diff --git a/.changeset/bright-dialog-cursors.md b/.changeset/bright-dialog-cursors.md
new file mode 100644
index 00000000..f85a360f
--- /dev/null
+++ b/.changeset/bright-dialog-cursors.md
@@ -0,0 +1,4 @@
+---
+'svforge': patch
+---
+Show a pointer cursor on enabled dashboard dialog triggers.
diff --git a/graphify-out/graph.json b/graphify-out/graph.json
index 65b5f17b..065b5d9f 100644
--- a/graphify-out/graph.json
+++ b/graphify-out/graph.json
@@ -22848,6 +22848,23 @@
       "_callable": true,
       "_origin": "ast"
     },
+    {
+      "id": "tests_dashboard_trigger_affordance_test",
+      "label": "dashboard-trigger-affordance.test.ts",
+      "file_type": "code",
+      "source_file": "tests/dashboard-trigger-affordance.test.ts",
+      "source_location": "L1",
+      "_origin": "ast"
+    },
+    {
+      "id": "tests_dashboard_trigger_affordance_test_triggerclasses",
+      "label": "triggerClasses()",
+      "file_type": "code",
+      "source_file": "tests/dashboard-trigger-affordance.test.ts",
+      "source_location": "L5",
+      "_callable": true,
+      "_origin": "ast"
+    },
     {
       "id": "tests_dashboard_vitest_test",
       "label": "dashboard-vitest.test.ts",
@@ -26252,6 +26269,15 @@
       "source_location": "L1",
       "_origin": "ast"
     },
+    {
+      "id": "changeset_bright_dialog_cursors",
+      "label": "bright-dialog-cursors.md",
+      "file_type": "document",
+      "node_kind": "page",
+      "source_file": ".changeset/bright-dialog-cursors.md",
+      "source_location": "L1",
+      "_origin": "ast"
+    },
     {
       "id": "changeset_tidy_button_classes",
       "label": "tidy-button-classes.md",
@@ -77897,6 +77923,71 @@
       "weight": 1,
       "_origin": "ast"
     },
+    {
+      "source": "tests_dashboard_trigger_affordance_test",
+      "target": "ref_vitest",
+      "relation": "imports_from",
+      "context": "import",
+      "confidence": "EXTRACTED",
+      "source_file": "tests/dashboard-trigger-affordance.test.ts",
+      "source_location": "L1",
+      "weight": 1,
+      "_origin": "ast"
+    },
+    {
+      "source": "tests_dashboard_trigger_affordance_test",
+      "target": "ref_node_fs",
+      "relation": "imports_from",
+      "context": "import",
+      "confidence": "EXTRACTED",
+      "source_file": "tests/dashboard-trigger-affordance.test.ts",
+      "source_location": "L2",
+      "weight": 1,
+      "_origin": "ast"
+    },
+    {
+      "source": "tests_dashboard_trigger_affordance_test",
+      "target": "tests_helpers",
+      "relation": "imports_from",
+      "context": "import",
+      "confidence": "EXTRACTED",
+      "source_file": "tests/dashboard-trigger-affordance.test.ts",
+      "source_location": "L3",
+      "weight": 1,
+      "_origin": "ast"
+    },
+    {
+      "source": "tests_dashboard_trigger_affordance_test",
+      "target": "tests_helpers_dashboardtemplatefile",
+      "relation": "imports",
+      "context": "import",
+      "confidence": "EXTRACTED",
+      "source_file": "tests/dashboard-trigger-affordance.test.ts",
+      "source_location": "L3",
+      "weight": 1,
+      "_origin": "ast"
+    },
+    {
+      "source": "tests_dashboard_trigger_affordance_test",
+      "target": "tests_dashboard_trigger_affordance_test_triggerclasses",
+      "relation": "contains",
+      "confidence": "EXTRACTED",
+      "source_file": "tests/dashboard-trigger-affordance.test.ts",
+      "source_location": "L5",
+      "weight": 1,
+      "_origin": "ast"
+    },
+    {
+      "source": "tests_dashboard_trigger_affordance_test",
+      "target": "tests_dashboard_trigger_affordance_test_triggerclasses",
+      "relation": "calls",
+      "context": "call",
+      "confidence": "EXTRACTED",
+      "source_file": "tests/dashboard-trigger-affordance.test.ts",
+      "source_location": "L17",
+      "weight": 1,
+      "_origin": "ast"
+    },
     {
       "source": "tests_dashboard_vitest_test",
       "target": "ref_vitest",
diff --git a/graphify-out/manifest.json b/graphify-out/manifest.json
index 2de377f8..eeba4901 100644
--- a/graphify-out/manifest.json
+++ b/graphify-out/manifest.json
@@ -488,7 +488,7 @@
     "semantic_hash": ""
   },
   "packages/svforge/src/templates.ts": {
-    "ast_hash": "0a59e8810af269c5b766dd59df9db3f2",
+    "ast_hash": "8ea3c6d025e49ef0678e7d2994cc08a3",
     "semantic_hash": ""
   },
   "packages/svforge/src/upgrade.ts": {
@@ -736,7 +736,7 @@
     "semantic_hash": ""
   },
   "packages/svforge/templates/dashboard/src/lib/components/svforge/layout/AdminLayout.svelte": {
-    "ast_hash": "da6a353749cb2cc6c04c7d42420f15c3",
+    "ast_hash": "11f5ca893c77243145fd2c1ca6347103",
     "semantic_hash": ""
   },
   "packages/svforge/templates/dashboard/src/lib/components/svforge/ui/AvatarInitial.svelte": {
@@ -852,7 +852,7 @@
     "semantic_hash": ""
   },
   "packages/svforge/templates/dashboard/src/routes/(app)/admin/users/+page.svelte": {
-    "ast_hash": "69d51410d7d665e6350d2aa80036f62a",
+    "ast_hash": "bb95a5c9bc497e80cca0ddbb777d1088",
     "semantic_hash": ""
   },
   "packages/svforge/templates/dashboard/src/routes/(app)/admin/users/page.server.test.ts": {
@@ -2074,5 +2074,13 @@
   ".changeset/tidy-button-classes.md": {
     "ast_hash": "6f46a25079bb34d5ee7eb6aa6f14acab",
     "semantic_hash": ""
+  },
+  "tests/dashboard-trigger-affordance.test.ts": {
+    "ast_hash": "517752d0f4e57b837cf0a8367ca7335a",
+    "semantic_hash": ""
+  },
+  ".changeset/bright-dialog-cursors.md": {
+    "ast_hash": "fdd08c0666fe945dc1f0baf093f852f8",
+    "semantic_hash": ""
   }
 }
diff --git a/packages/svforge/src/templates.ts b/packages/svforge/src/templates.ts
index f2d00499..745a011e 100644
--- a/packages/svforge/src/templates.ts
+++ b/packages/svforge/src/templates.ts
@@ -54,7 +54,7 @@ export const dashboardFiles = {
   "/hooks.server.test.ts": "import { describe, expect, it, vi } from 'vitest';\n\nconst query = {\n\tselect: vi.fn(() => query),\n\tfrom: vi.fn(() => query),\n\twhere: vi.fn(() => query),\n\tlimit: vi.fn<() => any[]>()\n};\n\nvi.mock('$app/env', () => ({ building: false }));\nvi.mock('$lib/paraglide/runtime', () => ({ getTextDirection: vi.fn(() => 'ltr') }));\nvi.mock('$lib/paraglide/server', () => ({\n\tparaglideMiddleware: vi.fn(async (request, next) => next({ request, locale: 'en' }))\n}));\nvi.mock('$lib/server/auth', () => ({\n\tauth: {\n\t\tapi: {\n\t\t\tgetSession: vi.fn(async () => ({\n\t\t\t\tsession: { id: 'session-1', userId: 'disabled-user' },\n\t\t\t\tuser: { id: 'disabled-user', email: 'disabled@example.com' }\n\t\t\t}))\n\t\t}\n\t}\n}));\nvi.mock('$lib/server/db', () => ({ db: query }));\nvi.mock('$lib/server/db/schema', () => ({ user: { id: 'id', disabled: 'disabled' } }));\nvi.mock('drizzle-orm', () => ({ eq: vi.fn() }));\nvi.mock('better-auth/svelte-kit', () => ({\n\t// Faithful to the real handler: resolve is called with the transform object.\n\tsvelteKitHandler: vi.fn(({ event, resolve }) => resolve(event, { transformPageChunk: (f: any) => f.html ?? f }))\n}));\n\ndescribe('dashboard auth hook', () => {\n\tit('does not populate locals for a session owned by a disabled user', async () => {\n\t\tquery.limit.mockReturnValueOnce([{ disabled: true }]);\n\t\tconst { handle } = await import('./hooks.server');\n\t\tconst event: any = {\n\t\t\trequest: new Request('http://localhost/admin'),\n\t\t\tlocals: {}\n\t\t};\n\t\tconst resolve = vi.fn(async () => new Response('ok'));\n\n\t\tawait handle({ event, resolve } as any);\n\n\t\texpect(event.locals.session).toBeUndefined();\n\t\texpect(event.locals.user).toBeUndefined();\n\t\texpect(resolve).toHaveBeenCalledWith(\n\t\t\texpect.objectContaining({ request: event.request, locals: event.locals }),\n\t\t\texpect.any(Object)\n\t\t);\n\t});\n});\n",
   "/hooks.server.ts": "import type { Handle } from '@sveltejs/kit/hooks';\n// `building` is used to skip auth during prerender/build (SvelteKit builds pages statically).\nimport { building } from '$app/env';\nimport { getTextDirection } from '$lib/paraglide/runtime';\nimport { paraglideMiddleware } from '$lib/paraglide/server';\nimport { auth } from '$lib/server/auth';\nimport { db } from '$lib/server/db';\nimport { user } from '$lib/server/db/schema';\nimport { eq } from 'drizzle-orm';\nimport { svelteKitHandler } from 'better-auth/svelte-kit';\n\n/**\n * Single composed handle (#280).\n *\n * Order matters:\n * 1. `paraglideMiddleware` negotiates the locale and rewrites `event.request`\n *    (cookie / accept-language handling).\n * 2. Better Auth reads the session from the REWRITTEN request and populates\n *    `locals.session` / `locals.user`; auth paths are routed to the auth\n *    handler, every other request resolves through the app.\n * 3. The Paraglide transform rewrites the `%paraglide.lang%` /\n *    `%paraglide.dir%` placeholders of app.html in the FINAL html — this must\n *    survive the composition: the #268 fix (composing handleBetterAuth) had\n *    dropped it, leaving the placeholders in the rendered HTML (#280).\n */\nexport const handle: Handle = async ({ event, resolve }) =>\n\tparaglideMiddleware(event.request, async ({ request, locale }) => {\n\t\tconst localizedEvent = { ...event, request };\n\n\t\tconst session = await auth.api.getSession({ headers: localizedEvent.request.headers });\n\t\tif (session) {\n\t\t\t// A disabled identity may be retained for domain/audit references, but\n\t\t\t// it must never retain access through an old or newly-created session.\n\t\t\tconst [currentUser] = await db\n\t\t\t\t.select({ disabled: user.disabled })\n\t\t\t\t.from(user)\n\t\t\t\t.where(eq(user.id, session.user.id))\n\t\t\t\t.limit(1);\n\t\t\tif (!currentUser?.disabled) {\n\t\t\t\tevent.locals.session = session.session;\n\t\t\t\tevent.locals.user = session.user;\n\t\t\t}\n\t\t}\n\n\t\treturn svelteKitHandler({\n\t\t\tevent: localizedEvent,\n\t\t\tauth,\n\t\t\tbuilding,\n\t\t\t// svelteKitHandler calls resolve(event) with a single argument — the\n\t\t\t// Paraglide transform is applied here so the i18n placeholders of\n\t\t\t// app.html are rewritten in the final html.\n\t\t\tresolve: (event) =>\n\t\t\t\tresolve(event, {\n\t\t\t\t\ttransformPageChunk: ({ html }) =>\n\t\t\t\t\t\thtml\n\t\t\t\t\t\t\t.replace('%paraglide.lang%', locale)\n\t\t\t\t\t\t\t.replace('%paraglide.dir%', getTextDirection(locale))\n\t\t\t\t})\n\t\t});\n\t});\n",
