The four admin actions (trigger-import, generate-thumbnails, backfill-versions, backfill-file-hashes) were posting bare fetches, so the backend's CSRF filter would reject them once the protection is on. Wrap each init with withCsrf() so the X-XSRF-TOKEN header is attached from the cookie — same pattern other admin actions use. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
sv
Everything you need to build a Svelte project, powered by sv.
Creating a project
If you're seeing this, you've probably already done this step. Congrats!
# create a new project in the current directory
npx sv create
# create a new project in my-app
npx sv create my-app
Developing
Once you've created a project and installed dependencies with npm install (or pnpm install or yarn), start a development server:
npm run dev
# or start the server and open the app in a new browser tab
npm run dev -- --open
Building
To create a production version of your app:
npm run build
You can preview the production build with npm run preview.
To deploy your app, you may need to install an adapter for your target environment.