@selvajs/selva 4.7.3 → 4.7.4-beta.0

package/build/server/chunks/chunks/compute.js-CRjirZFw.js

@@ -0,0 +1,284 @@
+import './src.js-C5mUn1eC.js';
+import { N as NoopLogger } from './limits.js-Dw3YYMI2.js';
+import { lookup } from 'node:dns/promises';
+import { isIP } from 'node:net';
+
+//#region ../server/src/compute/safe-url.ts
+/**
+* SSRF guard for `loadRemoteDefinition`. Without it an authenticated user could
+* submit `http://169.254.169.254/...` (cloud metadata) or any intranet endpoint
+* and the server would fetch it on their behalf.
+*
+* Two layers:
+*
+*   1. `isSafeRemoteDefinitionUrl` — synchronous literal pre-filter. Rejects
+*      protocol, hostname literals, and every IP *encoding* that maps to a
+*      blocked address (dotted-decimal, integer, octal, hex, short-form,
+*      IPv4-mapped IPv6). Fast and DNS-free; safe to call anywhere.
+*
+*   2. `assertSafeRemoteDefinitionUrl` — resolves the hostname via DNS and
+*      re-checks the *resolved* IP. This is the real defense: it catches a
+*      public name that resolves to a private IP, which the literal filter
+*      can't see. Still not bulletproof against rebinding (the IP can change
+*      between this lookup and fetch's own); for that the caller would have to
+*      connect to the resolved IP directly. Connecting by IP is a larger change
+*      — this closes the practical bypasses (literal encodings + a DNS record
+*      that points inward) which is what an attacker actually reaches for.
+*/
+/**
+* True when `ip` (a normalized IPv4 or IPv6 literal from `isIP`/`dns.lookup`)
+* is loopback, private, link-local, or otherwise must-not-fetch. IPv4-mapped
+* IPv6 (`::ffff:a.b.c.d`) is unwrapped to its embedded IPv4 first so the v4
+* rules apply.
+*/
+function isBlockedIp(ip) {
+	let addr = ip.toLowerCase();
+	const mappedDotted = /^::ffff:(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/.exec(addr);
+	if (mappedDotted) addr = mappedDotted[1];
+	else {
+		const mappedHex = /^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/.exec(addr);
+		if (mappedHex) {
+			const hi = parseInt(mappedHex[1], 16);
+			const lo = parseInt(mappedHex[2], 16);
+			addr = [
+				hi >> 8 & 255,
+				hi & 255,
+				lo >> 8 & 255,
+				lo & 255
+			].join(".");
+		}
+	}
+	if (isIP(addr) === 4) {
+		const octets = addr.split(".").map(Number);
+		if (octets.length !== 4 || octets.some((o) => o > 255)) return true;
+		const [a, b] = octets;
+		if (a === 0) return true;
+		if (a === 127) return true;
+		if (a === 10) return true;
+		if (a === 192 && b === 168) return true;
+		if (a === 172 && b >= 16 && b <= 31) return true;
+		if (a === 169 && b === 254) return true;
+		return false;
+	}
+	if (addr === "::1" || addr === "::") return true;
+	if (/^(fc|fd)[0-9a-f]{0,2}:/.test(addr)) return true;
+	if (/^fe[89ab][0-9a-f]:/.test(addr)) return true;
+	return false;
+}
+/**
+* Parse a bare-IPv4 hostname in any encoding browsers/glibc accept — integer
+* (`2130706433`), octal (`0177.0.0.1`), hex (`0x7f000001`), and short forms
+* (`127.1`) — into a canonical dotted-decimal string. Returns null when the
+* host is not a numeric IPv4 literal (i.e. it's a real name or already-valid
+* dotted-quad, which callers handle separately).
+*/
+function canonicalizeNumericIpv4(host) {
+	if (isIP(host) === 4) return host;
+	const rawParts = host.split(".");
+	if (rawParts.length === 0 || rawParts.length > 4) return null;
+	const parseUInt = (s) => {
+		if (s === "") return null;
+		let n;
+		if (/^0x[0-9a-f]+$/i.test(s)) n = parseInt(s, 16);
+		else if (/^0[0-7]+$/.test(s)) n = parseInt(s, 8);
+		else if (/^[0-9]+$/.test(s)) n = parseInt(s, 10);
+		else return null;
+		return Number.isFinite(n) ? n : null;
+	};
+	const nums = rawParts.map(parseUInt);
+	if (nums.some((n) => n === null)) return null;
+	const parts = nums;
+	let value;
+	switch (parts.length) {
+		case 1:
+			value = parts[0];
+			break;
+		case 2:
+			if (parts[0] > 255 || parts[1] > 16777215) return null;
+			value = parts[0] << 24 | parts[1];
+			break;
+		case 3:
+			if (parts[0] > 255 || parts[1] > 255 || parts[2] > 65535) return null;
+			value = parts[0] << 24 | parts[1] << 16 | parts[2];
+			break;
+		default:
+			if (parts.some((p) => p > 255)) return null;
+			value = parts[0] << 24 | parts[1] << 16 | parts[2] << 8 | parts[3];
+	}
+	value = value >>> 0;
+	if (value > 4294967295) return null;
+	return [
+		value >>> 24 & 255,
+		value >>> 16 & 255,
+		value >>> 8 & 255,
+		value & 255
+	].join(".");
+}
+/**
+* Synchronous literal pre-filter. Rejects bad schemes, loopback hostnames, and
+* any IP literal (in any encoding) that resolves to a blocked address. Does NOT
+* perform DNS — a public *name* that points at a private IP passes here and is
+* caught by `assertSafeRemoteDefinitionUrl`.
