dirigent-server 0.23.3__tar.gz → 0.24.0__tar.gz

{dirigent_server-0.23.3 → dirigent_server-0.24.0}/PKG-INFO

@@ -1,16 +1,16 @@
 Metadata-Version: 2.4
 Name: dirigent-server
-Version: 0.23.3
+Version: 0.24.0
 Summary: Dirigent FastAPI server: the REST API, its authentication, and the health probes.
 License-Expression: LicenseRef-Proprietary
 License-File: LICENSE
 License-File: THIRD_PARTY_NOTICES.md
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.13
-Requires-Dist: dirigent-client==0.23.3
-Requires-Dist: dirigent-common==0.23.3
-Requires-Dist: dirigent-core==0.23.3
-Requires-Dist: dirigent-examples==0.23.3
+Requires-Dist: dirigent-client==0.24.0
+Requires-Dist: dirigent-common==0.24.0
+Requires-Dist: dirigent-core==0.24.0
+Requires-Dist: dirigent-examples==0.24.0
 Requires-Dist: fastapi>=0.142.2
 Requires-Python: >=3.13
 Description-Content-Type: text/markdown

{dirigent_server-0.23.3 → dirigent_server-0.24.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "dirigent-server"
-version = "0.23.3"
+version = "0.24.0"
 description = "Dirigent FastAPI server: the REST API, its authentication, and the health probes."
 readme = "README.md"
 requires-python = ">=3.13"
@@ -14,10 +14,10 @@ classifiers = [
     "Programming Language :: Python :: 3.13",
 ]
 dependencies = [
-    "dirigent-client==0.23.3",
-    "dirigent-common==0.23.3",
-    "dirigent-core==0.23.3",
-    "dirigent-examples==0.23.3",
+    "dirigent-client==0.24.0",
+    "dirigent-common==0.24.0",
+    "dirigent-core==0.24.0",
+    "dirigent-examples==0.24.0",
     "fastapi>=0.142.2",
 ]
 

{dirigent_server-0.23.3 → dirigent_server-0.24.0}/pyproject.toml.orig

@@ -1,6 +1,6 @@
 [project]
 name = "dirigent-server"
-version = "0.23.3"
+version = "0.24.0"
 description = "Dirigent FastAPI server: the REST API, its authentication, and the health probes."
 readme = "README.md"
 requires-python = ">=3.13"
@@ -11,10 +11,10 @@ classifiers = [
     "Programming Language :: Python :: 3.13",
 ]
 dependencies = [
-    "dirigent-client==0.23.3",
-    "dirigent-common==0.23.3",
-    "dirigent-core==0.23.3",
-    "dirigent-examples==0.23.3",
+    "dirigent-client==0.24.0",
+    "dirigent-common==0.24.0",
+    "dirigent-core==0.24.0",
+    "dirigent-examples==0.24.0",
     "fastapi>=0.142.2",
 ]
 

{dirigent_server-0.23.3 → dirigent_server-0.24.0}/src/dirigent_server/app.py

@@ -15,12 +15,13 @@ from dirigent_core.directory import apply_directory
 from dirigent_core.engine.services import EngineServices
 from dirigent_core.plugins import PluginHost, load_plugin_host
 from dirigent_core.scheduler import Scheduler
+from dirigent_core.sources.intake import Intake
 from dirigent_core.telemetry import configure_telemetry, instrument_fastapi
 from dirigent_server.errors import install_error_handlers
 from dirigent_server.health import build_registry
 from dirigent_server.health import router as health_router
 from dirigent_server.logging import get_logger
-from dirigent_server.routes import TAGS, build_hooks_router, build_router
+from dirigent_server.routes import TAGS, build_endpoints_router, build_hooks_router, build_router
 from dirigent_server.security import install_cross_site_guard
 from dirigent_server.ui import mount_ui_assets, mount_ui_shell
 
@@ -32,7 +33,8 @@ Every endpoint under `/api/v1` requires authentication: a bearer token for autom
 the session cookie `POST /api/v1/auth/login` sets for a browser. The probes under `/health`,
 this document itself, and the playground under `/api/v1/playground` are the exceptions.
 `POST /hooks/{token}` is outside the versioned API and authenticates with its own
-per-trigger token.
+per-trigger token, and so is every route under `/endpoints`, which a pipeline's endpoint
+sources declare and which authenticates with each source's own token.
 
