Admin portal access
Sign in to the shared control plane.
Password sign-in and Supabase magic-link continuation both land here. Sessions are refreshed through middleware, authenticated users are mapped onto `core.users`, and RBAC remains the gate for the protected admin surface.
Protected by middleware
Protected admin requests now refresh the Supabase session and redirect here only after an authoritative auth check.
Server-first session checks
Server layouts hydrate the canonical platform user identity before route-level permission checks run.
Sign in
Use your password or request a magic link. After confirmation, you’ll land on the intended protected route.
or