@openpalm/ui 0.12.43 → 0.12.44-beta.2

package/build/server/chunks/{_server.ts-BLyrDZLE.js → _server.ts-D9LioPhs.js}

@@ -1,30 +1,30 @@
 import { j as json } from './exports-D1quPX8S.js';
 import { a as PROVIDER_KEY_MAP } from './provider-constants-DPrj3yBX.js';
-import { ad as isSetupComplete, aL as resolveStackDir, Q as detectGpu, T as detectLocalProviders, R as detectHostOpenCode, aF as recommendSetup, i as authJsonPath } from './src-DcuneJUw.js';
-import { g as getState } from './state-MmHt_vDW.js';
-import { r as requireAdmin, d as getRequestId, g as getOpenCodeClient } from './helpers-WANaufOR.js';
+import { aa as isSetupComplete, aJ as resolveOpenPalmHome, M as detectGpu, O as detectLocalProviders, N as detectHostOpenCode, aD as recommendSetup, i as authJsonPath } from './src-O9QA_b9U.js';
+import { g as getState } from './state-DjoSRCLN.js';
+import { r as requireAdmin, d as getRequestId, g as getOpenCodeClient } from './helpers-C_e8wlRS.js';
 import { existsSync, readFileSync } from 'node:fs';
 import './utils-BSRjJDrZ.js';
 import './chunk-CLZ62Ad-.js';
 import 'node:module';
 import './dist-DOFcG0Zp.js';
 import 'node:path';
-import 'buffer';
-import 'fs';
-import 'path';
 import 'node:child_process';
+import 'buffer';
 import 'node:url';
 import 'node:crypto';
 import 'events';
+import 'fs';
 import 'node:events';
 import 'node:stream';
 import 'node:string_decoder';
+import 'path';
 import 'assert';
 import 'zlib';
 import 'node:assert';
 import 'node:fs/promises';
 import 'node:os';
-import './endpoints-BuXHAGnZ.js';
+import './endpoints-B5kqgVQo.js';
 
 //#region src/routes/api/setup/recommend/+server.ts
 /** Local providers are detected separately as host providers — exclude from "cloud". */
@@ -54,7 +54,7 @@ function envKeyConnected() {
 /** Cloud providers = OpenCode connected[] ∪ auth.json credentials, minus locals.
 *  Falls back to env-key detection when OpenCode is unavailable. */
 async function detectCloudProviders() {
-	let connected = [];
+	let connected;
 	try {
 		const client = getOpenCodeClient();
 		if (await client.isAvailable()) {
@@ -68,7 +68,7 @@ async function detectCloudProviders() {
 	return connected.filter((id) => !LOCAL_PROVIDER_IDS.has(id));
 }
 var GET = async (event) => {
-	if (isSetupComplete(resolveStackDir())) {
+	if (isSetupComplete(resolveOpenPalmHome())) {
 		const authError = requireAdmin(event, getRequestId(event));
 		if (authError) return authError;
 	}
@@ -97,4 +97,4 @@ var GET = async (event) => {
 };
 
 export { GET };
-//# sourceMappingURL=_server.ts-BLyrDZLE.js.map
+//# sourceMappingURL=_server.ts-D9LioPhs.js.map

