@selvajs/selva 4.17.1 → 4.18.0

package/build/server/chunks/entries/endpoints/api/v1/solve-events/_server.ts.js-3g1FgHne.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-3g1FgHne.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/solve-events/_server.ts.js"],"sourcesContent":["import { r as getSolveEventBus } from \"../../../../../chunks/token.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { n as liveOwnerKey } from \"../../../../../chunks/liveSolve.server.js\";\n//#region src/lib/server/solveEvents/sse.server.ts\n/** Comment frames keep idle proxies from closing the connection. */\nvar HEARTBEAT_MS = 2e4;\n/**\n* The SSE response for one browser stream: registers it on the bus, frames each event as\n* `event: solve`, and unregisters when the client goes. Null when another owner holds `streamId`.\n*/\nfunction openSolveEventStream(args) {\n\tconst { bus, streamId, ownerKey, signal } = args;\n\tconst encoder = new TextEncoder();\n\tlet write = () => {};\n\tconst unsubscribe = bus.openStream(streamId, ownerKey, (event) => write(event));\n\tif (!unsubscribe) return null;\n\tlet close = () => {};\n\tconst body = new ReadableStream({\n\t\tstart(controller) {\n\t\t\tlet eventId = 0;\n\t\t\tlet closed = false;\n\t\t\tconst send = (chunk) => {\n\t\t\t\ttry {\n\t\t\t\t\tcontroller.enqueue(encoder.encode(chunk));\n\t\t\t\t} catch {\n\t\t\t\t\tclose();\n\t\t\t\t}\n\t\t\t};\n\t\t\twrite = (event) => send(`id: ${++eventId}\\nevent: solve\\ndata: ${JSON.stringify(event)}\\n\\n`);\n\t\t\tconst heartbeat = setInterval(() => send(\": ping\\n\\n\"), HEARTBEAT_MS);\n\t\t\tclose = () => {\n\t\t\t\tif (closed) return;\n\t\t\t\tclosed = true;\n\t\t\t\tclearInterval(heartbeat);\n\t\t\t\tunsubscribe();\n\t\t\t\ttry {\n\t\t\t\t\tcontroller.close();\n\t\t\t\t} catch {}\n\t\t\t};\n\t\t\tsignal.addEventListener(\"abort\", close, { once: true });\n\t\t\tif (signal.aborted) close();\n\t\t\tsend(`event: ready\\ndata: ${JSON.stringify({ streamId })}\\n\\n`);\n\t\t},\n\t\tcancel() {\n\t\t\tclose();\n\t\t}\n\t});\n\treturn new Response(body, { headers: {\n\t\t\"Content-Type\": \"text/event-stream\",\n\t\t\"Cache-Control\": \"no-cache, no-transform\",\n\t\tConnection: \"keep-alive\",\n\t\t\"X-Accel-Buffering\": \"no\"\n\t} });\n}\n//#endregion\n//#region src/routes/api/v1/solve-events/+server.ts\nvar STREAM_ID = /^[A-Za-z0-9_-]{16,64}$/;\nvar GET = async ({ url, locals, request }) => {\n\tconst ownerKey = liveOwnerKey(locals.user?.id);\n\tif (!ownerKey) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n\tconst streamId = url.searchParams.get(\"streamId\") ?? \"\";\n\tif (!STREAM_ID.test(streamId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"streamId must be 16-64 URL-safe characters\");\n\tconst response = openSolveEventStream({\n\t\tbus: getSolveEventBus(),\n\t\tstreamId,\n\t\townerKey,\n\t\tsignal: request.signal\n\t});\n\tif (!response) apiError(409, ApiErrorCode.CONFLICT, \"streamId is in use\");\n\treturn response;\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAGA;AACA;AACA,IAAI,YAAY,GAAG,GAAG;AACtB;AACA;AACA;AACA;AACA,SAAS,oBAAoB,CAAC,IAAI,EAAE;AACpC,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI;AACjD,CAAC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE;AAClC,CAAC,IAAI,KAAK,GAAG,MAAM,CAAC,CAAC;AACrB,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC;AAChF,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,IAAI;AAC9B,CAAC,IAAI,KAAK,GAAG,MAAM,CAAC,CAAC;AACrB,CAAC,MAAM,IAAI,GAAG,IAAI,cAAc,CAAC;AACjC,EAAE,KAAK,CAAC,UAAU,EAAE;AACpB,GAAG,IAAI,OAAO,GAAG,CAAC;AAClB,GAAG,IAAI,MAAM,GAAG,KAAK;AACrB,GAAG,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK;AAC3B,IAAI,IAAI;AACR,KAAK,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9C,IAAI,CAAC,CAAC,MAAM;AACZ,KAAK,KAAK,EAAE;AACZ,IAAI;AACJ,GAAG,CAAC;AACJ,GAAG,KAAK,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,sBAAsB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;AAChG,GAAG,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;AACxE,GAAG,KAAK,GAAG,MAAM;AACjB,IAAI,IAAI,MAAM,EAAE;AAChB,IAAI,MAAM,GAAG,IAAI;AACjB,IAAI,aAAa,CAAC,SAAS,CAAC;AAC5B,IAAI,WAAW,EAAE;AACjB,IAAI,IAAI;AACR,KAAK,UAAU,CAAC,KAAK,EAAE;AACvB,IAAI,CAAC,CAAC,MAAM,CAAC;AACb,GAAG,CAAC;AACJ,GAAG,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC1D,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE;AAC9B,GAAG,IAAI,CAAC,CAAC,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAClE,EAAE,CAAC;AACH,EAAE,MAAM,GAAG;AACX,GAAG,KAAK,EAAE;AACV,EAAE;AACF,EAAE,CAAC;AACH,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE;AACtC,EAAE,cAAc,EAAE,mBAAmB;AACrC,EAAE,eAAe,EAAE,wBAAwB;AAC3C,EAAE,UAAU,EAAE,YAAY;AAC1B,EAAE,mBAAmB,EAAE;AACvB,EAAE,EAAE,CAAC;AACL;AACA;AACA;AACA,IAAI,SAAS,GAAG,wBAAwB;AACrC,IAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;AAC9C,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;AAC/C,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AACxE,CAAC,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE;AACxD,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,4CAA4C,CAAC;AAC3H,CAAC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;AACvC,EAAE,GAAG,EAAE,gBAAgB,EAAE;AACzB,EAAE,QAAQ;AACV,EAAE,QAAQ;AACV,EAAE,MAAM,EAAE,OAAO,CAAC;AAClB,EAAE,CAAC;AACH,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,oBAAoB,CAAC;AAC1E,CAAC,OAAO,QAAQ;AAChB;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/solve-events/_solveId_/_server.ts.js-Ck-DL0fZ.js

@@ -0,0 +1,59 @@
+import { v as verifySolveToken, g as getSolveEventBus } from '../../../../../../chunks/token.server.js-BPIjr3vT.js';
+import { i as requireMaxBodySize } from '../../../../../../chunks/admin-auth.server.js-I3ZwmT--.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-4HDFN7ny.js';
+import { json } from '@sveltejs/kit';
+import '../../../../../../chunks/shared-server.js-BGs15m2r.js';
+import 'node:crypto';
+import '../../../../../../chunks/src.js-Cf1j97Z6.js';
+import 'zod';
+import '../../../../../../chunks/definitions.js-DK6GL3vh.js';
+import '../../../../../../chunks/access.js-DFbcJ7ZG.js';
+import '../../../../../../chunks/schema.js-YChb_4u9.js';
+import '../../../../../../chunks/api.js-BF_dHNnR.js';
+import 'node:dns/promises';
+import 'node:net';
+
+function readBearer(request) {
+	const auth = request.headers.get("authorization");
+	return auth?.startsWith("Bearer ") ? auth.slice(7).trim() : null;
+}
+/**
+* The events in a callback body, in order. `seq` and `solveId` are the bus's to stamp, so any the
+* plugin sent are ignored. `now` stands in for a missing `at`.
