@selvajs/selva 2.0.11 → 3.0.0

package/build/server/chunks/_server.ts-tZLezQ2K.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-tZLezQ2K.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\nimport { b as getProjectProvider, k as definitionService } from \"../../../../chunks/providers.server.js\";\nimport { f as requireCanCreateDefinition } from \"../../../../chunks/access.server.js\";\nimport { t as throwZodError, h as handleApiError } from \"../../../../chunks/api-errors.js\";\nimport { G as GH_EXTENSIONS } from \"../../../../chunks/types.js\";\nimport { a as CreateDefinitionInputSchema } from \"../../../../chunks/context.js\";\nimport { d as MAX_GH_FILE_SIZE, e as MAX_IMAGE_FILE_SIZE } from \"../../../../chunks/computeLimits.js\";\nfunction parseTags(raw) {\n  if (typeof raw !== \"string\" || !raw.trim()) return void 0;\n  const tags = raw.split(\",\").map((t) => t.trim()).filter(Boolean);\n  return tags.length ? tags : void 0;\n}\nconst POST = async ({ request, locals }) => {\n  const ctx = locals.ctx;\n  const formData = await request.formData();\n  const file = formData.get(\"file\");\n  if (!(file instanceof File)) {\n    throw error(400, \"A Grasshopper (.gh or .ghx) file is required\");\n  }\n  const ext = file.name.slice(file.name.lastIndexOf(\".\")).toLowerCase();\n  if (!GH_EXTENSIONS.includes(ext)) {\n    throw error(400, `File type not allowed. Allowed: ${GH_EXTENSIONS.join(\", \")}`);\n  }\n  if (file.size > MAX_GH_FILE_SIZE) {\n    throw error(400, `File too large. Max size: ${MAX_GH_FILE_SIZE / (1024 * 1024)} MB`);\n  }\n  const imageFile = formData.get(\"image\");\n  if (imageFile instanceof File && imageFile.size > MAX_IMAGE_FILE_SIZE) {\n    throw error(400, `Image too large. Max size: ${MAX_IMAGE_FILE_SIZE / (1024 * 1024)} MB`);\n  }\n  let projectId = formData.get(\"projectId\");\n  if (typeof projectId !== \"string\" || !projectId) {\n    if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n    const projectsPage = await getProjectProvider().listProjects(ctx, ctx.actingOrgId, {\n      limit: 1\n    });\n    const defaultProject = projectsPage.items[0];\n    if (!defaultProject) throw error(500, \"No project configured\");\n    projectId = defaultProject.id;\n  }\n  await requireCanCreateDefinition(locals, projectId);\n  const parsed = CreateDefinitionInputSchema.safeParse({\n    displayName: formData.get(\"displayName\"),\n    description: formData.get(\"description\") || void 0,\n    category: formData.get(\"category\") || void 0,\n    coverImage: formData.get(\"coverImage\") || void 0,\n    tags: parseTags(formData.get(\"tags\")),\n    projectId,\n    computeServerId: formData.get(\"computeServerId\") || void 0\n  });\n  if (!parsed.success) throwZodError(parsed.error);\n  const fileExt = ext.slice(1);\n  const guid = randomUUID();\n  try {\n    const fileData = new Uint8Array(await file.arrayBuffer());\n    const { record, version } = await definitionService.create(\n      ctx,\n      {\n        guid,\n        projectId: parsed.data.projectId,\n        ownerId: locals.user.id,\n        fileExt,\n        originalFilename: file.name,\n        computeServerId: parsed.data.computeServerId,\n        displayName: parsed.data.displayName.trim(),\n        description: parsed.data.description,\n        category: parsed.data.category,\n        tags: parsed.data.tags,\n        coverImage: parsed.data.coverImage\n      },\n      fileData\n    );\n    let coverImage = record.coverImage;\n    if (imageFile instanceof File && imageFile.size > 0) {\n      const imageData = new Uint8Array(await imageFile.arrayBuffer());\n      coverImage = await definitionService.saveCoverImage(ctx, guid, imageData);\n    }\n    return json({ success: true, guid, version, coverImage });\n  } catch (err) {\n    handleApiError(err, \"Failed to create definition\");\n  }\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAQA,SAAS,SAAS,CAAC,GAAG,EAAE;AACxB,EAAE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,OAAO,MAAM;AAC3D,EAAE,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;AAClE,EAAE,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,MAAM;AACpC;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;AAC3C,EAAE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;AACnC,EAAE,IAAI,EAAE,IAAI,YAAY,IAAI,CAAC,EAAE;AAC/B,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,8CAA8C,CAAC;AACpE,EAAE;AACF,EAAE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE;AACvE,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;AACpC,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,gCAAgC,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACnF,EAAE;AACF,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,gBAAgB,EAAE;AACpC,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,0BAA0B,EAAE,gBAAgB,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AACxF,EAAE;AACF,EAAE,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;AACzC,EAAE,IAAI,SAAS,YAAY,IAAI,IAAI,SAAS,CAAC,IAAI,GAAG,mBAAmB,EAAE;AACzE,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,2BAA2B,EAAE,mBAAmB,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AAC5F,EAAE;AACF,EAAE,IAAI,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC;AAC3C,EAAE,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,EAAE;AACnD,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AACpE,IAAI,MAAM,YAAY,GAAG,MAAM,kBAAkB,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE;AACvF,MAAM,KAAK,EAAE;AACb,KAAK,CAAC;AACN,IAAI,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AAChD,IAAI,IAAI,CAAC,cAAc,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC;AAClE,IAAI,SAAS,GAAG,cAAc,CAAC,EAAE;AACjC,EAAE;AACF,EAAE,MAAM,0BAA0B,CAAC,MAAM,EAAE,SAAS,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,2BAA2B,CAAC,SAAS,CAAC;AACvD,IAAI,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC;AAC5C,IAAI,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,MAAM;AACtD,IAAI,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,MAAM;AAChD,IAAI,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,MAAM;AACpD,IAAI,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACzC,IAAI,SAAS;AACb,IAAI,eAAe,EAAE,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI;AACxD,GAAG,CAAC;AACJ,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9B,EAAE,MAAM,IAAI,GAAG,UAAU,EAAE;AAC3B,EAAE,IAAI;AACN,IAAI,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AAC7D,IAAI,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM;AAC9D,MAAM,GAAG;AACT,MAAM;AACN,QAAQ,IAAI;AACZ,QAAQ,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;AACxC,QAAQ,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC/B,QAAQ,OAAO;AACf,QAAQ,gBAAgB,EAAE,IAAI,CAAC,IAAI;AACnC,QAAQ,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe;AACpD,QAAQ,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;AACnD,QAAQ,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AAC5C,QAAQ,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;AACtC,QAAQ,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC9B,QAAQ,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC;AAChC,OAAO;AACP,MAAM;AACN,KAAK;AACL,IAAI,IAAI,UAAU,GAAG,MAAM,CAAC,UAAU;AACtC,IAAI,IAAI,SAAS,YAAY,IAAI,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE;AACzD,MAAM,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC;AACrE,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC;AAC/E,IAAI;AACJ,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AAC7D,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACtD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-yWNI61C2.js

@@ -1,110 +0,0 @@
-import { error, json } from '@sveltejs/kit';
-import { j as getComputeServerConfigStore, o as isOrgServer, q as isPlatformServer, f as flag } from './providers.server-CuhJFeVB.js';
-import { j as requireManageOrgCompute } from './access.server-BIbrdwtI.js';
-import './context-9tV9WxQ5.js';
-import { s as serversVisibleTo } from './utils2-BZ2tVtxn.js';
-import './shared-server-DaWdgxVh.js';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:crypto';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import './api-errors-Dvd_bb0g.js';
-import 'zod';
-
-function requireFlag() {
-  if (!flag("ALLOW_ORG_COMPUTE_OVERRIDE")) {
-    throw error(
-      403,
-      "Per-org compute override is disabled on this instance (ALLOW_ORG_COMPUTE_OVERRIDE)."
-    );
-  }
-}
-const GET = async ({ locals }) => {
-  requireFlag();
-  requireManageOrgCompute(locals);
-  const ctx = locals.ctx;
-  if (!ctx.actingOrgId) throw error(400, "No active organization");
-  const config = await getComputeServerConfigStore().getConfig(ctx);
-  const orgId = ctx.actingOrgId;
-  const owned = config.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => {
-    const orgServer = s;
-    const { apiKey, ...rest } = orgServer;
-    return { ...rest, hasApiKey: !!apiKey };
-  });
-  const visible = serversVisibleTo(config, orgId);
-  const catalog = visible.map((s) => ({
-    id: s.id,
-    label: s.label,
-    serverUrl: s.serverUrl,
-    scope: s.scope,
-    source: isPlatformServer(s) ? "platform" : "org",
-    timeoutMs: s.timeoutMs,
-    retryCount: s.retryCount
-  }));
-  return json({
-    servers: owned,
-    defaultServerId: config.orgDefaults?.[orgId] ?? null,
-    globalDefaultServerId: config.defaultServerId ?? null,
-    catalog
-  });
-};
-const PUT = async ({ request, locals }) => {
-  requireFlag();
-  requireManageOrgCompute(locals);
-  const ctx = locals.ctx;
-  if (!ctx.actingOrgId) throw error(400, "No active organization");
-  const orgId = ctx.actingOrgId;
-  const body = await request.json().catch(() => null);
-  if (!body || typeof body !== "object") throw error(400, "Invalid request body");
-  const incoming = body;
-  if (!Array.isArray(incoming.servers)) throw error(400, "servers must be an array");
-  for (const s of incoming.servers) {
-    if (!s.id || typeof s.id !== "string") throw error(400, "Each server needs an id");
