@selvajs/selva 4.7.3 → 4.7.4-beta.1

package/build/server/chunks/entries/endpoints/api/files/_...path_/_server.ts.js-CdGsiPi7.js

@@ -0,0 +1,89 @@
+import { c as classifyAssetPath, e as GuidSchema, g as COVER_IMAGE_CONTENT_TYPES } from '../../../../../chunks/src.js-C5mUn1eC.js';
+import { o as getDefinitionMeta, F as definitionPaths, x as getStorageProvider } from '../../../../../chunks/providers.server.js-DdXZdijf.js';
+import { o as requireCanViewProject, q as requireCanViewOrg } from '../../../../../chunks/access.server.js-DSts2vt7.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-CTrFkLDr.js';
+import 'zod';
+import '../../../../../chunks/shared-server.js-HBAhbQ8m.js';
+import '../../../../../chunks/limits.js-CX18fbtQ.js';
+import '../../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '../../../../../chunks/utils2.js-Su_ead5y.js';
+
+//#region src/routes/api/files/[...path]/+server.ts
+/**
+* Authenticated/­public blob proxy. The set of servable paths is the closed
+* asset-class registry (`classifyAssetPath` / `ASSET_CLASSES` in
+* `@selvajs/platform`). Each class declares a visibility; this route maps that
+* visibility to an authorization check:
+*
+*   - `public`  (org branding — logo/favicon): served to anyone, incl.
+*     logged-out visitors, with no auth. Cacheable. The bytes are always a
+*     rasterized WebP, so there is no XSS surface to gate.
+*   - `org`     (org-private blobs, e.g. pricing sheets under
+*     `orgs/{id}/private/*`): `requireCanViewOrg(orgId)`.
+*   - `project` (definition covers): `requireCanViewProject(projectId)` — the
+*     M5 hardening, unchanged.
+*
+* Anything that classifies to no asset class 404s. New blob types are opt-in:
+* add a registry entry with the right visibility — never a generic
+* "is the extension allowed" fallthrough. Authorization lives here (the route),
+* not in the storage layer, per `IStorageProvider`'s contract.
+*
+* Why a single proxy for all three: with the registry, the route is no longer a
+* pile of per-shape branches — it classifies once and dispatches on visibility,
+* so the cover-only contract that this route used to pin now generalizes
+* without re-opening the M5 hole.
+*/
+var CONTENT_TYPE_BY_EXT = {
+	...COVER_IMAGE_CONTENT_TYPES,
+	".pdf": "application/pdf"
+};
+function contentTypeFor(storagePath) {
+	const dot = storagePath.lastIndexOf(".");
+	return CONTENT_TYPE_BY_EXT[dot === -1 ? "" : storagePath.slice(dot).toLowerCase()] ?? "application/octet-stream";
+}
+var GET = async ({ params, locals }) => {
+	const storagePath = params.path;
+	if (!storagePath) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing path");
+	const match = classifyAssetPath(storagePath);
+	if (!match) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
+	let canonicalPath = storagePath;
+	switch (match.class.visibility) {
+		case "public": break;
+		case "org": {
+			if (!locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
+			const orgId = match.scopeId;
+			if (!orgId) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
+			await requireCanViewOrg(locals, orgId);
+			break;
+		}
+		case "project": {
+			if (!locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
+			const guid = match.scopeId;
+			const guidParsed = GuidSchema.safeParse(guid);
+			if (!guidParsed.success) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
+			const record = await getDefinitionMeta().get(locals.ctx, guidParsed.data);
+			if (!record) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
+			await requireCanViewProject(locals, record.projectId);
+			canonicalPath = definitionPaths.image(guidParsed.data);
+			break;
+		}
+	}
+	const bytes = await getStorageProvider().get(canonicalPath);
+	if (!bytes) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
+	const cacheControl = match.class.visibility === "public" ? "public, max-age=3600" : "private, max-age=3600";
+	return new Response(Buffer.from(bytes), { headers: {
+		"Content-Type": contentTypeFor(canonicalPath),
+		"Cache-Control": cacheControl
+	} });
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-CdGsiPi7.js.map

