// Package adminconsole renders the server-side operator console mounted by the // backend under the `/_gm` route group. // // The console is a multi-page, server-rendered surface built on the standard // library's html/template package: navigation is driven by request path and // query, state changes are submitted with HTML forms and answered with a // Post/Redirect/Get redirect. The package owns three concerns and nothing // transport-specific: // // - Renderer composes the shared layout with one content page per route. // - CSRF issues and verifies the stateless anti-CSRF token embedded in every // state-changing form. // - Assets exposes the embedded stylesheet served under `/_gm/assets/`. // // The gin glue (route registration, Basic Auth, the CSRF guard middleware, and // the per-page handlers) lives in package server; this package stays free of // the web framework so it can be unit-tested in isolation. package adminconsole