@openpalm/ui 0.11.0-rc.2

package/build/server/chunks/_server.ts-hMTx0DC3.js

@@ -0,0 +1,159 @@
+import { $ as listAvailableAddonIds, V as getRegistryAddonConfig, ac as readStackSecretEnv, at as writeStackSecretEnv, y as createLogger } from './src-FpMyngcw.js';
+import { b as getState } from './endpoints-L7Wjvq44.js';
+import { d as getRequestId, r as requireAdmin, e as errorResponse, h as jsonResponse, p as parseJsonBody, j as jsonBodyError } from './helpers-5jd3ccud.js';
+import './chunk-CLZ62Ad-.js';
+import 'node:module';
+import 'node:fs';
+import 'node:path';
+import 'node:child_process';
+import 'node:os';
+import 'buffer';
+import 'node:url';
+import 'node:crypto';
+import 'events';
+import 'fs';
+import 'node:events';
+import 'node:stream';
+import 'node:string_decoder';
+import 'path';
+import 'assert';
+import 'zlib';
+import 'node:assert';
+import 'node:fs/promises';
+
+//#region src/routes/admin/addons/[name]/credentials/+server.ts
+var logger = createLogger("addons.name.credentials");
+/**
+* Parse a `.env.schema` file into structured fields.
+*
+* Schema conventions:
+*   - Lines starting with `#` are comments; consecutive comment lines
+*     accumulate as the *description* of the next KEY=VALUE line.
+*   - `# @sensitive` marks the next field as sensitive (renders as a
+*     password input and is masked on GET).
+*   - `# ---` resets the accumulator (used as a section separator).
+*   - `KEY=DEFAULT` declares the field; default may be empty.
+*/
+function parseEnvSchema(text) {
+	const fields = [];
+	let commentBuffer = [];
+	let sensitive = false;
+	for (const rawLine of text.split(/\r?\n/)) {
+		const line = rawLine.trim();
+		if (!line) continue;
+		if (line.startsWith("#")) {
+			const body = line.slice(1).trim();
+			if (body === "---") {
+				commentBuffer = [];
+				sensitive = false;
+				continue;
+			}
+			if (body.startsWith("@")) {
+				if (/\B@sensitive\b/.test(body)) sensitive = true;
+				continue;
+			}
+			commentBuffer.push(body);
+			continue;
+		}
+		const eq = line.indexOf("=");
+		if (eq <= 0) continue;
+		const key = line.slice(0, eq).trim();
+		if (!key) continue;
+		const def = line.slice(eq + 1).trim();
+		fields.push({
+			key,
+			sensitive,
+			description: commentBuffer.join(" ").trim(),
+			default: def
+		});
+		commentBuffer = [];
+		sensitive = false;
+	}
+	return fields;
+}
+var GET = async (event) => {
+	const requestId = getRequestId(event);
+	const authErr = requireAdmin(event, requestId);
+	if (authErr) return authErr;
+	const state = getState();
+	const name = event.params.name;
+	if (!listAvailableAddonIds().includes(name)) return errorResponse(404, "not_found", `Addon "${name}" is not available`, { name }, requestId);
+	let config;
+	try {
+		config = getRegistryAddonConfig(state.homeDir, name);
+	} catch (error) {
+		logger.error("schema read failed", {
+			name,
+			error: String(error),
+			requestId
+		});
+		return errorResponse(500, "internal_error", `Addon "${name}" schema is unavailable`, {}, requestId);
+	}
+	const schemaFields = parseEnvSchema(config.envSchema);
+	const secretEnv = readStackSecretEnv(state.stackDir);
+	return jsonResponse(200, {
+		name,
+		fields: schemaFields.map((f) => {
+			const set = (secretEnv[f.key] ?? "").length > 0;
+			return {
+				key: f.key,
+				sensitive: f.sensitive,
+				description: f.description,
+				default: f.default,
+				set,
+				secret: {
+					envKey: f.key,
+					present: set
+				},
+				value: ""
+			};
+		})
+	}, requestId);
+};
+var POST = async (event) => {
+	const requestId = getRequestId(event);
+	const authErr = requireAdmin(event, requestId);
+	if (authErr) return authErr;
+	const state = getState();
+	const name = event.params.name;
+	if (!listAvailableAddonIds().includes(name)) return errorResponse(404, "not_found", `Addon "${name}" is not available`, { name }, requestId);
+	const parsed = await parseJsonBody(event.request);
+	if ("error" in parsed) return jsonBodyError(parsed, requestId);
+	const valuesRaw = parsed.data.values ?? {};
+	let config;
+	try {
+		config = getRegistryAddonConfig(state.homeDir, name);
+	} catch (error) {
+		logger.error("schema read failed (post)", {
+			name,
+			error: String(error),
+			requestId
+		});
+		return errorResponse(500, "internal_error", `Addon "${name}" schema is unavailable`, {}, requestId);
+	}
+	const allowedKeys = new Set(parseEnvSchema(config.envSchema).map((f) => f.key));
+	const updates = {};
+	for (const [k, v] of Object.entries(valuesRaw)) {
+		if (!allowedKeys.has(k)) continue;
+		updates[k] = typeof v === "string" ? v : "";
+	}
+	if (Object.keys(updates).length === 0) return errorResponse(400, "bad_request", "no schema-declared keys supplied", {}, requestId);
+	try {
+		writeStackSecretEnv(state, updates);
+	} catch (err) {
+		logger.error("write failed", {
+			name,
+			error: String(err),
+			requestId
+		});
+		return errorResponse(500, "internal_error", err instanceof Error ? err.message : "write failed", {}, requestId);
+	}
+	return jsonResponse(200, {
+		ok: true,
+		name,
+		updated: Object.keys(updates).sort()
+	}, requestId);
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts-hMTx0DC3.js.map

