@selvajs/selva 4.8.0 → 4.8.2

package/build/server/chunks/entries/endpoints/api/v1/compute/_server.ts.js-BvMZG8C_.js

@@ -0,0 +1,83 @@
+import { a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-BtMe4WGg.js';
+import { h as requireMaxBodySize } from '../../../../../chunks/admin-auth.server.js-Bebbe9ky.js';
+import { f as COMPUTE_REQUEST_MAX_BYTES } from '../../../../../chunks/computeLimits.js-DX7I53Ag.js';
+import { t as tryResolveShareToken } from '../../../../../chunks/resolve.server.js-DowwOYiM.js';
+import { r as runSolve, m as mapSolveError } from '../../../../../chunks/solve.server.js-BRfN6hQN.js';
+import '../../../../../chunks/src.js-BT_hYA9R.js';
+import 'zod';
+import '../../../../../chunks/providers.server.js-BpypQ-ag.js';
+import '../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../chunks/schema.js-BeFDxIuz.js';
+import '../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../chunks/utils2.js-BCcPTZc4.js';
+import '@sveltejs/kit';
+import 'node:dns/promises';
+import 'node:net';
+import '../../../../../chunks/token.server.js-BCOtTlyV.js';
+import '../../../../../chunks/token-codec.js-CxK2DiO-.js';
+import '../../../../../chunks/access.server.js-KIv3puod.js';
+import '../../../../../chunks/engine.server.js-DUbkj2fs.js';
+import 'node:zlib';
+import 'node:util';
+import '../../../../../chunks/compute.js-DWhW1bj0.js';
+
+//#region src/routes/api/v1/compute/+server.ts
+var POST = async ({ request, locals, url }) => {
+	requireMaxBodySize(request, COMPUTE_REQUEST_MAX_BYTES);
+	const loadStart = performance.now();
+	const prepMarks = [];
+	let prevMark = performance.now();
+	const mark = (label) => {
+		prepMarks.push([label, performance.now() - prevMark]);
+		prevMark = performance.now();
+	};
+	try {
+		const body = await request.json();
+		mark("body");
+		const { inputs, values } = body;
+		const definitionUrl = body.definitionUrl;
+		const channel = body.channel ?? "live";
+		const explicitVersionId = body.versionId ?? null;
+		if (!inputs || !values || !definitionUrl) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing required fields: inputs, values, or definitionUrl");
+		if (channel !== "live" && channel !== "draft") apiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid channel: ${channel}. Must be 'live' or 'draft'.`);
+		const isLocal = definitionUrl.startsWith("local:");
+		const guid = isLocal ? definitionUrl.substring(6) : null;
+		const sharedAccess = isLocal && guid && !explicitVersionId ? await tryResolveShareToken(request, url, guid, channel, { requireSolve: true }) : null;
+		mark("shareToken");
+		if (!sharedAccess && (!locals.ctx || !locals.user)) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
+		const access = sharedAccess ? {
+			kind: "share",
+			ctx: sharedAccess.ctx,
+			link: sharedAccess.link,
+			rateLimitKey: `share:${sharedAccess.link.id}`
+		} : {
+			kind: "user",
+			ctx: locals.ctx,
+			rateLimitKey: `user:${locals.user.id}`
+		};
+		return await runSolve({
+			access,
+			definitionUrl,
+			inputs,
+			values,
+			channel,
+			versionId: explicitVersionId,
+			request,
+			locals,
+			loadStart,
+			prepMarks
+		});
+	} catch (err) {
+		mapSolveError(err, locals);
+	}
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts.js-BvMZG8C_.js.map

package/build/server/chunks/entries/endpoints/api/v1/compute/_server.ts.js-BvMZG8C_.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-BvMZG8C_.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/compute/_server.ts.js"],"sourcesContent":["import { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { s as requireMaxBodySize } from \"../../../../../chunks/admin-auth.server.js\";\nimport { n as COMPUTE_REQUEST_MAX_BYTES } from \"../../../../../chunks/computeLimits.js\";\nimport { t as tryResolveShareToken } from \"../../../../../chunks/resolve.server.js\";\nimport { n as runSolve, t as mapSolveError } from \"../../../../../chunks/solve.server.js\";\n//#region src/routes/api/v1/compute/+server.ts\nvar POST = async ({ request, locals, url }) => {\n\trequireMaxBodySize(request, COMPUTE_REQUEST_MAX_BYTES);\n\tconst loadStart = performance.now();\n\tconst prepMarks = [];\n\tlet prevMark = performance.now();\n\tconst mark = (label) => {\n\t\tprepMarks.push([label, performance.now() - prevMark]);\n\t\tprevMark = performance.now();\n\t};\n\ttry {\n\t\tconst body = await request.json();\n\t\tmark(\"body\");\n\t\tconst { inputs, values } = body;\n\t\tconst definitionUrl = body.definitionUrl;\n\t\tconst channel = body.channel ?? \"live\";\n\t\tconst explicitVersionId = body.versionId ?? null;\n\t\tif (!inputs || !values || !definitionUrl) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing required fields: inputs, values, or definitionUrl\");\n\t\tif (channel !== \"live\" && channel !== \"draft\") apiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid channel: ${channel}. Must be 'live' or 'draft'.`);\n\t\tconst isLocal = definitionUrl.startsWith(\"local:\");\n\t\tconst guid = isLocal ? definitionUrl.substring(6) : null;\n\t\tconst sharedAccess = isLocal && guid && !explicitVersionId ? await tryResolveShareToken(request, url, guid, channel, { requireSolve: true }) : null;\n\t\tmark(\"shareToken\");\n\t\tif (!sharedAccess && (!locals.ctx || !locals.user)) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n\t\tconst access = sharedAccess ? {\n\t\t\tkind: \"share\",\n\t\t\tctx: sharedAccess.ctx,\n\t\t\tlink: sharedAccess.link,\n\t\t\trateLimitKey: `share:${sharedAccess.link.id}`\n\t\t} : {\n\t\t\tkind: \"user\",\n\t\t\tctx: locals.ctx,\n\t\t\trateLimitKey: `user:${locals.user.id}`\n\t\t};\n\t\treturn await runSolve({\n\t\t\taccess,\n\t\t\tdefinitionUrl,\n\t\t\tinputs,\n\t\t\tvalues,\n\t\t\tchannel,\n\t\t\tversionId: explicitVersionId,\n\t\t\trequest,\n\t\t\tlocals,\n\t\t\tloadStart,\n\t\t\tprepMarks\n\t\t});\n\t} catch (err) {\n\t\tmapSolveError(err, locals);\n\t}\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKA;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AAC/C,CAAC,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,CAAC;AACvD,CAAC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;AACpC,CAAC,MAAM,SAAS,GAAG,EAAE;AACrB,CAAC,IAAI,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;AACjC,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK;AACzB,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC;AACvD,EAAE,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;AAC9B,CAAC,CAAC;AACF,CAAC,IAAI;AACL,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE;AACnC,EAAE,IAAI,CAAC,MAAM,CAAC;AACd,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI;AACjC,EAAE,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa;AAC1C,EAAE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM;AACxC,EAAE,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI;AAClD,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2DAA2D,CAAC;AACtJ,EAAE,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,OAAO,CAAC,4BAA4B,CAAC,CAAC;AACzJ,EAAE,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC;AACpD,EAAE,MAAM,IAAI,GAAG,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI;AAC1D,EAAE,MAAM,YAAY,GAAG,OAAO,IAAI,IAAI,IAAI,CAAC,iBAAiB,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI;AACrJ,EAAE,IAAI,CAAC,YAAY,CAAC;AACpB,EAAE,IAAI,CAAC,YAAY,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC9G,EAAE,MAAM,MAAM,GAAG,YAAY,GAAG;AAChC,GAAG,IAAI,EAAE,OAAO;AAChB,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,IAAI,EAAE,YAAY,CAAC,IAAI;AAC1B,GAAG,YAAY,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;AAC/C,GAAG,GAAG;AACN,GAAG,IAAI,EAAE,MAAM;AACf,GAAG,GAAG,EAAE,MAAM,CAAC,GAAG;AAClB,GAAG,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;AACxC,GAAG;AACH,EAAE,OAAO,MAAM,QAAQ,CAAC;AACxB,GAAG,MAAM;AACT,GAAG,aAAa;AAChB,GAAG,MAAM;AACT,GAAG,MAAM;AACT,GAAG,OAAO;AACV,GAAG,SAAS,EAAE,iBAAiB;AAC/B,GAAG,OAAO;AACV,GAAG,MAAM;AACT,GAAG,SAAS;AACZ,GAAG;AACH,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC;AAC5B,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/compute/schema/_server.ts.js-BHEw2UwC.js

