@selvajs/selva 3.0.0 → 4.2.0

package/build/server/chunks/_server.ts-BtXdHfbr.js

@@ -0,0 +1,83 @@
+import { error, json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { n as getProjectProvider, k as getOrganizationProvider } from './providers.server-MD7TK-zQ.js';
+import { m as requireCanManage, l as requireCanEditProjectSettings, B as withAdminBypass, f as canChangeVisibilityToPublic } from './access.server-BBglojso.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-agQVBoep.js';
+import { s as slugify } from './slug-BGuFQjqe.js';
+import { g as ProjectVisibilitySchema, v as validateProjectFlags } from './context-DKDYb-He.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@selvajs/compute/core';
+import './utils2-D38XWwRv.js';
+
+const UpdateProjectBody = z.object({
+  name: z.string().min(1).max(128).trim(),
+  description: z.string().max(2e3).nullish(),
+  visibility: ProjectVisibilitySchema,
+  autoJoinOnUpload: z.boolean()
+}).partial();
+const PATCH = async ({ params, request, locals }) => {
+  const { id } = params;
+  if (!id) throw error(400, "Missing project ID");
+  const { ctx, project: existing } = await requireCanEditProjectSettings(locals, id);
+  const body = await request.json().catch(() => null);
+  const parsed = UpdateProjectBody.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  if (parsed.data.visibility !== void 0 && parsed.data.visibility === "public" && existing.visibility !== "public") {
+    const orgMember = await getOrganizationProvider().getOrgMember(ctx, existing.orgId, ctx.userId);
+    const passes = withAdminBypass(
+      ctx.platformPermissions,
+      () => canChangeVisibilityToPublic({ orgMember })
+    );
+    if (!passes) {
+      throw error(403, "Only org owners or admins can make a project public.");
+    }
+  }
+  const mergedVisibility = parsed.data.visibility ?? existing.visibility;
+  const mergedAutoJoin = parsed.data.autoJoinOnUpload ?? existing.autoJoinOnUpload;
+  const flagIssues = validateProjectFlags({
+    visibility: mergedVisibility,
+    autoJoinOnUpload: mergedAutoJoin
+  });
+  if (flagIssues.length > 0) {
+    throw error(400, flagIssues.map((i) => `${i.path}: ${i.message}`).join("; "));
+  }
+  const patch = {};
+  if (parsed.data.name !== void 0) {
+    patch.name = parsed.data.name;
+    patch.slug = slugify(parsed.data.name);
+  }
+  if (parsed.data.description !== void 0) {
+    patch.description = parsed.data.description ?? void 0;
+  }
+  if (parsed.data.visibility !== void 0) patch.visibility = parsed.data.visibility;
+  if (parsed.data.autoJoinOnUpload !== void 0) {
+    patch.autoJoinOnUpload = parsed.data.autoJoinOnUpload;
+  }
+  try {
+    await getProjectProvider().updateProject(ctx, id, patch);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to update project");
+  }
+};
+const DELETE = async ({ params, locals }) => {
+  const { id } = params;
+  if (!id) throw error(400, "Missing project ID");
+  await requireCanManage(locals, id);
+  const ctx = locals.ctx;
+  try {
+    await getProjectProvider().deleteProject(ctx, id);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to delete project");
+  }
+};
+
+export { DELETE, PATCH };
+//# sourceMappingURL=_server.ts-BtXdHfbr.js.map

