@selvajs/selva 4.20.0-beta.3 → 4.20.0-beta.5

package/build/server/chunks/entries/pages/accept-invite/_page.server.ts.js-CCcJvjjf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_page.server.ts.js-CCcJvjjf.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/accept-invite/_page.server.ts.js"],"sourcesContent":["import { t as SYSTEM_CONTEXT } from \"../../../chunks/src.js\";\nimport { C as getUserProfileStore, d as getInviteStore, h as getOrganizationProvider, o as getDataProvider, r as getAuthProvider } from \"../../../chunks/providers.server.js\";\nimport { l as renderThrown } from \"../../../chunks/definitions.js\";\nimport { t as setUserPlatformPermissions } from \"../../../chunks/permissions.server.js\";\nimport { u as setSessionCookie } from \"../../../chunks/admin-auth.server.js\";\nimport { t as hashToken } from \"../../../chunks/token3.server.js\";\nimport { fail, redirect } from \"@sveltejs/kit\";\n//#region ../server/src/providers/auth-lookup.ts\nvar PAGE_LIMIT = 200;\nvar MAX_PAGES = 100;\n/**\n* `IAuthProvider` has no by-email lookup and `listUsers` takes no filter, so\n* this scans. Acceptable because the only caller is invite acceptance — once\n* per invite, never on a hot path.\n*\n* A truncated scan would report an existing user as absent and send the flow\n* down the create-account branch, where the provider rejects the duplicate. So\n* exhausting the cursor matters: `null` must mean \"not found\", not \"gave up\".\n* Returns `null` when the provider has no user store (`listUsers` → null) or\n* when the cap is hit.\n*/\nasync function findAuthUserByEmail(auth, email) {\n\tconst needle = email.trim().toLowerCase();\n\tif (!needle) return null;\n\tlet cursor;\n\tfor (let page = 0; page < MAX_PAGES; page++) {\n\t\tconst result = await auth.listUsers({\n\t\t\tlimit: PAGE_LIMIT,\n\t\t\tcursor\n\t\t});\n\t\tif (!result) return null;\n\t\tconst hit = result.items.find((u) => u.email?.trim().toLowerCase() === needle);\n\t\tif (hit) return hit;\n\t\tcursor = result.nextCursor;\n\t\tif (!cursor) return null;\n\t}\n\treturn null;\n}\n//#endregion\n//#region src/routes/accept-invite/+page.server.ts\n/**\n* Signup mode for an invite whose email has no account yet:\n*   - `password` — the provider owns credentials; show password + confirm fields.\n*   - `proxy`    — identity comes from upstream-proxy headers; the visit itself\n*                  is the proof of identity and no password is collected.\n*/\nfunction signupMode(auth) {\n\tif (auth.passwordAuth) return \"password\";\n\treturn auth.proxyAuth && auth.createUser ? \"proxy\" : \"password\";\n}\n/**\n* Public page — the invite token is the capability. `SYSTEM_CONTEXT` is\n* passed to the invite store because there is no user session at this point;\n* the store treats an unknown/expired/consumed invite as a miss regardless.\n*\n* The raw URL token is HMAC-hashed before lookup — the store sees only the\n* digest. Mirrors the share-link flow.\n*\n* An invite addressed to an email that already has an account takes the `join`\n* mode instead of signing up: there is nothing to create, only a membership to\n* add. That branch demands a session, because the token proves the invite is\n* genuine — not that the visitor is the person it names. Honouring it\n* anonymously would let anyone holding a forwarded link join an org as someone\n* else.\n*/\nvar load = async ({ url, locals }) => {\n\tconst token = url.searchParams.get(\"token\")?.trim();\n\tif (!token) return {\n\t\tok: false,\n\t\treason: \"This invite link is missing a token.\"\n\t};\n\tconst invite = await getInviteStore().getByTokenHash(SYSTEM_CONTEXT, hashToken(token));\n\tif (!invite) return {\n\t\tok: false,\n\t\treason: \"This invite link is invalid or has expired.\"\n\t};\n\tconst org = await getOrganizationProvider().getOrg(SYSTEM_CONTEXT, invite.orgId);\n\tconst auth = getAuthProvider();\n\tconst existing = await findAuthUserByEmail(auth, invite.email).catch(() => null);\n\tconst mode = existing ? \"join\" : signupMode(auth);\n\treturn {\n\t\tok: true,\n\t\temail: invite.email,\n\t\torgName: org?.name ?? \"the organization\",\n\t\ttoken,\n\t\tmode,\n\t\tsignedInAsInvitee: mode === \"join\" && !!locals.user && locals.user.id === existing.id\n\t};\n};\nvar actions = { default: async ({ request, cookies, locals }) => {\n\tconst data = await request.formData();\n\tconst token = data.get(\"token\")?.trim() ?? \"\";\n\tconst password = data.get(\"password\");\n\tconst confirm = data.get(\"confirm\");\n\tconst displayName = data.get(\"displayName\")?.trim() || void 0;\n\tif (!token) return fail(400, { error: \"Missing invite token.\" });\n\tlet invite;\n\ttry {\n\t\tinvite = await getInviteStore().getByTokenHash(SYSTEM_CONTEXT, hashToken(token));\n\t} catch {\n\t\treturn fail(500, { error: \"Could not validate the invite. Please try again.\" });\n\t}\n\tif (!invite) return fail(410, { error: \"This invite link is invalid or has expired.\" });\n\tconst auth = getAuthProvider();\n\tconst existing = await findAuthUserByEmail(auth, invite.email).catch(() => null);\n\tconst mode = existing ? \"join\" : signupMode(auth);\n\tif (mode === \"password\") {\n\t\tif (!password || password.length < 8) return fail(400, { error: \"Password must be at least 8 characters.\" });\n\t\tif (password !== confirm) return fail(400, { error: \"Passwords do not match.\" });\n\t}\n\tif (mode === \"join\" && locals.user?.id !== existing.id) return fail(401, { error: `${invite.email} already has an account. Sign in as ${invite.email}, then open this link again to join.` });\n\tlet user;\n\tif (mode === \"join\") user = existing;\n\telse try {\n\t\tif (mode === \"password\" && auth.passwordAuth) user = await auth.passwordAuth.createUserWithPassword(invite.email, password);\n\t\telse if (mode === \"proxy\" && auth.createUser) user = await auth.createUser(invite.email);\n\t\telse return fail(501, { error: \"This provider does not support invite-based signup.\" });\n\t} catch (err) {\n\t\tconst msg = err instanceof Error ? err.message : \"Could not create your account.\";\n\t\treturn fail(400, { error: msg });\n\t}\n\ttry {\n\t\tif (invite.platformPermissions?.length) {\n\t\t\tawait getDataProvider().ensureUser(SYSTEM_CONTEXT, user.id);\n\t\t\tconst granted = await setUserPlatformPermissions(SYSTEM_CONTEXT, user.id, invite.platformPermissions);\n\t\t\tif (granted !== \"ok\") throw new Error(`Platform permission grant failed: ${granted}`);\n\t\t}\n\t\tconst orgs = getOrganizationProvider();\n\t\tif (!await orgs.getOrgMember(SYSTEM_CONTEXT, invite.orgId, user.id)) {\n\t\t\tconst joinedAt = (/* @__PURE__ */ new Date()).toISOString();\n\t\t\tawait orgs.addOrgMember(SYSTEM_CONTEXT, {\n\t\t\t\torgId: invite.orgId,\n\t\t\t\tuserId: user.id,\n\t\t\t\trole: invite.orgRole,\n\t\t\t\tpermissions: invite.orgPermissions,\n\t\t\t\tjoinedAt,\n\t\t\t\tupdatedAt: joinedAt,\n\t\t\t\tupdatedBy: invite.invitedBy,\n\t\t\t\tdeletedAt: null\n\t\t\t});\n\t\t}\n\t\tawait getInviteStore().markAccepted(SYSTEM_CONTEXT, invite.id, user.id);\n\t} catch (err) {\n\t\tlocals.log.error(\"Post-signup wiring failed\", {\n\t\t\tcomponent: \"accept-invite\",\n\t\t\terr: renderThrown(err)\n\t\t});\n\t\treturn fail(500, { error: mode === \"join\" ? \"We could not add you to the organization. Please contact your admin.