@selvajs/server 1.2.0 → 1.3.0

package/dist/access/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/access/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACN,+BAA+B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC3B,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/access/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACN,+BAA+B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC3B,MAAM,2BAA2B,CAAC;AAInC,cAAc,aAAa,CAAC;AAI5B,OAAO,EAAE,oBAAoB,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/access/index.js

@@ -1,4 +1,10 @@
 // Access-rule input assembly — marshals providers + flags into what
 // platform's pure canView/canEdit/… rules consume.
 export { createProjectAccessInputBuilder } from './project-access-input.js';
+// Framework-free permission guards. Redirecting guards stay with the host —
+// see the module header in ./guards.ts.
+export * from './guards.js';
+// Wire-format adapter: the v1 invite body accepts one flat `permissions` array,
+// while the stores keep platform and org scope apart.
+export { splitFlatPermissions } from './permissions-scope.js';
 //# sourceMappingURL=index.js.map

package/dist/access/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/access/index.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,mDAAmD;AAEnD,OAAO,EACN,+BAA+B,EAI/B,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/access/index.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,mDAAmD;AAEnD,OAAO,EACN,+BAA+B,EAI/B,MAAM,2BAA2B,CAAC;AAEnC,4EAA4E;AAC5E,wCAAwC;AACxC,cAAc,aAAa,CAAC;AAE5B,gFAAgF;AAChF,sDAAsD;AACtD,OAAO,EAAE,oBAAoB,EAAyB,MAAM,wBAAwB,CAAC"}

package/dist/access/permissions-scope.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Bridges the flat `permissions` array the v1 invite body accepts to the
+ * two-scope model adapters expect. One invite legitimately carries both scopes,
+ * so this is a wire-format adapter, not a migration shim — retire it only when
+ * the invite body grows separate `platformPermissions` + `orgPermissions`
+ * fields.
+ */
+import type { OrgPermission, PlatformPermission } from '@selvajs/platform';
+export interface SplitPermissions {
+    platform: PlatformPermission[];
+    org: OrgPermission[];
+}
+/** Split a flat array into platform + org scope buckets, dropping unknowns. */
+export declare function splitFlatPermissions(flat: readonly string[]): SplitPermissions;
+//# sourceMappingURL=permissions-scope.d.ts.map

package/dist/access/permissions-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-scope.d.ts","sourceRoot":"","sources":["../../src/access/permissions-scope.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAM3E,MAAM,WAAW,gBAAgB;IAChC,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,GAAG,EAAE,aAAa,EAAE,CAAC;CACrB;AAED,+EAA+E;AAC/E,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,CAQ9E"}

package/dist/access/permissions-scope.js

@@ -0,0 +1,23 @@
+/**
+ * Bridges the flat `permissions` array the v1 invite body accepts to the
+ * two-scope model adapters expect. One invite legitimately carries both scopes,
+ * so this is a wire-format adapter, not a migration shim — retire it only when
+ * the invite body grows separate `platformPermissions` + `orgPermissions`
+ * fields.
+ */
+import { ALL_ORG_PERMISSIONS, ALL_PLATFORM_PERMISSIONS } from '@selvajs/platform';
+const PLATFORM_SET = new Set(ALL_PLATFORM_PERMISSIONS);
+const ORG_SET = new Set(ALL_ORG_PERMISSIONS);
+/** Split a flat array into platform + org scope buckets, dropping unknowns. */
+export function splitFlatPermissions(flat) {
+    const platform = [];
+    const org = [];
+    for (const p of flat) {
+        if (PLATFORM_SET.has(p))
+            platform.push(p);
+        else if (ORG_SET.has(p))
+            org.push(p);
+    }
+    return { platform, org };
+}
+//# sourceMappingURL=permissions-scope.js.map

package/dist/access/permissions-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-scope.js","sourceRoot":"","sources":["../../src/access/permissions-scope.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAElF,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC,wBAAwB,CAAC,CAAC;AAC5E,MAAM,OAAO,GAAwB,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC;AAOlE,+EAA+E;AAC/E,MAAM,UAAU,oBAAoB,CAAC,IAAuB;IAC3D,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACtB,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,CAAuB,CAAC,CAAC;aAC3D,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAkB,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AAC1B,CAAC"}

