@selvajs/selva 4.6.21-beta.0 → 4.7.0-beta.2

package/build/server/chunks/entries/endpoints/admin/api/projects/_id_/grants/_grantId_/{_server.ts.js-C3Gcr9vO.js → _server.ts.js-DHYHT1N8.js}

@@ -1,7 +1,7 @@
-import { h as flag, m as getPlatformProjectGrantStore } from '../../../../../../../../chunks/providers.server.js-D0hpk-aq.js';
-import { b as requireInstanceAdmin } from '../../../../../../../../chunks/access.server.js-D99g5hZd.js';
-import { a as apiError, h as handleApiError, A as ApiErrorCode } from '../../../../../../../../chunks/api-errors.js-yRMzxqNi.js';
-import { S as SYSTEM_CONTEXT } from '../../../../../../../../chunks/context.js-D8E0GFTw.js';
+import { i as flag, n as getPlatformProjectGrantStore } from '../../../../../../../../chunks/providers.server.js-CIHOepKv.js';
+import { b as requireInstanceAdmin } from '../../../../../../../../chunks/access.server.js-_nJWuQcN.js';
+import { a as apiError, h as handleApiError, A as ApiErrorCode } from '../../../../../../../../chunks/api-errors.js-DlfcfPJs.js';
+import { S as SYSTEM_CONTEXT } from '../../../../../../../../chunks/context.js-DsQGiS2x.js';
 import '../../../../../../../../chunks/shared-server.js-DaWdgxVh.js';
 import 'node:url';
 import 'node:path';
@@ -13,7 +13,7 @@ import '@sveltejs/kit';
 import 'zod';
 import '@selvajs/compute/core';
 import '../../../../../../../../chunks/schema.js-j3D3emog.js';
-import '../../../../../../../../chunks/utils4.js-BRotGwxx.js';
+import '../../../../../../../../chunks/utils4.js-8SHxuGTr.js';
 
 const DELETE = async ({ params, locals }) => {
   requireInstanceAdmin(locals);
@@ -29,4 +29,4 @@ const DELETE = async ({ params, locals }) => {
 };
 
 export { DELETE };
-//# sourceMappingURL=_server.ts.js-C3Gcr9vO.js.map
+//# sourceMappingURL=_server.ts.js-DHYHT1N8.js.map

package/build/server/chunks/entries/endpoints/admin/api/projects/_id_/grants/_grantId_/{_server.ts.js-C3Gcr9vO.js.map → _server.ts.js-DHYHT1N8.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_server.ts.js-C3Gcr9vO.js","sources":["../../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/admin/api/projects/_id_/grants/_grantId_/_server.ts.js"],"sourcesContent":["import { f as flag, m as getPlatformProjectGrantStore } from \"../../../../../../../../chunks/providers.server.js\";\nimport { b as requireInstanceAdmin } from \"../../../../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, A as ApiErrorCode } from \"../../../../../../../../chunks/api-errors.js\";\nimport { S as SYSTEM_CONTEXT } from \"../../../../../../../../chunks/context.js\";\nconst DELETE = async ({ params, locals }) => {\n  requireInstanceAdmin(locals);\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n  const { grantId } = params;\n  if (!grantId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing grant ID\");\n  try {\n    await getPlatformProjectGrantStore().delete(SYSTEM_CONTEXT, grantId);\n    return new Response(null, { status: 204 });\n  } catch (err) {\n    handleApiError(err, \"Failed to revoke grant\");\n  }\n};\nexport {\n  DELETE\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAIK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC3F,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM;AAC5B,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;AACjF,EAAE,IAAI;AACN,IAAI,MAAM,4BAA4B,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC;AACxE,IAAI,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC9C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AACjD,EAAE;AACF;;;;"}
+{"version":3,"file":"_server.ts.js-DHYHT1N8.js","sources":["../../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/admin/api/projects/_id_/grants/_grantId_/_server.ts.js"],"sourcesContent":["import { f as flag, n as getPlatformProjectGrantStore } from \"../../../../../../../../chunks/providers.server.js\";\nimport { b as requireInstanceAdmin } from \"../../../../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, A as ApiErrorCode } from \"../../../../../../../../chunks/api-errors.js\";\nimport { S as SYSTEM_CONTEXT } from \"../../../../../../../../chunks/context.js\";\nconst DELETE = async ({ params, locals }) => {\n  requireInstanceAdmin(locals);\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n  const { grantId } = params;\n  if (!grantId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing grant ID\");\n  try {\n    await getPlatformProjectGrantStore().delete(SYSTEM_CONTEXT, grantId);\n    return new Response(null, { status: 204 });\n  } catch (err) {\n    handleApiError(err, \"Failed to revoke grant\");\n  }\n};\nexport {\n  DELETE\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAIK,MAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC7C,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC3F,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM;AAC5B,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;AACjF,EAAE,IAAI;AACN,IAAI,MAAM,4BAA4B,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC;AACxE,IAAI,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC9C,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AACjD,EAAE;AACF;;;;"}

package/build/server/chunks/entries/endpoints/admin/api/projects/_id_/grants/{_server.ts.js-8rwkvJsL.js → _server.ts.js-Cgt7iGfE.js}

@@ -1,10 +1,10 @@
 import { json } from '@sveltejs/kit';
 import { z } from 'zod';
 import { randomUUID } from 'node:crypto';
-import { m as getPlatformProjectGrantStore, d as getOrganizationProvider, q as getUserProfileStore, h as flag, e as getProjectProvider } from '../../../../../../../chunks/providers.server.js-D0hpk-aq.js';
-import { b as requireInstanceAdmin } from '../../../../../../../chunks/access.server.js-D99g5hZd.js';
-import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from '../../../../../../../chunks/api-errors.js-yRMzxqNi.js';
-import { S as SYSTEM_CONTEXT } from '../../../../../../../chunks/context.js-D8E0GFTw.js';
+import { n as getPlatformProjectGrantStore, d as getOrganizationProvider, r as getUserProfileStore, i as flag, e as getProjectProvider } from '../../../../../../../chunks/providers.server.js-CIHOepKv.js';
+import { b as requireInstanceAdmin } from '../../../../../../../chunks/access.server.js-_nJWuQcN.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from '../../../../../../../chunks/api-errors.js-DlfcfPJs.js';
+import { S as SYSTEM_CONTEXT } from '../../../../../../../chunks/context.js-DsQGiS2x.js';
 import '../../../../../../../chunks/shared-server.js-DaWdgxVh.js';
 import 'node:url';
 import 'node:path';
@@ -13,7 +13,7 @@ import 'node:fs/promises';
 import '@supabase/supabase-js';
 import '@selvajs/compute/core';
 import '../../../../../../../chunks/schema.js-j3D3emog.js';
-import '../../../../../../../chunks/utils4.js-BRotGwxx.js';
+import '../../../../../../../chunks/utils4.js-8SHxuGTr.js';
 
 const CreateGrantBody = z.object({
   granteeType: z.enum(["org", "user"]),
@@ -79,4 +79,4 @@ const POST = async ({ params, request, locals }) => {
 };
 
 export { GET, POST };
-//# sourceMappingURL=_server.ts.js-8rwkvJsL.js.map
+//# sourceMappingURL=_server.ts.js-Cgt7iGfE.js.map

package/build/server/chunks/entries/endpoints/admin/api/projects/_id_/grants/{_server.ts.js-8rwkvJsL.js.map → _server.ts.js-Cgt7iGfE.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_server.ts.js-8rwkvJsL.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/admin/api/projects/_id_/grants/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\nimport { m as getPlatformProjectGrantStore, d as getOrganizationProvider, e as getUserProfileStore, f as flag, l as getProjectProvider } from \"../../../../../../../chunks/providers.server.js\";\nimport { b as requireInstanceAdmin } from \"../../../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from \"../../../../../../../chunks/api-errors.js\";\nimport { S as SYSTEM_CONTEXT } from \"../../../../../../../chunks/context.js\";\nconst CreateGrantBody = z.object({\n  granteeType: z.enum([\"org\", \"user\"]),\n  granteeId: z.string().min(1),\n  canSolve: z.boolean()\n});\nasync function assertPlatformProject(id) {\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n  const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, id);\n  if (!project || project.visibility !== \"platform\") {\n    apiError(404, ApiErrorCode.NOT_FOUND, \"Platform project not found\");\n  }\n  return project;\n}\nconst GET = async ({ params, locals }) => {\n  requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID\");\n  try {\n    await assertPlatformProject(id);\n    const grants = await getPlatformProjectGrantStore().listByProject(SYSTEM_CONTEXT, id);\n    return json({ grants });\n  } catch (err) {\n    handleApiError(err, \"Failed to list grants\");\n  }\n};\nconst POST = async ({ params, request, locals }) => {\n  const user = requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID\");\n  const body = await request.json().catch(() => null);\n  const parsed = CreateGrantBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  try {\n    await assertPlatformProject(id);\n    if (parsed.data.granteeType === \"org\") {\n      const org = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, parsed.data.granteeId);\n      if (!org)\n        apiError(\n          400,\n          ApiErrorCode.VALIDATION_FAILED,\n          `Organization '${parsed.data.granteeId}' not found`\n        );\n    } else {\n      const profile = await getUserProfileStore().getProfile(SYSTEM_CONTEXT, parsed.data.granteeId);\n      if (!profile)\n        apiError(400, ApiErrorCode.VALIDATION_FAILED, `User '${parsed.data.granteeId}' not found`);\n    }\n    const grant = {\n      id: randomUUID(),\n      projectId: id,\n      granteeType: parsed.data.granteeType,\n      granteeId: parsed.data.granteeId,\n      canSolve: parsed.data.canSolve,\n      createdBy: user.id,\n      createdAt: (/* @__PURE__ */ new Date()).toISOString()\n    };\n    await getPlatformProjectGrantStore().create(SYSTEM_CONTEXT, grant);\n    return json(grant, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to create grant\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAOA,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;AACjC,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AACtC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9B,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO;AACrB,CAAC,CAAC;AACF,eAAe,qBAAqB,CAAC,EAAE,EAAE;AACzC,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC3F,EAAE,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC;AAC3E,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE;AACrD,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,4BAA4B,CAAC;AACvE,EAAE;AACF,EAAE,OAAO,OAAO;AAChB;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC1C,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;AAC9E,EAAE,IAAI;AACN,IAAI,MAAM,qBAAqB,CAAC,EAAE,CAAC;AACnC,IAAI,MAAM,MAAM,GAAG,MAAM,4BAA4B,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC;AACzF,IAAI,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;AAC3B,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,uBAAuB,CAAC;AAChD,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpD,EAAE,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC3C,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;AAC9E,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAChD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI;AACN,IAAI,MAAM,qBAAqB,CAAC,EAAE,CAAC;AACnC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,KAAK,EAAE;AAC3C,MAAM,MAAM,GAAG,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;AAC/F,MAAM,IAAI,CAAC,GAAG;AACd,QAAQ,QAAQ;AAChB,UAAU,GAAG;AACb,UAAU,YAAY,CAAC,iBAAiB;AACxC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW;AAC5D,SAAS;AACT,IAAI,CAAC,MAAM;AACX,MAAM,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;AACnG,MAAM,IAAI,CAAC,OAAO;AAClB,QAAQ,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AAClG,IAAI;AACJ,IAAI,MAAM,KAAK,GAAG;AAClB,MAAM,EAAE,EAAE,UAAU,EAAE;AACtB,MAAM,SAAS,EAAE,EAAE;AACnB,MAAM,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AAC1C,MAAM,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;AACtC,MAAM,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;AACpC,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW;AACzD,KAAK;AACL,IAAI,MAAM,4BAA4B,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC;AACtE,IAAI,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACvC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AACjD,EAAE;AACF;;;;"}
+{"version":3,"file":"_server.ts.js-Cgt7iGfE.js","sources":["../../../../../../../../../../.svelte-kit/output/server/entries/endpoints/admin/api/projects/_id_/grants/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\nimport { n as getPlatformProjectGrantStore, e as getOrganizationProvider, h as getUserProfileStore, f as flag, m as getProjectProvider } from \"../../../../../../../chunks/providers.server.js\";\nimport { b as requireInstanceAdmin } from \"../../../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from \"../../../../../../../chunks/api-errors.js\";\nimport { S as SYSTEM_CONTEXT } from \"../../../../../../../chunks/context.js\";\nconst CreateGrantBody = z.object({\n  granteeType: z.enum([\"org\", \"user\"]),\n  granteeId: z.string().min(1),\n  canSolve: z.boolean()\n});\nasync function assertPlatformProject(id) {\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n  const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, id);\n  if (!project || project.visibility !== \"platform\") {\n    apiError(404, ApiErrorCode.NOT_FOUND, \"Platform project not found\");\n  }\n  return project;\n}\nconst GET = async ({ params, locals }) => {\n  requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID\");\n  try {\n    await assertPlatformProject(id);\n    const grants = await getPlatformProjectGrantStore().listByProject(SYSTEM_CONTEXT, id);\n    return json({ grants });\n  } catch (err) {\n    handleApiError(err, \"Failed to list grants\");\n  }\n};\nconst POST = async ({ params, request, locals }) => {\n  const user = requireInstanceAdmin(locals);\n  const { id } = params;\n  if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing project ID\");\n  const body = await request.json().catch(() => null);\n  const parsed = CreateGrantBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  try {\n    await assertPlatformProject(id);\n    if (parsed.data.granteeType === \"org\") {\n      const org = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, parsed.data.granteeId);\n      if (!org)\n        apiError(\n          400,\n          ApiErrorCode.VALIDATION_FAILED,\n          `Organization '${parsed.data.granteeId}' not found`\n        );\n    } else {\n      const profile = await getUserProfileStore().getProfile(SYSTEM_CONTEXT, parsed.data.granteeId);\n      if (!profile)\n        apiError(400, ApiErrorCode.VALIDATION_FAILED, `User '${parsed.data.granteeId}' not found`);\n    }\n    const grant = {\n      id: randomUUID(),\n      projectId: id,\n      granteeType: parsed.data.granteeType,\n      granteeId: parsed.data.granteeId,\n      canSolve: parsed.data.canSolve,\n      createdBy: user.id,\n      createdAt: (/* @__PURE__ */ new Date()).toISOString()\n    };\n    await getPlatformProjectGrantStore().create(SYSTEM_CONTEXT, grant);\n    return json(grant, { status: 201 });\n  } catch (err) {\n    handleApiError(err, \"Failed to create grant\");\n  }\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAOA,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;AACjC,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AACtC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9B,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO;AACrB,CAAC,CAAC;AACF,eAAe,qBAAqB,CAAC,EAAE,EAAE;AACzC,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC3F,EAAE,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC;AAC3E,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE;AACrD,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,4BAA4B,CAAC;AACvE,EAAE;AACF,EAAE,OAAO,OAAO;AAChB;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC1C,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;AAC9E,EAAE,IAAI;AACN,IAAI,MAAM,qBAAqB,CAAC,EAAE,CAAC;AACnC,IAAI,MAAM,MAAM,GAAG,MAAM,4BAA4B,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC;AACzF,IAAI,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;AAC3B,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,uBAAuB,CAAC;AAChD,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACpD,EAAE,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC3C,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACvB,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;AAC9E,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAChD,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,IAAI;AACN,IAAI,MAAM,qBAAqB,CAAC,EAAE,CAAC;AACnC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,KAAK,EAAE;AAC3C,MAAM,MAAM,GAAG,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;AAC/F,MAAM,IAAI,CAAC,GAAG;AACd,QAAQ,QAAQ;AAChB,UAAU,GAAG;AACb,UAAU,YAAY,CAAC,iBAAiB;AACxC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW;AAC5D,SAAS;AACT,IAAI,CAAC,MAAM;AACX,MAAM,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;AACnG,MAAM,IAAI,CAAC,OAAO;AAClB,QAAQ,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AAClG,IAAI;AACJ,IAAI,MAAM,KAAK,GAAG;AAClB,MAAM,EAAE,EAAE,UAAU,EAAE;AACtB,MAAM,SAAS,EAAE,EAAE;AACnB,MAAM,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AAC1C,MAAM,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;AACtC,MAAM,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;AACpC,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW;AACzD,KAAK;AACL,IAAI,MAAM,4BAA4B,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC;AACtE,IAAI,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACvC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,wBAAwB,CAAC;AACjD,EAAE;AACF;;;;"}

