@selvajs/selva 4.4.0 → 4.5.1

package/build/server/chunks/_server.ts-Cd6dVQ2J.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-Cd6dVQ2J.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/projects/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\nimport { n as getProjectProvider, P as ProviderError } from \"../../../../chunks/providers.server.js\";\nimport { j as requireCanCreateProject } from \"../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from \"../../../../chunks/api-errors.js\";\nimport { s as slugify } from \"../../../../chunks/slug.js\";\nimport { g as ProjectVisibilitySchema } from \"../../../../chunks/context.js\";\nconst MAX_SLUG_ATTEMPTS = 25;\nfunction isSlugConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);\n}\nfunction isNameConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);\n}\nconst CreateProjectBody = z.object({\n  name: z.string().min(1, \"Project name is required\").max(128).trim(),\n  description: z.string().max(2e3).optional(),\n  visibility: ProjectVisibilitySchema.default(\"private\"),\n  autoJoinOnUpload: z.boolean().optional()\n});\nconst GET = async ({ locals }) => {\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n  try {\n    const page = await getProjectProvider().listProjects(ctx, ctx.actingOrgId, { limit: 200 });\n    return json({ projects: page.items });\n  } catch (err) {\n    handleApiError(err, \"Failed to load projects\");\n  }\n};\nconst POST = async ({ request, locals }) => {\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n  await requireCanCreateProject(locals, ctx.actingOrgId);\n  const body = await request.json().catch(() => null);\n  const parsed = CreateProjectBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const autoJoinOnUpload = parsed.data.autoJoinOnUpload ?? false;\n  if (autoJoinOnUpload && parsed.data.visibility !== \"public\") {\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, \"autoJoinOnUpload requires visibility=public\");\n  }\n  const projectStore = getProjectProvider();\n  const baseSlug = slugify(parsed.data.name) || \"project\";\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const projectId = randomUUID();\n  for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {\n    const slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;\n    const project = {\n      id: projectId,\n      orgId: ctx.actingOrgId,\n      name: parsed.data.name,\n      slug,\n      description: parsed.data.description,\n      visibility: parsed.data.visibility,\n      ownerId: locals.user.id,\n      createdBy: locals.user.id,\n      updatedBy: locals.user.id,\n      autoJoinOnUpload,\n      createdAt: now,\n      updatedAt: now,\n      deletedAt: null\n    };\n    try {\n      await projectStore.createProject(ctx, project);\n      return json(project, { status: 201 });\n    } catch (err) {\n      if (isNameConflict(err)) {\n        apiError(\n          409,\n          ApiErrorCode.CONFLICT,\n          \"A project with that name already exists in this organization.\"\n        );\n      }\n      if (isSlugConflict(err)) continue;\n      handleApiError(err, \"Failed to create project\");\n    }\n  }\n  apiError(\n    409,\n    ApiErrorCode.CONFLICT,\n    \"Could not pick a unique project slug after several attempts.\"\n  );\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAQA,MAAM,iBAAiB,GAAG,EAAE;AAC5B,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;AACnC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACrE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;AAC7C,EAAE,UAAU,EAAE,uBAAuB,CAAC,OAAO,CAAC,SAAS,CAAC;AACxD,EAAE,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ;AACxC,CAAC,CAAC;AACG,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC/F,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAC9F,IAAI,OAAO,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;AACzC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,yBAAyB,CAAC;AAClD,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC/F,EAAE,MAAM,uBAAuB,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC;AACxD,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC;AAClD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,KAAK;AAChE,EAAE,IAAI,gBAAgB,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE;AAC/D,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,6CAA6C,CAAC;AAChG,EAAE;AACF,EAAE,MAAM,YAAY,GAAG,kBAAkB,EAAE;AAC3C,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS;AACzD,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,SAAS,GAAG,UAAU,EAAE;AAChC,EAAE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,iBAAiB,EAAE,OAAO,EAAE,EAAE;AAChE,IAAI,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;AACxE,IAAI,MAAM,OAAO,GAAG;AACpB,MAAM,EAAE,EAAE,SAAS;AACnB,MAAM,KAAK,EAAE,GAAG,CAAC,WAAW;AAC5B,MAAM,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC5B,MAAM,IAAI;AACV,MAAM,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AAC1C,MAAM,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;AACxC,MAAM,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC7B,MAAM,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC/B,MAAM,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC/B,MAAM,gBAAgB;AACtB,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE;AACjB,KAAK;AACL,IAAI,IAAI;AACR,MAAM,MAAM,YAAY,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC;AACpD,MAAM,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,QAAQ,QAAQ;AAChB,UAAU,GAAG;AACb,UAAU,YAAY,CAAC,QAAQ;AAC/B,UAAU;AACV,SAAS;AACT,MAAM;AACN,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,MAAM,cAAc,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACrD,IAAI;AACJ,EAAE;AACF,EAAE,QAAQ;AACV,IAAI,GAAG;AACP,IAAI,YAAY,CAAC,QAAQ;AACzB,IAAI;AACJ,GAAG;AACH;;;;"}

package/build/server/chunks/{_server.ts-Bel_bV82.js → _server.ts-CgRuMyJ9.js}

@@ -1,7 +1,7 @@
-import { error, json } from '@sveltejs/kit';
-import { k as getOrganizationProvider, P as ProviderError } from './providers.server-BYk2ehLM.js';
-import { u as requireInstanceAdmin } from './access.server-BueyYEoY.js';
-import { h as handleApiError, t as throwZodError } from './api-errors-BckwXK7Q.js';
+import { json } from '@sveltejs/kit';
+import { k as getOrganizationProvider, P as ProviderError } from './providers.server-C3fQ7ZdV.js';
+import { u as requireInstanceAdmin } from './access.server-Rd56k7vs.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
 import { i as UpdateOrgSchema } from './context-BJnJL8ES.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
@@ -12,12 +12,12 @@ import 'node:fs/promises';
 import '@supabase/supabase-js';
 import 'zod';
 import '@selvajs/compute/core';
-import './utils2-UQQTHTw-.js';
+import './utils2-BqfluBM6.js';
 
 const PATCH = async ({ params, request, locals }) => {
   requireInstanceAdmin(locals);
   const { id } = params;
-  if (!id) throw error(400, "Missing org ID");
+  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing org ID");
   const ctx = locals.ctx;
   const body = await request.json().catch(() => null);
   const parsed = UpdateOrgSchema.safeParse(body);
@@ -28,7 +28,7 @@ const PATCH = async ({ params, request, locals }) => {
     return json(updated);
   } catch (err) {
     if (err instanceof ProviderError && err.statusCode === 409) {
-      throw error(409, err.message);
+      apiError(409, ApiErrorCode.CONFLICT, err.message);
     }
     handleApiError(err, "Failed to update org");
   }
@@ -36,15 +36,15 @@ const PATCH = async ({ params, request, locals }) => {
 const DELETE = async ({ params, locals }) => {
   requireInstanceAdmin(locals);
   const { id } = params;
-  if (!id) throw error(400, "Missing org ID");
+  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing org ID");
   const ctx = locals.ctx;
   try {
     await getOrganizationProvider().deleteOrg(ctx, id);
-    return json({ success: true });
+    return new Response(null, { status: 204 });
   } catch (err) {
     handleApiError(err, "Failed to delete org");
   }
 };
 
