@selvajs/selva 4.8.0-beta.2 → 4.8.0-beta.3

package/build/server/chunks/chunks/routing.js-D3NKIXme.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routing.js-D3NKIXme.js","sources":["../../../../.svelte-kit/output/server/chunks/routing.js"],"sourcesContent":["//#region ../../node_modules/.pnpm/@sveltejs+kit@2.70.1_@opentelemetry+api@1.9.1_@sveltejs+vite-plugin-svelte@7.2.0_svelte_f075b7c16fa9692fcf0544233d562474/node_modules/@sveltejs/kit/src/runtime/pathname.js\nvar DATA_SUFFIX = \"/__data.json\";\nvar HTML_DATA_SUFFIX = \".html__data.json\";\n/** @param {string} pathname */\nfunction has_data_suffix(pathname) {\n\treturn pathname.endsWith(DATA_SUFFIX) || pathname.endsWith(HTML_DATA_SUFFIX);\n}\n/** @param {string} pathname */\nfunction add_data_suffix(pathname) {\n\tif (pathname.endsWith(\".html\")) return pathname.replace(/\\.html$/, HTML_DATA_SUFFIX);\n\treturn pathname.replace(/\\/$/, \"\") + DATA_SUFFIX;\n}\n/** @param {string} pathname */\nfunction strip_data_suffix(pathname) {\n\tif (pathname.endsWith(HTML_DATA_SUFFIX)) return pathname.slice(0, -16) + \".html\";\n\treturn pathname.slice(0, -12);\n}\nvar ROUTE_SUFFIX = \"/__route.js\";\n/**\n* @param {string} pathname\n* @returns {boolean}\n*/\nfunction has_resolution_suffix(pathname) {\n\treturn pathname.endsWith(ROUTE_SUFFIX);\n}\n/**\n* Convert a regular URL to a route to send to SvelteKit's server-side route resolution endpoint\n* @param {string} pathname\n* @returns {string}\n*/\nfunction add_resolution_suffix(pathname) {\n\treturn pathname.replace(/\\/$/, \"\") + ROUTE_SUFFIX;\n}\n/**\n* @param {string} pathname\n* @returns {string}\n*/\nfunction strip_resolution_suffix(pathname) {\n\treturn pathname.slice(0, -11);\n}\n//#endregion\n//#region ../../node_modules/.pnpm/@sveltejs+kit@2.70.1_@opentelemetry+api@1.9.1_@sveltejs+vite-plugin-svelte@7.2.0_svelte_f075b7c16fa9692fcf0544233d562474/node_modules/@sveltejs/kit/src/utils/url.js\n/**\n* Matches a URI scheme. See https://www.rfc-editor.org/rfc/rfc3986#section-3.1\n* @type {RegExp}\n*/\nvar SCHEME = /^[a-z][a-z\\d+\\-.]+:/i;\nvar internal = new URL(\"sveltekit-internal://\");\n/**\n* @param {string} base\n* @param {string} path\n*/\nfunction resolve(base, path) {\n\tif (path[0] === \"/\" && path[1] === \"/\") return path;\n\tlet url = new URL(base, internal);\n\turl = new URL(path, url);\n\treturn url.protocol === internal.protocol ? url.pathname + url.search + url.hash : url.href;\n}\n/**\n* @param {string} path\n* @param {import('types').TrailingSlash} trailing_slash\n*/\nfunction normalize_path(path, trailing_slash) {\n\tif (path === \"/\" || trailing_slash === \"ignore\") return path;\n\tif (trailing_slash === \"never\") return path.endsWith(\"/\") ? path.slice(0, -1) : path;\n\telse if (trailing_slash === \"always\" && !path.endsWith(\"/\")) return path + \"/\";\n\treturn path;\n}\n/**\n* Decode pathname excluding %25 to prevent further double decoding of params\n* @param {string} pathname\n*/\nfunction decode_pathname(pathname) {\n\treturn pathname.split(\"%25\").map(decodeURI).join(\"%25\");\n}\n/** @param {Record<string, string>} params */\nfunction decode_params(params) {\n\tfor (const key in params) params[key] = decodeURIComponent(params[key]);\n\treturn params;\n}\n/**\n* @param {URL} url\n* @param {() => void} callback\n* @param {(search_param: string) => void} search_params_callback\n* @param {boolean} [allow_hash]\n*/\nfunction make_trackable(url, callback, search_params_callback, allow_hash = false) {\n\tconst tracked = new URL(url);\n\tObject.defineProperty(tracked, \"searchParams\", {\n\t\tvalue: new Proxy(tracked.searchParams, { get(obj, key) {\n\t\t\tif (key === \"get\" || key === \"getAll\" || key === \"has\") return (param, ...rest) => {\n\t\t\t\tsearch_params_callback(param);\n\t\t\t\treturn obj[key](param, ...rest);\n\t\t\t};\n\t\t\tcallback();\n\t\t\tconst value = Reflect.get(obj, key);\n\t\t\treturn typeof value === \"function\" ? value.bind(obj) : value;\n\t\t} }),\n\t\tenumerable: true,\n\t\tconfigurable: true\n\t});\n\t/**\n\t* URL properties that could change during the lifetime of the page,\n\t* which excludes things like `origin`\n\t* @type {(keyof URL)[]}\n\t*/\n\tconst tracked_url_properties = [\n\t\t\"href\",\n\t\t\"pathname\",\n\t\t\"search\",\n\t\t\"toString\",\n\t\t\"toJSON\"\n\t];\n\tif (allow_hash) tracked_url_properties.push(\"hash\");\n\tfor (const property of tracked_url_properties) Object.defineProperty(tracked, property, {\n\t\tget() {\n\t\t\tcallback();\n\t\t\treturn url[property];\n\t\t},\n\t\tenumerable: true,\n\t\tconfigurable: true\n\t});\n\ttracked[Symbol.for(\"nodejs.util.inspect.custom\")] = (_depth, opts, inspect) => {\n\t\treturn inspect(url, opts);\n\t};\n\ttracked.searchParams[Symbol.for(\"nodejs.util.inspect.custom\")] = (_depth, opts, inspect) => {\n\t\treturn inspect(url.searchParams, opts);\n\t};\n\tif (!allow_hash) disable_hash(tracked);\n\treturn tracked;\n}\n/**\n* Disallow access to `url.hash` on the server and in `load`\n* @param {URL} url\n*/\nfunction disable_hash(url) {\n\tallow_nodejs_console_log(url);\n\tObject.defineProperty(url, \"hash\", { get() {\n\t\tthrow new Error(\"Cannot access event.url.hash. Consider using `page.url.hash` inside a component instead\");\n\t} });\n}\n/**\n* Disallow access to `url.search` and `url.searchParams` during prerendering\n* @param {URL} url\n*/\nfunction disable_search(url) {\n\tallow_nodejs_console_log(url);\n\tfor (const property of [\"search\", \"searchParams\"]) Object.defineProperty(url, property, { get() {\n\t\tthrow new Error(`Cannot access url.${property} on a page with prerendering enabled`);\n\t} });\n}\n/**\n* Allow URL to be console logged, bypassing disabled properties.\n* @param {URL} url\n*/\nfunction allow_nodejs_console_log(url) {\n\turl[Symbol.for(\"nodejs.util.inspect.custom\")] = (_depth, opts, inspect) => {\n\t\treturn inspect(new URL(url), opts);\n\t};\n}\n//#endregion\n//#region ../../node_modules/.pnpm/@sveltejs+kit@2.70.1_@opentelemetry+api@1.9.1_@sveltejs+vite-plugin-svelte@7.2.0_svelte_f075b7c16fa9692fcf0544233d562474/node_modules/@sveltejs/kit/src/utils/routing.js\n/**\n* Returns `false` for `(group)` segments\n* @param {string} segment\n*/\nfunction affects_path(segment) {\n\treturn segment !== \"\" && !/^\\([^)]+\\)$/.test(segment);\n}\n/**\n* Splits a route id into its segments, removing segments that\n* don't affect the path (i.e. groups). The root route is represented by `/`\n* and will be returned as `['']`.\n* @param {string} route\n* @returns string[]\n*/\nfunction get_route_segments(route) {\n\treturn route.slice(1).split(\"/\").filter(affects_path);\n}\n/**\n* @param {RegExpMatchArray} match\n* @param {import('types').RouteParam[]} params\n* @param {Record<string, import('@sveltejs/kit').ParamMatcher>} matchers\n*/\nfunction exec(match, params, matchers) {\n\t/** @type {Record<string, string>} */\n\tconst result = {};\n\tconst values = match.slice(1);\n\tconst values_needing_match = values.filter((value) => value !