@selvajs/selva 4.8.0-beta.8 → 4.8.0

package/build/server/chunks/entries/endpoints/api/admin/compute/actions/_server.ts.js-Bax0NcHg.js

@@ -0,0 +1,54 @@
+import '../../../../../../chunks/src.js-BT_hYA9R.js';
+import { n as getComputeServerConfigStore } from '../../../../../../chunks/providers.server.js-CzELnNVS.js';
+import { f as findServerById } from '../../../../../../chunks/utils2.js-DsxvyW9R.js';
+import { h as requireManageCompute } from '../../../../../../chunks/access.server.js-BIqHLNTG.js';
+import { m } from '../../../../../../chunks/schema.js-CUwAGh_h.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-lGrRv5Z5.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../../chunks/shared-server.js-v7CtcwjQ.js';
+import '../../../../../../chunks/limits.js-D4RlAe6O.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+
+//#region src/routes/api/admin/compute/actions/+server.ts
+var POST = async ({ request, locals }) => {
+	requireManageCompute(locals);
+	const body = await request.json().catch(() => null);
+	if (!body || typeof body !== "object") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid request body");
+	const { serverId, action } = body;
+	if (!serverId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "serverId required");
+	if (action !== "purge" && action !== "shutdown") apiError(400, ApiErrorCode.VALIDATION_FAILED, "action must be 'purge' or 'shutdown'");
+	const store = getComputeServerConfigStore();
+	const config = await store.getConfig(locals.ctx);
+	const server = findServerById(config, serverId);
+	if (!server) apiError(404, ApiErrorCode.NOT_FOUND, "Server not found");
+	const apiKey = server.hasApiKey ? await store.getServerApiKey(locals.ctx, server.id) : void 0;
+	const stats = new m(server.serverUrl, apiKey);
+	try {
+		if (action === "purge") {
+			const result = await stats.purgeAllChildren();
+			if (result === null) apiError(502, ApiErrorCode.INTERNAL, "Could not reach the server to purge its cache");
+			return json({
+				action,
+				...result
+			});
+		}
+		const result = await stats.shutdownChildren();
+		if (result === null) apiError(502, ApiErrorCode.INTERNAL, "Could not reach the server to shut down its children");
+		return json({
+			action,
+			...result
+		});
+	} finally {
+		await stats.dispose();
+	}
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts.js-Bax0NcHg.js.map

package/build/server/chunks/entries/endpoints/api/admin/compute/actions/_server.ts.js-Bax0NcHg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-Bax0NcHg.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/compute/actions/_server.ts.js"],"sourcesContent":["import \"../../../../../../chunks/src.js\";\nimport { a as getComputeServerConfigStore } from \"../../../../../../chunks/providers.server.js\";\nimport { n as findServerById } from \"../../../../../../chunks/utils2.js\";\nimport { y as requireManageCompute } from \"../../../../../../chunks/access.server.js\";\nimport { p as m } from \"../../../../../../chunks/schema.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/admin/compute/actions/+server.ts\nvar POST = async ({ request, locals }) => {\n\trequireManageCompute(locals);\n\tconst body = await request.json().catch(() => null);\n\tif (!body || typeof body !== \"object\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid request body\");\n\tconst { serverId, action } = body;\n\tif (!serverId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"serverId required\");\n\tif (action !== \"purge\" && action !== \"shutdown\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"action must be 'purge' or 'shutdown'\");\n\tconst store = getComputeServerConfigStore();\n\tconst config = await store.getConfig(locals.ctx);\n\tconst server = findServerById(config, serverId);\n\tif (!server) apiError(404, ApiErrorCode.NOT_FOUND, \"Server not found\");\n\tconst apiKey = server.hasApiKey ? await store.getServerApiKey(locals.ctx, server.id) : void 0;\n\tconst stats = new m(server.serverUrl, apiKey);\n\ttry {\n\t\tif (action === \"purge\") {\n\t\t\tconst result = await stats.purgeAllChildren();\n\t\t\tif (result === null) apiError(502, ApiErrorCode.INTERNAL, \"Could not reach the server to purge its cache\");\n\t\t\treturn json({\n\t\t\t\taction,\n\t\t\t\t...result\n\t\t\t});\n\t\t}\n\t\tconst result = await stats.shutdownChildren();\n\t\tif (result === null) apiError(502, ApiErrorCode.INTERNAL, \"Could not reach the server to shut down its children\");\n\t\treturn json({\n\t\t\taction,\n\t\t\t...result\n\t\t});\n\t} finally {\n\t\tawait stats.dispose();\n\t}\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAOA;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC1C,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AAC7G,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI;AAClC,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;AAClF,CAAC,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sCAAsC,CAAC;AACvI,CAAC,MAAM,KAAK,GAAG,2BAA2B,EAAE;AAC5C,CAAC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;AACjD,CAAC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC;AAChD,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,kBAAkB,CAAC;AACvE,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM;AAC9F,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;AAC9C,CAAC,IAAI;AACL,EAAE,IAAI,MAAM,KAAK,OAAO,EAAE;AAC1B,GAAG,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE;AAChD,GAAG,IAAI,MAAM,KAAK,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,+CAA+C,CAAC;AAC7G,GAAG,OAAO,IAAI,CAAC;AACf,IAAI,MAAM;AACV,IAAI,GAAG;AACP,IAAI,CAAC;AACL,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE;AAC/C,EAAE,IAAI,MAAM,KAAK,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,sDAAsD,CAAC;AACnH,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,MAAM;AACT,GAAG,GAAG;AACN,GAAG,CAAC;AACJ,CAAC,CAAC,SAAS;AACX,EAAE,MAAM,KAAK,CAAC,OAAO,EAAE;AACvB,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/compute/status/_server.ts.js-CqiAdi_L.js

