@selvajs/selva 4.7.0-beta.2 → 4.7.0-beta.3

package/build/server/chunks/entries/endpoints/api/invites/_id_/_server.ts.js-cWS2efNi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-cWS2efNi.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/invites/_id_/_server.ts.js"],"sourcesContent":["import { d as getInviteStore } from \"../../../../../chunks/providers.server.js\";\nimport { x as requireManageOrgMembers } from \"../../../../../chunks/access.server.js\";\nimport { n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\n//#region src/routes/api/invites/[id]/+server.ts\nvar DELETE = async ({ params, locals }) => {\n\trequireManageOrgMembers(locals);\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tconst id = params.id;\n\ttry {\n\t\tconst store = getInviteStore();\n\t\tlet cursor;\n\t\tlet found = false;\n\t\tdo {\n\t\t\tconst page = await store.listByOrg(ctx, ctx.actingOrgId, {\n\t\t\t\tlimit: 200,\n\t\t\t\tcursor\n\t\t\t});\n\t\t\tif (page.items.some((i) => i.id === id)) {\n\t\t\t\tfound = true;\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tcursor = page.nextCursor ?? void 0;\n\t\t} while (cursor);\n\t\tif (!found) apiError(404, ApiErrorCode.NOT_FOUND, \"Invite not found\");\n\t\tawait store.revoke(ctx, id);\n\t\treturn new Response(null, { status: 204 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to revoke invite\");\n\t}\n};\n//#endregion\nexport { DELETE };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAGA;AACG,IAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE;AACrB,CAAC,IAAI;AACL,EAAE,MAAM,KAAK,GAAG,cAAc,EAAE;AAChC,EAAE,IAAI,MAAM;AACZ,EAAE,IAAI,KAAK,GAAG,KAAK;AACnB,EAAE,GAAG;AACL,GAAG,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE;AAC5D,IAAI,KAAK,EAAE,GAAG;AACd,IAAI;AACJ,IAAI,CAAC;AACL,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;AAC5C,IAAI,KAAK,GAAG,IAAI;AAChB,IAAI;AACJ,GAAG;AACH,GAAG,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC;AACrC,EAAE,CAAC,QAAQ,MAAM;AACjB,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,kBAAkB,CAAC;AACvE,EAAE,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AAC7B,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAChD,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/invites/_server.ts.js-BjYy4eQf.js

@@ -0,0 +1,77 @@
+import { M as MEMBER_ASSIGNABLE_PERMISSIONS, D as DEFAULT_ORG_PERMISSIONS, k as OrgRoleSchema, P as PlatformPermissionSchema, b as OrgPermissionSchema } from '../../../../chunks/src.js-BeFXhqDJ.js';
+import { t as getInviteStore } from '../../../../chunks/providers.server.js-Ck45V_zF.js';
+import { j as requireManageOrgMembers } from '../../../../chunks/access.server.js-B3kl0hR3.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from '../../../../chunks/api-errors.js-DNy3MKq4.js';
+import { s as splitFlatPermissions } from '../../../../chunks/permissions-compat.server.js-D5YyH3mo.js';
+import { m as mintRawToken, h as hashToken } from '../../../../chunks/token2.server.js-D_ltSz_6.js';
+import { json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { randomUUID } from 'node:crypto';
+import '../../../../chunks/shared-server.js-DA4m8f1m.js';
+import '../../../../chunks/limits.js-DfZnOKg5.js';
+import '../../../../chunks/chunk-Y3M7P3BW.js-qwxSY5dh.js';
+import '../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../chunks/utils2.js-B5FjFEwk.js';
+import '../../../../chunks/token-codec.js-CxK2DiO-.js';
+
+//#region src/routes/api/invites/+server.ts
+var FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);
+var CreateBody = z.object({
+	email: z.string().email("Valid email is required").transform((s) => s.toLowerCase().trim()),
+	orgRole: OrgRoleSchema.default("member"),
+	permissions: z.array(FlatPermissionSchema).default([])
+});
+var INVITE_TTL_MS = 10080 * 60 * 1e3;
+var GET = async ({ locals }) => {
+	requireManageOrgMembers(locals);
+	const ctx = locals.ctx;
+	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
+	try {
+		return json({ invites: (await getInviteStore().listByOrg(ctx, ctx.actingOrgId, { limit: 200 })).items.map(({ tokenHash: _omit, ...rest }) => rest) });
+	} catch (err) {
+		handleApiError(err, "Failed to list invites");
+	}
+};
+var POST = async ({ request, locals, url }) => {
+	requireManageOrgMembers(locals);
+	const ctx = locals.ctx;
+	const user = locals.user;
+	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
+	const body = await request.json().catch(() => null);
+	const parsed = CreateBody.safeParse(body);
+	if (!parsed.success) throwZodError(parsed.error);
+	try {
+		const { org: submittedOrgPerms } = splitFlatPermissions(parsed.data.permissions);
+		const orgPermissions = parsed.data.orgRole === "member" ? submittedOrgPerms.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[parsed.data.orgRole]];
+		const rawToken = mintRawToken();
+		const now = /* @__PURE__ */ new Date();
+		const invite = {
+			id: randomUUID(),
+			tokenHash: hashToken(rawToken),
+			email: parsed.data.email,
+			orgId: ctx.actingOrgId,
+			orgRole: parsed.data.orgRole,
+			orgPermissions,
+			invitedBy: user.id,
+			createdAt: now.toISOString(),
+			expiresAt: new Date(now.getTime() + INVITE_TTL_MS).toISOString()
+		};
+		await getInviteStore().create(ctx, invite);
+		const acceptUrl = `${url.origin}/accept-invite?token=${rawToken}`;
+		const { tokenHash: _omit, ...inviteForClient } = invite;
+		return json({
+			invite: inviteForClient,
+			acceptUrl
+		}, { status: 201 });
+	} catch (err) {
+		handleApiError(err, "Failed to create invite");
+	}
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-BjYy4eQf.js.map