package/build/server/chunks/_server.ts-D9LioPhs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-D9LioPhs.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/setup/recommend/_server.ts.js"],"sourcesContent":["import { r as json } from \"../../../../../chunks/exports.js\";\nimport { i as PROVIDER_KEY_MAP } from \"../../../../../chunks/provider-constants.js\";\nimport { Zt as authJsonPath, c as recommendSetup, dt as isSetupComplete, i as detectHostOpenCode, l as detectGpu, on as resolveOpenPalmHome, u as detectLocalProviders } from \"../../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../../chunks/state.js\";\nimport { a as getOpenCodeClient, d as requireAdmin, o as getRequestId } from \"../../../../../chunks/helpers.js\";\nimport { existsSync, readFileSync } from \"node:fs\";\n//#region src/routes/api/setup/recommend/+server.ts\n/** Local providers are detected separately as host providers — exclude from \"cloud\". */\nvar LOCAL_PROVIDER_IDS = new Set([\n\t\"ollama\",\n\t\"lmstudio\",\n\t\"model-runner\",\n\t\"openai-compatible\"\n]);\n/** Providers that have credentials stored in OP_HOME auth.json (API key or OAuth). */\nfunction authJsonConnected() {\n\ttry {\n\t\tconst path = authJsonPath(getState());\n\t\tif (!existsSync(path)) return [];\n\t\tconst data = JSON.parse(readFileSync(path, \"utf-8\"));\n\t\treturn Object.keys(data ?? {});\n\t} catch {\n\t\treturn [];\n\t}\n}\n/** Fallback: providers whose API-key env var is present in the process env. */\nfunction envKeyConnected() {\n\tconst out = [];\n\tfor (const [provider, envVar] of Object.entries(PROVIDER_KEY_MAP)) if (process.env[envVar]) out.push(provider);\n\treturn out;\n}\n/** Cloud providers = OpenCode connected[] ∪ auth.json credentials, minus locals.\n*  Falls back to env-key detection when OpenCode is unavailable. */\nasync function detectCloudProviders() {\n\tlet connected;\n\ttry {\n\t\tconst client = getOpenCodeClient();\n\t\tif (await client.isAvailable()) {\n\t\t\tconst catalog = await client.proxy(\"/provider\");\n\t\t\tconst raw = catalog.ok ? catalog.data : {};\n\t\t\tconnected = Array.from(new Set([...raw.connected ?? [], ...authJsonConnected()]));\n\t\t} else connected = Array.from(new Set([...authJsonConnected(), ...envKeyConnected()]));\n\t} catch {\n\t\tconnected = Array.from(new Set([...authJsonConnected(), ...envKeyConnected()]));\n\t}\n\treturn connected.filter((id) => !LOCAL_PROVIDER_IDS.has(id));\n}\nvar GET = async (event) => {\n\tif (isSetupComplete(resolveOpenPalmHome())) {\n\t\tconst authError = requireAdmin(event, getRequestId(event));\n\t\tif (authError) return authError;\n\t}\n\tconst [cloudProviders, gpu, localDetections, hostOpenCode] = await Promise.all([\n\t\tdetectCloudProviders(),\n\t\tdetectGpu(),\n\t\tdetectLocalProviders(),\n\t\tPromise.resolve(detectHostOpenCode())\n\t]);\n\tconst hostProviders = localDetections.filter((p) => p.available).map((p) => ({\n\t\tprovider: p.provider,\n\t\turl: p.url\n\t}));\n\treturn json({\n\t\tok: true,\n\t\trecommendation: recommendSetup({\n\t\t\tcloudProviders,\n\t\t\thostProviders,\n\t\t\tgpu,\n\t\t\thostCredentialCount: hostOpenCode.credentialCount\n\t\t}),\n\t\tgpu,\n\t\tcloudProviders,\n\t\thostProviders\n\t});\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAMA;AACA;AACA,IAAI,kBAAkB,GAAG,IAAI,GAAG,CAAC;AACjC,CAAC,QAAQ;AACT,CAAC,UAAU;AACX,CAAC,cAAc;AACf,CAAC;AACD,CAAC,CAAC;AACF;AACA,SAAS,iBAAiB,GAAG;AAC7B,CAAC,IAAI;AACL,EAAE,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC;AACvC,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE;AAClC,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACtD,EAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;AAChC,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,EAAE;AACX,CAAC;AACD;AACA;AACA,SAAS,eAAe,GAAG;AAC3B,CAAC,MAAM,GAAG,GAAG,EAAE;AACf,CAAC,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;AAC/G,CAAC,OAAO,GAAG;AACX;AACA;AACA;AACA,eAAe,oBAAoB,GAAG;AACtC,CAAC,IAAI,SAAS;AACd,CAAC,IAAI;AACL,EAAE,MAAM,MAAM,GAAG,iBAAiB,EAAE;AACpC,EAAE,IAAI,MAAM,MAAM,CAAC,WAAW,EAAE,EAAE;AAClC,GAAG,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;AAClD,GAAG,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,GAAG,OAAO,CAAC,IAAI,GAAG,EAAE;AAC7C,GAAG,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,SAAS,IAAI,EAAE,EAAE,GAAG,iBAAiB,EAAE,CAAC,CAAC,CAAC;AACpF,EAAE,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,iBAAiB,EAAE,EAAE,GAAG,eAAe,EAAE,CAAC,CAAC,CAAC;AACxF,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,iBAAiB,EAAE,EAAE,GAAG,eAAe,EAAE,CAAC,CAAC,CAAC;AACjF,CAAC;AACD,CAAC,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC7D;AACG,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,IAAI,eAAe,CAAC,mBAAmB,EAAE,CAAC,EAAE;AAC7C,EAAE,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;AAC5D,EAAE,IAAI,SAAS,EAAE,OAAO,SAAS;AACjC,CAAC;AACD,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,EAAE,eAAe,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AAChF,EAAE,oBAAoB,EAAE;AACxB,EAAE,SAAS,EAAE;AACb,EAAE,oBAAoB,EAAE;AACxB,EAAE,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE;AACtC,EAAE,CAAC;AACH,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC9E,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ;AACtB,EAAE,GAAG,EAAE,CAAC,CAAC;AACT,EAAE,CAAC,CAAC;AACJ,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,cAAc,EAAE,cAAc,CAAC;AACjC,GAAG,cAAc;AACjB,GAAG,aAAa;AAChB,GAAG,GAAG;AACN,GAAG,mBAAmB,EAAE,YAAY,CAAC;AACrC,GAAG,CAAC;AACJ,EAAE,GAAG;AACL,EAAE,cAAc;AAChB,EAAE;AACF,EAAE,CAAC;AACH;;;;"}

package/build/server/chunks/{_server.ts-mOqBlxWY.js → _server.ts-DCyIbOG5.js}

@@ -1,28 +1,28 @@
-import { L as deleteUserEnvKey, Y as ensureAkmUserEnv, aD as readUserEnvFile, H as createLogger, A as AKM_USER_ENV_REF, a_ as writeUserEnvKey } from './src-DcuneJUw.js';
-import { g as getState } from './state-MmHt_vDW.js';
-import { d as getRequestId, r as requireAdmin, e as errorResponse, k as jsonResponse, w as withAdminBody } from './helpers-WANaufOR.js';
+import { J as deleteUserEnvKey, V as ensureAkmUserEnv, aB as readUserEnvFile, F as createLogger, A as AKM_USER_ENV_REF, a_ as writeUserEnvKey } from './src-O9QA_b9U.js';
+import { g as getState } from './state-DjoSRCLN.js';
+import { d as getRequestId, r as requireAdmin, e as errorResponse, k as jsonResponse, w as withAdminBody } from './helpers-C_e8wlRS.js';
 import './chunk-CLZ62Ad-.js';
 import 'node:module';
 import './provider-constants-DPrj3yBX.js';
 import './dist-DOFcG0Zp.js';
 import 'node:fs';
 import 'node:path';
-import 'buffer';
-import 'fs';
-import 'path';
 import 'node:child_process';
+import 'buffer';
 import 'node:url';
 import 'node:crypto';
 import 'events';
+import 'fs';
 import 'node:events';
 import 'node:stream';
 import 'node:string_decoder';
+import 'path';
 import 'assert';
 import 'zlib';
 import 'node:assert';
 import 'node:fs/promises';
 import 'node:os';
-import './endpoints-BuXHAGnZ.js';
+import './endpoints-B5kqgVQo.js';
 
 //#region src/routes/admin/secrets/user-env/+server.ts
 var logger = createLogger("admin.secrets.user-env");
@@ -54,7 +54,10 @@ var POST = (event) => withAdminBody(event, async ({ requestId, body }) => {
 	if (!key || value === null) return errorResponse(400, "bad_request", "key and value are required", {}, requestId);
 	if (!KEY_RE.test(key)) return errorResponse(400, "invalid_key", "key must match [A-Za-z_][A-Za-z0-9_]*", {}, requestId);
 	if (value.length === 0) return errorResponse(400, "bad_request", "value must be non-empty; use DELETE to remove a key", {}, requestId);
-	if (/[\x00-\x08\x0a-\x1f\x7f]/.test(value)) return errorResponse(400, "invalid_value", "value must not contain newlines or control characters", {}, requestId);
+	if ([...value].some((ch) => {
+		const code = ch.charCodeAt(0);
+		return code >= 0 && code <= 8 || code >= 10 && code <= 31 || code === 127;
+	})) return errorResponse(400, "invalid_value", "value must not contain newlines or control characters", {}, requestId);
 	try {
 		writeUserEnvKey(state, key, value);
 	} catch (err) {
@@ -97,4 +100,4 @@ var DELETE = async (event) => {
 };
 
