+ {@render children()}
+
+
+
diff --git a/hub/admin-web/src/lib/components/ErrorBanner.svelte b/hub/admin-web/src/lib/components/ErrorBanner.svelte
new file mode 100644
index 0000000..b33eecd
--- /dev/null
+++ b/hub/admin-web/src/lib/components/ErrorBanner.svelte
@@ -0,0 +1,26 @@
+
+
+
+
+
+ {title}
+ {#if description} +{description}
+ {/if} + {#if action} +
+ {@render action()}
+
+ {/if}
+
+
+
diff --git a/hub/admin-web/src/lib/components/FolderNode.svelte b/hub/admin-web/src/lib/components/FolderNode.svelte
new file mode 100644
index 0000000..b3b5fc1
--- /dev/null
+++ b/hub/admin-web/src/lib/components/FolderNode.svelte
@@ -0,0 +1,48 @@
+
+
+
+
+ {#if onretry}
+
+ {/if}
+请求失败
+{message}
+
+
+ {#if open}
+
diff --git a/hub/admin-web/src/lib/components/FolderTree.svelte b/hub/admin-web/src/lib/components/FolderTree.svelte
new file mode 100644
index 0000000..d56d3ed
--- /dev/null
+++ b/hub/admin-web/src/lib/components/FolderTree.svelte
@@ -0,0 +1,49 @@
+
+
+
+
+ {/if}
+
+ {#each childProjects as p (p.id)}
+
+
+
diff --git a/hub/admin-web/src/lib/components/Icon.svelte b/hub/admin-web/src/lib/components/Icon.svelte
new file mode 100644
index 0000000..9241400
--- /dev/null
+++ b/hub/admin-web/src/lib/components/Icon.svelte
@@ -0,0 +1,115 @@
+
+
+{#if name === 'overview'}
+
+{:else if name === 'members'}
+
+{:else if name === 'teams'}
+
+{:else if name === 'projects'}
+
+{:else if name === 'models'}
+
+{:else if name === 'roles'}
+
+{:else if name === 'provider'}
+
+{:else if name === 'menu'}
+
+{:else if name === 'logout'}
+
+{:else if name === 'org'}
+
+{:else if name === 'chevron'}
+
+{:else if name === 'folder'}
+
+{:else if name === 'file'}
+
+{:else if name === 'check'}
+
+{/if}
diff --git a/hub/admin-web/src/lib/components/LoadingState.svelte b/hub/admin-web/src/lib/components/LoadingState.svelte
new file mode 100644
index 0000000..7f0d2f7
--- /dev/null
+++ b/hub/admin-web/src/lib/components/LoadingState.svelte
@@ -0,0 +1,15 @@
+
+
+
+
+
diff --git a/hub/admin-web/src/lib/components/Modal.svelte b/hub/admin-web/src/lib/components/Modal.svelte
new file mode 100644
index 0000000..a8066ac
--- /dev/null
+++ b/hub/admin-web/src/lib/components/Modal.svelte
@@ -0,0 +1,44 @@
+
+
+{#if open}
+ {label}
+
+
+{/if}
diff --git a/hub/admin-web/src/lib/components/PageHeader.svelte b/hub/admin-web/src/lib/components/PageHeader.svelte
new file mode 100644
index 0000000..b8ea38e
--- /dev/null
+++ b/hub/admin-web/src/lib/components/PageHeader.svelte
@@ -0,0 +1,27 @@
+
+
+
diff --git a/hub/admin-web/src/lib/components/RoleCard.svelte b/hub/admin-web/src/lib/components/RoleCard.svelte
new file mode 100644
index 0000000..8667bf9
--- /dev/null
+++ b/hub/admin-web/src/lib/components/RoleCard.svelte
@@ -0,0 +1,148 @@
+
+
+
+
+
+
+ {@render children()}
+ {title}
+ +
+
diff --git a/hub/admin-web/src/lib/components/StatCard.svelte b/hub/admin-web/src/lib/components/StatCard.svelte
new file mode 100644
index 0000000..7674cfa
--- /dev/null
+++ b/hub/admin-web/src/lib/components/StatCard.svelte
@@ -0,0 +1,19 @@
+
+
+
+ /{roleId || r.roleId}
+ {label || r.label}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 工具白名单
+
+
+
+
+ {#each Object.entries(groupedTools) as [group, tools]}
+
+
+
+ {/each}
+ {group}
+
+ {#each tools as t}
+
+ {/each}
+
+
+
+
+
+
+
+ 更新于 {fmtDate(r.updatedAt)}
+
+
+
+
+
+
diff --git a/hub/admin-web/src/lib/components/ToastHost.svelte b/hub/admin-web/src/lib/components/ToastHost.svelte
new file mode 100644
index 0000000..a9d0ff8
--- /dev/null
+++ b/hub/admin-web/src/lib/components/ToastHost.svelte
@@ -0,0 +1,24 @@
+
+
+{label}
+ {value}
+ {#if hint}
+ {hint}
+ {/if}
+
+ {#each $toasts as t (t.id)}
+
diff --git a/hub/admin-web/src/lib/constants.ts b/hub/admin-web/src/lib/constants.ts
new file mode 100644
index 0000000..e17e489
--- /dev/null
+++ b/hub/admin-web/src/lib/constants.ts
@@ -0,0 +1,22 @@
+export interface ToolOption {
+ id: string;
+ label: string;
+ group: string;
+}
+
+export const TOOL_OPTIONS: ToolOption[] = [
+ { id: 'read_file', label: '读取文件 (Read)', group: '文件' },
+ { id: 'write_file', label: '写入文件 (Write)', group: '文件' },
+ { id: 'list_files', label: '列目录 (Glob)', group: '文件' },
+ { id: 'search_files', label: '搜索 (Grep)', group: '文件' },
+ { id: 'bash', label: 'Bash 命令', group: 'Shell' },
+ { id: 'cph_check', label: 'cph check', group: 'CPH' },
+ { id: 'cph_build', label: 'cph build', group: 'CPH' },
+ { id: 'send_file', label: '发送文件 (飞书)', group: '飞书 MCP' },
+ { id: 'feishu_read_context', label: '读飞书上下文', group: '飞书 MCP' },
+ { id: 'feishu_download_resource', label: '下载飞书资源', group: '飞书 MCP' },
+ { id: 'request_approval', label: '请求审批', group: '飞书 MCP' }
+];
+
+export const ORG_ROLES = ['OWNER', 'ADMIN', 'MEMBER'] as const;
+export const PERMISSION_ROLES = ['READ', 'EDIT', 'MANAGE'] as const;
diff --git a/hub/admin-web/src/lib/format.ts b/hub/admin-web/src/lib/format.ts
new file mode 100644
index 0000000..2c6ff9c
--- /dev/null
+++ b/hub/admin-web/src/lib/format.ts
@@ -0,0 +1,28 @@
+export function fmtDate(iso: string): string {
+ if (!iso) return '—';
+ const d = new Date(iso);
+ if (Number.isNaN(d.getTime())) return iso;
+ return d.toLocaleString(undefined, {
+ year: 'numeric',
+ month: 'short',
+ day: '2-digit',
+ hour: '2-digit',
+ minute: '2-digit'
+ });
+}
+
+export function fmtDateOnly(iso: string): string {
+ if (!iso) return '—';
+ const d = new Date(iso);
+ if (Number.isNaN(d.getTime())) return iso;
+ return d.toLocaleDateString(undefined, { year: 'numeric', month: 'short', day: '2-digit' });
+}
+
+export function fmtCost(usd: number | null): string {
+ if (usd === null) return '—';
+ return `$${Number(usd).toFixed(4)}`;
+}
+
+export function fmtNum(n: number): string {
+ return n.toLocaleString();
+}
diff --git a/hub/admin-web/src/lib/index.ts b/hub/admin-web/src/lib/index.ts
new file mode 100644
index 0000000..856f2b6
--- /dev/null
+++ b/hub/admin-web/src/lib/index.ts
@@ -0,0 +1 @@
+// place files you want to import through the `$lib` alias in this folder.
diff --git a/hub/admin-web/src/lib/session.ts b/hub/admin-web/src/lib/session.ts
new file mode 100644
index 0000000..8110a84
--- /dev/null
+++ b/hub/admin-web/src/lib/session.ts
@@ -0,0 +1,43 @@
+import { writable } from 'svelte/store';
+import { api, type MeResponse } from './api';
+
+interface SessionState {
+ loading: boolean;
+ me: MeResponse | null;
+ error: string | null;
+}
+
+export const session = writable
+
+ {/each}
+{t.message}
+ +
+
+{:else if $session.error}
+
+
+
+ {redirecting ? '正在进入组织…' : '正在加载会话…'}
+
+
+{:else if !$session.me}
+
+
+ !
