - X-Frame-Options. Same iframe-embedding constraint.\n*   - Cache-Control. Asset-path layout is app policy; set it in the caller.\n*\n* Returns the same response for chaining.\n*/\nfunction applySecurityHeaders(response, opts) {\n\tresponse.headers.set(\"X-Content-Type-Options\", \"nosniff\");\n\tresponse.headers.set(\"Referrer-Policy\", \"strict-origin-when-cross-origin\");\n\tresponse.headers.set(\"Permissions-Policy\", \"accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\");\n\tif (opts.hsts) response.headers.set(\"Strict-Transport-Security\", \"max-age=31536000; includeSubDomains\");\n\treturn response;\n}\n//#endregion\n//#region ../server/src/http/route-classifier.ts\nfunction createRouteClassifier(config) {\n\tconst publicPages = new Set(config.publicPages ?? []);\n\tconst publicPrefixes = config.publicPrefixes ?? [];\n\tconst publicApis = new Set(config.publicApis ?? []);\n\tconst selfGatingPrefix = config.selfGatingPrefix;\n\tconst staticPrefixes = config.staticPrefixes ?? [];\n\tconst staticPaths = new Set(config.staticPaths ?? []);\n\tfunction isStaticAsset(pathname) {\n\t\tif (staticPaths.has(pathname)) return true;\n\t\treturn staticPrefixes.some((p) => pathname.startsWith(p));\n\t}\n\tfunction isSelfGatingApiRoute(pathname) {\n\t\treturn selfGatingPrefix !== void 0 && pathname.startsWith(selfGatingPrefix);\n\t}\n\tfunction isPublicRoute(pathname) {\n\t\tif (publicPages.has(pathname)) return true;\n\t\tif (publicApis.has(pathname)) return true;\n\t\tif (isSelfGatingApiRoute(pathname)) return true;\n\t\treturn publicPrefixes.some((p) => pathname.startsWith(p));\n\t}\n\treturn {\n\t\tisStaticAsset,\n\t\tisSelfGatingApiRoute,\n\t\tisPublicRoute\n\t};\n}\n//#endregion\n//#region src/hooks.server.ts\nvar headerAuthBootstrapWired = false;\nvar bootHealthKicked = false;\nvar proxyAuthLoginMissWarned = false;\n/**\n* First-run state is a one-way transition (zero users → at least one user)\n* that lasts the lifetime of the deployment. After we've seen at least one\n* user, the answer is permanent — caching it eliminates a per-request DB\n* read for every admin/api hit. `firstRunResolved` never flips back to\n* false; that would require a destructive DB action well outside this\n* code's view.\n*/\nvar firstRunResolved = false;\nasync function isFirstRun() {\n\tif (firstRunResolved) return false;\n\tconst usersPage = await providers.auth.listUsers({ limit: 1 });\n\tif (usersPage === null) {\n\t\tfirstRunResolved = true;\n\t\treturn false;\n\t}\n\tif (usersPage.items.length === 0) return true;\n\tfirstRunResolved = true;\n\treturn false;\n}\n/**\n* Ids of users already registered in the data layer this process. `ensureUser`\n* is idempotent and rows don't disappear mid-process, so once we've ensured a\n* user we can skip the call on every subsequent request from that user —\n* turning a per-request data-layer round-trip (local: a full `user-data.json`\n* read+parse) into a `Set.has` check. Same one-way-flag reasoning as\n* `firstRunResolved`.\n*\n* Per-process (not shared across instances). That's correct: `ensureUser` is\n* idempotent, so a second instance simply ensures the same user once itself —\n* no cross-instance invariant depends on a single call.\n*/\nvar ensuredUserIds = /* @__PURE__ */ new Set();\nasync function ensureUserOnce(userId) {\n\tif (ensuredUserIds.has(userId)) return;\n\tawait providers.data.ensureUser(SYSTEM_CONTEXT, userId);\n\tensuredUserIds.add(userId);\n}\n/**\n* Build a per-request context from an authenticated user. Resolves the\n* active-org membership and loads its OrgPermissions into the context.\n*\n* Active-org resolution:\n*  - Single tenancy: the deployment has exactly one org; pick it.\n*  - Multi tenancy: pick the first org the user is a member of. URL-prefix\n*    resolution (`/o/{slug}/...`) will replace this once routes are\n*    tenant-namespaced.\n*\n* `sessionToken` is forwarded as `adapterContext` so adapters that need the\n* upstream auth token (e.g. Supabase RLS) can pull it off the context.\n*\n* Exported for tests: the fixture's `actAs()` mirrors this logic, so a direct\n* test pins the production function against drift (audit T2/Q4).\n*/\nasync function buildContext(user, sessionToken, platformPermissions, membership) {\n\tlet actingOrgId;\n\tlet orgPermissions = [];\n\tif (membership) {\n\t\tactingOrgId = membership.org.id;\n\t\torgPermissions = membership.member.permissions;\n\t}\n\tif (!actingOrgId && platformPermissions.includes(\"instance_admin\")) {\n\t\tconst firstOrg = (await providers.data.orgs.listOrgs(SYSTEM_CONTEXT, { limit: 1 })).items[0];\n\t\tif (firstOrg) actingOrgId = firstOrg.id;\n\t}\n\treturn {\n\t\tuserId: user.id,\n\t\tactingOrgId,\n\t\tplatformPermissions,\n\t\torgPermissions,\n\t\tadapterContext: sessionToken ? { sessionToken } : void 0\n\t};\n}\nvar PUBLIC_PAGE_ROUTES = /* @__PURE__ */ new Set([\n\t\"/\",\n\t\"/login\",\n\t\"/setup\",\n\t\"/accept-invite\"\n]);\nvar { isStaticAsset, isSelfGatingApiRoute, isPublicRoute } = createRouteClassifier({\n\tpublicPages: PUBLIC_PAGE_ROUTES,\n\tpublicPrefixes: [\"/auth/\", \"/logout\"],\n\tpublicApis: [\"/api/health\"],\n\tselfGatingPrefix: \"/api/files/\",\n\tstaticPrefixes: [\"/_app/\", \"/favicon/\"],\n\tstaticPaths: [\"/favicon.svg\", \"/robots.txt\"]\n});\nvar handle = async ({ event, resolve }) => {\n\tevent.locals.providers = providers;\n\tconst requestId = resolveRequestId(event.request.headers);\n\tevent.locals.requestId = requestId;\n\tevent.locals.log = getLogger().child({\n\t\trequestId,\n\t\tmethod: event.request.method,\n\t\troute: event.url.pathname\n\t});\n\tif (!headerAuthBootstrapWired) {\n\t\twireHeaderAuthBootstrap();\n\t\theaderAuthBootstrapWired = true;\n\t}\n\tif (!bootHealthKicked) {\n\t\tbootHealthKicked = true;\n\t\tgetBootHealth();\n\t\tconst deploymentDir = findDeploymentDir(private_env);\n\t\tif (deploymentDir) startUpdateOutcomeReconciler({\n\t\t\tdeploymentDir,\n\t\t\temit: (e) => getEventSink().emit(e),\n\t\t\treport: (err) => getErrorReporter().capture(err, { tags: { origin: \"selfUpdate\" } })\n\t\t});\n\t}\n\tconst { pathname } = event.url;\n\tif (isStaticAsset(pathname)) return applyResponseHeaders(await resolve(event), pathname, requestId);\n\tif (pathname === \"/api/health\") return applyResponseHeaders(await resolve(event), pathname, requestId);\n\tconst publicRoute = isPublicRoute(pathname);\n\tconst isJsonApiRoute = pathname.startsWith(\"/api/\") || pathname.startsWith(\"/admin/api/\");\n\tif (!publicRoute) {\n\t\tif (await isFirstRun()) {\n\t\t\tif (isJsonApiRoute) return applyResponseHeaders(new Response(JSON.stringify({\n\t\t\t\tmessage: \"Setup required\",\n\t\t\t\tcode: \"SETUP_REQUIRED\"\n\t\t\t}), {\n\t\t\t\tstatus: 503,\n\t\t\t\theaders: { \"Content-Type\": \"application/json\" }\n\t\t\t}), pathname, requestId);\n\t\t\tredirect(303, \"/setup\");\n\t\t}\n\t}\n\tif (!publicRoute) {\n\t\tlet token = event.cookies.get(\"admin_session\") ?? \"\";\n\t\tlet user = await providers.auth.verifyToken(token);\n\t\tif (!user) {\n\t\t\tconst refreshToken = getRefreshToken(event.cookies);\n\t\t\tconst oauth = providers.auth.oauth;\n\t\t\tif (refreshToken && oauth) {\n\t\t\t\tconst refreshed = await oauth.refreshSession(refreshToken);\n\t\t\t\tif (refreshed) {\n\t\t\t\t\tsetSessionCookie(event.cookies, refreshed.sessionToken);\n\t\t\t\t\tsetRefreshCookie(event.cookies, refreshed.refreshToken);\n\t\t\t\t\ttoken = refreshed.sessionToken;\n\t\t\t\t\tuser = await providers.auth.verifyToken(token);\n\t\t\t\t} else clearRefreshCookie(event.cookies);\n\t\t\t}\n\t\t}\n\t\tif (!user && providers.auth.proxyAuth) {\n\t\t\tuser = await providers.auth.proxyAuth.identifyFromHeaders(event.request.headers);\n\t\t\tif (user) await bootstrapUserSession(user);\n\t\t}\n\t\tif (!user) {\n\t\t\tif (isJsonApiRoute) return applyResponseHeaders(new Response(JSON.stringify({\n\t\t\t\tmessage: \"Your session has expired. Sign in again to continue.\",\n\t\t\t\tcode: \"UNAUTHORIZED\"\n\t\t\t}), {\n\t\t\t\tstatus: 401,\n\t\t\t\theaders: { \"Content-Type\": \"application/json\" }\n\t\t\t}), pathname, requestId);\n\t\t\tredirect(303, `/login?redirectTo=${encodeURIComponent(pathname)}`);\n\t\t}\n\t\tconst [, profile, platformPermissions, membership] = await Promise.all([\n\t\t\tensureUserOnce(user.id),\n\t\t\tproviders.data.userProfile.getProfile(SYSTEM_CONTEXT, user.id),\n\t\t\tproviders.data.permissions.getFor(SYSTEM_CONTEXT, user.id),\n\t\t\tproviders.data.orgs.findUserMembership(SYSTEM_CONTEXT, user.id)\n\t\t]);\n\t\tevent.locals.user = user;\n\t\tevent.locals.profile = profile ?? emptyProfile(user.id);\n\t\tevent.locals.ctx = await buildContext(user, token, platformPermissions, membership);\n\t} else {\n\t\tconst wantsSessionAttach = PUBLIC_PAGE_ROUTES.has(pathname) || isSelfGatingApiRoute(pathname);\n\t\tconst token = wantsSessionAttach ? event.cookies.get(\"admin_session\") ?? \"\" : \"\";\n\t\tlet user = token ? await providers.auth.verifyToken(token) : null;\n\t\tif (!user && wantsSessionAttach && providers.auth.proxyAuth) {\n\t\t\tuser = await providers.auth.proxyAuth.identifyFromHeaders(event.request.headers);\n\t\t\tif (!user && pathname === \"/login\" && !proxyAuthLoginMissWarned) {\n\t\t\t\tproxyAuthLoginMissWarned = true;\n\t\t\t\tconst proxyAuth = providers.auth.proxyAuth;\n\t\t\t\tconst noHeaders = proxyAuth.hasNoIdentityHeaders(event.request.headers);\n\t\t\t\tconst configured = proxyAuth.configuredHeaderNames.join(\", \");\n\t\t\t\tif (noHeaders) event.locals.log.warn(\"/login was hit and NONE of the configured identity headers arrived. The forward-auth proxy is not reaching this process, or is not forwarding the configured headers. See the @selvajs/header-auth-provider README \\\"Verification\\\" section.\", {\n\t\t\t\t\tcomponent: \"HeaderAuth\",\n\t\t\t\t\tconfiguredHeaders: configured\n\t\t\t\t});\n\t\t\t\telse event.locals.log.warn(\"/login was hit but the UPN header was missing or the user is not allowlisted. Some headers arrived but identification still failed — check that the UPN header is populated and that the user has been added to header-allowlist.json.\", {\n\t\t\t\t\tcomponent: \"HeaderAuth\",\n\t\t\t\t\tconfiguredHeaders: configured\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t\tif (user) {\n\t\t\tconst [, profile, platformPermissions, membership] = await Promise.all([\n\t\t\t\tensureUserOnce(user.id),\n\t\t\t\tproviders.data.userProfile.getProfile(SYSTEM_CONTEXT, user.id),\n\t\t\t\tproviders.data.permissions.getFor(SYSTEM_CONTEXT, user.id),\n\t\t\t\tproviders.data.orgs.findUserMembership(SYSTEM_CONTEXT, user.id)\n\t\t\t]);\n\t\t\tevent.locals.user = user;\n\t\t\tevent.locals.profile = profile ?? emptyProfile(user.id);\n\t\t\tevent.locals.ctx = await buildContext(user, token, platformPermissions, membership);\n\t\t}\n\t}\n\treturn applyResponseHeaders(await resolve(event), pathname, requestId);\n};\nfunction applyResponseHeaders(response, pathname, requestId) {\n\tapplySecurityHeaders(response, { hsts: process.env.NODE_ENV === \"production\" });\n\tresponse.headers.set(REQUEST_ID_HEADER, requestId);\n\tif (pathname.startsWith(\"/_app/\")) response.headers.set(\"Cache-Control\", \"public, max-age=31536000, immutable\");\n\telse if (pathname.startsWith(\"/favicon/\") || pathname === \"/favicon.svg\" || pathname === \"/robots.txt\") response.headers.set(\"Cache-Control\", \"public, max-age=604800\");\n\treturn response;\n}\nvar handleError = ({ error, status, event }) => {\n\tif (isHttpError(error)) {\n\t\tconst body = error.body;\n\t\treturn {\n\t\t\tmessage: body.message,\n\t\t\tcode: body.code,\n\t\t\tfields: body.fields\n\t\t};\n\t}\n\tif (status === 404) return {\n\t\tmessage: \"Page not found.\",\n\t\tcode: \"NOT_FOUND\"\n\t};\n\t(event.locals.log ?? getLogger().child({\n\t\tmethod: event.request.method,\n\t\troute: event.url.pathname\n\t})).error(\"Unhandled error\", {\n\t\tcomponent: \"handleError\",\n\t\tstatus,\n\t\terr: renderThrown(error),\n\t\tcause: error instanceof Error && error.cause ? String(error.cause) : void 0\n\t});\n\tgetErrorReporter().capture(error, {\n\t\tmethod: event.request.method,\n\t\troute: event.url.pathname,\n\t\tuserId: event.locals.ctx?.userId || void 0,\n\t\torgId: event.locals.ctx?.actingOrgId\n\t});\n\treturn {\n\t\tmessage: \"An unexpected error occurred.\",\n\t\tcode: \"INTERNAL\"\n\t};\n};\n//#endregion\nexport { buildContext, handle, handleError, isPublicRoute, isSelfGatingApiRoute, isStaticAsset };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAQA;AACA,SAAS,YAAY,CAAC,MAAM,EAAE;AAC9B,CAAC,OAAO;AACR,EAAE,MAAM;AACR,EAAE,kBAAkB,EAAE,EAAE;AACxB,EAAE,UAAU,EAAE;AACd,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,oBAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE;AAC9C,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,SAAS,CAAC;AAC1D,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,iCAAiC,CAAC;AAC3E,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,+GAA+G,CAAC;AAC5J,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,qCAAqC,CAAC;AACxG,CAAC,OAAO,QAAQ;AAChB;AACA;AACA;AACA,SAAS,qBAAqB,CAAC,MAAM,EAAE;AACvC,CAAC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;AACtD,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,EAAE;AACnD,CAAC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;AACpD,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB;AACjD,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,EAAE;AACnD,CAAC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;AACtD,CAAC,SAAS,aAAa,CAAC,QAAQ,EAAE;AAClC,EAAE,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,OAAO,IAAI;AAC5C,EAAE,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AACD,CAAC,SAAS,oBAAoB,CAAC,QAAQ,EAAE;AACzC,EAAE,OAAO,gBAAgB,KAAK,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CAAC;AAC7E,CAAC;AACD,CAAC,SAAS,aAAa,CAAC,QAAQ,EAAE;AAClC,EAAE,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,OAAO,IAAI;AAC5C,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,OAAO,IAAI;AAC3C,EAAE,IAAI,oBAAoB,CAAC,QAAQ,CAAC,EAAE,OAAO,IAAI;AACjD,EAAE,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AACD,CAAC,OAAO;AACR,EAAE,aAAa;AACf,EAAE,oBAAoB;AACtB,EAAE;AACF,EAAE;AACF;AACA;AACA;AACA,IAAI,wBAAwB,GAAG,KAAK;AACpC,IAAI,gBAAgB,GAAG,KAAK;AAC5B,IAAI,wBAAwB,GAAG,KAAK;AACpC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,gBAAgB,GAAG,KAAK;AAC5B,eAAe,UAAU,GAAG;AAC5B,CAAC,IAAI,gBAAgB,EAAE,OAAO,KAAK;AACnC,CAAC,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAC/D,CAAC,IAAI,SAAS,KAAK,IAAI,EAAE;AACzB,EAAE,gBAAgB,GAAG,IAAI;AACzB,EAAE,OAAO,KAAK;AACd,CAAC;AACD,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,IAAI;AAC9C,CAAC,gBAAgB,GAAG,IAAI;AACxB,CAAC,OAAO,KAAK;AACb;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,cAAc,mBAAmB,IAAI,GAAG,EAAE;AAC9C,eAAe,cAAc,CAAC,MAAM,EAAE;AACtC,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;AACjC,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC;AACxD,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;AAC3B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,mBAAmB,EAAE,UAAU,EAAE;AACjF,CAAC,IAAI,WAAW;AAChB,CAAC,IAAI,cAAc,GAAG,EAAE;AACxB,CAAC,IAAI,UAAU,EAAE;AACjB,EAAE,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE;AACjC,EAAE,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,WAAW;AAChD,CAAC;AACD,CAAC,IAAI,CAAC,WAAW,IAAI,mBAAmB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE;AACrE,EAAE,MAAM,QAAQ,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AAC9F,EAAE,IAAI,QAAQ,EAAE,WAAW,GAAG,QAAQ,CAAC,EAAE;AACzC,CAAC;AACD,CAAC,OAAO;AACR,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;AACjB,EAAE,WAAW;AACb,EAAE,mBAAmB;AACrB,EAAE,cAAc;AAChB,EAAE,cAAc,EAAE,YAAY,GAAG,EAAE,YAAY,EAAE,GAAG;AACpD,EAAE;AACF;AACA,IAAI,kBAAkB,mBAAmB,IAAI,GAAG,CAAC;AACjD,CAAC,GAAG;AACJ,CAAC,QAAQ;AACT,CAAC,QAAQ;AACT,CAAC;AACD,CAAC,CAAC;AACC,IAAC,EAAE,aAAa,EAAE,oBAAoB,EAAE,aAAa,EAAE,GAAG,qBAAqB,CAAC;AACnF,CAAC,WAAW,EAAE,kBAAkB;AAChC,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;AACtC,CAAC,UAAU,EAAE,CAAC,aAAa,CAAC;AAC5B,CAAC,gBAAgB,EAAE,aAAa;AAChC,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC;AACxC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,aAAa;AAC5C,CAAC;AACE,IAAC,MAAM,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK;AAC3C,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG,SAAS;AACnC,CAAC,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;AAC1D,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG,SAAS;AACnC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,SAAS,EAAE,CAAC,KAAK,CAAC;AACtC,EAAE,SAAS;AACX,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;AAC9B,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC;AACnB,EAAE,CAAC;AACH,CAAC,IAAI,CAAC,wBAAwB,EAAE;AAChC,EAAE,uBAAuB,EAAE;AAC3B,EAAE,wBAAwB,GAAG,IAAI;AACjC,CAAC;AACD,CAAC,IAAI,CAAC,gBAAgB,EAAE;AACxB,EAAE,gBAAgB,GAAG,IAAI;AACzB,EAAE,aAAa,EAAE;AACjB,EAAE,MAAM,aAAa,GAAG,iBAAiB,CAAC,WAAW,CAAC;AACtD,EAAE,IAAI,aAAa,EAAE,4BAA4B,CAAC;AAClD,GAAG,aAAa;AAChB,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;AACtC,GAAG,MAAM,EAAE,CAAC,GAAG,KAAK,gBAAgB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;AACtF,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,GAAG;AAC/B,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,OAAO,oBAAoB,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC;AACpG,CAAC,IAAI,QAAQ,KAAK,aAAa,EAAE,OAAO,oBAAoB,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC;AACvG,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC,QAAQ,CAAC;AAC5C,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC;AAC1F,CAAC,IAAI,CAAC,WAAW,EAAE;AACnB,EAAE,IAAI,MAAM,UAAU,EAAE,EAAE;AAC1B,GAAG,IAAI,cAAc,EAAE,OAAO,oBAAoB,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;AAC/E,IAAI,OAAO,EAAE,gBAAgB;AAC7B,IAAI,IAAI,EAAE;AACV,IAAI,CAAC,EAAE;AACP,IAAI,MAAM,EAAE,GAAG;AACf,IAAI,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB;AACjD,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC;AAC3B,GAAG,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;AAC1B,EAAE;AACF,CAAC;AACD,CAAC,IAAI,CAAC,WAAW,EAAE;AACnB,EAAE,IAAI,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE;AACtD,EAAE,IAAI,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;AACpD,EAAE,IAAI,CAAC,IAAI,EAAE;AACb,GAAG,MAAM,YAAY,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC;AACtD,GAAG,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK;AACrC,GAAG,IAAI,YAAY,IAAI,KAAK,EAAE;AAC9B,IAAI,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,YAAY,CAAC;AAC9D,IAAI,IAAI,SAAS,EAAE;AACnB,KAAK,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,YAAY,CAAC;AAC5D,KAAK,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,YAAY,CAAC;AAC5D,KAAK,KAAK,GAAG,SAAS,CAAC,YAAY;AACnC,KAAK,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;AACnD,IAAI,CAAC,MAAM,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC;AAC5C,GAAG;AACH,EAAE;AACF,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE;AACzC,GAAG,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;AACnF,GAAG,IAAI,IAAI,EAAE,MAAM,oBAAoB,CAAC,IAAI,CAAC;AAC7C,EAAE;AACF,EAAE,IAAI,CAAC,IAAI,EAAE;AACb,GAAG,IAAI,cAAc,EAAE,OAAO,oBAAoB,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;AAC/E,IAAI,OAAO,EAAE,sDAAsD;AACnE,IAAI,IAAI,EAAE;AACV,IAAI,CAAC,EAAE;AACP,IAAI,MAAM,EAAE,GAAG;AACf,IAAI,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB;AACjD,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC;AAC3B,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACrE,EAAE;AACF,EAAE,MAAM,GAAG,OAAO,EAAE,mBAAmB,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AACzE,GAAG,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;AAC1B,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;AACjE,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;AAC7D,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE;AACjE,GAAG,CAAC;AACJ,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI;AAC1B,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;AACzD,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE,UAAU,CAAC;AACrF,CAAC,CAAC,MAAM;AACR,EAAE,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,oBAAoB,CAAC,QAAQ,CAAC;AAC/F,EAAE,MAAM,KAAK,GAAG,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE;AAClF,EAAE,IAAI,IAAI,GAAG,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,IAAI;AACnE,EAAE,IAAI,CAAC,IAAI,IAAI,kBAAkB,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE;AAC/D,GAAG,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;AACnF,GAAG,IAAI,CAAC,IAAI,IAAI,QAAQ,KAAK,QAAQ,IAAI,CAAC,wBAAwB,EAAE;AACpE,IAAI,wBAAwB,GAAG,IAAI;AACnC,IAAI,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS;AAC9C,IAAI,MAAM,SAAS,GAAG,SAAS,CAAC,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;AAC3E,IAAI,MAAM,UAAU,GAAG,SAAS,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;AACjE,IAAI,IAAI,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,8OAA8O,EAAE;AACzR,KAAK,SAAS,EAAE,YAAY;AAC5B,KAAK,iBAAiB,EAAE;AACxB,KAAK,CAAC;AACN,SAAS,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,wOAAwO,EAAE;AACzQ,KAAK,SAAS,EAAE,YAAY;AAC5B,KAAK,iBAAiB,EAAE;AACxB,KAAK,CAAC;AACN,GAAG;AACH,EAAE;AACF,EAAE,IAAI,IAAI,EAAE;AACZ,GAAG,MAAM,GAAG,OAAO,EAAE,mBAAmB,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AAC1E,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3B,IAAI,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;AAClE,IAAI,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;AAC9D,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE;AAClE,IAAI,CAAC;AACL,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI;AAC3B,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;AAC1D,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE,UAAU,CAAC;AACtF,EAAE;AACF,CAAC;AACD,CAAC,OAAO,oBAAoB,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC;AACvE;AACA,SAAS,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE;AAC7D,CAAC,oBAAoB,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;AAChF,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,SAAS,CAAC;AACnD,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,qCAAqC,CAAC;AAChH,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,QAAQ,KAAK,cAAc,IAAI,QAAQ,KAAK,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,wBAAwB,CAAC;AACxK,CAAC,OAAO,QAAQ;AAChB;AACG,IAAC,WAAW,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK;AAChD,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE;AACzB,EAAE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI;AACzB,EAAE,OAAO;AACT,GAAG,OAAO,EAAE,IAAI,CAAC,OAAO;AACxB,GAAG,IAAI,EAAE,IAAI,CAAC,IAAI;AAClB,GAAG,MAAM,EAAE,IAAI,CAAC;AAChB,GAAG;AACH,CAAC;AACD,CAAC,IAAI,MAAM,KAAK,GAAG,EAAE,OAAO;AAC5B,EAAE,OAAO,EAAE,iBAAiB;AAC5B,EAAE,IAAI,EAAE;AACR,EAAE;AACF,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,SAAS,EAAE,CAAC,KAAK,CAAC;AACxC,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;AAC9B,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC;AACnB,EAAE,CAAC,EAAE,KAAK,CAAC,iBAAiB,EAAE;AAC9B,EAAE,SAAS,EAAE,aAAa;AAC1B,EAAE,MAAM;AACR,EAAE,GAAG,EAAE,YAAY,CAAC,KAAK,CAAC;AAC1B,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG;AACvE,EAAE,CAAC;AACH,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE;AACnC,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;AAC9B,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ;AAC3B,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,IAAI,MAAM;AAC5C,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE;AAC3B,EAAE,CAAC;AACH,CAAC,OAAO;AACR,EAAE,OAAO,EAAE,+BAA+B;AAC1C,EAAE,IAAI,EAAE;AACR,EAAE;AACF;;;;"}