 export { DELETE, GET, POST };
-//# sourceMappingURL=_server.ts-mOqBlxWY.js.map
+//# sourceMappingURL=_server.ts-DCyIbOG5.js.map

package/build/server/chunks/_server.ts-DCyIbOG5.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-DCyIbOG5.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/secrets/user-env/_server.ts.js"],"sourcesContent":["import { _ as ensureAkmUserEnv, dn as createLogger, g as deleteUserEnvKey, m as AKM_USER_ENV_REF, v as readUserEnvFile, y as writeUserEnvKey } from \"../../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../../chunks/state.js\";\nimport { d as requireAdmin, i as errorResponse, l as jsonResponse, o as getRequestId, p as withAdminBody } from \"../../../../../chunks/helpers.js\";\n//#region src/routes/admin/secrets/user-env/+server.ts\nvar logger = createLogger(\"admin.secrets.user-env\");\nvar KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;\n/**\n* GET — list keys in the akm env:user store. Values are NEVER returned.\n*/\nvar GET = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst envPath = ensureAkmUserEnv(getState());\n\treturn jsonResponse(200, {\n\t\tprovider: \"akm\",\n\t\tenvRef: AKM_USER_ENV_REF,\n\t\tkeys: Object.keys(readUserEnvFile(envPath)).sort()\n\t}, requestId);\n};\n/**\n* POST — write a key into the user env file. The value is shell-quoted and\n* written directly to `knowledge/env/user.env` (mode 0600); it never appears on\n* a process argv. The assistant sources the env file at startup, so a key\n* written here is visible to OpenCode after the next assistant restart.\n*/\nvar POST = (event) => withAdminBody(event, async ({ requestId, body }) => {\n\tconst state = getState();\n\tconst key = typeof body.key === \"string\" ? body.key.trim() : \"\";\n\tconst value = typeof body.value === \"string\" ? body.value : null;\n\tif (!key || value === null) return errorResponse(400, \"bad_request\", \"key and value are required\", {}, requestId);\n\tif (!KEY_RE.test(key)) return errorResponse(400, \"invalid_key\", \"key must match [A-Za-z_][A-Za-z0-9_]*\", {}, requestId);\n\tif (value.length === 0) return errorResponse(400, \"bad_request\", \"value must be non-empty; use DELETE to remove a key\", {}, requestId);\n\tif ([...value].some((ch) => {\n\t\tconst code = ch.charCodeAt(0);\n\t\treturn code >= 0 && code <= 8 || code >= 10 && code <= 31 || code === 127;\n\t})) return errorResponse(400, \"invalid_value\", \"value must not contain newlines or control characters\", {}, requestId);\n\ttry {\n\t\twriteUserEnvKey(state, key, value);\n\t} catch (err) {\n\t\tconst reason = err instanceof Error ? err.message : String(err);\n\t\tlogger.warn(\"user env write failed\", {\n\t\t\tkey,\n\t\t\treason,\n\t\t\trequestId\n\t\t});\n\t\treturn errorResponse(500, \"write_failed\", `Failed to write user env key: ${reason}`, {}, requestId);\n\t}\n\treturn jsonResponse(200, {\n\t\tok: true,\n\t\tkey\n\t}, requestId);\n});\n/** DELETE — remove a key from the user env file. */\nvar DELETE = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst state = getState();\n\tconst key = new URL(event.request.url).searchParams.get(\"key\")?.trim() ?? \"\";\n\tif (!key || !KEY_RE.test(key)) return errorResponse(400, \"bad_request\", \"valid key query parameter is required\", {}, requestId);\n\ttry {\n\t\tdeleteUserEnvKey(state, key);\n\t} catch (err) {\n\t\tconst reason = err instanceof Error ? err.message : String(err);\n\t\tlogger.warn(\"user env delete failed\", {\n\t\t\tkey,\n\t\t\treason,\n\t\t\trequestId\n\t\t});\n\t\treturn errorResponse(500, \"delete_failed\", `Failed to remove user env key: ${reason}`, {}, requestId);\n\t}\n\treturn jsonResponse(200, {\n\t\tok: true,\n\t\tkey\n\t}, requestId);\n};\n//#endregion\nexport { DELETE, GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAGA;AACA,IAAI,MAAM,GAAG,YAAY,CAAC,wBAAwB,CAAC;AACnD,IAAI,MAAM,GAAG,0BAA0B;AACvC;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAC;AAC7C,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE;AAC1B,EAAE,QAAQ,EAAE,KAAK;AACjB,EAAE,MAAM,EAAE,gBAAgB;AAC1B,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;AAClD,EAAE,EAAE,SAAS,CAAC;AACd;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,IAAI,GAAG,CAAC,KAAK,KAAK,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK;AAC1E,CAAC,MAAM,KAAK,GAAG,QAAQ,EAAE;AACzB,CAAC,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE;AAChE,CAAC,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI;AACjE,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,IAAI,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,4BAA4B,EAAE,EAAE,EAAE,SAAS,CAAC;AAClH,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,uCAAuC,EAAE,EAAE,EAAE,SAAS,CAAC;AACxH,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,qDAAqD,EAAE,EAAE,EAAE,SAAS,CAAC;AACvI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK;AAC7B,EAAE,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;AAC/B,EAAE,OAAO,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,KAAK,GAAG;AAC3E,CAAC,CAAC,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,uDAAuD,EAAE,EAAE,EAAE,SAAS,CAAC;AACvH,CAAC,IAAI;AACL,EAAE,eAAe,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC;AACpC,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC;AACjE,EAAE,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;AACvC,GAAG,GAAG;AACN,GAAG,MAAM;AACT,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,CAAC,8BAA8B,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC;AACrG,CAAC;AACD,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE;AAC1B,EAAE,EAAE,EAAE,IAAI;AACV,EAAE;AACF,EAAE,EAAE,SAAS,CAAC;AACd,CAAC;AACD;AACG,IAAC,MAAM,GAAG,OAAO,KAAK,KAAK;AAC9B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,KAAK,GAAG,QAAQ,EAAE;AACzB,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;AAC7E,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,uCAAuC,EAAE,EAAE,EAAE,SAAS,CAAC;AAChI,CAAC,IAAI;AACL,EAAE,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC;AAC9B,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC;AACjE,EAAE,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;AACxC,GAAG,GAAG;AACN,GAAG,MAAM;AACT,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,CAAC,+BAA+B,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC;AACvG,CAAC;AACD,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE;AAC1B,EAAE,EAAE,EAAE,IAAI;AACV,EAAE;AACF,EAAE,EAAE,SAAS,CAAC;AACd;;;;"}

