@selvajs/selva 4.5.1 → 4.6.0-beta.1

package/build/server/chunks/_server.ts-B-un1ZTf.js

@@ -1,162 +0,0 @@
-import { json } from '@sveltejs/kit';
-import { randomUUID } from 'node:crypto';
-import { mkdir, writeFile, unlink } from 'node:fs/promises';
-import { resolve, join } from 'node:path';
-import { p as private_env } from './shared-server-C3WdcJCQ.js';
-import './context-BJnJL8ES.js';
-import { f as findServerById } from './utils2-BqfluBM6.js';
-import { u as providers, L as LocalComputeServerStore, c as getComputeServerConfigStore } from './providers.server-C3fQ7ZdV.js';
-import { z as requirePermission } from './access.server-Rd56k7vs.js';
-import 'zod';
-import 'node:url';
-import 'node:fs';
-import '@supabase/supabase-js';
-import './api-errors-BrqxD-El.js';
-import '@selvajs/compute/core';
-
-function atRestSecretsCheck(report) {
-  const base = { id: "at-rest-secrets", label: "Compute server secrets" };
-  if (report === null) {
-    return {
-      ...base,
-      status: "not_applicable",
-      summary: "The active data provider does not encrypt secrets at this layer — nothing to verify."
-    };
-  }
-  if (report.ok) {
-    return {
-      ...base,
-      status: "ok",
-      summary: "All stored compute server API keys decrypt under the current SELVA_AT_REST_KEY."
-    };
-  }
-  const failed = report.failures.map((f) => `"${f.serverLabel}" (${f.reason}${f.cause ? `: ${f.cause}` : ""})`).join(", ");
-  const plaintext = report.plaintextFound;
-  return {
-    ...base,
-    status: "degraded",
-    summary: `${report.failures.length} compute server key(s) could not be loaded: ${failed}.`,
-    remediation: plaintext ? "A key is stored in plaintext on disk — re-enter it via /admin/compute so it is encrypted." : "The stored ciphertext does not match the current SELVA_AT_REST_KEY (rotated key or restored backup). Re-enter the affected keys via /admin/compute, or restore the original SELVA_AT_REST_KEY, then run this check again."
-  };
-}
-const COMPUTE_PING_TIMEOUT_MS = 8e3;
-async function computeReachabilityCheck(locals) {
-  const base = { id: "compute-reachable", label: "Default compute server" };
-  let config;
-  try {
-    config = await getComputeServerConfigStore().getConfig(locals.ctx);
-  } catch (err) {
-    return {
-      ...base,
-      status: "error",
-      summary: `Could not read compute config: ${err instanceof Error ? err.message : String(err)}`
-    };
-  }
-  const server = config.defaultServerId ? findServerById(config, config.defaultServerId) : void 0;
-  if (!server) {
-    return {
-      ...base,
-      status: "not_applicable",
-      summary: "No default compute server is configured — nothing to reach.",
-      remediation: "Add a server and set it as default in /admin/compute."
-    };
-  }
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), COMPUTE_PING_TIMEOUT_MS);
-  try {
-    const headers = {};
-    if (server.apiKey) headers["RhinoComputeKey"] = server.apiKey;
-    const res = await fetch(new URL("/healthcheck", server.serverUrl).toString(), {
-      signal: controller.signal,
-      headers
-    });
-    if (res.ok) {
-      return { ...base, status: "ok", summary: `"${server.label}" answered /healthcheck (200).` };
-    }
-    return {
-      ...base,
-      status: "degraded",
-      summary: `"${server.label}" responded ${res.status} to /healthcheck.`,
-      remediation: res.status === 401 || res.status === 403 ? "Authentication rejected — verify the API key in /admin/compute." : "The server is reachable but unhealthy. Check the Rhino.Compute host."
-    };
-  } catch (err) {
-    const aborted = err instanceof Error && err.name === "AbortError";
-    return {
-      ...base,
-      status: "degraded",
-      summary: aborted ? `"${server.label}" did not respond within ${COMPUTE_PING_TIMEOUT_MS / 1e3}s.` : `"${server.label}" is unreachable: ${err instanceof Error ? err.message : String(err)}.`,
-      remediation: `Confirm the Rhino.Compute host is running and ${server.serverUrl} is correct.`
-    };
-  } finally {
-    clearTimeout(timer);
-  }
-}
-async function dataPathWritableCheck() {
-  const base = { id: "data-path-writable", label: "Data path writable" };
-  if (!(providers.data.computeServer instanceof LocalComputeServerStore)) {
-    return {
-      ...base,
-      status: "not_applicable",
-      summary: "The active data provider does not persist to a local DATA_PATH."
-    };
-  }
-  const dataPath = private_env.DATA_PATH;
-  if (!dataPath) {
-    return {
-      ...base,
-      status: "error",
-      summary: "DATA_PATH is unset but the local provider is active.",
-      remediation: "Set DATA_PATH in .env and restart."
-    };
-  }
-  const absolute = resolve(dataPath);
-  const probe = join(absolute, `.health-probe-${randomUUID()}`);
-  try {
-    await mkdir(absolute, { recursive: true });
-    await writeFile(probe, "ok");
-    await unlink(probe);
-    return { ...base, status: "ok", summary: `DATA_PATH (${dataPath}) is writable.` };
-  } catch (err) {
-    return {
-      ...base,
-      status: "degraded",
-      summary: `DATA_PATH (${dataPath}) is not writable: ${err instanceof Error ? err.message : String(err)}.`,
-      remediation: "Check free disk space and that the directory is owned by the user running the app (`df -h`, `ls -la`)."
-    };
-  }
-}
-const GET = async ({ locals }) => {
-  requirePermission(locals, "instance_admin");
-  const checks = [];
-  const store = providers.data.computeServer;
-  if (store instanceof LocalComputeServerStore) {
-    try {
-      checks.push(atRestSecretsCheck(await store.verifySecrets()));
-    } catch (err) {
-      checks.push({
-        id: "at-rest-secrets",
-        label: "Compute server secrets",
-        status: "error",
-        summary: `Verification threw: ${err instanceof Error ? err.message : String(err)}`,
-        remediation: "Check server logs (`pm2 logs selva-compute`) for the underlying error."
-      });
-    }
-  } else {
-    checks.push(atRestSecretsCheck(null));
-  }
-  checks.push(...await Promise.all([computeReachabilityCheck(locals), dataPathWritableCheck()]));
-  const rank = {
-    ok: 0,
-    not_applicable: 0,
-    degraded: 2,
-    error: 3
-  };
-  const overall = checks.reduce(
-    (worst, c) => rank[c.status] > rank[worst] ? c.status : worst,
-    "ok"
-  );
-  return json({ overall, checkedAt: (/* @__PURE__ */ new Date()).toISOString(), checks });
-};
-
-export { GET };
-//# sourceMappingURL=_server.ts-B-un1ZTf.js.map

