@openpalm/ui 0.13.0-beta.5 → 0.13.0-beta.7

package/build/server/chunks/_server.ts-BbvTyvkT.js

@@ -1,69 +0,0 @@
-import { ae as isAllowedService, p as checkDocker, aK as reconcileHostOwnership, H as HostSwapBlockedError, z as composeStart, n as buildComposeOptions, F as createLogger } from './src-AHSKeKr0.js';
-import { g as getState } from './state-CzXOEt0t.js';
-import { d as getRequestId, l as requireCapability, r as requireAdmin, p as parseJsonBody, j as jsonBodyError, e as errorResponse, k as jsonResponse } from './helpers-9U7R7yqL.js';
-import './chunk-DOvWTNp_.js';
-import 'node:module';
-import './network-preset-CJ1RRnki.js';
-import 'node:fs';
-import 'node:child_process';
-import 'node:path';
-import 'buffer';
-import 'node:url';
-import 'node:os';
-import 'node:crypto';
-import 'events';
-import 'fs';
-import 'node:events';
-import 'node:stream';
-import 'node:string_decoder';
-import 'path';
-import 'assert';
-import 'zlib';
-import 'node:assert';
-import 'node:fs/promises';
-import './endpoints-CnnGlw2U.js';
-import './features-BUWlozR5.js';
-
-//#region src/routes/api/host/containers/up/+server.ts
-var logger = createLogger("containers-up");
-var POST = async (event) => {
-	const requestId = getRequestId(event);
-	const capabilityError = requireCapability(event, "host:containers", requestId);
-	if (capabilityError) return capabilityError;
-	logger.info("container start request received", { requestId });
-	const authError = requireAdmin(event, requestId);
-	if (authError) return authError;
-	const state = getState();
-	const result = await parseJsonBody(event.request);
-	if ("error" in result) return jsonBodyError(result, requestId);
-	const body = result.data;
-	const service = typeof body.service === "string" ? body.service : "";
-	logger.info("starting service", {
-		requestId,
-		service
-	});
-	if (!isAllowedService(service, state.configDir)) return errorResponse(400, "invalid_service", "Service is not in allowlist", { service }, requestId);
-	if ((await checkDocker()).ok) {
-		try {
-			await reconcileHostOwnership(state, { services: [service] });
-		} catch (err) {
-			if (err instanceof HostSwapBlockedError) return errorResponse(409, "host_swap_blocked", "OP_HOME appears to have moved from another host. Ownership must be adopted for this host before starting. Run `openpalm start --adopt-host` from the host CLI, then retry.", {
-				service,
-				previousHost: err.previousIdentity?.host ?? null,
-				currentHost: err.currentIdentity.host
-			}, requestId);
-			throw err;
-		}
-		const result = await composeStart([service], buildComposeOptions(state));
-		if (result.ok) state.services[service] = "running";
-		else return errorResponse(500, "docker_error", `Failed to start service: ${result.stderr}`, { service }, requestId);
-	} else state.services[service] = "running";
-	return jsonResponse(200, {
-		ok: true,
-		service,
-		status: state.services[service]
-	}, requestId);
-};
-
-export { POST };
-//# sourceMappingURL=_server.ts-BbvTyvkT.js.map

package/build/server/chunks/_server.ts-BbvTyvkT.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-BbvTyvkT.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/host/containers/up/_server.ts.js"],"sourcesContent":["import { Nt as createLogger, _ as HostSwapBlockedError, t as buildComposeOptions, v as reconcileHostOwnership } from \"../../../../../../chunks/compose-args.js\";\nimport { g as composeStart, i as checkDocker } from \"../../../../../../chunks/docker.js\";\nimport { k as isAllowedService } from \"../../../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../../../chunks/state.js\";\nimport { a as getRequestId, c as jsonResponse, d as requireCapability, l as parseJsonBody, r as errorResponse, s as jsonBodyError, u as requireAdmin } from \"../../../../../../chunks/helpers.js\";\n//#region src/routes/api/host/containers/up/+server.ts\nvar logger = createLogger(\"containers-up\");\nvar POST = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst capabilityError = requireCapability(event, \"host:containers\", requestId);\n\tif (capabilityError) return capabilityError;\n\tlogger.info(\"container start request received\", { requestId });\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst state = getState();\n\tconst result = await parseJsonBody(event.request);\n\tif (\"error\" in result) return jsonBodyError(result, requestId);\n\tconst body = result.data;\n\tconst service = typeof body.service === \"string\" ? body.service : \"\";\n\tlogger.info(\"starting service\", {\n\t\trequestId,\n\t\tservice\n\t});\n\tif (!isAllowedService(service, state.configDir)) return errorResponse(400, \"invalid_service\", \"Service is not in allowlist\", { service }, requestId);\n\tif ((await checkDocker()).ok) {\n\t\ttry {\n\t\t\tawait reconcileHostOwnership(state, { services: [service] });\n\t\t} catch (err) {\n\t\t\tif (err instanceof HostSwapBlockedError) return errorResponse(409, \"host_swap_blocked\", \"OP_HOME appears to have moved from another host. Ownership must be adopted for this host before starting. Run `openpalm start --adopt-host` from the host CLI, then retry.\", {\n\t\t\t\tservice,\n\t\t\t\tpreviousHost: err.previousIdentity?.host ?? null,\n\t\t\t\tcurrentHost: err.currentIdentity.host\n\t\t\t}, requestId);\n\t\t\tthrow err;\n\t\t}\n\t\tconst result = await composeStart([service], buildComposeOptions(state));\n\t\tif (result.ok) state.services[service] = \"running\";\n\t\telse return errorResponse(500, \"docker_error\", `Failed to start service: ${result.stderr}`, { service }, requestId);\n\t} else state.services[service] = \"running\";\n\treturn jsonResponse(200, {\n\t\tok: true,\n\t\tservice,\n\t\tstatus: state.services[service]\n\t}, requestId);\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAKA;AACA,IAAI,MAAM,GAAG,YAAY,CAAC,eAAe,CAAC;AACvC,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,EAAE,SAAS,CAAC;AAC/E,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,SAAS,EAAE,CAAC;AAC/D,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,KAAK,GAAG,QAAQ,EAAE;AACzB,CAAC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;AAClD,CAAC,IAAI,OAAO,IAAI,MAAM,EAAE,OAAO,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC;AAC/D,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AACzB,CAAC,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,GAAG,IAAI,CAAC,OAAO,GAAG,EAAE;AACrE,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;AACjC,EAAE,SAAS;AACX,EAAE;AACF,EAAE,CAAC;AACH,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,iBAAiB,EAAE,6BAA6B,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,CAAC;AACrJ,CAAC,IAAI,CAAC,MAAM,WAAW,EAAE,EAAE,EAAE,EAAE;AAC/B,EAAE,IAAI;AACN,GAAG,MAAM,sBAAsB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;AAC/D,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,IAAI,GAAG,YAAY,oBAAoB,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,mBAAmB,EAAE,4KAA4K,EAAE;AACzQ,IAAI,OAAO;AACX,IAAI,YAAY,EAAE,GAAG,CAAC,gBAAgB,EAAE,IAAI,IAAI,IAAI;AACpD,IAAI,WAAW,EAAE,GAAG,CAAC,eAAe,CAAC;AACrC,IAAI,EAAE,SAAS,CAAC;AAChB,GAAG,MAAM,GAAG;AACZ,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC;AAC1E,EAAE,IAAI,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,SAAS;AACpD,OAAO,OAAO,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,CAAC,yBAAyB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,CAAC;AACrH,CAAC,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,SAAS;AAC3C,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE;AAC1B,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,OAAO;AACT,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO;AAChC,EAAE,EAAE,SAAS,CAAC;AACd;;;;"}