+*/
+function parseCallbackEvents(body, now) {
+	const raw = body?.events;
+	if (!Array.isArray(raw)) return [];
+	return raw.slice(0, 256).flatMap((entry) => {
+		if (!entry || typeof entry !== "object") return [];
+		const e = entry;
+		if (typeof e.type !== "string" || !e.type) return [];
+		const payload = e.payload && typeof e.payload === "object" && !Array.isArray(e.payload) ? e.payload : void 0;
+		return [{
+			type: e.type,
+			at: typeof e.at === "string" ? e.at : now,
+			...payload ? { payload } : {}
+		}];
+	});
+}
+//#endregion
+//#region src/routes/api/v1/solve-events/[solveId]/+server.ts
+var MAX_BODY_BYTES = 262144;
+var SOLVE_ID = /^[A-Za-z0-9-]{8,64}$/;
+var POST = async ({ params, request }) => {
+	requireMaxBodySize(request, MAX_BODY_BYTES);
+	const { solveId } = params;
+	if (!SOLVE_ID.test(solveId) || !verifySolveToken(solveId, readBearer(request))) apiError(401, ApiErrorCode.UNAUTHORIZED, "Invalid solve token");
+	const bus = getSolveEventBus();
+	if (!bus.isOpen(solveId)) apiError(410, ApiErrorCode.NOT_FOUND, "Solve is no longer open");
+	let body;
+	try {
+		body = await request.json();
+	} catch {
+		apiError(400, ApiErrorCode.VALIDATION_FAILED, "Body must be JSON");
+	}
+	return json(bus.publish(solveId, parseCallbackEvents(body, (/* @__PURE__ */ new Date()).toISOString())));
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts.js-Ck-DL0fZ.js.map

package/build/server/chunks/entries/endpoints/api/v1/solve-events/_solveId_/_server.ts.js-Ck-DL0fZ.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-Ck-DL0fZ.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/solve-events/_solveId_/_server.ts.js"],"sourcesContent":["import { n as verifySolveToken, r as getSolveEventBus } from \"../../../../../../chunks/token.server.js\";\nimport { c as requireMaxBodySize } from \"../../../../../../chunks/admin-auth.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\nfunction readBearer(request) {\n\tconst auth = request.headers.get(\"authorization\");\n\treturn auth?.startsWith(\"Bearer \") ? auth.slice(7).trim() : null;\n}\n/**\n* The events in a callback body, in order. `seq` and `solveId` are the bus's to stamp, so any the\n* plugin sent are ignored. `now` stands in for a missing `at`.\n*/\nfunction parseCallbackEvents(body, now) {\n\tconst raw = body?.events;\n\tif (!Array.isArray(raw)) return [];\n\treturn raw.slice(0, 256).flatMap((entry) => {\n\t\tif (!entry || typeof entry !== \"object\") return [];\n\t\tconst e = entry;\n\t\tif (typeof e.type !== \"string\" || !e.type) return [];\n\t\tconst payload = e.payload && typeof e.payload === \"object\" && !Array.isArray(e.payload) ? e.payload : void 0;\n\t\treturn [{\n\t\t\ttype: e.type,\n\t\t\tat: typeof e.at === \"string\" ? e.at : now,\n\t\t\t...payload ? { payload } : {}\n\t\t}];\n\t});\n}\n//#endregion\n//#region src/routes/api/v1/solve-events/[solveId]/+server.ts\nvar MAX_BODY_BYTES = 262144;\nvar SOLVE_ID = /^[A-Za-z0-9-]{8,64}$/;\nvar POST = async ({ params, request }) => {\n\trequireMaxBodySize(request, MAX_BODY_BYTES);\n\tconst { solveId } = params;\n\tif (!SOLVE_ID.test(solveId) || !verifySolveToken(solveId, readBearer(request))) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Invalid solve token\");\n\tconst bus = getSolveEventBus();\n\tif (!bus.isOpen(solveId)) apiError(410, ApiErrorCode.NOT_FOUND, \"Solve is no longer open\");\n\tlet body;\n\ttry {\n\t\tbody = await request.json();\n\t} catch {\n\t\tapiError(400, ApiErrorCode.VALIDATION_FAILED, \"Body must be JSON\");\n\t}\n\treturn json(bus.publish(solveId, parseCallbackEvents(body, (/* @__PURE__ */ new Date()).toISOString())));\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAIA,SAAS,UAAU,CAAC,OAAO,EAAE;AAC7B,CAAC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;AAClD,CAAC,OAAO,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI;AACjE;AACA;AACA;AACA;AACA;AACA,SAAS,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE;AACxC,CAAC,MAAM,GAAG,GAAG,IAAI,EAAE,MAAM;AACzB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE;AACnC,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK;AAC7C,EAAE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,OAAO,EAAE;AACpD,EAAE,MAAM,CAAC,GAAG,KAAK;AACjB,EAAE,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE;AACtD,EAAE,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,GAAG,MAAM;AAC9G,EAAE,OAAO,CAAC;AACV,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI;AACf,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG;AAC5C,GAAG,GAAG,OAAO,GAAG,EAAE,OAAO,EAAE,GAAG;AAC9B,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC;AACH;AACA;AACA;AACA,IAAI,cAAc,GAAG,MAAM;AAC3B,IAAI,QAAQ,GAAG,sBAAsB;AAClC,IAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;AAC1C,CAAC,kBAAkB,CAAC,OAAO,EAAE,cAAc,CAAC;AAC5C,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM;AAC3B,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,qBAAqB,CAAC;AAChJ,CAAC,MAAM,GAAG,GAAG,gBAAgB,EAAE;AAC/B,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,yBAAyB,CAAC;AAC3F,CAAC,IAAI,IAAI;AACT,CAAC,IAAI;AACL,EAAE,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE;AAC7B,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;AACpE,CAAC;AACD,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;AACzG;;;;"}

package/build/server/chunks/entries/endpoints/auth/email/callback/_server.ts.js-CO7Zpgk_.js

@@ -0,0 +1,46 @@
+import { a as getAuthProvider } from '../../../../../chunks/providers.server.js-DQ1uVPlR.js';
+import { s as setSessionCookie, a as setRefreshCookie } from '../../../../../chunks/admin-auth.server.js-I3ZwmT--.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-4HDFN7ny.js';
+import { s as safeRedirectTarget } from '../../../../../chunks/redirect.js-2M2qGbv2.js';
+import { b as bootstrapUserSession } from '../../../../../chunks/auth-bootstrap.server.js-Z3bHapez.js';
+import { redirect } from '@sveltejs/kit';
+import '../../../../../chunks/shared-server.js-BGs15m2r.js';
+import '../../../../../chunks/src.js-Cf1j97Z6.js';
+import 'zod';
+import '../../../../../chunks/definitions.js-DK6GL3vh.js';
+import '../../../../../chunks/access.js-DFbcJ7ZG.js';
+import '../../../../../chunks/schema.js-YChb_4u9.js';
+import 'node:crypto';
+import '../../../../../chunks/limits.js-chQOq2eQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../chunks/api.js-BF_dHNnR.js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/auth/email/callback/+server.ts
+/**
+* GET /auth/email/callback?token_hash=...&type=...&redirectTo=/library
+*
+* The user clicked the magic link in their inbox. Hand the full URL to the
+* adapter (it knows its own token format), set cookies on success, redirect
+* to the destination. Mirrors `/auth/supabase/callback` but capability-named
+* — this route doesn't know which IdP brokered the email.