package/dist/api/bodies.d.ts

@@ -0,0 +1,104 @@
+/**
+ * Request-body validators for the API routes that take JSON.
+ *
+ * They live apart from their handlers so a spec generator can import them
+ * without loading a host's route module — in Selva's case a `+server.ts` imports
+ * `./$types`, which only resolves inside a SvelteKit build.
+ *
+ * **A JSON body accepted by an API route belongs in this file.** Adding one
+ * inline is invisible to the generator, so the endpoint documents an empty body.
+ * Multipart handlers are the exception — `FormData` has no Zod schema to derive
+ * from, so their fields are described in the spec directly.
+ */
+import { z } from 'zod';
+export declare const SolveBodySchema: z.ZodObject<{
+    inputs: z.ZodDefault<z.ZodArray<z.ZodUnknown>>;
+    values: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    channel: z.ZodDefault<z.ZodEnum<{
+        draft: "draft";
+        live: "live";
+    }>>;
+    versionId: z.ZodOptional<z.ZodString>;
+    definitionUrl: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const CreateProjectBodySchema: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    visibility: z.ZodDefault<z.ZodEnum<{
+        public: "public";
+        org: "org";
+        private: "private";
+        platform: "platform";
+    }>>;
+    autoJoinOnUpload: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export declare const UpdateProjectBodySchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodString>>>;
+    visibility: z.ZodOptional<z.ZodEnum<{
+        public: "public";
+        org: "org";
+        private: "private";
+        platform: "platform";
+    }>>;
+    autoJoinOnUpload: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export declare const AddProjectMemberBodySchema: z.ZodObject<{
+    userId: z.ZodString;
+    role: z.ZodEnum<{
+        owner: "owner";
+        editor: "editor";
+        viewer: "viewer";
+    }>;
+}, z.core.$strip>;
+export declare const UpdateProjectMemberBodySchema: z.ZodObject<{
+    role: z.ZodEnum<{
+        owner: "owner";
+        editor: "editor";
+        viewer: "viewer";
+    }>;
+}, z.core.$strip>;
+export declare const CreateInviteBodySchema: z.ZodObject<{
+    email: z.ZodPipe<z.ZodEmail, z.ZodTransform<string, string>>;
+    orgRole: z.ZodDefault<z.ZodEnum<{
+        admin: "admin";
+        owner: "owner";
+        member: "member";
+    }>>;
+    permissions: z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
+        instance_admin: "instance_admin";
+        manage_compute: "manage_compute";
+        manage_instance_users: "manage_instance_users";
+        manage_updates: "manage_updates";
+    }>, z.ZodEnum<{
+        manage_org_members: "manage_org_members";
+        manage_org_compute: "manage_org_compute";
+        manage_definitions: "manage_definitions";
+        manage_projects: "manage_projects";
+    }>]>>>;
+}, z.core.$strip>;
+export declare const OrgComputePatchBodySchema: z.ZodObject<{
+    servers: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+        serverUrl: z.ZodString;
+        apiKey: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        timeoutMs: z.ZodOptional<z.ZodNumber>;
+        retryCount: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    defaultServerId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+export declare const UpdateOrgMemberBodySchema: z.ZodObject<{
+    role: z.ZodOptional<z.ZodEnum<{
+        admin: "admin";
+        owner: "owner";
+        member: "member";
+    }>>;
+    permissions: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        manage_org_members: "manage_org_members";
+        manage_org_compute: "manage_org_compute";
+        manage_definitions: "manage_definitions";
+        manage_projects: "manage_projects";
+    }>>>;
+}, z.core.$strip>;
+//# sourceMappingURL=bodies.d.ts.map

package/dist/api/bodies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bodies.d.ts","sourceRoot":"","sources":["../../src/api/bodies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAexB,eAAO,MAAM,eAAe;;;;;;;;;iBAO1B,CAAC;AAMH,eAAO,MAAM,uBAAuB;;;;;;;;;;iBAKlC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;iBAOzB,CAAC;AAEZ,eAAO,MAAM,0BAA0B;;;;;;;iBAGrC,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;;;iBAAwC,CAAC;AASnF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;iBAIjC,CAAC;AAiBH,eAAO,MAAM,yBAAyB;;;;;;;;;;iBAIpC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;iBASnC,CAAC"}

