@selvajs/selva 4.17.0 → 4.18.0

package/build/server/chunks/entries/endpoints/api/admin/compute/status/_server.ts.js-C6zODk6W.js

@@ -0,0 +1,95 @@
+import '../../../../../../chunks/src.js-Cf1j97Z6.js';
+import { r as getComputeServerConfigStore } from '../../../../../../chunks/providers.server.js-DQ1uVPlR.js';
+import { f as findServerById } from '../../../../../../chunks/limits.js-chQOq2eQ.js';
+import { n as requireManageCompute } from '../../../../../../chunks/access.js-DFbcJ7ZG.js';
+import { h, v as v$1 } from '../../../../../../chunks/schema.js-YChb_4u9.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-4HDFN7ny.js';
+import '../../../../../../chunks/api.js-BF_dHNnR.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../../chunks/shared-server.js-BGs15m2r.js';
+import '../../../../../../chunks/definitions.js-DK6GL3vh.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/api/admin/compute/status/+server.ts
+var GET = async ({ url, locals }) => {
+	requireManageCompute(locals);
+	const serverId = url.searchParams.get("serverId");
+	if (!serverId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "serverId required");
+	const store = getComputeServerConfigStore();
+	const config = await store.getConfig(locals.ctx);
+	const server = findServerById(config, serverId);
+	if (!server) apiError(404, ApiErrorCode.NOT_FOUND, "Server not found");
+	const apiKey = server.hasApiKey ? await store.getServerApiKey(locals.ctx, server.id) : void 0;
+	const stats = new h(server.serverUrl, apiKey);
+	try {
+		const probe = await stats.probeServer();
+		if (!probe.online) {
+			const failure = v$1(probe);
+			return json({
+				reachable: false,
+				ready: false,
+				retryable: failure?.retryable ?? true,
+				failureReason: failure?.verdict ?? null,
+				failureSummary: failure?.summary ?? null,
+				rhinoVersion: null,
+				computeVersion: null,
+				selvaInstalled: false,
+				selvaVersion: null,
+				plugins: {},
+				activeChildren: null,
+				idleSpanSeconds: null
+			});
+		}
+		const [version, plugins, activeChildren, idleSpanSeconds] = await Promise.all([
+			stats.getVersion(),
+			stats.getInstalledPlugins("gh"),
+			stats.getActiveChildren({ initialize: false }),
+			stats.getIdleSpan()
+		]);
+		const inventoryLoaded = plugins !== null && Object.keys(plugins).length > 0;
+		const installed = plugins ?? {};
+		const selvaVersion = installed["Selva"] ?? null;
+		return json({
+			reachable: true,
+			ready: inventoryLoaded,
+			retryable: true,
+			failureReason: null,
+			failureSummary: null,
+			rhinoVersion: version?.rhino ?? null,
+			computeVersion: version?.compute ?? null,
+			selvaInstalled: selvaVersion !== null,
+			selvaVersion,
+			plugins: installed,
+			activeChildren,
+			idleSpanSeconds
+		});
+	} catch {
+		return json({
+			reachable: false,
+			ready: false,
+			retryable: true,
+			failureReason: null,
+			failureSummary: null,
+			rhinoVersion: null,
+			computeVersion: null,
+			selvaInstalled: false,
+			selvaVersion: null,
+			plugins: {},
+			activeChildren: null,
+			idleSpanSeconds: null
+		});
+	} finally {
+		await stats.dispose();
+	}
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-C6zODk6W.js.map