+*/
+function isSafeRemoteDefinitionUrl(raw) {
+	let parsed;
+	try {
+		parsed = new URL(raw);
+	} catch {
+		return false;
+	}
+	if (parsed.protocol !== "http:" && parsed.protocol !== "https:") return false;
+	let host = parsed.hostname.toLowerCase();
+	if (!host) return false;
+	if (host === "localhost" || host.endsWith(".localhost")) return false;
+	if (host.startsWith("[") && host.endsWith("]")) host = host.slice(1, -1);
+	if (isIP(host) === 6) return !isBlockedIp(host);
+	const canonical = canonicalizeNumericIpv4(host);
+	if (canonical) return !isBlockedIp(canonical);
+	return true;
+}
+/**
+* Full SSRF check: literal pre-filter, then resolve every A/AAAA record and
+* reject if *any* resolved IP is blocked. Returns the original URL on success
+* so callers can `await assertSafeRemoteDefinitionUrl(url)` inline. Throws on
+* any rejection.
+*/
+async function assertSafeRemoteDefinitionUrl(raw, logger = new NoopLogger()) {
+	if (!isSafeRemoteDefinitionUrl(raw)) {
+		logger.warn("Blocked remote definition URL", {
+			component: "Compute/ssrf",
+			reason: "literal-filter",
+			host: hostOf(raw)
+		});
+		throw new Error("Remote definition URL is not allowed");
+	}
+	const host = new URL(raw).hostname.toLowerCase().replace(/^\[|\]$/g, "");
+	if (isIP(host) !== 0 || canonicalizeNumericIpv4(host)) return raw;
+	let resolved;
+	try {
+		resolved = await lookup(host, { all: true });
+	} catch {
+		logger.warn("Blocked remote definition URL", {
+			component: "Compute/ssrf",
+			reason: "dns-lookup-failed",
+			host
+		});
+		throw new Error("Remote definition URL is not allowed");
+	}
+	if (resolved.length === 0 || resolved.some((r) => isBlockedIp(r.address))) {
+		const blocked = resolved.filter((r) => isBlockedIp(r.address)).map((r) => r.address);
+		logger.warn("Blocked remote definition URL", {
+			component: "Compute/ssrf",
+			reason: "resolves-to-blocked-ip",
+			host,
+			blockedIps: blocked
+		});
+		throw new Error("Remote definition URL is not allowed");
+	}
+	return raw;
+}
+/** Best-effort hostname for logging; falls back to a truncated raw string. */
+function hostOf(raw) {
+	try {
+		return new URL(raw).hostname;
+	} catch {
+		return raw.slice(0, 120);
+	}
+}
+//#endregion
+//#region ../server/src/compute/remote-definition.ts
+/**
+* Remote-definition fetch: SSRF-guarded, size-capped, timed, and TTL-cached.
+*
+* A solve can reference its `.gh` by remote URL instead of a stored blob. That
+* URL is attacker-controllable (a share-token caller supplies `definitionUrl`),
+* so every fetch runs through {@link assertSafeRemoteDefinitionUrl} (literal +
+* DNS host validation, blocking private/loopback/link-local targets and
+* literal-encoding bypasses), streams the body with an early size cap, and
+* bounds the wall time with a deadline.
+*
+* The TTL cache is a per-fetcher `Map<url, {data, fetchedAt}>` so repeated
+* solves of the same remote definition skip the network. It's created by
+* {@link createRemoteDefinitionFetcher} rather than being module-global, so a
+* consuming app can hold one fetcher per process (the app binding does) or
+* several isolated ones (tests) without shared state leaking across them.
+*/
+/** Once the cache exceeds this many entries, evict the oldest 10 by `fetchedAt`. */
+var CACHE_MAX_ENTRIES = 50;
+var CACHE_EVICT_BATCH = 10;
+/**
+* Read a response body into memory, aborting (and throwing) as soon as the
+* running byte total exceeds `maxBytes`. Falls back to `arrayBuffer()` only when
+* the body isn't a readable stream (older fetch impls). Exported for direct use
+* and reuse; the fetcher below wraps it with SSRF + TTL.
+*/
+async function readBodyWithCap(response, maxBytes, controller) {
+	if (!response.body) {
+		const buffer = await response.arrayBuffer();
+		if (buffer.byteLength > maxBytes) throw new Error("Remote definition exceeds size limit");
+		return new Uint8Array(buffer);
+	}
+	const reader = response.body.getReader();
+	const chunks = [];
+	let total = 0;
+	while (true) {
+		const { done, value } = await reader.read();
+		if (done) break;
+		total += value.byteLength;
+		if (total > maxBytes) {
+			controller.abort();
+			throw new Error("Remote definition exceeds size limit");
+		}
+		chunks.push(value);
+	}
+	const out = new Uint8Array(total);
+	let offset = 0;
+	for (const chunk of chunks) {
+		out.set(chunk, offset);
+		offset += chunk.byteLength;
+	}
+	return out;
+}
+/**
+* Build a remote-definition fetcher owning its own TTL cache. Each fetcher's
+* cache is independent, so one per process shares warm bytes while test fetchers
+* stay isolated.
