@selvajs/selva 4.5.0 → 4.5.1

package/build/server/chunks/{_server.ts-DW-Oh4l9.js → _server.ts-D-WjMJlD.js}

@@ -1,13 +1,16 @@
-import { error, redirect } from '@sveltejs/kit';
+import { redirect } from '@sveltejs/kit';
+import { a as apiError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
 import { a as getAuthProvider } from './providers.server-C3fQ7ZdV.js';
 import { b as bootstrapUserSession } from './auth-bootstrap.server-DKc9-3PR.js';
 import { h as setSessionCookie, f as setRefreshCookie, s as safeRedirectTarget } from './admin-auth.server-45kKyH82.js';
+import './context-BJnJL8ES.js';
+import 'zod';
+import '@selvajs/compute/core';
+import './utils2-BqfluBM6.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
 import 'node:path';
 import 'node:fs';
-import './context-BJnJL8ES.js';
-import 'zod';
 import 'node:crypto';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
@@ -16,10 +19,11 @@ import './slug-BGuFQjqe.js';
 const GET = async ({ url, cookies }) => {
   const emailLink = getAuthProvider().emailLink;
   if (!emailLink) {
-    throw error(501, "Email sign-in is not supported by this provider.");
+    apiError(501, ApiErrorCode.INTERNAL, "Email sign-in is not supported by this provider.");
   }
   const result = await emailLink.verifyMagicLink(url.toString());
-  if (!result) throw error(401, "This sign-in link is invalid or has expired.");
+  if (!result)
+    apiError(401, ApiErrorCode.UNAUTHORIZED, "This sign-in link is invalid or has expired.");
   await bootstrapUserSession(result.user);
   setSessionCookie(cookies, result.sessionToken);
   if (result.refreshToken) setRefreshCookie(cookies, result.refreshToken);
@@ -28,4 +32,4 @@ const GET = async ({ url, cookies }) => {
 };
 
 export { GET };
-//# sourceMappingURL=_server.ts-DW-Oh4l9.js.map
+//# sourceMappingURL=_server.ts-D-WjMJlD.js.map

package/build/server/chunks/_server.ts-D-WjMJlD.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-D-WjMJlD.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/auth/email/callback/_server.ts.js"],"sourcesContent":["import { redirect } from \"@sveltejs/kit\";\nimport { a as apiError, A as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { a as getAuthProvider } from \"../../../../../chunks/providers.server.js\";\nimport { b as bootstrapUserSession } from \"../../../../../chunks/auth-bootstrap.server.js\";\nimport { h as setSessionCookie, f as setRefreshCookie, s as safeRedirectTarget } from \"../../../../../chunks/admin-auth.server.js\";\nconst GET = async ({ url, cookies }) => {\n  const emailLink = getAuthProvider().emailLink;\n  if (!emailLink) {\n    apiError(501, ApiErrorCode.INTERNAL, \"Email sign-in is not supported by this provider.\");\n  }\n  const result = await emailLink.verifyMagicLink(url.toString());\n  if (!result)\n    apiError(401, ApiErrorCode.UNAUTHORIZED, \"This sign-in link is invalid or has expired.\");\n  await bootstrapUserSession(result.user);\n  setSessionCookie(cookies, result.sessionToken);\n  if (result.refreshToken) setRefreshCookie(cookies, result.refreshToken);\n  const dest = safeRedirectTarget(url.searchParams.get(\"redirectTo\"), \"/library\");\n  redirect(303, dest);\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAKK,MAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK;AACxC,EAAE,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC,SAAS;AAC/C,EAAE,IAAI,CAAC,SAAS,EAAE;AAClB,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,kDAAkD,CAAC;AAC5F,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;AAChE,EAAE,IAAI,CAAC,MAAM;AACb,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,8CAA8C,CAAC;AAC5F,EAAE,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;AACzC,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAChD,EAAE,IAAI,MAAM,CAAC,YAAY,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AACzE,EAAE,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;AACjF,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;AACrB;;;;"}

package/build/server/chunks/{_server.ts-Bke_K04J.js → _server.ts-D4z7bYT1.js}

@@ -1,9 +1,9 @@
-import { error, json } from '@sveltejs/kit';
+import { json } from '@sveltejs/kit';
 import { z } from 'zod';
 import { randomUUID } from 'node:crypto';
 import { f as flag, k as getOrganizationProvider, n as getProjectProvider, P as ProviderError } from './providers.server-C3fQ7ZdV.js';
-import { u as requireInstanceAdmin } from './access.server-CAPd1-c2.js';
-import { h as handleApiError, t as throwZodError } from './api-errors-BhVEeWTV.js';
+import { u as requireInstanceAdmin } from './access.server-Rd56k7vs.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
 import { s as slugify } from './slug-BGuFQjqe.js';
 import { S as SYSTEM_CONTEXT } from './context-BJnJL8ES.js';
 import './shared-server-C3WdcJCQ.js';
@@ -36,7 +36,7 @@ const CreatePlatformProjectBody = z.object({
 });
 const GET = async ({ locals }) => {
   requireInstanceAdmin(locals);
-  if (!flag("ENABLE_PLATFORM_PROJECTS")) throw error(404, "Not found");
+  if (!flag("ENABLE_PLATFORM_PROJECTS")) apiError(404, ApiErrorCode.NOT_FOUND, "Not found");
   try {
     const orgs = await getOrganizationProvider().listOrgs(SYSTEM_CONTEXT, { limit: 1e3 });
     const all = [];
@@ -55,17 +55,22 @@ const GET = async ({ locals }) => {
 };
 const POST = async ({ request, locals }) => {
   const user = requireInstanceAdmin(locals);
-  if (!flag("ENABLE_PLATFORM_PROJECTS")) throw error(404, "Not found");
+  if (!flag("ENABLE_PLATFORM_PROJECTS")) apiError(404, ApiErrorCode.NOT_FOUND, "Not found");
   const ctx = locals.ctx;
   const body = await request.json().catch(() => null);
   const parsed = CreatePlatformProjectBody.safeParse(body);
   if (!parsed.success) throwZodError(parsed.error);
   const hostOrgId = parsed.data.orgId ?? ctx.actingOrgId;
   if (!hostOrgId) {
-    throw error(400, "A host orgId is required (no active organization in context).");
+    apiError(
+      400,
+      ApiErrorCode.VALIDATION_FAILED,
+      "A host orgId is required (no active organization in context)."
+    );
   }
   const hostOrg = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, hostOrgId);
-  if (!hostOrg) throw error(400, `Host organization '${hostOrgId}' not found.`);
+  if (!hostOrg)
+    apiError(400, ApiErrorCode.VALIDATION_FAILED, `Host organization '${hostOrgId}' not found.`);
   const projectStore = getProjectProvider();
   const baseSlug = slugify(parsed.data.name) || "platform-project";
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -92,14 +97,22 @@ const POST = async ({ request, locals }) => {
       return json(project, { status: 201 });
     } catch (err) {
       if (isNameConflict(err)) {
-        throw error(409, "A project with that name already exists in the host organization.");
+        apiError(
+          409,
+          ApiErrorCode.CONFLICT,
+          "A project with that name already exists in the host organization."
+        );
       }
       if (isSlugConflict(err)) continue;
       handleApiError(err, "Failed to create platform project");
     }
   }
-  throw error(409, "Could not pick a unique project slug after several attempts.");
+  apiError(
+    409,
+    ApiErrorCode.CONFLICT,
+    "Could not pick a unique project slug after several attempts."
+  );
 };
 
