@selvajs/selva 4.11.0 → 4.13.0

package/build/server/chunks/entries/pages/admin/users/_page.svelte.js-C4Mq8ygj.js

@@ -0,0 +1,599 @@
+import { X as head, a4 as escape_html, $ as ensure_array_like, W as attr, T as derived, a2 as attr_class, Z as spread_props } from '../../../../chunks/server.js-BBls-Hb5.js';
+import { A as ALL_PLATFORM_PERMISSIONS } from '../../../../chunks/src.js-B12bUNyu.js';
+import { I as Icon } from '../../../../chunks/utils2.js-AVgqWIzH.js';
+import { B as Button } from '../../../../chunks/button.js-qfNojzVh.js';
+import { C as Chevron_down } from '../../../../chunks/chevron-down.js-D-VnQC_B.js';
+import { C as Chevron_right } from '../../../../chunks/chevron-right.js-CJpcaAs8.js';
+import { M as Mail } from '../../../../chunks/mail.js-CmzfKCP-.js';
+import { P as Plus } from '../../../../chunks/plus.js-CcF6StO5.js';
+import { S as Search } from '../../../../chunks/search.js-K7rREKTg.js';
+import { S as Shield_check } from '../../../../chunks/shield-check.js-CwOiSefU.js';
+import { T as Trash_2 } from '../../../../chunks/trash-2.js-FNU37NaI.js';
+import { X } from '../../../../chunks/x.js-CgwhOSyH.js';
+import { i as invalidateAll } from '../../../../chunks/client.js-DX66dUW0.js';
+import { S as SectionHeader } from '../../../../chunks/SectionHeader.js-ieB5RHqj.js';
+import { E as EmptyState } from '../../../../chunks/EmptyState.js-BaEePE-_.js';
+import { C as Card, a as Card_content } from '../../../../chunks/card-content.js-BlYu7dHI.js';
+import { I as Input } from '../../../../chunks/input.js-Bf18enzq.js';
+import { a as toast } from '../../../../chunks/toast-state.svelte.js-Cc8lQ5R4.js';
+import { p as primaryLabel, e as emailSubtitle } from '../../../../chunks/user-display.js-B3d-spft.js';
+import { U as UserAvatar } from '../../../../chunks/UserAvatar.js-NHTDeQUH.js';
+import '../../../../chunks/uneval.js-sOjdN_Ot.js';
+import 'clsx';
+import 'zod';
+import 'tailwind-merge';
+import 'tailwind-variants';
+import '../../../../chunks/index-server.js-Dvtc4kCu.js';
+import '../../../../chunks/shared.js-CFRExCya.js';
+import '@sveltejs/kit/internal';
+import '../../../../chunks/exports.js-ChuWbgid.js';
+import '../../../../chunks/routing.js-CQxfIlSu.js';
+import '../../../../chunks/internal2.js-C4TQI6g0.js';
+import '../../../../chunks/legacy-client.js-GIteUEz7.js';
+import '../../../../chunks/events.js-B5CKX0i1.js';
+import '@sveltejs/kit/internal/server';
+
+//#region ../../node_modules/.pnpm/@lucide+svelte@1.31.0_svelte@5.56.8_@typescript-eslint+types@8.67.0_/node_modules/@lucide/svelte/dist/icons/ban.svelte
+function Ban($$renderer, $$props) {
+	let { $$slots, $$events, ...props } = $$props;
+	Icon($$renderer, spread_props([
+		{ name: "ban" },
+		props,
+		{ iconNode: [["circle", {
+			"cx": "12",
+			"cy": "12",
+			"r": "10"
+		}], ["path", { "d": "M4.929 4.929 19.07 19.071" }]] }
+	]));
+}
+//#endregion
+//#region src/routes/admin/users/UserListItem.svelte
+function UserListItem($$renderer, $$props) {
+	$$renderer.component(($$renderer) => {
+		let { user, expanded, isPlatformAdmin, soleInstanceAdmin, updating, deleting, disabling, onDelete, onDisable } = $$props;
+		const PERM_LABEL = {
+			instance_admin: "Instance admin",
+			manage_instance_users: "Manage instance users",
+			manage_compute: "Manage compute",
+			manage_updates: "Manage updates",
+			manage_org_members: "Manage org members",
+			manage_org_compute: "Manage org compute",
+			manage_definitions: "Manage definitions",
+			manage_projects: "Manage projects"
+		};
+		const PERM_DESC = {
+			instance_admin: "Full access to every action on the instance.",
+			manage_instance_users: "Create, disable, and delete any user on the instance.",
+			manage_compute: "Configure the instance Rhino.Compute pool.",
+			manage_updates: "Run the application update script.",
+			manage_org_members: "Invite, remove, and change roles of org members.",
+			manage_org_compute: "Configure this org's BYO compute server.",
+			manage_definitions: "Upload, edit, and delete any definition in the org.",
+			manage_projects: "Create, edit, and delete any project in the org."