@@ -0,0 +1,80 @@
+import '../../../../../../chunks/src.js-BT_hYA9R.js';
+import { n as getComputeServerConfigStore } from '../../../../../../chunks/providers.server.js-CzELnNVS.js';
+import { f as findServerById } from '../../../../../../chunks/utils2.js-DsxvyW9R.js';
+import { h as requireManageCompute } from '../../../../../../chunks/access.server.js-BIqHLNTG.js';
+import { m } from '../../../../../../chunks/schema.js-CUwAGh_h.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-lGrRv5Z5.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../../chunks/shared-server.js-v7CtcwjQ.js';
+import '../../../../../../chunks/limits.js-D4RlAe6O.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+
+//#region src/routes/api/admin/compute/status/+server.ts
+var GET = async ({ url, locals }) => {
+	requireManageCompute(locals);
+	const serverId = url.searchParams.get("serverId");
+	if (!serverId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "serverId required");
+	const store = getComputeServerConfigStore();
+	const config = await store.getConfig(locals.ctx);
+	const server = findServerById(config, serverId);
+	if (!server) apiError(404, ApiErrorCode.NOT_FOUND, "Server not found");
+	const apiKey = server.hasApiKey ? await store.getServerApiKey(locals.ctx, server.id) : void 0;
+	const stats = new m(server.serverUrl, apiKey);
+	try {
+		if (!await stats.isServerOnline()) return json({
+			reachable: false,
+			ready: false,
+			rhinoVersion: null,
+			computeVersion: null,
+			selvaInstalled: false,
+			selvaVersion: null,
+			plugins: {},
+			activeChildren: null,
+			idleSpanSeconds: null
+		});
+		const [version, plugins, activeChildren, idleSpanSeconds] = await Promise.all([
+			stats.getVersion(),
+			stats.getInstalledPlugins("gh"),
+			stats.getActiveChildren({ initialize: false }),
+			stats.getIdleSpan()
+		]);
+		const inventoryLoaded = plugins !== null && Object.keys(plugins).length > 0;
+		const installed = plugins ?? {};
+		const selvaVersion = installed["Selva"] ?? null;
+		return json({
+			reachable: true,
+			ready: inventoryLoaded,
+			rhinoVersion: version?.rhino ?? null,
+			computeVersion: version?.compute ?? null,
+			selvaInstalled: selvaVersion !== null,
+			selvaVersion,
+			plugins: installed,
+			activeChildren,
+			idleSpanSeconds
+		});
+	} catch {
+		return json({
+			reachable: false,
+			ready: false,
+			rhinoVersion: null,
+			computeVersion: null,
+			selvaInstalled: false,
+			selvaVersion: null,
+			plugins: {},
+			activeChildren: null,
+			idleSpanSeconds: null
+		});
+	} finally {
+		await stats.dispose();
+	}
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-CqiAdi_L.js.map

package/build/server/chunks/entries/endpoints/api/admin/compute/status/_server.ts.js-CqiAdi_L.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CqiAdi_L.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/compute/status/_server.ts.js"],"sourcesContent":["import \"../../../../../../chunks/src.js\";\nimport { a as getComputeServerConfigStore } from \"../../../../../../chunks/providers.server.js\";\nimport { n as findServerById } from \"../../../../../../chunks/utils2.js\";\nimport { y as requireManageCompute } from \"../../../../../../chunks/access.server.js\";\nimport { p as m } from \"../../../../../../chunks/schema.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/admin/compute/status/+server.ts\nvar GET = async ({ url, locals }) => {\n\trequireManageCompute(locals);\n\tconst serverId = url.searchParams.get(\"serverId\");\n\tif (!serverId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"serverId required\");\n\tconst store = getComputeServerConfigStore();\n\tconst config = await store.getConfig(locals.ctx);\n\tconst server = findServerById(config, serverId);\n\tif (!server) apiError(404, ApiErrorCode.NOT_FOUND, \"Server not found\");\n\tconst apiKey = server.hasApiKey ? await store.getServerApiKey(locals.ctx, server.id) : void 0;\n\tconst stats = new m(server.serverUrl, apiKey);\n\ttry {\n\t\tif (!await stats.isServerOnline()) return json({\n\t\t\treachable: false,\n\t\t\tready: false,\n\t\t\trhinoVersion: null,\n\t\t\tcomputeVersion: null,\n\t\t\tselvaInstalled: false,\n\t\t\tselvaVersion: null,\n\t\t\tplugins: {},\n\t\t\tactiveChildren: null,\n\t\t\tidleSpanSeconds: null\n\t\t});\n\t\tconst [version, plugins, activeChildren, idleSpanSeconds] = await Promise.all([\n\t\t\tstats.getVersion(),\n\t\t\tstats.getInstalledPlugins(\"gh\"),\n\t\t\tstats.getActiveChildren({ initialize: false }),\n\t\t\tstats.getIdleSpan()\n\t\t]);\n\t\tconst inventoryLoaded = plugins !== null && Object.keys(plugins).length > 0;\n\t\tconst installed = plugins ?? {};\n\t\tconst selvaVersion = installed[\"Selva\"] ?? null;\n\t\treturn json({\n\t\t\treachable: true,\n\t\t\tready: inventoryLoaded,\n\t\t\trhinoVersion: version?.rhino ?? null,\n\t\t\tcomputeVersion: version?.compute ?? null,\n\t\t\tselvaInstalled: selvaVersion !== null,\n\t\t\tselvaVersion,\n\t\t\tplugins: installed,\n\t\t\tactiveChildren,\n\t\t\tidleSpanSeconds\n\t\t});\n\t} catch {\n\t\treturn json({\n\t\t\treachable: false,\n\t\t\tready: false,\n\t\t\trhinoVersion: null,\n\t\t\tcomputeVersion: null,\n\t\t\tselvaInstalled: false,\n\t\t\tselvaVersion: null,\n\t\t\tplugins: {},\n\t\t\tactiveChildren: null,\n\t\t\tidleSpanSeconds: null\n\t\t});\n\t} finally {\n\t\tawait stats.dispose();\n\t}\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAOA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK;AACrC,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;AAClD,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;AAClF,CAAC,MAAM,KAAK,GAAG,2BAA2B,EAAE;AAC5C,CAAC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;AACjD,CAAC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC;AAChD,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,kBAAkB,CAAC;AACvE,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM;AAC9F,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;AAC9C,CAAC,IAAI;AACL,EAAE,IAAI,CAAC,MAAM,KAAK,CAAC,cAAc,EAAE,EAAE,OAAO,IAAI,CAAC;AACjD,GAAG,SAAS,EAAE,KAAK;AACnB,GAAG,KAAK,EAAE,KAAK;AACf,GAAG,YAAY,EAAE,IAAI;AACrB,GAAG,cAAc,EAAE,IAAI;AACvB,GAAG,cAAc,EAAE,KAAK;AACxB,GAAG,YAAY,EAAE,IAAI;AACrB,GAAG,OAAO,EAAE,EAAE;AACd,GAAG,cAAc,EAAE,IAAI;AACvB,GAAG,eAAe,EAAE;AACpB,GAAG,CAAC;AACJ,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AAChF,GAAG,KAAK,CAAC,UAAU,EAAE;AACrB,GAAG,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC;AAClC,GAAG,KAAK,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AACjD,GAAG,KAAK,CAAC,WAAW;AACpB,GAAG,CAAC;AACJ,EAAE,MAAM,eAAe,GAAG,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;AAC7E,EAAE,MAAM,SAAS,GAAG,OAAO,IAAI,EAAE;AACjC,EAAE,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,IAAI;AACjD,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,SAAS,EAAE,IAAI;AAClB,GAAG,KAAK,EAAE,eAAe;AACzB,GAAG,YAAY,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI;AACvC,GAAG,cAAc,EAAE,OAAO,EAAE,OAAO,IAAI,IAAI;AAC3C,GAAG,cAAc,EAAE,YAAY,KAAK,IAAI;AACxC,GAAG,YAAY;AACf,GAAG,OAAO,EAAE,SAAS;AACrB,GAAG,cAAc;AACjB,GAAG;AACH,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,SAAS,EAAE,KAAK;AACnB,GAAG,KAAK,EAAE,KAAK;AACf,GAAG,YAAY,EAAE,IAAI;AACrB,GAAG,cAAc,EAAE,IAAI;AACvB,GAAG,cAAc,EAAE,KAAK;AACxB,GAAG,YAAY,EAAE,IAAI;AACrB,GAAG,OAAO,EAAE,EAAE;AACd,GAAG,cAAc,EAAE,IAAI;AACvB,GAAG,eAAe,EAAE;AACpB,GAAG,CAAC;AACJ,CAAC,CAAC,SAAS;AACX,EAAE,MAAM,KAAK,CAAC,OAAO,EAAE;AACvB,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/orgs/_id_/_server.ts.js-CPZY-lgU.js