package/build/server/chunks/_server.ts-hMTx0DC3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-hMTx0DC3.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/addons/_name_/credentials/_server.ts.js"],"sourcesContent":["import { Nt as createLogger, at as getRegistryAddonConfig, ot as listAvailableAddonIds, vt as readStackSecretEnv, yt as writeStackSecretEnv } from \"../../../../../../chunks/src.js\";\nimport { c as getState } from \"../../../../../../chunks/endpoints.js\";\nimport { c as jsonBodyError, d as requireAdmin, i as errorResponse, l as jsonResponse, o as getRequestId, u as parseJsonBody } from \"../../../../../../chunks/helpers.js\";\n//#region src/routes/admin/addons/[name]/credentials/+server.ts\nvar logger = createLogger(\"addons.name.credentials\");\n/**\n* Parse a `.env.schema` file into structured fields.\n*\n* Schema conventions:\n*   - Lines starting with `#` are comments; consecutive comment lines\n*     accumulate as the *description* of the next KEY=VALUE line.\n*   - `# @sensitive` marks the next field as sensitive (renders as a\n*     password input and is masked on GET).\n*   - `# ---` resets the accumulator (used as a section separator).\n*   - `KEY=DEFAULT` declares the field; default may be empty.\n*/\nfunction parseEnvSchema(text) {\n\tconst fields = [];\n\tlet commentBuffer = [];\n\tlet sensitive = false;\n\tfor (const rawLine of text.split(/\\r?\\n/)) {\n\t\tconst line = rawLine.trim();\n\t\tif (!line) continue;\n\t\tif (line.startsWith(\"#\")) {\n\t\t\tconst body = line.slice(1).trim();\n\t\t\tif (body === \"---\") {\n\t\t\t\tcommentBuffer = [];\n\t\t\t\tsensitive = false;\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (body.startsWith(\"@\")) {\n\t\t\t\tif (/\\B@sensitive\\b/.test(body)) sensitive = true;\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tcommentBuffer.push(body);\n\t\t\tcontinue;\n\t\t}\n\t\tconst eq = line.indexOf(\"=\");\n\t\tif (eq <= 0) continue;\n\t\tconst key = line.slice(0, eq).trim();\n\t\tif (!key) continue;\n\t\tconst def = line.slice(eq + 1).trim();\n\t\tfields.push({\n\t\t\tkey,\n\t\t\tsensitive,\n\t\t\tdescription: commentBuffer.join(\" \").trim(),\n\t\t\tdefault: def\n\t\t});\n\t\tcommentBuffer = [];\n\t\tsensitive = false;\n\t}\n\treturn fields;\n}\nvar GET = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst authErr = requireAdmin(event, requestId);\n\tif (authErr) return authErr;\n\tconst state = getState();\n\tconst name = event.params.name;\n\tif (!listAvailableAddonIds().includes(name)) return errorResponse(404, \"not_found\", `Addon \"${name}\" is not available`, { name }, requestId);\n\tlet config;\n\ttry {\n\t\tconfig = getRegistryAddonConfig(state.homeDir, name);\n\t} catch (error) {\n\t\tlogger.error(\"schema read failed\", {\n\t\t\tname,\n\t\t\terror: String(error),\n\t\t\trequestId\n\t\t});\n\t\treturn errorResponse(500, \"internal_error\", `Addon \"${name}\" schema is unavailable`, {}, requestId);\n\t}\n\tconst schemaFields = parseEnvSchema(config.envSchema);\n\tconst secretEnv = readStackSecretEnv(state.stackDir);\n\treturn jsonResponse(200, {\n\t\tname,\n\t\tfields: schemaFields.map((f) => {\n\t\t\tconst set = (secretEnv[f.key] ?? \"\").length > 0;\n\t\t\treturn {\n\t\t\t\tkey: f.key,\n\t\t\t\tsensitive: f.sensitive,\n\t\t\t\tdescription: f.description,\n\t\t\t\tdefault: f.default,\n\t\t\t\tset,\n\t\t\t\tsecret: {\n\t\t\t\t\tenvKey: f.key,\n\t\t\t\t\tpresent: set\n\t\t\t\t},\n\t\t\t\tvalue: \"\"\n\t\t\t};\n\t\t})\n\t}, requestId);\n};\nvar POST = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst authErr = requireAdmin(event, requestId);\n\tif (authErr) return authErr;\n\tconst state = getState();\n\tconst name = event.params.name;\n\tif (!listAvailableAddonIds().includes(name)) return errorResponse(404, \"not_found\", `Addon \"${name}\" is not available`, { name }, requestId);\n\tconst parsed = await parseJsonBody(event.request);\n\tif (\"error\" in parsed) return jsonBodyError(parsed, requestId);\n\tconst valuesRaw = parsed.data.values ?? {};\n\tlet config;\n\ttry {\n\t\tconfig = getRegistryAddonConfig(state.homeDir, name);\n\t} catch (error) {\n\t\tlogger.error(\"schema read failed (post)\", {\n\t\t\tname,\n\t\t\terror: String(error),\n\t\t\trequestId\n\t\t});\n\t\treturn errorResponse(500, \"internal_error\", `Addon \"${name}\" schema is unavailable`, {}, requestId);\n\t}\n\tconst allowedKeys = new Set(parseEnvSchema(config.envSchema).map((f) => f.key));\n\tconst updates = {};\n\tfor (const [k, v] of Object.entries(valuesRaw)) {\n\t\tif (!allowedKeys.has(k)) continue;\n\t\tupdates[k] = typeof v === \"string\" ? v : \"\";\n\t}\n\tif (Object.keys(updates).length === 0) return errorResponse(400, \"bad_request\", \"no schema-declared keys supplied\", {}, requestId);\n\ttry {\n\t\twriteStackSecretEnv(state, updates);\n\t} catch (err) {\n\t\tlogger.error(\"write failed\", {\n\t\t\tname,\n\t\t\terror: String(err),\n\t\t\trequestId\n\t\t});\n\t\treturn errorResponse(500, \"internal_error\", err instanceof Error ? err.message : \"write failed\", {}, requestId);\n\t}\n\treturn jsonResponse(200, {\n\t\tok: true,\n\t\tname,\n\t\tupdated: Object.keys(updates).sort()\n\t}, requestId);\n};\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAGA;AACA,IAAI,MAAM,GAAG,YAAY,CAAC,yBAAyB,CAAC;AACpD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,cAAc,CAAC,IAAI,EAAE;AAC9B,CAAC,MAAM,MAAM,GAAG,EAAE;AAClB,CAAC,IAAI,aAAa,GAAG,EAAE;AACvB,CAAC,IAAI,SAAS,GAAG,KAAK;AACtB,CAAC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;AAC5C,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE;AAC7B,EAAE,IAAI,CAAC,IAAI,EAAE;AACb,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;AAC5B,GAAG,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;AACpC,GAAG,IAAI,IAAI,KAAK,KAAK,EAAE;AACvB,IAAI,aAAa,GAAG,EAAE;AACtB,IAAI,SAAS,GAAG,KAAK;AACrB,IAAI;AACJ,GAAG;AACH,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;AAC7B,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,GAAG,IAAI;AACrD,IAAI;AACJ,GAAG;AACH,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;AAC3B,GAAG;AACH,EAAE;AACF,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;AAC9B,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;AACf,EAAE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;AACtC,EAAE,IAAI,CAAC,GAAG,EAAE;AACZ,EAAE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE;AACvC,EAAE,MAAM,CAAC,IAAI,CAAC;AACd,GAAG,GAAG;AACN,GAAG,SAAS;AACZ,GAAG,WAAW,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AAC9C,GAAG,OAAO,EAAE;AACZ,GAAG,CAAC;AACJ,EAAE,aAAa,GAAG,EAAE;AACpB,EAAE,SAAS,GAAG,KAAK;AACnB,CAAC;AACD,CAAC,OAAO,MAAM;AACd;AACG,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AAC/C,CAAC,IAAI,OAAO,EAAE,OAAO,OAAO;AAC5B,CAAC,MAAM,KAAK,GAAG,QAAQ,EAAE;AACzB,CAAC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI;AAC/B,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,CAAC;AAC7I,CAAC,IAAI,MAAM;AACX,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;AACtD,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE;AACjB,EAAE,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;AACrC,GAAG,IAAI;AACP,GAAG,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;AACvB,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,uBAAuB,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC;AACrG,CAAC;AACD,CAAC,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC;AACtD,CAAC,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC;AACrD,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE;AAC1B,EAAE,IAAI;AACN,EAAE,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK;AAClC,GAAG,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,GAAG,CAAC;AAClD,GAAG,OAAO;AACV,IAAI,GAAG,EAAE,CAAC,CAAC,GAAG;AACd,IAAI,SAAS,EAAE,CAAC,CAAC,SAAS;AAC1B,IAAI,WAAW,EAAE,CAAC,CAAC,WAAW;AAC9B,IAAI,OAAO,EAAE,CAAC,CAAC,OAAO;AACtB,IAAI,GAAG;AACP,IAAI,MAAM,EAAE;AACZ,KAAK,MAAM,EAAE,CAAC,CAAC,GAAG;AAClB,KAAK,OAAO,EAAE;AACd,KAAK;AACL,IAAI,KAAK,EAAE;AACX,IAAI;AACJ,EAAE,CAAC;AACH,EAAE,EAAE,SAAS,CAAC;AACd;AACG,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AAC/C,CAAC,IAAI,OAAO,EAAE,OAAO,OAAO;AAC5B,CAAC,MAAM,KAAK,GAAG,QAAQ,EAAE;AACzB,CAAC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI;AAC/B,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,CAAC;AAC7I,CAAC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;AAClD,CAAC,IAAI,OAAO,IAAI,MAAM,EAAE,OAAO,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC;AAC/D,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE;AAC3C,CAAC,IAAI,MAAM;AACX,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;AACtD,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE;AACjB,EAAE,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;AAC5C,GAAG,IAAI;AACP,GAAG,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;AACvB,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,uBAAuB,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC;AACrG,CAAC;AACD,CAAC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;AAChF,CAAC,MAAM,OAAO,GAAG,EAAE;AACnB,CAAC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;AACjD,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;AAC3B,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,GAAG,CAAC,GAAG,EAAE;AAC7C,CAAC;AACD,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,kCAAkC,EAAE,EAAE,EAAE,SAAS,CAAC;AACnI,CAAC,IAAI;AACL,EAAE,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC;AACrC,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE;AAC/B,GAAG,IAAI;AACP,GAAG,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;AACrB,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,cAAc,EAAE,EAAE,EAAE,SAAS,CAAC;AACjH,CAAC;AACD,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE;AAC1B,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,IAAI;AACN,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI;AACpC,EAAE,EAAE,SAAS,CAAC;AACd;;;;"}

package/build/server/chunks/_server.ts-l_HoZ2_I.js

@@ -0,0 +1,163 @@
+import { y as createLogger } from './src-FpMyngcw.js';
+import { d as getRequestId, r as requireAdmin, e as errorResponse, g as getOpenCodeClient, h as jsonResponse, p as parseJsonBody, j as jsonBodyError } from './helpers-5jd3ccud.js';
+import './chunk-CLZ62Ad-.js';
+import 'node:module';
+import 'node:fs';
+import 'node:path';
+import 'node:child_process';
+import 'node:os';
+import 'buffer';
+import 'node:url';
+import 'node:crypto';
+import 'events';
+import 'fs';
+import 'node:events';
+import 'node:stream';
+import 'node:string_decoder';
+import 'path';
+import 'assert';
+import 'zlib';
+import 'node:assert';
+import 'node:fs/promises';
+import './endpoints-L7Wjvq44.js';
+
+//#region src/routes/admin/opencode/providers/[id]/auth/+server.ts
+var logger = createLogger("opencode.auth");
+var MAX_API_KEY_LENGTH = 512;
+var API_KEY_PATTERN = /^[\x20-\x7E]+$/;
+var OAUTH_SESSION_TTL_MS = 6e5;
+var MAX_PROVIDER_ID_LENGTH = 128;
+var PROVIDER_ID_PATTERN = /^[a-zA-Z0-9_.-]+$/;
+function validateApiKey(key) {
+	if (key.length > MAX_API_KEY_LENGTH) return "API key exceeds maximum length";
+	if (!API_KEY_PATTERN.test(key)) return "API key contains invalid characters";
+	return null;
+}
+var oauthSessions = /* @__PURE__ */ new Map();
+function purgeExpiredSessions() {
+	const now = Date.now();
+	for (const [token, session] of oauthSessions) if (now - session.createdAt > OAUTH_SESSION_TTL_MS) oauthSessions.delete(token);
+}
+var GET = async (event) => {
+	const requestId = getRequestId(event);
+	const authError = requireAdmin(event, requestId);
+	if (authError) return authError;
+	const pollToken = event.url.searchParams.get("pollToken");
+	if (!pollToken) return errorResponse(400, "bad_request", "pollToken query parameter is required", {}, requestId);
+	purgeExpiredSessions();
+	const session = oauthSessions.get(pollToken);
+	if (!session) return errorResponse(404, "not_found", "Poll session not found or expired", {}, requestId);
+	if (event.params.id !== session.providerId) return errorResponse(400, "bad_request", "Provider ID does not match poll session", {}, requestId);
+	if ((await getOpenCodeClient().completeProviderOAuth(session.providerId, session.methodIndex)).ok) {
+		oauthSessions.delete(pollToken);
+		logger.info("oauth authorization completed", {
+			providerId: session.providerId,
+			requestId
+		});
+		return jsonResponse(200, {
+			status: "complete",
+			message: "Authorization successful"
+		}, requestId);
+	}
+	if (Date.now() - session.createdAt > OAUTH_SESSION_TTL_MS) {
+		oauthSessions.delete(pollToken);
+		return jsonResponse(200, {
+			status: "error",
+			message: "Authorization session expired"
+		}, requestId);
+	}
+	return jsonResponse(200, {
+		status: "pending",
+		message: "Waiting for authorization..."