 export { GET, POST };
-//# sourceMappingURL=_server.ts-Bke_K04J.js.map
+//# sourceMappingURL=_server.ts-D4z7bYT1.js.map

package/build/server/chunks/_server.ts-D4z7bYT1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-D4z7bYT1.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/projects/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\nimport { f as flag, k as getOrganizationProvider, n as getProjectProvider, P as ProviderError } from \"../../../../../chunks/providers.server.js\";\nimport { u as requireInstanceAdmin } from \"../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { s as slugify } from \"../../../../../chunks/slug.js\";\nimport { S as SYSTEM_CONTEXT } from \"../../../../../chunks/context.js\";\nconst MAX_SLUG_ATTEMPTS = 25;\nfunction isSlugConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);\n}\nfunction isNameConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);\n}\nconst CreatePlatformProjectBody = z.object({\n  name: z.string().min(1, \"Project name is required\").max(128).trim(),\n  description: z.string().max(2e3).optional(),\n  /**\n   * Org that physically hosts the project. Storage routing and compute\n   * resolution use this — but org membership in this org does NOT grant\n   * access. Visibility = 'platform' overrides those defaults.\n   *\n   * If omitted, the platform admin's first available org is used.\n   */\n  orgId: z.string().uuid().optional()\n});\nconst GET = async ({ locals }) => {\n  requireInstanceAdmin(locals);\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n  try {\n    const orgs = await getOrganizationProvider().listOrgs(SYSTEM_CONTEXT, { limit: 1e3 });\n    const all = [];\n    for (const org of orgs.items) {\n      const page = await getProjectProvider().listProjects(SYSTEM_CONTEXT, org.id, {\n        limit: 1e3\n      });\n      for (const p of page.items) {\n        if (p.visibility === \"platform\") all.push(p);\n      }\n    }\n    return json({ projects: all });\n  } catch (err) {\n    handleApiError(err, \"Failed to list platform projects\");\n  }\n};\nconst POST = async ({ request, locals }) => {\n  const user = requireInstanceAdmin(locals);\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n  const ctx = locals.ctx;\n  const body = await request.json().catch(() => null);\n  const parsed = CreatePlatformProjectBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const hostOrgId = parsed.data.orgId ?? ctx.actingOrgId;\n  if (!hostOrgId) {\n    apiError(\n      400,\n      ApiErrorCode.VALIDATION_FAILED,\n      \"A host orgId is required (no active organization in context).\"\n    );\n  }\n  const hostOrg = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, hostOrgId);\n  if (!hostOrg)\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, `Host organization '${hostOrgId}' not found.`);\n  const projectStore = getProjectProvider();\n  const baseSlug = slugify(parsed.data.name) || \"platform-project\";\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const projectId = randomUUID();\n  for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {\n    const slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;\n    const project = {\n      id: projectId,\n      orgId: hostOrgId,\n      name: parsed.data.name,\n      slug,\n      description: parsed.data.description,\n      visibility: \"platform\",\n      ownerId: user.id,\n      createdBy: user.id,\n      updatedBy: user.id,\n      autoJoinOnUpload: false,\n      createdAt: now,\n      updatedAt: now,\n      deletedAt: null\n    };\n    try {\n      await projectStore.createProject(SYSTEM_CONTEXT, project);\n      return json(project, { status: 201 });\n    } catch (err) {\n      if (isNameConflict(err)) {\n        apiError(\n          409,\n          ApiErrorCode.CONFLICT,\n          \"A project with that name already exists in the host organization.\"\n        );\n      }\n      if (isSlugConflict(err)) continue;\n      handleApiError(err, \"Failed to create platform project\");\n    }\n  }\n  apiError(\n    409,\n    ApiErrorCode.CONFLICT,\n    \"Could not pick a unique project slug after several attempts.\"\n  );\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAQA,MAAM,iBAAiB,GAAG,EAAE;AAC5B,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;AAC3C,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACrE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;AAC7C;AACA;AACA;AACA;AACA;AACA;AACA;AACA,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ;AACnC,CAAC,CAAC;AACG,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC3F,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,uBAAuB,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACzF,IAAI,MAAM,GAAG,GAAG,EAAE;AAClB,IAAI,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE;AAClC,MAAM,MAAM,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,EAAE;AACnF,QAAQ,KAAK,EAAE;AACf,OAAO,CAAC;AACR,MAAM,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE;AAClC,QAAQ,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACpD,MAAM;AACN,IAAI;AACJ,IAAI,OAAO,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,kCAAkC,CAAC;AAC3D,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC3C,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC3F,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1D,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,WAAW;AACxD,EAAE,IAAI,CAAC,SAAS,EAAE;AAClB,IAAI,QAAQ;AACZ,MAAM,GAAG;AACT,MAAM,YAAY,CAAC,iBAAiB;AACpC,MAAM;AACN,KAAK;AACL,EAAE;AACF,EAAE,MAAM,OAAO,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC;AACnF,EAAE,IAAI,CAAC,OAAO;AACd,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;AAChG,EAAE,MAAM,YAAY,GAAG,kBAAkB,EAAE;AAC3C,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,kBAAkB;AAClE,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,SAAS,GAAG,UAAU,EAAE;AAChC,EAAE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,iBAAiB,EAAE,OAAO,EAAE,EAAE;AAChE,IAAI,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;AACxE,IAAI,MAAM,OAAO,GAAG;AACpB,MAAM,EAAE,EAAE,SAAS;AACnB,MAAM,KAAK,EAAE,SAAS;AACtB,MAAM,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC5B,MAAM,IAAI;AACV,MAAM,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AAC1C,MAAM,UAAU,EAAE,UAAU;AAC5B,MAAM,OAAO,EAAE,IAAI,CAAC,EAAE;AACtB,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,gBAAgB,EAAE,KAAK;AAC7B,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE;AACjB,KAAK;AACL,IAAI,IAAI;AACR,MAAM,MAAM,YAAY,CAAC,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC;AAC/D,MAAM,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,QAAQ,QAAQ;AAChB,UAAU,GAAG;AACb,UAAU,YAAY,CAAC,QAAQ;AAC/B,UAAU;AACV,SAAS;AACT,MAAM;AACN,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,MAAM,cAAc,CAAC,GAAG,EAAE,mCAAmC,CAAC;AAC9D,IAAI;AACJ,EAAE;AACF,EAAE,QAAQ;AACV,IAAI,GAAG;AACP,IAAI,YAAY,CAAC,QAAQ;AACzB,IAAI;AACJ,GAAG;AACH;;;;"}

