watch-tail 0.1.0

package/build/server/chunks/chunks/env2.js-D7xrfc37.js

@@ -0,0 +1,316 @@
+import { b as private_env } from './shared-server.js-Dn5XheXH.js';
+import { j as json } from './utils.js-BIlHjgGW.js';
+import { CloudWatchLogsClient } from '@aws-sdk/client-cloudwatch-logs';
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+
+//#region src/lib/server/api.ts
+/**
+* Builds a JSON error response that never leaks stack traces.
+*
+* Use 400 for bad input, 502 for upstream CloudWatch Logs failures and 499
+* when the client aborted the request.
+*/
+function apiError(status, message, code, details) {
+	const body = { error: message };
+	if (code !== void 0) body.code = code;
+	return json(body, { status });
+}
+//#endregion
+//#region src/lib/server/aws.ts
+/**
+* Throwaway credentials for local emulators only.
+*
+* floci and LocalStack verify the request signature but accept any non-empty
+* key pair, so these keys make a local endpoint work out of the box.
+*/
+var EMULATOR_CREDENTIALS = {
+	accessKeyId: "test",
+	secretAccessKey: "test"
+};
+/** Environment variables that indicate that ambient credentials are configured. */
+var CREDENTIAL_ENV_KEYS = [
+	"AWS_ACCESS_KEY_ID",
+	"AWS_PROFILE",
+	"AWS_SHARED_CREDENTIALS_FILE",
+	"AWS_CONFIG_FILE",
+	"AWS_WEB_IDENTITY_TOKEN_FILE",
+	"AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",
+	"AWS_CONTAINER_CREDENTIALS_FULL_URI",
+	"AWS_ROLE_ARN"
+];
+/**
+* Display-only region used when nothing else can be resolved. It is never sent
+* to the SDK.
+*/
+var FALLBACK_REGION = "us-east-1";
+/** User-facing hint for a malformed `region` query parameter. */
+var REGION_PARAM_HINT = "Invalid region: expected a region code such as us-east-1 or us-west-2-lax-1a";
+/** Region codes and local-zone codes only: lowercase letters, digits and dashes. */
+var REGION_PATTERN = /^[a-z0-9-]{1,64}$/;
+/** Hosts that are always considered local, including the IPv6 loopback form. */
+var LOCAL_HOSTS = /* @__PURE__ */ new Set([
+	"localhost",
+	"127.0.0.1",
+	"0.0.0.0",
+	"::1",
+	"[::1]"
+]);
+/** Substrings that identify a known local AWS emulator. */
+var LOCAL_HINTS = ["floci", "localstack"];
+var MAX_DETAIL_LENGTH = 300;
+/** Trims a value and treats blank strings as absent. */
+function normalize(value) {
+	if (typeof value !== "string") return null;
+	const trimmed = value.trim();
+	return trimmed.length > 0 ? trimmed : null;
+}
+/** Extracts a lowercase host from an endpoint, tolerating missing schemes. */
+function hostOf(endpoint) {
+	try {
+		return new URL(endpoint).hostname.toLowerCase();
+	} catch {
+		return (/^[a-z][a-z0-9+.-]*:\/\/([^/?#]+)/i.exec(endpoint)?.[1] ?? endpoint).toLowerCase();
+	}
+}
+/** True when the endpoint targets a local emulator such as floci or LocalStack. */
+function isLocalEndpoint(endpoint) {
+	const host = hostOf(endpoint);
+	if (LOCAL_HOSTS.has(host)) return true;
+	return LOCAL_HINTS.some((hint) => host.includes(hint));
+}
+/** True when any ambient credential source is configured (non-blank) in the environment. */
+function hasAmbientCredentials(env) {
+	return CREDENTIAL_ENV_KEYS.some((key) => normalize(env[key]) !== null);
+}
+/**
+* Resolves the region, endpoint, local flag and credential source for CloudWatch Logs.
+*
+* Region precedence: an explicit region parameter, then `AWS_REGION`, then
+* `AWS_DEFAULT_REGION`. When none of them is set the result is `null`, which
+* lets the SDK resolve the region from the ambient AWS configuration (profile,
+* SSO, instance metadata) instead of this app inventing one.
+*
+* Credentials stay `ambient` unless the endpoint is local and no ambient
+* credential source is configured at all, in which case the emulator's
+* throwaway keys are used.
+*/
+function resolveAwsConfig(env, regionParam) {
+	const endpoint = normalize(env.AWS_ENDPOINT_URL_LOGS) ?? normalize(env.AWS_ENDPOINT_URL);
+	const region = normalize(regionParam) ?? normalize(env.AWS_REGION) ?? normalize(env.AWS_DEFAULT_REGION);
+	const local = endpoint !== null && isLocalEndpoint(endpoint);
+	return {
+		region,
+		endpoint,
+		local,
+		credentials: local && !hasAmbientCredentials(env) ? "emulator-default" : "ambient"
+	};
+}
+/**
+* Validates the optional `region` query parameter.
+*
+* A blank value means "not supplied" and is accepted as `null`. Any other
+* value must look like a region code or a local-zone code.
+*/
+function parseRegionParam(value) {
+	const trimmed = typeof value === "string" ? value.trim() : "";
+	if (trimmed.length === 0) return {
+		ok: true,
+		region: null
+	};
+	if (!REGION_PATTERN.test(trimmed)) return {
+		ok: false,
+		region: null
+	};
+	return {
+		ok: true,
+		region: trimmed
+	};
+}
+/**
+* Creates a CloudWatch Logs client.
+*
+* Credentials stay ambient unless {@link AwsConfig.credentials} asks for the
+* emulator defaults: this never reads key material from the environment and
+* never sets `credentials` for a real AWS endpoint, so the SDK default provider
+* chain is used unchanged. The region is only set when the caller asked for
+* one, so the SDK can otherwise resolve it from `AWS_REGION`, the shared
+* profile or SSO.
+*/
+function createLogsClient(config) {
+	const options = { maxAttempts: 3 };
+	if (config.region !== null) options.region = config.region;
+	if (config.endpoint !== null) options.endpoint = config.endpoint;
+	if (config.credentials === "emulator-default") options.credentials = EMULATOR_CREDENTIALS;
+	return new CloudWatchLogsClient(options);
+}
+/**
+* Resolves the region to show in responses.
