@selvajs/selva 4.8.0-beta.4 → 4.8.0-beta.7

package/build/server/chunks/entries/endpoints/api/admin/system/health/_server.ts.js-C92ZOiNG.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts.js-C92ZOiNG.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/system/health/_server.ts.js"],"sourcesContent":["import { t as private_env } from \"../../../../../../chunks/shared-server.js\";\nimport \"../../../../../../chunks/src.js\";\nimport { C as providers, D as LocalComputeServerStore, a as getComputeServerConfigStore } from \"../../../../../../chunks/providers.server.js\";\nimport { n as findServerById } from \"../../../../../../chunks/utils2.js\";\nimport { C as requirePermission } from \"../../../../../../chunks/access.server.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\nimport { join, resolve } from \"node:path\";\nimport { mkdir, unlink, writeFile } from \"node:fs/promises\";\n//#region src/routes/api/admin/system/health/+server.ts\nfunction atRestSecretsCheck(report) {\n\tconst base = {\n\t\tid: \"at-rest-secrets\",\n\t\tlabel: \"Compute server secrets\"\n\t};\n\tif (report === null) return {\n\t\t...base,\n\t\tstatus: \"not_applicable\",\n\t\tsummary: \"The active data provider does not encrypt secrets at this layer — nothing to verify.\"\n\t};\n\tif (report.ok) return {\n\t\t...base,\n\t\tstatus: \"ok\",\n\t\tsummary: \"All stored compute server API keys decrypt under the current SELVA_AT_REST_KEY.\"\n\t};\n\tconst failed = report.failures.map((f) => `\"${f.serverLabel}\" (${f.reason}${f.cause ? `: ${f.cause}` : \"\"})`).join(\", \");\n\tconst plaintext = report.plaintextFound;\n\treturn {\n\t\t...base,\n\t\tstatus: \"degraded\",\n\t\tsummary: `${report.failures.length} compute server key(s) could not be loaded: ${failed}.`,\n\t\tremediation: plaintext ? \"A key is stored in plaintext on disk — re-enter it via /admin/compute so it is encrypted.\" : \"The stored ciphertext does not match the current SELVA_AT_REST_KEY (rotated key or restored backup). Re-enter the affected keys via /admin/compute, or restore the original SELVA_AT_REST_KEY, then run this check again.\"\n\t};\n}\nfunction schemaVersionCheck(report) {\n\tconst base = {\n\t\tid: \"schema-version\",\n\t\tlabel: \"Database schema\"\n\t};\n\tif (report === null) return {\n\t\t...base,\n\t\tstatus: \"not_applicable\",\n\t\tsummary: \"The active data provider migrates with the app — there is no separate schema to verify.\"\n\t};\n\tif (report.ok) return {\n\t\t...base,\n\t\tstatus: \"ok\",\n\t\tsummary: `Database migration head ${report.actual} satisfies the app's expected ${report.expected}.`\n\t};\n\treturn {\n\t\t...base,\n\t\tstatus: \"degraded\",\n\t\tsummary: report.message ?? `Database migration head ${report.actual ?? \"unavailable\"} is behind the app's expected ${report.expected}.`,\n\t\tremediation: \"Sync the provider migrations into your Supabase project and run `npx supabase db push`, then restart the app. `selva doctor` runs the same check from the CLI.\"\n\t};\n}\nvar COMPUTE_PING_TIMEOUT_MS = 8e3;\n/**\n* Ping the global default compute server's `/healthcheck`. We probe the\n* default specifically because that's the server every solve falls back to;\n* a degraded default breaks the baseline for all orgs. Org-private and\n* non-default platform servers are out of scope here — they have their own\n* per-server status probe at /api/admin/compute/status.\n*/\nasync function computeReachabilityCheck(locals) {\n\tconst base = {\n\t\tid: \"compute-reachable\",\n\t\tlabel: \"Default compute server\"\n\t};\n\tlet config;\n\ttry {\n\t\tconfig = await getComputeServerConfigStore().getConfig(locals.ctx);\n\t} catch (err) {\n\t\treturn {\n\t\t\t...base,\n\t\t\tstatus: \"error\",\n\t\t\tsummary: `Could not read compute config: ${err instanceof Error ? err.message : String(err)}`\n\t\t};\n\t}\n\tconst server = config.defaultServerId ? findServerById(config, config.defaultServerId) : void 0;\n\tif (!server) return {\n\t\t...base,\n\t\tstatus: \"not_applicable\",\n\t\tsummary: \"No default compute server is configured — nothing to reach.\",\n\t\tremediation: \"Add a server and set it as default in /admin/compute.\"\n\t};\n\tconst controller = new AbortController();\n\tconst timer = setTimeout(() => controller.abort(), COMPUTE_PING_TIMEOUT_MS);\n\ttry {\n\t\tconst headers = {};\n\t\tif (server.hasApiKey) {\n\t\t\tconst apiKey = await getComputeServerConfigStore().getServerApiKey(locals.ctx, server.id);\n\t\t\tif (apiKey) headers[\"RhinoComputeKey\"] = apiKey;\n\t\t}\n\t\tconst res = await fetch(new URL(\"/healthcheck\", server.serverUrl).toString(), {\n\t\t\tsignal: controller.signal,\n\t\t\theaders\n\t\t});\n\t\tif (res.ok) return {\n\t\t\t...base,\n\t\t\tstatus: \"ok\",\n\t\t\tsummary: `\"${server.label}\" answered /healthcheck (200).`\n\t\t};\n\t\treturn {\n\t\t\t...base,\n\t\t\tstatus: \"degraded\",\n\t\t\tsummary: `\"${server.label}\" responded ${res.status} to /healthcheck.`,\n\t\t\tremediation: res.status === 401 || res.status === 403 ? \"Authentication rejected — verify the API key in /admin/compute.\" : \"The server is reachable but unhealthy. Check the Rhino.Compute host.\"\n\t\t};\n\t} catch (err) {\n\t\tconst aborted = err instanceof Error && err.name === \"AbortError\";\n\t\treturn {\n\t\t\t...base,\n\t\t\tstatus: \"degraded\",\n\t\t\tsummary: aborted ? `\"${server.label}\" did not respond within ${COMPUTE_PING_TIMEOUT_MS / 1e3}s.` : `\"${server.label}\" is unreachable: ${err instanceof Error ? err.message : String(err)}.`,\n\t\t\tremediation: `Confirm the Rhino.Compute host is running and ${server.serverUrl} is correct.`\n\t\t};\n\t} finally {\n\t\tclearTimeout(timer);\n\t}\n}\n/**\n* Write + delete a temp file under DATA_PATH to prove the local provider can\n* still persist. The JSON stores read-modify-write without a fallback, so a\n* full disk or a permission change (e.g. ownership drift after a restore)\n* corrupts data on the next write — catch it here while it's still just a\n* failed health check.\n*/\nasync function dataPathWritableCheck() {\n\tconst base = {\n\t\tid: \"data-path-writable\",\n\t\tlabel: \"Data path writable\"\n\t};\n\tif (!(providers.data.computeServer instanceof LocalComputeServerStore)) return {\n\t\t...base,\n\t\tstatus: \"not_applicable\",\n\t\tsummary: \"The active data provider does not persist to a local DATA_PATH.\"\n\t};\n\tconst dataPath = private_env.DATA_PATH;\n\tif (!dataPath) return {\n\t\t...base,\n\t\tstatus: \"error\",\n\t\tsummary: \"DATA_PATH is unset but the local provider is active.\",\n\t\tremediation: \"Set DATA_PATH in .env and restart.\"\n\t};\n\tconst absolute = resolve(dataPath);\n\tconst probe = join(absolute, `.health-probe-${randomUUID()}`);\n\ttry {\n\t\tawait mkdir(absolute, { recursive: true });\n\t\tawait writeFile(probe, \"ok\");\n\t\tawait unlink(probe);\n\t\treturn {\n\t\t\t...base,\n\t\t\tstatus: \"ok\",\n\t\t\tsummary: `DATA_PATH (${dataPath}) is writable.`\n\t\t};\n\t} catch (err) {\n\t\treturn {\n\t\t\t...base,\n\t\t\tstatus: \"degraded\",\n\t\t\tsummary: `DATA_PATH (${dataPath}) is not writable: ${err instanceof Error ? err.message : String(err)}.`,\n\t\t\tremediation: \"Check free disk space and that the directory is owned by the user running the app (`df -h`, `ls -la`).\"\n\t\t};\n\t}\n}\nvar GET = async ({ locals }) => {\n\trequirePermission(locals, \"instance_admin\");\n\tconst checks = [];\n\tconst store = providers.data.computeServer;\n\tif (typeof store.verifySecrets === \"function\") try {\n\t\tchecks.push(atRestSecretsCheck(await store.verifySecrets()));\n\t} catch (err) {\n\t\tchecks.push({\n\t\t\tid: \"at-rest-secrets\",\n\t\t\tlabel: \"Compute server secrets\",\n\t\t\tstatus: \"error\",\n\t\t\tsummary: `Verification threw: ${err instanceof Error ? err.message : String(err)}`,\n\t\t\tremediation: \"Check server logs (`pm2 logs selva-compute`) for the underlying error.