package/build/server/chunks/{_server.ts-DGnHVp8C.js → _server.ts-DEGt2NQH.js}

@@ -1,5 +1,5 @@
 import { j as json } from './exports-D1quPX8S.js';
-import { ad as isSetupComplete, aL as resolveStackDir } from './src-DcuneJUw.js';
+import { aa as isSetupComplete, aJ as resolveOpenPalmHome } from './src-O9QA_b9U.js';
 import './utils-BSRjJDrZ.js';
 import './chunk-CLZ62Ad-.js';
 import 'node:module';
@@ -7,16 +7,16 @@ import './provider-constants-DPrj3yBX.js';
 import './dist-DOFcG0Zp.js';
 import 'node:fs';
 import 'node:path';
-import 'buffer';
-import 'fs';
-import 'path';
 import 'node:child_process';
+import 'buffer';
 import 'node:url';
 import 'node:crypto';
 import 'events';
+import 'fs';
 import 'node:events';
 import 'node:stream';
 import 'node:string_decoder';
+import 'path';
 import 'assert';
 import 'zlib';
 import 'node:assert';
@@ -27,9 +27,9 @@ import 'node:os';
 var GET = () => {
 	return json({
 		ok: true,
-		setupComplete: isSetupComplete(resolveStackDir())
+		setupComplete: isSetupComplete(resolveOpenPalmHome())
 	});
 };
 
 export { GET };
-//# sourceMappingURL=_server.ts-DGnHVp8C.js.map
+//# sourceMappingURL=_server.ts-DEGt2NQH.js.map

package/build/server/chunks/_server.ts-DEGt2NQH.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-DEGt2NQH.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/setup/status/_server.ts.js"],"sourcesContent":["import { r as json } from \"../../../../../chunks/exports.js\";\nimport { dt as isSetupComplete, on as resolveOpenPalmHome } from \"../../../../../chunks/src.js\";\n//#region src/routes/api/setup/status/+server.ts\nvar GET = () => {\n\treturn json({\n\t\tok: true,\n\t\tsetupComplete: isSetupComplete(resolveOpenPalmHome())\n\t});\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAEA;AACG,IAAC,GAAG,GAAG,MAAM;AAChB,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,aAAa,EAAE,eAAe,CAAC,mBAAmB,EAAE;AACtD,EAAE,CAAC;AACH;;;;"}

package/build/server/chunks/{_server.ts-3yjaOdFN.js → _server.ts-DFcjup7N.js}

@@ -1,28 +1,28 @@
-import { ab as inspectInstallLock, I as INSTALL_LOCK_STALE_AFTER_MS, aT as unlockInstallLock, H as createLogger } from './src-DcuneJUw.js';
-import { g as getState } from './state-MmHt_vDW.js';
-import { d as getRequestId, r as requireAdmin, k as jsonResponse, e as errorResponse } from './helpers-WANaufOR.js';
+import { a8 as inspectInstallLock, I as INSTALL_LOCK_STALE_AFTER_MS, aS as unlockInstallLock, F as createLogger } from './src-O9QA_b9U.js';
+import { g as getState } from './state-DjoSRCLN.js';
+import { d as getRequestId, r as requireAdmin, k as jsonResponse, e as errorResponse } from './helpers-C_e8wlRS.js';
 import './chunk-CLZ62Ad-.js';
 import 'node:module';
 import './provider-constants-DPrj3yBX.js';
 import './dist-DOFcG0Zp.js';
 import 'node:fs';
 import 'node:path';
-import 'buffer';
-import 'fs';
-import 'path';
 import 'node:child_process';
+import 'buffer';
 import 'node:url';
 import 'node:crypto';
 import 'events';
+import 'fs';
 import 'node:events';
 import 'node:stream';
 import 'node:string_decoder';
+import 'path';
 import 'assert';
 import 'zlib';
 import 'node:assert';
 import 'node:fs/promises';
 import 'node:os';
-import './endpoints-BuXHAGnZ.js';
+import './endpoints-B5kqgVQo.js';
 
 //#region src/routes/admin/unlock/+server.ts
 var logger = createLogger("unlock-admin");
@@ -75,4 +75,4 @@ var POST = async (event) => {
 };
 
 export { GET, POST };
-//# sourceMappingURL=_server.ts-3yjaOdFN.js.map
+//# sourceMappingURL=_server.ts-DFcjup7N.js.map