+*
+* Returns the requested region when there is one, otherwise asks the client,
+* whose region provider reads `AWS_REGION`, the profile region and finally the
+* `[default]` profile. The provider call is local (no network request) and it
+* throws when nothing can be found, so any failure falls back to
+* {@link FALLBACK_REGION}: this value is informational and must never break a
+* response.
+*/
+async function resolveEffectiveRegion(client, config) {
+	if (config.region !== null) return config.region;
+	try {
+		const region = await client.config.region();
+		return typeof region === "string" && region.trim().length > 0 ? region.trim() : FALLBACK_REGION;
+	} catch {
+		return FALLBACK_REGION;
+	}
+}
+var ERROR_MESSAGES = {
+	aborted: "The CloudWatch Logs request was aborted",
+	"missing-credentials": "AWS credentials are missing or expired",
+	"missing-region": "No AWS region is configured. Set AWS_REGION or add a region to your AWS profile.",
+	"access-denied": "Access denied by CloudWatch Logs",
+	"not-found": "The CloudWatch Logs resource was not found",
+	unreachable: "The CloudWatch Logs endpoint is unreachable",
+	throttled: "CloudWatch Logs is throttling requests",
+	unknown: "CloudWatch Logs request failed"
+};
+/** Codes whose message is user guidance and must not be amended with SDK text. */
+var FIXED_MESSAGE_CODES = /* @__PURE__ */ new Set(["missing-region"]);
+/** Collects name, message, status and a lowercase search haystack from an error chain. */
+function readErrorFacts(error) {
+	const parts = [];
+	let name = "";
+	let message = "";
+	let code = "";
+	let status = null;
+	let current = error;
+	for (let depth = 0; depth < 4 && current !== null && current !== void 0; depth += 1) {
+		if (current instanceof Error) {
+			if (name === "") name = current.name;
+			if (message === "") message = current.message;
+			parts.push(current.name, current.message);
+		} else if (typeof current === "string") {
+			if (message === "") message = current;
+			parts.push(current);
+		} else if (typeof current === "object") {
+			const like = current;
+			if (name === "" && typeof like.name === "string") name = like.name;
+			if (message === "" && typeof like.message === "string") message = like.message;
+			if (code === "" && typeof like.code === "string") code = like.code;
+			if (status === null && typeof like.$metadata?.httpStatusCode === "number") status = like.$metadata.httpStatusCode;
+			if (typeof like.name === "string") parts.push(like.name);
+			if (typeof like.message === "string") parts.push(like.message);
+			if (typeof like.code === "string") parts.push(like.code);
+			current = like.cause;
+			continue;
+		}
+		break;
+	}
+	return {
+		name,
+		message: message.trim(),
+		code,
+		status,
+		haystack: parts.join(" ").toLowerCase()
+	};
+}
+/** True when the error says that no AWS region could be resolved. */
+function isRegionFailure(loweredName, haystack) {
+	return loweredName.includes("regionprovider") || loweredName.includes("regionnotset") || loweredName.includes("missingregion") || haystack.includes("region is missing") || haystack.includes("region is not configured") || haystack.includes("region is required") || haystack.includes("missing region") || haystack.includes("no region is configured") || haystack.includes("region not set") || haystack.includes("region must be specified") || haystack.includes("region not accepted") || haystack.includes("is not a valid hostname component");
+}
+/** Maps a thrown value to a machine-readable error code. */
+function classify(facts) {
+	const { name, code, status, haystack } = facts;
+	const loweredName = name.toLowerCase();
+	if (loweredName === "aborterror" || code === "ABORT_ERR" || code === "ERR_CANCELED") return "aborted";
+	if (loweredName.includes("credentialsprovider") || loweredName.includes("expiredtoken") || haystack.includes("could not load credentials") || haystack.includes("credential is expired") || haystack.includes("token has expired") || haystack.includes("resolve credentials")) return "missing-credentials";
+	if (isRegionFailure(loweredName, haystack)) return "missing-region";
+	if (loweredName.includes("accessdenied") || loweredName.includes("invalidclienttokenid") || loweredName.includes("invalidsignature") || loweredName.includes("unrecognizedclient") || loweredName.includes("unauthorized") || loweredName.includes("signaturedoesnotmatch") || status === 401 || status === 403) return "access-denied";
+	if (loweredName.includes("resourcenotfound") || loweredName.includes("loggroupnotfound") || haystack.includes("does not exist") || status === 404) return "not-found";
+	if (loweredName.includes("throttl") || loweredName.includes("toomanyrequests") || loweredName.includes("requestlimitexceeded") || status === 429) return "throttled";
+	if ([
+		"econnrefused",
+		"econnreset",
+		"enotfound",
+		"eaiagain",
+		"etimedout",
+		"ehostunreach",
+		"enetunreach"
+	].some((token) => haystack.includes(token)) || haystack.includes("connection refused") || haystack.includes("socket hang up") || haystack.includes("fetch failed") || haystack.includes("getaddrinfo") || haystack.includes("network error") || haystack.includes("timeout") || haystack.includes("unreachable")) return "unreachable";
+	return "unknown";
+}
+/**
+* Turns a thrown SDK or network error into a short human message plus a
+* machine-readable code such as `missing-credentials`, `missing-region` or
+* `unreachable`.
+*/
+function describeAwsError(error) {
+	const facts = readErrorFacts(error);
+	const code = classify(facts);
+	const base = ERROR_MESSAGES[code] ?? ERROR_MESSAGES.unknown;
+	if (FIXED_MESSAGE_CODES.has(code)) return {
+		message: base,
+		code
+	};
+	const detail = facts.message.length > MAX_DETAIL_LENGTH ? `${facts.message.slice(0, MAX_DETAIL_LENGTH)}...` : facts.message;
+	return {
+		message: detail.length > 0 && !base.toLowerCase().includes(detail.toLowerCase()) ? `${base}: ${detail}` : base,
+		code
+	};
+}
+//#endregion
+//#region src/lib/server/env.ts
+/** Name of the git-ignored file that holds local (floci) connection settings. */
+var LOCAL_ENV_FILE = ".env.local";
+var localEnvChecked = false;
+/** Reads `process.env` through `globalThis`, so this file needs no `@types/node`. */
+function processEnv() {
+	return globalThis.process?.env ?? {};
+}
+/**
+* Loads a dotenv file into `process.env`.
+*
+* Existing environment variables win, matching `node --env-file` semantics.
