refactor(web)!: rewrite in svelte

.github/workflows/ci.yml

@@ -22,7 +22,7 @@ jobs:
 
       - uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.3.14
+          bun-version: 1.4.2
 
       # The Firestore rules emulator (test:rules) runs on the JVM.
       - uses: actions/setup-java@v6

.github/workflows/web.yml

@@ -59,7 +59,7 @@ jobs:
 
       - uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.3.14
+          bun-version: 1.4.2
 
       - run: bun install --frozen-lockfile
 

README.md

@@ -13,7 +13,7 @@ one at the point of asking.
 
 Live at <https://kip.hafa.cc>.
 
-Responsive web client (Next.js, static export) synced via Firestore. Native mobile apps come later.
+Responsive web client (SvelteKit, static export) synced via Firestore. Native mobile apps come later.
 
 ## Running locally
 
@@ -26,8 +26,7 @@ bun dev
 The repo ships a populated dev Firebase config (`hafaio-kip-dev`), so `bun dev` gives you the real
 sign-in flow out of the box — an emailed one-time link, a texted code, or Google. kip has no
 password anywhere. To point at your own project, replace the `firebaseConfig` in
-`web/utils/firebase.ts` (see [CLAUDE.md](./CLAUDE.md) for the full setup walkthrough). Blanking its
-`appId` disables sign-in for a config-free build.
+`web/src/lib/firebase.ts` (see [CLAUDE.md](./CLAUDE.md) for the full setup walkthrough).
 
 ## License
 

functions/src/index.ts

@@ -60,7 +60,7 @@ const SENDER = "noreply@kip.hafa.cc";
 const RESEND_API_KEY = defineSecret("RESEND_API_KEY");
 
 // Empty, so SMS is off: `smsConfigured()` is checked before anything is read,
-// written or sent, the same shape `firebaseConfigured()` has on the web side.
+// written or sent.
 // Filling these in is not enough on its own — until the 10DLC campaign is
 // approved every US send is blocked with 30034 and billed anyway.
 //

web/.gitignore

@@ -1,17 +1,7 @@
 node_modules/
-.next/
+.svelte-kit/
 out/
-*.tsbuildinfo
 .DS_Store
-# Generated, and its content depends on which command wrote it last: `next dev`
-# points the route-types import at .next/dev, `next build` at .next. Tracking it
-# meant a permanently dirty file that a bare commit could sweep up. `tsc` passes
-# without it entirely, so it is regenerated locally and needed by nothing.
-next-env.d.ts
 
-# Written by `next dev`, and re-added if deleted.
-AGENTS.md
-CLAUDE.md
-
-# Compiled from sw/sw.ts (see next.config.js).
-public/sw.js
+# Compiled from sw/sw.ts (see vite.config.ts).
+static/sw.js