+*/
+var GET = async ({ url, cookies }) => {
+	const emailLink = getAuthProvider().emailLink;
+	if (!emailLink) apiError(501, ApiErrorCode.INTERNAL, "Email sign-in is not supported by this provider.");
+	const result = await emailLink.verifyMagicLink(url.toString());
+	if (!result) apiError(401, ApiErrorCode.UNAUTHORIZED, "This sign-in link is invalid or has expired.");
+	await bootstrapUserSession(result.user);
+	setSessionCookie(cookies, result.sessionToken);
+	if (result.refreshToken) setRefreshCookie(cookies, result.refreshToken);
+	const dest = safeRedirectTarget(url.searchParams.get("redirectTo"), "/library");
+	redirect(303, dest);
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-CO7Zpgk_.js.map

package/build/server/chunks/entries/endpoints/auth/email/callback/_server.ts.js-CO7Zpgk_.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CO7Zpgk_.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/auth/email/callback/_server.ts.js"],"sourcesContent":["import { r as getAuthProvider } from \"../../../../../chunks/providers.server.js\";\nimport { l as setRefreshCookie, u as setSessionCookie } from \"../../../../../chunks/admin-auth.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { t as safeRedirectTarget } from \"../../../../../chunks/redirect.js\";\nimport { t as bootstrapUserSession } from \"../../../../../chunks/auth-bootstrap.server.js\";\nimport { redirect } from \"@sveltejs/kit\";\n//#region src/routes/auth/email/callback/+server.ts\n/**\n* GET /auth/email/callback?token_hash=...&type=...&redirectTo=/library\n*\n* The user clicked the magic link in their inbox. Hand the full URL to the\n* adapter (it knows its own token format), set cookies on success, redirect\n* to the destination. Mirrors `/auth/supabase/callback` but capability-named\n* — this route doesn't know which IdP brokered the email.\n*/\nvar GET = async ({ url, cookies }) => {\n\tconst emailLink = getAuthProvider().emailLink;\n\tif (!emailLink) apiError(501, ApiErrorCode.INTERNAL, \"Email sign-in is not supported by this provider.\");\n\tconst result = await emailLink.verifyMagicLink(url.toString());\n\tif (!result) apiError(401, ApiErrorCode.UNAUTHORIZED, \"This sign-in link is invalid or has expired.\");\n\tawait bootstrapUserSession(result.user);\n\tsetSessionCookie(cookies, result.sessionToken);\n\tif (result.refreshToken) setRefreshCookie(cookies, result.refreshToken);\n\tconst dest = safeRedirectTarget(url.searchParams.get(\"redirectTo\"), \"/library\");\n\tredirect(303, dest);\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAMA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK;AACtC,CAAC,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC,SAAS;AAC9C,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,kDAAkD,CAAC;AACzG,CAAC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;AAC/D,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,8CAA8C,CAAC;AACtG,CAAC,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;AACxC,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAC/C,CAAC,IAAI,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACxE,CAAC,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;AAChF,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;AACpB;;;;"}

package/build/server/chunks/entries/endpoints/auth/supabase/callback/_server.ts.js-jkRjDejp.js

@@ -0,0 +1,52 @@
+import { a as getAuthProvider } from '../../../../../chunks/providers.server.js-DQ1uVPlR.js';
+import { s as setSessionCookie, a as setRefreshCookie } from '../../../../../chunks/admin-auth.server.js-I3ZwmT--.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-4HDFN7ny.js';
+import { s as safeRedirectTarget } from '../../../../../chunks/redirect.js-2M2qGbv2.js';
+import { b as bootstrapUserSession } from '../../../../../chunks/auth-bootstrap.server.js-Z3bHapez.js';
+import { c as consumeOAuthState } from '../../../../../chunks/oauthState.server.js-BVkqxviq.js';
+import { redirect } from '@sveltejs/kit';
+import '../../../../../chunks/shared-server.js-BGs15m2r.js';
+import '../../../../../chunks/src.js-Cf1j97Z6.js';
+import 'zod';
+import '../../../../../chunks/definitions.js-DK6GL3vh.js';
+import '../../../../../chunks/access.js-DFbcJ7ZG.js';
+import '../../../../../chunks/schema.js-YChb_4u9.js';
+import 'node:crypto';
+import '../../../../../chunks/limits.js-chQOq2eQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../chunks/api.js-BF_dHNnR.js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/auth/supabase/callback/+server.ts
+/**
+* GET /auth/supabase/callback?code=...&redirectTo=/library
+*
+* Completes a Supabase OAuth round-trip. Exchanges the authorization code
+* for a session, sets the session cookie, and redirects to `redirectTo`.
+*
+* Post-verification flow (data-row seeding + first-admin bootstrap) lives in
+* `bootstrapUserSession` so the email-link and OAuth paths follow the same
+* sequence in the same order.
