@selvajs/selva 4.20.0-beta.1 → 4.20.0-beta.11

package/build/server/chunks/entries/pages/login/_page.svelte.js-TEWC_8E4.js

@@ -0,0 +1,214 @@
+import { ag as head, ak as ensure_array_like, af as attr, ae as derived, ap as escape_html } from '../../../chunks/server.js-eNE8c09e.js';
+import { B as Button } from '../../../chunks/button.js-Cp5wuqrc.js';
+import { L as Label } from '../../../chunks/label.js-CmZTv-wZ.js';
+import { p as page } from '../../../chunks/state.js-CcGurDB2.js';
+import { I as Input } from '../../../chunks/input.js-BE17eZ31.js';
+import { C as Callout } from '../../../chunks/Callout.js-_5j40j01.js';
+import '../../../chunks/uneval.js-NmnccxCg.js';
+import 'clsx';
+import '../../../chunks/utils2.js-C1oP9gJ9.js';
+import 'tailwind-merge';
+import 'tailwind-variants';
+import '../../../chunks/create-id.js-DQq_g2YK.js';
+import '../../../chunks/client.js-Dxf9BlQ8.js';
+import '../../../chunks/index-server.js-B4lHrS_U.js';
+import '../../../chunks/shared.js-BStsS1ju.js';
+import '@sveltejs/kit/internal';
+import '../../../chunks/exports.js-DurfUvtz.js';
+import '../../../chunks/routing.js-CvcjLFt6.js';
+import '../../../chunks/internal2.js-B1gdPcAg.js';
+import '../../../chunks/legacy-client.js-CnRScLY2.js';
+import '../../../chunks/events.js-Dn4NgQ5T.js';
+import '@sveltejs/kit/internal/server';
+import '../../../chunks/severity.js-D9BMFvsP.js';
+
+//#region src/routes/login/+page.svelte
+function requestHeaderDump($$renderer, headers) {
+	$$renderer.push(`<details class="border-border rounded border p-3 text-xs"><summary class="text-muted-foreground cursor-pointer font-medium">Request headers (${escape_html(headers.length)})</summary> <pre class="text-muted-foreground mt-2 max-h-96 overflow-auto break-all whitespace-pre-wrap">${escape_html(headers.map((h) => `${h.name}: ${h.value}`).join("\n"))}</pre></details>`);
+}
+function _page($$renderer, $$props) {
+	$$renderer.component(($$renderer) => {
+		let { form, data } = $$props;
+		const redirectTo = derived(() => page.url.searchParams.get("redirectTo") ?? "");
+		const submittedEmail = derived(() => form?.email ?? "");
+		const attempt = derived(() => form?.attempt ?? 0);
+		function oauthHref(provider) {
+			return `/auth/supabase/start?${`provider=${encodeURIComponent(provider)}${redirectTo() ? `&redirectTo=${encodeURIComponent(redirectTo())}` : ""}`}`;
+		}
+		function providerLabel(p) {
+			return {
+				google: "Google",
+				github: "GitHub",
+				azure: "Microsoft",
+				gitlab: "GitLab"
+			}[p] ?? p;
+		}
+		const noAuthMethods = derived(() => !data.hasPasswordAuth && !data.hasEmailLink && data.oauthProviders.length === 0);
+		head("1x05zx6", $$renderer, ($$renderer) => {
+			$$renderer.title(($$renderer) => {
+				$$renderer.push(`<title>Login - ${escape_html(page.data.branding.name)}</title>`);
+			});
+		});
+		$$renderer.push(`<div class="bg-background flex min-h-dvh items-center justify-center px-4 py-12 sm:px-6 lg:px-8"><div class="w-full max-w-sm space-y-6"><div class="space-y-1 text-center"><h2 class="text-foreground text-2xl font-bold tracking-tight">Sign in</h2> <p class="text-muted-foreground text-sm">Sign in to your account</p></div> `);
+		if (form?.error) {
+			$$renderer.push(`<!--[0--><!---->`);
+			$$renderer.push(`<div>`);
+			Callout($$renderer, {
+				tone: "danger",
+				"aria-live": "assertive",
+				children: ($$renderer) => {
+					$$renderer.push(`<!---->${escape_html(form.error)}`);
+					if (attempt() > 1) $$renderer.push(`<!--[0--><span class="opacity-80">(attempt ${escape_html(attempt())})</span>`);
+					else $$renderer.push("<!--[-1-->");
+					$$renderer.push(`<!--]-->`);
+				},
+				$$slots: { default: true }
+			});
+			$$renderer.push(`<!----></div>`);
+			$$renderer.push(`<!---->`);
+		} else $$renderer.push("<!--[-1-->");
+		$$renderer.push(`<!--]--> `);
+		if (data.oauthProviders.length > 0) {
+			$$renderer.push(`<!--[0--><div class="space-y-2"><!--[-->`);
+			const each_array = ensure_array_like(data.oauthProviders);
+			for (let $$index = 0, $$length = each_array.length; $$index < $$length; $$index++) {
+				let provider = each_array[$$index];
+				$$renderer.push(`<a${attr("href", oauthHref(provider))} class="block">`);
+				Button($$renderer, {
+					type: "button",
+					variant: "outline",
+					class: "w-full",
+					children: ($$renderer) => {
+						$$renderer.push(`<!---->Continue with ${escape_html(providerLabel(provider))}`);
+					},
+					$$slots: { default: true }
+				});
+				$$renderer.push(`<!----></a>`);
+			}
+			$$renderer.push(`<!--]--></div>`);
+		} else $$renderer.push("<!--[-1-->");
+		$$renderer.push(`<!--]--> `);
+		if (data.hasEmailLink && data.oauthProviders.length > 0) $$renderer.push(`<!--[0--><div class="text-muted-foreground flex items-center gap-2 text-xs uppercase"><div class="bg-border h-px flex-1"></div> <span>or</span> <div class="bg-border h-px flex-1"></div></div>`);
+		else $$renderer.push("<!--[-1-->");
+		$$renderer.push(`<!--]--> `);
+		if (data.hasEmailLink) {
+			$$renderer.push(`<!--[0--><form method="POST" action="/auth/email/start" class="space-y-4">`);
+			if (redirectTo()) $$renderer.push(`<!--[0--><input type="hidden" name="redirectTo"${attr("value", redirectTo())}/>`);
+			else $$renderer.push("<!--[-1-->");
+			$$renderer.push(`<!--]--> <div class="space-y-2">`);
+			Label($$renderer, {
+				for: "email-link-email",
+				children: ($$renderer) => {
+					$$renderer.push(`<!---->Email`);
+				},
+				$$slots: { default: true }
+			});
+			$$renderer.push(`<!----> `);
+			Input($$renderer, {
+				id: "email-link-email",
+				name: "email",
+				type: "email",
+				required: true,
+				placeholder: "you@example.com",
+				value: submittedEmail()
+			});
+			$$renderer.push(`<!----></div> `);
+			Button($$renderer, {
+				type: "submit",
+				variant: "outline",
+				class: "w-full",
+				children: ($$renderer) => {
+					$$renderer.push(`<!---->Email me a sign-in link`);
+				},
+				$$slots: { default: true }
+			});
+			$$renderer.push(`<!----></form>`);
+		} else $$renderer.push("<!--[-1-->");
+		$$renderer.push(`<!--]--> `);
+		if (data.hasPasswordAuth && (data.hasEmailLink || data.oauthProviders.length > 0)) $$renderer.push(`<!--[0--><div class="text-muted-foreground flex items-center gap-2 text-xs uppercase"><div class="bg-border h-px flex-1"></div> <span>or</span> <div class="bg-border h-px flex-1"></div></div>`);
+		else $$renderer.push("<!--[-1-->");
+		$$renderer.push(`<!--]--> `);
+		if (data.hasPasswordAuth) {
+			$$renderer.push(`<!--[0--><form method="POST" class="space-y-4">`);
+			if (redirectTo()) $$renderer.push(`<!--[0--><input type="hidden" name="redirectTo"${attr("value", redirectTo())}/>`);
+			else $$renderer.push("<!--[-1-->");
+			$$renderer.push(`<!--]--> <input type="hidden" name="attempt"${attr("value", attempt())}/> <div class="space-y-2">`);
+			Label($$renderer, {
+				for: "email",
+				children: ($$renderer) => {
+					$$renderer.push(`<!---->Email`);
+				},
+				$$slots: { default: true }
+			});
+			$$renderer.push(`<!----> `);
+			Input($$renderer, {
+				id: "email",
+				name: "email",
+				type: "email",
+				required: true,
+				placeholder: "admin@example.com",
+				value: submittedEmail()
+			});
+			$$renderer.push(`<!----></div> <div class="space-y-2">`);
+			Label($$renderer, {
+				for: "password",
+				children: ($$renderer) => {
+					$$renderer.push(`<!---->Password`);
+				},
+				$$slots: { default: true }
+			});
+			$$renderer.push(`<!----> `);
+			Input($$renderer, {
+				id: "password",
+				name: "password",
+				type: "password",
+				required: true,
+				placeholder: "Password",
+				"aria-invalid": attempt() > 0
+			});
+			$$renderer.push(`<!----></div> `);
+			Button($$renderer, {
+				type: "submit",
+				class: "w-full",
+				children: ($$renderer) => {
+					$$renderer.push(`<!---->Sign in with password`);
+				},
+				$$slots: { default: true }
+			});
+			$$renderer.push(`<!----></form>`);
+		} else $$renderer.push("<!--[-1-->");
+		$$renderer.push(`<!--]--> `);
+		if (noAuthMethods() && data.hasProxyAuth && data.proxyHeadersMissing) {
+			$$renderer.push(`<!--[0--><div class="space-y-3"><p class="text-muted-foreground text-sm">This deployment uses forward-auth — sign-in happens upstream at your identity provider,
+					not on this page. If you're seeing this page, your proxy didn't forward the identity
+					headers. Check that:</p> <ul class="text-muted-foreground list-disc space-y-1 pl-5 text-xs"><li>You're reaching the app through the proxy, not directly</li> <li>The proxy authenticated you (visit the IdP first if needed)</li> <li>The proxy is forwarding the configured identity header</li></ul> <p class="text-muted-foreground text-xs">Operators: see <code>HEADER_AUTH_UPN_HEADER</code> and your proxy's forward-auth config.</p> `);
+			if (data.requestHeaders) {
+				$$renderer.push("<!--[0-->");
+				requestHeaderDump($$renderer, data.requestHeaders);
+			} else $$renderer.push("<!--[-1-->");
+			$$renderer.push(`<!--]--></div>`);
+		} else if (noAuthMethods() && data.hasProxyAuth) {
+			$$renderer.push(`<!--[1--><div class="space-y-3"><p class="text-muted-foreground text-sm">You're signed in with your identity provider, but your account hasn't been granted access
+					to this deployment yet.</p> <p class="text-muted-foreground text-xs">Ask an administrator to add you to the allowlist. Once added, reload this page — no second
+					sign-in is needed.</p> `);
+			if (data.requestHeaders) {
+				$$renderer.push("<!--[0-->");
+				requestHeaderDump($$renderer, data.requestHeaders);
+			} else $$renderer.push("<!--[-1-->");
+			$$renderer.push(`<!--]--></div>`);
+		} else if (noAuthMethods()) {
+			$$renderer.push("<!--[2-->");
+			Callout($$renderer, {
+				tone: "danger",
+				children: ($$renderer) => {
+					$$renderer.push(`<!---->No login methods are configured. Set up an auth provider before signing in.`);
+				},
+				$$slots: { default: true }
+			});
+		} else $$renderer.push("<!--[-1-->");
+		$$renderer.push(`<!--]--></div></div>`);
+	});
+}
+
+export { _page as default };
+//# sourceMappingURL=_page.svelte.js-TEWC_8E4.js.map