package/build/server/chunks/{_server.ts-L9PpKy16.js → _server.ts-D7URpGBv.js}

@@ -1,9 +1,9 @@
-import { error, json } from '@sveltejs/kit';
+import { json } from '@sveltejs/kit';
 import { i as getDefinitionService } from './providers.server-C3fQ7ZdV.js';
-import { t as requireEditableDefinition } from './access.server-CAPd1-c2.js';
-import { h as handleApiError } from './api-errors-BhVEeWTV.js';
+import { t as requireEditableDefinition } from './access.server-Rd56k7vs.js';
+import { a as apiError, h as handleApiError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
 import { G as GuidSchema } from './context-BJnJL8ES.js';
-import { b as MAX_IMAGE_FILE_SIZE } from './computeLimits-DPO6NbLd.js';
+import { b as MAX_IMAGE_FILE_SIZE } from './computeLimits-DnJ77wR9.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
 import 'node:path';
@@ -17,25 +17,29 @@ import './utils2-BqfluBM6.js';
 
 const POST = async ({ params, request, locals }) => {
   const guidParsed = GuidSchema.safeParse(params.guid);
-  if (!guidParsed.success) throw error(400, "Invalid GUID");
+  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid GUID");
   const guid = guidParsed.data;
   const { ctx } = await requireEditableDefinition(locals, guid);
   const formData = await request.formData();
   const file = formData.get("image");
   if (!(file instanceof File) || file.size === 0) {
-    throw error(400, "Image file is required");
+    apiError(400, ApiErrorCode.VALIDATION_FAILED, "Image file is required");
   }
   if (file.size > MAX_IMAGE_FILE_SIZE) {
-    throw error(400, `Image too large. Max size: ${MAX_IMAGE_FILE_SIZE / (1024 * 1024)} MB`);
+    apiError(
+      400,
+      ApiErrorCode.VALIDATION_FAILED,
+      `Image too large. Max size: ${MAX_IMAGE_FILE_SIZE / (1024 * 1024)} MB`
+    );
   }
   try {
     const imageData = new Uint8Array(await file.arrayBuffer());
     const coverImage = await getDefinitionService().saveCoverImage(ctx, guid, imageData);
-    return json({ success: true, coverImage });
+    return json({ coverImage });
   } catch (err) {
     handleApiError(err, "Failed to upload image");
   }
 };
 
 export { POST };
-//# sourceMappingURL=_server.ts-L9PpKy16.js.map
+//# sourceMappingURL=_server.ts-D7URpGBv.js.map

package/build/server/chunks/_server.ts-D7URpGBv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-D7URpGBv.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_guid_/image/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { i as getDefinitionService } from \"../../../../../../chunks/providers.server.js\";\nimport { t as requireEditableDefinition } from \"../../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, A as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { G as GuidSchema } from \"../../../../../../chunks/context.js\";\nimport { b as MAX_IMAGE_FILE_SIZE } from \"../../../../../../chunks/computeLimits.js\";\nconst POST = async ({ params, request, locals }) => {\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid GUID\");\n  const guid = guidParsed.data;\n  const { ctx } = await requireEditableDefinition(locals, guid);\n  const formData = await request.formData();\n  const file = formData.get(\"image\");\n  if (!(file instanceof File) || file.size === 0) {\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Image file is required\");\n  }\n  if (file.size > MAX_IMAGE_FILE_SIZE) {\n    apiError(\n      400,\n      ApiErrorCode.VALIDATION_FAILED,\n      `Image too large. Max size: ${MAX_IMAGE_FILE_SIZE / (1024 * 1024)} MB`\n    );\n  }\n  try {\n    const imageData = new Uint8Array(await file.arrayBuffer());\n    const coverImage = await getDefinitionService().saveCoverImage(ctx, guid, imageData);\n    return json({ coverImage });\n  } catch (err) {\n    handleApiError(err, \"Failed to upload image\");\n  }\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAMK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpD,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,cAAc,CAAC;AACxF,EAAE,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI;AAC9B,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC;AAC/D,EAAE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;AAC3C,EAAE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;AACpC,EAAE,IAAI,EAAE,IAAI,YAAY,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE;AAClD,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC3E,EAAE;AACF,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,mBAAmB,EAAE;AACvC,IAAI,QAAQ;AACZ,MAAM,GAAG;AACT,MAAM,YAAY,CAAC,iBAAiB;AACpC,MAAM,CAAC,2BAA2B,EAAE,mBAAmB,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG;AAC3E,KAAK;AACL,EAAE;AACF,EAAE,IAAI;AACN,IAAI,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AAC9D,IAAI,MAAM,UAAU,GAAG,MAAM,oBAAoB,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC;AACxF,IAAI,OAAO,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC;AAC/B,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AACjD,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-D2Qb9pui.js → _server.ts-DMwrtYEK.js}

@@ -1,7 +1,10 @@
-import { error } from '@sveltejs/kit';
+import { a as apiError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
 import { h as getDefinitionMeta, d as definitionPaths, p as getStorageProvider } from './providers.server-C3fQ7ZdV.js';
 import { G as GuidSchema } from './context-BJnJL8ES.js';
-import { s as requireCanViewProject } from './access.server-CAPd1-c2.js';
+import { s as requireCanViewProject } from './access.server-Rd56k7vs.js';
+import '@sveltejs/kit';
+import '@selvajs/compute/core';
+import './utils2-BqfluBM6.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
 import 'node:path';
@@ -10,9 +13,6 @@ import 'node:crypto';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
 import 'zod';
-import './api-errors-BhVEeWTV.js';
-import '@selvajs/compute/core';
-import './utils2-BqfluBM6.js';
 
 const ALLOWED_EXTENSIONS = {
   ".webp": "image/webp",
@@ -24,21 +24,21 @@ const ALLOWED_EXTENSIONS = {
 const COVER_PATH_PATTERN = /^definitions\/([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\/cover\.([a-z]+)$/i;
 const GET = async ({ params, locals }) => {
   const storagePath = params.path;
-  if (!storagePath) throw error(400, "Missing path");
+  if (!storagePath) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing path");
   const match = COVER_PATH_PATTERN.exec(storagePath);
-  if (!match) throw error(404, "File not found");
+  if (!match) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
   const [, guid, rawExt] = match;
   const ext = `.${rawExt.toLowerCase()}`;
-  if (!ALLOWED_EXTENSIONS[ext]) throw error(404, "File not found");
+  if (!ALLOWED_EXTENSIONS[ext]) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
   const guidParsed = GuidSchema.safeParse(guid);
-  if (!guidParsed.success) throw error(404, "File not found");
-  if (!locals.ctx) throw error(401, "Unauthorized");
+  if (!guidParsed.success) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
+  if (!locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, "Unauthorized");
   const record = await getDefinitionMeta().get(locals.ctx, guidParsed.data);
-  if (!record) throw error(404, "File not found");
+  if (!record) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
   await requireCanViewProject(locals, record.projectId);
   const canonicalPath = definitionPaths.image(guidParsed.data);
   const bytes = await getStorageProvider().get(canonicalPath);
-  if (!bytes) throw error(404, "File not found");
+  if (!bytes) apiError(404, ApiErrorCode.NOT_FOUND, "File not found");
   return new Response(Buffer.from(bytes), {
     headers: {
       "Content-Type": ALLOWED_EXTENSIONS[ext],
@@ -48,4 +48,4 @@ const GET = async ({ params, locals }) => {
 };
 
