@selvajs/selva 4.7.2 → 4.7.4-beta.0

package/build/server/chunks/entries/endpoints/api/definitions/_server.ts.js-D0_Fhejp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-D0_Fhejp.js","sources":["../../../../../../../.svelte-kit/output/server/entries/endpoints/api/definitions/_server.ts.js"],"sourcesContent":["import { d as GH_EXTENSIONS, o as CreateDefinitionInputSchema } from \"../../../../chunks/src.js\";\nimport { _ as getProjectProvider, c as getDefinitionService, j as fetchSchemaFromCompute } from \"../../../../chunks/providers.server.js\";\nimport { o as requireCanCreateDefinition } from \"../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, o as resolveServerForOrg, r as handleApiError, t as ApiErrorCode } from \"../../../../chunks/api-errors.js\";\nimport { d as MAX_GH_FILE_SIZE, f as MAX_IMAGE_FILE_SIZE } from \"../../../../chunks/computeLimits.js\";\nimport \"../../../../chunks/admin-config.js\";\nimport \"../../../../chunks/definitions.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/api/definitions/+server.ts\nfunction parseTags(raw) {\n\tif (typeof raw !== \"string\" || !raw.trim()) return void 0;\n\tconst tags = raw.split(\",\").map((t) => t.trim()).filter(Boolean);\n\treturn tags.length ? tags : void 0;\n}\nvar POST = async ({ request, locals }) => {\n\tconst ctx = locals.ctx;\n\tconst formData = await request.formData();\n\tconst file = formData.get(\"file\");\n\tif (!(file instanceof File)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"A Grasshopper (.gh or .ghx) file is required\");\n\tconst ext = file.name.slice(file.name.lastIndexOf(\".\")).toLowerCase();\n\tif (!GH_EXTENSIONS.includes(ext)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `File type not allowed. Allowed: ${GH_EXTENSIONS.join(\", \")}`);\n\tif (file.size > MAX_GH_FILE_SIZE) apiError(400, ApiErrorCode.VALIDATION_FAILED, `File too large. Max size: ${MAX_GH_FILE_SIZE / (1024 * 1024)} MB`);\n\tconst imageFile = formData.get(\"image\");\n\tif (imageFile instanceof File && imageFile.size > MAX_IMAGE_FILE_SIZE) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Image too large. Max size: ${MAX_IMAGE_FILE_SIZE / (1024 * 1024)} MB`);\n\tlet projectId = formData.get(\"projectId\");\n\tif (typeof projectId !== \"string\" || !projectId) {\n\t\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\t\tconst defaultProject = (await getProjectProvider().listProjects(ctx, ctx.actingOrgId, { limit: 1 })).items[0];\n\t\tif (!defaultProject) apiError(500, ApiErrorCode.INTERNAL, \"No project configured\");\n\t\tprojectId = defaultProject.id;\n\t}\n\tconst { project } = await requireCanCreateDefinition(locals, projectId);\n\tconst parsed = CreateDefinitionInputSchema.safeParse({\n\t\tdisplayName: formData.get(\"displayName\"),\n\t\tdescription: formData.get(\"description\") || void 0,\n\t\tcategory: formData.get(\"category\") || void 0,\n\t\tcoverImage: formData.get(\"coverImage\") || void 0,\n\t\ttags: parseTags(formData.get(\"tags\")),\n\t\tprojectId,\n\t\tcomputeServerId: formData.get(\"computeServerId\") || void 0\n\t});\n\tif (!parsed.success) throwZodError(parsed.error);\n\tconst fileExt = ext.slice(1);\n\tconst guid = randomUUID();\n\ttry {\n\t\tconst fileData = new Uint8Array(await file.arrayBuffer());\n\t\tconst schema = await fetchSchemaFromCompute(fileData, await resolveServerForOrg(ctx, project.orgId, { definitionPin: parsed.data.computeServerId ?? null }));\n\t\tconst { record, version } = await getDefinitionService().create(ctx, {\n\t\t\tguid,\n\t\t\tprojectId: parsed.data.projectId,\n\t\t\townerId: locals.user.id,\n\t\t\tfileExt,\n\t\t\toriginalFilename: file.name,\n\t\t\tcomputeServerId: parsed.data.computeServerId,\n\t\t\tdisplayName: parsed.data.displayName.trim(),\n\t\t\tdescription: parsed.data.description,\n\t\t\tcategory: parsed.data.category,\n\t\t\ttags: parsed.data.tags,\n\t\t\tcoverImage: parsed.data.coverImage\n\t\t}, fileData, schema);\n\t\tlet coverImage = record.coverImage;\n\t\tif (imageFile instanceof File && imageFile.size > 0) {\n\t\t\tconst imageData = new Uint8Array(await imageFile.arrayBuffer());\n\t\t\tcoverImage = await getDefinitionService().saveCoverImage(ctx, guid, imageData);\n\t\t}\n\t\treturn json({\n\t\t\tguid,\n\t\t\tversion,\n\t\t\tcoverImage\n\t\t}, { status: 201 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to create definition\");\n\t}\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AASA;AACA,SAAS,SAAS,CAAC,GAAG,EAAE;AACxB,CAAC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,OAAO,MAAM;AAC1D,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;AACjE,CAAC,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,MAAM;AACnC;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC1C,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;AAC1C,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;AAClC,CAAC,IAAI,EAAE,IAAI,YAAY,IAAI,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,8CAA8C,CAAC;AAC3H,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE;AACtE,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,gCAAgC,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC/I,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,gBAAgB,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,0BAA0B,EAAE,gBAAgB,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AACpJ,CAAC,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;AACxC,CAAC,IAAI,SAAS,YAAY,IAAI,IAAI,SAAS,CAAC,IAAI,GAAG,mBAAmB,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,2BAA2B,EAAE,mBAAmB,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AAC7L,CAAC,IAAI,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC;AAC1C,CAAC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,EAAE;AAClD,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC/F,EAAE,MAAM,cAAc,GAAG,CAAC,MAAM,kBAAkB,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AAC/G,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,uBAAuB,CAAC;AACpF,EAAE,SAAS,GAAG,cAAc,CAAC,EAAE;AAC/B,CAAC;AACD,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,SAAS,CAAC;AACxE,CAAC,MAAM,MAAM,GAAG,2BAA2B,CAAC,SAAS,CAAC;AACtD,EAAE,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC;AAC1C,EAAE,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,MAAM;AACpD,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,MAAM;AAC9C,EAAE,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,MAAM;AAClD,EAAE,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACvC,EAAE,SAAS;AACX,EAAE,eAAe,EAAE,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI;AACtD,EAAE,CAAC;AACH,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7B,CAAC,MAAM,IAAI,GAAG,UAAU,EAAE;AAC1B,CAAC,IAAI;AACL,EAAE,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AAC3D,EAAE,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,QAAQ,EAAE,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC,CAAC;AAC9J,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,oBAAoB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE;AACvE,GAAG,IAAI;AACP,GAAG,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;AACnC,GAAG,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC1B,GAAG,OAAO;AACV,GAAG,gBAAgB,EAAE,IAAI,CAAC,IAAI;AAC9B,GAAG,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe;AAC/C,GAAG,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;AAC9C,GAAG,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AACvC,GAAG,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;AACjC,GAAG,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AACzB,GAAG,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC;AAC3B,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC;AACtB,EAAE,IAAI,UAAU,GAAG,MAAM,CAAC,UAAU;AACpC,EAAE,IAAI,SAAS,YAAY,IAAI,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE;AACvD,GAAG,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC;AAClE,GAAG,UAAU,GAAG,MAAM,oBAAoB,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC;AACjF,EAAE;AACF,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,IAAI;AACP,GAAG,OAAO;AACV,GAAG;AACH,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACpD,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/diag/throughput/_server.ts.js-BtawOrrp.js

