@selvajs/selva 4.8.0-beta.7 → 4.8.0-beta.8

package/build/server/chunks/entries/endpoints/api/v1/definitions/_server.ts.js-wRPbCUEV.js

@@ -0,0 +1,113 @@
+import { g as toDefinitionListItem, i as GH_EXTENSIONS, j as CreateDefinitionInputSchema } from '../../../../../chunks/src.js-BYv4z3-l.js';
+import { f as getProjectProvider, B as fetchSchemaFromCompute, F as getDefinitionService } from '../../../../../chunks/providers.server.js-BNQzDpkf.js';
+import { n as requireCanCreateDefinition } from '../../../../../chunks/access.server.js-aOgtpt5D.js';
+import { a as apiError, A as ApiErrorCode, t as throwZodError, r as resolveServerForOrg } from '../../../../../chunks/api-errors.js-lCKk8A5c.js';
+import { g as MAX_DEFINITION_FILE_SIZE, M as MAX_IMAGE_FILE_SIZE } from '../../../../../chunks/computeLimits.js-xqHtQS62.js';
+import { l as listVisibleDefinitions } from '../../../../../chunks/visibility.server.js-DhkrLP9i.js';
+import { p as parseDefinitionListOptions } from '../../../../../chunks/pagination.server.js-Dh0ZmkaY.js';
+import { a as apiRoute, r as requireCaller, c as collection, b as requireUpload, f as formText, d as created } from '../../../../../chunks/route.js-C2wyVSgl.js';
+import { randomUUID } from 'node:crypto';
+import 'zod';
+import '../../../../../chunks/shared-server.js-HBAhbQ8m.js';
+import '../../../../../chunks/limits.js-I-HAqbOg.js';
+import '../../../../../chunks/schema.js-o6B8HHvu.js';
+import '../../../../../chunks/chunk-AYH5O3VG.js-YiX3ZqeT.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '../../../../../chunks/utils2.js-smxOjZHZ.js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/api/v1/definitions/+server.ts
+var LISTABLE_STATUSES = [
+	"draft",
+	"published",
+	"archived"
+];
+/**
+* Definitions the caller can view. Visibility is resolved into the query via
+* `projectIds`, so `limit`/`nextCursor` describe the filtered set.
+*/
+var GET = apiRoute("Failed to list definitions", async ({ locals, url }) => {
+	const { ctx } = requireCaller(locals);
+	const statusParam = url.searchParams.get("status");
+	if (statusParam && !LISTABLE_STATUSES.includes(statusParam)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `status must be one of: ${LISTABLE_STATUSES.join(", ")}`);
+	const page = await listVisibleDefinitions(ctx, {
+		...parseDefinitionListOptions(url),
+		projectId: url.searchParams.get("projectId") ?? void 0,
+		statuses: statusParam ? [statusParam] : void 0
+	});
+	return collection({
+		items: page.items.map(toDefinitionListItem),
+		nextCursor: page.nextCursor
+	});
+});
+function parseTags(raw) {
+	if (!raw) return void 0;
+	const tags = raw.split(",").map((t) => t.trim()).filter(Boolean);
+	return tags.length ? tags : void 0;
+}
+/** Create a definition — metadata and the Grasshopper file in one request. */
+var POST = apiRoute("Failed to create definition", async ({ request, locals }) => {
+	const ctx = locals.ctx;
+	const form = await request.formData();
+	const { file, extension } = requireUpload(form, "file", {
+		maxBytes: MAX_DEFINITION_FILE_SIZE,
+		extensions: GH_EXTENSIONS,
+		label: "Grasshopper (.gh or .ghx) file"
+	});
+	const imageFile = form.get("image");
+	if (imageFile instanceof File && imageFile.size > MAX_IMAGE_FILE_SIZE) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Image too large. Max size: ${MAX_IMAGE_FILE_SIZE / 1048576} MB`);
+	let projectId = formText(form, "projectId");
+	if (!projectId) {
+		if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
+		const fallback = (await getProjectProvider().listProjects(ctx, ctx.actingOrgId, { limit: 1 })).items[0];
+		if (!fallback) apiError(500, ApiErrorCode.INTERNAL, "No project configured");
+		projectId = fallback.id;
+	}
+	const { project } = await requireCanCreateDefinition(locals, projectId);
+	const parsed = CreateDefinitionInputSchema.safeParse({
+		displayName: formText(form, "displayName"),
+		description: formText(form, "description"),
+		category: formText(form, "category"),
+		coverImage: formText(form, "coverImage"),
+		tags: parseTags(formText(form, "tags")),
+		projectId,
+		computeServerId: formText(form, "computeServerId")
+	});
+	if (!parsed.success) throwZodError(parsed.error);
+	const guid = randomUUID();
+	const fileData = new Uint8Array(await file.arrayBuffer());
+	const server = await resolveServerForOrg(ctx, project.orgId, { definitionPin: parsed.data.computeServerId ?? null });
+	const schema = await fetchSchemaFromCompute(fileData, server);
+	const { record, version } = await getDefinitionService().create(ctx, {
+		guid,
+		projectId: parsed.data.projectId,
+		ownerId: locals.user.id,
+		fileExt: extension.slice(1),
+		originalFilename: file.name,
+		computeServerId: parsed.data.computeServerId,
+		displayName: parsed.data.displayName.trim(),
+		description: parsed.data.description,
+		category: parsed.data.category,
+		tags: parsed.data.tags,
+		coverImage: parsed.data.coverImage
+	}, fileData, schema);
+	let coverImage = record.coverImage;
+	if (imageFile instanceof File && imageFile.size > 0) {
+		const imageData = new Uint8Array(await imageFile.arrayBuffer());
+		coverImage = await getDefinitionService().saveCoverImage(ctx, guid, imageData);
+	}
+	return created({
+		guid,
+		version,
+		coverImage
+	});
+});
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-wRPbCUEV.js.map

