@selvajs/selva 4.8.0-beta.6 → 4.8.0-beta.8

package/build/server/chunks/entries/endpoints/api/v1/projects/_id_/members/_userId_/_server.ts.js-B3QgAuHZ.js

@@ -1,51 +0,0 @@
-import '../../../../../../../../chunks/src.js-BYv4z3-l.js';
-import { f as getProjectProvider } from '../../../../../../../../chunks/providers.server.js-B-ZmrvSG.js';
-import { A as requireCanManageMembers, C as checkOwnerRemoval } from '../../../../../../../../chunks/access.server.js-tb0xoMyG.js';
-import { a as apiError, A as ApiErrorCode } from '../../../../../../../../chunks/api-errors.js-Bn15nthv.js';
-import { a as apiRoute, h as requireParams, e as parseBody, n as noContent } from '../../../../../../../../chunks/route.js-BDeyuKRt.js';
-import { a as UpdateProjectMemberBodySchema } from '../../../../../../../../chunks/bodies.js-DzvLeLhi.js';
-import 'zod';
-import '../../../../../../../../chunks/shared-server.js-HBAhbQ8m.js';
-import '../../../../../../../../chunks/limits.js-I-HAqbOg.js';
-import '../../../../../../../../chunks/schema.js-GCZWhojT.js';
-import '../../../../../../../../chunks/chunk-AYH5O3VG.js-YiX3ZqeT.js';
-import 'node:crypto';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import '@sveltejs/kit';
-import '../../../../../../../../chunks/utils2.js-CRJ9AEdN.js';
-
-//#region src/routes/api/v1/projects/[id]/members/[userId]/+server.ts
-var PATCH = apiRoute("Failed to update role", async ({ params, request, locals }) => {
-	const { id, userId } = requireParams(params, "id", "userId");
-	await requireCanManageMembers(locals, id);
-	const { role } = await parseBody(request, UpdateProjectMemberBodySchema);
-	await getProjectProvider().updateProjectMemberRole(locals.ctx, id, userId, role);
-	return noContent();
-});
-var DELETE = apiRoute("Failed to remove member", async ({ params, url, locals }) => {
-	const { id, userId } = requireParams(params, "id", "userId");
-	await requireCanManageMembers(locals, id);
-	const ctx = locals.ctx;
-	const projects = getProjectProvider();
-	const target = await projects.getProjectMember(ctx, id, userId);
-	if (!target) return noContent();
-	if (target.role === "owner") {
-		const page = await projects.listProjectMembers(ctx, id, { limit: 200 });
-		const decision = checkOwnerRemoval({
-			target: { role: target.role },
-			allMembers: page.items.map((m) => ({ role: m.role })),
-			confirmed: url.searchParams.get("confirm") === "true"
-		});
-		if (decision === "sole_owner") apiError(409, ApiErrorCode.CONFLICT, "Cannot remove the sole owner of a project. Assign another owner first, or use reclaim to add a co-owner.");
-		if (decision === "needs_confirm") apiError(409, ApiErrorCode.CONFLICT, "Removing another project owner requires explicit confirmation. Retry with ?confirm=true.");
-	}
-	await projects.removeProjectMember(ctx, id, userId);
-	return noContent();
-});
-
-export { DELETE, PATCH };
-//# sourceMappingURL=_server.ts.js-B3QgAuHZ.js.map

