@selvajs/selva 4.9.1 → 4.11.0

package/build/server/chunks/chunks/utils2.js-DKBV7VcI.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils2.js-DKBV7VcI.js","sources":["../../../../.svelte-kit/output/server/chunks/utils2.js"],"sourcesContent":["import { L as isPlatformServer } from \"./providers.server.js\";\n//#region ../platform/src/computeServer/utils.ts\n/**\n* Servers an org can see in pickers and use for solves:\n* platform servers shared with this org (or `'all'`, or the global default)\n* ∪ org-private servers owned by this org.\n*/\nfunction serversVisibleTo(config, orgId) {\n\treturn config.servers.filter((s) => {\n\t\tif (isPlatformServer(s)) {\n\t\t\tif (s.id === config.defaultServerId) return true;\n\t\t\tif (s.sharedWith === \"all\") return true;\n\t\t\tif (orgId && s.sharedWith.includes(orgId)) return true;\n\t\t\treturn false;\n\t\t}\n\t\treturn !!orgId && s.ownerOrgId === orgId;\n\t});\n}\n/**\n* Resolves the default server id for an org: per-org override, then global\n* default. Returns `undefined` if neither is set or visible.\n*/\nfunction defaultServerIdFor(config, orgId) {\n\tconst visible = serversVisibleTo(config, orgId);\n\tconst visibleIds = new Set(visible.map((s) => s.id));\n\tif (orgId) {\n\t\tconst orgChoice = config.orgDefaults?.[orgId];\n\t\tif (orgChoice && visibleIds.has(orgChoice)) return orgChoice;\n\t}\n\tif (config.defaultServerId && visibleIds.has(config.defaultServerId)) return config.defaultServerId;\n}\nfunction resolveServerForOrg(config, orgId, opts = {}) {\n\tconst visible = serversVisibleTo(config, orgId);\n\tif (visible.length === 0) throw new Error(\"No compute servers are configured or visible for this org.\");\n\tif (opts.definitionPin) {\n\t\tconst pinned = visible.find((s) => s.id === opts.definitionPin);\n\t\tif (pinned) return pinned;\n\t}\n\tconst defaultId = defaultServerIdFor(config, orgId);\n\tif (defaultId) {\n\t\tconst found = visible.find((s) => s.id === defaultId);\n\t\tif (found) return found;\n\t}\n\treturn visible[0];\n}\n/** Lookup by id, ignoring scope or visibility — for admin contexts that display a server outside the visibility filter. */\nfunction findServerById(config, id) {\n\treturn config.servers.find((s) => s.id === id);\n}\nfunction platformServers(config) {\n\treturn config.servers.filter(isPlatformServer);\n}\n//#endregion\nexport { serversVisibleTo as a, resolveServerForOrg as i, findServerById as n, platformServers as r, defaultServerIdFor as t };\n"],"names":[],"mappings":";;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE;AACzC,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;AACrC,EAAE,IAAI,gBAAgB,CAAC,CAAC,CAAC,EAAE;AAC3B,GAAG,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,eAAe,EAAE,OAAO,IAAI;AACnD,GAAG,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,EAAE,OAAO,IAAI;AAC1C,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,IAAI;AACzD,GAAG,OAAO,KAAK;AACf,EAAE;AACF,EAAE,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK;AAC1C,CAAC,CAAC,CAAC;AACH;AACA;AACA;AACA;AACA;AACA,SAAS,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE;AAC3C,CAAC,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC;AAChD,CAAC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;AACrD,CAAC,IAAI,KAAK,EAAE;AACZ,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC;AAC/C,EAAE,IAAI,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,SAAS;AAC9D,CAAC;AACD,CAAC,IAAI,MAAM,CAAC,eAAe,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,OAAO,MAAM,CAAC,eAAe;AACpG;AACA,SAAS,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE;AACvD,CAAC,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC;AAChD,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC;AACxG,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE;AACzB,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,aAAa,CAAC;AACjE,EAAE,IAAI,MAAM,EAAE,OAAO,MAAM;AAC3B,CAAC;AACD,CAAC,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC;AACpD,CAAC,IAAI,SAAS,EAAE;AAChB,EAAE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC;AACvD,EAAE,IAAI,KAAK,EAAE,OAAO,KAAK;AACzB,CAAC;AACD,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC;AAClB;AACA;AACA,SAAS,cAAc,CAAC,MAAM,EAAE,EAAE,EAAE;AACpC,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;AAC/C;AACA,SAAS,eAAe,CAAC,MAAM,EAAE;AACjC,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC;AAC/C;;;;"}