package/build/server/chunks/entries/endpoints/api/invites/_server.ts.js-BjYy4eQf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-BjYy4eQf.js","sources":["../../../../../../../.svelte-kit/output/server/entries/endpoints/api/invites/_server.ts.js"],"sourcesContent":["import { S as OrgRoleSchema, T as PlatformPermissionSchema, _ as DEFAULT_ORG_PERMISSIONS, v as MEMBER_ASSIGNABLE_PERMISSIONS, x as OrgPermissionSchema } from \"../../../../chunks/src.js\";\nimport { d as getInviteStore } from \"../../../../chunks/providers.server.js\";\nimport { x as requireManageOrgMembers } from \"../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../chunks/api-errors.js\";\nimport { n as splitFlatPermissions } from \"../../../../chunks/permissions-compat.server.js\";\nimport { n as mintRawToken, t as hashToken } from \"../../../../chunks/token2.server.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/api/invites/+server.ts\nvar FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);\nvar CreateBody = z.object({\n\temail: z.string().email(\"Valid email is required\").transform((s) => s.toLowerCase().trim()),\n\torgRole: OrgRoleSchema.default(\"member\"),\n\tpermissions: z.array(FlatPermissionSchema).default([])\n});\nvar INVITE_TTL_MS = 10080 * 60 * 1e3;\nvar GET = async ({ locals }) => {\n\trequireManageOrgMembers(locals);\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\ttry {\n\t\treturn json({ invites: (await getInviteStore().listByOrg(ctx, ctx.actingOrgId, { limit: 200 })).items.map(({ tokenHash: _omit, ...rest }) => rest) });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to list invites\");\n\t}\n};\nvar POST = async ({ request, locals, url }) => {\n\trequireManageOrgMembers(locals);\n\tconst ctx = locals.ctx;\n\tconst user = locals.user;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tconst body = await request.json().catch(() => null);\n\tconst parsed = CreateBody.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\ttry {\n\t\tconst { org: submittedOrgPerms } = splitFlatPermissions(parsed.data.permissions);\n\t\tconst orgPermissions = parsed.data.orgRole === \"member\" ? submittedOrgPerms.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[parsed.data.orgRole]];\n\t\tconst rawToken = mintRawToken();\n\t\tconst now = /* @__PURE__ */ new Date();\n\t\tconst invite = {\n\t\t\tid: randomUUID(),\n\t\t\ttokenHash: hashToken(rawToken),\n\t\t\temail: parsed.data.email,\n\t\t\torgId: ctx.actingOrgId,\n\t\t\torgRole: parsed.data.orgRole,\n\t\t\torgPermissions,\n\t\t\tinvitedBy: user.id,\n\t\t\tcreatedAt: now.toISOString(),\n\t\t\texpiresAt: new Date(now.getTime() + INVITE_TTL_MS).toISOString()\n\t\t};\n\t\tawait getInviteStore().create(ctx, invite);\n\t\tconst acceptUrl = `${url.origin}/accept-invite?token=${rawToken}`;\n\t\tconst { tokenHash: _omit, ...inviteForClient } = invite;\n\t\treturn json({\n\t\t\tinvite: inviteForClient,\n\t\t\tacceptUrl\n\t\t}, { status: 201 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to create invite\");\n\t}\n};\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AASA;AACA,IAAI,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;AACnF,IAAI,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;AAC1B,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AAC5F,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;AACzC,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE;AACtD,CAAC,CAAC;AACF,IAAI,aAAa,GAAG,KAAK,GAAG,EAAE,GAAG,GAAG;AACjC,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAChC,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,IAAI;AACL,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,cAAc,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;AACvJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAC/C,CAAC;AACD;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AAC/C,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AACzB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1C,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,IAAI;AACL,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;AAClF,EAAE,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC1L,EAAE,MAAM,QAAQ,GAAG,YAAY,EAAE;AACjC,EAAE,MAAM,GAAG,mBAAmB,IAAI,IAAI,EAAE;AACxC,EAAE,MAAM,MAAM,GAAG;AACjB,GAAG,EAAE,EAAE,UAAU,EAAE;AACnB,GAAG,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC;AACjC,GAAG,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;AAC3B,GAAG,KAAK,EAAE,GAAG,CAAC,WAAW;AACzB,GAAG,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;AAC/B,GAAG,cAAc;AACjB,GAAG,SAAS,EAAE,IAAI,CAAC,EAAE;AACrB,GAAG,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;AAC/B,GAAG,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,WAAW;AACjE,GAAG;AACH,EAAE,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC;AAC5C,EAAE,MAAM,SAAS,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;AACnE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,eAAe,EAAE,GAAG,MAAM;AACzD,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,MAAM,EAAE,eAAe;AAC1B,GAAG;AACH,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAChD,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/me/starred/_guid_/_server.ts.js-tNrXBN5E.js

@@ -0,0 +1,45 @@
+import { u as getUserProfileStore } from '../../../../../../chunks/providers.server.js-Ck45V_zF.js';
+import { a as apiError, h as handleApiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-DNy3MKq4.js';
+import { json } from '@sveltejs/kit';
+import '../../../../../../chunks/shared-server.js-DA4m8f1m.js';
+import '../../../../../../chunks/src.js-BeFXhqDJ.js';
+import 'zod';
+import '../../../../../../chunks/limits.js-DfZnOKg5.js';
+import '../../../../../../chunks/chunk-Y3M7P3BW.js-qwxSY5dh.js';
+import '../../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/utils2.js-B5FjFEwk.js';
+
+//#region src/routes/api/me/starred/[guid]/+server.ts
+/** Star a definition for the current user. No-op if already starred. */
+var POST = async ({ params, locals }) => {
+	if (!locals.user || !locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
+	const guid = params.guid;
+	if (!guid) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing definition guid");
+	try {
+		await getUserProfileStore().starDefinition(locals.ctx, locals.user.id, guid);
+		return json({ starred: true });
+	} catch (err) {
+		handleApiError(err, "Failed to star definition");
+	}
+};
+/** Unstar a definition for the current user. No-op if not starred. */
+var DELETE = async ({ params, locals }) => {
+	if (!locals.user || !locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
+	const guid = params.guid;
+	if (!guid) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing definition guid");
+	try {
+		await getUserProfileStore().unstarDefinition(locals.ctx, locals.user.id, guid);
+		return json({ starred: false });
+	} catch (err) {
+		handleApiError(err, "Failed to unstar definition");
+	}
+};
+
+export { DELETE, POST };
+//# sourceMappingURL=_server.ts.js-tNrXBN5E.js.map

package/build/server/chunks/entries/endpoints/api/me/starred/_guid_/_server.ts.js-tNrXBN5E.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-tNrXBN5E.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/me/starred/_guid_/_server.ts.js"],"sourcesContent":["import { x as getUserProfileStore } from \"../../../../../../chunks/providers.server.js\";\nimport { n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/me/starred/[guid]/+server.ts\n/** Star a definition for the current user. No-op if already starred. */\nvar POST = async ({ params, locals }) => {\n\tif (!locals.user || !locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n\tconst guid = params.guid;\n\tif (!guid) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing definition guid\");\n\ttry {\n\t\tawait getUserProfileStore().starDefinition(locals.ctx, locals.user.id, guid);\n\t\treturn json({ starred: true });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to star definition\");\n\t}\n};\n/** Unstar a definition for the current user. No-op if not starred. */\nvar DELETE = async ({ params, locals }) => {\n\tif (!locals.user || !locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n\tconst guid = params.guid;\n\tif (!guid) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing definition guid\");\n\ttry {\n\t\tawait getUserProfileStore().unstarDefinition(locals.ctx, locals.user.id, guid);\n\t\treturn json({ starred: false });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to unstar definition\");\n\t}\n};\n//#endregion\nexport { DELETE, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAGA;AACA;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AACzC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC1F,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AACzB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACpF,CAAC,IAAI;AACL,EAAE,MAAM,mBAAmB,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;AAC9E,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAChC,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,2BAA2B,CAAC;AAClD,CAAC;AACD;AACA;AACG,IAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC1F,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AACzB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACpF,CAAC,IAAI;AACL,EAAE,MAAM,mBAAmB,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;AAChF,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACjC,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACpD,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/org/compute/_server.ts.js-DKhLOB_A.js

