@selvajs/selva 4.7.0-beta.6 → 4.7.0

package/build/server/chunks/_server.ts-CxvK94b_.js

@@ -1,74 +0,0 @@
-import { C as CreateOrgSchema } from './src-tWHhLCSB.js';
-import { b as getOrganizationProvider, P as ProviderError } from './providers.server-C1zmtRr7.js';
-import { b as requireInstanceAdmin } from './access.server-BWOmKi8Z.js';
-import { h as handleApiError, t as throwZodError, a as apiError, A as ApiErrorCode } from './api-errors-BQbl4HI1.js';
-import { json } from '@sveltejs/kit';
-import { randomUUID } from 'node:crypto';
-import 'zod';
-import './index.js-NH2Q8xBT.js';
-import 'clsx';
-import '@sveltejs/kit/internal';
-import '@sveltejs/kit/internal/server';
-import './limits-D8LKRL6A.js';
-import './chunk-Y3M7P3BW-CpcVbL4P.js';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import './utils2-D6nbl_7H.js';
-
-//#region src/routes/admin/api/orgs/+server.ts
-/**
-* Spec §8 — instance-admin-only org management. Multi-tenant deployments use
-* this to create / list orgs out of band of the per-org invite flow. Self-
-* hosted single-tenant instances rarely call these.
-*/
-var GET = async ({ locals, url }) => {
-	requireInstanceAdmin(locals);
-	const ctx = locals.ctx;
-	const rawLimit = Number(url.searchParams.get("limit") ?? 200);
-	const limit = Number.isFinite(rawLimit) ? Math.min(Math.max(rawLimit, 1), 200) : 200;
-	const cursor = url.searchParams.get("cursor") ?? void 0;
-	try {
-		const page = await getOrganizationProvider().listOrgs(ctx, {
-			limit,
-			cursor
-		});
-		return json({
-			orgs: page.items,
-			nextCursor: page.nextCursor
-		});
-	} catch (err) {
-		handleApiError(err, "Failed to list orgs");
-	}
-};
-var POST = async ({ request, locals }) => {
-	const user = requireInstanceAdmin(locals);
-	const ctx = locals.ctx;
-	const body = await request.json().catch(() => null);
-	const parsed = CreateOrgSchema.safeParse(body);
-	if (!parsed.success) throwZodError(parsed.error);
-	const now = (/* @__PURE__ */ new Date()).toISOString();
-	const org = {
-		id: randomUUID(),
-		name: parsed.data.name,
-		slug: parsed.data.slug,
-		ownerId: user.id,
-		createdBy: user.id,
-		updatedBy: user.id,
-		createdAt: now,
-		updatedAt: now,
-		deletedAt: null
-	};
-	try {
-		await getOrganizationProvider().createOrg(ctx, org);
-		return json(org, { status: 201 });
-	} catch (err) {
-		if (err instanceof ProviderError && err.statusCode === 409) apiError(409, ApiErrorCode.CONFLICT, err.message);
-		handleApiError(err, "Failed to create org");
-	}
-};
-
-export { GET, POST };
-//# sourceMappingURL=_server.ts-CxvK94b_.js.map

package/build/server/chunks/_server.ts-CxvK94b_.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-CxvK94b_.js","sources":["../../../.svelte-kit/output/server/entries/endpoints/admin/api/orgs/_server.ts.js"],"sourcesContent":["import { g as CreateOrgSchema } from \"../../../../../chunks/src.js\";\nimport { M as ProviderError, m as getOrganizationProvider } from \"../../../../../chunks/providers.server.js\";\nimport { _ as requireInstanceAdmin } from \"../../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/admin/api/orgs/+server.ts\n/**\n* Spec §8 — instance-admin-only org management. Multi-tenant deployments use\n* this to create / list orgs out of band of the per-org invite flow. Self-\n* hosted single-tenant instances rarely call these.\n*/\nvar GET = async ({ locals, url }) => {\n\trequireInstanceAdmin(locals);\n\tconst ctx = locals.ctx;\n\tconst rawLimit = Number(url.searchParams.get(\"limit\") ?? 200);\n\tconst limit = Number.isFinite(rawLimit) ? Math.min(Math.max(rawLimit, 1), 200) : 200;\n\tconst cursor = url.searchParams.get(\"cursor\") ?? void 0;\n\ttry {\n\t\tconst page = await getOrganizationProvider().listOrgs(ctx, {\n\t\t\tlimit,\n\t\t\tcursor\n\t\t});\n\t\treturn json({\n\t\t\torgs: page.items,\n\t\t\tnextCursor: page.nextCursor\n\t\t});\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to list orgs\");\n\t}\n};\nvar POST = async ({ request, locals }) => {\n\tconst user = requireInstanceAdmin(locals);\n\tconst ctx = locals.ctx;\n\tconst body = await request.json().catch(() => null);\n\tconst parsed = CreateOrgSchema.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\tconst now = (/* @__PURE__ */ new Date()).toISOString();\n\tconst org = {\n\t\tid: randomUUID(),\n\t\tname: parsed.data.name,\n\t\tslug: parsed.data.slug,\n\t\townerId: user.id,\n\t\tcreatedBy: user.id,\n\t\tupdatedBy: user.id,\n\t\tcreatedAt: now,\n\t\tupdatedAt: now,\n\t\tdeletedAt: null\n\t};\n\ttry {\n\t\tawait getOrganizationProvider().createOrg(ctx, org);\n\t\treturn json(org, { status: 201 });\n\t} catch (err) {\n\t\tif (err instanceof ProviderError && err.statusCode === 409) apiError(409, ApiErrorCode.CONFLICT, err.message);\n\t\thandleApiError(err, \"Failed to create org\");\n\t}\n};\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAMA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACrC,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC;AAC9D,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG;AACrF,CAAC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,MAAM;AACxD,CAAC,IAAI;AACL,EAAE,MAAM,IAAI,GAAG,MAAM,uBAAuB,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE;AAC7D,GAAG,KAAK;AACR,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,IAAI,EAAE,IAAI,CAAC,KAAK;AACnB,GAAG,UAAU,EAAE,IAAI,CAAC;AACpB,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,qBAAqB,CAAC;AAC5C,CAAC;AACD;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC1C,CAAC,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC1C,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAC/C,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACvD,CAAC,MAAM,GAAG,GAAG;AACb,EAAE,EAAE,EAAE,UAAU,EAAE;AAClB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AACxB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AACxB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;AAClB,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;AACpB,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;AACpB,EAAE,SAAS,EAAE,GAAG;AAChB,EAAE,SAAS,EAAE,GAAG;AAChB,EAAE,SAAS,EAAE;AACb,EAAE;AACF,CAAC,IAAI;AACL,EAAE,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;AACrD,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACnC,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC;AAC/G,EAAE,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC7C,CAAC;AACD;;;;"}

