@selvajs/selva 4.14.1 → 4.14.2

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/solve/_server.ts.js-CnHunElY.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CnHunElY.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/definitions/_guid_/solve/_server.ts.js"],"sourcesContent":["import { n as apiError, t as ApiErrorCode } from \"../../../../../../../chunks/api-errors.js\";\nimport { c as requireMaxBodySize } from \"../../../../../../../chunks/admin-auth.server.js\";\nimport \"../../../../../../../chunks/compute.js\";\nimport { n as COMPUTE_REQUEST_MAX_BYTES } from \"../../../../../../../chunks/computeLimits.js\";\nimport { c as requireCaller, l as requireParams, o as parseBody } from \"../../../../../../../chunks/http.js\";\nimport { n as runSolve, t as mapSolveError } from \"../../../../../../../chunks/solve.server.js\";\nimport \"../../../../../../../chunks/route.js\";\nimport { a as SolveBodySchema } from \"../../../../../../../chunks/bodies.js\";\n/**\n* `T` is whatever the caller replays. It must not be a `Response` — a body can\n* only be read once, so the solve route stores a serialized snapshot instead.\n*/\nfunction createIdempotencyStore(config) {\n\tconst ttlMs = Math.max(0, Math.floor(config.ttlMs));\n\tconst maxKeys = Math.max(1, Math.floor(config.maxKeys ?? 1e4));\n\tconst sweepIntervalMs = Math.max(0, Math.floor(config.sweepIntervalMs ?? ttlMs));\n\tconst resolvedConfig = Object.freeze({\n\t\t...config,\n\t\tttlMs,\n\t\tmaxKeys,\n\t\tsweepIntervalMs\n\t});\n\tconst entries = /* @__PURE__ */ new Map();\n\tlet nextSweepAt = Number.POSITIVE_INFINITY;\n\tfunction maybeSweep(now, headroom = 0) {\n\t\tconst budget = Math.max(0, maxKeys - headroom);\n\t\tif (!(sweepIntervalMs > 0 && now >= nextSweepAt) && entries.size <= budget) return;\n\t\tfor (const [key, entry] of entries) if (entry.expiresAt !== null && now > entry.expiresAt) entries.delete(key);\n\t\tif (sweepIntervalMs > 0) nextSweepAt = now + sweepIntervalMs;\n\t\tif (entries.size > budget) {\n\t\t\tconst byExpiryAsc = [...entries.entries()].sort((a, b) => (a[1].expiresAt ?? Infinity) - (b[1].expiresAt ?? Infinity));\n\t\t\tfor (let i = 0; i < byExpiryAsc.length - budget; i++) entries.delete(byExpiryAsc[i][0]);\n\t\t}\n\t}\n\treturn {\n\t\tconfig: resolvedConfig,\n\t\tasync run(key, fn) {\n\t\t\tconst now = Date.now();\n\t\t\tconst existing = entries.get(key);\n\t\t\tif (existing && (existing.expiresAt === null || now <= existing.expiresAt)) return {\n\t\t\t\tvalue: await existing.promise,\n\t\t\t\treplayed: true\n\t\t\t};\n\t\t\tmaybeSweep(now, entries.has(key) ? 0 : 1);\n\t\t\tconst promise = fn();\n\t\t\tconst entry = {\n\t\t\t\tpromise,\n\t\t\t\texpiresAt: null\n\t\t\t};\n\t\t\tentries.set(key, entry);\n\t\t\tif (sweepIntervalMs > 0 && nextSweepAt === Number.POSITIVE_INFINITY) nextSweepAt = now + sweepIntervalMs;\n\t\t\ttry {\n\t\t\t\tconst value = await promise;\n\t\t\t\tentry.expiresAt = Date.now() + ttlMs;\n\t\t\t\treturn {\n\t\t\t\t\tvalue,\n\t\t\t\t\treplayed: false\n\t\t\t\t};\n\t\t\t} catch (err) {\n\t\t\t\tif (entries.get(key) === entry) entries.delete(key);\n\t\t\t\tthrow err;\n\t\t\t}\n\t\t},\n\t\treset() {\n\t\t\tentries.clear();\n\t\t\tnextSweepAt = Number.POSITIVE_INFINITY;\n\t\t},\n\t\tsize() {\n\t\t\treturn entries.size;\n\t\t}\n\t};\n}\nvar store = createIdempotencyStore({ ttlMs: 3e5 });\n/** `callerId` is `tokenId` for a PAT caller (so two tokens held by the same user don't share replays), else the user id. */\nfunction idempotencyKey(callerId, clientKey) {\n\treturn `${callerId}\u0000${clientKey}`;\n}\n/** `replayed` distinguishes a replay from a fresh run so the caller can stamp a response header. */\nfunction withIdempotency(key, fn) {\n\treturn store.run(key, fn);\n}\n/** Serialize a response so it can be replayed. Consumes the body. */\nasync function toStoredResponse(res) {\n\treturn {\n\t\tstatus: res.status,\n\t\theaders: [...res.headers.entries()],\n\t\tbody: await res.arrayBuffer()\n\t};\n}\n/** Rebuild a live `Response` from a stored snapshot. */\nfunction fromStoredResponse(stored, replayed) {\n\tconst headers = new Headers(stored.headers);\n\tif (replayed) headers.set(\"Idempotency-Replayed\", \"true\");\n\treturn new Response(stored.body, {\n\t\tstatus: stored.status,\n\t\theaders\n\t});\n}\n//#endregion\n//#region src/routes/api/v1/definitions/[guid]/solve/+server.ts\n/**\n* The definition-addressed solve — v1's flagship action, and what the CLI's\n* `solve` command maps to.\n*\n* It shares the whole solve core with `POST /api/v1/compute` but reaches it\n* only via the `user` access variant, so a share token can never authorize it:\n* the guid comes from the path, and `locals.ctx` is required. `/api/v1/compute`\n* keeps the URL-addressed and share-token flows.\n*/\nvar POST = async ({ request, params, locals }) => {\n\trequireMaxBodySize(request, COMPUTE_REQUEST_MAX_BYTES);\n\tconst loadStart = performance.now();\n\tconst prepMarks = [];\n\tlet prevMark = performance.now();\n\tconst mark = (label) => {\n\t\tprepMarks.push([label, performance.now() - prevMark]);\n\t\tprevMark = performance.now();\n\t};\n\tconst { guid } = requireParams(params, \"guid\");\n\tconst { ctx, user } = requireCaller(locals);\n\tconst body = await parseBody(request, SolveBodySchema, { missingAs: {} });\n\tmark(\"body\");\n\tconst definitionUrl = `local:${guid}`;\n\tif (body.definitionUrl !== void 0 && body.definitionUrl !== definitionUrl) apiError(400, ApiErrorCode.VALIDATION_FAILED, `definitionUrl must be '${definitionUrl}' or omitted on this endpoint.`);\n\tconst solve = () => runSolve({\n\t\taccess: {\n\t\t\tkind: \"user\",\n\t\t\tctx,\n\t\t\trateLimitKey: `user:${user.id}`\n\t\t},\n\t\tdefinitionUrl,\n\t\tinputs: body.inputs,\n\t\tvalues: body.values,\n\t\tchannel: body.channel,\n\t\tversionId: body.versionId ?? null,\n\t\trequest,\n\t\tlocals,\n\t\tloadStart,\n\t\tprepMarks,\n\t\tconcealAccessFailure: true\n\t});\n\ttry {\n\t\tconst clientKey = request.headers.get(\"idempotency-key\");\n\t\tif (!clientKey) return await solve();\n\t\tconst { value, replayed } = await withIdempotency(idempotencyKey(user.id, clientKey), async () => toStoredResponse(await solve()));\n\t\treturn fromStoredResponse(value, replayed);\n\t} catch (err) {\n\t\tmapSolveError(err, locals);\n\t}\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAQA;AACA;AACA;AACA;AACA,SAAS,sBAAsB,CAAC,MAAM,EAAE;AACxC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpD,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;AAC/D,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,IAAI,KAAK,CAAC,CAAC;AACjF,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;AACtC,EAAE,GAAG,MAAM;AACX,EAAE,KAAK;AACP,EAAE,OAAO;AACT,EAAE;AACF,EAAE,CAAC;AACH,CAAC,MAAM,OAAO,mBAAmB,IAAI,GAAG,EAAE;AAC1C,CAAC,IAAI,WAAW,GAAG,MAAM,CAAC,iBAAiB;AAC3C,CAAC,SAAS,UAAU,CAAC,GAAG,EAAE,QAAQ,GAAG,CAAC,EAAE;AACxC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;AAChD,EAAE,IAAI,EAAE,eAAe,GAAG,CAAC,IAAI,GAAG,IAAI,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,IAAI,MAAM,EAAE;AAC9E,EAAE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;AAChH,EAAE,IAAI,eAAe,GAAG,CAAC,EAAE,WAAW,GAAG,GAAG,GAAG,eAAe;AAC9D,EAAE,IAAI,OAAO,CAAC,IAAI,GAAG,MAAM,EAAE;AAC7B,GAAG,MAAM,WAAW,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC;AACzH,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1F,EAAE;AACF,CAAC;AACD,CAAC,OAAO;AACR,EAAE,MAAM,EAAE,cAAc;AACxB,EAAE,MAAM,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE;AACrB,GAAG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;AACzB,GAAG,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;AACpC,GAAG,IAAI,QAAQ,KAAK,QAAQ,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO;AACtF,IAAI,KAAK,EAAE,MAAM,QAAQ,CAAC,OAAO;AACjC,IAAI,QAAQ,EAAE;AACd,IAAI;AACJ,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC5C,GAAG,MAAM,OAAO,GAAG,EAAE,EAAE;AACvB,GAAG,MAAM,KAAK,GAAG;AACjB,IAAI,OAAO;AACX,IAAI,SAAS,EAAE;AACf,IAAI;AACJ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC;AAC1B,GAAG,IAAI,eAAe,GAAG,CAAC,IAAI,WAAW,KAAK,MAAM,CAAC,iBAAiB,EAAE,WAAW,GAAG,GAAG,GAAG,eAAe;AAC3G,GAAG,IAAI;AACP,IAAI,MAAM,KAAK,GAAG,MAAM,OAAO;AAC/B,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;AACxC,IAAI,OAAO;AACX,KAAK,KAAK;AACV,KAAK,QAAQ,EAAE;AACf,KAAK;AACL,GAAG,CAAC,CAAC,OAAO,GAAG,EAAE;AACjB,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;AACvD,IAAI,MAAM,GAAG;AACb,GAAG;AACH,EAAE,CAAC;AACH,EAAE,KAAK,GAAG;AACV,GAAG,OAAO,CAAC,KAAK,EAAE;AAClB,GAAG,WAAW,GAAG,MAAM,CAAC,iBAAiB;AACzC,EAAE,CAAC;AACH,EAAE,IAAI,GAAG;AACT,GAAG,OAAO,OAAO,CAAC,IAAI;AACtB,EAAE;AACF,EAAE;AACF;AACA,IAAI,KAAK,GAAG,sBAAsB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAClD;AACA,SAAS,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE;AAC7C,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AAClC;AACA;AACA,SAAS,eAAe,CAAC,GAAG,EAAE,EAAE,EAAE;AAClC,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC;AAC1B;AACA;AACA,eAAe,gBAAgB,CAAC,GAAG,EAAE;AACrC,CAAC,OAAO;AACR,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM;AACpB,EAAE,OAAO,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;AACrC,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,WAAW;AAC7B,EAAE;AACF;AACA;AACA,SAAS,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE;AAC9C,CAAC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;AAC5C,CAAC,IAAI,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC;AAC1D,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE;AAClC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM;AACvB,EAAE;AACF,EAAE,CAAC;AACH;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAClD,CAAC,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,CAAC;AACvD,CAAC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;AACpC,CAAC,MAAM,SAAS,GAAG,EAAE;AACrB,CAAC,IAAI,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;AACjC,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK;AACzB,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC;AACvD,EAAE,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;AAC9B,CAAC,CAAC;AACF,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC;AAC/C,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AAC5C,CAAC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AAC1E,CAAC,IAAI,CAAC,MAAM,CAAC;AACb,CAAC,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACtC,CAAC,IAAI,IAAI,CAAC,aAAa,KAAK,MAAM,IAAI,IAAI,CAAC,aAAa,KAAK,aAAa,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,uBAAuB,EAAE,aAAa,CAAC,8BAA8B,CAAC,CAAC;AAClM,CAAC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC;AAC9B,EAAE,MAAM,EAAE;AACV,GAAG,IAAI,EAAE,MAAM;AACf,GAAG,GAAG;AACN,GAAG,YAAY,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;AACjC,GAAG;AACH,EAAE,aAAa;AACf,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;AACrB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;AACrB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO;AACvB,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;AACnC,EAAE,OAAO;AACT,EAAE,MAAM;AACR,EAAE,SAAS;AACX,EAAE,SAAS;AACX,EAAE,oBAAoB,EAAE;AACxB,EAAE,CAAC;AACH,CAAC,IAAI;AACL,EAAE,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;AAC1D,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,MAAM,KAAK,EAAE;AACtC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,YAAY,gBAAgB,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC;AACpI,EAAE,OAAO,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC;AAC5B,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/versions/_server.ts.js-Ci_SZidB.js