+		};
+		const ROLE_TONE = {
+			owner: "border-amber-500/40 text-amber-600 dark:text-amber-400 bg-amber-500/5",
+			admin: "border-blue-500/40 text-blue-600 dark:text-blue-400 bg-blue-500/5",
+			member: "border-border text-muted-foreground"
+		};
+		const displayLine = derived(() => {
+			const primary = primaryLabel(user, user.id);
+			const secondary = emailSubtitle(user);
+			return secondary ? `${primary} · ${secondary}` : primary;
+		});
+		const isOwnerOrAdmin = derived(() => user.orgRole === "owner" || user.orgRole === "admin");
+		const orgSummaryPerms = derived(() => isOwnerOrAdmin() ? [] : user.orgPermissions);
+		const targetIsPlatformAdmin = derived(() => user.platformPermissions.includes("instance_admin"));
+		const platformScopeLocked = derived(() => targetIsPlatformAdmin() && !isPlatformAdmin);
+		const removalBlockReason = derived(() => platformScopeLocked() ? "Only a platform admin can remove another platform admin." : soleInstanceAdmin ? "Cannot remove the only instance admin. Promote another user first." : null);
+		function checkboxState(perm) {
+			const checked = user.platformPermissions.includes(perm);
+			const platformLocked = !isPlatformAdmin;
+			const soleAdminLock = perm === "instance_admin" && soleInstanceAdmin;
+			return {
+				checked,
+				locked: platformLocked || soleAdminLock,
+				soleAdminLock,
+				platformLocked
+			};
+		}
+		$$renderer.push(`<div${attr_class(`px-4 py-3 ${expanded ? "bg-accent/20" : ""}`)}><div class="flex items-center gap-3"><button type="button" class="text-muted-foreground hover:text-foreground shrink-0 rounded-sm p-0.5"${attr("aria-label", expanded ? "Collapse permissions" : "Expand permissions")}>`);
+		if (expanded) {
+			$$renderer.push("<!--[0-->");
+			Chevron_down($$renderer, { class: "h-4 w-4" });
+		} else {
+			$$renderer.push("<!--[-1-->");
+			Chevron_right($$renderer, { class: "h-4 w-4" });
+		}
+		$$renderer.push(`<!--]--></button> `);
+		UserAvatar($$renderer, { name: primaryLabel(user, user.id) });
+		$$renderer.push(`<!----> <div class="min-w-0 flex-1"><div class="flex items-center gap-2"><p class="truncate text-sm font-medium">${escape_html(displayLine())}</p> `);
+		if (user.orgRole) {
+			$$renderer.push("<!--[0-->");
+			$$renderer.push(`<span${attr_class(`rounded-full border px-2 py-0.5 font-mono text-[10px] tracking-wide uppercase ${ROLE_TONE[user.orgRole]}`)}>${escape_html(user.orgRole)}</span>`);
+		} else $$renderer.push("<!--[-1-->");
+		$$renderer.push(`<!--]--> `);
+		if (user.disabled) {
+			$$renderer.push("<!--[0-->");
+			$$renderer.push(`<span class="border-border bg-muted text-muted-foreground rounded-full border px-2 py-0.5 font-mono text-[10px] tracking-wide uppercase">disabled</span>`);
+		} else if (!user.lastLoginAt) {
+			$$renderer.push("<!--[1-->");
+			$$renderer.push(`<span class="rounded-full border border-amber-500/40 bg-amber-500/5 px-2 py-0.5 font-mono text-[10px] tracking-wide text-amber-600 uppercase dark:text-amber-400" title="Provisioned but has never signed in. Permissions take effect on first login.">never signed in</span>`);
+		} else $$renderer.push("<!--[-1-->");
+		$$renderer.push(`<!--]--></div> <p class="text-muted-foreground truncate font-mono text-xs">${escape_html(user.id)}</p> `);
+		if (!expanded && (user.platformPermissions.length > 0 || orgSummaryPerms().length > 0)) {
+			$$renderer.push("<!--[0-->");
+			$$renderer.push(`<div class="mt-1.5 flex flex-wrap gap-1"><!--[-->`);
+			const each_array = ensure_array_like(user.platformPermissions);
+			for (let $$index = 0, $$length = each_array.length; $$index < $$length; $$index++) {
+				let p = each_array[$$index];
+				$$renderer.push(`<span class="rounded-full bg-amber-500/10 px-2 py-0.5 font-mono text-[10px] text-amber-700 dark:text-amber-400">${escape_html(PERM_LABEL[p])}</span>`);
+			}
+			$$renderer.push(`<!--]--> <!--[-->`);
+			const each_array_1 = ensure_array_like(orgSummaryPerms());