== void 0);\n\tlet buffered = 0;\n\tfor (let i = 0; i < params.length; i += 1) {\n\t\tconst param = params[i];\n\t\tlet value = values[i - buffered];\n\t\tif (param.chained && param.rest && buffered) {\n\t\t\tvalue = values.slice(i - buffered, i + 1).filter((s) => s).join(\"/\");\n\t\t\tbuffered = 0;\n\t\t}\n\t\tif (value === void 0) if (param.rest) value = \"\";\n\t\telse continue;\n\t\tif (!param.matcher || matchers[param.matcher](value)) {\n\t\t\tresult[param.name] = value;\n\t\t\tconst next_param = params[i + 1];\n\t\t\tconst next_value = values[i + 1];\n\t\t\tif (next_param && !next_param.rest && next_param.optional && next_value && param.chained) buffered = 0;\n\t\t\tif (!next_param && !next_value && Object.keys(result).length === values_needing_match.length) buffered = 0;\n\t\t\tcontinue;\n\t\t}\n\t\tif (param.optional && param.chained) {\n\t\t\tbuffered++;\n\t\t\tcontinue;\n\t\t}\n\t\treturn;\n\t}\n\tif (buffered) return;\n\treturn result;\n}\nvar basic_param_pattern = /\\[(\\[)?(\\.\\.\\.)?(\\w+?)(?:=(\\w+))?\\]\\]?/g;\n/**\n* Populate a route ID with params to resolve a pathname.\n* @example\n* ```js\n* resolveRoute(\n*   `/blog/[slug]/[...somethingElse]`,\n*   {\n*     slug: 'hello-world',\n*     somethingElse: 'something/else'\n*   }\n* ); // `/blog/hello-world/something/else`\n* ```\n* @param {string} id\n* @param {Record<string, string | undefined>} params\n* @returns {string}\n*/\nfunction resolve_route(id, params) {\n\tconst segments = get_route_segments(id);\n\tconst has_id_trailing_slash = id != \"/\" && id.endsWith(\"/\");\n\treturn \"/\" + segments.map((segment) => segment.replace(basic_param_pattern, (_, optional, rest, name) => {\n\t\tconst param_value = params[name];\n\t\tif (!param_value) {\n\t\t\tif (optional) return \"\";\n\t\t\tif (rest && param_value !== void 0) return \"\";\n\t\t\tthrow new Error(`Missing parameter '${name}' in route ${id}`);\n\t\t}\n\t\tif (param_value.startsWith(\"/\") || param_value.endsWith(\"/\")) throw new Error(`Parameter '${name}' in route ${id} cannot start or end with a slash -- this would cause an invalid route like foo//bar`);\n\t\treturn param_value;\n\t})).filter(Boolean).join(\"/\") + (has_id_trailing_slash ? \"/\" : \"\");\n}\n/**\n* Find the first route that matches the given path\n* @template {{pattern: RegExp, params: import('types').RouteParam[]}} Route\n* @param {string} path - The decoded pathname to match\n* @param {Route[]} routes\n* @param {Record<string, import('@sveltejs/kit').ParamMatcher>} matchers\n* @returns {{ route: Route, params: Record<string, string> } | null}\n*/\nfunction find_route(path, routes, matchers) {\n\tfor (const route of routes) {\n\t\tconst match = route.pattern.exec(path);\n\t\tif (!match) continue;\n\t\tconst matched = exec(match, route.params, matchers);\n\t\tif (matched) return {\n\t\t\troute,\n\t\t\tparams: decode_params(matched)\n\t\t};\n\t}\n\treturn null;\n}\n//#endregion\nexport { decode_pathname as a, normalize_path as c, add_resolution_suffix as d, has_data_suffix as f, strip_resolution_suffix as h, decode_params as i, resolve as l, strip_data_suffix as m, resolve_route as n, disable_search as o, has_resolution_suffix as p, SCHEME as r, make_trackable as s, find_route as t, add_data_suffix as u };\n"],"names":[],"mappings":"AAAA;AACA,IAAI,WAAW,GAAG,cAAc;AAChC,IAAI,gBAAgB,GAAG,kBAAkB;AACzC;AACA,SAAS,eAAe,CAAC,QAAQ,EAAE;AACnC,CAAC,OAAO,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC;AAC7E;AACA;AACA,SAAS,eAAe,CAAC,QAAQ,EAAE;AACnC,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACrF,CAAC,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,WAAW;AACjD;AACA;AACA,SAAS,iBAAiB,CAAC,QAAQ,EAAE;AACrC,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,OAAO;AACjF,CAAC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;AAC9B;AACA,IAAI,YAAY,GAAG,aAAa;AAChC;AACA;AACA;AACA;AACA,SAAS,qBAAqB,CAAC,QAAQ,EAAE;AACzC,CAAC,OAAO,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;AACvC;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,qBAAqB,CAAC,QAAQ,EAAE;AACzC,CAAC,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,YAAY;AAClD;AACA;AACA;AACA;AACA;AACA,SAAS,uBAAuB,CAAC,QAAQ,EAAE;AAC3C,CAAC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;AAC9B;AAQA,IAAI,QAAQ,GAAG,IAAI,GAAG,CAAC,uBAAuB,CAAC;AAC/C;AACA;AACA;AACA;AACA,SAAS,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE;AAC7B,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,OAAO,IAAI;AACpD,CAAC,IAAI,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;AAClC,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC;AACzB,CAAC,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI;AAC5F;AACA;AACA;AACA;AACA;AACA,SAAS,cAAc,CAAC,IAAI,EAAE,cAAc,EAAE;AAC9C,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,cAAc,KAAK,QAAQ,EAAE,OAAO,IAAI;AAC7D,CAAC,IAAI,cAAc,KAAK,OAAO,EAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI;AACrF,MAAM,IAAI,cAAc,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,IAAI,GAAG,GAAG;AAC/E,CAAC,OAAO,IAAI;AACZ;AACA;AACA;AACA;AACA;AACA,SAAS,eAAe,CAAC,QAAQ,EAAE;AACnC,CAAC,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;AACxD;AACA;AACA,SAAS,aAAa,CAAC,MAAM,EAAE;AAC/B,CAAC,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACxE,CAAC,OAAO,MAAM;AACd;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,sBAAsB,EAAE,UAAU,GAAG,KAAK,EAAE;AACnF,CAAC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC;AAC7B,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE;AAChD,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE;AACzD,GAAG,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,IAAI,KAAK;AACtF,IAAI,sBAAsB,CAAC,KAAK,CAAC;AACjC,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC;AACnC,GAAG,CAAC;AACJ,GAAG,QAAQ,EAAE;AACb,GAAG,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC;AACtC,GAAG,OAAO,OAAO,KAAK,KAAK,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK;AAC/D,EAAE,CAAC,EAAE,CAAC;AACN,EAAE,UAAU,EAAE,IAAI;AAClB,EAAE,YAAY,EAAE;AAChB,EAAE,CAAC;AACH;AACA;AACA;AACA;AACA;AACA,CAAC,MAAM,sBAAsB,GAAG;AAChC,EAAE,MAAM;AACR,EAAE,UAAU;AACZ,EAAE,QAAQ;AACV,EAAE,UAAU;AACZ,EAAE;AACF,EAAE;AACF,CAAC,IAAI,UAAU,EAAE,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC;AACpD,CAAC,KAAK,MAAM,QAAQ,IAAI,sBAAsB,EAAE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE;AACzF,EAAE,GAAG,GAAG;AACR,GAAG,QAAQ,EAAE;AACb,GAAG,OAAO,GAAG,CAAC,QAAQ,CAAC;AACvB,EAAE,CAAC;AACH,EAAE,UAAU,EAAE,IAAI;AAClB,EAAE,YAAY,EAAE;AAChB,EAAE,CAAC;AACH,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK;AAChF,EAAE,OAAO,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC;AAC3B,CAAC,CAAC;AACF,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK;AAC7F,EAAE,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC;AACxC,CAAC,CAAC;AACF,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC;AACvC,CAAC,OAAO,OAAO;AACf;AACA;AACA;AACA;AACA;AACA,SAAS,YAAY,CAAC,GAAG,EAAE;AAC3B,CAAC,wBAAwB,CAAC,GAAG,CAAC;AAC9B,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,GAAG,GAAG;AAC5C,EAAE,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC;AAC5G,CAAC,CAAC,EAAE,CAAC;AACL;AACA;AACA;AACA;AACA;AACA,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,CAAC,wBAAwB,CAAC,GAAG,CAAC;AAC9B,CAAC,KAAK,MAAM,QAAQ,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,GAAG;AACjG,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,kBAAkB,EAAE,QAAQ,CAAC,oCAAoC,CAAC,CAAC;AACtF,CAAC,CAAC,EAAE,CAAC;AACL;AACA;AACA;AACA;AACA;AACA,SAAS,wBAAwB,CAAC,GAAG,EAAE;AACvC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK;AAC5E,EAAE,OAAO,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;AACpC,CAAC,CAAC;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,YAAY,CAAC,OAAO,EAAE;AAC/B,CAAC,OAAO,OAAO,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;AACtD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,kBAAkB,CAAC,KAAK,EAAE;AACnC,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;AACtD;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE;AACvC;AACA,CAAC,MAAM,MAAM,GAAG,EAAE;AAClB,CAAC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9B,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,KAAK,KAAK,KAAK,MAAM,CAAC;AACxE,CAAC,IAAI,QAAQ,GAAG,CAAC;AACjB,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE;AAC5C,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC;AACzB,EAAE,IAAI,KAAK,GAAG,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC;AAClC,EAAE,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,QAAQ,EAAE;AAC/C,GAAG,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;AACvE,GAAG,QAAQ,GAAG,CAAC;AACf,EAAE;AACF,EAAE,IAAI,KAAK,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE;AAClD,OAAO;AACP,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE;AACxD,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK;AAC7B,GAAG,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;AACnC,GAAG,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;AACnC,GAAG,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,QAAQ,IAAI,UAAU,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,GAAG,CAAC;AACzG,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,oBAAoB,CAAC,MAAM,EAAE,QAAQ,GAAG,CAAC;AAC7G,GAAG;AACH,EAAE;AACF,EAAE,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE;AACvC,GAAG,QAAQ,EAAE;AACb,GAAG;AACH,EAAE;AACF,EAAE;AACF,CAAC;AACD,CAAC,IAAI,QAAQ,EAAE;AACf,CAAC,OAAO,MAAM;AACd;AACA,IAAI,mBAAmB,GAAG,yCAAyC;AACnE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE;AACnC,CAAC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,EAAE,CAAC;AACxC,CAAC,MAAM,qBAAqB,GAAgB,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC;AAC5D,CAAC,OAAO,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,KAAK;AAC1G,EAAE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC;AAClC,EAAE,IAAI,CAAC,WAAW,EAAE;AACpB,GAAG,IAAI,QAAQ,EAAE,OAAO,EAAE;AAC1B,GAAG,IAAI,IAAI,IAAI,WAAW,KAAK,MAAM,EAAE,OAAO,EAAE;AAChD,GAAG,MAAM,IAAI,KAAK,CAAC,CAAC,mBAAmB,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;AAChE,EAAE;AACF,EAAE,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,oFAAoF,CAAC,CAAC;AACzM,EAAE,OAAO,WAAW;AACpB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,qBAAqB,GAAG,GAAG,GAAG,EAAE,CAAC;AACnE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE;AAC5C,CAAC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE;AAC7B,EAAE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;AACxC,EAAE,IAAI,CAAC,KAAK,EAAE;AACd,EAAE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC;AACrD,EAAE,IAAI,OAAO,EAAE,OAAO;AACtB,GAAG,KAAK;AACR,GAAG,MAAM,EAAE,aAAa,CAAC,OAAO;AAChC,GAAG;AACH,CAAC;AACD,CAAC,OAAO,IAAI;AACZ;;;;"}

package/build/server/chunks/chunks/selfUpdate.server.js-DrtIhtIx.js

@@ -0,0 +1,152 @@
+import { g as getLogger, r as renderThrown } from './providers.server.js-DCnhO862.js';
+import { d as deriveOutcome } from './update-outcome.js-BOtdiviI.js';
+import { join } from 'node:path';
+import { existsSync, readFileSync, rmSync } from 'node:fs';
+
+//#region src/lib/server/selfUpdate.server.ts
+/**
+* Self-update observability (audit O2): durable log/state paths for the update
+* runner, plus post-restart reconciliation of the update's outcome into the
+* audit event log.
+*
+* The process that launches an update is killed mid-update (`pm2 stop
+* selva-compute` is a step of the update itself), so only the
+* `system.update.started` event can be emitted synchronously by the POST
+* handler. The terminal event (`finished` / `rolled_back` / `failed`) is
+* derived AFTER the app is back up: the POST persists a pending-update state
+* file next to the log, and the reconciler here polls the log until the
+* runner's `[EXIT] code=N` marker appears, classifies it via `deriveOutcome`,
+* emits the matching event, and consumes the state file. Kicked from both the
+* POST (covers the no-restart "already up to date" path) and the first request
+* after boot (covers the real update path, where the emitting process is new).
+*/
+function isDeploymentDir(dir) {
+	return existsSync(join(dir, "node_modules", "@selvajs", "selva", "package.json"));
+}
+function findDeploymentDir(env) {
+	if (env.INSTALL_DIR && isDeploymentDir(env.INSTALL_DIR)) return env.INSTALL_DIR;
+	let dir = process.cwd();
+	for (let i = 0; i < 6; i++) {
+		if (isDeploymentDir(dir)) return dir;
+		const parent = join(dir, "..");
+		if (parent === dir) break;
+		dir = parent;
+	}
+	return null;
+}
+/**
+* Where the update runner mirrors all its output. Lives in the deployment dir
+* so it survives reboots (it used to be `/tmp/selva-update.log`, wiped on
+* reboot — audit O2); the `/tmp` fallback only applies outside a deployment
+* (dev), where no update can actually run.
+*/
+function updateLogPath(deploymentDir) {
+	return deploymentDir ? join(deploymentDir, "selva-update.log") : "/tmp/selva-update.log";
+}
+/** Pending-update marker consumed by the reconciler. Sits next to the log. */
+function updateStatePath(deploymentDir) {
+	return join(deploymentDir, "selva-update-state.json");
+}
+/**
+* One reconciliation attempt. Reads the pending-update state file; if the log
+* carries the runner's terminal `[EXIT] code=N` marker, classifies the outcome,
+* emits the terminal audit event, reports rollback/failure to the error
+* tracker, and deletes the state file (exactly-once across restarts — the
+* state file is the emission token).