package/build/server/chunks/_server.ts-BbxUaG2z.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-BbxUaG2z.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/host/providers/import-host/_server.ts.js"],"sourcesContent":["import { dt as authJsonPath, t as buildComposeOptions } from \"../../../../../../chunks/compose-args.js\";\nimport { i as checkDocker } from \"../../../../../../chunks/docker.js\";\nimport { c as importHostOpenCode, s as detectHostOpenCode } from \"../../../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../../../chunks/state.js\";\nimport { a as getRequestId, c as jsonResponse, d as requireCapability, l as parseJsonBody, r as errorResponse, u as requireAdmin } from \"../../../../../../chunks/helpers.js\";\nimport { t as opencodeFetch } from \"../../../../../../chunks/http.js\";\nimport { t as withSerialQueue } from \"../../../../../../chunks/serial-queue.js\";\nimport { t as composeRestart } from \"../../../../../../chunks/docker3.js\";\nimport { existsSync, readFileSync } from \"node:fs\";\n//#region src/routes/api/host/providers/import-host/+server.ts\n/**\n* POST /api/host/providers/import-host\n*\n* Copies host OpenCode config + auth into OP_HOME, then pushes each\n* imported credential to the running OpenCode server so the providers\n* appear connected immediately (no restart required).\n*\n* - opencode.json: stripped of plugin/mcp/permission keys, merged with\n*   existing OP_HOME config. Provider conflicts preserved by default.\n* - auth.json: byte-copied and chmodded 0o600. Never logged.\n* - Live push: best-effort PUT to OpenCode /auth/{id} per credential.\n*   If OpenCode is unreachable, the file copy still applies and OpenCode\n*   will pick up the credentials on next restart.\n* - Service restart: assistant is restarted after the import so opencode.json\n*   provider blocks are re-read (live push only updates the auth store, not\n*   config).\n*\n* Body (optional JSON):\n*   { overwriteConflicts?: boolean }   — default false\n*\n* Auth: admin token required.\n*/\n/**\n* Restart services that hold provider state in startup config.\n* Best-effort: the file-level import is the durable part; this is the polish\n* that makes the change visible without the user having to bounce things by hand.\n* OpenCode caches opencode.json provider blocks at startup, so imported\n* provider config needs a fresh assistant process.\n*/\nasync function restartProviderConsumers() {\n\tconst services = [\"assistant\"];\n\tif (!(await checkDocker()).ok) return {\n\t\trestarted: [],\n\t\tfailed: services.map((s) => ({\n\t\t\tservice: s,\n\t\t\terror: \"docker unavailable\"\n\t\t}))\n\t};\n\tconst opts = buildComposeOptions(getState());\n\tconst restarted = [];\n\tconst failed = [];\n\tfor (const service of services) try {\n\t\tconst r = await composeRestart([service], opts);\n\t\tif (r.ok) restarted.push(service);\n\t\telse failed.push({\n\t\t\tservice,\n\t\t\terror: r.stderr || `exit ${r.code}`\n\t\t});\n\t} catch (err) {\n\t\tfailed.push({\n\t\t\tservice,\n\t\t\terror: err instanceof Error ? err.message : String(err)\n\t\t});\n\t}\n\treturn {\n\t\trestarted,\n\t\tfailed\n\t};\n}\n/** Push each auth.json entry to OpenCode's /auth/{id} so the running process sees them. */\nasync function pushAuthToOpenCode(authPath) {\n\tlet raw;\n\ttry {\n\t\traw = JSON.parse(readFileSync(authPath, \"utf-8\"));\n\t} catch {\n\t\treturn {\n\t\t\tpushed: 0,\n\t\t\tfailed: []\n\t\t};\n\t}\n\tif (!raw || typeof raw !== \"object\" || Array.isArray(raw)) return {\n\t\tpushed: 0,\n\t\tfailed: []\n\t};\n\tlet pushed = 0;\n\tconst failed = [];\n\tfor (const [providerId, value] of Object.entries(raw)) try {\n\t\tawait opencodeFetch(`/auth/${encodeURIComponent(providerId)}`, {\n\t\t\tmethod: \"PUT\",\n\t\t\tbody: JSON.stringify(value)\n\t\t});\n\t\tpushed++;\n\t} catch {\n\t\tfailed.push(providerId);\n\t}\n\treturn {\n\t\tpushed,\n\t\tfailed\n\t};\n}\nvar POST = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst capabilityError = requireCapability(event, \"host:secrets\", requestId);\n\tif (capabilityError) return capabilityError;\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\treturn withSerialQueue(\"admin:providers:import-host\", async () => {\n\t\tconst state = getState();\n\t\tlet overwriteConflicts = false;\n\t\tif ((event.request.headers.get(\"content-type\") ?? \"\").includes(\"application/json\")) {\n\t\t\tconst parsed = await parseJsonBody(event.request);\n\t\t\tif (!(\"error\" in parsed)) overwriteConflicts = parsed.data.overwriteConflicts === true;\n\t\t}\n\t\tlet result;\n\t\ttry {\n\t\t\tresult = importHostOpenCode(state, { overwriteConflicts });\n\t\t} catch (err) {\n\t\t\treturn errorResponse(500, \"import_failed\", err instanceof Error ? err.message : \"Import failed\", {}, requestId);\n\t\t}\n\t\tconst hostStatus = detectHostOpenCode();\n\t\tlet livePush = {\n\t\t\tpushed: 0,\n\t\t\tfailed: []\n\t\t};\n\t\tconst importedAuthPath = authJsonPath(state);\n\t\tif (existsSync(importedAuthPath)) livePush = await pushAuthToOpenCode(importedAuthPath);\n\t\telse if (hostStatus.authPath) livePush = await pushAuthToOpenCode(hostStatus.authPath);\n\t\tconst restart = await restartProviderConsumers();\n\t\treturn jsonResponse(200, {\n\t\t\tok: true,\n\t\t\timported: result.imported,\n\t\t\tconflicts: result.conflicts,\n\t\t\tlivePushed: livePush.pushed,\n\t\t\tlivePushFailed: livePush.failed,\n\t\t\trestarted: restart.restarted,\n\t\t\trestartFailed: restart.failed\n\t\t}, requestId);\n\t});\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AASA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,wBAAwB,GAAG;AAC1C,CAAC,MAAM,QAAQ,GAAG,CAAC,WAAW,CAAC;AAC/B,CAAC,IAAI,CAAC,CAAC,MAAM,WAAW,EAAE,EAAE,EAAE,EAAE,OAAO;AACvC,EAAE,SAAS,EAAE,EAAE;AACf,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC/B,GAAG,OAAO,EAAE,CAAC;AACb,GAAG,KAAK,EAAE;AACV,GAAG,CAAC;AACJ,EAAE;AACF,CAAC,MAAM,IAAI,GAAG,mBAAmB,CAAC,QAAQ,EAAE,CAAC;AAC7C,CAAC,MAAM,SAAS,GAAG,EAAE;AACrB,CAAC,MAAM,MAAM,GAAG,EAAE;AAClB,CAAC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,IAAI;AACrC,EAAE,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC;AACjD,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;AACnC,OAAO,MAAM,CAAC,IAAI,CAAC;AACnB,GAAG,OAAO;AACV,GAAG,KAAK,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC;AACrC,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,CAAC,IAAI,CAAC;AACd,GAAG,OAAO;AACV,GAAG,KAAK,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG;AACzD,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,OAAO;AACR,EAAE,SAAS;AACX,EAAE;AACF,EAAE;AACF;AACA;AACA,eAAe,kBAAkB,CAAC,QAAQ,EAAE;AAC5C,CAAC,IAAI,GAAG;AACR,CAAC,IAAI;AACL,EAAE,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO;AACT,GAAG,MAAM,EAAE,CAAC;AACZ,GAAG,MAAM,EAAE;AACX,GAAG;AACH,CAAC;AACD,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO;AACnE,EAAE,MAAM,EAAE,CAAC;AACX,EAAE,MAAM,EAAE;AACV,EAAE;AACF,CAAC,IAAI,MAAM,GAAG,CAAC;AACf,CAAC,MAAM,MAAM,GAAG,EAAE;AAClB,CAAC,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI;AAC5D,EAAE,MAAM,aAAa,CAAC,CAAC,MAAM,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;AACjE,GAAG,MAAM,EAAE,KAAK;AAChB,GAAG,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK;AAC7B,GAAG,CAAC;AACJ,EAAE,MAAM,EAAE;AACV,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;AACzB,CAAC;AACD,CAAC,OAAO;AACR,EAAE,MAAM;AACR,EAAE;AACF,EAAE;AACF;AACG,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,SAAS,CAAC;AAC5E,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,OAAO,eAAe,CAAC,6BAA6B,EAAE,YAAY;AACnE,EAAE,MAAM,KAAK,GAAG,QAAQ,EAAE;AAC1B,EAAE,IAAI,kBAAkB,GAAG,KAAK;AAChC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE;AACtF,GAAG,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;AACpD,GAAG,IAAI,EAAE,OAAO,IAAI,MAAM,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,KAAK,IAAI;AACzF,EAAE;AACF,EAAE,IAAI,MAAM;AACZ,EAAE,IAAI;AACN,GAAG,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,EAAE,kBAAkB,EAAE,CAAC;AAC7D,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,OAAO,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,eAAe,EAAE,EAAE,EAAE,SAAS,CAAC;AAClH,EAAE;AACF,EAAE,MAAM,UAAU,GAAG,kBAAkB,EAAE;AACzC,EAAE,IAAI,QAAQ,GAAG;AACjB,GAAG,MAAM,EAAE,CAAC;AACZ,GAAG,MAAM,EAAE;AACX,GAAG;AACH,EAAE,MAAM,gBAAgB,GAAG,YAAY,CAAC,KAAK,CAAC;AAC9C,EAAE,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,QAAQ,GAAG,MAAM,kBAAkB,CAAC,gBAAgB,CAAC;AACzF,OAAO,IAAI,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,QAAQ,CAAC;AACxF,EAAE,MAAM,OAAO,GAAG,MAAM,wBAAwB,EAAE;AAClD,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE;AAC3B,GAAG,EAAE,EAAE,IAAI;AACX,GAAG,QAAQ,EAAE,MAAM,CAAC,QAAQ;AAC5B,GAAG,SAAS,EAAE,MAAM,CAAC,SAAS;AAC9B,GAAG,UAAU,EAAE,QAAQ,CAAC,MAAM;AAC9B,GAAG,cAAc,EAAE,QAAQ,CAAC,MAAM;AAClC,GAAG,SAAS,EAAE,OAAO,CAAC,SAAS;AAC/B,GAAG,aAAa,EAAE,OAAO,CAAC;AAC1B,GAAG,EAAE,SAAS,CAAC;AACf,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/_server.ts-Bd7KmU8k.js

@@ -1,141 +0,0 @@
-import { ag as isVersionKey, F as createLogger, a as acquireInstallLock, n as buildComposeOptions, p as checkDocker, at as patchSecretsEnvFile, e as applyStack, g as applyUpdate, aN as releaseInstallLock } from './src-AHSKeKr0.js';
-import { g as getState } from './state-CzXOEt0t.js';
-import { d as getRequestId, l as requireCapability, r as requireAdmin, e as errorResponse, k as jsonResponse } from './helpers-9U7R7yqL.js';
-import { w as withSerialQueue } from './serial-queue-D9FEpYVv.js';
-import './chunk-DOvWTNp_.js';
-import 'node:module';
-import './network-preset-CJ1RRnki.js';
-import 'node:fs';
-import 'node:child_process';
-import 'node:path';
-import 'buffer';
-import 'node:url';
-import 'node:os';
-import 'node:crypto';
-import 'events';
-import 'fs';
-import 'node:events';
-import 'node:stream';
-import 'node:string_decoder';
-import 'path';
-import 'assert';
-import 'zlib';
-import 'node:assert';
-import 'node:fs/promises';
-import './endpoints-CnnGlw2U.js';
-import './features-BUWlozR5.js';
-
-//#region src/routes/api/host/update/+server.ts
-var logger = createLogger("update");
-var POST = async (event) => {
-	const requestId = getRequestId(event);
-	const capabilityError = requireCapability(event, "host:updates", requestId);
-	if (capabilityError) return capabilityError;
-	logger.info("update request received", { requestId });
-	const authError = requireAdmin(event, requestId);
-	if (authError) return authError;
-	let service;
-	const targetVersions = {};
-	try {
-		const body = event.request.headers.get("content-type")?.includes("application/json") ? await event.request.json() : {};
-		if (typeof body?.service === "string" && body.service.trim()) service = body.service.trim();
-		if (body?.versions && typeof body.versions === "object") {
-			for (const [k, v] of Object.entries(body.versions)) if (isVersionKey(k) && typeof v === "string" && v.trim()) targetVersions[k] = v.trim();
-		}
-	} catch {}
-	return withSerialQueue("admin:update", async () => {
-		const state = getState();
-		const lock = acquireInstallLock(state.dataDir);
-		if (!lock) {
-			logger.info("update rejected — another install/update is in progress", { requestId });
-			return errorResponse(409, "install_in_progress", "Another install or update is already running. Wait for it to finish, or run 'openpalm unlock' to clear a stale lock.", {}, requestId);
-		}
-		try {
-			const composeOpts = buildComposeOptions(state);
-			if (!(await checkDocker()).ok) {
-				logger.info("Docker unavailable — update rejected", { requestId });
-				return jsonResponse(200, {
-					ok: false,
-					restarted: [],
-					failed: [],
-					dockerAvailable: false,
-					overallSuccess: false
-				}, requestId);
-			}
-			const advanceTargetVersions = () => {
-				if (Object.keys(targetVersions).length === 0) return;
-				patchSecretsEnvFile(state.homeDir, targetVersions);
-				logger.info("advanced versions before recreate", {
-					requestId,
-					targetVersions
-				});
-			};
-			if (service) {
-				advanceTargetVersions();
-				logger.info("scoped service update", {
-					requestId,
-					service
-				});
-				const stackResult = await applyStack({
-					kind: "service",
-					service
-				}, composeOpts);
-				const overallSuccess = stackResult.ok;
-				const status = stackResult.ok ? 200 : 502;
-				logger.info("service update completed", {
-					requestId,
-					service,
-					overallSuccess,
-					startedCount: stackResult.started.length,
-					failedCount: stackResult.failed.length,
-					error: stackResult.error
-				});
-				return jsonResponse(status, {
-					ok: overallSuccess,
-					restarted: stackResult.started,
-					failed: stackResult.failed,
-					dockerAvailable: true,
-					overallSuccess,
-					...stackResult.error ? { error: stackResult.error } : {}
-				}, requestId);
-			}
-			const result = await applyUpdate(state, { lock });
-			logger.info("update applied, running applyStack", {
-				requestId,
-				intended: result.restarted
-			});
-			advanceTargetVersions();
-			const stackResult = await applyStack({ kind: "all" }, composeOpts);
-			const overallSuccess = stackResult.ok;
-			const status = stackResult.ok ? 200 : 502;
-			logger.info("update completed", {
-				requestId,
-				dockerAvailable: true,
-				overallSuccess,
-				startedCount: stackResult.started.length,
-				failedCount: stackResult.failed.length,
-				error: stackResult.error
-			});
-			return jsonResponse(status, {
-				ok: overallSuccess,
-				restarted: stackResult.started,
-				failed: stackResult.failed,
-				dockerAvailable: true,
-				overallSuccess,
-				...stackResult.error ? { error: stackResult.error } : {}
-			}, requestId);
-		} catch (err) {
-			const msg = err instanceof Error ? err.message : String(err);
-			logger.error("update failed", {
-				requestId,
-				error: msg
-			});
-			return errorResponse(500, "update_failed", msg, {}, requestId);
-		} finally {
-			releaseInstallLock(lock);
-		}
-	});
-};
-
-export { POST };
-//# sourceMappingURL=_server.ts-Bd7KmU8k.js.map

package/build/server/chunks/_server.ts-Bd7KmU8k.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-Bd7KmU8k.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/host/update/_server.ts.js"],"sourcesContent":["import { J as patchSecretsEnvFile, L as isVersionKey, Nt as createLogger, a as applyUpdate, p as releaseInstallLock, t as buildComposeOptions, u as acquireInstallLock } from \"../../../../../chunks/compose-args.js\";\nimport { i as checkDocker, t as applyStack } from \"../../../../../chunks/docker.js\";\nimport \"../../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../../chunks/state.js\";\nimport { a as getRequestId, c as jsonResponse, d as requireCapability, r as errorResponse, u as requireAdmin } from \"../../../../../chunks/helpers.js\";\nimport { t as withSerialQueue } from \"../../../../../chunks/serial-queue.js\";\n//#region src/routes/api/host/update/+server.ts\nvar logger = createLogger(\"update\");\nvar POST = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst capabilityError = requireCapability(event, \"host:updates\", requestId);\n\tif (capabilityError) return capabilityError;\n\tlogger.info(\"update request received\", { requestId });\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tlet service;\n\tconst targetVersions = {};\n\ttry {\n\t\tconst body = event.request.headers.get(\"content-type\")?.includes(\"application/json\") ? await event.request.json() : {};\n\t\tif (typeof body?.service === \"string\" && body.service.trim()) service = body.service.trim();\n\t\tif (body?.versions && typeof body.versions === \"object\") {\n\t\t\tfor (const [k, v] of Object.entries(body.versions)) if (isVersionKey(k) && typeof v === \"string\" && v.trim()) targetVersions[k] = v.trim();\n\t\t}\n\t} catch {}\n\treturn withSerialQueue(\"admin:update\", async () => {\n\t\tconst state = getState();\n\t\tconst lock = acquireInstallLock(state.dataDir);\n\t\tif (!lock) {\n\t\t\tlogger.info(\"update rejected — another install/update is in progress\", { requestId });\n\t\t\treturn errorResponse(409, \"install_in_progress\", \"Another install or update is already running. Wait for it to finish, or run 'openpalm unlock' to clear a stale lock.