admin

type Deps struct {
	Sessions *scs.SessionManager
	Users    *auth.Store
	Content  *content.Store
	Renderer *render.Renderer // nil when the host has not configured templates
	// RequestFuncs binds the host's template functions
	// (Config.TemplateFuncs) to a request, for the page and post
	// previews. Previews run the same page templates the public site
	// does, so a function that reads the request's context has to be
	// bound here too or it behaves subtly differently under preview than
	// in front of a visitor. Nil when the host registered none.
	RequestFuncs   func(*http.Request) template.FuncMap
	Media          *media.Manager // nil when the host has not configured an object store
	Snippets       *snippets.Store
	Captcha        *captcha.Client       // nil when login CAPTCHA is not configured
	ConfigSnippets []snippets.Snippet    // host-registered palette entries
	SectionStyles  *render.SectionStyles // curated section settings
	Sections       []Section             // host-registered admin pages, already validated
	Logger         *slog.Logger
	AdminPath      string
	DefaultLocale  string
	Locales        []string // all configured locales, [0] = DefaultLocale

	// PostTemplate is the template blog and news posts render with; the
	// zero value disables the Blog & News admin.
	PostTemplate render.PageTemplate

	// RememberFor is how long a "Remember me" login persists. The zero
	// value falls back to 30 days so a partially-populated Deps (tests,
	// direct package use) behaves sensibly.
	RememberFor time.Duration

	// PerPage is how many rows a paginated admin list shows on one page.
	// The zero value falls back to DefaultPerPage, like RememberFor.
	PerPage int

	// SiteBaseURL returns the site's absolute public base
	// ("scheme://host", no trailing slash) for the given request, so the
	// admin can offer links that work when pasted somewhere else. Nil
	// leaves such links site-relative, which is fine for tests and direct
	// package use.
	SiteBaseURL func(*http.Request) string

	// ContentChanged, when set, is called (without waiting) after any
	// mutation that can change which CSS classes stored content uses:
	// region/section saves, publish/discard, page create/delete, and
	// snippet changes. The CMS uses it to rebuild the generated
	// Tailwind stylesheet.
	ContentChanged func()
}

type Section struct {
	// Path is the URL segment the section is mounted under: the section
	// root is served at {AdminPath}/x/{Path}/ (the bare URL without the
	// trailing slash redirects there, so relative links inside the
	// section resolve under it). One path segment of RFC 3986 unreserved
	// characters (letters, digits, "-", ".", "_", "~").
	Path string

	// NavLabel is the section's link text in the admin top bar. Empty
	// means no nav link; the section is still routable.
	NavLabel string

	// AdminOnly restricts the section to users with the admin role.
	// Editors receive 403 and don't see the nav link.
	AdminOnly bool

	// Handler serves the section's requests. The mount prefix is
	// stripped: it sees "/" at the section root and may serve its own
	// sub-routes and static assets beneath it. Requests only reach the
	// handler with a logged-in user, and unsafe methods (POST, PUT, ...)
	// have already passed CSRF validation — forms need only include
	// CSRFToken(r) as the csrf_token field.
	Handler http.Handler
}