package/build/server/chunks/_server.ts-D0c72M1j.js

@@ -1,79 +0,0 @@
-import { M as MEMBER_ASSIGNABLE_PERMISSIONS, D as DEFAULT_ORG_PERMISSIONS, k as OrgRoleSchema, P as PlatformPermissionSchema, b as OrgPermissionSchema } from './src-tWHhLCSB.js';
-import { y as getInviteStore } from './providers.server-C1zmtRr7.js';
-import { c as requireManageOrgMembers } from './access.server-BWOmKi8Z.js';
-import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from './api-errors-BQbl4HI1.js';
-import { s as splitFlatPermissions } from './permissions-compat.server-xalTn9zO.js';
-import { m as mintRawToken, h as hashToken } from './token2.server-DlelraEE.js';
-import { json } from '@sveltejs/kit';
-import { z } from 'zod';
-import { randomUUID } from 'node:crypto';
-import './index.js-NH2Q8xBT.js';
-import 'clsx';
-import '@sveltejs/kit/internal';
-import '@sveltejs/kit/internal/server';
-import './limits-D8LKRL6A.js';
-import './chunk-Y3M7P3BW-CpcVbL4P.js';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import './utils2-D6nbl_7H.js';
-import './token-codec-CxK2DiO-.js';
-
-//#region src/routes/api/invites/+server.ts
-var FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);
-var CreateBody = z.object({
-	email: z.string().email("Valid email is required").transform((s) => s.toLowerCase().trim()),
-	orgRole: OrgRoleSchema.default("member"),
-	permissions: z.array(FlatPermissionSchema).default([])
-});
-var INVITE_TTL_MS = 10080 * 60 * 1e3;
-var GET = async ({ locals }) => {
-	requireManageOrgMembers(locals);
-	const ctx = locals.ctx;
-	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
-	try {
-		return json({ invites: (await getInviteStore().listByOrg(ctx, ctx.actingOrgId, { limit: 200 })).items.map(({ tokenHash: _omit, ...rest }) => rest) });
-	} catch (err) {
-		handleApiError(err, "Failed to list invites");
-	}
-};
-var POST = async ({ request, locals, url }) => {
-	requireManageOrgMembers(locals);
-	const ctx = locals.ctx;
-	const user = locals.user;
-	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
-	const body = await request.json().catch(() => null);
-	const parsed = CreateBody.safeParse(body);
-	if (!parsed.success) throwZodError(parsed.error);
-	try {
-		const { org: submittedOrgPerms } = splitFlatPermissions(parsed.data.permissions);
-		const orgPermissions = parsed.data.orgRole === "member" ? submittedOrgPerms.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[parsed.data.orgRole]];
-		const rawToken = mintRawToken();
-		const now = /* @__PURE__ */ new Date();
-		const invite = {
-			id: randomUUID(),
-			tokenHash: hashToken(rawToken),
-			email: parsed.data.email,
-			orgId: ctx.actingOrgId,
-			orgRole: parsed.data.orgRole,
-			orgPermissions,
-			invitedBy: user.id,
-			createdAt: now.toISOString(),
-			expiresAt: new Date(now.getTime() + INVITE_TTL_MS).toISOString()
-		};
-		await getInviteStore().create(ctx, invite);
-		const acceptUrl = `${url.origin}/accept-invite?token=${rawToken}`;
-		const { tokenHash: _omit, ...inviteForClient } = invite;
-		return json({
-			invite: inviteForClient,
-			acceptUrl
-		}, { status: 201 });
-	} catch (err) {
-		handleApiError(err, "Failed to create invite");
-	}
-};
-
-export { GET, POST };
-//# sourceMappingURL=_server.ts-D0c72M1j.js.map

