@chorus-aidlc/chorus 0.10.0 → 0.11.1

package/.next/standalone/.next/server/chunks/5039.js

@@ -0,0 +1 @@
+"use strict";exports.id=5039,exports.ids=[5039],exports.modules={13277:(a,b,c)=>{c.r(b),c.d(b,{Label:()=>g,Root:()=>h});var d=c(21968),e=c(16551),f=c(10837),g=d.forwardRef((a,b)=>(0,f.jsx)(e.sG.label,{...a,ref:b,onMouseDown:b=>{b.target.closest("button, input, select, textarea")||(a.onMouseDown?.(b),!b.defaultPrevented&&b.detail>1&&b.preventDefault())}}));g.displayName="Label";var h=g},14672:(a,b,c)=>{c.r(b),c.d(b,{Avatar:()=>p,AvatarFallback:()=>t,AvatarImage:()=>r,Fallback:()=>x,Image:()=>w,Root:()=>v,createAvatarScope:()=>m});var d=c(21968),e=c(42990),f=c(87979),g=c(35439),h=c(16551),i=c(23771),j=c(10837),k="Avatar",[l,m]=(0,e.A)(k),[n,o]=l(k),p=d.forwardRef((a,b)=>{let{__scopeAvatar:c,...e}=a,[f,g]=d.useState("idle");return(0,j.jsx)(n,{scope:c,imageLoadingStatus:f,onImageLoadingStatusChange:g,children:(0,j.jsx)(h.sG.span,{...e,ref:b})})});p.displayName=k;var q="AvatarImage",r=d.forwardRef((a,b)=>{let{__scopeAvatar:c,src:e,onLoadingStatusChange:k=()=>{},...l}=a,m=o(q,c),n=function(a,{referrerPolicy:b,crossOrigin:c}){let e=(0,i.z)(),f=d.useRef(null),h=e?(f.current||(f.current=new window.Image),f.current):null,[j,k]=d.useState(()=>u(h,a));return(0,g.N)(()=>{k(u(h,a))},[h,a]),(0,g.N)(()=>{let a=a=>()=>{k(a)};if(!h)return;let d=a("loaded"),e=a("error");return h.addEventListener("load",d),h.addEventListener("error",e),b&&(h.referrerPolicy=b),"string"==typeof c&&(h.crossOrigin=c),()=>{h.removeEventListener("load",d),h.removeEventListener("error",e)}},[h,c,b]),j}(e,l),p=(0,f.c)(a=>{k(a),m.onImageLoadingStatusChange(a)});return(0,g.N)(()=>{"idle"!==n&&p(n)},[n,p]),"loaded"===n?(0,j.jsx)(h.sG.img,{...l,ref:b,src:e}):null});r.displayName=q;var s="AvatarFallback",t=d.forwardRef((a,b)=>{let{__scopeAvatar:c,delayMs:e,...f}=a,g=o(s,c),[i,k]=d.useState(void 0===e);return d.useEffect(()=>{if(void 0!==e){let a=window.setTimeout(()=>k(!0),e);return()=>window.clearTimeout(a)}},[e]),i&&"loaded"!==g.imageLoadingStatus?(0,j.jsx)(h.sG.span,{...f,ref:b}):null});function u(a,b){return a?b?(a.src!==b&&(a.src=b),a.complete&&a.naturalWidth>0?"loaded":"loading"):"error":"idle"}t.displayName=s;var v=p,w=r,x=t},15644:(a,b,c)=>{c.r(b),c.d(b,{Root:()=>w,Switch:()=>r,SwitchThumb:()=>t,Thumb:()=>x,createSwitchScope:()=>o});var d=c(21968),e=c(22546),f=c(96090),g=c(42990),h=c(15035),i=c(29851),j=c(7579),k=c(16551),l=c(10837),m="Switch",[n,o]=(0,g.A)(m),[p,q]=n(m),r=d.forwardRef((a,b)=>{let{__scopeSwitch:c,name:g,checked:i,defaultChecked:j,required:n,disabled:o,value:q="on",onCheckedChange:r,form:s,...t}=a,[w,x]=d.useState(null),y=(0,f.s)(b,a=>x(a)),z=d.useRef(!1),A=!w||s||!!w.closest("form"),[B,C]=(0,h.i)({prop:i,defaultProp:j??!1,onChange:r,caller:m});return(0,l.jsxs)(p,{scope:c,checked:B,disabled:o,children:[(0,l.jsx)(k.sG.button,{type:"button",role:"switch","aria-checked":B,"aria-required":n,"data-state":v(B),"data-disabled":o?"":void 0,disabled:o,value:q,...t,ref:y,onClick:(0,e.mK)(a.onClick,a=>{C(a=>!a),A&&(z.current=a.isPropagationStopped(),z.current||a.stopPropagation())})}),A&&(0,l.jsx)(u,{control:w,bubbles:!z.current,name:g,value:q,checked:B,required:n,disabled:o,form:s,style:{transform:"translateX(-100%)"}})]})});r.displayName=m;var s="SwitchThumb",t=d.forwardRef((a,b)=>{let{__scopeSwitch:c,...d}=a,e=q(s,c);return(0,l.jsx)(k.sG.span,{"data-state":v(e.checked),"data-disabled":e.disabled?"":void 0,...d,ref:b})});t.displayName=s;var u=d.forwardRef(({__scopeSwitch:a,control:b,checked:c,bubbles:e=!0,...g},h)=>{let k=d.useRef(null),m=(0,f.s)(k,h),n=(0,i.Z)(c),o=(0,j.X)(b);return d.useEffect(()=>{let a=k.current;if(!a)return;let b=Object.getOwnPropertyDescriptor(window.HTMLInputElement.prototype,"checked").set;if(n!