@selvajs/selva 4.2.0 → 4.2.1

package/build/server/chunks/{_server.ts-DgTNMZbG.js.map → _server.ts-BUw5lGMN.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_server.ts-DgTNMZbG.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/org/compute/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { e as getComputeServerConfigStore, q as isOrgServer, r as isPlatformServer, f as flag } from \"../../../../../chunks/providers.server.js\";\nimport { x as requireManageOrgCompute } from \"../../../../../chunks/access.server.js\";\nimport \"../../../../../chunks/context.js\";\nimport { s as serversVisibleTo } from \"../../../../../chunks/utils2.js\";\nfunction requireFlag() {\n  if (!flag(\"ALLOW_ORG_COMPUTE_OVERRIDE\")) {\n    throw error(\n      403,\n      \"Per-org compute override is disabled on this instance (ALLOW_ORG_COMPUTE_OVERRIDE).\"\n    );\n  }\n}\nconst GET = async ({ locals }) => {\n  requireFlag();\n  requireManageOrgCompute(locals);\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n  const config = await getComputeServerConfigStore().getConfig(ctx);\n  const orgId = ctx.actingOrgId;\n  const owned = config.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => {\n    const orgServer = s;\n    const { apiKey, ...rest } = orgServer;\n    return { ...rest, hasApiKey: !!apiKey };\n  });\n  const visible = serversVisibleTo(config, orgId);\n  const catalog = visible.map((s) => ({\n    id: s.id,\n    label: s.label,\n    serverUrl: s.serverUrl,\n    scope: s.scope,\n    source: isPlatformServer(s) ? \"platform\" : \"org\",\n    timeoutMs: s.timeoutMs,\n    retryCount: s.retryCount\n  }));\n  return json({\n    servers: owned,\n    defaultServerId: config.orgDefaults?.[orgId] ?? null,\n    globalDefaultServerId: config.defaultServerId ?? null,\n    catalog\n  });\n};\nconst PUT = async ({ request, locals }) => {\n  requireFlag();\n  requireManageOrgCompute(locals);\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n  const orgId = ctx.actingOrgId;\n  const body = await request.json().catch(() => null);\n  if (!body || typeof body !== \"object\") throw error(400, \"Invalid request body\");\n  const incoming = body;\n  if (!Array.isArray(incoming.servers)) throw error(400, \"servers must be an array\");\n  for (const s of incoming.servers) {\n    if (!s.id || typeof s.id !== \"string\") throw error(400, \"Each server needs an id\");\n    if (!s.label || typeof s.label !== \"string\") throw error(400, \"Each server needs a label\");\n    if (!s.serverUrl || typeof s.serverUrl !== \"string\")\n      throw error(400, \"Each server needs a serverUrl\");\n    try {\n      new URL(s.serverUrl);\n    } catch {\n      throw error(400, `Invalid serverUrl: ${s.serverUrl}`);\n    }\n    if (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== \"string\")\n      throw error(400, \"apiKey must be a string, null, or omitted\");\n  }\n  const provider = getComputeServerConfigStore();\n  const existing = await provider.getConfig(ctx);\n  const storedKeyById = new Map(\n    existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => [s.id, s.apiKey])\n  );\n  const next = incoming.servers.map((s) => ({\n    id: s.id,\n    scope: \"org\",\n    ownerOrgId: orgId,\n    label: s.label,\n    serverUrl: s.serverUrl,\n    timeoutMs: s.timeoutMs,\n    retryCount: s.retryCount,\n    apiKey: s.apiKey === null ? void 0 : s.apiKey ? s.apiKey : storedKeyById.get(s.id)\n  }));\n  if (typeof incoming.defaultServerId === \"string\") {\n    const projected = {\n      servers: [\n        ...existing.servers.filter((s) => !(isOrgServer(s) && s.ownerOrgId === orgId)),\n        ...next\n      ],\n      defaultServerId: existing.defaultServerId,\n      orgDefaults: existing.orgDefaults\n    };\n    const visibleIds = new Set(serversVisibleTo(projected, orgId).map((s) => s.id));\n    if (!visibleIds.has(incoming.defaultServerId)) {\n      throw error(400, \"defaultServerId must reference a server visible to this organization\");\n    }\n  }\n  await provider.saveOrgServers(ctx, orgId, next, incoming.defaultServerId);\n  return new Response(null, { status: 204 });\n};\nexport {\n  GET,\n  PUT\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAKA,SAAS,WAAW,GAAG;AACvB,EAAE,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE;AAC3C,IAAI,MAAM,KAAK;AACf,MAAM,GAAG;AACT,MAAM;AACN,KAAK;AACL,EAAE;AACF;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,WAAW,EAAE;AACf,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAClE,EAAE,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC;AACnE,EAAE,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC/B,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK;AAClG,IAAI,MAAM,SAAS,GAAG,CAAC;AACvB,IAAI,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS;AACzC,IAAI,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;AAC3C,EAAE,CAAC,CAAC;AACJ,EAAE,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC;AACjD,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AACtC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE;AACZ,IAAI,KAAK,EAAE,CAAC,CAAC,KAAK;AAClB,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS;AAC1B,IAAI,KAAK,EAAE,CAAC,CAAC,KAAK;AAClB,IAAI,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,KAAK;AACpD,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS;AAC1B,IAAI,UAAU,EAAE,CAAC,CAAC;AAClB,GAAG,CAAC,CAAC;AACL,EAAE,OAAO,IAAI,CAAC;AACd,IAAI,OAAO,EAAE,KAAK;AAClB,IAAI,eAAe,EAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,IAAI,IAAI;AACxD,IAAI,qBAAqB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;AACzD,IAAI;AACJ,GAAG,CAAC;AACJ;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC3C,EAAE,WAAW,EAAE;AACf,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAClE,EAAE,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC/B,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,sBAAsB,CAAC;AACjF,EAAE,MAAM,QAAQ,GAAG,IAAI;AACvB,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACpF,EAAE,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE;AACpC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtF,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,2BAA2B,CAAC;AAC9F,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;AACvD,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,+BAA+B,CAAC;AACvD,IAAI,IAAI;AACR,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1B,IAAI,CAAC,CAAC,MAAM;AACZ,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAC3D,IAAI;AACJ,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;AAChF,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,2CAA2C,CAAC;AACnE,EAAE;AACF,EAAE,MAAM,QAAQ,GAAG,2BAA2B,EAAE;AAChD,EAAE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC;AAChD,EAAE,MAAM,aAAa,GAAG,IAAI,GAAG;AAC/B,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;AACxG,GAAG;AACH,EAAE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC5C,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE;AACZ,IAAI,KAAK,EAAE,KAAK;AAChB,IAAI,UAAU,EAAE,KAAK;AACrB,IAAI,KAAK,EAAE,CAAC,CAAC,KAAK;AAClB,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS;AAC1B,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS;AAC1B,IAAI,UAAU,EAAE,CAAC,CAAC,UAAU;AAC5B,IAAI,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;AACrF,GAAG,CAAC,CAAC;AACL,EAAE,IAAI,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ,EAAE;AACpD,IAAI,MAAM,SAAS,GAAG;AACtB,MAAM,OAAO,EAAE;AACf,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC;AACtF,QAAQ,GAAG;AACX,OAAO;AACP,MAAM,eAAe,EAAE,QAAQ,CAAC,eAAe;AAC/C,MAAM,WAAW,EAAE,QAAQ,CAAC;AAC5B,KAAK;AACL,IAAI,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;AACnF,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE;AACnD,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,sEAAsE,CAAC;AAC9F,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC;AAC3E,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C;;;;"}
+{"version":3,"file":"_server.ts-BUw5lGMN.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/org/compute/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { c as getComputeServerConfigStore, r as isOrgServer, s as isPlatformServer, f as flag } from \"../../../../../chunks/providers.server.js\";\nimport { x as requireManageOrgCompute } from \"../../../../../chunks/access.server.js\";\nimport \"../../../../../chunks/context.js\";\nimport { s as serversVisibleTo } from \"../../../../../chunks/utils2.js\";\nfunction requireFlag() {\n  if (!flag(\"ALLOW_ORG_COMPUTE_OVERRIDE\")) {\n    throw error(\n      403,\n      \"Per-org compute override is disabled on this instance (ALLOW_ORG_COMPUTE_OVERRIDE).\"\n    );\n  }\n}\nconst GET = async ({ locals }) => {\n  requireFlag();\n  requireManageOrgCompute(locals);\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n  const config = await getComputeServerConfigStore().getConfig(ctx);\n  const orgId = ctx.actingOrgId;\n  const owned = config.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => {\n    const orgServer = s;\n    const { apiKey, ...rest } = orgServer;\n    return { ...rest, hasApiKey: !!apiKey };\n  });\n  const visible = serversVisibleTo(config, orgId);\n  const catalog = visible.map((s) => ({\n    id: s.id,\n    label: s.label,\n    serverUrl: s.serverUrl,\n    scope: s.scope,\n    source: isPlatformServer(s) ? \"platform\" : \"org\",\n    timeoutMs: s.timeoutMs,\n    retryCount: s.retryCount\n  }));\n  return json({\n    servers: owned,\n    defaultServerId: config.orgDefaults?.[orgId] ?? null,\n    globalDefaultServerId: config.defaultServerId ?? null,\n    catalog\n  });\n};\nconst PUT = async ({ request, locals }) => {\n  requireFlag();\n  requireManageOrgCompute(locals);\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) throw error(400, \"No active organization\");\n  const orgId = ctx.actingOrgId;\n  const body = await request.json().catch(() => null);\n  if (!body || typeof body !== \"object\") throw error(400, \"Invalid request body\");\n  const incoming = body;\n  if (!Array.isArray(incoming.servers)) throw error(400, \"servers must be an array\");\n  for (const s of incoming.servers) {\n    if (!s.id || typeof s.id !== \"string\") throw error(400, \"Each server needs an id\");\n    if (!s.label || typeof s.label !== \"string\") throw error(400, \"Each server needs a label\");\n    if (!s.serverUrl || typeof s.serverUrl !== \"string\")\n      throw error(400, \"Each server needs a serverUrl\");\n    try {\n      new URL(s.serverUrl);\n    } catch {\n      throw error(400, `Invalid serverUrl: ${s.serverUrl}`);\n    }\n    if (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== \"string\")\n      throw error(400, \"apiKey must be a string, null, or omitted\");\n  }\n  const provider = getComputeServerConfigStore();\n  const existing = await provider.getConfig(ctx);\n  const storedKeyById = new Map(\n    existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => [s.id, s.apiKey])\n  );\n  const next = incoming.servers.map((s) => ({\n    id: s.id,\n    scope: \"org\",\n    ownerOrgId: orgId,\n    label: s.label,\n    serverUrl: s.serverUrl,\n    timeoutMs: s.timeoutMs,\n    retryCount: s.retryCount,\n    apiKey: s.apiKey === null ? void 0 : s.apiKey ? s.apiKey : storedKeyById.get(s.id)\n  }));\n  if (typeof incoming.defaultServerId === \"string\") {\n    const projected = {\n      servers: [\n        ...existing.servers.filter((s) => !(isOrgServer(s) && s.ownerOrgId === orgId)),\n        ...next\n      ],\n      defaultServerId: existing.defaultServerId,\n      orgDefaults: existing.orgDefaults\n    };\n    const visibleIds = new Set(serversVisibleTo(projected, orgId).map((s) => s.id));\n    if (!visibleIds.has(incoming.defaultServerId)) {\n      throw error(400, \"defaultServerId must reference a server visible to this organization\");\n    }\n  }\n  await provider.saveOrgServers(ctx, orgId, next, incoming.defaultServerId);\n  return new Response(null, { status: 204 });\n};\nexport {\n  GET,\n  PUT\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAKA,SAAS,WAAW,GAAG;AACvB,EAAE,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE;AAC3C,IAAI,MAAM,KAAK;AACf,MAAM,GAAG;AACT,MAAM;AACN,KAAK;AACL,EAAE;AACF;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,WAAW,EAAE;AACf,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAClE,EAAE,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC;AACnE,EAAE,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC/B,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK;AAClG,IAAI,MAAM,SAAS,GAAG,CAAC;AACvB,IAAI,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS;AACzC,IAAI,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;AAC3C,EAAE,CAAC,CAAC;AACJ,EAAE,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC;AACjD,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AACtC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE;AACZ,IAAI,KAAK,EAAE,CAAC,CAAC,KAAK;AAClB,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS;AAC1B,IAAI,KAAK,EAAE,CAAC,CAAC,KAAK;AAClB,IAAI,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,KAAK;AACpD,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS;AAC1B,IAAI,UAAU,EAAE,CAAC,CAAC;AAClB,GAAG,CAAC,CAAC;AACL,EAAE,OAAO,IAAI,CAAC;AACd,IAAI,OAAO,EAAE,KAAK;AAClB,IAAI,eAAe,EAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,IAAI,IAAI;AACxD,IAAI,qBAAqB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;AACzD,IAAI;AACJ,GAAG,CAAC;AACJ;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC3C,EAAE,WAAW,EAAE;AACf,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAClE,EAAE,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC/B,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,sBAAsB,CAAC;AACjF,EAAE,MAAM,QAAQ,GAAG,IAAI;AACvB,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACpF,EAAE,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE;AACpC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtF,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,2BAA2B,CAAC;AAC9F,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;AACvD,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,+BAA+B,CAAC;AACvD,IAAI,IAAI;AACR,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1B,IAAI,CAAC,CAAC,MAAM;AACZ,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAC3D,IAAI;AACJ,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;AAChF,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,2CAA2C,CAAC;AACnE,EAAE;AACF,EAAE,MAAM,QAAQ,GAAG,2BAA2B,EAAE;AAChD,EAAE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC;AAChD,EAAE,MAAM,aAAa,GAAG,IAAI,GAAG;AAC/B,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;AACxG,GAAG;AACH,EAAE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC5C,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE;AACZ,IAAI,KAAK,EAAE,KAAK;AAChB,IAAI,UAAU,EAAE,KAAK;AACrB,IAAI,KAAK,EAAE,CAAC,CAAC,KAAK;AAClB,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS;AAC1B,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS;AAC1B,IAAI,UAAU,EAAE,CAAC,CAAC,UAAU;AAC5B,IAAI,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;AACrF,GAAG,CAAC,CAAC;AACL,EAAE,IAAI,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ,EAAE;AACpD,IAAI,MAAM,SAAS,GAAG;AACtB,MAAM,OAAO,EAAE;AACf,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC;AACtF,QAAQ,GAAG;AACX,OAAO;AACP,MAAM,eAAe,EAAE,QAAQ,CAAC,eAAe;AAC/C,MAAM,WAAW,EAAE,QAAQ,CAAC;AAC5B,KAAK;AACL,IAAI,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;AACnF,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE;AACnD,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,sEAAsE,CAAC;AAC9F,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC;AAC3E,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C;;;;"}

