Commit Graph
19 Commits
Author SHA1 Message Date
Matthias G 97b8092914 Rotate and delete API access, not just revoke
Rotating hands out a fresh token, voids the old one and lifts a revocation.
Deleting removes the row for good, taking its idempotency keys with it.
Both are admin only and land in the audit log.
2026-08-14 09:08:43 +02:00
Matthias G 7b4b5e1a14 Explain the point to whoever opens the admin
The overview leads with what Logbuch is for, a new Anleitung page renders
the editorial guide for humans, and the user list stops claiming accounts
come from a shell command: they appear on first sign in.
2026-08-04 11:56:27 +02:00
Matthias G 328db743d8 Give the digest window a way back
Deleting a message that Slack no longer has counts as done, so the window
rewinds instead of staying stuck. A reset button clears the mark by hand,
and the empty-run notice now says since the last dispatch instead of seven
days.
2026-08-03 13:38:17 +02:00
Matthias G c1cfd41ad3 Only send what is new, and lead with a picture
The window now starts at the last dispatch, so pressing send twice does not
repeat a digest. Cards prefer entries that have a cover, the newest one of
them opens the message as a full width image, and the page says when the
last digest went out.
2026-08-03 13:24:46 +02:00
Matthias G 78ff7d2c3f Stop offering deletion Slack refuses
chat.delete only removes what the bot posted itself, so webhook messages
answer cant_delete_message no matter how the id is found. Runs without a
stored id now say so instead of leading into a dead end.
2026-08-03 13:19:20 +02:00
Matthias G 7e2a00842e Turn a channel name into an id before touching a message
conversations.history and chat.delete only take ids, so a stored name like
logbuch answered channel_not_found. The name is resolved through
conversations.list first, and the hint asks for the id.
2026-08-03 13:13:31 +02:00
Matthias G bb5028ee55 Report what Slack actually answers
The lookup swallowed Slack's error and the interface guessed at a cause.
It now shows the raw reason, widens the search window to six hours and
falls back to matching the message prefix.
2026-08-03 13:03:32 +02:00
Matthias G 7a10754e70 Refuse a bot token without a channel
Saving a token and leaving the channel empty produced a state that could
neither send nor delete, and only said so at the next attempt.
2026-08-03 12:59:34 +02:00
Matthias G 768bbca59c Delete webhook messages too by looking up their id
A message sent through the webhook has no stored id, but it belongs to the
same Slack app, so the bot token may remove it. The delete button now looks
the message up in the channel by its text and time before deleting.
2026-08-03 12:53:13 +02:00
Matthias G 81d0489c78 Send through a bot token so messages can be deleted again
Incoming webhooks return no message id, so nothing can be removed later.
Settings now take a bot token plus channel, chat.postMessage records channel
and timestamp on the run, and the history carries a delete button per
message. The webhook stays as a fallback and is marked as not deletable.
2026-08-03 12:45:04 +02:00
Matthias G 0fd6da62d1 Manage the Slack digest in the admin
New settings area: the webhook lives in the database and is only shown
shortened afterwards, the environment variable stays as a fallback. A switch
decides whether internal entries travel, a button sends the digest right
away, and every run is recorded with period, count, projects, result and
who triggered it.
2026-08-03 12:13:57 +02:00
Matthias G ed5be8dd93 Work on many entries at once
Rows carry a checkbox, the bar above publishes, withdraws, resets to draft,
sets the audience or deletes drafts for the whole selection and reports
what went through.
2026-08-01 18:16:05 +02:00
Matthias G cd3bf3f2b4 Manage entries at scale
- the admin uses the full window width, table cells stop wrapping
- columns sort by number, title, project, status, date and author
- filters sit in one row with search first and a page size next to them
- entries carry a real date: publish_at on create and change, publishing
  keeps that date, a date in the past publishes backdated
2026-08-01 15:43:05 +02:00
Matthias G f8bc2d6108 Choose any allowed status in the table, set the cover on create
- the status cell offers every transition the entry allows, scheduling
  asks for the date right there
- POST /api/v1/posts takes cover_media_id, no second call needed
- the row grid follows its content so long type names stop overlapping
2026-08-01 15:34:13 +02:00
Matthias G c95db3a044 Give the archive its signature back
- the plate carries project colour on the lead image, in the cards and in
  every row, not only when an entry lacks an image
- entries no longer fade in one after another, the page is readable at once
- detail pages lead on: previous, next and more from the project
- the month band shows from the first month, the nav item hides without one
- side cards and row teasers get room instead of ellipsis
- admin opens on drafts, scheduled and published plus what was edited last,
  and its tables use the full width
2026-08-01 13:04:08 +02:00
Matthias G a123e0bca2 Write text blocks with formatting
Tiptap replaces the plain textarea: bold, italic, subheading, lists and
links. Stored as Markdown so API clients keep reading and writing the
same field, rendered with react-markdown.
2026-08-01 12:46:34 +02:00
Matthias G 2fd71fd406 Number entries on publish, delete media, read the cover
- drafts stay unnumbered, the number is handed out when an entry goes live
- DELETE /api/v1/media/:id and a delete control in the media library
- cover_media_id in the draft read, coverMediaId and coverUrl in the archive read
2026-08-01 12:25:01 +02:00
Matthias G afaa323848 Delete drafts from the admin editor
The editor could publish, archive and resume, but never remove. A draft
whose id was lost was unreachable from the interface.
2026-08-01 12:03:53 +02:00
Matthias Giesselmann b90ff252d1 Add Logbuch: project update blog with admin, media and API
Public archive with sidebar navigation, project pages, month archive,
search and entry pages with image blocks. Admin area for brands,
projects, post types, users, api clients, media and the entry editor
with drag and drop images, preview per audience, scheduling and
publish checks. Read and write API with bearer tokens, audience
scoping, idempotent creation, OpenAPI document and editorial guide.
Magic link login with configurable allowed domains, whole app behind
the session gate. 456 tests including design rule checks.
2026-07-31 21:33:42 +02:00