@selvajs/selva 4.20.0-beta.1 → 4.20.0-beta.11

package/build/server/chunks/chunks/traversal.js-C2z6XZbO.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"traversal.js-C2z6XZbO.js","sources":["../../../../.svelte-kit/output/server/chunks/traversal.js"],"sourcesContent":["//#region ../schemas/src/traversal.ts\n/**\n* Every group across the schema, in tab order, with tab boundaries flattened away.\n* Callers that need the tab structure (e.g. position-based panels) must walk `layout`\n* directly — this is intentionally a group-level view.\n*/\nfunction getGroups(schema) {\n\tif (!schema?.layout) return [];\n\tif (schema.layout.type === \"tabbed\") return schema.layout.tabs?.flatMap((t) => t.groups ?? []) ?? [];\n\tif (schema.layout.type === \"flat\") return schema.layout.groups ?? [];\n\treturn [];\n}\n/** Every layout item across every group — inputs, outputs, and linebreaks. */\nfunction getLayoutItems(schema) {\n\treturn getGroups(schema).flatMap((g) => g.items ?? []);\n}\n/** Only the input items. `getExternalInputs` and preset save build on this. */\nfunction getInputItems(schema) {\n\treturn getLayoutItems(schema).filter((i) => i.type === \"input\");\n}\n//#endregion\nexport { getInputItems as n, getLayoutItems as r, getGroups as t };\n"],"names":[],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,SAAS,CAAC,MAAM,EAAE;AAC3B,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;AAC/B,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,EAAE;AACrG,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE;AACrE,CAAC,OAAO,EAAE;AACV;AACA;AACA,SAAS,cAAc,CAAC,MAAM,EAAE;AAChC,CAAC,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;AACvD;AACA;AACA,SAAS,aAAa,CAAC,MAAM,EAAE;AAC/B,CAAC,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC;AAChE;;;;"}

package/build/server/chunks/chunks/update-outcome.js-BnQsHDn7.js

@@ -0,0 +1,157 @@
+function firstMatch(logs, re) {
+	const m = re.exec(logs);
+	return m ? m[1] : void 0;
+}
+function parseVersions(logs) {
+	const version = String.raw`\d+\.\d+\.\d+[^\s]*`;
+	const arrow = new RegExp(String.raw`(?:Target \([^)]*\)|Available):\s*(${version})\s*(?:→|->)\s*(${version})`).exec(logs);
+	return {
+		from: firstMatch(logs, /Current @selvajs\/selva:\s*v?(\d+\.\d+\.\d+[^\s]*)/) ?? arrow?.[1],
+		to: firstMatch(logs, /New @selvajs\/selva:\s*v?(\d+\.\d+\.\d+[^\s]*)/) ?? arrow?.[2]
+	};
+}
+function has(logs, needle) {
+	return logs.includes(needle);
+}
+function deriveOutcome(exitCode, logs) {
+	const { from, to } = parseVersions(logs);
+	if (exitCode === null) return {
+		severity: "pending",
+		title: "Update in progress…"
+	};
+	if (exitCode === 6 || has(logs, "Manual recovery required") || has(logs, "manual intervention required")) return {
+		severity: "critical",
+		title: "Update failed AND rollback failed — the app may be OFFLINE",
+		detail: "Both the new version and the rollback failed their health check. SSH into the server and run: `pm2 logs selva-compute`, then `pm2 start ecosystem.config.cjs` from the deployment directory.",
+		from,
+		to
+	};
+	if (exitCode === -2) return {
+		severity: "critical",
+		title: "App did not come back online within 15 minutes",
+		detail: "The update may still be finishing in the background, or the new process is crash-looping. Check `pm2 logs selva-compute`. Do not re-run the update until you have confirmed the current state.",
+		from,
+		to
+	};
+	if (exitCode === 4) return {
+		severity: "critical",
+		title: "Update failed and the rollback could not reinstall — the app may be OFFLINE",
+		detail: "The previous version could not be restored from npm. SSH into the server and run `pm2 logs selva-compute`; if the app is down, reinstall explicitly with `npm install --prefer-online @selvajs/cli@<version> @selvajs/selva@<version>` from the deployment directory.",
+		from,
+		to
+	};
+	if (exitCode === 3) return {
+		severity: "critical",
+		title: "Update failed its health check and could not be rolled back automatically",
+		detail: "No prior version was recorded, so the previous build could not be restored. Check `pm2 logs selva-compute` to confirm whether the app came back online.",
+		from,
+		to
+	};
+	if (exitCode === 143 || exitCode === 130 || exitCode === 129 || has(logs, "KILLED")) return {
+		severity: "critical",
+		title: "Update was killed before it finished — nothing was installed",
+		detail: "The runner was terminated mid-update, most often by a systemd-supervised PM2 restarting its whole control group. The version on disk is unchanged. Check `pm2 logs selva-compute` and confirm the app is online before retrying; if a global pm2 owns the daemon, reconcile that first.",
+		from,
+		to
+	};
+	if (exitCode === 9 || has(logs, "SYSTEMD_PM2")) return {
+		severity: "warning",
+		title: "Update cancelled — PM2 needs a resync that only a shell can do safely. The app is untouched.",
+		detail: "This deployment's PM2 runs under systemd, where `pm2 update` restarts the unit and kills the update mid-run. Nothing was installed and the app is still serving. SSH in and run `./node_modules/.bin/pm2 update` from the deployment directory, then retry the update here.",
+		from,
+		to
+	};
+	if (exitCode === 8 || has(logs, "PM2_SKEW")) {
+		const daemon = firstMatch(logs, /daemon \(v(\d+\.\d+\.\d+)\)/);
+		const local = firstMatch(logs, /deployment's pm2 \(v(\d+\.\d+\.\d+)\)/);
+		return {
+			severity: "warning",
+			title: daemon && local ? `Update cancelled — a global PM2 (v${daemon}) owns the daemon, not this deployment's (v${local}). The app is untouched.` : "Update cancelled — a conflicting global PM2 owns the daemon. The app is untouched.",
+			detail: "Resyncing would have downgraded the daemon and dropped its process table, so the update stopped before taking the app down. On the server: `which -a pm2`, `pm2 -v`, `pm2 ping` — remove or align the global pm2, then retry.",
+			from,
+			to
+		};
+	}
+	if (has(logs, "SCHEMA_SKEW")) {
+		const expected = firstMatch(logs, /expects database migration head (\S+?),/);
+		const actual = firstMatch(logs, /this database is at (\S+?)\./);
+		const skew = expected && actual ? ` The database is at ${actual}; ${to ?? "it"} needs ${expected}.` : "";
+		const providerTag = firstMatch(logs, /@selvajs\/supabase-provider@([\w.-]+)/) ?? (has(logs, "channel: beta") ? "beta" : "latest");
+		return {
+			severity: "warning",
+			title: `Update rolled back — the database migrations for ${to ?? "the new version"} have not been applied.${skew} The app is online${from ? ` on ${from}` : ""}.`,
+			detail: `Nothing is wrong with the new version. Selva does not apply migrations during an update, because they cannot be rolled back — auto-migrating and then rolling the code back would leave the app and database on different heads. Apply them on the server, then re-run this update: \`npm install --prefer-online @selvajs/supabase-provider@${providerTag}\`, then \`npx selva-supabase\`, then \`npx supabase db push\`. The provider install is not optional — the migration SQL ships inside that package, and the update only moves @selvajs/cli and @selvajs/selva, so a sync without it copies nothing and the push reports "up to date" having done nothing. Retrying without this will fail in exactly the same way.`,
+			from,
+			to
+		};
+	}
+	if (has(logs, "AT_REST_SECRETS")) return {
+		severity: "warning",
+		title: `Update rolled back — stored compute server keys do not decrypt under this host's SELVA_AT_REST_KEY. The app is online${from ? ` on ${from}` : ""}.`,
+		detail: "This is a configuration problem on the server, not a fault in the new version, so retrying alone will fail identically. Re-enter the affected keys at /admin/compute, or restore the SELVA_AT_REST_KEY the values were encrypted with, then re-run the update.",
+		from,
+		to
+	};
+	if (exitCode === 5 || has(logs, "Rolled back")) return {
+		severity: "warning",
+		title: `Update failed — safely rolled back${from ? ` to ${from}` : ""}. The app is online.`,
+		detail: "The new version failed its health check, so the previous version was restored and is serving normally. Review the log below for why the new version failed before retrying.",
+		from,
+		to
+	};
+	if (has(logs, "ENGINE_MISMATCH") || has(logs, "EBADENGINE")) {
+		const required = firstMatch(logs, /requires Node ([^\s]+(?:\s*[<>=]+\s*[\d.]+)*)/);
+		const running = firstMatch(logs, /this host runs v?(\d+\.\d+\.\d+)/);
+		return {
+			severity: "warning",
+			title: running ? `Updated${to ? ` to ${to}` : ""}, but this release needs Node ${required ?? "(newer)"} — the host runs v${running}. Expect runtime failures.` : `Updated${to ? ` to ${to}` : ""}, but this release requires a newer Node than the host provides. Expect runtime failures.`,
+			detail: "npm installed it anyway (engine-strict is off) and the health check passed, but it does not exercise the newer APIs — routes that do will throw at request time. Upgrade Node on the server, then re-run the update.",
+			from,
+			to
+		};
+	}
+	if (has(logs, "npm cache may be stale") || has(logs, "No version change")) return {
+		severity: "warning",
+		title: "No version change — npm installed the same version.",
+		detail: "Your npm cache may be stale. On the server: `npm cache clean --force`, remove node_modules + package-lock.json, then `npm install --prefer-online`.",
+		from,
+		to
+	};
+	if (exitCode === 0) {
+		if (has(logs, "Already on the") || has(logs, "Nothing to do")) return {
+			severity: "info",
+			title: `Already up to date${from ? ` (${from})` : ""} — nothing to install.`,
+			detail: "No changes were made and the app was not restarted.",
+			from,
+			to
+		};
+		if (from && to && from !== to) return {
+			severity: "success",
+			title: `Updated ${from} → ${to}. The app is back online.`,
+			from,
+			to
+		};
+		if (to) return {
+			severity: "success",
+			title: `Update complete — now on ${to}. The app is back online.`,
+			from,
+			to
+		};
+		return {
+			severity: "success",
+			title: "Update completed and the app is back online.",
+			from,
+			to
+		};
+	}
+	return {
+		severity: "critical",
+		title: `Update failed (exit code ${exitCode}).`,
+		detail: "The update did not complete cleanly. Review the log below, and check `pm2 logs selva-compute` to confirm whether the app is currently online.",
+		from,
+		to
+	};
+}
+
+export { deriveOutcome as d };
+//# sourceMappingURL=update-outcome.js-BnQsHDn7.js.map

