@selvajs/selva 4.20.0-beta.4 → 4.20.0-beta.6

package/build/server/chunks/entries/pages/setup/_page.server.ts.js-dGuxBruW.js

@@ -0,0 +1,116 @@
+import { b as private_env } from '../../../chunks/shared-server.js-BGs15m2r.js';
+import { S as SYSTEM_CONTEXT, k as slugify, A as ALL_PLATFORM_PERMISSIONS } from '../../../chunks/src.js-CkL6l768.js';
+import { b as getPermissionStore, c as getTenancy, a as getAuthProvider, d as getDataProvider, n as getUserProfileStore, e as getOrganizationProvider, f as getProjectProvider } from '../../../chunks/providers.server.js-CqUutXkw.js';
+import { r as renderThrown } from '../../../chunks/definitions.js-C7Ocu80W.js';
+import { s as setUserPlatformPermissions } from '../../../chunks/permissions.server.js-DZ5iZm7s.js';
+import { s as setSessionCookie } from '../../../chunks/admin-auth.server.js-B-uOGq_D.js';
+import { fail, redirect } from '@sveltejs/kit';
+import { randomUUID } from 'node:crypto';
+
+//#region src/routes/setup/+page.server.ts
+var load = async () => {
+	if (await getPermissionStore().hasInstanceAdmin(SYSTEM_CONTEXT)) redirect(303, "/login");
+	const auth = getAuthProvider();
+	return {
+		hasPasswordAuth: Boolean(auth.passwordAuth),
+		hasEmailLink: Boolean(auth.emailLink),
+		hasProxyAuth: Boolean(auth.proxyAuth),
+		bootstrapEmail: private_env.BOOTSTRAP_INSTANCE_ADMIN_EMAIL ?? null,
+		oauthProviders: auth.oauth?.listProviders() ?? []
+	};
+};
+var actions = { default: async ({ request, cookies, locals }) => {
+	if (await getPermissionStore().hasInstanceAdmin(SYSTEM_CONTEXT)) return fail(403, { error: "This instance is already set up." });
+	const tenancy = getTenancy();
+	const data = await request.formData();
+	const companyName = data.get("companyName")?.trim() ?? "";
+	const displayName = data.get("displayName")?.trim() || void 0;
+	const email = data.get("email");
+	const password = data.get("password");
+	const confirm = data.get("confirm");
+	const requireCompany = tenancy === "single";
+	if (requireCompany && !companyName) return fail(400, { error: "Company name is required" });
+	const slug = requireCompany ? slugify(companyName) : "";
+	if (requireCompany && slug.length < 3) return fail(400, { error: "Company name must contain at least 3 letters or digits" });
+	if (!email || !email.includes("@")) return fail(400, { error: "Valid email is required" });
+	if (!password || password.length < 8) return fail(400, { error: "Password must be at least 8 characters" });
+	if (password !== confirm) return fail(400, { error: "Passwords do not match" });
+	const passwordAuth = getAuthProvider().passwordAuth;
+	if (!passwordAuth) return fail(501, { error: "Password-based setup is not supported by this provider" });
+	let user;
+	try {
+		user = await passwordAuth.createUserWithPassword(email, password);
+		await getDataProvider().ensureUser(SYSTEM_CONTEXT, user.id);
+		await setUserPlatformPermissions(SYSTEM_CONTEXT, user.id, [...ALL_PLATFORM_PERMISSIONS]);
+	} catch (err) {
+		const msg = err instanceof Error ? err.message : String(err);
+		return fail(500, { error: msg });
+	}
+	if (displayName) try {
+		await getUserProfileStore().updateProfile(SYSTEM_CONTEXT, user.id, { displayName });
+	} catch (err) {
+		locals.log.error("Display name update failed", {
+			component: "setup",
+			err: renderThrown(err)
+		});
+	}
+	if (tenancy === "single") try {
+		const orgs = getOrganizationProvider();
+		const projects = getProjectProvider();
+		const now = (/* @__PURE__ */ new Date()).toISOString();
+		const org = {
+			id: randomUUID(),
+			name: companyName,
+			slug,
+			ownerId: user.id,
+			createdBy: user.id,
+			updatedBy: user.id,
+			createdAt: now,
+			updatedAt: now,
+			deletedAt: null
+		};
+		await orgs.createOrg(SYSTEM_CONTEXT, org);
+		const project = {
+			id: randomUUID(),
+			orgId: org.id,
+			name: "Default",
+			slug: "default",
+			visibility: "public",
+			ownerId: user.id,
+			createdBy: user.id,
+			updatedBy: user.id,
+			autoJoinOnUpload: false,
+			createdAt: now,
+			updatedAt: now,
+			deletedAt: null
+		};
+		await projects.createProject(SYSTEM_CONTEXT, project);
+		await projects.addProjectMember(SYSTEM_CONTEXT, {
+			projectId: project.id,
+			userId: user.id,
+			role: "owner",
+			joinedAt: now,
+			updatedAt: now,
+			updatedBy: user.id,
+			deletedAt: null
+		});
+	} catch (err) {
+		locals.log.error("Org/project bootstrap failed", {
+			component: "setup",
+			err: renderThrown(err)
+		});
+	}
+	const loginResult = await passwordAuth.verifyLogin(email, password);
+	if (loginResult.kind !== "success") return fail(500, { error: "Account created but login failed. Please sign in manually." });
+	setSessionCookie(cookies, loginResult.sessionToken);
+	redirect(303, "/admin");
+} };
+
+var _page_server_ts = /*#__PURE__*/Object.freeze({
+	__proto__: null,
+	actions: actions,
+	load: load
+});
+
+export { _page_server_ts as _ };
+//# sourceMappingURL=_page.server.ts.js-dGuxBruW.js.map

package/build/server/chunks/entries/pages/setup/_page.server.ts.js-dGuxBruW.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_page.server.ts.js-dGuxBruW.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/setup/_page.server.ts.js"],"sourcesContent":["import { t as private_env } from \"../../../chunks/shared-server.js\";\nimport { F as slugify, I as ALL_PLATFORM_PERMISSIONS, t as SYSTEM_CONTEXT } from \"../../../chunks/src.js\";\nimport { C as getUserProfileStore, S as getTenancy, g as getPermissionStore, h as getOrganizationProvider, o as getDataProvider, r as getAuthProvider, v as getProjectProvider } from \"../../../chunks/providers.server.js\";\nimport { l as renderThrown } from \"../../../chunks/definitions.js\";\nimport { t as setUserPlatformPermissions } from \"../../../chunks/permissions.server.js\";\nimport { u as setSessionCookie } from \"../../../chunks/admin-auth.server.js\";\nimport { fail, redirect } from \"@sveltejs/kit\";\nimport { randomUUID } from \"node:crypto\";\n//#region src/routes/setup/+page.server.ts\nvar load = async () => {\n\tif (await getPermissionStore().hasInstanceAdmin(SYSTEM_CONTEXT)) redirect(303, \"/login\");\n\tconst auth = getAuthProvider();\n\treturn {\n\t\thasPasswordAuth: Boolean(auth.passwordAuth),\n\t\thasEmailLink: Boolean(auth.emailLink),\n\t\thasProxyAuth: Boolean(auth.proxyAuth),\n\t\tbootstrapEmail: private_env.BOOTSTRAP_INSTANCE_ADMIN_EMAIL ?? null,\n\t\toauthProviders: auth.oauth?.listProviders() ?? []\n\t};\n};\nvar actions = { default: async ({ request, cookies, locals }) => {\n\tif (await getPermissionStore().hasInstanceAdmin(SYSTEM_CONTEXT)) return fail(403, { error: \"This instance is already set up.