@selvajs/selva 4.7.0 → 4.7.2

package/build/server/chunks/entries/endpoints/admin/api/projects/_server.ts.js-Gyjialsx.js

@@ -0,0 +1,103 @@
+import { S as SYSTEM_CONTEXT, s as slugify } from '../../../../../chunks/src.js-C5mUn1eC.js';
+import { k as flag, e as getOrganizationProvider, f as getProjectProvider, P as ProviderError } from '../../../../../chunks/providers.server.js-Wjp7cRza.js';
+import { i as requireInstanceAdmin } from '../../../../../chunks/access.server.js-CzBCyDoD.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-BLGSIpxK.js';
+import { json } from '@sveltejs/kit';
+import { z } from 'zod';
+import { randomUUID } from 'node:crypto';
+import '../../../../../chunks/shared-server.js-DA4m8f1m.js';
+import '../../../../../chunks/limits.js-BniDP5VZ.js';
+import '../../../../../chunks/chunk-Y3M7P3BW.js-qwxSY5dh.js';
+import '../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../chunks/utils2.js-DzUQOoCX.js';
+
+//#region src/routes/admin/api/projects/+server.ts
+var MAX_SLUG_ATTEMPTS = 25;
+function isSlugConflict(err) {
+	return err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);
+}
+function isNameConflict(err) {
+	return err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);
+}
+var CreatePlatformProjectBody = z.object({
+	name: z.string().min(1, "Project name is required").max(128).trim(),
+	description: z.string().max(2e3).optional(),
+	/**
+	* Org that physically hosts the project. Storage routing and compute
+	* resolution use this — but org membership in this org does NOT grant
+	* access. Visibility = 'platform' overrides those defaults.
+	*
+	* If omitted, the platform admin's first available org is used.
+	*/
+	orgId: z.string().uuid().optional()
+});
+/**
+* §4a — list every platform-visibility project on the instance. Uses
+* `SYSTEM_CONTEXT` because admin reads cross every org boundary; the route is
+* gated on `instance_admin`.
+*/
+var GET = async ({ locals }) => {
+	requireInstanceAdmin(locals);
+	if (!flag("ENABLE_PLATFORM_PROJECTS")) apiError(404, ApiErrorCode.NOT_FOUND, "Not found");
+	try {
+		const orgs = await getOrganizationProvider().listOrgs(SYSTEM_CONTEXT, { limit: 1e3 });
+		const all = [];
+		for (const org of orgs.items) {
+			const page = await getProjectProvider().listProjects(SYSTEM_CONTEXT, org.id, { limit: 1e3 });
+			for (const p of page.items) if (p.visibility === "platform") all.push(p);
+		}
+		return json({ projects: all });
+	} catch (err) {
+		handleApiError(err, "Failed to list platform projects");
+	}
+};
+var POST = async ({ request, locals }) => {
+	const user = requireInstanceAdmin(locals);
+	if (!flag("ENABLE_PLATFORM_PROJECTS")) apiError(404, ApiErrorCode.NOT_FOUND, "Not found");
+	const ctx = locals.ctx;
+	const body = await request.json().catch(() => null);
+	const parsed = CreatePlatformProjectBody.safeParse(body);
+	if (!parsed.success) throwZodError(parsed.error);
+	const hostOrgId = parsed.data.orgId ?? ctx.actingOrgId;
+	if (!hostOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "A host orgId is required (no active organization in context).");
+	if (!await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, hostOrgId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Host organization '${hostOrgId}' not found.`);
+	const projectStore = getProjectProvider();
+	const baseSlug = slugify(parsed.data.name) || "platform-project";
+	const now = (/* @__PURE__ */ new Date()).toISOString();
+	const projectId = randomUUID();
+	for (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {
+		const slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;
+		const project = {
+			id: projectId,
+			orgId: hostOrgId,
+			name: parsed.data.name,
+			slug,
+			description: parsed.data.description,
+			visibility: "platform",
+			ownerId: user.id,
+			createdBy: user.id,
+			updatedBy: user.id,
+			autoJoinOnUpload: false,
+			createdAt: now,
+			updatedAt: now,
+			deletedAt: null
+		};
+		try {
+			await projectStore.createProject(SYSTEM_CONTEXT, project);
+			return json(project, { status: 201 });
+		} catch (err) {
+			if (isNameConflict(err)) apiError(409, ApiErrorCode.CONFLICT, "A project with that name already exists in the host organization.");
+			if (isSlugConflict(err)) continue;
+			handleApiError(err, "Failed to create platform project");
+		}
+	}
+	apiError(409, ApiErrorCode.CONFLICT, "Could not pick a unique project slug after several attempts.");
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-Gyjialsx.js.map

package/build/server/chunks/entries/endpoints/admin/api/projects/_server.ts.js-Gyjialsx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-Gyjialsx.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/admin/api/projects/_server.ts.js"],"sourcesContent":["import { t as SYSTEM_CONTEXT, w as slugify } from \"../../../../../chunks/src.js\";\nimport { M as ProviderError, _ as getProjectProvider, m as getOrganizationProvider, t as flag } from \"../../../../../chunks/providers.server.js\";\nimport { _ as requireInstanceAdmin } from \"../../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { z } from \"zod\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/admin/api/projects/+server.ts\nvar MAX_SLUG_ATTEMPTS = 25;\nfunction isSlugConflict(err) {\n\treturn err instanceof ProviderError && err.statusCode === 409 && /projects_org_id_slug_key/.test(err.message);\n}\nfunction isNameConflict(err) {\n\treturn err instanceof ProviderError && err.statusCode === 409 && /projects_org_name_unique/.test(err.message);\n}\nvar CreatePlatformProjectBody = z.object({\n\tname: z.string().min(1, \"Project name is required\").max(128).trim(),\n\tdescription: z.string().max(2e3).optional(),\n\t/**\n\t* Org that physically hosts the project. Storage routing and compute\n\t* resolution use this — but org membership in this org does NOT grant\n\t* access. Visibility = 'platform' overrides those defaults.\n\t*\n\t* If omitted, the platform admin's first available org is used.\n\t*/\n\torgId: z.string().uuid().optional()\n});\n/**\n* §4a — list every platform-visibility project on the instance. Uses\n* `SYSTEM_CONTEXT` because admin reads cross every org boundary; the route is\n* gated on `instance_admin`.