@@ -0,0 +1,59 @@
+import { b as private_env } from '../../../../../chunks/shared-server.js-BjFXsyhJ.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-qWNEcN6_.js';
+import { randomFillSync } from 'node:crypto';
+import '../../../../../chunks/src.js-C5mUn1eC.js';
+import 'zod';
+import '../../../../../chunks/providers.server.js-2HaeDkdE.js';
+import '../../../../../chunks/limits.js-Dw3YYMI2.js';
+import '../../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../chunks/utils2.js-CuEJmHGN.js';
+import '@sveltejs/kit';
+
+//#region src/routes/api/diag/throughput/+server.ts
+var COMPUTE_DEBUG = [
+	"true",
+	"1",
+	"yes"
+].includes((private_env.SELVA_FLAG_COMPUTE_DEBUG ?? "").toLowerCase());
+var CHUNK_BYTES = 1024 * 1024;
+var DEFAULT_MB = 20;
+var MAX_MB = 64;
+var GET = async ({ locals, url }) => {
+	if (!COMPUTE_DEBUG) apiError(404, ApiErrorCode.NOT_FOUND, "Not found");
+	if (!locals.user) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
+	const requested = Number(url.searchParams.get("mb"));
+	const mb = Math.min(MAX_MB, Math.max(1, Number.isFinite(requested) ? requested : DEFAULT_MB));
+	let sentChunks = 0;
+	const start = performance.now();
+	const stream = new ReadableStream({ pull(controller) {
+		if (sentChunks >= mb) {
+			controller.close();
+			const secs = (performance.now() - start) / 1e3;
+			locals.log.debug("Streamed throughput probe (server-side view)", {
+				component: "Compute/diag",
+				megabytes: mb,
+				durationSec: Number(secs.toFixed(1)),
+				throughputMbPerSec: Number((mb / secs).toFixed(1))
+			});
+			return;
+		}
+		const chunk = new Uint8Array(CHUNK_BYTES);
+		randomFillSync(chunk);
+		controller.enqueue(chunk);
+		sentChunks++;
+	} });
+	return new Response(stream, { headers: {
+		"Content-Type": "application/octet-stream",
+		"Content-Length": String(mb * CHUNK_BYTES),
+		"Cache-Control": "no-store"
+	} });
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-BtawOrrp.js.map

package/build/server/chunks/entries/endpoints/api/diag/throughput/_server.ts.js-BtawOrrp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-BtawOrrp.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/diag/throughput/_server.ts.js"],"sourcesContent":["import { t as private_env } from \"../../../../../chunks/shared-server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { randomFillSync } from \"node:crypto\";\n//#region src/routes/api/diag/throughput/+server.ts\nvar COMPUTE_DEBUG = [\n\t\"true\",\n\t\"1\",\n\t\"yes\"\n].includes((private_env.SELVA_FLAG_COMPUTE_DEBUG ?? \"\").toLowerCase());\nvar CHUNK_BYTES = 1024 * 1024;\nvar DEFAULT_MB = 20;\nvar MAX_MB = 64;\nvar GET = async ({ locals, url }) => {\n\tif (!COMPUTE_DEBUG) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n\tif (!locals.user) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n\tconst requested = Number(url.searchParams.get(\"mb\"));\n\tconst mb = Math.min(MAX_MB, Math.max(1, Number.isFinite(requested) ? requested : DEFAULT_MB));\n\tlet sentChunks = 0;\n\tconst start = performance.now();\n\tconst stream = new ReadableStream({ pull(controller) {\n\t\tif (sentChunks >= mb) {\n\t\t\tcontroller.close();\n\t\t\tconst secs = (performance.now() - start) / 1e3;\n\t\t\tlocals.log.debug(\"Streamed throughput probe (server-side view)\", {\n\t\t\t\tcomponent: \"Compute/diag\",\n\t\t\t\tmegabytes: mb,\n\t\t\t\tdurationSec: Number(secs.toFixed(1)),\n\t\t\t\tthroughputMbPerSec: Number((mb / secs).toFixed(1))\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\tconst chunk = new Uint8Array(CHUNK_BYTES);\n\t\trandomFillSync(chunk);\n\t\tcontroller.enqueue(chunk);\n\t\tsentChunks++;\n\t} });\n\treturn new Response(stream, { headers: {\n\t\t\"Content-Type\": \"application/octet-stream\",\n\t\t\"Content-Length\": String(mb * CHUNK_BYTES),\n\t\t\"Cache-Control\": \"no-store\"\n\t} });\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAGA;AACA,IAAI,aAAa,GAAG;AACpB,CAAC,MAAM;AACP,CAAC,GAAG;AACJ,CAAC;AACD,CAAC,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,wBAAwB,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC;AACtE,IAAI,WAAW,GAAG,IAAI,GAAG,IAAI;AAC7B,IAAI,UAAU,GAAG,EAAE;AACnB,IAAI,MAAM,GAAG,EAAE;AACZ,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACrC,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AACvE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC3E,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,SAAS,GAAG,UAAU,CAAC,CAAC;AAC9F,CAAC,IAAI,UAAU,GAAG,CAAC;AACnB,CAAC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;AAChC,CAAC,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE;AACtD,EAAE,IAAI,UAAU,IAAI,EAAE,EAAE;AACxB,GAAG,UAAU,CAAC,KAAK,EAAE;AACrB,GAAG,MAAM,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,GAAG;AACjD,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,8CAA8C,EAAE;AACpE,IAAI,SAAS,EAAE,cAAc;AAC7B,IAAI,SAAS,EAAE,EAAE;AACjB,IAAI,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACxC,IAAI,kBAAkB,EAAE,MAAM,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AACrD,IAAI,CAAC;AACL,GAAG;AACH,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC;AAC3C,EAAE,cAAc,CAAC,KAAK,CAAC;AACvB,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC;AAC3B,EAAE,UAAU,EAAE;AACd,CAAC,CAAC,EAAE,CAAC;AACL,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;AACxC,EAAE,cAAc,EAAE,0BAA0B;AAC5C,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,GAAG,WAAW,CAAC;AAC5C,EAAE,eAAe,EAAE;AACnB,EAAE,EAAE,CAAC;AACL;;;;"}

package/build/server/chunks/entries/endpoints/api/files/_...path_/_server.ts.js-CE0mmign.js

