@selvajs/selva 2.0.11 → 3.0.0

package/build/server/chunks/_server.ts-Ba8fgvzw.js

@@ -0,0 +1,81 @@
+import { error, json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { n as getProjectProvider, k as getOrganizationProvider } from './providers.server-DOymvucH.js';
+import { m as requireCanManage, l as requireCanEditProjectSettings, B as withAdminBypass, f as canChangeVisibilityToPublic } from './access.server-BPceukOr.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-KUItADEX.js';
+import { s as slugify } from './slug-BGuFQjqe.js';
+import { g as ProjectVisibilitySchema, v as validateProjectFlags } from './context-WcuX1UXU.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+const UpdateProjectBody = z.object({
+  name: z.string().min(1).max(128).trim(),
+  description: z.string().max(2e3).nullish(),
+  visibility: ProjectVisibilitySchema,
+  autoJoinOnUpload: z.boolean()
+}).partial();
+const PATCH = async ({ params, request, locals }) => {
+  const { id } = params;
+  if (!id) throw error(400, "Missing project ID");
+  const { ctx, project: existing } = await requireCanEditProjectSettings(locals, id);
+  const body = await request.json().catch(() => null);
+  const parsed = UpdateProjectBody.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  if (parsed.data.visibility !== void 0 && parsed.data.visibility === "public" && existing.visibility !== "public") {
+    const orgMember = await getOrganizationProvider().getOrgMember(ctx, existing.orgId, ctx.userId);
+    const passes = withAdminBypass(
+      ctx.platformPermissions,
+      () => canChangeVisibilityToPublic({ orgMember })
+    );
+    if (!passes) {
+      throw error(403, "Only org owners or admins can make a project public.");
+    }
+  }
+  const mergedVisibility = parsed.data.visibility ?? existing.visibility;
+  const mergedAutoJoin = parsed.data.autoJoinOnUpload ?? existing.autoJoinOnUpload;
+  const flagIssues = validateProjectFlags({
+    visibility: mergedVisibility,
+    autoJoinOnUpload: mergedAutoJoin
+  });
+  if (flagIssues.length > 0) {
+    throw error(400, flagIssues.map((i) => `${i.path}: ${i.message}`).join("; "));
+  }
+  const patch = {};
+  if (parsed.data.name !== void 0) {
+    patch.name = parsed.data.name;
+    patch.slug = slugify(parsed.data.name);
+  }
+  if (parsed.data.description !== void 0) {
+    patch.description = parsed.data.description ?? void 0;
+  }
+  if (parsed.data.visibility !== void 0) patch.visibility = parsed.data.visibility;
+  if (parsed.data.autoJoinOnUpload !== void 0) {
+    patch.autoJoinOnUpload = parsed.data.autoJoinOnUpload;
+  }
+  try {
+    await getProjectProvider().updateProject(ctx, id, patch);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to update project");
+  }
+};
+const DELETE = async ({ params, locals }) => {
+  const { id } = params;
+  if (!id) throw error(400, "Missing project ID");
+  await requireCanManage(locals, id);
+  const ctx = locals.ctx;
+  try {
+    await getProjectProvider().deleteProject(ctx, id);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to delete project");
+  }
+};
+
+export { DELETE, PATCH };
+//# sourceMappingURL=_server.ts-Ba8fgvzw.js.map

package/build/server/chunks/_server.ts-Ba8fgvzw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-Ba8fgvzw.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/projects/_id_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { n as getProjectProvider, k as getOrganizationProvider } from \"../../../../../chunks/providers.server.js\";\nimport { m as requireCanManage, l as requireCanEditProjectSettings, B as withAdminBypass, f as canChangeVisibilityToPublic } from \"../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../chunks/api-errors.js\";\nimport { s as slugify } from \"../../../../../chunks/slug.js\";\nimport { g as ProjectVisibilitySchema, v as validateProjectFlags } from \"../../../../../chunks/context.js\";\nconst UpdateProjectBody = z.object({\n  name: z.string().min(1).max(128).trim(),\n  description: z.string().max(2e3).nullish(),\n  visibility: ProjectVisibilitySchema,\n  autoJoinOnUpload: z.boolean()\n}).partial();\nconst PATCH = async ({ params, request, locals }) => {\n  const { id } = params;\n  if (!id) throw error(400, \"Missing project ID\");\n  const { ctx, project: existing } = await requireCanEditProjectSettings(locals, id);\n  const body = await request.json().catch(() => null);\n  const parsed = UpdateProjectBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  if (parsed.data.visibility !== void 0 && parsed.data.visibility === \"public\" && existing.visibility !== \"public\") {\n    const orgMember = await getOrganizationProvider().getOrgMember(ctx, existing.orgId, ctx.userId);\n    const passes = withAdminBypass(\n      ctx.platformPermissions,\n      () => canChangeVisibilityToPublic({ orgMember })\n    );\n    if (!passes) {\n      throw error(403, \"Only org owners or admins can make a project public.\");\n    }\n  }\n  const mergedVisibility = parsed.data.visibility ?? existing.visibility;\n  const mergedAutoJoin = parsed.data.autoJoinOnUpload ?? existing.autoJoinOnUpload;\n  const flagIssues = validateProjectFlags({\n    visibility: mergedVisibility,\n    autoJoinOnUpload: mergedAutoJoin\n  });\n  if (flagIssues.length > 0) {\n    throw error(400, flagIssues.map((i) => `${i.path}: ${i.message}`).join(\"; \"));\n  }\n  const patch = {};\n  if (parsed.data.name !== void 0) {\n    patch.name = parsed.data.name;\n    patch.slug = slugify(parsed.data.name);\n  }\n  if (parsed.data.description !== void 0) {\n    patch.description = parsed.data.description ?? void 0;\n  }\n  if (parsed.data.visibility !== void 0) patch.visibility = parsed.data.visibility;\n  if (parsed.data.autoJoinOnUpload !== void 0) {\n    patch.autoJoinOnUpload = parsed.data.autoJoinOnUpload;\n  }\n  try {\n    await getProjectProvider().updateProject(ctx, id, patch);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to update project\");\n  }\n};\nconst DELETE = async ({ params, locals }) => {\n  const { id } = params;\n  if (!id) throw error(400, \"Missing project ID\");\n  await requireCanManage(locals, id);\n  const ctx = locals.ctx;\n  try {\n    await getProjectProvider().deleteProject(ctx, id);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to delete project\");\n  }\n};\nexport {\n  DELETE,\n  PATCH\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAOA,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;AACnC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACzC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE;AAC5C,EAAE,UAAU,EAAE,uBAAuB;AACrC,EAAE,gBAAgB,EAAE,CAAC,CAAC,OAAO;AAC7B,CAAC,CAAC,CAAC,OAAO,EAAE;AACP,MAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrD,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC;AACjD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,6BAA6B,CAAC,MAAM,EAAE,EAAE,CAAC;AACpF,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC;AAClD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,EAAE;AACpH,IAAI,MAAM,SAAS,GAAG,MAAM,uBAAuB,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC;AACnG,IAAI,MAAM,MAAM,GAAG,eAAe;AAClC,MAAM,GAAG,CAAC,mBAAmB;AAC7B,MAAM,MAAM,2BAA2B,CAAC,EAAE,SAAS,EAAE;AACrD,KAAK;AACL,IAAI,IAAI,CAAC,MAAM,EAAE;AACjB,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,sDAAsD,CAAC;AAC9E,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU;AACxE,EAAE,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,QAAQ,CAAC,gBAAgB;AAClF,EAAE,MAAM,UAAU,GAAG,oBAAoB,CAAC;AAC1C,IAAI,UAAU,EAAE,gBAAgB;AAChC,IAAI,gBAAgB,EAAE;AACtB,GAAG,CAAC;AACJ,EAAE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE;AAC7B,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjF,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,EAAE;AAClB,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE;AACnC,IAAI,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI;AACjC,IAAI,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;AAC1C,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,MAAM,EAAE;AAC1C,IAAI,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,MAAM;AACzD,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,MAAM,EAAE,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU;AAClF,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,KAAK,MAAM,EAAE;AAC/C,IAAI,KAAK,CAAC,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB;AACzD,EAAE;AACF,EAAE,IAAI;AACN,IAAI,MAAM,kBAAkB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC;AAC5D,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACnD,EAAE;AACF;AACK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC;AACjD,EAAE,MAAM,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAAC;AACpC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI;AACN,IAAI,MAAM,kBAAkB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC;AACrD,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACnD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-BmAiI-M6.js