package/build/server/chunks/entries/endpoints/api/admin/compute/status/_server.ts.js-C6zODk6W.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-C6zODk6W.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/compute/status/_server.ts.js"],"sourcesContent":["import \"../../../../../../chunks/src.js\";\nimport { a as getComputeServerConfigStore } from \"../../../../../../chunks/providers.server.js\";\nimport { i as findServerById } from \"../../../../../../chunks/limits.js\";\nimport { y as requireManageCompute } from \"../../../../../../chunks/access.js\";\nimport { C as v, p as h } from \"../../../../../../chunks/schema.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport \"../../../../../../chunks/access2.server.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/admin/compute/status/+server.ts\nvar GET = async ({ url, locals }) => {\n\trequireManageCompute(locals);\n\tconst serverId = url.searchParams.get(\"serverId\");\n\tif (!serverId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"serverId required\");\n\tconst store = getComputeServerConfigStore();\n\tconst config = await store.getConfig(locals.ctx);\n\tconst server = findServerById(config, serverId);\n\tif (!server) apiError(404, ApiErrorCode.NOT_FOUND, \"Server not found\");\n\tconst apiKey = server.hasApiKey ? await store.getServerApiKey(locals.ctx, server.id) : void 0;\n\tconst stats = new h(server.serverUrl, apiKey);\n\ttry {\n\t\tconst probe = await stats.probeServer();\n\t\tif (!probe.online) {\n\t\t\tconst failure = v(probe);\n\t\t\treturn json({\n\t\t\t\treachable: false,\n\t\t\t\tready: false,\n\t\t\t\tretryable: failure?.retryable ?? true,\n\t\t\t\tfailureReason: failure?.verdict ?? null,\n\t\t\t\tfailureSummary: failure?.summary ?? null,\n\t\t\t\trhinoVersion: null,\n\t\t\t\tcomputeVersion: null,\n\t\t\t\tselvaInstalled: false,\n\t\t\t\tselvaVersion: null,\n\t\t\t\tplugins: {},\n\t\t\t\tactiveChildren: null,\n\t\t\t\tidleSpanSeconds: null\n\t\t\t});\n\t\t}\n\t\tconst [version, plugins, activeChildren, idleSpanSeconds] = await Promise.all([\n\t\t\tstats.getVersion(),\n\t\t\tstats.getInstalledPlugins(\"gh\"),\n\t\t\tstats.getActiveChildren({ initialize: false }),\n\t\t\tstats.getIdleSpan()\n\t\t]);\n\t\tconst inventoryLoaded = plugins !== null && Object.keys(plugins).length > 0;\n\t\tconst installed = plugins ?? {};\n\t\tconst selvaVersion = installed[\"Selva\"] ?? null;\n\t\treturn json({\n\t\t\treachable: true,\n\t\t\tready: inventoryLoaded,\n\t\t\tretryable: true,\n\t\t\tfailureReason: null,\n\t\t\tfailureSummary: null,\n\t\t\trhinoVersion: version?.rhino ?? null,\n\t\t\tcomputeVersion: version?.compute ?? null,\n\t\t\tselvaInstalled: selvaVersion !== null,\n\t\t\tselvaVersion,\n\t\t\tplugins: installed,\n\t\t\tactiveChildren,\n\t\t\tidleSpanSeconds\n\t\t});\n\t} catch {\n\t\treturn json({\n\t\t\treachable: false,\n\t\t\tready: false,\n\t\t\tretryable: true,\n\t\t\tfailureReason: null,\n\t\t\tfailureSummary: null,\n\t\t\trhinoVersion: null,\n\t\t\tcomputeVersion: null,\n\t\t\tselvaInstalled: false,\n\t\t\tselvaVersion: null,\n\t\t\tplugins: {},\n\t\t\tactiveChildren: null,\n\t\t\tidleSpanSeconds: null\n\t\t});\n\t} finally {\n\t\tawait stats.dispose();\n\t}\n};\n//#endregion\nexport { GET };\n"],"names":["v"],"mappings":";;;;;;;;;;;;;;;;;;;;AAQA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK;AACrC,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;AAClD,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;AAClF,CAAC,MAAM,KAAK,GAAG,2BAA2B,EAAE;AAC5C,CAAC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;AACjD,CAAC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC;AAChD,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,kBAAkB,CAAC;AACvE,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM;AAC9F,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;AAC9C,CAAC,IAAI;AACL,EAAE,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;AACzC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;AACrB,GAAG,MAAM,OAAO,GAAGA,GAAC,CAAC,KAAK,CAAC;AAC3B,GAAG,OAAO,IAAI,CAAC;AACf,IAAI,SAAS,EAAE,KAAK;AACpB,IAAI,KAAK,EAAE,KAAK;AAChB,IAAI,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,IAAI;AACzC,IAAI,aAAa,EAAE,OAAO,EAAE,OAAO,IAAI,IAAI;AAC3C,IAAI,cAAc,EAAE,OAAO,EAAE,OAAO,IAAI,IAAI;AAC5C,IAAI,YAAY,EAAE,IAAI;AACtB,IAAI,cAAc,EAAE,IAAI;AACxB,IAAI,cAAc,EAAE,KAAK;AACzB,IAAI,YAAY,EAAE,IAAI;AACtB,IAAI,OAAO,EAAE,EAAE;AACf,IAAI,cAAc,EAAE,IAAI;AACxB,IAAI,eAAe,EAAE;AACrB,IAAI,CAAC;AACL,EAAE;AACF,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AAChF,GAAG,KAAK,CAAC,UAAU,EAAE;AACrB,GAAG,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC;AAClC,GAAG,KAAK,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AACjD,GAAG,KAAK,CAAC,WAAW;AACpB,GAAG,CAAC;AACJ,EAAE,MAAM,eAAe,GAAG,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;AAC7E,EAAE,MAAM,SAAS,GAAG,OAAO,IAAI,EAAE;AACjC,EAAE,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,IAAI;AACjD,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,SAAS,EAAE,IAAI;AAClB,GAAG,KAAK,EAAE,eAAe;AACzB,GAAG,SAAS,EAAE,IAAI;AAClB,GAAG,aAAa,EAAE,IAAI;AACtB,GAAG,cAAc,EAAE,IAAI;AACvB,GAAG,YAAY,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI;AACvC,GAAG,cAAc,EAAE,OAAO,EAAE,OAAO,IAAI,IAAI;AAC3C,GAAG,cAAc,EAAE,YAAY,KAAK,IAAI;AACxC,GAAG,YAAY;AACf,GAAG,OAAO,EAAE,SAAS;AACrB,GAAG,cAAc;AACjB,GAAG;AACH,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,SAAS,EAAE,KAAK;AACnB,GAAG,KAAK,EAAE,KAAK;AACf,GAAG,SAAS,EAAE,IAAI;AAClB,GAAG,aAAa,EAAE,IAAI;AACtB,GAAG,cAAc,EAAE,IAAI;AACvB,GAAG,YAAY,EAAE,IAAI;AACrB,GAAG,cAAc,EAAE,IAAI;AACvB,GAAG,cAAc,EAAE,KAAK;AACxB,GAAG,YAAY,EAAE,IAAI;AACrB,GAAG,OAAO,EAAE,EAAE;AACd,GAAG,cAAc,EAAE,IAAI;AACvB,GAAG,eAAe,EAAE;AACpB,GAAG,CAAC;AACJ,CAAC,CAAC,SAAS;AACX,EAAE,MAAM,KAAK,CAAC,OAAO,EAAE;AACvB,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/orgs/_id_/_server.ts.js-CrI5Wz5I.js

@@ -0,0 +1,45 @@
+import { U as UpdateOrgSchema, P as ProviderError } from '../../../../../../chunks/src.js-Cf1j97Z6.js';
+import { e as getOrganizationProvider } from '../../../../../../chunks/providers.server.js-DQ1uVPlR.js';
+import { o as requireInstanceAdmin } from '../../../../../../chunks/access.js-DFbcJ7ZG.js';
+import { r as requireParams, p as parseBody } from '../../../../../../chunks/request.js-6TyjZh9m.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-4HDFN7ny.js';
+import '../../../../../../chunks/api.js-BF_dHNnR.js';
+import { json } from '@sveltejs/kit';
+import { a as apiRoute, n as noContent } from '../../../../../../chunks/http.js-DFpXUbjA.js';
+import 'zod';
+import '../../../../../../chunks/shared-server.js-BGs15m2r.js';
+import '../../../../../../chunks/definitions.js-DK6GL3vh.js';
+import '../../../../../../chunks/schema.js-YChb_4u9.js';
+import 'node:crypto';
+import '../../../../../../chunks/limits.js-chQOq2eQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/api/admin/orgs/[id]/+server.ts
+var PATCH = apiRoute("Failed to update org", async ({ params, request, locals }) => {
+	requireInstanceAdmin(locals);
+	const { id } = requireParams(params, "id");
+	const ctx = locals.ctx;
+	const patch = await parseBody(request, UpdateOrgSchema);
+	try {
+		await getOrganizationProvider().updateOrg(ctx, id, patch);
+	} catch (err) {
+		if (err instanceof ProviderError && err.statusCode === 409) apiError(409, ApiErrorCode.CONFLICT, err.message);
+		throw err;
+	}
+	return json(await getOrganizationProvider().getOrg(ctx, id));
+});
+var DELETE = apiRoute("Failed to delete org", async ({ params, locals }) => {
+	requireInstanceAdmin(locals);
+	const { id } = requireParams(params, "id");
+	await getOrganizationProvider().deleteOrg(locals.ctx, id);
+	return noContent();
+});
+
+export { DELETE, PATCH };
+//# sourceMappingURL=_server.ts.js-CrI5Wz5I.js.map

