@selvajs/selva 4.6.20 → 4.6.21-beta.0

package/build/server/chunks/entries/endpoints/admin/api/projects/_server.ts.js-BTgoWufU.js

@@ -0,0 +1,119 @@
+import { json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { randomUUID } from 'node:crypto';
+import { h as flag, d as getOrganizationProvider, e as getProjectProvider, P as ProviderError } from '../../../../../chunks/providers.server.js-D0hpk-aq.js';
+import { b as requireInstanceAdmin } from '../../../../../chunks/access.server.js-D99g5hZd.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-yRMzxqNi.js';
+import { s as slugify } from '../../../../../chunks/slug.js-BGuFQjqe.js';
+import { S as SYSTEM_CONTEXT } from '../../../../../chunks/context.js-D8E0GFTw.js';
+import '../../../../../chunks/shared-server.js-DaWdgxVh.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@selvajs/compute/core';
+import '../../../../../chunks/schema.js-j3D3emog.js';
+import '../../../../../chunks/utils4.js-BRotGwxx.js';
+
+const MAX_SLUG_ATTEMPTS = 25;
+function isSlugConflict(err) {
+  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);
+}
+function isNameConflict(err) {
+  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);
+}
+const CreatePlatformProjectBody = z.object({
+  name: z.string().min(1, "Project name is required").max(128).trim(),
+  description: z.string().max(2e3).optional(),
+  /**
+   * Org that physically hosts the project. Storage routing and compute
+   * resolution use this — but org membership in this org does NOT grant
+   * access. Visibility = 'platform' overrides those defaults.
+   *
+   * If omitted, the platform admin's first available org is used.
+   */
+  orgId: z.string().uuid().optional()
+});
+const GET = async ({ locals }) => {
+  requireInstanceAdmin(locals);
+  if (!flag("ENABLE_PLATFORM_PROJECTS")) apiError(404, ApiErrorCode.NOT_FOUND, "Not found");
+  try {
+    const orgs = await getOrganizationProvider().listOrgs(SYSTEM_CONTEXT, { limit: 1e3 });
+    const all = [];
+    for (const org of orgs.items) {
+      const page = await getProjectProvider().listProjects(SYSTEM_CONTEXT, org.id, {
+        limit: 1e3
+      });
+      for (const p of page.items) {
+        if (p.visibility === "platform") all.push(p);
+      }
+    }
+    return json({ projects: all });
+  } catch (err) {
+    handleApiError(err, "Failed to list platform projects");
+  }
+};
+const POST = async ({ request, locals }) => {
+  const user = requireInstanceAdmin(locals);
+  if (!flag("ENABLE_PLATFORM_PROJECTS")) apiError(404, ApiErrorCode.NOT_FOUND, "Not found");
+  const ctx = locals.ctx;
+  const body = await request.json().catch(() => null);
+  const parsed = CreatePlatformProjectBody.safeParse(body);
+  if (!parsed.success) throwZodError(parsed.error);
+  const hostOrgId = parsed.data.orgId ?? ctx.actingOrgId;
+  if (!hostOrgId) {
+    apiError(
+      400,
+      ApiErrorCode.VALIDATION_FAILED,
+      "A host orgId is required (no active organization in context)."
+    );
+  }
+  const hostOrg = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, hostOrgId);
+  if (!hostOrg)
+    apiError(400, ApiErrorCode.VALIDATION_FAILED, `Host organization '${hostOrgId}' not found.`);
+  const projectStore = getProjectProvider();
+  const baseSlug = slugify(parsed.data.name) || "platform-project";
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const projectId = randomUUID();
+  for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {
+    const slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;
+    const project = {
+      id: projectId,
+      orgId: hostOrgId,
+      name: parsed.data.name,
+      slug,
+      description: parsed.data.description,
+      visibility: "platform",
+      ownerId: user.id,
+      createdBy: user.id,
+      updatedBy: user.id,
+      autoJoinOnUpload: false,
+      createdAt: now,
+      updatedAt: now,
+      deletedAt: null
+    };
+    try {
+      await projectStore.createProject(SYSTEM_CONTEXT, project);
+      return json(project, { status: 201 });
+    } catch (err) {
+      if (isNameConflict(err)) {
+        apiError(
+          409,
+          ApiErrorCode.CONFLICT,
+          "A project with that name already exists in the host organization."
+        );
+      }
+      if (isSlugConflict(err)) continue;
+      handleApiError(err, "Failed to create platform project");
+    }
+  }
+  apiError(
+    409,
+    ApiErrorCode.CONFLICT,
+    "Could not pick a unique project slug after several attempts."
