@selvajs/selva 4.8.0-beta.2 → 4.8.0-beta.4

package/build/server/chunks/entries/endpoints/api/files/_...path_/_server.ts.js-BrKhVv_O.js

@@ -1,89 +0,0 @@
-import { c as classifyAssetPath, e as GuidSchema, g as COVER_IMAGE_CONTENT_TYPES } from '../../../../../chunks/src.js-C5mUn1eC.js';
-import { o as getDefinitionMeta, F as definitionPaths, x as getStorageProvider } from '../../../../../chunks/providers.server.js-BxdMEy_h.js';
-import { o as requireCanViewProject, q as requireCanViewOrg } from '../../../../../chunks/access.server.js-kAeKdbqB.js';
-import { a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-B12FixUz.js';
-import 'zod';
-import '../../../../../chunks/shared-server.js-HBAhbQ8m.js';
-import '../../../../../chunks/limits.js-DyiDwmjP.js';
-import '../../../../../chunks/chunk-D2GEMGK5.js-keSflEOG.js';
-import '../../../../../chunks/schema.js-BhmknPcU.js';
-import 'node:crypto';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import '@sveltejs/kit';
-import '../../../../../chunks/utils2.js-DYtXuVSb.js';
-
-//#region src/routes/api/files/[...path]/+server.ts
-/**
-* Authenticated/­public blob proxy. The set of servable paths is the closed
-* asset-class registry (`classifyAssetPath` / `ASSET_CLASSES` in
-* `@selvajs/platform`). Each class declares a visibility; this route maps that
-* visibility to an authorization check:
-*
-*   - `public`  (org branding — logo/favicon): served to anyone, incl.
-*     logged-out visitors, with no auth. Cacheable. The bytes are always a
-*     rasterized WebP, so there is no XSS surface to gate.
-*   - `org`     (org-private blobs, e.g. pricing sheets under
-*     `orgs/{id}/private/*`): `requireCanViewOrg(orgId)`.
-*   - `project` (definition covers): `requireCanViewProject(projectId)` — the
-*     M5 hardening, unchanged.
-*
-* Anything that classifies to no asset class 404s. New blob types are opt-in:
-* add a registry entry with the right visibility — never a generic
-* "is the extension allowed" fallthrough. Authorization lives here (the route),
-* not in the storage layer, per `IStorageProvider`'s contract.
-*
-* Why a single proxy for all three: with the registry, the route is no longer a
-* pile of per-shape branches — it classifies once and dispatches on visibility,
-* so the cover-only contract that this route used to pin now generalizes
-* without re-opening the M5 hole.
-*/
-var CONTENT_TYPE_BY_EXT = {
-	...COVER_IMAGE_CONTENT_TYPES,
-	".pdf": "application/pdf"
-};
-function contentTypeFor(storagePath) {
-	const dot = storagePath.lastIndexOf(".");
-	return CONTENT_TYPE_BY_EXT[dot === -1 ? "" : storagePath.slice(dot).toLowerCase()] ?? "application/octet-stream";
-}
-var GET = async ({ params, locals }) => {
-	const storagePath = params.path;
-	if (!storagePath) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing path");
-	const match = classifyAssetPath(storagePath);
-	if (!match) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
-	let canonicalPath = storagePath;
-	switch (match.class.visibility) {
-		case "public": break;
-		case "org": {
-			if (!locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
-			const orgId = match.scopeId;
-			if (!orgId) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
-			await requireCanViewOrg(locals, orgId);
-			break;
-		}
-		case "project": {
-			if (!locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
-			const guid = match.scopeId;
-			const guidParsed = GuidSchema.safeParse(guid);
-			if (!guidParsed.success) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
-			const record = await getDefinitionMeta().get(locals.ctx, guidParsed.data);
-			if (!record) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
-			await requireCanViewProject(locals, record.projectId);
-			canonicalPath = definitionPaths.image(guidParsed.data);
-			break;
-		}
-	}
-	const bytes = await getStorageProvider().get(canonicalPath);
-	if (!bytes) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
-	const cacheControl = match.class.visibility === "public" ? "public, max-age=3600" : "private, max-age=3600";
-	return new Response(Buffer.from(bytes), { headers: {
-		"Content-Type": contentTypeFor(canonicalPath),
-		"Cache-Control": cacheControl
-	} });
-};
-
-export { GET };
-//# sourceMappingURL=_server.ts.js-BrKhVv_O.js.map

