@selvajs/selva 2.0.0

package/build/server/chunks/_server.ts-BrZXNFlK.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-BrZXNFlK.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_guid_/share-links/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\nimport { p as providers, m as flag } from \"../../../../../../chunks/providers.server.js\";\nimport { g as requireEditableDefinition } from \"../../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../../chunks/api-errors.js\";\nimport { G as GuidSchema, d as CreateShareLinkInputSchema } from \"../../../../../../chunks/context.js\";\nimport { D as DEFAULT_SHARE_LINK_MAX_SOLVES } from \"../../../../../../chunks/types2.js\";\nimport { m as mintRawToken, h as hashToken } from \"../../../../../../chunks/token.server.js\";\nfunction assertSharingEnabled() {\n  if (!flag(\"ENABLE_SHARING\")) {\n    throw error(404, \"Share links are disabled on this instance (ENABLE_SHARING).\");\n  }\n}\nfunction strip(link) {\n  const { tokenHash: _omit, ...rest } = link;\n  return { ...rest, hasToken: true };\n}\nconst GET = async ({ params, locals }) => {\n  assertSharingEnabled();\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) throw error(400, \"Invalid or missing GUID\");\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  try {\n    const page = await providers.data.shareLinks.listByDefinition(ctx, guidParsed.data, {\n      limit: 200\n    });\n    return json({\n      links: page.items.map(strip),\n      nextCursor: page.nextCursor\n    });\n  } catch (err) {\n    handleApiError(err, \"Failed to list share links\");\n  }\n};\nconst POST = async ({ params, request, locals }) => {\n  assertSharingEnabled();\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) throw error(400, \"Invalid or missing GUID\");\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  const body = await request.json().catch(() => ({}));\n  const parsed = CreateShareLinkInputSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const raw = mintRawToken();\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const link = {\n    id: randomUUID(),\n    definitionId: guidParsed.data,\n    channel: parsed.data.channel,\n    tokenHash: hashToken(raw),\n    name: parsed.data.name,\n    createdBy: locals.user.id,\n    createdAt: now,\n    expiresAt: parsed.data.expiresAt ?? null,\n    revokedAt: null,\n    allowSolve: parsed.data.allowSolve,\n    // Default applied only when the field is absent. `null` is a deliberate\n    // \"uncap\" choice and is preserved.\n    maxSolves: parsed.data.maxSolves === void 0 ? DEFAULT_SHARE_LINK_MAX_SOLVES : parsed.data.maxSolves,\n    solveCount: 0\n  };\n  try {\n    await providers.data.shareLinks.create(ctx, link);\n    return json({ link: strip(link), token: raw }, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to create share link\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAQA,SAAS,oBAAoB,GAAG;AAChC,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE;AAC/B,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,6DAA6D,CAAC;AACnF,EAAE;AACF;AACA,SAAS,KAAK,CAAC,IAAI,EAAE;AACrB,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI;AAC5C,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;AACpC;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC1C,EAAE,oBAAoB,EAAE;AACxB,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtE,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE;AACxF,MAAM,KAAK,EAAE;AACb,KAAK,CAAC;AACN,IAAI,OAAO,IAAI,CAAC;AAChB,MAAM,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;AAClC,MAAM,UAAU,EAAE,IAAI,CAAC;AACvB,KAAK,CAAC;AACN,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,4BAA4B,CAAC;AACrD,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpD,EAAE,oBAAoB,EAAE;AACxB,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtE,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,IAAI,CAAC;AAC3D,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,GAAG,GAAG,YAAY,EAAE;AAC5B,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,IAAI,GAAG;AACf,IAAI,EAAE,EAAE,UAAU,EAAE;AACpB,IAAI,YAAY,EAAE,UAAU,CAAC,IAAI;AACjC,IAAI,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;AAChC,IAAI,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC;AAC7B,IAAI,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC1B,IAAI,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC7B,IAAI,SAAS,EAAE,GAAG;AAClB,IAAI,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI;AAC5C,IAAI,SAAS,EAAE,IAAI;AACnB,IAAI,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;AACtC;AACA;AACA,IAAI,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,MAAM,GAAG,6BAA6B,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS;AACvG,IAAI,UAAU,EAAE;AAChB,GAAG;AACH,EAAE,IAAI;AACN,IAAI,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC;AACrD,IAAI,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACnE,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACtD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-C-XniPo8.js

@@ -0,0 +1,41 @@
+import { error, json } from '@sveltejs/kit';
+import { d as getInviteStore } from './providers.server-C32WKtDL.js';
+import { i as requireManageOrgMembers } from './access.server-GvriCjXN.js';
+import { h as handleApiError } from './api-errors-Dk5z97zb.js';
+import './shared-server-DaWdgxVh.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import './context-9tV9WxQ5.js';
+import 'zod';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+const DELETE = async ({ params, locals }) => {
+  requireManageOrgMembers(locals);
+  const ctx = locals.ctx;
+  if (!ctx.actingOrgId) throw error(400, "No active organization");
+  const id = params.id;
+  try {
+    const store = getInviteStore();
+    let cursor;
+    let found = false;
+    do {
+      const page = await store.listByOrg(ctx, ctx.actingOrgId, { limit: 200, cursor });
+      if (page.items.some((i) => i.id === id)) {
+        found = true;
+        break;
+      }
+      cursor = page.nextCursor ?? void 0;
+    } while (cursor);
+    if (!found) throw error(404, "Invite not found");
+    await store.revoke(ctx, id);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to revoke invite");
+  }
+};
+
+export { DELETE };
+//# sourceMappingURL=_server.ts-C-XniPo8.js.map

package/build/server/chunks/_server.ts-C-XniPo8.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-C-XniPo8.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/invites/_id_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { n as getInviteStore } from \"../../../../../chunks/providers.server.js\";\nimport { i as requireManageOrgMembers } from \"../../../../../chunks/access.server.js\";\nimport { h as handleApiError } from \"../../../../../chunks/api-errors.js\";\nconst DELETE = async ({ params, locals }) => {\n  requireManageOrgMembers(locals);\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n  const id = params.id;\n  try {\n    const store = getInviteStore();\n    let cursor;\n    let found = false;\n    do {\n      const page = await store.listByOrg(ctx, ctx.actingOrgId, { limit: 200, cursor });\n      if (page.items.some((i) => i.id === id)) {\n        found = true;\n        break;\n      }\n      cursor = page.nextCursor ?? void 0;\n    } while (cursor);\n    if (!found) throw error(404, \"Invite not found\");\n    await store.revoke(ctx, id);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to revoke invite\");\n  }\n};\nexport {\n  DELETE\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;AAIK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAClE,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE;AACtB,EAAE,IAAI;AACN,IAAI,MAAM,KAAK,GAAG,cAAc,EAAE;AAClC,IAAI,IAAI,MAAM;AACd,IAAI,IAAI,KAAK,GAAG,KAAK;AACrB,IAAI,GAAG;AACP,MAAM,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACtF,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;AAC/C,QAAQ,KAAK,GAAG,IAAI;AACpB,QAAQ;AACR,MAAM;AACN,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC;AACxC,IAAI,CAAC,QAAQ,MAAM;AACnB,IAAI,IAAI,CAAC,KAAK,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,kBAAkB,CAAC;AACpD,IAAI,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AAC/B,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAClD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-C0F30GT4.js

@@ -0,0 +1,61 @@
+import { error, json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { h as getProjectProvider } from './providers.server-C32WKtDL.js';
+import { o as requireCanManageMembers, p as requireTargetIsOrgMember } from './access.server-GvriCjXN.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-Dk5z97zb.js';
+import { i as ProjectRoleSchema } from './context-9tV9WxQ5.js';
+import './shared-server-DaWdgxVh.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+const AddMemberSchema = z.object({
+  userId: z.string().min(1, "userId is required"),
+  role: ProjectRoleSchema
+});
+const GET = async ({ params, locals }) => {
+  const { id } = params;
+  if (!id) throw error(400, "Missing project ID");
+  await requireCanManageMembers(locals, id);
+  const ctx = locals.ctx;
+  try {
+    const page = await getProjectProvider().listProjectMembers(ctx, id, { limit: 200 });
+    return json({ members: page.items });
+  } catch (err) {
+    handleApiError(err, "Failed to load members");
