@selvajs/selva 4.5.0 → 4.5.1

package/build/server/chunks/{_server.ts-DEBzt_W2.js → _server.ts-OQ5_sYi3.js}

@@ -1,8 +1,10 @@
-import { json, error } from '@sveltejs/kit';
+import { json } from '@sveltejs/kit';
+import { a as apiError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
 import { c as getComputeServerConfigStore } from './providers.server-C3fQ7ZdV.js';
-import { v as requireManageCompute } from './access.server-CAPd1-c2.js';
+import { v as requireManageCompute } from './access.server-Rd56k7vs.js';
 import './context-BJnJL8ES.js';
 import { p as platformServers } from './utils2-BqfluBM6.js';
+import '@selvajs/compute/core';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
 import 'node:path';
@@ -10,8 +12,6 @@ import 'node:fs';
 import 'node:crypto';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
-import './api-errors-BhVEeWTV.js';
-import '@selvajs/compute/core';
 import 'zod';
 
 const GET = async ({ locals }) => {
@@ -30,37 +30,50 @@ const GET = async ({ locals }) => {
     });
   } catch (err) {
     console.error("[Compute GET] Failed:", err);
-    throw error(500, "Failed to load compute config");
+    apiError(500, ApiErrorCode.INTERNAL, "Failed to load compute config");
   }
 };
 const PUT = async ({ request, locals }) => {
   requireManageCompute(locals);
   const body = await request.json().catch(() => null);
-  if (!body || typeof body !== "object") throw error(400, "Invalid request body");
+  if (!body || typeof body !== "object")
+    apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid request body");
   const incoming = body;
-  if (!Array.isArray(incoming.servers)) throw error(400, "servers must be an array");
+  if (!Array.isArray(incoming.servers))
+    apiError(400, ApiErrorCode.VALIDATION_FAILED, "servers must be an array");
   for (const s of incoming.servers) {
-    if (!s.id || typeof s.id !== "string") throw error(400, "Each server needs an id");
-    if (!s.label || typeof s.label !== "string") throw error(400, "Each server needs a label");
+    if (!s.id || typeof s.id !== "string")
+      apiError(400, ApiErrorCode.VALIDATION_FAILED, "Each server needs an id");
+    if (!s.label || typeof s.label !== "string")
+      apiError(400, ApiErrorCode.VALIDATION_FAILED, "Each server needs a label");
     if (!s.serverUrl || typeof s.serverUrl !== "string")
-      throw error(400, "Each server needs a serverUrl");
+      apiError(400, ApiErrorCode.VALIDATION_FAILED, "Each server needs a serverUrl");
     try {
       new URL(s.serverUrl);
     } catch {
-      throw error(400, `Invalid serverUrl: ${s.serverUrl}`);
+      apiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid serverUrl: ${s.serverUrl}`);
     }
     if (s.sharedWith !== "all" && !Array.isArray(s.sharedWith)) {
-      throw error(400, 'sharedWith must be "all" or an array of org ids');
+      apiError(
+        400,
+        ApiErrorCode.VALIDATION_FAILED,
+        'sharedWith must be "all" or an array of org ids'
+      );
     }
     if (Array.isArray(s.sharedWith) && s.sharedWith.some((x) => typeof x !== "string")) {
-      throw error(400, "sharedWith array must contain strings");
+      apiError(400, ApiErrorCode.VALIDATION_FAILED, "sharedWith array must contain strings");
     }
     if (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== "string")
-      throw error(400, "apiKey must be a string, null, or omitted");
+      apiError(400, ApiErrorCode.VALIDATION_FAILED, "apiKey must be a string, null, or omitted");
   }
   if (incoming.defaultServerId) {
     const found = incoming.servers.find((s) => s.id === incoming.defaultServerId);
-    if (!found) throw error(400, "defaultServerId must reference one of the submitted servers");
+    if (!found)
+      apiError(
+        400,
+        ApiErrorCode.VALIDATION_FAILED,
+        "defaultServerId must reference one of the submitted servers"
+      );
   }
   try {
     const provider = getComputeServerConfigStore();
@@ -78,9 +91,9 @@ const PUT = async ({ request, locals }) => {
     return new Response(null, { status: 204 });
   } catch (err) {
     console.error("[Compute PUT] Failed:", err);
-    throw error(500, "Failed to save compute config");
+    apiError(500, ApiErrorCode.INTERNAL, "Failed to save compute config");
   }
 };
 
 export { GET, PUT };
-//# sourceMappingURL=_server.ts-DEBzt_W2.js.map
+//# sourceMappingURL=_server.ts-OQ5_sYi3.js.map