\n*/\nvar GET = async ({ locals }) => {\n\trequireInstanceAdmin(locals);\n\tif (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n\ttry {\n\t\tconst orgs = await getOrganizationProvider().listOrgs(SYSTEM_CONTEXT, { limit: 1e3 });\n\t\tconst all = [];\n\t\tfor (const org of orgs.items) {\n\t\t\tconst page = await getProjectProvider().listProjects(SYSTEM_CONTEXT, org.id, { limit: 1e3 });\n\t\t\tfor (const p of page.items) if (p.visibility === \"platform\") all.push(p);\n\t\t}\n\t\treturn json({ projects: all });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to list platform projects\");\n\t}\n};\nvar POST = async ({ request, locals }) => {\n\tconst user = requireInstanceAdmin(locals);\n\tif (!flag(\"ENABLE_PLATFORM_PROJECTS\")) apiError(404, ApiErrorCode.NOT_FOUND, \"Not found\");\n\tconst ctx = locals.ctx;\n\tconst body = await request.json().catch(() => null);\n\tconst parsed = CreatePlatformProjectBody.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\tconst hostOrgId = parsed.data.orgId ?? ctx.actingOrgId;\n\tif (!hostOrgId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"A host orgId is required (no active organization in context).\");\n\tif (!await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, hostOrgId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, `Host organization '${hostOrgId}' not found.`);\n\tconst projectStore = getProjectProvider();\n\tconst baseSlug = slugify(parsed.data.name) || \"platform-project\";\n\tconst now = (/* @__PURE__ */ new Date()).toISOString();\n\tconst projectId = randomUUID();\n\tfor (let attempt = 0; attempt < MAX_SLUG_ATTEMPTS; attempt++) {\n\t\tconst slug = attempt === 0 ? baseSlug : `${baseSlug}-${attempt + 1}`;\n\t\tconst project = {\n\t\t\tid: projectId,\n\t\t\torgId: hostOrgId,\n\t\t\tname: parsed.data.name,\n\t\t\tslug,\n\t\t\tdescription: parsed.data.description,\n\t\t\tvisibility: \"platform\",\n\t\t\townerId: user.id,\n\t\t\tcreatedBy: user.id,\n\t\t\tupdatedBy: user.id,\n\t\t\tautoJoinOnUpload: false,\n\t\t\tcreatedAt: now,\n\t\t\tupdatedAt: now,\n\t\t\tdeletedAt: null\n\t\t};\n\t\ttry {\n\t\t\tawait projectStore.createProject(SYSTEM_CONTEXT, project);\n\t\t\treturn json(project, { status: 201 });\n\t\t} catch (err) {\n\t\t\tif (isNameConflict(err)) apiError(409, ApiErrorCode.CONFLICT, \"A project with that name already exists in the host organization.\");\n\t\t\tif (isSlugConflict(err)) continue;\n\t\t\thandleApiError(err, \"Failed to create platform project\");\n\t\t}\n\t}\n\tapiError(409, ApiErrorCode.CONFLICT, \"Could not pick a unique project slug after several attempts.\");\n};\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAOA;AACA,IAAI,iBAAiB,GAAG,EAAE;AAC1B,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,CAAC,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC9G;AACA,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,CAAC,OAAO,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC9G;AACA,IAAI,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;AACzC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;AACpE,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;AAC5C;AACA;AACA;AACA;AACA;AACA;AACA;AACA,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ;AAClC,CAAC,CAAC;AACF;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAChC,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC1F,CAAC,IAAI;AACL,EAAE,MAAM,IAAI,GAAG,MAAM,uBAAuB,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACvF,EAAE,MAAM,GAAG,GAAG,EAAE;AAChB,EAAE,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE;AAChC,GAAG,MAAM,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAC/F,GAAG,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3E,EAAE;AACF,EAAE,OAAO,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AAChC,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,kCAAkC,CAAC;AACzD,CAAC;AACD;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC1C,CAAC,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC1C,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC;AAC1F,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC;AACzD,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,WAAW;AACvD,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,+DAA+D,CAAC;AAC/H,CAAC,IAAI,CAAC,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;AACrK,CAAC,MAAM,YAAY,GAAG,kBAAkB,EAAE;AAC1C,CAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,kBAAkB;AACjE,CAAC,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACvD,CAAC,MAAM,SAAS,GAAG,UAAU,EAAE;AAC/B,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,iBAAiB,EAAE,OAAO,EAAE,EAAE;AAC/D,EAAE,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;AACtE,EAAE,MAAM,OAAO,GAAG;AAClB,GAAG,EAAE,EAAE,SAAS;AAChB,GAAG,KAAK,EAAE,SAAS;AACnB,GAAG,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AACzB,GAAG,IAAI;AACP,GAAG,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;AACvC,GAAG,UAAU,EAAE,UAAU;AACzB,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE;AACnB,GAAG,SAAS,EAAE,IAAI,CAAC,EAAE;AACrB,GAAG,SAAS,EAAE,IAAI,CAAC,EAAE;AACrB,GAAG,gBAAgB,EAAE,KAAK;AAC1B,GAAG,SAAS,EAAE,GAAG;AACjB,GAAG,SAAS,EAAE,GAAG;AACjB,GAAG,SAAS,EAAE;AACd,GAAG;AACH,EAAE,IAAI;AACN,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC;AAC5D,GAAG,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACxC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,mEAAmE,CAAC;AACrI,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE;AAC5B,GAAG,cAAc,CAAC,GAAG,EAAE,mCAAmC,CAAC;AAC3D,EAAE;AACF,CAAC;AACD,CAAC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,8DAA8D,CAAC;AACrG;;;;"}

package/build/server/chunks/entries/endpoints/admin/api/system/health/_server.ts.js-DSpJSpmq.js

@@ -0,0 +1,208 @@
+import { b as private_env } from '../../../../../../chunks/shared-server.js-DA4m8f1m.js';
+import '../../../../../../chunks/src.js-C5mUn1eC.js';
+import { p as providers, n as getComputeServerConfigStore, L as LocalComputeServerStore } from '../../../../../../chunks/providers.server.js-Wjp7cRza.js';
+import { f as findServerById } from '../../../../../../chunks/utils2.js-DzUQOoCX.js';
+import { r as requirePermission } from '../../../../../../chunks/access.server.js-CzBCyDoD.js';
+import { json } from '@sveltejs/kit';
+import { randomUUID } from 'node:crypto';
+import { resolve, join } from 'node:path';
+import { mkdir, writeFile, unlink } from 'node:fs/promises';
+import 'zod';
+import '../../../../../../chunks/limits.js-BniDP5VZ.js';
+import '../../../../../../chunks/chunk-Y3M7P3BW.js-qwxSY5dh.js';
+import '../../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:url';
+import 'node:fs';
+import '@supabase/supabase-js';
+
+//#region src/routes/admin/api/system/health/+server.ts
+function atRestSecretsCheck(report) {
+	const base = {
+		id: "at-rest-secrets",
+		label: "Compute server secrets"
+	};
+	if (report === null) return {
+		...base,
+		status: "not_applicable",
+		summary: "The active data provider does not encrypt secrets at this layer — nothing to verify."
