@selvajs/platform 0.17.0-beta.3 → 0.17.0

package/dist/computeServer/interface.d.ts

@@ -2,8 +2,6 @@ import type { RequestContext } from '../context.js';
 import type { ComputeConfig, ComputeServerConfig } from './types.js';
 import type { SecretVerificationReport } from './secrets.js';
 /**
- * Compute-server configuration. Architecture spec §4.8.
- *
  * One config doc holds *all* servers (platform + org-private) plus the
  * global `defaultServerId` and per-org `orgDefaults` map. Authorization is
  * the route layer's job — `manage_compute` for platform-server mutations,
@@ -12,75 +10,70 @@ import type { SecretVerificationReport } from './secrets.js';
  */
 export interface GetConfigOptions {
     /**
-     * Include each server's decrypted `apiKey`. Defaults to `false`: secrets are
-     * the exception, not the norm — most callers (pickers, page loaders, the
-     * resolver) only need connection metadata, and decrypting every stored key to
-     * satisfy them costs one decrypt per server per call on the solve path.
+     * Include each server's decrypted `apiKey`. Defaults to `false` — most
+     * callers (pickers, page loaders, the resolver) only need connection
+     * metadata, and decrypting every stored key costs one decrypt per server
+     * per call on the solve path.
      *
-     * Set this only when you genuinely need every server's key at once — i.e. the
-     * admin/org save handlers, which diff and preserve keys across a write. To use
-     * a single server's key (the common case), resolve the server first and then
-     * call `getServerApiKey` for just that one.
+     * Set this only when you need every server's key at once — the
+     * admin/org save handlers, which diff and preserve keys across a write.
+     * For a single server's key, resolve the server first and call
+     * `getServerApiKey` for just that one.
      */
     includeApiKeys?: boolean;
 }
 export interface IComputeServerStore {
     /**
-     * Read the full config. Callers (resolver, page loaders, route handlers)
-     * apply the visibility predicate from `serversVisibleTo` themselves —
-     * the store does not pre-filter, because the same row set is needed at
-     * different scopes (admin manage vs. org manage vs. solve).
+     * Reads the full config. Callers apply the visibility predicate from
+     * `serversVisibleTo` themselves — the store does not pre-filter, since the
+     * same row set is needed at different scopes (admin manage vs. org manage
+     * vs. solve).
      *
-     * Servers come back with `apiKey: undefined` unless `includeApiKeys` is set.
-     * A returned server therefore says nothing about whether a key is *stored* —
-     * use `hasApiKey` for that.
+     * Servers come back with `apiKey: undefined` unless `includeApiKeys` is
+     * set, so a returned server says nothing about whether a key is *stored*
+     * — use `hasApiKey` for that.
      */
     getConfig(ctx: RequestContext, opts?: GetConfigOptions): Promise<ComputeConfig>;
     /**
-     * Decrypted `apiKey` for a single server, or `undefined` when the server has
-     * no key stored, does not exist, or its ciphertext cannot be authenticated
-     * under the current `SELVA_AT_REST_KEY` (tolerated the same way `getConfig`
-     * tolerates it — the solve fails later at Rhino.Compute rather than here).
+     * Decrypted `apiKey` for a single server, or `undefined` when the server
+     * has no key stored, does not exist, or its ciphertext cannot be
+     * authenticated under the current `SELVA_AT_REST_KEY` (the solve fails
+     * later at Rhino.Compute rather than here).
      *
-     * This is the narrow path onto the solve hot path: resolve a server from the
+     * The narrow path onto the solve hot path: resolve a server from the
      * key-free config, then fetch that one key.
      */
     getServerApiKey(ctx: RequestContext, serverId: string): Promise<string | undefined>;
-    /**
-     * Replace the entire platform-server set + global `defaultServerId`.
-     * Org-private rows and `orgDefaults` are left untouched.
-     */
+    /** Replaces the entire platform-server set + global `defaultServerId`. Org-private rows and `orgDefaults` are left untouched. */
     savePlatformServers(ctx: RequestContext, servers: ComputeServerConfig[], defaultServerId: string | undefined): Promise<void>;
     /**
-     * Replace the org-private server set for `orgId` and (optionally) update
+     * Replaces the org-private server set for `orgId` and (optionally) updates
      * `orgDefaults[orgId]`. Platform rows are left untouched.
      *
-     * Pass `defaultServerId: null` to clear the org's override; `undefined`
-     * leaves the existing value alone.
+     * `defaultServerId: null` clears the org's override; `undefined` leaves
+     * the existing value alone.
      */
     saveOrgServers(ctx: RequestContext, orgId: string, servers: ComputeServerConfig[], defaultServerId?: string | null): Promise<void>;
     /**
-     * Set or clear `orgDefaults[orgId]`. The route layer is responsible for
-     * verifying the chosen server is visible to the org before calling this.
-     *
-     * `serverId === null` clears the override.
+     * Sets or clears `orgDefaults[orgId]`. The route layer must verify the
+     * chosen server is visible to the org before calling this. `serverId ===
+     * null` clears the override.
      */
     setOrgDefault(ctx: RequestContext, orgId: string, serverId: string | null): Promise<void>;
     /**
-     * Hard-delete this org's compute rows: org-private servers, the
+     * Hard-deletes this org's compute rows: org-private servers, the
      * `orgDefaults[orgId]` entry, and any references to this org inside
      * platform servers' `sharedWith` allowlists. No-op when none exist.
-     * Called from `deleteOrg` so soft-deleting an org does not leave its
+     * Called from `deleteOrg` so soft-deleting an org doesn't leave its
      * compute config behind.
      */
     deleteByOrg(ctx: RequestContext, orgId: string): Promise<void>;
     /**
-     * Boot-time integrity check: attempt to decrypt every stored `apiKey` and
-     * report any that are plaintext-at-rest or fail to decrypt under the current
-     * `SELVA_AT_REST_KEY`. Does NOT throw — returns a structured report so the
-     * caller (boot health) decides whether to refuse boot / drive `/api/health`
-     * to 503. Both encrypting stores (local file, Supabase) implement this;
-     * optional so a hypothetical non-encrypting store can omit it.
+     * Boot-time integrity check: decrypts every stored `apiKey` and reports
+     * any that are plaintext-at-rest or fail to decrypt under the current
+     * `SELVA_AT_REST_KEY`. Does not throw — returns a structured report so
+     * the caller (boot health) decides whether to refuse boot / drive
+     * `/api/health` to 503. Optional so a non-encrypting store can omit it.
      */
     verifySecrets?(): Promise<SecretVerificationReport>;
 }