package/build/server/chunks/_server.ts-DFcjup7N.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-DFcjup7N.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/unlock/_server.ts.js"],"sourcesContent":["import { B as inspectInstallLock, V as unlockInstallLock, dn as createLogger, z as INSTALL_LOCK_STALE_AFTER_MS } from \"../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../chunks/state.js\";\nimport { d as requireAdmin, i as errorResponse, l as jsonResponse, o as getRequestId } from \"../../../../chunks/helpers.js\";\n//#region src/routes/admin/unlock/+server.ts\nvar logger = createLogger(\"unlock-admin\");\n/**\n* #500 — \"an operation seems stuck — clear it?\" Reports whether an install lock\n* is present and whether it is stale (so the UI can decide whether to offer the\n* clear action). Read-only.\n*/\nvar GET = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst state = getState();\n\ttry {\n\t\treturn jsonResponse(200, {\n\t\t\tok: true,\n\t\t\tstaleAfterMs: INSTALL_LOCK_STALE_AFTER_MS,\n\t\t\t...inspectInstallLock(state.dataDir)\n\t\t}, requestId);\n\t} catch (e) {\n\t\treturn errorResponse(500, \"unlock_status_failed\", e instanceof Error ? e.message : String(e), {}, requestId);\n\t}\n};\n/**\n* #500 — clears the install lock ONLY when stale (dead holder PID or older than\n* the 30-minute staleness window). Returns 409 when a live install is still\n* holding the lock so the UI can surface \"an operation is still running\" rather\n* than forcing it. Never blind-removes a live lock.\n*/\nvar POST = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst state = getState();\n\ttry {\n\t\tconst result = unlockInstallLock(state.dataDir);\n\t\tif (!result.ok) return errorResponse(409, \"install_in_progress\", \"An install or upgrade still appears to be running. The lock clears itself automatically once it finishes or after 30 minutes. Nothing was changed.\", { status: result.status }, requestId);\n\t\tlogger.info(\"cleared install lock via admin\", {\n\t\t\trequestId,\n\t\t\tremoved: result.removed\n\t\t});\n\t\treturn jsonResponse(200, {\n\t\t\tok: true,\n\t\t\tremoved: result.removed,\n\t\t\tstatus: result.status\n\t\t}, requestId);\n\t} catch (e) {\n\t\treturn errorResponse(500, \"unlock_failed\", e instanceof Error ? e.message : String(e), {}, requestId);\n\t}\n};\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAGA;AACA,IAAI,MAAM,GAAG,YAAY,CAAC,cAAc,CAAC;AACzC;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,KAAK,GAAG,QAAQ,EAAE;AACzB,CAAC,IAAI;AACL,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE;AAC3B,GAAG,EAAE,EAAE,IAAI;AACX,GAAG,YAAY,EAAE,2BAA2B;AAC5C,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO;AACtC,GAAG,EAAE,SAAS,CAAC;AACf,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AACb,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,sBAAsB,EAAE,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC;AAC9G,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,KAAK,GAAG,QAAQ,EAAE;AACzB,CAAC,IAAI;AACL,EAAE,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC;AACjD,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,qBAAqB,EAAE,oJAAoJ,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC;AAC9P,EAAE,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;AAChD,GAAG,SAAS;AACZ,GAAG,OAAO,EAAE,MAAM,CAAC;AACnB,GAAG,CAAC;AACJ,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE;AAC3B,GAAG,EAAE,EAAE,IAAI;AACX,GAAG,OAAO,EAAE,MAAM,CAAC,OAAO;AAC1B,GAAG,MAAM,EAAE,MAAM,CAAC;AAClB,GAAG,EAAE,SAAS,CAAC;AACf,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AACb,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC;AACvG,CAAC;AACD;;;;"}

package/build/server/chunks/{_server.ts-TEXoAbbs.js → _server.ts-DIa1O4fP.js}

@@ -1,7 +1,7 @@
 import { j as json } from './exports-D1quPX8S.js';
-import { ad as isSetupComplete, aL as resolveStackDir, a2 as getAddonProfileSelection, b as annotateAddonProfileAvailability, a3 as getAddonProfiles } from './src-DcuneJUw.js';
-import { g as getState } from './state-MmHt_vDW.js';
-import { r as requireAdmin, d as getRequestId } from './helpers-WANaufOR.js';
+import { aa as isSetupComplete, aJ as resolveOpenPalmHome, _ as getAddonProfileSelection, b as annotateAddonProfileAvailability, $ as getAddonProfiles } from './src-O9QA_b9U.js';
+import { g as getState } from './state-DjoSRCLN.js';
+import { r as requireAdmin, d as getRequestId } from './helpers-C_e8wlRS.js';
 import './utils-BSRjJDrZ.js';
 import './chunk-CLZ62Ad-.js';
 import 'node:module';
@@ -9,26 +9,26 @@ import './provider-constants-DPrj3yBX.js';
 import './dist-DOFcG0Zp.js';
 import 'node:fs';
 import 'node:path';
-import 'buffer';
-import 'fs';
-import 'path';
 import 'node:child_process';
+import 'buffer';
 import 'node:url';
 import 'node:crypto';
 import 'events';
+import 'fs';
 import 'node:events';
 import 'node:stream';
 import 'node:string_decoder';
+import 'path';
 import 'assert';
 import 'zlib';
 import 'node:assert';
 import 'node:fs/promises';
 import 'node:os';
-import './endpoints-BuXHAGnZ.js';
+import './endpoints-B5kqgVQo.js';
 
 //#region src/routes/api/setup/ollama-profiles/+server.ts
 var GET = async (event) => {
-	if (isSetupComplete(resolveStackDir())) {
+	if (isSetupComplete(resolveOpenPalmHome())) {
 		const authError = requireAdmin(event, getRequestId(event));
 		if (authError) return authError;
 	}
@@ -41,4 +41,4 @@ var GET = async (event) => {
 };
 
 export { GET };
-//# sourceMappingURL=_server.ts-TEXoAbbs.js.map
+//# sourceMappingURL=_server.ts-DIa1O4fP.js.map

package/build/server/chunks/_server.ts-DIa1O4fP.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-DIa1O4fP.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/setup/ollama-profiles/_server.ts.js"],"sourcesContent":["import { r as json } from \"../../../../../chunks/exports.js\";\nimport { St as getAddonProfiles, dt as isSetupComplete, on as resolveOpenPalmHome, xt as getAddonProfileSelection, yt as annotateAddonProfileAvailability } from \"../../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../../chunks/state.js\";\nimport { d as requireAdmin, o as getRequestId } from \"../../../../../chunks/helpers.js\";\n//#region src/routes/api/setup/ollama-profiles/+server.ts\nvar GET = async (event) => {\n\tif (isSetupComplete(resolveOpenPalmHome())) {\n\t\tconst authError = requireAdmin(event, getRequestId(event));\n\t\tif (authError) return authError;\n\t}\n\tconst state = getState();\n\treturn json({\n\t\tok: true,\n\t\tprofiles: await annotateAddonProfileAvailability(getAddonProfiles(state.homeDir, \"ollama\")),\n\t\tselectedProfile: getAddonProfileSelection(state.stackDir, \"ollama\")\n\t});\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIA;AACG,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,IAAI,eAAe,CAAC,mBAAmB,EAAE,CAAC,EAAE;AAC7C,EAAE,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;AAC5D,EAAE,IAAI,SAAS,EAAE,OAAO,SAAS;AACjC,CAAC;AACD,CAAC,MAAM,KAAK,GAAG,QAAQ,EAAE;AACzB,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC7F,EAAE,eAAe,EAAE,wBAAwB,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ;AACpE,EAAE,CAAC;AACH;;;;"}

