@selvajs/selva 4.5.0 → 4.6.0-beta.0

package/build/server/chunks/_server.ts-Xt4gRfAl.js

@@ -0,0 +1,114 @@
+import { json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { a as getAuthProvider, k as getOrganizationProvider, l as getPermissionStore } from './providers.server-C3fQ7ZdV.js';
+import { w as requireManageInstanceUsers } from './access.server-Rd56k7vs.js';
+import { s as setUserPlatformPermissions } from './permissions.server-zs4XAJCp.js';
+import { a as apiError, t as throwZodError, A as ApiErrorCode, h as handleApiError } from './api-errors-BrqxD-El.js';
+import { S as SYSTEM_CONTEXT, j as hasPermission, M as MEMBER_ASSIGNABLE_PERMISSIONS, P as PlatformPermissionSchema, d as OrgPermissionSchema } from './context-BJnJL8ES.js';
+import { f as flattenPermissions, s as splitFlatPermissions } from './permissions-compat.server-G174xsh6.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@selvajs/compute/core';
+import './utils2-BqfluBM6.js';
+
+const FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);
+const BaseUserBody = z.object({
+  email: z.string().email("Valid email is required"),
+  permissions: z.array(FlatPermissionSchema)
+});
+const PasswordUserBody = BaseUserBody.extend({
+  password: z.string().min(8, "Password must be at least 8 characters").optional()
+});
+const GET = async ({ locals }) => {
+  requireManageInstanceUsers(locals);
+  const page = await getAuthProvider().listUsers({ limit: 200 });
+  if (page === null) {
+    apiError(
+      501,
+      ApiErrorCode.INTERNAL,
+      "User management is not supported by the current auth provider. Configure DATA_PATH (local provider) or check your provider wiring."
+    );
+  }
+  const orgId = locals.ctx?.actingOrgId;
+  const orgs = getOrganizationProvider();
+  const userIds = page.items.map((u) => u.id);
+  const platformByUser = await getPermissionStore().getForBatch(locals.ctx, userIds);
+  const flattened = await Promise.all(
+    page.items.map(async (u) => {
+      let orgPerms = [];
+      if (orgId) {
+        const member = await orgs.getOrgMember(SYSTEM_CONTEXT, orgId, u.id);
+        orgPerms = member?.permissions ?? [];
+      }
+      const platformPerms = platformByUser.get(u.id) ?? [];
+      return {
+        ...u,
+        platformPermissions: platformPerms,
+        permissions: flattenPermissions(
+          platformPerms,
+          orgPerms
+        )
+      };
+    })
+  );
+  return json({ users: flattened });
+};
+const POST = async ({ request, locals }) => {
+  requireManageInstanceUsers(locals);
+  const auth = getAuthProvider();
+  const body = await request.json().catch(() => null);
+  const parsed = PasswordUserBody.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  const { email, password, permissions } = parsed.data;
+  const { platform, org } = splitFlatPermissions(permissions);
+  if (platform.length > 0 && !hasPermission(locals.ctx, "instance_admin")) {
+    apiError(
+      403,
+      ApiErrorCode.FORBIDDEN,
+      "Only a platform admin can grant platform-scope permissions"
+    );
+  }
+  try {
+    let user;
+    if (auth.passwordAuth) {
+      if (!password) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Password is required");
+      user = await auth.passwordAuth.createUserWithPassword(email, password);
+    } else if (auth.createUser) {
+      user = await auth.createUser(email);
+    } else {
+      apiError(
+        501,
+        ApiErrorCode.INTERNAL,
+        `User creation is not supported by ${auth.name}. Users are managed externally.`
+      );
+    }
+    if (platform.length > 0) {
+      await setUserPlatformPermissions(locals.ctx, user.id, platform);
+    }
+    const orgId = locals.ctx?.actingOrgId;
+    if (orgId) {
+      const joinedAt = (/* @__PURE__ */ new Date()).toISOString();
+      await getOrganizationProvider().addOrgMember(SYSTEM_CONTEXT, {
+        orgId,
+        userId: user.id,
+        role: "member",
+        permissions: org.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)),
+        joinedAt,
+        updatedAt: joinedAt,
+        updatedBy: locals.user?.id ?? user.id,
+        deletedAt: null
+      });
+    }
+    return json(user, { status: 201 });
+  } catch (err) {
+    handleApiError(err, "Failed to create user");
+  }
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts-Xt4gRfAl.js.map

