@selvajs/selva 3.0.0 → 4.0.0

package/build/server/chunks/_server.ts-Bkr-33U0.js

@@ -0,0 +1,102 @@
+import { error, json } from '@sveltejs/kit';
+import { randomUUID } from 'node:crypto';
+import { n as getProjectProvider, a as definitionService } from './providers.server-MD7TK-zQ.js';
+import { r as requireCanCreateDefinition } from './access.server-CGwRj2TY.js';
+import { t as throwZodError, f as fetchSchemaFromCompute, h as handleApiError } from './api-errors-b2AR_m1A.js';
+import { G as GH_EXTENSIONS } from './types-DxzJoaA4.js';
+import { C as CreateDefinitionInputSchema } from './context-DKDYb-He.js';
+import { M as MAX_GH_FILE_SIZE, a as MAX_IMAGE_FILE_SIZE } from './computeLimits-CKK96OOR.js';
+import { r as resolveServerForOrg } from './resolve.server-C5wZnxS_.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'zod';
+import '@selvajs/compute/core';
+import './utils2-D38XWwRv.js';
+
+function parseTags(raw) {
+  if (typeof raw !== "string" || !raw.trim()) return void 0;
+  const tags = raw.split(",").map((t) => t.trim()).filter(Boolean);
+  return tags.length ? tags : void 0;
+}
+const POST = async ({ request, locals }) => {
+  const ctx = locals.ctx;
+  const formData = await request.formData();
+  const file = formData.get("file");
+  if (!(file instanceof File)) {
+    throw error(400, "A Grasshopper (.gh or .ghx) file is required");
+  }
+  const ext = file.name.slice(file.name.lastIndexOf(".")).toLowerCase();
+  if (!GH_EXTENSIONS.includes(ext)) {
+    throw error(400, `File type not allowed. Allowed: ${GH_EXTENSIONS.join(", ")}`);
+  }
+  if (file.size > MAX_GH_FILE_SIZE) {
+    throw error(400, `File too large. Max size: ${MAX_GH_FILE_SIZE / (1024 * 1024)} MB`);
+  }
+  const imageFile = formData.get("image");
+  if (imageFile instanceof File && imageFile.size > MAX_IMAGE_FILE_SIZE) {
+    throw error(400, `Image too large. Max size: ${MAX_IMAGE_FILE_SIZE / (1024 * 1024)} MB`);
+  }
+  let projectId = formData.get("projectId");
+  if (typeof projectId !== "string" || !projectId) {
+    if (!ctx.actingOrgId) throw error(400, "No active organization");
+    const projectsPage = await getProjectProvider().listProjects(ctx, ctx.actingOrgId, {
+      limit: 1
+    });
+    const defaultProject = projectsPage.items[0];
+    if (!defaultProject) throw error(500, "No project configured");
+    projectId = defaultProject.id;
+  }
+  const { project } = await requireCanCreateDefinition(locals, projectId);
+  const parsed = CreateDefinitionInputSchema.safeParse({
+    displayName: formData.get("displayName"),
+    description: formData.get("description") || void 0,
+    category: formData.get("category") || void 0,
+    coverImage: formData.get("coverImage") || void 0,
+    tags: parseTags(formData.get("tags")),
+    projectId,
+    computeServerId: formData.get("computeServerId") || void 0
+  });
+  if (!parsed.success) throwZodError(parsed.error);
+  const fileExt = ext.slice(1);
+  const guid = randomUUID();
+  try {
+    const fileData = new Uint8Array(await file.arrayBuffer());
+    const server = await resolveServerForOrg(ctx, project.orgId, {
+      definitionPin: parsed.data.computeServerId ?? null
+    });
+    const schema = await fetchSchemaFromCompute(fileData, server);
+    const { record, version } = await definitionService.create(
+      ctx,
+      {
+        guid,
+        projectId: parsed.data.projectId,
+        ownerId: locals.user.id,
+        fileExt,
+        originalFilename: file.name,
+        computeServerId: parsed.data.computeServerId,
+        displayName: parsed.data.displayName.trim(),
+        description: parsed.data.description,
+        category: parsed.data.category,
+        tags: parsed.data.tags,
+        coverImage: parsed.data.coverImage
+      },
+      fileData,
+      schema
+    );
+    let coverImage = record.coverImage;
+    if (imageFile instanceof File && imageFile.size > 0) {
+      const imageData = new Uint8Array(await imageFile.arrayBuffer());
+      coverImage = await definitionService.saveCoverImage(ctx, guid, imageData);
+    }
+    return json({ success: true, guid, version, coverImage });
+  } catch (err) {
+    handleApiError(err, "Failed to create definition");
+  }
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-Bkr-33U0.js.map

