@selvajs/selva 2.0.11 → 4.0.0

package/build/server/chunks/_server.ts-BOCvzY_U.js

@@ -0,0 +1,104 @@
+import { error, json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { randomUUID } from 'node:crypto';
+import { f as flag, k as getOrganizationProvider, n as getProjectProvider, P as ProviderError } from './providers.server-MD7TK-zQ.js';
+import { u as requireInstanceAdmin } from './access.server-CGwRj2TY.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-b2AR_m1A.js';
+import { s as slugify } from './slug-BGuFQjqe.js';
+import { S as SYSTEM_CONTEXT } from './context-DKDYb-He.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@selvajs/compute/core';
+
+const MAX_SLUG_ATTEMPTS = 25;
+function isSlugConflict(err) {
+  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);
+}
+function isNameConflict(err) {
+  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);
+}
+const CreatePlatformProjectBody = z.object({
+  name: z.string().min(1, "Project name is required").max(128).trim(),
+  description: z.string().max(2e3).optional(),
+  /**
+   * Org that physically hosts the project. Storage routing and compute
+   * resolution use this — but org membership in this org does NOT grant
+   * access. Visibility = 'platform' overrides those defaults.
+   *
+   * If omitted, the platform admin's first available org is used.
+   */
+  orgId: z.string().uuid().optional()
+});
+const GET = async ({ locals }) => {
+  requireInstanceAdmin(locals);
+  if (!flag("ENABLE_PLATFORM_PROJECTS")) throw error(404, "Not found");
+  try {
+    const orgs = await getOrganizationProvider().listOrgs(SYSTEM_CONTEXT, { limit: 1e3 });
+    const all = [];
+    for (const org of orgs.items) {
+      const page = await getProjectProvider().listProjects(SYSTEM_CONTEXT, org.id, {
+        limit: 1e3
+      });
+      for (const p of page.items) {
+        if (p.visibility === "platform") all.push(p);
+      }
+    }
+    return json({ projects: all });
+  } catch (err) {
+    handleApiError(err, "Failed to list platform projects");
+  }
+};
+const POST = async ({ request, locals }) => {
+  const user = requireInstanceAdmin(locals);
+  if (!flag("ENABLE_PLATFORM_PROJECTS")) throw error(404, "Not found");
+  const ctx = locals.ctx;
+  const body = await request.json().catch(() => null);
+  const parsed = CreatePlatformProjectBody.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  const hostOrgId = parsed.data.orgId ?? ctx.actingOrgId;
+  if (!hostOrgId) {
+    throw error(400, "A host orgId is required (no active organization in context).");
+  }
+  const hostOrg = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, hostOrgId);
+  if (!hostOrg) throw error(400, `Host organization '${hostOrgId}' not found.`);
+  const projectStore = getProjectProvider();
+  const baseSlug = slugify(parsed.data.name) || "platform-project";
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const projectId = randomUUID();
+  for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {
+    const slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;
+    const project = {
+      id: projectId,
+      orgId: hostOrgId,
+      name: parsed.data.name,
+      slug,
+      description: parsed.data.description,
+      visibility: "platform",
+      ownerId: user.id,
+      createdBy: user.id,
+      updatedBy: user.id,
+      autoJoinOnUpload: false,
+      createdAt: now,
+      updatedAt: now,
+      deletedAt: null
+    };
+    try {
+      await projectStore.createProject(SYSTEM_CONTEXT, project);
+      return json(project, { status: 201 });
+    } catch (err) {
+      if (isNameConflict(err)) {
+        throw error(409, "A project with that name already exists in the host organization.");
+      }
+      if (isSlugConflict(err)) continue;
+      handleApiError(err, "Failed to create platform project");
+    }
+  }
+  throw error(409, "Could not pick a unique project slug after several attempts.");
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts-BOCvzY_U.js.map

