@selvajs/selva 4.7.4-beta.1 → 4.8.0-beta.10

package/build/server/chunks/chunks/token2.server.js-D3qybfd8.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token2.server.js-D3qybfd8.js","sources":["../../../../.svelte-kit/output/server/chunks/token2.server.js"],"sourcesContent":["import { t as private_env } from \"./shared-server.js\";\nimport { t as createTokenCodec } from \"./token-codec.js\";\n//#region src/lib/server/invites/token.server.ts\n/**\n* Invite-token primitives — thin binding over `@selvajs/server/tokens`\n* (`createTokenCodec`), mirroring the share-link design (see\n* `shareLinks/token.server.ts`).\n*\n* ## Format\n*   raw    = `invite_<base64url(32 random bytes)>`\n*   hash   = base64url( HMAC-SHA256(SELVA_HMAC_KEY, raw) )\n*\n* Rotating `SELVA_HMAC_KEY` invalidates every pending invite.\n*/\nvar TOKEN_PREFIX = \"invite_\";\nvar cached = null;\nfunction getCodec() {\n\tconst secret = private_env.SELVA_HMAC_KEY;\n\tif (!secret) throw new Error(\"Missing required env var: SELVA_HMAC_KEY. Generate with: openssl rand -base64 32\");\n\tif (cached?.secret !== secret) cached = {\n\t\tsecret,\n\t\tcodec: createTokenCodec({\n\t\t\tprefix: TOKEN_PREFIX,\n\t\t\tsecret\n\t\t})\n\t};\n\treturn cached.codec;\n}\n/** Mint: generate a fresh raw token. Show to the recipient exactly once. */\nfunction mintRawToken() {\n\treturn getCodec().mintRawToken();\n}\n/** Hash a raw token to its store-side representation. */\nfunction hashToken(raw) {\n\treturn getCodec().hashToken(raw);\n}\n//#endregion\nexport { mintRawToken as n, hashToken as t };\n"],"names":[],"mappings":";;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,YAAY,GAAG,SAAS;AAC5B,IAAI,MAAM,GAAG,IAAI;AACjB,SAAS,QAAQ,GAAG;AACpB,CAAC,MAAM,MAAM,GAAG,WAAW,CAAC,cAAc;AAC1C,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC;AACjH,CAAC,IAAI,MAAM,EAAE,MAAM,KAAK,MAAM,EAAE,MAAM,GAAG;AACzC,EAAE,MAAM;AACR,EAAE,KAAK,EAAE,gBAAgB,CAAC;AAC1B,GAAG,MAAM,EAAE,YAAY;AACvB,GAAG;AACH,GAAG;AACH,EAAE;AACF,CAAC,OAAO,MAAM,CAAC,KAAK;AACpB;AACA;AACA,SAAS,YAAY,GAAG;AACxB,CAAC,OAAO,QAAQ,EAAE,CAAC,YAAY,EAAE;AACjC;AACA;AACA,SAAS,SAAS,CAAC,GAAG,EAAE;AACxB,CAAC,OAAO,QAAQ,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC;AACjC;;;;"}

package/build/server/chunks/chunks/update-outcome.js-DRDTPtu2.js

@@ -0,0 +1,138 @@
+function firstMatch(logs, re) {
+	const m = re.exec(logs);
+	return m ? m[1] : void 0;
+}
+/** Extract the before/after runtime versions the runner prints, if present. */
+function parseVersions(logs) {
+	const version = String.raw`\d+\.\d+\.\d+[^\s]*`;
+	const arrow = new RegExp(String.raw`(?:Target \([^)]*\)|Available):\s*(${version})\s*(?:→|->)\s*(${version})`).exec(logs);
+	return {
+		from: firstMatch(logs, /Current @selvajs\/selva:\s*v?(\d+\.\d+\.\d+[^\s]*)/) ?? arrow?.[1],
+		to: firstMatch(logs, /New @selvajs\/selva:\s*v?(\d+\.\d+\.\d+[^\s]*)/) ?? arrow?.[2]
+	};
+}
+function has(logs, needle) {
+	return logs.includes(needle);
+}
+function deriveOutcome(exitCode, logs) {
+	const { from, to } = parseVersions(logs);
+	if (exitCode === null) return {
+		severity: "pending",
+		title: "Update in progress…"
+	};
+	if (exitCode === 6 || has(logs, "Manual recovery required") || has(logs, "manual intervention required")) return {
+		severity: "critical",
+		title: "Update failed AND rollback failed — the app may be OFFLINE",
+		detail: "Both the new version and the rollback failed their health check. SSH into the server and run: `pm2 logs selva-compute`, then `pm2 start ecosystem.config.cjs` from the deployment directory.",
+		from,
+		to
+	};
+	if (exitCode === -2) return {
+		severity: "critical",
+		title: "App did not come back online within 15 minutes",
+		detail: "The update may still be finishing in the background, or the new process is crash-looping. Check `pm2 logs selva-compute`. Do not re-run the update until you have confirmed the current state.",
+		from,
+		to
+	};
+	if (exitCode === 4) return {
+		severity: "critical",
+		title: "Update failed and the rollback could not reinstall — the app may be OFFLINE",
+		detail: "The previous version could not be restored from npm. SSH into the server and run `pm2 logs selva-compute`; if the app is down, reinstall explicitly with `npm install --prefer-online @selvajs/cli@<version> @selvajs/selva@<version>` from the deployment directory.",
+		from,
+		to
+	};
+	if (exitCode === 3) return {
+		severity: "critical",
+		title: "Update failed its health check and could not be rolled back automatically",
+		detail: "No prior version was recorded, so the previous build could not be restored. Check `pm2 logs selva-compute` to confirm whether the app came back online.",
+		from,
+		to
+	};
+	if (exitCode === 143 || exitCode === 130 || exitCode === 129 || has(logs, "KILLED")) return {
+		severity: "critical",
+		title: "Update was killed before it finished — nothing was installed",
+		detail: "The runner was terminated mid-update, most often by a systemd-supervised PM2 restarting its whole control group. The version on disk is unchanged. Check `pm2 logs selva-compute` and confirm the app is online before retrying; if a global pm2 owns the daemon, reconcile that first.",
+		from,
+		to
+	};
+	if (exitCode === 9 || has(logs, "SYSTEMD_PM2")) return {
+		severity: "warning",
+		title: "Update cancelled — PM2 needs a resync that only a shell can do safely. The app is untouched.",
+		detail: "This deployment's PM2 runs under systemd, where `pm2 update` restarts the unit and kills the update mid-run. Nothing was installed and the app is still serving. SSH in and run `./node_modules/.bin/pm2 update` from the deployment directory, then retry the update here.",
+		from,
+		to
+	};
+	if (exitCode === 8 || has(logs, "PM2_SKEW")) {
+		const daemon = firstMatch(logs, /daemon \(v(\d+\.\d+\.\d+)\)/);
+		const local = firstMatch(logs, /deployment's pm2 \(v(\d+\.\d+\.\d+)\)/);
+		return {
+			severity: "warning",
+			title: daemon && local ? `Update cancelled — a global PM2 (v${daemon}) owns the daemon, not this deployment's (v${local}). The app is untouched.` : "Update cancelled — a conflicting global PM2 owns the daemon. The app is untouched.",
+			detail: "Resyncing would have downgraded the daemon and dropped its process table, so the update stopped before taking the app down. On the server: `which -a pm2`, `pm2 -v`, `pm2 ping` — remove or align the global pm2, then retry.",
+			from,
+			to
+		};
+	}
+	if (exitCode === 5 || has(logs, "Rolled back")) return {
+		severity: "warning",
+		title: `Update failed — safely rolled back${from ? ` to ${from}` : ""}. The app is online.`,
+		detail: "The new version failed its health check, so the previous version was restored and is serving normally. Review the log below for why the new version failed before retrying.",
+		from,
+		to
+	};
+	if (has(logs, "ENGINE_MISMATCH") || has(logs, "EBADENGINE")) {
+		const required = firstMatch(logs, /requires Node ([^\s]+(?:\s*[<>=]+\s*[\d.]+)*)/);
+		const running = firstMatch(logs, /this host runs v?(\d+\.\d+\.\d+)/);
+		return {
+			severity: "warning",
+			title: running ? `Updated${to ? ` to ${to}` : ""}, but this release needs Node ${required ?? "(newer)"} — the host runs v${running}. Expect runtime failures.` : `Updated${to ? ` to ${to}` : ""}, but this release requires a newer Node than the host provides. Expect runtime failures.`,
