@selvajs/selva 4.7.3 → 4.7.4-beta.0

package/build/server/chunks/entries/endpoints/api/definitions/_guid_/_server.ts.js-B1pOlSxd.js

@@ -0,0 +1,71 @@
+import { e as GuidSchema, G as GH_EXTENSIONS, f as UpdateMetadataInputSchema } from '../../../../../chunks/src.js-C5mUn1eC.js';
+import { E as getDefinitionService, C as fetchSchemaFromCompute } from '../../../../../chunks/providers.server.js-2HaeDkdE.js';
+import { n as requireEditableDefinition } from '../../../../../chunks/access.server.js-CNK7b0lL.js';
+import { a as apiError, h as handleApiError, r as resolveServerForOrg, t as throwZodError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-qWNEcN6_.js';
+import { m as MAX_GH_FILE_SIZE } from '../../../../../chunks/computeLimits.js-DxTgrkcX.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../chunks/shared-server.js-BjFXsyhJ.js';
+import '../../../../../chunks/limits.js-Dw3YYMI2.js';
+import '../../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../chunks/utils2.js-CuEJmHGN.js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/api/definitions/[guid]/+server.ts
+var POST = async ({ params, request, locals }) => {
+	const guidParsed = GuidSchema.safeParse(params.guid);
+	if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing GUID");
+	const formData = await request.formData();
+	const file = formData.get("file");
+	if (!(file instanceof File)) apiError(400, ApiErrorCode.VALIDATION_FAILED, "A Grasshopper (.gh or .ghx) file is required");
+	const changeNoteRaw = formData.get("changeNote");
+	const changeNote = typeof changeNoteRaw === "string" ? changeNoteRaw.slice(0, 1e3) : void 0;
+	const ext = file.name.slice(file.name.lastIndexOf(".")).toLowerCase();
+	if (!GH_EXTENSIONS.includes(ext)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `File type not allowed. Allowed: ${GH_EXTENSIONS.join(", ")}`);
+	if (file.size > MAX_GH_FILE_SIZE) apiError(400, ApiErrorCode.VALIDATION_FAILED, `File too large. Max size: ${MAX_GH_FILE_SIZE / (1024 * 1024)} MB`);
+	const { ctx, record, project } = await requireEditableDefinition(locals, guidParsed.data);
+	const fileExt = ext.slice(1);
+	try {
+		const data = new Uint8Array(await file.arrayBuffer());
+		const schema = await fetchSchemaFromCompute(data, await resolveServerForOrg(ctx, project?.orgId ?? null, { definitionPin: record.computeServerId ?? null }));
+		return json({ version: await getDefinitionService().uploadVersion(ctx, guidParsed.data, data, fileExt, file.name, schema, changeNote) }, { status: 201 });
+	} catch (err) {
+		handleApiError(err, "Failed to upload definition version");
+	}
+};
+var DELETE = async ({ params, locals }) => {
+	const guidParsed = GuidSchema.safeParse(params.guid);
+	if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing GUID");
+	const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
+	try {
+		await getDefinitionService().delete(ctx, guidParsed.data);
+		return new Response(null, { status: 204 });
+	} catch (err) {
+		handleApiError(err, "Failed to delete definition");
+	}
+};
+var PUT = async ({ params, request, locals }) => {
+	const guidParsed = GuidSchema.safeParse(params.guid);
+	if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing GUID");
+	const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
+	const body = await request.json().catch(() => null);
+	const parsed = UpdateMetadataInputSchema.safeParse(body);
+	if (!parsed.success) throwZodError(parsed.error);
+	try {
+		await getDefinitionService().updateMeta(ctx, guidParsed.data, parsed.data);
+		return new Response(null, { status: 204 });
+	} catch (err) {
+		handleApiError(err, "Failed to update definition");
+	}
+};
+
+export { DELETE, POST, PUT };
+//# sourceMappingURL=_server.ts.js-B1pOlSxd.js.map