package/dist/computeServer/interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../src/computeServer/interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACrE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAE7D;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAChC;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IACnC;;;;;;;;;OASG;IACH,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAEhF;;;;;;;;OAQG;IACH,eAAe,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAEpF;;;OAGG;IACH,mBAAmB,CAClB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,mBAAmB,EAAE,EAC9B,eAAe,EAAE,MAAM,GAAG,SAAS,GACjC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;;;OAMG;IACH,cAAc,CACb,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,mBAAmB,EAAE,EAC9B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,GAC7B,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;;OAKG;IACH,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1F;;;;;;OAMG;IACH,WAAW,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/D;;;;;;;OAOG;IACH,aAAa,CAAC,IAAI,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACpD"}
+{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../src/computeServer/interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACrE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAE7D;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAChC;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IACnC;;;;;;;;;OASG;IACH,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAEhF;;;;;;;;OAQG;IACH,eAAe,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAEpF,iIAAiI;IACjI,mBAAmB,CAClB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,mBAAmB,EAAE,EAC9B,eAAe,EAAE,MAAM,GAAG,SAAS,GACjC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;;;OAMG;IACH,cAAc,CACb,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,mBAAmB,EAAE,EAC9B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,GAC7B,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;OAIG;IACH,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1F;;;;;;OAMG;IACH,WAAW,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/D;;;;;;OAMG;IACH,aAAa,CAAC,IAAI,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACpD"}