-    if (!s.label || typeof s.label !== "string") throw error(400, "Each server needs a label");
-    if (!s.serverUrl || typeof s.serverUrl !== "string")
-      throw error(400, "Each server needs a serverUrl");
-    try {
-      new URL(s.serverUrl);
-    } catch {
-      throw error(400, `Invalid serverUrl: ${s.serverUrl}`);
-    }
-    if (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== "string")
-      throw error(400, "apiKey must be a string, null, or omitted");
-  }
-  const provider = getComputeServerConfigStore();
-  const existing = await provider.getConfig(ctx);
-  const storedKeyById = new Map(
-    existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => [s.id, s.apiKey])
-  );
-  const next = incoming.servers.map((s) => ({
-    id: s.id,
-    scope: "org",
-    ownerOrgId: orgId,
-    label: s.label,
-    serverUrl: s.serverUrl,
-    timeoutMs: s.timeoutMs,
-    retryCount: s.retryCount,
-    apiKey: s.apiKey === null ? void 0 : s.apiKey ? s.apiKey : storedKeyById.get(s.id)
-  }));
-  if (typeof incoming.defaultServerId === "string") {
-    const projected = {
-      servers: [
-        ...existing.servers.filter((s) => !(isOrgServer(s) && s.ownerOrgId === orgId)),
-        ...next
-      ],
-      defaultServerId: existing.defaultServerId,
-      orgDefaults: existing.orgDefaults
-    };
-    const visibleIds = new Set(serversVisibleTo(projected, orgId).map((s) => s.id));
-    if (!visibleIds.has(incoming.defaultServerId)) {
-      throw error(400, "defaultServerId must reference a server visible to this organization");
-    }
-  }
-  await provider.saveOrgServers(ctx, orgId, next, incoming.defaultServerId);
-  return new Response(null, { status: 204 });
-};
-
-export { GET, PUT };
-//# sourceMappingURL=_server.ts-yWNI61C2.js.map

package/build/server/chunks/_server.ts-yWNI61C2.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-yWNI61C2.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/org/compute/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { g as getComputeServerConfigStore, q as isOrgServer, o as isPlatformServer, f as flag } from \"../../../../../chunks/providers.server.js\";\nimport { j as requireManageOrgCompute } from \"../../../../../chunks/access.server.js\";\nimport \"../../../../../chunks/context.js\";\nimport { s as serversVisibleTo } from \"../../../../../chunks/utils2.js\";\nfunction requireFlag() {\n  if (!flag(\"ALLOW_ORG_COMPUTE_OVERRIDE\")) {\n    throw error(\n      403,\n      \"Per-org compute override is disabled on this instance (ALLOW_ORG_COMPUTE_OVERRIDE).\"\n    );\n  }\n}\nconst GET = async ({ locals }) => {\n  requireFlag();\n  requireManageOrgCompute(locals);\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n  const config = await getComputeServerConfigStore().getConfig(ctx);\n  const orgId = ctx.actingOrgId;\n  const owned = config.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => {\n    const orgServer = s;\n    const { apiKey, ...rest } = orgServer;\n    return { ...rest, hasApiKey: !!apiKey };\n  });\n  const visible = serversVisibleTo(config, orgId);\n  const catalog = visible.map((s) => ({\n    id: s.id,\n    label: s.label,\n    serverUrl: s.serverUrl,\n    scope: s.scope,\n    source: isPlatformServer(s) ? \"platform\" : \"org\",\n    timeoutMs: s.timeoutMs,\n    retryCount: s.retryCount\n  }));\n  return json({\n    servers: owned,\n    defaultServerId: config.orgDefaults?.[orgId] ?? null,\n    globalDefaultServerId: config.defaultServerId ?? null,\n    catalog\n  });\n};\nconst PUT = async ({ request, locals }) => {\n  requireFlag();\n  requireManageOrgCompute(locals);\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n  const orgId = ctx.actingOrgId;\n  const body = await request.json().catch(() => null);\n  if (!body || typeof body !== \"object\") throw error(400, \"Invalid request body\");\n  const incoming = body;\n  if (!Array.isArray(incoming.servers)) throw error(400, \"servers must be an array\");\n  for (const s of incoming.servers) {\n    if (!s.id || typeof s.id !== \"string\") throw error(400, \"Each server needs an id\");\n    if (!s.label || typeof s.label !== \"string\") throw error(400, \"Each server needs a label\");\n    if (!s.serverUrl || typeof s.serverUrl !== \"string\")\n      throw error(400, \"Each server needs a serverUrl\");\n    try {\n      new URL(s.serverUrl);\n    } catch {\n      throw error(400, `Invalid serverUrl: ${s.serverUrl}`);\n    }\n    if (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== \"string\")\n      throw error(400, \"apiKey must be a string, null, or omitted\");\n  }\n  const provider = getComputeServerConfigStore();\n  const existing = await provider.getConfig(ctx);\n  const storedKeyById = new Map(\n    existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => [s.id, s.apiKey])\n  );\n  const next = incoming.servers.map((s) => ({\n    id: s.id,\n    scope: \"org\",\n    ownerOrgId: orgId,\n    label: s.label,\n    serverUrl: s.serverUrl,\n    timeoutMs: s.timeoutMs,\n    retryCount: s.retryCount,\n    apiKey: s.apiKey === null ? void 0 : s.apiKey ? s.apiKey : storedKeyById.get(s.id)\n  }));\n  if (typeof incoming.defaultServerId === \"string\") {\n    const projected = {\n      servers: [\n        ...existing.servers.filter((s) => !