+	}, requestId);
+};
+var POST = async (event) => {
+	const requestId = getRequestId(event);
+	const authError = requireAdmin(event, requestId);
+	if (authError) return authError;
+	const result = await parseJsonBody(event.request);
+	if ("error" in result) return jsonBodyError(result, requestId);
+	const body = result.data;
+	const providerId = event.params.id;
+	const mode = typeof body.mode === "string" ? body.mode : "";
+	if (!providerId || providerId.length > MAX_PROVIDER_ID_LENGTH || !PROVIDER_ID_PATTERN.test(providerId)) return errorResponse(400, "bad_request", "Invalid provider ID", {}, requestId);
+	purgeExpiredSessions();
+	if (mode === "api_key") {
+		const apiKey = typeof body.apiKey === "string" ? body.apiKey.trim() : "";
+		if (!apiKey) return errorResponse(400, "bad_request", "apiKey is required for api_key mode", {}, requestId);
+		const keyError = validateApiKey(apiKey);
+		if (keyError) return errorResponse(400, "bad_request", keyError, {}, requestId);
+		const result = await getOpenCodeClient().setProviderApiKey(providerId, apiKey);
+		if (!result.ok) {
+			logger.warn("provider api key save failed", {
+				providerId,
+				requestId,
+				error: result.code
+			});
+			return errorResponse(result.status, result.code, result.message, {}, requestId);
+		}
+		logger.info("provider API key saved to OpenCode auth.json", {
+			providerId,
+			requestId
+		});
+		return jsonResponse(200, {
+			ok: true,
+			mode: "api_key"
+		}, requestId);
+	}
+	if (mode === "oauth") {
+		if (typeof body.methodIndex !== "undefined" && (typeof body.methodIndex !== "number" || !Number.isInteger(body.methodIndex) || body.methodIndex < 0)) return errorResponse(400, "bad_request", "methodIndex must be a non-negative integer", {}, requestId);
+		const methodIndex = typeof body.methodIndex === "number" ? body.methodIndex : 0;
+		const result = await getOpenCodeClient().startProviderOAuth(providerId, methodIndex);
+		if (!result.ok) return errorResponse(result.status, result.code, result.message, {}, requestId);
+		const data = result.data;
+		const pollToken = crypto.randomUUID();
+		oauthSessions.set(pollToken, {
+			providerId,
+			methodIndex,
+			createdAt: Date.now()
+		});
+		logger.info("oauth authorization started", {
+			providerId,
+			methodIndex,
+			requestId
+		});
+		return jsonResponse(200, {
+			ok: true,
+			mode: "oauth",
+			pollToken,
+			url: data.url,
+			method: data.method,
+			instructions: data.instructions
+		}, requestId);
+	}
+	return errorResponse(400, "bad_request", "mode must be api_key or oauth", {}, requestId);
+};
+/**
+* DELETE /admin/opencode/providers/:id/auth — Disconnect a provider by
+* removing its credential from OpenCode's auth.json.
+*/
+var DELETE = async (event) => {
+	const requestId = getRequestId(event);
+	const authError = requireAdmin(event, requestId);
+	if (authError) return authError;
+	const providerId = event.params.id ?? "";
+	if (!providerId || providerId.length > MAX_PROVIDER_ID_LENGTH || !PROVIDER_ID_PATTERN.test(providerId)) return errorResponse(400, "bad_request", "Invalid provider ID", {}, requestId);
+	const result = await getOpenCodeClient().proxy(`/auth/${encodeURIComponent(providerId)}`, { method: "DELETE" });
+	if (!result.ok) {
+		logger.warn("provider disconnect failed", {
+			providerId,
+			requestId,
+			error: result.code
+		});
+		return errorResponse(result.status, result.code, result.message, {}, requestId);
+	}
+	logger.info("provider credential removed via OpenCode /auth DELETE", {
+		providerId,
+		requestId
+	});
+	return jsonResponse(200, { ok: true }, requestId);
+};
+
+export { DELETE, GET, POST };
+//# sourceMappingURL=_server.ts-l_HoZ2_I.js.map

package/build/server/chunks/_server.ts-l_HoZ2_I.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-l_HoZ2_I.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/opencode/providers/_id_/auth/_server.ts.js"],"sourcesContent":["import { Nt as createLogger } from \"../../../../../../../chunks/src.js\";\nimport { a as getOpenCodeClient, c as jsonBodyError, d as requireAdmin, i as errorResponse, l as jsonResponse, o as getRequestId, u as parseJsonBody } from \"../../../../../../../chunks/helpers.js\";\n//#region src/routes/admin/opencode/providers/[id]/auth/+server.ts\nvar logger = createLogger(\"opencode.auth\");\nvar MAX_API_KEY_LENGTH = 512;\nvar API_KEY_PATTERN = /^[\\x20-\\x7E]+$/;\nvar OAUTH_SESSION_TTL_MS = 6e5;\nvar MAX_PROVIDER_ID_LENGTH = 128;\nvar PROVIDER_ID_PATTERN = /^[a-zA-Z0-9_.-]+$/;\nfunction validateApiKey(key) {\n\tif (key.length > MAX_API_KEY_LENGTH) return \"API key exceeds maximum length\";\n\tif (!API_KEY_PATTERN.test(key)) return \"API key contains invalid characters\";\n\treturn null;\n}\nvar oauthSessions = /* @__PURE__ */ new Map();\nfunction purgeExpiredSessions() {\n\tconst now = Date.now();\n\tfor (const [token, session] of oauthSessions) if (now - session.createdAt > OAUTH_SESSION_TTL_MS) oauthSessions.delete(token);\n}\nvar GET = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst pollToken = event.url.searchParams.get(\"pollToken\");\n\tif (!pollToken) return errorResponse(400, \"bad_request\", \"pollToken query parameter is required\", {}, requestId);\n\tpurgeExpiredSessions();\n\tconst session = oauthSessions.get(pollToken);\n\tif (!session) return errorResponse(404, \"not_found\", \"Poll session not found or expired\", {}, requestId);\n\tif (event.params.id !