@selvajs/selva 2.0.0

package/build/server/chunks/_server.ts-DBh0rJrm.js

@@ -0,0 +1,86 @@
+import { error, json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { randomUUID } from 'node:crypto';
+import { h as getProjectProvider, P as ProviderError } from './providers.server-C32WKtDL.js';
+import { k as requireCanCreateProject } from './access.server-GvriCjXN.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-Dk5z97zb.js';
+import { s as slugify } from './slug-BGuFQjqe.js';
+import { g as ProjectVisibilitySchema } from './context-9tV9WxQ5.js';
+import './shared-server-DaWdgxVh.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+const MAX_SLUG_ATTEMPTS = 25;
+function isSlugConflict(err) {
+  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);
+}
+function isNameConflict(err) {
+  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);
+}
+const CreateProjectBody = z.object({
+  name: z.string().min(1, "Project name is required").max(128).trim(),
+  description: z.string().max(2e3).optional(),
+  visibility: ProjectVisibilitySchema.default("private"),
+  autoJoinOnUpload: z.boolean().optional()
+});
+const GET = async ({ locals }) => {
+  const ctx = locals.ctx;
+  if (!ctx.actingOrgId) throw error(400, "No active organization");
+  try {
+    const page = await getProjectProvider().listProjects(ctx, ctx.actingOrgId, { limit: 200 });
+    return json({ projects: page.items });
+  } catch (err) {
+    handleApiError(err, "Failed to load projects");
+  }
+};
+const POST = async ({ request, locals }) => {
+  const ctx = locals.ctx;
+  if (!ctx.actingOrgId) throw error(400, "No active organization");
+  await requireCanCreateProject(locals, ctx.actingOrgId);
+  const body = await request.json().catch(() => null);
+  const parsed = CreateProjectBody.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  const autoJoinOnUpload = parsed.data.autoJoinOnUpload ?? false;
+  if (autoJoinOnUpload && parsed.data.visibility !== "public") {
+    throw error(400, "autoJoinOnUpload requires visibility=public");
+  }
+  const projectStore = getProjectProvider();
+  const baseSlug = slugify(parsed.data.name) || "project";
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const projectId = randomUUID();
+  for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {
+    const slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;
+    const project = {
+      id: projectId,
+      orgId: ctx.actingOrgId,
+      name: parsed.data.name,
+      slug,
+      description: parsed.data.description,
+      visibility: parsed.data.visibility,
+      ownerId: locals.user.id,
+      createdBy: locals.user.id,
+      updatedBy: locals.user.id,
+      autoJoinOnUpload,
+      createdAt: now,
+      updatedAt: now,
+      deletedAt: null
+    };
+    try {
+      await projectStore.createProject(ctx, project);
+      return json(project, { status: 201 });
+    } catch (err) {
+      if (isNameConflict(err)) {
+        throw error(409, "A project with that name already exists in this organization.");
+      }
+      if (isSlugConflict(err)) continue;
+      handleApiError(err, "Failed to create project");
+    }
+  }
+  throw error(409, "Could not pick a unique project slug after several attempts.");
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts-DBh0rJrm.js.map

package/build/server/chunks/_server.ts-DBh0rJrm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-DBh0rJrm.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/projects/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\nimport { b as getProjectProvider, P as ProviderError } from \"../../../../chunks/providers.server.js\";\nimport { k as requireCanCreateProject } from \"../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../chunks/api-errors.js\";\nimport { s as slugify } from \"../../../../chunks/slug.js\";\nimport { g as ProjectVisibilitySchema } from \"../../../../chunks/context.js\";\nconst MAX_SLUG_ATTEMPTS = 25;\nfunction isSlugConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);\n}\nfunction isNameConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);\n}\nconst CreateProjectBody = z.object({\n  name: z.string().min(1, \"Project name is required\").max(128).trim(),\n  description: z.string().max(2e3).optional(),\n  visibility: ProjectVisibilitySchema.default(\"private\"),\n  autoJoinOnUpload: z.boolean().optional()\n});\nconst GET = async ({ locals }) => {\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n  try {\n    const page = await getProjectProvider().listProjects(ctx, ctx.actingOrgId, { limit: 200 });\n    return json({ projects: page.items });\n  } catch (err) {\n    handleApiError(err, \"Failed to load projects\");\n  }\n};\nconst POST = async ({ request, locals }) => {\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n  await requireCanCreateProject(locals, ctx.actingOrgId);\n  const body = await request.json().catch(() => null);\n  const parsed = CreateProjectBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const autoJoinOnUpload = parsed.data.autoJoinOnUpload ?? false;\n  if (autoJoinOnUpload && parsed.data.visibility !== \"public\") {\n    throw error(400, \"autoJoinOnUpload requires visibility=public\");\n  }\n  const projectStore = getProjectProvider();\n  const baseSlug = slugify(parsed.data.name) || \"project\";\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const projectId = randomUUID();\n  for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {\n    const slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;\n    const project = {\n      id: projectId,\n      orgId: ctx.actingOrgId,\n      name: parsed.data.name,\n      slug,\n      description: parsed.data.description,\n      visibility: parsed.data.visibility,\n      ownerId: locals.user.id,\n      createdBy: locals.user.id,\n      updatedBy: locals.user.id,\n      autoJoinOnUpload,\n      createdAt: now,\n      updatedAt: now,\n      deletedAt: null\n    };\n    try {\n      await projectStore.createProject(ctx, project);\n      return json(project, { status: 201 });\n    } catch (err) {\n      if (isNameConflict(err)) {\n        throw error(409, \"A project with that name already exists in this organization.\");\n      }\n      if (isSlugConflict(err)) continue;\n      handleApiError(err, \"Failed to create project\");\n    }\n  }\n  throw error(409, \"Could not pick a unique project slug after several attempts.\");\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAQA,MAAM,iBAAiB,GAAG,EAAE;AAC5B,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;AACnC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACrE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;AAC7C,EAAE,UAAU,EAAE,uBAAuB,CAAC,OAAO,CAAC,SAAS,CAAC;AACxD,EAAE,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ;AACxC,CAAC,CAAC;AACG,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAClE,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAC9F,IAAI,OAAO,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;AACzC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAClD,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAClE,EAAE,MAAM,uBAAuB,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC;AACxD,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC;AAClD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,KAAK;AAChE,EAAE,IAAI,gBAAgB,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE;AAC/D,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,6CAA6C,CAAC;AACnE,EAAE;AACF,EAAE,MAAM,YAAY,GAAG,kBAAkB,EAAE;AAC3C,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS;AACzD,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,SAAS,GAAG,UAAU,EAAE;AAChC,EAAE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,iBAAiB,EAAE,OAAO,EAAE,EAAE;AAChE,IAAI,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;AACxE,IAAI,MAAM,OAAO,GAAG;AACpB,MAAM,EAAE,EAAE,SAAS;AACnB,MAAM,KAAK,EAAE,GAAG,CAAC,WAAW;AAC5B,MAAM,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC5B,MAAM,IAAI;AACV,MAAM,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AAC1C,MAAM,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;AACxC,MAAM,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC7B,MAAM,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC/B,MAAM,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC/B,MAAM,gBAAgB;AACtB,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE;AACjB,KAAK;AACL,IAAI,IAAI;AACR,MAAM,MAAM,YAAY,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC;AACpD,MAAM,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,+DAA+D,CAAC;AACzF,MAAM;AACN,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,MAAM,cAAc,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACrD,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,8DAA8D,CAAC;AAClF;;;;"}