package/build/server/chunks/entries/endpoints/api/files/_...path_/_server.ts.js-BrKhVv_O.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts.js-BrKhVv_O.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/files/_...path_/_server.ts.js"],"sourcesContent":["import { r as classifyAssetPath, s as GuidSchema, u as COVER_IMAGE_CONTENT_TYPES } from \"../../../../../chunks/src.js\";\nimport { I as definitionPaths, s as getDefinitionMeta, y as getStorageProvider } from \"../../../../../chunks/providers.server.js\";\nimport { h as requireCanViewProject, m as requireCanViewOrg } from \"../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\n//#region src/routes/api/files/[...path]/+server.ts\n/**\n* Authenticated/­public blob proxy. The set of servable paths is the closed\n* asset-class registry (`classifyAssetPath` / `ASSET_CLASSES` in\n* `@selvajs/platform`). Each class declares a visibility; this route maps that\n* visibility to an authorization check:\n*\n*   - `public`  (org branding — logo/favicon): served to anyone, incl.\n*     logged-out visitors, with no auth. Cacheable. The bytes are always a\n*     rasterized WebP, so there is no XSS surface to gate.\n*   - `org`     (org-private blobs, e.g. pricing sheets under\n*     `orgs/{id}/private/*`): `requireCanViewOrg(orgId)`.\n*   - `project` (definition covers): `requireCanViewProject(projectId)` — the\n*     M5 hardening, unchanged.\n*\n* Anything that classifies to no asset class 404s. New blob types are opt-in:\n* add a registry entry with the right visibility — never a generic\n* \"is the extension allowed\" fallthrough. Authorization lives here (the route),\n* not in the storage layer, per `IStorageProvider`'s contract.\n*\n* Why a single proxy for all three: with the registry, the route is no longer a\n* pile of per-shape branches — it classifies once and dispatches on visibility,\n* so the cover-only contract that this route used to pin now generalizes\n* without re-opening the M5 hole.\n*/\nvar CONTENT_TYPE_BY_EXT = {\n\t...COVER_IMAGE_CONTENT_TYPES,\n\t\".pdf\": \"application/pdf\"\n};\nfunction contentTypeFor(storagePath) {\n\tconst dot = storagePath.lastIndexOf(\".\");\n\treturn CONTENT_TYPE_BY_EXT[dot === -1 ? \"\" : storagePath.slice(dot).toLowerCase()] ?? \"application/octet-stream\";\n}\nvar GET = async ({ params, locals }) => {\n\tconst storagePath = params.path;\n\tif (!storagePath) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing path\");\n\tconst match = classifyAssetPath(storagePath);\n\tif (!match) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n\tlet canonicalPath = storagePath;\n\tswitch (match.class.visibility) {\n\t\tcase \"public\": break;\n\t\tcase \"org\": {\n\t\t\tif (!locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n\t\t\tconst orgId = match.scopeId;\n\t\t\tif (!orgId) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n\t\t\tawait requireCanViewOrg(locals, orgId);\n\t\t\tbreak;\n\t\t}\n\t\tcase \"project\": {\n\t\t\tif (!locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n\t\t\tconst guid = match.scopeId;\n\t\t\tconst guidParsed = GuidSchema.safeParse(guid);\n\t\t\tif (!guidParsed.success) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n\t\t\tconst record = await getDefinitionMeta().get(locals.ctx, guidParsed.data);\n\t\t\tif (!record) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n\t\t\tawait requireCanViewProject(locals, record.projectId);\n\t\t\tcanonicalPath = definitionPaths.image(guidParsed.data);\n\t\t\tbreak;\n\t\t}\n\t}\n\tconst bytes = await getStorageProvider().get(canonicalPath);\n\tif (!bytes) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n\tconst cacheControl = match.class.visibility === \"public\" ? \"public, max-age=3600\" : \"private, max-age=3600\";\n\treturn new Response(Buffer.from(bytes), { headers: {\n\t\t\"Content-Type\": contentTypeFor(canonicalPath),\n\t\t\"Cache-Control\": cacheControl\n\t} });\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,mBAAmB,GAAG;AAC1B,CAAC,GAAG,yBAAyB;AAC7B,CAAC,MAAM,EAAE;AACT,CAAC;AACD,SAAS,cAAc,CAAC,WAAW,EAAE;AACrC,CAAC,MAAM,GAAG,GAAG,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC;AACzC,CAAC,OAAO,mBAAmB,CAAC,GAAG,KAAK,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B;AACjH;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AACxC,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI;AAChC,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,cAAc,CAAC;AAChF,CAAC,MAAM,KAAK,GAAG,iBAAiB,CAAC,WAAW,CAAC;AAC7C,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACpE,CAAC,IAAI,aAAa,GAAG,WAAW;AAChC,CAAC,QAAQ,KAAK,CAAC,KAAK,CAAC,UAAU;AAC/B,EAAE,KAAK,QAAQ,EAAE;AACjB,EAAE,KAAK,KAAK,EAAE;AACd,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC5E,GAAG,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO;AAC9B,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACtE,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC;AACzC,GAAG;AACH,EAAE;AACF,EAAE,KAAK,SAAS,EAAE;AAClB,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC5E,GAAG,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO;AAC7B,GAAG,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;AAChD,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACnF,GAAG,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AAC5E,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACvE,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC;AACxD,GAAG,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;AACzD,GAAG;AACH,EAAE;AACF;AACA,CAAC,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC;AAC5D,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACpE,CAAC,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,KAAK,QAAQ,GAAG,sBAAsB,GAAG,uBAAuB;AAC5G,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE;AACpD,EAAE,cAAc,EAAE,cAAc,CAAC,aAAa,CAAC;AAC/C,EAAE,eAAe,EAAE;AACnB,EAAE,EAAE,CAAC;AACL;;;;"}

package/build/server/chunks/entries/endpoints/api/health/_server.ts.js-BjA-4_eK.js

@@ -1,57 +0,0 @@
-import { g as getBootHealth, i as isDegraded } from '../../../../chunks/bootHealth.server.js-BABWq2tR.js';
-import { json } from '@sveltejs/kit';
-import { randomUUID } from 'crypto';
-import { createRequire } from 'module';
-import '../../../../chunks/providers.server.js-BxdMEy_h.js';
-import '../../../../chunks/shared-server.js-HBAhbQ8m.js';
-import '../../../../chunks/src.js-C5mUn1eC.js';
-import 'zod';
-import '../../../../chunks/limits.js-DyiDwmjP.js';
-import '../../../../chunks/chunk-D2GEMGK5.js-keSflEOG.js';
-import '../../../../chunks/schema.js-BhmknPcU.js';
-import 'node:crypto';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-
-//#region src/routes/api/health/+server.ts
-var INSTANCE_ID = randomUUID();
-var RUNTIME_VERSION = (() => {
-	try {
-		return createRequire(import.meta.url)("@selvajs/selva/package.json").version;
-	} catch {
-		return null;
-	}
-})();
-/**
-* Health check endpoint for load balancers and orchestration systems.
-* Used by Docker healthchecks, Kubernetes liveness probes, and monitoring tools.
-*
-* The `instanceId` field is a per-boot fingerprint — clients polling after a
-* restart confirm the *new* process is responding (not the old one about to be
-* killed) by watching for the value to change.
-*
-* Returns 503 with `status: "degraded"` when boot-time integrity checks
-* failed (e.g. compute server apiKeys can't be decrypted under the current
-* `SELVA_AT_REST_KEY`). The body lists which servers and why, so an operator
-* curling the endpoint can diagnose without server-log access. The app
-* still serves requests in this state (per-row tolerance) — the 503 is
-* specifically a signal for load balancers / monitoring.
-*/
-var GET = async () => {
-	const boot = await getBootHealth();
-	const degraded = isDegraded(boot);
-	const body = {
-		status: degraded ? "degraded" : "ok",
-		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-		instanceId: INSTANCE_ID,
-		version: RUNTIME_VERSION,
-		boot
-	};
-	return json(body, { status: degraded ? 503 : 200 });
-};
-
-export { GET };
-//# sourceMappingURL=_server.ts.js-BjA-4_eK.js.map