package/build/server/chunks/_server.ts-BtXdHfbr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-BtXdHfbr.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/projects/_id_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { n as getProjectProvider, k as getOrganizationProvider } from \"../../../../../chunks/providers.server.js\";\nimport { m as requireCanManage, l as requireCanEditProjectSettings, B as withAdminBypass, f as canChangeVisibilityToPublic } from \"../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../chunks/api-errors.js\";\nimport { s as slugify } from \"../../../../../chunks/slug.js\";\nimport { g as ProjectVisibilitySchema, v as validateProjectFlags } from \"../../../../../chunks/context.js\";\nconst UpdateProjectBody = z.object({\n  name: z.string().min(1).max(128).trim(),\n  description: z.string().max(2e3).nullish(),\n  visibility: ProjectVisibilitySchema,\n  autoJoinOnUpload: z.boolean()\n}).partial();\nconst PATCH = async ({ params, request, locals }) => {\n  const { id } = params;\n  if (!id) throw error(400, \"Missing project ID\");\n  const { ctx, project: existing } = await requireCanEditProjectSettings(locals, id);\n  const body = await request.json().catch(() => null);\n  const parsed = UpdateProjectBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  if (parsed.data.visibility !== void 0 && parsed.data.visibility === \"public\" && existing.visibility !== \"public\") {\n    const orgMember = await getOrganizationProvider().getOrgMember(ctx, existing.orgId, ctx.userId);\n    const passes = withAdminBypass(\n      ctx.platformPermissions,\n      () => canChangeVisibilityToPublic({ orgMember })\n    );\n    if (!passes) {\n      throw error(403, \"Only org owners or admins can make a project public.\");\n    }\n  }\n  const mergedVisibility = parsed.data.visibility ?? existing.visibility;\n  const mergedAutoJoin = parsed.data.autoJoinOnUpload ?? existing.autoJoinOnUpload;\n  const flagIssues = validateProjectFlags({\n    visibility: mergedVisibility,\n    autoJoinOnUpload: mergedAutoJoin\n  });\n  if (flagIssues.length > 0) {\n    throw error(400, flagIssues.map((i) => `${i.path}: ${i.message}`).join(\"; \"));\n  }\n  const patch = {};\n  if (parsed.data.name !== void 0) {\n    patch.name = parsed.data.name;\n    patch.slug = slugify(parsed.data.name);\n  }\n  if (parsed.data.description !== void 0) {\n    patch.description = parsed.data.description ?? void 0;\n  }\n  if (parsed.data.visibility !== void 0) patch.visibility = parsed.data.visibility;\n  if (parsed.data.autoJoinOnUpload !== void 0) {\n    patch.autoJoinOnUpload = parsed.data.autoJoinOnUpload;\n  }\n  try {\n    await getProjectProvider().updateProject(ctx, id, patch);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to update project\");\n  }\n};\nconst DELETE = async ({ params, locals }) => {\n  const { id } = params;\n  if (!id) throw error(400, \"Missing project ID\");\n  await requireCanManage(locals, id);\n  const ctx = locals.ctx;\n  try {\n    await getProjectProvider().deleteProject(ctx, id);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to delete project\");\n  }\n};\nexport {\n  DELETE,\n  PATCH\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAOA,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;AACnC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACzC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE;AAC5C,EAAE,UAAU,EAAE,uBAAuB;AACrC,EAAE,gBAAgB,EAAE,CAAC,CAAC,OAAO;AAC7B,CAAC,CAAC,CAAC,OAAO,EAAE;AACP,MAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrD,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC;AACjD,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,6BAA6B,CAAC,MAAM,EAAE,EAAE,CAAC;AACpF,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC;AAClD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,EAAE;AACpH,IAAI,MAAM,SAAS,GAAG,MAAM,uBAAuB,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC;AACnG,IAAI,MAAM,MAAM,GAAG,eAAe;AAClC,MAAM,GAAG,CAAC,mBAAmB;AAC7B,MAAM,MAAM,2BAA2B,CAAC,EAAE,SAAS,EAAE;AACrD,KAAK;AACL,IAAI,IAAI,CAAC,MAAM,EAAE;AACjB,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,sDAAsD,CAAC;AAC9E,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU;AACxE,EAAE,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,QAAQ,CAAC,gBAAgB;AAClF,EAAE,MAAM,UAAU,GAAG,oBAAoB,CAAC;AAC1C,IAAI,UAAU,EAAE,gBAAgB;AAChC,IAAI,gBAAgB,EAAE;AACtB,GAAG,CAAC;AACJ,EAAE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE;AAC7B,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjF,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,EAAE;AAClB,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE;AACnC,IAAI,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI;AACjC,IAAI,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;AAC1C,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,MAAM,EAAE;AAC1C,IAAI,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,MAAM;AACzD,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,MAAM,EAAE,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU;AAClF,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,KAAK,MAAM,EAAE;AAC/C,IAAI,KAAK,CAAC,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB;AACzD,EAAE;AACF,EAAE,IAAI;AACN,IAAI,MAAM,kBAAkB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC;AAC5D,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACnD,EAAE;AACF;AACK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC;AACjD,EAAE,MAAM,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAAC;AACpC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI;AACN,IAAI,MAAM,kBAAkB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC;AACrD,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACnD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-ByqZZZxB.js

@@ -0,0 +1,35 @@
+import { json } from '@sveltejs/kit';
+import { execSync } from 'child_process';
+import { g as getBootHealth, i as isDegraded } from './bootHealth.server-Ca8zFRpM.js';
+import './context-DKDYb-He.js';
+import 'zod';
+import './providers.server-MD7TK-zQ.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+const STARTUP_COMMIT = (() => {
+  try {
+    return execSync("git rev-parse HEAD", { encoding: "utf8" }).trim();
+  } catch {
+    return null;
+  }
+})();
+const GET = async () => {
+  const boot = await getBootHealth();
+  const degraded = isDegraded(boot);
+  const body = {
+    status: degraded ? "degraded" : "ok",
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    commit: STARTUP_COMMIT,
+    boot
+  };
+  return json(body, { status: degraded ? 503 : 200 });
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts-ByqZZZxB.js.map

package/build/server/chunks/_server.ts-ByqZZZxB.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-ByqZZZxB.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/health/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { execSync } from \"child_process\";\nimport { g as getBootHealth, i as isDegraded } from \"../../../../chunks/bootHealth.server.js\";\nconst STARTUP_COMMIT = (() => {\n  try {\n    return execSync(\"git rev-parse HEAD\", { encoding: \"utf8\" }).trim();\n  } catch {\n    return null;\n  }\n})();\nconst GET = async () => {\n  const boot = await getBootHealth();\n  const degraded = isDegraded(boot);\n  const body = {\n    status: degraded ? \"degraded\" : \"ok\",\n    timestamp: (/* @__PURE__ */ new Date()).toISOString(),\n    commit: STARTUP_COMMIT,\n    boot\n  };\n  return json(body, { status: degraded ? 503 : 200 });\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;AAGA,MAAM,cAAc,GAAG,CAAC,MAAM;AAC9B,EAAE,IAAI;AACN,IAAI,OAAO,QAAQ,CAAC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE;AACtE,EAAE,CAAC,CAAC,MAAM;AACV,IAAI,OAAO,IAAI;AACf,EAAE;AACF,CAAC,GAAG;AACC,MAAC,GAAG,GAAG,YAAY;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE;AACpC,EAAE,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC;AACnC,EAAE,MAAM,IAAI,GAAG;AACf,IAAI,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,IAAI;AACxC,IAAI,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACzD,IAAI,MAAM,EAAE,cAAc;AAC1B,IAAI;AACJ,GAAG;AACH,EAAE,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC;AACrD;;;;"}

