tanstack_start_ts 1.0.0

package/dist/server/assets/admin.functions-B78ppWLR.js

@@ -0,0 +1,645 @@
+import { c as createServerRpc } from "./vendor-tanstack-start-server-core-CsAstXv7.js";
+import { n as createServerFn } from "./vendor-tanstack-start-client-core-DoOKV2pA.js";
+import { r as requireSupabaseAuth } from "./auth-middleware-Cn49MidW.js";
+import { c as createClient } from "./vendor-supabase-supabase-js-D1EEtG3j.js";
+import { o as objectType, s as stringType, b as booleanType, a as arrayType, n as numberType, Z as ZodIssueCode } from "./vendor-zod-BRyQdbC-.js";
+import "node:async_hooks";
+import "./vendor-h3-v2-CCobnLY5.js";
+import "./vendor-rou3-3NaGPdI8.js";
+import "./vendor-srvx-BA-baEX9.js";
+import "./vendor-tanstack-router-core-6wywV3KN.js";
+import "./vendor-tanstack-history-C4pKJmkt.js";
+import "./vendor-seroval-dJyC-Zhz.js";
+import "./vendor-seroval-plugins-Pq_U2meB.js";
+import "./vendor-cookie-es-DAoofYiI.js";
+import "node:stream/web";
+import "node:stream";
+import "./vendor-tanstack-start-storage-context-DgH9hIJT.js";
+import "./vendor-tanstack-react-router-XzqpA65A.js";
+import "./vendor-react-DvBrY0qp.js";
+import "./vendor-react-dom-yvMLPM0j.js";
+import "./vendor-isbot-CZ7WjwVs.js";
+import "./vendor-tanstack-react-query-hhHzXAK1.js";
+import "./vendor-tanstack-query-core-PwwTR5ld.js";
+import "./vendor-vercel-analytics-oP8BDp0L.js";
+import "./vendor-radix-ui-react-dropdown-menu-DVxKumY8.js";
+import "./vendor-radix-ui-primitive-B-mNdDrH.js";
+import "./vendor-radix-ui-react-compose-refs-D3qsKVk1.js";
+import "./vendor-radix-ui-react-context-BVoNDLue.js";
+import "./vendor-radix-ui-react-use-controllable-state-C9KpT6DG.js";
+import "./vendor-radix-ui-react-use-layout-effect-1LNLXAjr.js";
+import "./vendor-radix-ui-react-primitive-BeOk3UYa.js";
+import "./vendor-radix-ui-react-menu-CiTMLwjT.js";
+import "./vendor-radix-ui-react-collection-BZ2srfgU.js";
+import "./vendor-radix-ui-react-direction-Dt_WDL1t.js";
+import "./vendor-radix-ui-react-dismissable-layer-CjsuPohV.js";
+import "./vendor-radix-ui-react-use-callback-ref-BynBgohw.js";
+import "./vendor-radix-ui-react-use-escape-keydown-CcYRQ2pp.js";
+import "./vendor-radix-ui-react-focus-guards-D_6NoePE.js";
+import "./vendor-radix-ui-react-focus-scope-DEIhTJJH.js";
+import "./vendor-radix-ui-react-popper-23Ye2Vyc.js";
+import "./vendor-floating-ui-react-dom-CRG6gBpH.js";
+import "./vendor-floating-ui-dom-C-cPtgJv.js";
+import "./vendor-floating-ui-core-3tkK0THV.js";
+import "./vendor-floating-ui-utils-DmXANH-E.js";
+import "./vendor-radix-ui-react-arrow-B882lnFK.js";
+import "./vendor-radix-ui-react-use-size-D6fiKJQo.js";
+import "./vendor-radix-ui-react-portal-CZCH5uPk.js";
+import "./vendor-radix-ui-react-presence-CaAULlDU.js";
+import "./vendor-radix-ui-react-roving-focus-DES9GR8l.js";
+import "./vendor-radix-ui-react-id-DFFpgh6m.js";
+import "./vendor-aria-hidden-DPa16MWu.js";
+import "./vendor-react-remove-scroll-BNtiEvVN.js";
+import "./vendor-tslib-_8ICaZ64.js";
+import "./vendor-react-remove-scroll-bar-hLqRASRk.js";
+import "./vendor-react-style-singleton-BXjcXskB.js";
+import "./vendor-get-nonce-DiSj3EHl.js";
+import "./vendor-use-sidecar-DG1tHua4.js";
+import "./vendor-use-callback-ref-DMFDRvmi.js";
+import "./vendor-clsx-DgYk2OaC.js";
+import "./vendor-tailwind-merge-BHb_obmC.js";
+import "./vendor-lucide-react-Ddew6HYb.js";
+import "./vendor-radix-ui-react-avatar-BVgZt2Ab.js";
+import "./vendor-radix-ui-react-slot-DUhZbzoH.js";
+import "./vendor-radix-ui-react-use-is-hydrated-D_LcBPXY.js";
+import "./vendor-use-sync-external-store-rZ8vi0It.js";
+import "./vendor-class-variance-authority-0YxJPB9Y.js";