@@ -0,0 +1,61 @@
+import { E as postSchemaFormData, S as SchemaExtractionError, F as assertCamelCaseSchema } from '../../../../../../chunks/providers.server.js-BpypQ-ag.js';
+import { n as requireCanCreateDefinition } from '../../../../../../chunks/access.server.js-KIv3puod.js';
+import { a as apiError, r as resolveServerForOrg, C as ComputeServerUnconfiguredError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-BtMe4WGg.js';
+import { h as requireMaxBodySize } from '../../../../../../chunks/admin-auth.server.js-Bebbe9ky.js';
+import { g as MAX_DEFINITION_FILE_SIZE } from '../../../../../../chunks/computeLimits.js-DX7I53Ag.js';
+import '../../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../../chunks/src.js-BT_hYA9R.js';
+import 'zod';
+import '../../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../../chunks/schema.js-BeFDxIuz.js';
+import '../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '../../../../../../chunks/utils2.js-BCcPTZc4.js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/api/v1/compute/schema/+server.ts
+var MULTIPART_OVERHEAD = 1048576;
+var POST = async ({ request, locals, url }) => {
+	const projectId = url.searchParams.get("projectId");
+	if (!projectId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "projectId query parameter is required");
+	requireMaxBodySize(request, MAX_DEFINITION_FILE_SIZE + MULTIPART_OVERHEAD);
+	const { project } = await requireCanCreateDefinition(locals, projectId);
+	const computeServerId = url.searchParams.get("computeServerId");
+	let server;
+	try {
+		server = await resolveServerForOrg(locals.ctx, project.orgId, { definitionPin: computeServerId });
+	} catch (err) {
+		if (err instanceof ComputeServerUnconfiguredError) apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, err.message);
+		throw err;
+	}
+	const formData = await request.formData();
+	let results;
+	try {
+		results = await postSchemaFormData(formData, server);
+	} catch (err) {
+		if (err instanceof SchemaExtractionError) apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, err.message);
+		throw err;
+	}
+	const schemas = results.flatMap((r) => r.schemas ?? []);
+	if (schemas.length === 0) {
+		const diagnosis = results.map((r) => r.error).filter(Boolean);
+		apiError(422, ApiErrorCode.UNPROCESSABLE, diagnosis.length > 0 ? diagnosis.join("\n") : "No schemas found in definition");
+	}
+	try {
+		schemas.forEach(assertCamelCaseSchema);
+	} catch (err) {
+		if (err instanceof SchemaExtractionError) apiError(422, ApiErrorCode.UNPROCESSABLE, err.message);
+		throw err;
+	}
+	return new Response(JSON.stringify(schemas), { headers: { "Content-Type": "application/json" } });
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts.js-BHEw2UwC.js.map

package/build/server/chunks/entries/endpoints/api/v1/compute/schema/_server.ts.js-BHEw2UwC.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-BHEw2UwC.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/compute/schema/_server.ts.js"],"sourcesContent":["import { A as SchemaExtractionError, N as postSchemaFormData, j as assertCamelCaseSchema } from \"../../../../../../chunks/providers.server.js\";\nimport { s as requireCanCreateDefinition } from \"../../../../../../chunks/access.server.js\";\nimport { a as ComputeServerUnconfiguredError, n as apiError, o as resolveServerForOrg, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { s as requireMaxBodySize } from \"../../../../../../chunks/admin-auth.server.js\";\nimport { a as MAX_DEFINITION_FILE_SIZE } from \"../../../../../../chunks/computeLimits.js\";\n//#region src/routes/api/v1/compute/schema/+server.ts\nvar MULTIPART_OVERHEAD = 1048576;\nvar POST = async ({ request, locals, url }) => {\n\tconst projectId = url.searchParams.get(\"projectId\");\n\tif (!projectId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"projectId query parameter is required\");\n\trequireMaxBodySize(request, MAX_DEFINITION_FILE_SIZE + MULTIPART_OVERHEAD);\n\tconst { project } = await requireCanCreateDefinition(locals, projectId);\n\tconst computeServerId = url.searchParams.get(\"computeServerId\");\n\tlet server;\n\ttry {\n\t\tserver = await resolveServerForOrg(locals.ctx, project.orgId, { definitionPin: computeServerId });\n\t} catch (err) {\n\t\tif (err instanceof ComputeServerUnconfiguredError) apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, err.message);\n\t\tthrow err;\n\t}\n\tconst formData = await request.formData();\n\tlet results;\n\ttry {\n\t\tresults = await postSchemaFormData(formData, server);\n\t} catch (err) {\n\t\tif (err instanceof SchemaExtractionError) apiError(503, ApiErrorCode.COMPUTE_UNAVAILABLE, err.message);\n\t\tthrow err;\n\t}\n\tconst schemas = results.flatMap((r) => r.schemas ?? []);\n\tif (schemas.length === 0) {\n\t\tconst diagnosis = results.map((r) => r.error).filter(Boolean);\n\t\tapiError(422, ApiErrorCode.UNPROCESSABLE, diagnosis.length > 0 ? diagnosis.join(\"\\n\") : \"No schemas found in definition\");\n\t}\n\ttry {\n\t\tschemas.forEach(assertCamelCaseSchema);\n\t} catch (err) {\n\t\tif (err instanceof SchemaExtractionError) apiError(422, ApiErrorCode.UNPROCESSABLE, err.message);\n\t\tthrow err;\n\t}\n\treturn new Response(JSON.stringify(schemas), { headers: { \"Content-Type\": \"application/json\" } });\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAKA;AACA,IAAI,kBAAkB,GAAG,OAAO;AAC7B,IAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AAC/C,CAAC,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC;AACpD,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,uCAAuC,CAAC;AACvG,CAAC,kBAAkB,CAAC,OAAO,EAAE,wBAAwB,GAAG,kBAAkB,CAAC;AAC3E,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,SAAS,CAAC;AACxE,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC;AAChE,CAAC,IAAI,MAAM;AACX,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC;AACnG,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,IAAI,GAAG,YAAY,8BAA8B,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,mBAAmB,EAAE,GAAG,CAAC,OAAO,CAAC;AACjH,EAAE,MAAM,GAAG;AACX,CAAC;AACD,CAAC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;AAC1C,CAAC,IAAI,OAAO;AACZ,CAAC,IAAI;AACL,EAAE,OAAO,GAAG,MAAM,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC;AACtD,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,IAAI,GAAG,YAAY,qBAAqB,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,mBAAmB,EAAE,GAAG,CAAC,OAAO,CAAC;AACxG,EAAE,MAAM,GAAG;AACX,CAAC;AACD,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;AACxD,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE;AAC3B,EAAE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;AAC/D,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,aAAa,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,gCAAgC,CAAC;AAC3H,CAAC;AACD,CAAC,IAAI;AACL,EAAE,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC;AACxC,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,IAAI,GAAG,YAAY,qBAAqB,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC;AAClG,EAAE,MAAM,GAAG;AACX,CAAC;AACD,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC;AAClG;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/_server.ts.js-CqpkXcBj.js