package/build/server/chunks/entries/endpoints/api/admin/orgs/_id_/_server.ts.js-CrI5Wz5I.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CrI5Wz5I.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/orgs/_id_/_server.ts.js"],"sourcesContent":["import { E as UpdateOrgSchema, i as ProviderError } from \"../../../../../../chunks/src.js\";\nimport { h as getOrganizationProvider } from \"../../../../../../chunks/providers.server.js\";\nimport { v as requireInstanceAdmin } from \"../../../../../../chunks/access.js\";\nimport { a as requireParams, n as parseBody } from \"../../../../../../chunks/request.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport \"../../../../../../chunks/access2.server.js\";\nimport { r as noContent, t as apiRoute } from \"../../../../../../chunks/http.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/admin/orgs/[id]/+server.ts\nvar PATCH = apiRoute(\"Failed to update org\", async ({ params, request, locals }) => {\n\trequireInstanceAdmin(locals);\n\tconst { id } = requireParams(params, \"id\");\n\tconst ctx = locals.ctx;\n\tconst patch = await parseBody(request, UpdateOrgSchema);\n\ttry {\n\t\tawait getOrganizationProvider().updateOrg(ctx, id, patch);\n\t} catch (err) {\n\t\tif (err instanceof ProviderError && err.statusCode === 409) apiError(409, ApiErrorCode.CONFLICT, err.message);\n\t\tthrow err;\n\t}\n\treturn json(await getOrganizationProvider().getOrg(ctx, id));\n});\nvar DELETE = apiRoute(\"Failed to delete org\", async ({ params, locals }) => {\n\trequireInstanceAdmin(locals);\n\tconst { id } = requireParams(params, \"id\");\n\tawait getOrganizationProvider().deleteOrg(locals.ctx, id);\n\treturn noContent();\n});\n//#endregion\nexport { DELETE, PATCH };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAQA;AACG,IAAC,KAAK,GAAG,QAAQ,CAAC,sBAAsB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpF,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC;AAC3C,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC;AACxD,CAAC,IAAI;AACL,EAAE,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC;AAC3D,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC;AAC/G,EAAE,MAAM,GAAG;AACX,CAAC;AACD,CAAC,OAAO,IAAI,CAAC,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAC7D,CAAC;AACE,IAAC,MAAM,GAAG,QAAQ,CAAC,sBAAsB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC5E,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC;AAC3C,CAAC,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AAC1D,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/orgs/_server.ts.js-DHuvPft7.js

@@ -0,0 +1,68 @@
+import { C as CreateOrgSchema, P as ProviderError } from '../../../../../chunks/src.js-Cf1j97Z6.js';
+import { e as getOrganizationProvider } from '../../../../../chunks/providers.server.js-DQ1uVPlR.js';
+import { o as requireInstanceAdmin } from '../../../../../chunks/access.js-DFbcJ7ZG.js';
+import { p as parseBody } from '../../../../../chunks/request.js-6TyjZh9m.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-4HDFN7ny.js';
+import '../../../../../chunks/api.js-BF_dHNnR.js';
+import { json } from '@sveltejs/kit';
+import { a as apiRoute, c as created } from '../../../../../chunks/http.js-DFpXUbjA.js';
+import { randomUUID } from 'node:crypto';
+import 'zod';
+import '../../../../../chunks/shared-server.js-BGs15m2r.js';
+import '../../../../../chunks/definitions.js-DK6GL3vh.js';
+import '../../../../../chunks/schema.js-YChb_4u9.js';
+import '../../../../../chunks/limits.js-chQOq2eQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/api/admin/orgs/+server.ts
+/**
+* Spec §8 — instance-admin-only org management. Multi-tenant deployments use
+* this to create / list orgs out of band of the per-org invite flow. Self-
+* hosted single-tenant instances rarely call these.
+*/
+var GET = apiRoute("Failed to list orgs", async ({ locals, url }) => {
+	requireInstanceAdmin(locals);
+	const rawLimit = Number(url.searchParams.get("limit") ?? 200);
+	const limit = Number.isFinite(rawLimit) ? Math.min(Math.max(rawLimit, 1), 200) : 200;
+	const cursor = url.searchParams.get("cursor") ?? void 0;
+	const page = await getOrganizationProvider().listOrgs(locals.ctx, {
+		limit,
+		cursor
+	});
+	return json({
+		orgs: page.items,
+		nextCursor: page.nextCursor
+	});
+});
+var POST = apiRoute("Failed to create org", async ({ request, locals }) => {
+	const user = requireInstanceAdmin(locals);
+	const input = await parseBody(request, CreateOrgSchema);
+	const now = (/* @__PURE__ */ new Date()).toISOString();
+	const org = {
+		id: randomUUID(),
+		name: input.name,
+		slug: input.slug,
+		ownerId: user.id,
+		createdBy: user.id,
+		updatedBy: user.id,
+		createdAt: now,
+		updatedAt: now,
+		deletedAt: null
+	};
+	try {
+		await getOrganizationProvider().createOrg(locals.ctx, org);
+	} catch (err) {
+		if (err instanceof ProviderError && err.statusCode === 409) apiError(409, ApiErrorCode.CONFLICT, err.message);
+		throw err;
+	}
+	return created(org);
+});
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-DHuvPft7.js.map