+*/
+function createRemoteDefinitionFetcher(config) {
+	const cache = /* @__PURE__ */ new Map();
+	const logger = config.logger ?? new NoopLogger();
+	return { async load(url) {
+		await assertSafeRemoteDefinitionUrl(url, logger);
+		const now = config.now();
+		const cached = cache.get(url);
+		if (cached && now - cached.fetchedAt < config.cacheTtlMs) return cached.data;
+		const controller = new AbortController();
+		const timeout = setTimeout(() => controller.abort(), config.fetchTimeoutMs);
+		let data;
+		try {
+			const response = await fetch(url, {
+				signal: controller.signal,
+				redirect: "error"
+			});
+			if (!response.ok) throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+			const declared = Number(response.headers.get("content-length"));
+			if (Number.isFinite(declared) && declared > config.maxBytes) throw new Error("Remote definition exceeds size limit");
+			data = await readBodyWithCap(response, config.maxBytes, controller);
+		} finally {
+			clearTimeout(timeout);
+		}
+		cache.set(url, {
+			data,
+			fetchedAt: now
+		});
+		if (cache.size > CACHE_MAX_ENTRIES) {
+			const entries = Array.from(cache.entries());
+			entries.sort((a, b) => a[1].fetchedAt - b[1].fetchedAt);
+			for (let i = 0; i < CACHE_EVICT_BATCH; i++) cache.delete(entries[i][0]);
+		}
+		return data;
+	} };
+}
+
+export { createRemoteDefinitionFetcher as c };
+//# sourceMappingURL=compute.js-CRjirZFw.js.map

package/build/server/chunks/chunks/compute.js-CRjirZFw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute.js-CRjirZFw.js","sources":["../../../../.svelte-kit/output/server/chunks/compute.js"],"sourcesContent":["import \"./src.js\";\nimport { r as NoopLogger } from \"./limits.js\";\nimport { lookup } from \"node:dns/promises\";\nimport { isIP } from \"node:net\";\n//#region ../server/src/compute/safe-url.ts\n/**\n* SSRF guard for `loadRemoteDefinition`. Without it an authenticated user could\n* submit `http://169.254.169.254/...` (cloud metadata) or any intranet endpoint\n* and the server would fetch it on their behalf.\n*\n* Two layers:\n*\n*   1. `isSafeRemoteDefinitionUrl` — synchronous literal pre-filter. Rejects\n*      protocol, hostname literals, and every IP *encoding* that maps to a\n*      blocked address (dotted-decimal, integer, octal, hex, short-form,\n*      IPv4-mapped IPv6). Fast and DNS-free; safe to call anywhere.\n*\n*   2. `assertSafeRemoteDefinitionUrl` — resolves the hostname via DNS and\n*      re-checks the *resolved* IP. This is the real defense: it catches a\n*      public name that resolves to a private IP, which the literal filter\n*      can't see. Still not bulletproof against rebinding (the IP can change\n*      between this lookup and fetch's own); for that the caller would have to\n*      connect to the resolved IP directly. Connecting by IP is a larger change\n*      — this closes the practical bypasses (literal encodings + a DNS record\n*      that points inward) which is what an attacker actually reaches for.\n*/\n/**\n* True when `ip` (a normalized IPv4 or IPv6 literal from `isIP`/`dns.lookup`)\n* is loopback, private, link-local, or otherwise must-not-fetch. IPv4-mapped\n* IPv6 (`::ffff:a.b.c.d`) is unwrapped to its embedded IPv4 first so the v4\n* rules apply.\n*/\nfunction isBlockedIp(ip) {\n\tlet addr = ip.toLowerCase();\n\tconst mappedDotted = /^::ffff:(\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3})$/.exec(addr);\n\tif (mappedDotted) addr = mappedDotted[1];\n\telse {\n\t\tconst mappedHex = /^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/.exec(addr);\n\t\tif (mappedHex) {\n\t\t\tconst hi = parseInt(mappedHex[1], 16);\n\t\t\tconst lo = parseInt(mappedHex[2], 16);\n\t\t\taddr = [\n\t\t\t\thi >> 8 & 255,\n\t\t\t\thi & 255,\n\t\t\t\tlo >> 8 & 255,\n\t\t\t\tlo & 255\n\t\t\t].join(\".\");\n\t\t}\n\t}\n\tif (isIP(addr) === 4) {\n\t\tconst octets = addr.split(\".\").map(Number);\n\t\tif (octets.length !== 4 || octets.some((o) => o > 255)) return true;\n\t\tconst [a, b] = octets;\n\t\tif (a === 0) return true;\n\t\tif (a === 127) return true;\n\t\tif (a === 10) return true;\n\t\tif (a === 192 && b === 168) return true;\n\t\tif (a === 172 && b >= 16 && b <= 31) return true;\n\t\tif (a === 169 && b === 254) return true;\n\t\treturn false;\n\t}\n\tif (addr === \"::1\" || addr === \"::\") return true;\n\tif (/^(fc|fd)[0-9a-f]{0,2}:/.test(addr)) return true;\n\tif (/^fe[89ab][0-9a-f]:/.test(addr)) return true;\n\treturn false;\n}\n/**\n* Parse a bare-IPv4 hostname in any encoding browsers/glibc accept — integer\n* (`2130706433`), octal (`0177.0.0.1`), hex (`0x7f000001`), and short forms\n* (`127.1`) — into a canonical dotted-decimal string. Returns null when the\n* host is not a numeric IPv4 literal (i.e. it's a real name or already-valid\n* dotted-quad, which callers handle separately).\n*/\nfunction canonicalizeNumericIpv4(host) {\n\tif (isIP(host) === 4) return host;\n\tconst rawParts = host.split(\".