@@ -0,0 +1,63 @@
+import { G as GuidSchema, k as UpdateMetadataInputSchema } from '../../../../../../chunks/src.js-BT_hYA9R.js';
+import { o as getDefinitionMeta, G as getDefinitionService } from '../../../../../../chunks/providers.server.js-BpypQ-ag.js';
+import { o as requireEditableDefinition } from '../../../../../../chunks/access.server.js-KIv3puod.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-BtMe4WGg.js';
+import { g as getVisibleDefinition } from '../../../../../../chunks/visibility.server.js-Cww3wle8.js';
+import { a as apiRoute, p as parseParam, r as requireCaller, n as noContent, e as parseBody } from '../../../../../../chunks/route.js-DglhoMVE.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../../chunks/schema.js-BeFDxIuz.js';
+import '../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/utils2.js-BCcPTZc4.js';
+
+//#region src/routes/api/v1/definitions/[guid]/+server.ts
+/** `schema` is a large blob, served on demand by `/versions/{versionId}/schema`. */
+function versionSummary(v) {
+	return {
+		id: v.id,
+		versionNumber: v.versionNumber,
+		uploadedAt: v.uploadedAt,
+		uploadedBy: v.uploadedBy,
+		changeNote: v.changeNote
+	};
+}
+/** The record plus its live and draft version summaries. */
+var GET = apiRoute("Failed to load definition", async ({ params, locals }) => {
+	const guid = parseParam(params.guid, GuidSchema, "GUID");
+	const { ctx } = requireCaller(locals);
+	const record = await getVisibleDefinition(ctx, guid);
+	if (!record) apiError(404, ApiErrorCode.NOT_FOUND, "Definition not found");
+	const meta = getDefinitionMeta();
+	const [liveVersion, draftVersion] = await Promise.all([record.liveVersionId ? meta.getVersion(ctx, record.liveVersionId) : null, record.draftVersionId ? meta.getVersion(ctx, record.draftVersionId) : null]);
+	return json({
+		...record,
+		liveVersion: liveVersion ? versionSummary(liveVersion) : null,
+		draftVersion: draftVersion ? versionSummary(draftVersion) : null
+	});
+});
+/** Soft-delete the definition; versions and blobs are wiped with it. */
+var DELETE = apiRoute("Failed to delete definition", async ({ params, locals }) => {
+	const guid = parseParam(params.guid, GuidSchema, "GUID");
+	const { ctx } = await requireEditableDefinition(locals, guid);
+	await getDefinitionService().delete(ctx, guid);
+	return noContent();
+});
+/** Metadata only. New versions POST to `/versions`. */
+var PATCH = apiRoute("Failed to update definition", async ({ params, request, locals }) => {
+	const guid = parseParam(params.guid, GuidSchema, "GUID");
+	const { ctx } = await requireEditableDefinition(locals, guid);
+	const patch = await parseBody(request, UpdateMetadataInputSchema);
+	await getDefinitionService().updateMeta(ctx, guid, patch);
+	return noContent();
+});
+
+export { DELETE, GET, PATCH };
+//# sourceMappingURL=_server.ts.js-CqpkXcBj.js.map

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/_server.ts.js-CqpkXcBj.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CqpkXcBj.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/definitions/_guid_/_server.ts.js"],"sourcesContent":["import { l as UpdateMetadataInputSchema, s as GuidSchema } from \"../../../../../../chunks/src.js\";\nimport { c as getDefinitionService, s as getDefinitionMeta } from \"../../../../../../chunks/providers.server.js\";\nimport { _ as requireEditableDefinition } from \"../../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport \"../../../../../../chunks/definitions.js\";\nimport { t as getVisibleDefinition } from \"../../../../../../chunks/visibility.server.js\";\nimport { a as noContent, c as requireCaller, o as parseBody, s as parseParam, t as apiRoute } from \"../../../../../../chunks/route.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/v1/definitions/[guid]/+server.ts\n/** `schema` is a large blob, served on demand by `/versions/{versionId}/schema`. */\nfunction versionSummary(v) {\n\treturn {\n\t\tid: v.id,\n\t\tversionNumber: v.versionNumber,\n\t\tuploadedAt: v.uploadedAt,\n\t\tuploadedBy: v.uploadedBy,\n\t\tchangeNote: v.changeNote\n\t};\n}\n/** The record plus its live and draft version summaries. */\nvar GET = apiRoute(\"Failed to load definition\", async ({ params, locals }) => {\n\tconst guid = parseParam(params.guid, GuidSchema, \"GUID\");\n\tconst { ctx } = requireCaller(locals);\n\tconst record = await getVisibleDefinition(ctx, guid);\n\tif (!record) apiError(404, ApiErrorCode.NOT_FOUND, \"Definition not found\");\n\tconst meta = getDefinitionMeta();\n\tconst [liveVersion, draftVersion] = await Promise.all([record.liveVersionId ? meta.getVersion(ctx, record.liveVersionId) : null, record.draftVersionId ? meta.getVersion(ctx, record.draftVersionId) : null]);\n\treturn json({\n\t\t...record,\n\t\tliveVersion: liveVersion ? versionSummary(liveVersion) : null,\n\t\tdraftVersion: draftVersion ? versionSummary(draftVersion) : null\n\t});\n});\n/** Soft-delete the definition; versions and blobs are wiped with it. */\nvar DELETE = apiRoute(\"Failed to delete definition\", async ({ params, locals }) => {\n\tconst guid = parseParam(params.guid, GuidSchema, \"GUID\");\n\tconst { ctx } = await requireEditableDefinition(locals, guid);\n\tawait getDefinitionService().delete(ctx, guid);\n\treturn noContent();\n});\n/** Metadata only. New versions POST to `/versions`. */\nvar PATCH = apiRoute(\"Failed to update definition\", async ({ params, request, locals }) => {\n\tconst guid = parseParam(params.guid, GuidSchema, \"GUID\");\n\tconst { ctx } = await requireEditableDefinition(locals, guid);\n\tconst patch = await parseBody(request, UpdateMetadataInputSchema);\n\tawait getDefinitionService().updateMeta(ctx, guid, patch);\n\treturn noContent();\n});\n//#endregion\nexport { DELETE, GET, PATCH };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAQA;AACA;AACA,SAAS,cAAc,CAAC,CAAC,EAAE;AAC3B,CAAC,OAAO;AACR,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;AACV,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa;AAChC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;AAC1B,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;AAC1B,EAAE,UAAU,EAAE,CAAC,CAAC;AAChB,EAAE;AACF;AACA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,2BAA2B,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC9E,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AACzD,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AACtC,CAAC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC;AACrD,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,sBAAsB,CAAC;AAC3E,CAAC,MAAM,IAAI,GAAG,iBAAiB,EAAE;AACjC,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9M,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,GAAG,MAAM;AACX,EAAE,WAAW,EAAE,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI;AAC/D,EAAE,YAAY,EAAE,YAAY,GAAG,cAAc,CAAC,YAAY,CAAC,GAAG;AAC9D,EAAE,CAAC;AACH,CAAC;AACD;AACG,IAAC,MAAM,GAAG,QAAQ,CAAC,6BAA6B,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AACnF,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AACzD,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC;AAC9D,CAAC,MAAM,oBAAoB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC;AAC/C,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;AACD;AACG,IAAC,KAAK,GAAG,QAAQ,CAAC,6BAA6B,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC3F,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AACzD,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC;AAC9D,CAAC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,yBAAyB,CAAC;AAClE,CAAC,MAAM,oBAAoB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC;AAC1D,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/image/_server.ts.js-ZOoGqeVd.js

