@selvajs/selva 4.14.1 → 4.15.0

package/build/server/chunks/entries/pages/admin/_error.svelte.js-CWhDOGs3.js

@@ -0,0 +1,37 @@
+import 'clsx';
+import { p as page } from '../../../chunks/state.js-ChsIPz4C.js';
+import { E as ErrorScreen } from '../../../chunks/ErrorScreen.js-DhXSfajf.js';
+import '../../../chunks/server.js-fxznQVe4.js';
+import '../../../chunks/uneval.js-sOjdN_Ot.js';
+import '../../../chunks/client.js-DgveY-J7.js';
+import '../../../chunks/index-server.js-gS5cdWCH.js';
+import '../../../chunks/shared.js-JbueMana.js';
+import '@sveltejs/kit/internal';
+import '../../../chunks/exports.js-CPkIuisC.js';
+import '../../../chunks/routing.js-C2Q7p_y3.js';
+import '../../../chunks/internal2.js-DITt-077.js';
+import '../../../chunks/legacy-client.js-B6XuTI3b.js';
+import '../../../chunks/events.js-DCr2n6fH.js';
+import '@sveltejs/kit/internal/server';
+import '../../../chunks/utils2.js-RqmNbcNh.js';
+import 'tailwind-merge';
+import '../../../chunks/button.js-DbB0dwmm.js';
+import 'tailwind-variants';
+import '../../../chunks/circle-alert.js-DflREk0J.js';
+import '../../../chunks/card-content.js-DO1tWfLJ.js';
+import '../../../chunks/card-title.js-D5QL4vvE.js';
+
+//#region src/routes/admin/+error.svelte
+function _error($$renderer, $$props) {
+	$$renderer.component(($$renderer) => {
+		$$renderer.push(`<div class="px-6 py-6">`);
+		ErrorScreen($$renderer, {
+			status: page.status,
+			message: page.error?.message
+		});
+		$$renderer.push(`<!----></div>`);
+	});
+}
+
+export { _error as default };
+//# sourceMappingURL=_error.svelte.js-CWhDOGs3.js.map

package/build/server/chunks/entries/pages/admin/_error.svelte.js-CWhDOGs3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_error.svelte.js-CWhDOGs3.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/admin/_error.svelte.js"],"sourcesContent":["import \"../../../chunks/server.js\";\nimport { t as page } from \"../../../chunks/state.js\";\nimport { t as ErrorScreen } from \"../../../chunks/ErrorScreen.js\";\n//#region src/routes/admin/+error.svelte\nfunction _error($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\t$$renderer.push(`<div class=\"px-6 py-6\">`);\n\t\tErrorScreen($$renderer, {\n\t\t\tstatus: page.status,\n\t\t\tmessage: page.error?.message\n\t\t});\n\t\t$$renderer.push(`<!----></div>`);\n\t});\n}\n//#endregion\nexport { _error as default };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAGA;AACA,SAAS,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE;AACrC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,uBAAuB,CAAC,CAAC;AAC5C,EAAE,WAAW,CAAC,UAAU,EAAE;AAC1B,GAAG,MAAM,EAAE,IAAI,CAAC,MAAM;AACtB,GAAG,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE;AACxB,GAAG,CAAC;AACJ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/entries/pages/admin/_layout.server.ts.js-B0waxi3O.js

@@ -0,0 +1,31 @@
+import { c as getTenancy, k as flag, s as getAuditQuery } from '../../../chunks/providers.server.js-CGtbhqJ3.js';
+import { a as assertAnyPlatformPermission } from '../../../chunks/access.server.js-Fg4zaw5v.js';
+import { redirect } from '@sveltejs/kit';
+
+//#region src/routes/admin/+layout.server.ts
+/**
+* `/admin` is a platform-scope surface — instance operators and Selva staff
+* only. Holding only org-class permissions (`manage_org_members`,
+* `manage_org_compute`, `manage_definitions`, `manage_projects`) does NOT
+* admit you here, even though those permissions also start with `manage_`.
+* Org admins get their own surface elsewhere — `/team/*` (see docs/contributing/permissions.md §8).