+*/
+async function reconcileUpdateOutcome(deps) {
+	const statePath = updateStatePath(deps.deploymentDir);
+	let state;
+	try {
+		state = JSON.parse(readFileSync(statePath, "utf8"));
+	} catch {
+		return "no_pending_update";
+	}
+	let logs = "";
+	try {
+		logs = readFileSync(updateLogPath(deps.deploymentDir), "utf8");
+	} catch {}
+	const exitMatch = /\[EXIT\] code=(\d+)/.exec(logs);
+	if (!exitMatch) return "still_running";
+	const exitCode = Number(exitMatch[1]);
+	const outcome = deriveOutcome(exitCode, logs);
+	const base = {
+		fromVersion: state.fromVersion ?? outcome.from,
+		toVersion: outcome.to,
+		actorId: state.actorId
+	};
+	let event;
+	if (outcome.severity === "critical") event = {
+		type: "system.update.failed",
+		...base,
+		detail: outcome.title
+	};
+	else if (exitCode === 5 || logs.includes("Rolled back")) event = {
+		type: "system.update.rolled_back",
+		...base,
+		detail: outcome.title
+	};
+	else if (outcome.severity === "success" || outcome.severity === "info") event = {
+		type: "system.update.finished",
+		...base
+	};
+	else event = {
+		type: "system.update.finished",
+		...base,
+		detail: outcome.title
+	};
+	await deps.emit(event);
+	if (event.type !== "system.update.finished") deps.report(/* @__PURE__ */ new Error(`[selfUpdate] ${outcome.title}`));
+	try {
+		rmSync(statePath);
+	} catch {}
+	return "reconciled";
+}
+var POLL_MS = 15e3;
+var MAX_POLLS = 80;
+var reconcilerActive = false;
+/**
+* Idempotently start polling for a pending update's terminal state. Safe to
+* call on every boot and on every update POST — it exits immediately when no
+* state file exists and never runs twice concurrently.
+*/
+function startUpdateOutcomeReconciler(deps) {
+	if (reconcilerActive) return;
+	if (!existsSync(updateStatePath(deps.deploymentDir))) return;
+	reconcilerActive = true;
+	let polls = 0;
+	const timer = setInterval(() => {
+		(async () => {
+			polls += 1;
+			let result;
+			try {
+				result = await reconcileUpdateOutcome(deps);
+			} catch (err) {
+				getLogger().error("Outcome reconciliation failed", {
+					component: "selfUpdate",
+					err: renderThrown(err)
+				});
+				result = "still_running";
+			}
+			if (result === "still_running" && polls < MAX_POLLS) return;
+			if (result === "still_running") try {
+				const statePath = updateStatePath(deps.deploymentDir);
+				const state = JSON.parse(readFileSync(statePath, "utf8"));
+				await deps.emit({
+					type: "system.update.failed",
+					fromVersion: state.fromVersion,
+					actorId: state.actorId,
+					detail: "No terminal marker in the update log within 20 minutes."
+				});
+				deps.report(/* @__PURE__ */ new Error("[selfUpdate] update never reached a terminal state"));
+				rmSync(statePath);
+			} catch {}
+			clearInterval(timer);
+			reconcilerActive = false;
+		})();
+	}, POLL_MS);
+	timer.unref?.();
+}
+
+export { updateStatePath as a, findDeploymentDir as f, startUpdateOutcomeReconciler as s, updateLogPath as u };
+//# sourceMappingURL=selfUpdate.server.js-DrtIhtIx.js.map

package/build/server/chunks/chunks/selfUpdate.server.js-DrtIhtIx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"selfUpdate.server.js-DrtIhtIx.js","sources":["../../../../.svelte-kit/output/server/chunks/selfUpdate.server.js"],"sourcesContent":["import { T as renderThrown, f as getLogger } from \"./providers.server.js\";\nimport { t as deriveOutcome } from \"./update-outcome.js\";\nimport { join } from \"node:path\";\nimport { existsSync, readFileSync, rmSync } from \"node:fs\";\n//#region src/lib/server/selfUpdate.server.ts\n/**\n* Self-update observability (audit O2): durable log/state paths for the update\n* runner, plus post-restart reconciliation of the update's outcome into the\n* audit event log.\n*\n* The process that launches an update is killed mid-update (`pm2 stop\n* selva-compute` is a step of the update itself), so only the\n* `system.update.started` event can be emitted synchronously by the POST\n* handler. The terminal event (`finished` / `rolled_back` / `failed`) is\n* derived AFTER the app is back up: the POST persists a pending-update state\n* file next to the log, and the reconciler here polls the log until the\n* runner's `[EXIT] code=N` marker appears, classifies it via `deriveOutcome`,\n* emits the matching event, and consumes the state file. Kicked from both the\n* POST (covers the no-restart \"already up to date\" path) and the first request\n* after boot (covers the real update path, where the emitting process is new).\n*/\nfunction isDeploymentDir(dir) {\n\treturn existsSync(join(dir, \"node_modules\", \"@selvajs\", \"selva\", \"package.json\"));\n}\nfunction findDeploymentDir(env) {\n\tif (env.INSTALL_DIR && isDeploymentDir(env.INSTALL_DIR)) return env.INSTALL_DIR;\n\tlet dir = process.cwd();\n\tfor (let i = 0; i < 6; i++) {\n\t\tif (isDeploymentDir(dir)) return dir;\n\t\tconst parent = join(dir, \"..\");\n\t\tif (parent === dir) break;\n\t\tdir = parent;\n\t}\n\treturn null;\n}\n/**\n* Where the update runner mirrors all its output. Lives in the deployment dir\n* so it survives reboots (it used to be `/tmp/selva-update.log`, wiped on\n* reboot — audit O2); the `/tmp` fallback only applies outside a deployment\n* (dev), where no update can actually run.\n*/\nfunction updateLogPath(deploymentDir) {\n\treturn deploymentDir ? join(deploymentDir, \"selva-update.log\") : \"/tmp/selva-update.log\";\n}\n/** Pending-update marker consumed by the reconciler. Sits next to the log. */\nfunction updateStatePath(deploymentDir) {\n\treturn join(deploymentDir, \"selva-update-state.json\");\n}\n/**\n* One reconciliation attempt. Reads the pending-update state file; if the log\n* carries the runner's terminal `[EXIT] code=N` marker, classifies the outcome,\n* emits the terminal audit event, reports rollback/failure to the error\n* tracker, and deletes the state file (exactly-once across restarts — the\n* state file is the emission token).\n*/\nasync function reconcileUpdateOutcome(deps) {\n\tconst statePath = updateStatePath(deps.deploymentDir);\n\tlet state;\n\ttry {\n\t\tstate = JSON.parse(readFileSync(statePath, \"utf8\"));\n\t} catch {\n\t\treturn \"no_pending_update\";\n\t}\n\tlet logs = \"\";\n\ttry {\n\t\tlogs = readFileSync(updateLogPath(deps.deploymentDir), \"utf8\");\n\t} catch {}\n\tconst exitMatch = /\\[EXIT\\] code=(\\d+)/.exec(logs);\n\tif (!exitMatch) return \"still_running\";\n\tconst exitCode = Number(exitMatch[1]);\n\tconst outcome = deriveOutcome(exitCode, logs);\n\tconst base = {\n\t\tfromVersion: state.fromVersion ?? outcome.from,\n\t\ttoVersion: outcome.to,\n\t\tactorId: state.actorId\n\t};\n\tlet event;\n\tif (outcome.severity === \"critical\") event = {\n\t\ttype: \"system.update.failed\",\n\t\t...base,\n\t\tdetail: outcome.title\n\t};\n\telse if (exitCode === 5 || logs.includes(\"Rolled back\")) event = {\n\t\ttype: \"system.update.rolled_back\",\n\t\t...base,\n\t\tdetail: outcome.title\n\t};\n\telse if (outcome.severity === \"success\" || outcome.severity === \"info\") event = {\n\t\ttype: \"system.update.finished\",\n\t\t...base\n\t};\n\telse event = {\n\t\ttype: \"system.update.finished\",\n\t\t...base,\n\t\tdetail: outcome.title\n\t};\n\tawait deps.emit(event);\n\tif (event.type !