package/build/server/chunks/_server.ts-DJUYnHrj.js

@@ -0,0 +1,49 @@
+import { error } from '@sveltejs/kit';
+import { i as getDefinitionMeta, s as definitionPaths, m as getStorageProvider } from './providers.server-C32WKtDL.js';
+import { G as GuidSchema } from './context-9tV9WxQ5.js';
+import { h as requireCanViewProject } from './access.server-GvriCjXN.js';
+import './shared-server-DaWdgxVh.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'zod';
+import './api-errors-Dk5z97zb.js';
+
+const ALLOWED_EXTENSIONS = {
+  ".webp": "image/webp",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".png": "image/png",
+  ".gif": "image/gif"
+};
+const COVER_PATH_PATTERN = /^definitions\/([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\/cover\.([a-z]+)$/i;
+const GET = async ({ params, locals }) => {
+  const storagePath = params.path;
+  if (!storagePath) throw error(400, "Missing path");
+  const match = COVER_PATH_PATTERN.exec(storagePath);
+  if (!match) throw error(404, "File not found");
+  const [, guid, rawExt] = match;
+  const ext = `.${rawExt.toLowerCase()}`;
+  if (!ALLOWED_EXTENSIONS[ext]) throw error(404, "File not found");
+  const guidParsed = GuidSchema.safeParse(guid);
+  if (!guidParsed.success) throw error(404, "File not found");
+  if (!locals.ctx) throw error(401, "Unauthorized");
+  const record = await getDefinitionMeta().get(locals.ctx, guidParsed.data);
+  if (!record) throw error(404, "File not found");
+  await requireCanViewProject(locals, record.projectId);
+  const canonicalPath = definitionPaths.image(guidParsed.data);
+  const bytes = await getStorageProvider().get(canonicalPath);
+  if (!bytes) throw error(404, "File not found");
+  return new Response(Buffer.from(bytes), {
+    headers: {
+      "Content-Type": ALLOWED_EXTENSIONS[ext],
+      "Cache-Control": "private, max-age=3600"
+    }
+  });
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts-DJUYnHrj.js.map