==c&&b){let d=new Event("click",{bubbles:e});b.call(a,c),a.dispatchEvent(d)}},[n,c,e]),(0,l.jsx)("input",{type:"checkbox","aria-hidden":!0,defaultChecked:c,...g,tabIndex:-1,ref:m,style:{...g.style,...o,position:"absolute",pointerEvents:"none",opacity:0,margin:0}})});function v(a){return a?"checked":"unchecked"}u.displayName="SwitchBubbleInput";var w=r,x=t},15703:(a,b,c)=>{a.exports=c(51928)},23771:(a,b,c)=>{c.d(b,{z:()=>e});var d=c(15703);function e(){return(0,d.useSyncExternalStore)(f,()=>!0,()=>!1)}function f(){return()=>{}}},28121:(a,b,c)=>{c.r(b),c.d(b,{Indicator:()=>N,Item:()=>M,RadioGroup:()=>H,RadioGroupIndicator:()=>K,RadioGroupItem:()=>J,Root:()=>L,createRadioGroupScope:()=>C});var d=c(21968),e=c(22546),f=c(96090),g=c(42990),h=c(16551),i=c(13700),j=c(15035),k=c(16305),l=c(7579),m=c(29851),n=c(5030),o=c(10837),p="Radio",[q,r]=(0,g.A)(p),[s,t]=q(p),u=d.forwardRef((a,b)=>{let{__scopeRadio:c,name:g,checked:i=!1,required:j,disabled:k,value:l="on",onCheck:m,form:n,...p}=a,[q,r]=d.useState(null),t=(0,f.s)(b,a=>r(a)),u=d.useRef(!1),v=!q||n||!!q.closest("form");return(0,o.jsxs)(s,{scope:c,checked:i,disabled:k,children:[(0,o.jsx)(h.sG.button,{type:"button",role:"radio","aria-checked":i,"data-state":y(i),"data-disabled":k?"":void 0,disabled:k,value:l,...p,ref:t,onClick:(0,e.mK)(a.onClick,a=>{i||m?.(),v&&(u.current=a.isPropagationStopped(),u.current||a.stopPropagation())})}),v&&(0,o.jsx)(x,{control:q,bubbles:!u.current,name:g,value:l,checked:i,required:j,disabled:k,form:n,style:{transform:"translateX(-100%)"}})]})});u.displayName=p;var v="RadioIndicator",w=d.forwardRef((a,b)=>{let{__scopeRadio:c,forceMount:d,...e}=a,f=t(v,c);return(0,o.jsx)(n.C,{present:d||f.checked,children:(0,o.jsx)(h.sG.span,{"data-state":y(f.checked),"data-disabled":f.disabled?"":void 0,...e,ref:b})})});w.displayName=v;var x=d.forwardRef(({__scopeRadio:a,control:b,checked:c,bubbles:e=!0,...g},i)=>{let j=d.useRef(null),k=(0,f.s)(j,i),n=(0,m.Z)(c),p=(0,l.X)(b);return d.useEffect(()=>{let a=j.current;if(!a)return;let b=Object.getOwnPropertyDescriptor(window.HTMLInputElement.prototype,"checked").set;if(n!==c&&b){let d=new Event("click",{bubbles:e});b.call(a,c),a.dispatchEvent(d)}},[n,c,e]),(0,o.jsx)(h.sG.input,{type:"radio","aria-hidden":!0,defaultChecked:c,...g,tabIndex:-1,ref:k,style:{...g.style,...p,position:"absolute",pointerEvents:"none",opacity:0,margin:0}})});function y(a){return a?"checked":"unchecked"}x.displayName="RadioBubbleInput";var z=["ArrowUp","ArrowDown","ArrowLeft","ArrowRight"],A="RadioGroup",[B,C]=(0,g.A)(A,[i.RG,r]),D=(0,i.RG)(),E=r(),[F,G]=B(A),H=d.forwardRef((a,b)=>{let{__scopeRadioGroup:c,name:d,defaultValue:e,value:f,required:g=!1,disabled:l=!1,orientation:m,dir:n,loop:p=!0,onValueChange:q,...r}=a,s=D(c),t=(0,k.jH)(n),[u,v]=(0,j.i)({prop:f,defaultProp:e??null,onChange:q,caller:A});return(0,o.jsx)(F,{scope:c,name:d,required:g,disabled:l,value:u,onValueChange:v,children:(0,o.jsx)(i.bL,{asChild:!0,...s,orientation:m,dir:t,loop:p,children:(0,o.jsx)(h.sG.div,{role:"radiogroup","aria-required":g,"aria-orientation":m,"data-disabled":l?"":void 0,dir:t,...r,ref:b})})})});H.displayName=A;var I="RadioGroupItem",J=d.forwardRef((a,b)=>{let{__scopeRadioGroup:c,disabled:g,...h}=a,j=G(I,c),k=j.disabled||g,l=D(c),m=E(c),n=d.useRef(null),p=(0,f.s)(b,n),q=j.value===h.value,r=d.useRef(!1);return d.useEffect(()=>{let a=a=>{z.includes(a.key)&&(r.current=!0)},b=()=>r.current=!1;return