package/build/server/chunks/chunks/visibility.server.js-2kcDHJhi.js

@@ -0,0 +1,107 @@
+import { S as SYSTEM_CONTEXT } from './src.js-C6yJg0vh.js';
+import { o as getDefinitionMeta, e as getOrganizationProvider, f as getProjectProvider, q as getPlatformProjectGrantStore } from './providers.server.js-DqaQtsNQ.js';
+import { e as canView, p as projectAccessInputFromRows } from './access.server.js-C4HiC_D0.js';
+
+//#region src/lib/server/definitions/visibility.server.ts
+/**
+* Visibility-filtered definition reads, shared by the library page load and
+* `GET /api/v1/definitions`.
+*
+* **This is a tenancy boundary.** The project scan runs as `SYSTEM_CONTEXT` so
+* cross-org `public` projects are reachable when `ALLOW_CROSS_ORG_PUBLIC` is on;
+* `canView` over the fetched membership rows is the only thing keeping another
+* org's projects out of the result. The definition list itself is then filtered
+* *in the query* via `projectIds`, so the cursor is applied after visibility
+* rather than over a page that gets thinned afterwards.
+*
+* Cost is constant in the number of orgs and projects: three bulk membership
+* reads regardless of N. Anything added here must keep that property — a
+* per-project `await` inside a loop reintroduces the N+1 this replaced.
+*/
+/** Upper bound on the org/project scan. Visibility needs the whole set. */
+var SCAN_LIMIT = 200;
+/**
+* Resolve the caller's accessible project set in a constant number of queries.
+* Platform grants are fetched only for `platform`-visibility projects —
+* `canView` short-circuits before reading them for every other visibility.
+*/
+async function resolveAccessibleProjects(ctx) {
+	const orgs = getOrganizationProvider();
+	const projectStore = getProjectProvider();
+	const orgIds = (await orgs.listOrgs(SYSTEM_CONTEXT, { limit: SCAN_LIMIT })).items.map((o) => o.id);
+	const allProjects = (await Promise.all(orgIds.map((orgId) => projectStore.listProjects(SYSTEM_CONTEXT, orgId, { limit: SCAN_LIMIT })))).flatMap((p) => p.items);
+	const projectIds = allProjects.map((p) => p.id);
+	const platformProjectIds = allProjects.filter((p) => p.visibility === "platform").map((p) => p.id);
+	const [orgMemberByOrgId, memberByProjectId, grantsByProjectId] = await Promise.all([
+		orgs.getOrgMembersFor(SYSTEM_CONTEXT, orgIds, ctx.userId),
+		projectStore.getProjectMembersFor(SYSTEM_CONTEXT, projectIds, ctx.userId),
+		platformProjectIds.length ? getPlatformProjectGrantStore().listByProjects(SYSTEM_CONTEXT, platformProjectIds) : Promise.resolve(/* @__PURE__ */ new Map())
+	]);
+	return {
+		projects: allProjects.filter((project) => canView(projectAccessInputFromRows(ctx, project, {
+			member: memberByProjectId.get(project.id) ?? null,
+			orgMember: orgMemberByOrgId.get(project.orgId) ?? null,
+			platformGrants: grantsByProjectId.get(project.id) ?? []
+		}))),
+		allById: new Map(allProjects.map((p) => [p.id, p])),
+		memberByProjectId,
+		orgMemberByOrgId
+	};
+}
+/**
+* `opts.projectId` narrows to one project; a caller who cannot view it gets an
+* empty page rather than a 403, so this never reveals that a project exists.
+*/
+async function listVisibleDefinitions(ctx, opts = {}) {
+	const { projectId, ...listOpts } = opts;
+	const { projects } = await resolveAccessibleProjects(ctx);
+	const scoped = projectId ? projects.filter((p) => p.id === projectId) : projects;
+	const page = await getDefinitionMeta().list(ctx, {
+		...listOpts,
+		projectIds: scoped.map((p) => p.id)
+	});
+	return {
+		items: page.items,
+		nextCursor: page.nextCursor,
+		projects: scoped
+	};
+}
+/**
+* One definition, or `null` when the caller cannot view its project.
+*
+* Returns `null` rather than throwing 403 so callers surface a 404: a public
+* API that answers "forbidden" for a guid the caller cannot see turns
+* `/definitions/{guid}` into a cross-tenant existence oracle.
+*/
+async function getVisibleDefinition(ctx, guid) {
+	const record = await getDefinitionMeta().get(ctx, guid);
+	if (!record) return null;
+	const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, record.projectId);
+	if (!project) return null;
+	const [orgMembers, projectMembers, grants] = await Promise.all([
+		getOrganizationProvider().getOrgMembersFor(SYSTEM_CONTEXT, [project.orgId], ctx.userId),
+		getProjectProvider().getProjectMembersFor(SYSTEM_CONTEXT, [project.id], ctx.userId),
+		project.visibility === "platform" ? getPlatformProjectGrantStore().listByProject(SYSTEM_CONTEXT, project.id) : Promise.resolve([])
+	]);
+	return canView(projectAccessInputFromRows(ctx, project, {
+		member: projectMembers.get(project.id) ?? null,
+		orgMember: orgMembers.get(project.orgId) ?? null,
+		platformGrants: grants
+	})) ? record : null;
+}
+/**
+* One version of a definition the caller can view, including its cached
+* `schema`. `null` when the definition is invisible, the version is missing, or
+* the version belongs to a different definition — a caller must not be able to
+* read an arbitrary version by pairing it with a guid they can see.
+*/
+async function loadVisibleVersion(ctx, guid, versionId) {
+	const record = await getVisibleDefinition(ctx, guid);
+	if (!record) return null;
+	const version = await getDefinitionMeta().getVersion(ctx, versionId);
+	if (!version || version.definitionId !== record.guid) return null;
+	return version;
+}
+
+export { loadVisibleVersion as a, getVisibleDefinition as g, listVisibleDefinitions as l, resolveAccessibleProjects as r };
+//# sourceMappingURL=visibility.server.js-2kcDHJhi.js.map