package/build/server/chunks/entries/pages/login/_page.svelte.js-TEWC_8E4.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_page.svelte.js-TEWC_8E4.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/login/_page.svelte.js"],"sourcesContent":["import { D as attr, a as derived, c as head, k as escape_html, s as ensure_array_like } from \"../../../chunks/server.js\";\nimport { t as Button } from \"../../../chunks/button.js\";\nimport { t as Label } from \"../../../chunks/label.js\";\nimport { t as page } from \"../../../chunks/state.js\";\nimport { t as Input } from \"../../../chunks/input.js\";\nimport { t as Callout } from \"../../../chunks/Callout.js\";\n//#region src/routes/login/+page.svelte\nfunction requestHeaderDump($$renderer, headers) {\n\t$$renderer.push(`<details class=\"border-border rounded border p-3 text-xs\"><summary class=\"text-muted-foreground cursor-pointer font-medium\">Request headers (${escape_html(headers.length)})</summary> <pre class=\"text-muted-foreground mt-2 max-h-96 overflow-auto break-all whitespace-pre-wrap\">${escape_html(headers.map((h) => `${h.name}: ${h.value}`).join(\"\\n\"))}</pre></details>`);\n}\nfunction _page($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\tlet { form, data } = $$props;\n\t\tconst redirectTo = derived(() => page.url.searchParams.get(\"redirectTo\") ?? \"\");\n\t\tconst submittedEmail = derived(() => form?.email ?? \"\");\n\t\tconst attempt = derived(() => form?.attempt ?? 0);\n\t\tfunction oauthHref(provider) {\n\t\t\treturn `/auth/supabase/start?${`provider=${encodeURIComponent(provider)}${redirectTo() ? `&redirectTo=${encodeURIComponent(redirectTo())}` : \"\"}`}`;\n\t\t}\n\t\tfunction providerLabel(p) {\n\t\t\treturn {\n\t\t\t\tgoogle: \"Google\",\n\t\t\t\tgithub: \"GitHub\",\n\t\t\t\tazure: \"Microsoft\",\n\t\t\t\tgitlab: \"GitLab\"\n\t\t\t}[p] ?? p;\n\t\t}\n\t\tconst noAuthMethods = derived(() => !data.hasPasswordAuth && !data.hasEmailLink && data.oauthProviders.length === 0);\n\t\thead(\"1x05zx6\", $$renderer, ($$renderer) => {\n\t\t\t$$renderer.title(($$renderer) => {\n\t\t\t\t$$renderer.push(`<title>Login - ${escape_html(page.data.branding.name)}</title>`);\n\t\t\t});\n\t\t});\n\t\t$$renderer.push(`<div class=\"bg-background flex min-h-dvh items-center justify-center px-4 py-12 sm:px-6 lg:px-8\"><div class=\"w-full max-w-sm space-y-6\"><div class=\"space-y-1 text-center\"><h2 class=\"text-foreground text-2xl font-bold tracking-tight\">Sign in</h2> <p class=\"text-muted-foreground text-sm\">Sign in to your account</p></div> `);\n\t\tif (form?.error) {\n\t\t\t$$renderer.push(`<!--[0--><!---->`);\n\t\t\t$$renderer.push(`<div>`);\n\t\t\tCallout($$renderer, {\n\t\t\t\ttone: \"danger\",\n\t\t\t\t\"aria-live\": \"assertive\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->${escape_html(form.error)}`);\n\t\t\t\t\tif (attempt() > 1) $$renderer.push(`<!--[0--><span class=\"opacity-80\">(attempt ${escape_html(attempt())})</span>`);\n\t\t\t\t\telse $$renderer.push(\"<!--[-1-->\");\n\t\t\t\t\t$$renderer.push(`<!--]-->`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t\t$$renderer.push(`<!----></div>`);\n\t\t\t$$renderer.push(`<!---->`);\n\t\t} else $$renderer.push(\"<!--[-1-->\");\n\t\t$$renderer.push(`<!--]--> `);\n\t\tif (data.oauthProviders.length > 0) {\n\t\t\t$$renderer.push(`<!--[0--><div class=\"space-y-2\"><!--[-->`);\n\t\t\tconst each_array = ensure_array_like(data.oauthProviders);\n\t\t\tfor (let $$index = 0, $$length = each_array.length; $$index < $$length; $$index++) {\n\t\t\t\tlet provider = each_array[$$index];\n\t\t\t\t$$renderer.push(`<a${attr(\"href\", oauthHref(provider))} class=\"block\">`);\n\t\t\t\tButton($$renderer, {\n\t\t\t\t\ttype: \"button\",\n\t\t\t\t\tvariant: \"outline\",\n\t\t\t\t\tclass: \"w-full\",\n\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t$$renderer.push(`<!---->Continue with ${escape_html(providerLabel(provider))}`);\n\t\t\t\t\t},\n\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t});\n\t\t\t\t$$renderer.push(`<!----></a>`);\n\t\t\t}\n\t\t\t$$renderer.push(`<!--]--></div>`);\n\t\t} else $$renderer.push(\"<!--[-1-->\");\n\t\t$$renderer.push(`<!--]--> `);\n\t\tif (data.hasEmailLink && data.oauthProviders.length > 0) $$renderer.push(`<!--[0--><div class=\"text-muted-foreground flex items-center gap-2 text-xs uppercase\"><div class=\"bg-border h-px flex-1\"></div> <span>or</span> <div class=\"bg-border h-px flex-1\"></div></div>`);\n\t\telse $$renderer.push(\"<!--[-1-->\");\n\t\t$$renderer.push(`<!--]--> `);\n\t\tif (data.hasEmailLink) {\n\t\t\t$$renderer.push(`<!--[0--><form method=\"POST\" action=\"/auth/email/start\" class=\"space-y-4\">`);\n\t\t\tif (redirectTo()) $$renderer.push(`<!--[0--><input type=\"hidden\" name=\"redirectTo\"${attr(\"value\", redirectTo())}/>`);\n\t\t\telse $$renderer.push(\"<!--[-1-->\");\n\t\t\t$$renderer.push(`<!--]--> <div class=\"space-y-2\">`);\n\t\t\tLabel($$renderer, {\n\t\t\t\tfor: \"email-link-email\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->Email`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t\t$$renderer.push(`<!----> `);\n\t\t\tInput($$renderer, {\n\t\t\t\tid: \"email-link-email\",\n\t\t\t\tname: \"email\",\n\t\t\t\ttype: \"email\",\n\t\t\t\trequired: true,\n\t\t\t\tplaceholder: \"you@example.com\",\n\t\t\t\tvalue: submittedEmail()\n\t\t\t});\n\t\t\t$$renderer.push(`<!----></div> `);\n\t\t\tButton($$renderer, {\n\t\t\t\ttype: \"submit\",\n\t\t\t\tvariant: \"outline\",\n\t\t\t\tclass: \"w-full\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->Email me a sign-in link`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t\t$$renderer.push(`<!----></form>`);\n\t\t} else $$renderer.push(\"<!--[-1-->\");\n\t\t$$renderer.push(`<!--]--> `);\n\t\tif (data.hasPasswordAuth && (data.hasEmailLink || data.oauthProviders.length > 0)) $$renderer.push(`<!--[0--><div class=\"text-muted-foreground flex items-center gap-2 text-xs uppercase\"><div class=\"bg-border h-px flex-1\"></div> <span>or</span> <div class=\"bg-border h-px flex-1\"></div></div>`);\n\t\telse $$renderer.push(\"<!--[-1-->\");\n\t\t$$renderer.push(`<!--]--> `);\n\t\tif (data.hasPasswordAuth) {\n\t\t\t$$renderer.push(`<!--[0--><form method=\"POST\" class=\"space-y-4\">`);\n\t\t\tif (redirectTo()) $$renderer.push(`<!--[0--><input type=\"hidden\" name=\"redirectTo\"${attr(\"value\", redirectTo())}/>`);\n\t\t\telse $$renderer.push(\"<!--[-1-->\");\n\t\t\t$$renderer.push(`<!--]--> <input type=\"hidden\" name=\"attempt\"${attr(\"value\", attempt())}/> <div class=\"space-y-2\">`);\n\t\t\tLabel($$renderer, {\n\t\t\t\tfor: \"email\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->Email`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t\t$$renderer.push(`<!----> `);\n\t\t\tInput($$renderer, {\n\t\t\t\tid: \"email\",\n\t\t\t\tname: \"email\",\n\t\t\t\ttype: \"email\",\n\t\t\t\trequired: true,\n\t\t\t\tplaceholder: \"admin@example.com\",\n\t\t\t\tvalue: submittedEmail()\n\t\t\t});\n\t\t\t$$renderer.push(`<!----></div> <div class=\"space-y-2\">`);\n\t\t\tLabel($$renderer, {\n\t\t\t\tfor: \"password\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->Password`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t\t$$renderer.push(`<!----> `);\n\t\t\tInput($$renderer, {\n\t\t\t\tid: \"password\",\n\t\t\t\tname: \"password\",\n\t\t\t\ttype: \"password\",\n\t\t\t\trequired: true,\n\t\t\t\tplaceholder: \"Password\",\n\t\t\t\t\"aria-invalid\": attempt() > 0\n\t\t\t});\n\t\t\t$$renderer.push(`<!----></div> `);\n\t\t\tButton($$renderer, {\n\t\t\t\ttype: \"submit\",\n\t\t\t\tclass: \"w-full\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->Sign in with password`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t\t$$renderer.push(`<!----></form>`);\n\t\t} else $$renderer.push(\"<!--[-1-->\");\n\t\t$$renderer.push(`<!--]--> `);\n\t\tif (noAuthMethods() && data.hasProxyAuth && data.proxyHeadersMissing) {\n\t\t\t$$renderer.push(`<!--[0--><div class=\"space-y-3\"><p class=\"text-muted-foreground text-sm\">This deployment uses forward-auth — sign-in happens upstream at your identity provider,\n\t\t\t\t\tnot on this page. If you're seeing this page, your proxy didn't forward the identity\n\t\t\t\t\theaders. Check that:</p> <ul class=\"text-muted-foreground list-disc space-y-1 pl-5 text-xs\"><li>You're reaching the app through the proxy, not directly</li> <li>The proxy authenticated you (visit the IdP first if needed)</li> <li>The proxy is forwarding the configured identity header</li></ul> <p class=\"text-muted-foreground text-xs\">Operators: see <code>HEADER_AUTH_UPN_HEADER</code> and your proxy's forward-auth config.</p> `);\n\t\t\tif (data.requestHeaders) {\n\t\t\t\t$$renderer.push(\"<!--[0-->\");\n\t\t\t\trequestHeaderDump($$renderer, data.requestHeaders);\n\t\t\t} else $$renderer.push(\"<!--[-1-->\");\n\t\t\t$$renderer.push(`<!--]--></div>`);\n\t\t} else if (noAuthMethods() && data.hasProxyAuth) {\n\t\t\t$$renderer.push(`<!