document.addEventListener("keydown",a),document.addEventListener("keyup",b),()=>{document.removeEventListener("keydown",a),document.removeEventListener("keyup",b)}},[]),(0,o.jsx)(i.q7,{asChild:!0,...l,focusable:!k,active:q,children:(0,o.jsx)(u,{disabled:k,required:j.required,checked:q,...m,...h,name:j.name,ref:p,onCheck:()=>j.onValueChange(h.value),onKeyDown:(0,e.mK)(a=>{"Enter"===a.key&&a.preventDefault()}),onFocus:(0,e.mK)(h.onFocus,()=>{r.current&&n.current?.click()})})})});J.displayName=I;var K=d.forwardRef((a,b)=>{let{__scopeRadioGroup:c,...d}=a,e=E(c);return(0,o.jsx)(w,{...e,...d,ref:b})});K.displayName="RadioGroupIndicator";var L=H,M=J,N=K},51928:(a,b,c)=>{var d=c(21968),e="function"==typeof Object.is?Object.is:function(a,b){return a===b&&(0!==a||1/a==1/b)||a!=a&&b!=b},f=d.useState,g=d.useEffect,h=d.useLayoutEffect,i=d.useDebugValue;function j(a){var b=a.getSnapshot;a=a.value;try{var c=b();return!e(a,c)}catch(a){return!0}}var k="undefined"==typeof window||void 0===window.document||void 0===window.document.createElement?function(a,b){return b()}:function(a,b){var c=b(),d=f({inst:{value:c,getSnapshot:b}}),e=d[0].inst,k=d[1];return h(function(){e.value=c,e.getSnapshot=b,j(e)&&k({inst:e})},[a,c,b]),g(function(){return j(e)&&k({inst:e}),a(function(){j(e)&&k({inst:e})})},[a]),i(c),c};b.useSyncExternalStore=void 0!==d.useSyncExternalStore?d.useSyncExternalStore:k}};

package/.next/standalone/.next/server/chunks/5300.js

@@ -1 +1 @@
-exports.id=5300,exports.ids=[5300],exports.modules={7046:(a,b,c)=>{"use strict";c.d(b,{kX:()=>e,od:()=>f,sO:()=>j});var d=c(70936);function e(a,b){return d.NextResponse.json({success:!0,data:a,meta:b})}function f(a,b,c,e){return d.NextResponse.json({success:!0,data:a,meta:{page:b,pageSize:c,total:e}})}let g={BAD_REQUEST:"BAD_REQUEST",UNAUTHORIZED:"UNAUTHORIZED",FORBIDDEN:"FORBIDDEN",NOT_FOUND:"NOT_FOUND",CONFLICT:"CONFLICT",VALIDATION_ERROR:"VALIDATION_ERROR",ALREADY_CLAIMED:"ALREADY_CLAIMED",NOT_CLAIMED:"NOT_CLAIMED",INVALID_STATUS_TRANSITION:"INVALID_STATUS_TRANSITION",PERMISSION_DENIED:"PERMISSION_DENIED",INTERNAL_ERROR:"INTERNAL_ERROR",DATABASE_ERROR:"DATABASE_ERROR"},h={[g.BAD_REQUEST]:400,[g.UNAUTHORIZED]:401,[g.FORBIDDEN]:403,[g.NOT_FOUND]:404,[g.CONFLICT]:409,[g.VALIDATION_ERROR]:422,[g.ALREADY_CLAIMED]:409,[g.NOT_CLAIMED]:400,[g.INVALID_STATUS_TRANSITION]:400,[g.PERMISSION_DENIED]:403,[g.INTERNAL_ERROR]:500,[g.DATABASE_ERROR]:500};function i(a,b,c){let e=h[a]||500;return d.NextResponse.json({success:!1,error:{code:a,message:b,details:c}},{status:e})}let j={badRequest:(a,b)=>i(g.BAD_REQUEST,a,b),unauthorized:(a="Authentication required")=>i(g.UNAUTHORIZED,a),forbidden:(a="Access denied")=>i(g.FORBIDDEN,a),notFound:(a="Resource")=>i(g.NOT_FOUND,`${a} not found`),conflict:a=>i(g.CONFLICT,a),validationError:a=>i(g.VALIDATION_ERROR,"Validation failed",a),alreadyClaimed:()=>i(g.ALREADY_CLAIMED,"Resource is already claimed"),notClaimed:()=>i(g.NOT_CLAIMED,"Resource is not claimed"),invalidStatusTransition:(a,b)=>i(g.INVALID_STATUS_TRANSITION,`Invalid status transition from ${a} to ${b}`),permissionDenied:a=>i(g.PERMISSION_DENIED,`Permission denied: ${a}`),internal:(a="Internal server error")=>i(g.INTERNAL_ERROR,a),database:(a="Database error")=>i(g.DATABASE_ERROR,a)}},11716:(a,b,c)=>{"use strict";function d(a,b=3600){try{let c=a.split(".");if(3!==c.length)return b;let d=JSON.parse(Buffer.from(c[1],"base64url").toString("utf-8"));if("number"==typeof d.exp){let a=d.exp-Math.floor(Date.now()/1e3);return Math.max(a+60,0)}return b}catch{return b}}function e(a){return{httpOnly:!0,secure:"false"!