@@ -0,0 +1,51 @@
+import { G as GuidSchema, k as GH_EXTENSIONS } from '../../../../../../../chunks/src.js-B12bUNyu.js';
+import { o as getDefinitionMeta, J as fetchSchemaFromCompute, P as getDefinitionService } from '../../../../../../../chunks/providers.server.js-D8WK4DPA.js';
+import { s as requireEditableDefinition } from '../../../../../../../chunks/access.server.js-CzYRZk7k.js';
+import { a as apiError, A as ApiErrorCode, r as resolveServerForOrg } from '../../../../../../../chunks/api-errors.js-DR0LZUh9.js';
+import { g as MAX_DEFINITION_FILE_SIZE } from '../../../../../../../chunks/computeLimits.js-Du0cIhYp.js';
+import { a as apiRoute, g as parseParam, b as requireCaller, d as collection, e as requireUpload, f as formText, c as created } from '../../../../../../../chunks/http.js-C465okFl.js';
+import { g as getVisibleDefinition } from '../../../../../../../chunks/visibility.server.js-DEjQoOe6.js';
+import { a as parseListOptions } from '../../../../../../../chunks/pagination.server.js-CtQ_3Is9.js';
+import 'zod';
+import '../../../../../../../chunks/shared-server.js-BZy9KN6u.js';
+import '../../../../../../../chunks/schema.js-BVfByvmD.js';
+import '../../../../../../../chunks/core-BQtRL5GE.js-B9MmO4om.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/api/v1/definitions/[guid]/versions/+server.ts
+var GET = apiRoute("Failed to list versions", async ({ params, locals, url }) => {
+	const guid = parseParam(params.guid, GuidSchema, "GUID");
+	const { ctx } = requireCaller(locals);
+	if (!await getVisibleDefinition(ctx, guid)) apiError(404, ApiErrorCode.NOT_FOUND, "Definition not found");
+	return collection(await getDefinitionMeta().listVersions(ctx, guid, parseListOptions(url)));
+});
+/**
+* Upload a new version. Advances `draft`; `live` is unchanged until publish.
+*/
+var POST = apiRoute("Failed to upload definition version", async ({ params, request, locals }) => {
+	const guid = parseParam(params.guid, GuidSchema, "GUID");
+	const form = await request.formData();
+	const { file, extension } = requireUpload(form, "file", {
+		maxBytes: MAX_DEFINITION_FILE_SIZE,
+		extensions: GH_EXTENSIONS,
+		label: "Grasshopper (.gh or .ghx) file"
+	});
+	const changeNote = formText(form, "changeNote", { maxLength: 1e3 });
+	const { ctx, record, project } = await requireEditableDefinition(locals, guid);
+	const data = new Uint8Array(await file.arrayBuffer());
+	const server = await resolveServerForOrg(ctx, project?.orgId ?? null, { definitionPin: record.computeServerId ?? null });
+	const schema = await fetchSchemaFromCompute(data, server);
+	const version = await getDefinitionService().uploadVersion(ctx, guid, data, extension.slice(1), file.name, schema, changeNote);
+	return created({ version });
+});
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-Ci_SZidB.js.map