\"\n\t\t});\n\t}\n\telse checks.push(atRestSecretsCheck(null));\n\tconst data = providers.data;\n\tif (typeof data.verifySchemaVersion === \"function\") checks.push(schemaVersionCheck(await data.verifySchemaVersion()));\n\telse checks.push(schemaVersionCheck(null));\n\tchecks.push(...await Promise.all([computeReachabilityCheck(locals), dataPathWritableCheck()]));\n\tconst rank = {\n\t\tok: 0,\n\t\tnot_applicable: 0,\n\t\tdegraded: 2,\n\t\terror: 3\n\t};\n\tconst overall = checks.reduce((worst, c) => rank[c.status] > rank[worst] ? c.status : worst, \"ok\");\n\treturn json({\n\t\toverall,\n\t\tcheckedAt: (/* @__PURE__ */ new Date()).toISOString(),\n\t\tchecks\n\t});\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AASA;AACA,SAAS,kBAAkB,CAAC,MAAM,EAAE;AACpC,CAAC,MAAM,IAAI,GAAG;AACd,EAAE,EAAE,EAAE,iBAAiB;AACvB,EAAE,KAAK,EAAE;AACT,EAAE;AACF,CAAC,IAAI,MAAM,KAAK,IAAI,EAAE,OAAO;AAC7B,EAAE,GAAG,IAAI;AACT,EAAE,MAAM,EAAE,gBAAgB;AAC1B,EAAE,OAAO,EAAE;AACX,EAAE;AACF,CAAC,IAAI,MAAM,CAAC,EAAE,EAAE,OAAO;AACvB,EAAE,GAAG,IAAI;AACT,EAAE,MAAM,EAAE,IAAI;AACd,EAAE,OAAO,EAAE;AACX,EAAE;AACF,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AACzH,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc;AACxC,CAAC,OAAO;AACR,EAAE,GAAG,IAAI;AACT,EAAE,MAAM,EAAE,UAAU;AACpB,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,4CAA4C,EAAE,MAAM,CAAC,CAAC,CAAC;AAC5F,EAAE,WAAW,EAAE,SAAS,GAAG,2FAA2F,GAAG;AACzH,EAAE;AACF;AACA,SAAS,kBAAkB,CAAC,MAAM,EAAE;AACpC,CAAC,MAAM,IAAI,GAAG;AACd,EAAE,EAAE,EAAE,gBAAgB;AACtB,EAAE,KAAK,EAAE;AACT,EAAE;AACF,CAAC,IAAI,MAAM,KAAK,IAAI,EAAE,OAAO;AAC7B,EAAE,GAAG,IAAI;AACT,EAAE,MAAM,EAAE,gBAAgB;AAC1B,EAAE,OAAO,EAAE;AACX,EAAE;AACF,CAAC,IAAI,MAAM,CAAC,EAAE,EAAE,OAAO;AACvB,EAAE,GAAG,IAAI;AACT,EAAE,MAAM,EAAE,IAAI;AACd,EAAE,OAAO,EAAE,CAAC,wBAAwB,EAAE,MAAM,CAAC,MAAM,CAAC,8BAA8B,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;AACrG,EAAE;AACF,CAAC,OAAO;AACR,EAAE,GAAG,IAAI;AACT,EAAE,MAAM,EAAE,UAAU;AACpB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC,wBAAwB,EAAE,MAAM,CAAC,MAAM,IAAI,aAAa,CAAC,8BAA8B,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzI,EAAE,WAAW,EAAE;AACf,EAAE;AACF;AACA,IAAI,uBAAuB,GAAG,GAAG;AACjC;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,wBAAwB,CAAC,MAAM,EAAE;AAChD,CAAC,MAAM,IAAI,GAAG;AACd,EAAE,EAAE,EAAE,mBAAmB;AACzB,EAAE,KAAK,EAAE;AACT,EAAE;AACF,CAAC,IAAI,MAAM;AACX,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;AACpE,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,OAAO;AACT,GAAG,GAAG,IAAI;AACV,GAAG,MAAM,EAAE,OAAO;AAClB,GAAG,OAAO,EAAE,CAAC,+BAA+B,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;AAC/F,GAAG;AACH,CAAC;AACD,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,GAAG,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,GAAG,MAAM;AAChG,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO;AACrB,EAAE,GAAG,IAAI;AACT,EAAE,MAAM,EAAE,gBAAgB;AAC1B,EAAE,OAAO,EAAE,6DAA6D;AACxE,EAAE,WAAW,EAAE;AACf,EAAE;AACF,CAAC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE;AACzC,CAAC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,uBAAuB,CAAC;AAC5E,CAAC,IAAI;AACL,EAAE,MAAM,OAAO,GAAG,EAAE;AACpB,EAAE,IAAI,MAAM,CAAC,SAAS,EAAE;AACxB,GAAG,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;AAC5F,GAAG,IAAI,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,MAAM;AAClD,EAAE;AACF,EAAE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE;AAChF,GAAG,MAAM,EAAE,UAAU,CAAC,MAAM;AAC5B,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,IAAI,GAAG,CAAC,EAAE,EAAE,OAAO;AACrB,GAAG,GAAG,IAAI;AACV,GAAG,MAAM,EAAE,IAAI;AACf,GAAG,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,8BAA8B;AAC3D,GAAG;AACH,EAAE,OAAO;AACT,GAAG,GAAG,IAAI;AACV,GAAG,MAAM,EAAE,UAAU;AACrB,GAAG,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC;AACxE,GAAG,WAAW,EAAE,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,GAAG,iEAAiE,GAAG;AAC/H,GAAG;AACH,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;AACnE,EAAE,OAAO;AACT,GAAG,GAAG,IAAI;AACV,GAAG,MAAM,EAAE,UAAU;AACrB,GAAG,OAAO,EAAE,OAAO,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,uBAAuB,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC9L,GAAG,WAAW,EAAE,CAAC,8CAA8C,EAAE,MAAM,CAAC,SAAS,CAAC,YAAY;AAC9F,GAAG;AACH,CAAC,CAAC,SAAS;AACX,EAAE,YAAY,CAAC,KAAK,CAAC;AACrB,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,qBAAqB,GAAG;AACvC,CAAC,MAAM,IAAI,GAAG;AACd,EAAE,EAAE,EAAE,oBAAoB;AAC1B,EAAE,KAAK,EAAE;AACT,EAAE;AACF,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,aAAa,YAAY,uBAAuB,CAAC,EAAE,OAAO;AAChF,EAAE,GAAG,IAAI;AACT,EAAE,MAAM,EAAE,gBAAgB;AAC1B,EAAE,OAAO,EAAE;AACX,EAAE;AACF,CAAC,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS;AACvC,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO;AACvB,EAAE,GAAG,IAAI;AACT,EAAE,MAAM,EAAE,OAAO;AACjB,EAAE,OAAO,EAAE,sDAAsD;AACjE,EAAE,WAAW,EAAE;AACf,EAAE;AACF,CAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;AACnC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;AAC9D,CAAC,IAAI;AACL,EAAE,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC5C,EAAE,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC;AAC9B,EAAE,MAAM,MAAM,CAAC,KAAK,CAAC;AACrB,EAAE,OAAO;AACT,GAAG,GAAG,IAAI;AACV,GAAG,MAAM,EAAE,IAAI;AACf,GAAG,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,cAAc;AACjD,GAAG;AACH,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,OAAO;AACT,GAAG,GAAG,IAAI;AACV,GAAG,MAAM,EAAE,UAAU;AACrB,GAAG,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,mBAAmB,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC3G,GAAG,WAAW,EAAE;AAChB,GAAG;AACH,CAAC;AACD;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAChC,CAAC,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC5C,CAAC,MAAM,MAAM,GAAG,EAAE;AAClB,CAAC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,aAAa;AAC3C,CAAC,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,UAAU,EAAE,IAAI;AACpD,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;AAC9D,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,CAAC,IAAI,CAAC;AACd,GAAG,EAAE,EAAE,iBAAiB;AACxB,GAAG,KAAK,EAAE,wBAAwB;AAClC,GAAG,MAAM,EAAE,OAAO;AAClB,GAAG,OAAO,EAAE,CAAC,oBAAoB,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AACrF,GAAG,WAAW,EAAE;AAChB,GAAG,CAAC;AACJ,CAAC;AACD,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI;AAC5B,CAAC,IAAI,OAAO,IAAI,CAAC,mBAAmB,KAAK,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;AACtH,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;AAC/F,CAAC,MAAM,IAAI,GAAG;AACd,EAAE,EAAE,EAAE,CAAC;AACP,EAAE,cAAc,EAAE,CAAC;AACnB,EAAE,QAAQ,EAAE,CAAC;AACb,EAAE,KAAK,EAAE;AACT,EAAE;AACF,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,KAAK,EAAE,IAAI,CAAC;AACnG,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,OAAO;AACT,EAAE,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACvD,EAAE;AACF,EAAE,CAAC;AACH;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/system/throughput/_server.ts.js-Bg4x4_4d.js

@@ -1,90 +0,0 @@
-import { r as requirePermission } from '../../../../../../chunks/access.server.js-B9md32Em.js';
-import { a as apiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-DosmliOb.js';
-import { json } from '@sveltejs/kit';
-import { randomFillSync } from 'node:crypto';
-import '../../../../../../chunks/src.js-BYv4z3-l.js';
-import 'zod';
-import '../../../../../../chunks/providers.server.js-DJ9IeW2d.js';
-import '../../../../../../chunks/shared-server.js-HBAhbQ8m.js';
-import '../../../../../../chunks/limits.js-pZ5FHnPu.js';
-import '../../../../../../chunks/chunk-D2GEMGK5.js-keSflEOG.js';
-import '../../../../../../chunks/schema.js-BhmknPcU.js';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import '../../../../../../chunks/utils2.js-StB0R7IF.js';
-
-//#region src/routes/api/admin/system/throughput/+server.ts
-/**
-* Network throughput probe for the /admin/system page. Measures the transport
-* path between the operator's browser and this server — through whatever
-* proxies/tunnels sit in between (reverse proxy, SSO relays such as Azure App
-* Proxy) — with zero compute involvement:
-*
-*   GET  ?mb=N  → streams N MB of random bytes (download direction)
-*   POST        → consumes and discards the request body, returns the
-*                 server-side receive duration (upload direction)
-*
-* Random bytes are deliberately incompressible so proxy compression can't fake
-* a fast transfer. `instance_admin` only — a bandwidth probe is an operator
-* tool, and the download side is a data faucet.
