@selvajs/selva 4.8.1 → 4.9.0

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/versions/_server.ts.js-B9_13-zg.js

@@ -0,0 +1,54 @@
+import { G as GuidSchema, i as GH_EXTENSIONS } from '../../../../../../../chunks/src.js-BT_hYA9R.js';
+import { o as getDefinitionMeta, B as fetchSchemaFromCompute, G as getDefinitionService } from '../../../../../../../chunks/providers.server.js-BpypQ-ag.js';
+import { k as requireCanViewProject, o as requireEditableDefinition } from '../../../../../../../chunks/access.server.js-KIv3puod.js';
+import { a as apiError, A as ApiErrorCode, r as resolveServerForOrg } from '../../../../../../../chunks/api-errors.js-BtMe4WGg.js';
+import { g as MAX_DEFINITION_FILE_SIZE } from '../../../../../../../chunks/computeLimits.js-DX7I53Ag.js';
+import { a as parseListOptions } from '../../../../../../../chunks/pagination.server.js-B3tH2LPH.js';
+import { a as apiRoute, p as parseParam, c as collection, b as requireUpload, f as formText, d as created } from '../../../../../../../chunks/route.js-DglhoMVE.js';
+import 'zod';
+import '../../../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../../../chunks/schema.js-BeFDxIuz.js';
+import '../../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '../../../../../../../chunks/utils2.js-BCcPTZc4.js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/api/v1/definitions/[guid]/versions/+server.ts
+var GET = apiRoute("Failed to list versions", async ({ params, locals, url }) => {
+	const guid = parseParam(params.guid, GuidSchema, "GUID");
+	if (!locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
+	const def = await getDefinitionMeta().get(locals.ctx, guid);
+	if (!def) apiError(404, ApiErrorCode.NOT_FOUND, "Definition not found");
+	await requireCanViewProject(locals, def.projectId);
+	return collection(await getDefinitionMeta().listVersions(locals.ctx, guid, parseListOptions(url)));
+});
+/**
+* Upload a new version. Advances `draft`; `live` is unchanged until publish.
+*/
+var POST = apiRoute("Failed to upload definition version", async ({ params, request, locals }) => {
+	const guid = parseParam(params.guid, GuidSchema, "GUID");
+	const form = await request.formData();
+	const { file, extension } = requireUpload(form, "file", {
+		maxBytes: MAX_DEFINITION_FILE_SIZE,
+		extensions: GH_EXTENSIONS,
+		label: "Grasshopper (.gh or .ghx) file"
+	});
+	const changeNote = formText(form, "changeNote", { maxLength: 1e3 });
+	const { ctx, record, project } = await requireEditableDefinition(locals, guid);
+	const data = new Uint8Array(await file.arrayBuffer());
+	const server = await resolveServerForOrg(ctx, project?.orgId ?? null, { definitionPin: record.computeServerId ?? null });
+	const schema = await fetchSchemaFromCompute(data, server);
+	const version = await getDefinitionService().uploadVersion(ctx, guid, data, extension.slice(1), file.name, schema, changeNote);
+	return created({ version });
+});
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-B9_13-zg.js.map

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/versions/_server.ts.js-B9_13-zg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-B9_13-zg.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/definitions/_guid_/versions/_server.ts.js"],"sourcesContent":["import { d as GH_EXTENSIONS, s as GuidSchema } from \"../../../../../../../chunks/src.js\";\nimport { M as fetchSchemaFromCompute, c as getDefinitionService, s as getDefinitionMeta } from \"../../../../../../../chunks/providers.server.js\";\nimport { _ as requireEditableDefinition, g as requireCanViewProject } from \"../../../../../../../chunks/access.server.js\";\nimport { n as apiError, o as resolveServerForOrg, t as ApiErrorCode } from \"../../../../../../../chunks/api-errors.js\";\nimport { a as MAX_DEFINITION_FILE_SIZE } from \"../../../../../../../chunks/computeLimits.js\";\nimport \"../../../../../../../chunks/definitions.js\";\nimport \"../../../../../../../chunks/admin-config.js\";\nimport { n as parseListOptions } from \"../../../../../../../chunks/pagination.server.js\";\nimport { i as formText, n as collection, r as created, s as parseParam, t as apiRoute, u as requireUpload } from \"../../../../../../../chunks/route.js\";\n//#region src/routes/api/v1/definitions/[guid]/versions/+server.ts\nvar GET = apiRoute(\"Failed to list versions\", async ({ params, locals, url }) => {\n\tconst guid = parseParam(params.guid, GuidSchema, \"GUID\");\n\tif (!locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n\tconst def = await getDefinitionMeta().get(locals.ctx, guid);\n\tif (!def) apiError(404, ApiErrorCode.NOT_FOUND, \"Definition not found\");\n\tawait requireCanViewProject(locals, def.projectId);\n\treturn collection(await getDefinitionMeta().listVersions(locals.ctx, guid, parseListOptions(url)));\n});\n/**\n* Upload a new version. Advances `draft`; `live` is unchanged until publish.\n*/\nvar POST = apiRoute(\"Failed to upload definition version\", async ({ params, request, locals }) => {\n\tconst guid = parseParam(params.guid, GuidSchema, \"GUID\");\n\tconst form = await request.formData();\n\tconst { file, extension } = requireUpload(form, \"file\", {\n\t\tmaxBytes: MAX_DEFINITION_FILE_SIZE,\n\t\textensions: GH_EXTENSIONS,\n\t\tlabel: \"Grasshopper (.gh or .ghx) file\"\n\t});\n\tconst changeNote = formText(form, \"changeNote\", { maxLength: 1e3 });\n\tconst { ctx, record, project } = await requireEditableDefinition(locals, guid);\n\tconst data = new Uint8Array(await file.arrayBuffer());\n\tconst server = await resolveServerForOrg(ctx, project?.orgId ?? null, { definitionPin: record.computeServerId ?? null });\n\tconst schema = await fetchSchemaFromCompute(data, server);\n\tconst version = await getDefinitionService().uploadVersion(ctx, guid, data, extension.slice(1), file.name, schema, changeNote);\n\treturn created({ version });\n});\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AASA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,yBAAyB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACjF,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AACzD,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC1E,CAAC,MAAM,GAAG,GAAG,MAAM,iBAAiB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC;AAC5D,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,sBAAsB,CAAC;AACxE,CAAC,MAAM,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC;AACnD,CAAC,OAAO,UAAU,CAAC,MAAM,iBAAiB,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;AACnG,CAAC;AACD;AACA;AACA;AACG,IAAC,IAAI,GAAG,QAAQ,CAAC,qCAAqC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAClG,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AACzD,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;AACtC,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE;AACzD,EAAE,QAAQ,EAAE,wBAAwB;AACpC,EAAE,UAAU,EAAE,aAAa;AAC3B,EAAE,KAAK,EAAE;AACT,EAAE,CAAC;AACH,CAAC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;AACpE,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC;AAC/E,CAAC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;AACzH,CAAC,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC;AAC1D,CAAC,MAAM,OAAO,GAAG,MAAM,oBAAoB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC;AAC/H,CAAC,OAAO,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/versions/_versionId_/_server.ts.js-CNAbhih6.js