@@ -0,0 +1,51 @@
+import { U as UpdateOrgSchema } from '../../../../../../chunks/src.js-BT_hYA9R.js';
+import { e as getOrganizationProvider, P as ProviderError } from '../../../../../../chunks/providers.server.js-CzELnNVS.js';
+import { i as requireInstanceAdmin } from '../../../../../../chunks/access.server.js-BIqHLNTG.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-lGrRv5Z5.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../../chunks/shared-server.js-v7CtcwjQ.js';
+import '../../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../../chunks/schema.js-CUwAGh_h.js';
+import '../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/utils2.js-DsxvyW9R.js';
+
+//#region src/routes/api/admin/orgs/[id]/+server.ts
+var PATCH = async ({ params, request, locals }) => {
+	requireInstanceAdmin(locals);
+	const { id } = params;
+	if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing org ID");
+	const ctx = locals.ctx;
+	const body = await request.json().catch(() => null);
+	const parsed = UpdateOrgSchema.safeParse(body);
+	if (!parsed.success) throwZodError(parsed.error);
+	try {
+		await getOrganizationProvider().updateOrg(ctx, id, parsed.data);
+		const updated = await getOrganizationProvider().getOrg(ctx, id);
+		return json(updated);
+	} catch (err) {
+		if (err instanceof ProviderError && err.statusCode === 409) apiError(409, ApiErrorCode.CONFLICT, err.message);
+		handleApiError(err, "Failed to update org");
+	}
+};
+var DELETE = async ({ params, locals }) => {
+	requireInstanceAdmin(locals);
+	const { id } = params;
+	if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing org ID");
+	const ctx = locals.ctx;
+	try {
+		await getOrganizationProvider().deleteOrg(ctx, id);
+		return new Response(null, { status: 204 });
+	} catch (err) {
+		handleApiError(err, "Failed to delete org");
+	}
+};
+
+export { DELETE, PATCH };
+//# sourceMappingURL=_server.ts.js-CPZY-lgU.js.map

package/build/server/chunks/entries/endpoints/api/admin/orgs/_id_/_server.ts.js-CPZY-lgU.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CPZY-lgU.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/orgs/_id_/_server.ts.js"],"sourcesContent":["import { w as UpdateOrgSchema } from \"../../../../../../chunks/src.js\";\nimport { N as ProviderError, m as getOrganizationProvider } from \"../../../../../../chunks/providers.server.js\";\nimport { v as requireInstanceAdmin } from \"../../../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/admin/orgs/[id]/+server.ts\nvar PATCH = async ({ params, request, locals }) => {\n\trequireInstanceAdmin(locals);\n\tconst { id } = params;\n\tif (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing org ID\");\n\tconst ctx = locals.ctx;\n\tconst body = await request.json().catch(() => null);\n\tconst parsed = UpdateOrgSchema.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\ttry {\n\t\tawait getOrganizationProvider().updateOrg(ctx, id, parsed.data);\n\t\tconst updated = await getOrganizationProvider().getOrg(ctx, id);\n\t\treturn json(updated);\n\t} catch (err) {\n\t\tif (err instanceof ProviderError && err.statusCode === 409) apiError(409, ApiErrorCode.CONFLICT, err.message);\n\t\thandleApiError(err, \"Failed to update org\");\n\t}\n};\nvar DELETE = async ({ params, locals }) => {\n\trequireInstanceAdmin(locals);\n\tconst { id } = params;\n\tif (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing org ID\");\n\tconst ctx = locals.ctx;\n\ttry {\n\t\tawait getOrganizationProvider().deleteOrg(ctx, id);\n\t\treturn new Response(null, { status: 204 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to delete org\");\n\t}\n};\n//#endregion\nexport { DELETE, PATCH };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAKA;AACG,IAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACnD,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACtB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;AACzE,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAC/C,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,IAAI;AACL,EAAE,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC;AACjE,EAAE,MAAM,OAAO,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AACjE,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC;AACtB,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC;AAC/G,EAAE,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC7C,CAAC;AACD;AACG,IAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACtB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;AACzE,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI;AACL,EAAE,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC;AACpD,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC7C,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/orgs/_server.ts.js-DlS7j13Z.js

