Ships `dev` as **v0.11.0**. `main` contains nothing that `dev` does not, so this is a clean sync. ## Headline changes since v0.10.0 - **Journal & Journal Studio** — photo essays at `/journal`, split-screen block editor with live preview, drafts, per-entry passwords, cover images - **First-run setup wizard at `/install`** — configure a fresh deployment from the browser; credentials are verified against Immich before anything is written, and the wizard is gated by a one-time token - **About page editor and toggle** in the admin panel - **Per-album photo order** independent of Immich, with a drag & drop editor - **Custom favicon upload** - **Experimental portfolio features** — justified grid, `cover` hero, unlisted subpages, per-album grid overrides, cover focal points, external nav links - **Security** — asset tokens length-capped before decoding (#423), journal author markdown escaped rather than filtered, journal file paths contained, admin session key derived with scrypt (#432), Next.js 16.3.0 for CVE-2025-13465 - **Fixed** — client proofing honours its own configuration again (#454); journal photo rendering (#432) Full detail in [CHANGELOG.md](CHANGELOG.md#0110--2026-08-15). ## Verified `npx tsc --noEmit` clean · `npx vitest run` 435 tests pass · `npm run build` succeeds · lint 0 errors · `prettier --check` clean · local `docker build` of the release tree. ## After merge Tag `v0.11.0` on `main` and publish the release — that triggers `docker-publish.yml`, which pushes the image and moves `latest`. 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Co-authored-by: ralksta <ralksta@users.noreply.github.com> Co-authored-by: lancetm714 <108419425+lancetm714@users.noreply.github.com> Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
77 lines
2.7 KiB
TypeScript
77 lines
2.7 KiB
TypeScript
import { NextResponse } from 'next/server';
|
|
import { isAdminAuthenticated, isAdminEnabled } from '@/lib/admin/auth';
|
|
import { sanitizeSlug, isValidSlug, type JournalFrontmatter } from '@/lib/journal';
|
|
import {
|
|
listJournalEntries,
|
|
writeJournalEntry,
|
|
readJournalEntry,
|
|
} from '@/lib/admin/journal-service';
|
|
|
|
export async function GET() {
|
|
if (!isAdminEnabled()) {
|
|
return NextResponse.json({ error: 'Admin not enabled' }, { status: 403 });
|
|
}
|
|
if (!(await isAdminAuthenticated())) {
|
|
return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
|
|
}
|
|
|
|
try {
|
|
const entries = await listJournalEntries();
|
|
return NextResponse.json({ entries });
|
|
} catch (err) {
|
|
console.error('[Admin API] Failed to list journal entries:', err);
|
|
return NextResponse.json({ error: 'Failed to list journal entries' }, { status: 500 });
|
|
}
|
|
}
|
|
|
|
export async function POST(request: Request) {
|
|
if (!isAdminEnabled()) {
|
|
return NextResponse.json({ error: 'Admin not enabled' }, { status: 403 });
|
|
}
|
|
if (!(await isAdminAuthenticated())) {
|
|
return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
|
|
}
|
|
|
|
try {
|
|
const body = await request.json();
|
|
const rawTitle = typeof body.title === 'string' ? body.title.trim() : 'Untitled';
|
|
const slug = sanitizeSlug(typeof body.slug === 'string' && body.slug ? body.slug : rawTitle);
|
|
|
|
if (!isValidSlug(slug)) {
|
|
return NextResponse.json({ error: 'Invalid slug' }, { status: 400 });
|
|
}
|
|
|
|
const existing = await readJournalEntry(slug);
|
|
if (existing) {
|
|
return NextResponse.json(
|
|
{ error: 'A journal entry with this slug already exists' },
|
|
{ status: 409 },
|
|
);
|
|
}
|
|
|
|
const frontmatter: JournalFrontmatter = {
|
|
title: rawTitle,
|
|
date: new Date().toISOString().slice(0, 10),
|
|
draft: true,
|
|
...(typeof body.subtitle === 'string' && body.subtitle ? { subtitle: body.subtitle } : {}),
|
|
...(typeof body.author === 'string' && body.author ? { author: body.author } : {}),
|
|
...(typeof body.coverAssetId === 'string' && body.coverAssetId
|
|
? { coverAssetId: body.coverAssetId }
|
|
: {}),
|
|
};
|
|
|
|
let initialMarkdown = body.content;
|
|
if (typeof initialMarkdown !== 'string' || !initialMarkdown) {
|
|
initialMarkdown = `---\ntitle: "${frontmatter.title}"\ndate: "${frontmatter.date}"\ndraft: true\n---\n\nWrite your story here...`;
|
|
}
|
|
|
|
await writeJournalEntry(slug, initialMarkdown);
|
|
const created = await readJournalEntry(slug);
|
|
|
|
return NextResponse.json({ success: true, entry: created }, { status: 201 });
|
|
} catch (err) {
|
|
console.error('[Admin API] Failed to create journal entry:', err);
|
|
return NextResponse.json({ error: 'Failed to create journal entry' }, { status: 500 });
|
|
}
|
|
}
|