+  );
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-BTgoWufU.js.map

package/build/server/chunks/entries/endpoints/admin/api/projects/_server.ts.js-BTgoWufU.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-BTgoWufU.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/admin/api/projects/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\nimport { f as flag, d as getOrganizationProvider, l as getProjectProvider, P as ProviderError } from \"../../../../../chunks/providers.server.js\";\nimport { b as requireInstanceAdmin } from \"../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { s as slugify } from \"../../../../../chunks/slug.js\";\nimport { S as SYSTEM_CONTEXT } from \"../../../../../chunks/context.js\";\nconst MAX_SLUG_ATTEMPTS = 25;\nfunction isSlugConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);\n}\nfunction isNameConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);\n}\nconst CreatePlatformProjectBody = z.object({\n  name: z.string().min(1, \"Project name is required\").max(128).trim(),\n  description: z.string().max(2e3).optional(),\n  /**\n   * Org that physically hosts the project. Storage routing and compute\n   * resolution use this — but org membership in this org does NOT grant\n   * access. Visibility = 'platform' overrides those defaults.\n   *\n   * If omitted, the platform admin's first available org is used.\n   */\n  orgId: z.string().uuid().optional()\n});\nconst GET = async ({ locals }) => {\n  requireInstanceAdmin(locals);\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n  try {\n    const orgs = await getOrganizationProvider().listOrgs(SYSTEM_CONTEXT, { limit: 1e3 });\n    const all = [];\n    for (const org of orgs.items) {\n      const page = await getProjectProvider().listProjects(SYSTEM_CONTEXT, org.id, {\n        limit: 1e3\n      });\n      for (const p of page.items) {\n        if (p.visibility === \"platform\") all.push(p);\n      }\n    }\n    return json({ projects: all });\n  } catch (err) {\n    handleApiError(err, \"Failed to list platform projects\");\n  }\n};\nconst POST = async ({ request, locals }) => {\n  const user = requireInstanceAdmin(locals);\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n  const ctx = locals.ctx;\n  const body = await request.json().catch(() => null);\n  const parsed = CreatePlatformProjectBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const hostOrgId = parsed.data.orgId ?? ctx.actingOrgId;\n  if (!hostOrgId) {\n    apiError(\n      400,\n      ApiErrorCode.VALIDATION_FAILED,\n      \"A host orgId is required (no active organization in context).\"\n    );\n  }\n  const hostOrg = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, hostOrgId);\n  if (!hostOrg)\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, `Host organization '${hostOrgId}' not found.`);\n  const projectStore = getProjectProvider();\n  const baseSlug = slugify(parsed.data.name) || \"platform-project\";\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const projectId = randomUUID();\n  for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {\n    const slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;\n    const project = {\n      id: projectId,\n      orgId: hostOrgId,\n      name: parsed.data.name,\n      slug,\n      description: parsed.data.description,\n      visibility: \"platform\",\n      ownerId: user.id,\n      createdBy: user.id,\n      updatedBy: user.id,\n      autoJoinOnUpload: false,\n      createdAt: now,\n      updatedAt: now,\n      deletedAt: null\n    };\n    try {\n      await projectStore.createProject(SYSTEM_CONTEXT, project);\n      return json(project, { status: 201 });\n    } catch (err) {\n      if (isNameConflict(err)) {\n        apiError(\n          409,\n          ApiErrorCode.CONFLICT,\n          \"A project with that name already exists in the host organization.\"\n        );\n      }\n      if (isSlugConflict(err)) continue;\n      handleApiError(err, \"Failed to create platform project\");\n    }\n  }\n  apiError(\n    409,\n    ApiErrorCode.CONFLICT,\n    \"Could not pick a unique project slug after several attempts.\"\n  );\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAQA,MAAM,iBAAiB,GAAG,EAAE;AAC5B,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;AAC3C,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACrE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;AAC7C;AACA;AACA;AACA;AACA;AACA;AACA;AACA,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ;AACnC,CAAC,CAAC;AACG,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC3F,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,uBAAuB,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACzF,IAAI,MAAM,GAAG,GAAG,EAAE;AAClB,IAAI,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE;AAClC,MAAM,MAAM,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,EAAE;AACnF,QAAQ,KAAK,EAAE;AACf,OAAO,CAAC;AACR,MAAM,