+			detail: "npm installed it anyway (engine-strict is off) and the health check passed, but it does not exercise the newer APIs — routes that do will throw at request time. Upgrade Node on the server, then re-run the update.",
+			from,
+			to
+		};
+	}
+	if (has(logs, "npm cache may be stale") || has(logs, "No version change")) return {
+		severity: "warning",
+		title: "No version change — npm installed the same version.",
+		detail: "Your npm cache may be stale. On the server: `npm cache clean --force`, remove node_modules + package-lock.json, then `npm install --prefer-online`.",
+		from,
+		to
+	};
+	if (exitCode === 0) {
+		if (has(logs, "Already on the") || has(logs, "Nothing to do")) return {
+			severity: "info",
+			title: `Already up to date${from ? ` (${from})` : ""} — nothing to install.`,
+			detail: "No changes were made and the app was not restarted.",
+			from,
+			to
+		};
+		if (from && to && from !== to) return {
+			severity: "success",
+			title: `Updated ${from} → ${to}. The app is back online.`,
+			from,
+			to
+		};
+		if (to) return {
+			severity: "success",
+			title: `Update complete — now on ${to}. The app is back online.`,
+			from,
+			to
+		};
+		return {
+			severity: "success",
+			title: "Update completed and the app is back online.",
+			from,
+			to
+		};
+	}
+	return {
+		severity: "critical",
+		title: `Update failed (exit code ${exitCode}).`,
+		detail: "The update did not complete cleanly. Review the log below, and check `pm2 logs selva-compute` to confirm whether the app is currently online.",
+		from,
+		to
+	};
+}
+
+export { deriveOutcome as d };
+//# sourceMappingURL=update-outcome.js-DRDTPtu2.js.map

package/build/server/chunks/chunks/update-outcome.js-DRDTPtu2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-outcome.js-DRDTPtu2.js","sources":["../../../../.svelte-kit/output/server/chunks/update-outcome.js"],"sourcesContent":["function firstMatch(logs, re) {\n\tconst m = re.exec(logs);\n\treturn m ? m[1] : void 0;\n}\n/** Extract the before/after runtime versions the runner prints, if present. */\nfunction parseVersions(logs) {\n\tconst version = String.raw`\\d+\\.\\d+\\.\\d+[^\\s]*`;\n\tconst arrow = new RegExp(String.raw`(?:Target \\([^)]*\\)|Available):\\s*(${version})\\s*(?:→|->)\\s*(${version})`).exec(logs);\n\treturn {\n\t\tfrom: firstMatch(logs, /Current @selvajs\\/selva:\\s*v?(\\d+\\.\\d+\\.\\d+[^\\s]*)/) ?? arrow?.[1],\n\t\tto: firstMatch(logs, /New @selvajs\\/selva:\\s*v?(\\d+\\.\\d+\\.\\d+[^\\s]*)/) ?? arrow?.[2]\n\t};\n}\nfunction has(logs, needle) {\n\treturn logs.includes(needle);\n}\nfunction deriveOutcome(exitCode, logs) {\n\tconst { from, to } = parseVersions(logs);\n\tif (exitCode === null) return {\n\t\tseverity: \"pending\",\n\t\ttitle: \"Update in progress…\"\n\t};\n\tif (exitCode === 6 || has(logs, \"Manual recovery required\") || has(logs, \"manual intervention required\")) return {\n\t\tseverity: \"critical\",\n\t\ttitle: \"Update failed AND rollback failed — the app may be OFFLINE\",\n\t\tdetail: \"Both the new version and the rollback failed their health check. SSH into the server and run: `pm2 logs selva-compute`, then `pm2 start ecosystem.config.cjs` from the deployment directory.\",\n\t\tfrom,\n\t\tto\n\t};\n\tif (exitCode === -2) return {\n\t\tseverity: \"critical\",\n\t\ttitle: \"App did not come back online within 15 minutes\",\n\t\tdetail: \"The update may still be finishing in the background, or the new process is crash-looping. Check `pm2 logs selva-compute`. Do not re-run the update until you have confirmed the current state.\",\n\t\tfrom,\n\t\tto\n\t};\n\tif (exitCode === 4) return {\n\t\tseverity: \"critical\",\n\t\ttitle: \"Update failed and the rollback could not reinstall — the app may be OFFLINE\",\n\t\tdetail: \"The previous version could not be restored from npm. SSH into the server and run `pm2 logs selva-compute`; if the app is down, reinstall explicitly with `npm install --prefer-online @selvajs/cli@<version> @selvajs/selva@<version>` from the deployment directory.\",\n\t\tfrom,\n\t\tto\n\t};\n\tif (exitCode === 3) return {\n\t\tseverity: \"critical\",\n\t\ttitle: \"Update failed its health check and could not be rolled back automatically\",\n\t\tdetail: \"No prior version was recorded, so the previous build could not be restored. Check `pm2 logs selva-compute` to confirm whether the app came back online.\",\n\t\tfrom,\n\t\tto\n\t};\n\tif (exitCode === 143 || exitCode === 130 || exitCode === 129 || has(logs, \"KILLED\")) return {\n\t\tseverity: \"critical\",\n\t\ttitle: \"Update was killed before it finished — nothing was installed\",\n\t\tdetail: \"The runner was terminated mid-update, most often by a systemd-supervised PM2 restarting its whole control group. The version on disk is unchanged. Check `pm2 logs selva-compute` and confirm the app is online before retrying; if a global pm2 owns the daemon, reconcile that first.\",\n\t\tfrom,\n\t\tto\n\t};\n\tif (exitCode === 9 || has(logs, \"SYSTEMD_PM2\")) return {\n\t\tseverity: \"warning\",\n\t\ttitle: \"Update cancelled — PM2 needs a resync that only a shell can do safely. The app is untouched.\",\n\t\tdetail: \"This deployment's PM2 runs under systemd, where `pm2 update` restarts the unit and kills the update mid-run. Nothing was installed and the app is still serving. SSH in and run `./node_modules/.bin/pm2 update` from the deployment directory, then retry the update here.\",\n\t\tfrom,\n\t\tto\n\t};\n\tif (exitCode === 8 || has(logs, \"PM2_SKEW\")) {\n\t\tconst daemon = firstMatch(logs, /daemon \\(v(\\d+\\.\\d+\\.\\d+)\\)/);\n\t\tconst local = firstMatch(logs, /deployment's pm2 \\(v(\\d+\\.\\d+\\.\\d+)\\)/);\n\t\treturn {\n\t\t\tseverity: \"warning\",\n\t\t\ttitle: daemon && local ? `Update cancelled — a global PM2 (v${daemon}) owns the daemon, not this deployment's (v${local}). The app is untouched.` : \"Update cancelled — a conflicting global PM2 owns the daemon. The app is untouched.\",\n\t\t\tdetail: \"Resyncing would have downgraded the daemon and dropped its process table, so the update stopped before taking the app down. On the server: `which -a pm2`, `pm2 -v`, `pm2 ping` — remove or align the global pm2, then retry.\",\n\t\t\tfrom,\n\t\t\tto\n\t\t};\n\t}\n\tif (exitCode === 5 || has(logs, \"Rolled back\")) return {\n\t\tseverity: \"warning\",\n\t\ttitle: `Update failed — safely rolled back${from ? ` to ${from}` : \"\"}. The app is online.`,\n\t\tdetail: \"The new version failed its health check, so the previous version was restored and is serving normally. Review the log below for why the new version failed before retrying.\",\n\t\tfrom,\n\t\tto\n\t};\n\tif (has(logs, \"ENGINE_MISMATCH\") || has(logs, \"EBADENGINE\")) {\n\t\tconst required = firstMatch(logs, /requires Node ([^\\s]+(?:\\s*[<>=]+\\s*[\\d.]+)*)/);\n\t\tconst running = firstMatch(logs, /this host runs v?(\\d+\\.\\d+\\.\\d+)/);\n\t\treturn {\n\t\t\tseverity: \"warning\",\n\t\t\ttitle: running ? `Updated${to ? ` to ${to}` : \"\"}, but this release needs Node ${required ?? \"(newer)\"} — the host runs v${running}. Expect runtime failures.` : `Updated${to ? ` to ${to}` : \"\"}, but this release requires a newer Node than the host provides. Expect runtime failures.`,\n\t\t\tdetail: \"npm installed it anyway (engine-strict is off) and the health check passed, but it does not exercise the newer APIs — routes that do will throw at request time. Upgrade Node on the server, then re-run the update.