+ 无法连接到后端
+{$session.error}
+ +
+
+{:else if currentOrg() && isAdmin(currentOrg()!)}
+ {@const org = currentOrg()!}
+ {@const me = $session.me!}
+
+
+
+ CPH
+
+ Curriculum Project Hub
+登录以管理组织、项目、团队与模型供应。
+ +
+ {#if mobileNavOpen}
+
+ {/if}
+
+
+
+
+{:else if currentOrg() && !isAdmin(currentOrg()!)}
+ {@const denied = currentOrg()!}
+
+
+
+
+
+
+
+
+
+
+
+ {org.name}
+ /
+ {pageTitle()}
+
+
+
+{:else if memberships().length > 0}
+ {@const denied = pickHomeOrg()!}
+
+
+ 无权访问管理后台
++ 组织 {denied.name}（/{denied.slug}）中你的角色是 + {denied.role}， + 需要 OWNER 或 ADMIN。 +
+ {#if memberships().length > 1} + + + {/if} + +
+
+{:else}
+
+ {#if adminOrgs().length === 0}
+
+ 无权访问管理后台
++ 你加入了 {denied.name}，角色是 + {denied.role}。仅 OWNER/ADMIN 可进入后台。 +
+ {:else} +正在跳转…
++ 即将进入 {adminOrgs()[0].name} + （/{adminOrgs()[0].slug}）。 +
+ 立即进入 + {/if} + +
+
+{/if}
diff --git a/hub/admin-web/src/routes/+page.svelte b/hub/admin-web/src/routes/+page.svelte
new file mode 100644
index 0000000..c60350a
--- /dev/null
+++ b/hub/admin-web/src/routes/+page.svelte
@@ -0,0 +1,43 @@
+
+
+
+
+ 未加入组织
+
+ 飞书账号已登录，但 /api/me 的
+ organizations 为空。
+
+ open_id：
+ {$session.me!.user.feishuOpenId}
+
+
diff --git a/hub/admin-web/src/routes/admin/org/[slug]/+page.svelte b/hub/admin-web/src/routes/admin/org/[slug]/+page.svelte
new file mode 100644
index 0000000..907276e
--- /dev/null
+++ b/hub/admin-web/src/routes/admin/org/[slug]/+page.svelte
@@ -0,0 +1,158 @@
+
+
+{#if loading}
+
+
+
+正在进入工作台…
+
+
+
+
+
+
+ 组织信息
+-
+
- Slug +
- /{org.slug} +
- 状态 +
- {org.status} +
- 你的角色 +
- {org.role} +
+
+
+
+
+
+
+
+ 项目自助创建策略
++ 开启后，普通老师可在飞书群自助创建项目；关闭后仅 OWNER / ADMIN 可建。 +
+ +
+
+
+
+
+ 用量概览
+全组织 Agent 运行汇总
+
+
+
+
+
+{:else}
+
+
+ {#if usage.projects.length === 0}
+ 按项目用量
+
+
+ {:else}
+ 暂无项目用量数据
+
+
+
+
+
+ {/if}
+ | 项目 | +运行 | +in / out tokens | +成本 | +
|---|---|---|---|
| {p.projectName} | +{fmtNum(p.runCount)} | +{fmtNum(p.inputTokens)} / {fmtNum(p.outputTokens)} | +{fmtCost(p.costUsd)} | +
+
+{/if}
diff --git a/hub/admin-web/src/routes/admin/org/[slug]/members/+page.svelte b/hub/admin-web/src/routes/admin/org/[slug]/members/+page.svelte
new file mode 100644
index 0000000..c79861d
--- /dev/null
+++ b/hub/admin-web/src/routes/admin/org/[slug]/members/+page.svelte
@@ -0,0 +1,168 @@
+
+
+组织数据不可用
+
+
+
+ 添加成员
+
+
+
+
+
+
+
+
+{/if}
diff --git a/hub/admin-web/src/routes/admin/org/[slug]/models/+page.svelte b/hub/admin-web/src/routes/admin/org/[slug]/models/+page.svelte
new file mode 100644
index 0000000..f14fb1d
--- /dev/null
+++ b/hub/admin-web/src/routes/admin/org/[slug]/models/+page.svelte
@@ -0,0 +1,170 @@
+
+
+
+
+ {#if members.length === 0}
+ 成员列表
+ {members.length} +
+
+
+
+
+ {/if}
+ | 用户 | +open_id | +组织角色 | +加入时间 | ++ |
|---|---|---|---|---|
|
+
+ {#if m.avatarUrl}
+
+
+ {m.displayName.slice(0, 1)}
+
+ {/if}
+ {m.displayName}
+ |
+ {m.feishuOpenId} | ++ + | +{fmtDate(m.createdAt)} | ++ + | +
+ 组织角色控制后台访问；项目级权限由「项目」页团队授权（READ / EDIT / MANAGE）决定。 +
+
+
+
+ 添加模型
+
+
+
+
+
+
+
+
+{/if}
diff --git a/hub/admin-web/src/routes/admin/org/[slug]/projects/+page.svelte b/hub/admin-web/src/routes/admin/org/[slug]/projects/+page.svelte
new file mode 100644
index 0000000..0e22592
--- /dev/null
+++ b/hub/admin-web/src/routes/admin/org/[slug]/projects/+page.svelte
@@ -0,0 +1,158 @@
+
+
+
+
+ {#if models.length === 0}
+ 已启用模型
+ {models.length} +
+
+
+
+
+ {/if}
+ | label | +modelId | +工具能力 | +排序 | +创建 | ++ |
|---|---|---|---|---|---|
| + save(m, { label: (e.target as HTMLInputElement).value })} + /> + | ++ save(m, { modelId: (e.target as HTMLInputElement).value })} + /> + | ++ save(m, { toolCapable: (e.target as HTMLInputElement).checked })} + /> + | ++ save(m, { sortKey: (e.target as HTMLInputElement).value })} + /> + | +{fmtDateOnly(m.createdAt)} | ++ + | +
+ {#if data.projects.filter((p) => !p.folderId).length === 0 && data.folders.filter((f) => !f.parentId).length === 0}
+
+{/if}
+
+
+
+
+
+
+
+
+
+
+
+ ← 返回项目列表
+
+
+
+ {@const detail = proj}
+
+
+
+ -
+
- Workspace +
- {proj.workspaceDir} +
- 创建者 +
- + {proj.createdBy ? `${proj.createdBy.displayName} (${proj.createdBy.feishuOpenId})` : '—'} + +
- 文件夹 +
- {proj.folder ? proj.folder.name : '（根）'} +
- 飞书群 +
- + {#if proj.binding} + 已绑定 + chat {proj.binding.chatId} + · {fmtDate(proj.binding.createdAt)} + {:else} + 未绑定 + {/if} + +
- 创建时间 +
- {fmtDate(proj.createdAt)} +
+
+
+
+
+
+
+
+
+
+
+ 移动到文件夹
+
+
+
+ {/if}
+
+
+
+
+ {/if}
+
+
+ 团队授权
+通过团队授权项目访问。一项目可授多团队，一团队可访问多项目。
+ +
+
+
+
+
+
+ {#if access.length === 0}
+ | 团队 | +slug | +角色 | ++ |
|---|---|---|---|
| {g.teamName} | +/{g.teamSlug} | +{g.role} | ++ + | +
+
+
+
+ {/if}
+
+{/if}
diff --git a/hub/admin-web/src/routes/admin/org/[slug]/provider/+page.svelte b/hub/admin-web/src/routes/admin/org/[slug]/provider/+page.svelte
new file mode 100644
index 0000000..15830ec
--- /dev/null
+++ b/hub/admin-web/src/routes/admin/org/[slug]/provider/+page.svelte
@@ -0,0 +1,145 @@
+
+
+
+
+ {#if sessions.length === 0}
+ Agent 会话
+| provider / role | +model | +运行 | +更新 | +
|---|---|---|---|
| {s.provider} / {s.roleId} | +{s.model} | +{s.runCount} | +{fmtDate(s.updatedAt)} | +
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ {#if mode === 'BYOK'}
+
+
+
+
+
+
+
+ {#if conn.hasAuthToken}
+
+ {/if}
+ 已存储密钥；输入新值替换，留空不变。
+ {/if} +
+ {conn.updatedAt ? '更新于 ' + fmtDate(conn.updatedAt) : '尚未配置'}
+
+
+
+
+
+{/if}
diff --git a/hub/admin-web/src/routes/admin/org/[slug]/roles/+page.svelte b/hub/admin-web/src/routes/admin/org/[slug]/roles/+page.svelte
new file mode 100644
index 0000000..2c07a4e
--- /dev/null
+++ b/hub/admin-web/src/routes/admin/org/[slug]/roles/+page.svelte
@@ -0,0 +1,106 @@
+
+
+运行时解析
+-
+
- •BYOK：agent 使用本连接 baseUrl + authToken。 +
- + • + + PLATFORM_MANAGED / 未配置：回退进程环境变量（ANTHROPIC_BASE_URL / ANTHROPIC_AUTH_TOKEN）。真正 per-org + 平台托管凭据是后续 secret-control-plane（OPEN）。 + + +
- + • + 模型与角色在对应页面管理；空时回退环境默认。 + +
+
+
+ {#if roles.length === 0}
+ 新建角色
+
+
+
+
+
+
+
+ {:else}
+
+ {#each roles as r (r.id)}
+ remove(r)}
+ onupdated={(updated: OrgRoleRow) => {
+ roles = roles.map((x) => (x.id === r.id ? updated : x));
+ }}
+ />
+ {/each}
+
+ {/if}
+{/if}
diff --git a/hub/admin-web/src/routes/admin/org/[slug]/teams/+page.svelte b/hub/admin-web/src/routes/admin/org/[slug]/teams/+page.svelte
new file mode 100644
index 0000000..13dedd6
--- /dev/null
+++ b/hub/admin-web/src/routes/admin/org/[slug]/teams/+page.svelte
@@ -0,0 +1,215 @@
+
+
+
+
+
+ {#if teams.length === 0}
+ 新建团队
+
+
+
+
+
+
+
+
+ {:else}
+
+ {#each teams as t (t.id)}
+
+ {/if}
+
+
+ {/each}
+
+ {t.name}
+ /{t.slug}
+ {t.memberCount} 成员
+
+ {#if t.description}
+
+
+
+