@@ -0,0 +1,110 @@
+import '../../../../../chunks/src.js-BeFXhqDJ.js';
+import { n as getComputeServerConfigStore, y as isOrgServer, m as isPlatformServer, k as flag } from '../../../../../chunks/providers.server.js-Ck45V_zF.js';
+import { s as serversVisibleTo } from '../../../../../chunks/utils2.js-B5FjFEwk.js';
+import { s as requireManageOrgCompute } from '../../../../../chunks/access.server.js-B3kl0hR3.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-DNy3MKq4.js';
+import { e as evictChangedServers } from '../../../../../chunks/evictChangedServers.js-Cym-2rnu.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../chunks/shared-server.js-DA4m8f1m.js';
+import '../../../../../chunks/limits.js-DfZnOKg5.js';
+import '../../../../../chunks/chunk-Y3M7P3BW.js-qwxSY5dh.js';
+import '../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../chunks/clientCache.server.js-DnMvUcHP.js';
+import '../../../../../chunks/chunk-3SEQKFGD.js-hLBC6n0U.js';
+import '../../../../../chunks/compute.js-C2CcEWW8.js';
+import 'node:zlib';
+import 'node:util';
+import 'node:dns/promises';
+import 'node:net';
+import '../../../../../chunks/computeLimits.js-vDIRMhzi.js';
+
+//#region src/routes/api/org/compute/+server.ts
+function requireFlag() {
+	if (!flag("ALLOW_ORG_COMPUTE_OVERRIDE")) apiError(403, ApiErrorCode.FORBIDDEN, "Per-org compute override is disabled on this instance (ALLOW_ORG_COMPUTE_OVERRIDE).");
+}
+var GET = async ({ locals }) => {
+	requireFlag();
+	requireManageOrgCompute(locals);
+	const ctx = locals.ctx;
+	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
+	const config = await getComputeServerConfigStore().getConfig(ctx);
+	const orgId = ctx.actingOrgId;
+	const owned = config.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => {
+		const { apiKey: _apiKey, hasApiKey, ...rest } = s;
+		return {
+			...rest,
+			hasApiKey: !!hasApiKey
+		};
+	});
+	const catalog = serversVisibleTo(config, orgId).map((s) => ({
+		id: s.id,
+		label: s.label,
+		serverUrl: s.serverUrl,
+		scope: s.scope,
+		source: isPlatformServer(s) ? "platform" : "org",
+		timeoutMs: s.timeoutMs,
+		retryCount: s.retryCount
+	}));
+	return json({
+		servers: owned,
+		defaultServerId: config.orgDefaults?.[orgId] ?? null,
+		globalDefaultServerId: config.defaultServerId ?? null,
+		catalog
+	});
+};
+var PUT = async ({ request, locals }) => {
+	requireFlag();
+	requireManageOrgCompute(locals);
+	const ctx = locals.ctx;
+	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
+	const orgId = ctx.actingOrgId;
+	const body = await request.json().catch(() => null);
+	if (!body || typeof body !== "object") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid request body");
+	const incoming = body;
+	if (!Array.isArray(incoming.servers)) apiError(400, ApiErrorCode.VALIDATION_FAILED, "servers must be an array");
+	for (const s of incoming.servers) {
+		if (!s.id || typeof s.id !== "string") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Each server needs an id");
+		if (!s.label || typeof s.label !== "string") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Each server needs a label");
+		if (!s.serverUrl || typeof s.serverUrl !== "string") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Each server needs a serverUrl");
+		try {
+			new URL(s.serverUrl);
+		} catch {
+			apiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid serverUrl: ${s.serverUrl}`);
+		}
+		if (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== "string") apiError(400, ApiErrorCode.VALIDATION_FAILED, "apiKey must be a string, null, or omitted");
+	}
+	const provider = getComputeServerConfigStore();
+	const existing = await provider.getConfig(ctx, { includeApiKeys: true });
+	const storedKeyById = new Map(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => [s.id, s.apiKey]));
+	const next = incoming.servers.map((s) => ({
+		id: s.id,
+		scope: "org",
+		ownerOrgId: orgId,
+		label: s.label,
+		serverUrl: s.serverUrl,
+		timeoutMs: s.timeoutMs,
+		retryCount: s.retryCount,
+		apiKey: s.apiKey === null ? void 0 : s.apiKey ? s.apiKey : storedKeyById.get(s.id)
+	}));
+	if (typeof incoming.defaultServerId === "string") {
+		const projected = {
+			servers: [...existing.servers.filter((s) => !(isOrgServer(s) && s.ownerOrgId === orgId)), ...next],
+			defaultServerId: existing.defaultServerId,
+			orgDefaults: existing.orgDefaults
+		};
+		if (!new Set(serversVisibleTo(projected, orgId).map((s) => s.id)).has(incoming.defaultServerId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, "defaultServerId must reference a server visible to this organization");
+	}
+	await provider.saveOrgServers(ctx, orgId, next, incoming.defaultServerId);
+	evictChangedServers(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId), next);
+	return new Response(null, { status: 204 });
+};
+
+export { GET, PUT };
+//# sourceMappingURL=_server.ts.js-DKhLOB_A.js.map