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/versions/_server.ts.js-Ci_SZidB.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-Ci_SZidB.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/definitions/_guid_/versions/_server.ts.js"],"sourcesContent":["import { l as GuidSchema, p as GH_EXTENSIONS } from \"../../../../../../../chunks/src.js\";\nimport { c as getDefinitionService, j as fetchSchemaFromCompute, s as getDefinitionMeta } from \"../../../../../../../chunks/providers.server.js\";\nimport { v as requireEditableDefinition } from \"../../../../../../../chunks/access.server.js\";\nimport { n as apiError, o as resolveServerForOrg, t as ApiErrorCode } from \"../../../../../../../chunks/api-errors.js\";\nimport { a as MAX_DEFINITION_FILE_SIZE } from \"../../../../../../../chunks/computeLimits.js\";\nimport { c as requireCaller, i as formText, n as collection, r as created, s as parseParam, t as apiRoute, u as requireUpload } from \"../../../../../../../chunks/http.js\";\nimport \"../../../../../../../chunks/definitions.js\";\nimport \"../../../../../../../chunks/admin-config.js\";\nimport { t as getVisibleDefinition } from \"../../../../../../../chunks/visibility.server.js\";\nimport { n as parseListOptions } from \"../../../../../../../chunks/pagination.server.js\";\nimport \"../../../../../../../chunks/route.js\";\n//#region src/routes/api/v1/definitions/[guid]/versions/+server.ts\nvar GET = apiRoute(\"Failed to list versions\", async ({ params, locals, url }) => {\n\tconst guid = parseParam(params.guid, GuidSchema, \"GUID\");\n\tconst { ctx } = requireCaller(locals);\n\tif (!await getVisibleDefinition(ctx, guid)) apiError(404, ApiErrorCode.NOT_FOUND, \"Definition not found\");\n\treturn collection(await getDefinitionMeta().listVersions(ctx, guid, parseListOptions(url)));\n});\n/**\n* Upload a new version. Advances `draft`; `live` is unchanged until publish.\n*/\nvar POST = apiRoute(\"Failed to upload definition version\", async ({ params, request, locals }) => {\n\tconst guid = parseParam(params.guid, GuidSchema, \"GUID\");\n\tconst form = await request.formData();\n\tconst { file, extension } = requireUpload(form, \"file\", {\n\t\tmaxBytes: MAX_DEFINITION_FILE_SIZE,\n\t\textensions: GH_EXTENSIONS,\n\t\tlabel: \"Grasshopper (.gh or .ghx) file\"\n\t});\n\tconst changeNote = formText(form, \"changeNote\", { maxLength: 1e3 });\n\tconst { ctx, record, project } = await requireEditableDefinition(locals, guid);\n\tconst data = new Uint8Array(await file.arrayBuffer());\n\tconst server = await resolveServerForOrg(ctx, project?.orgId ?? null, { definitionPin: record.computeServerId ?? null });\n\tconst schema = await fetchSchemaFromCompute(data, server);\n\tconst version = await getDefinitionService().uploadVersion(ctx, guid, data, extension.slice(1), file.name, schema, changeNote);\n\treturn created({ version });\n});\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAWA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,yBAAyB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACjF,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AACzD,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AACtC,CAAC,IAAI,CAAC,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,sBAAsB,CAAC;AAC1G,CAAC,OAAO,UAAU,CAAC,MAAM,iBAAiB,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5F,CAAC;AACD;AACA;AACA;AACG,IAAC,IAAI,GAAG,QAAQ,CAAC,qCAAqC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAClG,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AACzD,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;AACtC,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE;AACzD,EAAE,QAAQ,EAAE,wBAAwB;AACpC,EAAE,UAAU,EAAE,aAAa;AAC3B,EAAE,KAAK,EAAE;AACT,EAAE,CAAC;AACH,CAAC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;AACpE,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC;AAC/E,CAAC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;AACzH,CAAC,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC;AAC1D,CAAC,MAAM,OAAO,GAAG,MAAM,oBAAoB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC;AAC/H,CAAC,OAAO,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/versions/_versionId_/_server.ts.js-Ebv6tmsm.js

@@ -0,0 +1,46 @@
+import { G as GuidSchema } from '../../../../../../../../chunks/src.js-B12bUNyu.js';
+import { P as getDefinitionService } from '../../../../../../../../chunks/providers.server.js-D8WK4DPA.js';
+import { s as requireEditableDefinition } from '../../../../../../../../chunks/access.server.js-CzYRZk7k.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../../../chunks/api-errors.js-DR0LZUh9.js';
+import { a as apiRoute, g as parseParam, b as requireCaller, n as noContent } from '../../../../../../../../chunks/http.js-C465okFl.js';
+import { a as loadVisibleVersion } from '../../../../../../../../chunks/visibility.server.js-DEjQoOe6.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../../../../chunks/shared-server.js-BZy9KN6u.js';
+import '../../../../../../../../chunks/schema.js-BVfByvmD.js';
+import '../../../../../../../../chunks/core-BQtRL5GE.js-B9MmO4om.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+//#region src/routes/api/v1/definitions/[guid]/versions/[versionId]/+server.ts
+/**
+* Version metadata. `schema` is excluded and served by the `/schema`
+* sub-resource, so a version read never carries a several-hundred-KB blob.
+*/
+var GET = apiRoute("Failed to load version", async ({ params, locals }) => {
+	const guid = parseParam(params.guid, GuidSchema, "GUID");
+	const versionId = parseParam(params.versionId, GuidSchema, "version ID");
+	const { ctx } = requireCaller(locals);
+	const version = await loadVisibleVersion(ctx, guid, versionId);
+	if (!version) apiError(404, ApiErrorCode.NOT_FOUND, "Version not found");
+	const { schema: _schema, ...rest } = version;
+	return json(rest);
+});
+/**
+* Delete an old version. The store throws 409 if the version is currently
+* referenced by `liveVersionId` or `draftVersionId` — repoint first.
+*/
+var DELETE = apiRoute("Failed to delete version", async ({ params, locals }) => {
+	const guid = parseParam(params.guid, GuidSchema, "GUID");
+	const versionId = parseParam(params.versionId, GuidSchema, "version ID");
+	const { ctx } = await requireEditableDefinition(locals, guid);
+	await getDefinitionService().deleteVersion(ctx, guid, versionId);
+	return noContent();
+});
+
+export { DELETE, GET };
+//# sourceMappingURL=_server.ts.js-Ebv6tmsm.js.map