\");\n\tif (rawParts.length === 0 || rawParts.length > 4) return null;\n\tconst parseUInt = (s) => {\n\t\tif (s === \"\") return null;\n\t\tlet n;\n\t\tif (/^0x[0-9a-f]+$/i.test(s)) n = parseInt(s, 16);\n\t\telse if (/^0[0-7]+$/.test(s)) n = parseInt(s, 8);\n\t\telse if (/^[0-9]+$/.test(s)) n = parseInt(s, 10);\n\t\telse return null;\n\t\treturn Number.isFinite(n) ? n : null;\n\t};\n\tconst nums = rawParts.map(parseUInt);\n\tif (nums.some((n) => n === null)) return null;\n\tconst parts = nums;\n\tlet value;\n\tswitch (parts.length) {\n\t\tcase 1:\n\t\t\tvalue = parts[0];\n\t\t\tbreak;\n\t\tcase 2:\n\t\t\tif (parts[0] > 255 || parts[1] > 16777215) return null;\n\t\t\tvalue = parts[0] << 24 | parts[1];\n\t\t\tbreak;\n\t\tcase 3:\n\t\t\tif (parts[0] > 255 || parts[1] > 255 || parts[2] > 65535) return null;\n\t\t\tvalue = parts[0] << 24 | parts[1] << 16 | parts[2];\n\t\t\tbreak;\n\t\tdefault:\n\t\t\tif (parts.some((p) => p > 255)) return null;\n\t\t\tvalue = parts[0] << 24 | parts[1] << 16 | parts[2] << 8 | parts[3];\n\t}\n\tvalue = value >>> 0;\n\tif (value > 4294967295) return null;\n\treturn [\n\t\tvalue >>> 24 & 255,\n\t\tvalue >>> 16 & 255,\n\t\tvalue >>> 8 & 255,\n\t\tvalue & 255\n\t].join(\".\");\n}\n/**\n* Synchronous literal pre-filter. Rejects bad schemes, loopback hostnames, and\n* any IP literal (in any encoding) that resolves to a blocked address. Does NOT\n* perform DNS — a public *name* that points at a private IP passes here and is\n* caught by `assertSafeRemoteDefinitionUrl`.\n*/\nfunction isSafeRemoteDefinitionUrl(raw) {\n\tlet parsed;\n\ttry {\n\t\tparsed = new URL(raw);\n\t} catch {\n\t\treturn false;\n\t}\n\tif (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") return false;\n\tlet host = parsed.hostname.toLowerCase();\n\tif (!host) return false;\n\tif (host === \"localhost\" || host.endsWith(\".localhost\")) return false;\n\tif (host.startsWith(\"[\") && host.endsWith(\"]\")) host = host.slice(1, -1);\n\tif (isIP(host) === 6) return !isBlockedIp(host);\n\tconst canonical = canonicalizeNumericIpv4(host);\n\tif (canonical) return !isBlockedIp(canonical);\n\treturn true;\n}\n/**\n* Full SSRF check: literal pre-filter, then resolve every A/AAAA record and\n* reject if *any* resolved IP is blocked. Returns the original URL on success\n* so callers can `await assertSafeRemoteDefinitionUrl(url)` inline. Throws on\n* any rejection.\n*/\nasync function assertSafeRemoteDefinitionUrl(raw, logger = new NoopLogger()) {\n\tif (!isSafeRemoteDefinitionUrl(raw)) {\n\t\tlogger.warn(\"Blocked remote definition URL\", {\n\t\t\tcomponent: \"Compute/ssrf\",\n\t\t\treason: \"literal-filter\",\n\t\t\thost: hostOf(raw)\n\t\t});\n\t\tthrow new Error(\"Remote definition URL is not allowed\");\n\t}\n\tconst host = new URL(raw).hostname.toLowerCase().replace(/^\\[|\\]$/g, \"\");\n\tif (isIP(host) !== 0 || canonicalizeNumericIpv4(host)) return raw;\n\tlet resolved;\n\ttry {\n\t\tresolved = await lookup(host, { all: true });\n\t} catch {\n\t\tlogger.warn(\"Blocked remote definition URL\", {\n\t\t\tcomponent: \"Compute/ssrf\",\n\t\t\treason: \"dns-lookup-failed\",\n\t\t\thost\n\t\t});\n\t\tthrow new Error(\"Remote definition URL is not allowed\");\n\t}\n\tif (resolved.length === 0 || resolved.some((r) => isBlockedIp(r.address))) {\n\t\tconst blocked = resolved.filter((r) => isBlockedIp(r.address)).map((r) => r.address);\n\t\tlogger.warn(\"Blocked remote definition URL\", {\n\t\t\tcomponent: \"Compute/ssrf\",\n\t\t\treason: \"resolves-to-blocked-ip\",\n\t\t\thost,\n\t\t\tblockedIps: blocked\n\t\t});\n\t\tthrow new Error(\"Remote definition URL is not allowed\");\n\t}\n\treturn raw;\n}\n/** Best-effort hostname for logging; falls back to a truncated raw string. */\nfunction hostOf(raw) {\n\ttry {\n\t\treturn new URL(raw).hostname;\n\t} catch {\n\t\treturn raw.slice(0, 120);\n\t}\n}\n//#endregion\n//#region ../server/src/compute/remote-definition.ts\n/**\n* Remote-definition fetch: SSRF-guarded, size-capped, timed, and TTL-cached.\n*\n* A solve can reference its `.gh` by remote URL instead of a stored blob. That\n* URL is attacker-controllable (a share-token caller supplies `definitionUrl`),\n* so every fetch runs through {@link assertSafeRemoteDefinitionUrl} (literal +\n* DNS host validation, blocking private/loopback/link-local targets and\n* literal-encoding bypasses), streams the body with an early size cap, and\n* bounds the wall time with a deadline.\n*\n* The TTL cache is a per-fetcher `Map<url, {data, fetchedAt}>` so repeated\n* solves of the same remote definition skip the network. It's created by\n* {@link createRemoteDefinitionFetcher} rather than being module-global, so a\n* consuming app can hold one fetcher per process (the app binding does) or\n* several isolated ones (tests) without shared state leaking across them.\n*/\n/** Once the cache exceeds this many entries, evict the oldest 10 by `fetchedAt`. */\nvar CACHE_MAX_ENTRIES = 50;\nvar CACHE_EVICT_BATCH = 10;\n/**\n* Read a response body into memory, aborting (and throwing) as soon as the\n* running byte total exceeds `maxBytes`. Falls back to `arrayBuffer()` only when\n* the body isn't a readable stream (older fetch impls). Exported for direct use\n* and reuse; the fetcher below wraps it with SSRF + TTL.\n*/\nasync function readBodyWithCap(response, maxBytes, controller) {\n\tif (!response.body) {\n\t\tconst buffer = await response.arrayBuffer();\n\t\tif (buffer.byteLength > maxBytes) throw new Error(\"Remote definition exceeds size limit\");\n\t\treturn new Uint8Array(buffer);\n\t}\n\tconst reader = response.body.getReader();\n\tconst chunks = [];\n\tlet total = 0;\n\twhile (true) {\n\t\tconst { done, value } = await reader.read();\n\t\tif (done) break;\n\t\ttotal += value.byteLength;\n\t\tif (total > maxBytes) {\n\t\t\tcontroller.abort();\n\t\t\tthrow new Error(\"Remote definition exceeds size limit\");\n\t\t}\n\t\tchunks.push(value);\n\t}\n\tconst out = new Uint8Array(total);\n\tlet offset = 0;\n\tfor (const chunk of chunks) {\n\t\tout.set(chunk, offset);\n\t\toffset += chunk.byteLength;\n\t}\n\treturn out;\n}\n/**\n* Build a remote-definition fetcher owning its own TTL cache. Each fetcher's\n* cache is independent, so one per process shares warm bytes while test fetchers\n* stay isolated.