package/build/server/chunks/entries/endpoints/api/admin/orgs/_server.ts.js-DHuvPft7.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-DHuvPft7.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/orgs/_server.ts.js"],"sourcesContent":["import { i as ProviderError, y as CreateOrgSchema } from \"../../../../../chunks/src.js\";\nimport { h as getOrganizationProvider } from \"../../../../../chunks/providers.server.js\";\nimport { v as requireInstanceAdmin } from \"../../../../../chunks/access.js\";\nimport { n as parseBody } from \"../../../../../chunks/request.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport \"../../../../../chunks/access2.server.js\";\nimport { n as created, t as apiRoute } from \"../../../../../chunks/http.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/api/admin/orgs/+server.ts\n/**\n* Spec §8 — instance-admin-only org management. Multi-tenant deployments use\n* this to create / list orgs out of band of the per-org invite flow. Self-\n* hosted single-tenant instances rarely call these.\n*/\nvar GET = apiRoute(\"Failed to list orgs\", async ({ locals, url }) => {\n\trequireInstanceAdmin(locals);\n\tconst rawLimit = Number(url.searchParams.get(\"limit\") ?? 200);\n\tconst limit = Number.isFinite(rawLimit) ? Math.min(Math.max(rawLimit, 1), 200) : 200;\n\tconst cursor = url.searchParams.get(\"cursor\") ?? void 0;\n\tconst page = await getOrganizationProvider().listOrgs(locals.ctx, {\n\t\tlimit,\n\t\tcursor\n\t});\n\treturn json({\n\t\torgs: page.items,\n\t\tnextCursor: page.nextCursor\n\t});\n});\nvar POST = apiRoute(\"Failed to create org\", async ({ request, locals }) => {\n\tconst user = requireInstanceAdmin(locals);\n\tconst input = await parseBody(request, CreateOrgSchema);\n\tconst now = (/* @__PURE__ */ new Date()).toISOString();\n\tconst org = {\n\t\tid: randomUUID(),\n\t\tname: input.name,\n\t\tslug: input.slug,\n\t\townerId: user.id,\n\t\tcreatedBy: user.id,\n\t\tupdatedBy: user.id,\n\t\tcreatedAt: now,\n\t\tupdatedAt: now,\n\t\tdeletedAt: null\n\t};\n\ttry {\n\t\tawait getOrganizationProvider().createOrg(locals.ctx, org);\n\t} catch (err) {\n\t\tif (err instanceof ProviderError && err.statusCode === 409) apiError(409, ApiErrorCode.CONFLICT, err.message);\n\t\tthrow err;\n\t}\n\treturn created(org);\n});\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AASA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,qBAAqB,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACrE,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC;AAC9D,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG;AACrF,CAAC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC;AACxD,CAAC,MAAM,IAAI,GAAG,MAAM,uBAAuB,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE;AACnE,EAAE,KAAK;AACP,EAAE;AACF,EAAE,CAAC;AACH,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK;AAClB,EAAE,UAAU,EAAE,IAAI,CAAC;AACnB,EAAE,CAAC;AACH,CAAC;AACE,IAAC,IAAI,GAAG,QAAQ,CAAC,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC3E,CAAC,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC1C,CAAC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC;AACxD,CAAC,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACvD,CAAC,MAAM,GAAG,GAAG;AACb,EAAE,EAAE,EAAE,UAAU,EAAE;AAClB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;AAClB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;AAClB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;AAClB,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;AACpB,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;AACpB,EAAE,SAAS,EAAE,GAAG;AAChB,EAAE,SAAS,EAAE,GAAG;AAChB,EAAE,SAAS,EAAE;AACb,EAAE;AACF,CAAC,IAAI;AACL,EAAE,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC;AAC5D,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC;AAC/G,EAAE,MAAM,GAAG;AACX,CAAC;AACD,CAAC,OAAO,OAAO,CAAC,GAAG,CAAC;AACpB,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/projects/_id_/_server.ts.js-C0jE6itS.js

@@ -0,0 +1,61 @@
+import { s as slugify, S as SYSTEM_CONTEXT } from '../../../../../../chunks/src.js-Cf1j97Z6.js';
+import { f as getProjectProvider } from '../../../../../../chunks/providers.server.js-DQ1uVPlR.js';
+import { o as requireInstanceAdmin } from '../../../../../../chunks/access.js-DFbcJ7ZG.js';
+import { r as requireParams, p as parseBody } from '../../../../../../chunks/request.js-6TyjZh9m.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-4HDFN7ny.js';
+import '../../../../../../chunks/api.js-BF_dHNnR.js';
+import { json } from '@sveltejs/kit';
+import { a as apiRoute, n as noContent } from '../../../../../../chunks/http.js-DFpXUbjA.js';
+import { z } from 'zod';
+import '../../../../../../chunks/shared-server.js-BGs15m2r.js';
+import '../../../../../../chunks/definitions.js-DK6GL3vh.js';
+import '../../../../../../chunks/schema.js-YChb_4u9.js';
+import 'node:crypto';
+import '../../../../../../chunks/limits.js-chQOq2eQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/api/admin/projects/[id]/+server.ts
+var UpdatePlatformProjectBody = z.object({
+	name: z.string().min(1).max(128).trim(),
+	description: z.string().max(2e3).nullish()
+}).partial();
+async function loadPlatformProjectOr404(id) {
+	const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, id);
+	if (!project || project.visibility !== "platform") apiError(404, ApiErrorCode.NOT_FOUND, "Platform project not found");
+	return project;
+}
+var GET = apiRoute("Failed to load platform project", async ({ params, locals }) => {
+	requireInstanceAdmin(locals);
+	const { id } = requireParams(params, "id");
+	return json(await loadPlatformProjectOr404(id));
+});
+var PATCH = apiRoute("Failed to update platform project", async ({ params, request, locals }) => {
+	requireInstanceAdmin(locals);
+	const { id } = requireParams(params, "id");
+	const input = await parseBody(request, UpdatePlatformProjectBody);
+	await loadPlatformProjectOr404(id);
+	const patch = {};
+	if (input.name !== void 0) {
+		patch.name = input.name;
+		patch.slug = slugify(input.name);
+	}
+	if (input.description !== void 0) patch.description = input.description ?? void 0;
+	await getProjectProvider().updateProject(SYSTEM_CONTEXT, id, patch);
+	return noContent();
+});
+var DELETE = apiRoute("Failed to delete platform project", async ({ params, locals }) => {
+	requireInstanceAdmin(locals);
+	const { id } = requireParams(params, "id");
+	await loadPlatformProjectOr404(id);
+	await getProjectProvider().deleteProject(SYSTEM_CONTEXT, id);
+	return noContent();
+});
+
+export { DELETE, GET, PATCH };
+//# sourceMappingURL=_server.ts.js-C0jE6itS.js.map