+import "./vendor-radix-ui-react-dialog-DlxMaNYK.js";
+import "./vendor-framer-motion-X4zAkX3J.js";
+import "./vendor-motion-dom-D2MTwGIG.js";
+import "./vendor-motion-utils-LJlIFN6m.js";
+import "./vendor-sonner-CqbjhsRh.js";
+import "./vendor-supabase-postgrest-js-AO-BXa7I.js";
+import "./vendor-supabase-realtime-js-BtdNgJbm.js";
+import "./vendor-supabase-phoenix-Bw3Uh2Nn.js";
+import "./vendor-supabase-storage-js-Dk_MrPYO.js";
+import "./vendor-iceberg-js-bHCkXyJn.js";
+import "./vendor-supabase-auth-js-D4xjVprw.js";
+import "./vendor-supabase-functions-js-sWy4UYn1.js";
+function createSupabaseAdminClient() {
+  const SUPABASE_URL = process.env.SUPABASE_URL;
+  const SUPABASE_SERVICE_ROLE_KEY = process.env.SUPABASE_SERVICE_ROLE_KEY;
+  if (!SUPABASE_URL || !SUPABASE_SERVICE_ROLE_KEY) {
+    const missing = [
+      ...!SUPABASE_URL ? ["SUPABASE_URL"] : [],
+      ...!SUPABASE_SERVICE_ROLE_KEY ? ["SUPABASE_SERVICE_ROLE_KEY"] : []
+    ];
+    const message = `Missing Supabase environment variable(s): ${missing.join(", ")}. Connect Supabase in Lovable Cloud.`;
+    console.error(`[Supabase] ${message}`);
+    throw new Error(message);
+  }
+  return createClient(SUPABASE_URL, SUPABASE_SERVICE_ROLE_KEY, {
+    auth: {
+      storage: void 0,
+      persistSession: false,
+      autoRefreshToken: false
+    }
+  });
+}
+let _supabaseAdmin;
+const supabaseAdmin = new Proxy({}, {
+  get(_, prop, receiver) {
+    if (!_supabaseAdmin) _supabaseAdmin = createSupabaseAdminClient();
+    return Reflect.get(_supabaseAdmin, prop, receiver);
+  }
+});
+const MASTER_ADMIN_ID = "doraexplora";
+const FETCH_TIMEOUT_MS = 12e3;
+async function getAdminRole(supabase, userId) {
+  const {
+    data
+  } = await supabase.from("user_roles").select("admin_id").eq("user_id", userId).eq("role", "admin").maybeSingle();
+  return data;
+}
+async function requireAdmin(supabase, userId) {
+  const role = await getAdminRole(supabase, userId);
+  if (!role) throw new Error("Forbidden");
+  return role.admin_id;
+}
+async function findAuthUserByEmail(email) {
+  const normalizedEmail = email.trim().toLowerCase();
+  const {
+    data,
+    error
+  } = await supabaseAdmin.auth.admin.listUsers({
+    perPage: 1e3
+  });
+  if (error) throw new Error(error.message);
+  const user = data.users.find((candidate) => candidate.email?.toLowerCase() === normalizedEmail);
+  return user ?? null;
+}
+function normalizeUrl(value) {
+  const trimmed = value.trim();
+  if (!trimmed) return trimmed;
+  if (trimmed.startsWith("//")) return `https:${trimmed}`;
+  return trimmed;
+}
+function getHostnameLabel(input) {
+  try {
+    return new URL(input).hostname.replace(/^www\./, "");
+  } catch {
+    return null;
+  }
+}
+function safeText(value) {
+  const text = value?.replace(/\s+/g, " ").trim();
+  return text ? text : null;
+}
+function firstMatch(html, patterns) {
+  for (const pattern of patterns) {
+    const match = html.match(pattern);
+    if (match?.[1]) return safeText(match[1]);
+  }
+  return null;
+}
+function extractMetaContent(html, key) {
+  const escaped = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  return firstMatch(html, [new RegExp(`<meta[^>]+property=["']${escaped}["'][^>]+content=["']([^"']+)["'][^>]*>`, "i"), new RegExp(`<meta[^>]+name=["']${escaped}["'][^>]+content=["']([^"']+)["'][^>]*>`, "i"), new RegExp(`<meta[^>]+content=["']([^"']+)["'][^>]+property=["']${escaped}["'][^>]*>`, "i"), new RegExp(`<meta[^>]+content=["']([^"']+)["'][^>]+name=["']${escaped}["'][^>]*>`, "i")]);
+}
+function extractJsonLdObjects(html) {
