@selvajs/selva 4.8.0-beta.4 → 4.8.0-beta.7

package/build/server/chunks/entries/endpoints/api/admin/system/update/_server.ts.js-CGUWIdNy.js

@@ -0,0 +1,496 @@
+import { b as private_env } from '../../../../../../chunks/shared-server.js-HBAhbQ8m.js';
+import '../../../../../../chunks/src.js-BYv4z3-l.js';
+import { z as actorFrom, r as renderThrown, j as getEventSink, i as getErrorReporter } from '../../../../../../chunks/providers.server.js-BoM2upme.js';
+import { r as requirePermission } from '../../../../../../chunks/access.server.js-BPX5ADvu.js';
+import { c as checkForUpdate, r as readChannel, a as channelTag } from '../../../../../../chunks/updateCheck.server.js-EKxgtl6k.js';
+import { u as updateLogPath, f as findDeploymentDir, a as updateStatePath, s as startUpdateOutcomeReconciler } from '../../../../../../chunks/selfUpdate.server.js-B69i8dAD.js';
+import { json } from '@sveltejs/kit';
+import { join as join$1 } from 'node:path';
+import { readFileSync as readFileSync$1 } from 'node:fs';
+import { spawn } from 'child_process';
+import { join } from 'path';
+import { readFileSync, writeFileSync } from 'fs';
+import 'zod';
+import '../../../../../../chunks/limits.js-I-HAqbOg.js';
+import '../../../../../../chunks/schema.js-o6B8HHvu.js';
+import '../../../../../../chunks/chunk-AYH5O3VG.js-YiX3ZqeT.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/api-errors.js-7Mw49fQc.js';
+import '../../../../../../chunks/utils2.js-BqVsWOfi.js';
+import '../../../../../../chunks/update-outcome.js-DRDTPtu2.js';
+
+//#region src/lib/server/updateRunner.server.ts
+/**
+* Generates the bash the self-update POST route spawns: a tiny daemonizing
+* launcher plus the runner script that actually stops/updates/starts/health-
+* checks the deployment. Split out of the route file because SvelteKit's
+* route-file validator only allows HTTP-verb exports (and `_`-prefixed ones) —
+* these are plain functions the runner-script contract tests import directly.
+*/
+function readRuntimeVersion(dir) {
+	try {
+		const pkg = JSON.parse(readFileSync$1(join$1(dir, "node_modules", "@selvajs", "selva", "package.json"), "utf8"));
+		return typeof pkg.version === "string" ? pkg.version : void 0;
+	} catch {
+		return;
+	}
+}
+function shellQuote(s) {
+	return `'${s.replace(/'/g, `'\\''`)}'`;
+}
+function buildLauncher(runnerScript, logPath, prelude = []) {
+	const echoes = prelude.map((line) => `echo ${shellQuote(line)}`).join("\n");
+	return `
+LOGFILE=${shellQuote(logPath)}
+RUNNER=/tmp/selva-update-runner.sh
+mkdir -p "$(dirname "$LOGFILE")"
+: > "$LOGFILE"
+
+cat > "$RUNNER" <<'__SELVA_RUNNER_EOF__'
+${runnerScript}
+__SELVA_RUNNER_EOF__
+chmod +x "$RUNNER"
+
+trap '' PIPE
+exec > >(tee --output-error=warn-nopipe -a "$LOGFILE" 2>/dev/null) 2>&1
+${echoes}
+
+# Daemonize the runner so PM2's tree-kill of selva-compute can't reach it.
+# setsid puts it in a new session; the trailing & + disown + launcher exit
+# leaves the runner with PPID=1 once we're gone. stdin/stdout/stderr are
+# fully detached from this process (and from selva-compute's pipes).
+setsid bash "$RUNNER" </dev/null >>"$LOGFILE" 2>&1 &
+RUNNER_PID=$!
+disown
+echo "[INFO] Update runner started (PID $RUNNER_PID, log: $LOGFILE)"
+
+# Small pause so the runner has time to print its first line before SSE
+# closes — otherwise the frontend's first poll might see no progress.
+sleep 1
+exit 0
+`;
+}
+function buildNpmRunnerScript(npmArgs, versionBefore, ecosystemPath, tag) {
+	const npmCommand = ["npm", ...npmArgs].map(shellQuote).join(" ");
+	return `#!/bin/bash
+set -o pipefail
+BEFORE=${shellQuote(versionBefore ?? "")}
+ECOSYSTEM=${shellQuote(ecosystemPath)}
+TAG=${shellQuote(tag)}
+
+# Last-resort safety net. If the script exits with the app NOT online for
+# any reason (crash, kill -9, network blip, npm hang past timeout), try to
+# bring it back from ecosystem.config.cjs before we go. The whole point of
+# this script is to update the app; leaving it down is the worst possible
+# outcome.
+on_exit() {
+  CODE=$?
+  STATUS=$(pm2 jlist 2>/dev/null | node -e "
+    try {
+      const list = JSON.parse(require('fs').readFileSync('/dev/stdin','utf8'));
+      const app = list.find(p => p.name === 'selva-compute');
+      process.stdout.write(app ? app.pm2_env.status : 'missing');
+    } catch { process.stdout.write('error'); }
+  " 2>/dev/null || echo "error")
+  if [ "$STATUS" != "online" ]; then
+    echo "[RECOVER] selva-compute is '$STATUS' — starting from ecosystem.config.cjs"
+    pm2 start "$ECOSYSTEM" --update-env >/dev/null 2>&1 || \\
+      echo "[RECOVER] pm2 start failed — manual intervention required: cd $(dirname "$ECOSYSTEM") && pm2 start ecosystem.config.cjs"
+  fi
+  # Terminal marker: the restarted app's outcome reconciler greps this to turn
+  # the run into an audit event (selfUpdate.server.ts). Keep the format stable.
+  echo "[EXIT] code=$CODE"
+}
+trap on_exit EXIT
+
+# A killed runner must not look like a finished one.
+#
+# \`$?\` inside an EXIT trap reports the last completed command, NOT the signal.
+# When systemd SIGTERMs the whole cgroup (issue #118) the EXIT trap still runs
+# and records \`code=0\` — so deriveOutcome takes the exit-0 success branch and
+# the operator is told "Updated X → Y. The app is back online." while npm never
+# ran and the deployment is unchanged. Catching the signal makes the recorded
+# code truthful; 143/130 are the conventional 128+signal values.
+on_signal() {
+  SIG=$1
+  echo "[FATAL] KILLED: runner received SIG$SIG before finishing."
+  echo "[FATAL] Nothing was installed by this run. If the app is down, recover with:"
+  echo "[FATAL]   cd $(dirname "$ECOSYSTEM") && pm2 start ecosystem.config.cjs --update-env"
+  echo "[FATAL] A systemd-supervised pm2 can do this when 'pm2 update' recycles the daemon."
+  exit $2
+}
+trap 'on_signal TERM 143' TERM
+trap 'on_signal INT 130' INT
+trap 'on_signal HUP 129' HUP
+
+# ---------------------------------------------------------------------------
+# 1. Pre-flight: skip the whole cycle if there's nothing to install.
+# ---------------------------------------------------------------------------
+# Without this, clicking "Update" on an already-current instance triggered
+# a full stop/install/start cycle and a downtime window for no reason. Now
+# we just check the registry first.
+echo "[STEP] Checking npm registry for the '$TAG' channel version"
+LATEST=$(npm view "@selvajs/selva@$TAG" version --silent 2>/dev/null || echo "")
+if [ -z "$LATEST" ]; then
+  echo "[WARN] Could not query npm registry — proceeding with update attempt anyway"
+elif [ -n "$BEFORE" ] && [ "$LATEST" = "$BEFORE" ]; then
+  echo "[INFO] Already on the '$TAG' channel version ($BEFORE)"
+  echo "[DONE] Nothing to do"
+  exit 0
+else
+  # May be a forward update OR a revert (target older than installed) — either
+  # way the installed version differs from what this channel publishes.
+  echo "[INFO] Target ($TAG): $BEFORE → $LATEST"
+fi
+
+# ---------------------------------------------------------------------------
+# 1b. Node engine pre-flight — BEFORE any downtime.