package/build/server/chunks/_server.ts-Xt4gRfAl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-Xt4gRfAl.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/users/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { a as getAuthProvider, k as getOrganizationProvider, l as getPermissionStore } from \"../../../../../chunks/providers.server.js\";\nimport { w as requireManageInstanceUsers } from \"../../../../../chunks/access.server.js\";\nimport { s as setUserPlatformPermissions } from \"../../../../../chunks/permissions.server.js\";\nimport { a as apiError, t as throwZodError, A as ApiErrorCode, h as handleApiError } from \"../../../../../chunks/api-errors.js\";\nimport { P as PlatformPermissionSchema, d as OrgPermissionSchema, S as SYSTEM_CONTEXT, j as hasPermission, M as MEMBER_ASSIGNABLE_PERMISSIONS } from \"../../../../../chunks/context.js\";\nimport { f as flattenPermissions, s as splitFlatPermissions } from \"../../../../../chunks/permissions-compat.server.js\";\nconst FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);\nconst BaseUserBody = z.object({\n  email: z.string().email(\"Valid email is required\"),\n  permissions: z.array(FlatPermissionSchema)\n});\nconst PasswordUserBody = BaseUserBody.extend({\n  password: z.string().min(8, \"Password must be at least 8 characters\").optional()\n});\nconst GET = async ({ locals }) => {\n  requireManageInstanceUsers(locals);\n  const page = await getAuthProvider().listUsers({ limit: 200 });\n  if (page === null) {\n    apiError(\n      501,\n      ApiErrorCode.INTERNAL,\n      \"User management is not supported by the current auth provider. Configure DATA_PATH (local provider) or check your provider wiring.\"\n    );\n  }\n  const orgId = locals.ctx?.actingOrgId;\n  const orgs = getOrganizationProvider();\n  const userIds = page.items.map((u) => u.id);\n  const platformByUser = await getPermissionStore().getForBatch(locals.ctx, userIds);\n  const flattened = await Promise.all(\n    page.items.map(async (u) => {\n      let orgPerms = [];\n      if (orgId) {\n        const member = await orgs.getOrgMember(SYSTEM_CONTEXT, orgId, u.id);\n        orgPerms = member?.permissions ?? [];\n      }\n      const platformPerms = platformByUser.get(u.id) ?? [];\n      return {\n        ...u,\n        platformPermissions: platformPerms,\n        permissions: flattenPermissions(\n          platformPerms,\n          orgPerms\n        )\n      };\n    })\n  );\n  return json({ users: flattened });\n};\nconst POST = async ({ request, locals }) => {\n  requireManageInstanceUsers(locals);\n  const auth = getAuthProvider();\n  const body = await request.json().catch(() => null);\n  const parsed = PasswordUserBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const { email, password, permissions } = parsed.data;\n  const { platform, org } = splitFlatPermissions(permissions);\n  if (platform.length > 0 && !hasPermission(locals.ctx, \"instance_admin\")) {\n    apiError(\n      403,\n      ApiErrorCode.FORBIDDEN,\n      \"Only a platform admin can grant platform-scope permissions\"\n    );\n  }\n  try {\n    let user;\n    if (auth.passwordAuth) {\n      if (!password) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Password is required\");\n      user = await auth.passwordAuth.createUserWithPassword(email, password);\n    } else if (auth.createUser) {\n      user = await auth.createUser(email);\n    } else {\n      apiError(\n        501,\n        ApiErrorCode.INTERNAL,\n        `User creation is not supported by ${auth.name}. Users are managed externally.`\n      );\n    }\n    if (platform.length > 0) {\n      await setUserPlatformPermissions(locals.ctx, user.id, platform);\n    }\n    const orgId = locals.ctx?.actingOrgId;\n    if (orgId) {\n      const joinedAt = (/* @__PURE__ */ new Date()).toISOString();\n      await getOrganizationProvider().addOrgMember(SYSTEM_CONTEXT, {\n        orgId,\n        userId: user.id,\n        role: \"member\",\n        permissions: org.