package/build/server/chunks/_server.ts-B-un1ZTf.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-B-un1ZTf.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/system/health/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\nimport { mkdir, writeFile, unlink } from \"node:fs/promises\";\nimport { resolve, join } from \"node:path\";\nimport { p as private_env } from \"../../../../../../chunks/shared-server.js\";\nimport \"../../../../../../chunks/context.js\";\nimport { f as findServerById } from \"../../../../../../chunks/utils2.js\";\nimport { u as providers, L as LocalComputeServerStore, c as getComputeServerConfigStore } from \"../../../../../../chunks/providers.server.js\";\nimport { z as requirePermission } from \"../../../../../../chunks/access.server.js\";\nfunction atRestSecretsCheck(report) {\n  const base = { id: \"at-rest-secrets\", label: \"Compute server secrets\" };\n  if (report === null) {\n    return {\n      ...base,\n      status: \"not_applicable\",\n      summary: \"The active data provider does not encrypt secrets at this layer — nothing to verify.\"\n    };\n  }\n  if (report.ok) {\n    return {\n      ...base,\n      status: \"ok\",\n      summary: \"All stored compute server API keys decrypt under the current SELVA_AT_REST_KEY.\"\n    };\n  }\n  const failed = report.failures.map((f) => `\"${f.serverLabel}\" (${f.reason}${f.cause ? `: ${f.cause}` : \"\"})`).join(\", \");\n  const plaintext = report.plaintextFound;\n  return {\n    ...base,\n    status: \"degraded\",\n    summary: `${report.failures.length} compute server key(s) could not be loaded: ${failed}.`,\n    remediation: plaintext ? \"A key is stored in plaintext on disk — re-enter it via /admin/compute so it is encrypted.\" : \"The stored ciphertext does not match the current SELVA_AT_REST_KEY (rotated key or restored backup). Re-enter the affected keys via /admin/compute, or restore the original SELVA_AT_REST_KEY, then run this check again.\"\n  };\n}\nconst COMPUTE_PING_TIMEOUT_MS = 8e3;\nasync function computeReachabilityCheck(locals) {\n  const base = { id: \"compute-reachable\", label: \"Default compute server\" };\n  let config;\n  try {\n    config = await getComputeServerConfigStore().getConfig(locals.ctx);\n  } catch (err) {\n    return {\n      ...base,\n      status: \"error\",\n      summary: `Could not read compute config: ${err instanceof Error ? err.message : String(err)}`\n    };\n  }\n  const server = config.defaultServerId ? findServerById(config, config.defaultServerId) : void 0;\n  if (!server) {\n    return {\n      ...base,\n      status: \"not_applicable\",\n      summary: \"No default compute server is configured — nothing to reach.\",\n      remediation: \"Add a server and set it as default in /admin/compute.\"\n    };\n  }\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), COMPUTE_PING_TIMEOUT_MS);\n  try {\n    const headers = {};\n    if (server.apiKey) headers[\"RhinoComputeKey\"] = server.apiKey;\n    const res = await fetch(new URL(\"/healthcheck\", server.serverUrl).toString(), {\n      signal: controller.signal,\n      headers\n    });\n    if (res.ok) {\n      return { ...base, status: \"ok\", summary: `\"${server.label}\" answered /healthcheck (200).` };\n    }\n    return {\n      ...base,\n      status: \"degraded\",\n      summary: `\"${server.label}\" responded ${res.status} to /healthcheck.`,\n      remediation: res.status === 401 || res.status === 403 ? \"Authentication rejected — verify the API key in /admin/compute.\" : \"The server is reachable but unhealthy. Check the Rhino.Compute host.\"\n    };\n  } catch (err) {\n    const aborted = err instanceof Error && err.name === \"AbortError\";\n    return {\n      ...base,\n      status: \"degraded\",\n      summary: aborted ? `\"${server.label}\" did not respond within ${COMPUTE_PING_TIMEOUT_MS / 1e3}s.` : `\"${server.label}\" is unreachable: ${err instanceof Error ? err.message : String(err)}.`,\n      remediation: `Confirm the Rhino.Compute host is running and ${server.serverUrl} is correct.`\n    };\n  } finally {\n    clearTimeout(timer);\n  }\n}\nasync function dataPathWritableCheck() {\n  const base = { id: \"data-path-writable\", label: \"Data path writable\" };\n  if (!(providers.data.computeServer instanceof LocalComputeServerStore)) {\n    return {\n      ...base,\n      status: \"not_applicable\",\n      summary: \"The active data provider does not persist to a local DATA_PATH.\"\n    };\n  }\n  const dataPath = private_env.DATA_PATH;\n  if (!dataPath) {\n    return {\n      ...base,\n      status: \"error\",\n      summary: \"DATA_PATH is unset but the local provider is active.\",\n      remediation: \"Set DATA_PATH in .env and restart.\"\n    };\n  }\n  const absolute = resolve(dataPath);\n  const probe = join(absolute, `.health-probe-${randomUUID()}`);\n  try {\n    await mkdir(absolute, { recursive: true });\n    await writeFile(probe, \"ok\");\n    await unlink(probe);\n    return { ...base, status: \"ok\", summary: `DATA_PATH (${dataPath}) is writable.` };\n  } catch (err) {\n    return {\n      ...base,\n      status: \"degraded\",\n      summary: `DATA_PATH (${dataPath}) is not writable: ${err instanceof Error ? err.message : String(err)}.`,\n      remediation: \"Check free disk space and that the directory is owned by the user running the app (`df -h`, `ls -la`).\"\n    };\n  }\n}\nconst GET = async ({ locals }) => {\n  requirePermission(locals, \"instance_admin\");\n  const checks = [];\n  const store = providers.data.computeServer;\n  if (store instanceof LocalComputeServerStore) {\n    try {\n      checks.push(atRestSecretsCheck(await store.verifySecrets()));\n    } catch (err) {\n      checks.push({\n        id: \"at-rest-secrets\",\n        label: \"Compute server secrets\",\n        status: \"error\",\n        summary: `Verification threw: ${err instanceof Error ? err.message : String(err)}`,\n        remediation: \"Check server logs (`pm2 logs selva-compute`) for the underlying error.\"\n      });\n    }\n  } else {\n    checks.push(atRestSecretsCheck(null));\n  }\n  checks.push(...await Promise.all([computeReachabilityCheck(locals), dataPathWritableCheck()]));\n  const rank = {\n    ok: 0,\n    not_applicable: 0,\n    degraded: 2,\n    error: 3\n  };\n  const overall = checks.reduce(\n    (worst, c) => rank[c.status] > rank[worst] ? c.status : worst,\n    \"ok\"\n  );\n  return json({ overall, checkedAt: (/* @__PURE__ */ new Date()).toISOString(), checks });\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AASA,SAAS,kBAAkB,CAAC,MAAM,EAAE;AACpC,EAAE,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,wBAAwB,EAAE;AACzE,EAAE,IAAI,MAAM,KAAK,IAAI,EAAE;AACvB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,gBAAgB;AAC9B,MAAM,OAAO,EAAE;AACf,KAAK;AACL,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,EAAE,EAAE;AACjB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,IAAI;AAClB,MAAM,OAAO,EAAE;AACf,KAAK;AACL,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AAC1H,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc;AACzC,EAAE,OAAO;AACT,IAAI,GAAG,IAAI;AACX,IAAI,MAAM,EAAE,UAAU;AACtB,IAAI,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,4CAA4C,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9F,IAAI,WAAW,EAAE,SAAS,GAAG,2FAA2F,GAAG;AAC3H,GAAG;AACH;AACA,MAAM,uBAAuB,GAAG,GAAG;AACnC,eAAe,wBAAwB,CAAC,MAAM,EAAE;AAChD,EAAE,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,wBAAwB,EAAE;AAC3E,EAAE,IAAI,MAAM;AACZ,EAAE,IAAI;AACN,IAAI,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;AACtE,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,OAAO;AACrB,MAAM,OAAO,EAAE,CAAC,+BAA+B,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;AAClG,KAAK;AACL,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,GAAG,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,GAAG,MAAM;AACjG,EAAE,IAAI,CAAC,MAAM,EAAE;AACf,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,gBAAgB;AAC9B,MAAM,OAAO,EAAE,6DAA6D;AAC5E,MAAM,WAAW,EAAE;AACnB,KAAK;AACL,EAAE;AACF,EAAE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE;AAC1C,EAAE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,uBAAuB,CAAC;AAC7E,EAAE,IAAI;AACN,IAAI,MAAM,OAAO,GAAG,EAAE;AACtB,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC,MAAM;AACjE,IAAI,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE;AAClF,MAAM,MAAM,EAAE,UAAU,CAAC,MAAM;AAC/B,MAAM;AACN,KAAK,CAAC;AACN,IAAI,IAAI,GAAG,CAAC,EAAE,EAAE;AAChB,MAAM,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,EAAE;AACjG,IAAI;AACJ,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,UAAU;AACxB,MAAM,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC;AAC3E,MAAM,WAAW,EAAE,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,GAAG,iEAAiE,GAAG;AAClI,KAAK;AACL,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;AACrE,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,UAAU;AACxB,MAAM,OAAO,EAAE,OAAO,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,uBAAuB,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACjM,MAAM,WAAW,EAAE,CAAC,8CAA8C,EAAE,MAAM,CAAC,SAAS,CAAC,YAAY;AACjG,KAAK;AACL,EAAE,CAAC,SAAS;AACZ,IAAI,YAAY,CAAC,KAAK,CAAC;AACvB,EAAE;AACF;AACA,eAAe,qBAAqB,GAAG;AACvC,EAAE,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,oBAAoB,EAAE;AACxE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,aAAa,YAAY,uBAAuB,CAAC,EAAE;AAC1E,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,gBAAgB;AAC9B,MAAM,OAAO,EAAE;AACf,KAAK;AACL,EAAE;AACF,EAAE,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS;AACxC,EAAE,IAAI,CAAC,QAAQ,EAAE;AACjB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,OAAO;AACrB,MAAM,OAAO,EAAE,sDAAsD;AACrE,MAAM,WAAW,EAAE;AACnB,KAAK;AACL,EAAE;AACF,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;AACpC,EAAE,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;AAC/D,EAAE,IAAI;AACN,IAAI,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC9C,IAAI,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC;AAChC,IAAI,MAAM,MAAM,CAAC,KAAK,CAAC;AACvB,IAAI,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,cAAc,CAAC,EAAE;AACrF,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,UAAU;AACxB,MAAM,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,mBAAmB,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC9G,MAAM,WAAW,EAAE;AACnB,KAAK;AACL,EAAE;AACF;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,MAAM,GAAG,EAAE;AACnB,EAAE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa;AAC5C,EAAE,IAAI,KAAK,YAAY,uBAAuB,EAAE;AAChD,IAAI,IAAI;AACR,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;AAClE,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,MAAM,CAAC,IAAI,CAAC;AAClB,QAAQ,EAAE,EAAE,iBAAiB;AAC7B,QAAQ,KAAK,EAAE,wBAAwB;AACvC,QAAQ,MAAM,EAAE,OAAO;AACvB,QAAQ,OAAO,EAAE,CAAC,oBAAoB,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1F,QAAQ,WAAW,EAAE;AACrB,OAAO,CAAC;AACR,IAAI;AACJ,EAAE,CAAC,MAAM;AACT,IAAI,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;AACzC,EAAE;AACF,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;AAChG,EAAE,MAAM,IAAI,GAAG;AACf,IAAI,EAAE,EAAE,CAAC;AACT,IAAI,cAAc,EAAE,CAAC;AACrB,IAAI,QAAQ,EAAE,CAAC;AACf,IAAI,KAAK,EAAE;AACX,GAAG;AACH,EAAE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM;AAC/B,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,KAAK;AACjE,IAAI;AACJ,GAAG;AACH,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC;AACzF;;;;"}

