4 Commits

Include renames

Author	SHA1	Message	Date
John O'Keefe	431fec05ad	feat(security): library visibility enforced at the source; per-library series; annotation ownership; admin user creation ... The family-lens hardening: library_visibility was only enforced where file bytes flowed (download/reader/OPDS) — metadata surfaces leaked hidden libraries to any authenticated account, and registration was open by default with no admin-side user creation. - Series are grouped PER LIBRARY now (same name in two libraries = two entries: manga adaptations / LN splits no longer merge); /api/series aggregates only the requester's VISIBLE libraries and /api/series/books REQUIRES a visible library_id (breaking contract; web + app clients updated in the same change). - /api/media-items, item detail, and the reader content endpoints (chapters/panels/outline/THUMBNAILS — page images leaked unguarded next to a gated GetPage) all enforce the visible set; resolveLibrary no longer honors a hand-typed library_id outside the visible set. - Annotation/note/bookmark mutations (update/delete/tombstone, sync LWW paths incl. conflict resolution) carry ownership predicates: another account's bare row id is a 404, not a silent delete. - Admin user creation: POST /api/auth/users (AdminMiddleware) + a Create User card in the admin Users UI — accounts stay creatable with self-service registration OFF, which is now the schema default (fresh installs; the first-admin bootstrap exception is unchanged). - Tests: series contract re-pinned (per-library, visibility 403s), new ownership + admin-create integration suites, OPDS all=1 test now passes an explicit page size (shared-DB growth made the fresh books fall off page 1), device-cap helper switched to the admin endpoint.	2026-10-13 12:03:01 -04:00
John O'Keefe	b9f797789f	feat: registration_enabled admin setting — hides signup surfaces, gates the API ... One boolean (Security > Public Registration) switches the whole public signup lifecycle: front page + login links, the logged-out sidebar's Create-an-account (via a package-level templates hook so shared page templates keep their signatures), GET /register -> 302 /login, and an early 403 on POST /api/auth/register. First-user exception preserved: zero admins keeps every route and link reachable for bootstrapping — same 'users exist' reasoning as the setup gate. Admin user creation is unaffected by design. Live E2E verified: flag off hides all surfaces and blocks the POST (403), flag on restores them (201); the admin UI renders the row automatically.	2026-10-03 23:54:07 -04:00
John O'Keefe	9e4cc4efd0	chore(templates): regenerate templ outputs and rebuilt static assets ... Regenerates all *_templ.go files after the templ generate pass (version stamp updates across the board; functional changes only in admin_archived_templ.go and admin_library_templ.go, which were committed with their features). web/static/style.css and web/static/htmx.min.js are refreshed outputs of npm run build (tailwind pass over the current templates; htmx copied from the current node_modules version).	2026-09-21 18:10:47 -04:00
john-okeefe	8004cb81a5	feat(ui): admin Hash Conflicts page and nav entry ... New /admin/hash-conflicts page (admin-only) listing pending content-duplicate groups. Each group card shows the library, a shortened SHA-256, and one row per copy with title, author, path, size, and per-copy reading-data counts (progress, highlights, bookmarks, notes, collections) - copies that own user data are highlighted so the keep choice is informed. Per copy: 'Keep this copy' merges the other copies' child rows into it and deletes them. Per group: 'Keep both' for intentional duplicates. Both confirm first, resolve via htmx POST, and swap the card for a resolved confirmation inline. The confirmation fragment is built inline in the handler rather than the templates package (templates imports handlers; a back-import would be a cycle). Empty state shown when no conflicts are pending. Adds a 'Hash Conflicts' entry to the admin sidebar section between Libraries and Users.	2026-08-14 08:52:33 -04:00