package/build/server/chunks/entries/endpoints/api/definitions/_guid_/_server.ts.js-B1pOlSxd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-B1pOlSxd.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/definitions/_guid_/_server.ts.js"],"sourcesContent":["import { d as GH_EXTENSIONS, l as UpdateMetadataInputSchema, s as GuidSchema } from \"../../../../../chunks/src.js\";\nimport { c as getDefinitionService, j as fetchSchemaFromCompute } from \"../../../../../chunks/providers.server.js\";\nimport { g as requireEditableDefinition } from \"../../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, o as resolveServerForOrg, r as handleApiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { d as MAX_GH_FILE_SIZE } from \"../../../../../chunks/computeLimits.js\";\nimport \"../../../../../chunks/admin-config.js\";\nimport \"../../../../../chunks/definitions.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/definitions/[guid]/+server.ts\nvar POST = async ({ params, request, locals }) => {\n\tconst guidParsed = GuidSchema.safeParse(params.guid);\n\tif (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing GUID\");\n\tconst formData = await request.formData();\n\tconst file = formData.get(\"file\");\n\tif (!(file instanceof File)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"A Grasshopper (.gh or .ghx) file is required\");\n\tconst changeNoteRaw = formData.get(\"changeNote\");\n\tconst changeNote = typeof changeNoteRaw === \"string\" ? changeNoteRaw.slice(0, 1e3) : void 0;\n\tconst ext = file.name.slice(file.name.lastIndexOf(\".\")).toLowerCase();\n\tif (!GH_EXTENSIONS.includes(ext)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `File type not allowed. Allowed: ${GH_EXTENSIONS.join(\", \")}`);\n\tif (file.size > MAX_GH_FILE_SIZE) apiError(400, ApiErrorCode.VALIDATION_FAILED, `File too large. Max size: ${MAX_GH_FILE_SIZE / (1024 * 1024)} MB`);\n\tconst { ctx, record, project } = await requireEditableDefinition(locals, guidParsed.data);\n\tconst fileExt = ext.slice(1);\n\ttry {\n\t\tconst data = new Uint8Array(await file.arrayBuffer());\n\t\tconst schema = await fetchSchemaFromCompute(data, await resolveServerForOrg(ctx, project?.orgId ?? null, { definitionPin: record.computeServerId ?? null }));\n\t\treturn json({ version: await getDefinitionService().uploadVersion(ctx, guidParsed.data, data, fileExt, file.name, schema, changeNote) }, { status: 201 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to upload definition version\");\n\t}\n};\nvar DELETE = async ({ params, locals }) => {\n\tconst guidParsed = GuidSchema.safeParse(params.guid);\n\tif (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing GUID\");\n\tconst { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n\ttry {\n\t\tawait getDefinitionService().delete(ctx, guidParsed.data);\n\t\treturn new Response(null, { status: 204 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to delete definition\");\n\t}\n};\nvar PUT = async ({ params, request, locals }) => {\n\tconst guidParsed = GuidSchema.safeParse(params.guid);\n\tif (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing GUID\");\n\tconst { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n\tconst body = await request.json().catch(() => null);\n\tconst parsed = UpdateMetadataInputSchema.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\ttry {\n\t\tawait getDefinitionService().updateMeta(ctx, guidParsed.data, parsed.data);\n\t\treturn new Response(null, { status: 204 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to update definition\");\n\t}\n};\n//#endregion\nexport { DELETE, POST, PUT };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAQA;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAClD,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACrD,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AAClG,CAAC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;AAC1C,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;AAClC,CAAC,IAAI,EAAE,IAAI,YAAY,IAAI,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,8CAA8C,CAAC;AAC3H,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;AACjD,CAAC,MAAM,UAAU,GAAG,OAAO,aAAa,KAAK,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,MAAM;AAC5F,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE;AACtE,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,gCAAgC,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC/I,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,gBAAgB,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,0BAA0B,EAAE,gBAAgB,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AACpJ,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1F,CAAC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7B,CAAC,IAAI;AACL,EAAE,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AACvD,EAAE,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC,CAAC;AAC9J,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,oBAAoB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3J,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,qCAAqC,CAAC;AAC5D,CAAC;AACD;AACG,IAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACrD,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AAClG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AACzE,CAAC,IAAI;AACL,EAAE,MAAM,oBAAoB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AAC3D,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACpD,CAAC;AACD;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACjD,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACrD,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AAClG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AACzE,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC;AACzD,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,IAAI;AACL,EAAE,MAAM,oBAAoB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;AAC5E,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACpD,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/definitions/_guid_/image/_filename_/_server.ts.js-BHWdpBjS.js

@@ -0,0 +1,42 @@
+import { e as GuidSchema, g as COVER_IMAGE_CONTENT_TYPES } from '../../../../../../../chunks/src.js-C5mUn1eC.js';
+import { o as getDefinitionMeta, x as getStorageProvider, F as definitionPaths } from '../../../../../../../chunks/providers.server.js-2HaeDkdE.js';
+import { o as requireCanViewProject } from '../../../../../../../chunks/access.server.js-CNK7b0lL.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../../chunks/api-errors.js-qWNEcN6_.js';
+import '../../../../../../../chunks/computeLimits.js-DxTgrkcX.js';
+import 'zod';
+import '../../../../../../../chunks/shared-server.js-BjFXsyhJ.js';
+import '../../../../../../../chunks/limits.js-Dw3YYMI2.js';
+import '../../../../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '../../../../../../../chunks/utils2.js-CuEJmHGN.js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/api/definitions/[guid]/image/[filename]/+server.ts
+var GET = async ({ params, locals }) => {
+	const guidParsed = GuidSchema.safeParse(params.guid);
+	if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid GUID");
+	const guid = guidParsed.data;
+	const ctx = locals.ctx;
+	const record = await getDefinitionMeta().get(ctx, guid);
+	if (!record?.coverImage) apiError(404, ApiErrorCode.NOT_FOUND, "Image not found");
+	await requireCanViewProject(locals, record.projectId);
+	const storedFilename = record.coverImage.split("/").pop() ?? "cover.webp";
+	const contentType = COVER_IMAGE_CONTENT_TYPES[storedFilename.substring(storedFilename.lastIndexOf(".")).toLowerCase()] ?? "image/webp";
+	const bytes = await getStorageProvider().get(definitionPaths.image(guid));
+	if (!bytes) apiError(404, ApiErrorCode.NOT_FOUND, "Image not found");
+	return new Response(Buffer.from(bytes), { headers: {
+		"Content-Type": contentType,
+		"Cache-Control": "public, max-age=3600"
+	} });
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-BHWdpBjS.js.map