package/dist/computeServer/secrets.d.ts

@@ -2,39 +2,35 @@
  * AES-256-GCM envelope for at-rest secrets (e.g. compute API keys).
  *
  * Wire format: `enc:v1:<base64(iv|tag|ciphertext)>`. The version prefix lets
- * us migrate to a new algorithm later without ambiguity. Plaintext never sits
- * at rest — on disk (local provider) or in the DB (Supabase provider).
+ * a future migration to a new algorithm tell old and new envelopes apart.
  *
- * Security model: defends against backup leaks, accidental file/DB sharing,
- * and read-only storage access. An attacker with both the stored ciphertext
- * *and* the master key (`SELVA_AT_REST_KEY` env var, process memory) can still
- * decrypt — this is encryption at rest, not a secret manager.
+ * Defends against backup leaks, accidental file/DB sharing, and read-only
+ * storage access — not against an attacker who also has the master key
+ * (`SELVA_AT_REST_KEY` env var, process memory). This is encryption at rest,
+ * not a secret manager.
  *
- * Provider-agnostic: pure `node:crypto`, no fs or DB coupling, so both the
- * local and Supabase compute-server stores share this one implementation.
+ * Pure `node:crypto`, no fs or DB coupling, so the local and Supabase
+ * compute-server stores share this one implementation.
  */
 export declare function isEncryptedSecret(value: string): boolean;
 export declare function encryptSecret(plaintext: string, key: Buffer): string;
 export declare function decryptSecret(envelope: string, key: Buffer): string;
 /**
- * Decode a `SELVA_AT_REST_KEY` env var into a 32-byte buffer. Accepts either
- * 64-char hex or base64 (with or without padding). Throws on anything else
- * so misconfiguration fails loudly at boot rather than silently producing
- * an undecryptable value.
+ * Decodes a `SELVA_AT_REST_KEY` env var into a 32-byte buffer (64-char hex or
+ * base64, with or without padding). Throws on anything else so a
+ * misconfigured key fails loudly at boot instead of silently producing
+ * ciphertext nothing can decrypt.
  */
 export declare function decodeSecretKey(raw: string): Buffer;
 /**
  * Result of a compute-server store's `verifySecrets()`. One `failures` entry
  * per server whose `apiKey` couldn't be loaded:
- *  - `plaintext_on_disk` — the field exists but isn't an `enc:v1:` envelope.
- *    Either a hand-edit, a legacy row from before encryption, or a migration
+ *  - `plaintext_on_disk` — the field exists but isn't an `enc:v1:` envelope:
+ *    a hand-edit, a legacy row from before encryption, or a migration
  *    regression. Security-relevant.
- *  - `key_mismatch`      — envelope is valid but GCM auth-tag verification
- *    fails under the current `SELVA_AT_REST_KEY`. The key was rotated or the
- *    data came from another deployment.
- *
- * Storage-agnostic (`plaintext_on_disk` reads "plaintext at rest" for both the
- * file- and DB-backed stores) so boot health can treat every provider alike.
+ *  - `key_mismatch` — envelope is valid but GCM auth-tag verification fails
+ *    under the current `SELVA_AT_REST_KEY`: the key was rotated, or the data
+ *    came from another deployment.
  */
 export type SecretVerificationFailureReason = 'key_mismatch' | 'plaintext_on_disk';
 export interface SecretVerificationFailure {

package/dist/computeServer/secrets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/computeServer/secrets.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;;;;;GAcG;AAEH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAYpE;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAcnE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQnD;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,+BAA+B,GAAG,cAAc,GAAG,mBAAmB,CAAC;AAEnF,MAAM,WAAW,yBAAyB;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,+BAA+B,CAAC;IACxC,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,wBAAwB;IACxC,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,yBAAyB,EAAE,CAAC;IACtC,oEAAoE;IACpE,cAAc,EAAE,OAAO,CAAC;CACxB"}
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/computeServer/secrets.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;;;;GAaG;AAEH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAYpE;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAcnE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQnD;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,+BAA+B,GAAG,cAAc,GAAG,mBAAmB,CAAC;AAEnF,MAAM,WAAW,yBAAyB;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,+BAA+B,CAAC;IACxC,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,wBAAwB;IACxC,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,yBAAyB,EAAE,CAAC;IACtC,oEAAoE;IACpE,cAAc,EAAE,OAAO,CAAC;CACxB"}

package/dist/computeServer/secrets.js

@@ -7,16 +7,15 @@ const PREFIX = 'enc:v1:';
  * AES-256-GCM envelope for at-rest secrets (e.g. compute API keys).
  *
  * Wire format: `enc:v1:<base64(iv|tag|ciphertext)>`. The version prefix lets
- * us migrate to a new algorithm later without ambiguity. Plaintext never sits
- * at rest — on disk (local provider) or in the DB (Supabase provider).
+ * a future migration to a new algorithm tell old and new envelopes apart.
  *
- * Security model: defends against backup leaks, accidental file/DB sharing,
- * and read-only storage access. An attacker with both the stored ciphertext
- * *and* the master key (`SELVA_AT_REST_KEY` env var, process memory) can still
- * decrypt — this is encryption at rest, not a secret manager.
+ * Defends against backup leaks, accidental file/DB sharing, and read-only
+ * storage access — not against an attacker who also has the master key
+ * (`SELVA_AT_REST_KEY` env var, process memory). This is encryption at rest,
+ * not a secret manager.
  *
- * Provider-agnostic: pure `node:crypto`, no fs or DB coupling, so both the
- * local and Supabase compute-server stores share this one implementation.
+ * Pure `node:crypto`, no fs or DB coupling, so the local and Supabase
+ * compute-server stores share this one implementation.
  */
 export function isEncryptedSecret(value) {
     return value.startsWith(PREFIX);
@@ -50,10 +49,10 @@ export function decryptSecret(envelope, key) {
     return Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString('utf8');
 }
 /**
- * Decode a `SELVA_AT_REST_KEY` env var into a 32-byte buffer. Accepts either
- * 64-char hex or base64 (with or without padding). Throws on anything else
- * so misconfiguration fails loudly at boot rather than silently producing
- * an undecryptable value.
+ * Decodes a `SELVA_AT_REST_KEY` env var into a 32-byte buffer (64-char hex or
+ * base64, with or without padding). Throws on anything else so a
+ * misconfigured key fails loudly at boot instead of silently producing
+ * ciphertext nothing can decrypt.
  */
 export function decodeSecretKey(raw) {
     if (/^[0-9a-fA-F]{64}$/.test(raw))