@@ -0,0 +1,37 @@
+import { G as GuidSchema } from '../../../../../../../chunks/src.js-BT_hYA9R.js';
+import { G as getDefinitionService } from '../../../../../../../chunks/providers.server.js-BpypQ-ag.js';
+import { o as requireEditableDefinition } from '../../../../../../../chunks/access.server.js-KIv3puod.js';
+import { M as MAX_IMAGE_FILE_SIZE } from '../../../../../../../chunks/computeLimits.js-DX7I53Ag.js';
+import { a as apiRoute, p as parseParam, b as requireUpload } from '../../../../../../../chunks/route.js-DglhoMVE.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../../../chunks/schema.js-BeFDxIuz.js';
+import '../../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../../chunks/api-errors.js-BtMe4WGg.js';
+import '../../../../../../../chunks/utils2.js-BCcPTZc4.js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/api/v1/definitions/[guid]/image/+server.ts
+/** Upload a cover image. */
+var POST = apiRoute("Failed to upload image", async ({ params, request, locals }) => {
+	const guid = parseParam(params.guid, GuidSchema, "GUID");
+	const { ctx } = await requireEditableDefinition(locals, guid);
+	const { file } = requireUpload(await request.formData(), "image", {
+		maxBytes: MAX_IMAGE_FILE_SIZE,
+		label: "Image"
+	});
+	const data = new Uint8Array(await file.arrayBuffer());
+	return json({ coverImage: await getDefinitionService().saveCoverImage(ctx, guid, data) });
+});
+
+export { POST };
+//# sourceMappingURL=_server.ts.js-ZOoGqeVd.js.map

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/image/_server.ts.js-ZOoGqeVd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-ZOoGqeVd.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/definitions/_guid_/image/_server.ts.js"],"sourcesContent":["import { s as GuidSchema } from \"../../../../../../../chunks/src.js\";\nimport { c as getDefinitionService } from \"../../../../../../../chunks/providers.server.js\";\nimport { _ as requireEditableDefinition } from \"../../../../../../../chunks/access.server.js\";\nimport { o as MAX_IMAGE_FILE_SIZE } from \"../../../../../../../chunks/computeLimits.js\";\nimport \"../../../../../../../chunks/definitions.js\";\nimport \"../../../../../../../chunks/admin-config.js\";\nimport { s as parseParam, t as apiRoute, u as requireUpload } from \"../../../../../../../chunks/route.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/v1/definitions/[guid]/image/+server.ts\n/** Upload a cover image. */\nvar POST = apiRoute(\"Failed to upload image\", async ({ params, request, locals }) => {\n\tconst guid = parseParam(params.guid, GuidSchema, \"GUID\");\n\tconst { ctx } = await requireEditableDefinition(locals, guid);\n\tconst { file } = requireUpload(await request.formData(), \"image\", {\n\t\tmaxBytes: MAX_IMAGE_FILE_SIZE,\n\t\tlabel: \"Image\"\n\t});\n\tconst data = new Uint8Array(await file.arrayBuffer());\n\treturn json({ coverImage: await getDefinitionService().saveCoverImage(ctx, guid, data) });\n});\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAQA;AACA;AACG,IAAC,IAAI,GAAG,QAAQ,CAAC,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrF,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AACzD,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC;AAC9D,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE;AACnE,EAAE,QAAQ,EAAE,mBAAmB;AAC/B,EAAE,KAAK,EAAE;AACT,EAAE,CAAC;AACH,CAAC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC,OAAO,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,oBAAoB,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;AAC1F,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/publish/_server.ts.js-DOAaHMMo.js

@@ -0,0 +1,33 @@
+import { G as GuidSchema, l as PublishVersionInputSchema } from '../../../../../../../chunks/src.js-BT_hYA9R.js';
+import { G as getDefinitionService } from '../../../../../../../chunks/providers.server.js-BpypQ-ag.js';
+import { o as requireEditableDefinition } from '../../../../../../../chunks/access.server.js-KIv3puod.js';
+import { a as apiRoute, p as parseParam, e as parseBody } from '../../../../../../../chunks/route.js-DglhoMVE.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../../../chunks/schema.js-BeFDxIuz.js';
+import '../../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../../chunks/api-errors.js-BtMe4WGg.js';
+import '../../../../../../../chunks/utils2.js-BCcPTZc4.js';
+
+//#region src/routes/api/v1/definitions/[guid]/publish/+server.ts
+/**
+* Advance the live channel. Body `{ versionId? }` targets a specific version
+* (rollback or forward-roll); omit it to promote the current draft.
+*/
+var POST = apiRoute("Failed to publish version", async ({ params, request, locals }) => {
+	const guid = parseParam(params.guid, GuidSchema, "GUID");
+	const { versionId } = await parseBody(request, PublishVersionInputSchema, { missingAs: {} });
+	const { ctx } = await requireEditableDefinition(locals, guid);
+	return json({ version: await getDefinitionService().publish(ctx, guid, versionId) });
+});
+
+export { POST };
+//# sourceMappingURL=_server.ts.js-DOAaHMMo.js.map

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/publish/_server.ts.js-DOAaHMMo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-DOAaHMMo.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/definitions/_guid_/publish/_server.ts.js"],"sourcesContent":["import { c as PublishVersionInputSchema, s as GuidSchema } from \"../../../../../../../chunks/src.js\";\nimport { c as getDefinitionService } from \"../../../../../../../chunks/providers.server.js\";\nimport { _ as requireEditableDefinition } from \"../../../../../../../chunks/access.server.js\";\nimport \"../../../../../../../chunks/definitions.js\";\nimport { o as parseBody, s as parseParam, t as apiRoute } from \"../../../../../../../chunks/route.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/v1/definitions/[guid]/publish/+server.ts\n/**\n* Advance the live channel. Body `{ versionId? }` targets a specific version\n* (rollback or forward-roll); omit it to promote the current draft.\n*/\nvar POST = apiRoute(\"Failed to publish version\", async ({ params, request, locals }) => {\n\tconst guid = parseParam(params.guid, GuidSchema, \"GUID\");\n\tconst { versionId } = await parseBody(request, PublishVersionInputSchema, { missingAs: {} });\n\tconst { ctx } = await requireEditableDefinition(locals, guid);\n\treturn json({ version: await getDefinitionService().publish(ctx, guid, versionId) });\n});\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAMA;AACA;AACA;AACA;AACA;AACG,IAAC,IAAI,GAAG,QAAQ,CAAC,2BAA2B,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACxF,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AACzD,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,yBAAyB,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AAC7F,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC;AAC9D,CAAC,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,oBAAoB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;AACrF,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/schema/_server.ts.js-qpus6Drw.js

