@selvajs/selva 4.16.1 → 4.16.2

package/build/server/chunks/entries/pages/admin/_error.svelte.js-CWPVdMhU.js

@@ -0,0 +1,37 @@
+import 'clsx';
+import { p as page } from '../../../chunks/state.js-CzRoA3Gr.js';
+import { E as ErrorScreen } from '../../../chunks/ErrorScreen.js-DhXSfajf.js';
+import '../../../chunks/server.js-fxznQVe4.js';
+import '../../../chunks/uneval.js-sOjdN_Ot.js';
+import '../../../chunks/client.js-D3xDFDYP.js';
+import '../../../chunks/index-server.js-gS5cdWCH.js';
+import '../../../chunks/shared.js-JbueMana.js';
+import '@sveltejs/kit/internal';
+import '../../../chunks/exports.js-CPkIuisC.js';
+import '../../../chunks/routing.js-C2Q7p_y3.js';
+import '../../../chunks/internal2.js-Brm_q2Rr.js';
+import '../../../chunks/legacy-client.js-B6XuTI3b.js';
+import '../../../chunks/events.js-DCr2n6fH.js';
+import '@sveltejs/kit/internal/server';
+import '../../../chunks/utils2.js-RqmNbcNh.js';
+import 'tailwind-merge';
+import '../../../chunks/button.js-DbB0dwmm.js';
+import 'tailwind-variants';
+import '../../../chunks/circle-alert.js-DflREk0J.js';
+import '../../../chunks/card-content.js-DO1tWfLJ.js';
+import '../../../chunks/card-title.js-D5QL4vvE.js';
+
+//#region src/routes/admin/+error.svelte
+function _error($$renderer, $$props) {
+	$$renderer.component(($$renderer) => {
+		$$renderer.push(`<div class="px-6 py-6">`);
+		ErrorScreen($$renderer, {
+			status: page.status,
+			message: page.error?.message
+		});
+		$$renderer.push(`<!----></div>`);
+	});
+}
+
+export { _error as default };
+//# sourceMappingURL=_error.svelte.js-CWPVdMhU.js.map

package/build/server/chunks/entries/pages/admin/_error.svelte.js-CWPVdMhU.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_error.svelte.js-CWPVdMhU.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/admin/_error.svelte.js"],"sourcesContent":["import \"../../../chunks/server.js\";\nimport { t as page } from \"../../../chunks/state.js\";\nimport { t as ErrorScreen } from \"../../../chunks/ErrorScreen.js\";\n//#region src/routes/admin/+error.svelte\nfunction _error($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\t$$renderer.push(`<div class=\"px-6 py-6\">`);\n\t\tErrorScreen($$renderer, {\n\t\t\tstatus: page.status,\n\t\t\tmessage: page.error?.message\n\t\t});\n\t\t$$renderer.push(`<!----></div>`);\n\t});\n}\n//#endregion\nexport { _error as default };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAGA;AACA,SAAS,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE;AACrC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,uBAAuB,CAAC,CAAC;AAC5C,EAAE,WAAW,CAAC,UAAU,EAAE;AAC1B,GAAG,MAAM,EAAE,IAAI,CAAC,MAAM;AACtB,GAAG,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE;AACxB,GAAG,CAAC;AACJ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/entries/pages/admin/_layout.server.ts.js-BbHjfG8A.js

@@ -0,0 +1,31 @@
+import { c as getTenancy, j as flag, l as getAuditQuery } from '../../../chunks/providers.server.js-CrzKLXpj.js';
+import { a as assertAnyPlatformPermission } from '../../../chunks/access2.server.js-Coy94e8f.js';
+import { redirect } from '@sveltejs/kit';
+
+//#region src/routes/admin/+layout.server.ts
+/**
+* `/admin` is a platform-scope surface — instance operators and Selva staff
+* only. Holding only org-class permissions (`manage_org_members`,
+* `manage_org_compute`, `manage_definitions`, `manage_projects`) does NOT
+* admit you here, even though those permissions also start with `manage_`.
+* Org admins get their own surface elsewhere — `/team/*` (see docs/contributing/permissions.md §8).