+	};
+	if (report.ok) return {
+		...base,
+		status: "ok",
+		summary: "All stored compute server API keys decrypt under the current SELVA_AT_REST_KEY."
+	};
+	const failed = report.failures.map((f) => `"${f.serverLabel}" (${f.reason}${f.cause ? `: ${f.cause}` : ""})`).join(", ");
+	const plaintext = report.plaintextFound;
+	return {
+		...base,
+		status: "degraded",
+		summary: `${report.failures.length} compute server key(s) could not be loaded: ${failed}.`,
+		remediation: plaintext ? "A key is stored in plaintext on disk — re-enter it via /admin/compute so it is encrypted." : "The stored ciphertext does not match the current SELVA_AT_REST_KEY (rotated key or restored backup). Re-enter the affected keys via /admin/compute, or restore the original SELVA_AT_REST_KEY, then run this check again."
+	};
+}
+function schemaVersionCheck(report) {
+	const base = {
+		id: "schema-version",
+		label: "Database schema"
+	};
+	if (report === null) return {
+		...base,
+		status: "not_applicable",
+		summary: "The active data provider migrates with the app — there is no separate schema to verify."
+	};
+	if (report.ok) return {
+		...base,
+		status: "ok",
+		summary: `Database migration head ${report.actual} satisfies the app's expected ${report.expected}.`
+	};
+	return {
+		...base,
+		status: "degraded",
+		summary: report.message ?? `Database migration head ${report.actual ?? "unavailable"} is behind the app's expected ${report.expected}.`,
+		remediation: "Sync the provider migrations into your Supabase project and run `npx supabase db push`, then restart the app. `selva doctor` runs the same check from the CLI."
+	};
+}
+var COMPUTE_PING_TIMEOUT_MS = 8e3;
+/**
+* Ping the global default compute server's `/healthcheck`. We probe the
+* default specifically because that's the server every solve falls back to;
+* a degraded default breaks the baseline for all orgs. Org-private and
+* non-default platform servers are out of scope here — they have their own
+* per-server status probe at /admin/api/compute/status.
+*/
+async function computeReachabilityCheck(locals) {
+	const base = {
+		id: "compute-reachable",
+		label: "Default compute server"
+	};
+	let config;
+	try {
+		config = await getComputeServerConfigStore().getConfig(locals.ctx);
+	} catch (err) {
+		return {
+			...base,
+			status: "error",
+			summary: `Could not read compute config: ${err instanceof Error ? err.message : String(err)}`
+		};
+	}
+	const server = config.defaultServerId ? findServerById(config, config.defaultServerId) : void 0;
+	if (!server) return {
+		...base,
+		status: "not_applicable",
+		summary: "No default compute server is configured — nothing to reach.",
+		remediation: "Add a server and set it as default in /admin/compute."
+	};
+	const controller = new AbortController();
+	const timer = setTimeout(() => controller.abort(), COMPUTE_PING_TIMEOUT_MS);
+	try {
+		const headers = {};
+		if (server.hasApiKey) {
+			const apiKey = await getComputeServerConfigStore().getServerApiKey(locals.ctx, server.id);
+			if (apiKey) headers["RhinoComputeKey"] = apiKey;
+		}
+		const res = await fetch(new URL("/healthcheck", server.serverUrl).toString(), {
+			signal: controller.signal,
+			headers
+		});
+		if (res.ok) return {
+			...base,
+			status: "ok",
+			summary: `"${server.label}" answered /healthcheck (200).`
+		};
+		return {
+			...base,
+			status: "degraded",
+			summary: `"${server.label}" responded ${res.status} to /healthcheck.`,
+			remediation: res.status === 401 || res.status === 403 ? "Authentication rejected — verify the API key in /admin/compute." : "The server is reachable but unhealthy. Check the Rhino.Compute host."
+		};
+	} catch (err) {
+		const aborted = err instanceof Error && err.name === "AbortError";
+		return {
+			...base,
+			status: "degraded",
+			summary: aborted ? `"${server.label}" did not respond within ${COMPUTE_PING_TIMEOUT_MS / 1e3}s.` : `"${server.label}" is unreachable: ${err instanceof Error ? err.message : String(err)}.`,
+			remediation: `Confirm the Rhino.Compute host is running and ${server.serverUrl} is correct.`
+		};
+	} finally {
+		clearTimeout(timer);
+	}
+}
+/**
+* Write + delete a temp file under DATA_PATH to prove the local provider can
+* still persist. The JSON stores read-modify-write without a fallback, so a
+* full disk or a permission change (e.g. ownership drift after a restore)
+* corrupts data on the next write — catch it here while it's still just a
+* failed health check.
+*/
+async function dataPathWritableCheck() {
+	const base = {
+		id: "data-path-writable",
+		label: "Data path writable"
+	};
+	if (!(providers.data.computeServer instanceof LocalComputeServerStore)) return {
+		...base,
+		status: "not_applicable",
+		summary: "The active data provider does not persist to a local DATA_PATH."