package/build/server/chunks/_server.ts-Bkr-33U0.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-Bkr-33U0.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\nimport { n as getProjectProvider, a as definitionService } from \"../../../../chunks/providers.server.js\";\nimport { r as requireCanCreateDefinition } from \"../../../../chunks/access.server.js\";\nimport { t as throwZodError, f as fetchSchemaFromCompute, h as handleApiError } from \"../../../../chunks/api-errors.js\";\nimport { G as GH_EXTENSIONS } from \"../../../../chunks/types.js\";\nimport { C as CreateDefinitionInputSchema } from \"../../../../chunks/context.js\";\nimport { M as MAX_GH_FILE_SIZE, a as MAX_IMAGE_FILE_SIZE } from \"../../../../chunks/computeLimits.js\";\nimport { r as resolveServerForOrg } from \"../../../../chunks/resolve.server.js\";\nfunction parseTags(raw) {\n  if (typeof raw !== \"string\" || !raw.trim()) return void 0;\n  const tags = raw.split(\",\").map((t) => t.trim()).filter(Boolean);\n  return tags.length ? tags : void 0;\n}\nconst POST = async ({ request, locals }) => {\n  const ctx = locals.ctx;\n  const formData = await request.formData();\n  const file = formData.get(\"file\");\n  if (!(file instanceof File)) {\n    throw error(400, \"A Grasshopper (.gh or .ghx) file is required\");\n  }\n  const ext = file.name.slice(file.name.lastIndexOf(\".\")).toLowerCase();\n  if (!GH_EXTENSIONS.includes(ext)) {\n    throw error(400, `File type not allowed. Allowed: ${GH_EXTENSIONS.join(\", \")}`);\n  }\n  if (file.size > MAX_GH_FILE_SIZE) {\n    throw error(400, `File too large. Max size: ${MAX_GH_FILE_SIZE / (1024 * 1024)} MB`);\n  }\n  const imageFile = formData.get(\"image\");\n  if (imageFile instanceof File && imageFile.size > MAX_IMAGE_FILE_SIZE) {\n    throw error(400, `Image too large. Max size: ${MAX_IMAGE_FILE_SIZE / (1024 * 1024)} MB`);\n  }\n  let projectId = formData.get(\"projectId\");\n  if (typeof projectId !== \"string\" || !projectId) {\n    if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n    const projectsPage = await getProjectProvider().listProjects(ctx, ctx.actingOrgId, {\n      limit: 1\n    });\n    const defaultProject = projectsPage.items[0];\n    if (!defaultProject) throw error(500, \"No project configured\");\n    projectId = defaultProject.id;\n  }\n  const { project } = await requireCanCreateDefinition(locals, projectId);\n  const parsed = CreateDefinitionInputSchema.safeParse({\n    displayName: formData.get(\"displayName\"),\n    description: formData.get(\"description\") || void 0,\n    category: formData.get(\"category\") || void 0,\n    coverImage: formData.get(\"coverImage\") || void 0,\n    tags: parseTags(formData.get(\"tags\")),\n    projectId,\n    computeServerId: formData.get(\"computeServerId\") || void 0\n  });\n  if (!parsed.success) throwZodError(parsed.error);\n  const fileExt = ext.slice(1);\n  const guid = randomUUID();\n  try {\n    const fileData = new Uint8Array(await file.arrayBuffer());\n    const server = await resolveServerForOrg(ctx, project.orgId, {\n      definitionPin: parsed.data.computeServerId ?? null\n    });\n    const schema = await fetchSchemaFromCompute(fileData, server);\n    const { record, version } = await definitionService.create(\n      ctx,\n      {\n        guid,\n        projectId: parsed.data.projectId,\n        ownerId: locals.user.id,\n        fileExt,\n        originalFilename: file.name,\n        computeServerId: parsed.data.computeServerId,\n        displayName: parsed.data.displayName.trim(),\n        description: parsed.data.description,\n        category: parsed.data.category,\n        tags: parsed.data.tags,\n        coverImage: parsed.data.coverImage\n      },\n      fileData,\n      schema\n    );\n    let coverImage = record.coverImage;\n    if (imageFile instanceof File && imageFile.size > 0) {\n      const imageData = new Uint8Array(await imageFile.arrayBuffer());\n      coverImage = await definitionService.saveCoverImage(ctx, guid, imageData);\n    }\n    return json({ success: true, guid, version, coverImage });\n  } catch (err) {\n    handleApiError(err, \"Failed to create definition\");\n  }\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AASA,SAAS,SAAS,CAAC,GAAG,EAAE;AACxB,EAAE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,OAAO,MAAM;AAC3D,EAAE,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;AAClE,EAAE,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,MAAM;AACpC;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;AAC3C,EAAE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;AACnC,EAAE,IAAI,EAAE,IAAI,YAAY,IAAI,CAAC,EAAE;AAC/B,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,8CAA8C,CAAC;AACpE,EAAE;AACF,EAAE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE;AACvE,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;AACpC,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,gCAAgC,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACnF,EAAE;AACF,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,gBAAgB,EAAE;AACpC,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,0BAA0B,EAAE,gBAAgB,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AACxF,EAAE;AACF,EAAE,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;AACzC,EAAE,IAAI,SAAS,YAAY,IAAI,IAAI,SAAS,CAAC,IAAI,GAAG,mBAAmB,EAAE;AACzE,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,2BAA2B,EAAE,mBAAmB,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AAC5F,EAAE;AACF,EAAE,IAAI,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC;AAC3C,EAAE,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,EAAE;AACnD,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AACpE,IAAI,MAAM,YAAY,GAAG,MAAM,kBAAkB,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE;AACvF,MAAM,KAAK,EAAE;AACb,KAAK,CAAC;AACN,IAAI,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AAChD,IAAI,IAAI,CAAC,cAAc,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC;AAClE,IAAI,SAAS,GAAG,cAAc,CAAC,EAAE;AACjC,EAAE;AACF,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,SAAS,CAAC;AACzE,EAAE,MAAM,MAAM,GAAG,2BAA2B,CAAC,SAAS,CAAC;AACvD,IAAI,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC;AAC5C,IAAI,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,MAAM;AACtD,IAAI,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,MAAM;AAChD,IAAI,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,MAAM;AACpD,IAAI,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACzC,IAAI,SAAS;AACb,IAAI,eAAe,EAAE,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI;AACxD,GAAG,CAAC;AACJ,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9B,EAAE,MAAM,IAAI,GAAG,UAAU,EAAE;AAC3B,EAAE,IAAI;AACN,IAAI,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AAC7D,IAAI,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE;AACjE,MAAM,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI;AACpD,KAAK,CAAC;AACN,IAAI,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC;AACjE,IAAI,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM;AAC9D,MAAM,GAAG;AACT,MAAM;AACN,QAAQ,IAAI;AACZ,QAAQ,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;AACxC,QAAQ,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC/B,QAAQ,OAAO;AACf,QAAQ,gBAAgB,EAAE,IAAI,CAAC,IAAI;AACnC,QAAQ,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe;AACpD,QAAQ,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;AACnD,QAAQ,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AAC5C,QAAQ,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;AACtC,QAAQ,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC9B,QAAQ,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC;AAChC,OAAO;AACP,MAAM,QAAQ;AACd,MAAM;AACN,KAAK;AACL,IAAI,IAAI,UAAU,GAAG,MAAM,CAAC,UAAU;AACtC,IAAI,IAAI,SAAS,YAAY,IAAI,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE;AACzD,MAAM,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC;AACrE,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC;AAC/E,IAAI;AACJ,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AAC7D,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACtD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-Bm14E-bx.js

