+
+
diff --git a/supabase/functions/_backend/private/admin_builder_status.ts b/supabase/functions/_backend/private/admin_builder_status.ts
new file mode 100644
index 0000000000..88cae4bf06
--- /dev/null
+++ b/supabase/functions/_backend/private/admin_builder_status.ts
@@ -0,0 +1,75 @@
+import type { Context } from 'hono'
+import type { MiddlewareKeyVariables } from '../utils/hono.ts'
+import { BRES, createHono, getEnv, simpleError, useCors } from '../utils/hono.ts'
+import { middlewareAuth } from '../utils/hono_middleware.ts'
+import { cloudlog, cloudlogErr } from '../utils/logging.ts'
+import { supabaseClient } from '../utils/supabase.ts'
+import { version } from '../utils/version.ts'
+
+type AppContext = Context
+
+async function verifyPlatformAdmin(c: AppContext): Promise<{ isAdmin: boolean, userId: string | null }> {
+ const auth = c.get('auth')
+ if (!auth || !auth.userId || auth.authType !== 'jwt' || !auth.jwt)
+ return { isAdmin: false, userId: null }
+
+ const userSupabase = supabaseClient(c, auth.jwt)
+ const { data: isAdmin, error } = await userSupabase.rpc('is_platform_admin')
+ if (error) {
+ cloudlogErr({ requestId: c.get('requestId'), message: 'admin_builder_status admin check failed', error })
+ return { isAdmin: false, userId: auth.userId }
+ }
+ return { isAdmin: Boolean(isAdmin), userId: auth.userId }
+}
+
+async function fetchBuilder(c: AppContext, path: string, options?: { allowNonOk?: boolean }): Promise {
+ const builderUrl = getEnv(c, 'BUILDER_URL')?.replace(/\/+$/, '')
+ const builderApiKey = getEnv(c, 'BUILDER_API_KEY')
+ if (!builderUrl || !builderApiKey)
+ throw simpleError('builder_not_configured', 'BUILDER_URL or BUILDER_API_KEY missing')
+
+ const response = await fetch(`${builderUrl}${path}`, {
+ headers: {
+ 'x-api-key': builderApiKey,
+ 'accept': 'application/json',
+ },
+ })
+ const text = await response.text()
+ let body: unknown = null
+ try {
+ body = text ? JSON.parse(text) : null
+ }
+ catch {
+ body = { raw: text }
+ }
+ if (!response.ok && !options?.allowNonOk) {
+ throw simpleError('builder_status_fetch_failed', `Builder ${path} failed`, {
+ status: response.status,
+ body,
+ })
+ }
+ return body
+}
+
+export const app = createHono('', version)
+
+app.use('*', useCors)
+
+app.get('/', middlewareAuth(), async (c) => {
+ const { isAdmin, userId } = await verifyPlatformAdmin(c)
+ if (!isAdmin)
+ throw simpleError('not_authorized', 'Not authorized', { userId })
+
+ cloudlog({ requestId: c.get('requestId'), message: 'admin_builder_status', userId })
+
+ const [ok, runnersPayload] = await Promise.all([
+ fetchBuilder(c, '/ok', { allowNonOk: true }),
+ fetchBuilder(c, '/gitlab-emulator/runners'),
+ ])
+
+ return c.json({
+ ...BRES,
+ ok,
+ runners: runnersPayload,
+ })
+})
diff --git a/supabase/functions/private/index.ts b/supabase/functions/private/index.ts
index b6c3e12980..a7cae4f6f1 100644
--- a/supabase/functions/private/index.ts
+++ b/supabase/functions/private/index.ts
@@ -1,6 +1,7 @@
import { app as accept_invitation } from '../_backend/private/accept_invitation.ts'
import { app as admin_credits } from '../_backend/private/admin_credits.ts'
import { app as admin_stats } from '../_backend/private/admin_stats.ts'
+import { app as admin_builder_status } from '../_backend/private/admin_builder_status.ts'
import { app as channel_stats } from '../_backend/private/channel_stats.ts'
import { app as native_observe_stats } from '../_backend/private/native_observe_stats.ts'
import { app as channel_device } from '../_backend/private/channel_device.ts'
@@ -63,6 +64,7 @@ appGlobal.route('/download_link', download_link)
appGlobal.route('/log_as', log_as)
appGlobal.route('/admin_credits', admin_credits)
appGlobal.route('/admin_stats', admin_stats)
+appGlobal.route('/admin_builder_status', admin_builder_status)
appGlobal.route('/stats', stats_priv)
appGlobal.route('/stripe_checkout', stripe_checkout)
appGlobal.route('/stripe_portal', stripe_portal)