+*/
+var GET = async ({ url, cookies }) => {
+	if (!consumeOAuthState(cookies, url.searchParams.get("selva_state"))) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Sign-in session expired. Please try again.");
+	const code = url.searchParams.get("code");
+	if (!code) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing authorization code");
+	const oauth = getAuthProvider().oauth;
+	if (!oauth) apiError(501, ApiErrorCode.INTERNAL, "OAuth is not supported by the configured auth provider.");
+	const result = await oauth.exchangeOAuthCode(code);
+	if (!result) apiError(401, ApiErrorCode.UNAUTHORIZED, "OAuth exchange failed");
+	await bootstrapUserSession(result.user);
+	setSessionCookie(cookies, result.sessionToken);
+	setRefreshCookie(cookies, result.refreshToken);
+	const dest = safeRedirectTarget(url.searchParams.get("redirectTo"), "/library");
+	redirect(303, dest);
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-jkRjDejp.js.map

package/build/server/chunks/entries/endpoints/auth/supabase/callback/_server.ts.js-jkRjDejp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-jkRjDejp.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/auth/supabase/callback/_server.ts.js"],"sourcesContent":["import { r as getAuthProvider } from \"../../../../../chunks/providers.server.js\";\nimport { l as setRefreshCookie, u as setSessionCookie } from \"../../../../../chunks/admin-auth.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { t as safeRedirectTarget } from \"../../../../../chunks/redirect.js\";\nimport { t as bootstrapUserSession } from \"../../../../../chunks/auth-bootstrap.server.js\";\nimport { t as consumeOAuthState } from \"../../../../../chunks/oauthState.server.js\";\nimport { redirect } from \"@sveltejs/kit\";\n//#region src/routes/auth/supabase/callback/+server.ts\n/**\n* GET /auth/supabase/callback?code=...&redirectTo=/library\n*\n* Completes a Supabase OAuth round-trip. Exchanges the authorization code\n* for a session, sets the session cookie, and redirects to `redirectTo`.\n*\n* Post-verification flow (data-row seeding + first-admin bootstrap) lives in\n* `bootstrapUserSession` so the email-link and OAuth paths follow the same\n* sequence in the same order.\n*/\nvar GET = async ({ url, cookies }) => {\n\tif (!consumeOAuthState(cookies, url.searchParams.get(\"selva_state\"))) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Sign-in session expired. Please try again.\");\n\tconst code = url.searchParams.get(\"code\");\n\tif (!code) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing authorization code\");\n\tconst oauth = getAuthProvider().oauth;\n\tif (!oauth) apiError(501, ApiErrorCode.INTERNAL, \"OAuth is not supported by the configured auth provider.\");\n\tconst result = await oauth.exchangeOAuthCode(code);\n\tif (!result) apiError(401, ApiErrorCode.UNAUTHORIZED, \"OAuth exchange failed\");\n\tawait bootstrapUserSession(result.user);\n\tsetSessionCookie(cookies, result.sessionToken);\n\tsetRefreshCookie(cookies, result.refreshToken);\n\tconst dest = safeRedirectTarget(url.searchParams.get(\"redirectTo\"), \"/library\");\n\tredirect(303, dest);\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAOA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK;AACtC,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,4CAA4C,CAAC;AAClK,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;AAC1C,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,4BAA4B,CAAC;AACvF,CAAC,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC,KAAK;AACtC,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,yDAAyD,CAAC;AAC5G,CAAC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC;AACnD,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,uBAAuB,CAAC;AAC/E,CAAC,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;AACxC,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAC/C,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAC/C,CAAC,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;AAChF,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;AACpB;;;;"}

package/build/server/chunks/entries/endpoints/auth/supabase/start/_server.ts.js-B2X9bb98.js

@@ -0,0 +1,63 @@
+import { a as getAuthProvider } from '../../../../../chunks/providers.server.js-DQ1uVPlR.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-4HDFN7ny.js';
+import { i as issueOAuthState } from '../../../../../chunks/oauthState.server.js-BVkqxviq.js';
+import { redirect } from '@sveltejs/kit';
+import '../../../../../chunks/shared-server.js-BGs15m2r.js';
+import '../../../../../chunks/src.js-Cf1j97Z6.js';
+import 'zod';
+import '../../../../../chunks/definitions.js-DK6GL3vh.js';
+import '../../../../../chunks/access.js-DFbcJ7ZG.js';
+import '../../../../../chunks/schema.js-YChb_4u9.js';
+import 'node:crypto';
+import '../../../../../chunks/limits.js-chQOq2eQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../chunks/api.js-BF_dHNnR.js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/auth/supabase/start/+server.ts
+var ALLOWED_PROVIDERS = [
+	"google",
+	"github",
+	"azure",
+	"gitlab"
+];
+function isAllowedProvider(value) {
+	return value !== null && ALLOWED_PROVIDERS.includes(value);
+}
+/**
+* GET /auth/supabase/start?provider=google&redirectTo=/library
+*
+* Initiates an OAuth sign-in via Supabase Auth. The Supabase project must
+* have the named provider enabled in its dashboard. Bounces the browser to
+* the IdP's authorize endpoint; the IdP returns to `/auth/supabase/callback`
+* with a `?code=...`.
+*
+* `redirectTo` is preserved through the round trip via `?redirectTo=...` on
+* the callback URL we hand to Supabase.
+*
+* A CSRF nonce rides along the same way. Supabase owns the real OAuth `state`
+* and doesn't expose it, and `exchangeOAuthCode` takes only `code` — so the
+* nonce is our own, carried on the callback URL and compared against a cookie.
+* Without it the callback accepts an attacker's `?code=` and silently signs the
+* victim into the attacker's account. See `oauthState.server.ts`.
+*/
+var GET = async ({ url, cookies }) => {
+	const provider = url.searchParams.get("provider");
+	if (!isAllowedProvider(provider)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid provider. Allowed: ${ALLOWED_PROVIDERS.join(", ")}`);
+	const oauth = getAuthProvider().oauth;
+	if (!oauth) apiError(501, ApiErrorCode.INTERNAL, "OAuth is not supported by the configured auth provider.");
+	const redirectTo = url.searchParams.get("redirectTo") ?? "/library";
+	const callbackUrl = new URL("/auth/supabase/callback", url.origin);
+	if (redirectTo.startsWith("/")) callbackUrl.searchParams.set("redirectTo", redirectTo);
+	callbackUrl.searchParams.set("selva_state", issueOAuthState(cookies));
+	const authorizationUrl = await oauth.getOAuthAuthorizationUrl(provider, callbackUrl.toString());
+	redirect(303, authorizationUrl);
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-B2X9bb98.js.map

package/build/server/chunks/entries/endpoints/auth/supabase/start/_server.ts.js-B2X9bb98.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-B2X9bb98.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/auth/supabase/start/_server.ts.js"],"sourcesContent":["import { r as getAuthProvider } from \"../../../../../chunks/providers.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { n as issueOAuthState } from \"../../../../../chunks/oauthState.server.js\";\nimport { redirect } from \"@sveltejs/kit\";\n//#region src/routes/auth/supabase/start/+server.ts\nvar ALLOWED_PROVIDERS = [\n\t\"google\",\n\t\"github\",\n\t\"azure\",\n\t\"gitlab\"\n];\nfunction isAllowedProvider(value) {\n\treturn value !== null && ALLOWED_PROVIDERS.includes(value);\n}\n/**\n* GET /auth/supabase/start?provider=google&redirectTo=/library\n*\n* Initiates an OAuth sign-in via Supabase Auth. The Supabase project must\n* have the named provider enabled in its dashboard. Bounces the browser to\n* the IdP's authorize endpoint; the IdP returns to `/auth/supabase/callback`\n* with a `?code=...`.\n*\n* `redirectTo` is preserved through the round trip via `?redirectTo=...` on\n* the callback URL we hand to Supabase.\n*\n* A CSRF nonce rides along the same way. Supabase owns the real OAuth `state`\n* and doesn't expose it, and `exchangeOAuthCode` takes only `code` — so the\n* nonce is our own, carried on the callback URL and compared against a cookie.\n* Without it the callback accepts an attacker's `?code=` and silently signs the\n* victim into the attacker's account. See `oauthState.server.ts`.\n*/\nvar GET = async ({ url, cookies }) => {\n\tconst provider = url.searchParams.get(\"provider\");\n\tif (!isAllowedProvider(provider)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid provider. Allowed: ${ALLOWED_PROVIDERS.join(\", \")}`);\n\tconst oauth = getAuthProvider().oauth;\n\tif (!oauth) apiError(501, ApiErrorCode.INTERNAL, \"OAuth is not supported by the configured auth provider.\");\n\tconst redirectTo = url.searchParams.get(\"redirectTo\") ?? \"/library\";\n\tconst callbackUrl = new URL(\"/auth/supabase/callback\", url.origin);\n\tif (redirectTo.startsWith(\"/\")) callbackUrl.searchParams.set(\"redirectTo\", redirectTo);\n\tcallbackUrl.searchParams.set(\"selva_state\", issueOAuthState(cookies));\n\tconst authorizationUrl = await oauth.getOAuthAuthorizationUrl(provider, callbackUrl.toString());\n\tredirect(303, authorizationUrl);\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAIA;AACA,IAAI,iBAAiB,GAAG;AACxB,CAAC,QAAQ;AACT,CAAC,QAAQ;AACT,CAAC,OAAO;AACR,CAAC;AACD,CAAC;AACD,SAAS,iBAAiB,CAAC,KAAK,EAAE;AAClC,CAAC,OAAO,KAAK,KAAK,IAAI,IAAI,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC;AAC3D;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK;AACtC,CAAC,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;AAClD,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,2BAA2B,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC9I,CAAC,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC,KAAK;AACtC,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,yDAAyD,CAAC;AAC5G,CAAC,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,UAAU;AACpE,CAAC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,yBAAyB,EAAE,GAAG,CAAC,MAAM,CAAC;AACnE,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC;AACvF,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;AACtE,CAAC,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,wBAAwB,CAAC,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC;AAChG,CAAC,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAChC;;;;"}