+  const matches = [...html.matchAll(/<script[^>]+type=["']application\/ld\+json["'][^>]*>([\s\S]*?)<\/script>/gi)];
+  const parsed = [];
+  for (const match of matches) {
+    const raw = safeText(match[1]);
+    if (!raw) continue;
+    try {
+      const json = JSON.parse(raw);
+      if (Array.isArray(json)) parsed.push(...json);
+      else parsed.push(json);
+    } catch {
+      continue;
+    }
+  }
+  return parsed;
+}
+function pickJsonLdProduct(html) {
+  const objects = extractJsonLdObjects(html);
+  for (const object of objects) {
+    if (!object || typeof object !== "object") continue;
+    const candidate = object;
+    const type = candidate["@type"];
+    if (type === "Product") return candidate;
+    if (Array.isArray(type) && type.includes("Product")) return candidate;
+  }
+  return null;
+}
+function toNumber(value) {
+  if (typeof value === "number" && Number.isFinite(value)) return value;
+  if (typeof value === "string") {
+    const parsed = Number(value.replace(/[^\d.-]/g, ""));
+    return Number.isFinite(parsed) ? parsed : null;
+  }
+  return null;
+}
+function extractProductPreview(url, html) {
+  const hostname = getHostnameLabel(url);
+  const jsonLd = pickJsonLdProduct(html);
+  const title = safeText(jsonLd?.name ?? void 0) || extractMetaContent(html, "og:title") || extractMetaContent(html, "twitter:title") || firstMatch(html, [/<title[^>]*>([\s\S]*?)<\/title>/i]) || hostname || "Imported product";
+  const description = safeText(jsonLd?.description ?? void 0) || extractMetaContent(html, "og:description") || extractMetaContent(html, "twitter:description") || extractMetaContent(html, "description");
+  const imageFromJsonLd = jsonLd?.image;
+  const image_url = (Array.isArray(imageFromJsonLd) ? safeText(imageFromJsonLd[0]) : safeText(imageFromJsonLd)) || extractMetaContent(html, "og:image") || extractMetaContent(html, "twitter:image") || extractMetaContent(html, "twitter:image:src") || "https://images.unsplash.com/photo-1558862107-d49ef2a04d72?auto=format&fit=crop&w=1200&q=80";
+  const offers = jsonLd?.offers;
+  const offer = Array.isArray(offers) ? offers[0] : offers;
+  const price = toNumber(offer?.price) ?? toNumber(extractMetaContent(html, "product:price:amount")) ?? toNumber(extractMetaContent(html, "price")) ?? 0;
+  const originalPrice = toNumber(extractMetaContent(html, "product:original_price")) ?? toNumber(extractMetaContent(html, "og:price:amount")) ?? null;
+  const currency = safeText(offer?.priceCurrency) || extractMetaContent(html, "product:price:currency") || "USD";
+  const merchant = safeText(jsonLd?.brand?.name) || safeText(jsonLd?.seller?.name) || hostname;
+  const aggregateRating = jsonLd?.aggregateRating;
+  const ratingValue = toNumber(aggregateRating?.ratingValue);
+  const ratingCount = toNumber(aggregateRating?.ratingCount) ?? toNumber(aggregateRating?.reviewCount);
+  const badges = [ratingValue ? `${ratingValue.toFixed(1)}★` : null, ratingCount ? `${Math.round(ratingCount)} reviews` : null].filter(Boolean);
+  const imported_from = hostname;
+  const notes = `Imported from ${hostname ?? "shared link"}`;
+  return {
+    title,
+    description,
+    image_url,
+    price,
+    original_price: originalPrice,
+    currency,
+    merchant,
+    product_url: url,
+    source_url: url,
+    tracking_url: url,
+    imported_from,
+    tags: hostname ? [hostname.split(".")[0]] : [],
+    badges,
+    shipping_info: null,
+    delivery_estimate: null,
+    import_notes: notes
+  };
+}
+async function fetchImportHtml(url) {
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
+  try {
+    const response = await fetch(url, {
+      headers: {