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/versions/_versionId_/_server.ts.js-Ebv6tmsm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-Ebv6tmsm.js","sources":["../../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/definitions/_guid_/versions/_versionId_/_server.ts.js"],"sourcesContent":["import { l as GuidSchema } from \"../../../../../../../../chunks/src.js\";\nimport { c as getDefinitionService } from \"../../../../../../../../chunks/providers.server.js\";\nimport { v as requireEditableDefinition } from \"../../../../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../../../chunks/api-errors.js\";\nimport { a as noContent, c as requireCaller, s as parseParam, t as apiRoute } from \"../../../../../../../../chunks/http.js\";\nimport \"../../../../../../../../chunks/definitions.js\";\nimport { r as loadVisibleVersion } from \"../../../../../../../../chunks/visibility.server.js\";\nimport \"../../../../../../../../chunks/route.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/v1/definitions/[guid]/versions/[versionId]/+server.ts\n/**\n* Version metadata. `schema` is excluded and served by the `/schema`\n* sub-resource, so a version read never carries a several-hundred-KB blob.\n*/\nvar GET = apiRoute(\"Failed to load version\", async ({ params, locals }) => {\n\tconst guid = parseParam(params.guid, GuidSchema, \"GUID\");\n\tconst versionId = parseParam(params.versionId, GuidSchema, \"version ID\");\n\tconst { ctx } = requireCaller(locals);\n\tconst version = await loadVisibleVersion(ctx, guid, versionId);\n\tif (!version) apiError(404, ApiErrorCode.NOT_FOUND, \"Version not found\");\n\tconst { schema: _schema, ...rest } = version;\n\treturn json(rest);\n});\n/**\n* Delete an old version. The store throws 409 if the version is currently\n* referenced by `liveVersionId` or `draftVersionId` — repoint first.\n*/\nvar DELETE = apiRoute(\"Failed to delete version\", async ({ params, locals }) => {\n\tconst guid = parseParam(params.guid, GuidSchema, \"GUID\");\n\tconst versionId = parseParam(params.versionId, GuidSchema, \"version ID\");\n\tconst { ctx } = await requireEditableDefinition(locals, guid);\n\tawait getDefinitionService().deleteVersion(ctx, guid, versionId);\n\treturn noContent();\n});\n//#endregion\nexport { DELETE, GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AASA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3E,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AACzD,CAAC,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC;AACzE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AACtC,CAAC,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC;AAC/D,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,mBAAmB,CAAC;AACzE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO;AAC7C,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC;AAClB,CAAC;AACD;AACA;AACA;AACA;AACG,IAAC,MAAM,GAAG,QAAQ,CAAC,0BAA0B,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAChF,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AACzD,CAAC,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC;AACzE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC;AAC9D,CAAC,MAAM,oBAAoB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC;AACjE,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/versions/_versionId_/schema/_server.ts.js-CfE4Owbs.js

@@ -0,0 +1,38 @@
+import { G as GuidSchema } from '../../../../../../../../../chunks/src.js-B12bUNyu.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../../../../chunks/api-errors.js-DR0LZUh9.js';
+import { a as apiRoute, g as parseParam, b as requireCaller } from '../../../../../../../../../chunks/http.js-C465okFl.js';
+import { a as loadVisibleVersion } from '../../../../../../../../../chunks/visibility.server.js-DEjQoOe6.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../../../../../chunks/providers.server.js-D8WK4DPA.js';
+import '../../../../../../../../../chunks/shared-server.js-BZy9KN6u.js';
+import '../../../../../../../../../chunks/schema.js-BVfByvmD.js';
+import '../../../../../../../../../chunks/core-BQtRL5GE.js-B9MmO4om.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../../../../chunks/access.server.js-CzYRZk7k.js';
+
+//#region src/routes/api/v1/definitions/[guid]/versions/[versionId]/schema/+server.ts
+/**
+* The UI schema cached on this version at upload. Reads what is stored — no
+* Rhino.Compute round-trip, unlike the pre-upload `POST /api/v1/compute/schema`.
+*
+* Schemas belong to a version, so this is the canonical location;
+* `/definitions/{guid}/schema` is an alias for the live one.
+*/
+var GET = apiRoute("Failed to load version schema", async ({ params, locals }) => {
+	const guid = parseParam(params.guid, GuidSchema, "GUID");
+	const versionId = parseParam(params.versionId, GuidSchema, "version ID");
+	const { ctx } = requireCaller(locals);
+	const version = await loadVisibleVersion(ctx, guid, versionId);
+	if (!version) apiError(404, ApiErrorCode.NOT_FOUND, "Version not found");
+	if (!version.schema) apiError(404, ApiErrorCode.NOT_FOUND, "No schema cached for this version");
+	return json(version.schema);
+});
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-CfE4Owbs.js.map

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/versions/_versionId_/schema/_server.ts.js-CfE4Owbs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CfE4Owbs.js","sources":["../../../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/definitions/_guid_/versions/_versionId_/schema/_server.ts.js"],"sourcesContent":["import { l as GuidSchema } from \"../../../../../../../../../chunks/src.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../../../../chunks/api-errors.js\";\nimport { c as requireCaller, s as parseParam, t as apiRoute } from \"../../../../../../../../../chunks/http.js\";\nimport \"../../../../../../../../../chunks/definitions.js\";\nimport { r as loadVisibleVersion } from \"../../../../../../../../../chunks/visibility.server.js\";\nimport \"../../../../../../../../../chunks/route.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/v1/definitions/[guid]/versions/[versionId]/schema/+server.ts\n/**\n* The UI schema cached on this version at upload. Reads what is stored — no\n* Rhino.Compute round-trip, unlike the pre-upload `POST /api/v1/compute/schema`.\n*\n* Schemas belong to a version, so this is the canonical location;\n* `/definitions/{guid}/schema` is an alias for the live one.\n*/\nvar GET = apiRoute(\"Failed to load version schema\", async ({ params, locals }) => {\n\tconst guid = parseParam(params.guid, GuidSchema, \"GUID\");\n\tconst versionId = parseParam(params.versionId, GuidSchema, \"version ID\");\n\tconst { ctx } = requireCaller(locals);\n\tconst version = await loadVisibleVersion(ctx, guid, versionId);\n\tif (!version) apiError(404, ApiErrorCode.NOT_FOUND, \"Version not found\");\n\tif (!version.schema) apiError(404, ApiErrorCode.NOT_FOUND, \"No schema cached for this version\");\n\treturn json(version.schema);\n});\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAOA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,+BAA+B,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAClF,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AACzD,CAAC,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC;AACzE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AACtC,CAAC,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC;AAC/D,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,mBAAmB,CAAC;AACzE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,mCAAmC,CAAC;AAChG,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;AAC5B,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/definitions/_server.ts.js-aewwsFJ0.js