package/build/server/chunks/chunks/visibility.server.js-2kcDHJhi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"visibility.server.js-2kcDHJhi.js","sources":["../../../../.svelte-kit/output/server/chunks/visibility.server.js"],"sourcesContent":["import { t as SYSTEM_CONTEXT } from \"./src.js\";\nimport { _ as getProjectProvider, g as getPlatformProjectGrantStore, m as getOrganizationProvider, s as getDefinitionMeta } from \"./providers.server.js\";\nimport { O as canView, a as projectAccessInputFromRows } from \"./access.server.js\";\n//#region src/lib/server/definitions/visibility.server.ts\n/**\n* Visibility-filtered definition reads, shared by the library page load and\n* `GET /api/v1/definitions`.\n*\n* **This is a tenancy boundary.** The project scan runs as `SYSTEM_CONTEXT` so\n* cross-org `public` projects are reachable when `ALLOW_CROSS_ORG_PUBLIC` is on;\n* `canView` over the fetched membership rows is the only thing keeping another\n* org's projects out of the result. The definition list itself is then filtered\n* *in the query* via `projectIds`, so the cursor is applied after visibility\n* rather than over a page that gets thinned afterwards.\n*\n* Cost is constant in the number of orgs and projects: three bulk membership\n* reads regardless of N. Anything added here must keep that property — a\n* per-project `await` inside a loop reintroduces the N+1 this replaced.\n*/\n/** Upper bound on the org/project scan. Visibility needs the whole set. */\nvar SCAN_LIMIT = 200;\n/**\n* Resolve the caller's accessible project set in a constant number of queries.\n* Platform grants are fetched only for `platform`-visibility projects —\n* `canView` short-circuits before reading them for every other visibility.\n*/\nasync function resolveAccessibleProjects(ctx) {\n\tconst orgs = getOrganizationProvider();\n\tconst projectStore = getProjectProvider();\n\tconst orgIds = (await orgs.listOrgs(SYSTEM_CONTEXT, { limit: SCAN_LIMIT })).items.map((o) => o.id);\n\tconst allProjects = (await Promise.all(orgIds.map((orgId) => projectStore.listProjects(SYSTEM_CONTEXT, orgId, { limit: SCAN_LIMIT })))).flatMap((p) => p.items);\n\tconst projectIds = allProjects.map((p) => p.id);\n\tconst platformProjectIds = allProjects.filter((p) => p.visibility === \"platform\").map((p) => p.id);\n\tconst [orgMemberByOrgId, memberByProjectId, grantsByProjectId] = await Promise.all([\n\t\torgs.getOrgMembersFor(SYSTEM_CONTEXT, orgIds, ctx.userId),\n\t\tprojectStore.getProjectMembersFor(SYSTEM_CONTEXT, projectIds, ctx.userId),\n\t\tplatformProjectIds.length ? getPlatformProjectGrantStore().listByProjects(SYSTEM_CONTEXT, platformProjectIds) : Promise.resolve(/* @__PURE__ */ new Map())\n\t]);\n\treturn {\n\t\tprojects: allProjects.filter((project) => canView(projectAccessInputFromRows(ctx, project, {\n\t\t\tmember: memberByProjectId.get(project.id) ?? null,\n\t\t\torgMember: orgMemberByOrgId.get(project.orgId) ?? null,\n\t\t\tplatformGrants: grantsByProjectId.get(project.id) ?? []\n\t\t}))),\n\t\tallById: new Map(allProjects.map((p) => [p.id, p])),\n\t\tmemberByProjectId,\n\t\torgMemberByOrgId\n\t};\n}\n/**\n* `opts.projectId` narrows to one project; a caller who cannot view it gets an\n* empty page rather than a 403, so this never reveals that a project exists.\n*/\nasync function listVisibleDefinitions(ctx, opts = {}) {\n\tconst { projectId, ...listOpts } = opts;\n\tconst { projects } = await resolveAccessibleProjects(ctx);\n\tconst scoped = projectId ? projects.filter((p) => p.id === projectId) : projects;\n\tconst page = await getDefinitionMeta().list(ctx, {\n\t\t...listOpts,\n\t\tprojectIds: scoped.map((p) => p.id)\n\t});\n\treturn {\n\t\titems: page.items,\n\t\tnextCursor: page.nextCursor,\n\t\tprojects: scoped\n\t};\n}\n/**\n* One definition, or `null` when the caller cannot view its project.\n*\n* Returns `null` rather than throwing 403 so callers surface a 404: a public\n* API that answers \"forbidden\" for a guid the caller cannot see turns\n* `/definitions/{guid}` into a cross-tenant existence oracle.\n*/\nasync function getVisibleDefinition(ctx, guid) {\n\tconst record = await getDefinitionMeta().get(ctx, guid);\n\tif (!record) return null;\n\tconst project = await getProjectProvider().getProject(SYSTEM_CONTEXT, record.projectId);\n\tif (!project) return null;\n\tconst [orgMembers, projectMembers, grants] = await Promise.all([\n\t\tgetOrganizationProvider().getOrgMembersFor(SYSTEM_CONTEXT, [project.orgId], ctx.userId),\n\t\tgetProjectProvider().getProjectMembersFor(SYSTEM_CONTEXT, [project.id], ctx.userId),\n\t\tproject.visibility === \"platform\" ? getPlatformProjectGrantStore().listByProject(SYSTEM_CONTEXT, project.id) : Promise.resolve([])\n\t]);\n\treturn canView(projectAccessInputFromRows(ctx, project, {\n\t\tmember: projectMembers.get(project.id) ?? null,\n\t\torgMember: orgMembers.get(project.orgId) ?? null,\n\t\tplatformGrants: grants\n\t})) ? record : null;\n}\n/**\n* One version of a definition the caller can view, including its cached\n* `schema`. `null` when the definition is invisible, the version is missing, or\n* the version belongs to a different definition — a caller must not be able to\n* read an arbitrary version by pairing it with a guid they can see.\n*/\nasync function loadVisibleVersion(ctx, guid, versionId) {\n\tconst record = await getVisibleDefinition(ctx, guid);\n\tif (!record) return null;\n\tconst version = await getDefinitionMeta().getVersion(ctx, versionId);\n\tif (!version || version.definitionId !== record.guid) return null;\n\treturn version;\n}\n//#endregion\nexport { resolveAccessibleProjects as i, listVisibleDefinitions as n, loadVisibleVersion as r, getVisibleDefinition as t };\n"],"names":[],"mappings":";;;;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,UAAU,GAAG,GAAG;AACpB;AACA;AACA;AACA;AACA;AACA,eAAe,yBAAyB,CAAC,GAAG,EAAE;AAC9C,CAAC,MAAM,IAAI,GAAG,uBAAuB,EAAE;AACvC,CAAC,MAAM,YAAY,GAAG,kBAAkB,EAAE;AAC1C,CAAC,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AACnG,CAAC,MAAM,WAAW,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,YAAY,CAAC,YAAY,CAAC,cAAc,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;AAChK,CAAC,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC,MAAM,kBAAkB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AACnG,CAAC,MAAM,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AACpF,EAAE,IAAI,CAAC,gBAAgB,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC;AAC3D,EAAE,YAAY,CAAC,oBAAoB,CAAC,cAAc,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC;AAC3E,EAAE,kBAAkB,CAAC,MAAM,GAAG,4BAA4B,EAAE,CAAC,cAAc,CAAC,cAAc,EAAE,kBAAkB,CAAC,GAAG,OAAO,CAAC,OAAO,iBAAiB,IAAI,GAAG,EAAE;AAC3J,EAAE,CAAC;AACH,CAAC,OAAO;AACR,EAAE,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,0BAA0B,CAAC,GAAG,EAAE,OAAO,EAAE;AAC7F,GAAG,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,IAAI;AACpD,GAAG,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI;AACzD,GAAG,cAAc,EAAE,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI;AACxD,GAAG,CAAC,CAAC,CAAC;AACN,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACrD,EAAE,iBAAiB;AACnB,EAAE;AACF,EAAE;AACF;AACA;AACA;AACA;AACA;AACA,eAAe,sBAAsB,CAAC,GAAG,EAAE,IAAI,GAAG,EAAE,EAAE;AACtD,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI;AACxC,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,yBAAyB,CAAC,GAAG,CAAC;AAC1D,CAAC,MAAM,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,GAAG,QAAQ;AACjF,CAAC,MAAM,IAAI,GAAG,MAAM,iBAAiB,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;AAClD,EAAE,GAAG,QAAQ;AACb,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE;AACpC,EAAE,CAAC;AACH,CAAC,OAAO;AACR,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK;AACnB,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU;AAC7B,EAAE,QAAQ,EAAE;AACZ,EAAE;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE;AAC/C,CAAC,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC;AACxD,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI;AACzB,CAAC,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC;AACxF,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI;AAC1B,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AAChE,EAAE,uBAAuB,EAAE,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC;AACzF,EAAE,kBAAkB,EAAE,CAAC,oBAAoB,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC;AACrF,EAAE,OAAO,CAAC,UAAU,KAAK,UAAU,GAAG,4BAA4B,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE;AACnI,EAAE,CAAC;AACH,CAAC,OAAO,OAAO,CAAC,0BAA0B,CAAC,GAAG,EAAE,OAAO,EAAE;AACzD,EAAE,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,IAAI;AAChD,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI;AAClD,EAAE,cAAc,EAAE;AAClB,EAAE,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI;AACpB;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;AACxD,CAAC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC;AACrD,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI;AACzB,CAAC,MAAM,OAAO,GAAG,MAAM,iBAAiB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC;AACrE,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI;AAClE,CAAC,OAAO,OAAO;AACf;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/compute/_server.ts.js-CU3PPe7y.js

@@ -0,0 +1,84 @@
+import '../../../../../chunks/src.js-C6yJg0vh.js';
+import { n as getComputeServerConfigStore, r as renderThrown } from '../../../../../chunks/providers.server.js-DqaQtsNQ.js';
+import { p as platformServers } from '../../../../../chunks/utils2.js-DKBV7VcI.js';
+import { h as requireManageCompute } from '../../../../../chunks/access.server.js-C4HiC_D0.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-CWRxx1wB.js';
+import { v as validateIncomingServers, s as storedKeysById, r as resolveApiKey, e as evictChangedServers } from '../../../../../chunks/serverConfigWrite.js-DiLDHcgG.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../chunks/limits.js-B7msNaG3.js';
+import '../../../../../chunks/schema.js-BeFDxIuz.js';
+import '../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../chunks/engine.server.js-BtRZegHZ.js';
+import '../../../../../chunks/computeLimits.js-C9NHMCCA.js';
+import 'node:dns/promises';
+import 'node:net';
+import 'node:zlib';
+import 'node:util';
+
+//#region src/routes/api/admin/compute/+server.ts
+var GET = async ({ locals }) => {
+	requireManageCompute(locals);
+	try {
+		const config = await getComputeServerConfigStore().getConfig(locals.ctx);
+		const servers = platformServers(config).map(({ apiKey: _apiKey, hasApiKey, ...rest }) => ({
+			...rest,
+			hasApiKey: !!hasApiKey
+		}));
+		return json({
+			servers,
+			defaultServerId: config.defaultServerId
+		});
+	} catch (err) {
+		locals.log.error("Failed to load compute config", {
+			component: "Compute GET",
+			err: renderThrown(err)
+		});
+		apiError(500, ApiErrorCode.INTERNAL, "Failed to load compute config");
+	}
+};
+var PUT = async ({ request, locals }) => {
+	requireManageCompute(locals);
+	const body = await request.json().catch(() => null);
+	if (!body || typeof body !== "object") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid request body");
+	const incoming = body;
+	if (!Array.isArray(incoming.servers)) apiError(400, ApiErrorCode.VALIDATION_FAILED, "servers must be an array");
+	validateIncomingServers(incoming.servers);
+	for (const s of incoming.servers) {
+		if (s.sharedWith !== "all" && !Array.isArray(s.sharedWith)) apiError(400, ApiErrorCode.VALIDATION_FAILED, "sharedWith must be \"all\" or an array of org ids");
+		if (Array.isArray(s.sharedWith) && s.sharedWith.some((x) => typeof x !== "string")) apiError(400, ApiErrorCode.VALIDATION_FAILED, "sharedWith array must contain strings");
+	}
+	if (incoming.defaultServerId) {
+		if (!incoming.servers.find((s) => s.id === incoming.defaultServerId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, "defaultServerId must reference one of the submitted servers");
+	}
+	try {
+		const provider = getComputeServerConfigStore();
+		const existing = await provider.getConfig(locals.ctx, { includeApiKeys: true });
+		const storedKeys = storedKeysById(platformServers(existing));
+		const next = incoming.servers.map(({ apiKey, sharedWith, ...rest }) => ({
+			...rest,
+			scope: "platform",
+			sharedWith: sharedWith === "all" ? "all" : [...sharedWith],
+			apiKey: resolveApiKey(apiKey, storedKeys.get(rest.id))
+		}));
+		await provider.savePlatformServers(locals.ctx, next, incoming.defaultServerId);
+		evictChangedServers(platformServers(existing), next);
+		return new Response(null, { status: 204 });
+	} catch (err) {
+		locals.log.error("Failed to save compute config", {
+			component: "Compute PUT",
+			err: renderThrown(err)
+		});
+		apiError(500, ApiErrorCode.INTERNAL, "Failed to save compute config");
+	}
+};
+
+export { GET, PUT };
+//# sourceMappingURL=_server.ts.js-CU3PPe7y.js.map