   "/lib/client/auth.ts": "import { createAuthClient } from 'better-auth/svelte';\n\nexport const authClient = createAuthClient();\n",
-  "/lib/components/svforge/layout/AdminLayout.svelte": "<script lang=\"ts\">\n\timport { cn } from '$lib/utils/cn';\n\timport * as m from '$lib/paraglide/messages.js';\n\timport type { Snippet } from 'svelte';\n\timport type { HTMLAttributes } from 'svelte/elements';\n\timport { Users, Gear, ChartBar, SignOut, Menu, X } from '$lib/icons';\n\timport { Button } from '$lib/components/svforge/primitives';\n\timport ThemeToggle from '$lib/components/svforge/ui/ThemeToggle.svelte';\n\timport { Dialog, Portal } from '@skeletonlabs/skeleton-svelte';\n\n\ttype NavItem = { href: string; label: string; icon: typeof ChartBar };\n\n\tinterface Props extends HTMLAttributes<HTMLElement> {\n\t\titems?: NavItem[];\n\t\tcurrentPath?: string;\n\t\tuser?: { name: string; email: string } | null;\n\t\tonSignOut?: () => void;\n\t\tclass?: string;\n\t\tchildren: Snippet;\n\t}\n\n\tlet {\n\t\titems = [\n\t\t\t{ href: '/admin', label: m.layout_dashboard(), icon: ChartBar },\n\t\t\t{ href: '/admin/users', label: m.layout_users(), icon: Users },\n\t\t\t{ href: '/admin/settings', label: m.layout_settings(), icon: Gear }\n\t\t],\n\t\tcurrentPath = '',\n\t\tuser = null,\n\t\tonSignOut,\n\t\tclass: className,\n\t\tchildren\n\t}: Props = $props();\n\n\tlet collapsed = $state(false);\n\tlet mobileOpen = $state(false);\n\n\tfunction navClass(href: string) {\n\t\treturn cn(\n\t\t\t'flex min-h-11 items-center gap-3 rounded-container px-3 py-2 transition-colors focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-primary-700-300',\n\t\t\tcurrentPath === href\n\t\t\t\t? 'bg-primary-100-900 text-primary-950-50'\n\t\t\t\t: 'text-surface-700-300 hover:bg-surface-100-900'\n\t\t);\n\t}\n</script>\n\n<Dialog\n\topen={mobileOpen}\n\tonOpenChange={(details) => (mobileOpen = details.open)}\n\tcloseOnInteractOutside={true}\n\trestoreFocus={true}\n>\n<div class={cn('flex min-h-screen', className)}>\n\t<!-- Desktop Sidebar -->\n\t<aside class=\"hidden flex-col border-r border-surface-200-800 bg-surface-50-950 transition-all lg:flex {collapsed ? 'w-16' : 'w-56'}\">\n\t\t<div class=\"flex items-center justify-between border-b border-surface-200-800 p-3\">\n\t\t\t{#if !collapsed}\n\t\t\t\t<a href=\"/admin\" class=\"text-lg font-bold text-primary-900-100\">{m.layout_admin()}</a>\n\t\t\t{/if}\n\t\t\t<Button\n\t\t\t\ttype=\"button\"\n\t\t\t\tvariant=\"tonal\"\n\t\t\t\tcolor=\"surface\"\n\t\t\t\tclass=\"size-11 p-0\"\n\t\t\t\tonclick={() => (collapsed = !collapsed)}\n\t\t\t\taria-label={m.layout_toggle_sidebar()}\n\t\t\t\taria-expanded={!collapsed}\n\t\t\t>\n\t\t\t\t<Menu size={18} />\n\t\t\t</Button>\n\t\t</div>\n\n\t\t<nav class=\"flex-1 space-y-1 p-2\" aria-label={m.layout_menu()}>\n\t\t\t{#each items as item (item.href)}\n\t\t\t\t{@const Icon = item.icon}\n\t\t\t\t<a\n\t\t\t\t\thref={item.href}\n\t\t\t\t\tclass={navClass(item.href)}\n\t\t\t\t\taria-current={currentPath === item.href ? 'page' : undefined}\n\t\t\t\t>\n\t\t\t\t\t<Icon size={20} />\n\t\t\t\t\t{#if !collapsed}<span class=\"text-sm font-medium\">{item.label}</span>{/if}\n\t\t\t\t</a>\n\t\t\t{/each}\n\t\t</nav>\n\n\t\t<div class=\"border-t border-surface-200-800 p-2\">\n\t\t\t<ThemeToggle />\n\t\t</div>\n\t</aside>\n\n\t<!-- Main area -->\n\t<div class=\"flex flex-1 flex-col\">\n\t\t<!-- Top bar -->\n\t\t<header class=\"sticky top-0 z-50 flex items-center justify-between border-b border-surface-200-800 bg-surface-50-950/80 px-4 py-3 backdrop-blur-md\">\n\t\t\t<div class=\"flex items-center gap-3\">\n\t\t\t\t<Dialog.Trigger\n\t\t\t\t\tclass=\"btn-icon size-11 preset-tonal-surface focus-visible:ring-2 focus-visible:ring-primary-700-300 lg:hidden\"\n\t\t\t\t\taria-label={m.layout_menu()}\n\t\t\t\t\tdata-testid=\"admin-mobile-menu-trigger\"\n\t\t\t\t>\n\t\t\t\t\t<Menu size={20} />\n\t\t\t\t</Dialog.Trigger>\n\t\t\t\t<h1 class=\"text-lg font-bold\">{m.layout_admin()}</h1>\n\t\t\t</div>\n\t\t\t<div class=\"flex items-center gap-3\">\n\t\t\t\t<ThemeToggle class=\"lg:hidden\" />\n\t\t\t\t{#if user}\n\t\t\t\t\t<span class=\"hidden text-sm text-surface-700-300 sm:block\">{user.name}</span>\n\t\t\t\t\t{#if onSignOut}\n\t\t\t\t\t\t<Button\n\t\t\t\t\t\t\ttype=\"button\"\n\t\t\t\t\t\t\tvariant=\"tonal\"\n\t\t\t\t\t\t\tcolor=\"surface\"\n\t\t\t\t\t\t\tclass=\"size-11 p-0\"\n\t\t\t\t\t\t\tonclick={onSignOut}\n\t\t\t\t\t\t\taria-label={m.layout_sign_out()}\n\t\t\t\t\t\t>\n\t\t\t\t\t\t\t<SignOut size={18} />\n\t\t\t\t\t\t</Button>\n\t\t\t\t\t{/if}\n\t\t\t\t{/if}\n\t\t\t</div>\n\t\t</header>\n\n\n\t\t<!-- Content -->\n\t\t<main class=\"flex-1 overflow-auto p-4 sm:p-6\">\n\t\t\t{@render children()}\n\t\t</main>\n\t</div>\n</div>\n\t<Portal>\n\t\t<Dialog.Backdrop class=\"fixed inset-0 z-50 bg-surface-50-950/50 lg:hidden\" />\n\t\t<Dialog.Positioner class=\"fixed inset-0 z-50 flex justify-start lg:hidden\">\n\t\t\t<Dialog.Content\n\t\t\t\tclass=\"card preset-filled-surface-50-950 flex h-dvh w-72 max-w-[calc(100vw-1rem)] flex-col border-r border-surface-200-800 p-3 shadow-xl\"\n\t\t\t\tdata-testid=\"admin-mobile-drawer\"\n\t\t\t>\n\t\t\t\t<header class=\"mb-3 flex items-center justify-between border-b border-surface-200-800 pb-3\">\n\t\t\t\t\t<Dialog.Title class=\"h3\">{m.layout_admin()}</Dialog.Title>\n\t\t\t\t\t<Dialog.CloseTrigger\n\t\t\t\t\t\ttype=\"button\"\n\t\t\t\t\t\tclass=\"btn-icon size-11 hover:preset-tonal-surface focus-visible:ring-2 focus-visible:ring-primary-700-300\"\n\t\t\t\t\t\taria-label={m.layout_close_menu()}\n\t\t\t\t\t>\n\t\t\t\t\t\t<X size={20} />\n\t\t\t\t\t</Dialog.CloseTrigger>\n\t\t\t\t</header>\n\t\t\t\t<nav class=\"flex-1 space-y-1\" aria-label={m.layout_menu()}>\n\t\t\t\t\t{#each items as item (item.href)}\n\t\t\t\t\t\t{@const Icon = item.icon}\n\t\t\t\t\t\t<a\n\t\t\t\t\t\t\thref={item.href}\n\t\t\t\t\t\t\tclass={navClass(item.href)}\n\t\t\t\t\t\t\taria-current={currentPath === item.href ? 'page' : undefined}\n\t\t\t\t\t\t\tonclick={() => (mobileOpen = false)}\n\t\t\t\t\t\t>\n\t\t\t\t\t\t\t<Icon size={20} />\n\t\t\t\t\t\t\t<span class=\"text-sm font-medium\">{item.label}</span>\n\t\t\t\t\t\t</a>\n\t\t\t\t\t{/each}\n\t\t\t\t</nav>\n\t\t\t</Dialog.Content>\n\t\t</Dialog.Positioner>\n\t</Portal>\n</Dialog>\n",
+  "/lib/components/svforge/layout/AdminLayout.svelte": "<script lang=\"ts\">\n\timport { cn } from '$lib/utils/cn';\n\timport * as m from '$lib/paraglide/messages.js';\n\timport type { Snippet } from 'svelte';\n\timport type { HTMLAttributes } from 'svelte/elements';\n\timport { Users, Gear, ChartBar, SignOut, Menu, X } from '$lib/icons';\n\timport { Button } from '$lib/components/svforge/primitives';\n\timport ThemeToggle from '$lib/components/svforge/ui/ThemeToggle.svelte';\n\timport { Dialog, Portal } from '@skeletonlabs/skeleton-svelte';\n\n\ttype NavItem = { href: string; label: string; icon: typeof ChartBar };\n\n\tinterface Props extends HTMLAttributes<HTMLElement> {\n\t\titems?: NavItem[];\n\t\tcurrentPath?: string;\n\t\tuser?: { name: string; email: string } | null;\n\t\tonSignOut?: () => void;\n\t\tclass?: string;\n\t\tchildren: Snippet;\n\t}\n\n\tlet {\n\t\titems = [\n\t\t\t{ href: '/admin', label: m.layout_dashboard(), icon: ChartBar },\n\t\t\t{ href: '/admin/users', label: m.layout_users(), icon: Users },\n\t\t\t{ href: '/admin/settings', label: m.layout_settings(), icon: Gear }\n\t\t],\n\t\tcurrentPath = '',\n\t\tuser = null,\n\t\tonSignOut,\n\t\tclass: className,\n\t\tchildren\n\t}: Props = $props();\n\n\tlet collapsed = $state(false);\n\tlet mobileOpen = $state(false);\n\n\tfunction navClass(href: string) {\n\t\treturn cn(\n\t\t\t'flex min-h-11 items-center gap-3 rounded-container px-3 py-2 transition-colors focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-primary-700-300',\n\t\t\tcurrentPath === href\n\t\t\t\t? 'bg-primary-100-900 text-primary-950-50'\n\t\t\t\t: 'text-surface-700-300 hover:bg-surface-100-900'\n\t\t);\n\t}\n</script>\n\n<Dialog\n\topen={mobileOpen}\n\tonOpenChange={(details) => (mobileOpen = details.open)}\n\tcloseOnInteractOutside={true}\n\trestoreFocus={true}\n>\n<div class={cn('flex min-h-screen', className)}>\n\t<!-- Desktop Sidebar -->\n\t<aside class=\"hidden flex-col border-r border-surface-200-800 bg-surface-50-950 transition-all lg:flex {collapsed ? 'w-16' : 'w-56'}\">\n\t\t<div class=\"flex items-center justify-between border-b border-surface-200-800 p-3\">\n\t\t\t{#if !collapsed}\n\t\t\t\t<a href=\"/admin\" class=\"text-lg font-bold text-primary-900-100\">{m.layout_admin()}</a>\n\t\t\t{/if}\n\t\t\t<Button\n\t\t\t\ttype=\"button\"\n\t\t\t\tvariant=\"tonal\"\n\t\t\t\tcolor=\"surface\"\n\t\t\t\tclass=\"size-11 p-0\"\n\t\t\t\tonclick={() => (collapsed = !collapsed)}\n\t\t\t\taria-label={m.layout_toggle_sidebar()}\n\t\t\t\taria-expanded={!collapsed}\n\t\t\t>\n\t\t\t\t<Menu size={18} />\n\t\t\t</Button>\n\t\t</div>\n\n\t\t<nav class=\"flex-1 space-y-1 p-2\" aria-label={m.layout_menu()}>\n\t\t\t{#each items as item (item.href)}\n\t\t\t\t{@const Icon = item.icon}\n\t\t\t\t<a\n\t\t\t\t\thref={item.href}\n\t\t\t\t\tclass={navClass(item.href)}\n\t\t\t\t\taria-current={currentPath === item.href ? 'page' : undefined}\n\t\t\t\t>\n\t\t\t\t\t<Icon size={20} />\n\t\t\t\t\t{#if !collapsed}<span class=\"text-sm font-medium\">{item.label}</span>{/if}\n\t\t\t\t</a>\n\t\t\t{/each}\n\t\t</nav>\n\n\t\t<div class=\"border-t border-surface-200-800 p-2\">\n\t\t\t<ThemeToggle />\n\t\t</div>\n\t</aside>\n\n\t<!-- Main area -->\n\t<div class=\"flex flex-1 flex-col\">\n\t\t<!