 export { DELETE, PATCH };
-//# sourceMappingURL=_server.ts-Bel_bV82.js.map
+//# sourceMappingURL=_server.ts-CgRuMyJ9.js.map

package/build/server/chunks/_server.ts-CgRuMyJ9.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-CgRuMyJ9.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/orgs/_id_/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { k as getOrganizationProvider, P as ProviderError } from \"../../../../../../chunks/providers.server.js\";\nimport { u as requireInstanceAdmin } from \"../../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { i as UpdateOrgSchema } from \"../../../../../../chunks/context.js\";\nconst PATCH = async ({ params, request, locals }) => {\n  requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing org ID\");\n  const ctx = locals.ctx;\n  const body = await request.json().catch(() => null);\n  const parsed = UpdateOrgSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  try {\n    await getOrganizationProvider().updateOrg(ctx, id, parsed.data);\n    const updated = await getOrganizationProvider().getOrg(ctx, id);\n    return json(updated);\n  } catch (err) {\n    if (err instanceof ProviderError && err.statusCode === 409) {\n      apiError(409, ApiErrorCode.CONFLICT, err.message);\n    }\n    handleApiError(err, \"Failed to update org\");\n  }\n};\nconst DELETE = async ({ params, locals }) => {\n  requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing org ID\");\n  const ctx = locals.ctx;\n  try {\n    await getOrganizationProvider().deleteOrg(ctx, id);\n    return new Response(null, { status: 204 });\n  } catch (err) {\n    handleApiError(err, \"Failed to delete org\");\n  }\n};\nexport {\n  DELETE,\n  PATCH\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAKK,MAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrD,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;AAC1E,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAChD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI;AACN,IAAI,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC;AACnE,IAAI,MAAM,OAAO,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AACnE,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC;AACxB,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE;AAChE,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC;AACvD,IAAI;AACJ,IAAI,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC/C,EAAE;AACF;AACK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;AAC1E,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI;AACN,IAAI,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC;AACtD,IAAI,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC9C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC/C,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-TGu9dCIM.js → _server.ts-CmCeYB9h.js}

@@ -1,11 +1,10 @@
-import { error, json } from '@sveltejs/kit';
 import { z } from 'zod';
-import { l as getPermissionStore, a as getAuthProvider, e as getDataProvider, k as getOrganizationProvider } from './providers.server-BYk2ehLM.js';
-import { w as requireManageInstanceUsers } from './access.server-BueyYEoY.js';
-import { t as throwZodError } from './api-errors-BckwXK7Q.js';
+import { l as getPermissionStore, a as getAuthProvider, e as getDataProvider, k as getOrganizationProvider } from './providers.server-C3fQ7ZdV.js';
+import { w as requireManageInstanceUsers } from './access.server-Rd56k7vs.js';
+import { a as apiError, t as throwZodError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
 import { S as SYSTEM_CONTEXT, j as hasPermission, D as DEFAULT_ORG_PERMISSIONS, M as MEMBER_ASSIGNABLE_PERMISSIONS, P as PlatformPermissionSchema, d as OrgPermissionSchema } from './context-BJnJL8ES.js';
 import { s as splitFlatPermissions } from './permissions-compat.server-G174xsh6.js';
-import { s as setUserPlatformPermissions } from './permissions.server-D1KUdeD1.js';
+import { s as setUserPlatformPermissions } from './permissions.server-zs4XAJCp.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
 import 'node:path';
@@ -13,8 +12,9 @@ import 'node:fs';
 import 'node:crypto';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
+import '@sveltejs/kit';
 import '@selvajs/compute/core';
-import './utils2-UQQTHTw-.js';
+import './utils2-BqfluBM6.js';
 
 const FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);
 const UpdatePermissionsBody = z.object({
@@ -23,7 +23,7 @@ const UpdatePermissionsBody = z.object({
 const PATCH = async ({ params, request, locals }) => {
   requireManageInstanceUsers(locals);
   const { id } = params;
-  if (!id) throw error(400, "Missing user ID");
+  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing user ID");
   const body = await request.json().catch(() => null);
   const parsed = UpdatePermissionsBody.safeParse(body);
   if (!parsed.success) throwZodError(parsed.error);
@@ -31,15 +31,24 @@ const PATCH = async ({ params, request, locals }) => {
   const existingPlatform = await getPermissionStore().getFor(locals.ctx, id);
   const platformChanged = platform.length !== existingPlatform.length || platform.some((p) => !existingPlatform.includes(p)) || existingPlatform.some((p) => !platform.includes(p));
   if (platformChanged && !hasPermission(locals.ctx, "instance_admin")) {
-    throw error(403, "Only a platform admin can change platform-scope permissions");
+    apiError(
+      403,
+      ApiErrorCode.FORBIDDEN,
+      "Only a platform admin can change platform-scope permissions"
+    );
   }
   const platformResult = await setUserPlatformPermissions(locals.ctx, id, platform);
-  if (platformResult === "not_found") throw error(404, "User not found");
+  if (platformResult === "not_found") apiError(404, ApiErrorCode.NOT_FOUND, "User not found");
   if (platformResult === "not_supported")
-    throw error(501, "Platform permission updates not supported by this auth provider");
+    apiError(
+      501,
+      ApiErrorCode.INTERNAL,
+      "Platform permission updates not supported by this auth provider"
+    );
   if (platformResult === "last_admin")
-    throw error(
+    apiError(
       409,
+      ApiErrorCode.CONFLICT,
       "Cannot remove the last instance admin. Promote another user to instance admin first."
     );
   const orgId = locals.ctx?.actingOrgId;
@@ -68,29 +77,30 @@ const PATCH = async ({ params, request, locals }) => {
       });
     }
   }
-  return json({ success: true });
+  return new Response(null, { status: 204 });
 };
 const DELETE = async ({ params, locals }) => {
   requireManageInstanceUsers(locals);
   const { id } = params;
-  if (!id) throw error(400, "Missing user ID");
+  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing user ID");
   const targetPerms = await getPermissionStore().getFor(locals.ctx, id);
   if (targetPerms.includes("instance_admin")) {
     const others = await getPermissionStore().countInstanceAdminsExcluding(locals.ctx, id);
     if (others === 0) {
-      throw error(
+      apiError(
         409,
+        ApiErrorCode.CONFLICT,
         "Cannot delete the last instance admin. Promote another user to instance admin first."
       );
     }
   }
   const result = await getAuthProvider().deleteUser(id);
-  if (result === "not_found") throw error(404, "User not found");
+  if (result === "not_found") apiError(404, ApiErrorCode.NOT_FOUND, "User not found");
   if (result === "not_supported")
-    throw error(501, "User deletion not supported by this auth provider");
+    apiError(501, ApiErrorCode.INTERNAL, "User deletion not supported by this auth provider");
   await getDataProvider().onUserDeleted(SYSTEM_CONTEXT, id);
-  return json({ success: true });
+  return new Response(null, { status: 204 });
 };
 
