@selvajs/selva 4.8.0-beta.7 → 4.8.0-beta.8

package/build/server/chunks/chunks/solve.server.js-BhEAPb2c.js

@@ -1,308 +0,0 @@
-import { x as getStorageProvider, p as providers, r as renderThrown, B as fetchSchemaFromCompute, C as getSolveMetricSink, v as lazyLogger } from './providers.server.js-BoM2upme.js';
-import { m as requireCanEditDefinition, f as requireCanSolve } from './access.server.js-BPX5ADvu.js';
-import { a as apiError, A as ApiErrorCode, r as resolveServerForOrg, C as ComputeServerUnconfiguredError } from './api-errors.js-7Mw49fQc.js';
-import { a as engine, C as COMPUTE_DEBUG } from './engine.server.js-B4quvtET.js';
-import { f as createComputeRateLimiter } from './admin-auth.server.js-B37mb9m_.js';
-import { c as createRemoteDefinitionFetcher } from './compute.js-DVGVezz4.js';
-import { h as RATE_LIMIT_MAX_REQUESTS, i as RATE_LIMIT_WINDOW_MS, R as REMOTE_DEFINITION_CACHE_TTL_MS, b as REMOTE_DEFINITION_FETCH_TIMEOUT_MS, d as REMOTE_DEFINITION_MAX_BYTES } from './computeLimits.js-dLEgYTxd.js';
-import { isHttpError } from '@sveltejs/kit';
-
-//#region src/lib/server/compute/remoteDefinition.server.ts
-/**
-* App-side binding for the remote-definition fetcher. The fetch itself — SSRF
-* guard, size cap, deadline, TTL cache — lives in `@selvajs/server`
-* (`createRemoteDefinitionFetcher`); this module owns the single app-wide
-* instance, wired with the env-derived limits and the real clock.
-*/
-var fetcher = createRemoteDefinitionFetcher({
-	maxBytes: REMOTE_DEFINITION_MAX_BYTES,
-	fetchTimeoutMs: REMOTE_DEFINITION_FETCH_TIMEOUT_MS,
-	cacheTtlMs: REMOTE_DEFINITION_CACHE_TTL_MS,
-	now: () => Date.now(),
-	logger: lazyLogger
-});
-/** Fetch (or return cached) remote `.gh` bytes. Throws on unsafe host / oversized / timeout. */
-function loadRemoteDefinition(url) {
-	return fetcher.load(url);
-}
-//#endregion
-//#region src/lib/server/computeRateLimit.server.ts
-/**
-* App-side binding for the compute-solve rate limiter. The limiter itself
-* (fixed-window, per-key, process-local) lives in `@selvajs/server`
-* (`createComputeRateLimiter`); this module owns the single app-wide instance,
-* wired with the window + cap from `computeLimits.ts` (which read the env).
-*
-* Keyed by caller — `user:{userId}` for authenticated solves, `share:{linkId}`
-* for share-token solves so anonymous consumers of one link don't share a
-* bucket with the link's owner.
-*/
-var limiter = createComputeRateLimiter({
-	windowMs: RATE_LIMIT_WINDOW_MS,
-	maxPerWindow: RATE_LIMIT_MAX_REQUESTS
-});
-/**
-* Check + record one request against `key`. Returns
-* `{ allowed: false, retryAfter }` once the bucket is full.
-*/
-function checkComputeRateLimit(key) {
-	return limiter.check(key);
-}
-//#endregion
-//#region src/lib/server/compute/solve.server.ts
-/**
-* The body-independent core of a solve request, shared by `POST /api/v1/compute`
-* (share-token and remote-URL capable) and `POST /api/v1/definitions/{guid}/solve`
-* (tenant-scoped, cookie or PAT).
-*
-* **Share-token resolution stays outside this module, in the route.** The caller
-* hands in an already-decided `SolveAccess`; the definition-addressed route only
-* ever constructs the `user` variant, so it cannot inherit the anonymous branch
-* by accident. Adding a token lookup here would silently give it one.
-*
-* What lives here: rate limiting, definition/version resolution, access checks,
-* compute-server routing, schema backfill, the engine call, metric recording and
-* the debug breakdown. What stays in a route: parsing its own body shape and
-* deciding who the caller is.
-*/
-/**
-* Run a solve and return the HTTP response.
-*
-* Throws `HttpError` (via `apiError`) for every refusal, and lets engine/network
-* failures propagate for the caller's outer catch to map — the two routes share
-* that mapping through `mapSolveError`.
-*/
-async function runSolve(params) {
-	const { access, definitionUrl, inputs, values, channel, versionId: explicitVersionId, request, locals, loadStart, prepMarks, concealAccessFailure = false } = params;
-	const storage = getStorageProvider();
-	const sharedAccess = access.kind === "share" ? access : null;
-	const solveCtx = access.ctx;
-	let prevMark = performance.now();
-	const mark = (label) => {
-		prepMarks.push([label, performance.now() - prevMark]);
-		prevMark = performance.now();
-	};
-	let definitionSource;
-	let localDefinitionRef = null;
-	let localVersionForBackfill = null;
-	let solveOrgId = null;
-	let definitionPin = null;
-	let metricDefinitionId = null;
-	let metricVersionId = null;
-	const isLocal = definitionUrl.startsWith("local:");
-	const guid = isLocal ? definitionUrl.substring(6) : null;
-	const recordMetric = (failureKind, extra = {}) => {
-		getSolveMetricSink().record(solveCtx, {
-			definitionUrl,
-			definitionId: metricDefinitionId,
-			versionId: metricVersionId,
-			channel,
-			orgId: solveOrgId,
-			durationMs: extra.durationMs ?? 0,
-			ok: failureKind === "ok",
-			failureKind,
-			errorCount: extra.errorCount ?? 0,
-			warningCount: extra.warningCount ?? 0
-		}).catch((err) => locals.log.error("Solve-metric record failed", {
-			component: "API/Compute",
-			err: renderThrown(err)
-		}));
-	};
-	const rateLimit = checkComputeRateLimit(access.rateLimitKey);
-	if (!rateLimit.allowed) {
-		recordMetric("rate_limited");
-		const retryAfter = rateLimit.retryAfter ?? 1;
-		return new Response(JSON.stringify({
-			message: `Too many compute requests. Retry in ${retryAfter}s.`,
-			retryAfter
-		}), {
-			status: 429,
-			headers: {
-				"Content-Type": "application/json",
-				"Retry-After": String(retryAfter)
-			}
-		});
-	}
-	if (isLocal && guid) {
-		let record;
-		try {
-			record = await providers.data.definitions.get(solveCtx, guid);
-		} catch (err) {
-			locals.log.error("Failed to load local definition", {
-				component: "API/Compute",
-				guid,
-				err: renderThrown(err)
-			});
-			apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' not found`);
-		}
-		if (!record) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' not found`);
-		mark("defRecord");
-		const project = await providers.data.projects.getProject(solveCtx, record.projectId);
-		solveOrgId = project?.orgId ?? null;
-		definitionPin = record.computeServerId ?? null;
-		mark("project");
-		if (!sharedAccess) try {
-			if (channel === "draft" || explicitVersionId) await requireCanEditDefinition(locals, record.projectId, guid, {
-				project,
-				definition: record
-			});
-			else await requireCanSolve(locals, record.projectId, project ?? void 0);