-*
-* A curl-friendly, env-flag-gated sibling exists at /api/diag/throughput for
-* shell-based testing (documented in docs/deployment/app-proxy-migration.md);
-* this endpoint is the browser/UI counterpart that also works behind SSO
-* proxies where curl can't authenticate.
-*/
-var CHUNK_BYTES = 1048576;
-var DOWNLOAD_DEFAULT_MB = 20;
-var DOWNLOAD_MAX_MB = 256;
-var UPLOAD_MAX_BYTES = 268435456;
-var GET = async ({ locals, url }) => {
-	requirePermission(locals, "instance_admin");
-	const requested = Number(url.searchParams.get("mb"));
-	const mb = Math.min(DOWNLOAD_MAX_MB, Math.max(1, Number.isFinite(requested) ? requested : DOWNLOAD_DEFAULT_MB));
-	let sentChunks = 0;
-	const stream = new ReadableStream({ pull(controller) {
-		if (sentChunks >= mb) {
-			controller.close();
-			return;
-		}
-		const chunk = new Uint8Array(CHUNK_BYTES);
-		randomFillSync(chunk);
-		controller.enqueue(chunk);
-		sentChunks++;
-	} });
-	return new Response(stream, { headers: {
-		"Content-Type": "application/octet-stream",
-		"Content-Length": String(mb * CHUNK_BYTES),
-		"Cache-Control": "no-store"
-	} });
-};
-var POST = async ({ locals, request }) => {
-	requirePermission(locals, "instance_admin");
-	const declared = Number(request.headers.get("content-length"));
-	if (Number.isFinite(declared) && declared > UPLOAD_MAX_BYTES) apiError(413, ApiErrorCode.VALIDATION_FAILED, "Upload exceeds the 256 MB probe limit");
-	if (!request.body) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing request body");
-	const start = performance.now();
-	const reader = request.body.getReader();
-	let bytes = 0;
-	while (true) {
-		const { done, value } = await reader.read();
-		if (done) break;
-		bytes += value.byteLength;
-		if (bytes > UPLOAD_MAX_BYTES) {
-			await reader.cancel();
-			apiError(413, ApiErrorCode.VALIDATION_FAILED, "Upload exceeds the 256 MB probe limit");
-		}
-	}
-	const ms = performance.now() - start;
-	return json({
-		bytes,
-		ms: Math.round(ms),
-		mbps: ms > 0 ? Number((bytes / 1048576 / (ms / 1e3)).toFixed(2)) : null
-	});
-};
-
-export { GET, POST };
-//# sourceMappingURL=_server.ts.js-Bg4x4_4d.js.map

package/build/server/chunks/entries/endpoints/api/admin/system/throughput/_server.ts.js-Bg4x4_4d.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts.js-Bg4x4_4d.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/system/throughput/_server.ts.js"],"sourcesContent":["import { C as requirePermission } from \"../../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { randomFillSync } from \"node:crypto\";\n//#region src/routes/api/admin/system/throughput/+server.ts\n/**\n* Network throughput probe for the /admin/system page. Measures the transport\n* path between the operator's browser and this server — through whatever\n* proxies/tunnels sit in between (reverse proxy, SSO relays such as Azure App\n* Proxy) — with zero compute involvement:\n*\n*   GET  ?mb=N  → streams N MB of random bytes (download direction)\n*   POST        → consumes and discards the request body, returns the\n*                 server-side receive duration (upload direction)\n*\n* Random bytes are deliberately incompressible so proxy compression can't fake\n* a fast transfer. `instance_admin` only — a bandwidth probe is an operator\n* tool, and the download side is a data faucet.\n*\n* A curl-friendly, env-flag-gated sibling exists at /api/diag/throughput for\n* shell-based testing (documented in docs/deployment/app-proxy-migration.md);\n* this endpoint is the browser/UI counterpart that also works behind SSO\n* proxies where curl can't authenticate.\n*/\nvar CHUNK_BYTES = 1048576;\nvar DOWNLOAD_DEFAULT_MB = 20;\nvar DOWNLOAD_MAX_MB = 256;\nvar UPLOAD_MAX_BYTES = 268435456;\nvar GET = async ({ locals, url }) => {\n\trequirePermission(locals, \"instance_admin\");\n\tconst requested = Number(url.searchParams.get(\"mb\"));\n\tconst mb = Math.min(DOWNLOAD_MAX_MB, Math.max(1, Number.isFinite(requested) ? requested : DOWNLOAD_DEFAULT_MB));\n\tlet sentChunks = 0;\n\tconst stream = new ReadableStream({ pull(controller) {\n\t\tif (sentChunks >= mb) {\n\t\t\tcontroller.close();\n\t\t\treturn;\n\t\t}\n\t\tconst chunk = new Uint8Array(CHUNK_BYTES);\n\t\trandomFillSync(chunk);\n\t\tcontroller.enqueue(chunk);\n\t\tsentChunks++;\n\t} });\n\treturn new Response(stream, { headers: {\n\t\t\"Content-Type\": \"application/octet-stream\",\n\t\t\"Content-Length\": String(mb * CHUNK_BYTES),\n\t\t\"Cache-Control\": \"no-store\"\n\t} });\n};\nvar POST = async ({ locals, request }) => {\n\trequirePermission(locals, \"instance_admin\");\n\tconst declared = Number(request.headers.get(\"content-length\"));\n\tif (Number.isFinite(declared) && declared > UPLOAD_MAX_BYTES) apiError(413, ApiErrorCode.VALIDATION_FAILED, \"Upload exceeds the 256 MB probe limit\");\n\tif (!request.body) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing request body\");\n\tconst start = performance.now();\n\tconst reader = request.body.getReader();\n\tlet bytes = 0;\n\twhile (true) {\n\t\tconst { done, value } = await reader.read();\n\t\tif (done) break;\n\t\tbytes += value.byteLength;\n\t\tif (bytes > UPLOAD_MAX_BYTES) {\n\t\t\tawait reader.cancel();\n\t\t\tapiError(413, ApiErrorCode.VALIDATION_FAILED, \"Upload exceeds the 256 MB probe limit\");\n\t\t}\n\t}\n\tconst ms = performance.now() - start;\n\treturn json({\n\t\tbytes,\n\t\tms: Math.round(ms),\n\t\tmbps: ms > 0 ? Number((bytes / 1048576 / (ms / 1e3)).toFixed(2)) : null\n\t});\n};\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,WAAW,GAAG,OAAO;AACzB,IAAI,mBAAmB,GAAG,EAAE;AAC5B,IAAI,eAAe,GAAG,GAAG;AACzB,IAAI,gBAAgB,GAAG,SAAS;AAC7B,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACrC,CAAC,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC5C,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,SAAS,GAAG,mBAAmB,CAAC,CAAC;AAChH,CAAC,IAAI,UAAU,GAAG,CAAC;AACnB,CAAC,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE;AACtD,EAAE,IAAI,UAAU,IAAI,EAAE,EAAE;AACxB,GAAG,UAAU,CAAC,KAAK,EAAE;AACrB,GAAG;AACH,EAAE;AACF,EAAE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC;AAC3C,EAAE,cAAc,CAAC,KAAK,CAAC;AACvB,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC;AAC3B,EAAE,UAAU,EAAE;AACd,CAAC,CAAC,EAAE,CAAC;AACL,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;AACxC,EAAE,cAAc,EAAE,0BAA0B;AAC5C,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,GAAG,WAAW,CAAC;AAC5C,EAAE,eAAe,EAAE;AACnB,EAAE,EAAE,CAAC;AACL;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;AAC1C,CAAC,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC5C,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAC/D,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,gBAAgB,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,uCAAuC,CAAC;AACrJ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AACzF,CAAC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;AAChC,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE;AACxC,CAAC,IAAI,KAAK,GAAG,CAAC;AACd,CAAC,OAAO,IAAI,EAAE;AACd,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE;AAC7C,EAAE,IAAI,IAAI,EAAE;AACZ,EAAE,KAAK,IAAI,KAAK,CAAC,UAAU;AAC3B,EAAE,IAAI,KAAK,GAAG,gBAAgB,EAAE;AAChC,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE;AACxB,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,uCAAuC,CAAC;AACzF,EAAE;AACF,CAAC;AACD,CAAC,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK;AACrC,CAAC,OAAO,IAAI,CAAC;AACb,EAAE,KAAK;AACP,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;AACpB,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,GAAG,OAAO,IAAI,EAAE,GAAG,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG;AACrE,EAAE,CAAC;AACH;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/system/update/_server.ts.js-S9zrihH3.js

@@ -1,405 +0,0 @@
-import { b as private_env } from '../../../../../../chunks/shared-server.js-HBAhbQ8m.js';
-import '../../../../../../chunks/src.js-BYv4z3-l.js';
-import { z as actorFrom, r as renderThrown, j as getEventSink, i as getErrorReporter } from '../../../../../../chunks/providers.server.js-DJ9IeW2d.js';