package/build/server/chunks/entries/endpoints/api/health/_server.ts.js-BjA-4_eK.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts.js-BjA-4_eK.js","sources":["../../../../../../../.svelte-kit/output/server/entries/endpoints/api/health/_server.ts.js"],"sourcesContent":["import { n as isDegraded, t as getBootHealth } from \"../../../../chunks/bootHealth.server.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"crypto\";\nimport { createRequire } from \"module\";\n//#region src/routes/api/health/+server.ts\nvar INSTANCE_ID = randomUUID();\nvar RUNTIME_VERSION = (() => {\n\ttry {\n\t\treturn createRequire(import.meta.url)(\"@selvajs/selva/package.json\").version;\n\t} catch {\n\t\treturn null;\n\t}\n})();\n/**\n* Health check endpoint for load balancers and orchestration systems.\n* Used by Docker healthchecks, Kubernetes liveness probes, and monitoring tools.\n*\n* The `instanceId` field is a per-boot fingerprint — clients polling after a\n* restart confirm the *new* process is responding (not the old one about to be\n* killed) by watching for the value to change.\n*\n* Returns 503 with `status: \"degraded\"` when boot-time integrity checks\n* failed (e.g. compute server apiKeys can't be decrypted under the current\n* `SELVA_AT_REST_KEY`). The body lists which servers and why, so an operator\n* curling the endpoint can diagnose without server-log access. The app\n* still serves requests in this state (per-row tolerance) — the 503 is\n* specifically a signal for load balancers / monitoring.\n*/\nvar GET = async () => {\n\tconst boot = await getBootHealth();\n\tconst degraded = isDegraded(boot);\n\tconst body = {\n\t\tstatus: degraded ? \"degraded\" : \"ok\",\n\t\ttimestamp: (/* @__PURE__ */ new Date()).toISOString(),\n\t\tinstanceId: INSTANCE_ID,\n\t\tversion: RUNTIME_VERSION,\n\t\tboot\n\t};\n\treturn json(body, { status: degraded ? 503 : 200 });\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAIA;AACA,IAAI,WAAW,GAAG,UAAU,EAAE;AAC9B,IAAI,eAAe,GAAG,CAAC,MAAM;AAC7B,CAAC,IAAI;AACL,EAAE,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,6BAA6B,CAAC,CAAC,OAAO;AAC9E,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,IAAI;AACb,CAAC;AACD,CAAC,GAAG;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,YAAY;AACtB,CAAC,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE;AACnC,CAAC,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC;AAClC,CAAC,MAAM,IAAI,GAAG;AACd,EAAE,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,IAAI;AACtC,EAAE,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACvD,EAAE,UAAU,EAAE,WAAW;AACzB,EAAE,OAAO,EAAE,eAAe;AAC1B,EAAE;AACF,EAAE;AACF,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC;AACpD;;;;"}

package/build/server/chunks/entries/endpoints/api/invites/_id_/_server.ts.js-IAJTgcms.js

@@ -1,49 +0,0 @@
-import { t as getInviteStore } from '../../../../../chunks/providers.server.js-BxdMEy_h.js';
-import { j as requireManageOrgMembers } from '../../../../../chunks/access.server.js-kAeKdbqB.js';
-import { a as apiError, A as ApiErrorCode, h as handleApiError } from '../../../../../chunks/api-errors.js-B12FixUz.js';
-import '../../../../../chunks/shared-server.js-HBAhbQ8m.js';
-import '../../../../../chunks/src.js-C5mUn1eC.js';
-import 'zod';
-import '../../../../../chunks/limits.js-DyiDwmjP.js';
-import '../../../../../chunks/chunk-D2GEMGK5.js-keSflEOG.js';
-import '../../../../../chunks/schema.js-BhmknPcU.js';
-import 'node:crypto';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import '@sveltejs/kit';
-import '../../../../../chunks/utils2.js-DYtXuVSb.js';
-
-//#region src/routes/api/invites/[id]/+server.ts
-var DELETE = async ({ params, locals }) => {
-	requireManageOrgMembers(locals);
-	const ctx = locals.ctx;
-	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
-	const id = params.id;
-	try {
-		const store = getInviteStore();
-		let cursor;
-		let found = false;
-		do {
-			const page = await store.listByOrg(ctx, ctx.actingOrgId, {
-				limit: 200,
-				cursor
-			});
-			if (page.items.some((i) => i.id === id)) {
-				found = true;
-				break;
-			}
-			cursor = page.nextCursor ?? void 0;
-		} while (cursor);
-		if (!found) apiError(404, ApiErrorCode.NOT_FOUND, "Invite not found");
-		await store.revoke(ctx, id);
-		return new Response(null, { status: 204 });
-	} catch (err) {
-		handleApiError(err, "Failed to revoke invite");
-	}
-};
-
-export { DELETE };
-//# sourceMappingURL=_server.ts.js-IAJTgcms.js.map

package/build/server/chunks/entries/endpoints/api/invites/_id_/_server.ts.js-IAJTgcms.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts.js-IAJTgcms.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/invites/_id_/_server.ts.js"],"sourcesContent":["import { d as getInviteStore } from \"../../../../../chunks/providers.server.js\";\nimport { x as requireManageOrgMembers } from \"../../../../../chunks/access.server.js\";\nimport { n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\n//#region src/routes/api/invites/[id]/+server.ts\nvar DELETE = async ({ params, locals }) => {\n\trequireManageOrgMembers(locals);\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tconst id = params.id;\n\ttry {\n\t\tconst store = getInviteStore();\n\t\tlet cursor;\n\t\tlet found = false;\n\t\tdo {\n\t\t\tconst page = await store.listByOrg(ctx, ctx.actingOrgId, {\n\t\t\t\tlimit: 200,\n\t\t\t\tcursor\n\t\t\t});\n\t\t\tif (page.items.some((i) => i.id === id)) {\n\t\t\t\tfound = true;\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tcursor = page.nextCursor ?? void 0;\n\t\t} while (cursor);\n\t\tif (!found) apiError(404, ApiErrorCode.NOT_FOUND, \"Invite not found\");\n\t\tawait store.revoke(ctx, id);\n\t\treturn new Response(null, { status: 204 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to revoke invite\");\n\t}\n};\n//#endregion\nexport { DELETE };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAGA;AACG,IAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE;AACrB,CAAC,IAAI;AACL,EAAE,MAAM,KAAK,GAAG,cAAc,EAAE;AAChC,EAAE,IAAI,MAAM;AACZ,EAAE,IAAI,KAAK,GAAG,KAAK;AACnB,EAAE,GAAG;AACL,GAAG,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE;AAC5D,IAAI,KAAK,EAAE,GAAG;AACd,IAAI;AACJ,IAAI,CAAC;AACL,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;AAC5C,IAAI,KAAK,GAAG,IAAI;AAChB,IAAI;AACJ,GAAG;AACH,GAAG,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC;AACrC,EAAE,CAAC,QAAQ,MAAM;AACjB,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,kBAAkB,CAAC;AACvE,EAAE,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AAC7B,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAChD,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/invites/_server.ts.js-D9vJzqEH.js