==process.env.COOKIE_SECURE,sameSite:"lax",path:"/",maxAge:a}}c.d(b,{H:()=>d,f:()=>e})},15264:(a,b,c)=>{"use strict";c.d(b,{$Y:()=>l,Bz:()=>o,En:()=>m,Iu:()=>p,NE:()=>j,VM:()=>n,ev:()=>k,wL:()=>q});var d=c(73365),e=c(3548),f=c(11716);let g="user_session",h="user_refresh";function i(){let a=process.env.NEXTAUTH_SECRET;if(!a)throw Error("NEXTAUTH_SECRET is not set");return new TextEncoder().encode(a)}async function j(a,b="1h"){return new d.P({...a,tokenType:"access"}).setProtectedHeader({alg:"HS256"}).setIssuedAt().setExpirationTime(b).sign(i())}async function k(a){return new d.P({userUuid:a.userUuid,companyUuid:a.companyUuid,tokenType:"refresh"}).setProtectedHeader({alg:"HS256"}).setIssuedAt().setExpirationTime("7d").sign(i())}async function l(a){try{let{payload:b}=await (0,e.V)(a,i());if("user"===b.type&&"access"===b.tokenType)return{type:"user",userUuid:b.userUuid,companyUuid:b.companyUuid,email:b.email,name:b.name,oidcSub:b.oidcSub,oidcAccessToken:b.oidcAccessToken,oidcRefreshToken:b.oidcRefreshToken,oidcExpiresAt:b.oidcExpiresAt};return null}catch{return null}}async function m(a){try{let{payload:b}=await (0,e.V)(a,i());if("refresh"===b.tokenType)return{userUuid:b.userUuid,companyUuid:b.companyUuid};return null}catch{return null}}async function n(a){let b=function(a){if(!a)return null;let b=a.match(/^Bearer\s+(.+)$/i);return b?b[1]:null}(a.headers.get("authorization"));if(b){let a=await l(b);if(a)return{type:"user",companyUuid:a.companyUuid,actorUuid:a.userUuid,email:a.email,name:a.name}}let c=a.cookies.get(g)?.value;if(!c)return null;let d=await l(c);return d?{type:"user",companyUuid:d.companyUuid,actorUuid:d.userUuid,email:d.email,name:d.name}:null}function o(a,b,c,d=3600){a.cookies.set(g,b,(0,f.f)(d)),a.cookies.set(h,c,(0,f.f)(604800))}function p(a){a.cookies.set(g,"",(0,f.f)(0)),a.cookies.set(h,"",(0,f.f)(0))}function q(a){return a.cookies.get(h)?.value||null}},30265:(a,b,c)=>{"use strict";c.d(b,{A0:()=>p,To:()=>m,l1:()=>r,lW:()=>l,sn:()=>q,zt:()=>n});var d=c(73365),e=c(3548),f=c(73608),g=c.n(f),h=c(11716),i=c(65582);let j="admin_session";function k(){let a=process.env.NEXTAUTH_SECRET;if(!a)throw Error("NEXTAUTH_SECRET is not set");return new TextEncoder().encode(a)}function l(a){let b=process.env.SUPER_ADMIN_EMAIL;return!!b&&a.toLowerCase()===b.toLowerCase()}async function m(a){let b=process.env.SUPER_ADMIN_PASSWORD_HASH;if(!b)return i.A.error("SUPER_ADMIN_PASSWORD_HASH is not set"),!1;try{return await g().compare(a,b)}catch(a){return i.A.error({err:a},"Password verification error"),!1}}async function n(){let a=process.env.SUPER_ADMIN_EMAIL;if(!a)throw Error("SUPER_ADMIN_EMAIL is not set");return new d.P({type:"super_admin",email:a}).setProtectedHeader({alg:"HS256"}).setIssuedAt().setExpirationTime("24h").sign(k())}async function o(a){try{let{payload:b}=await (0,e.V)(a,k());if("super_admin"===b.type&&"string"==typeof b.email)return{type:"super_admin",email:b.email};return null}catch{return null}}async function p(a){let b=a.cookies.get(j)?.value;return b?o(b):null}function q(a,b){a.cookies.set(j,b,(0,h.f)(86400))}function r(a){a.cookies.set(j,"",(0,h.f)(0))}},46938:(a,b,c)=>{"use strict";c.d(b,{RU:()=>i,XH:()=>j,s8:()=>h});let d={developer_agent:["idea:read","proposal:read","document:read","project:read","task:read","task:write"],pm_agent:["idea:read","idea:write","proposal:read","proposal:write","document:read","document:write","task:read","task:write","project:read","project:write"],admin_agent:["idea:read","idea:write","idea:admin","proposal:read","proposal:write","proposal:admin","document:read","document:write","document:admin","task:read","task:write","task:admin","project:read","project:write","project:admin"]},e=["idea","proposal","document","task","project"],f=["read","write","admin"],g=new Set(e.flatMap(a=>f.map(b=>`${a}:${b}`)));function h(a){return g.has(a)}function i(a,b){let c=new Set;if(a)for(let b of a){let a=d[b.endsWith("_agent")?b:`${b}_agent`];if(a)for(let b of a)c.add(b)}if(b)for(let a of b)h(a)&&c.add(a);return c}function j(a){let b={};for(let c of a){if(!h(c))continue;let[a,d]=c.split(":");(b[a]??