@@ -0,0 +1,112 @@
+import { j as toDefinitionListItem, k as GH_EXTENSIONS, l as CreateDefinitionInputSchema } from '../../../../../chunks/src.js-B12bUNyu.js';
+import { J as fetchSchemaFromCompute, P as getDefinitionService } from '../../../../../chunks/providers.server.js-D8WK4DPA.js';
+import { q as requireCanCreateDefinition } from '../../../../../chunks/access.server.js-CzYRZk7k.js';
+import { a as apiError, A as ApiErrorCode, t as throwZodError, r as resolveServerForOrg } from '../../../../../chunks/api-errors.js-DR0LZUh9.js';
+import { g as MAX_DEFINITION_FILE_SIZE, M as MAX_IMAGE_FILE_SIZE } from '../../../../../chunks/computeLimits.js-Du0cIhYp.js';
+import { a as apiRoute, b as requireCaller, d as collection, e as requireUpload, f as formText, c as created } from '../../../../../chunks/http.js-C465okFl.js';
+import { l as listVisibleDefinitions, r as resolveAccessibleProjects } from '../../../../../chunks/visibility.server.js-DEjQoOe6.js';
+import { p as parseDefinitionListOptions } from '../../../../../chunks/pagination.server.js-CtQ_3Is9.js';
+import { randomUUID } from 'node:crypto';
+import 'zod';
+import '../../../../../chunks/shared-server.js-BZy9KN6u.js';
+import '../../../../../chunks/schema.js-BVfByvmD.js';
+import '../../../../../chunks/core-BQtRL5GE.js-B9MmO4om.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/api/v1/definitions/+server.ts
+var LISTABLE_STATUSES = [
+	"draft",
+	"published",
+	"archived"
+];
+/**
+* Definitions the caller can view. Visibility is resolved into the query via
+* `projectIds`, so `limit`/`nextCursor` describe the filtered set.
+*/
+var GET = apiRoute("Failed to list definitions", async ({ locals, url }) => {
+	const { ctx } = requireCaller(locals);
+	const statusParam = url.searchParams.get("status");
+	if (statusParam && !LISTABLE_STATUSES.includes(statusParam)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `status must be one of: ${LISTABLE_STATUSES.join(", ")}`);
+	const page = await listVisibleDefinitions(ctx, {
+		...parseDefinitionListOptions(url),
+		projectId: url.searchParams.get("projectId") ?? void 0,
+		statuses: statusParam ? [statusParam] : void 0
+	});
+	return collection({
+		items: page.items.map(toDefinitionListItem),
+		nextCursor: page.nextCursor
+	});
+});
+function parseTags(raw) {
+	if (!raw) return void 0;
+	const tags = raw.split(",").map((t) => t.trim()).filter(Boolean);
+	return tags.length ? tags : void 0;
+}
+/** Create a definition — metadata and the Grasshopper file in one request. */
+var POST = apiRoute("Failed to create definition", async ({ request, locals }) => {
+	const ctx = locals.ctx;
+	const form = await request.formData();
+	const { file, extension } = requireUpload(form, "file", {
+		maxBytes: MAX_DEFINITION_FILE_SIZE,
+		extensions: GH_EXTENSIONS,
+		label: "Grasshopper (.gh or .ghx) file"
+	});
+	const imageFile = form.get("image");
+	if (imageFile instanceof File && imageFile.size > MAX_IMAGE_FILE_SIZE) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Image too large. Max size: ${MAX_IMAGE_FILE_SIZE / 1048576} MB`);
+	let projectId = formText(form, "projectId");
+	if (!projectId) {
+		if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
+		const { projects } = await resolveAccessibleProjects(ctx);
+		const fallback = projects.find((p) => p.orgId === ctx.actingOrgId);
+		if (!fallback) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No accessible project — pass projectId.");
+		projectId = fallback.id;
+	}
+	const { project } = await requireCanCreateDefinition(locals, projectId);
+	const parsed = CreateDefinitionInputSchema.safeParse({
+		displayName: formText(form, "displayName"),
+		description: formText(form, "description"),
+		category: formText(form, "category"),
+		coverImage: formText(form, "coverImage"),
+		tags: parseTags(formText(form, "tags")),
+		projectId,
+		computeServerId: formText(form, "computeServerId")
+	});
+	if (!parsed.success) throwZodError(parsed.error);
+	const guid = randomUUID();
+	const fileData = new Uint8Array(await file.arrayBuffer());
+	const server = await resolveServerForOrg(ctx, project.orgId, { definitionPin: parsed.data.computeServerId ?? null });
+	const schema = await fetchSchemaFromCompute(fileData, server);
+	const { record, version } = await getDefinitionService().create(ctx, {
+		guid,
+		projectId: parsed.data.projectId,
+		ownerId: locals.user.id,
+		fileExt: extension.slice(1),
+		originalFilename: file.name,
+		computeServerId: parsed.data.computeServerId,
+		displayName: parsed.data.displayName.trim(),
+		description: parsed.data.description,
+		category: parsed.data.category,
+		tags: parsed.data.tags,
+		coverImage: parsed.data.coverImage
+	}, fileData, schema);
+	let coverImage = record.coverImage;
+	if (imageFile instanceof File && imageFile.size > 0) {
+		const imageData = new Uint8Array(await imageFile.arrayBuffer());
+		coverImage = await getDefinitionService().saveCoverImage(ctx, guid, imageData);
+	}
+	return created({
+		guid,
+		version,
+		coverImage
+	});
+});
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-aewwsFJ0.js.map

