Admin portal access

Sign in to the shared control plane.

Password sign-in and Supabase magic-link continuation both land here. Sessions are refreshed through middleware, authenticated users are mapped onto `core.users`, and RBAC remains the gate for the protected admin surface.

Protected by middleware

Protected admin requests now refresh the Supabase session and redirect here only after an authoritative auth check.

Server-first session checks

Server layouts hydrate the canonical platform user identity before route-level permission checks run.

Sign in

Use your password or request a magic link. After confirmation, you’ll land on the intended protected route.

or