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)),\n        joinedAt,\n        updatedAt: joinedAt,\n        updatedBy: locals.user?.id ?? user.id,\n        deletedAt: null\n      });\n    }\n    return json(user, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to create user\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAQA,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;AACrF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;AAC9B,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC;AACpD,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB;AAC3C,CAAC,CAAC;AACF,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC;AAC7C,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wCAAwC,CAAC,CAAC,QAAQ;AAChF,CAAC,CAAC;AACG,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,0BAA0B,CAAC,MAAM,CAAC;AACpC,EAAE,MAAM,IAAI,GAAG,MAAM,eAAe,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAChE,EAAE,IAAI,IAAI,KAAK,IAAI,EAAE;AACrB,IAAI,QAAQ;AACZ,MAAM,GAAG;AACT,MAAM,YAAY,CAAC,QAAQ;AAC3B,MAAM;AACN,KAAK;AACL,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,WAAW;AACvC,EAAE,MAAM,IAAI,GAAG,uBAAuB,EAAE;AACxC,EAAE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AAC7C,EAAE,MAAM,cAAc,GAAG,MAAM,kBAAkB,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC;AACpF,EAAE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG;AACrC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK;AAChC,MAAM,IAAI,QAAQ,GAAG,EAAE;AACvB,MAAM,IAAI,KAAK,EAAE;AACjB,QAAQ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;AAC3E,QAAQ,QAAQ,GAAG,MAAM,EAAE,WAAW,IAAI,EAAE;AAC5C,MAAM;AACN,MAAM,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE;AAC1D,MAAM,OAAO;AACb,QAAQ,GAAG,CAAC;AACZ,QAAQ,mBAAmB,EAAE,aAAa;AAC1C,QAAQ,WAAW,EAAE,kBAAkB;AACvC,UAAU,aAAa;AACvB,UAAU;AACV;AACA,OAAO;AACP,IAAI,CAAC;AACL,GAAG;AACH,EAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACnC;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,0BAA0B,CAAC,MAAM,CAAC;AACpC,EAAE,MAAM,IAAI,GAAG,eAAe,EAAE;AAChC,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC;AACjD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,IAAI;AACtD,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,oBAAoB,CAAC,WAAW,CAAC;AAC7D,EAAE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE;AAC3E,IAAI,QAAQ;AACZ,MAAM,GAAG;AACT,MAAM,YAAY,CAAC,SAAS;AAC5B,MAAM;AACN,KAAK;AACL,EAAE;AACF,EAAE,IAAI;AACN,IAAI,IAAI,IAAI;AACZ,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE;AAC3B,MAAM,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AAC1F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC;AAC5E,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE;AAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;AACzC,IAAI,CAAC,MAAM;AACX,MAAM,QAAQ;AACd,QAAQ,GAAG;AACX,QAAQ,YAAY,CAAC,QAAQ;AAC7B,QAAQ,CAAC,kCAAkC,EAAE,IAAI,CAAC,IAAI,CAAC,+BAA+B;AACtF,OAAO;AACP,IAAI;AACJ,IAAI,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE;AAC7B,MAAM,MAAM,0BAA0B,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC;AACrE,IAAI;AACJ,IAAI,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,WAAW;AACzC,IAAI,IAAI,KAAK,EAAE;AACf,MAAM,MAAM,QAAQ,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACjE,MAAM,MAAM,uBAAuB,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE;AACnE,QAAQ,KAAK;AACb,QAAQ,MAAM,EAAE,IAAI,CAAC,EAAE;AACvB,QAAQ,IAAI,EAAE,QAAQ;AACtB,QAAQ,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACjF,QAAQ,QAAQ;AAChB,QAAQ,SAAS,EAAE,QAAQ;AAC3B,QAAQ,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE;AAC7C,QAAQ,SAAS,EAAE;AACnB,OAAO,CAAC;AACR,IAAI;AACJ,IAAI,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACtC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,uBAAuB,CAAC;AAChD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-ZtjukIa0.js

@@ -0,0 +1,86 @@
+import { z } from 'zod';
+import { M as MEMBER_ASSIGNABLE_PERMISSIONS, A as ALL_ORG_PERMISSIONS, e as OrgRoleSchema } from './context-BJnJL8ES.js';
+import { k as getOrganizationProvider } from './providers.server-C3fQ7ZdV.js';
+import { y as requireManageOrgMembers } from './access.server-Rd56k7vs.js';
+import { a as apiError, t as throwZodError, A as ApiErrorCode, h as handleApiError } from './api-errors-BrqxD-El.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '@selvajs/compute/core';
+import './utils2-BqfluBM6.js';
+
+const PERMISSIONS_SCHEMA = z.array(
+  z.enum(ALL_ORG_PERMISSIONS)
+);
+const PatchSchema = z.object({
+  role: OrgRoleSchema.optional(),
+  permissions: PERMISSIONS_SCHEMA.optional()
+}).refine((b) => b.role !== void 0 || b.permissions !== void 0, {
+  message: "Provide at least one of role, permissions"
+});
+const PATCH = async ({ params, request, locals }) => {
+  const { orgId, userId } = params;
+  if (!orgId || !userId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing org ID or user ID");
+  requireManageOrgMembers(locals);
+  const ctx = locals.ctx;
+  if (ctx.actingOrgId !== orgId) {
+    apiError(403, ApiErrorCode.FORBIDDEN, "Acting org does not match the target org.");
+  }
+  const body = await request.json().catch(() => null);