== session.providerId) return errorResponse(400, \"bad_request\", \"Provider ID does not match poll session\", {}, requestId);\n\tif ((await getOpenCodeClient().completeProviderOAuth(session.providerId, session.methodIndex)).ok) {\n\t\toauthSessions.delete(pollToken);\n\t\tlogger.info(\"oauth authorization completed\", {\n\t\t\tproviderId: session.providerId,\n\t\t\trequestId\n\t\t});\n\t\treturn jsonResponse(200, {\n\t\t\tstatus: \"complete\",\n\t\t\tmessage: \"Authorization successful\"\n\t\t}, requestId);\n\t}\n\tif (Date.now() - session.createdAt > OAUTH_SESSION_TTL_MS) {\n\t\toauthSessions.delete(pollToken);\n\t\treturn jsonResponse(200, {\n\t\t\tstatus: \"error\",\n\t\t\tmessage: \"Authorization session expired\"\n\t\t}, requestId);\n\t}\n\treturn jsonResponse(200, {\n\t\tstatus: \"pending\",\n\t\tmessage: \"Waiting for authorization...\"\n\t}, requestId);\n};\nvar POST = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst result = await parseJsonBody(event.request);\n\tif (\"error\" in result) return jsonBodyError(result, requestId);\n\tconst body = result.data;\n\tconst providerId = event.params.id;\n\tconst mode = typeof body.mode === \"string\" ? body.mode : \"\";\n\tif (!providerId || providerId.length > MAX_PROVIDER_ID_LENGTH || !PROVIDER_ID_PATTERN.test(providerId)) return errorResponse(400, \"bad_request\", \"Invalid provider ID\", {}, requestId);\n\tpurgeExpiredSessions();\n\tif (mode === \"api_key\") {\n\t\tconst apiKey = typeof body.apiKey === \"string\" ? body.apiKey.trim() : \"\";\n\t\tif (!apiKey) return errorResponse(400, \"bad_request\", \"apiKey is required for api_key mode\", {}, requestId);\n\t\tconst keyError = validateApiKey(apiKey);\n\t\tif (keyError) return errorResponse(400, \"bad_request\", keyError, {}, requestId);\n\t\tconst result = await getOpenCodeClient().setProviderApiKey(providerId, apiKey);\n\t\tif (!result.ok) {\n\t\t\tlogger.warn(\"provider api key save failed\", {\n\t\t\t\tproviderId,\n\t\t\t\trequestId,\n\t\t\t\terror: result.code\n\t\t\t});\n\t\t\treturn errorResponse(result.status, result.code, result.message, {}, requestId);\n\t\t}\n\t\tlogger.info(\"provider API key saved to OpenCode auth.json\", {\n\t\t\tproviderId,\n\t\t\trequestId\n\t\t});\n\t\treturn jsonResponse(200, {\n\t\t\tok: true,\n\t\t\tmode: \"api_key\"\n\t\t}, requestId);\n\t}\n\tif (mode === \"oauth\") {\n\t\tif (typeof body.methodIndex !== \"undefined\" && (typeof body.methodIndex !== \"number\" || !Number.isInteger(body.methodIndex) || body.methodIndex < 0)) return errorResponse(400, \"bad_request\", \"methodIndex must be a non-negative integer\", {}, requestId);\n\t\tconst methodIndex = typeof body.methodIndex === \"number\" ? body.methodIndex : 0;\n\t\tconst result = await getOpenCodeClient().startProviderOAuth(providerId, methodIndex);\n\t\tif (!result.ok) return errorResponse(result.status, result.code, result.message, {}, requestId);\n\t\tconst data = result.data;\n\t\tconst pollToken = crypto.randomUUID();\n\t\toauthSessions.set(pollToken, {\n\t\t\tproviderId,\n\t\t\tmethodIndex,\n\t\t\tcreatedAt: Date.now()\n\t\t});\n\t\tlogger.info(\"oauth authorization started\", {\n\t\t\tproviderId,\n\t\t\tmethodIndex,\n\t\t\trequestId\n\t\t});\n\t\treturn jsonResponse(200, {\n\t\t\tok: true,\n\t\t\tmode: \"oauth\",\n\t\t\tpollToken,\n\t\t\turl: data.url,\n\t\t\tmethod: data.method,\n\t\t\tinstructions: data.instructions\n\t\t}, requestId);\n\t}\n\treturn errorResponse(400, \"bad_request\", \"mode must be api_key or oauth\", {}, requestId);\n};\n/**\n* DELETE /admin/opencode/providers/:id/auth — Disconnect a provider by\n* removing its credential from OpenCode's auth.json.\n*/\nvar DELETE = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst providerId = event.params.id ?? \"\";\n\tif (!providerId || providerId.length > MAX_PROVIDER_ID_LENGTH || !PROVIDER_ID_PATTERN.test(providerId)) return errorResponse(400, \"bad_request\", \"Invalid provider ID\", {}, requestId);\n\tconst result = await getOpenCodeClient().proxy(`/auth/${encodeURIComponent(providerId)}`, { method: \"DELETE\" });\n\tif (!result.ok) {\n\t\tlogger.warn(\"provider disconnect failed\", {\n\t\t\tproviderId,\n\t\t\trequestId,\n\t\t\terror: result.code\n\t\t});\n\t\treturn errorResponse(result.status, result.code, result.message, {}, requestId);\n\t}\n\tlogger.info(\"provider credential removed via OpenCode /auth DELETE\", {\n\t\tproviderId,\n\t\trequestId\n\t});\n\treturn jsonResponse(200, { ok: true }, requestId);\n};\n//#endregion\nexport { DELETE, GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAEA;AACA,IAAI,MAAM,GAAG,YAAY,CAAC,eAAe,CAAC;AAC1C,IAAI,kBAAkB,GAAG,GAAG;AAC5B,IAAI,eAAe,GAAG,gBAAgB;AACtC,IAAI,oBAAoB,GAAG,GAAG;AAC9B,IAAI,sBAAsB,GAAG,GAAG;AAChC,IAAI,mBAAmB,GAAG,mBAAmB;AAC7C,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,kBAAkB,EAAE,OAAO,gCAAgC;AAC7E,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,qCAAqC;AAC7E,CAAC,OAAO,IAAI;AACZ;AACA,IAAI,aAAa,mBAAmB,IAAI,GAAG,EAAE;AAC7C,SAAS,oBAAoB,GAAG;AAChC,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;AACvB,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,aAAa,EAAE,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,GAAG,oBAAoB,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAC9H;AACG,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC;AAC1D,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,uCAAuC,EAAE,EAAE,EAAE,SAAS,CAAC;AACjH,CAAC,oBAAoB,EAAE;AACvB,CAAC,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC;AAC7C,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,WAAW,EAAE,mCAAmC,EAAE,EAAE,EAAE,SAAS,CAAC;AACzG,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,OAAO,CAAC,UAAU,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,yCAAyC,EAAE,EAAE,EAAE,SAAS,CAAC;AAC/I,CAAC,IAAI,CAAC,MAAM,iBAAiB,EAAE,CAAC,qBAAqB,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE;AACpG,EAAE,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;AACjC,EAAE,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;AAC/C,GAAG,UAAU,EAAE,OAAO,CAAC,UAAU;AACjC,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE;AAC3B,GAAG,MAAM,EAAE,UAAU;AACrB,GAAG,OAAO,EAAE;AACZ,GAAG,EAAE,SAAS,CAAC;AACf,CAAC;AACD,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,GAAG,oBAAoB,EAAE;AAC5D,EAAE,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;AACjC,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE;AAC3B,GAAG,MAAM,EAAE,OAAO;AAClB,GAAG,OAAO,EAAE;AACZ,GAAG,EAAE,SAAS,CAAC;AACf,CAAC;AACD,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE;AAC1B,EAAE,MAAM,EAAE,SAAS;AACnB,EAAE,OAAO,EAAE;AACX,EAAE,EAAE,SAAS,CAAC;AACd;AACG,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;AAClD,CAAC,IAAI,OAAO,IAAI,MAAM,EAAE,OAAO,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC;AAC/D,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AACzB,CAAC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE;AACnC,CAAC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,GAAG,IAAI,CAAC,IAAI,GAAG,EAAE;AAC5D,CAAC,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,sBAAsB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,qBAAqB,EAAE,EAAE,EAAE,SAAS,CAAC;AACvL,CAAC,oBAAoB,EAAE;AACvB,CAAC,IAAI,IAAI,KAAK,SAAS,EAAE;AACzB,EAAE,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;AAC1E,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,qCAAqC,EAAE,EAAE,EAAE,SAAS,CAAC;AAC7G,EAAE,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC;AACzC,EAAE,IAAI,QAAQ,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,CAAC;AACjF,EAAE,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC,iBAAiB,CAAC,UAAU,EAAE,MAAM,CAAC;AAChF,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE;AAClB,GAAG,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;AAC/C,IAAI,UAAU;AACd,IAAI,SAAS;AACb,IAAI,KAAK,EAAE,MAAM,CAAC;AAClB,IAAI,CAAC;AACL,GAAG,OAAO,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,CAAC;AAClF,EAAE;AACF,EAAE,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE;AAC9D,GAAG,UAAU;AACb,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE;AAC3B,GAAG,EAAE,EAAE,IAAI;AACX,GAAG,IAAI,EAAE;AACT,GAAG,EAAE,SAAS,CAAC;AACf,CAAC;AACD,CAAC,IAAI,IAAI,KAAK,OAAO,EAAE;AACvB,EAAE,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,WAAW,KAAK,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,4CAA4C,EAAE,EAAE,EAAE,SAAS,CAAC;AAC7P,EAAE,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,GAAG,IAAI,CAAC,WAAW,GAAG,CAAC;AACjF,EAAE,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC,kBAAkB,CAAC,UAAU,EAAE,WAAW,CAAC;AACtF,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,CAAC;AACjG,EAAE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AAC1B,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE;AACvC,EAAE,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE;AAC/B,GAAG,UAAU;AACb,GAAG,WAAW;AACd,GAAG,SAAS,EAAE,IAAI,CAAC,GAAG;AACtB,GAAG,CAAC;AACJ,EAAE,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;AAC7C,GAAG,UAAU;AACb,GAAG,WAAW;AACd,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE;AAC3B,GAAG,EAAE,EAAE,IAAI;AACX,GAAG,IAAI,EAAE,OAAO;AAChB,GAAG,SAAS;AACZ,GAAG,GAAG,EAAE,IAAI,CAAC,GAAG;AAChB,GAAG,MAAM,EAAE,IAAI,CAAC,MAAM;AACtB,GAAG,YAAY,EAAE,IAAI,CAAC;AACtB,GAAG,EAAE,SAAS,CAAC;AACf,CAAC;AACD,CAAC,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,+BAA+B,EAAE,EAAE,EAAE,SAAS,CAAC;AACzF;AACA;AACA;AACA;AACA;AACG,IAAC,MAAM,GAAG,OAAO,KAAK,KAAK;AAC9B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE;AACzC,CAAC,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,sBAAsB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,qBAAqB,EAAE,EAAE,EAAE,SAAS,CAAC;AACvL,CAAC,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAChH,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE;AACjB,EAAE,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;AAC5C,GAAG,UAAU;AACb,GAAG,SAAS;AACZ,GAAG,KAAK,EAAE,MAAM,CAAC;AACjB,GAAG,CAAC;AACJ,EAAE,OAAO,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,CAAC;AACjF,CAAC;AACD,CAAC,MAAM,CAAC,IAAI,CAAC,uDAAuD,EAAE;AACtE,EAAE,UAAU;AACZ,EAAE;AACF,EAAE,CAAC;AACH,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,CAAC;AAClD;;;;"}

package/build/server/chunks/_server.ts-uLRX2uy0.js

@@ -0,0 +1,107 @@
+import { j as json } from './exports-D1quPX8S.js';
+import { spawn } from 'node:child_process';
+import './utils-BSRjJDrZ.js';
+
+//#region src/routes/api/setup/opencode/ensure/+server.ts
+/**
+* POST /api/setup/opencode/ensure
+*
+* Ensures an OpenCode server is running for the setup wizard.