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE;AAClC,QAAQ,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACpD,MAAM;AACN,IAAI;AACJ,IAAI,OAAO,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,kCAAkC,CAAC;AAC3D,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC3C,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC3F,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1D,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,WAAW;AACxD,EAAE,IAAI,CAAC,SAAS,EAAE;AAClB,IAAI,QAAQ;AACZ,MAAM,GAAG;AACT,MAAM,YAAY,CAAC,iBAAiB;AACpC,MAAM;AACN,KAAK;AACL,EAAE;AACF,EAAE,MAAM,OAAO,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC;AACnF,EAAE,IAAI,CAAC,OAAO;AACd,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;AAChG,EAAE,MAAM,YAAY,GAAG,kBAAkB,EAAE;AAC3C,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,kBAAkB;AAClE,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,SAAS,GAAG,UAAU,EAAE;AAChC,EAAE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,iBAAiB,EAAE,OAAO,EAAE,EAAE;AAChE,IAAI,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;AACxE,IAAI,MAAM,OAAO,GAAG;AACpB,MAAM,EAAE,EAAE,SAAS;AACnB,MAAM,KAAK,EAAE,SAAS;AACtB,MAAM,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC5B,MAAM,IAAI;AACV,MAAM,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AAC1C,MAAM,UAAU,EAAE,UAAU;AAC5B,MAAM,OAAO,EAAE,IAAI,CAAC,EAAE;AACtB,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,gBAAgB,EAAE,KAAK;AAC7B,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE;AACjB,KAAK;AACL,IAAI,IAAI;AACR,MAAM,MAAM,YAAY,CAAC,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC;AAC/D,MAAM,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,QAAQ,QAAQ;AAChB,UAAU,GAAG;AACb,UAAU,YAAY,CAAC,QAAQ;AAC/B,UAAU;AACV,SAAS;AACT,MAAM;AACN,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,MAAM,cAAc,CAAC,GAAG,EAAE,mCAAmC,CAAC;AAC9D,IAAI;AACJ,EAAE;AACF,EAAE,QAAQ;AACV,IAAI,GAAG;AACP,IAAI,YAAY,CAAC,QAAQ;AACzB,IAAI;AACJ,GAAG;AACH;;;;"}

package/build/server/chunks/entries/endpoints/admin/api/system/health/_server.ts.js-CQdxoaBS.js

@@ -0,0 +1,163 @@
+import { json } from '@sveltejs/kit';
+import { randomUUID } from 'node:crypto';
+import { mkdir, writeFile, unlink } from 'node:fs/promises';
+import { resolve, join } from 'node:path';
+import { b as private_env } from '../../../../../../chunks/shared-server.js-DaWdgxVh.js';
+import '../../../../../../chunks/context.js-D8E0GFTw.js';
+import { f as findServerById } from '../../../../../../chunks/utils4.js-BRotGwxx.js';
+import { p as providers, k as getComputeServerConfigStore, L as LocalComputeServerStore } from '../../../../../../chunks/providers.server.js-D0hpk-aq.js';
+import { d as requirePermission } from '../../../../../../chunks/access.server.js-D99g5hZd.js';
+import 'zod';
+import 'node:url';
+import 'node:fs';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/api-errors.js-yRMzxqNi.js';
+import '@selvajs/compute/core';
+import '../../../../../../chunks/schema.js-j3D3emog.js';
+
+function atRestSecretsCheck(report) {
+  const base = { id: "at-rest-secrets", label: "Compute server secrets" };
+  if (report === null) {
+    return {
+      ...base,
+      status: "not_applicable",
+      summary: "The active data provider does not encrypt secrets at this layer — nothing to verify."
+    };
+  }
+  if (report.ok) {
+    return {
+      ...base,
+      status: "ok",
+      summary: "All stored compute server API keys decrypt under the current SELVA_AT_REST_KEY."
+    };
+  }
+  const failed = report.failures.map((f) => `"${f.serverLabel}" (${f.reason}${f.cause ? `: ${f.cause}` : ""})`).join(", ");
+  const plaintext = report.plaintextFound;
+  return {
+    ...base,
+    status: "degraded",
+    summary: `${report.failures.length} compute server key(s) could not be loaded: ${failed}.`,
+    remediation: plaintext ? "A key is stored in plaintext on disk — re-enter it via /admin/compute so it is encrypted." : "The stored ciphertext does not match the current SELVA_AT_REST_KEY (rotated key or restored backup). Re-enter the affected keys via /admin/compute, or restore the original SELVA_AT_REST_KEY, then run this check again."
+  };
+}
+const COMPUTE_PING_TIMEOUT_MS = 8e3;
+async function computeReachabilityCheck(locals) {
+  const base = { id: "compute-reachable", label: "Default compute server" };
+  let config;
+  try {
+    config = await getComputeServerConfigStore().getConfig(locals.ctx);
+  } catch (err) {
+    return {
+      ...base,
+      status: "error",
+      summary: `Could not read compute config: ${err instanceof Error ? err.message : String(err)}`
+    };
+  }
+  const server = config.defaultServerId ? findServerById(config, config.defaultServerId) : void 0;
+  if (!server) {
+    return {
+      ...base,
+      status: "not_applicable",
+      summary: "No default compute server is configured — nothing to reach.",
+      remediation: "Add a server and set it as default in /admin/compute."