package/dist/computeServer/secrets.js.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/computeServer/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE5E,MAAM,IAAI,GAAG,aAAa,CAAC;AAC3B,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,MAAM,GAAG,SAAS,CAAC;AAEzB;;;;;;;;;;;;;;GAcG;AAEH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC9C,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,GAAW;IAC3D,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACrF,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAChC,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,GAAW;IAC1D,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;IACjE,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACjD,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACxF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IAC1C,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACvC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC;IAClC,MAAM,IAAI,KAAK,CACd,uEAAuE;QACtE,+FAA+F,CAChG,CAAC;AACH,CAAC"}
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/computeServer/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE5E,MAAM,IAAI,GAAG,aAAa,CAAC;AAC3B,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,MAAM,GAAG,SAAS,CAAC;AAEzB;;;;;;;;;;;;;GAaG;AAEH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC9C,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,GAAW;IAC3D,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACrF,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAChC,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,GAAW;IAC1D,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;IACjE,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACjD,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACxF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IAC1C,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACvC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC;IAClC,MAAM,IAAI,KAAK,CACd,uEAAuE;QACtE,+FAA+F,CAChG,CAAC;AACH,CAAC"}

package/dist/computeServer/types.d.ts

@@ -2,15 +2,13 @@
  * Compute servers belong to one of two scopes — never both.
  *
  * - **Platform server** (`scope: 'platform'`) — created by `manage_compute`.
- *   `sharedWith` controls which orgs see it. The single global
- *   `defaultServerId` (in {@link ComputeConfig}) must reference a platform
- *   server and is *always* visible to every org regardless of `sharedWith`.
+ *   `sharedWith` controls which orgs see it. The global `defaultServerId`
+ *   (in {@link ComputeConfig}) must reference a platform server and is
+ *   *always* visible to every org regardless of `sharedWith`.
  *
  * - **Org-private server** (`scope: 'org'`) — created by an org owner/admin
  *   with `manage_org_compute`. Visible only to its `ownerOrgId`. Gated by
  *   the `ALLOW_ORG_COMPUTE_OVERRIDE` platform flag.
- *
- * Architecture spec §4.8.
  */
 export type ComputeServerConfig = PlatformComputeServer | OrgComputeServer;
 interface ComputeServerCommon {
@@ -19,16 +17,16 @@ interface ComputeServerCommon {
     /** Base URL of the Rhino.Compute instance. */
     serverUrl: string;
     /**
-     * Sent as `RhinoComputeKey` header. Populated only when the config was read
-     * with `includeApiKeys`, so `apiKey === undefined` means "not loaded" just as
-     * often as it means "none stored" — read {@link ComputeServerCommon.hasApiKey}
-     * to tell those apart.
+     * Sent as the `RhinoComputeKey` header. Populated only when the config was
+     * read with `includeApiKeys` — `undefined` means "not loaded" as often as
+     * it means "none stored"; use {@link ComputeServerCommon.hasApiKey} to
+     * tell those apart.
      */
     apiKey?: string;
     /**
-     * Whether a key is stored for this server, independent of whether `apiKey`
-     * was loaded. Lets pickers and admin pages render "key set" without any store
-     * decrypting a secret it will only throw away.
+     * Whether a key is stored, independent of whether `apiKey` was loaded —
+     * lets pickers and admin pages show "key set" without decrypting a secret
+     * they'd only throw away.
      */
     hasApiKey?: boolean;
     /** Default: 30000. */
@@ -55,15 +53,15 @@ export interface OrgComputeServer extends ComputeServerCommon {
 export interface ComputeConfig {
     servers: ComputeServerConfig[];
     /**
-     * Global default. Must reference a platform server. Always usable by
-     * every org regardless of that server's `sharedWith` — this is the
-     * "baseline server any user uses" floor.
+     * Global default. Must reference a platform server. Usable by every org
+     * regardless of that server's `sharedWith` — the baseline every user falls
+     * back to.
      */
     defaultServerId?: string;
     /**
      * Per-org default override. `orgDefaults[orgId]` must reference a server
-     * that is visible to `orgId` (a platform server with `orgId` in
-     * `sharedWith` or `'all'`, or an org server owned by `orgId`).
+     * visible to `orgId` (a platform server with `orgId` in `sharedWith` or
+     * `'all'`, or an org server owned by `orgId`).
      */
     orgDefaults?: Record<string, string>;
 }