package/build/server/chunks/entries/endpoints/api/files/_...path_/_server.ts.js-CdGsiPi7.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CdGsiPi7.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/files/_...path_/_server.ts.js"],"sourcesContent":["import { r as classifyAssetPath, s as GuidSchema, u as COVER_IMAGE_CONTENT_TYPES } from \"../../../../../chunks/src.js\";\nimport { I as definitionPaths, s as getDefinitionMeta, y as getStorageProvider } from \"../../../../../chunks/providers.server.js\";\nimport { h as requireCanViewProject, m as requireCanViewOrg } from \"../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\n//#region src/routes/api/files/[...path]/+server.ts\n/**\n* Authenticated/­public blob proxy. The set of servable paths is the closed\n* asset-class registry (`classifyAssetPath` / `ASSET_CLASSES` in\n* `@selvajs/platform`). Each class declares a visibility; this route maps that\n* visibility to an authorization check:\n*\n*   - `public`  (org branding — logo/favicon): served to anyone, incl.\n*     logged-out visitors, with no auth. Cacheable. The bytes are always a\n*     rasterized WebP, so there is no XSS surface to gate.\n*   - `org`     (org-private blobs, e.g. pricing sheets under\n*     `orgs/{id}/private/*`): `requireCanViewOrg(orgId)`.\n*   - `project` (definition covers): `requireCanViewProject(projectId)` — the\n*     M5 hardening, unchanged.\n*\n* Anything that classifies to no asset class 404s. New blob types are opt-in:\n* add a registry entry with the right visibility — never a generic\n* \"is the extension allowed\" fallthrough. Authorization lives here (the route),\n* not in the storage layer, per `IStorageProvider`'s contract.\n*\n* Why a single proxy for all three: with the registry, the route is no longer a\n* pile of per-shape branches — it classifies once and dispatches on visibility,\n* so the cover-only contract that this route used to pin now generalizes\n* without re-opening the M5 hole.\n*/\nvar CONTENT_TYPE_BY_EXT = {\n\t...COVER_IMAGE_CONTENT_TYPES,\n\t\".pdf\": \"application/pdf\"\n};\nfunction contentTypeFor(storagePath) {\n\tconst dot = storagePath.lastIndexOf(\".\");\n\treturn CONTENT_TYPE_BY_EXT[dot === -1 ? \"\" : storagePath.slice(dot).toLowerCase()] ?? \"application/octet-stream\";\n}\nvar GET = async ({ params, locals }) => {\n\tconst storagePath = params.path;\n\tif (!storagePath) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing path\");\n\tconst match = classifyAssetPath(storagePath);\n\tif (!match) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n\tlet canonicalPath = storagePath;\n\tswitch (match.class.visibility) {\n\t\tcase \"public\": break;\n\t\tcase \"org\": {\n\t\t\tif (!locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n\t\t\tconst orgId = match.scopeId;\n\t\t\tif (!orgId) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n\t\t\tawait requireCanViewOrg(locals, orgId);\n\t\t\tbreak;\n\t\t}\n\t\tcase \"project\": {\n\t\t\tif (!locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n\t\t\tconst guid = match.scopeId;\n\t\t\tconst guidParsed = GuidSchema.safeParse(guid);\n\t\t\tif (!guidParsed.success) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n\t\t\tconst record = await getDefinitionMeta().get(locals.ctx, guidParsed.data);\n\t\t\tif (!record) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n\t\t\tawait requireCanViewProject(locals, record.projectId);\n\t\t\tcanonicalPath = definitionPaths.image(guidParsed.data);\n\t\t\tbreak;\n\t\t}\n\t}\n\tconst bytes = await getStorageProvider().get(canonicalPath);\n\tif (!bytes) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n\tconst cacheControl = match.class.visibility === \"public\" ? \"public, max-age=3600\" : \"private, max-age=3600\";\n\treturn new Response(Buffer.from(bytes), { headers: {\n\t\t\"Content-Type\": contentTypeFor(canonicalPath),\n\t\t\"Cache-Control\": cacheControl\n\t} });\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,mBAAmB,GAAG;AAC1B,CAAC,GAAG,yBAAyB;AAC7B,CAAC,MAAM,EAAE;AACT,CAAC;AACD,SAAS,cAAc,CAAC,WAAW,EAAE;AACrC,CAAC,MAAM,GAAG,GAAG,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC;AACzC,CAAC,OAAO,mBAAmB,CAAC,GAAG,KAAK,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B;AACjH;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AACxC,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI;AAChC,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,cAAc,CAAC;AAChF,CAAC,MAAM,KAAK,GAAG,iBAAiB,CAAC,WAAW,CAAC;AAC7C,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACpE,CAAC,IAAI,aAAa,GAAG,WAAW;AAChC,CAAC,QAAQ,KAAK,CAAC,KAAK,CAAC,UAAU;AAC/B,EAAE,KAAK,QAAQ,EAAE;AACjB,EAAE,KAAK,KAAK,EAAE;AACd,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC5E,GAAG,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO;AAC9B,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACtE,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC;AACzC,GAAG;AACH,EAAE;AACF,EAAE,KAAK,SAAS,EAAE;AAClB,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC5E,GAAG,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO;AAC7B,GAAG,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;AAChD,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACnF,GAAG,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AAC5E,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACvE,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC;AACxD,GAAG,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;AACzD,GAAG;AACH,EAAE;AACF;AACA,CAAC,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC;AAC5D,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACpE,CAAC,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,KAAK,QAAQ,GAAG,sBAAsB,GAAG,uBAAuB;AAC5G,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE;AACpD,EAAE,cAAc,EAAE,cAAc,CAAC,aAAa,CAAC;AAC/C,EAAE,eAAe,EAAE;AACnB,EAAE,EAAE,CAAC;AACL;;;;"}

package/build/server/chunks/entries/endpoints/api/health/_server.ts.js-KxAEjk53.js

@@ -0,0 +1,57 @@
+import { g as getBootHealth, i as isDegraded } from '../../../../chunks/bootHealth.server.js-4quI1HjA.js';
+import { json } from '@sveltejs/kit';
+import { randomUUID } from 'crypto';
+import { createRequire } from 'module';
+import '../../../../chunks/providers.server.js-DdXZdijf.js';
+import '../../../../chunks/shared-server.js-HBAhbQ8m.js';
+import '../../../../chunks/src.js-C5mUn1eC.js';
+import 'zod';
+import '../../../../chunks/limits.js-CX18fbtQ.js';
+import '../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+
+//#region src/routes/api/health/+server.ts
+var INSTANCE_ID = randomUUID();
+var RUNTIME_VERSION = (() => {
+	try {
+		return createRequire(import.meta.url)("@selvajs/selva/package.json").version;
+	} catch {
+		return null;
+	}
+})();
+/**
+* Health check endpoint for load balancers and orchestration systems.
+* Used by Docker healthchecks, Kubernetes liveness probes, and monitoring tools.
+*
+* The `instanceId` field is a per-boot fingerprint — clients polling after a
+* restart confirm the *new* process is responding (not the old one about to be
+* killed) by watching for the value to change.
+*
+* Returns 503 with `status: "degraded"` when boot-time integrity checks
+* failed (e.g. compute server apiKeys can't be decrypted under the current
+* `SELVA_AT_REST_KEY`). The body lists which servers and why, so an operator
+* curling the endpoint can diagnose without server-log access. The app
+* still serves requests in this state (per-row tolerance) — the 503 is
+* specifically a signal for load balancers / monitoring.
+*/
+var GET = async () => {
+	const boot = await getBootHealth();
+	const degraded = isDegraded(boot);
+	const body = {
+		status: degraded ? "degraded" : "ok",
+		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+		instanceId: INSTANCE_ID,
+		version: RUNTIME_VERSION,
+		boot
+	};
+	return json(body, { status: degraded ? 503 : 200 });
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-KxAEjk53.js.map

package/build/server/chunks/entries/endpoints/api/health/_server.ts.js-KxAEjk53.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-KxAEjk53.js","sources":["../../../../../../../.svelte-kit/output/server/entries/endpoints/api/health/_server.ts.js"],"sourcesContent":["import { n as isDegraded, t as getBootHealth } from \"../../../../chunks/bootHealth.server.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"crypto\";\nimport { createRequire } from \"module\";\n//#region src/routes/api/health/+server.ts\nvar INSTANCE_ID = randomUUID();\nvar RUNTIME_VERSION = (() => {\n\ttry {\n\t\treturn createRequire(import.meta.url)(\"@selvajs/selva/package.json\").version;\n\t} catch {\n\t\treturn null;\n\t}\n})();\n/**\n* Health check endpoint for load balancers and orchestration systems.\n* Used by Docker healthchecks, Kubernetes liveness probes, and monitoring tools.\n*\n* The `instanceId` field is a per-boot fingerprint — clients polling after a\n* restart confirm the *new* process is responding (not the old one about to be\n* killed) by watching for the value to change.\n*\n* Returns 503 with `status: \"degraded\"` when boot-time integrity checks\n* failed (e.g. compute server apiKeys can't be decrypted under the current\n* `SELVA_AT_REST_KEY`). The body lists which servers and why, so an operator\n* curling the endpoint can diagnose without server-log access. The app\n* still serves requests in this state (per-row tolerance) — the 503 is\n* specifically a signal for load balancers / monitoring.\n*/\nvar GET = async () => {\n\tconst boot = await getBootHealth();\n\tconst degraded = isDegraded(boot);\n\tconst body = {\n\t\tstatus: degraded ? \"degraded\" : \"ok\",\n\t\ttimestamp: (/* @__PURE__ */ new Date()).toISOString(),\n\t\tinstanceId: INSTANCE_ID,\n\t\tversion: RUNTIME_VERSION,\n\t\tboot\n\t};\n\treturn json(body, { status: degraded ? 503 : 200 });\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAIA;AACA,IAAI,WAAW,GAAG,UAAU,EAAE;AAC9B,IAAI,eAAe,GAAG,CAAC,MAAM;AAC7B,CAAC,IAAI;AACL,EAAE,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,6BAA6B,CAAC,CAAC,OAAO;AAC9E,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,IAAI;AACb,CAAC;AACD,CAAC,GAAG;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,YAAY;AACtB,CAAC,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE;AACnC,CAAC,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC;AAClC,CAAC,MAAM,IAAI,GAAG;AACd,EAAE,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,IAAI;AACtC,EAAE,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACvD,EAAE,UAAU,EAAE,WAAW;AACzB,EAAE,OAAO,EAAE,eAAe;AAC1B,EAAE;AACF,EAAE;AACF,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC;AACpD;;;;"}