+        "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0 Safari/537.36",
+        accept: "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"
+      },
+      signal: controller.signal
+    });
+    if (!response.ok) {
+      throw new Error(`Import failed with status ${response.status}`);
+    }
+    const contentType = response.headers.get("content-type") ?? "";
+    if (!contentType.includes("text/html") && !contentType.includes("application/xhtml+xml")) {
+      throw new Error("The provided link does not look like a product page");
+    }
+    return await response.text();
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+const isAdmin_createServerFn_handler = createServerRpc({
+  id: "f56374ba3aaffab4ed8ab7e2a3691b799933caea50cc55628ceb0dfe711b588b",
+  name: "isAdmin",
+  filename: "src/lib/admin.functions.ts"
+}, (opts) => isAdmin.__executeServer(opts));
+const isAdmin = createServerFn({
+  method: "GET"
+}).middleware([requireSupabaseAuth]).handler(isAdmin_createServerFn_handler, async ({
+  context
+}) => {
+  const {
+    supabase,
+    userId
+  } = context;
+  const role = await getAdminRole(supabase, userId);
+  return {
+    admin: !!role,
+    admin_id: role?.admin_id ?? null,
+    is_master: role?.admin_id === MASTER_ADMIN_ID
+  };
+});
+const getAdminBootstrapStatus_createServerFn_handler = createServerRpc({
+  id: "3ce88ecd9b40619039a92eb9befb2a1baa534430c56c7c035dc6cc7fb6ea3320",
+  name: "getAdminBootstrapStatus",
+  filename: "src/lib/admin.functions.ts"
+}, (opts) => getAdminBootstrapStatus.__executeServer(opts));
+const getAdminBootstrapStatus = createServerFn({
+  method: "GET"
+}).handler(getAdminBootstrapStatus_createServerFn_handler, async () => {
+  const {
+    count,
+    error
+  } = await supabaseAdmin.from("user_roles").select("*", {
+    count: "exact",
+    head: true
+  }).eq("role", "admin");
+  if (error) throw new Error(error.message);
+  return {
+    needs_bootstrap: (count ?? 0) === 0
+  };
+});
+const bootstrapMasterAdmin_createServerFn_handler = createServerRpc({
+  id: "f228903e5a9f497053d1e0541c339d13437987d304e8fca9781a3a4b7021da29",
+  name: "bootstrapMasterAdmin",
+  filename: "src/lib/admin.functions.ts"
+}, (opts) => bootstrapMasterAdmin.__executeServer(opts));
+const bootstrapMasterAdmin = createServerFn({
+  method: "POST"
+}).inputValidator((d) => objectType({
+  email: stringType().email().max(255),
+  password: stringType().min(8).max(128)
+}).parse(d)).handler(bootstrapMasterAdmin_createServerFn_handler, async ({
+  data
+}) => {
+  const {
+    count,
+    error: countError
+  } = await supabaseAdmin.from("user_roles").select("*", {
+    count: "exact",
+    head: true
+  }).eq("role", "admin");
+  if (countError) throw new Error(countError.message);
+  if ((count ?? 0) > 0) {
+    throw new Error("Master Admin is already set up.");
+  }
+  const existingUser = await findAuthUserByEmail(data.email);
+  let userId = existingUser?.id;
+  let createdUser = false;
+  if (!userId) {
+    const {
+      data: created,
+      error: createError
+    } = await supabaseAdmin.auth.admin.createUser({
+      email: data.email,
+      password: data.password,
+      email_confirm: true
+    });
+    if (createError || !created.user) {
+      throw new Error(createError?.message ?? "Failed to create master admin account");
+    }
+    userId = created.user.id;
+    createdUser = true;
+  }
+  const {
+    error: roleError
+  } = await supabaseAdmin.from("user_roles").insert({
+    user_id: userId,
+    role: "admin",
+    admin_id: MASTER_ADMIN_ID
+  });
+  if (roleError) {
+    if (createdUser) {
+      await supabaseAdmin.auth.admin.deleteUser(userId);