package/build/server/chunks/entries/endpoints/api/admin/projects/_id_/_server.ts.js-C0jE6itS.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-C0jE6itS.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/projects/_id_/_server.ts.js"],"sourcesContent":["import { D as slugify, t as SYSTEM_CONTEXT } from \"../../../../../../chunks/src.js\";\nimport { v as getProjectProvider } from \"../../../../../../chunks/providers.server.js\";\nimport { v as requireInstanceAdmin } from \"../../../../../../chunks/access.js\";\nimport { a as requireParams, n as parseBody } from \"../../../../../../chunks/request.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport \"../../../../../../chunks/access2.server.js\";\nimport { r as noContent, t as apiRoute } from \"../../../../../../chunks/http.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\n//#region src/routes/api/admin/projects/[id]/+server.ts\nvar UpdatePlatformProjectBody = z.object({\n\tname: z.string().min(1).max(128).trim(),\n\tdescription: z.string().max(2e3).nullish()\n}).partial();\nasync function loadPlatformProjectOr404(id) {\n\tconst project = await getProjectProvider().getProject(SYSTEM_CONTEXT, id);\n\tif (!project || project.visibility !== \"platform\") apiError(404, ApiErrorCode.NOT_FOUND, \"Platform project not found\");\n\treturn project;\n}\nvar GET = apiRoute(\"Failed to load platform project\", async ({ params, locals }) => {\n\trequireInstanceAdmin(locals);\n\tconst { id } = requireParams(params, \"id\");\n\treturn json(await loadPlatformProjectOr404(id));\n});\nvar PATCH = apiRoute(\"Failed to update platform project\", async ({ params, request, locals }) => {\n\trequireInstanceAdmin(locals);\n\tconst { id } = requireParams(params, \"id\");\n\tconst input = await parseBody(request, UpdatePlatformProjectBody);\n\tawait loadPlatformProjectOr404(id);\n\tconst patch = {};\n\tif (input.name !== void 0) {\n\t\tpatch.name = input.name;\n\t\tpatch.slug = slugify(input.name);\n\t}\n\tif (input.description !== void 0) patch.description = input.description ?? void 0;\n\tawait getProjectProvider().updateProject(SYSTEM_CONTEXT, id, patch);\n\treturn noContent();\n});\nvar DELETE = apiRoute(\"Failed to delete platform project\", async ({ params, locals }) => {\n\trequireInstanceAdmin(locals);\n\tconst { id } = requireParams(params, \"id\");\n\tawait loadPlatformProjectOr404(id);\n\tawait getProjectProvider().deleteProject(SYSTEM_CONTEXT, id);\n\treturn noContent();\n});\n//#endregion\nexport { DELETE, GET, PATCH };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AASA;AACA,IAAI,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;AACzC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACxC,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO;AACzC,CAAC,CAAC,CAAC,OAAO,EAAE;AACZ,eAAe,wBAAwB,CAAC,EAAE,EAAE;AAC5C,CAAC,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC;AAC1E,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,4BAA4B,CAAC;AACvH,CAAC,OAAO,OAAO;AACf;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,iCAAiC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AACpF,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC;AAC3C,CAAC,OAAO,IAAI,CAAC,MAAM,wBAAwB,CAAC,EAAE,CAAC,CAAC;AAChD,CAAC;AACE,IAAC,KAAK,GAAG,QAAQ,CAAC,mCAAmC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACjG,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC;AAC3C,CAAC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,yBAAyB,CAAC;AAClE,CAAC,MAAM,wBAAwB,CAAC,EAAE,CAAC;AACnC,CAAC,MAAM,KAAK,GAAG,EAAE;AACjB,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE;AAC5B,EAAE,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI;AACzB,EAAE,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;AAClC,CAAC;AACD,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,EAAE,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC;AAClF,CAAC,MAAM,kBAAkB,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,EAAE,KAAK,CAAC;AACpE,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;AACE,IAAC,MAAM,GAAG,QAAQ,CAAC,mCAAmC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AACzF,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC;AAC3C,CAAC,MAAM,wBAAwB,CAAC,EAAE,CAAC;AACnC,CAAC,MAAM,kBAAkB,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC;AAC7D,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/projects/_id_/grants/_grantId_/_server.ts.js-CwatXjH0.js

@@ -0,0 +1,33 @@
+import { S as SYSTEM_CONTEXT } from '../../../../../../../../chunks/src.js-Cf1j97Z6.js';
+import { j as flag, s as getPlatformProjectGrantStore } from '../../../../../../../../chunks/providers.server.js-DQ1uVPlR.js';
+import { o as requireInstanceAdmin } from '../../../../../../../../chunks/access.js-DFbcJ7ZG.js';
+import { r as requireParams } from '../../../../../../../../chunks/request.js-6TyjZh9m.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../../../chunks/api-errors.js-4HDFN7ny.js';
+import '../../../../../../../../chunks/api.js-BF_dHNnR.js';
+import '@sveltejs/kit';
+import { a as apiRoute, n as noContent } from '../../../../../../../../chunks/http.js-DFpXUbjA.js';
+import 'zod';
+import '../../../../../../../../chunks/shared-server.js-BGs15m2r.js';
+import '../../../../../../../../chunks/definitions.js-DK6GL3vh.js';
+import '../../../../../../../../chunks/schema.js-YChb_4u9.js';
+import 'node:crypto';
+import '../../../../../../../../chunks/limits.js-chQOq2eQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/api/admin/projects/[id]/grants/[grantId]/+server.ts
+var DELETE = apiRoute("Failed to revoke grant", async ({ params, locals }) => {
+	requireInstanceAdmin(locals);
+	if (!flag("ENABLE_PLATFORM_PROJECTS")) apiError(404, ApiErrorCode.NOT_FOUND, "Not found");
+	const { grantId } = requireParams(params, "grantId");
+	await getPlatformProjectGrantStore().delete(SYSTEM_CONTEXT, grantId);
+	return noContent();
+});
+
+export { DELETE };
+//# sourceMappingURL=_server.ts.js-CwatXjH0.js.map