+*/
+var load = async ({ locals }) => {
+	if (!locals.ctx) redirect(303, "/login");
+	assertAnyPlatformPermission(locals);
+	return {
+		platformPermissions: locals.ctx.platformPermissions,
+		orgPermissions: locals.ctx.orgPermissions,
+		auditAvailable: getAuditQuery() !== null,
+		platformProjectsEnabled: flag("ENABLE_PLATFORM_PROJECTS"),
+		tenancy: getTenancy()
+	};
+};
+
+var _layout_server_ts = /*#__PURE__*/Object.freeze({
+	__proto__: null,
+	load: load
+});
+
+export { _layout_server_ts as _ };
+//# sourceMappingURL=_layout.server.ts.js-BbHjfG8A.js.map

package/build/server/chunks/entries/pages/admin/_layout.server.ts.js-BbHjfG8A.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_layout.server.ts.js-BbHjfG8A.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/admin/_layout.server.ts.js"],"sourcesContent":["import { S as getTenancy, n as getAuditQuery, t as flag } from \"../../../chunks/providers.server.js\";\nimport { n as assertAnyPlatformPermission } from \"../../../chunks/access2.server.js\";\nimport { redirect } from \"@sveltejs/kit\";\n//#region src/routes/admin/+layout.server.ts\n/**\n* `/admin` is a platform-scope surface — instance operators and Selva staff\n* only. Holding only org-class permissions (`manage_org_members`,\n* `manage_org_compute`, `manage_definitions`, `manage_projects`) does NOT\n* admit you here, even though those permissions also start with `manage_`.\n* Org admins get their own surface elsewhere — `/team/*` (see docs/contributing/permissions.md §8).\n*/\nvar load = async ({ locals }) => {\n\tif (!locals.ctx) redirect(303, \"/login\");\n\tassertAnyPlatformPermission(locals);\n\treturn {\n\t\tplatformPermissions: locals.ctx.platformPermissions,\n\t\torgPermissions: locals.ctx.orgPermissions,\n\t\tauditAvailable: getAuditQuery() !== null,\n\t\tplatformProjectsEnabled: flag(\"ENABLE_PLATFORM_PROJECTS\"),\n\t\ttenancy: getTenancy()\n\t};\n};\n//#endregion\nexport { load };\n"],"names":[],"mappings":";;;;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AACjC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;AACzC,CAAC,2BAA2B,CAAC,MAAM,CAAC;AACpC,CAAC,OAAO;AACR,EAAE,mBAAmB,EAAE,MAAM,CAAC,GAAG,CAAC,mBAAmB;AACrD,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc;AAC3C,EAAE,cAAc,EAAE,aAAa,EAAE,KAAK,IAAI;AAC1C,EAAE,uBAAuB,EAAE,IAAI,CAAC,0BAA0B,CAAC;AAC3D,EAAE,OAAO,EAAE,UAAU;AACrB,EAAE;AACF,CAAC;;;;;;;;;"}

package/build/server/chunks/entries/pages/admin/_layout.svelte.js-C9hPSe68.js

@@ -0,0 +1,124 @@
+import { T as derived } from '../../../chunks/server.js-fxznQVe4.js';
+import { B as Building_2 } from '../../../chunks/building-2.js-B2qqphi2.js';
+import { F as Folders } from '../../../chunks/folders.js-DTVFHTpC.js';
+import { G as Gauge } from '../../../chunks/gauge.js-CH3EaFeI.js';
+import { S as Scroll_text } from '../../../chunks/scroll-text.js-CC4wsu-C.js';
+import { S as Server } from '../../../chunks/server2.js-B1Z22rWd.js';
+import { S as Settings } from '../../../chunks/settings.js-ClaRhfQF.js';
+import { U as Users } from '../../../chunks/users.js-BLt400qR.js';
+import { S as SideNav } from '../../../chunks/SideNav.js-baLtSrLY.js';
+import { A as AppHeader } from '../../../chunks/AppHeader.js-BiEGhZxl.js';
+import '../../../chunks/uneval.js-sOjdN_Ot.js';
+import 'clsx';
+import '../../../chunks/utils2.js-RqmNbcNh.js';
+import 'tailwind-merge';
+import '../../../chunks/state.js-CzRoA3Gr.js';
+import '../../../chunks/client.js-D3xDFDYP.js';
+import '../../../chunks/index-server.js-gS5cdWCH.js';
+import '../../../chunks/shared.js-JbueMana.js';
+import '@sveltejs/kit/internal';
+import '../../../chunks/exports.js-CPkIuisC.js';
+import '../../../chunks/routing.js-C2Q7p_y3.js';
+import '../../../chunks/internal2.js-Brm_q2Rr.js';
+import '../../../chunks/legacy-client.js-B6XuTI3b.js';
+import '../../../chunks/events.js-DCr2n6fH.js';
+import '@sveltejs/kit/internal/server';
+import '../../../chunks/SettingsMenu.js-B5TBSMrK.js';
