@geekity/cms 0.34.0 → 0.36.1

package/admin/pages/tools/export.njk

@@ -29,61 +29,64 @@
       site, wait until none are, and look again here.
     </p>
 
-    {% if job %}
-      <section id="export-status" aria-labelledby="export-status-heading">
-        {% call card() %}
-          <h2 id="export-status-heading" class="card-title">Latest export</h2>
-          {% call jobStatus(job, exportUrl, verb='Exported', unit='files') %}
-            {% if result %}
-              <p>
-                {{ result.files }} {% if result.files == 1 %}file{% else %}files{% endif %},
-                {{ result.size }} before compression, {% if result.credentials %}with{% else %}without{% endif %} credentials.
-              </p>
-              {% if result.credentialsLeftOut.length %}
-                <p>Credentials left out: {{ result.credentialsLeftOut | join(', ') }}.</p>
-              {% endif %}
-              {% if result.undeclared.length %}
-                <p>Left out because no declaration says what they are:</p>
-                <ul class="list-disc pl-6">
-                  {% for file in result.undeclared %}<li><code class="break-all">{{ file }}</code></li>{% endfor %}
-                </ul>
-              {% endif %}
-              {% if result.notCarried.length %}
-                <p>Left out because an export holds only regular files:</p>
-                <ul class="list-disc pl-6">
-                  {% for entry in result.notCarried %}<li><code class="break-all">{{ entry.path }}</code>, {{ entry.why }}</li>{% endfor %}
-                </ul>
-              {% endif %}
-              {% if archive %}
+    <div class="flex flex-col gap-6" data-job-region>
+      {% if job %}
+        <section id="export-status" aria-labelledby="export-status-heading">
+          {% call card() %}
+            <h2 id="export-status-heading" class="card-title">Latest export</h2>
+            {% call jobStatus(job, exportUrl, verb='Exported', unit='files') %}
+              {% if result %}
                 <p>
-                  <code class="break-all">{{ archive.name }}</code> is deleted at
-                  <time datetime="{{ archive.expiresAt }}">{{ archive.expiresAt | date('datetime') }}</time>,
-                  or when the next export finishes.
+                  {{ result.files }} {% if result.files == 1 %}file{% else %}files{% endif %},
+                  {{ result.size }} before compression, {% if result.credentials %}with{% else %}without{% endif %} credentials.
                 </p>
-                <div>{{ buttonLink('Download ' + archive.size, downloadUrl, color='primary') }}</div>
-              {% else %}
-                <p>The archive was deleted 24 hours after it was written, or a later export replaced it. Export again to download one.</p>
+                {% if result.credentialsLeftOut.length %}
+                  <p>Credentials left out: {{ result.credentialsLeftOut | join(', ') }}.</p>
+                {% endif %}
+                {% if result.undeclared.length %}
+                  <p>Left out because no declaration says what they are:</p>
+                  <ul class="list-disc pl-6">
+                    {% for file in result.undeclared %}<li><code class="break-all">{{ file }}</code></li>{% endfor %}
+                  </ul>
+                {% endif %}
+                {% if result.notCarried.length %}
+                  <p>Left out because an export holds only regular files:</p>
+                  <ul class="list-disc pl-6">
+                    {% for entry in result.notCarried %}<li><code class="break-all">{{ entry.path }}</code>, {{ entry.why }}</li>{% endfor %}
+                  </ul>
+                {% endif %}
+                {% if archive %}
+                  <p>
+                    <code class="break-all">{{ archive.name }}</code> is deleted at
+                    <time datetime="{{ archive.expiresAt }}">{{ archive.expiresAt | date('datetime') }}</time>,
+                    or when the next export finishes.
+                  </p>
+                  <div>{{ buttonLink('Download ' + archive.size, downloadUrl, color='primary') }}</div>
+                {% else %}
+                  <p>The archive was deleted 24 hours after it was written, or a later export replaced it. Export again to download one.</p>
+                {% endif %}
               {% endif %}
-            {% endif %}
+            {% endcall %}
           {% endcall %}
-        {% endcall %}
-      </section>
-    {% endif %}
+        </section>
+      {% endif %}
 
-    {% if not job or not job.active %}
-      {% call card(title='Export the site') %}
-        <form method="post" action="{{ exportUrl }}">
-          <input type="hidden" name="csrf_token" value="{{ csrfToken }}" />
-          {{ field.checkbox('export-with-credentials', fields.withCredentials,
-               'Include credentials', checked=withCredentials,
-               hint='API keys and logins for other services, such as an email provider. Left out, they are typed in again after an import.') }}
-          {{ field.password('export-password', fields.password, 'Your password',
-               error=problem, autocomplete='current-password', required=true) }}
-          {% call cardActions() %}
-            {{ button('Export', type='submit', color='primary') }}
-          {% endcall %}
-        </form>
-      {% endcall %}
-    {% endif %}
+      {% if not job or not job.active %}
+        {% call card(title='Export the site') %}
+          <form method="post" action="{{ exportUrl }}">
+            <input type="hidden" name="csrf_token" value="{{ csrfToken }}" />
+            {{ field.checkbox('export-with-credentials', fields.withCredentials,
+                 'Include credentials', checked=withCredentials,
+                 hint='API keys and logins for other services, such as an email provider. Left out, they are typed in again after an import.') }}
+            {{ field.password('export-password', fields.password, 'Your password',
+                 error=problem, autocomplete='current-password', required=true) }}
+            {% call cardActions() %}
+              {{ button('Export', type='submit', color='primary') }}
+            {% endcall %}
+          </form>
+        {% endcall %}
+      {% endif %}
+    </div>
   </div>
+  <script defer src="{{ assetPrefix }}job-status.js"></script>
 {% endblock %}