package/build/server/chunks/entries/endpoints/api/v1/definitions/_server.ts.js-wRPbCUEV.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-wRPbCUEV.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/definitions/_server.ts.js"],"sourcesContent":["import { d as GH_EXTENSIONS, f as toDefinitionListItem, o as CreateDefinitionInputSchema } from \"../../../../../chunks/src.js\";\nimport { _ as getProjectProvider, c as getDefinitionService, j as fetchSchemaFromCompute } from \"../../../../../chunks/providers.server.js\";\nimport { s as requireCanCreateDefinition } from \"../../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, o as resolveServerForOrg, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { a as MAX_DEFINITION_FILE_SIZE, o as MAX_IMAGE_FILE_SIZE } from \"../../../../../chunks/computeLimits.js\";\nimport \"../../../../../chunks/definitions.js\";\nimport \"../../../../../chunks/admin-config.js\";\nimport { n as listVisibleDefinitions } from \"../../../../../chunks/visibility.server.js\";\nimport { t as parseDefinitionListOptions } from \"../../../../../chunks/pagination.server.js\";\nimport { c as requireCaller, i as formText, n as collection, r as created, t as apiRoute, u as requireUpload } from \"../../../../../chunks/route.js\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/api/v1/definitions/+server.ts\nvar LISTABLE_STATUSES = [\n\t\"draft\",\n\t\"published\",\n\t\"archived\"\n];\n/**\n* Definitions the caller can view. Visibility is resolved into the query via\n* `projectIds`, so `limit`/`nextCursor` describe the filtered set.\n*/\nvar GET = apiRoute(\"Failed to list definitions\", async ({ locals, url }) => {\n\tconst { ctx } = requireCaller(locals);\n\tconst statusParam = url.searchParams.get(\"status\");\n\tif (statusParam && !LISTABLE_STATUSES.includes(statusParam)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `status must be one of: ${LISTABLE_STATUSES.join(\", \")}`);\n\tconst page = await listVisibleDefinitions(ctx, {\n\t\t...parseDefinitionListOptions(url),\n\t\tprojectId: url.searchParams.get(\"projectId\") ?? void 0,\n\t\tstatuses: statusParam ? [statusParam] : void 0\n\t});\n\treturn collection({\n\t\titems: page.items.map(toDefinitionListItem),\n\t\tnextCursor: page.nextCursor\n\t});\n});\nfunction parseTags(raw) {\n\tif (!raw) return void 0;\n\tconst tags = raw.split(\",\").map((t) => t.trim()).filter(Boolean);\n\treturn tags.length ? tags : void 0;\n}\n/** Create a definition — metadata and the Grasshopper file in one request. */\nvar POST = apiRoute(\"Failed to create definition\", async ({ request, locals }) => {\n\tconst ctx = locals.ctx;\n\tconst form = await request.formData();\n\tconst { file, extension } = requireUpload(form, \"file\", {\n\t\tmaxBytes: MAX_DEFINITION_FILE_SIZE,\n\t\textensions: GH_EXTENSIONS,\n\t\tlabel: \"Grasshopper (.gh or .ghx) file\"\n\t});\n\tconst imageFile = form.get(\"image\");\n\tif (imageFile instanceof File && imageFile.size > MAX_IMAGE_FILE_SIZE) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Image too large. Max size: ${MAX_IMAGE_FILE_SIZE / 1048576} MB`);\n\tlet projectId = formText(form, \"projectId\");\n\tif (!projectId) {\n\t\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\t\tconst fallback = (await getProjectProvider().listProjects(ctx, ctx.actingOrgId, { limit: 1 })).items[0];\n\t\tif (!fallback) apiError(500, ApiErrorCode.INTERNAL, \"No project configured\");\n\t\tprojectId = fallback.id;\n\t}\n\tconst { project } = await requireCanCreateDefinition(locals, projectId);\n\tconst parsed = CreateDefinitionInputSchema.safeParse({\n\t\tdisplayName: formText(form, \"displayName\"),\n\t\tdescription: formText(form, \"description\"),\n\t\tcategory: formText(form, \"category\"),\n\t\tcoverImage: formText(form, \"coverImage\"),\n\t\ttags: parseTags(formText(form, \"tags\")),\n\t\tprojectId,\n\t\tcomputeServerId: formText(form, \"computeServerId\")\n\t});\n\tif (!parsed.success) throwZodError(parsed.error);\n\tconst guid = randomUUID();\n\tconst fileData = new Uint8Array(await file.arrayBuffer());\n\tconst server = await resolveServerForOrg(ctx, project.orgId, { definitionPin: parsed.data.computeServerId ?? null });\n\tconst schema = await fetchSchemaFromCompute(fileData, server);\n\tconst { record, version } = await getDefinitionService().create(ctx, {\n\t\tguid,\n\t\tprojectId: parsed.data.projectId,\n\t\townerId: locals.user.id,\n\t\tfileExt: extension.slice(1),\n\t\toriginalFilename: file.name,\n\t\tcomputeServerId: parsed.data.computeServerId,\n\t\tdisplayName: parsed.data.displayName.trim(),\n\t\tdescription: parsed.data.description,\n\t\tcategory: parsed.data.category,\n\t\ttags: parsed.data.tags,\n\t\tcoverImage: parsed.data.coverImage\n\t}, fileData, schema);\n\tlet coverImage = record.coverImage;\n\tif (imageFile instanceof File && imageFile.size > 0) {\n\t\tconst imageData = new Uint8Array(await imageFile.arrayBuffer());\n\t\tcoverImage = await getDefinitionService().saveCoverImage(ctx, guid, imageData);\n\t}\n\treturn created({\n\t\tguid,\n\t\tversion,\n\t\tcoverImage\n\t});\n});\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAWA;AACA,IAAI,iBAAiB,GAAG;AACxB,CAAC,OAAO;AACR,CAAC,WAAW;AACZ,CAAC;AACD,CAAC;AACD;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,4BAA4B,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AAC5E,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AACtC,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;AACnD,CAAC,IAAI,WAAW,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,uBAAuB,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACrK,CAAC,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE;AAChD,EAAE,GAAG,0BAA0B,CAAC,GAAG,CAAC;AACpC,EAAE,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC;AACxD,EAAE,QAAQ,EAAE,WAAW,GAAG,CAAC,WAAW,CAAC,GAAG,KAAK;AAC/C,EAAE,CAAC;AACH,CAAC,OAAO,UAAU,CAAC;AACnB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC;AAC7C,EAAE,UAAU,EAAE,IAAI,CAAC;AACnB,EAAE,CAAC;AACH,CAAC;AACD,SAAS,SAAS,CAAC,GAAG,EAAE;AACxB,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,MAAM;AACxB,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;AACjE,CAAC,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,MAAM;AACnC;AACA;AACG,IAAC,IAAI,GAAG,QAAQ,CAAC,6BAA6B,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAClF,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;AACtC,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE;AACzD,EAAE,QAAQ,EAAE,wBAAwB;AACpC,EAAE,UAAU,EAAE,aAAa;AAC3B,EAAE,KAAK,EAAE;AACT,EAAE,CAAC;AACH,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AACpC,CAAC,IAAI,SAAS,YAAY,IAAI,IAAI,SAAS,CAAC,IAAI,GAAG,mBAAmB,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,2BAA2B,EAAE,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;AACvL,CAAC,IAAI,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;AAC5C,CAAC,IAAI,CAAC,SAAS,EAAE;AACjB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC/F,EAAE,MAAM,QAAQ,GAAG,CAAC,MAAM,kBAAkB,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AACzG,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,uBAAuB,CAAC;AAC9E,EAAE,SAAS,GAAG,QAAQ,CAAC,EAAE;AACzB,CAAC;AACD,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,SAAS,CAAC;AACxE,CAAC,MAAM,MAAM,GAAG,2BAA2B,CAAC,SAAS,CAAC;AACtD,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;AAC5C,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;AAC5C,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;AACtC,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;AAC1C,EAAE,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACzC,EAAE,SAAS;AACX,EAAE,eAAe,EAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB;AACnD,EAAE,CAAC;AACH,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,MAAM,IAAI,GAAG,UAAU,EAAE;AAC1B,CAAC,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AAC1D,CAAC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;AACrH,CAAC,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC;AAC9D,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,oBAAoB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE;AACtE,EAAE,IAAI;AACN,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;AAClC,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AACzB,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7B,EAAE,gBAAgB,EAAE,IAAI,CAAC,IAAI;AAC7B,EAAE,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe;AAC9C,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;AAC7C,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AACtC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;AAChC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AACxB,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC;AAC1B,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC;AACrB,CAAC,IAAI,UAAU,GAAG,MAAM,CAAC,UAAU;AACnC,CAAC,IAAI,SAAS,YAAY,IAAI,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE;AACtD,EAAE,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC;AACjE,EAAE,UAAU,GAAG,MAAM,oBAAoB,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC;AAChF,CAAC;AACD,CAAC,OAAO,OAAO,CAAC;AAChB,EAAE,IAAI;AACN,EAAE,OAAO;AACT,EAAE;AACF,EAAE,CAAC;AACH,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/me/_server.ts.js-BbwoeR7U.js