package/dist/api/bodies.js

@@ -0,0 +1,87 @@
+/**
+ * Request-body validators for the API routes that take JSON.
+ *
+ * They live apart from their handlers so a spec generator can import them
+ * without loading a host's route module — in Selva's case a `+server.ts` imports
+ * `./$types`, which only resolves inside a SvelteKit build.
+ *
+ * **A JSON body accepted by an API route belongs in this file.** Adding one
+ * inline is invisible to the generator, so the endpoint documents an empty body.
+ * Multipart handlers are the exception — `FormData` has no Zod schema to derive
+ * from, so their fields are described in the spec directly.
+ */
+import { z } from 'zod';
+import { ProjectVisibilitySchema, ProjectRoleSchema, OrgRoleSchema, OrgPermissionSchema, PlatformPermissionSchema, ALL_ORG_PERMISSIONS } from '@selvajs/platform';
+// ============================================================================
+// Definitions
+// ============================================================================
+export const SolveBodySchema = z.object({
+    inputs: z.array(z.unknown()).default([]),
+    values: z.record(z.string(), z.unknown()).default({}),
+    channel: z.enum(['live', 'draft']).default('live'),
+    versionId: z.string().optional(),
+    /** Must name this same definition, or the route 400s instead of solving a different one. */
+    definitionUrl: z.string().optional()
+});
+// ============================================================================
+// Projects
+// ============================================================================
+export const CreateProjectBodySchema = z.object({
+    name: z.string().min(1, 'Project name is required').max(128).trim(),
+    description: z.string().max(2000).optional(),
+    visibility: ProjectVisibilitySchema.default('private'),
+    autoJoinOnUpload: z.boolean().optional()
+});
+export const UpdateProjectBodySchema = z
+    .object({
+    name: z.string().min(1).max(128).trim(),
+    description: z.string().max(2000).nullish(),
+    visibility: ProjectVisibilitySchema,
+    autoJoinOnUpload: z.boolean()
+})
+    .partial();
+export const AddProjectMemberBodySchema = z.object({
+    userId: z.string().min(1, 'userId is required'),
+    role: ProjectRoleSchema
+});
+export const UpdateProjectMemberBodySchema = z.object({ role: ProjectRoleSchema });
+// ============================================================================
+// Orgs
+// ============================================================================
+/** Platform-scope entries are dropped downstream — an invite only grants org rights. */
+const FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);
+export const CreateInviteBodySchema = z.object({
+    email: z.email('Valid email is required').transform((s) => s.toLowerCase().trim()),
+    orgRole: OrgRoleSchema.default('member'),
+    permissions: z.array(FlatPermissionSchema).default([])
+});
+/**
+ * `apiKey` is tri-state: **omitted** keeps the stored key, **null** clears it, a
+ * string replaces it. `.optional().nullable()` — not `.nullish()` — because the
+ * two must stay distinguishable after parsing, or a request that just omits the
+ * field would silently wipe the stored credential.
+ */
+const IncomingComputeServerSchema = z.object({
+    id: z.string().min(1),
+    label: z.string().min(1),
+    serverUrl: z.string().min(1),
+    apiKey: z.string().nullable().optional(),
+    timeoutMs: z.number().optional(),
+    retryCount: z.number().optional()
+});
+export const OrgComputePatchBodySchema = z.object({
+    servers: z.array(IncomingComputeServerSchema),
+    /** May name any server visible to the org. `null` clears the override; omitted leaves it untouched. */
+    defaultServerId: z.string().nullable().optional()
+});
+export const UpdateOrgMemberBodySchema = z
+    .object({
+    role: OrgRoleSchema.optional(),
+    permissions: z
+        .array(z.enum(ALL_ORG_PERMISSIONS))
+        .optional()
+})
+    .refine((b) => b.role !== undefined || b.permissions !== undefined, {
+    message: 'Provide at least one of role, permissions'
+});
+//# sourceMappingURL=bodies.js.map

package/dist/api/bodies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bodies.js","sourceRoot":"","sources":["../../src/api/bodies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACN,uBAAuB,EACvB,iBAAiB,EACjB,aAAa,EACb,mBAAmB,EACnB,wBAAwB,EACxB,mBAAmB,EAEnB,MAAM,mBAAmB,CAAC;AAE3B,+EAA+E;AAC/E,cAAc;AACd,+EAA+E;AAE/E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrD,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAClD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,4FAA4F;IAC5F,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAEH,+EAA+E;AAC/E,WAAW;AACX,+EAA+E;AAE/E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;IACnE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC5C,UAAU,EAAE,uBAAuB,CAAC,OAAO,CAAC,SAAS,CAAC;IACtD,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACtC,MAAM,CAAC;IACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE;IAC3C,UAAU,EAAE,uBAAuB;IACnC,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;CAC7B,CAAC;KACD,OAAO,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC;IAC/C,IAAI,EAAE,iBAAiB;CACvB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAEnF,+EAA+E;AAC/E,OAAO;AACP,+EAA+E;AAE/E,wFAAwF;AACxF,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAEtF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAClF,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;IACxC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACtD,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC;IAC7C,uGAAuG;IACvG,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACxC,MAAM,CAAC;IACP,IAAI,EAAE,aAAa,CAAC,QAAQ,EAAE;IAC9B,WAAW,EAAE,CAAC;SACZ,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmE,CAAC,CAAC;SAClF,QAAQ,EAAE;CACZ,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,EAAE;IACnE,OAAO,EAAE,2CAA2C;CACpD,CAAC,CAAC"}