package/build/server/chunks/entries/endpoints/admin/api/projects/{_server.ts.js-BTgoWufU.js → _server.ts.js-BFi1Di59.js}

@@ -1,11 +1,11 @@
 import { json } from '@sveltejs/kit';
 import { z } from 'zod';
 import { randomUUID } from 'node:crypto';
-import { h as flag, d as getOrganizationProvider, e as getProjectProvider, P as ProviderError } from '../../../../../chunks/providers.server.js-D0hpk-aq.js';
-import { b as requireInstanceAdmin } from '../../../../../chunks/access.server.js-D99g5hZd.js';
-import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-yRMzxqNi.js';
+import { i as flag, d as getOrganizationProvider, e as getProjectProvider, P as ProviderError } from '../../../../../chunks/providers.server.js-CIHOepKv.js';
+import { b as requireInstanceAdmin } from '../../../../../chunks/access.server.js-_nJWuQcN.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-DlfcfPJs.js';
 import { s as slugify } from '../../../../../chunks/slug.js-BGuFQjqe.js';
-import { S as SYSTEM_CONTEXT } from '../../../../../chunks/context.js-D8E0GFTw.js';
+import { S as SYSTEM_CONTEXT } from '../../../../../chunks/context.js-DsQGiS2x.js';
 import '../../../../../chunks/shared-server.js-DaWdgxVh.js';
 import 'node:url';
 import 'node:path';
@@ -14,7 +14,7 @@ import 'node:fs/promises';
 import '@supabase/supabase-js';
 import '@selvajs/compute/core';
 import '../../../../../chunks/schema.js-j3D3emog.js';
-import '../../../../../chunks/utils4.js-BRotGwxx.js';
+import '../../../../../chunks/utils4.js-8SHxuGTr.js';
 
 const MAX_SLUG_ATTEMPTS = 25;
 function isSlugConflict(err) {
@@ -116,4 +116,4 @@ const POST = async ({ request, locals }) => {
 };
 
 export { GET, POST };
-//# sourceMappingURL=_server.ts.js-BTgoWufU.js.map
+//# sourceMappingURL=_server.ts.js-BFi1Di59.js.map

package/build/server/chunks/entries/endpoints/admin/api/projects/{_server.ts.js-BTgoWufU.js.map → _server.ts.js-BFi1Di59.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_server.ts.js-BTgoWufU.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/admin/api/projects/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\nimport { f as flag, d as getOrganizationProvider, l as getProjectProvider, P as ProviderError } from \"../../../../../chunks/providers.server.js\";\nimport { b as requireInstanceAdmin } from \"../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { s as slugify } from \"../../../../../chunks/slug.js\";\nimport { S as SYSTEM_CONTEXT } from \"../../../../../chunks/context.js\";\nconst MAX_SLUG_ATTEMPTS = 25;\nfunction isSlugConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);\n}\nfunction isNameConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);\n}\nconst CreatePlatformProjectBody = z.object({\n  name: z.string().min(1, \"Project name is required\").max(128).trim(),\n  description: z.string().max(2e3).optional(),\n  /**\n   * Org that physically hosts the project. Storage routing and compute\n   * resolution use this — but org membership in this org does NOT grant\n   * access. Visibility = 'platform' overrides those defaults.\n   *\n   * If omitted, the platform admin's first available org is used.\n   */\n  orgId: z.string().uuid().optional()\n});\nconst GET = async ({ locals }) => {\n  requireInstanceAdmin(locals);\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n  try {\n    const orgs = await getOrganizationProvider().listOrgs(SYSTEM_CONTEXT, { limit: 1e3 });\n    const all = [];\n    for (const org of orgs.items) {\n      const page = await getProjectProvider().listProjects(SYSTEM_CONTEXT, org.id, {\n        limit: 1e3\n      });\n      for (const p of page.items) {\n        if (p.visibility === \"platform\") all.push(p);\n      }\n    }\n    return json({ projects: all });\n  } catch (err) {\n    handleApiError(err, \"Failed to list platform projects\");\n  }\n};\nconst POST = async ({ request, locals }) => {\n  const user = requireInstanceAdmin(locals);\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n  const ctx = locals.ctx;\n  const body = await request.json().catch(() => null);\n  const parsed = CreatePlatformProjectBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const hostOrgId = parsed.data.orgId ?? ctx.actingOrgId;\n  if (!hostOrgId) {\n    apiError(\n      400,\n      ApiErrorCode.VALIDATION_FAILED,\n      \"A host orgId is required (no active organization in context).\"\n    );\n  }\n  const hostOrg = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, hostOrgId);\n  if (!hostOrg)\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, `Host organization '${hostOrgId}' not found.`);\n  const projectStore = getProjectProvider();\n  const baseSlug = slugify(parsed.data.name) || \"platform-project\";\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const projectId = randomUUID();\n  for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {\n    const slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;\n    const project = {\n      id: projectId,\n      orgId: hostOrgId,\n      name: parsed.data.name,\n      slug,\n      description: parsed.data.description,\n      visibility: \"platform\",\n      ownerId: user.id,\n      createdBy: user.id,\n      updatedBy: user.id,\n      autoJoinOnUpload: false,\n      createdAt: now,\n      updatedAt: now,\n      deletedAt: null\n    };\n    try {\n      await projectStore.createProject(SYSTEM_CONTEXT, project);\n      return json(project, { status: 201 });\n    } catch (err) {\n      if (isNameConflict(err)) {\n        apiError(\n          409,\n          ApiErrorCode.CONFLICT,\n          \"A project with that name already exists in the host organization.\"\n        );\n      }\n      if (isSlugConflict(err)) continue;\n      handleApiError(err, \"Failed to create platform project\");\n    }\n  }\n  apiError(\n    409,\n    ApiErrorCode.CONFLICT,\n    \"Could not pick a unique project slug after several attempts.\"\n  );\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAQA,MAAM,iBAAiB,GAAG,EAAE;AAC5B,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;AAC3C,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACrE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;AAC7C;AACA;AACA;AACA;AACA;AACA;AACA;AACA,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ;AACnC,CAAC,CAAC;AACG,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC3F,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,uBAAuB,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACzF,IAAI,MAAM,GAAG,GAAG,EAAE;AAClB,IAAI,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE;AAClC,MAAM,MAAM,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,EAAE;AACnF,QAAQ,KAAK,EAAE;AACf,OAAO,CAAC;AACR,MAAM,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE;AAClC,QAAQ,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACpD,MAAM;AACN,IAAI;AACJ,IAAI,OAAO,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,kCAAkC,CAAC;AAC3D,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC3C,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC3F,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1D,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,WAAW;AACxD,EAAE,IAAI,CAAC,SAAS,EAAE;AAClB,IAAI,QAAQ;AACZ,MAAM,GAAG;AACT,MAAM,YAAY,CAAC,iBAAiB;AACpC,MAAM;AACN,KAAK;AACL,EAAE;AACF,EAAE,MAAM,OAAO,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC;AACnF,EAAE,IAAI,CAAC,OAAO;AACd,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;AAChG,EAAE,MAAM,YAAY,GAAG,kBAAkB,EAAE;AAC3C,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,kBAAkB;AAClE,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,SAAS,GAAG,UAAU,EAAE;AAChC,EAAE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,iBAAiB,EAAE,OAAO,EAAE,EAAE;AAChE,IAAI,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;AACxE,IAAI,MAAM,OAAO,GAAG;AACpB,MAAM,EAAE,EAAE,SAAS;AACnB,MAAM,KAAK,EAAE,SAAS;AACtB,MAAM,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC5B,MAAM,IAAI;AACV,MAAM,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AAC1C,MAAM,UAAU,EAAE,UAAU;AAC5B,MAAM,OAAO,EAAE,IAAI,CAAC,EAAE;AACtB,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,gBAAgB,EAAE,KAAK;AAC7B,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE;AACjB,KAAK;AACL,IAAI,IAAI;AACR,MAAM,MAAM,YAAY,CAAC,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC;AAC/D,MAAM,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,QAAQ,QAAQ;AAChB,UAAU,GAAG;AACb,UAAU,YAAY,CAAC,QAAQ;AAC/B,UAAU;AACV,SAAS;AACT,MAAM;AACN,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,MAAM,cAAc,CAAC,GAAG,EAAE,mCAAmC,CAAC;AAC9D,IAAI;AACJ,EAAE;AACF,EAAE,QAAQ;AACV,IAAI,GAAG;AACP,IAAI,YAAY,CAAC,QAAQ;AACzB,IAAI;AACJ,GAAG;AACH;;;;"}
+{"version":3,"file":"_server.ts.js-BFi1Di59.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/admin/api/projects/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\nimport { f as flag, e as getOrganizationProvider, m as getProjectProvider, P as ProviderError } from \"../../../../../chunks/providers.server.js\";\nimport { b as requireInstanceAdmin } from \"../../../../../chunks/access.server.js\";\nimport { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { s as slugify } from \"../../../../../chunks/slug.js\";\nimport { S as SYSTEM_CONTEXT } from \"../../../../../chunks/context.js\";\nconst MAX_SLUG_ATTEMPTS = 25;\nfunction isSlugConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);\n}\nfunction isNameConflict(err) {\n  return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);\n}\nconst CreatePlatformProjectBody = z.object({\n  name: z.string().min(1, \"Project name is required\").max(128).trim(),\n  description: z.string().max(2e3).optional(),\n  /**\n   * Org that physically hosts the project. Storage routing and compute\n   * resolution use this — but org membership in this org does NOT grant\n   * access. Visibility = 'platform' overrides those defaults.\n   *\n   * If omitted, the platform admin's first available org is used.\n   */\n  orgId: z.string().uuid().optional()\n});\nconst GET = async ({ locals }) => {\n  requireInstanceAdmin(locals);\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n  try {\n    const orgs = await getOrganizationProvider().listOrgs(SYSTEM_CONTEXT, { limit: 1e3 });\n    const all = [];\n    for (const org of orgs.items) {\n      const page = await getProjectProvider().listProjects(SYSTEM_CONTEXT, org.id, {\n        limit: 1e3\n      });\n      for (const p of page.items) {\n        if (p.visibility === \"platform\") all.push(p);\n      }\n    }\n    return json({ projects: all });\n  } catch (err) {\n    handleApiError(err, \"Failed to list platform projects\");\n  }\n};\nconst POST = async ({ request, locals }) => {\n  const user = requireInstanceAdmin(locals);\n  if (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n  const ctx = locals.ctx;\n  const body = await request.json().catch(() => null);\n  const parsed = CreatePlatformProjectBody.safeParse(body);\n  if (!parsed.success) throwZodError(parsed.error);\n  const hostOrgId = parsed.data.orgId ?? ctx.actingOrgId;\n  if (!hostOrgId) {\n    apiError(\n      400,\n      ApiErrorCode.VALIDATION_FAILED,\n      \"A host orgId is required (no active organization in context).\"\n    );\n  }\n  const hostOrg = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, hostOrgId);\n  if (!hostOrg)\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, `Host organization '${hostOrgId}' not found.`);\n  const projectStore = getProjectProvider();\n  const baseSlug = slugify(parsed.data.name) || \"platform-project\";\n  const now = (/* @__PURE__ */ new Date()).toISOString();\n  const projectId = randomUUID();\n  for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {\n    const slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;\n    const project = {\n      id: projectId,\n      orgId: hostOrgId,\n      name: parsed.data.name,\n      slug,\n      description: parsed.data.description,\n      visibility: \"platform\",\n      ownerId: user.id,\n      createdBy: user.id,\n      updatedBy: user.id,\n      autoJoinOnUpload: false,\n      createdAt: now,\n      updatedAt: now,\n      deletedAt: null\n    };\n    try {\n      await projectStore.createProject(SYSTEM_CONTEXT, project);\n      return json(project, { status: 201 });\n    } catch (err) {\n      if (isNameConflict(err)) {\n        apiError(\n          409,\n          ApiErrorCode.CONFLICT,\n          \"A project with that name already exists in the host organization.\"\n        );\n      }\n      if (isSlugConflict(err)) continue;\n      handleApiError(err, \"Failed to create platform project\");\n    }\n  }\n  apiError(\n    409,\n    ApiErrorCode.CONFLICT,\n    \"Could not pick a unique project slug after several attempts.\"\n  );\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAQA,MAAM,iBAAiB,GAAG,EAAE;AAC5B,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,EAAE,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC/G;AACA,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;AAC3C,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACrE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;AAC7C;AACA;AACA;AACA;AACA;AACA;AACA;AACA,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ;AACnC,CAAC,CAAC;AACG,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,oBAAoB,CAAC,MAAM,CAAC;AAC9B,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC3F,EAAE,IAAI;AACN,IAAI,MAAM,IAAI,GAAG,MAAM,uBAAuB,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACzF,IAAI,MAAM,GAAG,GAAG,EAAE;AAClB,IAAI,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE;AAClC,MAAM,MAAM,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,EAAE;AACnF,QAAQ,KAAK,EAAE;AACf,OAAO,CAAC;AACR,MAAM,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE;AAClC,QAAQ,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACpD,MAAM;AACN,IAAI;AACJ,IAAI,OAAO,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AAClC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,cAAc,CAAC,GAAG,EAAE,kCAAkC,CAAC;AAC3D,EAAE;AACF;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC5C,EAAE,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC3C,EAAE,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC3F,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACxB,EAAE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACrD,EAAE,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1D,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAClD,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,WAAW;AACxD,EAAE,IAAI,CAAC,SAAS,EAAE;AAClB,IAAI,QAAQ;AACZ,MAAM,GAAG;AACT,MAAM,YAAY,CAAC,iBAAiB;AACpC,MAAM;AACN,KAAK;AACL,EAAE;AACF,EAAE,MAAM,OAAO,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC;AACnF,EAAE,IAAI,CAAC,OAAO;AACd,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;AAChG,EAAE,MAAM,YAAY,GAAG,kBAAkB,EAAE;AAC3C,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,kBAAkB;AAClE,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,SAAS,GAAG,UAAU,EAAE;AAChC,EAAE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,iBAAiB,EAAE,OAAO,EAAE,EAAE;AAChE,IAAI,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;AACxE,IAAI,MAAM,OAAO,GAAG;AACpB,MAAM,EAAE,EAAE,SAAS;AACnB,MAAM,KAAK,EAAE,SAAS;AACtB,MAAM,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AAC5B,MAAM,IAAI;AACV,MAAM,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AAC1C,MAAM,UAAU,EAAE,UAAU;AAC5B,MAAM,OAAO,EAAE,IAAI,CAAC,EAAE;AACtB,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,SAAS,EAAE,IAAI,CAAC,EAAE;AACxB,MAAM,gBAAgB,EAAE,KAAK;AAC7B,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE,GAAG;AACpB,MAAM,SAAS,EAAE;AACjB,KAAK;AACL,IAAI,IAAI;AACR,MAAM,MAAM,YAAY,CAAC,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC;AAC/D,MAAM,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC3C,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,QAAQ,QAAQ;AAChB,UAAU,GAAG;AACb,UAAU,YAAY,CAAC,QAAQ;AAC/B,UAAU;AACV,SAAS;AACT,MAAM;AACN,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC/B,MAAM,cAAc,CAAC,GAAG,EAAE,mCAAmC,CAAC;AAC9D,IAAI;AACJ,EAAE;AACF,EAAE,QAAQ;AACV,IAAI,GAAG;AACP,IAAI,YAAY,CAAC,QAAQ;AACzB,IAAI;AACJ,GAAG;AACH;;;;"}