package/build/server/chunks/entries/endpoints/api/admin/projects/_id_/grants/_grantId_/_server.ts.js-CwatXjH0.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CwatXjH0.js","sources":["../../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/projects/_id_/grants/_grantId_/_server.ts.js"],"sourcesContent":["import { t as SYSTEM_CONTEXT } from \"../../../../../../../../chunks/src.js\";\nimport { _ as getPlatformProjectGrantStore, t as flag } from \"../../../../../../../../chunks/providers.server.js\";\nimport { v as requireInstanceAdmin } from \"../../../../../../../../chunks/access.js\";\nimport { a as requireParams } from \"../../../../../../../../chunks/request.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../../../chunks/api-errors.js\";\nimport \"../../../../../../../../chunks/access2.server.js\";\nimport { r as noContent, t as apiRoute } from \"../../../../../../../../chunks/http.js\";\n//#region src/routes/api/admin/projects/[id]/grants/[grantId]/+server.ts\nvar DELETE = apiRoute(\"Failed to revoke grant\", async ({ params, locals }) => {\n\trequireInstanceAdmin(locals);\n\tif (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n\tconst { grantId } = requireParams(params, \"grantId\");\n\tawait getPlatformProjectGrantStore().delete(SYSTEM_CONTEXT, grantId);\n\treturn noContent();\n});\n//#endregion\nexport { DELETE };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAOA;AACG,IAAC,MAAM,GAAG,QAAQ,CAAC,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC9E,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC1F,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC;AACrD,CAAC,MAAM,4BAA4B,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC;AACrE,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/projects/_id_/grants/_server.ts.js-DS0T0fCs.js

@@ -0,0 +1,64 @@
+import { S as SYSTEM_CONTEXT } from '../../../../../../../chunks/src.js-Cf1j97Z6.js';
+import { s as getPlatformProjectGrantStore, e as getOrganizationProvider, n as getUserProfileStore, j as flag, f as getProjectProvider } from '../../../../../../../chunks/providers.server.js-DQ1uVPlR.js';
+import { o as requireInstanceAdmin } from '../../../../../../../chunks/access.js-DFbcJ7ZG.js';
+import { r as requireParams, p as parseBody } from '../../../../../../../chunks/request.js-6TyjZh9m.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../../chunks/api-errors.js-4HDFN7ny.js';
+import '../../../../../../../chunks/api.js-BF_dHNnR.js';
+import { json } from '@sveltejs/kit';
+import { a as apiRoute, c as created } from '../../../../../../../chunks/http.js-DFpXUbjA.js';
+import { z } from 'zod';
+import { randomUUID } from 'node:crypto';
+import '../../../../../../../chunks/shared-server.js-BGs15m2r.js';
+import '../../../../../../../chunks/definitions.js-DK6GL3vh.js';
+import '../../../../../../../chunks/schema.js-YChb_4u9.js';
+import '../../../../../../../chunks/limits.js-chQOq2eQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/api/admin/projects/[id]/grants/+server.ts
+var CreateGrantBody = z.object({
+	granteeType: z.enum(["org", "user"]),
+	granteeId: z.string().min(1),
+	canSolve: z.boolean()
+});
+async function assertPlatformProject(id) {
+	if (!flag("ENABLE_PLATFORM_PROJECTS")) apiError(404, ApiErrorCode.NOT_FOUND, "Not found");
+	const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, id);
+	if (!project || project.visibility !== "platform") apiError(404, ApiErrorCode.NOT_FOUND, "Platform project not found");
+	return project;
+}
+var GET = apiRoute("Failed to list grants", async ({ params, locals }) => {
+	requireInstanceAdmin(locals);
+	const { id } = requireParams(params, "id");
+	await assertPlatformProject(id);
+	const grants = await getPlatformProjectGrantStore().listByProject(SYSTEM_CONTEXT, id);
+	return json({ grants });
+});
+var POST = apiRoute("Failed to create grant", async ({ params, request, locals }) => {
+	const user = requireInstanceAdmin(locals);
+	const { id } = requireParams(params, "id");
+	const input = await parseBody(request, CreateGrantBody);
+	await assertPlatformProject(id);
+	if (input.granteeType === "org") {
+		if (!await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, input.granteeId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Organization '${input.granteeId}' not found`);
+	} else if (!await getUserProfileStore().getProfile(SYSTEM_CONTEXT, input.granteeId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `User '${input.granteeId}' not found`);
+	const grant = {
+		id: randomUUID(),
+		projectId: id,
+		granteeType: input.granteeType,
+		granteeId: input.granteeId,
+		canSolve: input.canSolve,
+		createdBy: user.id,
+		createdAt: (/* @__PURE__ */ new Date()).toISOString()
+	};
+	await getPlatformProjectGrantStore().create(SYSTEM_CONTEXT, grant);
+	return created(grant);
+});
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-DS0T0fCs.js.map