-- Top bar -->\n\t\t<header class=\"sticky top-0 z-50 flex items-center justify-between border-b border-surface-200-800 bg-surface-50-950/80 px-4 py-3 backdrop-blur-md\">\n\t\t\t<div class=\"flex items-center gap-3\">\n\t\t\t\t<Dialog.Trigger\n\t\t\t\t\tclass=\"btn-icon size-11 preset-tonal-surface focus-visible:ring-2 focus-visible:ring-primary-700-300 lg:hidden cursor-pointer\"\n\t\t\t\t\taria-label={m.layout_menu()}\n\t\t\t\t\tdata-testid=\"admin-mobile-menu-trigger\"\n\t\t\t\t>\n\t\t\t\t\t<Menu size={20} />\n\t\t\t\t</Dialog.Trigger>\n\t\t\t\t<h1 class=\"text-lg font-bold\">{m.layout_admin()}</h1>\n\t\t\t</div>\n\t\t\t<div class=\"flex items-center gap-3\">\n\t\t\t\t<ThemeToggle class=\"lg:hidden\" />\n\t\t\t\t{#if user}\n\t\t\t\t\t<span class=\"hidden text-sm text-surface-700-300 sm:block\">{user.name}</span>\n\t\t\t\t\t{#if onSignOut}\n\t\t\t\t\t\t<Button\n\t\t\t\t\t\t\ttype=\"button\"\n\t\t\t\t\t\t\tvariant=\"tonal\"\n\t\t\t\t\t\t\tcolor=\"surface\"\n\t\t\t\t\t\t\tclass=\"size-11 p-0\"\n\t\t\t\t\t\t\tonclick={onSignOut}\n\t\t\t\t\t\t\taria-label={m.layout_sign_out()}\n\t\t\t\t\t\t>\n\t\t\t\t\t\t\t<SignOut size={18} />\n\t\t\t\t\t\t</Button>\n\t\t\t\t\t{/if}\n\t\t\t\t{/if}\n\t\t\t</div>\n\t\t</header>\n\n\n\t\t<!-- Content -->\n\t\t<main class=\"flex-1 overflow-auto p-4 sm:p-6\">\n\t\t\t{@render children()}\n\t\t</main>\n\t</div>\n</div>\n\t<Portal>\n\t\t<Dialog.Backdrop class=\"fixed inset-0 z-50 bg-surface-50-950/50 lg:hidden\" />\n\t\t<Dialog.Positioner class=\"fixed inset-0 z-50 flex justify-start lg:hidden\">\n\t\t\t<Dialog.Content\n\t\t\t\tclass=\"card preset-filled-surface-50-950 flex h-dvh w-72 max-w-[calc(100vw-1rem)] flex-col border-r border-surface-200-800 p-3 shadow-xl\"\n\t\t\t\tdata-testid=\"admin-mobile-drawer\"\n\t\t\t>\n\t\t\t\t<header class=\"mb-3 flex items-center justify-between border-b border-surface-200-800 pb-3\">\n\t\t\t\t\t<Dialog.Title class=\"h3\">{m.layout_admin()}</Dialog.Title>\n\t\t\t\t\t<Dialog.CloseTrigger\n\t\t\t\t\t\ttype=\"button\"\n\t\t\t\t\t\tclass=\"btn-icon size-11 hover:preset-tonal-surface focus-visible:ring-2 focus-visible:ring-primary-700-300 cursor-pointer\"\n\t\t\t\t\t\taria-label={m.layout_close_menu()}\n\t\t\t\t\t>\n\t\t\t\t\t\t<X size={20} />\n\t\t\t\t\t</Dialog.CloseTrigger>\n\t\t\t\t</header>\n\t\t\t\t<nav class=\"flex-1 space-y-1\" aria-label={m.layout_menu()}>\n\t\t\t\t\t{#each items as item (item.href)}\n\t\t\t\t\t\t{@const Icon = item.icon}\n\t\t\t\t\t\t<a\n\t\t\t\t\t\t\thref={item.href}\n\t\t\t\t\t\t\tclass={navClass(item.href)}\n\t\t\t\t\t\t\taria-current={currentPath === item.href ? 'page' : undefined}\n\t\t\t\t\t\t\tonclick={() => (mobileOpen = false)}\n\t\t\t\t\t\t>\n\t\t\t\t\t\t\t<Icon size={20} />\n\t\t\t\t\t\t\t<span class=\"text-sm font-medium\">{item.label}</span>\n\t\t\t\t\t\t</a>\n\t\t\t\t\t{/each}\n\t\t\t\t</nav>\n\t\t\t</Dialog.Content>\n\t\t</Dialog.Positioner>\n\t</Portal>\n</Dialog>\n",
   "/lib/components/svforge/ui/AvatarInitial.svelte": "<script lang=\"ts\">\n    import { cn } from '$lib/utils/cn';\n    interface Props {\n        name: string;\n        size?: 'sm' | 'md' | 'lg';\n        class?: string;\n    }\n    let { name, size = 'md', class: className }: Props = $props();\n    const initial = $derived(name[0]?.toUpperCase() ?? '?');\n    const sizes = { sm: 'w-7 h-7 text-xs', md: 'w-8 h-8 text-sm', lg: 'w-12 h-12 text-lg' };\n</script>\n\n<div class={cn('rounded-full bg-primary-100-900 flex items-center justify-center font-bold text-primary-950-50', sizes[size], className)}>\n    {initial}\n</div>\n",
   "/lib/components/svforge/ui/Feedback.svelte": "<script lang=\"ts\">\n\timport { cn } from '$lib/utils/cn';\n\timport * as m from '$lib/paraglide/messages.js';\n\timport { Check, Warning, X } from '$lib/icons';\n\timport { Button } from '$lib/components/svforge/primitives';\n\n\tinterface Props {\n\t\ttype: 'success' | 'error';\n\t\tmessage: string;\n\t\tondismiss?: () => void;\n\t\tclass?: string;\n\t}\n\n\tlet { type, message, ondismiss, class: className }: Props = $props();\n</script>\n\n{#if message}\n\t<!-- #317: the Skeleton tonal presets own the semantic bg+fg pairing —\n\t     never hand-pair bg-*-100-900 with text-*-700-300 (that re-implements\n\t     preset-tonal-*). rounded-container + p-3 stay: plain <div> layout via\n\t     Tailwind and the theme radius token. -->\n\t<div role={type === 'error' ? 'alert' : 'status'} aria-live={type === 'error' ? 'assertive' : 'polite'} class={cn('flex items-center gap-2 rounded-container p-3', type === 'success' ? 'preset-tonal-success' : 'preset-tonal-error', className)}>\n\t\t{#if type === 'success'}<Check size={18} />{:else}<Warning size={18} />{/if}\n\t\t<span class=\"text-sm\">{message}</span>\n\t\t{#if ondismiss}\n\t\t\t<Button\n\t\t\t\ttype=\"button\"\n\t\t\t\tvariant=\"ghost\"\n\t\t\t\tcolor=\"surface\"\n\t\t\t\tclass=\"ml-auto size-11 shrink-0 p-0\"\n\t\t\t\tonclick={ondismiss}\n\t\t\t\taria-label={m.common_dismiss()}\n\t\t\t><X size={18} /></Button>\n\t\t{/if}\n\t</div>\n{/if}\n",
   "/lib/components/svforge/ui/index.ts": "export { default as Alert } from './Alert.svelte';\nexport { default as Card } from './Card.svelte';\nexport { default as Logo } from './Logo.svelte';\nexport { default as Seo } from './Seo.svelte';\nexport { default as Table } from './Table.svelte';\nexport { default as ThemeToggle } from './ThemeToggle.svelte';\nexport { generateSitemap } from './Sitemap';\nexport { default as AvatarInitial } from './AvatarInitial.svelte';\nexport { default as Feedback } from './Feedback.svelte';\n",
@@ -85,7 +85,7 @@ export const dashboardFiles = {
   "/routes/(app)/admin/settings/+page.server.ts": "import { auth } from '$lib/server/auth';\nimport { changePasswordSchema } from '$lib/server/schemas';\nimport { fail, type Actions } from '@sveltejs/kit';\nimport type { PageServerLoad } from './$types';\n\nexport const load: PageServerLoad = async ({ locals }) => {\n\treturn {\n\t\tuser: locals.user!\n\t};\n};\n\nexport const actions: Actions = {\n\tchangePassword: async ({ request }) => {\n\t\tconst formData = await request.formData();\n\t\tconst parsed = changePasswordSchema.safeParse({\n\t\t\tcurrentPassword: formData.get('currentPassword'),\n\t\t\tnewPassword: formData.get('newPassword')\n\t\t});\n\n\t\tif (!parsed.success) {\n\t\t\treturn fail(400, { message: parsed.error.issues[0]?.message ?? 'Invalid input' });\n\t\t}\n\n\t\tconst { currentPassword, newPassword } = parsed.data;\n\n\t\ttry {\n\t\t\tawait auth.api.changePassword({\n\t\t\t\theaders: request.headers,\n\t\t\t\tbody: { currentPassword, newPassword }\n\t\t\t});\n\t\t\treturn { success: true };\n\t\t} catch {\n\t\t\t// Generic message — never leak e.message internals to the UI (#188).\n\t\t\treturn fail(400, { message: 'Failed to change password' });\n\t\t}\n\t}\n};\n",
   "/routes/(app)/admin/settings/+page.svelte": "<script lang=\"ts\">\n\timport { enhance } from '$app/forms';\n\timport * as m from '$lib/paraglide/messages.js';\n\timport { Card, AvatarInitial, Feedback } from '$lib/components/svforge/ui';\n\timport { Button, Input } from '$lib/components/svforge/primitives';\n\timport { Lock } from '$lib/icons';\n\timport type { ActionData } from './$types';\n\n\tlet { data, form }: { data: { user: { id: string; name: string; email: string } | null }, form: ActionData } = $props();\n\tlet currentPassword = $state('');\n\tlet newPassword = $state('');\n\tlet confirmPassword = $state('');\n\n\t// Client-side validation — cleared on form response, not via $effect\n\tlet validationError = $state('');\n</script>\n\n<svelte:head>\n\t<title>{m.settings_title()}</title>\n</svelte:head>\n\n<div class=\"max-w-2xl space-y-8\">\n\t<h2 class=\"h2\">{m.settings_heading()}</h2>\n\n\t<!-- Profile info -->\n\t<Card>\n\t\t{#snippet header()}\n\t\t\t<h3 class=\"h3\">{m.settings_profile()}</h3>\n\t\t{/snippet}\n\t\t<div class=\"space-y-3\">\n\t\t\t<div class=\"flex items-center gap-4\">\n\t\t\t\t<AvatarInitial name={data.user?.name ?? ''} size=\"lg\" />\n\t\t\t\t<div>\n\t\t\t\t\t<p class=\"font-medium\">{data.user?.name}</p>\n\t\t\t\t\t<p class=\"text-sm text-surface-700-300\">{data.user?.email}</p>\n\t\t\t\t</div>\n\t\t\t</div>\n\t\t</div>\n\t</Card>\n\n\t<!-- Change password -->\n\t<Card>\n\t\t{#snippet header()}\n\t\t\t<div class=\"flex items-center gap-2\">\n\t\t\t\t<Lock size={18} />\n\t\t\t\t<h3 class=\"h3\">{m.settings_change_password()}</h3>\n\t\t\t</div>\n\t\t{/snippet}\n\n\t\t{#if form?.message}\n\t\t\t<Feedback type={form.success ? 'success' : 'error'} message={form.message} class=\"mb-4\" />\n\t\t{/if}\n\t\t{#if validationError}\n\t\t\t<!-- #317: reuse the Feedback component — the hand-rolled bg-error-100-900\n\t\t\t     strip re-implemented what Feedback (preset-tonal-error) already owns. -->\n\t\t\t<Feedback type=\"error\" message={validationError} class=\"mb-4\" />\n\t\t{/if}\n\n\t\t<form method=\"POST\" action=\"?/changePassword\" onsubmit={(e) => {\n\t\t\t\tif (newPassword !== confirmPassword) {\n\t\t\t\t\te.preventDefault();\n\t\t\t\t\tvalidationError = m.settings_password_mismatch();\n\t\t\t\t} else {\n\t\t\t\t\tvalidationError = '';\n\t\t\t\t}\n\t\t\t}} use:enhance class=\"space-y-4\">\n\t\t\t<Input label={m.settings_current_password()} type=\"password\" name=\"currentPassword\" bind:value={currentPassword} required />\n\t\t\t<Input label={m.settings_new_password()} type=\"password\" name=\"newPassword\" bind:value={newPassword} placeholder={m.common_min_chars()} required />\n\t\t\t<Input label={m.settings_confirm_password()} type=\"password\" name=\"confirmPassword\" bind:value={confirmPassword} required />\n\t\t\t<div class=\"flex justify-end\">\n\t\t\t\t<Button type=\"submit\">{m.settings_update_password()}</Button>\n\t\t\t</div>\n\t\t</form>\n\t</Card>\n</div>\n",