+{"version":3,"file":"hooks.server.js-Bjj2EDCz.js","sources":["../../../../.svelte-kit/output/server/entries/hooks.server.js"],"sourcesContent":["import { t as private_env } from \"../chunks/shared-server.js\";\nimport { t as SYSTEM_CONTEXT } from \"../chunks/src.js\";\nimport { C as providers, E as resolveRequestId, T as renderThrown, f as getLogger, l as getErrorReporter, u as getEventSink, w as REQUEST_ID_HEADER } from \"../chunks/providers.server.js\";\nimport { a as getRefreshToken, c as setRefreshCookie, l as setSessionCookie, r as clearRefreshCookie } from \"../chunks/admin-auth.server.js\";\nimport { n as startUpdateOutcomeReconciler, t as findDeploymentDir } from \"../chunks/selfUpdate.server.js\";\nimport { t as getBootHealth } from \"../chunks/bootHealth.server.js\";\nimport { n as wireHeaderAuthBootstrap, t as bootstrapUserSession } from \"../chunks/auth-bootstrap.server.js\";\nimport { isHttpError, redirect } from \"@sveltejs/kit\";\n//#region ../platform/src/userProfile/types.ts\nfunction emptyProfile(userId) {\n\treturn {\n\t\tuserId,\n\t\tstarredDefinitions: [],\n\t\trecentRuns: []\n\t};\n}\n//#endregion\n//#region ../server/src/http/security-headers.ts\n/**\n* Apply baseline browser-hardening headers to a response. Cheap wins that\n* don't require UI verification:\n*\n*   - X-Content-Type-Options: nosniff — disables MIME sniffing.\n*   - Referrer-Policy: strict-origin-when-cross-origin — strips the path\n*     and query from cross-origin Referer headers; matches modern browser\n*     defaults but pins the behavior in case the default ever drifts.\n*   - Permissions-Policy: opt out of browser APIs Selva-engine apps don't\n*     use, so XSS can't enable them.\n*   - HSTS when `opts.hsts` (production).\n*\n* **Intentionally NOT set here:**\n*   - Content-Security-Policy + frame-ancestors. Selva-engine apps are built\n*     for iframe embedding, so a strict CSP needs UI-phase validation against\n*     real consumer sites before it can ship.\n*   - X-Frame-Options. Same iframe-embedding constraint.\n*   - Cache-Control. Asset-path layout is app policy; set it in the caller.\n*\n* Returns the same response for chaining.\n*/\nfunction applySecurityHeaders(response, opts) {\n\tresponse.headers.set(\"X-Content-Type-Options\", \"nosniff\");\n\tresponse.headers.set(\"Referrer-Policy\", \"strict-origin-when-cross-origin\");\n\tresponse.headers.set(\"Permissions-Policy\", \"accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\");\n\tif (opts.hsts) response.headers.set(\"Strict-Transport-Security\", \"max-age=31536000; includeSubDomains\");\n\treturn response;\n}\n//#endregion\n//#region ../server/src/http/route-classifier.ts\nfunction createRouteClassifier(config) {\n\tconst publicPages = new Set(config.publicPages ?? []);\n\tconst publicPrefixes = config.publicPrefixes ?? [];\n\tconst publicApis = new Set(config.publicApis ?? []);\n\tconst selfGatingPrefix = config.selfGatingPrefix;\n\tconst staticPrefixes = config.staticPrefixes ?? [];\n\tconst staticPaths = new Set(config.staticPaths ?? []);\n\tfunction isStaticAsset(pathname) {\n\t\tif (staticPaths.has(pathname)) return true;\n\t\treturn staticPrefixes.some((p) => pathname.startsWith(p));\n\t}\n\tfunction isSelfGatingApiRoute(pathname) {\n\t\treturn selfGatingPrefix !== void 0 && pathname.startsWith(selfGatingPrefix);\n\t}\n\tfunction isPublicRoute(pathname) {\n\t\tif (publicPages.has(pathname)) return true;\n\t\tif (publicApis.has(pathname)) return true;\n\t\tif (isSelfGatingApiRoute(pathname)) return true;\n\t\treturn publicPrefixes.some((p) => pathname.startsWith(p));\n\t}\n\treturn {\n\t\tisStaticAsset,\n\t\tisSelfGatingApiRoute,\n\t\tisPublicRoute\n\t};\n}\n//#endregion\n//#region src/hooks.server.ts\nvar headerAuthBootstrapWired = false;\nvar bootHealthKicked = false;\nvar proxyAuthLoginMissWarned = false;\n/**\n* First-run state is a one-way transition (zero users → at least one user)\n* that lasts the lifetime of the deployment. After we've seen at least one\n* user, the answer is permanent — caching it eliminates a per-request DB\n* read for every admin/api hit. `firstRunResolved` never flips back to\n* false; that would require a destructive DB action well outside this\n* code's view.\n*/\nvar firstRunResolved = false;\nasync function isFirstRun() {\n\tif (firstRunResolved) return false;\n\tconst usersPage = await providers.auth.listUsers({ limit: 1 });\n\tif (usersPage === null) {\n\t\tfirstRunResolved = true;\n\t\treturn false;\n\t}\n\tif (usersPage.items.length === 0) return true;\n\tfirstRunResolved = true;\n\treturn false;\n}\n/**\n* Ids of users already registered in the data layer this process. `ensureUser`\n* is idempotent and rows don't disappear mid-process, so once we've ensured a\n* user we can skip the call on every subsequent request from that user —\n* turning a per-request data-layer round-trip (local: a full `user-data.json`\n* read+parse) into a `Set.has` check. Same one-way-flag reasoning as\n* `firstRunResolved`.\n*\n* Per-process (not shared across instances). That's correct: `ensureUser` is\n* idempotent, so a second instance simply ensures the same user once itself —\n* no cross-instance invariant depends on a single call.\n*/\nvar ensuredUserIds = /* @__PURE__ */ new Set();\nasync function ensureUserOnce(userId) {\n\tif (ensuredUserIds.has(userId)) return;\n\tawait providers.data.ensureUser(SYSTEM_CONTEXT, userId);\n\tensuredUserIds.add(userId);\n}\n/**\n* Build a per-request context from an authenticated user. Resolves the\n* active-org membership and loads its OrgPermissions into the context.\n*\n* Active-org resolution:\n*  - Single tenancy: the deployment has exactly one org; pick it.\n*  - Multi tenancy: pick the first org the user is a member of. URL-prefix\n*    resolution (`/o/{slug}/...`) will replace this once routes are\n*    tenant-namespaced.\n*\n* `sessionToken` is forwarded as `adapterContext` so adapters that need the\n* upstream auth token (e.g. Supabase RLS) can pull it off the context.\n*\n* Exported for tests: the fixture's `actAs()` mirrors this logic, so a direct\n* test pins the production function against drift (audit T2/Q4).\n*/\nasync function buildContext(user, sessionToken, platformPermissions, membership) {\n\tlet actingOrgId;\n\tlet orgPermissions = [];\n\tif (membership) {\n\t\tactingOrgId = membership.org.id;\n\t\torgPermissions = membership.member.permissions;\n\t}\n\tif (!actingOrgId && platformPermissions.includes(\"instance_admin\")) {\n\t\tconst firstOrg = (await providers.data.orgs.listOrgs(SYSTEM_CONTEXT, { limit: 1 })).items[0];\n\t\tif (firstOrg) actingOrgId = firstOrg.id;\n\t}\n\treturn {\n\t\tuserId: user.id,\n\t\tactingOrgId,\n\t\tplatformPermissions,\n\t\torgPermissions,\n\t\tadapterContext: sessionToken ? { sessionToken } : void 0\n\t};\n}\nvar PUBLIC_PAGE_ROUTES = /* @__PURE__ */ new Set([\n\t\"/\",\n\t\"/login\",\n\t\"/setup\",\n\t\"/accept-invite\"\n]);\nvar { isStaticAsset, isSelfGatingApiRoute, isPublicRoute } = createRouteClassifier({\n\tpublicPages: PUBLIC_PAGE_ROUTES,\n\tpublicPrefixes: [\"/auth/\", \"/logout\"],\n\tpublicApis: [\"/api/health\"],\n\tselfGatingPrefix: \"/api/files/\",\n\tstaticPrefixes: [\"/_app/\", \"/favicon/\"],\n\tstaticPaths: [\"/favicon.svg\", \"/robots.txt\"]\n});\nvar handle = async ({ event, resolve }) => {\n\tevent.locals.providers = providers;\n\tconst requestId = resolveRequestId(event.request.headers);\n\tevent.locals.requestId = requestId;\n\tevent.locals.log = getLogger().child({\n\t\trequestId,\n\t\tmethod: event.request.method,\n\t\troute: event.url.pathname\n\t});\n\tif (!headerAuthBootstrapWired) {\n\t\twireHeaderAuthBootstrap();\n\t\theaderAuthBootstrapWired = true;\n\t}\n\tif (!bootHealthKicked) {\n\t\tbootHealthKicked = true;\n\t\tgetBootHealth();\n\t\tconst deploymentDir = findDeploymentDir(private_env);\n\t\tif (deploymentDir) startUpdateOutcomeReconciler({\n\t\t\tdeploymentDir,\n\t\t\temit: (e) => getEventSink().emit(e),\n\t\t\treport: (err) => getErrorReporter().capture(err, { tags: { origin: \"selfUpdate\" } })\n\t\t});\n\t}\n\tconst { pathname } = event.url;\n\tif (isStaticAsset(pathname)) return applyResponseHeaders(await resolve(event), pathname, requestId);\n\tif (pathname === \"/api/health\") return applyResponseHeaders(await resolve(event), pathname, requestId);\n\tconst publicRoute = isPublicRoute(pathname);\n\tconst isJsonApiRoute = pathname.startsWith(\"/api/\") || pathname.startsWith(\"/admin/api/\");\n\tif (!publicRoute) {\n\t\tif (await isFirstRun()) {\n\t\t\tif (isJsonApiRoute) return applyResponseHeaders(new Response(JSON.stringify({\n\t\t\t\tmessage: \"Setup required\",\n\t\t\t\tcode: \"SETUP_REQUIRED\"\n\t\t\t}), {\n\t\t\t\tstatus: 503,\n\t\t\t\theaders: { \"Content-Type\": \"application/json\" }\n\t\t\t}), pathname, requestId);\n\t\t\tredirect(303, \"/setup\");\n\t\t}\n\t}\n\tif (!publicRoute) {\n\t\tlet token = event.cookies.get(\"admin_session\") ?? \"\";\n\t\tlet user = await providers.auth.verifyToken(token);\n\t\tif (!user) {\n\t\t\tconst refreshToken = getRefreshToken(event.cookies);\n\t\t\tconst oauth = providers.auth.oauth;\n\t\t\tif (refreshToken && oauth) {\n\t\t\t\tconst refreshed = await oauth.refreshSession(refreshToken);\n\t\t\t\tif (refreshed) {\n\t\t\t\t\tsetSessionCookie(event.cookies, refreshed.sessionToken);\n\t\t\t\t\tsetRefreshCookie(event.cookies, refreshed.refreshToken);\n\t\t\t\t\ttoken = refreshed.sessionToken;\n\t\t\t\t\tuser = await providers.auth.verifyToken(token);\n\t\t\t\t} else clearRefreshCookie(event.cookies);\n\t\t\t}\n\t\t}\n\t\tif (!user && providers.auth.proxyAuth) {\n\t\t\tuser = await providers.auth.proxyAuth.identifyFromHeaders(event.request.headers);\n\t\t\tif (user) await bootstrapUserSession(user);\n\t\t}\n\t\tif (!user) {\n\t\t\tif (isJsonApiRoute) return applyResponseHeaders(new Response(JSON.stringify({\n\t\t\t\tmessage: \"Your session has expired. Sign in again to continue.\",\n\t\t\t\tcode: \"UNAUTHORIZED\"\n\t\t\t}), {\n\t\t\t\tstatus: 401,\n\t\t\t\theaders: { \"Content-Type\": \"application/json\" }\n\t\t\t}), pathname, requestId);\n\t\t\tredirect(303, `/login?redirectTo=${encodeURIComponent(pathname)}`);\n\t\t}\n\t\tconst [, profile, platformPermissions, membership] = await Promise.all([\n\t\t\tensureUserOnce(user.id),\n\t\t\tproviders.data.userProfile.getProfile(SYSTEM_CONTEXT, user.id),\n\t\t\tproviders.data.permissions.getFor(SYSTEM_CONTEXT, user.id),\n\t\t\tproviders.data.orgs.findUserMembership(SYSTEM_CONTEXT, user.id)\n\t\t]);\n\t\tevent.locals.user = user;\n\t\tevent.locals.profile = profile ?? emptyProfile(user.id);\n\t\tevent.locals.ctx = await buildContext(user, token, platformPermissions, membership);\n\t} else {\n\t\tconst wantsSessionAttach = PUBLIC_PAGE_ROUTES.has(pathname) || isSelfGatingApiRoute(pathname);\n\t\tconst token = wantsSessionAttach ? event.cookies.get(\"admin_session\") ?? \"\" : \"\";\n\t\tlet user = token ? await providers.auth.verifyToken(token) : null;\n\t\tif (!user && wantsSessionAttach && providers.auth.proxyAuth) {\n\t\t\tuser = await providers.auth.proxyAuth.identifyFromHeaders(event.request.headers);\n\t\t\tif (!user && pathname === \"/login\" && !proxyAuthLoginMissWarned) {\n\t\t\t\tproxyAuthLoginMissWarned = true;\n\t\t\t\tconst proxyAuth = providers.auth.proxyAuth;\n\t\t\t\tconst noHeaders = proxyAuth.hasNoIdentityHeaders(event.request.headers);\n\t\t\t\tconst configured = proxyAuth.configuredHeaderNames.join(\", \");\n\t\t\t\tif (noHeaders) event.locals.log.warn(\"/login was hit and NONE of the configured identity headers arrived. The forward-auth proxy is not reaching this process, or is not forwarding the configured headers. See the @selvajs/header-auth-provider README \\\"Verification\\\" section.\", {\n\t\t\t\t\tcomponent: \"HeaderAuth\",\n\t\t\t\t\tconfiguredHeaders: configured\n\t\t\t\t});\n\t\t\t\telse event.locals.log.warn(\"/login was hit but the UPN header was missing or the user is not allowlisted. Some headers arrived but identification still failed — check that the UPN header is populated and that the user has been added to header-allowlist.json.\", {\n\t\t\t\t\tcomponent: \"HeaderAuth\",\n\t\t\t\t\tconfiguredHeaders: configured\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t\tif (user) {\n\t\t\tconst [, profile, platformPermissions, membership] = await Promise.all([\n\t\t\t\tensureUserOnce(user.id),\n\t\t\t\tproviders.data.userProfile.getProfile(SYSTEM_CONTEXT, user.id),\n\t\t\t\tproviders.data.permissions.getFor(SYSTEM_CONTEXT, user.id),\n\t\t\t\tproviders.data.orgs.findUserMembership(SYSTEM_CONTEXT, user.id)\n\t\t\t]);\n\t\t\tevent.locals.user = user;\n\t\t\tevent.locals.profile = profile ?? emptyProfile(user.id);\n\t\t\tevent.locals.ctx = await buildContext(user, token, platformPermissions, membership);\n\t\t}\n\t}\n\treturn applyResponseHeaders(await resolve(event), pathname, requestId);\n};\nfunction applyResponseHeaders(response, pathname, requestId) {\n\tapplySecurityHeaders(response, { hsts: process.env.NODE_ENV === \"production\" });\n\tresponse.headers.set(REQUEST_ID_HEADER, requestId);\n\tif (pathname.startsWith(\"/_app/\")) response.headers.set(\"Cache-Control\", \"public, max-age=31536000, immutable\");\n\telse if (pathname.startsWith(\"/favicon/\") || pathname === \"/favicon.svg\" || pathname === \"/robots.txt\") response.headers.set(\"Cache-Control\", \"public, max-age=604800\");\n\treturn response;\n}\nvar handleError = ({ error, status, event }) => {\n\tif (isHttpError(error)) {\n\t\tconst body = error.body;\n\t\treturn {\n\t\t\tmessage: body.message,\n\t\t\tcode: body.code,\n\t\t\tfields: body.fields\n\t\t};\n\t}\n\tif (status === 404) return {\n\t\tmessage: \"Page not found.\",\n\t\tcode: \"NOT_FOUND\"\n\t};\n\t(event.locals.log ?? getLogger().child({\n\t\tmethod: event.request.method,\n\t\troute: event.url.pathname\n\t})).error(\"Unhandled error\", {\n\t\tcomponent: \"handleError\",\n\t\tstatus,\n\t\terr: renderThrown(error),\n\t\tcause: error instanceof Error && error.cause ? String(error.cause) : void 0\n\t});\n\tgetErrorReporter().capture(error, {\n\t\tmethod: event.request.method,\n\t\troute: event.url.pathname,\n\t\tuserId: event.locals.ctx?.userId || void 0,\n\t\torgId: event.locals.ctx?.actingOrgId\n\t});\n\treturn {\n\t\tmessage: \"An unexpected error occurred.\",\n\t\tcode: \"INTERNAL\"\n\t};\n};\n//#endregion\nexport { buildContext, handle, handleError, isPublicRoute, isSelfGatingApiRoute, isStaticAsset };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAQA;AACA,SAAS,YAAY,CAAC,MAAM,EAAE;AAC9B,CAAC,OAAO;AACR,EAAE,MAAM;AACR,EAAE,kBAAkB,EAAE,EAAE;AACxB,EAAE,UAAU,EAAE;AACd,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,oBAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE;AAC9C,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,SAAS,CAAC;AAC1D,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,iCAAiC,CAAC;AAC3E,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,+GAA+G,CAAC;AAC5J,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,qCAAqC,CAAC;AACxG,CAAC,OAAO,QAAQ;AAChB;AACA;AACA;AACA,SAAS,qBAAqB,CAAC,MAAM,EAAE;AACvC,CAAC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;AACtD,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,EAAE;AACnD,CAAC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;AACpD,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB;AACjD,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,EAAE;AACnD,CAAC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;AACtD,CAAC,SAAS,aAAa,CAAC,QAAQ,EAAE;AAClC,EAAE,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,OAAO,IAAI;AAC5C,EAAE,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AACD,CAAC,SAAS,oBAAoB,CAAC,QAAQ,EAAE;AACzC,EAAE,OAAO,gBAAgB,KAAK,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CAAC;AAC7E,CAAC;AACD,CAAC,SAAS,aAAa,CAAC,QAAQ,EAAE;AAClC,EAAE,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,OAAO,IAAI;AAC5C,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,OAAO,IAAI;AAC3C,EAAE,IAAI,oBAAoB,CAAC,QAAQ,CAAC,EAAE,OAAO,IAAI;AACjD,EAAE,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AACD,CAAC,OAAO;AACR,EAAE,aAAa;AACf,EAAE,oBAAoB;AACtB,EAAE;AACF,EAAE;AACF;AACA;AACA;AACA,IAAI,wBAAwB,GAAG,KAAK;AACpC,IAAI,gBAAgB,GAAG,KAAK;AAC5B,IAAI,wBAAwB,GAAG,KAAK;AACpC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,gBAAgB,GAAG,KAAK;AAC5B,eAAe,UAAU,GAAG;AAC5B,CAAC,IAAI,gBAAgB,EAAE,OAAO,KAAK;AACnC,CAAC,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAC/D,CAAC,IAAI,SAAS,KAAK,IAAI,EAAE;AACzB,EAAE,gBAAgB,GAAG,IAAI;AACzB,EAAE,OAAO,KAAK;AACd,CAAC;AACD,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,IAAI;AAC9C,CAAC,gBAAgB,GAAG,IAAI;AACxB,CAAC,OAAO,KAAK;AACb;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,cAAc,mBAAmB,IAAI,GAAG,EAAE;AAC9C,eAAe,cAAc,CAAC,MAAM,EAAE;AACtC,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;AACjC,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC;AACxD,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;AAC3B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,mBAAmB,EAAE,UAAU,EAAE;AACjF,CAAC,IAAI,WAAW;AAChB,CAAC,IAAI,cAAc,GAAG,EAAE;AACxB,CAAC,IAAI,UAAU,EAAE;AACjB,EAAE,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE;AACjC,EAAE,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,WAAW;AAChD,CAAC;AACD,CAAC,IAAI,CAAC,WAAW,IAAI,mBAAmB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE;AACrE,EAAE,MAAM,QAAQ,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AAC9F,EAAE,IAAI,QAAQ,EAAE,WAAW,GAAG,QAAQ,CAAC,EAAE;AACzC,CAAC;AACD,CAAC,OAAO;AACR,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;AACjB,EAAE,WAAW;AACb,EAAE,mBAAmB;AACrB,EAAE,cAAc;AAChB,EAAE,cAAc,EAAE,YAAY,GAAG,EAAE,YAAY,EAAE,GAAG;AACpD,EAAE;AACF;AACA,IAAI,kBAAkB,mBAAmB,IAAI,GAAG,CAAC;AACjD,CAAC,GAAG;AACJ,CAAC,QAAQ;AACT,CAAC,QAAQ;AACT,CAAC;AACD,CAAC,CAAC;AACC,IAAC,EAAE,aAAa,EAAE,oBAAoB,EAAE,aAAa,EAAE,GAAG,qBAAqB,CAAC;AACnF,CAAC,WAAW,EAAE,kBAAkB;AAChC,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;AACtC,CAAC,UAAU,EAAE,CAAC,aAAa,CAAC;AAC5B,CAAC,gBAAgB,EAAE,aAAa;AAChC,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC;AACxC,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,aAAa;AAC5C,CAAC;AACE,IAAC,MAAM,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK;AAC3C,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG,SAAS;AACnC,CAAC,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;AAC1D,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG,SAAS;AACnC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,SAAS,EAAE,CAAC,KAAK,CAAC;AACtC,EAAE,SAAS;AACX,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;AAC9B,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC;AACnB,EAAE,CAAC;AACH,CAAC,IAAI,CAAC,wBAAwB,EAAE;AAChC,EAAE,uBAAuB,EAAE;AAC3B,EAAE,wBAAwB,GAAG,IAAI;AACjC,CAAC;AACD,CAAC,IAAI,CAAC,gBAAgB,EAAE;AACxB,EAAE,gBAAgB,GAAG,IAAI;AACzB,EAAE,aAAa,EAAE;AACjB,EAAE,MAAM,aAAa,GAAG,iBAAiB,CAAC,WAAW,CAAC;AACtD,EAAE,IAAI,aAAa,EAAE,4BAA4B,CAAC;AAClD,GAAG,aAAa;AAChB,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;AACtC,GAAG,MAAM,EAAE,CAAC,GAAG,KAAK,gBAAgB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;AACtF,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,GAAG;AAC/B,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,OAAO,oBAAoB,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC;AACpG,CAAC,IAAI,QAAQ,KAAK,aAAa,EAAE,OAAO,oBAAoB,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC;AACvG,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC,QAAQ,CAAC;AAC5C,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC;AAC1F,CAAC,IAAI,CAAC,WAAW,EAAE;AACnB,EAAE,IAAI,MAAM,UAAU,EAAE,EAAE;AAC1B,GAAG,IAAI,cAAc,EAAE,OAAO,oBAAoB,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;AAC/E,IAAI,OAAO,EAAE,gBAAgB;AAC7B,IAAI,IAAI,EAAE;AACV,IAAI,CAAC,EAAE;AACP,IAAI,MAAM,EAAE,GAAG;AACf,IAAI,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB;AACjD,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC;AAC3B,GAAG,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;AAC1B,EAAE;AACF,CAAC;AACD,CAAC,IAAI,CAAC,WAAW,EAAE;AACnB,EAAE,IAAI,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE;AACtD,EAAE,IAAI,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;AACpD,EAAE,IAAI,CAAC,IAAI,EAAE;AACb,GAAG,MAAM,YAAY,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC;AACtD,GAAG,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK;AACrC,GAAG,IAAI,YAAY,IAAI,KAAK,EAAE;AAC9B,IAAI,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,YAAY,CAAC;AAC9D,IAAI,IAAI,SAAS,EAAE;AACnB,KAAK,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,YAAY,CAAC;AAC5D,KAAK,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,YAAY,CAAC;AAC5D,KAAK,KAAK,GAAG,SAAS,CAAC,YAAY;AACnC,KAAK,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;AACnD,IAAI,CAAC,MAAM,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC;AAC5C,GAAG;AACH,EAAE;AACF,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE;AACzC,GAAG,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;AACnF,GAAG,IAAI,IAAI,EAAE,MAAM,oBAAoB,CAAC,IAAI,CAAC;AAC7C,EAAE;AACF,EAAE,IAAI,CAAC,IAAI,EAAE;AACb,GAAG,IAAI,cAAc,EAAE,OAAO,oBAAoB,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;AAC/E,IAAI,OAAO,EAAE,sDAAsD;AACnE,IAAI,IAAI,EAAE;AACV,IAAI,CAAC,EAAE;AACP,IAAI,MAAM,EAAE,GAAG;AACf,IAAI,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB;AACjD,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC;AAC3B,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACrE,EAAE;AACF,EAAE,MAAM,GAAG,OAAO,EAAE,mBAAmB,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AACzE,GAAG,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;AAC1B,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;AACjE,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;AAC7D,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE;AACjE,GAAG,CAAC;AACJ,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI;AAC1B,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;AACzD,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE,UAAU,CAAC;AACrF,CAAC,CAAC,MAAM;AACR,EAAE,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,oBAAoB,CAAC,QAAQ,CAAC;AAC/F,EAAE,MAAM,KAAK,GAAG,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE;AAClF,EAAE,IAAI,IAAI,GAAG,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,IAAI;AACnE,EAAE,IAAI,CAAC,IAAI,IAAI,kBAAkB,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE;AAC/D,GAAG,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;AACnF,GAAG,IAAI,CAAC,IAAI,IAAI,QAAQ,KAAK,QAAQ,IAAI,CAAC,wBAAwB,EAAE;AACpE,IAAI,wBAAwB,GAAG,IAAI;AACnC,IAAI,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS;AAC9C,IAAI,MAAM,SAAS,GAAG,SAAS,CAAC,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;AAC3E,IAAI,MAAM,UAAU,GAAG,SAAS,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;AACjE,IAAI,IAAI,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,8OAA8O,EAAE;AACzR,KAAK,SAAS,EAAE,YAAY;AAC5B,KAAK,iBAAiB,EAAE;AACxB,KAAK,CAAC;AACN,SAAS,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,wOAAwO,EAAE;AACzQ,KAAK,SAAS,EAAE,YAAY;AAC5B,KAAK,iBAAiB,EAAE;AACxB,KAAK,CAAC;AACN,GAAG;AACH,EAAE;AACF,EAAE,IAAI,IAAI,EAAE;AACZ,GAAG,MAAM,GAAG,OAAO,EAAE,mBAAmB,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AAC1E,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3B,IAAI,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;AAClE,IAAI,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;AAC9D,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE;AAClE,IAAI,CAAC;AACL,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI;AAC3B,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;AAC1D,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE,UAAU,CAAC;AACtF,EAAE;AACF,CAAC;AACD,CAAC,OAAO,oBAAoB,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC;AACvE;AACA,SAAS,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE;AAC7D,CAAC,oBAAoB,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;AAChF,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,SAAS,CAAC;AACnD,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,qCAAqC,CAAC;AAChH,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,QAAQ,KAAK,cAAc,IAAI,QAAQ,KAAK,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,wBAAwB,CAAC;AACxK,CAAC,OAAO,QAAQ;AAChB;AACG,IAAC,WAAW,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK;AAChD,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE;AACzB,EAAE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI;AACzB,EAAE,OAAO;AACT,GAAG,OAAO,EAAE,IAAI,CAAC,OAAO;AACxB,GAAG,IAAI,EAAE,IAAI,CAAC,IAAI;AAClB,GAAG,MAAM,EAAE,IAAI,CAAC;AAChB,GAAG;AACH,CAAC;AACD,CAAC,IAAI,MAAM,KAAK,GAAG,EAAE,OAAO;AAC5B,EAAE,OAAO,EAAE,iBAAiB;AAC5B,EAAE,IAAI,EAAE;AACR,EAAE;AACF,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,SAAS,EAAE,CAAC,KAAK,CAAC;AACxC,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;AAC9B,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC;AACnB,EAAE,CAAC,EAAE,KAAK,CAAC,iBAAiB,EAAE;AAC9B,EAAE,SAAS,EAAE,aAAa;AAC1B,EAAE,MAAM;AACR,EAAE,GAAG,EAAE,YAAY,CAAC,KAAK,CAAC;AAC1B,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG;AACvE,EAAE,CAAC;AACH,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE;AACnC,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;AAC9B,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ;AAC3B,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,IAAI,MAAM;AAC5C,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE;AAC3B,EAAE,CAAC;AACH,CAAC,OAAO;AACR,EAAE,OAAO,EAAE,+BAA+B;AAC1C,EAAE,IAAI,EAAE;AACR,EAAE;AACF;;;;"}