\",\n\t\t\tfrom,\n\t\t\tto\n\t\t};\n\t}\n\tif (has(logs, \"npm cache may be stale\") || has(logs, \"No version change\")) return {\n\t\tseverity: \"warning\",\n\t\ttitle: \"No version change — npm installed the same version.\",\n\t\tdetail: \"Your npm cache may be stale. On the server: `npm cache clean --force`, remove node_modules + package-lock.json, then `npm install --prefer-online`.\",\n\t\tfrom,\n\t\tto\n\t};\n\tif (exitCode === 0) {\n\t\tif (has(logs, \"Already on the\") || has(logs, \"Nothing to do\")) return {\n\t\t\tseverity: \"info\",\n\t\t\ttitle: `Already up to date${from ? ` (${from})` : \"\"} — nothing to install.`,\n\t\t\tdetail: \"No changes were made and the app was not restarted.\",\n\t\t\tfrom,\n\t\t\tto\n\t\t};\n\t\tif (from && to && from !== to) return {\n\t\t\tseverity: \"success\",\n\t\t\ttitle: `Updated ${from} → ${to}. The app is back online.`,\n\t\t\tfrom,\n\t\t\tto\n\t\t};\n\t\tif (to) return {\n\t\t\tseverity: \"success\",\n\t\t\ttitle: `Update complete — now on ${to}. The app is back online.`,\n\t\t\tfrom,\n\t\t\tto\n\t\t};\n\t\treturn {\n\t\t\tseverity: \"success\",\n\t\t\ttitle: \"Update completed and the app is back online.\",\n\t\t\tfrom,\n\t\t\tto\n\t\t};\n\t}\n\treturn {\n\t\tseverity: \"critical\",\n\t\ttitle: `Update failed (exit code ${exitCode}).`,\n\t\tdetail: \"The update did not complete cleanly. Review the log below, and check `pm2 logs selva-compute` to confirm whether the app is currently online.\",\n\t\tfrom,\n\t\tto\n\t};\n}\n//#endregion\nexport { deriveOutcome as t };\n"],"names":[],"mappings":"AAAA,SAAS,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE;AAC9B,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;AACxB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM;AACzB;AACA;AACA,SAAS,aAAa,CAAC,IAAI,EAAE;AAC7B,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC;AAChD,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,mCAAmC,EAAE,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AAC1H,CAAC,OAAO;AACR,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,oDAAoD,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;AAC5F,EAAE,EAAE,EAAE,UAAU,CAAC,IAAI,EAAE,gDAAgD,CAAC,IAAI,KAAK,GAAG,CAAC;AACrF,EAAE;AACF;AACA,SAAS,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE;AAC3B,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;AAC7B;AACA,SAAS,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE;AACvC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC;AACzC,CAAC,IAAI,QAAQ,KAAK,IAAI,EAAE,OAAO;AAC/B,EAAE,QAAQ,EAAE,SAAS;AACrB,EAAE,KAAK,EAAE;AACT,EAAE;AACF,CAAC,IAAI,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,0BAA0B,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,8BAA8B,CAAC,EAAE,OAAO;AAClH,EAAE,QAAQ,EAAE,UAAU;AACtB,EAAE,KAAK,EAAE,4DAA4D;AACrE,EAAE,MAAM,EAAE,8LAA8L;AACxM,EAAE,IAAI;AACN,EAAE;AACF,EAAE;AACF,CAAC,IAAI,QAAQ,KAAK,EAAE,EAAE,OAAO;AAC7B,EAAE,QAAQ,EAAE,UAAU;AACtB,EAAE,KAAK,EAAE,gDAAgD;AACzD,EAAE,MAAM,EAAE,gMAAgM;AAC1M,EAAE,IAAI;AACN,EAAE;AACF,EAAE;AACF,CAAC,IAAI,QAAQ,KAAK,CAAC,EAAE,OAAO;AAC5B,EAAE,QAAQ,EAAE,UAAU;AACtB,EAAE,KAAK,EAAE,6EAA6E;AACtF,EAAE,MAAM,EAAE,uQAAuQ;AACjR,EAAE,IAAI;AACN,EAAE;AACF,EAAE;AACF,CAAC,IAAI,QAAQ,KAAK,CAAC,EAAE,OAAO;AAC5B,EAAE,QAAQ,EAAE,UAAU;AACtB,EAAE,KAAK,EAAE,2EAA2E;AACpF,EAAE,MAAM,EAAE,yJAAyJ;AACnK,EAAE,IAAI;AACN,EAAE;AACF,EAAE;AACF,CAAC,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,OAAO;AAC7F,EAAE,QAAQ,EAAE,UAAU;AACtB,EAAE,KAAK,EAAE,8DAA8D;AACvE,EAAE,MAAM,EAAE,yRAAyR;AACnS,EAAE,IAAI;AACN,EAAE;AACF,EAAE;AACF,CAAC,IAAI,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,OAAO;AACxD,EAAE,QAAQ,EAAE,SAAS;AACrB,EAAE,KAAK,EAAE,8FAA8F;AACvG,EAAE,MAAM,EAAE,6QAA6Q;AACvR,EAAE,IAAI;AACN,EAAE;AACF,EAAE;AACF,CAAC,IAAI,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE;AAC9C,EAAE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,6BAA6B,CAAC;AAChE,EAAE,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,uCAAuC,CAAC;AACzE,EAAE,OAAO;AACT,GAAG,QAAQ,EAAE,SAAS;AACtB,GAAG,KAAK,EAAE,MAAM,IAAI,KAAK,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,2CAA2C,EAAE,KAAK,CAAC,wBAAwB,CAAC,GAAG,oFAAoF;AAC3O,GAAG,MAAM,EAAE,+NAA+N;AAC1O,GAAG,IAAI;AACP,GAAG;AACH,GAAG;AACH,CAAC;AACD,CAAC,IAAI,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,OAAO;AACxD,EAAE,QAAQ,EAAE,SAAS;AACrB,EAAE,KAAK,EAAE,CAAC,kCAAkC,EAAE,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC;AAC7F,EAAE,MAAM,EAAE,6KAA6K;AACvL,EAAE,IAAI;AACN,EAAE;AACF,EAAE;AACF,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE;AAC9D,EAAE,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,EAAE,+CAA+C,CAAC;AACpF,EAAE,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,kCAAkC,CAAC;AACtE,EAAE,OAAO;AACT,GAAG,QAAQ,EAAE,SAAS;AACtB,GAAG,KAAK,EAAE,OAAO,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,8BAA8B,EAAE,QAAQ,IAAI,SAAS,CAAC,kBAAkB,EAAE,OAAO,CAAC,0BAA0B,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,yFAAyF,CAAC;AAC9R,GAAG,MAAM,EAAE,sNAAsN;AACjO,GAAG,IAAI;AACP,GAAG;AACH,GAAG;AACH,CAAC;AACD,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,mBAAmB,CAAC,EAAE,OAAO;AACnF,EAAE,QAAQ,EAAE,SAAS;AACrB,EAAE,KAAK,EAAE,qDAAqD;AAC9D,EAAE,MAAM,EAAE,qJAAqJ;AAC/J,EAAE,IAAI;AACN,EAAE;AACF,EAAE;AACF,CAAC,IAAI,QAAQ,KAAK,CAAC,EAAE;AACrB,EAAE,IAAI,GAAG,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,OAAO;AACxE,GAAG,QAAQ,EAAE,MAAM;AACnB,GAAG,KAAK,EAAE,CAAC,kBAAkB,EAAE,IAAI,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC;AAC/E,GAAG,MAAM,EAAE,qDAAqD;AAChE,GAAG,IAAI;AACP,GAAG;AACH,GAAG;AACH,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,KAAK,EAAE,EAAE,OAAO;AACxC,GAAG,QAAQ,EAAE,SAAS;AACtB,GAAG,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,yBAAyB,CAAC;AAC5D,GAAG,IAAI;AACP,GAAG;AACH,GAAG;AACH,EAAE,IAAI,EAAE,EAAE,OAAO;AACjB,GAAG,QAAQ,EAAE,SAAS;AACtB,GAAG,KAAK,EAAE,CAAC,yBAAyB,EAAE,EAAE,CAAC,yBAAyB,CAAC;AACnE,GAAG,IAAI;AACP,GAAG;AACH,GAAG;AACH,EAAE,OAAO;AACT,GAAG,QAAQ,EAAE,SAAS;AACtB,GAAG,KAAK,EAAE,8CAA8C;AACxD,GAAG,IAAI;AACP,GAAG;AACH,GAAG;AACH,CAAC;AACD,CAAC,OAAO;AACR,EAAE,QAAQ,EAAE,UAAU;AACtB,EAAE,KAAK,EAAE,CAAC,yBAAyB,EAAE,QAAQ,CAAC,EAAE,CAAC;AACjD,EAAE,MAAM,EAAE,+IAA+I;AACzJ,EAAE,IAAI;AACN,EAAE;AACF,EAAE;AACF;;;;"}

package/build/server/chunks/chunks/updateCheck.server.js-EKxgtl6k.js

@@ -0,0 +1,206 @@
+import { b as private_env } from './shared-server.js-HBAhbQ8m.js';
+import { join } from 'path';
+import { existsSync, readFileSync, writeFileSync } from 'fs';
+
+//#region ../server/src/ops/semver.ts
+/**
+* Parse `x.y.z` plus an optional `-beta.N` pre-release counter. The
+* pre-release number is returned separately so beta-channel comparisons can
+* order successive betas of the same x.y.z core. Returns null for anything
+* that doesn't lead with a numeric core.
+*/
+function parseSemver(v) {
+	const m = /^(\d+)\.(\d+)\.(\d+)(?:-beta\.(\d+))?/.exec(v.trim());
+	if (!m) return null;
+	return {
+		core: [
+			Number(m[1]),
+			Number(m[2]),
+			Number(m[3])
+		],
+		beta: m[4] != null ? Number(m[4]) : null
+	};
+}
+/**
+* Does `version` satisfy an `engines.node` range?
+*
+* Deliberately narrow: handles the `>=X`, `>X`, `^X`, `~X`, `=X` and bare-version
+* forms Selva and its dependencies actually publish, plus `||` alternatives and
+* space-separated conjunctions (`>=18 <21`). Anything it cannot parse returns
+* `null` — "unknown", never a false "incompatible", because a wrong block would
+* strand an operator who has no way to override a bad parse.
+*
+* A full `semver` dependency would subsume this; it isn't warranted for the
+* handful of range forms in play (issue #176).