package/build/server/chunks/entries/endpoints/api/v1/projects/_id_/members/_userId_/_server.ts.js-B3QgAuHZ.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts.js-B3QgAuHZ.js","sources":["../../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/projects/_id_/members/_userId_/_server.ts.js"],"sourcesContent":["import \"../../../../../../../../chunks/src.js\";\nimport { _ as getProjectProvider } from \"../../../../../../../../chunks/providers.server.js\";\nimport { f as requireCanManageMembers, k as checkOwnerRemoval } from \"../../../../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../../../chunks/api-errors.js\";\nimport { a as noContent, l as requireParams, o as parseBody, t as apiRoute } from \"../../../../../../../../chunks/route.js\";\nimport { c as UpdateProjectMemberBodySchema } from \"../../../../../../../../chunks/bodies.js\";\n//#region src/routes/api/v1/projects/[id]/members/[userId]/+server.ts\nvar PATCH = apiRoute(\"Failed to update role\", async ({ params, request, locals }) => {\n\tconst { id, userId } = requireParams(params, \"id\", \"userId\");\n\tawait requireCanManageMembers(locals, id);\n\tconst { role } = await parseBody(request, UpdateProjectMemberBodySchema);\n\tawait getProjectProvider().updateProjectMemberRole(locals.ctx, id, userId, role);\n\treturn noContent();\n});\nvar DELETE = apiRoute(\"Failed to remove member\", async ({ params, url, locals }) => {\n\tconst { id, userId } = requireParams(params, \"id\", \"userId\");\n\tawait requireCanManageMembers(locals, id);\n\tconst ctx = locals.ctx;\n\tconst projects = getProjectProvider();\n\tconst target = await projects.getProjectMember(ctx, id, userId);\n\tif (!target) return noContent();\n\tif (target.role === \"owner\") {\n\t\tconst page = await projects.listProjectMembers(ctx, id, { limit: 200 });\n\t\tconst decision = checkOwnerRemoval({\n\t\t\ttarget: { role: target.role },\n\t\t\tallMembers: page.items.map((m) => ({ role: m.role })),\n\t\t\tconfirmed: url.searchParams.get(\"confirm\") === \"true\"\n\t\t});\n\t\tif (decision === \"sole_owner\") apiError(409, ApiErrorCode.CONFLICT, \"Cannot remove the sole owner of a project. Assign another owner first, or use reclaim to add a co-owner.\");\n\t\tif (decision === \"needs_confirm\") apiError(409, ApiErrorCode.CONFLICT, \"Removing another project owner requires explicit confirmation. Retry with ?confirm=true.\");\n\t}\n\tawait projects.removeProjectMember(ctx, id, userId);\n\treturn noContent();\n});\n//#endregion\nexport { DELETE, PATCH };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAMA;AACG,IAAC,KAAK,GAAG,QAAQ,CAAC,uBAAuB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrF,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC;AAC7D,CAAC,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,CAAC;AAC1C,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,6BAA6B,CAAC;AACzE,CAAC,MAAM,kBAAkB,EAAE,CAAC,uBAAuB,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC;AACjF,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;AACE,IAAC,MAAM,GAAG,QAAQ,CAAC,yBAAyB,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK;AACpF,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC;AAC7D,CAAC,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,CAAC;AAC1C,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,QAAQ,GAAG,kBAAkB,EAAE;AACtC,CAAC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC;AAChE,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,SAAS,EAAE;AAChC,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE;AAC9B,EAAE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACzE,EAAE,MAAM,QAAQ,GAAG,iBAAiB,CAAC;AACrC,GAAG,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;AAChC,GAAG,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACxD,GAAG,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK;AAClD,GAAG,CAAC;AACJ,EAAE,IAAI,QAAQ,KAAK,YAAY,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,0GAA0G,CAAC;AACjL,EAAE,IAAI,QAAQ,KAAK,eAAe,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,0FAA0F,CAAC;AACpK,CAAC;AACD,CAAC,MAAM,QAAQ,CAAC,mBAAmB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC;AACpD,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/projects/_id_/reclaim/_server.ts.js-C-wsomLx.js

@@ -1,44 +0,0 @@
-import { f as getProjectProvider } from '../../../../../../../chunks/providers.server.js-B-ZmrvSG.js';
-import { D as requireCanReclaim } from '../../../../../../../chunks/access.server.js-tb0xoMyG.js';
-import { a as apiRoute, h as requireParams, d as created } from '../../../../../../../chunks/route.js-BDeyuKRt.js';
-import '../../../../../../../chunks/shared-server.js-HBAhbQ8m.js';
-import '../../../../../../../chunks/src.js-BYv4z3-l.js';
-import 'zod';
-import '../../../../../../../chunks/limits.js-I-HAqbOg.js';
-import '../../../../../../../chunks/schema.js-GCZWhojT.js';
-import '../../../../../../../chunks/chunk-AYH5O3VG.js-YiX3ZqeT.js';
-import 'node:crypto';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import '../../../../../../../chunks/api-errors.js-Bn15nthv.js';
-import '../../../../../../../chunks/utils2.js-CRJ9AEdN.js';
-import '@sveltejs/kit';
-
-//#region src/routes/api/v1/projects/[id]/reclaim/+server.ts
-/**
-* Org owner/admin escape hatch. Adds the actor as a co-owner and does NOT
-* demote the existing owner. Idempotent: reclaiming twice is a no-op, because
-* `addProjectMember` reactivates a soft-deleted row in place.
-*/
-var POST = apiRoute("Failed to reclaim project", async ({ params, locals }) => {
-	const { id } = requireParams(params, "id");
-	const { user, ctx } = await requireCanReclaim(locals, id);
-	const now = (/* @__PURE__ */ new Date()).toISOString();
-	const member = {
-		projectId: id,
-		userId: user.id,
-		role: "owner",
-		joinedAt: now,
-		updatedAt: now,
-		updatedBy: ctx.userId || user.id,
-		deletedAt: null
-	};
-	await getProjectProvider().addProjectMember(ctx, member);
-	return created({ member });
-});
-
-export { POST };
-//# sourceMappingURL=_server.ts.js-C-wsomLx.js.map