package/build/server/chunks/_server.ts-OQ5_sYi3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-OQ5_sYi3.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/compute/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { a as apiError, A as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { c as getComputeServerConfigStore } from \"../../../../../chunks/providers.server.js\";\nimport { v as requireManageCompute } from \"../../../../../chunks/access.server.js\";\nimport \"../../../../../chunks/context.js\";\nimport { p as platformServers } from \"../../../../../chunks/utils2.js\";\nconst GET = async ({ locals }) => {\n  requireManageCompute(locals);\n  try {\n    const config = await getComputeServerConfigStore().getConfig(locals.ctx);\n    const servers = platformServers(config).map(\n      ({ apiKey, ...rest }) => ({\n        ...rest,\n        hasApiKey: !!apiKey\n      })\n    );\n    return json({\n      servers,\n      defaultServerId: config.defaultServerId\n    });\n  } catch (err) {\n    console.error(\"[Compute GET] Failed:\", err);\n    apiError(500, ApiErrorCode.INTERNAL, \"Failed to load compute config\");\n  }\n};\nconst PUT = async ({ request, locals }) => {\n  requireManageCompute(locals);\n  const body = await request.json().catch(() => null);\n  if (!body || typeof body !== \"object\")\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid request body\");\n  const incoming = body;\n  if (!Array.isArray(incoming.servers))\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, \"servers must be an array\");\n  for (const s of incoming.servers) {\n    if (!s.id || typeof s.id !== \"string\")\n      apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs an id\");\n    if (!s.label || typeof s.label !== \"string\")\n      apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs a label\");\n    if (!s.serverUrl || typeof s.serverUrl !== \"string\")\n      apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Each server needs a serverUrl\");\n    try {\n      new URL(s.serverUrl);\n    } catch {\n      apiError(400, ApiErrorCode.VALIDATION_FAILED, `Invalid serverUrl: ${s.serverUrl}`);\n    }\n    if (s.sharedWith !== \"all\" && !Array.isArray(s.sharedWith)) {\n      apiError(\n        400,\n        ApiErrorCode.VALIDATION_FAILED,\n        'sharedWith must be \"all\" or an array of org ids'\n      );\n    }\n    if (Array.isArray(s.sharedWith) && s.sharedWith.some((x) => typeof x !== \"string\")) {\n      apiError(400, ApiErrorCode.VALIDATION_FAILED, \"sharedWith array must contain strings\");\n    }\n    if (s.apiKey !== void 0 && s.apiKey !== null && typeof s.apiKey !== \"string\")\n      apiError(400, ApiErrorCode.VALIDATION_FAILED, \"apiKey must be a string, null, or omitted\");\n  }\n  if (incoming.defaultServerId) {\n    const found = incoming.servers.find((s) => s.id === incoming.defaultServerId);\n    if (!found)\n      apiError(\n        400,\n        ApiErrorCode.VALIDATION_FAILED,\n        \"defaultServerId must reference one of the submitted servers\"\n      );\n  }\n  try {\n    const provider = getComputeServerConfigStore();\n    const existing = await provider.getConfig(locals.ctx);\n    const storedKeyById = new Map(platformServers(existing).map((s) => [s.id, s.apiKey]));\n    const next = incoming.servers.map(\n      ({ apiKey, sharedWith, ...rest }) => ({\n        ...rest,\n        scope: \"platform\",\n        sharedWith: sharedWith === \"all\" ? \"all\" : [...sharedWith],\n        apiKey: apiKey === null ? void 0 : apiKey ? apiKey : storedKeyById.get(rest.id)\n      })\n    );\n    await provider.savePlatformServers(locals.ctx, next, incoming.defaultServerId);\n    return new Response(null, { status: 204 });\n  } catch (err) {\n    console.error(\"[Compute PUT] Failed:\", err);\n    apiError(500, ApiErrorCode.INTERNAL, \"Failed to save compute config\");\n  }\n};\nexport {\n  GET,\n  PUT\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAMK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,IAAI;AACN,IAAI,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;AAC5E,IAAI,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,GAAG;AAC/C,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,MAAM;AAChC,QAAQ,GAAG,IAAI;AACf,QAAQ,SAAS,EAAE,CAAC,CAAC;AACrB,OAAO;AACP,KAAK;AACL,IAAI,OAAO,IAAI,CAAC;AAChB,MAAM,OAAO;AACb,MAAM,eAAe,EAAE,MAAM,CAAC;AAC9B,KAAK,CAAC;AACN,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,GAAG,CAAC;AAC/C,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,+BAA+B,CAAC;AACzE,EAAE;AACF;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC3C,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;AACvC,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AACzE,EAAE,MAAM,QAAQ,GAAG,IAAI;AACvB,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;AACtC,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;AAC7E,EAAE,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE;AACpC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;AACzC,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AAC9E,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;AAC/C,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;AAChF,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;AACvD,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,+BAA+B,CAAC;AACpF,IAAI,IAAI;AACR,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1B,IAAI,CAAC,CAAC,MAAM;AACZ,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACxF,IAAI;AACJ,IAAI,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE;AAChE,MAAM,QAAQ;AACd,QAAQ,GAAG;AACX,QAAQ,YAAY,CAAC,iBAAiB;AACtC,QAAQ;AACR,OAAO;AACP,IAAI;AACJ,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE;AACxF,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,uCAAuC,CAAC;AAC5F,IAAI;AACJ,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;AAChF,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2CAA2C,CAAC;AAChG,EAAE;AACF,EAAE,IAAI,QAAQ,CAAC,eAAe,EAAE;AAChC,IAAI,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,eAAe,CAAC;AACjF,IAAI,IAAI,CAAC,KAAK;AACd,MAAM,QAAQ;AACd,QAAQ,GAAG;AACX,QAAQ,YAAY,CAAC,iBAAiB;AACtC,QAAQ;AACR,OAAO;AACP,EAAE;AACF,EAAE,IAAI;AACN,IAAI,MAAM,QAAQ,GAAG,2BAA2B,EAAE;AAClD,IAAI,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;AACzD,IAAI,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACzF,IAAI,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG;AACrC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,MAAM;AAC5C,QAAQ,GAAG,IAAI;AACf,QAAQ,KAAK,EAAE,UAAU;AACzB,QAAQ,UAAU,EAAE,UAAU,KAAK,KAAK,GAAG,KAAK,GAAG,CAAC,GAAG,UAAU,CAAC;AAClE,QAAQ,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,KAAK,CAAC,GAAG,MAAM,GAAG,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;AACtF,OAAO;AACP,KAAK;AACL,IAAI,MAAM,QAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC;AAClF,IAAI,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC9C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,GAAG,CAAC;AAC/C,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,+BAA+B,CAAC;AACzE,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-XAkApigL.js → _server.ts-UYOqhuxS.js}

@@ -1,8 +1,8 @@
-import { error, json } from '@sveltejs/kit';
+import { json } from '@sveltejs/kit';
 import { randomUUID } from 'node:crypto';
 import { u as providers, f as flag } from './providers.server-C3fQ7ZdV.js';
-import { t as requireEditableDefinition } from './access.server-CAPd1-c2.js';
-import { h as handleApiError, t as throwZodError } from './api-errors-BhVEeWTV.js';
+import { t as requireEditableDefinition } from './access.server-Rd56k7vs.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
 import { G as GuidSchema, c as CreateShareLinkInputSchema } from './context-BJnJL8ES.js';
 import { D as DEFAULT_SHARE_LINK_MAX_SOLVES } from './types2-DdHhYSMF.js';
 import { m as mintRawToken, h as hashToken } from './token.server-BGL9vwYS.js';
@@ -18,7 +18,11 @@ import './utils2-BqfluBM6.js';
 
 function assertSharingEnabled() {
   if (!flag("ENABLE_SHARING")) {
-    throw error(404, "Share links are disabled on this instance (ENABLE_SHARING).");
+    apiError(
+      404,
+      ApiErrorCode.NOT_FOUND,
+      "Share links are disabled on this instance (ENABLE_SHARING)."
+    );
   }
 }
 function strip(link) {
@@ -28,7 +32,7 @@ function strip(link) {
 const GET = async ({ params, locals }) => {
   assertSharingEnabled();
   const guidParsed = GuidSchema.safeParse(params.guid);
-  if (!guidParsed.success) throw error(400, "Invalid or missing GUID");
+  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing GUID");
   const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
   try {
     const page = await providers.data.shareLinks.listByDefinition(ctx, guidParsed.data, {
@@ -45,7 +49,7 @@ const GET = async ({ params, locals }) => {
 const POST = async ({ params, request, locals }) => {
   assertSharingEnabled();
   const guidParsed = GuidSchema.safeParse(params.guid);
-  if (!guidParsed.success) throw error(400, "Invalid or missing GUID");
+  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing GUID");
   const { ctx } = await requireEditableDefinition(locals, guidParsed.data);
   const body = await request.json().catch(() => ({}));
   const parsed = CreateShareLinkInputSchema.safeParse(body);
@@ -77,4 +81,4 @@ const POST = async ({ params, request, locals }) => {
 };
 
 export { GET, POST };
-//# sourceMappingURL=_server.ts-XAkApigL.js.map
+//# sourceMappingURL=_server.ts-UYOqhuxS.js.map