@@ -0,0 +1,75 @@
+import { error, json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { n as getProjectProvider } from './providers.server-DOymvucH.js';
+import { u as requireInstanceAdmin } from './access.server-BPceukOr.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-KUItADEX.js';
+import { s as slugify } from './slug-BGuFQjqe.js';
+import { S as SYSTEM_CONTEXT } from './context-WcuX1UXU.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+const UpdatePlatformProjectBody = z.object({
+  name: z.string().min(1).max(128).trim(),
+  description: z.string().max(2e3).nullish()
+}).partial();
+async function loadPlatformProjectOr404(id) {
+  const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, id);
+  if (!project || project.visibility !== "platform") {
+    throw error(404, "Platform project not found");
+  }
+  return project;
+}
+const GET = async ({ params, locals }) => {
+  requireInstanceAdmin(locals);
+  const { id } = params;
+  if (!id) throw error(400, "Missing project ID");
+  try {
+    const project = await loadPlatformProjectOr404(id);
+    return json(project);
+  } catch (err) {
+    handleApiError(err, "Failed to load platform project");
+  }
+};
+const PATCH = async ({ params, request, locals }) => {
+  requireInstanceAdmin(locals);
+  const { id } = params;
+  if (!id) throw error(400, "Missing project ID");
+  const body = await request.json().catch(() => null);
+  const parsed = UpdatePlatformProjectBody.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  try {
+    await loadPlatformProjectOr404(id);
+    const patch = {};
+    if (parsed.data.name !== void 0) {
+      patch.name = parsed.data.name;
+      patch.slug = slugify(parsed.data.name);
+    }
+    if (parsed.data.description !== void 0) {
+      patch.description = parsed.data.description ?? void 0;
+    }
+    await getProjectProvider().updateProject(SYSTEM_CONTEXT, id, patch);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to update platform project");
+  }
+};
+const DELETE = async ({ params, locals }) => {
+  requireInstanceAdmin(locals);
+  const { id } = params;
+  if (!id) throw error(400, "Missing project ID");
+  try {
+    await loadPlatformProjectOr404(id);
+    await getProjectProvider().deleteProject(SYSTEM_CONTEXT, id);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to delete platform project");
+  }
+};
+
+export { DELETE, GET, PATCH };
+//# sourceMappingURL=_server.ts-BmAiI-M6.js.map

package/build/server/chunks/_server.ts-BmAiI-M6.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-BmAiI-M6.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/projects/_id_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { n as getProjectProvider } from \"../../../../../../chunks/providers.server.js\";\nimport { u as requireInstanceAdmin } from \"../../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../../chunks/api-errors.js\";\nimport { s as slugify } from \"../../../../../../chunks/slug.js\";\nimport { S as SYSTEM_CONTEXT } from \"../../../../../../chunks/context.js\";\nconst UpdatePlatformProjectBody = z.object({\n  name: z.string().min(1).max(128).trim(),\n  description: z.string().max(2e3).nullish()\n}).partial();\nasync function loadPlatformProjectOr404(id) {\n  const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, id);\n  if (!project || project.visibility !== \"platform\") {\n    throw error(404, \"Platform project not found\");\n  }\n  return project;\n}\nconst GET = async ({ params, locals }) => {\n  requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) throw error(400, \"Missing project ID\");\n  try {\n    const project = await loadPlatformProjectOr404(id);\n    return json(project);\n  } catch (err) {\n    handleApiError(err, \"Failed to load platform project\");\n  }\n};\nconst PATCH = async ({ params, request, locals }) => {\n  requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) throw error(400, \"Missing project ID\");\n  const body = await request.json().catch(() => null);\n  const parsed = UpdatePlatformProjectBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  try {\n    await loadPlatformProjectOr404(id);\n    const patch = {};\n    if (parsed.data.name !== void 0) {\n      patch.name = parsed.data.name;\n      patch.slug = slugify(parsed.data.name);\n    }\n    if (parsed.data.description !== void 0) {\n      patch.description = parsed.data.description ?? void 0;\n    }\n    await getProjectProvider().updateProject(SYSTEM_CONTEXT, id, patch);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to update platform project\");\n  }\n};\nconst DELETE = async ({ params, locals }) => {\n  requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) throw error(400, \"Missing project ID\");\n  try {\n    await loadPlatformProjectOr404(id);\n    await getProjectProvider().deleteProject(SYSTEM_CONTEXT, id);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to delete platform project\");\n  }\n};\nexport {\n  DELETE,\n  GET,\n  PATCH\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAOA,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;AAC3C,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACzC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO;AAC1C,CAAC,CAAC,CAAC,OAAO,EAAE;AACZ,eAAe,wBAAwB,CAAC,EAAE,EAAE;AAC5C,EAAE,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC;AAC3E,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE;AACrD,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,4BAA4B,CAAC;AAClD,EAAE;AACF,EAAE,OAAO,OAAO;AAChB;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC1C,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC;AACjD,EAAE,IAAI;AACN,IAAI,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,EAAE,CAAC;AACtD,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC;AACxB,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,iCAAiC,CAAC;AAC1D,EAAE;AACF;AACK,MAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrD,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC;AACjD,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1D,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI;AACN,IAAI,MAAM,wBAAwB,CAAC,EAAE,CAAC;AACtC,IAAI,MAAM,KAAK,GAAG,EAAE;AACpB,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE;AACrC,MAAM,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI;AACnC,MAAM,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;AAC5C,IAAI;AACJ,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,EAAE;AAC5C,MAAM,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC;AAC3D,IAAI;AACJ,IAAI,MAAM,kBAAkB,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,EAAE,KAAK,CAAC;AACvE,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,mCAAmC,CAAC;AAC5D,EAAE;AACF;AACK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC;AACjD,EAAE,IAAI;AACN,IAAI,MAAM,wBAAwB,CAAC,EAAE,CAAC;AACtC,IAAI,MAAM,kBAAkB,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC;AAChE,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,mCAAmC,CAAC;AAC5D,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-BrIEBX7H.js