\" : \"Your account was created, but we could not finish joining the organization. Please contact your admin.\" });\n\t}\n\tif (displayName && mode !== \"join\") try {\n\t\tawait getDataProvider().ensureUser(SYSTEM_CONTEXT, user.id);\n\t\tconst result = await getUserProfileStore().updateProfile(SYSTEM_CONTEXT, user.id, { displayName });\n\t\tif (result !== \"ok\") locals.log.warn(\"Could not set display name at signup\", {\n\t\t\tcomponent: \"accept-invite\",\n\t\t\tuserId: user.id,\n\t\t\tresult\n\t\t});\n\t} catch (err) {\n\t\tlocals.log.warn(\"Could not set display name at signup\", {\n\t\t\tcomponent: \"accept-invite\",\n\t\t\tuserId: user.id,\n\t\t\terr: renderThrown(err)\n\t\t});\n\t}\n\tif (mode === \"password\" && auth.passwordAuth) {\n\t\tconst loginResult = await auth.passwordAuth.verifyLogin(invite.email, password);\n\t\tif (loginResult.kind !== \"success\") return fail(500, { error: \"Your account was created but login failed. Please sign in manually.\" });\n\t\tsetSessionCookie(cookies, loginResult.sessionToken);\n\t}\n\tredirect(303, mode === \"join\" ? \"/library\" : \"/admin\");\n} };\n//#endregion\nexport { actions, load };\n"],"names":[],"mappings":";;;;;;;;AAOA;AACA,IAAI,UAAU,GAAG,GAAG;AACpB,IAAI,SAAS,GAAG,GAAG;AACnB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE;AAChD,CAAC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;AAC1C,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI;AACzB,CAAC,IAAI,MAAM;AACX,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,SAAS,EAAE,IAAI,EAAE,EAAE;AAC9C,EAAE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;AACtC,GAAG,KAAK,EAAE,UAAU;AACpB,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI;AAC1B,EAAE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;AAChF,EAAE,IAAI,GAAG,EAAE,OAAO,GAAG;AACrB,EAAE,MAAM,GAAG,MAAM,CAAC,UAAU;AAC5B,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI;AAC1B,CAAC;AACD,CAAC,OAAO,IAAI;AACZ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,UAAU,CAAC,IAAI,EAAE;AAC1B,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,OAAO,UAAU;AACzC,CAAC,OAAO,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,GAAG,OAAO,GAAG,UAAU;AAChE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,IAAI,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK;AACtC,CAAC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE;AACpD,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO;AACpB,EAAE,EAAE,EAAE,KAAK;AACX,EAAE,MAAM,EAAE;AACV,EAAE;AACF,CAAC,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC,cAAc,CAAC,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;AACvF,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO;AACrB,EAAE,EAAE,EAAE,KAAK;AACX,EAAE,MAAM,EAAE;AACV,EAAE;AACF,CAAC,MAAM,GAAG,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC;AACjF,CAAC,MAAM,IAAI,GAAG,eAAe,EAAE;AAC/B,CAAC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACjF,CAAC,MAAM,IAAI,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC;AAClD,CAAC,OAAO;AACR,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK;AACrB,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,kBAAkB;AAC1C,EAAE,KAAK;AACP,EAAE,IAAI;AACN,EAAE,iBAAiB,EAAE,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC;AACrF,EAAE;AACF,CAAC;AACD,IAAI,OAAO,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACjE,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;AACtC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;AAC9C,CAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;AACtC,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;AACpC,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,IAAI,MAAM;AAC9D,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;AACjE,CAAC,IAAI,MAAM;AACX,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC,cAAc,CAAC,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;AAClF,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC;AACjF,CAAC;AACD,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC;AACxF,CAAC,MAAM,IAAI,GAAG,eAAe,EAAE;AAC/B,CAAC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC;AACjF,CAAC,MAAM,IAAI,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC;AAClD,CAAC,IAAI,IAAI,KAAK,UAAU,EAAE;AAC1B,EAAE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC;AAC9G,EAAE,IAAI,QAAQ,KAAK,OAAO,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;AAClF,CAAC;AACD,CAAC,IAAI,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,QAAQ,CAAC,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,EAAE,CAAC;AAC9L,CAAC,IAAI,IAAI;AACT,CAAC,IAAI,IAAI,KAAK,MAAM,EAAE,IAAI,GAAG,QAAQ;AACrC,MAAM,IAAI;AACV,EAAE,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,YAAY,EAAE,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;AAC7H,OAAO,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;AAC1F,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,qDAAqD,EAAE,CAAC;AACzF,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,gCAAgC;AACnF,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAClC,CAAC;AACD,CAAC,IAAI;AACL,EAAE,IAAI,MAAM,CAAC,mBAAmB,EAAE,MAAM,EAAE;AAC1C,GAAG,MAAM,eAAe,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;AAC9D,GAAG,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,mBAAmB,CAAC;AACxG,GAAG,IAAI,OAAO,KAAK,IAAI,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,kCAAkC,EAAE,OAAO,CAAC,CAAC,CAAC;AACxF,EAAE;AACF,EAAE,MAAM,IAAI,GAAG,uBAAuB,EAAE;AACxC,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE;AACvE,GAAG,MAAM,QAAQ,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AAC9D,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE;AAC3C,IAAI,KAAK,EAAE,MAAM,CAAC,KAAK;AACvB,IAAI,MAAM,EAAE,IAAI,CAAC,EAAE;AACnB,IAAI,IAAI,EAAE,MAAM,CAAC,OAAO;AACxB,IAAI,WAAW,EAAE,MAAM,CAAC,cAAc;AACtC,IAAI,QAAQ;AACZ,IAAI,SAAS,EAAE,QAAQ;AACvB,IAAI,SAAS,EAAE,MAAM,CAAC,SAAS;AAC/B,IAAI,SAAS,EAAE;AACf,IAAI,CAAC;AACL,EAAE;AACF,EAAE,MAAM,cAAc,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;AACzE,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,2BAA2B,EAAE;AAChD,GAAG,SAAS,EAAE,eAAe;AAC7B,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC;AACJ,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,MAAM,GAAG,sEAAsE,GAAG,wGAAwG,EAAE,CAAC;AAClO,CAAC;AACD,CAAC,IAAI,WAAW,IAAI,IAAI,KAAK,MAAM,EAAE,IAAI;AACzC,EAAE,MAAM,eAAe,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;AAC7D,EAAE,MAAM,MAAM,GAAG,MAAM,mBAAmB,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;AACpG,EAAE,IAAI,MAAM,KAAK,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,sCAAsC,EAAE;AAC/E,GAAG,SAAS,EAAE,eAAe;AAC7B,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE;AAClB,GAAG;AACH,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,sCAAsC,EAAE;AAC1D,GAAG,SAAS,EAAE,eAAe;AAC7B,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE;AAClB,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,YAAY,EAAE;AAC/C,EAAE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;AACjF,EAAE,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,qEAAqE,EAAE,CAAC;AACxI,EAAE,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,YAAY,CAAC;AACrD,CAAC;AACD,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,KAAK,MAAM,GAAG,UAAU,GAAG,QAAQ,CAAC;AACvD,CAAC,EAAE;;;;;;;;;;"}