@@ -0,0 +1,89 @@
+import { c as classifyAssetPath, e as GuidSchema, g as COVER_IMAGE_CONTENT_TYPES } from '../../../../../chunks/src.js-C5mUn1eC.js';
+import { o as getDefinitionMeta, F as definitionPaths, x as getStorageProvider } from '../../../../../chunks/providers.server.js-2HaeDkdE.js';
+import { o as requireCanViewProject, q as requireCanViewOrg } from '../../../../../chunks/access.server.js-CNK7b0lL.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-qWNEcN6_.js';
+import 'zod';
+import '../../../../../chunks/shared-server.js-BjFXsyhJ.js';
+import '../../../../../chunks/limits.js-Dw3YYMI2.js';
+import '../../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '../../../../../chunks/utils2.js-CuEJmHGN.js';
+
+//#region src/routes/api/files/[...path]/+server.ts
+/**
+* Authenticated/­public blob proxy. The set of servable paths is the closed
+* asset-class registry (`classifyAssetPath` / `ASSET_CLASSES` in
+* `@selvajs/platform`). Each class declares a visibility; this route maps that
+* visibility to an authorization check:
+*
+*   - `public`  (org branding — logo/favicon): served to anyone, incl.
+*     logged-out visitors, with no auth. Cacheable. The bytes are always a
+*     rasterized WebP, so there is no XSS surface to gate.
+*   - `org`     (org-private blobs, e.g. pricing sheets under
+*     `orgs/{id}/private/*`): `requireCanViewOrg(orgId)`.
+*   - `project` (definition covers): `requireCanViewProject(projectId)` — the
+*     M5 hardening, unchanged.
+*
+* Anything that classifies to no asset class 404s. New blob types are opt-in:
+* add a registry entry with the right visibility — never a generic
+* "is the extension allowed" fallthrough. Authorization lives here (the route),
+* not in the storage layer, per `IStorageProvider`'s contract.
+*
+* Why a single proxy for all three: with the registry, the route is no longer a
+* pile of per-shape branches — it classifies once and dispatches on visibility,
+* so the cover-only contract that this route used to pin now generalizes
+* without re-opening the M5 hole.
+*/
+var CONTENT_TYPE_BY_EXT = {
+	...COVER_IMAGE_CONTENT_TYPES,
+	".pdf": "application/pdf"
+};
+function contentTypeFor(storagePath) {
+	const dot = storagePath.lastIndexOf(".");
+	return CONTENT_TYPE_BY_EXT[dot === -1 ? "" : storagePath.slice(dot).toLowerCase()] ?? "application/octet-stream";
+}
+var GET = async ({ params, locals }) => {
+	const storagePath = params.path;
+	if (!storagePath) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing path");
+	const match = classifyAssetPath(storagePath);
+	if (!match) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
+	let canonicalPath = storagePath;
+	switch (match.class.visibility) {
+		case "public": break;
+		case "org": {
+			if (!locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
+			const orgId = match.scopeId;
+			if (!orgId) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
+			await requireCanViewOrg(locals, orgId);
+			break;
+		}
+		case "project": {
+			if (!locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
+			const guid = match.scopeId;
+			const guidParsed = GuidSchema.safeParse(guid);
+			if (!guidParsed.success) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
+			const record = await getDefinitionMeta().get(locals.ctx, guidParsed.data);
+			if (!record) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
+			await requireCanViewProject(locals, record.projectId);
+			canonicalPath = definitionPaths.image(guidParsed.data);
+			break;
+		}
+	}
+	const bytes = await getStorageProvider().get(canonicalPath);
+	if (!bytes) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
+	const cacheControl = match.class.visibility === "public" ? "public, max-age=3600" : "private, max-age=3600";
+	return new Response(Buffer.from(bytes), { headers: {
+		"Content-Type": contentTypeFor(canonicalPath),
+		"Cache-Control": cacheControl
+	} });
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-CE0mmign.js.map

package/build/server/chunks/entries/endpoints/api/files/_...path_/_server.ts.js-CE0mmign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CE0mmign.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/files/_...path_/_server.ts.js"],"sourcesContent":["import { r as classifyAssetPath, s as GuidSchema, u as COVER_IMAGE_CONTENT_TYPES } from \"../../../../../chunks/src.js\";\nimport { I as definitionPaths, s as getDefinitionMeta, y as getStorageProvider } from \"../../../../../chunks/providers.server.js\";\nimport { h as requireCanViewProject, m as requireCanViewOrg } from \"../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\n//#region src/routes/api/files/[...path]/+server.ts\n/**\n* Authenticated/­public blob proxy. The set of servable paths is the closed\n* asset-class registry (`classifyAssetPath` / `ASSET_CLASSES` in\n* `@selvajs/platform`). Each class declares a visibility; this route maps that\n* visibility to an authorization check:\n*\n*   - `public`  (org branding — logo/favicon): served to anyone, incl.\n*     logged-out visitors, with no auth. Cacheable. The bytes are always a\n*     rasterized WebP, so there is no XSS surface to gate.\n*   - `org`     (org-private blobs, e.g. pricing sheets under\n*     `orgs/{id}/private/*`): `requireCanViewOrg(orgId)`.\n*   - `project` (definition covers): `requireCanViewProject(projectId)` — the\n*     M5 hardening, unchanged.\n*\n* Anything that classifies to no asset class 404s. New blob types are opt-in:\n* add a registry entry with the right visibility — never a generic\n* \"is the extension allowed\" fallthrough. Authorization lives here (the route),\n* not in the storage layer, per `IStorageProvider`'s contract.\n*\n* Why a single proxy for all three: with the registry, the route is no longer a\n* pile of per-shape branches — it classifies once and dispatches on visibility,\n* so the cover-only contract that this route used to pin now generalizes\n* without re-opening the M5 hole.\n*/\nvar CONTENT_TYPE_BY_EXT = {\n\t...COVER_IMAGE_CONTENT_TYPES,\n\t\".pdf\": \"application/pdf\"\n};\nfunction contentTypeFor(storagePath) {\n\tconst dot = storagePath.lastIndexOf(\".\");\n\treturn CONTENT_TYPE_BY_EXT[dot === -1 ? \"\" : storagePath.slice(dot).toLowerCase()] ?? \"application/octet-stream\";\n}\nvar GET = async ({ params, locals }) => {\n\tconst storagePath = params.path;\n\tif (!storagePath) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing path\");\n\tconst match = classifyAssetPath(storagePath);\n\tif (!match) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n\tlet canonicalPath = storagePath;\n\tswitch (match.class.visibility) {\n\t\tcase \"public\": break;\n\t\tcase \"org\": {\n\t\t\tif (!locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n\t\t\tconst orgId = match.scopeId;\n\t\t\tif (!orgId) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n\t\t\tawait requireCanViewOrg(locals, orgId);\n\t\t\tbreak;\n\t\t}\n\t\tcase \"project\": {\n\t\t\tif (!locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n\t\t\tconst guid = match.scopeId;\n\t\t\tconst guidParsed = GuidSchema.safeParse(guid);\n\t\t\tif (!guidParsed.success) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n\t\t\tconst record = await getDefinitionMeta().get(locals.ctx, guidParsed.data);\n\t\t\tif (!record) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n\t\t\tawait requireCanViewProject(locals, record.projectId);\n\t\t\tcanonicalPath = definitionPaths.image(guidParsed.data);\n\t\t\tbreak;\n\t\t}\n\t}\n\tconst bytes = await getStorageProvider().get(canonicalPath);\n\tif (!bytes) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n\tconst cacheControl = match.class.visibility === \"public\" ? \"public, max-age=3600\" : \"private, max-age=3600\";\n\treturn new Response(Buffer.from(bytes), { headers: {\n\t\t\"Content-Type\": contentTypeFor(canonicalPath),\n\t\t\"Cache-Control\": cacheControl\n\t} });\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,mBAAmB,GAAG;AAC1B,CAAC,GAAG,yBAAyB;AAC7B,CAAC,MAAM,EAAE;AACT,CAAC;AACD,SAAS,cAAc,CAAC,WAAW,EAAE;AACrC,CAAC,MAAM,GAAG,GAAG,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC;AACzC,CAAC,OAAO,mBAAmB,CAAC,GAAG,KAAK,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B;AACjH;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AACxC,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI;AAChC,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,cAAc,CAAC;AAChF,CAAC,MAAM,KAAK,GAAG,iBAAiB,CAAC,WAAW,CAAC;AAC7C,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACpE,CAAC,IAAI,aAAa,GAAG,WAAW;AAChC,CAAC,QAAQ,KAAK,CAAC,KAAK,CAAC,UAAU;AAC/B,EAAE,KAAK,QAAQ,EAAE;AACjB,EAAE,KAAK,KAAK,EAAE;AACd,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC5E,GAAG,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO;AAC9B,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACtE,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC;AACzC,GAAG;AACH,EAAE;AACF,EAAE,KAAK,SAAS,EAAE;AAClB,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC5E,GAAG,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO;AAC7B,GAAG,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;AAChD,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACnF,GAAG,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AAC5E,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACvE,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC;AACxD,GAAG,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;AACzD,GAAG;AACH,EAAE;AACF;AACA,CAAC,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC;AAC5D,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACpE,CAAC,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,KAAK,QAAQ,GAAG,sBAAsB,GAAG,uBAAuB;AAC5G,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE;AACpD,EAAE,cAAc,EAAE,cAAc,CAAC,aAAa,CAAC;AAC/C,EAAE,eAAe,EAAE;AACnB,EAAE,EAAE,CAAC;AACL;;;;"}