@@ -0,0 +1,39 @@
+import { a as apiRoute, r as requireCaller } from '../../../../../chunks/route.js-C2wyVSgl.js';
+import { json } from '@sveltejs/kit';
+import '../../../../../chunks/api-errors.js-lCKk8A5c.js';
+import '../../../../../chunks/src.js-BYv4z3-l.js';
+import 'zod';
+import '../../../../../chunks/providers.server.js-BNQzDpkf.js';
+import '../../../../../chunks/shared-server.js-HBAhbQ8m.js';
+import '../../../../../chunks/limits.js-I-HAqbOg.js';
+import '../../../../../chunks/schema.js-o6B8HHvu.js';
+import '../../../../../chunks/chunk-AYH5O3VG.js-YiX3ZqeT.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../chunks/utils2.js-smxOjZHZ.js';
+
+//#region src/routes/api/v1/me/+server.ts
+/**
+* Whoami. The first call a non-browser client makes, and the only way a token
+* holder can see which org their credential resolved into — `actingOrgId` is
+* derived per request from the caller's membership, not frozen at mint time.
+*/
+var GET = apiRoute("Failed to load identity", async ({ locals }) => {
+	const { ctx, user } = requireCaller(locals);
+	return json({
+		userId: user.id,
+		email: user.email,
+		displayName: locals.profile?.displayName,
+		actingOrgId: ctx.actingOrgId,
+		platformPermissions: ctx.platformPermissions,
+		orgPermissions: ctx.orgPermissions,
+		starredDefinitions: locals.profile?.starredDefinitions ?? []
+	});
+});
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-BbwoeR7U.js.map

package/build/server/chunks/entries/endpoints/api/v1/me/_server.ts.js-BbwoeR7U.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-BbwoeR7U.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/me/_server.ts.js"],"sourcesContent":["import { c as requireCaller, t as apiRoute } from \"../../../../../chunks/route.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/v1/me/+server.ts\n/**\n* Whoami. The first call a non-browser client makes, and the only way a token\n* holder can see which org their credential resolved into — `actingOrgId` is\n* derived per request from the caller's membership, not frozen at mint time.\n*/\nvar GET = apiRoute(\"Failed to load identity\", async ({ locals }) => {\n\tconst { ctx, user } = requireCaller(locals);\n\treturn json({\n\t\tuserId: user.id,\n\t\temail: user.email,\n\t\tdisplayName: locals.profile?.displayName,\n\t\tactingOrgId: ctx.actingOrgId,\n\t\tplatformPermissions: ctx.platformPermissions,\n\t\torgPermissions: ctx.orgPermissions,\n\t\tstarredDefinitions: locals.profile?.starredDefinitions ?? []\n\t});\n});\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAEA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,yBAAyB,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AAC5C,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;AACjB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK;AACnB,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW;AAC1C,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW;AAC9B,EAAE,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;AAC9C,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc;AACpC,EAAE,kBAAkB,EAAE,MAAM,CAAC,OAAO,EAAE,kBAAkB,IAAI;AAC5D,EAAE,CAAC;AACH,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/me/starred/_guid_/_server.ts.js-mpR6lCht.js

@@ -0,0 +1,36 @@
+import { u as getUserProfileStore } from '../../../../../../../chunks/providers.server.js-BNQzDpkf.js';
+import { a as apiRoute, r as requireCaller, h as requireParams, n as noContent } from '../../../../../../../chunks/route.js-C2wyVSgl.js';
+import '../../../../../../../chunks/shared-server.js-HBAhbQ8m.js';
+import '../../../../../../../chunks/src.js-BYv4z3-l.js';
+import 'zod';
+import '../../../../../../../chunks/limits.js-I-HAqbOg.js';
+import '../../../../../../../chunks/schema.js-o6B8HHvu.js';
+import '../../../../../../../chunks/chunk-AYH5O3VG.js-YiX3ZqeT.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../../chunks/api-errors.js-lCKk8A5c.js';
+import '../../../../../../../chunks/utils2.js-smxOjZHZ.js';
+import '@sveltejs/kit';
+
+//#region src/routes/api/v1/me/starred/[guid]/+server.ts
+/** Star a definition for the calling user. Idempotent. */
+var PUT = apiRoute("Failed to star definition", async ({ params, locals }) => {
+	const { ctx, user } = requireCaller(locals);
+	const { guid } = requireParams(params, "guid");
+	await getUserProfileStore().starDefinition(ctx, user.id, guid);
+	return noContent();
+});
+/** Unstar a definition for the calling user. Idempotent. */
+var DELETE = apiRoute("Failed to unstar definition", async ({ params, locals }) => {
+	const { ctx, user } = requireCaller(locals);
+	const { guid } = requireParams(params, "guid");
+	await getUserProfileStore().unstarDefinition(ctx, user.id, guid);
+	return noContent();
+});
+
+export { DELETE, PUT };
+//# sourceMappingURL=_server.ts.js-mpR6lCht.js.map

package/build/server/chunks/entries/endpoints/api/v1/me/starred/_guid_/_server.ts.js-mpR6lCht.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-mpR6lCht.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/me/starred/_guid_/_server.ts.js"],"sourcesContent":["import { x as getUserProfileStore } from \"../../../../../../../chunks/providers.server.js\";\nimport { a as noContent, c as requireCaller, l as requireParams, t as apiRoute } from \"../../../../../../../chunks/route.js\";\n//#region src/routes/api/v1/me/starred/[guid]/+server.ts\n/** Star a definition for the calling user. Idempotent. */\nvar PUT = apiRoute(\"Failed to star definition\", async ({ params, locals }) => {\n\tconst { ctx, user } = requireCaller(locals);\n\tconst { guid } = requireParams(params, \"guid\");\n\tawait getUserProfileStore().starDefinition(ctx, user.id, guid);\n\treturn noContent();\n});\n/** Unstar a definition for the calling user. Idempotent. */\nvar DELETE = apiRoute(\"Failed to unstar definition\", async ({ params, locals }) => {\n\tconst { ctx, user } = requireCaller(locals);\n\tconst { guid } = requireParams(params, \"guid\");\n\tawait getUserProfileStore().unstarDefinition(ctx, user.id, guid);\n\treturn noContent();\n});\n//#endregion\nexport { DELETE, PUT };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAEA;AACA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,2BAA2B,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC9E,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AAC5C,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC;AAC/C,CAAC,MAAM,mBAAmB,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;AAC/D,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;AACD;AACG,IAAC,MAAM,GAAG,QAAQ,CAAC,6BAA6B,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AACnF,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AAC5C,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC;AAC/C,CAAC,MAAM,mBAAmB,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;AACjE,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/orgs/_orgId_/_server.ts.js-Bne8wQ02.js

