@a83/orbiter-admin 0.3.22 → 0.3.24

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@a83/orbiter-admin",
-  "version": "0.3.22",
+  "version": "0.3.24",
   "description": "Standalone admin server for Orbiter CMS",
   "type": "module",
   "main": "./src/server.js",

package/public/style.css

@@ -2019,9 +2019,13 @@ a.xfce-sb-logo:hover     { opacity: .8; }
 .xfce-dock-item { position: relative; }
 
 /* Quick-create button */
+.xfce-dock-create {
+  background: color-mix(in srgb, var(--accent) 12%, transparent);
+  border: 1px solid color-mix(in srgb, var(--accent) 35%, transparent) !important;
+}
 .xfce-dock-create .xfce-dock-icon {
-  font-size: 16px !important; font-family: inherit !important;
-  color: var(--accent); font-weight: 300;
+  font-size: 20px !important; font-family: inherit !important;
+  color: var(--accent) !important; font-weight: 400; opacity: 1 !important;
 }
 
 /* ── Command Palette ─────────────────────────────────────── */
@@ -2035,7 +2039,9 @@ a.xfce-sb-logo:hover     { opacity: .8; }
 
 .xfce-palette-inner {
   width: min(560px, 92vw);
-  background: var(--glass-bg, color-mix(in srgb, var(--bg1) 90%, transparent));
+  background: color-mix(in srgb, var(--bg1) 97%, transparent);
+  backdrop-filter: blur(8px) saturate(160%);
+  -webkit-backdrop-filter: blur(8px) saturate(160%);
   border: 1px solid var(--line);
   border-radius: 12px;
   box-shadow: 0 24px 60px rgba(0,0,0,.5), 0 0 0 1px color-mix(in srgb,var(--accent) 20%,transparent);
@@ -2055,10 +2061,10 @@ a.xfce-sb-logo:hover     { opacity: .8; }
 .xfce-palette-hint { font-size: 8px; color: var(--muted); font-family: var(--mono); white-space: nowrap; }
 
 .xfce-palette-results {
-  max-height: 360px; overflow-y: auto; padding: 6px 0;
+  max-height: 450px; overflow-y: auto; padding: 6px 0;
 }
 .xfce-pal-group {
-  font-size: 8px; font-family: var(--mono); color: var(--muted);
+  font-size: 8px; font-family: var(--mono); color: var(--mid);
   letter-spacing: .08em; text-transform: uppercase;
   padding: 8px 14px 4px;
 }

package/public/xfce.js

@@ -745,7 +745,7 @@
               : page === 'entries' && activeCol === col.id;
             var abbr = col.label.substring(0, 2);
             var item = makeDockItem(abbr, col.label, href, isActive, false);
-            item.querySelector('.xfce-dock-icon').style.cssText = 'font-size:9px;font-family:var(--mono);letter-spacing:-.02em;line-height:1;';
+            item.querySelector('.xfce-dock-icon').style.cssText = 'font-size:11px;font-family:var(--mono);letter-spacing:-.02em;line-height:1;opacity:1;';
             item.dataset.dockIdx = idx + 1;
 
             // Draft badge

package/src/server.js

@@ -57,13 +57,12 @@ export function createApp(podPath) {
     credentials: true,
   }));
 
-  app.use('/api/*', csrfMiddleware(ALLOWED_ORIGINS));
-
-  // Public routes
+  // Public routes (no CSRF needed — login can't be meaningfully CSRF-attacked)
   app.route('/api/auth', authRoutes);
 
-  // Protected routes
+  // Protected routes — CSRF + auth
   const api = new Hono();
+  api.use('*', csrfMiddleware(ALLOWED_ORIGINS));
   api.use('*', requireAuth);
   api.route('/collections',  collectionRoutes);
   api.route('/collections',  entryRoutes);