 export { DELETE, PATCH };
-//# sourceMappingURL=_server.ts-TGu9dCIM.js.map
+//# sourceMappingURL=_server.ts-CmCeYB9h.js.map

package/build/server/chunks/_server.ts-CmCeYB9h.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-CmCeYB9h.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/users/_id_/_server.ts.js"],"sourcesContent":["import { z } from \"zod\";\nimport { l as getPermissionStore, a as getAuthProvider, e as getDataProvider, k as getOrganizationProvider } from \"../../../../../../chunks/providers.server.js\";\nimport { w as requireManageInstanceUsers } from \"../../../../../../chunks/access.server.js\";\nimport { a as apiError, t as throwZodError, A as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { P as PlatformPermissionSchema, d as OrgPermissionSchema, S as SYSTEM_CONTEXT, j as hasPermission, D as DEFAULT_ORG_PERMISSIONS, M as MEMBER_ASSIGNABLE_PERMISSIONS } from \"../../../../../../chunks/context.js\";\nimport { s as splitFlatPermissions } from \"../../../../../../chunks/permissions-compat.server.js\";\nimport { s as setUserPlatformPermissions } from \"../../../../../../chunks/permissions.server.js\";\nconst FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);\nconst UpdatePermissionsBody = z.object({\n  permissions: z.array(FlatPermissionSchema)\n});\nconst PATCH = async ({ params, request, locals }) => {\n  requireManageInstanceUsers(locals);\n  const { id } = params;\n  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing user ID\");\n  const body = await request.json().catch(() => null);\n  const parsed = UpdatePermissionsBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const { platform, org } = splitFlatPermissions(parsed.data.permissions);\n  const existingPlatform = await getPermissionStore().getFor(locals.ctx, id);\n  const platformChanged = platform.length !== existingPlatform.length || platform.some((p) => !existingPlatform.includes(p)) || existingPlatform.some((p) => !platform.includes(p));\n  if (platformChanged && !hasPermission(locals.ctx, \"instance_admin\")) {\n    apiError(\n      403,\n      ApiErrorCode.FORBIDDEN,\n      \"Only a platform admin can change platform-scope permissions\"\n    );\n  }\n  const platformResult = await setUserPlatformPermissions(locals.ctx, id, platform);\n  if (platformResult === \"not_found\") apiError(404, ApiErrorCode.NOT_FOUND, \"User not found\");\n  if (platformResult === \"not_supported\")\n    apiError(\n      501,\n      ApiErrorCode.INTERNAL,\n      \"Platform permission updates not supported by this auth provider\"\n    );\n  if (platformResult === \"last_admin\")\n    apiError(\n      409,\n      ApiErrorCode.CONFLICT,\n      \"Cannot remove the last instance admin. Promote another user to instance admin first.\"\n    );\n  const orgId = locals.ctx?.actingOrgId;\n  if (orgId) {\n    const orgs = getOrganizationProvider();\n    const existing = await orgs.getOrgMember(SYSTEM_CONTEXT, orgId, id);\n    const resolvedPermissions = (role) => role === \"member\" ? org.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[role]];\n    if (existing) {\n      await orgs.updateOrgMemberPermissions(\n        SYSTEM_CONTEXT,\n        orgId,\n        id,\n        resolvedPermissions(existing.role)\n      );\n    } else {\n      const joinedAt = (/* @__PURE__ */ new Date()).toISOString();\n      await orgs.addOrgMember(SYSTEM_CONTEXT, {\n        orgId,\n        userId: id,\n        role: \"member\",\n        permissions: resolvedPermissions(\"member\"),\n        joinedAt,\n        updatedAt: joinedAt,\n        updatedBy: locals.user?.id ?? id,\n        deletedAt: null\n      });\n    }\n  }\n  return new Response(null, { status: 204 });\n};\nconst DELETE = async ({ params, locals }) => {\n  requireManageInstanceUsers(locals);\n  const { id } = params;\n  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing user ID\");\n  const targetPerms = await getPermissionStore().getFor(locals.ctx, id);\n  if (targetPerms.includes(\"instance_admin\")) {\n    const others = await getPermissionStore().countInstanceAdminsExcluding(locals.ctx, id);\n    if (others === 0) {\n      apiError(\n        409,\n        ApiErrorCode.CONFLICT,\n        \"Cannot delete the last instance admin. Promote another user to instance admin first.\"\n      );\n    }\n  }\n  const result = await getAuthProvider().deleteUser(id);\n  if (result === \"not_found\") apiError(404, ApiErrorCode.NOT_FOUND, \"User not found\");\n  if (result === \"not_supported\")\n    apiError(501, ApiErrorCode.INTERNAL, \"User deletion not supported by this auth provider\");\n  await getDataProvider().onUserDeleted(SYSTEM_CONTEXT, id);\n  return new Response(null, { status: 204 });\n};\nexport {\n  DELETE,\n  PATCH\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAOA,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;AACrF,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;AACvC,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB;AAC3C,CAAC,CAAC;AACG,MAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrD,EAAE,0BAA0B,CAAC,MAAM,CAAC;AACpC,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;AAC3E,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;AACzE,EAAE,MAAM,gBAAgB,GAAG,MAAM,kBAAkB,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AAC5E,EAAE,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,KAAK,gBAAgB,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACnL,EAAE,IAAI,eAAe,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE;AACvE,IAAI,QAAQ;AACZ,MAAM,GAAG;AACT,MAAM,YAAY,CAAC,SAAS;AAC5B,MAAM;AACN,KAAK;AACL,EAAE;AACF,EAAE,MAAM,cAAc,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,QAAQ,CAAC;AACnF,EAAE,IAAI,cAAc,KAAK,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AAC7F,EAAE,IAAI,cAAc,KAAK,eAAe;AACxC,IAAI,QAAQ;AACZ,MAAM,GAAG;AACT,MAAM,YAAY,CAAC,QAAQ;AAC3B,MAAM;AACN,KAAK;AACL,EAAE,IAAI,cAAc,KAAK,YAAY;AACrC,IAAI,QAAQ;AACZ,MAAM,GAAG;AACT,MAAM,YAAY,CAAC,QAAQ;AAC3B,MAAM;AACN,KAAK;AACL,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,WAAW;AACvC,EAAE,IAAI,KAAK,EAAE;AACb,IAAI,MAAM,IAAI,GAAG,uBAAuB,EAAE;AAC1C,IAAI,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE,EAAE,CAAC;AACvE,IAAI,MAAM,mBAAmB,GAAG,CAAC,IAAI,KAAK,IAAI,KAAK,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;AAC/J,IAAI,IAAI,QAAQ,EAAE;AAClB,MAAM,MAAM,IAAI,CAAC,0BAA0B;AAC3C,QAAQ,cAAc;AACtB,QAAQ,KAAK;AACb,QAAQ,EAAE;AACV,QAAQ,mBAAmB,CAAC,QAAQ,CAAC,IAAI;AACzC,OAAO;AACP,IAAI,CAAC,MAAM;AACX,MAAM,MAAM,QAAQ,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACjE,MAAM,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE;AAC9C,QAAQ,KAAK;AACb,QAAQ,MAAM,EAAE,EAAE;AAClB,QAAQ,IAAI,EAAE,QAAQ;AACtB,QAAQ,WAAW,EAAE,mBAAmB,CAAC,QAAQ,CAAC;AAClD,QAAQ,QAAQ;AAChB,QAAQ,SAAS,EAAE,QAAQ;AAC3B,QAAQ,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE;AACxC,QAAQ,SAAS,EAAE;AACnB,OAAO,CAAC;AACR,IAAI;AACJ,EAAE;AACF,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C;AACK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,0BAA0B,CAAC,MAAM,CAAC;AACpC,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;AAC3E,EAAE,MAAM,WAAW,GAAG,MAAM,kBAAkB,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AACvE,EAAE,IAAI,WAAW,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE;AAC9C,IAAI,MAAM,MAAM,GAAG,MAAM,kBAAkB,EAAE,CAAC,4BAA4B,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AAC1F,IAAI,IAAI,MAAM,KAAK,CAAC,EAAE;AACtB,MAAM,QAAQ;AACd,QAAQ,GAAG;AACX,QAAQ,YAAY,CAAC,QAAQ;AAC7B,QAAQ;AACR,OAAO;AACP,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;AACvD,EAAE,IAAI,MAAM,KAAK,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACrF,EAAE,IAAI,MAAM,KAAK,eAAe;AAChC,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,mDAAmD,CAAC;AAC7F,EAAE,MAAM,eAAe,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC;AAC3D,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C;;;;"}