package/build/server/chunks/entries/pages/accept-invite/_page.svelte.js-BVmySE57.js

@@ -0,0 +1,136 @@
+import { ag as head, ap as escape_html, af as attr } from '../../../chunks/server.js-CUv4onuj.js';
+import { B as Button } from '../../../chunks/button.js-BsdzK4f_.js';
+import { L as Label } from '../../../chunks/label.js-8ZqsOecl.js';
+import { p as page } from '../../../chunks/state.js-BBaXzAJK.js';
+import { I as Input } from '../../../chunks/input.js-HP56IwaY.js';
+import { C as Callout } from '../../../chunks/Callout.js-DDGBYe7M.js';
+import '../../../chunks/uneval.js-NmnccxCg.js';
+import 'clsx';
+import '../../../chunks/utils2.js-D4hQ3EdJ.js';
+import 'tailwind-merge';
+import 'tailwind-variants';
+import '../../../chunks/create-id.js-CVwIPAvl.js';
+import '../../../chunks/client.js-Oo1ss_eH.js';
+import '../../../chunks/shared.js-BStsS1ju.js';
+import '@sveltejs/kit/internal';
+import '../../../chunks/exports.js-DurfUvtz.js';
+import '../../../chunks/routing.js-CvcjLFt6.js';
+import '../../../chunks/index-server.js-CMohmRjd.js';
+import '../../../chunks/rolldown-runtime.js-gLLCT7Mu.js';
+import '../../../chunks/internal2.js-DrBgCix0.js';
+import '../../../chunks/legacy-client.js-Neicmjgj.js';
+import '../../../chunks/events.js-Bht3PYMJ.js';
+import '@sveltejs/kit/internal/server';
+import '../../../chunks/severity.js-6dh33En0.js';
+
+//#region src/routes/accept-invite/+page.svelte
+function _page($$renderer, $$props) {
+	$$renderer.component(($$renderer) => {
+		let { data, form } = $$props;
+		head("p8b09p", $$renderer, ($$renderer) => {
+			$$renderer.title(($$renderer) => {
+				$$renderer.push(`<title>Accept invite - ${escape_html(page.data.branding.name)}</title>`);
+			});
+		});
+		$$renderer.push(`<div class="bg-background flex min-h-screen items-center justify-center px-4 py-12 sm:px-6 lg:px-8"><div class="w-full max-w-sm space-y-6">`);
+		if (!data.ok) $$renderer.push(`<!--[0--><div class="space-y-1 text-center"><h2 class="text-foreground text-2xl font-bold tracking-tight">Invite unavailable</h2> <p class="text-muted-foreground text-sm">${escape_html(data.reason)}</p></div> <div class="text-center"><a href="/login" class="text-primary text-sm underline">Go to sign in</a></div>`);
+		else {
+			$$renderer.push(`<!--[-1--><div class="space-y-1 text-center"><h2 class="text-foreground text-2xl font-bold tracking-tight">Join ${escape_html(data.orgName)}</h2> <p class="text-muted-foreground text-sm">You were invited as <span class="font-medium">${escape_html(data.email)}</span>. `);
+			if (data.mode === "join") $$renderer.push(`<!--[0-->This email already has an account, so there is nothing to create — accepting adds it to
+						${escape_html(data.orgName)}.`);
+			else if (data.mode === "proxy") $$renderer.push(`<!--[1-->Click below to finish creating your account — your identity is verified by your company
+						sign-in.`);
+			else $$renderer.push(`<!--[-1-->Set a password to finish creating your account.`);
+			$$renderer.push(`<!--]--></p></div> `);
+			if (data.mode === "join" && !data.signedInAsInvitee) {
+				$$renderer.push("<!--[0-->");
+				Callout($$renderer, {
+					tone: "info",
+					children: ($$renderer) => {
+						$$renderer.push(`<!---->Sign in as ${escape_html(data.email)}, then open this link again to join.`);
+					},
+					$$slots: { default: true }
+				});
+				$$renderer.push(`<!----> <a href="/login" class="text-primary block text-center text-sm underline">Go to sign in</a>`);
+			} else {
+				$$renderer.push(`<!--[-1--><form method="POST" class="space-y-4"><input type="hidden" name="token"${attr("value", data.token)}/> `);
+				if (form?.error) {
+					$$renderer.push("<!--[0-->");
+					Callout($$renderer, {
+						tone: "danger",
+						children: ($$renderer) => {
+							$$renderer.push(`<!---->${escape_html(form.error)}`);
+						},
+						$$slots: { default: true }
+					});
+				} else $$renderer.push("<!--[-1-->");
+				$$renderer.push(`<!--]--> `);
+				if (data.mode === "password") {
+					$$renderer.push(`<!--[0--><div class="space-y-2">`);
+					Label($$renderer, {
+						for: "displayName",
+						children: ($$renderer) => {
+							$$renderer.push(`<!---->Display name <span class="text-muted-foreground">(optional)</span>`);
+						},
+						$$slots: { default: true }
+					});
+					$$renderer.push(`<!----> `);
+					Input($$renderer, {
+						id: "displayName",
+						name: "displayName",
+						type: "text",
+						placeholder: "Your name"
+					});
+					$$renderer.push(`<!----></div> <div class="space-y-2">`);
+					Label($$renderer, {
+						for: "password",
+						children: ($$renderer) => {
+							$$renderer.push(`<!---->Password`);
+						},
+						$$slots: { default: true }
+					});
+					$$renderer.push(`<!----> `);
+					Input($$renderer, {
+						id: "password",
+						name: "password",
+						type: "password",
+						required: true,
+						placeholder: "Min. 8 characters"
+					});
+					$$renderer.push(`<!----></div> <div class="space-y-2">`);
+					Label($$renderer, {
+						for: "confirm",
+						children: ($$renderer) => {
+							$$renderer.push(`<!---->Confirm password`);
+						},
+						$$slots: { default: true }
+					});
+					$$renderer.push(`<!----> `);
+					Input($$renderer, {
+						id: "confirm",
+						name: "confirm",
+						type: "password",
+						required: true,
+						placeholder: "Repeat password"
+					});
+					$$renderer.push(`<!----></div>`);
+				} else $$renderer.push("<!--[-1-->");
+				$$renderer.push(`<!--]--> `);
+				Button($$renderer, {
+					type: "submit",
+					class: "w-full",
+					children: ($$renderer) => {
+						$$renderer.push(`<!---->${escape_html(data.mode === "password" ? "Create account" : `Join ${data.orgName}`)}`);
+					},
+					$$slots: { default: true }
+				});
+				$$renderer.push(`<!----></form>`);
+			}
+			$$renderer.push(`<!--]-->`);
+		}
+		$$renderer.push(`<!--]--></div></div>`);
+	});
+}
+
+export { _page as default };
+//# sourceMappingURL=_page.svelte.js-BVmySE57.js.map