package/build/server/chunks/entries/endpoints/docs/api/openapi.yaml/_server.ts.js-Ds38ZE4x.js

@@ -0,0 +1,11 @@
+//#region openapi/v1.yaml?raw
+var v1_default = "# Generated from the Zod validators and the route registry in\n# src/lib/server/api/v1/. Do not edit by hand — `pnpm test` fails when this\n# file drifts from the code. Regenerate with `pnpm openapi:generate`.\nopenapi: \"3.1.0\"\ninfo:\n  title: Selva API\n  version: \"1.0.0\"\n  description: \"The tenant-scoped Selva API. Every endpoint acts as the calling identity and is confined to that identity's organization.\\n\\n**Stability.** Public endpoints are additive-only within v1: new optional fields and parameters may appear, but nothing is removed, renamed, or changed in type or meaning. A breaking change ships as a new route under `/api/v2` alongside this one. Anything deprecated inside v1 keeps working for a stated window and returns a `Deprecation` header while it does.\\n\\n**Operations marked `x-internal` carry none of that promise.** They exist to serve the Selva web UI and may change or disappear without notice.\\n\\n**Existence is never disclosed.** A resource the caller may not see returns `404`, not `403`. `403` means the resource is visible but the action is not allowed.\\n\\n**No CORS.** `/api/v1` sends no cross-origin headers; it serves same-origin browser requests and non-browser clients holding a token.\\n\\nInstance administration lives at `/api/admin`, is session-only, is never reachable with a bearer token, and is not described here.\"\n  license:\n    name: MIT\nservers:\n  - url: /\n    description: The Selva instance serving this document.\nsecurity:\n  - cookieAuth: []\n  - bearerAuth: []\ncomponents:\n  securitySchemes:\n    cookieAuth:\n      type: apiKey\n      in: cookie\n      name: session\n      description: Browser session cookie. Same-origin only.\n    bearerAuth:\n      type: http\n      scheme: bearer\n      description: \"A personal access token. `/api/v1` is the only prefix that accepts one — `/api/admin` never does.\"\n  parameters:\n    limit:\n      name: limit\n      in: query\n      required: false\n      description: \"Page size. Out-of-range values clamp rather than fail, so a client walking a cursor is never stopped by pagination plumbing. Default 50.\"\n      schema:\n        type: integer\n        minimum: 1\n        maximum: 200\n    cursor:\n      name: cursor\n      in: query\n      required: false\n      description: \"An opaque cursor from a previous response's `nextCursor`. Do not construct or parse one.\"\n      schema:\n        type: string\n    orderBy:\n      name: orderBy\n      in: query\n      required: false\n      schema:\n        type: string\n        enum:\n          - createdAt\n          - updatedAt\n          - name\n    orderDir:\n      name: orderDir\n      in: query\n      required: false\n      schema:\n        type: string\n        enum:\n          - asc\n          - desc\n  schemas:\n    Page:\n      type: object\n      description: \"The envelope every collection returns. `nextCursor` is absent on the last page.\"\n      properties:\n        items:\n          type: array\n          items:\n            type: object\n        nextCursor:\n          type: string\n      required:\n        - items\n    Error:\n      type: object\n      description: \"Every failure carries this shape. Branch on `code`, not on the human-readable `message`.\"\n      properties:\n        message:\n          type: string\n        code:\n          type: string\n          enum:\n            - VALIDATION_FAILED\n            - UNAUTHORIZED\n            - FORBIDDEN\n            - NOT_FOUND\n            - CONFLICT\n            - UNPROCESSABLE\n            - COMPUTE_UNAVAILABLE\n            - SETUP_REQUIRED\n            - INTERNAL\n        fields:\n          type: object\n          description: \"Per-field messages, keyed by dotted path. Present on validation failures.\"\n          additionalProperties:\n            type: string\n      required:\n        - message\n        - code\npaths:\n  /api/v1/me:\n    get:\n      summary: \"The calling identity, its acting org, and its effective permissions.\"\n      operationId: getMe\n      tags:\n        - Me\n      responses:\n        \"200\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/me/starred/{guid}\":\n    put:\n      summary: Star a definition. Idempotent.\n      operationId: putMeStarredByGuid\n      tags:\n        - Me\n      parameters:\n        - name: guid\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"204\":\n          description: Success. No content.\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n    delete:\n      summary: Unstar a definition. Idempotent.\n      operationId: deleteMeStarredByGuid\n      tags:\n        - Me\n      parameters:\n        - name: guid\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"204\":\n          description: Success. No content.\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  /api/v1/definitions:\n    get:\n      summary: List definitions the caller can see.\n      operationId: getDefinitions\n      tags:\n        - Definitions\n      parameters:\n        - $ref: \"#/components/parameters/limit\"\n        - $ref: \"#/components/parameters/cursor\"\n        - $ref: \"#/components/parameters/orderBy\"\n        - $ref: \"#/components/parameters/orderDir\"\n        - name: projectId\n          in: query\n          required: false\n          description: Restrict to one project.\n          schema:\n            type: string\n        - name: status\n          in: query\n          required: false\n          description: \"One of `draft`, `published`, `archived`.\"\n          schema:\n            type: string\n      responses:\n        \"200\":\n          description: A page of results.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Page\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n    post:\n      summary: Create a definition from a Grasshopper file.\n      operationId: postDefinitions\n      tags:\n        - Definitions\n      requestBody:\n        required: true\n        content:\n          multipart/form-data:\n            schema:\n              type: object\n              properties:\n                file:\n                  type: string\n                  description: \"The `.gh` or `.ghx` file.\"\n                projectId:\n                  type: string\n                  description: Owning project.\n                displayName:\n                  type: string\n                  description: Human-readable name.\n                description:\n                  type: string\n                  description: Long description.\n                category:\n                  type: string\n                  description: Grouping label.\n                tags:\n                  type: string\n                  description: Comma-separated tags.\n                image:\n                  type: string\n                  description: Cover image.\n                computeServerId:\n                  type: string\n                  description: Pin to a compute server.\n              required:\n                - file\n                - projectId\n                - displayName\n      responses:\n        \"201\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"400\":\n          description: Validation failed.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"422\":\n          description: Well-formed but not processable.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"503\":\n          description: The compute server is unconfigured or unreachable.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/definitions/{guid}\":\n    get:\n      summary: Definition record plus its live and draft version summaries.\n      operationId: getDefinitionsByGuid\n      tags:\n        - Definitions\n      parameters:\n        - name: guid\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"200\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n    patch:\n      summary: Update definition metadata.\n      operationId: patchDefinitionsByGuid\n      tags:\n        - Definitions\n      parameters:\n        - name: guid\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"204\":\n          description: Success. No content.\n        \"400\":\n          description: Validation failed.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n    delete:\n      summary: Soft-delete a definition.\n      operationId: deleteDefinitionsByGuid\n      tags:\n        - Definitions\n      parameters:\n        - name: guid\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"204\":\n          description: Success. No content.\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/definitions/{guid}/solve\":\n    post:\n      summary: Solve a definition. The primary action of the API.\n      operationId: postDefinitionsByGuidSolve\n      tags:\n        - Definitions\n      parameters:\n        - name: guid\n          in: path\n          required: true\n          schema:\n            type: string\n        - name: Idempotency-Key\n          in: header\n          required: false\n          description: \"A client-chosen key. Repeating a request with the same key within the retention window replays the first response instead of solving again; the replay carries `Idempotency-Replayed: true`. The store is per-process and in-memory — it absorbs retries, it is not a durable result cache, and it does not survive a restart or a second app instance.