+* Returns true only when a file was found and parsed.
+*/
+function loadEnvFile(path) {
+	const runtime = globalThis;
+	const loader = runtime.process?.loadEnvFile;
+	if (typeof loader !== "function" || !existsSync(path)) return false;
+	try {
+		loader.call(runtime.process, path);
+		return true;
+	} catch {
+		return false;
+	}
+}
+/**
+* Loads `<cwd>/.env.local` once.
+*
+* SvelteKit exposes `.env` values through `$env/dynamic/private`, but the AWS
+* SDK's credential and region providers read `process.env` directly, so the
+* file has to be applied to the process too. Run `pnpm floci:up` to create it.
+*/
+function ensureLocalEnv(cwd) {
+	if (localEnvChecked) return false;
+	localEnvChecked = true;
+	const base = globalThis.process?.cwd?.();
+	if (base === void 0) return false;
+	return loadEnvFile(join(base, LOCAL_ENV_FILE));
+}
+/**
+* Reads the effective server environment.
+*
+* `$env/dynamic/private` does resolve under vitest, but it is a snapshot taken
+* when the module is first evaluated, so the live `process.env` map is merged
+* last and wins.
+*/
+function readEnv() {
+	ensureLocalEnv();
+	return {
+		...private_env,
+		...processEnv()
+	};
+}
+
+export { REGION_PARAM_HINT as R, apiError as a, readEnv as b, createLogsClient as c, resolveEffectiveRegion as d, describeAwsError as e, parseRegionParam as p, resolveAwsConfig as r };
+//# sourceMappingURL=env2.js-D7xrfc37.js.map

package/build/server/chunks/chunks/env2.js-D7xrfc37.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env2.js-D7xrfc37.js","sources":["../../../../.svelte-kit/output/server/chunks/env2.js"],"sourcesContent":["import { t as private_env } from \"./shared-server.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { CloudWatchLogsClient } from \"@aws-sdk/client-cloudwatch-logs\";\nimport { existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\n//#region src/lib/server/api.ts\n/**\n* Builds a JSON error response that never leaks stack traces.\n*\n* Use 400 for bad input, 502 for upstream CloudWatch Logs failures and 499\n* when the client aborted the request.\n*/\nfunction apiError(status, message, code, details) {\n\tconst body = { error: message };\n\tif (code !== void 0) body.code = code;\n\tif (details !== void 0 && details.length > 0) body.details = details;\n\treturn json(body, { status });\n}\n//#endregion\n//#region src/lib/server/aws.ts\n/**\n* Throwaway credentials for local emulators only.\n*\n* floci and LocalStack verify the request signature but accept any non-empty\n* key pair, so these keys make a local endpoint work out of the box.\n*/\nvar EMULATOR_CREDENTIALS = {\n\taccessKeyId: \"test\",\n\tsecretAccessKey: \"test\"\n};\n/** Environment variables that indicate that ambient credentials are configured. */\nvar CREDENTIAL_ENV_KEYS = [\n\t\"AWS_ACCESS_KEY_ID\",\n\t\"AWS_PROFILE\",\n\t\"AWS_SHARED_CREDENTIALS_FILE\",\n\t\"AWS_CONFIG_FILE\",\n\t\"AWS_WEB_IDENTITY_TOKEN_FILE\",\n\t\"AWS_CONTAINER_CREDENTIALS_RELATIVE_URI\",\n\t\"AWS_CONTAINER_CREDENTIALS_FULL_URI\",\n\t\"AWS_ROLE_ARN\"\n];\n/**\n* Display-only region used when nothing else can be resolved. It is never sent\n* to the SDK.\n*/\nvar FALLBACK_REGION = \"us-east-1\";\n/** User-facing hint for a malformed `region` query parameter. */\nvar REGION_PARAM_HINT = \"Invalid region: expected a region code such as us-east-1 or us-west-2-lax-1a\";\n/** Region codes and local-zone codes only: lowercase letters, digits and dashes. */\nvar REGION_PATTERN = /^[a-z0-9-]{1,64}$/;\n/** Hosts that are always considered local, including the IPv6 loopback form. */\nvar LOCAL_HOSTS = /* @__PURE__ */ new Set([\n\t\"localhost\",\n\t\"127.0.0.1\",\n\t\"0.0.0.0\",\n\t\"::1\",\n\t\"[::1]\"\n]);\n/** Substrings that identify a known local AWS emulator. */\nvar LOCAL_HINTS = [\"floci\", \"localstack\"];\nvar MAX_DETAIL_LENGTH = 300;\n/** Trims a value and treats blank strings as absent. */\nfunction normalize(value) {\n\tif (typeof value !== \"string\") return null;\n\tconst trimmed = value.trim();\n\treturn trimmed.length > 0 ? trimmed : null;\n}\n/** Extracts a lowercase host from an endpoint, tolerating missing schemes. */\nfunction hostOf(endpoint) {\n\ttry {\n\t\treturn new URL(endpoint).hostname.toLowerCase();\n\t} catch {\n\t\treturn (/^[a-z][a-z0-9+.-]*:\\/\\/([^/?#]+)/i.exec(endpoint)?.[1] ?? endpoint).toLowerCase();\n\t}\n}\n/** True when the endpoint targets a local emulator such as floci or LocalStack. */\nfunction isLocalEndpoint(endpoint) {\n\tconst host = hostOf(endpoint);\n\tif (LOCAL_HOSTS.has(host)) return true;\n\treturn LOCAL_HINTS.some((hint) => host.includes(hint));\n}\n/** True when any ambient credential source is configured (non-blank) in the environment. */\nfunction hasAmbientCredentials(env) {\n\treturn CREDENTIAL_ENV_KEYS.some((key) => normalize(env[key]) !== null);\n}\n/**\n* Resolves the region, endpoint, local flag and credential source for CloudWatch Logs.\n*\n* Region precedence: an explicit region parameter, then `AWS_REGION`, then\n* `AWS_DEFAULT_REGION`. When none of them is set the result is `null`, which\n* lets the SDK resolve the region from the ambient AWS configuration (profile,\n* SSO, instance metadata) instead of this app inventing one.\n*\n* Credentials stay `ambient` unless the endpoint is local and no ambient\n* credential source is configured at all, in which case the emulator's\n* throwaway keys are used.