@@ -0,0 +1,72 @@
+import { C as CreateOrgSchema } from '../../../../../chunks/src.js-BT_hYA9R.js';
+import { e as getOrganizationProvider, P as ProviderError } from '../../../../../chunks/providers.server.js-CzELnNVS.js';
+import { i as requireInstanceAdmin } from '../../../../../chunks/access.server.js-BIqHLNTG.js';
+import { h as handleApiError, t as throwZodError, a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-lGrRv5Z5.js';
+import { json } from '@sveltejs/kit';
+import { randomUUID } from 'node:crypto';
+import 'zod';
+import '../../../../../chunks/shared-server.js-v7CtcwjQ.js';
+import '../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../chunks/schema.js-CUwAGh_h.js';
+import '../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../chunks/utils2.js-DsxvyW9R.js';
+
+//#region src/routes/api/admin/orgs/+server.ts
+/**
+* Spec §8 — instance-admin-only org management. Multi-tenant deployments use
+* this to create / list orgs out of band of the per-org invite flow. Self-
+* hosted single-tenant instances rarely call these.
+*/
+var GET = async ({ locals, url }) => {
+	requireInstanceAdmin(locals);
+	const ctx = locals.ctx;
+	const rawLimit = Number(url.searchParams.get("limit") ?? 200);
+	const limit = Number.isFinite(rawLimit) ? Math.min(Math.max(rawLimit, 1), 200) : 200;
+	const cursor = url.searchParams.get("cursor") ?? void 0;
+	try {
+		const page = await getOrganizationProvider().listOrgs(ctx, {
+			limit,
+			cursor
+		});
+		return json({
+			orgs: page.items,
+			nextCursor: page.nextCursor
+		});
+	} catch (err) {
+		handleApiError(err, "Failed to list orgs");
+	}
+};
+var POST = async ({ request, locals }) => {
+	const user = requireInstanceAdmin(locals);
+	const ctx = locals.ctx;
+	const body = await request.json().catch(() => null);
+	const parsed = CreateOrgSchema.safeParse(body);
+	if (!parsed.success) throwZodError(parsed.error);
+	const now = (/* @__PURE__ */ new Date()).toISOString();
+	const org = {
+		id: randomUUID(),
+		name: parsed.data.name,
+		slug: parsed.data.slug,
+		ownerId: user.id,
+		createdBy: user.id,
+		updatedBy: user.id,
+		createdAt: now,
+		updatedAt: now,
+		deletedAt: null
+	};
+	try {
+		await getOrganizationProvider().createOrg(ctx, org);
+		return json(org, { status: 201 });
+	} catch (err) {
+		if (err instanceof ProviderError && err.statusCode === 409) apiError(409, ApiErrorCode.CONFLICT, err.message);
+		handleApiError(err, "Failed to create org");
+	}
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-DlS7j13Z.js.map

package/build/server/chunks/entries/endpoints/api/admin/orgs/_server.ts.js-DlS7j13Z.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-DlS7j13Z.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/orgs/_server.ts.js"],"sourcesContent":["import { _ as CreateOrgSchema } from \"../../../../../chunks/src.js\";\nimport { N as ProviderError, m as getOrganizationProvider } from \"../../../../../chunks/providers.server.js\";\nimport { v as requireInstanceAdmin } from \"../../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/api/admin/orgs/+server.ts\n/**\n* Spec §8 — instance-admin-only org management. Multi-tenant deployments use\n* this to create / list orgs out of band of the per-org invite flow. Self-\n* hosted single-tenant instances rarely call these.\n*/\nvar GET = async ({ locals, url }) => {\n\trequireInstanceAdmin(locals);\n\tconst ctx = locals.ctx;\n\tconst rawLimit = Number(url.searchParams.get(\"limit\") ?? 200);\n\tconst limit = Number.isFinite(rawLimit) ? Math.min(Math.max(rawLimit, 1), 200) : 200;\n\tconst cursor = url.searchParams.get(\"cursor\") ?? void 0;\n\ttry {\n\t\tconst page = await getOrganizationProvider().listOrgs(ctx, {\n\t\t\tlimit,\n\t\t\tcursor\n\t\t});\n\t\treturn json({\n\t\t\torgs: page.items,\n\t\t\tnextCursor: page.nextCursor\n\t\t});\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to list orgs\");\n\t}\n};\nvar POST = async ({ request, locals }) => {\n\tconst user = requireInstanceAdmin(locals);\n\tconst ctx = locals.ctx;\n\tconst body = await request.json().catch(() => null);\n\tconst parsed = CreateOrgSchema.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\tconst now = (/* @__PURE__ */ new Date()).toISOString();\n\tconst org = {\n\t\tid: randomUUID(),\n\t\tname: parsed.data.name,\n\t\tslug: parsed.data.slug,\n\t\townerId: user.id,\n\t\tcreatedBy: user.id,\n\t\tupdatedBy: user.id,\n\t\tcreatedAt: now,\n\t\tupdatedAt: now,\n\t\tdeletedAt: null\n\t};\n\ttry {\n\t\tawait getOrganizationProvider().createOrg(ctx, org);\n\t\treturn json(org, { status: 201 });\n\t} catch (err) {\n\t\tif (err instanceof ProviderError && err.statusCode === 409) apiError(409, ApiErrorCode.CONFLICT, err.message);\n\t\thandleApiError(err, \"Failed to create org\");\n\t}\n};\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAMA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACrC,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC;AAC9D,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG;AACrF,CAAC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,MAAM;AACxD,CAAC,IAAI;AACL,EAAE,MAAM,IAAI,GAAG,MAAM,uBAAuB,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE;AAC7D,GAAG,KAAK;AACR,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,IAAI,EAAE,IAAI,CAAC,KAAK;AACnB,GAAG,UAAU,EAAE,IAAI,CAAC;AACpB,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,qBAAqB,CAAC;AAC5C,CAAC;AACD;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC1C,CAAC,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC1C,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAC/C,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACvD,CAAC,MAAM,GAAG,GAAG;AACb,EAAE,EAAE,EAAE,UAAU,EAAE;AAClB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AACxB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AACxB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;AAClB,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;AACpB,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;AACpB,EAAE,SAAS,EAAE,GAAG;AAChB,EAAE,SAAS,EAAE,GAAG;AAChB,EAAE,SAAS,EAAE;AACb,EAAE;AACF,CAAC,IAAI;AACL,EAAE,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;AACrD,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACnC,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC;AAC/G,EAAE,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC7C,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/projects/_id_/_server.ts.js-Ozx432d-.js