package/build/server/chunks/chunks/update-outcome.js-BnQsHDn7.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-outcome.js-BnQsHDn7.js","sources":["../../../../.svelte-kit/output/server/chunks/update-outcome.js"],"sourcesContent":["function firstMatch(logs, re) {\n\tconst m = re.exec(logs);\n\treturn m ? m[1] : void 0;\n}\nfunction parseVersions(logs) {\n\tconst version = String.raw`\\d+\\.\\d+\\.\\d+[^\\s]*`;\n\tconst arrow = new RegExp(String.raw`(?:Target \\([^)]*\\)|Available):\\s*(${version})\\s*(?:→|->)\\s*(${version})`).exec(logs);\n\treturn {\n\t\tfrom: firstMatch(logs, /Current @selvajs\\/selva:\\s*v?(\\d+\\.\\d+\\.\\d+[^\\s]*)/) ?? arrow?.[1],\n\t\tto: firstMatch(logs, /New @selvajs\\/selva:\\s*v?(\\d+\\.\\d+\\.\\d+[^\\s]*)/) ?? arrow?.[2]\n\t};\n}\nfunction has(logs, needle) {\n\treturn logs.includes(needle);\n}\nfunction deriveOutcome(exitCode, logs) {\n\tconst { from, to } = parseVersions(logs);\n\tif (exitCode === null) return {\n\t\tseverity: \"pending\",\n\t\ttitle: \"Update in progress…\"\n\t};\n\tif (exitCode === 6 || has(logs, \"Manual recovery required\") || has(logs, \"manual intervention required\")) return {\n\t\tseverity: \"critical\",\n\t\ttitle: \"Update failed AND rollback failed — the app may be OFFLINE\",\n\t\tdetail: \"Both the new version and the rollback failed their health check. SSH into the server and run: `pm2 logs selva-compute`, then `pm2 start ecosystem.config.cjs` from the deployment directory.\",\n\t\tfrom,\n\t\tto\n\t};\n\tif (exitCode === -2) return {\n\t\tseverity: \"critical\",\n\t\ttitle: \"App did not come back online within 15 minutes\",\n\t\tdetail: \"The update may still be finishing in the background, or the new process is crash-looping. Check `pm2 logs selva-compute`. Do not re-run the update until you have confirmed the current state.\",\n\t\tfrom,\n\t\tto\n\t};\n\tif (exitCode === 4) return {\n\t\tseverity: \"critical\",\n\t\ttitle: \"Update failed and the rollback could not reinstall — the app may be OFFLINE\",\n\t\tdetail: \"The previous version could not be restored from npm. SSH into the server and run `pm2 logs selva-compute`; if the app is down, reinstall explicitly with `npm install --prefer-online @selvajs/cli@<version> @selvajs/selva@<version>` from the deployment directory.\",\n\t\tfrom,\n\t\tto\n\t};\n\tif (exitCode === 3) return {\n\t\tseverity: \"critical\",\n\t\ttitle: \"Update failed its health check and could not be rolled back automatically\",\n\t\tdetail: \"No prior version was recorded, so the previous build could not be restored. Check `pm2 logs selva-compute` to confirm whether the app came back online.\",\n\t\tfrom,\n\t\tto\n\t};\n\tif (exitCode === 143 || exitCode === 130 || exitCode === 129 || has(logs, \"KILLED\")) return {\n\t\tseverity: \"critical\",\n\t\ttitle: \"Update was killed before it finished — nothing was installed\",\n\t\tdetail: \"The runner was terminated mid-update, most often by a systemd-supervised PM2 restarting its whole control group. The version on disk is unchanged. Check `pm2 logs selva-compute` and confirm the app is online before retrying; if a global pm2 owns the daemon, reconcile that first.\",\n\t\tfrom,\n\t\tto\n\t};\n\tif (exitCode === 9 || has(logs, \"SYSTEMD_PM2\")) return {\n\t\tseverity: \"warning\",\n\t\ttitle: \"Update cancelled — PM2 needs a resync that only a shell can do safely. The app is untouched.\",\n\t\tdetail: \"This deployment's PM2 runs under systemd, where `pm2 update` restarts the unit and kills the update mid-run. Nothing was installed and the app is still serving. SSH in and run `./node_modules/.bin/pm2 update` from the deployment directory, then retry the update here.\",\n\t\tfrom,\n\t\tto\n\t};\n\tif (exitCode === 8 || has(logs, \"PM2_SKEW\")) {\n\t\tconst daemon = firstMatch(logs, /daemon \\(v(\\d+\\.\\d+\\.\\d+)\\)/);\n\t\tconst local = firstMatch(logs, /deployment's pm2 \\(v(\\d+\\.\\d+\\.\\d+)\\)/);\n\t\treturn {\n\t\t\tseverity: \"warning\",\n\t\t\ttitle: daemon && local ? `Update cancelled — a global PM2 (v${daemon}) owns the daemon, not this deployment's (v${local}). The app is untouched.` : \"Update cancelled — a conflicting global PM2 owns the daemon. The app is untouched.\",\n\t\t\tdetail: \"Resyncing would have downgraded the daemon and dropped its process table, so the update stopped before taking the app down. On the server: `which -a pm2`, `pm2 -v`, `pm2 ping` — remove or align the global pm2, then retry.\",\n\t\t\tfrom,\n\t\t\tto\n\t\t};\n\t}\n\tif (has(logs, \"SCHEMA_SKEW\")) {\n\t\tconst expected = firstMatch(logs, /expects database migration head (\\S+?),/);\n\t\tconst actual = firstMatch(logs, /this database is at (\\S+?)\\./);\n\t\tconst skew = expected && actual ? ` The database is at ${actual}; ${to ?? \"it\"} needs ${expected}.` : \"\";\n\t\tconst providerTag = firstMatch(logs, /@selvajs\\/supabase-provider@([\\w.-]+)/) ?? (has(logs, \"channel: beta\") ? \"beta\" : \"latest\");\n\t\treturn {\n\t\t\tseverity: \"warning\",\n\t\t\ttitle: `Update rolled back — the database migrations for ${to ?? \"the new version\"} have not been applied.${skew} The app is online${from ? ` on ${from}` : \"\"}.`,\n\t\t\tdetail: `Nothing is wrong with the new version. Selva does not apply migrations during an update, because they cannot be rolled back — auto-migrating and then rolling the code back would leave the app and database on different heads. Apply them on the server, then re-run this update: \\`npm install --prefer-online @selvajs/supabase-provider@${providerTag}\\`, then \\`npx selva-supabase\\`, then \\`npx supabase db push\\`. The provider install is not optional — the migration SQL ships inside that package, and the update only moves @selvajs/cli and @selvajs/selva, so a sync without it copies nothing and the push reports \"up to date\" having done nothing. Retrying without this will fail in exactly the same way.`,\n\t\t\tfrom,\n\t\t\tto\n\t\t};\n\t}\n\tif (has(logs, \"AT_REST_SECRETS\")) return {\n\t\tseverity: \"warning\",\n\t\ttitle: `Update rolled back — stored compute server keys do not decrypt under this host's SELVA_AT_REST_KEY. The app is online${from ? ` on ${from}` : \"\"}.`,\n\t\tdetail: \"This is a configuration problem on the server, not a fault in the new version, so retrying alone will fail identically. Re-enter the affected keys at /admin/compute, or restore the SELVA_AT_REST_KEY the values were encrypted with, then re-run the update.\",\n\t\tfrom,\n\t\tto\n\t};\n\tif (exitCode === 5 || has(logs, \"Rolled back\")) return {\n\t\tseverity: \"warning\",\n\t\ttitle: `Update failed — safely rolled back${from ? ` to ${from}` : \"\"}. The app is online.`,\n\t\tdetail: \"The new version failed its health check, so the previous version was restored and is serving normally. Review the log below for why the new version failed before retrying.\",\n\t\tfrom,\n\t\tto\n\t};\n\tif (has(logs, \"ENGINE_MISMATCH\") || has(logs, \"EBADENGINE\")) {\n\t\tconst required = firstMatch(logs, /requires Node ([^\\s]+(?:\\s*[<>=]+\\s*[\\d.]+)*)/);\n\t\tconst running = firstMatch(logs, /this host runs v?(\\d+\\.\\d+\\.\\d+)/);\n\t\treturn {\n\t\t\tseverity: \"warning\",\n\t\t\ttitle: running ? `Updated${to ? ` to ${to}` : \"\"}, but this release needs Node ${required ?? \"(newer)\"} — the host runs v${running}. Expect runtime failures.` : `Updated${to ? ` to ${to}` : \"\"}, but this release requires a newer Node than the host provides. Expect runtime failures.