package/build/server/chunks/_server.ts-C-8S5O0H.js

@@ -0,0 +1,60 @@
+import { json, error } from '@sveltejs/kit';
+import { randomUUID } from 'node:crypto';
+import { k as getOrganizationProvider, P as ProviderError, M as MAX_PAGE_LIMIT } from './providers.server-MD7TK-zQ.js';
+import { u as requireInstanceAdmin } from './access.server-BBglojso.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-agQVBoep.js';
+import { b as CreateOrgSchema } from './context-DKDYb-He.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'zod';
+import '@selvajs/compute/core';
+import './utils2-D38XWwRv.js';
+
+const GET = async ({ locals, url }) => {
+  requireInstanceAdmin(locals);
+  const ctx = locals.ctx;
+  const rawLimit = Number(url.searchParams.get("limit") ?? 200);
+  const limit = Number.isFinite(rawLimit) ? Math.min(Math.max(rawLimit, 1), MAX_PAGE_LIMIT) : 200;
+  const cursor = url.searchParams.get("cursor") ?? void 0;
+  try {
+    const page = await getOrganizationProvider().listOrgs(ctx, { limit, cursor });
+    return json({ orgs: page.items, nextCursor: page.nextCursor });
+  } catch (err) {
+    handleApiError(err, "Failed to list orgs");
+  }
+};
+const POST = async ({ request, locals }) => {
+  const user = requireInstanceAdmin(locals);
+  const ctx = locals.ctx;
+  const body = await request.json().catch(() => null);
+  const parsed = CreateOrgSchema.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const org = {
+    id: randomUUID(),
+    name: parsed.data.name,
+    slug: parsed.data.slug,
+    ownerId: user.id,
+    createdBy: user.id,
+    updatedBy: user.id,
+    createdAt: now,
+    updatedAt: now,
+    deletedAt: null
+  };
+  try {
+    await getOrganizationProvider().createOrg(ctx, org);
+    return json(org, { status: 201 });
+  } catch (err) {
+    if (err instanceof ProviderError && err.statusCode === 409) {
+      throw error(409, err.message);
+    }
+    handleApiError(err, "Failed to create org");
+  }
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts-C-8S5O0H.js.map

package/build/server/chunks/_server.ts-C-8S5O0H.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-C-8S5O0H.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/orgs/_server.ts.js"],"sourcesContent":["import { json, error } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\nimport { k as getOrganizationProvider, P as ProviderError, M as MAX_PAGE_LIMIT } from \"../../../../../chunks/providers.server.js\";\nimport { u as requireInstanceAdmin } from \"../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../chunks/api-errors.js\";\nimport { b as CreateOrgSchema } from \"../../../../../chunks/context.js\";\nconst GET = async ({ locals, url }) => {\n  requireInstanceAdmin(locals);\n  const ctx = locals.ctx;\n  const rawLimit = Number(url.searchParams.get(\"limit\") ?? 200);\n  const limit = Number.isFinite(rawLimit) ? Math.min(Math.max(rawLimit, 1), MAX_PAGE_LIMIT) : 200;\n  const cursor = url.searchParams.get(\"cursor\") ?? void 0;\n  try {\n    const page = await getOrganizationProvider().listOrgs(ctx, { limit, cursor });\n    return json({ orgs: page.items, nextCursor: page.nextCursor });\n  } catch (err) {\n    handleApiError(err, \"Failed to list orgs\");\n  }\n};\nconst POST = async ({ request, locals }) => {\n  const user = requireInstanceAdmin(locals);\n  const ctx = locals.ctx;\n  const body = await request.json().catch(() => null);\n  const parsed = CreateOrgSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const org = {\n    id: randomUUID(),\n    name: parsed.data.name,\n    slug: parsed.data.slug,\n    ownerId: user.id,\n    createdBy: user.id,\n    updatedBy: user.id,\n    createdAt: now,\n    updatedAt: now,\n    deletedAt: null\n  };\n  try {\n    await getOrganizationProvider().createOrg(ctx, org);\n    return json(org, { status: 201 });\n  } catch (err) {\n    if (err instanceof ProviderError && err.statusCode === 409) {\n      throw error(409, err.message);\n    }\n    handleApiError(err, \"Failed to create org\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAMK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACvC,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC;AAC/D,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,GAAG;AACjG,EAAE,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,MAAM;AACzD,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,uBAAuB,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACjF,IAAI,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;AAClE,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,qBAAqB,CAAC;AAC9C,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC3C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAChD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,GAAG,GAAG;AACd,IAAI,EAAE,EAAE,UAAU,EAAE;AACpB,IAAI,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC1B,IAAI,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC1B,IAAI,OAAO,EAAE,IAAI,CAAC,EAAE;AACpB,IAAI,SAAS,EAAE,IAAI,CAAC,EAAE;AACtB,IAAI,SAAS,EAAE,IAAI,CAAC,EAAE;AACtB,IAAI,SAAS,EAAE,GAAG;AAClB,IAAI,SAAS,EAAE,GAAG;AAClB,IAAI,SAAS,EAAE;AACf,GAAG;AACH,EAAE,IAAI;AACN,IAAI,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;AACvD,IAAI,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACrC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE;AAChE,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC;AACnC,IAAI;AACJ,IAAI,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC/C,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-C1wqbTiL.js