\n*/\nfunction createRemoteDefinitionFetcher(config) {\n\tconst cache = /* @__PURE__ */ new Map();\n\tconst logger = config.logger ?? new NoopLogger();\n\treturn { async load(url) {\n\t\tawait assertSafeRemoteDefinitionUrl(url, logger);\n\t\tconst now = config.now();\n\t\tconst cached = cache.get(url);\n\t\tif (cached && now - cached.fetchedAt < config.cacheTtlMs) return cached.data;\n\t\tconst controller = new AbortController();\n\t\tconst timeout = setTimeout(() => controller.abort(), config.fetchTimeoutMs);\n\t\tlet data;\n\t\ttry {\n\t\t\tconst response = await fetch(url, {\n\t\t\t\tsignal: controller.signal,\n\t\t\t\tredirect: \"error\"\n\t\t\t});\n\t\t\tif (!response.ok) throw new Error(`HTTP ${response.status}: ${response.statusText}`);\n\t\t\tconst declared = Number(response.headers.get(\"content-length\"));\n\t\t\tif (Number.isFinite(declared) && declared > config.maxBytes) throw new Error(\"Remote definition exceeds size limit\");\n\t\t\tdata = await readBodyWithCap(response, config.maxBytes, controller);\n\t\t} finally {\n\t\t\tclearTimeout(timeout);\n\t\t}\n\t\tcache.set(url, {\n\t\t\tdata,\n\t\t\tfetchedAt: now\n\t\t});\n\t\tif (cache.size > CACHE_MAX_ENTRIES) {\n\t\t\tconst entries = Array.from(cache.entries());\n\t\t\tentries.sort((a, b) => a[1].fetchedAt - b[1].fetchedAt);\n\t\t\tfor (let i = 0; i < CACHE_EVICT_BATCH; i++) cache.delete(entries[i][0]);\n\t\t}\n\t\treturn data;\n\t} };\n}\n//#endregion\nexport { createRemoteDefinitionFetcher as t };\n"],"names":[],"mappings":";;;;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,WAAW,CAAC,EAAE,EAAE;AACzB,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC,WAAW,EAAE;AAC5B,CAAC,MAAM,YAAY,GAAG,+CAA+C,CAAC,IAAI,CAAC,IAAI,CAAC;AAChF,CAAC,IAAI,YAAY,EAAE,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC;AACzC,MAAM;AACN,EAAE,MAAM,SAAS,GAAG,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC;AACzE,EAAE,IAAI,SAAS,EAAE;AACjB,GAAG,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACxC,GAAG,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACxC,GAAG,IAAI,GAAG;AACV,IAAI,EAAE,IAAI,CAAC,GAAG,GAAG;AACjB,IAAI,EAAE,GAAG,GAAG;AACZ,IAAI,EAAE,IAAI,CAAC,GAAG,GAAG;AACjB,IAAI,EAAE,GAAG;AACT,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AACd,EAAE;AACF,CAAC;AACD,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;AACvB,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;AAC5C,EAAE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,OAAO,IAAI;AACrE,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,IAAI;AAC1B,EAAE,IAAI,CAAC,KAAK,GAAG,EAAE,OAAO,IAAI;AAC5B,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,IAAI;AAC3B,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,OAAO,IAAI;AACzC,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,IAAI;AAClD,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,OAAO,IAAI;AACzC,EAAE,OAAO,KAAK;AACd,CAAC;AACD,CAAC,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,IAAI,EAAE,OAAO,IAAI;AACjD,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI;AACrD,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI;AACjD,CAAC,OAAO,KAAK;AACb;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,uBAAuB,CAAC,IAAI,EAAE;AACvC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,IAAI;AAClC,CAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;AACjC,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,IAAI;AAC9D,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK;AAC1B,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,IAAI;AAC3B,EAAE,IAAI,CAAC;AACP,EAAE,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;AACnD,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;AAClD,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;AAClD,OAAO,OAAO,IAAI;AAClB,EAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI;AACtC,CAAC,CAAC;AACF,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;AACrC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,EAAE,OAAO,IAAI;AAC9C,CAAC,MAAM,KAAK,GAAG,IAAI;AACnB,CAAC,IAAI,KAAK;AACV,CAAC,QAAQ,KAAK,CAAC,MAAM;AACrB,EAAE,KAAK,CAAC;AACR,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC;AACnB,GAAG;AACH,EAAE,KAAK,CAAC;AACR,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,OAAO,IAAI;AACzD,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;AACpC,GAAG;AACH,EAAE,KAAK,CAAC;AACR,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,OAAO,IAAI;AACxE,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;AACrD,GAAG;AACH,EAAE;AACF,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,OAAO,IAAI;AAC9C,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;AACrE;AACA,CAAC,KAAK,GAAG,KAAK,KAAK,CAAC;AACpB,CAAC,IAAI,KAAK,GAAG,UAAU,EAAE,OAAO,IAAI;AACpC,CAAC,OAAO;AACR,EAAE,KAAK,KAAK,EAAE,GAAG,GAAG;AACpB,EAAE,KAAK,KAAK,EAAE,GAAG,GAAG;AACpB,EAAE,KAAK,KAAK,CAAC,GAAG,GAAG;AACnB,EAAE,KAAK,GAAG;AACV,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;AACZ;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,yBAAyB,CAAC,GAAG,EAAE;AACxC,CAAC,IAAI,MAAM;AACX,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC;AACvB,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,KAAK;AACd,CAAC