@@ -0,0 +1,42 @@
+import { error, json } from '@sveltejs/kit';
+import { j as getInviteStore } from './providers.server-MD7TK-zQ.js';
+import { y as requireManageOrgMembers } from './access.server-CGwRj2TY.js';
+import { h as handleApiError } from './api-errors-b2AR_m1A.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import './context-DKDYb-He.js';
+import 'zod';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@selvajs/compute/core';
+
+const DELETE = async ({ params, locals }) => {
+  requireManageOrgMembers(locals);
+  const ctx = locals.ctx;
+  if (!ctx.actingOrgId) throw error(400, "No active organization");
+  const id = params.id;
+  try {
+    const store = getInviteStore();
+    let cursor;
+    let found = false;
+    do {
+      const page = await store.listByOrg(ctx, ctx.actingOrgId, { limit: 200, cursor });
+      if (page.items.some((i) => i.id === id)) {
+        found = true;
+        break;
+      }
+      cursor = page.nextCursor ?? void 0;
+    } while (cursor);
+    if (!found) throw error(404, "Invite not found");
+    await store.revoke(ctx, id);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to revoke invite");
+  }
+};
+
+export { DELETE };
+//# sourceMappingURL=_server.ts-Bm14E-bx.js.map

package/build/server/chunks/_server.ts-Bm14E-bx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-Bm14E-bx.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/invites/_id_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { j as getInviteStore } from \"../../../../../chunks/providers.server.js\";\nimport { y as requireManageOrgMembers } from \"../../../../../chunks/access.server.js\";\nimport { h as handleApiError } from \"../../../../../chunks/api-errors.js\";\nconst DELETE = async ({ params, locals }) => {\n  requireManageOrgMembers(locals);\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n  const id = params.id;\n  try {\n    const store = getInviteStore();\n    let cursor;\n    let found = false;\n    do {\n      const page = await store.listByOrg(ctx, ctx.actingOrgId, { limit: 200, cursor });\n      if (page.items.some((i) => i.id === id)) {\n        found = true;\n        break;\n      }\n      cursor = page.nextCursor ?? void 0;\n    } while (cursor);\n    if (!found) throw error(404, \"Invite not found\");\n    await store.revoke(ctx, id);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to revoke invite\");\n  }\n};\nexport {\n  DELETE\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAIK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAClE,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE;AACtB,EAAE,IAAI;AACN,IAAI,MAAM,KAAK,GAAG,cAAc,EAAE;AAClC,IAAI,IAAI,MAAM;AACd,IAAI,IAAI,KAAK,GAAG,KAAK;AACrB,IAAI,GAAG;AACP,MAAM,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACtF,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;AAC/C,QAAQ,KAAK,GAAG,IAAI;AACpB,QAAQ;AACR,MAAM;AACN,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC;AACxC,IAAI,CAAC,QAAQ,MAAM;AACnB,IAAI,IAAI,CAAC,KAAK,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,kBAAkB,CAAC;AACpD,IAAI,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AAC/B,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAClD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-ByqZZZxB.js

@@ -0,0 +1,35 @@
+import { json } from '@sveltejs/kit';
+import { execSync } from 'child_process';
+import { g as getBootHealth, i as isDegraded } from './bootHealth.server-Ca8zFRpM.js';
+import './context-DKDYb-He.js';
+import 'zod';
+import './providers.server-MD7TK-zQ.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+const STARTUP_COMMIT = (() => {
+  try {
+    return execSync("git rev-parse HEAD", { encoding: "utf8" }).trim();
+  } catch {
+    return null;
+  }
+})();
+const GET = async () => {
+  const boot = await getBootHealth();
+  const degraded = isDegraded(boot);
+  const body = {
+    status: degraded ? "degraded" : "ok",
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    commit: STARTUP_COMMIT,
+    boot
+  };
+  return json(body, { status: degraded ? 503 : 200 });
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts-ByqZZZxB.js.map

package/build/server/chunks/_server.ts-ByqZZZxB.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-ByqZZZxB.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/health/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { execSync } from \"child_process\";\nimport { g as getBootHealth, i as isDegraded } from \"../../../../chunks/bootHealth.server.js\";\nconst STARTUP_COMMIT = (() => {\n  try {\n    return execSync(\"git rev-parse HEAD\", { encoding: \"utf8\" }).trim();\n  } catch {\n    return null;\n  }\n})();\nconst GET = async () => {\n  const boot = await getBootHealth();\n  const degraded = isDegraded(boot);\n  const body = {\n    status: degraded ? \"degraded\" : \"ok\",\n    timestamp: (/* @__PURE__ */ new Date()).toISOString(),\n    commit: STARTUP_COMMIT,\n    boot\n  };\n  return json(body, { status: degraded ? 503 : 200 });\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;AAGA,MAAM,cAAc,GAAG,CAAC,MAAM;AAC9B,EAAE,IAAI;AACN,IAAI,OAAO,QAAQ,CAAC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE;AACtE,EAAE,CAAC,CAAC,MAAM;AACV,IAAI,OAAO,IAAI;AACf,EAAE;AACF,CAAC,GAAG;AACC,MAAC,GAAG,GAAG,YAAY;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE;AACpC,EAAE,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC;AACnC,EAAE,MAAM,IAAI,GAAG;AACf,IAAI,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,IAAI;AACxC,IAAI,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACzD,IAAI,MAAM,EAAE,cAAc;AAC1B,IAAI;AACJ,GAAG;AACH,EAAE,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC;AACrD;;;;"}