`,\n\t\t\tdetail: \"npm installed it anyway (engine-strict is off) and the health check passed, but it does not exercise the newer APIs — routes that do will throw at request time. Upgrade Node on the server, then re-run the update.\",\n\t\t\tfrom,\n\t\t\tto\n\t\t};\n\t}\n\tif (has(logs, \"npm cache may be stale\") || has(logs, \"No version change\")) return {\n\t\tseverity: \"warning\",\n\t\ttitle: \"No version change — npm installed the same version.\",\n\t\tdetail: \"Your npm cache may be stale. On the server: `npm cache clean --force`, remove node_modules + package-lock.json, then `npm install --prefer-online`.\",\n\t\tfrom,\n\t\tto\n\t};\n\tif (exitCode === 0) {\n\t\tif (has(logs, \"Already on the\") || has(logs, \"Nothing to do\")) return {\n\t\t\tseverity: \"info\",\n\t\t\ttitle: `Already up to date${from ? ` (${from})` : \"\"} — nothing to install.`,\n\t\t\tdetail: \"No changes were made and the app was not restarted.\",\n\t\t\tfrom,\n\t\t\tto\n\t\t};\n\t\tif (from && to && from !== to) return {\n\t\t\tseverity: \"success\",\n\t\t\ttitle: `Updated ${from} → ${to}. The app is back online.`,\n\t\t\tfrom,\n\t\t\tto\n\t\t};\n\t\tif (to) return {\n\t\t\tseverity: \"success\",\n\t\t\ttitle: `Update complete — now on ${to}. The app is back online.`,\n\t\t\tfrom,\n\t\t\tto\n\t\t};\n\t\treturn {\n\t\t\tseverity: \"success\",\n\t\t\ttitle: \"Update completed and the app is back online.\",\n\t\t\tfrom,\n\t\t\tto\n\t\t};\n\t}\n\treturn {\n\t\tseverity: \"critical\",\n\t\ttitle: `Update failed (exit code ${exitCode}).`,\n\t\tdetail: \"The update did not complete cleanly. Review the log below, and check `pm2 logs selva-compute` to confirm whether the app is currently online.\",\n\t\tfrom,\n\t\tto\n\t};\n}\n//#endregion\nexport { deriveOutcome as t };\n"],"names":[],"mappings":"AAAA,SAAS,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE;AAC9B,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;AACxB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM;AACzB;AACA,SAAS,aAAa,CAAC,IAAI,EAAE;AAC7B,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC;AAChD,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,mCAAmC,EAAE,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AAC1H,CAAC,OAAO;AACR,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,oDAAoD,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;AAC5F,EAAE,EAAE,EAAE,UAAU,CAAC,IAAI,EAAE,gDAAgD,CAAC,IAAI,KAAK,GAAG,CAAC;AACrF,EAAE;AACF;AACA,SAAS,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE;AAC3B,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;AAC7B;AACA,SAAS,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE;AACvC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC;AACzC,CAAC,IAAI,QAAQ,KAAK,IAAI,EAAE,OAAO;AAC/B,EAAE,QAAQ,EAAE,SAAS;AACrB,EAAE,KAAK,EAAE;AACT,EAAE;AACF,CAAC,IAAI,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,0BAA0B,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,8BAA8B,CAAC,EAAE,OAAO;AAClH,EAAE,QAAQ,EAAE,UAAU;AACtB,EAAE,KAAK,EAAE,4DAA4D;AACrE,EAAE,MAAM,EAAE,8LAA8L;AACxM,EAAE,IAAI;AACN,EAAE;AACF,EAAE;AACF,CAAC,IAAI,QAAQ,KAAK,EAAE,EAAE,OAAO;AAC7B,EAAE,QAAQ,EAAE,UAAU;AACtB,EAAE,KAAK,EAAE,gDAAgD;AACzD,EAAE,MAAM,EAAE,gMAAgM;AAC1M,EAAE,IAAI;AACN,EAAE;AACF,EAAE;AACF,CAAC,IAAI,QAAQ,KAAK,CAAC,EAAE,OAAO;AAC5B,EAAE,QAAQ,EAAE,UAAU;AACtB,EAAE,KAAK,EAAE,6EAA6E;AACtF,EAAE,MAAM,EAAE,uQAAuQ;AACjR,EAAE,IAAI;AACN,EAAE;AACF,EAAE;AACF,CAAC,IAAI,QAAQ,KAAK,CAAC,EAAE,OAAO;AAC5B,EAAE,QAAQ,EAAE,UAAU;AACtB,EAAE,KAAK,EAAE,2EAA2E;AACpF,EAAE,MAAM,EAAE,yJAAyJ;AACnK,EAAE,IAAI;AACN,EAAE;AACF,EAAE;AACF,CAAC,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,OAAO;AAC7F,EAAE,QAAQ,EAAE,UAAU;AACtB,EAAE,KAAK,EAAE,8DAA8D;AACvE,EAAE,MAAM,EAAE,yRAAyR;AACnS,EAAE,IAAI;AACN,EAAE;AACF,EAAE;AACF,CAAC,IAAI,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,OAAO;AACxD,EAAE,QAAQ,EAAE,SAAS;AACrB,EAAE,KAAK,EAAE,8FAA8F;AACvG,EAAE,MAAM,EAAE,6QAA6Q;AACvR,EAAE,IAAI;AACN,EAAE;AACF,EAAE;AACF,CAAC,IAAI,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE;AAC9C,EAAE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,6BAA6B,CAAC;AAChE,EAAE,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,uCAAuC,CAAC;AACzE,EAAE,OAAO;AACT,GAAG,QAAQ,EAAE,SAAS;AACtB,GAAG,KAAK,EAAE,MAAM,IAAI,KAAK,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,2CAA2C,EAAE,KAAK,CAAC,wBAAwB,CAAC,GAAG,oFAAoF;AAC3O,GAAG,MAAM,EAAE,+NAA+N;AAC1O,GAAG,IAAI;AACP,GAAG;AACH,GAAG;AACH,CAAC;AACD,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE;AAC/B,EAAE,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,EAAE,yCAAyC,CAAC;AAC9E,EAAE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,8BAA8B,CAAC;AACjE,EAAE,MAAM,IAAI,GAAG,QAAQ,IAAI,MAAM,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE;AAC1G,EAAE,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,EAAE,uCAAuC,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,GAAG,MAAM,GAAG,QAAQ,CAAC;AACnI,EAAE,OAAO;AACT,GAAG,QAAQ,EAAE,SAAS;AACtB,GAAG,KAAK,EAAE,CAAC,iDAAiD,EAAE,EAAE,IAAI,iBAAiB,CAAC,uBAAuB,EAAE,IAAI,CAAC,kBAAkB,EAAE,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AACpK,GAAG,MAAM,EAAE,CAAC,6UAA6U,EAAE,WAAW,CAAC,kWAAkW,CAAC;AAC1sB,GAAG,IAAI;AACP,GAAG;AACH,GAAG;AACH,CAAC;AACD,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,EAAE,OAAO;AAC1C,EAAE,QAAQ,EAAE,SAAS;AACrB,EAAE,KAAK,EAAE,CAAC,qHAAqH,EAAE,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AAC7J,EAAE,MAAM,EAAE,gQAAgQ;AAC1Q,EAAE,IAAI;AACN,EAAE;AACF,EAAE;AACF,CAAC,IAAI,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,OAAO;AACxD,EAAE,QAAQ,EAAE,SAAS;AACrB,EAAE,KAAK,EAAE,CAAC,kCAAkC,EAAE,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC;AAC7F,EAAE,MAAM,EAAE,6KAA6K;AACvL,EAAE,IAAI;AACN,EAAE;AACF,EAAE;AACF,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE;AAC9D,EAAE,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,EAAE,+CAA+C,CAAC;AACpF,EAAE,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,kCAAkC,CAAC;AACtE,EAAE,OAAO;AACT,GAAG,QAAQ,EAAE,SAAS;AACtB,GAAG,KAAK,EAAE,OAAO,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,8BAA8B,EAAE,QAAQ,IAAI,SAAS,CAAC,kBAAkB,EAAE,OAAO,CAAC,0BAA0B,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,yFAAyF,CAAC;AAC9R,GAAG,MAAM,EAAE,sNAAsN;AACjO,GAAG,IAAI;AACP,GAAG;AACH,GAAG;AACH,CAAC;AACD,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,mBAAmB,CAAC,EAAE,OAAO;AACnF,EAAE,QAAQ,EAAE,SAAS;AACrB,EAAE,KAAK,EAAE,qDAAqD;AAC9D,EAAE,MAAM,EAAE,qJAAqJ;AAC/J,EAAE,IAAI;AACN,EAAE;AACF,EAAE;AACF,CAAC,IAAI,QAAQ,KAAK,CAAC,EAAE;AACrB,EAAE,IAAI,GAAG,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,OAAO;AACxE,GAAG,QAAQ,EAAE,MAAM;AACnB,GAAG,KAAK,EAAE,CAAC,kBAAkB,EAAE,IAAI,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC;AAC/E,GAAG,MAAM,EAAE,qDAAqD;AAChE,GAAG,IAAI;AACP,GAAG;AACH,GAAG;AACH,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,KAAK,EAAE,EAAE,OAAO;AACxC,GAAG,QAAQ,EAAE,SAAS;AACtB,GAAG,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,yBAAyB,CAAC;AAC5D,GAAG,IAAI;AACP,GAAG;AACH,GAAG;AACH,EAAE,IAAI,EAAE,EAAE,OAAO;AACjB,GAAG,QAAQ,EAAE,SAAS;AACtB,GAAG,KAAK,EAAE,CAAC,yBAAyB,EAAE,EAAE,CAAC,yBAAyB,CAAC;AACnE,GAAG,IAAI;AACP,GAAG;AACH,GAAG;AACH,EAAE,OAAO;AACT,GAAG,QAAQ,EAAE,SAAS;AACtB,GAAG,KAAK,EAAE,8CAA8C;AACxD,GAAG,IAAI;AACP,GAAG;AACH,GAAG;AACH,CAAC;AACD,CAAC,OAAO;AACR,EAAE,QAAQ,EAAE,UAAU;AACtB,EAAE,KAAK,EAAE,CAAC,yBAAyB,EAAE,QAAQ,CAAC,EAAE,CAAC;AACjD,EAAE,MAAM,EAAE,+IAA+I;AACzJ,EAAE,IAAI;AACN,EAAE;AACF,EAAE;AACF;;;;"}