@@ -0,0 +1,31 @@
+import { error, redirect } from '@sveltejs/kit';
+import { c as getAuthProvider } from './providers.server-MD7TK-zQ.js';
+import { b as bootstrapUserSession } from './auth-bootstrap.server-CdwMOcYI.js';
+import { h as setSessionCookie, f as setRefreshCookie, s as safeRedirectTarget } from './admin-auth.server-45kKyH82.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import './context-DKDYb-He.js';
+import 'zod';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import './slug-BGuFQjqe.js';
+
+const GET = async ({ url, cookies }) => {
+  const emailLink = getAuthProvider().emailLink;
+  if (!emailLink) {
+    throw error(501, "Email sign-in is not supported by this provider.");
+  }
+  const result = await emailLink.verifyMagicLink(url.toString());
+  if (!result) throw error(401, "This sign-in link is invalid or has expired.");
+  await bootstrapUserSession(result.user);
+  setSessionCookie(cookies, result.sessionToken);
+  if (result.refreshToken) setRefreshCookie(cookies, result.refreshToken);
+  const dest = safeRedirectTarget(url.searchParams.get("redirectTo"), "/library");
+  redirect(303, dest);
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts-C1wqbTiL.js.map

package/build/server/chunks/_server.ts-C1wqbTiL.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-C1wqbTiL.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/auth/email/callback/_server.ts.js"],"sourcesContent":["import { error, redirect } from \"@sveltejs/kit\";\nimport { c as getAuthProvider } from \"../../../../../chunks/providers.server.js\";\nimport { b as bootstrapUserSession } from \"../../../../../chunks/auth-bootstrap.server.js\";\nimport { h as setSessionCookie, f as setRefreshCookie, s as safeRedirectTarget } from \"../../../../../chunks/admin-auth.server.js\";\nconst GET = async ({ url, cookies }) => {\n  const emailLink = getAuthProvider().emailLink;\n  if (!emailLink) {\n    throw error(501, \"Email sign-in is not supported by this provider.\");\n  }\n  const result = await emailLink.verifyMagicLink(url.toString());\n  if (!result) throw error(401, \"This sign-in link is invalid or has expired.\");\n  await bootstrapUserSession(result.user);\n  setSessionCookie(cookies, result.sessionToken);\n  if (result.refreshToken) setRefreshCookie(cookies, result.refreshToken);\n  const dest = safeRedirectTarget(url.searchParams.get(\"redirectTo\"), \"/library\");\n  redirect(303, dest);\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAIK,MAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK;AACxC,EAAE,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC,SAAS;AAC/C,EAAE,IAAI,CAAC,SAAS,EAAE;AAClB,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,kDAAkD,CAAC;AACxE,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;AAChE,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,8CAA8C,CAAC;AAC/E,EAAE,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;AACzC,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAChD,EAAE,IAAI,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACzE,EAAE,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;AACjF,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;AACrB;;;;"}

package/build/server/chunks/_server.ts-C3sOwl5l.js

@@ -0,0 +1,72 @@
+import { error, json } from '@sveltejs/kit';
+import { randomUUID } from 'node:crypto';
+import { z } from 'zod';
+import { j as getInviteStore } from './providers.server-MD7TK-zQ.js';
+import { y as requireManageOrgMembers } from './access.server-BBglojso.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-agQVBoep.js';
+import { M as MEMBER_ASSIGNABLE_PERMISSIONS, D as DEFAULT_ORG_PERMISSIONS, e as OrgRoleSchema, P as PlatformPermissionSchema, d as OrgPermissionSchema } from './context-DKDYb-He.js';
+import { s as splitFlatPermissions } from './permissions-compat.server-BDkKxDeZ.js';
+import { m as mintRawToken, h as hashToken } from './token.server2-CaWL-Isp.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@selvajs/compute/core';
+import './utils2-D38XWwRv.js';
+
+const FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);
+const CreateBody = z.object({
+  email: z.string().email("Valid email is required").transform((s) => s.toLowerCase().trim()),
+  orgRole: OrgRoleSchema.default("member"),
+  permissions: z.array(FlatPermissionSchema).default([])
+});
+const INVITE_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
+const GET = async ({ locals }) => {
+  requireManageOrgMembers(locals);
+  const ctx = locals.ctx;
+  if (!ctx.actingOrgId) throw error(400, "No active organization");
+  try {
+    const page = await getInviteStore().listByOrg(ctx, ctx.actingOrgId, { limit: 200 });
+    const items = page.items.map(({ tokenHash: _omit, ...rest }) => rest);
+    return json(items);
+  } catch (err) {
+    handleApiError(err, "Failed to list invites");
+  }
+};
+const POST = async ({ request, locals, url }) => {
+  requireManageOrgMembers(locals);
+  const ctx = locals.ctx;
+  const user = locals.user;
+  if (!ctx.actingOrgId) throw error(400, "No active organization");
+  const body = await request.json().catch(() => null);
+  const parsed = CreateBody.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  try {
+    const { org: submittedOrgPerms } = splitFlatPermissions(parsed.data.permissions);
+    const orgPermissions = parsed.data.orgRole === "member" ? submittedOrgPerms.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[parsed.data.orgRole]];
+    const rawToken = mintRawToken();
+    const now = /* @__PURE__ */ new Date();
+    const invite = {
+      id: randomUUID(),
+      tokenHash: hashToken(rawToken),
+      email: parsed.data.email,
+      orgId: ctx.actingOrgId,
+      orgRole: parsed.data.orgRole,
+      orgPermissions,
+      invitedBy: user.id,
+      createdAt: now.toISOString(),
+      expiresAt: new Date(now.getTime() + INVITE_TTL_MS).toISOString()
+    };
+    await getInviteStore().create(ctx, invite);
+    const acceptUrl = `${url.origin}/accept-invite?token=${rawToken}`;
+    const { tokenHash: _omit, ...inviteForClient } = invite;
+    return json({ invite: inviteForClient, acceptUrl }, { status: 201 });
+  } catch (err) {
+    handleApiError(err, "Failed to create invite");
+  }
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts-C3sOwl5l.js.map