package/dist/api/deps.d.ts

@@ -0,0 +1,135 @@
+/**
+ * Everything an API handler talks to, as one injected value.
+ *
+ * Handlers used to reach module-global getters (`getProjectProvider()`,
+ * `getDefinitionService()`, …) from the Selva app's composition root — 77 call
+ * sites across the v1 routes. That welded them to one app's boot: a second app
+ * on a different provider set (parafa, on Supabase) could not call them at all.
+ *
+ * Most fields are sub-stores of `IDataProvider`, so a host that already built a
+ * `SelvaConfig` gets them via `depsFromConfig`. `services` stays host-defined:
+ * `DefinitionService` and friends are composed rather than resolved, and a host
+ * may supply its own.
+ */
+import type { DefinitionService } from '../definitions/definition-service.js';
+import type { OrgAssetService } from '../organizations/org-asset-service.js';
+import type { TokenCodec } from '../tokens/token-codec.js';
+import type { IAuthProvider, IDataProvider, IEventSink, INotificationProvider, IStorageProvider, SelvaConfig, SelvaFlags } from '@selvajs/platform';
+export interface SelvaDeps {
+    auth: IAuthProvider;
+    storage: IStorageProvider;
+    data: IDataProvider;
+    /** `data.orgs` — hoisted because 18 v1 call sites read it directly. */
+    orgs: IDataProvider['orgs'];
+    /** `data.projects` — 18 call sites. */
+    projects: IDataProvider['projects'];
+    /** `data.definitions` — the definition metadata store. */
+    definitionMeta: IDataProvider['definitions'];
+    computeServer: IDataProvider['computeServer'];
+    userProfile: IDataProvider['userProfile'];
+    shareLinks: IDataProvider['shareLinks'];
+    invites: IDataProvider['invites'];
+    permissions: IDataProvider['permissions'];
+    platformProjectGrants: IDataProvider['platformProjectGrants'];
+    /**
+     * Audit sink. Never optional here even though `SelvaConfig.events` is:
+     * handlers emit escalation events (`project.reclaimed`,
+     * `org_member.removed_orphaning_projects`) that the audit trail depends on,
+     * and a handler deciding for itself what a missing sink means is how one of
+     * them ends up silently unlogged. `depsFromConfig` substitutes
+     * `NoopEventSink`, which discards explicitly.
+     */
+    events: IEventSink;
+    /**
+     * Feature flags, as a predicate rather than a record: an omitted flag must
+     * read as false, and keeping that in `isFlagEnabled` stops each caller from
+     * re-deciding what a missing flag means.
+     */
+    flag: (name: keyof SelvaFlags) => boolean;
+    /**
+     * Token codecs, one per family, keyed by what they mint.
+     *
+     * Injected rather than resolved because the codec is built from an
+     * instance-wide HMAC secret, and reading that secret is the host's job — a
+     * package that reached for `process.env.SELVA_HMAC_KEY` itself would pin
+     * every host to one env var name and one way of loading it. Rotating a
+     * secret invalidates that family's outstanding tokens, so the two families
+     * are separate values rather than one shared codec.
+     *
+     * Optional: a host with no sharing and no invites wires neither. The
+     * handlers that need one fail loudly if it is absent rather than minting a
+     * token nobody can verify.
+     */
+    tokens: {
+        shareLinks?: TokenCodec;
+        invites?: TokenCodec;
+    };
+    /**
+     * Upload caps, in bytes.
+     *
+     * Deployment config, so the host resolves them — a package reading its own
+     * env would pin every host to one variable name. Defaults apply when the
+     * host says nothing, because a missing cap must not read as "unlimited":
+     * `requireUpload` compares against this number, and `undefined` would let
+     * any size through.
+     */
+    uploadLimits: {
+        maxDefinitionFileSize: number;
+        maxImageFileSize: number;
+    };
+    /**
+     * Outbound mail, and the instance name to fall back to when a record has no
+     * name of its own.
+     *
+     * Optional because mail is best-effort by design: an invite row is committed
+     * before delivery is attempted, and the caller still holds the accept URL to
+     * share by hand. A host with no mail configured wires nothing and the
+     * handlers report `not-configured` rather than failing the write.
+     */
+    notifications?: INotificationProvider;
+    /** Instance display name, used where a record has none. */
+    instanceName: string;
+    /**
+     * Drop the host's warm compute client for one server id.
+     *
+     * A warm client caches on server `id`, so a rotated URL or key keeps the
+     * same cache key with stale connection details and never ages out. The
+     * config-write handlers evict through this rather than importing a cache:
+     * which cache holds them is the host's decision, and importing one would
+     * pull a whole solve engine into every consumer.
+     *
+     * Defaults to a no-op — a host with no client cache has nothing to evict,
+     * and the handler must not have to know which kind of host it is running on.
+     */
+    evictComputeClient: (id: string) => void;
+    /**
+     * Composed services the host supplies.
+     *
+     * The named ones are typed because handlers call them — leaving a service
+     * `unknown` pushes a cast into every call site, and a cast is exactly where
+     * a second host's differently-shaped service would slip through unnoticed.
+     * The index signature keeps host-specific extras possible without naming
+     * them here.
+     */
+    services: {
+        definitions?: DefinitionService;
+        orgAssets?: OrgAssetService;
+    } & Record<string, unknown>;
+}
+/**
+ * Build deps from a resolved `SelvaConfig`, plus whatever services and token
+ * codecs the host composed on top. The hoisted fields are aliases into `data`,
+ * not copies.
+ *
+ * `services` stays positional — every existing caller passes it there — and
+ * `tokens` arrives in an options object rather than as a third positional, so
+ * the two composed bags cannot be swapped at a call site.
+ */
+export declare function depsFromConfig(config: SelvaConfig, services?: SelvaDeps['services'], { tokens, uploadLimits, evictComputeClient, notifications, instanceName }?: {
+    tokens?: SelvaDeps['tokens'];
+    uploadLimits?: Partial<SelvaDeps['uploadLimits']>;
+    evictComputeClient?: SelvaDeps['evictComputeClient'];
+    notifications?: INotificationProvider;
+    instanceName?: string;
+}): SelvaDeps;
+//# sourceMappingURL=deps.d.ts.map

