mirror of
https://github.com/Patiun/com.gregkilmer.www.git
synced 2026-11-08 04:08:24 +00:00
Claude
02437358cf
Lists pages still showing built-in wording, notes holding placeholder text, unpublished posts and live notes missing the field their page is built around, each linked to its editor. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012aSbo2D1qP8cMFQCykf7kx
61 lines
5.3 KiB
Markdown
61 lines
5.3 KiB
Markdown
# Admin page
|
|
|
|
`services/admin` is where Greg decides what the rules held, puts back an
|
|
earlier version, captures a status or a Library item, opens and closes store
|
|
orders, previews drafts, and checks that the content service and the sync
|
|
jobs are running.
|
|
|
|
It is one more client of the content service's HTTP API, like the MCP server
|
|
and any editing tool built later. It writes nothing itself: every action is a
|
|
call to the write API, so the same rules apply, and changes are written into
|
|
the vault so Obsidian shows them too. Its changes are recorded with the author
|
|
`admin` ("Admin page" in history).
|
|
|
|
## Pages
|
|
|
|
| Page | What it does |
|
|
| --- | --- |
|
|
| Overview | Live and total notes, what waits for review, folder problems, the service's last scan and last error, a Scan now button, each sync job's last run and last success, and Library suggestions: series moved to Reading in PersonalReader with no Library item, each with Add to the Library (title, medium, AniList id, state now, published) and Dismiss. |
|
|
| Site pages | Each page of the site with its Page text note (lede, photos, portrait) as thumbnails, **Edit page** or **Add page text**, and links to the notes that fill the page (crafts, games, decks, product lines, settings). |
|
|
| Before launch | What is still a placeholder, worked out from the notes so it shrinks as they are fixed: pages showing their built-in wording (no Page text note, a draft one, no lede, no About portrait), notes holding a comment, Coming soon, TODO, TBD or lorem, posts not published, and live notes missing the field their page is built around (a craft's blurb, a make's finish date, a deck's take). Each line links to Edit or Add page text. |
|
|
| Review | Held changes with the rules' reasons and a line diff against the live version. Accept puts it live (and into the vault, for API changes). Reject keeps the live version; for an edit made in Obsidian, "Reject and put the live version back" also rewrites the file. Earlier decisions are listed by status. |
|
|
| Notes, Drafts | Browse and search every note, or only the unpublished ones. Each row has Edit; filtered to one type, the list also offers to add a note of that type. |
|
|
| A note | A preview of the body, its fields, what links to it, Edit, Publish or Unpublish, and its history. Any earlier version can be compared with the live one and rolled back. |
|
|
| Posts | Every blog post, drafts first, and **Write a post**: title, topic, kind of post, publish date, summary, a cover picked from the vault or uploaded, the pages it is about, Feature it, case study details, and the Markdown body. Preview shows it rendered with its images; Save draft and Publish write the note to `Posts/`. Images added to the post are uploaded to `_attachments/Posts` and appended as `![[file]]` lines. |
|
|
| Edit | The form for any note (posts open their own editor). It is built from the note type's schema in `@gk/schema`, so it offers exactly the fields the content service accepts: image fields (`format: vault-image`) show a thumbnail, a pick from the vault and an upload into the type's `_attachments` folder; link fields offer note names; lists of rows (photos, specs, prices, socials) can be added to, removed and moved up or down. An emptied field is removed from the note, an unticked optional box is left out, and fields the form cannot show (a list inside a row) stay as they are. The title is the file name, so it is renamed in Obsidian. |
|
|
| Images | Everything in `_attachments`, newest first, by folder, with which notes use each one. Upload several at once into a folder, copy an image's `![[file]]` line, and delete images no note uses. |
|
|
| Capture | A status for the Now log, or a Library item with the option to post a status about it in the same step. |
|
|
| Store | Orders open or closed per category, with the reopen date and turnaround, and open slots or stock per product line. |
|
|
| Problems | Whole-folder problems, like links to notes that do not exist. |
|
|
| Inbox | Inquiries and order requests from the site, unhandled first and newest first, with whether each email reached you. Open one to read it, reply by email, download its attachment, and mark it handled or not handled. |
|
|
|
|
## Safety
|
|
|
|
- **Tailnet only.** Publish it behind the "Tailnet only" access list; it has no
|
|
login of its own.
|
|
- **The token stays on the server.** The admin page holds the content service's
|
|
admin token and calls the API itself; the browser never sees it.
|
|
- **No posts from other sites.** Every form post must carry `Sec-Fetch-Site:
|
|
same-origin` (or a matching `Origin`), so a page elsewhere cannot make the
|
|
browser act on the admin page.
|
|
- **Drafts cannot run code.** Previews show raw HTML as text and drop links that
|
|
are not http, https, mailto or relative. The content security policy allows
|
|
only the page's own `/admin.js` (Copy buttons and a confirm before deleting
|
|
an image), never inline script, and every page still works with plain forms
|
|
when that script does not run.
|
|
- **Only images go into the vault.** Uploads are checked by extension and by
|
|
their first bytes, SVG is refused, and an image is deleted only when no note
|
|
uses it.
|
|
|
|
## Running it
|
|
|
|
| Variable | Default | |
|
|
| --- | --- | --- |
|
|
| `CONTENT_URL` | `http://localhost:4310` | The content service. |
|
|
| `ADMIN_TOKEN` | required | The content service's admin token. |
|
|
| `PORT`, `HOST` | `4320`, `0.0.0.0` | |
|
|
|
|
```sh
|
|
ADMIN_TOKEN=… npm run admin
|
|
```
|