   "/routes/(app)/admin/users/+page.server.ts": "import { db } from '$lib/server/db';\nimport { user, session } from '$lib/server/db/schema';\nimport { desc, eq } from 'drizzle-orm';\nimport { fail, redirect, error, type Actions } from '@sveltejs/kit';\nimport { isAdmin } from '$lib/server/admin';\nimport { createCredentialUser, DuplicateEmailError } from '$lib/server/admin-users';\nimport { createInvitation, DuplicateInvitationError } from '$lib/server/invitations';\nimport {\n\tcreateUserSchema,\n\tupdateUserSchema,\n\ttoggleUserStatusSchema,\n\ttoggleVerifySchema,\n\tinviteSchema\n} from '$lib/server/schemas';\nimport type { PageServerLoad } from './$types';\nimport type { RequestEvent } from '@sveltejs/kit';\n\n/**\n * Require an authenticated admin user for a form action.\n * Returns the user id on success, or throws a 401/403 error.\n *\n * Every admin action must call this BEFORE reading formData or touching the db.\n */\nasync function requireAdmin(event: RequestEvent): Promise<string> {\n\tif (!event.locals.user) {\n\t\tthrow error(401, { message: 'Authentication required' });\n\t}\n\tif (!(await isAdmin(event.locals.user.id))) {\n\t\tthrow error(403, { message: 'Admin access required' });\n\t}\n\treturn event.locals.user.id;\n}\n\nexport const load: PageServerLoad = async ({ locals }) => {\n\tif (!locals.user || !(await isAdmin(locals.user.id))) {\n\t\tthrow redirect(302, '/login');\n\t}\n\n\tconst users = await db\n\t\t.select({\n\t\t\tid: user.id,\n\t\t\tname: user.name,\n\t\t\temail: user.email,\n\t\t\temailVerified: user.emailVerified,\n\t\t\timage: user.image,\n\t\t\tdisabled: user.disabled,\n\t\t\tcreatedAt: user.createdAt\n\t\t})\n\t\t.from(user)\n\t\t.orderBy(desc(user.createdAt));\n\n\treturn { users };\n};\n\n/**\n * Form actions (#295) — golden reference for SvelteKit mutations.\n *\n * Every action returns a STABLE machine-readable `code` instead of English\n * copy: the UI maps codes to Paraglide FR/EN messages, so no visible text\n * comes from the server and the copy can never leak internal details.\n */\n\nexport const actions: Actions = {\n\tcreate: async (event) => {\n\t\tawait requireAdmin(event);\n\t\tconst { request } = event;\n\t\tconst formData = await request.formData();\n\t\tconst parsed = createUserSchema.safeParse({\n\t\t\tname: formData.get('name'),\n\t\t\temail: formData.get('email'),\n\t\t\tpassword: formData.get('password')\n\t\t});\n\n\t\tif (!parsed.success) {\n\t\t\treturn fail(400, { code: 'invalid_input' });\n\t\t}\n\n\t\tconst { name, email, password } = parsed.data;\n\n\t\ttry {\n\t\t\t// Contract-compliant credential user: lowercase email, accountId = userId,\n\t\t\t// user + credential account created atomically, admin session untouched.\n\t\t\t// (signUpEmail is NOT used: it sets a session cookie for the new user,\n\t\t\t// which would silently replace the admin's own session.)\n\t\t\tawait createCredentialUser({ name, email, password });\n\t\t} catch (error) {\n\t\t\tif (error instanceof DuplicateEmailError) {\n\t\t\t\treturn fail(400, { code: 'email_exists' });\n\t\t\t}\n\t\t\t// Generic code — never leak e.message internals to the UI (#188).\n\t\t\treturn fail(500, { code: 'create_failed' });\n\t\t}\n\n\t\treturn { success: true, code: 'created' };\n\t},\n\n\tupdate: async (event) => {\n\t\tawait requireAdmin(event);\n\t\tconst { request } = event;\n\t\tconst formData = await request.formData();\n\t\tconst parsed = updateUserSchema.safeParse({\n\t\t\tid: formData.get('id'),\n\t\t\tname: formData.get('name'),\n\t\t\temail: formData.get('email')\n\t\t});\n\n\t\tif (!parsed.success) {\n\t\t\treturn fail(400, { code: 'invalid_input' });\n\t\t}\n\n\t\tconst { id, name, email } = parsed.data;\n\t\tconst normalizedEmail = email.toLowerCase();\n\n\t\t// Check email not taken by another user (case-insensitive, matching the\n\t\t// lowercase credential contract of the create helper — #292).\n\t\tconst [existing] = await db\n\t\t\t.select({ id: user.id })\n\t\t\t.from(user)\n\t\t\t.where(eq(user.email, normalizedEmail))\n\t\t\t.limit(1);\n\t\tif (existing && existing.id !== id) {\n\t\t\treturn fail(400, { code: 'email_taken' });\n\t\t}\n\n\t\ttry {\n\t\t\tawait db\n\t\t\t\t.update(user)\n\t\t\t\t.set({\n\t\t\t\t\tname,\n\t\t\t\t\temail: normalizedEmail,\n\t\t\t\t\tupdatedAt: new Date()\n\t\t\t\t})\n\t\t\t\t.where(eq(user.id, id));\n\t\t} catch {\n\t\t\t// Generic code — never leak e.message internals to the UI (#188).\n\t\t\treturn fail(500, { code: 'update_failed' });\n\t\t}\n\n\t\treturn { success: true, code: 'updated' };\n\t},\n\n\ttoggleStatus: async (event) => {\n\t\tconst adminId = await requireAdmin(event);\n\t\tconst formData = await event.request.formData();\n\t\tconst parsed = toggleUserStatusSchema.safeParse({\n\t\t\tid: formData.get('id'),\n\t\t\tdisabled: formData.get('disabled') === 'true'\n\t\t});\n\n\t\tif (!parsed.success) return fail(400, { code: 'invalid_input' });\n\n\t\tconst { id, disabled } = parsed.data;\n\t\t// The only administrator must remain able to administer the project.\n\t\tif (disabled && id === adminId) return fail(400, { code: 'self_deactivate' });\n\n\t\tconst [target] = await db\n\t\t\t.select({ id: user.id, disabled: user.disabled })\n\t\t\t.from(user)\n\t\t\t.where(eq(user.id, id))\n\t\t\t.limit(1);\n\t\tif (!target) return fail(404, { code: 'not_found' });\n\n\t\ttry {\n\t\t\tawait db.transaction(async (tx) => {\n\t\t\t\tawait tx.update(user).set({ disabled, updatedAt: new Date() }).where(eq(user.id, id));\n\t\t\t\t// Revoking sessions immediately prevents a newly disabled user from\n\t\t\t\t// continuing to access protected routes. Accounts and the identity row stay.\n\t\t\t\tif (disabled) await tx.delete(session).where(eq(session.userId, id));\n\t\t\t});\n\t\t} catch {\n\t\t\treturn fail(500, { code: 'status_failed' });\n\t\t}\n\n\t\treturn { success: true, code: disabled ? 'deactivated' : 'reactivated' };\n\t},\n\n\ttoggleVerify: async (event) => {\n\t\tawait requireAdmin(event);\n\t\tconst { request } = event;\n\t\tconst formData = await request.formData();\n\t\tconst parsed = toggleVerifySchema.safeParse({\n\t\t\tid: formData.get('id'),\n\t\t\tverified: formData.get('verified') === 'true'\n\t\t});\n\n\t\tif (!parsed.success) {\n\t\t\treturn fail(400, { code: 'invalid_input' });\n\t\t}\n\n\t\tconst { id, verified } = parsed.data;\n\n\t\ttry {\n\t\t\tawait db\n\t\t\t\t.update(user)\n\t\t\t\t.set({\n\t\t\t\t\temailVerified: !verified,\n\t\t\t\t\tupdatedAt: new Date()\n\t\t\t\t})\n\t\t\t\t.where(eq(user.id, id));\n\t\t} catch {\n\t\t\t// Generic code — never leak e.message internals to the UI (#188).\n\t\t\treturn fail(500, { code: 'verify_failed' });\n\t\t}\n\n\t\treturn { success: true, code: verified ? 'unverified' : 'verified' };\n\t},\n\n\t/**\n\t * Pre-approve one email for self-registration (#318) — the `invite-only`\n\t * sign-up mode. In `closed` mode (the default) the invitation is inert:\n\t * the sign-up endpoint is disabled entirely. Either way an invited user\n\t * can never hold the admin role — only bootstrapFirstAdmin grants it.\n\t */\n\tinvite: async (event) => {\n\t\tawait requireAdmin(event);\n\t\tconst { request } = event;\n\t\tconst formData = await request.formData();\n\t\tconst parsed = inviteSchema.safeParse({\n\t\t\temail: formData.get('email')\n\t\t});\n\n\t\tif (!parsed.success) {\n\t\t\treturn fail(400, { code: 'invalid_input' });\n\t\t}\n\n\t\ttry {\n\t\t\tawait createInvitation({ email: parsed.data.email });\n\t\t} catch (error) {\n\t\t\tif (error instanceof DuplicateInvitationError) {\n\t\t\t\treturn fail(400, { code: 'already_invited' });\n\t\t\t}\n\t\t\t// Generic code — never leak e.message internals to the UI (#188).\n\t\t\treturn fail(500, { code: 'invite_failed' });\n\t\t}\n\n\t\treturn { success: true, code: 'invited' };\n\t}\n};\n",
-  "/routes/(app)/admin/users/+page.svelte": "<script lang=\"ts\">\n\timport type { PageData } from './$types';\n\timport { page } from '$app/state';\n\timport { enhance } from '$app/forms';\n\timport type { SubmitFunction } from '$app/forms';\n\timport * as m from '$lib/paraglide/messages.js';\n\timport { AvatarInitial, Card, Feedback, Table } from '$lib/components/svforge/ui';\n\timport { Badge, Button, Input } from '$lib/components/svforge/primitives';\n\timport { UserPlus, EnvelopeSimple, Power, Pencil, X } from '$lib/icons';\n\timport { Dialog, Portal } from '@skeletonlabs/skeleton-svelte';\n\n\tlet { data }: { data: PageData } = $props();\n\tlet currentUserId = $derived(page.data.user?.id);\n\n\tlet search = $state('');\n\tlet feedback = $state<{ type: 'success' | 'error'; message: string } | null>(null);\n\n\t// Modal state\n\tlet modal = $state<'create' | 'edit' | 'status' | 'invite' | null>(null);\n\tlet editUser = $state<{ id: string; name: string; email: string } | null>(null);\n\tlet statusTarget = $state<{ id: string; name: string; disabled: boolean } | null>(null);\n\n\t// Form fields\n\tlet formName = $state('');\n\tlet formEmail = $state('');\n\tlet formPassword = $state('');\n\n\t// The Table primitive is generic (#321): the cell snippet receives rows\n\t// already typed as UserRow — no cast-recovery needed.\n\t// Columns are re-derived so Paraglide labels stay reactive to the locale.\n\tlet columns = $derived([\n\t\t{ key: 'name', label: m.users_name() },\n\t\t{ key: 'email', label: m.users_email(), class: 'hidden sm:table-cell' },\n\t\t{ key: 'status', label: m.users_status() },\n\t\t{ key: 'actions', label: m.users_actions(), class: 'text-right' }\n\t]);\n\n\tlet filtered = $derived(\n\t\tdata.users.filter(\n\t\t\t(u) =>\n\t\t\t\tu.name.toLowerCase().includes(search.toLowerCase()) ||\n\t\t\t\tu.email.toLowerCase().includes(search.toLowerCase())\n\t\t)\n\t);\n\n\tfunction openCreate() {\n\t\tformName = '';\n\t\tformEmail = '';\n\t\tformPassword = '';\n\t\tmodal = 'create';\n\t}\n\n\tfunction openInvite() {\n\t\tformEmail = '';\n\t\tmodal = 'invite';\n\t}\n\n\tfunction openEdit(u: { id: string; name: string; email: string }) {\n\t\teditUser = { id: u.id, name: u.name, email: u.email };\n\t\tformName = u.name;\n\t\tformEmail = u.email;\n\t\tmodal = 'edit';\n\t}\n\n\tfunction openStatus(u: { id: string; name: string; disabled: boolean }) {\n\t\tstatusTarget = { id: u.id, name: u.name, disabled: u.disabled };\n\t\tmodal = 'status';\n\t}\n\n\tfunction closeModal() {\n\t\tmodal = null;\n\t\teditUser = null;\n\t\tstatusTarget = null;\n\t}\n\n\t/**\n\t * Stable server codes → localized feedback (#295). The server never sends\n\t * English copy: every visible message is a Paraglide message mapped here.