package/build/server/chunks/{_server.ts-Mywogv28.js → _server.ts-Codg_zX0.js}

@@ -1,7 +1,6 @@
-import { error, json } from '@sveltejs/kit';
-import { i as getDefinitionService } from './providers.server-BYk2ehLM.js';
-import { t as requireEditableDefinition } from './access.server-BueyYEoY.js';
-import { h as handleApiError } from './api-errors-BckwXK7Q.js';
+import { i as getDefinitionService } from './providers.server-C3fQ7ZdV.js';
+import { t as requireEditableDefinition } from './access.server-Rd56k7vs.js';
+import { a as apiError, h as handleApiError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
 import { G as GuidSchema } from './context-BJnJL8ES.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
@@ -10,23 +9,25 @@ import 'node:fs';
 import 'node:crypto';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
+import '@sveltejs/kit';
 import 'zod';
 import '@selvajs/compute/core';
-import './utils2-UQQTHTw-.js';
+import './utils2-BqfluBM6.js';
 
 const DELETE = async ({ params, locals }) => {
   const guidParsed = GuidSchema.safeParse(params.guid);
-  if (!guidParsed.success) throw error(400, "Invalid or missing GUID");
+  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing GUID");
   const versionParsed = GuidSchema.safeParse(params.versionId);
-  if (!versionParsed.success) throw error(400, "Invalid or missing version ID");
+  if (!versionParsed.success)
+    apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing version ID");
   const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
   try {
     await getDefinitionService().deleteVersion(ctx, guidParsed.data, versionParsed.data);
-    return json({ success: true });
+    return new Response(null, { status: 204 });
   } catch (err) {
     handleApiError(err, "Failed to delete version");
   }
 };
 
 export { DELETE };
-//# sourceMappingURL=_server.ts-Mywogv28.js.map
+//# sourceMappingURL=_server.ts-Codg_zX0.js.map

package/build/server/chunks/_server.ts-Codg_zX0.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-Codg_zX0.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_guid_/versions/_versionId_/_server.ts.js"],"sourcesContent":["import { i as getDefinitionService } from \"../../../../../../../chunks/providers.server.js\";\nimport { t as requireEditableDefinition } from \"../../../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, A as ApiErrorCode } from \"../../../../../../../chunks/api-errors.js\";\nimport { G as GuidSchema } from \"../../../../../../../chunks/context.js\";\nconst DELETE = async ({ params, locals }) => {\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing GUID\");\n  const versionParsed = GuidSchema.safeParse(params.versionId);\n  if (!versionParsed.success)\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing version ID\");\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  try {\n    await getDefinitionService().deleteVersion(ctx, guidParsed.data, versionParsed.data);\n    return new Response(null, { status: 204 });\n  } catch (err) {\n    handleApiError(err, \"Failed to delete version\");\n  }\n};\nexport {\n  DELETE\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACnG,EAAE,MAAM,aAAa,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;AAC9D,EAAE,IAAI,CAAC,aAAa,CAAC,OAAO;AAC5B,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,+BAA+B,CAAC;AAClF,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,IAAI;AACN,IAAI,MAAM,oBAAoB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC;AACxF,IAAI,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC9C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,0BAA0B,CAAC;AACnD,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-Cu7fT_h2.js → _server.ts-D-WjMJlD.js}

@@ -1,13 +1,16 @@
-import { error, redirect } from '@sveltejs/kit';
-import { a as getAuthProvider } from './providers.server-BYk2ehLM.js';
-import { b as bootstrapUserSession } from './auth-bootstrap.server-BOTw9HkY.js';
+import { redirect } from '@sveltejs/kit';
+import { a as apiError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
+import { a as getAuthProvider } from './providers.server-C3fQ7ZdV.js';
+import { b as bootstrapUserSession } from './auth-bootstrap.server-DKc9-3PR.js';
 import { h as setSessionCookie, f as setRefreshCookie, s as safeRedirectTarget } from './admin-auth.server-45kKyH82.js';
+import './context-BJnJL8ES.js';
+import 'zod';
+import '@selvajs/compute/core';
+import './utils2-BqfluBM6.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
 import 'node:path';
 import 'node:fs';
-import './context-BJnJL8ES.js';
-import 'zod';
 import 'node:crypto';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
@@ -16,10 +19,11 @@ import './slug-BGuFQjqe.js';
 const GET = async ({ url, cookies }) => {
   const emailLink = getAuthProvider().emailLink;
   if (!emailLink) {
-    throw error(501, "Email sign-in is not supported by this provider.");
+    apiError(501, ApiErrorCode.INTERNAL, "Email sign-in is not supported by this provider.");
   }
   const result = await emailLink.verifyMagicLink(url.toString());
-  if (!result) throw error(401, "This sign-in link is invalid or has expired.");
+  if (!result)
+    apiError(401, ApiErrorCode.UNAUTHORIZED, "This sign-in link is invalid or has expired.");
   await bootstrapUserSession(result.user);
   setSessionCookie(cookies, result.sessionToken);
   if (result.refreshToken) setRefreshCookie(cookies, result.refreshToken);
@@ -28,4 +32,4 @@ const GET = async ({ url, cookies }) => {
 };
 