== \"system.update.finished\") deps.report(/* @__PURE__ */ new Error(`[selfUpdate] ${outcome.title}`));\n\ttry {\n\t\trmSync(statePath);\n\t} catch {}\n\treturn \"reconciled\";\n}\nvar POLL_MS = 15e3;\nvar MAX_POLLS = 80;\nvar reconcilerActive = false;\n/**\n* Idempotently start polling for a pending update's terminal state. Safe to\n* call on every boot and on every update POST — it exits immediately when no\n* state file exists and never runs twice concurrently.\n*/\nfunction startUpdateOutcomeReconciler(deps) {\n\tif (reconcilerActive) return;\n\tif (!existsSync(updateStatePath(deps.deploymentDir))) return;\n\treconcilerActive = true;\n\tlet polls = 0;\n\tconst timer = setInterval(() => {\n\t\t(async () => {\n\t\t\tpolls += 1;\n\t\t\tlet result;\n\t\t\ttry {\n\t\t\t\tresult = await reconcileUpdateOutcome(deps);\n\t\t\t} catch (err) {\n\t\t\t\tgetLogger().error(\"Outcome reconciliation failed\", {\n\t\t\t\t\tcomponent: \"selfUpdate\",\n\t\t\t\t\terr: renderThrown(err)\n\t\t\t\t});\n\t\t\t\tresult = \"still_running\";\n\t\t\t}\n\t\t\tif (result === \"still_running\" && polls < MAX_POLLS) return;\n\t\t\tif (result === \"still_running\") try {\n\t\t\t\tconst statePath = updateStatePath(deps.deploymentDir);\n\t\t\t\tconst state = JSON.parse(readFileSync(statePath, \"utf8\"));\n\t\t\t\tawait deps.emit({\n\t\t\t\t\ttype: \"system.update.failed\",\n\t\t\t\t\tfromVersion: state.fromVersion,\n\t\t\t\t\tactorId: state.actorId,\n\t\t\t\t\tdetail: \"No terminal marker in the update log within 20 minutes.\"\n\t\t\t\t});\n\t\t\t\tdeps.report(/* @__PURE__ */ new Error(\"[selfUpdate] update never reached a terminal state\"));\n\t\t\t\trmSync(statePath);\n\t\t\t} catch {}\n\t\t\tclearInterval(timer);\n\t\t\treconcilerActive = false;\n\t\t})();\n\t}, POLL_MS);\n\ttimer.unref?.();\n}\n//#endregion\nexport { updateStatePath as i, startUpdateOutcomeReconciler as n, updateLogPath as r, findDeploymentDir as t };\n"],"names":[],"mappings":";;;;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,eAAe,CAAC,GAAG,EAAE;AAC9B,CAAC,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;AAClF;AACA,SAAS,iBAAiB,CAAC,GAAG,EAAE;AAChC,CAAC,IAAI,GAAG,CAAC,WAAW,IAAI,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,OAAO,GAAG,CAAC,WAAW;AAChF,CAAC,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;AACxB,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;AAC7B,EAAE,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,OAAO,GAAG;AACtC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;AAChC,EAAE,IAAI,MAAM,KAAK,GAAG,EAAE;AACtB,EAAE,GAAG,GAAG,MAAM;AACd,CAAC;AACD,CAAC,OAAO,IAAI;AACZ;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,aAAa,CAAC,aAAa,EAAE;AACtC,CAAC,OAAO,aAAa,GAAG,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,GAAG,uBAAuB;AACzF;AACA;AACA,SAAS,eAAe,CAAC,aAAa,EAAE;AACxC,CAAC,OAAO,IAAI,CAAC,aAAa,EAAE,yBAAyB,CAAC;AACtD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,sBAAsB,CAAC,IAAI,EAAE;AAC5C,CAAC,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC;AACtD,CAAC,IAAI,KAAK;AACV,CAAC,IAAI;AACL,EAAE,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,mBAAmB;AAC5B,CAAC;AACD,CAAC,IAAI,IAAI,GAAG,EAAE;AACd,CAAC,IAAI;AACL,EAAE,IAAI,GAAG,YAAY,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;AAChE,CAAC,CAAC,CAAC,MAAM,CAAC;AACV,CAAC,MAAM,SAAS,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;AACnD,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,eAAe;AACvC,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC;AAC9C,CAAC,MAAM,IAAI,GAAG;AACd,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,IAAI;AAChD,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE;AACvB,EAAE,OAAO,EAAE,KAAK,CAAC;AACjB,EAAE;AACF,CAAC,IAAI,KAAK;AACV,CAAC,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU,EAAE,KAAK,GAAG;AAC9C,EAAE,IAAI,EAAE,sBAAsB;AAC9B,EAAE,GAAG,IAAI;AACT,EAAE,MAAM,EAAE,OAAO,CAAC;AAClB,EAAE;AACF,MAAM,IAAI,QAAQ,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,GAAG;AAClE,EAAE,IAAI,EAAE,2BAA2B;AACnC,EAAE,GAAG,IAAI;AACT,EAAE,MAAM,EAAE,OAAO,CAAC;AAClB,EAAE;AACF,MAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,KAAK,GAAG;AACjF,EAAE,IAAI,EAAE,wBAAwB;AAChC,EAAE,GAAG;AACL,EAAE;AACF,MAAM,KAAK,GAAG;AACd,EAAE,IAAI,EAAE,wBAAwB;AAChC,EAAE,GAAG,IAAI;AACT,EAAE,MAAM,EAAE,OAAO,CAAC;AAClB,EAAE;AACF,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;AACvB,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB,EAAE,IAAI,CAAC,MAAM,iBAAiB,IAAI,KAAK,CAAC,CAAC,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACrH,CAAC,IAAI;AACL,EAAE,MAAM,CAAC,SAAS,CAAC;AACnB,CAAC,CAAC,CAAC,MAAM,CAAC;AACV,CAAC,OAAO,YAAY;AACpB;AACA,IAAI,OAAO,GAAG,IAAI;AAClB,IAAI,SAAS,GAAG,EAAE;AAClB,IAAI,gBAAgB,GAAG,KAAK;AAC5B;AACA;AACA;AACA;AACA;AACA,SAAS,4BAA4B,CAAC,IAAI,EAAE;AAC5C,CAAC,IAAI,gBAAgB,EAAE;AACvB,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE;AACvD,CAAC,gBAAgB,GAAG,IAAI;AACxB,CAAC,IAAI,KAAK,GAAG,CAAC;AACd,CAAC,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM;AACjC,EAAE,CAAC,YAAY;AACf,GAAG,KAAK,IAAI,CAAC;AACb,GAAG,IAAI,MAAM;AACb,GAAG,IAAI;AACP,IAAI,MAAM,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC;AAC/C,GAAG,CAAC,CAAC,OAAO,GAAG,EAAE;AACjB,IAAI,SAAS,EAAE,CAAC,KAAK,CAAC,+BAA+B,EAAE;AACvD,KAAK,SAAS,EAAE,YAAY;AAC5B,KAAK,GAAG,EAAE,YAAY,CAAC,GAAG;AAC1B,KAAK,CAAC;AACN,IAAI,MAAM,GAAG,eAAe;AAC5B,GAAG;AACH,GAAG,IAAI,MAAM,KAAK,eAAe,IAAI,KAAK,GAAG,SAAS,EAAE;AACxD,GAAG,IAAI,MAAM,KAAK,eAAe,EAAE,IAAI;AACvC,IAAI,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC;AACzD,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AAC7D,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC;AACpB,KAAK,IAAI,EAAE,sBAAsB;AACjC,KAAK,WAAW,EAAE,KAAK,CAAC,WAAW;AACnC,KAAK,OAAO,EAAE,KAAK,CAAC,OAAO;AAC3B,KAAK,MAAM,EAAE;AACb,KAAK,CAAC;AACN,IAAI,IAAI,CAAC,MAAM,iBAAiB,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;AAChG,IAAI,MAAM,CAAC,SAAS,CAAC;AACrB,GAAG,CAAC,CAAC,MAAM,CAAC;AACZ,GAAG,aAAa,CAAC,KAAK,CAAC;AACvB,GAAG,gBAAgB,GAAG,KAAK;AAC3B,EAAE,CAAC,GAAG;AACN,CAAC,CAAC,EAAE,OAAO,CAAC;AACZ,CAAC,KAAK,CAAC,KAAK,IAAI;AAChB;;;;"}

package/build/server/chunks/chunks/serverConfigWrite.js-BfjHOb52.js

@@ -0,0 +1,89 @@
+import { a as apiError, A as ApiErrorCode } from './api-errors.js-79b_3bHg.js';
+import { e as evictComputeClient } from './engine.server.js-fezh3ucS.js';
+
+//#region src/lib/server/compute/evictChangedServers.ts
+/**
+* Compute-client cache invalidation on config write (ADR 0004 Consequences).