(isOrgServer(s) && s.ownerOrgId === orgId)),\n        ...next\n      ],\n      defaultServerId: existing.defaultServerId,\n      orgDefaults: existing.orgDefaults\n    };\n    const visibleIds = new Set(serversVisibleTo(projected, orgId).map((s) => s.id));\n    if (!visibleIds.has(incoming.defaultServerId)) {\n      throw error(400, \"defaultServerId must reference a server visible to this organization\");\n    }\n  }\n  await provider.saveOrgServers(ctx, orgId, next, incoming.defaultServerId);\n  return new Response(null, { status: 204 });\n};\nexport {\n  GET,\n  PUT\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAKA,SAAS,WAAW,GAAG;AACvB,EAAE,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE;AAC3C,IAAI,MAAM,KAAK;AACf,MAAM,GAAG;AACT,MAAM;AACN,KAAK;AACL,EAAE;AACF;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,WAAW,EAAE;AACf,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAClE,EAAE,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC;AACnE,EAAE,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC/B,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK;AAClG,IAAI,MAAM,SAAS,GAAG,CAAC;AACvB,IAAI,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS;AACzC,IAAI,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;AAC3C,EAAE,CAAC,CAAC;AACJ,EAAE,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC;AACjD,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AACtC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE;AACZ,IAAI,KAAK,EAAE,CAAC,CAAC,KAAK;AAClB,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS;AAC1B,IAAI,KAAK,EAAE,CAAC,CAAC,KAAK;AAClB,IAAI,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,KAAK;AACpD,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS;AAC1B,IAAI,UAAU,EAAE,CAAC,CAAC;AAClB,GAAG,CAAC,CAAC;AACL,EAAE,OAAO,IAAI,CAAC;AACd,IAAI,OAAO,EAAE,KAAK;AAClB,IAAI,eAAe,EAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,IAAI,IAAI;AACxD,IAAI,qBAAqB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;AACzD,IAAI;AACJ,GAAG,CAAC;AACJ;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC3C,EAAE,WAAW,EAAE;AACf,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAClE,EAAE,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC/B,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,sBAAsB,CAAC;AACjF,EAAE,MAAM,QAAQ,GAAG,IAAI;AACvB,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACpF,EAAE,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE;AACpC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtF,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,2BAA2B,CAAC;AAC9F,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;AACvD,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,+BAA+B,CAAC;AACvD,IAAI,IAAI;AACR,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1B,IAAI,CAAC,CAAC,MAAM;AACZ,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAC3D,IAAI;AACJ,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;AAChF,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,2CAA2C,CAAC;AACnE,EAAE;AACF,EAAE,MAAM,QAAQ,GAAG,2BAA2B,EAAE;AAChD,EAAE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC;AAChD,EAAE,MAAM,aAAa,GAAG,IAAI,GAAG;AAC/B,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;AACxG,GAAG;AACH,EAAE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC5C,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE;AACZ,IAAI,KAAK,EAAE,KAAK;AAChB,IAAI,UAAU,EAAE,KAAK;AACrB,IAAI,KAAK,EAAE,CAAC,CAAC,KAAK;AAClB,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS;AAC1B,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS;AAC1B,IAAI,UAAU,EAAE,CAAC,CAAC,UAAU;AAC5B,IAAI,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;AACrF,GAAG,CAAC,CAAC;AACL,EAAE,IAAI,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ,EAAE;AACpD,IAAI,MAAM,SAAS,GAAG;AACtB,MAAM,OAAO,EAAE;AACf,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC;AACtF,QAAQ,GAAG;AACX,OAAO;AACP,MAAM,eAAe,EAAE,QAAQ,CAAC,eAAe;AAC/C,MAAM,WAAW,EAAE,QAAQ,CAAC;AAC5B,KAAK;AACL,IAAI,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;AACnF,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE;AACnD,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,sEAAsE,CAAC;AAC9F,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC;AAC3E,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C;;;;"}

package/build/server/chunks/_server.ts-z7zvXa1n.js

@@ -1,31 +0,0 @@
-import { error, redirect } from '@sveltejs/kit';
-import { g as getAuthProvider } from './providers.server-CuhJFeVB.js';
-import { b as bootstrapUserSession } from './auth-bootstrap.server-B93MMm50.js';
-import { s as setSessionCookie, a as setRefreshCookie, d as safeRedirectTarget } from './admin-auth.server-CdTfBMI5.js';
