2 Commits

Include renames

Author	SHA1	Message	Date
adminandClaude Opus 5.5	94749b4f3e	Let a project keep named snapshots and restore them (#231) ... Autosave only keeps the latest revision. Before a risky change there was no way to put a known good state aside and go back to it later. The main menu now has "Snapshots..." to create, restore and delete named copies of the open project. - Server: SnapshotStore.php keeps each snapshot as a copy of the project JSON under data/snapshots/<project>/ (git-ignored). Four routes under projects/{id}/snapshots use the same owner check as the project, so an admin also sees foreign snapshots. - Create writes the autosave first. With unsaved edits (play with open edits, failed save, conflict) no snapshot is made and a message says why. The rule is the pure function in src/editor/snapshots.ts. - An empty name falls back to the local date and time. - Restore asks first, then keeps the current state as "Before restoring <name>". It writes the snapshot back as a new revision and reloads the project, so the undo list is empty. A restore can itself be undone by restoring that snapshot. - Deleting a project deletes its snapshots too. Images, sounds, fonts and pixel art are content-addressed and never deleted, so a snapshot can always reach them. - Client: SnapshotStore and HttpSnapshotStore in src/core/store, the SnapshotsDialog, and the flows in ProjectSession. A stale revision (409) becomes StaleRevisionError. - CI runs the new PHP test in the gate job next to accounts. Not covered by e2e: the lock during play and the conflict case. Both are unit tests only. Tests: - check.sh: 164 files, 2401 tests, CHECK EXIT 0. - tests/php/snapshots.test.php: 14 checks, all passed. - tests/editor/snapshots.test.ts: 5 tests for the time format, the blocker rule, the routes and 409. - New e2e module 50 on a throwaway project: create, rename, restore, undo the restore, delete, then delete the project and get 404 on its snapshots. 46b expects the new menu entry. e2e 46,50: 20 checks passed. The check sum goes from 1385 to 1393 (computed). - Counter-checks, originals restored and compared with cmp: blocker always allowed fails 1 unit test. No sorting fails 2 PHP checks. Restore without keeping the old state fails 50c and aborts 50d. - The first sort test with 2 snapshots passed by chance half the time because of random ids. It now uses 8. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-09-25 18:21:52 +02:00
adminandClaude Opus 5.5	ceaa44e5b8	Add roles and a user management tab for admins (#180, #179) ... Until now every account could do the same, and managing accounts meant running make-user.php on the server. Accounts now carry a role, and admins get a tab in the editor to create, rename, re-role, reset and delete accounts. Both issues share the same server files, so they land in one commit. #180 Roles: - Every account is admin or user. A missing or unknown role counts as user, on the server and in the client. - auth/session and auth/login return {user, role}. - Auth::requireAdmin() answers everyone else with 403. - make-user.php takes the role as a third argument. Without it an existing account keeps its role, so a password reset from the CLI never demotes an admin. - Admins see and save other users' projects like their own. Saving keeps the original owner. #179 User management: - The account menu gets "User management" (admins only) and "Plugins" (everyone). Both open the same closable tab, accounts on top and plugins below. The fixed Plugins tab is gone. - Per account: Rename, Role, Password (no old password needed) and Delete with a confirmation. "New user..." creates one. - Each account lists its projects with an Open button. - Delete is refused while the account still owns projects. - Renaming moves the projects along and ends every session of the account. transfer takes the same lock as save. - On their own row an admin can only set the password. The last admin cannot be demoted or deleted. The server enforces both. - The account rules live in AccountRules.php and accountRules.ts as pure functions, so they are testable without a server. Findings: - At 1280 px the Delete button reached past the column edge and was not clickable. The name column is flexible now, and module 49 checks the layout. - The server lets an admin delete other users' projects, but the editor has no button for it yet. Left open in the issue. Tests: - ./check.sh: 148 files, 2214 tests, exit 0 (was 147 / 2204). - New tests/php/accounts.test.php, 51 checks, plain PHP. CI runs it as its own step in the gate job, the host has no PHP. - New e2e module 49 with 18 checks. CI creates the e2e-admin account in serve.sh. Modules 14, 38, 46 and the scaffold follow the new tab. - e2e 1-16,37,38,45,46,49: all passed, 581 checks. - Counter-checks: owner on save, admin view, default role and self delete in PHP fail 7, 5, 5 and 1 checks. Unchecked requireAdmin, a wider column and the caller as owner each fail exactly their e2e check. - Check sum 1314 -> 1333 (+1 in 38, +18 in 49), computed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-09-23 13:59:04 +02:00