@@ -0,0 +1,86 @@
+import { error, json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { randomUUID } from 'node:crypto';
+import { n as getProjectProvider, P as ProviderError } from './providers.server-DOymvucH.js';
+import { j as requireCanCreateProject } from './access.server-BPceukOr.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-KUItADEX.js';
+import { s as slugify } from './slug-BGuFQjqe.js';
+import { g as ProjectVisibilitySchema } from './context-WcuX1UXU.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+const MAX_SLUG_ATTEMPTS = 25;
+function isSlugConflict(err) {
+  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);
+}
+function isNameConflict(err) {
+  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);
+}
+const CreateProjectBody = z.object({
+  name: z.string().min(1, "Project name is required").max(128).trim(),
+  description: z.string().max(2e3).optional(),
+  visibility: ProjectVisibilitySchema.default("private"),
+  autoJoinOnUpload: z.boolean().optional()
+});
+const GET = async ({ locals }) => {
+  const ctx = locals.ctx;
+  if (!ctx.actingOrgId) throw error(400, "No active organization");
+  try {
+    const page = await getProjectProvider().listProjects(ctx, ctx.actingOrgId, { limit: 200 });
+    return json({ projects: page.items });
+  } catch (err) {
+    handleApiError(err, "Failed to load projects");
+  }
+};
+const POST = async ({ request, locals }) => {
+  const ctx = locals.ctx;
+  if (!ctx.actingOrgId) throw error(400, "No active organization");
+  await requireCanCreateProject(locals, ctx.actingOrgId);
+  const body = await request.json().catch(() => null);
+  const parsed = CreateProjectBody.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  const autoJoinOnUpload = parsed.data.autoJoinOnUpload ?? false;
+  if (autoJoinOnUpload && parsed.data.visibility !== "public") {
+    throw error(400, "autoJoinOnUpload requires visibility=public");
+  }
+  const projectStore = getProjectProvider();
+  const baseSlug = slugify(parsed.data.name) || "project";
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const projectId = randomUUID();
+  for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {
+    const slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;
+    const project = {
+      id: projectId,
+      orgId: ctx.actingOrgId,
+      name: parsed.data.name,
+      slug,
+      description: parsed.data.description,
+      visibility: parsed.data.visibility,
+      ownerId: locals.user.id,
+      createdBy: locals.user.id,
+      updatedBy: locals.user.id,
+      autoJoinOnUpload,
+      createdAt: now,
+      updatedAt: now,
+      deletedAt: null
+    };
+    try {
+      await projectStore.createProject(ctx, project);
+      return json(project, { status: 201 });
+    } catch (err) {
+      if (isNameConflict(err)) {
+        throw error(409, "A project with that name already exists in this organization.");
+      }
+      if (isSlugConflict(err)) continue;
+      handleApiError(err, "Failed to create project");
+    }
+  }
+  throw error(409, "Could not pick a unique project slug after several attempts.");
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts-BrIEBX7H.js.map