@@ -0,0 +1,75 @@
+import { S as SYSTEM_CONTEXT, s as slugify } from '../../../../../../chunks/src.js-BT_hYA9R.js';
+import { f as getProjectProvider } from '../../../../../../chunks/providers.server.js-CzELnNVS.js';
+import { i as requireInstanceAdmin } from '../../../../../../chunks/access.server.js-BIqHLNTG.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-lGrRv5Z5.js';
+import { json } from '@sveltejs/kit';
+import { z } from 'zod';
+import '../../../../../../chunks/shared-server.js-v7CtcwjQ.js';
+import '../../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../../chunks/schema.js-CUwAGh_h.js';
+import '../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/utils2.js-DsxvyW9R.js';
+
+//#region src/routes/api/admin/projects/[id]/+server.ts
+var UpdatePlatformProjectBody = z.object({
+	name: z.string().min(1).max(128).trim(),
+	description: z.string().max(2e3).nullish()
+}).partial();
+async function loadPlatformProjectOr404(id) {
+	const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, id);
+	if (!project || project.visibility !== "platform") apiError(404, ApiErrorCode.NOT_FOUND, "Platform project not found");
+	return project;
+}
+var GET = async ({ params, locals }) => {
+	requireInstanceAdmin(locals);
+	const { id } = params;
+	if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
+	try {
+		const project = await loadPlatformProjectOr404(id);
+		return json(project);
+	} catch (err) {
+		handleApiError(err, "Failed to load platform project");
+	}
+};
+var PATCH = async ({ params, request, locals }) => {
+	requireInstanceAdmin(locals);
+	const { id } = params;
+	if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
+	const body = await request.json().catch(() => null);
+	const parsed = UpdatePlatformProjectBody.safeParse(body);
+	if (!parsed.success) throwZodError(parsed.error);
+	try {
+		await loadPlatformProjectOr404(id);
+		const patch = {};
+		if (parsed.data.name !== void 0) {
+			patch.name = parsed.data.name;
+			patch.slug = slugify(parsed.data.name);
+		}
+		if (parsed.data.description !== void 0) patch.description = parsed.data.description ?? void 0;
+		await getProjectProvider().updateProject(SYSTEM_CONTEXT, id, patch);
+		return new Response(null, { status: 204 });
+	} catch (err) {
+		handleApiError(err, "Failed to update platform project");
+	}
+};
+var DELETE = async ({ params, locals }) => {
+	requireInstanceAdmin(locals);
+	const { id } = params;
+	if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
+	try {
+		await loadPlatformProjectOr404(id);
+		await getProjectProvider().deleteProject(SYSTEM_CONTEXT, id);
+		return new Response(null, { status: 204 });
+	} catch (err) {
+		handleApiError(err, "Failed to delete platform project");
+	}
+};
+
+export { DELETE, GET, PATCH };
+//# sourceMappingURL=_server.ts.js-Ozx432d-.js.map