package/build/server/chunks/_server.ts-DJUYnHrj.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-DJUYnHrj.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/files/_...path_/_server.ts.js"],"sourcesContent":["import { error } from \"@sveltejs/kit\";\nimport { k as getDefinitionMeta, l as definitionPaths, i as getStorageProvider } from \"../../../../../chunks/providers.server.js\";\nimport { G as GuidSchema } from \"../../../../../chunks/context.js\";\nimport { h as requireCanViewProject } from \"../../../../../chunks/access.server.js\";\nconst ALLOWED_EXTENSIONS = {\n  \".webp\": \"image/webp\",\n  \".jpg\": \"image/jpeg\",\n  \".jpeg\": \"image/jpeg\",\n  \".png\": \"image/png\",\n  \".gif\": \"image/gif\"\n};\nconst COVER_PATH_PATTERN = /^definitions\\/([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\\/cover\\.([a-z]+)$/i;\nconst GET = async ({ params, locals }) => {\n  const storagePath = params.path;\n  if (!storagePath) throw error(400, \"Missing path\");\n  const match = COVER_PATH_PATTERN.exec(storagePath);\n  if (!match) throw error(404, \"File not found\");\n  const [, guid, rawExt] = match;\n  const ext = `.${rawExt.toLowerCase()}`;\n  if (!ALLOWED_EXTENSIONS[ext]) throw error(404, \"File not found\");\n  const guidParsed = GuidSchema.safeParse(guid);\n  if (!guidParsed.success) throw error(404, \"File not found\");\n  if (!locals.ctx) throw error(401, \"Unauthorized\");\n  const record = await getDefinitionMeta().get(locals.ctx, guidParsed.data);\n  if (!record) throw error(404, \"File not found\");\n  await requireCanViewProject(locals, record.projectId);\n  const canonicalPath = definitionPaths.image(guidParsed.data);\n  const bytes = await getStorageProvider().get(canonicalPath);\n  if (!bytes) throw error(404, \"File not found\");\n  return new Response(Buffer.from(bytes), {\n    headers: {\n      \"Content-Type\": ALLOWED_EXTENSIONS[ext],\n      \"Cache-Control\": \"private, max-age=3600\"\n    }\n  });\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;AAIA,MAAM,kBAAkB,GAAG;AAC3B,EAAE,OAAO,EAAE,YAAY;AACvB,EAAE,MAAM,EAAE,YAAY;AACtB,EAAE,OAAO,EAAE,YAAY;AACvB,EAAE,MAAM,EAAE,WAAW;AACrB,EAAE,MAAM,EAAE;AACV,CAAC;AACD,MAAM,kBAAkB,GAAG,iGAAiG;AACvH,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC1C,EAAE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI;AACjC,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC;AACpD,EAAE,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC;AACpD,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAChD,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC,GAAG,KAAK;AAChC,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AACxC,EAAE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAClE,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;AAC/C,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAC7D,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC;AACnD,EAAE,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AAC3E,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AACjD,EAAE,MAAM,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC;AACvD,EAAE,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;AAC9D,EAAE,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC;AAC7D,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAChD,EAAE,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;AAC1C,IAAI,OAAO,EAAE;AACb,MAAM,cAAc,EAAE,kBAAkB,CAAC,GAAG,CAAC;AAC7C,MAAM,eAAe,EAAE;AACvB;AACA,GAAG,CAAC;AACJ;;;;"}

package/build/server/chunks/_server.ts-DNPb5zS6.js

@@ -0,0 +1,76 @@
+import { error, json } from '@sveltejs/kit';
+import { r as definitionService } from './providers.server-C32WKtDL.js';
+import { g as requireEditableDefinition } from './access.server-GvriCjXN.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-Dk5z97zb.js';
+import { G as GH_EXTENSIONS } from './types-DxzJoaA4.js';
+import { G as GuidSchema, c as UpdateMetadataInputSchema } from './context-9tV9WxQ5.js';
+import { d as MAX_GH_FILE_SIZE } from './computeLimits-FIJ-Mzn4.js';
+import './shared-server-DaWdgxVh.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'zod';
+
+const POST = async ({ params, request, locals }) => {
+  const guidParsed = GuidSchema.safeParse(params.guid);
+  if (!guidParsed.success) throw error(400, "Invalid or missing GUID");
+  const formData = await request.formData();
+  const file = formData.get("file");
+  if (!(file instanceof File)) throw error(400, "A Grasshopper (.gh or .ghx) file is required");
+  const changeNoteRaw = formData.get("changeNote");
+  const changeNote = typeof changeNoteRaw === "string" ? changeNoteRaw.slice(0, 1e3) : void 0;
+  const ext = file.name.slice(file.name.lastIndexOf(".")).toLowerCase();
+  if (!GH_EXTENSIONS.includes(ext)) {
+    throw error(400, `File type not allowed. Allowed: ${GH_EXTENSIONS.join(", ")}`);
+  }
+  if (file.size > MAX_GH_FILE_SIZE) {
+    throw error(400, `File too large. Max size: ${MAX_GH_FILE_SIZE / (1024 * 1024)} MB`);
+  }
+  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
+  const fileExt = ext.slice(1);
+  try {
+    const data = new Uint8Array(await file.arrayBuffer());
+    const version = await definitionService.uploadVersion(
+      ctx,
+      guidParsed.data,
+      data,
+      fileExt,
+      file.name,
+      changeNote
+    );
+    return json({ success: true, version });
+  } catch (err) {
+    handleApiError(err, "Failed to upload definition version");
+  }
+};
+const DELETE = async ({ params, locals }) => {
+  const guidParsed = GuidSchema.safeParse(params.guid);
+  if (!guidParsed.success) throw error(400, "Invalid or missing GUID");
+  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
+  try {
+    await definitionService.delete(ctx, guidParsed.data);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to delete definition");
+  }
+};
+const PUT = async ({ params, request, locals }) => {
+  const guidParsed = GuidSchema.safeParse(params.guid);
+  if (!guidParsed.success) throw error(400, "Invalid or missing GUID");
+  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
+  const body = await request.json().catch(() => null);
+  const parsed = UpdateMetadataInputSchema.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  try {
+    await definitionService.updateMeta(ctx, guidParsed.data, parsed.data);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to update definition");
+  }
+};
+
+export { DELETE, POST, PUT };
+//# sourceMappingURL=_server.ts-DNPb5zS6.js.map