package/build/server/chunks/_server.ts-C-w9ogA2.js

@@ -0,0 +1,38 @@
+import { error, json } from '@sveltejs/kit';
+import { f as flag, s as providers } from './providers.server-MD7TK-zQ.js';
+import { t as requireEditableDefinition } from './access.server-CGwRj2TY.js';
+import { h as handleApiError } from './api-errors-b2AR_m1A.js';
+import { G as GuidSchema } from './context-DKDYb-He.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'zod';
+import '@selvajs/compute/core';
+
+const DELETE = async ({ params, locals }) => {
+  if (!flag("ENABLE_SHARING")) {
+    throw error(404, "Share links are disabled on this instance (ENABLE_SHARING).");
+  }
+  const guidParsed = GuidSchema.safeParse(params.guid);
+  if (!guidParsed.success) throw error(400, "Invalid or missing GUID");
+  const linkParsed = GuidSchema.safeParse(params.linkId);
+  if (!linkParsed.success) throw error(400, "Invalid or missing link ID");
+  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
+  try {
+    const existing = await providers.data.shareLinks.getById(ctx, linkParsed.data);
+    if (!existing || existing.definitionId !== guidParsed.data) {
+      throw error(404, "Share link not found.");
+    }
+    await providers.data.shareLinks.revoke(ctx, linkParsed.data);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to revoke share link");
+  }
+};
+
+export { DELETE };
+//# sourceMappingURL=_server.ts-C-w9ogA2.js.map

package/build/server/chunks/_server.ts-C-w9ogA2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-C-w9ogA2.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_guid_/share-links/_linkId_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { f as flag, s as providers } from \"../../../../../../../chunks/providers.server.js\";\nimport { t as requireEditableDefinition } from \"../../../../../../../chunks/access.server.js\";\nimport { h as handleApiError } from \"../../../../../../../chunks/api-errors.js\";\nimport { G as GuidSchema } from \"../../../../../../../chunks/context.js\";\nconst DELETE = async ({ params, locals }) => {\n  if (!flag(\"ENABLE_SHARING\")) {\n    throw error(404, \"Share links are disabled on this instance (ENABLE_SHARING).\");\n  }\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) throw error(400, \"Invalid or missing GUID\");\n  const linkParsed = GuidSchema.safeParse(params.linkId);\n  if (!linkParsed.success) throw error(400, \"Invalid or missing link ID\");\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  try {\n    const existing = await providers.data.shareLinks.getById(ctx, linkParsed.data);\n    if (!existing || existing.definitionId !== guidParsed.data) {\n      throw error(404, \"Share link not found.\");\n    }\n    await providers.data.shareLinks.revoke(ctx, linkParsed.data);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to revoke share link\");\n  }\n};\nexport {\n  DELETE\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAKK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE;AAC/B,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,6DAA6D,CAAC;AACnF,EAAE;AACF,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtE,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;AACxD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,4BAA4B,CAAC;AACzE,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,IAAI;AACN,IAAI,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AAClF,IAAI,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,KAAK,UAAU,CAAC,IAAI,EAAE;AAChE,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC;AAC/C,IAAI;AACJ,IAAI,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AAChE,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACtD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-C1wqbTiL.js

@@ -0,0 +1,31 @@
+import { error, redirect } from '@sveltejs/kit';
+import { c as getAuthProvider } from './providers.server-MD7TK-zQ.js';
+import { b as bootstrapUserSession } from './auth-bootstrap.server-CdwMOcYI.js';
+import { h as setSessionCookie, f as setRefreshCookie, s as safeRedirectTarget } from './admin-auth.server-45kKyH82.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import './context-DKDYb-He.js';
+import 'zod';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import './slug-BGuFQjqe.js';
+
+const GET = async ({ url, cookies }) => {
+  const emailLink = getAuthProvider().emailLink;
+  if (!emailLink) {
+    throw error(501, "Email sign-in is not supported by this provider.");
+  }
+  const result = await emailLink.verifyMagicLink(url.toString());
+  if (!result) throw error(401, "This sign-in link is invalid or has expired.");
+  await bootstrapUserSession(result.user);
+  setSessionCookie(cookies, result.sessionToken);
+  if (result.refreshToken) setRefreshCookie(cookies, result.refreshToken);
+  const dest = safeRedirectTarget(url.searchParams.get("redirectTo"), "/library");
+  redirect(303, dest);
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts-C1wqbTiL.js.map

package/build/server/chunks/_server.ts-C1wqbTiL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-C1wqbTiL.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/auth/email/callback/_server.ts.js"],"sourcesContent":["import { error, redirect } from \"@sveltejs/kit\";\nimport { c as getAuthProvider } from \"../../../../../chunks/providers.server.js\";\nimport { b as bootstrapUserSession } from \"../../../../../chunks/auth-bootstrap.server.js\";\nimport { h as setSessionCookie, f as setRefreshCookie, s as safeRedirectTarget } from \"../../../../../chunks/admin-auth.server.js\";\nconst GET = async ({ url, cookies }) => {\n  const emailLink = getAuthProvider().emailLink;\n  if (!emailLink) {\n    throw error(501, \"Email sign-in is not supported by this provider.\");\n  }\n  const result = await emailLink.verifyMagicLink(url.toString());\n  if (!result) throw error(401, \"This sign-in link is invalid or has expired.\");\n  await bootstrapUserSession(result.user);\n  setSessionCookie(cookies, result.sessionToken);\n  if (result.refreshToken) setRefreshCookie(cookies, result.refreshToken);\n  const dest = safeRedirectTarget(url.searchParams.get(\"redirectTo\"), \"/library\");\n  redirect(303, dest);\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAIK,MAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK;AACxC,EAAE,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC,SAAS;AAC/C,EAAE,IAAI,CAAC,SAAS,EAAE;AAClB,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,kDAAkD,CAAC;AACxE,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;AAChE,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,8CAA8C,CAAC;AAC/E,EAAE,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;AACzC,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAChD,EAAE,IAAI,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACzE,EAAE,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;AACjF,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;AACrB;;;;"}