+  }
+};
+const POST = async ({ params, request, locals }) => {
+  const { id } = params;
+  if (!id) throw error(400, "Missing project ID");
+  await requireCanManageMembers(locals, id);
+  const ctx = locals.ctx;
+  const body = await request.json().catch(() => null);
+  const parsed = AddMemberSchema.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  const project = await getProjectProvider().getProject(ctx, id);
+  if (!project) throw error(404, "Project not found");
+  await requireTargetIsOrgMember(locals, project.orgId, parsed.data.userId);
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const member = {
+    projectId: id,
+    userId: parsed.data.userId,
+    role: parsed.data.role,
+    joinedAt: now,
+    updatedAt: now,
+    updatedBy: ctx.userId || parsed.data.userId,
+    deletedAt: null
+  };
+  try {
+    await getProjectProvider().addProjectMember(ctx, member);
+    return json(member, { status: 201 });
+  } catch (err) {
+    handleApiError(err, "Failed to add member");
+  }
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts-C0F30GT4.js.map

package/build/server/chunks/_server.ts-C0F30GT4.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-C0F30GT4.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/projects/_id_/members/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { b as getProjectProvider } from \"../../../../../../chunks/providers.server.js\";\nimport { o as requireCanManageMembers, p as requireTargetIsOrgMember } from \"../../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../../chunks/api-errors.js\";\nimport { i as ProjectRoleSchema } from \"../../../../../../chunks/context.js\";\nconst AddMemberSchema = z.object({\n  userId: z.string().min(1, \"userId is required\"),\n  role: ProjectRoleSchema\n});\nconst GET = async ({ params, locals }) => {\n  const { id } = params;\n  if (!id) throw error(400, \"Missing project ID\");\n  await requireCanManageMembers(locals, id);\n  const ctx = locals.ctx;\n  try {\n    const page = await getProjectProvider().listProjectMembers(ctx, id, { limit: 200 });\n    return json({ members: page.items });\n  } catch (err) {\n    handleApiError(err, \"Failed to load members\");\n  }\n};\nconst POST = async ({ params, request, locals }) => {\n  const { id } = params;\n  if (!id) throw error(400, \"Missing project ID\");\n  await requireCanManageMembers(locals, id);\n  const ctx = locals.ctx;\n  const body = await request.json().catch(() => null);\n  const parsed = AddMemberSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const project = await getProjectProvider().getProject(ctx, id);\n  if (!project) throw error(404, \"Project not found\");\n  await requireTargetIsOrgMember(locals, project.orgId, parsed.data.userId);\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const member = {\n    projectId: id,\n    userId: parsed.data.userId,\n    role: parsed.data.role,\n    joinedAt: now,\n    updatedAt: now,\n    updatedBy: ctx.userId || parsed.data.userId,\n    deletedAt: null\n  };\n  try {\n    await getProjectProvider().addProjectMember(ctx, member);\n    return json(member, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to add member\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;AAMA,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC;AACjD,EAAE,IAAI,EAAE;AACR,CAAC,CAAC;AACG,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC1C,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC;AACjD,EAAE,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,CAAC;AAC3C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACvF,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;AACxC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AACjD,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpD,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC;AACjD,EAAE,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,CAAC;AAC3C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAChD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC;AAChE,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,mBAAmB,CAAC;AACrD,EAAE,MAAM,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;AAC3E,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,MAAM,GAAG;AACjB,IAAI,SAAS,EAAE,EAAE;AACjB,IAAI,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;AAC9B,IAAI,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC1B,IAAI,QAAQ,EAAE,GAAG;AACjB,IAAI,SAAS,EAAE,GAAG;AAClB,IAAI,SAAS,EAAE,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM;AAC/C,IAAI,SAAS,EAAE;AACf,GAAG;AACH,EAAE,IAAI;AACN,IAAI,MAAM,kBAAkB,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC;AAC5D,IAAI,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACxC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC/C,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-C4WRZSco.js

@@ -0,0 +1,32 @@
+import { error, redirect } from '@sveltejs/kit';
+import { g as getAuthProvider } from './providers.server-C32WKtDL.js';
+import { b as bootstrapUserSession } from './auth-bootstrap.server-CfD5CPTj.js';
+import { s as setSessionCookie, a as setRefreshCookie, d as safeRedirectTarget } from './admin-auth.server-CdTfBMI5.js';
+import './shared-server-DaWdgxVh.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import './context-9tV9WxQ5.js';
+import 'zod';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+const GET = async ({ url, cookies }) => {
+  const code = url.searchParams.get("code");
+  if (!code) throw error(400, "Missing authorization code");
+  const oauth = getAuthProvider().oauth;
+  if (!oauth) {
+    throw error(501, "OAuth is not supported by the configured auth provider.");
+  }
+  const result = await oauth.exchangeOAuthCode(code);
+  if (!result) throw error(401, "OAuth exchange failed");
+  await bootstrapUserSession(result.user);
+  setSessionCookie(cookies, result.sessionToken);
+  setRefreshCookie(cookies, result.refreshToken);
+  const dest = safeRedirectTarget(url.searchParams.get("redirectTo"), "/library");
+  redirect(303, dest);
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts-C4WRZSco.js.map

package/build/server/chunks/_server.ts-C4WRZSco.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-C4WRZSco.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/auth/supabase/callback/_server.ts.js"],"sourcesContent":["import { error, redirect } from \"@sveltejs/kit\";\nimport { e as getAuthProvider } from \"../../../../../chunks/providers.server.js\";\nimport { b as bootstrapUserSession } from \"../../../../../chunks/auth-bootstrap.server.js\";\nimport { s as setSessionCookie, a as setRefreshCookie, b as safeRedirectTarget } from \"../../../../../chunks/admin-auth.server.js\";\nconst GET = async ({ url, cookies }) => {\n  const code = url.searchParams.get(\"code\");\n  if (!code) throw error(400, \"Missing authorization code\");\n  const oauth = getAuthProvider().oauth;\n  if (!oauth) {\n    throw error(501, \"OAuth is not supported by the configured auth provider.\");\n  }\n  const result = await oauth.exchangeOAuthCode(code);\n  if (!result) throw error(401, \"OAuth exchange failed\");\n  await bootstrapUserSession(result.user);\n  setSessionCookie(cookies, result.sessionToken);\n  setRefreshCookie(cookies, result.refreshToken);\n  const dest = safeRedirectTarget(url.searchParams.get(\"redirectTo\"), \"/library\");\n  redirect(303, dest);\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;AAIK,MAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK;AACxC,EAAE,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;AAC3C,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,4BAA4B,CAAC;AAC3D,EAAE,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC,KAAK;AACvC,EAAE,IAAI,CAAC,KAAK,EAAE;AACd,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,yDAAyD,CAAC;AAC/E,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC;AACpD,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC;AACxD,EAAE,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;AACzC,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAChD,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAChD,EAAE,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;AACjF,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;AACrB;;;;"}

package/build/server/chunks/_server.ts-CAcgx11J.js

@@ -0,0 +1,37 @@
+import { error, json } from '@sveltejs/kit';
+import { l as getPermissionStore, g as getAuthProvider } from './providers.server-C32WKtDL.js';
+import { c as requireManageInstanceUsers } from './access.server-GvriCjXN.js';
+import './shared-server-DaWdgxVh.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import './context-9tV9WxQ5.js';
+import 'zod';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import './api-errors-Dk5z97zb.js';
+
+const POST = async ({ params, locals }) => {
+  requireManageInstanceUsers(locals);
+  const { id } = params;
+  if (!id) throw error(400, "Missing user ID");
+  const targetPerms = await getPermissionStore().getFor(locals.ctx, id);
+  if (targetPerms.includes("instance_admin")) {
+    const others = await getPermissionStore().countInstanceAdminsExcluding(locals.ctx, id);
+    if (others === 0) {
+      throw error(
+        409,
+        "Cannot disable the last instance admin. Promote another user to instance admin first."