-import './shared-server-DaWdgxVh.js';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import './context-9tV9WxQ5.js';
-import 'zod';
-import 'node:crypto';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import './slug-BGuFQjqe.js';
-
-const GET = async ({ url, cookies }) => {
-  const emailLink = getAuthProvider().emailLink;
-  if (!emailLink) {
-    throw error(501, "Email sign-in is not supported by this provider.");
-  }
-  const result = await emailLink.verifyMagicLink(url.toString());
-  if (!result) throw error(401, "This sign-in link is invalid or has expired.");
-  await bootstrapUserSession(result.user);
-  setSessionCookie(cookies, result.sessionToken);
-  if (result.refreshToken) setRefreshCookie(cookies, result.refreshToken);
-  const dest = safeRedirectTarget(url.searchParams.get("redirectTo"), "/library");
-  redirect(303, dest);
-};
-
-export { GET };
-//# sourceMappingURL=_server.ts-z7zvXa1n.js.map

package/build/server/chunks/_server.ts-z7zvXa1n.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-z7zvXa1n.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/auth/email/callback/_server.ts.js"],"sourcesContent":["import { error, redirect } from \"@sveltejs/kit\";\nimport { e as getAuthProvider } from \"../../../../../chunks/providers.server.js\";\nimport { b as bootstrapUserSession } from \"../../../../../chunks/auth-bootstrap.server.js\";\nimport { s as setSessionCookie, a as setRefreshCookie, b as safeRedirectTarget } from \"../../../../../chunks/admin-auth.server.js\";\nconst GET = async ({ url, cookies }) => {\n  const emailLink = getAuthProvider().emailLink;\n  if (!emailLink) {\n    throw error(501, \"Email sign-in is not supported by this provider.\");\n  }\n  const result = await emailLink.verifyMagicLink(url.toString());\n  if (!result) throw error(401, \"This sign-in link is invalid or has expired.\");\n  await bootstrapUserSession(result.user);\n  setSessionCookie(cookies, result.sessionToken);\n  if (result.refreshToken) setRefreshCookie(cookies, result.refreshToken);\n  const dest = safeRedirectTarget(url.searchParams.get(\"redirectTo\"), \"/library\");\n  redirect(303, dest);\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAIK,MAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK;AACxC,EAAE,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC,SAAS;AAC/C,EAAE,IAAI,CAAC,SAAS,EAAE;AAClB,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,kDAAkD,CAAC;AACxE,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;AAChE,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,8CAA8C,CAAC;AAC/E,EAAE,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;AACzC,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAChD,EAAE,IAAI,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACzE,EAAE,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;AACjF,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;AACrB;;;;"}

package/build/server/chunks/access.server-BIbrdwtI.js

@@ -1,411 +0,0 @@
-import { error, redirect } from '@sveltejs/kit';
-import { h as hasPermission, A as ALL_PLATFORM_PERMISSIONS } from './context-9tV9WxQ5.js';
-import { i as getDefinitionMeta, c as getOrganizationProvider, f as flag, h as getProjectProvider, k as getPlatformProjectGrantStore } from './providers.server-CuhJFeVB.js';
-import { h as handleApiError } from './api-errors-Dvd_bb0g.js';
-import 'zod';
-import './shared-server-DaWdgxVh.js';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:crypto';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-
-function isInstanceAdmin(platformPermissions) {
-  return platformPermissions.includes("instance_admin");
-}
-function withAdminBypass(platformPermissions, rule) {
-  if (isInstanceAdmin(platformPermissions))
-    return true;
-  return rule();
-}
-function canView(input) {
-  const { project, member, orgMember, allowCrossOrgPublic, enablePlatformProjects, platformPermissions, platformGrants, actingOrgId, userId } = input;
-  if (!project)
-    return false;
-  if (project.visibility === "platform") {
-    if (!enablePlatformProjects)
-      return false;
-    if (isInstanceAdmin(platformPermissions))
-      return true;
-    return platformGrants.some((g) => g.granteeType === "user" && g.granteeId === userId || g.granteeType === "org" && g.granteeId === actingOrgId);
-  }
-  if (project.visibility === "private")
-    return member !== null;
-  if (project.visibility === "org")
-    return orgMember !== null;
-  if (project.visibility === "public")
-    return allowCrossOrgPublic ? true : orgMember !== null;
-  return false;
-}
-function canSolve(input) {
-  const { project, enablePlatformProjects, platformPermissions, platformGrants, actingOrgId, userId } = input;
-  if (!project)
-    return false;
-  if (project.visibility === "platform") {
-    if (!enablePlatformProjects)
-      return false;
-    if (isInstanceAdmin(platformPermissions))