package/build/server/chunks/_server.ts-BOCvzY_U.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-BOCvzY_U.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/projects/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\nimport { f as flag, k as getOrganizationProvider, n as getProjectProvider, P as ProviderError } from \"../../../../../chunks/providers.server.js\";\nimport { u as requireInstanceAdmin } from \"../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../chunks/api-errors.js\";\nimport { s as slugify } from \"../../../../../chunks/slug.js\";\nimport { S as SYSTEM_CONTEXT } from \"../../../../../chunks/context.js\";\nconst MAX_SLUG_ATTEMPTS = 25;\nfunction isSlugConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);\n}\nfunction isNameConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);\n}\nconst CreatePlatformProjectBody = z.object({\n  name: z.string().min(1, \"Project name is required\").max(128).trim(),\n  description: z.string().max(2e3).optional(),\n  /**\n   * Org that physically hosts the project. Storage routing and compute\n   * resolution use this — but org membership in this org does NOT grant\n   * access. Visibility = 'platform' overrides those defaults.\n   *\n   * If omitted, the platform admin's first available org is used.\n   */\n  orgId: z.string().uuid().optional()\n});\nconst GET = async ({ locals }) => {\n  requireInstanceAdmin(locals);\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) throw error(404, \"Not found\");\n  try {\n    const orgs = await getOrganizationProvider().listOrgs(SYSTEM_CONTEXT, { limit: 1e3 });\n    const all = [];\n    for (const org of orgs.items) {\n      const page = await getProjectProvider().listProjects(SYSTEM_CONTEXT, org.id, {\n        limit: 1e3\n      });\n      for (const p of page.items) {\n        if (p.visibility === \"platform\") all.push(p);\n      }\n    }\n    return json({ projects: all });\n  } catch (err) {\n    handleApiError(err, \"Failed to list platform projects\");\n  }\n};\nconst POST = async ({ request, locals }) => {\n  const user = requireInstanceAdmin(locals);\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) throw error(404, \"Not found\");\n  const ctx = locals.ctx;\n  const body = await request.json().catch(() => null);\n  const parsed = CreatePlatformProjectBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const hostOrgId = parsed.data.orgId ?? ctx.actingOrgId;\n  if (!hostOrgId) {\n    throw error(400, \"A host orgId is required (no active organization in context).\");\n  }\n  const hostOrg = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, hostOrgId);\n  if (!hostOrg) throw error(400, `Host organization '${hostOrgId}' not found.`);\n  const projectStore = getProjectProvider();\n  const baseSlug = slugify(parsed.data.name) || \"platform-project\";\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const projectId = randomUUID();\n  for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {\n    const slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;\n    const project = {\n      id: projectId,\n      orgId: hostOrgId,\n      name: parsed.data.name,\n      slug,\n      description: parsed.data.description,\n      visibility: \"platform\",\n      ownerId: user.id,\n      createdBy: user.id,\n      updatedBy: user.id,\n      autoJoinOnUpload: false,\n      createdAt: now,\n      updatedAt: now,\n      deletedAt: null\n    };\n    try {\n      await projectStore.createProject(SYSTEM_CONTEXT, project);\n      return json(project, { status: 201 });\n    } catch (err) {\n      if (isNameConflict(err)) {\n        throw error(409, \"A project with that name already exists in the host organization.\");\n      }\n      if (isSlugConflict(err)) continue;\n      handleApiError(err, \"Failed to create platform project\");\n    }\n  }\n  throw error(409, \"Could not pick a unique project slug after several attempts.\");\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAQA,MAAM,iBAAiB,GAAG,EAAE;AAC5B,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;AAC3C,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACrE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;AAC7C;AACA;AACA;AACA;AACA;AACA;AACA;AACA,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ;AACnC,CAAC,CAAC;AACG,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC;AACtE,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,uBAAuB,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACzF,IAAI,MAAM,GAAG,GAAG,EAAE;AAClB,IAAI,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE;AAClC,MAAM,MAAM,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,EAAE;AACnF,QAAQ,KAAK,EAAE;AACf,OAAO,CAAC;AACR,MAAM,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE;AAClC,QAAQ,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACpD,MAAM;AACN,IAAI;AACJ,IAAI,OAAO,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,kCAAkC,CAAC;AAC3D,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC3C,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC;AACtE,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1D,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,WAAW;AACxD,EAAE,IAAI,CAAC,SAAS,EAAE;AAClB,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,+DAA+D,CAAC;AACrF,EAAE;AACF,EAAE,MAAM,OAAO,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC;AACnF,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,mBAAmB,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;AAC/E,EAAE,MAAM,YAAY,GAAG,kBAAkB,EAAE;AAC3C,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,kBAAkB;AAClE,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,SAAS,GAAG,UAAU,EAAE;AAChC,EAAE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,iBAAiB,EAAE,OAAO,EAAE,EAAE;AAChE,IAAI,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;AACxE,IAAI,MAAM,OAAO,GAAG;AACpB,MAAM,EAAE,EAAE,SAAS;AACnB,MAAM,KAAK,EAAE,SAAS;AACtB,MAAM,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC5B,MAAM,IAAI;AACV,MAAM,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AAC1C,MAAM,UAAU,EAAE,UAAU;AAC5B,MAAM,OAAO,EAAE,IAAI,CAAC,EAAE;AACtB,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,gBAAgB,EAAE,KAAK;AAC7B,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE;AACjB,KAAK;AACL,IAAI,IAAI;AACR,MAAM,MAAM,YAAY,CAAC,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC;AAC/D,MAAM,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,mEAAmE,CAAC;AAC7F,MAAM;AACN,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,MAAM,cAAc,CAAC,GAAG,EAAE,mCAAmC,CAAC;AAC9D,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,8DAA8D,CAAC;AAClF;;;;"}

package/build/server/chunks/_server.ts-BTSLBiLL.js

@@ -0,0 +1,111 @@
+import { error, json } from '@sveltejs/kit';
+import { e as getComputeServerConfigStore, q as isOrgServer, r as isPlatformServer, f as flag } from './providers.server-MD7TK-zQ.js';
+import { x as requireManageOrgCompute } from './access.server-CGwRj2TY.js';
+import './context-DKDYb-He.js';
+import { s as serversVisibleTo } from './utils2-D38XWwRv.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import './api-errors-b2AR_m1A.js';
+import '@selvajs/compute/core';
+import 'zod';
+
+function requireFlag() {
+  if (!flag("ALLOW_ORG_COMPUTE_OVERRIDE")) {
+    throw error(
+      403,
+      "Per-org compute override is disabled on this instance (ALLOW_ORG_COMPUTE_OVERRIDE)."
+    );
+  }
+}
+const GET = async ({ locals }) => {
+  requireFlag();
+  requireManageOrgCompute(locals);
+  const ctx = locals.ctx;
+  if (!ctx.actingOrgId) throw error(400, "No active organization");
+  const config = await getComputeServerConfigStore().getConfig(ctx);
+  const orgId = ctx.actingOrgId;
+  const owned = config.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => {
+    const orgServer = s;
+    const { apiKey, ...rest } = orgServer;
+    return { ...rest, hasApiKey: !!apiKey };
+  });
+  const visible = serversVisibleTo(config, orgId);
+  const catalog = visible.map((s) => ({
+    id: s.id,
+    label: s.label,
+    serverUrl: s.serverUrl,
+    scope: s.scope,
+    source: isPlatformServer(s) ? "platform" : "org",
+    timeoutMs: s.timeoutMs,
+    retryCount: s.retryCount
+  }));
+  return json({
+    servers: owned,
+    defaultServerId: config.orgDefaults?.[orgId] ?? null,
+    globalDefaultServerId: config.defaultServerId ?? null,
+    catalog
+  });
+};
+const PUT = async ({ request, locals }) => {
+  requireFlag();
+  requireManageOrgCompute(locals);
+  const ctx = locals.ctx;
+  if (!ctx.actingOrgId) throw error(400, "No active organization");
+  const orgId = ctx.actingOrgId;
+  const body = await request.json().catch(() => null);
+  if (!body || typeof body !== "object") throw error(400, "Invalid request body");
+  const incoming = body;
+  if (!Array.isArray(incoming.servers)) throw error(400, "servers must be an array");
+  for (const s of incoming.servers) {
+    if (!s.id || typeof s.id !== "string") throw error(400, "Each server needs an id");
+    if (!s.label || typeof s.label !== "string") throw error(400, "Each server needs a label");
+    if (!s.serverUrl || typeof s.serverUrl !== "string")
+      throw error(400, "Each server needs a serverUrl");
+    try {
+      new URL(s.serverUrl);
+    } catch {
+      throw error(400, `Invalid serverUrl: ${s.serverUrl}`);
+    }
+    if (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== "string")
+      throw error(400, "apiKey must be a string, null, or omitted");
+  }
+  const provider = getComputeServerConfigStore();
+  const existing = await provider.getConfig(ctx);
+  const storedKeyById = new Map(
+    existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => [s.id, s.apiKey])
+  );
+  const next = incoming.servers.map((s) => ({
+    id: s.id,
+    scope: "org",
+    ownerOrgId: orgId,
+    label: s.label,
+    serverUrl: s.serverUrl,
+    timeoutMs: s.timeoutMs,
+    retryCount: s.retryCount,
+    apiKey: s.apiKey === null ? void 0 : s.apiKey ? s.apiKey : storedKeyById.get(s.id)
+  }));
+  if (typeof incoming.defaultServerId === "string") {
+    const projected = {
+      servers: [
+        ...existing.servers.filter((s) => !(isOrgServer(s) && s.ownerOrgId === orgId)),
+        ...next
+      ],
+      defaultServerId: existing.defaultServerId,
+      orgDefaults: existing.orgDefaults
+    };
+    const visibleIds = new Set(serversVisibleTo(projected, orgId).map((s) => s.id));
+    if (!visibleIds.has(incoming.defaultServerId)) {
+      throw error(400, "defaultServerId must reference a server visible to this organization");
+    }
+  }
+  await provider.saveOrgServers(ctx, orgId, next, incoming.defaultServerId);
+  return new Response(null, { status: 204 });
+};
+
+export { GET, PUT };
+//# sourceMappingURL=_server.ts-BTSLBiLL.js.map