package/build/server/chunks/{_server.ts-BqtrKsqK.js → _server.ts-DKwzDUeB.js}

@@ -1,28 +1,28 @@
-import { k as jsonResponse, d as getRequestId } from './helpers-WANaufOR.js';
-import './src-DcuneJUw.js';
+import { k as jsonResponse, d as getRequestId } from './helpers-C_e8wlRS.js';
+import './src-O9QA_b9U.js';
 import './chunk-CLZ62Ad-.js';
 import 'node:module';
 import './provider-constants-DPrj3yBX.js';
 import './dist-DOFcG0Zp.js';
 import 'node:fs';
 import 'node:path';
-import 'buffer';
-import 'fs';
-import 'path';
 import 'node:child_process';
+import 'buffer';
 import 'node:url';
 import 'node:crypto';
 import 'events';
+import 'fs';
 import 'node:events';
 import 'node:stream';
 import 'node:string_decoder';
+import 'path';
 import 'assert';
 import 'zlib';
 import 'node:assert';
 import 'node:fs/promises';
 import 'node:os';
-import './endpoints-BuXHAGnZ.js';
-import './state-MmHt_vDW.js';
+import './endpoints-B5kqgVQo.js';
+import './state-DjoSRCLN.js';
 
 //#region src/routes/health/+server.ts
 var GET = async (event) => {
@@ -33,4 +33,4 @@ var GET = async (event) => {
 };
 
 export { GET };
-//# sourceMappingURL=_server.ts-BqtrKsqK.js.map
+//# sourceMappingURL=_server.ts-DKwzDUeB.js.map

package/build/server/chunks/{_server.ts-BqtrKsqK.js.map → _server.ts-DKwzDUeB.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_server.ts-BqtrKsqK.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/health/_server.ts.js"],"sourcesContent":["import { l as jsonResponse, o as getRequestId } from \"../../../chunks/helpers.js\";\n//#region src/routes/health/+server.ts\nvar GET = async (event) => {\n\treturn jsonResponse(200, {\n\t\tstatus: \"ok\",\n\t\tservice: \"admin\"\n\t}, getRequestId(event));\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AACA;AACG,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE;AAC1B,EAAE,MAAM,EAAE,IAAI;AACd,EAAE,OAAO,EAAE;AACX,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;AACxB;;;;"}
+{"version":3,"file":"_server.ts-DKwzDUeB.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/health/_server.ts.js"],"sourcesContent":["import { l as jsonResponse, o as getRequestId } from \"../../../chunks/helpers.js\";\n//#region src/routes/health/+server.ts\nvar GET = async (event) => {\n\treturn jsonResponse(200, {\n\t\tstatus: \"ok\",\n\t\tservice: \"admin\"\n\t}, getRequestId(event));\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AACA;AACG,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE;AAC1B,EAAE,MAAM,EAAE,IAAI;AACd,EAAE,OAAO,EAAE;AACX,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;AACxB;;;;"}

package/build/server/chunks/{_server.ts-BWULZU0Y.js → _server.ts-DLZc86ci.js}

@@ -1,28 +1,28 @@
-import { aM as runAssistantAkmCommand } from './src-DcuneJUw.js';
-import { g as getState } from './state-MmHt_vDW.js';
-import { d as getRequestId, r as requireAdmin, e as errorResponse, k as jsonResponse } from './helpers-WANaufOR.js';
+import { aK as runAssistantAkmCommand } from './src-O9QA_b9U.js';
+import { g as getState } from './state-DjoSRCLN.js';
+import { d as getRequestId, r as requireAdmin, e as errorResponse, k as jsonResponse } from './helpers-C_e8wlRS.js';
 import './chunk-CLZ62Ad-.js';
 import 'node:module';
 import './provider-constants-DPrj3yBX.js';
 import './dist-DOFcG0Zp.js';
 import 'node:fs';
 import 'node:path';
-import 'buffer';
-import 'fs';
-import 'path';
 import 'node:child_process';
+import 'buffer';
 import 'node:url';
 import 'node:crypto';
 import 'events';
+import 'fs';
 import 'node:events';
 import 'node:stream';
 import 'node:string_decoder';
+import 'path';
 import 'assert';
 import 'zlib';
 import 'node:assert';
 import 'node:fs/promises';
 import 'node:os';
-import './endpoints-BuXHAGnZ.js';
+import './endpoints-B5kqgVQo.js';
 
 //#region src/routes/admin/akm/reindex/+server.ts
 var POST = async (event) => {
@@ -39,4 +39,4 @@ var POST = async (event) => {
 };
 
 export { POST };
-//# sourceMappingURL=_server.ts-BWULZU0Y.js.map
+//# sourceMappingURL=_server.ts-DLZc86ci.js.map

package/build/server/chunks/{_server.ts-BWULZU0Y.js.map → _server.ts-DLZc86ci.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_server.ts-BWULZU0Y.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/akm/reindex/_server.ts.js"],"sourcesContent":["import { r as runAssistantAkmCommand } from \"../../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../../chunks/state.js\";\nimport { d as requireAdmin, i as errorResponse, l as jsonResponse, o as getRequestId } from \"../../../../../chunks/helpers.js\";\n//#region src/routes/admin/akm/reindex/+server.ts\nvar POST = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst result = await runAssistantAkmCommand(getState(), [\"index\", \"--full\"], 15 * 6e4);\n\tif (!result.ok) return errorResponse(502, \"akm_reindex_failed\", result.stderr.trim() || result.stdout.trim() || \"AKM re-index failed.\", {}, requestId);\n\treturn jsonResponse(200, {\n\t\tok: true,\n\t\tmessage: \"AKM index rebuilt successfully.\",\n\t\toutput: result.stdout.trim()\n\t}, requestId);\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAGA;AACG,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC;AACvF,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,sBAAsB,EAAE,EAAE,EAAE,SAAS,CAAC;AACvJ,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE;AAC1B,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,OAAO,EAAE,iCAAiC;AAC5C,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;AAC5B,EAAE,EAAE,SAAS,CAAC;AACd;;;;"}
+{"version":3,"file":"_server.ts-DLZc86ci.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/akm/reindex/_server.ts.js"],"sourcesContent":["import { r as runAssistantAkmCommand } from \"../../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../../chunks/state.js\";\nimport { d as requireAdmin, i as errorResponse, l as jsonResponse, o as getRequestId } from \"../../../../../chunks/helpers.js\";\n//#region src/routes/admin/akm/reindex/+server.ts\nvar POST = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst result = await runAssistantAkmCommand(getState(), [\"index\", \"--full\"], 15 * 6e4);\n\tif (!result.ok) return errorResponse(502, \"akm_reindex_failed\", result.stderr.trim() || result.stdout.trim() || \"AKM re-index failed.\", {}, requestId);\n\treturn jsonResponse(200, {\n\t\tok: true,\n\t\tmessage: \"AKM index rebuilt successfully.\",\n\t\toutput: result.stdout.trim()\n\t}, requestId);\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAGA;AACG,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC;AACvF,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,sBAAsB,EAAE,EAAE,EAAE,SAAS,CAAC;AACvJ,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE;AAC1B,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,OAAO,EAAE,iCAAiC;AAC5C,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;AAC5B,EAAE,EAAE,SAAS,CAAC;AACd;;;;"}