@@ -0,0 +1,48 @@
+import { G as GuidSchema } from '../../../../../../../../chunks/src.js-BT_hYA9R.js';
+import { G as getDefinitionService } from '../../../../../../../../chunks/providers.server.js-BpypQ-ag.js';
+import { o as requireEditableDefinition } from '../../../../../../../../chunks/access.server.js-KIv3puod.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../../../chunks/api-errors.js-BtMe4WGg.js';
+import { a as loadVisibleVersion } from '../../../../../../../../chunks/visibility.server.js-Cww3wle8.js';
+import { a as apiRoute, p as parseParam, r as requireCaller, n as noContent } from '../../../../../../../../chunks/route.js-DglhoMVE.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../../../../chunks/schema.js-BeFDxIuz.js';
+import '../../../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../../../chunks/utils2.js-BCcPTZc4.js';
+
+//#region src/routes/api/v1/definitions/[guid]/versions/[versionId]/+server.ts
+/**
+* Version metadata. `schema` is excluded and served by the `/schema`
+* sub-resource, so a version read never carries a several-hundred-KB blob.
+*/
+var GET = apiRoute("Failed to load version", async ({ params, locals }) => {
+	const guid = parseParam(params.guid, GuidSchema, "GUID");
+	const versionId = parseParam(params.versionId, GuidSchema, "version ID");
+	const { ctx } = requireCaller(locals);
+	const version = await loadVisibleVersion(ctx, guid, versionId);
+	if (!version) apiError(404, ApiErrorCode.NOT_FOUND, "Version not found");
+	const { schema: _schema, ...rest } = version;
+	return json(rest);
+});
+/**
+* Delete an old version. The store throws 409 if the version is currently
+* referenced by `liveVersionId` or `draftVersionId` — repoint first.
+*/
+var DELETE = apiRoute("Failed to delete version", async ({ params, locals }) => {
+	const guid = parseParam(params.guid, GuidSchema, "GUID");
+	const versionId = parseParam(params.versionId, GuidSchema, "version ID");
+	const { ctx } = await requireEditableDefinition(locals, guid);
+	await getDefinitionService().deleteVersion(ctx, guid, versionId);
+	return noContent();
+});
+
+export { DELETE, GET };
+//# sourceMappingURL=_server.ts.js-CNAbhih6.js.map

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/versions/_versionId_/_server.ts.js-CNAbhih6.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CNAbhih6.js","sources":["../../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/definitions/_guid_/versions/_versionId_/_server.ts.js"],"sourcesContent":["import { s as GuidSchema } from \"../../../../../../../../chunks/src.js\";\nimport { c as getDefinitionService } from \"../../../../../../../../chunks/providers.server.js\";\nimport { _ as requireEditableDefinition } from \"../../../../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../../../chunks/api-errors.js\";\nimport \"../../../../../../../../chunks/definitions.js\";\nimport { r as loadVisibleVersion } from \"../../../../../../../../chunks/visibility.server.js\";\nimport { a as noContent, c as requireCaller, s as parseParam, t as apiRoute } from \"../../../../../../../../chunks/route.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/v1/definitions/[guid]/versions/[versionId]/+server.ts\n/**\n* Version metadata. `schema` is excluded and served by the `/schema`\n* sub-resource, so a version read never carries a several-hundred-KB blob.\n*/\nvar GET = apiRoute(\"Failed to load version\", async ({ params, locals }) => {\n\tconst guid = parseParam(params.guid, GuidSchema, \"GUID\");\n\tconst versionId = parseParam(params.versionId, GuidSchema, \"version ID\");\n\tconst { ctx } = requireCaller(locals);\n\tconst version = await loadVisibleVersion(ctx, guid, versionId);\n\tif (!version) apiError(404, ApiErrorCode.NOT_FOUND, \"Version not found\");\n\tconst { schema: _schema, ...rest } = version;\n\treturn json(rest);\n});\n/**\n* Delete an old version. The store throws 409 if the version is currently\n* referenced by `liveVersionId` or `draftVersionId` — repoint first.\n*/\nvar DELETE = apiRoute(\"Failed to delete version\", async ({ params, locals }) => {\n\tconst guid = parseParam(params.guid, GuidSchema, \"GUID\");\n\tconst versionId = parseParam(params.versionId, GuidSchema, \"version ID\");\n\tconst { ctx } = await requireEditableDefinition(locals, guid);\n\tawait getDefinitionService().deleteVersion(ctx, guid, versionId);\n\treturn noContent();\n});\n//#endregion\nexport { DELETE, GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAQA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3E,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AACzD,CAAC,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC;AACzE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AACtC,CAAC,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC;AAC/D,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,mBAAmB,CAAC;AACzE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO;AAC7C,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC;AAClB,CAAC;AACD;AACA;AACA;AACA;AACG,IAAC,MAAM,GAAG,QAAQ,CAAC,0BAA0B,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAChF,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AACzD,CAAC,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC;AACzE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC;AAC9D,CAAC,MAAM,oBAAoB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC;AACjE,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/versions/_versionId_/schema/_server.ts.js-1LTOuS1n.js