-		} catch (err) {
-			if (concealAccessFailure && isHttpError(err) && err.status === 403) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' not found`);
-			throw err;
-		}
-		mark("access");
-		const versionId = explicitVersionId ?? (channel === "live" ? record.liveVersionId : record.draftVersionId);
-		if (!versionId) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' has no ${channel} version yet`);
-		const version = await providers.data.definitions.getVersion(solveCtx, versionId);
-		if (!version || version.definitionId !== guid) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' version is missing`);
-		localVersionForBackfill = {
-			id: version.id,
-			hasSchema: version.schema !== void 0
-		};
-		metricDefinitionId = guid;
-		metricVersionId = version.id;
-		mark("version");
-		localDefinitionRef = engine.definitionRef(version.id, async () => {
-			const bytes = await storage.get(version.fileKey);
-			if (!bytes) throw new Error(`Version blob missing: ${version.fileKey}`);
-			return bytes;
-		});
-		definitionSource = localDefinitionRef;
-		mark("blob");
-	} else {
-		try {
-			definitionSource = await loadRemoteDefinition(definitionUrl);
-		} catch (err) {
-			locals.log.error("Failed to fetch remote definition", {
-				component: "API/Compute",
-				definitionUrl,
-				err: renderThrown(err)
-			});
-			apiError(400, ApiErrorCode.VALIDATION_FAILED, `Failed to load definition: ${err instanceof Error ? err.message : String(err)}`);
-		}
-		mark("remoteDef");
-	}
-	const defLoadMs = performance.now() - loadStart;
-	if (sharedAccess) {
-		if (await providers.data.shareLinks.tryIncrementSolveCount(solveCtx, sharedAccess.link.id) === null) {
-			recordMetric("share_cap");
-			apiError(429, ApiErrorCode.INTERNAL, "Share link solve cap reached.");
-		}
-		mark("shareCap");
-	}
-	const serverConfig = await resolveServerForOrg(solveCtx, solveOrgId, { definitionPin });
-	mark("resolveServer");
-	if (localVersionForBackfill && !localVersionForBackfill.hasSchema && localDefinitionRef) {
-		const versionId = localVersionForBackfill.id;
-		try {
-			const bytes = await localDefinitionRef.load();
-			const schema = await fetchSchemaFromCompute(bytes, serverConfig);
-			await providers.data.definitions.setVersionSchema(solveCtx, versionId, schema);
-		} catch (err) {
-			locals.log.warn("Schema backfill failed", {
-				component: "API/Compute",
-				versionId,
-				err: renderThrown(err)
-			});
-		}
-		mark("schemaBackfill");
-	}
-	const outcome = await engine.solve({
-		server: serverConfig,
-		definitionSource,
-		definitionKey: isLocal ? void 0 : definitionUrl,
-		inputs,
-		values,
-		signal: request.signal,
-		acceptEncoding: request.headers.get("accept-encoding") ?? "",
-		definitionGuid: guid ?? void 0,
-		loadStartMs: loadStart,
-		defLoadMs,
-		prepMarks
-	});
-	mark("solve");
-	if (outcome.kind === "timeout") recordMetric("timeout", { durationMs: outcome.durationMs });
-	else if (outcome.kind === "client_abort") recordMetric("client_abort", { durationMs: outcome.durationMs });
-	else if (outcome.kind === "too_large") recordMetric("too_large");
-	else if (outcome.kind === "shed") recordMetric("shed", { durationMs: outcome.durationMs });
-	else if (outcome.kind === "ok") {
-		recordMetric("ok", {
-			durationMs: outcome.solveMs,
-			errorCount: outcome.errorCount,
-			warningCount: outcome.warningCount
-		});
-		if (metricDefinitionId) providers.data.definitions.incrementSolveCount(solveCtx, metricDefinitionId).catch((err) => locals.log.warn("solveCount increment failed", {
-			component: "API/Compute",
-			definitionId: metricDefinitionId,
-			err: renderThrown(err)
-		}));
-		if (COMPUTE_DEBUG) logDebugBreakdown(locals, request, outcome, defLoadMs, prepMarks);
-	}
-	return engine.toWebResponse(outcome);
-}
-/**
-* Map a thrown solve failure to an HTTP error. Both solve routes share it so
-* they cannot drift on which failures read as "compute is down" (503) versus a
-* server bug (500).
-*/
-function mapSolveError(err, locals) {
-	if (isHttpError(err)) throw err;
-	if (err instanceof ComputeServerUnconfiguredError) apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, err.message);
-	const message = err instanceof Error ? err.message : "Unknown error";
-	locals.log.error("Solve request failed", {
-		component: "API/Compute",
-		err: renderThrown(err)
-	});
-	if (err instanceof TypeError && message === "fetch failed") apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, "Compute server is unreachable");
-	apiError(500, ApiErrorCode.INTERNAL, message);
-}
-/**
-* DEBUG (SELVA_FLAG_COMPUTE_DEBUG): the server-side overhead the solve metric's
-* `durationMs` doesn't capture. `load` = auth + DB + definition fetch; `tree` =
-* input tree build; `serialize` = JSON.stringify of the result. The solve itself
-* is timed separately (see the solve metric's durationMs and [Compute/selva-cache]).
-*/
-function logDebugBreakdown(locals, request, outcome, defLoadMs, prepMarks) {
-	const { metrics } = outcome.envelope;
-	locals.log.debug("Solve server-side phase breakdown", {
-		component: "Compute/server",
-		loadMs: Math.round(defLoadMs),
-		treeBuildMs: Math.round(metrics.treeBuildMs),
-		solveMs: Math.round(metrics.solveMs),
-		serializeMs: Math.round(metrics.serializeMs),
-		gzipMs: Math.round(metrics.gzipMs),
-		serverTotalMs: Math.round(metrics.serverTotalMs),
-		serializedBytes: metrics.serializedBytes
-	});
-	if (metrics.compressedBytes !== null) locals.log.debug("Response gzipped", {
-		component: "Compute/server",
-		serializedBytes: metrics.serializedBytes,
-		compressedBytes: metrics.compressedBytes,
-		ratio: Number((metrics.serializedBytes / metrics.compressedBytes).toFixed(1))
-	});
-	else {
-		const acceptEncoding = request.headers.get("accept-encoding") ?? "";
-		locals.log.debug("Compression skipped", {
-			component: "Compute/server",
-			acceptEncoding,
-			hasAcceptEncoding: acceptEncoding !== ""
-		});
-	}
-	locals.log.debug("Prep breakdown", {
-		component: "Compute/server",
-		...Object.fromEntries(prepMarks.map(([label, ms]) => [`p_${label}Ms`, Math.round(ms)]))
-	});
-	const db = engine.stats().definitionBytes;
-	locals.log.debug("Definition byte-cache counters", {
-		component: "Compute/def-bytes",
-		hits: db.hits,
-		misses: db.misses,
-		evictions: db.evictions,
-		entries: db.entries,
-		retainedBytes: db.bytes
-	});
-}
-
-export { mapSolveError as m, runSolve as r };
-//# sourceMappingURL=solve.server.js-BhEAPb2c.js.map