package/build/server/chunks/entries/pages/{_error.svelte.js-DiCS9ZOL.js → _error.svelte.js-DWRpiLmd.js}

@@ -1,14 +1,14 @@
 import 'clsx';
-import { p as page } from '../../chunks/state.js-CCKu0CaC.js';
+import { p as page } from '../../chunks/state.js-DRIvCY3h.js';
 import { E as ErrorScreen } from '../../chunks/ErrorScreen.js-D6_joiwG.js';
 import '../../chunks/server.js-DmrfOoxb.js';
 import '../../chunks/uneval.js-1VR0v8ir.js';
-import '../../chunks/client.js-0QVINoWt.js';
+import '../../chunks/client.js-Bpq0VuTu.js';
 import '../../chunks/index-server.js-Dkqbavz2.js';
 import '../../chunks/shared.js-DVKQackd.js';
 import '@sveltejs/kit/internal';
 import '../../chunks/exports.js-GeBTnchJ.js';
-import '../../chunks/internal2.js-DcssKd4i.js';
+import '../../chunks/internal2.js-Bh_dm6kd.js';
 import '../../chunks/legacy-client.js-rpE_7V58.js';
 import '../../chunks/events.js-Dim6Jkwe.js';
 import '@sveltejs/kit/internal/server';
@@ -32,4 +32,4 @@ function _error($$renderer, $$props) {
 }
 