@@ -1,78 +0,0 @@
-import { M as MEMBER_ASSIGNABLE_PERMISSIONS, D as DEFAULT_ORG_PERMISSIONS, k as OrgRoleSchema, P as PlatformPermissionSchema, b as OrgPermissionSchema } from '../../../../chunks/src.js-C5mUn1eC.js';
-import { t as getInviteStore } from '../../../../chunks/providers.server.js-BxdMEy_h.js';
-import { j as requireManageOrgMembers } from '../../../../chunks/access.server.js-kAeKdbqB.js';
-import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from '../../../../chunks/api-errors.js-B12FixUz.js';
-import { s as splitFlatPermissions } from '../../../../chunks/permissions-compat.server.js-Ba1Un-4O.js';
-import { m as mintRawToken, h as hashToken } from '../../../../chunks/token2.server.js-DXjudKNU.js';
-import { json } from '@sveltejs/kit';
-import { z } from 'zod';
-import { randomUUID } from 'node:crypto';
-import '../../../../chunks/shared-server.js-HBAhbQ8m.js';
-import '../../../../chunks/limits.js-DyiDwmjP.js';
-import '../../../../chunks/chunk-D2GEMGK5.js-keSflEOG.js';
-import '../../../../chunks/schema.js-BhmknPcU.js';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import '../../../../chunks/utils2.js-DYtXuVSb.js';
-import '../../../../chunks/token-codec.js-CxK2DiO-.js';
-
-//#region src/routes/api/invites/+server.ts
-var FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);
-var CreateBody = z.object({
-	email: z.string().email("Valid email is required").transform((s) => s.toLowerCase().trim()),
-	orgRole: OrgRoleSchema.default("member"),
-	permissions: z.array(FlatPermissionSchema).default([])
-});
-var INVITE_TTL_MS = 6048e5;
-var GET = async ({ locals }) => {
-	requireManageOrgMembers(locals);
-	const ctx = locals.ctx;
-	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
-	try {
-		const invites = (await getInviteStore().listByOrg(ctx, ctx.actingOrgId, { limit: 200 })).items.map(({ tokenHash: _omit, ...rest }) => rest);
-		return json({ invites });
-	} catch (err) {
-		handleApiError(err, "Failed to list invites");
-	}
-};
-var POST = async ({ request, locals, url }) => {
-	requireManageOrgMembers(locals);
-	const ctx = locals.ctx;
-	const user = locals.user;
-	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
-	const body = await request.json().catch(() => null);
-	const parsed = CreateBody.safeParse(body);
-	if (!parsed.success) throwZodError(parsed.error);
-	try {
-		const { org: submittedOrgPerms } = splitFlatPermissions(parsed.data.permissions);
-		const orgPermissions = parsed.data.orgRole === "member" ? submittedOrgPerms.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[parsed.data.orgRole]];
-		const rawToken = mintRawToken();
-		const now = /* @__PURE__ */ new Date();
-		const invite = {
-			id: randomUUID(),
-			tokenHash: hashToken(rawToken),
-			email: parsed.data.email,
-			orgId: ctx.actingOrgId,
-			orgRole: parsed.data.orgRole,
-			orgPermissions,
-			invitedBy: user.id,
-			createdAt: now.toISOString(),
-			expiresAt: new Date(now.getTime() + INVITE_TTL_MS).toISOString()
-		};
-		await getInviteStore().create(ctx, invite);
-		const acceptUrl = `${url.origin}/accept-invite?token=${rawToken}`;
-		const { tokenHash: _omit, ...inviteForClient } = invite;
-		return json({
-			invite: inviteForClient,
-			acceptUrl
-		}, { status: 201 });
-	} catch (err) {
-		handleApiError(err, "Failed to create invite");
-	}
-};
-
-export { GET, POST };
-//# sourceMappingURL=_server.ts.js-D9vJzqEH.js.map

package/build/server/chunks/entries/endpoints/api/invites/_server.ts.js-D9vJzqEH.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts.js-D9vJzqEH.js","sources":["../../../../../../../.svelte-kit/output/server/entries/endpoints/api/invites/_server.ts.js"],"sourcesContent":["import { E as PlatformPermissionSchema, S as OrgRoleSchema, _ as DEFAULT_ORG_PERMISSIONS, v as MEMBER_ASSIGNABLE_PERMISSIONS, x as OrgPermissionSchema } from \"../../../../chunks/src.js\";\nimport { d as getInviteStore } from \"../../../../chunks/providers.server.js\";\nimport { x as requireManageOrgMembers } from \"../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../chunks/api-errors.js\";\nimport { n as splitFlatPermissions } from \"../../../../chunks/permissions-compat.server.js\";\nimport { n as mintRawToken, t as hashToken } from \"../../../../chunks/token2.server.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/api/invites/+server.ts\nvar FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);\nvar CreateBody = z.object({\n\temail: z.string().email(\"Valid email is required\").transform((s) => s.toLowerCase().trim()),\n\torgRole: OrgRoleSchema.default(\"member\"),\n\tpermissions: z.array(FlatPermissionSchema).default([])\n});\nvar INVITE_TTL_MS = 6048e5;\nvar GET = async ({ locals }) => {\n\trequireManageOrgMembers(locals);\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\ttry {\n\t\tconst invites = (await getInviteStore().listByOrg(ctx, ctx.actingOrgId, { limit: 200 })).items.map(({ tokenHash: _omit, ...rest }) => rest);\n\t\treturn json({ invites });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to list invites\");\n\t}\n};\nvar POST = async ({ request, locals, url }) => {\n\trequireManageOrgMembers(locals);\n\tconst ctx = locals.ctx;\n\tconst user = locals.user;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tconst body = await request.json().catch(() => null);\n\tconst parsed = CreateBody.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\ttry {\n\t\tconst { org: submittedOrgPerms } = splitFlatPermissions(parsed.data.permissions);\n\t\tconst orgPermissions = parsed.data.orgRole === \"member\" ? submittedOrgPerms.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[parsed.data.orgRole]];\n\t\tconst rawToken = mintRawToken();\n\t\tconst now = /* @__PURE__ */ new Date();\n\t\tconst invite = {\n\t\t\tid: randomUUID(),\n\t\t\ttokenHash: hashToken(rawToken),\n\t\t\temail: parsed.data.email,\n\t\t\torgId: ctx.actingOrgId,\n\t\t\torgRole: parsed.data.orgRole,\n\t\t\torgPermissions,\n\t\t\tinvitedBy: user.id,\n\t\t\tcreatedAt: now.toISOString(),\n\t\t\texpiresAt: new Date(now.getTime() + INVITE_TTL_MS).toISOString()\n\t\t};\n\t\tawait getInviteStore().create(ctx, invite);\n\t\tconst acceptUrl = `${url.origin}/accept-invite?token=${rawToken}`;\n\t\tconst { tokenHash: _omit, ...inviteForClient } = invite;\n\t\treturn json({\n\t\t\tinvite: inviteForClient,\n\t\t\tacceptUrl\n\t\t}, { status: 201 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to create invite\");\n\t}\n};\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AASA;AACA,IAAI,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;AACnF,IAAI,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;AAC1B,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AAC5F,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;AACzC,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE;AACtD,CAAC,CAAC;AACF,IAAI,aAAa,GAAG,MAAM;AACvB,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAChC,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,IAAI;AACL,EAAE,MAAM,OAAO,GAAG,CAAC,MAAM,cAAc,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC;AAC7I,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;AAC1B,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAC/C,CAAC;AACD;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AAC/C,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AACzB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1C,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,IAAI;AACL,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;AAClF,EAAE,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC1L,EAAE,MAAM,QAAQ,GAAG,YAAY,EAAE;AACjC,EAAE,MAAM,GAAG,mBAAmB,IAAI,IAAI,EAAE;AACxC,EAAE,MAAM,MAAM,GAAG;AACjB,GAAG,EAAE,EAAE,UAAU,EAAE;AACnB,GAAG,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC;AACjC,GAAG,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;AAC3B,GAAG,KAAK,EAAE,GAAG,CAAC,WAAW;AACzB,GAAG,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;AAC/B,GAAG,cAAc;AACjB,GAAG,SAAS,EAAE,IAAI,CAAC,EAAE;AACrB,GAAG,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;AAC/B,GAAG,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,WAAW;AACjE,GAAG;AACH,EAAE,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC;AAC5C,EAAE,MAAM,SAAS,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;AACnE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,eAAe,EAAE,GAAG,MAAM;AACzD,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,MAAM,EAAE,eAAe;AAC1B,GAAG;AACH,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAChD,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/me/starred/_guid_/_server.ts.js-Bu3V2phC.js