+    };
+  }
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), COMPUTE_PING_TIMEOUT_MS);
+  try {
+    const headers = {};
+    if (server.apiKey) headers["RhinoComputeKey"] = server.apiKey;
+    const res = await fetch(new URL("/healthcheck", server.serverUrl).toString(), {
+      signal: controller.signal,
+      headers
+    });
+    if (res.ok) {
+      return { ...base, status: "ok", summary: `"${server.label}" answered /healthcheck (200).` };
+    }
+    return {
+      ...base,
+      status: "degraded",
+      summary: `"${server.label}" responded ${res.status} to /healthcheck.`,
+      remediation: res.status === 401 || res.status === 403 ? "Authentication rejected — verify the API key in /admin/compute." : "The server is reachable but unhealthy. Check the Rhino.Compute host."
+    };
+  } catch (err) {
+    const aborted = err instanceof Error && err.name === "AbortError";
+    return {
+      ...base,
+      status: "degraded",
+      summary: aborted ? `"${server.label}" did not respond within ${COMPUTE_PING_TIMEOUT_MS / 1e3}s.` : `"${server.label}" is unreachable: ${err instanceof Error ? err.message : String(err)}.`,
+      remediation: `Confirm the Rhino.Compute host is running and ${server.serverUrl} is correct.`
+    };
+  } finally {
+    clearTimeout(timer);
+  }
+}
+async function dataPathWritableCheck() {
+  const base = { id: "data-path-writable", label: "Data path writable" };
+  if (!(providers.data.computeServer instanceof LocalComputeServerStore)) {
+    return {
+      ...base,
+      status: "not_applicable",
+      summary: "The active data provider does not persist to a local DATA_PATH."
+    };
+  }
+  const dataPath = private_env.DATA_PATH;
+  if (!dataPath) {
+    return {
+      ...base,
+      status: "error",
+      summary: "DATA_PATH is unset but the local provider is active.",
+      remediation: "Set DATA_PATH in .env and restart."
+    };
+  }
+  const absolute = resolve(dataPath);
+  const probe = join(absolute, `.health-probe-${randomUUID()}`);
+  try {
+    await mkdir(absolute, { recursive: true });
+    await writeFile(probe, "ok");
+    await unlink(probe);
+    return { ...base, status: "ok", summary: `DATA_PATH (${dataPath}) is writable.` };
+  } catch (err) {
+    return {
+      ...base,
+      status: "degraded",
+      summary: `DATA_PATH (${dataPath}) is not writable: ${err instanceof Error ? err.message : String(err)}.`,
+      remediation: "Check free disk space and that the directory is owned by the user running the app (`df -h`, `ls -la`)."
+    };
+  }
+}
+const GET = async ({ locals }) => {
+  requirePermission(locals, "instance_admin");
+  const checks = [];
+  const store = providers.data.computeServer;
+  if (typeof store.verifySecrets === "function") {
+    try {
+      checks.push(atRestSecretsCheck(await store.verifySecrets()));
+    } catch (err) {
+      checks.push({
+        id: "at-rest-secrets",
+        label: "Compute server secrets",
+        status: "error",
+        summary: `Verification threw: ${err instanceof Error ? err.message : String(err)}`,
+        remediation: "Check server logs (`pm2 logs selva-compute`) for the underlying error."
+      });
+    }
+  } else {
+    checks.push(atRestSecretsCheck(null));
+  }
+  checks.push(...await Promise.all([computeReachabilityCheck(locals), dataPathWritableCheck()]));
+  const rank = {
+    ok: 0,
+    not_applicable: 0,
+    degraded: 2,
+    error: 3
+  };
+  const overall = checks.reduce(
+    (worst, c) => rank[c.status] > rank[worst] ? c.status : worst,
+    "ok"
+  );
+  return json({ overall, checkedAt: (/* @__PURE__ */ new Date()).toISOString(), checks });
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-CQdxoaBS.js.map

package/build/server/chunks/entries/endpoints/admin/api/system/health/_server.ts.js-CQdxoaBS.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CQdxoaBS.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/admin/api/system/health/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\nimport { mkdir, writeFile, unlink } from \"node:fs/promises\";\nimport { resolve, join } from \"node:path\";\nimport { b as private_env } from \"../../../../../../chunks/shared-server.js\";\nimport \"../../../../../../chunks/context.js\";\nimport { f as findServerById } from \"../../../../../../chunks/utils4.js\";\nimport { p as providers, j as getComputeServerConfigStore, L as LocalComputeServerStore } from \"../../../../../../chunks/providers.server.js\";\nimport { d as requirePermission } from \"../../../../../../chunks/access.server.js\";\nfunction atRestSecretsCheck(report) {\n  const base = { id: \"at-rest-secrets\", label: \"Compute server secrets\" };\n  if (report === null) {\n    return {\n      ...base,\n      status: \"not_applicable\",\n      summary: \"The active data provider does not encrypt secrets at this layer — nothing to verify.