 export { _error as default };
-//# sourceMappingURL=_error.svelte.js-DiCS9ZOL.js.map
+//# sourceMappingURL=_error.svelte.js-DWRpiLmd.js.map

package/build/server/chunks/entries/pages/{_error.svelte.js-DiCS9ZOL.js.map → _error.svelte.js-DWRpiLmd.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_error.svelte.js-DiCS9ZOL.js","sources":["../../../../../.svelte-kit/output/server/entries/pages/_error.svelte.js"],"sourcesContent":["import \"../../chunks/server.js\";\nimport { t as page } from \"../../chunks/state.js\";\nimport { t as ErrorScreen } from \"../../chunks/ErrorScreen.js\";\n//#region src/routes/+error.svelte\nfunction _error($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\tErrorScreen($$renderer, {\n\t\t\tstatus: page.status,\n\t\t\tmessage: page.error?.message,\n\t\t\tdetails: page.error && typeof page.error === \"object\" && \"details\" in page.error ? page.error.details : void 0\n\t\t});\n\t});\n}\n//#endregion\nexport { _error as default };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAGA;AACA,SAAS,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE;AACrC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,WAAW,CAAC,UAAU,EAAE;AAC1B,GAAG,MAAM,EAAE,IAAI,CAAC,MAAM;AACtB,GAAG,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO;AAC/B,GAAG,OAAO,EAAE,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,SAAS,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG;AAC3G,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC;AACH;;;;"}
+{"version":3,"file":"_error.svelte.js-DWRpiLmd.js","sources":["../../../../../.svelte-kit/output/server/entries/pages/_error.svelte.js"],"sourcesContent":["import \"../../chunks/server.js\";\nimport { t as page } from \"../../chunks/state.js\";\nimport { t as ErrorScreen } from \"../../chunks/ErrorScreen.js\";\n//#region src/routes/+error.svelte\nfunction _error($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\tErrorScreen($$renderer, {\n\t\t\tstatus: page.status,\n\t\t\tmessage: page.error?.message,\n\t\t\tdetails: page.error && typeof page.error === \"object\" && \"details\" in page.error ? page.error.details : void 0\n\t\t});\n\t});\n}\n//#endregion\nexport { _error as default };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAGA;AACA,SAAS,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE;AACrC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,WAAW,CAAC,UAAU,EAAE;AAC1B,GAAG,MAAM,EAAE,IAAI,CAAC,MAAM;AACtB,GAAG,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO;AAC/B,GAAG,OAAO,EAAE,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,SAAS,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG;AAC3G,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/entries/pages/{_page.svelte.js-2vvLdcex.js → _page.svelte.js-nw14XI4h.js}