@@ -1,45 +0,0 @@
-import { u as getUserProfileStore } from '../../../../../../chunks/providers.server.js-BxdMEy_h.js';
-import { a as apiError, h as handleApiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-B12FixUz.js';
-import { json } from '@sveltejs/kit';
-import '../../../../../../chunks/shared-server.js-HBAhbQ8m.js';
-import '../../../../../../chunks/src.js-C5mUn1eC.js';
-import 'zod';
-import '../../../../../../chunks/limits.js-DyiDwmjP.js';
-import '../../../../../../chunks/chunk-D2GEMGK5.js-keSflEOG.js';
-import '../../../../../../chunks/schema.js-BhmknPcU.js';
-import 'node:crypto';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import '../../../../../../chunks/utils2.js-DYtXuVSb.js';
-
-//#region src/routes/api/me/starred/[guid]/+server.ts
-/** Star a definition for the current user. No-op if already starred. */
-var POST = async ({ params, locals }) => {
-	if (!locals.user || !locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
-	const guid = params.guid;
-	if (!guid) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing definition guid");
-	try {
-		await getUserProfileStore().starDefinition(locals.ctx, locals.user.id, guid);
-		return json({ starred: true });
-	} catch (err) {
-		handleApiError(err, "Failed to star definition");
-	}
-};
-/** Unstar a definition for the current user. No-op if not starred. */
-var DELETE = async ({ params, locals }) => {
-	if (!locals.user || !locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
-	const guid = params.guid;
-	if (!guid) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing definition guid");
-	try {
-		await getUserProfileStore().unstarDefinition(locals.ctx, locals.user.id, guid);
-		return json({ starred: false });
-	} catch (err) {
-		handleApiError(err, "Failed to unstar definition");
-	}
-};
-
-export { DELETE, POST };
-//# sourceMappingURL=_server.ts.js-Bu3V2phC.js.map

package/build/server/chunks/entries/endpoints/api/me/starred/_guid_/_server.ts.js-Bu3V2phC.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts.js-Bu3V2phC.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/me/starred/_guid_/_server.ts.js"],"sourcesContent":["import { x as getUserProfileStore } from \"../../../../../../chunks/providers.server.js\";\nimport { n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/me/starred/[guid]/+server.ts\n/** Star a definition for the current user. No-op if already starred. */\nvar POST = async ({ params, locals }) => {\n\tif (!locals.user || !locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n\tconst guid = params.guid;\n\tif (!guid) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing definition guid\");\n\ttry {\n\t\tawait getUserProfileStore().starDefinition(locals.ctx, locals.user.id, guid);\n\t\treturn json({ starred: true });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to star definition\");\n\t}\n};\n/** Unstar a definition for the current user. No-op if not starred. */\nvar DELETE = async ({ params, locals }) => {\n\tif (!locals.user || !locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n\tconst guid = params.guid;\n\tif (!guid) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing definition guid\");\n\ttry {\n\t\tawait getUserProfileStore().unstarDefinition(locals.ctx, locals.user.id, guid);\n\t\treturn json({ starred: false });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to unstar definition\");\n\t}\n};\n//#endregion\nexport { DELETE, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAGA;AACA;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AACzC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC1F,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AACzB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACpF,CAAC,IAAI;AACL,EAAE,MAAM,mBAAmB,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;AAC9E,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAChC,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,2BAA2B,CAAC;AAClD,CAAC;AACD;AACA;AACG,IAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC1F,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AACzB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACpF,CAAC,IAAI;AACL,EAAE,MAAM,mBAAmB,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;AAChF,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACjC,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACpD,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/org/compute/_server.ts.js-DCGrR-B8.js

@@ -1,110 +0,0 @@
-import '../../../../../chunks/src.js-C5mUn1eC.js';
-import { n as getComputeServerConfigStore, y as isOrgServer, m as isPlatformServer, k as flag } from '../../../../../chunks/providers.server.js-BxdMEy_h.js';
-import { s as serversVisibleTo } from '../../../../../chunks/utils2.js-DYtXuVSb.js';
-import { s as requireManageOrgCompute } from '../../../../../chunks/access.server.js-kAeKdbqB.js';
-import { a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-B12FixUz.js';
-import { e as evictChangedServers } from '../../../../../chunks/evictChangedServers.js-Qf9sVmjQ.js';
-import { json } from '@sveltejs/kit';
-import 'zod';
-import '../../../../../chunks/shared-server.js-HBAhbQ8m.js';
-import '../../../../../chunks/limits.js-DyiDwmjP.js';
-import '../../../../../chunks/chunk-D2GEMGK5.js-keSflEOG.js';
-import '../../../../../chunks/schema.js-BhmknPcU.js';
-import 'node:crypto';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import '../../../../../chunks/engine.server.js-DyK9ctVJ.js';
-import '../../../../../chunks/chunk-JQEJSXFS.js-C21wuD8S.js';
-import '../../../../../chunks/computeLimits.js-7nYRsc2w.js';
-import 'node:dns/promises';
-import 'node:net';
-import 'zlib';
-import 'util';
-
-//#region src/routes/api/org/compute/+server.ts
-function requireFlag() {
-	if (!flag("ALLOW_ORG_COMPUTE_OVERRIDE")) apiError(403, ApiErrorCode.FORBIDDEN, "Per-org compute override is disabled on this instance (ALLOW_ORG_COMPUTE_OVERRIDE).");
-}
-var GET = async ({ locals }) => {
-	requireFlag();
-	requireManageOrgCompute(locals);
-	const ctx = locals.ctx;
-	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
-	const config = await getComputeServerConfigStore().getConfig(ctx);
-	const orgId = ctx.actingOrgId;
-	const owned = config.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => {
-		const { apiKey: _apiKey, hasApiKey, ...rest } = s;
-		return {
-			...rest,
-			hasApiKey: !!hasApiKey
-		};
-	});
-	const catalog = serversVisibleTo(config, orgId).map((s) => ({
-		id: s.id,
-		label: s.label,
-		serverUrl: s.serverUrl,
-		scope: s.scope,
-		source: isPlatformServer(s) ? "platform" : "org",
-		timeoutMs: s.timeoutMs,
-		retryCount: s.retryCount
-	}));
-	return json({
-		servers: owned,
-		defaultServerId: config.orgDefaults?.[orgId] ?? null,
-		globalDefaultServerId: config.defaultServerId ?? null,
-		catalog
-	});
-};
-var PUT = async ({ request, locals }) => {
-	requireFlag();
-	requireManageOrgCompute(locals);
-	const ctx = locals.ctx;
-	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
-	const orgId = ctx.actingOrgId;
-	const body = await request.json().catch(() => null);
-	if (!body || typeof body !== "object") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid request body");
-	const incoming = body;
-	if (!Array.isArray(incoming.servers)) apiError(400, ApiErrorCode.VALIDATION_FAILED, "servers must be an array");
-	for (const s of incoming.servers) {
-		if (!s.id || typeof s.id !== "string") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Each server needs an id");
-		if (!s.label || typeof s.label !== "string") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Each server needs a label");
-		if (!s.serverUrl || typeof s.serverUrl !== "string") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Each server needs a serverUrl");
-		try {
-			new URL(s.serverUrl);
-		} catch {
-			apiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid serverUrl: ${s.serverUrl}`);
-		}
-		if (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== "string") apiError(400, ApiErrorCode.VALIDATION_FAILED, "apiKey must be a string, null, or omitted");
-	}
-	const provider = getComputeServerConfigStore();
-	const existing = await provider.getConfig(ctx, { includeApiKeys: true });
-	const storedKeyById = new Map(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => [s.id, s.apiKey]));
-	const next = incoming.servers.map((s) => ({
-		id: s.id,
-		scope: "org",
-		ownerOrgId: orgId,
-		label: s.label,
-		serverUrl: s.serverUrl,
-		timeoutMs: s.timeoutMs,
-		retryCount: s.retryCount,
-		apiKey: s.apiKey === null ? void 0 : s.apiKey ? s.apiKey : storedKeyById.get(s.id)
-	}));
-	if (typeof incoming.defaultServerId === "string") {
-		const projected = {
-			servers: [...existing.servers.filter((s) => !(isOrgServer(s) && s.ownerOrgId === orgId)), ...next],
-			defaultServerId: existing.defaultServerId,
-			orgDefaults: existing.orgDefaults
-		};
-		if (!new Set(serversVisibleTo(projected, orgId).map((s) => s.id)).has(incoming.defaultServerId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, "defaultServerId must reference a server visible to this organization");
-	}
-	await provider.saveOrgServers(ctx, orgId, next, incoming.defaultServerId);
-	const prevOrgServers = existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId);
-	evictChangedServers(prevOrgServers, next);
-	return new Response(null, { status: 204 });
-};
-
-export { GET, PUT };
-//# sourceMappingURL=_server.ts.js-DCGrR-B8.js.map