 export { GET };
-//# sourceMappingURL=_server.ts-D2Qb9pui.js.map
+//# sourceMappingURL=_server.ts-DMwrtYEK.js.map

package/build/server/chunks/_server.ts-DMwrtYEK.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-DMwrtYEK.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/files/_...path_/_server.ts.js"],"sourcesContent":["import { a as apiError, A as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { h as getDefinitionMeta, d as definitionPaths, p as getStorageProvider } from \"../../../../../chunks/providers.server.js\";\nimport { G as GuidSchema } from \"../../../../../chunks/context.js\";\nimport { s as requireCanViewProject } from \"../../../../../chunks/access.server.js\";\nconst ALLOWED_EXTENSIONS = {\n  \".webp\": \"image/webp\",\n  \".jpg\": \"image/jpeg\",\n  \".jpeg\": \"image/jpeg\",\n  \".png\": \"image/png\",\n  \".gif\": \"image/gif\"\n};\nconst COVER_PATH_PATTERN = /^definitions\\/([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\\/cover\\.([a-z]+)$/i;\nconst GET = async ({ params, locals }) => {\n  const storagePath = params.path;\n  if (!storagePath) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing path\");\n  const match = COVER_PATH_PATTERN.exec(storagePath);\n  if (!match) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n  const [, guid, rawExt] = match;\n  const ext = `.${rawExt.toLowerCase()}`;\n  if (!ALLOWED_EXTENSIONS[ext]) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n  const guidParsed = GuidSchema.safeParse(guid);\n  if (!guidParsed.success) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n  if (!locals.ctx) apiError(401, ApiErrorCode.UNAUTHORIZED, \"Unauthorized\");\n  const record = await getDefinitionMeta().get(locals.ctx, guidParsed.data);\n  if (!record) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n  await requireCanViewProject(locals, record.projectId);\n  const canonicalPath = definitionPaths.image(guidParsed.data);\n  const bytes = await getStorageProvider().get(canonicalPath);\n  if (!bytes) apiError(404, ApiErrorCode.NOT_FOUND, \"File not found\");\n  return new Response(Buffer.from(bytes), {\n    headers: {\n      \"Content-Type\": ALLOWED_EXTENSIONS[ext],\n      \"Cache-Control\": \"private, max-age=3600\"\n    }\n  });\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIA,MAAM,kBAAkB,GAAG;AAC3B,EAAE,OAAO,EAAE,YAAY;AACvB,EAAE,MAAM,EAAE,YAAY;AACtB,EAAE,OAAO,EAAE,YAAY;AACvB,EAAE,MAAM,EAAE,WAAW;AACrB,EAAE,MAAM,EAAE;AACV,CAAC;AACD,MAAM,kBAAkB,GAAG,iGAAiG;AACvH,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC1C,EAAE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI;AACjC,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,cAAc,CAAC;AACjF,EAAE,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC;AACpD,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACrE,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC,GAAG,KAAK;AAChC,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AACxC,EAAE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACvF,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;AAC/C,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AAClF,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,cAAc,CAAC;AAC3E,EAAE,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AAC3E,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACtE,EAAE,MAAM,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC;AACvD,EAAE,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;AAC9D,EAAE,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC;AAC7D,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC;AACrE,EAAE,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;AAC1C,IAAI,OAAO,EAAE;AACb,MAAM,cAAc,EAAE,kBAAkB,CAAC,GAAG,CAAC;AAC7C,MAAM,eAAe,EAAE;AACvB;AACA,GAAG,CAAC;AACJ;;;;"}

package/build/server/chunks/{_server.ts-B9uegfmw.js → _server.ts-DSVtVVVK.js}

@@ -1,9 +1,9 @@
-import { error, json } from '@sveltejs/kit';
+import { json } from '@sveltejs/kit';
 import { z } from 'zod';
 import { randomUUID } from 'node:crypto';
 import { m as getPlatformProjectGrantStore, k as getOrganizationProvider, r as getUserProfileStore, f as flag, n as getProjectProvider } from './providers.server-C3fQ7ZdV.js';
-import { u as requireInstanceAdmin } from './access.server-CAPd1-c2.js';
-import { h as handleApiError, t as throwZodError } from './api-errors-BhVEeWTV.js';
+import { u as requireInstanceAdmin } from './access.server-Rd56k7vs.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
 import { S as SYSTEM_CONTEXT } from './context-BJnJL8ES.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
@@ -20,17 +20,17 @@ const CreateGrantBody = z.object({
   canSolve: z.boolean()
 });
 async function assertPlatformProject(id) {
-  if (!flag("ENABLE_PLATFORM_PROJECTS")) throw error(404, "Not found");
+  if (!flag("ENABLE_PLATFORM_PROJECTS")) apiError(404, ApiErrorCode.NOT_FOUND, "Not found");
   const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, id);
   if (!project || project.visibility !== "platform") {
-    throw error(404, "Platform project not found");
+    apiError(404, ApiErrorCode.NOT_FOUND, "Platform project not found");
   }
   return project;
 }
 const GET = async ({ params, locals }) => {
   requireInstanceAdmin(locals);
   const { id } = params;
-  if (!id) throw error(400, "Missing project ID");
+  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
   try {
     await assertPlatformProject(id);
     const grants = await getPlatformProjectGrantStore().listByProject(SYSTEM_CONTEXT, id);
@@ -42,7 +42,7 @@ const GET = async ({ params, locals }) => {
 const POST = async ({ params, request, locals }) => {
   const user = requireInstanceAdmin(locals);
   const { id } = params;
-  if (!id) throw error(400, "Missing project ID");
+  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
   const body = await request.json().catch(() => null);
   const parsed = CreateGrantBody.safeParse(body);
   if (!parsed.success) throwZodError(parsed.error);
@@ -50,10 +50,16 @@ const POST = async ({ params, request, locals }) => {
     await assertPlatformProject(id);
     if (parsed.data.granteeType === "org") {
       const org = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, parsed.data.granteeId);
-      if (!org) throw error(400, `Organization '${parsed.data.granteeId}' not found`);
+      if (!org)
+        apiError(
+          400,
+          ApiErrorCode.VALIDATION_FAILED,
+          `Organization '${parsed.data.granteeId}' not found`
+        );
     } else {
       const profile = await getUserProfileStore().getProfile(SYSTEM_CONTEXT, parsed.data.granteeId);
-      if (!profile) throw error(400, `User '${parsed.data.granteeId}' not found`);
+      if (!profile)
+        apiError(400, ApiErrorCode.VALIDATION_FAILED, `User '${parsed.data.granteeId}' not found`);
     }
     const grant = {
       id: randomUUID(),
@@ -72,4 +78,4 @@ const POST = async ({ params, request, locals }) => {
 };
 