@@ -0,0 +1,39 @@
+import { G as GuidSchema } from '../../../../../../../chunks/src.js-BT_hYA9R.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../../chunks/api-errors.js-BtMe4WGg.js';
+import { g as getVisibleDefinition, a as loadVisibleVersion } from '../../../../../../../chunks/visibility.server.js-Cww3wle8.js';
+import { a as apiRoute, p as parseParam, r as requireCaller } from '../../../../../../../chunks/route.js-DglhoMVE.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../../../chunks/providers.server.js-BpypQ-ag.js';
+import '../../../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../../../chunks/schema.js-BeFDxIuz.js';
+import '../../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../../chunks/utils2.js-BCcPTZc4.js';
+import '../../../../../../../chunks/access.server.js-KIv3puod.js';
+
+//#region src/routes/api/v1/definitions/[guid]/schema/+server.ts
+/**
+* Convenience alias for the live version's schema — the call a client makes
+* before solving. The canonical location is `/versions/{versionId}/schema`;
+* this resolves the `live` pointer for you.
+*/
+var GET = apiRoute("Failed to load definition schema", async ({ params, locals }) => {
+	const guid = parseParam(params.guid, GuidSchema, "GUID");
+	const { ctx } = requireCaller(locals);
+	const record = await getVisibleDefinition(ctx, guid);
+	if (!record) apiError(404, ApiErrorCode.NOT_FOUND, "Definition not found");
+	if (!record.liveVersionId) apiError(404, ApiErrorCode.NOT_FOUND, "This definition has no published version");
+	const version = await loadVisibleVersion(ctx, guid, record.liveVersionId);
+	if (!version?.schema) apiError(404, ApiErrorCode.NOT_FOUND, "No schema cached for the live version");
+	return json(version.schema);
+});
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-qpus6Drw.js.map

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/schema/_server.ts.js-qpus6Drw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-qpus6Drw.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/definitions/_guid_/schema/_server.ts.js"],"sourcesContent":["import { s as GuidSchema } from \"../../../../../../../chunks/src.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../../chunks/api-errors.js\";\nimport \"../../../../../../../chunks/definitions.js\";\nimport { r as loadVisibleVersion, t as getVisibleDefinition } from \"../../../../../../../chunks/visibility.server.js\";\nimport { c as requireCaller, s as parseParam, t as apiRoute } from \"../../../../../../../chunks/route.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/v1/definitions/[guid]/schema/+server.ts\n/**\n* Convenience alias for the live version's schema — the call a client makes\n* before solving. The canonical location is `/versions/{versionId}/schema`;\n* this resolves the `live` pointer for you.\n*/\nvar GET = apiRoute(\"Failed to load definition schema\", async ({ params, locals }) => {\n\tconst guid = parseParam(params.guid, GuidSchema, \"GUID\");\n\tconst { ctx } = requireCaller(locals);\n\tconst record = await getVisibleDefinition(ctx, guid);\n\tif (!record) apiError(404, ApiErrorCode.NOT_FOUND, \"Definition not found\");\n\tif (!record.liveVersionId) apiError(404, ApiErrorCode.NOT_FOUND, \"This definition has no published version\");\n\tconst version = await loadVisibleVersion(ctx, guid, record.liveVersionId);\n\tif (!version?.schema) apiError(404, ApiErrorCode.NOT_FOUND, \"No schema cached for the live version\");\n\treturn json(version.schema);\n});\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAMA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,kCAAkC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AACrF,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AACzD,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AACtC,CAAC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC;AACrD,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,sBAAsB,CAAC;AAC3E,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,0CAA0C,CAAC;AAC7G,CAAC,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,aAAa,CAAC;AAC1E,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,uCAAuC,CAAC;AACrG,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;AAC5B,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/share-links/_linkId_/_server.ts.js-DqC52TdS.js

@@ -0,0 +1,39 @@
+import { G as GuidSchema } from '../../../../../../../../chunks/src.js-BT_hYA9R.js';
+import { k as flag, p as providers } from '../../../../../../../../chunks/providers.server.js-BpypQ-ag.js';
+import { o as requireEditableDefinition } from '../../../../../../../../chunks/access.server.js-KIv3puod.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../../../chunks/api-errors.js-BtMe4WGg.js';
+import { a as apiRoute, p as parseParam, n as noContent } from '../../../../../../../../chunks/route.js-DglhoMVE.js';
+import 'zod';
+import '../../../../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../../../../chunks/schema.js-BeFDxIuz.js';
+import '../../../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '../../../../../../../../chunks/utils2.js-BCcPTZc4.js';
+
+//#region src/routes/api/v1/definitions/[guid]/share-links/[linkId]/+server.ts
+/**
+* Revoke a share link (soft-delete). Idempotent, gated by `canEditDefinition`.
+*
+* The link must belong to this definition, so one definition's editor cannot
+* revoke another's link with a guessed or leaked linkId.
+*/
+var DELETE = apiRoute("Failed to revoke share link", async ({ params, locals }) => {
+	if (!flag("ENABLE_SHARING")) apiError(404, ApiErrorCode.NOT_FOUND, "Share links are disabled on this instance (ENABLE_SHARING).");
+	const guid = parseParam(params.guid, GuidSchema, "GUID");
+	const linkId = parseParam(params.linkId, GuidSchema, "link ID");
+	const { ctx } = await requireEditableDefinition(locals, guid);
+	const existing = await providers.data.shareLinks.getById(ctx, linkId);
+	if (!existing || existing.definitionId !== guid) apiError(404, ApiErrorCode.NOT_FOUND, "Share link not found.");
+	await providers.data.shareLinks.revoke(ctx, linkId);
+	return noContent();
+});
+
+export { DELETE };
+//# sourceMappingURL=_server.ts.js-DqC52TdS.js.map

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/share-links/_linkId_/_server.ts.js-DqC52TdS.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-DqC52TdS.js","sources":["../../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/definitions/_guid_/share-links/_linkId_/_server.ts.js"],"sourcesContent":["import { s as GuidSchema } from \"../../../../../../../../chunks/src.js\";\nimport { C as providers, t as flag } from \"../../../../../../../../chunks/providers.server.js\";\nimport { _ as requireEditableDefinition } from \"../../../../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../../../chunks/api-errors.js\";\nimport \"../../../../../../../../chunks/definitions.js\";\nimport { a as noContent, s as parseParam, t as apiRoute } from \"../../../../../../../../chunks/route.js\";\n//#region src/routes/api/v1/definitions/[guid]/share-links/[linkId]/+server.ts\n/**\n* Revoke a share link (soft-delete). Idempotent, gated by `canEditDefinition`.\n*\n* The link must belong to this definition, so one definition's editor cannot\n* revoke another's link with a guessed or leaked linkId.\n*/\nvar DELETE = apiRoute(\"Failed to revoke share link\", async ({ params, locals }) => {\n\tif (!flag(\"ENABLE_SHARING\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Share links are disabled on this instance (ENABLE_SHARING).\");\n\tconst guid = parseParam(params.guid, GuidSchema, \"GUID\");\n\tconst linkId = parseParam(params.linkId, GuidSchema, \"link ID\");\n\tconst { ctx } = await requireEditableDefinition(locals, guid);\n\tconst existing = await providers.data.shareLinks.getById(ctx, linkId);\n\tif (!existing || existing.definitionId !== guid) apiError(404, ApiErrorCode.NOT_FOUND, \"Share link not found.\");\n\tawait providers.data.shareLinks.revoke(ctx, linkId);\n\treturn noContent();\n});\n//#endregion\nexport { DELETE };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAMA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,MAAM,GAAG,QAAQ,CAAC,6BAA6B,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AACnF,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,6DAA6D,CAAC;AAClI,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AACzD,CAAC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC;AAChE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC;AAC9D,CAAC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC;AACtE,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,KAAK,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,uBAAuB,CAAC;AAChH,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC;AACpD,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/share-links/_server.ts.js-C6X94r1j.js