package/build/server/chunks/entries/pages/accept-invite/_page.svelte.js-BVmySE57.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_page.svelte.js-BVmySE57.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/accept-invite/_page.svelte.js"],"sourcesContent":["import { D as attr, c as head, k as escape_html } from \"../../../chunks/server.js\";\nimport { t as Button } from \"../../../chunks/button.js\";\nimport { t as Label } from \"../../../chunks/label.js\";\nimport { t as page } from \"../../../chunks/state.js\";\nimport { t as Input } from \"../../../chunks/input.js\";\nimport { t as Callout } from \"../../../chunks/Callout.js\";\n//#region src/routes/accept-invite/+page.svelte\nfunction _page($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\tlet { data, form } = $$props;\n\t\thead(\"p8b09p\", $$renderer, ($$renderer) => {\n\t\t\t$$renderer.title(($$renderer) => {\n\t\t\t\t$$renderer.push(`<title>Accept invite - ${escape_html(page.data.branding.name)}</title>`);\n\t\t\t});\n\t\t});\n\t\t$$renderer.push(`<div class=\"bg-background flex min-h-screen items-center justify-center px-4 py-12 sm:px-6 lg:px-8\"><div class=\"w-full max-w-sm space-y-6\">`);\n\t\tif (!data.ok) $$renderer.push(`<!--[0--><div class=\"space-y-1 text-center\"><h2 class=\"text-foreground text-2xl font-bold tracking-tight\">Invite unavailable</h2> <p class=\"text-muted-foreground text-sm\">${escape_html(data.reason)}</p></div> <div class=\"text-center\"><a href=\"/login\" class=\"text-primary text-sm underline\">Go to sign in</a></div>`);\n\t\telse {\n\t\t\t$$renderer.push(`<!--[-1--><div class=\"space-y-1 text-center\"><h2 class=\"text-foreground text-2xl font-bold tracking-tight\">Join ${escape_html(data.orgName)}</h2> <p class=\"text-muted-foreground text-sm\">You were invited as <span class=\"font-medium\">${escape_html(data.email)}</span>. `);\n\t\t\tif (data.mode === \"join\") $$renderer.push(`<!--[0-->This email already has an account, so there is nothing to create — accepting adds it to\n\t\t\t\t\t\t${escape_html(data.orgName)}.`);\n\t\t\telse if (data.mode === \"proxy\") $$renderer.push(`<!--[1-->Click below to finish creating your account — your identity is verified by your company\n\t\t\t\t\t\tsign-in.`);\n\t\t\telse $$renderer.push(`<!--[-1-->Set a password to finish creating your account.`);\n\t\t\t$$renderer.push(`<!--]--></p></div> `);\n\t\t\tif (data.mode === \"join\" && !data.signedInAsInvitee) {\n\t\t\t\t$$renderer.push(\"<!--[0-->\");\n\t\t\t\tCallout($$renderer, {\n\t\t\t\t\ttone: \"info\",\n\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t$$renderer.push(`<!---->Sign in as ${escape_html(data.email)}, then open this link again to join.`);\n\t\t\t\t\t},\n\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t});\n\t\t\t\t$$renderer.push(`<!----> <a href=\"/login\" class=\"text-primary block text-center text-sm underline\">Go to sign in</a>`);\n\t\t\t} else {\n\t\t\t\t$$renderer.push(`<!--[-1--><form method=\"POST\" class=\"space-y-4\"><input type=\"hidden\" name=\"token\"${attr(\"value\", data.token)}/> `);\n\t\t\t\tif (form?.error) {\n\t\t\t\t\t$$renderer.push(\"<!--[0-->\");\n\t\t\t\t\tCallout($$renderer, {\n\t\t\t\t\t\ttone: \"danger\",\n\t\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t\t$$renderer.push(`<!---->${escape_html(form.error)}`);\n\t\t\t\t\t\t},\n\t\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t\t});\n\t\t\t\t} else $$renderer.push(\"<!--[-1-->\");\n\t\t\t\t$$renderer.push(`<!--]--> `);\n\t\t\t\tif (data.mode === \"password\") {\n\t\t\t\t\t$$renderer.push(`<!--[0--><div class=\"space-y-2\">`);\n\t\t\t\t\tLabel($$renderer, {\n\t\t\t\t\t\tfor: \"displayName\",\n\t\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t\t$$renderer.push(`<!---->Display name <span class=\"text-muted-foreground\">(optional)</span>`);\n\t\t\t\t\t\t},\n\t\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t\t});\n\t\t\t\t\t$$renderer.push(`<!----> `);\n\t\t\t\t\tInput($$renderer, {\n\t\t\t\t\t\tid: \"displayName\",\n\t\t\t\t\t\tname: \"displayName\",\n\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\tplaceholder: \"Your name\"\n\t\t\t\t\t});\n\t\t\t\t\t$$renderer.push(`<!----></div> <div class=\"space-y-2\">`);\n\t\t\t\t\tLabel($$renderer, {\n\t\t\t\t\t\tfor: \"password\",\n\t\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t\t$$renderer.push(`<!---->Password`);\n\t\t\t\t\t\t},\n\t\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t\t});\n\t\t\t\t\t$$renderer.push(`<!----> `);\n\t\t\t\t\tInput($$renderer, {\n\t\t\t\t\t\tid: \"password\",\n\t\t\t\t\t\tname: \"password\",\n\t\t\t\t\t\ttype: \"password\",\n\t\t\t\t\t\trequired: true,\n\t\t\t\t\t\tplaceholder: \"Min. 8 characters\"\n\t\t\t\t\t});\n\t\t\t\t\t$$renderer.push(`<!----></div> <div class=\"space-y-2\">`);\n\t\t\t\t\tLabel($$renderer, {\n\t\t\t\t\t\tfor: \"confirm\",\n\t\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t\t$$renderer.push(`<!---->Confirm password`);\n\t\t\t\t\t\t},\n\t\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t\t});\n\t\t\t\t\t$$renderer.push(`<!----> `);\n\t\t\t\t\tInput($$renderer, {\n\t\t\t\t\t\tid: \"confirm\",\n\t\t\t\t\t\tname: \"confirm\",\n\t\t\t\t\t\ttype: \"password\",\n\t\t\t\t\t\trequired: true,\n\t\t\t\t\t\tplaceholder: \"Repeat password\"\n\t\t\t\t\t});\n\t\t\t\t\t$$renderer.push(`<!----></div>`);\n\t\t\t\t} else $$renderer.push(\"<!--[-1-->\");\n\t\t\t\t$$renderer.push(`<!--]--> `);\n\t\t\t\tButton($$renderer, {\n\t\t\t\t\ttype: \"submit\",\n\t\t\t\t\tclass: \"w-full\",\n\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t$$renderer.push(`<!---->${escape_html(data.mode === \"password\" ? \"Create account\" : `Join ${data.orgName}`)}`);\n\t\t\t\t\t},\n\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t});\n\t\t\t\t$$renderer.push(`<!----></form>`);\n\t\t\t}\n\t\t\t$$renderer.push(`<!--]-->`);\n\t\t}\n\t\t$$renderer.push(`<!--]--></div></div>`);\n\t});\n}\n//#endregion\nexport { _page as default };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAMA;AACA,SAAS,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE;AACpC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,OAAO;AAC9B,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,UAAU,KAAK;AAC7C,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,UAAU,KAAK;AACpC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,uBAAuB,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC7F,GAAG,CAAC,CAAC;AACL,EAAE,CAAC,CAAC;AACJ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,2IAA2I,CAAC,CAAC;AAChK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,2KAA2K,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,mHAAmH,CAAC,CAAC;AAC5V,OAAO;AACP,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,gHAAgH,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,6FAA6F,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC;AAClS,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;AAC9C,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;AACpD,cAAc,CAAC,CAAC;AAChB,QAAQ,UAAU,CAAC,IAAI,CAAC,CAAC,yDAAyD,CAAC,CAAC;AACpF,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,mBAAmB,CAAC,CAAC;AACzC,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;AACxD,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AAChC,IAAI,OAAO,CAAC,UAAU,EAAE;AACxB,KAAK,IAAI,EAAE,MAAM;AACjB,KAAK,