 export { GET, POST };
-//# sourceMappingURL=_server.ts-B9uegfmw.js.map
+//# sourceMappingURL=_server.ts-DSVtVVVK.js.map

package/build/server/chunks/_server.ts-DSVtVVVK.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-DSVtVVVK.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/projects/_id_/grants/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\nimport { m as getPlatformProjectGrantStore, k as getOrganizationProvider, r as getUserProfileStore, f as flag, n as getProjectProvider } from \"../../../../../../../chunks/providers.server.js\";\nimport { u as requireInstanceAdmin } from \"../../../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from \"../../../../../../../chunks/api-errors.js\";\nimport { S as SYSTEM_CONTEXT } from \"../../../../../../../chunks/context.js\";\nconst CreateGrantBody = z.object({\n  granteeType: z.enum([\"org\", \"user\"]),\n  granteeId: z.string().min(1),\n  canSolve: z.boolean()\n});\nasync function assertPlatformProject(id) {\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n  const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, id);\n  if (!project || project.visibility !== \"platform\") {\n    apiError(404, ApiErrorCode.NOT_FOUND, \"Platform project not found\");\n  }\n  return project;\n}\nconst GET = async ({ params, locals }) => {\n  requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID\");\n  try {\n    await assertPlatformProject(id);\n    const grants = await getPlatformProjectGrantStore().listByProject(SYSTEM_CONTEXT, id);\n    return json({ grants });\n  } catch (err) {\n    handleApiError(err, \"Failed to list grants\");\n  }\n};\nconst POST = async ({ params, request, locals }) => {\n  const user = requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID\");\n  const body = await request.json().catch(() => null);\n  const parsed = CreateGrantBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  try {\n    await assertPlatformProject(id);\n    if (parsed.data.granteeType === \"org\") {\n      const org = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, parsed.data.granteeId);\n      if (!org)\n        apiError(\n          400,\n          ApiErrorCode.VALIDATION_FAILED,\n          `Organization '${parsed.data.granteeId}' not found`\n        );\n    } else {\n      const profile = await getUserProfileStore().getProfile(SYSTEM_CONTEXT, parsed.data.granteeId);\n      if (!profile)\n        apiError(400, ApiErrorCode.VALIDATION_FAILED, `User '${parsed.data.granteeId}' not found`);\n    }\n    const grant = {\n      id: randomUUID(),\n      projectId: id,\n      granteeType: parsed.data.granteeType,\n      granteeId: parsed.data.granteeId,\n      canSolve: parsed.data.canSolve,\n      createdBy: user.id,\n      createdAt: (/* @__PURE__ */ new Date()).toISOString()\n    };\n    await getPlatformProjectGrantStore().create(SYSTEM_CONTEXT, grant);\n    return json(grant, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to create grant\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAOA,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;AACjC,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AACtC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9B,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO;AACrB,CAAC,CAAC;AACF,eAAe,qBAAqB,CAAC,EAAE,EAAE;AACzC,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC3F,EAAE,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC;AAC3E,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE;AACrD,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,4BAA4B,CAAC;AACvE,EAAE;AACF,EAAE,OAAO,OAAO;AAChB;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC1C,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;AAC9E,EAAE,IAAI;AACN,IAAI,MAAM,qBAAqB,CAAC,EAAE,CAAC;AACnC,IAAI,MAAM,MAAM,GAAG,MAAM,4BAA4B,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC;AACzF,IAAI,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;AAC3B,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,uBAAuB,CAAC;AAChD,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpD,EAAE,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC3C,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;AAC9E,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAChD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI;AACN,IAAI,MAAM,qBAAqB,CAAC,EAAE,CAAC;AACnC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,KAAK,EAAE;AAC3C,MAAM,MAAM,GAAG,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;AAC/F,MAAM,IAAI,CAAC,GAAG;AACd,QAAQ,QAAQ;AAChB,UAAU,GAAG;AACb,UAAU,YAAY,CAAC,iBAAiB;AACxC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW;AAC5D,SAAS;AACT,IAAI,CAAC,MAAM;AACX,MAAM,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;AACnG,MAAM,IAAI,CAAC,OAAO;AAClB,QAAQ,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AAClG,IAAI;AACJ,IAAI,MAAM,KAAK,GAAG;AAClB,MAAM,EAAE,EAAE,UAAU,EAAE;AACtB,MAAM,SAAS,EAAE,EAAE;AACnB,MAAM,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AAC1C,MAAM,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;AACtC,MAAM,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;AACpC,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW;AACzD,KAAK;AACL,IAAI,MAAM,4BAA4B,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC;AACtE,IAAI,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACvC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AACjD,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-Be15h83H.js → _server.ts-Df72lBuz.js}

@@ -1,10 +1,10 @@
-import { error, json } from '@sveltejs/kit';
+import { json } from '@sveltejs/kit';
 import { i as getDefinitionService, n as getProjectProvider } from './providers.server-C3fQ7ZdV.js';
-import { t as requireEditableDefinition } from './access.server-CAPd1-c2.js';
-import { h as handleApiError, r as resolveServerForOrg, f as fetchSchemaFromCompute, t as throwZodError } from './api-errors-BhVEeWTV.js';
+import { t as requireEditableDefinition } from './access.server-Rd56k7vs.js';
+import { a as apiError, h as handleApiError, r as resolveServerForOrg, f as fetchSchemaFromCompute, t as throwZodError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
 import { G as GH_EXTENSIONS } from './types-DxzJoaA4.js';
 import { G as GuidSchema, U as UpdateMetadataInputSchema } from './context-BJnJL8ES.js';
-import { M as MAX_GH_FILE_SIZE } from './computeLimits-DPO6NbLd.js';
+import { M as MAX_GH_FILE_SIZE } from './computeLimits-DnJ77wR9.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
 import 'node:path';
@@ -18,18 +18,27 @@ import './utils2-BqfluBM6.js';
 