package/build/server/chunks/_server.ts-BrIEBX7H.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-BrIEBX7H.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/projects/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\nimport { n as getProjectProvider, P as ProviderError } from \"../../../../chunks/providers.server.js\";\nimport { j as requireCanCreateProject } from \"../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../chunks/api-errors.js\";\nimport { s as slugify } from \"../../../../chunks/slug.js\";\nimport { g as ProjectVisibilitySchema } from \"../../../../chunks/context.js\";\nconst MAX_SLUG_ATTEMPTS = 25;\nfunction isSlugConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);\n}\nfunction isNameConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);\n}\nconst CreateProjectBody = z.object({\n  name: z.string().min(1, \"Project name is required\").max(128).trim(),\n  description: z.string().max(2e3).optional(),\n  visibility: ProjectVisibilitySchema.default(\"private\"),\n  autoJoinOnUpload: z.boolean().optional()\n});\nconst GET = async ({ locals }) => {\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n  try {\n    const page = await getProjectProvider().listProjects(ctx, ctx.actingOrgId, { limit: 200 });\n    return json({ projects: page.items });\n  } catch (err) {\n    handleApiError(err, \"Failed to load projects\");\n  }\n};\nconst POST = async ({ request, locals }) => {\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n  await requireCanCreateProject(locals, ctx.actingOrgId);\n  const body = await request.json().catch(() => null);\n  const parsed = CreateProjectBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const autoJoinOnUpload = parsed.data.autoJoinOnUpload ?? false;\n  if (autoJoinOnUpload && parsed.data.visibility !== \"public\") {\n    throw error(400, \"autoJoinOnUpload requires visibility=public\");\n  }\n  const projectStore = getProjectProvider();\n  const baseSlug = slugify(parsed.data.name) || \"project\";\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const projectId = randomUUID();\n  for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {\n    const slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;\n    const project = {\n      id: projectId,\n      orgId: ctx.actingOrgId,\n      name: parsed.data.name,\n      slug,\n      description: parsed.data.description,\n      visibility: parsed.data.visibility,\n      ownerId: locals.user.id,\n      createdBy: locals.user.id,\n      updatedBy: locals.user.id,\n      autoJoinOnUpload,\n      createdAt: now,\n      updatedAt: now,\n      deletedAt: null\n    };\n    try {\n      await projectStore.createProject(ctx, project);\n      return json(project, { status: 201 });\n    } catch (err) {\n      if (isNameConflict(err)) {\n        throw error(409, \"A project with that name already exists in this organization.\");\n      }\n      if (isSlugConflict(err)) continue;\n      handleApiError(err, \"Failed to create project\");\n    }\n  }\n  throw error(409, \"Could not pick a unique project slug after several attempts.\");\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAQA,MAAM,iBAAiB,GAAG,EAAE;AAC5B,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;AACnC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACrE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;AAC7C,EAAE,UAAU,EAAE,uBAAuB,CAAC,OAAO,CAAC,SAAS,CAAC;AACxD,EAAE,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ;AACxC,CAAC,CAAC;AACG,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAClE,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAC9F,IAAI,OAAO,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;AACzC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAClD,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAClE,EAAE,MAAM,uBAAuB,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC;AACxD,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC;AAClD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,KAAK;AAChE,EAAE,IAAI,gBAAgB,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE;AAC/D,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,6CAA6C,CAAC;AACnE,EAAE;AACF,EAAE,MAAM,YAAY,GAAG,kBAAkB,EAAE;AAC3C,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS;AACzD,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,SAAS,GAAG,UAAU,EAAE;AAChC,EAAE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,iBAAiB,EAAE,OAAO,EAAE,EAAE;AAChE,IAAI,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;AACxE,IAAI,MAAM,OAAO,GAAG;AACpB,MAAM,EAAE,EAAE,SAAS;AACnB,MAAM,KAAK,EAAE,GAAG,CAAC,WAAW;AAC5B,MAAM,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC5B,MAAM,IAAI;AACV,MAAM,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AAC1C,MAAM,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;AACxC,MAAM,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC7B,MAAM,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC/B,MAAM,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC/B,MAAM,gBAAgB;AACtB,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE;AACjB,KAAK;AACL,IAAI,IAAI;AACR,MAAM,MAAM,YAAY,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC;AACpD,MAAM,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,+DAA+D,CAAC;AACzF,MAAM;AACN,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,MAAM,cAAc,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACrD,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,8DAA8D,CAAC;AAClF;;;;"}

package/build/server/chunks/_server.ts-BrlTfpwE.js

@@ -0,0 +1,71 @@
+import { error, json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { n as getProjectProvider } from './providers.server-DOymvucH.js';
+import { n as requireCanManageMembers, i as checkOwnerRemoval } from './access.server-BPceukOr.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-KUItADEX.js';
+import { f as ProjectRoleSchema } from './context-WcuX1UXU.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+const UpdateRoleSchema = z.object({ role: ProjectRoleSchema });
+const PATCH = async ({ params, request, locals }) => {
+  const { id, userId } = params;
+  if (!id || !userId) throw error(400, "Missing project ID or user ID");
+  await requireCanManageMembers(locals, id);
+  const ctx = locals.ctx;
+  const body = await request.json().catch(() => null);
+  const parsed = UpdateRoleSchema.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  try {
+    await getProjectProvider().updateProjectMemberRole(ctx, id, userId, parsed.data.role);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to update role");
+  }
+};
+const DELETE = async ({ params, url, locals }) => {
+  const { id, userId } = params;
+  if (!id || !userId) throw error(400, "Missing project ID or user ID");
+  await requireCanManageMembers(locals, id);
+  const ctx = locals.ctx;
+  const confirmed = url.searchParams.get("confirm") === "true";
+  const projects = getProjectProvider();
+  const target = await projects.getProjectMember(ctx, id, userId);
+  if (!target) {
+    return json({ success: true });
+  }
+  if (target.role === "owner") {
+    const page = await projects.listProjectMembers(ctx, id, { limit: 200 });
+    const decision = checkOwnerRemoval({
+      target: { role: target.role },
+      allMembers: page.items.map((m) => ({ role: m.role })),
+      confirmed
+    });
+    if (decision === "sole_owner") {
+      throw error(
+        409,
+        "Cannot remove the sole owner of a project. Assign another owner first, or use reclaim to add a co-owner."
+      );
+    }
+    if (decision === "needs_confirm") {
+      throw error(
+        409,
+        "Removing another project owner requires explicit confirmation. Retry with ?confirm=true."
+      );
+    }
+  }
+  try {
+    await projects.removeProjectMember(ctx, id, userId);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to remove member");
+  }
+};
+
+export { DELETE, PATCH };
+//# sourceMappingURL=_server.ts-BrlTfpwE.js.map