package/build/server/chunks/entries/endpoints/api/invites/_id_/_server.ts.js-DZeZ1G4s.js

@@ -0,0 +1,49 @@
+import { t as getInviteStore } from '../../../../../chunks/providers.server.js-DdXZdijf.js';
+import { j as requireManageOrgMembers } from '../../../../../chunks/access.server.js-DSts2vt7.js';
+import { a as apiError, A as ApiErrorCode, h as handleApiError } from '../../../../../chunks/api-errors.js-CTrFkLDr.js';
+import '../../../../../chunks/shared-server.js-HBAhbQ8m.js';
+import '../../../../../chunks/src.js-C5mUn1eC.js';
+import 'zod';
+import '../../../../../chunks/limits.js-CX18fbtQ.js';
+import '../../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '../../../../../chunks/utils2.js-Su_ead5y.js';
+
+//#region src/routes/api/invites/[id]/+server.ts
+var DELETE = async ({ params, locals }) => {
+	requireManageOrgMembers(locals);
+	const ctx = locals.ctx;
+	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
+	const id = params.id;
+	try {
+		const store = getInviteStore();
+		let cursor;
+		let found = false;
+		do {
+			const page = await store.listByOrg(ctx, ctx.actingOrgId, {
+				limit: 200,
+				cursor
+			});
+			if (page.items.some((i) => i.id === id)) {
+				found = true;
+				break;
+			}
+			cursor = page.nextCursor ?? void 0;
+		} while (cursor);
+		if (!found) apiError(404, ApiErrorCode.NOT_FOUND, "Invite not found");
+		await store.revoke(ctx, id);
+		return new Response(null, { status: 204 });
+	} catch (err) {
+		handleApiError(err, "Failed to revoke invite");
+	}
+};
+
+export { DELETE };
+//# sourceMappingURL=_server.ts.js-DZeZ1G4s.js.map

package/build/server/chunks/entries/endpoints/api/invites/_id_/_server.ts.js-DZeZ1G4s.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-DZeZ1G4s.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/invites/_id_/_server.ts.js"],"sourcesContent":["import { d as getInviteStore } from \"../../../../../chunks/providers.server.js\";\nimport { x as requireManageOrgMembers } from \"../../../../../chunks/access.server.js\";\nimport { n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\n//#region src/routes/api/invites/[id]/+server.ts\nvar DELETE = async ({ params, locals }) => {\n\trequireManageOrgMembers(locals);\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tconst id = params.id;\n\ttry {\n\t\tconst store = getInviteStore();\n\t\tlet cursor;\n\t\tlet found = false;\n\t\tdo {\n\t\t\tconst page = await store.listByOrg(ctx, ctx.actingOrgId, {\n\t\t\t\tlimit: 200,\n\t\t\t\tcursor\n\t\t\t});\n\t\t\tif (page.items.some((i) => i.id === id)) {\n\t\t\t\tfound = true;\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tcursor = page.nextCursor ?? void 0;\n\t\t} while (cursor);\n\t\tif (!found) apiError(404, ApiErrorCode.NOT_FOUND, \"Invite not found\");\n\t\tawait store.revoke(ctx, id);\n\t\treturn new Response(null, { status: 204 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to revoke invite\");\n\t}\n};\n//#endregion\nexport { DELETE };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAGA;AACG,IAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE;AACrB,CAAC,IAAI;AACL,EAAE,MAAM,KAAK,GAAG,cAAc,EAAE;AAChC,EAAE,IAAI,MAAM;AACZ,EAAE,IAAI,KAAK,GAAG,KAAK;AACnB,EAAE,GAAG;AACL,GAAG,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE;AAC5D,IAAI,KAAK,EAAE,GAAG;AACd,IAAI;AACJ,IAAI,CAAC;AACL,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;AAC5C,IAAI,KAAK,GAAG,IAAI;AAChB,IAAI;AACJ,GAAG;AACH,GAAG,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC;AACrC,EAAE,CAAC,QAAQ,MAAM;AACjB,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,kBAAkB,CAAC;AACvE,EAAE,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AAC7B,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAChD,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/invites/_server.ts.js-CwT2TN6y.js