package/build/server/chunks/chunks/solve.server.js-BhEAPb2c.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"solve.server.js-BhEAPb2c.js","sources":["../../../../.svelte-kit/output/server/chunks/solve.server.js"],"sourcesContent":["import { C as providers, S as lazyLogger, T as renderThrown, j as fetchSchemaFromCompute, v as getSolveMetricSink, y as getStorageProvider } from \"./providers.server.js\";\nimport { l as requireCanEditDefinition, m as requireCanSolve } from \"./access.server.js\";\nimport { a as ComputeServerUnconfiguredError, n as apiError, o as resolveServerForOrg, t as ApiErrorCode } from \"./api-errors.js\";\nimport { r as engine, t as COMPUTE_DEBUG } from \"./engine.server.js\";\nimport { u as createComputeRateLimiter } from \"./admin-auth.server.js\";\nimport { t as createRemoteDefinitionFetcher } from \"./compute.js\";\nimport { c as RATE_LIMIT_WINDOW_MS, d as REMOTE_DEFINITION_MAX_BYTES, l as REMOTE_DEFINITION_CACHE_TTL_MS, s as RATE_LIMIT_MAX_REQUESTS, u as REMOTE_DEFINITION_FETCH_TIMEOUT_MS } from \"./computeLimits.js\";\nimport { isHttpError } from \"@sveltejs/kit\";\n//#region src/lib/server/compute/remoteDefinition.server.ts\n/**\n* App-side binding for the remote-definition fetcher. The fetch itself — SSRF\n* guard, size cap, deadline, TTL cache — lives in `@selvajs/server`\n* (`createRemoteDefinitionFetcher`); this module owns the single app-wide\n* instance, wired with the env-derived limits and the real clock.\n*/\nvar fetcher = createRemoteDefinitionFetcher({\n\tmaxBytes: REMOTE_DEFINITION_MAX_BYTES,\n\tfetchTimeoutMs: REMOTE_DEFINITION_FETCH_TIMEOUT_MS,\n\tcacheTtlMs: REMOTE_DEFINITION_CACHE_TTL_MS,\n\tnow: () => Date.now(),\n\tlogger: lazyLogger\n});\n/** Fetch (or return cached) remote `.gh` bytes. Throws on unsafe host / oversized / timeout. */\nfunction loadRemoteDefinition(url) {\n\treturn fetcher.load(url);\n}\n//#endregion\n//#region src/lib/server/computeRateLimit.server.ts\n/**\n* App-side binding for the compute-solve rate limiter. The limiter itself\n* (fixed-window, per-key, process-local) lives in `@selvajs/server`\n* (`createComputeRateLimiter`); this module owns the single app-wide instance,\n* wired with the window + cap from `computeLimits.ts` (which read the env).\n*\n* Keyed by caller — `user:{userId}` for authenticated solves, `share:{linkId}`\n* for share-token solves so anonymous consumers of one link don't share a\n* bucket with the link's owner.\n*/\nvar limiter = createComputeRateLimiter({\n\twindowMs: RATE_LIMIT_WINDOW_MS,\n\tmaxPerWindow: RATE_LIMIT_MAX_REQUESTS\n});\n/**\n* Check + record one request against `key`. Returns\n* `{ allowed: false, retryAfter }` once the bucket is full.\n*/\nfunction checkComputeRateLimit(key) {\n\treturn limiter.check(key);\n}\n//#endregion\n//#region src/lib/server/compute/solve.server.ts\n/**\n* The body-independent core of a solve request, shared by `POST /api/v1/compute`\n* (share-token and remote-URL capable) and `POST /api/v1/definitions/{guid}/solve`\n* (tenant-scoped, cookie or PAT).\n*\n* **Share-token resolution stays outside this module, in the route.** The caller\n* hands in an already-decided `SolveAccess`; the definition-addressed route only\n* ever constructs the `user` variant, so it cannot inherit the anonymous branch\n* by accident. Adding a token lookup here would silently give it one.\n*\n* What lives here: rate limiting, definition/version resolution, access checks,\n* compute-server routing, schema backfill, the engine call, metric recording and\n* the debug breakdown. What stays in a route: parsing its own body shape and\n* deciding who the caller is.\n*/\n/**\n* Run a solve and return the HTTP response.\n*\n* Throws `HttpError` (via `apiError`) for every refusal, and lets engine/network\n* failures propagate for the caller's outer catch to map — the two routes share\n* that mapping through `mapSolveError`.\n*/\nasync function runSolve(params) {\n\tconst { access, definitionUrl, inputs, values, channel, versionId: explicitVersionId, request, locals, loadStart, prepMarks, concealAccessFailure = false } = params;\n\tconst storage = getStorageProvider();\n\tconst sharedAccess = access.kind === \"share\" ? access : null;\n\tconst solveCtx = access.ctx;\n\tlet prevMark = performance.now();\n\tconst mark = (label) => {\n\t\tprepMarks.push([label, performance.now() - prevMark]);\n\t\tprevMark = performance.now();\n\t};\n\tlet definitionSource;\n\tlet localDefinitionRef = null;\n\tlet localVersionForBackfill = null;\n\tlet solveOrgId = null;\n\tlet definitionPin = null;\n\tlet metricDefinitionId = null;\n\tlet metricVersionId = null;\n\tconst isLocal = definitionUrl.startsWith(\"local:\");\n\tconst guid = isLocal ? definitionUrl.substring(6) : null;\n\tconst recordMetric = (failureKind, extra = {}) => {\n\t\tgetSolveMetricSink().record(solveCtx, {\n\t\t\tdefinitionUrl,\n\t\t\tdefinitionId: metricDefinitionId,\n\t\t\tversionId: metricVersionId,\n\t\t\tchannel,\n\t\t\torgId: solveOrgId,\n\t\t\tdurationMs: extra.durationMs ?? 0,\n\t\t\tok: failureKind === \"ok\",\n\t\t\tfailureKind,\n\t\t\terrorCount: extra.errorCount ?? 0,\n\t\t\twarningCount: extra.warningCount ?? 0\n\t\t}).catch((err) => locals.log.error(\"Solve-metric record failed\", {\n\t\t\tcomponent: \"API/Compute\",\n\t\t\terr: renderThrown(err)\n\t\t}));\n\t};\n\tconst rateLimit = checkComputeRateLimit(access.rateLimitKey);\n\tif (!rateLimit.allowed) {\n\t\trecordMetric(\"rate_limited\");\n\t\tconst retryAfter = rateLimit.retryAfter ?? 1;\n\t\treturn new Response(JSON.stringify({\n\t\t\tmessage: `Too many compute requests. Retry in ${retryAfter}s.`,\n\t\t\tretryAfter\n\t\t}), {\n\t\t\tstatus: 429,\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t\t\"Retry-After\": String(retryAfter)\n\t\t\t}\n\t\t});\n\t}\n\tif (isLocal && guid) {\n\t\tlet record;\n\t\ttry {\n\t\t\trecord = await providers.data.definitions.get(solveCtx, guid);\n\t\t} catch (err) {\n\t\t\tlocals.log.error(\"Failed to load local definition\", {\n\t\t\t\tcomponent: \"API/Compute\",\n\t\t\t\tguid,\n\t\t\t\terr: renderThrown(err)\n\t\t\t});\n\t\t\tapiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' not found`);\n\t\t}\n\t\tif (!record) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' not found`);\n\t\tmark(\"defRecord\");\n\t\tconst project = await providers.data.projects.getProject(solveCtx, record.projectId);\n\t\tsolveOrgId = project?.orgId ?? null;\n\t\tdefinitionPin = record.computeServerId ?? null;\n\t\tmark(\"project\");\n\t\tif (!sharedAccess) try {\n\t\t\tif (channel === \"draft\" || explicitVersionId) await requireCanEditDefinition(locals, record.projectId, guid, {\n\t\t\t\tproject,\n\t\t\t\tdefinition: record\n\t\t\t});\n\t\t\telse await requireCanSolve(locals, record.projectId, project ?? void 0);\n\t\t} catch (err) {\n\t\t\tif (concealAccessFailure && isHttpError(err) && err.status === 403) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' not found`);\n\t\t\tthrow err;\n\t\t}\n\t\tmark(\"access\");\n\t\tconst versionId = explicitVersionId ?? (channel === \"live\" ? record.liveVersionId : record.draftVersionId);\n\t\tif (!versionId) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' has no ${channel} version yet`);\n\t\tconst version = await providers.data.definitions.getVersion(solveCtx, versionId);\n\t\tif (!version || version.definitionId !== guid) apiError(404, ApiErrorCode.NOT_FOUND, `Definition '${guid}' version is missing`);\n\t\tlocalVersionForBackfill = {\n\t\t\tid: version.id,\n\t\t\thasSchema: version.schema !