+  const parsed = PatchSchema.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  const patch = parsed.data;
+  const orgs = getOrganizationProvider();
+  const [actorMember, target] = await Promise.all([
+    orgs.getOrgMember(ctx, orgId, ctx.userId),
+    orgs.getOrgMember(ctx, orgId, userId)
+  ]);
+  if (!target) apiError(404, ApiErrorCode.NOT_FOUND, "Member not found in this organization.");
+  if (!actorMember)
+    apiError(403, ApiErrorCode.FORBIDDEN, "You are not a member of this organization.");
+  if (patch.role !== void 0 && patch.role !== target.role) {
+    if (actorMember.role !== "owner") {
+      apiError(403, ApiErrorCode.FORBIDDEN, "Only the org owner can change roles.");
+    }
+    if (target.role === "owner" && patch.role !== "owner") {
+      const page = await orgs.listOrgMembers(ctx, orgId, { limit: 200 });
+      const otherOwners = page.items.filter(
+        (m) => m.role === "owner" && m.userId !== target.userId && !m.deletedAt
+      );
+      if (otherOwners.length === 0) {
+        apiError(
+          409,
+          ApiErrorCode.CONFLICT,
+          "Cannot demote the sole owner of this organization. Promote another member to owner first."
+        );
+      }
+    }
+    await orgs.updateOrgMemberRole(ctx, orgId, userId, patch.role);
+  }
+  if (patch.permissions !== void 0) {
+    const effectiveRole = patch.role ?? target.role;
+    const valid = effectiveRole === "member" ? new Set(MEMBER_ASSIGNABLE_PERMISSIONS) : new Set(ALL_ORG_PERMISSIONS);
+    const invalid = patch.permissions.filter((p) => !valid.has(p));
+    if (invalid.length > 0) {
+      apiError(
+        400,
+        ApiErrorCode.VALIDATION_FAILED,
+        `Permissions [${invalid.join(", ")}] cannot be assigned to a ${effectiveRole}.`
+      );
+    }
+    try {
+      await orgs.updateOrgMemberPermissions(ctx, orgId, userId, patch.permissions);
+    } catch (err) {
+      handleApiError(err, "Failed to update permissions");
+    }
+  }
+  return new Response(null, { status: 204 });
+};
+
+export { PATCH };
+//# sourceMappingURL=_server.ts-ZtjukIa0.js.map

package/build/server/chunks/_server.ts-ZtjukIa0.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-ZtjukIa0.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/orgs/_orgId_/members/_userId_/_server.ts.js"],"sourcesContent":["import { z } from \"zod\";\nimport { A as ALL_ORG_PERMISSIONS, e as OrgRoleSchema, M as MEMBER_ASSIGNABLE_PERMISSIONS } from \"../../../../../../../chunks/context.js\";\nimport { k as getOrganizationProvider } from \"../../../../../../../chunks/providers.server.js\";\nimport { y as requireManageOrgMembers } from \"../../../../../../../chunks/access.server.js\";\nimport { a as apiError, t as throwZodError, A as ApiErrorCode, h as handleApiError } from \"../../../../../../../chunks/api-errors.js\";\nconst PERMISSIONS_SCHEMA = z.array(\n  z.enum(ALL_ORG_PERMISSIONS)\n);\nconst PatchSchema = z.object({\n  role: OrgRoleSchema.optional(),\n  permissions: PERMISSIONS_SCHEMA.optional()\n}).refine((b) => b.role !== void 0 || b.permissions !== void 0, {\n  message: \"Provide at least one of role, permissions\"\n});\nconst PATCH = async ({ params, request, locals }) => {\n  const { orgId, userId } = params;\n  if (!orgId || !userId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing org ID or user ID\");\n  requireManageOrgMembers(locals);\n  const ctx = locals.ctx;\n  if (ctx.actingOrgId !== orgId) {\n    apiError(403, ApiErrorCode.FORBIDDEN, \"Acting org does not match the target org.\");\n  }\n  const body = await request.json().catch(() => null);\n  const parsed = PatchSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const patch = parsed.data;\n  const orgs = getOrganizationProvider();\n  const [actorMember, target] = await Promise.all([\n    orgs.getOrgMember(ctx, orgId, ctx.userId),\n    orgs.getOrgMember(ctx, orgId, userId)\n  ]);\n  if (!target) apiError(404, ApiErrorCode.NOT_FOUND, \"Member not found in this organization.\");\n  if (!actorMember)\n    apiError(403, ApiErrorCode.FORBIDDEN, \"You are not a member of this organization.\");\n  if (patch.role !== void 0 && patch.role !== target.role) {\n    if (actorMember.role !== \"owner\") {\n      apiError(403, ApiErrorCode.FORBIDDEN, \"Only the org owner can change roles.\");\n    }\n    if (target.role === \"owner\" && patch.role !== \"owner\") {\n      const page = await orgs.listOrgMembers(ctx, orgId, { limit: 200 });\n      const otherOwners = page.items.filter(\n        (m) => m.role === \"owner\" && m.userId !