+*/
+function satisfiesRange(version, range) {
+	const v = parseSemver(version);
+	if (!v) return null;
+	const alternatives = range.split("||").map((r) => r.trim());
+	let anyParsed = false;
+	for (const alt of alternatives) {
+		const clauses = alt.split(/\s+/).filter(Boolean);
+		if (clauses.length === 0) continue;
+		let all = true;
+		let altParsed = true;
+		for (const clause of clauses) {
+			const m = /^(>=|<=|>|<|\^|~|=)?\s*v?(\d+)(?:\.(\d+|x|\*))?(?:\.(\d+|x|\*))?/.exec(clause);
+			if (!m) {
+				altParsed = false;
+				break;
+			}
+			const op = m[1] ?? "=";
+			const num = (s) => s == null || s === "x" || s === "*" ? 0 : Number(s);
+			const target = [
+				Number(m[2]),
+				num(m[3]),
+				num(m[4])
+			];
+			const cmp = (() => {
+				for (let i = 0; i < 3; i++) {
+					if (v.core[i] > target[i]) return 1;
+					if (v.core[i] < target[i]) return -1;
+				}
+				return 0;
+			})();
+			let ok;
+			switch (op) {
+				case ">=":
+					ok = cmp >= 0;
+					break;
+				case ">":
+					ok = cmp > 0;
+					break;
+				case "<=":
+					ok = cmp <= 0;
+					break;
+				case "<":
+					ok = cmp < 0;
+					break;
+				case "^":
+					ok = cmp >= 0 && v.core[0] === target[0];
+					break;
+				case "~":
+					ok = cmp >= 0 && v.core[0] === target[0] && v.core[1] === target[1];
+					break;
+				default: ok = v.core[0] === target[0] && (m[3] == null || m[3] === "x" || m[3] === "*" || v.core[1] === target[1]) && (m[4] == null || m[4] === "x" || m[4] === "*" || v.core[2] === target[2]);
+			}
+			if (!ok) {
+				all = false;
+				break;
+			}
+		}
+		if (!altParsed) continue;
+		anyParsed = true;
+		if (all) return true;
+	}
+	return anyParsed ? false : null;
+}
+//#endregion
+//#region src/lib/server/releaseChannel.server.ts
+var CHANNEL_FILE = "selva-channel.json";
+function channelTag(channel) {
+	return channel === "beta" ? "beta" : "latest";
+}
+function channelRegistryUrl(channel) {
+	return `https://registry.npmjs.org/@selvajs%2Fselva/${channelTag(channel)}`;
+}
+function isChannel(v) {
+	return v === "stable" || v === "beta";
+}
+function deploymentDir() {
+	const candidates = [];
+	if (private_env.INSTALL_DIR) candidates.push(private_env.INSTALL_DIR);
+	let dir = process.cwd();
+	for (let i = 0; i < 6; i++) {
+		candidates.push(dir);
+		const parent = join(dir, "..");
+		if (parent === dir) break;
+		dir = parent;
+	}
+	for (const d of candidates) if (existsSync(join(d, "node_modules", "@selvajs", "selva", "package.json"))) return d;
+	return null;
+}
+function channelFilePath() {
+	return join(deploymentDir() ?? process.cwd(), CHANNEL_FILE);
+}
+function readChannel() {
+	const path = channelFilePath();
+	if (!existsSync(path)) return "stable";
+	try {
+		const parsed = JSON.parse(readFileSync(path, "utf8"));
+		return isChannel(parsed.channel) ? parsed.channel : "stable";
+	} catch {
+		return "stable";
+	}
+}
+function writeChannel(channel) {
+	if (!isChannel(channel)) throw new Error(`Invalid release channel: ${channel}`);
+	writeFileSync(channelFilePath(), JSON.stringify({ channel }, null, 2) + "\n", "utf8");
+}
+//#endregion
+//#region src/lib/server/updateCheck.server.ts
+function readInstalledVersion() {
+	const dirs = [];
+	if (private_env.INSTALL_DIR) dirs.push(private_env.INSTALL_DIR);
+	let dir = process.cwd();
+	for (let i = 0; i < 6; i++) {
+		dirs.push(dir);
+		const parent = join(dir, "..");
+		if (parent === dir) break;
+		dir = parent;
+	}
+	for (const d of dirs) {
+		const pkgPath = join(d, "node_modules", "@selvajs", "selva", "package.json");
+		if (!existsSync(pkgPath)) continue;
+		try {
+			const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
+			if (typeof pkg.version === "string") return pkg.version;
+		} catch {}
+	}
+	return null;
+}
+async function fetchLatestManifest(fetchImpl, channel = "stable") {
+	const ctrl = new AbortController();
+	const timer = setTimeout(() => ctrl.abort(), 5e3);
+	try {
+		const res = await fetchImpl(channelRegistryUrl(channel), {
+			headers: { Accept: "application/json" },
+			signal: ctrl.signal
+		});
+		if (!res.ok) return {
+			version: null,
+			enginesNode: null
+		};
+		const body = await res.json();
+		return {
+			version: typeof body.version === "string" ? body.version : null,
+			enginesNode: typeof body.engines?.node === "string" ? body.engines.node : null
+		};
+	} catch {
+		return {
+			version: null,
+			enginesNode: null
+		};
+	} finally {
+		clearTimeout(timer);
+	}
+}
+async function checkForUpdate(fetchImpl, channel = "stable", runningNode = process.versions.node) {
+	const current = readInstalledVersion();
+	const { version: latest, enginesNode } = await fetchLatestManifest(fetchImpl, channel);
+	return {
+		channel,
+		current,
+		latest,
+		updateAvailable: !!(current && latest && latest !== current),
+		nodeCompatibility: {
+			compatible: enginesNode ? satisfiesRange(runningNode, enginesNode) : null,
+			required: enginesNode,
+			running: runningNode
+		}
+	};
+}
+
+export { channelTag as a, checkForUpdate as c, readChannel as r, writeChannel as w };
+//# sourceMappingURL=updateCheck.server.js-EKxgtl6k.js.map

package/build/server/chunks/chunks/updateCheck.server.js-EKxgtl6k.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateCheck.server.js-EKxgtl6k.js","sources":["../../../../.svelte-kit/output/server/chunks/updateCheck.server.js"],"sourcesContent":["import { t as private_env } from \"./shared-server.js\";\nimport { join } from \"path\";\nimport { existsSync, readFileSync, writeFileSync } from \"fs\";\n//#region ../server/src/ops/semver.ts\n/**\n* Parse `x.y.z` plus an optional `-beta.N` pre-release counter. The\n* pre-release number is returned separately so beta-channel comparisons can\n* order successive betas of the same x.y.z core. Returns null for anything\n* that doesn't lead with a numeric core.\n*/\nfunction parseSemver(v) {\n\tconst m = /^(\\d+)\\.(\\d+)\\.(\\d+)(?:-beta\\.(\\d+))?/.exec(v.trim());\n\tif (!m) return null;\n\treturn {\n\t\tcore: [\n\t\t\tNumber(m[1]),\n\t\t\tNumber(m[2]),\n\t\t\tNumber(m[3])\n\t\t],\n\t\tbeta: m[4] != null ? Number(m[4]) : null\n\t};\n}\n/**\n* Does `version` satisfy an `engines.node` range?\n*\n* Deliberately narrow: handles the `>=X`, `>X`, `^X`, `~X`, `=X` and bare-version\n* forms Selva and its dependencies actually publish, plus `||` alternatives and\n* space-separated conjunctions (`>=18 <21`). Anything it cannot parse returns\n* `null` — \"unknown\", never a false \"incompatible\", because a wrong block would\n* strand an operator who has no way to override a bad parse.\n*\n* A full `semver` dependency would subsume this; it isn't warranted for the\n* handful of range forms in play (issue #176).\n*/\nfunction satisfiesRange(version, range) {\n\tconst v = parseSemver(version);\n\tif (!v) return null;\n\tconst alternatives = range.split(\"||\").map((r) => r.trim());\n\tlet anyParsed = false;\n\tfor (const alt of alternatives) {\n\t\tconst clauses = alt.split(/\\s+/).filter(Boolean);\n\t\tif (clauses.length === 0) continue;\n\t\tlet all = true;\n\t\tlet altParsed = true;\n\t\tfor (const clause of clauses) {\n\t\t\tconst m = /^(>=|<=|>|<|\\^|~|=)?