+# ---------------------------------------------------------------------------
+# npm only treats an engine mismatch as fatal under engine-strict=true, which no
+# deployment sets. So a release requiring a newer Node installs "successfully",
+# pm2 starts, and /api/health returns 200 (it touches nothing Node-version
+# specific) — a false green that skips rollback entirely. Warn here so a
+# CLI-driven run sees it too; the admin UI blocks earlier (issue #176).
+REQUIRED_NODE=$(npm view "@selvajs/selva@$TAG" engines.node --silent 2>/dev/null | tr -d '"' | tr -d "'")
+RUNNING_NODE=$(node -p 'process.versions.node' 2>/dev/null)
+if [ -n "$REQUIRED_NODE" ] && [ -n "$RUNNING_NODE" ]; then
+  # Compare majors only — the ranges we publish are all \`>=X\` forms.
+  REQ_MAJOR=$(echo "$REQUIRED_NODE" | grep -o '[0-9]\\+' | head -1)
+  RUN_MAJOR=$(echo "$RUNNING_NODE" | cut -d. -f1)
+  if [ -n "$REQ_MAJOR" ] && [ "$RUN_MAJOR" -lt "$REQ_MAJOR" ] 2>/dev/null; then
+    echo "[WARN] ENGINE_MISMATCH: @selvajs/selva@$LATEST requires Node $REQUIRED_NODE but this host runs v$RUNNING_NODE"
+    echo "[WARN] npm will install it anyway (engine-strict is off) and the health probe will pass,"
+    echo "[WARN] but routes using newer Node APIs will fail at request time. Upgrade Node on this host."
+  fi
+fi
+
+# ---------------------------------------------------------------------------
+# 2. Resync PM2 daemon if its in-memory version drifted from the CLI on disk.
+# ---------------------------------------------------------------------------
+# After a global pm2 upgrade the daemon keeps running its original version
+# while the CLI moves forward. Process commands then talk to a stale daemon
+# and the symptom is "stop works, start never lands". \`pm2 update\` dumps
+# processes, kills the daemon, respawns on the current CLI, restores the
+# dump. Doing it before we touch anything keeps the rest of the script
+# talking to a coherent daemon.
+echo "[STEP] Checking PM2 daemon/CLI version sync"
+PING_OUT=$(pm2 ping 2>&1)
+if echo "$PING_OUT" | grep -q "out-of-date"; then
+  # pm2 prints both versions alongside the warning. Which is newer decides
+  # whether \`pm2 update\` can help — see the direction check below (issue #118).
+  DAEMON_V=$(echo "$PING_OUT" | sed -e 's/\\x1b\\[[0-9;]*m//g' \\
+    | grep -i "In memory PM2 version" | grep -o '[0-9]\\+\\.[0-9]\\+\\.[0-9]\\+' | head -1)
+  LOCAL_V=$(echo "$PING_OUT" | sed -e 's/\\x1b\\[[0-9;]*m//g' \\
+    | grep -i "Local PM2 version" | grep -o '[0-9]\\+\\.[0-9]\\+\\.[0-9]\\+' | head -1)
+  DAEMON_MAJOR=\${DAEMON_V%%.*}
+  LOCAL_MAJOR=\${LOCAL_V%%.*}
+
+  # A daemon NEWER than the deployment-local CLI means a foreign global pm2 owns
+  # it. \`pm2 update\` would DOWNGRADE the daemon and feed it a dump it can't read,
+  # losing the process table — selva-compute never gets re-registered. That is an
+  # operator problem, not something this script can repair, so stop before we
+  # take the app down.
+  if [ -n "$DAEMON_MAJOR" ] && [ -n "$LOCAL_MAJOR" ] && [ "$DAEMON_MAJOR" -gt "$LOCAL_MAJOR" ] 2>/dev/null; then
+    echo "[FATAL] PM2_SKEW: the running daemon (v$DAEMON_V) is NEWER than this deployment's pm2 (v$LOCAL_V)."
+    echo "[FATAL] A global pm2 owns the daemon. Running 'pm2 update' would downgrade it and drop"
+    echo "[FATAL] the process table. Resolve manually before updating:"
+    echo "[FATAL]   which -a pm2 && pm2 -v && pm2 ping"
+    echo "[FATAL] Aborting WITHOUT stopping the app — it is still running."
+    exit 8
+  fi
+
+  # Under systemd, \`pm2 update\` kills and respawns the daemon. systemd sees its
+  # unit's main process die and, with the default KillMode=control-group,
+  # SIGTERMs everything in the cgroup — including this runner. setsid escapes
+  # PM2's tree-kill but NOT the cgroup, so there is no way to survive it from
+  # here; refuse the resync instead of being killed by it (issue #118).
+  if grep -qs 'pm2.*\\.service' /proc/self/cgroup 2>/dev/null; then
+    echo "[FATAL] SYSTEMD_PM2: this deployment's PM2 is supervised by systemd, and the daemon"
+    echo "[FATAL] needs a resync. Running 'pm2 update' here would restart the systemd unit and"
+    echo "[FATAL] kill this runner mid-update. Resync manually from a shell, then retry:"
+    echo "[FATAL]   cd $(dirname "$ECOSYSTEM") && ./node_modules/.bin/pm2 update"
+    echo "[FATAL] Aborting WITHOUT stopping the app — it is still running."
+    exit 9
+  fi
+
+  echo "[STEP] PM2 daemon is out-of-date — running 'pm2 update' to resync"
+  if ! pm2 update; then
+    echo "[FATAL] pm2 update failed — aborting before stopping the running app"
+    exit 1
+  fi
+  echo "[INFO] PM2 daemon resynced"
+fi
+
+# ---------------------------------------------------------------------------
+# 3. Stop selva-compute BEFORE npm rewrites build/.
+# ---------------------------------------------------------------------------
+# SvelteKit's node adapter lazy-imports chunks from build/server/chunks/ on
+# every request. Letting npm rewrite build/ while the old process is still
+# serving traffic = in-flight requests hit ERR_MODULE_NOT_FOUND for chunks
+# whose hash just changed under their feet. Stopping first is a brief
+# downtime window (~1-2s longer than restart-in-place) for a much smaller
+# blast radius.
+#
+# This is also where the SSE connection to the frontend dies — selva-compute
+# IS the SSE server. From here on, the user sees output via the log-file
+# polling fallback in the admin UI, not over SSE.
+echo "[STEP] Stopping selva-compute"
+if ! pm2 stop selva-compute; then
+  echo "[WARN] pm2 stop failed — selva-compute may not be running yet. Continuing."
+fi
+
+# ---------------------------------------------------------------------------
+# 4. Run npm update.
+# ---------------------------------------------------------------------------
+echo "[STEP] Updating @selvajs/* packages"
+if ! ${npmCommand}; then
+  echo "[FATAL] npm update failed — EXIT trap will restart the previous build"
+  exit 1
+fi
+
+AFTER=$(node -e "try{console.log(require('./node_modules/@selvajs/selva/package.json').version)}catch(e){}" 2>/dev/null)
+echo "[INFO] New @selvajs/selva: \${AFTER:-unknown}"
+
+if [ -n "$BEFORE" ] && [ "$BEFORE" = "$AFTER" ]; then
+  echo "[WARN] No version change ($BEFORE). Your npm cache may be stale."
+  echo "[WARN] Recover with:"
+  echo "[WARN]   npm cache clean --force"
+  echo "[WARN]   rm -rf node_modules package-lock.json"
+  echo "[WARN]   npm install --prefer-online"
+fi
+
+# ---------------------------------------------------------------------------
+# 5. Start selva-compute with the new build.
+# ---------------------------------------------------------------------------
+# Start from ecosystem.config.cjs, NOT \`pm2 start selva-compute\` — the
+# latter requires selva-compute to already be in pm2's in-memory process
+# list. After a \`pm2 update\` (step 2) that's not guaranteed.
+echo "[STEP] Starting selva-compute with new build"
+if ! pm2 start "$ECOSYSTEM" --update-env; then
+  echo "[FATAL] pm2 start failed — investigate with \\\`pm2 logs selva-compute\\\`"
+  exit 2
+fi
+
+# ---------------------------------------------------------------------------
+# 6. Health probe the new process.