package/dist/computeServer/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/computeServer/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,mBAAmB,GAAG,qBAAqB,GAAG,gBAAgB,CAAC;AAE3E,UAAU,mBAAmB;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,sBAAsB;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAsB,SAAQ,mBAAmB;IACjE,KAAK,EAAE,UAAU,CAAC;IAClB;;;;;;OAMG;IACH,UAAU,EAAE,KAAK,GAAG,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAiB,SAAQ,mBAAmB;IAC5D,KAAK,EAAE,KAAK,CAAC;IACb,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC7B,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAMD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,mBAAmB,GAAG,CAAC,IAAI,qBAAqB,CAEnF;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,mBAAmB,GAAG,CAAC,IAAI,gBAAgB,CAEzE"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/computeServer/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,mBAAmB,GAAG,qBAAqB,GAAG,gBAAgB,CAAC;AAE3E,UAAU,mBAAmB;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,sBAAsB;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAsB,SAAQ,mBAAmB;IACjE,KAAK,EAAE,UAAU,CAAC;IAClB;;;;;;OAMG;IACH,UAAU,EAAE,KAAK,GAAG,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAiB,SAAQ,mBAAmB;IAC5D,KAAK,EAAE,KAAK,CAAC;IACb,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC7B,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAMD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,mBAAmB,GAAG,CAAC,IAAI,qBAAqB,CAEnF;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,mBAAmB,GAAG,CAAC,IAAI,gBAAgB,CAEzE"}

package/dist/computeServer/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/computeServer/types.ts"],"names":[],"mappings":"AA0EA,+EAA+E;AAC/E,cAAc;AACd,+EAA+E;AAE/E,MAAM,UAAU,gBAAgB,CAAC,CAAsB;IACtD,OAAO,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAsB;IACjD,OAAO,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/computeServer/types.ts"],"names":[],"mappings":"AAwEA,+EAA+E;AAC/E,cAAc;AACd,+EAA+E;AAE/E,MAAM,UAAU,gBAAgB,CAAC,CAAsB;IACtD,OAAO,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAsB;IACjD,OAAO,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC;AAC1B,CAAC"}

package/dist/computeServer/utils.d.ts

@@ -1,35 +1,29 @@
 import { type ComputeConfig, type ComputeServerConfig } from './types.js';
 /**
- * Servers an org can see in pickers and use for solves. Architecture spec §4.8.
- *
- * = platform servers shared with this org (or `'all'`, or the global default)
- * ∪ org-private servers owned by this org
- *
- * The global default is always included — it's the floor of the system.
+ * Servers an org can see in pickers and use for solves:
+ * platform servers shared with this org (or `'all'`, or the global default)
+ * ∪ org-private servers owned by this org.
  */
 export declare function serversVisibleTo(config: ComputeConfig, orgId: string | null | undefined): ComputeServerConfig[];
 /**
- * Resolve the default server id for an org. Per-org override → global default.
- * Returns `undefined` if neither is set or the chosen id is not visible.
+ * Resolves the default server id for an org: per-org override, then global
+ * default. Returns `undefined` if neither is set or visible.
  */
 export declare function defaultServerIdFor(config: ComputeConfig, orgId: string | null | undefined): string | undefined;
 /**
- * Resolve a definition's compute server. Architecture spec §4.8 resolution order:
+ * Resolves a definition's compute server, in order:
  *   1. Definition pin (`computeServerId`) if visible to the project's org.
  *   2. `orgDefaults[orgId]` if set.
  *   3. Global `defaultServerId`.
  *
- * Pure — throws if no usable server exists.
+ * Throws if no usable server exists.
  */
 export interface ResolveOptions {
     /** Per-definition pin. Falls through silently if not visible. */
     definitionPin?: string | null;
 }
 export declare function resolveServerForOrg(config: ComputeConfig, orgId: string | null | undefined, opts?: ResolveOptions): ComputeServerConfig;
-/**
- * Lookup by id, regardless of scope or visibility. Useful in admin contexts
- * that need to display a server independently of the visibility filter.
- */
+/** Lookup by id, ignoring scope or visibility — for admin contexts that display a server outside the visibility filter. */
 export declare function findServerById(config: ComputeConfig, id: string): ComputeServerConfig | undefined;
 export declare function platformServers(config: ComputeConfig): import("./types.js").PlatformComputeServer[];
 export declare function orgServersFor(config: ComputeConfig, orgId: string): ComputeServerConfig[];

package/dist/computeServer/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/computeServer/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAGN,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,MAAM,YAAY,CAAC;AAEpB;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC/B,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC9B,mBAAmB,EAAE,CAWvB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CACjC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC9B,MAAM,GAAG,SAAS,CAYpB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC9B,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,wBAAgB,mBAAmB,CAClC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAChC,IAAI,GAAE,cAAmB,GACvB,mBAAmB,CAsBrB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAEjG;AAMD,wBAAgB,eAAe,CAAC,MAAM,EAAE,aAAa,gDAEpD;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,yBAEjE"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/computeServer/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAGN,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,MAAM,YAAY,CAAC;AAEpB;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC/B,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC9B,mBAAmB,EAAE,CAWvB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CACjC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC9B,MAAM,GAAG,SAAS,CAYpB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC9B,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,wBAAgB,mBAAmB,CAClC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAChC,IAAI,GAAE,cAAmB,GACvB,mBAAmB,CAoBrB;AAED,2HAA2H;AAC3H,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAEjG;AAMD,wBAAgB,eAAe,CAAC,MAAM,EAAE,aAAa,gDAEpD;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,yBAEjE"}

package/dist/computeServer/utils.js

@@ -1,11 +1,8 @@
 import { isOrgServer, isPlatformServer } from './types.js';
 /**
- * Servers an org can see in pickers and use for solves. Architecture spec §4.8.
- *
- * = platform servers shared with this org (or `'all'`, or the global default)
- * ∪ org-private servers owned by this org
- *
- * The global default is always included — it's the floor of the system.
+ * Servers an org can see in pickers and use for solves:
+ * platform servers shared with this org (or `'all'`, or the global default)
+ * ∪ org-private servers owned by this org.
  */
 export function serversVisibleTo(config, orgId) {
     return config.servers.filter((s) => {
@@ -23,8 +20,8 @@ export function serversVisibleTo(config, orgId) {
     });
 }
 /**
- * Resolve the default server id for an org. Per-org override → global default.
- * Returns `undefined` if neither is set or the chosen id is not visible.
+ * Resolves the default server id for an org: per-org override, then global
+ * default. Returns `undefined` if neither is set or visible.
  */
 export function defaultServerIdFor(config, orgId) {
     const visible = serversVisibleTo(config, orgId);
@@ -48,8 +45,7 @@ export function resolveServerForOrg(config, orgId, opts = {}) {
         const pinned = visible.find((s) => s.id === opts.definitionPin);
         if (pinned)
             return pinned;
-        // Fall through — admin may have un-shared the server since the pin
-        // was set.
+        // Not visible — admin may have un-shared the server since the pin was set. Fall through.
     }
     const defaultId = defaultServerIdFor(config, orgId);
     if (defaultId) {
@@ -57,14 +53,10 @@ export function resolveServerForOrg(config, orgId, opts = {}) {
         if (found)
             return found;
     }
-    // Last resort — return the first visible server. Mostly applies in tests
-    // and during initial setup before a default is chosen.
+    // Last resort: first visible server. Mainly hit in tests and initial setup before a default is chosen.
     return visible[0];
 }
-/**
- * Lookup by id, regardless of scope or visibility. Useful in admin contexts
- * that need to display a server independently of the visibility filter.
- */
+/** Lookup by id, ignoring scope or visibility — for admin contexts that display a server outside the visibility filter. */
 export function findServerById(config, id) {
     return config.servers.find((s) => s.id === id);
 }