== void 0\n\t\t};\n\t\tmetricDefinitionId = guid;\n\t\tmetricVersionId = version.id;\n\t\tmark(\"version\");\n\t\tlocalDefinitionRef = engine.definitionRef(version.id, async () => {\n\t\t\tconst bytes = await storage.get(version.fileKey);\n\t\t\tif (!bytes) throw new Error(`Version blob missing: ${version.fileKey}`);\n\t\t\treturn bytes;\n\t\t});\n\t\tdefinitionSource = localDefinitionRef;\n\t\tmark(\"blob\");\n\t} else {\n\t\ttry {\n\t\t\tdefinitionSource = await loadRemoteDefinition(definitionUrl);\n\t\t} catch (err) {\n\t\t\tlocals.log.error(\"Failed to fetch remote definition\", {\n\t\t\t\tcomponent: \"API/Compute\",\n\t\t\t\tdefinitionUrl,\n\t\t\t\terr: renderThrown(err)\n\t\t\t});\n\t\t\tapiError(400, ApiErrorCode.VALIDATION_FAILED, `Failed to load definition: ${err instanceof Error ? err.message : String(err)}`);\n\t\t}\n\t\tmark(\"remoteDef\");\n\t}\n\tconst defLoadMs = performance.now() - loadStart;\n\tif (sharedAccess) {\n\t\tif (await providers.data.shareLinks.tryIncrementSolveCount(solveCtx, sharedAccess.link.id) === null) {\n\t\t\trecordMetric(\"share_cap\");\n\t\t\tapiError(429, ApiErrorCode.INTERNAL, \"Share link solve cap reached.\");\n\t\t}\n\t\tmark(\"shareCap\");\n\t}\n\tconst serverConfig = await resolveServerForOrg(solveCtx, solveOrgId, { definitionPin });\n\tmark(\"resolveServer\");\n\tif (localVersionForBackfill && !localVersionForBackfill.hasSchema && localDefinitionRef) {\n\t\tconst versionId = localVersionForBackfill.id;\n\t\ttry {\n\t\t\tconst bytes = await localDefinitionRef.load();\n\t\t\tconst schema = await fetchSchemaFromCompute(bytes, serverConfig);\n\t\t\tawait providers.data.definitions.setVersionSchema(solveCtx, versionId, schema);\n\t\t} catch (err) {\n\t\t\tlocals.log.warn(\"Schema backfill failed\", {\n\t\t\t\tcomponent: \"API/Compute\",\n\t\t\t\tversionId,\n\t\t\t\terr: renderThrown(err)\n\t\t\t});\n\t\t}\n\t\tmark(\"schemaBackfill\");\n\t}\n\tconst outcome = await engine.solve({\n\t\tserver: serverConfig,\n\t\tdefinitionSource,\n\t\tdefinitionKey: isLocal ? void 0 : definitionUrl,\n\t\tinputs,\n\t\tvalues,\n\t\tsignal: request.signal,\n\t\tacceptEncoding: request.headers.get(\"accept-encoding\") ?? \"\",\n\t\tdefinitionGuid: guid ?? void 0,\n\t\tloadStartMs: loadStart,\n\t\tdefLoadMs,\n\t\tprepMarks\n\t});\n\tmark(\"solve\");\n\tif (outcome.kind === \"timeout\") recordMetric(\"timeout\", { durationMs: outcome.durationMs });\n\telse if (outcome.kind === \"client_abort\") recordMetric(\"client_abort\", { durationMs: outcome.durationMs });\n\telse if (outcome.kind === \"too_large\") recordMetric(\"too_large\");\n\telse if (outcome.kind === \"shed\") recordMetric(\"shed\", { durationMs: outcome.durationMs });\n\telse if (outcome.kind === \"ok\") {\n\t\trecordMetric(\"ok\", {\n\t\t\tdurationMs: outcome.solveMs,\n\t\t\terrorCount: outcome.errorCount,\n\t\t\twarningCount: outcome.warningCount\n\t\t});\n\t\tif (metricDefinitionId) providers.data.definitions.incrementSolveCount(solveCtx, metricDefinitionId).catch((err) => locals.log.warn(\"solveCount increment failed\", {\n\t\t\tcomponent: \"API/Compute\",\n\t\t\tdefinitionId: metricDefinitionId,\n\t\t\terr: renderThrown(err)\n\t\t}));\n\t\tif (COMPUTE_DEBUG) logDebugBreakdown(locals, request, outcome, defLoadMs, prepMarks);\n\t}\n\treturn engine.toWebResponse(outcome);\n}\n/**\n* Map a thrown solve failure to an HTTP error. Both solve routes share it so\n* they cannot drift on which failures read as \"compute is down\" (503) versus a\n* server bug (500).\n*/\nfunction mapSolveError(err, locals) {\n\tif (isHttpError(err)) throw err;\n\tif (err instanceof ComputeServerUnconfiguredError) apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, err.message);\n\tconst message = err instanceof Error ? err.message : \"Unknown error\";\n\tlocals.log.error(\"Solve request failed\", {\n\t\tcomponent: \"API/Compute\",\n\t\terr: renderThrown(err)\n\t});\n\tif (err instanceof TypeError && message === \"fetch failed\") apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, \"Compute server is unreachable\");\n\tapiError(500, ApiErrorCode.INTERNAL, message);\n}\n/**\n* DEBUG (SELVA_FLAG_COMPUTE_DEBUG): the server-side overhead the solve metric's\n* `durationMs` doesn't capture. `load` = auth + DB + definition fetch; `tree` =\n* input tree build; `serialize` = JSON.stringify of the result. The solve itself\n* is timed separately (see the solve metric's durationMs and [Compute/selva-cache]).\n*/\nfunction logDebugBreakdown(locals, request, outcome, defLoadMs, prepMarks) {\n\tconst { metrics } = outcome.envelope;\n\tlocals.log.debug(\"Solve server-side phase breakdown\", {\n\t\tcomponent: \"Compute/server\",\n\t\tloadMs: Math.round(defLoadMs),\n\t\ttreeBuildMs: Math.round(metrics.treeBuildMs),\n\t\tsolveMs: Math.round(metrics.solveMs),\n\t\tserializeMs: Math.round(metrics.serializeMs),\n\t\tgzipMs: Math.round(metrics.gzipMs),\n\t\tserverTotalMs: Math.round(metrics.serverTotalMs),\n\t\tserializedBytes: metrics.serializedBytes\n\t});\n\tif (metrics.compressedBytes !== null) locals.log.debug(\"Response gzipped\", {\n\t\tcomponent: \"Compute/server\",\n\t\tserializedBytes: metrics.serializedBytes,\n\t\tcompressedBytes: metrics.compressedBytes,\n\t\tratio: Number((metrics.serializedBytes / metrics.compressedBytes).toFixed(1))\n\t});\n\telse {\n\t\tconst acceptEncoding = request.headers.get(\"accept-encoding\") ?? \"\";\n\t\tlocals.log.debug(\"Compression skipped\", {\n\t\t\tcomponent: \"Compute/server\",\n\t\t\tacceptEncoding,\n\t\t\thasAcceptEncoding: acceptEncoding !== \"\"\n\t\t});\n\t}\n\tlocals.log.debug(\"Prep breakdown\", {\n\t\tcomponent: \"Compute/server\",\n\t\t...Object.fromEntries(prepMarks.map(([label, ms]) => [`p_${label}Ms`, Math.round(ms)]))\n\t});\n\tconst db = engine.stats().definitionBytes;\n\tlocals.log.debug(\"Definition byte-cache counters\", {\n\t\tcomponent: \"Compute/def-bytes\",\n\t\thits: db.hits,\n\t\tmisses: db.misses,\n\t\tevictions: db.evictions,\n\t\tentries: db.entries,\n\t\tretainedBytes: db.bytes\n\t});\n}\n//#endregion\nexport { runSolve as n, mapSolveError as t };\n"],"names":[],"mappings":";;;;;;;;;AAQA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,OAAO,GAAG,6BAA6B,CAAC;AAC5C,CAAC,QAAQ,EAAE,2BAA2B;AACtC,CAAC,cAAc,EAAE,kCAAkC;AACnD,CAAC,UAAU,EAAE,8BAA8B;AAC3C,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE;AACtB,CAAC,MAAM,EAAE;AACT,CAAC,CAAC;AACF;AACA,SAAS,oBAAoB,CAAC,GAAG,EAAE;AACnC,CAAC,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;AACzB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,OAAO,GAAG,wBAAwB,CAAC;AACvC,CAAC,QAAQ,EAAE,oBAAoB;AAC/B,CAAC,YAAY,EAAE;AACf,CAAC,CAAC;AACF;AACA;AACA;AACA;AACA,SAAS,qBAAqB,CAAC,GAAG,EAAE;AACpC,CAAC,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;AAC1B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,QAAQ,CAAC,MAAM,EAAE;AAChC,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,oBAAoB,GAAG,KAAK,EAAE,GAAG,MAAM;AACrK,CAAC,MAAM,OAAO,GAAG,kBAAkB,EAAE;AACrC,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,KAAK,OAAO,GAAG,MAAM,GAAG,IAAI;AAC7D,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG;AAC5B,CAAC,IAAI,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;AACjC,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK;AACzB,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC;AACvD,EAAE,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;AAC9B,CAAC,CAAC;AACF,CAAC,IAAI,gBAAgB;AACrB,CAAC,IAAI,kBAAkB,GAAG,IAAI;AAC9B,CAAC,IAAI,uBAAuB,GAAG,IAAI;AACnC,CAAC,IAAI,UAAU,GAAG,IAAI;AACtB,CAAC,IAAI,aAAa,GAAG,IAAI;AACzB,CAAC,IAAI,kBAAkB,GAAG,IAAI;AAC9B,CAAC,IAAI,eAAe,GAAG,IAAI;AAC3B,CAAC,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC;AACnD,CAAC,MAAM,IAAI,GAAG,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI;AACzD,CAAC,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,KAAK;AACnD,EAAE,kBAAkB,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE;AACxC,GAAG,aAAa;AAChB,GAAG,YAAY,EAAE,kBAAkB;AACnC,GAAG,SAAS,EAAE,eAAe;AAC7B,GAAG,OAAO;AACV,GAAG,KAAK,EAAE,UAAU;AACpB,GAAG,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC;AACpC,GAAG,EAAE,EAAE,WAAW,KAAK,IAAI;AAC3B,GAAG,WAAW;AACd,GAAG,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC;AACpC,GAAG,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI;AACvC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