package/build/server/chunks/_server.ts-UYOqhuxS.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-UYOqhuxS.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_guid_/share-links/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\nimport { u as providers, f as flag } from \"../../../../../../chunks/providers.server.js\";\nimport { t as requireEditableDefinition } from \"../../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { G as GuidSchema, c as CreateShareLinkInputSchema } from \"../../../../../../chunks/context.js\";\nimport { D as DEFAULT_SHARE_LINK_MAX_SOLVES } from \"../../../../../../chunks/types2.js\";\nimport { m as mintRawToken, h as hashToken } from \"../../../../../../chunks/token.server.js\";\nfunction assertSharingEnabled() {\n  if (!flag(\"ENABLE_SHARING\")) {\n    apiError(\n      404,\n      ApiErrorCode.NOT_FOUND,\n      \"Share links are disabled on this instance (ENABLE_SHARING).\"\n    );\n  }\n}\nfunction strip(link) {\n  const { tokenHash: _omit, ...rest } = link;\n  return { ...rest, hasToken: true };\n}\nconst GET = async ({ params, locals }) => {\n  assertSharingEnabled();\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing GUID\");\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  try {\n    const page = await providers.data.shareLinks.listByDefinition(ctx, guidParsed.data, {\n      limit: 200\n    });\n    return json({\n      links: page.items.map(strip),\n      nextCursor: page.nextCursor\n    });\n  } catch (err) {\n    handleApiError(err, \"Failed to list share links\");\n  }\n};\nconst POST = async ({ params, request, locals }) => {\n  assertSharingEnabled();\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing GUID\");\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  const body = await request.json().catch(() => ({}));\n  const parsed = CreateShareLinkInputSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const raw = mintRawToken();\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const link = {\n    id: randomUUID(),\n    definitionId: guidParsed.data,\n    channel: parsed.data.channel,\n    tokenHash: hashToken(raw),\n    name: parsed.data.name,\n    createdBy: locals.user.id,\n    createdAt: now,\n    expiresAt: parsed.data.expiresAt ?? null,\n    revokedAt: null,\n    allowSolve: parsed.data.allowSolve,\n    // Default applied only when the field is absent. `null` is a deliberate\n    // \"uncap\" choice and is preserved.\n    maxSolves: parsed.data.maxSolves === void 0 ? DEFAULT_SHARE_LINK_MAX_SOLVES : parsed.data.maxSolves,\n    solveCount: 0\n  };\n  try {\n    await providers.data.shareLinks.create(ctx, link);\n    return json({ link: strip(link), token: raw }, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to create share link\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAQA,SAAS,oBAAoB,GAAG;AAChC,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE;AAC/B,IAAI,QAAQ;AACZ,MAAM,GAAG;AACT,MAAM,YAAY,CAAC,SAAS;AAC5B,MAAM;AACN,KAAK;AACL,EAAE;AACF;AACA,SAAS,KAAK,CAAC,IAAI,EAAE;AACrB,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI;AAC5C,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;AACpC;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC1C,EAAE,oBAAoB,EAAE;AACxB,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACnG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE;AACxF,MAAM,KAAK,EAAE;AACb,KAAK,CAAC;AACN,IAAI,OAAO,IAAI,CAAC;AAChB,MAAM,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;AAClC,MAAM,UAAU,EAAE,IAAI,CAAC;AACvB,KAAK,CAAC;AACN,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,4BAA4B,CAAC;AACrD,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpD,EAAE,oBAAoB,EAAE;AACxB,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACnG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,IAAI,CAAC;AAC3D,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,GAAG,GAAG,YAAY,EAAE;AAC5B,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,IAAI,GAAG;AACf,IAAI,EAAE,EAAE,UAAU,EAAE;AACpB,IAAI,YAAY,EAAE,UAAU,CAAC,IAAI;AACjC,IAAI,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;AAChC,IAAI,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC;AAC7B,IAAI,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC1B,IAAI,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;AAC7B,IAAI,SAAS,EAAE,GAAG;AAClB,IAAI,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI;AAC5C,IAAI,SAAS,EAAE,IAAI;AACnB,IAAI,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;AACtC;AACA;AACA,IAAI,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,MAAM,GAAG,6BAA6B,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS;AACvG,IAAI,UAAU,EAAE;AAChB,GAAG;AACH,EAAE,IAAI;AACN,IAAI,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC;AACrD,IAAI,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACnE,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,6BAA6B,CAAC;AACtD,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-DVOhTvBf.js → _server.ts-Xt4gRfAl.js}

@@ -1,9 +1,9 @@
-import { error, json } from '@sveltejs/kit';
+import { json } from '@sveltejs/kit';
 import { z } from 'zod';
 import { a as getAuthProvider, k as getOrganizationProvider, l as getPermissionStore } from './providers.server-C3fQ7ZdV.js';
-import { w as requireManageInstanceUsers } from './access.server-CAPd1-c2.js';
+import { w as requireManageInstanceUsers } from './access.server-Rd56k7vs.js';
 import { s as setUserPlatformPermissions } from './permissions.server-zs4XAJCp.js';
-import { t as throwZodError, h as handleApiError } from './api-errors-BhVEeWTV.js';
+import { a as apiError, t as throwZodError, A as ApiErrorCode, h as handleApiError } from './api-errors-BrqxD-El.js';
 import { S as SYSTEM_CONTEXT, j as hasPermission, M as MEMBER_ASSIGNABLE_PERMISSIONS, P as PlatformPermissionSchema, d as OrgPermissionSchema } from './context-BJnJL8ES.js';
 import { f as flattenPermissions, s as splitFlatPermissions } from './permissions-compat.server-G174xsh6.js';
 import './shared-server-C3WdcJCQ.js';
@@ -28,8 +28,9 @@ const GET = async ({ locals }) => {
   requireManageInstanceUsers(locals);
   const page = await getAuthProvider().listUsers({ limit: 200 });
   if (page === null) {
-    throw error(
+    apiError(
       501,
+      ApiErrorCode.INTERNAL,
       "User management is not supported by the current auth provider. Configure DATA_PATH (local provider) or check your provider wiring."
     );
   }
@@ -55,7 +56,7 @@ const GET = async ({ locals }) => {
       };
     })
   );
-  return json(flattened);
+  return json({ users: flattened });
 };
 const POST = async ({ request, locals }) => {
   requireManageInstanceUsers(locals);
@@ -66,18 +67,23 @@ const POST = async ({ request, locals }) => {
   const { email, password, permissions } = parsed.data;
   const { platform, org } = splitFlatPermissions(permissions);
   if (platform.length > 0 && !hasPermission(locals.ctx, "instance_admin")) {
-    throw error(403, "Only a platform admin can grant platform-scope permissions");
+    apiError(
+      403,
+      ApiErrorCode.FORBIDDEN,
+      "Only a platform admin can grant platform-scope permissions"
+    );
   }
   try {
     let user;
     if (auth.passwordAuth) {
-      if (!password) throw error(400, "Password is required");
+      if (!password) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Password is required");
       user = await auth.passwordAuth.createUserWithPassword(email, password);
     } else if (auth.createUser) {
       user = await auth.createUser(email);
     } else {
-      throw error(
+      apiError(
         501,
+        ApiErrorCode.INTERNAL,
         `User creation is not supported by ${auth.name}. Users are managed externally.`
       );
     }
@@ -105,4 +111,4 @@ const POST = async ({ request, locals }) => {
 };
 
 export { GET, POST };
-//# sourceMappingURL=_server.ts-DVOhTvBf.js.map
+//# sourceMappingURL=_server.ts-Xt4gRfAl.js.map