@@ -0,0 +1,30 @@
+import { e as getOrganizationProvider } from '../../../../../../chunks/providers.server.js-BNQzDpkf.js';
+import { q as requireActingOrg } from '../../../../../../chunks/access.server.js-aOgtpt5D.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-lCKk8A5c.js';
+import { a as apiRoute } from '../../../../../../chunks/route.js-C2wyVSgl.js';
+import { json } from '@sveltejs/kit';
+import '../../../../../../chunks/shared-server.js-HBAhbQ8m.js';
+import '../../../../../../chunks/src.js-BYv4z3-l.js';
+import 'zod';
+import '../../../../../../chunks/limits.js-I-HAqbOg.js';
+import '../../../../../../chunks/schema.js-o6B8HHvu.js';
+import '../../../../../../chunks/chunk-AYH5O3VG.js-YiX3ZqeT.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/utils2.js-smxOjZHZ.js';
+
+//#region src/routes/api/v1/orgs/[orgId]/+server.ts
+/** The acting org's record — name, slug, and branding asset URLs. */
+var GET = apiRoute("Failed to load organization", async ({ params, locals }) => {
+	const { ctx, orgId } = requireActingOrg(locals, params.orgId);
+	const org = await getOrganizationProvider().getOrg(ctx, orgId);
+	if (!org) apiError(404, ApiErrorCode.NOT_FOUND, "Organization not found");
+	return json(org);
+});
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-Bne8wQ02.js.map

package/build/server/chunks/entries/endpoints/api/v1/orgs/_orgId_/_server.ts.js-Bne8wQ02.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-Bne8wQ02.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/orgs/_orgId_/_server.ts.js"],"sourcesContent":["import { m as getOrganizationProvider } from \"../../../../../../chunks/providers.server.js\";\nimport { o as requireActingOrg } from \"../../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { t as apiRoute } from \"../../../../../../chunks/route.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/v1/orgs/[orgId]/+server.ts\n/** The acting org's record — name, slug, and branding asset URLs. */\nvar GET = apiRoute(\"Failed to load organization\", async ({ params, locals }) => {\n\tconst { ctx, orgId } = requireActingOrg(locals, params.orgId);\n\tconst org = await getOrganizationProvider().getOrg(ctx, orgId);\n\tif (!org) apiError(404, ApiErrorCode.NOT_FOUND, \"Organization not found\");\n\treturn json(org);\n});\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAKA;AACA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,6BAA6B,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAChF,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;AAC9D,CAAC,MAAM,GAAG,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC;AAC/D,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,wBAAwB,CAAC;AAC1E,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC;AACjB,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/orgs/_orgId_/assets/_kind_/_server.ts.js-YFqoNrlT.js

@@ -0,0 +1,74 @@
+import { n as OrgAssetKindSchema } from '../../../../../../../../chunks/src.js-BYv4z3-l.js';
+import { e as getOrganizationProvider, G as getOrgAssetService } from '../../../../../../../../chunks/providers.server.js-BNQzDpkf.js';
+import { s as requireManageOrgMembers, q as requireActingOrg } from '../../../../../../../../chunks/access.server.js-aOgtpt5D.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../../../chunks/api-errors.js-lCKk8A5c.js';
+import { M as MAX_IMAGE_FILE_SIZE } from '../../../../../../../../chunks/computeLimits.js-xqHtQS62.js';
+import { a as apiRoute, b as requireUpload, n as noContent } from '../../../../../../../../chunks/route.js-C2wyVSgl.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../../../../chunks/shared-server.js-HBAhbQ8m.js';
+import '../../../../../../../../chunks/limits.js-I-HAqbOg.js';
+import '../../../../../../../../chunks/schema.js-o6B8HHvu.js';
+import '../../../../../../../../chunks/chunk-AYH5O3VG.js-YiX3ZqeT.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../../../chunks/utils2.js-smxOjZHZ.js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/api/v1/orgs/[orgId]/assets/[kind]/+server.ts
+/**
+* Org branding assets, generic over kind (`logo`, `favicon`, …). Gated on
+* `manage_org_members` — org branding is an org-admin action.
+*
+* Raster images and SVG are both accepted. Every input is rasterized to WebP by
+* the shared transcoder inside the storage provider, so SVG carries no XSS
+* surface: no vector blob is ever stored or served. The allowlist below is the
+* HTTP gate; the rasterization is the security control.
+*/
+var ALLOWED_CONTENT_TYPES = /* @__PURE__ */ new Set([
+	"image/png",
+	"image/jpeg",
+	"image/webp",
+	"image/gif",
+	"image/svg+xml"
+]);
+function parseKind(params) {
+	const kind = OrgAssetKindSchema.safeParse(params.kind);
+	if (!kind.success) apiError(404, ApiErrorCode.NOT_FOUND, `Unknown asset kind '${params.kind}'`);
+	return kind.data;
+}
+var POST = apiRoute("Failed to upload asset", async ({ params, request, locals }) => {
+	requireManageOrgMembers(locals);
+	const kind = parseKind(params);
+	const { ctx, orgId } = requireActingOrg(locals, params.orgId);
+	if (!await getOrganizationProvider().getOrg(ctx, orgId)) apiError(404, ApiErrorCode.NOT_FOUND, "Organization not found");
+	const { file } = requireUpload(await request.formData(), "image", {
+		maxBytes: MAX_IMAGE_FILE_SIZE,
+		contentTypes: {
+			allowed: ALLOWED_CONTENT_TYPES,
+			message: "Unsupported image type. Allowed: PNG, JPG, WebP, GIF, SVG"
+		},
+		label: "Image"
+	});
+	const bytes = new Uint8Array(await file.arrayBuffer());
+	const url = await getOrgAssetService().saveAsset(ctx, orgId, kind, bytes, file.type);
+	return json({
+		kind,
+		url
+	});
+});
+var DELETE = apiRoute("Failed to remove asset", async ({ params, locals }) => {
+	requireManageOrgMembers(locals);
+	const kind = parseKind(params);
+	const { ctx, orgId } = requireActingOrg(locals, params.orgId);
+	await getOrgAssetService().removeAsset(ctx, orgId, kind);
+	return noContent();
+});
+
+export { DELETE, POST };
+//# sourceMappingURL=_server.ts.js-YFqoNrlT.js.map