\" });\n\tconst tenancy = getTenancy();\n\tconst data = await request.formData();\n\tconst companyName = data.get(\"companyName\")?.trim() ?? \"\";\n\tconst displayName = data.get(\"displayName\")?.trim() || void 0;\n\tconst email = data.get(\"email\");\n\tconst password = data.get(\"password\");\n\tconst confirm = data.get(\"confirm\");\n\tconst requireCompany = tenancy === \"single\";\n\tif (requireCompany && !companyName) return fail(400, { error: \"Company name is required\" });\n\tconst slug = requireCompany ? slugify(companyName) : \"\";\n\tif (requireCompany && slug.length < 3) return fail(400, { error: \"Company name must contain at least 3 letters or digits\" });\n\tif (!email || !email.includes(\"@\")) return fail(400, { error: \"Valid email is required\" });\n\tif (!password || password.length < 8) return fail(400, { error: \"Password must be at least 8 characters\" });\n\tif (password !== confirm) return fail(400, { error: \"Passwords do not match\" });\n\tconst passwordAuth = getAuthProvider().passwordAuth;\n\tif (!passwordAuth) return fail(501, { error: \"Password-based setup is not supported by this provider\" });\n\tlet user;\n\ttry {\n\t\tuser = await passwordAuth.createUserWithPassword(email, password);\n\t\tawait getDataProvider().ensureUser(SYSTEM_CONTEXT, user.id);\n\t\tawait setUserPlatformPermissions(SYSTEM_CONTEXT, user.id, [...ALL_PLATFORM_PERMISSIONS]);\n\t} catch (err) {\n\t\tconst msg = err instanceof Error ? err.message : String(err);\n\t\treturn fail(500, { error: msg });\n\t}\n\tif (displayName) try {\n\t\tawait getUserProfileStore().updateProfile(SYSTEM_CONTEXT, user.id, { displayName });\n\t} catch (err) {\n\t\tlocals.log.error(\"Display name update failed\", {\n\t\t\tcomponent: \"setup\",\n\t\t\terr: renderThrown(err)\n\t\t});\n\t}\n\tif (tenancy === \"single\") try {\n\t\tconst orgs = getOrganizationProvider();\n\t\tconst projects = getProjectProvider();\n\t\tconst now = (/* @__PURE__ */ new Date()).toISOString();\n\t\tconst org = {\n\t\t\tid: randomUUID(),\n\t\t\tname: companyName,\n\t\t\tslug,\n\t\t\townerId: user.id,\n\t\t\tcreatedBy: user.id,\n\t\t\tupdatedBy: user.id,\n\t\t\tcreatedAt: now,\n\t\t\tupdatedAt: now,\n\t\t\tdeletedAt: null\n\t\t};\n\t\tawait orgs.createOrg(SYSTEM_CONTEXT, org);\n\t\tconst project = {\n\t\t\tid: randomUUID(),\n\t\t\torgId: org.id,\n\t\t\tname: \"Default\",\n\t\t\tslug: \"default\",\n\t\t\tvisibility: \"public\",\n\t\t\townerId: user.id,\n\t\t\tcreatedBy: user.id,\n\t\t\tupdatedBy: user.id,\n\t\t\tautoJoinOnUpload: false,\n\t\t\tcreatedAt: now,\n\t\t\tupdatedAt: now,\n\t\t\tdeletedAt: null\n\t\t};\n\t\tawait projects.createProject(SYSTEM_CONTEXT, project);\n\t\tawait projects.addProjectMember(SYSTEM_CONTEXT, {\n\t\t\tprojectId: project.id,\n\t\t\tuserId: user.id,\n\t\t\trole: \"owner\",\n\t\t\tjoinedAt: now,\n\t\t\tupdatedAt: now,\n\t\t\tupdatedBy: user.id,\n\t\t\tdeletedAt: null\n\t\t});\n\t} catch (err) {\n\t\tlocals.log.error(\"Org/project bootstrap failed\", {\n\t\t\tcomponent: \"setup\",\n\t\t\terr: renderThrown(err)\n\t\t});\n\t}\n\tconst loginResult = await passwordAuth.verifyLogin(email, password);\n\tif (loginResult.kind !== \"success\") return fail(500, { error: \"Account created but login failed. Please sign in manually.\" });\n\tsetSessionCookie(cookies, loginResult.sessionToken);\n\tredirect(303, \"/admin\");\n} };\n//#endregion\nexport { actions, load };\n"],"names":[],"mappings":";;;;;;;;;AAQA;AACA,IAAI,IAAI,GAAG,YAAY;AACvB,CAAC,IAAI,MAAM,kBAAkB,EAAE,CAAC,gBAAgB,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;AACzF,CAAC,MAAM,IAAI,GAAG,eAAe,EAAE;AAC/B,CAAC,OAAO;AACR,EAAE,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;AAC7C,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;AACvC,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;AACvC,EAAE,cAAc,EAAE,WAAW,CAAC,8BAA8B,IAAI,IAAI;AACpE,EAAE,cAAc,EAAE,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI;AACjD,EAAE;AACF,CAAC;AACD,IAAI,OAAO,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK;AACjE,CAAC,IAAI,MAAM,kBAAkB,EAAE,CAAC,gBAAgB,CAAC,cAAc,CAAC,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;AACjI,CAAC,MAAM,OAAO,GAAG,UAAU,EAAE;AAC7B,CAAC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;AACtC,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;AAC1D,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,IAAI,MAAM;AAC9D,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAChC,CAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;AACtC,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;AACpC,CAAC,MAAM,cAAc,GAAG,OAAO,KAAK,QAAQ;AAC5C,CAAC,IAAI,cAAc,IAAI,CAAC,WAAW,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;AAC5F,CAAC,MAAM,IAAI,GAAG,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE;AACxD,CAAC,IAAI,cAAc,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,wDAAwD,EAAE,CAAC;AAC7H,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;AAC3F,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;AAC5G,CAAC,IAAI,QAAQ,KAAK,OAAO,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;AAChF,CAAC,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC,YAAY;AACpD,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,wDAAwD,EAAE,CAAC;AACzG,CAAC,IAAI,IAAI;AACT,CAAC,IAAI;AACL,EAAE,IAAI,GAAG,MAAM,YAAY,CAAC,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC;AACnE,EAAE,MAAM,eAAe,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;AAC7D,EAAE,MAAM,0BAA0B,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,wBAAwB,CAAC,CAAC;AAC1F,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC;AAC9D,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAClC,CAAC;AACD,CAAC,IAAI,WAAW,EAAE,IAAI;AACtB,EAAE,MAAM,mBAAmB,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;AACrF,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,4BAA4B,EAAE;AACjD,GAAG,SAAS,EAAE,OAAO;AACrB,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,IAAI,OAAO,KAAK,QAAQ,EAAE,IAAI;AAC/B,EAAE,MAAM,IAAI,GAAG,uBAAuB,EAAE;AACxC,EAAE,MAAM,QAAQ,GAAG,kBAAkB,EAAE;AACvC,EAAE,MAAM,GAAG,GAAG,iBAAiB,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE;AACxD,EAAE,MAAM,GAAG,GAAG;AACd,GAAG,EAAE,EAAE,UAAU,EAAE;AACnB,GAAG,IAAI,EAAE,WAAW;AACpB,GAAG,IAAI;AACP,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE;AACnB,GAAG,SAAS,EAAE,IAAI,CAAC,EAAE;AACrB,GAAG,SAAS,EAAE,IAAI,CAAC,EAAE;AACrB,GAAG,SAAS,EAAE,GAAG;AACjB,GAAG,SAAS,EAAE,GAAG;AACjB,GAAG,SAAS,EAAE;AACd,GAAG;AACH,EAAE,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,GAAG,CAAC;AAC3C,EAAE,MAAM,OAAO,GAAG;AAClB,GAAG,EAAE,EAAE,UAAU,EAAE;AACnB,GAAG,KAAK,EAAE,GAAG,CAAC,EAAE;AAChB,GAAG,IAAI,EAAE,SAAS;AAClB,GAAG,IAAI,EAAE,SAAS;AAClB,GAAG,UAAU,EAAE,QAAQ;AACvB,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE;AACnB,GAAG,SAAS,EAAE,IAAI,CAAC,EAAE;AACrB,GAAG,SAAS,EAAE,IAAI,CAAC,EAAE;AACrB,GAAG,gBAAgB,EAAE,KAAK;AAC1B,GAAG,SAAS,EAAE,GAAG;AACjB,GAAG,SAAS,EAAE,GAAG;AACjB,GAAG,SAAS,EAAE;AACd,GAAG;AACH,EAAE,MAAM,QAAQ,CAAC,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC;AACvD,EAAE,MAAM,QAAQ,CAAC,gBAAgB,CAAC,cAAc,EAAE;AAClD,GAAG,SAAS,EAAE,OAAO,CAAC,EAAE;AACxB,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE;AAClB,GAAG,IAAI,EAAE,OAAO;AAChB,GAAG,QAAQ,EAAE,GAAG;AAChB,GAAG,SAAS,EAAE,GAAG;AACjB,GAAG,SAAS,EAAE,IAAI,CAAC,EAAE;AACrB,GAAG,SAAS,EAAE;AACd,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,8BAA8B,EAAE;AACnD,GAAG,SAAS,EAAE,OAAO;AACrB,GAAG,GAAG,EAAE,YAAY,CAAC,GAAG;AACxB,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;AACpE,CAAC,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,4DAA4D,EAAE,CAAC;AAC9H,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,YAAY,CAAC;AACpD,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;AACxB,CAAC,EAAE;;;;;;;;;;"}

package/build/server/chunks/entries/pages/setup/_page.svelte.js-DmCLAP5I.js

@@ -0,0 +1,249 @@
+import { ag as head, ak as ensure_array_like, af as attr, ap as escape_html } from '../../../chunks/server.js-eNE8c09e.js';
+import { B as Button } from '../../../chunks/button.js-ChtD7zPv.js';
+import { L as Label } from '../../../chunks/label.js-CH-88bjp.js';
+import { p as page } from '../../../chunks/state.js-BqObXRO8.js';
+import { I as Input } from '../../../chunks/input.js-Daze9Zi5.js';
+import { C as Callout } from '../../../chunks/Callout.js-_5j40j01.js';
+import '../../../chunks/uneval.js-NmnccxCg.js';
+import 'clsx';
+import '../../../chunks/utils2.js-C1oP9gJ9.js';
+import 'tailwind-merge';
+import 'tailwind-variants';
+import '../../../chunks/create-id.js-DByR97E7.js';
+import '../../../chunks/client.js-BQ-CNV1V.js';
+import '../../../chunks/index-server.js-B4lHrS_U.js';
+import '../../../chunks/shared.js-BStsS1ju.js';
+import '@sveltejs/kit/internal';
+import '../../../chunks/exports.js-DurfUvtz.js';
+import '../../../chunks/routing.js-CvcjLFt6.js';
+import '../../../chunks/internal2.js-XyX0195x.js';
+import '../../../chunks/legacy-client.js-CnRScLY2.js';
+import '../../../chunks/events.js-Dn4NgQ5T.js';
+import '@sveltejs/kit/internal/server';
+import '../../../chunks/severity.js-D9BMFvsP.js';
+
+//#region src/routes/setup/+page.svelte
+function _page($$renderer, $$props) {
+	$$renderer.component(($$renderer) => {
+		let { form, data } = $$props;
+		function oauthHref(provider) {
+			return `/auth/supabase/start?provider=${encodeURIComponent(provider)}&redirectTo=%2Fadmin`;
+		}
+		function providerLabel(p) {
+			return {
+				google: "Google",
+				github: "GitHub",
+				azure: "Microsoft",
+				gitlab: "GitLab"
+			}[p] ?? p;
+		}
+		head("g40i6i", $$renderer, ($$renderer) => {
+			$$renderer.title(($$renderer) => {
+				$$renderer.push(`<title>Setup - ${escape_html(page.data.branding.name)}</title>`);
+			});
+		});
+		$$renderer.push(`<div class="bg-background flex min-h-screen items-center justify-center px-4 py-12 sm:px-6 lg:px-8"><div class="w-full max-w-sm space-y-6"><div class="space-y-1 text-center"><h2 class="text-foreground text-2xl font-bold tracking-tight">Create Admin Account</h2> <p class="text-muted-foreground text-sm">No users found. Set up your platform admin account to get started.</p></div> `);
+		if (form?.error) {
+			$$renderer.push("<!--[0-->");
+			Callout($$renderer, {
+				tone: "danger",
+				children: ($$renderer) => {
+					$$renderer.push(`<!---->${escape_html(form.error)}`);
+				},
+				$$slots: { default: true }
+			});
+		} else $$renderer.push("<!--[-1-->");
+		$$renderer.push(`<!--]--> `);
+		if (data.oauthProviders.length > 0) {
+			$$renderer.push(`<!--[0--><div class="space-y-2"><p class="text-muted-foreground text-center text-xs">The first user to sign in becomes the platform admin.</p> <!--[-->`);
+			const each_array = ensure_array_like(data.oauthProviders);
+			for (let $$index = 0, $$length = each_array.length; $$index < $$length; $$index++) {
+				let provider = each_array[$$index];
+				$$renderer.push(`<a${attr("href", oauthHref(provider))} class="block">`);
+				Button($$renderer, {
+					type: "button",
+					variant: "outline",
+					class: "w-full",
+					children: ($$renderer) => {
+						$$renderer.push(`<!---->Continue with ${escape_html(providerLabel(provider))}`);
+					},
+					$$slots: { default: true }
+				});
+				$$renderer.push(`<!----></a>`);
+			}
+			$$renderer.push(`<!--]--></div>`);
+		} else $$renderer.push("<!--[-1-->");
+		$$renderer.push(`<!--]--> `);
+		if (data.hasEmailLink && data.oauthProviders.length > 0) $$renderer.push(`<!--[0--><div class="text-muted-foreground flex items-center gap-2 text-xs uppercase"><div class="bg-border h-px flex-1"></div> <span>or</span> <div class="bg-border h-px flex-1"></div></div>`);
+		else $$renderer.push("<!--[-1-->");
+		$$renderer.push(`<!--]--> `);
+		if (data.hasEmailLink) {
+			$$renderer.push(`<!--[0--><form method="POST" action="/auth/email/start?redirectTo=%2Fadmin" class="space-y-4"><p class="text-muted-foreground text-center text-xs">Sign in via email link. Set <code>BOOTSTRAP_INSTANCE_ADMIN_EMAIL</code> in your env to control
+					which address becomes admin.</p> <div class="space-y-2">`);
+			Label($$renderer, {
+				for: "bootstrap-email",
+				children: ($$renderer) => {
+					$$renderer.push(`<!---->Email`);
+				},
+				$$slots: { default: true }
+			});
+			$$renderer.push(`<!----> `);
+			Input($$renderer, {
+				id: "bootstrap-email",
+				name: "email",
+				type: "email",
+				required: true,
+				placeholder: "admin@example.com"
+			});
+			$$renderer.push(`<!----></div> `);
+			Button($$renderer, {
+				type: "submit",