 The playground serves generated data and chosen behaviour to documents that need something
 to happen: it needs no credential, opens no database session, and reads no instance data.
@@ -108,12 +110,14 @@ def create_app(
     app.state.settings = resolved
     app.state.version = __version__
     app.state.services = EngineServices.build(resolved, host or load_plugin_host())
+    app.state.intake = Intake()
     install_cross_site_guard(app, resolved)
     install_error_handlers(app)
     mount_ui_assets(app, resolved)
     app.include_router(health_router)
     app.include_router(build_hooks_router())
     app.include_router(build_router(resolved), prefix=resolved.api_prefix)
+    app.include_router(build_endpoints_router(), prefix=resolved.endpoint_prefix)
     mount_ui_shell(app, resolved)
     instrument_fastapi(app)
     return app

dirigent_server-0.24.0/src/dirigent_server/bodies.py

@@ -0,0 +1,21 @@
+"""Reading a request's body under a cap, for the routes a stranger may call."""
+
+from fastapi import Request
+
+
+async def read_capped(request: Request, limit: int) -> bytes:
+    """Read the body, stopping one byte past the limit rather than after all of it.
+
+    ``request.body()`` buffers whatever arrives before the size can be checked, so an
+    unauthenticated caller could make the process allocate a gigabyte to be told a megabyte
+    is the maximum. What comes back may be longer than the limit, which is how a caller
+    learns the body was too large.
+    """
+    chunks: list[bytes] = []
+    size = 0
+    async for chunk in request.stream():
+        chunks.append(chunk)
+        size += len(chunk)
+        if size > limit:
+            break
+    return b"".join(chunks)

{dirigent_server-0.23.3 → dirigent_server-0.24.0}/src/dirigent_server/routes/__init__.py

@@ -2,7 +2,8 @@
 
 Every business router is mounted behind :func:`require_principal`, so authentication is a
 property of the mount. Only login is exempt. Webhook intake authenticates as the trigger
-rather than as a person, so it is mounted at the application root instead.
+rather than as a person, so it is mounted at the application root instead, and endpoint
+intake, which authenticates as the source, is mounted under the endpoint prefix.
 """
 
 from fastapi import APIRouter, Depends
@@ -13,6 +14,7 @@ from dirigent_server.routes import (
     auth,
     blocks,
     connections,
+    endpoints,
     examples,
     hooks,
     labels,
@@ -21,6 +23,7 @@ from dirigent_server.routes import (
     runs,
     schema,
     schemas,
+    sources,
     system,
     trigger_documents,
     triggers,
@@ -37,6 +40,8 @@ TAGS: list[dict[str, str]] = [
     {"name": "triggers", "description": "A pipeline's schedules and inbound webhooks."},
     {"name": "alerts", "description": "Alert rules, and the queue they deliver through."},
     {"name": "hooks", "description": "Webhook intake, authenticated by its own token."},
+    {"name": "endpoints", "description": "Endpoint sources, each authenticated by its own token."},
+    {"name": "sources", "description": "Where a pipeline's inputs enter, and what has arrived."},
     {"name": "connections", "description": "Named credential records of contributed kinds."},
     {"name": "blocks", "description": "The catalog every plugin contributes to."},
     {"name": "labels", "description": "The wording every installed pack refuses in."},
@@ -70,6 +75,7 @@ def build_router(settings: Settings | None = None) -> APIRouter:
         pipelines,
         triggers,
         trigger_documents,
+        sources,
         runs,
         alerts,
         connections,
@@ -87,6 +93,13 @@ def build_router(settings: Settings | None = None) -> APIRouter:
     return router
 
 
+def build_endpoints_router() -> APIRouter:
+    """Assemble the endpoint intake, mounted under the instance's endpoint prefix."""
+    router = APIRouter(route_class=Transactional)
+    router.include_router(endpoints.router)
+    return router
+
+
 def build_hooks_router() -> APIRouter:
     """Assemble the unauthenticated webhook intake, mounted at the application root."""
     router = APIRouter(route_class=Transactional)
@@ -94,4 +107,4 @@ def build_hooks_router() -> APIRouter:
     return router
 