package/build/server/chunks/_server.ts-C3sOwl5l.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-C3sOwl5l.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/invites/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\nimport { z } from \"zod\";\nimport { j as getInviteStore } from \"../../../../chunks/providers.server.js\";\nimport { y as requireManageOrgMembers } from \"../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../chunks/api-errors.js\";\nimport { P as PlatformPermissionSchema, d as OrgPermissionSchema, e as OrgRoleSchema, M as MEMBER_ASSIGNABLE_PERMISSIONS, D as DEFAULT_ORG_PERMISSIONS } from \"../../../../chunks/context.js\";\nimport { s as splitFlatPermissions } from \"../../../../chunks/permissions-compat.server.js\";\nimport { m as mintRawToken, h as hashToken } from \"../../../../chunks/token.server2.js\";\nconst FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);\nconst CreateBody = z.object({\n  email: z.string().email(\"Valid email is required\").transform((s) => s.toLowerCase().trim()),\n  orgRole: OrgRoleSchema.default(\"member\"),\n  permissions: z.array(FlatPermissionSchema).default([])\n});\nconst INVITE_TTL_MS = 7 * 24 * 60 * 60 * 1e3;\nconst GET = async ({ locals }) => {\n  requireManageOrgMembers(locals);\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n  try {\n    const page = await getInviteStore().listByOrg(ctx, ctx.actingOrgId, { limit: 200 });\n    const items = page.items.map(({ tokenHash: _omit, ...rest }) => rest);\n    return json(items);\n  } catch (err) {\n    handleApiError(err, \"Failed to list invites\");\n  }\n};\nconst POST = async ({ request, locals, url }) => {\n  requireManageOrgMembers(locals);\n  const ctx = locals.ctx;\n  const user = locals.user;\n  if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n  const body = await request.json().catch(() => null);\n  const parsed = CreateBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  try {\n    const { org: submittedOrgPerms } = splitFlatPermissions(parsed.data.permissions);\n    const orgPermissions = parsed.data.orgRole === \"member\" ? submittedOrgPerms.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[parsed.data.orgRole]];\n    const rawToken = mintRawToken();\n    const now = /* @__PURE__ */ new Date();\n    const invite = {\n      id: randomUUID(),\n      tokenHash: hashToken(rawToken),\n      email: parsed.data.email,\n      orgId: ctx.actingOrgId,\n      orgRole: parsed.data.orgRole,\n      orgPermissions,\n      invitedBy: user.id,\n      createdAt: now.toISOString(),\n      expiresAt: new Date(now.getTime() + INVITE_TTL_MS).toISOString()\n    };\n    await getInviteStore().create(ctx, invite);\n    const acceptUrl = `${url.origin}/accept-invite?token=${rawToken}`;\n    const { tokenHash: _omit, ...inviteForClient } = invite;\n    return json({ invite: inviteForClient, acceptUrl }, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to create invite\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AASA,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;AACrF,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;AAC5B,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AAC7F,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;AAC1C,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE;AACvD,CAAC,CAAC;AACF,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG;AACvC,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAClE,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACvF,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC;AACzE,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC;AACtB,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AACjD,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACjD,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AAC1B,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAClE,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;AAC3C,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI;AACN,IAAI,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;AACpF,IAAI,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC5L,IAAI,MAAM,QAAQ,GAAG,YAAY,EAAE;AACnC,IAAI,MAAM,GAAG,mBAAmB,IAAI,IAAI,EAAE;AAC1C,IAAI,MAAM,MAAM,GAAG;AACnB,MAAM,EAAE,EAAE,UAAU,EAAE;AACtB,MAAM,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC;AACpC,MAAM,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;AAC9B,MAAM,KAAK,EAAE,GAAG,CAAC,WAAW;AAC5B,MAAM,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;AAClC,MAAM,cAAc;AACpB,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;AAClC,MAAM,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,WAAW;AACpE,KAAK;AACL,IAAI,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC;AAC9C,IAAI,MAAM,SAAS,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;AACrE,IAAI,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,eAAe,EAAE,GAAG,MAAM;AAC3D,IAAI,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACxE,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAClD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-CKvfxWeo.js