\n\t */\n\tfunction feedbackFor(code: string | undefined, isError: boolean): string {\n\t\tif (!isError) {\n\t\t\tswitch (code) {\n\t\t\t\tcase 'created':\n\t\t\t\t\treturn m.users_created();\n\t\t\t\tcase 'updated':\n\t\t\t\t\treturn m.users_updated();\n\t\t\t\tcase 'deactivated':\n\t\t\t\t\treturn m.users_deactivated();\n\t\t\t\tcase 'reactivated':\n\t\t\t\t\treturn m.users_reactivated();\n\t\t\t\tcase 'verified':\n\t\t\t\t\treturn m.users_verified_ok();\n\t\t\t\tcase 'unverified':\n\t\t\t\t\treturn m.users_unverified();\n\t\t\t\tcase 'invited':\n\t\t\t\t\treturn m.users_invited();\n\t\t\t\tdefault:\n\t\t\t\t\treturn m.users_created();\n\t\t\t}\n\t\t}\n\t\tswitch (code) {\n\t\t\tcase 'email_exists':\n\t\t\t\treturn m.users_email_exists();\n\t\t\tcase 'email_taken':\n\t\t\t\treturn m.users_email_taken();\n\t\t\tcase 'self_deactivate':\n\t\t\t\treturn m.users_self_deactivate();\n\t\t\tcase 'not_found':\n\t\t\t\treturn m.users_not_found();\n\t\t\tcase 'invalid_input':\n\t\t\t\treturn m.users_invalid_input();\n\t\t\tcase 'create_failed':\n\t\t\t\treturn m.users_created_failed();\n\t\t\tcase 'update_failed':\n\t\t\t\treturn m.users_updated_failed();\n\t\t\tcase 'status_failed':\n\t\t\t\treturn m.users_status_failed();\n\t\t\tcase 'verify_failed':\n\t\t\t\treturn m.users_verify_failed();\n\t\t\tcase 'already_invited':\n\t\t\t\treturn m.users_already_invited();\n\t\t\tcase 'invite_failed':\n\t\t\t\treturn m.users_invite_failed();\n\t\t\tdefault:\n\t\t\t\treturn m.users_created_failed();\n\t\t}\n\t}\n\n\t/**\n\t * Standard SvelteKit use:enhance handler (#295) — the golden reference for\n\t * form mutations: `deserialize` + `applyAction` are handled by `enhance`,\n\t * the action result is a typed ActionResult (success/failure/redirect/error)\n\t * and no imperative fetch parsing exists anywhere.\n\t */\n\tconst submitEnhance: SubmitFunction = () => {\n\t\treturn async ({ result, update }) => {\n\t\t\tif (result.type === 'success') {\n\t\t\t\tfeedback = { type: 'success', message: feedbackFor(result.data?.code, false) };\n\t\t\t\tcloseModal();\n\t\t\t\t// update() applies the response, resets the form and invalidates the\n\t\t\t\t// page data (standard applyAction behaviour).\n\t\t\t\tawait update({ reset: true });\n\t\t\t} else if (result.type === 'failure') {\n\t\t\t\tfeedback = { type: 'error', message: feedbackFor(result.data?.code, true) };\n\t\t\t} else if (result.type === 'redirect' || result.type === 'error') {\n\t\t\t\t// SvelteKit handles redirects and errors natively via applyAction.\n\t\t\t\tawait update();\n\t\t\t}\n\t\t};\n\t};\n</script>\n\n<svelte:head>\n\t<title>{m.users_title()}</title>\n</svelte:head>\n\n<div class=\"space-y-6\">\n\t<div class=\"flex flex-col items-start justify-between gap-3 sm:flex-row sm:items-center\">\n\t\t<h2 class=\"h2\">{m.users_heading()}</h2>\n\t\t<div class=\"flex w-full flex-wrap gap-2 sm:w-auto\">\n\t\t\t<Button type=\"button\" class=\"min-h-11 flex-1 sm:flex-none\" data-testid=\"users-invite\" variant=\"tonal\" color=\"secondary\" onclick={openInvite}>\n\t\t\t\t<EnvelopeSimple size={16} class=\"mr-1\" />\n\t\t\t\t{m.users_invite_btn()}\n\t\t\t</Button>\n\t\t\t<Button type=\"button\" class=\"min-h-11 flex-1 sm:flex-none\" data-testid=\"users-add\" onclick={openCreate}>\n\t\t\t\t<UserPlus size={16} class=\"mr-1\" />\n\t\t\t\t{m.users_add()}\n\t\t\t</Button>\n\t\t</div>\n\t</div>\n\n\t{#if feedback}\n\t\t<Feedback type={feedback.type} message={feedback.message} ondismiss={() => (feedback = null)} />\n\t{/if}\n\n\t<Input\n\t\tclass=\"max-w-xl\"\n\t\tlabel={m.users_search_label()}\n\t\tplaceholder={m.users_search_placeholder()}\n\t\tdata-testid=\"users-search\"\n\t\tbind:value={search}\n\t/>\n\n\t<!-- CRUD data table: SvelteForge Table primitive (golden reference) -->\n\t<Table {columns} rows={filtered} rowKey=\"id\">\n\t\t{#snippet children({ row, col })}\n\t\t\t{#if col.key === 'name'}\n\t\t\t\t<div class=\"flex items-center gap-3\">\n\t\t\t\t\t<AvatarInitial name={row.name} size=\"sm\" />\n\t\t\t\t\t<div>\n\t\t\t\t\t\t<p class=\"font-medium\">{row.name}</p>\n\t\t\t\t\t\t<p class=\"text-xs text-surface-700-300 sm:hidden\">{row.email}</p>\n\t\t\t\t\t</div>\n\t\t\t\t</div>\n\t\t\t{:else if col.key === 'status'}\n\t\t\t\t{#if row.disabled}\n\t\t\t\t\t<Badge color=\"warning\">{m.users_disabled()}</Badge>\n\t\t\t\t{:else}\n\t\t\t\t\t<!-- toggleVerify is a real form action too (#295): hidden inputs carry\n\t\t\t\t\t     the id and the current state, use:enhance handles the result. -->\n\t\t\t\t\t<form method=\"POST\" action=\"?/toggleVerify\" use:enhance={submitEnhance}>\n\t\t\t\t\t\t<input type=\"hidden\" name=\"id\" value={row.id} />\n\t\t\t\t\t\t<input type=\"hidden\" name=\"verified\" value={String(row.emailVerified)} />\n\t\t\t\t\t\t<Button\n\t\t\t\t\t\t\ttype=\"submit\"\n\t\t\t\t\t\t\tvariant=\"ghost\"\n\t\t\t\t\t\t\tcolor=\"surface\"\n\t\t\t\t\t\t\tclass=\"min-h-11 px-2\"\n\t\t\t\t\t\t\taria-label={row.emailVerified ? m.users_pending() : m.users_verified()}\n\t\t\t\t\t\t>\n\t\t\t\t\t\t\t<Badge color={row.emailVerified ? 'success' : 'warning'}>\n\t\t\t\t\t\t\t\t{row.emailVerified ? m.users_verified() : m.users_pending()}\n\t\t\t\t\t\t\t</Badge>\n\t\t\t\t\t\t</Button>\n\t\t\t\t\t</form>\n\t\t\t\t{/if}\n\t\t\t{:else if col.key === 'actions'}\n\t\t\t\t<div class=\"flex items-center justify-end gap-1\">\n\t\t\t\t\t<Button\n\t\t\t\t\t\ttype=\"button\"\n\t\t\t\t\t\tvariant=\"tonal\"\n\t\t\t\t\t\tcolor=\"surface\"\n\t\t\t\t\t\tclass=\"size-11 shrink-0 p-0\"\n\t\t\t\t\t\tdata-testid=\"users-edit\"\n\t\t\t\t\t\tonclick={() => openEdit(row)}\n\t\t\t\t\t\taria-label={m.users_edit()}\n\t\t\t\t\t>\n\t\t\t\t\t\t<Pencil size={16} />\n\t\t\t\t\t</Button>\n\t\t\t\t\t<Button\n\t\t\t\t\t\ttype=\"button\"\n\t\t\t\t\t\tvariant=\"tonal\"\n\t\t\t\t\t\tcolor=\"warning\"\n\t\t\t\t\t\tclass=\"size-11 shrink-0 p-0\"\n\t\t\t\t\t\tdata-testid=\"users-status\"\n\t\t\t\t\t\tonclick={() => openStatus(row)}\n\t\t\t\t\t\tdisabled={row.id === currentUserId}\n\t\t\t\t\t\taria-label={row.disabled ? m.users_reactivate() : m.users_deactivate()}\n\t\t\t\t\t>\n\t\t\t\t\t\t<Power size={16} />\n\t\t\t\t\t</Button>\n\t\t\t\t</div>\n\t\t\t{/if}\n\t\t{/snippet}\n\t</Table>\n\n\t{#if filtered.length === 0}\n\t\t<Card variant=\"outlined\" class=\"py-8 text-center text-surface-700-300\">{m.users_none()}</Card>\n\t{/if}\n</div>\n\n<Dialog\n\topen={modal !== null}\n\tcloseOnInteractOutside={false}\n\trestoreFocus={true}\n\tonOpenChange={(details) => {\n\t\tif (!details.open) closeModal();\n\t}}\n>\n\t<Portal>\n\t\t<Dialog.Backdrop class=\"fixed inset-0 z-50 bg-surface-50-950/50\" />\n\t\t<Dialog.Positioner class=\"fixed inset-0 z-50 flex items-center justify-center p-4\">\n\t\t\t<Dialog.Content class=\"card preset-filled-surface-50-950 w-full max-w-md p-4 shadow-xl\">\n\t\t\t\t<div class=\"mb-4 flex items-center justify-between\">\n\t\t\t\t\t<Dialog.Title class=\"h3\">\n\t\t\t\t\t\t{modal === 'create'\n\t\t\t\t\t\t\t? m.users_modal_create()\n\t\t\t\t\t\t\t: modal === 'edit'\n\t\t\t\t\t\t\t\t? m.users_modal_edit()\n\t\t\t\t\t\t\t\t: modal === 'invite'\n\t\t\t\t\t\t\t\t\t? m.users_invite_title()\n\t\t\t\t\t\t\t\t\t: statusTarget?.disabled\n\t\t\t\t\t\t\t\t\t\t? m.users_modal_reactivate()\n\t\t\t\t\t\t\t\t\t\t: m.users_modal_deactivate()}\n\t\t\t\t\t</Dialog.Title>\n\t\t\t\t\t<Dialog.CloseTrigger\n\t\t\t\t\t\tclass=\"btn-icon size-11 preset-tonal-surface focus-visible:ring-2 focus-visible:ring-primary-700-300\"\n\t\t\t\t\t\taria-label={m.users_close()}\n\t\t\t\t\t\tdata-testid=\"users-dialog-close\"\n\t\t\t\t\t>\n\t\t\t\t\t\t<X size={18} />\n\t\t\t\t\t</Dialog.CloseTrigger>\n\t\t\t\t</div>\n\n\t\t\t\t{#if modal === 'create' || modal === 'edit'}\n\t\t\t\t\t<!-- Real SvelteKit form action (#295): method=POST + action=?/create|?/update,\n\t\t\t\t\t     use:enhance handles deserialize/applyAction. No fetch().json() anywhere. -->\n\t\t\t\t\t<form\n\t\t\t\t\t\tmethod=\"POST\"\n\t\t\t\t\t\taction={modal === 'create' ? '?/create' : '?/update'}\n\t\t\t\t\t\tuse:enhance={submitEnhance}\n\t\t\t\t\t\tclass=\"space-y-4\"\n\t\t\t\t\t>\n\t\t\t\t\t\t{#if modal === 'edit' && editUser}\n\t\t\t\t\t\t\t<input type=\"hidden\" name=\"id\" value={editUser.id} />\n\t\t\t\t\t\t{/if}\n\t\t\t\t\t\t<Input\n\t\t\t\t\t\t\tlabel={m.users_label_name()}\n\t\t\t\t\t\t\tname=\"name\"\n\t\t\t\t\t\t\tbind:value={formName}\n\t\t\t\t\t\t\tplaceholder={m.users_placeholder_name()}\n\t\t\t\t\t\t\trequired\n\t\t\t\t\t\t/>\n\t\t\t\t\t\t<Input\n\t\t\t\t\t\t\tlabel={m.users_label_email()}\n\t\t\t\t\t\t\tname=\"email\"\n\t\t\t\t\t\t\ttype=\"email\"\n\t\t\t\t\t\t\tbind:value={formEmail}\n\t\t\t\t\t\t\tplaceholder={m.users_placeholder_email()}\n\t\t\t\t\t\t\trequired\n\t\t\t\t\t\t/>\n\t\t\t\t\t\t{#if modal === 'create'}\n\t\t\t\t\t\t\t<Input\n\t\t\t\t\t\t\t\tlabel={m.users_label_password()}\n\t\t\t\t\t\t\t\tname=\"password\"\n\t\t\t\t\t\t\t\ttype=\"password\"\n\t\t\t\t\t\t\t\tbind:value={formPassword}\n\t\t\t\t\t\t\t\tplaceholder={m.common_min_chars()}\n\t\t\t\t\t\t\t\trequired\n\t\t\t\t\t\t\t/>\n\t\t\t\t\t\t{/if}\n\t\t\t\t\t\t<div class=\"flex justify-end gap-2 pt-2\">\n\t\t\t\t\t\t\t<Dialog.CloseTrigger type=\"button\" class=\"btn min-h-11 hover:preset-tonal-surface\">{m.common_cancel()}</Dialog.CloseTrigger>\n\t\t\t\t\t\t\t<Button type=\"submit\" class=\"min-h-11\">{modal === 'create' ? m.users_create() : m.common_save()}</Button>\n\t\t\t\t\t\t</div>\n\t\t\t\t\t</form>\n\t\t\t\t{:else if modal === 'invite'}\n\t\t\t\t\t<Dialog.Description class=\"mb-4 text-sm text-surface-700-300\">{m.users_invite_desc()}</Dialog.Description>\n\t\t\t\t\t<form method=\"POST\" action=\"?/invite\" use:enhance={submitEnhance} class=\"space-y-4\">\n\t\t\t\t\t\t<Input\n\t\t\t\t\t\t\tlabel={m.users_label_email()}\n\t\t\t\t\t\t\tname=\"email\"\n\t\t\t\t\t\t\ttype=\"email\"\n\t\t\t\t\t\t\tbind:value={formEmail}\n\t\t\t\t\t\t\tplaceholder={m.users_placeholder_email()}\n\t\t\t\t\t\t\trequired\n\t\t\t\t\t\t/>\n\t\t\t\t\t\t<div class=\"flex justify-end gap-2 pt-2\">\n\t\t\t\t\t\t\t<Dialog.CloseTrigger type=\"button\" class=\"btn min-h-11 hover:preset-tonal-surface\">{m.common_cancel()}</Dialog.CloseTrigger>\n\t\t\t\t\t\t\t<Button type=\"submit\" class=\"min-h-11\">{m.users_invite_btn()}</Button>\n\t\t\t\t\t\t</div>\n\t\t\t\t\t</form>\n\t\t\t\t{:else if modal === 'status' && statusTarget}\n\t\t\t\t\t<Dialog.Description class=\"mb-4 text-surface-700-300\">\n\t\t\t\t\t\t{statusTarget.disabled\n\t\t\t\t\t\t\t? m.users_reactivate_confirm({ name: statusTarget.name })\n\t\t\t\t\t\t\t: m.users_deactivate_confirm({ name: statusTarget.name })}\n\t\t\t\t\t</Dialog.Description>\n\t\t\t\t\t<form method=\"POST\" action=\"?/toggleStatus\" use:enhance={submitEnhance}>\n\t\t\t\t\t\t<input type=\"hidden\" name=\"id\" value={statusTarget.id} />\n\t\t\t\t\t\t<input type=\"hidden\" name=\"disabled\" value={String(!statusTarget.disabled)} />\n\t\t\t\t\t\t<div class=\"flex justify-end gap-2\">\n\t\t\t\t\t\t\t<Dialog.CloseTrigger type=\"button\" class=\"btn min-h-11 hover:preset-tonal-surface\">{m.common_cancel()}</Dialog.CloseTrigger>\n\t\t\t\t\t\t\t<Button class=\"min-h-11\" color={statusTarget.disabled ? 'success' : 'warning'} type=\"submit\"\n\t\t\t\t\t\t\t\t>{statusTarget.disabled ? m.users_reactivate_btn() : m.users_deactivate_btn()}</Button\n\t\t\t\t\t\t\t>\n\t\t\t\t\t\t</div>\n\t\t\t\t\t</form>\n\t\t\t\t{/if}\n\t\t\t</Dialog.Content>\n\t\t</Dialog.Positioner>\n\t</Portal>\n</Dialog>\n",