package/build/server/chunks/_server.ts-D0c72M1j.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-D0c72M1j.js","sources":["../../../.svelte-kit/output/server/entries/endpoints/api/invites/_server.ts.js"],"sourcesContent":["import { E as PlatformPermissionSchema, S as OrgRoleSchema, _ as DEFAULT_ORG_PERMISSIONS, v as MEMBER_ASSIGNABLE_PERMISSIONS, x as OrgPermissionSchema } from \"../../../../chunks/src.js\";\nimport { d as getInviteStore } from \"../../../../chunks/providers.server.js\";\nimport { x as requireManageOrgMembers } from \"../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../chunks/api-errors.js\";\nimport { n as splitFlatPermissions } from \"../../../../chunks/permissions-compat.server.js\";\nimport { n as mintRawToken, t as hashToken } from \"../../../../chunks/token2.server.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/api/invites/+server.ts\nvar FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);\nvar CreateBody = z.object({\n\temail: z.string().email(\"Valid email is required\").transform((s) => s.toLowerCase().trim()),\n\torgRole: OrgRoleSchema.default(\"member\"),\n\tpermissions: z.array(FlatPermissionSchema).default([])\n});\nvar INVITE_TTL_MS = 10080 * 60 * 1e3;\nvar GET = async ({ locals }) => {\n\trequireManageOrgMembers(locals);\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\ttry {\n\t\treturn json({ invites: (await getInviteStore().listByOrg(ctx, ctx.actingOrgId, { limit: 200 })).items.map(({ tokenHash: _omit, ...rest }) => rest) });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to list invites\");\n\t}\n};\nvar POST = async ({ request, locals, url }) => {\n\trequireManageOrgMembers(locals);\n\tconst ctx = locals.ctx;\n\tconst user = locals.user;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tconst body = await request.json().catch(() => null);\n\tconst parsed = CreateBody.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\ttry {\n\t\tconst { org: submittedOrgPerms } = splitFlatPermissions(parsed.data.permissions);\n\t\tconst orgPermissions = parsed.data.orgRole === \"member\" ? submittedOrgPerms.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[parsed.data.orgRole]];\n\t\tconst rawToken = mintRawToken();\n\t\tconst now = /* @__PURE__ */ new Date();\n\t\tconst invite = {\n\t\t\tid: randomUUID(),\n\t\t\ttokenHash: hashToken(rawToken),\n\t\t\temail: parsed.data.email,\n\t\t\torgId: ctx.actingOrgId,\n\t\t\torgRole: parsed.data.orgRole,\n\t\t\torgPermissions,\n\t\t\tinvitedBy: user.id,\n\t\t\tcreatedAt: now.toISOString(),\n\t\t\texpiresAt: new Date(now.getTime() + INVITE_TTL_MS).toISOString()\n\t\t};\n\t\tawait getInviteStore().create(ctx, invite);\n\t\tconst acceptUrl = `${url.origin}/accept-invite?token=${rawToken}`;\n\t\tconst { tokenHash: _omit, ...inviteForClient } = invite;\n\t\treturn json({\n\t\t\tinvite: inviteForClient,\n\t\t\tacceptUrl\n\t\t}, { status: 201 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to create invite\");\n\t}\n};\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AASA;AACA,IAAI,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;AACnF,IAAI,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;AAC1B,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AAC5F,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;AACzC,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE;AACtD,CAAC,CAAC;AACF,IAAI,aAAa,GAAG,KAAK,GAAG,EAAE,GAAG,GAAG;AACjC,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAChC,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,IAAI;AACL,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,cAAc,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;AACvJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAC/C,CAAC;AACD;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AAC/C,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AACzB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1C,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,IAAI;AACL,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;AAClF,EAAE,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC1L,EAAE,MAAM,QAAQ,GAAG,YAAY,EAAE;AACjC,EAAE,MAAM,GAAG,mBAAmB,IAAI,IAAI,EAAE;AACxC,EAAE,MAAM,MAAM,GAAG;AACjB,GAAG,EAAE,EAAE,UAAU,EAAE;AACnB,GAAG,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC;AACjC,GAAG,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;AAC3B,GAAG,KAAK,EAAE,GAAG,CAAC,WAAW;AACzB,GAAG,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;AAC/B,GAAG,cAAc;AACjB,GAAG,SAAS,EAAE,IAAI,CAAC,EAAE;AACrB,GAAG,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;AAC/B,GAAG,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,WAAW;AACjE,GAAG;AACH,EAAE,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC;AAC5C,EAAE,MAAM,SAAS,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;AACnE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,eAAe,EAAE,GAAG,MAAM;AACzD,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,MAAM,EAAE,eAAe;AAC1B,GAAG;AACH,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAChD,CAAC;AACD;;;;"}

package/build/server/chunks/_server.ts-D8-Ng03C.js

@@ -1,52 +0,0 @@
-import { U as UpdateOrgSchema } from './src-tWHhLCSB.js';
-import { b as getOrganizationProvider, P as ProviderError } from './providers.server-C1zmtRr7.js';
-import { b as requireInstanceAdmin } from './access.server-BWOmKi8Z.js';
-import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from './api-errors-BQbl4HI1.js';
-import { json } from '@sveltejs/kit';
-import 'zod';
-import './index.js-NH2Q8xBT.js';
-import 'clsx';
-import '@sveltejs/kit/internal';
-import '@sveltejs/kit/internal/server';
-import './limits-D8LKRL6A.js';
-import './chunk-Y3M7P3BW-CpcVbL4P.js';
-import 'node:crypto';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import './utils2-D6nbl_7H.js';
-
-//#region src/routes/admin/api/orgs/[id]/+server.ts
-var PATCH = async ({ params, request, locals }) => {
-	requireInstanceAdmin(locals);
-	const { id } = params;
-	if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing org ID");
-	const ctx = locals.ctx;
-	const body = await request.json().catch(() => null);
-	const parsed = UpdateOrgSchema.safeParse(body);
-	if (!parsed.success) throwZodError(parsed.error);
-	try {
-		await getOrganizationProvider().updateOrg(ctx, id, parsed.data);
-		return json(await getOrganizationProvider().getOrg(ctx, id));
-	} catch (err) {
-		if (err instanceof ProviderError && err.statusCode === 409) apiError(409, ApiErrorCode.CONFLICT, err.message);
-		handleApiError(err, "Failed to update org");
-	}
-};
-var DELETE = async ({ params, locals }) => {
-	requireInstanceAdmin(locals);
-	const { id } = params;
-	if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing org ID");
-	const ctx = locals.ctx;
-	try {
-		await getOrganizationProvider().deleteOrg(ctx, id);
-		return new Response(null, { status: 204 });
-	} catch (err) {
-		handleApiError(err, "Failed to delete org");
-	}
-};
-
-export { DELETE, PATCH };
-//# sourceMappingURL=_server.ts-D8-Ng03C.js.map