package/build/server/chunks/_server.ts-Xt4gRfAl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-Xt4gRfAl.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/users/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { a as getAuthProvider, k as getOrganizationProvider, l as getPermissionStore } from \"../../../../../chunks/providers.server.js\";\nimport { w as requireManageInstanceUsers } from \"../../../../../chunks/access.server.js\";\nimport { s as setUserPlatformPermissions } from \"../../../../../chunks/permissions.server.js\";\nimport { a as apiError, t as throwZodError, A as ApiErrorCode, h as handleApiError } from \"../../../../../chunks/api-errors.js\";\nimport { P as PlatformPermissionSchema, d as OrgPermissionSchema, S as SYSTEM_CONTEXT, j as hasPermission, M as MEMBER_ASSIGNABLE_PERMISSIONS } from \"../../../../../chunks/context.js\";\nimport { f as flattenPermissions, s as splitFlatPermissions } from \"../../../../../chunks/permissions-compat.server.js\";\nconst FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);\nconst BaseUserBody = z.object({\n  email: z.string().email(\"Valid email is required\"),\n  permissions: z.array(FlatPermissionSchema)\n});\nconst PasswordUserBody = BaseUserBody.extend({\n  password: z.string().min(8, \"Password must be at least 8 characters\").optional()\n});\nconst GET = async ({ locals }) => {\n  requireManageInstanceUsers(locals);\n  const page = await getAuthProvider().listUsers({ limit: 200 });\n  if (page === null) {\n    apiError(\n      501,\n      ApiErrorCode.INTERNAL,\n      \"User management is not supported by the current auth provider. Configure DATA_PATH (local provider) or check your provider wiring.\"\n    );\n  }\n  const orgId = locals.ctx?.actingOrgId;\n  const orgs = getOrganizationProvider();\n  const userIds = page.items.map((u) => u.id);\n  const platformByUser = await getPermissionStore().getForBatch(locals.ctx, userIds);\n  const flattened = await Promise.all(\n    page.items.map(async (u) => {\n      let orgPerms = [];\n      if (orgId) {\n        const member = await orgs.getOrgMember(SYSTEM_CONTEXT, orgId, u.id);\n        orgPerms = member?.permissions ?? [];\n      }\n      const platformPerms = platformByUser.get(u.id) ?? [];\n      return {\n        ...u,\n        platformPermissions: platformPerms,\n        permissions: flattenPermissions(\n          platformPerms,\n          orgPerms\n        )\n      };\n    })\n  );\n  return json({ users: flattened });\n};\nconst POST = async ({ request, locals }) => {\n  requireManageInstanceUsers(locals);\n  const auth = getAuthProvider();\n  const body = await request.json().catch(() => null);\n  const parsed = PasswordUserBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const { email, password, permissions } = parsed.data;\n  const { platform, org } = splitFlatPermissions(permissions);\n  if (platform.length > 0 && !hasPermission(locals.ctx, \"instance_admin\")) {\n    apiError(\n      403,\n      ApiErrorCode.FORBIDDEN,\n      \"Only a platform admin can grant platform-scope permissions\"\n    );\n  }\n  try {\n    let user;\n    if (auth.passwordAuth) {\n      if (!password) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Password is required\");\n      user = await auth.passwordAuth.createUserWithPassword(email, password);\n    } else if (auth.createUser) {\n      user = await auth.createUser(email);\n    } else {\n      apiError(\n        501,\n        ApiErrorCode.INTERNAL,\n        `User creation is not supported by ${auth.name}. Users are managed externally.`\n      );\n    }\n    if (platform.length > 0) {\n      await setUserPlatformPermissions(locals.ctx, user.id, platform);\n    }\n    const orgId = locals.ctx?.actingOrgId;\n    if (orgId) {\n      const joinedAt = (/* @__PURE__ */ new Date()).toISOString();\n      await getOrganizationProvider().addOrgMember(SYSTEM_CONTEXT, {\n        orgId,\n        userId: user.id,\n        role: \"member\",\n        permissions: org.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)),\n        joinedAt,\n        updatedAt: joinedAt,\n        updatedBy: locals.user?.id ?? user.id,\n        deletedAt: null\n      });\n    }\n    return json(user, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to create user\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAQA,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;AACrF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;AAC9B,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC;AACpD,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB;AAC3C,CAAC,CAAC;AACF,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC;AAC7C,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wCAAwC,CAAC,CAAC,QAAQ;AAChF,CAAC,CAAC;AACG,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,0BAA0B,CAAC,MAAM,CAAC;AACpC,EAAE,MAAM,IAAI,GAAG,MAAM,eAAe,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAChE,EAAE,IAAI,IAAI,KAAK,IAAI,EAAE;AACrB,IAAI,QAAQ;AACZ,MAAM,GAAG;AACT,MAAM,YAAY,CAAC,QAAQ;AAC3B,MAAM;AACN,KAAK;AACL,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,WAAW;AACvC,EAAE,MAAM,IAAI,GAAG,uBAAuB,EAAE;AACxC,EAAE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AAC7C,EAAE,MAAM,cAAc,GAAG,MAAM,kBAAkB,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC;AACpF,EAAE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG;AACrC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK;AAChC,MAAM,IAAI,QAAQ,GAAG,EAAE;AACvB,MAAM,IAAI,KAAK,EAAE;AACjB,QAAQ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;AAC3E,QAAQ,QAAQ,GAAG,MAAM,EAAE,WAAW,IAAI,EAAE;AAC5C,MAAM;AACN,MAAM,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE;AAC1D,MAAM,OAAO;AACb,QAAQ,GAAG,CAAC;AACZ,QAAQ,mBAAmB,EAAE,aAAa;AAC1C,QAAQ,WAAW,EAAE,kBAAkB;AACvC,UAAU,aAAa;AACvB,UAAU;AACV;AACA,OAAO;AACP,IAAI,CAAC;AACL,GAAG;AACH,EAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACnC;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,0BAA0B,CAAC,MAAM,CAAC;AACpC,EAAE,MAAM,IAAI,GAAG,eAAe,EAAE;AAChC,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC;AACjD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,IAAI;AACtD,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,oBAAoB,CAAC,WAAW,CAAC;AAC7D,EAAE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE;AAC3E,IAAI,QAAQ;AACZ,MAAM,GAAG;AACT,MAAM,YAAY,CAAC,SAAS;AAC5B,MAAM;AACN,KAAK;AACL,EAAE;AACF,EAAE,IAAI;AACN,IAAI,IAAI,IAAI;AACZ,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE;AAC3B,MAAM,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AAC1F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC;AAC5E,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE;AAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;AACzC,IAAI,CAAC,MAAM;AACX,MAAM,QAAQ;AACd,QAAQ,GAAG;AACX,QAAQ,YAAY,CAAC,QAAQ;AAC7B,QAAQ,CAAC,kCAAkC,EAAE,IAAI,CAAC,IAAI,CAAC,+BAA+B;AACtF,OAAO;AACP,IAAI;AACJ,IAAI,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE;AAC7B,MAAM,MAAM,0BAA0B,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC;AACrE,IAAI;AACJ,IAAI,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,WAAW;AACzC,IAAI,IAAI,KAAK,EAAE;AACf,MAAM,MAAM,QAAQ,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACjE,MAAM,MAAM,uBAAuB,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE;AACnE,QAAQ,KAAK;AACb,QAAQ,MAAM,EAAE,IAAI,CAAC,EAAE;AACvB,QAAQ,IAAI,EAAE,QAAQ;AACtB,QAAQ,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,6BAA6B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACjF,QAAQ,QAAQ;AAChB,QAAQ,SAAS,EAAE,QAAQ;AAC3B,QAAQ,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE;AAC7C,QAAQ,SAAS,EAAE;AACnB,OAAO,CAAC;AACR,IAAI;AACJ,IAAI,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACtC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,uBAAuB,CAAC;AAChD,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-CpsGzKQC.js → _server.ts-ZtjukIa0.js}