package/build/server/chunks/entries/endpoints/api/v1/orgs/_orgId_/assets/_kind_/_server.ts.js-YFqoNrlT.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-YFqoNrlT.js","sources":["../../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/orgs/_orgId_/assets/_kind_/_server.ts.js"],"sourcesContent":["import { x as OrgAssetKindSchema } from \"../../../../../../../../chunks/src.js\";\nimport { m as getOrganizationProvider, p as getOrgAssetService } from \"../../../../../../../../chunks/providers.server.js\";\nimport { S as requireManageOrgMembers, o as requireActingOrg } from \"../../../../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../../../chunks/api-errors.js\";\nimport { o as MAX_IMAGE_FILE_SIZE } from \"../../../../../../../../chunks/computeLimits.js\";\nimport \"../../../../../../../../chunks/admin-config.js\";\nimport { a as noContent, t as apiRoute, u as requireUpload } from \"../../../../../../../../chunks/route.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/v1/orgs/[orgId]/assets/[kind]/+server.ts\n/**\n* Org branding assets, generic over kind (`logo`, `favicon`, …). Gated on\n* `manage_org_members` — org branding is an org-admin action.\n*\n* Raster images and SVG are both accepted. Every input is rasterized to WebP by\n* the shared transcoder inside the storage provider, so SVG carries no XSS\n* surface: no vector blob is ever stored or served. The allowlist below is the\n* HTTP gate; the rasterization is the security control.\n*/\nvar ALLOWED_CONTENT_TYPES = /* @__PURE__ */ new Set([\n\t\"image/png\",\n\t\"image/jpeg\",\n\t\"image/webp\",\n\t\"image/gif\",\n\t\"image/svg+xml\"\n]);\nfunction parseKind(params) {\n\tconst kind = OrgAssetKindSchema.safeParse(params.kind);\n\tif (!kind.success) apiError(404, ApiErrorCode.NOT_FOUND, `Unknown asset kind '${params.kind}'`);\n\treturn kind.data;\n}\nvar POST = apiRoute(\"Failed to upload asset\", async ({ params, request, locals }) => {\n\trequireManageOrgMembers(locals);\n\tconst kind = parseKind(params);\n\tconst { ctx, orgId } = requireActingOrg(locals, params.orgId);\n\tif (!await getOrganizationProvider().getOrg(ctx, orgId)) apiError(404, ApiErrorCode.NOT_FOUND, \"Organization not found\");\n\tconst { file } = requireUpload(await request.formData(), \"image\", {\n\t\tmaxBytes: MAX_IMAGE_FILE_SIZE,\n\t\tcontentTypes: {\n\t\t\tallowed: ALLOWED_CONTENT_TYPES,\n\t\t\tmessage: \"Unsupported image type. Allowed: PNG, JPG, WebP, GIF, SVG\"\n\t\t},\n\t\tlabel: \"Image\"\n\t});\n\tconst bytes = new Uint8Array(await file.arrayBuffer());\n\tconst url = await getOrgAssetService().saveAsset(ctx, orgId, kind, bytes, file.type);\n\treturn json({\n\t\tkind,\n\t\turl\n\t});\n});\nvar DELETE = apiRoute(\"Failed to remove asset\", async ({ params, locals }) => {\n\trequireManageOrgMembers(locals);\n\tconst kind = parseKind(params);\n\tconst { ctx, orgId } = requireActingOrg(locals, params.orgId);\n\tawait getOrgAssetService().removeAsset(ctx, orgId, kind);\n\treturn noContent();\n});\n//#endregion\nexport { DELETE, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAQA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,qBAAqB,mBAAmB,IAAI,GAAG,CAAC;AACpD,CAAC,WAAW;AACZ,CAAC,YAAY;AACb,CAAC,YAAY;AACb,CAAC,WAAW;AACZ,CAAC;AACD,CAAC,CAAC;AACF,SAAS,SAAS,CAAC,MAAM,EAAE;AAC3B,CAAC,MAAM,IAAI,GAAG,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACvD,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAChG,CAAC,OAAO,IAAI,CAAC,IAAI;AACjB;AACG,IAAC,IAAI,GAAG,QAAQ,CAAC,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrF,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC;AAC/B,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;AAC9D,CAAC,IAAI,CAAC,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,wBAAwB,CAAC;AACzH,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE;AACnE,EAAE,QAAQ,EAAE,mBAAmB;AAC/B,EAAE,YAAY,EAAE;AAChB,GAAG,OAAO,EAAE,qBAAqB;AACjC,GAAG,OAAO,EAAE;AACZ,GAAG;AACH,EAAE,KAAK,EAAE;AACT,EAAE,CAAC;AACH,CAAC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AACvD,CAAC,MAAM,GAAG,GAAG,MAAM,kBAAkB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC;AACrF,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,IAAI;AACN,EAAE;AACF,EAAE,CAAC;AACH,CAAC;AACE,IAAC,MAAM,GAAG,QAAQ,CAAC,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC9E,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC;AAC/B,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;AAC9D,CAAC,MAAM,kBAAkB,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC;AACzD,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/orgs/_orgId_/compute/_server.ts.js-BawOzELE.js

@@ -0,0 +1,101 @@
+import '../../../../../../../chunks/src.js-BYv4z3-l.js';
+import { n as getComputeServerConfigStore, y as isOrgServer, m as isPlatformServer, k as flag } from '../../../../../../../chunks/providers.server.js-BNQzDpkf.js';
+import { s as serversVisibleTo } from '../../../../../../../chunks/utils2.js-smxOjZHZ.js';
+import { t as requireManageOrgCompute, q as requireActingOrg } from '../../../../../../../chunks/access.server.js-aOgtpt5D.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../../chunks/api-errors.js-lCKk8A5c.js';
+import { v as validateIncomingServers, s as storedKeysById, r as resolveApiKey, e as evictChangedServers } from '../../../../../../../chunks/serverConfigWrite.js-C6BTSTgd.js';
+import { a as apiRoute, g as shaped, e as parseBody, n as noContent } from '../../../../../../../chunks/route.js-C2wyVSgl.js';
+import { O as OrgComputeResponseSchema } from '../../../../../../../chunks/responses.js-BHDdfIc5.js';
+import { O as OrgComputePatchBodySchema } from '../../../../../../../chunks/bodies.js-DzvLeLhi.js';
+import 'zod';
+import '../../../../../../../chunks/shared-server.js-HBAhbQ8m.js';
+import '../../../../../../../chunks/limits.js-I-HAqbOg.js';
+import '../../../../../../../chunks/schema.js-o6B8HHvu.js';
+import '../../../../../../../chunks/chunk-AYH5O3VG.js-YiX3ZqeT.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '../../../../../../../chunks/engine.server.js-sJlMeaP6.js';
+import '../../../../../../../chunks/computeLimits.js-xqHtQS62.js';
+import 'node:dns/promises';
+import 'node:net';
+import 'zlib';
+import 'util';
+
+//#region src/routes/api/v1/orgs/[orgId]/compute/+server.ts
+/**
+* Per-org compute endpoint. Manages this org's own servers
+* (`scope: 'org'`) and the org's default selection
+* (`orgDefaults[orgId]`). Platform servers and the global default are
+* read-only here — they're managed by `manage_compute` via `/api/admin/compute`.
+*
+* Authorization: org `owner`/`admin` with `manage_org_compute`. The URL `orgId`
+* must equal the caller's `actingOrgId`. Gated by the platform flag
+* `ALLOW_ORG_COMPUTE_OVERRIDE`; when off, both methods 403.
+*/
+function requireFlag() {
+	if (!flag("ALLOW_ORG_COMPUTE_OVERRIDE")) apiError(403, ApiErrorCode.FORBIDDEN, "Per-org compute override is disabled on this instance (ALLOW_ORG_COMPUTE_OVERRIDE).");
+}
+var GET = apiRoute("Failed to load org compute config", async ({ params, locals }) => {
+	requireFlag();
+	requireManageOrgCompute(locals);
+	const { ctx, orgId } = requireActingOrg(locals, params.orgId);
+	const config = await getComputeServerConfigStore().getConfig(ctx);
+	const owned = config.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => ({
+		...s,
+		hasApiKey: !!s.hasApiKey
+	}));
+	const catalog = serversVisibleTo(config, orgId).map((s) => ({
+		id: s.id,
+		label: s.label,
+		serverUrl: s.serverUrl,
+		scope: s.scope,
+		source: isPlatformServer(s) ? "platform" : "org",
+		timeoutMs: s.timeoutMs,
+		retryCount: s.retryCount
+	}));
+	return shaped(OrgComputeResponseSchema, {
+		servers: owned,
+		defaultServerId: config.orgDefaults?.[orgId] ?? null,
+		globalDefaultServerId: config.defaultServerId ?? null,
+		catalog
+	});
+});
+var PATCH = apiRoute("Failed to save org compute config", async ({ params, request, locals }) => {
+	requireFlag();
+	requireManageOrgCompute(locals);
+	const { ctx, orgId } = requireActingOrg(locals, params.orgId);
+	const incoming = await parseBody(request, OrgComputePatchBodySchema);
+	validateIncomingServers(incoming.servers);
+	const provider = getComputeServerConfigStore();
+	const existing = await provider.getConfig(ctx, { includeApiKeys: true });
+	const storedKeys = storedKeysById(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId));
+	const next = incoming.servers.map((s) => ({
+		id: s.id,
+		scope: "org",
+		ownerOrgId: orgId,
+		label: s.label,
+		serverUrl: s.serverUrl,
+		timeoutMs: s.timeoutMs,
+		retryCount: s.retryCount,
+		apiKey: resolveApiKey(s.apiKey, storedKeys.get(s.id))
+	}));
+	if (typeof incoming.defaultServerId === "string") {
+		const projected = {
+			servers: [...existing.servers.filter((s) => !(isOrgServer(s) && s.ownerOrgId === orgId)), ...next],
+			defaultServerId: existing.defaultServerId,
+			orgDefaults: existing.orgDefaults
+		};
+		if (!new Set(serversVisibleTo(projected, orgId).map((s) => s.id)).has(incoming.defaultServerId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, "defaultServerId must reference a server visible to this organization");
+	}
+	await provider.saveOrgServers(ctx, orgId, next, incoming.defaultServerId);
+	evictChangedServers(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId), next);
+	return noContent();
+});
+
+export { GET, PATCH };
+//# sourceMappingURL=_server.ts.js-BawOzELE.js.map