package/build/server/chunks/_server.ts-DM1ae7YM.js

@@ -0,0 +1,244 @@
+import { j as json } from './exports-D1quPX8S.js';
+import { aC as readVersions, at as readPinnedVersions, ar as readChannelPreference, a5 as getRunningImages, m as buildComposeOptions, am as parseEnvFile, S as SERVICE_VERSION_KEYS, aQ as stripVoiceVariantSuffix, Y as formatForDisplay, a$ as writeVersions, aV as writeChannelPreference, aj as mergeEnvContent, D as DOCKER_IMAGE_NAMES, s as compareComparableVersions, P as PLATFORM_VERSION } from './src-O9QA_b9U.js';
+import { g as getState } from './state-DjoSRCLN.js';
+import { d as getRequestId, r as requireAdmin, e as errorResponse } from './helpers-C_e8wlRS.js';
+import { existsSync, writeFileSync, readFileSync } from 'node:fs';
+import './utils-BSRjJDrZ.js';
+import './chunk-CLZ62Ad-.js';
+import 'node:module';
+import './provider-constants-DPrj3yBX.js';
+import './dist-DOFcG0Zp.js';
+import 'node:path';
+import 'node:child_process';
+import 'buffer';
+import 'node:url';
+import 'node:crypto';
+import 'events';
+import 'fs';
+import 'node:events';
+import 'node:stream';
+import 'node:string_decoder';
+import 'path';
+import 'assert';
+import 'zlib';
+import 'node:assert';
+import 'node:fs/promises';
+import 'node:os';
+import './endpoints-B5kqgVQo.js';
+
+//#region src/routes/admin/versions/+server.ts
+/**
+* GET /admin/versions  — truthful version state (constitution §4.2, §5)
+* PATCH /admin/versions — write pins to state file
+*
+* GET returns THREE distinct values per component (§5 / Phase 5):
+*   running   — the digest + tag the currently running container was CREATED FROM
+*               (read from `docker inspect`, never from a pin file). Null when not running.
+*   pinned    — the explicit version lock from state/stack.state.env, or null = track latest.
+*               Moving tags ("latest", "next") are normalized to null (they express channel
+*               preference, not a lock).
+*   available — the resolved latest version on the active channel (silent null on registry down).
+*
+* Backward compatibility for the mixed-version window (old UI + new API or vice versa):
+*   - The legacy top-level `versions` field is preserved. Old UIs that read only
+*     `body.versions[key]` continue to get the same string they always did (the stored
+*     pin value / default). New UIs read `body.components[key].{running,pinned,available}`.
+*   - Old UIs cannot see `running` (never could — it's new). They may show a stale pin
+*     as "current", which was the pre-Phase-5 behaviour. That is acceptable for the
+*     transition window; Phase 6 (UpdatesTab rebuild) is where the new shape is consumed.
+*
+* Registry-down asymmetry (§4, compliance G2):
+*   Background "available?" resolution degrades SILENTLY — a registry outage just
+*   leaves `available` null; the stack keeps running what it has.
+*   A user-pressed update that can't reach the registry FAILS LOUDLY (handled in
+*   /admin/update via applyStack pull-before-up + fatal pull failure).
+*
+* Voice variant on display (§4.2, compliance G3):
+*   `running.tag` for the voice service will include the hardware suffix (e.g.
+*   "openpalm/voice:0.12.0-cpu"). The `running.plainVersion` field strips it for
+*   use in the pinning control. `pinned` never carries the suffix (compose adds it).
+*
+* Service-name vs image-name (§5 truthful state):
+*   getRunningImages() keys its result by compose SERVICE name, not image name.
+*   OP_PORTAL_VERSION images run under services discord/slack/guardian/api/chat/gateway.
+*   OP_VOICE_VERSION may run as voice (cpu), voice-cuda, or voice-rocm.
+*   We therefore scan runningImages by matching the image tag against the expected
+*   image name, not by looking up the image name as a service name.
+*
+* upToDate field removed (§8, Phase-5-item-3):
+*   Tag-string equality cannot determine up-to-date status (tags can point to different
+*   digests). Phase 6 decides up-to-date by digest comparison after a pull. The route
+*   surfaces running.digest, running.plainVersion, pinned, and available as separate
+*   truthful values for Phase 6 to use.
+*/
+var ALLOWED_KEYS = new Set([
+	...SERVICE_VERSION_KEYS,
+	"OP_AUTO_UPDATE",
+	"OP_CHANNEL"
+]);
+function stackEnvPath() {
+	return `${getState().stashDir}/env/stack.env`;
+}
+var STABLE_SEMVER = /^v?(\d+\.\d+\.\d+)$/;
+var PRERELEASE_SEMVER = /^v?(\d+\.\d+\.\d+-(?:rc|alpha|beta|next)\.\d+)$/;
+var VOICE_STABLE = /^v?(\d+\.\d+\.\d+)-\w+$/;
+/**
+* Read the Docker Hub namespace from the stack env (OP_IMAGE_NAMESPACE), defaulting to
+* "openpalm". Compose uses the same default: ${OP_IMAGE_NAMESPACE:-openpalm}.
+*/
+function imageNamespace(stackEnvContent) {
+	return (stackEnvContent.OP_IMAGE_NAMESPACE ?? process.env.OP_IMAGE_NAMESPACE ?? "openpalm").trim() || "openpalm";
+}
+async function resolveDockerLatestSilent(image, namespace, channel) {
+	try {
+		const res = await fetch(`https://hub.docker.com/v2/repositories/${namespace}/${image}/tags?page_size=100&ordering=last_updated`, {
+			headers: { Accept: "application/json" },
+			signal: AbortSignal.timeout(5e3)
+		});
+		if (!res.ok) return null;
+		const data = await res.json();
+		const isVoice = image === "voice";