package/build/server/chunks/_server.ts-D8-Ng03C.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-D8-Ng03C.js","sources":["../../../.svelte-kit/output/server/entries/endpoints/admin/api/orgs/_id_/_server.ts.js"],"sourcesContent":["import { C as UpdateOrgSchema } from \"../../../../../../chunks/src.js\";\nimport { M as ProviderError, m as getOrganizationProvider } from \"../../../../../../chunks/providers.server.js\";\nimport { _ as requireInstanceAdmin } from \"../../../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/admin/api/orgs/[id]/+server.ts\nvar PATCH = async ({ params, request, locals }) => {\n\trequireInstanceAdmin(locals);\n\tconst { id } = params;\n\tif (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing org ID\");\n\tconst ctx = locals.ctx;\n\tconst body = await request.json().catch(() => null);\n\tconst parsed = UpdateOrgSchema.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\ttry {\n\t\tawait getOrganizationProvider().updateOrg(ctx, id, parsed.data);\n\t\treturn json(await getOrganizationProvider().getOrg(ctx, id));\n\t} catch (err) {\n\t\tif (err instanceof ProviderError && err.statusCode === 409) apiError(409, ApiErrorCode.CONFLICT, err.message);\n\t\thandleApiError(err, \"Failed to update org\");\n\t}\n};\nvar DELETE = async ({ params, locals }) => {\n\trequireInstanceAdmin(locals);\n\tconst { id } = params;\n\tif (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing org ID\");\n\tconst ctx = locals.ctx;\n\ttry {\n\t\tawait getOrganizationProvider().deleteOrg(ctx, id);\n\t\treturn new Response(null, { status: 204 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to delete org\");\n\t}\n};\n//#endregion\nexport { DELETE, PATCH };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAKA;AACG,IAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACnD,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACtB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;AACzE,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAC/C,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,IAAI;AACL,EAAE,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC;AACjE,EAAE,OAAO,IAAI,CAAC,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAC9D,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC;AAC/G,EAAE,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC7C,CAAC;AACD;AACG,IAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACtB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;AACzE,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI;AACL,EAAE,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC;AACpD,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC7C,CAAC;AACD;;;;"}

package/build/server/chunks/_server.ts-D9d7x25e.js

@@ -1,76 +0,0 @@
-import { d as GuidSchema, G as GH_EXTENSIONS, e as UpdateMetadataInputSchema } from './src-tWHhLCSB.js';
-import { w as getDefinitionService, v as fetchSchemaFromCompute } from './providers.server-C1zmtRr7.js';
-import { r as requireEditableDefinition } from './access.server-BWOmKi8Z.js';
-import { a as apiError, h as handleApiError, r as resolveServerForOrg, t as throwZodError, A as ApiErrorCode } from './api-errors-BQbl4HI1.js';
-import { p as MAX_GH_FILE_SIZE } from './computeLimits-DvrrqPiD.js';
-import { json } from '@sveltejs/kit';
-import 'zod';
-import './index.js-NH2Q8xBT.js';
-import 'clsx';
-import '@sveltejs/kit/internal';
-import '@sveltejs/kit/internal/server';
-import './limits-D8LKRL6A.js';
-import './chunk-Y3M7P3BW-CpcVbL4P.js';
-import 'node:crypto';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import './utils2-D6nbl_7H.js';
-import './compute-B8HU5cQL.js';
-import 'node:zlib';
-import 'node:util';
-import 'node:dns/promises';
-import 'node:net';
-
-//#region src/routes/api/definitions/[guid]/+server.ts
-var POST = async ({ params, request, locals }) => {
-	const guidParsed = GuidSchema.safeParse(params.guid);
-	if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing GUID");
-	const formData = await request.formData();
-	const file = formData.get("file");
-	if (!(file instanceof File)) apiError(400, ApiErrorCode.VALIDATION_FAILED, "A Grasshopper (.gh or .ghx) file is required");
-	const changeNoteRaw = formData.get("changeNote");
-	const changeNote = typeof changeNoteRaw === "string" ? changeNoteRaw.slice(0, 1e3) : void 0;
-	const ext = file.name.slice(file.name.lastIndexOf(".")).toLowerCase();
-	if (!GH_EXTENSIONS.includes(ext)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `File type not allowed. Allowed: ${GH_EXTENSIONS.join(", ")}`);
-	if (file.size > MAX_GH_FILE_SIZE) apiError(400, ApiErrorCode.VALIDATION_FAILED, `File too large. Max size: ${MAX_GH_FILE_SIZE / (1024 * 1024)} MB`);
-	const { ctx, record, project } = await requireEditableDefinition(locals, guidParsed.data);
-	const fileExt = ext.slice(1);
-	try {
-		const data = new Uint8Array(await file.arrayBuffer());
-		const schema = await fetchSchemaFromCompute(data, await resolveServerForOrg(ctx, project?.orgId ?? null, { definitionPin: record.computeServerId ?? null }));
-		return json({ version: await getDefinitionService().uploadVersion(ctx, guidParsed.data, data, fileExt, file.name, schema, changeNote) }, { status: 201 });
-	} catch (err) {
-		handleApiError(err, "Failed to upload definition version");
-	}
-};
-var DELETE = async ({ params, locals }) => {
-	const guidParsed = GuidSchema.safeParse(params.guid);
-	if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing GUID");
-	const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
-	try {
-		await getDefinitionService().delete(ctx, guidParsed.data);
-		return new Response(null, { status: 204 });
-	} catch (err) {
-		handleApiError(err, "Failed to delete definition");
-	}
-};
-var PUT = async ({ params, request, locals }) => {
-	const guidParsed = GuidSchema.safeParse(params.guid);
-	if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing GUID");
-	const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
-	const body = await request.json().catch(() => null);
-	const parsed = UpdateMetadataInputSchema.safeParse(body);
-	if (!parsed.success) throwZodError(parsed.error);
-	try {
-		await getDefinitionService().updateMeta(ctx, guidParsed.data, parsed.data);
-		return new Response(null, { status: 204 });
-	} catch (err) {
-		handleApiError(err, "Failed to update definition");
-	}
-};
-
-export { DELETE, POST, PUT };
-//# sourceMappingURL=_server.ts-D9d7x25e.js.map