package/build/server/chunks/_server.ts-BrlTfpwE.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-BrlTfpwE.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/projects/_id_/members/_userId_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { n as getProjectProvider } from \"../../../../../../../chunks/providers.server.js\";\nimport { n as requireCanManageMembers, i as checkOwnerRemoval } from \"../../../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../../../chunks/api-errors.js\";\nimport { f as ProjectRoleSchema } from \"../../../../../../../chunks/context.js\";\nconst UpdateRoleSchema = z.object({ role: ProjectRoleSchema });\nconst PATCH = async ({ params, request, locals }) => {\n  const { id, userId } = params;\n  if (!id || !userId) throw error(400, \"Missing project ID or user ID\");\n  await requireCanManageMembers(locals, id);\n  const ctx = locals.ctx;\n  const body = await request.json().catch(() => null);\n  const parsed = UpdateRoleSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  try {\n    await getProjectProvider().updateProjectMemberRole(ctx, id, userId, parsed.data.role);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to update role\");\n  }\n};\nconst DELETE = async ({ params, url, locals }) => {\n  const { id, userId } = params;\n  if (!id || !userId) throw error(400, \"Missing project ID or user ID\");\n  await requireCanManageMembers(locals, id);\n  const ctx = locals.ctx;\n  const confirmed = url.searchParams.get(\"confirm\") === \"true\";\n  const projects = getProjectProvider();\n  const target = await projects.getProjectMember(ctx, id, userId);\n  if (!target) {\n    return json({ success: true });\n  }\n  if (target.role === \"owner\") {\n    const page = await projects.listProjectMembers(ctx, id, { limit: 200 });\n    const decision = checkOwnerRemoval({\n      target: { role: target.role },\n      allMembers: page.items.map((m) => ({ role: m.role })),\n      confirmed\n    });\n    if (decision === \"sole_owner\") {\n      throw error(\n        409,\n        \"Cannot remove the sole owner of a project. Assign another owner first, or use reclaim to add a co-owner.\"\n      );\n    }\n    if (decision === \"needs_confirm\") {\n      throw error(\n        409,\n        \"Removing another project owner requires explicit confirmation. Retry with ?confirm=true.\"\n      );\n    }\n  }\n  try {\n    await projects.removeProjectMember(ctx, id, userId);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to remove member\");\n  }\n};\nexport {\n  DELETE,\n  PATCH\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;AAMA,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;AACzD,MAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrD,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM;AAC/B,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,+BAA+B,CAAC;AACvE,EAAE,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,CAAC;AAC3C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC;AACjD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI;AACN,IAAI,MAAM,kBAAkB,EAAE,CAAC,uBAAuB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;AACzF,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,uBAAuB,CAAC;AAChD,EAAE;AACF;AACK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK;AAClD,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM;AAC/B,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,+BAA+B,CAAC;AACvE,EAAE,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,CAAC;AAC3C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,MAAM;AAC9D,EAAE,MAAM,QAAQ,GAAG,kBAAkB,EAAE;AACvC,EAAE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC;AACjE,EAAE,IAAI,CAAC,MAAM,EAAE;AACf,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE;AAC/B,IAAI,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAC3E,IAAI,MAAM,QAAQ,GAAG,iBAAiB,CAAC;AACvC,MAAM,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;AACnC,MAAM,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3D,MAAM;AACN,KAAK,CAAC;AACN,IAAI,IAAI,QAAQ,KAAK,YAAY,EAAE;AACnC,MAAM,MAAM,KAAK;AACjB,QAAQ,GAAG;AACX,QAAQ;AACR,OAAO;AACP,IAAI;AACJ,IAAI,IAAI,QAAQ,KAAK,eAAe,EAAE;AACtC,MAAM,MAAM,KAAK;AACjB,QAAQ,GAAG;AACX,QAAQ;AACR,OAAO;AACP,IAAI;AACJ,EAAE;AACF,EAAE,IAAI;AACN,IAAI,MAAM,QAAQ,CAAC,mBAAmB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC;AACvD,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAClD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-C0-8Ghjh.js

@@ -0,0 +1,81 @@
+import { error, json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { M as MEMBER_ASSIGNABLE_PERMISSIONS, A as ALL_ORG_PERMISSIONS, e as OrgRoleSchema } from './context-WcuX1UXU.js';
+import { k as getOrganizationProvider } from './providers.server-DOymvucH.js';
+import { y as requireManageOrgMembers } from './access.server-BPceukOr.js';
+import { t as throwZodError, h as handleApiError } from './api-errors-KUItADEX.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+const PERMISSIONS_SCHEMA = z.array(
+  z.enum(ALL_ORG_PERMISSIONS)
+);
+const PatchSchema = z.object({
+  role: OrgRoleSchema.optional(),
+  permissions: PERMISSIONS_SCHEMA.optional()
+}).refine((b) => b.role !== void 0 || b.permissions !== void 0, {
+  message: "Provide at least one of role, permissions"
+});
+const PATCH = async ({ params, request, locals }) => {
+  const { orgId, userId } = params;
+  if (!orgId || !userId) throw error(400, "Missing org ID or user ID");
+  requireManageOrgMembers(locals);
+  const ctx = locals.ctx;
+  if (ctx.actingOrgId !== orgId) {
+    throw error(403, "Acting org does not match the target org.");
+  }
+  const body = await request.json().catch(() => null);
+  const parsed = PatchSchema.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  const patch = parsed.data;
+  const orgs = getOrganizationProvider();
+  const [actorMember, target] = await Promise.all([
+    orgs.getOrgMember(ctx, orgId, ctx.userId),
+    orgs.getOrgMember(ctx, orgId, userId)
+  ]);
+  if (!target) throw error(404, "Member not found in this organization.");
+  if (!actorMember) throw error(403, "You are not a member of this organization.");
+  if (patch.role !== void 0 && patch.role !== target.role) {
+    if (actorMember.role !== "owner") {
+      throw error(403, "Only the org owner can change roles.");
+    }
+    if (target.role === "owner" && patch.role !== "owner") {
+      const page = await orgs.listOrgMembers(ctx, orgId, { limit: 200 });
+      const otherOwners = page.items.filter(
+        (m) => m.role === "owner" && m.userId !== target.userId && !m.deletedAt
+      );
+      if (otherOwners.length === 0) {
+        throw error(
+          409,
+          "Cannot demote the sole owner of this organization. Promote another member to owner first."
+        );
+      }
+    }
+    await orgs.updateOrgMemberRole(ctx, orgId, userId, patch.role);
+  }
+  if (patch.permissions !== void 0) {
+    const effectiveRole = patch.role ?? target.role;
+    const valid = effectiveRole === "member" ? new Set(MEMBER_ASSIGNABLE_PERMISSIONS) : new Set(ALL_ORG_PERMISSIONS);
+    const invalid = patch.permissions.filter((p) => !valid.has(p));
+    if (invalid.length > 0) {
+      throw error(
+        400,
+        `Permissions [${invalid.join(", ")}] cannot be assigned to a ${effectiveRole}.`
+      );
+    }
+    try {
+      await orgs.updateOrgMemberPermissions(ctx, orgId, userId, patch.permissions);
+    } catch (err) {
+      handleApiError(err, "Failed to update permissions");
+    }
+  }
+  return json({ success: true });
+};
+
+export { PATCH };
+//# sourceMappingURL=_server.ts-C0-8Ghjh.js.map