== target.userId && !m.deletedAt\n      );\n      if (otherOwners.length === 0) {\n        apiError(\n          409,\n          ApiErrorCode.CONFLICT,\n          \"Cannot demote the sole owner of this organization. Promote another member to owner first.\"\n        );\n      }\n    }\n    await orgs.updateOrgMemberRole(ctx, orgId, userId, patch.role);\n  }\n  if (patch.permissions !== void 0) {\n    const effectiveRole = patch.role ?? target.role;\n    const valid = effectiveRole === \"member\" ? new Set(MEMBER_ASSIGNABLE_PERMISSIONS) : new Set(ALL_ORG_PERMISSIONS);\n    const invalid = patch.permissions.filter((p) => !valid.has(p));\n    if (invalid.length > 0) {\n      apiError(\n        400,\n        ApiErrorCode.VALIDATION_FAILED,\n        `Permissions [${invalid.join(\", \")}] cannot be assigned to a ${effectiveRole}.`\n      );\n    }\n    try {\n      await orgs.updateOrgMemberPermissions(ctx, orgId, userId, patch.permissions);\n    } catch (err) {\n      handleApiError(err, \"Failed to update permissions\");\n    }\n  }\n  return new Response(null, { status: 204 });\n};\nexport {\n  PATCH\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAKA,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK;AAClC,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB;AAC5B,CAAC;AACD,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;AAC7B,EAAE,IAAI,EAAE,aAAa,CAAC,QAAQ,EAAE;AAChC,EAAE,WAAW,EAAE,kBAAkB,CAAC,QAAQ;AAC1C,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,EAAE;AAChE,EAAE,OAAO,EAAE;AACX,CAAC,CAAC;AACG,MAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrD,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM;AAClC,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;AACnG,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,GAAG,CAAC,WAAW,KAAK,KAAK,EAAE;AACjC,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,2CAA2C,CAAC;AACtF,EAAE;AACF,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC;AAC5C,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI;AAC3B,EAAE,MAAM,IAAI,GAAG,uBAAuB,EAAE;AACxC,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AAClD,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC;AAC7C,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM;AACxC,GAAG,CAAC;AACJ,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,wCAAwC,CAAC;AAC9F,EAAE,IAAI,CAAC,WAAW;AAClB,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,4CAA4C,CAAC;AACvF,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE;AAC3D,IAAI,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE;AACtC,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,sCAAsC,CAAC;AACnF,IAAI;AACJ,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE;AAC3D,MAAM,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACxE,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM;AAC3C,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;AACtE,OAAO;AACP,MAAM,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE;AACpC,QAAQ,QAAQ;AAChB,UAAU,GAAG;AACb,UAAU,YAAY,CAAC,QAAQ;AAC/B,UAAU;AACV,SAAS;AACT,MAAM;AACN,IAAI;AACJ,IAAI,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;AAClE,EAAE;AACF,EAAE,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,EAAE;AACpC,IAAI,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI;AACnD,IAAI,MAAM,KAAK,GAAG,aAAa,KAAK,QAAQ,GAAG,IAAI,GAAG,CAAC,6BAA6B,CAAC,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC;AACpH,IAAI,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAClE,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;AAC5B,MAAM,QAAQ;AACd,QAAQ,GAAG;AACX,QAAQ,YAAY,CAAC,iBAAiB;AACtC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,0BAA0B,EAAE,aAAa,CAAC,CAAC;AACtF,OAAO;AACP,IAAI;AACJ,IAAI,IAAI;AACR,MAAM,MAAM,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC;AAClF,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,cAAc,CAAC,GAAG,EAAE,8BAA8B,CAAC;AACzD,IAAI;AACJ,EAAE;AACF,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C;;;;"}

package/build/server/chunks/_server.ts-bR98vjY2.js

@@ -0,0 +1,47 @@
+import { json } from '@sveltejs/kit';
+import { a as apiError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
+import { c as getComputeServerConfigStore } from './providers.server-C3fQ7ZdV.js';
+import './context-BJnJL8ES.js';
+import { f as findServerById } from './utils2-BqfluBM6.js';
+import { v as requireManageCompute } from './access.server-Rd56k7vs.js';