+      );
+    }
+  }
+  const result = await getAuthProvider().disableUser(id);
+  if (result === "not_found") throw error(404, "User not found");
+  if (result === "not_supported")
+    throw error(501, "Disabling users is not supported by this auth provider");
+  return json({ success: true });
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-CAcgx11J.js.map

package/build/server/chunks/_server.ts-CAcgx11J.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-CAcgx11J.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/users/_id_/disable/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { f as getPermissionStore, e as getAuthProvider } from \"../../../../../../../chunks/providers.server.js\";\nimport { c as requireManageInstanceUsers } from \"../../../../../../../chunks/access.server.js\";\nconst POST = async ({ params, locals }) => {\n  requireManageInstanceUsers(locals);\n  const { id } = params;\n  if (!id) throw error(400, \"Missing user ID\");\n  const targetPerms = await getPermissionStore().getFor(locals.ctx, id);\n  if (targetPerms.includes(\"instance_admin\")) {\n    const others = await getPermissionStore().countInstanceAdminsExcluding(locals.ctx, id);\n    if (others === 0) {\n      throw error(\n        409,\n        \"Cannot disable the last instance admin. Promote another user to instance admin first.\"\n      );\n    }\n  }\n  const result = await getAuthProvider().disableUser(id);\n  if (result === \"not_found\") throw error(404, \"User not found\");\n  if (result === \"not_supported\")\n    throw error(501, \"Disabling users is not supported by this auth provider\");\n  return json({ success: true });\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;AAGK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,EAAE,0BAA0B,CAAC,MAAM,CAAC;AACpC,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,iBAAiB,CAAC;AAC9C,EAAE,MAAM,WAAW,GAAG,MAAM,kBAAkB,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AACvE,EAAE,IAAI,WAAW,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE;AAC9C,IAAI,MAAM,MAAM,GAAG,MAAM,kBAAkB,EAAE,CAAC,4BAA4B,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AAC1F,IAAI,IAAI,MAAM,KAAK,CAAC,EAAE;AACtB,MAAM,MAAM,KAAK;AACjB,QAAQ,GAAG;AACX,QAAQ;AACR,OAAO;AACP,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;AACxD,EAAE,IAAI,MAAM,KAAK,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAChE,EAAE,IAAI,MAAM,KAAK,eAAe;AAChC,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,wDAAwD,CAAC;AAC9E,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAChC;;;;"}

package/build/server/chunks/_server.ts-CFIgn6q6.js

@@ -0,0 +1,293 @@
+import { TreeBuilder, GrasshopperClient } from '@selvajs/compute';
+import { error, json, isHttpError } from '@sveltejs/kit';
+import { r as resolveServerForOrg } from './resolve.server-DYsU4jL3.js';
+import { M as MAX_SOLVE_DURATION_MS, D as DEFINITION_CACHE_TTL_MS, R as REMOTE_DEFINITION_FETCH_TIMEOUT_MS, a as REMOTE_DEFINITION_MAX_BYTES, b as RATE_LIMIT_WINDOW_MS, c as RATE_LIMIT_MAX_REQUESTS, C as COMPUTE_REQUEST_MAX_BYTES } from './computeLimits-FIJ-Mzn4.js';
+import { h as requireMaxBodySize } from './admin-auth.server-CdTfBMI5.js';
+import { m as getStorageProvider, p as providers } from './providers.server-C32WKtDL.js';
+import { d as requireCanEditDefinition, e as requireCanSolve } from './access.server-GvriCjXN.js';
+import { t as tryResolveShareToken } from './resolve.server2-Co65XNMI.js';
+import './context-9tV9WxQ5.js';
+import 'zod';
+import './utils2-Sy-_rI-0.js';
+import './shared-server-DaWdgxVh.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import './api-errors-Dk5z97zb.js';
+import './token.server-B8XVPI0F.js';
+
+function isSafeRemoteDefinitionUrl(raw) {
+  let parsed;
+  try {
+    parsed = new URL(raw);
+  } catch {
+    return false;
+  }
+  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") return false;
+  const host = parsed.hostname.toLowerCase();
+  if (!host) return false;
+  if (host === "localhost" || host === "0.0.0.0" || host.endsWith(".localhost")) return false;
+  if (host === "::1" || host === "[::1]") return false;
+  if (/^127\./.test(host)) return false;
+  if (/^10\./.test(host)) return false;
+  if (/^192\.168\./.test(host)) return false;
+  if (/^172\.(1[6-9]|2[0-9]|3[0-1])\./.test(host)) return false;
+  if (/^169\.254\./.test(host)) return false;
+  if (/^\[?(fc|fd)[0-9a-f]{2}:/i.test(host)) return false;
+  if (/^\[?fe[89ab][0-9a-f]:/i.test(host)) return false;
+  return true;
+}
+const WINDOW_MS = RATE_LIMIT_WINDOW_MS;
+const MAX_PER_WINDOW = RATE_LIMIT_MAX_REQUESTS;
+const buckets = /* @__PURE__ */ new Map();
+function checkComputeRateLimit(key) {
+  const now = Date.now();
+  const entry = buckets.get(key);
+  if (!entry || now > entry.resetAt) {
+    buckets.set(key, { count: 1, resetAt: now + WINDOW_MS });
+    return { allowed: true };
+  }
+  if (entry.count >= MAX_PER_WINDOW) {
+    return { allowed: false, retryAfter: Math.ceil((entry.resetAt - now) / 1e3) };
+  }
+  entry.count += 1;
+  return { allowed: true };
+}
+const definitionCache = /* @__PURE__ */ new Map();
+let cachedClient = null;
+let cachedScheduler = null;
+let cachedClientConfig = null;
+async function getClient(serverConfig) {
+  const currentConfig = {
+    serverUrl: serverConfig.serverUrl,
+    apiKey: serverConfig.apiKey
+  };
+  if (cachedClient && cachedScheduler && cachedClientConfig && cachedClientConfig.serverUrl === currentConfig.serverUrl && cachedClientConfig.apiKey === currentConfig.apiKey) {
+    return { client: cachedClient, scheduler: cachedScheduler };
+  }
+  cachedScheduler?.dispose();
+  cachedClient = await GrasshopperClient.create({
+    serverUrl: currentConfig.serverUrl,
+    apiKey: currentConfig.apiKey
+  });
+  cachedScheduler = cachedClient.createScheduler({
+    mode: "queue",
+    timeoutMs: MAX_SOLVE_DURATION_MS,
+    cache: { maxEntries: 20, ttlMs: 5 * 6e4 }
+  });
+  cachedClientConfig = currentConfig;
+  return { client: cachedClient, scheduler: cachedScheduler };
+}
+async function loadRemoteDefinition(url) {
+  if (!isSafeRemoteDefinitionUrl(url)) {
+    throw new Error("Remote definition URL is not allowed");
+  }
+  const now = Date.now();
+  const cached = definitionCache.get(url);
+  if (cached && now - cached.fetchedAt < DEFINITION_CACHE_TTL_MS) {
+    return cached.data;
+  }
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), REMOTE_DEFINITION_FETCH_TIMEOUT_MS);
+  let data;
+  try {
+    const response = await fetch(url, {
+      signal: controller.signal,