+			for (let $$index_1 = 0, $$length = each_array_1.length; $$index_1 < $$length; $$index_1++) {
+				let p = each_array_1[$$index_1];
+				$$renderer.push(`<span class="bg-muted text-muted-foreground rounded-full px-2 py-0.5 font-mono text-[10px]">${escape_html(PERM_LABEL[p])}</span>`);
+			}
+			$$renderer.push(`<!--]--></div>`);
+		} else $$renderer.push("<!--[-1-->");
+		$$renderer.push(`<!--]--></div> `);
+		if (!user.disabled) {
+			$$renderer.push("<!--[0-->");
+			Button($$renderer, {
+				size: "sm",
+				variant: "ghost",
+				disabled: disabling || !!removalBlockReason(),
+				onclick: onDisable,
+				title: removalBlockReason() ?? "Disable user — they keep their history but cannot sign in",
+				class: "text-muted-foreground hover:text-foreground h-8 w-8 shrink-0 p-0",
+				children: ($$renderer) => {
+					Ban($$renderer, { class: "h-4 w-4" });
+				},
+				$$slots: { default: true }
+			});
+		} else $$renderer.push("<!--[-1-->");
+		$$renderer.push(`<!--]--> `);
+		Button($$renderer, {
+			size: "sm",
+			variant: "ghost",
+			disabled: deleting || !!removalBlockReason(),
+			onclick: onDelete,
+			title: removalBlockReason() ?? "Delete user",
+			class: "text-destructive hover:text-destructive h-8 w-8 shrink-0 p-0",
+			children: ($$renderer) => {
+				Trash_2($$renderer, { class: "h-4 w-4" });
+			},
+			$$slots: { default: true }
+		});
+		$$renderer.push(`<!----></div> `);
+		if (expanded) {
+			$$renderer.push("<!--[0-->");
+			$$renderer.push(`<div class="mt-4 ml-10 space-y-4"><section><h4 class="text-muted-foreground mb-2 text-xs font-medium tracking-wider uppercase">Platform</h4> <div class="grid gap-2 sm:grid-cols-2"><!--[-->`);
+			const each_array_2 = ensure_array_like(ALL_PLATFORM_PERMISSIONS);
+			for (let $$index_2 = 0, $$length = each_array_2.length; $$index_2 < $$length; $$index_2++) {
+				let p = each_array_2[$$index_2];
+				const state = checkboxState(p);
+				$$renderer.push(`<label${attr_class(`flex items-start gap-2 rounded-md border p-2.5 ${state.locked ? "border-border cursor-not-allowed opacity-60" : "border-border hover:bg-accent/40 cursor-pointer"}`)}${attr("title", state.soleAdminLock ? "Cannot remove the only instance admin." : void 0)}><input type="checkbox" class="mt-0.5 shrink-0"${attr("checked", state.checked, true)}${attr("disabled", updating || state.locked, true)}/> <div class="min-w-0"><p class="text-sm leading-tight font-medium">${escape_html(PERM_LABEL[p])}</p> <p class="text-muted-foreground mt-0.5 text-xs">${escape_html(PERM_DESC[p])}</p></div></label>`);
+			}
+			$$renderer.push(`<!--]--></div></section> <section><h4 class="text-muted-foreground mb-2 text-xs font-medium tracking-wider uppercase">Organization</h4> `);
+			if (!user.orgRole) {
+				$$renderer.push("<!--[0-->");
+				$$renderer.push(`<p class="text-muted-foreground text-sm">Not a member of the active organization.</p>`);
+			} else {
+				$$renderer.push("<!--[-1-->");
+				$$renderer.push(`<p class="text-muted-foreground text-sm">`);
+				if (isOwnerOrAdmin()) {
+					$$renderer.push("<!--[0-->");
+					$$renderer.push(`<strong class="text-foreground capitalize">${escape_html(user.orgRole)}s</strong> hold every organization
+							permission.`);
+				} else if (user.orgPermissions.length > 0) {
+					$$renderer.push("<!--[1-->");
+					$$renderer.push(`Member, holding ${escape_html(user.orgPermissions.map((p) => PERM_LABEL[p]).join(", "))}.`);
+				} else {
+					$$renderer.push("<!--[-1-->");
+					$$renderer.push(`Member, with no organization permissions granted.`);
+				}
+				$$renderer.push(`<!--]--></p> <p class="text-muted-foreground mt-2 text-xs">Role and organization permissions are managed at <a href="/team/members" class="underline">Members &amp; roles</a>.</p>`);
+			}
+			$$renderer.push(`<!--]--></section></div>`);
+		} else $$renderer.push("<!--[-1-->");
+		$$renderer.push(`<!--]--></div>`);
+	});
+}
+//#endregion
+//#region src/routes/admin/users/+page.svelte
+function _page($$renderer, $$props) {