;AACD,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,OAAO,KAAK;AAC9E,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE;AACzC,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,KAAK;AACxB,CAAC,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,KAAK;AACtE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;AACzE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC;AAChD,CAAC,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC;AAChD,CAAC,IAAI,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC;AAC9C,CAAC,OAAO,IAAI;AACZ;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,6BAA6B,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,UAAU,EAAE,EAAE;AAC7E,CAAC,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,EAAE;AACtC,EAAE,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;AAC/C,GAAG,SAAS,EAAE,cAAc;AAC5B,GAAG,MAAM,EAAE,gBAAgB;AAC3B,GAAG,IAAI,EAAE,MAAM,CAAC,GAAG;AACnB,GAAG,CAAC;AACJ,EAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AACzD,CAAC;AACD,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;AACzE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG;AAClE,CAAC,IAAI,QAAQ;AACb,CAAC,IAAI;AACL,EAAE,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAC9C,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;AAC/C,GAAG,SAAS,EAAE,cAAc;AAC5B,GAAG,MAAM,EAAE,mBAAmB;AAC9B,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AACzD,CAAC;AACD,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE;AAC5E,EAAE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACtF,EAAE,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;AAC/C,GAAG,SAAS,EAAE,cAAc;AAC5B,GAAG,MAAM,EAAE,wBAAwB;AACnC,GAAG,IAAI;AACP,GAAG,UAAU,EAAE;AACf,GAAG,CAAC;AACJ,EAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AACzD,CAAC;AACD,CAAC,OAAO,GAAG;AACX;AACA;AACA,SAAS,MAAM,CAAC,GAAG,EAAE;AACrB,CAAC,IAAI;AACL,EAAE,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ;AAC9B,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;AAC1B,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,iBAAiB,GAAG,EAAE;AAC1B,IAAI,iBAAiB,GAAG,EAAE;AAC1B;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE;AAC/D,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;AACrB,EAAE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE;AAC7C,EAAE,IAAI,MAAM,CAAC,UAAU,GAAG,QAAQ,EAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AAC3F,EAAE,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC;AAC/B,CAAC;AACD,CAAC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE;AACzC,CAAC,MAAM,MAAM,GAAG,EAAE;AAClB,CAAC,IAAI,KAAK,GAAG,CAAC;AACd,CAAC,OAAO,IAAI,EAAE;AACd,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE;AAC7C,EAAE,IAAI,IAAI,EAAE;AACZ,EAAE,KAAK,IAAI,KAAK,CAAC,UAAU;AAC3B,EAAE,IAAI,KAAK,GAAG,QAAQ,EAAE;AACxB,GAAG,UAAU,CAAC,KAAK,EAAE;AACrB,GAAG,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AAC1D,EAAE;AACF,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;AACpB,CAAC;AACD,CAAC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC;AAClC,CAAC,IAAI,MAAM,GAAG,CAAC;AACf,CAAC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE;AAC7B,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC;AACxB,EAAE,MAAM,IAAI,KAAK,CAAC,UAAU;AAC5B,CAAC;AACD,CAAC,OAAO,GAAG;AACX;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,6BAA6B,CAAC,MAAM,EAAE;AAC/C,CAAC,MAAM,KAAK,mBAAmB,IAAI,GAAG,EAAE;AACxC,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,UAAU,EAAE;AACjD,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE;AAC1B,EAAE,MAAM,6BAA6B,CAAC,GAAG,EAAE,MAAM,CAAC;AAClD,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE;AAC1B,EAAE,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;AAC/B,EAAE,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,OAAO,MAAM,CAAC,IAAI;AAC9E,EAAE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE;AAC1C,EAAE,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,cAAc,CAAC;AAC7E,EAAE,IAAI,IAAI;AACV,EAAE,IAAI;AACN,GAAG,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;AACrC,IAAI,MAAM,EAAE,UAAU,CAAC,MAAM;AAC7B,IAAI,QAAQ,EAAE;AACd,IAAI,CAAC;AACL,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;AACvF,GAAG,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAClE,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AACvH,GAAG,IAAI,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC;AACtE,EAAE,CAAC,SAAS;AACZ,GAAG,YAAY,CAAC,OAAO,CAAC;AACxB,EAAE;AACF,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;AACjB,GAAG,IAAI;AACP,GAAG,SAAS,EAAE;AACd,GAAG,CAAC;AACJ,EAAE,IAAI,KAAK,CAAC,IAAI,GAAG,iBAAiB,EAAE;AACtC,GAAG,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;AAC9C,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1E,EAAE;AACF,EAAE,OAAO,IAAI;AACb,CAAC,CAAC,EAAE;AACJ;;;;"}

package/build/server/chunks/chunks/computeLimits.js-DxTgrkcX.js

@@ -0,0 +1,46 @@
+import { b as private_env } from './shared-server.js-BjFXsyhJ.js';
+import { v as lazyLogger } from './providers.server.js-2HaeDkdE.js';
+import { a as resolveComputeLimits } from './limits.js-Dw3YYMI2.js';
+import './src.js-C5mUn1eC.js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/lib/server/computeLimits.ts
+/**
+* App-side binding for the compute limits. The knobs, defaults, and env
+* parsing now live in `@selvajs/server` (`resolveComputeLimits`) so a consuming
+* app can reuse them; this module is the thin adapter that reads SvelteKit's
+* dynamic private env ONCE and re-exports the resolved values as the named
+* constants the rest of the app already imports.