 
-__all__ = ["TAGS", "build_hooks_router", "build_router"]
+__all__ = ["TAGS", "build_endpoints_router", "build_hooks_router", "build_router"]

dirigent_server-0.24.0/src/dirigent_server/routes/endpoints.py

@@ -0,0 +1,87 @@
+"""Endpoint intake: the routes a pipeline's endpoint sources declare, under the instance's endpoint prefix.
+
+Mounted outside ``/api/v1``, which requires a principal as a property of the mount: a call to
+an endpoint authenticates with the token its source was given, or with nothing for a source
+that writes out ``public``.
+"""
+
+from fastapi import APIRouter, Request, Response, status
+from fastapi.responses import JSONResponse
+
+from dirigent_client.schemas import InputAccepted
+from dirigent_core.sources.intake import Call, Ignore, Intake, Refusal, lowered
+from dirigent_server.bodies import read_capped
+from dirigent_server.dependencies import ServicesDep, SessionDep
+from dirigent_server.errors import answer, render
+from dirigent_server.transactions import Transactional
+
+router = APIRouter(route_class=Transactional, tags=["endpoints"])
+
+#: The methods a received source may declare, which is every method this route takes.
+METHODS = ["GET", "POST", "PUT", "PATCH", "DELETE"]
+
+
+#: Every answer an endpoint gives, in the order its checks are made.
+RESPONSES: dict[int | str, dict[str, object]] = {
+    202: {"description": "The input became a run; the body says where to read it."},
+    204: {"description": "The input was a sign of life, such as a handshake, and started no run."},
+    400: {"description": "The body is not what its content type says."},
+    401: {"description": "The source takes a bearer token, and the one presented is not its own."},
+    404: {"description": "No source answers this path."},
+    405: {"description": "A source answers this path, but not with this method."},
+    409: {"description": "The pipeline's concurrency policy, or the run itself, refused the input."},
+    413: {"description": "The body is larger than the source reads."},
+    415: {"description": "The source does not take this content type."},
+    429: {"description": "The instance or the source is taking calls faster than its rate."},
+    503: {"description": "The source or its pipeline is paused, or as many of its runs are in flight as it allows."},
+}
+
+
+def intake_of(request: Request) -> Intake:
+    """Return this process's intake: its routes as last read, and its buckets."""
+    intake: Intake = request.app.state.intake
+    return intake
+
+
+async def call_endpoint(path: str, request: Request, session: SessionDep, services: ServicesDep) -> Response:
+    """Turn one call into a run of the pipeline whose source answers it, or refuse it with why."""
+    call = Call(
+        method=request.method,
+        path=f"/{path}",
+        query=request.query_params.multi_items(),
+        headers=lowered(request.headers.items()),
+        caller=request.client.host if request.client else None,
+    )
+    taken = await intake_of(request).take(session, services, call, lambda limit: read_capped(request, limit))
+    if isinstance(taken, Ignore):
+        return Response(status_code=status.HTTP_204_NO_CONTENT)
+    if isinstance(taken, Refusal):
+        return _refused(request, taken)
+    return JSONResponse(
+        status_code=status.HTTP_202_ACCEPTED,
+        content=taken.model_dump(mode="json"),
+        headers={"Location": taken.run_url},
+    )
+
+
+for _method in METHODS:
+    router.add_api_route(
+        "/{path:path}",
+        call_endpoint,
+        methods=[_method],
+        operation_id=f"callEndpoint{_method.title()}",
+        summary=f"Call an endpoint source with {_method}",
+        status_code=status.HTTP_202_ACCEPTED,
+        response_model=InputAccepted,
+        responses=RESPONSES,
+    )
+
+
+def _refused(request: Request, refusal: Refusal) -> Response:
+    """Answer a refusal in the one problem shape, with any header it has to set."""
+    problem = render(
+        refusal.status, refusal.message, code=refusal.code, params=refusal.params, instance=request.url.path
+    )
+    response = answer(problem)
+    response.headers.update(refusal.headers)
+    return response

{dirigent_server-0.23.3 → dirigent_server-0.24.0}/src/dirigent_server/routes/hooks.py