package/build/server/chunks/_server.ts-BTSLBiLL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-BTSLBiLL.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/org/compute/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { e as getComputeServerConfigStore, q as isOrgServer, r as isPlatformServer, f as flag } from \"../../../../../chunks/providers.server.js\";\nimport { x as requireManageOrgCompute } from \"../../../../../chunks/access.server.js\";\nimport \"../../../../../chunks/context.js\";\nimport { s as serversVisibleTo } from \"../../../../../chunks/utils2.js\";\nfunction requireFlag() {\n  if (!flag(\"ALLOW_ORG_COMPUTE_OVERRIDE\")) {\n    throw error(\n      403,\n      \"Per-org compute override is disabled on this instance (ALLOW_ORG_COMPUTE_OVERRIDE).\"\n    );\n  }\n}\nconst GET = async ({ locals }) => {\n  requireFlag();\n  requireManageOrgCompute(locals);\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n  const config = await getComputeServerConfigStore().getConfig(ctx);\n  const orgId = ctx.actingOrgId;\n  const owned = config.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => {\n    const orgServer = s;\n    const { apiKey, ...rest } = orgServer;\n    return { ...rest, hasApiKey: !!apiKey };\n  });\n  const visible = serversVisibleTo(config, orgId);\n  const catalog = visible.map((s) => ({\n    id: s.id,\n    label: s.label,\n    serverUrl: s.serverUrl,\n    scope: s.scope,\n    source: isPlatformServer(s) ? \"platform\" : \"org\",\n    timeoutMs: s.timeoutMs,\n    retryCount: s.retryCount\n  }));\n  return json({\n    servers: owned,\n    defaultServerId: config.orgDefaults?.[orgId] ?? null,\n    globalDefaultServerId: config.defaultServerId ?? null,\n    catalog\n  });\n};\nconst PUT = async ({ request, locals }) => {\n  requireFlag();\n  requireManageOrgCompute(locals);\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n  const orgId = ctx.actingOrgId;\n  const body = await request.json().catch(() => null);\n  if (!body || typeof body !== \"object\") throw error(400, \"Invalid request body\");\n  const incoming = body;\n  if (!Array.isArray(incoming.servers)) throw error(400, \"servers must be an array\");\n  for (const s of incoming.servers) {\n    if (!s.id || typeof s.id !== \"string\") throw error(400, \"Each server needs an id\");\n    if (!s.label || typeof s.label !== \"string\") throw error(400, \"Each server needs a label\");\n    if (!s.serverUrl || typeof s.serverUrl !== \"string\")\n      throw error(400, \"Each server needs a serverUrl\");\n    try {\n      new URL(s.serverUrl);\n    } catch {\n      throw error(400, `Invalid serverUrl: ${s.serverUrl}`);\n    }\n    if (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== \"string\")\n      throw error(400, \"apiKey must be a string, null, or omitted\");\n  }\n  const provider = getComputeServerConfigStore();\n  const existing = await provider.getConfig(ctx);\n  const storedKeyById = new Map(\n    existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => [s.id, s.apiKey])\n  );\n  const next = incoming.servers.map((s) => ({\n    id: s.id,\n    scope: \"org\",\n    ownerOrgId: orgId,\n    label: s.label,\n    serverUrl: s.serverUrl,\n    timeoutMs: s.timeoutMs,\n    retryCount: s.retryCount,\n    apiKey: s.apiKey === null ? void 0 : s.apiKey ? s.apiKey : storedKeyById.get(s.id)\n  }));\n  if (typeof incoming.defaultServerId === \"string\") {\n    const projected = {\n      servers: [\n        ...existing.servers.filter((s) => !(isOrgServer(s) && s.ownerOrgId === orgId)),\n        ...next\n      ],\n      defaultServerId: existing.defaultServerId,\n      orgDefaults: existing.orgDefaults\n    };\n    const visibleIds = new Set(serversVisibleTo(projected, orgId).map((s) => s.id));\n    if (!visibleIds.has(incoming.defaultServerId)) {\n      throw error(400, \"defaultServerId must reference a server visible to this organization\");\n    }\n  }\n  await provider.saveOrgServers(ctx, orgId, next, incoming.defaultServerId);\n  return new Response(null, { status: 204 });\n};\nexport {\n  GET,\n  PUT\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAKA,SAAS,WAAW,GAAG;AACvB,EAAE,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE;AAC3C,IAAI,MAAM,KAAK;AACf,MAAM,GAAG;AACT,MAAM;AACN,KAAK;AACL,EAAE;AACF;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,WAAW,EAAE;AACf,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAClE,EAAE,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC;AACnE,EAAE,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC/B,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK;AAClG,IAAI,MAAM,SAAS,GAAG,CAAC;AACvB,IAAI,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS;AACzC,IAAI,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;AAC3C,EAAE,CAAC,CAAC;AACJ,EAAE,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC;AACjD,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AACtC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE;AACZ,IAAI,KAAK,EAAE,CAAC,CAAC,KAAK;AAClB,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS;AAC1B,IAAI,KAAK,EAAE,CAAC,CAAC,KAAK;AAClB,IAAI,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,KAAK;AACpD,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS;AAC1B,IAAI,UAAU,EAAE,CAAC,CAAC;AAClB,GAAG,CAAC,CAAC;AACL,EAAE,OAAO,IAAI,CAAC;AACd,IAAI,OAAO,EAAE,KAAK;AAClB,IAAI,eAAe,EAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,IAAI,IAAI;AACxD,IAAI,qBAAqB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;AACzD,IAAI;AACJ,GAAG,CAAC;AACJ;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC3C,EAAE,WAAW,EAAE;AACf,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAClE,EAAE,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC/B,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,sBAAsB,CAAC;AACjF,EAAE,MAAM,QAAQ,GAAG,IAAI;AACvB,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACpF,EAAE,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE;AACpC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtF,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,2BAA2B,CAAC;AAC9F,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;AACvD,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,+BAA+B,CAAC;AACvD,IAAI,IAAI;AACR,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1B,IAAI,CAAC,CAAC,MAAM;AACZ,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAC3D,IAAI;AACJ,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;AAChF,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,2CAA2C,CAAC;AACnE,EAAE;AACF,EAAE,MAAM,QAAQ,GAAG,2BAA2B,EAAE;AAChD,EAAE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC;AAChD,EAAE,MAAM,aAAa,GAAG,IAAI,GAAG;AAC/B,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;AACxG,GAAG;AACH,EAAE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC5C,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE;AACZ,IAAI,KAAK,EAAE,KAAK;AAChB,IAAI,UAAU,EAAE,KAAK;AACrB,IAAI,KAAK,EAAE,CAAC,CAAC,KAAK;AAClB,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS;AAC1B,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS;AAC1B,IAAI,UAAU,EAAE,CAAC,CAAC,UAAU;AAC5B,IAAI,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;AACrF,GAAG,CAAC,CAAC;AACL,EAAE,IAAI,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ,EAAE;AACpD,IAAI,MAAM,SAAS,GAAG;AACtB,MAAM,OAAO,EAAE;AACf,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC;AACtF,QAAQ,GAAG;AACX,OAAO;AACP,MAAM,eAAe,EAAE,QAAQ,CAAC,eAAe;AAC/C,MAAM,WAAW,EAAE,QAAQ,CAAC;AAC5B,KAAK;AACL,IAAI,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;AACnF,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE;AACnD,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,sEAAsE,CAAC;AAC9F,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC;AAC3E,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C;;;;"}