package/dist/computeServer/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/computeServer/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,WAAW,EACX,gBAAgB,EAGhB,MAAM,YAAY,CAAC;AAEpB;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC/B,MAAqB,EACrB,KAAgC;IAEhC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,IAAI,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,eAAe;gBAAE,OAAO,IAAI,CAAC;YACjD,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxC,IAAI,KAAK,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACvD,OAAO,KAAK,CAAC;QACd,CAAC;QACD,+CAA+C;QAC/C,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC;IAC1C,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CACjC,MAAqB,EACrB,KAAgC;IAEhC,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAErD,IAAI,KAAK,EAAE,CAAC;QACX,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,eAAe,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;QACtE,OAAO,MAAM,CAAC,eAAe,CAAC;IAC/B,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAeD,MAAM,UAAU,mBAAmB,CAClC,MAAqB,EACrB,KAAgC,EAChC,OAAuB,EAAE;IAEzB,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,aAAa,CAAC,CAAC;QAChE,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,mEAAmE;QACnE,WAAW;IACZ,CAAC;IAED,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,SAAS,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QACtD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IACzB,CAAC;IAED,yEAAyE;IACzE,uDAAuD;IACvD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAqB,EAAE,EAAU;IAC/D,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,MAAM,UAAU,eAAe,CAAC,MAAqB;IACpD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAqB,EAAE,KAAa;IACjE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC;AAC/E,CAAC"}
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/computeServer/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,WAAW,EACX,gBAAgB,EAGhB,MAAM,YAAY,CAAC;AAEpB;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC/B,MAAqB,EACrB,KAAgC;IAEhC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,IAAI,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,eAAe;gBAAE,OAAO,IAAI,CAAC;YACjD,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxC,IAAI,KAAK,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACvD,OAAO,KAAK,CAAC;QACd,CAAC;QACD,+CAA+C;QAC/C,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC;IAC1C,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CACjC,MAAqB,EACrB,KAAgC;IAEhC,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAErD,IAAI,KAAK,EAAE,CAAC;QACX,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,eAAe,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;QACtE,OAAO,MAAM,CAAC,eAAe,CAAC;IAC/B,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAeD,MAAM,UAAU,mBAAmB,CAClC,MAAqB,EACrB,KAAgC,EAChC,OAAuB,EAAE;IAEzB,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,aAAa,CAAC,CAAC;QAChE,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,yFAAyF;IAC1F,CAAC;IAED,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpD,IAAI,SAAS,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QACtD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IACzB,CAAC;IAED,uGAAuG;IACvG,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC;AAED,2HAA2H;AAC3H,MAAM,UAAU,cAAc,CAAC,MAAqB,EAAE,EAAU;IAC/D,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,MAAM,UAAU,eAAe,CAAC,MAAqB;IACpD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAqB,EAAE,KAAa;IACjE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC;AAC/E,CAAC"}