+# ---------------------------------------------------------------------------
+# Read PORT from .env the same way scripts/update.sh does, so non-default
+# ports are respected.
+PORT=$(grep "^PORT=" .env 2>/dev/null \\
+  | head -1 \\
+  | cut -d'=' -f2 \\
+  | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//' -e 's/^["'"'"']//' -e 's/["'"'"']$//' -e 's/[[:space:]]*#.*//')
+PORT=\${PORT:-3000}
+
+echo "[STEP] Health-probing the new process on port $PORT"
+HEALTHY=0
+for i in $(seq 1 15); do
+  sleep 2
+  CODE=$(curl -sS -o /tmp/selva-health.$$ -w "%{http_code}" --max-time 5 "http://localhost:$PORT/api/health" 2>/dev/null || echo "000")
+  if [ "$CODE" = "200" ]; then
+    HEALTHY=1
+    echo "[INFO] Health probe passed after \${i} attempt(s)"
+    rm -f /tmp/selva-health.$$
+    break
+  fi
+  echo "[INFO] Probe attempt $i/15: HTTP $CODE — retrying"
+done
+
+if [ "$HEALTHY" = "1" ]; then
+  echo "[DONE] Update complete"
+  exit 0
+fi
+
+# ---------------------------------------------------------------------------
+# 7. Rollback path.
+# ---------------------------------------------------------------------------
+echo "[FATAL] New process failed health check after 30s"
+if [ -f /tmp/selva-health.$$ ]; then
+  echo "[FATAL] Last response body:"
+  cat /tmp/selva-health.$$
+  rm -f /tmp/selva-health.$$
+fi
+
+if [ -z "$BEFORE" ]; then
+  echo "[FATAL] No prior version recorded — cannot roll back automatically."
+  echo "[FATAL] EXIT trap will attempt to restart the current build anyway."
+  exit 3
+fi
+
+echo "[STEP] Rolling back @selvajs/selva to $BEFORE"
+pm2 stop selva-compute >/dev/null 2>&1 || true
+# Restore @selvajs/cli alongside the runtime: the forward step installs both at
+# the channel tag, so reverting only the runtime leaves a version pair that was
+# never released together.
+if ! npm install --save "@selvajs/cli@$BEFORE" "@selvajs/selva@$BEFORE"; then
+  echo "[FATAL] Rollback npm install failed — EXIT trap will retry restart."
+  exit 4
+fi
+
+pm2 start "$ECOSYSTEM" --update-env || true
+sleep 3
+ROLLBACK_CODE=$(curl -sS -o /dev/null -w "%{http_code}" --max-time 5 "http://localhost:$PORT/api/health" 2>/dev/null || echo "000")
+if [ "$ROLLBACK_CODE" = "200" ]; then
+  echo "[DONE] Rolled back to $BEFORE — previous version is online"
+  exit 5
+fi
+
+echo "[FATAL] Rollback restart also failed health check (HTTP $ROLLBACK_CODE)"
+echo "[FATAL] Manual recovery required. Check: pm2 logs selva-compute"
+exit 6
+`;
+}
+function npmInstallArgs(channel) {
+	const tag = channelTag(channel);
+	return [
+		"install",
+		"--save",
+		"--prefer-online",
+		`@selvajs/cli@${tag}`,
+		`@selvajs/selva@${tag}`
+	];
+}
+function detectUpdatePlan(env, channel) {
+	const dir = findDeploymentDir(env);
+	return dir ? {
+		cwd: dir,
+		args: npmInstallArgs(channel)
+	} : null;
+}
+//#endregion
+//#region src/routes/api/admin/system/update/+server.ts
+function stripAnsi(str) {
+	return str.replace(/\x1B\[[0-9;]*[mGKHF]/g, "");
+}
+var POST = async ({ locals }) => {
+	requirePermission(locals, "instance_admin");
+	const channel = readChannel();
+	const plan = detectUpdatePlan(private_env, channel);
+	if (!plan) return new Response(JSON.stringify({ error: "Couldn't determine how to update this deployment. Expected node_modules/@selvajs/selva (CLI scaffold) in the cwd or a parent directory." }), {
+		status: 500,
+		headers: { "Content-Type": "application/json" }
+	});
+	const versionBefore = readRuntimeVersion(plan.cwd);
+	const actorId = locals.ctx ? actorFrom(locals.ctx) : "system";
+	const pending = {
+		startedAt: (/* @__PURE__ */ new Date()).toISOString(),
+		actorId,
+		channel,
+		fromVersion: versionBefore
+	};
+	try {
+		writeFileSync(updateStatePath(plan.cwd), JSON.stringify(pending, null, "	"));
+	} catch (err) {
+		locals.log.error("Could not persist pending-update state", {
+			component: "selfUpdate",
+			err: renderThrown(err)
+		});
+	}
+	await getEventSink().emit({
+		type: "system.update.started",
+		channel,
+		fromVersion: versionBefore,
+		actorId
+	});
+	const stream = new ReadableStream({ start(controller) {
+		const encoder = new TextEncoder();
+		function sendEvent(type, data) {
+			const message = `data: ${JSON.stringify({
+				type,
+				...data
+			})}\n\n`;
+			controller.enqueue(encoder.encode(message));
+		}
+		try {
+			const prelude = [`[INFO] Updating deployment (cwd: ${plan.cwd}, channel: ${channel})`, ...versionBefore ? [`[INFO] Current @selvajs/selva: ${versionBefore}`] : []];
+			const runnerScript = buildNpmRunnerScript(plan.args, versionBefore, join(plan.cwd, "ecosystem.config.cjs"), channelTag(channel));
+			const cmd = "bash";
+			const args = ["-c", buildLauncher(runnerScript, updateLogPath(plan.cwd), prelude)];
+			const localBin = join(plan.cwd, "node_modules", ".bin");
+			const child = spawn(cmd, args, {
+				cwd: plan.cwd,
+				env: {
+					PATH: `${localBin}:${process.env.PATH ?? ""}`,
+					HOME: process.env.HOME,
+					INSTALL_DIR: plan.cwd
+				},
+				detached: true,
+				stdio: [
+					"ignore",
+					"pipe",
+					"pipe"
+				]
+			});
+			child.unref();
+			startUpdateOutcomeReconciler({
+				deploymentDir: plan.cwd,
+				emit: (e) => getEventSink().emit(e),
+				report: (err) => getErrorReporter().capture(err, { tags: { origin: "selfUpdate" } })
+			});
+			const timeout = setTimeout(() => {
+				try {
+					if (child.pid) process.kill(-child.pid, "SIGTERM");
+				} catch {}
+				sendEvent("log", { data: "[FATAL] Update timed out after 15 minutes" });
+				sendEvent("exit", { code: -1 });
+				controller.close();
+			}, 9e5);
+			let restarting = false;
+			child.stdout.on("data", (data) => {
+				const lines = data.toString().split("\n");
+				for (const line of lines) {
+					const clean = stripAnsi(line).trim();
+					if (clean) if (!restarting && (clean.includes("Applying action stopProcessId") || clean.includes("Applying action restartProcessId"))) {
+						restarting = true;
+						sendEvent("restarting", { data: clean });
+					} else sendEvent("log", { data: clean });
+				}
+			});
+			child.stderr.on("data", (data) => {
+				const lines = data.toString().split("\n");
+				for (const line of lines) {
+					const clean = stripAnsi(line).trim();
+					if (clean) sendEvent("log", { data: `[ERROR] ${clean}` });
+				}
+			});
+			child.on("close", (code) => {
+				clearTimeout(timeout);
+				sendEvent("exit", { code: code ?? -1 });
+				controller.close();
+			});
+			child.on("error", (err) => {
+				clearTimeout(timeout);
+				sendEvent("log", { data: `[FATAL] ${err.message}` });
+				sendEvent("exit", { code: -1 });
+				controller.close();
+			});
+		} catch (err) {
+			sendEvent("log", { data: `[FATAL] Failed to spawn process: ${err}` });
+			sendEvent("exit", { code: -1 });
+			controller.close();
+		}
+	} });
+	return new Response(stream, { headers: {
+		"Content-Type": "text/event-stream",
+		"Cache-Control": "no-cache",
+		Connection: "keep-alive"
+	} });
+};
+var GET = async ({ locals, url, fetch }) => {