@@ -0,0 +1,108 @@
+import { error, json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { c as getAuthProvider, k as getOrganizationProvider, l as getPermissionStore } from './providers.server-MD7TK-zQ.js';
+import { w as requireManageInstanceUsers } from './access.server-BBglojso.js';
+import { s as setUserPlatformPermissions } from './permissions.server-cNGc9ris.js';
+import { t as throwZodError, h as handleApiError } from './api-errors-agQVBoep.js';
+import { S as SYSTEM_CONTEXT, j as hasPermission, M as MEMBER_ASSIGNABLE_PERMISSIONS, P as PlatformPermissionSchema, d as OrgPermissionSchema } from './context-DKDYb-He.js';
+import { f as flattenPermissions, s as splitFlatPermissions } from './permissions-compat.server-BDkKxDeZ.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@selvajs/compute/core';
+import './utils2-D38XWwRv.js';
+
+const FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);
+const BaseUserBody = z.object({
+  email: z.string().email("Valid email is required"),
+  permissions: z.array(FlatPermissionSchema)
+});
+const PasswordUserBody = BaseUserBody.extend({
+  password: z.string().min(8, "Password must be at least 8 characters").optional()
+});
+const GET = async ({ locals }) => {
+  requireManageInstanceUsers(locals);
+  const page = await getAuthProvider().listUsers({ limit: 200 });
+  if (page === null) {
+    throw error(
+      501,
+      "User management is not supported by the current auth provider. Configure DATA_PATH (local provider) or check your provider wiring."
+    );
+  }
+  const orgId = locals.ctx?.actingOrgId;
+  const orgs = getOrganizationProvider();
+  const userIds = page.items.map((u) => u.id);
+  const platformByUser = await getPermissionStore().getForBatch(locals.ctx, userIds);
+  const flattened = await Promise.all(
+    page.items.map(async (u) => {
+      let orgPerms = [];
+      if (orgId) {
+        const member = await orgs.getOrgMember(SYSTEM_CONTEXT, orgId, u.id);
+        orgPerms = member?.permissions ?? [];
+      }
+      const platformPerms = platformByUser.get(u.id) ?? [];
+      return {
+        ...u,
+        platformPermissions: platformPerms,
+        permissions: flattenPermissions(
+          platformPerms,
+          orgPerms
+        )
+      };
+    })
+  );
+  return json(flattened);
+};
+const POST = async ({ request, locals }) => {
+  requireManageInstanceUsers(locals);
+  const auth = getAuthProvider();
+  const body = await request.json().catch(() => null);
+  const parsed = PasswordUserBody.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  const { email, password, permissions } = parsed.data;
+  const { platform, org } = splitFlatPermissions(permissions);
+  if (platform.length > 0 && !hasPermission(locals.ctx, "instance_admin")) {
+    throw error(403, "Only a platform admin can grant platform-scope permissions");
+  }
+  try {
+    let user;
+    if (auth.passwordAuth) {
+      if (!password) throw error(400, "Password is required");
+      user = await auth.passwordAuth.createUserWithPassword(email, password);
+    } else if (auth.createUser) {
+      user = await auth.createUser(email);
+    } else {
+      throw error(
+        501,
+        `User creation is not supported by ${auth.name}. Users are managed externally.`
+      );
+    }
+    if (platform.length > 0) {
+      await setUserPlatformPermissions(locals.ctx, user.id, platform);
+    }
+    const orgId = locals.ctx?.actingOrgId;
+    if (orgId) {
+      const joinedAt = (/* @__PURE__ */ new Date()).toISOString();
+      await getOrganizationProvider().addOrgMember(SYSTEM_CONTEXT, {
+        orgId,
+        userId: user.id,
+        role: "member",
+        permissions: org.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)),
+        joinedAt,
+        updatedAt: joinedAt,
+        updatedBy: locals.user?.id ?? user.id,
+        deletedAt: null
+      });
+    }
+    return json(user, { status: 201 });
+  } catch (err) {
+    handleApiError(err, "Failed to create user");
+  }
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts-CKvfxWeo.js.map