+*
+* The client cache keys on server `id`, so a rotated `serverUrl`/`apiKey` keeps
+* the SAME key with stale connection details — it no longer ages out on its own
+* the way the old URL-keyed cache did. The config-write path must therefore
+* evict explicitly: this helper diffs the previous scoped server set against the
+* next one and drops the warm client for every server whose connection details
+* changed or that was removed. Unchanged servers keep their warm client.
+*/
+/**
+* Evict warm clients for servers whose connection details changed or that were
+* removed. `prev` and `next` are the scoped server sets before/after the write.
+*/
+function evictChangedServers(prev, next) {
+	const nextById = new Map(next.map((s) => [s.id, s]));
+	for (const before of prev) if (!nextById.has(before.id)) evictComputeClient(before.id);
+	const prevById = new Map(prev.map((s) => [s.id, s]));
+	for (const after of next) {
+		const before = prevById.get(after.id);
+		if (before && (before.serverUrl !== after.serverUrl || before.apiKey !== after.apiKey)) evictComputeClient(after.id);
+	}
+}
+//#endregion
+//#region src/lib/server/compute/serverConfigWrite.ts
+/**
+* Shared write-path rules for compute server config.
+*
+* Two routes accept a server set: `/api/admin/compute` (platform scope,
+* `manage_compute`) and `/api/v1/orgs/{orgId}/compute` (org scope,
+* `manage_org_compute`). They differ in who may call them, what extra fields
+* they carry (`sharedWith` vs `ownerOrgId`), and how they validate the default
+* selection — but the field validation and the apiKey merge below must behave
+* identically in both, so they live here rather than in either handler.
+*
+* The apiKey merge is the reason this file exists: a divergence between the two
+* copies silently clears or leaks a stored credential, and nothing fails at
+* build time.
+*/
+/**
+* Validate the scope-independent fields of every submitted server. Throws the
+* first failure as a 400; scope-specific fields (`sharedWith`, `ownerOrgId`)
+* are the caller's business.
+*/
+function validateIncomingServers(servers) {
+	for (const s of servers) {
+		if (!s.id || typeof s.id !== "string") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Each server needs an id");
+		if (!s.label || typeof s.label !== "string") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Each server needs a label");
+		if (!s.serverUrl || typeof s.serverUrl !== "string") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Each server needs a serverUrl");
+		try {
+			new URL(s.serverUrl);
+		} catch {
+			apiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid serverUrl: ${s.serverUrl}`);
+		}
+		if (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== "string") apiError(400, ApiErrorCode.VALIDATION_FAILED, "apiKey must be a string, null, or omitted");
+	}
+}
+/**
+* Resolve the key to persist for one server.
+*
+* The UI never receives stored keys — it sends back `hasApiKey` and omits the
+* field for servers the operator didn't touch. So "omitted" cannot mean "clear":
+* it has to preserve, or every save through the settings form would wipe the
+* keys of every server the operator left alone. Clearing is therefore explicit
+* (`null`), and an empty string is treated as "not provided" because that is
+* what an untouched password input submits.
+*
+* @param submitted the `apiKey` field as it arrived
+* @param storedKey the key currently persisted for this server id, if any
+*/
+function resolveApiKey(submitted, storedKey) {
+	if (submitted === null) return void 0;
+	return submitted ? submitted : storedKey;
+}
+/**
+* Build the id → stored-key lookup the merge reads. The caller passes only the
+* servers in its own scope, so one scope's write can never resolve a key from
+* another's rows.
+*/
+function storedKeysById(scopedServers) {
+	return new Map(scopedServers.map((s) => [s.id, s.apiKey]));
+}
+
+export { evictChangedServers as e, resolveApiKey as r, storedKeysById as s, validateIncomingServers as v };
+//# sourceMappingURL=serverConfigWrite.js-BfjHOb52.js.map

package/build/server/chunks/chunks/serverConfigWrite.js-BfjHOb52.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serverConfigWrite.js-BfjHOb52.js","sources":["../../../../.svelte-kit/output/server/chunks/serverConfigWrite.js"],"sourcesContent":["import { n as apiError, t as ApiErrorCode } from \"./api-errors.js\";\nimport { i as evictComputeClient } from \"./engine.server.js\";\n//#region src/lib/server/compute/evictChangedServers.ts\n/**\n* Compute-client cache invalidation on config write (ADR 0004 Consequences).\n*\n* The client cache keys on server `id`, so a rotated `serverUrl`/`apiKey` keeps\n* the SAME key with stale connection details — it no longer ages out on its own\n* the way the old URL-keyed cache did. The config-write path must therefore\n* evict explicitly: this helper diffs the previous scoped server set against the\n* next one and drops the warm client for every server whose connection details\n* changed or that was removed. Unchanged servers keep their warm client.\n*/\n/**\n* Evict warm clients for servers whose connection details changed or that were\n* removed. `prev` and `next` are the scoped server sets before/after the write.\n*/\nfunction evictChangedServers(prev, next) {\n\tconst nextById = new Map(next.map((s) => [s.id, s]));\n\tfor (const before of prev) if (!nextById.has(before.id)) evictComputeClient(before.id);\n\tconst prevById = new Map(prev.map((s) => [s.id, s]));\n\tfor (const after of next) {\n\t\tconst before = prevById.get(after.id);\n\t\tif (before && (before.serverUrl !== after.serverUrl || before.apiKey !== after.apiKey)) evictComputeClient(after.id);\n\t}\n}\n//#endregion\n//#region src/lib/server/compute/serverConfigWrite.ts\n/**\n* Shared write-path rules for compute server config.\n*\n* Two routes accept a server set: `/api/admin/compute` (platform scope,\n* `manage_compute`) and `/api/v1/orgs/{orgId}/compute` (org scope,\n* `manage_org_compute`). They differ in who may call them, what extra fields\n* they carry (`sharedWith` vs `ownerOrgId`), and how they validate the default\n* selection — but the field validation and the apiKey merge below must behave\n* identically in both, so they live here rather than in either handler.\n*\n* The apiKey merge is the reason this file exists: a divergence between the two\n* copies silently clears or leaks a stored credential, and nothing fails at\n* build time.\n*/\n/**\n* Validate the scope-independent fields of every submitted server. Throws the\n* first failure as a 400; scope-specific fields (`sharedWith`, `ownerOrgId`)\n* are the caller's business.\n*/\nfunction validateIncomingServers(servers) {\n\tfor (const s of servers) {\n\t\tif (!s.id || typeof s.id !