@@ -0,0 +1,78 @@
+import { M as MEMBER_ASSIGNABLE_PERMISSIONS, D as DEFAULT_ORG_PERMISSIONS, k as OrgRoleSchema, P as PlatformPermissionSchema, b as OrgPermissionSchema } from '../../../../chunks/src.js-C5mUn1eC.js';
+import { t as getInviteStore } from '../../../../chunks/providers.server.js-DdXZdijf.js';
+import { j as requireManageOrgMembers } from '../../../../chunks/access.server.js-DSts2vt7.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from '../../../../chunks/api-errors.js-CTrFkLDr.js';
+import { s as splitFlatPermissions } from '../../../../chunks/permissions-compat.server.js-Ba1Un-4O.js';
+import { m as mintRawToken, h as hashToken } from '../../../../chunks/token2.server.js-DXjudKNU.js';
+import { json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { randomUUID } from 'node:crypto';
+import '../../../../chunks/shared-server.js-HBAhbQ8m.js';
+import '../../../../chunks/limits.js-CX18fbtQ.js';
+import '../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../chunks/utils2.js-Su_ead5y.js';
+import '../../../../chunks/token-codec.js-CxK2DiO-.js';
+
+//#region src/routes/api/invites/+server.ts
+var FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);
+var CreateBody = z.object({
+	email: z.string().email("Valid email is required").transform((s) => s.toLowerCase().trim()),
+	orgRole: OrgRoleSchema.default("member"),
+	permissions: z.array(FlatPermissionSchema).default([])
+});
+var INVITE_TTL_MS = 6048e5;
+var GET = async ({ locals }) => {
+	requireManageOrgMembers(locals);
+	const ctx = locals.ctx;
+	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
+	try {
+		const invites = (await getInviteStore().listByOrg(ctx, ctx.actingOrgId, { limit: 200 })).items.map(({ tokenHash: _omit, ...rest }) => rest);
+		return json({ invites });
+	} catch (err) {
+		handleApiError(err, "Failed to list invites");
+	}
+};
+var POST = async ({ request, locals, url }) => {
+	requireManageOrgMembers(locals);
+	const ctx = locals.ctx;
+	const user = locals.user;
+	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
+	const body = await request.json().catch(() => null);
+	const parsed = CreateBody.safeParse(body);
+	if (!parsed.success) throwZodError(parsed.error);
+	try {
+		const { org: submittedOrgPerms } = splitFlatPermissions(parsed.data.permissions);
+		const orgPermissions = parsed.data.orgRole === "member" ? submittedOrgPerms.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[parsed.data.orgRole]];
+		const rawToken = mintRawToken();
+		const now = /* @__PURE__ */ new Date();
+		const invite = {
+			id: randomUUID(),
+			tokenHash: hashToken(rawToken),
+			email: parsed.data.email,
+			orgId: ctx.actingOrgId,
+			orgRole: parsed.data.orgRole,
+			orgPermissions,
+			invitedBy: user.id,
+			createdAt: now.toISOString(),
+			expiresAt: new Date(now.getTime() + INVITE_TTL_MS).toISOString()
+		};
+		await getInviteStore().create(ctx, invite);
+		const acceptUrl = `${url.origin}/accept-invite?token=${rawToken}`;
+		const { tokenHash: _omit, ...inviteForClient } = invite;
+		return json({
+			invite: inviteForClient,
+			acceptUrl
+		}, { status: 201 });
+	} catch (err) {
+		handleApiError(err, "Failed to create invite");
+	}
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-CwT2TN6y.js.map

package/build/server/chunks/entries/endpoints/api/invites/_server.ts.js-CwT2TN6y.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CwT2TN6y.js","sources":["../../../../../../../.svelte-kit/output/server/entries/endpoints/api/invites/_server.ts.js"],"sourcesContent":["import { E as PlatformPermissionSchema, S as OrgRoleSchema, _ as DEFAULT_ORG_PERMISSIONS, v as MEMBER_ASSIGNABLE_PERMISSIONS, x as OrgPermissionSchema } from \"../../../../chunks/src.js\";\nimport { d as getInviteStore } from \"../../../../chunks/providers.server.js\";\nimport { x as requireManageOrgMembers } from \"../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../chunks/api-errors.js\";\nimport { n as splitFlatPermissions } from \"../../../../chunks/permissions-compat.server.js\";\nimport { n as mintRawToken, t as hashToken } from \"../../../../chunks/token2.server.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/api/invites/+server.ts\nvar FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);\nvar CreateBody = z.object({\n\temail: z.string().email(\"Valid email is required\").transform((s) => s.toLowerCase().trim()),\n\torgRole: OrgRoleSchema.default(\"member\"),\n\tpermissions: z.array(FlatPermissionSchema).default([])\n});\nvar INVITE_TTL_MS = 6048e5;\nvar GET = async ({ locals }) => {\n\trequireManageOrgMembers(locals);\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\ttry {\n\t\tconst invites = (await getInviteStore().listByOrg(ctx, ctx.actingOrgId, { limit: 200 })).items.map(({ tokenHash: _omit, ...rest }) => rest);\n\t\treturn json({ invites });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to list invites\");\n\t}\n};\nvar POST = async ({ request, locals, url }) => {\n\trequireManageOrgMembers(locals);\n\tconst ctx = locals.ctx;\n\tconst user = locals.user;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tconst body = await request.json().catch(() => null);\n\tconst parsed = CreateBody.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\ttry {\n\t\tconst { org: submittedOrgPerms } = splitFlatPermissions(parsed.data.permissions);\n\t\tconst orgPermissions = parsed.data.orgRole === \"member\" ? submittedOrgPerms.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[parsed.data.orgRole]];\n\t\tconst rawToken = mintRawToken();\n\t\tconst now = /* @__PURE__ */ new Date();\n\t\tconst invite = {\n\t\t\tid: randomUUID(),\n\t\t\ttokenHash: hashToken(rawToken),\n\t\t\temail: parsed.data.email,\n\t\t\torgId: ctx.actingOrgId,\n\t\t\torgRole: parsed.data.orgRole,\n\t\t\torgPermissions,\n\t\t\tinvitedBy: user.id,\n\t\t\tcreatedAt: now.toISOString(),\n\t\t\texpiresAt: new Date(now.getTime() + INVITE_TTL_MS).toISOString()\n\t\t};\n\t\tawait getInviteStore().create(ctx, invite);\n\t\tconst acceptUrl = `${url.origin}/accept-invite?token=${rawToken}`;\n\t\tconst { tokenHash: _omit, ...inviteForClient } = invite;\n\t\treturn json({\n\t\t\tinvite: inviteForClient,\n\t\t\tacceptUrl\n\t\t}, { status: 201 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to create invite\");\n\t}\n};\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AASA;AACA,IAAI,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;AACnF,IAAI,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;AAC1B,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AAC5F,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;AACzC,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE;AACtD,CAAC,CAAC;AACF,IAAI,aAAa,GAAG,MAAM;AACvB,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAChC,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,IAAI;AACL,EAAE,MAAM,OAAO,GAAG,CAAC,MAAM,cAAc,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC;AAC7I,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;AAC1B,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAC/C,CAAC;AACD;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AAC/C,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AACzB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1C,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,IAAI;AACL,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;AAClF,EAAE,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC1L,EAAE,MAAM,QAAQ,GAAG,YAAY,EAAE;AACjC,EAAE,MAAM,GAAG,mBAAmB,IAAI,IAAI,EAAE;AACxC,EAAE,MAAM,MAAM,GAAG;AACjB,GAAG,EAAE,EAAE,UAAU,EAAE;AACnB,GAAG,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC;AACjC,GAAG,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;AAC3B,GAAG,KAAK,EAAE,GAAG,CAAC,WAAW;AACzB,GAAG,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;AAC/B,GAAG,cAAc;AACjB,GAAG,SAAS,EAAE,IAAI,CAAC,EAAE;AACrB,GAAG,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;AAC/B,GAAG,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,WAAW;AACjE,GAAG;AACH,EAAE,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC;AAC5C,EAAE,MAAM,SAAS,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;AACnE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,eAAe,EAAE,GAAG,MAAM;AACzD,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,MAAM,EAAE,eAAe;AAC1B,GAAG;AACH,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAChD,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/me/starred/_guid_/_server.ts.js-BKESJ8qb.js