\"\n          schema:\n            type: string\n      requestBody:\n        required: true\n        content:\n          application/json:\n            schema:\n              type: object\n              properties:\n                inputs:\n                  default: []\n                  type: array\n                  items: {}\n                values:\n                  default: {}\n                  type: object\n                  propertyNames:\n                    type: string\n                  additionalProperties: {}\n                channel:\n                  default: live\n                  type: string\n                  enum:\n                    - live\n                    - draft\n                versionId:\n                  type: string\n                definitionUrl:\n                  type: string\n      responses:\n        \"200\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"400\":\n          description: Validation failed.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"429\":\n          description: \"Rate limited. Retry after the interval in `Retry-After`.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"503\":\n          description: The compute server is unconfigured or unreachable.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/definitions/{guid}/schema\":\n    get:\n      summary: \"The live version's UI schema. 404 when nothing is published.\"\n      operationId: getDefinitionsByGuidSchema\n      tags:\n        - Definitions\n      parameters:\n        - name: guid\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"200\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/definitions/{guid}/versions\":\n    get:\n      summary: \"List versions, newest first.\"\n      operationId: getDefinitionsByGuidVersions\n      tags:\n        - Definitions\n      parameters:\n        - name: guid\n          in: path\n          required: true\n          schema:\n            type: string\n        - $ref: \"#/components/parameters/limit\"\n        - $ref: \"#/components/parameters/cursor\"\n        - $ref: \"#/components/parameters/orderBy\"\n        - $ref: \"#/components/parameters/orderDir\"\n      responses:\n        \"200\":\n          description: A page of results.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Page\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n    post:\n      summary: Upload a new version.\n      operationId: postDefinitionsByGuidVersions\n      tags:\n        - Definitions\n      parameters:\n        - name: guid\n          in: path\n          required: true\n          schema:\n            type: string\n      requestBody:\n        required: true\n        content:\n          multipart/form-data:\n            schema:\n              type: object\n              properties:\n                file:\n                  type: string\n                  description: \"The `.gh` or `.ghx` file.\"\n                changeNote:\n                  type: string\n                  description: Truncated to 1000 characters.\n              required:\n                - file\n      responses:\n        \"201\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"400\":\n          description: Validation failed.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"422\":\n          description: Well-formed but not processable.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"503\":\n          description: The compute server is unconfigured or unreachable.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/definitions/{guid}/versions/{versionId}\":\n    get:\n      summary: \"One version, without its cached schema.\"\n      operationId: getDefinitionsByGuidVersionsByVersionId\n      tags:\n        - Definitions\n      parameters:\n        - name: guid\n          in: path\n          required: true\n          schema:\n            type: string\n        - name: versionId\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"200\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n    delete:\n      summary: Delete a version. 409 when it is the live or draft pointer.\n      operationId: deleteDefinitionsByGuidVersionsByVersionId\n      tags:\n        - Definitions\n      parameters:\n        - name: guid\n          in: path\n          required: true\n          schema:\n            type: string\n        - name: versionId\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"204\":\n          description: Success. No content.\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"409\":\n          description: The request conflicts with the current state.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/definitions/{guid}/versions/{versionId}/schema\":\n    get:\n      summary: \"That version's cached UI schema. No compute round-trip.\"\n      operationId: getDefinitionsByGuidVersionsByVersionIdSchema\n      tags:\n        - Definitions\n      parameters:\n        - name: guid\n          in: path\n          required: true\n          schema:\n            type: string\n        - name: versionId\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"200\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/definitions/{guid}/publish\":\n    post:\n      summary: Promote a version to live.\n      operationId: postDefinitionsByGuidPublish\n      tags:\n        - Definitions\n      parameters:\n        - name: guid\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"200\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"400\":\n          description: Validation failed.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/definitions/{guid}/image\":\n    post:\n      summary: Upload a cover image.\n      operationId: postDefinitionsByGuidImage\n      tags:\n        - Definitions\n      parameters:\n        - name: guid\n          in: path\n          required: true\n          schema:\n            type: string\n      requestBody:\n        required: true\n        content:\n          multipart/form-data:\n            schema:\n              type: object\n              properties:\n                image:\n                  type: string\n                  description: \"PNG, JPEG, WebP or GIF.\"\n              required:\n                - image\n      responses:\n        \"200\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"400\":\n          description: Validation failed.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/definitions/{guid}/share-links\":\n    get:\n      summary: List share links. 404 when sharing is disabled on the instance.\n      operationId: getDefinitionsByGuidShare-links\n      tags:\n        - Definitions\n      parameters:\n        - name: guid\n          in: path\n          required: true\n          schema:\n            type: string\n        - $ref: \"#/components/parameters/limit\"\n        - $ref: \"#/components/parameters/cursor\"\n        - $ref: \"#/components/parameters/orderBy\"\n        - $ref: \"#/components/parameters/orderDir\"\n      responses:\n        \"200\":\n          description: A page of results.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Page\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n    post:\n      summary: Create a share link. The raw token is returned once and never again.\n      operationId: postDefinitionsByGuidShare-links\n      tags:\n        - Definitions\n      parameters:\n        - name: guid\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"201\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"400\":\n          description: Validation failed.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/definitions/{guid}/share-links/{linkId}\":\n    delete:\n      summary: Revoke a share link.\n      operationId: deleteDefinitionsByGuidShare-linksByLinkId\n      tags:\n        - Definitions\n      parameters:\n        - name: guid\n          in: path\n          required: true\n          schema:\n            type: string\n        - name: linkId\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"204\":\n          description: Success. No content.\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  /api/v1/projects:\n    get:\n      summary: List projects the caller can view.\n      operationId: getProjects\n      tags:\n        - Projects\n      parameters:\n        - $ref: \"#/components/parameters/limit\"\n        - $ref: \"#/components/parameters/cursor\"\n        - $ref: \"#/components/parameters/orderBy\"\n        - $ref: \"#/components/parameters/orderDir\"\n      responses:\n        \"200\":\n          description: A page of results.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Page\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n    post:\n      summary: Create a project.\n      operationId: postProjects\n      tags:\n        - Projects\n      requestBody:\n        required: true\n        content:\n          application/json:\n            schema:\n              type: object\n              properties:\n                name:\n                  type: string\n                  minLength: 1\n                  maxLength: 128\n                description:\n                  type: string\n                  maxLength: 2000\n                visibility:\n                  default: private\n                  type: string\n                  enum:\n                    - public\n                    - org\n                    - private\n                    - platform\n                autoJoinOnUpload:\n                  type: boolean\n              required:\n                - name\n      responses:\n        \"201\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"400\":\n          description: Validation failed.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"409\":\n          description: The request conflicts with the current state.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/projects/{id}\":\n    get:\n      summary: \"Project record plus the caller's effective role and capabilities.\"\n      operationId: getProjectsById\n      tags:\n        - Projects\n      parameters:\n        - name: id\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"200\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n    patch:\n      summary: Update project settings. Owner-only.