package/build/server/chunks/entries/endpoints/admin/api/system/health/{_server.ts.js-CQdxoaBS.js → _server.ts.js-Br7kd03s.js}

@@ -3,15 +3,15 @@ import { randomUUID } from 'node:crypto';
 import { mkdir, writeFile, unlink } from 'node:fs/promises';
 import { resolve, join } from 'node:path';
 import { b as private_env } from '../../../../../../chunks/shared-server.js-DaWdgxVh.js';
-import '../../../../../../chunks/context.js-D8E0GFTw.js';
-import { f as findServerById } from '../../../../../../chunks/utils4.js-BRotGwxx.js';
-import { p as providers, k as getComputeServerConfigStore, L as LocalComputeServerStore } from '../../../../../../chunks/providers.server.js-D0hpk-aq.js';
-import { d as requirePermission } from '../../../../../../chunks/access.server.js-D99g5hZd.js';
+import '../../../../../../chunks/context.js-DsQGiS2x.js';
+import { f as findServerById } from '../../../../../../chunks/utils4.js-8SHxuGTr.js';
+import { p as providers, l as getComputeServerConfigStore, L as LocalComputeServerStore } from '../../../../../../chunks/providers.server.js-CIHOepKv.js';
+import { d as requirePermission } from '../../../../../../chunks/access.server.js-_nJWuQcN.js';
 import 'zod';
 import 'node:url';
 import 'node:fs';
 import '@supabase/supabase-js';
-import '../../../../../../chunks/api-errors.js-yRMzxqNi.js';
+import '../../../../../../chunks/api-errors.js-DlfcfPJs.js';
 import '@selvajs/compute/core';
 import '../../../../../../chunks/schema.js-j3D3emog.js';
 
@@ -40,6 +40,29 @@ function atRestSecretsCheck(report) {
     remediation: plaintext ? "A key is stored in plaintext on disk — re-enter it via /admin/compute so it is encrypted." : "The stored ciphertext does not match the current SELVA_AT_REST_KEY (rotated key or restored backup). Re-enter the affected keys via /admin/compute, or restore the original SELVA_AT_REST_KEY, then run this check again."
   };
 }
+function schemaVersionCheck(report) {
+  const base = { id: "schema-version", label: "Database schema" };
+  if (report === null) {
+    return {
+      ...base,
+      status: "not_applicable",
+      summary: "The active data provider migrates with the app — there is no separate schema to verify."
+    };
+  }
+  if (report.ok) {
+    return {
+      ...base,
+      status: "ok",
+      summary: `Database migration head ${report.actual} satisfies the app's expected ${report.expected}.`
+    };
+  }
+  return {
+    ...base,
+    status: "degraded",
+    summary: report.message ?? `Database migration head ${report.actual ?? "unavailable"} is behind the app's expected ${report.expected}.`,
+    remediation: "Sync the provider migrations into your Supabase project and run `npx supabase db push`, then restart the app. `selva doctor` runs the same check from the CLI."
+  };
+}
 const COMPUTE_PING_TIMEOUT_MS = 8e3;
 async function computeReachabilityCheck(locals) {
   const base = { id: "compute-reachable", label: "Default compute server" };
@@ -145,6 +168,12 @@ const GET = async ({ locals }) => {
   } else {
     checks.push(atRestSecretsCheck(null));
   }
+  const data = providers.data;
+  if (typeof data.verifySchemaVersion === "function") {
+    checks.push(schemaVersionCheck(await data.verifySchemaVersion()));
+  } else {
+    checks.push(schemaVersionCheck(null));
+  }
   checks.push(...await Promise.all([computeReachabilityCheck(locals), dataPathWritableCheck()]));
   const rank = {
     ok: 0,
@@ -160,4 +189,4 @@ const GET = async ({ locals }) => {
 };
 
 export { GET };
-//# sourceMappingURL=_server.ts.js-CQdxoaBS.js.map
+//# sourceMappingURL=_server.ts.js-Br7kd03s.js.map