\", {}, requestId);\n\t\t}\n\t\ttry {\n\t\t\tconst composeOpts = buildComposeOptions(state);\n\t\t\tif (!(await checkDocker()).ok) {\n\t\t\t\tlogger.info(\"Docker unavailable — update rejected\", { requestId });\n\t\t\t\treturn jsonResponse(200, {\n\t\t\t\t\tok: false,\n\t\t\t\t\trestarted: [],\n\t\t\t\t\tfailed: [],\n\t\t\t\t\tdockerAvailable: false,\n\t\t\t\t\toverallSuccess: false\n\t\t\t\t}, requestId);\n\t\t\t}\n\t\t\tconst advanceTargetVersions = () => {\n\t\t\t\tif (Object.keys(targetVersions).length === 0) return;\n\t\t\t\tpatchSecretsEnvFile(state.homeDir, targetVersions);\n\t\t\t\tlogger.info(\"advanced versions before recreate\", {\n\t\t\t\t\trequestId,\n\t\t\t\t\ttargetVersions\n\t\t\t\t});\n\t\t\t};\n\t\t\tif (service) {\n\t\t\t\tadvanceTargetVersions();\n\t\t\t\tlogger.info(\"scoped service update\", {\n\t\t\t\t\trequestId,\n\t\t\t\t\tservice\n\t\t\t\t});\n\t\t\t\tconst stackResult = await applyStack({\n\t\t\t\t\tkind: \"service\",\n\t\t\t\t\tservice\n\t\t\t\t}, composeOpts);\n\t\t\t\tconst overallSuccess = stackResult.ok;\n\t\t\t\tconst status = stackResult.ok ? 200 : 502;\n\t\t\t\tlogger.info(\"service update completed\", {\n\t\t\t\t\trequestId,\n\t\t\t\t\tservice,\n\t\t\t\t\toverallSuccess,\n\t\t\t\t\tstartedCount: stackResult.started.length,\n\t\t\t\t\tfailedCount: stackResult.failed.length,\n\t\t\t\t\terror: stackResult.error\n\t\t\t\t});\n\t\t\t\treturn jsonResponse(status, {\n\t\t\t\t\tok: overallSuccess,\n\t\t\t\t\trestarted: stackResult.started,\n\t\t\t\t\tfailed: stackResult.failed,\n\t\t\t\t\tdockerAvailable: true,\n\t\t\t\t\toverallSuccess,\n\t\t\t\t\t...stackResult.error ? { error: stackResult.error } : {}\n\t\t\t\t}, requestId);\n\t\t\t}\n\t\t\tconst result = await applyUpdate(state, { lock });\n\t\t\tlogger.info(\"update applied, running applyStack\", {\n\t\t\t\trequestId,\n\t\t\t\tintended: result.restarted\n\t\t\t});\n\t\t\tadvanceTargetVersions();\n\t\t\tconst stackResult = await applyStack({ kind: \"all\" }, composeOpts);\n\t\t\tconst overallSuccess = stackResult.ok;\n\t\t\tconst status = stackResult.ok ? 200 : 502;\n\t\t\tlogger.info(\"update completed\", {\n\t\t\t\trequestId,\n\t\t\t\tdockerAvailable: true,\n\t\t\t\toverallSuccess,\n\t\t\t\tstartedCount: stackResult.started.length,\n\t\t\t\tfailedCount: stackResult.failed.length,\n\t\t\t\terror: stackResult.error\n\t\t\t});\n\t\t\treturn jsonResponse(status, {\n\t\t\t\tok: overallSuccess,\n\t\t\t\trestarted: stackResult.started,\n\t\t\t\tfailed: stackResult.failed,\n\t\t\t\tdockerAvailable: true,\n\t\t\t\toverallSuccess,\n\t\t\t\t...stackResult.error ? { error: stackResult.error } : {}\n\t\t\t}, requestId);\n\t\t} catch (err) {\n\t\t\tconst msg = err instanceof Error ? err.message : String(err);\n\t\t\tlogger.error(\"update failed\", {\n\t\t\t\trequestId,\n\t\t\t\terror: msg\n\t\t\t});\n\t\t\treturn errorResponse(500, \"update_failed\", msg, {}, requestId);\n\t\t} finally {\n\t\t\treleaseInstallLock(lock);\n\t\t}\n\t});\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAMA;AACA,IAAI,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC;AAChC,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,SAAS,CAAC;AAC5E,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,SAAS,EAAE,CAAC;AACtD,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,IAAI,OAAO;AACZ,CAAC,MAAM,cAAc,GAAG,EAAE;AAC1B,CAAC,IAAI;AACL,EAAE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,kBAAkB,CAAC,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE;AACxH,EAAE,IAAI,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;AAC7F,EAAE,IAAI,IAAI,EAAE,QAAQ,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE;AAC3D,GAAG,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,YAAY,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AAC7I,EAAE;AACF,CAAC,CAAC,CAAC,MAAM,CAAC;AACV,CAAC,OAAO,eAAe,CAAC,cAAc,EAAE,YAAY;AACpD,EAAE,MAAM,KAAK,GAAG,QAAQ,EAAE;AAC1B,EAAE,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC;AAChD,EAAE,IAAI,CAAC,IAAI,EAAE;AACb,GAAG,MAAM,CAAC,IAAI,CAAC,yDAAyD,EAAE,EAAE,SAAS,EAAE,CAAC;AACxF,GAAG,OAAO,aAAa,CAAC,GAAG,EAAE,qBAAqB,EAAE,sHAAsH,EAAE,EAAE,EAAE,SAAS,CAAC;AAC1L,EAAE;AACF,EAAE,IAAI;AACN,GAAG,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC;AACjD,GAAG,IAAI,CAAC,CAAC,MAAM,WAAW,EAAE,EAAE,EAAE,EAAE;AAClC,IAAI,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,EAAE,SAAS,EAAE,CAAC;AACtE,IAAI,OAAO,YAAY,CAAC,GAAG,EAAE;AAC7B,KAAK,EAAE,EAAE,KAAK;AACd,KAAK,SAAS,EAAE,EAAE;AAClB,KAAK,MAAM,EAAE,EAAE;AACf,KAAK,eAAe,EAAE,KAAK;AAC3B,KAAK,cAAc,EAAE;AACrB,KAAK,EAAE,SAAS,CAAC;AACjB,GAAG;AACH,GAAG,MAAM,qBAAqB,GAAG,MAAM;AACvC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE;AAClD,IAAI,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC;AACtD,IAAI,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;AACrD,KAAK,SAAS;AACd,KAAK;AACL,KAAK,CAAC;AACN,GAAG,CAAC;AACJ,GAAG,IAAI,OAAO,EAAE;AAChB,IAAI,qBAAqB,EAAE;AAC3B,IAAI,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;AACzC,KAAK,SAAS;AACd,KAAK;AACL,KAAK,CAAC;AACN,IAAI,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC;AACzC,KAAK,IAAI,EAAE,SAAS;AACpB,KAAK;AACL,KAAK,EAAE,WAAW,CAAC;AACnB,IAAI,MAAM,cAAc,GAAG,WAAW,CAAC,EAAE;AACzC,IAAI,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,GAAG,GAAG,GAAG,GAAG;AAC7C,IAAI,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;AAC5C,KAAK,SAAS;AACd,KAAK,OAAO;AACZ,KAAK,cAAc;AACnB,KAAK,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM;AAC7C,KAAK,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM;AAC3C,KAAK,KAAK,EAAE,WAAW,CAAC;AACxB,KAAK,CAAC;AACN,IAAI,OAAO,YAAY,CAAC,MAAM,EAAE;AAChC,KAAK,EAAE,EAAE,cAAc;AACvB,KAAK,SAAS,EAAE,WAAW,CAAC,OAAO;AACnC,KAAK,MAAM,EAAE,WAAW,CAAC,MAAM;AAC/B,KAAK,eAAe,EAAE,IAAI;AAC1B,KAAK,cAAc;AACnB,KAAK,GAAG,WAAW,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,GAAG;AAC3D,KAAK,EAAE,SAAS,CAAC;AACjB,GAAG;AACH,GAAG,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC;AACpD,GAAG,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;AACrD,IAAI,SAAS;AACb,IAAI,QAAQ,EAAE,MAAM,CAAC;AACrB,IAAI,CAAC;AACL,GAAG,qBAAqB,EAAE;AAC1B,GAAG,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,CAAC;AACrE,GAAG,MAAM,cAAc,GAAG,WAAW,CAAC,EAAE;AACxC,GAAG,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,GAAG,GAAG,GAAG,GAAG;AAC5C,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;AACnC,IAAI,SAAS;AACb,IAAI,eAAe,EAAE,IAAI;AACzB,IAAI,cAAc;AAClB,IAAI,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM;AAC5C,IAAI,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM;AAC1C,IAAI,KAAK,EAAE,WAAW,CAAC;AACvB,IAAI,CAAC;AACL,GAAG,OAAO,YAAY,CAAC,MAAM,EAAE;AAC/B,IAAI,EAAE,EAAE,cAAc;AACtB,IAAI,SAAS,EAAE,WAAW,CAAC,OAAO;AAClC,IAAI,MAAM,EAAE,WAAW,CAAC,MAAM;AAC9B,IAAI,eAAe,EAAE,IAAI;AACzB,IAAI,cAAc;AAClB,IAAI,GAAG,WAAW,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,GAAG;AAC1D,IAAI,EAAE,SAAS,CAAC;AAChB,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC;AAC/D,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE;AACjC,IAAI,SAAS;AACb,IAAI,KAAK,EAAE;AACX,IAAI,CAAC;AACL,GAAG,OAAO,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC;AACjE,EAAE,CAAC,SAAS;AACZ,GAAG,kBAAkB,CAAC,IAAI,CAAC;AAC3B,EAAE;AACF,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/_server.ts-BjfWddPf.