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC/B,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,kBAAkB,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,oCAAoC,CAAC,CAAC;AACzG,KAAK,CAAC;AACN,KAAK,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC7B,KAAK,CAAC;AACN,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,mGAAmG,CAAC,CAAC;AAC1H,GAAG,CAAC,MAAM;AACV,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,iFAAiF,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;AACvI,IAAI,IAAI,IAAI,EAAE,KAAK,EAAE;AACrB,KAAK,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AACjC,KAAK,OAAO,CAAC,UAAU,EAAE;AACzB,MAAM,IAAI,EAAE,QAAQ;AACpB,MAAM,QAAQ,EAAE,CAAC,UAAU,KAAK;AAChC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC3D,MAAM,CAAC;AACP,MAAM,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC9B,MAAM,CAAC;AACP,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACxC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AAChC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE;AAClC,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,gCAAgC,CAAC,CAAC;AACxD,KAAK,KAAK,CAAC,UAAU,EAAE;AACvB,MAAM,GAAG,EAAE,aAAa;AACxB,MAAM,QAAQ,EAAE,CAAC,UAAU,KAAK;AAChC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,yEAAyE,CAAC,CAAC;AACnG,MAAM,CAAC;AACP,MAAM,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC9B,MAAM,CAAC;AACP,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAChC,KAAK,KAAK,CAAC,UAAU,EAAE;AACvB,MAAM,EAAE,EAAE,aAAa;AACvB,MAAM,IAAI,EAAE,aAAa;AACzB,MAAM,IAAI,EAAE,MAAM;AAClB,MAAM,WAAW,EAAE;AACnB,MAAM,CAAC;AACP,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,qCAAqC,CAAC,CAAC;AAC7D,KAAK,KAAK,CAAC,UAAU,EAAE;AACvB,MAAM,GAAG,EAAE,UAAU;AACrB,MAAM,QAAQ,EAAE,CAAC,UAAU,KAAK;AAChC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC;AACzC,MAAM,CAAC;AACP,MAAM,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC9B,MAAM,CAAC;AACP,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAChC,KAAK,KAAK,CAAC,UAAU,EAAE;AACvB,MAAM,EAAE,EAAE,UAAU;AACpB,MAAM,IAAI,EAAE,UAAU;AACtB,MAAM,IAAI,EAAE,UAAU;AACtB,MAAM,QAAQ,EAAE,IAAI;AACpB,MAAM,WAAW,EAAE;AACnB,MAAM,CAAC;AACP,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,qCAAqC,CAAC,CAAC;AAC7D,KAAK,KAAK,CAAC,UAAU,EAAE;AACvB,MAAM,GAAG,EAAE,SAAS;AACpB,MAAM,QAAQ,EAAE,CAAC,UAAU,KAAK;AAChC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,uBAAuB,CAAC,CAAC;AACjD,MAAM,CAAC;AACP,MAAM,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC9B,MAAM,CAAC;AACP,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAChC,KAAK,KAAK,CAAC,UAAU,EAAE;AACvB,MAAM,EAAE,EAAE,SAAS;AACnB,MAAM,IAAI,EAAE,SAAS;AACrB,MAAM,IAAI,EAAE,UAAU;AACtB,MAAM,QAAQ,EAAE,IAAI;AACpB,MAAM,WAAW,EAAE;AACnB,MAAM,CAAC;AACP,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;AACrC,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACxC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AAChC,IAAI,MAAM,CAAC,UAAU,EAAE;AACvB,KAAK,IAAI,EAAE,QAAQ;AACnB,KAAK,KAAK,EAAE,QAAQ;AACpB,KAAK,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC/B,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,GAAG,gBAAgB,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpH,KAAK,CAAC;AACN,KAAK,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC7B,KAAK,CAAC;AACN,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;AACrC,GAAG;AACH,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC9B,EAAE;AACF,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/entries/pages/admin/_error.svelte.js-Chlu6MFl.js

@@ -0,0 +1,40 @@
+import 'clsx';
+import { p as page } from '../../../chunks/state.js-BBaXzAJK.js';
+import { E as ErrorScreen } from '../../../chunks/ErrorScreen.js-BA_S4twv.js';
+import '../../../chunks/server.js-CUv4onuj.js';
+import '../../../chunks/uneval.js-NmnccxCg.js';
+import '../../../chunks/client.js-Oo1ss_eH.js';
+import '../../../chunks/shared.js-BStsS1ju.js';
+import '@sveltejs/kit/internal';
+import '../../../chunks/exports.js-DurfUvtz.js';
+import '../../../chunks/routing.js-CvcjLFt6.js';
+import '../../../chunks/index-server.js-CMohmRjd.js';
+import '../../../chunks/rolldown-runtime.js-gLLCT7Mu.js';
+import '../../../chunks/internal2.js-DrBgCix0.js';
+import '../../../chunks/legacy-client.js-Neicmjgj.js';
+import '../../../chunks/events.js-Bht3PYMJ.js';
+import '@sveltejs/kit/internal/server';
+import '../../../chunks/utils2.js-D4hQ3EdJ.js';
+import 'tailwind-merge';
+import '../../../chunks/button.js-BsdzK4f_.js';
+import 'tailwind-variants';
+import '../../../chunks/severity.js-6dh33En0.js';
+import '../../../chunks/card.js-DleTSvCu.js';
+import '../../../chunks/card-content.js-BoHD9SkQ.js';
+import '../../../chunks/card-header.js-BA0Xejag.js';
+import '../../../chunks/Callout.js-DDGBYe7M.js';
+
+//#region src/routes/admin/+error.svelte
+function _error($$renderer, $$props) {
+	$$renderer.component(($$renderer) => {
+		$$renderer.push(`<div class="px-6 py-6">`);
+		ErrorScreen($$renderer, {
+			status: page.status,
+			message: page.error?.message
+		});
+		$$renderer.push(`<!----></div>`);
+	});
+}
+
+export { _error as default };
+//# sourceMappingURL=_error.svelte.js-Chlu6MFl.js.map

package/build/server/chunks/entries/pages/admin/_error.svelte.js-Chlu6MFl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_error.svelte.js-Chlu6MFl.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/admin/_error.svelte.js"],"sourcesContent":["import \"../../../chunks/server.js\";\nimport { t as page } from \"../../../chunks/state.js\";\nimport { t as ErrorScreen } from \"../../../chunks/ErrorScreen.js\";\n//#region src/routes/admin/+error.svelte\nfunction _error($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\t$$renderer.push(`<div class=\"px-6 py-6\">`);\n\t\tErrorScreen($$renderer, {\n\t\t\tstatus: page.status,\n\t\t\tmessage: page.error?.message\n\t\t});\n\t\t$$renderer.push(`<!----></div>`);\n\t});\n}\n//#endregion\nexport { _error as default };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAGA;AACA,SAAS,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE;AACrC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,uBAAuB,CAAC,CAAC;AAC5C,EAAE,WAAW,CAAC,UAAU,EAAE;AAC1B,GAAG,MAAM,EAAE,IAAI,CAAC,MAAM;AACtB,GAAG,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE;AACxB,GAAG,CAAC;AACJ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/entries/pages/admin/_layout.server.ts.js-sw-IzyTT.js

@@ -0,0 +1,31 @@
+import { c as getTenancy, j as flag, l as getAuditQuery } from '../../../chunks/providers.server.js-DNVO4BPz.js';
+import { a as assertAnyPlatformPermission } from '../../../chunks/access2.server.js-DM8oo7RX.js';
+import { redirect } from '@sveltejs/kit';
+
+//#region src/routes/admin/+layout.server.ts
+/**
+* `/admin` is a platform-scope surface — instance operators and Selva staff
+* only. Holding only org-class permissions (`manage_org_members`,
+* `manage_org_compute`, `manage_definitions`, `manage_projects`) does NOT
+* admit you here, even though those permissions also start with `manage_`.