+ {t.description}
+ {/if} +创建于 {fmtDate(t.createdAt)}
+ + {#if expandedId === t.id} +
+ {#if loadingMembers}
+
+
+
+ {/if}
+ {/if}
+
+ {/if}
+ 加载中…
+ {:else} +
+ {
+ if (e.key === 'Enter') addMember(t);
+ }}
+ />
+
+
+ {#if teamMembers.length === 0}
+ 团队暂无成员
+ {:else} +| 成员 | +open_id | +加入时间 | ++ |
|---|---|---|---|
| {m.displayName} | +{m.feishuOpenId} | +{fmtDate(m.createdAt)} | ++ + | +
归档团队会同步撤销其活跃的项目授权。
+{/if} diff --git a/hub/admin-web/src/routes/app.css b/hub/admin-web/src/routes/app.css new file mode 100644 index 0000000..2a31663 --- /dev/null +++ b/hub/admin-web/src/routes/app.css @@ -0,0 +1,431 @@ +@import 'tailwindcss'; + +@import '@skeletonlabs/skeleton'; +@import '@skeletonlabs/skeleton/themes/hamlindigo'; + +@source './**/*.{html,js,svelte,ts}'; +@source '../lib/**/*.{html,js,svelte,ts}'; + +@theme { + --font-sans: 'Inter', 'Noto Sans SC', ui-sans-serif, system-ui, -apple-system, 'Segoe UI', sans-serif; + --font-mono: 'JetBrains Mono', ui-monospace, 'SF Mono', Menlo, Consolas, monospace; +} + +@layer base { + html { + height: 100%; + -webkit-font-smoothing: antialiased; + -moz-osx-font-smoothing: grayscale; + text-rendering: optimizeLegibility; + } + + body { + min-height: 100%; + font-family: var(--font-sans); + background: var(--color-surface-50); + color: var(--color-surface-900); + } + + ::selection { + background: color-mix(in oklab, var(--color-primary-500) 28%, transparent); + } + + :focus-visible { + outline: 2px solid var(--color-primary-500); + outline-offset: 2px; + } + + table.data-table { + width: 100%; + border-collapse: collapse; + font-size: 0.875rem; + } + + table.data-table thead th { + padding: 0.625rem 0.75rem; + text-align: left; + font-weight: 500; + color: var(--color-surface-500); + border-bottom: 1px solid var(--color-surface-200); + white-space: nowrap; + } + + table.data-table tbody td { + padding: 0.75rem; + border-bottom: 1px solid var(--color-surface-100); + vertical-align: middle; + } + + table.data-table tbody tr:hover td { + background: color-mix(in oklab, var(--color-surface-100) 70%, transparent); + } + + table.data-table tbody tr:last-child td { + border-bottom: none; + } +} + +@layer components { + .saas-card { + border-radius: 0.75rem; + border: 1px solid var(--color-surface-200); + background: var(--color-surface-50); + box-shadow: 0 1px 2px rgb(15 23 42 / 0.04); + } + + .saas-card-pad { + border-radius: 0.75rem; + border: 1px solid var(--color-surface-200); + background: var(--color-surface-50); + box-shadow: 0 1px 2px rgb(15 23 42 / 0.04); + padding: 1.25rem; + } + + .saas-page-title { + font-size: 1.5rem; + line-height: 2rem; + font-weight: 600; + letter-spacing: -0.02em; + color: var(--color-surface-900); + } + + .saas-section-title { + font-size: 1rem; + font-weight: 600; + color: var(--color-surface-900); + } + + .saas-muted { + font-size: 0.875rem; + color: var(--color-surface-500); + } + + .saas-label { + display: block; + margin-bottom: 0.375rem; + font-size: 0.875rem; + font-weight: 500; + color: var(--color-surface-700); + } + + .saas-help { + margin-top: 0.375rem; + font-size: 0.75rem; + color: var(--color-surface-400); + } + + .saas-toolbar { + display: flex; + flex-wrap: wrap; + align-items: center; + gap: 0.75rem; + margin-bottom: 1.5rem; + } + + .saas-stat { + border-radius: 0.75rem; + border: 1px solid var(--color-surface-200); + background: var(--color-surface-50); + padding: 1rem; + } + + .saas-stat-label { + font-size: 0.75rem; + font-weight: 500; + letter-spacing: 0.04em; + text-transform: uppercase; + color: var(--color-surface-500); + } + + .saas-stat-value { + margin-top: 0.25rem; + font-size: 1.5rem; + line-height: 2rem; + font-weight: 600; + font-variant-numeric: tabular-nums; + letter-spacing: -0.02em; + color: var(--color-surface-900); + } + + .saas-empty { + display: flex; + flex-direction: column; + align-items: center; + justify-content: center; + gap: 0.5rem; + padding: 3rem 1rem; + text-align: center; + } + + .saas-shell { + display: flex; + height: 100vh; + overflow: hidden; + background: var(--color-surface-100); + } + + .saas-sidebar { + display: flex; + width: 16rem; + flex-shrink: 0; + flex-direction: column; + border-right: 1px solid var(--color-surface-200); + background: var(--color-surface-50); + } + + .saas-main { + display: flex; + min-width: 0; + flex: 1; + flex-direction: column; + overflow: hidden; + } + + .saas-topbar { + display: flex; + height: 3.5rem; + flex-shrink: 0; + align-items: center; + gap: 0.75rem; + border-bottom: 1px solid var(--color-surface-200); + background: color-mix(in oklab, var(--color-surface-50) 90%, transparent); + padding: 0 1.5rem; + backdrop-filter: blur(8px); + } + + .saas-content { + flex: 1; + overflow-y: auto; + } + + .saas-content-inner { + margin-inline: auto; + width: 100%; + max-width: 72rem; + padding: 1.5rem; + } + + @media (min-width: 768px) { + .saas-content-inner { + padding: 2rem; + } + } + + .saas-nav-item { + display: flex; + align-items: center; + gap: 0.75rem; + border-radius: 0.5rem; + padding: 0.5rem 0.75rem; + font-size: 0.875rem; + font-weight: 500; + color: var(--color-surface-600); + transition: color 0.15s, background-color 0.15s; + } + + .saas-nav-item:hover { + background: var(--color-surface-100); + color: var(--color-surface-900); + } + + .saas-nav-item[data-active='true'] { + background: var(--color-primary-100); + color: var(--color-primary-700); + } + + .saas-badge { + display: inline-flex; + align-items: center; + border-radius: 0.375rem; + padding: 0.125rem 0.5rem; + font-size: 0.75rem; + font-weight: 500; + } + + .saas-badge-neutral { + display: inline-flex; + align-items: center; + border-radius: 0.375rem; + padding: 0.125rem 0.5rem; + font-size: 0.75rem; + font-weight: 500; + background: var(--color-surface-200); + color: var(--color-surface-700); + } + + .saas-badge-primary { + display: inline-flex; + align-items: center; + border-radius: 0.375rem; + padding: 0.125rem 0.5rem; + font-size: 0.75rem; + font-weight: 500; + background: var(--color-primary-100); + color: var(--color-primary-700); + } + + .saas-badge-success { + display: inline-flex; + align-items: center; + border-radius: 0.375rem; + padding: 0.125rem 0.5rem; + font-size: 0.75rem; + font-weight: 500; + background: var(--color-success-100); + color: var(--color-success-700); + } + + .saas-badge-warning { + display: inline-flex; + align-items: center; + border-radius: 0.375rem; + padding: 0.125rem 0.5rem; + font-size: 0.75rem; + font-weight: 500; + background: var(--color-warning-100); + color: var(--color-warning-800); + } + + .saas-badge-error { + display: inline-flex; + align-items: center; + border-radius: 0.375rem; + padding: 0.125rem 0.5rem; + font-size: 0.75rem; + font-weight: 500; + background: var(--color-error-100); + color: var(--color-error-700); + } + + .saas-input, + .saas-select, + .saas-textarea { + width: 100%; + border-radius: 0.5rem; + border: 1px solid var(--color-surface-200); + background: var(--color-surface-50); + color: var(--color-surface-900); + padding: 0.5rem 0.75rem; + font-size: 0.875rem; + line-height: 1.25rem; + outline: none; + transition: border-color 0.15s, box-shadow 0.15s; + } + + .saas-input:focus, + .saas-select:focus, + .saas-textarea:focus { + border-color: var(--color-primary-400); + box-shadow: 0 0 0 3px color-mix(in oklab, var(--color-primary-500) 20%, transparent); + } + + .saas-textarea { + font-family: var(--font-mono); + resize: vertical; + } + + .saas-btn-primary, + .saas-btn-secondary, + .saas-btn-ghost, + .saas-btn-danger { + display: inline-flex; + align-items: center; + justify-content: center; + gap: 0.375rem; + border-radius: 0.5rem; + padding: 0.5rem 0.875rem; + font-size: 0.875rem; + font-weight: 500; + line-height: 1.25rem; + border: 1px solid transparent; + cursor: pointer; + transition: background-color 0.15s, color 0.15s, border-color 0.15s, opacity 0.15s; + } + + .saas-btn-primary:disabled, + .saas-btn-secondary:disabled, + .saas-btn-ghost:disabled, + .saas-btn-danger:disabled { + opacity: 0.55; + cursor: not-allowed; + } + + .saas-btn-primary { + background: var(--color-primary-500); + color: var(--color-primary-contrast-500, white); + } + + .saas-btn-primary:hover:not(:disabled) { + background: var(--color-primary-600); + } + + .saas-btn-secondary { + background: var(--color-secondary-100); + color: var(--color-secondary-800); + } + + .saas-btn-secondary:hover:not(:disabled) { + background: var(--color-secondary-200); + } + + .saas-btn-ghost { + background: var(--color-surface-100); + color: var(--color-surface-700); + } + + .saas-btn-ghost:hover:not(:disabled) { + background: var(--color-surface-200); + } + + .saas-btn-danger { + background: var(--color-error-100); + color: var(--color-error-700); + } + + .saas-btn-danger:hover:not(:disabled) { + background: var(--color-error-200); + } + + .saas-modal-backdrop { + position: fixed; + inset: 0; + z-index: 50; + display: flex; + align-items: center; + justify-content: center; + background: rgb(2 6 23 / 0.4); + padding: 1rem; + backdrop-filter: blur(2px); + } + + .saas-modal { + width: 100%; + max-width: 28rem; + border-radius: 1rem; + border: 1px solid var(--color-surface-200); + background: var(--color-surface-50); + padding: 1.5rem; + box-shadow: 0 20px 40px rgb(15 23 42 / 0.16); + } + + .saas-status-panel { + display: flex; + min-height: 100vh; + flex-direction: column; + align-items: center; + justify-content: center; + background: var(--color-surface-100); + padding: 1rem; + } + + .saas-status-card { + width: 100%; + max-width: 28rem; + border-radius: 1rem; + border: 1px solid var(--color-surface-200); + background: var(--color-surface-50); + padding: 2rem; + text-align: center; + box-shadow: 0 1px 2px rgb(15 23 42 / 0.04); + } +} diff --git a/hub/admin-web/static/favicon.svg b/hub/admin-web/static/favicon.svg new file mode 100644 index 0000000..43bc66d --- /dev/null +++ b/hub/admin-web/static/favicon.svg @@ -0,0 +1,5 @@ + diff --git a/hub/admin-web/static/robots.txt b/hub/admin-web/static/robots.txt new file mode 100644 index 0000000..b6dd667 --- /dev/null +++ b/hub/admin-web/static/robots.txt @@ -0,0 +1,3 @@ +# allow crawling everything by default +User-agent: * +Disallow: diff --git a/hub/admin-web/svelte.config.js b/hub/admin-web/svelte.config.js new file mode 100644 index 0000000..ce73410 --- /dev/null +++ b/hub/admin-web/svelte.config.js @@ -0,0 +1,18 @@ +import adapter from '@sveltejs/adapter-static'; +import { vitePreprocess } from '@sveltejs/vite-plugin-svelte'; + +/** @type {import('@sveltejs/kit').Config} */ +const config = { + preprocess: vitePreprocess(), + kit: { + adapter: adapter({ + pages: 'build', + assets: 'build', + fallback: 'index.html', + precompress: false, + strict: false + }) + } +}; + +export default config; diff --git a/hub/admin-web/tsconfig.json b/hub/admin-web/tsconfig.json new file mode 100644 index 0000000..2c2ed3c --- /dev/null +++ b/hub/admin-web/tsconfig.json @@ -0,0 +1,20 @@ +{ + "extends": "./.svelte-kit/tsconfig.json", + "compilerOptions": { + "rewriteRelativeImportExtensions": true, + "allowJs": true, + "checkJs": true, + "esModuleInterop": true, + "forceConsistentCasingInFileNames": true, + "resolveJsonModule": true, + "skipLibCheck": true, + "sourceMap": true, + "strict": true, + "moduleResolution": "bundler" + } + // Path aliases are handled by https://svelte.dev/docs/kit/configuration#alias + // except $lib which is handled by https://svelte.dev/docs/kit/configuration#files + // + // To make changes to top-level options such as include and exclude, we recommend extending + // the generated config; see https://svelte.dev/docs/kit/configuration#typescript +} diff --git a/hub/admin-web/vite.config.ts b/hub/admin-web/vite.config.ts new file mode 100644 index 0000000..ebd5ced --- /dev/null +++ b/hub/admin-web/vite.config.ts @@ -0,0 +1,13 @@ +import { sveltekit } from '@sveltejs/kit/vite'; +import tailwindcss from '@tailwindcss/vite'; +import { defineConfig } from 'vite'; + +export default defineConfig({ + plugins: [tailwindcss(), sveltekit()], + server: { + proxy: { + '/api': 'http://127.0.0.1:8788', + '/auth': 'http://127.0.0.1:8788' + } + } +}); diff --git a/hub/package-lock.json b/hub/package-lock.json index 893906b..ce984cb 100644 --- a/hub/package-lock.json +++ b/hub/package-lock.json @@ -131,9 +131,6 @@ "cpu": [ "arm64" ], - "libc": [ - "glibc" - ], "license": "SEE LICENSE IN LICENSE.md", "optional": true, "os": [ @@ -147,9 +144,6 @@ "cpu": [ "arm64" ], - "libc": [ - "musl" - ], "license": "SEE LICENSE IN LICENSE.md", "optional": true, "os": [ @@ -163,9 +157,6 @@ "cpu": [ "x64" ], - "libc": [ - "glibc" - ], "license": "SEE LICENSE IN LICENSE.md", "optional": true, "os": [ @@ -179,9 +170,6 @@ "cpu": [ "x64" ], - "libc": [ - "musl" - ], "license": "SEE LICENSE IN LICENSE.md", "optional": true, "os": [ @@ -241,34 +229,10 @@ "resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.29.7.tgz", "integrity": "sha512-Nq8OhGWiZIZGV6hLHoyAKLLcJihP/xFeBMGJoUrxTX2psI8dCifzLhZISFb+VWS3wFMRDmCGw5R+dOySCqPLhw==", "license": "MIT", - "peer": true, "engines": { "node": ">=6.9.0" } }, - "node_modules/@emnapi/core": { - "version": "1.11.1", - "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.11.1.tgz", - "integrity": "sha512-RSvbQmHzdKzNsLYa/wHrbc3KN4sYLKAdPZxqiM2HATqv/SBk2/ENSHpvXGaLOMcsAyz0poEGqkmmKYG3OWiJEQ==", - "dev": true, - "license": "MIT", - "optional": true, - "dependencies": { - "@emnapi/wasi-threads": "1.2.2", - "tslib": "^2.4.0" - } - }, - "node_modules/@emnapi/runtime": { - "version": "1.11.1", - "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.1.tgz", - "integrity": "sha512-vgj7R3y3Wgx24IQaGPA/R6YFXLHVMOZ0uVEyIQPaWs+rd1AzfEMXlAC22FYwO1XkKR6NPsq7mUandH8oIRdZFw==", - "dev": true, - "license": "MIT", - "optional": true, - "dependencies": { - "tslib": "^2.4.0" - } - }, "node_modules/@emnapi/wasi-threads": { "version": "1.2.2", "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.2.tgz", @@ -858,7 +822,6 @@ "resolved": "https://registry.npmjs.org/@hono/node-server/-/node-server-1.19.14.tgz", "integrity": "sha512-GwtvgtXxnWsucXvbQXkRgqksiH2Qed37H9xHZocE5sA3N8O8O8/8FA3uclQXxXVzc9XBZuEOMK7+r02FmSpHtw==", "license": "MIT", - "peer": true, "engines": { "node": ">=18.14.1" }, @@ -1199,9 +1162,6 @@ "arm64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -1219,9 +1179,6 @@ "arm64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ @@ -1239,9 +1196,6 @@ "ppc64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -1259,9 +1213,6 @@ "s390x" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -1279,9 +1230,6 @@ "x64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MIT", "optional": true, "os": [ @@ -1299,9 +1247,6 @@ "x64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MIT", "optional": true, "os": [ @@ -1392,8 +1337,7 @@ "version": "1.0.1", "resolved": "https://registry.npmjs.org/@stablelib/base64/-/base64-1.0.1.tgz", "integrity": "sha512-1bnPQqSxSuc3Ii6MhBysoWCg58j97aUjuCSZrGSmDxNqtytIi0k8utUenAwTZN4V5mXXYGsVUI9zeBqy+jBOSQ==", - "license": "MIT", - "peer": true + "license": "MIT" }, "node_modules/@standard-schema/spec": { "version": "1.1.0", @@ -1585,7 +1529,6 @@ "resolved": "https://registry.npmjs.org/accepts/-/accepts-2.0.0.tgz", "integrity": "sha512-5cvg6CtKwfgdmVqY1WIiXKc3Q1bkRqGLi+2W/6ao+6Y7gu/RCwRuAhGEzh5B4KlszSuTLgZYuqFqo5bImjNKng==", "license": "MIT", - "peer": true, "dependencies": { "mime-types": "^3.0.0", "negotiator": "^1.0.0" @@ -1599,7 +1542,6 @@ "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.54.0.tgz", "integrity": "sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ==", "license": "MIT", - "peer": true, "engines": { "node": ">= 0.6" } @@ -1609,7 +1551,6 @@ "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-3.0.2.tgz", "integrity": "sha512-Lbgzdk0h4juoQ9fCKXW4by0UJqj+nOOrI9MJ1sSj4nI8aI2eo1qmvQEie4VD1glsS250n15LsWsYtCugiStS5A==", "license": "MIT", - "peer": true, "dependencies": { "mime-db": "^1.54.0" }, @@ -1745,7 +1686,6 @@ "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-2.3.0.tgz", "integrity": "sha512-2cGmJupaNgg+QUwVLAucDuWuoMZ6EX9iHDRswZ5lsNYEmwPaRknMPCLZz07yTzVq/83p4o/wzbDZbBrTvGGTIw==", "license": "MIT", - "peer": true, "dependencies": { "bytes": "^3.1.2", "content-type": "^2.0.0", @@ -1770,7 +1710,6 @@ "resolved": "https://registry.npmjs.org/content-type/-/content-type-2.0.0.tgz", "integrity": "sha512-j/O/d7GcZCyNl7/hwZAb606rzqkyvaDctLmckbxLzHvFBzTJHuGEdodATcP3yIRoDrLHkIATJuvzbFlp/ki2cQ==", "license": "MIT", - "peer": true, "engines": { "node": ">=18" }, @@ -1784,7 +1723,6 @@ "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz", "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==", "license": "MIT", - "peer": true, "engines": { "node": ">= 0.8" } @@ -1930,7 +1868,6 @@ "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-1.1.0.tgz", "integrity": "sha512-5jRCH9Z/+DRP7rkvY83B+yGIGX96OYdJmzngqnw2SBSxqCFPd0w2km3s5iawpGX8krnwSGmF0FW5Nhr0Hfai3g==", "license": "MIT", - "peer": true, "engines": { "node": ">=18" }, @@ -1944,7 +1881,6 @@ "resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz", "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==", "license": "MIT", - "peer": true, "engines": { "node": ">= 0.6" } @@ -1974,7 +1910,6 @@ "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.2.2.tgz", "integrity": "sha512-D76uU73ulSXrD1UXF4KE2TMxVVwhsnCgfAyTg9k8P6KGZjlXKrOLe4dJQKI3Bxi5wjesZoFXJWElNWBjPZMbhg==", "license": "MIT", - "peer": true, "engines": { "node": ">=6.6.0" } @@ -1984,7 +1919,6 @@ "resolved": "https://registry.npmjs.org/cors/-/cors-2.8.6.tgz", "integrity": "sha512-tJtZBBHA6vjIAaF6EnIaq6laBBP9aq/Y3ouVJjEfoHbRBcHBAHYcMh/w8LDrk2PvIMMq8gmopa5D4V8RmbrxGw==", "license": "MIT", - "peer": true, "dependencies": { "object-assign": "^4", "vary": "^1" @@ -2002,7 +1936,6 @@ "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", "license": "MIT", - "peer": true, "dependencies": { "path-key": "^3.1.0", "shebang-command": "^2.0.0", @@ -2060,7 +1993,6 @@ "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz", "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==", "license": "MIT", - "peer": true, "engines": { "node": ">= 0.8" } @@ -2121,8 +2053,7 @@ "version": "1.1.1", "resolved": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz", "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==", - "license": "MIT", - "peer": true + "license": "MIT" }, "node_modules/effect": { "version": "3.21.0", @@ -2150,7 +2081,6 @@ "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz", "integrity": "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==", "license": "MIT", - "peer": true, "engines": { "node": ">= 0.8" } @@ -2253,8 +2183,7 @@ "version": "1.0.3", "resolved": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz", "integrity": "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==", - "license": "MIT", - "peer": true + "license": "MIT" }, "node_modules/estree-walker": { "version": "3.0.3", @@ -2271,7 +2200,6 @@ "resolved": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz", "integrity": "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==", "license": "MIT", - "peer": true, "engines": { "node": ">= 0.6" } @@ -2281,7 +2209,6 @@ "resolved": "https://registry.npmjs.org/eventsource/-/eventsource-3.0.7.tgz", "integrity": "sha512-CRT1WTyuQoD771GW56XEZFQ/ZoSfWid1alKGDYMmkt2yl8UXrVR4pspqWNEcqKvVIzg6PAltWjxcSSPrboA4iA==", "license": "MIT", - "peer": true, "dependencies": { "eventsource-parser": "^3.0.1" }, @@ -2313,7 +2240,6 @@ "resolved": "https://registry.npmjs.org/express/-/express-5.2.1.tgz", "integrity": "sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw==", "license": "MIT", - "peer": true, "dependencies": { "accepts": "^2.0.0", "body-parser": "^2.2.1", @@ -2357,7 +2283,6 @@ "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.5.2.tgz", "integrity": "sha512-5Kb34ipNX694DH48vN9irak1Qx30nb0PLYHXfJgw4YEjiC3ZEmZJhwOp+VfiCYwFzvFTdB9QkArYS5kXa2cx2A==", "license": "MIT", - "peer": true, "dependencies": { "ip-address": "^10.2.0" }, @@ -2376,7 +2301,6 @@ "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz", "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==", "license": "MIT", - "peer": true, "engines": { "node": ">= 0.6" } @@ -2386,7 +2310,6 @@ "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.54.0.tgz", "integrity": "sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ==", "license": "MIT", - "peer": true, "engines": { "node": ">= 0.6" } @@ -2396,7 +2319,6 @@ "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-3.0.2.tgz", "integrity": "sha512-Lbgzdk0h4juoQ9fCKXW4by0UJqj+nOOrI9MJ1sSj4nI8aI2eo1qmvQEie4VD1glsS250n15LsWsYtCugiStS5A==", "license": "MIT", - "peer": true, "dependencies": { "mime-db": "^1.54.0" }, @@ -2487,8 +2409,7 @@ "version": "1.3.0", "resolved": "https://registry.npmjs.org/fast-sha256/-/fast-sha256-1.3.0.tgz", "integrity": "sha512-n11RGP/lrWEFI/bWdygLxhI+pVeo1ZYIVwvvPkW7azl/rOy+F3HYRZ2K5zeE9mmkhQppyv9sQFx0JM9UabnpPQ==", - "license": "Unlicense", - "peer": true + "license": "Unlicense" }, "node_modules/fast-uri": { "version": "3.1.3", @@ -2587,7 +2508,6 @@ "resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-2.1.1.tgz", "integrity": "sha512-S8KoZgRZN+a5rNwqTxlZZePjT/4cnm0ROV70LedRHZ0p8u9fRID0hJUZQpkKLzro8LfmC8sx23bY6tVNxv8pQA==", "license": "MIT", - "peer": true, "dependencies": { "debug": "^4.4.0", "encodeurl": "^2.0.0", @@ -2659,7 +2579,6 @@ "resolved": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz", "integrity": "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==", "license": "MIT", - "peer": true, "engines": { "node": ">= 0.6" } @@ -2669,7 +2588,6 @@ "resolved": "https://registry.npmjs.org/fresh/-/fresh-2.0.0.tgz", "integrity": "sha512-Rx/WycZ60HOaqLKAi6cHRKKI7zxWbJ31MhntmtwMoaTeF7XFH9hhBp8vITaMidfljRQ6eYWCKkaTK+ykVJHP2A==", "license": "MIT", - "peer": true, "engines": { "node": ">= 0.8" } @@ -2819,7 +2737,6 @@ "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz", "integrity": "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==", "license": "MIT", - "peer": true, "dependencies": { "depd": "~2.0.0", "inherits": "~2.0.4", @@ -2853,7 +2770,6 @@ "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.3.tgz", "integrity": "sha512-IKXpvIzjnC9XTAUbVBcMfGS0EPaIXtW6v+zr+RRp+hqULEpo0owZax6wyRwPOJbWbzjYspQwusTsfVr0ifh4uQ==", "license": "MIT", - "peer": true, "dependencies": { "safer-buffer": ">= 2.1.2 < 3.0.0" }, @@ -2869,15 +2785,13 @@ "version": "2.0.4", "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz", "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==", - "license": "ISC", - "peer": true + "license": "ISC" }, "node_modules/ip-address": { "version": "10.2.0", "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.2.0.tgz", "integrity": "sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==", "license": "MIT", - "peer": true, "engines": { "node": ">= 12" } @@ -2895,15 +2809,13 @@ "version": "4.0.0", "resolved": "https://registry.npmjs.org/is-promise/-/is-promise-4.0.0.tgz", "integrity": "sha512-hvpoI6korhJMnej285dSg6nu1+e6uxs7zG3BYAm5byqDsgJNWwxzM6z6iZiAgQR4TJ30JmBTOwqZUw3WlyH3AQ==", - "license": "MIT", - "peer": true + "license": "MIT" }, "node_modules/isexe": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz", "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==", - "license": "ISC", - "peer": true + "license": "ISC" }, "node_modules/jiti": { "version": "2.7.0", @@ -2920,7 +2832,6 @@ "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.3.tgz", "integrity": "sha512-YYVDInQKFJfR/xa3ojUTl8c2KoTwiL1R5Wg9YCydwH0x0B9grbzlg5HC7mMjCtUJjbQ/YnGEZIhI5tCgfTb4Hw==", "license": "MIT", - "peer": true, "funding": { "url": "https://github.com/sponsors/panva" } @@ -2955,7 +2866,6 @@ "resolved": "https://registry.npmjs.org/json-schema-to-ts/-/json-schema-to-ts-3.1.1.tgz", "integrity": "sha512-+DWg8jCJG2TEnpy7kOm/7/AxaYoaRbjVB4LFZLySZlWn8exGs3A4OLJR966cVvU26N7X9TWxl+Jsw7dzAqKT6g==", "license": "MIT", - "peer": true, "dependencies": { "@babel/runtime": "^7.18.3", "ts-algebra": "^2.0.0" @@ -2974,8 +2884,7 @@ "version": "8.0.2", "resolved": "https://registry.npmjs.org/json-schema-typed/-/json-schema-typed-8.0.2.tgz", "integrity": "sha512-fQhoXdcvc3V28x7C7BMs4P5+kNlgUURe2jmUT1T//oBRMDrqy1QPelJimwZGo7Hg9VPV3EQV5Bnq4hbFy2vetA==", - "license": "BSD-2-Clause", - "peer": true + "license": "BSD-2-Clause" }, "node_modules/light-my-request": { "version": "6.6.0", @@ -3157,9 +3066,6 @@ "arm64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MPL-2.0", "optional": true, "os": [ @@ -3181,9 +3087,6 @@ "arm64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MPL-2.0", "optional": true, "os": [ @@ -3205,9 +3108,6 @@ "x64" ], "dev": true, - "libc": [ - "glibc" - ], "license": "MPL-2.0", "optional": true, "os": [ @@ -3229,9 +3129,6 @@ "x64" ], "dev": true, - "libc": [ - "musl" - ], "license": "MPL-2.0", "optional": true, "os": [ @@ -3335,7 +3232,6 @@ "resolved": "https://registry.npmjs.org/media-typer/-/media-typer-1.1.0.tgz", "integrity": "sha512-aisnrDP4GNe06UcKFnV5bfMNPBUw4jsLGaWwWfnH3v02GnBuXX2MCVn5RbrWo0j3pczUilYblq7fQ7Nw2t5XKw==", "license": "MIT", - "peer": true, "engines": { "node": ">= 0.8" } @@ -3345,7 +3241,6 @@ "resolved": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-2.0.0.tgz", "integrity": "sha512-Snk314V5ayFLhp3fkUREub6WtjBfPdCPY1Ln8/8munuLuiYhsABgBVWsozAG+MWMbVEvcdcpbi9R7ww22l9Q3g==", "license": "MIT", - "peer": true, "engines": { "node": ">=18" }, @@ -3404,7 +3299,6 @@ "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-1.0.0.tgz", "integrity": "sha512-8Ofs/AUQh8MaEcrlq5xOX0CQ9ypTF5dl78mjlMNfOK08fzpgTHQRQPBxcPlEtIw0yRpws+Zo/3r+5WRby7u3Gg==", "license": "MIT", - "peer": true, "engines": { "node": ">= 0.6" } @@ -3446,7 +3340,6 @@ "resolved": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz", "integrity": "sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg==", "license": "MIT", - "peer": true, "engines": { "node": ">=0.10.0" } @@ -3498,7 +3391,6 @@ "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz", "integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==", "license": "MIT", - "peer": true, "dependencies": { "ee-first": "1.1.1" }, @@ -3511,7 +3403,6 @@ "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz", "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==", "license": "ISC", - "peer": true, "dependencies": { "wrappy": "1" } @@ -3521,7 +3412,6 @@ "resolved": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz", "integrity": "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==", "license": "MIT", - "peer": true, "engines": { "node": ">= 0.8" } @@ -3531,7 +3421,6 @@ "resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz", "integrity": "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==", "license": "MIT", - "peer": true, "engines": { "node": ">=8" } @@ -3541,7 +3430,6 @@ "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-8.4.2.tgz", "integrity": "sha512-qRcuIdP69NPm4qbACK+aDogI5CBDMi1jKe0ry5rSQJz8JVLsC7jV8XpiJjGRLLol3N+R5ihGYcrPLTno6pAdBA==", "license": "MIT", - "peer": true, "funding": { "type": "opencollective", "url": "https://opencollective.com/express" @@ -3574,6 +3462,7 @@ "integrity": "sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==", "dev": true, "license": "MIT", + "peer": true, "engines": { "node": ">=12" }, @@ -3623,7 +3512,6 @@ "resolved": "https://registry.npmjs.org/pkce-challenge/-/pkce-challenge-5.0.1.tgz", "integrity": "sha512-wQ0b/W4Fr01qtpHlqSqspcj3EhBvimsdh0KlHhH8HRZnMsEa0ea2fTULOXOS9ccQr3om+GcGRk4e+isrZWV8qQ==", "license": "MIT", - "peer": true, "engines": { "node": ">=16.20.0" } @@ -3676,6 +3564,7 @@ "devOptional": true, "hasInstallScript": true, "license": "Apache-2.0", + "peer": true, "dependencies": { "@prisma/config": "6.19.3", "@prisma/engines": "6.19.3" @@ -3739,7 +3628,6 @@ "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz", "integrity": "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==", "license": "MIT", - "peer": true, "dependencies": { "forwarded": "0.2.0", "ipaddr.js": "1.9.1" @@ -3753,7 +3641,6 @@ "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz", "integrity": "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==", "license": "MIT", - "peer": true, "engines": { "node": ">= 0.10" } @@ -3811,7 +3698,6 @@ "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.3.0.tgz", "integrity": "sha512-hek2mFQpPuI4E1BBKrSto+BU3e3x4xuarsbiwr3+lf7p44juvFMV0XFWQAP3xUyqXA4RrXLIoaSUGbSt056ZMw==", "license": "MIT", - "peer": true, "engines": { "node": ">= 0.6" }, @@ -3825,7 +3711,6 @@ "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-3.0.2.tgz", "integrity": "sha512-K5zQjDllxWkf7Z5xJdV0/B0WTNqx6vxG70zJE4N0kBs4LovmEYWJzQGxC9bS9RAKu3bgM40lrd5zoLJ12MQ5BA==", "license": "MIT", - "peer": true, "dependencies": { "bytes": "~3.1.2", "http-errors": "~2.0.1", @@ -3943,7 +3828,6 @@ "resolved": "https://registry.npmjs.org/router/-/router-2.2.0.tgz", "integrity": "sha512-nLTrUKm2UyiL7rlhapu/Zl45FwNgkZGaCpZbIHajDYgwlJCOzLSk+cIPAnsEqV955GjILJnKbdQC1nVPz+gAYQ==", "license": "MIT", - "peer": true, "dependencies": { "debug": "^4.4.0", "depd": "^2.0.0", @@ -3990,8 +3874,7 @@ "version": "2.1.2", "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz", "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==", - "license": "MIT", - "peer": true + "license": "MIT" }, "node_modules/secure-json-parse": { "version": "4.1.0", @@ -4026,7 +3909,6 @@ "resolved": "https://registry.npmjs.org/send/-/send-1.2.1.tgz", "integrity": "sha512-1gnZf7DFcoIcajTjTwjwuDjzuz4PPcY2StKPlsGAQ1+YH20IRVrBaXSWmdjowTJ6u8Rc01PoYOGHXfP1mYcZNQ==", "license": "MIT", - "peer": true, "dependencies": { "debug": "^4.4.3", "encodeurl": "^2.0.0", @@ -4053,7 +3935,6 @@ "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.54.0.tgz", "integrity": "sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ==", "license": "MIT", - "peer": true, "engines": { "node": ">= 0.6" } @@ -4063,7 +3944,6 @@ "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-3.0.2.tgz", "integrity": "sha512-Lbgzdk0h4juoQ9fCKXW4by0UJqj+nOOrI9MJ1sSj4nI8aI2eo1qmvQEie4VD1glsS250n15LsWsYtCugiStS5A==", "license": "MIT", - "peer": true, "dependencies": { "mime-db": "^1.54.0" }, @@ -4080,7 +3960,6 @@ "resolved": "https://registry.npmjs.org/serve-static/-/serve-static-2.2.1.tgz", "integrity": "sha512-xRXBn0pPqQTVQiC8wyQrKs2MOlX24zQ0POGaj0kultvoOCstBQM5yvOhAVSUwOMjQtTvsPWoNCHfPGwaaQJhTw==", "license": "MIT", - "peer": true, "dependencies": { "encodeurl": "^2.0.0", "escape-html": "^1.0.3", @@ -4105,15 +3984,13 @@ "version": "1.2.0", "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz", "integrity": "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==", - "license": "ISC", - "peer": true + "license": "ISC" }, "node_modules/shebang-command": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz", "integrity": "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==", "license": "MIT", - "peer": true, "dependencies": { "shebang-regex": "^3.0.0" }, @@ -4126,7 +4003,6 @@ "resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz", "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==", "license": "MIT", - "peer": true, "engines": { "node": ">=8" } @@ -4250,7 +4126,6 @@ "resolved": "https://registry.npmjs.org/standardwebhooks/-/standardwebhooks-1.0.0.tgz", "integrity": "sha512-BbHGOQK9olHPMvQNHWul6MYlrRTAOKn03rOe4A8O3CLWhNf4YHBqq2HJKKC+sfqpxiBY52pNeesD6jIiLDz8jg==", "license": "MIT", - "peer": true, "dependencies": { "@stablelib/base64": "^1.0.0", "fast-sha256": "^1.3.0" @@ -4261,7 +4136,6 @@ "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz", "integrity": "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==", "license": "MIT", - "peer": true, "engines": { "node": ">= 0.8" } @@ -4349,7 +4223,6 @@ "resolved": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz", "integrity": "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==", "license": "MIT", - "peer": true, "engines": { "node": ">=0.6" } @@ -4358,8 +4231,7 @@ "version": "2.0.0", "resolved": "https://registry.npmjs.org/ts-algebra/-/ts-algebra-2.0.0.tgz", "integrity": "sha512-FPAhNPFMrkwz76P7cdjdmiShwMynZYN6SgOujD1urY4oNm80Ou9oMdmbR45LotcKOXoy7wSmHkRFE6Mxbrhefw==", - "license": "MIT", - "peer": true + "license": "MIT" }, "node_modules/tslib": { "version": "2.8.1", @@ -4375,6 +4247,7 @@ "integrity": "sha512-eUdUIaCr963q2h5u3+QwvYp0+eqPvn+egeqZUm0hwERCqqx1E3kK5ehbGCvqSE5MQAULr67ww0cA3jKc3YkM1w==", "dev": true, "license": "MIT", + "peer": true, "dependencies": { "esbuild": "~0.28.0" }, @@ -4393,7 +4266,6 @@ "resolved": "https://registry.npmjs.org/type-is/-/type-is-2.1.0.tgz", "integrity": "sha512-faYHw0anBbc/kWF3zFTEnxSFOAGUX9GFbOBthvDdLsIlEoWOFOtS0zgCiQYwIskL9iGXZL3kAXD8OoZ4GmMATA==", "license": "MIT", - "peer": true, "dependencies": { "content-type": "^2.0.0", "media-typer": "^1.1.0", @@ -4412,7 +4284,6 @@ "resolved": "https://registry.npmjs.org/content-type/-/content-type-2.0.0.tgz", "integrity": "sha512-j/O/d7GcZCyNl7/hwZAb606rzqkyvaDctLmckbxLzHvFBzTJHuGEdodATcP3yIRoDrLHkIATJuvzbFlp/ki2cQ==", "license": "MIT", - "peer": true, "engines": { "node": ">=18" }, @@ -4426,7 +4297,6 @@ "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.54.0.tgz", "integrity": "sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ==", "license": "MIT", - "peer": true, "engines": { "node": ">= 0.6" } @@ -4436,7 +4306,6 @@ "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-3.0.2.tgz", "integrity": "sha512-Lbgzdk0h4juoQ9fCKXW4by0UJqj+nOOrI9MJ1sSj4nI8aI2eo1qmvQEie4VD1glsS250n15LsWsYtCugiStS5A==", "license": "MIT", - "peer": true, "dependencies": { "mime-db": "^1.54.0" }, @@ -4454,6 +4323,7 @@ "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==", "devOptional": true, "license": "Apache-2.0", + "peer": true, "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" @@ -4473,7 +4343,6 @@ "resolved": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz", "integrity": "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==", "license": "MIT", - "peer": true, "engines": { "node": ">= 0.8" } @@ -4483,7 +4352,6 @@ "resolved": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz", "integrity": "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==", "license": "MIT", - "peer": true, "engines": { "node": ">= 0.8" } @@ -4494,6 +4362,7 @@ "integrity": "sha512-Ds+gBRbj0lwRO2Y5hwnUBdxSwlAve9LeRyU4sNnAr0ewW0gWF0n5bgXgUzbgZ49MV9BVUAQUFYVcDUcilUExMA==", "dev": true, "license": "MIT", + "peer": true, "dependencies": { "lightningcss": "^1.32.0", "picomatch": "^4.0.4", @@ -4661,7 +4530,6 @@ "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz", "integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==", "license": "ISC", - "peer": true, "dependencies": { "isexe": "^2.0.0" }, @@ -4693,8 +4561,7 @@ "version": "1.0.2", "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz", "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==", - "license": "ISC", - "peer": true + "license": "ISC" }, "node_modules/ws": { "version": "8.21.0", @@ -4722,6 +4589,7 @@ "resolved": "https://registry.npmjs.org/zod/-/zod-4.4.3.tgz", "integrity": "sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==", "license": "MIT", + "peer": true, "funding": { "url": "https://github.com/sponsors/colinhacks" } @@ -4731,7 +4599,6 @@ "resolved": "https://registry.npmjs.org/zod-to-json-schema/-/zod-to-json-schema-3.25.2.tgz", "integrity": "sha512-O/PgfnpT1xKSDeQYSCfRI5Gy3hPf91mKVDuYLUHZJMiDFptvP41MSnWofm8dnCm0256ZNfZIM7DSzuSMAFnjHA==", "license": "ISC", - "peer": true, "peerDependencies": { "zod": "^3.25.28 || ^4" } diff --git a/hub/prisma/migrations/20260710120000_org_model_role_management/migration.sql b/hub/prisma/migrations/20260710120000_org_model_role_management/migration.sql new file mode 100644 index 0000000..14522f1 --- /dev/null +++ b/hub/prisma/migrations/20260710120000_org_model_role_management/migration.sql @@ -0,0 +1,62 @@ +-- ADR-0021 / ADR-0017: org-scoped model provider connection, enabled models, +-- and role presets. Aligns to Spec.System.Organization (ProviderCredentialMode, +-- OrganizationProviderConnection) and the "roles are data" seam in agent/models. + +CREATE TYPE "ProviderCredentialMode" AS ENUM ('BYOK', 'PLATFORM_MANAGED'); + +CREATE TABLE "OrganizationProviderConnection" ( + "organizationId" TEXT NOT NULL, + "providerId" TEXT NOT NULL DEFAULT 'openrouter', + "mode" "ProviderCredentialMode" NOT NULL DEFAULT 'PLATFORM_MANAGED', + "baseUrl" TEXT, + "authToken" TEXT, + "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP, + "updatedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP, + + CONSTRAINT "OrganizationProviderConnection_pkey" PRIMARY KEY ("organizationId") +); + +ALTER TABLE "OrganizationProviderConnection" + ADD CONSTRAINT "OrganizationProviderConnection_organizationId_fkey" + FOREIGN KEY ("organizationId") REFERENCES "Organization"("id") ON DELETE CASCADE ON UPDATE CASCADE; + +CREATE TABLE "OrgModel" ( + "id" TEXT NOT NULL, + "organizationId" TEXT NOT NULL, + "modelId" TEXT NOT NULL, + "label" TEXT NOT NULL, + "toolCapable" BOOLEAN NOT NULL DEFAULT true, + "sortKey" TEXT NOT NULL DEFAULT '', + "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP, + "updatedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP, + + CONSTRAINT "OrgModel_pkey" PRIMARY KEY ("id") +); + +CREATE UNIQUE INDEX "OrgModel_organizationId_modelId_key" ON "OrgModel"("organizationId", "modelId"); +CREATE INDEX "OrgModel_organizationId_sortKey_idx" ON "OrgModel"("organizationId", "sortKey"); + +ALTER TABLE "OrgModel" + ADD CONSTRAINT "OrgModel_organizationId_fkey" + FOREIGN KEY ("organizationId") REFERENCES "Organization"("id") ON DELETE CASCADE ON UPDATE CASCADE; + +CREATE TABLE "OrgRole" ( + "id" TEXT NOT NULL, + "organizationId" TEXT NOT NULL, + "roleId" TEXT NOT NULL, + "label" TEXT NOT NULL, + "defaultModelId" TEXT, + "systemPrompt" TEXT, + "tools" JSONB, + "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP, + "updatedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP, + + CONSTRAINT "OrgRole_pkey" PRIMARY KEY ("id") +); + +CREATE UNIQUE INDEX "OrgRole_organizationId_roleId_key" ON "OrgRole"("organizationId", "roleId"); +CREATE INDEX "OrgRole_organizationId_idx" ON "OrgRole"("organizationId"); + +ALTER TABLE "OrgRole" + ADD CONSTRAINT "OrgRole_organizationId_fkey" + FOREIGN KEY ("organizationId") REFERENCES "Organization"("id") ON DELETE CASCADE ON UPDATE CASCADE; diff --git a/hub/src/admin/routes/modelRoutes.ts b/hub/src/admin/routes/modelRoutes.ts new file mode 100644 index 0000000..bd292cf --- /dev/null +++ b/hub/src/admin/routes/modelRoutes.ts @@ -0,0 +1,252 @@ +/** + * Org-admin routes for agent config: provider connection, enabled models, and + * role presets (ADR-0017 / ADR-0021). Mounted under `/api/org/:orgSlug`. + */ +import type { PrismaClient } from "@prisma/client"; +import type { FastifyInstance } from "fastify"; +import { + createOrgModel, + createOrgRole, + deleteOrgModel, + deleteOrgRole, + getProviderConnection, + listOrgModels, + listOrgRoles, + updateOrgModel, + updateOrgRole, + upsertProviderConnection, +} from "../../org/agentConfig.js"; +import { requireOrgRole, type GuardDeps } from "../auth/guards.js"; +import { handleRouteError } from "../errors.js"; + +const PROVIDER_MODES = ["BYOK", "PLATFORM_MANAGED"] as const; +type ProviderMode = (typeof PROVIDER_MODES)[number]; + +export async function registerModelRoutes( + app: FastifyInstance, + config: { readonly prisma: PrismaClient; readonly sessionSecret: string }, +): Promise