+* 1. Checks the configured OP_OPENCODE_URL / OP_ASSISTANT_PORT first.
+* 2. If unreachable, starts a dedicated `opencode serve` subprocess via the SDK.
+* 3. Returns { ok, url, started } — client updates its OP_OPENCODE_URL accordingly.
+*
+* No auth required — called during pre-setup wizard initialization.
+*/
+var _url = null;
+var _proc = null;
+function killWizardOpencode() {
+	const proc = _proc;
+	if (proc && proc.exitCode === null && proc.pid) try {
+		proc.kill("SIGTERM");
+	} catch {}
+}
+if (!globalThis.__opWizardOpencodeReaper) {
+	globalThis.__opWizardOpencodeReaper = true;
+	process.on("SIGTERM", killWizardOpencode);
+	process.on("SIGINT", killWizardOpencode);
+	process.on("exit", killWizardOpencode);
+}
+async function checkReachable(url) {
+	try {
+		return (await fetch(`${url}/provider`, { signal: AbortSignal.timeout(2e3) })).ok;
+	} catch {
+		return false;
+	}
+}
+function spawnOpencodeServer() {
+	return new Promise((resolve, reject) => {
+		const proc = spawn("opencode", [
+			"serve",
+			"--hostname=127.0.0.1",
+			"--port=0"
+		], {
+			env: process.env,
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			]
+		});
+		_proc = proc;
+		const timer = setTimeout(() => {
+			proc.kill();
+			reject(/* @__PURE__ */ new Error("Timed out waiting for OpenCode server to start (15s)"));
+		}, 15e3);
+		let out = "";
+		proc.stdout?.on("data", (chunk) => {
+			out += chunk.toString();
+			for (const line of out.split("\n")) if (line.includes("server listening")) {
+				const m = line.match(/on\s+(https?:\/\/[^\s]+)/);
+				if (m) {
+					clearTimeout(timer);
+					resolve(m[1]);
+				}
+			}
+		});
+		proc.on("exit", (code) => {
+			clearTimeout(timer);
+			if (code !== 0) reject(/* @__PURE__ */ new Error(`OpenCode exited (code ${code}). Output: ${out.slice(0, 300)}`));
+		});
+		proc.on("error", (err) => {
+			clearTimeout(timer);
+			reject(err);
+		});
+	});
+}
+var POST = async () => {
+	const configuredUrl = process.env.OP_OPENCODE_URL ?? process.env.OP_ASSISTANT_URL ?? `http://localhost:${process.env.OP_ASSISTANT_PORT ?? "3800"}`;
+	if (await checkReachable(configuredUrl)) return json({
+		ok: true,
+		url: configuredUrl,
+		started: false
+	});
+	if (_url && await checkReachable(_url)) return json({
+		ok: true,
+		url: _url,
+		started: false
+	});
+	try {
+		const url = await spawnOpencodeServer();
+		_url = url;
+		process.env.OP_OPENCODE_URL = url;
+		return json({
+			ok: true,
+			url,
+			started: true
+		});
+	} catch (err) {
+		return json({
+			ok: false,
+			error: err instanceof Error ? err.message : "Failed to start OpenCode"
+		});
+	}
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-uLRX2uy0.js.map

package/build/server/chunks/_server.ts-uLRX2uy0.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-uLRX2uy0.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/setup/opencode/ensure/_server.ts.js"],"sourcesContent":["import { r as json } from \"../../../../../../chunks/exports.js\";\nimport { spawn } from \"node:child_process\";\n//#region src/routes/api/setup/opencode/ensure/+server.ts\n/**\n* POST /api/setup/opencode/ensure\n*\n* Ensures an OpenCode server is running for the setup wizard.\n* 1. Checks the configured OP_OPENCODE_URL / OP_ASSISTANT_PORT first.\n* 2. If unreachable, starts a dedicated `opencode serve` subprocess via the SDK.\n* 3. Returns { ok, url, started } — client updates its OP_OPENCODE_URL accordingly.\n*\n* No auth required — called during pre-setup wizard initialization.\n*/\nvar _url = null;\nvar _proc = null;\nfunction killWizardOpencode() {\n\tconst proc = _proc;\n\tif (proc && proc.exitCode === null && proc.pid) try {\n\t\tproc.kill(\"SIGTERM\");\n\t} catch {}\n}\nif (!globalThis.__opWizardOpencodeReaper) {\n\tglobalThis.__opWizardOpencodeReaper = true;\n\tprocess.on(\"SIGTERM\", killWizardOpencode);\n\tprocess.on(\"SIGINT\", killWizardOpencode);\n\tprocess.on(\"exit\", killWizardOpencode);\n}\nasync function checkReachable(url) {\n\ttry {\n\t\treturn (await fetch(`${url}/provider`, { signal: AbortSignal.timeout(2e3) })).ok;\n\t} catch {\n\t\treturn false;\n\t}\n}\nfunction spawnOpencodeServer() {\n\treturn new Promise((resolve, reject) => {\n\t\tconst proc = spawn(\"opencode\", [\n\t\t\t\"serve\",\n\t\t\t\"--hostname=127.0.0.1\",\n\t\t\t\"--port=0\"\n\t\t], {\n\t\t\tenv: process.env,\n\t\t\tstdio: [\n\t\t\t\t\"ignore\",\n\t\t\t\t\"pipe\",\n\t\t\t\t\"pipe\"\n\t\t\t]\n\t\t});\n\t\t_proc = proc;\n\t\tconst timer = setTimeout(() => {\n\t\t\tproc.kill();\n\t\t\treject(/* @__PURE__ */ new Error(\"Timed out waiting for OpenCode server to start (15s)\"));\n\t\t}, 15e3);\n\t\tlet out = \"\";\n\t\tproc.stdout?.on(\"data\", (chunk) => {\n\t\t\tout += chunk.toString();\n\t\t\tfor (const line of out.split(\"\\n\")) if (line.includes(\"server listening\")) {\n\t\t\t\tconst m = line.match(/on\\s+(https?:\\/\\/[^\\s]+)/);\n\t\t\t\tif (m) {\n\t\t\t\t\tclearTimeout(timer);\n\t\t\t\t\tresolve(m[1]);\n\t\t\t\t}\n\t\t\t}\n\t\t});\n\t\tproc.on(\"exit\", (code) => {\n\t\t\tclearTimeout(timer);\n\t\t\tif (code !