=[]).push(d)}for(let a of e){let c=b[a];c&&c.sort((a,b)=>f.indexOf(a)-f.indexOf(b))}return b}},63478:(a,b,c)=>{"use strict";c.a(a,async(a,d)=>{try{c.d(b,{Tr:()=>k,XH:()=>i,ek:()=>l});var e=c(55511),f=c(52618),g=c(65582),h=a([f]);f=(h.then?(await h)():h)[0];let m="cho_";function i(){let a=(0,e.randomBytes)(32).toString("base64url"),b=`${m}${a}`,c=j(b),d=`${m}${a.slice(0,4)}...${a.slice(-4)}`;return{key:b,hash:c,prefix:d}}function j(a){return(0,e.createHash)("sha256").update(a).digest("hex")}function k(a){return a?a.startsWith("Bearer ")?a.slice(7):a.startsWith(m)?a:null:null}async function l(a){try{if(!a.startsWith(m))return{valid:!1,error:"Invalid API key format"};let b=j(a),c=await f.z.apiKey.findUnique({where:{keyHash:b},include:{agent:!0}});if(!c)return{valid:!1,error:"API key not found"};if(c.revokedAt)return{valid:!1,error:"API key has been revoked"};if(c.expiresAt&&c.expiresAt<new Date)return{valid:!1,error:"API key has expired"};return f.z.apiKey.update({where:{uuid:c.uuid},data:{lastUsed:new Date}}).catch(()=>{}),{valid:!0,agent:{uuid:c.agent.uuid,companyUuid:c.agent.companyUuid,name:c.agent.name,roles:c.agent.roles,permissions:c.agent.permissions,ownerUuid:c.agent.ownerUuid},apiKey:{uuid:c.uuid}}}catch(a){return g.A.error({err:a},"API key validation error"),{valid:!1,error:"Internal validation error"}}}d()}catch(a){d(a)}})},74438:(a,b,c)=>{"use strict";c.a(a,async(a,d)=>{try{c.d(b,{Q:()=>j,t:()=>k});var e=c(41195),f=c(3548),g=c(52618),h=c(65582),i=a([g]);g=(i.then?(await i)():i)[0];let l=new Map;async function j(a){try{let b=a.split(".");if(3!==b.length)return null;let c=JSON.parse(Buffer.from(b[1],"base64url").toString("utf-8")).iss;if(!c)return null;let d=function(a){if(!l.has(a)){let b=new URL(`${a.replace(/\/$/,"")}/.well-known/jwks.json`);l.set(a,(0,e.RD)(b))}return l.get(a)}(c),{payload:h}=await (0,f.V)(a,d,{issuer:c});if(h.token_use&&"access"!==h.token_use)return null;let i=await g.z.company.findFirst({where:{oidcEnabled:!0,oidcIssuer:c}});if(!i)return null;let j=await g.z.user.findFirst({where:{companyUuid:i.uuid,oidcSub:h.sub}});if(!j)return null;return{type:"user",companyUuid:i.uuid,actorUuid:j.uuid,email:j.email||h.email,name:j.name||h.name}}catch(a){return h.A.error({err:a},"OIDC token verification failed"),null}}function k(a){if(a.startsWith("cho_"))return!1;let b=a.split(".");if(3!==b.length)return!1;try{let a=JSON.parse(Buffer.from(b[0],"base64url").toString("utf-8"));return a.alg&&(a.alg.startsWith("RS")||a.alg.startsWith("ES"))}catch{return!1}}d()}catch(a){d(a)}})},75700:(a,b,c)=>{"use strict";c.a(a,async(a,d)=>{try{c.d(b,{Kv:()=>r,QY:()=>n,W0:()=>l,_m:()=>o,e3:()=>q,tz:()=>p,yh:()=>m});var e=c(63478),f=c(7046),g=c(46938),h=c(30265),i=c(15264),j=c(74438),k=a([e,j]);async function l(a){let b=a.headers.get("authorization");if(b?.toLowerCase().startsWith("bearer ")){let c=b.substring(7).trim();if(c.startsWith("cho_")){let a=await (0,e.ek)(c);if(a.valid&&a.agent){let b=(0,g.RU)(a.agent.roles,a.agent.permissions);return{type:"agent",companyUuid:a.agent.companyUuid,actorUuid:a.agent.uuid,roles:a.agent.roles,permissions:Array.from(b),ownerUuid:a.agent.ownerUuid??void 0,agentName:a.agent.name}}}if((0,j.t)(c)){let a=await (0,j.Q)(c);if(a)return a}let d=await (0,i.VM)(a);if(d)return d}let c=await (0,i.VM)(a);if(c)return c;let d=a.cookies.get("oidc_access_token")?.value;if(d&&(0,j.t)(d)){let a=await (0,j.Q)(d);if(a)return a}return null}function m(a){return"agent"===a.type}function n(a){return"user"===a.type}function o(a,b){return"super_admin"===a.type||a.permissions.includes(b)}function p(a,b){return"agent"!