+				variant: "outline",
+				class: "w-full",
+				children: ($$renderer) => {
+					$$renderer.push(`<!---->Email me a sign-in link`);
+				},
+				$$slots: { default: true }
+			});
+			$$renderer.push(`<!----></form>`);
+		} else $$renderer.push("<!--[-1-->");
+		$$renderer.push(`<!--]--> `);
+		if (data.hasPasswordAuth && (data.hasEmailLink || data.oauthProviders.length > 0)) $$renderer.push(`<!--[0--><div class="text-muted-foreground flex items-center gap-2 text-xs uppercase"><div class="bg-border h-px flex-1"></div> <span>or</span> <div class="bg-border h-px flex-1"></div></div>`);
+		else $$renderer.push("<!--[-1-->");
+		$$renderer.push(`<!--]--> `);
+		if (data.hasPasswordAuth) {
+			$$renderer.push(`<!--[0--><form method="POST" class="space-y-4"><div class="space-y-2">`);
+			Label($$renderer, {
+				for: "companyName",
+				children: ($$renderer) => {
+					$$renderer.push(`<!---->Company name`);
+				},
+				$$slots: { default: true }
+			});
+			$$renderer.push(`<!----> `);
+			Input($$renderer, {
+				id: "companyName",
+				name: "companyName",
+				type: "text",
+				required: true,
+				placeholder: "Acme Corp"
+			});
+			$$renderer.push(`<!----></div> <div class="space-y-2">`);
+			Label($$renderer, {
+				for: "displayName",
+				children: ($$renderer) => {
+					$$renderer.push(`<!---->Display name`);
+				},
+				$$slots: { default: true }
+			});
+			$$renderer.push(`<!----> `);
+			Input($$renderer, {
+				id: "displayName",
+				name: "displayName",
+				type: "text",
+				placeholder: "Jane Smith"
+			});
+			$$renderer.push(`<!----></div> <div class="space-y-2">`);
+			Label($$renderer, {
+				for: "email",
+				children: ($$renderer) => {
+					$$renderer.push(`<!---->Email`);
+				},
+				$$slots: { default: true }
+			});
+			$$renderer.push(`<!----> `);
+			Input($$renderer, {
+				id: "email",
+				name: "email",
+				type: "email",
+				required: true,
+				placeholder: "admin@example.com"
+			});
+			$$renderer.push(`<!----></div> <div class="space-y-2">`);
+			Label($$renderer, {
+				for: "password",
+				children: ($$renderer) => {
+					$$renderer.push(`<!---->Password`);
+				},
+				$$slots: { default: true }
+			});
+			$$renderer.push(`<!----> `);
+			Input($$renderer, {
+				id: "password",
+				name: "password",
+				type: "password",
+				required: true,
+				placeholder: "Min. 8 characters"
+			});
+			$$renderer.push(`<!----></div> <div class="space-y-2">`);
+			Label($$renderer, {
+				for: "confirm",
+				children: ($$renderer) => {
+					$$renderer.push(`<!---->Confirm Password`);
+				},
+				$$slots: { default: true }
+			});
+			$$renderer.push(`<!----> `);
+			Input($$renderer, {
+				id: "confirm",
+				name: "confirm",
+				type: "password",
+				required: true,
+				placeholder: "Repeat password"
+			});
+			$$renderer.push(`<!----></div> `);
+			Button($$renderer, {
+				type: "submit",
+				class: "w-full",
+				children: ($$renderer) => {
+					$$renderer.push(`<!---->Create Account`);
+				},
+				$$slots: { default: true }
+			});
+			$$renderer.push(`<!----></form>`);
+		} else $$renderer.push("<!--[-1-->");
+		$$renderer.push(`<!--]--> `);
+		if (data.hasProxyAuth && !data.hasPasswordAuth && !data.hasEmailLink && data.oauthProviders.length === 0) {
+			$$renderer.push(`<!--[0--><div class="space-y-3"><p class="text-muted-foreground text-sm">This deployment authenticates via your upstream proxy (forward-auth). To claim admin, sign
+					in through the proxy with the email below — the first proxy-authenticated visit will be
+					granted instance admin automatically.</p> `);
+			if (data.bootstrapEmail) $$renderer.push(`<!--[0--><p class="text-sm">Expected email: <code class="bg-muted rounded px-1 py-0.5">${escape_html(data.bootstrapEmail)}</code></p>`);
+			else {
+				$$renderer.push("<!--[-1-->");
+				Callout($$renderer, {
+					tone: "danger",
+					children: ($$renderer) => {
+						$$renderer.push(`<code>BOOTSTRAP_INSTANCE_ADMIN_EMAIL</code> is unset. Set it in <code>.env</code>, restart, and reload this page — otherwise the first
+						proxy-authenticated visitor would gain admin (and may not be you).`);
+					},
+					$$slots: { default: true }
+				});
+			}
+			$$renderer.push(`<!--]--> <a href="/" class="block">`);
+			Button($$renderer, {
+				type: "button",
+				variant: "outline",
+				class: "w-full",
+				children: ($$renderer) => {
+					$$renderer.push(`<!---->Continue`);
+				},
+				$$slots: { default: true }
+			});
+			$$renderer.push(`<!----></a></div>`);
+		} else if (!data.hasPasswordAuth && !data.hasEmailLink && data.oauthProviders.length === 0) {
+			$$renderer.push("<!--[1-->");
+			Callout($$renderer, {
+				tone: "danger",
+				children: ($$renderer) => {
+					$$renderer.push(`<!---->No setup methods are configured. Configure password auth, email-link sign-in, or OAuth
+				providers before bootstrapping the first admin.`);
+				},
+				$$slots: { default: true }
+			});
+		} else $$renderer.push("<!--[-1-->");
+		$$renderer.push(`<!--]--></div></div>`);
+	});
+}
+
+export { _page as default };
+//# sourceMappingURL=_page.svelte.js-DmCLAP5I.js.map

package/build/server/chunks/entries/pages/setup/_page.svelte.js-DmCLAP5I.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_page.svelte.js-DmCLAP5I.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/setup/_page.svelte.js"],"sourcesContent":["import { D as attr, c as head, k as escape_html, s as ensure_array_like } from \"../../../chunks/server.js\";\nimport { t as Button } from \"../../../chunks/button.js\";\nimport { t as Label } from \"../../../chunks/label.js\";\nimport { t as page } from \"../../../chunks/state.js\";\nimport { t as Input } from \"../../../chunks/input.js\";\nimport { t as Callout } from \"../../../chunks/Callout.js\";\n//#region src/routes/setup/+page.svelte\nfunction _page($$renderer, $$props) {\n\t$$renderer.component(($$renderer) => {\n\t\tlet { form, data } = $$props;\n\t\tfunction oauthHref(provider) {\n\t\t\treturn `/auth/supabase/start?provider=${encodeURIComponent(provider)}&redirectTo=%2Fadmin`;\n\t\t}\n\t\tfunction providerLabel(p) {\n\t\t\treturn {\n\t\t\t\tgoogle: \"Google\",\n\t\t\t\tgithub: \"GitHub\",\n\t\t\t\tazure: \"Microsoft\",\n\t\t\t\tgitlab: \"GitLab\"\n\t\t\t}[p] ?? p;\n\t\t}\n\t\thead(\"g40i6i\", $$renderer, ($$renderer) => {\n\t\t\t$$renderer.title(($$renderer) => {\n\t\t\t\t$$renderer.push(`<title>Setup - ${escape_html(page.data.branding.name)}</title>`);\n\t\t\t});\n\t\t});\n\t\t$$renderer.push(`<div class=\"bg-background flex min-h-screen items-center justify-center px-4 py-12 sm:px-6 lg:px-8\"><div class=\"w-full max-w-sm space-y-6\"><div class=\"space-y-1 text-center\"><h2 class=\"text-foreground text-2xl font-bold tracking-tight\">Create Admin Account</h2> <p class=\"text-muted-foreground text-sm\">No users found. Set up your platform admin account to get started.