Changeset 8afbdd6 in Klonkt for src/views/partials

Timestamp:

06/14/2026 06:07:51 PM (3 months ago)

Author:

roboburr <roboburr@…>

Branches:

main

Children:

c869272

Parents:

b94c08e

Message:

feat: viewer role + artists directory + Klonkt Hub Beta rebrand

Viewer role (replaces the separate view-mode/readonly toggle):

• 'kijker' is now a real role (VALID_ROLES) selectable in Admin. May view EVERYTHING including Admin, but cannot modify anything.
• isViewer(user) (= role kijker or legacy readonly flag) is the source; requireGod/requireSiteManager(BySlug) let a viewer through (viewing), the global guard 403s every write. Existing readonly accounts are migrated on each role change (readonly=0).
• Write leaks via GET patched: /prutter/new (INSERT) blocks for viewers, /prutter/:id skips markAsRead (UPDATE); WS upgrade rejects viewers (the HTTP guard doesn't cover WebSockets).
• Clean "Viewer mode" page (viewer-blocked) instead of raw 403 text; styled sticky banner; account page shows read-only UI instead of an upload button that silently 403s. canMutate hides write buttons.

Scalability (>50 artists):

• Hub home shows max 24 (most active first) + "All N artists ->".
• New searchable, paginated /artiesten directory (hub only).
• 'user' + 'artiesten' reserved as slugs.

Rebrand PrutFolio v1 -> Klonkt Hub Beta (footer, PWA manifest, account/
admin texts, default page title, startup, README; internal package +
PWA id 'prutfolio' remain for stability).

Co-Authored-By: Claude <noreply@…>

Location:

src/views/partials

Files:

• bottom-tab.ejs (modified) (1 diff)
• footer.ejs (modified) (1 diff)
• profile-sheet.ejs (modified) (1 diff)
• topnav.ejs (modified) (2 diffs)

src/views/partials/bottom-tab.ejs

@@ -11 +11 @@
 const _siteUrlBase = (typeof siteUrlBase !== 'undefined' && siteUrlBase) ? siteUrlBase : '';
 const _path        = (typeof currentPath !== 'undefined' && currentPath) ? currentPath : '/';
-const _canPost     = !!(user && permissions && permissions.canCreatePost && permissions.canCreatePost(user, site));
+const _canPost     = !!(user && (typeof canMutate === 'undefined' || canMutate)
+                        && permissions && permissions.canCreatePost && permissions.canCreatePost(user, site));
 const _hasPrutter  = !!(user && site && site.enable_prutter && (typeof tenancy !== 'undefined' && tenancy === 'hub'));
 const _ownProfile  = user ? ('/users/' + user.username) : null;

src/views/partials/footer.ejs

@@ -2 +2 @@
   <div class="container site-footer-inner">
     <div>
-      <span>© <%= new Date().getFullYear() %> <%= (site && site.title) || 'PrutFolio' %></span>
+      <span>© <%= new Date().getFullYear() %> <%= (site && site.title) || 'Klonkt' %></span>
     </div>
     <div class="footer-meta">
-      <span>PrutFolio v1</span>
+      <span>Klonkt Hub Beta</span>
       <%# Mobile-only theme toggle. On desktop the topnav has its own toggle
           so we hide this one to avoid two visible toggles at once. The same

src/views/partials/profile-sheet.ejs

@@ -14 +14 @@
 
 const _isAdmin = (user.role === 'god' || user.role === 'admin');
-const _canPost = !!(typeof permissions !== 'undefined'
+const _canPost = !!((typeof canMutate === 'undefined' || canMutate)
+                    && typeof permissions !== 'undefined'
                     && permissions
                     && permissions.canCreatePost

src/views/partials/topnav.ejs

@@ -16 +16 @@
 const _hasSearch   = !site || site.show_search === undefined || site.show_search;
 const _hasPrutter  = user && site && site.enable_prutter && (typeof tenancy !== 'undefined' && tenancy === 'hub');
-const _canPost     = user && permissions && permissions.canCreatePost && permissions.canCreatePost(user, site);
+const _canPost     = user && (typeof canMutate === 'undefined' || canMutate)
+                     && permissions && permissions.canCreatePost && permissions.canCreatePost(user, site);
 %>
 
@@ -36 +37 @@
            hx-push-url="<%= _siteUrlBase %>/" hx-indicator="#pcms-loading"><%= site.title %></a>
       <% } else { %>
-        <a class="site-title" href="/">PrutFolio</a>
+        <a class="site-title" href="/">Klonkt</a>
       <% } %>
     </div>