--[1--><div class=\"space-y-3\"><p class=\"text-muted-foreground text-sm\">You're signed in with your identity provider, but your account hasn't been granted access\n\t\t\t\t\tto this deployment yet.</p> <p class=\"text-muted-foreground text-xs\">Ask an administrator to add you to the allowlist. Once added, reload this page — no second\n\t\t\t\t\tsign-in is needed.</p> `);\n\t\t\tif (data.requestHeaders) {\n\t\t\t\t$$renderer.push(\"<!--[0-->\");\n\t\t\t\trequestHeaderDump($$renderer, data.requestHeaders);\n\t\t\t} else $$renderer.push(\"<!--[-1-->\");\n\t\t\t$$renderer.push(`<!--]--></div>`);\n\t\t} else if (noAuthMethods()) {\n\t\t\t$$renderer.push(\"<!--[2-->\");\n\t\t\tCallout($$renderer, {\n\t\t\t\ttone: \"danger\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->No login methods are configured. Set up an auth provider before signing in.`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t} else $$renderer.push(\"<!--[-1-->\");\n\t\t$$renderer.push(`<!--]--></div></div>`);\n\t});\n}\n//#endregion\nexport { _page as default };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAMA;AACA,SAAS,iBAAiB,CAAC,UAAU,EAAE,OAAO,EAAE;AAChD,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,6IAA6I,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,yGAAyG,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;AAC9X;AACA,SAAS,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE;AACpC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,OAAO;AAC9B,EAAE,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;AACjF,EAAE,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;AACzD,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,OAAO,IAAI,CAAC,CAAC;AACnD,EAAE,SAAS,SAAS,CAAC,QAAQ,EAAE;AAC/B,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,SAAS,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,YAAY,EAAE,kBAAkB,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;AACtJ,EAAE;AACF,EAAE,SAAS,aAAa,CAAC,CAAC,EAAE;AAC5B,GAAG,OAAO;AACV,IAAI,MAAM,EAAE,QAAQ;AACpB,IAAI,MAAM,EAAE,QAAQ;AACpB,IAAI,KAAK,EAAE,WAAW;AACtB,IAAI,MAAM,EAAE;AACZ,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACZ,EAAE;AACF,EAAE,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC;AACtH,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,UAAU,KAAK;AAC9C,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,UAAU,KAAK;AACpC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AACrF,GAAG,CAAC,CAAC;AACL,EAAE,CAAC,CAAC;AACJ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,iUAAiU,CAAC,CAAC;AACtV,EAAE,IAAI,IAAI,EAAE,KAAK,EAAE;AACnB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC,CAAC;AACtC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;AAC3B,GAAG,OAAO,CAAC,UAAU,EAAE;AACvB,IAAI,IAAI,EAAE,QAAQ;AAClB,IAAI,WAAW,EAAE,WAAW;AAC5B,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzD,KAAK,IAAI,OAAO,EAAE,GAAG,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,2CAA2C,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;AACvH,UAAU,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACvC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAChC,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;AACnC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;AAC7B,EAAE,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACtC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AAC9B,EAAE,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE;AACtC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,wCAAwC,CAAC,CAAC;AAC9D,GAAG,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC;AAC5D,GAAG,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,EAAE;AACtF,IAAI,IAAI,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC;AACtC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;AAC5E,IAAI,MAAM,CAAC,UAAU,EAAE;AACvB,KAAK,IAAI,EAAE,QAAQ;AACnB,KAAK,OAAO,EAAE,SAAS;AACvB,KAAK,KAAK,EAAE,QAAQ;AACpB,KAAK,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC/B,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,qBAAqB,EAAE,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACrF,KAAK,CAAC;AACN,KAAK,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC7B,KAAK,CAAC;AACN,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,CAAC;AAClC,GAAG;AACH,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;AACpC,EAAE,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACtC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AAC9B,EAAE,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,+LAA+L,CAAC,CAAC;AAC7Q,OAAO,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACpC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AAC9B,EAAE,IAAI,IAAI,CAAC,YAAY,EAAE;AACzB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,0EAA0E,CAAC,CAAC;AAChG,GAAG,IAAI,UAAU,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,+CAA+C,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AACvH,QAAQ,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACrC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,gCAAgC,CAAC,CAAC;AACtD,GAAG,KAAK,CAAC,UAAU,EAAE;AACrB,IAAI,GAAG,EAAE,kBAAkB;AAC3B,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC;AACpC,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC9B,GAAG,KAAK,CAAC,UAAU,EAAE;AACrB,IAAI,EAAE,EAAE,kBAAkB;AAC1B,IAAI,IAAI,EAAE,OAAO;AACjB,IAAI,IAAI,EAAE,OAAO;AACjB,IAAI,QAAQ,EAAE,IAAI;AAClB,IAAI,WAAW,EAAE,iBAAiB;AAClC,IAAI,KAAK,EAAE,cAAc;AACzB,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;AACpC,GAAG,MAAM,CAAC,UAAU,EAAE;AACtB,IAAI,IAAI,EAAE,QAAQ;AAClB,IAAI,OAAO,EAAE,SAAS;AACtB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,8BAA8B,CAAC,CAAC;AACtD,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;AACpC,EAAE,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACtC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AAC9B,EAAE,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,+LAA+L,CAAC,CAAC;AACvS,OAAO,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACpC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AAC9B,EAAE,IAAI,IAAI,CAAC,eAAe,EAAE;AAC5B,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,+CAA+C,CAAC,CAAC;AACrE,GAAG,IAAI,UAAU,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,+CAA+C,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AACvH,QAAQ,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACrC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,4CAA4C,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,0BAA0B,CAAC,CAAC;AACvH,GAAG,KAAK,CAAC,UAAU,EAAE;AACrB,IAAI,GAAG,EAAE,OAAO;AAChB,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC;AACpC,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC9B,GAAG,KAAK,CAAC,UAAU,EAAE;AACrB,IAAI,EAAE,EAAE,OAAO;AACf,IAAI,IAAI,EAAE,OAAO;AACjB,IAAI,IAAI,EAAE,OAAO;AACjB,IAAI,QAAQ,EAAE,IAAI;AAClB,IAAI,WAAW,EAAE,mBAAmB;AACpC,IAAI,KAAK,EAAE,cAAc;AACzB,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,qCAAqC,CAAC,CAAC;AAC3D,GAAG,KAAK,CAAC,UAAU,EAAE;AACrB,IAAI,GAAG,EAAE,UAAU;AACnB,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC;AACvC,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC9B,GAAG,KAAK,CAAC,UAAU,EAAE;AACrB,IAAI,EAAE,EAAE,UAAU;AAClB,IAAI,IAAI,EAAE,UAAU;AACpB,IAAI,IAAI,EAAE,UAAU;AACpB,IAAI,QAAQ,EAAE,IAAI;AAClB,IAAI,WAAW,EAAE,UAAU;AAC3B,IAAI,cAAc,EAAE,OAAO,EAAE,GAAG;AAChC,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;AACpC,GAAG,MAAM,CAAC,UAAU,EAAE;AACtB,IAAI,IAAI,EAAE,QAAQ;AAClB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,4BAA4B,CAAC,CAAC;AACpD,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;AACpC,EAAE,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACtC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AAC9B,EAAE,IAAI,aAAa,EAAE,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,mBAAmB,EAAE;AACxE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;AACpB;AACA,kbAAkb,CAAC,CAAC;AACpb,GAAG,IAAI,IAAI,CAAC,cAAc,EAAE;AAC5B,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AAChC,IAAI,iBAAiB,CAAC,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC;AACtD,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACvC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;AACpC,EAAE,CAAC,MAAM,IAAI,aAAa,EAAE,IAAI,IAAI,CAAC,YAAY,EAAE;AACnD,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;AACpB;AACA,4BAA4B,CAAC,CAAC;AAC9B,GAAG,IAAI,IAAI,CAAC,cAAc,EAAE;AAC5B,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AAChC,IAAI,iBAAiB,CAAC,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC;AACtD,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACvC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;AACpC,EAAE,CAAC,MAAM,IAAI,aAAa,EAAE,EAAE;AAC9B,GAAG,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AAC/B,GAAG,OAAO,CAAC,UAAU,EAAE;AACvB,IAAI,IAAI,EAAE,QAAQ;AAClB,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,kFAAkF,CAAC,CAAC;AAC1G,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,EAAE,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACtC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/entries/pages/logout/_page.server.ts.js-DUIKZVgw.js