\\s*v?(\\d+)(?:\\.(\\d+|x|\\*))?(?:\\.(\\d+|x|\\*))?/.exec(clause);\n\t\t\tif (!m) {\n\t\t\t\taltParsed = false;\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tconst op = m[1] ?? \"=\";\n\t\t\tconst num = (s) => s == null || s === \"x\" || s === \"*\" ? 0 : Number(s);\n\t\t\tconst target = [\n\t\t\t\tNumber(m[2]),\n\t\t\t\tnum(m[3]),\n\t\t\t\tnum(m[4])\n\t\t\t];\n\t\t\tconst cmp = (() => {\n\t\t\t\tfor (let i = 0; i < 3; i++) {\n\t\t\t\t\tif (v.core[i] > target[i]) return 1;\n\t\t\t\t\tif (v.core[i] < target[i]) return -1;\n\t\t\t\t}\n\t\t\t\treturn 0;\n\t\t\t})();\n\t\t\tlet ok;\n\t\t\tswitch (op) {\n\t\t\t\tcase \">=\":\n\t\t\t\t\tok = cmp >= 0;\n\t\t\t\t\tbreak;\n\t\t\t\tcase \">\":\n\t\t\t\t\tok = cmp > 0;\n\t\t\t\t\tbreak;\n\t\t\t\tcase \"<=\":\n\t\t\t\t\tok = cmp <= 0;\n\t\t\t\t\tbreak;\n\t\t\t\tcase \"<\":\n\t\t\t\t\tok = cmp < 0;\n\t\t\t\t\tbreak;\n\t\t\t\tcase \"^\":\n\t\t\t\t\tok = cmp >= 0 && v.core[0] === target[0];\n\t\t\t\t\tbreak;\n\t\t\t\tcase \"~\":\n\t\t\t\t\tok = cmp >= 0 && v.core[0] === target[0] && v.core[1] === target[1];\n\t\t\t\t\tbreak;\n\t\t\t\tdefault: ok = v.core[0] === target[0] && (m[3] == null || m[3] === \"x\" || m[3] === \"*\" || v.core[1] === target[1]) && (m[4] == null || m[4] === \"x\" || m[4] === \"*\" || v.core[2] === target[2]);\n\t\t\t}\n\t\t\tif (!ok) {\n\t\t\t\tall = false;\n\t\t\t\tbreak;\n\t\t\t}\n\t\t}\n\t\tif (!altParsed) continue;\n\t\tanyParsed = true;\n\t\tif (all) return true;\n\t}\n\treturn anyParsed ? false : null;\n}\n//#endregion\n//#region src/lib/server/releaseChannel.server.ts\nvar CHANNEL_FILE = \"selva-channel.json\";\nfunction channelTag(channel) {\n\treturn channel === \"beta\" ? \"beta\" : \"latest\";\n}\nfunction channelRegistryUrl(channel) {\n\treturn `https://registry.npmjs.org/@selvajs%2Fselva/${channelTag(channel)}`;\n}\nfunction isChannel(v) {\n\treturn v === \"stable\" || v === \"beta\";\n}\nfunction deploymentDir() {\n\tconst candidates = [];\n\tif (private_env.INSTALL_DIR) candidates.push(private_env.INSTALL_DIR);\n\tlet dir = process.cwd();\n\tfor (let i = 0; i < 6; i++) {\n\t\tcandidates.push(dir);\n\t\tconst parent = join(dir, \"..\");\n\t\tif (parent === dir) break;\n\t\tdir = parent;\n\t}\n\tfor (const d of candidates) if (existsSync(join(d, \"node_modules\", \"@selvajs\", \"selva\", \"package.json\"))) return d;\n\treturn null;\n}\nfunction channelFilePath() {\n\treturn join(deploymentDir() ?? process.cwd(), CHANNEL_FILE);\n}\nfunction readChannel() {\n\tconst path = channelFilePath();\n\tif (!existsSync(path)) return \"stable\";\n\ttry {\n\t\tconst parsed = JSON.parse(readFileSync(path, \"utf8\"));\n\t\treturn isChannel(parsed.channel) ? parsed.channel : \"stable\";\n\t} catch {\n\t\treturn \"stable\";\n\t}\n}\nfunction writeChannel(channel) {\n\tif (!isChannel(channel)) throw new Error(`Invalid release channel: ${channel}`);\n\twriteFileSync(channelFilePath(), JSON.stringify({ channel }, null, 2) + \"\\n\", \"utf8\");\n}\n//#endregion\n//#region src/lib/server/updateCheck.server.ts\nfunction readInstalledVersion() {\n\tconst dirs = [];\n\tif (private_env.INSTALL_DIR) dirs.push(private_env.INSTALL_DIR);\n\tlet dir = process.cwd();\n\tfor (let i = 0; i < 6; i++) {\n\t\tdirs.push(dir);\n\t\tconst parent = join(dir, \"..\");\n\t\tif (parent === dir) break;\n\t\tdir = parent;\n\t}\n\tfor (const d of dirs) {\n\t\tconst pkgPath = join(d, \"node_modules\", \"@selvajs\", \"selva\", \"package.json\");\n\t\tif (!existsSync(pkgPath)) continue;\n\t\ttry {\n\t\t\tconst pkg = JSON.parse(readFileSync(pkgPath, \"utf8\"));\n\t\t\tif (typeof pkg.version === \"string\") return pkg.version;\n\t\t} catch {}\n\t}\n\treturn null;\n}\nasync function fetchLatestManifest(fetchImpl, channel = \"stable\") {\n\tconst ctrl = new AbortController();\n\tconst timer = setTimeout(() => ctrl.abort(), 5e3);\n\ttry {\n\t\tconst res = await fetchImpl(channelRegistryUrl(channel), {\n\t\t\theaders: { Accept: \"application/json\" },\n\t\t\tsignal: ctrl.signal\n\t\t});\n\t\tif (!res.ok) return {\n\t\t\tversion: null,\n\t\t\tenginesNode: null\n\t\t};\n\t\tconst body = await res.json();\n\t\treturn {\n\t\t\tversion: typeof body.version === \"string\" ? body.version : null,\n\t\t\tenginesNode: typeof body.engines?.node === \"string\" ? body.engines.node : null\n\t\t};\n\t} catch {\n\t\treturn {\n\t\t\tversion: null,\n\t\t\tenginesNode: null\n\t\t};\n\t} finally {\n\t\tclearTimeout(timer);\n\t}\n}\nasync function checkForUpdate(fetchImpl, channel = \"stable\", runningNode = process.versions.node) {\n\tconst current = readInstalledVersion();\n\tconst { version: latest, enginesNode } = await fetchLatestManifest(fetchImpl, channel);\n\treturn {\n\t\tchannel,\n\t\tcurrent,\n\t\tlatest,\n\t\tupdateAvailable: !!(current && latest && latest !== current),\n\t\tnodeCompatibility: {\n\t\t\tcompatible: enginesNode ? satisfiesRange(runningNode, enginesNode) : null,\n\t\t\trequired: enginesNode,\n\t\t\trunning: runningNode\n\t\t}\n\t};\n}\n//#endregion\nexport { writeChannel as i, channelTag as n, readChannel as r, checkForUpdate as t };\n"],"names":[],"mappings":";;;;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,WAAW,CAAC,CAAC,EAAE;AACxB,CAAC,MAAM,CAAC,GAAG,uCAAuC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACjE,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,IAAI;AACpB,CAAC,OAAO;AACR,EAAE,IAAI,EAAE;AACR,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACf,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACf,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AACd,GAAG;AACH,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG;AACtC,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE;AACxC,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC;AAC/B,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,IAAI;AACpB,CAAC,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5D,CAAC,IAAI,SAAS,GAAG,KAAK;AACtB,CAAC,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE;AACjC,EAAE,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;AAClD,EAAE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE;AAC5B,EAAE,IAAI,GAAG,GAAG,IAAI;AAChB,EAAE,IAAI,SAAS,GAAG,IAAI;AACtB,EAAE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE;AAChC,GAAG,MAAM,CAAC,GAAG,kEAAkE,CAAC,IAAI,CAAC,MAAM,CAAC;AAC5F,GAAG,IAAI,CAAC,CAAC,EAAE;AACX,IAAI,SAAS,GAAG,KAAK;AACrB,IAAI;AACJ,GAAG;AACH,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG;AACzB,GAAG,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;AACzE,GAAG,MAAM,MAAM,GAAG;AAClB,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChB,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACb,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACZ,IAAI;AACJ,GAAG,MAAM,GAAG,GAAG,CAAC,MAAM;AACtB,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;AAChC