package/dist/api/deps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps.d.ts","sourceRoot":"","sources":["../../src/api/deps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,KAAK,EACX,aAAa,EACb,aAAa,EACb,UAAU,EACV,qBAAqB,EACrB,gBAAgB,EAChB,WAAW,EACX,UAAU,EACV,MAAM,mBAAmB,CAAC;AAE3B,MAAM,WAAW,SAAS;IACzB,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,IAAI,EAAE,aAAa,CAAC;IACpB,uEAAuE;IACvE,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC5B,uCAAuC;IACvC,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IACpC,0DAA0D;IAC1D,cAAc,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;IAC7C,aAAa,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IAC9C,WAAW,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;IAC1C,UAAU,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;IACxC,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IAClC,WAAW,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;IAC1C,qBAAqB,EAAE,aAAa,CAAC,uBAAuB,CAAC,CAAC;IAC9D;;;;;;;OAOG;IACH,MAAM,EAAE,UAAU,CAAC;IACnB;;;;OAIG;IACH,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,UAAU,KAAK,OAAO,CAAC;IAC1C;;;;;;;;;;;;;OAaG;IACH,MAAM,EAAE;QACP,UAAU,CAAC,EAAE,UAAU,CAAC;QACxB,OAAO,CAAC,EAAE,UAAU,CAAC;KACrB,CAAC;IACF;;;;;;;;OAQG;IACH,YAAY,EAAE;QACb,qBAAqB,EAAE,MAAM,CAAC;QAC9B,gBAAgB,EAAE,MAAM,CAAC;KACzB,CAAC;IACF;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,2DAA2D;IAC3D,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;OAWG;IACH,kBAAkB,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC;;;;;;;;OAQG;IACH,QAAQ,EAAE;QACT,WAAW,CAAC,EAAE,iBAAiB,CAAC;QAChC,SAAS,CAAC,EAAE,eAAe,CAAC;KAC5B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC7B,MAAM,EAAE,WAAW,EACnB,QAAQ,GAAE,SAAS,CAAC,UAAU,CAAM,EACpC,EACC,MAAW,EACX,YAAY,EACZ,kBAA6B,EAC7B,aAAa,EACb,YAAsB,EACtB,GAAE;IACF,MAAM,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC;IAClD,kBAAkB,CAAC,EAAE,SAAS,CAAC,oBAAoB,CAAC,CAAC;IACrD,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC;CACjB,GACJ,SAAS,CA8BX"}