@@ -0,0 +1,19 @@
+import { a as getAuthProvider } from '../../../chunks/providers.server.js-CzinZrUx.js';
+import { f as getSessionToken, h as destroySession } from '../../../chunks/admin-auth.server.js-BtJ_IOxF.js';
+import { redirect } from '@sveltejs/kit';
+
+//#region src/routes/logout/+page.server.ts
+var actions = { default: async ({ cookies }) => {
+	const token = getSessionToken(cookies);
+	if (token) await getAuthProvider().sessionRefresh?.revokeSession(token);
+	destroySession(cookies);
+	throw redirect(303, "/login");
+} };
+
+var _page_server_ts = /*#__PURE__*/Object.freeze({
+	__proto__: null,
+	actions: actions
+});
+
+export { _page_server_ts as _ };
+//# sourceMappingURL=_page.server.ts.js-DUIKZVgw.js.map

package/build/server/chunks/entries/pages/logout/_page.server.ts.js-DUIKZVgw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_page.server.ts.js-DUIKZVgw.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/logout/_page.server.ts.js"],"sourcesContent":["import { r as getAuthProvider } from \"../../../chunks/providers.server.js\";\nimport { i as destroySession, o as getSessionToken } from \"../../../chunks/admin-auth.server.js\";\nimport { redirect } from \"@sveltejs/kit\";\n//#region src/routes/logout/+page.server.ts\nvar actions = { default: async ({ cookies }) => {\n\tconst token = getSessionToken(cookies);\n\tif (token) await getAuthProvider().sessionRefresh?.revokeSession(token);\n\tdestroySession(cookies);\n\tthrow redirect(303, \"/login\");\n} };\n//#endregion\nexport { actions };\n"],"names":[],"mappings":";;;;AAGA;AACA,IAAI,OAAO,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK;AAChD,CAAC,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC;AACvC,CAAC,IAAI,KAAK,EAAE,MAAM,eAAe,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC,KAAK,CAAC;AACxE,CAAC,cAAc,CAAC,OAAO,CAAC;AACxB,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;AAC9B,CAAC,EAAE;;;;;;;;;"}

package/build/server/chunks/entries/pages/oauth/authorize/_page.server.ts.js-C_75PasT.js