package/build/server/chunks/entries/endpoints/admin/api/system/health/_server.ts.js-Br7kd03s.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-Br7kd03s.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/admin/api/system/health/_server.ts.js"],"sourcesContent":["import { json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\nimport { mkdir, writeFile, unlink } from \"node:fs/promises\";\nimport { resolve, join } from \"node:path\";\nimport { b as private_env } from \"../../../../../../chunks/shared-server.js\";\nimport \"../../../../../../chunks/context.js\";\nimport { f as findServerById } from \"../../../../../../chunks/utils4.js\";\nimport { p as providers, k as getComputeServerConfigStore, L as LocalComputeServerStore } from \"../../../../../../chunks/providers.server.js\";\nimport { d as requirePermission } from \"../../../../../../chunks/access.server.js\";\nfunction atRestSecretsCheck(report) {\n  const base = { id: \"at-rest-secrets\", label: \"Compute server secrets\" };\n  if (report === null) {\n    return {\n      ...base,\n      status: \"not_applicable\",\n      summary: \"The active data provider does not encrypt secrets at this layer — nothing to verify.\"\n    };\n  }\n  if (report.ok) {\n    return {\n      ...base,\n      status: \"ok\",\n      summary: \"All stored compute server API keys decrypt under the current SELVA_AT_REST_KEY.\"\n    };\n  }\n  const failed = report.failures.map((f) => `\"${f.serverLabel}\" (${f.reason}${f.cause ? `: ${f.cause}` : \"\"})`).join(\", \");\n  const plaintext = report.plaintextFound;\n  return {\n    ...base,\n    status: \"degraded\",\n    summary: `${report.failures.length} compute server key(s) could not be loaded: ${failed}.`,\n    remediation: plaintext ? \"A key is stored in plaintext on disk — re-enter it via /admin/compute so it is encrypted.\" : \"The stored ciphertext does not match the current SELVA_AT_REST_KEY (rotated key or restored backup). Re-enter the affected keys via /admin/compute, or restore the original SELVA_AT_REST_KEY, then run this check again.\"\n  };\n}\nfunction schemaVersionCheck(report) {\n  const base = { id: \"schema-version\", label: \"Database schema\" };\n  if (report === null) {\n    return {\n      ...base,\n      status: \"not_applicable\",\n      summary: \"The active data provider migrates with the app — there is no separate schema to verify.\"\n    };\n  }\n  if (report.ok) {\n    return {\n      ...base,\n      status: \"ok\",\n      summary: `Database migration head ${report.actual} satisfies the app's expected ${report.expected}.`\n    };\n  }\n  return {\n    ...base,\n    status: \"degraded\",\n    summary: report.message ?? `Database migration head ${report.actual ?? \"unavailable\"} is behind the app's expected ${report.expected}.`,\n    remediation: \"Sync the provider migrations into your Supabase project and run `npx supabase db push`, then restart the app. `selva doctor` runs the same check from the CLI.\"\n  };\n}\nconst COMPUTE_PING_TIMEOUT_MS = 8e3;\nasync function computeReachabilityCheck(locals) {\n  const base = { id: \"compute-reachable\", label: \"Default compute server\" };\n  let config;\n  try {\n    config = await getComputeServerConfigStore().getConfig(locals.ctx);\n  } catch (err) {\n    return {\n      ...base,\n      status: \"error\",\n      summary: `Could not read compute config: ${err instanceof Error ? err.message : String(err)}`\n    };\n  }\n  const server = config.defaultServerId ? findServerById(config, config.defaultServerId) : void 0;\n  if (!server) {\n    return {\n      ...base,\n      status: \"not_applicable\",\n      summary: \"No default compute server is configured — nothing to reach.\",\n      remediation: \"Add a server and set it as default in /admin/compute.\"\n    };\n  }\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), COMPUTE_PING_TIMEOUT_MS);\n  try {\n    const headers = {};\n    if (server.apiKey) headers[\"RhinoComputeKey\"] = server.apiKey;\n    const res = await fetch(new URL(\"/healthcheck\", server.serverUrl).toString(), {\n      signal: controller.signal,\n      headers\n    });\n    if (res.ok) {\n      return { ...base, status: \"ok\", summary: `\"${server.label}\" answered /healthcheck (200).` };\n    }\n    return {\n      ...base,\n      status: \"degraded\",\n      summary: `\"${server.label}\" responded ${res.status} to /healthcheck.`,\n      remediation: res.status === 401 || res.status === 403 ? \"Authentication rejected — verify the API key in /admin/compute.\" : \"The server is reachable but unhealthy. Check the Rhino.Compute host.\"\n    };\n  } catch (err) {\n    const aborted = err instanceof Error && err.name === \"AbortError\";\n    return {\n      ...base,\n      status: \"degraded\",\n      summary: aborted ? `\"${server.label}\" did not respond within ${COMPUTE_PING_TIMEOUT_MS / 1e3}s.` : `\"${server.label}\" is unreachable: ${err instanceof Error ? err.message : String(err)}.`,\n      remediation: `Confirm the Rhino.Compute host is running and ${server.serverUrl} is correct.`\n    };\n  } finally {\n    clearTimeout(timer);\n  }\n}\nasync function dataPathWritableCheck() {\n  const base = { id: \"data-path-writable\", label: \"Data path writable\" };\n  if (!(providers.data.computeServer instanceof LocalComputeServerStore)) {\n    return {\n      ...base,\n      status: \"not_applicable\",\n      summary: \"The active data provider does not persist to a local DATA_PATH.\"\n    };\n  }\n  const dataPath = private_env.DATA_PATH;\n  if (!dataPath) {\n    return {\n      ...base,\n      status: \"error\",\n      summary: \"DATA_PATH is unset but the local provider is active.\",\n      remediation: \"Set DATA_PATH in .env and restart.\"\n    };\n  }\n  const absolute = resolve(dataPath);\n  const probe = join(absolute, `.health-probe-${randomUUID()}`);\n  try {\n    await mkdir(absolute, { recursive: true });\n    await writeFile(probe, \"ok\");\n    await unlink(probe);\n    return { ...base, status: \"ok\", summary: `DATA_PATH (${dataPath}) is writable.` };\n  } catch (err) {\n    return {\n      ...base,\n      status: \"degraded\",\n      summary: `DATA_PATH (${dataPath}) is not writable: ${err instanceof Error ? err.message : String(err)}.`,\n      remediation: \"Check free disk space and that the directory is owned by the user running the app (`df -h`, `ls -la`).\"\n    };\n  }\n}\nconst GET = async ({ locals }) => {\n  requirePermission(locals, \"instance_admin\");\n  const checks = [];\n  const store = providers.data.computeServer;\n  if (typeof store.verifySecrets === \"function\") {\n    try {\n      checks.push(atRestSecretsCheck(await store.verifySecrets()));\n    } catch (err) {\n      checks.push({\n        id: \"at-rest-secrets\",\n        label: \"Compute server secrets\",\n        status: \"error\",\n        summary: `Verification threw: ${err instanceof Error ? err.message : String(err)}`,\n        remediation: \"Check server logs (`pm2 logs selva-compute`) for the underlying error.\"\n      });\n    }\n  } else {\n    checks.push(atRestSecretsCheck(null));\n  }\n  const data = providers.data;\n  if (typeof data.verifySchemaVersion === \"function\") {\n    checks.push(schemaVersionCheck(await data.verifySchemaVersion()));\n  } else {\n    checks.push(schemaVersionCheck(null));\n  }\n  checks.push(...await Promise.all([computeReachabilityCheck(locals), dataPathWritableCheck()]));\n  const rank = {\n    ok: 0,\n    not_applicable: 0,\n    degraded: 2,\n    error: 3\n  };\n  const overall = checks.reduce(\n    (worst, c) => rank[c.status] > rank[worst] ? c.status : worst,\n    \"ok\"\n  );\n  return json({ overall, checkedAt: (/* @__PURE__ */ new Date()).toISOString(), checks });\n};\nexport {\n  GET\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AASA,SAAS,kBAAkB,CAAC,MAAM,EAAE;AACpC,EAAE,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,wBAAwB,EAAE;AACzE,EAAE,IAAI,MAAM,KAAK,IAAI,EAAE;AACvB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,gBAAgB;AAC9B,MAAM,OAAO,EAAE;AACf,KAAK;AACL,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,EAAE,EAAE;AACjB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,IAAI;AAClB,MAAM,OAAO,EAAE;AACf,KAAK;AACL,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AAC1H,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc;AACzC,EAAE,OAAO;AACT,IAAI,GAAG,IAAI;AACX,IAAI,MAAM,EAAE,UAAU;AACtB,IAAI,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,4CAA4C,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9F,IAAI,WAAW,EAAE,SAAS,GAAG,2FAA2F,GAAG;AAC3H,GAAG;AACH;AACA,SAAS,kBAAkB,CAAC,MAAM,EAAE;AACpC,EAAE,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,EAAE;AACjE,EAAE,IAAI,MAAM,KAAK,IAAI,EAAE;AACvB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,gBAAgB;AAC9B,MAAM,OAAO,EAAE;AACf,KAAK;AACL,EAAE;AACF,EAAE,IAAI,MAAM,CAAC,EAAE,EAAE;AACjB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,IAAI;AAClB,MAAM,OAAO,EAAE,CAAC,wBAAwB,EAAE,MAAM,CAAC,MAAM,CAAC,8BAA8B,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;AACzG,KAAK;AACL,EAAE;AACF,EAAE,OAAO;AACT,IAAI,GAAG,IAAI;AACX,IAAI,MAAM,EAAE,UAAU;AACtB,IAAI,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC,wBAAwB,EAAE,MAAM,CAAC,MAAM,IAAI,aAAa,CAAC,8BAA8B,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC3I,IAAI,WAAW,EAAE;AACjB,GAAG;AACH;AACA,MAAM,uBAAuB,GAAG,GAAG;AACnC,eAAe,wBAAwB,CAAC,MAAM,EAAE;AAChD,EAAE,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,wBAAwB,EAAE;AAC3E,EAAE,IAAI,MAAM;AACZ,EAAE,IAAI;AACN,IAAI,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;AACtE,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,OAAO;AACrB,MAAM,OAAO,EAAE,CAAC,+BAA+B,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;AAClG,KAAK;AACL,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,GAAG,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,GAAG,MAAM;AACjG,EAAE,IAAI,CAAC,MAAM,EAAE;AACf,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,gBAAgB;AAC9B,MAAM,OAAO,EAAE,6DAA6D;AAC5E,MAAM,WAAW,EAAE;AACnB,KAAK;AACL,EAAE;AACF,EAAE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE;AAC1C,EAAE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,uBAAuB,CAAC;AAC7E,EAAE,IAAI;AACN,IAAI,MAAM,OAAO,GAAG,EAAE;AACtB,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC,MAAM;AACjE,IAAI,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE;AAClF,MAAM,MAAM,EAAE,UAAU,CAAC,MAAM;AAC/B,MAAM;AACN,KAAK,CAAC;AACN,IAAI,IAAI,GAAG,CAAC,EAAE,EAAE;AAChB,MAAM,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,EAAE;AACjG,IAAI;AACJ,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,UAAU;AACxB,MAAM,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC;AAC3E,MAAM,WAAW,EAAE,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,GAAG,iEAAiE,GAAG;AAClI,KAAK;AACL,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;AACrE,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,UAAU;AACxB,MAAM,OAAO,EAAE,OAAO,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,uBAAuB,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACjM,MAAM,WAAW,EAAE,CAAC,8CAA8C,EAAE,MAAM,CAAC,SAAS,CAAC,YAAY;AACjG,KAAK;AACL,EAAE,CAAC,SAAS;AACZ,IAAI,YAAY,CAAC,KAAK,CAAC;AACvB,EAAE;AACF;AACA,eAAe,qBAAqB,GAAG;AACvC,EAAE,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,oBAAoB,EAAE;AACxE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,aAAa,YAAY,uBAAuB,CAAC,EAAE;AAC1E,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,gBAAgB;AAC9B,MAAM,OAAO,EAAE;AACf,KAAK;AACL,EAAE;AACF,EAAE,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS;AACxC,EAAE,IAAI,CAAC,QAAQ,EAAE;AACjB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,OAAO;AACrB,MAAM,OAAO,EAAE,sDAAsD;AACrE,MAAM,WAAW,EAAE;AACnB,KAAK;AACL,EAAE;AACF,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;AACpC,EAAE,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;AAC/D,EAAE,IAAI;AACN,IAAI,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC9C,IAAI,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC;AAChC,IAAI,MAAM,MAAM,CAAC,KAAK,CAAC;AACvB,IAAI,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,cAAc,CAAC,EAAE;AACrF,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,OAAO;AACX,MAAM,GAAG,IAAI;AACb,MAAM,MAAM,EAAE,UAAU;AACxB,MAAM,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,mBAAmB,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC9G,MAAM,WAAW,EAAE;AACnB,KAAK;AACL,EAAE;AACF;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAClC,EAAE,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,MAAM,GAAG,EAAE;AACnB,EAAE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa;AAC5C,EAAE,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,UAAU,EAAE;AACjD,IAAI,IAAI;AACR,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;AAClE,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE;AAClB,MAAM,MAAM,CAAC,IAAI,CAAC;AAClB,QAAQ,EAAE,EAAE,iBAAiB;AAC7B,QAAQ,KAAK,EAAE,wBAAwB;AACvC,QAAQ,MAAM,EAAE,OAAO;AACvB,QAAQ,OAAO,EAAE,CAAC,oBAAoB,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1F,QAAQ,WAAW,EAAE;AACrB,OAAO,CAAC;AACR,IAAI;AACJ,EAAE,CAAC,MAAM;AACT,IAAI,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;AACzC,EAAE;AACF,EAAE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI;AAC7B,EAAE,IAAI,OAAO,IAAI,CAAC,mBAAmB,KAAK,UAAU,EAAE;AACtD,IAAI,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;AACrE,EAAE,CAAC,MAAM;AACT,IAAI,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;AACzC,EAAE;AACF,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;AAChG,EAAE,MAAM,IAAI,GAAG;AACf,IAAI,EAAE,EAAE,CAAC;AACT,IAAI,cAAc,EAAE,CAAC;AACrB,IAAI,QAAQ,EAAE,CAAC;AACf,IAAI,KAAK,EAAE;AACX,GAAG;AACH,EAAE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM;AAC/B,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,KAAK;AACjE,IAAI;AACJ,GAAG;AACH,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC;AACzF;;;;"}

package/build/server/chunks/entries/endpoints/admin/api/system/throughput/{_server.ts.js-DFacQgP7.js → _server.ts.js-ufKMuphM.js}