package/build/server/chunks/entries/endpoints/api/org/compute/_server.ts.js-DKhLOB_A.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-DKhLOB_A.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/org/compute/_server.ts.js"],"sourcesContent":["import \"../../../../../chunks/src.js\";\nimport { F as isPlatformServer, P as isOrgServer, a as getComputeServerConfigStore, t as flag } from \"../../../../../chunks/providers.server.js\";\nimport { a as serversVisibleTo } from \"../../../../../chunks/utils2.js\";\nimport { b as requireManageOrgCompute } from \"../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { t as evictChangedServers } from \"../../../../../chunks/evictChangedServers.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/org/compute/+server.ts\nfunction requireFlag() {\n\tif (!flag(\"ALLOW_ORG_COMPUTE_OVERRIDE\")) apiError(403, ApiErrorCode.FORBIDDEN, \"Per-org compute override is disabled on this instance (ALLOW_ORG_COMPUTE_OVERRIDE).\");\n}\nvar GET = async ({ locals }) => {\n\trequireFlag();\n\trequireManageOrgCompute(locals);\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tconst config = await getComputeServerConfigStore().getConfig(ctx);\n\tconst orgId = ctx.actingOrgId;\n\tconst owned = config.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => {\n\t\tconst { apiKey: _apiKey, hasApiKey, ...rest } = s;\n\t\treturn {\n\t\t\t...rest,\n\t\t\thasApiKey: !!hasApiKey\n\t\t};\n\t});\n\tconst catalog = serversVisibleTo(config, orgId).map((s) => ({\n\t\tid: s.id,\n\t\tlabel: s.label,\n\t\tserverUrl: s.serverUrl,\n\t\tscope: s.scope,\n\t\tsource: isPlatformServer(s) ? \"platform\" : \"org\",\n\t\ttimeoutMs: s.timeoutMs,\n\t\tretryCount: s.retryCount\n\t}));\n\treturn json({\n\t\tservers: owned,\n\t\tdefaultServerId: config.orgDefaults?.[orgId] ?? null,\n\t\tglobalDefaultServerId: config.defaultServerId ?? null,\n\t\tcatalog\n\t});\n};\nvar PUT = async ({ request, locals }) => {\n\trequireFlag();\n\trequireManageOrgCompute(locals);\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tconst orgId = ctx.actingOrgId;\n\tconst body = await request.json().catch(() => null);\n\tif (!body || typeof body !== \"object\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid request body\");\n\tconst incoming = body;\n\tif (!Array.isArray(incoming.servers)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"servers must be an array\");\n\tfor (const s of incoming.servers) {\n\t\tif (!s.id || typeof s.id !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs an id\");\n\t\tif (!s.label || typeof s.label !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs a label\");\n\t\tif (!s.serverUrl || typeof s.serverUrl !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs a serverUrl\");\n\t\ttry {\n\t\t\tnew URL(s.serverUrl);\n\t\t} catch {\n\t\t\tapiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid serverUrl: ${s.serverUrl}`);\n\t\t}\n\t\tif (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"apiKey must be a string, null, or omitted\");\n\t}\n\tconst provider = getComputeServerConfigStore();\n\tconst existing = await provider.getConfig(ctx, { includeApiKeys: true });\n\tconst storedKeyById = new Map(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => [s.id, s.apiKey]));\n\tconst next = incoming.servers.map((s) => ({\n\t\tid: s.id,\n\t\tscope: \"org\",\n\t\townerOrgId: orgId,\n\t\tlabel: s.label,\n\t\tserverUrl: s.serverUrl,\n\t\ttimeoutMs: s.timeoutMs,\n\t\tretryCount: s.retryCount,\n\t\tapiKey: s.apiKey === null ? void 0 : s.apiKey ? s.apiKey : storedKeyById.get(s.id)\n\t}));\n\tif (typeof incoming.defaultServerId === \"string\") {\n\t\tconst projected = {\n\t\t\tservers: [...existing.servers.filter((s) => !(isOrgServer(s) && s.ownerOrgId === orgId)), ...next],\n\t\t\tdefaultServerId: existing.defaultServerId,\n\t\t\torgDefaults: existing.orgDefaults\n\t\t};\n\t\tif (!new Set(serversVisibleTo(projected, orgId).map((s) => s.id)).has(incoming.defaultServerId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"defaultServerId must reference a server visible to this organization\");\n\t}\n\tawait provider.saveOrgServers(ctx, orgId, next, incoming.defaultServerId);\n\tevictChangedServers(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId), next);\n\treturn new Response(null, { status: 204 });\n};\n//#endregion\nexport { GET, PUT };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA;AACA,SAAS,WAAW,GAAG;AACvB,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,qFAAqF,CAAC;AACtK;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAChC,CAAC,WAAW,EAAE;AACd,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC;AAClE,CAAC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC9B,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK;AACjG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC;AACnD,EAAE,OAAO;AACT,GAAG,GAAG,IAAI;AACV,GAAG,SAAS,EAAE,CAAC,CAAC;AAChB,GAAG;AACH,CAAC,CAAC,CAAC;AACH,CAAC,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC7D,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;AACV,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,KAAK;AAClD,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,UAAU,EAAE,CAAC,CAAC;AAChB,EAAE,CAAC,CAAC;AACJ,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,OAAO,EAAE,KAAK;AAChB,EAAE,eAAe,EAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,IAAI,IAAI;AACtD,EAAE,qBAAqB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;AACvD,EAAE;AACF,EAAE,CAAC;AACH;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACzC,CAAC,WAAW,EAAE;AACd,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC9B,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AAC7G,CAAC,MAAM,QAAQ,GAAG,IAAI;AACtB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;AAChH,CAAC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE;AACnC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACjH,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;AACzH,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,+BAA+B,CAAC;AACrI,EAAE,IAAI;AACN,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACvB,EAAE,CAAC,CAAC,MAAM;AACV,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACrF,EAAE;AACF,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2CAA2C,CAAC;AAC1K,CAAC;AACD,CAAC,MAAM,QAAQ,GAAG,2BAA2B,EAAE;AAC/C,CAAC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;AACzE,CAAC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACrI,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC3C,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;AACV,EAAE,KAAK,EAAE,KAAK;AACd,EAAE,UAAU,EAAE,KAAK;AACnB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;AAC1B,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;AACnF,EAAE,CAAC,CAAC;AACJ,CAAC,IAAI,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ,EAAE;AACnD,EAAE,MAAM,SAAS,GAAG;AACpB,GAAG,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC;AACrG,GAAG,eAAe,EAAE,QAAQ,CAAC,eAAe;AAC5C,GAAG,WAAW,EAAE,QAAQ,CAAC;AACzB,GAAG;AACH,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sEAAsE,CAAC;AACxN,CAAC;AACD,CAAC,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC;AAC1E,CAAC,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,EAAE,IAAI,CAAC;AACpG,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C;;;;"}

package/build/server/chunks/entries/endpoints/api/orgs/_orgId_/members/_userId_/_server.ts.js-BnZq-Y6H.js