\"\n    };\n  }\n  if (report.ok) {\n    return {\n      ...base,\n      status: \"ok\",\n      summary: \"All stored compute server API keys decrypt under the current SELVA_AT_REST_KEY.\"\n    };\n  }\n  const failed = report.failures.map((f) => `\"${f.serverLabel}\" (${f.reason}${f.cause ? `: ${f.cause}` : \"\"})`).join(\", \");\n  const plaintext = report.plaintextFound;\n  return {\n    ...base,\n    status: \"degraded\",\n    summary: `${report.failures.length} compute server key(s) could not be loaded: ${failed}.`,\n    remediation: plaintext ? \"A key is stored in plaintext on disk — re-enter it via /admin/compute so it is encrypted.\" : \"The stored ciphertext does not match the current SELVA_AT_REST_KEY (rotated key or restored backup). Re-enter the affected keys via /admin/compute, or restore the original SELVA_AT_REST_KEY, then run this check again.\"\n  };\n}\nconst COMPUTE_PING_TIMEOUT_MS = 8e3;\nasync function computeReachabilityCheck(locals) {\n  const base = { id: \"compute-reachable\", label: \"Default compute server\" };\n  let config;\n  try {\n    config = await getComputeServerConfigStore().getConfig(locals.ctx);\n  } catch (err) {\n    return {\n      ...base,\n      status: \"error\",\n      summary: `Could not read compute config: ${err instanceof Error ? err.message : String(err)}`\n    };\n  }\n  const server = config.defaultServerId ? findServerById(config, config.defaultServerId) : void 0;\n  if (!server) {\n    return {\n      ...base,\n      status: \"not_applicable\",\n      summary: \"No default compute server is configured — nothing to reach.\",\n      remediation: \"Add a server and set it as default in /admin/compute.\"\n    };\n  }\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), COMPUTE_PING_TIMEOUT_MS);\n  try {\n    const headers = {};\n    if (server.apiKey) headers[\"RhinoComputeKey\"] = server.apiKey;\n    const res = await fetch(new URL(\"/healthcheck\", server.serverUrl).toString(), {\n      signal: controller.signal,\n      headers\n    });\n    if (res.ok) {\n      return { ...base, status: \"ok\", summary: `\"${server.label}\" answered /healthcheck (200).` };\n    }\n    return {\n      ...base,\n      status: \"degraded\",\n      summary: `\"${server.label}\" responded ${res.status} to /healthcheck.`,\n      remediation: res.status === 401 || res.status === 403 ? \"Authentication rejected — verify the API key in /admin/compute.\" : \"The server is reachable but unhealthy. Check the Rhino.Compute host.\"\n    };\n  } catch (err) {\n    const aborted = err instanceof Error && err.name === \"AbortError\";\n    return {\n      ...base,\n      status: \"degraded\",\n      summary: aborted ? `\"${server.label}\" did not respond within ${COMPUTE_PING_TIMEOUT_MS / 1e3}s.` : `\"${server.label}\" is unreachable: ${err instanceof Error ? err.message : String(err)}.`,\n      remediation: `Confirm the Rhino.Compute host is running and ${server.serverUrl} is correct.`\n    };\n  } finally {\n    clearTimeout(timer);\n  }\n}\nasync function dataPathWritableCheck() {\n  const base = { id: \"data-path-writable\", label: \"Data path writable\" };\n  if (!(providers.data.computeServer instanceof LocalComputeServerStore)) {\n    return {\n      ...base,\n      status: \"not_applicable\",\n      summary: \"The active data provider does not persist to a local DATA_PATH.\"\n    };\n  }\n  const dataPath = private_env.DATA_PATH;\n  if (!dataPath) {\n    return {\n      ...base,\n      status: \"error\",\n      summary: \"DATA_PATH is unset but the local provider is active.\",\n      remediation: \"Set DATA_PATH in .env and restart.\"\n    };\n  }\n  const absolute = resolve(dataPath);\n  const probe = join(absolute, `.health-probe-${randomUUID()}`);\n  try {\n    await mkdir(absolute, { recursive: true });\n    await writeFile(probe, \"ok\");\n    await unlink(probe);\n    return { ...base, status: \"ok\", summary: `DATA_PATH (${dataPath}) is writable.` };\n  } catch (err) {\n    return {\n      ...base,\n      status: \"degraded\",\n      summary: `DATA_PATH (${dataPath}) is not writable: ${err instanceof Error ? err.message : String(err)}.