</p></div> `);\n\t\tif (form?.error) {\n\t\t\t$$renderer.push(\"<!--[0-->\");\n\t\t\tCallout($$renderer, {\n\t\t\t\ttone: \"danger\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->${escape_html(form.error)}`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t} else $$renderer.push(\"<!--[-1-->\");\n\t\t$$renderer.push(`<!--]--> `);\n\t\tif (data.oauthProviders.length > 0) {\n\t\t\t$$renderer.push(`<!--[0--><div class=\"space-y-2\"><p class=\"text-muted-foreground text-center text-xs\">The first user to sign in becomes the platform admin.</p> <!--[-->`);\n\t\t\tconst each_array = ensure_array_like(data.oauthProviders);\n\t\t\tfor (let $$index = 0, $$length = each_array.length; $$index < $$length; $$index++) {\n\t\t\t\tlet provider = each_array[$$index];\n\t\t\t\t$$renderer.push(`<a${attr(\"href\", oauthHref(provider))} class=\"block\">`);\n\t\t\t\tButton($$renderer, {\n\t\t\t\t\ttype: \"button\",\n\t\t\t\t\tvariant: \"outline\",\n\t\t\t\t\tclass: \"w-full\",\n\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t$$renderer.push(`<!---->Continue with ${escape_html(providerLabel(provider))}`);\n\t\t\t\t\t},\n\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t});\n\t\t\t\t$$renderer.push(`<!----></a>`);\n\t\t\t}\n\t\t\t$$renderer.push(`<!--]--></div>`);\n\t\t} else $$renderer.push(\"<!--[-1-->\");\n\t\t$$renderer.push(`<!--]--> `);\n\t\tif (data.hasEmailLink && data.oauthProviders.length > 0) $$renderer.push(`<!--[0--><div class=\"text-muted-foreground flex items-center gap-2 text-xs uppercase\"><div class=\"bg-border h-px flex-1\"></div> <span>or</span> <div class=\"bg-border h-px flex-1\"></div></div>`);\n\t\telse $$renderer.push(\"<!--[-1-->\");\n\t\t$$renderer.push(`<!--]--> `);\n\t\tif (data.hasEmailLink) {\n\t\t\t$$renderer.push(`<!--[0--><form method=\"POST\" action=\"/auth/email/start?redirectTo=%2Fadmin\" class=\"space-y-4\"><p class=\"text-muted-foreground text-center text-xs\">Sign in via email link. Set <code>BOOTSTRAP_INSTANCE_ADMIN_EMAIL</code> in your env to control\n\t\t\t\t\twhich address becomes admin.</p> <div class=\"space-y-2\">`);\n\t\t\tLabel($$renderer, {\n\t\t\t\tfor: \"bootstrap-email\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->Email`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t\t$$renderer.push(`<!----> `);\n\t\t\tInput($$renderer, {\n\t\t\t\tid: \"bootstrap-email\",\n\t\t\t\tname: \"email\",\n\t\t\t\ttype: \"email\",\n\t\t\t\trequired: true,\n\t\t\t\tplaceholder: \"admin@example.com\"\n\t\t\t});\n\t\t\t$$renderer.push(`<!----></div> `);\n\t\t\tButton($$renderer, {\n\t\t\t\ttype: \"submit\",\n\t\t\t\tvariant: \"outline\",\n\t\t\t\tclass: \"w-full\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->Email me a sign-in link`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t\t$$renderer.push(`<!----></form>`);\n\t\t} else $$renderer.push(\"<!--[-1-->\");\n\t\t$$renderer.push(`<!--]--> `);\n\t\tif (data.hasPasswordAuth && (data.hasEmailLink || data.oauthProviders.length > 0)) $$renderer.push(`<!--[0--><div class=\"text-muted-foreground flex items-center gap-2 text-xs uppercase\"><div class=\"bg-border h-px flex-1\"></div> <span>or</span> <div class=\"bg-border h-px flex-1\"></div></div>`);\n\t\telse $$renderer.push(\"<!--[-1-->\");\n\t\t$$renderer.push(`<!--]--> `);\n\t\tif (data.hasPasswordAuth) {\n\t\t\t$$renderer.push(`<!--[0--><form method=\"POST\" class=\"space-y-4\"><div class=\"space-y-2\">`);\n\t\t\tLabel($$renderer, {\n\t\t\t\tfor: \"companyName\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->Company name`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t\t$$renderer.push(`<!----> `);\n\t\t\tInput($$renderer, {\n\t\t\t\tid: \"companyName\",\n\t\t\t\tname: \"companyName\",\n\t\t\t\ttype: \"text\",\n\t\t\t\trequired: true,\n\t\t\t\tplaceholder: \"Acme Corp\"\n\t\t\t});\n\t\t\t$$renderer.push(`<!----></div> <div class=\"space-y-2\">`);\n\t\t\tLabel($$renderer, {\n\t\t\t\tfor: \"displayName\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->Display name`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t\t$$renderer.push(`<!----> `);\n\t\t\tInput($$renderer, {\n\t\t\t\tid: \"displayName\",\n\t\t\t\tname: \"displayName\",\n\t\t\t\ttype: \"text\",\n\t\t\t\tplaceholder: \"Jane Smith\"\n\t\t\t});\n\t\t\t$$renderer.push(`<!----></div> <div class=\"space-y-2\">`);\n\t\t\tLabel($$renderer, {\n\t\t\t\tfor: \"email\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->Email`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t\t$$renderer.push(`<!----> `);\n\t\t\tInput($$renderer, {\n\t\t\t\tid: \"email\",\n\t\t\t\tname: \"email\",\n\t\t\t\ttype: \"email\",\n\t\t\t\trequired: true,\n\t\t\t\tplaceholder: \"admin@example.com\"\n\t\t\t});\n\t\t\t$$renderer.push(`<!----></div> <div class=\"space-y-2\">`);\n\t\t\tLabel($$renderer, {\n\t\t\t\tfor: \"password\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->Password`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t\t$$renderer.push(`<!----> `);\n\t\t\tInput($$renderer, {\n\t\t\t\tid: \"password\",\n\t\t\t\tname: \"password\",\n\t\t\t\ttype: \"password\",\n\t\t\t\trequired: true,\n\t\t\t\tplaceholder: \"Min. 8 characters\"\n\t\t\t});\n\t\t\t$$renderer.push(`<!----></div> <div class=\"space-y-2\">`);\n\t\t\tLabel($$renderer, {\n\t\t\t\tfor: \"confirm\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->Confirm Password`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t\t$$renderer.push(`<!----> `);\n\t\t\tInput($$renderer, {\n\t\t\t\tid: \"confirm\",\n\t\t\t\tname: \"confirm\",\n\t\t\t\ttype: \"password\",\n\t\t\t\trequired: true,\n\t\t\t\tplaceholder: \"Repeat password\"\n\t\t\t});\n\t\t\t$$renderer.push(`<!----></div> `);\n\t\t\tButton($$renderer, {\n\t\t\t\ttype: \"submit\",\n\t\t\t\tclass: \"w-full\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->Create Account`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t\t$$renderer.push(`<!