@@ -0,0 +1,79 @@
+import { M as MEMBER_ASSIGNABLE_PERMISSIONS, a as ALL_ORG_PERMISSIONS, k as OrgRoleSchema } from '../../../../../../../chunks/src.js-BeFXhqDJ.js';
+import { e as getOrganizationProvider } from '../../../../../../../chunks/providers.server.js-Ck45V_zF.js';
+import { j as requireManageOrgMembers } from '../../../../../../../chunks/access.server.js-B3kl0hR3.js';
+import { a as apiError, t as throwZodError, A as ApiErrorCode, h as handleApiError } from '../../../../../../../chunks/api-errors.js-DNy3MKq4.js';
+import { z } from 'zod';
+import '../../../../../../../chunks/shared-server.js-DA4m8f1m.js';
+import '../../../../../../../chunks/limits.js-DfZnOKg5.js';
+import '../../../../../../../chunks/chunk-Y3M7P3BW.js-qwxSY5dh.js';
+import '../../../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '../../../../../../../chunks/utils2.js-B5FjFEwk.js';
+
+//#region src/routes/api/orgs/[orgId]/members/[userId]/+server.ts
+/**
+* PATCH /api/orgs/[orgId]/members/[userId]
+*
+* Body accepts either or both:
+*   - `{ role: OrgRole }` — change the member's role. **Owner-only** per §3.
+*   - `{ permissions: OrgPermission[] }` — replace the member's grantable
+*     permissions. Owner/admin via `manage_org_members`. For `member`-role
+*     targets, only `MEMBER_ASSIGNABLE_PERMISSIONS` are accepted; promoting a
+*     member's permissions does NOT change their role (that's a separate
+*     branch, owner-only).
+*
+* Tenancy: the URL `orgId` must equal `ctx.actingOrgId`. Cross-org member
+* mutation is blocked even if the actor holds permissions in another org.
+*
+* Self-protection (sole-owner invariant, §10 spirit): the only owner of an
+* org cannot be demoted. Demoting yourself while you are the sole owner is
+* the most common way to discover this — handler returns 409.
+*/
+var PERMISSIONS_SCHEMA = z.array(z.enum(ALL_ORG_PERMISSIONS));
+var PatchSchema = z.object({
+	role: OrgRoleSchema.optional(),
+	permissions: PERMISSIONS_SCHEMA.optional()
+}).refine((b) => b.role !== void 0 || b.permissions !== void 0, { message: "Provide at least one of role, permissions" });
+var PATCH = async ({ params, request, locals }) => {
+	const { orgId, userId } = params;
+	if (!orgId || !userId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing org ID or user ID");
+	requireManageOrgMembers(locals);
+	const ctx = locals.ctx;
+	if (ctx.actingOrgId !== orgId) apiError(403, ApiErrorCode.FORBIDDEN, "Acting org does not match the target org.");
+	const body = await request.json().catch(() => null);
+	const parsed = PatchSchema.safeParse(body);
+	if (!parsed.success) throwZodError(parsed.error);
+	const patch = parsed.data;
+	const orgs = getOrganizationProvider();
+	const [actorMember, target] = await Promise.all([orgs.getOrgMember(ctx, orgId, ctx.userId), orgs.getOrgMember(ctx, orgId, userId)]);
+	if (!target) apiError(404, ApiErrorCode.NOT_FOUND, "Member not found in this organization.");
+	if (!actorMember) apiError(403, ApiErrorCode.FORBIDDEN, "You are not a member of this organization.");
+	if (patch.role !== void 0 && patch.role !== target.role) {
+		if (actorMember.role !== "owner") apiError(403, ApiErrorCode.FORBIDDEN, "Only the org owner can change roles.");
+		if (target.role === "owner" && patch.role !== "owner") {
+			if ((await orgs.listOrgMembers(ctx, orgId, { limit: 200 })).items.filter((m) => m.role === "owner" && m.userId !== target.userId && !m.deletedAt).length === 0) apiError(409, ApiErrorCode.CONFLICT, "Cannot demote the sole owner of this organization. Promote another member to owner first.");
+		}
+		await orgs.updateOrgMemberRole(ctx, orgId, userId, patch.role);
+	}
+	if (patch.permissions !== void 0) {
+		const effectiveRole = patch.role ?? target.role;
+		const valid = effectiveRole === "member" ? new Set(MEMBER_ASSIGNABLE_PERMISSIONS) : new Set(ALL_ORG_PERMISSIONS);
+		const invalid = patch.permissions.filter((p) => !valid.has(p));
+		if (invalid.length > 0) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Permissions [${invalid.join(", ")}] cannot be assigned to a ${effectiveRole}.`);
+		try {
+			await orgs.updateOrgMemberPermissions(ctx, orgId, userId, patch.permissions);
+		} catch (err) {
+			handleApiError(err, "Failed to update permissions");
+		}
+	}
+	return new Response(null, { status: 204 });
+};
+
+export { PATCH };
+//# sourceMappingURL=_server.ts.js-BnZq-Y6H.js.map

package/build/server/chunks/entries/endpoints/api/orgs/_orgId_/members/_userId_/_server.ts.js-BnZq-Y6H.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-BnZq-Y6H.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/orgs/_orgId_/members/_userId_/_server.ts.js"],"sourcesContent":["import { S as OrgRoleSchema, h as ALL_ORG_PERMISSIONS, v as MEMBER_ASSIGNABLE_PERMISSIONS } from \"../../../../../../../chunks/src.js\";\nimport { m as getOrganizationProvider } from \"../../../../../../../chunks/providers.server.js\";\nimport { x as requireManageOrgMembers } from \"../../../../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../../../chunks/api-errors.js\";\nimport { z } from \"zod\";\n//#region src/routes/api/orgs/[orgId]/members/[userId]/+server.ts\n/**\n* PATCH /api/orgs/[orgId]/members/[userId]\n*\n* Body accepts either or both:\n*   - `{ role: OrgRole }` — change the member's role. **Owner-only** per §3.\n*   - `{ permissions: OrgPermission[] }` — replace the member's grantable\n*     permissions. Owner/admin via `manage_org_members`. For `member`-role\n*     targets, only `MEMBER_ASSIGNABLE_PERMISSIONS` are accepted; promoting a\n*     member's permissions does NOT change their role (that's a separate\n*     branch, owner-only).\n*\n* Tenancy: the URL `orgId` must equal `ctx.actingOrgId`. Cross-org member\n* mutation is blocked even if the actor holds permissions in another org.\n*\n* Self-protection (sole-owner invariant, §10 spirit): the only owner of an\n* org cannot be demoted. Demoting yourself while you are the sole owner is\n* the most common way to discover this — handler returns 409.\n*/\nvar PERMISSIONS_SCHEMA = z.array(z.enum(ALL_ORG_PERMISSIONS));\nvar PatchSchema = z.object({\n\trole: OrgRoleSchema.optional(),\n\tpermissions: PERMISSIONS_SCHEMA.optional()\n}).refine((b) => b.role !== void 0 || b.permissions !== void 0, { message: \"Provide at least one of role, permissions\" });\nvar PATCH = async ({ params, request, locals }) => {\n\tconst { orgId, userId } = params;\n\tif (!orgId || !userId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing org ID or user ID\");\n\trequireManageOrgMembers(locals);\n\tconst ctx = locals.ctx;\n\tif (ctx.actingOrgId !== orgId) apiError(403, ApiErrorCode.FORBIDDEN, \"Acting org does not match the target org.\");\n\tconst body = await request.json().catch(() => null);\n\tconst parsed = PatchSchema.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\tconst patch = parsed.data;\n\tconst orgs = getOrganizationProvider();\n\tconst [actorMember, target] = await Promise.all([orgs.getOrgMember(ctx, orgId, ctx.userId), orgs.getOrgMember(ctx, orgId, userId)]);\n\tif (!target) apiError(404, ApiErrorCode.NOT_FOUND, \"Member not found in this organization.\");\n\tif (!actorMember) apiError(403, ApiErrorCode.FORBIDDEN, \"You are not a member of this organization.\");\n\tif (patch.role !== void 0 && patch.role !== target.role) {\n\t\tif (actorMember.role !== \"owner\") apiError(403, ApiErrorCode.FORBIDDEN, \"Only the org owner can change roles.\");\n\t\tif (target.role === \"owner\" && patch.role !== \"owner\") {\n\t\t\tif ((await orgs.listOrgMembers(ctx, orgId, { limit: 200 })).items.filter((m) => m.role === \"owner\" && m.userId !== target.userId && !m.deletedAt).length === 0) apiError(409, ApiErrorCode.CONFLICT, \"Cannot demote the sole owner of this organization. Promote another member to owner first.\");\n\t\t}\n\t\tawait orgs.updateOrgMemberRole(ctx, orgId, userId, patch.role);\n\t}\n\tif (patch.permissions !== void 0) {\n\t\tconst effectiveRole = patch.role ?? target.role;\n\t\tconst valid = effectiveRole === \"member\" ? new Set(MEMBER_ASSIGNABLE_PERMISSIONS) : new Set(ALL_ORG_PERMISSIONS);\n\t\tconst invalid = patch.permissions.filter((p) => !valid.has(p));\n\t\tif (invalid.length > 0) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Permissions [${invalid.join(\", \")}] cannot be assigned to a ${effectiveRole}.`);\n\t\ttry {\n\t\t\tawait orgs.updateOrgMemberPermissions(ctx, orgId, userId, patch.permissions);\n\t\t} catch (err) {\n\t\t\thandleApiError(err, \"Failed to update permissions\");\n\t\t}\n\t}\n\treturn new Response(null, { status: 204 });\n};\n//#endregion\nexport { PATCH };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAKA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAC7D,IAAI,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;AAC3B,CAAC,IAAI,EAAE,aAAa,CAAC,QAAQ,EAAE;AAC/B,CAAC,WAAW,EAAE,kBAAkB,CAAC,QAAQ;AACzC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;AACtH,IAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACnD,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM;AACjC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;AAClG,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,GAAG,CAAC,WAAW,KAAK,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,2CAA2C,CAAC;AAClH,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC;AAC3C,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI;AAC1B,CAAC,MAAM,IAAI,GAAG,uBAAuB,EAAE;AACvC,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AACpI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,wCAAwC,CAAC;AAC7F,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,4CAA4C,CAAC;AACtG,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE;AAC1D,EAAE,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,sCAAsC,CAAC;AACjH,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE;AACzD,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,2FAA2F,CAAC;AACpS,EAAE;AACF,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;AAChE,CAAC;AACD,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,EAAE;AACnC,EAAE,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI;AACjD,EAAE,MAAM,KAAK,GAAG,aAAa,KAAK,QAAQ,GAAG,IAAI,GAAG,CAAC,6BAA6B,CAAC,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC;AAClH,EAAE,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAChE,EAAE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,0BAA0B,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;AACxJ,EAAE,IAAI;AACN,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC;AAC/E,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,cAAc,CAAC,GAAG,EAAE,8BAA8B,CAAC;AACtD,EAAE;AACF,CAAC;AACD,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C;;;;"}