package/build/server/chunks/_server.ts-D9d7x25e.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-D9d7x25e.js","sources":["../../../.svelte-kit/output/server/entries/endpoints/api/definitions/_guid_/_server.ts.js"],"sourcesContent":["import { d as GH_EXTENSIONS, l as UpdateMetadataInputSchema, s as GuidSchema } from \"../../../../../chunks/src.js\";\nimport { c as getDefinitionService, j as fetchSchemaFromCompute } from \"../../../../../chunks/providers.server.js\";\nimport { g as requireEditableDefinition } from \"../../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, o as resolveServerForOrg, r as handleApiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { f as MAX_GH_FILE_SIZE } from \"../../../../../chunks/computeLimits.js\";\nimport \"../../../../../chunks/admin-config.js\";\nimport \"../../../../../chunks/definitions.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/definitions/[guid]/+server.ts\nvar POST = async ({ params, request, locals }) => {\n\tconst guidParsed = GuidSchema.safeParse(params.guid);\n\tif (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing GUID\");\n\tconst formData = await request.formData();\n\tconst file = formData.get(\"file\");\n\tif (!(file instanceof File)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"A Grasshopper (.gh or .ghx) file is required\");\n\tconst changeNoteRaw = formData.get(\"changeNote\");\n\tconst changeNote = typeof changeNoteRaw === \"string\" ? changeNoteRaw.slice(0, 1e3) : void 0;\n\tconst ext = file.name.slice(file.name.lastIndexOf(\".\")).toLowerCase();\n\tif (!GH_EXTENSIONS.includes(ext)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `File type not allowed. Allowed: ${GH_EXTENSIONS.join(\", \")}`);\n\tif (file.size > MAX_GH_FILE_SIZE) apiError(400, ApiErrorCode.VALIDATION_FAILED, `File too large. Max size: ${MAX_GH_FILE_SIZE / (1024 * 1024)} MB`);\n\tconst { ctx, record, project } = await requireEditableDefinition(locals, guidParsed.data);\n\tconst fileExt = ext.slice(1);\n\ttry {\n\t\tconst data = new Uint8Array(await file.arrayBuffer());\n\t\tconst schema = await fetchSchemaFromCompute(data, await resolveServerForOrg(ctx, project?.orgId ?? null, { definitionPin: record.computeServerId ?? null }));\n\t\treturn json({ version: await getDefinitionService().uploadVersion(ctx, guidParsed.data, data, fileExt, file.name, schema, changeNote) }, { status: 201 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to upload definition version\");\n\t}\n};\nvar DELETE = async ({ params, locals }) => {\n\tconst guidParsed = GuidSchema.safeParse(params.guid);\n\tif (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing GUID\");\n\tconst { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n\ttry {\n\t\tawait getDefinitionService().delete(ctx, guidParsed.data);\n\t\treturn new Response(null, { status: 204 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to delete definition\");\n\t}\n};\nvar PUT = async ({ params, request, locals }) => {\n\tconst guidParsed = GuidSchema.safeParse(params.guid);\n\tif (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing GUID\");\n\tconst { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n\tconst body = await request.json().catch(() => null);\n\tconst parsed = UpdateMetadataInputSchema.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\ttry {\n\t\tawait getDefinitionService().updateMeta(ctx, guidParsed.data, parsed.data);\n\t\treturn new Response(null, { status: 204 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to update definition\");\n\t}\n};\n//#endregion\nexport { DELETE, POST, PUT };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAQA;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAClD,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACrD,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AAClG,CAAC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;AAC1C,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;AAClC,CAAC,IAAI,EAAE,IAAI,YAAY,IAAI,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,8CAA8C,CAAC;AAC3H,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;AACjD,CAAC,MAAM,UAAU,GAAG,OAAO,aAAa,KAAK,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,MAAM;AAC5F,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE;AACtE,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,gCAAgC,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC/I,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,gBAAgB,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,0BAA0B,EAAE,gBAAgB,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AACpJ,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1F,CAAC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7B,CAAC,IAAI;AACL,EAAE,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AACvD,EAAE,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC,CAAC;AAC9J,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,oBAAoB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3J,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,qCAAqC,CAAC;AAC5D,CAAC;AACD;AACG,IAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACrD,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AAClG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AACzE,CAAC,IAAI;AACL,EAAE,MAAM,oBAAoB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AAC3D,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACpD,CAAC;AACD;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACjD,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACrD,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AAClG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AACzE,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC;AACzD,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,IAAI;AACL,EAAE,MAAM,oBAAoB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;AAC5E,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACpD,CAAC;AACD;;;;"}