----></form>`);\n\t\t} else $$renderer.push(\"<!--[-1-->\");\n\t\t$$renderer.push(`<!--]--> `);\n\t\tif (data.hasProxyAuth && !data.hasPasswordAuth && !data.hasEmailLink && data.oauthProviders.length === 0) {\n\t\t\t$$renderer.push(`<!--[0--><div class=\"space-y-3\"><p class=\"text-muted-foreground text-sm\">This deployment authenticates via your upstream proxy (forward-auth). To claim admin, sign\n\t\t\t\t\tin through the proxy with the email below — the first proxy-authenticated visit will be\n\t\t\t\t\tgranted instance admin automatically.</p> `);\n\t\t\tif (data.bootstrapEmail) $$renderer.push(`<!--[0--><p class=\"text-sm\">Expected email: <code class=\"bg-muted rounded px-1 py-0.5\">${escape_html(data.bootstrapEmail)}</code></p>`);\n\t\t\telse {\n\t\t\t\t$$renderer.push(\"<!--[-1-->\");\n\t\t\t\tCallout($$renderer, {\n\t\t\t\t\ttone: \"danger\",\n\t\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t\t$$renderer.push(`<code>BOOTSTRAP_INSTANCE_ADMIN_EMAIL</code> is unset. Set it in <code>.env</code>, restart, and reload this page — otherwise the first\n\t\t\t\t\t\tproxy-authenticated visitor would gain admin (and may not be you).`);\n\t\t\t\t\t},\n\t\t\t\t\t$$slots: { default: true }\n\t\t\t\t});\n\t\t\t}\n\t\t\t$$renderer.push(`<!--]--> <a href=\"/\" class=\"block\">`);\n\t\t\tButton($$renderer, {\n\t\t\t\ttype: \"button\",\n\t\t\t\tvariant: \"outline\",\n\t\t\t\tclass: \"w-full\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->Continue`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t\t$$renderer.push(`<!----></a></div>`);\n\t\t} else if (!data.hasPasswordAuth && !data.hasEmailLink && data.oauthProviders.length === 0) {\n\t\t\t$$renderer.push(\"<!--[1-->\");\n\t\t\tCallout($$renderer, {\n\t\t\t\ttone: \"danger\",\n\t\t\t\tchildren: ($$renderer) => {\n\t\t\t\t\t$$renderer.push(`<!---->No setup methods are configured. Configure password auth, email-link sign-in, or OAuth\n\t\t\t\tproviders before bootstrapping the first admin.`);\n\t\t\t\t},\n\t\t\t\t$$slots: { default: true }\n\t\t\t});\n\t\t} else $$renderer.push(\"<!--[-1-->\");\n\t\t$$renderer.push(`<!--]--></div></div>`);\n\t});\n}\n//#endregion\nexport { _page as default };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAMA;AACA,SAAS,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE;AACpC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,KAAK;AACtC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,OAAO;AAC9B,EAAE,SAAS,SAAS,CAAC,QAAQ,EAAE;AAC/B,GAAG,OAAO,CAAC,8BAA8B,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC;AAC7F,EAAE;AACF,EAAE,SAAS,aAAa,CAAC,CAAC,EAAE;AAC5B,GAAG,OAAO;AACV,IAAI,MAAM,EAAE,QAAQ;AACpB,IAAI,MAAM,EAAE,QAAQ;AACpB,IAAI,KAAK,EAAE,WAAW;AACtB,IAAI,MAAM,EAAE;AACZ,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACZ,EAAE;AACF,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,UAAU,KAAK;AAC7C,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,UAAU,KAAK;AACpC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AACrF,GAAG,CAAC,CAAC;AACL,EAAE,CAAC,CAAC;AACJ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,4XAA4X,CAAC,CAAC;AACjZ,EAAE,IAAI,IAAI,EAAE,KAAK,EAAE;AACnB,GAAG,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AAC/B,GAAG,OAAO,CAAC,UAAU,EAAE;AACvB,IAAI,IAAI,EAAE,QAAQ;AAClB,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzD,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,EAAE,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACtC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AAC9B,EAAE,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE;AACtC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,uJAAuJ,CAAC,CAAC;AAC7K,GAAG,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC;AAC5D,GAAG,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,EAAE;AACtF,IAAI,IAAI,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC;AACtC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;AAC5E,IAAI,MAAM,CAAC,UAAU,EAAE;AACvB,KAAK,IAAI,EAAE,QAAQ;AACnB,KAAK,OAAO,EAAE,SAAS;AACvB,KAAK,KAAK,EAAE,QAAQ;AACpB,KAAK,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC/B,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,qBAAqB,EAAE,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACrF,KAAK,CAAC;AACN,KAAK,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC7B,KAAK,CAAC;AACN,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,CAAC;AAClC,GAAG;AACH,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;AACpC,EAAE,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACtC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AAC9B,EAAE,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,+LAA+L,CAAC,CAAC;AAC7Q,OAAO,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACpC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AAC9B,EAAE,IAAI,IAAI,CAAC,YAAY,EAAE;AACzB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;AACpB,6DAA6D,CAAC,CAAC;AAC/D,GAAG,KAAK,CAAC,UAAU,EAAE;AACrB,IAAI,GAAG,EAAE,iBAAiB;AAC1B,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC;AACpC,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC9B,GAAG,KAAK,CAAC,UAAU,EAAE;AACrB,IAAI,EAAE,EAAE,iBAAiB;AACzB,IAAI,IAAI,EAAE,OAAO;AACjB,IAAI,IAAI,EAAE,OAAO;AACjB,IAAI,QAAQ,EAAE,IAAI;AAClB,IAAI,WAAW,EAAE;AACjB,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;AACpC,GAAG,MAAM,CAAC,UAAU,EAAE;AACtB,IAAI,IAAI,EAAE,QAAQ;AAClB,IAAI,OAAO,EAAE,SAAS;AACtB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,8BAA8B,CAAC,CAAC;AACtD,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;AACpC,EAAE,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACtC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AAC9B,EAAE,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,+LAA+L,CAAC,CAAC;AACvS,OAAO,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACpC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AAC9B,EAAE,IAAI,IAAI,CAAC,eAAe,EAAE;AAC5B,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,sEAAsE,CAAC,CAAC;AAC5F,GAAG,KAAK,CAAC,UAAU,EAAE;AACrB,IAAI,GAAG,EAAE,aAAa;AACtB,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,mBAAmB,CAAC,CAAC;AAC3C,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC9B,GAAG,KAAK,CAAC,UAAU,EAAE;AACrB,IAAI,EAAE,EAAE,aAAa;AACrB,IAAI,IAAI,EAAE,aAAa;AACvB,IAAI,IAAI,EAAE,MAAM;AAChB,IAAI,QAAQ,EAAE,IAAI;AAClB,IAAI,WAAW,EAAE;AACjB,