package/build/server/chunks/entries/endpoints/api/admin/projects/_id_/_server.ts.js-Ozx432d-.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-Ozx432d-.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/projects/_id_/_server.ts.js"],"sourcesContent":["import { T as slugify, t as SYSTEM_CONTEXT } from \"../../../../../../chunks/src.js\";\nimport { _ as getProjectProvider } from \"../../../../../../chunks/providers.server.js\";\nimport { v as requireInstanceAdmin } from \"../../../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\n//#region src/routes/api/admin/projects/[id]/+server.ts\nvar UpdatePlatformProjectBody = z.object({\n\tname: z.string().min(1).max(128).trim(),\n\tdescription: z.string().max(2e3).nullish()\n}).partial();\nasync function loadPlatformProjectOr404(id) {\n\tconst project = await getProjectProvider().getProject(SYSTEM_CONTEXT, id);\n\tif (!project || project.visibility !== \"platform\") apiError(404, ApiErrorCode.NOT_FOUND, \"Platform project not found\");\n\treturn project;\n}\nvar GET = async ({ params, locals }) => {\n\trequireInstanceAdmin(locals);\n\tconst { id } = params;\n\tif (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID\");\n\ttry {\n\t\tconst project = await loadPlatformProjectOr404(id);\n\t\treturn json(project);\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to load platform project\");\n\t}\n};\nvar PATCH = async ({ params, request, locals }) => {\n\trequireInstanceAdmin(locals);\n\tconst { id } = params;\n\tif (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID\");\n\tconst body = await request.json().catch(() => null);\n\tconst parsed = UpdatePlatformProjectBody.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\ttry {\n\t\tawait loadPlatformProjectOr404(id);\n\t\tconst patch = {};\n\t\tif (parsed.data.name !== void 0) {\n\t\t\tpatch.name = parsed.data.name;\n\t\t\tpatch.slug = slugify(parsed.data.name);\n\t\t}\n\t\tif (parsed.data.description !== void 0) patch.description = parsed.data.description ?? void 0;\n\t\tawait getProjectProvider().updateProject(SYSTEM_CONTEXT, id, patch);\n\t\treturn new Response(null, { status: 204 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to update platform project\");\n\t}\n};\nvar DELETE = async ({ params, locals }) => {\n\trequireInstanceAdmin(locals);\n\tconst { id } = params;\n\tif (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID\");\n\ttry {\n\t\tawait loadPlatformProjectOr404(id);\n\t\tawait getProjectProvider().deleteProject(SYSTEM_CONTEXT, id);\n\t\treturn new Response(null, { status: 204 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to delete platform project\");\n\t}\n};\n//#endregion\nexport { DELETE, GET, PATCH };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAMA;AACA,IAAI,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;AACzC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACxC,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO;AACzC,CAAC,CAAC,CAAC,OAAO,EAAE;AACZ,eAAe,wBAAwB,CAAC,EAAE,EAAE;AAC5C,CAAC,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC;AAC1E,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,4BAA4B,CAAC;AACvH,CAAC,OAAO,OAAO;AACf;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AACxC,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACtB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;AAC7E,CAAC,IAAI;AACL,EAAE,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,EAAE,CAAC;AACpD,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC;AACtB,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,iCAAiC,CAAC;AACxD,CAAC;AACD;AACG,IAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACnD,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACtB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;AAC7E,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC;AACzD,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,IAAI;AACL,EAAE,MAAM,wBAAwB,CAAC,EAAE,CAAC;AACpC,EAAE,MAAM,KAAK,GAAG,EAAE;AAClB,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE;AACnC,GAAG,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI;AAChC,GAAG,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;AACzC,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,EAAE,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC;AAC/F,EAAE,MAAM,kBAAkB,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,EAAE,KAAK,CAAC;AACrE,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,mCAAmC,CAAC;AAC1D,CAAC;AACD;AACG,IAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACtB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;AAC7E,CAAC,IAAI;AACL,EAAE,MAAM,wBAAwB,CAAC,EAAE,CAAC;AACpC,EAAE,MAAM,kBAAkB,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC;AAC9D,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,mCAAmC,CAAC;AAC1D,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/projects/_id_/grants/_grantId_/_server.ts.js-CC-BOBX6.js

@@ -0,0 +1,34 @@
+import { S as SYSTEM_CONTEXT } from '../../../../../../../../chunks/src.js-BT_hYA9R.js';
+import { k as flag, q as getPlatformProjectGrantStore } from '../../../../../../../../chunks/providers.server.js-CzELnNVS.js';
+import { i as requireInstanceAdmin } from '../../../../../../../../chunks/access.server.js-BIqHLNTG.js';
+import { a as apiError, h as handleApiError, A as ApiErrorCode } from '../../../../../../../../chunks/api-errors.js-lGrRv5Z5.js';
+import 'zod';
+import '../../../../../../../../chunks/shared-server.js-v7CtcwjQ.js';
+import '../../../../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../../../../chunks/schema.js-CUwAGh_h.js';
+import '../../../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '../../../../../../../../chunks/utils2.js-DsxvyW9R.js';
+
+//#region src/routes/api/admin/projects/[id]/grants/[grantId]/+server.ts
+var DELETE = async ({ params, locals }) => {
+	requireInstanceAdmin(locals);
+	if (!flag("ENABLE_PLATFORM_PROJECTS")) apiError(404, ApiErrorCode.NOT_FOUND, "Not found");
+	const { grantId } = params;
+	if (!grantId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing grant ID");
+	try {
+		await getPlatformProjectGrantStore().delete(SYSTEM_CONTEXT, grantId);
+		return new Response(null, { status: 204 });
+	} catch (err) {
+		handleApiError(err, "Failed to revoke grant");
+	}
+};
+
+export { DELETE };
+//# sourceMappingURL=_server.ts.js-CC-BOBX6.js.map

package/build/server/chunks/entries/endpoints/api/admin/projects/_id_/grants/_grantId_/_server.ts.js-CC-BOBX6.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CC-BOBX6.js","sources":["../../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/projects/_id_/grants/_grantId_/_server.ts.js"],"sourcesContent":["import { t as SYSTEM_CONTEXT } from \"../../../../../../../../chunks/src.js\";\nimport { g as getPlatformProjectGrantStore, t as flag } from \"../../../../../../../../chunks/providers.server.js\";\nimport { v as requireInstanceAdmin } from \"../../../../../../../../chunks/access.server.js\";\nimport { n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../../../../chunks/api-errors.js\";\n//#region src/routes/api/admin/projects/[id]/grants/[grantId]/+server.ts\nvar DELETE = async ({ params, locals }) => {\n\trequireInstanceAdmin(locals);\n\tif (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n\tconst { grantId } = params;\n\tif (!grantId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing grant ID\");\n\ttry {\n\t\tawait getPlatformProjectGrantStore().delete(SYSTEM_CONTEXT, grantId);\n\t\treturn new Response(null, { status: 204 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to revoke grant\");\n\t}\n};\n//#endregion\nexport { DELETE };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAIA;AACG,IAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC1F,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM;AAC3B,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;AAChF,CAAC,IAAI;AACL,EAAE,MAAM,4BAA4B,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC;AACtE,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAC/C,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/projects/_id_/grants/_server.ts.js-BVKz7YxH.js