@@ -0,0 +1,40 @@
+import { G as GuidSchema } from '../../../../../../../../../chunks/src.js-BT_hYA9R.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../../../../chunks/api-errors.js-BtMe4WGg.js';
+import { a as loadVisibleVersion } from '../../../../../../../../../chunks/visibility.server.js-Cww3wle8.js';
+import { a as apiRoute, p as parseParam, r as requireCaller } from '../../../../../../../../../chunks/route.js-DglhoMVE.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../../../../../chunks/providers.server.js-BpypQ-ag.js';
+import '../../../../../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../../../../../chunks/schema.js-BeFDxIuz.js';
+import '../../../../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../../../../chunks/utils2.js-BCcPTZc4.js';
+import '../../../../../../../../../chunks/access.server.js-KIv3puod.js';
+
+//#region src/routes/api/v1/definitions/[guid]/versions/[versionId]/schema/+server.ts
+/**
+* The UI schema cached on this version at upload. Reads what is stored — no
+* Rhino.Compute round-trip, unlike the pre-upload `POST /api/v1/compute/schema`.
+*
+* Schemas belong to a version, so this is the canonical location;
+* `/definitions/{guid}/schema` is an alias for the live one.
+*/
+var GET = apiRoute("Failed to load version schema", async ({ params, locals }) => {
+	const guid = parseParam(params.guid, GuidSchema, "GUID");
+	const versionId = parseParam(params.versionId, GuidSchema, "version ID");
+	const { ctx } = requireCaller(locals);
+	const version = await loadVisibleVersion(ctx, guid, versionId);
+	if (!version) apiError(404, ApiErrorCode.NOT_FOUND, "Version not found");
+	if (!version.schema) apiError(404, ApiErrorCode.NOT_FOUND, "No schema cached for this version");
+	return json(version.schema);
+});
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-1LTOuS1n.js.map

package/build/server/chunks/entries/endpoints/api/v1/definitions/_guid_/versions/_versionId_/schema/_server.ts.js-1LTOuS1n.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-1LTOuS1n.js","sources":["../../../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/definitions/_guid_/versions/_versionId_/schema/_server.ts.js"],"sourcesContent":["import { s as GuidSchema } from \"../../../../../../../../../chunks/src.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../../../../chunks/api-errors.js\";\nimport \"../../../../../../../../../chunks/definitions.js\";\nimport { r as loadVisibleVersion } from \"../../../../../../../../../chunks/visibility.server.js\";\nimport { c as requireCaller, s as parseParam, t as apiRoute } from \"../../../../../../../../../chunks/route.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/v1/definitions/[guid]/versions/[versionId]/schema/+server.ts\n/**\n* The UI schema cached on this version at upload. Reads what is stored — no\n* Rhino.Compute round-trip, unlike the pre-upload `POST /api/v1/compute/schema`.\n*\n* Schemas belong to a version, so this is the canonical location;\n* `/definitions/{guid}/schema` is an alias for the live one.\n*/\nvar GET = apiRoute(\"Failed to load version schema\", async ({ params, locals }) => {\n\tconst guid = parseParam(params.guid, GuidSchema, \"GUID\");\n\tconst versionId = parseParam(params.versionId, GuidSchema, \"version ID\");\n\tconst { ctx } = requireCaller(locals);\n\tconst version = await loadVisibleVersion(ctx, guid, versionId);\n\tif (!version) apiError(404, ApiErrorCode.NOT_FOUND, \"Version not found\");\n\tif (!version.schema) apiError(404, ApiErrorCode.NOT_FOUND, \"No schema cached for this version\");\n\treturn json(version.schema);\n});\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAMA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,+BAA+B,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAClF,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC;AACzD,CAAC,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC;AACzE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AACtC,CAAC,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC;AAC/D,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,mBAAmB,CAAC;AACzE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,mCAAmC,CAAC;AAChG,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;AAC5B,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/definitions/_server.ts.js-DHSwgJBs.js