+import '../../../chunks/src.js-Cf1j97Z6.js';
+import 'zod';
+import '../../../chunks/core-PfYDuaFq.js-D1BnOFeu.js';
+import '../../../chunks/footerContext.svelte.js-GNNlOmlv.js';
+import '../../../chunks/index-server2.js-siA98IdX.js';
+import '../../../chunks/create-id.js-S9AoBzd9.js';
+import '../../../chunks/button.js-DbB0dwmm.js';
+import 'tailwind-variants';
+import '../../../chunks/chevron-down.js-BDXhP2jb.js';
+import '../../../chunks/chevron-right.js-DHiwRcHz.js';
+import '../../../chunks/circle-alert.js-DflREk0J.js';
+import '../../../chunks/shield.js-DkHHoUTl.js';
+import '../../../chunks/triangle-alert.js-B55Ovp_J.js';
+import '../../../chunks/scroll-lock.js-BxB04xoK.js';
+import '../../../chunks/dialog-description.js-huVQABpc.js';
+import '../../../chunks/dialog.js-ChaJ-n8s.js';
+import '../../../chunks/x.js-DsqVhvY1.js';
+
+//#region src/routes/admin/+layout.svelte
+function _layout($$renderer, $$props) {
+	$$renderer.component(($$renderer) => {
+		let { data, children } = $$props;
+		const can = (p) => {
+			if (data.platformPermissions.includes("instance_admin")) return true;
+			if (data.platformPermissions.includes(p)) return true;
+			return data.orgPermissions.includes(p);
+		};
+		const items = derived(() => [
+			{
+				href: "/admin",
+				label: "General",
+				icon: Gauge,
+				show: true
+			},
+			{
+				href: "/admin/organizations",
+				label: "Organizations",
+				icon: Building_2,
+				match: "prefix",
+				show: can("instance_admin") && data.tenancy !== "single"
+			},
+			{
+				href: "/admin/projects",
+				label: "Projects",
+				icon: Folders,
+				match: "prefix",
+				show: can("instance_admin") && data.platformProjectsEnabled
+			},
+			{
+				href: "/admin/users",
+				label: "Users",
+				icon: Users,
+				match: "prefix",
+				show: can("manage_instance_users")
+			},
+			{
+				href: "/admin/compute",
+				label: "Compute",
+				icon: Server,
+				match: "prefix",
+				show: can("manage_compute")
+			},
+			{
+				href: "/admin/system",
+				label: "System",
+				icon: Settings,
+				match: "prefix",
+				show: can("manage_updates")
+			},
+			{
+				href: "/admin/audit",
+				label: "Audit log",
+				icon: Scroll_text,
+				match: "prefix",
+				show: can("instance_admin") && data.auditAvailable
+			}
+		].filter((i) => i.show));
+		{
+			function sidenav($$renderer) {
+				SideNav($$renderer, {
+					items: items(),
+					eyebrow: "Platform",
+					border: false
+				});
+			}
+			AppHeader($$renderer, {
+				sidenav,
+				children: ($$renderer) => {
+					$$renderer.push(`<div class="px-(--page-px) py-(--page-py)">`);
+					children?.($$renderer);
+					$$renderer.push(`<!----></div>`);
+				}});
+		}
+	});
+}
+
+export { _layout as default };
+//# sourceMappingURL=_layout.svelte.js-C9hPSe68.js.map

package/build/server/chunks/entries/pages/admin/_layout.svelte.js-C9hPSe68.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_layout.svelte.js-C9hPSe68.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/admin/_layout.svelte.js"],"sourcesContent":["import { a as derived } from \"../../../chunks/server.js\";\nimport { t as Building_2 } from \"../../../chunks/building-2.js\";\nimport { t as Folders } from \"../../../chunks/folders.js\";\nimport { t as Gauge } from \"../../../chunks/gauge.js\";\nimport { t as Scroll_text } from \"../../../chunks/scroll-text.js\";\nimport { t as Server } from \"../../../chunks/server2.js\";\nimport { t as Settings } from \"../../../chunks/settings.js\";\nimport { t as Users } from \"../../../chunks/users.js\";\nimport { t as SideNav } from \"../../../chunks/SideNav.js\";\nimport { t as AppHeader } from \"../../../chunks/AppHeader.js\";\n//#region src/routes/admin/+layout.svelte\nfunction _layout($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\tlet { data, children } = $$props;\n\t\tconst can = (p) => {\n\t\t\tif (data.platformPermissions.includes(\"instance_admin\")) return true;\n\t\t\tif (data.platformPermissions.includes(p)) return true;\n\t\t\treturn data.orgPermissions.includes(p);\n\t\t};\n\t\tconst items = derived(() => [\n\t\t\t{\n\t\t\t\thref: \"/admin\",\n\t\t\t\tlabel: \"General\",\n\t\t\t\ticon: Gauge,\n\t\t\t\tshow: true\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/organizations\",\n\t\t\t\tlabel: \"Organizations\",\n\t\t\t\ticon: Building_2,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"instance_admin\") && data.tenancy !