,4BAA4B,EAAE;AACnE,GAAG,SAAS,EAAE,aAAa;AAC3B,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC,CAAC;AACL,CAAC,CAAC;AACF,CAAC,MAAM,SAAS,GAAG,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC;AAC7D,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE;AACzB,EAAE,YAAY,CAAC,cAAc,CAAC;AAC9B,EAAE,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,IAAI,CAAC;AAC9C,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;AACrC,GAAG,OAAO,EAAE,CAAC,oCAAoC,EAAE,UAAU,CAAC,EAAE,CAAC;AACjE,GAAG;AACH,GAAG,CAAC,EAAE;AACN,GAAG,MAAM,EAAE,GAAG;AACd,GAAG,OAAO,EAAE;AACZ,IAAI,cAAc,EAAE,kBAAkB;AACtC,IAAI,aAAa,EAAE,MAAM,CAAC,UAAU;AACpC;AACA,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,IAAI,OAAO,IAAI,IAAI,EAAE;AACtB,EAAE,IAAI,MAAM;AACZ,EAAE,IAAI;AACN,GAAG,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC;AAChE,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,iCAAiC,EAAE;AACvD,IAAI,SAAS,EAAE,aAAa;AAC5B,IAAI,IAAI;AACR,IAAI,GAAG,EAAE,YAAY,CAAC,GAAG;AACzB,IAAI,CAAC;AACL,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;AAC1E,EAAE;AACF,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;AACtF,EAAE,IAAI,CAAC,WAAW,CAAC;AACnB,EAAE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC;AACtF,EAAE,UAAU,GAAG,OAAO,EAAE,KAAK,IAAI,IAAI;AACrC,EAAE,aAAa,GAAG,MAAM,CAAC,eAAe,IAAI,IAAI;AAChD,EAAE,IAAI,CAAC,SAAS,CAAC;AACjB,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI;AACzB,GAAG,IAAI,OAAO,KAAK,OAAO,IAAI,iBAAiB,EAAE,MAAM,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE;AAChH,IAAI,OAAO;AACX,IAAI,UAAU,EAAE;AAChB,IAAI,CAAC;AACL,QAAQ,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,IAAI,KAAK,CAAC,CAAC;AAC1E,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,IAAI,oBAAoB,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;AAC9I,GAAG,MAAM,GAAG;AACZ,EAAE;AACF,EAAE,IAAI,CAAC,QAAQ,CAAC;AAChB,EAAE,MAAM,SAAS,GAAG,iBAAiB,KAAK,OAAO,KAAK,MAAM,GAAG,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC;AAC5G,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;AAC7G,EAAE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC;AAClF,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;AACjI,EAAE,uBAAuB,GAAG;AAC5B,GAAG,EAAE,EAAE,OAAO,CAAC,EAAE;AACjB,GAAG,SAAS,EAAE,OAAO,CAAC,MAAM,KAAK;AACjC,GAAG;AACH,EAAE,kBAAkB,GAAG,IAAI;AAC3B,EAAE,eAAe,GAAG,OAAO,CAAC,EAAE;AAC9B,EAAE,IAAI,CAAC,SAAS,CAAC;AACjB,EAAE,kBAAkB,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY;AACpE,GAAG,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;AACnD,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,sBAAsB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1E,GAAG,OAAO,KAAK;AACf,EAAE,CAAC,CAAC;AACJ,EAAE,gBAAgB,GAAG,kBAAkB;AACvC,EAAE,IAAI,CAAC,MAAM,CAAC;AACd,CAAC,CAAC,MAAM;AACR,EAAE,IAAI;AACN,GAAG,gBAAgB,GAAG,MAAM,oBAAoB,CAAC,aAAa,CAAC;AAC/D,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,mCAAmC,EAAE;AACzD,IAAI,SAAS,EAAE,aAAa;AAC5B,IAAI,aAAa;AACjB,IAAI,GAAG,EAAE,YAAY,CAAC,GAAG;AACzB,IAAI,CAAC;AACL,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,2BAA2B,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAClI,EAAE;AACF,EAAE,IAAI,CAAC,WAAW,CAAC;AACnB,CAAC;AACD,CAAC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;AAChD,CAAC,IAAI,YAAY,EAAE;AACnB,EAAE,IAAI,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;AACvG,GAAG,YAAY,CAAC,WAAW,CAAC;AAC5B,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,+BAA+B,CAAC;AACxE,EAAE;AACF,EAAE,IAAI,CAAC,UAAU,CAAC;AAClB,CAAC;AACD,CAAC,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,CAAC;AACxF,CAAC,IAAI,CAAC,eAAe,CAAC;AACtB,CAAC,IAAI,uBAAuB,IAAI,CAAC,uBAAuB,CAAC,SAAS,IAAI,kBAAkB,EAAE;AAC1F,EAAE,MAAM,SAAS,GAAG,uBAAuB,CAAC,EAAE;AAC9C,EAAE,IAAI;AACN,GAAG,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE;AAChD,GAAG,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,KAAK,EAAE,YAAY,CAAC;AACnE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;AACjF,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE;AAC7C,IAAI,SAAS,EAAE,aAAa;AAC5B,IAAI,SAAS;AACb,IAAI,GAAG,EAAE,YAAY,CAAC,GAAG;AACzB,IAAI,CAAC;AACL,EAAE;AACF,EAAE,IAAI,CAAC,gBAAgB,CAAC;AACxB,CAAC;AACD,CAAC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC;AACpC,EAAE,MAAM,EAAE,YAAY;AACtB,EAAE,gBAAgB;AAClB,EAAE,aAAa,EAAE,OAAO,GAAG,MAAM,GAAG,aAAa;AACjD,EAAE,MAAM;AACR,EAAE,MAAM;AACR,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM;AACxB,EAAE,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE;AAC9D,EAAE,cAAc,EAAE,IAAI,IAAI,MAAM;AAChC,EAAE,WAAW,EAAE,SAAS;AACxB,EAAE,SAAS;AACX,EAAE;AACF,EAAE,CAAC;AACH,CAAC,IAAI,CAAC,OAAO,CAAC;AACd,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,YAAY,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;AAC5F,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,YAAY,CAAC,cAAc,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;AAC3G,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,YAAY,CAAC,WAAW,CAAC;AACjE,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;AAC3F,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE;AACjC,EAAE,YAAY,CAAC,IAAI,EAAE;AACrB,GAAG,UAAU,EAAE,OAAO,CAAC,OAAO;AAC9B,GAAG,UAAU,EAAE,OAAO,CAAC,UAAU;AACjC,GAAG,YAAY,EAAE,OAAO,CAAC;AACzB,GAAG,CAAC;AACJ,EAAE,IAAI,kBAAkB,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE;AACrK,GAAG,SAAS,EAAE,aAAa;AAC3B,GAAG,YAAY,EAAE,kBAAkB;AACnC,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC,CAAC;AACL,EAAE,IAAI,aAAa,EAAE,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC;AACtF,CAAC;AACD,CAAC,OAAO,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC;AACrC;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE;AACpC,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG;AAChC,CAAC,IAAI,GAAG,YAAY,8BAA8B,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,mBAAmB,EAAE,GAAG,CAAC,OAAO,CAAC;AAChH,CAAC,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,eAAe;AACrE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,sBAAsB,EAAE;AAC1C,EAAE,SAAS,EAAE,aAAa;AAC1B,EAAE,GAAG,EAAE,YAAY,CAAC,GAAG;AACvB,EAAE,CAAC;AACH,CAAC,IAAI,GAAG,YAAY,SAAS,IAAI,OAAO,KAAK,cAAc,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,mBAAmB,EAAE,+BAA+B,CAAC;AAC7I,CAAC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC;AAC9C;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE;AAC3E,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,QAAQ;AACrC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,mCAAmC,EAAE;AACvD,EAAE,SAAS,EAAE,gBAAgB;AAC7B,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;AAC/B,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;AAC9C,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;AACtC,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;AAC9C,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;AACpC,EAAE,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;AAClD,EAAE,eAAe,EAAE,OAAO,CAAC;AAC3B,EAAE,CAAC;AACH,CAAC,IAAI,OAAO,CAAC,eAAe,KAAK,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,EAAE;AAC5E,EAAE,SAAS,EAAE,gBAAgB;AAC7B,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe;AAC1C,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe;AAC1C,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;AAC9E,EAAE,CAAC;AACH,MAAM;AACN,EAAE,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE;AACrE,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE;AAC1C,GAAG,SAAS,EAAE,gBAAgB;AAC9B,GAAG,cAAc;AACjB,GAAG,iBAAiB,EAAE,cAAc,KAAK;AACzC,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE;AACpC,EAAE,SAAS,EAAE,gBAAgB;AAC7B,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AACxF,EAAE,CAAC;AACH,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,eAAe;AAC1C,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,gCAAgC,EAAE;AACpD,EAAE,SAAS,EAAE,mBAAmB;AAChC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI;AACf,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM;AACnB,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS;AACzB,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO;AACrB,EAAE,aAAa,EAAE,EAAE,CAAC;AACpB,EAAE,CAAC;AACH;;;;"}