 export { GET };
-//# sourceMappingURL=_server.ts-Cu7fT_h2.js.map
+//# sourceMappingURL=_server.ts-D-WjMJlD.js.map

package/build/server/chunks/_server.ts-D-WjMJlD.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-D-WjMJlD.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/auth/email/callback/_server.ts.js"],"sourcesContent":["import { redirect } from \"@sveltejs/kit\";\nimport { a as apiError, A as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { a as getAuthProvider } from \"../../../../../chunks/providers.server.js\";\nimport { b as bootstrapUserSession } from \"../../../../../chunks/auth-bootstrap.server.js\";\nimport { h as setSessionCookie, f as setRefreshCookie, s as safeRedirectTarget } from \"../../../../../chunks/admin-auth.server.js\";\nconst GET = async ({ url, cookies }) => {\n  const emailLink = getAuthProvider().emailLink;\n  if (!emailLink) {\n    apiError(501, ApiErrorCode.INTERNAL, \"Email sign-in is not supported by this provider.\");\n  }\n  const result = await emailLink.verifyMagicLink(url.toString());\n  if (!result)\n    apiError(401, ApiErrorCode.UNAUTHORIZED, \"This sign-in link is invalid or has expired.\");\n  await bootstrapUserSession(result.user);\n  setSessionCookie(cookies, result.sessionToken);\n  if (result.refreshToken) setRefreshCookie(cookies, result.refreshToken);\n  const dest = safeRedirectTarget(url.searchParams.get(\"redirectTo\"), \"/library\");\n  redirect(303, dest);\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAKK,MAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK;AACxC,EAAE,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC,SAAS;AAC/C,EAAE,IAAI,CAAC,SAAS,EAAE;AAClB,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,kDAAkD,CAAC;AAC5F,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;AAChE,EAAE,IAAI,CAAC,MAAM;AACb,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,8CAA8C,CAAC;AAC5F,EAAE,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;AACzC,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAChD,EAAE,IAAI,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACzE,EAAE,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;AACjF,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;AACrB;;;;"}

package/build/server/chunks/{_server.ts-BnV_32U5.js → _server.ts-D4z7bYT1.js}

@@ -1,9 +1,9 @@
-import { error, json } from '@sveltejs/kit';
+import { json } from '@sveltejs/kit';
 import { z } from 'zod';
 import { randomUUID } from 'node:crypto';
-import { f as flag, k as getOrganizationProvider, n as getProjectProvider, P as ProviderError } from './providers.server-BYk2ehLM.js';
-import { u as requireInstanceAdmin } from './access.server-BueyYEoY.js';
-import { h as handleApiError, t as throwZodError } from './api-errors-BckwXK7Q.js';
+import { f as flag, k as getOrganizationProvider, n as getProjectProvider, P as ProviderError } from './providers.server-C3fQ7ZdV.js';
+import { u as requireInstanceAdmin } from './access.server-Rd56k7vs.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
 import { s as slugify } from './slug-BGuFQjqe.js';
 import { S as SYSTEM_CONTEXT } from './context-BJnJL8ES.js';
 import './shared-server-C3WdcJCQ.js';
@@ -13,7 +13,7 @@ import 'node:fs';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
 import '@selvajs/compute/core';
-import './utils2-UQQTHTw-.js';
+import './utils2-BqfluBM6.js';
 
 const MAX_SLUG_ATTEMPTS = 25;
 function isSlugConflict(err) {
@@ -36,7 +36,7 @@ const CreatePlatformProjectBody = z.object({
 });
 const GET = async ({ locals }) => {
   requireInstanceAdmin(locals);
-  if (!flag("ENABLE_PLATFORM_PROJECTS")) throw error(404, "Not found");
+  if (!flag("ENABLE_PLATFORM_PROJECTS")) apiError(404, ApiErrorCode.NOT_FOUND, "Not found");
   try {
     const orgs = await getOrganizationProvider().listOrgs(SYSTEM_CONTEXT, { limit: 1e3 });
     const all = [];
@@ -55,17 +55,22 @@ const GET = async ({ locals }) => {
 };
 const POST = async ({ request, locals }) => {
   const user = requireInstanceAdmin(locals);
-  if (!flag("ENABLE_PLATFORM_PROJECTS")) throw error(404, "Not found");
+  if (!flag("ENABLE_PLATFORM_PROJECTS")) apiError(404, ApiErrorCode.NOT_FOUND, "Not found");
   const ctx = locals.ctx;
   const body = await request.json().catch(() => null);
   const parsed = CreatePlatformProjectBody.safeParse(body);
   if (!parsed.success) throwZodError(parsed.error);
   const hostOrgId = parsed.data.orgId ?? ctx.actingOrgId;
   if (!hostOrgId) {
-    throw error(400, "A host orgId is required (no active organization in context).");
+    apiError(
+      400,
+      ApiErrorCode.VALIDATION_FAILED,
+      "A host orgId is required (no active organization in context)."
+    );
   }
   const hostOrg = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, hostOrgId);
-  if (!hostOrg) throw error(400, `Host organization '${hostOrgId}' not found.`);
+  if (!hostOrg)
+    apiError(400, ApiErrorCode.VALIDATION_FAILED, `Host organization '${hostOrgId}' not found.`);
   const projectStore = getProjectProvider();
   const baseSlug = slugify(parsed.data.name) || "platform-project";
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -92,14 +97,22 @@ const POST = async ({ request, locals }) => {
       return json(project, { status: 201 });
     } catch (err) {
       if (isNameConflict(err)) {
-        throw error(409, "A project with that name already exists in the host organization.");
+        apiError(
+          409,
+          ApiErrorCode.CONFLICT,
+          "A project with that name already exists in the host organization."
+        );
       }
       if (isSlugConflict(err)) continue;
       handleApiError(err, "Failed to create platform project");
     }
   }
-  throw error(409, "Could not pick a unique project slug after several attempts.");
+  apiError(
+    409,
+    ApiErrorCode.CONFLICT,
+    "Could not pick a unique project slug after several attempts."
+  );
 };
 
 export { GET, POST };
-//# sourceMappingURL=_server.ts-BnV_32U5.js.map
+//# sourceMappingURL=_server.ts-D4z7bYT1.js.map