+*
+* Why `$env/dynamic/private` and not bare `process.env`: in `vite dev` Vite
+* loads `.env` into this module but does NOT mirror it into `process.env`, so a
+* raw `process.env[name]` is undefined in dev and every knob silently fell back
+* to its default regardless of `.env`.
+*
+* Client-side counterparts (the in-flight compute throttle and the slider
+* debounce on inputs) are bundled into the client, so they cannot read env — see
+* `async-throttle.ts` in `@selvajs/solve/client` and the input components.
+*/
+var limits = resolveComputeLimits(private_env, lazyLogger);
+var MAX_SOLVE_DURATION_MS = limits.maxSolveDurationMs;
+var RATE_LIMIT_WINDOW_MS = limits.rateLimitWindowMs;
+var RATE_LIMIT_MAX_REQUESTS = limits.rateLimitMaxRequests;
+var MAX_GH_FILE_SIZE = limits.maxGhFileSize;
+var MAX_IMAGE_FILE_SIZE = limits.maxImageFileSize;
+var COMPUTE_REQUEST_MAX_BYTES = limits.computeRequestMaxBytes;
+var COMPUTE_RESPONSE_MAX_BYTES = limits.computeResponseMaxBytes;
+var REMOTE_DEFINITION_MAX_BYTES = limits.remoteDefinitionMaxBytes;
+var REMOTE_DEFINITION_FETCH_TIMEOUT_MS = limits.remoteDefinitionFetchTimeoutMs;
+var REMOTE_DEFINITION_CACHE_TTL_MS = limits.remoteDefinitionCacheTtlMs;
+var COMPUTE_REUSE_DEFINITION_CACHE = limits.computeReuseDefinitionCache;
+var COMPUTE_SERVER_CACHESOLVE = limits.computeServerCachesolve;
+var COMPUTE_CACHE_ERRORED_SOLVES = limits.computeCacheErroredSolves;
+var COMPUTE_MAX_CONCURRENT = limits.computeMaxConcurrentSolves;
+var COMPUTE_MAX_QUEUE_DEPTH = limits.computeMaxQueueDepth;
+var COMPUTE_QUEUE_WAIT_MS = limits.computeQueueWaitMs;
+var COMPUTE_DEFINITION_CACHE_BYTES = limits.computeDefinitionCacheBytes;
+var COMPUTE_SOLVE_CACHE_BYTES = limits.computeSolveCacheBytes;
+
+export { COMPUTE_SOLVE_CACHE_BYTES as C, MAX_SOLVE_DURATION_MS as M, REMOTE_DEFINITION_CACHE_TTL_MS as R, COMPUTE_REUSE_DEFINITION_CACHE as a, COMPUTE_CACHE_ERRORED_SOLVES as b, COMPUTE_SERVER_CACHESOLVE as c, COMPUTE_QUEUE_WAIT_MS as d, COMPUTE_MAX_QUEUE_DEPTH as e, COMPUTE_MAX_CONCURRENT as f, COMPUTE_DEFINITION_CACHE_BYTES as g, REMOTE_DEFINITION_FETCH_TIMEOUT_MS as h, REMOTE_DEFINITION_MAX_BYTES as i, COMPUTE_RESPONSE_MAX_BYTES as j, COMPUTE_REQUEST_MAX_BYTES as k, MAX_IMAGE_FILE_SIZE as l, MAX_GH_FILE_SIZE as m, RATE_LIMIT_MAX_REQUESTS as n, RATE_LIMIT_WINDOW_MS as o };
+//# sourceMappingURL=computeLimits.js-DxTgrkcX.js.map

package/build/server/chunks/chunks/computeLimits.js-DxTgrkcX.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"computeLimits.js-DxTgrkcX.js","sources":["../../../../.svelte-kit/output/server/chunks/computeLimits.js"],"sourcesContent":["import { t as private_env } from \"./shared-server.js\";\nimport { S as lazyLogger } from \"./providers.server.js\";\nimport { n as resolveComputeLimits } from \"./limits.js\";\nimport \"./compute.js\";\n//#region src/lib/server/computeLimits.ts\n/**\n* App-side binding for the compute limits. The knobs, defaults, and env\n* parsing now live in `@selvajs/server` (`resolveComputeLimits`) so a consuming\n* app can reuse them; this module is the thin adapter that reads SvelteKit's\n* dynamic private env ONCE and re-exports the resolved values as the named\n* constants the rest of the app already imports.