package/build/server/chunks/entries/endpoints/api/org/compute/_server.ts.js-DCGrR-B8.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts.js-DCGrR-B8.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/org/compute/_server.ts.js"],"sourcesContent":["import \"../../../../../chunks/src.js\";\nimport { F as isPlatformServer, P as isOrgServer, a as getComputeServerConfigStore, t as flag } from \"../../../../../chunks/providers.server.js\";\nimport { a as serversVisibleTo } from \"../../../../../chunks/utils2.js\";\nimport { b as requireManageOrgCompute } from \"../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { t as evictChangedServers } from \"../../../../../chunks/evictChangedServers.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/org/compute/+server.ts\nfunction requireFlag() {\n\tif (!flag(\"ALLOW_ORG_COMPUTE_OVERRIDE\")) apiError(403, ApiErrorCode.FORBIDDEN, \"Per-org compute override is disabled on this instance (ALLOW_ORG_COMPUTE_OVERRIDE).\");\n}\nvar GET = async ({ locals }) => {\n\trequireFlag();\n\trequireManageOrgCompute(locals);\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tconst config = await getComputeServerConfigStore().getConfig(ctx);\n\tconst orgId = ctx.actingOrgId;\n\tconst owned = config.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => {\n\t\tconst { apiKey: _apiKey, hasApiKey, ...rest } = s;\n\t\treturn {\n\t\t\t...rest,\n\t\t\thasApiKey: !!hasApiKey\n\t\t};\n\t});\n\tconst catalog = serversVisibleTo(config, orgId).map((s) => ({\n\t\tid: s.id,\n\t\tlabel: s.label,\n\t\tserverUrl: s.serverUrl,\n\t\tscope: s.scope,\n\t\tsource: isPlatformServer(s) ? \"platform\" : \"org\",\n\t\ttimeoutMs: s.timeoutMs,\n\t\tretryCount: s.retryCount\n\t}));\n\treturn json({\n\t\tservers: owned,\n\t\tdefaultServerId: config.orgDefaults?.[orgId] ?? null,\n\t\tglobalDefaultServerId: config.defaultServerId ?? null,\n\t\tcatalog\n\t});\n};\nvar PUT = async ({ request, locals }) => {\n\trequireFlag();\n\trequireManageOrgCompute(locals);\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tconst orgId = ctx.actingOrgId;\n\tconst body = await request.json().catch(() => null);\n\tif (!body || typeof body !== \"object\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid request body\");\n\tconst incoming = body;\n\tif (!Array.isArray(incoming.servers)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"servers must be an array\");\n\tfor (const s of incoming.servers) {\n\t\tif (!s.id || typeof s.id !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs an id\");\n\t\tif (!s.label || typeof s.label !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs a label\");\n\t\tif (!s.serverUrl || typeof s.serverUrl !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs a serverUrl\");\n\t\ttry {\n\t\t\tnew URL(s.serverUrl);\n\t\t} catch {\n\t\t\tapiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid serverUrl: ${s.serverUrl}`);\n\t\t}\n\t\tif (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== \"string\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"apiKey must be a string, null, or omitted\");\n\t}\n\tconst provider = getComputeServerConfigStore();\n\tconst existing = await provider.getConfig(ctx, { includeApiKeys: true });\n\tconst storedKeyById = new Map(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => [s.id, s.apiKey]));\n\tconst next = incoming.servers.map((s) => ({\n\t\tid: s.id,\n\t\tscope: \"org\",\n\t\townerOrgId: orgId,\n\t\tlabel: s.label,\n\t\tserverUrl: s.serverUrl,\n\t\ttimeoutMs: s.timeoutMs,\n\t\tretryCount: s.retryCount,\n\t\tapiKey: s.apiKey === null ? void 0 : s.apiKey ? s.apiKey : storedKeyById.get(s.id)\n\t}));\n\tif (typeof incoming.defaultServerId === \"string\") {\n\t\tconst projected = {\n\t\t\tservers: [...existing.servers.filter((s) => !(isOrgServer(s) && s.ownerOrgId === orgId)), ...next],\n\t\t\tdefaultServerId: existing.defaultServerId,\n\t\t\torgDefaults: existing.orgDefaults\n\t\t};\n\t\tif (!new Set(serversVisibleTo(projected, orgId).map((s) => s.id)).has(incoming.defaultServerId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"defaultServerId must reference a server visible to this organization\");\n\t}\n\tawait provider.saveOrgServers(ctx, orgId, next, incoming.defaultServerId);\n\tconst prevOrgServers = existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId);\n\tevictChangedServers(prevOrgServers, next);\n\treturn new Response(null, { status: 204 });\n};\n//#endregion\nexport { GET, PUT };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAOA;AACA,SAAS,WAAW,GAAG;AACvB,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,qFAAqF,CAAC;AACtK;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAChC,CAAC,WAAW,EAAE;AACd,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC;AAClE,CAAC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC9B,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK;AACjG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC;AACnD,EAAE,OAAO;AACT,GAAG,GAAG,IAAI;AACV,GAAG,SAAS,EAAE,CAAC,CAAC;AAChB,GAAG;AACH,CAAC,CAAC,CAAC;AACH,CAAC,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC7D,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;AACV,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,KAAK;AAClD,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,UAAU,EAAE,CAAC,CAAC;AAChB,EAAE,CAAC,CAAC;AACJ,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,OAAO,EAAE,KAAK;AAChB,EAAE,eAAe,EAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,IAAI,IAAI;AACtD,EAAE,qBAAqB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;AACvD,EAAE;AACF,EAAE,CAAC;AACH;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACzC,CAAC,WAAW,EAAE;AACd,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC9B,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AAC7G,CAAC,MAAM,QAAQ,GAAG,IAAI;AACtB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;AAChH,CAAC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE;AACnC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACjH,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;AACzH,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,+BAA+B,CAAC;AACrI,EAAE,IAAI;AACN,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACvB,EAAE,CAAC,CAAC,MAAM;AACV,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACrF,EAAE;AACF,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2CAA2C,CAAC;AAC1K,CAAC;AACD,CAAC,MAAM,QAAQ,GAAG,2BAA2B,EAAE;AAC/C,CAAC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;AACzE,CAAC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACrI,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC3C,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;AACV,EAAE,KAAK,EAAE,KAAK;AACd,EAAE,UAAU,EAAE,KAAK;AACnB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;AAC1B,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;AACnF,EAAE,CAAC,CAAC;AACJ,CAAC,IAAI,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ,EAAE;AACnD,EAAE,MAAM,SAAS,GAAG;AACpB,GAAG,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC;AACrG,GAAG,eAAe,EAAE,QAAQ,CAAC,eAAe;AAC5C,GAAG,WAAW,EAAE,QAAQ,CAAC;AACzB,GAAG;AACH,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sEAAsE,CAAC;AACxN,CAAC;AACD,CAAC,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC;AAC1E,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC;AAChG,CAAC,mBAAmB,CAAC,cAAc,EAAE,IAAI,CAAC;AAC1C,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C;;;;"}