 const POST = async ({ params, request, locals }) => {
   const guidParsed = GuidSchema.safeParse(params.guid);
-  if (!guidParsed.success) throw error(400, "Invalid or missing GUID");
+  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing GUID");
   const formData = await request.formData();
   const file = formData.get("file");
-  if (!(file instanceof File)) throw error(400, "A Grasshopper (.gh or .ghx) file is required");
+  if (!(file instanceof File))
+    apiError(400, ApiErrorCode.VALIDATION_FAILED, "A Grasshopper (.gh or .ghx) file is required");
   const changeNoteRaw = formData.get("changeNote");
   const changeNote = typeof changeNoteRaw === "string" ? changeNoteRaw.slice(0, 1e3) : void 0;
   const ext = file.name.slice(file.name.lastIndexOf(".")).toLowerCase();
   if (!GH_EXTENSIONS.includes(ext)) {
-    throw error(400, `File type not allowed. Allowed: ${GH_EXTENSIONS.join(", ")}`);
+    apiError(
+      400,
+      ApiErrorCode.VALIDATION_FAILED,
+      `File type not allowed. Allowed: ${GH_EXTENSIONS.join(", ")}`
+    );
   }
   if (file.size > MAX_GH_FILE_SIZE) {
-    throw error(400, `File too large. Max size: ${MAX_GH_FILE_SIZE / (1024 * 1024)} MB`);
+    apiError(
+      400,
+      ApiErrorCode.VALIDATION_FAILED,
+      `File too large. Max size: ${MAX_GH_FILE_SIZE / (1024 * 1024)} MB`
+    );
   }
   const { ctx, record } = await requireEditableDefinition(locals, guidParsed.data);
   const fileExt = ext.slice(1);
@@ -49,36 +58,36 @@ const POST = async ({ params, request, locals }) => {
       schema,
       changeNote
     );
-    return json({ success: true, version });
+    return json({ version }, { status: 201 });
   } catch (err) {
     handleApiError(err, "Failed to upload definition version");
   }
 };
 const DELETE = async ({ params, locals }) => {
   const guidParsed = GuidSchema.safeParse(params.guid);
-  if (!guidParsed.success) throw error(400, "Invalid or missing GUID");
+  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing GUID");
   const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
   try {
     await getDefinitionService().delete(ctx, guidParsed.data);
-    return json({ success: true });
+    return new Response(null, { status: 204 });
   } catch (err) {
     handleApiError(err, "Failed to delete definition");
   }
 };
 const PUT = async ({ params, request, locals }) => {
   const guidParsed = GuidSchema.safeParse(params.guid);
-  if (!guidParsed.success) throw error(400, "Invalid or missing GUID");
+  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing GUID");
   const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
   const body = await request.json().catch(() => null);
   const parsed = UpdateMetadataInputSchema.safeParse(body);
   if (!parsed.success) throwZodError(parsed.error);
   try {
     await getDefinitionService().updateMeta(ctx, guidParsed.data, parsed.data);
-    return json({ success: true });
+    return new Response(null, { status: 204 });
   } catch (err) {
     handleApiError(err, "Failed to update definition");
   }
 };
 
 export { DELETE, POST, PUT };
-//# sourceMappingURL=_server.ts-Be15h83H.js.map
+//# sourceMappingURL=_server.ts-Df72lBuz.js.map

package/build/server/chunks/_server.ts-Df72lBuz.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-Df72lBuz.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_guid_/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { i as getDefinitionService, n as getProjectProvider } from \"../../../../../chunks/providers.server.js\";\nimport { t as requireEditableDefinition } from \"../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, r as resolveServerForOrg, f as fetchSchemaFromCompute, t as throwZodError, A as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { G as GH_EXTENSIONS } from \"../../../../../chunks/types.js\";\nimport { G as GuidSchema, U as UpdateMetadataInputSchema } from \"../../../../../chunks/context.js\";\nimport { M as MAX_GH_FILE_SIZE } from \"../../../../../chunks/computeLimits.js\";\nconst POST = async ({ params, request, locals }) => {\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing GUID\");\n  const formData = await request.formData();\n  const file = formData.get(\"file\");\n  if (!(file instanceof File))\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, \"A Grasshopper (.gh or .ghx) file is required\");\n  const changeNoteRaw = formData.get(\"changeNote\");\n  const changeNote = typeof changeNoteRaw === \"string\" ? changeNoteRaw.slice(0, 1e3) : void 0;\n  const ext = file.name.slice(file.name.lastIndexOf(\".\")).toLowerCase();\n  if (!GH_EXTENSIONS.includes(ext)) {\n    apiError(\n      400,\n      ApiErrorCode.VALIDATION_FAILED,\n      `File type not allowed. Allowed: ${GH_EXTENSIONS.join(\", \")}`\n    );\n  }\n  if (file.size > MAX_GH_FILE_SIZE) {\n    apiError(\n      400,\n      ApiErrorCode.VALIDATION_FAILED,\n      `File too large. Max size: ${MAX_GH_FILE_SIZE / (1024 * 1024)} MB`\n    );\n  }\n  const { ctx, record } = await requireEditableDefinition(locals, guidParsed.data);\n  const fileExt = ext.slice(1);\n  try {\n    const data = new Uint8Array(await file.arrayBuffer());\n    const project = await getProjectProvider().getProject(ctx, record.projectId);\n    const server = await resolveServerForOrg(ctx, project?.orgId ?? null, {\n      definitionPin: record.computeServerId ?? null\n    });\n    const schema = await fetchSchemaFromCompute(data, server);\n    const version = await getDefinitionService().uploadVersion(\n      ctx,\n      guidParsed.data,\n      data,\n      fileExt,\n      file.name,\n      schema,\n      changeNote\n    );\n    return json({ version }, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to upload definition version\");\n  }\n};\nconst DELETE = async ({ params, locals }) => {\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing GUID\");\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  try {\n    await getDefinitionService().delete(ctx, guidParsed.data);\n    return new Response(null, { status: 204 });\n  } catch (err) {\n    handleApiError(err, \"Failed to delete definition\");\n  }\n};\nconst PUT = async ({ params, request, locals }) => {\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing GUID\");\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  const body = await request.json().catch(() => null);\n  const parsed = UpdateMetadataInputSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  try {\n    await getDefinitionService().updateMeta(ctx, guidParsed.data, parsed.data);\n    return new Response(null, { status: 204 });\n  } catch (err) {\n    handleApiError(err, \"Failed to update definition\");\n  }\n};\nexport {\n  DELETE,\n  POST,\n  PUT\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAOK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpD,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACnG,EAAE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;AAC3C,EAAE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;AACnC,EAAE,IAAI,EAAE,IAAI,YAAY,IAAI,CAAC;AAC7B,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,8CAA8C,CAAC;AACjG,EAAE,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;AAClD,EAAE,MAAM,UAAU,GAAG,OAAO,aAAa,KAAK,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,MAAM;AAC7F,EAAE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE;AACvE,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;AACpC,IAAI,QAAQ;AACZ,MAAM,GAAG;AACT,MAAM,YAAY,CAAC,iBAAiB;AACpC,MAAM,CAAC,gCAAgC,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClE,KAAK;AACL,EAAE;AACF,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,gBAAgB,EAAE;AACpC,IAAI,QAAQ;AACZ,MAAM,GAAG;AACT,MAAM,YAAY,CAAC,iBAAiB;AACpC,MAAM,CAAC,0BAA0B,EAAE,gBAAgB,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG;AACvE,KAAK;AACL,EAAE;AACF,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAClF,EAAE,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9B,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;AACzD,IAAI,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC;AAChF,IAAI,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE;AAC1E,MAAM,aAAa,EAAE,MAAM,CAAC,eAAe,IAAI;AAC/C,KAAK,CAAC;AACN,IAAI,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC;AAC7D,IAAI,MAAM,OAAO,GAAG,MAAM,oBAAoB,EAAE,CAAC,aAAa;AAC9D,MAAM,GAAG;AACT,MAAM,UAAU,CAAC,IAAI;AACrB,MAAM,IAAI;AACV,MAAM,OAAO;AACb,MAAM,IAAI,CAAC,IAAI;AACf,MAAM,MAAM;AACZ,MAAM;AACN,KAAK;AACL,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC7C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,qCAAqC,CAAC;AAC9D,EAAE;AACF;AACK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACnG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,IAAI;AACN,IAAI,MAAM,oBAAoB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;AAC7D,IAAI,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC9C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACtD,EAAE;AACF;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACnD,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACnG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1D,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI;AACN,IAAI,MAAM,oBAAoB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;AAC9E,IAAI,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC9C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACtD,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-BlVwuKrl.js → _server.ts-DsXq-KLm.js}