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;AACxC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE;AACzC,IAAI;AACJ,IAAI,OAAO,CAAC;AACZ,GAAG,CAAC,GAAG;AACP,GAAG,IAAI,EAAE;AACT,GAAG,QAAQ,EAAE;AACb,IAAI,KAAK,IAAI;AACb,KAAK,EAAE,GAAG,GAAG,IAAI,CAAC;AAClB,KAAK;AACL,IAAI,KAAK,GAAG;AACZ,KAAK,EAAE,GAAG,GAAG,GAAG,CAAC;AACjB,KAAK;AACL,IAAI,KAAK,IAAI;AACb,KAAK,EAAE,GAAG,GAAG,IAAI,CAAC;AAClB,KAAK;AACL,IAAI,KAAK,GAAG;AACZ,KAAK,EAAE,GAAG,GAAG,GAAG,CAAC;AACjB,KAAK;AACL,IAAI,KAAK,GAAG;AACZ,KAAK,EAAE,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;AAC7C,KAAK;AACL,IAAI,KAAK,GAAG;AACZ,KAAK,EAAE,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;AACxE,KAAK;AACL,IAAI,SAAS,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC;AACnM;AACA,GAAG,IAAI,CAAC,EAAE,EAAE;AACZ,IAAI,GAAG,GAAG,KAAK;AACf,IAAI;AACJ,GAAG;AACH,EAAE;AACF,EAAE,IAAI,CAAC,SAAS,EAAE;AAClB,EAAE,SAAS,GAAG,IAAI;AAClB,EAAE,IAAI,GAAG,EAAE,OAAO,IAAI;AACtB,CAAC;AACD,CAAC,OAAO,SAAS,GAAG,KAAK,GAAG,IAAI;AAChC;AACA;AACA;AACA,IAAI,YAAY,GAAG,oBAAoB;AACvC,SAAS,UAAU,CAAC,OAAO,EAAE;AAC7B,CAAC,OAAO,OAAO,KAAK,MAAM,GAAG,MAAM,GAAG,QAAQ;AAC9C;AACA,SAAS,kBAAkB,CAAC,OAAO,EAAE;AACrC,CAAC,OAAO,CAAC,4CAA4C,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5E;AACA,SAAS,SAAS,CAAC,CAAC,EAAE;AACtB,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,MAAM;AACtC;AACA,SAAS,aAAa,GAAG;AACzB,CAAC,MAAM,UAAU,GAAG,EAAE;AACtB,CAAC,IAAI,WAAW,CAAC,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;AACtE,CAAC,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;AACxB,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;AAC7B,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;AACtB,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;AAChC,EAAE,IAAI,MAAM,KAAK,GAAG,EAAE;AACtB,EAAE,GAAG,GAAG,MAAM;AACd,CAAC;AACD,CAAC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC;AACnH,CAAC,OAAO,IAAI;AACZ;AACA,SAAS,eAAe,GAAG;AAC3B,CAAC,OAAO,IAAI,CAAC,aAAa,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC;AAC5D;AACA,SAAS,WAAW,GAAG;AACvB,CAAC,MAAM,IAAI,GAAG,eAAe,EAAE;AAC/B,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,QAAQ;AACvC,CAAC,IAAI;AACL,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACvD,EAAE,OAAO,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,GAAG,QAAQ;AAC9D,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,QAAQ;AACjB,CAAC;AACD;AACA,SAAS,YAAY,CAAC,OAAO,EAAE;AAC/B,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,yBAAyB,EAAE,OAAO,CAAC,CAAC,CAAC;AAChF,CAAC,aAAa,CAAC,eAAe,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;AACtF;AACA;AACA;AACA,SAAS,oBAAoB,GAAG;AAChC,CAAC,MAAM,IAAI,GAAG,EAAE;AAChB,CAAC,IAAI,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;AAChE,CAAC,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;AACxB,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;AAC7B,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AAChB,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;AAChC,EAAE,IAAI,MAAM,KAAK,GAAG,EAAE;AACtB,EAAE,GAAG,GAAG,MAAM;AACd,CAAC;AACD,CAAC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE;AACvB,EAAE,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,CAAC;AAC9E,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;AAC5B,EAAE,IAAI;AACN,GAAG,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACxD,GAAG,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,OAAO,GAAG,CAAC,OAAO;AAC1D,EAAE,CAAC,CAAC,MAAM,CAAC;AACX,CAAC;AACD,CAAC,OAAO,IAAI;AACZ;AACA,eAAe,mBAAmB,CAAC,SAAS,EAAE,OAAO,GAAG,QAAQ,EAAE;AAClE,CAAC,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE;AACnC,CAAC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC;AAClD,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE;AAC3D,GAAG,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;AAC1C,GAAG,MAAM,EAAE,IAAI,CAAC;AAChB,GAAG,CAAC;AACJ,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO;AACtB,GAAG,OAAO,EAAE,IAAI;AAChB,GAAG,WAAW,EAAE;AAChB,GAAG;AACH,EAAE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE;AAC/B,EAAE,OAAO;AACT,GAAG,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI;AAClE,GAAG,WAAW,EAAE,OAAO,IAAI,CAAC,OAAO,EAAE,IAAI,KAAK,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG;AAC7E,GAAG;AACH,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO;AACT,GAAG,OAAO,EAAE,IAAI;AAChB,GAAG,WAAW,EAAE;AAChB,GAAG;AACH,CAAC,CAAC,SAAS;AACX,EAAE,YAAY,CAAC,KAAK,CAAC;AACrB,CAAC;AACD;AACA,eAAe,cAAc,CAAC,SAAS,EAAE,OAAO,GAAG,QAAQ,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE;AAClG,CAAC,MAAM,OAAO,GAAG,oBAAoB,EAAE;AACvC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE,OAAO,CAAC;AACvF,CAAC,OAAO;AACR,EAAE,OAAO;AACT,EAAE,OAAO;AACT,EAAE,MAAM;AACR,EAAE,eAAe,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,IAAI,MAAM,KAAK,OAAO,CAAC;AAC9D,EAAE,iBAAiB,EAAE;AACrB,GAAG,UAAU,EAAE,WAAW,GAAG,cAAc,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG,IAAI;AAC5E,GAAG,QAAQ,EAAE,WAAW;AACxB,GAAG,OAAO,EAAE;AACZ;AACA,EAAE;AACF;;;;"}

package/build/server/chunks/chunks/utils2.js-BzfeJTTG.js

@@ -0,0 +1,62 @@
+import { m as isPlatformServer } from './providers.server.js-fp7jQgxZ.js';
+
+//#region ../platform/src/computeServer/utils.ts
+/**
+* Servers an org can see in pickers and use for solves. Architecture spec §4.8.
+*
+* = platform servers shared with this org (or `'all'`, or the global default)
+* ∪ org-private servers owned by this org
+*
+* The global default is always included — it's the floor of the system.
+*/
+function serversVisibleTo(config, orgId) {
+	return config.servers.filter((s) => {
+		if (isPlatformServer(s)) {
+			if (s.id === config.defaultServerId) return true;
+			if (s.sharedWith === "all") return true;
+			if (orgId && s.sharedWith.includes(orgId)) return true;
+			return false;
+		}
+		return !!orgId && s.ownerOrgId === orgId;
+	});
+}
+/**
+* Resolve the default server id for an org. Per-org override → global default.
+* Returns `undefined` if neither is set or the chosen id is not visible.
+*/
+function defaultServerIdFor(config, orgId) {
+	const visible = serversVisibleTo(config, orgId);
+	const visibleIds = new Set(visible.map((s) => s.id));
+	if (orgId) {
+		const orgChoice = config.orgDefaults?.[orgId];
+		if (orgChoice && visibleIds.has(orgChoice)) return orgChoice;
+	}
+	if (config.defaultServerId && visibleIds.has(config.defaultServerId)) return config.defaultServerId;
+}
+function resolveServerForOrg(config, orgId, opts = {}) {
+	const visible = serversVisibleTo(config, orgId);
+	if (visible.length === 0) throw new Error("No compute servers are configured or visible for this org.");
+	if (opts.definitionPin) {
+		const pinned = visible.find((s) => s.id === opts.definitionPin);
+		if (pinned) return pinned;
+	}
+	const defaultId = defaultServerIdFor(config, orgId);
+	if (defaultId) {
+		const found = visible.find((s) => s.id === defaultId);
+		if (found) return found;
+	}
+	return visible[0];
+}
+/**
+* Lookup by id, regardless of scope or visibility. Useful in admin contexts
+* that need to display a server independently of the visibility filter.