package/build/server/chunks/_server.ts-DCjZhN9z.js

@@ -1,92 +0,0 @@
-import { d as requirePermission } from './access.server-BWOmKi8Z.js';
-import { a as apiError, A as ApiErrorCode } from './api-errors-BQbl4HI1.js';
-import { json } from '@sveltejs/kit';
-import { randomFillSync } from 'node:crypto';
-import './src-tWHhLCSB.js';
-import 'zod';
-import './providers.server-C1zmtRr7.js';
-import './index.js-NH2Q8xBT.js';
-import 'clsx';
-import '@sveltejs/kit/internal';
-import '@sveltejs/kit/internal/server';
-import './limits-D8LKRL6A.js';
-import './chunk-Y3M7P3BW-CpcVbL4P.js';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import './utils2-D6nbl_7H.js';
-
-//#region src/routes/admin/api/system/throughput/+server.ts
-/**
-* Network throughput probe for the /admin/system page. Measures the transport
-* path between the operator's browser and this server — through whatever
-* proxies/tunnels sit in between (reverse proxy, SSO relays such as Azure App
-* Proxy) — with zero compute involvement:
-*
-*   GET  ?mb=N  → streams N MB of random bytes (download direction)
-*   POST        → consumes and discards the request body, returns the
-*                 server-side receive duration (upload direction)
-*
-* Random bytes are deliberately incompressible so proxy compression can't fake
-* a fast transfer. `instance_admin` only — a bandwidth probe is an operator
-* tool, and the download side is a data faucet.
-*
-* A curl-friendly, env-flag-gated sibling exists at /api/diag/throughput for
-* shell-based testing (documented in docs/deployment/app-proxy-migration.md);
-* this endpoint is the browser/UI counterpart that also works behind SSO
-* proxies where curl can't authenticate.
-*/
-var CHUNK_BYTES = 1024 * 1024;
-var DOWNLOAD_DEFAULT_MB = 20;
-var DOWNLOAD_MAX_MB = 256;
-var UPLOAD_MAX_BYTES = 256 * 1024 * 1024;
-var GET = async ({ locals, url }) => {
-	requirePermission(locals, "instance_admin");
-	const requested = Number(url.searchParams.get("mb"));
-	const mb = Math.min(DOWNLOAD_MAX_MB, Math.max(1, Number.isFinite(requested) ? requested : DOWNLOAD_DEFAULT_MB));
-	let sentChunks = 0;
-	const stream = new ReadableStream({ pull(controller) {
-		if (sentChunks >= mb) {
-			controller.close();
-			return;
-		}
-		const chunk = new Uint8Array(CHUNK_BYTES);
-		randomFillSync(chunk);
-		controller.enqueue(chunk);
-		sentChunks++;
-	} });
-	return new Response(stream, { headers: {
-		"Content-Type": "application/octet-stream",
-		"Content-Length": String(mb * CHUNK_BYTES),
-		"Cache-Control": "no-store"
-	} });
-};
-var POST = async ({ locals, request }) => {
-	requirePermission(locals, "instance_admin");
-	const declared = Number(request.headers.get("content-length"));
-	if (Number.isFinite(declared) && declared > UPLOAD_MAX_BYTES) apiError(413, ApiErrorCode.VALIDATION_FAILED, "Upload exceeds the 256 MB probe limit");
-	if (!request.body) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing request body");
-	const start = performance.now();
-	const reader = request.body.getReader();
-	let bytes = 0;
-	while (true) {
-		const { done, value } = await reader.read();
-		if (done) break;
-		bytes += value.byteLength;
-		if (bytes > UPLOAD_MAX_BYTES) {
-			await reader.cancel();
-			apiError(413, ApiErrorCode.VALIDATION_FAILED, "Upload exceeds the 256 MB probe limit");
-		}
-	}
-	const ms = performance.now() - start;
-	return json({
-		bytes,
-		ms: Math.round(ms),
-		mbps: ms > 0 ? Number((bytes / (1024 * 1024) / (ms / 1e3)).toFixed(2)) : null
-	});
-};
-
-export { GET, POST };
-//# sourceMappingURL=_server.ts-DCjZhN9z.js.map