package/build/server/chunks/_server.ts-CKvfxWeo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-CKvfxWeo.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/users/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { c as getAuthProvider, k as getOrganizationProvider, l as getPermissionStore } from \"../../../../../chunks/providers.server.js\";\nimport { w as requireManageInstanceUsers } from \"../../../../../chunks/access.server.js\";\nimport { s as setUserPlatformPermissions } from \"../../../../../chunks/permissions.server.js\";\nimport { t as throwZodError, h as handleApiError } from \"../../../../../chunks/api-errors.js\";\nimport { P as PlatformPermissionSchema, d as OrgPermissionSchema, S as SYSTEM_CONTEXT, j as hasPermission, M as MEMBER_ASSIGNABLE_PERMISSIONS } from \"../../../../../chunks/context.js\";\nimport { f as flattenPermissions, s as splitFlatPermissions } from \"../../../../../chunks/permissions-compat.server.js\";\nconst FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);\nconst BaseUserBody = z.object({\n  email: z.string().email(\"Valid email is required\"),\n  permissions: z.array(FlatPermissionSchema)\n});\nconst PasswordUserBody = BaseUserBody.extend({\n  password: z.string().min(8, \"Password must be at least 8 characters\").optional()\n});\nconst GET = async ({ locals }) => {\n  requireManageInstanceUsers(locals);\n  const page = await getAuthProvider().listUsers({ limit: 200 });\n  if (page === null) {\n    throw error(\n      501,\n      \"User management is not supported by the current auth provider. Configure DATA_PATH (local provider) or check your provider wiring.\"\n    );\n  }\n  const orgId = locals.ctx?.actingOrgId;\n  const orgs = getOrganizationProvider();\n  const userIds = page.items.map((u) => u.id);\n  const platformByUser = await getPermissionStore().getForBatch(locals.ctx, userIds);\n  const flattened = await Promise.all(\n    page.items.map(async (u) => {\n      let orgPerms = [];\n      if (orgId) {\n        const member = await orgs.getOrgMember(SYSTEM_CONTEXT, orgId, u.id);\n        orgPerms = member?.permissions ?? [];\n      }\n      const platformPerms = platformByUser.get(u.id) ?? [];\n      return {\n        ...u,\n        platformPermissions: platformPerms,\n        permissions: flattenPermissions(\n          platformPerms,\n          orgPerms\n        )\n      };\n    })\n  );\n  return json(flattened);\n};\nconst POST = async ({ request, locals }) => {\n  requireManageInstanceUsers(locals);\n  const auth = getAuthProvider();\n  const body = await request.json().catch(() => null);\n  const parsed = PasswordUserBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const { email, password, permissions } = parsed.data;\n  const { platform, org } = splitFlatPermissions(permissions);\n  if (platform.length > 0 && !hasPermission(locals.ctx, \"instance_admin\")) {\n    throw error(403, \"Only a platform admin can grant platform-scope permissions\");\n  }\n  try {\n    let user;\n    if (auth.passwordAuth) {\n      if (!password) throw error(400, \"Password is required\");\n      user = await auth.passwordAuth.createUserWithPassword(email, password);\n    } else if (auth.createUser) {\n      user = await auth.createUser(email);\n    } else {\n      throw error(\n        501,\n        `User creation is not supported by ${auth.name}. Users are managed externally.`\n      );\n    }\n    if (platform.length > 0) {\n      await setUserPlatformPermissions(locals.ctx, user.id, platform);\n    }\n    const orgId = locals.ctx?.actingOrgId;\n    if (orgId) {\n      const joinedAt = (/* @__PURE__ */ new Date()).toISOString();\n      await getOrganizationProvider().addOrgMember(SYSTEM_CONTEXT, {\n        orgId,\n        userId: user.id,\n        role: \"member\",\n        permissions: org.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)),\n        joinedAt,\n        updatedAt: joinedAt,\n        updatedBy: locals.user?.id ?? user.id,\n        deletedAt: null\n      });\n    }\n    return json(user, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to create user\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAQA,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;AACrF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;AAC9B,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC;AACpD,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB;AAC3C,CAAC,CAAC;AACF,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC;AAC7C,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wCAAwC,CAAC,CAAC,QAAQ;AAChF,CAAC,CAAC;AACG,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,0BAA0B,CAAC,MAAM,CAAC;AACpC,EAAE,MAAM,IAAI,GAAG,MAAM,eAAe,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAChE,EAAE,IAAI,IAAI,KAAK,IAAI,EAAE;AACrB,IAAI,MAAM,KAAK;AACf,MAAM,GAAG;AACT,MAAM;AACN,KAAK;AACL,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,WAAW;AACvC,EAAE,MAAM,IAAI,GAAG,uBAAuB,EAAE;AACxC,EAAE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AAC7C,EAAE,MAAM,cAAc,GAAG,MAAM,kBAAkB,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC;AACpF,EAAE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG;AACrC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK;AAChC,MAAM,IAAI,QAAQ,GAAG,EAAE;AACvB,MAAM,IAAI,KAAK,EAAE;AACjB,QAAQ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;AAC3E,QAAQ,QAAQ,GAAG,MAAM,EAAE,WAAW,IAAI,EAAE;AAC5C,MAAM;AACN,MAAM,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE;AAC1D,MAAM,OAAO;AACb,QAAQ,GAAG,CAAC;AACZ,QAAQ,mBAAmB,EAAE,aAAa;AAC1C,QAAQ,WAAW,EAAE,kBAAkB;AACvC,UAAU,aAAa;AACvB,UAAU;AACV;AACA,OAAO;AACP,IAAI,CAAC;AACL,GAAG;AACH,EAAE,OAAO,IAAI,CAAC,SAAS,CAAC;AACxB;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,0BAA0B,CAAC,MAAM,CAAC;AACpC,EAAE,MAAM,IAAI,GAAG,eAAe,EAAE;AAChC,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC;AACjD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,IAAI;AACtD,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,oBAAoB,CAAC,WAAW,CAAC;AAC7D,EAAE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE;AAC3E,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,4DAA4D,CAAC;AAClF,EAAE;AACF,EAAE,IAAI;AACN,IAAI,IAAI,IAAI;AACZ,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE;AAC3B,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC;AAC5E,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE;AAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;AACzC,IAAI,CAAC,MAAM;AACX,MAAM,MAAM,KAAK;AACjB,QAAQ,GAAG;AACX,QAAQ,CAAC,kCAAkC,EAAE,IAAI,CAAC,IAAI,CAAC,+BAA+B;AACtF,OAAO;AACP,IAAI;AACJ,IAAI,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE;AAC7B,MAAM,MAAM,0BAA0B,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC;AACrE,IAAI;AACJ,IAAI,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,WAAW;AACzC,IAAI,IAAI,KAAK,EAAE;AACf,MAAM,MAAM,QAAQ,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACjE,MAAM,MAAM,uBAAuB,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE;AACnE,QAAQ,KAAK;AACb,QAAQ,MAAM,EAAE,IAAI,CAAC,EAAE;AACvB,QAAQ,IAAI,EAAE,QAAQ;AACtB,QAAQ,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACjF,QAAQ,QAAQ;AAChB,QAAQ,SAAS,EAAE,QAAQ;AAC3B,QAAQ,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE;AAC7C,QAAQ,SAAS,EAAE;AACnB,OAAO,CAAC;AACR,IAAI;AACJ,IAAI,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACtC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,uBAAuB,CAAC;AAChD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-CMKxt34Z.js

@@ -0,0 +1,50 @@
+import { error, json } from '@sveltejs/kit';
+import { k as getOrganizationProvider, P as ProviderError } from './providers.server-MD7TK-zQ.js';
+import { u as requireInstanceAdmin } from './access.server-BBglojso.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-agQVBoep.js';
+import { i as UpdateOrgSchema } from './context-DKDYb-He.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'zod';
+import '@selvajs/compute/core';
+import './utils2-D38XWwRv.js';
+
+const PATCH = async ({ params, request, locals }) => {
+  requireInstanceAdmin(locals);
+  const { id } = params;
+  if (!id) throw error(400, "Missing org ID");
+  const ctx = locals.ctx;
+  const body = await request.json().catch(() => null);
+  const parsed = UpdateOrgSchema.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  try {
+    await getOrganizationProvider().updateOrg(ctx, id, parsed.data);
+    const updated = await getOrganizationProvider().getOrg(ctx, id);
+    return json(updated);
+  } catch (err) {
+    if (err instanceof ProviderError && err.statusCode === 409) {
+      throw error(409, err.message);
+    }
+    handleApiError(err, "Failed to update org");
+  }
+};
+const DELETE = async ({ params, locals }) => {
+  requireInstanceAdmin(locals);
+  const { id } = params;
+  if (!id) throw error(400, "Missing org ID");
+  const ctx = locals.ctx;
+  try {
+    await getOrganizationProvider().deleteOrg(ctx, id);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to delete org");
+  }
+};
+
+export { DELETE, PATCH };
+//# sourceMappingURL=_server.ts-CMKxt34Z.js.map