package/build/server/chunks/entries/endpoints/api/v1/projects/_id_/reclaim/_server.ts.js-C-wsomLx.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts.js-C-wsomLx.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/projects/_id_/reclaim/_server.ts.js"],"sourcesContent":["import { _ as getProjectProvider } from \"../../../../../../../chunks/providers.server.js\";\nimport { p as requireCanReclaim } from \"../../../../../../../chunks/access.server.js\";\nimport { l as requireParams, r as created, t as apiRoute } from \"../../../../../../../chunks/route.js\";\n//#region src/routes/api/v1/projects/[id]/reclaim/+server.ts\n/**\n* Org owner/admin escape hatch. Adds the actor as a co-owner and does NOT\n* demote the existing owner. Idempotent: reclaiming twice is a no-op, because\n* `addProjectMember` reactivates a soft-deleted row in place.\n*/\nvar POST = apiRoute(\"Failed to reclaim project\", async ({ params, locals }) => {\n\tconst { id } = requireParams(params, \"id\");\n\tconst { user, ctx } = await requireCanReclaim(locals, id);\n\tconst now = (/* @__PURE__ */ new Date()).toISOString();\n\tconst member = {\n\t\tprojectId: id,\n\t\tuserId: user.id,\n\t\trole: \"owner\",\n\t\tjoinedAt: now,\n\t\tupdatedAt: now,\n\t\tupdatedBy: ctx.userId || user.id,\n\t\tdeletedAt: null\n\t};\n\tawait getProjectProvider().addProjectMember(ctx, member);\n\treturn created({ member });\n});\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAGA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,IAAI,GAAG,QAAQ,CAAC,2BAA2B,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC/E,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC;AAC3C,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,EAAE,CAAC;AAC1D,CAAC,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACvD,CAAC,MAAM,MAAM,GAAG;AAChB,EAAE,SAAS,EAAE,EAAE;AACf,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;AACjB,EAAE,IAAI,EAAE,OAAO;AACf,EAAE,QAAQ,EAAE,GAAG;AACf,EAAE,SAAS,EAAE,GAAG;AAChB,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE;AAClC,EAAE,SAAS,EAAE;AACb,EAAE;AACF,CAAC,MAAM,kBAAkB,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC;AACzD,CAAC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/projects/_server.ts.js-BxqhUwkn.js

@@ -1,83 +0,0 @@
-import { s as slugify } from '../../../../../chunks/src.js-BYv4z3-l.js';
-import { f as getProjectProvider, P as ProviderError } from '../../../../../chunks/providers.server.js-B-ZmrvSG.js';
-import { u as requireCanCreateProject } from '../../../../../chunks/access.server.js-tb0xoMyG.js';
-import { a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-Bn15nthv.js';
-import { r as resolveAccessibleProjects } from '../../../../../chunks/visibility.server.js-DjUKI70W.js';
-import { a as parseListOptions } from '../../../../../chunks/pagination.server.js-Dh0ZmkaY.js';
-import { a as apiRoute, r as requireCaller, c as collection, e as parseBody, d as created } from '../../../../../chunks/route.js-BDeyuKRt.js';
-import { C as CreateProjectBodySchema } from '../../../../../chunks/bodies.js-DzvLeLhi.js';
-import { randomUUID } from 'node:crypto';
-import 'zod';
-import '../../../../../chunks/shared-server.js-HBAhbQ8m.js';
-import '../../../../../chunks/limits.js-I-HAqbOg.js';
-import '../../../../../chunks/schema.js-GCZWhojT.js';
-import '../../../../../chunks/chunk-AYH5O3VG.js-YiX3ZqeT.js';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import '@sveltejs/kit';
-import '../../../../../chunks/utils2.js-CRJ9AEdN.js';
-
-//#region src/routes/api/v1/projects/+server.ts
-var MAX_SLUG_ATTEMPTS = 25;
-function isSlugConflict(err) {
-	return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);
-}
-function isNameConflict(err) {
-	return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);
-}
-var GET = apiRoute("Failed to list projects", async ({ locals, url }) => {
-	const { ctx } = requireCaller(locals);
-	const { projects } = await resolveAccessibleProjects(ctx);
-	const { limit, cursor } = parseListOptions(url);
-	const start = cursor ? Number(cursor) : 0;
-	if (!Number.isInteger(start) || start < 0) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid cursor");
-	const items = projects.slice(start, start + (limit ?? projects.length));
-	const nextIndex = start + items.length;
-	return collection({
-		items,
-		nextCursor: nextIndex < projects.length ? String(nextIndex) : void 0
-	});
-});
-var POST = apiRoute("Failed to create project", async ({ request, locals }) => {
-	const ctx = locals.ctx;
-	if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
-	await requireCanCreateProject(locals, ctx.actingOrgId);
-	const input = await parseBody(request, CreateProjectBodySchema);
-	const autoJoinOnUpload = input.autoJoinOnUpload ?? false;
-	if (autoJoinOnUpload && input.visibility !== "public") apiError(400, ApiErrorCode.VALIDATION_FAILED, "autoJoinOnUpload requires visibility=public");
-	const projectStore = getProjectProvider();
-	const baseSlug = slugify(input.name) || "project";
-	const now = (/* @__PURE__ */ new Date()).toISOString();
-	const projectId = randomUUID();
-	for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {
-		const project = {
-			id: projectId,
-			orgId: ctx.actingOrgId,
-			name: input.name,
-			slug: attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`,
-			description: input.description,
-			visibility: input.visibility,
-			ownerId: locals.user.id,
-			createdBy: locals.user.id,
-			updatedBy: locals.user.id,
-			autoJoinOnUpload,
-			createdAt: now,
-			updatedAt: now,
-			deletedAt: null
-		};
-		try {
-			await projectStore.createProject(ctx, project);
-			return created(project);
-		} catch (err) {
-			if (isNameConflict(err)) apiError(409, ApiErrorCode.CONFLICT, "A project with that name already exists in this organization.");
-			if (!isSlugConflict(err)) throw err;
-		}
-	}
-	apiError(409, ApiErrorCode.CONFLICT, "Could not pick a unique project slug after several attempts.");
-});
-
-export { GET, POST };
-//# sourceMappingURL=_server.ts.js-BxqhUwkn.js.map