@@ -0,0 +1,45 @@
+import { u as getUserProfileStore } from '../../../../../../chunks/providers.server.js-DdXZdijf.js';
+import { a as apiError, h as handleApiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-CTrFkLDr.js';
+import { json } from '@sveltejs/kit';
+import '../../../../../../chunks/shared-server.js-HBAhbQ8m.js';
+import '../../../../../../chunks/src.js-C5mUn1eC.js';
+import 'zod';
+import '../../../../../../chunks/limits.js-CX18fbtQ.js';
+import '../../../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/utils2.js-Su_ead5y.js';
+
+//#region src/routes/api/me/starred/[guid]/+server.ts
+/** Star a definition for the current user. No-op if already starred. */
+var POST = async ({ params, locals }) => {
+	if (!locals.user || !locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
+	const guid = params.guid;
+	if (!guid) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing definition guid");
+	try {
+		await getUserProfileStore().starDefinition(locals.ctx, locals.user.id, guid);
+		return json({ starred: true });
+	} catch (err) {
+		handleApiError(err, "Failed to star definition");
+	}
+};
+/** Unstar a definition for the current user. No-op if not starred. */
+var DELETE = async ({ params, locals }) => {
+	if (!locals.user || !locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
+	const guid = params.guid;
+	if (!guid) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing definition guid");
+	try {
+		await getUserProfileStore().unstarDefinition(locals.ctx, locals.user.id, guid);
+		return json({ starred: false });
+	} catch (err) {
+		handleApiError(err, "Failed to unstar definition");
+	}
+};
+
+export { DELETE, POST };
+//# sourceMappingURL=_server.ts.js-BKESJ8qb.js.map

package/build/server/chunks/entries/endpoints/api/me/starred/_guid_/_server.ts.js-BKESJ8qb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-BKESJ8qb.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/me/starred/_guid_/_server.ts.js"],"sourcesContent":["import { x as getUserProfileStore } from \"../../../../../../chunks/providers.server.js\";\nimport { n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/me/starred/[guid]/+server.ts\n/** Star a definition for the current user. No-op if already starred. */\nvar POST = async ({ params, locals }) => {\n\tif (!locals.user || !locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n\tconst guid = params.guid;\n\tif (!guid) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing definition guid\");\n\ttry {\n\t\tawait getUserProfileStore().starDefinition(locals.ctx, locals.user.id, guid);\n\t\treturn json({ starred: true });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to star definition\");\n\t}\n};\n/** Unstar a definition for the current user. No-op if not starred. */\nvar DELETE = async ({ params, locals }) => {\n\tif (!locals.user || !locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n\tconst guid = params.guid;\n\tif (!guid) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing definition guid\");\n\ttry {\n\t\tawait getUserProfileStore().unstarDefinition(locals.ctx, locals.user.id, guid);\n\t\treturn json({ starred: false });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to unstar definition\");\n\t}\n};\n//#endregion\nexport { DELETE, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAGA;AACA;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AACzC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC1F,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AACzB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACpF,CAAC,IAAI;AACL,EAAE,MAAM,mBAAmB,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;AAC9E,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAChC,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,2BAA2B,CAAC;AAClD,CAAC;AACD;AACA;AACG,IAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC1F,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AACzB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACpF,CAAC,IAAI;AACL,EAAE,MAAM,mBAAmB,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;AAChF,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACjC,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACpD,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/org/compute/_server.ts.js-CNbeU8uC.js

@@ -0,0 +1,110 @@
+import '../../../../../chunks/src.js-C5mUn1eC.js';
+import { n as getComputeServerConfigStore, y as isOrgServer, m as isPlatformServer, k as flag } from '../../../../../chunks/providers.server.js-DdXZdijf.js';
+import { s as serversVisibleTo } from '../../../../../chunks/utils2.js-Su_ead5y.js';
+import { s as requireManageOrgCompute } from '../../../../../chunks/access.server.js-DSts2vt7.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-CTrFkLDr.js';
+import { e as evictChangedServers } from '../../../../../chunks/evictChangedServers.js-DqgajcZe.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../chunks/shared-server.js-HBAhbQ8m.js';
+import '../../../../../chunks/limits.js-CX18fbtQ.js';
+import '../../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../chunks/engine.server.js-DRhY8FHd.js';
+import '../../../../../chunks/chunk-XHXJVNW7.js-Bj249C3T.js';
+import '../../../../../chunks/computeLimits.js-D7YwfkMw.js';
+import 'node:dns/promises';
+import 'node:net';
+import 'zlib';
+import 'util';
+
+//#region src/routes/api/org/compute/+server.ts
+function requireFlag() {
+	if (!flag("ALLOW_ORG_COMPUTE_OVERRIDE")) apiError(403, ApiErrorCode.FORBIDDEN, "Per-org compute override is disabled on this instance (ALLOW_ORG_COMPUTE_OVERRIDE).");
+}
+var GET = async ({ locals }) => {
+	requireFlag();
+	requireManageOrgCompute(locals);
+	const ctx = locals.ctx;
+	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
+	const config = await getComputeServerConfigStore().getConfig(ctx);
+	const orgId = ctx.actingOrgId;
+	const owned = config.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => {
+		const { apiKey: _apiKey, hasApiKey, ...rest } = s;
+		return {
+			...rest,
+			hasApiKey: !!hasApiKey
+		};
+	});
+	const catalog = serversVisibleTo(config, orgId).map((s) => ({
+		id: s.id,
+		label: s.label,
+		serverUrl: s.serverUrl,
+		scope: s.scope,
+		source: isPlatformServer(s) ? "platform" : "org",
+		timeoutMs: s.timeoutMs,
+		retryCount: s.retryCount
+	}));
+	return json({
+		servers: owned,
+		defaultServerId: config.orgDefaults?.[orgId] ?? null,
+		globalDefaultServerId: config.defaultServerId ?? null,
+		catalog
+	});
+};
+var PUT = async ({ request, locals }) => {
+	requireFlag();
+	requireManageOrgCompute(locals);
+	const ctx = locals.ctx;
+	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
+	const orgId = ctx.actingOrgId;
+	const body = await request.json().catch(() => null);
+	if (!body || typeof body !== "object") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid request body");
+	const incoming = body;
+	if (!Array.isArray(incoming.servers)) apiError(400, ApiErrorCode.VALIDATION_FAILED, "servers must be an array");
+	for (const s of incoming.servers) {
+		if (!s.id || typeof s.id !== "string") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Each server needs an id");
+		if (!s.label || typeof s.label !== "string") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Each server needs a label");
+		if (!s.serverUrl || typeof s.serverUrl !== "string") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Each server needs a serverUrl");
+		try {
+			new URL(s.serverUrl);
+		} catch {
+			apiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid serverUrl: ${s.serverUrl}`);
+		}
+		if (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== "string") apiError(400, ApiErrorCode.VALIDATION_FAILED, "apiKey must be a string, null, or omitted");
+	}
+	const provider = getComputeServerConfigStore();
+	const existing = await provider.getConfig(ctx, { includeApiKeys: true });
+	const storedKeyById = new Map(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => [s.id, s.apiKey]));
+	const next = incoming.servers.map((s) => ({
+		id: s.id,
+		scope: "org",
+		ownerOrgId: orgId,
+		label: s.label,
+		serverUrl: s.serverUrl,
+		timeoutMs: s.timeoutMs,
+		retryCount: s.retryCount,
+		apiKey: s.apiKey === null ? void 0 : s.apiKey ? s.apiKey : storedKeyById.get(s.id)
+	}));
+	if (typeof incoming.defaultServerId === "string") {
+		const projected = {
+			servers: [...existing.servers.filter((s) => !(isOrgServer(s) && s.ownerOrgId === orgId)), ...next],
+			defaultServerId: existing.defaultServerId,
+			orgDefaults: existing.orgDefaults
+		};
+		if (!new Set(serversVisibleTo(projected, orgId).map((s) => s.id)).has(incoming.defaultServerId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, "defaultServerId must reference a server visible to this organization");
+	}
+	await provider.saveOrgServers(ctx, orgId, next, incoming.defaultServerId);
+	const prevOrgServers = existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId);
+	evictChangedServers(prevOrgServers, next);
+	return new Response(null, { status: 204 });
+};
+
+export { GET, PUT };
+//# sourceMappingURL=_server.ts.js-CNbeU8uC.js.map