package/dist/api/deps.js

@@ -0,0 +1,55 @@
+/**
+ * Everything an API handler talks to, as one injected value.
+ *
+ * Handlers used to reach module-global getters (`getProjectProvider()`,
+ * `getDefinitionService()`, …) from the Selva app's composition root — 77 call
+ * sites across the v1 routes. That welded them to one app's boot: a second app
+ * on a different provider set (parafa, on Supabase) could not call them at all.
+ *
+ * Most fields are sub-stores of `IDataProvider`, so a host that already built a
+ * `SelvaConfig` gets them via `depsFromConfig`. `services` stays host-defined:
+ * `DefinitionService` and friends are composed rather than resolved, and a host
+ * may supply its own.
+ */
+import { isFlagEnabled, NoopEventSink } from '@selvajs/platform';
+/**
+ * Build deps from a resolved `SelvaConfig`, plus whatever services and token
+ * codecs the host composed on top. The hoisted fields are aliases into `data`,
+ * not copies.
+ *
+ * `services` stays positional — every existing caller passes it there — and
+ * `tokens` arrives in an options object rather than as a third positional, so
+ * the two composed bags cannot be swapped at a call site.
+ */
+export function depsFromConfig(config, services = {}, { tokens = {}, uploadLimits, evictComputeClient = () => { }, notifications, instanceName = 'Selva' } = {}) {
+    const { data } = config;
+    return {
+        auth: config.auth,
+        storage: config.storage,
+        data,
+        orgs: data.orgs,
+        projects: data.projects,
+        definitionMeta: data.definitions,
+        computeServer: data.computeServer,
+        userProfile: data.userProfile,
+        shareLinks: data.shareLinks,
+        invites: data.invites,
+        permissions: data.permissions,
+        platformProjectGrants: data.platformProjectGrants,
+        events: config.events ?? new NoopEventSink(),
+        flag: (name) => isFlagEnabled(config, name),
+        tokens,
+        // Same defaults `resolveComputeLimits` applies, repeated rather than
+        // imported: pulling that in would make every host resolving deps also
+        // resolve compute limits from env, which is the coupling this avoids.
+        uploadLimits: {
+            maxDefinitionFileSize: uploadLimits?.maxDefinitionFileSize ?? 50 * 1024 * 1024,
+            maxImageFileSize: uploadLimits?.maxImageFileSize ?? 10 * 1024 * 1024
+        },
+        evictComputeClient,
+        notifications,
+        instanceName,
+        services
+    };
+}
+//# sourceMappingURL=deps.js.map

package/dist/api/deps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps.js","sourceRoot":"","sources":["../../src/api/deps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAoHjE;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAC7B,MAAmB,EACnB,WAAkC,EAAE,EACpC,EACC,MAAM,GAAG,EAAE,EACX,YAAY,EACZ,kBAAkB,GAAG,GAAG,EAAE,GAAE,CAAC,EAC7B,aAAa,EACb,YAAY,GAAG,OAAO,KAOnB,EAAE;IAEN,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;IACxB,OAAO;QACN,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,IAAI;QACJ,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,cAAc,EAAE,IAAI,CAAC,WAAW;QAChC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI,aAAa,EAAE;QAC5C,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC;QAC3C,MAAM;QACN,qEAAqE;QACrE,sEAAsE;QACtE,sEAAsE;QACtE,YAAY,EAAE;YACb,qBAAqB,EAAE,YAAY,EAAE,qBAAqB,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI;YAC9E,gBAAgB,EAAE,YAAY,EAAE,gBAAgB,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI;SACpE;QACD,kBAAkB;QAClB,aAAa;QACb,YAAY;QACZ,QAAQ;KACR,CAAC;AACH,CAAC"}

package/dist/api/errors.d.ts

@@ -0,0 +1,35 @@
+/**
+ * The transport-free error type every API handler raises.
+ *
+ * `apiError` used to throw SvelteKit's `error()` directly, which welded all 151
+ * of its call sites to one framework. `ApiError` carries the same envelope as a
+ * plain exception; the host adapter converts it to whatever its framework
+ * expects (see `toApiResponse`). Call sites are unchanged — only the throw
+ * site and the boundary know the difference.
+ */
+/** Stable, machine-readable error codes. Append-only — never renumber/rename. */
+export declare const ApiErrorCode: {
+    readonly VALIDATION_FAILED: "VALIDATION_FAILED";
+    readonly UNAUTHORIZED: "UNAUTHORIZED";
+    readonly FORBIDDEN: "FORBIDDEN";
+    readonly NOT_FOUND: "NOT_FOUND";
+    readonly CONFLICT: "CONFLICT";
+    readonly UNPROCESSABLE: "UNPROCESSABLE";
+    readonly COMPUTE_UNAVAILABLE: "COMPUTE_UNAVAILABLE";
+    readonly SETUP_REQUIRED: "SETUP_REQUIRED";
+    readonly INTERNAL: "INTERNAL";
+};
+export type ApiErrorCode = (typeof ApiErrorCode)[keyof typeof ApiErrorCode];
+export declare class ApiError extends Error {
+    readonly status: number;
+    readonly code: ApiErrorCode;
+    /** Per-field validation messages, keyed by dotted path. Only on VALIDATION_FAILED. */
+    readonly fields?: Record<string, string>;
+    constructor(status: number, code: ApiErrorCode, message: string, fields?: Record<string, string>);
+}
+export declare function isApiError(err: unknown): err is ApiError;
+/** Raise a structured API error. The only way handlers should fail. */
+export declare function apiError(status: number, code: ApiErrorCode, message: string, fields?: Record<string, string>): never;
+/** Default code for a status, for mapping errors that carry no code of their own. */
+export declare function codeForStatus(status: number): ApiErrorCode;
+//# sourceMappingURL=errors.d.ts.map