package/build/server/chunks/entries/endpoints/api/v1/projects/_server.ts.js-BxqhUwkn.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts.js-BxqhUwkn.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/projects/_server.ts.js"],"sourcesContent":["import { T as slugify } from \"../../../../../chunks/src.js\";\nimport { N as ProviderError, _ as getProjectProvider } from \"../../../../../chunks/providers.server.js\";\nimport { c as requireCanCreateProject } from \"../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { i as resolveAccessibleProjects } from \"../../../../../chunks/visibility.server.js\";\nimport { n as parseListOptions } from \"../../../../../chunks/pagination.server.js\";\nimport { c as requireCaller, n as collection, o as parseBody, r as created, t as apiRoute } from \"../../../../../chunks/route.js\";\nimport { r as CreateProjectBodySchema } from \"../../../../../chunks/bodies.js\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/api/v1/projects/+server.ts\nvar MAX_SLUG_ATTEMPTS = 25;\nfunction isSlugConflict(err) {\n\treturn err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);\n}\nfunction isNameConflict(err) {\n\treturn err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);\n}\nvar GET = apiRoute(\"Failed to list projects\", async ({ locals, url }) => {\n\tconst { ctx } = requireCaller(locals);\n\tconst { projects } = await resolveAccessibleProjects(ctx);\n\tconst { limit, cursor } = parseListOptions(url);\n\tconst start = cursor ? Number(cursor) : 0;\n\tif (!Number.isInteger(start) || start < 0) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid cursor\");\n\tconst items = projects.slice(start, start + (limit ?? projects.length));\n\tconst nextIndex = start + items.length;\n\treturn collection({\n\t\titems,\n\t\tnextCursor: nextIndex < projects.length ? String(nextIndex) : void 0\n\t});\n});\nvar POST = apiRoute(\"Failed to create project\", async ({ request, locals }) => {\n\tconst ctx = locals.ctx;\n\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\tawait requireCanCreateProject(locals, ctx.actingOrgId);\n\tconst input = await parseBody(request, CreateProjectBodySchema);\n\tconst autoJoinOnUpload = input.autoJoinOnUpload ?? false;\n\tif (autoJoinOnUpload && input.visibility !== \"public\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"autoJoinOnUpload requires visibility=public\");\n\tconst projectStore = getProjectProvider();\n\tconst baseSlug = slugify(input.name) || \"project\";\n\tconst now = (/* @__PURE__ */ new Date()).toISOString();\n\tconst projectId = randomUUID();\n\tfor (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {\n\t\tconst project = {\n\t\t\tid: projectId,\n\t\t\torgId: ctx.actingOrgId,\n\t\t\tname: input.name,\n\t\t\tslug: attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`,\n\t\t\tdescription: input.description,\n\t\t\tvisibility: input.visibility,\n\t\t\townerId: locals.user.id,\n\t\t\tcreatedBy: locals.user.id,\n\t\t\tupdatedBy: locals.user.id,\n\t\t\tautoJoinOnUpload,\n\t\t\tcreatedAt: now,\n\t\t\tupdatedAt: now,\n\t\t\tdeletedAt: null\n\t\t};\n\t\ttry {\n\t\t\tawait projectStore.createProject(ctx, project);\n\t\t\treturn created(project);\n\t\t} catch (err) {\n\t\t\tif (isNameConflict(err)) apiError(409, ApiErrorCode.CONFLICT, \"A project with that name already exists in this organization.\");\n\t\t\tif (!isSlugConflict(err)) throw err;\n\t\t}\n\t}\n\tapiError(409, ApiErrorCode.CONFLICT, \"Could not pick a unique project slug after several attempts.\");\n});\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AASA;AACA,IAAI,iBAAiB,GAAG,EAAE;AAC1B,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,CAAC,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC9G;AACA,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,CAAC,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC9G;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,yBAAyB,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACzE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AACtC,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,yBAAyB,CAAC,GAAG,CAAC;AAC1D,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC;AAChD,CAAC,MAAM,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;AAC1C,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;AAC3G,CAAC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,IAAI,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;AACxE,CAAC,MAAM,SAAS,GAAG,KAAK,GAAG,KAAK,CAAC,MAAM;AACvC,CAAC,OAAO,UAAU,CAAC;AACnB,EAAE,KAAK;AACP,EAAE,UAAU,EAAE,SAAS,GAAG,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK;AACrE,EAAE,CAAC;AACH,CAAC;AACE,IAAC,IAAI,GAAG,QAAQ,CAAC,0BAA0B,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC/E,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC9F,CAAC,MAAM,uBAAuB,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC;AACvD,CAAC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,uBAAuB,CAAC;AAChE,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,IAAI,KAAK;AACzD,CAAC,IAAI,gBAAgB,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,6CAA6C,CAAC;AACpJ,CAAC,MAAM,YAAY,GAAG,kBAAkB,EAAE;AAC1C,CAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,SAAS;AAClD,CAAC,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACvD,CAAC,MAAM,SAAS,GAAG,UAAU,EAAE;AAC/B,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,iBAAiB,EAAE,OAAO,EAAE,EAAE;AAC/D,EAAE,MAAM,OAAO,GAAG;AAClB,GAAG,EAAE,EAAE,SAAS;AAChB,GAAG,KAAK,EAAE,GAAG,CAAC,WAAW;AACzB,GAAG,IAAI,EAAE,KAAK,CAAC,IAAI;AACnB,GAAG,IAAI,EAAE,OAAO,KAAK,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;AAChE,GAAG,WAAW,EAAE,KAAK,CAAC,WAAW;AACjC,GAAG,UAAU,EAAE,KAAK,CAAC,UAAU;AAC/B,GAAG,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC1B,GAAG,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC5B,GAAG,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC5B,GAAG,gBAAgB;AACnB,GAAG,SAAS,EAAE,GAAG;AACjB,GAAG,SAAS,EAAE,GAAG;AACjB,GAAG,SAAS,EAAE;AACd,GAAG;AACH,EAAE,IAAI;AACN,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC;AACjD,GAAG,OAAO,OAAO,CAAC,OAAO,CAAC;AAC1B,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,+DAA+D,CAAC;AACjI,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG;AACtC,EAAE;AACF,CAAC;AACD,CAAC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,8DAA8D,CAAC;AACrG,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/auth/email/callback/_server.ts.js-CZu144VH.js

