Ilia Denisov
aafdd46a4b
Server-rendered admin console in the backend at /_gm (internal/adminconsole), fronted on the gateway's public listener by Basic-Auth + a verbatim reverse proxy (mounted on the edge mux below the h2c wrap). A same-origin check guards its POSTs; no operator identity is tracked. This supersedes the Stage 6 gateway-fronts- /api/v1/admin model: GATEWAY_ADMIN_ADDR and the backend /api/v1/admin ping are dropped and gateway/internal/admin is repurposed to the verbatim proxy. - Complaints: migration 00008 (+ jetgen) adds disposition/resolution_note/ resolved_at/applied_in_version + the deferred status CHECK; resolution feeds a query-derived pending dictionary-change pipeline (marked applied after a reload). - Dictionary hot-reload: per-version subdir BACKEND_DICT_DIR/<version>/ via the new Registry.LoadAvailable; engine.OpenWithVersions restores resident versions on restart. Partially addresses TODO-2. - Broadcasts: a backend Telegram-connector client (internal/connector, BACKEND_CONNECTOR_ADDR) for SendToUser / SendToGameChannel (discharges the Stage 9 forward-note). - Admin reads: account.ListAccounts/CountAccounts/Identities and game.ListGames/CountGames/GameByID/ListComplaints/GetComplaint/CountComplaints/ ResolveComplaint/DictionaryChanges/MarkChangesApplied. - Tests: adminconsole render, engine reload, same-origin guard, gateway verbatim proxy + h2c console mount, inttest complaint pipeline + list/count + /_gm console. - Docs: PLAN (Stage 10 done + refinements + TODO-2), ARCHITECTURE §1/§5/§6/§12/§13, FUNCTIONAL (+_ru), TESTING, backend/gateway READMEs.
10 lines
663 B
Go
10 lines
663 B
Go
// Package adminconsole renders the backend's server-side admin console: a small,
|
|
// dependency-free set of Go html/template pages plus one embedded stylesheet,
|
|
// served under /_gm. It owns the rendering and the page view models only; the gin
|
|
// handlers (internal/server) fetch the domain data, populate the view models and
|
|
// gate the surface — the gateway puts HTTP Basic-Auth in front of /_gm and a
|
|
// same-origin check guards the POST actions (docs/ARCHITECTURE.md §12). It mirrors
|
|
// the shape of galaxy-game's adminconsole package, minus the per-operator CSRF
|
|
// token and operator name (this console tracks no operator identity).
|
|
package adminconsole
|