package/build/server/chunks/_server.ts-BTWwyruR.js

@@ -0,0 +1,39 @@
+import { error, json } from '@sveltejs/kit';
+import { n as getProjectProvider } from './providers.server-MD7TK-zQ.js';
+import { o as requireCanReclaim } from './access.server-CGwRj2TY.js';
+import { h as handleApiError } from './api-errors-b2AR_m1A.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import './context-DKDYb-He.js';
+import 'zod';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@selvajs/compute/core';
+
+const POST = async ({ params, locals }) => {
+  const { id } = params;
+  if (!id) throw error(400, "Missing project ID");
+  const { user, ctx } = await requireCanReclaim(locals, id);
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const member = {
+    projectId: id,
+    userId: user.id,
+    role: "owner",
+    joinedAt: now,
+    updatedAt: now,
+    updatedBy: ctx.userId || user.id,
+    deletedAt: null
+  };
+  try {
+    await getProjectProvider().addProjectMember(ctx, member);
+    return json({ success: true, member });
+  } catch (err) {
+    handleApiError(err, "Failed to reclaim project");
+  }
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-BTWwyruR.js.map

package/build/server/chunks/_server.ts-BTWwyruR.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-BTWwyruR.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/projects/_id_/reclaim/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { n as getProjectProvider } from \"../../../../../../chunks/providers.server.js\";\nimport { o as requireCanReclaim } from \"../../../../../../chunks/access.server.js\";\nimport { h as handleApiError } from \"../../../../../../chunks/api-errors.js\";\nconst POST = async ({ params, locals }) => {\n  const { id } = params;\n  if (!id) throw error(400, \"Missing project ID\");\n  const { user, ctx } = await requireCanReclaim(locals, id);\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const member = {\n    projectId: id,\n    userId: user.id,\n    role: \"owner\",\n    joinedAt: now,\n    updatedAt: now,\n    updatedBy: ctx.userId || user.id,\n    deletedAt: null\n  };\n  try {\n    await getProjectProvider().addProjectMember(ctx, member);\n    return json({ success: true, member });\n  } catch (err) {\n    handleApiError(err, \"Failed to reclaim project\");\n  }\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAIK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC;AACjD,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,EAAE,CAAC;AAC3D,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,MAAM,GAAG;AACjB,IAAI,SAAS,EAAE,EAAE;AACjB,IAAI,MAAM,EAAE,IAAI,CAAC,EAAE;AACnB,IAAI,IAAI,EAAE,OAAO;AACjB,IAAI,QAAQ,EAAE,GAAG;AACjB,IAAI,SAAS,EAAE,GAAG;AAClB,IAAI,SAAS,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE;AACpC,IAAI,SAAS,EAAE;AACf,GAAG;AACH,EAAE,IAAI;AACN,IAAI,MAAM,kBAAkB,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC;AAC5D,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,2BAA2B,CAAC;AACpD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-BUEUSAPc.js