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-BjfWddPf.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/runtime/landing/_server.ts.js"],"sourcesContent":["import { r as json } from \"../../../../../chunks/exports.js\";\nimport { r as resolveRequestLanding } from \"../../../../../chunks/landing.js\";\n//#region src/routes/api/runtime/landing/+server.ts\n/**\n* GET /api/runtime/landing — public landing-resolver endpoint (review\n* findings J2/J3, plan ui-runtime-modes-plan.md §6.5).\n*\n* PUBLIC by design (same posture as /api/setup/status and /api/runtime): no\n* auth is consulted. Wraps the SAME `resolveRequestLanding()` the host UI's\n* own hooks.server.ts navigation guard uses, so any external caller —\n* Electron's `resolveInitialUrl`, `openpalm app`/`openpalm admin`, a future\n* client — can ask \"where should a session land right now?\" without issuing\n* a document navigation and parsing a redirect.\n*\n* J2: this is what lets Electron's default surface reach the landing\n* matrix's recovery branches (installed_offline -> /host, installed_broken ->\n* /host?tab=diagnostics) instead of only ever seeing /setup or /chat via the\n* old /api/setup/status probe.\n* J3: nothing produces a 'pending' migration status yet, but\n* resolveRequestLanding already routes that to /attention — this endpoint\n* needs no changes when the first blocking migration lands.\n*\n* Cache-Control: no-store — a stale landing (e.g. cached across a stack\n* restart) would misroute a launcher into a dead surface.\n*/\nvar GET = async (event) => {\n\treturn json({ landing: await resolveRequestLanding(event) }, { headers: { \"cache-control\": \"no-store\" } });\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,CAAC;AAC3G;;;;"}

package/build/server/chunks/_server.ts-Bla3fiCh.js

@@ -1,106 +0,0 @@
-import { j as json } from './exports-CcmcYU0M.js';
-import { S as SERVICE_VERSION_KEYS, s as compareComparableVersions, D as DOCKER_IMAGE_NAMES } from './src-AHSKeKr0.js';
-import { d as getRequestId, l as requireCapability, r as requireAdmin } from './helpers-9U7R7yqL.js';
-import './utils-OXHIhUb5.js';
-import './chunk-DOvWTNp_.js';
-import 'node:module';
-import './network-preset-CJ1RRnki.js';
-import 'node:fs';
-import 'node:child_process';
-import 'node:path';
-import 'buffer';
-import 'node:url';
-import 'node:os';
-import 'node:crypto';
-import 'events';
-import 'fs';
-import 'node:events';
-import 'node:stream';
-import 'node:string_decoder';
-import 'path';
-import 'assert';
-import 'zlib';
-import 'node:assert';
-import 'node:fs/promises';
-import './endpoints-CnnGlw2U.js';
-import './state-CzXOEt0t.js';
-import './features-BUWlozR5.js';
-
-//#region src/routes/api/host/versions/latest/+server.ts
-var DOCKER_HUB_NAMESPACE = "openpalm";
-var STABLE_SEMVER = /^v?(\d+\.\d+\.\d+)$/;
-var VOICE_STABLE = /^v?(\d+\.\d+\.\d+)-\w+$/;
-async function resolveNpmLatest(pkg) {
-	try {
-		const res = await fetch(`https://registry.npmjs.org/${encodeURIComponent(pkg)}/latest`, {
-			headers: { Accept: "application/json" },
-			signal: AbortSignal.timeout(6e3)
-		});
-		if (!res.ok) return null;
-		const data = await res.json();
-		return typeof data.version === "string" ? data.version : null;
-	} catch {
-		return null;
-	}
-}
-async function resolveDockerLatest(image) {
-	try {
-		const res = await fetch(`https://hub.docker.com/v2/repositories/${DOCKER_HUB_NAMESPACE}/${image}/tags?page_size=100&ordering=last_updated`, {
-			headers: { Accept: "application/json" },
-			signal: AbortSignal.timeout(8e3)
-		});
-		if (!res.ok) return null;
-		const data = await res.json();
-		const isVoice = image === "voice";
-		const candidates = [];
-		for (const tag of data.results ?? []) {
-			const plain = tag.name.match(STABLE_SEMVER);
-			if (plain) {
-				candidates.push(plain[1]);
-				continue;
-			}
-			if (isVoice) {
-				const voice = tag.name.match(VOICE_STABLE);
-				if (voice) candidates.push(voice[1]);
-			}
-		}
-		if (candidates.length === 0) return null;
-		return candidates.sort(compareComparableVersions).at(-1) ?? null;
-	} catch {
-		return null;
-	}
-}
-var CACHE_TTL_MS = 300 * 1e3;
-var cachedResult = null;
-var cacheExpiresAt = 0;
-var GET = async (event) => {
-	const requestId = getRequestId(event);
-	const capabilityError = requireCapability(event, "host:updates", requestId);
-	if (capabilityError) return capabilityError;
-	const authError = requireAdmin(event, requestId);
-	if (authError) return authError;
-	if (cachedResult && Date.now() < cacheExpiresAt) return json(cachedResult);
-	const errors = [];
-	const [dockerResults, uiResult] = await Promise.all([Promise.all(SERVICE_VERSION_KEYS.map(async (key) => {
-		const image = DOCKER_IMAGE_NAMES[key];
-		const version = await resolveDockerLatest(image);
-		if (!version) errors.push(`Docker Hub: could not resolve latest for ${DOCKER_HUB_NAMESPACE}/${image}`);
-		return [key, version];
-	})), resolveNpmLatest("@openpalm/ui").then((v) => {
-		if (!v) errors.push("npm: could not resolve latest for @openpalm/ui");
-		return ["OP_UI_VERSION", v];
-	})]);
-	const versions = {};
-	for (const [key, val] of [...dockerResults, uiResult]) versions[key] = val;
-	const result = {
-		versions,
-		errors,
-		fetchedAt: (/* @__PURE__ */ new Date()).toISOString()
-	};
-	cachedResult = result;
-	cacheExpiresAt = Date.now() + CACHE_TTL_MS;
-	return json(result);
-};
-
-export { GET };
-//# sourceMappingURL=_server.ts-Bla3fiCh.js.map

package/build/server/chunks/_server.ts-Bla3fiCh.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-Bla3fiCh.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/host/versions/latest/_server.ts.js"],"sourcesContent":["import { r as json } from \"../../../../../../chunks/exports.js\";\nimport { F as DOCKER_IMAGE_NAMES, I as SERVICE_VERSION_KEYS, gt as compareComparableVersions } from \"../../../../../../chunks/compose-args.js\";\nimport \"../../../../../../chunks/src.js\";\nimport { a as getRequestId, d as requireCapability, u as requireAdmin } from \"../../../../../../chunks/helpers.js\";\n//#region src/routes/api/host/versions/latest/+server.ts\nvar DOCKER_HUB_NAMESPACE = \"openpalm\";\nvar STABLE_SEMVER = /^v?(\\d+\\.\\d+\\.\\d+)$/;\nvar VOICE_STABLE = /^v?(\\d+\\.\\d+\\.