package/build/server/chunks/chunks/visibility.js-CmBHwx8m.js

@@ -0,0 +1,201 @@
+import { S as SYSTEM_CONTEXT, o as outsideTokenOrg, s as scopeAllows } from './src.js-CkFJvvTE.js';
+import { c as canCreateDefinition, p as projectAccessInputFromRowsWith, a as canView, b as canEditDefinition } from './access.js-BataxwA1.js';
+
+//#region ../server/src/definitions/visibility.ts
+/**
+* Visibility-filtered definition reads, shared by the library page load and
+* `GET /api/v1/definitions`.
+*
+* **This is a tenancy boundary.** The project scan runs as `SYSTEM_CONTEXT` so
+* cross-org `public` projects are reachable when `ALLOW_CROSS_ORG_PUBLIC` is on;
+* `canView` over the fetched membership rows is the only thing keeping another
+* org's projects out of the result. The definition list itself is then filtered
+* *in the query* via `projectIds`, so the cursor is applied after visibility
+* rather than over a page that gets thinned afterwards.
+*
+* Cost is constant in the number of orgs and projects: three bulk membership
+* reads regardless of N. Anything added here must keep that property — a
+* per-project `await` inside a loop reintroduces the N+1 this replaced.
+*/
+/** Upper bound on the org/project scan. Visibility needs the whole set. */
+var SCAN_LIMIT = 200;
+/**
+* Resolve the caller's accessible project set in a constant number of queries.
+* Platform grants are fetched only for `platform`-visibility projects —
+* `canView` short-circuits before reading them for every other visibility.
+*/
+async function resolveAccessibleProjects(ctx, deps) {
+	const orgs = deps.orgs;
+	const projectStore = deps.projects;
+	const grantStore = deps.platformProjectGrants;
+	const orgIds = (await orgs.listOrgs(SYSTEM_CONTEXT, { limit: SCAN_LIMIT })).items.map((o) => o.id).filter((id) => !outsideTokenOrg(ctx, id));
+	const allProjects = (await Promise.all(orgIds.map((orgId) => projectStore.listProjects(SYSTEM_CONTEXT, orgId, { limit: SCAN_LIMIT })))).flatMap((p) => p.items);
+	const projectIds = allProjects.map((p) => p.id);
+	const platformProjectIds = allProjects.filter((p) => p.visibility === "platform").map((p) => p.id);
+	const [orgMemberByOrgId, memberByProjectId, grantsByProjectId] = await Promise.all([
+		orgs.getOrgMembersFor(SYSTEM_CONTEXT, orgIds, ctx.userId),
+		projectStore.getProjectMembersFor(SYSTEM_CONTEXT, projectIds, ctx.userId),
+		platformProjectIds.length ? grantStore.listByProjects(SYSTEM_CONTEXT, platformProjectIds) : Promise.resolve(/* @__PURE__ */ new Map())
+	]);
+	return {
+		projects: allProjects.filter((project) => canView(projectAccessInputFromRowsWith({ deps }, ctx, project, {
+			member: memberByProjectId.get(project.id) ?? null,
+			orgMember: orgMemberByOrgId.get(project.orgId) ?? null,
+			platformGrants: grantsByProjectId.get(project.id) ?? []
+		}))),
+		allById: new Map(allProjects.map((p) => [p.id, p])),
+		memberByProjectId,
+		orgMemberByOrgId,
+		grantsByProjectId
+	};
+}
+/**
+* Whether the caller may create a definition in at least one project of
+* `orgId`, by the same rule `requireCanCreateDefinition` applies. Reads the
+* org's projects a page at a time and stops at the first that passes.
+*/
+async function canCreateDefinitionInOrg(ctx, orgId, deps) {
+	let cursor;
+	do {
+		const page = await deps.projects.listProjects(SYSTEM_CONTEXT, orgId, {
+			limit: SCAN_LIMIT,
+			cursor
+		});
+		const platformIds = page.items.filter((p) => p.visibility === "platform").map((p) => p.id);
+		const [orgMembers, members, grants] = await Promise.all([
+			deps.orgs.getOrgMembersFor(SYSTEM_CONTEXT, [orgId], ctx.userId),
+			deps.projects.getProjectMembersFor(SYSTEM_CONTEXT, page.items.map((p) => p.id), ctx.userId),
+			platformIds.length ? deps.platformProjectGrants.listByProjects(SYSTEM_CONTEXT, platformIds) : Promise.resolve(/* @__PURE__ */ new Map())
+		]);
+		if (page.items.some((project) => canCreateDefinition(projectAccessInputFromRowsWith({ deps }, ctx, project, {
+			member: members.get(project.id) ?? null,
+			orgMember: orgMembers.get(orgId) ?? null,
+			platformGrants: grants.get(project.id) ?? []
+		})))) return true;
+		cursor = page.nextCursor;
+	} while (cursor);
+	return false;
+}
+/**
+* `opts.projectId` narrows to one project; a caller who cannot view it gets an
+* empty page rather than a 403, so this never reveals that a project exists.
+*/
+async function listVisibleDefinitions(ctx, opts = {}, deps) {
+	const { projectId, ...listOpts } = opts;
+	const { projects } = await resolveAccessibleProjects(ctx, deps);
+	const scoped = projectId ? projects.filter((p) => p.id === projectId) : projects;
+	const page = await deps.definitionMeta.list(ctx, {
+		...listOpts,
+		projectIds: scoped.map((p) => p.id)
+	});
+	return {
+		items: page.items,
+		nextCursor: page.nextCursor,
+		projects: scoped
+	};
+}
+/**
+* Editable definitions whose `sourceDocumentId` is `documentId`: the ones the
+* caller could upload a new version of, by {@link mayUploadToDefinition}.
+*
+* Commons projects are scanned too, since a caller owns their own uploads there
+* without edit rights on the project; rows they can't edit are dropped after
+* the query, so a page can come back short while `nextCursor` stays valid.
+*/
+async function listEditableDefinitionsByDocument(ctx, documentId, opts, deps) {
+	const { projectId, ...listOpts } = opts;
+	const set = await resolveAccessibleProjects(ctx, deps);
+	const rowsFor = (project) => ({
+		member: set.memberByProjectId.get(project.id) ?? null,
+		orgMember: set.orgMemberByOrgId.get(project.orgId) ?? null,
+		platformGrants: set.grantsByProjectId.get(project.id) ?? []
+	});
+	const candidates = set.projects.filter((p) => (!projectId || p.id === projectId) && canCreateDefinition(projectAccessInputFromRowsWith({ deps }, ctx, p, rowsFor(p))));
+	const page = await deps.definitionMeta.list(ctx, {
+		...listOpts,
+		sourceDocumentId: documentId,
+		projectIds: candidates.map((p) => p.id)
+	});
+	return {
+		items: page.items.filter((record) => {
+			const project = set.allById.get(record.projectId);
+			return project ? mayUploadToDefinition(ctx, {
+				record,
+				project,
+				...rowsFor(project)
+			}, deps) : false;
+		}),
+		nextCursor: page.nextCursor
+	};
+}
+/**
+* One definition, or `null` when the caller cannot view its project.
+*
+* Returns `null` rather than throwing 403 so callers surface a 404: a public
+* API that answers "forbidden" for a guid the caller cannot see turns
+* `/definitions/{guid}` into a cross-tenant existence oracle.
+*/
+async function getVisibleDefinition(ctx, guid, deps) {
+	return (await loadVisibleDefinition(ctx, guid, deps))?.record ?? null;
+}
+/** {@link getVisibleDefinition} with the rows it read, for a second rule over the same caller. */
+async function loadVisibleDefinition(ctx, guid, deps) {
+	const meta = deps.definitionMeta;
+	const projectStore = deps.projects;
+	const record = await meta.get(ctx, guid);
+	if (!record) return null;
+	const project = await projectStore.getProject(SYSTEM_CONTEXT, record.projectId);
+	if (!project || outsideTokenOrg(ctx, project.orgId)) return null;
+	const [orgMembers, projectMembers, grants] = await Promise.all([
+		deps.orgs.getOrgMembersFor(SYSTEM_CONTEXT, [project.orgId], ctx.userId),
+		projectStore.getProjectMembersFor(SYSTEM_CONTEXT, [project.id], ctx.userId),
+		project.visibility === "platform" ? deps.platformProjectGrants.listByProject(SYSTEM_CONTEXT, project.id) : Promise.resolve([])
+	]);
+	const member = projectMembers.get(project.id) ?? null;
+	const orgMember = orgMembers.get(project.orgId) ?? null;
+	return canView(projectAccessInputFromRowsWith({ deps }, ctx, project, {
+		member,
+		orgMember,
+		platformGrants: grants
+	})) ? {
+		record,
+		project,
+		member,
+		orgMember
+	} : null;
+}
+/**
+* May the caller upload a version of this definition and make one live? The
+* rule `requireEditableDefinition` applies, and for an API token its `upload`
+* scope on the definition, which is what those routes check.
+*/
+function mayUploadToDefinition(ctx, { record, project, member, orgMember }, deps) {
+	return scopeAllows(ctx, "upload", {
+		definitionId: record.guid,
+		projectId: project.id
+	}) && canEditDefinition({
+		project,
+		definition: record,
+		member,
+		orgMember,
+		userId: ctx.userId,
+		platformPermissions: ctx.platformPermissions,
+		enablePlatformProjects: deps.flag("ENABLE_PLATFORM_PROJECTS")
+	});
+}
+/**
+* One version of a definition the caller can view, including its cached
+* `schema`. `null` when the definition is invisible, the version is missing, or
+* the version belongs to a different definition — a caller must not be able to
+* read an arbitrary version by pairing it with a guid they can see.
+*/
+async function loadVisibleVersion(ctx, guid, versionId, deps) {
+	const record = await getVisibleDefinition(ctx, guid, deps);
+	if (!record) return null;
+	const version = await deps.definitionMeta.getVersion(ctx, versionId);
+	if (!version || version.definitionId !== record.guid) return null;
+	return version;
+}
+
+export { listVisibleDefinitions as a, loadVisibleDefinition as b, canCreateDefinitionInOrg as c, loadVisibleVersion as d, getVisibleDefinition as g, listEditableDefinitionsByDocument as l, mayUploadToDefinition as m, resolveAccessibleProjects as r };
+//# sourceMappingURL=visibility.js-CmBHwx8m.js.map