package/build/server/chunks/_server.ts-C0-8Ghjh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-C0-8Ghjh.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/orgs/_orgId_/members/_userId_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { A as ALL_ORG_PERMISSIONS, e as OrgRoleSchema, M as MEMBER_ASSIGNABLE_PERMISSIONS } from \"../../../../../../../chunks/context.js\";\nimport { k as getOrganizationProvider } from \"../../../../../../../chunks/providers.server.js\";\nimport { y as requireManageOrgMembers } from \"../../../../../../../chunks/access.server.js\";\nimport { t as throwZodError, h as handleApiError } from \"../../../../../../../chunks/api-errors.js\";\nconst PERMISSIONS_SCHEMA = z.array(\n  z.enum(ALL_ORG_PERMISSIONS)\n);\nconst PatchSchema = z.object({\n  role: OrgRoleSchema.optional(),\n  permissions: PERMISSIONS_SCHEMA.optional()\n}).refine((b) => b.role !== void 0 || b.permissions !== void 0, {\n  message: \"Provide at least one of role, permissions\"\n});\nconst PATCH = async ({ params, request, locals }) => {\n  const { orgId, userId } = params;\n  if (!orgId || !userId) throw error(400, \"Missing org ID or user ID\");\n  requireManageOrgMembers(locals);\n  const ctx = locals.ctx;\n  if (ctx.actingOrgId !== orgId) {\n    throw error(403, \"Acting org does not match the target org.\");\n  }\n  const body = await request.json().catch(() => null);\n  const parsed = PatchSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const patch = parsed.data;\n  const orgs = getOrganizationProvider();\n  const [actorMember, target] = await Promise.all([\n    orgs.getOrgMember(ctx, orgId, ctx.userId),\n    orgs.getOrgMember(ctx, orgId, userId)\n  ]);\n  if (!target) throw error(404, \"Member not found in this organization.\");\n  if (!actorMember) throw error(403, \"You are not a member of this organization.\");\n  if (patch.role !== void 0 && patch.role !== target.role) {\n    if (actorMember.role !== \"owner\") {\n      throw error(403, \"Only the org owner can change roles.\");\n    }\n    if (target.role === \"owner\" && patch.role !== \"owner\") {\n      const page = await orgs.listOrgMembers(ctx, orgId, { limit: 200 });\n      const otherOwners = page.items.filter(\n        (m) => m.role === \"owner\" && m.userId !== target.userId && !m.deletedAt\n      );\n      if (otherOwners.length === 0) {\n        throw error(\n          409,\n          \"Cannot demote the sole owner of this organization. Promote another member to owner first.\"\n        );\n      }\n    }\n    await orgs.updateOrgMemberRole(ctx, orgId, userId, patch.role);\n  }\n  if (patch.permissions !== void 0) {\n    const effectiveRole = patch.role ?? target.role;\n    const valid = effectiveRole === \"member\" ? new Set(MEMBER_ASSIGNABLE_PERMISSIONS) : new Set(ALL_ORG_PERMISSIONS);\n    const invalid = patch.permissions.filter((p) => !valid.has(p));\n    if (invalid.length > 0) {\n      throw error(\n        400,\n        `Permissions [${invalid.join(\", \")}] cannot be assigned to a ${effectiveRole}.`\n      );\n    }\n    try {\n      await orgs.updateOrgMemberPermissions(ctx, orgId, userId, patch.permissions);\n    } catch (err) {\n      handleApiError(err, \"Failed to update permissions\");\n    }\n  }\n  return json({ success: true });\n};\nexport {\n  PATCH\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;AAMA,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK;AAClC,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB;AAC5B,CAAC;AACD,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;AAC7B,EAAE,IAAI,EAAE,aAAa,CAAC,QAAQ,EAAE;AAChC,EAAE,WAAW,EAAE,kBAAkB,CAAC,QAAQ;AAC1C,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,EAAE;AAChE,EAAE,OAAO,EAAE;AACX,CAAC,CAAC;AACG,MAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrD,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM;AAClC,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,2BAA2B,CAAC;AACtE,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,GAAG,CAAC,WAAW,KAAK,KAAK,EAAE;AACjC,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,2CAA2C,CAAC;AACjE,EAAE;AACF,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC;AAC5C,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI;AAC3B,EAAE,MAAM,IAAI,GAAG,uBAAuB,EAAE;AACxC,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AAClD,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC;AAC7C,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM;AACxC,GAAG,CAAC;AACJ,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wCAAwC,CAAC;AACzE,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,4CAA4C,CAAC;AAClF,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE;AAC3D,IAAI,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE;AACtC,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,sCAAsC,CAAC;AAC9D,IAAI;AACJ,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE;AAC3D,MAAM,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACxE,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM;AAC3C,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;AACtE,OAAO;AACP,MAAM,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE;AACpC,QAAQ,MAAM,KAAK;AACnB,UAAU,GAAG;AACb,UAAU;AACV,SAAS;AACT,MAAM;AACN,IAAI;AACJ,IAAI,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;AAClE,EAAE;AACF,EAAE,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,EAAE;AACpC,IAAI,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI;AACnD,IAAI,MAAM,KAAK,GAAG,aAAa,KAAK,QAAQ,GAAG,IAAI,GAAG,CAAC,6BAA6B,CAAC,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC;AACpH,IAAI,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAClE,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;AAC5B,MAAM,MAAM,KAAK;AACjB,QAAQ,GAAG;AACX,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,0BAA0B,EAAE,aAAa,CAAC,CAAC;AACtF,OAAO;AACP,IAAI;AACJ,IAAI,IAAI;AACR,MAAM,MAAM,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC;AAClF,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,cAAc,CAAC,GAAG,EAAE,8BAA8B,CAAC;AACzD,IAAI;AACJ,EAAE;AACF,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAChC;;;;"}

package/build/server/chunks/_server.ts-C1KGgrcN.js

@@ -0,0 +1,38 @@
+import { error, json } from '@sveltejs/kit';
+import { p as getUserProfileStore } from './providers.server-DOymvucH.js';
+import { h as handleApiError } from './api-errors-KUItADEX.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import './context-WcuX1UXU.js';
+import 'zod';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+const POST = async ({ params, locals }) => {
+  if (!locals.user || !locals.ctx) throw error(401, "Unauthorized");
+  const guid = params.guid;
+  if (!guid) throw error(400, "Missing definition guid");
+  try {
+    await getUserProfileStore().starDefinition(locals.ctx, locals.user.id, guid);
+    return json({ starred: true });
+  } catch (err) {
+    handleApiError(err, "Failed to star definition");
+  }
+};
+const DELETE = async ({ params, locals }) => {
+  if (!locals.user || !locals.ctx) throw error(401, "Unauthorized");
+  const guid = params.guid;
+  if (!guid) throw error(400, "Missing definition guid");
+  try {
+    await getUserProfileStore().unstarDefinition(locals.ctx, locals.user.id, guid);
+    return json({ starred: false });
+  } catch (err) {
+    handleApiError(err, "Failed to unstar definition");
+  }
+};
+
+export { DELETE, POST };
+//# sourceMappingURL=_server.ts-C1KGgrcN.js.map