@@ -0,0 +1,71 @@
+import { error, json } from '@sveltejs/kit';
+import { randomUUID } from 'node:crypto';
+import { z } from 'zod';
+import { j as getInviteStore } from './providers.server-MD7TK-zQ.js';
+import { y as requireManageOrgMembers } from './access.server-CGwRj2TY.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-b2AR_m1A.js';
+import { M as MEMBER_ASSIGNABLE_PERMISSIONS, D as DEFAULT_ORG_PERMISSIONS, e as OrgRoleSchema, P as PlatformPermissionSchema, d as OrgPermissionSchema } from './context-DKDYb-He.js';
+import { s as splitFlatPermissions } from './permissions-compat.server-BDkKxDeZ.js';
+import { m as mintRawToken, h as hashToken } from './token.server2-CaWL-Isp.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@selvajs/compute/core';
+
+const FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);
+const CreateBody = z.object({
+  email: z.string().email("Valid email is required").transform((s) => s.toLowerCase().trim()),
+  orgRole: OrgRoleSchema.default("member"),
+  permissions: z.array(FlatPermissionSchema).default([])
+});
+const INVITE_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
+const GET = async ({ locals }) => {
+  requireManageOrgMembers(locals);
+  const ctx = locals.ctx;
+  if (!ctx.actingOrgId) throw error(400, "No active organization");
+  try {
+    const page = await getInviteStore().listByOrg(ctx, ctx.actingOrgId, { limit: 200 });
+    const items = page.items.map(({ tokenHash: _omit, ...rest }) => rest);
+    return json(items);
+  } catch (err) {
+    handleApiError(err, "Failed to list invites");
+  }
+};
+const POST = async ({ request, locals, url }) => {
+  requireManageOrgMembers(locals);
+  const ctx = locals.ctx;
+  const user = locals.user;
+  if (!ctx.actingOrgId) throw error(400, "No active organization");
+  const body = await request.json().catch(() => null);
+  const parsed = CreateBody.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  try {
+    const { org: submittedOrgPerms } = splitFlatPermissions(parsed.data.permissions);
+    const orgPermissions = parsed.data.orgRole === "member" ? submittedOrgPerms.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[parsed.data.orgRole]];
+    const rawToken = mintRawToken();
+    const now = /* @__PURE__ */ new Date();
+    const invite = {
+      id: randomUUID(),
+      tokenHash: hashToken(rawToken),
+      email: parsed.data.email,
+      orgId: ctx.actingOrgId,
+      orgRole: parsed.data.orgRole,
+      orgPermissions,
+      invitedBy: user.id,
+      createdAt: now.toISOString(),
+      expiresAt: new Date(now.getTime() + INVITE_TTL_MS).toISOString()
+    };
+    await getInviteStore().create(ctx, invite);
+    const acceptUrl = `${url.origin}/accept-invite?token=${rawToken}`;
+    const { tokenHash: _omit, ...inviteForClient } = invite;
+    return json({ invite: inviteForClient, acceptUrl }, { status: 201 });
+  } catch (err) {
+    handleApiError(err, "Failed to create invite");
+  }
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts-BUEUSAPc.js.map

package/build/server/chunks/_server.ts-BUEUSAPc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-BUEUSAPc.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/invites/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\nimport { z } from \"zod\";\nimport { j as getInviteStore } from \"../../../../chunks/providers.server.js\";\nimport { y as requireManageOrgMembers } from \"../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../chunks/api-errors.js\";\nimport { P as PlatformPermissionSchema, d as OrgPermissionSchema, e as OrgRoleSchema, M as MEMBER_ASSIGNABLE_PERMISSIONS, D as DEFAULT_ORG_PERMISSIONS } from \"../../../../chunks/context.js\";\nimport { s as splitFlatPermissions } from \"../../../../chunks/permissions-compat.server.js\";\nimport { m as mintRawToken, h as hashToken } from \"../../../../chunks/token.server2.js\";\nconst FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);\nconst CreateBody = z.object({\n  email: z.string().email(\"Valid email is required\").transform((s) => s.toLowerCase().trim()),\n  orgRole: OrgRoleSchema.default(\"member\"),\n  permissions: z.array(FlatPermissionSchema).default([])\n});\nconst INVITE_TTL_MS = 7 * 24 * 60 * 60 * 1e3;\nconst GET = async ({ locals }) => {\n  requireManageOrgMembers(locals);\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n  try {\n    const page = await getInviteStore().listByOrg(ctx, ctx.actingOrgId, { limit: 200 });\n    const items = page.items.map(({ tokenHash: _omit, ...rest }) => rest);\n    return json(items);\n  } catch (err) {\n    handleApiError(err, \"Failed to list invites\");\n  }\n};\nconst POST = async ({ request, locals, url }) => {\n  requireManageOrgMembers(locals);\n  const ctx = locals.ctx;\n  const user = locals.user;\n  if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n  const body = await request.json().catch(() => null);\n  const parsed = CreateBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  try {\n    const { org: submittedOrgPerms } = splitFlatPermissions(parsed.data.permissions);\n    const orgPermissions = parsed.data.orgRole === \"member\" ? submittedOrgPerms.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[parsed.data.orgRole]];\n    const rawToken = mintRawToken();\n    const now = /* @__PURE__ */ new Date();\n    const invite = {\n      id: randomUUID(),\n      tokenHash: hashToken(rawToken),\n      email: parsed.data.email,\n      orgId: ctx.actingOrgId,\n      orgRole: parsed.data.orgRole,\n      orgPermissions,\n      invitedBy: user.id,\n      createdAt: now.toISOString(),\n      expiresAt: new Date(now.getTime() + INVITE_TTL_MS).toISOString()\n    };\n    await getInviteStore().create(ctx, invite);\n    const acceptUrl = `${url.origin}/accept-invite?token=${rawToken}`;\n    const { tokenHash: _omit, ...inviteForClient } = invite;\n    return json({ invite: inviteForClient, acceptUrl }, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to create invite\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AASA,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;AACrF,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;AAC5B,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AAC7F,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;AAC1C,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE;AACvD,CAAC,CAAC;AACF,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG;AACvC,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAClE,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACvF,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC;AACzE,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC;AACtB,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AACjD,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACjD,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AAC1B,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAClE,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;AAC3C,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI;AACN,IAAI,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;AACpF,IAAI,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC5L,IAAI,MAAM,QAAQ,GAAG,YAAY,EAAE;AACnC,IAAI,MAAM,GAAG,mBAAmB,IAAI,IAAI,EAAE;AAC1C,IAAI,MAAM,MAAM,GAAG;AACnB,MAAM,EAAE,EAAE,UAAU,EAAE;AACtB,MAAM,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC;AACpC,MAAM,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;AAC9B,MAAM,KAAK,EAAE,GAAG,CAAC,WAAW;AAC5B,MAAM,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;AAClC,MAAM,cAAc;AACpB,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;AAClC,MAAM,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,WAAW;AACpE,KAAK;AACL,IAAI,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC;AAC9C,IAAI,MAAM,SAAS,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;AACrE,IAAI,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,eAAe,EAAE,GAAG,MAAM;AAC3D,IAAI,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACxE,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAClD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-BXJAFFdr.js