package/build/server/chunks/_server.ts-DNPb5zS6.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-DNPb5zS6.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_guid_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { j as definitionService } from \"../../../../../chunks/providers.server.js\";\nimport { g as requireEditableDefinition } from \"../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../chunks/api-errors.js\";\nimport { G as GH_EXTENSIONS } from \"../../../../../chunks/types.js\";\nimport { G as GuidSchema, b as UpdateMetadataInputSchema } from \"../../../../../chunks/context.js\";\nimport { d as MAX_GH_FILE_SIZE } from \"../../../../../chunks/computeLimits.js\";\nconst POST = async ({ params, request, locals }) => {\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) throw error(400, \"Invalid or missing GUID\");\n  const formData = await request.formData();\n  const file = formData.get(\"file\");\n  if (!(file instanceof File)) throw error(400, \"A Grasshopper (.gh or .ghx) file is required\");\n  const changeNoteRaw = formData.get(\"changeNote\");\n  const changeNote = typeof changeNoteRaw === \"string\" ? changeNoteRaw.slice(0, 1e3) : void 0;\n  const ext = file.name.slice(file.name.lastIndexOf(\".\")).toLowerCase();\n  if (!GH_EXTENSIONS.includes(ext)) {\n    throw error(400, `File type not allowed. Allowed: ${GH_EXTENSIONS.join(\", \")}`);\n  }\n  if (file.size > MAX_GH_FILE_SIZE) {\n    throw error(400, `File too large. Max size: ${MAX_GH_FILE_SIZE / (1024 * 1024)} MB`);\n  }\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  const fileExt = ext.slice(1);\n  try {\n    const data = new Uint8Array(await file.arrayBuffer());\n    const version = await definitionService.uploadVersion(\n      ctx,\n      guidParsed.data,\n      data,\n      fileExt,\n      file.name,\n      changeNote\n    );\n    return json({ success: true, version });\n  } catch (err) {\n    handleApiError(err, \"Failed to upload definition version\");\n  }\n};\nconst DELETE = async ({ params, locals }) => {\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) throw error(400, \"Invalid or missing GUID\");\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  try {\n    await definitionService.delete(ctx, guidParsed.data);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to delete definition\");\n  }\n};\nconst PUT = async ({ params, request, locals }) => {\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) throw error(400, \"Invalid or missing GUID\");\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  const body = await request.json().catch(() => null);\n  const parsed = UpdateMetadataInputSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  try {\n    await definitionService.updateMeta(ctx, guidParsed.data, parsed.data);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to update definition\");\n  }\n};\nexport {\n  DELETE,\n  POST,\n  PUT\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAOK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpD,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtE,EAAE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;AAC3C,EAAE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;AACnC,EAAE,IAAI,EAAE,IAAI,YAAY,IAAI,CAAC,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,8CAA8C,CAAC;AAC/F,EAAE,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;AAClD,EAAE,MAAM,UAAU,GAAG,OAAO,aAAa,KAAK,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,MAAM;AAC7F,EAAE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE;AACvE,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;AACpC,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,gCAAgC,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACnF,EAAE;AACF,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,gBAAgB,EAAE;AACpC,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,0BAA0B,EAAE,gBAAgB,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AACxF,EAAE;AACF,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9B,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AACzD,IAAI,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,aAAa;AACzD,MAAM,GAAG;AACT,MAAM,UAAU,CAAC,IAAI;AACrB,MAAM,IAAI;AACV,MAAM,OAAO;AACb,MAAM,IAAI,CAAC,IAAI;AACf,MAAM;AACN,KAAK;AACL,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,qCAAqC,CAAC;AAC9D,EAAE;AACF;AACK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtE,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,IAAI;AACN,IAAI,MAAM,iBAAiB,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AACxD,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACtD,EAAE;AACF;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACnD,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtE,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1D,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI;AACN,IAAI,MAAM,iBAAiB,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;AACzE,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACtD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-DXPhlUCi.js

@@ -0,0 +1,101 @@
+import { json, error } from '@sveltejs/kit';
+import { z } from 'zod';
+import { randomUUID } from 'node:crypto';
+import { c as getOrganizationProvider, h as getProjectProvider, P as ProviderError } from './providers.server-C32WKtDL.js';
+import { a as requireInstanceAdmin } from './access.server-GvriCjXN.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-Dk5z97zb.js';
+import { s as slugify } from './slug-BGuFQjqe.js';
+import { S as SYSTEM_CONTEXT } from './context-9tV9WxQ5.js';
+import './shared-server-DaWdgxVh.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+const MAX_SLUG_ATTEMPTS = 25;
+function isSlugConflict(err) {
+  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);
+}
+function isNameConflict(err) {
+  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);
+}
+const CreatePlatformProjectBody = z.object({
+  name: z.string().min(1, "Project name is required").max(128).trim(),
+  description: z.string().max(2e3).optional(),
+  /**
+   * Org that physically hosts the project. Storage routing and compute
+   * resolution use this — but org membership in this org does NOT grant
+   * access. Visibility = 'platform' overrides those defaults.
+   *
+   * If omitted, the platform admin's first available org is used.
+   */
+  orgId: z.string().uuid().optional()
+});
+const GET = async ({ locals }) => {
+  requireInstanceAdmin(locals);
+  try {
+    const orgs = await getOrganizationProvider().listOrgs(SYSTEM_CONTEXT, { limit: 1e3 });
+    const all = [];
+    for (const org of orgs.items) {
+      const page = await getProjectProvider().listProjects(SYSTEM_CONTEXT, org.id, {
+        limit: 1e3
+      });
+      for (const p of page.items) {
+        if (p.visibility === "platform") all.push(p);
+      }
+    }
+    return json({ projects: all });
+  } catch (err) {
+    handleApiError(err, "Failed to list platform projects");
+  }
+};
+const POST = async ({ request, locals }) => {
+  const user = requireInstanceAdmin(locals);
+  const ctx = locals.ctx;
+  const body = await request.json().catch(() => null);
+  const parsed = CreatePlatformProjectBody.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  const hostOrgId = parsed.data.orgId ?? ctx.actingOrgId;
+  if (!hostOrgId) {
+    throw error(400, "A host orgId is required (no active organization in context).");
+  }
+  const hostOrg = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, hostOrgId);
+  if (!hostOrg) throw error(400, `Host organization '${hostOrgId}' not found.`);
+  const projectStore = getProjectProvider();
+  const baseSlug = slugify(parsed.data.name) || "platform-project";
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const projectId = randomUUID();
+  for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {
+    const slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;
+    const project = {
+      id: projectId,
+      orgId: hostOrgId,
+      name: parsed.data.name,
+      slug,
+      description: parsed.data.description,
+      visibility: "platform",
+      ownerId: user.id,
+      createdBy: user.id,
+      updatedBy: user.id,
+      autoJoinOnUpload: false,
+      createdAt: now,
+      updatedAt: now,
+      deletedAt: null
+    };
+    try {
+      await projectStore.createProject(SYSTEM_CONTEXT, project);
+      return json(project, { status: 201 });
+    } catch (err) {
+      if (isNameConflict(err)) {
+        throw error(409, "A project with that name already exists in the host organization.");
+      }
+      if (isSlugConflict(err)) continue;
+      handleApiError(err, "Failed to create platform project");
+    }
+  }
+  throw error(409, "Could not pick a unique project slug after several attempts.");
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts-DXPhlUCi.js.map