-      return true;
-    return platformGrants.some((g) => g.canSolve && (g.granteeType === "user" && g.granteeId === userId || g.granteeType === "org" && g.granteeId === actingOrgId));
-  }
-  return canView(input);
-}
-function canEdit(input) {
-  const { member, project, enablePlatformProjects, platformPermissions } = input;
-  if (project?.visibility === "platform") {
-    if (!enablePlatformProjects)
-      return false;
-    return isInstanceAdmin(platformPermissions);
-  }
-  return member?.role === "owner" || member?.role === "editor";
-}
-function canManage(input) {
-  if (input.project?.visibility === "platform") {
-    if (!input.enablePlatformProjects)
-      return false;
-    return isInstanceAdmin(input.platformPermissions);
-  }
-  return input.member?.role === "owner";
-}
-function canEditProjectSettings(input) {
-  if (input.project?.visibility === "platform") {
-    if (!input.enablePlatformProjects)
-      return false;
-    return isInstanceAdmin(input.platformPermissions);
-  }
-  return input.member?.role === "owner";
-}
-function canChangeVisibilityToPublic(input) {
-  const role = input.orgMember?.role;
-  return role === "owner" || role === "admin";
-}
-function canEditDefinition(input) {
-  const { project, definition, member, userId, platformPermissions, enablePlatformProjects } = input;
-  if (!project || !definition)
-    return false;
-  if (project.visibility === "platform") {
-    if (!enablePlatformProjects)
-      return false;
-    return isInstanceAdmin(platformPermissions);
-  }
-  if (member?.role === "owner" || member?.role === "editor")
-    return true;
-  if (project.autoJoinOnUpload && userId === definition.ownerId)
-    return true;
-  return false;
-}
-function canReclaim(input) {
-  const { project, orgMember, actingOrgId } = input;
-  if (!project || !actingOrgId)
-    return false;
-  if (project.visibility === "platform")
-    return false;
-  if (actingOrgId !== project.orgId)
-    return false;
-  const role = orgMember?.role;
-  return role === "owner" || role === "admin";
-}
-function canCreateProject(input) {
-  const { orgMember, orgPermissions, actingOrgId, targetOrgId } = input;
-  if (actingOrgId !== targetOrgId)
-    return false;
-  const role = orgMember?.role;
-  if (role === "owner" || role === "admin")
-    return true;
-  if (role === "member" && orgPermissions.includes("manage_projects"))
-    return true;
-  return false;
-}
-function checkOwnerRemoval(input) {
-  if (input.target.role !== "owner")
-    return "ok";
-  const ownerCount = input.allMembers.filter((m) => m.role === "owner").length;
-  if (ownerCount <= 1)
-    return "sole_owner";
-  if (!input.confirmed)
-    return "needs_confirm";
-  return "ok";
-}
-const throwProviderError = handleApiError;
-function requireAuthed(locals) {
-  const { user, ctx } = locals;
-  if (!user || !ctx) throw error(401, "Unauthorized");
-  return { user, ctx };
-}
-function requirePermission(locals, permission) {
-  const { user, ctx } = requireAuthed(locals);
-  if (!hasPermission(ctx, permission)) {
-    throw error(403, `You don't have permission to do this.`);
-  }
-  return user;
-}
-function assertPagePermission(locals, permission) {
-  const { user, ctx } = requireAuthed(locals);
-  if (!hasPermission(ctx, permission)) {
-    redirect(303, "/admin");
-  }
-  return user;
-}
-const requireManageInstanceUsers = (locals) => requirePermission(locals, "manage_instance_users");
-const requireManageCompute = (locals) => requirePermission(locals, "manage_compute");
-const requireManageOrgMembers = (locals) => requirePermission(locals, "manage_org_members");
-const requireManageOrgCompute = (locals) => requirePermission(locals, "manage_org_compute");
-const requireManageDefinitions = (locals) => requirePermission(locals, "manage_definitions");
-const requireManageProjects = (locals) => requirePermission(locals, "manage_projects");
-const assertManageInstanceUsers = (locals) => assertPagePermission(locals, "manage_instance_users");
-const assertManageCompute = (locals) => assertPagePermission(locals, "manage_compute");
-const assertManageDefinitions = (locals) => assertPagePermission(locals, "manage_definitions");
-const assertManageProjects = (locals) => assertPagePermission(locals, "manage_projects");
-const requireInstanceAdmin = (locals) => requirePermission(locals, "instance_admin");
-function requireAnyPlatformPermission(locals) {
-  const { user, ctx } = requireAuthed(locals);
-  const allowed = ALL_PLATFORM_PERMISSIONS.some((p) => hasPermission(ctx, p));
-  if (!allowed) throw error(403, `You don't have permission to do this.`);
-  return user;
-}
-function assertAnyPlatformPermission(locals) {
-  const { user, ctx } = requireAuthed(locals);
-  const allowed = ALL_PLATFORM_PERMISSIONS.some((p) => hasPermission(ctx, p));
-  if (!allowed) redirect(303, "/library");
-  return user;
-}
-async function managementBypassOrRun(ctx, check) {