@@ -1,13 +1,13 @@
 import { X as head, a4 as escape_html, T as derived } from '../../chunks/server.js-DmrfOoxb.js';
 import { B as Button } from '../../chunks/button.js-CSa540TU.js';
-import { A as AppHeader } from '../../chunks/AppHeader.js-BfbJ9Wvh.js';
-import { p as page } from '../../chunks/state.js-CCKu0CaC.js';
+import { A as AppHeader } from '../../chunks/AppHeader.js-DPeXjmPi.js';
+import { p as page } from '../../chunks/state.js-DRIvCY3h.js';
 import '../../chunks/uneval.js-1VR0v8ir.js';
 import 'clsx';
 import '../../chunks/utils3.js-DrFQ7TNp.js';
 import 'tailwind-merge';
 import 'tailwind-variants';
-import '../../chunks/UserChip.js-2mLw8DG-.js';
+import '../../chunks/UserChip.js-JYI3D9Nt.js';
 import '../../chunks/events.js-Dim6Jkwe.js';
 import '../../chunks/chunk-Y3M7P3BW.js-qwxSY5dh.js';
 import '../../chunks/footerContext.svelte.js-B4V0UyTy.js';
@@ -23,11 +23,11 @@ import '../../chunks/index-server.js-Dkqbavz2.js';
 import '../../chunks/dialog-description.js-DcJpVhhU.js';
 import '../../chunks/dialog.js-DkGWEulu.js';
 import '../../chunks/x.js-DCkToa2e.js';
-import '../../chunks/client.js-0QVINoWt.js';
+import '../../chunks/client.js-Bpq0VuTu.js';
 import '../../chunks/shared.js-DVKQackd.js';
 import '@sveltejs/kit/internal';
 import '../../chunks/exports.js-GeBTnchJ.js';
-import '../../chunks/internal2.js-DcssKd4i.js';
+import '../../chunks/internal2.js-Bh_dm6kd.js';
 import '../../chunks/legacy-client.js-rpE_7V58.js';
 import '@sveltejs/kit/internal/server';
 import '../../chunks/settings.js-DFaptFrS.js';
@@ -73,4 +73,4 @@ function _page($$renderer, $$props) {
 }
 
 export { _page as default };
-//# sourceMappingURL=_page.svelte.js-2vvLdcex.js.map
+//# sourceMappingURL=_page.svelte.js-nw14XI4h.js.map

package/build/server/chunks/entries/pages/{_page.svelte.js-2vvLdcex.js.map → _page.svelte.js-nw14XI4h.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_page.svelte.js-2vvLdcex.js","sources":["../../../../../.svelte-kit/output/server/entries/pages/_page.svelte.js"],"sourcesContent":["import { A as escape_html, a as derived, c as head } from \"../../chunks/server.js\";\nimport { t as Button } from \"../../chunks/button.js\";\nimport { t as AppHeader } from \"../../chunks/AppHeader.js\";\nimport { t as page } from \"../../chunks/state.js\";\n//#region src/routes/+page.svelte\nfunction _page($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\tconst isAuthed = derived(() => !!page.data.user);\n\t\tconst branding = derived(() => page.data.branding);\n\t\thead(\"1uha8ag\", $$renderer, ($$renderer) => {\n\t\t\t$$renderer.title(($$renderer) => {\n\t\t\t\t$$renderer.push(`<title>${escape_html(branding().name)}</title>`);\n\t\t\t});\n\t\t});\n\t\tAppHeader($$renderer, {\n\t\t\thomeUrl: \"/\",\n\t\t\tchildren: ($$renderer) => {\n\t\t\t\t$$renderer.push(`<div class=\"flex flex-1 flex-col items-center justify-center px-4 text-center\"><div class=\"max-w-md space-y-6\"><h1 class=\"text-4xl font-bold tracking-tight\">${escape_html(branding().name)}</h1> <p class=\"text-muted-foreground text-lg\">${escape_html(branding().tagline)}</p> <div class=\"flex justify-center gap-3\">`);\n\t\t\t\tif (isAuthed()) {\n\t\t\t\t\t$$renderer.push(\"<!--[0-->\");\n\t\t\t\t\tButton($$renderer, {\n\t\t\t\t\t\thref: \"/library\",\n\t\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t\t$$renderer.push(`<!---->Open library`);\n\t\t\t\t\t\t},\n\t\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t\t});\n\t\t\t\t} else {\n\t\t\t\t\t$$renderer.push(\"<!--[-1-->\");\n\t\t\t\t\tButton($$renderer, {\n\t\t\t\t\t\thref: \"/login\",\n\t\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t\t$$renderer.push(`<!---->Sign in`);\n\t\t\t\t\t\t},\n\t\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t\t$$renderer.push(`<!--]--></div></div></div>`);\n\t\t\t},\n\t\t\t$$slots: { default: true }\n\t\t});\n\t});\n}\n//#endregion\nexport { _page as default };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIA;AACA,SAAS,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE;AACpC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAClD,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;AACpD,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,UAAU,KAAK;AAC9C,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,UAAU,KAAK;AACpC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AACrE,GAAG,CAAC,CAAC;AACL,EAAE,CAAC,CAAC;AACJ,EAAE,SAAS,CAAC,UAAU,EAAE;AACxB,GAAG,OAAO,EAAE,GAAG;AACf,GAAG,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC7B,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,6JAA6J,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,+CAA+C,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,4CAA4C,CAAC,CAAC;AAChV,IAAI,IAAI,QAAQ,EAAE,EAAE;AACpB,KAAK,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AACjC,KAAK,MAAM,CAAC,UAAU,EAAE;AACxB,MAAM,IAAI,EAAE,UAAU;AACtB,MAAM,QAAQ,EAAE,CAAC,UAAU,KAAK;AAChC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,mBAAmB,CAAC,CAAC;AAC7C,MAAM,CAAC;AACP,MAAM,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC9B,MAAM,CAAC;AACP,IAAI,CAAC,MAAM;AACX,KAAK,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AAClC,KAAK,MAAM,CAAC,UAAU,EAAE;AACxB,MAAM,IAAI,EAAE,QAAQ;AACpB,MAAM,QAAQ,EAAE,CAAC,UAAU,KAAK;AAChC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;AACxC,MAAM,CAAC;AACP,MAAM,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC9B,MAAM,CAAC;AACP,IAAI;AACJ,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,0BAA0B,CAAC,CAAC;AACjD,GAAG,CAED,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AACH;;;;"}
+{"version":3,"file":"_page.svelte.js-nw14XI4h.js","sources":["../../../../../.svelte-kit/output/server/entries/pages/_page.svelte.js"],"sourcesContent":["import { A as escape_html, a as derived, c as head } from \"../../chunks/server.js\";\nimport { t as Button } from \"../../chunks/button.js\";\nimport { t as AppHeader } from \"../../chunks/AppHeader.js\";\nimport { t as page } from \"../../chunks/state.js\";\n//#region src/routes/+page.svelte\nfunction _page($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\tconst isAuthed = derived(() => !!page.data.user);\n\t\tconst branding = derived(() => page.data.branding);\n\t\thead(\"1uha8ag\", $$renderer, ($$renderer) => {\n\t\t\t$$renderer.title(($$renderer) => {\n\t\t\t\t$$renderer.push(`<title>${escape_html(branding().name)}</title>`);\n\t\t\t});\n\t\t});\n\t\tAppHeader($$renderer, {\n\t\t\thomeUrl: \"/\",\n\t\t\tchildren: ($$renderer) => {\n\t\t\t\t$$renderer.push(`<div class=\"flex flex-1 flex-col items-center justify-center px-4 text-center\"><div class=\"max-w-md space-y-6\"><h1 class=\"text-4xl font-bold tracking-tight\">${escape_html(branding().name)}</h1> <p class=\"text-muted-foreground text-lg\">${escape_html(branding().tagline)}</p> <div class=\"flex justify-center gap-3\">`);\n\t\t\t\tif (isAuthed()) {\n\t\t\t\t\t$$renderer.push(\"<!--[0-->\");\n\t\t\t\t\tButton($$renderer, {\n\t\t\t\t\t\thref: \"/library\",\n\t\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t\t$$renderer.push(`<!---->Open library`);\n\t\t\t\t\t\t},\n\t\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t\t});\n\t\t\t\t} else {\n\t\t\t\t\t$$renderer.push(\"<!--[-1-->\");\n\t\t\t\t\tButton($$renderer, {\n\t\t\t\t\t\thref: \"/login\",\n\t\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t\t$$renderer.push(`<!---->Sign in`);\n\t\t\t\t\t\t},\n\t\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t\t$$renderer.push(`<!--]--></div></div></div>`);\n\t\t\t},\n\t\t\t$$slots: { default: true }\n\t\t});\n\t});\n}\n//#endregion\nexport { _page as default };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIA;AACA,SAAS,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE;AACpC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAClD,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;AACpD,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,UAAU,KAAK;AAC9C,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,UAAU,KAAK;AACpC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AACrE,GAAG,CAAC,CAAC;AACL,EAAE,CAAC,CAAC;AACJ,EAAE,SAAS,CAAC,UAAU,EAAE;AACxB,GAAG,OAAO,EAAE,GAAG;AACf,GAAG,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC7B,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,6JAA6J,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,+CAA+C,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,4CAA4C,CAAC,CAAC;AAChV,IAAI,IAAI,QAAQ,EAAE,EAAE;AACpB,KAAK,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AACjC,KAAK,MAAM,CAAC,UAAU,EAAE;AACxB,MAAM,IAAI,EAAE,UAAU;AACtB,MAAM,QAAQ,EAAE,CAAC,UAAU,KAAK;AAChC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,mBAAmB,CAAC,CAAC;AAC7C,MAAM,CAAC;AACP,MAAM,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC9B,MAAM,CAAC;AACP,IAAI,CAAC,MAAM;AACX,KAAK,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AAClC,KAAK,MAAM,CAAC,UAAU,EAAE;AACxB,MAAM,IAAI,EAAE,QAAQ;AACpB,MAAM,QAAQ,EAAE,CAAC,UAAU,KAAK;AAChC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;AACxC,MAAM,CAAC;AACP,MAAM,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC9B,MAAM,CAAC;AACP,IAAI;AACJ,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,0BAA0B,CAAC,CAAC;AACjD,GAAG,CAED,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/entries/pages/accept-invite/{_page.server.ts.js-CxZpwJjl.js → _page.server.ts.js-Bt4yAkIi.js}

@@ -1,6 +1,6 @@
 import { S as SYSTEM_CONTEXT } from '../../../chunks/src.js-BeFXhqDJ.js';
 import { t as getInviteStore, a as getAuthProvider, e as getOrganizationProvider, r as renderThrown, u as getUserProfileStore } from '../../../chunks/providers.server.js-Ck45V_zF.js';
-import { s as setSessionCookie } from '../../../chunks/admin-auth.server.js-CpJLI73r.js';
+import { s as setSessionCookie } from '../../../chunks/admin-auth.server.js-DBasnefm.js';
 import { h as hashToken } from '../../../chunks/token2.server.js-D_ltSz_6.js';
 import { fail, redirect } from '@sveltejs/kit';
 
@@ -106,4 +106,4 @@ var _page_server_ts = /*#__PURE__*/Object.freeze({
 });
 
 export { _page_server_ts as _ };
-//# sourceMappingURL=_page.server.ts.js-CxZpwJjl.js.map
+//# sourceMappingURL=_page.server.ts.js-Bt4yAkIi.js.map