+* Org admins get their own surface elsewhere — `/team/*` (see docs/contributing/permissions.md §8).
+*/
+var load = async ({ locals }) => {
+	if (!locals.ctx) redirect(303, "/login");
+	assertAnyPlatformPermission(locals);
+	return {
+		platformPermissions: locals.ctx.platformPermissions,
+		orgPermissions: locals.ctx.orgPermissions,
+		auditAvailable: getAuditQuery() !== null,
+		platformProjectsEnabled: flag("ENABLE_PLATFORM_PROJECTS"),
+		tenancy: getTenancy()
+	};
+};
+
+var _layout_server_ts = /*#__PURE__*/Object.freeze({
+	__proto__: null,
+	load: load
+});
+
+export { _layout_server_ts as _ };
+//# sourceMappingURL=_layout.server.ts.js-sw-IzyTT.js.map

package/build/server/chunks/entries/pages/admin/_layout.server.ts.js-sw-IzyTT.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_layout.server.ts.js-sw-IzyTT.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/admin/_layout.server.ts.js"],"sourcesContent":["import { S as getTenancy, n as getAuditQuery, t as flag } from \"../../../chunks/providers.server.js\";\nimport { n as assertAnyPlatformPermission } from \"../../../chunks/access2.server.js\";\nimport { redirect } from \"@sveltejs/kit\";\n//#region src/routes/admin/+layout.server.ts\n/**\n* `/admin` is a platform-scope surface — instance operators and Selva staff\n* only. Holding only org-class permissions (`manage_org_members`,\n* `manage_org_compute`, `manage_definitions`, `manage_projects`) does NOT\n* admit you here, even though those permissions also start with `manage_`.\n* Org admins get their own surface elsewhere — `/team/*` (see docs/contributing/permissions.md §8).\n*/\nvar load = async ({ locals }) => {\n\tif (!locals.ctx) redirect(303, \"/login\");\n\tassertAnyPlatformPermission(locals);\n\treturn {\n\t\tplatformPermissions: locals.ctx.platformPermissions,\n\t\torgPermissions: locals.ctx.orgPermissions,\n\t\tauditAvailable: getAuditQuery() !== null,\n\t\tplatformProjectsEnabled: flag(\"ENABLE_PLATFORM_PROJECTS\"),\n\t\ttenancy: getTenancy()\n\t};\n};\n//#endregion\nexport { load };\n"],"names":[],"mappings":";;;;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AACjC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;AACzC,CAAC,2BAA2B,CAAC,MAAM,CAAC;AACpC,CAAC,OAAO;AACR,EAAE,mBAAmB,EAAE,MAAM,CAAC,GAAG,CAAC,mBAAmB;AACrD,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc;AAC3C,EAAE,cAAc,EAAE,aAAa,EAAE,KAAK,IAAI;AAC1C,EAAE,uBAAuB,EAAE,IAAI,CAAC,0BAA0B,CAAC;AAC3D,EAAE,OAAO,EAAE,UAAU;AACrB,EAAE;AACF,CAAC;;;;;;;;;"}

package/build/server/chunks/entries/pages/admin/_layout.svelte.js-cRY08Uqz.js

@@ -0,0 +1,121 @@
+import { ae as derived } from '../../../chunks/server.js-CUv4onuj.js';
+import { B as Building_complex } from '../../../chunks/building-complex.js-CC9FY878.js';
+import { F as Folders } from '../../../chunks/folders.js-r8zztm3A.js';
+import { G as Gauge } from '../../../chunks/gauge.js-DJslOX9E.js';
+import { S as Scroll_text } from '../../../chunks/scroll-text.js-HGE77SER.js';
+import { S as Server } from '../../../chunks/server3.js-BvQRKXaA.js';
+import { S as Settings } from '../../../chunks/settings.js-BLQ8UOWY.js';
+import { U as Users } from '../../../chunks/users.js-rMvV98ew.js';
+import { S as SideNav } from '../../../chunks/SideNav.js-8oLiHh-r.js';
+import { A as AppHeader } from '../../../chunks/AppHeader.js-DTL3rbQB.js';
+import '../../../chunks/uneval.js-NmnccxCg.js';
+import 'clsx';
+import '../../../chunks/utils2.js-D4hQ3EdJ.js';
+import 'tailwind-merge';
+import '../../../chunks/state.js-BBaXzAJK.js';
+import '../../../chunks/client.js-Oo1ss_eH.js';
+import '../../../chunks/shared.js-BStsS1ju.js';
+import '@sveltejs/kit/internal';
+import '../../../chunks/exports.js-DurfUvtz.js';
+import '../../../chunks/routing.js-CvcjLFt6.js';
+import '../../../chunks/index-server.js-CMohmRjd.js';
+import '../../../chunks/rolldown-runtime.js-gLLCT7Mu.js';
+import '../../../chunks/internal2.js-DrBgCix0.js';
+import '../../../chunks/legacy-client.js-Neicmjgj.js';
+import '../../../chunks/events.js-Bht3PYMJ.js';
+import '@sveltejs/kit/internal/server';
+import '../../../chunks/SettingsMenu.js-B3I9XKo1.js';
+import '../../../chunks/src.js-qWxoV-ql.js';
+import 'zod';
+import '../../../chunks/footerContext.svelte.js-B1a16Jyc.js';
+import '../../../chunks/index-server2.js-siA98IdX.js';
+import '../../../chunks/create-id.js-CVwIPAvl.js';
+import '../../../chunks/button.js-BsdzK4f_.js';
+import 'tailwind-variants';
+import '../../../chunks/severity.js-6dh33En0.js';
+import '../../../chunks/shield.js-BetiEYns.js';
+import '../../../chunks/dialog-description.js-Cyy3ORaZ.js';
+import '../../../chunks/scroll-lock.js-CP7_g1Yv.js';
+import '../../../chunks/dialog.js-CF64f4Rf.js';
+import '../../../chunks/x.js-Cfd84Xeh.js';
+
+//#region src/routes/admin/+layout.svelte
+function _layout($$renderer, $$props) {
+	$$renderer.component(($$renderer) => {
+		let { data, children } = $$props;
+		const can = (p) => {
+			if (data.platformPermissions.includes("instance_admin")) return true;
+			if (data.platformPermissions.includes(p)) return true;
+			return data.orgPermissions.includes(p);
+		};
+		const items = derived(() => [
+			{
+				href: "/admin",
+				label: "General",
+				icon: Gauge,
+				show: true
+			},
+			{
+				href: "/admin/organizations",
+				label: "Organizations",
+				icon: Building_complex,
+				match: "prefix",
+				show: can("instance_admin") && data.tenancy !== "single"
+			},
+			{
+				href: "/admin/projects",
+				label: "Projects",
+				icon: Folders,
+				match: "prefix",
+				show: can("instance_admin") && data.platformProjectsEnabled
+			},
+			{
+				href: "/admin/users",
+				label: "Users",
+				icon: Users,
+				match: "prefix",
+				show: can("manage_instance_users")
+			},
+			{
+				href: "/admin/compute",
+				label: "Compute",
+				icon: Server,
+				match: "prefix",
+				show: can("manage_compute")
+			},
+			{
+				href: "/admin/system",
+				label: "System",
+				icon: Settings,
+				match: "prefix",
+				show: can("manage_updates")
+			},
+			{
+				href: "/admin/audit",
+				label: "Audit log",
+				icon: Scroll_text,
+				match: "prefix",
+				show: can("instance_admin") && data.auditAvailable
+			}
+		].filter((i) => i.show));
+		{
+			function sidenav($$renderer) {
+				SideNav($$renderer, {
+					items: items(),
+					eyebrow: "Platform",
+					border: false
+				});
+			}
+			AppHeader($$renderer, {
+				sidenav,
+				children: ($$renderer) => {
+					$$renderer.push(`<div class="px-(--page-px) py-(--page-py)">`);