package/build/server/chunks/{_server.ts-CKvfxWeo.js → _server.ts-Bhj8Vx5l.js}

@@ -1,9 +1,9 @@
 import { error, json } from '@sveltejs/kit';
 import { z } from 'zod';
-import { c as getAuthProvider, k as getOrganizationProvider, l as getPermissionStore } from './providers.server-MD7TK-zQ.js';
-import { w as requireManageInstanceUsers } from './access.server-BBglojso.js';
-import { s as setUserPlatformPermissions } from './permissions.server-cNGc9ris.js';
-import { t as throwZodError, h as handleApiError } from './api-errors-agQVBoep.js';
+import { a as getAuthProvider, k as getOrganizationProvider, l as getPermissionStore } from './providers.server-wGknM6CR.js';
+import { w as requireManageInstanceUsers } from './access.server-ByXvmWyF.js';
+import { s as setUserPlatformPermissions } from './permissions.server-7AwAAkY9.js';
+import { t as throwZodError, h as handleApiError } from './api-errors-C0SWfJj5.js';
 import { S as SYSTEM_CONTEXT, j as hasPermission, M as MEMBER_ASSIGNABLE_PERMISSIONS, P as PlatformPermissionSchema, d as OrgPermissionSchema } from './context-DKDYb-He.js';
 import { f as flattenPermissions, s as splitFlatPermissions } from './permissions-compat.server-BDkKxDeZ.js';
 import './shared-server-C3WdcJCQ.js';
@@ -14,7 +14,7 @@ import 'node:crypto';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
 import '@selvajs/compute/core';
-import './utils2-D38XWwRv.js';
+import './utils2-BsnrDRob.js';
 
 const FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);
 const BaseUserBody = z.object({
@@ -105,4 +105,4 @@ const POST = async ({ request, locals }) => {
 };
 
 export { GET, POST };
-//# sourceMappingURL=_server.ts-CKvfxWeo.js.map
+//# sourceMappingURL=_server.ts-Bhj8Vx5l.js.map

package/build/server/chunks/{_server.ts-CKvfxWeo.js.map → _server.ts-Bhj8Vx5l.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_server.ts-CKvfxWeo.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/users/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { c as getAuthProvider, k as getOrganizationProvider, l as getPermissionStore } from \"../../../../../chunks/providers.server.js\";\nimport { w as requireManageInstanceUsers } from \"../../../../../chunks/access.server.js\";\nimport { s as setUserPlatformPermissions } from \"../../../../../chunks/permissions.server.js\";\nimport { t as throwZodError, h as handleApiError } from \"../../../../../chunks/api-errors.js\";\nimport { P as PlatformPermissionSchema, d as OrgPermissionSchema, S as SYSTEM_CONTEXT, j as hasPermission, M as MEMBER_ASSIGNABLE_PERMISSIONS } from \"../../../../../chunks/context.js\";\nimport { f as flattenPermissions, s as splitFlatPermissions } from \"../../../../../chunks/permissions-compat.server.js\";\nconst FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);\nconst BaseUserBody = z.object({\n  email: z.string().email(\"Valid email is required\"),\n  permissions: z.array(FlatPermissionSchema)\n});\nconst PasswordUserBody = BaseUserBody.extend({\n  password: z.string().min(8, \"Password must be at least 8 characters\").optional()\n});\nconst GET = async ({ locals }) => {\n  requireManageInstanceUsers(locals);\n  const page = await getAuthProvider().listUsers({ limit: 200 });\n  if (page === null) {\n    throw error(\n      501,\n      \"User management is not supported by the current auth provider. Configure DATA_PATH (local provider) or check your provider wiring.\"\n    );\n  }\n  const orgId = locals.ctx?.actingOrgId;\n  const orgs = getOrganizationProvider();\n  const userIds = page.items.map((u) => u.id);\n  const platformByUser = await getPermissionStore().getForBatch(locals.ctx, userIds);\n  const flattened = await Promise.all(\n    page.items.map(async (u) => {\n      let orgPerms = [];\n      if (orgId) {\n        const member = await orgs.getOrgMember(SYSTEM_CONTEXT, orgId, u.id);\n        orgPerms = member?.permissions ?? [];\n      }\n      const platformPerms = platformByUser.get(u.id) ?? [];\n      return {\n        ...u,\n        platformPermissions: platformPerms,\n        permissions: flattenPermissions(\n          platformPerms,\n          orgPerms\n        )\n      };\n    })\n  );\n  return json(flattened);\n};\nconst POST = async ({ request, locals }) => {\n  requireManageInstanceUsers(locals);\n  const auth = getAuthProvider();\n  const body = await request.json().catch(() => null);\n  const parsed = PasswordUserBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const { email, password, permissions } = parsed.data;\n  const { platform, org } = splitFlatPermissions(permissions);\n  if (platform.length > 0 && !hasPermission(locals.ctx, \"instance_admin\")) {\n    throw error(403, \"Only a platform admin can grant platform-scope permissions\");\n  }\n  try {\n    let user;\n    if (auth.passwordAuth) {\n      if (!password) throw error(400, \"Password is required\");\n      user = await auth.passwordAuth.createUserWithPassword(email, password);\n    } else if (auth.createUser) {\n      user = await auth.createUser(email);\n    } else {\n      throw error(\n        501,\n        `User creation is not supported by ${auth.name}. Users are managed externally.`\n      );\n    }\n    if (platform.length > 0) {\n      await setUserPlatformPermissions(locals.ctx, user.id, platform);\n    }\n    const orgId = locals.ctx?.actingOrgId;\n    if (orgId) {\n      const joinedAt = (/* @__PURE__ */ new Date()).toISOString();\n      await getOrganizationProvider().addOrgMember(SYSTEM_CONTEXT, {\n        orgId,\n        userId: user.id,\n        role: \"member\",\n        permissions: org.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)),\n        joinedAt,\n        updatedAt: joinedAt,\n        updatedBy: locals.user?.id ?? user.id,\n        deletedAt: null\n      });\n    }\n    return json(user, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to create user\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAQA,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;AACrF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;AAC9B,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC;AACpD,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB;AAC3C,CAAC,CAAC;AACF,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC;AAC7C,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wCAAwC,CAAC,CAAC,QAAQ;AAChF,CAAC,CAAC;AACG,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,0BAA0B,CAAC,MAAM,CAAC;AACpC,EAAE,MAAM,IAAI,GAAG,MAAM,eAAe,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAChE,EAAE,IAAI,IAAI,KAAK,IAAI,EAAE;AACrB,IAAI,MAAM,KAAK;AACf,MAAM,GAAG;AACT,MAAM;AACN,KAAK;AACL,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,WAAW;AACvC,EAAE,MAAM,IAAI,GAAG,uBAAuB,EAAE;AACxC,EAAE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AAC7C,EAAE,MAAM,cAAc,GAAG,MAAM,kBAAkB,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC;AACpF,EAAE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG;AACrC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK;AAChC,MAAM,IAAI,QAAQ,GAAG,EAAE;AACvB,MAAM,IAAI,KAAK,EAAE;AACjB,QAAQ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;AAC3E,QAAQ,QAAQ,GAAG,MAAM,EAAE,WAAW,IAAI,EAAE;AAC5C,MAAM;AACN,MAAM,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE;AAC1D,MAAM,OAAO;AACb,QAAQ,GAAG,CAAC;AACZ,QAAQ,mBAAmB,EAAE,aAAa;AAC1C,QAAQ,WAAW,EAAE,kBAAkB;AACvC,UAAU,aAAa;AACvB,UAAU;AACV;AACA,OAAO;AACP,IAAI,CAAC;AACL,GAAG;AACH,EAAE,OAAO,IAAI,CAAC,SAAS,CAAC;AACxB;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,0BAA0B,CAAC,MAAM,CAAC;AACpC,EAAE,MAAM,IAAI,GAAG,eAAe,EAAE;AAChC,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC;AACjD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,IAAI;AACtD,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,oBAAoB,CAAC,WAAW,CAAC;AAC7D,EAAE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE;AAC3E,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,4DAA4D,CAAC;AAClF,EAAE;AACF,EAAE,IAAI;AACN,IAAI,IAAI,IAAI;AACZ,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE;AAC3B,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC;AAC5E,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE;AAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;AACzC,IAAI,CAAC,MAAM;AACX,MAAM,MAAM,KAAK;AACjB,QAAQ,GAAG;AACX,QAAQ,CAAC,kCAAkC,EAAE,IAAI,CAAC,IAAI,CAAC,+BAA+B;AACtF,OAAO;AACP,IAAI;AACJ,IAAI,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE;AAC7B,MAAM,MAAM,0BAA0B,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC;AACrE,IAAI;AACJ,IAAI,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,WAAW;AACzC,IAAI,IAAI,KAAK,EAAE;AACf,MAAM,MAAM,QAAQ,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACjE,MAAM,MAAM,uBAAuB,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE;AACnE,QAAQ,KAAK;AACb,QAAQ,MAAM,EAAE,IAAI,CAAC,EAAE;AACvB,QAAQ,IAAI,EAAE,QAAQ;AACtB,QAAQ,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACjF,QAAQ,QAAQ;AAChB,QAAQ,SAAS,EAAE,QAAQ;AAC3B,QAAQ,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE;AAC7C,QAAQ,SAAS,EAAE;AACnB,OAAO,CAAC;AACR,IAAI;AACJ,IAAI,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACtC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,uBAAuB,CAAC;AAChD,EAAE;AACF;;;;"}
+{"version":3,"file":"_server.ts-Bhj8Vx5l.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/users/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { a as getAuthProvider, k as getOrganizationProvider, l as getPermissionStore } from \"../../../../../chunks/providers.server.js\";\nimport { w as requireManageInstanceUsers } from \"../../../../../chunks/access.server.js\";\nimport { s as setUserPlatformPermissions } from \"../../../../../chunks/permissions.server.js\";\nimport { t as throwZodError, h as handleApiError } from \"../../../../../chunks/api-errors.js\";\nimport { P as PlatformPermissionSchema, d as OrgPermissionSchema, S as SYSTEM_CONTEXT, j as hasPermission, M as MEMBER_ASSIGNABLE_PERMISSIONS } from \"../../../../../chunks/context.js\";\nimport { f as flattenPermissions, s as splitFlatPermissions } from \"../../../../../chunks/permissions-compat.server.js\";\nconst FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);\nconst BaseUserBody = z.object({\n  email: z.string().email(\"Valid email is required\"),\n  permissions: z.array(FlatPermissionSchema)\n});\nconst PasswordUserBody = BaseUserBody.extend({\n  password: z.string().min(8, \"Password must be at least 8 characters\").optional()\n});\nconst GET = async ({ locals }) => {\n  requireManageInstanceUsers(locals);\n  const page = await getAuthProvider().listUsers({ limit: 200 });\n  if (page === null) {\n    throw error(\n      501,\n      \"User management is not supported by the current auth provider. Configure DATA_PATH (local provider) or check your provider wiring.\"\n    );\n  }\n  const orgId = locals.ctx?.actingOrgId;\n  const orgs = getOrganizationProvider();\n  const userIds = page.items.map((u) => u.id);\n  const platformByUser = await getPermissionStore().getForBatch(locals.ctx, userIds);\n  const flattened = await Promise.all(\n    page.items.map(async (u) => {\n      let orgPerms = [];\n      if (orgId) {\n        const member = await orgs.getOrgMember(SYSTEM_CONTEXT, orgId, u.id);\n        orgPerms = member?.permissions ?? [];\n      }\n      const platformPerms = platformByUser.get(u.id) ?? [];\n      return {\n        ...u,\n        platformPermissions: platformPerms,\n        permissions: flattenPermissions(\n          platformPerms,\n          orgPerms\n        )\n      };\n    })\n  );\n  return json(flattened);\n};\nconst POST = async ({ request, locals }) => {\n  requireManageInstanceUsers(locals);\n  const auth = getAuthProvider();\n  const body = await request.json().catch(() => null);\n  const parsed = PasswordUserBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const { email, password, permissions } = parsed.data;\n  const { platform, org } = splitFlatPermissions(permissions);\n  if (platform.length > 0 && !hasPermission(locals.ctx, \"instance_admin\")) {\n    throw error(403, \"Only a platform admin can grant platform-scope permissions\");\n  }\n  try {\n    let user;\n    if (auth.passwordAuth) {\n      if (!password) throw error(400, \"Password is required\");\n      user = await auth.passwordAuth.createUserWithPassword(email, password);\n    } else if (auth.createUser) {\n      user = await auth.createUser(email);\n    } else {\n      throw error(\n        501,\n        `User creation is not supported by ${auth.name}. Users are managed externally.`\n      );\n    }\n    if (platform.length > 0) {\n      await setUserPlatformPermissions(locals.ctx, user.id, platform);\n    }\n    const orgId = locals.ctx?.actingOrgId;\n    if (orgId) {\n      const joinedAt = (/* @__PURE__ */ new Date()).toISOString();\n      await getOrganizationProvider().addOrgMember(SYSTEM_CONTEXT, {\n        orgId,\n        userId: user.id,\n        role: \"member\",\n        permissions: org.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)),\n        joinedAt,\n        updatedAt: joinedAt,\n        updatedBy: locals.user?.id ?? user.id,\n        deletedAt: null\n      });\n    }\n    return json(user, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to create user\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAQA,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;AACrF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;AAC9B,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC;AACpD,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB;AAC3C,CAAC,CAAC;AACF,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC;AAC7C,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wCAAwC,CAAC,CAAC,QAAQ;AAChF,CAAC,CAAC;AACG,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,0BAA0B,CAAC,MAAM,CAAC;AACpC,EAAE,MAAM,IAAI,GAAG,MAAM,eAAe,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAChE,EAAE,IAAI,IAAI,KAAK,IAAI,EAAE;AACrB,IAAI,MAAM,KAAK;AACf,MAAM,GAAG;AACT,MAAM;AACN,KAAK;AACL,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,WAAW;AACvC,EAAE,MAAM,IAAI,GAAG,uBAAuB,EAAE;AACxC,EAAE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AAC7C,EAAE,MAAM,cAAc,GAAG,MAAM,kBAAkB,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC;AACpF,EAAE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG;AACrC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK;AAChC,MAAM,IAAI,QAAQ,GAAG,EAAE;AACvB,MAAM,IAAI,KAAK,EAAE;AACjB,QAAQ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;AAC3E,QAAQ,QAAQ,GAAG,MAAM,EAAE,WAAW,IAAI,EAAE;AAC5C,MAAM;AACN,MAAM,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE;AAC1D,MAAM,OAAO;AACb,QAAQ,GAAG,CAAC;AACZ,QAAQ,mBAAmB,EAAE,aAAa;AAC1C,QAAQ,WAAW,EAAE,kBAAkB;AACvC,UAAU,aAAa;AACvB,UAAU;AACV;AACA,OAAO;AACP,IAAI,CAAC;AACL,GAAG;AACH,EAAE,OAAO,IAAI,CAAC,SAAS,CAAC;AACxB;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,0BAA0B,CAAC,MAAM,CAAC;AACpC,EAAE,MAAM,IAAI,GAAG,eAAe,EAAE;AAChC,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC;AACjD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,IAAI;AACtD,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,oBAAoB,CAAC,WAAW,CAAC;AAC7D,EAAE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE;AAC3E,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,4DAA4D,CAAC;AAClF,EAAE;AACF,EAAE,IAAI;AACN,IAAI,IAAI,IAAI;AACZ,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE;AAC3B,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC;AAC5E,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE;AAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;AACzC,IAAI,CAAC,MAAM;AACX,MAAM,MAAM,KAAK;AACjB,QAAQ,GAAG;AACX,QAAQ,CAAC,kCAAkC,EAAE,IAAI,CAAC,IAAI,CAAC,+BAA+B;AACtF,OAAO;AACP,IAAI;AACJ,IAAI,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE;AAC7B,MAAM,MAAM,0BAA0B,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC;AACrE,IAAI;AACJ,IAAI,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,WAAW;AACzC,IAAI,IAAI,KAAK,EAAE;AACf,MAAM,MAAM,QAAQ,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACjE,MAAM,MAAM,uBAAuB,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE;AACnE,QAAQ,KAAK;AACb,QAAQ,MAAM,EAAE,IAAI,CAAC,EAAE;AACvB,QAAQ,IAAI,EAAE,QAAQ;AACtB,QAAQ,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACjF,QAAQ,QAAQ;AAChB,QAAQ,SAAS,EAAE,QAAQ;AAC3B,QAAQ,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE;AAC7C,QAAQ,SAAS,EAAE;AACnB,OAAO,CAAC;AACR,IAAI;AACJ,IAAI,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACtC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,uBAAuB,CAAC;AAChD,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-CMKxt34Z.js → _server.ts-BqlGKKaE.js}