+*/
+function findServerById(config, id) {
+	return config.servers.find((s) => s.id === id);
+}
+function platformServers(config) {
+	return config.servers.filter(isPlatformServer);
+}
+
+export { defaultServerIdFor as d, findServerById as f, platformServers as p, resolveServerForOrg as r, serversVisibleTo as s };
+//# sourceMappingURL=utils2.js-BzfeJTTG.js.map

package/build/server/chunks/chunks/utils2.js-BzfeJTTG.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils2.js-BzfeJTTG.js","sources":["../../../../.svelte-kit/output/server/chunks/utils2.js"],"sourcesContent":["import { I as isPlatformServer } from \"./providers.server.js\";\n//#region ../platform/src/computeServer/utils.ts\n/**\n* Servers an org can see in pickers and use for solves. Architecture spec §4.8.\n*\n* = platform servers shared with this org (or `'all'`, or the global default)\n* ∪ org-private servers owned by this org\n*\n* The global default is always included — it's the floor of the system.\n*/\nfunction serversVisibleTo(config, orgId) {\n\treturn config.servers.filter((s) => {\n\t\tif (isPlatformServer(s)) {\n\t\t\tif (s.id === config.defaultServerId) return true;\n\t\t\tif (s.sharedWith === \"all\") return true;\n\t\t\tif (orgId && s.sharedWith.includes(orgId)) return true;\n\t\t\treturn false;\n\t\t}\n\t\treturn !!orgId && s.ownerOrgId === orgId;\n\t});\n}\n/**\n* Resolve the default server id for an org. Per-org override → global default.\n* Returns `undefined` if neither is set or the chosen id is not visible.\n*/\nfunction defaultServerIdFor(config, orgId) {\n\tconst visible = serversVisibleTo(config, orgId);\n\tconst visibleIds = new Set(visible.map((s) => s.id));\n\tif (orgId) {\n\t\tconst orgChoice = config.orgDefaults?.[orgId];\n\t\tif (orgChoice && visibleIds.has(orgChoice)) return orgChoice;\n\t}\n\tif (config.defaultServerId && visibleIds.has(config.defaultServerId)) return config.defaultServerId;\n}\nfunction resolveServerForOrg(config, orgId, opts = {}) {\n\tconst visible = serversVisibleTo(config, orgId);\n\tif (visible.length === 0) throw new Error(\"No compute servers are configured or visible for this org.\");\n\tif (opts.definitionPin) {\n\t\tconst pinned = visible.find((s) => s.id === opts.definitionPin);\n\t\tif (pinned) return pinned;\n\t}\n\tconst defaultId = defaultServerIdFor(config, orgId);\n\tif (defaultId) {\n\t\tconst found = visible.find((s) => s.id === defaultId);\n\t\tif (found) return found;\n\t}\n\treturn visible[0];\n}\n/**\n* Lookup by id, regardless of scope or visibility. Useful in admin contexts\n* that need to display a server independently of the visibility filter.\n*/\nfunction findServerById(config, id) {\n\treturn config.servers.find((s) => s.id === id);\n}\nfunction platformServers(config) {\n\treturn config.servers.filter(isPlatformServer);\n}\n//#endregion\nexport { serversVisibleTo as a, resolveServerForOrg as i, findServerById as n, platformServers as r, defaultServerIdFor as t };\n"],"names":[],"mappings":";;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE;AACzC,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;AACrC,EAAE,IAAI,gBAAgB,CAAC,CAAC,CAAC,EAAE;AAC3B,GAAG,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,eAAe,EAAE,OAAO,IAAI;AACnD,GAAG,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,EAAE,OAAO,IAAI;AAC1C,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,IAAI;AACzD,GAAG,OAAO,KAAK;AACf,EAAE;AACF,EAAE,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK;AAC1C,CAAC,CAAC,CAAC;AACH;AACA;AACA;AACA;AACA;AACA,SAAS,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE;AAC3C,CAAC,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC;AAChD,CAAC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;AACrD,CAAC,IAAI,KAAK,EAAE;AACZ,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC;AAC/C,EAAE,IAAI,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,SAAS;AAC9D,CAAC;AACD,CAAC,IAAI,MAAM,CAAC,eAAe,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,OAAO,MAAM,CAAC,eAAe;AACpG;AACA,SAAS,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE;AACvD,CAAC,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC;AAChD,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC;AACxG,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE;AACzB,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,aAAa,CAAC;AACjE,EAAE,IAAI,MAAM,EAAE,OAAO,MAAM;AAC3B,CAAC;AACD,CAAC,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC;AACpD,CAAC,IAAI,SAAS,EAAE;AAChB,EAAE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC;AACvD,EAAE,IAAI,KAAK,EAAE,OAAO,KAAK;AACzB,CAAC;AACD,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC;AAClB;AACA;AACA;AACA;AACA;AACA,SAAS,cAAc,CAAC,MAAM,EAAE,EAAE,EAAE;AACpC,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;AAC/C;AACA,SAAS,eAAe,CAAC,MAAM,EAAE;AACjC,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC;AAC/C;;;;"}

package/build/server/chunks/chunks/visibility.server.js-DZjpd-H3.js

@@ -0,0 +1,110 @@
+import { S as SYSTEM_CONTEXT } from './src.js-BYv4z3-l.js';
+import { o as getDefinitionMeta, e as getOrganizationProvider, f as getProjectProvider, q as getPlatformProjectGrantStore } from './providers.server.js-fp7jQgxZ.js';
+import { e as canView, p as projectAccessInputFromRows } from './access.server.js-CXfv8gGB.js';
+
+//#region src/lib/server/definitions/visibility.server.ts
+/**
+* Visibility-filtered definition reads, shared by the library page load and
+* `GET /api/v1/definitions`.
+*
+* **This is a tenancy boundary.** The project scan runs as `SYSTEM_CONTEXT` so
+* cross-org `public` projects are reachable when `ALLOW_CROSS_ORG_PUBLIC` is on;
+* `canView` over the fetched membership rows is the only thing keeping another
+* org's projects out of the result. The definition list itself is then filtered
+* *in the query* via `projectIds`, so the cursor is applied after visibility
+* rather than over a page that gets thinned afterwards.
+*
+* Cost is constant in the number of orgs and projects: three bulk membership
+* reads regardless of N. Anything added here must keep that property — a
+* per-project `await` inside a loop reintroduces the N+1 this replaced.
+*/
+/** Upper bound on the org/project scan. Visibility needs the whole set. */
+var SCAN_LIMIT = 200;
+/**
+* Resolve the caller's accessible project set in a constant number of queries.
+*
+* Grants are fetched only for `platform`-visibility projects — `canView`
+* short-circuits before reading them for every other visibility.
+*/
+async function resolveAccessibleProjects(ctx) {
+	const orgs = getOrganizationProvider();
+	const projectStore = getProjectProvider();
+	const orgIds = (await orgs.listOrgs(SYSTEM_CONTEXT, { limit: SCAN_LIMIT })).items.map((o) => o.id);
+	const allProjects = (await Promise.all(orgIds.map((orgId) => projectStore.listProjects(SYSTEM_CONTEXT, orgId, { limit: SCAN_LIMIT })))).flatMap((p) => p.items);
+	const projectIds = allProjects.map((p) => p.id);
+	const platformProjectIds = allProjects.filter((p) => p.visibility === "platform").map((p) => p.id);
+	const [orgMemberByOrgId, memberByProjectId, grantsByProjectId] = await Promise.all([
+		orgs.getOrgMembersFor(SYSTEM_CONTEXT, orgIds, ctx.userId),
+		projectStore.getProjectMembersFor(SYSTEM_CONTEXT, projectIds, ctx.userId),
+		platformProjectIds.length ? getPlatformProjectGrantStore().listByProjects(SYSTEM_CONTEXT, platformProjectIds) : Promise.resolve(/* @__PURE__ */ new Map())
+	]);
+	return {
+		projects: allProjects.filter((project) => canView(projectAccessInputFromRows(ctx, project, {
+			member: memberByProjectId.get(project.id) ?? null,
+			orgMember: orgMemberByOrgId.get(project.orgId) ?? null,
+			platformGrants: grantsByProjectId.get(project.id) ?? []
+		}))),
+		allById: new Map(allProjects.map((p) => [p.id, p])),
+		memberByProjectId,
+		orgMemberByOrgId
+	};
+}
+/**
+* List definitions the caller can view, paginated correctly.
+*
+* `opts.projectId` narrows to one project; a caller who cannot view it gets an
+* empty page rather than a 403, so this never reveals that a project exists.
+*/
+async function listVisibleDefinitions(ctx, opts = {}) {
+	const { projectId, ...listOpts } = opts;
+	const { projects } = await resolveAccessibleProjects(ctx);
+	const scoped = projectId ? projects.filter((p) => p.id === projectId) : projects;
+	const page = await getDefinitionMeta().list(ctx, {
+		...listOpts,
+		projectIds: scoped.map((p) => p.id)
+	});
+	return {
+		items: page.items,
+		nextCursor: page.nextCursor,
+		projects: scoped
+	};
+}
+/**
+* One definition, or `null` when the caller cannot view its project.
+*
+* Returns `null` rather than throwing 403 so callers surface a 404: a public
+* API that answers "forbidden" for a guid the caller cannot see turns
+* `/definitions/{guid}` into a cross-tenant existence oracle.
+*/
+async function getVisibleDefinition(ctx, guid) {
+	const record = await getDefinitionMeta().get(ctx, guid);
+	if (!record) return null;
+	const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, record.projectId);
+	if (!project) return null;
+	const [orgMembers, projectMembers, grants] = await Promise.all([
+		getOrganizationProvider().getOrgMembersFor(SYSTEM_CONTEXT, [project.orgId], ctx.userId),
+		getProjectProvider().getProjectMembersFor(SYSTEM_CONTEXT, [project.id], ctx.userId),
+		project.visibility === "platform" ? getPlatformProjectGrantStore().listByProject(SYSTEM_CONTEXT, project.id) : Promise.resolve([])
+	]);
+	return canView(projectAccessInputFromRows(ctx, project, {
+		member: projectMembers.get(project.id) ?? null,
+		orgMember: orgMembers.get(project.orgId) ?? null,
+		platformGrants: grants
+	})) ? record : null;
+}
+/**
+* One version of a definition the caller can view, including its cached
+* `schema`. `null` when the definition is invisible, the version is missing, or
+* the version belongs to a different definition — a caller must not be able to
+* read an arbitrary version by pairing it with a guid they can see.