+	requirePermission(locals, "instance_admin");
+	if (url.searchParams.get("check") !== null) return json(await checkForUpdate(fetch, readChannel()), { headers: { "Cache-Control": "no-store" } });
+	let body = "";
+	try {
+		body = readFileSync(updateLogPath(findDeploymentDir(private_env)), "utf8");
+	} catch {}
+	return new Response(body, { headers: {
+		"Content-Type": "text/plain; charset=utf-8",
+		"Cache-Control": "no-store"
+	} });
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-CGUWIdNy.js.map

package/build/server/chunks/entries/endpoints/api/admin/system/update/_server.ts.js-CGUWIdNy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CGUWIdNy.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/system/update/_server.ts.js"],"sourcesContent":["import { t as private_env } from \"../../../../../../chunks/shared-server.js\";\nimport \"../../../../../../chunks/src.js\";\nimport { P as actorFrom, T as renderThrown, l as getErrorReporter, u as getEventSink } from \"../../../../../../chunks/providers.server.js\";\nimport { C as requirePermission } from \"../../../../../../chunks/access.server.js\";\nimport { n as channelTag, r as readChannel, t as checkForUpdate } from \"../../../../../../chunks/updateCheck.server.js\";\nimport { i as updateStatePath, n as startUpdateOutcomeReconciler, r as updateLogPath, t as findDeploymentDir } from \"../../../../../../chunks/selfUpdate.server.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { join } from \"node:path\";\nimport { readFileSync } from \"node:fs\";\nimport { spawn } from \"child_process\";\nimport { join as join$1 } from \"path\";\nimport { readFileSync as readFileSync$1, writeFileSync } from \"fs\";\n//#region src/lib/server/updateRunner.server.ts\n/**\n* Generates the bash the self-update POST route spawns: a tiny daemonizing\n* launcher plus the runner script that actually stops/updates/starts/health-\n* checks the deployment. Split out of the route file because SvelteKit's\n* route-file validator only allows HTTP-verb exports (and `_`-prefixed ones) —\n* these are plain functions the runner-script contract tests import directly.\n*/\nfunction readRuntimeVersion(dir) {\n\ttry {\n\t\tconst pkg = JSON.parse(readFileSync(join(dir, \"node_modules\", \"@selvajs\", \"selva\", \"package.json\"), \"utf8\"));\n\t\treturn typeof pkg.version === \"string\" ? pkg.version : void 0;\n\t} catch {\n\t\treturn;\n\t}\n}\nfunction shellQuote(s) {\n\treturn `'${s.replace(/'/g, `'\\\\''`)}'`;\n}\nfunction buildLauncher(runnerScript, logPath, prelude = []) {\n\tconst echoes = prelude.map((line) => `echo ${shellQuote(line)}`).join(\"\\n\");\n\treturn `\nLOGFILE=${shellQuote(logPath)}\nRUNNER=/tmp/selva-update-runner.sh\nmkdir -p \"$(dirname \"$LOGFILE\")\"\n: > \"$LOGFILE\"\n\ncat > \"$RUNNER\" <<'__SELVA_RUNNER_EOF__'\n${runnerScript}\n__SELVA_RUNNER_EOF__\nchmod +x \"$RUNNER\"\n\ntrap '' PIPE\nexec > >(tee --output-error=warn-nopipe -a \"$LOGFILE\" 2>/dev/null) 2>&1\n${echoes}\n\n# Daemonize the runner so PM2's tree-kill of selva-compute can't reach it.\n# setsid puts it in a new session; the trailing & + disown + launcher exit\n# leaves the runner with PPID=1 once we're gone. stdin/stdout/stderr are\n# fully detached from this process (and from selva-compute's pipes).\nsetsid bash \"$RUNNER\" </dev/null >>\"$LOGFILE\" 2>&1 &\nRUNNER_PID=$!\ndisown\necho \"[INFO] Update runner started (PID $RUNNER_PID, log: $LOGFILE)\"\n\n# Small pause so the runner has time to print its first line before SSE\n# closes — otherwise the frontend's first poll might see no progress.\nsleep 1\nexit 0\n`;\n}\nfunction buildNpmRunnerScript(npmArgs, versionBefore, ecosystemPath, tag) {\n\tconst npmCommand = [\"npm\", ...npmArgs].map(shellQuote).join(\" \");\n\treturn `#!/bin/bash\nset -o pipefail\nBEFORE=${shellQuote(versionBefore ?? \"\")}\nECOSYSTEM=${shellQuote(ecosystemPath)}\nTAG=${shellQuote(tag)}\n\n# Last-resort safety net. If the script exits with the app NOT online for\n# any reason (crash, kill -9, network blip, npm hang past timeout), try to\n# bring it back from ecosystem.config.cjs before we go. The whole point of\n# this script is to update the app; leaving it down is the worst possible\n# outcome.\non_exit() {\n  CODE=$?\n  STATUS=$(pm2 jlist 2>/dev/null | node -e \"\n    try {\n      const list = JSON.parse(require('fs').readFileSync('/dev/stdin','utf8'));\n      const app = list.find(p => p.name === 'selva-compute');\n      process.stdout.write(app ? app.pm2_env.status : 'missing');\n    } catch { process.stdout.write('error'); }\n  \" 2>/dev/null || echo \"error\")\n  if [ \"$STATUS\" != \"online\" ]; then\n    echo \"[RECOVER] selva-compute is '$STATUS' — starting from ecosystem.config.cjs\"\n    pm2 start \"$ECOSYSTEM\" --update-env >/dev/null 2>&1 || \\\\\n      echo \"[RECOVER] pm2 start failed — manual intervention required: cd $(dirname \"$ECOSYSTEM\") && pm2 start ecosystem.config.cjs\"\n  fi\n  # Terminal marker: the restarted app's outcome reconciler greps this to turn\n  # the run into an audit event (selfUpdate.server.ts). Keep the format stable.\n  echo \"[EXIT] code=$CODE\"\n}\ntrap on_exit EXIT\n\n# A killed runner must not look like a finished one.\n#\n# \\`$?\\` inside an EXIT trap reports the last completed command, NOT the signal.\n# When systemd SIGTERMs the whole cgroup (issue #118) the EXIT trap still runs\n# and records \\`code=0\\` — so deriveOutcome takes the exit-0 success branch and\n# the operator is told \"Updated X → Y. The app is back online.\" while npm never\n# ran and the deployment is unchanged. Catching the signal makes the recorded\n# code truthful; 143/130 are the conventional 128+signal values.\non_signal() {\n  SIG=$1\n  echo \"[FATAL] KILLED: runner received SIG$SIG before finishing.\"\n  echo \"[FATAL] Nothing was installed by this run. If the app is down, recover with:\"\n  echo \"[FATAL]   cd $(dirname \"$ECOSYSTEM\") && pm2 start ecosystem.config.cjs --update-env\"\n  echo \"[FATAL] A systemd-supervised pm2 can do this when 'pm2 update' recycles the daemon.\"\n  exit $2\n}\ntrap 'on_signal TERM 143' TERM\ntrap 'on_signal INT 130' INT\ntrap 'on_signal HUP 129' HUP\n\n# ---------------------------------------------------------------------------\n# 1. Pre-flight: skip the whole cycle if there's nothing to install.\n# ---------------------------------------------------------------------------\n# Without this, clicking \"Update\" on an already-current instance triggered\n# a full stop/install/start cycle and a downtime window for no reason. Now\n# we just check the registry first.\necho \"[STEP] Checking npm registry for the '$TAG' channel version\"\nLATEST=$(npm view \"@selvajs/selva@$TAG\" version --silent 2>/dev/null || echo \"\")\nif [ -z \"$LATEST\" ]; then\n  echo \"[WARN] Could not query npm registry — proceeding with update attempt anyway\"\nelif [ -n \"$BEFORE\" ] && [ \"$LATEST\" = \"$BEFORE\" ]; then\n  echo \"[INFO] Already on the '$TAG' channel version ($BEFORE)\"\n  echo \"[DONE] Nothing to do\"\n  exit 0\nelse\n  # May be a forward update OR a revert (target older than installed) — either\n  # way the installed version differs from what this channel publishes.