package/build/server/chunks/entries/endpoints/api/admin/projects/_id_/grants/_server.ts.js-DS0T0fCs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-DS0T0fCs.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/projects/_id_/grants/_server.ts.js"],"sourcesContent":["import { t as SYSTEM_CONTEXT } from \"../../../../../../../chunks/src.js\";\nimport { C as getUserProfileStore, _ as getPlatformProjectGrantStore, h as getOrganizationProvider, t as flag, v as getProjectProvider } from \"../../../../../../../chunks/providers.server.js\";\nimport { v as requireInstanceAdmin } from \"../../../../../../../chunks/access.js\";\nimport { a as requireParams, n as parseBody } from \"../../../../../../../chunks/request.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../../chunks/api-errors.js\";\nimport \"../../../../../../../chunks/access2.server.js\";\nimport { n as created, t as apiRoute } from \"../../../../../../../chunks/http.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/api/admin/projects/[id]/grants/+server.ts\nvar CreateGrantBody = z.object({\n\tgranteeType: z.enum([\"org\", \"user\"]),\n\tgranteeId: z.string().min(1),\n\tcanSolve: z.boolean()\n});\nasync function assertPlatformProject(id) {\n\tif (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n\tconst project = await getProjectProvider().getProject(SYSTEM_CONTEXT, id);\n\tif (!project || project.visibility !== \"platform\") apiError(404, ApiErrorCode.NOT_FOUND, \"Platform project not found\");\n\treturn project;\n}\nvar GET = apiRoute(\"Failed to list grants\", async ({ params, locals }) => {\n\trequireInstanceAdmin(locals);\n\tconst { id } = requireParams(params, \"id\");\n\tawait assertPlatformProject(id);\n\tconst grants = await getPlatformProjectGrantStore().listByProject(SYSTEM_CONTEXT, id);\n\treturn json({ grants });\n});\nvar POST = apiRoute(\"Failed to create grant\", async ({ params, request, locals }) => {\n\tconst user = requireInstanceAdmin(locals);\n\tconst { id } = requireParams(params, \"id\");\n\tconst input = await parseBody(request, CreateGrantBody);\n\tawait assertPlatformProject(id);\n\tif (input.granteeType === \"org\") {\n\t\tif (!await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, input.granteeId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Organization '${input.granteeId}' not found`);\n\t} else if (!await getUserProfileStore().getProfile(SYSTEM_CONTEXT, input.granteeId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `User '${input.granteeId}' not found`);\n\tconst grant = {\n\t\tid: randomUUID(),\n\t\tprojectId: id,\n\t\tgranteeType: input.granteeType,\n\t\tgranteeId: input.granteeId,\n\t\tcanSolve: input.canSolve,\n\t\tcreatedBy: user.id,\n\t\tcreatedAt: (/* @__PURE__ */ new Date()).toISOString()\n\t};\n\tawait getPlatformProjectGrantStore().create(SYSTEM_CONTEXT, grant);\n\treturn created(grant);\n});\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAUA;AACA,IAAI,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;AAC/B,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7B,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO;AACpB,CAAC,CAAC;AACF,eAAe,qBAAqB,CAAC,EAAE,EAAE;AACzC,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC1F,CAAC,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC;AAC1E,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,4BAA4B,CAAC;AACvH,CAAC,OAAO,OAAO;AACf;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,uBAAuB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC1E,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC;AAC3C,CAAC,MAAM,qBAAqB,CAAC,EAAE,CAAC;AAChC,CAAC,MAAM,MAAM,GAAG,MAAM,4BAA4B,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC;AACtF,CAAC,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;AACxB,CAAC;AACE,IAAC,IAAI,GAAG,QAAQ,CAAC,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrF,CAAC,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC1C,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC;AAC3C,CAAC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC;AACxD,CAAC,MAAM,qBAAqB,CAAC,EAAE,CAAC;AAChC,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,EAAE;AAClC,EAAE,IAAI,CAAC,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AAC5K,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,mBAAmB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AAC1K,CAAC,MAAM,KAAK,GAAG;AACf,EAAE,EAAE,EAAE,UAAU,EAAE;AAClB,EAAE,SAAS,EAAE,EAAE;AACf,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW;AAChC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS;AAC5B,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ;AAC1B,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;AACpB,EAAE,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW;AACrD,EAAE;AACF,CAAC,MAAM,4BAA4B,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC;AACnE,CAAC,OAAO,OAAO,CAAC,KAAK,CAAC;AACtB,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/projects/_server.ts.js-DYkNYw_n.js

@@ -0,0 +1,79 @@
+import { S as SYSTEM_CONTEXT } from '../../../../../chunks/src.js-Cf1j97Z6.js';
+import { j as flag, e as getOrganizationProvider, f as getProjectProvider } from '../../../../../chunks/providers.server.js-DQ1uVPlR.js';
+import { o as requireInstanceAdmin } from '../../../../../chunks/access.js-DFbcJ7ZG.js';
+import { p as parseBody } from '../../../../../chunks/request.js-6TyjZh9m.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-4HDFN7ny.js';
+import '../../../../../chunks/api.js-BF_dHNnR.js';
+import { json } from '@sveltejs/kit';
+import { a as apiRoute, c as created } from '../../../../../chunks/http.js-DFpXUbjA.js';
+import { c as createProjectWithUniqueSlug } from '../../../../../chunks/projects.js-DpiohhLt.js';
+import { z } from 'zod';
+import { randomUUID } from 'node:crypto';
+import '../../../../../chunks/shared-server.js-BGs15m2r.js';
+import '../../../../../chunks/definitions.js-DK6GL3vh.js';
+import '../../../../../chunks/schema.js-YChb_4u9.js';
+import '../../../../../chunks/limits.js-chQOq2eQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/api/admin/projects/+server.ts
+var CreatePlatformProjectBody = z.object({
+	name: z.string().min(1, "Project name is required").max(128).trim(),
+	description: z.string().max(2e3).optional(),
+	/**
+	* Org that physically hosts the project. Storage routing and compute
+	* resolution use this — but org membership in this org does NOT grant
+	* access. Visibility = 'platform' overrides those defaults.
+	*
+	* If omitted, the platform admin's first available org is used.
+	*/
+	orgId: z.string().uuid().optional()
+});
+/**
+* §4a — list every platform-visibility project on the instance. Uses
+* `SYSTEM_CONTEXT` because admin reads cross every org boundary; the route is
+* gated on `instance_admin`.
+*/
+var GET = apiRoute("Failed to list platform projects", async ({ locals }) => {
+	requireInstanceAdmin(locals);
+	if (!flag("ENABLE_PLATFORM_PROJECTS")) apiError(404, ApiErrorCode.NOT_FOUND, "Not found");
+	const orgs = await getOrganizationProvider().listOrgs(SYSTEM_CONTEXT, { limit: 1e3 });
+	const all = [];
+	for (const org of orgs.items) {
+		const page = await getProjectProvider().listProjects(SYSTEM_CONTEXT, org.id, { limit: 1e3 });
+		for (const p of page.items) if (p.visibility === "platform") all.push(p);
+	}
+	return json({ projects: all });
+});
+var POST = apiRoute("Failed to create platform project", async ({ request, locals }) => {
+	const user = requireInstanceAdmin(locals);
+	if (!flag("ENABLE_PLATFORM_PROJECTS")) apiError(404, ApiErrorCode.NOT_FOUND, "Not found");
+	const input = await parseBody(request, CreatePlatformProjectBody);
+	const hostOrgId = input.orgId ?? locals.ctx.actingOrgId;
+	if (!hostOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "A host orgId is required (no active organization in context).");
+	if (!await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, hostOrgId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Host organization '${hostOrgId}' not found.`);
+	const project = await createProjectWithUniqueSlug(getProjectProvider(), {
+		id: randomUUID(),
+		orgId: hostOrgId,
+		name: input.name,
+		description: input.description,
+		visibility: "platform",
+		ownerId: user.id,
+		createdBy: user.id,
+		updatedBy: user.id,
+		autoJoinOnUpload: false
+	}, {
+		writeCtx: SYSTEM_CONTEXT,
+		fallbackSlug: "platform-project",
+		conflictScope: "the host organization"
+	});
+	return created(project);
+});
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-DYkNYw_n.js.map