package/build/server/chunks/_server.ts-C2A_Oiwe.js

@@ -0,0 +1,82 @@
+import { error, json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { n as getProjectProvider, k as getOrganizationProvider } from './providers.server-MD7TK-zQ.js';
+import { m as requireCanManage, l as requireCanEditProjectSettings, B as withAdminBypass, f as canChangeVisibilityToPublic } from './access.server-CGwRj2TY.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-b2AR_m1A.js';
+import { s as slugify } from './slug-BGuFQjqe.js';
+import { g as ProjectVisibilitySchema, v as validateProjectFlags } from './context-DKDYb-He.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@selvajs/compute/core';
+
+const UpdateProjectBody = z.object({
+  name: z.string().min(1).max(128).trim(),
+  description: z.string().max(2e3).nullish(),
+  visibility: ProjectVisibilitySchema,
+  autoJoinOnUpload: z.boolean()
+}).partial();
+const PATCH = async ({ params, request, locals }) => {
+  const { id } = params;
+  if (!id) throw error(400, "Missing project ID");
+  const { ctx, project: existing } = await requireCanEditProjectSettings(locals, id);
+  const body = await request.json().catch(() => null);
+  const parsed = UpdateProjectBody.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  if (parsed.data.visibility !== void 0 && parsed.data.visibility === "public" && existing.visibility !== "public") {
+    const orgMember = await getOrganizationProvider().getOrgMember(ctx, existing.orgId, ctx.userId);
+    const passes = withAdminBypass(
+      ctx.platformPermissions,
+      () => canChangeVisibilityToPublic({ orgMember })
+    );
+    if (!passes) {
+      throw error(403, "Only org owners or admins can make a project public.");
+    }
+  }
+  const mergedVisibility = parsed.data.visibility ?? existing.visibility;
+  const mergedAutoJoin = parsed.data.autoJoinOnUpload ?? existing.autoJoinOnUpload;
+  const flagIssues = validateProjectFlags({
+    visibility: mergedVisibility,
+    autoJoinOnUpload: mergedAutoJoin
+  });
+  if (flagIssues.length > 0) {
+    throw error(400, flagIssues.map((i) => `${i.path}: ${i.message}`).join("; "));
+  }
+  const patch = {};
+  if (parsed.data.name !== void 0) {
+    patch.name = parsed.data.name;
+    patch.slug = slugify(parsed.data.name);
+  }
+  if (parsed.data.description !== void 0) {
+    patch.description = parsed.data.description ?? void 0;
+  }
+  if (parsed.data.visibility !== void 0) patch.visibility = parsed.data.visibility;
+  if (parsed.data.autoJoinOnUpload !== void 0) {
+    patch.autoJoinOnUpload = parsed.data.autoJoinOnUpload;
+  }
+  try {
+    await getProjectProvider().updateProject(ctx, id, patch);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to update project");
+  }
+};
+const DELETE = async ({ params, locals }) => {
+  const { id } = params;
+  if (!id) throw error(400, "Missing project ID");
+  await requireCanManage(locals, id);
+  const ctx = locals.ctx;
+  try {
+    await getProjectProvider().deleteProject(ctx, id);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to delete project");
+  }
+};
+
+export { DELETE, PATCH };
+//# sourceMappingURL=_server.ts-C2A_Oiwe.js.map

package/build/server/chunks/_server.ts-C2A_Oiwe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-C2A_Oiwe.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/projects/_id_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { n as getProjectProvider, k as getOrganizationProvider } from \"../../../../../chunks/providers.server.js\";\nimport { m as requireCanManage, l as requireCanEditProjectSettings, B as withAdminBypass, f as canChangeVisibilityToPublic } from \"../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../chunks/api-errors.js\";\nimport { s as slugify } from \"../../../../../chunks/slug.js\";\nimport { g as ProjectVisibilitySchema, v as validateProjectFlags } from \"../../../../../chunks/context.js\";\nconst UpdateProjectBody = z.object({\n  name: z.string().min(1).max(128).trim(),\n  description: z.string().max(2e3).nullish(),\n  visibility: ProjectVisibilitySchema,\n  autoJoinOnUpload: z.boolean()\n}).partial();\nconst PATCH = async ({ params, request, locals }) => {\n  const { id } = params;\n  if (!id) throw error(400, \"Missing project ID\");\n  const { ctx, project: existing } = await requireCanEditProjectSettings(locals, id);\n  const body = await request.json().catch(() => null);\n  const parsed = UpdateProjectBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  if (parsed.data.visibility !== void 0 && parsed.data.visibility === \"public\" && existing.visibility !== \"public\") {\n    const orgMember = await getOrganizationProvider().getOrgMember(ctx, existing.orgId, ctx.userId);\n    const passes = withAdminBypass(\n      ctx.platformPermissions,\n      () => canChangeVisibilityToPublic({ orgMember })\n    );\n    if (!passes) {\n      throw error(403, \"Only org owners or admins can make a project public.\");\n    }\n  }\n  const mergedVisibility = parsed.data.visibility ?? existing.visibility;\n  const mergedAutoJoin = parsed.data.autoJoinOnUpload ?? existing.autoJoinOnUpload;\n  const flagIssues = validateProjectFlags({\n    visibility: mergedVisibility,\n    autoJoinOnUpload: mergedAutoJoin\n  });\n  if (flagIssues.length > 0) {\n    throw error(400, flagIssues.map((i) => `${i.path}: ${i.message}`).join(\"; \"));\n  }\n  const patch = {};\n  if (parsed.data.name !== void 0) {\n    patch.name = parsed.data.name;\n    patch.slug = slugify(parsed.data.name);\n  }\n  if (parsed.data.description !== void 0) {\n    patch.description = parsed.data.description ?? void 0;\n  }\n  if (parsed.data.visibility !== void 0) patch.visibility = parsed.data.visibility;\n  if (parsed.data.autoJoinOnUpload !== void 0) {\n    patch.autoJoinOnUpload = parsed.data.autoJoinOnUpload;\n  }\n  try {\n    await getProjectProvider().updateProject(ctx, id, patch);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to update project\");\n  }\n};\nconst DELETE = async ({ params, locals }) => {\n  const { id } = params;\n  if (!id) throw error(400, \"Missing project ID\");\n  await requireCanManage(locals, id);\n  const ctx = locals.ctx;\n  try {\n    await getProjectProvider().deleteProject(ctx, id);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to delete project\");\n  }\n};\nexport {\n  DELETE,\n  PATCH\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAOA,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;AACnC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACzC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE;AAC5C,EAAE,UAAU,EAAE,uBAAuB;AACrC,EAAE,gBAAgB,EAAE,CAAC,CAAC,OAAO;AAC7B,CAAC,CAAC,CAAC,OAAO,EAAE;AACP,MAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrD,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC;AACjD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,6BAA6B,CAAC,MAAM,EAAE,EAAE,CAAC;AACpF,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC;AAClD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,EAAE;AACpH,IAAI,MAAM,SAAS,GAAG,MAAM,uBAAuB,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC;AACnG,IAAI,MAAM,MAAM,GAAG,eAAe;AAClC,MAAM,GAAG,CAAC,mBAAmB;AAC7B,MAAM,MAAM,2BAA2B,CAAC,EAAE,SAAS,EAAE;AACrD,KAAK;AACL,IAAI,IAAI,CAAC,MAAM,EAAE;AACjB,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,sDAAsD,CAAC;AAC9E,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU;AACxE,EAAE,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,QAAQ,CAAC,gBAAgB;AAClF,EAAE,MAAM,UAAU,GAAG,oBAAoB,CAAC;AAC1C,IAAI,UAAU,EAAE,gBAAgB;AAChC,IAAI,gBAAgB,EAAE;AACtB,GAAG,CAAC;AACJ,EAAE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE;AAC7B,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjF,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,EAAE;AAClB,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE;AACnC,IAAI,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI;AACjC,IAAI,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;AAC1C,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,MAAM,EAAE;AAC1C,IAAI,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,MAAM;AACzD,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,MAAM,EAAE,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU;AAClF,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,KAAK,MAAM,EAAE;AAC/C,IAAI,KAAK,CAAC,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB;AACzD,EAAE;AACF,EAAE,IAAI;AACN,IAAI,MAAM,kBAAkB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC;AAC5D,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACnD,EAAE;AACF;AACK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC;AACjD,EAAE,MAAM,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAAC;AACpC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI;AACN,IAAI,MAAM,kBAAkB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC;AACrD,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACnD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-C3CKmKpW.js