@@ -0,0 +1,113 @@
+import { g as toDefinitionListItem, i as GH_EXTENSIONS, j as CreateDefinitionInputSchema } from '../../../../../chunks/src.js-BT_hYA9R.js';
+import { f as getProjectProvider, B as fetchSchemaFromCompute, G as getDefinitionService } from '../../../../../chunks/providers.server.js-BpypQ-ag.js';
+import { n as requireCanCreateDefinition } from '../../../../../chunks/access.server.js-KIv3puod.js';
+import { a as apiError, A as ApiErrorCode, t as throwZodError, r as resolveServerForOrg } from '../../../../../chunks/api-errors.js-BtMe4WGg.js';
+import { g as MAX_DEFINITION_FILE_SIZE, M as MAX_IMAGE_FILE_SIZE } from '../../../../../chunks/computeLimits.js-DX7I53Ag.js';
+import { l as listVisibleDefinitions } from '../../../../../chunks/visibility.server.js-Cww3wle8.js';
+import { p as parseDefinitionListOptions } from '../../../../../chunks/pagination.server.js-B3tH2LPH.js';
+import { a as apiRoute, r as requireCaller, c as collection, b as requireUpload, f as formText, d as created } from '../../../../../chunks/route.js-DglhoMVE.js';
+import { randomUUID } from 'node:crypto';
+import 'zod';
+import '../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../chunks/schema.js-BeFDxIuz.js';
+import '../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '../../../../../chunks/utils2.js-BCcPTZc4.js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/api/v1/definitions/+server.ts
+var LISTABLE_STATUSES = [
+	"draft",
+	"published",
+	"archived"
+];
+/**
+* Definitions the caller can view. Visibility is resolved into the query via
+* `projectIds`, so `limit`/`nextCursor` describe the filtered set.
+*/
+var GET = apiRoute("Failed to list definitions", async ({ locals, url }) => {
+	const { ctx } = requireCaller(locals);
+	const statusParam = url.searchParams.get("status");
+	if (statusParam && !LISTABLE_STATUSES.includes(statusParam)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `status must be one of: ${LISTABLE_STATUSES.join(", ")}`);
+	const page = await listVisibleDefinitions(ctx, {
+		...parseDefinitionListOptions(url),
+		projectId: url.searchParams.get("projectId") ?? void 0,
+		statuses: statusParam ? [statusParam] : void 0
+	});
+	return collection({
+		items: page.items.map(toDefinitionListItem),
+		nextCursor: page.nextCursor
+	});
+});
+function parseTags(raw) {
+	if (!raw) return void 0;
+	const tags = raw.split(",").map((t) => t.trim()).filter(Boolean);
+	return tags.length ? tags : void 0;
+}
+/** Create a definition — metadata and the Grasshopper file in one request. */
+var POST = apiRoute("Failed to create definition", async ({ request, locals }) => {
+	const ctx = locals.ctx;
+	const form = await request.formData();
+	const { file, extension } = requireUpload(form, "file", {
+		maxBytes: MAX_DEFINITION_FILE_SIZE,
+		extensions: GH_EXTENSIONS,
+		label: "Grasshopper (.gh or .ghx) file"
+	});
+	const imageFile = form.get("image");
+	if (imageFile instanceof File && imageFile.size > MAX_IMAGE_FILE_SIZE) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Image too large. Max size: ${MAX_IMAGE_FILE_SIZE / 1048576} MB`);
+	let projectId = formText(form, "projectId");
+	if (!projectId) {
+		if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
+		const fallback = (await getProjectProvider().listProjects(ctx, ctx.actingOrgId, { limit: 1 })).items[0];
+		if (!fallback) apiError(500, ApiErrorCode.INTERNAL, "No project configured");
+		projectId = fallback.id;
+	}
+	const { project } = await requireCanCreateDefinition(locals, projectId);
+	const parsed = CreateDefinitionInputSchema.safeParse({
+		displayName: formText(form, "displayName"),
+		description: formText(form, "description"),
+		category: formText(form, "category"),
+		coverImage: formText(form, "coverImage"),
+		tags: parseTags(formText(form, "tags")),
+		projectId,
+		computeServerId: formText(form, "computeServerId")
+	});
+	if (!parsed.success) throwZodError(parsed.error);
+	const guid = randomUUID();
+	const fileData = new Uint8Array(await file.arrayBuffer());
+	const server = await resolveServerForOrg(ctx, project.orgId, { definitionPin: parsed.data.computeServerId ?? null });
+	const schema = await fetchSchemaFromCompute(fileData, server);
+	const { record, version } = await getDefinitionService().create(ctx, {
+		guid,
+		projectId: parsed.data.projectId,
+		ownerId: locals.user.id,
+		fileExt: extension.slice(1),
+		originalFilename: file.name,
+		computeServerId: parsed.data.computeServerId,
+		displayName: parsed.data.displayName.trim(),
+		description: parsed.data.description,
+		category: parsed.data.category,
+		tags: parsed.data.tags,
+		coverImage: parsed.data.coverImage
+	}, fileData, schema);
+	let coverImage = record.coverImage;
+	if (imageFile instanceof File && imageFile.size > 0) {
+		const imageData = new Uint8Array(await imageFile.arrayBuffer());
+		coverImage = await getDefinitionService().saveCoverImage(ctx, guid, imageData);
+	}
+	return created({
+		guid,
+		version,
+		coverImage
+	});
+});
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-DHSwgJBs.js.map