package/build/server/chunks/_server.ts-DCjZhN9z.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-DCjZhN9z.js","sources":["../../../.svelte-kit/output/server/entries/endpoints/admin/api/system/throughput/_server.ts.js"],"sourcesContent":["import { S as requirePermission } from \"../../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { randomFillSync } from \"node:crypto\";\n//#region src/routes/admin/api/system/throughput/+server.ts\n/**\n* Network throughput probe for the /admin/system page. Measures the transport\n* path between the operator's browser and this server — through whatever\n* proxies/tunnels sit in between (reverse proxy, SSO relays such as Azure App\n* Proxy) — with zero compute involvement:\n*\n*   GET  ?mb=N  → streams N MB of random bytes (download direction)\n*   POST        → consumes and discards the request body, returns the\n*                 server-side receive duration (upload direction)\n*\n* Random bytes are deliberately incompressible so proxy compression can't fake\n* a fast transfer. `instance_admin` only — a bandwidth probe is an operator\n* tool, and the download side is a data faucet.\n*\n* A curl-friendly, env-flag-gated sibling exists at /api/diag/throughput for\n* shell-based testing (documented in docs/deployment/app-proxy-migration.md);\n* this endpoint is the browser/UI counterpart that also works behind SSO\n* proxies where curl can't authenticate.\n*/\nvar CHUNK_BYTES = 1024 * 1024;\nvar DOWNLOAD_DEFAULT_MB = 20;\nvar DOWNLOAD_MAX_MB = 256;\nvar UPLOAD_MAX_BYTES = 256 * 1024 * 1024;\nvar GET = async ({ locals, url }) => {\n\trequirePermission(locals, \"instance_admin\");\n\tconst requested = Number(url.searchParams.get(\"mb\"));\n\tconst mb = Math.min(DOWNLOAD_MAX_MB, Math.max(1, Number.isFinite(requested) ? requested : DOWNLOAD_DEFAULT_MB));\n\tlet sentChunks = 0;\n\tconst stream = new ReadableStream({ pull(controller) {\n\t\tif (sentChunks >= mb) {\n\t\t\tcontroller.close();\n\t\t\treturn;\n\t\t}\n\t\tconst chunk = new Uint8Array(CHUNK_BYTES);\n\t\trandomFillSync(chunk);\n\t\tcontroller.enqueue(chunk);\n\t\tsentChunks++;\n\t} });\n\treturn new Response(stream, { headers: {\n\t\t\"Content-Type\": \"application/octet-stream\",\n\t\t\"Content-Length\": String(mb * CHUNK_BYTES),\n\t\t\"Cache-Control\": \"no-store\"\n\t} });\n};\nvar POST = async ({ locals, request }) => {\n\trequirePermission(locals, \"instance_admin\");\n\tconst declared = Number(request.headers.get(\"content-length\"));\n\tif (Number.isFinite(declared) && declared > UPLOAD_MAX_BYTES) apiError(413, ApiErrorCode.VALIDATION_FAILED, \"Upload exceeds the 256 MB probe limit\");\n\tif (!request.body) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing request body\");\n\tconst start = performance.now();\n\tconst reader = request.body.getReader();\n\tlet bytes = 0;\n\twhile (true) {\n\t\tconst { done, value } = await reader.read();\n\t\tif (done) break;\n\t\tbytes += value.byteLength;\n\t\tif (bytes > UPLOAD_MAX_BYTES) {\n\t\t\tawait reader.cancel();\n\t\t\tapiError(413, ApiErrorCode.VALIDATION_FAILED, \"Upload exceeds the 256 MB probe limit\");\n\t\t}\n\t}\n\tconst ms = performance.now() - start;\n\treturn json({\n\t\tbytes,\n\t\tms: Math.round(ms),\n\t\tmbps: ms > 0 ? Number((bytes / (1024 * 1024) / (ms / 1e3)).toFixed(2)) : null\n\t});\n};\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,WAAW,GAAG,IAAI,GAAG,IAAI;AAC7B,IAAI,mBAAmB,GAAG,EAAE;AAC5B,IAAI,eAAe,GAAG,GAAG;AACzB,IAAI,gBAAgB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI;AACrC,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACrC,CAAC,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC5C,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,SAAS,GAAG,mBAAmB,CAAC,CAAC;AAChH,CAAC,IAAI,UAAU,GAAG,CAAC;AACnB,CAAC,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE;AACtD,EAAE,IAAI,UAAU,IAAI,EAAE,EAAE;AACxB,GAAG,UAAU,CAAC,KAAK,EAAE;AACrB,GAAG;AACH,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC;AAC3C,EAAE,cAAc,CAAC,KAAK,CAAC;AACvB,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC;AAC3B,EAAE,UAAU,EAAE;AACd,CAAC,CAAC,EAAE,CAAC;AACL,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;AACxC,EAAE,cAAc,EAAE,0BAA0B;AAC5C,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,GAAG,WAAW,CAAC;AAC5C,EAAE,eAAe,EAAE;AACnB,EAAE,EAAE,CAAC;AACL;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;AAC1C,CAAC,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC5C,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAC/D,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,gBAAgB,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,uCAAuC,CAAC;AACrJ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AACzF,CAAC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;AAChC,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE;AACxC,CAAC,IAAI,KAAK,GAAG,CAAC;AACd,CAAC,OAAO,IAAI,EAAE;AACd,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE;AAC7C,EAAE,IAAI,IAAI,EAAE;AACZ,EAAE,KAAK,IAAI,KAAK,CAAC,UAAU;AAC3B,EAAE,IAAI,KAAK,GAAG,gBAAgB,EAAE;AAChC,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE;AACxB,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,uCAAuC,CAAC;AACzF,EAAE;AACF,CAAC;AACD,CAAC,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK;AACrC,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,KAAK;AACP,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;AACpB,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG;AAC3E,EAAE,CAAC;AACH;;;;"}