-import { r as requirePermission } from '../../../../../../chunks/access.server.js-B9md32Em.js';
-import { c as checkForUpdate, r as readChannel, a as channelTag } from '../../../../../../chunks/updateCheck.server.js-D6IMI-3H.js';
-import { u as updateLogPath, f as findDeploymentDir, a as updateStatePath, s as startUpdateOutcomeReconciler } from '../../../../../../chunks/selfUpdate.server.js-BHxfSSOy.js';
-import { json } from '@sveltejs/kit';
-import { spawn } from 'child_process';
-import { join } from 'path';
-import { readFileSync, writeFileSync } from 'fs';
-import 'zod';
-import '../../../../../../chunks/limits.js-pZ5FHnPu.js';
-import '../../../../../../chunks/chunk-D2GEMGK5.js-keSflEOG.js';
-import '../../../../../../chunks/schema.js-BhmknPcU.js';
-import 'node:crypto';
-import 'node:url';
-import 'node:path';
-import 'node:fs';
-import 'node:fs/promises';
-import '@supabase/supabase-js';
-import '../../../../../../chunks/api-errors.js-DosmliOb.js';
-import '../../../../../../chunks/utils2.js-StB0R7IF.js';
-import '../../../../../../chunks/update-outcome.js-BOtdiviI.js';
-
-//#region src/routes/api/admin/system/update/+server.ts
-function stripAnsi(str) {
-	return str.replace(/\x1B\[[0-9;]*[mGKHF]/g, "");
-}
-function readRuntimeVersion(dir) {
-	try {
-		const pkg = JSON.parse(readFileSync(join(dir, "node_modules", "@selvajs", "selva", "package.json"), "utf8"));
-		return typeof pkg.version === "string" ? pkg.version : void 0;
-	} catch {
-		return;
-	}
-}
-function shellQuote(s) {
-	return `'${s.replace(/'/g, `'\\''`)}'`;
-}
-function buildLauncher(runnerScript, logPath, prelude = []) {
-	const echoes = prelude.map((line) => `echo ${shellQuote(line)}`).join("\n");
-	return `
-LOGFILE=${shellQuote(logPath)}
-RUNNER=/tmp/selva-update-runner.sh
-mkdir -p "$(dirname "$LOGFILE")"
-: > "$LOGFILE"
-
-cat > "$RUNNER" <<'__SELVA_RUNNER_EOF__'
-${runnerScript}
-__SELVA_RUNNER_EOF__
-chmod +x "$RUNNER"
-
-trap '' PIPE
-exec > >(tee --output-error=warn-nopipe -a "$LOGFILE" 2>/dev/null) 2>&1
-${echoes}
-
-# Daemonize the runner so PM2's tree-kill of selva-compute can't reach it.
-# setsid puts it in a new session; the trailing & + disown + launcher exit
-# leaves the runner with PPID=1 once we're gone. stdin/stdout/stderr are
-# fully detached from this process (and from selva-compute's pipes).
-setsid bash "$RUNNER" </dev/null >>"$LOGFILE" 2>&1 &
-RUNNER_PID=$!
-disown
-echo "[INFO] Update runner started (PID $RUNNER_PID, log: $LOGFILE)"
-
-# Small pause so the runner has time to print its first line before SSE
-# closes — otherwise the frontend's first poll might see no progress.
-sleep 1
-exit 0
-`;
-}
-function buildNpmRunnerScript(npmArgs, versionBefore, ecosystemPath, tag) {
-	const npmCommand = ["npm", ...npmArgs].map(shellQuote).join(" ");
-	return `#!/bin/bash
-set -o pipefail
-BEFORE=${shellQuote(versionBefore ?? "")}
-ECOSYSTEM=${shellQuote(ecosystemPath)}
-TAG=${shellQuote(tag)}
-
-# Last-resort safety net. If the script exits with the app NOT online for
-# any reason (crash, kill -9, network blip, npm hang past timeout), try to
-# bring it back from ecosystem.config.cjs before we go. The whole point of
-# this script is to update the app; leaving it down is the worst possible
-# outcome.
-on_exit() {
-  CODE=$?
-  STATUS=$(pm2 jlist 2>/dev/null | node -e "
-    try {
-      const list = JSON.parse(require('fs').readFileSync('/dev/stdin','utf8'));
-      const app = list.find(p => p.name === 'selva-compute');
-      process.stdout.write(app ? app.pm2_env.status : 'missing');
-    } catch { process.stdout.write('error'); }
-  " 2>/dev/null || echo "error")
-  if [ "$STATUS" != "online" ]; then
-    echo "[RECOVER] selva-compute is '$STATUS' — starting from ecosystem.config.cjs"
-    pm2 start "$ECOSYSTEM" --update-env >/dev/null 2>&1 || \\
-      echo "[RECOVER] pm2 start failed — manual intervention required: cd $(dirname "$ECOSYSTEM") && pm2 start ecosystem.config.cjs"
-  fi
-  # Terminal marker: the restarted app's outcome reconciler greps this to turn
-  # the run into an audit event (selfUpdate.server.ts). Keep the format stable.
-  echo "[EXIT] code=$CODE"
-}
-trap on_exit EXIT
-
-# ---------------------------------------------------------------------------
-# 1. Pre-flight: skip the whole cycle if there's nothing to install.
-# ---------------------------------------------------------------------------
-# Without this, clicking "Update" on an already-current instance triggered
-# a full stop/install/start cycle and a downtime window for no reason. Now
-# we just check the registry first.
-echo "[STEP] Checking npm registry for the '$TAG' channel version"
-LATEST=$(npm view "@selvajs/selva@$TAG" version --silent 2>/dev/null || echo "")
-if [ -z "$LATEST" ]; then
-  echo "[WARN] Could not query npm registry — proceeding with update attempt anyway"
-elif [ -n "$BEFORE" ] && [ "$LATEST" = "$BEFORE" ]; then
-  echo "[INFO] Already on the '$TAG' channel version ($BEFORE)"
-  echo "[DONE] Nothing to do"
-  exit 0
-else
-  # May be a forward update OR a revert (target older than installed) — either
-  # way the installed version differs from what this channel publishes.
-  echo "[INFO] Target ($TAG): $BEFORE → $LATEST"
-fi
-
-# ---------------------------------------------------------------------------
-# 2. Resync PM2 daemon if its in-memory version drifted from the CLI on disk.
-# ---------------------------------------------------------------------------
-# After a global pm2 upgrade the daemon keeps running its original version
-# while the CLI moves forward. Process commands then talk to a stale daemon
-# and the symptom is "stop works, start never lands". \`pm2 update\` dumps
-# processes, kills the daemon, respawns on the current CLI, restores the
-# dump. Doing it before we touch anything keeps the rest of the script
-# talking to a coherent daemon.
-echo "[STEP] Checking PM2 daemon/CLI version sync"
-if pm2 ping 2>&1 | grep -q "out-of-date" || pm2 list 2>&1 | grep -q "out-of-date"; then
-  echo "[STEP] PM2 daemon is out-of-date — running 'pm2 update' to resync"
-  if ! pm2 update; then
-    echo "[FATAL] pm2 update failed — aborting before stopping the running app"
-    exit 1
-  fi
-  echo "[INFO] PM2 daemon resynced"
-fi
-
-# ---------------------------------------------------------------------------
-# 3. Stop selva-compute BEFORE npm rewrites build/.
-# ---------------------------------------------------------------------------
-# SvelteKit's node adapter lazy-imports chunks from build/server/chunks/ on
-# every request. Letting npm rewrite build/ while the old process is still
-# serving traffic = in-flight requests hit ERR_MODULE_NOT_FOUND for chunks
-# whose hash just changed under their feet. Stopping first is a brief
-# downtime window (~1-2s longer than restart-in-place) for a much smaller
-# blast radius.
-#
-# This is also where the SSE connection to the frontend dies — selva-compute
-# IS the SSE server. From here on, the user sees output via the log-file
-# polling fallback in the admin UI, not over SSE.
-echo "[STEP] Stopping selva-compute"
-if ! pm2 stop selva-compute; then
-  echo "[WARN] pm2 stop failed — selva-compute may not be running yet. Continuing."
-fi
-
-# ---------------------------------------------------------------------------
-# 4. Run npm update.
-# ---------------------------------------------------------------------------
-echo "[STEP] Updating @selvajs/* packages"
-if ! ${npmCommand}; then
-  echo "[FATAL] npm update failed — EXIT trap will restart the previous build"
-  exit 1
-fi
-
-AFTER=$(node -e "try{console.log(require('./node_modules/@selvajs/selva/package.json').version)}catch(e){}" 2>/dev/null)
-echo "[INFO] New @selvajs/selva: \${AFTER:-unknown}"
-
-if [ -n "$BEFORE" ] && [ "$BEFORE" = "$AFTER" ]; then
-  echo "[WARN] No version change ($BEFORE). Your npm cache may be stale."