@@ -1,8 +1,10 @@
-import { error, json } from '@sveltejs/kit';
+import { json } from '@sveltejs/kit';
+import { a as apiError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
 import { c as getComputeServerConfigStore, s as isOrgServer, t as isPlatformServer, f as flag } from './providers.server-C3fQ7ZdV.js';
-import { x as requireManageOrgCompute } from './access.server-CAPd1-c2.js';
+import { x as requireManageOrgCompute } from './access.server-Rd56k7vs.js';
 import './context-BJnJL8ES.js';
 import { s as serversVisibleTo } from './utils2-BqfluBM6.js';
+import '@selvajs/compute/core';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
 import 'node:path';
@@ -10,14 +12,13 @@ import 'node:fs';
 import 'node:crypto';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
-import './api-errors-BhVEeWTV.js';
-import '@selvajs/compute/core';
 import 'zod';
 
 function requireFlag() {
   if (!flag("ALLOW_ORG_COMPUTE_OVERRIDE")) {
-    throw error(
+    apiError(
       403,
+      ApiErrorCode.FORBIDDEN,
       "Per-org compute override is disabled on this instance (ALLOW_ORG_COMPUTE_OVERRIDE)."
     );
   }
@@ -26,7 +27,7 @@ const GET = async ({ locals }) => {
   requireFlag();
   requireManageOrgCompute(locals);
   const ctx = locals.ctx;
-  if (!ctx.actingOrgId) throw error(400, "No active organization");
+  if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
   const config = await getComputeServerConfigStore().getConfig(ctx);
   const orgId = ctx.actingOrgId;
   const owned = config.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => {
@@ -55,24 +56,28 @@ const PUT = async ({ request, locals }) => {
   requireFlag();
   requireManageOrgCompute(locals);
   const ctx = locals.ctx;
-  if (!ctx.actingOrgId) throw error(400, "No active organization");
+  if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "No active organization");
   const orgId = ctx.actingOrgId;
   const body = await request.json().catch(() => null);
-  if (!body || typeof body !== "object") throw error(400, "Invalid request body");
+  if (!body || typeof body !== "object")
+    apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid request body");
   const incoming = body;
-  if (!Array.isArray(incoming.servers)) throw error(400, "servers must be an array");
+  if (!Array.isArray(incoming.servers))
+    apiError(400, ApiErrorCode.VALIDATION_FAILED, "servers must be an array");
   for (const s of incoming.servers) {
-    if (!s.id || typeof s.id !== "string") throw error(400, "Each server needs an id");
-    if (!s.label || typeof s.label !== "string") throw error(400, "Each server needs a label");
+    if (!s.id || typeof s.id !== "string")
+      apiError(400, ApiErrorCode.VALIDATION_FAILED, "Each server needs an id");
+    if (!s.label || typeof s.label !== "string")
+      apiError(400, ApiErrorCode.VALIDATION_FAILED, "Each server needs a label");
     if (!s.serverUrl || typeof s.serverUrl !== "string")
-      throw error(400, "Each server needs a serverUrl");
+      apiError(400, ApiErrorCode.VALIDATION_FAILED, "Each server needs a serverUrl");
     try {
       new URL(s.serverUrl);
     } catch {
-      throw error(400, `Invalid serverUrl: ${s.serverUrl}`);
+      apiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid serverUrl: ${s.serverUrl}`);
     }
     if (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== "string")
-      throw error(400, "apiKey must be a string, null, or omitted");
+      apiError(400, ApiErrorCode.VALIDATION_FAILED, "apiKey must be a string, null, or omitted");
   }
   const provider = getComputeServerConfigStore();
   const existing = await provider.getConfig(ctx);
@@ -100,7 +105,11 @@ const PUT = async ({ request, locals }) => {
     };
     const visibleIds = new Set(serversVisibleTo(projected, orgId).map((s) => s.id));
     if (!visibleIds.has(incoming.defaultServerId)) {
-      throw error(400, "defaultServerId must reference a server visible to this organization");
+      apiError(
+        400,
+        ApiErrorCode.VALIDATION_FAILED,
+        "defaultServerId must reference a server visible to this organization"
+      );
     }
   }
   await provider.saveOrgServers(ctx, orgId, next, incoming.defaultServerId);
@@ -108,4 +117,4 @@ const PUT = async ({ request, locals }) => {
 };
 
 export { GET, PUT };
-//# sourceMappingURL=_server.ts-BlVwuKrl.js.map
+//# sourceMappingURL=_server.ts-DsXq-KLm.js.map