package/build/server/chunks/_server.ts-B6gtWjZd.js

@@ -1,63 +0,0 @@
-import { json } from '@sveltejs/kit';
-import { z } from 'zod';
-import { n as getProjectProvider } from './providers.server-C3fQ7ZdV.js';
-import { n as requireCanManageMembers, A as requireTargetIsOrgMember } from './access.server-Rd56k7vs.js';
-import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
-import { f as ProjectRoleSchema } from './context-BJnJL8ES.js';
-import './shared-server-C3WdcJCQ.js';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:crypto';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import '@selvajs/compute/core';
-import './utils2-BqfluBM6.js';
-
-const AddMemberSchema = z.object({
-  userId: z.string().min(1, "userId is required"),
-  role: ProjectRoleSchema
-});
-const GET = async ({ params, locals }) => {
-  const { id } = params;
-  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
-  await requireCanManageMembers(locals, id);
-  const ctx = locals.ctx;
-  try {
-    const page = await getProjectProvider().listProjectMembers(ctx, id, { limit: 200 });
-    return json({ members: page.items });
-  } catch (err) {
-    handleApiError(err, "Failed to load members");
-  }
-};
-const POST = async ({ params, request, locals }) => {
-  const { id } = params;
-  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
-  await requireCanManageMembers(locals, id);
-  const ctx = locals.ctx;
-  const body = await request.json().catch(() => null);
-  const parsed = AddMemberSchema.safeParse(body);
-  if (!parsed.success) throwZodError(parsed.error);
-  const project = await getProjectProvider().getProject(ctx, id);
-  if (!project) apiError(404, ApiErrorCode.NOT_FOUND, "Project not found");
-  await requireTargetIsOrgMember(locals, project.orgId, parsed.data.userId);
-  const now = (/* @__PURE__ */ new Date()).toISOString();
-  const member = {
-    projectId: id,
-    userId: parsed.data.userId,
-    role: parsed.data.role,
-    joinedAt: now,
-    updatedAt: now,
-    updatedBy: ctx.userId || parsed.data.userId,
-    deletedAt: null
-  };
-  try {
-    await getProjectProvider().addProjectMember(ctx, member);
-    return json(member, { status: 201 });
-  } catch (err) {
-    handleApiError(err, "Failed to add member");
-  }
-};
-
-export { GET, POST };
-//# sourceMappingURL=_server.ts-B6gtWjZd.js.map