package/build/server/chunks/entries/endpoints/api/definitions/_guid_/image/_filename_/_server.ts.js-BHWdpBjS.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-BHWdpBjS.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/definitions/_guid_/image/_filename_/_server.ts.js"],"sourcesContent":["import { s as GuidSchema, u as COVER_IMAGE_CONTENT_TYPES } from \"../../../../../../../chunks/src.js\";\nimport { I as definitionPaths, s as getDefinitionMeta, y as getStorageProvider } from \"../../../../../../../chunks/providers.server.js\";\nimport { h as requireCanViewProject } from \"../../../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../../chunks/api-errors.js\";\nimport \"../../../../../../../chunks/admin-config.js\";\nimport \"../../../../../../../chunks/definitions.js\";\n//#region src/routes/api/definitions/[guid]/image/[filename]/+server.ts\nvar GET = async ({ params, locals }) => {\n\tconst guidParsed = GuidSchema.safeParse(params.guid);\n\tif (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid GUID\");\n\tconst guid = guidParsed.data;\n\tconst ctx = locals.ctx;\n\tconst record = await getDefinitionMeta().get(ctx, guid);\n\tif (!record?.coverImage) apiError(404, ApiErrorCode.NOT_FOUND, \"Image not found\");\n\tawait requireCanViewProject(locals, record.projectId);\n\tconst storedFilename = record.coverImage.split(\"/\").pop() ?? \"cover.webp\";\n\tconst contentType = COVER_IMAGE_CONTENT_TYPES[storedFilename.substring(storedFilename.lastIndexOf(\".\")).toLowerCase()] ?? \"image/webp\";\n\tconst bytes = await getStorageProvider().get(definitionPaths.image(guid));\n\tif (!bytes) apiError(404, ApiErrorCode.NOT_FOUND, \"Image not found\");\n\treturn new Response(Buffer.from(bytes), { headers: {\n\t\t\"Content-Type\": contentType,\n\t\t\"Cache-Control\": \"public, max-age=3600\"\n\t} });\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAMA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AACxC,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACrD,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,cAAc,CAAC;AACvF,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI;AAC7B,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC;AACxD,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,iBAAiB,CAAC;AAClF,CAAC,MAAM,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC;AACtD,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,YAAY;AAC1E,CAAC,MAAM,WAAW,GAAG,yBAAyB,CAAC,cAAc,CAAC,SAAS,CAAC,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,YAAY;AACvI,CAAC,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC1E,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,iBAAiB,CAAC;AACrE,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE;AACpD,EAAE,cAAc,EAAE,WAAW;AAC7B,EAAE,eAAe,EAAE;AACnB,EAAE,EAAE,CAAC;AACL;;;;"}

package/build/server/chunks/entries/endpoints/api/definitions/_guid_/image/_server.ts.js-BDTl8SEk.js

@@ -0,0 +1,40 @@
+import { e as GuidSchema } from '../../../../../../chunks/src.js-C5mUn1eC.js';
+import { E as getDefinitionService } from '../../../../../../chunks/providers.server.js-2HaeDkdE.js';
+import { n as requireEditableDefinition } from '../../../../../../chunks/access.server.js-CNK7b0lL.js';
+import { a as apiError, h as handleApiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-qWNEcN6_.js';
+import { l as MAX_IMAGE_FILE_SIZE } from '../../../../../../chunks/computeLimits.js-DxTgrkcX.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../../chunks/shared-server.js-BjFXsyhJ.js';
+import '../../../../../../chunks/limits.js-Dw3YYMI2.js';
+import '../../../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/utils2.js-CuEJmHGN.js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/api/definitions/[guid]/image/+server.ts
+var POST = async ({ params, request, locals }) => {
+	const guidParsed = GuidSchema.safeParse(params.guid);
+	if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid GUID");
+	const guid = guidParsed.data;
+	const { ctx } = await requireEditableDefinition(locals, guid);
+	const file = (await request.formData()).get("image");
+	if (!(file instanceof File) || file.size === 0) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Image file is required");
+	if (file.size > MAX_IMAGE_FILE_SIZE) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Image too large. Max size: ${MAX_IMAGE_FILE_SIZE / (1024 * 1024)} MB`);
+	try {
+		const imageData = new Uint8Array(await file.arrayBuffer());
+		return json({ coverImage: await getDefinitionService().saveCoverImage(ctx, guid, imageData) });
+	} catch (err) {
+		handleApiError(err, "Failed to upload image");
+	}
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts.js-BDTl8SEk.js.map

package/build/server/chunks/entries/endpoints/api/definitions/_guid_/image/_server.ts.js-BDTl8SEk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-BDTl8SEk.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/definitions/_guid_/image/_server.ts.js"],"sourcesContent":["import { s as GuidSchema } from \"../../../../../../chunks/src.js\";\nimport { c as getDefinitionService } from \"../../../../../../chunks/providers.server.js\";\nimport { g as requireEditableDefinition } from \"../../../../../../chunks/access.server.js\";\nimport { n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { f as MAX_IMAGE_FILE_SIZE } from \"../../../../../../chunks/computeLimits.js\";\nimport \"../../../../../../chunks/admin-config.js\";\nimport \"../../../../../../chunks/definitions.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/definitions/[guid]/image/+server.ts\nvar POST = async ({ params, request, locals }) => {\n\tconst guidParsed = GuidSchema.safeParse(params.guid);\n\tif (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid GUID\");\n\tconst guid = guidParsed.data;\n\tconst { ctx } = await requireEditableDefinition(locals, guid);\n\tconst file = (await request.formData()).get(\"image\");\n\tif (!(file instanceof File) || file.size === 0) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Image file is required\");\n\tif (file.size > MAX_IMAGE_FILE_SIZE) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Image too large. Max size: ${MAX_IMAGE_FILE_SIZE / (1024 * 1024)} MB`);\n\ttry {\n\t\tconst imageData = new Uint8Array(await file.arrayBuffer());\n\t\treturn json({ coverImage: await getDefinitionService().saveCoverImage(ctx, guid, imageData) });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to upload image\");\n\t}\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAQA;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAClD,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACrD,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,cAAc,CAAC;AACvF,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI;AAC7B,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC;AAC9D,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC;AACrD,CAAC,IAAI,EAAE,IAAI,YAAY,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AACxH,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,mBAAmB,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,2BAA2B,EAAE,mBAAmB,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AAC3J,CAAC,IAAI;AACL,EAAE,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5D,EAAE,OAAO,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,oBAAoB,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;AAChG,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAC/C,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/definitions/_guid_/publish/_server.ts.js-DFz0AkMN.js