package/build/server/chunks/chunks/visibility.js-CmBHwx8m.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"visibility.js-CmBHwx8m.js","sources":["../../../../.svelte-kit/output/server/chunks/visibility.js"],"sourcesContent":["import { b as outsideTokenOrg, t as SYSTEM_CONTEXT, x as scopeAllows } from \"./src.js\";\nimport { H as canCreateDefinition, W as canEditDefinition, a as projectAccessInputFromRowsWith, q as canView } from \"./access.js\";\n//#region ../server/src/definitions/visibility.ts\n/**\n* Visibility-filtered definition reads, shared by the library page load and\n* `GET /api/v1/definitions`.\n*\n* **This is a tenancy boundary.** The project scan runs as `SYSTEM_CONTEXT` so\n* cross-org `public` projects are reachable when `ALLOW_CROSS_ORG_PUBLIC` is on;\n* `canView` over the fetched membership rows is the only thing keeping another\n* org's projects out of the result. The definition list itself is then filtered\n* *in the query* via `projectIds`, so the cursor is applied after visibility\n* rather than over a page that gets thinned afterwards.\n*\n* Cost is constant in the number of orgs and projects: three bulk membership\n* reads regardless of N. Anything added here must keep that property — a\n* per-project `await` inside a loop reintroduces the N+1 this replaced.\n*/\n/** Upper bound on the org/project scan. Visibility needs the whole set. */\nvar SCAN_LIMIT = 200;\n/**\n* Resolve the caller's accessible project set in a constant number of queries.\n* Platform grants are fetched only for `platform`-visibility projects —\n* `canView` short-circuits before reading them for every other visibility.\n*/\nasync function resolveAccessibleProjects(ctx, deps) {\n\tconst orgs = deps.orgs;\n\tconst projectStore = deps.projects;\n\tconst grantStore = deps.platformProjectGrants;\n\tconst orgIds = (await orgs.listOrgs(SYSTEM_CONTEXT, { limit: SCAN_LIMIT })).items.map((o) => o.id).filter((id) => !outsideTokenOrg(ctx, id));\n\tconst allProjects = (await Promise.all(orgIds.map((orgId) => projectStore.listProjects(SYSTEM_CONTEXT, orgId, { limit: SCAN_LIMIT })))).flatMap((p) => p.items);\n\tconst projectIds = allProjects.map((p) => p.id);\n\tconst platformProjectIds = allProjects.filter((p) => p.visibility === \"platform\").map((p) => p.id);\n\tconst [orgMemberByOrgId, memberByProjectId, grantsByProjectId] = await Promise.all([\n\t\torgs.getOrgMembersFor(SYSTEM_CONTEXT, orgIds, ctx.userId),\n\t\tprojectStore.getProjectMembersFor(SYSTEM_CONTEXT, projectIds, ctx.userId),\n\t\tplatformProjectIds.length ? grantStore.listByProjects(SYSTEM_CONTEXT, platformProjectIds) : Promise.resolve(/* @__PURE__ */ new Map())\n\t]);\n\treturn {\n\t\tprojects: allProjects.filter((project) => canView(projectAccessInputFromRowsWith({ deps }, ctx, project, {\n\t\t\tmember: memberByProjectId.get(project.id) ?? null,\n\t\t\torgMember: orgMemberByOrgId.get(project.orgId) ?? null,\n\t\t\tplatformGrants: grantsByProjectId.get(project.id) ?? []\n\t\t}))),\n\t\tallById: new Map(allProjects.map((p) => [p.id, p])),\n\t\tmemberByProjectId,\n\t\torgMemberByOrgId,\n\t\tgrantsByProjectId\n\t};\n}\n/**\n* Whether the caller may create a definition in at least one project of\n* `orgId`, by the same rule `requireCanCreateDefinition` applies. Reads the\n* org's projects a page at a time and stops at the first that passes.\n*/\nasync function canCreateDefinitionInOrg(ctx, orgId, deps) {\n\tlet cursor;\n\tdo {\n\t\tconst page = await deps.projects.listProjects(SYSTEM_CONTEXT, orgId, {\n\t\t\tlimit: SCAN_LIMIT,\n\t\t\tcursor\n\t\t});\n\t\tconst platformIds = page.items.filter((p) => p.visibility === \"platform\").map((p) => p.id);\n\t\tconst [orgMembers, members, grants] = await Promise.all([\n\t\t\tdeps.orgs.getOrgMembersFor(SYSTEM_CONTEXT, [orgId], ctx.userId),\n\t\t\tdeps.projects.getProjectMembersFor(SYSTEM_CONTEXT, page.items.map((p) => p.id), ctx.userId),\n\t\t\tplatformIds.length ? deps.platformProjectGrants.listByProjects(SYSTEM_CONTEXT, platformIds) : Promise.resolve(/* @__PURE__ */ new Map())\n\t\t]);\n\t\tif (page.items.some((project) => canCreateDefinition(projectAccessInputFromRowsWith({ deps }, ctx, project, {\n\t\t\tmember: members.get(project.id) ?? null,\n\t\t\torgMember: orgMembers.get(orgId) ?? null,\n\t\t\tplatformGrants: grants.get(project.id) ?? []\n\t\t})))) return true;\n\t\tcursor = page.nextCursor;\n\t} while (cursor);\n\treturn false;\n}\n/**\n* `opts.projectId` narrows to one project; a caller who cannot view it gets an\n* empty page rather than a 403, so this never reveals that a project exists.\n*/\nasync function listVisibleDefinitions(ctx, opts = {}, deps) {\n\tconst { projectId, ...listOpts } = opts;\n\tconst { projects } = await resolveAccessibleProjects(ctx, deps);\n\tconst scoped = projectId ? projects.filter((p) => p.id === projectId) : projects;\n\tconst page = await deps.definitionMeta.list(ctx, {\n\t\t...listOpts,\n\t\tprojectIds: scoped.map((p) => p.id)\n\t});\n\treturn {\n\t\titems: page.items,\n\t\tnextCursor: page.nextCursor,\n\t\tprojects: scoped\n\t};\n}\n/**\n* Editable definitions whose `sourceDocumentId` is `documentId`: the ones the\n* caller could upload a new version of, by {@link mayUploadToDefinition}.\n*\n* Commons projects are scanned too, since a caller owns their own uploads there\n* without edit rights on the project; rows they can't edit are dropped after\n* the query, so a page can come back short while `nextCursor` stays valid.\n*/\nasync function listEditableDefinitionsByDocument(ctx, documentId, opts, deps) {\n\tconst { projectId, ...listOpts } = opts;\n\tconst set = await resolveAccessibleProjects(ctx, deps);\n\tconst rowsFor = (project) => ({\n\t\tmember: set.memberByProjectId.get(project.id) ?? null,\n\t\torgMember: set.orgMemberByOrgId.get(project.orgId) ?? null,\n\t\tplatformGrants: set.grantsByProjectId.get(project.id) ?? []\n\t});\n\tconst candidates = set.projects.filter((p) => (!projectId || p.id === projectId) && canCreateDefinition(projectAccessInputFromRowsWith({ deps }, ctx, p, rowsFor(p))));\n\tconst page = await deps.definitionMeta.list(ctx, {\n\t\t...listOpts,\n\t\tsourceDocumentId: documentId,\n\t\tprojectIds: candidates.map((p) => p.id)\n\t});\n\treturn {\n\t\titems: page.items.filter((record) => {\n\t\t\tconst project = set.allById.get(record.projectId);\n\t\t\treturn project ? mayUploadToDefinition(ctx, {\n\t\t\t\trecord,\n\t\t\t\tproject,\n\t\t\t\t...rowsFor(project)\n\t\t\t}, deps) : false;\n\t\t}),\n\t\tnextCursor: page.nextCursor\n\t};\n}\n/**\n* One definition, or `null` when the caller cannot view its project.\n*\n* Returns `null` rather than throwing 403 so callers surface a 404: a public\n* API that answers \"forbidden\" for a guid the caller cannot see turns\n* `/definitions/{guid}` into a cross-tenant existence oracle.\n*/\nasync function getVisibleDefinition(ctx, guid, deps) {\n\treturn (await loadVisibleDefinition(ctx, guid, deps))?.record ?? null;\n}\n/** {@link getVisibleDefinition} with the rows it read, for a second rule over the same caller. */\nasync function loadVisibleDefinition(ctx, guid, deps) {\n\tconst meta = deps.definitionMeta;\n\tconst projectStore = deps.projects;\n\tconst record = await meta.get(ctx, guid);\n\tif (!record) return null;\n\tconst project = await projectStore.getProject(SYSTEM_CONTEXT, record.projectId);\n\tif (!project || outsideTokenOrg(ctx, project.orgId)) return null;\n\tconst [orgMembers, projectMembers, grants] = await Promise.all([\n\t\tdeps.orgs.getOrgMembersFor(SYSTEM_CONTEXT, [project.orgId], ctx.userId),\n\t\tprojectStore.getProjectMembersFor(SYSTEM_CONTEXT, [project.id], ctx.userId),\n\t\tproject.visibility === \"platform\" ? deps.platformProjectGrants.listByProject(SYSTEM_CONTEXT, project.id) : Promise.resolve([])\n\t]);\n\tconst member = projectMembers.get(project.id) ?? null;\n\tconst orgMember = orgMembers.get(project.orgId) ?? null;\n\treturn canView(projectAccessInputFromRowsWith({ deps }, ctx, project, {\n\t\tmember,\n\t\torgMember,\n\t\tplatformGrants: grants\n\t})) ? {\n\t\trecord,\n\t\tproject,\n\t\tmember,\n\t\torgMember\n\t} : null;\n}\n/**\n* May the caller upload a version of this definition and make one live? The\n* rule `requireEditableDefinition` applies, and for an API token its `upload`\n* scope on the definition, which is what those routes check.