\n      operationId: patchProjectsById\n      tags:\n        - Projects\n      parameters:\n        - name: id\n          in: path\n          required: true\n          schema:\n            type: string\n      requestBody:\n        required: true\n        content:\n          application/json:\n            schema:\n              type: object\n              properties:\n                name:\n                  type: string\n                  minLength: 1\n                  maxLength: 128\n                description:\n                  anyOf:\n                    - type: string\n                      maxLength: 2000\n                    - type: \"null\"\n                visibility:\n                  type: string\n                  enum:\n                    - public\n                    - org\n                    - private\n                    - platform\n                autoJoinOnUpload:\n                  type: boolean\n      responses:\n        \"204\":\n          description: Success. No content.\n        \"400\":\n          description: Validation failed.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"409\":\n          description: The request conflicts with the current state.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n    delete:\n      summary: Delete a project.\n      operationId: deleteProjectsById\n      tags:\n        - Projects\n      parameters:\n        - name: id\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"204\":\n          description: Success. No content.\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/projects/{id}/members\":\n    get:\n      summary: List project members.\n      operationId: getProjectsByIdMembers\n      tags:\n        - Projects\n      parameters:\n        - name: id\n          in: path\n          required: true\n          schema:\n            type: string\n        - $ref: \"#/components/parameters/limit\"\n        - $ref: \"#/components/parameters/cursor\"\n        - $ref: \"#/components/parameters/orderBy\"\n        - $ref: \"#/components/parameters/orderDir\"\n      responses:\n        \"200\":\n          description: A page of results.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Page\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n    post:\n      summary: Add a member. The target must already belong to the org.\n      operationId: postProjectsByIdMembers\n      tags:\n        - Projects\n      parameters:\n        - name: id\n          in: path\n          required: true\n          schema:\n            type: string\n      requestBody:\n        required: true\n        content:\n          application/json:\n            schema:\n              type: object\n              properties:\n                userId:\n                  type: string\n                  minLength: 1\n                role:\n                  type: string\n                  enum:\n                    - owner\n                    - editor\n                    - viewer\n              required:\n                - userId\n                - role\n      responses:\n        \"201\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"400\":\n          description: Validation failed.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/projects/{id}/members/{userId}\":\n    patch:\n      summary: Change a member role.\n      operationId: patchProjectsByIdMembersByUserId\n      tags:\n        - Projects\n      parameters:\n        - name: id\n          in: path\n          required: true\n          schema:\n            type: string\n        - name: userId\n          in: path\n          required: true\n          schema:\n            type: string\n      requestBody:\n        required: true\n        content:\n          application/json:\n            schema:\n              type: object\n              properties:\n                role:\n                  type: string\n                  enum:\n                    - owner\n                    - editor\n                    - viewer\n              required:\n                - role\n      responses:\n        \"204\":\n          description: Success. No content.\n        \"400\":\n          description: Validation failed.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"409\":\n          description: The request conflicts with the current state.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n    delete:\n      summary: Remove a member. Idempotent.\n      operationId: deleteProjectsByIdMembersByUserId\n      tags:\n        - Projects\n      parameters:\n        - name: id\n          in: path\n          required: true\n          schema:\n            type: string\n        - name: userId\n          in: path\n          required: true\n          schema:\n            type: string\n        - name: confirm\n          in: query\n          required: false\n          description: \"Set to `true` to remove a co-owner; without it the call returns 409.\"\n          schema:\n            type: string\n      responses:\n        \"204\":\n          description: Success. No content.\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"409\":\n          description: The request conflicts with the current state.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/projects/{id}/reclaim\":\n    post:\n      summary: Claim ownership of an unowned project.\n      operationId: postProjectsByIdReclaim\n      tags:\n        - Projects\n      parameters:\n        - name: id\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"201\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"409\":\n          description: The request conflicts with the current state.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/orgs/{orgId}\":\n    get:\n      summary: \"Org record. The org must be the caller's acting org.\"\n      operationId: getOrgsByOrgId\n      tags:\n        - Orgs\n      parameters:\n        - name: orgId\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"200\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/orgs/{orgId}/members\":\n    get:\n      summary: List org members.\n      operationId: getOrgsByOrgIdMembers\n      tags:\n        - Orgs\n      parameters:\n        - name: orgId\n          in: path\n          required: true\n          schema:\n            type: string\n        - $ref: \"#/components/parameters/limit\"\n        - $ref: \"#/components/parameters/cursor\"\n        - $ref: \"#/components/parameters/orderBy\"\n        - $ref: \"#/components/parameters/orderDir\"\n      responses:\n        \"200\":\n          description: A page of results.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Page\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/orgs/{orgId}/members/{userId}\":\n    patch:\n      summary: Change an org role or permission set. The sole owner cannot be demoted.\n      operationId: patchOrgsByOrgIdMembersByUserId\n      tags:\n        - Orgs\n      parameters:\n        - name: orgId\n          in: path\n          required: true\n          schema:\n            type: string\n        - name: userId\n          in: path\n          required: true\n          schema:\n            type: string\n      requestBody:\n        required: true\n        content:\n          application/json:\n            schema:\n              type: object\n              properties:\n                role:\n                  type: string\n                  enum:\n                    - owner\n                    - admin\n                    - member\n                permissions:\n                  type: array\n                  items:\n                    type: string\n                    enum:\n                      - manage_org_members\n                      - manage_org_compute\n                      - manage_definitions\n                      - manage_projects\n      responses:\n        \"204\":\n          description: Success. No content.\n        \"400\":\n          description: Validation failed.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"409\":\n          description: The request conflicts with the current state.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n    delete:\n      summary: Remove an org member. The sole owner cannot be removed.\n      operationId: deleteOrgsByOrgIdMembersByUserId\n      tags:\n        - Orgs\n      parameters:\n        - name: orgId\n          in: path\n          required: true\n          schema:\n            type: string\n        - name: userId\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"204\":\n          description: Success. No content.\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"409\":\n          description: The request conflicts with the current state.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/orgs/{orgId}/invites\":\n    get:\n      summary: List pending invites.\n      operationId: getOrgsByOrgIdInvites\n      tags:\n        - Orgs\n      parameters:\n        - name: orgId\n          in: path\n          required: true\n          schema:\n            type: string\n        - $ref: \"#/components/parameters/limit\"\n        - $ref: \"#/components/parameters/cursor\"\n        - $ref: \"#/components/parameters/orderBy\"\n        - $ref: \"#/components/parameters/orderDir\"\n      responses:\n        \"200\":\n          description: A page of results.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Page\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n    post:\n      summary: Invite someone to the org. The accept URL is returned once.\n      operationId: postOrgsByOrgIdInvites\n      tags:\n        - Orgs\n      parameters:\n        - name: orgId\n          in: path\n          required: true\n          schema:\n            type: string\n      requestBody:\n        required: true\n        content:\n          application/json:\n            schema:\n              type: object\n              properties:\n                email:\n                  type: string\n                  format: email\n                  pattern: \"^(?:[A-Za-z0-9_'+\\\\-]+\\\\.)*[A-Za-z0-9_'+\\\\-]*[A-Za-z0-9_+-]@(?:[A-Za-z0-9][A-Za-z0-9\\\\-]*\\\\.)