@@ -1,45 +0,0 @@
-import { a as getAuthProvider } from '../../../../../chunks/providers.server.js-B-ZmrvSG.js';
-import { a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-Bn15nthv.js';
-import { s as setSessionCookie, a as setRefreshCookie } from '../../../../../chunks/admin-auth.server.js-B37mb9m_.js';
-import { s as safeRedirectTarget } from '../../../../../chunks/redirect.js-B4i9gSkt.js';
-import { b as bootstrapUserSession } from '../../../../../chunks/auth-bootstrap.server.js-DmPmom97.js';
-import { redirect } from '@sveltejs/kit';
-import '../../../../../chunks/shared-server.js-HBAhbQ8m.js';
-import '../../../../../chunks/src.js-BYv4z3-l.js';
-import 'zod';
-import '../../../../../chunks/limits.js-I-HAqbOg.js';
-import '../../../../../chunks/schema.js-GCZWhojT.js';
-import '../../../../../chunks/chunk-AYH5O3VG.js-YiX3ZqeT.js';
-import 'node:crypto';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import '../../../../../chunks/utils2.js-CRJ9AEdN.js';
-import 'node:dns/promises';
-import 'node:net';
-
-//#region src/routes/auth/email/callback/+server.ts
-/**
-* GET /auth/email/callback?token_hash=...&type=...&redirectTo=/library
-*
-* The user clicked the magic link in their inbox. Hand the full URL to the
-* adapter (it knows its own token format), set cookies on success, redirect
-* to the destination. Mirrors `/auth/supabase/callback` but capability-named
-* — this route doesn't know which IdP brokered the email.
-*/
-var GET = async ({ url, cookies }) => {
-	const emailLink = getAuthProvider().emailLink;
-	if (!emailLink) apiError(501, ApiErrorCode.INTERNAL, "Email sign-in is not supported by this provider.");
-	const result = await emailLink.verifyMagicLink(url.toString());
-	if (!result) apiError(401, ApiErrorCode.UNAUTHORIZED, "This sign-in link is invalid or has expired.");
-	await bootstrapUserSession(result.user);
-	setSessionCookie(cookies, result.sessionToken);
-	if (result.refreshToken) setRefreshCookie(cookies, result.refreshToken);
-	const dest = safeRedirectTarget(url.searchParams.get("redirectTo"), "/library");
-	redirect(303, dest);
-};
-
-export { GET };
-//# sourceMappingURL=_server.ts.js-CZu144VH.js.map