==a.type||o(a,b)?null:f.sO.forbidden(`Missing permission: ${b}`)}function q(a,b,c){return!!b&&!!c&&(!!(n(a)&&"user"===b&&c===a.actorUuid||m(a)&&("agent"===b&&c===a.actorUuid||"user"===b&&a.ownerUuid&&c===a.ownerUuid))||!1)}function r(a){return async(b,c)=>{let d=await (0,h.A0)(b);return d?a(b,c,d):f.sO.unauthorized("Super Admin authentication required")}}[e,j]=k.then?(await k)():k,d()}catch(a){d(a)}})},81180:()=>{},90908:()=>{}};
+exports.id=5300,exports.ids=[5300],exports.modules={7046:(a,b,c)=>{"use strict";c.d(b,{kX:()=>e,od:()=>f,sO:()=>j});var d=c(70936);function e(a,b){return d.NextResponse.json({success:!0,data:a,meta:b})}function f(a,b,c,e){return d.NextResponse.json({success:!0,data:a,meta:{page:b,pageSize:c,total:e}})}let g={BAD_REQUEST:"BAD_REQUEST",UNAUTHORIZED:"UNAUTHORIZED",FORBIDDEN:"FORBIDDEN",NOT_FOUND:"NOT_FOUND",CONFLICT:"CONFLICT",VALIDATION_ERROR:"VALIDATION_ERROR",ALREADY_CLAIMED:"ALREADY_CLAIMED",NOT_CLAIMED:"NOT_CLAIMED",INVALID_STATUS_TRANSITION:"INVALID_STATUS_TRANSITION",PERMISSION_DENIED:"PERMISSION_DENIED",INTERNAL_ERROR:"INTERNAL_ERROR",DATABASE_ERROR:"DATABASE_ERROR"},h={[g.BAD_REQUEST]:400,[g.UNAUTHORIZED]:401,[g.FORBIDDEN]:403,[g.NOT_FOUND]:404,[g.CONFLICT]:409,[g.VALIDATION_ERROR]:422,[g.ALREADY_CLAIMED]:409,[g.NOT_CLAIMED]:400,[g.INVALID_STATUS_TRANSITION]:400,[g.PERMISSION_DENIED]:403,[g.INTERNAL_ERROR]:500,[g.DATABASE_ERROR]:500};function i(a,b,c){let e=h[a]||500;return d.NextResponse.json({success:!1,error:{code:a,message:b,details:c}},{status:e})}let j={badRequest:(a,b)=>i(g.BAD_REQUEST,a,b),unauthorized:(a="Authentication required")=>i(g.UNAUTHORIZED,a),forbidden:(a="Access denied")=>i(g.FORBIDDEN,a),notFound:(a="Resource")=>i(g.NOT_FOUND,`${a} not found`),conflict:a=>i(g.CONFLICT,a),validationError:a=>i(g.VALIDATION_ERROR,"Validation failed",a),alreadyClaimed:()=>i(g.ALREADY_CLAIMED,"Resource is already claimed"),notClaimed:()=>i(g.NOT_CLAIMED,"Resource is not claimed"),invalidStatusTransition:(a,b)=>i(g.INVALID_STATUS_TRANSITION,`Invalid status transition from ${a} to ${b}`),permissionDenied:a=>i(g.PERMISSION_DENIED,`Permission denied: ${a}`),internal:(a="Internal server error")=>i(g.INTERNAL_ERROR,a),database:(a="Database error")=>i(g.DATABASE_ERROR,a)}},11716:(a,b,c)=>{"use strict";function d(a,b=3600){try{let c=a.split(".");if(3!==c.length)return b;let d=JSON.parse(Buffer.from(c[1],"base64url").toString("utf-8"));if("number"==typeof d.exp){let a=d.exp-Math.floor(Date.now()/1e3);return Math.max(a+60,0)}return b}catch{return b}}function e(a){return{httpOnly:!0,secure:"false"!==process.env.COOKIE_SECURE,sameSite:"lax",path:"/",maxAge:a}}c.d(b,{H:()=>d,f:()=>e})},15264:(a,b,c)=>{"use strict";c.d(b,{$Y:()=>l,Bz:()=>o,En:()=>m,Iu:()=>p,NE:()=>j,VM:()=>n,ev:()=>k,wL:()=>q});var d=c(73365),e=c(3548),f=c(11716);let g="user_session",h="user_refresh";function i(){let a=process.env.NEXTAUTH_SECRET;if(!a)throw Error("NEXTAUTH_SECRET is not set");return new TextEncoder().encode(a)}async function j(a,b="1h"){return new d.P({...a,tokenType:"access"}).setProtectedHeader({alg:"HS256"}).setIssuedAt().setExpirationTime(b).sign(i())}async function k(a){return new d.P({userUuid:a.userUuid,companyUuid:a.companyUuid,tokenType:"refresh"}).setProtectedHeader({alg:"HS256"}).setIssuedAt().setExpirationTime("7d").sign(i())}async function l(a){try{let{payload:b}=await (0,e.V)(a,i());if("user"===b.type&&"access"===b.tokenType)return{type:"user",userUuid:b.userUuid,companyUuid:b.companyUuid,email:b.email,name:b.name,oidcSub:b.oidcSub,oidcAccessToken:b.oidcAccessToken,oidcRefreshToken:b.oidcRefreshToken,oidcExpiresAt:b.oidcExpiresAt};return null}catch{return null}}async function m(a){try{let{payload:b}=await (0,e.V)(a,i());if("refresh"===b.tokenType)return{userUuid:b.userUuid,companyUuid:b.companyUuid};return null}catch{return null}}async function n(a){let b=function(a){if(!a)return null;let b=a.match(/^Bearer\s+(.