@@ -0,0 +1,82 @@
+import { error, json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { M as MEMBER_ASSIGNABLE_PERMISSIONS, A as ALL_ORG_PERMISSIONS, e as OrgRoleSchema } from './context-DKDYb-He.js';
+import { k as getOrganizationProvider } from './providers.server-MD7TK-zQ.js';
+import { y as requireManageOrgMembers } from './access.server-CGwRj2TY.js';
+import { t as throwZodError, h as handleApiError } from './api-errors-b2AR_m1A.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@selvajs/compute/core';
+
+const PERMISSIONS_SCHEMA = z.array(
+  z.enum(ALL_ORG_PERMISSIONS)
+);
+const PatchSchema = z.object({
+  role: OrgRoleSchema.optional(),
+  permissions: PERMISSIONS_SCHEMA.optional()
+}).refine((b) => b.role !== void 0 || b.permissions !== void 0, {
+  message: "Provide at least one of role, permissions"
+});
+const PATCH = async ({ params, request, locals }) => {
+  const { orgId, userId } = params;
+  if (!orgId || !userId) throw error(400, "Missing org ID or user ID");
+  requireManageOrgMembers(locals);
+  const ctx = locals.ctx;
+  if (ctx.actingOrgId !== orgId) {
+    throw error(403, "Acting org does not match the target org.");
+  }
+  const body = await request.json().catch(() => null);
+  const parsed = PatchSchema.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  const patch = parsed.data;
+  const orgs = getOrganizationProvider();
+  const [actorMember, target] = await Promise.all([
+    orgs.getOrgMember(ctx, orgId, ctx.userId),
+    orgs.getOrgMember(ctx, orgId, userId)
+  ]);
+  if (!target) throw error(404, "Member not found in this organization.");
+  if (!actorMember) throw error(403, "You are not a member of this organization.");
+  if (patch.role !== void 0 && patch.role !== target.role) {
+    if (actorMember.role !== "owner") {
+      throw error(403, "Only the org owner can change roles.");
+    }
+    if (target.role === "owner" && patch.role !== "owner") {
+      const page = await orgs.listOrgMembers(ctx, orgId, { limit: 200 });
+      const otherOwners = page.items.filter(
+        (m) => m.role === "owner" && m.userId !== target.userId && !m.deletedAt
+      );
+      if (otherOwners.length === 0) {
+        throw error(
+          409,
+          "Cannot demote the sole owner of this organization. Promote another member to owner first."
+        );
+      }
+    }
+    await orgs.updateOrgMemberRole(ctx, orgId, userId, patch.role);
+  }
+  if (patch.permissions !== void 0) {
+    const effectiveRole = patch.role ?? target.role;
+    const valid = effectiveRole === "member" ? new Set(MEMBER_ASSIGNABLE_PERMISSIONS) : new Set(ALL_ORG_PERMISSIONS);
+    const invalid = patch.permissions.filter((p) => !valid.has(p));
+    if (invalid.length > 0) {
+      throw error(
+        400,
+        `Permissions [${invalid.join(", ")}] cannot be assigned to a ${effectiveRole}.`
+      );
+    }
+    try {
+      await orgs.updateOrgMemberPermissions(ctx, orgId, userId, patch.permissions);
+    } catch (err) {
+      handleApiError(err, "Failed to update permissions");
+    }
+  }
+  return json({ success: true });
+};
+
+export { PATCH };
+//# sourceMappingURL=_server.ts-BXJAFFdr.js.map