@@ -0,0 +1,40 @@
+import { e as GuidSchema, i as PublishVersionInputSchema } from '../../../../../../chunks/src.js-C5mUn1eC.js';
+import { E as getDefinitionService } from '../../../../../../chunks/providers.server.js-2HaeDkdE.js';
+import { n as requireEditableDefinition } from '../../../../../../chunks/access.server.js-CNK7b0lL.js';
+import { a as apiError, t as throwZodError, h as handleApiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-qWNEcN6_.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../../chunks/shared-server.js-BjFXsyhJ.js';
+import '../../../../../../chunks/limits.js-Dw3YYMI2.js';
+import '../../../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/utils2.js-CuEJmHGN.js';
+
+//#region src/routes/api/definitions/[guid]/publish/+server.ts
+/**
+* POST /api/definitions/[guid]/publish — advance the live channel.
+*   - body `{ versionId? }` — target a specific version (rollback or
+*     forward-roll). Omit to promote the current draft.
+*/
+var POST = async ({ params, request, locals }) => {
+	const guidParsed = GuidSchema.safeParse(params.guid);
+	if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing GUID");
+	const body = await request.json().catch(() => ({}));
+	const parsed = PublishVersionInputSchema.safeParse(body);
+	if (!parsed.success) throwZodError(parsed.error);
+	const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
+	try {
+		return json({ version: await getDefinitionService().publish(ctx, guidParsed.data, parsed.data.versionId) });
+	} catch (err) {
+		handleApiError(err, "Failed to publish version");
+	}
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts.js-DFz0AkMN.js.map

package/build/server/chunks/entries/endpoints/api/definitions/_guid_/publish/_server.ts.js-DFz0AkMN.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-DFz0AkMN.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/definitions/_guid_/publish/_server.ts.js"],"sourcesContent":["import { c as PublishVersionInputSchema, s as GuidSchema } from \"../../../../../../chunks/src.js\";\nimport { c as getDefinitionService } from \"../../../../../../chunks/providers.server.js\";\nimport { g as requireEditableDefinition } from \"../../../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport \"../../../../../../chunks/definitions.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/definitions/[guid]/publish/+server.ts\n/**\n* POST /api/definitions/[guid]/publish — advance the live channel.\n*   - body `{ versionId? }` — target a specific version (rollback or\n*     forward-roll). Omit to promote the current draft.\n*/\nvar POST = async ({ params, request, locals }) => {\n\tconst guidParsed = GuidSchema.safeParse(params.guid);\n\tif (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing GUID\");\n\tconst body = await request.json().catch(() => ({}));\n\tconst parsed = PublishVersionInputSchema.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\tconst { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n\ttry {\n\t\treturn json({ version: await getDefinitionService().publish(ctx, guidParsed.data, parsed.data.versionId) });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to publish version\");\n\t}\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAMA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAClD,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACrD,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AAClG,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC;AACzD,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AACzE,CAAC,IAAI;AACL,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,oBAAoB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;AAC7G,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,2BAA2B,CAAC;AAClD,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/definitions/_guid_/share-links/_linkId_/_server.ts.js-C-DNE-kf.js

@@ -0,0 +1,46 @@
+import { e as GuidSchema } from '../../../../../../../chunks/src.js-C5mUn1eC.js';
+import { k as flag, p as providers } from '../../../../../../../chunks/providers.server.js-2HaeDkdE.js';
+import { n as requireEditableDefinition } from '../../../../../../../chunks/access.server.js-CNK7b0lL.js';
+import { a as apiError, A as ApiErrorCode, h as handleApiError } from '../../../../../../../chunks/api-errors.js-qWNEcN6_.js';
+import 'zod';
+import '../../../../../../../chunks/shared-server.js-BjFXsyhJ.js';
+import '../../../../../../../chunks/limits.js-Dw3YYMI2.js';
+import '../../../../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '../../../../../../../chunks/utils2.js-CuEJmHGN.js';
+
+//#region src/routes/api/definitions/[guid]/share-links/[linkId]/+server.ts
+/**
+* DELETE /api/definitions/[guid]/share-links/[linkId] — revoke (soft-delete).
+* Idempotent. Authorization gated by `canEditDefinition`.
+*
+* The handler also verifies the link belongs to this definition before
+* revoking — prevents one definition's editor from revoking another's
+* link via a guessed/leaked linkId.
+*/
+var DELETE = async ({ params, locals }) => {
+	if (!flag("ENABLE_SHARING")) apiError(404, ApiErrorCode.NOT_FOUND, "Share links are disabled on this instance (ENABLE_SHARING).");
+	const guidParsed = GuidSchema.safeParse(params.guid);
+	if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing GUID");
+	const linkParsed = GuidSchema.safeParse(params.linkId);
+	if (!linkParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing link ID");
+	const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
+	try {
+		const existing = await providers.data.shareLinks.getById(ctx, linkParsed.data);
+		if (!existing || existing.definitionId !== guidParsed.data) apiError(404, ApiErrorCode.NOT_FOUND, "Share link not found.");
+		await providers.data.shareLinks.revoke(ctx, linkParsed.data);
+		return new Response(null, { status: 204 });
+	} catch (err) {
+		handleApiError(err, "Failed to revoke share link");
+	}
+};
+
+export { DELETE };
+//# sourceMappingURL=_server.ts.js-C-DNE-kf.js.map