@@ -1,7 +1,7 @@
 import { error, json } from '@sveltejs/kit';
-import { k as getOrganizationProvider, P as ProviderError } from './providers.server-MD7TK-zQ.js';
-import { u as requireInstanceAdmin } from './access.server-BBglojso.js';
-import { h as handleApiError, t as throwZodError } from './api-errors-agQVBoep.js';
+import { k as getOrganizationProvider, P as ProviderError } from './providers.server-wGknM6CR.js';
+import { u as requireInstanceAdmin } from './access.server-ByXvmWyF.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-C0SWfJj5.js';
 import { i as UpdateOrgSchema } from './context-DKDYb-He.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
@@ -12,7 +12,7 @@ import 'node:fs/promises';
 import '@supabase/supabase-js';
 import 'zod';
 import '@selvajs/compute/core';
-import './utils2-D38XWwRv.js';
+import './utils2-BsnrDRob.js';
 
 const PATCH = async ({ params, request, locals }) => {
   requireInstanceAdmin(locals);
@@ -47,4 +47,4 @@ const DELETE = async ({ params, locals }) => {
 };
 
 export { DELETE, PATCH };
-//# sourceMappingURL=_server.ts-CMKxt34Z.js.map
+//# sourceMappingURL=_server.ts-BqlGKKaE.js.map

package/build/server/chunks/{_server.ts-CMKxt34Z.js.map → _server.ts-BqlGKKaE.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_server.ts-CMKxt34Z.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/orgs/_id_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { k as getOrganizationProvider, P as ProviderError } from \"../../../../../../chunks/providers.server.js\";\nimport { u as requireInstanceAdmin } from \"../../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../../chunks/api-errors.js\";\nimport { i as UpdateOrgSchema } from \"../../../../../../chunks/context.js\";\nconst PATCH = async ({ params, request, locals }) => {\n  requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) throw error(400, \"Missing org ID\");\n  const ctx = locals.ctx;\n  const body = await request.json().catch(() => null);\n  const parsed = UpdateOrgSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  try {\n    await getOrganizationProvider().updateOrg(ctx, id, parsed.data);\n    const updated = await getOrganizationProvider().getOrg(ctx, id);\n    return json(updated);\n  } catch (err) {\n    if (err instanceof ProviderError && err.statusCode === 409) {\n      throw error(409, err.message);\n    }\n    handleApiError(err, \"Failed to update org\");\n  }\n};\nconst DELETE = async ({ params, locals }) => {\n  requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) throw error(400, \"Missing org ID\");\n  const ctx = locals.ctx;\n  try {\n    await getOrganizationProvider().deleteOrg(ctx, id);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to delete org\");\n  }\n};\nexport {\n  DELETE,\n  PATCH\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAKK,MAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrD,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAChD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI;AACN,IAAI,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC;AACnE,IAAI,MAAM,OAAO,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AACnE,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC;AACxB,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE;AAChE,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC;AACnC,IAAI;AACJ,IAAI,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC/C,EAAE;AACF;AACK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI;AACN,IAAI,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC;AACtD,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC/C,EAAE;AACF;;;;"}
+{"version":3,"file":"_server.ts-BqlGKKaE.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/orgs/_id_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { k as getOrganizationProvider, P as ProviderError } from \"../../../../../../chunks/providers.server.js\";\nimport { u as requireInstanceAdmin } from \"../../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../../chunks/api-errors.js\";\nimport { i as UpdateOrgSchema } from \"../../../../../../chunks/context.js\";\nconst PATCH = async ({ params, request, locals }) => {\n  requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) throw error(400, \"Missing org ID\");\n  const ctx = locals.ctx;\n  const body = await request.json().catch(() => null);\n  const parsed = UpdateOrgSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  try {\n    await getOrganizationProvider().updateOrg(ctx, id, parsed.data);\n    const updated = await getOrganizationProvider().getOrg(ctx, id);\n    return json(updated);\n  } catch (err) {\n    if (err instanceof ProviderError && err.statusCode === 409) {\n      throw error(409, err.message);\n    }\n    handleApiError(err, \"Failed to update org\");\n  }\n};\nconst DELETE = async ({ params, locals }) => {\n  requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) throw error(400, \"Missing org ID\");\n  const ctx = locals.ctx;\n  try {\n    await getOrganizationProvider().deleteOrg(ctx, id);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to delete org\");\n  }\n};\nexport {\n  DELETE,\n  PATCH\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAKK,MAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrD,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAChD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI;AACN,IAAI,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC;AACnE,IAAI,MAAM,OAAO,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AACnE,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC;AACxB,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE;AAChE,MAAM,MAAM,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC;AACnC,IAAI;AACJ,IAAI,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC/C,EAAE;AACF;AACK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI;AACN,IAAI,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC;AACtD,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC/C,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-ODEutN30.js → _server.ts-BvMDaAZY.js}