@@ -1,9 +1,8 @@
-import { error, json } from '@sveltejs/kit';
 import { z } from 'zod';
 import { M as MEMBER_ASSIGNABLE_PERMISSIONS, A as ALL_ORG_PERMISSIONS, e as OrgRoleSchema } from './context-BJnJL8ES.js';
 import { k as getOrganizationProvider } from './providers.server-C3fQ7ZdV.js';
-import { y as requireManageOrgMembers } from './access.server-CAPd1-c2.js';
-import { t as throwZodError, h as handleApiError } from './api-errors-BhVEeWTV.js';
+import { y as requireManageOrgMembers } from './access.server-Rd56k7vs.js';
+import { a as apiError, t as throwZodError, A as ApiErrorCode, h as handleApiError } from './api-errors-BrqxD-El.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
 import 'node:path';
@@ -11,6 +10,7 @@ import 'node:fs';
 import 'node:crypto';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
+import '@sveltejs/kit';
 import '@selvajs/compute/core';
 import './utils2-BqfluBM6.js';
 
@@ -25,11 +25,11 @@ const PatchSchema = z.object({
 });
 const PATCH = async ({ params, request, locals }) => {
   const { orgId, userId } = params;
-  if (!orgId || !userId) throw error(400, "Missing org ID or user ID");
+  if (!orgId || !userId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing org ID or user ID");
   requireManageOrgMembers(locals);
   const ctx = locals.ctx;
   if (ctx.actingOrgId !== orgId) {
-    throw error(403, "Acting org does not match the target org.");
+    apiError(403, ApiErrorCode.FORBIDDEN, "Acting org does not match the target org.");
   }
   const body = await request.json().catch(() => null);
   const parsed = PatchSchema.safeParse(body);
@@ -40,11 +40,12 @@ const PATCH = async ({ params, request, locals }) => {
     orgs.getOrgMember(ctx, orgId, ctx.userId),
     orgs.getOrgMember(ctx, orgId, userId)
   ]);
-  if (!target) throw error(404, "Member not found in this organization.");
-  if (!actorMember) throw error(403, "You are not a member of this organization.");
+  if (!target) apiError(404, ApiErrorCode.NOT_FOUND, "Member not found in this organization.");
+  if (!actorMember)
+    apiError(403, ApiErrorCode.FORBIDDEN, "You are not a member of this organization.");
   if (patch.role !== void 0 && patch.role !== target.role) {
     if (actorMember.role !== "owner") {
-      throw error(403, "Only the org owner can change roles.");
+      apiError(403, ApiErrorCode.FORBIDDEN, "Only the org owner can change roles.");
     }
     if (target.role === "owner" && patch.role !== "owner") {
       const page = await orgs.listOrgMembers(ctx, orgId, { limit: 200 });
@@ -52,8 +53,9 @@ const PATCH = async ({ params, request, locals }) => {
         (m) => m.role === "owner" && m.userId !== target.userId && !m.deletedAt
       );
       if (otherOwners.length === 0) {
-        throw error(
+        apiError(
           409,
+          ApiErrorCode.CONFLICT,
           "Cannot demote the sole owner of this organization. Promote another member to owner first."
         );
       }
@@ -65,8 +67,9 @@ const PATCH = async ({ params, request, locals }) => {
     const valid = effectiveRole === "member" ? new Set(MEMBER_ASSIGNABLE_PERMISSIONS) : new Set(ALL_ORG_PERMISSIONS);
     const invalid = patch.permissions.filter((p) => !valid.has(p));
     if (invalid.length > 0) {
-      throw error(
+      apiError(
         400,
+        ApiErrorCode.VALIDATION_FAILED,
         `Permissions [${invalid.join(", ")}] cannot be assigned to a ${effectiveRole}.`
       );
     }
@@ -76,8 +79,8 @@ const PATCH = async ({ params, request, locals }) => {
       handleApiError(err, "Failed to update permissions");
     }
   }
-  return json({ success: true });
+  return new Response(null, { status: 204 });
 };
 
 export { PATCH };
-//# sourceMappingURL=_server.ts-CpsGzKQC.js.map
+//# sourceMappingURL=_server.ts-ZtjukIa0.js.map

package/build/server/chunks/_server.ts-ZtjukIa0.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-ZtjukIa0.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/orgs/_orgId_/members/_userId_/_server.ts.js"],"sourcesContent":["import { z } from \"zod\";\nimport { A as ALL_ORG_PERMISSIONS, e as OrgRoleSchema, M as MEMBER_ASSIGNABLE_PERMISSIONS } from \"../../../../../../../chunks/context.js\";\nimport { k as getOrganizationProvider } from \"../../../../../../../chunks/providers.server.js\";\nimport { y as requireManageOrgMembers } from \"../../../../../../../chunks/access.server.js\";\nimport { a as apiError, t as throwZodError, A as ApiErrorCode, h as handleApiError } from \"../../../../../../../chunks/api-errors.js\";\nconst PERMISSIONS_SCHEMA = z.array(\n  z.enum(ALL_ORG_PERMISSIONS)\n);\nconst PatchSchema = z.object({\n  role: OrgRoleSchema.optional(),\n  permissions: PERMISSIONS_SCHEMA.optional()\n}).refine((b) => b.role !== void 0 || b.permissions !== void 0, {\n  message: \"Provide at least one of role, permissions\"\n});\nconst PATCH = async ({ params, request, locals }) => {\n  const { orgId, userId } = params;\n  if (!orgId || !userId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing org ID or user ID\");\n  requireManageOrgMembers(locals);\n  const ctx = locals.ctx;\n  if (ctx.actingOrgId !== orgId) {\n    apiError(403, ApiErrorCode.FORBIDDEN, \"Acting org does not match the target org.\");\n  }\n  const body = await request.json().catch(() => null);\n  const parsed = PatchSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const patch = parsed.data;\n  const orgs = getOrganizationProvider();\n  const [actorMember, target] = await Promise.all([\n    orgs.getOrgMember(ctx, orgId, ctx.userId),\n    orgs.getOrgMember(ctx, orgId, userId)\n  ]);\n  if (!target) apiError(404, ApiErrorCode.NOT_FOUND, \"Member not found in this organization.\");\n  if (!actorMember)\n    apiError(403, ApiErrorCode.FORBIDDEN, \"You are not a member of this organization.\");\n  if (patch.role !== void 0 && patch.role !== target.role) {\n    if (actorMember.role !== \"owner\") {\n      apiError(403, ApiErrorCode.FORBIDDEN, \"Only the org owner can change roles.\");\n    }\n    if (target.role === \"owner\" && patch.role !== \"owner\") {\n      const page = await orgs.listOrgMembers(ctx, orgId, { limit: 200 });\n      const otherOwners = page.items.filter(\n        (m) => m.role === \"owner\" && m.userId !== target.userId && !m.deletedAt\n      );\n      if (otherOwners.length === 0) {\n        apiError(\n          409,\n          ApiErrorCode.CONFLICT,\n          \"Cannot demote the sole owner of this organization. Promote another member to owner first.\"\n        );\n      }\n    }\n    await orgs.updateOrgMemberRole(ctx, orgId, userId, patch.role);\n  }\n  if (patch.permissions !== void 0) {\n    const effectiveRole = patch.role ?? target.role;\n    const valid = effectiveRole === \"member\" ? new Set(MEMBER_ASSIGNABLE_PERMISSIONS) : new Set(ALL_ORG_PERMISSIONS);\n    const invalid = patch.permissions.filter((p) => !valid.has(p));\n    if (invalid.length > 0) {\n      apiError(\n        400,\n        ApiErrorCode.VALIDATION_FAILED,\n        `Permissions [${invalid.join(\", \")}] cannot be assigned to a ${effectiveRole}.`\n      );\n    }\n    try {\n      await orgs.updateOrgMemberPermissions(ctx, orgId, userId, patch.permissions);\n    } catch (err) {\n      handleApiError(err, \"Failed to update permissions\");\n    }\n  }\n  return new Response(null, { status: 204 });\n};\nexport {\n  PATCH\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAKA,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK;AAClC,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB;AAC5B,CAAC;AACD,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;AAC7B,EAAE,IAAI,EAAE,aAAa,CAAC,QAAQ,EAAE;AAChC,EAAE,WAAW,EAAE,kBAAkB,CAAC,QAAQ;AAC1C,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,EAAE;AAChE,EAAE,OAAO,EAAE;AACX,CAAC,CAAC;AACG,MAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACrD,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM;AAClC,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;AACnG,EAAE,uBAAuB,CAAC,MAAM,CAAC;AACjC,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,IAAI,GAAG,CAAC,WAAW,KAAK,KAAK,EAAE;AACjC,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,2CAA2C,CAAC;AACtF,EAAE;AACF,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC;AAC5C,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI;AAC3B,EAAE,MAAM,IAAI,GAAG,uBAAuB,EAAE;AACxC,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AAClD,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC;AAC7C,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM;AACxC,GAAG,CAAC;AACJ,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,wCAAwC,CAAC;AAC9F,EAAE,IAAI,CAAC,WAAW;AAClB,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,4CAA4C,CAAC;AACvF,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE;AAC3D,IAAI,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE;AACtC,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,sCAAsC,CAAC;AACnF,IAAI;AACJ,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE;AAC3D,MAAM,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACxE,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM;AAC3C,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;AACtE,OAAO;AACP,MAAM,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE;AACpC,QAAQ,QAAQ;AAChB,UAAU,GAAG;AACb,UAAU,YAAY,CAAC,QAAQ;AAC/B,UAAU;AACV,SAAS;AACT,MAAM;AACN,IAAI;AACJ,IAAI,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;AAClE,EAAE;AACF,EAAE,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,EAAE;AACpC,IAAI,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI;AACnD,IAAI,MAAM,KAAK,GAAG,aAAa,KAAK,QAAQ,GAAG,IAAI,GAAG,CAAC,6BAA6B,CAAC,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC;AACpH,IAAI,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAClE,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;AAC5B,MAAM,QAAQ;AACd,QAAQ,GAAG;AACX,QAAQ,YAAY,CAAC,iBAAiB;AACtC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,0BAA0B,EAAE,aAAa,CAAC,CAAC;AACtF,OAAO;AACP,IAAI;AACJ,IAAI,IAAI;AACR,MAAM,MAAM,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC;AAClF,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,cAAc,CAAC,GAAG,EAAE,8BAA8B,CAAC;AACzD,IAAI;AACJ,EAAE;AACF,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C;;;;"}