package/build/server/chunks/entries/pages/accept-invite/{_page.server.ts.js-CxZpwJjl.js.map → _page.server.ts.js-Bt4yAkIi.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_page.server.ts.js-CxZpwJjl.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/accept-invite/_page.server.ts.js"],"sourcesContent":["import { t as SYSTEM_CONTEXT } from \"../../../chunks/src.js\";\nimport { T as renderThrown, d as getInviteStore, m as getOrganizationProvider, r as getAuthProvider, x as getUserProfileStore } from \"../../../chunks/providers.server.js\";\nimport { l as setSessionCookie } from \"../../../chunks/admin-auth.server.js\";\nimport \"../../../chunks/auth.server.js\";\nimport { t as hashToken } from \"../../../chunks/token2.server.js\";\nimport { fail, redirect } from \"@sveltejs/kit\";\n//#region src/routes/accept-invite/+page.server.ts\n/**\n* Public page — the invite token is the capability. `SYSTEM_CONTEXT` is\n* passed to the invite store because there is no user session at this point;\n* the store treats an unknown/expired/consumed invite as a miss regardless.\n*\n* The raw URL token is HMAC-hashed before lookup — the store sees only the\n* digest. Mirrors the share-link flow.\n*\n* Form mode is decided here once and surfaced to the UI:\n*   - `password` — the provider owns credentials; show password + confirm fields.\n*   - `proxy`    — identity comes from upstream-proxy headers; the visit itself\n*                  is the proof of identity and no password is collected.\n*/\nvar load = async ({ url }) => {\n\tconst token = url.searchParams.get(\"token\")?.trim();\n\tif (!token) return {\n\t\tok: false,\n\t\treason: \"This invite link is missing a token.\"\n\t};\n\tconst invite = await getInviteStore().getByTokenHash(SYSTEM_CONTEXT, hashToken(token));\n\tif (!invite) return {\n\t\tok: false,\n\t\treason: \"This invite link is invalid or has expired.\"\n\t};\n\tconst org = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, invite.orgId);\n\tconst auth = getAuthProvider();\n\tconst mode = auth.passwordAuth ? \"password\" : auth.proxyAuth && auth.createUser ? \"proxy\" : \"password\";\n\treturn {\n\t\tok: true,\n\t\temail: invite.email,\n\t\torgName: org?.name ?? \"the organization\",\n\t\ttoken,\n\t\tmode\n\t};\n};\nvar actions = { default: async ({ request, cookies, locals }) => {\n\tconst data = await request.formData();\n\tconst token = data.get(\"token\")?.trim() ?? \"\";\n\tconst password = data.get(\"password\");\n\tconst confirm = data.get(\"confirm\");\n\tconst displayName = data.get(\"displayName\")?.trim() || void 0;\n\tif (!token) return fail(400, { error: \"Missing invite token.\" });\n\tlet invite;\n\ttry {\n\t\tinvite = await getInviteStore().getByTokenHash(SYSTEM_CONTEXT, hashToken(token));\n\t} catch {\n\t\treturn fail(500, { error: \"Could not validate the invite. Please try again.\" });\n\t}\n\tif (!invite) return fail(410, { error: \"This invite link is invalid or has expired.\" });\n\tconst auth = getAuthProvider();\n\tconst mode = auth.passwordAuth ? \"password\" : auth.proxyAuth && auth.createUser ? \"proxy\" : \"password\";\n\tif (mode === \"password\") {\n\t\tif (!password || password.length < 8) return fail(400, { error: \"Password must be at least 8 characters.\" });\n\t\tif (password !== confirm) return fail(400, { error: \"Passwords do not match.\" });\n\t}\n\tlet user;\n\ttry {\n\t\tif (mode === \"password\" && auth.passwordAuth) user = await auth.passwordAuth.createUserWithPassword(invite.email, password);\n\t\telse if (mode === \"proxy\" && auth.createUser) user = await auth.createUser(invite.email);\n\t\telse return fail(501, { error: \"This provider does not support invite-based signup.\" });\n\t} catch (err) {\n\t\treturn fail(400, { error: err instanceof Error ? err.message : \"Could not create your account.\" });\n\t}\n\ttry {\n\t\tconst joinedAt = (/* @__PURE__ */ new Date()).toISOString();\n\t\tawait getOrganizationProvider().addOrgMember(SYSTEM_CONTEXT, {\n\t\t\torgId: invite.orgId,\n\t\t\tuserId: user.id,\n\t\t\trole: invite.orgRole,\n\t\t\tpermissions: invite.orgPermissions,\n\t\t\tjoinedAt,\n\t\t\tupdatedAt: joinedAt,\n\t\t\tupdatedBy: invite.invitedBy,\n\t\t\tdeletedAt: null\n\t\t});\n\t\tawait getInviteStore().markAccepted(SYSTEM_CONTEXT, invite.id, user.id);\n\t} catch (err) {\n\t\tlocals.log.error(\"Post-signup wiring failed\", {\n\t\t\tcomponent: \"accept-invite\",\n\t\t\terr: renderThrown(err)\n\t\t});\n\t\treturn fail(500, { error: \"Your account was created, but we could not finish joining the organization. Please contact your admin.\" });\n\t}\n\tif (displayName) try {\n\t\tawait getUserProfileStore().updateProfile(SYSTEM_CONTEXT, user.id, { displayName });\n\t} catch {}\n\tif (mode === \"password\" && auth.passwordAuth) {\n\t\tconst loginResult = await auth.passwordAuth.verifyLogin(invite.email, password);\n\t\tif (loginResult.kind !== \"success\") return fail(500, { error: \"Your account was created but login failed. Please sign in manually.\" });\n\t\tsetSessionCookie(cookies, loginResult.sessionToken);\n\t}\n\tredirect(303, \"/admin\");\n} };\n//#endregion\nexport { actions, load };\n"],"names":[],"mappings":";;;;;;AAMA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,IAAI,GAAG,OAAO,EAAE,GAAG,EAAE,KAAK;AAC9B,CAAC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE;AACpD,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO;AACpB,EAAE,EAAE,EAAE,KAAK;AACX,EAAE,MAAM,EAAE;AACV,EAAE;AACF,CAAC,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC,cAAc,CAAC,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;AACvF,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO;AACrB,EAAE,EAAE,EAAE,KAAK;AACX,EAAE,MAAM,EAAE;AACV,EAAE;AACF,CAAC,MAAM,GAAG,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC;AACjF,CAAC,MAAM,IAAI,GAAG,eAAe,EAAE;AAC/B,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,GAAG,UAAU,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,GAAG,OAAO,GAAG,UAAU;AACvG,CAAC,OAAO;AACR,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK;AACrB,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,kBAAkB;AAC1C,EAAE,KAAK;AACP,EAAE;AACF,EAAE;AACF,CAAC;AACD,IAAI,OAAO,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACjE,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;AACtC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;AAC9C,CAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;AACtC,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;AACpC,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,IAAI,MAAM;AAC9D,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;AACjE,CAAC,IAAI,MAAM;AACX,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC,cAAc,CAAC,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;AAClF,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC;AACjF,CAAC;AACD,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC;AACxF,CAAC,MAAM,IAAI,GAAG,eAAe,EAAE;AAC/B,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,GAAG,UAAU,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,GAAG,OAAO,GAAG,UAAU;AACvG,CAAC,IAAI,IAAI,KAAK,UAAU,EAAE;AAC1B,EAAE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC;AAC9G,EAAE,IAAI,QAAQ,KAAK,OAAO,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;AAClF,CAAC;AACD,CAAC,IAAI,IAAI;AACT,CAAC,IAAI;AACL,EAAE,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,YAAY,EAAE,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;AAC7H,OAAO,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;AAC1F,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,qDAAqD,EAAE,CAAC;AACzF,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,gCAAgC,EAAE,CAAC;AACpG,CAAC;AACD,CAAC,IAAI;AACL,EAAE,MAAM,QAAQ,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AAC7D,EAAE,MAAM,uBAAuB,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE;AAC/D,GAAG,KAAK,EAAE,MAAM,CAAC,KAAK;AACtB,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE;AAClB,GAAG,IAAI,EAAE,MAAM,CAAC,OAAO;AACvB,GAAG,WAAW,EAAE,MAAM,CAAC,cAAc;AACrC,GAAG,QAAQ;AACX,GAAG,SAAS,EAAE,QAAQ;AACtB,GAAG,SAAS,EAAE,MAAM,CAAC,SAAS;AAC9B,GAAG,SAAS,EAAE;AACd,GAAG,CAAC;AACJ,EAAE,MAAM,cAAc,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;AACzE,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,2BAA2B,EAAE;AAChD,GAAG,SAAS,EAAE,eAAe;AAC7B,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC;AACJ,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,wGAAwG,EAAE,CAAC;AACvI,CAAC;AACD,CAAC,IAAI,WAAW,EAAE,IAAI;AACtB,EAAE,MAAM,mBAAmB,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;AACrF,CAAC,CAAC,CAAC,MAAM,CAAC;AACV,CAAC,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,YAAY,EAAE;AAC/C,EAAE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;AACjF,EAAE,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,qEAAqE,EAAE,CAAC;AACxI,EAAE,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,YAAY,CAAC;AACrD,CAAC;AACD,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;AACxB,CAAC,EAAE;;;;;;;;;;"}
+{"version":3,"file":"_page.server.ts.js-Bt4yAkIi.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/accept-invite/_page.server.ts.js"],"sourcesContent":["import { t as SYSTEM_CONTEXT } from \"../../../chunks/src.js\";\nimport { T as renderThrown, d as getInviteStore, m as getOrganizationProvider, r as getAuthProvider, x as getUserProfileStore } from \"../../../chunks/providers.server.js\";\nimport { l as setSessionCookie } from \"../../../chunks/admin-auth.server.js\";\nimport \"../../../chunks/auth.server.js\";\nimport { t as hashToken } from \"../../../chunks/token2.server.js\";\nimport { fail, redirect } from \"@sveltejs/kit\";\n//#region src/routes/accept-invite/+page.server.ts\n/**\n* Public page — the invite token is the capability. `SYSTEM_CONTEXT` is\n* passed to the invite store because there is no user session at this point;\n* the store treats an unknown/expired/consumed invite as a miss regardless.\n*\n* The raw URL token is HMAC-hashed before lookup — the store sees only the\n* digest. Mirrors the share-link flow.\n*\n* Form mode is decided here once and surfaced to the UI:\n*   - `password` — the provider owns credentials; show password + confirm fields.\n*   - `proxy`    — identity comes from upstream-proxy headers; the visit itself\n*                  is the proof of identity and no password is collected.\n*/\nvar load = async ({ url }) => {\n\tconst token = url.searchParams.get(\"token\")?.trim();\n\tif (!token) return {\n\t\tok: false,\n\t\treason: \"This invite link is missing a token.\"\n\t};\n\tconst invite = await getInviteStore().getByTokenHash(SYSTEM_CONTEXT, hashToken(token));\n\tif (!invite) return {\n\t\tok: false,\n\t\treason: \"This invite link is invalid or has expired.\"\n\t};\n\tconst org = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, invite.orgId);\n\tconst auth = getAuthProvider();\n\tconst mode = auth.passwordAuth ? \"password\" : auth.proxyAuth && auth.createUser ? \"proxy\" : \"password\";\n\treturn {\n\t\tok: true,\n\t\temail: invite.email,\n\t\torgName: org?.name ?? \"the organization\",\n\t\ttoken,\n\t\tmode\n\t};\n};\nvar actions = { default: async ({ request, cookies, locals }) => {\n\tconst data = await request.formData();\n\tconst token = data.get(\"token\")?.trim() ?? \"\";\n\tconst password = data.get(\"password\");\n\tconst confirm = data.get(\"confirm\");\n\tconst displayName = data.get(\"displayName\")?.trim() || void 0;\n\tif (!token) return fail(400, { error: \"Missing invite token.\" });\n\tlet invite;\n\ttry {\n\t\tinvite = await getInviteStore().getByTokenHash(SYSTEM_CONTEXT, hashToken(token));\n\t} catch {\n\t\treturn fail(500, { error: \"Could not validate the invite. Please try again.\" });\n\t}\n\tif (!invite) return fail(410, { error: \"This invite link is invalid or has expired.\" });\n\tconst auth = getAuthProvider();\n\tconst mode = auth.passwordAuth ? \"password\" : auth.proxyAuth && auth.createUser ? \"proxy\" : \"password\";\n\tif (mode === \"password\") {\n\t\tif (!password || password.length < 8) return fail(400, { error: \"Password must be at least 8 characters.\" });\n\t\tif (password !== confirm) return fail(400, { error: \"Passwords do not match.\" });\n\t}\n\tlet user;\n\ttry {\n\t\tif (mode === \"password\" && auth.passwordAuth) user = await auth.passwordAuth.createUserWithPassword(invite.email, password);\n\t\telse if (mode === \"proxy\" && auth.createUser) user = await auth.createUser(invite.email);\n\t\telse return fail(501, { error: \"This provider does not support invite-based signup.\" });\n\t} catch (err) {\n\t\treturn fail(400, { error: err instanceof Error ? err.message : \"Could not create your account.\" });\n\t}\n\ttry {\n\t\tconst joinedAt = (/* @__PURE__ */ new Date()).toISOString();\n\t\tawait getOrganizationProvider().addOrgMember(SYSTEM_CONTEXT, {\n\t\t\torgId: invite.orgId,\n\t\t\tuserId: user.id,\n\t\t\trole: invite.orgRole,\n\t\t\tpermissions: invite.orgPermissions,\n\t\t\tjoinedAt,\n\t\t\tupdatedAt: joinedAt,\n\t\t\tupdatedBy: invite.invitedBy,\n\t\t\tdeletedAt: null\n\t\t});\n\t\tawait getInviteStore().markAccepted(SYSTEM_CONTEXT, invite.id, user.id);\n\t} catch (err) {\n\t\tlocals.log.error(\"Post-signup wiring failed\", {\n\t\t\tcomponent: \"accept-invite\",\n\t\t\terr: renderThrown(err)\n\t\t});\n\t\treturn fail(500, { error: \"Your account was created, but we could not finish joining the organization. Please contact your admin.\" });\n\t}\n\tif (displayName) try {\n\t\tawait getUserProfileStore().updateProfile(SYSTEM_CONTEXT, user.id, { displayName });\n\t} catch {}\n\tif (mode === \"password\" && auth.passwordAuth) {\n\t\tconst loginResult = await auth.passwordAuth.verifyLogin(invite.email, password);\n\t\tif (loginResult.kind !== \"success\") return fail(500, { error: \"Your account was created but login failed. Please sign in manually.\" });\n\t\tsetSessionCookie(cookies, loginResult.sessionToken);\n\t}\n\tredirect(303, \"/admin\");\n} };\n//#endregion\nexport { actions, load };\n"],"names":[],"mappings":";;;;;;AAMA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,IAAI,GAAG,OAAO,EAAE,GAAG,EAAE,KAAK;AAC9B,CAAC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE;AACpD,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO;AACpB,EAAE,EAAE,EAAE,KAAK;AACX,EAAE,MAAM,EAAE;AACV,EAAE;AACF,CAAC,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC,cAAc,CAAC,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;AACvF,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO;AACrB,EAAE,EAAE,EAAE,KAAK;AACX,EAAE,MAAM,EAAE;AACV,EAAE;AACF,CAAC,MAAM,GAAG,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC;AACjF,CAAC,MAAM,IAAI,GAAG,eAAe,EAAE;AAC/B,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,GAAG,UAAU,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,GAAG,OAAO,GAAG,UAAU;AACvG,CAAC,OAAO;AACR,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK;AACrB,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,kBAAkB;AAC1C,EAAE,KAAK;AACP,EAAE;AACF,EAAE;AACF,CAAC;AACD,IAAI,OAAO,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACjE,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;AACtC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;AAC9C,CAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;AACtC,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;AACpC,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,IAAI,MAAM;AAC9D,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;AACjE,CAAC,IAAI,MAAM;AACX,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC,cAAc,CAAC,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;AAClF,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC;AACjF,CAAC;AACD,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC;AACxF,CAAC,MAAM,IAAI,GAAG,eAAe,EAAE;AAC/B,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,GAAG,UAAU,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,GAAG,OAAO,GAAG,UAAU;AACvG,CAAC,IAAI,IAAI,KAAK,UAAU,EAAE;AAC1B,EAAE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC;AAC9G,EAAE,IAAI,QAAQ,KAAK,OAAO,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;AAClF,CAAC;AACD,CAAC,IAAI,IAAI;AACT,CAAC,IAAI;AACL,EAAE,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,YAAY,EAAE,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;AAC7H,OAAO,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;AAC1F,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,qDAAqD,EAAE,CAAC;AACzF,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,gCAAgC,EAAE,CAAC;AACpG,CAAC;AACD,CAAC,IAAI;AACL,EAAE,MAAM,QAAQ,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AAC7D,EAAE,MAAM,uBAAuB,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE;AAC/D,GAAG,KAAK,EAAE,MAAM,CAAC,KAAK;AACtB,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE;AAClB,GAAG,IAAI,EAAE,MAAM,CAAC,OAAO;AACvB,GAAG,WAAW,EAAE,MAAM,CAAC,cAAc;AACrC,GAAG,QAAQ;AACX,GAAG,SAAS,EAAE,QAAQ;AACtB,GAAG,SAAS,EAAE,MAAM,CAAC,SAAS;AAC9B,GAAG,SAAS,EAAE;AACd,GAAG,CAAC;AACJ,EAAE,MAAM,cAAc,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;AACzE,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,2BAA2B,EAAE;AAChD,GAAG,SAAS,EAAE,eAAe;AAC7B,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC;AACJ,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,wGAAwG,EAAE,CAAC;AACvI,CAAC;AACD,CAAC,IAAI,WAAW,EAAE,IAAI;AACtB,EAAE,MAAM,mBAAmB,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;AACrF,CAAC,CAAC,CAAC,MAAM,CAAC;AACV,CAAC,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,YAAY,EAAE;AAC/C,EAAE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;AACjF,EAAE,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,qEAAqE,EAAE,CAAC;AACxI,EAAE,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,YAAY,CAAC;AACrD,CAAC;AACD,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;AACxB,CAAC,EAAE;;;;;;;;;;"}

package/build/server/chunks/entries/pages/accept-invite/{_page.svelte.js-D9QFHAsb.js → _page.svelte.js-shC-47yR.js}