package/build/server/chunks/entries/endpoints/api/definitions/_guid_/share-links/_linkId_/_server.ts.js-C-DNE-kf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-C-DNE-kf.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/definitions/_guid_/share-links/_linkId_/_server.ts.js"],"sourcesContent":["import { s as GuidSchema } from \"../../../../../../../chunks/src.js\";\nimport { C as providers, t as flag } from \"../../../../../../../chunks/providers.server.js\";\nimport { g as requireEditableDefinition } from \"../../../../../../../chunks/access.server.js\";\nimport { n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../../../chunks/api-errors.js\";\nimport \"../../../../../../../chunks/definitions.js\";\n//#region src/routes/api/definitions/[guid]/share-links/[linkId]/+server.ts\n/**\n* DELETE /api/definitions/[guid]/share-links/[linkId] — revoke (soft-delete).\n* Idempotent. Authorization gated by `canEditDefinition`.\n*\n* The handler also verifies the link belongs to this definition before\n* revoking — prevents one definition's editor from revoking another's\n* link via a guessed/leaked linkId.\n*/\nvar DELETE = async ({ params, locals }) => {\n\tif (!flag(\"ENABLE_SHARING\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Share links are disabled on this instance (ENABLE_SHARING).\");\n\tconst guidParsed = GuidSchema.safeParse(params.guid);\n\tif (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing GUID\");\n\tconst linkParsed = GuidSchema.safeParse(params.linkId);\n\tif (!linkParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing link ID\");\n\tconst { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n\ttry {\n\t\tconst existing = await providers.data.shareLinks.getById(ctx, linkParsed.data);\n\t\tif (!existing || existing.definitionId !== guidParsed.data) apiError(404, ApiErrorCode.NOT_FOUND, \"Share link not found.\");\n\t\tawait providers.data.shareLinks.revoke(ctx, linkParsed.data);\n\t\treturn new Response(null, { status: 204 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to revoke share link\");\n\t}\n};\n//#endregion\nexport { DELETE };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAKA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,6DAA6D,CAAC;AAClI,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACrD,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AAClG,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;AACvD,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,4BAA4B,CAAC;AACrG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AACzE,CAAC,IAAI;AACL,EAAE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AAChF,EAAE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,KAAK,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,uBAAuB,CAAC;AAC5H,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AAC9D,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACpD,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/definitions/_guid_/share-links/_server.ts.js-DrGdR4Y_.js

@@ -0,0 +1,84 @@
+import { e as GuidSchema, j as CreateShareLinkInputSchema } from '../../../../../../chunks/src.js-C5mUn1eC.js';
+import { p as providers, k as flag } from '../../../../../../chunks/providers.server.js-2HaeDkdE.js';
+import { D as DEFAULT_SHARE_LINK_MAX_SOLVES } from '../../../../../../chunks/types.js-B_zdqlv_.js';
+import { n as requireEditableDefinition } from '../../../../../../chunks/access.server.js-CNK7b0lL.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-qWNEcN6_.js';
+import { m as mintRawToken, h as hashToken } from '../../../../../../chunks/token.server.js-D1XT_MEz.js';
+import { json } from '@sveltejs/kit';
+import { randomUUID } from 'node:crypto';
+import 'zod';
+import '../../../../../../chunks/shared-server.js-BjFXsyhJ.js';
+import '../../../../../../chunks/limits.js-Dw3YYMI2.js';
+import '../../../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/utils2.js-CuEJmHGN.js';
+import '../../../../../../chunks/token-codec.js-CxK2DiO-.js';
+
+//#region src/routes/api/definitions/[guid]/share-links/+server.ts
+function assertSharingEnabled() {
+	if (!flag("ENABLE_SHARING")) apiError(404, ApiErrorCode.NOT_FOUND, "Share links are disabled on this instance (ENABLE_SHARING).");
+}
+function strip(link) {
+	const { tokenHash: _omit, ...rest } = link;
+	return {
+		...rest,
+		hasToken: true
+	};
+}
+var GET = async ({ params, locals }) => {
+	assertSharingEnabled();
+	const guidParsed = GuidSchema.safeParse(params.guid);
+	if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing GUID");
+	const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
+	try {
+		const page = await providers.data.shareLinks.listByDefinition(ctx, guidParsed.data, { limit: 200 });
+		return json({
+			links: page.items.map(strip),
+			nextCursor: page.nextCursor
+		});
+	} catch (err) {
+		handleApiError(err, "Failed to list share links");
+	}
+};
+var POST = async ({ params, request, locals }) => {
+	assertSharingEnabled();
+	const guidParsed = GuidSchema.safeParse(params.guid);
+	if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing GUID");
+	const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
+	const body = await request.json().catch(() => ({}));
+	const parsed = CreateShareLinkInputSchema.safeParse(body);
+	if (!parsed.success) throwZodError(parsed.error);
+	const raw = mintRawToken();
+	const now = (/* @__PURE__ */ new Date()).toISOString();
+	const link = {
+		id: randomUUID(),
+		definitionId: guidParsed.data,
+		channel: parsed.data.channel,
+		tokenHash: hashToken(raw),
+		name: parsed.data.name,
+		createdBy: locals.user.id,
+		createdAt: now,
+		expiresAt: parsed.data.expiresAt ?? null,
+		revokedAt: null,
+		allowSolve: parsed.data.allowSolve,
+		maxSolves: parsed.data.maxSolves === void 0 ? DEFAULT_SHARE_LINK_MAX_SOLVES : parsed.data.maxSolves,
+		solveCount: 0
+	};
+	try {
+		await providers.data.shareLinks.create(ctx, link);
+		return json({
+			link: strip(link),
+			token: raw
+		}, { status: 201 });
+	} catch (err) {
+		handleApiError(err, "Failed to create share link");
+	}
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-DrGdR4Y_.js.map