package/build/server/chunks/entries/endpoints/api/projects/_id_/_server.ts.js-DULd1S7H.js

@@ -0,0 +1,72 @@
+import { v as validateProjectFlags, l as ProjectVisibilitySchema } from '../../../../../chunks/src.js-BeFXhqDJ.js';
+import { f as getProjectProvider, e as getOrganizationProvider } from '../../../../../chunks/providers.server.js-Ck45V_zF.js';
+import { u as requireCanManage, v as requireCanEditProjectSettings, w as withAdminBypass, x as canChangeVisibilityToPublic } from '../../../../../chunks/access.server.js-B3kl0hR3.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-DNy3MKq4.js';
+import { s as slugify } from '../../../../../chunks/slug.js-v6x7hAas.js';
+import { z } from 'zod';
+import '../../../../../chunks/shared-server.js-DA4m8f1m.js';
+import '../../../../../chunks/limits.js-DfZnOKg5.js';
+import '../../../../../chunks/chunk-Y3M7P3BW.js-qwxSY5dh.js';
+import '../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '../../../../../chunks/utils2.js-B5FjFEwk.js';
+
+//#region src/routes/api/projects/[id]/+server.ts
+var UpdateProjectBody = z.object({
+	name: z.string().min(1).max(128).trim(),
+	description: z.string().max(2e3).nullish(),
+	visibility: ProjectVisibilitySchema,
+	autoJoinOnUpload: z.boolean()
+}).partial();
+var PATCH = async ({ params, request, locals }) => {
+	const { id } = params;
+	if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
+	const { ctx, project: existing } = await requireCanEditProjectSettings(locals, id);
+	const body = await request.json().catch(() => null);
+	const parsed = UpdateProjectBody.safeParse(body);
+	if (!parsed.success) throwZodError(parsed.error);
+	if (parsed.data.visibility !== void 0 && parsed.data.visibility === "public" && existing.visibility !== "public") {
+		const orgMember = await getOrganizationProvider().getOrgMember(ctx, existing.orgId, ctx.userId);
+		if (!withAdminBypass(ctx.platformPermissions, () => canChangeVisibilityToPublic({ orgMember }))) apiError(403, ApiErrorCode.FORBIDDEN, "Only org owners or admins can make a project public.");
+	}
+	const flagIssues = validateProjectFlags({
+		visibility: parsed.data.visibility ?? existing.visibility,
+		autoJoinOnUpload: parsed.data.autoJoinOnUpload ?? existing.autoJoinOnUpload
+	});
+	if (flagIssues.length > 0) apiError(400, ApiErrorCode.VALIDATION_FAILED, flagIssues.map((i) => `${i.path}: ${i.message}`).join("; "));
+	const patch = {};
+	if (parsed.data.name !== void 0) {
+		patch.name = parsed.data.name;
+		patch.slug = slugify(parsed.data.name);
+	}
+	if (parsed.data.description !== void 0) patch.description = parsed.data.description ?? void 0;
+	if (parsed.data.visibility !== void 0) patch.visibility = parsed.data.visibility;
+	if (parsed.data.autoJoinOnUpload !== void 0) patch.autoJoinOnUpload = parsed.data.autoJoinOnUpload;
+	try {
+		await getProjectProvider().updateProject(ctx, id, patch);
+		return new Response(null, { status: 204 });
+	} catch (err) {
+		handleApiError(err, "Failed to update project");
+	}
+};
+var DELETE = async ({ params, locals }) => {
+	const { id } = params;
+	if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
+	await requireCanManage(locals, id);
+	const ctx = locals.ctx;
+	try {
+		await getProjectProvider().deleteProject(ctx, id);
+		return new Response(null, { status: 204 });
+	} catch (err) {
+		handleApiError(err, "Failed to delete project");
+	}
+};
+
+export { DELETE, PATCH };
+//# sourceMappingURL=_server.ts.js-DULd1S7H.js.map