\n*/\nfunction resolveAwsConfig(env, regionParam) {\n\tconst endpoint = normalize(env.AWS_ENDPOINT_URL_LOGS) ?? normalize(env.AWS_ENDPOINT_URL);\n\tconst region = normalize(regionParam) ?? normalize(env.AWS_REGION) ?? normalize(env.AWS_DEFAULT_REGION);\n\tconst local = endpoint !== null && isLocalEndpoint(endpoint);\n\treturn {\n\t\tregion,\n\t\tendpoint,\n\t\tlocal,\n\t\tcredentials: local && !hasAmbientCredentials(env) ? \"emulator-default\" : \"ambient\"\n\t};\n}\n/**\n* Validates the optional `region` query parameter.\n*\n* A blank value means \"not supplied\" and is accepted as `null`. Any other\n* value must look like a region code or a local-zone code.\n*/\nfunction parseRegionParam(value) {\n\tconst trimmed = typeof value === \"string\" ? value.trim() : \"\";\n\tif (trimmed.length === 0) return {\n\t\tok: true,\n\t\tregion: null\n\t};\n\tif (!REGION_PATTERN.test(trimmed)) return {\n\t\tok: false,\n\t\tregion: null\n\t};\n\treturn {\n\t\tok: true,\n\t\tregion: trimmed\n\t};\n}\n/**\n* Creates a CloudWatch Logs client.\n*\n* Credentials stay ambient unless {@link AwsConfig.credentials} asks for the\n* emulator defaults: this never reads key material from the environment and\n* never sets `credentials` for a real AWS endpoint, so the SDK default provider\n* chain is used unchanged. The region is only set when the caller asked for\n* one, so the SDK can otherwise resolve it from `AWS_REGION`, the shared\n* profile or SSO.\n*/\nfunction createLogsClient(config) {\n\tconst options = { maxAttempts: 3 };\n\tif (config.region !== null) options.region = config.region;\n\tif (config.endpoint !== null) options.endpoint = config.endpoint;\n\tif (config.credentials === \"emulator-default\") options.credentials = EMULATOR_CREDENTIALS;\n\treturn new CloudWatchLogsClient(options);\n}\n/**\n* Resolves the region to show in responses.\n*\n* Returns the requested region when there is one, otherwise asks the client,\n* whose region provider reads `AWS_REGION`, the profile region and finally the\n* `[default]` profile. The provider call is local (no network request) and it\n* throws when nothing can be found, so any failure falls back to\n* {@link FALLBACK_REGION}: this value is informational and must never break a\n* response.\n*/\nasync function resolveEffectiveRegion(client, config) {\n\tif (config.region !== null) return config.region;\n\ttry {\n\t\tconst region = await client.config.region();\n\t\treturn typeof region === \"string\" && region.trim().length > 0 ? region.trim() : FALLBACK_REGION;\n\t} catch {\n\t\treturn FALLBACK_REGION;\n\t}\n}\nvar ERROR_MESSAGES = {\n\taborted: \"The CloudWatch Logs request was aborted\",\n\t\"missing-credentials\": \"AWS credentials are missing or expired\",\n\t\"missing-region\": \"No AWS region is configured. Set AWS_REGION or add a region to your AWS profile.\",\n\t\"access-denied\": \"Access denied by CloudWatch Logs\",\n\t\"not-found\": \"The CloudWatch Logs resource was not found\",\n\tunreachable: \"The CloudWatch Logs endpoint is unreachable\",\n\tthrottled: \"CloudWatch Logs is throttling requests\",\n\tunknown: \"CloudWatch Logs request failed\"\n};\n/** Codes whose message is user guidance and must not be amended with SDK text. */\nvar FIXED_MESSAGE_CODES = /* @__PURE__ */ new Set([\"missing-region\"]);\n/** Collects name, message, status and a lowercase search haystack from an error chain. */\nfunction readErrorFacts(error) {\n\tconst parts = [];\n\tlet name = \"\";\n\tlet message = \"\";\n\tlet code = \"\";\n\tlet status = null;\n\tlet current = error;\n\tfor (let depth = 0; depth < 4 && current !== null && current !== void 0; depth += 1) {\n\t\tif (current instanceof Error) {\n\t\t\tif (name === \"\") name = current.name;\n\t\t\tif (message === \"\") message = current.message;\n\t\t\tparts.push(current.name, current.message);\n\t\t} else if (typeof current === \"string\") {\n\t\t\tif (message === \"\") message = current;\n\t\t\tparts.push(current);\n\t\t} else if (typeof current === \"object\") {\n\t\t\tconst like = current;\n\t\t\tif (name === \"\" && typeof like.name === \"string\") name = like.name;\n\t\t\tif (message === \"\" && typeof like.message === \"string\") message = like.message;\n\t\t\tif (code === \"\" && typeof like.code === \"string\") code = like.code;\n\t\t\tif (status === null && typeof like.$metadata?.httpStatusCode === \"number\") status = like.$metadata.httpStatusCode;\n\t\t\tif (typeof like.name === \"string\") parts.push(like.name);\n\t\t\tif (typeof like.message === \"string\") parts.push(like.message);\n\t\t\tif (typeof like.code === \"string\") parts.push(like.code);\n\t\t\tcurrent = like.cause;\n\t\t\tcontinue;\n\t\t}\n\t\tbreak;\n\t}\n\treturn {\n\t\tname,\n\t\tmessage: message.trim(),\n\t\tcode,\n\t\tstatus,\n\t\thaystack: parts.join(\" \").toLowerCase()\n\t};\n}\n/** True when the error says that no AWS region could be resolved. */\nfunction isRegionFailure(loweredName, haystack) {\n\treturn loweredName.includes(\"regionprovider\") || loweredName.includes(\"regionnotset\") || loweredName.includes(\"missingregion\") || haystack.includes(\"region is missing\") || haystack.includes(\"region is not configured\") || haystack.includes(\"region is required\") || haystack.includes(\"missing region\") || haystack.includes(\"no region is configured\") || haystack.includes(\"region not set\") || haystack.includes(\"region must be specified\") || haystack.includes(\"region not accepted\") || haystack.includes(\"is not a valid hostname component\");\n}\n/** Maps a thrown value to a machine-readable error code. */\nfunction classify(facts) {\n\tconst { name, code, status, haystack } = facts;\n\tconst loweredName = name.toLowerCase();\n\tif (loweredName === \"aborterror\" || code === \"ABORT_ERR\" || code === \"ERR_CANCELED\") return \"aborted\";\n\tif (loweredName.includes(\"credentialsprovider\") || loweredName.includes(\"expiredtoken\") || haystack.includes(\"could not load credentials\") || haystack.includes(\"credential is expired\") || haystack.includes(\"token has expired\") || haystack.includes(\"resolve credentials\")) return \"missing-credentials\";\n\tif (isRegionFailure(loweredName, haystack)) return \"missing-region\";\n\tif (loweredName.includes(\"accessdenied\") || loweredName.includes(\"invalidclienttokenid\") || loweredName.includes(\"invalidsignature\") || loweredName.includes(\"unrecognizedclient\") || loweredName.includes(\"unauthorized\") || loweredName.includes(\"signaturedoesnotmatch\") || status === 401 || status === 403) return \"access-denied\";\n\tif (loweredName.includes(\"resourcenotfound\") || loweredName.includes(\"loggroupnotfound\") || haystack.includes(\"does not exist\") || status === 404) return \"not-found\";\n\tif (loweredName.includes(\"throttl\") || loweredName.includes(\"toomanyrequests\") || loweredName.includes(\"requestlimitexceeded\") || status === 429) return \"throttled\";\n\tif ([\n\t\t\"econnrefused\",\n\t\t\"econnreset\",\n\t\t\"enotfound\",\n\t\t\"eaiagain\",\n\t\t\"etimedout\",\n\t\t\"ehostunreach\",\n\t\t\"enetunreach\"\n\t].some((token) => haystack.includes(token)) || haystack.includes(\"connection refused\") || haystack.includes(\"socket hang up\") || haystack.includes(\"fetch failed\") || haystack.includes(\"getaddrinfo\") || haystack.includes(\"network error\") || haystack.includes(\"timeout\") || haystack.includes(\"unreachable\")) return \"unreachable\";\n\treturn \"unknown\";\n}\n/**\n* Turns a thrown SDK or network error into a short human message plus a\n* machine-readable code such as `missing-credentials`, `missing-region` or\n* `unreachable`.\n*/\nfunction describeAwsError(error) {\n\tconst facts = readErrorFacts(error);\n\tconst code = classify(facts);\n\tconst base = ERROR_MESSAGES[code] ?? ERROR_MESSAGES.unknown;\n\tif (FIXED_MESSAGE_CODES.has(code)) return {\n\t\tmessage: base,\n\t\tcode\n\t};\n\tconst detail = facts.message.length > MAX_DETAIL_LENGTH ? `${facts.message.slice(0, MAX_DETAIL_LENGTH)}...` : facts.message;\n\treturn {\n\t\tmessage: detail.length > 0 && !base.toLowerCase().includes(detail.toLowerCase()) ? `${base}: ${detail}` : base,\n\t\tcode\n\t};\n}\n//#endregion\n//#region src/lib/server/env.ts\n/** Name of the git-ignored file that holds local (floci) connection settings. */\nvar LOCAL_ENV_FILE = \".env.local\";\nvar localEnvChecked = false;\n/** Reads `process.env` through `globalThis`, so this file needs no `@types/node`. */\nfunction processEnv() {\n\treturn globalThis.process?.env ?? {};\n}\n/**\n* Loads a dotenv file into `process.env`.\n*\n* Existing environment variables win, matching `node --env-file` semantics.\n* Returns true only when a file was found and parsed.\n*/\nfunction loadEnvFile(path) {\n\tconst runtime = globalThis;\n\tconst loader = runtime.process?.loadEnvFile;\n\tif (typeof loader !== \"function\" || !existsSync(path)) return false;\n\ttry {\n\t\tloader.call(runtime.process, path);\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n}\n/**\n* Loads `<cwd>/.env.local` once.\n*\n* SvelteKit exposes `.env` values through `$env/dynamic/private`, but the AWS\n* SDK's credential and region providers read `process.env` directly, so the\n* file has to be applied to the process too. Run `pnpm floci:up` to create it.\n*/\nfunction ensureLocalEnv(cwd) {\n\tif (localEnvChecked) return false;\n\tlocalEnvChecked = true;\n\tconst base = cwd ?? globalThis.process?.cwd?.();\n\tif (base === void 0) return false;\n\treturn loadEnvFile(join(base, LOCAL_ENV_FILE));\n}\n/**\n* Reads the effective server environment.\n*\n* `$env/dynamic/private` does resolve under vitest, but it is a snapshot taken\n* when the module is first evaluated, so the live `process.env` map is merged\n* last and wins.\n*/\nfunction readEnv() {\n\tensureLocalEnv();\n\treturn {\n\t\t...private_env,\n\t\t...processEnv()\n\t};\n}\n//#endregion\nexport { describeAwsError as a, resolveEffectiveRegion as c, createLogsClient as i, apiError as l, FALLBACK_REGION as n, parseRegionParam as o, REGION_PARAM_HINT as r, resolveAwsConfig as s, readEnv as t };\n"],"names":[],"mappings":";;;;;;AAKA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;AAClD,CAAC,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE;AAChC,CAAC,IAAI,IAAI,KAAK,MAAM,EAAE,IAAI,CAAC,IAAI,GAAG,IAAI;AAEtC,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC;AAC9B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,oBAAoB,GAAG;AAC3B,CAAC,WAAW,EAAE,MAAM;AACpB,CAAC,eAAe,EAAE;AAClB,CAAC;AACD;AACA,IAAI,mBAAmB,GAAG;AAC1B,CAAC,mBAAmB;AACpB,CAAC,aAAa;AACd,CAAC,6BAA6B;AAC9B,CAAC,iBAAiB;AAClB,CAAC,6BAA6B;AAC9B,CAAC,wCAAwC;AACzC,CAAC,oCAAoC;AACrC,CAAC;AACD,CAAC;AACD;AACA;AACA;AACA;AACA,IAAI,eAAe,GAAG,WAAW;AACjC;AACG,IAAC,iBAAiB,GAAG;AACxB;AACA,IAAI,cAAc,GAAG,mBAAmB;AACxC;AACA,IAAI,WAAW,mBAAmB,IAAI,GAAG,CAAC;AAC1C,CAAC,WAAW;AACZ,CAAC,WAAW;AACZ,CAAC,SAAS;AACV,CAAC,KAAK;AACN,CAAC;AACD,CAAC,CAAC;AACF;AACA,IAAI,WAAW,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC;AACzC,IAAI,iBAAiB,GAAG,GAAG;AAC3B;AACA,SAAS,SAAS,CAAC,KAAK,EAAE;AAC1B,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,OAAO,IAAI;AAC3C,CAAC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE;AAC7B,CAAC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,OAAO,GAAG,IAAI;AAC3C;AACA;AACA,SAAS,MAAM,CAAC,QAAQ,EAAE;AAC1B,CAAC,IAAI;AACL,EAAE,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE;AACjD,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,CAAC,mCAAmC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,QAAQ,EAAE,WAAW,EAAE;AAC5F,CAAC;AACD;AACA;AACA,SAAS,eAAe,CAAC,QAAQ,EAAE;AACnC,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;AAC9B,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI;AACvC,CAAC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACvD;AACA;AACA,SAAS,qBAAqB,CAAC,GAAG,EAAE;AACpC,CAAC,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC;AACvE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,gBAAgB,CAAC,GAAG,EAAE,WAAW,EAAE;AAC5C,CAAC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC;AACzF,CAAC,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC;AACxG,CAAC,MAAM,KAAK,GAAG,QAAQ,KAAK,IAAI,IAAI,eAAe,CAAC,QAAQ,CAAC;AAC7D,CAAC,OAAO;AACR,EAAE,MAAM;AACR,EAAE,QAAQ;AACV,EAAE,KAAK;AACP,EAAE,WAAW,EAAE,KAAK,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,kBAAkB,GAAG;AAC3E,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,gBAAgB,CAAC,KAAK,EAAE;AACjC,CAAC,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE;AAC9D,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO;AAClC,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,MAAM,EAAE;AACV,EAAE;AACF,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO;AAC3C,EAAE,EAAE,EAAE,KAAK;AACX,EAAE,MAAM,EAAE;AACV,EAAE;AACF,CAAC,OAAO;AACR,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,MAAM,EAAE;AACV,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,gBAAgB,CAAC,MAAM,EAAE;AAClC,CAAC,MAAM,OAAO,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE;AACnC,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;AAC3D,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ;AACjE,CAAC,IAAI,MAAM,CAAC,WAAW,KAAK,kBAAkB,EAAE,OAAO,CAAC,WAAW,GAAG,oBAAoB;AAC1F,CAAC,OAAO,IAAI,oBAAoB,CAAC,OAAO,CAAC;AACzC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE;AACtD,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,OAAO,MAAM,CAAC,MAAM;AACjD,CAAC,IAAI;AACL,EAAE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE;AAC7C,EAAE,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,eAAe;AACjG,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,eAAe;AACxB,CAAC;AACD;AACA,IAAI,cAAc,GAAG;AACrB,CAAC,OAAO,EAAE,yCAAyC;AACnD,CAAC,qBAAqB,EAAE,wCAAwC;AAChE,CAAC,gBAAgB,EAAE,kFAAkF;AACrG,CAAC,eAAe,EAAE,kCAAkC;AACpD,CAAC,WAAW,EAAE,4CAA4C;AAC1D,CAAC,WAAW,EAAE,6CAA6C;AAC3D,CAAC,SAAS,EAAE,wCAAwC;AACpD,CAAC,OAAO,EAAE;AACV,CAAC;AACD;AACA,IAAI,mBAAmB,mBAAmB,IAAI,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC;AACrE;AACA,SAAS,cAAc,CAAC,KAAK,EAAE;AAC/B,CAAC,MAAM,KAAK,GAAG,EAAE;AACjB,CAAC,IAAI,IAAI,GAAG,EAAE;AACd,CAAC,IAAI,OAAO,GAAG,EAAE;AACjB,CAAC,IAAI,IAAI,GAAG,EAAE;AACd,CAAC,IAAI,MAAM,GAAG,IAAI;AAClB,CAAC,IAAI,OAAO,GAAG,KAAK;AACpB,CAAC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE;AACtF,EAAE,IAAI,OAAO,YAAY,KAAK,EAAE;AAChC,GAAG,IAAI,IAAI,KAAK,EAAE,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI;AACvC,GAAG,IAAI,OAAO,KAAK,EAAE,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO;AAChD,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC;AAC5C,EAAE,CAAC,MAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE;AAC1C,GAAG,IAAI,OAAO,KAAK,EAAE,EAAE,OAAO,GAAG,OAAO;AACxC,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;AACtB,EAAE,CAAC,MAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE;AAC1C,GAAG,MAAM,IAAI,GAAG,OAAO;AACvB,GAAG,IAAI,IAAI,KAAK,EAAE,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC,IAAI;AACrE,GAAG,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC,OAAO;AACjF,GAAG,IAAI,IAAI,KAAK,EAAE,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC,IAAI;AACrE,GAAG,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,SAAS,EAAE,cAAc,KAAK,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc;AACpH,GAAG,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAC3D,GAAG,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;AACjE,GAAG,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAC3D,GAAG,OAAO,GAAG,IAAI,CAAC,KAAK;AACvB,GAAG;AACH,EAAE;AACF,EAAE;AACF,CAAC;AACD,CAAC,OAAO;AACR,EAAE,IAAI;AACN,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;AACzB,EAAE,IAAI;AACN,EAAE,MAAM;AACR,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW;AACvC,EAAE;AACF;AACA;AACA,SAAS,eAAe,CAAC,WAAW,EAAE,QAAQ,EAAE;AAChD,CAAC,OAAO,WAAW,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,0BAA0B,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,yBAAyB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,0BAA0B,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,mCAAmC,CAAC;AAC1hB;AACA;AACA,SAAS,QAAQ,CAAC,KAAK,EAAE;AACzB,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK;AAC/C,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE;AACvC,CAAC,IAAI,WAAW,KAAK,YAAY,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,cAAc,EAAE,OAAO,SAAS;AACtG,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,4BAA4B,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,qBAAqB;AAC7S,CAAC,IAAI,eAAe,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,OAAO,gBAAgB;AACpE,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,uBAAuB,CAAC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,OAAO,eAAe;AACxU,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,MAAM,KAAK,GAAG,EAAE,OAAO,WAAW;AACtK,