== \"single\"\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/projects\",\n\t\t\t\tlabel: \"Projects\",\n\t\t\t\ticon: Folders,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"instance_admin\") && data.platformProjectsEnabled\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/users\",\n\t\t\t\tlabel: \"Users\",\n\t\t\t\ticon: Users,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"manage_instance_users\")\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/compute\",\n\t\t\t\tlabel: \"Compute\",\n\t\t\t\ticon: Server,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"manage_compute\")\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/system\",\n\t\t\t\tlabel: \"System\",\n\t\t\t\ticon: Settings,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"manage_updates\")\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/audit\",\n\t\t\t\tlabel: \"Audit log\",\n\t\t\t\ticon: Scroll_text,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"instance_admin\") && data.auditAvailable\n\t\t\t}\n\t\t].filter((i) => i.show));\n\t\t{\n\t\t\tfunction sidenav($$renderer) {\n\t\t\t\tSideNav($$renderer, {\n\t\t\t\t\titems: items(),\n\t\t\t\t\teyebrow: \"Platform\",\n\t\t\t\t\tborder: false\n\t\t\t\t});\n\t\t\t}\n\t\t\tAppHeader($$renderer, {\n\t\t\t\tsidenav,\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<div class=\"px-(--page-px) py-(--page-py)\">`);\n\t\t\t\t\tchildren?.($$renderer);\n\t\t\t\t\t$$renderer.push(`<!----></div>`);\n\t\t\t\t},\n\t\t\t\t$$slots: {\n\t\t\t\t\tsidenav: true,\n\t\t\t\t\tdefault: true\n\t\t\t\t}\n\t\t\t});\n\t\t}\n\t});\n}\n//#endregion\nexport { _layout as default };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAUA;AACA,SAAS,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE;AACtC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO;AAClC,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK;AACrB,GAAG,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,IAAI;AACvE,GAAG,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI;AACxD,GAAG,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzC,EAAE,CAAC;AACH,EAAE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM;AAC9B,GAAG;AACH,IAAI,IAAI,EAAE,QAAQ;AAClB,IAAI,KAAK,EAAE,SAAS;AACpB,IAAI,IAAI,EAAE,KAAK;AACf,IAAI,IAAI,EAAE;AACV,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,sBAAsB;AAChC,IAAI,KAAK,EAAE,eAAe;AAC1B,IAAI,IAAI,EAAE,UAAU;AACpB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK;AACpD,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,iBAAiB;AAC3B,IAAI,KAAK,EAAE,UAAU;AACrB,IAAI,IAAI,EAAE,OAAO;AACjB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC;AACxC,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,cAAc;AACxB,IAAI,KAAK,EAAE,OAAO;AAClB,IAAI,IAAI,EAAE,KAAK;AACf,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,uBAAuB;AACrC,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,gBAAgB;AAC1B,IAAI,KAAK,EAAE,SAAS;AACpB,IAAI,IAAI,EAAE,MAAM;AAChB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,gBAAgB;AAC9B,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,eAAe;AACzB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,QAAQ;AAClB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,gBAAgB;AAC9B,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,cAAc;AACxB,IAAI,KAAK,EAAE,WAAW;AACtB,IAAI,IAAI,EAAE,WAAW;AACrB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC;AACxC;AACA,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;AAC1B,EAAE;AACF,GAAG,SAAS,OAAO,CAAC,UAAU,EAAE;AAChC,IAAI,OAAO,CAAC,UAAU,EAAE;AACxB,KAAK,KAAK,EAAE,KAAK,EAAE;AACnB,KAAK,OAAO,EAAE,UAAU;AACxB,KAAK,MAAM,EAAE;AACb,KAAK,CAAC;AACN,GAAG;AACH,GAAG,SAAS,CAAC,UAAU,EAAE;AACzB,IAAI,OAAO;AACX,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,2CAA2C,CAAC,CAAC;AACnE,KAAK,QAAQ,GAAG,UAAU,CAAC;AAC3B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;AACrC,IAAI,CAKD,CAAC,CAAC;AACL,EAAE;AACF,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/entries/pages/admin/_page.server.ts.js-hALBd5MV.js