package/build/server/chunks/_server.ts-D4z7bYT1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-D4z7bYT1.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/projects/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\nimport { f as flag, k as getOrganizationProvider, n as getProjectProvider, P as ProviderError } from \"../../../../../chunks/providers.server.js\";\nimport { u as requireInstanceAdmin } from \"../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { s as slugify } from \"../../../../../chunks/slug.js\";\nimport { S as SYSTEM_CONTEXT } from \"../../../../../chunks/context.js\";\nconst MAX_SLUG_ATTEMPTS = 25;\nfunction isSlugConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);\n}\nfunction isNameConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);\n}\nconst CreatePlatformProjectBody = z.object({\n  name: z.string().min(1, \"Project name is required\").max(128).trim(),\n  description: z.string().max(2e3).optional(),\n  /**\n   * Org that physically hosts the project. Storage routing and compute\n   * resolution use this — but org membership in this org does NOT grant\n   * access. Visibility = 'platform' overrides those defaults.\n   *\n   * If omitted, the platform admin's first available org is used.\n   */\n  orgId: z.string().uuid().optional()\n});\nconst GET = async ({ locals }) => {\n  requireInstanceAdmin(locals);\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n  try {\n    const orgs = await getOrganizationProvider().listOrgs(SYSTEM_CONTEXT, { limit: 1e3 });\n    const all = [];\n    for (const org of orgs.items) {\n      const page = await getProjectProvider().listProjects(SYSTEM_CONTEXT, org.id, {\n        limit: 1e3\n      });\n      for (const p of page.items) {\n        if (p.visibility === \"platform\") all.push(p);\n      }\n    }\n    return json({ projects: all });\n  } catch (err) {\n    handleApiError(err, \"Failed to list platform projects\");\n  }\n};\nconst POST = async ({ request, locals }) => {\n  const user = requireInstanceAdmin(locals);\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n  const ctx = locals.ctx;\n  const body = await request.json().catch(() => null);\n  const parsed = CreatePlatformProjectBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const hostOrgId = parsed.data.orgId ?? ctx.actingOrgId;\n  if (!hostOrgId) {\n    apiError(\n      400,\n      ApiErrorCode.VALIDATION_FAILED,\n      \"A host orgId is required (no active organization in context).\"\n    );\n  }\n  const hostOrg = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, hostOrgId);\n  if (!hostOrg)\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, `Host organization '${hostOrgId}' not found.`);\n  const projectStore = getProjectProvider();\n  const baseSlug = slugify(parsed.data.name) || \"platform-project\";\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const projectId = randomUUID();\n  for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {\n    const slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;\n    const project = {\n      id: projectId,\n      orgId: hostOrgId,\n      name: parsed.data.name,\n      slug,\n      description: parsed.data.description,\n      visibility: \"platform\",\n      ownerId: user.id,\n      createdBy: user.id,\n      updatedBy: user.id,\n      autoJoinOnUpload: false,\n      createdAt: now,\n      updatedAt: now,\n      deletedAt: null\n    };\n    try {\n      await projectStore.createProject(SYSTEM_CONTEXT, project);\n      return json(project, { status: 201 });\n    } catch (err) {\n      if (isNameConflict(err)) {\n        apiError(\n          409,\n          ApiErrorCode.CONFLICT,\n          \"A project with that name already exists in the host organization.\"\n        );\n      }\n      if (isSlugConflict(err)) continue;\n      handleApiError(err, \"Failed to create platform project\");\n    }\n  }\n  apiError(\n    409,\n    ApiErrorCode.CONFLICT,\n    \"Could not pick a unique project slug after several attempts.\"\n  );\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAQA,MAAM,iBAAiB,GAAG,EAAE;AAC5B,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;AAC3C,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACrE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;AAC7C;AACA;AACA;AACA;AACA;AACA;AACA;AACA,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ;AACnC,CAAC,CAAC;AACG,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC3F,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,uBAAuB,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACzF,IAAI,MAAM,GAAG,GAAG,EAAE;AAClB,IAAI,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE;AAClC,MAAM,MAAM,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,EAAE;AACnF,QAAQ,KAAK,EAAE;AACf,OAAO,CAAC;AACR,MAAM,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE;AAClC,QAAQ,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACpD,MAAM;AACN,IAAI;AACJ,IAAI,OAAO,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,kCAAkC,CAAC;AAC3D,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC3C,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC3F,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1D,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,WAAW;AACxD,EAAE,IAAI,CAAC,SAAS,EAAE;AAClB,IAAI,QAAQ;AACZ,MAAM,GAAG;AACT,MAAM,YAAY,CAAC,iBAAiB;AACpC,MAAM;AACN,KAAK;AACL,EAAE;AACF,EAAE,MAAM,OAAO,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC;AACnF,EAAE,IAAI,CAAC,OAAO;AACd,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;AAChG,EAAE,MAAM,YAAY,GAAG,kBAAkB,EAAE;AAC3C,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,kBAAkB;AAClE,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,SAAS,GAAG,UAAU,EAAE;AAChC,EAAE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,iBAAiB,EAAE,OAAO,EAAE,EAAE;AAChE,IAAI,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;AACxE,IAAI,MAAM,OAAO,GAAG;AACpB,MAAM,EAAE,EAAE,SAAS;AACnB,MAAM,KAAK,EAAE,SAAS;AACtB,MAAM,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC5B,MAAM,IAAI;AACV,MAAM,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AAC1C,MAAM,UAAU,EAAE,UAAU;AAC5B,MAAM,OAAO,EAAE,IAAI,CAAC,EAAE;AACtB,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,gBAAgB,EAAE,KAAK;AAC7B,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE;AACjB,KAAK;AACL,IAAI,IAAI;AACR,MAAM,MAAM,YAAY,CAAC,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC;AAC/D,MAAM,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,QAAQ,QAAQ;AAChB,UAAU,GAAG;AACb,UAAU,YAAY,CAAC,QAAQ;AAC/B,UAAU;AACV,SAAS;AACT,MAAM;AACN,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,MAAM,cAAc,CAAC,GAAG,EAAE,mCAAmC,CAAC;AAC9D,IAAI;AACJ,EAAE;AACF,EAAE,QAAQ;AACV,IAAI,GAAG;AACP,IAAI,YAAY,CAAC,QAAQ;AACzB,IAAI;AACJ,GAAG;AACH;;;;"}

package/build/server/chunks/{_server.ts-BDVOe9oZ.js → _server.ts-D7URpGBv.js}

@@ -1,9 +1,9 @@
-import { error, json } from '@sveltejs/kit';
-import { i as getDefinitionService } from './providers.server-BYk2ehLM.js';
-import { t as requireEditableDefinition } from './access.server-BueyYEoY.js';
-import { h as handleApiError } from './api-errors-BckwXK7Q.js';
+import { json } from '@sveltejs/kit';
+import { i as getDefinitionService } from './providers.server-C3fQ7ZdV.js';
+import { t as requireEditableDefinition } from './access.server-Rd56k7vs.js';
+import { a as apiError, h as handleApiError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
 import { G as GuidSchema } from './context-BJnJL8ES.js';
-import { b as MAX_IMAGE_FILE_SIZE } from './computeLimits-DPO6NbLd.js';
+import { b as MAX_IMAGE_FILE_SIZE } from './computeLimits-DnJ77wR9.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
 import 'node:path';
@@ -13,29 +13,33 @@ import 'node:fs/promises';
 import '@supabase/supabase-js';
 import 'zod';
 import '@selvajs/compute/core';
-import './utils2-UQQTHTw-.js';
+import './utils2-BqfluBM6.js';
 
