hackerspace.sh/app/(app)/ops/page.tsx

import { createClient } from '@/lib/supabase/server'
import { OpsClient } from './ops-client'
import type { Tables } from '@/types/database'

export default async function OpsPage() {
  const supabase = await createClient()
  const { data: { user } } = await supabase.auth.getUser()
  if (!user) return null

  const { data: member } = await supabase
    .from('space_members').select('space_id, role, display_name, user_id').eq('user_id', user.id).in('status', ['current', 'unverified', 'late']).single()
  if (!member) return null

  const canSeeSecrets = member.role === 'admin' || member.role === 'board'

  const [{ data: kbEntries }, { data: areaLeads }, secretsResult] = await Promise.all([
    supabase.from('knowledge_base').select('*').eq('space_id', member.space_id).order('is_pinned', { ascending: false }).order('created_at', { ascending: false }),
    supabase.from('area_leads').select('*').eq('space_id', member.space_id).order('area_name'),
    canSeeSecrets
      // CRITICAL: never select `value` or `encrypted_value` here. The list
      // endpoint only returns metadata; the plaintext is fetched on demand
      // through the revealSecret() server action.
      ? supabase.from('secrets').select('id, title, area, created_at, label, description, icon, space_id, created_by, updated_at, category, notes, encryption_version').eq('space_id', member.space_id)
      : Promise.resolve({ data: [] as Tables<'secrets'>[] }),
  ])

  return (
    <OpsClient
      member={member as Tables<'space_members'>}
      spaceId={member.space_id}
      kbEntries={kbEntries ?? []}
      areaLeads={areaLeads ?? []}
      secrets={secretsResult.data ?? []}
      canSeeSecrets={canSeeSecrets}
    />
  )
}