@@ -0,0 +1,81 @@
+import { G as GuidSchema, m as CreateShareLinkInputSchema } from '../../../../../../../chunks/src.js-BT_hYA9R.js';
+import { p as providers, k as flag } from '../../../../../../../chunks/providers.server.js-BpypQ-ag.js';
+import { D as DEFAULT_SHARE_LINK_MAX_SOLVES } from '../../../../../../../chunks/types.js-B_zdqlv_.js';
+import { o as requireEditableDefinition } from '../../../../../../../chunks/access.server.js-KIv3puod.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../../chunks/api-errors.js-BtMe4WGg.js';
+import { m as mintRawToken, h as hashToken } from '../../../../../../../chunks/token.server.js-BCOtTlyV.js';
+import { a as parseListOptions } from '../../../../../../../chunks/pagination.server.js-B3tH2LPH.js';
+import { a as apiRoute, p as parseParam, s as shapedCollection, e as parseBody, g as shaped } from '../../../../../../../chunks/route.js-DglhoMVE.js';
+import { S as ShareLinkResponseSchema, C as CreatedShareLinkResponseSchema } from '../../../../../../../chunks/responses.js-CfP2Jx_z.js';
+import { randomUUID } from 'node:crypto';
+import 'zod';
+import '../../../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../../../chunks/schema.js-BeFDxIuz.js';
+import '../../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '../../../../../../../chunks/utils2.js-BCcPTZc4.js';
+import '../../../../../../../chunks/token-codec.js-CxK2DiO-.js';
+
+//#region src/routes/api/v1/definitions/[guid]/share-links/+server.ts
+/**
+* Share-link administration.
+*
+* Minting, listing and revoking are gated by `canEditDefinition` — the same
+* authority that uploads versions and publishes. The raw token appears in the
+* POST response and nowhere else; everything afterwards sees `hasToken: true`.
+*/
+function assertSharingEnabled() {
+	if (!flag("ENABLE_SHARING")) apiError(404, ApiErrorCode.NOT_FOUND, "Share links are disabled on this instance (ENABLE_SHARING).");
+}
+/** `tokenHash` is dropped by the response schema, not by this function. */
+function forClient(link) {
+	return {
+		...link,
+		hasToken: true
+	};
+}
+var GET = apiRoute("Failed to list share links", async ({ params, locals, url }) => {
+	assertSharingEnabled();
+	const guid = parseParam(params.guid, GuidSchema, "GUID");
+	const { ctx } = await requireEditableDefinition(locals, guid);
+	const page = await providers.data.shareLinks.listByDefinition(ctx, guid, parseListOptions(url));
+	return shapedCollection(ShareLinkResponseSchema, {
+		items: page.items.map(forClient),
+		nextCursor: page.nextCursor
+	});
+});
+var POST = apiRoute("Failed to create share link", async ({ params, request, locals }) => {
+	assertSharingEnabled();
+	const guid = parseParam(params.guid, GuidSchema, "GUID");
+	const { ctx } = await requireEditableDefinition(locals, guid);
+	const input = await parseBody(request, CreateShareLinkInputSchema, { missingAs: {} });
+	const raw = mintRawToken();
+	const link = {
+		id: randomUUID(),
+		definitionId: guid,
+		channel: input.channel,
+		tokenHash: hashToken(raw),
+		name: input.name,
+		createdBy: locals.user.id,
+		createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+		expiresAt: input.expiresAt ?? null,
+		revokedAt: null,
+		allowSolve: input.allowSolve,
+		maxSolves: input.maxSolves === void 0 ? DEFAULT_SHARE_LINK_MAX_SOLVES : input.maxSolves,
+		solveCount: 0
+	};
+	await providers.data.shareLinks.create(ctx, link);
+	return shaped(CreatedShareLinkResponseSchema, {
+		link: forClient(link),
+		token: raw
+	}, 201);
+});
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-C6X94r1j.js.map