@@ -13,6 +13,7 @@ from dirigent_client.schemas import HookAccepted
 from dirigent_core.ratelimit import TokenBucket
 from dirigent_core.triggers import SIGNATURE_HEADER, deliver, resolve_webhook
 from dirigent_core.triggers.webhooks import UNKNOWN_TOKEN, hash_token
+from dirigent_server.bodies import read_capped
 from dirigent_server.dependencies import ServicesDep, SessionDep
 from dirigent_server.logging import get_logger
 from dirigent_server.transactions import Transactional
@@ -81,7 +82,7 @@ async def deliver_hook(
         session,
         services,
         webhook,
-        body=await _read_body(request, limit=services.settings.webhook_max_payload),
+        body=await read_capped(request, services.settings.webhook_max_payload),
         signature=signature,
         source=request.client.host if request.client else None,
     )
@@ -94,21 +95,3 @@ def _throttled(response: Response, detail: str) -> HookAccepted:
     response.status_code = status.HTTP_429_TOO_MANY_REQUESTS
     response.headers["Retry-After"] = "60"
     return HookAccepted(outcome=WebhookOutcome.REJECTED, detail=detail)
-
-
-async def _read_body(request: Request, *, limit: int) -> bytes:
-    """Read the body, stopping one byte past the limit rather than after all of it.
-
-    ``request.body()`` buffers whatever arrives before the size can be checked, so an
-    unauthenticated caller could make the process allocate a gigabyte to be told a megabyte
-    is the maximum. What comes back goes to the ordinary refusal path, so an oversized
-    delivery is still recorded in the history.
-    """
-    chunks: list[bytes] = []
-    size = 0
-    async for chunk in request.stream():
-        chunks.append(chunk)
-        size += len(chunk)
-        if size > limit:
-            break
-    return b"".join(chunks)

{dirigent_server-0.23.3 → dirigent_server-0.24.0}/src/dirigent_server/routes/pipelines.py

@@ -30,7 +30,7 @@ from dirigent_core.engine.definition import load_definition
 from dirigent_core.engine.runs import Provenance, RunWindow
 from dirigent_core.engine.services import EngineServices
 from dirigent_core.messages import PIPELINE_DEACTIVATED, PIPELINE_NO_VERSIONS
-from dirigent_core.models import Pipeline
+from dirigent_core.models import Pipeline, utcnow
 from dirigent_core.pipelines import (
     NO_COUNTS,
     PipelineCounts,
@@ -46,6 +46,7 @@ from dirigent_core.pipelines import (
     revalidate,
     set_active,
 )
+from dirigent_core.sources.entries import hand_entry
 from dirigent_core.triggers.backfill import backfill
 from dirigent_core.triggers.schedules import UnknownSchedule, find_schedule
 from dirigent_server.dependencies import ServicesDep, SessionDep
@@ -304,11 +305,13 @@ async def start_run(
     version = await get_version(session, pipeline)
     definition = load_definition(version.document)
     definition.validate_params(payload.params, services.format_checker)
+    entry = hand_entry(definition, services.sources, payload.source, payload.input, received_at=utcnow())
     run = await create_run(
         session,
         services,
         version,
         params=payload.params,
+        entry=entry,
         attribution=Attribution(
             kind=principal.trigger_kind,
             id=principal.token_id or principal.user_id,

{dirigent_server-0.23.3 → dirigent_server-0.24.0}/src/dirigent_server/routes/runs.py

@@ -35,7 +35,7 @@ from dirigent_core.artifacts import JSON_CONTENT_TYPE, TEXT_KEY, canonical_json,
 from dirigent_core.database import session_scope
 from dirigent_core.engine.definition import PipelineDefinition, load_definition
 from dirigent_core.engine.runs import cancel_run, retry_step
-from dirigent_core.engine.state import StepCounts, attempt_counts, item_counts, step_states
+from dirigent_core.engine.state import StepCounts, attempt_counts, item_counts, item_wise_parent, step_states
 from dirigent_core.messages import CANCELLED_BY
 from dirigent_core.models import (
     ArtifactRef,
@@ -122,7 +122,9 @@ def _render_run(run: Run, pipeline: Pipeline, version: PipelineVersion, failed:
         params=dict(run.params),
         triggered_by_kind=run.triggered_by_kind,
         parent_run_id=run.triggered_by_id if run.triggered_by_kind is TriggerKind.PIPELINE else None,
+        triggered_by_id=run.triggered_by_id,
         triggered_by_label=run.triggered_by_label,
+        source=run.source_step,
         trace_id=telemetry.trace_id_of(run.traceparent),
         error=run.error or (failed.error if failed is not None else None),
         error_code=run.error_code or (failed.code if failed is not None else None),
@@ -160,12 +162,14 @@ def _dag(
             DagNode(
                 code=name,
                 name=step.name,
-                block=step.block,
+                kind=step.kind,
+                block=step.block_id,
                 outcome=states[name].outcome.value,
                 depends_on=list(step.depends_on),
                 rule=step.rule.value,
                 fan_out=step.is_fan_out,
                 grid_source=definition.grid_source(name),
+                item_wise_parent=item_wise_parent(definition, name),
                 items_total=sum(of_step.values()),
                 items_failed=of_step.get(RunItemStatus.FAILED, 0),
                 attempts=attempts[name].total if name in attempts else 0,