package/build/server/chunks/_server.ts-CMKxt34Z.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-CMKxt34Z.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/orgs/_id_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { k as getOrganizationProvider, P as ProviderError } from \"../../../../../../chunks/providers.server.js\";\nimport { u as requireInstanceAdmin } from \"../../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../../chunks/api-errors.js\";\nimport { i as UpdateOrgSchema } from \"../../../../../../chunks/context.js\";\nconst PATCH = async ({ params, request, locals }) => {\n  requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) throw error(400, \"Missing org ID\");\n  const ctx = locals.ctx;\n  const body = await request.json().catch(() => null);\n  const parsed = UpdateOrgSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  try {\n    await getOrganizationProvider().updateOrg(ctx, id, parsed.data);\n    const updated = await getOrganizationProvider().getOrg(ctx, id);\n    return json(updated);\n  } catch (err) {\n    if (err instanceof ProviderError && err.statusCode === 409) {\n      throw error(409, err.message);\n    }\n    handleApiError(err, \"Failed to update org\");\n  }\n};\nconst DELETE = async ({ params, locals }) => {\n  requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) throw error(400, \"Missing org ID\");\n  const ctx = locals.ctx;\n  try {\n    await getOrganizationProvider().deleteOrg(ctx, id);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to delete org\");\n  }\n};\nexport {\n  DELETE,\n  PATCH\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAKK,MAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrD,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAChD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI;AACN,IAAI,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC;AACnE,IAAI,MAAM,OAAO,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AACnE,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC;AACxB,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE;AAChE,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC;AACnC,IAAI;AACJ,IAAI,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC/C,EAAE;AACF;AACK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI;AACN,IAAI,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC;AACtD,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC/C,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-COWH7HN8.js

@@ -0,0 +1,39 @@
+import { error, json } from '@sveltejs/kit';
+import { f as flag, s as providers } from './providers.server-MD7TK-zQ.js';
+import { t as requireEditableDefinition } from './access.server-BBglojso.js';
+import { h as handleApiError } from './api-errors-agQVBoep.js';
+import { G as GuidSchema } from './context-DKDYb-He.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'zod';
+import '@selvajs/compute/core';
+import './utils2-D38XWwRv.js';
+
+const DELETE = async ({ params, locals }) => {
+  if (!flag("ENABLE_SHARING")) {
+    throw error(404, "Share links are disabled on this instance (ENABLE_SHARING).");
+  }
+  const guidParsed = GuidSchema.safeParse(params.guid);
+  if (!guidParsed.success) throw error(400, "Invalid or missing GUID");
+  const linkParsed = GuidSchema.safeParse(params.linkId);
+  if (!linkParsed.success) throw error(400, "Invalid or missing link ID");
+  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
+  try {
+    const existing = await providers.data.shareLinks.getById(ctx, linkParsed.data);
+    if (!existing || existing.definitionId !== guidParsed.data) {
+      throw error(404, "Share link not found.");
+    }
+    await providers.data.shareLinks.revoke(ctx, linkParsed.data);
+    return json({ success: true });
+  } catch (err) {
+    handleApiError(err, "Failed to revoke share link");
+  }
+};
+
+export { DELETE };
+//# sourceMappingURL=_server.ts-COWH7HN8.js.map

package/build/server/chunks/_server.ts-COWH7HN8.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-COWH7HN8.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_guid_/share-links/_linkId_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { f as flag, s as providers } from \"../../../../../../../chunks/providers.server.js\";\nimport { t as requireEditableDefinition } from \"../../../../../../../chunks/access.server.js\";\nimport { h as handleApiError } from \"../../../../../../../chunks/api-errors.js\";\nimport { G as GuidSchema } from \"../../../../../../../chunks/context.js\";\nconst DELETE = async ({ params, locals }) => {\n  if (!flag(\"ENABLE_SHARING\")) {\n    throw error(404, \"Share links are disabled on this instance (ENABLE_SHARING).\");\n  }\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) throw error(400, \"Invalid or missing GUID\");\n  const linkParsed = GuidSchema.safeParse(params.linkId);\n  if (!linkParsed.success) throw error(400, \"Invalid or missing link ID\");\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  try {\n    const existing = await providers.data.shareLinks.getById(ctx, linkParsed.data);\n    if (!existing || existing.definitionId !== guidParsed.data) {\n      throw error(404, \"Share link not found.\");\n    }\n    await providers.data.shareLinks.revoke(ctx, linkParsed.data);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to revoke share link\");\n  }\n};\nexport {\n  DELETE\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAKK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE;AAC/B,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,6DAA6D,CAAC;AACnF,EAAE;AACF,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtE,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;AACxD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,4BAA4B,CAAC;AACzE,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,IAAI;AACN,IAAI,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AAClF,IAAI,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,KAAK,UAAU,CAAC,IAAI,EAAE;AAChE,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC;AAC/C,IAAI;AACJ,IAAI,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AAChE,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACtD,EAAE;AACF;;;;"}