package/build/server/chunks/_server.ts-DXPhlUCi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-DXPhlUCi.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/projects/_server.ts.js"],"sourcesContent":["import { json, error } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\nimport { a as getOrganizationProvider, b as getProjectProvider, P as ProviderError } from \"../../../../../chunks/providers.server.js\";\nimport { a as requireInstanceAdmin } from \"../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../chunks/api-errors.js\";\nimport { s as slugify } from \"../../../../../chunks/slug.js\";\nimport { S as SYSTEM_CONTEXT } from \"../../../../../chunks/context.js\";\nconst MAX_SLUG_ATTEMPTS = 25;\nfunction isSlugConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);\n}\nfunction isNameConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);\n}\nconst CreatePlatformProjectBody = z.object({\n  name: z.string().min(1, \"Project name is required\").max(128).trim(),\n  description: z.string().max(2e3).optional(),\n  /**\n   * Org that physically hosts the project. Storage routing and compute\n   * resolution use this — but org membership in this org does NOT grant\n   * access. Visibility = 'platform' overrides those defaults.\n   *\n   * If omitted, the platform admin's first available org is used.\n   */\n  orgId: z.string().uuid().optional()\n});\nconst GET = async ({ locals }) => {\n  requireInstanceAdmin(locals);\n  try {\n    const orgs = await getOrganizationProvider().listOrgs(SYSTEM_CONTEXT, { limit: 1e3 });\n    const all = [];\n    for (const org of orgs.items) {\n      const page = await getProjectProvider().listProjects(SYSTEM_CONTEXT, org.id, {\n        limit: 1e3\n      });\n      for (const p of page.items) {\n        if (p.visibility === \"platform\") all.push(p);\n      }\n    }\n    return json({ projects: all });\n  } catch (err) {\n    handleApiError(err, \"Failed to list platform projects\");\n  }\n};\nconst POST = async ({ request, locals }) => {\n  const user = requireInstanceAdmin(locals);\n  const ctx = locals.ctx;\n  const body = await request.json().catch(() => null);\n  const parsed = CreatePlatformProjectBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const hostOrgId = parsed.data.orgId ?? ctx.actingOrgId;\n  if (!hostOrgId) {\n    throw error(400, \"A host orgId is required (no active organization in context).\");\n  }\n  const hostOrg = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, hostOrgId);\n  if (!hostOrg) throw error(400, `Host organization '${hostOrgId}' not found.`);\n  const projectStore = getProjectProvider();\n  const baseSlug = slugify(parsed.data.name) || \"platform-project\";\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const projectId = randomUUID();\n  for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {\n    const slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;\n    const project = {\n      id: projectId,\n      orgId: hostOrgId,\n      name: parsed.data.name,\n      slug,\n      description: parsed.data.description,\n      visibility: \"platform\",\n      ownerId: user.id,\n      createdBy: user.id,\n      updatedBy: user.id,\n      autoJoinOnUpload: false,\n      createdAt: now,\n      updatedAt: now,\n      deletedAt: null\n    };\n    try {\n      await projectStore.createProject(SYSTEM_CONTEXT, project);\n      return json(project, { status: 201 });\n    } catch (err) {\n      if (isNameConflict(err)) {\n        throw error(409, \"A project with that name already exists in the host organization.\");\n      }\n      if (isSlugConflict(err)) continue;\n      handleApiError(err, \"Failed to create platform project\");\n    }\n  }\n  throw error(409, \"Could not pick a unique project slug after several attempts.\");\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAQA,MAAM,iBAAiB,GAAG,EAAE;AAC5B,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;AAC3C,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACrE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;AAC7C;AACA;AACA;AACA;AACA;AACA;AACA;AACA,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ;AACnC,CAAC,CAAC;AACG,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,uBAAuB,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACzF,IAAI,MAAM,GAAG,GAAG,EAAE;AAClB,IAAI,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE;AAClC,MAAM,MAAM,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,EAAE;AACnF,QAAQ,KAAK,EAAE;AACf,OAAO,CAAC;AACR,MAAM,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE;AAClC,QAAQ,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACpD,MAAM;AACN,IAAI;AACJ,IAAI,OAAO,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,kCAAkC,CAAC;AAC3D,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC3C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1D,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,WAAW;AACxD,EAAE,IAAI,CAAC,SAAS,EAAE;AAClB,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,+DAA+D,CAAC;AACrF,EAAE;AACF,EAAE,MAAM,OAAO,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC;AACnF,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,mBAAmB,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;AAC/E,EAAE,MAAM,YAAY,GAAG,kBAAkB,EAAE;AAC3C,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,kBAAkB;AAClE,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,SAAS,GAAG,UAAU,EAAE;AAChC,EAAE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,iBAAiB,EAAE,OAAO,EAAE,EAAE;AAChE,IAAI,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;AACxE,IAAI,MAAM,OAAO,GAAG;AACpB,MAAM,EAAE,EAAE,SAAS;AACnB,MAAM,KAAK,EAAE,SAAS;AACtB,MAAM,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC5B,MAAM,IAAI;AACV,MAAM,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AAC1C,MAAM,UAAU,EAAE,UAAU;AAC5B,MAAM,OAAO,EAAE,IAAI,CAAC,EAAE;AACtB,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,gBAAgB,EAAE,KAAK;AAC7B,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE;AACjB,KAAK;AACL,IAAI,IAAI;AACR,MAAM,MAAM,YAAY,CAAC,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC;AAC/D,MAAM,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,mEAAmE,CAAC;AAC7F,MAAM;AACN,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,MAAM,cAAc,CAAC,GAAG,EAAE,mCAAmC,CAAC;AAC9D,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,8DAA8D,CAAC;AAClF;;;;"}