\n*/\nfunction mayUploadToDefinition(ctx, { record, project, member, orgMember }, deps) {\n\treturn scopeAllows(ctx, \"upload\", {\n\t\tdefinitionId: record.guid,\n\t\tprojectId: project.id\n\t}) && canEditDefinition({\n\t\tproject,\n\t\tdefinition: record,\n\t\tmember,\n\t\torgMember,\n\t\tuserId: ctx.userId,\n\t\tplatformPermissions: ctx.platformPermissions,\n\t\tenablePlatformProjects: deps.flag(\"ENABLE_PLATFORM_PROJECTS\")\n\t});\n}\n/**\n* One version of a definition the caller can view, including its cached\n* `schema`. `null` when the definition is invisible, the version is missing, or\n* the version belongs to a different definition — a caller must not be able to\n* read an arbitrary version by pairing it with a guid they can see.\n*/\nasync function loadVisibleVersion(ctx, guid, versionId, deps) {\n\tconst record = await getVisibleDefinition(ctx, guid, deps);\n\tif (!record) return null;\n\tconst version = await deps.definitionMeta.getVersion(ctx, versionId);\n\tif (!version || version.definitionId !== record.guid) return null;\n\treturn version;\n}\n//#endregion\nexport { loadVisibleDefinition as a, resolveAccessibleProjects as c, listVisibleDefinitions as i, getVisibleDefinition as n, loadVisibleVersion as o, listEditableDefinitionsByDocument as r, mayUploadToDefinition as s, canCreateDefinitionInOrg as t };\n"],"names":[],"mappings":";;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,UAAU,GAAG,GAAG;AACpB;AACA;AACA;AACA;AACA;AACA,eAAe,yBAAyB,CAAC,GAAG,EAAE,IAAI,EAAE;AACpD,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI;AACvB,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ;AACnC,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB;AAC9C,CAAC,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAC7I,CAAC,MAAM,WAAW,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,YAAY,CAAC,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;AAChK,CAAC,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC,MAAM,kBAAkB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AACnG,CAAC,MAAM,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AACpF,EAAE,IAAI,CAAC,gBAAgB,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC;AAC3D,EAAE,YAAY,CAAC,oBAAoB,CAAC,cAAc,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC;AAC3E,EAAE,kBAAkB,CAAC,MAAM,GAAG,UAAU,CAAC,cAAc,CAAC,cAAc,EAAE,kBAAkB,CAAC,GAAG,OAAO,CAAC,OAAO,iBAAiB,IAAI,GAAG,EAAE;AACvI,EAAE,CAAC;AACH,CAAC,OAAO;AACR,EAAE,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,8BAA8B,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE;AAC3G,GAAG,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,IAAI;AACpD,GAAG,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI;AACzD,GAAG,cAAc,EAAE,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI;AACxD,GAAG,CAAC,CAAC,CAAC;AACN,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACrD,EAAE,iBAAiB;AACnB,EAAE,gBAAgB;AAClB,EAAE;AACF,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,wBAAwB,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE;AAC1D,CAAC,IAAI,MAAM;AACX,CAAC,GAAG;AACJ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE;AACvE,GAAG,KAAK,EAAE,UAAU;AACpB,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AAC5F,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AAC1D,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC;AAClE,GAAG,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC;AAC9F,GAAG,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,cAAc,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,OAAO,iBAAiB,IAAI,GAAG,EAAE;AAC1I,GAAG,CAAC;AACJ,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,mBAAmB,CAAC,8BAA8B,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE;AAC9G,GAAG,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,IAAI;AAC1C,GAAG,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI;AAC3C,GAAG,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI;AAC7C,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI;AACnB,EAAE,MAAM,GAAG,IAAI,CAAC,UAAU;AAC1B,CAAC,CAAC,QAAQ,MAAM;AAChB,CAAC,OAAO,KAAK;AACb;AACA;AACA;AACA;AACA;AACA,eAAe,sBAAsB,CAAC,GAAG,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE;AAC5D,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI;AACxC,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,yBAAyB,CAAC,GAAG,EAAE,IAAI,CAAC;AAChE,CAAC,MAAM,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,GAAG,QAAQ;AACjF,CAAC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE;AAClD,EAAE,GAAG,QAAQ;AACb,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE;AACpC,EAAE,CAAC;AACH,CAAC,OAAO;AACR,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK;AACnB,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU;AAC7B,EAAE,QAAQ,EAAE;AACZ,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,iCAAiC,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE;AAC9E,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI;AACxC,CAAC,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,GAAG,EAAE,IAAI,CAAC;AACvD,CAAC,MAAM,OAAO,GAAG,CAAC,OAAO,MAAM;AAC/B,EAAE,MAAM,EAAE,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,IAAI;AACvD,EAAE,SAAS,EAAE,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI;AAC5D,EAAE,cAAc,EAAE,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI;AAC3D,EAAE,CAAC;AACH,CAAC,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS,KAAK,mBAAmB,CAAC,8BAA8B,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvK,CAAC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE;AAClD,EAAE,GAAG,QAAQ;AACb,EAAE,gBAAgB,EAAE,UAAU;AAC9B,EAAE,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE;AACxC,EAAE,CAAC;AACH,CAAC,OAAO;AACR,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK;AACvC,GAAG,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;AACpD,GAAG,OAAO,OAAO,GAAG,qBAAqB,CAAC,GAAG,EAAE;AAC/C,IAAI,MAAM;AACV,IAAI,OAAO;AACX,IAAI,GAAG,OAAO,CAAC,OAAO;AACtB,IAAI,EAAE,IAAI,CAAC,GAAG,KAAK;AACnB,EAAE,CAAC,CAAC;AACJ,EAAE,UAAU,EAAE,IAAI,CAAC;AACnB,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE;AACrD,CAAC,OAAO,CAAC,MAAM,qBAAqB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,IAAI,IAAI;AACtE;AACA;AACA,eAAe,qBAAqB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE;AACtD,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc;AACjC,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ;AACnC,CAAC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC;AACzC,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI;AACzB,CAAC,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC;AAChF,CAAC,IAAI,CAAC,OAAO,IAAI,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,IAAI;AACjE,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AAChE,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC;AACzE,EAAE,YAAY,CAAC,oBAAoB,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC;AAC7E,EAAE,OAAO,CAAC,UAAU,KAAK,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE;AAC/H,EAAE,CAAC;AACH,CAAC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,IAAI;AACtD,CAAC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI;AACxD,CAAC,OAAO,OAAO,CAAC,8BAA8B,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE;AACvE,EAAE,MAAM;AACR,EAAE,SAAS;AACX,EAAE,cAAc,EAAE;AAClB,EAAE,CAAC,CAAC,GAAG;AACP,EAAE,MAAM;AACR,EAAE,OAAO;AACT,EAAE,MAAM;AACR,EAAE;AACF,EAAE,GAAG,IAAI;AACT;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,qBAAqB,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE;AAClF,CAAC,OAAO,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE;AACnC,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI;AAC3B,EAAE,SAAS,EAAE,OAAO,CAAC;AACrB,EAAE,CAAC,IAAI,iBAAiB,CAAC;AACzB,EAAE,OAAO;AACT,EAAE,UAAU,EAAE,MAAM;AACpB,EAAE,MAAM;AACR,EAAE,SAAS;AACX,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM;AACpB,EAAE,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;AAC9C,EAAE,sBAAsB,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B;AAC9D,EAAE,CAAC;AACH;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;AAC9D,CAAC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC;AAC3D,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI;AACzB,CAAC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC;AACrE,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI;AAClE,CAAC,OAAO,OAAO;AACf;;;;"}