+		const candidates = [];
+		for (const tag of data.results ?? []) {
+			const plain = tag.name.match(STABLE_SEMVER);
+			if (plain) {
+				candidates.push(plain[1]);
+				continue;
+			}
+			if (isVoice) {
+				const voice = tag.name.match(VOICE_STABLE);
+				if (voice) {
+					candidates.push(voice[1]);
+					continue;
+				}
+			}
+			if (channel === "next") {
+				const pre = tag.name.match(PRERELEASE_SEMVER);
+				if (pre) candidates.push(pre[1]);
+			}
+		}
+		if (candidates.length === 0) return null;
+		return candidates.sort(compareComparableVersions).at(-1) ?? null;
+	} catch {
+		return null;
+	}
+}
+var _availableCache = /* @__PURE__ */ new Map();
+var CACHE_TTL_MS = 5 * 6e4;
+async function resolveAvailableVersions(channel, namespace) {
+	const cacheKey = `${channel}:${namespace}`;
+	const cached = _availableCache.get(cacheKey);
+	if (cached && Date.now() - cached.fetchedAt < CACHE_TTL_MS) return cached.versions;
+	const results = await Promise.all(SERVICE_VERSION_KEYS.map(async (key) => {
+		const image = DOCKER_IMAGE_NAMES[key];
+		return [key, await resolveDockerLatestSilent(image, namespace, channel)];
+	}));
+	const versions = {};
+	for (const [k, v] of results) versions[k] = v;
+	_availableCache.set(cacheKey, {
+		versions,
+		fetchedAt: Date.now()
+	});
+	return versions;
+}
+/**
+* Find the first running (non-not_installed) container whose image tag contains
+* the given image name (e.g. "/portal:" or "/voice:"). Returns null if none found.
+*/
+function findRunningByImage(runningImages, imageName) {
+	const needle = `/${imageName}:`;
+	for (const ri of Object.values(runningImages)) if (ri.state !== "not_installed" && ri.tag.includes(needle)) return ri;
+	return null;
+}
+var GET = async (event) => {
+	const requestId = getRequestId(event);
+	const authError = requireAdmin(event, requestId);
+	if (authError) return authError;
+	const state = getState();
+	if (!state.stackDir) return errorResponse(503, "not_initialized", "Stack directory not configured", {}, requestId);
+	const versions = readVersions(state);
+	const pinned = readPinnedVersions(state);
+	const channel = readChannelPreference(state);
+	let runningImages = {};
+	try {
+		runningImages = await getRunningImages(buildComposeOptions(state));
+	} catch {}
+	const path = stackEnvPath();
+	const env = existsSync(path) ? parseEnvFile(path) : {};
+	const available = await resolveAvailableVersions(channel, imageNamespace(env));
+	const components = {};
+	for (const key of SERVICE_VERSION_KEYS) {
+		const imageName = DOCKER_IMAGE_NAMES[key];
+		const ri = findRunningByImage(runningImages, imageName);
+		let runningEntry = null;
+		if (ri) {
+			const rawTag = ri.tag.split(":").pop() ?? ri.tag;
+			const plainVersion = key === "OP_VOICE_VERSION" ? stripVoiceVariantSuffix(rawTag) : rawTag;
+			runningEntry = {
+				digest: ri.digest,
+				tag: ri.tag,
+				plainVersion,
+				healthStatus: ri.healthStatus,
+				containerState: ri.state
+			};
+		}
+		components[key] = {
+			running: runningEntry,
+			pinned: pinned[key],
+			available: available[key] ?? null
+		};
+	}
+	return json({
+		components,
+		channel,
+		platformVersion: formatForDisplay(PLATFORM_VERSION),
+		versions,
+		autoUpdate: env["OP_AUTO_UPDATE"] !== "false"
+	});
+};
+var PATCH = async (event) => {
+	const requestId = getRequestId(event);
+	const authError = requireAdmin(event, requestId);
+	if (authError) return authError;
+	const state = getState();
+	if (!state.stackDir) return errorResponse(503, "not_initialized", "Stack directory not configured", {}, requestId);
+	let body;
+	try {
+		body = await event.request.json();
+	} catch {
+		return errorResponse(400, "invalid_body", "Request body must be JSON", {}, requestId);
+	}
+	const versions = body?.versions;
+	if (!versions || typeof versions !== "object") return errorResponse(400, "invalid_body", "Body must include a versions object", {}, requestId);
+	const versionUpdates = {};
+	const settingUpdates = {};
+	let channelUpdate;
+	for (const [key, value] of Object.entries(versions)) {
+		if (!ALLOWED_KEYS.has(key)) return errorResponse(400, "unknown_version_key", `Unknown key: ${key}`, {}, requestId);
+		if (typeof value !== "string") return errorResponse(400, "invalid_version_value", `Value for ${key} must be a string`, {}, requestId);
+		if (key === "OP_CHANNEL") channelUpdate = value;
+		else if (key === "OP_AUTO_UPDATE") settingUpdates[key] = value;
+		else versionUpdates[key] = value;
+	}
+	if (Object.keys(versionUpdates).length > 0) {
+		writeVersions(state, versionUpdates);
+		_availableCache.clear();
+	}
+	if (channelUpdate !== void 0) try {
+		writeChannelPreference(state, channelUpdate);
+		_availableCache.clear();
+	} catch (e) {
+		return errorResponse(400, "invalid_channel", e instanceof Error ? e.message : String(e), {}, requestId);
+	}
+	if (Object.keys(settingUpdates).length > 0) {
+		const path = stackEnvPath();
+		writeFileSync(path, mergeEnvContent(existsSync(path) ? readFileSync(path, "utf-8") : "", settingUpdates), { mode: 384 });
+	}
+	return json({
+		ok: true,
+		versions: readVersions(state)
+	});
+};
+
+export { GET, PATCH };
+//# sourceMappingURL=_server.ts-DM1ae7YM.js.map