+  "/routes/(app)/admin/users/+page.svelte": "<script lang=\"ts\">\n\timport type { PageData } from './$types';\n\timport { page } from '$app/state';\n\timport { enhance } from '$app/forms';\n\timport type { SubmitFunction } from '$app/forms';\n\timport * as m from '$lib/paraglide/messages.js';\n\timport { AvatarInitial, Card, Feedback, Table } from '$lib/components/svforge/ui';\n\timport { Badge, Button, Input } from '$lib/components/svforge/primitives';\n\timport { UserPlus, EnvelopeSimple, Power, Pencil, X } from '$lib/icons';\n\timport { Dialog, Portal } from '@skeletonlabs/skeleton-svelte';\n\n\tlet { data }: { data: PageData } = $props();\n\tlet currentUserId = $derived(page.data.user?.id);\n\n\tlet search = $state('');\n\tlet feedback = $state<{ type: 'success' | 'error'; message: string } | null>(null);\n\n\t// Modal state\n\tlet modal = $state<'create' | 'edit' | 'status' | 'invite' | null>(null);\n\tlet editUser = $state<{ id: string; name: string; email: string } | null>(null);\n\tlet statusTarget = $state<{ id: string; name: string; disabled: boolean } | null>(null);\n\n\t// Form fields\n\tlet formName = $state('');\n\tlet formEmail = $state('');\n\tlet formPassword = $state('');\n\n\t// The Table primitive is generic (#321): the cell snippet receives rows\n\t// already typed as UserRow — no cast-recovery needed.\n\t// Columns are re-derived so Paraglide labels stay reactive to the locale.\n\tlet columns = $derived([\n\t\t{ key: 'name', label: m.users_name() },\n\t\t{ key: 'email', label: m.users_email(), class: 'hidden sm:table-cell' },\n\t\t{ key: 'status', label: m.users_status() },\n\t\t{ key: 'actions', label: m.users_actions(), class: 'text-right' }\n\t]);\n\n\tlet filtered = $derived(\n\t\tdata.users.filter(\n\t\t\t(u) =>\n\t\t\t\tu.name.toLowerCase().includes(search.toLowerCase()) ||\n\t\t\t\tu.email.toLowerCase().includes(search.toLowerCase())\n\t\t)\n\t);\n\n\tfunction openCreate() {\n\t\tformName = '';\n\t\tformEmail = '';\n\t\tformPassword = '';\n\t\tmodal = 'create';\n\t}\n\n\tfunction openInvite() {\n\t\tformEmail = '';\n\t\tmodal = 'invite';\n\t}\n\n\tfunction openEdit(u: { id: string; name: string; email: string }) {\n\t\teditUser = { id: u.id, name: u.name, email: u.email };\n\t\tformName = u.name;\n\t\tformEmail = u.email;\n\t\tmodal = 'edit';\n\t}\n\n\tfunction openStatus(u: { id: string; name: string; disabled: boolean }) {\n\t\tstatusTarget = { id: u.id, name: u.name, disabled: u.disabled };\n\t\tmodal = 'status';\n\t}\n\n\tfunction closeModal() {\n\t\tmodal = null;\n\t\teditUser = null;\n\t\tstatusTarget = null;\n\t}\n\n\t/**\n\t * Stable server codes → localized feedback (#295). The server never sends\n\t * English copy: every visible message is a Paraglide message mapped here.\n\t */\n\tfunction feedbackFor(code: string | undefined, isError: boolean): string {\n\t\tif (!isError) {\n\t\t\tswitch (code) {\n\t\t\t\tcase 'created':\n\t\t\t\t\treturn m.users_created();\n\t\t\t\tcase 'updated':\n\t\t\t\t\treturn m.users_updated();\n\t\t\t\tcase 'deactivated':\n\t\t\t\t\treturn m.users_deactivated();\n\t\t\t\tcase 'reactivated':\n\t\t\t\t\treturn m.users_reactivated();\n\t\t\t\tcase 'verified':\n\t\t\t\t\treturn m.users_verified_ok();\n\t\t\t\tcase 'unverified':\n\t\t\t\t\treturn m.users_unverified();\n\t\t\t\tcase 'invited':\n\t\t\t\t\treturn m.users_invited();\n\t\t\t\tdefault:\n\t\t\t\t\treturn m.users_created();\n\t\t\t}\n\t\t}\n\t\tswitch (code) {\n\t\t\tcase 'email_exists':\n\t\t\t\treturn m.users_email_exists();\n\t\t\tcase 'email_taken':\n\t\t\t\treturn m.users_email_taken();\n\t\t\tcase 'self_deactivate':\n\t\t\t\treturn m.users_self_deactivate();\n\t\t\tcase 'not_found':\n\t\t\t\treturn m.users_not_found();\n\t\t\tcase 'invalid_input':\n\t\t\t\treturn m.users_invalid_input();\n\t\t\tcase 'create_failed':\n\t\t\t\treturn m.users_created_failed();\n\t\t\tcase 'update_failed':\n\t\t\t\treturn m.users_updated_failed();\n\t\t\tcase 'status_failed':\n\t\t\t\treturn m.users_status_failed();\n\t\t\tcase 'verify_failed':\n\t\t\t\treturn m.users_verify_failed();\n\t\t\tcase 'already_invited':\n\t\t\t\treturn m.users_already_invited();\n\t\t\tcase 'invite_failed':\n\t\t\t\treturn m.users_invite_failed();\n\t\t\tdefault:\n\t\t\t\treturn m.users_created_failed();\n\t\t}\n\t}\n\n\t/**\n\t * Standard SvelteKit use:enhance handler (#295) — the golden reference for\n\t * form mutations: `deserialize` + `applyAction` are handled by `enhance`,\n\t * the action result is a typed ActionResult (success/failure/redirect/error)\n\t * and no imperative fetch parsing exists anywhere.\n\t */\n\tconst submitEnhance: SubmitFunction = () => {\n\t\treturn async ({ result, update }) => {\n\t\t\tif (result.type === 'success') {\n\t\t\t\tfeedback = { type: 'success', message: feedbackFor(result.data?.code, false) };\n\t\t\t\tcloseModal();\n\t\t\t\t// update() applies the response, resets the form and invalidates the\n\t\t\t\t// page data (standard applyAction behaviour).\n\t\t\t\tawait update({ reset: true });\n\t\t\t} else if (result.type === 'failure') {\n\t\t\t\tfeedback = { type: 'error', message: feedbackFor(result.data?.code, true) };\n\t\t\t} else if (result.type === 'redirect' || result.type === 'error') {\n\t\t\t\t// SvelteKit handles redirects and errors natively via applyAction.\n\t\t\t\tawait update();\n\t\t\t}\n\t\t};\n\t};\n</script>\n\n<svelte:head>\n\t<title>{m.users_title()}</title>\n</svelte:head>\n\n<div class=\"space-y-6\">\n\t<div class=\"flex flex-col items-start justify-between gap-3 sm:flex-row sm:items-center\">\n\t\t<h2 class=\"h2\">{m.users_heading()}</h2>\n\t\t<div class=\"flex w-full flex-wrap gap-2 sm:w-auto\">\n\t\t\t<Button type=\"button\" class=\"min-h-11 flex-1 sm:flex-none\" data-testid=\"users-invite\" variant=\"tonal\" color=\"secondary\" onclick={openInvite}>\n\t\t\t\t<EnvelopeSimple size={16} class=\"mr-1\" />\n\t\t\t\t{m.users_invite_btn()}\n\t\t\t</Button>\n\t\t\t<Button type=\"button\" class=\"min-h-11 flex-1 sm:flex-none\" data-testid=\"users-add\" onclick={openCreate}>\n\t\t\t\t<UserPlus size={16} class=\"mr-1\" />\n\t\t\t\t{m.users_add()}\n\t\t\t</Button>\n\t\t</div>\n\t</div>\n\n\t{#if feedback}\n\t\t<Feedback type={feedback.type} message={feedback.message} ondismiss={() => (feedback = null)} />\n\t{/if}\n\n\t<Input\n\t\tclass=\"max-w-xl\"\n\t\tlabel={m.users_search_label()}\n\t\tplaceholder={m.users_search_placeholder()}\n\t\tdata-testid=\"users-search\"\n\t\tbind:value={search}\n\t/>\n\n\t<!-- CRUD data table: SvelteForge Table primitive (golden reference) -->\n\t<Table {columns} rows={filtered} rowKey=\"id\">\n\t\t{#snippet children({ row, col })}\n\t\t\t{#if col.key === 'name'}\n\t\t\t\t<div class=\"flex items-center gap-3\">\n\t\t\t\t\t<AvatarInitial name={row.name} size=\"sm\" />\n\t\t\t\t\t<div>\n\t\t\t\t\t\t<p class=\"font-medium\">{row.name}</p>\n\t\t\t\t\t\t<p class=\"text-xs text-surface-700-300 sm:hidden\">{row.email}</p>\n\t\t\t\t\t</div>\n\t\t\t\t</div>\n\t\t\t{:else if col.key === 'status'}\n\t\t\t\t{#if row.disabled}\n\t\t\t\t\t<Badge color=\"warning\">{m.users_disabled()}</Badge>\n\t\t\t\t{:else}\n\t\t\t\t\t<!-- toggleVerify is a real form action too (#295): hidden inputs carry\n\t\t\t\t\t     the id and the current state, use:enhance handles the result. -->\n\t\t\t\t\t<form method=\"POST\" action=\"?/toggleVerify\" use:enhance={submitEnhance}>\n\t\t\t\t\t\t<input type=\"hidden\" name=\"id\" value={row.id} />\n\t\t\t\t\t\t<input type=\"hidden\" name=\"verified\" value={String(row.emailVerified)} />\n\t\t\t\t\t\t<Button\n\t\t\t\t\t\t\ttype=\"submit\"\n\t\t\t\t\t\t\tvariant=\"ghost\"\n\t\t\t\t\t\t\tcolor=\"surface\"\n\t\t\t\t\t\t\tclass=\"min-h-11 px-2\"\n\t\t\t\t\t\t\taria-label={row.emailVerified ? m.users_pending() : m.users_verified()}\n\t\t\t\t\t\t>\n\t\t\t\t\t\t\t<Badge color={row.emailVerified ? 'success' : 'warning'}>\n\t\t\t\t\t\t\t\t{row.emailVerified ? m.users_verified() : m.users_pending()}\n\t\t\t\t\t\t\t</Badge>\n\t\t\t\t\t\t</Button>\n\t\t\t\t\t</form>\n\t\t\t\t{/if}\n\t\t\t{:else if col.key === 'actions'}\n\t\t\t\t<div class=\"flex items-center justify-end gap-1\">\n\t\t\t\t\t<Button\n\t\t\t\t\t\ttype=\"button\"\n\t\t\t\t\t\tvariant=\"tonal\"\n\t\t\t\t\t\tcolor=\"surface\"\n\t\t\t\t\t\tclass=\"size-11 shrink-0 p-0\"\n\t\t\t\t\t\tdata-testid=\"users-edit\"\n\t\t\t\t\t\tonclick={() => openEdit(row)}\n\t\t\t\t\t\taria-label={m.users_edit()}\n\t\t\t\t\t>\n\t\t\t\t\t\t<Pencil size={16} />\n\t\t\t\t\t</Button>\n\t\t\t\t\t<Button\n\t\t\t\t\t\ttype=\"button\"\n\t\t\t\t\t\tvariant=\"tonal\"\n\t\t\t\t\t\tcolor=\"warning\"\n\t\t\t\t\t\tclass=\"size-11 shrink-0 p-0\"\n\t\t\t\t\t\tdata-testid=\"users-status\"\n\t\t\t\t\t\tonclick={() => openStatus(row)}\n\t\t\t\t\t\tdisabled={row.id === currentUserId}\n\t\t\t\t\t\taria-label={row.disabled ? m.users_reactivate() : m.users_deactivate()}\n\t\t\t\t\t>\n\t\t\t\t\t\t<Power size={16} />\n\t\t\t\t\t</Button>\n\t\t\t\t</div>\n\t\t\t{/if}\n\t\t{/snippet}\n\t</Table>\n\n\t{#if filtered.length === 0}\n\t\t<Card variant=\"outlined\" class=\"py-8 text-center text-surface-700-300\">{m.users_none()}</Card>\n\t{/if}\n</div>\n\n<Dialog\n\topen={modal !