package/build/server/chunks/_server.ts-DsXq-KLm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-DsXq-KLm.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/org/compute/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { a as apiError, A as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { c as getComputeServerConfigStore, s as isOrgServer, t as isPlatformServer, f as flag } from \"../../../../../chunks/providers.server.js\";\nimport { x as requireManageOrgCompute } from \"../../../../../chunks/access.server.js\";\nimport \"../../../../../chunks/context.js\";\nimport { s as serversVisibleTo } from \"../../../../../chunks/utils2.js\";\nfunction requireFlag() {\n  if (!flag(\"ALLOW_ORG_COMPUTE_OVERRIDE\")) {\n    apiError(\n      403,\n      ApiErrorCode.FORBIDDEN,\n      \"Per-org compute override is disabled on this instance (ALLOW_ORG_COMPUTE_OVERRIDE).\"\n    );\n  }\n}\nconst GET = async ({ locals }) => {\n  requireFlag();\n  requireManageOrgCompute(locals);\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n  const config = await getComputeServerConfigStore().getConfig(ctx);\n  const orgId = ctx.actingOrgId;\n  const owned = config.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => {\n    const orgServer = s;\n    const { apiKey, ...rest } = orgServer;\n    return { ...rest, hasApiKey: !!apiKey };\n  });\n  const visible = serversVisibleTo(config, orgId);\n  const catalog = visible.map((s) => ({\n    id: s.id,\n    label: s.label,\n    serverUrl: s.serverUrl,\n    scope: s.scope,\n    source: isPlatformServer(s) ? \"platform\" : \"org\",\n    timeoutMs: s.timeoutMs,\n    retryCount: s.retryCount\n  }));\n  return json({\n    servers: owned,\n    defaultServerId: config.orgDefaults?.[orgId] ?? null,\n    globalDefaultServerId: config.defaultServerId ?? null,\n    catalog\n  });\n};\nconst PUT = async ({ request, locals }) => {\n  requireFlag();\n  requireManageOrgCompute(locals);\n  const ctx = locals.ctx;\n  if (!ctx.actingOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"No active organization\");\n  const orgId = ctx.actingOrgId;\n  const body = await request.json().catch(() => null);\n  if (!body || typeof body !== \"object\")\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid request body\");\n  const incoming = body;\n  if (!Array.isArray(incoming.servers))\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, \"servers must be an array\");\n  for (const s of incoming.servers) {\n    if (!s.id || typeof s.id !== \"string\")\n      apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs an id\");\n    if (!s.label || typeof s.label !== \"string\")\n      apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs a label\");\n    if (!s.serverUrl || typeof s.serverUrl !== \"string\")\n      apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs a serverUrl\");\n    try {\n      new URL(s.serverUrl);\n    } catch {\n      apiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid serverUrl: ${s.serverUrl}`);\n    }\n    if (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== \"string\")\n      apiError(400, ApiErrorCode.VALIDATION_FAILED, \"apiKey must be a string, null, or omitted\");\n  }\n  const provider = getComputeServerConfigStore();\n  const existing = await provider.getConfig(ctx);\n  const storedKeyById = new Map(\n    existing.servers.filter((s) => isOrgServer(s) && s.ownerOrgId === orgId).map((s) => [s.id, s.apiKey])\n  );\n  const next = incoming.servers.map((s) => ({\n    id: s.id,\n    scope: \"org\",\n    ownerOrgId: orgId,\n    label: s.label,\n    serverUrl: s.serverUrl,\n    timeoutMs: s.timeoutMs,\n    retryCount: s.retryCount,\n    apiKey: s.apiKey === null ? void 0 : s.apiKey ? s.apiKey : storedKeyById.get(s.id)\n  }));\n  if (typeof incoming.defaultServerId === \"string\") {\n    const projected = {\n      servers: [\n        ...existing.servers.filter((s) => !(isOrgServer(s) && s.ownerOrgId === orgId)),\n        ...next\n      ],\n      defaultServerId: existing.defaultServerId,\n      orgDefaults: existing.orgDefaults\n    };\n    const visibleIds = new Set(serversVisibleTo(projected, orgId).map((s) => s.id));\n    if (!visibleIds.has(incoming.defaultServerId)) {\n      apiError(\n        400,\n        ApiErrorCode.VALIDATION_FAILED,\n        \"defaultServerId must reference a server visible to this organization\"\n      );\n    }\n  }\n  await provider.saveOrgServers(ctx, orgId, next, incoming.defaultServerId);\n  return new Response(null, { status: 204 });\n};\nexport {\n  GET,\n  PUT\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAMA,SAAS,WAAW,GAAG;AACvB,EAAE,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE;AAC3C,IAAI,QAAQ;AACZ,MAAM,GAAG;AACT,MAAM,YAAY,CAAC,SAAS;AAC5B,MAAM;AACN,KAAK;AACL,EAAE;AACF;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,WAAW,EAAE;AACf,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC/F,EAAE,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC;AACnE,EAAE,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC/B,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK;AAClG,IAAI,MAAM,SAAS,GAAG,CAAC;AACvB,IAAI,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS;AACzC,IAAI,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;AAC3C,EAAE,CAAC,CAAC;AACJ,EAAE,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC;AACjD,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AACtC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE;AACZ,IAAI,KAAK,EAAE,CAAC,CAAC,KAAK;AAClB,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS;AAC1B,IAAI,KAAK,EAAE,CAAC,CAAC,KAAK;AAClB,IAAI,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,KAAK;AACpD,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS;AAC1B,IAAI,UAAU,EAAE,CAAC,CAAC;AAClB,GAAG,CAAC,CAAC;AACL,EAAE,OAAO,IAAI,CAAC;AACd,IAAI,OAAO,EAAE,KAAK;AAClB,IAAI,eAAe,EAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,IAAI,IAAI;AACxD,IAAI,qBAAqB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;AACzD,IAAI;AACJ,GAAG,CAAC;AACJ;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC3C,EAAE,WAAW,EAAE;AACf,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;AAC/F,EAAE,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC/B,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;AACvC,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AACzE,EAAE,MAAM,QAAQ,GAAG,IAAI;AACvB,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;AACtC,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;AAC7E,EAAE,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE;AACpC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;AACzC,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AAC9E,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;AAC/C,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;AAChF,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;AACvD,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,+BAA+B,CAAC;AACpF,IAAI,IAAI;AACR,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1B,IAAI,CAAC,CAAC,MAAM;AACZ,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACxF,IAAI;AACJ,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;AAChF,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2CAA2C,CAAC;AAChG,EAAE;AACF,EAAE,MAAM,QAAQ,GAAG,2BAA2B,EAAE;AAChD,EAAE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC;AAChD,EAAE,MAAM,aAAa,GAAG,IAAI,GAAG;AAC/B,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;AACxG,GAAG;AACH,EAAE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC5C,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE;AACZ,IAAI,KAAK,EAAE,KAAK;AAChB,IAAI,UAAU,EAAE,KAAK;AACrB,IAAI,KAAK,EAAE,CAAC,CAAC,KAAK;AAClB,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS;AAC1B,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS;AAC1B,IAAI,UAAU,EAAE,CAAC,CAAC,UAAU;AAC5B,IAAI,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;AACrF,GAAG,CAAC,CAAC;AACL,EAAE,IAAI,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ,EAAE;AACpD,IAAI,MAAM,SAAS,GAAG;AACtB,MAAM,OAAO,EAAE;AACf,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC;AACtF,QAAQ,GAAG;AACX,OAAO;AACP,MAAM,eAAe,EAAE,QAAQ,CAAC,eAAe;AAC/C,MAAM,WAAW,EAAE,QAAQ,CAAC;AAC5B,KAAK;AACL,IAAI,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;AACnF,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE;AACnD,MAAM,QAAQ;AACd,QAAQ,GAAG;AACX,QAAQ,YAAY,CAAC,iBAAiB;AACtC,QAAQ;AACR,OAAO;AACP,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC;AAC3E,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C;;;;"}