@@ -0,0 +1,76 @@
+import { h as hasPermission } from '../../../chunks/src.js-Cf1j97Z6.js';
+import { a as getAuthProvider, e as getOrganizationProvider } from '../../../chunks/providers.server.js-CrzKLXpj.js';
+import { r as renderThrown } from '../../../chunks/definitions.js-BNGP8Sjp.js';
+import { p as package_default } from '../../../chunks/package.js-0p2MKz9Z.js';
+
+//#region src/routes/admin/+page.server.ts
+/**
+* Resolve the org whose branding assets the General page manages. Single-tenant
+* has exactly one org (auto-seeded at bootstrap); we surface it so an admin can
+* set the company logo without the org-list UI (which only exists in
+* multi-tenant). Returns null if no org exists yet or the lookup fails — the
+* cards just hide.
+*/
+async function loadAdminOrg(ctx, log) {
+	if (!ctx) return null;
+	try {
+		const org = (await getOrganizationProvider().listOrgs(ctx, { limit: 1 })).items[0];
+		return org ? {
+			id: org.id,
+			name: org.name,
+			assets: org.assets ?? {}
+		} : null;
+	} catch (err) {
+		log.error("Failed to load admin org for asset cards", {
+			component: "admin",
+			err: renderThrown(err)
+		});
+		return null;
+	}
+}
+/**
+* The General dashboard sits inside the platform-scoped `/admin` shell, but
+* each panel still needs its own permission. The user-count tile is gated
+* on `manage_instance_users`; without it, the tile renders a placeholder.
+*/
+var load = async ({ locals }) => {
+	const ctx = locals.ctx;
+	const canSeeUserStats = ctx ? hasPermission(ctx, "manage_instance_users") : false;
+	const canManageOrg = ctx ? hasPermission(ctx, "manage_org_members") : false;
+	const platformPermissions = ctx?.platformPermissions ?? [];
+	const org = canManageOrg ? await loadAdminOrg(ctx, locals.log) : null;
+	if (!canSeeUserStats) return {
+		stats: { users: null },
+		platformPermissions,
+		version: package_default.version,
+		org
+	};
+	try {
+		return {
+			stats: { users: (await getAuthProvider().listUsers({ limit: 200 }))?.items.length ?? null },
+			platformPermissions,
+			version: package_default.version,
+			org
+		};
+	} catch (err) {
+		if (err && typeof err === "object" && "status" in err) throw err;
+		locals.log.error("Failed to load admin dashboard", {
+			component: "admin",
+			err: renderThrown(err)
+		});
+		return {
+			stats: { users: null },
+			platformPermissions,
+			version: package_default.version,
+			org
+		};
+	}
+};
+
+var _page_server_ts = /*#__PURE__*/Object.freeze({
+	__proto__: null,
+	load: load
+});
+
+export { _page_server_ts as _ };
+//# sourceMappingURL=_page.server.ts.js-hALBd5MV.js.map

package/build/server/chunks/entries/pages/admin/_page.server.ts.js-hALBd5MV.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_page.server.ts.js-hALBd5MV.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/admin/_page.server.ts.js"],"sourcesContent":["import { r as hasPermission } from \"../../../chunks/src.js\";\nimport { h as getOrganizationProvider, r as getAuthProvider } from \"../../../chunks/providers.server.js\";\nimport { l as renderThrown } from \"../../../chunks/definitions.js\";\nimport { t as package_default } from \"../../../chunks/package.js\";\n//#region src/routes/admin/+page.server.ts\n/**\n* Resolve the org whose branding assets the General page manages. Single-tenant\n* has exactly one org (auto-seeded at bootstrap); we surface it so an admin can\n* set the company logo without the org-list UI (which only exists in\n* multi-tenant). Returns null if no org exists yet or the lookup fails — the\n* cards just hide.