package/build/server/chunks/entries/endpoints/api/admin/compute/_server.ts.js-CU3PPe7y.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CU3PPe7y.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/compute/_server.ts.js"],"sourcesContent":["import \"../../../../../chunks/src.js\";\nimport { T as renderThrown, a as getComputeServerConfigStore } from \"../../../../../chunks/providers.server.js\";\nimport { r as platformServers } from \"../../../../../chunks/utils2.js\";\nimport { y as requireManageCompute } from \"../../../../../chunks/access.server.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { i as evictChangedServers, n as storedKeysById, r as validateIncomingServers, t as resolveApiKey } from \"../../../../../chunks/serverConfigWrite.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/admin/compute/+server.ts\nvar GET = async ({ locals }) => {\n\trequireManageCompute(locals);\n\ttry {\n\t\tconst config = await getComputeServerConfigStore().getConfig(locals.ctx);\n\t\tconst servers = platformServers(config).map(({ apiKey: _apiKey, hasApiKey, ...rest }) => ({\n\t\t\t...rest,\n\t\t\thasApiKey: !!hasApiKey\n\t\t}));\n\t\treturn json({\n\t\t\tservers,\n\t\t\tdefaultServerId: config.defaultServerId\n\t\t});\n\t} catch (err) {\n\t\tlocals.log.error(\"Failed to load compute config\", {\n\t\t\tcomponent: \"Compute GET\",\n\t\t\terr: renderThrown(err)\n\t\t});\n\t\tapiError(500, ApiErrorCode.INTERNAL, \"Failed to load compute config\");\n\t}\n};\nvar PUT = async ({ request, locals }) => {\n\trequireManageCompute(locals);\n\tconst body = await request.json().catch(() => null);\n\tif (!body || typeof body !== \"object\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid request body\");\n\tconst incoming = body;\n\tif (!Array.isArray(incoming.servers)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"servers must be an array\");\n\tvalidateIncomingServers(incoming.servers);\n\tfor (const s of incoming.servers) {\n\t\tif (s.sharedWith !== \"all\" && !Array.isArray(s.sharedWith)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"sharedWith must be \\\"all\\\" or an array of org ids\");\n\t\tif (Array.isArray(s.sharedWith) && s.sharedWith.some((x) => typeof x !== \"string\")) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"sharedWith array must contain strings\");\n\t}\n\tif (incoming.defaultServerId) {\n\t\tif (!incoming.servers.find((s) => s.id === incoming.defaultServerId)) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"defaultServerId must reference one of the submitted servers\");\n\t}\n\ttry {\n\t\tconst provider = getComputeServerConfigStore();\n\t\tconst existing = await provider.getConfig(locals.ctx, { includeApiKeys: true });\n\t\tconst storedKeys = storedKeysById(platformServers(existing));\n\t\tconst next = incoming.servers.map(({ apiKey, sharedWith, ...rest }) => ({\n\t\t\t...rest,\n\t\t\tscope: \"platform\",\n\t\t\tsharedWith: sharedWith === \"all\" ? \"all\" : [...sharedWith],\n\t\t\tapiKey: resolveApiKey(apiKey, storedKeys.get(rest.id))\n\t\t}));\n\t\tawait provider.savePlatformServers(locals.ctx, next, incoming.defaultServerId);\n\t\tevictChangedServers(platformServers(existing), next);\n\t\treturn new Response(null, { status: 204 });\n\t} catch (err) {\n\t\tlocals.log.error(\"Failed to save compute config\", {\n\t\t\tcomponent: \"Compute PUT\",\n\t\t\terr: renderThrown(err)\n\t\t});\n\t\tapiError(500, ApiErrorCode.INTERNAL, \"Failed to save compute config\");\n\t}\n};\n//#endregion\nexport { GET, PUT };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAOA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AAChC,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,IAAI;AACL,EAAE,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;AAC1E,EAAE,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,MAAM;AAC5F,GAAG,GAAG,IAAI;AACV,GAAG,SAAS,EAAE,CAAC,CAAC;AAChB,GAAG,CAAC,CAAC;AACL,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,OAAO;AACV,GAAG,eAAe,EAAE,MAAM,CAAC;AAC3B,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,+BAA+B,EAAE;AACpD,GAAG,SAAS,EAAE,aAAa;AAC3B,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC;AACJ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,+BAA+B,CAAC;AACvE,CAAC;AACD;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACzC,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AAC7G,CAAC,MAAM,QAAQ,GAAG,IAAI;AACtB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;AAChH,CAAC,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC;AAC1C,CAAC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE;AACnC,EAAE,IAAI,CAAC,CAAC,UAAU,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,mDAAmD,CAAC;AAChK,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,uCAAuC,CAAC;AAC5K,CAAC;AACD,CAAC,IAAI,QAAQ,CAAC,eAAe,EAAE;AAC/B,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,6DAA6D,CAAC;AACpL,CAAC;AACD,CAAC,IAAI;AACL,EAAE,MAAM,QAAQ,GAAG,2BAA2B,EAAE;AAChD,EAAE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;AACjF,EAAE,MAAM,UAAU,GAAG,cAAc,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;AAC9D,EAAE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,MAAM;AAC1E,GAAG,GAAG,IAAI;AACV,GAAG,KAAK,EAAE,UAAU;AACpB,GAAG,UAAU,EAAE,UAAU,KAAK,KAAK,GAAG,KAAK,GAAG,CAAC,GAAG,UAAU,CAAC;AAC7D,GAAG,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;AACxD,GAAG,CAAC,CAAC;AACL,EAAE,MAAM,QAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC;AAChF,EAAE,mBAAmB,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;AACtD,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,+BAA+B,EAAE;AACpD,GAAG,SAAS,EAAE,aAAa;AAC3B,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC;AACJ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,+BAA+B,CAAC;AACvE,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/compute/actions/_server.ts.js-Bo2B_6lE.js