package/build/server/chunks/_server.ts-Dmo73WWA.js

@@ -0,0 +1,42 @@
+import { error, json } from '@sveltejs/kit';
+import { i as getDefinitionMeta, M as MAX_PAGE_LIMIT } from './providers.server-C32WKtDL.js';
+import { h as handleApiError } from './api-errors-Dk5z97zb.js';
+import { h as requireCanViewProject } from './access.server-GvriCjXN.js';
+import { G as GuidSchema } from './context-9tV9WxQ5.js';
+import './shared-server-DaWdgxVh.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'zod';
+
+const GET = async ({ params, locals, url }) => {
+  const guidParsed = GuidSchema.safeParse(params.guid);
+  if (!guidParsed.success) throw error(400, "Invalid or missing GUID");
+  if (!locals.ctx) throw error(401, "Unauthorized");
+  const rawLimit = Number(url.searchParams.get("limit") ?? 50);
+  const limit = Number.isFinite(rawLimit) ? Math.min(Math.max(rawLimit, 1), MAX_PAGE_LIMIT) : 50;
+  const cursor = url.searchParams.get("cursor") ?? void 0;
+  try {
+    const def = await getDefinitionMeta().get(locals.ctx, guidParsed.data);
+    if (!def) throw error(404, "Definition not found");
+    await requireCanViewProject(locals, def.projectId);
+    const page = await getDefinitionMeta().listVersions(locals.ctx, guidParsed.data, {
+      limit,
+      cursor
+    });
+    return json({
+      versions: page.items,
+      nextCursor: page.nextCursor,
+      liveVersionId: def.liveVersionId,
+      draftVersionId: def.draftVersionId
+    });
+  } catch (err) {
+    handleApiError(err, "Failed to list versions");
+  }
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts-Dmo73WWA.js.map

package/build/server/chunks/_server.ts-Dmo73WWA.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-Dmo73WWA.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_guid_/versions/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { k as getDefinitionMeta, M as MAX_PAGE_LIMIT } from \"../../../../../../chunks/providers.server.js\";\nimport { h as handleApiError } from \"../../../../../../chunks/api-errors.js\";\nimport { h as requireCanViewProject } from \"../../../../../../chunks/access.server.js\";\nimport { G as GuidSchema } from \"../../../../../../chunks/context.js\";\nconst GET = async ({ params, locals, url }) => {\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) throw error(400, \"Invalid or missing GUID\");\n  if (!locals.ctx) throw error(401, \"Unauthorized\");\n  const rawLimit = Number(url.searchParams.get(\"limit\") ?? 50);\n  const limit = Number.isFinite(rawLimit) ? Math.min(Math.max(rawLimit, 1), MAX_PAGE_LIMIT) : 50;\n  const cursor = url.searchParams.get(\"cursor\") ?? void 0;\n  try {\n    const def = await getDefinitionMeta().get(locals.ctx, guidParsed.data);\n    if (!def) throw error(404, \"Definition not found\");\n    await requireCanViewProject(locals, def.projectId);\n    const page = await getDefinitionMeta().listVersions(locals.ctx, guidParsed.data, {\n      limit,\n      cursor\n    });\n    return json({\n      versions: page.items,\n      nextCursor: page.nextCursor,\n      liveVersionId: def.liveVersionId,\n      draftVersionId: def.draftVersionId\n    });\n  } catch (err) {\n    handleApiError(err, \"Failed to list versions\");\n  }\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;AAKK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AAC/C,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtE,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC;AACnD,EAAE,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;AAC9D,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,EAAE;AAChG,EAAE,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,MAAM;AACzD,EAAE,IAAI;AACN,IAAI,MAAM,GAAG,GAAG,MAAM,iBAAiB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,sBAAsB,CAAC;AACtD,IAAI,MAAM,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC;AACtD,IAAI,MAAM,IAAI,GAAG,MAAM,iBAAiB,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE;AACrF,MAAM,KAAK;AACX,MAAM;AACN,KAAK,CAAC;AACN,IAAI,OAAO,IAAI,CAAC;AAChB,MAAM,QAAQ,EAAE,IAAI,CAAC,KAAK;AAC1B,MAAM,UAAU,EAAE,IAAI,CAAC,UAAU;AACjC,MAAM,aAAa,EAAE,GAAG,CAAC,aAAa;AACtC,MAAM,cAAc,EAAE,GAAG,CAAC;AAC1B,KAAK,CAAC;AACN,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAClD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-DxKERFAd.js