@@ -1,10 +1,10 @@
 import { randomFillSync } from 'node:crypto';
 import { json } from '@sveltejs/kit';
-import { a as apiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-yRMzxqNi.js';
-import { d as requirePermission } from '../../../../../../chunks/access.server.js-D99g5hZd.js';
-import '../../../../../../chunks/context.js-D8E0GFTw.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-DlfcfPJs.js';
+import { d as requirePermission } from '../../../../../../chunks/access.server.js-_nJWuQcN.js';
+import '../../../../../../chunks/context.js-DsQGiS2x.js';
 import 'zod';
-import '../../../../../../chunks/providers.server.js-D0hpk-aq.js';
+import '../../../../../../chunks/providers.server.js-CIHOepKv.js';
 import '../../../../../../chunks/shared-server.js-DaWdgxVh.js';
 import 'node:url';
 import 'node:path';
@@ -13,7 +13,7 @@ import 'node:fs/promises';
 import '@supabase/supabase-js';
 import '@selvajs/compute/core';
 import '../../../../../../chunks/schema.js-j3D3emog.js';
-import '../../../../../../chunks/utils4.js-BRotGwxx.js';
+import '../../../../../../chunks/utils4.js-8SHxuGTr.js';
 
 const CHUNK_BYTES = 1024 * 1024;
 const DOWNLOAD_DEFAULT_MB = 20;
@@ -77,4 +77,4 @@ const POST = async ({ locals, request }) => {
 };
 
 export { GET, POST };
-//# sourceMappingURL=_server.ts.js-DFacQgP7.js.map
+//# sourceMappingURL=_server.ts.js-ufKMuphM.js.map

package/build/server/chunks/entries/endpoints/admin/api/system/throughput/{_server.ts.js-DFacQgP7.js.map → _server.ts.js-ufKMuphM.js.map}

@@ -1 +1 @@
-{"version":3,"file":"_server.ts.js-DFacQgP7.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/admin/api/system/throughput/_server.ts.js"],"sourcesContent":["import { randomFillSync } from \"node:crypto\";\nimport { json } from \"@sveltejs/kit\";\nimport { a as apiError, A as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { d as requirePermission } from \"../../../../../../chunks/access.server.js\";\nconst CHUNK_BYTES = 1024 * 1024;\nconst DOWNLOAD_DEFAULT_MB = 20;\nconst DOWNLOAD_MAX_MB = 256;\nconst UPLOAD_MAX_BYTES = 256 * 1024 * 1024;\nconst GET = async ({ locals, url }) => {\n  requirePermission(locals, \"instance_admin\");\n  const requested = Number(url.searchParams.get(\"mb\"));\n  const mb = Math.min(\n    DOWNLOAD_MAX_MB,\n    Math.max(1, Number.isFinite(requested) ? requested : DOWNLOAD_DEFAULT_MB)\n  );\n  let sentChunks = 0;\n  const stream = new ReadableStream({\n    pull(controller) {\n      if (sentChunks >= mb) {\n        controller.close();\n        return;\n      }\n      const chunk = new Uint8Array(CHUNK_BYTES);\n      randomFillSync(chunk);\n      controller.enqueue(chunk);\n      sentChunks++;\n    }\n  });\n  return new Response(stream, {\n    headers: {\n      \"Content-Type\": \"application/octet-stream\",\n      \"Content-Length\": String(mb * CHUNK_BYTES),\n      \"Cache-Control\": \"no-store\"\n    }\n  });\n};\nconst POST = async ({ locals, request }) => {\n  requirePermission(locals, \"instance_admin\");\n  const declared = Number(request.headers.get(\"content-length\"));\n  if (Number.isFinite(declared) && declared > UPLOAD_MAX_BYTES) {\n    apiError(413, ApiErrorCode.VALIDATION_FAILED, \"Upload exceeds the 256 MB probe limit\");\n  }\n  if (!request.body) {\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing request body\");\n  }\n  const start = performance.now();\n  const reader = request.body.getReader();\n  let bytes = 0;\n  while (true) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    bytes += value.byteLength;\n    if (bytes > UPLOAD_MAX_BYTES) {\n      await reader.cancel();\n      apiError(413, ApiErrorCode.VALIDATION_FAILED, \"Upload exceeds the 256 MB probe limit\");\n    }\n  }\n  const ms = performance.now() - start;\n  return json({\n    bytes,\n    ms: Math.round(ms),\n    mbps: ms > 0 ? Number((bytes / (1024 * 1024) / (ms / 1e3)).toFixed(2)) : null\n  });\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAIA,MAAM,WAAW,GAAG,IAAI,GAAG,IAAI;AAC/B,MAAM,mBAAmB,GAAG,EAAE;AAC9B,MAAM,eAAe,GAAG,GAAG;AAC3B,MAAM,gBAAgB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI;AACrC,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACvC,EAAE,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACtD,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG;AACrB,IAAI,eAAe;AACnB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,SAAS,GAAG,mBAAmB;AAC5E,GAAG;AACH,EAAE,IAAI,UAAU,GAAG,CAAC;AACpB,EAAE,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC;AACpC,IAAI,IAAI,CAAC,UAAU,EAAE;AACrB,MAAM,IAAI,UAAU,IAAI,EAAE,EAAE;AAC5B,QAAQ,UAAU,CAAC,KAAK,EAAE;AAC1B,QAAQ;AACR,MAAM;AACN,MAAM,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC;AAC/C,MAAM,cAAc,CAAC,KAAK,CAAC;AAC3B,MAAM,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC;AAC/B,MAAM,UAAU,EAAE;AAClB,IAAI;AACJ,GAAG,CAAC;AACJ,EAAE,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;AAC9B,IAAI,OAAO,EAAE;AACb,MAAM,cAAc,EAAE,0BAA0B;AAChD,MAAM,gBAAgB,EAAE,MAAM,CAAC,EAAE,GAAG,WAAW,CAAC;AAChD,MAAM,eAAe,EAAE;AACvB;AACA,GAAG,CAAC;AACJ;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;AAC5C,EAAE,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAChE,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,gBAAgB,EAAE;AAChE,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,uCAAuC,CAAC;AAC1F,EAAE;AACF,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;AACrB,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AACzE,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;AACjC,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE;AACzC,EAAE,IAAI,KAAK,GAAG,CAAC;AACf,EAAE,OAAO,IAAI,EAAE;AACf,IAAI,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE;AAC/C,IAAI,IAAI,IAAI,EAAE;AACd,IAAI,KAAK,IAAI,KAAK,CAAC,UAAU;AAC7B,IAAI,IAAI,KAAK,GAAG,gBAAgB,EAAE;AAClC,MAAM,MAAM,MAAM,CAAC,MAAM,EAAE;AAC3B,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,uCAAuC,CAAC;AAC5F,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK;AACtC,EAAE,OAAO,IAAI,CAAC;AACd,IAAI,KAAK;AACT,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;AACtB,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG;AAC7E,GAAG,CAAC;AACJ;;;;"}
+{"version":3,"file":"_server.ts.js-ufKMuphM.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/admin/api/system/throughput/_server.ts.js"],"sourcesContent":["import { randomFillSync } from \"node:crypto\";\nimport { json } from \"@sveltejs/kit\";\nimport { a as apiError, A as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { d as requirePermission } from \"../../../../../../chunks/access.server.js\";\nconst CHUNK_BYTES = 1024 * 1024;\nconst DOWNLOAD_DEFAULT_MB = 20;\nconst DOWNLOAD_MAX_MB = 256;\nconst UPLOAD_MAX_BYTES = 256 * 1024 * 1024;\nconst GET = async ({ locals, url }) => {\n  requirePermission(locals, \"instance_admin\");\n  const requested = Number(url.searchParams.get(\"mb\"));\n  const mb = Math.min(\n    DOWNLOAD_MAX_MB,\n    Math.max(1, Number.isFinite(requested) ? requested : DOWNLOAD_DEFAULT_MB)\n  );\n  let sentChunks = 0;\n  const stream = new ReadableStream({\n    pull(controller) {\n      if (sentChunks >= mb) {\n        controller.close();\n        return;\n      }\n      const chunk = new Uint8Array(CHUNK_BYTES);\n      randomFillSync(chunk);\n      controller.enqueue(chunk);\n      sentChunks++;\n    }\n  });\n  return new Response(stream, {\n    headers: {\n      \"Content-Type\": \"application/octet-stream\",\n      \"Content-Length\": String(mb * CHUNK_BYTES),\n      \"Cache-Control\": \"no-store\"\n    }\n  });\n};\nconst POST = async ({ locals, request }) => {\n  requirePermission(locals, \"instance_admin\");\n  const declared = Number(request.headers.get(\"content-length\"));\n  if (Number.isFinite(declared) && declared > UPLOAD_MAX_BYTES) {\n    apiError(413, ApiErrorCode.VALIDATION_FAILED, \"Upload exceeds the 256 MB probe limit\");\n  }\n  if (!request.body) {\n    apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing request body\");\n  }\n  const start = performance.now();\n  const reader = request.body.getReader();\n  let bytes = 0;\n  while (true) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    bytes += value.byteLength;\n    if (bytes > UPLOAD_MAX_BYTES) {\n      await reader.cancel();\n      apiError(413, ApiErrorCode.VALIDATION_FAILED, \"Upload exceeds the 256 MB probe limit\");\n    }\n  }\n  const ms = performance.now() - start;\n  return json({\n    bytes,\n    ms: Math.round(ms),\n    mbps: ms > 0 ? Number((bytes / (1024 * 1024) / (ms / 1e3)).toFixed(2)) : null\n  });\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAIA,MAAM,WAAW,GAAG,IAAI,GAAG,IAAI;AAC/B,MAAM,mBAAmB,GAAG,EAAE;AAC9B,MAAM,eAAe,GAAG,GAAG;AAC3B,MAAM,gBAAgB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI;AACrC,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACvC,EAAE,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACtD,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG;AACrB,IAAI,eAAe;AACnB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,SAAS,GAAG,mBAAmB;AAC5E,GAAG;AACH,EAAE,IAAI,UAAU,GAAG,CAAC;AACpB,EAAE,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC;AACpC,IAAI,IAAI,CAAC,UAAU,EAAE;AACrB,MAAM,IAAI,UAAU,IAAI,EAAE,EAAE;AAC5B,QAAQ,UAAU,CAAC,KAAK,EAAE;AAC1B,QAAQ;AACR,MAAM;AACN,MAAM,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC;AAC/C,MAAM,cAAc,CAAC,KAAK,CAAC;AAC3B,MAAM,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC;AAC/B,MAAM,UAAU,EAAE;AAClB,IAAI;AACJ,GAAG,CAAC;AACJ,EAAE,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;AAC9B,IAAI,OAAO,EAAE;AACb,MAAM,cAAc,EAAE,0BAA0B;AAChD,MAAM,gBAAgB,EAAE,MAAM,CAAC,EAAE,GAAG,WAAW,CAAC;AAChD,MAAM,eAAe,EAAE;AACvB;AACA,GAAG,CAAC;AACJ;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;AAC5C,EAAE,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAChE,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,gBAAgB,EAAE;AAChE,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,uCAAuC,CAAC;AAC1F,EAAE;AACF,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;AACrB,IAAI,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AACzE,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;AACjC,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE;AACzC,EAAE,IAAI,KAAK,GAAG,CAAC;AACf,EAAE,OAAO,IAAI,EAAE;AACf,IAAI,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE;AAC/C,IAAI,IAAI,IAAI,EAAE;AACd,IAAI,KAAK,IAAI,KAAK,CAAC,UAAU;AAC7B,IAAI,IAAI,KAAK,GAAG,gBAAgB,EAAE;AAClC,MAAM,MAAM,MAAM,CAAC,MAAM,EAAE;AAC3B,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,uCAAuC,CAAC;AAC5F,IAAI;AACJ,EAAE;AACF,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK;AACtC,EAAE,OAAO,IAAI,CAAC;AACd,IAAI,KAAK;AACT,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;AACtB,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG;AAC7E,GAAG,CAAC;AACJ;;;;"}

package/build/server/chunks/entries/endpoints/admin/api/system/update/{_server.ts.js-y3dgQz-R.js → _server.ts.js-D-IGlEji.js}