\\d+)-\\w+$/;\nasync function resolveNpmLatest(pkg) {\n\ttry {\n\t\tconst res = await fetch(`https://registry.npmjs.org/${encodeURIComponent(pkg)}/latest`, {\n\t\t\theaders: { Accept: \"application/json\" },\n\t\t\tsignal: AbortSignal.timeout(6e3)\n\t\t});\n\t\tif (!res.ok) return null;\n\t\tconst data = await res.json();\n\t\treturn typeof data.version === \"string\" ? data.version : null;\n\t} catch {\n\t\treturn null;\n\t}\n}\nasync function resolveDockerLatest(image) {\n\ttry {\n\t\tconst res = await fetch(`https://hub.docker.com/v2/repositories/${DOCKER_HUB_NAMESPACE}/${image}/tags?page_size=100&ordering=last_updated`, {\n\t\t\theaders: { Accept: \"application/json\" },\n\t\t\tsignal: AbortSignal.timeout(8e3)\n\t\t});\n\t\tif (!res.ok) return null;\n\t\tconst data = await res.json();\n\t\tconst isVoice = image === \"voice\";\n\t\tconst candidates = [];\n\t\tfor (const tag of data.results ?? []) {\n\t\t\tconst plain = tag.name.match(STABLE_SEMVER);\n\t\t\tif (plain) {\n\t\t\t\tcandidates.push(plain[1]);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (isVoice) {\n\t\t\t\tconst voice = tag.name.match(VOICE_STABLE);\n\t\t\t\tif (voice) candidates.push(voice[1]);\n\t\t\t}\n\t\t}\n\t\tif (candidates.length === 0) return null;\n\t\treturn candidates.sort(compareComparableVersions).at(-1) ?? null;\n\t} catch {\n\t\treturn null;\n\t}\n}\nvar CACHE_TTL_MS = 300 * 1e3;\nvar cachedResult = null;\nvar cacheExpiresAt = 0;\nvar GET = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst capabilityError = requireCapability(event, \"host:updates\", requestId);\n\tif (capabilityError) return capabilityError;\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tif (cachedResult && Date.now() < cacheExpiresAt) return json(cachedResult);\n\tconst errors = [];\n\tconst [dockerResults, uiResult] = await Promise.all([Promise.all(SERVICE_VERSION_KEYS.map(async (key) => {\n\t\tconst image = DOCKER_IMAGE_NAMES[key];\n\t\tconst version = await resolveDockerLatest(image);\n\t\tif (!version) errors.push(`Docker Hub: could not resolve latest for ${DOCKER_HUB_NAMESPACE}/${image}`);\n\t\treturn [key, version];\n\t})), resolveNpmLatest(\"@openpalm/ui\").then((v) => {\n\t\tif (!v) errors.push(\"npm: could not resolve latest for @openpalm/ui\");\n\t\treturn [\"OP_UI_VERSION\", v];\n\t})]);\n\tconst versions = {};\n\tfor (const [key, val] of [...dockerResults, uiResult]) versions[key] = val;\n\tconst result = {\n\t\tversions,\n\t\terrors,\n\t\tfetchedAt: (/* @__PURE__ */ new Date()).toISOString()\n\t};\n\tcachedResult = result;\n\tcacheExpiresAt = Date.now() + CACHE_TTL_MS;\n\treturn json(result);\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIA;AACA,IAAI,oBAAoB,GAAG,UAAU;AACrC,IAAI,aAAa,GAAG,qBAAqB;AACzC,IAAI,YAAY,GAAG,yBAAyB;AAC5C,eAAe,gBAAgB,CAAC,GAAG,EAAE;AACrC,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,CAAC,2BAA2B,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE;AAC1F,GAAG,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;AAC1C,GAAG,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG;AAClC,GAAG,CAAC;AACJ,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,IAAI;AAC1B,EAAE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE;AAC/B,EAAE,OAAO,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI;AAC/D,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,IAAI;AACb,CAAC;AACD;AACA,eAAe,mBAAmB,CAAC,KAAK,EAAE;AAC1C,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,CAAC,uCAAuC,EAAE,oBAAoB,CAAC,CAAC,EAAE,KAAK,CAAC,yCAAyC,CAAC,EAAE;AAC9I,GAAG,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;AAC1C,GAAG,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG;AAClC,GAAG,CAAC;AACJ,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,IAAI;AAC1B,EAAE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE;AAC/B,EAAE,MAAM,OAAO,GAAG,KAAK,KAAK,OAAO;AACnC,EAAE,MAAM,UAAU,GAAG,EAAE;AACvB,EAAE,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE;AACxC,GAAG,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;AAC9C,GAAG,IAAI,KAAK,EAAE;AACd,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC7B,IAAI;AACJ,GAAG;AACH,GAAG,IAAI,OAAO,EAAE;AAChB,IAAI,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;AAC9C,IAAI,IAAI,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACxC,GAAG;AACH,EAAE;AACF,EAAE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,IAAI;AAC1C,EAAE,OAAO,UAAU,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI;AAClE,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,IAAI;AACb,CAAC;AACD;AACA,IAAI,YAAY,GAAG,GAAG,GAAG,GAAG;AAC5B,IAAI,YAAY,GAAG,IAAI;AACvB,IAAI,cAAc,GAAG,CAAC;AACnB,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,SAAS,CAAC;AAC5E,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,IAAI,YAAY,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,EAAE,OAAO,IAAI,CAAC,YAAY,CAAC;AAC3E,CAAC,MAAM,MAAM,GAAG,EAAE;AAClB,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,GAAG,KAAK;AAC1G,EAAE,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC;AACvC,EAAE,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,yCAAyC,EAAE,oBAAoB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AACxG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC;AACvB,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;AACnD,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC;AACvE,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;AAC7B,CAAC,CAAC,CAAC,CAAC,CAAC;AACL,CAAC,MAAM,QAAQ,GAAG,EAAE;AACpB,CAAC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,aAAa,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,GAAG;AAC3E,CAAC,MAAM,MAAM,GAAG;AAChB,EAAE,QAAQ;AACV,EAAE,MAAM;AACR,EAAE,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW;AACrD,EAAE;AACF,CAAC,YAAY,GAAG,MAAM;AACtB,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY;AAC3C,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC;AACpB;;;;"}

package/build/server/chunks/_server.ts-BnCHdcon.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-BnCHdcon.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/assistant/persona/_server.ts.js"],"sourcesContent":["import { nt as writeFileAtomic } from \"../../../../../chunks/compose-args.js\";\nimport \"../../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../../chunks/state.js\";\nimport { a as getRequestId, c as jsonResponse, d as requireCapability, p as withAdminBody, r as errorResponse, u as requireAdmin } from \"../../../../../chunks/helpers.js\";\nimport { existsSync, mkdirSync, readFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\n//#region src/routes/api/assistant/persona/+server.ts\n/**\n* GET/PUT /api/assistant/persona — the assistant-owned persona markdown\n* (plan ui-runtime-modes-plan.md Phase 4 step 2, §5.F, §6.4).\n*\n* The ASSISTANT-SCOPED half of the old /admin/assistant endpoint. Persona\n* lives in config/assistant/persona.md — one of the two read/write mounts the\n* assistant container keeps (plan §6.9) — so assistant-container mode CAN\n* edit it, while pwa-static (no assistant-settings capability) is refused\n* with 403 even for a valid admin session (plan §8.5).\n*/\nfunction personaPath(configDir) {\n\treturn join(configDir, \"assistant\", \"persona.md\");\n}\nfunction readPersona(configDir) {\n\tconst path = personaPath(configDir);\n\tif (!existsSync(path)) return \"\";\n\ttry {\n\t\treturn readFileSync(path, \"utf-8\");\n\t} catch {\n\t\treturn \"\";\n\t}\n}\nvar GET = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst capabilityError = requireCapability(event, \"assistant-settings:read\", requestId);\n\tif (capabilityError) return capabilityError;\n\tconst denied = requireAdmin(event, requestId);\n\tif (denied) return denied;\n\treturn jsonResponse(200, {\n\t\tpersonaPath: \"config/assistant/persona.md\",\n\t\tpersonaContent: readPersona(getState().configDir)\n\t}, requestId);\n};\nvar PUT = async (event) => {\n\tconst capabilityError = requireCapability(event, \"assistant-settings:write\", getRequestId(event));\n\tif (capabilityError) return capabilityError;\n\treturn withAdminBody(event, async ({ requestId, body }) => {\n\t\tif (typeof body.personaContent !