+					children?.($$renderer);
+					$$renderer.push(`<!----></div>`);
+				}});
+		}
+	});
+}
+
+export { _layout as default };
+//# sourceMappingURL=_layout.svelte.js-cRY08Uqz.js.map

package/build/server/chunks/entries/pages/admin/_layout.svelte.js-cRY08Uqz.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_layout.svelte.js-cRY08Uqz.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/admin/_layout.svelte.js"],"sourcesContent":["import { a as derived } from \"../../../chunks/server.js\";\nimport { t as Building_complex } from \"../../../chunks/building-complex.js\";\nimport { t as Folders } from \"../../../chunks/folders.js\";\nimport { t as Gauge } from \"../../../chunks/gauge.js\";\nimport { t as Scroll_text } from \"../../../chunks/scroll-text.js\";\nimport { t as Server } from \"../../../chunks/server3.js\";\nimport { t as Settings } from \"../../../chunks/settings.js\";\nimport { t as Users } from \"../../../chunks/users.js\";\nimport { t as SideNav } from \"../../../chunks/SideNav.js\";\nimport { t as AppHeader } from \"../../../chunks/AppHeader.js\";\n//#region src/routes/admin/+layout.svelte\nfunction _layout($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\tlet { data, children } = $$props;\n\t\tconst can = (p) => {\n\t\t\tif (data.platformPermissions.includes(\"instance_admin\")) return true;\n\t\t\tif (data.platformPermissions.includes(p)) return true;\n\t\t\treturn data.orgPermissions.includes(p);\n\t\t};\n\t\tconst items = derived(() => [\n\t\t\t{\n\t\t\t\thref: \"/admin\",\n\t\t\t\tlabel: \"General\",\n\t\t\t\ticon: Gauge,\n\t\t\t\tshow: true\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/organizations\",\n\t\t\t\tlabel: \"Organizations\",\n\t\t\t\ticon: Building_complex,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"instance_admin\") && data.tenancy !== \"single\"\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/projects\",\n\t\t\t\tlabel: \"Projects\",\n\t\t\t\ticon: Folders,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"instance_admin\") && data.platformProjectsEnabled\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/users\",\n\t\t\t\tlabel: \"Users\",\n\t\t\t\ticon: Users,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"manage_instance_users\")\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/compute\",\n\t\t\t\tlabel: \"Compute\",\n\t\t\t\ticon: Server,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"manage_compute\")\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/system\",\n\t\t\t\tlabel: \"System\",\n\t\t\t\ticon: Settings,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"manage_updates\")\n\t\t\t},\n\t\t\t{\n\t\t\t\thref: \"/admin/audit\",\n\t\t\t\tlabel: \"Audit log\",\n\t\t\t\ticon: Scroll_text,\n\t\t\t\tmatch: \"prefix\",\n\t\t\t\tshow: can(\"instance_admin\") && data.auditAvailable\n\t\t\t}\n\t\t].filter((i) => i.show));\n\t\t{\n\t\t\tfunction sidenav($$renderer) {\n\t\t\t\tSideNav($$renderer, {\n\t\t\t\t\titems: items(),\n\t\t\t\t\teyebrow: \"Platform\",\n\t\t\t\t\tborder: false\n\t\t\t\t});\n\t\t\t}\n\t\t\tAppHeader($$renderer, {\n\t\t\t\tsidenav,\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<div class=\"px-(--page-px) py-(--page-py)\">`);\n\t\t\t\t\tchildren?.($$renderer);\n\t\t\t\t\t$$renderer.push(`<!----></div>`);\n\t\t\t\t},\n\t\t\t\t$$slots: {\n\t\t\t\t\tsidenav: true,\n\t\t\t\t\tdefault: true\n\t\t\t\t}\n\t\t\t});\n\t\t}\n\t});\n}\n//#endregion\nexport { _layout as default };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAUA;AACA,SAAS,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE;AACtC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO;AAClC,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK;AACrB,GAAG,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,IAAI;AACvE,GAAG,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI;AACxD,GAAG,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzC,EAAE,CAAC;AACH,EAAE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM;AAC9B,GAAG;AACH,IAAI,IAAI,EAAE,QAAQ;AAClB,IAAI,KAAK,EAAE,SAAS;AACpB,IAAI,IAAI,EAAE,KAAK;AACf,IAAI,IAAI,EAAE;AACV,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,sBAAsB;AAChC,IAAI,KAAK,EAAE,eAAe;AAC1B,IAAI,IAAI,EAAE,gBAAgB;AAC1B,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK;AACpD,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,iBAAiB;AAC3B,IAAI,KAAK,EAAE,UAAU;AACrB,IAAI,IAAI,EAAE,OAAO;AACjB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC;AACxC,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,cAAc;AACxB,IAAI,KAAK,EAAE,OAAO;AAClB,IAAI,IAAI,EAAE,KAAK;AACf,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,uBAAuB;AACrC,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,gBAAgB;AAC1B,IAAI,KAAK,EAAE,SAAS;AACpB,IAAI,IAAI,EAAE,MAAM;AAChB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,gBAAgB;AAC9B,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,eAAe;AACzB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,QAAQ;AAClB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,gBAAgB;AAC9B,IAAI;AACJ,GAAG;AACH,IAAI,IAAI,EAAE,cAAc;AACxB,IAAI,KAAK,EAAE,WAAW;AACtB,IAAI,IAAI,EAAE,WAAW;AACrB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC;AACxC;AACA,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;AAC1B,EAAE;AACF,GAAG,SAAS,OAAO,CAAC,UAAU,EAAE;AAChC,IAAI,OAAO,CAAC,UAAU,EAAE;AACxB,KAAK,KAAK,EAAE,KAAK,EAAE;AACnB,KAAK,OAAO,EAAE,UAAU;AACxB,KAAK,MAAM,EAAE;AACb,KAAK,CAAC;AACN,GAAG;AACH,GAAG,SAAS,CAAC,UAAU,EAAE;AACzB,IAAI,OAAO;AACX,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,2CAA2C,CAAC,CAAC;AACnE,KAAK,QAAQ,GAAG,UAAU,CAAC;AAC3B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC;AACrC,IAAI,CAKD,CAAC,CAAC;AACL,EAAE;AACF,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/entries/pages/admin/_page.server.ts.js-X0zW0i_w.js

@@ -0,0 +1,76 @@
+import { h as hasPermission } from '../../../chunks/src.js-qWxoV-ql.js';
+import { a as getAuthProvider, e as getOrganizationProvider } from '../../../chunks/providers.server.js-DNVO4BPz.js';
+import { r as renderThrown } from '../../../chunks/definitions.js-niXE0HY4.js';
+import { p as package_default } from '../../../chunks/package.js-mKPTskyg.js';
+
+//#region src/routes/admin/+page.server.ts
+/**
+* Resolve the org whose branding assets the General page manages. Single-tenant
+* has exactly one org (auto-seeded at bootstrap); we surface it so an admin can
+* set the company logo without the org-list UI (which only exists in
+* multi-tenant). Returns null if no org exists yet or the lookup fails — the
+* cards just hide.