@@ -0,0 +1,87 @@
+import { error, json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { randomUUID } from 'node:crypto';
+import { n as getProjectProvider, P as ProviderError } from './providers.server-MD7TK-zQ.js';
+import { j as requireCanCreateProject } from './access.server-CGwRj2TY.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-b2AR_m1A.js';
+import { s as slugify } from './slug-BGuFQjqe.js';
+import { g as ProjectVisibilitySchema } from './context-DKDYb-He.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@selvajs/compute/core';
+
+const MAX_SLUG_ATTEMPTS = 25;
+function isSlugConflict(err) {
+  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);
+}
+function isNameConflict(err) {
+  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);
+}
+const CreateProjectBody = z.object({
+  name: z.string().min(1, "Project name is required").max(128).trim(),
+  description: z.string().max(2e3).optional(),
+  visibility: ProjectVisibilitySchema.default("private"),
+  autoJoinOnUpload: z.boolean().optional()
+});
+const GET = async ({ locals }) => {
+  const ctx = locals.ctx;
+  if (!ctx.actingOrgId) throw error(400, "No active organization");
+  try {
+    const page = await getProjectProvider().listProjects(ctx, ctx.actingOrgId, { limit: 200 });
+    return json({ projects: page.items });
+  } catch (err) {
+    handleApiError(err, "Failed to load projects");
+  }
+};
+const POST = async ({ request, locals }) => {
+  const ctx = locals.ctx;
+  if (!ctx.actingOrgId) throw error(400, "No active organization");
+  await requireCanCreateProject(locals, ctx.actingOrgId);
+  const body = await request.json().catch(() => null);
+  const parsed = CreateProjectBody.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  const autoJoinOnUpload = parsed.data.autoJoinOnUpload ?? false;
+  if (autoJoinOnUpload && parsed.data.visibility !== "public") {
+    throw error(400, "autoJoinOnUpload requires visibility=public");
+  }
+  const projectStore = getProjectProvider();
+  const baseSlug = slugify(parsed.data.name) || "project";
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const projectId = randomUUID();
+  for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {
+    const slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;
+    const project = {
+      id: projectId,
+      orgId: ctx.actingOrgId,
+      name: parsed.data.name,
+      slug,
+      description: parsed.data.description,
+      visibility: parsed.data.visibility,
+      ownerId: locals.user.id,
+      createdBy: locals.user.id,
+      updatedBy: locals.user.id,
+      autoJoinOnUpload,
+      createdAt: now,
+      updatedAt: now,
+      deletedAt: null
+    };
+    try {
+      await projectStore.createProject(ctx, project);
+      return json(project, { status: 201 });
+    } catch (err) {
+      if (isNameConflict(err)) {
+        throw error(409, "A project with that name already exists in this organization.");
+      }
+      if (isSlugConflict(err)) continue;
+      handleApiError(err, "Failed to create project");
+    }
+  }
+  throw error(409, "Could not pick a unique project slug after several attempts.");
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts-C3CKmKpW.js.map