package/dist/api/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/api/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,iFAAiF;AACjF,eAAO,MAAM,YAAY;;;;;;;;;;CAUf,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE5E,qBAAa,QAAS,SAAQ,KAAK;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,sFAAsF;IACtF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAGxC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;CAQhC;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,QAAQ,CAExD;AAED,uEAAuE;AACvE,wBAAgB,QAAQ,CACvB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,KAAK,CAEP;AAED,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAmB1D"}

package/dist/api/errors.js

@@ -0,0 +1,63 @@
+/**
+ * The transport-free error type every API handler raises.
+ *
+ * `apiError` used to throw SvelteKit's `error()` directly, which welded all 151
+ * of its call sites to one framework. `ApiError` carries the same envelope as a
+ * plain exception; the host adapter converts it to whatever its framework
+ * expects (see `toApiResponse`). Call sites are unchanged — only the throw
+ * site and the boundary know the difference.
+ */
+/** Stable, machine-readable error codes. Append-only — never renumber/rename. */
+export const ApiErrorCode = {
+    VALIDATION_FAILED: 'VALIDATION_FAILED',
+    UNAUTHORIZED: 'UNAUTHORIZED',
+    FORBIDDEN: 'FORBIDDEN',
+    NOT_FOUND: 'NOT_FOUND',
+    CONFLICT: 'CONFLICT',
+    UNPROCESSABLE: 'UNPROCESSABLE',
+    COMPUTE_UNAVAILABLE: 'COMPUTE_UNAVAILABLE',
+    SETUP_REQUIRED: 'SETUP_REQUIRED',
+    INTERNAL: 'INTERNAL'
+};
+export class ApiError extends Error {
+    status;
+    code;
+    /** Per-field validation messages, keyed by dotted path. Only on VALIDATION_FAILED. */
+    fields;
+    constructor(status, code, message, fields) {
+        super(message);
+        this.name = 'ApiError';
+        this.status = status;
+        this.code = code;
+        this.fields = fields;
+    }
+}
+export function isApiError(err) {
+    return err instanceof ApiError;
+}
+/** Raise a structured API error. The only way handlers should fail. */
+export function apiError(status, code, message, fields) {
+    throw new ApiError(status, code, message, fields);
+}
+/** Default code for a status, for mapping errors that carry no code of their own. */
+export function codeForStatus(status) {
+    switch (status) {
+        case 400:
+            return ApiErrorCode.VALIDATION_FAILED;
+        case 401:
+            return ApiErrorCode.UNAUTHORIZED;
+        case 403:
+            return ApiErrorCode.FORBIDDEN;
+        case 404:
+            return ApiErrorCode.NOT_FOUND;
+        case 409:
+            return ApiErrorCode.CONFLICT;
+        case 422:
+            return ApiErrorCode.UNPROCESSABLE;
+        case 503:
+            return ApiErrorCode.COMPUTE_UNAVAILABLE;
+        default:
+            return ApiErrorCode.INTERNAL;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/api/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/api/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,iFAAiF;AACjF,MAAM,CAAC,MAAM,YAAY,GAAG;IAC3B,iBAAiB,EAAE,mBAAmB;IACtC,YAAY,EAAE,cAAc;IAC5B,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,aAAa,EAAE,eAAe;IAC9B,mBAAmB,EAAE,qBAAqB;IAC1C,cAAc,EAAE,gBAAgB;IAChC,QAAQ,EAAE,UAAU;CACX,CAAC;AAIX,MAAM,OAAO,QAAS,SAAQ,KAAK;IACzB,MAAM,CAAS;IACf,IAAI,CAAe;IAC5B,sFAAsF;IAC7E,MAAM,CAA0B;IAEzC,YACC,MAAc,EACd,IAAkB,EAClB,OAAe,EACf,MAA+B;QAE/B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;CACD;AAED,MAAM,UAAU,UAAU,CAAC,GAAY;IACtC,OAAO,GAAG,YAAY,QAAQ,CAAC;AAChC,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,QAAQ,CACvB,MAAc,EACd,IAAkB,EAClB,OAAe,EACf,MAA+B;IAE/B,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AACnD,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAAC,MAAc;IAC3C,QAAQ,MAAM,EAAE,CAAC;QAChB,KAAK,GAAG;YACP,OAAO,YAAY,CAAC,iBAAiB,CAAC;QACvC,KAAK,GAAG;YACP,OAAO,YAAY,CAAC,YAAY,CAAC;QAClC,KAAK,GAAG;YACP,OAAO,YAAY,CAAC,SAAS,CAAC;QAC/B,KAAK,GAAG;YACP,OAAO,YAAY,CAAC,SAAS,CAAC;QAC/B,KAAK,GAAG;YACP,OAAO,YAAY,CAAC,QAAQ,CAAC;QAC9B,KAAK,GAAG;YACP,OAAO,YAAY,CAAC,aAAa,CAAC;QACnC,KAAK,GAAG;YACP,OAAO,YAAY,CAAC,mBAAmB,CAAC;QACzC;YACC,OAAO,YAAY,CAAC,QAAQ,CAAC;IAC/B,CAAC;AACF,CAAC"}