@@ -0,0 +1,72 @@
+import { S as SYSTEM_CONTEXT } from '../../../../../../../chunks/src.js-BT_hYA9R.js';
+import { q as getPlatformProjectGrantStore, e as getOrganizationProvider, u as getUserProfileStore, k as flag, f as getProjectProvider } from '../../../../../../../chunks/providers.server.js-CzELnNVS.js';
+import { i as requireInstanceAdmin } from '../../../../../../../chunks/access.server.js-BIqHLNTG.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from '../../../../../../../chunks/api-errors.js-lGrRv5Z5.js';
+import { json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { randomUUID } from 'node:crypto';
+import '../../../../../../../chunks/shared-server.js-v7CtcwjQ.js';
+import '../../../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../../../chunks/schema.js-CUwAGh_h.js';
+import '../../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../../chunks/utils2.js-DsxvyW9R.js';
+
+//#region src/routes/api/admin/projects/[id]/grants/+server.ts
+var CreateGrantBody = z.object({
+	granteeType: z.enum(["org", "user"]),
+	granteeId: z.string().min(1),
+	canSolve: z.boolean()
+});
+async function assertPlatformProject(id) {
+	if (!flag("ENABLE_PLATFORM_PROJECTS")) apiError(404, ApiErrorCode.NOT_FOUND, "Not found");
+	const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, id);
+	if (!project || project.visibility !== "platform") apiError(404, ApiErrorCode.NOT_FOUND, "Platform project not found");
+	return project;
+}
+var GET = async ({ params, locals }) => {
+	requireInstanceAdmin(locals);
+	const { id } = params;
+	if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
+	try {
+		await assertPlatformProject(id);
+		const grants = await getPlatformProjectGrantStore().listByProject(SYSTEM_CONTEXT, id);
+		return json({ grants });
+	} catch (err) {
+		handleApiError(err, "Failed to list grants");
+	}
+};
+var POST = async ({ params, request, locals }) => {
+	const user = requireInstanceAdmin(locals);
+	const { id } = params;
+	if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
+	const body = await request.json().catch(() => null);
+	const parsed = CreateGrantBody.safeParse(body);
+	if (!parsed.success) throwZodError(parsed.error);
+	try {
+		await assertPlatformProject(id);
+		if (parsed.data.granteeType === "org") {
+			if (!await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, parsed.data.granteeId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Organization '${parsed.data.granteeId}' not found`);
+		} else if (!await getUserProfileStore().getProfile(SYSTEM_CONTEXT, parsed.data.granteeId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `User '${parsed.data.granteeId}' not found`);
+		const grant = {
+			id: randomUUID(),
+			projectId: id,
+			granteeType: parsed.data.granteeType,
+			granteeId: parsed.data.granteeId,
+			canSolve: parsed.data.canSolve,
+			createdBy: user.id,
+			createdAt: (/* @__PURE__ */ new Date()).toISOString()
+		};
+		await getPlatformProjectGrantStore().create(SYSTEM_CONTEXT, grant);
+		return json(grant, { status: 201 });
+	} catch (err) {
+		handleApiError(err, "Failed to create grant");
+	}
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-BVKz7YxH.js.map

package/build/server/chunks/entries/endpoints/api/admin/projects/_id_/grants/_server.ts.js-BVKz7YxH.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-BVKz7YxH.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/projects/_id_/grants/_server.ts.js"],"sourcesContent":["import { t as SYSTEM_CONTEXT } from \"../../../../../../../chunks/src.js\";\nimport { _ as getProjectProvider, g as getPlatformProjectGrantStore, m as getOrganizationProvider, t as flag, x as getUserProfileStore } from \"../../../../../../../chunks/providers.server.js\";\nimport { v as requireInstanceAdmin } from \"../../../../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/api/admin/projects/[id]/grants/+server.ts\nvar CreateGrantBody = z.object({\n\tgranteeType: z.enum([\"org\", \"user\"]),\n\tgranteeId: z.string().min(1),\n\tcanSolve: z.boolean()\n});\nasync function assertPlatformProject(id) {\n\tif (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n\tconst project = await getProjectProvider().getProject(SYSTEM_CONTEXT, id);\n\tif (!project || project.visibility !== \"platform\") apiError(404, ApiErrorCode.NOT_FOUND, \"Platform project not found\");\n\treturn project;\n}\nvar GET = async ({ params, locals }) => {\n\trequireInstanceAdmin(locals);\n\tconst { id } = params;\n\tif (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID\");\n\ttry {\n\t\tawait assertPlatformProject(id);\n\t\tconst grants = await getPlatformProjectGrantStore().listByProject(SYSTEM_CONTEXT, id);\n\t\treturn json({ grants });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to list grants\");\n\t}\n};\nvar POST = async ({ params, request, locals }) => {\n\tconst user = requireInstanceAdmin(locals);\n\tconst { id } = params;\n\tif (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID\");\n\tconst body = await request.json().catch(() => null);\n\tconst parsed = CreateGrantBody.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\ttry {\n\t\tawait assertPlatformProject(id);\n\t\tif (parsed.data.granteeType === \"org\") {\n\t\t\tif (!await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, parsed.data.granteeId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Organization '${parsed.data.granteeId}' not found`);\n\t\t} else if (!await getUserProfileStore().getProfile(SYSTEM_CONTEXT, parsed.data.granteeId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `User '${parsed.data.granteeId}' not found`);\n\t\tconst grant = {\n\t\t\tid: randomUUID(),\n\t\t\tprojectId: id,\n\t\t\tgranteeType: parsed.data.granteeType,\n\t\t\tgranteeId: parsed.data.granteeId,\n\t\t\tcanSolve: parsed.data.canSolve,\n\t\t\tcreatedBy: user.id,\n\t\t\tcreatedAt: (/* @__PURE__ */ new Date()).toISOString()\n\t\t};\n\t\tawait getPlatformProjectGrantStore().create(SYSTEM_CONTEXT, grant);\n\t\treturn json(grant, { status: 201 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to create grant\");\n\t}\n};\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAOA;AACA,IAAI,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;AAC/B,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7B,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO;AACpB,CAAC,CAAC;AACF,eAAe,qBAAqB,CAAC,EAAE,EAAE;AACzC,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC1F,CAAC,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC;AAC1E,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,4BAA4B,CAAC;AACvH,CAAC,OAAO,OAAO;AACf;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AACxC,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACtB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;AAC7E,CAAC,IAAI;AACL,EAAE,MAAM,qBAAqB,CAAC,EAAE,CAAC;AACjC,EAAE,MAAM,MAAM,GAAG,MAAM,4BAA4B,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC;AACvF,EAAE,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;AACzB,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,uBAAuB,CAAC;AAC9C,CAAC;AACD;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAClD,CAAC,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC1C,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACtB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;AAC7E,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAC/C,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,IAAI;AACL,EAAE,MAAM,qBAAqB,CAAC,EAAE,CAAC;AACjC,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,KAAK,EAAE;AACzC,GAAG,IAAI,CAAC,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AACzL,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,mBAAmB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AACvL,EAAE,MAAM,KAAK,GAAG;AAChB,GAAG,EAAE,EAAE,UAAU,EAAE;AACnB,GAAG,SAAS,EAAE,EAAE;AAChB,GAAG,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AACvC,GAAG,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;AACnC,GAAG,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;AACjC,GAAG,SAAS,EAAE,IAAI,CAAC,EAAE;AACrB,GAAG,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW;AACtD,GAAG;AACH,EAAE,MAAM,4BAA4B,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC;AACpE,EAAE,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACrC,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AAC/C,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/projects/_server.ts.js-CL75fPB-.js