@@ -0,0 +1,100 @@
+import { b as apiScopesFor, i as isLoopbackRedirect, O as OAuthError } from '../../../../chunks/oauth.js-B1zKax7l.js';
+import { g as isApiError } from '../../../../chunks/access.js-BataxwA1.js';
+import '../../../../chunks/api.js-BvSDWhma.js';
+import { o as oauthServer } from '../../../../chunks/server2.js-DE3gOwQ9.js';
+import { c as consentOffer, a as mintConsentToken } from '../../../../chunks/handlers.js-BvZAq1ig.js';
+import { t as toApiRequest } from '../../../../chunks/sveltekit.js-CdvpCFmG.js';
+import { fail, redirect, error } from '@sveltejs/kit';
+
+//#region src/routes/oauth/authorize/+page.server.ts
+var TOKEN_DAYS = 30;
+function serverFor(origin) {
+	return oauthServer(origin) ?? error(503, "OAuth is not configured on this server.");
+}
+/**
+* The authorize query without SvelteKit's `/action` key. The forms post to the
+* same query, so a failed action re-renders this page rather than a bare URL.
+*/
+function authorizeQuery(url) {
+	const params = new URLSearchParams(url.search);
+	for (const key of [...params.keys()]) if (key.startsWith("/")) params.delete(key);
+	return params.toString();
+}
+async function parse(url) {
+	try {
+		const query = new URLSearchParams(authorizeQuery(url));
+		return { request: await serverFor(url.origin).parseAuthorizeRequest(query) };
+	} catch (err) {
+		if (err instanceof OAuthError) return { problem: err.message };
+		throw err;
+	}
+}
+var load = async (event) => {
+	const { url, locals } = event;
+	const { request, problem } = await parse(url);
+	if (!request) return {
+		ok: false,
+		problem
+	};
+	if (!locals.user || !locals.ctx) redirect(303, `/login?redirectTo=${encodeURIComponent(url.pathname + url.search)}`);
+	const offer = await consentOffer(toApiRequest(event), request.scopes);
+	if (!offer) return {
+		ok: false,
+		problem: "Your account can’t give an app this access in any of your organizations."
+	};
+	const acting = offer.orgs.find((o) => o.id === locals.ctx?.actingOrgId);
+	return {
+		ok: true,
+		query: authorizeQuery(url),
+		clientName: request.client.name,
+		builtIn: request.client.builtIn,
+		redirectHost: new URL(request.redirectUri).host,
+		loopback: isLoopbackRedirect(request.redirectUri),
+		choices: offer.choices.map((c) => c.access),
+		orgs: offer.orgs,
+		orgId: (acting ?? offer.orgs[0]).id,
+		days: TOKEN_DAYS
+	};
+};
+var actions = {
+	approve: async (event) => {
+		const form = await event.request.formData();
+		const { request } = await parse(event.url);
+		if (!request) return fail(400, { error: "This sign-in request is no longer valid." });
+		if (!event.locals.ctx) return fail(403, { error: "Sign in first." });
+		const api = toApiRequest(event);
+		const choice = (await consentOffer(api, request.scopes))?.choices.find((c) => c.access === form.get("access"));
+		if (!choice) return fail(400, { error: "That access isn’t available to you." });
+		let minted;
+		try {
+			minted = await mintConsentToken(api, String(form.get("orgId") ?? ""), {
+				name: `${request.client.name} (OAuth)`.slice(0, 100),
+				scopes: apiScopesFor(choice.scopes),
+				expiresInDays: TOKEN_DAYS
+			});
+		} catch (err) {
+			if (isApiError(err)) return fail(err.status, { error: err.message });
+			throw err;
+		}
+		redirect(303, serverFor(event.url.origin).approve(request, {
+			tokenId: minted.token.id,
+			secret: minted.secret,
+			scopes: choice.scopes,
+			expiresAt: minted.token.expiresAt
+		}));
+	},
+	deny: async ({ url }) => {
+		const { request } = await parse(url);
+		if (!request) return fail(400, { error: "This sign-in request is no longer valid." });
+		redirect(303, serverFor(url.origin).deny(request));
+	}
+};
+
+var _page_server_ts = /*#__PURE__*/Object.freeze({
+	__proto__: null,
+	actions: actions,
+	load: load
+});
+
+export { _page_server_ts as _ };
+//# sourceMappingURL=_page.server.ts.js-C_75PasT.js.map

package/build/server/chunks/entries/pages/oauth/authorize/_page.server.ts.js-C_75PasT.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_page.server.ts.js-C_75PasT.js","sources":["../../../../../../../.svelte-kit/output/server/entries/pages/oauth/authorize/_page.server.ts.js"],"sourcesContent":["import { r as apiScopesFor, s as isLoopbackRedirect, t as OAuthError } from \"../../../../chunks/oauth.js\";\nimport { j as isApiError } from \"../../../../chunks/access.js\";\nimport \"../../../../chunks/api.js\";\nimport { r as oauthServer } from \"../../../../chunks/server2.js\";\nimport { n as mintConsentToken, t as consentOffer } from \"../../../../chunks/handlers.js\";\nimport { n as toApiRequest } from \"../../../../chunks/sveltekit.js\";\nimport { error, fail, redirect } from \"@sveltejs/kit\";\n//#region src/routes/oauth/authorize/+page.server.ts\nvar TOKEN_DAYS = 30;\nfunction serverFor(origin) {\n\treturn oauthServer(origin) ?? error(503, \"OAuth is not configured on this server.\");\n}\n/**\n* The authorize query without SvelteKit's `/action` key. The forms post to the\n* same query, so a failed action re-renders this page rather than a bare URL.\n*/\nfunction authorizeQuery(url) {\n\tconst params = new URLSearchParams(url.search);\n\tfor (const key of [...params.keys()]) if (key.startsWith(\"/\")) params.delete(key);\n\treturn params.toString();\n}\nasync function parse(url) {\n\ttry {\n\t\tconst query = new URLSearchParams(authorizeQuery(url));\n\t\treturn { request: await serverFor(url.origin).parseAuthorizeRequest(query) };\n\t} catch (err) {\n\t\tif (err instanceof OAuthError) return { problem: err.message };\n\t\tthrow err;\n\t}\n}\nvar load = async (event) => {\n\tconst { url, locals } = event;\n\tconst { request, problem } = await parse(url);\n\tif (!request) return {\n\t\tok: false,\n\t\tproblem\n\t};\n\tif (!locals.user || !locals.ctx) redirect(303, `/login?redirectTo=${encodeURIComponent(url.pathname + url.search)}`);\n\tconst offer = await consentOffer(toApiRequest(event), request.scopes);\n\tif (!offer) return {\n\t\tok: false,\n\t\tproblem: \"Your account can’t give an app this access in any of your organizations.\"\n\t};\n\tconst acting = offer.orgs.find((o) => o.id === locals.ctx?.actingOrgId);\n\treturn {\n\t\tok: true,\n\t\tquery: authorizeQuery(url),\n\t\tclientName: request.client.name,\n\t\tbuiltIn: request.client.builtIn,\n\t\tredirectHost: new URL(request.redirectUri).host,\n\t\tloopback: isLoopbackRedirect(request.redirectUri),\n\t\tchoices: offer.choices.map((c) => c.access),\n\t\torgs: offer.orgs,\n\t\torgId: (acting ?? offer.orgs[0]).id,\n\t\tdays: TOKEN_DAYS\n\t};\n};\nvar actions = {\n\tapprove: async (event) => {\n\t\tconst form = await event.request.formData();\n\t\tconst { request } = await parse(event.url);\n\t\tif (!request) return fail(400, { error: \"This sign-in request is no longer valid.\" });\n\t\tif (!event.locals.ctx) return fail(403, { error: \"Sign in first.\" });\n\t\tconst api = toApiRequest(event);\n\t\tconst choice = (await consentOffer(api, request.scopes))?.choices.find((c) => c.access === form.get(\"access\"));\n\t\tif (!choice) return fail(400, { error: \"That access isn’t available to you.\" });\n\t\tlet minted;\n\t\ttry {\n\t\t\tminted = await mintConsentToken(api, String(form.get(\"orgId\") ?? \"\"), {\n\t\t\t\tname: `${request.client.name} (OAuth)`.slice(0, 100),\n\t\t\t\tscopes: apiScopesFor(choice.scopes),\n\t\t\t\texpiresInDays: TOKEN_DAYS\n\t\t\t});\n\t\t} catch (err) {\n\t\t\tif (isApiError(err)) return fail(err.status, { error: err.message });\n\t\t\tthrow err;\n\t\t}\n\t\tredirect(303, serverFor(event.url.origin).approve(request, {\n\t\t\ttokenId: minted.token.id,\n\t\t\tsecret: minted.secret,\n\t\t\tscopes: choice.scopes,\n\t\t\texpiresAt: minted.token.expiresAt\n\t\t}));\n\t},\n\tdeny: async ({ url }) => {\n\t\tconst { request } = await parse(url);\n\t\tif (!request) return fail(400, { error: \"This sign-in request is no longer valid.\" });\n\t\tredirect(303, serverFor(url.origin).deny(request));\n\t}\n};\n//#endregion\nexport { actions, load };\n"],"names":[],"mappings":";;;;;;;;AAOA;AACA,IAAI,UAAU,GAAG,EAAE;AACnB,SAAS,SAAS,CAAC,MAAM,EAAE;AAC3B,CAAC,OAAO,WAAW,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,yCAAyC,CAAC;AACpF;AACA;AACA;AACA;AACA;AACA,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,CAAC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;AAC/C,CAAC,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;AAClF,CAAC,OAAO,MAAM,CAAC,QAAQ,EAAE;AACzB;AACA,eAAe,KAAK,CAAC,GAAG,EAAE;AAC1B,CAAC,IAAI;AACL,EAAE,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;AACxD,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE;AAC9E,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,IAAI,GAAG,YAAY,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;AAChE,EAAE,MAAM,GAAG;AACX,CAAC;AACD;AACA,IAAI,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK;AAC9B,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC;AAC9C,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO;AACtB,EAAE,EAAE,EAAE,KAAK;AACX,EAAE;AACF,EAAE;AACF,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACrH,CAAC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC;AACtE,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO;AACpB,EAAE,EAAE,EAAE,KAAK;AACX,EAAE,OAAO,EAAE;AACX,EAAE;AACF,CAAC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC;AACxE,CAAC,OAAO;AACR,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC;AAC5B,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;AACjC,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;AACjC,EAAE,YAAY,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI;AACjD,EAAE,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC;AACnD,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;AAC7C,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;AAClB,EAAE,KAAK,EAAE,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;AACrC,EAAE,IAAI,EAAE;AACR,EAAE;AACF,CAAC;AACD,IAAI,OAAO,GAAG;AACd,CAAC,OAAO,EAAE,OAAO,KAAK,KAAK;AAC3B,EAAE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE;AAC7C,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;AAC5C,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC;AACvF,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;AACtE,EAAE,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC;AACjC,EAAE,MAAM,MAAM,GAAG,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAChH,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;AACjF,EAAE,IAAI,MAAM;AACZ,EAAE,IAAI;AACN,GAAG,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE;AACzE,IAAI,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;AACxD,IAAI,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;AACvC,IAAI,aAAa,EAAE;AACnB,IAAI,CAAC;AACL,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;AACvE,GAAG,MAAM,GAAG;AACZ,EAAE;AACF,EAAE,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE;AAC7D,GAAG,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;AAC3B,GAAG,MAAM,EAAE,MAAM,CAAC,MAAM;AACxB,GAAG,MAAM,EAAE,MAAM,CAAC,MAAM;AACxB,GAAG,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC;AAC3B,GAAG,CAAC,CAAC;AACL,CAAC,CAAC;AACF,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK;AAC1B,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC;AACtC,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC;AACvF,EAAE,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACpD,CAAC;AACD,CAAC;;;;;;;;;;"}

