+
+
+
+
+ {m.settings_activity_title()}
+
+
+ {m.settings_activity_desc()}
+
+
+ {#if totalCount !== null}
+
+ {m.settings_activity_count({ count: String(totalCount) })}
+
+ {/if}
+
+
+
+
+
+ {#each filters as filter}
+
+ {/each}
+
+
+
+
+
+
+
+ {#if isLoading}
+
+
+
+ {:else if filteredEntries.length === 0 && initialLoaded}
+
+
+
+ {:else}
+
+ {#each groupedEntries() as group}
+
+
+
+ {group.label}
+
+
+
+ {#each group.entries as entry (entry.id)}
+
+
+
+ {getActivityIcon(entry.action)}
+
+
+
+
+
+ {getDescription(entry)}
+
+
+ {#if entry.profiles}
+
+
+
+ {entry.profiles.full_name ??
+ entry.profiles.email}
+
+
+ {/if}
+
·
+
+ {formatRelativeDate(entry.created_at)}
+
+
+ {formatFullDate(entry.created_at)}
+
+
+
+
+
+
+ {getEntityTypeLabel(entry.entity_type)}
+
+
+ {/each}
+ {/each}
+
+
+
+
+ {#if isLoadingMore}
+
+ {:else if hasMore}
+
+ {:else if entries.length > 0}
+
+ {m.settings_activity_end()}
+
+ {/if}
+
+ {/if}
+
+
diff --git a/src/lib/supabase/admin.ts b/src/lib/supabase/admin.ts
new file mode 100644
index 0000000..9fdd8b1
--- /dev/null
+++ b/src/lib/supabase/admin.ts
@@ -0,0 +1,22 @@
+import { createClient } from '@supabase/supabase-js';
+import { PUBLIC_SUPABASE_URL } from '$env/static/public';
+import { env } from '$env/dynamic/private';
+import type { Database } from './types';
+
+/**
+ * Creates a Supabase client with the service_role key.
+ * This bypasses RLS and should ONLY be used server-side for admin operations
+ * like sending invite emails via auth.admin.
+ */
+export function createSupabaseAdmin() {
+ const serviceRoleKey = env.SUPABASE_SERVICE_ROLE_KEY;
+ if (!serviceRoleKey) {
+ throw new Error('SUPABASE_SERVICE_ROLE_KEY is not configured');
+ }
+ return createClient
(PUBLIC_SUPABASE_URL, serviceRoleKey, {
+ auth: {
+ autoRefreshToken: false,
+ persistSession: false,
+ },
+ });
+}
diff --git a/src/routes/+page.server.ts b/src/routes/+page.server.ts
index e044a10..1aa2fc2 100644
--- a/src/routes/+page.server.ts
+++ b/src/routes/+page.server.ts
@@ -8,20 +8,41 @@ export const load: PageServerLoad = async ({ locals }) => {
redirect(303, '/login');
}
- const { data: memberships } = await locals.supabase
- .from('org_members')
- .select(`
- role,
- organization:organizations(*)
- `)
- .eq('user_id', user.id);
+ const [membershipsResult, invitesResult] = await Promise.all([
+ locals.supabase
+ .from('org_members')
+ .select(`
+ role,
+ organization:organizations(*)
+ `)
+ .eq('user_id', user.id),
+ // Fetch pending invites for this user's email
+ locals.supabase
+ .from('org_invites')
+ .select(`
+ id, email, role, token, expires_at, created_at,
+ organizations ( id, name, slug )
+ `)
+ .eq('email', user.email!)
+ .is('accepted_at', null)
+ .gt('expires_at', new Date().toISOString())
+ ]);
- const organizations = (memberships ?? []).map((m) => ({
+ const organizations = (membershipsResult.data ?? []).map((m) => ({
...m.organization,
role: m.role
}));
+ const pendingInvites = (invitesResult.data ?? []).map((inv) => ({
+ id: inv.id,
+ role: inv.role,
+ token: inv.token,
+ createdAt: inv.created_at,
+ org: (inv as Record).organizations as { id: string; name: string; slug: string } | null,
+ })).filter((inv) => inv.org !== null);
+
return {
- organizations
+ organizations,
+ pendingInvites,
};
};
diff --git a/src/routes/+page.svelte b/src/routes/+page.svelte
index ab26893..e4e90ba 100644
--- a/src/routes/+page.svelte
+++ b/src/routes/+page.svelte
@@ -1,6 +1,7 @@
+
+
+
+ {#if error}
+
{error}
+ {:else}
+
+
Signing you in...
+ {/if}
+
+