refactor: replace admin bootstrap script with first-run setup

src/routes/login/+page.server.ts

@@ -1,9 +1,12 @@
 import { redirect } from '@sveltejs/kit';
 import { APIError } from 'better-auth/api';
+import { count } from 'drizzle-orm';
 import { message, superValidate } from 'sveltekit-superforms/server';
 import { zod4 } from 'sveltekit-superforms/adapters';
 import { auth } from '$lib/server/auth';
-import { loginSchema } from '$lib/schemas/auth';
+import { db } from '$lib/server/db';
+import { user } from '$lib/server/db/schema';
+import { firstAdminSchema, loginSchema } from '$lib/schemas/auth';
 import type { Actions, PageServerLoad } from './$types';
 
 function getSafeRedirect(url: URL) {
@@ -21,7 +24,11 @@ export const load: PageServerLoad = async ({ locals, url }) => {
 		redirect(303, getSafeRedirect(url));
 	}
 
+	const [{ total }] = await db.select({ total: count() }).from(user);
+	const needsBootstrap = total === 0;
+
 	return {
+		needsBootstrap,
 		form: await superValidate(
 			{
 				email: url.searchParams.get('email') ?? '',
@@ -29,11 +36,65 @@ export const load: PageServerLoad = async ({ locals, url }) => {
 			},
 			zod4(loginSchema),
 			{ id: 'login' }
+		),
+		firstAdminForm: await superValidate(
+			{
+				name: '',
+				email: url.searchParams.get('email') ?? '',
+				password: ''
+			},
+			zod4(firstAdminSchema),
+			{ id: 'first-admin' }
 		)
 	};
 };
 
 export const actions: Actions = {
+	bootstrap: async (event) => {
+		const form = await superValidate(event, zod4(firstAdminSchema), { id: 'first-admin' });
+
+		if (!form.valid) {
+			return message(form, 'Check the highlighted fields.', { status: 400 });
+		}
+
+		const [{ total }] = await db.select({ total: count() }).from(user);
+
+		if (total > 0) {
+			return message(form, 'The first admin account has already been created.', { status: 409 });
+		}
+
+		try {
+			await auth.api.createUser({
+				body: {
+					name: form.data.name,
+					email: form.data.email,
+					password: form.data.password,
+					role: 'admin'
+				}
+			});
+
+			await auth.api.signInEmail({
+				body: {
+					email: form.data.email,
+					password: form.data.password,
+					callbackURL: getSafeRedirect(event.url)
+				}
+			});
+		} catch (error) {
+			if (error instanceof APIError) {
+				return message(form, error.message || 'Unable to create the first admin account.', {
+					status: 400
+				});
+			}
+
+			return message(form, 'Something went wrong while creating the first admin account.', {
+				status: 500
+			});
+		}
+
+		redirect(303, getSafeRedirect(event.url));
+	},
+
 	default: async (event) => {
 		const form = await superValidate(event, zod4(loginSchema), { id: 'login' });
 

src/routes/login/+page.svelte

@@ -1,4 +1,5 @@
 <script lang="ts">
+	import FirstAdminForm from '$lib/components/first-admin-form.svelte';
 	import LoginForm from '$lib/components/login-form.svelte';
 	import type { PageData } from './$types';
 
@@ -7,6 +8,10 @@
 
 <div class="flex min-h-svh flex-col items-center justify-center gap-6 bg-background p-6 md:p-10">
 	<div class="w-full max-w-sm">
-		<LoginForm form={data.form} />
+		{#if data.needsBootstrap}
+			<FirstAdminForm form={data.firstAdminForm} />
+		{:else}
+			<LoginForm form={data.form} />
+		{/if}
 	</div>
 </div>