package/build/server/chunks/entries/pages/oauth/authorize/_page.svelte.js-DO-gnNhy.js

@@ -0,0 +1,122 @@
+import { ag as head, ap as escape_html, af as attr, aj as stringify, ak as ensure_array_like } from '../../../../chunks/server.js-eNE8c09e.js';
+import { B as Button } from '../../../../chunks/button.js-Cp5wuqrc.js';
+import { p as page } from '../../../../chunks/state.js-CcGurDB2.js';
+import { B as Badge } from '../../../../chunks/badge.js-BnFZznXd.js';
+import { C as Callout } from '../../../../chunks/Callout.js-_5j40j01.js';
+import '../../../../chunks/uneval.js-NmnccxCg.js';
+import 'clsx';
+import '../../../../chunks/utils2.js-C1oP9gJ9.js';
+import 'tailwind-merge';
+import 'tailwind-variants';
+import '../../../../chunks/client.js-Dxf9BlQ8.js';
+import '../../../../chunks/index-server.js-B4lHrS_U.js';
+import '../../../../chunks/shared.js-BStsS1ju.js';
+import '@sveltejs/kit/internal';
+import '../../../../chunks/exports.js-DurfUvtz.js';
+import '../../../../chunks/routing.js-CvcjLFt6.js';
+import '../../../../chunks/internal2.js-B1gdPcAg.js';
+import '../../../../chunks/legacy-client.js-CnRScLY2.js';
+import '../../../../chunks/events.js-Dn4NgQ5T.js';
+import '@sveltejs/kit/internal/server';
+import '../../../../chunks/severity.js-D9BMFvsP.js';
+
+//#region src/routes/oauth/authorize/+page.svelte
+function _page($$renderer, $$props) {
+	$$renderer.component(($$renderer) => {
+		let { data, form } = $$props;
+		const ACCESS_TEXT = {
+			read: "Read: browse definitions and their inputs",
+			solve: "Read and run solves: spends your compute budget",
+			upload: "Upload definitions: create definitions and new versions where you can, and make a version live. It can’t delete or share anything."
+		};
+		head("1wgpi7w", $$renderer, ($$renderer) => {
+			$$renderer.title(($$renderer) => {
+				$$renderer.push(`<title>Connect an app - ${escape_html(page.data.branding.name)}</title>`);
+			});
+		});
+		$$renderer.push(`<div class="bg-background flex min-h-dvh items-center justify-center px-4 py-12 sm:px-6 lg:px-8"><div class="w-full max-w-sm space-y-6">`);
+		if (!data.ok) $$renderer.push(`<!--[0--><div class="space-y-1 text-center"><h2 class="text-foreground text-2xl font-bold tracking-tight">Can’t connect</h2> <p class="text-muted-foreground text-sm">${escape_html(data.problem)}</p></div>`);
+		else {
+			$$renderer.push(`<!--[-1--><div class="space-y-1 text-center"><h2 class="text-foreground text-2xl font-bold tracking-tight">Connect ${escape_html(data.clientName)}</h2> `);
+			if (data.builtIn) {
+				$$renderer.push("<!--[0-->");
+				Badge($$renderer, {
+					variant: "secondary",
+					children: ($$renderer) => {
+						$$renderer.push(`<!---->Built into ${escape_html(page.data.branding.name)}`);
+					},
+					$$slots: { default: true }
+				});
+			} else $$renderer.push(`<!--[-1--><p class="text-muted-foreground text-xs">The app chose this name itself. ${escape_html(page.data.branding.name)} hasn’t checked it.</p>`);
+			$$renderer.push(`<!--]--> <p class="text-muted-foreground text-sm">${escape_html(data.clientName)} wants to use ${escape_html(page.data.branding.name)} as you. It gets an API token that lasts
+					${escape_html(data.days)} days. You can revoke it under Team → API tokens.</p></div> `);
+			Callout($$renderer, {
+				tone: data.loopback ? "warning" : "info",
+				children: ($$renderer) => {
+					$$renderer.push(`<!---->The token goes to <span class="font-medium">${escape_html(data.redirectHost)}</span>. `);
+					if (data.loopback) $$renderer.push(`<!--[0-->That is a program on your own computer. Only continue if you just started this connection
+					yourself.`);
+					else $$renderer.push("<!--[-1-->");
+					$$renderer.push(`<!--]-->`);
+				},
+				$$slots: { default: true }
+			});
+			$$renderer.push(`<!----> `);
+			if (form?.error) {
+				$$renderer.push("<!--[0-->");
+				Callout($$renderer, {
+					tone: "danger",
+					children: ($$renderer) => {
+						$$renderer.push(`<!---->${escape_html(form.error)}`);
+					},
+					$$slots: { default: true }
+				});
+			} else $$renderer.push("<!--[-1-->");
+			$$renderer.push(`<!--]--> <form method="POST"${attr("action", `?${stringify(data.query)}&/approve`)} class="space-y-4">`);
+			if (data.orgs.length > 1) {
+				$$renderer.push(`<!--[0--><label class="block space-y-2 text-sm"><span class="text-foreground font-medium">Organization</span> <select name="orgId" class="border-input bg-background w-full rounded-md border px-3 py-2 text-sm"><!--[-->`);
+				const each_array = ensure_array_like(data.orgs);
+				for (let $$index = 0, $$length = each_array.length; $$index < $$length; $$index++) {
+					let org = each_array[$$index];
+					$$renderer.option({
+						value: org.id,
+						selected: org.id === data.orgId
+					}, ($$renderer) => {
+						$$renderer.push(`${escape_html(org.name)}`);
+					});
+				}
+				$$renderer.push(`<!--]--></select></label>`);
+			} else $$renderer.push(`<!--[-1--><input type="hidden" name="orgId"${attr("value", data.orgId)}/> <p class="text-muted-foreground text-sm">In <span class="text-foreground font-medium">${escape_html(data.orgs[0]?.name)}</span>.</p>`);
+			$$renderer.push(`<!--]--> <fieldset class="space-y-2"><legend class="text-foreground text-sm font-medium">Access</legend> <!--[-->`);
+			const each_array_1 = ensure_array_like(data.choices);
+			for (let i = 0, $$length = each_array_1.length; i < $$length; i++) {
+				let access = each_array_1[i];
+				$$renderer.push(`<label class="flex items-start gap-2 text-sm"><input type="radio" name="access"${attr("value", access)}${attr("checked", i === data.choices.length - 1, true)}/> <span>${escape_html(ACCESS_TEXT[access])}</span></label>`);
+			}
+			$$renderer.push(`<!--]--></fieldset> `);
+			Button($$renderer, {
+				type: "submit",
+				class: "w-full",
+				children: ($$renderer) => {
+					$$renderer.push(`<!---->Allow`);
+				},
+				$$slots: { default: true }
+			});
+			$$renderer.push(`<!----></form> <form method="POST"${attr("action", `?${stringify(data.query)}&/deny`)}>`);
+			Button($$renderer, {
+				type: "submit",
+				variant: "outline",
+				class: "w-full",
+				children: ($$renderer) => {
+					$$renderer.push(`<!---->Cancel`);
+				},
+				$$slots: { default: true }
+			});
+			$$renderer.push(`<!----></form>`);
+		}
+		$$renderer.push(`<!--]--></div></div>`);
+	});
+}
+
+export { _page as default };
+//# sourceMappingURL=_page.svelte.js-DO-gnNhy.js.map