\n  echo \"[INFO] Target ($TAG): $BEFORE → $LATEST\"\nfi\n\n# ---------------------------------------------------------------------------\n# 1b. Node engine pre-flight — BEFORE any downtime.\n# ---------------------------------------------------------------------------\n# npm only treats an engine mismatch as fatal under engine-strict=true, which no\n# deployment sets. So a release requiring a newer Node installs \"successfully\",\n# pm2 starts, and /api/health returns 200 (it touches nothing Node-version\n# specific) — a false green that skips rollback entirely. Warn here so a\n# CLI-driven run sees it too; the admin UI blocks earlier (issue #176).\nREQUIRED_NODE=$(npm view \"@selvajs/selva@$TAG\" engines.node --silent 2>/dev/null | tr -d '\"' | tr -d \"'\")\nRUNNING_NODE=$(node -p 'process.versions.node' 2>/dev/null)\nif [ -n \"$REQUIRED_NODE\" ] && [ -n \"$RUNNING_NODE\" ]; then\n  # Compare majors only — the ranges we publish are all \\`>=X\\` forms.\n  REQ_MAJOR=$(echo \"$REQUIRED_NODE\" | grep -o '[0-9]\\\\+' | head -1)\n  RUN_MAJOR=$(echo \"$RUNNING_NODE\" | cut -d. -f1)\n  if [ -n \"$REQ_MAJOR\" ] && [ \"$RUN_MAJOR\" -lt \"$REQ_MAJOR\" ] 2>/dev/null; then\n    echo \"[WARN] ENGINE_MISMATCH: @selvajs/selva@$LATEST requires Node $REQUIRED_NODE but this host runs v$RUNNING_NODE\"\n    echo \"[WARN] npm will install it anyway (engine-strict is off) and the health probe will pass,\"\n    echo \"[WARN] but routes using newer Node APIs will fail at request time. Upgrade Node on this host.\"\n  fi\nfi\n\n# ---------------------------------------------------------------------------\n# 2. Resync PM2 daemon if its in-memory version drifted from the CLI on disk.\n# ---------------------------------------------------------------------------\n# After a global pm2 upgrade the daemon keeps running its original version\n# while the CLI moves forward. Process commands then talk to a stale daemon\n# and the symptom is \"stop works, start never lands\". \\`pm2 update\\` dumps\n# processes, kills the daemon, respawns on the current CLI, restores the\n# dump. Doing it before we touch anything keeps the rest of the script\n# talking to a coherent daemon.\necho \"[STEP] Checking PM2 daemon/CLI version sync\"\nPING_OUT=$(pm2 ping 2>&1)\nif echo \"$PING_OUT\" | grep -q \"out-of-date\"; then\n  # pm2 prints both versions alongside the warning. Which is newer decides\n  # whether \\`pm2 update\\` can help — see the direction check below (issue #118).\n  DAEMON_V=$(echo \"$PING_OUT\" | sed -e 's/\\\\x1b\\\\[[0-9;]*m//g' \\\\\n    | grep -i \"In memory PM2 version\" | grep -o '[0-9]\\\\+\\\\.[0-9]\\\\+\\\\.[0-9]\\\\+' | head -1)\n  LOCAL_V=$(echo \"$PING_OUT\" | sed -e 's/\\\\x1b\\\\[[0-9;]*m//g' \\\\\n    | grep -i \"Local PM2 version\" | grep -o '[0-9]\\\\+\\\\.[0-9]\\\\+\\\\.[0-9]\\\\+' | head -1)\n  DAEMON_MAJOR=\\${DAEMON_V%%.*}\n  LOCAL_MAJOR=\\${LOCAL_V%%.*}\n\n  # A daemon NEWER than the deployment-local CLI means a foreign global pm2 owns\n  # it. \\`pm2 update\\` would DOWNGRADE the daemon and feed it a dump it can't read,\n  # losing the process table — selva-compute never gets re-registered. That is an\n  # operator problem, not something this script can repair, so stop before we\n  # take the app down.\n  if [ -n \"$DAEMON_MAJOR\" ] && [ -n \"$LOCAL_MAJOR\" ] && [ \"$DAEMON_MAJOR\" -gt \"$LOCAL_MAJOR\" ] 2>/dev/null; then\n    echo \"[FATAL] PM2_SKEW: the running daemon (v$DAEMON_V) is NEWER than this deployment's pm2 (v$LOCAL_V).\"\n    echo \"[FATAL] A global pm2 owns the daemon. Running 'pm2 update' would downgrade it and drop\"\n    echo \"[FATAL] the process table. Resolve manually before updating:\"\n    echo \"[FATAL]   which -a pm2 && pm2 -v && pm2 ping\"\n    echo \"[FATAL] Aborting WITHOUT stopping the app — it is still running.\"\n    exit 8\n  fi\n\n  # Under systemd, \\`pm2 update\\` kills and respawns the daemon. systemd sees its\n  # unit's main process die and, with the default KillMode=control-group,\n  # SIGTERMs everything in the cgroup — including this runner. setsid escapes\n  # PM2's tree-kill but NOT the cgroup, so there is no way to survive it from\n  # here; refuse the resync instead of being killed by it (issue #118).\n  if grep -qs 'pm2.*\\\\.service' /proc/self/cgroup 2>/dev/null; then\n    echo \"[FATAL] SYSTEMD_PM2: this deployment's PM2 is supervised by systemd, and the daemon\"\n    echo \"[FATAL] needs a resync. Running 'pm2 update' here would restart the systemd unit and\"\n    echo \"[FATAL] kill this runner mid-update. Resync manually from a shell, then retry:\"\n    echo \"[FATAL]   cd $(dirname \"$ECOSYSTEM\") && ./node_modules/.bin/pm2 update\"\n    echo \"[FATAL] Aborting WITHOUT stopping the app — it is still running.\"\n    exit 9\n  fi\n\n  echo \"[STEP] PM2 daemon is out-of-date — running 'pm2 update' to resync\"\n  if ! pm2 update; then\n    echo \"[FATAL] pm2 update failed — aborting before stopping the running app\"\n    exit 1\n  fi\n  echo \"[INFO] PM2 daemon resynced\"\nfi\n\n# ---------------------------------------------------------------------------\n# 3. Stop selva-compute BEFORE npm rewrites build/.\n# ---------------------------------------------------------------------------\n# SvelteKit's node adapter lazy-imports chunks from build/server/chunks/ on\n# every request. Letting npm rewrite build/ while the old process is still\n# serving traffic = in-flight requests hit ERR_MODULE_NOT_FOUND for chunks\n# whose hash just changed under their feet. Stopping first is a brief\n# downtime window (~1-2s longer than restart-in-place) for a much smaller\n# blast radius.\n#\n# This is also where the SSE connection to the frontend dies — selva-compute\n# IS the SSE server. From here on, the user sees output via the log-file\n# polling fallback in the admin UI, not over SSE.\necho \"[STEP] Stopping selva-compute\"\nif ! pm2 stop selva-compute; then\n  echo \"[WARN] pm2 stop failed — selva-compute may not be running yet. Continuing.\"\nfi\n\n# ---------------------------------------------------------------------------\n# 4. Run npm update.\n# ---------------------------------------------------------------------------\necho \"[STEP] Updating @selvajs/* packages\"\nif ! ${npmCommand}; then\n  echo \"[FATAL] npm update failed — EXIT trap will restart the previous build\"\n  exit 1\nfi\n\nAFTER=$(node -e \"try{console.log(require('./node_modules/@selvajs/selva/package.json').version)}catch(e){}\" 2>/dev/null)\necho \"[INFO] New @selvajs/selva: \\${AFTER:-unknown}\"\n\nif [ -n \"$BEFORE\" ] && [ \"$BEFORE\" = \"$AFTER\" ]; then\n  echo \"[WARN] No version change ($BEFORE). Your npm cache may be stale.\"\n  echo \"[WARN] Recover with:\"\n  echo \"[WARN]   npm cache clean --force\"\n  echo \"[WARN]   rm -rf node_modules package-lock.json\"\n  echo \"[WARN]   npm install --prefer-online\"\nfi\n\n# ---------------------------------------------------------------------------\n# 5. Start selva-compute with the new build.