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs an id\");\n\t\tif (!s.label || typeof s.label !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs a label\");\n\t\tif (!s.serverUrl || typeof s.serverUrl !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs a serverUrl\");\n\t\ttry {\n\t\t\tnew URL(s.serverUrl);\n\t\t} catch {\n\t\t\tapiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid serverUrl: ${s.serverUrl}`);\n\t\t}\n\t\tif (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"apiKey must be a string, null, or omitted\");\n\t}\n}\n/**\n* Resolve the key to persist for one server.\n*\n* The UI never receives stored keys — it sends back `hasApiKey` and omits the\n* field for servers the operator didn't touch. So \"omitted\" cannot mean \"clear\":\n* it has to preserve, or every save through the settings form would wipe the\n* keys of every server the operator left alone. Clearing is therefore explicit\n* (`null`), and an empty string is treated as \"not provided\" because that is\n* what an untouched password input submits.\n*\n* @param submitted the `apiKey` field as it arrived\n* @param storedKey the key currently persisted for this server id, if any\n*/\nfunction resolveApiKey(submitted, storedKey) {\n\tif (submitted === null) return void 0;\n\treturn submitted ? submitted : storedKey;\n}\n/**\n* Build the id → stored-key lookup the merge reads. The caller passes only the\n* servers in its own scope, so one scope's write can never resolve a key from\n* another's rows.\n*/\nfunction storedKeysById(scopedServers) {\n\treturn new Map(scopedServers.map((s) => [s.id, s.apiKey]));\n}\n//#endregion\nexport { evictChangedServers as i, storedKeysById as n, validateIncomingServers as r, resolveApiKey as t };\n"],"names":[],"mappings":";;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE;AACzC,CAAC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;AACvF,CAAC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE;AAC3B,EAAE,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;AACvC,EAAE,IAAI,MAAM,KAAK,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;AACtH,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,uBAAuB,CAAC,OAAO,EAAE;AAC1C,CAAC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE;AAC1B,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACjH,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;AACzH,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,+BAA+B,CAAC;AACrI,EAAE,IAAI;AACN,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACvB,EAAE,CAAC,CAAC,MAAM;AACV,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACrF,EAAE;AACF,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2CAA2C,CAAC;AAC1K,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE;AAC7C,CAAC,IAAI,SAAS,KAAK,IAAI,EAAE,OAAO,MAAM;AACtC,CAAC,OAAO,SAAS,GAAG,SAAS,GAAG,SAAS;AACzC;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,cAAc,CAAC,aAAa,EAAE;AACvC,CAAC,OAAO,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3D;;;;"}

package/build/server/chunks/chunks/solve.server.js-CLEf-tM-.js

@@ -0,0 +1,308 @@
+import { x as getStorageProvider, p as providers, r as renderThrown, B as fetchSchemaFromCompute, C as getSolveMetricSink, v as lazyLogger } from './providers.server.js-DCnhO862.js';
+import { m as requireCanEditDefinition, f as requireCanSolve } from './access.server.js-DwqSeOi9.js';
+import { a as apiError, A as ApiErrorCode, r as resolveServerForOrg, C as ComputeServerUnconfiguredError } from './api-errors.js-79b_3bHg.js';
+import { a as engine, C as COMPUTE_DEBUG } from './engine.server.js-fezh3ucS.js';
+import { f as createComputeRateLimiter } from './admin-auth.server.js-B37mb9m_.js';
+import { c as createRemoteDefinitionFetcher } from './compute.js-D63w0eI_.js';
+import { h as RATE_LIMIT_MAX_REQUESTS, i as RATE_LIMIT_WINDOW_MS, R as REMOTE_DEFINITION_CACHE_TTL_MS, b as REMOTE_DEFINITION_FETCH_TIMEOUT_MS, d as REMOTE_DEFINITION_MAX_BYTES } from './computeLimits.js-Dm74PUOP.js';
+import { isHttpError } from '@sveltejs/kit';
+
+//#region src/lib/server/compute/remoteDefinition.server.ts
+/**
+* App-side binding for the remote-definition fetcher. The fetch itself — SSRF
+* guard, size cap, deadline, TTL cache — lives in `@selvajs/server`
+* (`createRemoteDefinitionFetcher`); this module owns the single app-wide
+* instance, wired with the env-derived limits and the real clock.
+*/
+var fetcher = createRemoteDefinitionFetcher({
+	maxBytes: REMOTE_DEFINITION_MAX_BYTES,
+	fetchTimeoutMs: REMOTE_DEFINITION_FETCH_TIMEOUT_MS,
+	cacheTtlMs: REMOTE_DEFINITION_CACHE_TTL_MS,
+	now: () => Date.now(),
+	logger: lazyLogger
+});
+/** Fetch (or return cached) remote `.gh` bytes. Throws on unsafe host / oversized / timeout. */
+function loadRemoteDefinition(url) {
+	return fetcher.load(url);
+}
+//#endregion
+//#region src/lib/server/computeRateLimit.server.ts
+/**
+* App-side binding for the compute-solve rate limiter. The limiter itself
+* (fixed-window, per-key, process-local) lives in `@selvajs/server`
+* (`createComputeRateLimiter`); this module owns the single app-wide instance,
+* wired with the window + cap from `computeLimits.ts` (which read the env).
+*
+* Keyed by caller — `user:{userId}` for authenticated solves, `share:{linkId}`
+* for share-token solves so anonymous consumers of one link don't share a
+* bucket with the link's owner.
+*/
+var limiter = createComputeRateLimiter({
+	windowMs: RATE_LIMIT_WINDOW_MS,
+	maxPerWindow: RATE_LIMIT_MAX_REQUESTS
+});
+/**
+* Check + record one request against `key`. Returns
+* `{ allowed: false, retryAfter }` once the bucket is full.
+*/
+function checkComputeRateLimit(key) {
+	return limiter.check(key);
+}
+//#endregion
+//#region src/lib/server/compute/solve.server.ts
+/**
+* The body-independent core of a solve request, shared by `POST /api/v1/compute`
+* (share-token and remote-URL capable) and `POST /api/v1/definitions/{guid}/solve`
+* (tenant-scoped, cookie or PAT).
+*
+* **Share-token resolution stays outside this module, in the route.** The caller
+* hands in an already-decided `SolveAccess`; the definition-addressed route only
+* ever constructs the `user` variant, so it cannot inherit the anonymous branch
+* by accident. Adding a token lookup here would silently give it one.
+*
+* What lives here: rate limiting, definition/version resolution, access checks,
+* compute-server routing, schema backfill, the engine call, metric recording and
+* the debug breakdown. What stays in a route: parsing its own body shape and
+* deciding who the caller is.
+*/
+/**
+* Run a solve and return the HTTP response.
+*
+* Throws `HttpError` (via `apiError`) for every refusal, and lets engine/network
+* failures propagate for the caller's outer catch to map — the two routes share
+* that mapping through `mapSolveError`.