-  echo "[WARN] Recover with:"
-  echo "[WARN]   npm cache clean --force"
-  echo "[WARN]   rm -rf node_modules package-lock.json"
-  echo "[WARN]   npm install --prefer-online"
-fi
-
-# ---------------------------------------------------------------------------
-# 5. Start selva-compute with the new build.
-# ---------------------------------------------------------------------------
-# Start from ecosystem.config.cjs, NOT \`pm2 start selva-compute\` — the
-# latter requires selva-compute to already be in pm2's in-memory process
-# list. After a \`pm2 update\` (step 2) that's not guaranteed.
-echo "[STEP] Starting selva-compute with new build"
-if ! pm2 start "$ECOSYSTEM" --update-env; then
-  echo "[FATAL] pm2 start failed — investigate with \\\`pm2 logs selva-compute\\\`"
-  exit 2
-fi
-
-# ---------------------------------------------------------------------------
-# 6. Health probe the new process.
-# ---------------------------------------------------------------------------
-# Read PORT from .env the same way scripts/update.sh does, so non-default
-# ports are respected.
-PORT=$(grep "^PORT=" .env 2>/dev/null \\
-  | head -1 \\
-  | cut -d'=' -f2 \\
-  | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//' -e 's/^["'"'"']//' -e 's/["'"'"']$//' -e 's/[[:space:]]*#.*//')
-PORT=\${PORT:-3000}
-
-echo "[STEP] Health-probing the new process on port $PORT"
-HEALTHY=0
-for i in $(seq 1 15); do
-  sleep 2
-  CODE=$(curl -sS -o /tmp/selva-health.$$ -w "%{http_code}" --max-time 5 "http://localhost:$PORT/api/health" 2>/dev/null || echo "000")
-  if [ "$CODE" = "200" ]; then
-    HEALTHY=1
-    echo "[INFO] Health probe passed after \${i} attempt(s)"
-    rm -f /tmp/selva-health.$$
-    break
-  fi
-  echo "[INFO] Probe attempt $i/15: HTTP $CODE — retrying"
-done
-
-if [ "$HEALTHY" = "1" ]; then
-  echo "[DONE] Update complete"
-  exit 0
-fi
-
-# ---------------------------------------------------------------------------
-# 7. Rollback path.
-# ---------------------------------------------------------------------------
-echo "[FATAL] New process failed health check after 30s"
-if [ -f /tmp/selva-health.$$ ]; then
-  echo "[FATAL] Last response body:"
-  cat /tmp/selva-health.$$
-  rm -f /tmp/selva-health.$$
-fi
-
-if [ -z "$BEFORE" ]; then
-  echo "[FATAL] No prior version recorded — cannot roll back automatically."
-  echo "[FATAL] EXIT trap will attempt to restart the current build anyway."
-  exit 3
-fi
-
-echo "[STEP] Rolling back @selvajs/selva to $BEFORE"
-pm2 stop selva-compute >/dev/null 2>&1 || true
-if ! npm install --save "@selvajs/selva@$BEFORE"; then
-  echo "[FATAL] Rollback npm install failed — EXIT trap will retry restart."
-  exit 4
-fi
-
-pm2 start "$ECOSYSTEM" --update-env || true
-sleep 3
-ROLLBACK_CODE=$(curl -sS -o /dev/null -w "%{http_code}" --max-time 5 "http://localhost:$PORT/api/health" 2>/dev/null || echo "000")
-if [ "$ROLLBACK_CODE" = "200" ]; then
-  echo "[DONE] Rolled back to $BEFORE — previous version is online"
-  exit 5
-fi
-
-echo "[FATAL] Rollback restart also failed health check (HTTP $ROLLBACK_CODE)"
-echo "[FATAL] Manual recovery required. Check: pm2 logs selva-compute"
-exit 6
-`;
-}
-function npmInstallArgs(channel) {
-	const tag = channelTag(channel);
-	return [
-		"install",
-		"--save",
-		"--prefer-online",
-		`@selvajs/cli@${tag}`,
-		`@selvajs/selva@${tag}`
-	];
-}
-function detectUpdatePlan(channel) {
-	const dir = findDeploymentDir(private_env);
-	return dir ? {
-		cwd: dir,
-		args: npmInstallArgs(channel)
-	} : null;
-}
-var POST = async ({ locals }) => {
-	requirePermission(locals, "instance_admin");
-	const channel = readChannel();
-	const plan = detectUpdatePlan(channel);
-	if (!plan) return new Response(JSON.stringify({ error: "Couldn't determine how to update this deployment. Expected node_modules/@selvajs/selva (CLI scaffold) in the cwd or a parent directory." }), {
-		status: 500,
-		headers: { "Content-Type": "application/json" }
-	});
-	const versionBefore = readRuntimeVersion(plan.cwd);
-	const actorId = locals.ctx ? actorFrom(locals.ctx) : "system";
-	const pending = {
-		startedAt: (/* @__PURE__ */ new Date()).toISOString(),
-		actorId,
-		channel,
-		fromVersion: versionBefore
-	};
-	try {
-		writeFileSync(updateStatePath(plan.cwd), JSON.stringify(pending, null, "	"));
-	} catch (err) {
-		locals.log.error("Could not persist pending-update state", {
-			component: "selfUpdate",
-			err: renderThrown(err)
-		});
-	}
-	await getEventSink().emit({
-		type: "system.update.started",
-		channel,
-		fromVersion: versionBefore,
-		actorId
-	});
-	const stream = new ReadableStream({ start(controller) {
-		const encoder = new TextEncoder();
-		function sendEvent(type, data) {
-			const message = `data: ${JSON.stringify({
-				type,
-				...data
-			})}\n\n`;
-			controller.enqueue(encoder.encode(message));
-		}
-		try {
-			const prelude = [`[INFO] Updating deployment (cwd: ${plan.cwd}, channel: ${channel})`, ...versionBefore ? [`[INFO] Current @selvajs/selva: ${versionBefore}`] : []];
-			const runnerScript = buildNpmRunnerScript(plan.args, versionBefore, join(plan.cwd, "ecosystem.config.cjs"), channelTag(channel));
-			const cmd = "bash";
-			const args = ["-c", buildLauncher(runnerScript, updateLogPath(plan.cwd), prelude)];
-			const localBin = join(plan.cwd, "node_modules", ".bin");
-			const child = spawn(cmd, args, {
-				cwd: plan.cwd,
-				env: {
-					PATH: `${localBin}:${process.env.PATH ?? ""}`,
-					HOME: process.env.HOME,
-					INSTALL_DIR: plan.cwd
-				},
-				detached: true,
-				stdio: [
-					"ignore",
-					"pipe",
-					"pipe"
-				]
-			});
-			child.unref();
-			startUpdateOutcomeReconciler({
-				deploymentDir: plan.cwd,
-				emit: (e) => getEventSink().emit(e),
-				report: (err) => getErrorReporter().capture(err, { tags: { origin: "selfUpdate" } })
-			});
-			const timeout = setTimeout(() => {
-				try {
-					if (child.pid) process.kill(-child.pid, "SIGTERM");
-				} catch {}
-				sendEvent("log", { data: "[FATAL] Update timed out after 15 minutes" });
-				sendEvent("exit", { code: -1 });
-				controller.close();
-			}, 9e5);
-			let restarting = false;
-			child.stdout.on("data", (data) => {
-				const lines = data.toString().split("\n");
-				for (const line of lines) {
-					const clean = stripAnsi(line).trim();
-					if (clean) if (!restarting && (clean.includes("Applying action stopProcessId") || clean.includes("Applying action restartProcessId"))) {
-						restarting = true;
-						sendEvent("restarting", { data: clean });
-					} else sendEvent("log", { data: clean });
-				}
-			});
-			child.stderr.on("data", (data) => {
-				const lines = data.toString().split("\n");
-				for (const line of lines) {
-					const clean = stripAnsi(line).trim();
-					if (clean) sendEvent("log", { data: `[ERROR] ${clean}` });
-				}
-			});
-			child.on("close", (code) => {
-				clearTimeout(timeout);
-				sendEvent("exit", { code: code ?? -1 });
-				controller.close();
-			});
-			child.on("error", (err) => {
-				clearTimeout(timeout);
-				sendEvent("log", { data: `[FATAL] ${err.message}` });
-				sendEvent("exit", { code: -1 });
-				controller.close();
-			});
-		} catch (err) {
-			sendEvent("log", { data: `[FATAL] Failed to spawn process: ${err}` });
-			sendEvent("exit", { code: -1 });
-			controller.close();
-		}
-	} });
-	return new Response(stream, { headers: {
-		"Content-Type": "text/event-stream",
-		"Cache-Control": "no-cache",
-		Connection: "keep-alive"
-	} });
-};
-var GET = async ({ locals, url, fetch }) => {
-	requirePermission(locals, "instance_admin");
-	if (url.searchParams.get("check") !== null) return json(await checkForUpdate(fetch, readChannel()), { headers: { "Cache-Control": "no-store" } });
-	let body = "";
-	try {
-		body = readFileSync(updateLogPath(findDeploymentDir(private_env)), "utf8");
-	} catch {}
-	return new Response(body, { headers: {
-		"Content-Type": "text/plain; charset=utf-8",
