@geekity/cms 0.3.0 → 0.4.0

package/admin/pages/documents/editor.njk

@@ -0,0 +1,196 @@
+{# The editor behind /admin/posts/{slug} and /admin/pages/{slug}, and behind
+   .../new. One template for both kinds: `kind` decides whether there is a date
+   and the taxonomy fields, and the handler decides which buttons the form
+   carries. #}
+{% extends "layouts/shell.njk" %}
+
+{% block title %}{{ heading }}{% endblock %}
+
+{% block content %}
+  <h1>{{ heading }}</h1>
+
+  {% if error %}
+    <p class="admin-error">{{ error }}</p>
+  {% endif %}
+
+  {% if trashed %}
+    <p class="admin-note">This {{ kind.singular }} is in the trash. The public site is not serving it.</p>
+  {% endif %}
+
+  {% if scheduledFor %}
+    <p class="admin-note">Scheduled for {{ scheduledFor }}. The public site starts serving it then, and the followers are told then.</p>
+  {% endif %}
+
+  <form class="admin-editor" method="post" action="{{ saveUrl }}">
+    <input type="hidden" name="csrf_token" value="{{ csrfToken }}" />
+    {# The hash of the file this form was filled in from. A save whose hash no
+       longer matches what is on disk is refused rather than overwriting
+       somebody else's edit (doc-1). #}
+    <input type="hidden" name="hash" value="{{ form.hash }}" />
+    {# Which layout the preview renders through. The save handler ignores it. #}
+    <input type="hidden" name="type" value="{{ kind.type }}" />
+
+    <div class="admin-editor-main">
+      <label for="editor-title">Title</label>
+      <input id="editor-title" name="title" type="text" value="{{ form.title }}" required autofocus />
+
+      <label for="editor-body">Body</label>
+      <textarea id="editor-body" name="body" rows="24">{{ form.body }}</textarea>
+
+      {# Everything the editor's own script needs, on the element it hangs off.
+         With JavaScript off this is one button that posts the form to the
+         preview in a new tab, which is a preview. With it on, editor.js takes
+         the button over, puts CodeMirror on the textarea above and adds the
+         tabs and the upload control beside it. #}
+      <div
+        class="admin-editor-tools"
+        id="editor-enhance"
+        data-preview-url="{{ previewUrl }}"
+        data-upload-url="{{ uploadUrl }}"
+        data-kind="{{ kind.type }}"
+      >
+        <button
+          type="submit"
+          id="editor-preview-fallback"
+          class="admin-button-quiet"
+          formaction="{{ previewUrl }}"
+          formtarget="_blank"
+          formnovalidate
+        >Preview</button>
+      </div>
+    </div>
+
+    <div class="admin-editor-side">
+      <label for="editor-slug">Slug</label>
+      <input id="editor-slug" name="slug" type="text" value="{{ form.slug }}" />
+
+      <label for="editor-permalink">Permalink</label>
+      <input id="editor-permalink" name="permalink" type="text" value="{{ form.permalink }}" />
+      <p class="admin-hint">Leave it empty to let the {{ kind.singular }} take the URL its slug implies.</p>
+
+      {% if kind.dated %}
+        <label for="editor-date">Date</label>
+        <input id="editor-date" name="date" type="text" value="{{ form.date }}" />
+        {# The file holds a UTC instant; this field is that instant as the
+           site's own clock reads it, so the zone has to be on the screen. #}
+        <p class="admin-hint">Wall-clock time in {{ dateZone }}. Stored as UTC.</p>
+      {% endif %}
+
+      {% if kind.tagged %}
+        <label for="editor-tags">Tags</label>
+        <input id="editor-tags" name="tags" type="text" value="{{ form.tags }}" />
+        <p class="admin-hint">Separated by commas.</p>
+      {% endif %}
+
+      {% if kind.categorised %}
+        <label for="editor-categories">Categories</label>
+        <input id="editor-categories" name="categories" type="text" value="{{ form.categories }}" />
+        <p class="admin-hint">Separated by commas.</p>
+      {% endif %}
+
+      <label for="editor-description">Description</label>
+      <input id="editor-description" name="description" type="text" value="{{ form.description }}" />
+
+      {# Who the front matter says wrote this (TASK-67). A select of the site's
+         users rather than a free box, because after decision-14 the value is a
+         person rather than a string: it decides whose archive the post is on
+         and, once the actors land, whose followers hear about it. A file that