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/share-links/_server.ts.js-C6X94r1j.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-C6X94r1j.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/definitions/_guid_/share-links/_server.ts.js"],"sourcesContent":["import { a as CreateShareLinkInputSchema, s as GuidSchema } from \"../../../../../../../chunks/src.js\";\nimport { C as providers, t as flag } from \"../../../../../../../chunks/providers.server.js\";\nimport { t as DEFAULT_SHARE_LINK_MAX_SOLVES } from \"../../../../../../../chunks/types.js\";\nimport { _ as requireEditableDefinition } from \"../../../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../../chunks/api-errors.js\";\nimport { r as mintRawToken, t as hashToken } from \"../../../../../../../chunks/token.server.js\";\nimport \"../../../../../../../chunks/definitions.js\";\nimport { n as parseListOptions } from \"../../../../../../../chunks/pagination.server.js\";\nimport { d as shaped, f as shapedCollection, o as parseBody, s as parseParam, t as apiRoute } from \"../../../../../../../chunks/route.js\";\nimport { a as ShareLinkResponseSchema, n as CreatedShareLinkResponseSchema } from \"../../../../../../../chunks/responses.js\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/api/v1/definitions/[guid]/share-links/+server.ts\n/**\n* Share-link administration.\n*\n* Minting, listing and revoking are gated by `canEditDefinition` — the same\n* authority that uploads versions and publishes. The raw token appears in the\n* POST response and nowhere else; everything afterwards sees `hasToken: true`.\n*/\nfunction assertSharingEnabled() {\n\tif (!flag(\"ENABLE_SHARING\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Share links are disabled on this instance (ENABLE_SHARING).\");\n}\n/** `tokenHash` is dropped by the response schema, not by this function. */\nfunction forClient(link) {\n\treturn {\n\t\t...link,\n\t\thasToken: true\n\t};\n}\nvar GET = apiRoute(\"Failed to list share links\", async ({ params, locals, url }) => {\n\tassertSharingEnabled();\n\tconst guid = parseParam(params.guid, GuidSchema, \"GUID\");\n\tconst { ctx } = await requireEditableDefinition(locals, guid);\n\tconst page = await providers.data.shareLinks.listByDefinition(ctx, guid, parseListOptions(url));\n\treturn shapedCollection(ShareLinkResponseSchema, {\n\t\titems: page.items.map(forClient),\n\t\tnextCursor: page.nextCursor\n\t});\n});\nvar POST = apiRoute(\"Failed to create share link\", async ({ params, request, locals }) => {\n\tassertSharingEnabled();\n\tconst guid = parseParam(params.guid, GuidSchema, \"GUID\");\n\tconst { ctx } = await requireEditableDefinition(locals, guid);\n\tconst input = await parseBody(request, CreateShareLinkInputSchema, { missingAs: {} });\n\tconst raw = mintRawToken();\n\tconst link = {\n\t\tid: randomUUID(),\n\t\tdefinitionId: guid,\n\t\tchannel: input.channel,\n\t\ttokenHash: hashToken(raw),\n\t\tname: input.name,\n\t\tcreatedBy: locals.user.id,\n\t\tcreatedAt: (/* @__PURE__ */ new Date()).toISOString(),\n\t\texpiresAt: input.expiresAt ?? null,\n\t\trevokedAt: null,\n\t\tallowSolve: input.allowSolve,\n\t\tmaxSolves: input.maxSolves === void 0 ? DEFAULT_SHARE_LINK_MAX_SOLVES : input.maxSolves,\n\t\tsolveCount: 0\n\t};\n\tawait providers.data.shareLinks.create(ctx, link);\n\treturn shaped(CreatedShareLinkResponseSchema, {\n\t\tlink: forClient(link),\n\t\ttoken: raw\n\t}, 201);\n});\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAWA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,oBAAoB,GAAG;AAChC,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,6DAA6D,CAAC;AAClI;AACA;AACA,SAAS,SAAS,CAAC,IAAI,EAAE;AACzB,CAAC,OAAO;AACR,EAAE,GAAG,IAAI;AACT,EAAE,QAAQ,EAAE;AACZ,EAAE;AACF;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,4BAA4B,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACpF,CAAC,oBAAoB,EAAE;AACvB,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AACzD,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC;AAC9D,CAAC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;AAChG,CAAC,OAAO,gBAAgB,CAAC,uBAAuB,EAAE;AAClD,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;AAClC,EAAE,UAAU,EAAE,IAAI,CAAC;AACnB,EAAE,CAAC;AACH,CAAC;AACE,IAAC,IAAI,GAAG,QAAQ,CAAC,6BAA6B,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC1F,CAAC,oBAAoB,EAAE;AACvB,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AACzD,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC;AAC9D,CAAC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,0BAA0B,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AACtF,CAAC,MAAM,GAAG,GAAG,YAAY,EAAE;AAC3B,CAAC,MAAM,IAAI,GAAG;AACd,EAAE,EAAE,EAAE,UAAU,EAAE;AAClB,EAAE,YAAY,EAAE,IAAI;AACpB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;AACxB,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC;AAC3B,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;AAClB,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC3B,EAAE,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACvD,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;AACpC,EAAE,SAAS,EAAE,IAAI;AACjB,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU;AAC9B,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,GAAG,6BAA6B,GAAG,KAAK,CAAC,SAAS;AACzF,EAAE,UAAU,EAAE;AACd,EAAE;AACF,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC;AAClD,CAAC,OAAO,MAAM,CAAC,8BAA8B,EAAE;AAC/C,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC;AACvB,EAAE,KAAK,EAAE;AACT,EAAE,EAAE,GAAG,CAAC;AACR,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/solve/_server.ts.js-BmpSoUjd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-BmpSoUjd.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/definitions/_guid_/solve/_server.ts.js"],"sourcesContent":["import { n as apiError, t as ApiErrorCode } from \"../../../../../../../chunks/api-errors.js\";\nimport { s as requireMaxBodySize } from \"../../../../../../../chunks/admin-auth.server.js\";\nimport \"../../../../../../../chunks/compute.js\";\nimport { n as COMPUTE_REQUEST_MAX_BYTES } from \"../../../../../../../chunks/computeLimits.js\";\nimport { n as runSolve, t as mapSolveError } from \"../../../../../../../chunks/solve.server.js\";\nimport { c as requireCaller, l as requireParams, o as parseBody } from \"../../../../../../../chunks/route.js\";\nimport { a as SolveBodySchema } from \"../../../../../../../chunks/bodies.js\";\n/**\n* `T` is whatever the caller replays. It must not be a `Response` — a body can\n* only be read once, so the solve route stores a serialized snapshot instead.\n*/\nfunction createIdempotencyStore(config) {\n\tconst ttlMs = Math.max(0, Math.floor(config.ttlMs));\n\tconst maxKeys = Math.max(1, Math.floor(config.maxKeys ?? 1e4));\n\tconst sweepIntervalMs = Math.max(0, Math.floor(config.sweepIntervalMs ?? ttlMs));\n\tconst resolvedConfig = Object.freeze({\n\t\t...config,\n\t\tttlMs,\n\t\tmaxKeys,\n\t\tsweepIntervalMs\n\t});\n\tconst entries = /* @__PURE__ */ new Map();\n\tlet nextSweepAt = Number.POSITIVE_INFINITY;\n\tfunction maybeSweep(now, headroom = 0) {\n\t\tconst budget = Math.max(0, maxKeys - headroom);\n\t\tif (!(sweepIntervalMs > 0 && now >= nextSweepAt) && entries.size <= budget) return;\n\t\tfor (const [key, entry] of entries) if (entry.expiresAt !== null && now > entry.expiresAt) entries.delete(key);\n\t\tif (sweepIntervalMs > 0) nextSweepAt = now + sweepIntervalMs;\n\t\tif (entries.size > budget) {\n\t\t\tconst byExpiryAsc = [...entries.entries()].sort((a, b) => (a[1].expiresAt ?? Infinity) - (b[1].expiresAt ?? Infinity));\n\t\t\tfor (let i = 0; i < byExpiryAsc.length - budget; i++) entries.delete(byExpiryAsc[i][0]);\n\t\t}\n\t}\n\treturn {\n\t\tconfig: resolvedConfig,\n\t\tasync run(key, fn) {\n\t\t\tconst now = Date.now();\n\t\t\tconst existing = entries.get(key);\n\t\t\tif (existing && (existing.expiresAt === null || now <= existing.expiresAt)) return {\n\t\t\t\tvalue: await existing.promise,\n\t\t\t\treplayed: true\n\t\t\t};\n\t\t\tmaybeSweep(now, entries.has(key) ? 