@@ -1,7 +1,7 @@
 import { json } from '@sveltejs/kit';
 import './context-DKDYb-He.js';
-import { s as providers, L as LocalComputeServerStore } from './providers.server-MD7TK-zQ.js';
-import { z as requirePermission } from './access.server-BBglojso.js';
+import { t as providers, L as LocalComputeServerStore } from './providers.server-wGknM6CR.js';
+import { z as requirePermission } from './access.server-ByXvmWyF.js';
 import 'zod';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
@@ -10,9 +10,9 @@ import 'node:fs';
 import 'node:crypto';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
-import './api-errors-agQVBoep.js';
+import './api-errors-C0SWfJj5.js';
 import '@selvajs/compute/core';
-import './utils2-D38XWwRv.js';
+import './utils2-BsnrDRob.js';
 
 function atRestSecretsCheck(report) {
   const base = { id: "at-rest-secrets", label: "Compute server secrets" };
@@ -72,4 +72,4 @@ const GET = async ({ locals }) => {
 };
 
 export { GET };
-//# sourceMappingURL=_server.ts-ODEutN30.js.map
+//# sourceMappingURL=_server.ts-BvMDaAZY.js.map

package/build/server/chunks/{_server.ts-ODEutN30.js.map → _server.ts-BvMDaAZY.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_server.ts-ODEutN30.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/system/health/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport \"../../../../../../chunks/context.js\";\nimport { s as providers, L as LocalComputeServerStore } from \"../../../../../../chunks/providers.server.js\";\nimport { z as requirePermission } from \"../../../../../../chunks/access.server.js\";\nfunction atRestSecretsCheck(report) {\n  const base = { id: \"at-rest-secrets\", label: \"Compute server secrets\" };\n  if (report === null) {\n    return {\n      ...base,\n      status: \"not_applicable\",\n      summary: \"The active data provider does not encrypt secrets at this layer — nothing to verify.\"\n    };\n  }\n  if (report.ok) {\n    return {\n      ...base,\n      status: \"ok\",\n      summary: \"All stored compute server API keys decrypt under the current SELVA_AT_REST_KEY.\"\n    };\n  }\n  const failed = report.failures.map((f) => `\"${f.serverLabel}\" (${f.reason}${f.cause ? `: ${f.cause}` : \"\"})`).join(\", \");\n  const plaintext = report.plaintextFound;\n  return {\n    ...base,\n    status: \"degraded\",\n    summary: `${report.failures.length} compute server key(s) could not be loaded: ${failed}.`,\n    remediation: plaintext ? \"A key is stored in plaintext on disk — re-enter it via /admin/compute so it is encrypted.\" : \"The stored ciphertext does not match the current SELVA_AT_REST_KEY (rotated key or restored backup). Re-enter the affected keys via /admin/compute, or restore the original SELVA_AT_REST_KEY, then run this check again.\"\n  };\n}\nconst GET = async ({ locals }) => {\n  requirePermission(locals, \"instance_admin\");\n  const checks = [];\n  const store = providers.data.computeServer;\n  if (store instanceof LocalComputeServerStore) {\n    try {\n      checks.push(atRestSecretsCheck(await store.verifySecrets()));\n    } catch (err) {\n      checks.push({\n        id: \"at-rest-secrets\",\n        label: \"Compute server secrets\",\n        status: \"error\",\n        summary: `Verification threw: ${err instanceof Error ? err.message : String(err)}`,\n        remediation: \"Check server logs (`pm2 logs selva-compute`) for the underlying error.\"\n      });\n    }\n  } else {\n    checks.push(atRestSecretsCheck(null));\n  }\n  const rank = {\n    ok: 0,\n    not_applicable: 0,\n    degraded: 2,\n    error: 3\n  };\n  const overall = checks.reduce(\n    (worst, c) => rank[c.status] > rank[worst] ? c.status : worst,\n    \"ok\"\n  );\n  return json({ overall, checkedAt: (/* @__PURE__ */ new Date()).toISOString(), checks });\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIA,SAAS,kBAAkB,CAAC,MAAM,EAAE;AACpC,EAAE,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,wBAAwB,EAAE;AACzE,EAAE,IAAI,MAAM,KAAK,IAAI,EAAE;AACvB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,gBAAgB;AAC9B,MAAM,OAAO,EAAE;AACf,KAAK;AACL,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,EAAE,EAAE;AACjB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,IAAI;AAClB,MAAM,OAAO,EAAE;AACf,KAAK;AACL,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AAC1H,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc;AACzC,EAAE,OAAO;AACT,IAAI,GAAG,IAAI;AACX,IAAI,MAAM,EAAE,UAAU;AACtB,IAAI,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,4CAA4C,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9F,IAAI,WAAW,EAAE,SAAS,GAAG,2FAA2F,GAAG;AAC3H,GAAG;AACH;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,MAAM,GAAG,EAAE;AACnB,EAAE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa;AAC5C,EAAE,IAAI,KAAK,YAAY,uBAAuB,EAAE;AAChD,IAAI,IAAI;AACR,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;AAClE,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,MAAM,CAAC,IAAI,CAAC;AAClB,QAAQ,EAAE,EAAE,iBAAiB;AAC7B,QAAQ,KAAK,EAAE,wBAAwB;AACvC,QAAQ,MAAM,EAAE,OAAO;AACvB,QAAQ,OAAO,EAAE,CAAC,oBAAoB,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1F,QAAQ,WAAW,EAAE;AACrB,OAAO,CAAC;AACR,IAAI;AACJ,EAAE,CAAC,MAAM;AACT,IAAI,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;AACzC,EAAE;AACF,EAAE,MAAM,IAAI,GAAG;AACf,IAAI,EAAE,EAAE,CAAC;AACT,IAAI,cAAc,EAAE,CAAC;AACrB,IAAI,QAAQ,EAAE,CAAC;AACf,IAAI,KAAK,EAAE;AACX,GAAG;AACH,EAAE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM;AAC/B,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,KAAK;AACjE,IAAI;AACJ,GAAG;AACH,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC;AACzF;;;;"}
+{"version":3,"file":"_server.ts-BvMDaAZY.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/system/health/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport \"../../../../../../chunks/context.js\";\nimport { t as providers, L as LocalComputeServerStore } from \"../../../../../../chunks/providers.server.js\";\nimport { z as requirePermission } from \"../../../../../../chunks/access.server.js\";\nfunction atRestSecretsCheck(report) {\n  const base = { id: \"at-rest-secrets\", label: \"Compute server secrets\" };\n  if (report === null) {\n    return {\n      ...base,\n      status: \"not_applicable\",\n      summary: \"The active data provider does not encrypt secrets at this layer — nothing to verify.\"\n    };\n  }\n  if (report.ok) {\n    return {\n      ...base,\n      status: \"ok\",\n      summary: \"All stored compute server API keys decrypt under the current SELVA_AT_REST_KEY.\"\n    };\n  }\n  const failed = report.failures.map((f) => `\"${f.serverLabel}\" (${f.reason}${f.cause ? `: ${f.cause}` : \"\"})`).join(\", \");\n  const plaintext = report.plaintextFound;\n  return {\n    ...base,\n    status: \"degraded\",\n    summary: `${report.failures.length} compute server key(s) could not be loaded: ${failed}.`,\n    remediation: plaintext ? \"A key is stored in plaintext on disk — re-enter it via /admin/compute so it is encrypted.\" : \"The stored ciphertext does not match the current SELVA_AT_REST_KEY (rotated key or restored backup). Re-enter the affected keys via /admin/compute, or restore the original SELVA_AT_REST_KEY, then run this check again.\"\n  };\n}\nconst GET = async ({ locals }) => {\n  requirePermission(locals, \"instance_admin\");\n  const checks = [];\n  const store = providers.data.computeServer;\n  if (store instanceof LocalComputeServerStore) {\n    try {\n      checks.push(atRestSecretsCheck(await store.verifySecrets()));\n    } catch (err) {\n      checks.push({\n        id: \"at-rest-secrets\",\n        label: \"Compute server secrets\",\n        status: \"error\",\n        summary: `Verification threw: ${err instanceof Error ? err.message : String(err)}`,\n        remediation: \"Check server logs (`pm2 logs selva-compute`) for the underlying error.\"\n      });\n    }\n  } else {\n    checks.push(atRestSecretsCheck(null));\n  }\n  const rank = {\n    ok: 0,\n    not_applicable: 0,\n    degraded: 2,\n    error: 3\n  };\n  const overall = checks.reduce(\n    (worst, c) => rank[c.status] > rank[worst] ? c.status : worst,\n    \"ok\"\n  );\n  return json({ overall, checkedAt: (/* @__PURE__ */ new Date()).toISOString(), checks });\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIA,SAAS,kBAAkB,CAAC,MAAM,EAAE;AACpC,EAAE,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,wBAAwB,EAAE;AACzE,EAAE,IAAI,MAAM,KAAK,IAAI,EAAE;AACvB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,gBAAgB;AAC9B,MAAM,OAAO,EAAE;AACf,KAAK;AACL,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,EAAE,EAAE;AACjB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,IAAI;AAClB,MAAM,OAAO,EAAE;AACf,KAAK;AACL,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AAC1H,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc;AACzC,EAAE,OAAO;AACT,IAAI,GAAG,IAAI;AACX,IAAI,MAAM,EAAE,UAAU;AACtB,IAAI,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,4CAA4C,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9F,IAAI,WAAW,EAAE,SAAS,GAAG,2FAA2F,GAAG;AAC3H,GAAG;AACH;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,MAAM,GAAG,EAAE;AACnB,EAAE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa;AAC5C,EAAE,IAAI,KAAK,YAAY,uBAAuB,EAAE;AAChD,IAAI,IAAI;AACR,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;AAClE,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,MAAM,CAAC,IAAI,CAAC;AAClB,QAAQ,EAAE,EAAE,iBAAiB;AAC7B,QAAQ,KAAK,EAAE,wBAAwB;AACvC,QAAQ,MAAM,EAAE,OAAO;AACvB,QAAQ,OAAO,EAAE,CAAC,oBAAoB,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1F,QAAQ,WAAW,EAAE;AACrB,OAAO,CAAC;AACR,IAAI;AACJ,EAAE,CAAC,MAAM;AACT,IAAI,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;AACzC,EAAE;AACF,EAAE,MAAM,IAAI,GAAG;AACf,IAAI,EAAE,EAAE,CAAC;AACT,IAAI,cAAc,EAAE,CAAC;AACrB,IAAI,QAAQ,EAAE,CAAC;AACf,IAAI,KAAK,EAAE;AACX,GAAG;AACH,EAAE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM;AAC/B,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,KAAK;AACjE,IAAI;AACJ,GAAG;AACH,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC;AACzF;;;;"}

package/build/server/chunks/{_server.ts-C1wqbTiL.js → _server.ts-C-MiDKCm.js}

@@ -1,6 +1,6 @@
 import { error, redirect } from '@sveltejs/kit';
-import { c as getAuthProvider } from './providers.server-MD7TK-zQ.js';
-import { b as bootstrapUserSession } from './auth-bootstrap.server-CdwMOcYI.js';
+import { a as getAuthProvider } from './providers.server-wGknM6CR.js';
+import { b as bootstrapUserSession } from './auth-bootstrap.server-zvPqZ6kt.js';
 import { h as setSessionCookie, f as setRefreshCookie, s as safeRedirectTarget } from './admin-auth.server-45kKyH82.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
@@ -28,4 +28,4 @@ const GET = async ({ url, cookies }) => {
 };
 
 export { GET };
-//# sourceMappingURL=_server.ts-C1wqbTiL.js.map
+//# sourceMappingURL=_server.ts-C-MiDKCm.js.map