package/build/server/chunks/entries/endpoints/api/admin/projects/_server.ts.js-DYkNYw_n.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-DYkNYw_n.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/projects/_server.ts.js"],"sourcesContent":["import { t as SYSTEM_CONTEXT } from \"../../../../../chunks/src.js\";\nimport { h as getOrganizationProvider, t as flag, v as getProjectProvider } from \"../../../../../chunks/providers.server.js\";\nimport { v as requireInstanceAdmin } from \"../../../../../chunks/access.js\";\nimport { n as parseBody } from \"../../../../../chunks/request.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport \"../../../../../chunks/access2.server.js\";\nimport { n as created, t as apiRoute } from \"../../../../../chunks/http.js\";\nimport { t as createProjectWithUniqueSlug } from \"../../../../../chunks/projects.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/api/admin/projects/+server.ts\nvar CreatePlatformProjectBody = z.object({\n\tname: z.string().min(1, \"Project name is required\").max(128).trim(),\n\tdescription: z.string().max(2e3).optional(),\n\t/**\n\t* Org that physically hosts the project. Storage routing and compute\n\t* resolution use this — but org membership in this org does NOT grant\n\t* access. Visibility = 'platform' overrides those defaults.\n\t*\n\t* If omitted, the platform admin's first available org is used.\n\t*/\n\torgId: z.string().uuid().optional()\n});\n/**\n* §4a — list every platform-visibility project on the instance. Uses\n* `SYSTEM_CONTEXT` because admin reads cross every org boundary; the route is\n* gated on `instance_admin`.\n*/\nvar GET = apiRoute(\"Failed to list platform projects\", async ({ locals }) => {\n\trequireInstanceAdmin(locals);\n\tif (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n\tconst orgs = await getOrganizationProvider().listOrgs(SYSTEM_CONTEXT, { limit: 1e3 });\n\tconst all = [];\n\tfor (const org of orgs.items) {\n\t\tconst page = await getProjectProvider().listProjects(SYSTEM_CONTEXT, org.id, { limit: 1e3 });\n\t\tfor (const p of page.items) if (p.visibility === \"platform\") all.push(p);\n\t}\n\treturn json({ projects: all });\n});\nvar POST = apiRoute(\"Failed to create platform project\", async ({ request, locals }) => {\n\tconst user = requireInstanceAdmin(locals);\n\tif (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n\tconst input = await parseBody(request, CreatePlatformProjectBody);\n\tconst hostOrgId = input.orgId ?? locals.ctx.actingOrgId;\n\tif (!hostOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"A host orgId is required (no active organization in context).\");\n\tif (!await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, hostOrgId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Host organization '${hostOrgId}' not found.`);\n\tconst project = await createProjectWithUniqueSlug(getProjectProvider(), {\n\t\tid: randomUUID(),\n\t\torgId: hostOrgId,\n\t\tname: input.name,\n\t\tdescription: input.description,\n\t\tvisibility: \"platform\",\n\t\townerId: user.id,\n\t\tcreatedBy: user.id,\n\t\tupdatedBy: user.id,\n\t\tautoJoinOnUpload: false\n\t}, {\n\t\twriteCtx: SYSTEM_CONTEXT,\n\t\tfallbackSlug: \"platform-project\",\n\t\tconflictScope: \"the host organization\"\n\t});\n\treturn created(project);\n});\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAWA;AACA,IAAI,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;AACzC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACpE,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;AAC5C;AACA;AACA;AACA;AACA;AACA;AACA;AACA,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ;AAClC,CAAC,CAAC;AACF;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,kCAAkC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC7E,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC1F,CAAC,MAAM,IAAI,GAAG,MAAM,uBAAuB,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACtF,CAAC,MAAM,GAAG,GAAG,EAAE;AACf,CAAC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE;AAC/B,EAAE,MAAM,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAC9F,EAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1E,CAAC;AACD,CAAC,OAAO,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AAC/B,CAAC;AACE,IAAC,IAAI,GAAG,QAAQ,CAAC,mCAAmC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACxF,CAAC,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC1C,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC1F,CAAC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,yBAAyB,CAAC;AAClE,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW;AACxD,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,+DAA+D,CAAC;AAC/H,CAAC,IAAI,CAAC,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;AACrK,CAAC,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAAC,kBAAkB,EAAE,EAAE;AACzE,EAAE,EAAE,EAAE,UAAU,EAAE;AAClB,EAAE,KAAK,EAAE,SAAS;AAClB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;AAClB,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW;AAChC,EAAE,UAAU,EAAE,UAAU;AACxB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;AAClB,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;AACpB,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;AACpB,EAAE,gBAAgB,EAAE;AACpB,EAAE,EAAE;AACJ,EAAE,QAAQ,EAAE,cAAc;AAC1B,EAAE,YAAY,EAAE,kBAAkB;AAClC,EAAE,aAAa,EAAE;AACjB,EAAE,CAAC;AACH,CAAC,OAAO,OAAO,CAAC,OAAO,CAAC;AACxB,CAAC;;;;"}