+import { ComputeServerStats } from '@selvajs/compute/core';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'zod';
+
+const POST = async ({ request, locals }) => {
+  requireManageCompute(locals);
+  const body = await request.json().catch(() => null);
+  if (!body || typeof body !== "object")
+    apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid request body");
+  const { serverId, action } = body;
+  if (!serverId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "serverId required");
+  if (action !== "purge" && action !== "shutdown")
+    apiError(400, ApiErrorCode.VALIDATION_FAILED, "action must be 'purge' or 'shutdown'");
+  const config = await getComputeServerConfigStore().getConfig(locals.ctx);
+  const server = findServerById(config, serverId);
+  if (!server) apiError(404, ApiErrorCode.NOT_FOUND, "Server not found");
+  const stats = new ComputeServerStats(server.serverUrl, server.apiKey);
+  try {
+    if (action === "purge") {
+      const result2 = await stats.purgeAllChildren();
+      if (result2 === null)
+        apiError(502, ApiErrorCode.INTERNAL, "Could not reach the server to purge its cache");
+      return json({ action, ...result2 });
+    }
+    const result = await stats.shutdownChildren();
+    if (result === null)
+      apiError(502, ApiErrorCode.INTERNAL, "Could not reach the server to shut down its children");
+    return json({ action, ...result });
+  } finally {
+    await stats.dispose();
+  }
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-bR98vjY2.js.map

package/build/server/chunks/_server.ts-bR98vjY2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-bR98vjY2.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/compute/actions/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { a as apiError, A as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { c as getComputeServerConfigStore } from \"../../../../../../chunks/providers.server.js\";\nimport \"../../../../../../chunks/context.js\";\nimport { f as findServerById } from \"../../../../../../chunks/utils2.js\";\nimport { v as requireManageCompute } from \"../../../../../../chunks/access.server.js\";\nimport { ComputeServerStats } from \"@selvajs/compute/core\";\nconst POST = async ({ request, locals }) => {\n  requireManageCompute(locals);\n  const body = await request.json().catch(() => null);\n  if (!body || typeof body !== \"object\")\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid request body\");\n  const { serverId, action } = body;\n  if (!serverId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"serverId required\");\n  if (action !== \"purge\" && action !== \"shutdown\")\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, \"action must be 'purge' or 'shutdown'\");\n  const config = await getComputeServerConfigStore().getConfig(locals.ctx);\n  const server = findServerById(config, serverId);\n  if (!server) apiError(404, ApiErrorCode.NOT_FOUND, \"Server not found\");\n  const stats = new ComputeServerStats(server.serverUrl, server.apiKey);\n  try {\n    if (action === \"purge\") {\n      const result2 = await stats.purgeAllChildren();\n      if (result2 === null)\n        apiError(502, ApiErrorCode.INTERNAL, \"Could not reach the server to purge its cache\");\n      return json({ action, ...result2 });\n    }\n    const result = await stats.shutdownChildren();\n    if (result === null)\n      apiError(502, ApiErrorCode.INTERNAL, \"Could not reach the server to shut down its children\");\n    return json({ action, ...result });\n  } finally {\n    await stats.dispose();\n  }\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAOK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;AACvC,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AACzE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI;AACnC,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;AACnF,EAAE,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,UAAU;AACjD,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sCAAsC,CAAC;AACzF,EAAE,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;AAC1E,EAAE,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC;AACjD,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,kBAAkB,CAAC;AACxE,EAAE,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;AACvE,EAAE,IAAI;AACN,IAAI,IAAI,MAAM,KAAK,OAAO,EAAE;AAC5B,MAAM,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE;AACpD,MAAM,IAAI,OAAO,KAAK,IAAI;AAC1B,QAAQ,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,+CAA+C,CAAC;AAC7F,MAAM,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;AACzC,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE;AACjD,IAAI,IAAI,MAAM,KAAK,IAAI;AACvB,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,sDAAsD,CAAC;AAClG,IAAI,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;AACtC,EAAE,CAAC,SAAS;AACZ,IAAI,MAAM,KAAK,CAAC,OAAO,EAAE;AACzB,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-deI69oUs.js