package/build/server/chunks/_server.ts-C3CKmKpW.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-C3CKmKpW.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/projects/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\nimport { n as getProjectProvider, P as ProviderError } from \"../../../../chunks/providers.server.js\";\nimport { j as requireCanCreateProject } from \"../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../chunks/api-errors.js\";\nimport { s as slugify } from \"../../../../chunks/slug.js\";\nimport { g as ProjectVisibilitySchema } from \"../../../../chunks/context.js\";\nconst MAX_SLUG_ATTEMPTS = 25;\nfunction isSlugConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);\n}\nfunction isNameConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);\n}\nconst CreateProjectBody = z.object({\n  name: z.string().min(1, \"Project name is required\").max(128).trim(),\n  description: z.string().max(2e3).optional(),\n  visibility: ProjectVisibilitySchema.default(\"private\"),\n  autoJoinOnUpload: z.boolean().optional()\n});\nconst GET = async ({ locals }) => {\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n  try {\n    const page = await getProjectProvider().listProjects(ctx, ctx.actingOrgId, { limit: 200 });\n    return json({ projects: page.items });\n  } catch (err) {\n    handleApiError(err, \"Failed to load projects\");\n  }\n};\nconst POST = async ({ request, locals }) => {\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n  await requireCanCreateProject(locals, ctx.actingOrgId);\n  const body = await request.json().catch(() => null);\n  const parsed = CreateProjectBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const autoJoinOnUpload = parsed.data.autoJoinOnUpload ?? false;\n  if (autoJoinOnUpload && parsed.data.visibility !== \"public\") {\n    throw error(400, \"autoJoinOnUpload requires visibility=public\");\n  }\n  const projectStore = getProjectProvider();\n  const baseSlug = slugify(parsed.data.name) || \"project\";\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const projectId = randomUUID();\n  for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {\n    const slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;\n    const project = {\n      id: projectId,\n      orgId: ctx.actingOrgId,\n      name: parsed.data.name,\n      slug,\n      description: parsed.data.description,\n      visibility: parsed.data.visibility,\n      ownerId: locals.user.id,\n      createdBy: locals.user.id,\n      updatedBy: locals.user.id,\n      autoJoinOnUpload,\n      createdAt: now,\n      updatedAt: now,\n      deletedAt: null\n    };\n    try {\n      await projectStore.createProject(ctx, project);\n      return json(project, { status: 201 });\n    } catch (err) {\n      if (isNameConflict(err)) {\n        throw error(409, \"A project with that name already exists in this organization.\");\n      }\n      if (isSlugConflict(err)) continue;\n      handleApiError(err, \"Failed to create project\");\n    }\n  }\n  throw error(409, \"Could not pick a unique project slug after several attempts.\");\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAQA,MAAM,iBAAiB,GAAG,EAAE;AAC5B,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;AACnC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACrE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;AAC7C,EAAE,UAAU,EAAE,uBAAuB,CAAC,OAAO,CAAC,SAAS,CAAC;AACxD,EAAE,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ;AACxC,CAAC,CAAC;AACG,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAClE,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAC9F,IAAI,OAAO,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;AACzC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAClD,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAClE,EAAE,MAAM,uBAAuB,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC;AACxD,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC;AAClD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,KAAK;AAChE,EAAE,IAAI,gBAAgB,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE;AAC/D,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,6CAA6C,CAAC;AACnE,EAAE;AACF,EAAE,MAAM,YAAY,GAAG,kBAAkB,EAAE;AAC3C,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS;AACzD,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,SAAS,GAAG,UAAU,EAAE;AAChC,EAAE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,iBAAiB,EAAE,OAAO,EAAE,EAAE;AAChE,IAAI,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;AACxE,IAAI,MAAM,OAAO,GAAG;AACpB,MAAM,EAAE,EAAE,SAAS;AACnB,MAAM,KAAK,EAAE,GAAG,CAAC,WAAW;AAC5B,MAAM,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC5B,MAAM,IAAI;AACV,MAAM,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AAC1C,MAAM,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;AACxC,MAAM,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC7B,MAAM,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC/B,MAAM,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC/B,MAAM,gBAAgB;AACtB,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE;AACjB,KAAK;AACL,IAAI,IAAI;AACR,MAAM,MAAM,YAAY,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC;AACpD,MAAM,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,QAAQ,MAAM,KAAK,CAAC,GAAG,EAAE,+DAA+D,CAAC;AACzF,MAAM;AACN,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,MAAM,cAAc,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACrD,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,8DAA8D,CAAC;AAClF;;;;"}

package/build/server/chunks/_server.ts-C52CTPlo.js

@@ -0,0 +1,38 @@
+import { error, json } from '@sveltejs/kit';
+import { l as getPermissionStore, c as getAuthProvider } from './providers.server-MD7TK-zQ.js';
+import { w as requireManageInstanceUsers } from './access.server-CGwRj2TY.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import './context-DKDYb-He.js';
+import 'zod';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import './api-errors-b2AR_m1A.js';
+import '@selvajs/compute/core';
+
+const POST = async ({ params, locals }) => {
+  requireManageInstanceUsers(locals);
+  const { id } = params;
+  if (!id) throw error(400, "Missing user ID");
+  const targetPerms = await getPermissionStore().getFor(locals.ctx, id);
+  if (targetPerms.includes("instance_admin")) {
+    const others = await getPermissionStore().countInstanceAdminsExcluding(locals.ctx, id);
+    if (others === 0) {
+      throw error(
+        409,
+        "Cannot disable the last instance admin. Promote another user to instance admin first."
+      );
+    }
+  }
+  const result = await getAuthProvider().disableUser(id);
+  if (result === "not_found") throw error(404, "User not found");
+  if (result === "not_supported")
+    throw error(501, "Disabling users is not supported by this auth provider");
+  return json({ success: true });
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-C52CTPlo.js.map