+*/
+async function loadAdminOrg(ctx, log) {
+	if (!ctx) return null;
+	try {
+		const org = (await getOrganizationProvider().listOrgs(ctx, { limit: 1 })).items[0];
+		return org ? {
+			id: org.id,
+			name: org.name,
+			assets: org.assets ?? {}
+		} : null;
+	} catch (err) {
+		log.error("Failed to load admin org for asset cards", {
+			component: "admin",
+			err: renderThrown(err)
+		});
+		return null;
+	}
+}
+/**
+* The General dashboard sits inside the platform-scoped `/admin` shell, but
+* each panel still needs its own permission. The user-count tile is gated
+* on `manage_instance_users`; without it, the tile renders a placeholder.
+*/
+var load = async ({ locals }) => {
+	const ctx = locals.ctx;
+	const canSeeUserStats = ctx ? hasPermission(ctx, "manage_instance_users") : false;
+	const canManageOrg = ctx ? hasPermission(ctx, "manage_org_members") : false;
+	const platformPermissions = ctx?.platformPermissions ?? [];
+	const org = canManageOrg ? await loadAdminOrg(ctx, locals.log) : null;
+	if (!canSeeUserStats) return {
+		stats: { users: null },
+		platformPermissions,
+		version: package_default.version,
+		org
+	};
+	try {
+		return {
+			stats: { users: (await getAuthProvider().listUsers({ limit: 200 }))?.items.length ?? null },
+			platformPermissions,
+			version: package_default.version,
+			org
+		};
+	} catch (err) {
+		if (err && typeof err === "object" && "status" in err) throw err;
+		locals.log.error("Failed to load admin dashboard", {
+			component: "admin",
+			err: renderThrown(err)
+		});
+		return {
+			stats: { users: null },
+			platformPermissions,
+			version: package_default.version,
+			org
+		};
+	}
+};
+
+var _page_server_ts = /*#__PURE__*/Object.freeze({
+	__proto__: null,
+	load: load
+});
+
+export { _page_server_ts as _ };
+//# sourceMappingURL=_page.server.ts.js-X0zW0i_w.js.map

package/build/server/chunks/entries/pages/admin/_page.server.ts.js-X0zW0i_w.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_page.server.ts.js-X0zW0i_w.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/admin/_page.server.ts.js"],"sourcesContent":["import { r as hasPermission } from \"../../../chunks/src.js\";\nimport { h as getOrganizationProvider, r as getAuthProvider } from \"../../../chunks/providers.server.js\";\nimport { l as renderThrown } from \"../../../chunks/definitions.js\";\nimport { t as package_default } from \"../../../chunks/package.js\";\n//#region src/routes/admin/+page.server.ts\n/**\n* Resolve the org whose branding assets the General page manages. Single-tenant\n* has exactly one org (auto-seeded at bootstrap); we surface it so an admin can\n* set the company logo without the org-list UI (which only exists in\n* multi-tenant). Returns null if no org exists yet or the lookup fails — the\n* cards just hide.\n*/\nasync function loadAdminOrg(ctx, log) {\n\tif (!ctx) return null;\n\ttry {\n\t\tconst org = (await getOrganizationProvider().listOrgs(ctx, { limit: 1 })).items[0];\n\t\treturn org ? {\n\t\t\tid: org.id,\n\t\t\tname: org.name,\n\t\t\tassets: org.assets ?? {}\n\t\t} : null;\n\t} catch (err) {\n\t\tlog.error(\"Failed to load admin org for asset cards\", {\n\t\t\tcomponent: \"admin\",\n\t\t\terr: renderThrown(err)\n\t\t});\n\t\treturn null;\n\t}\n}\n/**\n* The General dashboard sits inside the platform-scoped `/admin` shell, but\n* each panel still needs its own permission. The user-count tile is gated\n* on `manage_instance_users`; without it, the tile renders a placeholder.\n*/\nvar load = async ({ locals }) => {\n\tconst ctx = locals.ctx;\n\tconst canSeeUserStats = ctx ? hasPermission(ctx, \"manage_instance_users\") : false;\n\tconst canManageOrg = ctx ? hasPermission(ctx, \"manage_org_members\") : false;\n\tconst platformPermissions = ctx?.platformPermissions ?? [];\n\tconst org = canManageOrg ? await loadAdminOrg(ctx, locals.log) : null;\n\tif (!canSeeUserStats) return {\n\t\tstats: { users: null },\n\t\tplatformPermissions,\n\t\tversion: package_default.version,\n\t\torg\n\t};\n\ttry {\n\t\treturn {\n\t\t\tstats: { users: (await getAuthProvider().listUsers({ limit: 200 }))?.items.length ?? null },\n\t\t\tplatformPermissions,\n\t\t\tversion: package_default.version,\n\t\t\torg\n\t\t};\n\t} catch (err) {\n\t\tif (err && typeof err === \"object\" && \"status\" in err) throw err;\n\t\tlocals.log.error(\"Failed to load admin dashboard\", {\n\t\t\tcomponent: \"admin\",\n\t\t\terr: renderThrown(err)\n\t\t});\n\t\treturn {\n\t\t\tstats: { users: null },\n\t\t\tplatformPermissions,\n\t\t\tversion: package_default.version,\n\t\t\torg\n\t\t};\n\t}\n};\n//#endregion\nexport { load };\n"],"names":[],"mappings":";;;;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;AACtC,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,IAAI;AACtB,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,uBAAuB,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AACpF,EAAE,OAAO,GAAG,GAAG;AACf,GAAG,EAAE,EAAE,GAAG,CAAC,EAAE;AACb,GAAG,IAAI,EAAE,GAAG,CAAC,IAAI;AACjB,GAAG,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI;AACzB,GAAG,GAAG,IAAI;AACV,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,GAAG,CAAC,KAAK,CAAC,0CAA0C,EAAE;AACxD,GAAG,SAAS,EAAE,OAAO;AACrB,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC;AACJ,EAAE,OAAO,IAAI;AACb,CAAC;AACD;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AACjC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,eAAe,GAAG,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,uBAAuB,CAAC,GAAG,KAAK;AAClF,CAAC,MAAM,YAAY,GAAG,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,oBAAoB,CAAC,GAAG,KAAK;AAC5E,CAAC,MAAM,mBAAmB,GAAG,GAAG,EAAE,mBAAmB,IAAI,EAAE;AAC3D,CAAC,MAAM,GAAG,GAAG,YAAY,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI;AACtE,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO;AAC9B,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;AACxB,EAAE,mBAAmB;AACrB,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO;AAClC,EAAE;AACF,EAAE;AACF,CAAC,IAAI;AACL,EAAE,OAAO;AACT,GAAG,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,eAAe,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,EAAE;AAC9F,GAAG,mBAAmB;AACtB,GAAG,OAAO,EAAE,eAAe,CAAC,OAAO;AACnC,GAAG;AACH,GAAG;AACH,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,EAAE,MAAM,GAAG;AAClE,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,gCAAgC,EAAE;AACrD,GAAG,SAAS,EAAE,OAAO;AACrB,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC;AACJ,EAAE,OAAO;AACT,GAAG,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;AACzB,GAAG,mBAAmB;AACtB,GAAG,OAAO,EAAE,eAAe,CAAC,OAAO;AACnC,GAAG;AACH,GAAG;AACH,CAAC;AACD,CAAC;;;;;;;;;"}