package/build/server/chunks/entries/endpoints/api/definitions/_guid_/share-links/_server.ts.js-DrGdR4Y_.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-DrGdR4Y_.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/definitions/_guid_/share-links/_server.ts.js"],"sourcesContent":["import { a as CreateShareLinkInputSchema, s as GuidSchema } from \"../../../../../../chunks/src.js\";\nimport { C as providers, t as flag } from \"../../../../../../chunks/providers.server.js\";\nimport { t as DEFAULT_SHARE_LINK_MAX_SOLVES } from \"../../../../../../chunks/types.js\";\nimport { g as requireEditableDefinition } from \"../../../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { r as mintRawToken, t as hashToken } from \"../../../../../../chunks/token.server.js\";\nimport \"../../../../../../chunks/definitions.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/api/definitions/[guid]/share-links/+server.ts\nfunction assertSharingEnabled() {\n\tif (!flag(\"ENABLE_SHARING\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Share links are disabled on this instance (ENABLE_SHARING).\");\n}\nfunction strip(link) {\n\tconst { tokenHash: _omit, ...rest } = link;\n\treturn {\n\t\t...rest,\n\t\thasToken: true\n\t};\n}\nvar GET = async ({ params, locals }) => {\n\tassertSharingEnabled();\n\tconst guidParsed = GuidSchema.safeParse(params.guid);\n\tif (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing GUID\");\n\tconst { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n\ttry {\n\t\tconst page = await providers.data.shareLinks.listByDefinition(ctx, guidParsed.data, { limit: 200 });\n\t\treturn json({\n\t\t\tlinks: page.items.map(strip),\n\t\t\tnextCursor: page.nextCursor\n\t\t});\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to list share links\");\n\t}\n};\nvar POST = async ({ params, request, locals }) => {\n\tassertSharingEnabled();\n\tconst guidParsed = GuidSchema.safeParse(params.guid);\n\tif (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing GUID\");\n\tconst { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n\tconst body = await request.json().catch(() => ({}));\n\tconst parsed = CreateShareLinkInputSchema.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\tconst raw = mintRawToken();\n\tconst now = (/* @__PURE__ */ new Date()).toISOString();\n\tconst link = {\n\t\tid: randomUUID(),\n\t\tdefinitionId: guidParsed.data,\n\t\tchannel: parsed.data.channel,\n\t\ttokenHash: hashToken(raw),\n\t\tname: parsed.data.name,\n\t\tcreatedBy: locals.user.id,\n\t\tcreatedAt: now,\n\t\texpiresAt: parsed.data.expiresAt ?? null,\n\t\trevokedAt: null,\n\t\tallowSolve: parsed.data.allowSolve,\n\t\tmaxSolves: parsed.data.maxSolves === void 0 ? DEFAULT_SHARE_LINK_MAX_SOLVES : parsed.data.maxSolves,\n\t\tsolveCount: 0\n\t};\n\ttry {\n\t\tawait providers.data.shareLinks.create(ctx, link);\n\t\treturn json({\n\t\t\tlink: strip(link),\n\t\t\ttoken: raw\n\t\t}, { status: 201 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to create share link\");\n\t}\n};\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AASA;AACA,SAAS,oBAAoB,GAAG;AAChC,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,6DAA6D,CAAC;AAClI;AACA,SAAS,KAAK,CAAC,IAAI,EAAE;AACrB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI;AAC3C,CAAC,OAAO;AACR,EAAE,GAAG,IAAI;AACT,EAAE,QAAQ,EAAE;AACZ,EAAE;AACF;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AACxC,CAAC,oBAAoB,EAAE;AACvB,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACrD,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AAClG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AACzE,CAAC,IAAI;AACL,EAAE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACrG,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;AAC/B,GAAG,UAAU,EAAE,IAAI,CAAC;AACpB,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,4BAA4B,CAAC;AACnD,CAAC;AACD;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAClD,CAAC,oBAAoB,EAAE;AACvB,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACrD,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AAClG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AACzE,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1D,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,MAAM,GAAG,GAAG,YAAY,EAAE;AAC3B,CAAC,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACvD,CAAC,MAAM,IAAI,GAAG;AACd,EAAE,EAAE,EAAE,UAAU,EAAE;AAClB,EAAE,YAAY,EAAE,UAAU,CAAC,IAAI;AAC/B,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;AAC9B,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC;AAC3B,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AACxB,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC3B,EAAE,SAAS,EAAE,GAAG;AAChB,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI;AAC1C,EAAE,SAAS,EAAE,IAAI;AACjB,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;AACpC,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,MAAM,GAAG,6BAA6B,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS;AACrG,EAAE,UAAU,EAAE;AACd,EAAE;AACF,CAAC,IAAI;AACL,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC;AACnD,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;AACpB,GAAG,KAAK,EAAE;AACV,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACpD,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/definitions/_guid_/versions/_server.ts.js-Bl-N0Lag.js

@@ -0,0 +1,47 @@
+import { e as GuidSchema } from '../../../../../../chunks/src.js-C5mUn1eC.js';
+import { o as getDefinitionMeta } from '../../../../../../chunks/providers.server.js-2HaeDkdE.js';
+import { o as requireCanViewProject } from '../../../../../../chunks/access.server.js-CNK7b0lL.js';
+import { a as apiError, A as ApiErrorCode, h as handleApiError } from '../../../../../../chunks/api-errors.js-qWNEcN6_.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../../chunks/shared-server.js-BjFXsyhJ.js';
+import '../../../../../../chunks/limits.js-Dw3YYMI2.js';
+import '../../../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/utils2.js-CuEJmHGN.js';
+
+//#region src/routes/api/definitions/[guid]/versions/+server.ts
+var GET = async ({ params, locals, url }) => {
+	const guidParsed = GuidSchema.safeParse(params.guid);
+	if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing GUID");
+	if (!locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
+	const rawLimit = Number(url.searchParams.get("limit") ?? 50);
+	const limit = Number.isFinite(rawLimit) ? Math.min(Math.max(rawLimit, 1), 200) : 50;
+	const cursor = url.searchParams.get("cursor") ?? void 0;
+	try {
+		const def = await getDefinitionMeta().get(locals.ctx, guidParsed.data);
+		if (!def) apiError(404, ApiErrorCode.NOT_FOUND, "Definition not found");
+		await requireCanViewProject(locals, def.projectId);
+		const page = await getDefinitionMeta().listVersions(locals.ctx, guidParsed.data, {
+			limit,
+			cursor
+		});
+		return json({
+			versions: page.items,
+			nextCursor: page.nextCursor,
+			liveVersionId: def.liveVersionId,
+			draftVersionId: def.draftVersionId
+		});
+	} catch (err) {
+		handleApiError(err, "Failed to list versions");
+	}
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-Bl-N0Lag.js.map