+	};
+	const dataPath = private_env.DATA_PATH;
+	if (!dataPath) return {
+		...base,
+		status: "error",
+		summary: "DATA_PATH is unset but the local provider is active.",
+		remediation: "Set DATA_PATH in .env and restart."
+	};
+	const absolute = resolve(dataPath);
+	const probe = join(absolute, `.health-probe-${randomUUID()}`);
+	try {
+		await mkdir(absolute, { recursive: true });
+		await writeFile(probe, "ok");
+		await unlink(probe);
+		return {
+			...base,
+			status: "ok",
+			summary: `DATA_PATH (${dataPath}) is writable.`
+		};
+	} catch (err) {
+		return {
+			...base,
+			status: "degraded",
+			summary: `DATA_PATH (${dataPath}) is not writable: ${err instanceof Error ? err.message : String(err)}.`,
+			remediation: "Check free disk space and that the directory is owned by the user running the app (`df -h`, `ls -la`)."
+		};
+	}
+}
+var GET = async ({ locals }) => {
+	requirePermission(locals, "instance_admin");
+	const checks = [];
+	const store = providers.data.computeServer;
+	if (typeof store.verifySecrets === "function") try {
+		checks.push(atRestSecretsCheck(await store.verifySecrets()));
+	} catch (err) {
+		checks.push({
+			id: "at-rest-secrets",
+			label: "Compute server secrets",
+			status: "error",
+			summary: `Verification threw: ${err instanceof Error ? err.message : String(err)}`,
+			remediation: "Check server logs (`pm2 logs selva-compute`) for the underlying error."
+		});
+	}
+	else checks.push(atRestSecretsCheck(null));
+	const data = providers.data;
+	if (typeof data.verifySchemaVersion === "function") checks.push(schemaVersionCheck(await data.verifySchemaVersion()));
+	else checks.push(schemaVersionCheck(null));
+	checks.push(...await Promise.all([computeReachabilityCheck(locals), dataPathWritableCheck()]));
+	const rank = {
+		ok: 0,
+		not_applicable: 0,
+		degraded: 2,
+		error: 3
+	};
+	return json({
+		overall: checks.reduce((worst, c) => rank[c.status] > rank[worst] ? c.status : worst, "ok"),
+		checkedAt: (/* @__PURE__ */ new Date()).toISOString(),
+		checks
+	});
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-DSpJSpmq.js.map

package/build/server/chunks/entries/endpoints/admin/api/system/health/_server.ts.js-DSpJSpmq.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-DSpJSpmq.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/admin/api/system/health/_server.ts.js"],"sourcesContent":["import { t as private_env } from \"../../../../../../chunks/shared-server.js\";\nimport \"../../../../../../chunks/src.js\";\nimport { C as providers, D as LocalComputeServerStore, a as getComputeServerConfigStore } from \"../../../../../../chunks/providers.server.js\";\nimport { n as findServerById } from \"../../../../../../chunks/utils2.js\";\nimport { S as requirePermission } from \"../../../../../../chunks/access.server.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\nimport { join, resolve } from \"node:path\";\nimport { mkdir, unlink, writeFile } from \"node:fs/promises\";\n//#region src/routes/admin/api/system/health/+server.ts\nfunction atRestSecretsCheck(report) {\n\tconst base = {\n\t\tid: \"at-rest-secrets\",\n\t\tlabel: \"Compute server secrets\"\n\t};\n\tif (report === null) return {\n\t\t...base,\n\t\tstatus: \"not_applicable\",\n\t\tsummary: \"The active data provider does not encrypt secrets at this layer — nothing to verify.\"\n\t};\n\tif (report.ok) return {\n\t\t...base,\n\t\tstatus: \"ok\",\n\t\tsummary: \"All stored compute server API keys decrypt under the current SELVA_AT_REST_KEY.\"\n\t};\n\tconst failed = report.failures.map((f) => `\"${f.serverLabel}\" (${f.reason}${f.cause ? `: ${f.cause}` : \"\"})`).join(\", \");\n\tconst plaintext = report.plaintextFound;\n\treturn {\n\t\t...base,\n\t\tstatus: \"degraded\",\n\t\tsummary: `${report.failures.length} compute server key(s) could not be loaded: ${failed}.`,\n\t\tremediation: plaintext ? \"A key is stored in plaintext on disk — re-enter it via /admin/compute so it is encrypted.\" : \"The stored ciphertext does not match the current SELVA_AT_REST_KEY (rotated key or restored backup). Re-enter the affected keys via /admin/compute, or restore the original SELVA_AT_REST_KEY, then run this check again.\"\n\t};\n}\nfunction schemaVersionCheck(report) {\n\tconst base = {\n\t\tid: \"schema-version\",\n\t\tlabel: \"Database schema\"\n\t};\n\tif (report === null) return {\n\t\t...base,\n\t\tstatus: \"not_applicable\",\n\t\tsummary: \"The active data provider migrates with the app — there is no separate schema to verify.\"\n\t};\n\tif (report.ok) return {\n\t\t...base,\n\t\tstatus: \"ok\",\n\t\tsummary: `Database migration head ${report.actual} satisfies the app's expected ${report.expected}.`\n\t};\n\treturn {\n\t\t...base,\n\t\tstatus: \"degraded\",\n\t\tsummary: report.message ?? `Database migration head ${report.actual ?? \"unavailable\"} is behind the app's expected ${report.expected}.`,\n\t\tremediation: \"Sync the provider migrations into your Supabase project and run `npx supabase db push`, then restart the app. `selva doctor` runs the same check from the CLI.