@@ -0,0 +1,54 @@
+import '../../../../../../chunks/src.js-C6yJg0vh.js';
+import { n as getComputeServerConfigStore } from '../../../../../../chunks/providers.server.js-DqaQtsNQ.js';
+import { f as findServerById } from '../../../../../../chunks/utils2.js-DKBV7VcI.js';
+import { h as requireManageCompute } from '../../../../../../chunks/access.server.js-C4HiC_D0.js';
+import { m } from '../../../../../../chunks/schema.js-BeFDxIuz.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-CWRxx1wB.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../../chunks/limits.js-B7msNaG3.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+
+//#region src/routes/api/admin/compute/actions/+server.ts
+var POST = async ({ request, locals }) => {
+	requireManageCompute(locals);
+	const body = await request.json().catch(() => null);
+	if (!body || typeof body !== "object") apiError(400, ApiErrorCode.VALIDATION_FAILED, "Invalid request body");
+	const { serverId, action } = body;
+	if (!serverId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "serverId required");
+	if (action !== "purge" && action !== "shutdown") apiError(400, ApiErrorCode.VALIDATION_FAILED, "action must be 'purge' or 'shutdown'");
+	const store = getComputeServerConfigStore();
+	const config = await store.getConfig(locals.ctx);
+	const server = findServerById(config, serverId);
+	if (!server) apiError(404, ApiErrorCode.NOT_FOUND, "Server not found");
+	const apiKey = server.hasApiKey ? await store.getServerApiKey(locals.ctx, server.id) : void 0;
+	const stats = new m(server.serverUrl, apiKey);
+	try {
+		if (action === "purge") {
+			const result = await stats.purgeAllChildren();
+			if (result === null) apiError(502, ApiErrorCode.INTERNAL, "Could not reach the server to purge its cache");
+			return json({
+				action,
+				...result
+			});
+		}
+		const result = await stats.shutdownChildren();
+		if (result === null) apiError(502, ApiErrorCode.INTERNAL, "Could not reach the server to shut down its children");
+		return json({
+			action,
+			...result
+		});
+	} finally {
+		await stats.dispose();
+	}
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts.js-Bo2B_6lE.js.map

package/build/server/chunks/entries/endpoints/api/admin/compute/actions/_server.ts.js-Bo2B_6lE.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-Bo2B_6lE.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/compute/actions/_server.ts.js"],"sourcesContent":["import \"../../../../../../chunks/src.js\";\nimport { a as getComputeServerConfigStore } from \"../../../../../../chunks/providers.server.js\";\nimport { n as findServerById } from \"../../../../../../chunks/utils2.js\";\nimport { y as requireManageCompute } from \"../../../../../../chunks/access.server.js\";\nimport { h as m } from \"../../../../../../chunks/schema.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/admin/compute/actions/+server.ts\nvar POST = async ({ request, locals }) => {\n\trequireManageCompute(locals);\n\tconst body = await request.json().catch(() => null);\n\tif (!body || typeof body !== \"object\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Invalid request body\");\n\tconst { serverId, action } = body;\n\tif (!serverId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"serverId required\");\n\tif (action !== \"purge\" && action !== \"shutdown\") apiError(400, ApiErrorCode.VALIDATION_FAILED, \"action must be 'purge' or 'shutdown'\");\n\tconst store = getComputeServerConfigStore();\n\tconst config = await store.getConfig(locals.ctx);\n\tconst server = findServerById(config, serverId);\n\tif (!server) apiError(404, ApiErrorCode.NOT_FOUND, \"Server not found\");\n\tconst apiKey = server.hasApiKey ? await store.getServerApiKey(locals.ctx, server.id) : void 0;\n\tconst stats = new m(server.serverUrl, apiKey);\n\ttry {\n\t\tif (action === \"purge\") {\n\t\t\tconst result = await stats.purgeAllChildren();\n\t\t\tif (result === null) apiError(502, ApiErrorCode.INTERNAL, \"Could not reach the server to purge its cache\");\n\t\t\treturn json({\n\t\t\t\taction,\n\t\t\t\t...result\n\t\t\t});\n\t\t}\n\t\tconst result = await stats.shutdownChildren();\n\t\tif (result === null) apiError(502, ApiErrorCode.INTERNAL, \"Could not reach the server to shut down its children\");\n\t\treturn json({\n\t\t\taction,\n\t\t\t...result\n\t\t});\n\t} finally {\n\t\tawait stats.dispose();\n\t}\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAOA;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC1C,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;AAC7G,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI;AAClC,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;AAClF,CAAC,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,sCAAsC,CAAC;AACvI,CAAC,MAAM,KAAK,GAAG,2BAA2B,EAAE;AAC5C,CAAC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;AACjD,CAAC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC;AAChD,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,kBAAkB,CAAC;AACvE,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM;AAC9F,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;AAC9C,CAAC,IAAI;AACL,EAAE,IAAI,MAAM,KAAK,OAAO,EAAE;AAC1B,GAAG,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE;AAChD,GAAG,IAAI,MAAM,KAAK,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,+CAA+C,CAAC;AAC7G,GAAG,OAAO,IAAI,CAAC;AACf,IAAI,MAAM;AACV,IAAI,GAAG;AACP,IAAI,CAAC;AACL,EAAE;AACF,EAAE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE;AAC/C,EAAE,IAAI,MAAM,KAAK,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,sDAAsD,CAAC;AACnH,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,MAAM;AACT,GAAG,GAAG;AACN,GAAG,CAAC;AACJ,CAAC,CAAC,SAAS;AACX,EAAE,MAAM,KAAK,CAAC,OAAO,EAAE;AACvB,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/compute/status/_server.ts.js-CpTh1woB.js

@@ -0,0 +1,80 @@
+import '../../../../../../chunks/src.js-C6yJg0vh.js';
+import { n as getComputeServerConfigStore } from '../../../../../../chunks/providers.server.js-DqaQtsNQ.js';
+import { f as findServerById } from '../../../../../../chunks/utils2.js-DKBV7VcI.js';
+import { h as requireManageCompute } from '../../../../../../chunks/access.server.js-C4HiC_D0.js';
+import { m } from '../../../../../../chunks/schema.js-BeFDxIuz.js';
+import { a as apiError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-CWRxx1wB.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../../chunks/limits.js-B7msNaG3.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+
+//#region src/routes/api/admin/compute/status/+server.ts
+var GET = async ({ url, locals }) => {
+	requireManageCompute(locals);
+	const serverId = url.searchParams.get("serverId");
+	if (!serverId) apiError(400, ApiErrorCode.VALIDATION_FAILED, "serverId required");
+	const store = getComputeServerConfigStore();
+	const config = await store.getConfig(locals.ctx);
+	const server = findServerById(config, serverId);
+	if (!server) apiError(404, ApiErrorCode.NOT_FOUND, "Server not found");
+	const apiKey = server.hasApiKey ? await store.getServerApiKey(locals.ctx, server.id) : void 0;
+	const stats = new m(server.serverUrl, apiKey);
+	try {
+		if (!await stats.isServerOnline()) return json({
+			reachable: false,
+			ready: false,
+			rhinoVersion: null,
+			computeVersion: null,
+			selvaInstalled: false,
+			selvaVersion: null,
+			plugins: {},
+			activeChildren: null,
+			idleSpanSeconds: null
+		});
+		const [version, plugins, activeChildren, idleSpanSeconds] = await Promise.all([
+			stats.getVersion(),
+			stats.getInstalledPlugins("gh"),
+			stats.getActiveChildren({ initialize: false }),
+			stats.getIdleSpan()
+		]);
+		const inventoryLoaded = plugins !== null && Object.keys(plugins).length > 0;
+		const installed = plugins ?? {};
+		const selvaVersion = installed["Selva"] ?? null;
+		return json({
+			reachable: true,
+			ready: inventoryLoaded,
+			rhinoVersion: version?.rhino ?? null,
+			computeVersion: version?.compute ?? null,
+			selvaInstalled: selvaVersion !== null,
+			selvaVersion,
+			plugins: installed,
+			activeChildren,
+			idleSpanSeconds
+		});
+	} catch {
+		return json({
+			reachable: false,
+			ready: false,
+			rhinoVersion: null,
+			computeVersion: null,
+			selvaInstalled: false,
+			selvaVersion: null,
+			plugins: {},
+			activeChildren: null,
+			idleSpanSeconds: null
+		});
+	} finally {
+		await stats.dispose();
+	}
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-CpTh1woB.js.map