 const POST = async ({ params, request, locals }) => {
   const guidParsed = GuidSchema.safeParse(params.guid);
-  if (!guidParsed.success) throw error(400, "Invalid GUID");
+  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid GUID");
   const guid = guidParsed.data;
   const { ctx } = await requireEditableDefinition(locals, guid);
   const formData = await request.formData();
   const file = formData.get("image");
   if (!(file instanceof File) || file.size === 0) {
-    throw error(400, "Image file is required");
+    apiError(400, ApiErrorCode.VALIDATION_FAILED, "Image file is required");
   }
   if (file.size > MAX_IMAGE_FILE_SIZE) {
-    throw error(400, `Image too large. Max size: ${MAX_IMAGE_FILE_SIZE / (1024 * 1024)} MB`);
+    apiError(
+      400,
+      ApiErrorCode.VALIDATION_FAILED,
+      `Image too large. Max size: ${MAX_IMAGE_FILE_SIZE / (1024 * 1024)} MB`
+    );
   }
   try {
     const imageData = new Uint8Array(await file.arrayBuffer());
     const coverImage = await getDefinitionService().saveCoverImage(ctx, guid, imageData);
-    return json({ success: true, coverImage });
+    return json({ coverImage });
   } catch (err) {
     handleApiError(err, "Failed to upload image");
   }
 };
 
 export { POST };
-//# sourceMappingURL=_server.ts-BDVOe9oZ.js.map
+//# sourceMappingURL=_server.ts-D7URpGBv.js.map

package/build/server/chunks/_server.ts-D7URpGBv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-D7URpGBv.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_guid_/image/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { i as getDefinitionService } from \"../../../../../../chunks/providers.server.js\";\nimport { t as requireEditableDefinition } from \"../../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, A as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { G as GuidSchema } from \"../../../../../../chunks/context.js\";\nimport { b as MAX_IMAGE_FILE_SIZE } from \"../../../../../../chunks/computeLimits.js\";\nconst POST = async ({ params, request, locals }) => {\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid GUID\");\n  const guid = guidParsed.data;\n  const { ctx } = await requireEditableDefinition(locals, guid);\n  const formData = await request.formData();\n  const file = formData.get(\"image\");\n  if (!(file instanceof File) || file.size === 0) {\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Image file is required\");\n  }\n  if (file.size > MAX_IMAGE_FILE_SIZE) {\n    apiError(\n      400,\n      ApiErrorCode.VALIDATION_FAILED,\n      `Image too large. Max size: ${MAX_IMAGE_FILE_SIZE / (1024 * 1024)} MB`\n    );\n  }\n  try {\n    const imageData = new Uint8Array(await file.arrayBuffer());\n    const coverImage = await getDefinitionService().saveCoverImage(ctx, guid, imageData);\n    return json({ coverImage });\n  } catch (err) {\n    handleApiError(err, \"Failed to upload image\");\n  }\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAMK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpD,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,cAAc,CAAC;AACxF,EAAE,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI;AAC9B,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC;AAC/D,EAAE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;AAC3C,EAAE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;AACpC,EAAE,IAAI,EAAE,IAAI,YAAY,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE;AAClD,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC3E,EAAE;AACF,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,mBAAmB,EAAE;AACvC,IAAI,QAAQ;AACZ,MAAM,GAAG;AACT,MAAM,YAAY,CAAC,iBAAiB;AACpC,MAAM,CAAC,2BAA2B,EAAE,mBAAmB,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG;AAC3E,KAAK;AACL,EAAE;AACF,EAAE,IAAI;AACN,IAAI,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AAC9D,IAAI,MAAM,UAAU,GAAG,MAAM,oBAAoB,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC;AACxF,IAAI,OAAO,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC;AAC/B,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AACjD,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-CtwHDS7C.js → _server.ts-DMwrtYEK.js}

@@ -1,7 +1,10 @@
-import { error } from '@sveltejs/kit';
-import { h as getDefinitionMeta, d as definitionPaths, o as getStorageProvider } from './providers.server-BYk2ehLM.js';
+import { a as apiError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
+import { h as getDefinitionMeta, d as definitionPaths, p as getStorageProvider } from './providers.server-C3fQ7ZdV.js';
 import { G as GuidSchema } from './context-BJnJL8ES.js';
-import { s as requireCanViewProject } from './access.server-BueyYEoY.js';
+import { s as requireCanViewProject } from './access.server-Rd56k7vs.js';
+import '@sveltejs/kit';
+import '@selvajs/compute/core';
+import './utils2-BqfluBM6.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
 import 'node:path';
@@ -10,9 +13,6 @@ import 'node:crypto';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
 import 'zod';
-import './api-errors-BckwXK7Q.js';
-import '@selvajs/compute/core';
-import './utils2-UQQTHTw-.js';
 
 const ALLOWED_EXTENSIONS = {
   ".webp": "image/webp",
@@ -24,21 +24,21 @@ const ALLOWED_EXTENSIONS = {
 const COVER_PATH_PATTERN = /^definitions\/([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\/cover\.([a-z]+)$/i;
 const GET = async ({ params, locals }) => {
   const storagePath = params.path;
-  if (!storagePath) throw error(400, "Missing path");
+  if (!storagePath) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing path");
   const match = COVER_PATH_PATTERN.exec(storagePath);
-  if (!match) throw error(404, "File not found");
+  if (!match) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
   const [, guid, rawExt] = match;
   const ext = `.${rawExt.toLowerCase()}`;
-  if (!ALLOWED_EXTENSIONS[ext]) throw error(404, "File not found");
+  if (!ALLOWED_EXTENSIONS[ext]) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
   const guidParsed = GuidSchema.safeParse(guid);
-  if (!guidParsed.success) throw error(404, "File not found");
-  if (!locals.ctx) throw error(401, "Unauthorized");
+  if (!guidParsed.success) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
+  if (!locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
   const record = await getDefinitionMeta().get(locals.ctx, guidParsed.data);
-  if (!record) throw error(404, "File not found");
+  if (!record) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
   await requireCanViewProject(locals, record.projectId);
   const canonicalPath = definitionPaths.image(guidParsed.data);
   const bytes = await getStorageProvider().get(canonicalPath);
-  if (!bytes) throw error(404, "File not found");
+  if (!bytes) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
   return new Response(Buffer.from(bytes), {
     headers: {
       "Content-Type": ALLOWED_EXTENSIONS[ext],
@@ -48,4 +48,4 @@ const GET = async ({ params, locals }) => {
 };
 
 export { GET };
-//# sourceMappingURL=_server.ts-CtwHDS7C.js.map
+//# sourceMappingURL=_server.ts-DMwrtYEK.js.map