package/build/server/chunks/_server.ts-B6gtWjZd.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-B6gtWjZd.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/projects/_id_/members/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { n as getProjectProvider } from \"../../../../../../chunks/providers.server.js\";\nimport { n as requireCanManageMembers, A as requireTargetIsOrgMember } from \"../../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { f as ProjectRoleSchema } from \"../../../../../../chunks/context.js\";\nconst AddMemberSchema = z.object({\n  userId: z.string().min(1, \"userId is required\"),\n  role: ProjectRoleSchema\n});\nconst GET = async ({ params, locals }) => {\n  const { id } = params;\n  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID\");\n  await requireCanManageMembers(locals, id);\n  const ctx = locals.ctx;\n  try {\n    const page = await getProjectProvider().listProjectMembers(ctx, id, { limit: 200 });\n    return json({ members: page.items });\n  } catch (err) {\n    handleApiError(err, \"Failed to load members\");\n  }\n};\nconst POST = async ({ params, request, locals }) => {\n  const { id } = params;\n  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID\");\n  await requireCanManageMembers(locals, id);\n  const ctx = locals.ctx;\n  const body = await request.json().catch(() => null);\n  const parsed = AddMemberSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const project = await getProjectProvider().getProject(ctx, id);\n  if (!project) apiError(404, ApiErrorCode.NOT_FOUND, \"Project not found\");\n  await requireTargetIsOrgMember(locals, project.orgId, parsed.data.userId);\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const member = {\n    projectId: id,\n    userId: parsed.data.userId,\n    role: parsed.data.role,\n    joinedAt: now,\n    updatedAt: now,\n    updatedBy: ctx.userId || parsed.data.userId,\n    deletedAt: null\n  };\n  try {\n    await getProjectProvider().addProjectMember(ctx, member);\n    return json(member, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to add member\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAMA,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC;AACjD,EAAE,IAAI,EAAE;AACR,CAAC,CAAC;AACG,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC1C,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;AAC9E,EAAE,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,CAAC;AAC3C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACvF,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;AACxC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AACjD,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpD,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;AAC9E,EAAE,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,CAAC;AAC3C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAChD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC;AAChE,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,mBAAmB,CAAC;AAC1E,EAAE,MAAM,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;AAC3E,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,MAAM,GAAG;AACjB,IAAI,SAAS,EAAE,EAAE;AACjB,IAAI,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;AAC9B,IAAI,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC1B,IAAI,QAAQ,EAAE,GAAG;AACjB,IAAI,SAAS,EAAE,GAAG;AAClB,IAAI,SAAS,EAAE,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM;AAC/C,IAAI,SAAS,EAAE;AACf,GAAG;AACH,EAAE,IAAI;AACN,IAAI,MAAM,kBAAkB,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC;AAC5D,IAAI,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACxC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC/C,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-B9Fdut8P.js

@@ -1,87 +0,0 @@
-import { z } from 'zod';
-import { n as getProjectProvider, k as getOrganizationProvider } from './providers.server-C3fQ7ZdV.js';
-import { m as requireCanManage, l as requireCanEditProjectSettings, B as withAdminBypass, f as canChangeVisibilityToPublic } from './access.server-Rd56k7vs.js';
-import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
-import { s as slugify } from './slug-BGuFQjqe.js';
-import { g as ProjectVisibilitySchema, v as validateProjectFlags } from './context-BJnJL8ES.js';
-import './shared-server-C3WdcJCQ.js';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:crypto';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import '@sveltejs/kit';
-import '@selvajs/compute/core';
-import './utils2-BqfluBM6.js';
-
-const UpdateProjectBody = z.object({
-  name: z.string().min(1).max(128).trim(),
-  description: z.string().max(2e3).nullish(),
-  visibility: ProjectVisibilitySchema,
-  autoJoinOnUpload: z.boolean()
-}).partial();
-const PATCH = async ({ params, request, locals }) => {
-  const { id } = params;
-  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
-  const { ctx, project: existing } = await requireCanEditProjectSettings(locals, id);
-  const body = await request.json().catch(() => null);
-  const parsed = UpdateProjectBody.safeParse(body);
-  if (!parsed.success) throwZodError(parsed.error);
-  if (parsed.data.visibility !== void 0 && parsed.data.visibility === "public" && existing.visibility !== "public") {
-    const orgMember = await getOrganizationProvider().getOrgMember(ctx, existing.orgId, ctx.userId);
-    const passes = withAdminBypass(
-      ctx.platformPermissions,
-      () => canChangeVisibilityToPublic({ orgMember })
-    );
-    if (!passes) {
-      apiError(403, ApiErrorCode.FORBIDDEN, "Only org owners or admins can make a project public.");
-    }
-  }
-  const mergedVisibility = parsed.data.visibility ?? existing.visibility;
-  const mergedAutoJoin = parsed.data.autoJoinOnUpload ?? existing.autoJoinOnUpload;
-  const flagIssues = validateProjectFlags({
-    visibility: mergedVisibility,
-    autoJoinOnUpload: mergedAutoJoin
-  });
-  if (flagIssues.length > 0) {
-    apiError(
-      400,
-      ApiErrorCode.VALIDATION_FAILED,
-      flagIssues.map((i) => `${i.path}: ${i.message}`).join("; ")
-    );
-  }
-  const patch = {};
-  if (parsed.data.name !== void 0) {
-    patch.name = parsed.data.name;
-    patch.slug = slugify(parsed.data.name);
-  }
-  if (parsed.data.description !== void 0) {
-    patch.description = parsed.data.description ?? void 0;
-  }
-  if (parsed.data.visibility !== void 0) patch.visibility = parsed.data.visibility;
-  if (parsed.data.autoJoinOnUpload !== void 0) {
-    patch.autoJoinOnUpload = parsed.data.autoJoinOnUpload;
-  }
-  try {
-    await getProjectProvider().updateProject(ctx, id, patch);
-    return new Response(null, { status: 204 });
-  } catch (err) {
-    handleApiError(err, "Failed to update project");
-  }
-};
-const DELETE = async ({ params, locals }) => {
-  const { id } = params;
-  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
-  await requireCanManage(locals, id);
-  const ctx = locals.ctx;
-  try {
-    await getProjectProvider().deleteProject(ctx, id);
-    return new Response(null, { status: 204 });
-  } catch (err) {
-    handleApiError(err, "Failed to delete project");
-  }
-};
-
-export { DELETE, PATCH };
-//# sourceMappingURL=_server.ts-B9Fdut8P.js.map