+         still names somebody who has no account keeps an option of its own, so
+         opening the editor cannot silently reattribute it. #}
+      <label for="editor-author">Author</label>
+      <select id="editor-author" name="author">
+        {% for choice in authors %}
+          <option value="{{ choice.value }}"{% if choice.chosen %} selected{% endif %}>{{ choice.label }}</option>
+        {% endfor %}
+      </select>
+
+      <p class="admin-check">
+        <input id="editor-draft" name="draft" type="checkbox" value="1"{% if form.draft %} checked{% endif %} />
+        <label for="editor-draft">Draft</label>
+      </p>
+
+      {# What this document says about comments, if anything. Three answers
+         rather than two: the site's own rules, always open, always closed. #}
+      <label for="editor-comments">Comments</label>
+      <select id="editor-comments" name="comments">
+        <option value="{{ commentSettings.site }}"{% if form.comments == commentSettings.site %} selected{% endif %}>Follow the site settings</option>
+        <option value="{{ commentSettings.open }}"{% if form.comments == commentSettings.open %} selected{% endif %}>Open</option>
+        <option value="{{ commentSettings.closed }}"{% if form.comments == commentSettings.closed %} selected{% endif %}>Closed</option>
+      </select>
+      <p class="admin-hint">
+        Writes <code>comments: true</code> or <code>comments: false</code> into the front matter,
+        which beats the site's switch and its closing window in both directions. Fediverse replies
+        are shown either way.
+      </p>
+
+      {% if kind.excludable %}
+        {# doc-2's eleventyExcludeFromCollections: still published and still at
+           its URL, but out of every collection a template lists from. #}
+        <p class="admin-check">
+          <input id="editor-exclude" name="exclude" type="checkbox" value="1"{% if form.exclude %} checked{% endif %} />
+          <label for="editor-exclude">Hide from collections</label>
+        </p>
+        <p class="admin-hint">Keeps the {{ kind.singular }} out of listings that gather content, without unpublishing it.</p>
+      {% endif %}
+
+      {% if kind.navigable %}
+        {# The page puts itself in the site menu, after the items the settings
+           screen names. #}
+        <p class="admin-check">
+          <input id="editor-navigation" name="navigation" type="checkbox" value="1"{% if form.navigation %} checked{% endif %} />
+          <label for="editor-navigation">Show in navigation</label>
+        </p>
+
+        <label for="editor-navigation-order">Menu order</label>
+        <input id="editor-navigation-order" name="navigation_order" type="text" inputmode="numeric" value="{{ form.navigationOrder }}" />
+        <p class="admin-hint">Puts this {{ kind.singular }} in the site header, after the items on the settings screen. A lower order comes first; leave it empty and it sorts by title after the ordered ones.</p>
+      {% endif %}
+
+      {% if kind.contactable %}
+        {# The page offers a contact form under its content (TASK-56). Where a
+           message goes is the contact address on the Settings screen; it is
+           never on this page or in its HTML. #}
+        <p class="admin-check">
+          <input id="editor-contact" name="contact" type="checkbox" value="1"{% if form.contact %} checked{% endif %} />
+          <label for="editor-contact">Contact form</label>
+        </p>
+        <p class="admin-hint">
+          Writes <code>contact: true</code> into the front matter and puts a name, email, subject
+          and message form under this {{ kind.singular }}. Messages arrive on the Messages screen
+          and are emailed to the contact address on Settings.
+        </p>
+      {% endif %}
+
+      <p class="admin-editor-buttons">
+        {% for button in actions %}
+          <button type="submit" name="action" value="{{ button.value }}">{{ button.label }}</button>
+        {% endfor %}
+        {% if viewUrl %}
+          <a class="admin-button admin-button-quiet" href="{{ viewUrl }}">View</a>
+        {% endif %}
+      </p>
+    </div>
+  </form>
+
+  {# CodeMirror, the preview tab and the upload control. A module script is
+     deferred by definition, so it runs after the form is in the document.
+     Nothing above depends on it: with the bundle missing or JavaScript off the
+     textarea and the Preview button are the whole editor.