-		"Cache-Control": "no-store"
-	} });
-};
-
-export { GET, POST };
-//# sourceMappingURL=_server.ts.js-S9zrihH3.js.map

package/build/server/chunks/entries/endpoints/api/admin/system/update/_server.ts.js-S9zrihH3.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts.js-S9zrihH3.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/system/update/_server.ts.js"],"sourcesContent":["import { t as private_env } from \"../../../../../../chunks/shared-server.js\";\nimport \"../../../../../../chunks/src.js\";\nimport { N as actorFrom, T as renderThrown, l as getErrorReporter, u as getEventSink } from \"../../../../../../chunks/providers.server.js\";\nimport { C as requirePermission } from \"../../../../../../chunks/access.server.js\";\nimport { n as channelTag, r as readChannel, t as checkForUpdate } from \"../../../../../../chunks/updateCheck.server.js\";\nimport { i as updateStatePath, n as startUpdateOutcomeReconciler, r as updateLogPath, t as findDeploymentDir } from \"../../../../../../chunks/selfUpdate.server.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { spawn } from \"child_process\";\nimport { join } from \"path\";\nimport { readFileSync, writeFileSync } from \"fs\";\n//#region src/routes/api/admin/system/update/+server.ts\nfunction stripAnsi(str) {\n\treturn str.replace(/\\x1B\\[[0-9;]*[mGKHF]/g, \"\");\n}\nfunction readRuntimeVersion(dir) {\n\ttry {\n\t\tconst pkg = JSON.parse(readFileSync(join(dir, \"node_modules\", \"@selvajs\", \"selva\", \"package.json\"), \"utf8\"));\n\t\treturn typeof pkg.version === \"string\" ? pkg.version : void 0;\n\t} catch {\n\t\treturn;\n\t}\n}\nfunction shellQuote(s) {\n\treturn `'${s.replace(/'/g, `'\\\\''`)}'`;\n}\nfunction buildLauncher(runnerScript, logPath, prelude = []) {\n\tconst echoes = prelude.map((line) => `echo ${shellQuote(line)}`).join(\"\\n\");\n\treturn `\nLOGFILE=${shellQuote(logPath)}\nRUNNER=/tmp/selva-update-runner.sh\nmkdir -p \"$(dirname \"$LOGFILE\")\"\n: > \"$LOGFILE\"\n\ncat > \"$RUNNER\" <<'__SELVA_RUNNER_EOF__'\n${runnerScript}\n__SELVA_RUNNER_EOF__\nchmod +x \"$RUNNER\"\n\ntrap '' PIPE\nexec > >(tee --output-error=warn-nopipe -a \"$LOGFILE\" 2>/dev/null) 2>&1\n${echoes}\n\n# Daemonize the runner so PM2's tree-kill of selva-compute can't reach it.\n# setsid puts it in a new session; the trailing & + disown + launcher exit\n# leaves the runner with PPID=1 once we're gone. stdin/stdout/stderr are\n# fully detached from this process (and from selva-compute's pipes).\nsetsid bash \"$RUNNER\" </dev/null >>\"$LOGFILE\" 2>&1 &\nRUNNER_PID=$!\ndisown\necho \"[INFO] Update runner started (PID $RUNNER_PID, log: $LOGFILE)\"\n\n# Small pause so the runner has time to print its first line before SSE\n# closes — otherwise the frontend's first poll might see no progress.\nsleep 1\nexit 0\n`;\n}\nfunction buildNpmRunnerScript(npmArgs, versionBefore, ecosystemPath, tag) {\n\tconst npmCommand = [\"npm\", ...npmArgs].map(shellQuote).join(\" \");\n\treturn `#!/bin/bash\nset -o pipefail\nBEFORE=${shellQuote(versionBefore ?? \"\")}\nECOSYSTEM=${shellQuote(ecosystemPath)}\nTAG=${shellQuote(tag)}\n\n# Last-resort safety net. If the script exits with the app NOT online for\n# any reason (crash, kill -9, network blip, npm hang past timeout), try to\n# bring it back from ecosystem.config.cjs before we go. The whole point of\n# this script is to update the app; leaving it down is the worst possible\n# outcome.\non_exit() {\n  CODE=$?\n  STATUS=$(pm2 jlist 2>/dev/null | node -e \"\n    try {\n      const list = JSON.parse(require('fs').readFileSync('/dev/stdin','utf8'));\n      const app = list.find(p => p.name === 'selva-compute');\n      process.stdout.write(app ? app.pm2_env.status : 'missing');\n    } catch { process.stdout.write('error'); }\n  \" 2>/dev/null || echo \"error\")\n  if [ \"$STATUS\" != \"online\" ]; then\n    echo \"[RECOVER] selva-compute is '$STATUS' — starting from ecosystem.config.cjs\"\n    pm2 start \"$ECOSYSTEM\" --update-env >/dev/null 2>&1 || \\\\\n      echo \"[RECOVER] pm2 start failed — manual intervention required: cd $(dirname \"$ECOSYSTEM\") && pm2 start ecosystem.config.cjs\"\n  fi\n  # Terminal marker: the restarted app's outcome reconciler greps this to turn\n  # the run into an audit event (selfUpdate.server.ts). Keep the format stable.\n  echo \"[EXIT] code=$CODE\"\n}\ntrap on_exit EXIT\n\n# ---------------------------------------------------------------------------\n# 1. Pre-flight: skip the whole cycle if there's nothing to install.\n# ---------------------------------------------------------------------------\n# Without this, clicking \"Update\" on an already-current instance triggered\n# a full stop/install/start cycle and a downtime window for no reason. Now\n# we just check the registry first.\necho \"[STEP] Checking npm registry for the '$TAG' channel version\"\nLATEST=$(npm view \"@selvajs/selva@$TAG\" version --silent 2>/dev/null || echo \"\")\nif [ -z \"$LATEST\" ]; then\n  echo \"[WARN] Could not query npm registry — proceeding with update attempt anyway\"\nelif [ -n \"$BEFORE\" ] && [ \"$LATEST\" = \"$BEFORE\" ]; then\n  echo \"[INFO] Already on the '$TAG' channel version ($BEFORE)\"\n  echo \"[DONE] Nothing to do\"\n  exit 0\nelse\n  # May be a forward update OR a revert (target older than installed) — either\n  # way the installed version differs from what this channel publishes.\n  echo \"[INFO] Target ($TAG): $BEFORE → $LATEST\"\nfi\n\n# ---------------------------------------------------------------------------\n# 2. Resync PM2 daemon if its in-memory version drifted from the CLI on disk.\n# ---------------------------------------------------------------------------\n# After a global pm2 upgrade the daemon keeps running its original version\n# while the CLI moves forward. Process commands then talk to a stale daemon\n# and the symptom is \"stop works, start never lands\". \\`pm2 update\\` dumps\n# processes, kills the daemon, respawns on the current CLI, restores the\n# dump. Doing it before we touch anything keeps the rest of the script\n# talking to a coherent daemon.\necho \"[STEP] Checking PM2 daemon/CLI version sync\"\nif pm2 ping 2>&1 | grep -q \"out-of-date\" || pm2 list 2>&1 | grep -q \"out-of-date\"; then\n  echo \"[STEP] PM2 daemon is out-of-date — running 'pm2 update' to resync\"\n  if ! pm2 update; then\n    echo \"[FATAL] pm2 update failed — aborting before stopping the running app\"\n    exit 1\n  fi\n  echo \"[INFO] PM2 daemon resynced\"\nfi\n\n# ---------------------------------------------------------------------------\n# 3. Stop selva-compute BEFORE npm rewrites build/.\n# ---------------------------------------------------------------------------\n# SvelteKit's node adapter lazy-imports chunks from build/server/chunks/ on\n# every request. Letting npm rewrite build/ while the old process is still\n# serving traffic = in-flight requests hit ERR_MODULE_NOT_FOUND for chunks\n# whose hash just changed under their feet. Stopping first is a brief\n# downtime window (~1-2s longer than restart-in-place) for a much smaller\n# blast radius.\n#\n# This is also where the SSE connection to the frontend dies — selva-compute\n# IS the SSE server. From here on, the user sees output via the log-file\n# polling fallback in the admin UI, not over SSE.\necho \"[STEP] Stopping selva-compute\"\nif ! pm2 stop selva-compute; then\n  echo \"[WARN] pm2 stop failed — selva-compute may not be running yet. Continuing.\"\nfi\n\n# ---------------------------------------------------------------------------\n# 4. Run npm update.\n# ---------------------------------------------------------------------------\necho \"[STEP] Updating @selvajs/* packages\"\nif ! ${npmCommand}; then\n  echo \"[FATAL] npm update failed — EXIT trap will restart the previous build\"\n  exit 1\nfi\n\nAFTER=$(node -e \"try{console.log(require('./node_modules/@selvajs/selva/package.json').version)}catch(e){}\" 2>/dev/null)\necho \"[INFO] New @selvajs/selva: \\${AFTER:-unknown}\"\n\nif [ -n \"$BEFORE\" ] && [ \"$BEFORE\" = \"$AFTER\" ]; then\n  echo \"[WARN] No version change ($BEFORE). Your npm cache may be stale.