package/build/server/chunks/entries/endpoints/auth/email/callback/_server.ts.js-CZu144VH.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts.js-CZu144VH.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/auth/email/callback/_server.ts.js"],"sourcesContent":["import { r as getAuthProvider } from \"../../../../../chunks/providers.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { c as setRefreshCookie, l as setSessionCookie } from \"../../../../../chunks/admin-auth.server.js\";\nimport \"../../../../../chunks/auth.server.js\";\nimport { t as safeRedirectTarget } from \"../../../../../chunks/redirect.js\";\nimport { t as bootstrapUserSession } from \"../../../../../chunks/auth-bootstrap.server.js\";\nimport { redirect } from \"@sveltejs/kit\";\n//#region src/routes/auth/email/callback/+server.ts\n/**\n* GET /auth/email/callback?token_hash=...&type=...&redirectTo=/library\n*\n* The user clicked the magic link in their inbox. Hand the full URL to the\n* adapter (it knows its own token format), set cookies on success, redirect\n* to the destination. Mirrors `/auth/supabase/callback` but capability-named\n* — this route doesn't know which IdP brokered the email.\n*/\nvar GET = async ({ url, cookies }) => {\n\tconst emailLink = getAuthProvider().emailLink;\n\tif (!emailLink) apiError(501, ApiErrorCode.INTERNAL, \"Email sign-in is not supported by this provider.\");\n\tconst result = await emailLink.verifyMagicLink(url.toString());\n\tif (!result) apiError(401, ApiErrorCode.UNAUTHORIZED, \"This sign-in link is invalid or has expired.\");\n\tawait bootstrapUserSession(result.user);\n\tsetSessionCookie(cookies, result.sessionToken);\n\tif (result.refreshToken) setRefreshCookie(cookies, result.refreshToken);\n\tconst dest = safeRedirectTarget(url.searchParams.get(\"redirectTo\"), \"/library\");\n\tredirect(303, dest);\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAOA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK;AACtC,CAAC,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC,SAAS;AAC9C,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,kDAAkD,CAAC;AACzG,CAAC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;AAC/D,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,8CAA8C,CAAC;AACtG,CAAC,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;AACxC,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAC/C,CAAC,IAAI,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACxE,CAAC,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;AAChF,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;AACpB;;;;"}

package/build/server/chunks/entries/endpoints/auth/supabase/callback/_server.ts.js-Izol0_md.js