package/build/server/chunks/{_server.ts-C1wqbTiL.js.map → _server.ts-C-MiDKCm.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_server.ts-C1wqbTiL.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/auth/email/callback/_server.ts.js"],"sourcesContent":["import { error, redirect } from \"@sveltejs/kit\";\nimport { c as getAuthProvider } from \"../../../../../chunks/providers.server.js\";\nimport { b as bootstrapUserSession } from \"../../../../../chunks/auth-bootstrap.server.js\";\nimport { h as setSessionCookie, f as setRefreshCookie, s as safeRedirectTarget } from \"../../../../../chunks/admin-auth.server.js\";\nconst GET = async ({ url, cookies }) => {\n  const emailLink = getAuthProvider().emailLink;\n  if (!emailLink) {\n    throw error(501, \"Email sign-in is not supported by this provider.\");\n  }\n  const result = await emailLink.verifyMagicLink(url.toString());\n  if (!result) throw error(401, \"This sign-in link is invalid or has expired.\");\n  await bootstrapUserSession(result.user);\n  setSessionCookie(cookies, result.sessionToken);\n  if (result.refreshToken) setRefreshCookie(cookies, result.refreshToken);\n  const dest = safeRedirectTarget(url.searchParams.get(\"redirectTo\"), \"/library\");\n  redirect(303, dest);\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAIK,MAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK;AACxC,EAAE,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC,SAAS;AAC/C,EAAE,IAAI,CAAC,SAAS,EAAE;AAClB,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,kDAAkD,CAAC;AACxE,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;AAChE,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,8CAA8C,CAAC;AAC/E,EAAE,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;AACzC,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAChD,EAAE,IAAI,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACzE,EAAE,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;AACjF,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;AACrB;;;;"}
+{"version":3,"file":"_server.ts-C-MiDKCm.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/auth/email/callback/_server.ts.js"],"sourcesContent":["import { error, redirect } from \"@sveltejs/kit\";\nimport { a as getAuthProvider } from \"../../../../../chunks/providers.server.js\";\nimport { b as bootstrapUserSession } from \"../../../../../chunks/auth-bootstrap.server.js\";\nimport { h as setSessionCookie, f as setRefreshCookie, s as safeRedirectTarget } from \"../../../../../chunks/admin-auth.server.js\";\nconst GET = async ({ url, cookies }) => {\n  const emailLink = getAuthProvider().emailLink;\n  if (!emailLink) {\n    throw error(501, \"Email sign-in is not supported by this provider.\");\n  }\n  const result = await emailLink.verifyMagicLink(url.toString());\n  if (!result) throw error(401, \"This sign-in link is invalid or has expired.\");\n  await bootstrapUserSession(result.user);\n  setSessionCookie(cookies, result.sessionToken);\n  if (result.refreshToken) setRefreshCookie(cookies, result.refreshToken);\n  const dest = safeRedirectTarget(url.searchParams.get(\"redirectTo\"), \"/library\");\n  redirect(303, dest);\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAIK,MAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK;AACxC,EAAE,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC,SAAS;AAC/C,EAAE,IAAI,CAAC,SAAS,EAAE;AAClB,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,kDAAkD,CAAC;AACxE,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;AAChE,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,8CAA8C,CAAC;AAC/E,EAAE,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;AACzC,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAChD,EAAE,IAAI,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACzE,EAAE,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;AACjF,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;AACrB;;;;"}

package/build/server/chunks/{_server.ts-B7X5-4kS.js → _server.ts-C05I9RVA.js}

@@ -1,7 +1,7 @@
 import { error, json } from '@sveltejs/kit';
-import { n as getProjectProvider } from './providers.server-MD7TK-zQ.js';
-import { o as requireCanReclaim } from './access.server-BBglojso.js';
-import { h as handleApiError } from './api-errors-agQVBoep.js';
+import { n as getProjectProvider } from './providers.server-wGknM6CR.js';
+import { o as requireCanReclaim } from './access.server-ByXvmWyF.js';
+import { h as handleApiError } from './api-errors-C0SWfJj5.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
 import 'node:path';
@@ -12,7 +12,7 @@ import 'node:crypto';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
 import '@selvajs/compute/core';
-import './utils2-D38XWwRv.js';
+import './utils2-BsnrDRob.js';
 
 const POST = async ({ params, locals }) => {
   const { id } = params;
@@ -37,4 +37,4 @@ const POST = async ({ params, locals }) => {
 };
 
 export { POST };
-//# sourceMappingURL=_server.ts-B7X5-4kS.js.map
+//# sourceMappingURL=_server.ts-C05I9RVA.js.map

package/build/server/chunks/{_server.ts-B7X5-4kS.js.map → _server.ts-C05I9RVA.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_server.ts-B7X5-4kS.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/projects/_id_/reclaim/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { n as getProjectProvider } from \"../../../../../../chunks/providers.server.js\";\nimport { o as requireCanReclaim } from \"../../../../../../chunks/access.server.js\";\nimport { h as handleApiError } from \"../../../../../../chunks/api-errors.js\";\nconst POST = async ({ params, locals }) => {\n  const { id } = params;\n  if (!id) throw error(400, \"Missing project ID\");\n  const { user, ctx } = await requireCanReclaim(locals, id);\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const member = {\n    projectId: id,\n    userId: user.id,\n    role: \"owner\",\n    joinedAt: now,\n    updatedAt: now,\n    updatedBy: ctx.userId || user.id,\n    deletedAt: null\n  };\n  try {\n    await getProjectProvider().addProjectMember(ctx, member);\n    return json({ success: true, member });\n  } catch (err) {\n    handleApiError(err, \"Failed to reclaim project\");\n  }\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC;AACjD,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,EAAE,CAAC;AAC3D,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,MAAM,GAAG;AACjB,IAAI,SAAS,EAAE,EAAE;AACjB,IAAI,MAAM,EAAE,IAAI,CAAC,EAAE;AACnB,IAAI,IAAI,EAAE,OAAO;AACjB,IAAI,QAAQ,EAAE,GAAG;AACjB,IAAI,SAAS,EAAE,GAAG;AAClB,IAAI,SAAS,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE;AACpC,IAAI,SAAS,EAAE;AACf,GAAG;AACH,EAAE,IAAI;AACN,IAAI,MAAM,kBAAkB,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC;AAC5D,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,2BAA2B,CAAC;AACpD,EAAE;AACF;;;;"}
+{"version":3,"file":"_server.ts-C05I9RVA.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/projects/_id_/reclaim/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { n as getProjectProvider } from \"../../../../../../chunks/providers.server.js\";\nimport { o as requireCanReclaim } from \"../../../../../../chunks/access.server.js\";\nimport { h as handleApiError } from \"../../../../../../chunks/api-errors.js\";\nconst POST = async ({ params, locals }) => {\n  const { id } = params;\n  if (!id) throw error(400, \"Missing project ID\");\n  const { user, ctx } = await requireCanReclaim(locals, id);\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const member = {\n    projectId: id,\n    userId: user.id,\n    role: \"owner\",\n    joinedAt: now,\n    updatedAt: now,\n    updatedBy: ctx.userId || user.id,\n    deletedAt: null\n  };\n  try {\n    await getProjectProvider().addProjectMember(ctx, member);\n    return json({ success: true, member });\n  } catch (err) {\n    handleApiError(err, \"Failed to reclaim project\");\n  }\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC;AACjD,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,EAAE,CAAC;AAC3D,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,MAAM,GAAG;AACjB,IAAI,SAAS,EAAE,EAAE;AACjB,IAAI,MAAM,EAAE,IAAI,CAAC,EAAE;AACnB,IAAI,IAAI,EAAE,OAAO;AACjB,IAAI,QAAQ,EAAE,GAAG;AACjB,IAAI,SAAS,EAAE,GAAG;AAClB,IAAI,SAAS,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE;AACpC,IAAI,SAAS,EAAE;AACf,GAAG;AACH,EAAE,IAAI;AACN,IAAI,MAAM,kBAAkB,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC;AAC5D,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,2BAA2B,CAAC;AACpD,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-DsFj_8lL.js → _server.ts-C4BZG5kA.js}

@@ -1,7 +1,7 @@
 import { error, json } from '@sveltejs/kit';
-import { a as definitionService } from './providers.server-MD7TK-zQ.js';
-import { t as requireEditableDefinition } from './access.server-BBglojso.js';
-import { h as handleApiError } from './api-errors-agQVBoep.js';
+import { i as getDefinitionService } from './providers.server-wGknM6CR.js';
+import { t as requireEditableDefinition } from './access.server-ByXvmWyF.js';
+import { h as handleApiError } from './api-errors-C0SWfJj5.js';
 import { G as GuidSchema } from './context-DKDYb-He.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
@@ -12,7 +12,7 @@ import 'node:fs/promises';
 import '@supabase/supabase-js';
 import 'zod';
 import '@selvajs/compute/core';
-import './utils2-D38XWwRv.js';
+import './utils2-BsnrDRob.js';
 
 const DELETE = async ({ params, locals }) => {
   const guidParsed = GuidSchema.safeParse(params.guid);
@@ -21,7 +21,7 @@ const DELETE = async ({ params, locals }) => {
   if (!versionParsed.success) throw error(400, "Invalid or missing version ID");
   const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
   try {
-    await definitionService.deleteVersion(ctx, guidParsed.data, versionParsed.data);
+    await getDefinitionService().deleteVersion(ctx, guidParsed.data, versionParsed.data);
     return json({ success: true });
   } catch (err) {
     handleApiError(err, "Failed to delete version");
@@ -29,4 +29,4 @@ const DELETE = async ({ params, locals }) => {
 };
 
 export { DELETE };
-//# sourceMappingURL=_server.ts-DsFj_8lL.js.map
+//# sourceMappingURL=_server.ts-C4BZG5kA.js.map

package/build/server/chunks/_server.ts-C4BZG5kA.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-C4BZG5kA.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_guid_/versions/_versionId_/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { i as getDefinitionService } from \"../../../../../../../chunks/providers.server.js\";\nimport { t as requireEditableDefinition } from \"../../../../../../../chunks/access.server.js\";\nimport { h as handleApiError } from \"../../../../../../../chunks/api-errors.js\";\nimport { G as GuidSchema } from \"../../../../../../../chunks/context.js\";\nconst DELETE = async ({ params, locals }) => {\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) throw error(400, \"Invalid or missing GUID\");\n  const versionParsed = GuidSchema.safeParse(params.versionId);\n  if (!versionParsed.success) throw error(400, \"Invalid or missing version ID\");\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  try {\n    await getDefinitionService().deleteVersion(ctx, guidParsed.data, versionParsed.data);\n    return json({ success: true });\n  } catch (err) {\n    handleApiError(err, \"Failed to delete version\");\n  }\n};\nexport {\n  DELETE\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAKK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtE,EAAE,MAAM,aAAa,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;AAC9D,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,+BAA+B,CAAC;AAC/E,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,IAAI;AACN,IAAI,MAAM,oBAAoB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC;AACxF,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACnD,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-Du-NpBy4.js → _server.ts-CBAiDOcP.js}

@@ -1,10 +1,10 @@
-import { r as resolveServerForOrg, C as ComputeServerUnconfiguredError } from './api-errors-agQVBoep.js';
-import { r as requireCanCreateDefinition } from './access.server-BBglojso.js';
+import { r as resolveServerForOrg, C as ComputeServerUnconfiguredError } from './api-errors-C0SWfJj5.js';
+import { r as requireCanCreateDefinition } from './access.server-ByXvmWyF.js';
 import { error } from '@sveltejs/kit';
 import { camelcaseKeys } from '@selvajs/compute/core';
 import './context-DKDYb-He.js';
 import 'zod';
-import './providers.server-MD7TK-zQ.js';
+import './providers.server-wGknM6CR.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
 import 'node:path';
@@ -12,7 +12,7 @@ import 'node:fs';
 import 'node:crypto';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
-import './utils2-D38XWwRv.js';
+import './utils2-BsnrDRob.js';
 
 const POST = async ({ request, locals, url }) => {
   const projectId = url.searchParams.get("projectId");
@@ -54,4 +54,4 @@ const POST = async ({ request, locals, url }) => {
 };
 
 export { POST };
-//# sourceMappingURL=_server.ts-Du-NpBy4.js.map
+//# sourceMappingURL=_server.ts-CBAiDOcP.js.map