@@ -1,25 +1,26 @@
 import { spawn } from 'child_process';
 import { join } from 'path';
-import { readFileSync, existsSync } from 'fs';
+import { readFileSync, writeFileSync } from 'fs';
 import { b as private_env } from '../../../../../../chunks/shared-server.js-DaWdgxVh.js';
 import { json } from '@sveltejs/kit';
-import { d as requirePermission } from '../../../../../../chunks/access.server.js-D99g5hZd.js';
+import '../../../../../../chunks/context.js-DsQGiS2x.js';
+import { w as actorFrom, h as getEventSink, f as getErrorReporter } from '../../../../../../chunks/providers.server.js-CIHOepKv.js';
+import { d as requirePermission } from '../../../../../../chunks/access.server.js-_nJWuQcN.js';
 import { c as checkForUpdate, r as readChannel, a as channelTag } from '../../../../../../chunks/updateCheck.server.js-DdReI2pF.js';
-import '../../../../../../chunks/context.js-D8E0GFTw.js';
+import { u as updateLogPath, f as findDeploymentDir, a as updateStatePath, s as startUpdateOutcomeReconciler } from '../../../../../../chunks/selfUpdate.server.js-CXejyqIT.js';
 import 'zod';
-import '../../../../../../chunks/providers.server.js-D0hpk-aq.js';
 import 'node:url';
 import 'node:path';
 import 'node:fs';
 import 'node:crypto';
 import 'node:fs/promises';
 import '@supabase/supabase-js';
-import '../../../../../../chunks/api-errors.js-yRMzxqNi.js';
+import '../../../../../../chunks/api-errors.js-DlfcfPJs.js';
 import '@selvajs/compute/core';
 import '../../../../../../chunks/schema.js-j3D3emog.js';
-import '../../../../../../chunks/utils4.js-BRotGwxx.js';
+import '../../../../../../chunks/utils4.js-8SHxuGTr.js';
+import '../../../../../../chunks/update-outcome.js-mUyfVCnt.js';
 
-const UPDATE_LOG_PATH = "/tmp/selva-update.log";
 function stripAnsi(str) {
   return str.replace(/\x1B\[[0-9;]*[mGKHF]/g, "");
 }
@@ -36,10 +37,10 @@ function readRuntimeVersion(dir) {
 function shellQuote(s) {
   return `'${s.replace(/'/g, `'\\''`)}'`;
 }
-function buildLauncher(runnerScript, prelude = []) {
+function buildLauncher(runnerScript, logPath, prelude = []) {
   const echoes = prelude.map((line) => `echo ${shellQuote(line)}`).join("\n");
   return `
-LOGFILE=${shellQuote(UPDATE_LOG_PATH)}
+LOGFILE=${shellQuote(logPath)}
 RUNNER=/tmp/selva-update-runner.sh
 mkdir -p "$(dirname "$LOGFILE")"
 : > "$LOGFILE"
@@ -85,6 +86,7 @@ TAG=${distTag}
 # this script is to update the app; leaving it down is the worst possible
 # outcome.
 on_exit() {
+  CODE=$?
   STATUS=$(pm2 jlist 2>/dev/null | node -e "
     try {
       const list = JSON.parse(require('fs').readFileSync('/dev/stdin','utf8'));
@@ -97,6 +99,9 @@ on_exit() {
     pm2 start "$ECOSYSTEM" --update-env >/dev/null 2>&1 || \\
       echo "[RECOVER] pm2 start failed — manual intervention required: cd $(dirname "$ECOSYSTEM") && pm2 start ecosystem.config.cjs"
   fi
+  # Terminal marker: the restarted app's outcome reconciler greps this to turn
+  # the run into an audit event (selfUpdate.server.ts). Keep the format stable.
+  echo "[EXIT] code=$CODE"
 }
 trap on_exit EXIT
 
@@ -255,28 +260,13 @@ echo "[FATAL] Manual recovery required. Check: pm2 logs selva-compute"
 exit 6
 `;
 }
-function isDeploymentDir(dir) {
-  return existsSync(join(dir, "node_modules", "@selvajs", "selva", "package.json"));
-}
 function npmInstallArgs(channel) {
   const tag = channelTag(channel);
   return ["install", "--save", "--prefer-online", `@selvajs/cli@${tag}`, `@selvajs/selva@${tag}`];
 }
 function detectUpdatePlan(channel) {
-  const args = npmInstallArgs(channel);
-  if (private_env.INSTALL_DIR && isDeploymentDir(private_env.INSTALL_DIR)) {
-    return { cwd: private_env.INSTALL_DIR, args };
-  }
-  let dir = process.cwd();
-  for (let i = 0; i < 6; i++) {
-    if (isDeploymentDir(dir)) {
-      return { cwd: dir, args };
-    }
-    const parent = join(dir, "..");
-    if (parent === dir) break;
-    dir = parent;
-  }
-  return null;
+  const dir = findDeploymentDir(private_env);
+  return dir ? { cwd: dir, args: npmInstallArgs(channel) } : null;
 }
 const POST = async ({ locals }) => {
   requirePermission(locals, "instance_admin");
@@ -290,6 +280,25 @@ const POST = async ({ locals }) => {
       { status: 500, headers: { "Content-Type": "application/json" } }
     );
   }
+  const versionBefore = readRuntimeVersion(plan.cwd);
+  const actorId = locals.ctx ? actorFrom(locals.ctx) : "system";
+  const pending = {
+    startedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    actorId,
+    channel,
+    fromVersion: versionBefore
+  };
+  try {
+    writeFileSync(updateStatePath(plan.cwd), JSON.stringify(pending, null, "	"));
+  } catch (err) {
+    console.error("[selfUpdate] could not persist pending-update state:", err);
+  }
+  await getEventSink().emit({
+    type: "system.update.started",
+    channel,
+    fromVersion: versionBefore,
+    actorId
+  });
   const stream = new ReadableStream({
     start(controller) {
       const encoder = new TextEncoder();
@@ -300,7 +309,6 @@ const POST = async ({ locals }) => {
         controller.enqueue(encoder.encode(message));
       }
       try {
-        const versionBefore = readRuntimeVersion(plan.cwd);
         const prelude = [
           `[INFO] Updating deployment (cwd: ${plan.cwd}, channel: ${channel})`,
           ...versionBefore ? [`[INFO] Current @selvajs/selva: ${versionBefore}`] : []
@@ -312,7 +320,7 @@ const POST = async ({ locals }) => {
           channelTag(channel)
         );
         const cmd = "bash";
-        const args = ["-c", buildLauncher(runnerScript, prelude)];
+        const args = ["-c", buildLauncher(runnerScript, updateLogPath(plan.cwd), prelude)];
         const localBin = join(plan.cwd, "node_modules", ".bin");
         const child = spawn(cmd, args, {
           cwd: plan.cwd,
@@ -327,6 +335,11 @@ const POST = async ({ locals }) => {
           stdio: ["ignore", "pipe", "pipe"]
         });
         child.unref();
+        startUpdateOutcomeReconciler({
+          deploymentDir: plan.cwd,
+          emit: (e) => getEventSink().emit(e),
+          report: (err) => getErrorReporter().capture(err, { tags: { origin: "selfUpdate" } })
+        });
         const timeout = setTimeout(
           () => {
             try {
@@ -398,7 +411,7 @@ const GET = async ({ locals, url, fetch }) => {
   }
   let body = "";
   try {
-    body = readFileSync(UPDATE_LOG_PATH, "utf8");
+    body = readFileSync(updateLogPath(findDeploymentDir(private_env)), "utf8");
   } catch {
   }
   return new Response(body, {
@@ -410,4 +423,4 @@ const GET = async ({ locals, url, fetch }) => {
 };
 
 export { GET, POST };
-//# sourceMappingURL=_server.ts.js-y3dgQz-R.js.map
+//# sourceMappingURL=_server.ts.js-D-IGlEji.js.map