+	$$renderer.component(($$renderer) => {
+		/** Instance-wide, not page-derived. `null` when the count failed. */
+		let { data } = $$props;
+		const assignablePermissions = derived(() => data.isPlatformAdmin ? [...ALL_PLATFORM_PERMISSIONS] : []);
+		const PERMISSION_LABELS = {
+			instance_admin: "Instance admin",
+			manage_instance_users: "Manage instance users",
+			manage_compute: "Manage compute",
+			manage_updates: "Manage updates"
+		};
+		const ORG_ROLES = [
+			"owner",
+			"admin",
+			"member"
+		];
+		let showAddForm = false;
+		let newEmail = "";
+		let newPermissions = [];
+		let adding = false;
+		let deletingId = null;
+		let disablingId = null;
+		let updatingId = null;
+		let expandedUserId = null;
+		let query = "";
+		let roleFilter = "all";
+		let permissionFilter = "all";
+		let statusFilter = "all";
+		const filtersActive = derived(() => query.trim() !== "" || roleFilter !== "all" || permissionFilter !== "all" || statusFilter !== "all");
+		function matchesQuery(user, needle) {
+			return [
+				user.displayName,
+				user.email,
+				user.id
+			].some((field) => field?.toLowerCase().includes(needle));
+		}
+		function matchesStatus(user) {
+			switch (statusFilter) {
+				case "enabled": return !user.disabled;
+				case "disabled": return !!user.disabled;
+				case "never-signed-in": return !user.lastLoginAt;
+				default: return true;
+			}
+		}
+		const visibleUsers = derived(() => {
+			const needle = query.trim().toLowerCase();
+			return (data.users ?? []).filter((user) => (needle === "" || matchesQuery(user, needle)) && (roleFilter === "all" || user.orgRole === roleFilter) && (permissionFilter === "all" || user.platformPermissions.includes(permissionFilter)) && matchesStatus(user));
+		});
+		function clearFilters() {
+			query = "";
+			roleFilter = "all";
+			permissionFilter = "all";
+			statusFilter = "all";
+		}
+		const isSoleInstanceAdmin = (user) => data.enabledInstanceAdminCount === 1 && !user.disabled && user.platformPermissions.includes("instance_admin");
+		async function addUser() {
+			adding = true;
+			try {
+				const res = await fetch("/api/admin/users", {
+					method: "POST",
+					headers: { "Content-Type": "application/json" },
+					body: JSON.stringify({
+						email: newEmail,
+						permissions: newPermissions
+					})
+				});
+				if (res.ok) {
+					toast.success(`${newEmail} can now sign in via ${data.provider.name}`);
+					newEmail = "";
+					newPermissions = [];
+					showAddForm = false;
+					await invalidateAll();
+				} else {
+					const err = await res.json().catch(() => ({ error: "Unknown error" }));
+					toast.error(err.message || err.error || "Failed to create user");
+				}
+			} catch {
+				toast.error("Failed to create user");
+			} finally {
+				adding = false;
+			}
+		}
+		async function disableUser(id, email) {
+			if (!confirm(`Disable "${email}"? They keep their identity and history but cannot sign in. There is no way to re-enable them from this page.`)) return;
+			disablingId = id;
+			try {
+				const res = await fetch(`/api/admin/users/${id}/disable`, { method: "POST" });
+				if (res.ok) {
+					toast.success(`User "${email}" disabled`);
+					await invalidateAll();
+				} else {
+					const err = await res.json().catch(() => ({}));
+					toast.error(err.message || err.error || "Failed to disable user");
+				}
+			} catch {
+				toast.error("Failed to disable user");
+			} finally {
+				disablingId = null;
+			}
+		}
+		async function deleteUser(id, email) {
+			if (!confirm(`Delete user "${email}"? This cannot be undone.`)) return;
+			deletingId = id;
+			try {
+				const res = await fetch(`/api/admin/users/${id}`, { method: "DELETE" });
+				if (res.ok) {
+					toast.success(`User "${email}" deleted`);
+					await invalidateAll();
+				} else {
+					const err = await res.json().catch(() => ({}));
+					toast.error(err.message || err.error || "Failed to delete user");
+				}