\"\n  echo \"[WARN] Recover with:\"\n  echo \"[WARN]   npm cache clean --force\"\n  echo \"[WARN]   rm -rf node_modules package-lock.json\"\n  echo \"[WARN]   npm install --prefer-online\"\nfi\n\n# ---------------------------------------------------------------------------\n# 5. Start selva-compute with the new build.\n# ---------------------------------------------------------------------------\n# Start from ecosystem.config.cjs, NOT \\`pm2 start selva-compute\\` — the\n# latter requires selva-compute to already be in pm2's in-memory process\n# list. After a \\`pm2 update\\` (step 2) that's not guaranteed.\necho \"[STEP] Starting selva-compute with new build\"\nif ! pm2 start \"$ECOSYSTEM\" --update-env; then\n  echo \"[FATAL] pm2 start failed — investigate with \\\\\\`pm2 logs selva-compute\\\\\\`\"\n  exit 2\nfi\n\n# ---------------------------------------------------------------------------\n# 6. Health probe the new process.\n# ---------------------------------------------------------------------------\n# Read PORT from .env the same way scripts/update.sh does, so non-default\n# ports are respected.\nPORT=$(grep \"^PORT=\" .env 2>/dev/null \\\\\n  | head -1 \\\\\n  | cut -d'=' -f2 \\\\\n  | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//' -e 's/^[\"'\"'\"']//' -e 's/[\"'\"'\"']$//' -e 's/[[:space:]]*#.*//')\nPORT=\\${PORT:-3000}\n\necho \"[STEP] Health-probing the new process on port $PORT\"\nHEALTHY=0\nfor i in $(seq 1 15); do\n  sleep 2\n  CODE=$(curl -sS -o /tmp/selva-health.$$ -w \"%{http_code}\" --max-time 5 \"http://localhost:$PORT/api/health\" 2>/dev/null || echo \"000\")\n  if [ \"$CODE\" = \"200\" ]; then\n    HEALTHY=1\n    echo \"[INFO] Health probe passed after \\${i} attempt(s)\"\n    rm -f /tmp/selva-health.$$\n    break\n  fi\n  echo \"[INFO] Probe attempt $i/15: HTTP $CODE — retrying\"\ndone\n\nif [ \"$HEALTHY\" = \"1\" ]; then\n  echo \"[DONE] Update complete\"\n  exit 0\nfi\n\n# ---------------------------------------------------------------------------\n# 7. Rollback path.\n# ---------------------------------------------------------------------------\necho \"[FATAL] New process failed health check after 30s\"\nif [ -f /tmp/selva-health.$$ ]; then\n  echo \"[FATAL] Last response body:\"\n  cat /tmp/selva-health.$$\n  rm -f /tmp/selva-health.$$\nfi\n\nif [ -z \"$BEFORE\" ]; then\n  echo \"[FATAL] No prior version recorded — cannot roll back automatically.\"\n  echo \"[FATAL] EXIT trap will attempt to restart the current build anyway.\"\n  exit 3\nfi\n\necho \"[STEP] Rolling back @selvajs/selva to $BEFORE\"\npm2 stop selva-compute >/dev/null 2>&1 || true\nif ! npm install --save \"@selvajs/selva@$BEFORE\"; then\n  echo \"[FATAL] Rollback npm install failed — EXIT trap will retry restart.\"\n  exit 4\nfi\n\npm2 start \"$ECOSYSTEM\" --update-env || true\nsleep 3\nROLLBACK_CODE=$(curl -sS -o /dev/null -w \"%{http_code}\" --max-time 5 \"http://localhost:$PORT/api/health\" 2>/dev/null || echo \"000\")\nif [ \"$ROLLBACK_CODE\" = \"200\" ]; then\n  echo \"[DONE] Rolled back to $BEFORE — previous version is online\"\n  exit 5\nfi\n\necho \"[FATAL] Rollback restart also failed health check (HTTP $ROLLBACK_CODE)\"\necho \"[FATAL] Manual recovery required. Check: pm2 logs selva-compute\"\nexit 6\n`;\n}\nfunction npmInstallArgs(channel) {\n\tconst tag = channelTag(channel);\n\treturn [\n\t\t\"install\",\n\t\t\"--save\",\n\t\t\"--prefer-online\",\n\t\t`@selvajs/cli@${tag}`,\n\t\t`@selvajs/selva@${tag}`\n\t];\n}\nfunction detectUpdatePlan(channel) {\n\tconst dir = findDeploymentDir(private_env);\n\treturn dir ? {\n\t\tcwd: dir,\n\t\targs: npmInstallArgs(channel)\n\t} : null;\n}\nvar POST = async ({ locals }) => {\n\trequirePermission(locals, \"instance_admin\");\n\tconst channel = readChannel();\n\tconst plan = detectUpdatePlan(channel);\n\tif (!plan) return new Response(JSON.stringify({ error: \"Couldn't determine how to update this deployment. Expected node_modules/@selvajs/selva (CLI scaffold) in the cwd or a parent directory.\" }), {\n\t\tstatus: 500,\n\t\theaders: { \"Content-Type\": \"application/json\" }\n\t});\n\tconst versionBefore = readRuntimeVersion(plan.cwd);\n\tconst actorId = locals.ctx ? actorFrom(locals.ctx) : \"system\";\n\tconst pending = {\n\t\tstartedAt: (/* @__PURE__ */ new Date()).toISOString(),\n\t\tactorId,\n\t\tchannel,\n\t\tfromVersion: versionBefore\n\t};\n\ttry {\n\t\twriteFileSync(updateStatePath(plan.cwd), JSON.stringify(pending, null, \"\t\"));\n\t} catch (err) {\n\t\tlocals.log.error(\"Could not persist pending-update state\", {\n\t\t\tcomponent: \"selfUpdate\",\n\t\t\terr: renderThrown(err)\n\t\t});\n\t}\n\tawait getEventSink().emit({\n\t\ttype: \"system.update.started\",\n\t\tchannel,\n\t\tfromVersion: versionBefore,\n\t\tactorId\n\t});\n\tconst stream = new ReadableStream({ start(controller) {\n\t\tconst encoder = new TextEncoder();\n\t\tfunction sendEvent(type, data) {\n\t\t\tconst message = `data: ${JSON.stringify({\n\t\t\t\ttype,\n\t\t\t\t...data\n\t\t\t})}\\n\\n`;\n\t\t\tcontroller.enqueue(encoder.encode(message));\n\t\t}\n\t\ttry {\n\t\t\tconst prelude = [`[INFO] Updating deployment (cwd: ${plan.cwd}, channel: ${channel})`, ...versionBefore ? [`[INFO] Current @selvajs/selva: ${versionBefore}`] : []];\n\t\t\tconst runnerScript = buildNpmRunnerScript(plan.args, versionBefore, join(plan.cwd, \"ecosystem.config.cjs\"), channelTag(channel));\n\t\t\tconst cmd = \"bash\";\n\t\t\tconst args = [\"-c\", buildLauncher(runnerScript, updateLogPath(plan.cwd), prelude)];\n\t\t\tconst localBin = join(plan.cwd, \"node_modules\", \".bin\");\n\t\t\tconst child = spawn(cmd, args, {\n\t\t\t\tcwd: plan.cwd,\n\t\t\t\tenv: {\n\t\t\t\t\tPATH: `${localBin}:${process.env.PATH ?? \"\"}`,\n\t\t\t\t\tHOME: process.env.HOME,\n\t\t\t\t\tINSTALL_DIR: plan.cwd\n\t\t\t\t},\n\t\t\t\tdetached: true,\n\t\t\t\tstdio: [\n\t\t\t\t\t\"ignore\",\n\t\t\t\t\t\"pipe\",\n\t\t\t\t\t\"pipe\"\n\t\t\t\t]\n\t\t\t});\n\t\t\tchild.unref();\n\t\t\tstartUpdateOutcomeReconciler({\n\t\t\t\tdeploymentDir: plan.cwd,\n\t\t\t\temit: (e) => getEventSink().emit(e),\n\t\t\t\treport: (err) => getErrorReporter().capture(err, { tags: { origin: \"selfUpdate\" } })\n\t\t\t});\n\t\t\tconst timeout = setTimeout(() => {\n\t\t\t\ttry {\n\t\t\t\t\tif (child.pid) process.kill(-child.pid, \"SIGTERM\");\n\t\t\t\t} catch {}\n\t\t\t\tsendEvent(\"log\", { data: \"[FATAL] Update timed out after 15 minutes\" });\n\t\t\t\tsendEvent(\"exit\", { code: -1 });\n\t\t\t\tcontroller.close();\n\t\t\t}, 9e5);\n\t\t\tlet restarting = false;\n\t\t\tchild.stdout.on(\"data\", (data) => {\n\t\t\t\tconst lines = data.toString().split(\"\\n\");\n\t\t\t\tfor (const line of lines) {\n\t\t\t\t\tconst clean = stripAnsi(line).trim();\n\t\t\t\t\tif (clean) if (!restarting && (clean.includes(\"Applying action stopProcessId\") || clean.includes(\"Applying action restartProcessId\"))) {\n\t\t\t\t\t\trestarting = true;\n\t\t\t\t\t\tsendEvent(\"restarting\", { data: clean });\n\t\t\t\t\t} else sendEvent(\"log\", { data: clean });\n\t\t\t\t}\n\t\t\t});\n\t\t\tchild.stderr.on(\"data\", (data) => {\n\t\t\t\tconst lines = data.toString().split(\"\\n\");\n\t\t\t\tfor (const line of lines) {\n\t\t\t\t\tconst clean = stripAnsi(line).trim();\n\t\t\t\t\tif (clean) sendEvent(\"log\", { data: `[ERROR] ${clean}` });\n\t\t\t\t}\n\t\t\t});\n\t\t\tchild.on(\"close\", (code) => {\n\t\t\t\tclearTimeout(timeout);\n\t\t\t\tsendEvent(\"exit\", { code: code ?? -1 });\n\t\t\t\tcontroller.close();\n\t\t\t});\n\t\t\tchild.on(\"error\", (err) => {\n\t\t\t\tclearTimeout(timeout);\n\t\t\t\tsendEvent(\"log\", { data: `[FATAL] ${err.message}` });\n\t\t\t\tsendEvent(\"exit\", { code: -1 });\n\t\t\t\tcontroller.close();\n\t\t\t});\n\t\t} catch (err) {\n\t\t\tsendEvent(\"log\", { data: `[FATAL] Failed to spawn process: ${err}` });\n\t\t\tsendEvent(\"exit\", { code: -1 });\n\t\t\tcontroller.close();\n\t\t}\n\t} });\n\treturn new Response(stream, { headers: {\n\t\t\"Content-Type\": \"text/event-stream\",\n\t\t\"Cache-Control\": \"no-cache\",\n\t\tConnection: \"keep-alive\"\n\t} });\n};\nvar GET = async ({ locals, url, fetch }) => {\n\trequirePermission(locals, \"instance_admin\");\n\tif (url.searchParams.get(\"check\") !