package/build/server/chunks/_server.ts-DMwrtYEK.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-DMwrtYEK.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/files/_...path_/_server.ts.js"],"sourcesContent":["import { a as apiError, A as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { h as getDefinitionMeta, d as definitionPaths, p as getStorageProvider } from \"../../../../../chunks/providers.server.js\";\nimport { G as GuidSchema } from \"../../../../../chunks/context.js\";\nimport { s as requireCanViewProject } from \"../../../../../chunks/access.server.js\";\nconst ALLOWED_EXTENSIONS = {\n  \".webp\": \"image/webp\",\n  \".jpg\": \"image/jpeg\",\n  \".jpeg\": \"image/jpeg\",\n  \".png\": \"image/png\",\n  \".gif\": \"image/gif\"\n};\nconst COVER_PATH_PATTERN = /^definitions\\/([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\\/cover\\.([a-z]+)$/i;\nconst GET = async ({ params, locals }) => {\n  const storagePath = params.path;\n  if (!storagePath) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing path\");\n  const match = COVER_PATH_PATTERN.exec(storagePath);\n  if (!match) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n  const [, guid, rawExt] = match;\n  const ext = `.${rawExt.toLowerCase()}`;\n  if (!ALLOWED_EXTENSIONS[ext]) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n  const guidParsed = GuidSchema.safeParse(guid);\n  if (!guidParsed.success) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n  if (!locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n  const record = await getDefinitionMeta().get(locals.ctx, guidParsed.data);\n  if (!record) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n  await requireCanViewProject(locals, record.projectId);\n  const canonicalPath = definitionPaths.image(guidParsed.data);\n  const bytes = await getStorageProvider().get(canonicalPath);\n  if (!bytes) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n  return new Response(Buffer.from(bytes), {\n    headers: {\n      \"Content-Type\": ALLOWED_EXTENSIONS[ext],\n      \"Cache-Control\": \"private, max-age=3600\"\n    }\n  });\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIA,MAAM,kBAAkB,GAAG;AAC3B,EAAE,OAAO,EAAE,YAAY;AACvB,EAAE,MAAM,EAAE,YAAY;AACtB,EAAE,OAAO,EAAE,YAAY;AACvB,EAAE,MAAM,EAAE,WAAW;AACrB,EAAE,MAAM,EAAE;AACV,CAAC;AACD,MAAM,kBAAkB,GAAG,iGAAiG;AACvH,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC1C,EAAE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI;AACjC,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,cAAc,CAAC;AACjF,EAAE,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC;AACpD,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACrE,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC,GAAG,KAAK;AAChC,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AACxC,EAAE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACvF,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;AAC/C,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AAClF,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC3E,EAAE,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AAC3E,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACtE,EAAE,MAAM,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC;AACvD,EAAE,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;AAC9D,EAAE,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC;AAC7D,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACrE,EAAE,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;AAC1C,IAAI,OAAO,EAAE;AACb,MAAM,cAAc,EAAE,kBAAkB,CAAC,GAAG,CAAC;AAC7C,MAAM,eAAe,EAAE;AACvB;AACA,GAAG,CAAC;AACJ;;;;"}

package/build/server/chunks/{_server.ts-DgbeoluB.js → _server.ts-DSVtVVVK.js}

@@ -1,9 +1,9 @@
-import { error, json } from '@sveltejs/kit';
+import { json } from '@sveltejs/kit';
 import { z } from 'zod';
 import { randomUUID } from 'node:crypto';
-import { m as getPlatformProjectGrantStore, k as getOrganizationProvider, q as getUserProfileStore, f as flag, n as getProjectProvider } from './providers.server-BYk2ehLM.js';
-import { u as requireInstanceAdmin } from './access.server-BueyYEoY.js';
-import { h as handleApiError, t as throwZodError } from './api-errors-BckwXK7Q.js';
+import { m as getPlatformProjectGrantStore, k as getOrganizationProvider, r as getUserProfileStore, f as flag, n as getProjectProvider } from './providers.server-C3fQ7ZdV.js';
+import { u as requireInstanceAdmin } from './access.server-Rd56k7vs.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
 import { S as SYSTEM_CONTEXT } from './context-BJnJL8ES.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
@@ -12,7 +12,7 @@ import 'node:fs';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
 import '@selvajs/compute/core';
-import './utils2-UQQTHTw-.js';
+import './utils2-BqfluBM6.js';
 
 const CreateGrantBody = z.object({
   granteeType: z.enum(["org", "user"]),
@@ -20,17 +20,17 @@ const CreateGrantBody = z.object({
   canSolve: z.boolean()
 });
 async function assertPlatformProject(id) {
-  if (!flag("ENABLE_PLATFORM_PROJECTS")) throw error(404, "Not found");
+  if (!flag("ENABLE_PLATFORM_PROJECTS")) apiError(404, ApiErrorCode.NOT_FOUND, "Not found");
   const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, id);
   if (!project || project.visibility !== "platform") {
-    throw error(404, "Platform project not found");
+    apiError(404, ApiErrorCode.NOT_FOUND, "Platform project not found");
   }
   return project;
 }
 const GET = async ({ params, locals }) => {
   requireInstanceAdmin(locals);
   const { id } = params;
-  if (!id) throw error(400, "Missing project ID");
+  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
   try {
     await assertPlatformProject(id);
     const grants = await getPlatformProjectGrantStore().listByProject(SYSTEM_CONTEXT, id);
@@ -42,7 +42,7 @@ const GET = async ({ params, locals }) => {
 const POST = async ({ params, request, locals }) => {
   const user = requireInstanceAdmin(locals);
   const { id } = params;
-  if (!id) throw error(400, "Missing project ID");
+  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
   const body = await request.json().catch(() => null);
   const parsed = CreateGrantBody.safeParse(body);
   if (!parsed.success) throwZodError(parsed.error);
@@ -50,10 +50,16 @@ const POST = async ({ params, request, locals }) => {
     await assertPlatformProject(id);
     if (parsed.data.granteeType === "org") {
       const org = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, parsed.data.granteeId);
-      if (!org) throw error(400, `Organization '${parsed.data.granteeId}' not found`);
+      if (!org)
+        apiError(
+          400,
+          ApiErrorCode.VALIDATION_FAILED,
+          `Organization '${parsed.data.granteeId}' not found`
+        );
     } else {
       const profile = await getUserProfileStore().getProfile(SYSTEM_CONTEXT, parsed.data.granteeId);
-      if (!profile) throw error(400, `User '${parsed.data.granteeId}' not found`);
+      if (!profile)
+        apiError(400, ApiErrorCode.VALIDATION_FAILED, `User '${parsed.data.granteeId}' not found`);
     }
     const grant = {
       id: randomUUID(),
@@ -72,4 +78,4 @@ const POST = async ({ params, request, locals }) => {
 };
 
 export { GET, POST };
-//# sourceMappingURL=_server.ts-DgbeoluB.js.map
+//# sourceMappingURL=_server.ts-DSVtVVVK.js.map