package/build/server/chunks/entries/endpoints/api/health/_server.ts.js-VuISAmoY.js

@@ -0,0 +1,56 @@
+import { g as getBootHealth, i as isDegraded } from '../../../../chunks/bootHealth.server.js-L-OcLc4U.js';
+import { json } from '@sveltejs/kit';
+import { randomUUID } from 'crypto';
+import { createRequire } from 'module';
+import '../../../../chunks/providers.server.js-2HaeDkdE.js';
+import '../../../../chunks/shared-server.js-BjFXsyhJ.js';
+import '../../../../chunks/src.js-C5mUn1eC.js';
+import 'zod';
+import '../../../../chunks/limits.js-Dw3YYMI2.js';
+import '../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+//#region src/routes/api/health/+server.ts
+var INSTANCE_ID = randomUUID();
+var RUNTIME_VERSION = (() => {
+	try {
+		return createRequire(import.meta.url)("@selvajs/selva/package.json").version;
+	} catch {
+		return null;
+	}
+})();
+/**
+* Health check endpoint for load balancers and orchestration systems.
+* Used by Docker healthchecks, Kubernetes liveness probes, and monitoring tools.
+*
+* The `instanceId` field is a per-boot fingerprint — clients polling after a
+* restart confirm the *new* process is responding (not the old one about to be
+* killed) by watching for the value to change.
+*
+* Returns 503 with `status: "degraded"` when boot-time integrity checks
+* failed (e.g. compute server apiKeys can't be decrypted under the current
+* `SELVA_AT_REST_KEY`). The body lists which servers and why, so an operator
+* curling the endpoint can diagnose without server-log access. The app
+* still serves requests in this state (per-row tolerance) — the 503 is
+* specifically a signal for load balancers / monitoring.
+*/
+var GET = async () => {
+	const boot = await getBootHealth();
+	const degraded = isDegraded(boot);
+	return json({
+		status: degraded ? "degraded" : "ok",
+		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+		instanceId: INSTANCE_ID,
+		version: RUNTIME_VERSION,
+		boot
+	}, { status: degraded ? 503 : 200 });
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-VuISAmoY.js.map

package/build/server/chunks/entries/endpoints/api/health/_server.ts.js-VuISAmoY.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-VuISAmoY.js","sources":["../../../../../../../.svelte-kit/output/server/entries/endpoints/api/health/_server.ts.js"],"sourcesContent":["import { n as isDegraded, t as getBootHealth } from \"../../../../chunks/bootHealth.server.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"crypto\";\nimport { createRequire } from \"module\";\n//#region src/routes/api/health/+server.ts\nvar INSTANCE_ID = randomUUID();\nvar RUNTIME_VERSION = (() => {\n\ttry {\n\t\treturn createRequire(import.meta.url)(\"@selvajs/selva/package.json\").version;\n\t} catch {\n\t\treturn null;\n\t}\n})();\n/**\n* Health check endpoint for load balancers and orchestration systems.\n* Used by Docker healthchecks, Kubernetes liveness probes, and monitoring tools.\n*\n* The `instanceId` field is a per-boot fingerprint — clients polling after a\n* restart confirm the *new* process is responding (not the old one about to be\n* killed) by watching for the value to change.\n*\n* Returns 503 with `status: \"degraded\"` when boot-time integrity checks\n* failed (e.g. compute server apiKeys can't be decrypted under the current\n* `SELVA_AT_REST_KEY`). The body lists which servers and why, so an operator\n* curling the endpoint can diagnose without server-log access. The app\n* still serves requests in this state (per-row tolerance) — the 503 is\n* specifically a signal for load balancers / monitoring.\n*/\nvar GET = async () => {\n\tconst boot = await getBootHealth();\n\tconst degraded = isDegraded(boot);\n\treturn json({\n\t\tstatus: degraded ? \"degraded\" : \"ok\",\n\t\ttimestamp: (/* @__PURE__ */ new Date()).toISOString(),\n\t\tinstanceId: INSTANCE_ID,\n\t\tversion: RUNTIME_VERSION,\n\t\tboot\n\t}, { status: degraded ? 503 : 200 });\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAIA;AACA,IAAI,WAAW,GAAG,UAAU,EAAE;AAC9B,IAAI,eAAe,GAAG,CAAC,MAAM;AAC7B,CAAC,IAAI;AACL,EAAE,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,6BAA6B,CAAC,CAAC,OAAO;AAC9E,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,IAAI;AACb,CAAC;AACD,CAAC,GAAG;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,YAAY;AACtB,CAAC,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE;AACnC,CAAC,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC;AAClC,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,IAAI;AACtC,EAAE,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACvD,EAAE,UAAU,EAAE,WAAW;AACzB,EAAE,OAAO,EAAE,eAAe;AAC1B,EAAE;AACF,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC;AACrC;;;;"}

package/build/server/chunks/entries/endpoints/api/invites/_id_/_server.ts.js-CUzHDL4-.js