package/build/server/chunks/_server.ts-DWUABgi_.js

@@ -1,210 +0,0 @@
-import { p as private_env } from './index.js-NH2Q8xBT.js';
-import './src-tWHhLCSB.js';
-import { p as providers, e as getComputeServerConfigStore, L as LocalComputeServerStore } from './providers.server-C1zmtRr7.js';
-import { f as findServerById } from './utils2-D6nbl_7H.js';
-import { d as requirePermission } from './access.server-BWOmKi8Z.js';
-import { json } from '@sveltejs/kit';
-import { randomUUID } from 'node:crypto';
-import { resolve, join } from 'node:path';
-import { mkdir, writeFile, unlink } from 'node:fs/promises';
-import 'clsx';
-import '@sveltejs/kit/internal';
-import '@sveltejs/kit/internal/server';
-import 'zod';
-import './limits-D8LKRL6A.js';
-import './chunk-Y3M7P3BW-CpcVbL4P.js';
-import 'node:url';
-import 'node:fs';
-import '@supabase/supabase-js';
-
-//#region src/routes/admin/api/system/health/+server.ts
-function atRestSecretsCheck(report) {
-	const base = {
-		id: "at-rest-secrets",
-		label: "Compute server secrets"
-	};
-	if (report === null) return {
-		...base,
-		status: "not_applicable",
-		summary: "The active data provider does not encrypt secrets at this layer — nothing to verify."
-	};
-	if (report.ok) return {
-		...base,
-		status: "ok",
-		summary: "All stored compute server API keys decrypt under the current SELVA_AT_REST_KEY."
-	};
-	const failed = report.failures.map((f) => `"${f.serverLabel}" (${f.reason}${f.cause ? `: ${f.cause}` : ""})`).join(", ");
-	const plaintext = report.plaintextFound;
-	return {
-		...base,
-		status: "degraded",
-		summary: `${report.failures.length} compute server key(s) could not be loaded: ${failed}.`,
-		remediation: plaintext ? "A key is stored in plaintext on disk — re-enter it via /admin/compute so it is encrypted." : "The stored ciphertext does not match the current SELVA_AT_REST_KEY (rotated key or restored backup). Re-enter the affected keys via /admin/compute, or restore the original SELVA_AT_REST_KEY, then run this check again."
-	};
-}
-function schemaVersionCheck(report) {
-	const base = {
-		id: "schema-version",
-		label: "Database schema"
-	};
-	if (report === null) return {
-		...base,
-		status: "not_applicable",
-		summary: "The active data provider migrates with the app — there is no separate schema to verify."
-	};
-	if (report.ok) return {
-		...base,
-		status: "ok",
-		summary: `Database migration head ${report.actual} satisfies the app's expected ${report.expected}.`
-	};
-	return {
-		...base,
-		status: "degraded",
-		summary: report.message ?? `Database migration head ${report.actual ?? "unavailable"} is behind the app's expected ${report.expected}.`,
-		remediation: "Sync the provider migrations into your Supabase project and run `npx supabase db push`, then restart the app. `selva doctor` runs the same check from the CLI."
-	};
-}
-var COMPUTE_PING_TIMEOUT_MS = 8e3;
-/**
-* Ping the global default compute server's `/healthcheck`. We probe the
-* default specifically because that's the server every solve falls back to;
-* a degraded default breaks the baseline for all orgs. Org-private and
-* non-default platform servers are out of scope here — they have their own
-* per-server status probe at /admin/api/compute/status.
-*/
-async function computeReachabilityCheck(locals) {
-	const base = {
-		id: "compute-reachable",
-		label: "Default compute server"
-	};
-	let config;
-	try {
-		config = await getComputeServerConfigStore().getConfig(locals.ctx);
-	} catch (err) {
-		return {
-			...base,
-			status: "error",
-			summary: `Could not read compute config: ${err instanceof Error ? err.message : String(err)}`
-		};
-	}
-	const server = config.defaultServerId ? findServerById(config, config.defaultServerId) : void 0;
-	if (!server) return {
-		...base,
-		status: "not_applicable",
-		summary: "No default compute server is configured — nothing to reach.",
-		remediation: "Add a server and set it as default in /admin/compute."
-	};
-	const controller = new AbortController();
-	const timer = setTimeout(() => controller.abort(), COMPUTE_PING_TIMEOUT_MS);
-	try {
-		const headers = {};
-		if (server.hasApiKey) {
-			const apiKey = await getComputeServerConfigStore().getServerApiKey(locals.ctx, server.id);
-			if (apiKey) headers["RhinoComputeKey"] = apiKey;
-		}
-		const res = await fetch(new URL("/healthcheck", server.serverUrl).toString(), {
-			signal: controller.signal,
-			headers
-		});
-		if (res.ok) return {
-			...base,
-			status: "ok",
-			summary: `"${server.label}" answered /healthcheck (200).`
-		};
-		return {
-			...base,
-			status: "degraded",
-			summary: `"${server.label}" responded ${res.status} to /healthcheck.`,
-			remediation: res.status === 401 || res.status === 403 ? "Authentication rejected — verify the API key in /admin/compute." : "The server is reachable but unhealthy. Check the Rhino.Compute host."
-		};
-	} catch (err) {
-		const aborted = err instanceof Error && err.name === "AbortError";
-		return {
-			...base,
-			status: "degraded",
-			summary: aborted ? `"${server.label}" did not respond within ${COMPUTE_PING_TIMEOUT_MS / 1e3}s.` : `"${server.label}" is unreachable: ${err instanceof Error ? err.message : String(err)}.`,
-			remediation: `Confirm the Rhino.Compute host is running and ${server.serverUrl} is correct.`
-		};
-	} finally {
-		clearTimeout(timer);
-	}
-}
-/**
-* Write + delete a temp file under DATA_PATH to prove the local provider can
-* still persist. The JSON stores read-modify-write without a fallback, so a
-* full disk or a permission change (e.g. ownership drift after a restore)
-* corrupts data on the next write — catch it here while it's still just a
-* failed health check.
-*/
-async function dataPathWritableCheck() {
-	const base = {
-		id: "data-path-writable",
-		label: "Data path writable"
-	};
-	if (!(providers.data.computeServer instanceof LocalComputeServerStore)) return {
-		...base,
-		status: "not_applicable",
-		summary: "The active data provider does not persist to a local DATA_PATH."
-	};
-	const dataPath = private_env.DATA_PATH;
-	if (!dataPath) return {
-		...base,
-		status: "error",
-		summary: "DATA_PATH is unset but the local provider is active.",
-		remediation: "Set DATA_PATH in .env and restart."
-	};
-	const absolute = resolve(dataPath);
-	const probe = join(absolute, `.health-probe-${randomUUID()}`);
-	try {
-		await mkdir(absolute, { recursive: true });
-		await writeFile(probe, "ok");
-		await unlink(probe);
-		return {
-			...base,
-			status: "ok",
-			summary: `DATA_PATH (${dataPath}) is writable.`
-		};
-	} catch (err) {
-		return {
-			...base,
-			status: "degraded",
-			summary: `DATA_PATH (${dataPath}) is not writable: ${err instanceof Error ? err.message : String(err)}.`,
-			remediation: "Check free disk space and that the directory is owned by the user running the app (`df -h`, `ls -la`)."
-		};
-	}
-}
-var GET = async ({ locals }) => {
-	requirePermission(locals, "instance_admin");
-	const checks = [];
-	const store = providers.data.computeServer;
-	if (typeof store.verifySecrets === "function") try {
-		checks.push(atRestSecretsCheck(await store.verifySecrets()));
-	} catch (err) {
-		checks.push({
-			id: "at-rest-secrets",
-			label: "Compute server secrets",
-			status: "error",
-			summary: `Verification threw: ${err instanceof Error ? err.message : String(err)}`,
-			remediation: "Check server logs (`pm2 logs selva-compute`) for the underlying error."
-		});
-	}
-	else checks.push(atRestSecretsCheck(null));
-	const data = providers.data;
-	if (typeof data.verifySchemaVersion === "function") checks.push(schemaVersionCheck(await data.verifySchemaVersion()));
-	else checks.push(schemaVersionCheck(null));
-	checks.push(...await Promise.all([computeReachabilityCheck(locals), dataPathWritableCheck()]));
-	const rank = {
-		ok: 0,
-		not_applicable: 0,
-		degraded: 2,
-		error: 3
-	};
-	return json({
-		overall: checks.reduce((worst, c) => rank[c.status] > rank[worst] ? c.status : worst, "ok"),
-		checkedAt: (/* @__PURE__ */ new Date()).toISOString(),
-		checks
-	});
-};
-
-export { GET };
-//# sourceMappingURL=_server.ts-DWUABgi_.js.map