package/build/server/chunks/_server.ts-C52CTPlo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-C52CTPlo.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/users/_id_/disable/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { l as getPermissionStore, c as getAuthProvider } from \"../../../../../../../chunks/providers.server.js\";\nimport { w as requireManageInstanceUsers } from \"../../../../../../../chunks/access.server.js\";\nconst POST = async ({ params, locals }) => {\n  requireManageInstanceUsers(locals);\n  const { id } = params;\n  if (!id) throw error(400, \"Missing user ID\");\n  const targetPerms = await getPermissionStore().getFor(locals.ctx, id);\n  if (targetPerms.includes(\"instance_admin\")) {\n    const others = await getPermissionStore().countInstanceAdminsExcluding(locals.ctx, id);\n    if (others === 0) {\n      throw error(\n        409,\n        \"Cannot disable the last instance admin. Promote another user to instance admin first.\"\n      );\n    }\n  }\n  const result = await getAuthProvider().disableUser(id);\n  if (result === \"not_found\") throw error(404, \"User not found\");\n  if (result === \"not_supported\")\n    throw error(501, \"Disabling users is not supported by this auth provider\");\n  return json({ success: true });\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAGK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,EAAE,0BAA0B,CAAC,MAAM,CAAC;AACpC,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,iBAAiB,CAAC;AAC9C,EAAE,MAAM,WAAW,GAAG,MAAM,kBAAkB,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AACvE,EAAE,IAAI,WAAW,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE;AAC9C,IAAI,MAAM,MAAM,GAAG,MAAM,kBAAkB,EAAE,CAAC,4BAA4B,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AAC1F,IAAI,IAAI,MAAM,KAAK,CAAC,EAAE;AACtB,MAAM,MAAM,KAAK;AACjB,QAAQ,GAAG;AACX,QAAQ;AACR,OAAO;AACP,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;AACxD,EAAE,IAAI,MAAM,KAAK,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAChE,EAAE,IAAI,MAAM,KAAK,eAAe;AAChC,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,wDAAwD,CAAC;AAC9E,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAChC;;;;"}

package/build/server/chunks/_server.ts-CJ8oDVHC.js

@@ -0,0 +1,39 @@
+import { error, json } from '@sveltejs/kit';
+import { p as getUserProfileStore } from './providers.server-MD7TK-zQ.js';
+import { h as handleApiError } from './api-errors-b2AR_m1A.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import './context-DKDYb-He.js';
+import 'zod';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@selvajs/compute/core';
+
+const POST = async ({ params, locals }) => {
+  if (!locals.user || !locals.ctx) throw error(401, "Unauthorized");
+  const guid = params.guid;
+  if (!guid) throw error(400, "Missing definition guid");
+  try {
+    await getUserProfileStore().starDefinition(locals.ctx, locals.user.id, guid);
+    return json({ starred: true });
+  } catch (err) {
+    handleApiError(err, "Failed to star definition");
+  }
+};
+const DELETE = async ({ params, locals }) => {
+  if (!locals.user || !locals.ctx) throw error(401, "Unauthorized");
+  const guid = params.guid;
+  if (!guid) throw error(400, "Missing definition guid");
+  try {
+    await getUserProfileStore().unstarDefinition(locals.ctx, locals.user.id, guid);
+    return json({ starred: false });
+  } catch (err) {
+    handleApiError(err, "Failed to unstar definition");
+  }
+};
+
+export { DELETE, POST };
+//# sourceMappingURL=_server.ts-CJ8oDVHC.js.map

package/build/server/chunks/_server.ts-CJ8oDVHC.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-CJ8oDVHC.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/me/starred/_guid_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { p as getUserProfileStore } from \"../../../../../../chunks/providers.server.js\";\nimport { h as handleApiError } from \"../../../../../../chunks/api-errors.js\";\nconst POST = async ({ params, locals }) => {\n  if (!locals.user || !locals.ctx) throw error(401, \"Unauthorized\");\n  const guid = params.guid;\n  if (!guid) throw error(400, \"Missing definition guid\");\n  try {\n    await getUserProfileStore().starDefinition(locals.ctx, locals.user.id, guid);\n    return json({ starred: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to star definition\");\n  }\n};\nconst DELETE = async ({ params, locals }) => {\n  if (!locals.user || !locals.ctx) throw error(401, \"Unauthorized\");\n  const guid = params.guid;\n  if (!guid) throw error(400, \"Missing definition guid\");\n  try {\n    await getUserProfileStore().unstarDefinition(locals.ctx, locals.user.id, guid);\n    return json({ starred: false });\n  } catch (err) {\n    handleApiError(err, \"Failed to unstar definition\");\n  }\n};\nexport {\n  DELETE,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;AAGK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC;AACnE,EAAE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AAC1B,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACxD,EAAE,IAAI;AACN,IAAI,MAAM,mBAAmB,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;AAChF,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,2BAA2B,CAAC;AACpD,EAAE;AACF;AACK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC;AACnE,EAAE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AAC1B,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACxD,EAAE,IAAI;AACN,IAAI,MAAM,mBAAmB,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;AAClF,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACnC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACtD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-CnVtonm0.js

@@ -0,0 +1,40 @@
+import { error, json } from '@sveltejs/kit';
+import { a as definitionService } from './providers.server-MD7TK-zQ.js';
+import { t as requireEditableDefinition } from './access.server-CGwRj2TY.js';
+import { h as handleApiError } from './api-errors-b2AR_m1A.js';
+import { G as GuidSchema } from './context-DKDYb-He.js';
+import { a as MAX_IMAGE_FILE_SIZE } from './computeLimits-CKK96OOR.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'zod';
+import '@selvajs/compute/core';
+
+const POST = async ({ params, request, locals }) => {
+  const guidParsed = GuidSchema.safeParse(params.guid);
+  if (!guidParsed.success) throw error(400, "Invalid GUID");
+  const guid = guidParsed.data;
+  const { ctx } = await requireEditableDefinition(locals, guid);
+  const formData = await request.formData();
+  const file = formData.get("image");
+  if (!(file instanceof File) || file.size === 0) {
+    throw error(400, "Image file is required");
+  }
+  if (file.size > MAX_IMAGE_FILE_SIZE) {
+    throw error(400, `Image too large. Max size: ${MAX_IMAGE_FILE_SIZE / (1024 * 1024)} MB`);
+  }
+  try {
+    const imageData = new Uint8Array(await file.arrayBuffer());
+    const coverImage = await definitionService.saveCoverImage(ctx, guid, imageData);
+    return json({ success: true, coverImage });
+  } catch (err) {
+    handleApiError(err, "Failed to upload image");
+  }
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-CnVtonm0.js.map