@@ -0,0 +1,103 @@
+import { S as SYSTEM_CONTEXT, s as slugify } from '../../../../../chunks/src.js-BT_hYA9R.js';
+import { k as flag, e as getOrganizationProvider, f as getProjectProvider, P as ProviderError } from '../../../../../chunks/providers.server.js-CzELnNVS.js';
+import { i as requireInstanceAdmin } from '../../../../../chunks/access.server.js-BIqHLNTG.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-lGrRv5Z5.js';
+import { json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { randomUUID } from 'node:crypto';
+import '../../../../../chunks/shared-server.js-v7CtcwjQ.js';
+import '../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../chunks/schema.js-CUwAGh_h.js';
+import '../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../chunks/utils2.js-DsxvyW9R.js';
+
+//#region src/routes/api/admin/projects/+server.ts
+var MAX_SLUG_ATTEMPTS = 25;
+function isSlugConflict(err) {
+	return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);
+}
+function isNameConflict(err) {
+	return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);
+}
+var CreatePlatformProjectBody = z.object({
+	name: z.string().min(1, "Project name is required").max(128).trim(),
+	description: z.string().max(2e3).optional(),
+	/**
+	* Org that physically hosts the project. Storage routing and compute
+	* resolution use this — but org membership in this org does NOT grant
+	* access. Visibility = 'platform' overrides those defaults.
+	*
+	* If omitted, the platform admin's first available org is used.
+	*/
+	orgId: z.string().uuid().optional()
+});
+/**
+* §4a — list every platform-visibility project on the instance. Uses
+* `SYSTEM_CONTEXT` because admin reads cross every org boundary; the route is
+* gated on `instance_admin`.
+*/
+var GET = async ({ locals }) => {
+	requireInstanceAdmin(locals);
+	if (!flag("ENABLE_PLATFORM_PROJECTS")) apiError(404, ApiErrorCode.NOT_FOUND, "Not found");
+	try {
+		const orgs = await getOrganizationProvider().listOrgs(SYSTEM_CONTEXT, { limit: 1e3 });
+		const all = [];
+		for (const org of orgs.items) {
+			const page = await getProjectProvider().listProjects(SYSTEM_CONTEXT, org.id, { limit: 1e3 });
+			for (const p of page.items) if (p.visibility === "platform") all.push(p);
+		}
+		return json({ projects: all });
+	} catch (err) {
+		handleApiError(err, "Failed to list platform projects");
+	}
+};
+var POST = async ({ request, locals }) => {
+	const user = requireInstanceAdmin(locals);
+	if (!flag("ENABLE_PLATFORM_PROJECTS")) apiError(404, ApiErrorCode.NOT_FOUND, "Not found");
+	const ctx = locals.ctx;
+	const body = await request.json().catch(() => null);
+	const parsed = CreatePlatformProjectBody.safeParse(body);
+	if (!parsed.success) throwZodError(parsed.error);
+	const hostOrgId = parsed.data.orgId ?? ctx.actingOrgId;
+	if (!hostOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "A host orgId is required (no active organization in context).");
+	if (!await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, hostOrgId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Host organization '${hostOrgId}' not found.`);
+	const projectStore = getProjectProvider();
+	const baseSlug = slugify(parsed.data.name) || "platform-project";
+	const now = (/* @__PURE__ */ new Date()).toISOString();
+	const projectId = randomUUID();
+	for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {
+		const slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;
+		const project = {
+			id: projectId,
+			orgId: hostOrgId,
+			name: parsed.data.name,
+			slug,
+			description: parsed.data.description,
+			visibility: "platform",
+			ownerId: user.id,
+			createdBy: user.id,
+			updatedBy: user.id,
+			autoJoinOnUpload: false,
+			createdAt: now,
+			updatedAt: now,
+			deletedAt: null
+		};
+		try {
+			await projectStore.createProject(SYSTEM_CONTEXT, project);
+			return json(project, { status: 201 });
+		} catch (err) {
+			if (isNameConflict(err)) apiError(409, ApiErrorCode.CONFLICT, "A project with that name already exists in the host organization.");
+			if (isSlugConflict(err)) continue;
+			handleApiError(err, "Failed to create platform project");
+		}
+	}
+	apiError(409, ApiErrorCode.CONFLICT, "Could not pick a unique project slug after several attempts.");
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-CL75fPB-.js.map