package/build/server/chunks/entries/endpoints/api/definitions/_guid_/versions/_server.ts.js-Bl-N0Lag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-Bl-N0Lag.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/definitions/_guid_/versions/_server.ts.js"],"sourcesContent":["import { s as GuidSchema } from \"../../../../../../chunks/src.js\";\nimport { s as getDefinitionMeta } from \"../../../../../../chunks/providers.server.js\";\nimport { h as requireCanViewProject } from \"../../../../../../chunks/access.server.js\";\nimport { n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport \"../../../../../../chunks/definitions.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/definitions/[guid]/versions/+server.ts\nvar GET = async ({ params, locals, url }) => {\n\tconst guidParsed = GuidSchema.safeParse(params.guid);\n\tif (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing GUID\");\n\tif (!locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n\tconst rawLimit = Number(url.searchParams.get(\"limit\") ?? 50);\n\tconst limit = Number.isFinite(rawLimit) ? Math.min(Math.max(rawLimit, 1), 200) : 50;\n\tconst cursor = url.searchParams.get(\"cursor\") ?? void 0;\n\ttry {\n\t\tconst def = await getDefinitionMeta().get(locals.ctx, guidParsed.data);\n\t\tif (!def) apiError(404, ApiErrorCode.NOT_FOUND, \"Definition not found\");\n\t\tawait requireCanViewProject(locals, def.projectId);\n\t\tconst page = await getDefinitionMeta().listVersions(locals.ctx, guidParsed.data, {\n\t\t\tlimit,\n\t\t\tcursor\n\t\t});\n\t\treturn json({\n\t\t\tversions: page.items,\n\t\t\tnextCursor: page.nextCursor,\n\t\t\tliveVersionId: def.liveVersionId,\n\t\t\tdraftVersionId: def.draftVersionId\n\t\t});\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to list versions\");\n\t}\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAMA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AAC7C,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACrD,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AAClG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC1E,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;AAC7D,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE;AACpF,CAAC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,MAAM;AACxD,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,GAAG,MAAM,iBAAiB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AACxE,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,sBAAsB,CAAC;AACzE,EAAE,MAAM,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC;AACpD,EAAE,MAAM,IAAI,GAAG,MAAM,iBAAiB,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE;AACnF,GAAG,KAAK;AACR,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,QAAQ,EAAE,IAAI,CAAC,KAAK;AACvB,GAAG,UAAU,EAAE,IAAI,CAAC,UAAU;AAC9B,GAAG,aAAa,EAAE,GAAG,CAAC,aAAa;AACnC,GAAG,cAAc,EAAE,GAAG,CAAC;AACvB,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAChD,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/definitions/_guid_/versions/_versionId_/_server.ts.js-BM5iW0W_.js

@@ -0,0 +1,40 @@
+import { e as GuidSchema } from '../../../../../../../chunks/src.js-C5mUn1eC.js';
+import { E as getDefinitionService } from '../../../../../../../chunks/providers.server.js-2HaeDkdE.js';
+import { n as requireEditableDefinition } from '../../../../../../../chunks/access.server.js-CNK7b0lL.js';
+import { a as apiError, h as handleApiError, A as ApiErrorCode } from '../../../../../../../chunks/api-errors.js-qWNEcN6_.js';
+import 'zod';
+import '../../../../../../../chunks/shared-server.js-BjFXsyhJ.js';
+import '../../../../../../../chunks/limits.js-Dw3YYMI2.js';
+import '../../../../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '../../../../../../../chunks/utils2.js-CuEJmHGN.js';
+
+//#region src/routes/api/definitions/[guid]/versions/[versionId]/+server.ts
+/**
+* DELETE /api/definitions/[guid]/versions/[versionId] — delete an old version.
+* Spec §6 protection: the store throws 409 if the version is currently
+* referenced by `liveVersionId` or `draftVersionId`. Repoint first.
+*/
+var DELETE = async ({ params, locals }) => {
+	const guidParsed = GuidSchema.safeParse(params.guid);
+	if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing GUID");
+	const versionParsed = GuidSchema.safeParse(params.versionId);
+	if (!versionParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing version ID");
+	const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
+	try {
+		await getDefinitionService().deleteVersion(ctx, guidParsed.data, versionParsed.data);
+		return new Response(null, { status: 204 });
+	} catch (err) {
+		handleApiError(err, "Failed to delete version");
+	}
+};
+
+export { DELETE };
+//# sourceMappingURL=_server.ts.js-BM5iW0W_.js.map