== \"string\") return errorResponse(400, \"bad_request\", \"personaContent must be a string\", {}, requestId);\n\t\tconst state = getState();\n\t\tconst path = personaPath(state.configDir);\n\t\tmkdirSync(join(state.configDir, \"assistant\"), { recursive: true });\n\t\tconst personaContent = body.personaContent.endsWith(\"\\n\") ? body.personaContent : `${body.personaContent}\\n`;\n\t\twriteFileAtomic(path, personaContent, 420);\n\t\treturn jsonResponse(200, {\n\t\t\tok: true,\n\t\t\tpersonaPath: \"config/assistant/persona.md\",\n\t\t\tpersonaContent\n\t\t}, requestId);\n\t});\n};\n//#endregion\nexport { GET, PUT };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAMA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,WAAW,CAAC,SAAS,EAAE;AAChC,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC;AAClD;AACA,SAAS,WAAW,CAAC,SAAS,EAAE;AAChC,CAAC,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC;AACpC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE;AACjC,CAAC,IAAI;AACL,EAAE,OAAO,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC;AACpC,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,EAAE;AACX,CAAC;AACD;AACG,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,yBAAyB,EAAE,SAAS,CAAC;AACvF,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AAC9C,CAAC,IAAI,MAAM,EAAE,OAAO,MAAM;AAC1B,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE;AAC1B,EAAE,WAAW,EAAE,6BAA6B;AAC5C,EAAE,cAAc,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,SAAS;AAClD,EAAE,EAAE,SAAS,CAAC;AACd;AACG,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,0BAA0B,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;AAClG,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,OAAO,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK;AAC5D,EAAE,IAAI,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,iCAAiC,EAAE,EAAE,EAAE,SAAS,CAAC;AACzI,EAAE,MAAM,KAAK,GAAG,QAAQ,EAAE;AAC1B,EAAE,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC;AAC3C,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACpE,EAAE,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,GAAG,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;AAC9G,EAAE,eAAe,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC;AAC5C,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE;AAC3B,GAAG,EAAE,EAAE,IAAI;AACX,GAAG,WAAW,EAAE,6BAA6B;AAC7C,GAAG;AACH,GAAG,EAAE,SAAS,CAAC;AACf,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/_server.ts-BpNKHMXM.js

@@ -1,66 +0,0 @@
-import { g as getActiveConnection, l as listConnections, U as USER_ADDABLE_CONNECTION_KINDS, v as validateEndpointUrl, a as addConnection } from './endpoints-CnnGlw2U.js';
-import { d as getRequestId, k as jsonResponse, l as requireCapability, w as withAdminBody, e as errorResponse } from './helpers-9U7R7yqL.js';
-import { r as requireConnectionsManage, p as publishConnection, a as publishConnectionEntry } from './connections-api-mP7OE2x7.js';
-import './src-AHSKeKr0.js';
-import './chunk-DOvWTNp_.js';
-import 'node:module';
-import './network-preset-CJ1RRnki.js';
-import 'node:fs';
-import 'node:child_process';
-import 'node:path';
-import 'buffer';
-import 'node:url';
-import 'node:os';
-import 'node:crypto';
-import 'events';
-import 'fs';
-import 'node:events';
-import 'node:stream';
-import 'node:string_decoder';
-import 'path';
-import 'assert';
-import 'zlib';
-import 'node:assert';
-import 'node:fs/promises';
-import './state-CzXOEt0t.js';
-import './features-BUWlozR5.js';
-
-//#region src/routes/api/connections/+server.ts
-var GET = async (event) => {
-	const requestId = getRequestId(event);
-	const guardError = requireConnectionsManage(event, requestId);
-	if (guardError) return guardError;
-	return jsonResponse(200, {
-		connections: listConnections().map(publishConnection),
-		activeId: publishConnection(getActiveConnection()).id
-	}, requestId);
-};
-var POST = async (event) => {
-	const capabilityError = requireCapability(event, "connections:manage", getRequestId(event));
-	if (capabilityError) return capabilityError;
-	return withAdminBody(event, async ({ requestId, body }) => {
-		const label = typeof body.label === "string" ? body.label : "";
-		const url = typeof body.url === "string" ? body.url : "";
-		const password = typeof body.password === "string" && body.password.length > 0 ? body.password : void 0;
-		let kind;
-		if (body.kind !== void 0) {
-			if (typeof body.kind !== "string" || !USER_ADDABLE_CONNECTION_KINDS.includes(body.kind)) return errorResponse(400, "invalid_connection", "kind must be remote-opencode or openpalm-client-api", {}, requestId);
-			kind = body.kind;
-		}
-		const urlCheck = validateEndpointUrl(url);
-		if (!urlCheck.ok) return errorResponse(400, "invalid_connection", "URL must be a valid http(s) URL", {}, requestId);
-		try {
-			return jsonResponse(201, { connection: publishConnectionEntry(addConnection({
-				label,
-				url: urlCheck.url,
-				password,
-				kind
-			})) }, requestId);
-		} catch (e) {
-			return errorResponse(400, "invalid_connection", e instanceof Error ? e.message : "failed to create connection", {}, requestId);
-		}
-	});
-};
-
-export { GET, POST };
-//# sourceMappingURL=_server.ts-BpNKHMXM.js.map

package/build/server/chunks/_server.ts-BpNKHMXM.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-BpNKHMXM.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/connections/_server.ts.js"],"sourcesContent":["import { a as listConnections, i as getActiveConnection, l as validateEndpointUrl, n as addConnection, t as USER_ADDABLE_CONNECTION_KINDS } from \"../../../../chunks/endpoints.js\";\nimport { a as getRequestId, c as jsonResponse, d as requireCapability, p as withAdminBody, r as errorResponse } from \"../../../../chunks/helpers.js\";\nimport { n as publishConnectionEntry, r as requireConnectionsManage, t as publishConnection } from \"../../../../chunks/connections-api.js\";\n//#region src/routes/api/connections/+server.ts\nvar GET = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst guardError = requireConnectionsManage(event, requestId);\n\tif (guardError) return guardError;\n\treturn jsonResponse(200, {\n\t\tconnections: listConnections().map(publishConnection),\n\t\tactiveId: publishConnection(getActiveConnection()).id\n\t}, requestId);\n};\nvar POST = async (event) => {\n\tconst capabilityError = requireCapability(event, \"connections:manage\", getRequestId(event));\n\tif (capabilityError) return capabilityError;\n\treturn withAdminBody(event, async ({ requestId, body }) => {\n\t\tconst label = typeof body.label === \"string\" ? body.label : \"\";\n\t\tconst url = typeof body.url === \"string\" ? body.url : \"\";\n\t\tconst password = typeof body.password === \"string\" && body.password.length > 0 ? body.password : void 0;\n\t\tlet kind;\n\t\tif (body.kind !== void 0) {\n\t\t\tif (typeof body.kind !