+*/
+var load = async ({ locals }) => {
+	if (!locals.ctx) redirect(303, "/login");
+	assertAnyPlatformPermission(locals);
+	return {
+		platformPermissions: locals.ctx.platformPermissions,
+		orgPermissions: locals.ctx.orgPermissions,
+		auditAvailable: getAuditQuery() !== null,
+		platformProjectsEnabled: flag("ENABLE_PLATFORM_PROJECTS"),
+		tenancy: getTenancy()
+	};
+};
+
+var _layout_server_ts = /*#__PURE__*/Object.freeze({
+	__proto__: null,
+	load: load
+});
+
+export { _layout_server_ts as _ };
+//# sourceMappingURL=_layout.server.ts.js-B0waxi3O.js.map

package/build/server/chunks/entries/pages/admin/_layout.server.ts.js-B0waxi3O.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_layout.server.ts.js-B0waxi3O.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/admin/_layout.server.ts.js"],"sourcesContent":["import { S as getTenancy, n as getAuditQuery, t as flag } from \"../../../chunks/providers.server.js\";\nimport { t as assertAnyPlatformPermission } from \"../../../chunks/access.server.js\";\nimport { redirect } from \"@sveltejs/kit\";\n//#region src/routes/admin/+layout.server.ts\n/**\n* `/admin` is a platform-scope surface — instance operators and Selva staff\n* only. Holding only org-class permissions (`manage_org_members`,\n* `manage_org_compute`, `manage_definitions`, `manage_projects`) does NOT\n* admit you here, even though those permissions also start with `manage_`.\n* Org admins get their own surface elsewhere — `/team/*` (see docs/contributing/permissions.md §8).\n*/\nvar load = async ({ locals }) => {\n\tif (!locals.ctx) redirect(303, \"/login\");\n\tassertAnyPlatformPermission(locals);\n\treturn {\n\t\tplatformPermissions: locals.ctx.platformPermissions,\n\t\torgPermissions: locals.ctx.orgPermissions,\n\t\tauditAvailable: getAuditQuery() !== null,\n\t\tplatformProjectsEnabled: flag(\"ENABLE_PLATFORM_PROJECTS\"),\n\t\ttenancy: getTenancy()\n\t};\n};\n//#endregion\nexport { load };\n"],"names":[],"mappings":";;;;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AACjC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;AACzC,CAAC,2BAA2B,CAAC,MAAM,CAAC;AACpC,CAAC,OAAO;AACR,EAAE,mBAAmB,EAAE,MAAM,CAAC,GAAG,CAAC,mBAAmB;AACrD,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc;AAC3C,EAAE,cAAc,EAAE,aAAa,EAAE,KAAK,IAAI;AAC1C,EAAE,uBAAuB,EAAE,IAAI,CAAC,0BAA0B,CAAC;AAC3D,EAAE,OAAO,EAAE,UAAU;AACrB,EAAE;AACF,CAAC;;;;;;;;;"}

package/build/server/chunks/entries/pages/admin/_layout.svelte.js-MUFaZrsd.js

@@ -0,0 +1,124 @@
+import { T as derived } from '../../../chunks/server.js-fxznQVe4.js';
+import { B as Building_2 } from '../../../chunks/building-2.js-B2qqphi2.js';
+import { F as Folders } from '../../../chunks/folders.js-DTVFHTpC.js';
+import { G as Gauge } from '../../../chunks/gauge.js-CH3EaFeI.js';
+import { A as AppHeader } from '../../../chunks/AppHeader.js-BgNotb_w.js';
+import { S as Scroll_text } from '../../../chunks/scroll-text.js-CC4wsu-C.js';
+import { S as Server } from '../../../chunks/server2.js-B1Z22rWd.js';
+import { S as Settings } from '../../../chunks/settings.js-ClaRhfQF.js';
+import { U as Users } from '../../../chunks/users.js-BLt400qR.js';
+import { S as SideNav } from '../../../chunks/SideNav.js-InLCM4Q9.js';
+import '../../../chunks/uneval.js-sOjdN_Ot.js';
+import 'clsx';
+import '../../../chunks/utils2.js-RqmNbcNh.js';
+import 'tailwind-merge';
+import '../../../chunks/src.js-B12bUNyu.js';
+import 'zod';
+import '../../../chunks/UserChip.js-qOwOtN3X.js';
+import '../../../chunks/events.js-DCr2n6fH.js';
+import '../../../chunks/core-BQtRL5GE.js-B9MmO4om.js';
+import '../../../chunks/footerContext.svelte.js-hYVwYyNi.js';
+import '../../../chunks/index-server2.js-UaiofxX-.js';
+import '../../../chunks/create-id.js-DZHvVzWu.js';
+import '../../../chunks/button.js-DbB0dwmm.js';
+import 'tailwind-variants';
+import '../../../chunks/chevron-down.js-BDXhP2jb.js';
+import '../../../chunks/chevron-right.js-DHiwRcHz.js';
+import '../../../chunks/circle-alert.js-DflREk0J.js';
+import '../../../chunks/triangle-alert.js-B55Ovp_J.js';
+import '../../../chunks/noop.js-_UEo7ePu.js';
+import '../../../chunks/scroll-lock.js-BRpQ9hSI.js';
+import '../../../chunks/index-server.js-gS5cdWCH.js';
+import '../../../chunks/dialog-description.js-z7PmnPp9.js';
+import '../../../chunks/dialog.js-DzX3UL2M.js';
+import '../../../chunks/x.js-DsqVhvY1.js';
+import '../../../chunks/state.js-ChsIPz4C.js';
+import '../../../chunks/client.js-DgveY-J7.js';
+import '../../../chunks/shared.js-JbueMana.js';
+import '@sveltejs/kit/internal';