package/build/server/chunks/chunks/state.js-BLvUzOSZ.js

@@ -1,76 +0,0 @@
-import { g as getContext } from './server.js-dCqO-ZSb.js';
-import './client.js-AktyUGu9.js';
-
-//#endregion
-//#region ../../node_modules/.pnpm/@sveltejs+kit@2.70.1_@opentelemetry+api@1.9.1_@sveltejs+vite-plugin-svelte@7.2.0_svelte_f075b7c16fa9692fcf0544233d562474/node_modules/@sveltejs/kit/src/runtime/app/state/server.js
-function context() {
-	return getContext("__request__");
-}
-//#endregion
-//#region ../../node_modules/.pnpm/@sveltejs+kit@2.70.1_@opentelemetry+api@1.9.1_@sveltejs+vite-plugin-svelte@7.2.0_svelte_f075b7c16fa9692fcf0544233d562474/node_modules/@sveltejs/kit/src/runtime/app/state/index.js
-/**
-* A read-only reactive object with information about the current page, serving several use cases:
-* - retrieving the combined `data` of all pages/layouts anywhere in your component tree (also see [loading data](https://svelte.dev/docs/kit/load))
-* - retrieving the current value of the `form` prop anywhere in your component tree (also see [form actions](https://svelte.dev/docs/kit/form-actions))
-* - retrieving the page state that was set through `goto`, `pushState` or `replaceState` (also see [goto](https://svelte.dev/docs/kit/$app-navigation#goto) and [shallow routing](https://svelte.dev/docs/kit/shallow-routing))
-* - retrieving metadata such as the URL you're on, the current route and its parameters, and whether or not there was an error
-*
-* ```svelte
-* <!--- file: +layout.svelte --->
-* <script>
-* 	import { page } from '$app/state';
-* <\/script>
-*
-* <p>Currently at {page.url.pathname}</p>
-*
-* {#if page.error}
-* 	<span class="red">Problem detected</span>
-* {:else}
-* 	<span class="small">All systems operational</span>
-* {/if}
-* ```
-*
-* Changes to `page` are available exclusively with runes. (The legacy reactivity syntax will not reflect any changes)
-*
-* ```svelte
-* <!--- file: +page.svelte --->
-* <script>
-* 	import { page } from '$app/state';
-* 	const id = $derived(page.params.id); // This will correctly update id for usage on this page
-* 	$: badId = page.params.id; // Do not use; will never update after initial load
-* <\/script>
-* ```
-*
-* On the server, values can only be read during rendering (in other words _not_ in e.g. `load` functions). In the browser, the values can be read at any time.
-*
-* @type {import('@sveltejs/kit').Page}
-*/
-var page = {
-	get data() {
-		return context().page.data;
-	},
-	get error() {
-		return context().page.error;
-	},
-	get form() {
-		return context().page.form;
-	},
-	get params() {
-		return context().page.params;
-	},
-	get route() {
-		return context().page.route;
-	},
-	get state() {
-		return context().page.state;
-	},
-	get status() {
-		return context().page.status;
-	},
-	get url() {
-		return context().page.url;
-	}
-};
-
-export { page as p };
-//# sourceMappingURL=state.js-BLvUzOSZ.js.map

package/build/server/chunks/chunks/state.js-BLvUzOSZ.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"state.js-BLvUzOSZ.js","sources":["../../../../.svelte-kit/output/server/chunks/state.js"],"sourcesContent":["import \"./index-server.js\";\nimport { b as getContext } from \"./server.js\";\nimport { r as stores } from \"./client.js\";\nstores.updated.check;\n//#endregion\n//#region ../../node_modules/.pnpm/@sveltejs+kit@2.70.1_@opentelemetry+api@1.9.1_@sveltejs+vite-plugin-svelte@7.2.0_svelte_f075b7c16fa9692fcf0544233d562474/node_modules/@sveltejs/kit/src/runtime/app/state/server.js\nfunction context() {\n\treturn getContext(\"__request__\");\n}\n//#endregion\n//#region ../../node_modules/.pnpm/@sveltejs+kit@2.70.1_@opentelemetry+api@1.9.1_@sveltejs+vite-plugin-svelte@7.2.0_svelte_f075b7c16fa9692fcf0544233d562474/node_modules/@sveltejs/kit/src/runtime/app/state/index.js\n/**\n* A read-only reactive object with information about the current page, serving several use cases:\n* - retrieving the combined `data` of all pages/layouts anywhere in your component tree (also see [loading data](https://svelte.dev/docs/kit/load))\n* - retrieving the current value of the `form` prop anywhere in your component tree (also see [form actions](https://svelte.dev/docs/kit/form-actions))\n* - retrieving the page state that was set through `goto`, `pushState` or `replaceState` (also see [goto](https://svelte.dev/docs/kit/$app-navigation#goto) and [shallow routing](https://svelte.dev/docs/kit/shallow-routing))\n* - retrieving metadata such as the URL you're on, the current route and its parameters, and whether or not there was an error\n*\n* ```svelte\n* <!--- file: +layout.svelte --->\n* <script>\n* \timport { page } from '$app/state';\n* <\\/script>\n*\n* <p>Currently at {page.url.pathname}</p>\n*\n* {#if page.error}\n* \t<span class=\"red\">Problem detected</span>\n* {:else}\n* \t<span class=\"small\">All systems operational</span>\n* {/if}\n* ```\n*\n* Changes to `page` are available exclusively with runes. (The legacy reactivity syntax will not reflect any changes)\n*\n* ```svelte\n* <!--- file: +page.svelte --->\n* <script>\n* \timport { page } from '$app/state';\n* \tconst id = $derived(page.params.id); // This will correctly update id for usage on this page\n* \t$: badId = page.params.id; // Do not use; will never update after initial load\n* <\\/script>\n* ```\n*\n* On the server, values can only be read during rendering (in other words _not_ in e.g. `load` functions). In the browser, the values can be read at any time.\n*\n* @type {import('@sveltejs/kit').Page}\n*/\nvar page = {\n\tget data() {\n\t\treturn context().page.data;\n\t},\n\tget error() {\n\t\treturn context().page.error;\n\t},\n\tget form() {\n\t\treturn context().page.form;\n\t},\n\tget params() {\n\t\treturn context().page.params;\n\t},\n\tget route() {\n\t\treturn context().page.route;\n\t},\n\tget state() {\n\t\treturn context().page.state;\n\t},\n\tget status() {\n\t\treturn context().page.status;\n\t},\n\tget url() {\n\t\treturn context().page.url;\n\t}\n};\n//#endregion\nexport { page as t };\n"],"names":[],"mappings":";;;AAIA;AACA;AACA,SAAS,OAAO,GAAG;AACnB,CAAC,OAAO,UAAU,CAAC,aAAa,CAAC;AACjC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,IAAI,GAAG;AACX,CAAC,IAAI,IAAI,GAAG;AACZ,EAAE,OAAO,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI;AAC5B,CAAC,CAAC;AACF,CAAC,IAAI,KAAK,GAAG;AACb,EAAE,OAAO,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK;AAC7B,CAAC,CAAC;AACF,CAAC,IAAI,IAAI,GAAG;AACZ,EAAE,OAAO,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI;AAC5B,CAAC,CAAC;AACF,CAAC,IAAI,MAAM,GAAG;AACd,EAAE,OAAO,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM;AAC9B,CAAC,CAAC;AACF,CAAC,IAAI,KAAK,GAAG;AACb,EAAE,OAAO,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK;AAC7B,CAAC,CAAC;AACF,CAAC,IAAI,KAAK,GAAG;AACb,EAAE,OAAO,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK;AAC7B,CAAC,CAAC;AACF,CAAC,IAAI,MAAM,GAAG;AACd,EAAE,OAAO,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM;AAC9B,CAAC,CAAC;AACF,CAAC,IAAI,GAAG,GAAG;AACX,EAAE,OAAO,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG;AAC3B,CAAC;AACD;;;;"}