+    }
+    throw new Error(roleError.message);
+  }
+  return {
+    ok: true,
+    user_id: userId,
+    admin_id: MASTER_ADMIN_ID,
+    created_user: createdUser
+  };
+});
+const importProductFromLink_createServerFn_handler = createServerRpc({
+  id: "89e33d850036f54ba22d80a5c340288b7904337506fd94deacc6372a910c3cac",
+  name: "importProductFromLink",
+  filename: "src/lib/admin.functions.ts"
+}, (opts) => importProductFromLink.__executeServer(opts));
+const importProductFromLink = createServerFn({
+  method: "POST"
+}).middleware([requireSupabaseAuth]).inputValidator((d) => objectType({
+  url: stringType().url().max(2e3)
+}).parse(d)).handler(importProductFromLink_createServerFn_handler, async ({
+  data,
+  context
+}) => {
+  await requireAdmin(context.supabase, context.userId);
+  const url = normalizeUrl(data.url);
+  const html = await fetchImportHtml(url);
+  return extractProductPreview(url, html);
+});
+const upsertProduct_createServerFn_handler = createServerRpc({
+  id: "87057b699c92d5e9cc4f021e767a44009606525481c8a27886c5fc0375dc6625",
+  name: "upsertProduct",
+  filename: "src/lib/admin.functions.ts"
+}, (opts) => upsertProduct.__executeServer(opts));
+const upsertProduct = createServerFn({
+  method: "POST"
+}).middleware([requireSupabaseAuth]).inputValidator((d) => productSchema.parse(d)).handler(upsertProduct_createServerFn_handler, async ({
+  data,
+  context
+}) => {
+  await requireAdmin(context.supabase, context.userId);
+  const product_url = normalizeUrl(data.product_url ?? data.source_url ?? data.tracking_url ?? data.affiliate_url ?? "");
+  const source_url = normalizeUrl(data.source_url ?? data.product_url ?? data.affiliate_url ?? product_url);
+  const tracking_url = normalizeUrl(data.tracking_url ?? data.affiliate_url ?? product_url);
+  const affiliate_url = normalizeUrl(data.affiliate_url ?? tracking_url ?? product_url);
+  const payload = {
+    ...data,
+    product_url,
+    source_url,
+    tracking_url,
+    affiliate_url,
+    imported_from: data.imported_from ?? getHostnameLabel(source_url ?? product_url),
+    import_notes: data.import_notes ?? null
+  };
+  if (payload.id) {
+    const {
+      error: error2
+    } = await context.supabase.from("products").update(payload).eq("id", payload.id);
+    if (error2) throw new Error(error2.message);
+    return {
+      id: payload.id
+    };
+  }
+  const {
+    data: ins,
+    error
+  } = await context.supabase.from("products").insert(payload).select("id").single();
+  if (error) throw new Error(error.message);
+  return {
+    id: ins.id
+  };
+});
+const deleteProduct_createServerFn_handler = createServerRpc({
+  id: "d58e9647e4364d7098cb0d840b98a827719a64c5b316ad80080e28b97fb3f1cb",
+  name: "deleteProduct",
+  filename: "src/lib/admin.functions.ts"
+}, (opts) => deleteProduct.__executeServer(opts));
+const deleteProduct = createServerFn({
+  method: "POST"
+}).middleware([requireSupabaseAuth]).inputValidator((d) => objectType({
+  id: stringType().uuid()
+}).parse(d)).handler(deleteProduct_createServerFn_handler, async ({
+  data,
+  context
+}) => {
+  await requireAdmin(context.supabase, context.userId);
+  const {
+    error
+  } = await context.supabase.from("products").delete().eq("id", data.id);
+  if (error) throw new Error(error.message);
+  return {
+    ok: true
+  };
+});
+const listAllProducts_createServerFn_handler = createServerRpc({
+  id: "8db3a7d2924568f7f51e14d9d73d2a96f312b0d2adb7276fdd08fe90dcf12de3",
+  name: "listAllProducts",
+  filename: "src/lib/admin.functions.ts"
+}, (opts) => listAllProducts.__executeServer(opts));
+const listAllProducts = createServerFn({