package/build/server/chunks/_server.ts-B9Fdut8P.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-B9Fdut8P.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/projects/_id_/_server.ts.js"],"sourcesContent":["import { z } from \"zod\";\nimport { n as getProjectProvider, k as getOrganizationProvider } from \"../../../../../chunks/providers.server.js\";\nimport { m as requireCanManage, l as requireCanEditProjectSettings, B as withAdminBypass, f as canChangeVisibilityToPublic } from \"../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { s as slugify } from \"../../../../../chunks/slug.js\";\nimport { g as ProjectVisibilitySchema, v as validateProjectFlags } from \"../../../../../chunks/context.js\";\nconst UpdateProjectBody = z.object({\n  name: z.string().min(1).max(128).trim(),\n  description: z.string().max(2e3).nullish(),\n  visibility: ProjectVisibilitySchema,\n  autoJoinOnUpload: z.boolean()\n}).partial();\nconst PATCH = async ({ params, request, locals }) => {\n  const { id } = params;\n  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID\");\n  const { ctx, project: existing } = await requireCanEditProjectSettings(locals, id);\n  const body = await request.json().catch(() => null);\n  const parsed = UpdateProjectBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  if (parsed.data.visibility !== void 0 && parsed.data.visibility === \"public\" && existing.visibility !== \"public\") {\n    const orgMember = await getOrganizationProvider().getOrgMember(ctx, existing.orgId, ctx.userId);\n    const passes = withAdminBypass(\n      ctx.platformPermissions,\n      () => canChangeVisibilityToPublic({ orgMember })\n    );\n    if (!passes) {\n      apiError(403, ApiErrorCode.FORBIDDEN, \"Only org owners or admins can make a project public.\");\n    }\n  }\n  const mergedVisibility = parsed.data.visibility ?? existing.visibility;\n  const mergedAutoJoin = parsed.data.autoJoinOnUpload ?? existing.autoJoinOnUpload;\n  const flagIssues = validateProjectFlags({\n    visibility: mergedVisibility,\n    autoJoinOnUpload: mergedAutoJoin\n  });\n  if (flagIssues.length > 0) {\n    apiError(\n      400,\n      ApiErrorCode.VALIDATION_FAILED,\n      flagIssues.map((i) => `${i.path}: ${i.message}`).join(\"; \")\n    );\n  }\n  const patch = {};\n  if (parsed.data.name !== void 0) {\n    patch.name = parsed.data.name;\n    patch.slug = slugify(parsed.data.name);\n  }\n  if (parsed.data.description !== void 0) {\n    patch.description = parsed.data.description ?? void 0;\n  }\n  if (parsed.data.visibility !== void 0) patch.visibility = parsed.data.visibility;\n  if (parsed.data.autoJoinOnUpload !== void 0) {\n    patch.autoJoinOnUpload = parsed.data.autoJoinOnUpload;\n  }\n  try {\n    await getProjectProvider().updateProject(ctx, id, patch);\n    return new Response(null, { status: 204 });\n  } catch (err) {\n    handleApiError(err, \"Failed to update project\");\n  }\n};\nconst DELETE = async ({ params, locals }) => {\n  const { id } = params;\n  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID\");\n  await requireCanManage(locals, id);\n  const ctx = locals.ctx;\n  try {\n    await getProjectProvider().deleteProject(ctx, id);\n    return new Response(null, { status: 204 });\n  } catch (err) {\n    handleApiError(err, \"Failed to delete project\");\n  }\n};\nexport {\n  DELETE,\n  PATCH\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAMA,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;AACnC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACzC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE;AAC5C,EAAE,UAAU,EAAE,uBAAuB;AACrC,EAAE,gBAAgB,EAAE,CAAC,CAAC,OAAO;AAC7B,CAAC,CAAC,CAAC,OAAO,EAAE;AACP,MAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrD,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;AAC9E,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,6BAA6B,CAAC,MAAM,EAAE,EAAE,CAAC;AACpF,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC;AAClD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,EAAE;AACpH,IAAI,MAAM,SAAS,GAAG,MAAM,uBAAuB,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC;AACnG,IAAI,MAAM,MAAM,GAAG,eAAe;AAClC,MAAM,GAAG,CAAC,mBAAmB;AAC7B,MAAM,MAAM,2BAA2B,CAAC,EAAE,SAAS,EAAE;AACrD,KAAK;AACL,IAAI,IAAI,CAAC,MAAM,EAAE;AACjB,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,sDAAsD,CAAC;AACnG,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU;AACxE,EAAE,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,QAAQ,CAAC,gBAAgB;AAClF,EAAE,MAAM,UAAU,GAAG,oBAAoB,CAAC;AAC1C,IAAI,UAAU,EAAE,gBAAgB;AAChC,IAAI,gBAAgB,EAAE;AACtB,GAAG,CAAC;AACJ,EAAE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE;AAC7B,IAAI,QAAQ;AACZ,MAAM,GAAG;AACT,MAAM,YAAY,CAAC,iBAAiB;AACpC,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI;AAChE,KAAK;AACL,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,EAAE;AAClB,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE;AACnC,IAAI,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI;AACjC,IAAI,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;AAC1C,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,MAAM,EAAE;AAC1C,IAAI,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,MAAM;AACzD,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,MAAM,EAAE,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU;AAClF,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,KAAK,MAAM,EAAE;AAC/C,IAAI,KAAK,CAAC,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB;AACzD,EAAE;AACF,EAAE,IAAI;AACN,IAAI,MAAM,kBAAkB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC;AAC5D,IAAI,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC9C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACnD,EAAE;AACF;AACK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;AAC9E,EAAE,MAAM,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAAC;AACpC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI;AACN,IAAI,MAAM,kBAAkB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC;AACrD,IAAI,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC9C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACnD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-BJEEQ8tH.js