package/build/server/chunks/entries/endpoints/api/admin/compute/status/_server.ts.js-CpTh1woB.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-CpTh1woB.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/compute/status/_server.ts.js"],"sourcesContent":["import \"../../../../../../chunks/src.js\";\nimport { a as getComputeServerConfigStore } from \"../../../../../../chunks/providers.server.js\";\nimport { n as findServerById } from \"../../../../../../chunks/utils2.js\";\nimport { y as requireManageCompute } from \"../../../../../../chunks/access.server.js\";\nimport { h as m } from \"../../../../../../chunks/schema.js\";\nimport { n as apiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/admin/compute/status/+server.ts\nvar GET = async ({ url, locals }) => {\n\trequireManageCompute(locals);\n\tconst serverId = url.searchParams.get(\"serverId\");\n\tif (!serverId) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"serverId required\");\n\tconst store = getComputeServerConfigStore();\n\tconst config = await store.getConfig(locals.ctx);\n\tconst server = findServerById(config, serverId);\n\tif (!server) apiError(404, ApiErrorCode.NOT_FOUND, \"Server not found\");\n\tconst apiKey = server.hasApiKey ? await store.getServerApiKey(locals.ctx, server.id) : void 0;\n\tconst stats = new m(server.serverUrl, apiKey);\n\ttry {\n\t\tif (!await stats.isServerOnline()) return json({\n\t\t\treachable: false,\n\t\t\tready: false,\n\t\t\trhinoVersion: null,\n\t\t\tcomputeVersion: null,\n\t\t\tselvaInstalled: false,\n\t\t\tselvaVersion: null,\n\t\t\tplugins: {},\n\t\t\tactiveChildren: null,\n\t\t\tidleSpanSeconds: null\n\t\t});\n\t\tconst [version, plugins, activeChildren, idleSpanSeconds] = await Promise.all([\n\t\t\tstats.getVersion(),\n\t\t\tstats.getInstalledPlugins(\"gh\"),\n\t\t\tstats.getActiveChildren({ initialize: false }),\n\t\t\tstats.getIdleSpan()\n\t\t]);\n\t\tconst inventoryLoaded = plugins !== null && Object.keys(plugins).length > 0;\n\t\tconst installed = plugins ?? {};\n\t\tconst selvaVersion = installed[\"Selva\"] ?? null;\n\t\treturn json({\n\t\t\treachable: true,\n\t\t\tready: inventoryLoaded,\n\t\t\trhinoVersion: version?.rhino ?? null,\n\t\t\tcomputeVersion: version?.compute ?? null,\n\t\t\tselvaInstalled: selvaVersion !== null,\n\t\t\tselvaVersion,\n\t\t\tplugins: installed,\n\t\t\tactiveChildren,\n\t\t\tidleSpanSeconds\n\t\t});\n\t} catch {\n\t\treturn json({\n\t\t\treachable: false,\n\t\t\tready: false,\n\t\t\trhinoVersion: null,\n\t\t\tcomputeVersion: null,\n\t\t\tselvaInstalled: false,\n\t\t\tselvaVersion: null,\n\t\t\tplugins: {},\n\t\t\tactiveChildren: null,\n\t\t\tidleSpanSeconds: null\n\t\t});\n\t} finally {\n\t\tawait stats.dispose();\n\t}\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAOA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK;AACrC,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;AAClD,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;AAClF,CAAC,MAAM,KAAK,GAAG,2BAA2B,EAAE;AAC5C,CAAC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC;AACjD,CAAC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC;AAChD,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,kBAAkB,CAAC;AACvE,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM;AAC9F,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;AAC9C,CAAC,IAAI;AACL,EAAE,IAAI,CAAC,MAAM,KAAK,CAAC,cAAc,EAAE,EAAE,OAAO,IAAI,CAAC;AACjD,GAAG,SAAS,EAAE,KAAK;AACnB,GAAG,KAAK,EAAE,KAAK;AACf,GAAG,YAAY,EAAE,IAAI;AACrB,GAAG,cAAc,EAAE,IAAI;AACvB,GAAG,cAAc,EAAE,KAAK;AACxB,GAAG,YAAY,EAAE,IAAI;AACrB,GAAG,OAAO,EAAE,EAAE;AACd,GAAG,cAAc,EAAE,IAAI;AACvB,GAAG,eAAe,EAAE;AACpB,GAAG,CAAC;AACJ,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;AAChF,GAAG,KAAK,CAAC,UAAU,EAAE;AACrB,GAAG,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC;AAClC,GAAG,KAAK,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AACjD,GAAG,KAAK,CAAC,WAAW;AACpB,GAAG,CAAC;AACJ,EAAE,MAAM,eAAe,GAAG,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;AAC7E,EAAE,MAAM,SAAS,GAAG,OAAO,IAAI,EAAE;AACjC,EAAE,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,IAAI;AACjD,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,SAAS,EAAE,IAAI;AAClB,GAAG,KAAK,EAAE,eAAe;AACzB,GAAG,YAAY,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI;AACvC,GAAG,cAAc,EAAE,OAAO,EAAE,OAAO,IAAI,IAAI;AAC3C,GAAG,cAAc,EAAE,YAAY,KAAK,IAAI;AACxC,GAAG,YAAY;AACf,GAAG,OAAO,EAAE,SAAS;AACrB,GAAG,cAAc;AACjB,GAAG;AACH,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,SAAS,EAAE,KAAK;AACnB,GAAG,KAAK,EAAE,KAAK;AACf,GAAG,YAAY,EAAE,IAAI;AACrB,GAAG,cAAc,EAAE,IAAI;AACvB,GAAG,cAAc,EAAE,KAAK;AACxB,GAAG,YAAY,EAAE,IAAI;AACrB,GAAG,OAAO,EAAE,EAAE;AACd,GAAG,cAAc,EAAE,IAAI;AACvB,GAAG,eAAe,EAAE;AACpB,GAAG,CAAC;AACJ,CAAC,CAAC,SAAS;AACX,EAAE,MAAM,KAAK,CAAC,OAAO,EAAE;AACvB,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/orgs/_id_/_server.ts.js-BmbfcnD2.js