package/build/server/chunks/entries/endpoints/admin/api/system/update/_server.ts.js-D-IGlEji.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-D-IGlEji.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/admin/api/system/update/_server.ts.js"],"sourcesContent":["import { spawn } from \"child_process\";\nimport { join } from \"path\";\nimport { readFileSync, writeFileSync } from \"fs\";\nimport { b as private_env } from \"../../../../../../chunks/shared-server.js\";\nimport { json } from \"@sveltejs/kit\";\nimport \"../../../../../../chunks/context.js\";\nimport { o as actorFrom, a as getEventSink, g as getErrorReporter } from \"../../../../../../chunks/providers.server.js\";\nimport { d as requirePermission } from \"../../../../../../chunks/access.server.js\";\nimport { c as checkForUpdate, r as readChannel, a as channelTag } from \"../../../../../../chunks/updateCheck.server.js\";\nimport { u as updateLogPath, f as findDeploymentDir, a as updateStatePath, s as startUpdateOutcomeReconciler } from \"../../../../../../chunks/selfUpdate.server.js\";\nfunction stripAnsi(str) {\n  return str.replace(/\\x1B\\[[0-9;]*[mGKHF]/g, \"\");\n}\nfunction readRuntimeVersion(dir) {\n  try {\n    const pkg = JSON.parse(\n      readFileSync(join(dir, \"node_modules\", \"@selvajs\", \"selva\", \"package.json\"), \"utf8\")\n    );\n    return typeof pkg.version === \"string\" ? pkg.version : void 0;\n  } catch {\n    return void 0;\n  }\n}\nfunction shellQuote(s) {\n  return `'${s.replace(/'/g, `'\\\\''`)}'`;\n}\nfunction buildLauncher(runnerScript, logPath, prelude = []) {\n  const echoes = prelude.map((line) => `echo ${shellQuote(line)}`).join(\"\\n\");\n  return `\nLOGFILE=${shellQuote(logPath)}\nRUNNER=/tmp/selva-update-runner.sh\nmkdir -p \"$(dirname \"$LOGFILE\")\"\n: > \"$LOGFILE\"\n\ncat > \"$RUNNER\" <<'__SELVA_RUNNER_EOF__'\n${runnerScript}\n__SELVA_RUNNER_EOF__\nchmod +x \"$RUNNER\"\n\ntrap '' PIPE\nexec > >(tee --output-error=warn-nopipe -a \"$LOGFILE\" 2>/dev/null) 2>&1\n${echoes}\n\n# Daemonize the runner so PM2's tree-kill of selva-compute can't reach it.\n# setsid puts it in a new session; the trailing & + disown + launcher exit\n# leaves the runner with PPID=1 once we're gone. stdin/stdout/stderr are\n# fully detached from this process (and from selva-compute's pipes).\nsetsid bash \"$RUNNER\" </dev/null >>\"$LOGFILE\" 2>&1 &\nRUNNER_PID=$!\ndisown\necho \"[INFO] Update runner started (PID $RUNNER_PID, log: $LOGFILE)\"\n\n# Small pause so the runner has time to print its first line before SSE\n# closes — otherwise the frontend's first poll might see no progress.\nsleep 1\nexit 0\n`;\n}\nfunction buildNpmRunnerScript(npmArgs, versionBefore, ecosystemPath, tag) {\n  const npmCommand = [\"npm\", ...npmArgs].map(shellQuote).join(\" \");\n  const before = shellQuote(versionBefore ?? \"\");\n  const ecosystem = shellQuote(ecosystemPath);\n  const distTag = shellQuote(tag);\n  return `#!/bin/bash\nset -o pipefail\nBEFORE=${before}\nECOSYSTEM=${ecosystem}\nTAG=${distTag}\n\n# Last-resort safety net. If the script exits with the app NOT online for\n# any reason (crash, kill -9, network blip, npm hang past timeout), try to\n# bring it back from ecosystem.config.cjs before we go. The whole point of\n# this script is to update the app; leaving it down is the worst possible\n# outcome.\non_exit() {\n  CODE=$?\n  STATUS=$(pm2 jlist 2>/dev/null | node -e \"\n    try {\n      const list = JSON.parse(require('fs').readFileSync('/dev/stdin','utf8'));\n      const app = list.find(p => p.name === 'selva-compute');\n      process.stdout.write(app ? app.pm2_env.status : 'missing');\n    } catch { process.stdout.write('error'); }\n  \" 2>/dev/null || echo \"error\")\n  if [ \"$STATUS\" != \"online\" ]; then\n    echo \"[RECOVER] selva-compute is '$STATUS' — starting from ecosystem.config.cjs\"\n    pm2 start \"$ECOSYSTEM\" --update-env >/dev/null 2>&1 || \\\\\n      echo \"[RECOVER] pm2 start failed — manual intervention required: cd $(dirname \"$ECOSYSTEM\") && pm2 start ecosystem.config.cjs\"\n  fi\n  # Terminal marker: the restarted app's outcome reconciler greps this to turn\n  # the run into an audit event (selfUpdate.server.ts). Keep the format stable.\n  echo \"[EXIT] code=$CODE\"\n}\ntrap on_exit EXIT\n\n# ---------------------------------------------------------------------------\n# 1. Pre-flight: skip the whole cycle if there's nothing to install.\n# ---------------------------------------------------------------------------\n# Without this, clicking \"Update\" on an already-current instance triggered\n# a full stop/install/start cycle and a downtime window for no reason. Now\n# we just check the registry first.\necho \"[STEP] Checking npm registry for the '$TAG' channel version\"\nLATEST=$(npm view \"@selvajs/selva@$TAG\" version --silent 2>/dev/null || echo \"\")\nif [ -z \"$LATEST\" ]; then\n  echo \"[WARN] Could not query npm registry — proceeding with update attempt anyway\"\nelif [ -n \"$BEFORE\" ] && [ \"$LATEST\" = \"$BEFORE\" ]; then\n  echo \"[INFO] Already on the '$TAG' channel version ($BEFORE)\"\n  echo \"[DONE] Nothing to do\"\n  exit 0\nelse\n  # May be a forward update OR a revert (target older than installed) — either\n  # way the installed version differs from what this channel publishes.\n  echo \"[INFO] Target ($TAG): $BEFORE → $LATEST\"\nfi\n\n# ---------------------------------------------------------------------------\n# 2. Resync PM2 daemon if its in-memory version drifted from the CLI on disk.\n# ---------------------------------------------------------------------------\n# After a global pm2 upgrade the daemon keeps running its original version\n# while the CLI moves forward. Process commands then talk to a stale daemon\n# and the symptom is \"stop works, start never lands\". \\`pm2 update\\` dumps\n# processes, kills the daemon, respawns on the current CLI, restores the\n# dump. Doing it before we touch anything keeps the rest of the script\n# talking to a coherent daemon.\necho \"[STEP] Checking PM2 daemon/CLI version sync\"\nif pm2 ping 2>&1 | grep -q \"out-of-date\" || pm2 list 2>&1 | grep -q \"out-of-date\"; then\n  echo \"[STEP] PM2 daemon is out-of-date — running 'pm2 update' to resync\"\n  if ! pm2 update; then\n    echo \"[FATAL] pm2 update failed — aborting before stopping the running app\"\n    exit 1\n  fi\n  echo \"[INFO] PM2 daemon resynced\"\nfi\n\n# ---------------------------------------------------------------------------\n# 3. Stop selva-compute BEFORE npm rewrites build/.\n# ---------------------------------------------------------------------------\n# SvelteKit's node adapter lazy-imports chunks from build/server/chunks/ on\n# every request. Letting npm rewrite build/ while the old process is still\n# serving traffic = in-flight requests hit ERR_MODULE_NOT_FOUND for chunks\n# whose hash just changed under their feet. Stopping first is a brief\n# downtime window (~1-2s longer than restart-in-place) for a much smaller\n# blast radius.\n#\n# This is also where the SSE connection to the frontend dies — selva-compute\n# IS the SSE server. From here on, the user sees output via the log-file\n# polling fallback in the admin UI, not over SSE.\necho \"[STEP] Stopping selva-compute\"\nif ! pm2 stop selva-compute; then\n  echo \"[WARN] pm2 stop failed — selva-compute may not be running yet. Continuing.\"\nfi\n\n# ---------------------------------------------------------------------------\n# 4. Run npm update.\n# ---------------------------------------------------------------------------\necho \"[STEP] Updating @selvajs/* packages\"\nif ! ${npmCommand}; then\n  echo \"[FATAL] npm update failed — EXIT trap will restart the previous build\"\n  exit 1\nfi\n\nAFTER=$(node -e \"try{console.log(require('./node_modules/@selvajs/selva/package.json').version)}catch(e){}\" 2>/dev/null)\necho \"[INFO] New @selvajs/selva: \\${AFTER:-unknown}\"\n\nif [ -n \"$BEFORE\" ] && [ \"$BEFORE\" = \"$AFTER\" ]; then\n  echo \"[WARN] No version change ($BEFORE). Your npm cache may be stale.\"\n  echo \"[WARN] Recover with:\"\n  echo \"[WARN]   npm cache clean --force\"\n  echo \"[WARN]   rm -rf node_modules package-lock.json\"\n  echo \"[WARN]   npm install --prefer-online\"\nfi\n\n# ---------------------------------------------------------------------------\n# 5. Start selva-compute with the new build.\n# ---------------------------------------------------------------------------\n# Start from ecosystem.config.cjs, NOT \\`pm2 start selva-compute\\` — the\n# latter requires selva-compute to already be in pm2's in-memory process\n# list. After a \\`pm2 update\\` (step 2) that's not guaranteed.\necho \"[STEP] Starting selva-compute with new build\"\nif ! pm2 start \"$ECOSYSTEM\" --update-env; then\n  echo \"[FATAL] pm2 start failed — investigate with \\\\\\`pm2 logs selva-compute\\\\\\`\"\n  exit 2\nfi\n\n# ---------------------------------------------------------------------------\n# 6. Health probe the new process.\n# ---------------------------------------------------------------------------\n# Read PORT from .env the same way scripts/update.sh does, so non-default\n# ports are respected.\nPORT=$(grep \"^PORT=\" .env 2>/dev/null \\\\\n  | head -1 \\\\\n  | cut -d'=' -f2 \\\\\n  | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//' -e 's/^[\"'\"'\"']//' -e 's/[\"'\"'\"']$//' -e 's/[[:space:]]*#.*//')\nPORT=\\${PORT:-3000}\n\necho \"[STEP] Health-probing the new process on port $PORT\"\nHEALTHY=0\nfor i in $(seq 1 15); do\n  sleep 2\n  CODE=$(curl -sS -o /tmp/selva-health.$$ -w \"%{http_code}\" --max-time 5 \"http://localhost:$PORT/api/health\" 2>/dev/null || echo \"000\")\n  if [ \"$CODE\" = \"200\" ]; then\n    HEALTHY=1\n    echo \"[INFO] Health probe passed after \\${i} attempt(s)\"\n    rm -f /tmp/selva-health.$$\n    break\n  fi\n  echo \"[INFO] Probe attempt $i/15: HTTP $CODE — retrying\"\ndone\n\nif [ \"$HEALTHY\" = \"1\" ]; then\n  echo \"[DONE] Update complete\"\n  exit 0\nfi\n\n# ---------------------------------------------------------------------------\n# 7. Rollback path.\n# ---------------------------------------------------------------------------\necho \"[FATAL] New process failed health check after 30s\"\nif [ -f /tmp/selva-health.$$ ]; then\n  echo \"[FATAL] Last response body:\"\n  cat /tmp/selva-health.$$\n  rm -f /tmp/selva-health.$$\nfi\n\nif [ -z \"$BEFORE\" ]; then\n  echo \"[FATAL] No prior version recorded — cannot roll back automatically.\"\n  echo \"[FATAL] EXIT trap will attempt to restart the current build anyway.\"\n  exit 3\nfi\n\necho \"[STEP] Rolling back @selvajs/selva to $BEFORE\"\npm2 stop selva-compute >/dev/null 2>&1 || true\nif ! npm install --save \"@selvajs/selva@$BEFORE\"; then\n  echo \"[FATAL] Rollback npm install failed — EXIT trap will retry restart.\"\n  exit 4\nfi\n\npm2 start \"$ECOSYSTEM\" --update-env || true\nsleep 3\nROLLBACK_CODE=$(curl -sS -o /dev/null -w \"%{http_code}\" --max-time 5 \"http://localhost:$PORT/api/health\" 2>/dev/null || echo \"000\")\nif [ \"$ROLLBACK_CODE\" = \"200\" ]; then\n  echo \"[DONE] Rolled back to $BEFORE — previous version is online\"\n  exit 5\nfi\n\necho \"[FATAL] Rollback restart also failed health check (HTTP $ROLLBACK_CODE)\"\necho \"[FATAL] Manual recovery required. Check: pm2 logs selva-compute\"\nexit 6\n`;\n}\nfunction npmInstallArgs(channel) {\n  const tag = channelTag(channel);\n  return [\"install\", \"--save\", \"--prefer-online\", `@selvajs/cli@${tag}`, `@selvajs/selva@${tag}`];\n}\nfunction detectUpdatePlan(channel) {\n  const dir = findDeploymentDir(private_env);\n  return dir ? { cwd: dir, args: npmInstallArgs(channel) } : null;\n}\nconst POST = async ({ locals }) => {\n  requirePermission(locals, \"instance_admin\");\n  const channel = readChannel();\n  const plan = detectUpdatePlan(channel);\n  if (!plan) {\n    return new Response(\n      JSON.stringify({\n        error: \"Couldn't determine how to update this deployment. Expected node_modules/@selvajs/selva (CLI scaffold) in the cwd or a parent directory.\"\n      }),\n      { status: 500, headers: { \"Content-Type\": \"application/json\" } }\n    );\n  }\n  const versionBefore = readRuntimeVersion(plan.cwd);\n  const actorId = locals.ctx ? actorFrom(locals.ctx) : \"system\";\n  const pending = {\n    startedAt: (/* @__PURE__ */ new Date()).toISOString(),\n    actorId,\n    channel,\n    fromVersion: versionBefore\n  };\n  try {\n    writeFileSync(updateStatePath(plan.cwd), JSON.stringify(pending, null, \"\t\"));\n  } catch (err) {\n    console.error(\"[selfUpdate] could not persist pending-update state:\", err);\n  }\n  await getEventSink().emit({\n    type: \"system.update.started\",\n    channel,\n    fromVersion: versionBefore,\n    actorId\n  });\n  const stream = new ReadableStream({\n    start(controller) {\n      const encoder = new TextEncoder();\n      function sendEvent(type, data) {\n        const message = `data: ${JSON.stringify({ type, ...data })}\n\n`;\n        controller.enqueue(encoder.encode(message));\n      }\n      try {\n        const prelude = [\n          `[INFO] Updating deployment (cwd: ${plan.cwd}, channel: ${channel})`,\n          ...versionBefore ? [`[INFO] Current @selvajs/selva: ${versionBefore}`] : []\n        ];\n        const runnerScript = buildNpmRunnerScript(\n          plan.args,\n          versionBefore,\n          join(plan.cwd, \"ecosystem.config.cjs\"),\n          channelTag(channel)\n        );\n        const cmd = \"bash\";\n        const args = [\"-c\", buildLauncher(runnerScript, updateLogPath(plan.cwd), prelude)];\n        const localBin = join(plan.cwd, \"node_modules\", \".bin\");\n        const child = spawn(cmd, args, {\n          cwd: plan.cwd,\n          env: {\n            // eslint-disable-next-line no-restricted-properties -- OS env for the spawned child, not .env config\n            PATH: `${localBin}:${process.env.PATH ?? \"\"}`,\n            // eslint-disable-next-line no-restricted-properties -- OS env for the spawned child, not .env config\n            HOME: process.env.HOME,\n            INSTALL_DIR: plan.cwd\n          },\n          detached: true,\n          stdio: [\"ignore\", \"pipe\", \"pipe\"]\n        });\n        child.unref();\n        startUpdateOutcomeReconciler({\n          deploymentDir: plan.cwd,\n          emit: (e) => getEventSink().emit(e),\n          report: (err) => getErrorReporter().capture(err, { tags: { origin: \"selfUpdate\" } })\n        });\n        const timeout = setTimeout(\n          () => {\n            try {\n              if (child.pid) process.kill(-child.pid, \"SIGTERM\");\n            } catch {\n            }\n            sendEvent(\"log\", { data: \"[FATAL] Update timed out after 15 minutes\" });\n            sendEvent(\"exit\", { code: -1 });\n            controller.close();\n          },\n          15 * 60 * 1e3\n        );\n        let restarting = false;\n        child.stdout.on(\"data\", (data) => {\n          const lines = data.toString().split(\"\\n\");\n          for (const line of lines) {\n            const clean = stripAnsi(line).trim();\n            if (clean) {\n              if (!restarting && (clean.includes(\"Applying action stopProcessId\") || clean.includes(\"Applying action restartProcessId\"))) {\n                restarting = true;\n                sendEvent(\"restarting\", { data: clean });\n              } else {\n                sendEvent(\"log\", { data: clean });\n              }\n            }\n          }\n        });\n        child.stderr.on(\"data\", (data) => {\n          const lines = data.toString().split(\"\\n\");\n          for (const line of lines) {\n            const clean = stripAnsi(line).trim();\n            if (clean) {\n              sendEvent(\"log\", { data: `[ERROR] ${clean}` });\n            }\n          }\n        });\n        child.on(\"close\", (code) => {\n          clearTimeout(timeout);\n          sendEvent(\"exit\", { code: code ?? -1 });\n          controller.close();\n        });\n        child.on(\"error\", (err) => {\n          clearTimeout(timeout);\n          sendEvent(\"log\", { data: `[FATAL] ${err.message}` });\n          sendEvent(\"exit\", { code: -1 });\n          controller.close();\n        });\n      } catch (err) {\n        sendEvent(\"log\", { data: `[FATAL] Failed to spawn process: ${err}` });\n        sendEvent(\"exit\", { code: -1 });\n        controller.close();\n      }\n    }\n  });\n  return new Response(stream, {\n    headers: {\n      \"Content-Type\": \"text/event-stream\",\n      \"Cache-Control\": \"no-cache\",\n      Connection: \"keep-alive\"\n    }\n  });\n};\nconst GET = async ({ locals, url, fetch }) => {\n  requirePermission(locals, \"instance_admin\");\n  if (url.searchParams.get(\"check\") !== null) {\n    return json(await checkForUpdate(fetch, readChannel()), {\n      headers: { \"Cache-Control\": \"no-store\" }\n    });\n  }\n  let body = \"\";\n  try {\n    body = readFileSync(updateLogPath(findDeploymentDir(private_env)), \"utf8\");\n  } catch {\n  }\n  return new Response(body, {\n    headers: {\n      \"Content-Type\": \"text/plain; charset=utf-8\",\n      \"Cache-Control\": \"no-store\"\n    }\n  });\n};\nexport {\n  GET,\n  POST\n};\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAUA,SAAS,SAAS,CAAC,GAAG,EAAE;AACxB,EAAE,OAAO,GAAG,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC;AACjD;AACA,SAAS,kBAAkB,CAAC,GAAG,EAAE;AACjC,EAAE,IAAI;AACN,IAAI,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK;AAC1B,MAAM,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,MAAM;AACzF,KAAK;AACL,IAAI,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,GAAG,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC;AACjE,EAAE,CAAC,CAAC,MAAM;AACV,IAAI,OAAO,MAAM;AACjB,EAAE;AACF;AACA,SAAS,UAAU,CAAC,CAAC,EAAE;AACvB,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACxC;AACA,SAAS,aAAa,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,EAAE;AAC5D,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AAC7E,EAAE,OAAO;AACT,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC;AAC7B;AACA;AACA;;AAEA;AACA,EAAE,YAAY;AACd;AACA;;AAEA;AACA;AACA,EAAE,MAAM;;AAER;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA,CAAC;AACD;AACA,SAAS,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,GAAG,EAAE;AAC1E,EAAE,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;AAClE,EAAE,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,IAAI,EAAE,CAAC;AAChD,EAAE,MAAM,SAAS,GAAG,UAAU,CAAC,aAAa,CAAC;AAC7C,EAAE,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC;AACjC,EAAE,OAAO,CAAC;AACV;AACA,OAAO,EAAE,MAAM;AACf,UAAU,EAAE,SAAS;AACrB,IAAI,EAAE,OAAO;;AAEb;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA,KAAK,EAAE,UAAU,CAAC;AAClB;AACA;AACA;;AAEA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA,CAAC;AACD;AACA,SAAS,cAAc,CAAC,OAAO,EAAE;AACjC,EAAE,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC;AACjC,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC;AACjG;AACA,SAAS,gBAAgB,CAAC,OAAO,EAAE;AACnC,EAAE,MAAM,GAAG,GAAG,iBAAiB,CAAC,WAAW,CAAC;AAC5C,EAAE,OAAO,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI;AACjE;AACK,MAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AACnC,EAAE,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC7C,EAAE,MAAM,OAAO,GAAG,WAAW,EAAE;AAC/B,EAAE,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC;AACxC,EAAE,IAAI,CAAC,IAAI,EAAE;AACb,IAAI,OAAO,IAAI,QAAQ;AACvB,MAAM,IAAI,CAAC,SAAS,CAAC;AACrB,QAAQ,KAAK,EAAE;AACf,OAAO,CAAC;AACR,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;AACpE,KAAK;AACL,EAAE;AACF,EAAE,MAAM,aAAa,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;AACpD,EAAE,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ;AAC/D,EAAE,MAAM,OAAO,GAAG;AAClB,IAAI,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACzD,IAAI,OAAO;AACX,IAAI,OAAO;AACX,IAAI,WAAW,EAAE;AACjB,GAAG;AACH,EAAE,IAAI;AACN,IAAI,aAAa,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;AAChF,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,IAAI,OAAO,CAAC,KAAK,CAAC,sDAAsD,EAAE,GAAG,CAAC;AAC9E,EAAE;AACF,EAAE,MAAM,YAAY,EAAE,CAAC,IAAI,CAAC;AAC5B,IAAI,IAAI,EAAE,uBAAuB;AACjC,IAAI,OAAO;AACX,IAAI,WAAW,EAAE,aAAa;AAC9B,IAAI;AACJ,GAAG,CAAC;AACJ,EAAE,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC;AACpC,IAAI,KAAK,CAAC,UAAU,EAAE;AACtB,MAAM,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE;AACvC,MAAM,SAAS,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE;AACrC,QAAQ,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;;AAElE,CAAC;AACD,QAAQ,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACnD,MAAM;AACN,MAAM,IAAI;AACV,QAAQ,MAAM,OAAO,GAAG;AACxB,UAAU,CAAC,iCAAiC,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAC9E,UAAU,GAAG,aAAa,GAAG,CAAC,CAAC,+BAA+B,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG;AACnF,SAAS;AACT,QAAQ,MAAM,YAAY,GAAG,oBAAoB;AACjD,UAAU,IAAI,CAAC,IAAI;AACnB,UAAU,aAAa;AACvB,UAAU,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAChD,UAAU,UAAU,CAAC,OAAO;AAC5B,SAAS;AACT,QAAQ,MAAM,GAAG,GAAG,MAAM;AAC1B,QAAQ,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,YAAY,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;AAC1F,QAAQ,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,CAAC;AAC/D,QAAQ,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;AACvC,UAAU,GAAG,EAAE,IAAI,CAAC,GAAG;AACvB,UAAU,GAAG,EAAE;AACf;AACA,YAAY,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AACzD;AACA,YAAY,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;AAClC,YAAY,WAAW,EAAE,IAAI,CAAC;AAC9B,WAAW;AACX,UAAU,QAAQ,EAAE,IAAI;AACxB,UAAU,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM;AAC1C,SAAS,CAAC;AACV,QAAQ,KAAK,CAAC,KAAK,EAAE;AACrB,QAAQ,4BAA4B,CAAC;AACrC,UAAU,aAAa,EAAE,IAAI,CAAC,GAAG;AACjC,UAAU,IAAI,EAAE,CAAC,CAAC,KAAK,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;AAC7C,UAAU,MAAM,EAAE,CAAC,GAAG,KAAK,gBAAgB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;AAC7F,SAAS,CAAC;AACV,QAAQ,MAAM,OAAO,GAAG,UAAU;AAClC,UAAU,MAAM;AAChB,YAAY,IAAI;AAChB,cAAc,IAAI,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC;AAChE,YAAY,CAAC,CAAC,MAAM;AACpB,YAAY;AACZ,YAAY,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,2CAA2C,EAAE,CAAC;AACnF,YAAY,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;AAC3C,YAAY,UAAU,CAAC,KAAK,EAAE;AAC9B,UAAU,CAAC;AACX,UAAU,EAAE,GAAG,EAAE,GAAG;AACpB,SAAS;AACT,QAAQ,IAAI,UAAU,GAAG,KAAK;AAC9B,QAAQ,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK;AAC1C,UAAU,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;AACnD,UAAU,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;AACpC,YAAY,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;AAChD,YAAY,IAAI,KAAK,EAAE;AACvB,cAAc,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,QAAQ,CAAC,+BAA+B,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC,EAAE;AAC1I,gBAAgB,UAAU,GAAG,IAAI;AACjC,gBAAgB,SAAS,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACxD,cAAc,CAAC,MAAM;AACrB,gBAAgB,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACjD,cAAc;AACd,YAAY;AACZ,UAAU;AACV,QAAQ,CAAC,CAAC;AACV,QAAQ,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK;AAC1C,UAAU,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;AACnD,UAAU,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;AACpC,YAAY,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;AAChD,YAAY,IAAI,KAAK,EAAE;AACvB,cAAc,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;AAC5D,YAAY;AACZ,UAAU;AACV,QAAQ,CAAC,CAAC;AACV,QAAQ,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,KAAK;AACpC,UAAU,YAAY,CAAC,OAAO,CAAC;AAC/B,UAAU,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC;AACjD,UAAU,UAAU,CAAC,KAAK,EAAE;AAC5B,QAAQ,CAAC,CAAC;AACV,QAAQ,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,KAAK;AACnC,UAAU,YAAY,CAAC,OAAO,CAAC;AAC/B,UAAU,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;AAC9D,UAAU,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;AACzC,UAAU,UAAU,CAAC,KAAK,EAAE;AAC5B,QAAQ,CAAC,CAAC;AACV,MAAM,CAAC,CAAC,OAAO,GAAG,EAAE;AACpB,QAAQ,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;AAC7E,QAAQ,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACvC,QAAQ,UAAU,CAAC,KAAK,EAAE;AAC1B,MAAM;AACN,IAAI;AACJ,GAAG,CAAC;AACJ,EAAE,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;AAC9B,IAAI,OAAO,EAAE;AACb,MAAM,cAAc,EAAE,mBAAmB;AACzC,MAAM,eAAe,EAAE,UAAU;AACjC,MAAM,UAAU,EAAE;AAClB;AACA,GAAG,CAAC;AACJ;AACK,MAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK;AAC9C,EAAE,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC7C,EAAE,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;AAC9C,IAAI,OAAO,IAAI,CAAC,MAAM,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE;AAC5D,MAAM,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU;AAC5C,KAAK,CAAC;AACN,EAAE;AACF,EAAE,IAAI,IAAI,GAAG,EAAE;AACf,EAAE,IAAI;AACN,IAAI,IAAI,GAAG,YAAY,CAAC,aAAa,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC;AAC9E,EAAE,CAAC,CAAC,MAAM;AACV,EAAE;AACF,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;AAC5B,IAAI,OAAO,EAAE;AACb,MAAM,cAAc,EAAE,2BAA2B;AACjD,MAAM,eAAe,EAAE;AACvB;AACA,GAAG,CAAC;AACJ;;;;"}

