cccms/app/controllers, branch erdgeist-modernize-auth[no description]https://erdgeist.org/gitweb/cccms/atom?h=erdgeist-modernize-auth2026-07-16T22:42:54ZCutover to new Recent Changes widget2026-07-16T22:42:54Zerdgeisterdgeist@erdgeist.org2026-07-16T22:42:54Zurn:sha1:c810d1aa93a267dd8fcf8984c5d0b125629efa31Split current_unique_name in a setter and an accessor2026-07-16T13:12:07Zerdgeisterdgeist@erdgeist.org2026-07-16T13:12:07Zurn:sha1:b701669d0d9a5d7be01f99b8e725c05c6c5d52ce
Also clean up some instance variable assignments on the way.
Add a reader for the action log at admin/log2026-07-16T01:30:01Zerdgeisterdgeist@erdgeist.org2026-07-16T01:30:01Zurn:sha1:190daaa8a0bb79e750894b83e31b9d99f7d900a4
NodeActionsController#index lists entries newest-first, filterable
by node_id or user_id -- the two zoom shapes the log was designed
around. Rendering goes through NodeActionsHelper.action_summary,
which builds one sentence per entry from metadata alone, so entries
referencing deleted users or nodes render from their snapshots;
live associations only upgrade names to links. Unknown verbs
degrade to a generic sentence rather than an error, since the log
outlives its vocabulary. The helper is the escaping boundary:
every metadata value passes through h() before assembly.
Actor names link to the log's own user zoom rather than the unused
users page -- inspecting a suspicious user's other actions is the
intended workflow. Publish entries with a translation_diff expose
a collapsed per-locale change table linking out to the revision
itself. Sentences live in en.yml/de.yml following the existing
widget-string convention. nodes#show links to its node's zoomed
log.
Record the full lifecycle contract in NodeAction entries2026-07-16T00:40:03Zerdgeisterdgeist@erdgeist.org2026-07-16T00:40:03Zurn:sha1:c0c9250141c2fa64fed967b8b9ad9bada3694c3d
A contract comment above NodeAction.record! now specifies every
verb's metadata shape. NodeAction.head_diff computes the publish
diff between an outgoing head and its replacement -- default-locale
title pair always, author/tags pairs and template/assets/abstract/
body flags only when changed, and a per-locale translation_diff
with added/removed/changed status. It is a pure function of its two
pages, shared by publish, rollback, and the future backfill, and
reads translation rows directly so fallbacks never masquerade as
content.
publish entries carry via ("draft" or "revision"); restore_revision!
is now transactional, takes the acting user, and logs through the
same diff. Staged slug/parent changes applied at publish log a move
entry with the path pair. Node creation logs a create entry with
initial title and path. The draft-scoped translation_destroy writer
is retired -- locale removal is recorded by the publish diff, where
it becomes public fact.
Provide parent_unique_name in nodes#new if parent is already pre-set2026-07-15T23:40:37Zerdgeisterdgeist@erdgeist.org2026-07-15T23:40:37Zurn:sha1:fb7b8233f1bbf7acb88d48f96e6f81cefe168d1cAdd NodeAction: an append-only log of who did what to a node2026-07-15T02:23:09Zerdgeisterdgeist@erdgeist.org2026-07-14T23:41:34Zurn:sha1:d56155231814633e04f856d22646fea24ef97011
node_id/page_id/user_id are lookup and ordering only -- all three
nullify on delete, so an entry outlives its actor and its subject.
Everything that must survive those deletions lives in a mandatory
metadata jsonb written once at creation: the actor's username, the
node's human-readable name (pinned to the default locale), and
action-specific extras such as publish's title from/to.
NodeAction.record! is the single constructor, so every entry gets
the same baseline metadata without each call site re-implementing
it. occurred_at is one field for live and backfilled entries alike;
inferred_from distinguishes them -- nil means witnessed at the
moment it happened, populated names how a backfilled entry was
estimated.
Instrumented so far: publish (crediting the actual publisher,
threaded through from the controller -- previously nobody had the
act of publishing recorded anywhere), revert's discard_autosave and
destroy_draft branches, and translation destroy. publish_draft! now
runs in a transaction so the promotion and its log entry land
together. The remaining verbs follow once this mechanism has proven
itself.
Supply related-asset URLs/name and public inline-image CSS2026-07-14T16:30:40Zerdgeisterdgeist@erdgeist.org2026-07-14T15:25:37Zurn:sha1:6ddc9d73f1299cdeb90bc88ed0bb53821c4825aa
RelatedAssetsController#create's JSON includes large_url,
original_url, and name alongside thumb_url/url; the related-asset
list items in both editors carry them as data-large-url,
data-original-url, and data-name.
ccc.css gets the public-facing .inline-image--full/--half/--left/
--right rules -- admin.css and TinyMCE's content_style cover the
cockpit and in-editor renderings respectively.
Make revisions locale aware2026-07-14T00:17:04Zerdgeisterdgeist@erdgeist.org2026-07-14T00:17:04Zurn:sha1:88ebeaac7fcf140cbab489e841bf9c197f84c4eaStore return_to before resetting session in loging. Fixes returning to an admin page before logging in2026-07-13T23:32:30Zerdgeisterdgeist@erdgeist.org2026-07-13T23:32:30Zurn:sha1:7185965d97a2d7d98f5feda6cc10fb5d87fcf816Remove redundant default translation from the translations subsection2026-07-13T17:28:49Zerdgeisterdgeist@erdgeist.org2026-07-13T17:28:49Zurn:sha1:0113d895e2fd8bf2cf88ae0196b9ab144ac9350b