package/build/server/chunks/entries/endpoints/api/org/compute/_server.ts.js-CNbeU8uC.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CNbeU8uC.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/org/compute/_server.ts.js"],"sourcesContent":["import \"../../../../../chunks/src.js\";\nimport { F as isPlatformServer, P as isOrgServer, a as getComputeServerConfigStore, t as flag } from \"../../../../../chunks/providers.server.js\";\nimport { a as serversVisibleTo } from \"../../../../../chunks/utils2.js\";\nimport { b as requireManageOrgCompute } from \"../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { t as evictChangedServers } from \"../../../../../chunks/evictChangedServers.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/org/compute/+server.ts\nfunction requireFlag() {\n\tif (!flag(\"ALLOW_ORG_COMPUTE_OVERRIDE\")) apiError(403, ApiErrorCode.FORBIDDEN, \"Per-org compute override is disabled on this instance (ALLOW_ORG_COMPUTE_OVERRIDE).\");\n}\nvar GET = async ({ locals }) => {\n\trequireFlag();\n\trequireManageOrgCompute(locals);\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tconst config = await getComputeServerConfigStore().getConfig(ctx);\n\tconst orgId = ctx.actingOrgId;\n\tconst owned = config.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => {\n\t\tconst { apiKey: _apiKey, hasApiKey, ...rest } = s;\n\t\treturn {\n\t\t\t...rest,\n\t\t\thasApiKey: !!hasApiKey\n\t\t};\n\t});\n\tconst catalog = serversVisibleTo(config, orgId).map((s) => ({\n\t\tid: s.id,\n\t\tlabel: s.label,\n\t\tserverUrl: s.serverUrl,\n\t\tscope: s.scope,\n\t\tsource: isPlatformServer(s) ? \"platform\" : \"org\",\n\t\ttimeoutMs: s.timeoutMs,\n\t\tretryCount: s.retryCount\n\t}));\n\treturn json({\n\t\tservers: owned,\n\t\tdefaultServerId: config.orgDefaults?.[orgId] ?? null,\n\t\tglobalDefaultServerId: config.defaultServerId ?? null,\n\t\tcatalog\n\t});\n};\nvar PUT = async ({ request, locals }) => {\n\trequireFlag();\n\trequireManageOrgCompute(locals);\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tconst orgId = ctx.actingOrgId;\n\tconst body = await request.json().catch(() => null);\n\tif (!body || typeof body !== \"object\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid request body\");\n\tconst incoming = body;\n\tif (!Array.isArray(incoming.servers)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"servers must be an array\");\n\tfor (const s of incoming.servers) {\n\t\tif (!s.id || typeof s.id !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs an id\");\n\t\tif (!s.label || typeof s.label !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs a label\");\n\t\tif (!s.serverUrl || typeof s.serverUrl !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs a serverUrl\");\n\t\ttry {\n\t\t\tnew URL(s.serverUrl);\n\t\t} catch {\n\t\t\tapiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid serverUrl: ${s.serverUrl}`);\n\t\t}\n\t\tif (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"apiKey must be a string, null, or omitted\");\n\t}\n\tconst provider = getComputeServerConfigStore();\n\tconst existing = await provider.getConfig(ctx, { includeApiKeys: true });\n\tconst storedKeyById = new Map(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => [s.id, s.apiKey]));\n\tconst next = incoming.servers.map((s) => ({\n\t\tid: s.id,\n\t\tscope: \"org\",\n\t\townerOrgId: orgId,\n\t\tlabel: s.label,\n\t\tserverUrl: s.serverUrl,\n\t\ttimeoutMs: s.timeoutMs,\n\t\tretryCount: s.retryCount,\n\t\tapiKey: s.apiKey === null ? void 0 : s.apiKey ? s.apiKey : storedKeyById.get(s.id)\n\t}));\n\tif (typeof incoming.defaultServerId === \"string\") {\n\t\tconst projected = {\n\t\t\tservers: [...existing.servers.filter((s) => !(isOrgServer(s) && s.ownerOrgId === orgId)), ...next],\n\t\t\tdefaultServerId: existing.defaultServerId,\n\t\t\torgDefaults: existing.orgDefaults\n\t\t};\n\t\tif (!new Set(serversVisibleTo(projected, orgId).map((s) => s.id)).has(incoming.defaultServerId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"defaultServerId must reference a server visible to this organization\");\n\t}\n\tawait provider.saveOrgServers(ctx, orgId, next, incoming.defaultServerId);\n\tconst prevOrgServers = existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId);\n\tevictChangedServers(prevOrgServers, next);\n\treturn new Response(null, { status: 204 });\n};\n//#endregion\nexport { GET, PUT };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAOA;AACA,SAAS,WAAW,GAAG;AACvB,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,qFAAqF,CAAC;AACtK;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAChC,CAAC,WAAW,EAAE;AACd,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC;AAClE,CAAC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC9B,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK;AACjG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC;AACnD,EAAE,OAAO;AACT,GAAG,GAAG,IAAI;AACV,GAAG,SAAS,EAAE,CAAC,CAAC;AAChB,GAAG;AACH,CAAC,CAAC,CAAC;AACH,CAAC,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC7D,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;AACV,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,KAAK;AAClD,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,UAAU,EAAE,CAAC,CAAC;AAChB,EAAE,CAAC,CAAC;AACJ,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,OAAO,EAAE,KAAK;AAChB,EAAE,eAAe,EAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,IAAI,IAAI;AACtD,EAAE,qBAAqB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;AACvD,EAAE;AACF,EAAE,CAAC;AACH;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACzC,CAAC,WAAW,EAAE;AACd,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC9B,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AAC7G,CAAC,MAAM,QAAQ,GAAG,IAAI;AACtB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;AAChH,CAAC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE;AACnC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACjH,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;AACzH,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,+BAA+B,CAAC;AACrI,EAAE,IAAI;AACN,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACvB,EAAE,CAAC,CAAC,MAAM;AACV,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACrF,EAAE;AACF,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2CAA2C,CAAC;AAC1K,CAAC;AACD,CAAC,MAAM,QAAQ,GAAG,2BAA2B,EAAE;AAC/C,CAAC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;AACzE,CAAC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACrI,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC3C,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;AACV,EAAE,KAAK,EAAE,KAAK;AACd,EAAE,UAAU,EAAE,KAAK;AACnB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;AAC1B,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;AACnF,EAAE,CAAC,CAAC;AACJ,CAAC,IAAI,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ,EAAE;AACnD,EAAE,MAAM,SAAS,GAAG;AACpB,GAAG,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC;AACrG,GAAG,eAAe,EAAE,QAAQ,CAAC,eAAe;AAC5C,GAAG,WAAW,EAAE,QAAQ,CAAC;AACzB,GAAG;AACH,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sEAAsE,CAAC;AACxN,CAAC;AACD,CAAC,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC;AAC1E,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC;AAChG,CAAC,mBAAmB,CAAC,cAAc,EAAE,IAAI,CAAC;AAC1C,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C;;;;"}