0 : 1);\n\t\t\tconst promise = fn();\n\t\t\tconst entry = {\n\t\t\t\tpromise,\n\t\t\t\texpiresAt: null\n\t\t\t};\n\t\t\tentries.set(key, entry);\n\t\t\tif (sweepIntervalMs > 0 && nextSweepAt === Number.POSITIVE_INFINITY) nextSweepAt = now + sweepIntervalMs;\n\t\t\ttry {\n\t\t\t\tconst value = await promise;\n\t\t\t\tentry.expiresAt = Date.now() + ttlMs;\n\t\t\t\treturn {\n\t\t\t\t\tvalue,\n\t\t\t\t\treplayed: false\n\t\t\t\t};\n\t\t\t} catch (err) {\n\t\t\t\tif (entries.get(key) === entry) entries.delete(key);\n\t\t\t\tthrow err;\n\t\t\t}\n\t\t},\n\t\treset() {\n\t\t\tentries.clear();\n\t\t\tnextSweepAt = Number.POSITIVE_INFINITY;\n\t\t},\n\t\tsize() {\n\t\t\treturn entries.size;\n\t\t}\n\t};\n}\nvar store = createIdempotencyStore({ ttlMs: 3e5 });\n/** `callerId` is `tokenId` for a PAT caller (so two tokens held by the same user don't share replays), else the user id. */\nfunction idempotencyKey(callerId, clientKey) {\n\treturn `${callerId}\u0000${clientKey}`;\n}\n/** `replayed` distinguishes a replay from a fresh run so the caller can stamp a response header. */\nfunction withIdempotency(key, fn) {\n\treturn store.run(key, fn);\n}\n/** Serialize a response so it can be replayed. Consumes the body. */\nasync function toStoredResponse(res) {\n\treturn {\n\t\tstatus: res.status,\n\t\theaders: [...res.headers.entries()],\n\t\tbody: await res.arrayBuffer()\n\t};\n}\n/** Rebuild a live `Response` from a stored snapshot. */\nfunction fromStoredResponse(stored, replayed) {\n\tconst headers = new Headers(stored.headers);\n\tif (replayed) headers.set(\"Idempotency-Replayed\", \"true\");\n\treturn new Response(stored.body, {\n\t\tstatus: stored.status,\n\t\theaders\n\t});\n}\n//#endregion\n//#region src/routes/api/v1/definitions/[guid]/solve/+server.ts\n/**\n* The definition-addressed solve — v1's flagship action, and what the CLI's\n* `solve` command maps to.\n*\n* It shares the whole solve core with `POST /api/v1/compute` but reaches it\n* only via the `user` access variant, so a share token can never authorize it:\n* the guid comes from the path, and `locals.ctx` is required. `/api/v1/compute`\n* keeps the URL-addressed and share-token flows.\n*/\nvar POST = async ({ request, params, locals }) => {\n\trequireMaxBodySize(request, COMPUTE_REQUEST_MAX_BYTES);\n\tconst loadStart = performance.now();\n\tconst prepMarks = [];\n\tlet prevMark = performance.now();\n\tconst mark = (label) => {\n\t\tprepMarks.push([label, performance.now() - prevMark]);\n\t\tprevMark = performance.now();\n\t};\n\tconst { guid } = requireParams(params, \"guid\");\n\tconst { ctx, user } = requireCaller(locals);\n\tconst body = await parseBody(request, SolveBodySchema, { missingAs: {} });\n\tmark(\"body\");\n\tconst definitionUrl = `local:${guid}`;\n\tif (body.definitionUrl !== void 0 && body.definitionUrl !== definitionUrl) apiError(400, ApiErrorCode.VALIDATION_FAILED, `definitionUrl must be '${definitionUrl}' or omitted on this endpoint.`);\n\tconst solve = () => runSolve({\n\t\taccess: {\n\t\t\tkind: \"user\",\n\t\t\tctx,\n\t\t\trateLimitKey: `user:${user.id}`\n\t\t},\n\t\tdefinitionUrl,\n\t\tinputs: body.inputs,\n\t\tvalues: body.values,\n\t\tchannel: body.channel,\n\t\tversionId: body.versionId ?? null,\n\t\trequest,\n\t\tlocals,\n\t\tloadStart,\n\t\tprepMarks,\n\t\tconcealAccessFailure: true\n\t});\n\ttry {\n\t\tconst clientKey = request.headers.get(\"idempotency-key\");\n\t\tif (!clientKey) return await solve();\n\t\tconst { value, replayed } = await withIdempotency(idempotencyKey(user.id, clientKey), async () => toStoredResponse(await solve()));\n\t\treturn fromStoredResponse(value, replayed);\n\t} catch (err) {\n\t\tmapSolveError(err, locals);\n\t}\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA;AACA;AACA;AACA;AACA,SAAS,sBAAsB,CAAC,MAAM,EAAE;AACxC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpD,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;AAC/D,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,IAAI,KAAK,CAAC,CAAC;AACjF,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;AACtC,EAAE,GAAG,MAAM;AACX,EAAE,KAAK;AACP,EAAE,OAAO;AACT,EAAE;AACF,EAAE,CAAC;AACH,CAAC,MAAM,OAAO,mBAAmB,IAAI,GAAG,EAAE;AAC1C,CAAC,IAAI,WAAW,GAAG,MAAM,CAAC,iBAAiB;AAC3C,CAAC,SAAS,UAAU,CAAC,GAAG,EAAE,QAAQ,GAAG,CAAC,EAAE;AACxC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;AAChD,EAAE,IAAI,EAAE,eAAe,GAAG,CAAC,IAAI,GAAG,IAAI,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,IAAI,MAAM,EAAE;AAC9E,EAAE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;AAChH,EAAE,IAAI,eAAe,GAAG,CAAC,EAAE,WAAW,GAAG,GAAG,GAAG,eAAe;AAC9D,EAAE,IAAI,OAAO,CAAC,IAAI,GAAG,MAAM,EAAE;AAC7B,GAAG,MAAM,WAAW,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC;AACzH,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1F,EAAE;AACF,CAAC;AACD,CAAC,OAAO;AACR,EAAE,MAAM,EAAE,cAAc;AACxB,EAAE,MAAM,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE;AACrB,GAAG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;AACzB,GAAG,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;AACpC,GAAG,IAAI,QAAQ,KAAK,QAAQ,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO;AACtF,IAAI,KAAK,EAAE,MAAM,QAAQ,CAAC,OAAO;AACjC,IAAI,QAAQ,EAAE;AACd,IAAI;AACJ,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC5C,GAAG,MAAM,OAAO,GAAG,EAAE,EAAE;AACvB,GAAG,MAAM,KAAK,GAAG;AACjB,IAAI,OAAO;AACX,IAAI,SAAS,EAAE;AACf,IAAI;AACJ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC;AAC1B,GAAG,IAAI,eAAe,GAAG,CAAC,IAAI,WAAW,KAAK,MAAM,CAAC,iBAAiB,EAAE,WAAW,GAAG,GAAG,GAAG,eAAe;AAC3G,GAAG,IAAI;AACP,IAAI,MAAM,KAAK,GAAG,MAAM,OAAO;AAC/B,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;AACxC,IAAI,OAAO;AACX,KAAK,KAAK;AACV,KAAK,QAAQ,EAAE;AACf,KAAK;AACL,GAAG,CAAC,CAAC,OAAO,GAAG,EAAE;AACjB,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;AACvD,IAAI,MAAM,GAAG;AACb,GAAG;AACH,EAAE,CAAC;AACH,EAAE,KAAK,GAAG;AACV,GAAG,OAAO,CAAC,KAAK,EAAE;AAClB,GAAG,WAAW,GAAG,MAAM,CAAC,iBAAiB;AACzC,EAAE,CAAC;AACH,EAAE,IAAI,GAAG;AACT,GAAG,OAAO,OAAO,CAAC,IAAI;AACtB,EAAE;AACF,EAAE;AACF;AACA,IAAI,KAAK,GAAG,sBAAsB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAClD;AACA,SAAS,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE;AAC7C,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AAClC;AACA;AACA,SAAS,eAAe,CAAC,GAAG,EAAE,EAAE,EAAE;AAClC,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC;AAC1B;AACA;AACA,eAAe,gBAAgB,CAAC,GAAG,EAAE;AACrC,CAAC,OAAO;AACR,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM;AACpB,EAAE,OAAO,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;AACrC,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,WAAW;AAC7B,EAAE;AACF;AACA;AACA,SAAS,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE;AAC9C,CAAC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;AAC5C,CAAC,IAAI,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC;AAC1D,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE;AAClC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM;AACvB,EAAE;AACF,EAAE,CAAC;AACH;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAClD,CAAC,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,CAAC;AACvD,CAAC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;AACpC,CAAC,MAAM,SAAS,GAAG,EAAE;AACrB,CAAC,IAAI,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;AACjC,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK;AACzB,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC;AACvD,EAAE,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;AAC9B,CAAC,CAAC;AACF,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC;AAC/C,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AAC5C,CAAC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AAC1E,CAAC,IAAI,CAAC,MAAM,CAAC;AACb,CAAC,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACtC,CAAC,IAAI,IAAI,CAAC,aAAa,KAAK,MAAM,IAAI,IAAI,CAAC,aAAa,KAAK,aAAa,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,uBAAuB,EAAE,aAAa,CAAC,8BAA8B,CAAC,CAAC;AAClM,CAAC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC;AAC9B,EAAE,MAAM,EAAE;AACV,GAAG,IAAI,EAAE,MAAM;AACf,GAAG,GAAG;AACN,GAAG,YAAY,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;AACjC,GAAG;AACH,EAAE,aAAa;AACf,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;AACrB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;AACrB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO;AACvB,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;AACnC,EAAE,OAAO;AACT,EAAE,MAAM;AACR,EAAE,SAAS;AACX,EAAE,SAAS;AACX,EAAE,oBAAoB,EAAE;AACxB,EAAE,CAAC;AACH,CAAC,IAAI;AACL,EAAE,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;AAC1D,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,MAAM,KAAK,EAAE;AACtC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,YAAY,gBAAgB,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC;AACpI,EAAE,OAAO,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC;AAC5B,CAAC;AACD;;;;"}