package/build/server/chunks/_server.ts-C1KGgrcN.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-C1KGgrcN.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/me/starred/_guid_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { p as getUserProfileStore } from \"../../../../../../chunks/providers.server.js\";\nimport { h as handleApiError } from \"../../../../../../chunks/api-errors.js\";\nconst POST = async ({ params, locals }) => {\n  if (!locals.user || !locals.ctx) throw error(401, \"Unauthorized\");\n  const guid = params.guid;\n  if (!guid) throw error(400, \"Missing definition guid\");\n  try {\n    await getUserProfileStore().starDefinition(locals.ctx, locals.user.id, guid);\n    return json({ starred: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to star definition\");\n  }\n};\nconst DELETE = async ({ params, locals }) => {\n  if (!locals.user || !locals.ctx) throw error(401, \"Unauthorized\");\n  const guid = params.guid;\n  if (!guid) throw error(400, \"Missing definition guid\");\n  try {\n    await getUserProfileStore().unstarDefinition(locals.ctx, locals.user.id, guid);\n    return json({ starred: false });\n  } catch (err) {\n    handleApiError(err, \"Failed to unstar definition\");\n  }\n};\nexport {\n  DELETE,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;AAGK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC;AACnE,EAAE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AAC1B,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACxD,EAAE,IAAI;AACN,IAAI,MAAM,mBAAmB,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;AAChF,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,2BAA2B,CAAC;AACpD,EAAE;AACF;AACK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC;AACnE,EAAE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AAC1B,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACxD,EAAE,IAAI;AACN,IAAI,MAAM,mBAAmB,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;AAClF,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACnC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACtD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-CM1ulGpl.js

@@ -0,0 +1,94 @@
+import { error, json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { l as getPermissionStore, c as getAuthProvider, h as getDataProvider, k as getOrganizationProvider } from './providers.server-DOymvucH.js';
+import { w as requireManageInstanceUsers } from './access.server-BPceukOr.js';
+import { t as throwZodError } from './api-errors-KUItADEX.js';
+import { S as SYSTEM_CONTEXT, j as hasPermission, D as DEFAULT_ORG_PERMISSIONS, M as MEMBER_ASSIGNABLE_PERMISSIONS, P as PlatformPermissionSchema, d as OrgPermissionSchema } from './context-WcuX1UXU.js';
+import { s as splitFlatPermissions } from './permissions-compat.server-CAfCu77g.js';
+import { s as setUserPlatformPermissions } from './permissions.server-Ba-N3_W5.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+const FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);
+const UpdatePermissionsBody = z.object({
+  permissions: z.array(FlatPermissionSchema)
+});
+const PATCH = async ({ params, request, locals }) => {
+  requireManageInstanceUsers(locals);
+  const { id } = params;
+  if (!id) throw error(400, "Missing user ID");
+  const body = await request.json().catch(() => null);
+  const parsed = UpdatePermissionsBody.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  const { platform, org } = splitFlatPermissions(parsed.data.permissions);
+  const existingPlatform = await getPermissionStore().getFor(locals.ctx, id);
+  const platformChanged = platform.length !== existingPlatform.length || platform.some((p) => !existingPlatform.includes(p)) || existingPlatform.some((p) => !platform.includes(p));
+  if (platformChanged && !hasPermission(locals.ctx, "instance_admin")) {
+    throw error(403, "Only a platform admin can change platform-scope permissions");
+  }
+  const platformResult = await setUserPlatformPermissions(locals.ctx, id, platform);
+  if (platformResult === "not_found") throw error(404, "User not found");
+  if (platformResult === "not_supported")
+    throw error(501, "Platform permission updates not supported by this auth provider");
+  if (platformResult === "last_admin")
+    throw error(
+      409,
+      "Cannot remove the last instance admin. Promote another user to instance admin first."
+    );
+  const orgId = locals.ctx?.actingOrgId;
+  if (orgId) {
+    const orgs = getOrganizationProvider();
+    const existing = await orgs.getOrgMember(SYSTEM_CONTEXT, orgId, id);
+    const resolvedPermissions = (role) => role === "member" ? org.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[role]];
+    if (existing) {
+      await orgs.updateOrgMemberPermissions(
+        SYSTEM_CONTEXT,
+        orgId,
+        id,
+        resolvedPermissions(existing.role)
+      );
+    } else {
+      const joinedAt = (/* @__PURE__ */ new Date()).toISOString();
+      await orgs.addOrgMember(SYSTEM_CONTEXT, {
+        orgId,
+        userId: id,
+        role: "member",
+        permissions: resolvedPermissions("member"),
+        joinedAt,
+        updatedAt: joinedAt,
+        updatedBy: locals.user?.id ?? id,
+        deletedAt: null
+      });
+    }
+  }
+  return json({ success: true });
+};
+const DELETE = async ({ params, locals }) => {
+  requireManageInstanceUsers(locals);
+  const { id } = params;
+  if (!id) throw error(400, "Missing user ID");
+  const targetPerms = await getPermissionStore().getFor(locals.ctx, id);
+  if (targetPerms.includes("instance_admin")) {
+    const others = await getPermissionStore().countInstanceAdminsExcluding(locals.ctx, id);
+    if (others === 0) {
+      throw error(
+        409,
+        "Cannot delete the last instance admin. Promote another user to instance admin first."
+      );
+    }
+  }
+  const result = await getAuthProvider().deleteUser(id);
+  if (result === "not_found") throw error(404, "User not found");
+  if (result === "not_supported")
+    throw error(501, "User deletion not supported by this auth provider");
+  await getDataProvider().onUserDeleted(SYSTEM_CONTEXT, id);
+  return json({ success: true });
+};
+
+export { DELETE, PATCH };
+//# sourceMappingURL=_server.ts-CM1ulGpl.js.map