package/build/server/chunks/entries/endpoints/api/v1/orgs/_orgId_/compute/_server.ts.js-BawOzELE.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-BawOzELE.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/orgs/_orgId_/compute/_server.ts.js"],"sourcesContent":["import \"../../../../../../../chunks/src.js\";\nimport { F as isOrgServer, I as isPlatformServer, a as getComputeServerConfigStore, t as flag } from \"../../../../../../../chunks/providers.server.js\";\nimport { a as serversVisibleTo } from \"../../../../../../../chunks/utils2.js\";\nimport { o as requireActingOrg, x as requireManageOrgCompute } from \"../../../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../../chunks/api-errors.js\";\nimport { i as evictChangedServers, n as storedKeysById, r as validateIncomingServers, t as resolveApiKey } from \"../../../../../../../chunks/serverConfigWrite.js\";\nimport { a as noContent, d as shaped, o as parseBody, t as apiRoute } from \"../../../../../../../chunks/route.js\";\nimport { i as OrgComputeResponseSchema } from \"../../../../../../../chunks/responses.js\";\nimport { i as OrgComputePatchBodySchema } from \"../../../../../../../chunks/bodies.js\";\n//#region src/routes/api/v1/orgs/[orgId]/compute/+server.ts\n/**\n* Per-org compute endpoint. Manages this org's own servers\n* (`scope: 'org'`) and the org's default selection\n* (`orgDefaults[orgId]`). Platform servers and the global default are\n* read-only here — they're managed by `manage_compute` via `/api/admin/compute`.\n*\n* Authorization: org `owner`/`admin` with `manage_org_compute`. The URL `orgId`\n* must equal the caller's `actingOrgId`. Gated by the platform flag\n* `ALLOW_ORG_COMPUTE_OVERRIDE`; when off, both methods 403.\n*/\nfunction requireFlag() {\n\tif (!flag(\"ALLOW_ORG_COMPUTE_OVERRIDE\")) apiError(403, ApiErrorCode.FORBIDDEN, \"Per-org compute override is disabled on this instance (ALLOW_ORG_COMPUTE_OVERRIDE).\");\n}\nvar GET = apiRoute(\"Failed to load org compute config\", async ({ params, locals }) => {\n\trequireFlag();\n\trequireManageOrgCompute(locals);\n\tconst { ctx, orgId } = requireActingOrg(locals, params.orgId);\n\tconst config = await getComputeServerConfigStore().getConfig(ctx);\n\tconst owned = config.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => ({\n\t\t...s,\n\t\thasApiKey: !!s.hasApiKey\n\t}));\n\tconst catalog = serversVisibleTo(config, orgId).map((s) => ({\n\t\tid: s.id,\n\t\tlabel: s.label,\n\t\tserverUrl: s.serverUrl,\n\t\tscope: s.scope,\n\t\tsource: isPlatformServer(s) ? \"platform\" : \"org\",\n\t\ttimeoutMs: s.timeoutMs,\n\t\tretryCount: s.retryCount\n\t}));\n\treturn shaped(OrgComputeResponseSchema, {\n\t\tservers: owned,\n\t\tdefaultServerId: config.orgDefaults?.[orgId] ?? null,\n\t\tglobalDefaultServerId: config.defaultServerId ?? null,\n\t\tcatalog\n\t});\n});\nvar PATCH = apiRoute(\"Failed to save org compute config\", async ({ params, request, locals }) => {\n\trequireFlag();\n\trequireManageOrgCompute(locals);\n\tconst { ctx, orgId } = requireActingOrg(locals, params.orgId);\n\tconst incoming = await parseBody(request, OrgComputePatchBodySchema);\n\tvalidateIncomingServers(incoming.servers);\n\tconst provider = getComputeServerConfigStore();\n\tconst existing = await provider.getConfig(ctx, { includeApiKeys: true });\n\tconst storedKeys = storedKeysById(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId));\n\tconst next = incoming.servers.map((s) => ({\n\t\tid: s.id,\n\t\tscope: \"org\",\n\t\townerOrgId: orgId,\n\t\tlabel: s.label,\n\t\tserverUrl: s.serverUrl,\n\t\ttimeoutMs: s.timeoutMs,\n\t\tretryCount: s.retryCount,\n\t\tapiKey: resolveApiKey(s.apiKey, storedKeys.get(s.id))\n\t}));\n\tif (typeof incoming.defaultServerId === \"string\") {\n\t\tconst projected = {\n\t\t\tservers: [...existing.servers.filter((s) => !(isOrgServer(s) && s.ownerOrgId === orgId)), ...next],\n\t\t\tdefaultServerId: existing.defaultServerId,\n\t\t\torgDefaults: existing.orgDefaults\n\t\t};\n\t\tif (!new Set(serversVisibleTo(projected, orgId).map((s) => s.id)).has(incoming.defaultServerId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"defaultServerId must reference a server visible to this organization\");\n\t}\n\tawait provider.saveOrgServers(ctx, orgId, next, incoming.defaultServerId);\n\tevictChangedServers(existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId), next);\n\treturn noContent();\n});\n//#endregion\nexport { GET, PATCH };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AASA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,WAAW,GAAG;AACvB,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,qFAAqF,CAAC;AACtK;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,mCAAmC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AACtF,CAAC,WAAW,EAAE;AACd,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;AAC9D,CAAC,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC;AAClE,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAClG,EAAE,GAAG,CAAC;AACN,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;AACjB,EAAE,CAAC,CAAC;AACJ,CAAC,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC7D,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;AACV,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,KAAK;AAClD,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,UAAU,EAAE,CAAC,CAAC;AAChB,EAAE,CAAC,CAAC;AACJ,CAAC,OAAO,MAAM,CAAC,wBAAwB,EAAE;AACzC,EAAE,OAAO,EAAE,KAAK;AAChB,EAAE,eAAe,EAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,IAAI,IAAI;AACtD,EAAE,qBAAqB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;AACvD,EAAE;AACF,EAAE,CAAC;AACH,CAAC;AACE,IAAC,KAAK,GAAG,QAAQ,CAAC,mCAAmC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACjG,CAAC,WAAW,EAAE;AACd,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;AAC9D,CAAC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,yBAAyB,CAAC;AACrE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC;AAC1C,CAAC,MAAM,QAAQ,GAAG,2BAA2B,EAAE;AAC/C,CAAC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;AACzE,CAAC,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC;AAC5G,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC3C,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;AACV,EAAE,KAAK,EAAE,KAAK;AACd,EAAE,UAAU,EAAE,KAAK;AACnB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;AAC1B,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AACtD,EAAE,CAAC,CAAC;AACJ,CAAC,IAAI,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ,EAAE;AACnD,EAAE,MAAM,SAAS,GAAG;AACpB,GAAG,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC;AACrG,GAAG,eAAe,EAAE,QAAQ,CAAC,eAAe;AAC5C,GAAG,WAAW,EAAE,QAAQ,CAAC;AACzB,GAAG;AACH,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sEAAsE,CAAC;AACxN,CAAC;AACD,CAAC,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC;AAC1E,CAAC,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,EAAE,IAAI,CAAC;AACpG,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/orgs/_orgId_/invites/_id_/_server.ts.js-C7y_yAhs.js