@@ -2,7 +2,7 @@ import { X as head, a4 as escape_html, W as attr } from '../../../chunks/server.
 import { B as Button } from '../../../chunks/button.js-CSa540TU.js';
 import { C as Circle_alert } from '../../../chunks/circle-alert.js-DR1k98Iv.js';
 import { L as Label } from '../../../chunks/label.js-vFVuMZI5.js';
-import { p as page } from '../../../chunks/state.js-CCKu0CaC.js';
+import { p as page } from '../../../chunks/state.js-DRIvCY3h.js';
 import { I as Input } from '../../../chunks/input.js-flypSZ8p.js';
 import { A as Alert, a as Alert_description } from '../../../chunks/alert-description.js-D4tOQ5vz.js';
 import '../../../chunks/uneval.js-1VR0v8ir.js';
@@ -11,12 +11,12 @@ import '../../../chunks/utils3.js-DrFQ7TNp.js';
 import 'tailwind-merge';
 import 'tailwind-variants';
 import '../../../chunks/create-id.js-D3vyU7tu.js';
-import '../../../chunks/client.js-0QVINoWt.js';
+import '../../../chunks/client.js-Bpq0VuTu.js';
 import '../../../chunks/index-server.js-Dkqbavz2.js';
 import '../../../chunks/shared.js-DVKQackd.js';
 import '@sveltejs/kit/internal';
 import '../../../chunks/exports.js-GeBTnchJ.js';
-import '../../../chunks/internal2.js-DcssKd4i.js';
+import '../../../chunks/internal2.js-Bh_dm6kd.js';
 import '../../../chunks/legacy-client.js-rpE_7V58.js';
 import '../../../chunks/events.js-Dim6Jkwe.js';
 import '@sveltejs/kit/internal/server';
@@ -145,4 +145,4 @@ function _page($$renderer, $$props) {
 }
 
 export { _page as default };
-//# sourceMappingURL=_page.svelte.js-D9QFHAsb.js.map
+//# sourceMappingURL=_page.svelte.js-shC-47yR.js.map

package/build/server/chunks/entries/pages/accept-invite/{_page.svelte.js-D9QFHAsb.js.map → _page.svelte.js-shC-47yR.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_page.svelte.js-D9QFHAsb.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/accept-invite/_page.svelte.js"],"sourcesContent":["import { A as escape_html, O as attr, c as head } from \"../../../chunks/server.js\";\nimport { t as Button } from \"../../../chunks/button.js\";\nimport { t as Circle_alert } from \"../../../chunks/circle-alert.js\";\nimport { t as Label } from \"../../../chunks/label.js\";\nimport { t as page } from \"../../../chunks/state.js\";\nimport { t as Input } from \"../../../chunks/input.js\";\nimport { n as Alert, t as Alert_description } from \"../../../chunks/alert-description.js\";\n//#region src/routes/accept-invite/+page.svelte\nfunction _page($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\tlet { data, form } = $$props;\n\t\thead(\"p8b09p\", $$renderer, ($$renderer) => {\n\t\t\t$$renderer.title(($$renderer) => {\n\t\t\t\t$$renderer.push(`<title>Accept invite - ${escape_html(page.data.branding.name)}</title>`);\n\t\t\t});\n\t\t});\n\t\t$$renderer.push(`<div class=\"bg-background flex min-h-screen items-center justify-center px-4 py-12 sm:px-6 lg:px-8\"><div class=\"w-full max-w-sm space-y-6\">`);\n\t\tif (!data.ok) {\n\t\t\t$$renderer.push(\"<!--[0-->\");\n\t\t\t$$renderer.push(`<div class=\"space-y-1 text-center\"><h2 class=\"text-foreground text-2xl font-bold tracking-tight\">Invite unavailable</h2> <p class=\"text-muted-foreground text-sm\">${escape_html(data.reason)}</p></div> <div class=\"text-center\"><a href=\"/login\" class=\"text-primary text-sm underline\">Go to login</a></div>`);\n\t\t} else {\n\t\t\t$$renderer.push(\"<!--[-1-->\");\n\t\t\t$$renderer.push(`<div class=\"space-y-1 text-center\"><h2 class=\"text-foreground text-2xl font-bold tracking-tight\">Join ${escape_html(data.orgName)}</h2> <p class=\"text-muted-foreground text-sm\">You were invited as <span class=\"font-medium\">${escape_html(data.email)}</span>. `);\n\t\t\tif (data.mode === \"proxy\") {\n\t\t\t\t$$renderer.push(\"<!--[0-->\");\n\t\t\t\t$$renderer.push(`Click below to finish creating your account — your identity is verified by your company\n\t\t\t\t\t\tsign-in.`);\n\t\t\t} else {\n\t\t\t\t$$renderer.push(\"<!--[-1-->\");\n\t\t\t\t$$renderer.push(`Set a password to finish creating your account.`);\n\t\t\t}\n\t\t\t$$renderer.push(`<!--]--></p></div> <form method=\"POST\" class=\"space-y-4\"><input type=\"hidden\" name=\"token\"${attr(\"value\", data.token)}/> `);\n\t\t\tif (form?.error) {\n\t\t\t\t$$renderer.push(\"<!--[0-->\");\n\t\t\t\tif (Alert) {\n\t\t\t\t\t$$renderer.push(\"<!--[-->\");\n\t\t\t\t\tAlert($$renderer, {\n\t\t\t\t\t\tvariant: \"destructive\",\n\t\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t\tCircle_alert($$renderer, {});\n\t\t\t\t\t\t\t$$renderer.push(`<!----> `);\n\t\t\t\t\t\t\tif (Alert_description) {\n\t\t\t\t\t\t\t\t$$renderer.push(\"<!--[-->\");\n\t\t\t\t\t\t\t\tAlert_description($$renderer, {\n\t\t\t\t\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t\t\t\t\t$$renderer.push(`<!---->${escape_html(form.error)}`);\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t$$renderer.push(\"<!--]-->\");\n\t\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\t\t$$renderer.push(\"<!--[!-->\");\n\t\t\t\t\t\t\t\t$$renderer.push(\"<!--]-->\");\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t\t});\n\t\t\t\t\t$$renderer.push(\"<!--]-->\");\n\t\t\t\t} else {\n\t\t\t\t\t$$renderer.push(\"<!--[!-->\");\n\t\t\t\t\t$$renderer.push(\"<!--]-->\");\n\t\t\t\t}\n\t\t\t} else $$renderer.push(\"<!--[-1-->\");\n\t\t\t$$renderer.push(`<!--]--> `);\n\t\t\tif (data.mode === \"password\") {\n\t\t\t\t$$renderer.push(\"<!--[0-->\");\n\t\t\t\t$$renderer.push(`<div class=\"space-y-2\">`);\n\t\t\t\tLabel($$renderer, {\n\t\t\t\t\tfor: \"displayName\",\n\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t$$renderer.push(`<!---->Display name <span class=\"text-muted-foreground\">(optional)</span>`);\n\t\t\t\t\t},\n\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t});\n\t\t\t\t$$renderer.push(`<!----> `);\n\t\t\t\tInput($$renderer, {\n\t\t\t\t\tid: \"displayName\",\n\t\t\t\t\tname: \"displayName\",\n\t\t\t\t\ttype: \"text\",\n\t\t\t\t\tplaceholder: \"Your name\"\n\t\t\t\t});\n\t\t\t\t$$renderer.push(`<!----></div> <div class=\"space-y-2\">`);\n\t\t\t\tLabel($$renderer, {\n\t\t\t\t\tfor: \"password\",\n\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t$$renderer.push(`<!---->Password`);\n\t\t\t\t\t},\n\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t});\n\t\t\t\t$$renderer.push(`<!----> `);\n\t\t\t\tInput($$renderer, {\n\t\t\t\t\tid: \"password\",\n\t\t\t\t\tname: \"password\",\n\t\t\t\t\ttype: \"password\",\n\t\t\t\t\trequired: true,\n\t\t\t\t\tplaceholder: \"Min. 8 characters\"\n\t\t\t\t});\n\t\t\t\t$$renderer.push(`<!----></div> <div class=\"space-y-2\">`);\n\t\t\t\tLabel($$renderer, {\n\t\t\t\t\tfor: \"confirm\",\n\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t$$renderer.push(`<!---->Confirm password`);\n\t\t\t\t\t},\n\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t});\n\t\t\t\t$$renderer.push(`<!----> `);\n\t\t\t\tInput($$renderer, {\n\t\t\t\t\tid: \"confirm\",\n\t\t\t\t\tname: \"confirm\",\n\t\t\t\t\ttype: \"password\",\n\t\t\t\t\trequired: true,\n\t\t\t\t\tplaceholder: \"Repeat password\"\n\t\t\t\t});\n\t\t\t\t$$renderer.push(`<!----></div>`);\n\t\t\t} else $$renderer.push(\"<!--[-1-->\");\n\t\t\t$$renderer.push(`<!--]--> `);\n\t\t\tButton($$renderer, {\n\t\t\t\ttype: \"submit\",\n\t\t\t\tclass: \"w-full\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->${escape_html(data.mode === \"proxy\" ? \"Accept invite\" : \"Create account\")}`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t\t$$renderer.push(`<!----></form>`);\n\t\t}\n\t\t$$renderer.push(`<!--]--></div></div>`);\n\t});\n}\n//#endregion\nexport { _page as default };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAOA;AACA,SAAS,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE;AACpC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,OAAO;AAC9B,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,UAAU,KAAK;AAC7C,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,UAAU,KAAK;AACpC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,uBAAuB,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC7F,GAAG,CAAC,CAAC;AACL,EAAE,CAAC,CAAC;AACJ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,2IAA2I,CAAC,CAAC;AAChK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;AAChB,GAAG,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AAC/B,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,kKAAkK,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,iHAAiH,CAAC,CAAC;AACpU,EAAE,CAAC,MAAM;AACT,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AAChC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,sGAAsG,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,6FAA6F,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC;AACxR,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE;AAC9B,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AAChC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;AACrB,cAAc,CAAC,CAAC;AAChB,GAAG,CAAC,MAAM;AACV,IAAI,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACjC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,+CAA+C,CAAC,CAAC;AACtE,GAAG;AACH,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,0FAA0F,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;AAC/I,GAAG,IAAI,IAAI,EAAE,KAAK,EAAE;AACpB,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AAChC,IAAI,IAAI,KAAK,EAAE;AACf,KAAK,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AAChC,KAAK,KAAK,CAAC,UAAU,EAAE;AACvB,MAAM,OAAO,EAAE,aAAa;AAC5B,MAAM,QAAQ,EAAE,CAAC,UAAU,KAAK;AAChC,OAAO,YAAY,CAAC,UAAU,EAAE,EAAE,CAAC;AACnC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAClC,OAAO,IAAI,iBAAiB,EAAE;AAC9B,QAAQ,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AACnC,QAAQ,iBAAiB,CAAC,UAAU,EAAE;AACtC,SAAS,QAAQ,EAAE,CAAC,UAAU,KAAK;AACnC,UAAU,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC9D,SAAS,CAAC;AACV,SAAS,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AACjC,SAAS,CAAC;AACV,QAAQ,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AACnC,OAAO,CAAC,MAAM;AACd,QAAQ,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AACpC,QAAQ,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AACnC,OAAO;AACP,MAAM,CAAC;AACP,MAAM,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC9B,MAAM,CAAC;AACP,KAAK,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AAChC,IAAI,CAAC,MAAM;AACX,KAAK,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AACjC,KAAK,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AAChC,IAAI;AACJ,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACvC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AAC/B,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE;AACjC,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AAChC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,uBAAuB,CAAC,CAAC;AAC9C,IAAI,KAAK,CAAC,UAAU,EAAE;AACtB,KAAK,GAAG,EAAE,aAAa;AACvB,KAAK,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC/B,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,yEAAyE,CAAC,CAAC;AAClG,KAAK,CAAC;AACN,KAAK,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC7B,KAAK,CAAC;AACN,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC/B,IAAI,KAAK,CAAC,UAAU,EAAE;AACtB,KAAK,EAAE,EAAE,aAAa;AACtB,KAAK,IAAI,EAAE,aAAa;AACxB,KAAK,IAAI,EAAE,MAAM;AACjB,KAAK,WAAW,EAAE;AAClB,KAAK,CAAC;AACN,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,qCAAqC,CAAC,CAAC;AAC5D,IAAI,KAAK,CAAC,UAAU,EAAE;AACtB,KAAK,GAAG,EAAE,UAAU;AACpB,KAAK,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC/B,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC;AACxC,KAAK,CAAC;AACN,KAAK,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC7B,KAAK,CAAC;AACN,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC/B,IAAI,KAAK,CAAC,UAAU,EAAE;AACtB,KAAK,EAAE,EAAE,UAAU;AACnB,KAAK,IAAI,EAAE,UAAU;AACrB,KAAK,IAAI,EAAE,UAAU;AACrB,KAAK,QAAQ,EAAE,IAAI;AACnB,KAAK,WAAW,EAAE;AAClB,KAAK,CAAC;AACN,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,qCAAqC,CAAC,CAAC;AAC5D,IAAI,KAAK,CAAC,UAAU,EAAE;AACtB,KAAK,GAAG,EAAE,SAAS;AACnB,KAAK,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC/B,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,uBAAuB,CAAC,CAAC;AAChD,KAAK,CAAC;AACN,KAAK,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC7B,KAAK,CAAC;AACN,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC/B,IAAI,KAAK,CAAC,UAAU,EAAE;AACtB,KAAK,EAAE,EAAE,SAAS;AAClB,KAAK,IAAI,EAAE,SAAS;AACpB,KAAK,IAAI,EAAE,UAAU;AACrB,KAAK,QAAQ,EAAE,IAAI;AACnB,KAAK,WAAW,EAAE;AAClB,KAAK,CAAC;AACN,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;AACpC,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACvC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AAC/B,GAAG,MAAM,CAAC,UAAU,EAAE;AACtB,IAAI,IAAI,EAAE,QAAQ;AAClB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,GAAG,eAAe,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;AACzG,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;AACpC,EAAE;AACF,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AACH;;;;"}
+{"version":3,"file":"_page.svelte.js-shC-47yR.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/accept-invite/_page.svelte.js"],"sourcesContent":["import { A as escape_html, O as attr, c as head } from \"../../../chunks/server.js\";\nimport { t as Button } from \"../../../chunks/button.js\";\nimport { t as Circle_alert } from \"../../../chunks/circle-alert.js\";\nimport { t as Label } from \"../../../chunks/label.js\";\nimport { t as page } from \"../../../chunks/state.js\";\nimport { t as Input } from \"../../../chunks/input.js\";\nimport { n as Alert, t as Alert_description } from \"../../../chunks/alert-description.js\";\n//#region src/routes/accept-invite/+page.svelte\nfunction _page($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\tlet { data, form } = $$props;\n\t\thead(\"p8b09p\", $$renderer, ($$renderer) => {\n\t\t\t$$renderer.title(($$renderer) => {\n\t\t\t\t$$renderer.push(`<title>Accept invite - ${escape_html(page.data.branding.name)}</title>`);\n\t\t\t});\n\t\t});\n\t\t$$renderer.push(`<div class=\"bg-background flex min-h-screen items-center justify-center px-4 py-12 sm:px-6 lg:px-8\"><div class=\"w-full max-w-sm space-y-6\">`);\n\t\tif (!data.ok) {\n\t\t\t$$renderer.push(\"<!--[0-->\");\n\t\t\t$$renderer.push(`<div class=\"space-y-1 text-center\"><h2 class=\"text-foreground text-2xl font-bold tracking-tight\">Invite unavailable</h2> <p class=\"text-muted-foreground text-sm\">${escape_html(data.reason)}</p></div> <div class=\"text-center\"><a href=\"/login\" class=\"text-primary text-sm underline\">Go to login</a></div>`);\n\t\t} else {\n\t\t\t$$renderer.push(\"<!--[-1-->\");\n\t\t\t$$renderer.push(`<div class=\"space-y-1 text-center\"><h2 class=\"text-foreground text-2xl font-bold tracking-tight\">Join ${escape_html(data.orgName)}</h2> <p class=\"text-muted-foreground text-sm\">You were invited as <span class=\"font-medium\">${escape_html(data.email)}</span>. `);\n\t\t\tif (data.mode === \"proxy\") {\n\t\t\t\t$$renderer.push(\"<!--[0-->\");\n\t\t\t\t$$renderer.push(`Click below to finish creating your account — your identity is verified by your company\n\t\t\t\t\t\tsign-in.`);\n\t\t\t} else {\n\t\t\t\t$$renderer.push(\"<!--[-1-->\");\n\t\t\t\t$$renderer.push(`Set a password to finish creating your account.`);\n\t\t\t}\n\t\t\t$$renderer.push(`<!--]--></p></div> <form method=\"POST\" class=\"space-y-4\"><input type=\"hidden\" name=\"token\"${attr(\"value\", data.token)}/> `);\n\t\t\tif (form?.error) {\n\t\t\t\t$$renderer.push(\"<!--[0-->\");\n\t\t\t\tif (Alert) {\n\t\t\t\t\t$$renderer.push(\"<!--[-->\");\n\t\t\t\t\tAlert($$renderer, {\n\t\t\t\t\t\tvariant: \"destructive\",\n\t\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t\tCircle_alert($$renderer, {});\n\t\t\t\t\t\t\t$$renderer.push(`<!----> `);\n\t\t\t\t\t\t\tif (Alert_description) {\n\t\t\t\t\t\t\t\t$$renderer.push(\"<!--[-->\");\n\t\t\t\t\t\t\t\tAlert_description($$renderer, {\n\t\t\t\t\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t\t\t\t\t$$renderer.push(`<!---->${escape_html(form.error)}`);\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t$$renderer.push(\"<!--]-->\");\n\t\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\t\t$$renderer.push(\"<!--[!-->\");\n\t\t\t\t\t\t\t\t$$renderer.push(\"<!--]-->\");\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t\t});\n\t\t\t\t\t$$renderer.push(\"<!--]-->\");\n\t\t\t\t} else {\n\t\t\t\t\t$$renderer.push(\"<!--[!-->\");\n\t\t\t\t\t$$renderer.push(\"<!--]-->\");\n\t\t\t\t}\n\t\t\t} else $$renderer.push(\"<!--[-1-->\");\n\t\t\t$$renderer.push(`<!--]--> `);\n\t\t\tif (data.mode === \"password\") {\n\t\t\t\t$$renderer.push(\"<!--[0-->\");\n\t\t\t\t$$renderer.push(`<div class=\"space-y-2\">`);\n\t\t\t\tLabel($$renderer, {\n\t\t\t\t\tfor: \"displayName\",\n\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t$$renderer.push(`<!---->Display name <span class=\"text-muted-foreground\">(optional)</span>`);\n\t\t\t\t\t},\n\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t});\n\t\t\t\t$$renderer.push(`<!----> `);\n\t\t\t\tInput($$renderer, {\n\t\t\t\t\tid: \"displayName\",\n\t\t\t\t\tname: \"displayName\",\n\t\t\t\t\ttype: \"text\",\n\t\t\t\t\tplaceholder: \"Your name\"\n\t\t\t\t});\n\t\t\t\t$$renderer.push(`<!----></div> <div class=\"space-y-2\">`);\n\t\t\t\tLabel($$renderer, {\n\t\t\t\t\tfor: \"password\",\n\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t$$renderer.push(`<!---->Password`);\n\t\t\t\t\t},\n\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t});\n\t\t\t\t$$renderer.push(`<!----> `);\n\t\t\t\tInput($$renderer, {\n\t\t\t\t\tid: \"password\",\n\t\t\t\t\tname: \"password\",\n\t\t\t\t\ttype: \"password\",\n\t\t\t\t\trequired: true,\n\t\t\t\t\tplaceholder: \"Min. 8 characters\"\n\t\t\t\t});\n\t\t\t\t$$renderer.push(`<!----></div> <div class=\"space-y-2\">`);\n\t\t\t\tLabel($$renderer, {\n\t\t\t\t\tfor: \"confirm\",\n\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t$$renderer.push(`<!---->Confirm password`);\n\t\t\t\t\t},\n\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t});\n\t\t\t\t$$renderer.push(`<!----> `);\n\t\t\t\tInput($$renderer, {\n\t\t\t\t\tid: \"confirm\",\n\t\t\t\t\tname: \"confirm\",\n\t\t\t\t\ttype: \"password\",\n\t\t\t\t\trequired: true,\n\t\t\t\t\tplaceholder: \"Repeat password\"\n\t\t\t\t});\n\t\t\t\t$$renderer.push(`<!----></div>`);\n\t\t\t} else $$renderer.push(\"<!--[-1-->\");\n\t\t\t$$renderer.push(`<!--]--> `);\n\t\t\tButton($$renderer, {\n\t\t\t\ttype: \"submit\",\n\t\t\t\tclass: \"w-full\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->${escape_html(data.mode === \"proxy\" ? \"Accept invite\" : \"Create account\")}`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t\t$$renderer.push(`<!----></form>`);\n\t\t}\n\t\t$$renderer.push(`<!--]--></div></div>`);\n\t});\n}\n//#endregion\nexport { _page as default };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAOA;AACA,SAAS,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE;AACpC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,OAAO;AAC9B,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,UAAU,KAAK;AAC7C,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,UAAU,KAAK;AACpC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,uBAAuB,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC7F,GAAG,CAAC,CAAC;AACL,EAAE,CAAC,CAAC;AACJ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,2IAA2I,CAAC,CAAC;AAChK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;AAChB,GAAG,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AAC/B,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,kKAAkK,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,iHAAiH,CAAC,CAAC;AACpU,EAAE,CAAC,MAAM;AACT,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AAChC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,sGAAsG,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,6FAA6F,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC;AACxR,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE;AAC9B,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AAChC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;AACrB,cAAc,CAAC,CAAC;AAChB,GAAG,CAAC,MAAM;AACV,IAAI,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACjC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,+CAA+C,CAAC,CAAC;AACtE,GAAG;AACH,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,0FAA0F,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;AAC/I,GAAG,IAAI,IAAI,EAAE,KAAK,EAAE;AACpB,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AAChC,IAAI,IAAI,KAAK,EAAE;AACf,KAAK,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AAChC,KAAK,KAAK,CAAC,UAAU,EAAE;AACvB,MAAM,OAAO,EAAE,aAAa;AAC5B,MAAM,QAAQ,EAAE,CAAC,UAAU,KAAK;AAChC,OAAO,YAAY,CAAC,UAAU,EAAE,EAAE,CAAC;AACnC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAClC,OAAO,IAAI,iBAAiB,EAAE;AAC9B,QAAQ,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AACnC,QAAQ,iBAAiB,CAAC,UAAU,EAAE;AACtC,SAAS,QAAQ,EAAE,CAAC,UAAU,KAAK;AACnC,UAAU,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC9D,SAAS,CAAC;AACV,SAAS,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AACjC,SAAS,CAAC;AACV,QAAQ,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AACnC,OAAO,CAAC,MAAM;AACd,QAAQ,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AACpC,QAAQ,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AACnC,OAAO;AACP,MAAM,CAAC;AACP,MAAM,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC9B,MAAM,CAAC;AACP,KAAK,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AAChC,IAAI,CAAC,MAAM;AACX,KAAK,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AACjC,KAAK,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;AAChC,IAAI;AACJ,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACvC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AAC/B,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE;AACjC,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AAChC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,uBAAuB,CAAC,CAAC;AAC9C,IAAI,KAAK,CAAC,UAAU,EAAE;AACtB,KAAK,GAAG,EAAE,aAAa;AACvB,KAAK,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC/B,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,yEAAyE,CAAC,CAAC;AAClG,KAAK,CAAC;AACN,KAAK,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC7B,KAAK,CAAC;AACN,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC/B,IAAI,KAAK,CAAC,UAAU,EAAE;AACtB,KAAK,EAAE,EAAE,aAAa;AACtB,KAAK,IAAI,EAAE,aAAa;AACxB,KAAK,IAAI,EAAE,MAAM;AACjB,KAAK,WAAW,EAAE;AAClB,KAAK,CAAC;AACN,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,qCAAqC,CAAC,CAAC;AAC5D,IAAI,KAAK,CAAC,UAAU,EAAE;AACtB,KAAK,GAAG,EAAE,UAAU;AACpB,KAAK,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC/B,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC;AACxC,KAAK,CAAC;AACN,KAAK,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC7B,KAAK,CAAC;AACN,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC/B,IAAI,KAAK,CAAC,UAAU,EAAE;AACtB,KAAK,EAAE,EAAE,UAAU;AACnB,KAAK,IAAI,EAAE,UAAU;AACrB,KAAK,IAAI,EAAE,UAAU;AACrB,KAAK,QAAQ,EAAE,IAAI;AACnB,KAAK,WAAW,EAAE;AAClB,KAAK,CAAC;AACN,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,qCAAqC,CAAC,CAAC;AAC5D,IAAI,KAAK,CAAC,UAAU,EAAE;AACtB,KAAK,GAAG,EAAE,SAAS;AACnB,KAAK,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC/B,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,uBAAuB,CAAC,CAAC;AAChD,KAAK,CAAC;AACN,KAAK,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC7B,KAAK,CAAC;AACN,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC/B,IAAI,KAAK,CAAC,UAAU,EAAE;AACtB,KAAK,EAAE,EAAE,SAAS;AAClB,KAAK,IAAI,EAAE,SAAS;AACpB,KAAK,IAAI,EAAE,UAAU;AACrB,KAAK,QAAQ,EAAE,IAAI;AACnB,KAAK,WAAW,EAAE;AAClB,KAAK,CAAC;AACN,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;AACpC,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACvC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AAC/B,GAAG,MAAM,CAAC,UAAU,EAAE;AACtB,IAAI,IAAI,EAAE,QAAQ;AAClB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,GAAG,eAAe,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;AACzG,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;AACpC,EAAE;AACF,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/entries/pages/admin/{_error.svelte.js-GXV5rID_.js → _error.svelte.js-DmBK1tNB.js}