+
+     The nonce is not what lets it run — `script-src 'self'` already does, and
+     the admin has no inline script at all. It is here so the bundle can read
+     it back off this element and hand it to CodeMirror, whose themes are
+     injected as <style> elements at runtime and would otherwise be refused by
+     `style-src`. Reading it through the element's `.nonce` property rather
+     than a data attribute keeps it out of reach of a CSS selector. #}
+  <script
+    type="module"
+    id="editor-script"
+    src="{{ assetPrefix }}editor.js"
+    nonce="{{ cspNonce }}"
+  ></script>
+
+  {# The slug and permalink auto-fill, in a file of its own so the policy never
+     has to allow an inline script. #}
+  <script defer src="{{ assetPrefix }}slug.js"></script>
+{% endblock %}

package/admin/{layouts/document-list.njk → pages/documents/list.njk}

@@ -1,5 +1,14 @@
 {# The listing behind /admin/posts and /admin/pages. One template for both:
-   `kind` says which, and whether the table has a date column and a tag one. #}
+   `kind` says which, and whether the table has a date column and taxonomy
+   ones.
+
+   There is no `pages/posts/` or `pages/categories/` for the same reason.
+   Posts, Pages, Categories and Tags are four menu entries over three
+   templates — this listing, the editor beside it and the taxonomy screen —
+   because a post and a page differ by a `kind`, not by a screen. A folder per
+   menu entry would mean either a second copy of each template or a re-export
+   that exists only to make the directory look like the menu, so the folder is
+   named after what the screens are about instead. #}
 {% extends "layouts/shell.njk" %}
 
 {% block title %}{{ kind.plural }}{% endblock %}
@@ -24,6 +33,9 @@
           {% if kind.tagged %}
             <th scope="col">Tags</th>
           {% endif %}
+          {% if kind.categorised %}
+            <th scope="col">Categories</th>
+          {% endif %}
           {% if kind.dated %}
             <th scope="col">Date</th>
           {% else %}
@@ -36,11 +48,14 @@
       <tbody>
         {% for document in documents %}
           <tr>
-            <td><a href="{{ document.editUrl }}">{{ document.title }}</a></td>
+            <td><a href="{{ document.editUrl }}">{{ document.title }}</a>{% if document.role %} &mdash; <span class="admin-page-role">{{ document.role }}</span>{% endif %}</td>
             <td>{{ document.author }}</td>
             {% if kind.tagged %}
               <td>{{ document.tags }}</td>
             {% endif %}
+            {% if kind.categorised %}
+              <td>{{ document.categories }}</td>
+            {% endif %}
             {% if kind.dated %}
               <td>{{ document.date | date('html') }}</td>
             {% else %}
@@ -51,6 +66,8 @@
                 <span class="admin-status admin-status-trashed">Trash</span>
               {% elif document.draft %}
                 <span class="admin-status admin-status-draft">Draft</span>
+              {% elif document.scheduled %}
+                <span class="admin-status admin-status-scheduled">Scheduled</span>
               {% else %}
                 <span class="admin-status">Published</span>
               {% endif %}

package/admin/pages/documents/taxonomy.njk

@@ -0,0 +1,95 @@
+{# /admin/tags and /admin/categories: every term in use, what carries it, and
+   the three things that can be done to it — rename, merge and delete. One
+   template for both taxonomies; `kind` says which. #}
+{% extends "layouts/shell.njk" %}
+
+{% block title %}{{ heading }}{% endblock %}
+
+{% block content %}
+  <h1>{{ heading }}</h1>
+
+  {# Above the table rather than under the field it came from: a refusal may be
+     about a term the table no longer has a row for. #}
+  {% if problems.to %}
+    <p class="admin-error">{{ problems.to }}</p>
+  {% endif %}
+
+  {% if confirm %}
+    <form class="admin-settings" method="post" action="{{ renameUrl }}">
+      <input type="hidden" name="csrf_token" value="{{ csrfToken }}" />
+      <input type="hidden" name="{{ fields.term }}" value="{{ confirm.term }}" />
+      <input type="hidden" name="{{ fields.to }}" value="{{ confirm.to }}" />
+      <input type="hidden" name="{{ fields.confirm }}" value="1" />
+
+      <h2>Merge “{{ confirm.term }}” into “{{ confirm.to }}”?</h2>
+
+      <p>
+        There is already a {{ label }} called “{{ confirm.to }}”, on
+        {{ confirm.targetFiles }} {% if confirm.targetFiles == 1 %}file{% else %}files{% endif %}.