package/build/server/chunks/{_server.ts-Du-NpBy4.js.map → _server.ts-CBAiDOcP.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_server.ts-Du-NpBy4.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/compute/schema/_server.ts.js"],"sourcesContent":["import { r as resolveServerForOrg, C as ComputeServerUnconfiguredError } from \"../../../../../chunks/api-errors.js\";\nimport { r as requireCanCreateDefinition } from \"../../../../../chunks/access.server.js\";\nimport { error } from \"@sveltejs/kit\";\nimport { camelcaseKeys } from \"@selvajs/compute/core\";\nconst POST = async ({ request, locals, url }) => {\n  const projectId = url.searchParams.get(\"projectId\");\n  if (!projectId) {\n    throw error(400, \"projectId query parameter is required\");\n  }\n  const { project } = await requireCanCreateDefinition(locals, projectId);\n  let server;\n  try {\n    server = await resolveServerForOrg(locals.ctx, project.orgId);\n  } catch (err) {\n    if (err instanceof ComputeServerUnconfiguredError) throw error(503, err.message);\n    throw err;\n  }\n  const formData = await request.formData();\n  const schemaUrl = new URL(\"/grasshopper/schema\", server.serverUrl).toString();\n  const headers = {};\n  if (server.apiKey) {\n    headers[\"RhinoComputeKey\"] = server.apiKey;\n  }\n  let response;\n  try {\n    response = await fetch(schemaUrl, { method: \"POST\", headers, body: formData });\n  } catch {\n    throw error(503, \"Compute server is unreachable\");\n  }\n  if (!response.ok) {\n    throw error(response.status, \"Compute server error\");\n  }\n  const raw = await response.json();\n  const results = camelcaseKeys(Array.isArray(raw) ? raw : [raw]);\n  const schemas = results.flatMap((r) => r.schemas ?? []);\n  if (schemas.length === 0) {\n    throw error(422, \"No schemas found in definition\");\n  }\n  return new Response(JSON.stringify(schemas), {\n    headers: { \"Content-Type\": \"application/json\" }\n  });\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACjD,EAAE,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC;AACrD,EAAE,IAAI,CAAC,SAAS,EAAE;AAClB,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,uCAAuC,CAAC;AAC7D,EAAE;AACF,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,SAAS,CAAC;AACzE,EAAE,IAAI,MAAM;AACZ,EAAE,IAAI;AACN,IAAI,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC;AACjE,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,IAAI,GAAG,YAAY,8BAA8B,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC;AACpF,IAAI,MAAM,GAAG;AACb,EAAE;AACF,EAAE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;AAC3C,EAAE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;AAC/E,EAAE,MAAM,OAAO,GAAG,EAAE;AACpB,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE;AACrB,IAAI,OAAO,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC,MAAM;AAC9C,EAAE;AACF,EAAE,IAAI,QAAQ;AACd,EAAE,IAAI;AACN,IAAI,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAClF,EAAE,CAAC,CAAC,MAAM;AACV,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,+BAA+B,CAAC;AACrD,EAAE;AACF,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;AACpB,IAAI,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;AACxD,EAAE;AACF,EAAE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE;AACnC,EAAE,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;AACjE,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;AACzD,EAAE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE;AAC5B,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,gCAAgC,CAAC;AACtD,EAAE;AACF,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;AAC/C,IAAI,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB;AACjD,GAAG,CAAC;AACJ;;;;"}
+{"version":3,"file":"_server.ts-CBAiDOcP.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/compute/schema/_server.ts.js"],"sourcesContent":["import { r as resolveServerForOrg, C as ComputeServerUnconfiguredError } from \"../../../../../chunks/api-errors.js\";\nimport { r as requireCanCreateDefinition } from \"../../../../../chunks/access.server.js\";\nimport { error } from \"@sveltejs/kit\";\nimport { camelcaseKeys } from \"@selvajs/compute/core\";\nconst POST = async ({ request, locals, url }) => {\n  const projectId = url.searchParams.get(\"projectId\");\n  if (!projectId) {\n    throw error(400, \"projectId query parameter is required\");\n  }\n  const { project } = await requireCanCreateDefinition(locals, projectId);\n  let server;\n  try {\n    server = await resolveServerForOrg(locals.ctx, project.orgId);\n  } catch (err) {\n    if (err instanceof ComputeServerUnconfiguredError) throw error(503, err.message);\n    throw err;\n  }\n  const formData = await request.formData();\n  const schemaUrl = new URL(\"/grasshopper/schema\", server.serverUrl).toString();\n  const headers = {};\n  if (server.apiKey) {\n    headers[\"RhinoComputeKey\"] = server.apiKey;\n  }\n  let response;\n  try {\n    response = await fetch(schemaUrl, { method: \"POST\", headers, body: formData });\n  } catch {\n    throw error(503, \"Compute server is unreachable\");\n  }\n  if (!response.ok) {\n    throw error(response.status, \"Compute server error\");\n  }\n  const raw = await response.json();\n  const results = camelcaseKeys(Array.isArray(raw) ? raw : [raw]);\n  const schemas = results.flatMap((r) => r.schemas ?? []);\n  if (schemas.length === 0) {\n    throw error(422, \"No schemas found in definition\");\n  }\n  return new Response(JSON.stringify(schemas), {\n    headers: { \"Content-Type\": \"application/json\" }\n  });\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACjD,EAAE,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC;AACrD,EAAE,IAAI,CAAC,SAAS,EAAE;AAClB,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,uCAAuC,CAAC;AAC7D,EAAE;AACF,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,SAAS,CAAC;AACzE,EAAE,IAAI,MAAM;AACZ,EAAE,IAAI;AACN,IAAI,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC;AACjE,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,IAAI,GAAG,YAAY,8BAA8B,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC;AACpF,IAAI,MAAM,GAAG;AACb,EAAE;AACF,EAAE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;AAC3C,EAAE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;AAC/E,EAAE,MAAM,OAAO,GAAG,EAAE;AACpB,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE;AACrB,IAAI,OAAO,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC,MAAM;AAC9C,EAAE;AACF,EAAE,IAAI,QAAQ;AACd,EAAE,IAAI;AACN,IAAI,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAClF,EAAE,CAAC,CAAC,MAAM;AACV,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,+BAA+B,CAAC;AACrD,EAAE;AACF,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;AACpB,IAAI,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;AACxD,EAAE;AACF,EAAE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE;AACnC,EAAE,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;AACjE,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;AACzD,EAAE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE;AAC5B,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,gCAAgC,CAAC;AACtD,EAAE;AACF,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;AAC/C,IAAI,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB;AACjD,GAAG,CAAC;AACJ;;;;"}

package/build/server/chunks/{_server.ts-17aVSHOa.js → _server.ts-CEE9G3nv.js}

@@ -1,8 +1,8 @@
 import { error, json } from '@sveltejs/kit';
 import { randomUUID } from 'node:crypto';
-import { s as providers, f as flag } from './providers.server-MD7TK-zQ.js';
-import { t as requireEditableDefinition } from './access.server-BBglojso.js';
-import { h as handleApiError, t as throwZodError } from './api-errors-agQVBoep.js';
+import { t as providers, f as flag } from './providers.server-wGknM6CR.js';
+import { t as requireEditableDefinition } from './access.server-ByXvmWyF.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-C0SWfJj5.js';
 import { G as GuidSchema, c as CreateShareLinkInputSchema } from './context-DKDYb-He.js';
 import { D as DEFAULT_SHARE_LINK_MAX_SOLVES } from './types2-DdHhYSMF.js';
 import { m as mintRawToken, h as hashToken } from './token.server-BGL9vwYS.js';
@@ -14,7 +14,7 @@ import 'node:fs/promises';
 import '@supabase/supabase-js';
 import 'zod';
 import '@selvajs/compute/core';
-import './utils2-D38XWwRv.js';
+import './utils2-BsnrDRob.js';
 
 function assertSharingEnabled() {
   if (!flag("ENABLE_SHARING")) {
@@ -77,4 +77,4 @@ const POST = async ({ params, request, locals }) => {
 };
 
 export { GET, POST };
-//# sourceMappingURL=_server.ts-17aVSHOa.js.map
+//# sourceMappingURL=_server.ts-CEE9G3nv.js.map

package/build/server/chunks/{_server.ts-17aVSHOa.js.map → _server.ts-CEE9G3nv.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_server.ts-17aVSHOa.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_guid_/share-links/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\nimport { s as providers, f as flag } from \"../../../../../../chunks/providers.server.js\";\nimport { t as requireEditableDefinition } from \"../../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../../chunks/api-errors.js\";\nimport { G as GuidSchema, c as CreateShareLinkInputSchema } from \"../../../../../../chunks/context.js\";\nimport { D as DEFAULT_SHARE_LINK_MAX_SOLVES } from \"../../../../../../chunks/types2.js\";\nimport { m as mintRawToken, h as hashToken } from \"../../../../../../chunks/token.server.js\";\nfunction assertSharingEnabled() {\n  if (!flag(\"ENABLE_SHARING\")) {\n    throw error(404, \"Share links are disabled on this instance (ENABLE_SHARING).\");\n  }\n}\nfunction strip(link) {\n  const { tokenHash: _omit, ...rest } = link;\n  return { ...rest, hasToken: true };\n}\nconst GET = async ({ params, locals }) => {\n  assertSharingEnabled();\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) throw error(400, \"Invalid or missing GUID\");\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  try {\n    const page = await providers.data.shareLinks.listByDefinition(ctx, guidParsed.data, {\n      limit: 200\n    });\n    return json({\n      links: page.items.map(strip),\n      nextCursor: page.nextCursor\n    });\n  } catch (err) {\n    handleApiError(err, \"Failed to list share links\");\n  }\n};\nconst POST = async ({ params, request, locals }) => {\n  assertSharingEnabled();\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) throw error(400, \"Invalid or missing GUID\");\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  const body = await request.json().catch(() => ({}));\n  const parsed = CreateShareLinkInputSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const raw = mintRawToken();\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const link = {\n    id: randomUUID(),\n    definitionId: guidParsed.data,\n    channel: parsed.data.channel,\n    tokenHash: hashToken(raw),\n    name: parsed.data.name,\n    createdBy: locals.user.id,\n    createdAt: now,\n    expiresAt: parsed.data.expiresAt ?? null,\n    revokedAt: null,\n    allowSolve: parsed.data.allowSolve,\n    // Default applied only when the field is absent. `null` is a deliberate\n    // \"uncap\" choice and is preserved.\n    maxSolves: parsed.data.maxSolves === void 0 ? DEFAULT_SHARE_LINK_MAX_SOLVES : parsed.data.maxSolves,\n    solveCount: 0\n  };\n  try {\n    await providers.data.shareLinks.create(ctx, link);\n    return json({ link: strip(link), token: raw }, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to create share link\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAQA,SAAS,oBAAoB,GAAG;AAChC,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE;AAC/B,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,6DAA6D,CAAC;AACnF,EAAE;AACF;AACA,SAAS,KAAK,CAAC,IAAI,EAAE;AACrB,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI;AAC5C,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;AACpC;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC1C,EAAE,oBAAoB,EAAE;AACxB,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtE,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE;AACxF,MAAM,KAAK,EAAE;AACb,KAAK,CAAC;AACN,IAAI,OAAO,IAAI,CAAC;AAChB,MAAM,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;AAClC,MAAM,UAAU,EAAE,IAAI,CAAC;AACvB,KAAK,CAAC;AACN,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,4BAA4B,CAAC;AACrD,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpD,EAAE,oBAAoB,EAAE;AACxB,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtE,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,IAAI,CAAC;AAC3D,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,GAAG,GAAG,YAAY,EAAE;AAC5B,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,IAAI,GAAG;AACf,IAAI,EAAE,EAAE,UAAU,EAAE;AACpB,IAAI,YAAY,EAAE,UAAU,CAAC,IAAI;AACjC,IAAI,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;AAChC,IAAI,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC;AAC7B,IAAI,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC1B,IAAI,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC7B,IAAI,SAAS,EAAE,GAAG;AAClB,IAAI,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI;AAC5C,IAAI,SAAS,EAAE,IAAI;AACnB,IAAI,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;AACtC;AACA;AACA,IAAI,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,MAAM,GAAG,6BAA6B,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS;AACvG,IAAI,UAAU,EAAE;AAChB,GAAG;AACH,EAAE,IAAI;AACN,IAAI,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC;AACrD,IAAI,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACnE,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACtD,EAAE;AACF;;;;"}
+{"version":3,"file":"_server.ts-CEE9G3nv.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_guid_/share-links/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\nimport { t as providers, f as flag } from \"../../../../../../chunks/providers.server.js\";\nimport { t as requireEditableDefinition } from \"../../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../../chunks/api-errors.js\";\nimport { G as GuidSchema, c as CreateShareLinkInputSchema } from \"../../../../../../chunks/context.js\";\nimport { D as DEFAULT_SHARE_LINK_MAX_SOLVES } from \"../../../../../../chunks/types2.js\";\nimport { m as mintRawToken, h as hashToken } from \"../../../../../../chunks/token.server.js\";\nfunction assertSharingEnabled() {\n  if (!flag(\"ENABLE_SHARING\")) {\n    throw error(404, \"Share links are disabled on this instance (ENABLE_SHARING).\");\n  }\n}\nfunction strip(link) {\n  const { tokenHash: _omit, ...rest } = link;\n  return { ...rest, hasToken: true };\n}\nconst GET = async ({ params, locals }) => {\n  assertSharingEnabled();\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) throw error(400, \"Invalid or missing GUID\");\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  try {\n    const page = await providers.data.shareLinks.listByDefinition(ctx, guidParsed.data, {\n      limit: 200\n    });\n    return json({\n      links: page.items.map(strip),\n      nextCursor: page.nextCursor\n    });\n  } catch (err) {\n    handleApiError(err, \"Failed to list share links\");\n  }\n};\nconst POST = async ({ params, request, locals }) => {\n  assertSharingEnabled();\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) throw error(400, \"Invalid or missing GUID\");\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  const body = await request.json().catch(() => ({}));\n  const parsed = CreateShareLinkInputSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const raw = mintRawToken();\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const link = {\n    id: randomUUID(),\n    definitionId: guidParsed.data,\n    channel: parsed.data.channel,\n    tokenHash: hashToken(raw),\n    name: parsed.data.name,\n    createdBy: locals.user.id,\n    createdAt: now,\n    expiresAt: parsed.data.expiresAt ?? null,\n    revokedAt: null,\n    allowSolve: parsed.data.allowSolve,\n    // Default applied only when the field is absent. `null` is a deliberate\n    // \"uncap\" choice and is preserved.\n    maxSolves: parsed.data.maxSolves === void 0 ? DEFAULT_SHARE_LINK_MAX_SOLVES : parsed.data.maxSolves,\n    solveCount: 0\n  };\n  try {\n    await providers.data.shareLinks.create(ctx, link);\n    return json({ link: strip(link), token: raw }, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to create share link\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAQA,SAAS,oBAAoB,GAAG;AAChC,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE;AAC/B,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,6DAA6D,CAAC;AACnF,EAAE;AACF;AACA,SAAS,KAAK,CAAC,IAAI,EAAE;AACrB,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI;AAC5C,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;AACpC;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC1C,EAAE,oBAAoB,EAAE;AACxB,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtE,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE;AACxF,MAAM,KAAK,EAAE;AACb,KAAK,CAAC;AACN,IAAI,OAAO,IAAI,CAAC;AAChB,MAAM,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;AAClC,MAAM,UAAU,EAAE,IAAI,CAAC;AACvB,KAAK,CAAC;AACN,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,4BAA4B,CAAC;AACrD,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpD,EAAE,oBAAoB,EAAE;AACxB,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtE,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,IAAI,CAAC;AAC3D,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,GAAG,GAAG,YAAY,EAAE;AAC5B,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,IAAI,GAAG;AACf,IAAI,EAAE,EAAE,UAAU,EAAE;AACpB,IAAI,YAAY,EAAE,UAAU,CAAC,IAAI;AACjC,IAAI,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;AAChC,IAAI,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC;AAC7B,IAAI,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC1B,IAAI,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC7B,IAAI,SAAS,EAAE,GAAG;AAClB,IAAI,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI;AAC5C,IAAI,SAAS,EAAE,IAAI;AACnB,IAAI,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;AACtC;AACA;AACA,IAAI,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,MAAM,GAAG,6BAA6B,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS;AACvG,IAAI,UAAU,EAAE;AAChB,GAAG;AACH,EAAE,IAAI;AACN,IAAI,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC;AACrD,IAAI,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACnE,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACtD,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-CXYPZtry.js → _server.ts-CJ37R1sx.js}