package/build/server/chunks/entries/endpoints/api/orgs/_orgId_/members/_userId_/_server.ts.js-CMWVYuce.js

@@ -1,79 +0,0 @@
-import { M as MEMBER_ASSIGNABLE_PERMISSIONS, a as ALL_ORG_PERMISSIONS, k as OrgRoleSchema } from '../../../../../../../chunks/src.js-C5mUn1eC.js';
-import { e as getOrganizationProvider } from '../../../../../../../chunks/providers.server.js-BxdMEy_h.js';
-import { j as requireManageOrgMembers } from '../../../../../../../chunks/access.server.js-kAeKdbqB.js';
-import { a as apiError, t as throwZodError, A as ApiErrorCode, h as handleApiError } from '../../../../../../../chunks/api-errors.js-B12FixUz.js';
-import { z } from 'zod';
-import '../../../../../../../chunks/shared-server.js-HBAhbQ8m.js';
-import '../../../../../../../chunks/limits.js-DyiDwmjP.js';
-import '../../../../../../../chunks/chunk-D2GEMGK5.js-keSflEOG.js';
-import '../../../../../../../chunks/schema.js-BhmknPcU.js';
-import 'node:crypto';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import '@sveltejs/kit';
-import '../../../../../../../chunks/utils2.js-DYtXuVSb.js';
-
-//#region src/routes/api/orgs/[orgId]/members/[userId]/+server.ts
-/**
-* PATCH /api/orgs/[orgId]/members/[userId]
-*
-* Body accepts either or both:
-*   - `{ role: OrgRole }` — change the member's role. **Owner-only** per §3.
-*   - `{ permissions: OrgPermission[] }` — replace the member's grantable
-*     permissions. Owner/admin via `manage_org_members`. For `member`-role
-*     targets, only `MEMBER_ASSIGNABLE_PERMISSIONS` are accepted; promoting a
-*     member's permissions does NOT change their role (that's a separate
-*     branch, owner-only).
-*
-* Tenancy: the URL `orgId` must equal `ctx.actingOrgId`. Cross-org member
-* mutation is blocked even if the actor holds permissions in another org.
-*
-* Self-protection (sole-owner invariant, §10 spirit): the only owner of an
-* org cannot be demoted. Demoting yourself while you are the sole owner is
-* the most common way to discover this — handler returns 409.
-*/
-var PERMISSIONS_SCHEMA = z.array(z.enum(ALL_ORG_PERMISSIONS));
-var PatchSchema = z.object({
-	role: OrgRoleSchema.optional(),
-	permissions: PERMISSIONS_SCHEMA.optional()
-}).refine((b) => b.role !== void 0 || b.permissions !== void 0, { message: "Provide at least one of role, permissions" });
-var PATCH = async ({ params, request, locals }) => {
-	const { orgId, userId } = params;
-	if (!orgId || !userId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing org ID or user ID");
-	requireManageOrgMembers(locals);
-	const ctx = locals.ctx;
-	if (ctx.actingOrgId !== orgId) apiError(403, ApiErrorCode.FORBIDDEN, "Acting org does not match the target org.");
-	const body = await request.json().catch(() => null);
-	const parsed = PatchSchema.safeParse(body);
-	if (!parsed.success) throwZodError(parsed.error);
-	const patch = parsed.data;
-	const orgs = getOrganizationProvider();
-	const [actorMember, target] = await Promise.all([orgs.getOrgMember(ctx, orgId, ctx.userId), orgs.getOrgMember(ctx, orgId, userId)]);
-	if (!target) apiError(404, ApiErrorCode.NOT_FOUND, "Member not found in this organization.");
-	if (!actorMember) apiError(403, ApiErrorCode.FORBIDDEN, "You are not a member of this organization.");
-	if (patch.role !== void 0 && patch.role !== target.role) {
-		if (actorMember.role !== "owner") apiError(403, ApiErrorCode.FORBIDDEN, "Only the org owner can change roles.");
-		if (target.role === "owner" && patch.role !== "owner") {
-			if ((await orgs.listOrgMembers(ctx, orgId, { limit: 200 })).items.filter((m) => m.role === "owner" && m.userId !== target.userId && !m.deletedAt).length === 0) apiError(409, ApiErrorCode.CONFLICT, "Cannot demote the sole owner of this organization. Promote another member to owner first.");
-		}
-		await orgs.updateOrgMemberRole(ctx, orgId, userId, patch.role);
-	}
-	if (patch.permissions !== void 0) {
-		const effectiveRole = patch.role ?? target.role;
-		const valid = effectiveRole === "member" ? new Set(MEMBER_ASSIGNABLE_PERMISSIONS) : new Set(ALL_ORG_PERMISSIONS);
-		const invalid = patch.permissions.filter((p) => !valid.has(p));
-		if (invalid.length > 0) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Permissions [${invalid.join(", ")}] cannot be assigned to a ${effectiveRole}.`);
-		try {
-			await orgs.updateOrgMemberPermissions(ctx, orgId, userId, patch.permissions);
-		} catch (err) {
-			handleApiError(err, "Failed to update permissions");
-		}
-	}
-	return new Response(null, { status: 204 });
-};
-
-export { PATCH };
-//# sourceMappingURL=_server.ts.js-CMWVYuce.js.map

