sulthan
1e6f1e985d
Closes #102.
The only operational surface was /healthz and a fold-out roster inside the owner's own reading page. This adds /admin: an owner-only page carrying the Reader roster and one row per Poll Lane.
- **Poller seam.** `latest.Poller` records each Lane's last pass (`Site`, `Due`, `Checked`, `LastRun`, `Gap`, `Clamped`, `Browser`) and answers `LaneStatus()`; the page reads that snapshot, never a table. A pass that returns before computing its figures (refusal backoff, sidecar down) carries the previous pass's figures forward rather than recording zeroes, and a Lane that has never reached a pace renders no gap at all. Refusal and sidecar reachability are derived at snapshot time.
- **Owner gate at registration.** Every route reaching past the acting Reader lives in `adminRoutes()` and is wrapped in `requireOwner` when it is registered, so a missing gate is visible in the route list rather than hidden in a handler. `web.AdminPatterns()` is what the gate test walks, so a new route cannot be added without being tested. A non-owner gets 404, never 403.
- **Nil poller is a first-class state.** `main.newRouter` takes the reporter as an interface and converts a nil `*Poller` to a nil interface; no poller and no completed pass both render "No data yet" with the reason spelled out, rather than confident zeroes.
- **Roster moved** off the reading page onto /admin, with the Sighting counters and a confirm-gated `Clear marks` control. #103 fills those counters, so on delivery they read zero for everyone - deliberate ordering.
- **One accent, `--patina`** (verdigris, both colour branches): the far side of the wheel from ember's crimson and clear of the archive blue. Ember still means new chapter only; revocation still wears --danger.
Verification: `go vet ./...` and `go test ./...` green (Docker-backed); admin page screenshotted at 1100px and 390px in both colour schemes. Reviewed on both axes (spec, standards); findings on the accent hue, zero-figure honesty and three tests that could not fail are fixed in 58014eb.
Reviewed-on: #107
Co-authored-by: Sulthan Zaki <sultankiki05@gmail.com>
Co-committed-by: Sulthan Zaki <sultankiki05@gmail.com>
49 lines
2.6 KiB
HTML
49 lines
2.6 KiB
HTML
{{/* The Reader roster, on the owner's administrative page. Re-rendered whole
|
|
as the response to an action so the counts and marks it shows cannot
|
|
describe the state before the tap. Both actions are confirm-gated: one
|
|
signs a Reader out of every device at once, the other wipes a record.
|
|
|
|
Owner-only at route registration, so nothing here re-tests who is asking. */}}
|
|
{{define "readers"}}
|
|
<section class="readers" id="readers">
|
|
<h2>Readers</h2>
|
|
<p class="setup-copy">Everyone who has signed in through Discord. Revoking
|
|
signs a Reader out of every device; their library and bookmarks are
|
|
untouched, and they can sign in again. The Sighting counters record how
|
|
often a later Poll confirmed or contradicted what that Reader's browser
|
|
reported; enough contradictions stop their reports deferring a Poll, and
|
|
clearing the marks gives that back.</p>
|
|
<ul class="readerlist">
|
|
{{range .Readers}}
|
|
<li>
|
|
<span class="reader-id">{{.DiscordID}}</span>
|
|
<span class="reader-sessions">{{.Sessions}} session{{if ne .Sessions 1}}s{{end}}</span>
|
|
<span class="reader-sightings">{{.Agreements}} confirmed / {{.Disagreements}} contradicted</span>
|
|
{{/* Blocked is spelled out rather than left to be worked out from two
|
|
numbers and a threshold. */}}
|
|
{{if .Blocked}}<span class="reader-blocked">deferral blocked</span>{{end}}
|
|
<span class="reader-actions">
|
|
{{/* Clearing restores a privilege, so it is a plain ghost button —
|
|
the destruction accent belongs to revocation alone. It is offered
|
|
on every row, including one reading zero: the remedy must be
|
|
findable before the counters climb, not after. */}}
|
|
<form hx-post="/readers/{{.ID}}/clear-marks" hx-target="#readers" hx-swap="outerHTML"
|
|
hx-confirm="Clearing wipes this Reader's whole Sighting record, confirmations included. Clear?">
|
|
<button type="submit" class="ghost">Clear marks</button>
|
|
</form>
|
|
{{/* The owner's own row never offers Revoke: it is the one row where the
|
|
button would sign the tapping browser out, and the endpoint refuses
|
|
it anyway. Logout is the deliberate way to do that. */}}
|
|
{{if and .Sessions (ne .ID $.OwnerID)}}
|
|
<form hx-post="/readers/{{.ID}}/revoke" hx-target="#readers" hx-swap="outerHTML"
|
|
hx-confirm="Revoking signs this Reader out on every device immediately. Revoke?">
|
|
<button type="submit" class="ghost danger">Revoke sessions</button>
|
|
</form>
|
|
{{end}}
|
|
</span>
|
|
</li>
|
|
{{end}}
|
|
</ul>
|
|
</section>
|
|
{{end}}
|