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,MAAM,KAAK,GAAG,EAAE,OAAO,WAAW;AACrK,CAAC,IAAI;AACL,EAAE,cAAc;AAChB,EAAE,YAAY;AACd,EAAE,WAAW;AACb,EAAE,UAAU;AACZ,EAAE,WAAW;AACb,EAAE,cAAc;AAChB,EAAE;AACF,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,aAAa;AACvU,CAAC,OAAO,SAAS;AACjB;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,gBAAgB,CAAC,KAAK,EAAE;AACjC,CAAC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC;AACpC,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC;AAC7B,CAAC,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,OAAO;AAC5D,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO;AAC3C,EAAE,OAAO,EAAE,IAAI;AACf,EAAE;AACF,EAAE;AACF,CAAC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,iBAAiB,GAAG,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO;AAC5H,CAAC,OAAO;AACR,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,GAAG,IAAI;AAChH,EAAE;AACF,EAAE;AACF;AACA;AACA;AACA;AACA,IAAI,cAAc,GAAG,YAAY;AACjC,IAAI,eAAe,GAAG,KAAK;AAC3B;AACA,SAAS,UAAU,GAAG;AACtB,CAAC,OAAO,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE;AACrC;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,WAAW,CAAC,IAAI,EAAE;AAC3B,CAAC,MAAM,OAAO,GAAG,UAAU;AAC3B,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,WAAW;AAC5C,CAAC,IAAI,OAAO,MAAM,KAAK,UAAU,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AACpE,CAAC,IAAI;AACL,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC;AACpC,EAAE,OAAO,IAAI;AACb,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,KAAK;AACd,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,CAAC,IAAI,eAAe,EAAE,OAAO,KAAK;AAClC,CAAC,eAAe,GAAG,IAAI;AACvB,CAAC,MAAM,IAAI,GAAU,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI;AAChD,CAAC,IAAI,IAAI,KAAK,MAAM,EAAE,OAAO,KAAK;AAClC,CAAC,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;AAC/C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,OAAO,GAAG;AACnB,CAAC,cAAc,EAAE;AACjB,CAAC,OAAO;AACR,EAAE,GAAG,WAAW;AAChB,EAAE,GAAG,UAAU;AACf,EAAE;AACF;;"}

package/build/server/chunks/chunks/exports.js-CvFPPbaH.js

@@ -0,0 +1,263 @@
+var internal = new URL("sveltekit-internal://");
+/**
+* @param {string} base
+* @param {string} path
+*/
+function resolve(base, path) {
+	if (path[0] === "/" && path[1] === "/") return path;
+	let url = new URL(base, internal);
+	url = new URL(path, url);
+	return url.protocol === internal.protocol ? url.pathname + url.search + url.hash : url.href;
+}
+/**
+* @param {string} path
+* @param {import('types').TrailingSlash} trailing_slash
+*/
+function normalize_path(path, trailing_slash) {
+	if (path === "/" || trailing_slash === "ignore") return path;
+	if (trailing_slash === "never") return path.endsWith("/") ? path.slice(0, -1) : path;
+	else if (trailing_slash === "always" && !path.endsWith("/")) return path + "/";
+	return path;
+}
+/**
+* Decode pathname excluding %25 to prevent further double decoding of params
+* @param {string} pathname
+*/
+function decode_pathname(pathname) {
+	return pathname.split("%25").map(decodeURI).join("%25");
+}
+/** @param {Record<string, string>} params */
+function decode_params(params) {
+	for (const key in params) params[key] = decodeURIComponent(params[key]);
+	return params;
+}
+/**
+* @param {URL} url
+* @param {() => void} callback
+* @param {(search_param: string) => void} search_params_callback
+* @param {boolean} [allow_hash]
+*/
+function make_trackable(url, callback, search_params_callback, allow_hash = false) {
+	const tracked = new URL(url);
+	Object.defineProperty(tracked, "searchParams", {
+		value: new Proxy(tracked.searchParams, { get(obj, key) {
+			if (key === "get" || key === "getAll" || key === "has") return (param, ...rest) => {
+				search_params_callback(param);
+				return obj[key](param, ...rest);
+			};
+			callback();
+			const value = Reflect.get(obj, key);
+			return typeof value === "function" ? value.bind(obj) : value;
+		} }),
+		enumerable: true,
+		configurable: true
+	});
+	/**
+	* URL properties that could change during the lifetime of the page,
+	* which excludes things like `origin`
+	* @type {(keyof URL)[]}
+	*/
+	const tracked_url_properties = [
+		"href",
+		"pathname",
+		"search",
+		"toString",
+		"toJSON"
+	];
+	if (allow_hash) tracked_url_properties.push("hash");
+	for (const property of tracked_url_properties) Object.defineProperty(tracked, property, {
+		get() {
+			callback();
+			return url[property];
+		},
+		enumerable: true,
+		configurable: true
+	});
+	tracked[Symbol.for("nodejs.util.inspect.custom")] = (_depth, opts, inspect) => {
+		return inspect(url, opts);
+	};
+	tracked.searchParams[Symbol.for("nodejs.util.inspect.custom")] = (_depth, opts, inspect) => {
+		return inspect(url.searchParams, opts);
+	};
+	if (!allow_hash) disable_hash(tracked);
+	return tracked;
+}
+/**
+* Disallow access to `url.hash` on the server and in `load`
+* @param {URL} url
+*/
+function disable_hash(url) {
+	allow_nodejs_console_log(url);
+	Object.defineProperty(url, "hash", { get() {
+		throw new Error("Cannot access event.url.hash. Consider using `page.url.hash` inside a component instead");
+	} });
+}
+/**
+* Disallow access to `url.search` and `url.searchParams` during prerendering
+* @param {URL} url
+*/
+function disable_search(url) {
+	allow_nodejs_console_log(url);
+	for (const property of ["search", "searchParams"]) Object.defineProperty(url, property, { get() {
+		throw new Error(`Cannot access url.${property} on a page with prerendering enabled`);
+	} });
+}
+/**
+* Allow URL to be console logged, bypassing disabled properties.