@@ -0,0 +1,49 @@
+import { t as getInviteStore } from '../../../../../chunks/providers.server.js-2HaeDkdE.js';
+import { j as requireManageOrgMembers } from '../../../../../chunks/access.server.js-CNK7b0lL.js';
+import { a as apiError, A as ApiErrorCode, h as handleApiError } from '../../../../../chunks/api-errors.js-qWNEcN6_.js';
+import '../../../../../chunks/shared-server.js-BjFXsyhJ.js';
+import '../../../../../chunks/src.js-C5mUn1eC.js';
+import 'zod';
+import '../../../../../chunks/limits.js-Dw3YYMI2.js';
+import '../../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '../../../../../chunks/utils2.js-CuEJmHGN.js';
+
+//#region src/routes/api/invites/[id]/+server.ts
+var DELETE = async ({ params, locals }) => {
+	requireManageOrgMembers(locals);
+	const ctx = locals.ctx;
+	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
+	const id = params.id;
+	try {
+		const store = getInviteStore();
+		let cursor;
+		let found = false;
+		do {
+			const page = await store.listByOrg(ctx, ctx.actingOrgId, {
+				limit: 200,
+				cursor
+			});
+			if (page.items.some((i) => i.id === id)) {
+				found = true;
+				break;
+			}
+			cursor = page.nextCursor ?? void 0;
+		} while (cursor);
+		if (!found) apiError(404, ApiErrorCode.NOT_FOUND, "Invite not found");
+		await store.revoke(ctx, id);
+		return new Response(null, { status: 204 });
+	} catch (err) {
+		handleApiError(err, "Failed to revoke invite");
+	}
+};
+
+export { DELETE };
+//# sourceMappingURL=_server.ts.js-CUzHDL4-.js.map

package/build/server/chunks/entries/endpoints/api/invites/_id_/_server.ts.js-CUzHDL4-.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CUzHDL4-.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/invites/_id_/_server.ts.js"],"sourcesContent":["import { d as getInviteStore } from \"../../../../../chunks/providers.server.js\";\nimport { x as requireManageOrgMembers } from \"../../../../../chunks/access.server.js\";\nimport { n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\n//#region src/routes/api/invites/[id]/+server.ts\nvar DELETE = async ({ params, locals }) => {\n\trequireManageOrgMembers(locals);\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tconst id = params.id;\n\ttry {\n\t\tconst store = getInviteStore();\n\t\tlet cursor;\n\t\tlet found = false;\n\t\tdo {\n\t\t\tconst page = await store.listByOrg(ctx, ctx.actingOrgId, {\n\t\t\t\tlimit: 200,\n\t\t\t\tcursor\n\t\t\t});\n\t\t\tif (page.items.some((i) => i.id === id)) {\n\t\t\t\tfound = true;\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tcursor = page.nextCursor ?? void 0;\n\t\t} while (cursor);\n\t\tif (!found) apiError(404, ApiErrorCode.NOT_FOUND, \"Invite not found\");\n\t\tawait store.revoke(ctx, id);\n\t\treturn new Response(null, { status: 204 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to revoke invite\");\n\t}\n};\n//#endregion\nexport { DELETE };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAGA;AACG,IAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE;AACrB,CAAC,IAAI;AACL,EAAE,MAAM,KAAK,GAAG,cAAc,EAAE;AAChC,EAAE,IAAI,MAAM;AACZ,EAAE,IAAI,KAAK,GAAG,KAAK;AACnB,EAAE,GAAG;AACL,GAAG,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE;AAC5D,IAAI,KAAK,EAAE,GAAG;AACd,IAAI;AACJ,IAAI,CAAC;AACL,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;AAC5C,IAAI,KAAK,GAAG,IAAI;AAChB,IAAI;AACJ,GAAG;AACH,GAAG,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC;AACrC,EAAE,CAAC,QAAQ,MAAM;AACjB,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,kBAAkB,CAAC;AACvE,EAAE,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AAC7B,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAChD,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/invites/_server.ts.js-DDG7YZgA.js

@@ -0,0 +1,77 @@
+import { M as MEMBER_ASSIGNABLE_PERMISSIONS, D as DEFAULT_ORG_PERMISSIONS, k as OrgRoleSchema, P as PlatformPermissionSchema, b as OrgPermissionSchema } from '../../../../chunks/src.js-C5mUn1eC.js';
+import { t as getInviteStore } from '../../../../chunks/providers.server.js-2HaeDkdE.js';
+import { j as requireManageOrgMembers } from '../../../../chunks/access.server.js-CNK7b0lL.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from '../../../../chunks/api-errors.js-qWNEcN6_.js';
+import { s as splitFlatPermissions } from '../../../../chunks/permissions-compat.server.js-Ba1Un-4O.js';
+import { m as mintRawToken, h as hashToken } from '../../../../chunks/token2.server.js-BcA0GWgF.js';
+import { json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { randomUUID } from 'node:crypto';
+import '../../../../chunks/shared-server.js-BjFXsyhJ.js';
+import '../../../../chunks/limits.js-Dw3YYMI2.js';
+import '../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../chunks/utils2.js-CuEJmHGN.js';
+import '../../../../chunks/token-codec.js-CxK2DiO-.js';
+
+//#region src/routes/api/invites/+server.ts
+var FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);
+var CreateBody = z.object({
+	email: z.string().email("Valid email is required").transform((s) => s.toLowerCase().trim()),
+	orgRole: OrgRoleSchema.default("member"),
+	permissions: z.array(FlatPermissionSchema).default([])
+});
+var INVITE_TTL_MS = 10080 * 60 * 1e3;
+var GET = async ({ locals }) => {
+	requireManageOrgMembers(locals);
+	const ctx = locals.ctx;
+	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
+	try {
+		return json({ invites: (await getInviteStore().listByOrg(ctx, ctx.actingOrgId, { limit: 200 })).items.map(({ tokenHash: _omit, ...rest }) => rest) });
+	} catch (err) {
+		handleApiError(err, "Failed to list invites");
+	}
+};
+var POST = async ({ request, locals, url }) => {
+	requireManageOrgMembers(locals);
+	const ctx = locals.ctx;
+	const user = locals.user;
+	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
+	const body = await request.json().catch(() => null);
+	const parsed = CreateBody.safeParse(body);
+	if (!parsed.success) throwZodError(parsed.error);
+	try {
+		const { org: submittedOrgPerms } = splitFlatPermissions(parsed.data.permissions);
+		const orgPermissions = parsed.data.orgRole === "member" ? submittedOrgPerms.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[parsed.data.orgRole]];
+		const rawToken = mintRawToken();
+		const now = /* @__PURE__ */ new Date();
+		const invite = {
+			id: randomUUID(),
+			tokenHash: hashToken(rawToken),
+			email: parsed.data.email,
+			orgId: ctx.actingOrgId,
+			orgRole: parsed.data.orgRole,
+			orgPermissions,
+			invitedBy: user.id,
+			createdAt: now.toISOString(),
+			expiresAt: new Date(now.getTime() + INVITE_TTL_MS).toISOString()
+		};
+		await getInviteStore().create(ctx, invite);
+		const acceptUrl = `${url.origin}/accept-invite?token=${rawToken}`;
+		const { tokenHash: _omit, ...inviteForClient } = invite;
+		return json({
+			invite: inviteForClient,
+			acceptUrl
+		}, { status: 201 });
+	} catch (err) {
+		handleApiError(err, "Failed to create invite");
+	}
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-DDG7YZgA.js.map