package/build/server/chunks/_server.ts-bR98vjY2.js

@@ -0,0 +1,47 @@
+import { json } from '@sveltejs/kit';
+import { a as apiError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
+import { c as getComputeServerConfigStore } from './providers.server-C3fQ7ZdV.js';
+import './context-BJnJL8ES.js';
+import { f as findServerById } from './utils2-BqfluBM6.js';
+import { v as requireManageCompute } from './access.server-Rd56k7vs.js';
+import { ComputeServerStats } from '@selvajs/compute/core';
+import './shared-server-C3WdcJCQ.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:crypto';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import 'zod';
+
+const POST = async ({ request, locals }) => {
+  requireManageCompute(locals);
+  const body = await request.json().catch(() => null);
+  if (!body || typeof body !== "object")
+    apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid request body");
+  const { serverId, action } = body;
+  if (!serverId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "serverId required");
+  if (action !== "purge" && action !== "shutdown")
+    apiError(400, ApiErrorCode.VALIDATION_FAILED, "action must be 'purge' or 'shutdown'");
+  const config = await getComputeServerConfigStore().getConfig(locals.ctx);
+  const server = findServerById(config, serverId);
+  if (!server) apiError(404, ApiErrorCode.NOT_FOUND, "Server not found");
+  const stats = new ComputeServerStats(server.serverUrl, server.apiKey);
+  try {
+    if (action === "purge") {
+      const result2 = await stats.purgeAllChildren();
+      if (result2 === null)
+        apiError(502, ApiErrorCode.INTERNAL, "Could not reach the server to purge its cache");
+      return json({ action, ...result2 });
+    }
+    const result = await stats.shutdownChildren();
+    if (result === null)
+      apiError(502, ApiErrorCode.INTERNAL, "Could not reach the server to shut down its children");
+    return json({ action, ...result });
+  } finally {
+    await stats.dispose();
+  }
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-bR98vjY2.js.map

package/build/server/chunks/_server.ts-bR98vjY2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-bR98vjY2.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/compute/actions/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { a as apiError, A as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { c as getComputeServerConfigStore } from \"../../../../../../chunks/providers.server.js\";\nimport \"../../../../../../chunks/context.js\";\nimport { f as findServerById } from \"../../../../../../chunks/utils2.js\";\nimport { v as requireManageCompute } from \"../../../../../../chunks/access.server.js\";\nimport { ComputeServerStats } from \"@selvajs/compute/core\";\nconst POST = async ({ request, locals }) => {\n  requireManageCompute(locals);\n  const body = await request.json().catch(() => null);\n  if (!body || typeof body !== \"object\")\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid request body\");\n  const { serverId, action } = body;\n  if (!serverId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"serverId required\");\n  if (action !== \"purge\" && action !== \"shutdown\")\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, \"action must be 'purge' or 'shutdown'\");\n  const config = await getComputeServerConfigStore().getConfig(locals.ctx);\n  const server = findServerById(config, serverId);\n  if (!server) apiError(404, ApiErrorCode.NOT_FOUND, \"Server not found\");\n  const stats = new ComputeServerStats(server.serverUrl, server.apiKey);\n  try {\n    if (action === \"purge\") {\n      const result2 = await stats.purgeAllChildren();\n      if (result2 === null)\n        apiError(502, ApiErrorCode.INTERNAL, \"Could not reach the server to purge its cache\");\n      return json({ action, ...result2 });\n    }\n    const result = await stats.shutdownChildren();\n    if (result === null)\n      apiError(502, ApiErrorCode.INTERNAL, \"Could not reach the server to shut down its children\");\n    return json({ action, ...result });\n  } finally {\n    await stats.dispose();\n  }\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAOK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;AACvC,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AACzE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI;AACnC,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;AACnF,EAAE,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,UAAU;AACjD,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sCAAsC,CAAC;AACzF,EAAE,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;AAC1E,EAAE,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC;AACjD,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,kBAAkB,CAAC;AACxE,EAAE,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;AACvE,EAAE,IAAI;AACN,IAAI,IAAI,MAAM,KAAK,OAAO,EAAE;AAC5B,MAAM,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE;AACpD,MAAM,IAAI,OAAO,KAAK,IAAI;AAC1B,QAAQ,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,+CAA+C,CAAC;AAC7F,MAAM,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;AACzC,IAAI;AACJ,IAAI,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE;AACjD,IAAI,IAAI,MAAM,KAAK,IAAI;AACvB,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,sDAAsD,CAAC;AAClG,IAAI,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;AACtC,EAAE,CAAC,SAAS;AACZ,IAAI,MAAM,KAAK,CAAC,OAAO,EAAE;AACzB,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-Cg1WgIQn.js → _server.ts-deI69oUs.js}