+			} catch {
+				toast.error("Failed to delete user");
+			} finally {
+				deletingId = null;
+			}
+		}
+		let $$settled = true;
+		let $$inner_renderer;
+		function $$render_inner($$renderer) {
+			head("1p497kv", $$renderer, ($$renderer) => {
+				$$renderer.title(($$renderer) => {
+					$$renderer.push(`<title>Admin · Users</title>`);
+				});
+			});
+			$$renderer.push(`<div class="space-y-6">`);
+			{
+				function actions($$renderer) {
+					if (data.users !== null) {
+						$$renderer.push("<!--[0-->");
+						if (data.provider.userCreation === "email-only") {
+							$$renderer.push("<!--[0-->");
+							Button($$renderer, {
+								onclick: () => showAddForm = !showAddForm,
+								variant: showAddForm ? "outline" : "default",
+								children: ($$renderer) => {
+									Plus($$renderer, { class: "mr-2 h-4 w-4" });
+									$$renderer.push(`<!----> Allowlist user`);
+								},
+								$$slots: { default: true }
+							});
+						} else {
+							$$renderer.push("<!--[-1-->");
+							Button($$renderer, {
+								href: "/team/members",
+								variant: "default",
+								children: ($$renderer) => {
+									Mail($$renderer, { class: "mr-2 h-4 w-4" });
+									$$renderer.push(`<!----> Invite member`);
+								},
+								$$slots: { default: true }
+							});
+						}
+						$$renderer.push(`<!--]-->`);
+					} else $$renderer.push("<!--[-1-->");
+					$$renderer.push(`<!--]-->`);
+				}
+				SectionHeader($$renderer, {
+					eyebrow: "Admin",
+					title: "Users",
+					description: data.users === null ? "The current auth provider does not expose a user store. Configure DATA_PATH (local provider) or check your provider wiring." : `${data.users.length} user${data.users.length === 1 ? "" : "s"} on this instance.`,
+					actions});
+			}
+			$$renderer.push(`<!----> `);
+			if (Card) {
+				$$renderer.push("<!--[-->");
+				Card($$renderer, {
+					children: ($$renderer) => {
+						if (Card_content) {
+							$$renderer.push("<!--[-->");
+							Card_content($$renderer, {
+								class: "space-y-4 pt-6",
+								children: ($$renderer) => {
+									if (showAddForm) {
+										$$renderer.push("<!--[0-->");
+										$$renderer.push(`<div class="bg-muted/40 space-y-3 rounded-lg border p-4"><p class="text-sm font-medium">New User</p> `);
+										Input($$renderer, {
+											type: "email",
+											placeholder: "Email",
+											get value() {
+												return newEmail;
+											},
+											set value($$value) {
+												newEmail = $$value;
+												$$settled = false;
+											}
+										});
+										$$renderer.push(`<!----> <p class="text-muted-foreground text-xs">This user will authenticate via ${escape_html(data.provider.name)}. No password is stored.</p> `);
+										if (data.isPlatformAdmin) {
+											$$renderer.push("<!--[0-->");
+											$$renderer.push(`<div><p class="mb-2 text-xs font-medium">Instance permissions</p> <p class="text-muted-foreground mb-2 text-xs">Apply across the whole instance. The user joins the active organization as a <span class="font-mono">member</span>; grant them access there from <a href="/team/members" class="underline">Members &amp; roles</a>.</p> <div class="flex flex-wrap gap-3"><!--[-->`);
+											const each_array = ensure_array_like(assignablePermissions());
+											for (let $$index = 0, $$length = each_array.length; $$index < $$length; $$index++) {
+												let p = each_array[$$index];
+												$$renderer.push(`<label class="flex cursor-pointer items-center gap-1.5 text-xs"><input type="checkbox"${attr("checked", newPermissions.includes(p), true)}/> ${escape_html(PERMISSION_LABELS[p])}</label>`);
+											}
+											$$renderer.push(`<!--]--></div></div>`);
+										} else {
+											$$renderer.push("<!--[-1-->");
+											$$renderer.push(`<p class="text-muted-foreground text-xs">The user joins the active organization as a <span class="font-mono">member</span>.