+        Renaming “{{ confirm.term }}” merges the
+        {{ confirm.files }} {% if confirm.files == 1 %}file{% else %}files{% endif %} carrying it
+        into that one. A file that already carries both keeps it once.
+      </p>
+
+      <p class="admin-settings-buttons">
+        <button type="submit">Merge them</button>
+        <a href="{{ listUrl }}">Cancel</a>
+      </p>
+    </form>
+  {% endif %}
+
+  {% if terms.length == 0 %}
+    <p>Nothing carries a {{ label }} yet.</p>
+  {% else %}
+    <table class="admin-list">
+      <thead>
+        <tr>
+          <th scope="col">{{ kind.singular | capitalize }}</th>
+          <th scope="col">Posts</th>
+          <th scope="col">Files</th>
+          <th scope="col">Rename</th>
+          <th scope="col">Actions</th>
+        </tr>
+      </thead>
+      <tbody>
+        {% for entry in terms %}
+          <tr>
+            <td><a href="{{ entry.archiveUrl }}">{{ entry.term }}</a></td>
+            <td>{{ entry.published }}</td>
+            <td>{{ entry.total }}</td>
+            <td>
+              <form class="admin-inline" method="post" action="{{ renameUrl }}">
+                <input type="hidden" name="csrf_token" value="{{ csrfToken }}" />
+                <input type="hidden" name="{{ fields.term }}" value="{{ entry.term }}" />
+                <label class="admin-visually-hidden" for="rename-{{ loop.index }}">
+                  Rename {{ entry.term }} to
+                </label>
+                <input
+                  id="rename-{{ loop.index }}"
+                  name="{{ fields.to }}"
+                  type="text"
+                  value="{% if form.term == entry.term %}{{ form.to }}{% endif %}"
+                  required
+                />
+                <button type="submit">Rename</button>
+              </form>
+            </td>
+            <td class="admin-actions">
+              <form method="post" action="{{ deleteUrl }}">
+                <input type="hidden" name="csrf_token" value="{{ csrfToken }}" />
+                <input type="hidden" name="{{ fields.term }}" value="{{ entry.term }}" />
+                <button type="submit">Delete</button>
+              </form>
+            </td>
+          </tr>
+        {% endfor %}
+      </tbody>
+    </table>
+
+    <p class="admin-hint">
+      Renaming, merging and deleting rewrite the front matter of every file carrying the
+      {{ label }} — drafts, scheduled posts and the trash included — and tell the feeds and the
+      fediverse about each published post that changed. The Files column is how many that is.
+    </p>
+  {% endif %}
+{% endblock %}

package/admin/pages/federation/followers.njk

@@ -0,0 +1,238 @@
+{# /admin/federation: who this site's people are to the fediverse, who follows
+   each of them, what arrived in the inbox, and how what went out landed. #}
+{% extends "layouts/shell.njk" %}
+
+{% block title %}Federation{% endblock %}
+
+{% block content %}
+  <h1>Federation</h1>
+
+  {% if actors.length %}
+    {% for actor in actors %}
+      <section class="admin-panel admin-actor">
+        <h2>{{ actor.handle }}</h2>
+        <div class="admin-actor-identity">
+          {% if actor.avatarUrl %}
+            <img class="admin-avatar admin-avatar-large" src="{{ actor.avatarUrl }}" alt="" width="96" height="96" />
+          {% else %}
+            <span class="admin-avatar admin-avatar-large admin-avatar-blank" aria-hidden="true"></span>
+          {% endif %}
+          <p class="admin-actor-handle">{{ actor.name }}</p>
+        </div>
+        <dl class="admin-actor-fields">
+          <div>
+            <dt>Summary</dt>
+            <dd>{% if actor.summary %}{{ actor.summary }}{% else %}<span class="admin-empty">None set.</span>{% endif %}</dd>
+          </div>
+          <div>
+            <dt>Actor</dt>
+            <dd><a href="{{ actor.actorId }}">{{ actor.actorId }}</a></dd>
+          </div>
+          <div>
+            <dt>Profile</dt>
+            <dd><a href="{{ actor.url }}">{{ actor.url }}</a></dd>
+          </div>
+          <div>