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,qCAAqC,CAAC,CAAC;AAC3D,GAAG,KAAK,CAAC,UAAU,EAAE;AACrB,IAAI,GAAG,EAAE,aAAa;AACtB,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,mBAAmB,CAAC,CAAC;AAC3C,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC9B,GAAG,KAAK,CAAC,UAAU,EAAE;AACrB,IAAI,EAAE,EAAE,aAAa;AACrB,IAAI,IAAI,EAAE,aAAa;AACvB,IAAI,IAAI,EAAE,MAAM;AAChB,IAAI,WAAW,EAAE;AACjB,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,qCAAqC,CAAC,CAAC;AAC3D,GAAG,KAAK,CAAC,UAAU,EAAE;AACrB,IAAI,GAAG,EAAE,OAAO;AAChB,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC;AACpC,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC9B,GAAG,KAAK,CAAC,UAAU,EAAE;AACrB,IAAI,EAAE,EAAE,OAAO;AACf,IAAI,IAAI,EAAE,OAAO;AACjB,IAAI,IAAI,EAAE,OAAO;AACjB,IAAI,QAAQ,EAAE,IAAI;AAClB,IAAI,WAAW,EAAE;AACjB,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,qCAAqC,CAAC,CAAC;AAC3D,GAAG,KAAK,CAAC,UAAU,EAAE;AACrB,IAAI,GAAG,EAAE,UAAU;AACnB,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC;AACvC,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC9B,GAAG,KAAK,CAAC,UAAU,EAAE;AACrB,IAAI,EAAE,EAAE,UAAU;AAClB,IAAI,IAAI,EAAE,UAAU;AACpB,IAAI,IAAI,EAAE,UAAU;AACpB,IAAI,QAAQ,EAAE,IAAI;AAClB,IAAI,WAAW,EAAE;AACjB,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,qCAAqC,CAAC,CAAC;AAC3D,GAAG,KAAK,CAAC,UAAU,EAAE;AACrB,IAAI,GAAG,EAAE,SAAS;AAClB,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,uBAAuB,CAAC,CAAC;AAC/C,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC9B,GAAG,KAAK,CAAC,UAAU,EAAE;AACrB,IAAI,EAAE,EAAE,SAAS;AACjB,IAAI,IAAI,EAAE,SAAS;AACnB,IAAI,IAAI,EAAE,UAAU;AACpB,IAAI,QAAQ,EAAE,IAAI;AAClB,IAAI,WAAW,EAAE;AACjB,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;AACpC,GAAG,MAAM,CAAC,UAAU,EAAE;AACtB,IAAI,IAAI,EAAE,QAAQ;AAClB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC;AAC7C,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;AACpC,EAAE,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACtC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;AAC9B,EAAE,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE;AAC5G,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;AACpB;AACA,+CAA+C,CAAC,CAAC;AACjD,GAAG,IAAI,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,uFAAuF,EAAE,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,WAAW,CAAC,CAAC;AACpL,QAAQ;AACR,IAAI,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACjC,IAAI,OAAO,CAAC,UAAU,EAAE;AACxB,KAAK,IAAI,EAAE,QAAQ;AACnB,KAAK,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC/B,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;AACvB,wEAAwE,CAAC,CAAC;AAC1E,KAAK,CAAC;AACN,KAAK,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC7B,KAAK,CAAC;AACN,GAAG;AACH,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,mCAAmC,CAAC,CAAC;AACzD,GAAG,MAAM,CAAC,UAAU,EAAE;AACtB,IAAI,IAAI,EAAE,QAAQ;AAClB,IAAI,OAAO,EAAE,SAAS;AACtB,IAAI,KAAK,EAAE,QAAQ;AACnB,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC;AACvC,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,CAAC;AACvC,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE;AAC9F,GAAG,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC;AAC/B,GAAG,OAAO,CAAC,UAAU,EAAE;AACvB,IAAI,IAAI,EAAE,QAAQ;AAClB,IAAI,QAAQ,EAAE,CAAC,UAAU,KAAK;AAC9B,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC;AACtB,mDAAmD,CAAC,CAAC;AACrD,IAAI,CAAC;AACL,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI;AAC5B,IAAI,CAAC;AACL,EAAE,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;AACtC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/entries/pages/team/_layout.server.ts.js-DRBzxjUV.js

@@ -0,0 +1,28 @@
+import { e as getOrganizationProvider } from '../../../chunks/providers.server.js-CqUutXkw.js';
+import { redirect } from '@sveltejs/kit';
+
+//#region src/routes/team/+layout.server.ts
+/**
+* `/team` is the org-scoped admin surface — distinct from `/admin` (platform-
+* scoped). Any authenticated user with an active org can land on the General
+* tab; individual sub-tabs gate themselves on the relevant org permission.
+*/
+var load = async ({ locals }) => {
+	if (!locals.ctx) redirect(303, "/login");
+	const ctx = locals.ctx;
+	const orgId = ctx.actingOrgId;
+	if (!orgId) return { org: null };
+	let org = null;
+	try {
+		org = await getOrganizationProvider().getOrg(ctx, orgId);
+	} catch {}
+	return { org };
+};
+
+var _layout_server_ts = /*#__PURE__*/Object.freeze({
+	__proto__: null,
+	load: load
+});
+
+export { _layout_server_ts as _ };
+//# sourceMappingURL=_layout.server.ts.js-DRBzxjUV.js.map

package/build/server/chunks/entries/pages/team/_layout.server.ts.js-DRBzxjUV.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_layout.server.ts.js-DRBzxjUV.js","sources":["../../../../../../.svelte-kit/output/server/entries/pages/team/_layout.server.ts.js"],"sourcesContent":["import { h as getOrganizationProvider } from \"../../../chunks/providers.server.js\";\nimport { redirect } from \"@sveltejs/kit\";\n//#region src/routes/team/+layout.server.ts\n/**\n* `/team` is the org-scoped admin surface — distinct from `/admin` (platform-\n* scoped). Any authenticated user with an active org can land on the General\n* tab; individual sub-tabs gate themselves on the relevant org permission.\n*/\nvar load = async ({ locals }) => {\n\tif (!locals.ctx) redirect(303, \"/login\");\n\tconst ctx = locals.ctx;\n\tconst orgId = ctx.actingOrgId;\n\tif (!orgId) return { org: null };\n\tlet org = null;\n\ttry {\n\t\torg = await getOrganizationProvider().getOrg(ctx, orgId);\n\t} catch {}\n\treturn { org };\n};\n//#endregion\nexport { load };\n"],"names":[],"mappings":";;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,IAAI,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK;AACjC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;AACzC,CAAC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG;AACvB,CAAC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;AAC9B,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE;AACjC,CAAC,IAAI,GAAG,GAAG,IAAI;AACf,CAAC,IAAI;AACL,EAAE,GAAG,GAAG,MAAM,uBAAuB,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC;AAC1D,CAAC,CAAC,CAAC,MAAM,CAAC;AACV,CAAC,OAAO,EAAE,GAAG,EAAE;AACf,CAAC;;;;;;;;;"}

package/build/server/chunks/entries/pages/team/_layout.svelte.js-vG7a51GE.js

@@ -0,0 +1,172 @@
+import { ae as derived, ai as spread_props, aw as store_get, ax as unsubscribe_stores, ap as escape_html } from '../../../chunks/server.js-eNE8c09e.js';