== null) return json(await checkForUpdate(fetch, readChannel()), { headers: { \"Cache-Control\": \"no-store\" } });\n\tlet body = \"\";\n\ttry {\n\t\tbody = readFileSync(updateLogPath(findDeploymentDir(private_env)), \"utf8\");\n\t} catch {}\n\treturn new Response(body, { headers: {\n\t\t\"Content-Type\": \"text/plain; charset=utf-8\",\n\t\t\"Cache-Control\": \"no-store\"\n\t} });\n};\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAUA;AACA,SAAS,SAAS,CAAC,GAAG,EAAE;AACxB,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC;AAChD;AACA,SAAS,kBAAkB,CAAC,GAAG,EAAE;AACjC,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;AAC9G,EAAE,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,GAAG,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC;AAC/D,CAAC,CAAC,CAAC,MAAM;AACT,EAAE;AACF,CAAC;AACD;AACA,SAAS,UAAU,CAAC,CAAC,EAAE;AACvB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACvC;AACA,SAAS,aAAa,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,EAAE;AAC5D,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AAC5E,CAAC,OAAO;AACR,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC;AAC7B;AACA;AACA;;AAEA;AACA,EAAE,YAAY;AACd;AACA;;AAEA;AACA;AACA,EAAE,MAAM;;AAER;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA,CAAC;AACD;AACA,SAAS,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,GAAG,EAAE;AAC1E,CAAC,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;AACjE,CAAC,OAAO,CAAC;AACT;AACA,OAAO,EAAE,UAAU,CAAC,aAAa,IAAI,EAAE,CAAC;AACxC,UAAU,EAAE,UAAU,CAAC,aAAa,CAAC;AACrC,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC;;AAErB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA,KAAK,EAAE,UAAU,CAAC;AAClB;AACA;AACA;;AAEA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;AACA,CAAC;AACD;AACA,SAAS,cAAc,CAAC,OAAO,EAAE;AACjC,CAAC,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC;AAChC,CAAC,OAAO;AACR,EAAE,SAAS;AACX,EAAE,QAAQ;AACV,EAAE,iBAAiB;AACnB,EAAE,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;AACvB,EAAE,CAAC,eAAe,EAAE,GAAG,CAAC;AACxB,EAAE;AACF;AACA,SAAS,gBAAgB,CAAC,OAAO,EAAE;AACnC,CAAC,MAAM,GAAG,GAAG,iBAAiB,CAAC,WAAW,CAAC;AAC3C,CAAC,OAAO,GAAG,GAAG;AACd,EAAE,GAAG,EAAE,GAAG;AACV,EAAE,IAAI,EAAE,cAAc,CAAC,OAAO;AAC9B,EAAE,GAAG,IAAI;AACT;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AACjC,CAAC,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC5C,CAAC,MAAM,OAAO,GAAG,WAAW,EAAE;AAC9B,CAAC,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC;AACvC,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,yIAAyI,EAAE,CAAC,EAAE;AACtM,EAAE,MAAM,EAAE,GAAG;AACb,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB;AAC/C,EAAE,CAAC;AACH,CAAC,MAAM,aAAa,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;AACnD,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ;AAC9D,CAAC,MAAM,OAAO,GAAG;AACjB,EAAE,SAAS,EAAE,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACvD,EAAE,OAAO;AACT,EAAE,OAAO;AACT,EAAE,WAAW,EAAE;AACf,EAAE;AACF,CAAC,IAAI;AACL,EAAE,aAAa,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;AAC9E,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,wCAAwC,EAAE;AAC7D,GAAG,SAAS,EAAE,YAAY;AAC1B,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,MAAM,YAAY,EAAE,CAAC,IAAI,CAAC;AAC3B,EAAE,IAAI,EAAE,uBAAuB;AAC/B,EAAE,OAAO;AACT,EAAE,WAAW,EAAE,aAAa;AAC5B,EAAE;AACF,EAAE,CAAC;AACH,CAAC,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE;AACvD,EAAE,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE;AACnC,EAAE,SAAS,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE;AACjC,GAAG,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;AAC3C,IAAI,IAAI;AACR,IAAI,GAAG;AACP,IAAI,CAAC,CAAC,IAAI,CAAC;AACX,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC9C,EAAE;AACF,EAAE,IAAI;AACN,GAAG,MAAM,OAAO,GAAG,CAAC,CAAC,iCAAiC,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,aAAa,GAAG,CAAC,CAAC,+BAA+B,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AACtK,GAAG,MAAM,YAAY,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;AACnI,GAAG,MAAM,GAAG,GAAG,MAAM;AACrB,GAAG,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,YAAY,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;AACrF,GAAG,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,CAAC;AAC1D,GAAG,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;AAClC,IAAI,GAAG,EAAE,IAAI,CAAC,GAAG;AACjB,IAAI,GAAG,EAAE;AACT,KAAK,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AAClD,KAAK,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI;AAC3B,KAAK,WAAW,EAAE,IAAI,CAAC;AACvB,KAAK;AACL,IAAI,QAAQ,EAAE,IAAI;AAClB,IAAI,KAAK,EAAE;AACX,KAAK,QAAQ;AACb,KAAK,MAAM;AACX,KAAK;AACL;AACA,IAAI,CAAC;AACL,GAAG,KAAK,CAAC,KAAK,EAAE;AAChB,GAAG,4BAA4B,CAAC;AAChC,IAAI,aAAa,EAAE,IAAI,CAAC,GAAG;AAC3B,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;AACvC,IAAI,MAAM,EAAE,CAAC,GAAG,KAAK,gBAAgB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;AACvF,IAAI,CAAC;AACL,GAAG,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM;AACpC,IAAI,IAAI;AACR,KAAK,IAAI,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC;AACvD,IAAI,CAAC,CAAC,MAAM,CAAC;AACb,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,2CAA2C,EAAE,CAAC;AAC3E,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;AACnC,IAAI,UAAU,CAAC,KAAK,EAAE;AACtB,GAAG,CAAC,EAAE,GAAG,CAAC;AACV,GAAG,IAAI,UAAU,GAAG,KAAK;AACzB,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK;AACrC,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;AAC7C,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;AAC9B,KAAK,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;AACzC,KAAK,IAAI,KAAK,EAAE,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,QAAQ,CAAC,+BAA+B,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC,EAAE;AAC5I,MAAM,UAAU,GAAG,IAAI;AACvB,MAAM,SAAS,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC9C,KAAK,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7C,IAAI;AACJ,GAAG,CAAC,CAAC;AACL,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK;AACrC,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;AAC7C,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;AAC9B,KAAK,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;AACzC,KAAK,IAAI,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;AAC9D,IAAI;AACJ,GAAG,CAAC,CAAC;AACL,GAAG,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,KAAK;AAC/B,IAAI,YAAY,CAAC,OAAO,CAAC;AACzB,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC;AAC3C,IAAI,UAAU,CAAC,KAAK,EAAE;AACtB,GAAG,CAAC,CAAC;AACL,GAAG,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,KAAK;AAC9B,IAAI,YAAY,CAAC,OAAO,CAAC;AACzB,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;AACxD,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;AACnC,IAAI,UAAU,CAAC,KAAK,EAAE;AACtB,GAAG,CAAC,CAAC;AACL,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;AACxE,GAAG,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAClC,GAAG,UAAU,CAAC,KAAK,EAAE;AACrB,EAAE;AACF,CAAC,CAAC,EAAE,CAAC;AACL,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;AACxC,EAAE,cAAc,EAAE,mBAAmB;AACrC,EAAE,eAAe,EAAE,UAAU;AAC7B,EAAE,UAAU,EAAE;AACd,EAAE,EAAE,CAAC;AACL;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK;AAC5C,CAAC,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC;AAC5C,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,OAAO,IAAI,CAAC,MAAM,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,CAAC;AAClJ,CAAC,IAAI,IAAI,GAAG,EAAE;AACd,CAAC,IAAI;AACL,EAAE,IAAI,GAAG,YAAY,CAAC,aAAa,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC;AAC5E,CAAC,CAAC,CAAC,MAAM,CAAC;AACV,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE;AACtC,EAAE,cAAc,EAAE,2BAA2B;AAC7C,EAAE,eAAe,EAAE;AACnB,EAAE,EAAE,CAAC;AACL;;;;"}