package/build/server/chunks/entries/endpoints/api/v1/definitions/_server.ts.js-DHSwgJBs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-DHSwgJBs.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/definitions/_server.ts.js"],"sourcesContent":["import { d as GH_EXTENSIONS, f as toDefinitionListItem, o as CreateDefinitionInputSchema } from \"../../../../../chunks/src.js\";\nimport { M as fetchSchemaFromCompute, _ as getProjectProvider, c as getDefinitionService } from \"../../../../../chunks/providers.server.js\";\nimport { s as requireCanCreateDefinition } from \"../../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, o as resolveServerForOrg, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { a as MAX_DEFINITION_FILE_SIZE, o as MAX_IMAGE_FILE_SIZE } from \"../../../../../chunks/computeLimits.js\";\nimport \"../../../../../chunks/definitions.js\";\nimport \"../../../../../chunks/admin-config.js\";\nimport { n as listVisibleDefinitions } from \"../../../../../chunks/visibility.server.js\";\nimport { t as parseDefinitionListOptions } from \"../../../../../chunks/pagination.server.js\";\nimport { c as requireCaller, i as formText, n as collection, r as created, t as apiRoute, u as requireUpload } from \"../../../../../chunks/route.js\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/api/v1/definitions/+server.ts\nvar LISTABLE_STATUSES = [\n\t\"draft\",\n\t\"published\",\n\t\"archived\"\n];\n/**\n* Definitions the caller can view. Visibility is resolved into the query via\n* `projectIds`, so `limit`/`nextCursor` describe the filtered set.\n*/\nvar GET = apiRoute(\"Failed to list definitions\", async ({ locals, url }) => {\n\tconst { ctx } = requireCaller(locals);\n\tconst statusParam = url.searchParams.get(\"status\");\n\tif (statusParam && !LISTABLE_STATUSES.includes(statusParam)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `status must be one of: ${LISTABLE_STATUSES.join(\", \")}`);\n\tconst page = await listVisibleDefinitions(ctx, {\n\t\t...parseDefinitionListOptions(url),\n\t\tprojectId: url.searchParams.get(\"projectId\") ?? void 0,\n\t\tstatuses: statusParam ? [statusParam] : void 0\n\t});\n\treturn collection({\n\t\titems: page.items.map(toDefinitionListItem),\n\t\tnextCursor: page.nextCursor\n\t});\n});\nfunction parseTags(raw) {\n\tif (!raw) return void 0;\n\tconst tags = raw.split(\",\").map((t) => t.trim()).filter(Boolean);\n\treturn tags.length ? tags : void 0;\n}\n/** Create a definition — metadata and the Grasshopper file in one request. */\nvar POST = apiRoute(\"Failed to create definition\", async ({ request, locals }) => {\n\tconst ctx = locals.ctx;\n\tconst form = await request.formData();\n\tconst { file, extension } = requireUpload(form, \"file\", {\n\t\tmaxBytes: MAX_DEFINITION_FILE_SIZE,\n\t\textensions: GH_EXTENSIONS,\n\t\tlabel: \"Grasshopper (.gh or .ghx) file\"\n\t});\n\tconst imageFile = form.get(\"image\");\n\tif (imageFile instanceof File && imageFile.size > MAX_IMAGE_FILE_SIZE) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Image too large. Max size: ${MAX_IMAGE_FILE_SIZE / 1048576} MB`);\n\tlet projectId = formText(form, \"projectId\");\n\tif (!projectId) {\n\t\tif (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n\t\tconst fallback = (await getProjectProvider().listProjects(ctx, ctx.actingOrgId, { limit: 1 })).items[0];\n\t\tif (!fallback) apiError(500, ApiErrorCode.INTERNAL, \"No project configured\");\n\t\tprojectId = fallback.id;\n\t}\n\tconst { project } = await requireCanCreateDefinition(locals, projectId);\n\tconst parsed = CreateDefinitionInputSchema.safeParse({\n\t\tdisplayName: formText(form, \"displayName\"),\n\t\tdescription: formText(form, \"description\"),\n\t\tcategory: formText(form, \"category\"),\n\t\tcoverImage: formText(form, \"coverImage\"),\n\t\ttags: parseTags(formText(form, \"tags\")),\n\t\tprojectId,\n\t\tcomputeServerId: formText(form, \"computeServerId\")\n\t});\n\tif (!parsed.success) throwZodError(parsed.error);\n\tconst guid = randomUUID();\n\tconst fileData = new Uint8Array(await file.arrayBuffer());\n\tconst server = await resolveServerForOrg(ctx, project.orgId, { definitionPin: parsed.data.computeServerId ?? null });\n\tconst schema = await fetchSchemaFromCompute(fileData, server);\n\tconst { record, version } = await getDefinitionService().create(ctx, {\n\t\tguid,\n\t\tprojectId: parsed.data.projectId,\n\t\townerId: locals.user.id,\n\t\tfileExt: extension.slice(1),\n\t\toriginalFilename: file.name,\n\t\tcomputeServerId: parsed.data.computeServerId,\n\t\tdisplayName: parsed.data.displayName.trim(),\n\t\tdescription: parsed.data.description,\n\t\tcategory: parsed.data.category,\n\t\ttags: parsed.data.tags,\n\t\tcoverImage: parsed.data.coverImage\n\t}, fileData, schema);\n\tlet coverImage = record.coverImage;\n\tif (imageFile instanceof File && imageFile.size > 0) {\n\t\tconst imageData = new Uint8Array(await imageFile.arrayBuffer());\n\t\tcoverImage = await getDefinitionService().saveCoverImage(ctx, guid, imageData);\n\t}\n\treturn created({\n\t\tguid,\n\t\tversion,\n\t\tcoverImage\n\t});\n});\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAWA;AACA,IAAI,iBAAiB,GAAG;AACxB,CAAC,OAAO;AACR,CAAC,WAAW;AACZ,CAAC;AACD,CAAC;AACD;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,4BAA4B,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AAC5E,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AACtC,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;AACnD,CAAC,IAAI,WAAW,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,uBAAuB,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACrK,CAAC,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE;AAChD,EAAE,GAAG,0BAA0B,CAAC,GAAG,CAAC;AACpC,EAAE,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC;AACxD,EAAE,QAAQ,EAAE,WAAW,GAAG,CAAC,WAAW,CAAC,GAAG,KAAK;AAC/C,EAAE,CAAC;AACH,CAAC,OAAO,UAAU,CAAC;AACnB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC;AAC7C,EAAE,UAAU,EAAE,IAAI,CAAC;AACnB,EAAE,CAAC;AACH,CAAC;AACD,SAAS,SAAS,CAAC,GAAG,EAAE;AACxB,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,MAAM;AACxB,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;AACjE,CAAC,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,MAAM;AACnC;AACA;AACG,IAAC,IAAI,GAAG,QAAQ,CAAC,6BAA6B,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAClF,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;AACtC,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE;AACzD,EAAE,QAAQ,EAAE,wBAAwB;AACpC,EAAE,UAAU,EAAE,aAAa;AAC3B,EAAE,KAAK,EAAE;AACT,EAAE,CAAC;AACH,CAAC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AACpC,CAAC,IAAI,SAAS,YAAY,IAAI,IAAI,SAAS,CAAC,IAAI,GAAG,mBAAmB,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,2BAA2B,EAAE,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;AACvL,CAAC,IAAI,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;AAC5C,CAAC,IAAI,CAAC,SAAS,EAAE;AACjB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC/F,EAAE,MAAM,QAAQ,GAAG,CAAC,MAAM,kBAAkB,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AACzG,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,uBAAuB,CAAC;AAC9E,EAAE,SAAS,GAAG,QAAQ,CAAC,EAAE;AACzB,CAAC;AACD,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE,SAAS,CAAC;AACxE,CAAC,MAAM,MAAM,GAAG,2BAA2B,CAAC,SAAS,CAAC;AACtD,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;AAC5C,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;AAC5C,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;AACtC,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;AAC1C,EAAE,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACzC,EAAE,SAAS;AACX,EAAE,eAAe,EAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB;AACnD,EAAE,CAAC;AACH,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,MAAM,IAAI,GAAG,UAAU,EAAE;AAC1B,CAAC,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AAC1D,CAAC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;AACrH,CAAC,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC;AAC9D,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,oBAAoB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE;AACtE,EAAE,IAAI;AACN,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;AAClC,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AACzB,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7B,EAAE,gBAAgB,EAAE,IAAI,CAAC,IAAI;AAC7B,EAAE,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe;AAC9C,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;AAC7C,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AACtC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;AAChC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AACxB,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC;AAC1B,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC;AACrB,CAAC,IAAI,UAAU,GAAG,MAAM,CAAC,UAAU;AACnC,CAAC,IAAI,SAAS,YAAY,IAAI,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE;AACtD,EAAE,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC;AACjE,EAAE,UAAU,GAAG,MAAM,oBAAoB,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC;AAChF,CAAC;AACD,CAAC,OAAO,OAAO,CAAC;AAChB,EAAE,IAAI;AACN,EAAE,OAAO;AACT,EAAE;AACF,EAAE,CAAC;AACH,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/me/_server.ts.js-Dr_7kY9j.js