package/build/server/chunks/entries/endpoints/api/orgs/_orgId_/members/_userId_/_server.ts.js-CXrs5RHh.js

@@ -0,0 +1,79 @@
+import { M as MEMBER_ASSIGNABLE_PERMISSIONS, a as ALL_ORG_PERMISSIONS, k as OrgRoleSchema } from '../../../../../../../chunks/src.js-C5mUn1eC.js';
+import { e as getOrganizationProvider } from '../../../../../../../chunks/providers.server.js-DdXZdijf.js';
+import { j as requireManageOrgMembers } from '../../../../../../../chunks/access.server.js-DSts2vt7.js';
+import { a as apiError, t as throwZodError, A as ApiErrorCode, h as handleApiError } from '../../../../../../../chunks/api-errors.js-CTrFkLDr.js';
+import { z } from 'zod';
+import '../../../../../../../chunks/shared-server.js-HBAhbQ8m.js';
+import '../../../../../../../chunks/limits.js-CX18fbtQ.js';
+import '../../../../../../../chunks/chunk-XT3XWDDV.js-CgVdm1U0.js';
+import '../../../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '../../../../../../../chunks/utils2.js-Su_ead5y.js';
+
+//#region src/routes/api/orgs/[orgId]/members/[userId]/+server.ts
+/**
+* PATCH /api/orgs/[orgId]/members/[userId]
+*
+* Body accepts either or both:
+*   - `{ role: OrgRole }` — change the member's role. **Owner-only** per §3.
+*   - `{ permissions: OrgPermission[] }` — replace the member's grantable
+*     permissions. Owner/admin via `manage_org_members`. For `member`-role
+*     targets, only `MEMBER_ASSIGNABLE_PERMISSIONS` are accepted; promoting a
+*     member's permissions does NOT change their role (that's a separate
+*     branch, owner-only).
+*
+* Tenancy: the URL `orgId` must equal `ctx.actingOrgId`. Cross-org member
+* mutation is blocked even if the actor holds permissions in another org.
+*
+* Self-protection (sole-owner invariant, §10 spirit): the only owner of an
+* org cannot be demoted. Demoting yourself while you are the sole owner is
+* the most common way to discover this — handler returns 409.
+*/
+var PERMISSIONS_SCHEMA = z.array(z.enum(ALL_ORG_PERMISSIONS));
+var PatchSchema = z.object({
+	role: OrgRoleSchema.optional(),
+	permissions: PERMISSIONS_SCHEMA.optional()
+}).refine((b) => b.role !== void 0 || b.permissions !== void 0, { message: "Provide at least one of role, permissions" });
+var PATCH = async ({ params, request, locals }) => {
+	const { orgId, userId } = params;
+	if (!orgId || !userId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing org ID or user ID");
+	requireManageOrgMembers(locals);
+	const ctx = locals.ctx;
+	if (ctx.actingOrgId !== orgId) apiError(403, ApiErrorCode.FORBIDDEN, "Acting org does not match the target org.");
+	const body = await request.json().catch(() => null);
+	const parsed = PatchSchema.safeParse(body);
+	if (!parsed.success) throwZodError(parsed.error);
+	const patch = parsed.data;
+	const orgs = getOrganizationProvider();
+	const [actorMember, target] = await Promise.all([orgs.getOrgMember(ctx, orgId, ctx.userId), orgs.getOrgMember(ctx, orgId, userId)]);
+	if (!target) apiError(404, ApiErrorCode.NOT_FOUND, "Member not found in this organization.");
+	if (!actorMember) apiError(403, ApiErrorCode.FORBIDDEN, "You are not a member of this organization.");
+	if (patch.role !== void 0 && patch.role !== target.role) {
+		if (actorMember.role !== "owner") apiError(403, ApiErrorCode.FORBIDDEN, "Only the org owner can change roles.");
+		if (target.role === "owner" && patch.role !== "owner") {
+			if ((await orgs.listOrgMembers(ctx, orgId, { limit: 200 })).items.filter((m) => m.role === "owner" && m.userId !== target.userId && !m.deletedAt).length === 0) apiError(409, ApiErrorCode.CONFLICT, "Cannot demote the sole owner of this organization. Promote another member to owner first.");
+		}
+		await orgs.updateOrgMemberRole(ctx, orgId, userId, patch.role);
+	}
+	if (patch.permissions !== void 0) {
+		const effectiveRole = patch.role ?? target.role;
+		const valid = effectiveRole === "member" ? new Set(MEMBER_ASSIGNABLE_PERMISSIONS) : new Set(ALL_ORG_PERMISSIONS);
+		const invalid = patch.permissions.filter((p) => !valid.has(p));
+		if (invalid.length > 0) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Permissions [${invalid.join(", ")}] cannot be assigned to a ${effectiveRole}.`);
+		try {
+			await orgs.updateOrgMemberPermissions(ctx, orgId, userId, patch.permissions);
+		} catch (err) {
+			handleApiError(err, "Failed to update permissions");
+		}
+	}
+	return new Response(null, { status: 204 });
+};
+
+export { PATCH };
+//# sourceMappingURL=_server.ts.js-CXrs5RHh.js.map