== 0) reject(/* @__PURE__ */ new Error(`OpenCode exited (code ${code}). Output: ${out.slice(0, 300)}`));\n\t\t});\n\t\tproc.on(\"error\", (err) => {\n\t\t\tclearTimeout(timer);\n\t\t\treject(err);\n\t\t});\n\t});\n}\nvar POST = async () => {\n\tconst configuredUrl = process.env.OP_OPENCODE_URL ?? process.env.OP_ASSISTANT_URL ?? `http://localhost:${process.env.OP_ASSISTANT_PORT ?? \"3800\"}`;\n\tif (await checkReachable(configuredUrl)) return json({\n\t\tok: true,\n\t\turl: configuredUrl,\n\t\tstarted: false\n\t});\n\tif (_url && await checkReachable(_url)) return json({\n\t\tok: true,\n\t\turl: _url,\n\t\tstarted: false\n\t});\n\ttry {\n\t\tconst url = await spawnOpencodeServer();\n\t\t_url = url;\n\t\tprocess.env.OP_OPENCODE_URL = url;\n\t\treturn json({\n\t\t\tok: true,\n\t\t\turl,\n\t\t\tstarted: true\n\t\t});\n\t} catch (err) {\n\t\treturn json({\n\t\t\tok: false,\n\t\t\terror: err instanceof Error ? err.message : \"Failed to start OpenCode\"\n\t\t});\n\t}\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,IAAI,GAAG,IAAI;AACf,IAAI,KAAK,GAAG,IAAI;AAChB,SAAS,kBAAkB,GAAG;AAC9B,CAAC,MAAM,IAAI,GAAG,KAAK;AACnB,CAAC,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI;AACrD,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;AACtB,CAAC,CAAC,CAAC,MAAM,CAAC;AACV;AACA,IAAI,CAAC,UAAU,CAAC,wBAAwB,EAAE;AAC1C,CAAC,UAAU,CAAC,wBAAwB,GAAG,IAAI;AAC3C,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,kBAAkB,CAAC;AAC1C,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,kBAAkB,CAAC;AACzC,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,CAAC;AACvC;AACA,eAAe,cAAc,CAAC,GAAG,EAAE;AACnC,CAAC,IAAI;AACL,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;AAClF,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,KAAK;AACd,CAAC;AACD;AACA,SAAS,mBAAmB,GAAG;AAC/B,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK;AACzC,EAAE,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,EAAE;AACjC,GAAG,OAAO;AACV,GAAG,sBAAsB;AACzB,GAAG;AACH,GAAG,EAAE;AACL,GAAG,GAAG,EAAE,OAAO,CAAC,GAAG;AACnB,GAAG,KAAK,EAAE;AACV,IAAI,QAAQ;AACZ,IAAI,MAAM;AACV,IAAI;AACJ;AACA,GAAG,CAAC;AACJ,EAAE,KAAK,GAAG,IAAI;AACd,EAAE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM;AACjC,GAAG,IAAI,CAAC,IAAI,EAAE;AACd,GAAG,MAAM,iBAAiB,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;AAC5F,EAAE,CAAC,EAAE,IAAI,CAAC;AACV,EAAE,IAAI,GAAG,GAAG,EAAE;AACd,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,KAAK;AACrC,GAAG,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE;AAC1B,GAAG,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE;AAC9E,IAAI,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC;AACpD,IAAI,IAAI,CAAC,EAAE;AACX,KAAK,YAAY,CAAC,KAAK,CAAC;AACxB,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClB,IAAI;AACJ,GAAG;AACH,EAAE,CAAC,CAAC;AACJ,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK;AAC5B,GAAG,YAAY,CAAC,KAAK,CAAC;AACtB,GAAG,IAAI,IAAI,KAAK,CAAC,EAAE,MAAM,iBAAiB,IAAI,KAAK,CAAC,CAAC,sBAAsB,EAAE,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACpH,EAAE,CAAC,CAAC;AACJ,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,KAAK;AAC5B,GAAG,YAAY,CAAC,KAAK,CAAC;AACtB,GAAG,MAAM,CAAC,GAAG,CAAC;AACd,EAAE,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AACH;AACG,IAAC,IAAI,GAAG,YAAY;AACvB,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,MAAM,CAAC,CAAC;AACnJ,CAAC,IAAI,MAAM,cAAc,CAAC,aAAa,CAAC,EAAE,OAAO,IAAI,CAAC;AACtD,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,GAAG,EAAE,aAAa;AACpB,EAAE,OAAO,EAAE;AACX,EAAE,CAAC;AACH,CAAC,IAAI,IAAI,IAAI,MAAM,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI,CAAC;AACrD,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,GAAG,EAAE,IAAI;AACX,EAAE,OAAO,EAAE;AACX,EAAE,CAAC;AACH,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,GAAG,MAAM,mBAAmB,EAAE;AACzC,EAAE,IAAI,GAAG,GAAG;AACZ,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,GAAG;AACnC,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,EAAE,EAAE,IAAI;AACX,GAAG,GAAG;AACN,GAAG,OAAO,EAAE;AACZ,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,EAAE,EAAE,KAAK;AACZ,GAAG,KAAK,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG;AAC/C,GAAG,CAAC;AACJ,CAAC;AACD;;;;"}