@@ -0,0 +1,35 @@
+import { json } from '@sveltejs/kit';
+import { execSync } from 'child_process';
+import { g as getBootHealth, i as isDegraded } from './bootHealth.server-Bn7taneH.js';
+import './context-9tV9WxQ5.js';
+import 'zod';
+import './providers.server-C32WKtDL.js';
+import './shared-server-DaWdgxVh.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+const STARTUP_COMMIT = (() => {
+  try {
+    return execSync("git rev-parse HEAD", { encoding: "utf8" }).trim();
+  } catch {
+    return null;
+  }
+})();
+const GET = async () => {
+  const boot = await getBootHealth();
+  const degraded = isDegraded(boot);
+  const body = {
+    status: degraded ? "degraded" : "ok",
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    commit: STARTUP_COMMIT,
+    boot
+  };
+  return json(body, { status: degraded ? 503 : 200 });
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts-DxKERFAd.js.map

package/build/server/chunks/_server.ts-DxKERFAd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-DxKERFAd.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/health/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { execSync } from \"child_process\";\nimport { g as getBootHealth, i as isDegraded } from \"../../../../chunks/bootHealth.server.js\";\nconst STARTUP_COMMIT = (() => {\n  try {\n    return execSync(\"git rev-parse HEAD\", { encoding: \"utf8\" }).trim();\n  } catch {\n    return null;\n  }\n})();\nconst GET = async () => {\n  const boot = await getBootHealth();\n  const degraded = isDegraded(boot);\n  const body = {\n    status: degraded ? \"degraded\" : \"ok\",\n    timestamp: (/* @__PURE__ */ new Date()).toISOString(),\n    commit: STARTUP_COMMIT,\n    boot\n  };\n  return json(body, { status: degraded ? 503 : 200 });\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;AAGA,MAAM,cAAc,GAAG,CAAC,MAAM;AAC9B,EAAE,IAAI;AACN,IAAI,OAAO,QAAQ,CAAC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE;AACtE,EAAE,CAAC,CAAC,MAAM;AACV,IAAI,OAAO,IAAI;AACf,EAAE;AACF,CAAC,GAAG;AACC,MAAC,GAAG,GAAG,YAAY;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE;AACpC,EAAE,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC;AACnC,EAAE,MAAM,IAAI,GAAG;AACf,IAAI,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,IAAI;AACxC,IAAI,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACzD,IAAI,MAAM,EAAE,cAAc;AAC1B,IAAI;AACJ,GAAG;AACH,EAAE,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC;AACrD;;;;"}

package/build/server/chunks/_server.ts-MOiQ4br_.js

@@ -0,0 +1,31 @@
+import { error, json } from '@sveltejs/kit';
+import { r as definitionService } from './providers.server-C32WKtDL.js';
+import { g as requireEditableDefinition } from './access.server-GvriCjXN.js';
+import { t as throwZodError, h as handleApiError } from './api-errors-Dk5z97zb.js';
+import { G as GuidSchema, d as PublishVersionInputSchema } from './context-9tV9WxQ5.js';
+import './shared-server-DaWdgxVh.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'zod';
+
+const POST = async ({ params, request, locals }) => {
+  const guidParsed = GuidSchema.safeParse(params.guid);
+  if (!guidParsed.success) throw error(400, "Invalid or missing GUID");
+  const body = await request.json().catch(() => ({}));
+  const parsed = PublishVersionInputSchema.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
+  try {
+    const version = await definitionService.publish(ctx, guidParsed.data, parsed.data.versionId);
+    return json({ success: true, version });
+  } catch (err) {
+    handleApiError(err, "Failed to publish version");
+  }
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-MOiQ4br_.js.map

package/build/server/chunks/_server.ts-MOiQ4br_.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-MOiQ4br_.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_guid_/publish/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { j as definitionService } from \"../../../../../../chunks/providers.server.js\";\nimport { g as requireEditableDefinition } from \"../../../../../../chunks/access.server.js\";\nimport { t as throwZodError, h as handleApiError } from \"../../../../../../chunks/api-errors.js\";\nimport { G as GuidSchema, c as PublishVersionInputSchema } from \"../../../../../../chunks/context.js\";\nconst POST = async ({ params, request, locals }) => {\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) throw error(400, \"Invalid or missing GUID\");\n  const body = await request.json().catch(() => ({}));\n  const parsed = PublishVersionInputSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  try {\n    const version = await definitionService.publish(ctx, guidParsed.data, parsed.data.versionId);\n    return json({ success: true, version });\n  } catch (err) {\n    handleApiError(err, \"Failed to publish version\");\n  }\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;AAKK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpD,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtE,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1D,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,IAAI;AACN,IAAI,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;AAChG,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,2BAA2B,CAAC;AACpD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-Z87uowZI.js

@@ -0,0 +1,71 @@
+import { error, json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { h as getProjectProvider } from './providers.server-C32WKtDL.js';
+import { o as requireCanManageMembers, q as checkOwnerRemoval } from './access.server-GvriCjXN.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-Dk5z97zb.js';
+import { i as ProjectRoleSchema } from './context-9tV9WxQ5.js';
+import './shared-server-DaWdgxVh.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+const UpdateRoleSchema = z.object({ role: ProjectRoleSchema });
+const PATCH = async ({ params, request, locals }) => {
+  const { id, userId } = params;
+  if (!id || !userId) throw error(400, "Missing project ID or user ID");
+  await requireCanManageMembers(locals, id);
+  const ctx = locals.ctx;
+  const body = await request.json().catch(() => null);
+  const parsed = UpdateRoleSchema.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  try {
+    await getProjectProvider().updateProjectMemberRole(ctx, id, userId, parsed.data.role);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to update role");
+  }
+};
+const DELETE = async ({ params, url, locals }) => {
+  const { id, userId } = params;
+  if (!id || !userId) throw error(400, "Missing project ID or user ID");
+  await requireCanManageMembers(locals, id);
+  const ctx = locals.ctx;
+  const confirmed = url.searchParams.get("confirm") === "true";
+  const projects = getProjectProvider();
+  const target = await projects.getProjectMember(ctx, id, userId);
+  if (!target) {
+    return json({ success: true });
+  }
+  if (target.role === "owner") {
+    const page = await projects.listProjectMembers(ctx, id, { limit: 200 });
+    const decision = checkOwnerRemoval({
+      target: { role: target.role },
+      allMembers: page.items.map((m) => ({ role: m.role })),
+      confirmed
+    });
+    if (decision === "sole_owner") {
+      throw error(
+        409,
+        "Cannot remove the sole owner of a project. Assign another owner first, or use reclaim to add a co-owner."
+      );
+    }
+    if (decision === "needs_confirm") {
+      throw error(
+        409,
+        "Removing another project owner requires explicit confirmation. Retry with ?confirm=true."
+      );
+    }
+  }
+  try {
+    await projects.removeProjectMember(ctx, id, userId);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to remove member");
+  }
+};
+
+export { DELETE, PATCH };
+//# sourceMappingURL=_server.ts-Z87uowZI.js.map

package/build/server/chunks/_server.ts-Z87uowZI.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-Z87uowZI.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/projects/_id_/members/_userId_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { b as getProjectProvider } from \"../../../../../../../chunks/providers.server.js\";\nimport { o as requireCanManageMembers, q as checkOwnerRemoval } from \"../../../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../../../chunks/api-errors.js\";\nimport { i as ProjectRoleSchema } from \"../../../../../../../chunks/context.js\";\nconst UpdateRoleSchema = z.object({ role: ProjectRoleSchema });\nconst PATCH = async ({ params, request, locals }) => {\n  const { id, userId } = params;\n  if (!id || !userId) throw error(400, \"Missing project ID or user ID\");\n  await requireCanManageMembers(locals, id);\n  const ctx = locals.ctx;\n  const body = await request.json().catch(() => null);\n  const parsed = UpdateRoleSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  try {\n    await getProjectProvider().updateProjectMemberRole(ctx, id, userId, parsed.data.role);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to update role\");\n  }\n};\nconst DELETE = async ({ params, url, locals }) => {\n  const { id, userId } = params;\n  if (!id || !userId) throw error(400, \"Missing project ID or user ID\");\n  await requireCanManageMembers(locals, id);\n  const ctx = locals.ctx;\n  const confirmed = url.searchParams.get(\"confirm\") === \"true\";\n  const projects = getProjectProvider();\n  const target = await projects.getProjectMember(ctx, id, userId);\n  if (!target) {\n    return json({ success: true });\n  }\n  if (target.role === \"owner\") {\n    const page = await projects.listProjectMembers(ctx, id, { limit: 200 });\n    const decision = checkOwnerRemoval({\n      target: { role: target.role },\n      allMembers: page.items.map((m) => ({ role: m.role })),\n      confirmed\n    });\n    if (decision === \"sole_owner\") {\n      throw error(\n        409,\n        \"Cannot remove the sole owner of a project. Assign another owner first, or use reclaim to add a co-owner.\"\n      );\n    }\n    if (decision === \"needs_confirm\") {\n      throw error(\n        409,\n        \"Removing another project owner requires explicit confirmation. Retry with ?confirm=true.\"\n      );\n    }\n  }\n  try {\n    await projects.removeProjectMember(ctx, id, userId);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to remove member\");\n  }\n};\nexport {\n  DELETE,\n  PATCH\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;AAMA,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;AACzD,MAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrD,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM;AAC/B,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,+BAA+B,CAAC;AACvE,EAAE,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,CAAC;AAC3C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC;AACjD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI;AACN,IAAI,MAAM,kBAAkB,EAAE,CAAC,uBAAuB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;AACzF,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,uBAAuB,CAAC;AAChD,EAAE;AACF;AACK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK;AAClD,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM;AAC/B,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,+BAA+B,CAAC;AACvE,EAAE,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,CAAC;AAC3C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,MAAM;AAC9D,EAAE,MAAM,QAAQ,GAAG,kBAAkB,EAAE;AACvC,EAAE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC;AACjE,EAAE,IAAI,CAAC,MAAM,EAAE;AACf,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE;AAC/B,IAAI,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAC3E,IAAI,MAAM,QAAQ,GAAG,iBAAiB,CAAC;AACvC,MAAM,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;AACnC,MAAM,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3D,MAAM;AACN,KAAK,CAAC;AACN,IAAI,IAAI,QAAQ,KAAK,YAAY,EAAE;AACnC,MAAM,MAAM,KAAK;AACjB,QAAQ,GAAG;AACX,QAAQ;AACR,OAAO;AACP,IAAI;AACJ,IAAI,IAAI,QAAQ,KAAK,eAAe,EAAE;AACtC,MAAM,MAAM,KAAK;AACjB,QAAQ,GAAG;AACX,QAAQ;AACR,OAAO;AACP,IAAI;AACJ,EAAE;AACF,EAAE,IAAI;AACN,IAAI,MAAM,QAAQ,CAAC,mBAAmB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC;AACvD,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAClD,EAAE;AACF;;;;"}