== null}\n\tcloseOnInteractOutside={false}\n\trestoreFocus={true}\n\tonOpenChange={(details) => {\n\t\tif (!details.open) closeModal();\n\t}}\n>\n\t<Portal>\n\t\t<Dialog.Backdrop class=\"fixed inset-0 z-50 bg-surface-50-950/50\" />\n\t\t<Dialog.Positioner class=\"fixed inset-0 z-50 flex items-center justify-center p-4\">\n\t\t\t<Dialog.Content class=\"card preset-filled-surface-50-950 w-full max-w-md p-4 shadow-xl\">\n\t\t\t\t<div class=\"mb-4 flex items-center justify-between\">\n\t\t\t\t\t<Dialog.Title class=\"h3\">\n\t\t\t\t\t\t{modal === 'create'\n\t\t\t\t\t\t\t? m.users_modal_create()\n\t\t\t\t\t\t\t: modal === 'edit'\n\t\t\t\t\t\t\t\t? m.users_modal_edit()\n\t\t\t\t\t\t\t\t: modal === 'invite'\n\t\t\t\t\t\t\t\t\t? m.users_invite_title()\n\t\t\t\t\t\t\t\t\t: statusTarget?.disabled\n\t\t\t\t\t\t\t\t\t\t? m.users_modal_reactivate()\n\t\t\t\t\t\t\t\t\t\t: m.users_modal_deactivate()}\n\t\t\t\t\t</Dialog.Title>\n\t\t\t\t\t<Dialog.CloseTrigger\n\t\t\t\t\t\tclass=\"btn-icon size-11 preset-tonal-surface focus-visible:ring-2 focus-visible:ring-primary-700-300 cursor-pointer\"\n\t\t\t\t\t\taria-label={m.users_close()}\n\t\t\t\t\t\tdata-testid=\"users-dialog-close\"\n\t\t\t\t\t>\n\t\t\t\t\t\t<X size={18} />\n\t\t\t\t\t</Dialog.CloseTrigger>\n\t\t\t\t</div>\n\n\t\t\t\t{#if modal === 'create' || modal === 'edit'}\n\t\t\t\t\t<!-- Real SvelteKit form action (#295): method=POST + action=?/create|?/update,\n\t\t\t\t\t     use:enhance handles deserialize/applyAction. No fetch().json() anywhere. -->\n\t\t\t\t\t<form\n\t\t\t\t\t\tmethod=\"POST\"\n\t\t\t\t\t\taction={modal === 'create' ? '?/create' : '?/update'}\n\t\t\t\t\t\tuse:enhance={submitEnhance}\n\t\t\t\t\t\tclass=\"space-y-4\"\n\t\t\t\t\t>\n\t\t\t\t\t\t{#if modal === 'edit' && editUser}\n\t\t\t\t\t\t\t<input type=\"hidden\" name=\"id\" value={editUser.id} />\n\t\t\t\t\t\t{/if}\n\t\t\t\t\t\t<Input\n\t\t\t\t\t\t\tlabel={m.users_label_name()}\n\t\t\t\t\t\t\tname=\"name\"\n\t\t\t\t\t\t\tbind:value={formName}\n\t\t\t\t\t\t\tplaceholder={m.users_placeholder_name()}\n\t\t\t\t\t\t\trequired\n\t\t\t\t\t\t/>\n\t\t\t\t\t\t<Input\n\t\t\t\t\t\t\tlabel={m.users_label_email()}\n\t\t\t\t\t\t\tname=\"email\"\n\t\t\t\t\t\t\ttype=\"email\"\n\t\t\t\t\t\t\tbind:value={formEmail}\n\t\t\t\t\t\t\tplaceholder={m.users_placeholder_email()}\n\t\t\t\t\t\t\trequired\n\t\t\t\t\t\t/>\n\t\t\t\t\t\t{#if modal === 'create'}\n\t\t\t\t\t\t\t<Input\n\t\t\t\t\t\t\t\tlabel={m.users_label_password()}\n\t\t\t\t\t\t\t\tname=\"password\"\n\t\t\t\t\t\t\t\ttype=\"password\"\n\t\t\t\t\t\t\t\tbind:value={formPassword}\n\t\t\t\t\t\t\t\tplaceholder={m.common_min_chars()}\n\t\t\t\t\t\t\t\trequired\n\t\t\t\t\t\t\t/>\n\t\t\t\t\t\t{/if}\n\t\t\t\t\t\t<div class=\"flex justify-end gap-2 pt-2\">\n\t\t\t\t\t\t\t<Dialog.CloseTrigger type=\"button\" class=\"btn min-h-11 hover:preset-tonal-surface cursor-pointer\">{m.common_cancel()}</Dialog.CloseTrigger>\n\t\t\t\t\t\t\t<Button type=\"submit\" class=\"min-h-11\">{modal === 'create' ? m.users_create() : m.common_save()}</Button>\n\t\t\t\t\t\t</div>\n\t\t\t\t\t</form>\n\t\t\t\t{:else if modal === 'invite'}\n\t\t\t\t\t<Dialog.Description class=\"mb-4 text-sm text-surface-700-300\">{m.users_invite_desc()}</Dialog.Description>\n\t\t\t\t\t<form method=\"POST\" action=\"?/invite\" use:enhance={submitEnhance} class=\"space-y-4\">\n\t\t\t\t\t\t<Input\n\t\t\t\t\t\t\tlabel={m.users_label_email()}\n\t\t\t\t\t\t\tname=\"email\"\n\t\t\t\t\t\t\ttype=\"email\"\n\t\t\t\t\t\t\tbind:value={formEmail}\n\t\t\t\t\t\t\tplaceholder={m.users_placeholder_email()}\n\t\t\t\t\t\t\trequired\n\t\t\t\t\t\t/>\n\t\t\t\t\t\t<div class=\"flex justify-end gap-2 pt-2\">\n\t\t\t\t\t\t\t<Dialog.CloseTrigger type=\"button\" class=\"btn min-h-11 hover:preset-tonal-surface cursor-pointer\">{m.common_cancel()}</Dialog.CloseTrigger>\n\t\t\t\t\t\t\t<Button type=\"submit\" class=\"min-h-11\">{m.users_invite_btn()}</Button>\n\t\t\t\t\t\t</div>\n\t\t\t\t\t</form>\n\t\t\t\t{:else if modal === 'status' && statusTarget}\n\t\t\t\t\t<Dialog.Description class=\"mb-4 text-surface-700-300\">\n\t\t\t\t\t\t{statusTarget.disabled\n\t\t\t\t\t\t\t? m.users_reactivate_confirm({ name: statusTarget.name })\n\t\t\t\t\t\t\t: m.users_deactivate_confirm({ name: statusTarget.name })}\n\t\t\t\t\t</Dialog.Description>\n\t\t\t\t\t<form method=\"POST\" action=\"?/toggleStatus\" use:enhance={submitEnhance}>\n\t\t\t\t\t\t<input type=\"hidden\" name=\"id\" value={statusTarget.id} />\n\t\t\t\t\t\t<input type=\"hidden\" name=\"disabled\" value={String(!statusTarget.disabled)} />\n\t\t\t\t\t\t<div class=\"flex justify-end gap-2\">\n\t\t\t\t\t\t\t<Dialog.CloseTrigger type=\"button\" class=\"btn min-h-11 hover:preset-tonal-surface cursor-pointer\">{m.common_cancel()}</Dialog.CloseTrigger>\n\t\t\t\t\t\t\t<Button class=\"min-h-11\" color={statusTarget.disabled ? 'success' : 'warning'} type=\"submit\"\n\t\t\t\t\t\t\t\t>{statusTarget.disabled ? m.users_reactivate_btn() : m.users_deactivate_btn()}</Button\n\t\t\t\t\t\t\t>\n\t\t\t\t\t\t</div>\n\t\t\t\t\t</form>\n\t\t\t\t{/if}\n\t\t\t</Dialog.Content>\n\t\t</Dialog.Positioner>\n\t</Portal>\n</Dialog>\n",
   "/routes/(app)/admin/users/page.server.test.ts": "import { describe, it, expect, vi, beforeEach } from 'vitest';\n\n// Mock the server modules\nvi.mock('$lib/server/db', () => {\n\tconst mockQuery = {\n\t\tselect: vi.fn(() => mockQuery),\n\t\tfrom: vi.fn(() => mockQuery),\n\t\twhere: vi.fn(() => mockQuery),\n\t\tlimit: vi.fn(() => []),\n\t\torderBy: vi.fn(() => []),\n\t\tinsert: vi.fn(() => ({ values: vi.fn() })),\n\t\tupdate: vi.fn(() => ({ set: vi.fn(() => ({ where: vi.fn() })) })),\n\t\tdelete: vi.fn(() => ({ where: vi.fn() })),\n\t\ttransaction: vi.fn(async (cb: Function) => cb({\n\t\t\tdelete: vi.fn(() => ({ where: vi.fn() })),\n\t\t\tupdate: vi.fn(() => ({ set: vi.fn(() => ({ where: vi.fn() })) }))\n\t\t}))\n\t};\n\treturn { db: mockQuery };\n});\n\nvi.mock('$lib/server/db/schema', () => ({\n\tuser: { id: 'id', email: 'email', name: 'name', disabled: 'disabled' },\n\taccount: { userId: 'userId' },\n\tsession: { userId: 'userId' }\n}));\n\nvi.mock('$lib/server/admin', () => ({\n\tisAdmin: vi.fn()\n}));\n\nvi.mock('better-auth/crypto', () => ({\n\thashPassword: vi.fn(() => 'hashed-pw')\n}));\n\nvi.mock('drizzle-orm', () => ({\n\tdesc: vi.fn(),\n\teq: vi.fn()\n}));\n\n/**\n * Tests for the admin users page server — authorization, validation,\n * and user management actions.\n */\ndescribe('admin users +page.server — authorization', () => {\n\tbeforeEach(() => {\n\t\tvi.clearAllMocks();\n\t});\n\n\tit('rejects non-admin users with 403', async () => {\n\t\tconst { isAdmin } = await import('$lib/server/admin');\n\t\tvi.mocked(isAdmin).mockResolvedValue(false);\n\n\t\tconst mod = await import('./+page.server');\n\t\tawait expect(\n\t\t\tmod.actions.create({\n\t\t\t\tlocals: { user: { id: 'nonadmin' } },\n\t\t\t\trequest: new Request('http://test', { method: 'POST' })\n\t\t\t} as any)\n\t\t).rejects.toThrow();\n\t});\n\n\tit('rejects anonymous users with 401', async () => {\n\t\tconst mod = await import('./+page.server');\n\t\tawait expect(\n\t\t\tmod.actions.update({\n\t\t\t\tlocals: { user: null },\n\t\t\t\trequest: new Request('http://test', { method: 'POST' })\n\t\t\t} as any)\n\t\t).rejects.toThrow();\n\t});\n});\n\ndescribe('admin users +page.server — validation', () => {\n\tbeforeEach(() => {\n\t\tvi.clearAllMocks();\n\t});\n\n\tit('returns 400 for missing fields on create', async () => {\n\t\tconst { isAdmin } = await import('$lib/server/admin');\n\t\tvi.mocked(isAdmin).mockResolvedValue(true);\n\n\t\tconst mod = await import('./+page.server');\n\t\tconst formData = new FormData();\n\t\t// Missing name and password\n\t\tformData.set('email', 'test@test.com');\n\n\t\tconst result = await mod.actions.create({\n\t\t\tlocals: { user: { id: 'admin1' } },\n\t\t\trequest: { formData: async () => formData }\n\t\t} as any);\n\n\t\texpect((result as { status: number }).status).toBe(400);\n\t});\n});\n\ndescribe('admin users +page.server — user management', () => {\n\tbeforeEach(() => {\n\t\tvi.clearAllMocks();\n\t});\n\n\tit('deactivates a user without deleting their identity and revokes every session', async () => {\n\t\tconst { isAdmin } = await import('$lib/server/admin');\n\t\tvi.mocked(isAdmin).mockResolvedValue(true);\n\n\t\tconst { db } = await import('$lib/server/db');\n\t\tconst { user } = await import('$lib/server/db/schema');\n\t\tconst { eq } = await import('drizzle-orm');\n\t\tvi.mocked(eq).mockImplementation((column: unknown, value: unknown) => ({ column, value }) as never);\n\t\tconst updateWhere = vi.fn();\n\t\tconst setUser = vi.fn(() => ({ where: updateWhere }));\n\t\tconst updateUser = vi.fn(() => ({ set: setUser }));\n\t\tconst deleteSession = vi.fn(() => ({ where: vi.fn() }));\n\t\t(db.select as any).mockReturnValueOnce({\n\t\t\tfrom: vi.fn(() => ({ where: vi.fn(() => ({ limit: vi.fn(() => [{ id: 'user-1', disabled: false }]) })) }))\n\t\t});\n\t\t(db.transaction as any).mockImplementationOnce(async (callback: Function) =>\n\t\t\tcallback({ delete: deleteSession, update: updateUser })\n\t\t);\n\n\t\tconst mod = await import('./+page.server');\n\t\tconst formData = new FormData();\n\t\tformData.set('id', 'user-1');\n\t\tformData.set('disabled', 'true');\n\t\tconst result = await mod.actions.toggleStatus({\n\t\t\tlocals: { user: { id: 'admin1' } },\n\t\t\trequest: { formData: async () => formData }\n\t\t} as any);\n\n\t\texpect(result).toMatchObject({ success: true, code: 'deactivated' });\n\t\texpect(updateUser).toHaveBeenCalledWith(user);\n\t\texpect(setUser).toHaveBeenCalledWith(expect.objectContaining({ disabled: true }));\n\t\texpect(updateWhere).toHaveBeenCalledWith({ column: user.id, value: 'user-1' });\n\t\texpect(deleteSession).toHaveBeenCalledTimes(1);\n\t});\n\n\tit('refuses self-deactivation before updating the user or deleting sessions', async () => {\n\t\tconst { isAdmin } = await import('$lib/server/admin');\n\t\tvi.mocked(isAdmin).mockResolvedValue(true);\n\n\t\tconst { db } = await import('$lib/server/db');\n\t\tconst mod = await import('./+page.server');\n\t\tconst