package/build/server/chunks/entries/endpoints/api/definitions/_guid_/versions/_versionId_/_server.ts.js-BM5iW0W_.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-BM5iW0W_.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/definitions/_guid_/versions/_versionId_/_server.ts.js"],"sourcesContent":["import { s as GuidSchema } from \"../../../../../../../chunks/src.js\";\nimport { c as getDefinitionService } from \"../../../../../../../chunks/providers.server.js\";\nimport { g as requireEditableDefinition } from \"../../../../../../../chunks/access.server.js\";\nimport { n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../../../chunks/api-errors.js\";\nimport \"../../../../../../../chunks/definitions.js\";\n//#region src/routes/api/definitions/[guid]/versions/[versionId]/+server.ts\n/**\n* DELETE /api/definitions/[guid]/versions/[versionId] — delete an old version.\n* Spec §6 protection: the store throws 409 if the version is currently\n* referenced by `liveVersionId` or `draftVersionId`. Repoint first.\n*/\nvar DELETE = async ({ params, locals }) => {\n\tconst guidParsed = GuidSchema.safeParse(params.guid);\n\tif (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing GUID\");\n\tconst versionParsed = GuidSchema.safeParse(params.versionId);\n\tif (!versionParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing version ID\");\n\tconst { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n\ttry {\n\t\tawait getDefinitionService().deleteVersion(ctx, guidParsed.data, versionParsed.data);\n\t\treturn new Response(null, { status: 204 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to delete version\");\n\t}\n};\n//#endregion\nexport { DELETE };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAKA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACrD,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AAClG,CAAC,MAAM,aAAa,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;AAC7D,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,+BAA+B,CAAC;AAC3G,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AACzE,CAAC,IAAI;AACL,EAAE,MAAM,oBAAoB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC;AACtF,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACjD,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/definitions/_server.ts.js-D0_Fhejp.js

@@ -0,0 +1,90 @@
+import { G as GH_EXTENSIONS, d as CreateDefinitionInputSchema } from '../../../../chunks/src.js-C5mUn1eC.js';
+import { f as getProjectProvider, C as fetchSchemaFromCompute, E as getDefinitionService } from '../../../../chunks/providers.server.js-2HaeDkdE.js';
+import { m as requireCanCreateDefinition } from '../../../../chunks/access.server.js-CNK7b0lL.js';
+import { a as apiError, t as throwZodError, r as resolveServerForOrg, h as handleApiError, A as ApiErrorCode } from '../../../../chunks/api-errors.js-qWNEcN6_.js';
+import { m as MAX_GH_FILE_SIZE, l as MAX_IMAGE_FILE_SIZE } from '../../../../chunks/computeLimits.js-DxTgrkcX.js';
+import { json } from '@sveltejs/kit';
+import { randomUUID } from 'node:crypto';
+import 'zod';
+import '../../../../chunks/shared-server.js-BjFXsyhJ.js';
+import '../../../../chunks/limits.js-Dw3YYMI2.js';
+import '../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../chunks/utils2.js-CuEJmHGN.js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/api/definitions/+server.ts
+function parseTags(raw) {
+	if (typeof raw !== "string" || !raw.trim()) return void 0;
+	const tags = raw.split(",").map((t) => t.trim()).filter(Boolean);
+	return tags.length ? tags : void 0;
+}
+var POST = async ({ request, locals }) => {
+	const ctx = locals.ctx;
+	const formData = await request.formData();
+	const file = formData.get("file");
+	if (!(file instanceof File)) apiError(400, ApiErrorCode.VALIDATION_FAILED, "A Grasshopper (.gh or .ghx) file is required");
+	const ext = file.name.slice(file.name.lastIndexOf(".")).toLowerCase();
+	if (!GH_EXTENSIONS.includes(ext)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `File type not allowed. Allowed: ${GH_EXTENSIONS.join(", ")}`);
+	if (file.size > MAX_GH_FILE_SIZE) apiError(400, ApiErrorCode.VALIDATION_FAILED, `File too large. Max size: ${MAX_GH_FILE_SIZE / (1024 * 1024)} MB`);
+	const imageFile = formData.get("image");
+	if (imageFile instanceof File && imageFile.size > MAX_IMAGE_FILE_SIZE) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Image too large. Max size: ${MAX_IMAGE_FILE_SIZE / (1024 * 1024)} MB`);
+	let projectId = formData.get("projectId");
+	if (typeof projectId !== "string" || !projectId) {
+		if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
+		const defaultProject = (await getProjectProvider().listProjects(ctx, ctx.actingOrgId, { limit: 1 })).items[0];
+		if (!defaultProject) apiError(500, ApiErrorCode.INTERNAL, "No project configured");
+		projectId = defaultProject.id;
+	}
+	const { project } = await requireCanCreateDefinition(locals, projectId);
+	const parsed = CreateDefinitionInputSchema.safeParse({
+		displayName: formData.get("displayName"),
+		description: formData.get("description") || void 0,
+		category: formData.get("category") || void 0,
+		coverImage: formData.get("coverImage") || void 0,
+		tags: parseTags(formData.get("tags")),
+		projectId,
+		computeServerId: formData.get("computeServerId") || void 0
+	});
+	if (!parsed.success) throwZodError(parsed.error);
+	const fileExt = ext.slice(1);
+	const guid = randomUUID();
+	try {
+		const fileData = new Uint8Array(await file.arrayBuffer());
+		const schema = await fetchSchemaFromCompute(fileData, await resolveServerForOrg(ctx, project.orgId, { definitionPin: parsed.data.computeServerId ?? null }));
+		const { record, version } = await getDefinitionService().create(ctx, {
+			guid,
+			projectId: parsed.data.projectId,
+			ownerId: locals.user.id,
+			fileExt,
+			originalFilename: file.name,
+			computeServerId: parsed.data.computeServerId,
+			displayName: parsed.data.displayName.trim(),
+			description: parsed.data.description,
+			category: parsed.data.category,
+			tags: parsed.data.tags,
+			coverImage: parsed.data.coverImage
+		}, fileData, schema);
+		let coverImage = record.coverImage;
+		if (imageFile instanceof File && imageFile.size > 0) {
+			const imageData = new Uint8Array(await imageFile.arrayBuffer());
+			coverImage = await getDefinitionService().saveCoverImage(ctx, guid, imageData);
+		}
+		return json({
+			guid,
+			version,
+			coverImage
+		}, { status: 201 });
+	} catch (err) {
+		handleApiError(err, "Failed to create definition");
+	}
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts.js-D0_Fhejp.js.map