@@ -1,77 +0,0 @@
-import { z } from 'zod';
-import { n as getProjectProvider } from './providers.server-C3fQ7ZdV.js';
-import { n as requireCanManageMembers, i as checkOwnerRemoval } from './access.server-Rd56k7vs.js';
-import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
-import { f as ProjectRoleSchema } from './context-BJnJL8ES.js';
-import './shared-server-C3WdcJCQ.js';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:crypto';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import '@sveltejs/kit';
-import '@selvajs/compute/core';
-import './utils2-BqfluBM6.js';
-
-const UpdateRoleSchema = z.object({ role: ProjectRoleSchema });
-const PATCH = async ({ params, request, locals }) => {
-  const { id, userId } = params;
-  if (!id || !userId)
-    apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID or user ID");
-  await requireCanManageMembers(locals, id);
-  const ctx = locals.ctx;
-  const body = await request.json().catch(() => null);
-  const parsed = UpdateRoleSchema.safeParse(body);
-  if (!parsed.success) throwZodError(parsed.error);
-  try {
-    await getProjectProvider().updateProjectMemberRole(ctx, id, userId, parsed.data.role);
-    return new Response(null, { status: 204 });
-  } catch (err) {
-    handleApiError(err, "Failed to update role");
-  }
-};
-const DELETE = async ({ params, url, locals }) => {
-  const { id, userId } = params;
-  if (!id || !userId)
-    apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID or user ID");
-  await requireCanManageMembers(locals, id);
-  const ctx = locals.ctx;
-  const confirmed = url.searchParams.get("confirm") === "true";
-  const projects = getProjectProvider();
-  const target = await projects.getProjectMember(ctx, id, userId);
-  if (!target) {
-    return new Response(null, { status: 204 });
-  }
-  if (target.role === "owner") {
-    const page = await projects.listProjectMembers(ctx, id, { limit: 200 });
-    const decision = checkOwnerRemoval({
-      target: { role: target.role },
-      allMembers: page.items.map((m) => ({ role: m.role })),
-      confirmed
-    });
-    if (decision === "sole_owner") {
-      apiError(
-        409,
-        ApiErrorCode.CONFLICT,
-        "Cannot remove the sole owner of a project. Assign another owner first, or use reclaim to add a co-owner."
-      );
-    }
-    if (decision === "needs_confirm") {
-      apiError(
-        409,
-        ApiErrorCode.CONFLICT,
-        "Removing another project owner requires explicit confirmation. Retry with ?confirm=true."
-      );
-    }
-  }
-  try {
-    await projects.removeProjectMember(ctx, id, userId);
-    return new Response(null, { status: 204 });
-  } catch (err) {
-    handleApiError(err, "Failed to remove member");
-  }
-};
-
-export { DELETE, PATCH };
-//# sourceMappingURL=_server.ts-BJEEQ8tH.js.map

package/build/server/chunks/_server.ts-BJEEQ8tH.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-BJEEQ8tH.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/projects/_id_/members/_userId_/_server.ts.js"],"sourcesContent":["import { z } from \"zod\";\nimport { n as getProjectProvider } from \"../../../../../../../chunks/providers.server.js\";\nimport { n as requireCanManageMembers, i as checkOwnerRemoval } from \"../../../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from \"../../../../../../../chunks/api-errors.js\";\nimport { f as ProjectRoleSchema } from \"../../../../../../../chunks/context.js\";\nconst UpdateRoleSchema = z.object({ role: ProjectRoleSchema });\nconst PATCH = async ({ params, request, locals }) => {\n  const { id, userId } = params;\n  if (!id || !userId)\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID or user ID\");\n  await requireCanManageMembers(locals, id);\n  const ctx = locals.ctx;\n  const body = await request.json().catch(() => null);\n  const parsed = UpdateRoleSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  try {\n    await getProjectProvider().updateProjectMemberRole(ctx, id, userId, parsed.data.role);\n    return new Response(null, { status: 204 });\n  } catch (err) {\n    handleApiError(err, \"Failed to update role\");\n  }\n};\nconst DELETE = async ({ params, url, locals }) => {\n  const { id, userId } = params;\n  if (!id || !userId)\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID or user ID\");\n  await requireCanManageMembers(locals, id);\n  const ctx = locals.ctx;\n  const confirmed = url.searchParams.get(\"confirm\") === \"true\";\n  const projects = getProjectProvider();\n  const target = await projects.getProjectMember(ctx, id, userId);\n  if (!target) {\n    return new Response(null, { status: 204 });\n  }\n  if (target.role === \"owner\") {\n    const page = await projects.listProjectMembers(ctx, id, { limit: 200 });\n    const decision = checkOwnerRemoval({\n      target: { role: target.role },\n      allMembers: page.items.map((m) => ({ role: m.role })),\n      confirmed\n    });\n    if (decision === \"sole_owner\") {\n      apiError(\n        409,\n        ApiErrorCode.CONFLICT,\n        \"Cannot remove the sole owner of a project. Assign another owner first, or use reclaim to add a co-owner.\"\n      );\n    }\n    if (decision === \"needs_confirm\") {\n      apiError(\n        409,\n        ApiErrorCode.CONFLICT,\n        \"Removing another project owner requires explicit confirmation. Retry with ?confirm=true.\"\n      );\n    }\n  }\n  try {\n    await projects.removeProjectMember(ctx, id, userId);\n    return new Response(null, { status: 204 });\n  } catch (err) {\n    handleApiError(err, \"Failed to remove member\");\n  }\n};\nexport {\n  DELETE,\n  PATCH\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAKA,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;AACzD,MAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrD,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM;AAC/B,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM;AACpB,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,+BAA+B,CAAC;AAClF,EAAE,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,CAAC;AAC3C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC;AACjD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI;AACN,IAAI,MAAM,kBAAkB,EAAE,CAAC,uBAAuB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;AACzF,IAAI,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC9C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,uBAAuB,CAAC;AAChD,EAAE;AACF;AACK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK;AAClD,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM;AAC/B,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM;AACpB,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,+BAA+B,CAAC;AAClF,EAAE,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,CAAC;AAC3C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,MAAM;AAC9D,EAAE,MAAM,QAAQ,GAAG,kBAAkB,EAAE;AACvC,EAAE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC;AACjE,EAAE,IAAI,CAAC,MAAM,EAAE;AACf,IAAI,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC9C,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE;AAC/B,IAAI,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAC3E,IAAI,MAAM,QAAQ,GAAG,iBAAiB,CAAC;AACvC,MAAM,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;AACnC,MAAM,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3D,MAAM;AACN,KAAK,CAAC;AACN,IAAI,IAAI,QAAQ,KAAK,YAAY,EAAE;AACnC,MAAM,QAAQ;AACd,QAAQ,GAAG;AACX,QAAQ,YAAY,CAAC,QAAQ;AAC7B,QAAQ;AACR,OAAO;AACP,IAAI;AACJ,IAAI,IAAI,QAAQ,KAAK,eAAe,EAAE;AACtC,MAAM,QAAQ;AACd,QAAQ,GAAG;AACX,QAAQ,YAAY,CAAC,QAAQ;AAC7B,QAAQ;AACR,OAAO;AACP,IAAI;AACJ,EAAE;AACF,EAAE,IAAI;AACN,IAAI,MAAM,QAAQ,CAAC,mBAAmB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC;AACvD,IAAI,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC9C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAClD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-BKPaoj3Y.js