+import '../../../chunks/exports.js-CPkIuisC.js';
+import '../../../chunks/routing.js-C2Q7p_y3.js';
+import '../../../chunks/internal2.js-DITt-077.js';
+import '../../../chunks/legacy-client.js-B6XuTI3b.js';
+import '@sveltejs/kit/internal/server';
+import '../../../chunks/shield.js-DkHHoUTl.js';
+
+//#region src/routes/admin/+layout.svelte
+function _layout($$renderer, $$props) {
+	$$renderer.component(($$renderer) => {
+		let { data, children } = $$props;
+		const can = (p) => {
+			if (data.platformPermissions.includes("instance_admin")) return true;
+			if (data.platformPermissions.includes(p)) return true;
+			return data.orgPermissions.includes(p);
+		};
+		const items = derived(() => [
+			{
+				href: "/admin",
+				label: "General",
+				icon: Gauge,
+				show: true
+			},
+			{
+				href: "/admin/organizations",
+				label: "Organizations",
+				icon: Building_2,
+				match: "prefix",
+				show: can("instance_admin") && data.tenancy !== "single"
+			},
+			{
+				href: "/admin/projects",
+				label: "Projects",
+				icon: Folders,
+				match: "prefix",
+				show: can("instance_admin") && data.platformProjectsEnabled
+			},
+			{
+				href: "/admin/users",
+				label: "Users",
+				icon: Users,
+				match: "prefix",
+				show: can("manage_instance_users")
+			},
+			{
+				href: "/admin/compute",
+				label: "Compute",
+				icon: Server,
+				match: "prefix",
+				show: can("manage_compute")
+			},
+			{
+				href: "/admin/system",
+				label: "System",
+				icon: Settings,
+				match: "prefix",
+				show: can("manage_updates")
+			},
+			{
+				href: "/admin/audit",
+				label: "Audit log",
+				icon: Scroll_text,
+				match: "prefix",
+				show: can("instance_admin") && data.auditAvailable
+			}
+		].filter((i) => i.show));
+		{
+			function sidenav($$renderer) {
+				SideNav($$renderer, {
+					items: items(),
+					eyebrow: "Platform"
+				});
+			}
+			AppHeader($$renderer, {
+				sidenav,
+				children: ($$renderer) => {
+					$$renderer.push(`<div class="px-(--page-px) py-(--page-py)">`);
+					children?.($$renderer);
+					$$renderer.push(`<!----></div>`);
+				}});
+		}
+	});
+}
+
+export { _layout as default };
+//# sourceMappingURL=_layout.svelte.js-MUFaZrsd.js.map

package/build/server/chunks/entries/pages/admin/_layout.svelte.js-MUFaZrsd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_layout.svelte.js-MUFaZrsd.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/admin/_layout.svelte.js"],"sourcesContent":["import { a as derived } from \"../../../chunks/server.js\";\nimport { t as Building_2 } from \"../../../chunks/building-2.js\";\nimport { t as Folders } from \"../../../chunks/folders.js\";\nimport { t as Gauge } from \"../../../chunks/gauge.js\";\nimport { t as AppHeader } from \"../../../chunks/AppHeader.js\";\nimport { t as Scroll_text } from \"../../../chunks/scroll-text.js\";\nimport { t as Server } from \"../../../chunks/server2.js\";\nimport { t as Settings } from \"../../../chunks/settings.js\";\nimport { t as Users } from \"../../../chunks/users.js\";\nimport { t as SideNav } from \"../../../chunks/SideNav.js\";\n//#region src/routes/admin/+layout.svelte\nfunction _layout($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\tlet { data, children } = $$props;\n\t\tconst can = (p) => {\n\t\t\tif (data.platformPermissions.includes(\"instance_admin\")) return true;\n\t\t\tif (data.platformPermissions.includes(p)) return true;\n\t\t\treturn data.orgPermissions.includes(p);\n\t\t};\n\t\tconst items = derived(() => [\n\t\t\t{\n\t\t\t\thref: \"/admin\",\n\t\t\t\tlabel: \"General\",\n\t\t\t\ticon: Gauge,\n\t\t\t\tshow: true\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/organizations\",\n\t\t\t\tlabel: \"Organizations\",\n\t\t\t\ticon: Building_2,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"instance_admin\") && data.tenancy !== \"single\"\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/projects\",\n\t\t\t\tlabel: \"Projects\",\n\t\t\t\ticon: Folders,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"instance_admin\") && data.platformProjectsEnabled\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/users\",\n\t\t\t\tlabel: \"Users\",\n\t\t\t\ticon: Users,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"manage_instance_users\")\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/compute\",\n\t\t\t\tlabel: \"Compute\",\n\t\t\t\ticon: Server,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"manage_compute\")\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/system\",\n\t\t\t\tlabel: \"System\",\n\t\t\t\ticon: Settings,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"manage_updates\")\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/audit\",\n\t\t\t\tlabel: \"Audit log\",\n\t\t\t\ticon: Scroll_text,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"instance_admin\") && data.auditAvailable\n\t\t\t}\n\t\t].filter((i) => i.show));\n\t\t{\n\t\t\tfunction sidenav($$renderer) {\n\t\t\t\tSideNav($$renderer, {\n\t\t\t\t\titems: items(),\n\t\t\t\t\teyebrow: \"Platform\"\n\t\t\t\t});\n\t\t\t}\n\t\t\tAppHeader($$renderer, {\n\t\t\t\tsidenav,\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<div class=\"px-(--page-px) py-(--page-py)\">`);\n\t\t\t\t\tchildren?.