+)$/i);return b?b[1]:null}(a.headers.get("authorization"));if(b){let a=await l(b);if(a)return{type:"user",companyUuid:a.companyUuid,actorUuid:a.userUuid,email:a.email,name:a.name}}let c=a.cookies.get(g)?.value;if(!c)return null;let d=await l(c);return d?{type:"user",companyUuid:d.companyUuid,actorUuid:d.userUuid,email:d.email,name:d.name}:null}function o(a,b,c,d=3600){a.cookies.set(g,b,(0,f.f)(d)),a.cookies.set(h,c,(0,f.f)(604800))}function p(a){a.cookies.set(g,"",(0,f.f)(0)),a.cookies.set(h,"",(0,f.f)(0))}function q(a){return a.cookies.get(h)?.value||null}},30265:(a,b,c)=>{"use strict";c.d(b,{A0:()=>p,To:()=>m,l1:()=>r,lW:()=>l,sn:()=>q,zt:()=>n});var d=c(73365),e=c(3548),f=c(73608),g=c.n(f),h=c(11716),i=c(65582);let j="admin_session";function k(){let a=process.env.NEXTAUTH_SECRET;if(!a)throw Error("NEXTAUTH_SECRET is not set");return new TextEncoder().encode(a)}function l(a){let b=process.env.SUPER_ADMIN_EMAIL;return!!b&&a.toLowerCase()===b.toLowerCase()}async function m(a){let b=process.env.SUPER_ADMIN_PASSWORD_HASH;if(!b)return i.default.error("SUPER_ADMIN_PASSWORD_HASH is not set"),!1;try{return await g().compare(a,b)}catch(a){return i.default.error({err:a},"Password verification error"),!1}}async function n(){let a=process.env.SUPER_ADMIN_EMAIL;if(!a)throw Error("SUPER_ADMIN_EMAIL is not set");return new d.P({type:"super_admin",email:a}).setProtectedHeader({alg:"HS256"}).setIssuedAt().setExpirationTime("24h").sign(k())}async function o(a){try{let{payload:b}=await (0,e.V)(a,k());if("super_admin"===b.type&&"string"==typeof b.email)return{type:"super_admin",email:b.email};return null}catch{return null}}async function p(a){let b=a.cookies.get(j)?.value;return b?o(b):null}function q(a,b){a.cookies.set(j,b,(0,h.f)(86400))}function r(a){a.cookies.set(j,"",(0,h.f)(0))}},46938:(a,b,c)=>{"use strict";c.d(b,{RU:()=>i,XH:()=>j,s8:()=>h});let d={developer_agent:["idea:read","proposal:read","document:read","project:read","task:read","task:write"],pm_agent:["idea:read","idea:write","proposal:read","proposal:write","document:read","document:write","task:read","task:write","project:read","project:write"],admin_agent:["idea:read","idea:write","idea:admin","proposal:read","proposal:write","proposal:admin","document:read","document:write","document:admin","task:read","task:write","task:admin","project:read","project:write","project:admin"]},e=["idea","proposal","document","task","project"],f=["read","write","admin"],g=new Set(e.flatMap(a=>f.map(b=>`${a}:${b}`)));function h(a){return g.has(a)}function i(a,b){let c=new Set;if(a)for(let b of a){let a=d[b.endsWith("_agent")?b:`${b}_agent`];if(a)for(let b of a)c.add(b)}if(b)for(let a of b)h(a)&&c.add(a);return c}function j(a){let b={};for(let c of a){if(!h(c))continue;let[a,d]=c.split(":");(b[a]??=[]).push(d)}for(let a of e){let c=b[a];c&&c.sort((a,b)=>f.indexOf(a)-f.indexOf(b))}return b}},63478:(a,b,c)=>{"use strict";c.a(a,async(a,d)=>{try{c.d(b,{Tr:()=>k,XH:()=>i,ek:()=>l});var e=c(55511),f=c(52618),g=c(65582),h=a([f]);f=(h.then?(await h)():h)[0];let m="cho_";function i(){let a=(0,e.randomBytes)(32).toString("base64url"),b=`${m}${a}`,c=j(b),d=`${m}${a.slice(0,4)}...