package/build/server/chunks/_server.ts-BXJAFFdr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-BXJAFFdr.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/orgs/_orgId_/members/_userId_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { A as ALL_ORG_PERMISSIONS, e as OrgRoleSchema, M as MEMBER_ASSIGNABLE_PERMISSIONS } from \"../../../../../../../chunks/context.js\";\nimport { k as getOrganizationProvider } from \"../../../../../../../chunks/providers.server.js\";\nimport { y as requireManageOrgMembers } from \"../../../../../../../chunks/access.server.js\";\nimport { t as throwZodError, h as handleApiError } from \"../../../../../../../chunks/api-errors.js\";\nconst PERMISSIONS_SCHEMA = z.array(\n  z.enum(ALL_ORG_PERMISSIONS)\n);\nconst PatchSchema = z.object({\n  role: OrgRoleSchema.optional(),\n  permissions: PERMISSIONS_SCHEMA.optional()\n}).refine((b) => b.role !== void 0 || b.permissions !== void 0, {\n  message: \"Provide at least one of role, permissions\"\n});\nconst PATCH = async ({ params, request, locals }) => {\n  const { orgId, userId } = params;\n  if (!orgId || !userId) throw error(400, \"Missing org ID or user ID\");\n  requireManageOrgMembers(locals);\n  const ctx = locals.ctx;\n  if (ctx.actingOrgId !== orgId) {\n    throw error(403, \"Acting org does not match the target org.\");\n  }\n  const body = await request.json().catch(() => null);\n  const parsed = PatchSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const patch = parsed.data;\n  const orgs = getOrganizationProvider();\n  const [actorMember, target] = await Promise.all([\n    orgs.getOrgMember(ctx, orgId, ctx.userId),\n    orgs.getOrgMember(ctx, orgId, userId)\n  ]);\n  if (!target) throw error(404, \"Member not found in this organization.\");\n  if (!actorMember) throw error(403, \"You are not a member of this organization.\");\n  if (patch.role !== void 0 && patch.role !== target.role) {\n    if (actorMember.role !== \"owner\") {\n      throw error(403, \"Only the org owner can change roles.\");\n    }\n    if (target.role === \"owner\" && patch.role !== \"owner\") {\n      const page = await orgs.listOrgMembers(ctx, orgId, { limit: 200 });\n      const otherOwners = page.items.filter(\n        (m) => m.role === \"owner\" && m.userId !== target.userId && !m.deletedAt\n      );\n      if (otherOwners.length === 0) {\n        throw error(\n          409,\n          \"Cannot demote the sole owner of this organization. Promote another member to owner first.\"\n        );\n      }\n    }\n    await orgs.updateOrgMemberRole(ctx, orgId, userId, patch.role);\n  }\n  if (patch.permissions !== void 0) {\n    const effectiveRole = patch.role ?? target.role;\n    const valid = effectiveRole === \"member\" ? new Set(MEMBER_ASSIGNABLE_PERMISSIONS) : new Set(ALL_ORG_PERMISSIONS);\n    const invalid = patch.permissions.filter((p) => !valid.has(p));\n    if (invalid.length > 0) {\n      throw error(\n        400,\n        `Permissions [${invalid.join(\", \")}] cannot be assigned to a ${effectiveRole}.`\n      );\n    }\n    try {\n      await orgs.updateOrgMemberPermissions(ctx, orgId, userId, patch.permissions);\n    } catch (err) {\n      handleApiError(err, \"Failed to update permissions\");\n    }\n  }\n  return json({ success: true });\n};\nexport {\n  PATCH\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAMA,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK;AAClC,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB;AAC5B,CAAC;AACD,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;AAC7B,EAAE,IAAI,EAAE,aAAa,CAAC,QAAQ,EAAE;AAChC,EAAE,WAAW,EAAE,kBAAkB,CAAC,QAAQ;AAC1C,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,EAAE;AAChE,EAAE,OAAO,EAAE;AACX,CAAC,CAAC;AACG,MAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrD,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM;AAClC,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,2BAA2B,CAAC;AACtE,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,GAAG,CAAC,WAAW,KAAK,KAAK,EAAE;AACjC,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,2CAA2C,CAAC;AACjE,EAAE;AACF,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC;AAC5C,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI;AAC3B,EAAE,MAAM,IAAI,GAAG,uBAAuB,EAAE;AACxC,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AAClD,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC;AAC7C,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM;AACxC,GAAG,CAAC;AACJ,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wCAAwC,CAAC;AACzE,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,4CAA4C,CAAC;AAClF,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE;AAC3D,IAAI,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE;AACtC,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,sCAAsC,CAAC;AAC9D,IAAI;AACJ,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE;AAC3D,MAAM,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACxE,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM;AAC3C,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;AACtE,OAAO;AACP,MAAM,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE;AACpC,QAAQ,MAAM,KAAK;AACnB,UAAU,GAAG;AACb,UAAU;AACV,SAAS;AACT,MAAM;AACN,IAAI;AACJ,IAAI,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;AAClE,EAAE;AACF,EAAE,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,EAAE;AACpC,IAAI,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI;AACnD,IAAI,MAAM,KAAK,GAAG,aAAa,KAAK,QAAQ,GAAG,IAAI,GAAG,CAAC,6BAA6B,CAAC,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC;AACpH,IAAI,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAClE,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;AAC5B,MAAM,MAAM,KAAK;AACjB,QAAQ,GAAG;AACX,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,0BAA0B,EAAE,aAAa,CAAC,CAAC;AACtF,OAAO;AACP,IAAI;AACJ,IAAI,IAAI;AACR,MAAM,MAAM,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC;AAClF,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,cAAc,CAAC,GAAG,EAAE,8BAA8B,CAAC;AACzD,IAAI;AACJ,EAAE;AACF,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAChC;;;;"}