\"\n\t};\n}\nvar COMPUTE_PING_TIMEOUT_MS = 8e3;\n/**\n* Ping the global default compute server's `/healthcheck`. We probe the\n* default specifically because that's the server every solve falls back to;\n* a degraded default breaks the baseline for all orgs. Org-private and\n* non-default platform servers are out of scope here — they have their own\n* per-server status probe at /admin/api/compute/status.\n*/\nasync function computeReachabilityCheck(locals) {\n\tconst base = {\n\t\tid: \"compute-reachable\",\n\t\tlabel: \"Default compute server\"\n\t};\n\tlet config;\n\ttry {\n\t\tconfig = await getComputeServerConfigStore().getConfig(locals.ctx);\n\t} catch (err) {\n\t\treturn {\n\t\t\t...base,\n\t\t\tstatus: \"error\",\n\t\t\tsummary: `Could not read compute config: ${err instanceof Error ? err.message : String(err)}`\n\t\t};\n\t}\n\tconst server = config.defaultServerId ? findServerById(config, config.defaultServerId) : void 0;\n\tif (!server) return {\n\t\t...base,\n\t\tstatus: \"not_applicable\",\n\t\tsummary: \"No default compute server is configured — nothing to reach.\",\n\t\tremediation: \"Add a server and set it as default in /admin/compute.\"\n\t};\n\tconst controller = new AbortController();\n\tconst timer = setTimeout(() => controller.abort(), COMPUTE_PING_TIMEOUT_MS);\n\ttry {\n\t\tconst headers = {};\n\t\tif (server.hasApiKey) {\n\t\t\tconst apiKey = await getComputeServerConfigStore().getServerApiKey(locals.ctx, server.id);\n\t\t\tif (apiKey) headers[\"RhinoComputeKey\"] = apiKey;\n\t\t}\n\t\tconst res = await fetch(new URL(\"/healthcheck\", server.serverUrl).toString(), {\n\t\t\tsignal: controller.signal,\n\t\t\theaders\n\t\t});\n\t\tif (res.ok) return {\n\t\t\t...base,\n\t\t\tstatus: \"ok\",\n\t\t\tsummary: `\"${server.label}\" answered /healthcheck (200).`\n\t\t};\n\t\treturn {\n\t\t\t...base,\n\t\t\tstatus: \"degraded\",\n\t\t\tsummary: `\"${server.label}\" responded ${res.status} to /healthcheck.`,\n\t\t\tremediation: res.status === 401 || res.status === 403 ? \"Authentication rejected — verify the API key in /admin/compute.\" : \"The server is reachable but unhealthy. Check the Rhino.Compute host.\"\n\t\t};\n\t} catch (err) {\n\t\tconst aborted = err instanceof Error && err.name === \"AbortError\";\n\t\treturn {\n\t\t\t...base,\n\t\t\tstatus: \"degraded\",\n\t\t\tsummary: aborted ? `\"${server.label}\" did not respond within ${COMPUTE_PING_TIMEOUT_MS / 1e3}s.` : `\"${server.label}\" is unreachable: ${err instanceof Error ? err.message : String(err)}.`,\n\t\t\tremediation: `Confirm the Rhino.Compute host is running and ${server.serverUrl} is correct.`\n\t\t};\n\t} finally {\n\t\tclearTimeout(timer);\n\t}\n}\n/**\n* Write + delete a temp file under DATA_PATH to prove the local provider can\n* still persist. The JSON stores read-modify-write without a fallback, so a\n* full disk or a permission change (e.g. ownership drift after a restore)\n* corrupts data on the next write — catch it here while it's still just a\n* failed health check.\n*/\nasync function dataPathWritableCheck() {\n\tconst base = {\n\t\tid: \"data-path-writable\",\n\t\tlabel: \"Data path writable\"\n\t};\n\tif (!(providers.data.computeServer instanceof LocalComputeServerStore)) return {\n\t\t...base,\n\t\tstatus: \"not_applicable\",\n\t\tsummary: \"The active data provider does not persist to a local DATA_PATH.\"\n\t};\n\tconst dataPath = private_env.DATA_PATH;\n\tif (!dataPath) return {\n\t\t...base,\n\t\tstatus: \"error\",\n\t\tsummary: \"DATA_PATH is unset but the local provider is active.\",\n\t\tremediation: \"Set DATA_PATH in .env and restart.\"\n\t};\n\tconst absolute = resolve(dataPath);\n\tconst probe = join(absolute, `.health-probe-${randomUUID()}`);\n\ttry {\n\t\tawait mkdir(absolute, { recursive: true });\n\t\tawait writeFile(probe, \"ok\");\n\t\tawait unlink(probe);\n\t\treturn {\n\t\t\t...base,\n\t\t\tstatus: \"ok\",\n\t\t\tsummary: `DATA_PATH (${dataPath}) is writable.`\n\t\t};\n\t} catch (err) {\n\t\treturn {\n\t\t\t...base,\n\t\t\tstatus: \"degraded\",\n\t\t\tsummary: `DATA_PATH (${dataPath}) is not writable: ${err instanceof Error ? err.message : String(err)}.`,\n\t\t\tremediation: \"Check free disk space and that the directory is owned by the user running the app (`df -h`, `ls -la`).\"\n\t\t};\n\t}\n}\nvar GET = async ({ locals }) => {\n\trequirePermission(locals, \"instance_admin\");\n\tconst checks = [];\n\tconst store = providers.data.computeServer;\n\tif (typeof store.verifySecrets === \"function\") try {\n\t\tchecks.push(atRestSecretsCheck(await store.verifySecrets()));\n\t} catch (err) {\n\t\tchecks.push({\n\t\t\tid: \"at-rest-secrets\",\n\t\t\tlabel: \"Compute server secrets\",\n\t\t\tstatus: \"error\",\n\t\t\tsummary: `Verification threw: ${err instanceof Error ? err.message : String(err)}`,\n\t\t\tremediation: \"Check server logs (`pm2 logs selva-compute`) for the underlying error.