package/build/server/chunks/entries/endpoints/api/invites/_server.ts.js-DDG7YZgA.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-DDG7YZgA.js","sources":["../../../../../../../.svelte-kit/output/server/entries/endpoints/api/invites/_server.ts.js"],"sourcesContent":["import { E as PlatformPermissionSchema, S as OrgRoleSchema, _ as DEFAULT_ORG_PERMISSIONS, v as MEMBER_ASSIGNABLE_PERMISSIONS, x as OrgPermissionSchema } from \"../../../../chunks/src.js\";\nimport { d as getInviteStore } from \"../../../../chunks/providers.server.js\";\nimport { x as requireManageOrgMembers } from \"../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../chunks/api-errors.js\";\nimport { n as splitFlatPermissions } from \"../../../../chunks/permissions-compat.server.js\";\nimport { n as mintRawToken, t as hashToken } from \"../../../../chunks/token2.server.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/api/invites/+server.ts\nvar FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);\nvar CreateBody = z.object({\n\temail: z.string().email(\"Valid email is required\").transform((s) => s.toLowerCase().trim()),\n\torgRole: OrgRoleSchema.default(\"member\"),\n\tpermissions: z.array(FlatPermissionSchema).default([])\n});\nvar INVITE_TTL_MS = 10080 * 60 * 1e3;\nvar GET = async ({ locals }) => {\n\trequireManageOrgMembers(locals);\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\ttry {\n\t\treturn json({ invites: (await getInviteStore().listByOrg(ctx, ctx.actingOrgId, { limit: 200 })).items.map(({ tokenHash: _omit, ...rest }) => rest) });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to list invites\");\n\t}\n};\nvar POST = async ({ request, locals, url }) => {\n\trequireManageOrgMembers(locals);\n\tconst ctx = locals.ctx;\n\tconst user = locals.user;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tconst body = await request.json().catch(() => null);\n\tconst parsed = CreateBody.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\ttry {\n\t\tconst { org: submittedOrgPerms } = splitFlatPermissions(parsed.data.permissions);\n\t\tconst orgPermissions = parsed.data.orgRole === \"member\" ? submittedOrgPerms.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[parsed.data.orgRole]];\n\t\tconst rawToken = mintRawToken();\n\t\tconst now = /* @__PURE__ */ new Date();\n\t\tconst invite = {\n\t\t\tid: randomUUID(),\n\t\t\ttokenHash: hashToken(rawToken),\n\t\t\temail: parsed.data.email,\n\t\t\torgId: ctx.actingOrgId,\n\t\t\torgRole: parsed.data.orgRole,\n\t\t\torgPermissions,\n\t\t\tinvitedBy: user.id,\n\t\t\tcreatedAt: now.toISOString(),\n\t\t\texpiresAt: new Date(now.getTime() + INVITE_TTL_MS).toISOString()\n\t\t};\n\t\tawait getInviteStore().create(ctx, invite);\n\t\tconst acceptUrl = `${url.origin}/accept-invite?token=${rawToken}`;\n\t\tconst { tokenHash: _omit, ...inviteForClient } = invite;\n\t\treturn json({\n\t\t\tinvite: inviteForClient,\n\t\t\tacceptUrl\n\t\t}, { status: 201 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to create invite\");\n\t}\n};\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AASA;AACA,IAAI,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;AACnF,IAAI,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;AAC1B,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AAC5F,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;AACzC,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE;AACtD,CAAC,CAAC;AACF,IAAI,aAAa,GAAG,KAAK,GAAG,EAAE,GAAG,GAAG;AACjC,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAChC,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,IAAI;AACL,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,cAAc,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;AACvJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAC/C,CAAC;AACD;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AAC/C,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AACzB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1C,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,IAAI;AACL,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;AAClF,EAAE,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC1L,EAAE,MAAM,QAAQ,GAAG,YAAY,EAAE;AACjC,EAAE,MAAM,GAAG,mBAAmB,IAAI,IAAI,EAAE;AACxC,EAAE,MAAM,MAAM,GAAG;AACjB,GAAG,EAAE,EAAE,UAAU,EAAE;AACnB,GAAG,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC;AACjC,GAAG,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;AAC3B,GAAG,KAAK,EAAE,GAAG,CAAC,WAAW;AACzB,GAAG,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;AAC/B,GAAG,cAAc;AACjB,GAAG,SAAS,EAAE,IAAI,CAAC,EAAE;AACrB,GAAG,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;AAC/B,GAAG,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,WAAW;AACjE,GAAG;AACH,EAAE,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC;AAC5C,EAAE,MAAM,SAAS,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;AACnE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,eAAe,EAAE,GAAG,MAAM;AACzD,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,MAAM,EAAE,eAAe;AAC1B,GAAG;AACH,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAChD,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/me/starred/_guid_/_server.ts.js-COP6jfDX.js

@@ -0,0 +1,45 @@
+import { u as getUserProfileStore } from '../../../../../../chunks/providers.server.js-2HaeDkdE.js';
+import { a as apiError, h as handleApiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-qWNEcN6_.js';
+import { json } from '@sveltejs/kit';
+import '../../../../../../chunks/shared-server.js-BjFXsyhJ.js';
+import '../../../../../../chunks/src.js-C5mUn1eC.js';
+import 'zod';
+import '../../../../../../chunks/limits.js-Dw3YYMI2.js';
+import '../../../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/utils2.js-CuEJmHGN.js';
+
+//#region src/routes/api/me/starred/[guid]/+server.ts
+/** Star a definition for the current user. No-op if already starred. */
+var POST = async ({ params, locals }) => {
+	if (!locals.user || !locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
+	const guid = params.guid;
+	if (!guid) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing definition guid");
+	try {
+		await getUserProfileStore().starDefinition(locals.ctx, locals.user.id, guid);
+		return json({ starred: true });
+	} catch (err) {
+		handleApiError(err, "Failed to star definition");
+	}
+};
+/** Unstar a definition for the current user. No-op if not starred. */
+var DELETE = async ({ params, locals }) => {
+	if (!locals.user || !locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
+	const guid = params.guid;
+	if (!guid) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing definition guid");
+	try {
+		await getUserProfileStore().unstarDefinition(locals.ctx, locals.user.id, guid);
+		return json({ starred: false });
+	} catch (err) {
+		handleApiError(err, "Failed to unstar definition");
+	}
+};
+
+export { DELETE, POST };
+//# sourceMappingURL=_server.ts.js-COP6jfDX.js.map