package/build/server/chunks/entries/endpoints/api/projects/_id_/_server.ts.js-DULd1S7H.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-DULd1S7H.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/projects/_id_/_server.ts.js"],"sourcesContent":["import { m as validateProjectFlags, p as ProjectVisibilitySchema } from \"../../../../../chunks/src.js\";\nimport { _ as getProjectProvider, m as getOrganizationProvider } from \"../../../../../chunks/providers.server.js\";\nimport { O as withAdminBypass, l as requireCanEditProjectSettings, u as requireCanManage, w as canChangeVisibilityToPublic } from \"../../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { t as slugify } from \"../../../../../chunks/slug.js\";\nimport { z } from \"zod\";\n//#region src/routes/api/projects/[id]/+server.ts\nvar UpdateProjectBody = z.object({\n\tname: z.string().min(1).max(128).trim(),\n\tdescription: z.string().max(2e3).nullish(),\n\tvisibility: ProjectVisibilitySchema,\n\tautoJoinOnUpload: z.boolean()\n}).partial();\nvar PATCH = async ({ params, request, locals }) => {\n\tconst { id } = params;\n\tif (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID\");\n\tconst { ctx, project: existing } = await requireCanEditProjectSettings(locals, id);\n\tconst body = await request.json().catch(() => null);\n\tconst parsed = UpdateProjectBody.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\tif (parsed.data.visibility !== void 0 && parsed.data.visibility === \"public\" && existing.visibility !== \"public\") {\n\t\tconst orgMember = await getOrganizationProvider().getOrgMember(ctx, existing.orgId, ctx.userId);\n\t\tif (!withAdminBypass(ctx.platformPermissions, () => canChangeVisibilityToPublic({ orgMember }))) apiError(403, ApiErrorCode.FORBIDDEN, \"Only org owners or admins can make a project public.\");\n\t}\n\tconst flagIssues = validateProjectFlags({\n\t\tvisibility: parsed.data.visibility ?? existing.visibility,\n\t\tautoJoinOnUpload: parsed.data.autoJoinOnUpload ?? existing.autoJoinOnUpload\n\t});\n\tif (flagIssues.length > 0) apiError(400, ApiErrorCode.VALIDATION_FAILED, flagIssues.map((i) => `${i.path}: ${i.message}`).join(\"; \"));\n\tconst patch = {};\n\tif (parsed.data.name !== void 0) {\n\t\tpatch.name = parsed.data.name;\n\t\tpatch.slug = slugify(parsed.data.name);\n\t}\n\tif (parsed.data.description !== void 0) patch.description = parsed.data.description ?? void 0;\n\tif (parsed.data.visibility !== void 0) patch.visibility = parsed.data.visibility;\n\tif (parsed.data.autoJoinOnUpload !== void 0) patch.autoJoinOnUpload = parsed.data.autoJoinOnUpload;\n\ttry {\n\t\tawait getProjectProvider().updateProject(ctx, id, patch);\n\t\treturn new Response(null, { status: 204 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to update project\");\n\t}\n};\nvar DELETE = async ({ params, locals }) => {\n\tconst { id } = params;\n\tif (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID\");\n\tawait requireCanManage(locals, id);\n\tconst ctx = locals.ctx;\n\ttry {\n\t\tawait getProjectProvider().deleteProject(ctx, id);\n\t\treturn new Response(null, { status: 204 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to delete project\");\n\t}\n};\n//#endregion\nexport { DELETE, PATCH };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAMA;AACA,IAAI,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;AACjC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACxC,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE;AAC3C,CAAC,UAAU,EAAE,uBAAuB;AACpC,CAAC,gBAAgB,EAAE,CAAC,CAAC,OAAO;AAC5B,CAAC,CAAC,CAAC,OAAO,EAAE;AACT,IAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACnD,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACtB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;AAC7E,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,6BAA6B,CAAC,MAAM,EAAE,EAAE,CAAC;AACnF,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC;AACjD,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,EAAE;AACnH,EAAE,MAAM,SAAS,GAAG,MAAM,uBAAuB,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC;AACjG,EAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,mBAAmB,EAAE,MAAM,2BAA2B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,sDAAsD,CAAC;AAChM,CAAC;AACD,CAAC,MAAM,UAAU,GAAG,oBAAoB,CAAC;AACzC,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU;AAC3D,EAAE,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,QAAQ,CAAC;AAC7D,EAAE,CAAC;AACH,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtI,CAAC,MAAM,KAAK,GAAG,EAAE;AACjB,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE;AAClC,EAAE,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI;AAC/B,EAAE,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;AACxC,CAAC;AACD,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,MAAM,EAAE,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,MAAM;AAC9F,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,MAAM,EAAE,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU;AACjF,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,KAAK,MAAM,EAAE,KAAK,CAAC,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB;AACnG,CAAC,IAAI;AACL,EAAE,MAAM,kBAAkB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC;AAC1D,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACjD,CAAC;AACD;AACG,IAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACtB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;AAC7E,CAAC,MAAM,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAAC;AACnC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI;AACL,EAAE,MAAM,kBAAkB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC;AACnD,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACjD,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/projects/_id_/members/_server.ts.js-B7OiwPPa.js

@@ -0,0 +1,65 @@
+import { m as ProjectRoleSchema } from '../../../../../../chunks/src.js-BeFXhqDJ.js';
+import { f as getProjectProvider } from '../../../../../../chunks/providers.server.js-Ck45V_zF.js';
+import { y as requireCanManageMembers, z as requireTargetIsOrgMember } from '../../../../../../chunks/access.server.js-B3kl0hR3.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-DNy3MKq4.js';
+import { json } from '@sveltejs/kit';
+import { z } from 'zod';
+import '../../../../../../chunks/shared-server.js-DA4m8f1m.js';
+import '../../../../../../chunks/limits.js-DfZnOKg5.js';
+import '../../../../../../chunks/chunk-Y3M7P3BW.js-qwxSY5dh.js';
+import '../../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/utils2.js-B5FjFEwk.js';
+
+//#region src/routes/api/projects/[id]/members/+server.ts
+var AddMemberSchema = z.object({
+	userId: z.string().min(1, "userId is required"),
+	role: ProjectRoleSchema
+});
+var GET = async ({ params, locals }) => {
+	const { id } = params;
+	if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
+	await requireCanManageMembers(locals, id);
+	const ctx = locals.ctx;
+	try {
+		return json({ members: (await getProjectProvider().listProjectMembers(ctx, id, { limit: 200 })).items });
+	} catch (err) {
+		handleApiError(err, "Failed to load members");
+	}
+};
+var POST = async ({ params, request, locals }) => {
+	const { id } = params;
+	if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
+	await requireCanManageMembers(locals, id);
+	const ctx = locals.ctx;
+	const body = await request.json().catch(() => null);
+	const parsed = AddMemberSchema.safeParse(body);
+	if (!parsed.success) throwZodError(parsed.error);
+	const project = await getProjectProvider().getProject(ctx, id);
+	if (!project) apiError(404, ApiErrorCode.NOT_FOUND, "Project not found");
+	await requireTargetIsOrgMember(locals, project.orgId, parsed.data.userId);
+	const now = (/* @__PURE__ */ new Date()).toISOString();
+	const member = {
+		projectId: id,
+		userId: parsed.data.userId,
+		role: parsed.data.role,
+		joinedAt: now,
+		updatedAt: now,
+		updatedBy: ctx.userId || parsed.data.userId,
+		deletedAt: null
+	};
+	try {
+		await getProjectProvider().addProjectMember(ctx, member);
+		return json(member, { status: 201 });
+	} catch (err) {
+		handleApiError(err, "Failed to add member");
+	}
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-B7OiwPPa.js.map