+      redirect: "error"
+    });
+    if (!response.ok) {
+      throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+    }
+    const declared = Number(response.headers.get("content-length"));
+    if (Number.isFinite(declared) && declared > REMOTE_DEFINITION_MAX_BYTES) {
+      throw new Error("Remote definition exceeds size limit");
+    }
+    const buffer = await response.arrayBuffer();
+    if (buffer.byteLength > REMOTE_DEFINITION_MAX_BYTES) {
+      throw new Error("Remote definition exceeds size limit");
+    }
+    data = new Uint8Array(buffer);
+  } finally {
+    clearTimeout(timeout);
+  }
+  definitionCache.set(url, { data, fetchedAt: now });
+  if (definitionCache.size > 50) {
+    const entries = Array.from(definitionCache.entries());
+    entries.sort((a, b) => a[1].fetchedAt - b[1].fetchedAt);
+    for (let i = 0; i < 10; i++) {
+      definitionCache.delete(entries[i][0]);
+    }
+  }
+  return data;
+}
+function transformInputParameter(input, value) {
+  const base = {
+    description: input.description || "",
+    name: input.nickname,
+    nickname: input.nickname || null,
+    id: input.id
+  };
+  if (input.paramType === "number" || input.paramType === "integer") {
+    return {
+      ...base,
+      paramType: input.paramType === "integer" ? "Integer" : "Number",
+      minimum: input.minimum,
+      maximum: input.maximum,
+      stepSize: input.paramType === "integer" ? 1 : input.stepSize,
+      default: value ?? input.default
+    };
+  } else if (input.paramType === "text") {
+    return {
+      ...base,
+      paramType: "Text",
+      default: value ?? input.default ?? ""
+    };
+  } else if (input.paramType === "boolean") {
+    return {
+      ...base,
+      paramType: "Boolean",
+      default: value ?? input.default ?? false
+    };
+  }
+  return {
+    ...base,
+    paramType: "Text",
+    default: value ?? ""
+  };
+}
+const POST = async ({ request, locals, url }) => {
+  const storage = getStorageProvider();
+  requireMaxBodySize(request, COMPUTE_REQUEST_MAX_BYTES);
+  try {
+    const body = await request.json();
+    const { inputs, values } = body;
+    const definitionUrl = body.definitionUrl;
+    const channel = body.channel ?? "live";
+    if (!inputs || !values || !definitionUrl) {
+      throw error(400, "Missing required fields: inputs, values, or definitionUrl");
+    }
+    if (channel !== "live" && channel !== "draft") {
+      throw error(400, `Invalid channel: ${channel}. Must be 'live' or 'draft'.`);
+    }
+    let definitionSource;
+    let solveOrgId = null;
+    let definitionPin = null;
+    const isLocal = definitionUrl.startsWith("local:");
+    const guid = isLocal ? definitionUrl.substring(6) : null;
+    const sharedAccess = isLocal && guid ? await tryResolveShareToken(request, url, guid, channel, { requireSolve: true }) : null;
+    if (!sharedAccess && (!locals.ctx || !locals.user)) {
+      throw error(401, "Unauthorized");
+    }
+    const solveCtx = sharedAccess?.ctx ?? locals.ctx;
+    const rateLimitKey = sharedAccess ? `share:${sharedAccess.link.id}` : `user:${locals.user.id}`;
+    const rateLimit = checkComputeRateLimit(rateLimitKey);
+    if (!rateLimit.allowed) {
+      const retryAfter = rateLimit.retryAfter ?? 1;
+      return new Response(
+        JSON.stringify({
+          message: `Too many compute requests. Retry in ${retryAfter}s.`,
+          retryAfter
+        }),
+        {
+          status: 429,
+          headers: {
+            "Content-Type": "application/json",
+            "Retry-After": String(retryAfter)
+          }
+        }
+      );
+    }
+    if (isLocal && guid) {
+      let record;
+      try {
+        record = await providers.data.definitions.get(solveCtx, guid);
+      } catch (err) {
+        console.error(`Failed to load local definition: ${guid}`, err);
+        throw error(404, `Definition '${guid}' not found`);
+      }
+      if (!record) throw error(404, `Definition '${guid}' not found`);
+      const project = await providers.data.projects.getProject(solveCtx, record.projectId);
+      solveOrgId = project?.orgId ?? null;
+      definitionPin = record.computeServerId ?? null;
+      if (!sharedAccess) {
+        if (channel === "draft") {
+          await requireCanEditDefinition(locals, record.projectId, guid);
+        } else {
+          await requireCanSolve(locals, record.projectId);
+        }
+      }
+      const versionId = channel === "live" ? record.liveVersionId : record.draftVersionId;
+      if (!versionId) {
+        throw error(404, `Definition '${guid}' has no ${channel} version yet`);
+      }
+      const version = await providers.data.definitions.getVersion(solveCtx, versionId);
+      if (!version || version.definitionId !== guid) {
+        throw error(404, `Definition '${guid}' ${channel} version is missing`);
+      }
+      try {
+        const bytes = await storage.get(version.fileKey);
+        if (!bytes) throw new Error(`Version blob missing: ${version.fileKey}`);
+        definitionSource = bytes;
+      } catch (err) {
+        console.error(`Failed to load local definition blob: ${guid}`, err);
+        throw error(404, `Definition '${guid}' not found`);
+      }
+    } else {
+      try {
+        definitionSource = await loadRemoteDefinition(definitionUrl);
+      } catch (err) {
+        console.error(`Failed to fetch definition from ${definitionUrl}:`, err);
+        throw error(
+          400,
+          `Failed to load definition: ${err instanceof Error ? err.message : String(err)}`
+        );
+      }
+    }
+    const inputTree = TreeBuilder.fromInputParams(
+      inputs.filter((input) => input.paramType).map((input) => transformInputParameter(input, values[input.id]))
+    );
+    if (sharedAccess) {
+      const next = await providers.data.shareLinks.tryIncrementSolveCount(
+        solveCtx,
+        sharedAccess.link.id
+      );
+      if (next === null) {
+        throw error(429, "Share link solve cap reached.");
+      }
+    }
+    const serverConfig = await resolveServerForOrg(solveCtx, solveOrgId, { definitionPin });
+    const { scheduler } = await getClient(serverConfig);
+    let solvedDefinition;
+    try {
+      solvedDefinition = await scheduler.solve(definitionSource, inputTree, {
+        signal: request.signal
+      });
+    } catch (err) {
+      if (err instanceof Error && err.name === "AbortError") {
+        if (request.signal.aborted) {
+          throw error(499, "Client closed request");
+        }