+  method: "GET"
+}).middleware([requireSupabaseAuth]).handler(listAllProducts_createServerFn_handler, async ({
+  context
+}) => {
+  await requireAdmin(context.supabase, context.userId);
+  const {
+    data
+  } = await context.supabase.from("products").select("*").order("created_at", {
+    ascending: false
+  });
+  return data ?? [];
+});
+const productSchema = objectType({
+  id: stringType().uuid().optional(),
+  title: stringType().min(1).max(200),
+  description: stringType().max(2e3).optional().nullable(),
+  image_url: stringType().url().max(2e3),
+  price: numberType().min(0).max(1e5),
+  original_price: numberType().min(0).max(1e5).optional().nullable(),
+  currency: stringType().min(1).max(12).default("USD"),
+  affiliate_url: stringType().url().max(2e3).optional().nullable(),
+  product_url: stringType().url().max(2e3).optional().nullable(),
+  tracking_url: stringType().url().max(2e3).optional().nullable(),
+  source_url: stringType().url().max(2e3).optional().nullable(),
+  imported_from: stringType().max(120).optional().nullable(),
+  import_notes: stringType().max(500).optional().nullable(),
+  merchant: stringType().max(100).optional().nullable(),
+  category_id: stringType().uuid().optional().nullable(),
+  tags: arrayType(stringType().max(40)).max(20).default([]),
+  badges: arrayType(stringType().max(40)).max(10).default([]),
+  is_trending: booleanType().default(false),
+  is_hot: booleanType().default(false),
+  is_featured: booleanType().default(false),
+  shipping_info: stringType().max(120).optional().nullable(),
+  delivery_estimate: stringType().max(60).optional().nullable()
+}).superRefine((value, ctx) => {
+  if (!value.product_url && !value.source_url && !value.tracking_url && !value.affiliate_url) {
+    ctx.addIssue({
+      code: ZodIssueCode.custom,
+      path: ["product_url"],
+      message: "Provide a product URL, source URL, tracking URL, or affiliate URL"
+    });
+  }
+});
+const grantSelfAdmin_createServerFn_handler = createServerRpc({
+  id: "c579e6cf81462f6a2bea1160758f9416a190d3246ad7147937aa785904bea01e",
+  name: "grantSelfAdmin",
+  filename: "src/lib/admin.functions.ts"
+}, (opts) => grantSelfAdmin.__executeServer(opts));
+const grantSelfAdmin = createServerFn({
+  method: "POST"
+}).middleware([requireSupabaseAuth]).handler(grantSelfAdmin_createServerFn_handler, async ({
+  context
+}) => {
+  const {
+    supabase,
+    userId
+  } = context;
+  const {
+    count,
+    error
+  } = await supabase.from("user_roles").select("*", {
+    count: "exact",
+    head: true
+  }).eq("role", "admin");
+  if (error) throw new Error(error.message);
+  if ((count ?? 0) > 0) throw new Error("Admin already exists. Ask the Master Admin to grant you access.");
+  const {
+    error: insertError
+  } = await supabaseAdmin.from("user_roles").insert({
+    user_id: userId,
+    role: "admin",
+    admin_id: MASTER_ADMIN_ID
+  });
+  if (insertError) throw new Error(insertError.message);
+  return {
+    ok: true,
+    admin_id: MASTER_ADMIN_ID
+  };
+});
+const createAdmin_createServerFn_handler = createServerRpc({
+  id: "36d868d9acaba43916ce260adef4026deeafe7052311a1a61a689052f8d2a6a5",
+  name: "createAdmin",
+  filename: "src/lib/admin.functions.ts"
+}, (opts) => createAdmin.__executeServer(opts));
+const createAdmin = createServerFn({
+  method: "POST"
+}).middleware([requireSupabaseAuth]).inputValidator((d) => objectType({
+  email: stringType().email().max(255),
+  password: stringType().min(8).max(128),
+  admin_id: stringType().min(3).max(40).regex(/^[a-zA-Z0-9_-]+$/, "Admin ID may only contain letters, numbers, _ and -")