+* @param {URL} url
+*/
+function allow_nodejs_console_log(url) {
+	url[Symbol.for("nodejs.util.inspect.custom")] = (_depth, opts, inspect) => {
+		return inspect(new URL(url), opts);
+	};
+}
+//#endregion
+//#region node_modules/.pnpm/@sveltejs+kit@2.70.3_@sveltejs+vite-plugin-svelte@7.3.0_svelte@5.57.0_vite@8.2.2_@types_ab6e39593f61aae0ad0b9a1bac6935c7/node_modules/@sveltejs/kit/src/utils/hash.js
+/**
+* Hash using djb2
+* @param {import('types').StrictBody[]} values
+*/
+function hash(...values) {
+	let hash = 5381;
+	for (const value of values) if (typeof value === "string") {
+		let i = value.length;
+		while (i) hash = hash * 33 ^ value.charCodeAt(--i);
+	} else if (ArrayBuffer.isView(value)) {
+		const buffer = new Uint8Array(value.buffer, value.byteOffset, value.byteLength);
+		let i = buffer.length;
+		while (i) hash = hash * 33 ^ buffer[--i];
+	} else throw new TypeError("value must be a string or TypedArray");
+	return (hash >>> 0).toString(36);
+}
+//#endregion
+//#region node_modules/.pnpm/@sveltejs+kit@2.70.3_@sveltejs+vite-plugin-svelte@7.3.0_svelte@5.57.0_vite@8.2.2_@types_ab6e39593f61aae0ad0b9a1bac6935c7/node_modules/@sveltejs/kit/src/utils/routing.js
+/**
+* @param {RegExpMatchArray} match
+* @param {import('types').RouteParam[]} params
+* @param {Record<string, import('@sveltejs/kit').ParamMatcher>} matchers
+*/
+function exec(match, params, matchers) {
+	/** @type {Record<string, string>} */
+	const result = {};
+	const values = match.slice(1);
+	const values_needing_match = values.filter((value) => value !== void 0);
+	let buffered = 0;
+	for (let i = 0; i < params.length; i += 1) {
+		const param = params[i];
+		let value = values[i - buffered];
+		if (param.chained && param.rest && buffered) {
+			value = values.slice(i - buffered, i + 1).filter((s) => s).join("/");
+			buffered = 0;
+		}
+		if (value === void 0) {
+			if (param.rest) value = "";
+			else continue;
+		}
+		if (!param.matcher || matchers[param.matcher](value)) {
+			result[param.name] = value;
+			const next_param = params[i + 1];
+			const next_value = values[i + 1];
+			if (next_param && !next_param.rest && next_param.optional && next_value && param.chained) buffered = 0;
+			if (!next_param && !next_value && Object.keys(result).length === values_needing_match.length) buffered = 0;
+			continue;
+		}
+		if (param.optional && param.chained) {
+			buffered++;
+			continue;
+		}
+		return;
+	}
+	if (buffered) return;
+	return result;
+}
+/**
+* Find the first route that matches the given path
+* @template {{pattern: RegExp, params: import('types').RouteParam[]}} Route
+* @param {string} path - The decoded pathname to match
+* @param {Route[]} routes
+* @param {Record<string, import('@sveltejs/kit').ParamMatcher>} matchers
+* @returns {{ route: Route, params: Record<string, string> } | null}
+*/
+function find_route(path, routes, matchers) {
+	for (const route of routes) {
+		const match = route.pattern.exec(path);
+		if (!match) continue;
+		const matched = exec(match, route.params, matchers);
+		if (matched) return {
+			route,
+			params: decode_params(matched)
+		};
+	}
+	return null;
+}
+//#endregion
+//#region node_modules/.pnpm/@sveltejs+kit@2.70.3_@sveltejs+vite-plugin-svelte@7.3.0_svelte@5.57.0_vite@8.2.2_@types_ab6e39593f61aae0ad0b9a1bac6935c7/node_modules/@sveltejs/kit/src/utils/exports.js
+/**
+* @param {Set<string>} expected
+*/
+function validator(expected) {
+	/**
+	* @param {any} module
+	* @param {string} [file]
+	*/
+	function validate(module, file) {
+		if (!module) return;
+		for (const key in module) {
+			if (key[0] === "_" || expected.has(key)) continue;
+			const values = [...expected.values()];
+			const hint = hint_for_supported_files(key, file?.slice(file.lastIndexOf("."))) ?? `valid exports are ${values.join(", ")}, or anything with a '_' prefix`;
+			throw new Error(`Invalid export '${key}'${file ? ` in ${file}` : ""} (${hint})`);
+		}
+	}
+	return validate;
+}
+/**
+* @param {string} key
+* @param {string} ext
+* @returns {string | void}
+*/
+function hint_for_supported_files(key, ext = ".js") {
+	const supported_files = [];
+	if (valid_layout_exports.has(key)) supported_files.push(`+layout${ext}`);
+	if (valid_page_exports.has(key)) supported_files.push(`+page${ext}`);
+	if (valid_layout_server_exports.has(key)) supported_files.push(`+layout.server${ext}`);
+	if (valid_page_server_exports.has(key)) supported_files.push(`+page.server${ext}`);
+	if (valid_server_exports.has(key)) supported_files.push(`+server${ext}`);
+	if (supported_files.length > 0) return `'${key}' is a valid export in ${supported_files.slice(0, -1).join(", ")}${supported_files.length > 1 ? " or " : ""}${supported_files.at(-1)}`;
+}
+var valid_layout_exports = /* @__PURE__ */ new Set([
+	"load",
+	"prerender",
+	"csr",
+	"ssr",
+	"trailingSlash",
+	"config"
+]);
+var valid_page_exports = /* @__PURE__ */ new Set([...valid_layout_exports, "entries"]);
+var valid_layout_server_exports = /* @__PURE__ */ new Set([...valid_layout_exports]);
+var valid_page_server_exports = /* @__PURE__ */ new Set([
+	...valid_layout_server_exports,
+	"actions",
+	"entries"
+]);
+var valid_server_exports = /* @__PURE__ */ new Set([
+	"GET",
+	"POST",
+	"PATCH",
+	"PUT",
+	"DELETE",
+	"OPTIONS",
+	"HEAD",
+	"fallback",
+	"prerender",
+	"trailingSlash",
+	"config",
+	"entries"
+]);
+var validate_layout_exports = validator(valid_layout_exports);
+var validate_page_exports = validator(valid_page_exports);
+var validate_layout_server_exports = validator(valid_layout_server_exports);
+var validate_page_server_exports = validator(valid_page_server_exports);
+
+export { disable_search as a, validate_layout_exports as b, validate_page_server_exports as c, decode_pathname as d, validate_page_exports as e, find_route as f, hash as h, make_trackable as m, normalize_path as n, resolve as r, validate_layout_server_exports as v };
+//# sourceMappingURL=exports.js-CvFPPbaH.js.map