package/build/server/chunks/chunks/stores.js-CotWAeU7.js

@@ -1,35 +0,0 @@
-import { g as getContext } from './server.js-dCqO-ZSb.js';
-import './client.js-AktyUGu9.js';
-
-//#region ../../node_modules/.pnpm/@sveltejs+kit@2.70.1_@opentelemetry+api@1.9.1_@sveltejs+vite-plugin-svelte@7.2.0_svelte_f075b7c16fa9692fcf0544233d562474/node_modules/@sveltejs/kit/src/runtime/app/stores.js
-/**
-* A function that returns all of the contextual stores. On the server, this must be called during component initialization.
-* Only use this if you need to defer store subscription until after the component has mounted, for some reason.
-*
-* @deprecated Use `$app/state` instead (requires Svelte 5, [see docs for more info](https://svelte.dev/docs/kit/migrating-to-sveltekit-2#SvelteKit-2.12:-$app-stores-deprecated))
-*/
-var getStores = () => {
-	const stores$1 = getContext("__svelte__");
-	return {
-		/** @type {typeof page} */
-		page: { subscribe: stores$1.page.subscribe },
-		/** @type {typeof navigating} */
-		navigating: { subscribe: stores$1.navigating.subscribe },
-		/** @type {typeof updated} */
-		updated: stores$1.updated
-	};
-};
-/**
-* A readable store whose value contains page data.
-*
-* On the server, this store can only be subscribed to during component initialization. In the browser, it can be subscribed to at any time.
-*
-* @deprecated Use `page` from `$app/state` instead (requires Svelte 5, [see docs for more info](https://svelte.dev/docs/kit/migrating-to-sveltekit-2#SvelteKit-2.12:-$app-stores-deprecated))
-* @type {import('svelte/store').Readable<import('@sveltejs/kit').Page>}
-*/
-var page = { subscribe(fn) {
-	return getStores().page.subscribe(fn);
-} };
-
-export { page as p };
-//# sourceMappingURL=stores.js-CotWAeU7.js.map

package/build/server/chunks/chunks/stores.js-CotWAeU7.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"stores.js-CotWAeU7.js","sources":["../../../../.svelte-kit/output/server/chunks/stores.js"],"sourcesContent":["import \"./index-server.js\";\nimport { b as getContext } from \"./server.js\";\nimport \"./client.js\";\n//#region ../../node_modules/.pnpm/@sveltejs+kit@2.70.1_@opentelemetry+api@1.9.1_@sveltejs+vite-plugin-svelte@7.2.0_svelte_f075b7c16fa9692fcf0544233d562474/node_modules/@sveltejs/kit/src/runtime/app/stores.js\n/**\n* A function that returns all of the contextual stores. On the server, this must be called during component initialization.\n* Only use this if you need to defer store subscription until after the component has mounted, for some reason.\n*\n* @deprecated Use `$app/state` instead (requires Svelte 5, [see docs for more info](https://svelte.dev/docs/kit/migrating-to-sveltekit-2#SvelteKit-2.12:-$app-stores-deprecated))\n*/\nvar getStores = () => {\n\tconst stores$1 = getContext(\"__svelte__\");\n\treturn {\n\t\t/** @type {typeof page} */\n\t\tpage: { subscribe: stores$1.page.subscribe },\n\t\t/** @type {typeof navigating} */\n\t\tnavigating: { subscribe: stores$1.navigating.subscribe },\n\t\t/** @type {typeof updated} */\n\t\tupdated: stores$1.updated\n\t};\n};\n/**\n* A readable store whose value contains page data.\n*\n* On the server, this store can only be subscribed to during component initialization. In the browser, it can be subscribed to at any time.\n*\n* @deprecated Use `page` from `$app/state` instead (requires Svelte 5, [see docs for more info](https://svelte.dev/docs/kit/migrating-to-sveltekit-2#SvelteKit-2.12:-$app-stores-deprecated))\n* @type {import('svelte/store').Readable<import('@sveltejs/kit').Page>}\n*/\nvar page = { subscribe(fn) {\n\treturn getStores().page.subscribe(fn);\n} };\n//#endregion\nexport { page as t };\n"],"names":[],"mappings":";;;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,SAAS,GAAG,MAAM;AACtB,CAAC,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC;AAC1C,CAAC,OAAO;AACR;AACA,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE;AAC9C;AACA,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE;AAC1D;AACA,EAAE,OAAO,EAAE,QAAQ,CAAC;AACpB,EAAE;AACF,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,IAAI,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE;AAC3B,CAAC,OAAO,SAAS,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;AACtC,CAAC;;;;"}

package/build/server/chunks/chunks/token.server.js-UMCt7jB6.js

@@ -1,52 +0,0 @@
-import { b as private_env } from './shared-server.js-HBAhbQ8m.js';
-import { c as createTokenCodec } from './token-codec.js-CxK2DiO-.js';
-
-//#region src/lib/server/shareLinks/token.server.ts
-/**
-* Spec §7 share-link token primitives — thin binding over
-* `@selvajs/server/tokens` (`createTokenCodec`), which owns the two-part
-* design (per-link random secret, instance-wide HMAC secret hashing tokens at
-* rest) and enforces the ≥32-char secret minimum.
-*
-* ## Format
-*   raw    = `share_<base64url(32 random bytes)>`
-*   hash   = base64url( HMAC-SHA256(SHARE_LINK_SECRET, raw) )
-*
-* ## Setup
-*
-* See [packages/selva/.env.example](../../../../.env.example) for the canonical
-* env-var documentation, generation command, and rotation notes. tl;dr:
-*
-*   - Set `SHARE_LINK_SECRET` to a random ≥32-byte string in production.
-*   - In dev, omitting it makes the code fall back to `SELVA_HMAC_KEY`.
-*   - Rotation invalidates every existing share link.
-*/
-var TOKEN_PREFIX = "share_";
-var cached = null;
-function getCodec() {
-	const secret = private_env.SHARE_LINK_SECRET || private_env.SELVA_HMAC_KEY;
-	if (!secret) throw new Error("Missing required env var: SHARE_LINK_SECRET (or SELVA_HMAC_KEY as fallback). See packages/selva/.env.example for setup instructions.");
-	if (cached?.secret !== secret) cached = {
-		secret,
-		codec: createTokenCodec({
-			prefix: TOKEN_PREFIX,
-			secret
-		})
-	};
-	return cached.codec;
-}
-/** Mint: generate a fresh raw token. Show to the caller exactly once. */
-function mintRawToken() {
-	return getCodec().mintRawToken();
-}
-/** Hash a raw token to its store-side representation. */
-function hashToken(raw) {
-	return getCodec().hashToken(raw);
-}
-/** Recognize our own token format on inbound requests. */
-function looksLikeShareToken(value) {
-	return value.startsWith(TOKEN_PREFIX);
-}
-
-export { hashToken as h, looksLikeShareToken as l, mintRawToken as m };
-//# sourceMappingURL=token.server.js-UMCt7jB6.js.map