-  if (hasPermission(ctx, "instance_admin")) return true;
-  return await check();
-}
-async function contentCheck(check) {
-  return await check();
-}
-async function loadProjectOr404(ctx, projectId) {
-  const project = await getProjectProvider().getProject(ctx, projectId);
-  if (!project) throw error(404, "Project not found");
-  return project;
-}
-async function buildProjectAccessInput(ctx, project, overrides = {}) {
-  const allowCrossOrgPublic = flag("ALLOW_CROSS_ORG_PUBLIC");
-  const enablePlatformProjects = flag("ENABLE_PLATFORM_PROJECTS");
-  let member = null;
-  let orgMember = null;
-  let platformGrants = [];
-  if (project.visibility === "platform") {
-    if (enablePlatformProjects) {
-      platformGrants = await getPlatformProjectGrantStore().listByProject(ctx, project.id);
-    }
-  } else if (project.visibility === "private") {
-    member = await getProjectProvider().getProjectMember(ctx, project.id, ctx.userId);
-  } else {
-    const skipOrgMember = project.visibility === "public" && allowCrossOrgPublic;
-    [member, orgMember] = await Promise.all([
-      getProjectProvider().getProjectMember(ctx, project.id, ctx.userId),
-      skipOrgMember ? Promise.resolve(null) : getOrganizationProvider().getOrgMember(ctx, project.orgId, ctx.userId)
-    ]);
-  }
-  return {
-    orgPermissions: ctx.orgPermissions,
-    platformPermissions: ctx.platformPermissions,
-    project,
-    member,
-    orgMember,
-    allowCrossOrgPublic,
-    enablePlatformProjects,
-    platformGrants,
-    actingOrgId: ctx.actingOrgId ?? null,
-    userId: ctx.userId,
-    ...overrides
-  };
-}
-function projectAccessInputFromRows(ctx, project, rows) {
-  return {
-    orgPermissions: ctx.orgPermissions,
-    platformPermissions: ctx.platformPermissions,
-    project,
-    member: rows.member ?? null,
-    orgMember: rows.orgMember ?? null,
-    allowCrossOrgPublic: flag("ALLOW_CROSS_ORG_PUBLIC"),
-    enablePlatformProjects: flag("ENABLE_PLATFORM_PROJECTS"),
-    platformGrants: rows.platformGrants ?? [],
-    actingOrgId: ctx.actingOrgId ?? null,
-    userId: ctx.userId
-  };
-}
-async function requireCanEdit(locals, projectId) {
-  const { user, ctx } = requireAuthed(locals);
-  const allowed = await contentCheck(async () => {
-    const project = await loadProjectOr404(ctx, projectId);
-    return canEdit(await buildProjectAccessInput(ctx, project));
-  });
-  if (!allowed) throw error(403, "You do not have permission to edit this project.");
-  return user;
-}
-async function requireCanCreateDefinition(locals, projectId) {
-  const { user, ctx } = requireAuthed(locals);
-  const project = await loadProjectOr404(ctx, projectId);
-  const allowed = await contentCheck(async () => {
-    if (project.autoJoinOnUpload) return true;
-    return canEdit(await buildProjectAccessInput(ctx, project));
-  });
-  if (!allowed) {
-    throw error(403, "You do not have permission to upload definitions to this project.");
-  }
-  return { user, ctx, project };
-}
-async function requireTargetIsOrgMember(locals, orgId, targetUserId) {
-  const { ctx } = requireAuthed(locals);
-  const member = await getOrganizationProvider().getOrgMember(ctx, orgId, targetUserId);
-  if (!member) {
-    throw error(400, "User must be a member of this organization to be added to a project.");
-  }
-}
-async function requireCanReclaim(locals, projectId) {
-  const { user, ctx } = requireAuthed(locals);
-  const project = await loadProjectOr404(ctx, projectId);
-  const allowed = await managementBypassOrRun(ctx, async () => {
-    const orgMember = await getOrganizationProvider().getOrgMember(ctx, project.orgId, ctx.userId);
-    return canReclaim({
-      project,
-      orgMember,
-      actingOrgId: ctx.actingOrgId ?? null
-    });
-  });
-  if (!allowed) {
-    throw error(403, "Only org owners or admins of this project’s org can reclaim it.");
-  }
-  return { user, ctx, project };
-}
-async function requireCanCreateProject(locals, targetOrgId) {
-  const { user, ctx } = requireAuthed(locals);
-  const allowed = await managementBypassOrRun(ctx, async () => {
-    const orgMember = await getOrganizationProvider().getOrgMember(ctx, targetOrgId, ctx.userId);
-    return canCreateProject({
-      orgPermissions: ctx.orgPermissions,
-      orgMember,
-      actingOrgId: ctx.actingOrgId ?? null,
-      targetOrgId
-    });
-  });
-  if (!allowed) throw error(403, "You do not have permission to create projects in this org.");
-  return { user, ctx };
-}
-async function requireCanManage(locals, projectId) {
-  const { user, ctx } = requireAuthed(locals);
-  const allowed = await managementBypassOrRun(ctx, async () => {
-    const project = await loadProjectOr404(ctx, projectId);
-    return canManage(await buildProjectAccessInput(ctx, project));
-  });
-  if (!allowed) throw error(403, "Only project owners can manage this project.");
-  return user;
-}
-async function requireCanManageMembers(locals, projectId) {