@@ -0,0 +1,51 @@
+import { U as UpdateOrgSchema } from '../../../../../../chunks/src.js-C6yJg0vh.js';
+import { e as getOrganizationProvider, P as ProviderError } from '../../../../../../chunks/providers.server.js-DqaQtsNQ.js';
+import { i as requireInstanceAdmin } from '../../../../../../chunks/access.server.js-C4HiC_D0.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-CWRxx1wB.js';
+import { json } from '@sveltejs/kit';
+import 'zod';
+import '../../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../../chunks/limits.js-B7msNaG3.js';
+import '../../../../../../chunks/schema.js-BeFDxIuz.js';
+import '../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/utils2.js-DKBV7VcI.js';
+
+//#region src/routes/api/admin/orgs/[id]/+server.ts
+var PATCH = async ({ params, request, locals }) => {
+	requireInstanceAdmin(locals);
+	const { id } = params;
+	if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing org ID");
+	const ctx = locals.ctx;
+	const body = await request.json().catch(() => null);
+	const parsed = UpdateOrgSchema.safeParse(body);
+	if (!parsed.success) throwZodError(parsed.error);
+	try {
+		await getOrganizationProvider().updateOrg(ctx, id, parsed.data);
+		const updated = await getOrganizationProvider().getOrg(ctx, id);
+		return json(updated);
+	} catch (err) {
+		if (err instanceof ProviderError && err.statusCode === 409) apiError(409, ApiErrorCode.CONFLICT, err.message);
+		handleApiError(err, "Failed to update org");
+	}
+};
+var DELETE = async ({ params, locals }) => {
+	requireInstanceAdmin(locals);
+	const { id } = params;
+	if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing org ID");
+	const ctx = locals.ctx;
+	try {
+		await getOrganizationProvider().deleteOrg(ctx, id);
+		return new Response(null, { status: 204 });
+	} catch (err) {
+		handleApiError(err, "Failed to delete org");
+	}
+};
+
+export { DELETE, PATCH };
+//# sourceMappingURL=_server.ts.js-BmbfcnD2.js.map

package/build/server/chunks/entries/endpoints/api/admin/orgs/_id_/_server.ts.js-BmbfcnD2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-BmbfcnD2.js","sources":["../../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/orgs/_id_/_server.ts.js"],"sourcesContent":["import { w as UpdateOrgSchema } from \"../../../../../../chunks/src.js\";\nimport { P as ProviderError, m as getOrganizationProvider } from \"../../../../../../chunks/providers.server.js\";\nimport { v as requireInstanceAdmin } from \"../../../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\n//#region src/routes/api/admin/orgs/[id]/+server.ts\nvar PATCH = async ({ params, request, locals }) => {\n\trequireInstanceAdmin(locals);\n\tconst { id } = params;\n\tif (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing org ID\");\n\tconst ctx = locals.ctx;\n\tconst body = await request.json().catch(() => null);\n\tconst parsed = UpdateOrgSchema.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\ttry {\n\t\tawait getOrganizationProvider().updateOrg(ctx, id, parsed.data);\n\t\tconst updated = await getOrganizationProvider().getOrg(ctx, id);\n\t\treturn json(updated);\n\t} catch (err) {\n\t\tif (err instanceof ProviderError && err.statusCode === 409) apiError(409, ApiErrorCode.CONFLICT, err.message);\n\t\thandleApiError(err, \"Failed to update org\");\n\t}\n};\nvar DELETE = async ({ params, locals }) => {\n\trequireInstanceAdmin(locals);\n\tconst { id } = params;\n\tif (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, \"Missing org ID\");\n\tconst ctx = locals.ctx;\n\ttry {\n\t\tawait getOrganizationProvider().deleteOrg(ctx, id);\n\t\treturn new Response(null, { status: 204 });\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to delete org\");\n\t}\n};\n//#endregion\nexport { DELETE, PATCH };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAKA;AACG,IAAC,KAAK,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACnD,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACtB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;AACzE,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAC/C,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,IAAI;AACL,EAAE,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC;AACjE,EAAE,MAAM,OAAO,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;AACjE,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC;AACtB,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC;AAC/G,EAAE,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC7C,CAAC;AACD;AACG,IAAC,MAAM,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;AAC3C,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM;AACtB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;AACzE,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,IAAI;AACL,EAAE,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC;AACpD,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC7C,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/orgs/_server.ts.js-DntXc1A2.js

@@ -0,0 +1,72 @@
+import { C as CreateOrgSchema } from '../../../../../chunks/src.js-C6yJg0vh.js';
+import { e as getOrganizationProvider, P as ProviderError } from '../../../../../chunks/providers.server.js-DqaQtsNQ.js';
+import { i as requireInstanceAdmin } from '../../../../../chunks/access.server.js-C4HiC_D0.js';
+import { h as handleApiError, t as throwZodError, a as apiError, A as ApiErrorCode } from '../../../../../chunks/api-errors.js-CWRxx1wB.js';
+import { json } from '@sveltejs/kit';
+import { randomUUID } from 'node:crypto';
+import 'zod';
+import '../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../chunks/limits.js-B7msNaG3.js';
+import '../../../../../chunks/schema.js-BeFDxIuz.js';
+import '../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../chunks/utils2.js-DKBV7VcI.js';
+
+//#region src/routes/api/admin/orgs/+server.ts
+/**
+* Spec §8 — instance-admin-only org management. Multi-tenant deployments use
+* this to create / list orgs out of band of the per-org invite flow. Self-
+* hosted single-tenant instances rarely call these.
+*/
+var GET = async ({ locals, url }) => {
+	requireInstanceAdmin(locals);
+	const ctx = locals.ctx;
+	const rawLimit = Number(url.searchParams.get("limit") ?? 200);
+	const limit = Number.isFinite(rawLimit) ? Math.min(Math.max(rawLimit, 1), 200) : 200;
+	const cursor = url.searchParams.get("cursor") ?? void 0;
+	try {
+		const page = await getOrganizationProvider().listOrgs(ctx, {
+			limit,
+			cursor
+		});
+		return json({
+			orgs: page.items,
+			nextCursor: page.nextCursor
+		});
+	} catch (err) {
+		handleApiError(err, "Failed to list orgs");
+	}
+};
+var POST = async ({ request, locals }) => {
+	const user = requireInstanceAdmin(locals);
+	const ctx = locals.ctx;
+	const body = await request.json().catch(() => null);
+	const parsed = CreateOrgSchema.safeParse(body);
+	if (!parsed.success) throwZodError(parsed.error);
+	const now = (/* @__PURE__ */ new Date()).toISOString();
+	const org = {
+		id: randomUUID(),
+		name: parsed.data.name,
+		slug: parsed.data.slug,
+		ownerId: user.id,
+		createdBy: user.id,
+		updatedBy: user.id,
+		createdAt: now,
+		updatedAt: now,
+		deletedAt: null
+	};
+	try {
+		await getOrganizationProvider().createOrg(ctx, org);
+		return json(org, { status: 201 });
+	} catch (err) {
+		if (err instanceof ProviderError && err.statusCode === 409) apiError(409, ApiErrorCode.CONFLICT, err.message);
+		handleApiError(err, "Failed to create org");
+	}
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-DntXc1A2.js.map