package/build/server/chunks/entries/endpoints/api/v1/definitions/_server.ts.js-aewwsFJ0.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-aewwsFJ0.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/definitions/_server.ts.js"],"sourcesContent":["import { c as CreateDefinitionInputSchema, m as toDefinitionListItem, p as GH_EXTENSIONS } from \"../../../../../chunks/src.js\";\nimport { c as getDefinitionService, j as fetchSchemaFromCompute } from \"../../../../../chunks/providers.server.js\";\nimport { l as requireCanCreateDefinition } from \"../../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, o as resolveServerForOrg, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { a as MAX_DEFINITION_FILE_SIZE, o as MAX_IMAGE_FILE_SIZE } from \"../../../../../chunks/computeLimits.js\";\nimport { c as requireCaller, i as formText, n as collection, r as created, t as apiRoute, u as requireUpload } from \"../../../../../chunks/http.js\";\nimport \"../../../../../chunks/definitions.js\";\nimport \"../../../../../chunks/admin-config.js\";\nimport { i as resolveAccessibleProjects, n as listVisibleDefinitions } from \"../../../../../chunks/visibility.server.js\";\nimport { t as parseDefinitionListOptions } from \"../../../../../chunks/pagination.server.js\";\nimport \"../../../../../chunks/route.js\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/api/v1/definitions/+server.ts\nvar LISTABLE_STATUSES = [\n\t\"draft\",\n\t\"published\",\n\t\"archived\"\n];\n/**\n* Definitions the caller can view. Visibility is resolved into the query via\n* `projectIds`, so `limit`/`nextCursor` describe the filtered set.\n*/\nvar GET = apiRoute(\"Failed to list definitions\", async ({ locals, url }) => {\n\tconst { ctx } = requireCaller(locals);\n\tconst statusParam = url.searchParams.get(\"status\");\n\tif (statusParam && !LISTABLE_STATUSES.includes(statusParam)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `status must be one of: ${LISTABLE_STATUSES.join(\", \")}`);\n\tconst page = await listVisibleDefinitions(ctx, {\n\t\t...parseDefinitionListOptions(url),\n\t\tprojectId: url.searchParams.get(\"projectId\") ?? void 0,\n\t\tstatuses: statusParam ? [statusParam] : void 0\n\t});\n\treturn collection({\n\t\titems: page.items.map(toDefinitionListItem),\n\t\tnextCursor: page.nextCursor\n\t});\n});\nfunction parseTags(raw) {\n\tif (!raw) return void 0;\n\tconst tags = raw.split(\",\").map((t) => t.trim()).filter(Boolean);\n\treturn tags.length ? tags : void 0;\n}\n/** Create a definition — metadata and the Grasshopper file in one request. */\nvar POST = apiRoute(\"Failed to create definition\", async ({ request, locals }) => {\n\tconst ctx = locals.ctx;\n\tconst form = await request.formData();\n\tconst { file, extension } = requireUpload(form, \"file\", {\n\t\tmaxBytes: MAX_DEFINITION_FILE_SIZE,\n\t\textensions: GH_EXTENSIONS,\n\t\tlabel: \"Grasshopper (.gh or .ghx) file\"\n\t});\n\tconst imageFile = form.get(\"image\");\n\tif (imageFile instanceof File && imageFile.size > MAX_IMAGE_FILE_SIZE) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Image too large. Max size: ${MAX_IMAGE_FILE_SIZE / 1048576} MB`);\n\tlet projectId = formText(form, \"projectId\");\n\tif (!projectId) {\n\t\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\t\tconst { projects } = await resolveAccessibleProjects(ctx);\n\t\tconst fallback = projects.find((p) => p.orgId === ctx.actingOrgId);\n\t\tif (!fallback) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No accessible project — pass projectId.\");\n\t\tprojectId = fallback.id;\n\t}\n\tconst { project } = await requireCanCreateDefinition(locals, projectId);\n\tconst parsed = CreateDefinitionInputSchema.safeParse({\n\t\tdisplayName: formText(form, \"displayName\"),\n\t\tdescription: formText(form, \"description\"),\n\t\tcategory: formText(form, \"category\"),\n\t\tcoverImage: formText(form, \"coverImage\"),\n\t\ttags: parseTags(formText(form, \"tags\")),\n\t\tprojectId,\n\t\tcomputeServerId: formText(form, \"computeServerId\")\n\t});\n\tif (!parsed.success) throwZodError(parsed.error);\n\tconst guid = randomUUID();\n\tconst fileData = new Uint8Array(await file.arrayBuffer());\n\tconst server = await resolveServerForOrg(ctx, project.orgId, { definitionPin: parsed.data.computeServerId ?? null });\n\tconst schema = await fetchSchemaFromCompute(fileData, server);\n\tconst { record, version } = await getDefinitionService().create(ctx, {\n\t\tguid,\n\t\tprojectId: parsed.data.projectId,\n\t\townerId: locals.user.id,\n\t\tfileExt: extension.slice(1),\n\t\toriginalFilename: file.name,\n\t\tcomputeServerId: parsed.data.computeServerId,\n\t\tdisplayName: parsed.data.displayName.trim(),\n\t\tdescription: parsed.data.description,\n\t\tcategory: parsed.data.category,\n\t\ttags: parsed.data.tags,\n\t\tcoverImage: parsed.data.coverImage\n\t}, fileData, schema);\n\tlet coverImage = record.coverImage;\n\tif (imageFile instanceof File && imageFile.size > 0) {\n\t\tconst imageData = new Uint8Array(await imageFile.arrayBuffer());\n\t\tcoverImage = await getDefinitionService().saveCoverImage(ctx, guid, imageData);\n\t}\n\treturn created({\n\t\tguid,\n\t\tversion,\n\t\tcoverImage\n\t});\n});\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAYA;AACA,IAAI,iBAAiB,GAAG;AACxB,CAAC,OAAO;AACR,CAAC,WAAW;AACZ,CAAC;AACD,CAAC;AACD;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,4BAA4B,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AAC5E,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AACtC,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;AACnD,CAAC,IAAI,WAAW,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,uBAAuB,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACrK,CAAC,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE;AAChD,EAAE,GAAG,0BAA0B,CAAC,GAAG,CAAC;AACpC,EAAE,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC;AACxD,EAAE,QAAQ,EAAE,WAAW,GAAG,CAAC,WAAW,CAAC,GAAG,KAAK;AAC/C,EAAE,CAAC;AACH,CAAC,OAAO,UAAU,CAAC;AACnB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC;AAC7C,EAAE,UAAU,EAAE,IAAI,CAAC;AACnB,EAAE,CAAC;AACH,CAAC;AACD,SAAS,SAAS,CAAC,GAAG,EAAE;AACxB,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,MAAM;AACxB,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;AACjE,CAAC,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,MAAM;AACnC;AACA;AACG,IAAC,IAAI,GAAG,QAAQ,CAAC,6BAA6B,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAClF,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;AACtC,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE;AACzD,EAAE,QAAQ,EAAE,wBAAwB;AACpC,EAAE,UAAU,EAAE,aAAa;AAC3B,EAAE,KAAK,EAAE;AACT,EAAE,CAAC;AACH,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AACpC,CAAC,IAAI,SAAS,YAAY,IAAI,IAAI,SAAS,CAAC,IAAI,GAAG,mBAAmB,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,2BAA2B,EAAE,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;AACvL,CAAC,IAAI,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;AAC5C,CAAC,IAAI,CAAC,SAAS,EAAE;AACjB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC/F,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,yBAAyB,CAAC,GAAG,CAAC;AAC3D,EAAE,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,WAAW,CAAC;AACpE,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yCAAyC,CAAC;AACzG,EAAE,SAAS,GAAG,QAAQ,CAAC,EAAE;AACzB,CAAC;AACD,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,SAAS,CAAC;AACxE,CAAC,MAAM,MAAM,GAAG,2BAA2B,CAAC,SAAS,CAAC;AACtD,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;AAC5C,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;AAC5C,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;AACtC,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;AAC1C,EAAE,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACzC,EAAE,SAAS;AACX,EAAE,eAAe,EAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB;AACnD,EAAE,CAAC;AACH,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,MAAM,IAAI,GAAG,UAAU,EAAE;AAC1B,CAAC,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AAC1D,CAAC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;AACrH,CAAC,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC;AAC9D,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,oBAAoB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE;AACtE,EAAE,IAAI;AACN,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;AAClC,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AACzB,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7B,EAAE,gBAAgB,EAAE,IAAI,CAAC,IAAI;AAC7B,EAAE,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe;AAC9C,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;AAC7C,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AACtC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;AAChC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AACxB,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC;AAC1B,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC;AACrB,CAAC,IAAI,UAAU,GAAG,MAAM,CAAC,UAAU;AACnC,CAAC,IAAI,SAAS,YAAY,IAAI,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE;AACtD,EAAE,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC;AACjE,EAAE,UAAU,GAAG,MAAM,oBAAoB,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC;AAChF,CAAC;AACD,CAAC,OAAO,OAAO,CAAC;AAChB,EAAE,IAAI;AACN,EAAE,OAAO;AACT,EAAE;AACF,EAAE,CAAC;AACH,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/me/_server.ts.js-bYSmawXl.js

@@ -0,0 +1,37 @@
+import { a as apiRoute, b as requireCaller } from '../../../../../chunks/http.js-C465okFl.js';
+import { json } from '@sveltejs/kit';
+import '../../../../../chunks/api-errors.js-DR0LZUh9.js';
+import '../../../../../chunks/src.js-B12bUNyu.js';
+import 'zod';
+import '../../../../../chunks/providers.server.js-D8WK4DPA.js';
+import '../../../../../chunks/shared-server.js-BZy9KN6u.js';
+import '../../../../../chunks/schema.js-BVfByvmD.js';
+import '../../../../../chunks/core-BQtRL5GE.js-B9MmO4om.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+//#region src/routes/api/v1/me/+server.ts
+/**
+* Whoami. The first call a non-browser client makes, and the only way a token
+* holder can see which org their credential resolved into — `actingOrgId` is
+* derived per request from the caller's membership, not frozen at mint time.
+*/
+var GET = apiRoute("Failed to load identity", async ({ locals }) => {
+	const { ctx, user } = requireCaller(locals);
+	return json({
+		userId: user.id,
+		email: user.email,
+		displayName: locals.profile?.displayName,
+		actingOrgId: ctx.actingOrgId,
+		platformPermissions: ctx.platformPermissions,
+		orgPermissions: ctx.orgPermissions,
+		starredDefinitions: locals.profile?.starredDefinitions ?? []
+	});
+});
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-bYSmawXl.js.map

package/build/server/chunks/entries/endpoints/api/v1/me/_server.ts.js-bYSmawXl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-bYSmawXl.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/me/_server.ts.js"],"sourcesContent":["import { c as requireCaller, t as apiRoute } from \"../../../../../chunks/http.js\";\nimport \"../../../../../chunks/route.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/v1/me/+server.ts\n/**\n* Whoami. The first call a non-browser client makes, and the only way a token\n* holder can see which org their credential resolved into — `actingOrgId` is\n* derived per request from the caller's membership, not frozen at mint time.\n*/\nvar GET = apiRoute(\"Failed to load identity\", async ({ locals }) => {\n\tconst { ctx, user } = requireCaller(locals);\n\treturn json({\n\t\tuserId: user.id,\n\t\temail: user.email,\n\t\tdisplayName: locals.profile?.displayName,\n\t\tactingOrgId: ctx.actingOrgId,\n\t\tplatformPermissions: ctx.platformPermissions,\n\t\torgPermissions: ctx.orgPermissions,\n\t\tstarredDefinitions: locals.profile?.starredDefinitions ?? []\n\t});\n});\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAGA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,yBAAyB,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AAC5C,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;AACjB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK;AACnB,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW;AAC1C,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW;AAC9B,EAAE,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;AAC9C,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc;AACpC,EAAE,kBAAkB,EAAE,MAAM,CAAC,OAAO,EAAE,kBAAkB,IAAI;AAC5D,EAAE,CAAC;AACH,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/me/starred/_guid_/_server.ts.js-DMUlE04p.js