@@ -0,0 +1,39 @@
+import { a as apiRoute, r as requireCaller } from '../../../../../chunks/route.js-DglhoMVE.js';
+import { json } from '@sveltejs/kit';
+import '../../../../../chunks/api-errors.js-BtMe4WGg.js';
+import '../../../../../chunks/src.js-BT_hYA9R.js';
+import 'zod';
+import '../../../../../chunks/providers.server.js-BpypQ-ag.js';
+import '../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../chunks/schema.js-BeFDxIuz.js';
+import '../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../chunks/utils2.js-BCcPTZc4.js';
+
+//#region src/routes/api/v1/me/+server.ts
+/**
+* Whoami. The first call a non-browser client makes, and the only way a token
+* holder can see which org their credential resolved into — `actingOrgId` is
+* derived per request from the caller's membership, not frozen at mint time.
+*/
+var GET = apiRoute("Failed to load identity", async ({ locals }) => {
+	const { ctx, user } = requireCaller(locals);
+	return json({
+		userId: user.id,
+		email: user.email,
+		displayName: locals.profile?.displayName,
+		actingOrgId: ctx.actingOrgId,
+		platformPermissions: ctx.platformPermissions,
+		orgPermissions: ctx.orgPermissions,
+		starredDefinitions: locals.profile?.starredDefinitions ?? []
+	});
+});
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-Dr_7kY9j.js.map

package/build/server/chunks/entries/endpoints/api/v1/me/_server.ts.js-Dr_7kY9j.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-Dr_7kY9j.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/me/_server.ts.js"],"sourcesContent":["import { c as requireCaller, t as apiRoute } from \"../../../../../chunks/route.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/v1/me/+server.ts\n/**\n* Whoami. The first call a non-browser client makes, and the only way a token\n* holder can see which org their credential resolved into — `actingOrgId` is\n* derived per request from the caller's membership, not frozen at mint time.\n*/\nvar GET = apiRoute(\"Failed to load identity\", async ({ locals }) => {\n\tconst { ctx, user } = requireCaller(locals);\n\treturn json({\n\t\tuserId: user.id,\n\t\temail: user.email,\n\t\tdisplayName: locals.profile?.displayName,\n\t\tactingOrgId: ctx.actingOrgId,\n\t\tplatformPermissions: ctx.platformPermissions,\n\t\torgPermissions: ctx.orgPermissions,\n\t\tstarredDefinitions: locals.profile?.starredDefinitions ?? []\n\t});\n});\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAEA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,yBAAyB,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AAC5C,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;AACjB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK;AACnB,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW;AAC1C,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW;AAC9B,EAAE,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;AAC9C,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc;AACpC,EAAE,kBAAkB,EAAE,MAAM,CAAC,OAAO,EAAE,kBAAkB,IAAI;AAC5D,EAAE,CAAC;AACH,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/me/starred/_guid_/_server.ts.js-C1gdlWjq.js

@@ -0,0 +1,36 @@
+import { u as getUserProfileStore } from '../../../../../../../chunks/providers.server.js-BpypQ-ag.js';
+import { a as apiRoute, r as requireCaller, h as requireParams, n as noContent } from '../../../../../../../chunks/route.js-DglhoMVE.js';
+import '../../../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../../../chunks/src.js-BT_hYA9R.js';
+import 'zod';
+import '../../../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../../../chunks/schema.js-BeFDxIuz.js';
+import '../../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../../chunks/api-errors.js-BtMe4WGg.js';
+import '../../../../../../../chunks/utils2.js-BCcPTZc4.js';
+import '@sveltejs/kit';
+
+//#region src/routes/api/v1/me/starred/[guid]/+server.ts
+/** Star a definition for the calling user. Idempotent. */
+var PUT = apiRoute("Failed to star definition", async ({ params, locals }) => {
+	const { ctx, user } = requireCaller(locals);
+	const { guid } = requireParams(params, "guid");
+	await getUserProfileStore().starDefinition(ctx, user.id, guid);
+	return noContent();
+});
+/** Unstar a definition for the calling user. Idempotent. */
+var DELETE = apiRoute("Failed to unstar definition", async ({ params, locals }) => {
+	const { ctx, user } = requireCaller(locals);
+	const { guid } = requireParams(params, "guid");
+	await getUserProfileStore().unstarDefinition(ctx, user.id, guid);
+	return noContent();
+});
+
+export { DELETE, PUT };
+//# sourceMappingURL=_server.ts.js-C1gdlWjq.js.map

package/build/server/chunks/entries/endpoints/api/v1/me/starred/_guid_/_server.ts.js-C1gdlWjq.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-C1gdlWjq.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/me/starred/_guid_/_server.ts.js"],"sourcesContent":["import { x as getUserProfileStore } from \"../../../../../../../chunks/providers.server.js\";\nimport { a as noContent, c as requireCaller, l as requireParams, t as apiRoute } from \"../../../../../../../chunks/route.js\";\n//#region src/routes/api/v1/me/starred/[guid]/+server.ts\n/** Star a definition for the calling user. Idempotent. */\nvar PUT = apiRoute(\"Failed to star definition\", async ({ params, locals }) => {\n\tconst { ctx, user } = requireCaller(locals);\n\tconst { guid } = requireParams(params, \"guid\");\n\tawait getUserProfileStore().starDefinition(ctx, user.id, guid);\n\treturn noContent();\n});\n/** Unstar a definition for the calling user. Idempotent. */\nvar DELETE = apiRoute(\"Failed to unstar definition\", async ({ params, locals }) => {\n\tconst { ctx, user } = requireCaller(locals);\n\tconst { guid } = requireParams(params, \"guid\");\n\tawait getUserProfileStore().unstarDefinition(ctx, user.id, guid);\n\treturn noContent();\n});\n//#endregion\nexport { DELETE, PUT };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAEA;AACA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,2BAA2B,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC9E,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AAC5C,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC;AAC/C,CAAC,MAAM,mBAAmB,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;AAC/D,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;AACD;AACG,IAAC,MAAM,GAAG,QAAQ,CAAC,6BAA6B,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AACnF,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC;AAC5C,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC;AAC/C,CAAC,MAAM,mBAAmB,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;AACjE,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/orgs/_orgId_/_server.ts.js-DljeDCvn.js