\"\n\t\t});\n\t}\n\telse checks.push(atRestSecretsCheck(null));\n\tconst data = providers.data;\n\tif (typeof data.verifySchemaVersion === \"function\") checks.push(schemaVersionCheck(await data.verifySchemaVersion()));\n\telse checks.push(schemaVersionCheck(null));\n\tchecks.push(...await Promise.all([computeReachabilityCheck(locals), dataPathWritableCheck()]));\n\tconst rank = {\n\t\tok: 0,\n\t\tnot_applicable: 0,\n\t\tdegraded: 2,\n\t\terror: 3\n\t};\n\treturn json({\n\t\toverall: checks.reduce((worst, c) => rank[c.status] > rank[worst] ? c.status : worst, \"ok\"),\n\t\tcheckedAt: (/* @__PURE__ */ new Date()).toISOString(),\n\t\tchecks\n\t});\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AASA;AACA,SAAS,kBAAkB,CAAC,MAAM,EAAE;AACpC,CAAC,MAAM,IAAI,GAAG;AACd,EAAE,EAAE,EAAE,iBAAiB;AACvB,EAAE,KAAK,EAAE;AACT,EAAE;AACF,CAAC,IAAI,MAAM,KAAK,IAAI,EAAE,OAAO;AAC7B,EAAE,GAAG,IAAI;AACT,EAAE,MAAM,EAAE,gBAAgB;AAC1B,EAAE,OAAO,EAAE;AACX,EAAE;AACF,CAAC,IAAI,MAAM,CAAC,EAAE,EAAE,OAAO;AACvB,EAAE,GAAG,IAAI;AACT,EAAE,MAAM,EAAE,IAAI;AACd,EAAE,OAAO,EAAE;AACX,EAAE;AACF,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AACzH,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc;AACxC,CAAC,OAAO;AACR,EAAE,GAAG,IAAI;AACT,EAAE,MAAM,EAAE,UAAU;AACpB,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,4CAA4C,EAAE,MAAM,CAAC,CAAC,CAAC;AAC5F,EAAE,WAAW,EAAE,SAAS,GAAG,2FAA2F,GAAG;AACzH,EAAE;AACF;AACA,SAAS,kBAAkB,CAAC,MAAM,EAAE;AACpC,CAAC,MAAM,IAAI,GAAG;AACd,EAAE,EAAE,EAAE,gBAAgB;AACtB,EAAE,KAAK,EAAE;AACT,EAAE;AACF,CAAC,IAAI,MAAM,KAAK,IAAI,EAAE,OAAO;AAC7B,EAAE,GAAG,IAAI;AACT,EAAE,MAAM,EAAE,gBAAgB;AAC1B,EAAE,OAAO,EAAE;AACX,EAAE;AACF,CAAC,IAAI,MAAM,CAAC,EAAE,EAAE,OAAO;AACvB,EAAE,GAAG,IAAI;AACT,EAAE,MAAM,EAAE,IAAI;AACd,EAAE,OAAO,EAAE,CAAC,wBAAwB,EAAE,MAAM,CAAC,MAAM,CAAC,8BAA8B,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;AACrG,EAAE;AACF,CAAC,OAAO;AACR,EAAE,GAAG,IAAI;AACT,EAAE,MAAM,EAAE,UAAU;AACpB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC,wBAAwB,EAAE,MAAM,CAAC,MAAM,IAAI,aAAa,CAAC,8BAA8B,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzI,EAAE,WAAW,EAAE;AACf,EAAE;AACF;AACA,IAAI,uBAAuB,GAAG,GAAG;AACjC;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,wBAAwB,CAAC,MAAM,EAAE;AAChD,CAAC,MAAM,IAAI,GAAG;AACd,EAAE,EAAE,EAAE,mBAAmB;AACzB,EAAE,KAAK,EAAE;AACT,EAAE;AACF,CAAC,IAAI,MAAM;AACX,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;AACpE,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,OAAO;AACT,GAAG,GAAG,IAAI;AACV,GAAG,MAAM,EAAE,OAAO;AAClB,GAAG,OAAO,EAAE,CAAC,+BAA+B,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;AAC/F,GAAG;AACH,CAAC;AACD,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,GAAG,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,GAAG,MAAM;AAChG,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO;AACrB,EAAE,GAAG,IAAI;AACT,EAAE,MAAM,EAAE,gBAAgB;AAC1B,EAAE,OAAO,EAAE,6DAA6D;AACxE,EAAE,WAAW,EAAE;AACf,EAAE;AACF,CAAC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE;AACzC,CAAC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,uBAAuB,CAAC;AAC5E,CAAC,IAAI;AACL,EAAE,MAAM,OAAO,GAAG,EAAE;AACpB,EAAE,IAAI,MAAM,CAAC,SAAS,EAAE;AACxB,GAAG,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;AAC5F,GAAG,IAAI,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,MAAM;AAClD,EAAE;AACF,EAAE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE;AAChF,GAAG,MAAM,EAAE,UAAU,CAAC,MAAM;AAC5B,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,IAAI,GAAG,CAAC,EAAE,EAAE,OAAO;AACrB,GAAG,GAAG,IAAI;AACV,GAAG,MAAM,EAAE,IAAI;AACf,GAAG,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,8BAA8B;AAC3D,GAAG;AACH,EAAE,OAAO;AACT,GAAG,GAAG,IAAI;AACV,GAAG,MAAM,EAAE,UAAU;AACrB,GAAG,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC;AACxE,GAAG,WAAW,EAAE,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,GAAG,iEAAiE,GAAG;AAC/H,GAAG;AACH,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;AACnE,EAAE,OAAO;AACT,GAAG,GAAG,IAAI;AACV,GAAG,MAAM,EAAE,UAAU;AACrB,GAAG,OAAO,EAAE,OAAO,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,uBAAuB,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC9L,GAAG,WAAW,EAAE,CAAC,8CAA8C,EAAE,MAAM,CAAC,SAAS,CAAC,YAAY;AAC9F,GAAG;AACH,CAAC,CAAC,SAAS;AACX,EAAE,YAAY,CAAC,KAAK,CAAC;AACrB,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,qBAAqB,GAAG;AACvC,CAAC,MAAM,IAAI,GAAG;AACd,EAAE,EAAE,EAAE,oBAAoB;AAC1B,EAAE,KAAK,EAAE;AACT,EAAE;AACF,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,aAAa,YAAY,uBAAuB,CAAC,EAAE,OAAO;AAChF,EAAE,GAAG,IAAI;AACT,EAAE,MAAM,EAAE,gBAAgB;AAC1B,EAAE,OAAO,EAAE;AACX,EAAE;AACF,CAAC,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS;AACvC,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO;AACvB,EAAE,GAAG,IAAI;AACT,EAAE,MAAM,EAAE,OAAO;AACjB,EAAE,OAAO,EAAE,sDAAsD;AACjE,EAAE,WAAW,EAAE;AACf,EAAE;AACF,CAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;AACnC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;AAC9D,CAAC,IAAI;AACL,EAAE,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC5C,EAAE,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC;AAC9B,EAAE,MAAM,MAAM,CAAC,KAAK,CAAC;AACrB,EAAE,OAAO;AACT,GAAG,GAAG,IAAI;AACV,GAAG,MAAM,EAAE,IAAI;AACf,GAAG,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,cAAc;AACjD,GAAG;AACH,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,OAAO;AACT,GAAG,GAAG,IAAI;AACV,GAAG,MAAM,EAAE,UAAU;AACrB,GAAG,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,mBAAmB,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC3G,GAAG,WAAW,EAAE;AAChB,GAAG;AACH,CAAC;AACD;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAChC,CAAC,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC5C,CAAC,MAAM,MAAM,GAAG,EAAE;AAClB,CAAC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa;AAC3C,CAAC,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,UAAU,EAAE,IAAI;AACpD,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;AAC9D,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,CAAC,IAAI,CAAC;AACd,GAAG,EAAE,EAAE,iBAAiB;AACxB,GAAG,KAAK,EAAE,wBAAwB;AAClC,GAAG,MAAM,EAAE,OAAO;AAClB,GAAG,OAAO,EAAE,CAAC,oBAAoB,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AACrF,GAAG,WAAW,EAAE;AAChB,GAAG,CAAC;AACJ,CAAC;AACD,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI;AAC5B,CAAC,IAAI,OAAO,IAAI,CAAC,mBAAmB,KAAK,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;AACtH,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;AAC/F,CAAC,MAAM,IAAI,GAAG;AACd,EAAE,EAAE,EAAE,CAAC;AACP,EAAE,cAAc,EAAE,CAAC;AACnB,EAAE,QAAQ,EAAE,CAAC;AACb,EAAE,KAAK,EAAE;AACT,EAAE;AACF,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,KAAK,EAAE,IAAI,CAAC;AAC7F,EAAE,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACvD,EAAE;AACF,EAAE,CAAC;AACH;;;;"}

package/build/server/chunks/entries/endpoints/admin/api/system/throughput/_server.ts.js-BjnIUQv7.js

@@ -0,0 +1,90 @@
+import { r as requirePermission } from '../../../../../../chunks/access.server.js-CzBCyDoD.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-BLGSIpxK.js';
+import { json } from '@sveltejs/kit';
+import { randomFillSync } from 'node:crypto';
+import '../../../../../../chunks/src.js-C5mUn1eC.js';
+import 'zod';
+import '../../../../../../chunks/providers.server.js-Wjp7cRza.js';
+import '../../../../../../chunks/shared-server.js-DA4m8f1m.js';
+import '../../../../../../chunks/limits.js-BniDP5VZ.js';
+import '../../../../../../chunks/chunk-Y3M7P3BW.js-qwxSY5dh.js';
+import '../../../../../../chunks/schema.js-BhmknPcU.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/utils2.js-DzUQOoCX.js';
+
+//#region src/routes/admin/api/system/throughput/+server.ts
+/**
+* Network throughput probe for the /admin/system page. Measures the transport
+* path between the operator's browser and this server — through whatever
+* proxies/tunnels sit in between (reverse proxy, SSO relays such as Azure App
+* Proxy) — with zero compute involvement:
+*
+*   GET  ?mb=N  → streams N MB of random bytes (download direction)
+*   POST        → consumes and discards the request body, returns the
+*                 server-side receive duration (upload direction)
+*
+* Random bytes are deliberately incompressible so proxy compression can't fake
+* a fast transfer. `instance_admin` only — a bandwidth probe is an operator
+* tool, and the download side is a data faucet.
+*
+* A curl-friendly, env-flag-gated sibling exists at /api/diag/throughput for
+* shell-based testing (documented in docs/deployment/app-proxy-migration.md);
+* this endpoint is the browser/UI counterpart that also works behind SSO
+* proxies where curl can't authenticate.
+*/
+var CHUNK_BYTES = 1024 * 1024;
+var DOWNLOAD_DEFAULT_MB = 20;
+var DOWNLOAD_MAX_MB = 256;
+var UPLOAD_MAX_BYTES = 256 * 1024 * 1024;
+var GET = async ({ locals, url }) => {
+	requirePermission(locals, "instance_admin");
+	const requested = Number(url.searchParams.get("mb"));
+	const mb = Math.min(DOWNLOAD_MAX_MB, Math.max(1, Number.isFinite(requested) ? requested : DOWNLOAD_DEFAULT_MB));
+	let sentChunks = 0;
+	const stream = new ReadableStream({ pull(controller) {
+		if (sentChunks >= mb) {
+			controller.close();
+			return;
+		}
+		const chunk = new Uint8Array(CHUNK_BYTES);
+		randomFillSync(chunk);
+		controller.enqueue(chunk);
+		sentChunks++;
+	} });
+	return new Response(stream, { headers: {
+		"Content-Type": "application/octet-stream",
+		"Content-Length": String(mb * CHUNK_BYTES),
+		"Cache-Control": "no-store"
+	} });
+};
+var POST = async ({ locals, request }) => {
+	requirePermission(locals, "instance_admin");
+	const declared = Number(request.headers.get("content-length"));
+	if (Number.isFinite(declared) && declared > UPLOAD_MAX_BYTES) apiError(413, ApiErrorCode.VALIDATION_FAILED, "Upload exceeds the 256 MB probe limit");
+	if (!request.body) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing request body");
+	const start = performance.now();
+	const reader = request.body.getReader();
+	let bytes = 0;
+	while (true) {
+		const { done, value } = await reader.read();
+		if (done) break;
+		bytes += value.byteLength;
+		if (bytes > UPLOAD_MAX_BYTES) {
+			await reader.cancel();
+			apiError(413, ApiErrorCode.VALIDATION_FAILED, "Upload exceeds the 256 MB probe limit");
+		}
+	}
+	const ms = performance.now() - start;
+	return json({
+		bytes,
+		ms: Math.round(ms),
+		mbps: ms > 0 ? Number((bytes / (1024 * 1024) / (ms / 1e3)).toFixed(2)) : null
+	});
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-BjnIUQv7.js.map