+        throw error(
+          504,
+          `Solve exceeded the ${Math.round(MAX_SOLVE_DURATION_MS / 1e3)}s deadline.`
+        );
+      }
+      throw err;
+    }
+    return json(solvedDefinition);
+  } catch (err) {
+    if (isHttpError(err)) throw err;
+    const message = err instanceof Error ? err.message : "Unknown error";
+    console.error("[API/Compute] Error:", message);
+    if (err instanceof TypeError && message === "fetch failed") {
+      throw error(503, "Compute server is unreachable");
+    }
+    throw error(500, message);
+  }
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-CFIgn6q6.js.map

package/build/server/chunks/_server.ts-CFIgn6q6.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-CFIgn6q6.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/compute/_server.ts.js"],"sourcesContent":["import { TreeBuilder, GrasshopperClient } from \"@selvajs/compute\";\nimport { error, json, isHttpError } from \"@sveltejs/kit\";\nimport { r as resolveServerForOrg } from \"../../../../chunks/resolve.server.js\";\nimport { R as RATE_LIMIT_WINDOW_MS, a as RATE_LIMIT_MAX_REQUESTS, M as MAX_SOLVE_DURATION_MS, D as DEFINITION_CACHE_TTL_MS, b as REMOTE_DEFINITION_FETCH_TIMEOUT_MS, c as REMOTE_DEFINITION_MAX_BYTES, C as COMPUTE_REQUEST_MAX_BYTES } from \"../../../../chunks/computeLimits.js\";\nimport { r as requireMaxBodySize } from \"../../../../chunks/admin-auth.server.js\";\nimport { i as getStorageProvider, p as providers } from \"../../../../chunks/providers.server.js\";\nimport { d as requireCanEditDefinition, e as requireCanSolve } from \"../../../../chunks/access.server.js\";\nimport { t as tryResolveShareToken } from \"../../../../chunks/resolve.server2.js\";\nfunction isSafeRemoteDefinitionUrl(raw) {\n  let parsed;\n  try {\n    parsed = new URL(raw);\n  } catch {\n    return false;\n  }\n  if (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") return false;\n  const host = parsed.hostname.toLowerCase();\n  if (!host) return false;\n  if (host === \"localhost\" || host === \"0.0.0.0\" || host.endsWith(\".localhost\")) return false;\n  if (host === \"::1\" || host === \"[::1]\") return false;\n  if (/^127\\./.test(host)) return false;\n  if (/^10\\./.test(host)) return false;\n  if (/^192\\.168\\./.test(host)) return false;\n  if (/^172\\.(1[6-9]|2[0-9]|3[0-1])\\./.test(host)) return false;\n  if (/^169\\.254\\./.test(host)) return false;\n  if (/^\\[?(fc|fd)[0-9a-f]{2}:/i.test(host)) return false;\n  if (/^\\[?fe[89ab][0-9a-f]:/i.test(host)) return false;\n  return true;\n}\nconst WINDOW_MS = RATE_LIMIT_WINDOW_MS;\nconst MAX_PER_WINDOW = RATE_LIMIT_MAX_REQUESTS;\nconst buckets = /* @__PURE__ */ new Map();\nfunction checkComputeRateLimit(key) {\n  const now = Date.now();\n  const entry = buckets.get(key);\n  if (!entry || now > entry.resetAt) {\n    buckets.set(key, { count: 1, resetAt: now + WINDOW_MS });\n    return { allowed: true };\n  }\n  if (entry.count >= MAX_PER_WINDOW) {\n    return { allowed: false, retryAfter: Math.ceil((entry.resetAt - now) / 1e3) };\n  }\n  entry.count += 1;\n  return { allowed: true };\n}\nconst definitionCache = /* @__PURE__ */ new Map();\nlet cachedClient = null;\nlet cachedScheduler = null;\nlet cachedClientConfig = null;\nasync function getClient(serverConfig) {\n  const currentConfig = {\n    serverUrl: serverConfig.serverUrl,\n    apiKey: serverConfig.apiKey\n  };\n  if (cachedClient && cachedScheduler && cachedClientConfig && cachedClientConfig.serverUrl === currentConfig.serverUrl && cachedClientConfig.apiKey === currentConfig.apiKey) {\n    return { client: cachedClient, scheduler: cachedScheduler };\n  }\n  cachedScheduler?.dispose();\n  cachedClient = await GrasshopperClient.create({\n    serverUrl: currentConfig.serverUrl,\n    apiKey: currentConfig.apiKey\n  });\n  cachedScheduler = cachedClient.createScheduler({\n    mode: \"queue\",\n    timeoutMs: MAX_SOLVE_DURATION_MS,\n    cache: { maxEntries: 20, ttlMs: 5 * 6e4 }\n  });\n  cachedClientConfig = currentConfig;\n  return { client: cachedClient, scheduler: cachedScheduler };\n}\nasync function loadRemoteDefinition(url) {\n  if (!isSafeRemoteDefinitionUrl(url)) {\n    throw new Error(\"Remote definition URL is not allowed\");\n  }\n  const now = Date.now();\n  const cached = definitionCache.get(url);\n  if (cached && now - cached.fetchedAt < DEFINITION_CACHE_TTL_MS) {\n    return cached.data;\n  }\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), REMOTE_DEFINITION_FETCH_TIMEOUT_MS);\n  let data;\n  try {\n    const response = await fetch(url, {\n      signal: controller.signal,\n      redirect: \"error\"\n    });\n    if (!response.ok) {\n      throw new Error(`HTTP ${response.status}: ${response.statusText}`);\n    }\n    const declared = Number(response.headers.get(\"content-length\"));\n    if (Number.isFinite(declared) && declared > REMOTE_DEFINITION_MAX_BYTES) {\n      throw new Error(\"Remote definition exceeds size limit\");\n    }\n    const buffer = await response.arrayBuffer();\n    if (buffer.byteLength > REMOTE_DEFINITION_MAX_BYTES) {\n      throw new Error(\"Remote definition exceeds size limit\");\n    }\n    data = new Uint8Array(buffer);\n  } finally {\n    clearTimeout(timeout);\n  }\n  definitionCache.set(url, { data, fetchedAt: now });\n  if (definitionCache.size > 50) {\n    const entries = Array.from(definitionCache.entries());\n    entries.sort((a, b) => a[1].fetchedAt - b[1].fetchedAt);\n    for (let i = 0; i < 10; i++) {\n      definitionCache.delete(entries[i][0]);\n    }\n  }\n  return data;\n}\nfunction transformInputParameter(input, value) {\n  const base = {\n    description: input.description || \"\",\n    name: input.nickname,\n    nickname: input.nickname || null,\n    id: input.id\n  };\n  if (input.paramType === \"number\" || input.paramType === \"integer\") {\n    return {\n      ...base,\n      paramType: input.paramType === \"integer\" ? \"Integer\" : \"Number\",\n      minimum: input.minimum,\n      maximum: input.maximum,\n      stepSize: input.paramType === \"integer\" ? 