@@ -1,49 +0,0 @@
-import { a as getAuthProvider } from '../../../../../chunks/providers.server.js-B-ZmrvSG.js';
-import { a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-Bn15nthv.js';
-import { s as setSessionCookie, a as setRefreshCookie } from '../../../../../chunks/admin-auth.server.js-B37mb9m_.js';
-import { s as safeRedirectTarget } from '../../../../../chunks/redirect.js-B4i9gSkt.js';
-import { b as bootstrapUserSession } from '../../../../../chunks/auth-bootstrap.server.js-DmPmom97.js';
-import { redirect } from '@sveltejs/kit';
-import '../../../../../chunks/shared-server.js-HBAhbQ8m.js';
-import '../../../../../chunks/src.js-BYv4z3-l.js';
-import 'zod';
-import '../../../../../chunks/limits.js-I-HAqbOg.js';
-import '../../../../../chunks/schema.js-GCZWhojT.js';
-import '../../../../../chunks/chunk-AYH5O3VG.js-YiX3ZqeT.js';
-import 'node:crypto';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import '../../../../../chunks/utils2.js-CRJ9AEdN.js';
-import 'node:dns/promises';
-import 'node:net';
-
-//#region src/routes/auth/supabase/callback/+server.ts
-/**
-* GET /auth/supabase/callback?code=...&redirectTo=/library
-*
-* Completes a Supabase OAuth round-trip. Exchanges the authorization code
-* for a session, sets the session cookie, and redirects to `redirectTo`.
-*
-* Post-verification flow (data-row seeding + first-admin bootstrap) lives in
-* `bootstrapUserSession` so the email-link and OAuth paths follow the same
-* sequence in the same order.
-*/
-var GET = async ({ url, cookies }) => {
-	const code = url.searchParams.get("code");
-	if (!code) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing authorization code");
-	const oauth = getAuthProvider().oauth;
-	if (!oauth) apiError(501, ApiErrorCode.INTERNAL, "OAuth is not supported by the configured auth provider.");
-	const result = await oauth.exchangeOAuthCode(code);
-	if (!result) apiError(401, ApiErrorCode.UNAUTHORIZED, "OAuth exchange failed");
-	await bootstrapUserSession(result.user);
-	setSessionCookie(cookies, result.sessionToken);
-	setRefreshCookie(cookies, result.refreshToken);
-	const dest = safeRedirectTarget(url.searchParams.get("redirectTo"), "/library");
-	redirect(303, dest);
-};
-
-export { GET };
-//# sourceMappingURL=_server.ts.js-Izol0_md.js.map

package/build/server/chunks/entries/endpoints/auth/supabase/callback/_server.ts.js-Izol0_md.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts.js-Izol0_md.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/auth/supabase/callback/_server.ts.js"],"sourcesContent":["import { r as getAuthProvider } from \"../../../../../chunks/providers.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { c as setRefreshCookie, l as setSessionCookie } from \"../../../../../chunks/admin-auth.server.js\";\nimport \"../../../../../chunks/auth.server.js\";\nimport { t as safeRedirectTarget } from \"../../../../../chunks/redirect.js\";\nimport { t as bootstrapUserSession } from \"../../../../../chunks/auth-bootstrap.server.js\";\nimport { redirect } from \"@sveltejs/kit\";\n//#region src/routes/auth/supabase/callback/+server.ts\n/**\n* GET /auth/supabase/callback?code=...&redirectTo=/library\n*\n* Completes a Supabase OAuth round-trip. Exchanges the authorization code\n* for a session, sets the session cookie, and redirects to `redirectTo`.\n*\n* Post-verification flow (data-row seeding + first-admin bootstrap) lives in\n* `bootstrapUserSession` so the email-link and OAuth paths follow the same\n* sequence in the same order.\n*/\nvar GET = async ({ url, cookies }) => {\n\tconst code = url.searchParams.get(\"code\");\n\tif (!code) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing authorization code\");\n\tconst oauth = getAuthProvider().oauth;\n\tif (!oauth) apiError(501, ApiErrorCode.INTERNAL, \"OAuth is not supported by the configured auth provider.\");\n\tconst result = await oauth.exchangeOAuthCode(code);\n\tif (!result) apiError(401, ApiErrorCode.UNAUTHORIZED, \"OAuth exchange failed\");\n\tawait bootstrapUserSession(result.user);\n\tsetSessionCookie(cookies, result.sessionToken);\n\tsetRefreshCookie(cookies, result.refreshToken);\n\tconst dest = safeRedirectTarget(url.searchParams.get(\"redirectTo\"), \"/library\");\n\tredirect(303, dest);\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAOA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK;AACtC,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;AAC1C,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,4BAA4B,CAAC;AACvF,CAAC,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC,KAAK;AACtC,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,yDAAyD,CAAC;AAC5G,CAAC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC;AACnD,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,uBAAuB,CAAC;AAC/E,CAAC,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;AACxC,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAC/C,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAC/C,CAAC,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;AAChF,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;AACpB;;;;"}

package/build/server/chunks/entries/endpoints/auth/supabase/start/_server.ts.js-BsuTO9ch.js