@@ -0,0 +1,34 @@
+import { v as getUserProfileStore } from '../../../../../../../chunks/providers.server.js-D8WK4DPA.js';
+import { a as apiRoute, b as requireCaller, r as requireParams, n as noContent } from '../../../../../../../chunks/http.js-C465okFl.js';
+import '../../../../../../../chunks/shared-server.js-BZy9KN6u.js';
+import '../../../../../../../chunks/src.js-B12bUNyu.js';
+import 'zod';
+import '../../../../../../../chunks/schema.js-BVfByvmD.js';
+import '../../../../../../../chunks/core-BQtRL5GE.js-B9MmO4om.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../../chunks/api-errors.js-DR0LZUh9.js';
+import '@sveltejs/kit';
+
+//#region src/routes/api/v1/me/starred/[guid]/+server.ts
+/** Star a definition for the calling user. Idempotent. */
+var PUT = apiRoute("Failed to star definition", async ({ params, locals }) => {
+	const { ctx, user } = requireCaller(locals);
+	const { guid } = requireParams(params, "guid");
+	await getUserProfileStore().starDefinition(ctx, user.id, guid);
+	return noContent();
+});
+/** Unstar a definition for the calling user. Idempotent. */
+var DELETE = apiRoute("Failed to unstar definition", async ({ params, locals }) => {
+	const { ctx, user } = requireCaller(locals);
+	const { guid } = requireParams(params, "guid");
+	await getUserProfileStore().unstarDefinition(ctx, user.id, guid);
+	return noContent();
+});
+
+export { DELETE, PUT };
+//# sourceMappingURL=_server.ts.js-DMUlE04p.js.map

package/build/server/chunks/entries/endpoints/api/v1/me/starred/_guid_/_server.ts.js-DMUlE04p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-DMUlE04p.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/me/starred/_guid_/_server.ts.js"],"sourcesContent":["import { S as getUserProfileStore } from \"../../../../../../../chunks/providers.server.js\";\nimport { a as noContent, c as requireCaller, l as requireParams, t as apiRoute } from \"../../../../../../../chunks/http.js\";\nimport \"../../../../../../../chunks/route.js\";\n//#region src/routes/api/v1/me/starred/[guid]/+server.ts\n/** Star a definition for the calling user. Idempotent. */\nvar PUT = apiRoute(\"Failed to star definition\", async ({ params, locals }) => {\n\tconst { ctx, user } = requireCaller(locals);\n\tconst { guid } = requireParams(params, \"guid\");\n\tawait getUserProfileStore().starDefinition(ctx, user.id, guid);\n\treturn noContent();\n});\n/** Unstar a definition for the calling user. Idempotent. */\nvar DELETE = apiRoute(\"Failed to unstar definition\", async ({ params, locals }) => {\n\tconst { ctx, user } = requireCaller(locals);\n\tconst { guid } = requireParams(params, \"guid\");\n\tawait getUserProfileStore().unstarDefinition(ctx, user.id, guid);\n\treturn noContent();\n});\n//#endregion\nexport { DELETE, PUT };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAGA;AACA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,2BAA2B,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC9E,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AAC5C,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC;AAC/C,CAAC,MAAM,mBAAmB,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;AAC/D,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;AACD;AACG,IAAC,MAAM,GAAG,QAAQ,CAAC,6BAA6B,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AACnF,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AAC5C,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC;AAC/C,CAAC,MAAM,mBAAmB,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;AACjE,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/orgs/_orgId_/_server.ts.js-4Lpiyj6S.js

@@ -0,0 +1,28 @@
+import { e as getOrganizationProvider } from '../../../../../../chunks/providers.server.js-D8WK4DPA.js';
+import { t as requireActingOrg } from '../../../../../../chunks/access.server.js-CzYRZk7k.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-DR0LZUh9.js';
+import { a as apiRoute } from '../../../../../../chunks/http.js-C465okFl.js';
+import { json } from '@sveltejs/kit';
+import '../../../../../../chunks/shared-server.js-BZy9KN6u.js';
+import '../../../../../../chunks/src.js-B12bUNyu.js';
+import 'zod';
+import '../../../../../../chunks/schema.js-BVfByvmD.js';
+import '../../../../../../chunks/core-BQtRL5GE.js-B9MmO4om.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+//#region src/routes/api/v1/orgs/[orgId]/+server.ts
+/** The acting org's record — name, slug, and branding asset URLs. */
+var GET = apiRoute("Failed to load organization", async ({ params, locals }) => {
+	const { ctx, orgId } = requireActingOrg(locals, params.orgId);
+	const org = await getOrganizationProvider().getOrg(ctx, orgId);
+	if (!org) apiError(404, ApiErrorCode.NOT_FOUND, "Organization not found");
+	return json(org);
+});
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-4Lpiyj6S.js.map

package/build/server/chunks/entries/endpoints/api/v1/orgs/_orgId_/_server.ts.js-4Lpiyj6S.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-4Lpiyj6S.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/orgs/_orgId_/_server.ts.js"],"sourcesContent":["import { m as getOrganizationProvider } from \"../../../../../../chunks/providers.server.js\";\nimport { c as requireActingOrg } from \"../../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { t as apiRoute } from \"../../../../../../chunks/http.js\";\nimport \"../../../../../../chunks/route.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/v1/orgs/[orgId]/+server.ts\n/** The acting org's record — name, slug, and branding asset URLs. */\nvar GET = apiRoute(\"Failed to load organization\", async ({ params, locals }) => {\n\tconst { ctx, orgId } = requireActingOrg(locals, params.orgId);\n\tconst org = await getOrganizationProvider().getOrg(ctx, orgId);\n\tif (!org) apiError(404, ApiErrorCode.NOT_FOUND, \"Organization not found\");\n\treturn json(org);\n});\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAMA;AACA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,6BAA6B,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAChF,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;AAC9D,CAAC,MAAM,GAAG,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC;AAC/D,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,wBAAwB,CAAC;AAC1E,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC;AACjB,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/orgs/_orgId_/assets/_kind_/_server.ts.js-bOhUMhsp.js