package/build/server/chunks/entries/endpoints/api/admin/orgs/_server.ts.js-DntXc1A2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts.js-DntXc1A2.js","sources":["../../../../../../../../.svelte-kit/output/server/entries/endpoints/api/admin/orgs/_server.ts.js"],"sourcesContent":["import { _ as CreateOrgSchema } from \"../../../../../chunks/src.js\";\nimport { P as ProviderError, m as getOrganizationProvider } from \"../../../../../chunks/providers.server.js\";\nimport { v as requireInstanceAdmin } from \"../../../../../chunks/access.server.js\";\nimport { i as throwZodError, n as apiError, r as handleApiError, t as ApiErrorCode } from \"../../../../../chunks/api-errors.js\";\nimport { json } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/api/admin/orgs/+server.ts\n/**\n* Spec §8 — instance-admin-only org management. Multi-tenant deployments use\n* this to create / list orgs out of band of the per-org invite flow. Self-\n* hosted single-tenant instances rarely call these.\n*/\nvar GET = async ({ locals, url }) => {\n\trequireInstanceAdmin(locals);\n\tconst ctx = locals.ctx;\n\tconst rawLimit = Number(url.searchParams.get(\"limit\") ?? 200);\n\tconst limit = Number.isFinite(rawLimit) ? Math.min(Math.max(rawLimit, 1), 200) : 200;\n\tconst cursor = url.searchParams.get(\"cursor\") ?? void 0;\n\ttry {\n\t\tconst page = await getOrganizationProvider().listOrgs(ctx, {\n\t\t\tlimit,\n\t\t\tcursor\n\t\t});\n\t\treturn json({\n\t\t\torgs: page.items,\n\t\t\tnextCursor: page.nextCursor\n\t\t});\n\t} catch (err) {\n\t\thandleApiError(err, \"Failed to list orgs\");\n\t}\n};\nvar POST = async ({ request, locals }) => {\n\tconst user = requireInstanceAdmin(locals);\n\tconst ctx = locals.ctx;\n\tconst body = await request.json().catch(() => null);\n\tconst parsed = CreateOrgSchema.safeParse(body);\n\tif (!parsed.success) throwZodError(parsed.error);\n\tconst now = (/* @__PURE__ */ new Date()).toISOString();\n\tconst org = {\n\t\tid: randomUUID(),\n\t\tname: parsed.data.name,\n\t\tslug: parsed.data.slug,\n\t\townerId: user.id,\n\t\tcreatedBy: user.id,\n\t\tupdatedBy: user.id,\n\t\tcreatedAt: now,\n\t\tupdatedAt: now,\n\t\tdeletedAt: null\n\t};\n\ttry {\n\t\tawait getOrganizationProvider().createOrg(ctx, org);\n\t\treturn json(org, { status: 201 });\n\t} catch (err) {\n\t\tif (err instanceof ProviderError && err.statusCode === 409) apiError(409, ApiErrorCode.CONFLICT, err.message);\n\t\thandleApiError(err, \"Failed to create org\");\n\t}\n};\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAMA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK;AACrC,CAAC,oBAAoB,CAAC,MAAM,CAAC;AAC7B,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC;AAC9D,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG;AACrF,CAAC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,MAAM;AACxD,CAAC,IAAI;AACL,EAAE,MAAM,IAAI,GAAG,MAAM,uBAAuB,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE;AAC7D,GAAG,KAAK;AACR,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,IAAI,EAAE,IAAI,CAAC,KAAK;AACnB,GAAG,UAAU,EAAE,IAAI,CAAC;AACpB,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,cAAc,CAAC,GAAG,EAAE,qBAAqB,CAAC;AAC5C,CAAC;AACD;AACG,IAAC,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AAC1C,CAAC,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC;AAC1C,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACpD,CAAC,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC;AAC/C,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AACjD,CAAC,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACvD,CAAC,MAAM,GAAG,GAAG;AACb,EAAE,EAAE,EAAE,UAAU,EAAE;AAClB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AACxB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;AACxB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;AAClB,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;AACpB,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;AACpB,EAAE,SAAS,EAAE,GAAG;AAChB,EAAE,SAAS,EAAE,GAAG;AAChB,EAAE,SAAS,EAAE;AACb,EAAE;AACF,CAAC,IAAI;AACL,EAAE,MAAM,uBAAuB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;AACrD,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACnC,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC;AAC/G,EAAE,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC;AAC7C,CAAC;AACD;;;;"}

package/build/server/chunks/entries/endpoints/api/admin/projects/_id_/_server.ts.js-2QvIX8R8.js

@@ -0,0 +1,75 @@
+import { S as SYSTEM_CONTEXT, s as slugify } from '../../../../../../chunks/src.js-C6yJg0vh.js';
+import { f as getProjectProvider } from '../../../../../../chunks/providers.server.js-DqaQtsNQ.js';
+import { i as requireInstanceAdmin } from '../../../../../../chunks/access.server.js-C4HiC_D0.js';
+import { a as apiError, h as handleApiError, t as throwZodError, A as ApiErrorCode } from '../../../../../../chunks/api-errors.js-CWRxx1wB.js';
+import { json } from '@sveltejs/kit';
+import { z } from 'zod';
+import '../../../../../../chunks/shared-server.js-D2MyEK0i.js';
+import '../../../../../../chunks/limits.js-B7msNaG3.js';
+import '../../../../../../chunks/schema.js-BeFDxIuz.js';
+import '../../../../../../chunks/core-BQtRL5GE.js-iCpLjXCp.js';
+import 'node:crypto';
+import 'node:url';
+import 'node:path';
+import 'node:fs';
+import 'node:fs/promises';
+import '@supabase/supabase-js';
+import '../../../../../../chunks/utils2.js-DKBV7VcI.js';
+
+//#region src/routes/api/admin/projects/[id]/+server.ts
+var UpdatePlatformProjectBody = z.object({
+	name: z.string().min(1).max(128).trim(),
+	description: z.string().max(2e3).nullish()
+}).partial();
+async function loadPlatformProjectOr404(id) {
+	const project = await getProjectProvider().getProject(SYSTEM_CONTEXT, id);
+	if (!project || project.visibility !== "platform") apiError(404, ApiErrorCode.NOT_FOUND, "Platform project not found");
+	return project;
+}
+var GET = async ({ params, locals }) => {
+	requireInstanceAdmin(locals);
+	const { id } = params;
+	if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
+	try {
+		const project = await loadPlatformProjectOr404(id);
+		return json(project);
+	} catch (err) {
+		handleApiError(err, "Failed to load platform project");
+	}
+};
+var PATCH = async ({ params, request, locals }) => {
+	requireInstanceAdmin(locals);
+	const { id } = params;
+	if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
+	const body = await request.json().catch(() => null);
+	const parsed = UpdatePlatformProjectBody.safeParse(body);
+	if (!parsed.success) throwZodError(parsed.error);
+	try {
+		await loadPlatformProjectOr404(id);
+		const patch = {};
+		if (parsed.data.name !== void 0) {
+			patch.name = parsed.data.name;
+			patch.slug = slugify(parsed.data.name);
+		}
+		if (parsed.data.description !== void 0) patch.description = parsed.data.description ?? void 0;
+		await getProjectProvider().updateProject(SYSTEM_CONTEXT, id, patch);
+		return new Response(null, { status: 204 });
+	} catch (err) {
+		handleApiError(err, "Failed to update platform project");
+	}
+};
+var DELETE = async ({ params, locals }) => {
+	requireInstanceAdmin(locals);
+	const { id } = params;
+	if (!id) apiError(400, ApiErrorCode.VALIDATION_FAILED, "Missing project ID");
+	try {
+		await loadPlatformProjectOr404(id);
+		await getProjectProvider().deleteProject(SYSTEM_CONTEXT, id);
+		return new Response(null, { status: 204 });
+	} catch (err) {
+		handleApiError(err, "Failed to delete platform project");
+	}
+};
+
+export { DELETE, GET, PATCH };
+//# sourceMappingURL=_server.ts.js-2QvIX8R8.js.map