Admin web UI v1: authenticated dashboard, live map, CRUD, trip history - #92

Merged

aaronbrethorst merged 29 commits into

mainfrom

worktree-admin-web-ui

Aug 25, 2026

Commits on Aug 24, 2026

docs: add admin web UI v1 design spec
aaronbrethorst
committed
eab6d8e
docs: revise admin UI spec per design review (24 findings)
aaronbrethorst
committed
7af641a
docs: add admin web UI implementation plan (18 tasks)
aaronbrethorst
committed
22ac267
feat: add users.active flag with soft-deactivate store support
aaronbrethorst
committed
8fc0a19
test: make DB-backed store tests clean up after themselves (FK-safe order)
aaronbrethorst
committed
4712a56
fix: reject deactivated users at login
aaronbrethorst
committed
c00f136
feat: add vehicle activate/edit-without-reactivate and admin count queries
aaronbrethorst
committed
2f0744d
feat: add trip summaries, trail query, and active-trip-by-vehicle store methods
aaronbrethorst
committed
aefb3d1
feat: add proxy-aware client IP/secure helpers and fail-closed login rate limiter
aaronbrethorst
committed
f764708
feat: accept session cookie in requireAuth when Authorization header is absent
aaronbrethorst
committed
6993cf9
feat: add admin session cookie layer, flash messages, and requireAdminPage middleware
aaronbrethorst
committed
55adfd8
feat: session-authenticated admin UI shell with form login, logout, and flash
aaronbrethorst
committed
49a6a37
feat: compose handler with CSRF protection, admin bootstrap, and default-on admin UI
aaronbrethorst
committed
4103a7a
feat: vendor Leaflet and compiled Tailwind CSS; remove CDN dependencies
aaronbrethorst
committed
de186e1
feat: add live vehicles admin endpoint joining tracker, labels, and active trips
aaronbrethorst
committed
b0a591f
feat: add admin trips list and trip trail endpoints
aaronbrethorst
committed
6ba0338
feat: dashboard renders live counts, feed health, and recent activity
aaronbrethorst
committed
aae8606
feat: live map polls real vehicle data; trip trail mode
aaronbrethorst
committed
763e9e7
feat: vehicle management pages with create, edit, deactivate, CSV export
aaronbrethorst
committed
5a31425
feat: user management pages with CRUD, password change, and vehicle assignments
aaronbrethorst
committed
d359145
fix: map assignment conflict/FK errors in userAssignVehicle instead of raw 500
aaronbrethorst
committed
e1a0e83
feat: trip history page with filters, search, pagination, and trail links
aaronbrethorst
committed
ba71c18
test: admin route wiring coverage; docs: admin UI setup and operations
aaronbrethorst
committed
54ea2f2
fix: prevent login limiter map-filling DoS; validate form fields before limiting
aaronbrethorst
committed
ffc6065
docs: note deactivation session window; stabilize trips ordering
aaronbrethorst
committed
6f6f21e
fix: run map mode dispatch after let declarations to avoid TDZ ReferenceError
aaronbrethorst
committed
18d07d5
simplify: extract shared JWT parse, password/status validation, nullable-float mapping; single active-flag write path
aaronbrethorst
committed
bf08bb0
fix: apply code-review findings — last-admin guard, form validation, race-free vehicle create, limiter reset, ILIKE escaping, flash header ordering
aaronbrethorst
committed
b347175

Commits on Aug 25, 2026

fix: address CodeRabbit review — verify Tailwind binary SHA-256, tolerate bootstrap race, render trip header for empty trails, role-aware stats fake, CI read-only token
aaronbrethorst
committed
00009b7

Navigation Menu

Uh oh!

Admin web UI v1: authenticated dashboard, live map, CRUD, trip history - #92

Admin web UI v1: authenticated dashboard, live map, CRUD, trip history#92
aaronbrethorst merged 29 commits into
mainfrom
worktree-admin-web-ui

Commits on Aug 24, 2026

docs: add admin web UI v1 design spec

docs: revise admin UI spec per design review (24 findings)

docs: add admin web UI implementation plan (18 tasks)

feat: add users.active flag with soft-deactivate store support

test: make DB-backed store tests clean up after themselves (FK-safe order)

fix: reject deactivated users at login

feat: add vehicle activate/edit-without-reactivate and admin count queries

feat: add trip summaries, trail query, and active-trip-by-vehicle store methods

feat: add proxy-aware client IP/secure helpers and fail-closed login rate limiter

feat: accept session cookie in requireAuth when Authorization header is absent

feat: add admin session cookie layer, flash messages, and requireAdminPage middleware

feat: session-authenticated admin UI shell with form login, logout, and flash

feat: compose handler with CSRF protection, admin bootstrap, and default-on admin UI

feat: vendor Leaflet and compiled Tailwind CSS; remove CDN dependencies

feat: add live vehicles admin endpoint joining tracker, labels, and active trips

feat: add admin trips list and trip trail endpoints

feat: dashboard renders live counts, feed health, and recent activity

feat: live map polls real vehicle data; trip trail mode

feat: vehicle management pages with create, edit, deactivate, CSV export

feat: user management pages with CRUD, password change, and vehicle assignments

fix: map assignment conflict/FK errors in userAssignVehicle instead of raw 500

feat: trip history page with filters, search, pagination, and trail links

test: admin route wiring coverage; docs: admin UI setup and operations

fix: prevent login limiter map-filling DoS; validate form fields before limiting

docs: note deactivation session window; stabilize trips ordering

fix: run map mode dispatch after let declarations to avoid TDZ ReferenceError

simplify: extract shared JWT parse, password/status validation, nullable-float mapping; single active-flag write path

fix: apply code-review findings — last-admin guard, form validation, race-free vehicle create, limiter reset, ILIKE escaping, flash header ordering

Commits on Aug 25, 2026

fix: address CodeRabbit review — verify Tailwind binary SHA-256, tolerate bootstrap race, render trip header for empty trails, role-aware stats fake, CI read-only token