+*/
+async function runSolve(params) {
+	const { access, definitionUrl, inputs, values, channel, versionId: explicitVersionId, request, locals, loadStart, prepMarks, concealAccessFailure = false } = params;
+	const storage = getStorageProvider();
+	const sharedAccess = access.kind === "share" ? access : null;
+	const solveCtx = access.ctx;
+	let prevMark = performance.now();
+	const mark = (label) => {
+		prepMarks.push([label, performance.now() - prevMark]);
+		prevMark = performance.now();
+	};
+	let definitionSource;
+	let localDefinitionRef = null;
+	let localVersionForBackfill = null;
+	let solveOrgId = null;
+	let definitionPin = null;
+	let metricDefinitionId = null;
+	let metricVersionId = null;
+	const isLocal = definitionUrl.startsWith("local:");
+	const guid = isLocal ? definitionUrl.substring(6) : null;
+	const recordMetric = (failureKind, extra = {}) => {
+		getSolveMetricSink().record(solveCtx, {
+			definitionUrl,
+			definitionId: metricDefinitionId,
+			versionId: metricVersionId,
+			channel,
+			orgId: solveOrgId,
+			durationMs: extra.durationMs ?? 0,
+			ok: failureKind === "ok",
+			failureKind,
+			errorCount: extra.errorCount ?? 0,
+			warningCount: extra.warningCount ?? 0
+		}).catch((err) => locals.log.error("Solve-metric record failed", {
+			component: "API/Compute",
+			err: renderThrown(err)
+		}));
+	};
+	const rateLimit = checkComputeRateLimit(access.rateLimitKey);
+	if (!rateLimit.allowed) {
+		recordMetric("rate_limited");
+		const retryAfter = rateLimit.retryAfter ?? 1;
+		return new Response(JSON.stringify({
+			message: `Too many compute requests. Retry in ${retryAfter}s.`,
+			retryAfter
+		}), {
+			status: 429,
+			headers: {
+				"Content-Type": "application/json",
+				"Retry-After": String(retryAfter)
+			}
+		});
+	}
+	if (isLocal && guid) {
+		let record;
+		try {
+			record = await providers.data.definitions.get(solveCtx, guid);
+		} catch (err) {
+			locals.log.error("Failed to load local definition", {
+				component: "API/Compute",
+				guid,
+				err: renderThrown(err)
+			});
+			apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' not found`);
+		}
+		if (!record) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' not found`);
+		mark("defRecord");
+		const project = await providers.data.projects.getProject(solveCtx, record.projectId);
+		solveOrgId = project?.orgId ?? null;
+		definitionPin = record.computeServerId ?? null;
+		mark("project");
+		if (!sharedAccess) try {
+			if (channel === "draft" || explicitVersionId) await requireCanEditDefinition(locals, record.projectId, guid, {
+				project,
+				definition: record
+			});
+			else await requireCanSolve(locals, record.projectId, project ?? void 0);
+		} catch (err) {
+			if (concealAccessFailure && isHttpError(err) && err.status === 403) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' not found`);
+			throw err;
+		}
+		mark("access");
+		const versionId = explicitVersionId ?? (channel === "live" ? record.liveVersionId : record.draftVersionId);
+		if (!versionId) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' has no ${channel} version yet`);
+		const version = await providers.data.definitions.getVersion(solveCtx, versionId);
+		if (!version || version.definitionId !== guid) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' version is missing`);
+		localVersionForBackfill = {
+			id: version.id,
+			hasSchema: version.schema !== void 0
+		};
+		metricDefinitionId = guid;
+		metricVersionId = version.id;
+		mark("version");
+		localDefinitionRef = engine.definitionRef(version.id, async () => {
+			const bytes = await storage.get(version.fileKey);
+			if (!bytes) throw new Error(`Version blob missing: ${version.fileKey}`);
+			return bytes;
+		});
+		definitionSource = localDefinitionRef;
+		mark("blob");
+	} else {
+		try {
+			definitionSource = await loadRemoteDefinition(definitionUrl);
+		} catch (err) {
+			locals.log.error("Failed to fetch remote definition", {
+				component: "API/Compute",
+				definitionUrl,
+				err: renderThrown(err)
+			});
+			apiError(400, ApiErrorCode.VALIDATION_FAILED, `Failed to load definition: ${err instanceof Error ? err.message : String(err)}`);
+		}
+		mark("remoteDef");
+	}
+	const defLoadMs = performance.now() - loadStart;
+	if (sharedAccess) {
+		if (await providers.data.shareLinks.tryIncrementSolveCount(solveCtx, sharedAccess.link.id) === null) {
+			recordMetric("share_cap");
+			apiError(429, ApiErrorCode.INTERNAL, "Share link solve cap reached.");
+		}
+		mark("shareCap");
+	}
+	const serverConfig = await resolveServerForOrg(solveCtx, solveOrgId, { definitionPin });
+	mark("resolveServer");
+	if (localVersionForBackfill && !localVersionForBackfill.hasSchema && localDefinitionRef) {
+		const versionId = localVersionForBackfill.id;
+		try {
+			const bytes = await localDefinitionRef.load();
+			const schema = await fetchSchemaFromCompute(bytes, serverConfig);
+			await providers.data.definitions.setVersionSchema(solveCtx, versionId, schema);
+		} catch (err) {
+			locals.log.warn("Schema backfill failed", {
+				component: "API/Compute",
+				versionId,
+				err: renderThrown(err)
+			});
+		}
+		mark("schemaBackfill");
+	}
+	const outcome = await engine.solve({
+		server: serverConfig,
+		definitionSource,
+		definitionKey: isLocal ? void 0 : definitionUrl,
+		inputs,
+		values,
+		signal: request.signal,
+		acceptEncoding: request.headers.get("accept-encoding") ?? "",
+		definitionGuid: guid ?? void 0,
+		loadStartMs: loadStart,
+		defLoadMs,
+		prepMarks
+	});
+	mark("solve");
+	if (outcome.kind === "timeout") recordMetric("timeout", { durationMs: outcome.durationMs });
+	else if (outcome.kind === "client_abort") recordMetric("client_abort", { durationMs: outcome.durationMs });
+	else if (outcome.kind === "too_large") recordMetric("too_large");
+	else if (outcome.kind === "shed") recordMetric("shed", { durationMs: outcome.durationMs });
+	else if (outcome.kind === "ok") {
+		recordMetric("ok", {
+			durationMs: outcome.solveMs,
+			errorCount: outcome.errorCount,
+			warningCount: outcome.warningCount
+		});
+		if (metricDefinitionId) providers.data.definitions.incrementSolveCount(solveCtx, metricDefinitionId).catch((err) => locals.log.warn("solveCount increment failed", {
+			component: "API/Compute",
+			definitionId: metricDefinitionId,
+			err: renderThrown(err)
+		}));
+		if (COMPUTE_DEBUG) logDebugBreakdown(locals, request, outcome, defLoadMs, prepMarks);
+	}
+	return engine.toWebResponse(outcome);
+}
+/**
+* Map a thrown solve failure to an HTTP error. Both solve routes share it so
+* they cannot drift on which failures read as "compute is down" (503) versus a
+* server bug (500).
+*/
+function mapSolveError(err, locals) {
+	if (isHttpError(err)) throw err;
+	if (err instanceof ComputeServerUnconfiguredError) apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, err.message);
+	const message = err instanceof Error ? err.message : "Unknown error";
+	locals.log.error("Solve request failed", {
+		component: "API/Compute",
+		err: renderThrown(err)
+	});
+	if (err instanceof TypeError && message === "fetch failed") apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, "Compute server is unreachable");
+	apiError(500, ApiErrorCode.INTERNAL, message);
+}
+/**
+* DEBUG (SELVA_FLAG_COMPUTE_DEBUG): the server-side overhead the solve metric's
+* `durationMs` doesn't capture. `load` = auth + DB + definition fetch; `tree` =
+* input tree build; `serialize` = JSON.stringify of the result. The solve itself
+* is timed separately (see the solve metric's durationMs and [Compute/selva-cache]).
+*/
+function logDebugBreakdown(locals, request, outcome, defLoadMs, prepMarks) {
+	const { metrics } = outcome.envelope;
+	locals.log.debug("Solve server-side phase breakdown", {
+		component: "Compute/server",
+		loadMs: Math.round(defLoadMs),
+		treeBuildMs: Math.round(metrics.treeBuildMs),
+		solveMs: Math.round(metrics.solveMs),
+		serializeMs: Math.round(metrics.serializeMs),
+		gzipMs: Math.round(metrics.gzipMs),
+		serverTotalMs: Math.round(metrics.serverTotalMs),
+		serializedBytes: metrics.serializedBytes
+	});
+	if (metrics.compressedBytes !== null) locals.log.debug("Response gzipped", {
+		component: "Compute/server",
+		serializedBytes: metrics.serializedBytes,
+		compressedBytes: metrics.compressedBytes,
+		ratio: Number((metrics.serializedBytes / metrics.compressedBytes).toFixed(1))
+	});
+	else {
+		const acceptEncoding = request.headers.get("accept-encoding") ?? "";
+		locals.log.debug("Compression skipped", {
+			component: "Compute/server",
+			acceptEncoding,
+			hasAcceptEncoding: acceptEncoding !== ""
+		});
+	}
+	locals.log.debug("Prep breakdown", {
+		component: "Compute/server",
+		...Object.fromEntries(prepMarks.map(([label, ms]) => [`p_${label}Ms`, Math.round(ms)]))
+	});
+	const db = engine.stats().definitionBytes;
+	locals.log.debug("Definition byte-cache counters", {
+		component: "Compute/def-bytes",
+		hits: db.hits,
+		misses: db.misses,
+		evictions: db.evictions,
+		entries: db.entries,
+		retainedBytes: db.bytes
+	});
+}
+
+export { mapSolveError as m, runSolve as r };
+//# sourceMappingURL=solve.server.js-CLEf-tM-.js.map