@@ -0,0 +1,46 @@
+import { t as getInviteStore } from '../../../../../../../../chunks/providers.server.js-BNQzDpkf.js';
+import { s as requireManageOrgMembers, q as requireActingOrg } from '../../../../../../../../chunks/access.server.js-aOgtpt5D.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../../../chunks/api-errors.js-lCKk8A5c.js';
+import { a as apiRoute, h as requireParams, n as noContent } from '../../../../../../../../chunks/route.js-C2wyVSgl.js';
+import '../../../../../../../../chunks/shared-server.js-HBAhbQ8m.js';
+import '../../../../../../../../chunks/src.js-BYv4z3-l.js';
+import 'zod';
+import '../../../../../../../../chunks/limits.js-I-HAqbOg.js';
+import '../../../../../../../../chunks/schema.js-o6B8HHvu.js';
+import '../../../../../../../../chunks/chunk-AYH5O3VG.js-YiX3ZqeT.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '../../../../../../../../chunks/utils2.js-smxOjZHZ.js';
+
+//#region src/routes/api/v1/orgs/[orgId]/invites/[id]/+server.ts
+/** Revoke a pending invite. Consumed invites are preserved for audit. */
+var DELETE = apiRoute("Failed to revoke invite", async ({ params, locals }) => {
+	requireManageOrgMembers(locals);
+	const { ctx, orgId } = requireActingOrg(locals, params.orgId);
+	const { id } = requireParams(params, "id");
+	const store = getInviteStore();
+	let cursor;
+	let found = false;
+	do {
+		const page = await store.listByOrg(ctx, orgId, {
+			limit: 200,
+			cursor
+		});
+		if (page.items.some((i) => i.id === id)) {
+			found = true;
+			break;
+		}
+		cursor = page.nextCursor ?? void 0;
+	} while (cursor);
+	if (!found) apiError(404, ApiErrorCode.NOT_FOUND, "Invite not found");
+	await store.revoke(ctx, id);
+	return noContent();
+});
+
+export { DELETE };
+//# sourceMappingURL=_server.ts.js-C7y_yAhs.js.map

package/build/server/chunks/entries/endpoints/api/v1/orgs/_orgId_/invites/_id_/_server.ts.js-C7y_yAhs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-C7y_yAhs.js","sources":["../../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/orgs/_orgId_/invites/_id_/_server.ts.js"],"sourcesContent":["import { d as getInviteStore } from \"../../../../../../../../chunks/providers.server.js\";\nimport { S as requireManageOrgMembers, o as requireActingOrg } from \"../../../../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../../../chunks/api-errors.js\";\nimport { a as noContent, l as requireParams, t as apiRoute } from \"../../../../../../../../chunks/route.js\";\n//#region src/routes/api/v1/orgs/[orgId]/invites/[id]/+server.ts\n/** Revoke a pending invite. Consumed invites are preserved for audit. */\nvar DELETE = apiRoute(\"Failed to revoke invite\", async ({ params, locals }) => {\n\trequireManageOrgMembers(locals);\n\tconst { ctx, orgId } = requireActingOrg(locals, params.orgId);\n\tconst { id } = requireParams(params, \"id\");\n\tconst store = getInviteStore();\n\tlet cursor;\n\tlet found = false;\n\tdo {\n\t\tconst page = await store.listByOrg(ctx, orgId, {\n\t\t\tlimit: 200,\n\t\t\tcursor\n\t\t});\n\t\tif (page.items.some((i) => i.id === id)) {\n\t\t\tfound = true;\n\t\t\tbreak;\n\t\t}\n\t\tcursor = page.nextCursor ?? void 0;\n\t} while (cursor);\n\tif (!found) apiError(404, ApiErrorCode.NOT_FOUND, \"Invite not found\");\n\tawait store.revoke(ctx, id);\n\treturn noContent();\n});\n//#endregion\nexport { DELETE };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAIA;AACA;AACG,IAAC,MAAM,GAAG,QAAQ,CAAC,yBAAyB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC/E,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;AAC9D,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC;AAC3C,CAAC,MAAM,KAAK,GAAG,cAAc,EAAE;AAC/B,CAAC,IAAI,MAAM;AACX,CAAC,IAAI,KAAK,GAAG,KAAK;AAClB,CAAC,GAAG;AACJ,EAAE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE;AACjD,GAAG,KAAK,EAAE,GAAG;AACb,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;AAC3C,GAAG,KAAK,GAAG,IAAI;AACf,GAAG;AACH,EAAE;AACF,EAAE,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC;AACpC,CAAC,CAAC,QAAQ,MAAM;AAChB,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,kBAAkB,CAAC;AACtE,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AAC5B,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/orgs/_orgId_/invites/_server.ts.js-DFwSMWhw.js