package/build/server/chunks/entries/endpoints/admin/api/system/throughput/_server.ts.js-BjnIUQv7.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-BjnIUQv7.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/admin/api/system/throughput/_server.ts.js"],"sourcesContent":["import { S as requirePermission } from \"../../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { randomFillSync } from \"node:crypto\";\n//#region src/routes/admin/api/system/throughput/+server.ts\n/**\n* Network throughput probe for the /admin/system page. Measures the transport\n* path between the operator's browser and this server — through whatever\n* proxies/tunnels sit in between (reverse proxy, SSO relays such as Azure App\n* Proxy) — with zero compute involvement:\n*\n*   GET  ?mb=N  → streams N MB of random bytes (download direction)\n*   POST        → consumes and discards the request body, returns the\n*                 server-side receive duration (upload direction)\n*\n* Random bytes are deliberately incompressible so proxy compression can't fake\n* a fast transfer. `instance_admin` only — a bandwidth probe is an operator\n* tool, and the download side is a data faucet.\n*\n* A curl-friendly, env-flag-gated sibling exists at /api/diag/throughput for\n* shell-based testing (documented in docs/deployment/app-proxy-migration.md);\n* this endpoint is the browser/UI counterpart that also works behind SSO\n* proxies where curl can't authenticate.\n*/\nvar CHUNK_BYTES = 1024 * 1024;\nvar DOWNLOAD_DEFAULT_MB = 20;\nvar DOWNLOAD_MAX_MB = 256;\nvar UPLOAD_MAX_BYTES = 256 * 1024 * 1024;\nvar GET = async ({ locals, url }) => {\n\trequirePermission(locals, \"instance_admin\");\n\tconst requested = Number(url.searchParams.get(\"mb\"));\n\tconst mb = Math.min(DOWNLOAD_MAX_MB, Math.max(1, Number.isFinite(requested) ? requested : DOWNLOAD_DEFAULT_MB));\n\tlet sentChunks = 0;\n\tconst stream = new ReadableStream({ pull(controller) {\n\t\tif (sentChunks >= mb) {\n\t\t\tcontroller.close();\n\t\t\treturn;\n\t\t}\n\t\tconst chunk = new Uint8Array(CHUNK_BYTES);\n\t\trandomFillSync(chunk);\n\t\tcontroller.enqueue(chunk);\n\t\tsentChunks++;\n\t} });\n\treturn new Response(stream, { headers: {\n\t\t\"Content-Type\": \"application/octet-stream\",\n\t\t\"Content-Length\": String(mb * CHUNK_BYTES),\n\t\t\"Cache-Control\": \"no-store\"\n\t} });\n};\nvar POST = async ({ locals, request }) => {\n\trequirePermission(locals, \"instance_admin\");\n\tconst declared = Number(request.headers.get(\"content-length\"));\n\tif (Number.isFinite(declared) && declared > UPLOAD_MAX_BYTES) apiError(413, ApiErrorCode.VALIDATION_FAILED, \"Upload exceeds the 256 MB probe limit\");\n\tif (!request.body) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing request body\");\n\tconst start = performance.now();\n\tconst reader = request.body.getReader();\n\tlet bytes = 0;\n\twhile (true) {\n\t\tconst { done, value } = await reader.read();\n\t\tif (done) break;\n\t\tbytes += value.byteLength;\n\t\tif (bytes > UPLOAD_MAX_BYTES) {\n\t\t\tawait reader.cancel();\n\t\t\tapiError(413, ApiErrorCode.VALIDATION_FAILED, \"Upload exceeds the 256 MB probe limit\");\n\t\t}\n\t}\n\tconst ms = performance.now() - start;\n\treturn json({\n\t\tbytes,\n\t\tms: Math.round(ms),\n\t\tmbps: ms > 0 ? Number((bytes / (1024 * 1024) / (ms / 1e3)).toFixed(2)) : null\n\t});\n};\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,WAAW,GAAG,IAAI,GAAG,IAAI;AAC7B,IAAI,mBAAmB,GAAG,EAAE;AAC5B,IAAI,eAAe,GAAG,GAAG;AACzB,IAAI,gBAAgB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI;AACrC,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACrC,CAAC,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC5C,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,SAAS,GAAG,mBAAmB,CAAC,CAAC;AAChH,CAAC,IAAI,UAAU,GAAG,CAAC;AACnB,CAAC,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE;AACtD,EAAE,IAAI,UAAU,IAAI,EAAE,EAAE;AACxB,GAAG,UAAU,CAAC,KAAK,EAAE;AACrB,GAAG;AACH,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC;AAC3C,EAAE,cAAc,CAAC,KAAK,CAAC;AACvB,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC;AAC3B,EAAE,UAAU,EAAE;AACd,CAAC,CAAC,EAAE,CAAC;AACL,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;AACxC,EAAE,cAAc,EAAE,0BAA0B;AAC5C,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,GAAG,WAAW,CAAC;AAC5C,EAAE,eAAe,EAAE;AACnB,EAAE,EAAE,CAAC;AACL;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;AAC1C,CAAC,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC5C,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAC/D,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,gBAAgB,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,uCAAuC,CAAC;AACrJ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AACzF,CAAC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;AAChC,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE;AACxC,CAAC,IAAI,KAAK,GAAG,CAAC;AACd,CAAC,OAAO,IAAI,EAAE;AACd,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE;AAC7C,EAAE,IAAI,IAAI,EAAE;AACZ,EAAE,KAAK,IAAI,KAAK,CAAC,UAAU;AAC3B,EAAE,IAAI,KAAK,GAAG,gBAAgB,EAAE;AAChC,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE;AACxB,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,uCAAuC,CAAC;AACzF,EAAE;AACF,CAAC;AACD,CAAC,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK;AACrC,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,KAAK;AACP,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;AACpB,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG;AAC3E,EAAE,CAAC;AACH;;;;"}