package/build/server/chunks/entries/endpoints/api/projects/_id_/members/_server.ts.js-B7OiwPPa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-B7OiwPPa.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/projects/_id_/members/_server.ts.js"],"sourcesContent":["import { f as ProjectRoleSchema } from \"../../../../../../chunks/src.js\";\nimport { _ as getProjectProvider } from \"../../../../../../chunks/providers.server.js\";\nimport { C as requireTargetIsOrgMember, d as requireCanManageMembers } from \"../../../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\n//#region src/routes/api/projects/[id]/members/+server.ts\nvar AddMemberSchema = z.object({\n\tuserId: z.string().min(1, \"userId is required\"),\n\trole: ProjectRoleSchema\n});\nvar GET = async ({ params, locals }) => {\n\tconst { id } = params;\n\tif (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID\");\n\tawait requireCanManageMembers(locals, id);\n\tconst ctx = locals.ctx;\n\ttry {\n\t\treturn json({ members: (await getProjectProvider().listProjectMembers(ctx, id, { limit: 200 })).items });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to load members\");\n\t}\n};\nvar POST = async ({ params, request, locals }) => {\n\tconst { id } = params;\n\tif (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID\");\n\tawait requireCanManageMembers(locals, id);\n\tconst ctx = locals.ctx;\n\tconst body = await request.json().catch(() => null);\n\tconst parsed = AddMemberSchema.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\tconst project = await getProjectProvider().getProject(ctx, id);\n\tif (!project) apiError(404, ApiErrorCode.NOT_FOUND, \"Project not found\");\n\tawait requireTargetIsOrgMember(locals, project.orgId, parsed.data.userId);\n\tconst now = (/* @__PURE__ */ new Date()).toISOString();\n\tconst member = {\n\t\tprojectId: id,\n\t\tuserId: parsed.data.userId,\n\t\trole: parsed.data.role,\n\t\tjoinedAt: now,\n\t\tupdatedAt: now,\n\t\tupdatedBy: ctx.userId || parsed.data.userId,\n\t\tdeletedAt: null\n\t};\n\ttry {\n\t\tawait getProjectProvider().addProjectMember(ctx, member);\n\t\treturn json(member, { status: 201 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to add member\");\n\t}\n};\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAMA;AACA,IAAI,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;AAC/B,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC;AAChD,CAAC,IAAI,EAAE;AACP,CAAC,CAAC;AACC,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AACxC,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACtB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;AAC7E,CAAC,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,CAAC;AAC1C,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI;AACL,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,kBAAkB,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;AAC1G,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAC/C,CAAC;AACD;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAClD,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACtB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;AAC7E,CAAC,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,CAAC;AAC1C,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAC/C,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC;AAC/D,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,mBAAmB,CAAC;AACzE,CAAC,MAAM,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;AAC1E,CAAC,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACvD,CAAC,MAAM,MAAM,GAAG;AAChB,EAAE,SAAS,EAAE,EAAE;AACf,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;AAC5B,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AACxB,EAAE,QAAQ,EAAE,GAAG;AACf,EAAE,SAAS,EAAE,GAAG;AAChB,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM;AAC7C,EAAE,SAAS,EAAE;AACb,EAAE;AACF,CAAC,IAAI;AACL,EAAE,MAAM,kBAAkB,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC;AAC1D,EAAE,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACtC,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC7C,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/projects/_id_/members/_userId_/_server.ts.js-C1973T7Q.js

@@ -0,0 +1,64 @@
+import { m as ProjectRoleSchema } from '../../../../../../../chunks/src.js-BeFXhqDJ.js';
+import { f as getProjectProvider } from '../../../../../../../chunks/providers.server.js-Ck45V_zF.js';
+import { y as requireCanManageMembers, A as checkOwnerRemoval } from '../../../../../../../chunks/access.server.js-B3kl0hR3.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from '../../../../../../../chunks/api-errors.js-DNy3MKq4.js';
+import { z } from 'zod';
+import '../../../../../../../chunks/shared-server.js-DA4m8f1m.js';
+import '../../../../../../../chunks/limits.js-DfZnOKg5.js';
+import '../../../../../../../chunks/chunk-Y3M7P3BW.js-qwxSY5dh.js';
+import '../../../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '../../../../../../../chunks/utils2.js-B5FjFEwk.js';
+
+//#region src/routes/api/projects/[id]/members/[userId]/+server.ts
+var UpdateRoleSchema = z.object({ role: ProjectRoleSchema });
+var PATCH = async ({ params, request, locals }) => {
+	const { id, userId } = params;
+	if (!id || !userId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID or user ID");
+	await requireCanManageMembers(locals, id);
+	const ctx = locals.ctx;
+	const body = await request.json().catch(() => null);
+	const parsed = UpdateRoleSchema.safeParse(body);
+	if (!parsed.success) throwZodError(parsed.error);
+	try {
+		await getProjectProvider().updateProjectMemberRole(ctx, id, userId, parsed.data.role);
+		return new Response(null, { status: 204 });
+	} catch (err) {
+		handleApiError(err, "Failed to update role");
+	}
+};
+var DELETE = async ({ params, url, locals }) => {
+	const { id, userId } = params;
+	if (!id || !userId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID or user ID");
+	await requireCanManageMembers(locals, id);
+	const ctx = locals.ctx;
+	const confirmed = url.searchParams.get("confirm") === "true";
+	const projects = getProjectProvider();
+	const target = await projects.getProjectMember(ctx, id, userId);
+	if (!target) return new Response(null, { status: 204 });
+	if (target.role === "owner") {
+		const page = await projects.listProjectMembers(ctx, id, { limit: 200 });
+		const decision = checkOwnerRemoval({
+			target: { role: target.role },
+			allMembers: page.items.map((m) => ({ role: m.role })),
+			confirmed
+		});
+		if (decision === "sole_owner") apiError(409, ApiErrorCode.CONFLICT, "Cannot remove the sole owner of a project. Assign another owner first, or use reclaim to add a co-owner.");
+		if (decision === "needs_confirm") apiError(409, ApiErrorCode.CONFLICT, "Removing another project owner requires explicit confirmation. Retry with ?confirm=true.");
+	}
+	try {
+		await projects.removeProjectMember(ctx, id, userId);
+		return new Response(null, { status: 204 });
+	} catch (err) {
+		handleApiError(err, "Failed to remove member");
+	}
+};
+
+export { DELETE, PATCH };
+//# sourceMappingURL=_server.ts.js-C1973T7Q.js.map