\n# ---------------------------------------------------------------------------\n# Start from ecosystem.config.cjs, NOT \\`pm2 start selva-compute\\` — the\n# latter requires selva-compute to already be in pm2's in-memory process\n# list. After a \\`pm2 update\\` (step 2) that's not guaranteed.\necho \"[STEP] Starting selva-compute with new build\"\nif ! pm2 start \"$ECOSYSTEM\" --update-env; then\n  echo \"[FATAL] pm2 start failed — investigate with \\\\\\`pm2 logs selva-compute\\\\\\`\"\n  exit 2\nfi\n\n# ---------------------------------------------------------------------------\n# 6. Health probe the new process.\n# ---------------------------------------------------------------------------\n# Read PORT from .env the same way scripts/update.sh does, so non-default\n# ports are respected.\nPORT=$(grep \"^PORT=\" .env 2>/dev/null \\\\\n  | head -1 \\\\\n  | cut -d'=' -f2 \\\\\n  | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//' -e 's/^[\"'\"'\"']//' -e 's/[\"'\"'\"']$//' -e 's/[[:space:]]*#.*//')\nPORT=\\${PORT:-3000}\n\necho \"[STEP] Health-probing the new process on port $PORT\"\nHEALTHY=0\nfor i in $(seq 1 15); do\n  sleep 2\n  CODE=$(curl -sS -o /tmp/selva-health.$$ -w \"%{http_code}\" --max-time 5 \"http://localhost:$PORT/api/health\" 2>/dev/null || echo \"000\")\n  if [ \"$CODE\" = \"200\" ]; then\n    HEALTHY=1\n    echo \"[INFO] Health probe passed after \\${i} attempt(s)\"\n    rm -f /tmp/selva-health.$$\n    break\n  fi\n  echo \"[INFO] Probe attempt $i/15: HTTP $CODE — retrying\"\ndone\n\nif [ \"$HEALTHY\" = \"1\" ]; then\n  echo \"[DONE] Update complete\"\n  exit 0\nfi\n\n# ---------------------------------------------------------------------------\n# 7. Rollback path.\n# ---------------------------------------------------------------------------\necho \"[FATAL] New process failed health check after 30s\"\nif [ -f /tmp/selva-health.$$ ]; then\n  echo \"[FATAL] Last response body:\"\n  cat /tmp/selva-health.$$\n  rm -f /tmp/selva-health.$$\nfi\n\nif [ -z \"$BEFORE\" ]; then\n  echo \"[FATAL] No prior version recorded — cannot roll back automatically.\"\n  echo \"[FATAL] EXIT trap will attempt to restart the current build anyway.\"\n  exit 3\nfi\n\necho \"[STEP] Rolling back @selvajs/selva to $BEFORE\"\npm2 stop selva-compute >/dev/null 2>&1 || true\n# Restore @selvajs/cli alongside the runtime: the forward step installs both at\n# the channel tag, so reverting only the runtime leaves a version pair that was\n# never released together.\nif ! npm install --save \"@selvajs/cli@$BEFORE\" \"@selvajs/selva@$BEFORE\"; then\n  echo \"[FATAL] Rollback npm install failed — EXIT trap will retry restart.\"\n  exit 4\nfi\n\npm2 start \"$ECOSYSTEM\" --update-env || true\nsleep 3\nROLLBACK_CODE=$(curl -sS -o /dev/null -w \"%{http_code}\" --max-time 5 \"http://localhost:$PORT/api/health\" 2>/dev/null || echo \"000\")\nif [ \"$ROLLBACK_CODE\" = \"200\" ]; then\n  echo \"[DONE] Rolled back to $BEFORE — previous version is online\"\n  exit 5\nfi\n\necho \"[FATAL] Rollback restart also failed health check (HTTP $ROLLBACK_CODE)\"\necho \"[FATAL] Manual recovery required. Check: pm2 logs selva-compute\"\nexit 6\n`;\n}\nfunction npmInstallArgs(channel) {\n\tconst tag = channelTag(channel);\n\treturn [\n\t\t\"install\",\n\t\t\"--save\",\n\t\t\"--prefer-online\",\n\t\t`@selvajs/cli@${tag}`,\n\t\t`@selvajs/selva@${tag}`\n\t];\n}\nfunction detectUpdatePlan(env, channel) {\n\tconst dir = findDeploymentDir(env);\n\treturn dir ? {\n\t\tcwd: dir,\n\t\targs: npmInstallArgs(channel)\n\t} : null;\n}\n//#endregion\n//#region src/routes/api/admin/system/update/+server.ts\nfunction stripAnsi(str) {\n\treturn str.replace(/\\x1B\\[[0-9;]*[mGKHF]/g, \"\");\n}\nvar POST = async ({ locals }) => {\n\trequirePermission(locals, \"instance_admin\");\n\tconst channel = readChannel();\n\tconst plan = detectUpdatePlan(private_env, channel);\n\tif (!plan) return new Response(JSON.stringify({ error: \"Couldn't determine how to update this deployment. Expected node_modules/@selvajs/selva (CLI scaffold) in the cwd or a parent directory.\" }), {\n\t\tstatus: 500,\n\t\theaders: { \"Content-Type\": \"application/json\" }\n\t});\n\tconst versionBefore = readRuntimeVersion(plan.cwd);\n\tconst actorId = locals.ctx ? actorFrom(locals.ctx) : \"system\";\n\tconst pending = {\n\t\tstartedAt: (/* @__PURE__ */ new Date()).toISOString(),\n\t\tactorId,\n\t\tchannel,\n\t\tfromVersion: versionBefore\n\t};\n\ttry {\n\t\twriteFileSync(updateStatePath(plan.cwd), JSON.stringify(pending, null, \"\t\"));\n\t} catch (err) {\n\t\tlocals.log.error(\"Could not persist pending-update state\", {\n\t\t\tcomponent: \"selfUpdate\",\n\t\t\terr: renderThrown(err)\n\t\t});\n\t}\n\tawait getEventSink().emit({\n\t\ttype: \"system.update.started\",\n\t\tchannel,\n\t\tfromVersion: versionBefore,\n\t\tactorId\n\t});\n\tconst stream = new ReadableStream({ start(controller) {\n\t\tconst encoder = new TextEncoder();\n\t\tfunction sendEvent(type, data) {\n\t\t\tconst message = `data: ${JSON.stringify({\n\t\t\t\ttype,\n\t\t\t\t...data\n\t\t\t})}\\n\\n`;\n\t\t\tcontroller.enqueue(encoder.encode(message));\n\t\t}\n\t\ttry {\n\t\t\tconst prelude = [`[INFO] Updating deployment (cwd: ${plan.cwd}, channel: ${channel})`, ...versionBefore ? [`[INFO] Current @selvajs/selva: ${versionBefore}`] : []];\n\t\t\tconst runnerScript = buildNpmRunnerScript(plan.args, versionBefore, join$1(plan.cwd, \"ecosystem.config.cjs\"), channelTag(channel));\n\t\t\tconst cmd = \"bash\";\n\t\t\tconst args = [\"-c\", buildLauncher(runnerScript, updateLogPath(plan.cwd), prelude)];\n\t\t\tconst localBin = join$1(plan.cwd, \"node_modules\", \".bin\");\n\t\t\tconst child = spawn(cmd, args, {\n\t\t\t\tcwd: plan.cwd,\n\t\t\t\tenv: {\n\t\t\t\t\tPATH: `${localBin}:${process.env.PATH ?? \"\"}`,\n\t\t\t\t\tHOME: process.env.HOME,\n\t\t\t\t\tINSTALL_DIR: plan.cwd\n\t\t\t\t},\n\t\t\t\tdetached: true,\n\t\t\t\tstdio: [\n\t\t\t\t\t\"ignore\",\n\t\t\t\t\t\"pipe\",\n\t\t\t\t\t\"pipe\"\n\t\t\t\t]\n\t\t\t});\n\t\t\tchild.unref();\n\t\t\tstartUpdateOutcomeReconciler({\n\t\t\t\tdeploymentDir: plan.cwd,\n\t\t\t\temit: (e) => getEventSink().emit(e),\n\t\t\t\treport: (err) => getErrorReporter().capture(err, { tags: { origin: \"selfUpdate\" } })\n\t\t\t});\n\t\t\tconst timeout = setTimeout(() => {\n\t\t\t\ttry {\n\t\t\t\t\tif (child.pid) process.kill(-child.pid, \"SIGTERM\");\n\t\t\t\t} catch {}\n\t\t\t\tsendEvent(\"log\", { data: \"[FATAL] Update timed out after 15 minutes\" });\n\t\t\t\tsendEvent(\"exit\", { code: -1 });\n\t\t\t\tcontroller.close();\n\t\t\t}, 9e5);\n\t\t\tlet restarting = false;\n\t\t\tchild.stdout.on(\"data\", (data) => {\n\t\t\t\tconst lines = data.toString().split(\"\\n\");\n\t\t\t\tfor (const line of lines) {\n\t\t\t\t\tconst clean = stripAnsi(line).trim();\n\t\t\t\t\tif (clean) if (!restarting && (clean.includes(\"Applying action