package/build/server/chunks/chunks/token.server.js-UMCt7jB6.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"token.server.js-UMCt7jB6.js","sources":["../../../../.svelte-kit/output/server/chunks/token.server.js"],"sourcesContent":["import { t as private_env } from \"./shared-server.js\";\nimport { t as createTokenCodec } from \"./token-codec.js\";\n//#region src/lib/server/shareLinks/token.server.ts\n/**\n* Spec §7 share-link token primitives — thin binding over\n* `@selvajs/server/tokens` (`createTokenCodec`), which owns the two-part\n* design (per-link random secret, instance-wide HMAC secret hashing tokens at\n* rest) and enforces the ≥32-char secret minimum.\n*\n* ## Format\n*   raw    = `share_<base64url(32 random bytes)>`\n*   hash   = base64url( HMAC-SHA256(SHARE_LINK_SECRET, raw) )\n*\n* ## Setup\n*\n* See [packages/selva/.env.example](../../../../.env.example) for the canonical\n* env-var documentation, generation command, and rotation notes. tl;dr:\n*\n*   - Set `SHARE_LINK_SECRET` to a random ≥32-byte string in production.\n*   - In dev, omitting it makes the code fall back to `SELVA_HMAC_KEY`.\n*   - Rotation invalidates every existing share link.\n*/\nvar TOKEN_PREFIX = \"share_\";\nvar cached = null;\nfunction getCodec() {\n\tconst secret = private_env.SHARE_LINK_SECRET || private_env.SELVA_HMAC_KEY;\n\tif (!secret) throw new Error(\"Missing required env var: SHARE_LINK_SECRET (or SELVA_HMAC_KEY as fallback). See packages/selva/.env.example for setup instructions.\");\n\tif (cached?.secret !== secret) cached = {\n\t\tsecret,\n\t\tcodec: createTokenCodec({\n\t\t\tprefix: TOKEN_PREFIX,\n\t\t\tsecret\n\t\t})\n\t};\n\treturn cached.codec;\n}\n/** Mint: generate a fresh raw token. Show to the caller exactly once. */\nfunction mintRawToken() {\n\treturn getCodec().mintRawToken();\n}\n/** Hash a raw token to its store-side representation. */\nfunction hashToken(raw) {\n\treturn getCodec().hashToken(raw);\n}\n/** Recognize our own token format on inbound requests. */\nfunction looksLikeShareToken(value) {\n\treturn value.startsWith(TOKEN_PREFIX);\n}\n//#endregion\nexport { looksLikeShareToken as n, mintRawToken as r, hashToken as t };\n"],"names":[],"mappings":";;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,YAAY,GAAG,QAAQ;AAC3B,IAAI,MAAM,GAAG,IAAI;AACjB,SAAS,QAAQ,GAAG;AACpB,CAAC,MAAM,MAAM,GAAG,WAAW,CAAC,iBAAiB,IAAI,WAAW,CAAC,cAAc;AAC3E,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,KAAK,CAAC,sIAAsI,CAAC;AACrK,CAAC,IAAI,MAAM,EAAE,MAAM,KAAK,MAAM,EAAE,MAAM,GAAG;AACzC,EAAE,MAAM;AACR,EAAE,KAAK,EAAE,gBAAgB,CAAC;AAC1B,GAAG,MAAM,EAAE,YAAY;AACvB,GAAG;AACH,GAAG;AACH,EAAE;AACF,CAAC,OAAO,MAAM,CAAC,KAAK;AACpB;AACA;AACA,SAAS,YAAY,GAAG;AACxB,CAAC,OAAO,QAAQ,EAAE,CAAC,YAAY,EAAE;AACjC;AACA;AACA,SAAS,SAAS,CAAC,GAAG,EAAE;AACxB,CAAC,OAAO,QAAQ,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC;AACjC;AACA;AACA,SAAS,mBAAmB,CAAC,KAAK,EAAE;AACpC,CAAC,OAAO,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC;AACtC;;;;"}

package/build/server/chunks/chunks/token2.server.js-DXjudKNU.js

@@ -1,44 +0,0 @@
-import { b as private_env } from './shared-server.js-HBAhbQ8m.js';
-import { c as createTokenCodec } from './token-codec.js-CxK2DiO-.js';
-
-//#region src/lib/server/invites/token.server.ts
-/**
-* Invite-token primitives — thin binding over `@selvajs/server/tokens`
-* (`createTokenCodec`), mirroring the share-link design (see
-* `shareLinks/token.server.ts`).
-*
-* ## Format
-*   raw    = `invite_<base64url(32 random bytes)>`
-*   hash   = base64url( HMAC-SHA256(INVITE_TOKEN_SECRET, raw) )
-*
-* `INVITE_TOKEN_SECRET` falls back to `SELVA_HMAC_KEY` so single-tenant
-* deployments don't have to manage a third secret. Multi-tenant / production
-* setups should set both `SHARE_LINK_SECRET` and `INVITE_TOKEN_SECRET`
-* explicitly so they can be rotated independently — rotating one shouldn't
-* invalidate the other.
-*/
-var TOKEN_PREFIX = "invite_";
-var cached = null;
-function getCodec() {
-	const secret = private_env.INVITE_TOKEN_SECRET || private_env.SELVA_HMAC_KEY;
-	if (!secret) throw new Error("Missing required env var: INVITE_TOKEN_SECRET (or SELVA_HMAC_KEY as fallback). Generate with: openssl rand -base64 32");
-	if (cached?.secret !== secret) cached = {
-		secret,
-		codec: createTokenCodec({
-			prefix: TOKEN_PREFIX,
-			secret
-		})
-	};
-	return cached.codec;
-}
-/** Mint: generate a fresh raw token. Show to the recipient exactly once. */
-function mintRawToken() {
-	return getCodec().mintRawToken();
-}
-/** Hash a raw token to its store-side representation. */
-function hashToken(raw) {
-	return getCodec().hashToken(raw);
-}
-
-export { hashToken as h, mintRawToken as m };
-//# sourceMappingURL=token2.server.js-DXjudKNU.js.map

package/build/server/chunks/chunks/token2.server.js-DXjudKNU.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"token2.server.js-DXjudKNU.js","sources":["../../../../.svelte-kit/output/server/chunks/token2.server.js"],"sourcesContent":["import { t as private_env } from \"./shared-server.js\";\nimport { t as createTokenCodec } from \"./token-codec.js\";\n//#region src/lib/server/invites/token.server.ts\n/**\n* Invite-token primitives — thin binding over `@selvajs/server/tokens`\n* (`createTokenCodec`), mirroring the share-link design (see\n* `shareLinks/token.server.ts`).\n*\n* ## Format\n*   raw    = `invite_<base64url(32 random bytes)>`\n*   hash   = base64url( HMAC-SHA256(INVITE_TOKEN_SECRET, raw) )\n*\n* `INVITE_TOKEN_SECRET` falls back to `SELVA_HMAC_KEY` so single-tenant\n* deployments don't have to manage a third secret. Multi-tenant / production\n* setups should set both `SHARE_LINK_SECRET` and `INVITE_TOKEN_SECRET`\n* explicitly so they can be rotated independently — rotating one shouldn't\n* invalidate the other.\n*/\nvar TOKEN_PREFIX = \"invite_\";\nvar cached = null;\nfunction getCodec() {\n\tconst secret = private_env.INVITE_TOKEN_SECRET || private_env.SELVA_HMAC_KEY;\n\tif (!secret) throw new Error(\"Missing required env var: INVITE_TOKEN_SECRET (or SELVA_HMAC_KEY as fallback). Generate with: openssl rand -base64 32\");\n\tif (cached?.secret !== secret) cached = {\n\t\tsecret,\n\t\tcodec: createTokenCodec({\n\t\t\tprefix: TOKEN_PREFIX,\n\t\t\tsecret\n\t\t})\n\t};\n\treturn cached.codec;\n}\n/** Mint: generate a fresh raw token. Show to the recipient exactly once. */\nfunction mintRawToken() {\n\treturn getCodec().mintRawToken();\n}\n/** Hash a raw token to its store-side representation. */\nfunction hashToken(raw) {\n\treturn getCodec().hashToken(raw);\n}\n//#endregion\nexport { mintRawToken as n, hashToken as t };\n"],"names":[],"mappings":";;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,YAAY,GAAG,SAAS;AAC5B,IAAI,MAAM,GAAG,IAAI;AACjB,SAAS,QAAQ,GAAG;AACpB,CAAC,MAAM,MAAM,GAAG,WAAW,CAAC,mBAAmB,IAAI,WAAW,CAAC,cAAc;AAC7E,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,KAAK,CAAC,uHAAuH,CAAC;AACtJ,CAAC,IAAI,MAAM,EAAE,MAAM,KAAK,MAAM,EAAE,MAAM,GAAG;AACzC,EAAE,MAAM;AACR,EAAE,KAAK,EAAE,gBAAgB,CAAC;AAC1B,GAAG,MAAM,EAAE,YAAY;AACvB,GAAG;AACH,GAAG;AACH,EAAE;AACF,CAAC,OAAO,MAAM,CAAC,KAAK;AACpB;AACA;AACA,SAAS,YAAY,GAAG;AACxB,CAAC,OAAO,QAAQ,EAAE,CAAC,YAAY,EAAE;AACjC;AACA;AACA,SAAS,SAAS,CAAC,GAAG,EAAE;AACxB,CAAC,OAAO,QAAQ,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC;AACjC;;;;"}