@@ -1,7 +1,7 @@
 import { error, json } from '@sveltejs/kit';
-import { a as definitionService } from './providers.server-MD7TK-zQ.js';
-import { t as requireEditableDefinition } from './access.server-BBglojso.js';
-import { t as throwZodError, h as handleApiError } from './api-errors-agQVBoep.js';
+import { i as getDefinitionService } from './providers.server-wGknM6CR.js';
+import { t as requireEditableDefinition } from './access.server-ByXvmWyF.js';
+import { t as throwZodError, h as handleApiError } from './api-errors-C0SWfJj5.js';
 import { G as GuidSchema, h as PublishVersionInputSchema } from './context-DKDYb-He.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
@@ -12,7 +12,7 @@ import 'node:fs/promises';
 import '@supabase/supabase-js';
 import 'zod';
 import '@selvajs/compute/core';
-import './utils2-D38XWwRv.js';
+import './utils2-BsnrDRob.js';
 
 const POST = async ({ params, request, locals }) => {
   const guidParsed = GuidSchema.safeParse(params.guid);
@@ -22,7 +22,11 @@ const POST = async ({ params, request, locals }) => {
   if (!parsed.success) throwZodError(parsed.error);
   const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
   try {
-    const version = await definitionService.publish(ctx, guidParsed.data, parsed.data.versionId);
+    const version = await getDefinitionService().publish(
+      ctx,
+      guidParsed.data,
+      parsed.data.versionId
+    );
     return json({ success: true, version });
   } catch (err) {
     handleApiError(err, "Failed to publish version");
@@ -30,4 +34,4 @@ const POST = async ({ params, request, locals }) => {
 };
 
 export { POST };
-//# sourceMappingURL=_server.ts-CXYPZtry.js.map
+//# sourceMappingURL=_server.ts-CJ37R1sx.js.map

package/build/server/chunks/_server.ts-CJ37R1sx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-CJ37R1sx.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_guid_/publish/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { i as getDefinitionService } from \"../../../../../../chunks/providers.server.js\";\nimport { t as requireEditableDefinition } from \"../../../../../../chunks/access.server.js\";\nimport { t as throwZodError, h as handleApiError } from \"../../../../../../chunks/api-errors.js\";\nimport { G as GuidSchema, h as PublishVersionInputSchema } from \"../../../../../../chunks/context.js\";\nconst POST = async ({ params, request, locals }) => {\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) throw error(400, \"Invalid or missing GUID\");\n  const body = await request.json().catch(() => ({}));\n  const parsed = PublishVersionInputSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  try {\n    const version = await getDefinitionService().publish(\n      ctx,\n      guidParsed.data,\n      parsed.data.versionId\n    );\n    return json({ success: true, version });\n  } catch (err) {\n    handleApiError(err, \"Failed to publish version\");\n  }\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAKK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpD,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC;AACtE,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1D,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,IAAI;AACN,IAAI,MAAM,OAAO,GAAG,MAAM,oBAAoB,EAAE,CAAC,OAAO;AACxD,MAAM,GAAG;AACT,MAAM,UAAU,CAAC,IAAI;AACrB,MAAM,MAAM,CAAC,IAAI,CAAC;AAClB,KAAK;AACL,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,2BAA2B,CAAC;AACpD,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-8ahOmk_6.js → _server.ts-CJ5P0_cD.js}

@@ -1,9 +1,9 @@
 import { error, json } from '@sveltejs/kit';
 import { z } from 'zod';
 import { randomUUID } from 'node:crypto';
-import { m as getPlatformProjectGrantStore, k as getOrganizationProvider, p as getUserProfileStore, f as flag, n as getProjectProvider } from './providers.server-MD7TK-zQ.js';
-import { u as requireInstanceAdmin } from './access.server-BBglojso.js';
-import { h as handleApiError, t as throwZodError } from './api-errors-agQVBoep.js';
+import { m as getPlatformProjectGrantStore, k as getOrganizationProvider, q as getUserProfileStore, f as flag, n as getProjectProvider } from './providers.server-wGknM6CR.js';
+import { u as requireInstanceAdmin } from './access.server-ByXvmWyF.js';
+import { h as handleApiError, t as throwZodError } from './api-errors-C0SWfJj5.js';
 import { S as SYSTEM_CONTEXT } from './context-DKDYb-He.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
@@ -12,7 +12,7 @@ import 'node:fs';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
 import '@selvajs/compute/core';
-import './utils2-D38XWwRv.js';
+import './utils2-BsnrDRob.js';
 
 const CreateGrantBody = z.object({
   granteeType: z.enum(["org", "user"]),
@@ -72,4 +72,4 @@ const POST = async ({ params, request, locals }) => {
 };
 
 export { GET, POST };
-//# sourceMappingURL=_server.ts-8ahOmk_6.js.map
+//# sourceMappingURL=_server.ts-CJ5P0_cD.js.map