package/build/server/chunks/entries/endpoints/api/orgs/_orgId_/members/_userId_/_server.ts.js-CXrs5RHh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CXrs5RHh.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/orgs/_orgId_/members/_userId_/_server.ts.js"],"sourcesContent":["import { S as OrgRoleSchema, h as ALL_ORG_PERMISSIONS, v as MEMBER_ASSIGNABLE_PERMISSIONS } from \"../../../../../../../chunks/src.js\";\nimport { m as getOrganizationProvider } from \"../../../../../../../chunks/providers.server.js\";\nimport { x as requireManageOrgMembers } from \"../../../../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../../../chunks/api-errors.js\";\nimport { z } from \"zod\";\n//#region src/routes/api/orgs/[orgId]/members/[userId]/+server.ts\n/**\n* PATCH /api/orgs/[orgId]/members/[userId]\n*\n* Body accepts either or both:\n*   - `{ role: OrgRole }` — change the member's role. **Owner-only** per §3.\n*   - `{ permissions: OrgPermission[] }` — replace the member's grantable\n*     permissions. Owner/admin via `manage_org_members`. For `member`-role\n*     targets, only `MEMBER_ASSIGNABLE_PERMISSIONS` are accepted; promoting a\n*     member's permissions does NOT change their role (that's a separate\n*     branch, owner-only).\n*\n* Tenancy: the URL `orgId` must equal `ctx.actingOrgId`. Cross-org member\n* mutation is blocked even if the actor holds permissions in another org.\n*\n* Self-protection (sole-owner invariant, §10 spirit): the only owner of an\n* org cannot be demoted. Demoting yourself while you are the sole owner is\n* the most common way to discover this — handler returns 409.\n*/\nvar PERMISSIONS_SCHEMA = z.array(z.enum(ALL_ORG_PERMISSIONS));\nvar PatchSchema = z.object({\n\trole: OrgRoleSchema.optional(),\n\tpermissions: PERMISSIONS_SCHEMA.optional()\n}).refine((b) => b.role !== void 0 || b.permissions !== void 0, { message: \"Provide at least one of role, permissions\" });\nvar PATCH = async ({ params, request, locals }) => {\n\tconst { orgId, userId } = params;\n\tif (!orgId || !userId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing org ID or user ID\");\n\trequireManageOrgMembers(locals);\n\tconst ctx = locals.ctx;\n\tif (ctx.actingOrgId !== orgId) apiError(403, ApiErrorCode.FORBIDDEN, \"Acting org does not match the target org.\");\n\tconst body = await request.json().catch(() => null);\n\tconst parsed = PatchSchema.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\tconst patch = parsed.data;\n\tconst orgs = getOrganizationProvider();\n\tconst [actorMember, target] = await Promise.all([orgs.getOrgMember(ctx, orgId, ctx.userId), orgs.getOrgMember(ctx, orgId, userId)]);\n\tif (!target) apiError(404, ApiErrorCode.NOT_FOUND, \"Member not found in this organization.\");\n\tif (!actorMember) apiError(403, ApiErrorCode.FORBIDDEN, \"You are not a member of this organization.\");\n\tif (patch.role !== void 0 && patch.role !== target.role) {\n\t\tif (actorMember.role !== \"owner\") apiError(403, ApiErrorCode.FORBIDDEN, \"Only the org owner can change roles.\");\n\t\tif (target.role === \"owner\" && patch.role !== \"owner\") {\n\t\t\tif ((await orgs.listOrgMembers(ctx, orgId, { limit: 200 })).items.filter((m) => m.role === \"owner\" && m.userId !== target.userId && !m.deletedAt).length === 0) apiError(409, ApiErrorCode.CONFLICT, \"Cannot demote the sole owner of this organization. Promote another member to owner first.\");\n\t\t}\n\t\tawait orgs.updateOrgMemberRole(ctx, orgId, userId, patch.role);\n\t}\n\tif (patch.permissions !== void 0) {\n\t\tconst effectiveRole = patch.role ?? target.role;\n\t\tconst valid = effectiveRole === \"member\" ? new Set(MEMBER_ASSIGNABLE_PERMISSIONS) : new Set(ALL_ORG_PERMISSIONS);\n\t\tconst invalid = patch.permissions.filter((p) => !valid.has(p));\n\t\tif (invalid.length > 0) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Permissions [${invalid.join(\", \")}] cannot be assigned to a ${effectiveRole}.`);\n\t\ttry {\n\t\t\tawait orgs.updateOrgMemberPermissions(ctx, orgId, userId, patch.permissions);\n\t\t} catch (err) {\n\t\t\thandleApiError(err, \"Failed to update permissions\");\n\t\t}\n\t}\n\treturn new Response(null, { status: 204 });\n};\n//#endregion\nexport { PATCH };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAKA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAC7D,IAAI,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;AAC3B,CAAC,IAAI,EAAE,aAAa,CAAC,QAAQ,EAAE;AAC/B,CAAC,WAAW,EAAE,kBAAkB,CAAC,QAAQ;AACzC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;AACtH,IAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACnD,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM;AACjC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;AAClG,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,GAAG,CAAC,WAAW,KAAK,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,2CAA2C,CAAC;AAClH,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC;AAC3C,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI;AAC1B,CAAC,MAAM,IAAI,GAAG,uBAAuB,EAAE;AACvC,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AACpI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,wCAAwC,CAAC;AAC7F,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,4CAA4C,CAAC;AACtG,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE;AAC1D,EAAE,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,sCAAsC,CAAC;AACjH,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE;AACzD,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,2FAA2F,CAAC;AACpS,EAAE;AACF,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;AAChE,CAAC;AACD,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,EAAE;AACnC,EAAE,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI;AACjD,EAAE,MAAM,KAAK,GAAG,aAAa,KAAK,QAAQ,GAAG,IAAI,GAAG,CAAC,6BAA6B,CAAC,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC;AAClH,EAAE,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAChE,EAAE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,0BAA0B,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;AACxJ,EAAE,IAAI;AACN,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC;AAC/E,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,cAAc,CAAC,GAAG,EAAE,8BAA8B,CAAC;AACtD,EAAE;AACF,CAAC;AACD,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C;;;;"}