1 : input.stepSize,\n      default: value ?? input.default\n    };\n  } else if (input.paramType === \"text\") {\n    return {\n      ...base,\n      paramType: \"Text\",\n      default: value ?? input.default ?? \"\"\n    };\n  } else if (input.paramType === \"boolean\") {\n    return {\n      ...base,\n      paramType: \"Boolean\",\n      default: value ?? input.default ?? false\n    };\n  }\n  return {\n    ...base,\n    paramType: \"Text\",\n    default: value ?? \"\"\n  };\n}\nconst POST = async ({ request, locals, url }) => {\n  const storage = getStorageProvider();\n  requireMaxBodySize(request, COMPUTE_REQUEST_MAX_BYTES);\n  try {\n    const body = await request.json();\n    const { inputs, values } = body;\n    const definitionUrl = body.definitionUrl;\n    const channel = body.channel ?? \"live\";\n    if (!inputs || !values || !definitionUrl) {\n      throw error(400, \"Missing required fields: inputs, values, or definitionUrl\");\n    }\n    if (channel !== \"live\" && channel !== \"draft\") {\n      throw error(400, `Invalid channel: ${channel}. Must be 'live' or 'draft'.`);\n    }\n    let definitionSource;\n    let solveOrgId = null;\n    let definitionPin = null;\n    const isLocal = definitionUrl.startsWith(\"local:\");\n    const guid = isLocal ? definitionUrl.substring(6) : null;\n    const sharedAccess = isLocal && guid ? await tryResolveShareToken(request, url, guid, channel, { requireSolve: true }) : null;\n    if (!sharedAccess && (!locals.ctx || !locals.user)) {\n      throw error(401, \"Unauthorized\");\n    }\n    const solveCtx = sharedAccess?.ctx ?? locals.ctx;\n    const rateLimitKey = sharedAccess ? `share:${sharedAccess.link.id}` : `user:${locals.user.id}`;\n    const rateLimit = checkComputeRateLimit(rateLimitKey);\n    if (!rateLimit.allowed) {\n      const retryAfter = rateLimit.retryAfter ?? 1;\n      return new Response(\n        JSON.stringify({\n          message: `Too many compute requests. Retry in ${retryAfter}s.`,\n          retryAfter\n        }),\n        {\n          status: 429,\n          headers: {\n            \"Content-Type\": \"application/json\",\n            \"Retry-After\": String(retryAfter)\n          }\n        }\n      );\n    }\n    if (isLocal && guid) {\n      let record;\n      try {\n        record = await providers.data.definitions.get(solveCtx, guid);\n      } catch (err) {\n        console.error(`Failed to load local definition: ${guid}`, err);\n        throw error(404, `Definition '${guid}' not found`);\n      }\n      if (!record) throw error(404, `Definition '${guid}' not found`);\n      const project = await providers.data.projects.getProject(solveCtx, record.projectId);\n      solveOrgId = project?.orgId ?? null;\n      definitionPin = record.computeServerId ?? null;\n      if (!sharedAccess) {\n        if (channel === \"draft\") {\n          await requireCanEditDefinition(locals, record.projectId, guid);\n        } else {\n          await requireCanSolve(locals, record.projectId);\n        }\n      }\n      const versionId = channel === \"live\" ? record.liveVersionId : record.draftVersionId;\n      if (!versionId) {\n        throw error(404, `Definition '${guid}' has no ${channel} version yet`);\n      }\n      const version = await providers.data.definitions.getVersion(solveCtx, versionId);\n      if (!version || version.definitionId !== guid) {\n        throw error(404, `Definition '${guid}' ${channel} version is missing`);\n      }\n      try {\n        const bytes = await storage.get(version.fileKey);\n        if (!bytes) throw new Error(`Version blob missing: ${version.fileKey}`);\n        definitionSource = bytes;\n      } catch (err) {\n        console.error(`Failed to load local definition blob: ${guid}`, err);\n        throw error(404, `Definition '${guid}' not found`);\n      }\n    } else {\n      try {\n        definitionSource = await loadRemoteDefinition(definitionUrl);\n      } catch (err) {\n        console.error(`Failed to fetch definition from ${definitionUrl}:`, err);\n        throw error(\n          400,\n          `Failed to load definition: ${err instanceof Error ? err.message : String(err)}`\n        );\n      }\n    }\n    const inputTree = TreeBuilder.fromInputParams(\n      inputs.filter((input) => input.paramType).map((input) => transformInputParameter(input, values[input.id]))\n    );\n    if (sharedAccess) {\n      const next = await providers.data.shareLinks.tryIncrementSolveCount(\n        solveCtx,\n        sharedAccess.link.id\n      );\n      if (next === null) {\n        throw error(429, \"Share link solve cap reached.\");\n      }\n    }\n    const serverConfig = await resolveServerForOrg(solveCtx, solveOrgId, { definitionPin });\n    const { scheduler } = await getClient(serverConfig);\n    let solvedDefinition;\n    try {\n      solvedDefinition = await scheduler.solve(definitionSource, inputTree, {\n        signal: request.signal\n      });\n    } catch (err) {\n      if (err instanceof Error && err.name === \"AbortError\") {\n        if (request.signal.aborted) {\n          throw error(499, \"Client closed request\");\n        }\n        throw error(\n          504,\n          `Solve exceeded the ${Math.round(MAX_SOLVE_DURATION_MS / 1e3)}s deadline.`\n        );\n      }\n      throw err;\n    }\n    return json(solvedDefinition);\n  } catch (err) {\n    if (isHttpError(err)) throw err;\n    const message = err instanceof Error ? err.message : \"Unknown error\";\n    console.error(\"[API/Compute] Error:\", message);\n    if (err instanceof TypeError && message === \"fetch failed\") {\n      throw error(503, \"Compute server is unreachable\");\n    }\n    throw error(500, message);\n  }\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAQA,SAAS,yBAAyB,CAAC,GAAG,EAAE;AACxC,EAAE,IAAI,MAAM;AACZ,EAAE,IAAI;AACN,IAAI,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC;AACzB,EAAE,CAAC,CAAC,MAAM;AACV,IAAI,OAAO,KAAK;AAChB,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,OAAO,KAAK;AAC/E,EAAE,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE;AAC5C,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,KAAK;AACzB,EAAE,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,KAAK;AAC7F,EAAE,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,EAAE,OAAO,KAAK;AACtD,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AACvC,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AACtC,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AAC5C,EAAE,IAAI,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AAC/D,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AAC5C,EAAE,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AACzD,EAAE,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;AACvD,EAAE,OAAO,IAAI;AACb;AACA,MAAM,SAAS,GAAG,oBAAoB;AACtC,MAAM,cAAc,GAAG,uBAAuB;AAC9C,MAAM,OAAO,mBAAmB,IAAI,GAAG,EAAE;AACzC,SAAS,qBAAqB,CAAC,GAAG,EAAE;AACpC,EAAE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;AACxB,EAAE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;AAChC,EAAE,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE;AACrC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,SAAS,EAAE,CAAC;AAC5D,IAAI,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;AAC5B,EAAE;AACF,EAAE,IAAI,KAAK,CAAC,KAAK,IAAI,cAAc,EAAE;AACrC,IAAI,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE;AACjF,EAAE;AACF,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;AAClB,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;AAC1B;AACA,MAAM,eAAe,mBAAmB,IAAI,GAAG,EAAE;AACjD,IAAI,YAAY,GAAG,IAAI;AACvB,IAAI,eAAe,GAAG,IAAI;AAC1B,IAAI,kBAAkB,GAAG,IAAI;AAC7B,eAAe,SAAS,CAAC,YAAY,EAAE;AACvC,EAAE,MAAM,aAAa,GAAG;AACxB,IAAI,SAAS,EAAE,YAAY,CAAC,SAAS;AACrC,IAAI,MAAM,EAAE,YAAY,CAAC;AACzB,GAAG;AACH,EAAE,IAAI,YAAY,IAAI,eAAe,IAAI,kBAAkB,IAAI,kBAAkB,CAAC,SAAS,KAAK,aAAa,CAAC,SAAS,IAAI,kBAAkB,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM,EAAE;AAC/K,IAAI,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE;AAC/D,EAAE;AACF,EAAE,eAAe,EAAE,OAAO,EAAE;AAC5B,EAAE,YAAY,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC;AAChD,IAAI,SAAS,EAAE,aAAa,CAAC,SAAS;AACtC,IAAI,MAAM,EAAE,aAAa,CAAC;AAC1B,GAAG,CAAC;AACJ,EAAE,eAAe,GAAG,YAAY,CAAC,eAAe,CAAC;AACjD,IAAI,IAAI,EAAE,OAAO;AACjB,IAAI,SAAS,EAAE,qBAAqB;AACpC,IAAI,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,GAAG;AAC3C,GAAG,CAAC;AACJ,EAAE,kBAAkB,GAAG,aAAa;AACpC,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE;AAC7D;AACA,eAAe,oBAAoB,CAAC,GAAG,EAAE;AACzC,EAAE,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,EAAE;AACvC,IAAI,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AAC3D,EAAE;AACF,EAAE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;AACxB,EAAE,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;AACzC,EAAE,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,uBAAuB,EAAE;AAClE,IAAI,OAAO,MAAM,CAAC,IAAI;AACtB,EAAE;AACF,EAAE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE;AAC1C,EAAE,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,kCAAkC,CAAC;AAC1F,EAAE,IAAI,IAAI;AACV,EAAE,IAAI;AACN,IAAI,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;AACtC,MAAM,MAAM,EAAE,UAAU,CAAC,MAAM;AAC/B,MAAM,QAAQ,EAAE;AAChB,KAAK,CAAC;AACN,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;AACtB,MAAM,MAAM,IAAI,KAAK,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;AACxE,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AACnE,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,2BAA2B,EAAE;AAC7E,MAAM,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AAC7D,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE;AAC/C,IAAI,IAAI,MAAM,CAAC,UAAU,GAAG,2BAA2B,EAAE;AACzD,MAAM,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC;AAC7D,IAAI;AACJ,IAAI,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC;AACjC,EAAE,CAAC,SAAS;AACZ,IAAI,YAAY,CAAC,OAAO,CAAC;AACzB,EAAE;AACF,EAAE,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;AACpD,EAAE,IAAI,eAAe,CAAC,IAAI,GAAG,EAAE,EAAE;AACjC,IAAI,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;AACzD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;AACjC,MAAM,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3C,IAAI;AACJ,EAAE;AACF,EAAE,OAAO,IAAI;AACb;AACA,SAAS,uBAAuB,CAAC,KAAK,EAAE,KAAK,EAAE;AAC/C,EAAE,MAAM,IAAI,GAAG;AACf,IAAI,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;AACxC,IAAI,IAAI,EAAE,KAAK,CAAC,QAAQ;AACxB,IAAI,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;AACpC,IAAI,EAAE,EAAE,KAAK,CAAC;AACd,GAAG;AACH,EAAE,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE;AACrE,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,SAAS,EAAE,KAAK,CAAC,SAAS,KAAK,SAAS,GAAG,SAAS,GAAG,QAAQ;AACrE,MAAM,OAAO,EAAE,KAAK,CAAC,OAAO;AAC5B,MAAM,OAAO,EAAE,KAAK,CAAC,OAAO;AAC5B,MAAM,QAAQ,EAAE,KAAK,CAAC,SAAS,KAAK,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ;AAClE,MAAM,OAAO,EAAE,KAAK,IAAI,KAAK,CAAC;AAC9B,KAAK;AACL,EAAE,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,EAAE;AACzC,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,SAAS,EAAE,MAAM;AACvB,MAAM,OAAO,EAAE,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI;AACzC,KAAK;AACL,EAAE,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE;AAC5C,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,SAAS,EAAE,SAAS;AAC1B,MAAM,OAAO,EAAE,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI;AACzC,KAAK;AACL,EAAE;AACF,EAAE,OAAO;AACT,IAAI,GAAG,IAAI;AACX,IAAI,SAAS,EAAE,MAAM;AACrB,IAAI,OAAO,EAAE,KAAK,IAAI;AACtB,GAAG;AACH;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACjD,EAAE,MAAM,OAAO,GAAG,kBAAkB,EAAE;AACtC,EAAE,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,CAAC;AACxD,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE;AACrC,IAAI,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI;AACnC,IAAI,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa;AAC5C,IAAI,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM;AAC1C,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE;AAC9C,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,2DAA2D,CAAC;AACnF,IAAI;AACJ,IAAI,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,OAAO,EAAE;AACnD,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,iBAAiB,EAAE,OAAO,CAAC,4BAA4B,CAAC,CAAC;AACjF,IAAI;AACJ,IAAI,IAAI,gBAAgB;AACxB,IAAI,IAAI,UAAU,GAAG,IAAI;AACzB,IAAI,IAAI,aAAa,GAAG,IAAI;AAC5B,IAAI,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC;AACtD,IAAI,MAAM,IAAI,GAAG,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI;AAC5D,IAAI,MAAM,YAAY,GAAG,OAAO,IAAI,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI;AACjI,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;AACxD,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC;AACtC,IAAI;AACJ,IAAI,MAAM,QAAQ,GAAG,YAAY,EAAE,GAAG,IAAI,MAAM,CAAC,GAAG;AACpD,IAAI,MAAM,YAAY,GAAG,YAAY,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAClG,IAAI,MAAM,SAAS,GAAG,qBAAqB,CAAC,YAAY,CAAC;AACzD,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE;AAC5B,MAAM,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,IAAI,CAAC;AAClD,MAAM,OAAO,IAAI,QAAQ;AACzB,QAAQ,IAAI,CAAC,SAAS,CAAC;AACvB,UAAU,OAAO,EAAE,CAAC,oCAAoC,EAAE,UAAU,CAAC,EAAE,CAAC;AACxE,UAAU;AACV,SAAS,CAAC;AACV,QAAQ;AACR,UAAU,MAAM,EAAE,GAAG;AACrB,UAAU,OAAO,EAAE;AACnB,YAAY,cAAc,EAAE,kBAAkB;AAC9C,YAAY,aAAa,EAAE,MAAM,CAAC,UAAU;AAC5C;AACA;AACA,OAAO;AACP,IAAI;AACJ,IAAI,IAAI,OAAO,IAAI,IAAI,EAAE;AACzB,MAAM,IAAI,MAAM;AAChB,MAAM,IAAI;AACV,QAAQ,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC;AACrE,MAAM,CAAC,CAAC,OAAO,GAAG,EAAE;AACpB,QAAQ,OAAO,CAAC,KAAK,CAAC,CAAC,iCAAiC,EAAE,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC;AACtE,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