@@ -1,7 +1,6 @@
-import { error, json } from '@sveltejs/kit';
 import { f as flag, m as getPlatformProjectGrantStore } from './providers.server-C3fQ7ZdV.js';
-import { u as requireInstanceAdmin } from './access.server-CAPd1-c2.js';
-import { h as handleApiError } from './api-errors-BhVEeWTV.js';
+import { u as requireInstanceAdmin } from './access.server-Rd56k7vs.js';
+import { a as apiError, h as handleApiError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
 import { S as SYSTEM_CONTEXT } from './context-BJnJL8ES.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
@@ -10,22 +9,23 @@ import 'node:fs';
 import 'node:crypto';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
+import '@sveltejs/kit';
 import 'zod';
 import '@selvajs/compute/core';
 import './utils2-BqfluBM6.js';
 
 const DELETE = async ({ params, locals }) => {
   requireInstanceAdmin(locals);
-  if (!flag("ENABLE_PLATFORM_PROJECTS")) throw error(404, "Not found");
+  if (!flag("ENABLE_PLATFORM_PROJECTS")) apiError(404, ApiErrorCode.NOT_FOUND, "Not found");
   const { grantId } = params;
-  if (!grantId) throw error(400, "Missing grant ID");
+  if (!grantId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing grant ID");
   try {
     await getPlatformProjectGrantStore().delete(SYSTEM_CONTEXT, grantId);
-    return json({ success: true });
+    return new Response(null, { status: 204 });
   } catch (err) {
     handleApiError(err, "Failed to revoke grant");
   }
 };
 
 export { DELETE };
-//# sourceMappingURL=_server.ts-Cg1WgIQn.js.map
+//# sourceMappingURL=_server.ts-deI69oUs.js.map

package/build/server/chunks/_server.ts-deI69oUs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-deI69oUs.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/api/projects/_id_/grants/_grantId_/_server.ts.js"],"sourcesContent":["import { f as flag, m as getPlatformProjectGrantStore } from \"../../../../../../../../chunks/providers.server.js\";\nimport { u as requireInstanceAdmin } from \"../../../../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, A as ApiErrorCode } from \"../../../../../../../../chunks/api-errors.js\";\nimport { S as SYSTEM_CONTEXT } from \"../../../../../../../../chunks/context.js\";\nconst DELETE = async ({ params, locals }) => {\n  requireInstanceAdmin(locals);\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n  const { grantId } = params;\n  if (!grantId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing grant ID\");\n  try {\n    await getPlatformProjectGrantStore().delete(SYSTEM_CONTEXT, grantId);\n    return new Response(null, { status: 204 });\n  } catch (err) {\n    handleApiError(err, \"Failed to revoke grant\");\n  }\n};\nexport {\n  DELETE\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC3F,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM;AAC5B,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;AACjF,EAAE,IAAI;AACN,IAAI,MAAM,4BAA4B,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC;AACxE,IAAI,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC9C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AACjD,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-bhjqtBoy.js → _server.ts-fxzTH5KH.js}

@@ -1,7 +1,7 @@
-import { error, json } from '@sveltejs/kit';
+import { json } from '@sveltejs/kit';
 import { i as getDefinitionService } from './providers.server-C3fQ7ZdV.js';
-import { t as requireEditableDefinition } from './access.server-CAPd1-c2.js';
-import { t as throwZodError, h as handleApiError } from './api-errors-BhVEeWTV.js';
+import { t as requireEditableDefinition } from './access.server-Rd56k7vs.js';
+import { a as apiError, t as throwZodError, h as handleApiError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
 import { G as GuidSchema, h as PublishVersionInputSchema } from './context-BJnJL8ES.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
@@ -16,7 +16,7 @@ import './utils2-BqfluBM6.js';
 
 const POST = async ({ params, request, locals }) => {
   const guidParsed = GuidSchema.safeParse(params.guid);
-  if (!guidParsed.success) throw error(400, "Invalid or missing GUID");
+  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid or missing GUID");
   const body = await request.json().catch(() => ({}));
   const parsed = PublishVersionInputSchema.safeParse(body);
   if (!parsed.success) throwZodError(parsed.error);
@@ -27,11 +27,11 @@ const POST = async ({ params, request, locals }) => {
       guidParsed.data,
       parsed.data.versionId
     );
-    return json({ success: true, version });
+    return json({ version });
   } catch (err) {
     handleApiError(err, "Failed to publish version");
   }
 };
 
 export { POST };
-//# sourceMappingURL=_server.ts-bhjqtBoy.js.map
+//# sourceMappingURL=_server.ts-fxzTH5KH.js.map

package/build/server/chunks/_server.ts-fxzTH5KH.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-fxzTH5KH.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/definitions/_guid_/publish/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { i as getDefinitionService } from \"../../../../../../chunks/providers.server.js\";\nimport { t as requireEditableDefinition } from \"../../../../../../chunks/access.server.js\";\nimport { a as apiError, t as throwZodError, h as handleApiError, A as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { G as GuidSchema, h as PublishVersionInputSchema } from \"../../../../../../chunks/context.js\";\nconst POST = async ({ params, request, locals }) => {\n  const guidParsed = GuidSchema.safeParse(params.guid);\n  if (!guidParsed.success) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid or missing GUID\");\n  const body = await request.json().catch(() => ({}));\n  const parsed = PublishVersionInputSchema.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const { ctx } = await requireEditableDefinition(locals, guidParsed.data);\n  try {\n    const version = await getDefinitionService().publish(\n      ctx,\n      guidParsed.data,\n      parsed.data.versionId\n    );\n    return json({ version });\n  } catch (err) {\n    handleApiError(err, \"Failed to publish version\");\n  }\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAKK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpD,EAAE,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;AACtD,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;AACnG,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1D,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;AAC1E,EAAE,IAAI;AACN,IAAI,MAAM,OAAO,GAAG,MAAM,oBAAoB,EAAE,CAAC,OAAO;AACxD,MAAM,GAAG;AACT,MAAM,UAAU,CAAC,IAAI;AACrB,MAAM,MAAM,CAAC,IAAI,CAAC;AAClB,KAAK;AACL,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;AAC5B,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,2BAA2B,CAAC;AACpD,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-DvBucq0r.js → _server.ts-mFb6RwID.js}

@@ -1,7 +1,7 @@
-import { error, json } from '@sveltejs/kit';
+import { json } from '@sveltejs/kit';
 import { n as getProjectProvider } from './providers.server-C3fQ7ZdV.js';
-import { o as requireCanReclaim } from './access.server-CAPd1-c2.js';
-import { h as handleApiError } from './api-errors-BhVEeWTV.js';
+import { o as requireCanReclaim } from './access.server-Rd56k7vs.js';
+import { a as apiError, h as handleApiError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
 import 'node:path';
@@ -16,7 +16,7 @@ import './utils2-BqfluBM6.js';
 
 const POST = async ({ params, locals }) => {
   const { id } = params;
-  if (!id) throw error(400, "Missing project ID");
+  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
   const { user, ctx } = await requireCanReclaim(locals, id);
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const member = {
@@ -30,11 +30,11 @@ const POST = async ({ params, locals }) => {
   };
   try {
     await getProjectProvider().addProjectMember(ctx, member);
-    return json({ success: true, member });
+    return json({ member }, { status: 201 });
   } catch (err) {
     handleApiError(err, "Failed to reclaim project");
   }
 };
 
 export { POST };
-//# sourceMappingURL=_server.ts-DvBucq0r.js.map
+//# sourceMappingURL=_server.ts-mFb6RwID.js.map