@@ -1,44 +0,0 @@
-import { f as flag, u as providers } from './providers.server-C3fQ7ZdV.js';
-import { t as requireEditableDefinition } from './access.server-Rd56k7vs.js';
-import { a as apiError, A as ApiErrorCode, h as handleApiError } from './api-errors-BrqxD-El.js';
-import { G as GuidSchema } from './context-BJnJL8ES.js';
-import './shared-server-C3WdcJCQ.js';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:crypto';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import '@sveltejs/kit';
-import 'zod';
-import '@selvajs/compute/core';
-import './utils2-BqfluBM6.js';
-
-const DELETE = async ({ params, locals }) => {
-  if (!flag("ENABLE_SHARING")) {
-    apiError(
-      404,
-      ApiErrorCode.NOT_FOUND,
-      "Share links are disabled on this instance (ENABLE_SHARING)."
-    );
-  }
-  const guidParsed = GuidSchema.safeParse(params.guid);
-  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing GUID");
-  const linkParsed = GuidSchema.safeParse(params.linkId);
-  if (!linkParsed.success)
-    apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing link ID");
-  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
-  try {
-    const existing = await providers.data.shareLinks.getById(ctx, linkParsed.data);
-    if (!existing || existing.definitionId !== guidParsed.data) {
-      apiError(404, ApiErrorCode.NOT_FOUND, "Share link not found.");
-    }
-    await providers.data.shareLinks.revoke(ctx, linkParsed.data);
-    return new Response(null, { status: 204 });
-  } catch (err) {
-    handleApiError(err, "Failed to revoke share link");
-  }
-};
-
-export { DELETE };
-//# sourceMappingURL=_server.ts-BKPaoj3Y.js.map

package/build/server/chunks/_server.ts-BKPaoj3Y.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-BKPaoj3Y.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_guid_/share-links/_linkId_/_server.ts.js"],"sourcesContent":["import { f as flag, u as providers } from \"../../../../../../../chunks/providers.server.js\";\nimport { t as requireEditableDefinition } from \"../../../../../../../chunks/access.server.js\";\nimport { a as apiError, A as ApiErrorCode, h as handleApiError } from \"../../../../../../../chunks/api-errors.js\";\nimport { G as GuidSchema } from \"../../../../../../../chunks/context.js\";\nconst DELETE = async ({ params, locals }) => {\n  if (!flag(\"ENABLE_SHARING\")) {\n    apiError(\n      404,\n      ApiErrorCode.NOT_FOUND,\n      \"Share links are disabled on this instance (ENABLE_SHARING).\"\n    );\n  }\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing GUID\");\n  const linkParsed = GuidSchema.safeParse(params.linkId);\n  if (!linkParsed.success)\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing link ID\");\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  try {\n    const existing = await providers.data.shareLinks.getById(ctx, linkParsed.data);\n    if (!existing || existing.definitionId !== guidParsed.data) {\n      apiError(404, ApiErrorCode.NOT_FOUND, \"Share link not found.\");\n    }\n    await providers.data.shareLinks.revoke(ctx, linkParsed.data);\n    return new Response(null, { status: 204 });\n  } catch (err) {\n    handleApiError(err, \"Failed to revoke share link\");\n  }\n};\nexport {\n  DELETE\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE;AAC/B,IAAI,QAAQ;AACZ,MAAM,GAAG;AACT,MAAM,YAAY,CAAC,SAAS;AAC5B,MAAM;AACN,KAAK;AACL,EAAE;AACF,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACnG,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;AACxD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO;AACzB,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,4BAA4B,CAAC;AAC/E,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,IAAI;AACN,IAAI,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AAClF,IAAI,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,KAAK,UAAU,CAAC,IAAI,EAAE;AAChE,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,uBAAuB,CAAC;AACpE,IAAI;AACJ,IAAI,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AAChE,IAAI,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC9C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACtD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-BVpHuRup.js

@@ -1,72 +0,0 @@
-import { json } from '@sveltejs/kit';
-import { randomUUID } from 'node:crypto';
-import { z } from 'zod';
-import { j as getInviteStore } from './providers.server-C3fQ7ZdV.js';
-import { y as requireManageOrgMembers } from './access.server-Rd56k7vs.js';
-import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
-import { M as MEMBER_ASSIGNABLE_PERMISSIONS, D as DEFAULT_ORG_PERMISSIONS, e as OrgRoleSchema, P as PlatformPermissionSchema, d as OrgPermissionSchema } from './context-BJnJL8ES.js';
-import { s as splitFlatPermissions } from './permissions-compat.server-G174xsh6.js';
-import { m as mintRawToken, h as hashToken } from './token.server2-CaWL-Isp.js';
-import './shared-server-C3WdcJCQ.js';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import '@selvajs/compute/core';
-import './utils2-BqfluBM6.js';
-
-const FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);
-const CreateBody = z.object({
-  email: z.string().email("Valid email is required").transform((s) => s.toLowerCase().trim()),
-  orgRole: OrgRoleSchema.default("member"),
-  permissions: z.array(FlatPermissionSchema).default([])
-});
-const INVITE_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
-const GET = async ({ locals }) => {
-  requireManageOrgMembers(locals);
-  const ctx = locals.ctx;
-  if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
-  try {
-    const page = await getInviteStore().listByOrg(ctx, ctx.actingOrgId, { limit: 200 });
-    const invites = page.items.map(({ tokenHash: _omit, ...rest }) => rest);
-    return json({ invites });
-  } catch (err) {
-    handleApiError(err, "Failed to list invites");
-  }
-};
-const POST = async ({ request, locals, url }) => {
-  requireManageOrgMembers(locals);
-  const ctx = locals.ctx;
-  const user = locals.user;
-  if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
-  const body = await request.json().catch(() => null);
-  const parsed = CreateBody.safeParse(body);
-  if (!parsed.success) throwZodError(parsed.error);
-  try {
-    const { org: submittedOrgPerms } = splitFlatPermissions(parsed.data.permissions);
-    const orgPermissions = parsed.data.orgRole === "member" ? submittedOrgPerms.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[parsed.data.orgRole]];
-    const rawToken = mintRawToken();
-    const now = /* @__PURE__ */ new Date();
-    const invite = {
-      id: randomUUID(),
-      tokenHash: hashToken(rawToken),
-      email: parsed.data.email,
-      orgId: ctx.actingOrgId,
-      orgRole: parsed.data.orgRole,
-      orgPermissions,
-      invitedBy: user.id,
-      createdAt: now.toISOString(),
-      expiresAt: new Date(now.getTime() + INVITE_TTL_MS).toISOString()
-    };
-    await getInviteStore().create(ctx, invite);
-    const acceptUrl = `${url.origin}/accept-invite?token=${rawToken}`;
-    const { tokenHash: _omit, ...inviteForClient } = invite;
-    return json({ invite: inviteForClient, acceptUrl }, { status: 201 });
-  } catch (err) {
-    handleApiError(err, "Failed to create invite");
-  }
-};
-
-export { GET, POST };
-//# sourceMappingURL=_server.ts-BVpHuRup.js.map