($$renderer);\n\t\t\t\t\t$$renderer.push(`<!----></div>`);\n\t\t\t\t},\n\t\t\t\t$$slots: {\n\t\t\t\t\tsidenav: true,\n\t\t\t\t\tdefault: true\n\t\t\t\t}\n\t\t\t});\n\t\t}\n\t});\n}\n//#endregion\nexport { _layout as default };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAUA;AACA,SAAS,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE;AACtC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO;AAClC,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK;AACrB,GAAG,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,IAAI;AACvE,GAAG,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI;AACxD,GAAG,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzC,EAAE,CAAC;AACH,EAAE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM;AAC9B,GAAG;AACH,IAAI,IAAI,EAAE,QAAQ;AAClB,IAAI,KAAK,EAAE,SAAS;AACpB,IAAI,IAAI,EAAE,KAAK;AACf,IAAI,IAAI,EAAE;AACV,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,sBAAsB;AAChC,IAAI,KAAK,EAAE,eAAe;AAC1B,IAAI,IAAI,EAAE,UAAU;AACpB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK;AACpD,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,iBAAiB;AAC3B,IAAI,KAAK,EAAE,UAAU;AACrB,IAAI,IAAI,EAAE,OAAO;AACjB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC;AACxC,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,cAAc;AACxB,IAAI,KAAK,EAAE,OAAO;AAClB,IAAI,IAAI,EAAE,KAAK;AACf,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,uBAAuB;AACrC,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,gBAAgB;AAC1B,IAAI,KAAK,EAAE,SAAS;AACpB,IAAI,IAAI,EAAE,MAAM;AAChB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,gBAAgB;AAC9B,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,eAAe;AACzB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,QAAQ;AAClB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,gBAAgB;AAC9B,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,cAAc;AACxB,IAAI,KAAK,EAAE,WAAW;AACtB,IAAI,IAAI,EAAE,WAAW;AACrB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC;AACxC;AACA,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;AAC1B,EAAE;AACF,GAAG,SAAS,OAAO,CAAC,UAAU,EAAE;AAChC,IAAI,OAAO,CAAC,UAAU,EAAE;AACxB,KAAK,KAAK,EAAE,KAAK,EAAE;AACnB,KAAK,OAAO,EAAE;AACd,KAAK,CAAC;AACN,GAAG;AACH,GAAG,SAAS,CAAC,UAAU,EAAE;AACzB,IAAI,OAAO;AACX,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,2CAA2C,CAAC,CAAC;AACnE,KAAK,QAAQ,GAAG,UAAU,CAAC;AAC3B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;AACrC,IAAI,CAKD,CAAC,CAAC;AACL,EAAE;AACF,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/entries/pages/admin/_page.server.ts.js-DFKMJT_n.js

@@ -0,0 +1,75 @@
+import { h as hasPermission } from '../../../chunks/src.js-B12bUNyu.js';
+import { a as getAuthProvider, r as renderThrown, e as getOrganizationProvider } from '../../../chunks/providers.server.js-CGtbhqJ3.js';
+import { p as package_default } from '../../../chunks/package.js-fXEMKa-U.js';
+
+//#region src/routes/admin/+page.server.ts
+/**
+* Resolve the org whose branding assets the General page manages. Single-tenant
+* has exactly one org (auto-seeded at bootstrap); we surface it so an admin can
+* set the company logo without the org-list UI (which only exists in
+* multi-tenant). Returns null if no org exists yet or the lookup fails — the
+* cards just hide.
+*/
+async function loadAdminOrg(ctx, log) {
+	if (!ctx) return null;
+	try {
+		const org = (await getOrganizationProvider().listOrgs(ctx, { limit: 1 })).items[0];
+		return org ? {
+			id: org.id,
+			name: org.name,
+			assets: org.assets ?? {}
+		} : null;
+	} catch (err) {
+		log.error("Failed to load admin org for asset cards", {
+			component: "admin",
+			err: renderThrown(err)
+		});
+		return null;
+	}
+}
+/**
+* The General dashboard sits inside the platform-scoped `/admin` shell, but
+* each panel still needs its own permission. The user-count tile is gated
+* on `manage_instance_users`; without it, the tile renders a placeholder.
+*/
+var load = async ({ locals }) => {
+	const ctx = locals.ctx;
+	const canSeeUserStats = ctx ? hasPermission(ctx, "manage_instance_users") : false;
+	const canManageOrg = ctx ? hasPermission(ctx, "manage_org_members") : false;
+	const platformPermissions = ctx?.platformPermissions ?? [];
+	const org = canManageOrg ? await loadAdminOrg(ctx, locals.log) : null;
+	if (!canSeeUserStats) return {
+		stats: { users: null },
+		platformPermissions,
+		version: package_default.version,
+		org
+	};
+	try {
+		return {
+			stats: { users: (await getAuthProvider().listUsers({ limit: 200 }))?.items.length ?? null },
+			platformPermissions,
+			version: package_default.version,
+			org
+		};
+	} catch (err) {
+		if (err && typeof err === "object" && "status" in err) throw err;
+		locals.log.error("Failed to load admin dashboard", {
+			component: "admin",
+			err: renderThrown(err)
+		});
+		return {
+			stats: { users: null },
+			platformPermissions,
+			version: package_default.version,
+			org
+		};
+	}
+};
+
+var _page_server_ts = /*#__PURE__*/Object.freeze({
+	__proto__: null,
+	load: load
+});
+
+export { _page_server_ts as _ };
+//# sourceMappingURL=_page.server.ts.js-DFKMJT_n.js.map

package/build/server/chunks/entries/pages/admin/_page.server.ts.js-DFKMJT_n.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_page.server.ts.js-DFKMJT_n.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/admin/_page.server.ts.js"],"sourcesContent":["import { r as hasPermission } from \"../../../chunks/src.js\";\nimport { F as renderThrown, h as getOrganizationProvider, r as getAuthProvider } from \"../../../chunks/providers.server.js\";\nimport \"../../../chunks/auth.server.js\";\nimport { t as package_default } from \"../../../chunks/package.js\";\n//#region src/routes/admin/+page.server.ts\n/**\n* Resolve the org whose branding assets the General page manages. Single-tenant\n* has exactly one org (auto-seeded at bootstrap); we surface it so an admin can\n* set the company logo without the org-list UI (which only exists in\n* multi-tenant). Returns null if no org exists yet or the lookup fails — the\n* cards just hide.\n*/\nasync function loadAdminOrg(ctx, log) {\n\tif (!ctx) return null;\n\ttry {\n\t\tconst org = (await getOrganizationProvider().listOrgs(ctx, { limit: 1 })).items[0];\n\t\treturn org ? {\n\t\t\tid: org.id,\n\t\t\tname: org.name,\n\t\t\tassets: org.assets ?? {}\n\t\t} : null;\n\t} catch (err) {\n\t\tlog.error(\"Failed to load admin org for asset cards\", {\n\t\t\tcomponent: \"admin\",\n\t\t\terr: renderThrown(err)\n\t\t});\n\t\treturn null;\n\t}\n}\n/**\n* The General dashboard sits inside the platform-scoped `/admin` shell, but\n* each panel still needs its own permission. The user-count tile is gated\n* on `manage_instance_users`; without it, the tile renders a placeholder.\n*/\nvar load = async ({ locals }) => {\n\tconst ctx = locals.ctx;\n\tconst canSeeUserStats = ctx ? hasPermission(ctx, \"manage_instance_users\") : false;\n\tconst canManageOrg = ctx ? hasPermission(ctx, \"manage_org_members\") : false;\n\tconst platformPermissions = ctx?.platformPermissions ?? [];\n\tconst org = canManageOrg ? await loadAdminOrg(ctx, locals.log) : null;\n\tif (!canSeeUserStats) return {\n\t\tstats: { users: null },\n\t\tplatformPermissions,\n\t\tversion: package_default.version,\n\t\torg\n\t};\n\ttry {\n\t\treturn {\n\t\t\tstats: { users: (await getAuthProvider().listUsers({ limit: 200 }))?.items.length ?? null },\n\t\t\tplatformPermissions,\n\t\t\tversion: package_default.version,\n\t\t\torg\n\t\t};\n\t} catch (err) {\n\t\tif (err && typeof err === \"object\" && \"status\" in err) throw err;\n\t\tlocals.log.error(\"Failed to load admin dashboard\", {\n\t\t\tcomponent: \"admin\",\n\t\t\terr: renderThrown(err)\n\t\t});\n\t\treturn {\n\t\t\tstats: { users: null },\n\t\t\tplatformPermissions,\n\t\t\tversion: package_default.version,\n\t\t\torg\n\t\t};\n\t}\n};\n//#endregion\nexport { load };\n"],"names":[],"mappings":";;;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;AACtC,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,IAAI;AACtB,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,uBAAuB,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AACpF,EAAE,OAAO,GAAG,GAAG;AACf,GAAG,EAAE,EAAE,GAAG,CAAC,EAAE;AACb,GAAG,IAAI,EAAE,GAAG,CAAC,IAAI;AACjB,GAAG,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI;AACzB,GAAG,GAAG,IAAI;AACV,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,GAAG,CAAC,KAAK,CAAC,0CAA0C,EAAE;AACxD,GAAG,SAAS,EAAE,OAAO;AACrB,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC;AACJ,EAAE,OAAO,IAAI;AACb,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AACjC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,eAAe,GAAG,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,uBAAuB,CAAC,GAAG,KAAK;AAClF,CAAC,MAAM,YAAY,GAAG,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,oBAAoB,CAAC,GAAG,KAAK;AAC5E,CAAC,MAAM,mBAAmB,GAAG,GAAG,EAAE,mBAAmB,IAAI,EAAE;AAC3D,CAAC,MAAM,GAAG,GAAG,YAAY,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI;AACtE,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO;AAC9B,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;AACxB,EAAE,mBAAmB;AACrB,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO;AAClC,EAAE;AACF,EAAE;AACF,CAAC,IAAI;AACL,EAAE,OAAO;AACT,GAAG,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,eAAe,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,EAAE;AAC9F,GAAG,mBAAmB;AACtB,GAAG,OAAO,EAAE,eAAe,CAAC,OAAO;AACnC,GAAG;AACH,GAAG;AACH,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,EAAE,MAAM,GAAG;AAClE,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,gCAAgC,EAAE;AACrD,GAAG,SAAS,EAAE,OAAO;AACrB,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC;AACJ,EAAE,OAAO;AACT,GAAG,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;AACzB,GAAG,mBAAmB;AACtB,GAAG,OAAO,EAAE,eAAe,CAAC,OAAO;AACnC,GAAG;AACH,GAAG;AACH,CAAC;AACD,CAAC;;;;;;;;;"}

package/build/server/chunks/entries/pages/admin/_page.svelte.js-CKiUgYZP.js

@@ -0,0 +1,360 @@
+import { X as head, _ as stringify, $ as ensure_array_like, Z as spread_props, T as derived, a4 as escape_html, W as attr } from '../../../chunks/server.js-fxznQVe4.js';
+import { I as Icon } from '../../../chunks/utils2.js-RqmNbcNh.js';
+import { B as Button } from '../../../chunks/button.js-DbB0dwmm.js';
+import { B as Building_2 } from '../../../chunks/building-2.js-B2qqphi2.js';
+import { S as Server } from '../../../chunks/server2.js-B1Z22rWd.js';
+import { T as Trash_2 } from '../../../chunks/trash-2.js-ByDxap-k.js';
+import { U as Users } from '../../../chunks/users.js-BLt400qR.js';
+import { i as invalidateAll } from '../../../chunks/client.js-DgveY-J7.js';
+import { p as page } from '../../../chunks/state.js-ChsIPz4C.js';
+import { S as SectionHeader } from '../../../chunks/SectionHeader.js-CHWtMRIN.js';
+import { C as Card, a as Card_content } from '../../../chunks/card-content.js-DO1tWfLJ.js';
+import { C as Card_description } from '../../../chunks/card-description.js-eBi7Vr_W.js';
+import { C as Card_header, a as Card_title } from '../../../chunks/card-title.js-D5QL4vvE.js';
+import { a as toast } from '../../../chunks/toast-state.svelte.js-DkqKrnCj.js';
+import { S as StatCard } from '../../../chunks/StatCard.js-B52NlYxD.js';
+import '../../../chunks/uneval.js-sOjdN_Ot.js';
+import 'clsx';
+import 'tailwind-merge';
+import 'tailwind-variants';
+import '../../../chunks/index-server.js-gS5cdWCH.js';
+import '../../../chunks/shared.js-JbueMana.js';
+import '@sveltejs/kit/internal';
+import '../../../chunks/exports.js-CPkIuisC.js';
+import '../../../chunks/routing.js-C2Q7p_y3.js';
+import '../../../chunks/internal2.js-DITt-077.js';
+import '../../../chunks/legacy-client.js-B6XuTI3b.js';
+import '../../../chunks/events.js-DCr2n6fH.js';
+import '@sveltejs/kit/internal/server';
+import '../../../chunks/arrow-right.js-CJ2cNjuS.js';
+
+//#region ../../node_modules/.pnpm/@lucide+svelte@1.31.0_svelte@5.56.9_@typescript-eslint+types@8.67.0_/node_modules/@lucide/svelte/dist/icons/image-up.svelte
+function Image_up($$renderer, $$props) {
+	let { $$slots, $$events, ...props } = $$props;
+	Icon($$renderer, spread_props([
+		{ name: "image-up" },
+		props,
+		{ iconNode: [
+			["path", { "d": "M10.3 21H5a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h14a2 2 0 0 1 2 2v10l-3.1-3.1a2 2 0 0 0-2.814.014L6 21" }],
+			["path", { "d": "m14 19.5 3-3 3 3" }],
+			["path", { "d": "M17 22v-5.5" }],
+			["circle", {
+				"cx": "9",
+				"cy": "9",
+				"r": "2"
+			}]
+		] }
+	]));
+}
+//#endregion
+//#region ../../node_modules/.pnpm/@lucide+svelte@1.31.0_svelte@5.56.9_@typescript-eslint+types@8.67.0_/node_modules/@lucide/svelte/dist/icons/layout-dashboard.svelte
+function Layout_dashboard($$renderer, $$props) {
+	let { $$slots, $$events, ...props } = $$props;
+	Icon($$renderer, spread_props([
+		{ name: "layout-dashboard" },
+		props,
+		{ iconNode: [
+			["rect", {
+				"width": "7",
+				"height": "9",
+				"x": "3",
+				"y": "3",
+				"rx": "1"
+			}],
+			["rect", {
+				"width": "7",
+				"height": "5",
+				"x": "14",
+				"y": "3",
+				"rx": "1"
+			}],
+			["rect", {
+				"width": "7",
+				"height": "9",
+				"x": "14",
+				"y": "12",
+				"rx": "1"
+			}],
+			["rect", {
+				"width": "7",
+				"height": "5",
+				"x": "3",
+				"y": "16",
+				"rx": "1"
+			}]
+		] }
+	]));
+}
+//#endregion
+//#region ../../node_modules/.pnpm/@lucide+svelte@1.31.0_svelte@5.56.9_@typescript-eslint+types@8.67.0_/node_modules/@lucide/svelte/dist/icons/package.svelte
+function Package($$renderer, $$props) {
+	let { $$slots, $$events, ...props } = $$props;
+	Icon($$renderer, spread_props([
+		{ name: "package" },
+		props,
+		{ iconNode: [
+			["path", { "d": "M11 21.73a2 2 0 0 0 2 0l7-4A2 2 0 0 0 21 16V8a2 2 0 0 0-1-1.73l-7-4a2 2 0 0 0-2 0l-7 4A2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.73z" }],
+			["path", { "d": "M12 22V12" }],
+			["polyline", { "points": "3.29 7 12 12 20.71 7" }],
+			["path", { "d": "m7.5 4.27 9 5.15" }]
+		] }
+	]));
+}
+//#endregion
+//#region src/lib/components/AssetUpload.svelte
+function AssetUpload($$renderer, $$props) {
+	$$renderer.component(($$renderer) => {
+		/** Current public URL for this asset, or null when unset. */
+		let { orgId, kind, url, title, description } = $$props;
+		const ACCEPT = "image/png,image/jpeg,image/webp,image/gif,image/svg+xml";
+		const endpoint = derived(() => `/api/v1/orgs/${orgId}/assets/${kind}`);
+		let busy = false;
+		async function remove() {
+			busy = true;
+			try {
+				const res = await fetch(endpoint(), { method: "DELETE" });
+				if (res.ok) {
+					toast.success(`${title} removed`);
+					await invalidateAll();
+				} else toast.error(`Remove failed (${res.status})`);
+			} catch {
+				toast.error("Failed to remove");
+			} finally {
+				busy = false;
+			}
+		}
+		if (Card) {
+			$$renderer.push("<!--[-->");
+			Card($$renderer, {
+				children: ($$renderer) => {
+					if (Card_header) {
+						$$renderer.push("<!--[-->");
+						Card_header($$renderer, {
+							children: ($$renderer) => {
+								if (Card_title) {
+									$$renderer.push("<!--[-->");
+									Card_title($$renderer, {
+										class: "flex items-center gap-2 text-sm font-medium",
+										children: ($$renderer) => {
+											Building_2($$renderer, { class: "text-muted-foreground h-4 w-4" });
+											$$renderer.push(`<!----> ${escape_html(title)}`);
+										},
+										$$slots: { default: true }
+									});
+									$$renderer.push("<!--]-->");
+								} else {
+									$$renderer.push("<!--[!-->");
+									$$renderer.push("<!--]-->");
+								}
+								$$renderer.push(` `);
+								if (description) {
+									$$renderer.push("<!--[0-->");
+									if (Card_description) {
+										$$renderer.push("<!--[-->");
+										Card_description($$renderer, {
+											children: ($$renderer) => {
+												$$renderer.push(`<!---->${escape_html(description)}`);
+											},
+											$$slots: { default: true }
+										});
+										$$renderer.push("<!--]-->");
+									} else {
+										$$renderer.push("<!--[!-->");
+										$$renderer.push("<!--]-->");
+									}
+								} else $$renderer.push("<!--[-1-->");
+								$$renderer.push(`<!--]-->`);
+							},
+							$$slots: { default: true }
+						});
+						$$renderer.push("<!--]-->");
+					} else {
+						$$renderer.push("<!--[!-->");
+						$$renderer.push("<!--]-->");
+					}
+					$$renderer.push(` `);
+					if (Card_content) {
+						$$renderer.push("<!--[-->");
+						Card_content($$renderer, {
+							children: ($$renderer) => {
+								$$renderer.push(`<div class="flex items-center gap-4"><div class="bg-muted/40 flex h-20 w-20 shrink-0 items-center justify-center overflow-hidden rounded-lg border">`);
+								if (url) {
+									$$renderer.push("<!--[0-->");
+									$$renderer.push(`<img${attr("src", url)}${attr("alt", title)} class="h-full w-full object-contain"/>`);
+								} else {
+									$$renderer.push("<!--[-1-->");
+									Building_2($$renderer, { class: "text-muted-foreground/50 h-8 w-8" });
+								}
+								$$renderer.push(`<!--]--></div> <div class="flex flex-col gap-2"><p class="text-muted-foreground text-xs">PNG, JPG, WebP, GIF, or SVG. Stored at up to 1200px as WebP.</p> <div class="flex gap-2"><input type="file"${attr("accept", ACCEPT)} class="hidden"/> `);
+								Button($$renderer, {
+									variant: "outline",
+									size: "sm",
+									disabled: busy,
+									onclick: () => void 0,
+									class: "h-8",
+									children: ($$renderer) => {
+										Image_up($$renderer, { class: "mr-1.5 h-3.5 w-3.5" });
+										$$renderer.push(`<!----> ${escape_html(busy ? "Working…" : url ? "Replace" : "Upload")}`);
+									},
+									$$slots: { default: true }
+								});
+								$$renderer.push(`<!----> `);
+								if (url) {
+									$$renderer.push("<!--[0-->");
+									Button($$renderer, {
+										variant: "ghost",
+										size: "sm",
+										disabled: busy,
+										onclick: remove,
+										class: "text-destructive hover:text-destructive h-8",
+										children: ($$renderer) => {
+											Trash_2($$renderer, { class: "mr-1.5 h-3.5 w-3.5" });