+            <dt>Followers</dt>
+            <dd>{{ actor.followerCount }}</dd>
+          </div>
+        </dl>
+
+        {% if actor.followers.length %}
+          <table class="admin-list">
+            <thead>
+              <tr>
+                <th scope="col">Follower</th>
+                <th scope="col">Handle</th>
+                <th scope="col">Followed</th>
+              </tr>
+            </thead>
+            <tbody>
+              {% for follower in actor.followers %}
+                <tr>
+                  <td class="admin-follower">
+                    {% if follower.iconUrl %}
+                      <img class="admin-avatar" src="{{ follower.iconUrl }}" alt="" width="32" height="32" loading="lazy" />
+                    {% else %}
+                      <span class="admin-avatar admin-avatar-blank" aria-hidden="true"></span>
+                    {% endif %}
+                    <a href="{{ follower.url }}">{{ follower.name }}</a>
+                  </td>
+                  <td>{{ follower.handle }}</td>
+                  <td>{{ follower.followedAt | date('html') }}</td>
+                </tr>
+              {% endfor %}
+            </tbody>
+          </table>
+        {% else %}
+          <p class="admin-empty">Nobody follows {{ actor.name }} yet.</p>
+        {% endif %}
+      </section>
+    {% endfor %}
+  {% else %}
+    <section class="admin-panel admin-actor">
+      <h2>Actors</h2>
+      <p class="admin-empty">The site has no users, so it has no actors.</p>
+    </section>
+  {% endif %}
+
+  <section class="admin-panel">
+    <h2>Relays</h2>
+    {% if relays.length %}
+      <table class="admin-list">
+        <thead>
+          <tr>
+            <th scope="col">Relay</th>
+            <th scope="col">State</th>
+            <th scope="col">Since</th>
+            <th scope="col">Last delivery</th>
+            <th scope="col">Actions</th>
+          </tr>
+        </thead>
+        <tbody>
+          {% for relay in relays %}
+            <tr>
+              <td>
+                {% if relay.actorId %}
+                  <a href="{{ relay.actorId }}">{{ relay.inboxId }}</a>
+                {% else %}
+                  {{ relay.inboxId }}
+                {% endif %}
+                {% if relay.reason %}
+                  <p class="admin-hint">{{ relay.reason }}</p>
+                {% endif %}
+              </td>
+              <td>
+                {% if relay.state == 'rejected' %}
+                  <span class="admin-status admin-status-failed">{{ relay.stateLabel }}</span>
+                {% else %}
+                  {{ relay.stateLabel }}
+                {% endif %}
+              </td>
+              <td>{{ relay.updatedAt | date('html') }}</td>
+              <td>
+                {% if relay.lastDelivery %}
+                  {{ relay.lastDelivery.activityType }} {{ relay.lastDelivery.status }}
+                  <span class="admin-inbox-when">{{ relay.lastDelivery.attemptedAt | date('html') }}</span>
+                  {% if relay.lastDelivery.error %}
+                    <p class="admin-hint">{{ relay.lastDelivery.error }}</p>
+                  {% endif %}
+                {% else %}
+                  <span class="admin-empty">Nothing yet.</span>
+                {% endif %}
+              </td>
+              <td class="admin-actions">
+                {% if relay.retriable %}
+                  <form method="post" action="{{ relayRetryUrl }}">
+                    <input type="hidden" name="csrf_token" value="{{ csrfToken }}" />
+                    <input type="hidden" name="{{ fields.relay }}" value="{{ relay.inboxId }}" />
+                    <button type="submit">Retry</button>
+                  </form>
+                {% endif %}
+              </td>
+            </tr>
+          {% endfor %}
+        </tbody>
+      </table>
+      <p class="admin-hint">
+        A relay boosts every public post it is sent on to instances nobody here
+        follows. The list lives on the Settings screen; Retry sends the follow
+        again to one that is still waiting.