package/dist/api/index.d.ts

@@ -0,0 +1,12 @@
+export { ApiError, ApiErrorCode, apiError, codeForStatus, isApiError } from './errors.js';
+export type { ApiHandler, ApiRequest, ApiResponse } from './types.js';
+export { depsFromConfig, type SelvaDeps } from './deps.js';
+export { collection, created, noContent } from './responses.js';
+export { shaped, shapedCollection } from './shaped.js';
+export { formText, parseBody, parseParam, requireCaller, requireParams, requireUpload, throwZodError } from './request.js';
+export { runHandler, toErrorBody, type ApiErrorBody } from './respond.js';
+export { mapCoreError } from './map-core-error.js';
+export { parseListOptions, parseDefinitionListOptions } from './pagination.js';
+export { SolveBodySchema, CreateProjectBodySchema, UpdateProjectBodySchema, AddProjectMemberBodySchema, UpdateProjectMemberBodySchema, CreateInviteBodySchema, OrgComputePatchBodySchema, UpdateOrgMemberBodySchema } from './bodies.js';
+export { ShareLinkResponseSchema, CreatedShareLinkResponseSchema, InviteResponseSchema, CreatedInviteResponseSchema, OrgComputeServerResponseSchema, ComputeCatalogEntrySchema, OrgComputeResponseSchema, type ShareLinkResponse } from './responses-schema.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/api/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC1F,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EACN,QAAQ,EACR,SAAS,EACT,UAAU,EACV,aAAa,EACb,aAAa,EACb,aAAa,EACb,aAAa,EACb,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EACN,eAAe,EACf,uBAAuB,EACvB,uBAAuB,EACvB,0BAA0B,EAC1B,6BAA6B,EAC7B,sBAAsB,EACtB,yBAAyB,EACzB,yBAAyB,EACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EACN,uBAAuB,EACvB,8BAA8B,EAC9B,oBAAoB,EACpB,2BAA2B,EAC3B,8BAA8B,EAC9B,yBAAyB,EACzB,wBAAwB,EACxB,KAAK,iBAAiB,EACtB,MAAM,uBAAuB,CAAC"}

package/dist/api/index.js

@@ -0,0 +1,15 @@
+// Transport-free API core — handler contract, injected deps, error envelope.
+//
+// A host binds this by building an `ApiRequest` and calling `runHandler`; the
+// handlers themselves name no web framework. See `api/README.md`.
+export { ApiError, ApiErrorCode, apiError, codeForStatus, isApiError } from './errors.js';
+export { depsFromConfig } from './deps.js';
+export { collection, created, noContent } from './responses.js';
+export { shaped, shapedCollection } from './shaped.js';
+export { formText, parseBody, parseParam, requireCaller, requireParams, requireUpload, throwZodError } from './request.js';
+export { runHandler, toErrorBody } from './respond.js';
+export { mapCoreError } from './map-core-error.js';
+export { parseListOptions, parseDefinitionListOptions } from './pagination.js';
+export { SolveBodySchema, CreateProjectBodySchema, UpdateProjectBodySchema, AddProjectMemberBodySchema, UpdateProjectMemberBodySchema, CreateInviteBodySchema, OrgComputePatchBodySchema, UpdateOrgMemberBodySchema } from './bodies.js';
+export { ShareLinkResponseSchema, CreatedShareLinkResponseSchema, InviteResponseSchema, CreatedInviteResponseSchema, OrgComputeServerResponseSchema, ComputeCatalogEntrySchema, OrgComputeResponseSchema } from './responses-schema.js';
+//# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,8EAA8E;AAC9E,kEAAkE;AAElE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE1F,OAAO,EAAE,cAAc,EAAkB,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EACN,QAAQ,EACR,SAAS,EACT,UAAU,EACV,aAAa,EACb,aAAa,EACb,aAAa,EACb,aAAa,EACb,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAqB,MAAM,cAAc,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EACN,eAAe,EACf,uBAAuB,EACvB,uBAAuB,EACvB,0BAA0B,EAC1B,6BAA6B,EAC7B,sBAAsB,EACtB,yBAAyB,EACzB,yBAAyB,EACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EACN,uBAAuB,EACvB,8BAA8B,EAC9B,oBAAoB,EACpB,2BAA2B,EAC3B,8BAA8B,EAC9B,yBAAyB,EACzB,wBAAwB,EAExB,MAAM,uBAAuB,CAAC"}