@@ -0,0 +1,30 @@
+import { e as getOrganizationProvider } from '../../../../../../chunks/providers.server.js-BpypQ-ag.js';
+import { q as requireActingOrg } from '../../../../../../chunks/access.server.js-KIv3puod.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-BtMe4WGg.js';
+import { a as apiRoute } from '../../../../../../chunks/route.js-DglhoMVE.js';
+import { json } from '@sveltejs/kit';
+import '../../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../../chunks/src.js-BT_hYA9R.js';
+import 'zod';
+import '../../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../../chunks/schema.js-BeFDxIuz.js';
+import '../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/utils2.js-BCcPTZc4.js';
+
+//#region src/routes/api/v1/orgs/[orgId]/+server.ts
+/** The acting org's record — name, slug, and branding asset URLs. */
+var GET = apiRoute("Failed to load organization", async ({ params, locals }) => {
+	const { ctx, orgId } = requireActingOrg(locals, params.orgId);
+	const org = await getOrganizationProvider().getOrg(ctx, orgId);
+	if (!org) apiError(404, ApiErrorCode.NOT_FOUND, "Organization not found");
+	return json(org);
+});
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-DljeDCvn.js.map

package/build/server/chunks/entries/endpoints/api/v1/orgs/_orgId_/_server.ts.js-DljeDCvn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-DljeDCvn.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/orgs/_orgId_/_server.ts.js"],"sourcesContent":["import { m as getOrganizationProvider } from \"../../../../../../chunks/providers.server.js\";\nimport { o as requireActingOrg } from \"../../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { t as apiRoute } from \"../../../../../../chunks/route.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/v1/orgs/[orgId]/+server.ts\n/** The acting org's record — name, slug, and branding asset URLs. */\nvar GET = apiRoute(\"Failed to load organization\", async ({ params, locals }) => {\n\tconst { ctx, orgId } = requireActingOrg(locals, params.orgId);\n\tconst org = await getOrganizationProvider().getOrg(ctx, orgId);\n\tif (!org) apiError(404, ApiErrorCode.NOT_FOUND, \"Organization not found\");\n\treturn json(org);\n});\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAKA;AACA;AACG,IAAC,GAAG,GAAG,QAAQ,CAAC,6BAA6B,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAChF,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;AAC9D,CAAC,MAAM,GAAG,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC;AAC/D,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,wBAAwB,CAAC;AAC1E,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC;AACjB,CAAC;;;;"}

package/build/server/chunks/entries/endpoints/api/v1/orgs/_orgId_/assets/_kind_/_server.ts.js-CIZPfGzX.js

@@ -0,0 +1,74 @@
+import { n as OrgAssetKindSchema } from '../../../../../../../../chunks/src.js-BT_hYA9R.js';
+import { e as getOrganizationProvider, H as getOrgAssetService } from '../../../../../../../../chunks/providers.server.js-BpypQ-ag.js';
+import { s as requireManageOrgMembers, q as requireActingOrg } from '../../../../../../../../chunks/access.server.js-KIv3puod.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../../../chunks/api-errors.js-BtMe4WGg.js';
+import { M as MAX_IMAGE_FILE_SIZE } from '../../../../../../../../chunks/computeLimits.js-DX7I53Ag.js';
+import { a as apiRoute, b as requireUpload, n as noContent } from '../../../../../../../../chunks/route.js-DglhoMVE.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../../../../chunks/limits.js-D4RlAe6O.js';
+import '../../../../../../../../chunks/schema.js-BeFDxIuz.js';
+import '../../../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../../../chunks/utils2.js-BCcPTZc4.js';
+import 'node:dns/promises';
+import 'node:net';
+
+//#region src/routes/api/v1/orgs/[orgId]/assets/[kind]/+server.ts
+/**
+* Org branding assets, generic over kind (`logo`, `favicon`, …). Gated on
+* `manage_org_members` — org branding is an org-admin action.
+*
+* Raster images and SVG are both accepted. Every input is rasterized to WebP by
+* the shared transcoder inside the storage provider, so SVG carries no XSS
+* surface: no vector blob is ever stored or served. The allowlist below is the
+* HTTP gate; the rasterization is the security control.
+*/
+var ALLOWED_CONTENT_TYPES = /* @__PURE__ */ new Set([
+	"image/png",
+	"image/jpeg",
+	"image/webp",
+	"image/gif",
+	"image/svg+xml"
+]);
+function parseKind(params) {
+	const kind = OrgAssetKindSchema.safeParse(params.kind);
+	if (!kind.success) apiError(404, ApiErrorCode.NOT_FOUND, `Unknown asset kind '${params.kind}'`);
+	return kind.data;
+}
+var POST = apiRoute("Failed to upload asset", async ({ params, request, locals }) => {
+	requireManageOrgMembers(locals);
+	const kind = parseKind(params);
+	const { ctx, orgId } = requireActingOrg(locals, params.orgId);
+	if (!await getOrganizationProvider().getOrg(ctx, orgId)) apiError(404, ApiErrorCode.NOT_FOUND, "Organization not found");
+	const { file } = requireUpload(await request.formData(), "image", {
+		maxBytes: MAX_IMAGE_FILE_SIZE,
+		contentTypes: {
+			allowed: ALLOWED_CONTENT_TYPES,
+			message: "Unsupported image type. Allowed: PNG, JPG, WebP, GIF, SVG"
+		},
+		label: "Image"
+	});
+	const bytes = new Uint8Array(await file.arrayBuffer());
+	const url = await getOrgAssetService().saveAsset(ctx, orgId, kind, bytes, file.type);
+	return json({
+		kind,
+		url
+	});
+});
+var DELETE = apiRoute("Failed to remove asset", async ({ params, locals }) => {
+	requireManageOrgMembers(locals);
+	const kind = parseKind(params);
+	const { ctx, orgId } = requireActingOrg(locals, params.orgId);
+	await getOrgAssetService().removeAsset(ctx, orgId, kind);
+	return noContent();
+});
+
+export { DELETE, POST };
+//# sourceMappingURL=_server.ts.js-CIZPfGzX.js.map