+							Grant them access from <a href="/team/members" class="underline">Members &amp; roles</a>.</p>`);
+										}
+										$$renderer.push(`<!--]--> <div class="flex gap-2">`);
+										Button($$renderer, {
+											onclick: addUser,
+											disabled: adding || !newEmail,
+											children: ($$renderer) => {
+												$$renderer.push(`<!---->${escape_html(adding ? "Adding…" : "Allowlist user")}`);
+											},
+											$$slots: { default: true }
+										});
+										$$renderer.push(`<!----> `);
+										Button($$renderer, {
+											variant: "outline",
+											onclick: () => showAddForm = false,
+											children: ($$renderer) => {
+												$$renderer.push(`<!---->Cancel`);
+											},
+											$$slots: { default: true }
+										});
+										$$renderer.push(`<!----></div></div>`);
+									} else $$renderer.push("<!--[-1-->");
+									$$renderer.push(`<!--]--> `);
+									if (data.users === null) {
+										$$renderer.push("<!--[0-->");
+										{
+											function body($$renderer) {
+												$$renderer.push(`<!---->Set <code class="text-xs">DATA_PATH</code> (local provider) or check your provider
+						selection in <code class="text-xs">.env</code>.`);
+											}
+											EmptyState($$renderer, {
+												icon: Shield_check,
+												title: "User store unavailable",
+												body});
+										}
+									} else if (data.users.length === 0) {
+										$$renderer.push("<!--[1-->");
+										EmptyState($$renderer, {
+											title: "No users yet",
+											description: "Add your first user above."
+										});
+									} else {
+										$$renderer.push("<!--[-1-->");
+										$$renderer.push(`<div class="flex flex-col gap-2 sm:flex-row sm:items-center"><div class="relative flex-1">`);
+										Search($$renderer, { class: "text-muted-foreground pointer-events-none absolute top-1/2 left-3 h-4 w-4 -translate-y-1/2" });
+										$$renderer.push(`<!----> `);
+										Input($$renderer, {
+											type: "search",
+											placeholder: "Search name, email, or ID",
+											class: "pl-9",
+											get value() {
+												return query;
+											},
+											set value($$value) {
+												query = $$value;
+												$$settled = false;
+											}
+										});
+										$$renderer.push(`<!----></div> `);
+										$$renderer.select({
+											value: roleFilter,
+											"aria-label": "Filter by role in the active organization",
+											class: "border-input bg-background h-9 rounded-md border px-3 text-sm"
+										}, ($$renderer) => {
+											$$renderer.option({ value: "all" }, ($$renderer) => {
+												$$renderer.push(`All org roles`);
+											});
+											$$renderer.push(`<!--[-->`);
+											const each_array_1 = ensure_array_like(ORG_ROLES);
+											for (let $$index_1 = 0, $$length = each_array_1.length; $$index_1 < $$length; $$index_1++) {
+												let role = each_array_1[$$index_1];
+												$$renderer.option({ value: role }, ($$renderer) => {
+													$$renderer.push(`${escape_html(role)}`);
+												});
+											}
+											$$renderer.push(`<!--]-->`);
+										});
+										$$renderer.push(` `);
+										$$renderer.select({
+											value: permissionFilter,
+											"aria-label": "Filter by instance permission",
+											class: "border-input bg-background h-9 rounded-md border px-3 text-sm"
+										}, ($$renderer) => {
+											$$renderer.option({ value: "all" }, ($$renderer) => {
+												$$renderer.push(`All instance permissions`);
+											});
+											$$renderer.push(`<!--[-->`);
+											const each_array_2 = ensure_array_like(assignablePermissions());
+											for (let $$index_2 = 0, $$length = each_array_2.length; $$index_2 < $$length; $$index_2++) {
+												let p = each_array_2[$$index_2];