-  const { user, ctx } = requireAuthed(locals);
-  const allowed = await managementBypassOrRun(ctx, async () => {
-    const project = await loadProjectOr404(ctx, projectId);
-    return canManage(await buildProjectAccessInput(ctx, project));
-  });
-  if (!allowed) throw error(403, "Only project owners can manage members.");
-  return user;
-}
-async function requireCanEditProjectSettings(locals, projectId) {
-  const { user, ctx } = requireAuthed(locals);
-  const project = await loadProjectOr404(ctx, projectId);
-  const allowed = await managementBypassOrRun(
-    ctx,
-    async () => canEditProjectSettings(await buildProjectAccessInput(ctx, project))
-  );
-  if (!allowed) throw error(403, "Only project owners can edit project settings.");
-  return { user, ctx, project };
-}
-async function requireCanViewProject(locals, projectId) {
-  const { user, ctx } = requireAuthed(locals);
-  const allowed = await contentCheck(async () => {
-    const project = await loadProjectOr404(ctx, projectId);
-    return canView(await buildProjectAccessInput(ctx, project));
-  });
-  if (!allowed) throw error(403, "You do not have access to this project.");
-  return user;
-}
-async function requireCanSolve(locals, projectId) {
-  const { user, ctx } = requireAuthed(locals);
-  const project = await loadProjectOr404(ctx, projectId);
-  const allowed = await contentCheck(
-    async () => canSolve(await buildProjectAccessInput(ctx, project))
-  );
-  if (!allowed) throw error(403, "You do not have access to this project.");
-  return { user, ctx, project };
-}
-async function requireEditableDefinition(locals, guid) {
-  const { ctx } = requireAuthed(locals);
-  const record = await getDefinitionMeta().get(ctx, guid);
-  if (!record) throw error(404, "Definition not found");
-  const allowed = await contentCheck(async () => {
-    const [project, member] = await Promise.all([
-      getProjectProvider().getProject(ctx, record.projectId),
-      getProjectProvider().getProjectMember(ctx, record.projectId, ctx.userId)
-    ]);
-    return canEditDefinition({
-      project,
-      definition: record,
-      member,
-      userId: ctx.userId,
-      platformPermissions: ctx.platformPermissions,
-      enablePlatformProjects: flag("ENABLE_PLATFORM_PROJECTS")
-    });
-  });
-  if (!allowed) throw error(403, "You do not have permission to edit this definition.");
-  return { record, ctx };
-}
-async function requireCanEditDefinition(locals, projectId, definitionGuid) {
-  const { user, ctx } = requireAuthed(locals);
-  const allowed = await contentCheck(async () => {
-    const [project, definition, member] = await Promise.all([
-      getProjectProvider().getProject(ctx, projectId),
-      getDefinitionMeta().get(ctx, definitionGuid),
-      getProjectProvider().getProjectMember(ctx, projectId, ctx.userId)
-    ]);
-    return canEditDefinition({
-      project,
-      definition,
-      member,
-      userId: ctx.userId,
-      platformPermissions: ctx.platformPermissions,
-      enablePlatformProjects: flag("ENABLE_PLATFORM_PROJECTS")
-    });
-  });
-  if (!allowed) throw error(403, "You do not have permission to edit this definition.");
-  return user;
-}
-const access_server = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
-  __proto__: null,
-  assertAnyPlatformPermission,
-  assertManageCompute,
-  assertManageDefinitions,
-  assertManageInstanceUsers,
-  assertManageProjects,
-  assertPagePermission,
-  projectAccessInputFromRows,
-  requireAnyPlatformPermission,
-  requireCanCreateDefinition,
-  requireCanCreateProject,
-  requireCanEdit,
-  requireCanEditDefinition,
-  requireCanEditProjectSettings,
-  requireCanManage,
-  requireCanManageMembers,
-  requireCanReclaim,
-  requireCanSolve,
-  requireCanViewProject,
-  requireEditableDefinition,
-  requireInstanceAdmin,
-  requireManageCompute,
-  requireManageDefinitions,
-  requireManageInstanceUsers,
-  requireManageOrgCompute,
-  requireManageOrgMembers,
-  requireManageProjects,
-  requirePermission,
-  requireTargetIsOrgMember,
-  throwProviderError
-}, Symbol.toStringTag, { value: "Module" }));
-
-export { canEdit as A, access_server as B, requireInstanceAdmin as a, requirePermission as b, requireManageInstanceUsers as c, requireCanEditDefinition as d, requireCanSolve as e, requireCanCreateDefinition as f, requireEditableDefinition as g, requireCanViewProject as h, requireManageOrgMembers as i, requireManageOrgCompute as j, requireCanCreateProject as k, requireCanManage as l, requireCanEditProjectSettings as m, canChangeVisibilityToPublic as n, requireCanManageMembers as o, requireTargetIsOrgMember as p, checkOwnerRemoval as q, requireManageCompute as r, requireCanReclaim as s, assertAnyPlatformPermission as t, assertPagePermission as u, assertManageCompute as v, withAdminBypass as w, assertManageInstanceUsers as x, canView as y, projectAccessInputFromRows as z };
-//# sourceMappingURL=access.server-BIbrdwtI.js.map