package/admin/pages/tools/maintenance.njk

@@ -3,6 +3,7 @@
 {% from "components/alert.njk" import alert %}
 {% from "components/button.njk" import button %}
 {% from "components/card.njk" import card, cardActions %}
+{% from "components/job-status.njk" import jobStatus %}
 
 {% block title %}{{ heading }}{% endblock %}
 
@@ -47,5 +48,53 @@
       <code>geekity maintenance on</code> and <code>off</code> at the command line turn the
       same switch, and a running site notices either within a second.
     </p>
+
+    <section id="strip-metadata" aria-labelledby="strip-metadata-heading" data-job-region>
+      {% call card() %}
+        <h2 id="strip-metadata-heading" class="card-title">Location and camera metadata</h2>
+        <p class="max-w-prose">
+          Location and camera metadata is removed from pictures and videos as they are
+          uploaded. Files uploaded before that keep theirs until this sweep runs over
+          <code>content/uploads/</code>. It runs in the background, leaves a clean file
+          as it is, and keeps each file's modification time.
+        </p>
+        {% if sweep %}
+          {% call jobStatus(sweep, saveUrl + '#strip-metadata', verb='Checked', unit='files') %}
+            {% if sweepReport %}
+              <p>
+                Checked {{ sweepReport.checked }} {% if sweepReport.checked == 1 %}file{% else %}files{% endif %}:
+                {{ sweepReport.stripped.length }} stripped, {{ sweepReport.clean }} already clean,
+                {{ sweepReport.unreadable.length }} unreadable.
+              </p>
+              {% if sweepReport.stripped.length %}
+                <h3 class="font-semibold">Stripped</h3>
+                <ul class="list-disc pl-6">
+                  {% for file in sweepReport.stripped %}
+                    <li><code class="break-all">{{ file.path }}</code>: removed {{ file.removed | join(', ') }}</li>
+                  {% endfor %}
+                </ul>
+              {% endif %}
+              {% if sweepReport.unreadable.length %}
+                <h3 class="font-semibold">Left as they were</h3>
+                <ul class="list-disc pl-6">
+                  {% for file in sweepReport.unreadable %}
+                    <li><code class="break-all">{{ file.path }}</code>: {{ file.problem }}</li>
+                  {% endfor %}
+                </ul>
+              {% endif %}
+            {% endif %}
+          {% endcall %}
+        {% endif %}
+        {% if not sweep or not sweep.active %}
+          <form method="post" action="{{ stripMetadataUrl }}">
+            <input type="hidden" name="csrf_token" value="{{ csrfToken }}" />
+            {% call cardActions() %}
+              {{ button('Run the sweep again' if sweep else 'Strip metadata from every upload', type='submit', color='primary') }}
+            {% endcall %}
+          </form>
+        {% endif %}
+      {% endcall %}
+    </section>
   </div>
+  <script defer src="{{ assetPrefix }}job-status.js"></script>
 {% endblock %}

package/admin/pages/users/edit.njk

@@ -15,6 +15,7 @@
 {% from "components/badge.njk" import badge, status %}
 {% from "components/button.njk" import button %}
 {% from "components/card.njk" import card, cardActions %}
+{% from "components/upload.njk" import uploadControl %}
 
 {% block title %}Edit {{ account.username }}{% endblock %}
 
@@ -97,6 +98,7 @@
     {% set avatarHint %}A path such as <code>/uploads/2026/09/me.jpg</code>, or a full URL.{% endset %}
     {{ field.text('profile-avatar', fields.avatar, 'Avatar', account.profile.avatar,
          hintHtml=avatarHint) }}
+    {{ uploadControl('field', 'profile-avatar', uploadsUrl, images=true) }}
 
     {{ field.text('profile-job-title', fields.jobTitle, 'Job title', account.profile.jobTitle,
          hint='What they do, printed beside the name on the archive.') }}
@@ -280,4 +282,5 @@
     {% endif %}
   {% endcall %}
   </div>
+  <script defer src="{{ assetPrefix }}upload-drop.js"></script>
 {% endblock %}

package/admin/src/admin.css

@@ -3,6 +3,8 @@
 @source '../components';
 @source '../pages';
 @source '../../editor/look.ts';
+@source '../static/media.js';
+@source '../static/upload-drop.js';
 
 @plugin 'daisyui' {
   themes: