@selvajs/selva 4.20.0-beta.4 → 4.20.0-beta.5

package/build/server/chunks/entries/pages/admin/_layout.server.ts.js-sw-IzyTT.js

@@ -0,0 +1,31 @@
+import { c as getTenancy, j as flag, l as getAuditQuery } from '../../../chunks/providers.server.js-DNVO4BPz.js';
+import { a as assertAnyPlatformPermission } from '../../../chunks/access2.server.js-DM8oo7RX.js';
+import { redirect } from '@sveltejs/kit';
+
+//#region src/routes/admin/+layout.server.ts
+/**
+* `/admin` is a platform-scope surface — instance operators and Selva staff
+* only. Holding only org-class permissions (`manage_org_members`,
+* `manage_org_compute`, `manage_definitions`, `manage_projects`) does NOT
+* admit you here, even though those permissions also start with `manage_`.
+* Org admins get their own surface elsewhere — `/team/*` (see docs/contributing/permissions.md §8).
+*/
+var load = async ({ locals }) => {
+	if (!locals.ctx) redirect(303, "/login");
+	assertAnyPlatformPermission(locals);
+	return {
+		platformPermissions: locals.ctx.platformPermissions,
+		orgPermissions: locals.ctx.orgPermissions,
+		auditAvailable: getAuditQuery() !== null,
+		platformProjectsEnabled: flag("ENABLE_PLATFORM_PROJECTS"),
+		tenancy: getTenancy()
+	};
+};
+
+var _layout_server_ts = /*#__PURE__*/Object.freeze({
+	__proto__: null,
+	load: load
+});
+
+export { _layout_server_ts as _ };
+//# sourceMappingURL=_layout.server.ts.js-sw-IzyTT.js.map

package/build/server/chunks/entries/pages/admin/_layout.server.ts.js-sw-IzyTT.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_layout.server.ts.js-sw-IzyTT.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/admin/_layout.server.ts.js"],"sourcesContent":["import { S as getTenancy, n as getAuditQuery, t as flag } from \"../../../chunks/providers.server.js\";\nimport { n as assertAnyPlatformPermission } from \"../../../chunks/access2.server.js\";\nimport { redirect } from \"@sveltejs/kit\";\n//#region src/routes/admin/+layout.server.ts\n/**\n* `/admin` is a platform-scope surface — instance operators and Selva staff\n* only. Holding only org-class permissions (`manage_org_members`,\n* `manage_org_compute`, `manage_definitions`, `manage_projects`) does NOT\n* admit you here, even though those permissions also start with `manage_`.\n* Org admins get their own surface elsewhere — `/team/*` (see docs/contributing/permissions.md §8).\n*/\nvar load = async ({ locals }) => {\n\tif (!locals.ctx) redirect(303, \"/login\");\n\tassertAnyPlatformPermission(locals);\n\treturn {\n\t\tplatformPermissions: locals.ctx.platformPermissions,\n\t\torgPermissions: locals.ctx.orgPermissions,\n\t\tauditAvailable: getAuditQuery() !== null,\n\t\tplatformProjectsEnabled: flag(\"ENABLE_PLATFORM_PROJECTS\"),\n\t\ttenancy: getTenancy()\n\t};\n};\n//#endregion\nexport { load };\n"],"names":[],"mappings":";;;;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AACjC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;AACzC,CAAC,2BAA2B,CAAC,MAAM,CAAC;AACpC,CAAC,OAAO;AACR,EAAE,mBAAmB,EAAE,MAAM,CAAC,GAAG,CAAC,mBAAmB;AACrD,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc;AAC3C,EAAE,cAAc,EAAE,aAAa,EAAE,KAAK,IAAI;AAC1C,EAAE,uBAAuB,EAAE,IAAI,CAAC,0BAA0B,CAAC;AAC3D,EAAE,OAAO,EAAE,UAAU;AACrB,EAAE;AACF,CAAC;;;;;;;;;"}

package/build/server/chunks/entries/pages/admin/_layout.svelte.js-cRY08Uqz.js

@@ -0,0 +1,121 @@
+import { ae as derived } from '../../../chunks/server.js-CUv4onuj.js';
+import { B as Building_complex } from '../../../chunks/building-complex.js-CC9FY878.js';
+import { F as Folders } from '../../../chunks/folders.js-r8zztm3A.js';
+import { G as Gauge } from '../../../chunks/gauge.js-DJslOX9E.js';
+import { S as Scroll_text } from '../../../chunks/scroll-text.js-HGE77SER.js';
+import { S as Server } from '../../../chunks/server3.js-BvQRKXaA.js';
+import { S as Settings } from '../../../chunks/settings.js-BLQ8UOWY.js';
+import { U as Users } from '../../../chunks/users.js-rMvV98ew.js';
+import { S as SideNav } from '../../../chunks/SideNav.js-8oLiHh-r.js';
+import { A as AppHeader } from '../../../chunks/AppHeader.js-DTL3rbQB.js';
+import '../../../chunks/uneval.js-NmnccxCg.js';
+import 'clsx';
+import '../../../chunks/utils2.js-D4hQ3EdJ.js';
+import 'tailwind-merge';
+import '../../../chunks/state.js-BBaXzAJK.js';
+import '../../../chunks/client.js-Oo1ss_eH.js';
+import '../../../chunks/shared.js-BStsS1ju.js';
+import '@sveltejs/kit/internal';
+import '../../../chunks/exports.js-DurfUvtz.js';
+import '../../../chunks/routing.js-CvcjLFt6.js';
+import '../../../chunks/index-server.js-CMohmRjd.js';
+import '../../../chunks/rolldown-runtime.js-gLLCT7Mu.js';
+import '../../../chunks/internal2.js-DrBgCix0.js';
+import '../../../chunks/legacy-client.js-Neicmjgj.js';
+import '../../../chunks/events.js-Bht3PYMJ.js';
+import '@sveltejs/kit/internal/server';
+import '../../../chunks/SettingsMenu.js-B3I9XKo1.js';
+import '../../../chunks/src.js-qWxoV-ql.js';
+import 'zod';
+import '../../../chunks/footerContext.svelte.js-B1a16Jyc.js';
+import '../../../chunks/index-server2.js-siA98IdX.js';
+import '../../../chunks/create-id.js-CVwIPAvl.js';
+import '../../../chunks/button.js-BsdzK4f_.js';
+import 'tailwind-variants';
+import '../../../chunks/severity.js-6dh33En0.js';
+import '../../../chunks/shield.js-BetiEYns.js';
+import '../../../chunks/dialog-description.js-Cyy3ORaZ.js';
+import '../../../chunks/scroll-lock.js-CP7_g1Yv.js';
+import '../../../chunks/dialog.js-CF64f4Rf.js';
+import '../../../chunks/x.js-Cfd84Xeh.js';
+
+//#region src/routes/admin/+layout.svelte
+function _layout($$renderer, $$props) {
+	$$renderer.component(($$renderer) => {
+		let { data, children } = $$props;
+		const can = (p) => {
+			if (data.platformPermissions.includes("instance_admin")) return true;
+			if (data.platformPermissions.includes(p)) return true;
+			return data.orgPermissions.includes(p);
+		};
+		const items = derived(() => [
+			{
+				href: "/admin",
+				label: "General",
+				icon: Gauge,
+				show: true
+			},
+			{
+				href: "/admin/organizations",
+				label: "Organizations",
+				icon: Building_complex,
+				match: "prefix",
+				show: can("instance_admin") && data.tenancy !== "single"
+			},
+			{
+				href: "/admin/projects",
+				label: "Projects",
+				icon: Folders,
+				match: "prefix",
+				show: can("instance_admin") && data.platformProjectsEnabled
+			},
+			{
+				href: "/admin/users",
+				label: "Users",
+				icon: Users,
+				match: "prefix",
+				show: can("manage_instance_users")
+			},
+			{
+				href: "/admin/compute",
+				label: "Compute",
+				icon: Server,
+				match: "prefix",
+				show: can("manage_compute")
+			},
+			{
+				href: "/admin/system",
+				label: "System",
+				icon: Settings,
+				match: "prefix",
+				show: can("manage_updates")
+			},
+			{
+				href: "/admin/audit",
+				label: "Audit log",
+				icon: Scroll_text,
+				match: "prefix",
+				show: can("instance_admin") && data.auditAvailable
+			}
+		].filter((i) => i.show));
+		{
+			function sidenav($$renderer) {
+				SideNav($$renderer, {
+					items: items(),
+					eyebrow: "Platform",
+					border: false
+				});
+			}
+			AppHeader($$renderer, {
+				sidenav,
+				children: ($$renderer) => {
+					$$renderer.push(`<div class="px-(--page-px) py-(--page-py)">`);
+					children?.($$renderer);
+					$$renderer.push(`<!----></div>`);
+				}});
+		}
+	});
+}
+
+export { _layout as default };
+//# sourceMappingURL=_layout.svelte.js-cRY08Uqz.js.map

package/build/server/chunks/entries/pages/admin/_layout.svelte.js-cRY08Uqz.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_layout.svelte.js-cRY08Uqz.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/admin/_layout.svelte.js"],"sourcesContent":["import { a as derived } from \"../../../chunks/server.js\";\nimport { t as Building_complex } from \"../../../chunks/building-complex.js\";\nimport { t as Folders } from \"../../../chunks/folders.js\";\nimport { t as Gauge } from \"../../../chunks/gauge.js\";\nimport { t as Scroll_text } from \"../../../chunks/scroll-text.js\";\nimport { t as Server } from \"../../../chunks/server3.js\";\nimport { t as Settings } from \"../../../chunks/settings.js\";\nimport { t as Users } from \"../../../chunks/users.js\";\nimport { t as SideNav } from \"../../../chunks/SideNav.js\";\nimport { t as AppHeader } from \"../../../chunks/AppHeader.js\";\n//#region src/routes/admin/+layout.svelte\nfunction _layout($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\tlet { data, children } = $$props;\n\t\tconst can = (p) => {\n\t\t\tif (data.platformPermissions.includes(\"instance_admin\")) return true;\n\t\t\tif (data.platformPermissions.includes(p)) return true;\n\t\t\treturn data.orgPermissions.includes(p);\n\t\t};\n\t\tconst items = derived(() => [\n\t\t\t{\n\t\t\t\thref: \"/admin\",\n\t\t\t\tlabel: \"General\",\n\t\t\t\ticon: Gauge,\n\t\t\t\tshow: true\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/organizations\",\n\t\t\t\tlabel: \"Organizations\",\n\t\t\t\ticon: Building_complex,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"instance_admin\") && data.tenancy !== \"single\"\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/projects\",\n\t\t\t\tlabel: \"Projects\",\n\t\t\t\ticon: Folders,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"instance_admin\") && data.platformProjectsEnabled\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/users\",\n\t\t\t\tlabel: \"Users\",\n\t\t\t\ticon: Users,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"manage_instance_users\")\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/compute\",\n\t\t\t\tlabel: \"Compute\",\n\t\t\t\ticon: Server,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"manage_compute\")\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/system\",\n\t\t\t\tlabel: \"System\",\n\t\t\t\ticon: Settings,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"manage_updates\")\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/audit\",\n\t\t\t\tlabel: \"Audit log\",\n\t\t\t\ticon: Scroll_text,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"instance_admin\") && data.auditAvailable\n\t\t\t}\n\t\t].filter((i) => i.show));\n\t\t{\n\t\t\tfunction sidenav($$renderer) {\n\t\t\t\tSideNav($$renderer, {\n\t\t\t\t\titems: items(),\n\t\t\t\t\teyebrow: \"Platform\",\n\t\t\t\t\tborder: false\n\t\t\t\t});\n\t\t\t}\n\t\t\tAppHeader($$renderer, {\n\t\t\t\tsidenav,\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<div class=\"px-(--page-px) py-(--page-py)\">`);\n\t\t\t\t\tchildren?.($$renderer);\n\t\t\t\t\t$$renderer.push(`<!----></div>`);\n\t\t\t\t},\n\t\t\t\t$$slots: {\n\t\t\t\t\tsidenav: true,\n\t\t\t\t\tdefault: true\n\t\t\t\t}\n\t\t\t});\n\t\t}\n\t});\n}\n//#endregion\nexport { _layout as default };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAUA;AACA,SAAS,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE;AACtC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO;AAClC,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK;AACrB,GAAG,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,IAAI;AACvE,GAAG,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI;AACxD,GAAG,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzC,EAAE,CAAC;AACH,EAAE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM;AAC9B,GAAG;AACH,IAAI,IAAI,EAAE,QAAQ;AAClB,IAAI,KAAK,EAAE,SAAS;AACpB,IAAI,IAAI,EAAE,KAAK;AACf,IAAI,IAAI,EAAE;AACV,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,sBAAsB;AAChC,IAAI,KAAK,EAAE,eAAe;AAC1B,IAAI,IAAI,EAAE,gBAAgB;AAC1B,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK;AACpD,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,iBAAiB;AAC3B,IAAI,KAAK,EAAE,UAAU;AACrB,IAAI,IAAI,EAAE,OAAO;AACjB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC;AACxC,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,cAAc;AACxB,IAAI,KAAK,EAAE,OAAO;AAClB,IAAI,IAAI,EAAE,KAAK;AACf,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,uBAAuB;AACrC,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,gBAAgB;AAC1B,IAAI,KAAK,EAAE,SAAS;AACpB,IAAI,IAAI,EAAE,MAAM;AAChB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,gBAAgB;AAC9B,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,eAAe;AACzB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,QAAQ;AAClB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,gBAAgB;AAC9B,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,cAAc;AACxB,IAAI,KAAK,EAAE,WAAW;AACtB,IAAI,IAAI,EAAE,WAAW;AACrB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC;AACxC;AACA,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;AAC1B,EAAE;AACF,GAAG,SAAS,OAAO,CAAC,UAAU,EAAE;AAChC,IAAI,OAAO,CAAC,UAAU,EAAE;AACxB,KAAK,KAAK,EAAE,KAAK,EAAE;AACnB,KAAK,OAAO,EAAE,UAAU;AACxB,KAAK,MAAM,EAAE;AACb,KAAK,CAAC;AACN,GAAG;AACH,GAAG,SAAS,CAAC,UAAU,EAAE;AACzB,IAAI,OAAO;AACX,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,2CAA2C,CAAC,CAAC;AACnE,KAAK,QAAQ,GAAG,UAAU,CAAC;AAC3B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;AACrC,IAAI,CAKD,CAAC,CAAC;AACL,EAAE;AACF,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/entries/pages/admin/_page.server.ts.js-X0zW0i_w.js

@@ -0,0 +1,76 @@
+import { h as hasPermission } from '../../../chunks/src.js-qWxoV-ql.js';
+import { a as getAuthProvider, e as getOrganizationProvider } from '../../../chunks/providers.server.js-DNVO4BPz.js';
+import { r as renderThrown } from '../../../chunks/definitions.js-niXE0HY4.js';
+import { p as package_default } from '../../../chunks/package.js-mKPTskyg.js';
+
+//#region src/routes/admin/+page.server.ts
+/**
+* Resolve the org whose branding assets the General page manages. Single-tenant
+* has exactly one org (auto-seeded at bootstrap); we surface it so an admin can
+* set the company logo without the org-list UI (which only exists in
+* multi-tenant). Returns null if no org exists yet or the lookup fails — the
+* cards just hide.
+*/
+async function loadAdminOrg(ctx, log) {
+	if (!ctx) return null;
+	try {
+		const org = (await getOrganizationProvider().listOrgs(ctx, { limit: 1 })).items[0];
+		return org ? {
+			id: org.id,
+			name: org.name,
+			assets: org.assets ?? {}
+		} : null;
+	} catch (err) {
+		log.error("Failed to load admin org for asset cards", {
+			component: "admin",
+			err: renderThrown(err)
+		});
+		return null;
+	}
+}
+/**
+* The General dashboard sits inside the platform-scoped `/admin` shell, but
+* each panel still needs its own permission. The user-count tile is gated
+* on `manage_instance_users`; without it, the tile renders a placeholder.
+*/
+var load = async ({ locals }) => {
+	const ctx = locals.ctx;
+	const canSeeUserStats = ctx ? hasPermission(ctx, "manage_instance_users") : false;
+	const canManageOrg = ctx ? hasPermission(ctx, "manage_org_members") : false;
+	const platformPermissions = ctx?.platformPermissions ?? [];
+	const org = canManageOrg ? await loadAdminOrg(ctx, locals.log) : null;
+	if (!canSeeUserStats) return {
+		stats: { users: null },
+		platformPermissions,
+		version: package_default.version,
+		org
+	};
+	try {
+		return {
+			stats: { users: (await getAuthProvider().listUsers({ limit: 200 }))?.items.length ?? null },
+			platformPermissions,
+			version: package_default.version,
+			org
+		};
+	} catch (err) {
+		if (err && typeof err === "object" && "status" in err) throw err;
+		locals.log.error("Failed to load admin dashboard", {
+			component: "admin",
+			err: renderThrown(err)
+		});
+		return {
+			stats: { users: null },
+			platformPermissions,
+			version: package_default.version,
+			org
+		};
+	}
+};
+
+var _page_server_ts = /*#__PURE__*/Object.freeze({
+	__proto__: null,
+	load: load
+});
+
+export { _page_server_ts as _ };
+//# sourceMappingURL=_page.server.ts.js-X0zW0i_w.js.map

package/build/server/chunks/entries/pages/admin/_page.server.ts.js-X0zW0i_w.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_page.server.ts.js-X0zW0i_w.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/admin/_page.server.ts.js"],"sourcesContent":["import { r as hasPermission } from \"../../../chunks/src.js\";\nimport { h as getOrganizationProvider, r as getAuthProvider } from \"../../../chunks/providers.server.js\";\nimport { l as renderThrown } from \"../../../chunks/definitions.js\";\nimport { t as package_default } from \"../../../chunks/package.js\";\n//#region src/routes/admin/+page.server.ts\n/**\n* Resolve the org whose branding assets the General page manages. Single-tenant\n* has exactly one org (auto-seeded at bootstrap); we surface it so an admin can\n* set the company logo without the org-list UI (which only exists in\n* multi-tenant). Returns null if no org exists yet or the lookup fails — the\n* cards just hide.\n*/\nasync function loadAdminOrg(ctx, log) {\n\tif (!ctx) return null;\n\ttry {\n\t\tconst org = (await getOrganizationProvider().listOrgs(ctx, { limit: 1 })).items[0];\n\t\treturn org ? {\n\t\t\tid: org.id,\n\t\t\tname: org.name,\n\t\t\tassets: org.assets ?? {}\n\t\t} : null;\n\t} catch (err) {\n\t\tlog.error(\"Failed to load admin org for asset cards\", {\n\t\t\tcomponent: \"admin\",\n\t\t\terr: renderThrown(err)\n\t\t});\n\t\treturn null;\n\t}\n}\n/**\n* The General dashboard sits inside the platform-scoped `/admin` shell, but\n* each panel still needs its own permission. The user-count tile is gated\n* on `manage_instance_users`; without it, the tile renders a placeholder.\n*/\nvar load = async ({ locals }) => {\n\tconst ctx = locals.ctx;\n\tconst canSeeUserStats = ctx ? hasPermission(ctx, \"manage_instance_users\") : false;\n\tconst canManageOrg = ctx ? hasPermission(ctx, \"manage_org_members\") : false;\n\tconst platformPermissions = ctx?.platformPermissions ?? [];\n\tconst org = canManageOrg ? await loadAdminOrg(ctx, locals.log) : null;\n\tif (!canSeeUserStats) return {\n\t\tstats: { users: null },\n\t\tplatformPermissions,\n\t\tversion: package_default.version,\n\t\torg\n\t};\n\ttry {\n\t\treturn {\n\t\t\tstats: { users: (await getAuthProvider().listUsers({ limit: 200 }))?.items.length ?? null },\n\t\t\tplatformPermissions,\n\t\t\tversion: package_default.version,\n\t\t\torg\n\t\t};\n\t} catch (err) {\n\t\tif (err && typeof err === \"object\" && \"status\" in err) throw err;\n\t\tlocals.log.error(\"Failed to load admin dashboard\", {\n\t\t\tcomponent: \"admin\",\n\t\t\terr: renderThrown(err)\n\t\t});\n\t\treturn {\n\t\t\tstats: { users: null },\n\t\t\tplatformPermissions,\n\t\t\tversion: package_default.version,\n\t\t\torg\n\t\t};\n\t}\n};\n//#endregion\nexport { load };\n"],"names":[],"mappings":";;;;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;AACtC,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,IAAI;AACtB,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,uBAAuB,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AACpF,EAAE,OAAO,GAAG,GAAG;AACf,GAAG,EAAE,EAAE,GAAG,CAAC,EAAE;AACb,GAAG,IAAI,EAAE,GAAG,CAAC,IAAI;AACjB,GAAG,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI;AACzB,GAAG,GAAG,IAAI;AACV,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,GAAG,CAAC,KAAK,CAAC,0CAA0C,EAAE;AACxD,GAAG,SAAS,EAAE,OAAO;AACrB,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC;AACJ,EAAE,OAAO,IAAI;AACb,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AACjC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,eAAe,GAAG,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,uBAAuB,CAAC,GAAG,KAAK;AAClF,CAAC,MAAM,YAAY,GAAG,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,oBAAoB,CAAC,GAAG,KAAK;AAC5E,CAAC,MAAM,mBAAmB,GAAG,GAAG,EAAE,mBAAmB,IAAI,EAAE;AAC3D,CAAC,MAAM,GAAG,GAAG,YAAY,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI;AACtE,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO;AAC9B,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;AACxB,EAAE,mBAAmB;AACrB,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO;AAClC,EAAE;AACF,EAAE;AACF,CAAC,IAAI;AACL,EAAE,OAAO;AACT,GAAG,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,eAAe,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,EAAE;AAC9F,GAAG,mBAAmB;AACtB,GAAG,OAAO,EAAE,eAAe,CAAC,OAAO;AACnC,GAAG;AACH,GAAG;AACH,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,EAAE,MAAM,GAAG;AAClE,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,gCAAgC,EAAE;AACrD,GAAG,SAAS,EAAE,OAAO;AACrB,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC;AACJ,EAAE,OAAO;AACT,GAAG,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;AACzB,GAAG,mBAAmB;AACtB,GAAG,OAAO,EAAE,eAAe,CAAC,OAAO;AACnC,GAAG;AACH,GAAG;AACH,CAAC;AACD,CAAC;;;;;;;;;"}

package/build/server/chunks/entries/pages/admin/_page.svelte.js-B_Tnu1y1.js

@@ -0,0 +1,396 @@
+import { ag as head, aj as stringify, ak as ensure_array_like, ai as spread_props, ae as derived, af as attr, ap as escape_html } from '../../../chunks/server.js-CUv4onuj.js';
+import { I as Icon } from '../../../chunks/utils2.js-D4hQ3EdJ.js';
+import { B as Button } from '../../../chunks/button.js-BsdzK4f_.js';
+import { B as Building_complex } from '../../../chunks/building-complex.js-CC9FY878.js';
+import { S as Server } from '../../../chunks/server3.js-BvQRKXaA.js';
+import { T as Trash } from '../../../chunks/trash.js-fB50k4JC.js';
+import { U as Users } from '../../../chunks/users.js-rMvV98ew.js';
+import { i as invalidateAll } from '../../../chunks/client.js-Oo1ss_eH.js';
+import { p as page } from '../../../chunks/state.js-BBaXzAJK.js';
+import { S as SectionHeader } from '../../../chunks/SectionHeader.js-5e_z_QFZ.js';
+import { C as Card } from '../../../chunks/card.js-DleTSvCu.js';
+import { C as Card_content } from '../../../chunks/card-content.js-BoHD9SkQ.js';
+import { C as Card_description } from '../../../chunks/card-description.js-41TKjKvj.js';
+import { C as Card_header } from '../../../chunks/card-header.js-BA0Xejag.js';
+import { C as Card_title } from '../../../chunks/card-title.js-DKRl93iP.js';
+import { a as toast } from '../../../chunks/toast-state.svelte.js-Dj2T-zNc.js';
+import { C as ConfirmDialog } from '../../../chunks/ConfirmDialog.js-CIRp8kYj.js';
+import { S as StatCard } from '../../../chunks/StatCard.js-CYr1vpTK.js';
+import '../../../chunks/uneval.js-NmnccxCg.js';
+import 'clsx';
+import 'tailwind-merge';
+import 'tailwind-variants';
+import '../../../chunks/shared.js-BStsS1ju.js';
+import '@sveltejs/kit/internal';
+import '../../../chunks/exports.js-DurfUvtz.js';
+import '../../../chunks/routing.js-CvcjLFt6.js';
+import '../../../chunks/index-server.js-CMohmRjd.js';
+import '../../../chunks/rolldown-runtime.js-gLLCT7Mu.js';
+import '../../../chunks/internal2.js-DrBgCix0.js';
+import '../../../chunks/legacy-client.js-Neicmjgj.js';
+import '../../../chunks/events.js-Bht3PYMJ.js';
+import '@sveltejs/kit/internal/server';
+import '../../../chunks/alert-dialog.js-B_uRSj2l.js';
+import '../../../chunks/create-id.js-CVwIPAvl.js';
+import '../../../chunks/scroll-lock.js-CP7_g1Yv.js';
+import '../../../chunks/index-server2.js-siA98IdX.js';
+import '../../../chunks/after-sleep.js-DxlO5aaG.js';
+import '../../../chunks/dialog-description.js-Cyy3ORaZ.js';
+import '../../../chunks/arrow-right.js-DZm-Jah9.js';
+
+//#region ../../node_modules/.pnpm/@lucide+svelte@1.48.0_svelte@5.57.1_@typescript-eslint+types@8.70.1_/node_modules/@lucide/svelte/dist/icons/image-up.svelte
+function Image_up($$renderer, $$props) {
+	let { $$slots, $$events, ...props } = $$props;
+	Icon($$renderer, spread_props([props, { icon: {
+		"name": "image-up",
+		"size": 24,
+		"node": [
+			["path", { "d": "M10.3 21H5a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h14a2 2 0 0 1 2 2v10l-3.1-3.1a2 2 0 0 0-2.814.014L6 21" }],
+			["path", { "d": "m14 19.5 3-3 3 3" }],
+			["path", { "d": "M17 22v-5.5" }],
+			["circle", {
+				"cx": "9",
+				"cy": "9",
+				"r": "2"
+			}]
+		]
+	} }]));
+}
+//#endregion
+//#region ../../node_modules/.pnpm/@lucide+svelte@1.48.0_svelte@5.57.1_@typescript-eslint+types@8.70.1_/node_modules/@lucide/svelte/dist/icons/layout-dashboard.svelte
+function Layout_dashboard($$renderer, $$props) {
+	let { $$slots, $$events, ...props } = $$props;
+	Icon($$renderer, spread_props([props, { icon: {
+		"name": "layout-dashboard",
+		"size": 24,
+		"node": [
+			["rect", {
+				"width": "7",
+				"height": "9",
+				"x": "3",
+				"y": "3",
+				"rx": "1"
+			}],
+			["rect", {
+				"width": "7",
+				"height": "5",
+				"x": "14",
+				"y": "3",
+				"rx": "1"
+			}],
+			["rect", {
+				"width": "7",
+				"height": "9",
+				"x": "14",
+				"y": "12",
+				"rx": "1"
+			}],
+			["rect", {
+				"width": "7",
+				"height": "5",
+				"x": "3",
+				"y": "16",
+				"rx": "1"
+			}]
+		]
+	} }]));
+}
+//#endregion
+//#region ../../node_modules/.pnpm/@lucide+svelte@1.48.0_svelte@5.57.1_@typescript-eslint+types@8.70.1_/node_modules/@lucide/svelte/dist/icons/package.svelte
+function Package($$renderer, $$props) {
+	let { $$slots, $$events, ...props } = $$props;
+	Icon($$renderer, spread_props([props, { icon: {
+		"name": "package",
+		"size": 24,
+		"node": [
+			["path", { "d": "M11 21.73a2 2 0 0 0 2 0l7-4A2 2 0 0 0 21 16V8a2 2 0 0 0-1-1.73l-7-4a2 2 0 0 0-2 0l-7 4A2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.73z" }],
+			["path", { "d": "M12 22V12" }],
+			["polyline", { "points": "3.29 7 12 12 20.71 7" }],
+			["path", { "d": "m7.5 4.27 9 5.15" }]
+		]
+	} }]));
+}
+//#endregion
+//#region src/lib/components/AssetUpload.svelte
+function AssetUpload($$renderer, $$props) {
+	$$renderer.component(($$renderer) => {
+		/** Current public URL for this asset, or null when unset. */
+		let { orgId, kind, url, title, description } = $$props;
+		const ACCEPT = "image/png,image/jpeg,image/webp,image/gif,image/svg+xml";
+		const endpoint = derived(() => `/api/v1/orgs/${orgId}/assets/${kind}`);
+		let busy = false;
+		let confirmingRemove = false;
+		async function remove() {
+			busy = true;
+			try {
+				const res = await fetch(endpoint(), { method: "DELETE" });
+				if (res.ok) {
+					toast.success(`${title} removed`);
+					confirmingRemove = false;
+					await invalidateAll();
+				} else toast.error(`Remove failed (${res.status})`);
+			} catch {
+				toast.error("Failed to remove");
+			} finally {
+				busy = false;
+			}
+		}
+		let $$settled = true;
+		let $$inner_renderer;
+		function $$render_inner($$renderer) {
+			if (Card) {
+				$$renderer.push("<!--[-->");
+				Card($$renderer, {
+					children: ($$renderer) => {
+						if (Card_header) {
+							$$renderer.push("<!--[-->");
+							Card_header($$renderer, {
+								children: ($$renderer) => {
+									if (Card_title) {
+										$$renderer.push("<!--[-->");
+										Card_title($$renderer, {
+											class: "flex items-center gap-2 text-sm font-medium",
+											children: ($$renderer) => {
+												Building_complex($$renderer, { class: "text-muted-foreground h-4 w-4" });
+												$$renderer.push(`<!----> ${escape_html(title)}`);
+											},
+											$$slots: { default: true }
+										});
+										$$renderer.push("<!--]-->");
+									} else {
+										$$renderer.push("<!--[!-->");
+										$$renderer.push("<!--]-->");
+									}
+									$$renderer.push(` `);
+									if (description) {
+										$$renderer.push("<!--[0-->");
+										if (Card_description) {
+											$$renderer.push("<!--[-->");
+											Card_description($$renderer, {
+												children: ($$renderer) => {
+													$$renderer.push(`<!---->${escape_html(description)}`);
+												},
+												$$slots: { default: true }
+											});
+											$$renderer.push("<!--]-->");
+										} else {
+											$$renderer.push("<!--[!-->");
+											$$renderer.push("<!--]-->");
+										}
+									} else $$renderer.push("<!--[-1-->");
+									$$renderer.push(`<!--]-->`);
+								},
+								$$slots: { default: true }
+							});
+							$$renderer.push("<!--]-->");
+						} else {
+							$$renderer.push("<!--[!-->");
+							$$renderer.push("<!--]-->");
+						}
+						$$renderer.push(` `);
+						if (Card_content) {
+							$$renderer.push("<!--[-->");
+							Card_content($$renderer, {
+								children: ($$renderer) => {
+									$$renderer.push(`<div class="flex items-center gap-4"><div class="bg-muted/40 flex h-20 w-20 shrink-0 items-center justify-center overflow-hidden rounded-lg border">`);
+									if (url) $$renderer.push(`<!--[0--><img${attr("src", url)}${attr("alt", title)} class="h-full w-full object-contain"/>`);
+									else {
+										$$renderer.push("<!--[-1-->");
+										Building_complex($$renderer, { class: "text-muted-foreground/50 h-8 w-8" });
+									}
+									$$renderer.push(`<!--]--></div> <div class="flex flex-col gap-2"><p class="text-muted-foreground text-xs">PNG, JPG, WebP, GIF, or SVG. Stored at up to 1200px as WebP.</p> <div class="flex gap-2"><input type="file"${attr("accept", ACCEPT)} class="hidden"/> `);
+									Button($$renderer, {
+										variant: "outline",
+										size: "sm",
+										disabled: busy,
+										onclick: () => void 0,
+										class: "h-8",
+										children: ($$renderer) => {
+											Image_up($$renderer, { class: "mr-1.5 h-3.5 w-3.5" });
+											$$renderer.push(`<!----> ${escape_html(busy ? "Working…" : url ? "Replace" : "Upload")}`);
+										},
+										$$slots: { default: true }
+									});
+									$$renderer.push(`<!----> `);
+									if (url) {
+										$$renderer.push("<!--[0-->");
+										Button($$renderer, {
+											variant: "ghost",
+											size: "sm",
+											disabled: busy,
+											onclick: () => confirmingRemove = true,
+											class: "text-destructive hover:text-destructive h-8",
+											children: ($$renderer) => {
+												Trash($$renderer, { class: "mr-1.5 h-3.5 w-3.5" });
+												$$renderer.push(`<!----> Remove`);
+											},
+											$$slots: { default: true }
+										});
+									} else $$renderer.push("<!--[-1-->");
+									$$renderer.push(`<!--]--></div></div></div>`);
+								},
+								$$slots: { default: true }
+							});
+							$$renderer.push("<!--]-->");
+						} else {
+							$$renderer.push("<!--[!-->");
+							$$renderer.push("<!--]-->");
+						}
+					},
+					$$slots: { default: true }
+				});
+				$$renderer.push("<!--]-->");
+			} else {
+				$$renderer.push("<!--[!-->");
+				$$renderer.push("<!--]-->");
+			}
+			$$renderer.push(` `);
+			ConfirmDialog($$renderer, {
+				title: `Remove ${title}?`,
+				confirmLabel: "Remove",
+				pendingLabel: "Removing…",
+				variant: "destructive",
+				onConfirm: remove,
+				get open() {
+					return confirmingRemove;
+				},
+				set open($$value) {
+					confirmingRemove = $$value;
+					$$settled = false;
+				}
+			});
+			$$renderer.push(`<!---->`);
+		}
+		do {
+			$$settled = true;
+			$$inner_renderer = $$renderer.copy();
+			$$render_inner($$inner_renderer);
+		} while (!$$settled);
+		$$renderer.subsume($$inner_renderer);
+	});
+}
+//#endregion
+//#region src/routes/admin/+page.svelte
+function _page($$renderer, $$props) {
+	$$renderer.component(($$renderer) => {
+		const brandName = derived(() => page.data.branding.name);
+		let { data } = $$props;
+		const can = (p) => data.platformPermissions.includes("instance_admin") || data.platformPermissions.includes(p);
+		const tiles = derived(() => [
+			{
+				href: "/admin/users",
+				icon: Users,
+				value: data.stats.users ?? "—",
+				label: data.stats.users === null ? "User store unavailable" : `User${data.stats.users === 1 ? "" : "s"}`,
+				show: can("manage_instance_users")
+			},
+			{
+				href: "/admin/organizations",
+				icon: Building_complex,
+				value: "Organizations",
+				label: "All orgs on this instance",
+				show: can("instance_admin")
+			},
+			{
+				href: "/admin/compute",
+				icon: Server,
+				value: "Compute",
+				label: "Servers, status & config",
+				show: can("manage_compute")
+			},
+			{
+				href: "/projects",
+				icon: Layout_dashboard,
+				value: "Content",
+				label: "Definitions & projects",
+				show: can("instance_admin")
+			}
+		].filter((t) => t.show));
+		head("1jef3w8", $$renderer, ($$renderer) => {
+			$$renderer.title(($$renderer) => {
+				$$renderer.push(`<title>Admin · General</title>`);
+			});
+		});
+		$$renderer.push(`<div class="space-y-6">`);
+		SectionHeader($$renderer, {
+			eyebrow: "Admin",
+			title: "General",
+			description: `At-a-glance health of this ${stringify(brandName())} instance — users, compute, and content.`
+		});
+		$$renderer.push(`<!----> <div class="grid gap-3 sm:grid-cols-2 lg:grid-cols-3"><!--[-->`);
+		const each_array = ensure_array_like(tiles());
+		for (let $$index = 0, $$length = each_array.length; $$index < $$length; $$index++) {
+			let tile = each_array[$$index];
+			StatCard($$renderer, spread_props([tile]));
+		}
+		$$renderer.push(`<!--]--></div> `);
+		if (data.org) {
+			$$renderer.push("<!--[0-->");
+			AssetUpload($$renderer, {
+				orgId: data.org.id,
+				kind: "logo",
+				url: data.org.assets.logo ?? null,
+				title: "Company logo",
+				description: `Upload a logo to reuse across ${stringify(brandName())}. Shown in the viewer header; more surfaces will pick it up.`
+			});
+		} else $$renderer.push("<!--[-1-->");
+		$$renderer.push(`<!--]--> `);
+		if (Card) {
+			$$renderer.push("<!--[-->");
+			Card($$renderer, {
+				children: ($$renderer) => {
+					if (Card_header) {
+						$$renderer.push("<!--[-->");
+						Card_header($$renderer, {
+							children: ($$renderer) => {
+								if (Card_title) {
+									$$renderer.push("<!--[-->");
+									Card_title($$renderer, {
+										class: "flex items-center gap-2 text-sm font-medium",
+										children: ($$renderer) => {
+											Package($$renderer, { class: "text-muted-foreground h-4 w-4" });
+											$$renderer.push(`<!----> Installed version`);
+										},
+										$$slots: { default: true }
+									});
+									$$renderer.push("<!--]-->");
+								} else {
+									$$renderer.push("<!--[!-->");
+									$$renderer.push("<!--]-->");
+								}
+							},
+							$$slots: { default: true }
+						});
+						$$renderer.push("<!--]-->");
+					} else {
+						$$renderer.push("<!--[!-->");
+						$$renderer.push("<!--]-->");
+					}
+					$$renderer.push(` `);
+					if (Card_content) {
+						$$renderer.push("<!--[-->");
+						Card_content($$renderer, {
+							children: ($$renderer) => {
+								$$renderer.push(`<div class="flex flex-wrap items-baseline gap-x-3 gap-y-1"><code class="text-foreground font-mono text-xs">@selvajs/selva</code> <span class="text-muted-foreground text-xs">v${escape_html(data.version)}</span></div>`);
+							},
+							$$slots: { default: true }
+						});
+						$$renderer.push("<!--]-->");
+					} else {
+						$$renderer.push("<!--[!-->");
+						$$renderer.push("<!--]-->");
+					}
+				},
+				$$slots: { default: true }
+			});
+			$$renderer.push("<!--]-->");
+		} else {
+			$$renderer.push("<!--[!-->");
+			$$renderer.push("<!--]-->");
+		}
+		$$renderer.push(`</div>`);
+	});
+}
+
+export { _page as default };
+//# sourceMappingURL=_page.svelte.js-B_Tnu1y1.js.map