@@ -0,0 +1,62 @@
+import { M as MEMBER_ASSIGNABLE_PERMISSIONS, D as DEFAULT_ORG_PERMISSIONS } from '../../../../../../../chunks/src.js-BYv4z3-l.js';
+import { t as getInviteStore } from '../../../../../../../chunks/providers.server.js-BNQzDpkf.js';
+import { s as requireManageOrgMembers, q as requireActingOrg } from '../../../../../../../chunks/access.server.js-aOgtpt5D.js';
+import { s as splitFlatPermissions } from '../../../../../../../chunks/permissions-compat.server.js-z2gSRVDO.js';
+import { a as parseListOptions } from '../../../../../../../chunks/pagination.server.js-Dh0ZmkaY.js';
+import { a as apiRoute, s as shapedCollection, e as parseBody, g as shaped } from '../../../../../../../chunks/route.js-C2wyVSgl.js';
+import { I as InviteResponseSchema, a as CreatedInviteResponseSchema } from '../../../../../../../chunks/responses.js-BHDdfIc5.js';
+import { c as CreateInviteBodySchema } from '../../../../../../../chunks/bodies.js-DzvLeLhi.js';
+import { m as mintRawToken, h as hashToken } from '../../../../../../../chunks/token2.server.js-D3qybfd8.js';
+import { randomUUID } from 'node:crypto';
+import 'zod';
+import '../../../../../../../chunks/shared-server.js-HBAhbQ8m.js';
+import '../../../../../../../chunks/limits.js-I-HAqbOg.js';
+import '../../../../../../../chunks/schema.js-o6B8HHvu.js';
+import '../../../../../../../chunks/chunk-AYH5O3VG.js-YiX3ZqeT.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../../chunks/api-errors.js-lCKk8A5c.js';
+import '../../../../../../../chunks/utils2.js-smxOjZHZ.js';
+import '@sveltejs/kit';
+import '../../../../../../../chunks/token-codec.js-CxK2DiO-.js';
+
+//#region src/routes/api/v1/orgs/[orgId]/invites/+server.ts
+var INVITE_TTL_MS = 6048e5;
+/** Pending and recently accepted invites for the acting org. */
+var GET = apiRoute("Failed to list invites", async ({ params, locals, url }) => {
+	requireManageOrgMembers(locals);
+	const { ctx, orgId } = requireActingOrg(locals, params.orgId);
+	return shapedCollection(InviteResponseSchema, await getInviteStore().listByOrg(ctx, orgId, parseListOptions(url)));
+});
+/** Create an invite and return the accept URL. */
+var POST = apiRoute("Failed to create invite", async ({ params, request, locals, url }) => {
+	requireManageOrgMembers(locals);
+	const { ctx, orgId } = requireActingOrg(locals, params.orgId);
+	const input = await parseBody(request, CreateInviteBodySchema);
+	const { org: submittedOrgPerms } = splitFlatPermissions(input.permissions);
+	const orgPermissions = input.orgRole === "member" ? submittedOrgPerms.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[input.orgRole]];
+	const rawToken = mintRawToken();
+	const now = /* @__PURE__ */ new Date();
+	const invite = {
+		id: randomUUID(),
+		tokenHash: hashToken(rawToken),
+		email: input.email,
+		orgId,
+		orgRole: input.orgRole,
+		orgPermissions,
+		invitedBy: locals.user.id,
+		createdAt: now.toISOString(),
+		expiresAt: new Date(now.getTime() + INVITE_TTL_MS).toISOString()
+	};
+	await getInviteStore().create(ctx, invite);
+	return shaped(CreatedInviteResponseSchema, {
+		...invite,
+		acceptUrl: `${url.origin}/accept-invite?token=${rawToken}`
+	}, 201);
+});
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-DFwSMWhw.js.map

package/build/server/chunks/entries/endpoints/api/v1/orgs/_orgId_/invites/_server.ts.js-DFwSMWhw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-DFwSMWhw.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/orgs/_orgId_/invites/_server.ts.js"],"sourcesContent":["import { v as DEFAULT_ORG_PERMISSIONS, y as MEMBER_ASSIGNABLE_PERMISSIONS } from \"../../../../../../../chunks/src.js\";\nimport { d as getInviteStore } from \"../../../../../../../chunks/providers.server.js\";\nimport { S as requireManageOrgMembers, o as requireActingOrg } from \"../../../../../../../chunks/access.server.js\";\nimport { n as splitFlatPermissions } from \"../../../../../../../chunks/permissions-compat.server.js\";\nimport { n as parseListOptions } from \"../../../../../../../chunks/pagination.server.js\";\nimport { d as shaped, f as shapedCollection, o as parseBody, t as apiRoute } from \"../../../../../../../chunks/route.js\";\nimport { r as InviteResponseSchema, t as CreatedInviteResponseSchema } from \"../../../../../../../chunks/responses.js\";\nimport { n as CreateInviteBodySchema } from \"../../../../../../../chunks/bodies.js\";\nimport { n as mintRawToken, t as hashToken } from \"../../../../../../../chunks/token2.server.js\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/api/v1/orgs/[orgId]/invites/+server.ts\nvar INVITE_TTL_MS = 6048e5;\n/** Pending and recently accepted invites for the acting org. */\nvar GET = apiRoute(\"Failed to list invites\", async ({ params, locals, url }) => {\n\trequireManageOrgMembers(locals);\n\tconst { ctx, orgId } = requireActingOrg(locals, params.orgId);\n\treturn shapedCollection(InviteResponseSchema, await getInviteStore().listByOrg(ctx, orgId, parseListOptions(url)));\n});\n/** Create an invite and return the accept URL. */\nvar POST = apiRoute(\"Failed to create invite\", async ({ params, request, locals, url }) => {\n\trequireManageOrgMembers(locals);\n\tconst { ctx, orgId } = requireActingOrg(locals, params.orgId);\n\tconst input = await parseBody(request, CreateInviteBodySchema);\n\tconst { org: submittedOrgPerms } = splitFlatPermissions(input.permissions);\n\tconst orgPermissions = input.orgRole === \"member\" ? submittedOrgPerms.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[input.orgRole]];\n\tconst rawToken = mintRawToken();\n\tconst now = /* @__PURE__ */ new Date();\n\tconst invite = {\n\t\tid: randomUUID(),\n\t\ttokenHash: hashToken(rawToken),\n\t\temail: input.email,\n\t\torgId,\n\t\torgRole: input.orgRole,\n\t\torgPermissions,\n\t\tinvitedBy: locals.user.id,\n\t\tcreatedAt: now.toISOString(),\n\t\texpiresAt: new Date(now.getTime() + INVITE_TTL_MS).toISOString()\n\t};\n\tawait getInviteStore().create(ctx, invite);\n\treturn shaped(CreatedInviteResponseSchema, {\n\t\t...invite,\n\t\tacceptUrl: `${url.origin}/accept-invite?token=${rawToken}`\n\t}, 201);\n});\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAUA;AACA,IAAI,aAAa,GAAG,MAAM;AAC1B;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AAChF,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;AAC9D,CAAC,OAAO,gBAAgB,CAAC,oBAAoB,EAAE,MAAM,cAAc,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;AACnH,CAAC;AACD;AACG,IAAC,IAAI,GAAG,QAAQ,CAAC,yBAAyB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AAC3F,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;AAC9D,CAAC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,sBAAsB,CAAC;AAC/D,CAAC,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC,WAAW,CAAC;AAC3E,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,KAAK,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC7K,CAAC,MAAM,QAAQ,GAAG,YAAY,EAAE;AAChC,CAAC,MAAM,GAAG,mBAAmB,IAAI,IAAI,EAAE;AACvC,CAAC,MAAM,MAAM,GAAG;AAChB,EAAE,EAAE,EAAE,UAAU,EAAE;AAClB,EAAE,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC;AAChC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;AACpB,EAAE,KAAK;AACP,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;AACxB,EAAE,cAAc;AAChB,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC3B,EAAE,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;AAC9B,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,WAAW;AAChE,EAAE;AACF,CAAC,MAAM,cAAc,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC;AAC3C,CAAC,OAAO,MAAM,CAAC,2BAA2B,EAAE;AAC5C,EAAE,GAAG,MAAM;AACX,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,qBAAqB,EAAE,QAAQ,CAAC;AAC3D,EAAE,EAAE,GAAG,CAAC;AACR,CAAC;;;;"}