package/build/server/chunks/entries/endpoints/.well-known/oauth-authorization-server/_server.ts.js-C1X6t8ot.js

@@ -0,0 +1,18 @@
+import { d as authorizationServerMetadata } from '../../../../chunks/oauth.js-B1zKax7l.js';
+import { D as DISCOVERY_HEADERS } from '../../../../chunks/server2.js-DE3gOwQ9.js';
+import { json } from '@sveltejs/kit';
+import 'node:crypto';
+import '../../../../chunks/shared-server.js-BGs15m2r.js';
+import '../../../../chunks/compute.js-Bb_Yprms.js';
+import '../../../../chunks/src.js-CkFJvvTE.js';
+import 'zod';
+import '../../../../chunks/access.js-BataxwA1.js';
+import 'node:dns/promises';
+import 'node:net';
+import '../../../../chunks/rate-limit.js-Br3luBbc.js';
+
+//#region src/routes/.well-known/oauth-authorization-server/+server.ts
+var GET = ({ url }) => json(authorizationServerMetadata(url.origin), { headers: DISCOVERY_HEADERS });
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-C1X6t8ot.js.map

package/build/server/chunks/entries/endpoints/.well-known/oauth-authorization-server/_server.ts.js-C1X6t8ot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-C1X6t8ot.js","sources":["../../../../../../../.svelte-kit/output/server/entries/endpoints/.well-known/oauth-authorization-server/_server.ts.js"],"sourcesContent":["import { i as authorizationServerMetadata } from \"../../../../chunks/oauth.js\";\nimport { t as DISCOVERY_HEADERS } from \"../../../../chunks/server2.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/.well-known/oauth-authorization-server/+server.ts\nvar GET = ({ url }) => json(authorizationServerMetadata(url.origin), { headers: DISCOVERY_HEADERS });\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;AAGA;AACG,IAAC,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE;;;;"}

package/build/server/chunks/entries/endpoints/.well-known/oauth-protected-resource/_server.ts.js-Cbe4qitt.js

@@ -0,0 +1,18 @@
+import { p as protectedResourceMetadata } from '../../../../chunks/oauth.js-B1zKax7l.js';
+import { D as DISCOVERY_HEADERS } from '../../../../chunks/server2.js-DE3gOwQ9.js';
+import { json } from '@sveltejs/kit';
+import 'node:crypto';
+import '../../../../chunks/shared-server.js-BGs15m2r.js';
+import '../../../../chunks/compute.js-Bb_Yprms.js';
+import '../../../../chunks/src.js-CkFJvvTE.js';
+import 'zod';
+import '../../../../chunks/access.js-BataxwA1.js';
+import 'node:dns/promises';
+import 'node:net';
+import '../../../../chunks/rate-limit.js-Br3luBbc.js';
+
+//#region src/routes/.well-known/oauth-protected-resource/+server.ts
+var GET = ({ url }) => json(protectedResourceMetadata(url.origin), { headers: DISCOVERY_HEADERS });
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-Cbe4qitt.js.map

package/build/server/chunks/entries/endpoints/.well-known/oauth-protected-resource/_server.ts.js-Cbe4qitt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-Cbe4qitt.js","sources":["../../../../../../../.svelte-kit/output/server/entries/endpoints/.well-known/oauth-protected-resource/_server.ts.js"],"sourcesContent":["import { c as protectedResourceMetadata } from \"../../../../chunks/oauth.js\";\nimport { t as DISCOVERY_HEADERS } from \"../../../../chunks/server2.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/.well-known/oauth-protected-resource/+server.ts\nvar GET = ({ url }) => json(protectedResourceMetadata(url.origin), { headers: DISCOVERY_HEADERS });\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;AAGA;AACG,IAAC,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE;;;;"}

package/build/server/chunks/entries/endpoints/.well-known/oauth-protected-resource/mcp/_server.ts.js-8Hfr_EjJ.js

@@ -0,0 +1,18 @@
+import { p as protectedResourceMetadata } from '../../../../../chunks/oauth.js-B1zKax7l.js';
+import { D as DISCOVERY_HEADERS } from '../../../../../chunks/server2.js-DE3gOwQ9.js';
+import { json } from '@sveltejs/kit';
+import 'node:crypto';
+import '../../../../../chunks/shared-server.js-BGs15m2r.js';
+import '../../../../../chunks/compute.js-Bb_Yprms.js';
+import '../../../../../chunks/src.js-CkFJvvTE.js';
+import 'zod';
+import '../../../../../chunks/access.js-BataxwA1.js';
+import 'node:dns/promises';
+import 'node:net';
+import '../../../../../chunks/rate-limit.js-Br3luBbc.js';
+
+//#region src/routes/.well-known/oauth-protected-resource/mcp/+server.ts
+var GET = ({ url }) => json(protectedResourceMetadata(url.origin), { headers: DISCOVERY_HEADERS });
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-8Hfr_EjJ.js.map

package/build/server/chunks/entries/endpoints/.well-known/oauth-protected-resource/mcp/_server.ts.js-8Hfr_EjJ.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-8Hfr_EjJ.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/.well-known/oauth-protected-resource/mcp/_server.ts.js"],"sourcesContent":["import { c as protectedResourceMetadata } from \"../../../../../chunks/oauth.js\";\nimport { t as DISCOVERY_HEADERS } from \"../../../../../chunks/server2.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/.well-known/oauth-protected-resource/mcp/+server.ts\nvar GET = ({ url }) => json(protectedResourceMetadata(url.origin), { headers: DISCOVERY_HEADERS });\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;AAGA;AACG,IAAC,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/compute/_server.ts.js-CmJRiko2.js