@@ -1,14 +1,14 @@
 import 'clsx';
-import { p as page } from '../../../chunks/state.js-CCKu0CaC.js';
+import { p as page } from '../../../chunks/state.js-DRIvCY3h.js';
 import { E as ErrorScreen } from '../../../chunks/ErrorScreen.js-D6_joiwG.js';
 import '../../../chunks/server.js-DmrfOoxb.js';
 import '../../../chunks/uneval.js-1VR0v8ir.js';
-import '../../../chunks/client.js-0QVINoWt.js';
+import '../../../chunks/client.js-Bpq0VuTu.js';
 import '../../../chunks/index-server.js-Dkqbavz2.js';
 import '../../../chunks/shared.js-DVKQackd.js';
 import '@sveltejs/kit/internal';
 import '../../../chunks/exports.js-GeBTnchJ.js';
-import '../../../chunks/internal2.js-DcssKd4i.js';
+import '../../../chunks/internal2.js-Bh_dm6kd.js';
 import '../../../chunks/legacy-client.js-rpE_7V58.js';
 import '../../../chunks/events.js-Dim6Jkwe.js';
 import '@sveltejs/kit/internal/server';
@@ -33,4 +33,4 @@ function _error($$renderer, $$props) {
 }
 
 export { _error as default };
-//# sourceMappingURL=_error.svelte.js-GXV5rID_.js.map
+//# sourceMappingURL=_error.svelte.js-DmBK1tNB.js.map

package/build/server/chunks/entries/pages/admin/{_error.svelte.js-GXV5rID_.js.map → _error.svelte.js-DmBK1tNB.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_error.svelte.js-GXV5rID_.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/admin/_error.svelte.js"],"sourcesContent":["import \"../../../chunks/server.js\";\nimport { t as page } from \"../../../chunks/state.js\";\nimport { t as ErrorScreen } from \"../../../chunks/ErrorScreen.js\";\n//#region src/routes/admin/+error.svelte\nfunction _error($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\t$$renderer.push(`<div class=\"px-6 py-6\">`);\n\t\tErrorScreen($$renderer, {\n\t\t\tstatus: page.status,\n\t\t\tmessage: page.error?.message\n\t\t});\n\t\t$$renderer.push(`<!----></div>`);\n\t});\n}\n//#endregion\nexport { _error as default };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAGA;AACA,SAAS,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE;AACrC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,uBAAuB,CAAC,CAAC;AAC5C,EAAE,WAAW,CAAC,UAAU,EAAE;AAC1B,GAAG,MAAM,EAAE,IAAI,CAAC,MAAM;AACtB,GAAG,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE;AACxB,GAAG,CAAC;AACJ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC;AACH;;;;"}
+{"version":3,"file":"_error.svelte.js-DmBK1tNB.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/admin/_error.svelte.js"],"sourcesContent":["import \"../../../chunks/server.js\";\nimport { t as page } from \"../../../chunks/state.js\";\nimport { t as ErrorScreen } from \"../../../chunks/ErrorScreen.js\";\n//#region src/routes/admin/+error.svelte\nfunction _error($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\t$$renderer.push(`<div class=\"px-6 py-6\">`);\n\t\tErrorScreen($$renderer, {\n\t\t\tstatus: page.status,\n\t\t\tmessage: page.error?.message\n\t\t});\n\t\t$$renderer.push(`<!----></div>`);\n\t});\n}\n//#endregion\nexport { _error as default };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAGA;AACA,SAAS,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE;AACrC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,uBAAuB,CAAC,CAAC;AAC5C,EAAE,WAAW,CAAC,UAAU,EAAE;AAC1B,GAAG,MAAM,EAAE,IAAI,CAAC,MAAM;AACtB,GAAG,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE;AACxB,GAAG,CAAC;AACJ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC;AACH;;;;"}