`,\n      remediation: \"Check free disk space and that the directory is owned by the user running the app (`df -h`, `ls -la`).\"\n    };\n  }\n}\nconst GET = async ({ locals }) => {\n  requirePermission(locals, \"instance_admin\");\n  const checks = [];\n  const store = providers.data.computeServer;\n  if (typeof store.verifySecrets === \"function\") {\n    try {\n      checks.push(atRestSecretsCheck(await store.verifySecrets()));\n    } catch (err) {\n      checks.push({\n        id: \"at-rest-secrets\",\n        label: \"Compute server secrets\",\n        status: \"error\",\n        summary: `Verification threw: ${err instanceof Error ? err.message : String(err)}`,\n        remediation: \"Check server logs (`pm2 logs selva-compute`) for the underlying error.\"\n      });\n    }\n  } else {\n    checks.push(atRestSecretsCheck(null));\n  }\n  checks.push(...await Promise.all([computeReachabilityCheck(locals), dataPathWritableCheck()]));\n  const rank = {\n    ok: 0,\n    not_applicable: 0,\n    degraded: 2,\n    error: 3\n  };\n  const overall = checks.reduce(\n    (worst, c) => rank[c.status] > rank[worst] ? c.status : worst,\n    \"ok\"\n  );\n  return json({ overall, checkedAt: (/* @__PURE__ */ new Date()).toISOString(), checks });\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AASA,SAAS,kBAAkB,CAAC,MAAM,EAAE;AACpC,EAAE,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,wBAAwB,EAAE;AACzE,EAAE,IAAI,MAAM,KAAK,IAAI,EAAE;AACvB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,gBAAgB;AAC9B,MAAM,OAAO,EAAE;AACf,KAAK;AACL,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,EAAE,EAAE;AACjB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,IAAI;AAClB,MAAM,OAAO,EAAE;AACf,KAAK;AACL,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AAC1H,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc;AACzC,EAAE,OAAO;AACT,IAAI,GAAG,IAAI;AACX,IAAI,MAAM,EAAE,UAAU;AACtB,IAAI,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,4CAA4C,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9F,IAAI,WAAW,EAAE,SAAS,GAAG,2FAA2F,GAAG;AAC3H,GAAG;AACH;AACA,MAAM,uBAAuB,GAAG,GAAG;AACnC,eAAe,wBAAwB,CAAC,MAAM,EAAE;AAChD,EAAE,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,wBAAwB,EAAE;AAC3E,EAAE,IAAI,MAAM;AACZ,EAAE,IAAI;AACN,IAAI,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;AACtE,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,OAAO;AACrB,MAAM,OAAO,EAAE,CAAC,+BAA+B,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;AAClG,KAAK;AACL,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,GAAG,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,GAAG,MAAM;AACjG,EAAE,IAAI,CAAC,MAAM,EAAE;AACf,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,gBAAgB;AAC9B,MAAM,OAAO,EAAE,6DAA6D;AAC5E,MAAM,WAAW,EAAE;AACnB,KAAK;AACL,EAAE;AACF,EAAE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE;AAC1C,EAAE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,uBAAuB,CAAC;AAC7E,EAAE,IAAI;AACN,IAAI,MAAM,OAAO,GAAG,EAAE;AACtB,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC,MAAM;AACjE,IAAI,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE;AAClF,MAAM,MAAM,EAAE,UAAU,CAAC,MAAM;AAC/B,MAAM;AACN,KAAK,CAAC;AACN,IAAI,IAAI,GAAG,CAAC,EAAE,EAAE;AAChB,MAAM,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,EAAE;AACjG,IAAI;AACJ,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,UAAU;AACxB,MAAM,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC;AAC3E,MAAM,WAAW,EAAE,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,GAAG,iEAAiE,GAAG;AAClI,KAAK;AACL,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;AACrE,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,UAAU;AACxB,MAAM,OAAO,EAAE,OAAO,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,uBAAuB,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACjM,MAAM,WAAW,EAAE,CAAC,8CAA8C,EAAE,MAAM,CAAC,SAAS,CAAC,YAAY;AACjG,KAAK;AACL,EAAE,CAAC,SAAS;AACZ,IAAI,YAAY,CAAC,KAAK,CAAC;AACvB,EAAE;AACF;AACA,eAAe,qBAAqB,GAAG;AACvC,EAAE,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,oBAAoB,EAAE;AACxE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,aAAa,YAAY,uBAAuB,CAAC,EAAE;AAC1E,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,gBAAgB;AAC9B,MAAM,OAAO,EAAE;AACf,KAAK;AACL,EAAE;AACF,EAAE,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS;AACxC,EAAE,IAAI,CAAC,QAAQ,EAAE;AACjB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,OAAO;AACrB,MAAM,OAAO,EAAE,sDAAsD;AACrE,MAAM,WAAW,EAAE;AACnB,KAAK;AACL,EAAE;AACF,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;AACpC,EAAE,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;