package/dist/config.d.ts

@@ -5,26 +5,16 @@ import type { IEventSink } from './events/interface.js';
 import type { ISolveMetricSink } from './metrics/interface.js';
 import type { IBindingResolver } from './bindings/interface.js';
 /**
- * - `single`: one org per deployment. Setup creates it; `ctx.actingOrgId`
- *   resolves to that org for every authenticated user.
- * - `multi`: orgs are first-class. Setup creates only a platform admin; orgs
- *   are created by users. `ctx.actingOrgId` resolves per-request.
+ * `single`: one org per deployment, created at setup; `ctx.actingOrgId` resolves to it for
+ * every user. `multi`: orgs are first-class, created by users; `ctx.actingOrgId` resolves
+ * per-request.
  */
 export type TenancyMode = 'single' | 'multi';
-/**
- * White-label branding. All fields optional; the selva app applies sensible
- * "Selva" defaults for anything omitted. Use this to rebrand the instance
- * (header name, footer copyright, landing-page copy, page titles) without
- * forking the UI.
- */
+/** White-label branding. Omitted fields fall back to "Selva" defaults in the selva app. */
 export interface SelvaBranding {
-    /** Product name shown in header, footer, page titles. Default: "Selva". */
     name?: string;
-    /** Footer copyright owner. Default: same as `name`. */
     copyrightName?: string;
-    /** Landing-page tagline under the product name. */
     tagline?: string;
-    /** Meta description for SEO / social previews. */
     description?: string;
 }
 /** Opt-in platform features. All default false when absent. */
@@ -36,17 +26,14 @@ export interface SelvaFlags {
     /** Authenticated users may create new orgs. */
     ALLOW_ORG_CREATION?: boolean;
     /**
-     * Per-definition share links — anonymous external access via tokenized URLs.
-     * When off, share-link admin routes reject mint/list/revoke and the
-     * token-resolution path stops honouring any existing tokens.
+     * Anonymous external access via tokenized URLs. When off, share-link admin
+     * routes reject mint/list/revoke and existing tokens stop resolving.
      */
     ENABLE_SHARING?: boolean;
     /**
-     * Platform projects — projects owned by instance admins and granted to orgs
-     * or individual users without normal membership. When off, the
-     * `/admin/projects` surface 404s, platform-visibility projects are hidden
-     * from every list, and access rules treat them as inaccessible. Existing
-     * data is preserved; flipping back on restores access.
+     * Projects owned by instance admins, granted to orgs or users without normal
+     * membership. When off, `/admin/projects` 404s and platform-visibility
+     * projects are hidden and inaccessible; data survives the toggle either way.
      */
     ENABLE_PLATFORM_PROJECTS?: boolean;
 }
@@ -55,33 +42,23 @@ export interface SelvaConfig {
     flags?: SelvaFlags;
     branding?: SelvaBranding;
     auth: IAuthProvider;
-    /**
-     * Orgs, projects, members, definitions, compute config, user profiles,
-     * and platform permissions. All database-layer concerns live here.
-     */
+    /** Orgs, projects, members, definitions, compute config, user profiles, platform permissions. */
     data: IDataProvider;
     /** Blob storage — .gh/.ghx files, archived versions, images. */
     storage: IStorageProvider;
-    /** Optional. Defaults to `NoopEventSink`. */
+    /** Defaults to `NoopEventSink`. */
     events?: IEventSink;
-    /**
-     * Optional. Records per-solve timing (wall time of the Rhino.Compute solve
-     * call). Defaults to `NoopSolveMetricSink`, which discards every metric.
-     * Supply a real sink to persist or aggregate solve durations.
-     */
+    /** Records per-solve wall time. Defaults to `NoopSolveMetricSink`, which discards every metric. */
     solveMetrics?: ISolveMetricSink;
     /**
-     * Optional. Resolves values for inputs marked as `source.kind === 'server'`
-     * in the schema. Defaults to `NoopBindingResolver`, which returns nothing
-     * — combined with the schema's `onMissing: 'fail'` default, that causes
-     * any solve involving a server-resolved input to error loudly until a real
-     * resolver is configured. Hosts that want server-resolved inputs must supply one.
+     * Resolves values for inputs marked `source.kind === 'server'`. Defaults to
+     * `NoopBindingResolver`, which resolves nothing — hosts that use server-resolved
+     * inputs must supply a real resolver.
      */
     bindingResolver?: IBindingResolver;
 }
 export type SelvaConfigFactory = (env: Record<string, string | undefined>) => SelvaConfig;
-/** Safe accessor — omitted flags resolve to false. */
 export declare function isFlagEnabled(config: SelvaConfig, flag: keyof SelvaFlags): boolean;
-/** For TypeScript inference / IDE autocomplete only, Vite-style. */
+/** Identity function for type inference and IDE autocomplete. */
 export declare function defineConfig(config: SelvaConfig | SelvaConfigFactory): SelvaConfig | SelvaConfigFactory;
 //# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC7B,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,+DAA+D;AAC/D,MAAM,WAAW,UAAU;IAC1B,+EAA+E;IAC/E,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,yEAAyE;IACzE,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,+CAA+C;IAC/C,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;OAMG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC3B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,IAAI,EAAE,aAAa,CAAC;IACpB;;;OAGG;IACH,IAAI,EAAE,aAAa,CAAC;IACpB,gEAAgE;IAChE,OAAO,EAAE,gBAAgB,CAAC;IAC1B,6CAA6C;IAC7C,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;;;;OAIG;IACH,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,gBAAgB,CAAC;CACnC;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,KAAK,WAAW,CAAC;AAE1F,sDAAsD;AACtD,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,UAAU,GAAG,OAAO,CAElF;AAED,oEAAoE;AACpE,wBAAgB,YAAY,CAC3B,MAAM,EAAE,WAAW,GAAG,kBAAkB,GACtC,WAAW,GAAG,kBAAkB,CAElC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEhE;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE7C,2FAA2F;AAC3F,MAAM,WAAW,aAAa;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,+DAA+D;AAC/D,MAAM,WAAW,UAAU;IAC1B,+EAA+E;IAC/E,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,yEAAyE;IACzE,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,+CAA+C;IAC/C,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC3B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,IAAI,EAAE,aAAa,CAAC;IACpB,iGAAiG;IACjG,IAAI,EAAE,aAAa,CAAC;IACpB,gEAAgE;IAChE,OAAO,EAAE,gBAAgB,CAAC;IAC1B,mCAAmC;IACnC,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,mGAAmG;IACnG,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC;;;;OAIG;IACH,eAAe,CAAC,EAAE,gBAAgB,CAAC;CACnC;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,KAAK,WAAW,CAAC;AAE1F,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,UAAU,GAAG,OAAO,CAElF;AAED,iEAAiE;AACjE,wBAAgB,YAAY,CAC3B,MAAM,EAAE,WAAW,GAAG,kBAAkB,GACtC,WAAW,GAAG,kBAAkB,CAElC"}

package/dist/config.js

@@ -1,8 +1,7 @@
-/** Safe accessor — omitted flags resolve to false. */
 export function isFlagEnabled(config, flag) {
     return Boolean(config.flags?.[flag]);
 }
-/** For TypeScript inference / IDE autocomplete only, Vite-style. */
+/** Identity function for type inference and IDE autocomplete. */
 export function defineConfig(config) {
     return config;
 }

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAwFA,sDAAsD;AACtD,MAAM,UAAU,aAAa,CAAC,MAAmB,EAAE,IAAsB;IACxE,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,YAAY,CAC3B,MAAwC;IAExC,OAAO,MAAM,CAAC;AACf,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAkEA,MAAM,UAAU,aAAa,CAAC,MAAmB,EAAE,IAAsB;IACxE,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,YAAY,CAC3B,MAAwC;IAExC,OAAO,MAAM,CAAC;AACf,CAAC"}