${a.slice(-4)}`;return{key:b,hash:c,prefix:d}}function j(a){return(0,e.createHash)("sha256").update(a).digest("hex")}function k(a){return a?a.startsWith("Bearer ")?a.slice(7):a.startsWith(m)?a:null:null}async function l(a){try{if(!a.startsWith(m))return{valid:!1,error:"Invalid API key format"};let b=j(a),c=await f.z.apiKey.findUnique({where:{keyHash:b},include:{agent:!0}});if(!c)return{valid:!1,error:"API key not found"};if(c.revokedAt)return{valid:!1,error:"API key has been revoked"};if(c.expiresAt&&c.expiresAt<new Date)return{valid:!1,error:"API key has expired"};return f.z.apiKey.update({where:{uuid:c.uuid},data:{lastUsed:new Date}}).catch(()=>{}),{valid:!0,agent:{uuid:c.agent.uuid,companyUuid:c.agent.companyUuid,name:c.agent.name,roles:c.agent.roles,permissions:c.agent.permissions,ownerUuid:c.agent.ownerUuid},apiKey:{uuid:c.uuid}}}catch(a){return g.default.error({err:a},"API key validation error"),{valid:!1,error:"Internal validation error"}}}d()}catch(a){d(a)}})},74438:(a,b,c)=>{"use strict";c.a(a,async(a,d)=>{try{c.d(b,{Q:()=>j,t:()=>k});var e=c(41195),f=c(3548),g=c(52618),h=c(65582),i=a([g]);g=(i.then?(await i)():i)[0];let l=new Map;async function j(a){try{let b=a.split(".");if(3!==b.length)return null;let c=JSON.parse(Buffer.from(b[1],"base64url").toString("utf-8")).iss;if(!c)return null;let d=function(a){if(!l.has(a)){let b=new URL(`${a.replace(/\/$/,"")}/.well-known/jwks.json`);l.set(a,(0,e.RD)(b))}return l.get(a)}(c),{payload:h}=await (0,f.V)(a,d,{issuer:c});if(h.token_use&&"access"!==h.token_use)return null;let i=await g.z.company.findFirst({where:{oidcEnabled:!0,oidcIssuer:c}});if(!i)return null;let j=await g.z.user.findFirst({where:{companyUuid:i.uuid,oidcSub:h.sub}});if(!j)return null;return{type:"user",companyUuid:i.uuid,actorUuid:j.uuid,email:j.email||h.email,name:j.name||h.name}}catch(a){return h.default.error({err:a},"OIDC token verification failed"),null}}function k(a){if(a.startsWith("cho_"))return!1;let b=a.split(".");if(3!==b.length)return!1;try{let a=JSON.parse(Buffer.from(b[0],"base64url").toString("utf-8"));return a.alg&&(a.alg.startsWith("RS")||a.alg.startsWith("ES"))}catch{return!1}}d()}catch(a){d(a)}})},75700:(a,b,c)=>{"use strict";c.a(a,async(a,d)=>{try{c.d(b,{Kv:()=>r,QY:()=>n,W0:()=>l,_m:()=>o,e3:()=>q,tz:()=>p,yh:()=>m});var e=c(63478),f=c(7046),g=c(46938),h=c(30265),i=c(15264),j=c(74438),k=a([e,j]);async function l(a){let b=a.headers.get("authorization");if(b?.toLowerCase().startsWith("bearer ")){let c=b.substring(7).trim();if(c.startsWith("cho_")){let a=await (0,e.ek)(c);if(a.valid&&a.agent){let b=(0,g.RU)(a.agent.roles,a.agent.permissions);return{type:"agent",companyUuid:a.agent.companyUuid,actorUuid:a.agent.uuid,roles:a.agent.roles,permissions:Array.from(b),ownerUuid:a.agent.ownerUuid??void 0,agentName:a.agent.name}}}if((0,j.t)(c)){let a=await (0,j.Q)(c);if(a)return a}let d=await (0,i.VM)(a);if(d)return d}let c=await (0,i.VM)(a);if(c)return c;let d=a.cookies.get("oidc_access_token")?.value;if(d&&(0,j.t)(d)){let a=await (0,j.Q)(d);if(a)return a}return null}function m(a){return"agent"===a.type}function n(a){return"user"===a.type}function o(a,b){return"super_admin"===a.type||a.permissions.includes(b)}function p(a,b){return"agent"!==a.type||o(a,b)?null:f.sO.forbidden(`Missing permission: ${b}`)}function q(a,b,c){return!!b&&!!c&&(!!(n(a)&&"user"===b&&c===a.actorUuid||m(a)&&("agent"===b&&c===a.actorUuid||"user"===b&&a.ownerUuid&&c===a.ownerUuid))||!1)}function r(a){return async(b,c)=>{let d=await (0,h.A0)(b);return d?a(b,c,d):f.sO.unauthorized("Super Admin authentication required")}}[e,j]=k.then?(await k)():k,d()}catch(a){d(a)}})},81180:()=>{},90908:()=>{}};