package/build/server/chunks/_server.ts-mFb6RwID.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-mFb6RwID.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/projects/_id_/reclaim/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { n as getProjectProvider } from \"../../../../../../chunks/providers.server.js\";\nimport { o as requireCanReclaim } from \"../../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, A as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nconst POST = async ({ params, locals }) => {\n  const { id } = params;\n  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID\");\n  const { user, ctx } = await requireCanReclaim(locals, id);\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const member = {\n    projectId: id,\n    userId: user.id,\n    role: \"owner\",\n    joinedAt: now,\n    updatedAt: now,\n    updatedBy: ctx.userId || user.id,\n    deletedAt: null\n  };\n  try {\n    await getProjectProvider().addProjectMember(ctx, member);\n    return json({ member }, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to reclaim project\");\n  }\n};\nexport {\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;AAC9E,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,EAAE,CAAC;AAC3D,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,MAAM,GAAG;AACjB,IAAI,SAAS,EAAE,EAAE;AACjB,IAAI,MAAM,EAAE,IAAI,CAAC,EAAE;AACnB,IAAI,IAAI,EAAE,OAAO;AACjB,IAAI,QAAQ,EAAE,GAAG;AACjB,IAAI,SAAS,EAAE,GAAG;AAClB,IAAI,SAAS,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE;AACpC,IAAI,SAAS,EAAE;AACf,GAAG;AACH,EAAE,IAAI;AACN,IAAI,MAAM,kBAAkB,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC;AAC5D,IAAI,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,2BAA2B,CAAC;AACpD,EAAE;AACF;;;;"}

package/build/server/chunks/{_server.ts-Cc-srcRk.js → _server.ts-sdl64bpd.js}

@@ -1,13 +1,16 @@
-import { error, redirect } from '@sveltejs/kit';
+import { redirect } from '@sveltejs/kit';
+import { a as apiError, A as ApiErrorCode } from './api-errors-BrqxD-El.js';
 import { a as getAuthProvider } from './providers.server-C3fQ7ZdV.js';
 import { b as bootstrapUserSession } from './auth-bootstrap.server-DKc9-3PR.js';
 import { h as setSessionCookie, f as setRefreshCookie, s as safeRedirectTarget } from './admin-auth.server-45kKyH82.js';
+import './context-BJnJL8ES.js';
+import 'zod';
+import '@selvajs/compute/core';
+import './utils2-BqfluBM6.js';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
 import 'node:path';
 import 'node:fs';
-import './context-BJnJL8ES.js';
-import 'zod';
 import 'node:crypto';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
@@ -15,13 +18,13 @@ import './slug-BGuFQjqe.js';
 
 const GET = async ({ url, cookies }) => {
   const code = url.searchParams.get("code");
-  if (!code) throw error(400, "Missing authorization code");
+  if (!code) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing authorization code");
   const oauth = getAuthProvider().oauth;
   if (!oauth) {
-    throw error(501, "OAuth is not supported by the configured auth provider.");
+    apiError(501, ApiErrorCode.INTERNAL, "OAuth is not supported by the configured auth provider.");
   }
   const result = await oauth.exchangeOAuthCode(code);
-  if (!result) throw error(401, "OAuth exchange failed");
+  if (!result) apiError(401, ApiErrorCode.UNAUTHORIZED, "OAuth exchange failed");
   await bootstrapUserSession(result.user);
   setSessionCookie(cookies, result.sessionToken);
   setRefreshCookie(cookies, result.refreshToken);
@@ -30,4 +33,4 @@ const GET = async ({ url, cookies }) => {
 };
 
 export { GET };
-//# sourceMappingURL=_server.ts-Cc-srcRk.js.map
+//# sourceMappingURL=_server.ts-sdl64bpd.js.map

package/build/server/chunks/_server.ts-sdl64bpd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-sdl64bpd.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/auth/supabase/callback/_server.ts.js"],"sourcesContent":["import { redirect } from \"@sveltejs/kit\";\nimport { a as apiError, A as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { a as getAuthProvider } from \"../../../../../chunks/providers.server.js\";\nimport { b as bootstrapUserSession } from \"../../../../../chunks/auth-bootstrap.server.js\";\nimport { h as setSessionCookie, f as setRefreshCookie, s as safeRedirectTarget } from \"../../../../../chunks/admin-auth.server.js\";\nconst GET = async ({ url, cookies }) => {\n  const code = url.searchParams.get(\"code\");\n  if (!code) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing authorization code\");\n  const oauth = getAuthProvider().oauth;\n  if (!oauth) {\n    apiError(501, ApiErrorCode.INTERNAL, \"OAuth is not supported by the configured auth provider.\");\n  }\n  const result = await oauth.exchangeOAuthCode(code);\n  if (!result) apiError(401, ApiErrorCode.UNAUTHORIZED, \"OAuth exchange failed\");\n  await bootstrapUserSession(result.user);\n  setSessionCookie(cookies, result.sessionToken);\n  setRefreshCookie(cookies, result.refreshToken);\n  const dest = safeRedirectTarget(url.searchParams.get(\"redirectTo\"), \"/library\");\n  redirect(303, dest);\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAKK,MAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK;AACxC,EAAE,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;AAC3C,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,4BAA4B,CAAC;AACxF,EAAE,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC,KAAK;AACvC,EAAE,IAAI,CAAC,KAAK,EAAE;AACd,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,yDAAyD,CAAC;AACnG,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC;AACpD,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,YAAY,EAAE,uBAAuB,CAAC;AAChF,EAAE,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC;AACzC,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAChD,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC;AAChD,EAAE,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;AACjF,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;AACrB;;;;"}

package/build/server/chunks/{access.server-CAPd1-c2.js → access.server-Rd56k7vs.js}

@@ -1,7 +1,7 @@
 import { error, redirect } from '@sveltejs/kit';
 import { j as hasPermission, a as ALL_PLATFORM_PERMISSIONS } from './context-BJnJL8ES.js';
 import { h as getDefinitionMeta, k as getOrganizationProvider, f as flag, n as getProjectProvider, m as getPlatformProjectGrantStore } from './providers.server-C3fQ7ZdV.js';
-import { h as handleApiError } from './api-errors-BhVEeWTV.js';
+import { h as handleApiError } from './api-errors-BrqxD-El.js';
 import 'zod';
 import './shared-server-C3WdcJCQ.js';
 import 'node:url';
@@ -405,4 +405,4 @@ const access_server = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defin
 }, Symbol.toStringTag, { value: "Module" }));
 
 export { requireTargetIsOrgMember as A, withAdminBypass as B, access_server as a, assertAnyPlatformPermission as b, assertManageCompute as c, assertManageInstanceUsers as d, assertPagePermission as e, canChangeVisibilityToPublic as f, canEdit as g, canView as h, checkOwnerRemoval as i, requireCanCreateProject as j, requireCanEditDefinition as k, requireCanEditProjectSettings as l, requireCanManage as m, requireCanManageMembers as n, requireCanReclaim as o, projectAccessInputFromRows as p, requireCanSolve as q, requireCanCreateDefinition as r, requireCanViewProject as s, requireEditableDefinition as t, requireInstanceAdmin as u, requireManageCompute as v, requireManageInstanceUsers as w, requireManageOrgCompute as x, requireManageOrgMembers as y, requirePermission as z };
-//# sourceMappingURL=access.server-CAPd1-c2.js.map
+//# sourceMappingURL=access.server-Rd56k7vs.js.map