\n*\n* Why `$env/dynamic/private` and not bare `process.env`: in `vite dev` Vite\n* loads `.env` into this module but does NOT mirror it into `process.env`, so a\n* raw `process.env[name]` is undefined in dev and every knob silently fell back\n* to its default regardless of `.env`.\n*\n* Client-side counterparts (the in-flight compute throttle and the slider\n* debounce on inputs) are bundled into the client, so they cannot read env — see\n* `async-throttle.ts` in `@selvajs/solve/client` and the input components.\n*/\nvar limits = resolveComputeLimits(private_env, lazyLogger);\nvar MAX_SOLVE_DURATION_MS = limits.maxSolveDurationMs;\nvar RATE_LIMIT_WINDOW_MS = limits.rateLimitWindowMs;\nvar RATE_LIMIT_MAX_REQUESTS = limits.rateLimitMaxRequests;\nvar MAX_GH_FILE_SIZE = limits.maxGhFileSize;\nvar MAX_IMAGE_FILE_SIZE = limits.maxImageFileSize;\nvar COMPUTE_REQUEST_MAX_BYTES = limits.computeRequestMaxBytes;\nvar COMPUTE_RESPONSE_MAX_BYTES = limits.computeResponseMaxBytes;\nvar REMOTE_DEFINITION_MAX_BYTES = limits.remoteDefinitionMaxBytes;\nvar REMOTE_DEFINITION_FETCH_TIMEOUT_MS = limits.remoteDefinitionFetchTimeoutMs;\nvar REMOTE_DEFINITION_CACHE_TTL_MS = limits.remoteDefinitionCacheTtlMs;\nvar COMPUTE_REUSE_DEFINITION_CACHE = limits.computeReuseDefinitionCache;\nvar COMPUTE_SERVER_CACHESOLVE = limits.computeServerCachesolve;\nvar COMPUTE_CACHE_ERRORED_SOLVES = limits.computeCacheErroredSolves;\nvar COMPUTE_MAX_CONCURRENT = limits.computeMaxConcurrentSolves;\nvar COMPUTE_MAX_QUEUE_DEPTH = limits.computeMaxQueueDepth;\nvar COMPUTE_QUEUE_WAIT_MS = limits.computeQueueWaitMs;\nvar COMPUTE_DEFINITION_CACHE_BYTES = limits.computeDefinitionCacheBytes;\nvar COMPUTE_SOLVE_CACHE_BYTES = limits.computeSolveCacheBytes;\n//#endregion\nexport { REMOTE_DEFINITION_FETCH_TIMEOUT_MS as _, COMPUTE_QUEUE_WAIT_MS as a, COMPUTE_REUSE_DEFINITION_CACHE as c, MAX_GH_FILE_SIZE as d, MAX_IMAGE_FILE_SIZE as f, REMOTE_DEFINITION_CACHE_TTL_MS as g, RATE_LIMIT_WINDOW_MS as h, COMPUTE_MAX_QUEUE_DEPTH as i, COMPUTE_SERVER_CACHESOLVE as l, RATE_LIMIT_MAX_REQUESTS as m, COMPUTE_DEFINITION_CACHE_BYTES as n, COMPUTE_REQUEST_MAX_BYTES as o, MAX_SOLVE_DURATION_MS as p, COMPUTE_MAX_CONCURRENT as r, COMPUTE_RESPONSE_MAX_BYTES as s, COMPUTE_CACHE_ERRORED_SOLVES as t, COMPUTE_SOLVE_CACHE_BYTES as u, REMOTE_DEFINITION_MAX_BYTES as v };\n"],"names":[],"mappings":";;;;;;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,MAAM,GAAG,oBAAoB,CAAC,WAAW,EAAE,UAAU,CAAC;AACvD,IAAC,qBAAqB,GAAG,MAAM,CAAC;AAChC,IAAC,oBAAoB,GAAG,MAAM,CAAC;AAC/B,IAAC,uBAAuB,GAAG,MAAM,CAAC;AAClC,IAAC,gBAAgB,GAAG,MAAM,CAAC;AAC3B,IAAC,mBAAmB,GAAG,MAAM,CAAC;AAC9B,IAAC,yBAAyB,GAAG,MAAM,CAAC;AACpC,IAAC,0BAA0B,GAAG,MAAM,CAAC;AACrC,IAAC,2BAA2B,GAAG,MAAM,CAAC;AACtC,IAAC,kCAAkC,GAAG,MAAM,CAAC;AAC7C,IAAC,8BAA8B,GAAG,MAAM,CAAC;AACzC,IAAC,8BAA8B,GAAG,MAAM,CAAC;AACzC,IAAC,yBAAyB,GAAG,MAAM,CAAC;AACpC,IAAC,4BAA4B,GAAG,MAAM,CAAC;AACvC,IAAC,sBAAsB,GAAG,MAAM,CAAC;AACjC,IAAC,uBAAuB,GAAG,MAAM,CAAC;AAClC,IAAC,qBAAqB,GAAG,MAAM,CAAC;AAChC,IAAC,8BAA8B,GAAG,MAAM,CAAC;AACzC,IAAC,yBAAyB,GAAG,MAAM,CAAC;;;;"}