formData = new FormData();\n\t\tformData.set('id', 'admin1');\n\t\tformData.set('disabled', 'true');\n\t\tconst result = await mod.actions.toggleStatus({\n\t\t\tlocals: { user: { id: 'admin1' } },\n\t\t\trequest: { formData: async () => formData }\n\t\t} as any);\n\n\t\texpect(result).toMatchObject({ status: 400, data: { code: 'self_deactivate' } });\n\t\texpect(db.update).not.toHaveBeenCalled();\n\t\texpect(db.delete).not.toHaveBeenCalled();\n\t\texpect(db.transaction).not.toHaveBeenCalled();\n\t});\n\n\tit('reactivates a user without revoking sessions', async () => {\n\t\tconst { isAdmin } = await import('$lib/server/admin');\n\t\tvi.mocked(isAdmin).mockResolvedValue(true);\n\n\t\tconst { db } = await import('$lib/server/db');\n\t\tconst deleteSession = vi.fn(() => ({ where: vi.fn() }));\n\t\tconst updateUser = vi.fn(() => ({ set: vi.fn(() => ({ where: vi.fn() })) }));\n\t\t(db.select as any).mockReturnValueOnce({\n\t\t\tfrom: vi.fn(() => ({ where: vi.fn(() => ({ limit: vi.fn(() => [{ id: 'user-1', disabled: true }]) })) }))\n\t\t});\n\t\t(db.transaction as any).mockImplementationOnce(async (callback: Function) =>\n\t\t\tcallback({ delete: deleteSession, update: updateUser })\n\t\t);\n\n\t\tconst mod = await import('./+page.server');\n\t\tconst formData = new FormData();\n\t\tformData.set('id', 'user-1');\n\t\tformData.set('disabled', 'false');\n\t\tconst result = await mod.actions.toggleStatus({\n\t\t\tlocals: { user: { id: 'admin1' } },\n\t\t\trequest: { formData: async () => formData }\n\t\t} as any);\n\n\t\texpect(result).toMatchObject({ success: true, code: 'reactivated' });\n\t\texpect(deleteSession).not.toHaveBeenCalled();\n\t});\n\n\tit('allows admin to toggle verification (success)', async () => {\n\t\tconst { isAdmin } = await import('$lib/server/admin');\n\t\tvi.mocked(isAdmin).mockResolvedValue(true);\n\n\t\tconst { db } = await import('$lib/server/db');\n\t\t// Mock that user exists\n\t\t(db.select as any).mockReturnValueOnce({\n\t\t\tfrom: vi.fn(() => ({\n\t\t\t\twhere: vi.fn(() => ({ limit: vi.fn(() => []) })),\n\t\t\t\torderBy: vi.fn(() => [])\n\t\t\t}))\n\t\t});\n\n\t\tconst mod = await import('./+page.server');\n\t\tconst formData = new FormData();\n\t\tformData.set('id', 'user-1');\n\t\tformData.set('verified', 'false');\n\n\t\tconst result = await mod.actions.toggleVerify({\n\t\t\tlocals: { user: { id: 'admin1' } },\n\t\t\trequest: { formData: async () => formData }\n\t\t} as any);\n\n\t\texpect(result).toHaveProperty('success', true);\n\t});\n});\n",
   "/routes/(app)/layout.server.test.ts": "import { describe, it, expect, vi } from 'vitest';\n\n// Mock the server modules so the test can run without a real database.\nvi.mock('$lib/server/db', () => ({\n\tdb: {\n\t\tselect: vi.fn(() => ({ from: vi.fn(() => ({ orderBy: vi.fn(() => []) })) })),\n\t\tinsert: vi.fn(() => ({ values: vi.fn() })),\n\t\tupdate: vi.fn(() => ({ set: vi.fn(() => ({ where: vi.fn() })) })),\n\t\tdelete: vi.fn(() => ({ where: vi.fn() }))\n\t}\n}));\n\nvi.mock('$lib/server/admin', () => ({\n\tisAdmin: vi.fn()\n}));\n\n/**\n * Tests for the (app) layout auth guard.\n * Anonymous users must be redirected to /login.\n */\ndescribe('(app) layout auth guard', () => {\n\tit('redirects anonymous users to /login', async () => {\n\t\tconst { isAdmin } = await import('$lib/server/admin');\n\t\tvi.mocked(isAdmin).mockResolvedValue(false);\n\n\t\t// Simulate an unauthenticated request\n\t\tconst load = (await import('./+layout.server')).load;\n\n\t\tawait expect(\n\t\t\tload({\n\t\t\t\tlocals: { user: null, session: null },\n\t\t\t\turl: new URL('http://localhost/dashboard')\n\t\t\t} as any)\n\t\t).rejects.toThrow();\n\n\t\ttry {\n\t\t\tawait load({\n\t\t\t\tlocals: { user: null, session: null },\n\t\t\t\turl: new URL('http://localhost/dashboard')\n\t\t\t} as any);\n\t\t} catch (e) {\n\t\t\tconst err = e as { status: number; location: string };\n\t\t\texpect(err.status).toBe(302);\n\t\t\texpect(err.location).toMatch(/\\/login/);\n\t\t}\n\t});\n\n\tit('returns user data for authenticated users', async () => {\n\t\tconst { isAdmin } = await import('$lib/server/admin');\n\t\tvi.mocked(isAdmin).mockResolvedValue(true);\n\n\t\tconst load = (await import('./+layout.server')).load;\n\t\tconst result = await load({\n\t\t\tlocals: {\n\t\t\t\tuser: { id: 'u1', name: 'Admin', email: 'admin@test.com' },\n\t\t\t\tsession: { id: 's1', userId: 'u1' }\n\t\t\t},\n\t\t\turl: new URL('http://localhost/dashboard')\n\t\t} as any);\n\n\t\texpect(result).toHaveProperty('user');\n\t\texpect(result).toHaveProperty('session');\n\t});\n});\n",
   "/routes/+layout.svelte": "<script lang=\"ts\">\n\timport './layout.css';\n\timport { page } from '$app/state';\n\timport { locales, localizeHref } from '$lib/paraglide/runtime';\n\tlet { children } = $props();\n</script>\n\n{@render children()}\n\n<div style=\"display:none\">\n\t{#each locales as locale (locale)}\n\t\t<a href={localizeHref(page.url.pathname, { locale })}>{locale}</a>\n\t{/each}\n</div>\n",
diff --git a/packages/svforge/templates/dashboard/src/lib/components/svforge/layout/AdminLayout.svelte b/packages/svforge/templates/dashboard/src/lib/components/svforge/layout/AdminLayout.svelte
index 62465d6f..ceb2f117 100644
--- a/packages/svforge/templates/dashboard/src/lib/components/svforge/layout/AdminLayout.svelte
+++ b/packages/svforge/templates/dashboard/src/lib/components/svforge/layout/AdminLayout.svelte
@@ -96,7 +96,7 @@
 		<header class="sticky top-0 z-50 flex items-center justify-between border-b border-surface-200-800 bg-surface-50-950/80 px-4 py-3 backdrop-blur-md">
 			<div class="flex items-center gap-3">
 				<Dialog.Trigger
-					class="btn-icon size-11 preset-tonal-surface focus-visible:ring-2 focus-visible:ring-primary-700-300 lg:hidden"
+					class="btn-icon size-11 preset-tonal-surface focus-visible:ring-2 focus-visible:ring-primary-700-300 lg:hidden cursor-pointer"
 					aria-label={m.layout_menu()}
 					data-testid="admin-mobile-menu-trigger"
 				>
@@ -142,7 +142,7 @@
 					<Dialog.Title class="h3">{m.layout_admin()}</Dialog.Title>
 					<Dialog.CloseTrigger
 						type="button"
-						class="btn-icon size-11 hover:preset-tonal-surface focus-visible:ring-2 focus-visible:ring-primary-700-300"
+						class="btn-icon size-11 hover:preset-tonal-surface focus-visible:ring-2 focus-visible:ring-primary-700-300 cursor-pointer"
 						aria-label={m.layout_close_menu()}
 					>
 						<X size={20} />
diff --git a/packages/svforge/templates/dashboard/src/routes/(app)/admin/users/+page.svelte b/packages/svforge/templates/dashboard/src/routes/(app)/admin/users/+page.svelte
index e78c4a64..be2bfe74 100644
--- a/packages/svforge/templates/dashboard/src/routes/(app)/admin/users/+page.svelte
+++ b/packages/svforge/templates/dashboard/src/routes/(app)/admin/users/+page.svelte
@@ -274,7 +274,7 @@
 										: m.users_modal_deactivate()}
 					</Dialog.Title>
 					<Dialog.CloseTrigger
-						class="btn-icon size-11 preset-tonal-surface focus-visible:ring-2 focus-visible:ring-primary-700-300"
+						class="btn-icon size-11 preset-tonal-surface focus-visible:ring-2 focus-visible:ring-primary-700-300 cursor-pointer"
 						aria-label={m.users_close()}
 						data-testid="users-dialog-close"
 					>
@@ -320,7 +320,7 @@
 							/>
 						{/if}
 						<div class="flex justify-end gap-2 pt-2">
-							<Dialog.CloseTrigger type="button" class="btn min-h-11 hover:preset-tonal-surface">{m.common_cancel()}</Dialog.CloseTrigger>
+							<Dialog.CloseTrigger type="button" class="btn min-h-11 hover:preset-tonal-surface cursor-pointer">{m.common_cancel()}</Dialog.CloseTrigger>
 							<Button type="submit" class="min-h-11">{modal === 'create' ? m.users_create() : m.common_save()}</Button>
 						</div>
 					</form>
@@ -336,7 +336,7 @@
 							required
 						/>
 						<div class="flex justify-end gap-2 pt-2">
-							<Dialog.CloseTrigger type="button" class="btn min-h-11 hover:preset-tonal-surface">{m.common_cancel()}</Dialog.CloseTrigger>
+							<Dialog.CloseTrigger type="button" class="btn min-h-11 hover:preset-tonal-surface cursor-pointer">{m.common_cancel()}</Dialog.CloseTrigger>
 							<Button type="submit" class="min-h-11">{m.users_invite_btn()}</Button>
 						</div>
 					</form>
@@ -350,7 +350,7 @@
 						<input type="hidden" name="id" value={statusTarget.id} />
 						<input type="hidden" name="disabled" value={String(!statusTarget.disabled)} />
 						<div class="flex justify-end gap-2">
-							<Dialog.CloseTrigger type="button" class="btn min-h-11 hover:preset-tonal-surface">{m.common_cancel()}</Dialog.CloseTrigger>
+							<Dialog.CloseTrigger type="button" class="btn min-h-11 hover:preset-tonal-surface cursor-pointer">{m.common_cancel()}</Dialog.CloseTrigger>
 							<Button class="min-h-11" color={statusTarget.disabled ? 'success' : 'warning'} type="submit"
 								>{statusTarget.disabled ? m.users_reactivate_btn() : m.users_deactivate_btn()}</Button
 							>
diff --git a/tests/dashboard-trigger-affordance.test.ts b/tests/dashboard-trigger-affordance.test.ts
new file mode 100644
index 00000000..e96c3603
--- /dev/null
+++ b/tests/dashboard-trigger-affordance.test.ts
@@ -0,0 +1,22 @@
+import { describe, expect, it } from 'vitest';
+import { readFileSync } from 'node:fs';
+import { dashboardTemplateFile } from './helpers';
+
+function triggerClasses(source: string): string[] {
+	return [...source.matchAll(/<Dialog\.(?:Trigger|CloseTrigger)\b(?:(?!>).)*\bclass="([^"]*)"(?:(?!>).)*>/gs)].map(
+		(match) => match[1]
+	);
+}
+
+describe('dashboard dialog trigger affordances (#594)', () => {
+	it('gives enabled dialog triggers a pointer cursor without replacing Skeleton triggers', () => {
+		const files = [
+			dashboardTemplateFile('lib', 'components', 'svforge', 'layout', 'AdminLayout.svelte'),
+			dashboardTemplateFile('routes', '(app)', 'admin', 'users', '+page.svelte')
+		];
+		const classes = files.flatMap((file) => triggerClasses(readFileSync(file, 'utf-8')));
+
+		expect(classes.length).toBeGreaterThan(0);
+		expect(classes.every((className) => className.split(/\s+/).includes('cursor-pointer'))).toBe(true);
+	});
+});