AAC/D,EAAE,IAAI;AACN,IAAI,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC9C,IAAI,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC;AAChC,IAAI,MAAM,MAAM,CAAC,KAAK,CAAC;AACvB,IAAI,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,cAAc,CAAC,EAAE;AACrF,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,UAAU;AACxB,MAAM,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,mBAAmB,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC9G,MAAM,WAAW,EAAE;AACnB,KAAK;AACL,EAAE;AACF;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,MAAM,GAAG,EAAE;AACnB,EAAE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa;AAC5C,EAAE,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,UAAU,EAAE;AACjD,IAAI,IAAI;AACR,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;AAClE,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,MAAM,CAAC,IAAI,CAAC;AAClB,QAAQ,EAAE,EAAE,iBAAiB;AAC7B,QAAQ,KAAK,EAAE,wBAAwB;AACvC,QAAQ,MAAM,EAAE,OAAO;AACvB,QAAQ,OAAO,EAAE,CAAC,oBAAoB,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1F,QAAQ,WAAW,EAAE;AACrB,OAAO,CAAC;AACR,IAAI;AACJ,EAAE,CAAC,MAAM;AACT,IAAI,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;AACzC,EAAE;AACF,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;AAChG,EAAE,MAAM,IAAI,GAAG;AACf,IAAI,EAAE,EAAE,CAAC;AACT,IAAI,cAAc,EAAE,CAAC;AACrB,IAAI,QAAQ,EAAE,CAAC;AACf,IAAI,KAAK,EAAE;AACX,GAAG;AACH,EAAE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM;AAC/B,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,KAAK;AACjE,IAAI;AACJ,GAAG;AACH,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC;AACzF;;;;"}

package/build/server/chunks/entries/endpoints/admin/api/system/throughput/_server.ts.js-DFacQgP7.js

@@ -0,0 +1,80 @@
+import { randomFillSync } from 'node:crypto';
+import { json } from '@sveltejs/kit';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-yRMzxqNi.js';
+import { d as requirePermission } from '../../../../../../chunks/access.server.js-D99g5hZd.js';
+import '../../../../../../chunks/context.js-D8E0GFTw.js';
+import 'zod';
+import '../../../../../../chunks/providers.server.js-D0hpk-aq.js';
+import '../../../../../../chunks/shared-server.js-DaWdgxVh.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@selvajs/compute/core';
+import '../../../../../../chunks/schema.js-j3D3emog.js';
+import '../../../../../../chunks/utils4.js-BRotGwxx.js';
+
+const CHUNK_BYTES = 1024 * 1024;
+const DOWNLOAD_DEFAULT_MB = 20;
+const DOWNLOAD_MAX_MB = 256;
+const UPLOAD_MAX_BYTES = 256 * 1024 * 1024;
+const GET = async ({ locals, url }) => {
+  requirePermission(locals, "instance_admin");
+  const requested = Number(url.searchParams.get("mb"));
+  const mb = Math.min(
+    DOWNLOAD_MAX_MB,
+    Math.max(1, Number.isFinite(requested) ? requested : DOWNLOAD_DEFAULT_MB)
+  );
+  let sentChunks = 0;
+  const stream = new ReadableStream({
+    pull(controller) {
+      if (sentChunks >= mb) {
+        controller.close();
+        return;
+      }
+      const chunk = new Uint8Array(CHUNK_BYTES);
+      randomFillSync(chunk);
+      controller.enqueue(chunk);
+      sentChunks++;
+    }
+  });
+  return new Response(stream, {
+    headers: {
+      "Content-Type": "application/octet-stream",
+      "Content-Length": String(mb * CHUNK_BYTES),
+      "Cache-Control": "no-store"
+    }
+  });
+};
+const POST = async ({ locals, request }) => {
+  requirePermission(locals, "instance_admin");
+  const declared = Number(request.headers.get("content-length"));
+  if (Number.isFinite(declared) && declared > UPLOAD_MAX_BYTES) {
+    apiError(413, ApiErrorCode.VALIDATION_FAILED, "Upload exceeds the 256 MB probe limit");
+  }
+  if (!request.body) {
+    apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing request body");
+  }
+  const start = performance.now();
+  const reader = request.body.getReader();
+  let bytes = 0;
+  while (true) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    bytes += value.byteLength;
+    if (bytes > UPLOAD_MAX_BYTES) {
+      await reader.cancel();
+      apiError(413, ApiErrorCode.VALIDATION_FAILED, "Upload exceeds the 256 MB probe limit");
+    }
+  }
+  const ms = performance.now() - start;
+  return json({
+    bytes,
+    ms: Math.round(ms),
+    mbps: ms > 0 ? Number((bytes / (1024 * 1024) / (ms / 1e3)).toFixed(2)) : null
+  });
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-DFacQgP7.js.map