+												$$renderer.option({ value: p }, ($$renderer) => {
+													$$renderer.push(`${escape_html(PERMISSION_LABELS[p])}`);
+												});
+											}
+											$$renderer.push(`<!--]-->`);
+										});
+										$$renderer.push(` `);
+										$$renderer.select({
+											value: statusFilter,
+											"aria-label": "Filter by status",
+											class: "border-input bg-background h-9 rounded-md border px-3 text-sm"
+										}, ($$renderer) => {
+											$$renderer.option({ value: "all" }, ($$renderer) => {
+												$$renderer.push(`Any status`);
+											});
+											$$renderer.option({ value: "enabled" }, ($$renderer) => {
+												$$renderer.push(`Enabled`);
+											});
+											$$renderer.option({ value: "disabled" }, ($$renderer) => {
+												$$renderer.push(`Disabled`);
+											});
+											$$renderer.option({ value: "never-signed-in" }, ($$renderer) => {
+												$$renderer.push(`Never signed in`);
+											});
+										});
+										$$renderer.push(` `);
+										if (filtersActive()) {
+											$$renderer.push("<!--[0-->");
+											Button($$renderer, {
+												variant: "ghost",
+												size: "sm",
+												onclick: clearFilters,
+												children: ($$renderer) => {
+													X($$renderer, { class: "mr-1.5 h-3.5 w-3.5" });
+													$$renderer.push(`<!----> Clear`);
+												},
+												$$slots: { default: true }
+											});
+										} else $$renderer.push("<!--[-1-->");
+										$$renderer.push(`<!--]--></div> `);
+										if (filtersActive()) {
+											$$renderer.push("<!--[0-->");
+											$$renderer.push(`<p class="text-muted-foreground text-xs">${escape_html(visibleUsers().length)} of ${escape_html(data.users.length)} users</p>`);
+										} else $$renderer.push("<!--[-1-->");
+										$$renderer.push(`<!--]--> `);
+										if (visibleUsers().length === 0) {
+											$$renderer.push("<!--[0-->");
+											EmptyState($$renderer, {
+												title: "No matching users",
+												description: "Adjust or clear the filters above."
+											});
+										} else {
+											$$renderer.push("<!--[-1-->");
+											$$renderer.push(`<div class="divide-y rounded-lg border"><!--[-->`);
+											const each_array_3 = ensure_array_like(visibleUsers());
+											for (let $$index_3 = 0, $$length = each_array_3.length; $$index_3 < $$length; $$index_3++) {
+												let user = each_array_3[$$index_3];
+												UserListItem($$renderer, {
+													user,
+													expanded: expandedUserId === user.id,
+													isPlatformAdmin: data.isPlatformAdmin,
+													soleInstanceAdmin: isSoleInstanceAdmin(user),
+													updating: updatingId === user.id,
+													deleting: deletingId === user.id,
+													disabling: disablingId === user.id,
+													onDelete: () => deleteUser(user.id, user.email ?? user.id),
+													onDisable: () => disableUser(user.id, user.email ?? user.id)
+												});
+											}
+											$$renderer.push(`<!--]--></div>`);
+										}
+										$$renderer.push(`<!--]-->`);
+									}
+									$$renderer.push(`<!--]-->`);
+								},
+								$$slots: { default: true }
+							});
+							$$renderer.push("<!--]-->");
+						} else {
+							$$renderer.push("<!--[!-->");
+							$$renderer.push("<!--]-->");
+						}
+					},
+					$$slots: { default: true }
+				});
+				$$renderer.push("<!--]-->");
+			} else {
+				$$renderer.push("<!--[!-->");
+				$$renderer.push("<!--]-->");
+			}
+			$$renderer.push(`</div>`);
+		}
+		do {
+			$$settled = true;
+			$$inner_renderer = $$renderer.copy();
+			$$render_inner($$inner_renderer);
+		} while (!$$settled);
+		$$renderer.subsume($$inner_renderer);
+	});
+}
+
+export { _page as default };
+//# sourceMappingURL=_page.svelte.js-C4Mq8ygj.js.map