package/build/server/chunks/_server.ts-BVpHuRup.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-BVpHuRup.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/invites/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\nimport { z } from \"zod\";\nimport { j as getInviteStore } from \"../../../../chunks/providers.server.js\";\nimport { y as requireManageOrgMembers } from \"../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from \"../../../../chunks/api-errors.js\";\nimport { P as PlatformPermissionSchema, d as OrgPermissionSchema, e as OrgRoleSchema, M as MEMBER_ASSIGNABLE_PERMISSIONS, D as DEFAULT_ORG_PERMISSIONS } from \"../../../../chunks/context.js\";\nimport { s as splitFlatPermissions } from \"../../../../chunks/permissions-compat.server.js\";\nimport { m as mintRawToken, h as hashToken } from \"../../../../chunks/token.server2.js\";\nconst FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);\nconst CreateBody = z.object({\n  email: z.string().email(\"Valid email is required\").transform((s) => s.toLowerCase().trim()),\n  orgRole: OrgRoleSchema.default(\"member\"),\n  permissions: z.array(FlatPermissionSchema).default([])\n});\nconst INVITE_TTL_MS = 7 * 24 * 60 * 60 * 1e3;\nconst GET = async ({ locals }) => {\n  requireManageOrgMembers(locals);\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n  try {\n    const page = await getInviteStore().listByOrg(ctx, ctx.actingOrgId, { limit: 200 });\n    const invites = page.items.map(({ tokenHash: _omit, ...rest }) => rest);\n    return json({ invites });\n  } catch (err) {\n    handleApiError(err, \"Failed to list invites\");\n  }\n};\nconst POST = async ({ request, locals, url }) => {\n  requireManageOrgMembers(locals);\n  const ctx = locals.ctx;\n  const user = locals.user;\n  if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n  const body = await request.json().catch(() => null);\n  const parsed = CreateBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  try {\n    const { org: submittedOrgPerms } = splitFlatPermissions(parsed.data.permissions);\n    const orgPermissions = parsed.data.orgRole === \"member\" ? submittedOrgPerms.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[parsed.data.orgRole]];\n    const rawToken = mintRawToken();\n    const now = /* @__PURE__ */ new Date();\n    const invite = {\n      id: randomUUID(),\n      tokenHash: hashToken(rawToken),\n      email: parsed.data.email,\n      orgId: ctx.actingOrgId,\n      orgRole: parsed.data.orgRole,\n      orgPermissions,\n      invitedBy: user.id,\n      createdAt: now.toISOString(),\n      expiresAt: new Date(now.getTime() + INVITE_TTL_MS).toISOString()\n    };\n    await getInviteStore().create(ctx, invite);\n    const acceptUrl = `${url.origin}/accept-invite?token=${rawToken}`;\n    const { tokenHash: _omit, ...inviteForClient } = invite;\n    return json({ invite: inviteForClient, acceptUrl }, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to create invite\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AASA,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;AACrF,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;AAC5B,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AAC7F,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;AAC1C,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE;AACvD,CAAC,CAAC;AACF,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG;AACvC,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC/F,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACvF,IAAI,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC;AAC3E,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;AAC5B,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AACjD,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACjD,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AAC1B,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC/F,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;AAC3C,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI;AACN,IAAI,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;AACpF,IAAI,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC5L,IAAI,MAAM,QAAQ,GAAG,YAAY,EAAE;AACnC,IAAI,MAAM,GAAG,mBAAmB,IAAI,IAAI,EAAE;AAC1C,IAAI,MAAM,MAAM,GAAG;AACnB,MAAM,EAAE,EAAE,UAAU,EAAE;AACtB,MAAM,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC;AACpC,MAAM,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;AAC9B,MAAM,KAAK,EAAE,GAAG,CAAC,WAAW;AAC5B,MAAM,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;AAClC,MAAM,cAAc;AACpB,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;AAClC,MAAM,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,WAAW;AACpE,KAAK;AACL,IAAI,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC;AAC9C,IAAI,MAAM,SAAS,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;AACrE,IAAI,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,eAAe,EAAE,GAAG,MAAM;AAC3D,IAAI,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACxE,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAClD,EAAE;AACF;;;;"}

package/build/server/chunks/_server.ts-BplW_hNF.js

@@ -1,43 +0,0 @@
-import { j as getInviteStore } from './providers.server-C3fQ7ZdV.js';
-import { y as requireManageOrgMembers } from './access.server-Rd56k7vs.js';
-import { a as apiError, A as ApiErrorCode, h as handleApiError } from './api-errors-BrqxD-El.js';
-import './shared-server-C3WdcJCQ.js';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import './context-BJnJL8ES.js';
-import 'zod';
-import 'node:crypto';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import '@sveltejs/kit';
-import '@selvajs/compute/core';
-import './utils2-BqfluBM6.js';
-
-const DELETE = async ({ params, locals }) => {
-  requireManageOrgMembers(locals);
-  const ctx = locals.ctx;
-  if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
-  const id = params.id;
-  try {
-    const store = getInviteStore();
-    let cursor;
-    let found = false;
-    do {
-      const page = await store.listByOrg(ctx, ctx.actingOrgId, { limit: 200, cursor });
-      if (page.items.some((i) => i.id === id)) {
-        found = true;
-        break;
-      }
-      cursor = page.nextCursor ?? void 0;
-    } while (cursor);
-    if (!found) apiError(404, ApiErrorCode.NOT_FOUND, "Invite not found");
-    await store.revoke(ctx, id);
-    return new Response(null, { status: 204 });
-  } catch (err) {
-    handleApiError(err, "Failed to revoke invite");
-  }
-};
-
-export { DELETE };
-//# sourceMappingURL=_server.ts-BplW_hNF.js.map