+*/
+async function loadVisibleVersion(ctx, guid, versionId) {
+	const record = await getVisibleDefinition(ctx, guid);
+	if (!record) return null;
+	const version = await getDefinitionMeta().getVersion(ctx, versionId);
+	if (!version || version.definitionId !== record.guid) return null;
+	return version;
+}
+
+export { loadVisibleVersion as a, getVisibleDefinition as g, listVisibleDefinitions as l, resolveAccessibleProjects as r };
+//# sourceMappingURL=visibility.server.js-DZjpd-H3.js.map

package/build/server/chunks/chunks/visibility.server.js-DZjpd-H3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"visibility.server.js-DZjpd-H3.js","sources":["../../../../.svelte-kit/output/server/chunks/visibility.server.js"],"sourcesContent":["import { t as SYSTEM_CONTEXT } from \"./src.js\";\nimport { _ as getProjectProvider, g as getPlatformProjectGrantStore, m as getOrganizationProvider, s as getDefinitionMeta } from \"./providers.server.js\";\nimport { O as canView, a as projectAccessInputFromRows } from \"./access.server.js\";\n//#region src/lib/server/definitions/visibility.server.ts\n/**\n* Visibility-filtered definition reads, shared by the library page load and\n* `GET /api/v1/definitions`.\n*\n* **This is a tenancy boundary.** The project scan runs as `SYSTEM_CONTEXT` so\n* cross-org `public` projects are reachable when `ALLOW_CROSS_ORG_PUBLIC` is on;\n* `canView` over the fetched membership rows is the only thing keeping another\n* org's projects out of the result. The definition list itself is then filtered\n* *in the query* via `projectIds`, so the cursor is applied after visibility\n* rather than over a page that gets thinned afterwards.\n*\n* Cost is constant in the number of orgs and projects: three bulk membership\n* reads regardless of N. Anything added here must keep that property — a\n* per-project `await` inside a loop reintroduces the N+1 this replaced.\n*/\n/** Upper bound on the org/project scan. Visibility needs the whole set. */\nvar SCAN_LIMIT = 200;\n/**\n* Resolve the caller's accessible project set in a constant number of queries.\n*\n* Grants are fetched only for `platform`-visibility projects — `canView`\n* short-circuits before reading them for every other visibility.\n*/\nasync function resolveAccessibleProjects(ctx) {\n\tconst orgs = getOrganizationProvider();\n\tconst projectStore = getProjectProvider();\n\tconst orgIds = (await orgs.listOrgs(SYSTEM_CONTEXT, { limit: SCAN_LIMIT })).items.map((o) => o.id);\n\tconst allProjects = (await Promise.all(orgIds.map((orgId) => projectStore.listProjects(SYSTEM_CONTEXT, orgId, { limit: SCAN_LIMIT })))).flatMap((p) => p.items);\n\tconst projectIds = allProjects.map((p) => p.id);\n\tconst platformProjectIds = allProjects.filter((p) => p.visibility === \"platform\").map((p) => p.id);\n\tconst [orgMemberByOrgId, memberByProjectId, grantsByProjectId] = await Promise.all([\n\t\torgs.getOrgMembersFor(SYSTEM_CONTEXT, orgIds, ctx.userId),\n\t\tprojectStore.getProjectMembersFor(SYSTEM_CONTEXT, projectIds, ctx.userId),\n\t\tplatformProjectIds.length ? getPlatformProjectGrantStore().listByProjects(SYSTEM_CONTEXT, platformProjectIds) : Promise.resolve(/* @__PURE__ */ new Map())\n\t]);\n\treturn {\n\t\tprojects: allProjects.filter((project) => canView(projectAccessInputFromRows(ctx, project, {\n\t\t\tmember: memberByProjectId.get(project.id) ?? null,\n\t\t\torgMember: orgMemberByOrgId.get(project.orgId) ?? null,\n\t\t\tplatformGrants: grantsByProjectId.get(project.id) ?? []\n\t\t}))),\n\t\tallById: new Map(allProjects.map((p) => [p.id, p])),\n\t\tmemberByProjectId,\n\t\torgMemberByOrgId\n\t};\n}\n/**\n* List definitions the caller can view, paginated correctly.\n*\n* `opts.projectId` narrows to one project; a caller who cannot view it gets an\n* empty page rather than a 403, so this never reveals that a project exists.\n*/\nasync function listVisibleDefinitions(ctx, opts = {}) {\n\tconst { projectId, ...listOpts } = opts;\n\tconst { projects } = await resolveAccessibleProjects(ctx);\n\tconst scoped = projectId ? projects.filter((p) => p.id === projectId) : projects;\n\tconst page = await getDefinitionMeta().list(ctx, {\n\t\t...listOpts,\n\t\tprojectIds: scoped.map((p) => p.id)\n\t});\n\treturn {\n\t\titems: page.items,\n\t\tnextCursor: page.nextCursor,\n\t\tprojects: scoped\n\t};\n}\n/**\n* One definition, or `null` when the caller cannot view its project.\n*\n* Returns `null` rather than throwing 403 so callers surface a 404: a public\n* API that answers \"forbidden\" for a guid the caller cannot see turns\n* `/definitions/{guid}` into a cross-tenant existence oracle.\n*/\nasync function getVisibleDefinition(ctx, guid) {\n\tconst record = await getDefinitionMeta().get(ctx, guid);\n\tif (!record) return null;\n\tconst project = await getProjectProvider().getProject(SYSTEM_CONTEXT, record.projectId);\n\tif (!project) return null;\n\tconst [orgMembers, projectMembers, grants] = await Promise.all([\n\t\tgetOrganizationProvider().getOrgMembersFor(SYSTEM_CONTEXT, [project.orgId], ctx.userId),\n\t\tgetProjectProvider().getProjectMembersFor(SYSTEM_CONTEXT, [project.id], ctx.userId),\n\t\tproject.visibility === \"platform\" ? getPlatformProjectGrantStore().listByProject(SYSTEM_CONTEXT, project.id) : Promise.resolve([])\n\t]);\n\treturn canView(projectAccessInputFromRows(ctx, project, {\n\t\tmember: projectMembers.get(project.id) ?? null,\n\t\torgMember: orgMembers.get(project.orgId) ?? null,\n\t\tplatformGrants: grants\n\t})) ? record : null;\n}\n/**\n* One version of a definition the caller can view, including its cached\n* `schema`. `null` when the definition is invisible, the version is missing, or\n* the version belongs to a different definition — a caller must not be able to\n* read an arbitrary version by pairing it with a guid they can see.\n*/\nasync function loadVisibleVersion(ctx, guid, versionId) {\n\tconst record = await getVisibleDefinition(ctx, guid);\n\tif (!record) return null;\n\tconst version = await getDefinitionMeta().getVersion(ctx, versionId);\n\tif (!version || version.definitionId !== record.guid) return null;\n\treturn version;\n}\n//#endregion\nexport { resolveAccessibleProjects as i, listVisibleDefinitions as n, loadVisibleVersion as r, getVisibleDefinition as t };\n"],"names":[],"mappings":";;;;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,UAAU,GAAG,GAAG;AACpB;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,yBAAyB,CAAC,GAAG,EAAE;AAC9C,CAAC,MAAM,IAAI,GAAG,uBAAuB,EAAE;AACvC,CAAC,MAAM,YAAY,GAAG,kBAAkB,EAAE;AAC1C,CAAC,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AACnG,CAAC,MAAM,WAAW,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,YAAY,CAAC,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;AAChK,CAAC,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC,MAAM,kBAAkB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AACnG,CAAC,MAAM,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AACpF,EAAE,IAAI,CAAC,gBAAgB,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC;AAC3D,EAAE,YAAY,CAAC,oBAAoB,CAAC,cAAc,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC;AAC3E,EAAE,kBAAkB,CAAC,MAAM,GAAG,4BAA4B,EAAE,CAAC,cAAc,CAAC,cAAc,EAAE,kBAAkB,CAAC,GAAG,OAAO,CAAC,OAAO,iBAAiB,IAAI,GAAG,EAAE;AAC3J,EAAE,CAAC;AACH,CAAC,OAAO;AACR,EAAE,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,0BAA0B,CAAC,GAAG,EAAE,OAAO,EAAE;AAC7F,GAAG,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,IAAI;AACpD,GAAG,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI;AACzD,GAAG,cAAc,EAAE,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI;AACxD,GAAG,CAAC,CAAC,CAAC;AACN,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACrD,EAAE,iBAAiB;AACnB,EAAE;AACF,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,sBAAsB,CAAC,GAAG,EAAE,IAAI,GAAG,EAAE,EAAE;AACtD,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI;AACxC,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,yBAAyB,CAAC,GAAG,CAAC;AAC1D,CAAC,MAAM,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,GAAG,QAAQ;AACjF,CAAC,MAAM,IAAI,GAAG,MAAM,iBAAiB,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;AAClD,EAAE,GAAG,QAAQ;AACb,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE;AACpC,EAAE,CAAC;AACH,CAAC,OAAO;AACR,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK;AACnB,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU;AAC7B,EAAE,QAAQ,EAAE;AACZ,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE;AAC/C,CAAC,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC;AACxD,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI;AACzB,CAAC,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC;AACxF,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI;AAC1B,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AAChE,EAAE,uBAAuB,EAAE,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC;AACzF,EAAE,kBAAkB,EAAE,CAAC,oBAAoB,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC;AACrF,EAAE,OAAO,CAAC,UAAU,KAAK,UAAU,GAAG,4BAA4B,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE;AACnI,EAAE,CAAC;AACH,CAAC,OAAO,OAAO,CAAC,0BAA0B,CAAC,GAAG,EAAE,OAAO,EAAE;AACzD,EAAE,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,IAAI;AAChD,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI;AAClD,EAAE,cAAc,EAAE;AAClB,EAAE,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI;AACpB;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;AACxD,CAAC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC;AACrD,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI;AACzB,CAAC,MAAM,OAAO,GAAG,MAAM,iBAAiB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC;AACrE,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI;AAClE,CAAC,OAAO,OAAO;AACf;;;;"}