stopProcessId\") || clean.includes(\"Applying action restartProcessId\"))) {\n\t\t\t\t\t\trestarting = true;\n\t\t\t\t\t\tsendEvent(\"restarting\", { data: clean });\n\t\t\t\t\t} else sendEvent(\"log\", { data: clean });\n\t\t\t\t}\n\t\t\t});\n\t\t\tchild.stderr.on(\"data\", (data) => {\n\t\t\t\tconst lines = data.toString().split(\"\\n\");\n\t\t\t\tfor (const line of lines) {\n\t\t\t\t\tconst clean = stripAnsi(line).trim();\n\t\t\t\t\tif (clean) sendEvent(\"log\", { data: `[ERROR] ${clean}` });\n\t\t\t\t}\n\t\t\t});\n\t\t\tchild.on(\"close\", (code) => {\n\t\t\t\tclearTimeout(timeout);\n\t\t\t\tsendEvent(\"exit\", { code: code ?? -1 });\n\t\t\t\tcontroller.close();\n\t\t\t});\n\t\t\tchild.on(\"error\", (err) => {\n\t\t\t\tclearTimeout(timeout);\n\t\t\t\tsendEvent(\"log\", { data: `[FATAL] ${err.message}` });\n\t\t\t\tsendEvent(\"exit\", { code: -1 });\n\t\t\t\tcontroller.close();\n\t\t\t});\n\t\t} catch (err) {\n\t\t\tsendEvent(\"log\", { data: `[FATAL] Failed to spawn process: ${err}` });\n\t\t\tsendEvent(\"exit\", { code: -1 });\n\t\t\tcontroller.close();\n\t\t}\n\t} });\n\treturn new Response(stream, { headers: {\n\t\t\"Content-Type\": \"text/event-stream\",\n\t\t\"Cache-Control\": \"no-cache\",\n\t\tConnection: \"keep-alive\"\n\t} });\n};\nvar GET = async ({ locals, url, fetch }) => {\n\trequirePermission(locals, \"instance_admin\");\n\tif (url.searchParams.get(\"check\") !== null) return json(await checkForUpdate(fetch, readChannel()), { headers: { \"Cache-Control\": \"no-store\" } });\n\tlet body = \"\";\n\ttry {\n\t\tbody = readFileSync$1(updateLogPath(findDeploymentDir(private_env)), \"utf8\");\n\t} catch {}\n\treturn new Response(body, { headers: {\n\t\t\"Content-Type\": \"text/plain; charset=utf-8\",\n\t\t\"Cache-Control\": \"no-store\"\n\t} });\n};\n//#endregion\nexport { GET, POST };\n"],"names":["readFileSync","join","join$1","readFileSync$1"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAYA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,kBAAkB,CAAC,GAAG,EAAE;AACjC,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAACA,cAAY,CAACC,MAAI,CAAC,GAAG,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;AAC9G,EAAE,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,GAAG,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC;AAC/D,CAAC,CAAC,CAAC,MAAM;AACT,EAAE;AACF,CAAC;AACD;AACA,SAAS,UAAU,CAAC,CAAC,EAAE;AACvB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACvC;AACA,SAAS,aAAa,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,EAAE;AAC5D,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AAC5E,CAAC,OAAO;AACR,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC;AAC7B;AACA;AACA;;AAEA;AACA,EAAE,YAAY;AACd;AACA;;AAEA;AACA;AACA,EAAE,MAAM;;AAER;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA,CAAC;AACD;AACA,SAAS,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,GAAG,EAAE;AAC1E,CAAC,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;AACjE,CAAC,OAAO,CAAC;AACT;AACA,OAAO,EAAE,UAAU,CAAC,aAAa,IAAI,EAAE,CAAC;AACxC,UAAU,EAAE,UAAU,CAAC,aAAa,CAAC;AACrC,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC;;AAEr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lB;AACA;AACA;;AAEA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA,CAAC;AACD;AACA,SAAS,cAAc,CAAC,OAAO,EAAE;AACjC,CAAC,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC;AAChC,CAAC,OAAO;AACR,EAAE,SAAS;AACX,EAAE,QAAQ;AACV,EAAE,iBAAiB;AACnB,EAAE,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;AACvB,EAAE,CAAC,eAAe,EAAE,GAAG,CAAC;AACxB,EAAE;AACF;AACA,SAAS,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE;AACxC,CAAC,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,CAAC;AACnC,CAAC,OAAO,GAAG,GAAG;AACd,EAAE,GAAG,EAAE,GAAG;AACV,EAAE,IAAI,EAAE,cAAc,CAAC,OAAO;AAC9B,EAAE,GAAG,IAAI;AACT;AACA;AACA;AACA,SAAS,SAAS,CAAC,GAAG,EAAE;AACxB,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC;AAChD;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AACjC,CAAC,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC5C,CAAC,MAAM,OAAO,GAAG,WAAW,EAAE;AAC9B,CAAC,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC;AACpD,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,yIAAyI,EAAE,CAAC,EAAE;AACtM,EAAE,MAAM,EAAE,GAAG;AACb,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB;AAC/C,EAAE,CAAC;AACH,CAAC,MAAM,aAAa,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;AACnD,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ;AAC9D,CAAC,MAAM,OAAO,GAAG;AACjB,EAAE,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACvD,EAAE,OAAO;AACT,EAAE,OAAO;AACT,EAAE,WAAW,EAAE;AACf,EAAE;AACF,CAAC,IAAI;AACL,EAAE,aAAa,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;AAC9E,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,wCAAwC,EAAE;AAC7D,GAAG,SAAS,EAAE,YAAY;AAC1B,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,MAAM,YAAY,EAAE,CAAC,IAAI,CAAC;AAC3B,EAAE,IAAI,EAAE,uBAAuB;AAC/B,EAAE,OAAO;AACT,EAAE,WAAW,EAAE,aAAa;AAC5B,EAAE;AACF,EAAE,CAAC;AACH,CAAC,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE;AACvD,EAAE,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE;AACnC,EAAE,SAAS,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE;AACjC,GAAG,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;AAC3C,IAAI,IAAI;AACR,IAAI,GAAG;AACP,IAAI,CAAC,CAAC,IAAI,CAAC;AACX,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC9C,EAAE;AACF,EAAE,IAAI;AACN,GAAG,MAAM,OAAO,GAAG,CAAC,CAAC,iCAAiC,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,aAAa,GAAG,CAAC,CAAC,+BAA+B,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AACtK,GAAG,MAAM,YAAY,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAEC,IAAM,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;AACrI,GAAG,MAAM,GAAG,GAAG,MAAM;AACrB,GAAG,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,YAAY,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;AACrF,GAAG,MAAM,QAAQ,GAAGA,IAAM,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,CAAC;AAC5D,GAAG,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;AAClC,IAAI,GAAG,EAAE,IAAI,CAAC,GAAG;AACjB,IAAI,GAAG,EAAE;AACT,KAAK,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AAClD,KAAK,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;AAC3B,KAAK,WAAW,EAAE,IAAI,CAAC;AACvB,KAAK;AACL,IAAI,QAAQ,EAAE,IAAI;AAClB,IAAI,KAAK,EAAE;AACX,KAAK,QAAQ;AACb,KAAK,MAAM;AACX,KAAK;AACL;AACA,IAAI,CAAC;AACL,GAAG,KAAK,CAAC,KAAK,EAAE;AAChB,GAAG,4BAA4B,CAAC;AAChC,IAAI,aAAa,EAAE,IAAI,CAAC,GAAG;AAC3B,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;AACvC,IAAI,MAAM,EAAE,CAAC,GAAG,KAAK,gBAAgB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;AACvF,IAAI,CAAC;AACL,GAAG,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM;AACpC,IAAI,IAAI;AACR,KAAK,IAAI,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC;AACvD,IAAI,CAAC,CAAC,MAAM,CAAC;AACb,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,2CAA2C,EAAE,CAAC;AAC3E,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;AACnC,IAAI,UAAU,CAAC,KAAK,EAAE;AACtB,GAAG,CAAC,EAAE,GAAG,CAAC;AACV,GAAG,IAAI,UAAU,GAAG,KAAK;AACzB,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK;AACrC,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;AAC7C,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;AAC9B,KAAK,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;AACzC,KAAK,IAAI,KAAK,EAAE,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,QAAQ,CAAC,+BAA+B,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC,EAAE;AAC5I,MAAM,UAAU,GAAG,IAAI;AACvB,MAAM,SAAS,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC9C,KAAK,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7C,IAAI;AACJ,GAAG,CAAC,CAAC;AACL,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK;AACrC,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;AAC7C,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;AAC9B,KAAK,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;AACzC,KAAK,IAAI,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;AAC9D,IAAI;AACJ,GAAG,CAAC,CAAC;AACL,GAAG,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,KAAK;AAC/B,IAAI,YAAY,CAAC,OAAO,CAAC;AACzB,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC;AAC3C,IAAI,UAAU,CAAC,KAAK,EAAE;AACtB,GAAG,CAAC,CAAC;AACL,GAAG,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,KAAK;AAC9B,IAAI,YAAY,CAAC,OAAO,CAAC;AACzB,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;AACxD,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;AACnC,IAAI,UAAU,CAAC,KAAK,EAAE;AACtB,GAAG,CAAC,CAAC;AACL,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;AACxE,GAAG,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAClC,GAAG,UAAU,CAAC,KAAK,EAAE;AACrB,EAAE;AACF,CAAC,CAAC,EAAE,CAAC;AACL,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;AACxC,EAAE,cAAc,EAAE,mBAAmB;AACrC,EAAE,eAAe,EAAE,UAAU;AAC7B,EAAE,UAAU,EAAE;AACd,EAAE,EAAE,CAAC;AACL;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK;AAC5C,CAAC,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC5C,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,OAAO,IAAI,CAAC,MAAM,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,CAAC;AAClJ,CAAC,IAAI,IAAI,GAAG,EAAE;AACd,CAAC,IAAI;AACL,EAAE,IAAI,GAAGC,YAAc,CAAC,aAAa,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC;AAC9E,CAAC,CAAC,CAAC,MAAM,CAAC;AACV,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE;AACtC,EAAE,cAAc,EAAE,2BAA2B;AAC7C,EAAE,eAAe,EAAE;AACnB,EAAE,EAAE,CAAC;AACL;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/users/_id_/_server.ts.js-PG4BH-xJ.js

@@ -0,0 +1,76 @@
+import { S as SYSTEM_CONTEXT, h as hasPermission, D as DEFAULT_ORG_PERMISSIONS, M as MEMBER_ASSIGNABLE_PERMISSIONS, d as PlatformPermissionSchema, e as OrgPermissionSchema } from '../../../../../../chunks/src.js-BYv4z3-l.js';
+import { b as getPermissionStore, a as getAuthProvider, d as getDataProvider, e as getOrganizationProvider } from '../../../../../../chunks/providers.server.js-BoM2upme.js';
+import { j as requireManageInstanceUsers } from '../../../../../../chunks/access.server.js-BPX5ADvu.js';
+import { a as apiError, t as throwZodError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-7Mw49fQc.js';
+import { s as setUserPlatformPermissions } from '../../../../../../chunks/permissions.server.js-CxX3rmoA.js';
+import { s as splitFlatPermissions } from '../../../../../../chunks/permissions-compat.server.js-z2gSRVDO.js';
+import { z } from 'zod';
+import '../../../../../../chunks/shared-server.js-HBAhbQ8m.js';
+import '../../../../../../chunks/limits.js-I-HAqbOg.js';
+import '../../../../../../chunks/schema.js-o6B8HHvu.js';
+import '../../../../../../chunks/chunk-AYH5O3VG.js-YiX3ZqeT.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '@sveltejs/kit';
+import '../../../../../../chunks/utils2.js-BqVsWOfi.js';
+
+//#region src/routes/api/admin/users/[id]/+server.ts
+var FlatPermissionSchema = z.union([PlatformPermissionSchema, OrgPermissionSchema]);
+var UpdatePermissionsBody = z.object({ permissions: z.array(FlatPermissionSchema) });
+var PATCH = async ({ params, request, locals }) => {
+	requireManageInstanceUsers(locals);
+	const { id } = params;
+	if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing user ID");
+	const body = await request.json().catch(() => null);
+	const parsed = UpdatePermissionsBody.safeParse(body);
+	if (!parsed.success) throwZodError(parsed.error);
+	const { platform, org } = splitFlatPermissions(parsed.data.permissions);
+	const existingPlatform = await getPermissionStore().getFor(locals.ctx, id);
+	if ((platform.length !== existingPlatform.length || platform.some((p) => !existingPlatform.includes(p)) || existingPlatform.some((p) => !platform.includes(p))) && !hasPermission(locals.ctx, "instance_admin")) apiError(403, ApiErrorCode.FORBIDDEN, "Only a platform admin can change platform-scope permissions");
+	const platformResult = await setUserPlatformPermissions(locals.ctx, id, platform);
+	if (platformResult === "not_found") apiError(404, ApiErrorCode.NOT_FOUND, "User not found");
+	if (platformResult === "not_supported") apiError(501, ApiErrorCode.INTERNAL, "Platform permission updates not supported by this auth provider");
+	if (platformResult === "last_admin") apiError(409, ApiErrorCode.CONFLICT, "Cannot remove the last instance admin. Promote another user to instance admin first.");
+	const orgId = locals.ctx?.actingOrgId;
+	if (orgId) {
+		const orgs = getOrganizationProvider();
+		const existing = await orgs.getOrgMember(SYSTEM_CONTEXT, orgId, id);
+		const resolvedPermissions = (role) => role === "member" ? org.filter((p) => MEMBER_ASSIGNABLE_PERMISSIONS.includes(p)) : [...DEFAULT_ORG_PERMISSIONS[role]];
+		if (existing) await orgs.updateOrgMemberPermissions(SYSTEM_CONTEXT, orgId, id, resolvedPermissions(existing.role));
+		else {
+			const joinedAt = (/* @__PURE__ */ new Date()).toISOString();
+			await orgs.addOrgMember(SYSTEM_CONTEXT, {
+				orgId,
+				userId: id,
+				role: "member",
+				permissions: resolvedPermissions("member"),
+				joinedAt,
+				updatedAt: joinedAt,
+				updatedBy: locals.user?.id ?? id,
+				deletedAt: null
+			});
+		}
+	}
+	return new Response(null, { status: 204 });
+};
+var DELETE = async ({ params, locals }) => {
+	requireManageInstanceUsers(locals);
+	const { id } = params;
+	if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing user ID");
+	if ((await getPermissionStore().getFor(locals.ctx, id)).includes("instance_admin")) {
+		if (await getPermissionStore().countInstanceAdminsExcluding(locals.ctx, id) === 0) apiError(409, ApiErrorCode.CONFLICT, "Cannot delete the last instance admin. Promote another user to instance admin first.");
+	}
+	const email = (await getAuthProvider().getUser(id))?.email;
+	const result = await getAuthProvider().deleteUser(id);
+	if (result === "not_found") apiError(404, ApiErrorCode.NOT_FOUND, "User not found");
+	if (result === "not_supported") apiError(501, ApiErrorCode.INTERNAL, "User deletion not supported by this auth provider");
+	await getDataProvider().onUserDeleted(SYSTEM_CONTEXT, id, { email });
+	return new Response(null, { status: 204 });
+};
+
+export { DELETE, PATCH };
+//# sourceMappingURL=_server.ts.js-PG4BH-xJ.js.map