;AAC1D,MAAM;AACN,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;AACrE,MAAM,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC;AAC1F,MAAM,UAAU,GAAG,OAAO,EAAE,KAAK,IAAI,IAAI;AACzC,MAAM,aAAa,GAAG,MAAM,CAAC,eAAe,IAAI,IAAI;AACpD,MAAM,IAAI,CAAC,YAAY,EAAE;AACzB,QAAQ,IAAI,OAAO,KAAK,OAAO,EAAE;AACjC,UAAU,MAAM,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC;AACxE,QAAQ,CAAC,MAAM;AACf,UAAU,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC;AACzD,QAAQ;AACR,MAAM;AACN,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,MAAM,GAAG,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,cAAc;AACzF,MAAM,IAAI,CAAC,SAAS,EAAE;AACtB,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;AAC9E,MAAM;AACN,MAAM,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC;AACtF,MAAM,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE;AACrD,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAC9E,MAAM;AACN,MAAM,IAAI;AACV,QAAQ,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;AACxD,QAAQ,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,sBAAsB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/E,QAAQ,gBAAgB,GAAG,KAAK;AAChC,MAAM,CAAC,CAAC,OAAO,GAAG,EAAE;AACpB,QAAQ,OAAO,CAAC,KAAK,CAAC,CAAC,sCAAsC,EAAE,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC;AAC3E,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;AAC1D,MAAM;AACN,IAAI,CAAC,MAAM;AACX,MAAM,IAAI;AACV,QAAQ,gBAAgB,GAAG,MAAM,oBAAoB,CAAC,aAAa,CAAC;AACpE,MAAM,CAAC,CAAC,OAAO,GAAG,EAAE;AACpB,QAAQ,OAAO,CAAC,KAAK,CAAC,CAAC,gCAAgC,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;AAC/E,QAAQ,MAAM,KAAK;AACnB,UAAU,GAAG;AACb,UAAU,CAAC,2BAA2B,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;AACzF,SAAS;AACT,MAAM;AACN,IAAI;AACJ,IAAI,MAAM,SAAS,GAAG,WAAW,CAAC,eAAe;AACjD,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,uBAAuB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC/G,KAAK;AACL,IAAI,IAAI,YAAY,EAAE;AACtB,MAAM,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB;AACzE,QAAQ,QAAQ;AAChB,QAAQ,YAAY,CAAC,IAAI,CAAC;AAC1B,OAAO;AACP,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE;AACzB,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,+BAA+B,CAAC;AACzD,MAAM;AACN,IAAI;AACJ,IAAI,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,CAAC;AAC3F,IAAI,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC;AACvD,IAAI,IAAI,gBAAgB;AACxB,IAAI,IAAI;AACR,MAAM,gBAAgB,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,gBAAgB,EAAE,SAAS,EAAE;AAC5E,QAAQ,MAAM,EAAE,OAAO,CAAC;AACxB,OAAO,CAAC;AACR,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE;AAC7D,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE;AACpC,UAAU,MAAM,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC;AACnD,QAAQ;AACR,QAAQ,MAAM,KAAK;AACnB,UAAU,GAAG;AACb,UAAU,CAAC,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,qBAAqB,GAAG,GAAG,CAAC,CAAC,WAAW;AACnF,SAAS;AACT,MAAM;AACN,MAAM,MAAM,GAAG;AACf,IAAI;AACJ,IAAI,OAAO,IAAI,CAAC,gBAAgB,CAAC;AACjC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG;AACnC,IAAI,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,eAAe;AACxE,IAAI,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,OAAO,CAAC;AAClD,IAAI,IAAI,GAAG,YAAY,SAAS,IAAI,OAAO,KAAK,cAAc,EAAE;AAChE,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,+BAA+B,CAAC;AACvD,IAAI;AACJ,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC;AAC7B,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-CaHe7mo6.js

@@ -0,0 +1,81 @@
+import { error, json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { h as getProjectProvider, c as getOrganizationProvider } from './providers.server-C32WKtDL.js';
+import { l as requireCanManage, m as requireCanEditProjectSettings, w as withAdminBypass, n as canChangeVisibilityToPublic } from './access.server-GvriCjXN.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-Dk5z97zb.js';
+import { s as slugify } from './slug-BGuFQjqe.js';
+import { g as ProjectVisibilitySchema, v as validateProjectFlags } from './context-9tV9WxQ5.js';
+import './shared-server-DaWdgxVh.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+const UpdateProjectBody = z.object({
+  name: z.string().min(1).max(128).trim(),
+  description: z.string().max(2e3).nullish(),
+  visibility: ProjectVisibilitySchema,
+  autoJoinOnUpload: z.boolean()
+}).partial();
+const PATCH = async ({ params, request, locals }) => {
+  const { id } = params;
+  if (!id) throw error(400, "Missing project ID");
+  const { ctx, project: existing } = await requireCanEditProjectSettings(locals, id);
+  const body = await request.json().catch(() => null);
+  const parsed = UpdateProjectBody.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  if (parsed.data.visibility !== void 0 && parsed.data.visibility === "public" && existing.visibility !== "public") {
+    const orgMember = await getOrganizationProvider().getOrgMember(ctx, existing.orgId, ctx.userId);
+    const passes = withAdminBypass(
+      ctx.platformPermissions,
+      () => canChangeVisibilityToPublic({ orgMember })
+    );
+    if (!passes) {
+      throw error(403, "Only org owners or admins can make a project public.");
+    }
+  }
+  const mergedVisibility = parsed.data.visibility ?? existing.visibility;
+  const mergedAutoJoin = parsed.data.autoJoinOnUpload ?? existing.autoJoinOnUpload;
+  const flagIssues = validateProjectFlags({
+    visibility: mergedVisibility,
+    autoJoinOnUpload: mergedAutoJoin
+  });
+  if (flagIssues.length > 0) {
+    throw error(400, flagIssues.map((i) => `${i.path}: ${i.message}`).join("; "));
+  }
+  const patch = {};
+  if (parsed.data.name !== void 0) {
+    patch.name = parsed.data.name;
+    patch.slug = slugify(parsed.data.name);
+  }
+  if (parsed.data.description !== void 0) {
+    patch.description = parsed.data.description ?? void 0;
+  }
+  if (parsed.data.visibility !== void 0) patch.visibility = parsed.data.visibility;
+  if (parsed.data.autoJoinOnUpload !== void 0) {
+    patch.autoJoinOnUpload = parsed.data.autoJoinOnUpload;
+  }
+  try {
+    await getProjectProvider().updateProject(ctx, id, patch);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to update project");
+  }
+};
+const DELETE = async ({ params, locals }) => {
+  const { id } = params;
+  if (!id) throw error(400, "Missing project ID");
+  await requireCanManage(locals, id);
+  const ctx = locals.ctx;
+  try {
+    await getProjectProvider().deleteProject(ctx, id);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to delete project");
+  }
+};
+
+export { DELETE, PATCH };
+//# sourceMappingURL=_server.ts-CaHe7mo6.js.map