@@ -0,0 +1,72 @@
+import { p as OrgAssetKindSchema } from '../../../../../../../../chunks/src.js-B12bUNyu.js';
+import { e as getOrganizationProvider, Q as getOrgAssetService } from '../../../../../../../../chunks/providers.server.js-D8WK4DPA.js';
+import { u as requireManageOrgMembers, t as requireActingOrg } from '../../../../../../../../chunks/access.server.js-CzYRZk7k.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../../../chunks/api-errors.js-DR0LZUh9.js';
+import { M as MAX_IMAGE_FILE_SIZE } from '../../../../../../../../chunks/computeLimits.js-Du0cIhYp.js';
+import { a as apiRoute, e as requireUpload, n as noContent } from '../../../../../../../../chunks/http.js-C465okFl.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../../../../chunks/shared-server.js-BZy9KN6u.js';
+import '../../../../../../../../chunks/schema.js-BVfByvmD.js';
+import '../../../../../../../../chunks/core-BQtRL5GE.js-B9MmO4om.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/api/v1/orgs/[orgId]/assets/[kind]/+server.ts
+/**
+* Org branding assets, generic over kind (`logo`, `favicon`, …). Gated on
+* `manage_org_members` — org branding is an org-admin action.
+*
+* Raster images and SVG are both accepted. Every input is rasterized to WebP by
+* the shared transcoder inside the storage provider, so SVG carries no XSS
+* surface: no vector blob is ever stored or served. The allowlist below is the
+* HTTP gate; the rasterization is the security control.
+*/
+var ALLOWED_CONTENT_TYPES = /* @__PURE__ */ new Set([
+	"image/png",
+	"image/jpeg",
+	"image/webp",
+	"image/gif",
+	"image/svg+xml"
+]);
+function parseKind(params) {
+	const kind = OrgAssetKindSchema.safeParse(params.kind);
+	if (!kind.success) apiError(404, ApiErrorCode.NOT_FOUND, `Unknown asset kind '${params.kind}'`);
+	return kind.data;
+}
+var POST = apiRoute("Failed to upload asset", async ({ params, request, locals }) => {
+	requireManageOrgMembers(locals);
+	const kind = parseKind(params);
+	const { ctx, orgId } = requireActingOrg(locals, params.orgId);
+	if (!await getOrganizationProvider().getOrg(ctx, orgId)) apiError(404, ApiErrorCode.NOT_FOUND, "Organization not found");
+	const { file } = requireUpload(await request.formData(), "image", {
+		maxBytes: MAX_IMAGE_FILE_SIZE,
+		contentTypes: {
+			allowed: ALLOWED_CONTENT_TYPES,
+			message: "Unsupported image type. Allowed: PNG, JPG, WebP, GIF, SVG"
+		},
+		label: "Image"
+	});
+	const bytes = new Uint8Array(await file.arrayBuffer());
+	const url = await getOrgAssetService().saveAsset(ctx, orgId, kind, bytes, file.type);
+	return json({
+		kind,
+		url
+	});
+});
+var DELETE = apiRoute("Failed to remove asset", async ({ params, locals }) => {
+	requireManageOrgMembers(locals);
+	const kind = parseKind(params);
+	const { ctx, orgId } = requireActingOrg(locals, params.orgId);
+	await getOrgAssetService().removeAsset(ctx, orgId, kind);
+	return noContent();
+});
+
+export { DELETE, POST };
+//# sourceMappingURL=_server.ts.js-bOhUMhsp.js.map

package/build/server/chunks/entries/endpoints/api/v1/orgs/_orgId_/assets/_kind_/_server.ts.js-bOhUMhsp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-bOhUMhsp.js","sources":["../../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/orgs/_orgId_/assets/_kind_/_server.ts.js"],"sourcesContent":["import { C as OrgAssetKindSchema } from \"../../../../../../../../chunks/src.js\";\nimport { m as getOrganizationProvider, p as getOrgAssetService } from \"../../../../../../../../chunks/providers.server.js\";\nimport { C as requireManageOrgMembers, c as requireActingOrg } from \"../../../../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../../../chunks/api-errors.js\";\nimport { o as MAX_IMAGE_FILE_SIZE } from \"../../../../../../../../chunks/computeLimits.js\";\nimport { a as noContent, t as apiRoute, u as requireUpload } from \"../../../../../../../../chunks/http.js\";\nimport \"../../../../../../../../chunks/admin-config.js\";\nimport \"../../../../../../../../chunks/route.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/v1/orgs/[orgId]/assets/[kind]/+server.ts\n/**\n* Org branding assets, generic over kind (`logo`, `favicon`, …). Gated on\n* `manage_org_members` — org branding is an org-admin action.\n*\n* Raster images and SVG are both accepted. Every input is rasterized to WebP by\n* the shared transcoder inside the storage provider, so SVG carries no XSS\n* surface: no vector blob is ever stored or served. The allowlist below is the\n* HTTP gate; the rasterization is the security control.\n*/\nvar ALLOWED_CONTENT_TYPES = /* @__PURE__ */ new Set([\n\t\"image/png\",\n\t\"image/jpeg\",\n\t\"image/webp\",\n\t\"image/gif\",\n\t\"image/svg+xml\"\n]);\nfunction parseKind(params) {\n\tconst kind = OrgAssetKindSchema.safeParse(params.kind);\n\tif (!kind.success) apiError(404, ApiErrorCode.NOT_FOUND, `Unknown asset kind '${params.kind}'`);\n\treturn kind.data;\n}\nvar POST = apiRoute(\"Failed to upload asset\", async ({ params, request, locals }) => {\n\trequireManageOrgMembers(locals);\n\tconst kind = parseKind(params);\n\tconst { ctx, orgId } = requireActingOrg(locals, params.orgId);\n\tif (!await getOrganizationProvider().getOrg(ctx, orgId)) apiError(404, ApiErrorCode.NOT_FOUND, \"Organization not found\");\n\tconst { file } = requireUpload(await request.formData(), \"image\", {\n\t\tmaxBytes: MAX_IMAGE_FILE_SIZE,\n\t\tcontentTypes: {\n\t\t\tallowed: ALLOWED_CONTENT_TYPES,\n\t\t\tmessage: \"Unsupported image type. Allowed: PNG, JPG, WebP, GIF, SVG\"\n\t\t},\n\t\tlabel: \"Image\"\n\t});\n\tconst bytes = new Uint8Array(await file.arrayBuffer());\n\tconst url = await getOrgAssetService().saveAsset(ctx, orgId, kind, bytes, file.type);\n\treturn json({\n\t\tkind,\n\t\turl\n\t});\n});\nvar DELETE = apiRoute(\"Failed to remove asset\", async ({ params, locals }) => {\n\trequireManageOrgMembers(locals);\n\tconst kind = parseKind(params);\n\tconst { ctx, orgId } = requireActingOrg(locals, params.orgId);\n\tawait getOrgAssetService().removeAsset(ctx, orgId, kind);\n\treturn noContent();\n});\n//#endregion\nexport { DELETE, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AASA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,qBAAqB,mBAAmB,IAAI,GAAG,CAAC;AACpD,CAAC,WAAW;AACZ,CAAC,YAAY;AACb,CAAC,YAAY;AACb,CAAC,WAAW;AACZ,CAAC;AACD,CAAC,CAAC;AACF,SAAS,SAAS,CAAC,MAAM,EAAE;AAC3B,CAAC,MAAM,IAAI,GAAG,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACvD,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAChG,CAAC,OAAO,IAAI,CAAC,IAAI;AACjB;AACG,IAAC,IAAI,GAAG,QAAQ,CAAC,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrF,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC;AAC/B,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;AAC9D,CAAC,IAAI,CAAC,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,wBAAwB,CAAC;AACzH,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE;AACnE,EAAE,QAAQ,EAAE,mBAAmB;AAC/B,EAAE,YAAY,EAAE;AAChB,GAAG,OAAO,EAAE,qBAAqB;AACjC,GAAG,OAAO,EAAE;AACZ,GAAG;AACH,EAAE,KAAK,EAAE;AACT,EAAE,CAAC;AACH,CAAC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AACvD,CAAC,MAAM,GAAG,GAAG,MAAM,kBAAkB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC;AACrF,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,IAAI;AACN,EAAE;AACF,EAAE,CAAC;AACH,CAAC;AACE,IAAC,MAAM,GAAG,QAAQ,CAAC,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC9E,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC;AAC/B,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;AAC9D,CAAC,MAAM,kBAAkB,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC;AACzD,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;;;;"}