@@ -0,0 +1,31 @@
+import { f as flag, m as getPlatformProjectGrantStore } from './providers.server-C3fQ7ZdV.js';
+import { u as requireInstanceAdmin } from './access.server-Rd56k7vs.js';
+import { a as apiError, h as handleApiError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
+import { S as SYSTEM_CONTEXT } from './context-BJnJL8ES.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import 'zod';
+import '@selvajs/compute/core';
+import './utils2-BqfluBM6.js';
+
+const DELETE = async ({ params, locals }) => {
+  requireInstanceAdmin(locals);
+  if (!flag("ENABLE_PLATFORM_PROJECTS")) apiError(404, ApiErrorCode.NOT_FOUND, "Not found");
+  const { grantId } = params;
+  if (!grantId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing grant ID");
+  try {
+    await getPlatformProjectGrantStore().delete(SYSTEM_CONTEXT, grantId);
+    return new Response(null, { status: 204 });
+  } catch (err) {
+    handleApiError(err, "Failed to revoke grant");
+  }
+};
+
+export { DELETE };
+//# sourceMappingURL=_server.ts-deI69oUs.js.map

package/build/server/chunks/_server.ts-deI69oUs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-deI69oUs.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/projects/_id_/grants/_grantId_/_server.ts.js"],"sourcesContent":["import { f as flag, m as getPlatformProjectGrantStore } from \"../../../../../../../../chunks/providers.server.js\";\nimport { u as requireInstanceAdmin } from \"../../../../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, A as ApiErrorCode } from \"../../../../../../../../chunks/api-errors.js\";\nimport { S as SYSTEM_CONTEXT } from \"../../../../../../../../chunks/context.js\";\nconst DELETE = async ({ params, locals }) => {\n  requireInstanceAdmin(locals);\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n  const { grantId } = params;\n  if (!grantId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing grant ID\");\n  try {\n    await getPlatformProjectGrantStore().delete(SYSTEM_CONTEXT, grantId);\n    return new Response(null, { status: 204 });\n  } catch (err) {\n    handleApiError(err, \"Failed to revoke grant\");\n  }\n};\nexport {\n  DELETE\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC3F,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM;AAC5B,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;AACjF,EAAE,IAAI;AACN,IAAI,MAAM,4BAA4B,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC;AACxE,IAAI,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC9C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AACjD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-fxzTH5KH.js

@@ -0,0 +1,37 @@
+import { json } from '@sveltejs/kit';
+import { i as getDefinitionService } from './providers.server-C3fQ7ZdV.js';
+import { t as requireEditableDefinition } from './access.server-Rd56k7vs.js';
+import { a as apiError, t as throwZodError, h as handleApiError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
+import { G as GuidSchema, h as PublishVersionInputSchema } from './context-BJnJL8ES.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'zod';
+import '@selvajs/compute/core';
+import './utils2-BqfluBM6.js';
+
+const POST = async ({ params, request, locals }) => {
+  const guidParsed = GuidSchema.safeParse(params.guid);
+  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing GUID");
+  const body = await request.json().catch(() => ({}));
+  const parsed = PublishVersionInputSchema.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
+  try {
+    const version = await getDefinitionService().publish(
+      ctx,
+      guidParsed.data,
+      parsed.data.versionId
+    );
+    return json({ version });
+  } catch (err) {
+    handleApiError(err, "Failed to publish version");
+  }
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-fxzTH5KH.js.map

