proper src structure, dockerfile, entrypoint

src/routes/api/prune/all/+server.ts

@@ -0,0 +1,24 @@
+import { json } from '@sveltejs/kit';
+import { pruneAll } from '$lib/server/docker';
+import { authorize } from '$lib/server/authorize';
+import type { RequestHandler } from './$types';
+
+export const POST: RequestHandler = async ({ url, cookies }) => {
+	const auth = await authorize(cookies);
+
+	const envId = url.searchParams.get('env');
+	const envIdNum = envId ? parseInt(envId) : undefined;
+
+	// Prune all requires remove permission on all resource types (with environment context)
+	if (auth.authEnabled && (!await auth.can('containers', 'remove', envIdNum) || !await auth.can('images', 'remove', envIdNum) || !await auth.can('volumes', 'remove', envIdNum) || !await auth.can('networks', 'remove', envIdNum))) {
+		return json({ error: 'Permission denied' }, { status: 403 });
+	}
+
+	try {
+		const result = await pruneAll(envIdNum);
+		return json({ success: true, result });
+	} catch (error: any) {
+		console.error('Error pruning all:', error?.message || error, error?.stack);
+		return json({ error: 'Failed to prune system', details: error?.message }, { status: 500 });
+	}
+};

src/routes/api/prune/containers/+server.ts

@@ -0,0 +1,24 @@
+import { json } from '@sveltejs/kit';
+import { pruneContainers } from '$lib/server/docker';
+import { authorize } from '$lib/server/authorize';
+import type { RequestHandler } from './$types';
+
+export const POST: RequestHandler = async ({ url, cookies }) => {
+	const auth = await authorize(cookies);
+
+	const envId = url.searchParams.get('env');
+	const envIdNum = envId ? parseInt(envId) : undefined;
+
+	// Permission check with environment context
+	if (auth.authEnabled && !await auth.can('containers', 'remove', envIdNum)) {
+		return json({ error: 'Permission denied' }, { status: 403 });
+	}
+
+	try {
+		const result = await pruneContainers(envIdNum);
+		return json({ success: true, result });
+	} catch (error) {
+		console.error('Error pruning containers:', error);
+		return json({ error: 'Failed to prune containers' }, { status: 500 });
+	}
+};

src/routes/api/prune/images/+server.ts

@@ -0,0 +1,25 @@
+import { json } from '@sveltejs/kit';
+import { pruneImages } from '$lib/server/docker';
+import { authorize } from '$lib/server/authorize';
+import type { RequestHandler } from './$types';
+
+export const POST: RequestHandler = async ({ url, cookies }) => {
+	const auth = await authorize(cookies);
+
+	const envId = url.searchParams.get('env');
+	const envIdNum = envId ? parseInt(envId) : undefined;
+	const danglingOnly = url.searchParams.get('dangling') !== 'false';
+
+	// Permission check with environment context
+	if (auth.authEnabled && !await auth.can('images', 'remove', envIdNum)) {
+		return json({ error: 'Permission denied' }, { status: 403 });
+	}
+
+	try {
+		const result = await pruneImages(danglingOnly, envIdNum);
+		return json({ success: true, result });
+	} catch (error) {
+		console.error('Error pruning images:', error);
+		return json({ error: 'Failed to prune images' }, { status: 500 });
+	}
+};

src/routes/api/prune/networks/+server.ts

@@ -0,0 +1,24 @@
+import { json } from '@sveltejs/kit';
+import { pruneNetworks } from '$lib/server/docker';
+import { authorize } from '$lib/server/authorize';
+import type { RequestHandler } from './$types';
+
+export const POST: RequestHandler = async ({ url, cookies }) => {
+	const auth = await authorize(cookies);
+
+	const envId = url.searchParams.get('env');
+	const envIdNum = envId ? parseInt(envId) : undefined;
+
+	// Permission check with environment context
+	if (auth.authEnabled && !await auth.can('networks', 'remove', envIdNum)) {
+		return json({ error: 'Permission denied' }, { status: 403 });
+	}
+
+	try {
+		const result = await pruneNetworks(envIdNum);
+		return json({ success: true, result });
+	} catch (error) {
+		console.error('Error pruning networks:', error);
+		return json({ error: 'Failed to prune networks' }, { status: 500 });
+	}
+};

src/routes/api/prune/volumes/+server.ts

@@ -0,0 +1,24 @@
+import { json } from '@sveltejs/kit';
+import { pruneVolumes } from '$lib/server/docker';
+import { authorize } from '$lib/server/authorize';
+import type { RequestHandler } from './$types';
+
+export const POST: RequestHandler = async ({ url, cookies }) => {
+	const auth = await authorize(cookies);
+
+	const envId = url.searchParams.get('env');
+	const envIdNum = envId ? parseInt(envId) : undefined;
+
+	// Permission check with environment context
+	if (auth.authEnabled && !await auth.can('volumes', 'remove', envIdNum)) {
+		return json({ error: 'Permission denied' }, { status: 403 });
+	}
+
+	try {
+		const result = await pruneVolumes(envIdNum);
+		return json({ success: true, result });
+	} catch (error) {
+		console.error('Error pruning volumes:', error);
+		return json({ error: 'Failed to prune volumes' }, { status: 500 });
+	}
+};