package/build/server/chunks/entries/endpoints/api/orgs/_orgId_/members/_userId_/_server.ts.js-CMWVYuce.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts.js-CMWVYuce.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/orgs/_orgId_/members/_userId_/_server.ts.js"],"sourcesContent":["import { S as OrgRoleSchema, h as ALL_ORG_PERMISSIONS, v as MEMBER_ASSIGNABLE_PERMISSIONS } from \"../../../../../../../chunks/src.js\";\nimport { m as getOrganizationProvider } from \"../../../../../../../chunks/providers.server.js\";\nimport { x as requireManageOrgMembers } from \"../../../../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../../../chunks/api-errors.js\";\nimport { z } from \"zod\";\n//#region src/routes/api/orgs/[orgId]/members/[userId]/+server.ts\n/**\n* PATCH /api/orgs/[orgId]/members/[userId]\n*\n* Body accepts either or both:\n*   - `{ role: OrgRole }` — change the member's role. **Owner-only** per §3.\n*   - `{ permissions: OrgPermission[] }` — replace the member's grantable\n*     permissions. Owner/admin via `manage_org_members`. For `member`-role\n*     targets, only `MEMBER_ASSIGNABLE_PERMISSIONS` are accepted; promoting a\n*     member's permissions does NOT change their role (that's a separate\n*     branch, owner-only).\n*\n* Tenancy: the URL `orgId` must equal `ctx.actingOrgId`. Cross-org member\n* mutation is blocked even if the actor holds permissions in another org.\n*\n* Self-protection (sole-owner invariant, §10 spirit): the only owner of an\n* org cannot be demoted. Demoting yourself while you are the sole owner is\n* the most common way to discover this — handler returns 409.\n*/\nvar PERMISSIONS_SCHEMA = z.array(z.enum(ALL_ORG_PERMISSIONS));\nvar PatchSchema = z.object({\n\trole: OrgRoleSchema.optional(),\n\tpermissions: PERMISSIONS_SCHEMA.optional()\n}).refine((b) => b.role !== void 0 || b.permissions !== void 0, { message: \"Provide at least one of role, permissions\" });\nvar PATCH = async ({ params, request, locals }) => {\n\tconst { orgId, userId } = params;\n\tif (!orgId || !userId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing org ID or user ID\");\n\trequireManageOrgMembers(locals);\n\tconst ctx = locals.ctx;\n\tif (ctx.actingOrgId !== orgId) apiError(403, ApiErrorCode.FORBIDDEN, \"Acting org does not match the target org.\");\n\tconst body = await request.json().catch(() => null);\n\tconst parsed = PatchSchema.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\tconst patch = parsed.data;\n\tconst orgs = getOrganizationProvider();\n\tconst [actorMember, target] = await Promise.all([orgs.getOrgMember(ctx, orgId, ctx.userId), orgs.getOrgMember(ctx, orgId, userId)]);\n\tif (!target) apiError(404, ApiErrorCode.NOT_FOUND, \"Member not found in this organization.\");\n\tif (!actorMember) apiError(403, ApiErrorCode.FORBIDDEN, \"You are not a member of this organization.\");\n\tif (patch.role !== void 0 && patch.role !== target.role) {\n\t\tif (actorMember.role !== \"owner\") apiError(403, ApiErrorCode.FORBIDDEN, \"Only the org owner can change roles.\");\n\t\tif (target.role === \"owner\" && patch.role !== \"owner\") {\n\t\t\tif ((await orgs.listOrgMembers(ctx, orgId, { limit: 200 })).items.filter((m) => m.role === \"owner\" && m.userId !== target.userId && !m.deletedAt).length === 0) apiError(409, ApiErrorCode.CONFLICT, \"Cannot demote the sole owner of this organization. Promote another member to owner first.\");\n\t\t}\n\t\tawait orgs.updateOrgMemberRole(ctx, orgId, userId, patch.role);\n\t}\n\tif (patch.permissions !== void 0) {\n\t\tconst effectiveRole = patch.role ?? target.role;\n\t\tconst valid = effectiveRole === \"member\" ? new Set(MEMBER_ASSIGNABLE_PERMISSIONS) : new Set(ALL_ORG_PERMISSIONS);\n\t\tconst invalid = patch.permissions.filter((p) => !valid.has(p));\n\t\tif (invalid.length > 0) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Permissions [${invalid.join(\", \")}] cannot be assigned to a ${effectiveRole}.`);\n\t\ttry {\n\t\t\tawait orgs.updateOrgMemberPermissions(ctx, orgId, userId, patch.permissions);\n\t\t} catch (err) {\n\t\t\thandleApiError(err, \"Failed to update permissions\");\n\t\t}\n\t}\n\treturn new Response(null, { status: 204 });\n};\n//#endregion\nexport { PATCH };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAKA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAC7D,IAAI,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;AAC3B,CAAC,IAAI,EAAE,aAAa,CAAC,QAAQ,EAAE;AAC/B,CAAC,WAAW,EAAE,kBAAkB,CAAC,QAAQ;AACzC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;AACtH,IAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACnD,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM;AACjC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;AAClG,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,GAAG,CAAC,WAAW,KAAK,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,2CAA2C,CAAC;AAClH,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC;AAC3C,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI;AAC1B,CAAC,MAAM,IAAI,GAAG,uBAAuB,EAAE;AACvC,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AACpI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,wCAAwC,CAAC;AAC7F,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,4CAA4C,CAAC;AACtG,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE;AAC1D,EAAE,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,sCAAsC,CAAC;AACjH,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE;AACzD,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,2FAA2F,CAAC;AACpS,EAAE;AACF,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;AAChE,CAAC;AACD,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,EAAE;AACnC,EAAE,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI;AACjD,EAAE,MAAM,KAAK,GAAG,aAAa,KAAK,QAAQ,GAAG,IAAI,GAAG,CAAC,6BAA6B,CAAC,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC;AAClH,EAAE,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAChE,EAAE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,0BAA0B,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;AACxJ,EAAE,IAAI;AACN,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC;AAC/E,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,cAAc,CAAC,GAAG,EAAE,8BAA8B,CAAC;AACtD,EAAE;AACF,CAAC;AACD,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C;;;;"}