\n*/\nasync function loadAdminOrg(ctx, log) {\n\tif (!ctx) return null;\n\ttry {\n\t\tconst org = (await getOrganizationProvider().listOrgs(ctx, { limit: 1 })).items[0];\n\t\treturn org ? {\n\t\t\tid: org.id,\n\t\t\tname: org.name,\n\t\t\tassets: org.assets ?? {}\n\t\t} : null;\n\t} catch (err) {\n\t\tlog.error(\"Failed to load admin org for asset cards\", {\n\t\t\tcomponent: \"admin\",\n\t\t\terr: renderThrown(err)\n\t\t});\n\t\treturn null;\n\t}\n}\n/**\n* The General dashboard sits inside the platform-scoped `/admin` shell, but\n* each panel still needs its own permission. The user-count tile is gated\n* on `manage_instance_users`; without it, the tile renders a placeholder.\n*/\nvar load = async ({ locals }) => {\n\tconst ctx = locals.ctx;\n\tconst canSeeUserStats = ctx ? hasPermission(ctx, \"manage_instance_users\") : false;\n\tconst canManageOrg = ctx ? hasPermission(ctx, \"manage_org_members\") : false;\n\tconst platformPermissions = ctx?.platformPermissions ?? [];\n\tconst org = canManageOrg ? await loadAdminOrg(ctx, locals.log) : null;\n\tif (!canSeeUserStats) return {\n\t\tstats: { users: null },\n\t\tplatformPermissions,\n\t\tversion: package_default.version,\n\t\torg\n\t};\n\ttry {\n\t\treturn {\n\t\t\tstats: { users: (await getAuthProvider().listUsers({ limit: 200 }))?.items.length ?? null },\n\t\t\tplatformPermissions,\n\t\t\tversion: package_default.version,\n\t\t\torg\n\t\t};\n\t} catch (err) {\n\t\tif (err && typeof err === \"object\" && \"status\" in err) throw err;\n\t\tlocals.log.error(\"Failed to load admin dashboard\", {\n\t\t\tcomponent: \"admin\",\n\t\t\terr: renderThrown(err)\n\t\t});\n\t\treturn {\n\t\t\tstats: { users: null },\n\t\t\tplatformPermissions,\n\t\t\tversion: package_default.version,\n\t\t\torg\n\t\t};\n\t}\n};\n//#endregion\nexport { load };\n"],"names":[],"mappings":";;;;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;AACtC,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,IAAI;AACtB,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,uBAAuB,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AACpF,EAAE,OAAO,GAAG,GAAG;AACf,GAAG,EAAE,EAAE,GAAG,CAAC,EAAE;AACb,GAAG,IAAI,EAAE,GAAG,CAAC,IAAI;AACjB,GAAG,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI;AACzB,GAAG,GAAG,IAAI;AACV,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,GAAG,CAAC,KAAK,CAAC,0CAA0C,EAAE;AACxD,GAAG,SAAS,EAAE,OAAO;AACrB,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC;AACJ,EAAE,OAAO,IAAI;AACb,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AACjC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,eAAe,GAAG,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,uBAAuB,CAAC,GAAG,KAAK;AAClF,CAAC,MAAM,YAAY,GAAG,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,oBAAoB,CAAC,GAAG,KAAK;AAC5E,CAAC,MAAM,mBAAmB,GAAG,GAAG,EAAE,mBAAmB,IAAI,EAAE;AAC3D,CAAC,MAAM,GAAG,GAAG,YAAY,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI;AACtE,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO;AAC9B,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;AACxB,EAAE,mBAAmB;AACrB,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO;AAClC,EAAE;AACF,EAAE;AACF,CAAC,IAAI;AACL,EAAE,OAAO;AACT,GAAG,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,eAAe,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,EAAE;AAC9F,GAAG,mBAAmB;AACtB,GAAG,OAAO,EAAE,eAAe,CAAC,OAAO;AACnC,GAAG;AACH,GAAG;AACH,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,EAAE,MAAM,GAAG;AAClE,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,gCAAgC,EAAE;AACrD,GAAG,SAAS,EAAE,OAAO;AACrB,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC;AACJ,EAAE,OAAO;AACT,GAAG,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;AACzB,GAAG,mBAAmB;AACtB,GAAG,OAAO,EAAE,eAAe,CAAC,OAAO;AACnC,GAAG;AACH,GAAG;AACH,CAAC;AACD,CAAC;;;;;;;;;"}