package/build/server/chunks/entries/endpoints/admin/api/system/throughput/_server.ts.js-DFacQgP7.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-DFacQgP7.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/admin/api/system/throughput/_server.ts.js"],"sourcesContent":["import { randomFillSync } from \"node:crypto\";\nimport { json } from \"@sveltejs/kit\";\nimport { a as apiError, A as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { d as requirePermission } from \"../../../../../../chunks/access.server.js\";\nconst CHUNK_BYTES = 1024 * 1024;\nconst DOWNLOAD_DEFAULT_MB = 20;\nconst DOWNLOAD_MAX_MB = 256;\nconst UPLOAD_MAX_BYTES = 256 * 1024 * 1024;\nconst GET = async ({ locals, url }) => {\n  requirePermission(locals, \"instance_admin\");\n  const requested = Number(url.searchParams.get(\"mb\"));\n  const mb = Math.min(\n    DOWNLOAD_MAX_MB,\n    Math.max(1, Number.isFinite(requested) ? requested : DOWNLOAD_DEFAULT_MB)\n  );\n  let sentChunks = 0;\n  const stream = new ReadableStream({\n    pull(controller) {\n      if (sentChunks >= mb) {\n        controller.close();\n        return;\n      }\n      const chunk = new Uint8Array(CHUNK_BYTES);\n      randomFillSync(chunk);\n      controller.enqueue(chunk);\n      sentChunks++;\n    }\n  });\n  return new Response(stream, {\n    headers: {\n      \"Content-Type\": \"application/octet-stream\",\n      \"Content-Length\": String(mb * CHUNK_BYTES),\n      \"Cache-Control\": \"no-store\"\n    }\n  });\n};\nconst POST = async ({ locals, request }) => {\n  requirePermission(locals, \"instance_admin\");\n  const declared = Number(request.headers.get(\"content-length\"));\n  if (Number.isFinite(declared) && declared > UPLOAD_MAX_BYTES) {\n    apiError(413, ApiErrorCode.VALIDATION_FAILED, \"Upload exceeds the 256 MB probe limit\");\n  }\n  if (!request.body) {\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing request body\");\n  }\n  const start = performance.now();\n  const reader = request.body.getReader();\n  let bytes = 0;\n  while (true) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    bytes += value.byteLength;\n    if (bytes > UPLOAD_MAX_BYTES) {\n      await reader.cancel();\n      apiError(413, ApiErrorCode.VALIDATION_FAILED, \"Upload exceeds the 256 MB probe limit\");\n    }\n  }\n  const ms = performance.now() - start;\n  return json({\n    bytes,\n    ms: Math.round(ms),\n    mbps: ms > 0 ? Number((bytes / (1024 * 1024) / (ms / 1e3)).toFixed(2)) : null\n  });\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAIA,MAAM,WAAW,GAAG,IAAI,GAAG,IAAI;AAC/B,MAAM,mBAAmB,GAAG,EAAE;AAC9B,MAAM,eAAe,GAAG,GAAG;AAC3B,MAAM,gBAAgB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI;AACrC,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACvC,EAAE,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACtD,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG;AACrB,IAAI,eAAe;AACnB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,SAAS,GAAG,mBAAmB;AAC5E,GAAG;AACH,EAAE,IAAI,UAAU,GAAG,CAAC;AACpB,EAAE,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC;AACpC,IAAI,IAAI,CAAC,UAAU,EAAE;AACrB,MAAM,IAAI,UAAU,IAAI,EAAE,EAAE;AAC5B,QAAQ,UAAU,CAAC,KAAK,EAAE;AAC1B,QAAQ;AACR,MAAM;AACN,MAAM,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC;AAC/C,MAAM,cAAc,CAAC,KAAK,CAAC;AAC3B,MAAM,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC;AAC/B,MAAM,UAAU,EAAE;AAClB,IAAI;AACJ,GAAG,CAAC;AACJ,EAAE,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;AAC9B,IAAI,OAAO,EAAE;AACb,MAAM,cAAc,EAAE,0BAA0B;AAChD,MAAM,gBAAgB,EAAE,MAAM,CAAC,EAAE,GAAG,WAAW,CAAC;AAChD,MAAM,eAAe,EAAE;AACvB;AACA,GAAG,CAAC;AACJ;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;AAC5C,EAAE,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAChE,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,gBAAgB,EAAE;AAChE,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,uCAAuC,CAAC;AAC1F,EAAE;AACF,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;AACrB,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AACzE,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;AACjC,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE;AACzC,EAAE,IAAI,KAAK,GAAG,CAAC;AACf,EAAE,OAAO,IAAI,EAAE;AACf,IAAI,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE;AAC/C,IAAI,IAAI,IAAI,EAAE;AACd,IAAI,KAAK,IAAI,KAAK,CAAC,UAAU;AAC7B,IAAI,IAAI,KAAK,GAAG,gBAAgB,EAAE;AAClC,MAAM,MAAM,MAAM,CAAC,MAAM,EAAE;AAC3B,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,uCAAuC,CAAC;AAC5F,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK;AACtC,EAAE,OAAO,IAAI,CAAC;AACd,IAAI,KAAK;AACT,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;AACtB,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG;AAC7E,GAAG,CAAC;AACJ;;;;"}