@@ -1,52 +0,0 @@
-import { a as getAuthProvider } from '../../../../../chunks/providers.server.js-B-ZmrvSG.js';
-import { a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-Bn15nthv.js';
-import { redirect } from '@sveltejs/kit';
-import '../../../../../chunks/shared-server.js-HBAhbQ8m.js';
-import '../../../../../chunks/src.js-BYv4z3-l.js';
-import 'zod';
-import '../../../../../chunks/limits.js-I-HAqbOg.js';
-import '../../../../../chunks/schema.js-GCZWhojT.js';
-import '../../../../../chunks/chunk-AYH5O3VG.js-YiX3ZqeT.js';
-import 'node:crypto';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import '../../../../../chunks/utils2.js-CRJ9AEdN.js';
-
-//#region src/routes/auth/supabase/start/+server.ts
-var ALLOWED_PROVIDERS = [
-	"google",
-	"github",
-	"azure",
-	"gitlab"
-];
-function isAllowedProvider(value) {
-	return value !== null && ALLOWED_PROVIDERS.includes(value);
-}
-/**
-* GET /auth/supabase/start?provider=google&redirectTo=/library
-*
-* Initiates an OAuth sign-in via Supabase Auth. The Supabase project must
-* have the named provider enabled in its dashboard. Bounces the browser to
-* the IdP's authorize endpoint; the IdP returns to `/auth/supabase/callback`
-* with a `?code=...`.
-*
-* `redirectTo` is preserved through the round trip via `?redirectTo=...` on
-* the callback URL we hand to Supabase.
-*/
-var GET = async ({ url }) => {
-	const provider = url.searchParams.get("provider");
-	if (!isAllowedProvider(provider)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid provider. Allowed: ${ALLOWED_PROVIDERS.join(", ")}`);
-	const oauth = getAuthProvider().oauth;
-	if (!oauth) apiError(501, ApiErrorCode.INTERNAL, "OAuth is not supported by the configured auth provider.");
-	const redirectTo = url.searchParams.get("redirectTo") ?? "/library";
-	const callbackUrl = new URL("/auth/supabase/callback", url.origin);
-	if (redirectTo.startsWith("/")) callbackUrl.searchParams.set("redirectTo", redirectTo);
-	const authorizationUrl = await oauth.getOAuthAuthorizationUrl(provider, callbackUrl.toString());
-	redirect(303, authorizationUrl);
-};
-
-export { GET };
-//# sourceMappingURL=_server.ts.js-BsuTO9ch.js.map

package/build/server/chunks/entries/endpoints/auth/supabase/start/_server.ts.js-BsuTO9ch.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts.js-BsuTO9ch.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/auth/supabase/start/_server.ts.js"],"sourcesContent":["import { r as getAuthProvider } from \"../../../../../chunks/providers.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport \"../../../../../chunks/auth.server.js\";\nimport { redirect } from \"@sveltejs/kit\";\n//#region src/routes/auth/supabase/start/+server.ts\nvar ALLOWED_PROVIDERS = [\n\t\"google\",\n\t\"github\",\n\t\"azure\",\n\t\"gitlab\"\n];\nfunction isAllowedProvider(value) {\n\treturn value !== null && ALLOWED_PROVIDERS.includes(value);\n}\n/**\n* GET /auth/supabase/start?provider=google&redirectTo=/library\n*\n* Initiates an OAuth sign-in via Supabase Auth. The Supabase project must\n* have the named provider enabled in its dashboard. Bounces the browser to\n* the IdP's authorize endpoint; the IdP returns to `/auth/supabase/callback`\n* with a `?code=...`.\n*\n* `redirectTo` is preserved through the round trip via `?redirectTo=...` on\n* the callback URL we hand to Supabase.\n*/\nvar GET = async ({ url }) => {\n\tconst provider = url.searchParams.get(\"provider\");\n\tif (!isAllowedProvider(provider)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid provider. Allowed: ${ALLOWED_PROVIDERS.join(\", \")}`);\n\tconst oauth = getAuthProvider().oauth;\n\tif (!oauth) apiError(501, ApiErrorCode.INTERNAL, \"OAuth is not supported by the configured auth provider.\");\n\tconst redirectTo = url.searchParams.get(\"redirectTo\") ?? \"/library\";\n\tconst callbackUrl = new URL(\"/auth/supabase/callback\", url.origin);\n\tif (redirectTo.startsWith(\"/\")) callbackUrl.searchParams.set(\"redirectTo\", redirectTo);\n\tconst authorizationUrl = await oauth.getOAuthAuthorizationUrl(provider, callbackUrl.toString());\n\tredirect(303, authorizationUrl);\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAIA;AACA,IAAI,iBAAiB,GAAG;AACxB,CAAC,QAAQ;AACT,CAAC,QAAQ;AACT,CAAC,OAAO;AACR,CAAC;AACD,CAAC;AACD,SAAS,iBAAiB,CAAC,KAAK,EAAE;AAClC,CAAC,OAAO,KAAK,KAAK,IAAI,IAAI,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC;AAC3D;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,KAAK;AAC7B,CAAC,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;AAClD,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,2BAA2B,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC9I,CAAC,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC,KAAK;AACtC,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,yDAAyD,CAAC;AAC5G,CAAC,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,UAAU;AACpE,CAAC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,yBAAyB,EAAE,GAAG,CAAC,MAAM,CAAC;AACnE,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC;AACvF,CAAC,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,wBAAwB,CAAC,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC;AAChG,CAAC,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAChC;;;;"}