package/build/server/chunks/entries/endpoints/api/me/starred/_guid_/_server.ts.js-COP6jfDX.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-COP6jfDX.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/me/starred/_guid_/_server.ts.js"],"sourcesContent":["import { x as getUserProfileStore } from \"../../../../../../chunks/providers.server.js\";\nimport { n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/me/starred/[guid]/+server.ts\n/** Star a definition for the current user. No-op if already starred. */\nvar POST = async ({ params, locals }) => {\n\tif (!locals.user || !locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n\tconst guid = params.guid;\n\tif (!guid) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing definition guid\");\n\ttry {\n\t\tawait getUserProfileStore().starDefinition(locals.ctx, locals.user.id, guid);\n\t\treturn json({ starred: true });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to star definition\");\n\t}\n};\n/** Unstar a definition for the current user. No-op if not starred. */\nvar DELETE = async ({ params, locals }) => {\n\tif (!locals.user || !locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n\tconst guid = params.guid;\n\tif (!guid) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing definition guid\");\n\ttry {\n\t\tawait getUserProfileStore().unstarDefinition(locals.ctx, locals.user.id, guid);\n\t\treturn json({ starred: false });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to unstar definition\");\n\t}\n};\n//#endregion\nexport { DELETE, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAGA;AACA;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AACzC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC1F,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AACzB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACpF,CAAC,IAAI;AACL,EAAE,MAAM,mBAAmB,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;AAC9E,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAChC,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,2BAA2B,CAAC;AAClD,CAAC;AACD;AACA;AACG,IAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC1F,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AACzB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACpF,CAAC,IAAI;AACL,EAAE,MAAM,mBAAmB,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;AAChF,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACjC,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACpD,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/org/compute/_server.ts.js-D9WmsbdS.js

@@ -0,0 +1,109 @@
+import '../../../../../chunks/src.js-C5mUn1eC.js';
+import { n as getComputeServerConfigStore, y as isOrgServer, m as isPlatformServer, k as flag } from '../../../../../chunks/providers.server.js-2HaeDkdE.js';
+import { s as serversVisibleTo } from '../../../../../chunks/utils2.js-CuEJmHGN.js';
+import { s as requireManageOrgCompute } from '../../../../../chunks/access.server.js-CNK7b0lL.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-qWNEcN6_.js';
+import { e as evictChangedServers } from '../../../../../chunks/evictChangedServers.js-D36y0XJx.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../chunks/shared-server.js-BjFXsyhJ.js';
+import '../../../../../chunks/limits.js-Dw3YYMI2.js';
+import '../../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../chunks/clientCache.server.js-C1LH3ZS5.js';
+import '../../../../../chunks/chunk-RFFCVRKM.js-Bw_Hh4Hk.js';
+import '../../../../../chunks/computeLimits.js-DxTgrkcX.js';
+import 'node:dns/promises';
+import 'node:net';
+import 'zlib';
+import 'util';
+
+//#region src/routes/api/org/compute/+server.ts
+function requireFlag() {
+	if (!flag("ALLOW_ORG_COMPUTE_OVERRIDE")) apiError(403, ApiErrorCode.FORBIDDEN, "Per-org compute override is disabled on this instance (ALLOW_ORG_COMPUTE_OVERRIDE).");
+}
+var GET = async ({ locals }) => {
+	requireFlag();
+	requireManageOrgCompute(locals);
+	const ctx = locals.ctx;
+	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
+	const config = await getComputeServerConfigStore().getConfig(ctx);
+	const orgId = ctx.actingOrgId;
+	const owned = config.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => {
+		const { apiKey: _apiKey, hasApiKey, ...rest } = s;
+		return {
+			...rest,
+			hasApiKey: !!hasApiKey
+		};
+	});
+	const catalog = serversVisibleTo(config, orgId).map((s) => ({
+		id: s.id,
+		label: s.label,
+		serverUrl: s.serverUrl,
+		scope: s.scope,
+		source: isPlatformServer(s) ? "platform" : "org",
+		timeoutMs: s.timeoutMs,
+		retryCount: s.retryCount
+	}));
+	return json({
+		servers: owned,
+		defaultServerId: config.orgDefaults?.[orgId] ?? null,
+		globalDefaultServerId: config.defaultServerId ?? null,
+		catalog
+	});
+};
+var PUT = async ({ request, locals }) => {
+	requireFlag();
+	requireManageOrgCompute(locals);
+	const ctx = locals.ctx;
+	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
+	const orgId = ctx.actingOrgId;
+	const body = await request.json().catch(() => null);
+	if (!body || typeof body !== "object") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid request body");
+	const incoming = body;
+	if (!Array.isArray(incoming.servers)) apiError(400, ApiErrorCode.VALIDATION_FAILED, "servers must be an array");
+	for (const s of incoming.servers) {
+		if (!s.id || typeof s.id !== "string") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Each server needs an id");
+		if (!s.label || typeof s.label !== "string") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Each server needs a label");
+		if (!s.serverUrl || typeof s.serverUrl !== "string") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Each server needs a serverUrl");
+		try {
+			new URL(s.serverUrl);
+		} catch {
+			apiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid serverUrl: ${s.serverUrl}`);
+		}
+		if (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== "string") apiError(400, ApiErrorCode.VALIDATION_FAILED, "apiKey must be a string, null, or omitted");
+	}
+	const provider = getComputeServerConfigStore();
+	const existing = await provider.getConfig(ctx, { includeApiKeys: true });
+	const storedKeyById = new Map(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => [s.id, s.apiKey]));
+	const next = incoming.servers.map((s) => ({
+		id: s.id,
+		scope: "org",
+		ownerOrgId: orgId,
+		label: s.label,
+		serverUrl: s.serverUrl,
+		timeoutMs: s.timeoutMs,
+		retryCount: s.retryCount,
+		apiKey: s.apiKey === null ? void 0 : s.apiKey ? s.apiKey : storedKeyById.get(s.id)
+	}));
+	if (typeof incoming.defaultServerId === "string") {
+		const projected = {
+			servers: [...existing.servers.filter((s) => !(isOrgServer(s) && s.ownerOrgId === orgId)), ...next],
+			defaultServerId: existing.defaultServerId,
+			orgDefaults: existing.orgDefaults
+		};
+		if (!new Set(serversVisibleTo(projected, orgId).map((s) => s.id)).has(incoming.defaultServerId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, "defaultServerId must reference a server visible to this organization");
+	}
+	await provider.saveOrgServers(ctx, orgId, next, incoming.defaultServerId);
+	evictChangedServers(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId), next);
+	return new Response(null, { status: 204 });
+};
+
+export { GET, PUT };
+//# sourceMappingURL=_server.ts.js-D9WmsbdS.js.map