+											$$renderer.push(`<!----> Remove`);
+										},
+										$$slots: { default: true }
+									});
+								} else $$renderer.push("<!--[-1-->");
+								$$renderer.push(`<!--]--></div></div></div>`);
+							},
+							$$slots: { default: true }
+						});
+						$$renderer.push("<!--]-->");
+					} else {
+						$$renderer.push("<!--[!-->");
+						$$renderer.push("<!--]-->");
+					}
+				},
+				$$slots: { default: true }
+			});
+			$$renderer.push("<!--]-->");
+		} else {
+			$$renderer.push("<!--[!-->");
+			$$renderer.push("<!--]-->");
+		}
+	});
+}
+//#endregion
+//#region src/routes/admin/+page.svelte
+function _page($$renderer, $$props) {
+	$$renderer.component(($$renderer) => {
+		const brandName = derived(() => page.data.branding.name);
+		let { data } = $$props;
+		const can = (p) => data.platformPermissions.includes("instance_admin") || data.platformPermissions.includes(p);
+		const tiles = derived(() => [
+			{
+				href: "/admin/users",
+				icon: Users,
+				value: data.stats.users ?? "—",
+				label: data.stats.users === null ? "User store unavailable" : `User${data.stats.users === 1 ? "" : "s"}`,
+				show: can("manage_instance_users")
+			},
+			{
+				href: "/admin/organizations",
+				icon: Building_2,
+				value: "Organizations",
+				label: "All orgs on this instance",
+				show: can("instance_admin")
+			},
+			{
+				href: "/admin/compute",
+				icon: Server,
+				value: "Compute",
+				label: "Servers, status & config",
+				show: can("manage_compute")
+			},
+			{
+				href: "/projects",
+				icon: Layout_dashboard,
+				value: "Content",
+				label: "Definitions & projects",
+				show: can("instance_admin")
+			}
+		].filter((t) => t.show));
+		head("1jef3w8", $$renderer, ($$renderer) => {
+			$$renderer.title(($$renderer) => {
+				$$renderer.push(`<title>Admin · General</title>`);
+			});
+		});
+		$$renderer.push(`<div class="space-y-6">`);
+		SectionHeader($$renderer, {
+			eyebrow: "Admin",
+			title: "General",
+			description: `At-a-glance health of this ${stringify(brandName())} instance — users, compute, and content.`
+		});
+		$$renderer.push(`<!----> <div class="grid gap-3 sm:grid-cols-2 lg:grid-cols-3"><!--[-->`);
+		const each_array = ensure_array_like(tiles());
+		for (let $$index = 0, $$length = each_array.length; $$index < $$length; $$index++) {
+			let tile = each_array[$$index];
+			StatCard($$renderer, spread_props([tile]));
+		}
+		$$renderer.push(`<!--]--></div> `);
+		if (data.org) {
+			$$renderer.push("<!--[0-->");
+			AssetUpload($$renderer, {
+				orgId: data.org.id,
+				kind: "logo",
+				url: data.org.assets.logo ?? null,
+				title: "Company logo",
+				description: `Upload a logo to reuse across ${stringify(brandName())}. Shown in the viewer header; more surfaces will pick it up.`
+			});
+		} else $$renderer.push("<!--[-1-->");
+		$$renderer.push(`<!--]--> `);
+		if (Card) {
+			$$renderer.push("<!--[-->");
+			Card($$renderer, {
+				children: ($$renderer) => {
+					if (Card_header) {
+						$$renderer.push("<!--[-->");
+						Card_header($$renderer, {
+							children: ($$renderer) => {
+								if (Card_title) {
+									$$renderer.push("<!--[-->");
+									Card_title($$renderer, {
+										class: "flex items-center gap-2 text-sm font-medium",
+										children: ($$renderer) => {
+											Package($$renderer, { class: "text-muted-foreground h-4 w-4" });
+											$$renderer.push(`<!----> Installed version`);
+										},
+										$$slots: { default: true }
+									});
+									$$renderer.push("<!--]-->");
+								} else {
+									$$renderer.push("<!--[!-->");
+									$$renderer.push("<!--]-->");
+								}
+							},
+							$$slots: { default: true }
+						});
+						$$renderer.push("<!--]-->");
+					} else {
+						$$renderer.push("<!--[!-->");
+						$$renderer.push("<!--]-->");
+					}
+					$$renderer.push(` `);
+					if (Card_content) {
+						$$renderer.push("<!--[-->");
+						Card_content($$renderer, {
+							children: ($$renderer) => {
+								$$renderer.push(`<div class="flex flex-wrap items-baseline gap-x-3 gap-y-1"><code class="text-foreground font-mono text-xs">@selvajs/selva</code> <span class="text-muted-foreground text-xs">v${escape_html(data.version)}</span></div>`);
+							},
+							$$slots: { default: true }
+						});
+						$$renderer.push("<!--]-->");
+					} else {
+						$$renderer.push("<!--[!-->");
+						$$renderer.push("<!--]-->");
+					}
+				},
+				$$slots: { default: true }
+			});
+			$$renderer.push("<!--]-->");
+		} else {
+			$$renderer.push("<!--[!-->");
+			$$renderer.push("<!--]-->");
+		}
+		$$renderer.push(`</div>`);
+	});
+}
+
+export { _page as default };
+//# sourceMappingURL=_page.svelte.js-CKiUgYZP.js.map