+import { I as Icon } from '../../../chunks/utils2.js-C1oP9gJ9.js';
+import { A as Activity } from '../../../chunks/activity.js-TZSC8dNG.js';
+import { F as Folder_kanban } from '../../../chunks/folder-kanban.js-syhW1cs-.js';
+import { G as Gauge } from '../../../chunks/gauge.js-C-24eOlp.js';
+import { K as Key_round } from '../../../chunks/key-round.js-vgogOQC0.js';
+import { L as Link_2 } from '../../../chunks/link-2.js-vAJaWEoc.js';
+import { R as Rotate_ccw } from '../../../chunks/rotate-ccw.js-BHV7uexu.js';
+import { S as Server } from '../../../chunks/server4.js-ClXdyAvx.js';
+import { U as Users } from '../../../chunks/users.js-ByB4SxDK.js';
+import { S as SideNav } from '../../../chunks/SideNav.js-BO7V8Wv2.js';
+import { A as AppHeader } from '../../../chunks/AppHeader.js-cFj8rmeJ.js';
+import { p as page } from '../../../chunks/stores.js-GBI086iD.js';
+import '../../../chunks/uneval.js-NmnccxCg.js';
+import 'clsx';
+import 'tailwind-merge';
+import '../../../chunks/state.js-BqObXRO8.js';
+import '../../../chunks/client.js-BQ-CNV1V.js';
+import '../../../chunks/index-server.js-B4lHrS_U.js';
+import '../../../chunks/shared.js-BStsS1ju.js';
+import '@sveltejs/kit/internal';
+import '../../../chunks/exports.js-DurfUvtz.js';
+import '../../../chunks/routing.js-CvcjLFt6.js';
+import '../../../chunks/internal2.js-XyX0195x.js';
+import '../../../chunks/legacy-client.js-CnRScLY2.js';
+import '../../../chunks/events.js-Dn4NgQ5T.js';
+import '@sveltejs/kit/internal/server';
+import '../../../chunks/SettingsMenu.js-BIcj32M_.js';
+import '../../../chunks/src.js-CkL6l768.js';
+import 'zod';
+import '../../../chunks/footerContext.svelte.js-D7wOrPs7.js';
+import '../../../chunks/index-server2.js-siA98IdX.js';
+import '../../../chunks/create-id.js-DByR97E7.js';
+import '../../../chunks/button.js-ChtD7zPv.js';
+import 'tailwind-variants';
+import '../../../chunks/severity.js-D9BMFvsP.js';
+import '../../../chunks/settings.js-ZajE6fHc.js';
+import '../../../chunks/shield.js--OZ6yfQ6.js';
+import '../../../chunks/dialog-description.js-D5m47Ni2.js';
+import '../../../chunks/scroll-lock.js-Ds68nQMm.js';
+import '../../../chunks/dialog.js-CoG4gbfH.js';
+import '../../../chunks/x.js-BulvqqL2.js';
+
+//#region ../../node_modules/.pnpm/@lucide+svelte@1.48.0_svelte@5.57.1_@typescript-eslint+types@8.70.1_/node_modules/@lucide/svelte/dist/icons/sliders-horizontal.svelte
+function Sliders_horizontal($$renderer, $$props) {
+	let { $$slots, $$events, ...props } = $$props;
+	Icon($$renderer, spread_props([props, { icon: {
+		"name": "sliders-horizontal",
+		"size": 24,
+		"node": [
+			["path", { "d": "M10 5H3" }],
+			["path", { "d": "M12 19H3" }],
+			["path", { "d": "M14 3v4" }],
+			["path", { "d": "M16 17v4" }],
+			["path", { "d": "M21 12h-9" }],
+			["path", { "d": "M21 19h-5" }],
+			["path", { "d": "M21 5h-7" }],
+			["path", { "d": "M8 10v4" }],
+			["path", { "d": "M8 12H3" }]
+		]
+	} }]));
+}
+//#endregion
+//#region src/routes/team/+layout.svelte
+function _layout($$renderer, $$props) {
+	$$renderer.component(($$renderer) => {
+		var $$store_subs;
+		let { data, children } = $$props;
+		const orgPerms = derived(() => data.ctx?.orgPermissions ?? []);
+		const can = (p) => orgPerms().includes(p);
+		const enableSharing = derived(() => !!store_get($$store_subs ??= {}, "$page", page).data.flags?.enableSharing);
+		const items = derived(() => [
+			{
+				href: "/team",
+				label: "General",
+				icon: Gauge,
+				show: true
+			},
+			{
+				href: "/team/members",
+				label: "Members & roles",
+				icon: Users,
+				match: "prefix",
+				show: can("manage_org_members")
+			},
+			{
+				href: "/team/projects",
+				label: "Projects",
+				icon: Folder_kanban,
+				match: "prefix",
+				show: can("manage_projects")
+			},
+			{
+				href: "/team/reclaim",
+				label: "Reclaim",
+				icon: Rotate_ccw,
+				match: "prefix",
+				show: can("manage_org_members")
+			},
+			{
+				href: "/team/activity",
+				label: "Activity",
+				icon: Activity,
+				match: "prefix",
+				show: true
+			},
+			{
+				href: "/team/shares",
+				label: "Share links",
+				icon: Link_2,
+				match: "prefix",
+				show: enableSharing() && can("manage_definitions")
+			},
+			{
+				href: "/team/tokens",
+				label: "API tokens",
+				icon: Key_round,
+				match: "prefix",
+				show: !!data.ctx?.mayHoldApiTokens
+			},
+			{
+				href: "/team/compute",
+				label: "Compute",
+				icon: Server,
+				match: "prefix",
+				show: can("manage_org_compute")
+			},
+			{
+				href: "/team/settings",
+				label: "Settings",
+				icon: Sliders_horizontal,
+				match: "prefix",
+				show: can("manage_org_members")
+			}
+		].filter((i) => i.show));
+		const showSlug = derived(() => !!data.org && data.org.slug !== data.org.name.toLowerCase().replace(/\s+/g, "-"));
+		function orgInitials(name) {
+			return name.split(/\s+/).filter(Boolean).slice(0, 2).map((w) => w[0].toUpperCase()).join("");
+		}
+		{
+			function sidenav($$renderer) {
+				{
+					function header($$renderer) {
+						if (data.org) {
+							$$renderer.push(`<!--[0--><div class="border-border bg-accent/40 flex items-center gap-2 rounded-md border px-2.5 py-2"><span class="bg-primary/15 text-primary flex h-6 w-6 shrink-0 items-center justify-center rounded font-mono text-[11px] font-semibold">${escape_html(orgInitials(data.org.name))}</span> <div class="min-w-0 flex-1"><p class="truncate text-sm leading-tight font-medium">${escape_html(data.org.name)}</p> `);
+							if (showSlug()) $$renderer.push(`<!--[0--><p class="text-muted-foreground truncate font-mono text-[10px]">${escape_html(data.org.slug)}</p>`);
+							else $$renderer.push("<!--[-1-->");
+							$$renderer.push(`<!--]--></div></div>`);
+						} else $$renderer.push("<!--[-1-->");
+						$$renderer.push(`<!--]-->`);
+					}
+					SideNav($$renderer, {
+						items: items(),
+						eyebrow: "Organization",
+						border: false,
+						header});
+				}
+			}
+			AppHeader($$renderer, {
+				sidenav,
+				children: ($$renderer) => {
+					$$renderer.push(`<div class="px-(--page-px) py-(--page-py)">`);
+					children?.($$renderer);
+					$$renderer.push(`<!----></div>`);
+				}});
+		}
+		if ($$store_subs) unsubscribe_stores($$store_subs);
+	});
+}
+
+export { _layout as default };
+//# sourceMappingURL=_layout.svelte.js-vG7a51GE.js.map