+[A-Za-z]{2,}$\"\n                orgRole:\n                  default: member\n                  type: string\n                  enum:\n                    - owner\n                    - admin\n                    - member\n                permissions:\n                  default: []\n                  type: array\n                  items:\n                    anyOf:\n                      - type: string\n                        enum:\n                          - instance_admin\n                          - manage_compute\n                          - manage_instance_users\n                          - manage_updates\n                      - type: string\n                        enum:\n                          - manage_org_members\n                          - manage_org_compute\n                          - manage_definitions\n                          - manage_projects\n              required:\n                - email\n      responses:\n        \"201\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"400\":\n          description: Validation failed.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"409\":\n          description: The request conflicts with the current state.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/orgs/{orgId}/invites/{id}\":\n    delete:\n      summary: Revoke an invite.\n      operationId: deleteOrgsByOrgIdInvitesById\n      tags:\n        - Orgs\n      parameters:\n        - name: orgId\n          in: path\n          required: true\n          schema:\n            type: string\n        - name: id\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"204\":\n          description: Success. No content.\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/orgs/{orgId}/invites/{id}/resend\":\n    post:\n      summary: \"Re-send an invite. Issues a replacement and revokes the original, so the previous link stops working.\"\n      operationId: postOrgsByOrgIdInvitesByIdResend\n      tags:\n        - Orgs\n      parameters:\n        - name: orgId\n          in: path\n          required: true\n          schema:\n            type: string\n        - name: id\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"201\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"409\":\n          description: The request conflicts with the current state.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/orgs/{orgId}/compute\":\n    get:\n      summary: Org compute-server overrides and the shared catalog.\n      operationId: getOrgsByOrgIdCompute\n      tags:\n        - Orgs\n      x-internal: true\n      parameters:\n        - name: orgId\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"200\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n    patch:\n      summary: Replace the org compute-server overrides.\n      operationId: patchOrgsByOrgIdCompute\n      tags:\n        - Orgs\n      x-internal: true\n      parameters:\n        - name: orgId\n          in: path\n          required: true\n          schema:\n            type: string\n      requestBody:\n        required: true\n        content:\n          application/json:\n            schema:\n              type: object\n              properties:\n                servers:\n                  type: array\n                  items:\n                    type: object\n                    properties:\n                      id:\n                        type: string\n                        minLength: 1\n                      label:\n                        type: string\n                        minLength: 1\n                      serverUrl:\n                        type: string\n                        minLength: 1\n                      apiKey:\n                        type:\n                          - string\n                          - \"null\"\n                      timeoutMs:\n                        type: number\n                      retryCount:\n                        type: number\n                    required:\n                      - id\n                      - label\n                      - serverUrl\n                defaultServerId:\n                  type:\n                    - string\n                    - \"null\"\n              required:\n                - servers\n      responses:\n        \"204\":\n          description: Success. No content.\n        \"400\":\n          description: Validation failed.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/orgs/{orgId}/assets/{kind}\":\n    post:\n      summary: Upload an org branding asset.\n      operationId: postOrgsByOrgIdAssetsByKind\n      tags:\n        - Orgs\n      x-internal: true\n      parameters:\n        - name: orgId\n          in: path\n          required: true\n          schema:\n            type: string\n        - name: kind\n          in: path\n          required: true\n          schema:\n            type: string\n      requestBody:\n        required: true\n        content:\n          multipart/form-data:\n            schema:\n              type: object\n              properties:\n                image:\n                  type: string\n                  description: \"PNG, JPEG, WebP, GIF or SVG.\"\n              required:\n                - image\n      responses:\n        \"200\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"400\":\n          description: Validation failed.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n    delete:\n      summary: Remove an org branding asset.\n      operationId: deleteOrgsByOrgIdAssetsByKind\n      tags:\n        - Orgs\n      x-internal: true\n      parameters:\n        - name: orgId\n          in: path\n          required: true\n          schema:\n            type: string\n        - name: kind\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"204\":\n          description: Success. No content.\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  /api/v1/compute:\n    post:\n      summary: \"Generic solve, including remote definition URLs and share-token access.\"\n      operationId: postCompute\n      tags:\n        - Compute\n      x-internal: true\n      responses:\n        \"200\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"400\":\n          description: Validation failed.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"429\":\n          description: \"Rate limited. Retry after the interval in `Retry-After`.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"503\":\n          description: The compute server is unconfigured or unreachable.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  /api/v1/compute/schema:\n    post:\n      summary: Extract UI schemas from an uploaded file before it becomes a definition.\n      operationId: postComputeSchema\n      tags:\n        - Compute\n      x-internal: true\n      parameters:\n        - name: projectId\n          in: query\n          required: false\n          description: Project the file will belong to.\n          schema:\n            type: string\n        - name: computeServerId\n          in: query\n          required: false\n          description: Pin to a compute server.\n          schema:\n            type: string\n      requestBody:\n        required: true\n        content:\n          multipart/form-data:\n            schema:\n              type: object\n              properties:\n                file:\n                  type: string\n                  description: \"The `.gh` or `.ghx` file.\"\n              required:\n                - file\n      responses:\n        \"200\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"400\":\n          description: Validation failed.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"403\":\n          description: \"Authenticated, but not permitted to perform this action.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"422\":\n          description: Well-formed but not processable.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"503\":\n          description: The compute server is unconfigured or unreachable.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  /api/v1/solve-events:\n    get:\n      summary: \"The tab's live event stream (SSE). Solves that name its `streamId` report here.\"\n      operationId: getSolve-events\n      tags:\n        - Solve-events\n      x-internal: true\n      parameters:\n        - name: streamId\n          in: query\n          required: false\n          description: \"Minted by the tab, 16-64 URL-safe characters.\"\n          schema:\n            type: string\n      responses:\n        \"200\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"400\":\n          description: Validation failed.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"409\":\n          description: The request conflicts with the current state.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/solve-events/{solveId}\":\n    post:\n      summary: \"The plugin's callback from inside a Compute solve. The reply carries `abort`.\"\n      operationId: postSolve-eventsBySolveId\n      tags:\n        - Solve-events\n      x-internal: true\n      parameters:\n        - name: solveId\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"200\":\n          description: Success.\n          content:\n            application/json:\n              schema:\n                type: object\n        \"400\":\n          description: Validation failed.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"410\":\n          description: Error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n  \"/api/v1/solve/{solveId}/cancel\":\n    post:\n      summary: \"Ask a running solve to abort. Cooperative: it stops at the next component.\"\n      operationId: postSolveBySolveIdCancel\n      tags:\n        - Solve\n      x-internal: true\n      parameters:\n        - name: solveId\n          in: path\n          required: true\n          schema:\n            type: string\n      responses:\n        \"204\":\n          description: Success. No content.\n        \"401\":\n          description: Missing or invalid credentials.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"404\":\n          description: \"No such resource, or the caller cannot see it.\"\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n        \"500\":\n          description: Unexpected server error.\n          content:\n            application/json:\n              schema:\n                $ref: \"#/components/schemas/Error\"\n";
+//#endregion
+//#region src/routes/docs/api/openapi.yaml/+server.ts
+var GET = async () => new Response(v1_default, { headers: {
+	"Content-Type": "application/yaml; charset=utf-8",
+	"Cache-Control": "public, max-age=300"
+} });
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-Ds38ZE4x.js.map