package/build/server/chunks/entries/pages/oauth/authorize/_page.svelte.js-DO-gnNhy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_page.svelte.js-DO-gnNhy.js","sources":["../../../../../../../.svelte-kit/output/server/entries/pages/oauth/authorize/_page.svelte.js"],"sourcesContent":["import { D as attr, c as head, k as escape_html, p as stringify, s as ensure_array_like } from \"../../../../chunks/server.js\";\nimport { t as Button } from \"../../../../chunks/button.js\";\nimport { t as page } from \"../../../../chunks/state.js\";\nimport { t as Badge } from \"../../../../chunks/badge.js\";\nimport { t as Callout } from \"../../../../chunks/Callout.js\";\n//#region src/routes/oauth/authorize/+page.svelte\nfunction _page($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\tlet { data, form } = $$props;\n\t\tconst ACCESS_TEXT = {\n\t\t\tread: \"Read: browse definitions and their inputs\",\n\t\t\tsolve: \"Read and run solves: spends your compute budget\",\n\t\t\tupload: \"Upload definitions: create definitions and new versions where you can, and make a version live. It can’t delete or share anything.\"\n\t\t};\n\t\thead(\"1wgpi7w\", $$renderer, ($$renderer) => {\n\t\t\t$$renderer.title(($$renderer) => {\n\t\t\t\t$$renderer.push(`<title>Connect an app - ${escape_html(page.data.branding.name)}</title>`);\n\t\t\t});\n\t\t});\n\t\t$$renderer.push(`<div class=\"bg-background flex min-h-dvh items-center justify-center px-4 py-12 sm:px-6 lg:px-8\"><div class=\"w-full max-w-sm space-y-6\">`);\n\t\tif (!data.ok) $$renderer.push(`<!--[0--><div class=\"space-y-1 text-center\"><h2 class=\"text-foreground text-2xl font-bold tracking-tight\">Can’t connect</h2> <p class=\"text-muted-foreground text-sm\">${escape_html(data.problem)}</p></div>`);\n\t\telse {\n\t\t\t$$renderer.push(`<!--[-1--><div class=\"space-y-1 text-center\"><h2 class=\"text-foreground text-2xl font-bold tracking-tight\">Connect ${escape_html(data.clientName)}</h2> `);\n\t\t\tif (data.builtIn) {\n\t\t\t\t$$renderer.push(\"<!--[0-->\");\n\t\t\t\tBadge($$renderer, {\n\t\t\t\t\tvariant: \"secondary\",\n\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t$$renderer.push(`<!---->Built into ${escape_html(page.data.branding.name)}`);\n\t\t\t\t\t},\n\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t});\n\t\t\t} else $$renderer.push(`<!--[-1--><p class=\"text-muted-foreground text-xs\">The app chose this name itself. ${escape_html(page.data.branding.name)} hasn’t checked it.</p>`);\n\t\t\t$$renderer.push(`<!--]--> <p class=\"text-muted-foreground text-sm\">${escape_html(data.clientName)} wants to use ${escape_html(page.data.branding.name)} as you. It gets an API token that lasts\n\t\t\t\t\t${escape_html(data.days)} days. You can revoke it under Team → API tokens.</p></div> `);\n\t\t\tCallout($$renderer, {\n\t\t\t\ttone: data.loopback ? \"warning\" : \"info\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->The token goes to <span class=\"font-medium\">${escape_html(data.redirectHost)}</span>. `);\n\t\t\t\t\tif (data.loopback) $$renderer.push(`<!--[0-->That is a program on your own computer. Only continue if you just started this connection\n\t\t\t\t\tyourself.`);\n\t\t\t\t\telse $$renderer.push(\"<!--[-1-->\");\n\t\t\t\t\t$$renderer.push(`<!--]-->`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t\t$$renderer.push(`<!----> `);\n\t\t\tif (form?.error) {\n\t\t\t\t$$renderer.push(\"<!--[0-->\");\n\t\t\t\tCallout($$renderer, {\n\t\t\t\t\ttone: \"danger\",\n\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t$$renderer.push(`<!---->${escape_html(form.error)}`);\n\t\t\t\t\t},\n\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t});\n\t\t\t} else $$renderer.push(\"<!--[-1-->\");\n\t\t\t$$renderer.push(`<!--]--> <form method=\"POST\"${attr(\"action\", `?${stringify(data.query)}&/approve`)} class=\"space-y-4\">`);\n\t\t\tif (data.orgs.length > 1) {\n\t\t\t\t$$renderer.push(`<!--[0--><label class=\"block space-y-2 text-sm\"><span class=\"text-foreground font-medium\">Organization</span> <select name=\"orgId\" class=\"border-input bg-background w-full rounded-md border px-3 py-2 text-sm\"><!--[-->`);\n\t\t\t\tconst each_array = ensure_array_like(data.orgs);\n\t\t\t\tfor (let $$index = 0, $$length = each_array.length; $$index < $$length; $$index++) {\n\t\t\t\t\tlet org = each_array[$$index];\n\t\t\t\t\t$$renderer.option({\n\t\t\t\t\t\tvalue: org.id,\n\t\t\t\t\t\tselected: org.id === data.orgId\n\t\t\t\t\t}, ($$renderer) => {\n\t\t\t\t\t\t$$renderer.push(`${escape_html(org.name)}`);\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t\t$$renderer.push(`<!--]--></select></label>`);\n\t\t\t} else $$renderer.push(`<!--[-1--><input type=\"hidden\" name=\"orgId\"${attr(\"value\", data.orgId)}/> <p class=\"text-muted-foreground text-sm\">In <span class=\"text-foreground font-medium\">${escape_html(data.orgs[0]?.name)}</span>.</p>`);\n\t\t\t$$renderer.push(`<!--]--> <fieldset class=\"space-y-2\"><legend class=\"text-foreground text-sm font-medium\">Access</legend> <!--[-->`);\n\t\t\tconst each_array_1 = ensure_array_like(data.choices);\n\t\t\tfor (let i = 0, $$length = each_array_1.length; i < $$length; i++) {\n\t\t\t\tlet access = each_array_1[i];\n\t\t\t\t$$renderer.push(`<label class=\"flex items-start gap-2 text-sm\"><input type=\"radio\" name=\"access\"${attr(\"value\", access)}${attr(\"checked\", i === data.choices.length - 1, true)}/> <span>${escape_html(ACCESS_TEXT[access])}</span></label>`);\n\t\t\t}\n\t\t\t$$renderer.push(`<!--]--></fieldset> `);\n\t\t\tButton($$renderer, {\n\t\t\t\ttype: \"submit\",\n\t\t\t\tclass: \"w-full\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->Allow`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t\t$$renderer.push(`<!----></form> <form method=\"POST\"${attr(\"action\", `?${stringify(data.query)}&/deny`)}>`);\n\t\t\tButton($$renderer, {\n\t\t\t\ttype: \"submit\",\n\t\t\t\tvariant: \"outline\",\n\t\t\t\tclass: \"w-full\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->Cancel`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t\t$$renderer.push(`<!----></form>`);\n\t\t}\n\t\t$$renderer.push(`<!--]--></div></div>`);\n\t});\n}\n//#endregion\nexport { _page as default };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAKA;AACA,SAAS,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE;AACpC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,OAAO;AAC9B,EAAE,MAAM,WAAW,GAAG;AACtB,GAAG,IAAI,EAAE,2CAA2C;AACpD,GAAG,KAAK,EAAE,iDAAiD;AAC3D,GAAG,MAAM,EAAE;AACX,GAAG;AACH,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,UAAU,KAAK;AAC9C,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,UAAU,KAAK;AACpC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,wBAAwB,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC9F,GAAG,CAAC,CAAC;AACL,EAAE,CAAC,CAAC;AACJ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,wIAAwI,CAAC,CAAC;AAC7J,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,sKAAsK,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC;AAC/O,OAAO;AACP,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,mHAAmH,EAAE,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAC9K,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE;AACrB,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AAChC,IAAI,KAAK,CAAC,UAAU,EAAE;AACtB,KAAK,OAAO,EAAE,WAAW;AACzB,KAAK,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC/B,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,kBAAkB,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClF,KAAK,CAAC;AACN,KAAK,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC7B,KAAK,CAAC;AACN,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,mFAAmF,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,uBAAuB,CAAC,CAAC;AAC9K,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,kDAAkD,EAAE,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,cAAc,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC1J,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,4DAA4D,CAAC,CAAC;AAC5F,GAAG,OAAO,CAAC,UAAU,EAAE;AACvB,IAAI,IAAI,EAAE,IAAI,CAAC,QAAQ,GAAG,SAAS,GAAG,MAAM;AAC5C,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,mDAAmD,EAAE,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC;AACrH,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;AACzC,cAAc,CAAC,CAAC;AAChB,UAAU,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACvC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAChC,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC9B,GAAG,IAAI,IAAI,EAAE,KAAK,EAAE;AACpB,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AAChC,IAAI,OAAO,CAAC,UAAU,EAAE;AACxB,KAAK,IAAI,EAAE,QAAQ;AACnB,KAAK,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC/B,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1D,KAAK,CAAC;AACN,KAAK,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC7B,KAAK,CAAC;AACN,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACvC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,4BAA4B,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;AAC5H,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE;AAC7B,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,yNAAyN,CAAC,CAAC;AAChP,IAAI,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;AACnD,IAAI,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,EAAE;AACvF,KAAK,IAAI,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC;AAClC,KAAK,UAAU,CAAC,MAAM,CAAC;AACvB,MAAM,KAAK,EAAE,GAAG,CAAC,EAAE;AACnB,MAAM,QAAQ,EAAE,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC;AAChC,MAAM,EAAE,CAAC,UAAU,KAAK;AACxB,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACjD,KAAK,CAAC,CAAC;AACP,IAAI;AACJ,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,yBAAyB,CAAC,CAAC;AAChD,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,2CAA2C,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,yFAAyF,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC;AAC3O,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,iHAAiH,CAAC,CAAC;AACvI,GAAG,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;AACvD,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE;AACtE,IAAI,IAAI,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC;AAChC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,+EAA+E,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;AAChP,GAAG;AACH,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,CAAC;AAC1C,GAAG,MAAM,CAAC,UAAU,EAAE;AACtB,IAAI,IAAI,EAAE,QAAQ;AAClB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC;AACpC,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,kCAAkC,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7G,GAAG,MAAM,CAAC,UAAU,EAAE;AACtB,IAAI,IAAI,EAAE,QAAQ;AAClB,IAAI,OAAO,EAAE,SAAS;AACtB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;AACrC,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;AACpC,EAAE;AACF,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/entries/pages/projects/_layout.server.ts.js-DI3O4ttB.js