package/build/server/chunks/entries/endpoints/api/v1/orgs/_orgId_/assets/_kind_/_server.ts.js-CIZPfGzX.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CIZPfGzX.js","sources":["../../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/v1/orgs/_orgId_/assets/_kind_/_server.ts.js"],"sourcesContent":["import { x as OrgAssetKindSchema } from \"../../../../../../../../chunks/src.js\";\nimport { m as getOrganizationProvider, p as getOrgAssetService } from \"../../../../../../../../chunks/providers.server.js\";\nimport { S as requireManageOrgMembers, o as requireActingOrg } from \"../../../../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../../../chunks/api-errors.js\";\nimport { o as MAX_IMAGE_FILE_SIZE } from \"../../../../../../../../chunks/computeLimits.js\";\nimport \"../../../../../../../../chunks/admin-config.js\";\nimport { a as noContent, t as apiRoute, u as requireUpload } from \"../../../../../../../../chunks/route.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/v1/orgs/[orgId]/assets/[kind]/+server.ts\n/**\n* Org branding assets, generic over kind (`logo`, `favicon`, …). Gated on\n* `manage_org_members` — org branding is an org-admin action.\n*\n* Raster images and SVG are both accepted. Every input is rasterized to WebP by\n* the shared transcoder inside the storage provider, so SVG carries no XSS\n* surface: no vector blob is ever stored or served. The allowlist below is the\n* HTTP gate; the rasterization is the security control.\n*/\nvar ALLOWED_CONTENT_TYPES = /* @__PURE__ */ new Set([\n\t\"image/png\",\n\t\"image/jpeg\",\n\t\"image/webp\",\n\t\"image/gif\",\n\t\"image/svg+xml\"\n]);\nfunction parseKind(params) {\n\tconst kind = OrgAssetKindSchema.safeParse(params.kind);\n\tif (!kind.success) apiError(404, ApiErrorCode.NOT_FOUND, `Unknown asset kind '${params.kind}'`);\n\treturn kind.data;\n}\nvar POST = apiRoute(\"Failed to upload asset\", async ({ params, request, locals }) => {\n\trequireManageOrgMembers(locals);\n\tconst kind = parseKind(params);\n\tconst { ctx, orgId } = requireActingOrg(locals, params.orgId);\n\tif (!await getOrganizationProvider().getOrg(ctx, orgId)) apiError(404, ApiErrorCode.NOT_FOUND, \"Organization not found\");\n\tconst { file } = requireUpload(await request.formData(), \"image\", {\n\t\tmaxBytes: MAX_IMAGE_FILE_SIZE,\n\t\tcontentTypes: {\n\t\t\tallowed: ALLOWED_CONTENT_TYPES,\n\t\t\tmessage: \"Unsupported image type. Allowed: PNG, JPG, WebP, GIF, SVG\"\n\t\t},\n\t\tlabel: \"Image\"\n\t});\n\tconst bytes = new Uint8Array(await file.arrayBuffer());\n\tconst url = await getOrgAssetService().saveAsset(ctx, orgId, kind, bytes, file.type);\n\treturn json({\n\t\tkind,\n\t\turl\n\t});\n});\nvar DELETE = apiRoute(\"Failed to remove asset\", async ({ params, locals }) => {\n\trequireManageOrgMembers(locals);\n\tconst kind = parseKind(params);\n\tconst { ctx, orgId } = requireActingOrg(locals, params.orgId);\n\tawait getOrgAssetService().removeAsset(ctx, orgId, kind);\n\treturn noContent();\n});\n//#endregion\nexport { DELETE, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAQA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,qBAAqB,mBAAmB,IAAI,GAAG,CAAC;AACpD,CAAC,WAAW;AACZ,CAAC,YAAY;AACb,CAAC,YAAY;AACb,CAAC,WAAW;AACZ,CAAC;AACD,CAAC,CAAC;AACF,SAAS,SAAS,CAAC,MAAM,EAAE;AAC3B,CAAC,MAAM,IAAI,GAAG,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACvD,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAChG,CAAC,OAAO,IAAI,CAAC,IAAI;AACjB;AACG,IAAC,IAAI,GAAG,QAAQ,CAAC,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrF,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC;AAC/B,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;AAC9D,CAAC,IAAI,CAAC,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,wBAAwB,CAAC;AACzH,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE;AACnE,EAAE,QAAQ,EAAE,mBAAmB;AAC/B,EAAE,YAAY,EAAE;AAChB,GAAG,OAAO,EAAE,qBAAqB;AACjC,GAAG,OAAO,EAAE;AACZ,GAAG;AACH,EAAE,KAAK,EAAE;AACT,EAAE,CAAC;AACH,CAAC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AACvD,CAAC,MAAM,GAAG,GAAG,MAAM,kBAAkB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC;AACrF,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,IAAI;AACN,EAAE;AACF,EAAE,CAAC;AACH,CAAC;AACE,IAAC,MAAM,GAAG,QAAQ,CAAC,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC9E,CAAC,uBAAuB,CAAC,MAAM,CAAC;AAChC,CAAC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC;AAC/B,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;AAC9D,CAAC,MAAM,kBAAkB,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC;AACzD,CAAC,OAAO,SAAS,EAAE;AACnB,CAAC;;;;"}