@@ -0,0 +1,99 @@
+import '../../../../../chunks/src.js-CkFJvvTE.js';
+import { v as getComputeServerConfigStore } from '../../../../../chunks/providers.server.js-CzinZrUx.js';
+import { r as renderThrown } from '../../../../../chunks/definitions.js-NVX3pi7y.js';
+import { p as platformServers, v as validateIncomingServers, d as storedKeysById, e as resolveApiKey } from '../../../../../chunks/compute.js-Bb_Yprms.js';
+import { R as requireManageCompute, A as ApiErrorCode } from '../../../../../chunks/access.js-BataxwA1.js';
+import { e as evictChangedServers$1 } from '../../../../../chunks/evict-changed-servers.js-whgDVM5R.js';
+import { a as apiError } from '../../../../../chunks/api-errors.js-Byluujl8.js';
+import '../../../../../chunks/api.js-BvSDWhma.js';
+import { json } from '@sveltejs/kit';
+import { e as evictComputeClient } from '../../../../../chunks/engine.server.js-DlfvB835.js';
+import 'zod';
+import '../../../../../chunks/shared-server.js-BGs15m2r.js';
+import '../../../../../chunks/schema-extraction.js-DkKllia4.js';
+import '../../../../../chunks/grasshopper.js-julMp0aw.js';
+import '../../../../../chunks/schema.js-7vN0UnrG.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'node:dns/promises';
+import 'node:net';
+import '../../../../../chunks/rate-limit.js-Br3luBbc.js';
+import '../../../../../chunks/computeLimits.js-sJYSzVht.js';
+import 'node:zlib';
+import 'node:util';
+
+//#region src/lib/server/compute/evictChangedServers.ts
+/**
+* This app's binding for the shared eviction diff.
+*
+* The diff moved to `@selvajs/server/compute`, which takes the eviction sink as
+* a parameter so it names no cache. Here the sink is the solve engine's warm
+* client cache, which is what makes this file app-specific.
+*/
+function evictChangedServers(prev, next) {
+	evictChangedServers$1(prev, next, evictComputeClient);
+}
+//#endregion
+//#region src/routes/api/admin/compute/+server.ts
+var GET = async ({ locals }) => {
+	requireManageCompute(locals);
+	try {
+		const config = await getComputeServerConfigStore().getConfig(locals.ctx);
+		const servers = platformServers(config).map(({ apiKey: _apiKey, hasApiKey, ...rest }) => ({
+			...rest,
+			hasApiKey: !!hasApiKey
+		}));
+		return json({
+			servers,
+			defaultServerId: config.defaultServerId
+		});
+	} catch (err) {
+		locals.log.error("Failed to load compute config", {
+			component: "Compute GET",
+			err: renderThrown(err)
+		});
+		apiError(500, ApiErrorCode.INTERNAL, "Failed to load compute config");
+	}
+};
+var PUT = async ({ request, locals }) => {
+	requireManageCompute(locals);
+	const body = await request.json().catch(() => null);
+	if (!body || typeof body !== "object") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid request body");
+	const incoming = body;
+	if (!Array.isArray(incoming.servers)) apiError(400, ApiErrorCode.VALIDATION_FAILED, "servers must be an array");
+	validateIncomingServers(incoming.servers);
+	for (const s of incoming.servers) {
+		if (s.sharedWith !== "all" && !Array.isArray(s.sharedWith)) apiError(400, ApiErrorCode.VALIDATION_FAILED, "sharedWith must be \"all\" or an array of org ids");
+		if (Array.isArray(s.sharedWith) && s.sharedWith.some((x) => typeof x !== "string")) apiError(400, ApiErrorCode.VALIDATION_FAILED, "sharedWith array must contain strings");
+	}
+	if (incoming.defaultServerId) {
+		if (!incoming.servers.find((s) => s.id === incoming.defaultServerId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, "defaultServerId must reference one of the submitted servers");
+	}
+	try {
+		const provider = getComputeServerConfigStore();
+		const existing = await provider.getConfig(locals.ctx, { includeApiKeys: true });
+		const storedKeys = storedKeysById(platformServers(existing));
+		const next = incoming.servers.map(({ apiKey, sharedWith, ...rest }) => ({
+			...rest,
+			scope: "platform",
+			sharedWith: sharedWith === "all" ? "all" : [...sharedWith],
+			apiKey: resolveApiKey(apiKey, storedKeys.get(rest.id))
+		}));
+		await provider.savePlatformServers(locals.ctx, next, incoming.defaultServerId);
+		evictChangedServers(platformServers(existing), next);
+		return new Response(null, { status: 204 });
+	} catch (err) {
+		locals.log.error("Failed to save compute config", {
+			component: "Compute PUT",
+			err: renderThrown(err)
+		});
+		apiError(500, ApiErrorCode.INTERNAL, "Failed to save compute config");
+	}
+};
+
+export { GET, PUT };
+//# sourceMappingURL=_server.ts.js-CmJRiko2.js.map

package/build/server/chunks/entries/endpoints/api/admin/compute/_server.ts.js-CmJRiko2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CmJRiko2.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/compute/_server.ts.js"],"sourcesContent":["import \"../../../../../chunks/src.js\";\nimport { a as getComputeServerConfigStore } from \"../../../../../chunks/providers.server.js\";\nimport { a as renderThrown } from \"../../../../../chunks/definitions.js\";\nimport { n as storedKeysById, r as validateIncomingServers, t as resolveApiKey, u as platformServers } from \"../../../../../chunks/compute.js\";\nimport { O as ApiErrorCode, y as requireManageCompute } from \"../../../../../chunks/access.js\";\nimport { t as evictChangedServers$1 } from \"../../../../../chunks/evict-changed-servers.js\";\nimport { t as apiError } from \"../../../../../chunks/api-errors.js\";\nimport \"../../../../../chunks/access2.server.js\";\nimport { o as evictComputeClient } from \"../../../../../chunks/engine.server.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/lib/server/compute/evictChangedServers.ts\n/**\n* This app's binding for the shared eviction diff.\n*\n* The diff moved to `@selvajs/server/compute`, which takes the eviction sink as\n* a parameter so it names no cache. Here the sink is the solve engine's warm\n* client cache, which is what makes this file app-specific.\n*/\nfunction evictChangedServers(prev, next) {\n\tevictChangedServers$1(prev, next, evictComputeClient);\n}\n//#endregion\n//#region src/routes/api/admin/compute/+server.ts\nvar GET = async ({ locals }) => {\n\trequireManageCompute(locals);\n\ttry {\n\t\tconst config = await getComputeServerConfigStore().getConfig(locals.ctx);\n\t\tconst servers = platformServers(config).map(({ apiKey: _apiKey, hasApiKey, ...rest }) => ({\n\t\t\t...rest,\n\t\t\thasApiKey: !!hasApiKey\n\t\t}));\n\t\treturn json({\n\t\t\tservers,\n\t\t\tdefaultServerId: config.defaultServerId\n\t\t});\n\t} catch (err) {\n\t\tlocals.log.error(\"Failed to load compute config\", {\n\t\t\tcomponent: \"Compute GET\",\n\t\t\terr: renderThrown(err)\n\t\t});\n\t\tapiError(500, ApiErrorCode.INTERNAL, \"Failed to load compute config\");\n\t}\n};\nvar PUT = async ({ request, locals }) => {\n\trequireManageCompute(locals);\n\tconst body = await request.json().catch(() => null);\n\tif (!body || typeof body !== \"object\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid request body\");\n\tconst incoming = body;\n\tif (!Array.isArray(incoming.servers)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"servers must be an array\");\n\tvalidateIncomingServers(incoming.servers);\n\tfor (const s of incoming.servers) {\n\t\tif (s.sharedWith !== \"all\" && !Array.isArray(s.sharedWith)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"sharedWith must be \\\"all\\\" or an array of org ids\");\n\t\tif (Array.isArray(s.sharedWith) && s.sharedWith.some((x) => typeof x !== \"string\")) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"sharedWith array must contain strings\");\n\t}\n\tif (incoming.defaultServerId) {\n\t\tif (!incoming.servers.find((s) => s.id === incoming.defaultServerId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"defaultServerId must reference one of the submitted servers\");\n\t}\n\ttry {\n\t\tconst provider = getComputeServerConfigStore();\n\t\tconst existing = await provider.getConfig(locals.ctx, { includeApiKeys: true });\n\t\tconst storedKeys = storedKeysById(platformServers(existing));\n\t\tconst next = incoming.servers.map(({ apiKey, sharedWith, ...rest }) => ({\n\t\t\t...rest,\n\t\t\tscope: \"platform\",\n\t\t\tsharedWith: sharedWith === \"all\" ? \"all\" : [...sharedWith],\n\t\t\tapiKey: resolveApiKey(apiKey, storedKeys.get(rest.id))\n\t\t}));\n\t\tawait provider.savePlatformServers(locals.ctx, next, incoming.defaultServerId);\n\t\tevictChangedServers(platformServers(existing), next);\n\t\treturn new Response(null, { status: 204 });\n\t} catch (err) {\n\t\tlocals.log.error(\"Failed to save compute config\", {\n\t\t\tcomponent: \"Compute PUT\",\n\t\t\terr: renderThrown(err)\n\t\t});\n\t\tapiError(500, ApiErrorCode.INTERNAL, \"Failed to save compute config\");\n\t}\n};\n//#endregion\nexport { GET, PUT };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAUA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE;AACzC,CAAC,qBAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,kBAAkB,CAAC;AACtD;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAChC,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,IAAI;AACL,EAAE,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;AAC1E,EAAE,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,MAAM;AAC5F,GAAG,GAAG,IAAI;AACV,GAAG,SAAS,EAAE,CAAC,CAAC;AAChB,GAAG,CAAC,CAAC;AACL,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,OAAO;AACV,GAAG,eAAe,EAAE,MAAM,CAAC;AAC3B,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,+BAA+B,EAAE;AACpD,GAAG,SAAS,EAAE,aAAa;AAC3B,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC;AACJ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,+BAA+B,CAAC;AACvE,CAAC;AACD;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACzC,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AAC7G,CAAC,MAAM,QAAQ,GAAG,IAAI;AACtB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;AAChH,CAAC,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC;AAC1C,CAAC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE;AACnC,EAAE,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,mDAAmD,CAAC;AAChK,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,uCAAuC,CAAC;AAC5K,CAAC;AACD,CAAC,IAAI,QAAQ,CAAC,eAAe,EAAE;AAC/B,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,6DAA6D,CAAC;AACpL,CAAC;AACD,CAAC,IAAI;AACL,EAAE,MAAM,QAAQ,GAAG,2BAA2B,EAAE;AAChD,EAAE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;AACjF,EAAE,MAAM,UAAU,GAAG,cAAc,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;AAC9D,EAAE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,MAAM;AAC1E,GAAG,GAAG,IAAI;AACV,GAAG,KAAK,EAAE,UAAU;AACpB,GAAG,UAAU,EAAE,UAAU,KAAK,KAAK,GAAG,KAAK,GAAG,CAAC,GAAG,UAAU,CAAC;AAC7D,GAAG,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;AACxD,GAAG,CAAC,CAAC;AACL,EAAE,MAAM,QAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC;AAChF,EAAE,mBAAmB,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;AACtD,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,+BAA+B,EAAE;AACpD,GAAG,SAAS,EAAE,aAAa;AAC3B,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC;AACJ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,+BAA+B,CAAC;AACvE,CAAC;AACD;;;;"}