package/build/server/chunks/entries/endpoints/api/org/compute/_server.ts.js-D9WmsbdS.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-D9WmsbdS.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/org/compute/_server.ts.js"],"sourcesContent":["import \"../../../../../chunks/src.js\";\nimport { F as isPlatformServer, P as isOrgServer, a as getComputeServerConfigStore, t as flag } from \"../../../../../chunks/providers.server.js\";\nimport { a as serversVisibleTo } from \"../../../../../chunks/utils2.js\";\nimport { b as requireManageOrgCompute } from \"../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { t as evictChangedServers } from \"../../../../../chunks/evictChangedServers.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/org/compute/+server.ts\nfunction requireFlag() {\n\tif (!flag(\"ALLOW_ORG_COMPUTE_OVERRIDE\")) apiError(403, ApiErrorCode.FORBIDDEN, \"Per-org compute override is disabled on this instance (ALLOW_ORG_COMPUTE_OVERRIDE).\");\n}\nvar GET = async ({ locals }) => {\n\trequireFlag();\n\trequireManageOrgCompute(locals);\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tconst config = await getComputeServerConfigStore().getConfig(ctx);\n\tconst orgId = ctx.actingOrgId;\n\tconst owned = config.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => {\n\t\tconst { apiKey: _apiKey, hasApiKey, ...rest } = s;\n\t\treturn {\n\t\t\t...rest,\n\t\t\thasApiKey: !!hasApiKey\n\t\t};\n\t});\n\tconst catalog = serversVisibleTo(config, orgId).map((s) => ({\n\t\tid: s.id,\n\t\tlabel: s.label,\n\t\tserverUrl: s.serverUrl,\n\t\tscope: s.scope,\n\t\tsource: isPlatformServer(s) ? \"platform\" : \"org\",\n\t\ttimeoutMs: s.timeoutMs,\n\t\tretryCount: s.retryCount\n\t}));\n\treturn json({\n\t\tservers: owned,\n\t\tdefaultServerId: config.orgDefaults?.[orgId] ?? null,\n\t\tglobalDefaultServerId: config.defaultServerId ?? null,\n\t\tcatalog\n\t});\n};\nvar PUT = async ({ request, locals }) => {\n\trequireFlag();\n\trequireManageOrgCompute(locals);\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tconst orgId = ctx.actingOrgId;\n\tconst body = await request.json().catch(() => null);\n\tif (!body || typeof body !== \"object\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid request body\");\n\tconst incoming = body;\n\tif (!Array.isArray(incoming.servers)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"servers must be an array\");\n\tfor (const s of incoming.servers) {\n\t\tif (!s.id || typeof s.id !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs an id\");\n\t\tif (!s.label || typeof s.label !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs a label\");\n\t\tif (!s.serverUrl || typeof s.serverUrl !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs a serverUrl\");\n\t\ttry {\n\t\t\tnew URL(s.serverUrl);\n\t\t} catch {\n\t\t\tapiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid serverUrl: ${s.serverUrl}`);\n\t\t}\n\t\tif (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"apiKey must be a string, null, or omitted\");\n\t}\n\tconst provider = getComputeServerConfigStore();\n\tconst existing = await provider.getConfig(ctx, { includeApiKeys: true });\n\tconst storedKeyById = new Map(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => [s.id, s.apiKey]));\n\tconst next = incoming.servers.map((s) => ({\n\t\tid: s.id,\n\t\tscope: \"org\",\n\t\townerOrgId: orgId,\n\t\tlabel: s.label,\n\t\tserverUrl: s.serverUrl,\n\t\ttimeoutMs: s.timeoutMs,\n\t\tretryCount: s.retryCount,\n\t\tapiKey: s.apiKey === null ? void 0 : s.apiKey ? s.apiKey : storedKeyById.get(s.id)\n\t}));\n\tif (typeof incoming.defaultServerId === \"string\") {\n\t\tconst projected = {\n\t\t\tservers: [...existing.servers.filter((s) => !(isOrgServer(s) && s.ownerOrgId === orgId)), ...next],\n\t\t\tdefaultServerId: existing.defaultServerId,\n\t\t\torgDefaults: existing.orgDefaults\n\t\t};\n\t\tif (!new Set(serversVisibleTo(projected, orgId).map((s) => s.id)).has(incoming.defaultServerId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"defaultServerId must reference a server visible to this organization\");\n\t}\n\tawait provider.saveOrgServers(ctx, orgId, next, incoming.defaultServerId);\n\tevictChangedServers(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId), next);\n\treturn new Response(null, { status: 204 });\n};\n//#endregion\nexport { GET, PUT };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAOA;AACA,SAAS,WAAW,GAAG;AACvB,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,qFAAqF,CAAC;AACtK;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAChC,CAAC,WAAW,EAAE;AACd,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC;AAClE,CAAC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC9B,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK;AACjG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC;AACnD,EAAE,OAAO;AACT,GAAG,GAAG,IAAI;AACV,GAAG,SAAS,EAAE,CAAC,CAAC;AAChB,GAAG;AACH,CAAC,CAAC,CAAC;AACH,CAAC,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC7D,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;AACV,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,KAAK;AAClD,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,UAAU,EAAE,CAAC,CAAC;AAChB,EAAE,CAAC,CAAC;AACJ,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,OAAO,EAAE,KAAK;AAChB,EAAE,eAAe,EAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,IAAI,IAAI;AACtD,EAAE,qBAAqB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;AACvD,EAAE;AACF,EAAE,CAAC;AACH;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACzC,CAAC,WAAW,EAAE;AACd,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC9B,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AAC7G,CAAC,MAAM,QAAQ,GAAG,IAAI;AACtB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;AAChH,CAAC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE;AACnC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACjH,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;AACzH,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,+BAA+B,CAAC;AACrI,EAAE,IAAI;AACN,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACvB,EAAE,CAAC,CAAC,MAAM;AACV,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACrF,EAAE;AACF,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2CAA2C,CAAC;AAC1K,CAAC;AACD,CAAC,MAAM,QAAQ,GAAG,2BAA2B,EAAE;AAC/C,CAAC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;AACzE,CAAC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACrI,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC3C,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;AACV,EAAE,KAAK,EAAE,KAAK;AACd,EAAE,UAAU,EAAE,KAAK;AACnB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;AAC1B,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;AACnF,EAAE,CAAC,CAAC;AACJ,CAAC,IAAI,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ,EAAE;AACnD,EAAE,MAAM,SAAS,GAAG;AACpB,GAAG,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC;AACrG,GAAG,eAAe,EAAE,QAAQ,CAAC,eAAe;AAC5C,GAAG,WAAW,EAAE,QAAQ,CAAC;AACzB,GAAG;AACH,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sEAAsE,CAAC;AACxN,CAAC;AACD,CAAC,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC;AAC1E,CAAC,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,EAAE,IAAI,CAAC;AACpG,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C;;;;"}