Admin API: typed /api/admin/* surface #13

Merged

arne merged 15 commits from admin-api-spec into main

2026-04-13 14:28:22 +02:00

arne commented

2026-04-13 14:16:34 +02:00

Owner

Summary

Spec: docs/superpowers/specs/2026-04-13-admin-api-design.md
Implements the typed /api/admin/* surface that replaces direct-SQLite metadata edits.
New package internal/adminapi; new store methods in internal/store/admin.go.

Test plan

go test ./... green
Manual smoke: curl -H "Authorization: Bearer $BOOKS_ADMIN_TOKEN" $PUBLIC/api/admin/books?q=tolkien
Verify PATCH diff response shape on a real book
Verify 404 on /api/admin/* when BOOKS_ADMIN_TOKEN is unset

## Summary - Spec: `docs/superpowers/specs/2026-04-13-admin-api-design.md` - Implements the typed `/api/admin/*` surface that replaces direct-SQLite metadata edits. - New package `internal/adminapi`; new store methods in `internal/store/admin.go`. ## Test plan - [ ] `go test ./...` green - [ ] Manual smoke: `curl -H "Authorization: Bearer $BOOKS_ADMIN_TOKEN" $PUBLIC/api/admin/books?q=tolkien` - [ ] Verify PATCH diff response shape on a real book - [ ] Verify 404 on `/api/admin/*` when `BOOKS_ADMIN_TOKEN` is unset

arne added 14 commits

2026-04-13 14:16:34 +02:00

Add admin API spec 275e71b729

Second of three specs in the auth/admin/htmx roadmap. Defines the
typed /api/admin/* surface that replaces direct-SQLite metadata edits.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Add admin API implementation plan 7a1c8b638b

Task-by-task TDD plan for the /api/admin/* surface defined in
2026-04-13-admin-api-design.md. New internal/adminapi package with
store-layer methods in internal/store/admin.go.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

adminapi: scaffold package and wire into web 9c5c9ee6ac

adminapi: error response helper df85d2e80e

adminapi: GET /books search 8e68be10b4

adminapi: GET /books/:id and align spec to stored fields d4ea21a5bc

adminapi: PATCH /books/:id with diff response b39570fb99

adminapi: PUT /books/:id/authors with create_missing and GC b0c5fd0c42

adminapi: POST /authors/rename with merge_if_exists 2c02047b99

adminapi: POST /series/rename 648d0cee01

adminapi: PUT /books/:id/cover f21384fe23

adminapi: PUT /books/:id/file 8bc22fc77a

adminapi: drop stale placeholder-404 web test b1ab995568

The scaffold-era test passed a nil store to adminapi.New and asserted
a 404 from a placeholder handler. Real handlers now dereference the
store and panic on nil. The surviving token-unset and wrong-token
cases still cover the auth wiring.

adminapi: README section d1eee26ed7

arne added 1 commit

2026-04-13 14:26:47 +02:00

adminapi: OpenAPI 3.1 schema 101509b3f7

Machine-readable complement to the prose spec. Covers every endpoint,
error response, and the shared ChangedResponse/Error shapes.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>