package/build/server/chunks/_server.ts-CM1ulGpl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-CM1ulGpl.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/users/_id_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { l as getPermissionStore, c as getAuthProvider, h as getDataProvider, k as getOrganizationProvider } from \"../../../../../../chunks/providers.server.js\";\nimport { w as requireManageInstanceUsers } from \"../../../../../../chunks/access.server.js\";\nimport { t as throwZodError } from \"../../../../../../chunks/api-errors.js\";\nimport { P as PlatformPermissionSchema, d as OrgPermissionSchema, S as SYSTEM_CONTEXT, j as hasPermission, D as DEFAULT_ORG_PERMISSIONS, M as MEMBER_ASSIGNABLE_PERMISSIONS } from \"../../../../../../chunks/context.js\";\nimport { s as splitFlatPermissions } from \"../../../../../../chunks/permissions-compat.server.js\";\nimport { s as setUserPlatformPermissions } from \"../../../../../../chunks/permissions.server.js\";\nconst FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);\nconst UpdatePermissionsBody = z.object({\n  permissions: z.array(FlatPermissionSchema)\n});\nconst PATCH = async ({ params, request, locals }) => {\n  requireManageInstanceUsers(locals);\n  const { id } = params;\n  if (!id) throw error(400, \"Missing user ID\");\n  const body = await request.json().catch(() => null);\n  const parsed = UpdatePermissionsBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const { platform, org } = splitFlatPermissions(parsed.data.permissions);\n  const existingPlatform = await getPermissionStore().getFor(locals.ctx, id);\n  const platformChanged = platform.length !== existingPlatform.length || platform.some((p) => !existingPlatform.includes(p)) || existingPlatform.some((p) => !platform.includes(p));\n  if (platformChanged && !hasPermission(locals.ctx, \"instance_admin\")) {\n    throw error(403, \"Only a platform admin can change platform-scope permissions\");\n  }\n  const platformResult = await setUserPlatformPermissions(locals.ctx, id, platform);\n  if (platformResult === \"not_found\") throw error(404, \"User not found\");\n  if (platformResult === \"not_supported\")\n    throw error(501, \"Platform permission updates not supported by this auth provider\");\n  if (platformResult === \"last_admin\")\n    throw error(\n      409,\n      \"Cannot remove the last instance admin. Promote another user to instance admin first.\"\n    );\n  const orgId = locals.ctx?.actingOrgId;\n  if (orgId) {\n    const orgs = getOrganizationProvider();\n    const existing = await orgs.getOrgMember(SYSTEM_CONTEXT, orgId, id);\n    const resolvedPermissions = (role) => role === \"member\" ? org.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[role]];\n    if (existing) {\n      await orgs.updateOrgMemberPermissions(\n        SYSTEM_CONTEXT,\n        orgId,\n        id,\n        resolvedPermissions(existing.role)\n      );\n    } else {\n      const joinedAt = (/* @__PURE__ */ new Date()).toISOString();\n      await orgs.addOrgMember(SYSTEM_CONTEXT, {\n        orgId,\n        userId: id,\n        role: \"member\",\n        permissions: resolvedPermissions(\"member\"),\n        joinedAt,\n        updatedAt: joinedAt,\n        updatedBy: locals.user?.id ?? id,\n        deletedAt: null\n      });\n    }\n  }\n  return json({ success: true });\n};\nconst DELETE = async ({ params, locals }) => {\n  requireManageInstanceUsers(locals);\n  const { id } = params;\n  if (!id) throw error(400, \"Missing user ID\");\n  const targetPerms = await getPermissionStore().getFor(locals.ctx, id);\n  if (targetPerms.includes(\"instance_admin\")) {\n    const others = await getPermissionStore().countInstanceAdminsExcluding(locals.ctx, id);\n    if (others === 0) {\n      throw error(\n        409,\n        \"Cannot delete the last instance admin. Promote another user to instance admin first.\"\n      );\n    }\n  }\n  const result = await getAuthProvider().deleteUser(id);\n  if (result === \"not_found\") throw error(404, \"User not found\");\n  if (result === \"not_supported\")\n    throw error(501, \"User deletion not supported by this auth provider\");\n  await getDataProvider().onUserDeleted(SYSTEM_CONTEXT, id);\n  return json({ success: true });\n};\nexport {\n  DELETE,\n  PATCH\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAQA,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;AACrF,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;AACvC,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB;AAC3C,CAAC,CAAC;AACG,MAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrD,EAAE,0BAA0B,CAAC,MAAM,CAAC;AACpC,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,iBAAiB,CAAC;AAC9C,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;AACzE,EAAE,MAAM,gBAAgB,GAAG,MAAM,kBAAkB,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AAC5E,EAAE,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,KAAK,gBAAgB,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACnL,EAAE,IAAI,eAAe,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE;AACvE,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,6DAA6D,CAAC;AACnF,EAAE;AACF,EAAE,MAAM,cAAc,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,QAAQ,CAAC;AACnF,EAAE,IAAI,cAAc,KAAK,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AACxE,EAAE,IAAI,cAAc,KAAK,eAAe;AACxC,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,iEAAiE,CAAC;AACvF,EAAE,IAAI,cAAc,KAAK,YAAY;AACrC,IAAI,MAAM,KAAK;AACf,MAAM,GAAG;AACT,MAAM;AACN,KAAK;AACL,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,WAAW;AACvC,EAAE,IAAI,KAAK,EAAE;AACb,IAAI,MAAM,IAAI,GAAG,uBAAuB,EAAE;AAC1C,IAAI,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE,EAAE,CAAC;AACvE,IAAI,MAAM,mBAAmB,GAAG,CAAC,IAAI,KAAK,IAAI,KAAK,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;AAC/J,IAAI,IAAI,QAAQ,EAAE;AAClB,MAAM,MAAM,IAAI,CAAC,0BAA0B;AAC3C,QAAQ,cAAc;AACtB,QAAQ,KAAK;AACb,QAAQ,EAAE;AACV,QAAQ,mBAAmB,CAAC,QAAQ,CAAC,IAAI;AACzC,OAAO;AACP,IAAI,CAAC,MAAM;AACX,MAAM,MAAM,QAAQ,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACjE,MAAM,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE;AAC9C,QAAQ,KAAK;AACb,QAAQ,MAAM,EAAE,EAAE;AAClB,QAAQ,IAAI,EAAE,QAAQ;AACtB,QAAQ,WAAW,EAAE,mBAAmB,CAAC,QAAQ,CAAC;AAClD,QAAQ,QAAQ;AAChB,QAAQ,SAAS,EAAE,QAAQ;AAC3B,QAAQ,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE;AACxC,QAAQ,SAAS,EAAE;AACnB,OAAO,CAAC;AACR,IAAI;AACJ,EAAE;AACF,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAChC;AACK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,0BAA0B,CAAC,MAAM,CAAC;AACpC,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,iBAAiB,CAAC;AAC9C,EAAE,MAAM,WAAW,GAAG,MAAM,kBAAkB,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AACvE,EAAE,IAAI,WAAW,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE;AAC9C,IAAI,MAAM,MAAM,GAAG,MAAM,kBAAkB,EAAE,CAAC,4BAA4B,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AAC1F,IAAI,IAAI,MAAM,KAAK,CAAC,EAAE;AACtB,MAAM,MAAM,KAAK;AACjB,QAAQ,GAAG;AACX,QAAQ;AACR,OAAO;AACP,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;AACvD,EAAE,IAAI,MAAM,KAAK,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAChE,EAAE,IAAI,MAAM,KAAK,eAAe;AAChC,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,mDAAmD,CAAC;AACzE,EAAE,MAAM,eAAe,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC;AAC3D,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAChC;;;;"}