@@ -0,0 +1,22 @@
+import { h as hasPermission } from '../../../chunks/src.js-CkFJvvTE.js';
+import { redirect } from '@sveltejs/kit';
+
+//#region src/routes/projects/+layout.server.ts
+var load = async ({ locals }) => {
+	if (!locals.user || !locals.ctx) redirect(303, "/login?redirectTo=/projects");
+	const canManageDefinitions = hasPermission(locals.ctx, "manage_definitions");
+	const canManageProjects = hasPermission(locals.ctx, "manage_projects");
+	if (!canManageDefinitions && !canManageProjects) redirect(303, "/library");
+	return {
+		platformPermissions: locals.ctx.platformPermissions,
+		orgPermissions: locals.ctx.orgPermissions
+	};
+};
+
+var _layout_server_ts = /*#__PURE__*/Object.freeze({
+	__proto__: null,
+	load: load
+});
+
+export { _layout_server_ts as _ };
+//# sourceMappingURL=_layout.server.ts.js-DI3O4ttB.js.map

package/build/server/chunks/entries/pages/projects/_layout.server.ts.js-DI3O4ttB.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_layout.server.ts.js-DI3O4ttB.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/projects/_layout.server.ts.js"],"sourcesContent":["import { r as hasPermission } from \"../../../chunks/src.js\";\nimport { redirect } from \"@sveltejs/kit\";\n//#region src/routes/projects/+layout.server.ts\nvar load = async ({ locals }) => {\n\tif (!locals.user || !locals.ctx) redirect(303, \"/login?redirectTo=/projects\");\n\tconst canManageDefinitions = hasPermission(locals.ctx, \"manage_definitions\");\n\tconst canManageProjects = hasPermission(locals.ctx, \"manage_projects\");\n\tif (!canManageDefinitions && !canManageProjects) redirect(303, \"/library\");\n\treturn {\n\t\tplatformPermissions: locals.ctx.platformPermissions,\n\t\torgPermissions: locals.ctx.orgPermissions\n\t};\n};\n//#endregion\nexport { load };\n"],"names":[],"mappings":";;;AAEA;AACA,IAAI,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AACjC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,6BAA6B,CAAC;AAC9E,CAAC,MAAM,oBAAoB,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,oBAAoB,CAAC;AAC7E,CAAC,MAAM,iBAAiB,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,iBAAiB,CAAC;AACvE,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;AAC3E,CAAC,OAAO;AACR,EAAE,mBAAmB,EAAE,MAAM,CAAC,GAAG,CAAC,mBAAmB;AACrD,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC;AAC7B,EAAE;AACF,CAAC;;;;;;;;;"}

package/build/server/chunks/entries/pages/projects/_layout.svelte.js-D9XHa7nj.js

@@ -0,0 +1,50 @@
+import 'clsx';
+import { A as AppHeader } from '../../../chunks/AppHeader.js-DQAn0DrS.js';
+import '../../../chunks/server.js-eNE8c09e.js';
+import '../../../chunks/uneval.js-NmnccxCg.js';
+import '../../../chunks/footerContext.svelte.js-CDuebWvb.js';
+import '../../../chunks/index-server2.js-Defl0_Bj.js';
+import '../../../chunks/utils2.js-C1oP9gJ9.js';
+import 'tailwind-merge';
+import '../../../chunks/SettingsMenu.js-C9fbWfyL.js';
+import '../../../chunks/events.js-Dn4NgQ5T.js';
+import '../../../chunks/src.js-CkFJvvTE.js';
+import 'zod';
+import '../../../chunks/create-id.js-DQq_g2YK.js';
+import '../../../chunks/button.js-Cp5wuqrc.js';
+import 'tailwind-variants';
+import '../../../chunks/localeContext.svelte.js-Bngo7vRN.js';
+import '../../../chunks/popper-layer-force-mount.js-w6fkZ5aq.js';
+import '../../../chunks/scroll-lock.js-2WQOe0ze.js';
+import '../../../chunks/index-server.js-B4lHrS_U.js';
+import '../../../chunks/severity.js-D9BMFvsP.js';
+import '../../../chunks/roving-focus-group.js-YVgHNhk9.js';
+import '../../../chunks/shield.js--OZ6yfQ6.js';
+import '../../../chunks/users.js-ByB4SxDK.js';
+import '../../../chunks/dialog-description.js-CH2wAEWA.js';
+import '../../../chunks/dom-typeahead.svelte.js-BkbekRwa.js';
+import '../../../chunks/dialog.js-DPKBNhmS.js';
+import '../../../chunks/x.js-BulvqqL2.js';
+import '../../../chunks/state.js-CcGurDB2.js';
+import '../../../chunks/client.js-Dxf9BlQ8.js';
+import '../../../chunks/shared.js-BStsS1ju.js';
+import '@sveltejs/kit/internal';
+import '../../../chunks/exports.js-DurfUvtz.js';
+import '../../../chunks/routing.js-CvcjLFt6.js';
+import '../../../chunks/internal2.js-B1gdPcAg.js';
+import '../../../chunks/legacy-client.js-CnRScLY2.js';
+import '@sveltejs/kit/internal/server';
+
+//#region src/routes/projects/+layout.svelte
+function _layout($$renderer, $$props) {
+	let { children } = $$props;
+	AppHeader($$renderer, {
+		mode: "fixed",
+		children: ($$renderer) => {
+			children?.($$renderer);
+			$$renderer.push(`<!---->`);
+		}});
+}
+
+export { _layout as default };
+//# sourceMappingURL=_layout.svelte.js-D9XHa7nj.js.map