dirigent_server-0.24.0/src/dirigent_server/routes/sources.py

@@ -0,0 +1,164 @@
+"""A pipeline's sources: what each listens to, its state, what has arrived, and what an operator does to it.
+
+The instance keeps only the hash of a source's token, so the token is readable exactly once:
+when an apply mints it, or when it is rotated.
+"""
+
+from collections.abc import Sequence
+
+from fastapi import APIRouter
+from sqlalchemy.ext.asyncio import AsyncSession
+
+from dirigent_client.schemas import Page, SourceInputOut, SourceOut, SourceTokenOut
+from dirigent_core.engine.services import EngineServices
+from dirigent_core.models import Pipeline, Source
+from dirigent_core.pipelines import require_pipeline
+from dirigent_core.sources.rows import (
+    in_flight,
+    input_out,
+    list_inputs,
+    list_sources,
+    require_source,
+    rotate_source_token,
+    set_paused,
+    source_out,
+)
+from dirigent_server.dependencies import ServicesDep, SessionDep
+from dirigent_server.pagination import DEFAULT_PAGE, AfterParam, LimitParam, clip, int_cursor, uuid_cursor
+from dirigent_server.security import OperatorDep, PrincipalDep
+from dirigent_server.transactions import Transactional
+
+router = APIRouter(route_class=Transactional, tags=["sources"])
+
+
+@router.get("/sources", operation_id="listSources", summary="List every source", response_model=Page[SourceOut])
+async def list_all(
+    session: SessionDep,
+    services: ServicesDep,
+    principal: PrincipalDep,
+    after: AfterParam = None,
+    limit: LimitParam = DEFAULT_PAGE,
+) -> Page[SourceOut]:
+    """List every pipeline's sources, with their state and what they have taken, never their tokens."""
+    rows = await list_sources(session, after=uuid_cursor(after), limit=limit + 1)
+    return await _page(session, services, rows, limit)
+
+
+@router.get(
+    "/pipelines/{code}/sources",
+    operation_id="listPipelineSources",
+    summary="List a pipeline's sources",
+    response_model=Page[SourceOut],
+)
+async def list_of_pipeline(
+    code: str,
+    session: SessionDep,
+    services: ServicesDep,
+    principal: PrincipalDep,
+    after: AfterParam = None,
+    limit: LimitParam = DEFAULT_PAGE,
+) -> Page[SourceOut]:
+    """List one pipeline's sources, with their state and what they have taken, never their tokens."""
+    pipeline = await require_pipeline(session, code)
+    rows = await list_sources(session, pipeline_id=pipeline.id, after=uuid_cursor(after), limit=limit + 1)
+    return await _page(session, services, rows, limit)
+
+
+@router.get(
+    "/pipelines/{code}/sources/{source}",
+    operation_id="getSource",
+    summary="Read one source",
+    response_model=SourceOut,
+)
+async def get_source(
+    code: str, source: str, session: SessionDep, services: ServicesDep, principal: PrincipalDep
+) -> SourceOut:
+    """Read one source by its step code, never its token."""
+    pipeline = await require_pipeline(session, code)
+    row = await require_source(session, pipeline, source)
+    return await _one(session, services, row, pipeline)
+
+
+@router.post(
+    "/pipelines/{code}/sources/{source}/$pause",
+    operation_id="pauseSource",
+    summary="Pause a source",
+    response_model=SourceOut,
+)
+async def pause(
+    code: str, source: str, session: SessionDep, services: ServicesDep, principal: OperatorDep
+) -> SourceOut:
+    """Refuse new inputs with 503, keeping the token and the counts; runs in flight carry on."""
+    pipeline = await require_pipeline(session, code)
+    row = await set_paused(session, pipeline, await require_source(session, pipeline, source), paused=True)
+    return await _one(session, services, row, pipeline)
+
+
+@router.post(
+    "/pipelines/{code}/sources/{source}/$resume",
+    operation_id="resumeSource",
+    summary="Resume a source",
+    response_model=SourceOut,
+)
+async def resume(
+    code: str, source: str, session: SessionDep, services: ServicesDep, principal: OperatorDep
+) -> SourceOut:
+    """Take inputs again on the token that was already issued."""
+    pipeline = await require_pipeline(session, code)
+    row = await set_paused(session, pipeline, await require_source(session, pipeline, source), paused=False)
+    return await _one(session, services, row, pipeline)
+
+
+@router.post(
+    "/pipelines/{code}/sources/{source}/$rotate-token",
+    operation_id="rotateSourceToken",
+    summary="Rotate a source's token",
+    response_model=SourceTokenOut,
+)
+async def rotate(
+    code: str, source: str, session: SessionDep, services: ServicesDep, principal: OperatorDep
+) -> SourceTokenOut:
+    """Mint a new token and forget the old one immediately; every caller has to be given it."""
+    pipeline = await require_pipeline(session, code)
+    row = await require_source(session, pipeline, source)
+    return await rotate_source_token(session, services.settings, services.sources, pipeline, row)
+
+
+@router.get(
+    "/pipelines/{code}/sources/{source}/inputs",
+    operation_id="listSourceInputs",
+    summary="List a source's inputs",
+    response_model=Page[SourceInputOut],
+)
+async def inputs(
+    code: str,
+    source: str,
+    session: SessionDep,
+    principal: PrincipalDep,
+    after: AfterParam = None,
+    limit: LimitParam = DEFAULT_PAGE,
+) -> Page[SourceInputOut]:
+    """Read what has arrived, newest first, refusals included."""
+    pipeline = await require_pipeline(session, code)
+    row = await require_source(session, pipeline, source)
+    rows = await list_inputs(session, row.id, after=int_cursor(after), limit=limit + 1)
+    items, following = clip([input_out(entry) for entry in rows], limit, lambda entry: entry.id)
+    return Page(items=items, next=following)
+
+
+async def _one(session: AsyncSession, services: EngineServices, row: Source, pipeline: Pipeline) -> SourceOut:
+    """Render one source with the runs it has unsettled."""
+    unsettled = (await in_flight(session, [row.id])).get(row.id, 0)
+    return source_out(services.settings, services.sources, row, pipeline, unsettled)
+
+
+async def _page(
+    session: AsyncSession, services: EngineServices, rows: Sequence[tuple[Source, Pipeline]], limit: int
+) -> Page[SourceOut]:
+    """Render a page of sources, counting what each has unsettled in one query."""
+    page, following = clip(list(rows), limit, lambda pair: pair[0].id)
+    counts = await in_flight(session, [row.id for row, _ in page])
+    items = [
+        source_out(services.settings, services.sources, row, pipeline, counts.get(row.id, 0)) for row, pipeline in page
+    ]
+    return Page(items=items, next=following)