+}).parse(d)).handler(createAdmin_createServerFn_handler, async ({
+  data,
+  context
+}) => {
+  const callerAdminId = await requireAdmin(context.supabase, context.userId);
+  if (callerAdminId !== MASTER_ADMIN_ID) throw new Error("Only the Master Admin can create new admins");
+  if (data.admin_id === MASTER_ADMIN_ID) throw new Error("That admin ID is reserved");
+  const {
+    data: existing
+  } = await supabaseAdmin.from("user_roles").select("id").eq("admin_id", data.admin_id).maybeSingle();
+  if (existing) throw new Error("Admin ID is already taken");
+  const {
+    data: created,
+    error: createErr
+  } = await supabaseAdmin.auth.admin.createUser({
+    email: data.email,
+    password: data.password,
+    email_confirm: true
+  });
+  if (createErr || !created.user) throw new Error(createErr?.message ?? "Failed to create user");
+  const newUserId = created.user.id;
+  const {
+    error: roleErr
+  } = await supabaseAdmin.from("user_roles").insert({
+    user_id: newUserId,
+    role: "admin",
+    admin_id: data.admin_id
+  });
+  if (roleErr) {
+    await supabaseAdmin.auth.admin.deleteUser(newUserId);
+    throw new Error(roleErr.message);
+  }
+  return {
+    ok: true,
+    user_id: newUserId,
+    admin_id: data.admin_id
+  };
+});
+const listAdmins_createServerFn_handler = createServerRpc({
+  id: "1f15f91371ebbf2f3cadc34ffa88e17615477c189c7d20a14989f46b3a531730",
+  name: "listAdmins",
+  filename: "src/lib/admin.functions.ts"
+}, (opts) => listAdmins.__executeServer(opts));
+const listAdmins = createServerFn({
+  method: "GET"
+}).middleware([requireSupabaseAuth]).handler(listAdmins_createServerFn_handler, async ({
+  context
+}) => {
+  await requireAdmin(context.supabase, context.userId);
+  const {
+    data: roles
+  } = await supabaseAdmin.from("user_roles").select("user_id, admin_id, created_at").eq("role", "admin").order("created_at", {
+    ascending: true
+  });
+  if (!roles?.length) return [];
+  const {
+    data: users
+  } = await supabaseAdmin.auth.admin.listUsers({
+    perPage: 1e3
+  });
+  const emailById = new Map(users.users.map((u) => [u.id, u.email]));
+  return roles.map((r) => ({
+    user_id: r.user_id,
+    admin_id: r.admin_id,
+    email: emailById.get(r.user_id) ?? null,
+    is_master: r.admin_id === MASTER_ADMIN_ID,
+    created_at: r.created_at
+  }));
+});
+const verifyAdminId_createServerFn_handler = createServerRpc({
+  id: "911c12f56db314b9eea0d9463dda510d0464e04b72b14405d69546cc93ebeb33",
+  name: "verifyAdminId",
+  filename: "src/lib/admin.functions.ts"
+}, (opts) => verifyAdminId.__executeServer(opts));
+const verifyAdminId = createServerFn({
+  method: "POST"
+}).middleware([requireSupabaseAuth]).inputValidator((d) => objectType({
+  admin_id: stringType().min(1).max(40)
+}).parse(d)).handler(verifyAdminId_createServerFn_handler, async ({
+  data,
+  context
+}) => {
+  const {
+    supabase,
+    userId
+  } = context;
+  const row = await getAdminRole(supabase, userId);
+  if (!row || row.admin_id !== data.admin_id) {
+    throw new Error("Invalid admin credentials");
+  }
+  return {
+    ok: true,
+    is_master: row.admin_id === MASTER_ADMIN_ID
+  };
+});
+export {
+  bootstrapMasterAdmin_createServerFn_handler,
+  createAdmin_createServerFn_handler,
+  deleteProduct_createServerFn_handler,
+  getAdminBootstrapStatus_createServerFn_handler,
+  grantSelfAdmin_createServerFn_handler,
+  importProductFromLink_createServerFn_handler,
+  isAdmin_createServerFn_handler,
+  listAdmins_createServerFn_handler,
+  listAllProducts_createServerFn_handler,
+  upsertProduct_createServerFn_handler,
+  verifyAdminId_createServerFn_handler
+};