package/build/server/chunks/_server.ts-BeyEUs6I.js

@@ -0,0 +1,74 @@
+import { error, json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { randomUUID } from 'node:crypto';
+import { m as getPlatformProjectGrantStore, k as getOrganizationProvider, p as getUserProfileStore, f as flag, n as getProjectProvider } from './providers.server-MD7TK-zQ.js';
+import { u as requireInstanceAdmin } from './access.server-CGwRj2TY.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-b2AR_m1A.js';
+import { S as SYSTEM_CONTEXT } from './context-DKDYb-He.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@selvajs/compute/core';
+
+const CreateGrantBody = z.object({
+  granteeType: z.enum(["org", "user"]),
+  granteeId: z.string().min(1),
+  canSolve: z.boolean()
+});
+async function assertPlatformProject(id) {
+  if (!flag("ENABLE_PLATFORM_PROJECTS")) throw error(404, "Not found");
+  const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, id);
+  if (!project || project.visibility !== "platform") {
+    throw error(404, "Platform project not found");
+  }
+  return project;
+}
+const GET = async ({ params, locals }) => {
+  requireInstanceAdmin(locals);
+  const { id } = params;
+  if (!id) throw error(400, "Missing project ID");
+  try {
+    await assertPlatformProject(id);
+    const grants = await getPlatformProjectGrantStore().listByProject(SYSTEM_CONTEXT, id);
+    return json({ grants });
+  } catch (err) {
+    handleApiError(err, "Failed to list grants");
+  }
+};
+const POST = async ({ params, request, locals }) => {
+  const user = requireInstanceAdmin(locals);
+  const { id } = params;
+  if (!id) throw error(400, "Missing project ID");
+  const body = await request.json().catch(() => null);
+  const parsed = CreateGrantBody.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  try {
+    await assertPlatformProject(id);
+    if (parsed.data.granteeType === "org") {
+      const org = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, parsed.data.granteeId);
+      if (!org) throw error(400, `Organization '${parsed.data.granteeId}' not found`);
+    } else {
+      const profile = await getUserProfileStore().getProfile(SYSTEM_CONTEXT, parsed.data.granteeId);
+      if (!profile) throw error(400, `User '${parsed.data.granteeId}' not found`);
+    }
+    const grant = {
+      id: randomUUID(),
+      projectId: id,
+      granteeType: parsed.data.granteeType,
+      granteeId: parsed.data.granteeId,
+      canSolve: parsed.data.canSolve,
+      createdBy: user.id,
+      createdAt: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    await getPlatformProjectGrantStore().create(SYSTEM_CONTEXT, grant);
+    return json(grant, { status: 201 });
+  } catch (err) {
+    handleApiError(err, "Failed to create grant");
+  }
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts-BeyEUs6I.js.map

package/build/server/chunks/_server.ts-BeyEUs6I.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-BeyEUs6I.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/projects/_id_/grants/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\nimport { m as getPlatformProjectGrantStore, k as getOrganizationProvider, p as getUserProfileStore, f as flag, n as getProjectProvider } from \"../../../../../../../chunks/providers.server.js\";\nimport { u as requireInstanceAdmin } from \"../../../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../../../chunks/api-errors.js\";\nimport { S as SYSTEM_CONTEXT } from \"../../../../../../../chunks/context.js\";\nconst CreateGrantBody = z.object({\n  granteeType: z.enum([\"org\", \"user\"]),\n  granteeId: z.string().min(1),\n  canSolve: z.boolean()\n});\nasync function assertPlatformProject(id) {\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) throw error(404, \"Not found\");\n  const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, id);\n  if (!project || project.visibility !== \"platform\") {\n    throw error(404, \"Platform project not found\");\n  }\n  return project;\n}\nconst GET = async ({ params, locals }) => {\n  requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) throw error(400, \"Missing project ID\");\n  try {\n    await assertPlatformProject(id);\n    const grants = await getPlatformProjectGrantStore().listByProject(SYSTEM_CONTEXT, id);\n    return json({ grants });\n  } catch (err) {\n    handleApiError(err, \"Failed to list grants\");\n  }\n};\nconst POST = async ({ params, request, locals }) => {\n  const user = requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) throw error(400, \"Missing project ID\");\n  const body = await request.json().catch(() => null);\n  const parsed = CreateGrantBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  try {\n    await assertPlatformProject(id);\n    if (parsed.data.granteeType === \"org\") {\n      const org = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, parsed.data.granteeId);\n      if (!org) throw error(400, `Organization '${parsed.data.granteeId}' not found`);\n    } else {\n      const profile = await getUserProfileStore().getProfile(SYSTEM_CONTEXT, parsed.data.granteeId);\n      if (!profile) throw error(400, `User '${parsed.data.granteeId}' not found`);\n    }\n    const grant = {\n      id: randomUUID(),\n      projectId: id,\n      granteeType: parsed.data.granteeType,\n      granteeId: parsed.data.granteeId,\n      canSolve: parsed.data.canSolve,\n      createdBy: user.id,\n      createdAt: (/* @__PURE__ */ new Date()).toISOString()\n    };\n    await getPlatformProjectGrantStore().create(SYSTEM_CONTEXT, grant);\n    return json(grant, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to create grant\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAOA,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;AACjC,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AACtC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9B,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO;AACrB,CAAC,CAAC;AACF,eAAe,qBAAqB,CAAC,EAAE,EAAE;AACzC,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC;AACtE,EAAE,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC;AAC3E,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE;AACrD,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,4BAA4B,CAAC;AAClD,EAAE;AACF,EAAE,OAAO,OAAO;AAChB;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC1C,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC;AACjD,EAAE,IAAI;AACN,IAAI,MAAM,qBAAqB,CAAC,EAAE,CAAC;AACnC,IAAI,MAAM,MAAM,GAAG,MAAM,4BAA4B,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC;AACzF,IAAI,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;AAC3B,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,uBAAuB,CAAC;AAChD,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpD,EAAE,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC3C,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC;AACjD,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAChD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI;AACN,IAAI,MAAM,qBAAqB,CAAC,EAAE,CAAC;AACnC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,KAAK,EAAE;AAC3C,MAAM,MAAM,GAAG,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;AAC/F,MAAM,IAAI,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AACrF,IAAI,CAAC,MAAM;AACX,MAAM,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;AACnG,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AACjF,IAAI;AACJ,IAAI,MAAM,KAAK,GAAG;AAClB,MAAM,EAAE,EAAE,UAAU,EAAE;AACtB,MAAM,SAAS,EAAE,EAAE;AACnB,MAAM,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AAC1C,MAAM,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;AACtC,MAAM,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;AACpC,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW;AACzD,KAAK;AACL,IAAI,MAAM,4BAA4B,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC;AACtE,IAAI,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACvC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AACjD,EAAE;AACF;;;;"}