+      </p>
+    {% else %}
+      <p class="admin-empty">The site subscribes to no relay. Add one on the Settings screen.</p>
+    {% endif %}
+  </section>
+
+  <section class="admin-panel">
+    <h2>Recent activity</h2>
+    {% if inbox.length %}
+      <ul class="admin-inbox">
+        {% for entry in inbox %}
+          <li>
+            <span class="admin-inbox-actor"><a href="{{ entry.actorId }}">{{ entry.actorLabel }}</a></span>
+            {% if entry.remoteUrl %}
+              <a href="{{ entry.remoteUrl }}">{{ entry.action }}</a>
+            {% else %}
+              {{ entry.action }}
+            {% endif %}
+            {% if entry.post %}
+              <a href="{{ entry.post.editUrl }}">{{ entry.post.title }}</a>
+            {% else %}
+              <span class="admin-empty">something of ours</span>
+            {% endif %}
+            <span class="admin-inbox-when">{{ entry.receivedAt | date('html') }}</span>
+          </li>
+        {% endfor %}
+      </ul>
+    {% else %}
+      <p class="admin-empty">Nothing has arrived yet: no likes, boosts or replies.</p>
+    {% endif %}
+  </section>
+
+  <section class="admin-panel">
+    <h2>Delivery</h2>
+    {% if posts.length %}
+      <table class="admin-list">
+        <thead>
+          <tr>
+            <th scope="col">Post</th>
+            <th scope="col">Announced by</th>
+            <th scope="col">Last activity</th>
+            <th scope="col">Sent</th>
+            <th scope="col">Queued</th>
+            <th scope="col">Failed</th>
+            <th scope="col">Webmentions</th>
+            <th scope="col">Actions</th>
+          </tr>
+        </thead>
+        <tbody>
+          {% for row in posts %}
+            <tr>
+              <td>
+                <a href="{{ row.post.editUrl }}">{{ row.post.title }}</a>
+                {% if row.trashed %}<p class="admin-hint">In the trash.</p>{% endif %}
+              </td>
+              <td>{% if row.author %}@{{ row.author }}{% else %}<span class="admin-empty">—</span>{% endif %}</td>
+              {% if row.lastActivity %}
+                <td>{{ row.lastActivity.activityType }} <span class="admin-inbox-when">{{ row.lastActivity.attemptedAt | date('html') }}</span></td>
+                <td>{{ row.lastActivity.counts.sent }}</td>
+                <td>{{ row.lastActivity.counts.queued }}</td>
+                <td>{% if row.lastActivity.counts.failed %}<span class="admin-status admin-status-failed">{{ row.lastActivity.counts.failed }}</span>{% else %}0{% endif %}</td>
+              {% else %}
+                <td><span class="admin-empty">Nothing recorded.</span></td>
+                <td>—</td>
+                <td>—</td>
+                <td>—</td>
+              {% endif %}
+              <td>
+                {% if row.webmentions.sent or row.webmentions["none"] or row.webmentions.failed %}
+                  {{ row.webmentions.sent }} told{% if row.webmentions["none"] %}, {{ row.webmentions["none"] }} take none{% endif %}{% if row.webmentions.failed %}, <span class="admin-status admin-status-failed">{{ row.webmentions.failed }} failed</span>{% endif %}
+                {% else %}
+                  <span class="admin-empty">—</span>
+                {% endif %}
+              </td>
+              <td class="admin-actions">
+                <form method="post" action="{{ resendUrl }}">
+                  <input type="hidden" name="csrf_token" value="{{ csrfToken }}" />
+                  <input type="hidden" name="{{ fields.slug }}" value="{{ row.slug }}" />
+                  <button type="submit">Resend</button>
+                </form>
+              </td>
+            </tr>
+          {% endfor %}
+        </tbody>
+      </table>
+      <p class="admin-hint">
+        Resending builds the post again from its file and sends it to every one
+        of its author's followers and every accepted relay the site has now, and tells every
+        page the post links to at the same time: an update for a
+        published post, a withdrawal for one in the trash. The outcomes are a
+        cache, so a database deleted since leaves the posts listed with nothing
+        recorded against them.
+      </p>
+    {% else %}
+      <p class="admin-empty">No post has been announced to the fediverse yet.</p>
+    {% endif %}
+  </section>
+{% endblock %}