dirigent_server-0.23.3/src/dirigent_server/static/assets/AdminOnly-CtBdW1t6.js → dirigent_server-0.24.0/src/dirigent_server/static/assets/AdminOnly-Dqm_HMca.js

@@ -1 +1 @@
-import{t as e}from"./labels-DPg21HPJ.js";import{n as t}from"./PageState-859W4wWp.js";import{r as n}from"./utils-CT7ZGLfR.js";import{t as r}from"./use-store-CZcp6jmY.js";import{n as i,t as a}from"./auth-Bdybp9f_.js";var o=n(),s={status:403,title:e.refusal.admin_only,code:`server.forbidden`,params:{},detail:e.refusal.shut,problems:[],instance:null};function c({children:e}){let n=r(a);return i(n)?(0,o.jsx)(o.Fragment,{children:e}):(0,o.jsx)(t,{loading:!1,problem:s,empty:!1,children:null})}export{c as t};
+import{t as e}from"./labels-EiQNiH0M.js";import{n as t}from"./PageState-DF9ivqbc.js";import{r as n}from"./utils-CT7ZGLfR.js";import{t as r}from"./use-store-CZcp6jmY.js";import{n as i,t as a}from"./auth-B7r6W6Vu.js";var o=n(),s={status:403,title:e.refusal.admin_only,code:`server.forbidden`,params:{},detail:e.refusal.shut,problems:[],instance:null};function c({children:e}){let n=r(a);return i(n)?(0,o.jsx)(o.Fragment,{children:e}):(0,o.jsx)(t,{loading:!1,problem:s,empty:!1,children:null})}export{c as t};