package/build/server/chunks/entries/endpoints/admin/api/users/_id_/{_server.ts.js-BEGaGEwg.js → _server.ts.js-7Efk1xkU.js}

@@ -1,10 +1,10 @@
 import { z } from 'zod';
-import { a as getPermissionStore, g as getAuthProvider, c as getDataProvider, d as getOrganizationProvider } from '../../../../../../chunks/providers.server.js-D0hpk-aq.js';
-import { e as requireManageInstanceUsers } from '../../../../../../chunks/access.server.js-D99g5hZd.js';
-import { a as apiError, t as throwZodError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-yRMzxqNi.js';
-import { S as SYSTEM_CONTEXT, h as hasPermission, D as DEFAULT_ORG_PERMISSIONS, M as MEMBER_ASSIGNABLE_PERMISSIONS, P as PlatformPermissionSchema, b as OrgPermissionSchema } from '../../../../../../chunks/context.js-D8E0GFTw.js';
-import { s as splitFlatPermissions } from '../../../../../../chunks/permissions-compat.server.js-BfoBZYSH.js';
-import { s as setUserPlatformPermissions } from '../../../../../../chunks/permissions.server.js-B9lpLFEj.js';
+import { a as getPermissionStore, g as getAuthProvider, c as getDataProvider, d as getOrganizationProvider } from '../../../../../../chunks/providers.server.js-CIHOepKv.js';
+import { e as requireManageInstanceUsers } from '../../../../../../chunks/access.server.js-_nJWuQcN.js';
+import { a as apiError, t as throwZodError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-DlfcfPJs.js';
+import { S as SYSTEM_CONTEXT, h as hasPermission, D as DEFAULT_ORG_PERMISSIONS, M as MEMBER_ASSIGNABLE_PERMISSIONS, P as PlatformPermissionSchema, b as OrgPermissionSchema } from '../../../../../../chunks/context.js-DsQGiS2x.js';
+import { s as splitFlatPermissions } from '../../../../../../chunks/permissions-compat.server.js-DNsLyriU.js';
+import { s as setUserPlatformPermissions } from '../../../../../../chunks/permissions.server.js-C3_SFjUh.js';
 import '../../../../../../chunks/shared-server.js-DaWdgxVh.js';
 import 'node:url';
 import 'node:path';
@@ -15,7 +15,7 @@ import '@supabase/supabase-js';
 import '@sveltejs/kit';
 import '@selvajs/compute/core';
 import '../../../../../../chunks/schema.js-j3D3emog.js';
-import '../../../../../../chunks/utils4.js-BRotGwxx.js';
+import '../../../../../../chunks/utils4.js-8SHxuGTr.js';
 
 const FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);
 const UpdatePermissionsBody = z.object({
@@ -104,4 +104,4 @@ const DELETE = async ({ params, locals }) => {
 };
 
 export { DELETE, PATCH };
-//# sourceMappingURL=_server.ts.js-BEGaGEwg.js.map
+//# sourceMappingURL=_server.ts.js-7Efk1xkU.js.map