== \"string\" || !USER_ADDABLE_CONNECTION_KINDS.includes(body.kind)) return errorResponse(400, \"invalid_connection\", \"kind must be remote-opencode or openpalm-client-api\", {}, requestId);\n\t\t\tkind = body.kind;\n\t\t}\n\t\tconst urlCheck = validateEndpointUrl(url);\n\t\tif (!urlCheck.ok) return errorResponse(400, \"invalid_connection\", \"URL must be a valid http(s) URL\", {}, requestId);\n\t\ttry {\n\t\t\treturn jsonResponse(201, { connection: publishConnectionEntry(addConnection({\n\t\t\t\tlabel,\n\t\t\t\turl: urlCheck.url,\n\t\t\t\tpassword,\n\t\t\t\tkind\n\t\t\t})) }, requestId);\n\t\t} catch (e) {\n\t\t\treturn errorResponse(400, \"invalid_connection\", e instanceof Error ? e.message : \"failed to create connection\", {}, requestId);\n\t\t}\n\t});\n};\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAGA;AACG,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,EAAE,SAAS,CAAC;AAC9D,CAAC,IAAI,UAAU,EAAE,OAAO,UAAU;AAClC,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE;AAC1B,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC;AACvD,EAAE,QAAQ,EAAE,iBAAiB,CAAC,mBAAmB,EAAE,CAAC,CAAC;AACrD,EAAE,EAAE,SAAS,CAAC;AACd;AACG,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,oBAAoB,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;AAC5F,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,OAAO,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK;AAC5D,EAAE,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE;AAChE,EAAE,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,GAAG,IAAI,CAAC,GAAG,GAAG,EAAE;AAC1D,EAAE,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,MAAM;AACzG,EAAE,IAAI,IAAI;AACV,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE;AAC5B,GAAG,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,6BAA6B,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,EAAE,qDAAqD,EAAE,EAAE,EAAE,SAAS,CAAC;AACjN,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI;AACnB,EAAE;AACF,EAAE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC;AAC3C,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,EAAE,iCAAiC,EAAE,EAAE,EAAE,SAAS,CAAC;AACrH,EAAE,IAAI;AACN,GAAG,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,sBAAsB,CAAC,aAAa,CAAC;AAC/E,IAAI,KAAK;AACT,IAAI,GAAG,EAAE,QAAQ,CAAC,GAAG;AACrB,IAAI,QAAQ;AACZ,IAAI;AACJ,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC;AACpB,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE;AACd,GAAG,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,EAAE,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC,OAAO,GAAG,6BAA6B,EAAE,EAAE,EAAE,SAAS,CAAC;AACjI,EAAE;AACF,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/_server.ts-CV7PsNSs.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-CV7PsNSs.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/host/uninstall/_server.ts.js"],"sourcesContent":["import { Nt as createLogger, i as applyUninstall, t as buildComposeOptions } from \"../../../../../chunks/compose-args.js\";\nimport { i as checkDocker, l as composeDown } from \"../../../../../chunks/docker.js\";\nimport \"../../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../../chunks/state.js\";\nimport { a as getRequestId, c as jsonResponse, d as requireCapability, r as errorResponse, u as requireAdmin } from \"../../../../../chunks/helpers.js\";\nimport { t as withSerialQueue } from \"../../../../../chunks/serial-queue.js\";\n//#region src/routes/api/host/uninstall/+server.ts\nvar logger = createLogger(\"uninstall\");\nvar POST = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst capabilityError = requireCapability(event, \"host:recovery\", requestId);\n\tif (capabilityError) return capabilityError;\n\tlogger.info(\"uninstall request received\", { requestId });\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\treturn withSerialQueue(\"admin:uninstall\", async () => {\n\t\ttry {\n\t\t\tconst state = getState();\n\t\t\tconst dockerCheck = await checkDocker();\n\t\t\tif (dockerCheck.ok) await composeDown(buildComposeOptions(state));\n\t\t\tlogger.info(\"stopping containers and applying uninstall\", {\n\t\t\t\trequestId,\n\t\t\t\tdockerAvailable: dockerCheck.ok\n\t\t\t});\n\t\t\tconst result = await applyUninstall(state);\n\t\t\tlogger.info(\"uninstall completed\", {\n\t\t\t\trequestId,\n\t\t\t\tstopped: result.stopped\n\t\t\t});\n\t\t\treturn jsonResponse(200, {\n\t\t\t\tok: true,\n\t\t\t\t...result,\n\t\t\t\tdockerAvailable: dockerCheck.ok\n\t\t\t}, requestId);\n\t\t} catch (err) {\n\t\t\tconst msg = err instanceof Error ? err.message : String(err);\n\t\t\tlogger.error(\"uninstall failed\", {\n\t\t\t\trequestId,\n\t\t\t\terror: msg\n\t\t\t});\n\t\t\treturn errorResponse(500, \"uninstall_failed\", msg, {}, requestId);\n\t\t}\n\t});\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAMA;AACA,IAAI,MAAM,GAAG,YAAY,CAAC,WAAW,CAAC;AACnC,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,eAAe,EAAE,SAAS,CAAC;AAC7E,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,SAAS,EAAE,CAAC;AACzD,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,OAAO,eAAe,CAAC,iBAAiB,EAAE,YAAY;AACvD,EAAE,IAAI;AACN,GAAG,MAAM,KAAK,GAAG,QAAQ,EAAE;AAC3B,GAAG,MAAM,WAAW,GAAG,MAAM,WAAW,EAAE;AAC1C,GAAG,IAAI,WAAW,CAAC,EAAE,EAAE,MAAM,WAAW,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;AACpE,GAAG,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;AAC7D,IAAI,SAAS;AACb,IAAI,eAAe,EAAE,WAAW,CAAC;AACjC,IAAI,CAAC;AACL,GAAG,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC;AAC7C,GAAG,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE;AACtC,IAAI,SAAS;AACb,IAAI,OAAO,EAAE,MAAM,CAAC;AACpB,IAAI,CAAC;AACL,GAAG,OAAO,YAAY,CAAC,GAAG,EAAE;AAC5B,IAAI,EAAE,EAAE,IAAI;AACZ,IAAI,GAAG,MAAM;AACb,IAAI,eAAe,EAAE,WAAW,CAAC;AACjC,IAAI,EAAE,SAAS,CAAC;AAChB,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC;AAC/D,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE;AACpC,IAAI,SAAS;AACb,IAAI,KAAK,EAAE;AACX,IAAI,CAAC;AACL,GAAG,OAAO,aAAa,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC;AACpE,EAAE;AACF,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/_server.ts-CYhI4sCU.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-CYhI4sCU.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/host/akm/host-sharing/_server.ts.js"],"sourcesContent":["import { C as disableHostAkmSharing, T as getHostAkmSharingStatus, w as enableHostAkmSharing } from \"../../../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../../../chunks/state.js\";\nimport { a as getRequestId, c as jsonResponse, d as requireCapability, u as requireAdmin } from \"../../../../../../chunks/helpers.js\";\n//#region src/routes/api/host/akm/host-sharing/+server.ts\nvar GET = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst capabilityError = requireCapability(event, \"host:akm-sharing\", requestId);\n\tif (capabilityError) return capabilityError;\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\treturn jsonResponse(200, getHostAkmSharingStatus(getState()), requestId);\n};\nvar PUT = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst capabilityError = requireCapability(event, \"host:akm-sharing\", requestId);\n\tif (capabilityError) return capabilityError;\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst state = getState();\n\tconst { profilesImported } = enableHostAkmSharing(state);\n\treturn jsonResponse(200, {\n\t\t...getHostAkmSharingStatus(state),\n\t\tprofilesImported\n\t}, requestId);\n};\nvar DELETE = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst capabilityError = requireCapability(event, \"host:akm-sharing\", requestId);\n\tif (capabilityError) return capabilityError;\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst state = getState();\n\tdisableHostAkmSharing(state);\n\treturn jsonResponse(200, getHostAkmSharingStatus(state), requestId);\n};\n//#endregion\nexport { DELETE, GET, PUT };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAGA;AACG,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,EAAE,SAAS,CAAC;AAChF,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE,uBAAuB,CAAC,QAAQ,EAAE,CAAC,EAAE,SAAS,CAAC;AACzE;AACG,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,EAAE,SAAS,CAAC;AAChF,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,KAAK,GAAG,QAAQ,EAAE;AACzB,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC;AACzD,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE;AAC1B,EAAE,GAAG,uBAAuB,CAAC,KAAK,CAAC;AACnC,EAAE;AACF,EAAE,EAAE,SAAS,CAAC;AACd;AACG,IAAC,MAAM,GAAG,OAAO,KAAK,KAAK;AAC9B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,EAAE,SAAS,CAAC;AAChF,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,KAAK,GAAG,QAAQ,EAAE;AACzB,CAAC,qBAAqB,CAAC,KAAK,CAAC;AAC7B,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE,uBAAuB,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;AACpE;;;;"}