package/build/server/chunks/{_server.ts-8ahOmk_6.js.map → _server.ts-CJ5P0_cD.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_server.ts-8ahOmk_6.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/projects/_id_/grants/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\nimport { m as getPlatformProjectGrantStore, k as getOrganizationProvider, p as getUserProfileStore, f as flag, n as getProjectProvider } from \"../../../../../../../chunks/providers.server.js\";\nimport { u as requireInstanceAdmin } from \"../../../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../../../chunks/api-errors.js\";\nimport { S as SYSTEM_CONTEXT } from \"../../../../../../../chunks/context.js\";\nconst CreateGrantBody = z.object({\n  granteeType: z.enum([\"org\", \"user\"]),\n  granteeId: z.string().min(1),\n  canSolve: z.boolean()\n});\nasync function assertPlatformProject(id) {\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) throw error(404, \"Not found\");\n  const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, id);\n  if (!project || project.visibility !== \"platform\") {\n    throw error(404, \"Platform project not found\");\n  }\n  return project;\n}\nconst GET = async ({ params, locals }) => {\n  requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) throw error(400, \"Missing project ID\");\n  try {\n    await assertPlatformProject(id);\n    const grants = await getPlatformProjectGrantStore().listByProject(SYSTEM_CONTEXT, id);\n    return json({ grants });\n  } catch (err) {\n    handleApiError(err, \"Failed to list grants\");\n  }\n};\nconst POST = async ({ params, request, locals }) => {\n  const user = requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) throw error(400, \"Missing project ID\");\n  const body = await request.json().catch(() => null);\n  const parsed = CreateGrantBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  try {\n    await assertPlatformProject(id);\n    if (parsed.data.granteeType === \"org\") {\n      const org = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, parsed.data.granteeId);\n      if (!org) throw error(400, `Organization '${parsed.data.granteeId}' not found`);\n    } else {\n      const profile = await getUserProfileStore().getProfile(SYSTEM_CONTEXT, parsed.data.granteeId);\n      if (!profile) throw error(400, `User '${parsed.data.granteeId}' not found`);\n    }\n    const grant = {\n      id: randomUUID(),\n      projectId: id,\n      granteeType: parsed.data.granteeType,\n      granteeId: parsed.data.granteeId,\n      canSolve: parsed.data.canSolve,\n      createdBy: user.id,\n      createdAt: (/* @__PURE__ */ new Date()).toISOString()\n    };\n    await getPlatformProjectGrantStore().create(SYSTEM_CONTEXT, grant);\n    return json(grant, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to create grant\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAOA,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;AACjC,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AACtC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9B,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO;AACrB,CAAC,CAAC;AACF,eAAe,qBAAqB,CAAC,EAAE,EAAE;AACzC,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC;AACtE,EAAE,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC;AAC3E,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE;AACrD,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,4BAA4B,CAAC;AAClD,EAAE;AACF,EAAE,OAAO,OAAO;AAChB;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC1C,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC;AACjD,EAAE,IAAI;AACN,IAAI,MAAM,qBAAqB,CAAC,EAAE,CAAC;AACnC,IAAI,MAAM,MAAM,GAAG,MAAM,4BAA4B,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC;AACzF,IAAI,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;AAC3B,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,uBAAuB,CAAC;AAChD,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpD,EAAE,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC3C,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC;AACjD,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAChD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI;AACN,IAAI,MAAM,qBAAqB,CAAC,EAAE,CAAC;AACnC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,KAAK,EAAE;AAC3C,MAAM,MAAM,GAAG,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;AAC/F,MAAM,IAAI,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AACrF,IAAI,CAAC,MAAM;AACX,MAAM,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;AACnG,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AACjF,IAAI;AACJ,IAAI,MAAM,KAAK,GAAG;AAClB,MAAM,EAAE,EAAE,UAAU,EAAE;AACtB,MAAM,SAAS,EAAE,EAAE;AACnB,MAAM,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AAC1C,MAAM,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;AACtC,MAAM,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;AACpC,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW;AACzD,KAAK;AACL,IAAI,MAAM,4BAA4B,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC;AACtE,IAAI,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACvC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AACjD,EAAE;AACF;;;;"}
+{"version":3,"file":"_server.ts-CJ5P0_cD.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/projects/_id_/grants/_server.ts.js"],"sourcesContent":["import { error, json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\nimport { m as getPlatformProjectGrantStore, k as getOrganizationProvider, q as getUserProfileStore, f as flag, n as getProjectProvider } from \"../../../../../../../chunks/providers.server.js\";\nimport { u as requireInstanceAdmin } from \"../../../../../../../chunks/access.server.js\";\nimport { h as handleApiError, t as throwZodError } from \"../../../../../../../chunks/api-errors.js\";\nimport { S as SYSTEM_CONTEXT } from \"../../../../../../../chunks/context.js\";\nconst CreateGrantBody = z.object({\n  granteeType: z.enum([\"org\", \"user\"]),\n  granteeId: z.string().min(1),\n  canSolve: z.boolean()\n});\nasync function assertPlatformProject(id) {\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) throw error(404, \"Not found\");\n  const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, id);\n  if (!project || project.visibility !== \"platform\") {\n    throw error(404, \"Platform project not found\");\n  }\n  return project;\n}\nconst GET = async ({ params, locals }) => {\n  requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) throw error(400, \"Missing project ID\");\n  try {\n    await assertPlatformProject(id);\n    const grants = await getPlatformProjectGrantStore().listByProject(SYSTEM_CONTEXT, id);\n    return json({ grants });\n  } catch (err) {\n    handleApiError(err, \"Failed to list grants\");\n  }\n};\nconst POST = async ({ params, request, locals }) => {\n  const user = requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) throw error(400, \"Missing project ID\");\n  const body = await request.json().catch(() => null);\n  const parsed = CreateGrantBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  try {\n    await assertPlatformProject(id);\n    if (parsed.data.granteeType === \"org\") {\n      const org = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, parsed.data.granteeId);\n      if (!org) throw error(400, `Organization '${parsed.data.granteeId}' not found`);\n    } else {\n      const profile = await getUserProfileStore().getProfile(SYSTEM_CONTEXT, parsed.data.granteeId);\n      if (!profile) throw error(400, `User '${parsed.data.granteeId}' not found`);\n    }\n    const grant = {\n      id: randomUUID(),\n      projectId: id,\n      granteeType: parsed.data.granteeType,\n      granteeId: parsed.data.granteeId,\n      canSolve: parsed.data.canSolve,\n      createdBy: user.id,\n      createdAt: (/* @__PURE__ */ new Date()).toISOString()\n    };\n    await getPlatformProjectGrantStore().create(SYSTEM_CONTEXT, grant);\n    return json(grant, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to create grant\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAOA,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;AACjC,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AACtC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9B,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO;AACrB,CAAC,CAAC;AACF,eAAe,qBAAqB,CAAC,EAAE,EAAE;AACzC,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC;AACtE,EAAE,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC;AAC3E,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE;AACrD,IAAI,MAAM,KAAK,CAAC,GAAG,EAAE,4BAA4B,CAAC;AAClD,EAAE;AACF,EAAE,OAAO,OAAO;AAChB;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC1C,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC;AACjD,EAAE,IAAI;AACN,IAAI,MAAM,qBAAqB,CAAC,EAAE,CAAC;AACnC,IAAI,MAAM,MAAM,GAAG,MAAM,4BAA4B,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC;AACzF,IAAI,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;AAC3B,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,uBAAuB,CAAC;AAChD,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpD,EAAE,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC3C,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC;AACjD,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAChD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI;AACN,IAAI,MAAM,qBAAqB,CAAC,EAAE,CAAC;AACnC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,KAAK,EAAE;AAC3C,MAAM,MAAM,GAAG,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;AAC/F,MAAM,IAAI,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AACrF,IAAI,CAAC,MAAM;AACX,MAAM,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;AACnG,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AACjF,IAAI;AACJ,IAAI,MAAM,KAAK,GAAG;AAClB,MAAM,EAAE,EAAE,UAAU,EAAE;AACtB,MAAM,SAAS,EAAE,EAAE;AACnB,MAAM,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AAC1C,MAAM,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;AACtC,MAAM,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;AACpC,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW;AACzD,KAAK;AACL,IAAI,MAAM,4BAA4B,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC;AACtE,IAAI,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACvC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AACjD,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-vURDyV-V.js → _server.ts-Ca-ZnaSe.js}

@@ -1,7 +1,7 @@
 import { error } from '@sveltejs/kit';
-import { i as getDefinitionMeta, d as definitionPaths, o as getStorageProvider } from './providers.server-MD7TK-zQ.js';
+import { h as getDefinitionMeta, d as definitionPaths, o as getStorageProvider } from './providers.server-wGknM6CR.js';
 import { G as GuidSchema } from './context-DKDYb-He.js';
-import { s as requireCanViewProject } from './access.server-BBglojso.js';
+import { s as requireCanViewProject } from './access.server-ByXvmWyF.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
 import 'node:path';
@@ -10,9 +10,9 @@ import 'node:crypto';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
 import 'zod';
-import './api-errors-agQVBoep.js';
+import './api-errors-C0SWfJj5.js';
 import '@selvajs/compute/core';
-import './utils2-D38XWwRv.js';
+import './utils2-BsnrDRob.js';
 
 const ALLOWED_EXTENSIONS = {
   ".webp": "image/webp",
@@ -48,4 +48,4 @@ const GET = async ({ params, locals }) => {
 };
 
 export { GET };
-//# sourceMappingURL=_server.ts-vURDyV-V.js.map
+//# sourceMappingURL=_server.ts-Ca-ZnaSe.js.map

package/build/server/chunks/{_server.ts-vURDyV-V.js.map → _server.ts-Ca-ZnaSe.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_server.ts-vURDyV-V.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/files/_...path_/_server.ts.js"],"sourcesContent":["import { error } from \"@sveltejs/kit\";\nimport { i as getDefinitionMeta, d as definitionPaths, o as getStorageProvider } from \"../../../../../chunks/providers.server.js\";\nimport { G as GuidSchema } from \"../../../../../chunks/context.js\";\nimport { s as requireCanViewProject } from \"../../../../../chunks/access.server.js\";\nconst ALLOWED_EXTENSIONS = {\n  \".webp\": \"image/webp\",\n  \".jpg\": \"image/jpeg\",\n  \".jpeg\": \"image/jpeg\",\n  \".png\": \"image/png\",\n  \".gif\": \"image/gif\"\n};\nconst COVER_PATH_PATTERN = /^definitions\\/([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\\/cover\\.([a-z]+)$/i;\nconst GET = async ({ params, locals }) => {\n  const storagePath = params.path;\n  if (!storagePath) throw error(400, \"Missing path\");\n  const match = COVER_PATH_PATTERN.exec(storagePath);\n  if (!match) throw error(404, \"File not found\");\n  const [, guid, rawExt] = match;\n  const ext = `.${rawExt.toLowerCase()}`;\n  if (!ALLOWED_EXTENSIONS[ext]) throw error(404, \"File not found\");\n  const guidParsed = GuidSchema.safeParse(guid);\n  if (!guidParsed.success) throw error(404, \"File not found\");\n  if (!locals.ctx) throw error(401, \"Unauthorized\");\n  const record = await getDefinitionMeta().get(locals.ctx, guidParsed.data);\n  if (!record) throw error(404, \"File not found\");\n  await requireCanViewProject(locals, record.projectId);\n  const canonicalPath = definitionPaths.image(guidParsed.data);\n  const bytes = await getStorageProvider().get(canonicalPath);\n  if (!bytes) throw error(404, \"File not found\");\n  return new Response(Buffer.from(bytes), {\n    headers: {\n      \"Content-Type\": ALLOWED_EXTENSIONS[ext],\n      \"Cache-Control\": \"private, max-age=3600\"\n    }\n  });\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIA,MAAM,kBAAkB,GAAG;AAC3B,EAAE,OAAO,EAAE,YAAY;AACvB,EAAE,MAAM,EAAE,YAAY;AACtB,EAAE,OAAO,EAAE,YAAY;AACvB,EAAE,MAAM,EAAE,WAAW;AACrB,EAAE,MAAM,EAAE;AACV,CAAC;AACD,MAAM,kBAAkB,GAAG,iGAAiG;AACvH,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC1C,EAAE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI;AACjC,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC;AACpD,EAAE,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC;AACpD,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAChD,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC,GAAG,KAAK;AAChC,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AACxC,EAAE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAClE,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;AAC/C,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAC7D,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC;AACnD,EAAE,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AAC3E,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AACjD,EAAE,MAAM,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC;AACvD,EAAE,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;AAC9D,EAAE,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC;AAC7D,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAChD,EAAE,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;AAC1C,IAAI,OAAO,EAAE;AACb,MAAM,cAAc,EAAE,kBAAkB,CAAC,GAAG,CAAC;AAC7C,MAAM,eAAe,EAAE;AACvB;AACA,GAAG,CAAC;AACJ;;;;"}
+{"version":3,"file":"_server.ts-Ca-ZnaSe.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/files/_...path_/_server.ts.js"],"sourcesContent":["import { error } from \"@sveltejs/kit\";\nimport { h as getDefinitionMeta, d as definitionPaths, o as getStorageProvider } from \"../../../../../chunks/providers.server.js\";\nimport { G as GuidSchema } from \"../../../../../chunks/context.js\";\nimport { s as requireCanViewProject } from \"../../../../../chunks/access.server.js\";\nconst ALLOWED_EXTENSIONS = {\n  \".webp\": \"image/webp\",\n  \".jpg\": \"image/jpeg\",\n  \".jpeg\": \"image/jpeg\",\n  \".png\": \"image/png\",\n  \".gif\": \"image/gif\"\n};\nconst COVER_PATH_PATTERN = /^definitions\\/([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\\/cover\\.([a-z]+)$/i;\nconst GET = async ({ params, locals }) => {\n  const storagePath = params.path;\n  if (!storagePath) throw error(400, \"Missing path\");\n  const match = COVER_PATH_PATTERN.exec(storagePath);\n  if (!match) throw error(404, \"File not found\");\n  const [, guid, rawExt] = match;\n  const ext = `.${rawExt.toLowerCase()}`;\n  if (!ALLOWED_EXTENSIONS[ext]) throw error(404, \"File not found\");\n  const guidParsed = GuidSchema.safeParse(guid);\n  if (!guidParsed.success) throw error(404, \"File not found\");\n  if (!locals.ctx) throw error(401, \"Unauthorized\");\n  const record = await getDefinitionMeta().get(locals.ctx, guidParsed.data);\n  if (!record) throw error(404, \"File not found\");\n  await requireCanViewProject(locals, record.projectId);\n  const canonicalPath = definitionPaths.image(guidParsed.data);\n  const bytes = await getStorageProvider().get(canonicalPath);\n  if (!bytes) throw error(404, \"File not found\");\n  return new Response(Buffer.from(bytes), {\n    headers: {\n      \"Content-Type\": ALLOWED_EXTENSIONS[ext],\n      \"Cache-Control\": \"private, max-age=3600\"\n    }\n  });\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIA,MAAM,kBAAkB,GAAG;AAC3B,EAAE,OAAO,EAAE,YAAY;AACvB,EAAE,MAAM,EAAE,YAAY;AACtB,EAAE,OAAO,EAAE,YAAY;AACvB,EAAE,MAAM,EAAE,WAAW;AACrB,EAAE,MAAM,EAAE;AACV,CAAC;AACD,MAAM,kBAAkB,GAAG,iGAAiG;AACvH,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC1C,EAAE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI;AACjC,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC;AACpD,EAAE,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC;AACpD,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAChD,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC,GAAG,KAAK;AAChC,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AACxC,EAAE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAClE,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;AAC/C,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAC7D,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC;AACnD,EAAE,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AAC3E,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AACjD,EAAE,MAAM,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC;AACvD,EAAE,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;AAC9D,EAAE,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC;AAC7D,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAChD,EAAE,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;AAC1C,IAAI,OAAO,EAAE;AACb,MAAM,cAAc,EAAE,kBAAkB,CAAC,GAAG,CAAC;AAC7C,MAAM,eAAe,EAAE;AACvB;AACA,GAAG,CAAC;AACJ;;;;"}