package/build/server/chunks/_server.ts-fxzTH5KH.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-fxzTH5KH.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_guid_/publish/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { i as getDefinitionService } from \"../../../../../../chunks/providers.server.js\";\nimport { t as requireEditableDefinition } from \"../../../../../../chunks/access.server.js\";\nimport { a as apiError, t as throwZodError, h as handleApiError, A as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { G as GuidSchema, h as PublishVersionInputSchema } from \"../../../../../../chunks/context.js\";\nconst POST = async ({ params, request, locals }) => {\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing GUID\");\n  const body = await request.json().catch(() => ({}));\n  const parsed = PublishVersionInputSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  try {\n    const version = await getDefinitionService().publish(\n      ctx,\n      guidParsed.data,\n      parsed.data.versionId\n    );\n    return json({ version });\n  } catch (err) {\n    handleApiError(err, \"Failed to publish version\");\n  }\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAKK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpD,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACnG,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1D,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,IAAI;AACN,IAAI,MAAM,OAAO,GAAG,MAAM,oBAAoB,EAAE,CAAC,OAAO;AACxD,MAAM,GAAG;AACT,MAAM,UAAU,CAAC,IAAI;AACrB,MAAM,MAAM,CAAC,IAAI,CAAC;AAClB,KAAK;AACL,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;AAC5B,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,2BAA2B,CAAC;AACpD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-mFb6RwID.js

@@ -0,0 +1,40 @@
+import { json } from '@sveltejs/kit';
+import { n as getProjectProvider } from './providers.server-C3fQ7ZdV.js';
+import { o as requireCanReclaim } from './access.server-Rd56k7vs.js';
+import { a as apiError, h as handleApiError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import './context-BJnJL8ES.js';
+import 'zod';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@selvajs/compute/core';
+import './utils2-BqfluBM6.js';
+
+const POST = async ({ params, locals }) => {
+  const { id } = params;
+  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
+  const { user, ctx } = await requireCanReclaim(locals, id);
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const member = {
+    projectId: id,
+    userId: user.id,
+    role: "owner",
+    joinedAt: now,
+    updatedAt: now,
+    updatedBy: ctx.userId || user.id,
+    deletedAt: null
+  };
+  try {
+    await getProjectProvider().addProjectMember(ctx, member);
+    return json({ member }, { status: 201 });
+  } catch (err) {
+    handleApiError(err, "Failed to reclaim project");
+  }
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-mFb6RwID.js.map

package/build/server/chunks/_server.ts-mFb6RwID.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-mFb6RwID.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/projects/_id_/reclaim/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { n as getProjectProvider } from \"../../../../../../chunks/providers.server.js\";\nimport { o as requireCanReclaim } from \"../../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, A as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nconst POST = async ({ params, locals }) => {\n  const { id } = params;\n  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID\");\n  const { user, ctx } = await requireCanReclaim(locals, id);\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const member = {\n    projectId: id,\n    userId: user.id,\n    role: \"owner\",\n    joinedAt: now,\n    updatedAt: now,\n    updatedBy: ctx.userId || user.id,\n    deletedAt: null\n  };\n  try {\n    await getProjectProvider().addProjectMember(ctx, member);\n    return json({ member }, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to reclaim project\");\n  }\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;AAC9E,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,EAAE,CAAC;AAC3D,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,MAAM,GAAG;AACjB,IAAI,SAAS,EAAE,EAAE;AACjB,IAAI,MAAM,EAAE,IAAI,CAAC,EAAE;AACnB,IAAI,IAAI,EAAE,OAAO;AACjB,IAAI,QAAQ,EAAE,GAAG;AACjB,IAAI,SAAS,EAAE,GAAG;AAClB,IAAI,SAAS,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE;AACpC,IAAI,SAAS,EAAE;AACf,GAAG;AACH,EAAE,IAAI;AACN,IAAI,MAAM,kBAAkB,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC;AAC5D,IAAI,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,2BAA2B,CAAC;AACpD,EAAE;AACF;;;;"}