Admin UI

Accent Author is the in-binary admin UI for Standard- and Pro-edition installs. It mounts under /_admin/ and lets you sign in with a bearer token, browse and edit pages, manage media, move pages through a publishing workflow, inspect content models, and read the site-wide validation report. The shell is HTMX-native, responsive enough to use on a phone, and reads through the same content surface as the public site – nothing is rewritten until an operator signs in and actually edits, moves, deletes, or uploads.

Enabling the admin

Two gates must both be true for the shell to mount:

1. The binary must be built with the admin cargo feature. Admin is included in the edition-standard and edition-pro feature sets; it is not part of edition-core (which only includes diagrams and diagram renderers). A Core build contains no admin code at all. The admin feature also pulls in the cli-api and git-aware features and the blake3 dependency.

2. admin.enabled in config.yaml must be true. The default is false, so operators opt in explicitly. The flag is checked on every request via middleware: when the admin is disabled, /_admin/* routes return 404.

admin:
  enabled: true
  token: "your-secret-admin-token-min-32-bytes"
  brand_name: "Acme docs"               # optional, shown on the login card and top bar
  brand_logo: "/assets/acme.svg"        # optional brand logo URL
  audit_log_path: "./.admin/audit.log"  # optional JSONL audit trail

The token can also be supplied via the ACCENT_ADMIN_TOKEN environment variable, which takes precedence over admin.token. Use the env var path when you do not want the secret to live next to config.yaml in source control.

A Brief Tour

Once signed in you land on a dashboard of recent edits and a validation summary. From there a left rail leads to the pages list and tree for browsing and creating content, the page editor for editing with live preview and conflict detection, the media library for uploading and managing assets, a read-only view of the loaded document models, the site-wide validation report, and a settings screen for token rotation and license details. Edits flow through a fixed publishing workflow, and every mutation is appended to an audit log.

In This Chapter

• Authentication – bearer-token login, the session cookie, token rotation, and the minimum-token-length warning.
• The Shipped Screens – every screen the shell ships: dashboard, pages list and tree, page new, editor, media library and detail, models, validation report, and settings.
• Page Editing – the three editor modes, inline field validation, live preview, save with conflict detection, and the frozen-content guard for versioned sites.
• Workflow and Roles – the fixed four-state workflow machine, the publish gate, per-model review requirements, and the read-only Publisher role.
• Media and Page Management – browsing and uploading media, rename with reference rewriting, delete with used-by checks, and creating, moving, and deleting pages.
• Configuration – every admin.* key, the audit log format, conflict resolution, and mobile usage.
• Migration and Hotfix – opt-in/opt-out, upgrading from a pre-admin binary, and the hotfix overlay for patching baked-in vendor assets.
• Troubleshooting – common failure modes and how to resolve them.