feat: admin UI with dual-variant release

Author: sebdeveloper6952

.github/workflows/release.yml

@@ -10,6 +10,16 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+    strategy:
+      fail-fast: false
+      matrix:
+        variant:
+          - name: ui
+            tags: ui
+            suffix: ""
+          - name: headless
+            tags: ""
+            suffix: "-headless"
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -18,24 +28,61 @@ jobs:
         with:
           go-version-file: "go.mod"
 
-      - name: Build
-        run: go build -o blossom-linux-amd64 ./cmd/api/main.go
+      - name: Setup pnpm
+        if: matrix.variant.name == 'ui'
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9
+
+      - name: Setup Node
+        if: matrix.variant.name == 'ui'
+        uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          cache: pnpm
+          cache-dependency-path: ui/pnpm-lock.yaml
+
+      - name: Build UI
+        if: matrix.variant.name == 'ui'
+        working-directory: ui
+        run: |
+          pnpm install --frozen-lockfile
+          pnpm build
+
+      - name: Build binary
+        run: |
+          go build -tags "${{ matrix.variant.tags }}" \
+            -o blossom-linux-amd64${{ matrix.variant.suffix }} \
+            ./cmd/api/main.go
 
       - name: Release
         uses: softprops/action-gh-release@v2
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
-          files: blossom-linux-amd64
+          files: blossom-linux-amd64${{ matrix.variant.suffix }}
 
   docker:
     runs-on: ubuntu-latest
     permissions:
       contents: read
       packages: write
+    strategy:
+      fail-fast: false
+      matrix:
+        variant:
+          - name: ui
+            target: runtime-ui
+            suffix: ""
+          - name: headless
+            target: runtime-headless
+            suffix: "-headless"
     steps:
       - name: Checkout
         uses: actions/checkout@v4
 
+      - name: Set up Buildx
+        uses: docker/setup-buildx-action@v3
+
       - name: Log in to ghcr.io
         uses: docker/login-action@v3
         with:
@@ -48,6 +95,8 @@ jobs:
         uses: docker/metadata-action@v5
         with:
           images: ghcr.io/${{ github.repository }}
+          flavor: |
+            suffix=${{ matrix.variant.suffix }},onlatest=true
           tags: |
             type=semver,pattern={{version}}
             type=semver,pattern={{major}}.{{minor}}
@@ -57,5 +106,8 @@ jobs:
         with:
           context: .
           push: true
+          target: ${{ matrix.variant.target }}
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha,scope=${{ matrix.variant.name }}
+          cache-to: type=gha,mode=max,scope=${{ matrix.variant.name }}

.gitignore

@@ -3,3 +3,9 @@
 db/**.sqlite3
 config.yml
 blossom-server
+bin/
+
+# Admin UI build artifacts (embedded only when building with -tags ui)
+ui/node_modules/
+ui/build/
+ui/.svelte-kit/

Dockerfile

@@ -1,12 +1,42 @@
-FROM dhi.io/golang:1.26-dev AS builder
+# syntax=docker/dockerfile:1.7
+
+# --- Admin UI build ---
+FROM node:22-alpine AS ui-builder
+WORKDIR /src/ui
+RUN corepack enable
+COPY ui/package.json ui/pnpm-lock.yaml* ./
+RUN pnpm install --frozen-lockfile
+COPY ui/ ./
+RUN pnpm build
+
+# --- Go build, headless (no UI embedded) ---
+FROM dhi.io/golang:1.26-dev AS builder-headless
+WORKDIR /go/src/app
+COPY . .
+RUN mkdir -p ./bin && CGO_ENABLED=1 go build \
+    -ldflags "-linkmode external -extldflags '-static'" \
+    -o ./bin/app ./cmd/api/main.go
+
+# --- Go build, with UI embedded ---
+FROM dhi.io/golang:1.26-dev AS builder-ui
 WORKDIR /go/src/app
 COPY . .
-RUN mkdir ./bin && CGO_ENABLED=1 go build \
+COPY --from=ui-builder /src/ui/build ./ui/build
+RUN mkdir -p ./bin && CGO_ENABLED=1 go build \
+    -tags ui \
     -ldflags "-linkmode external -extldflags '-static'" \
     -o ./bin/app ./cmd/api/main.go
 
-FROM dhi.io/static:20250419
-COPY --from=builder /go/src/app/bin/app /app
-COPY --from=builder /go/src/app/db /db
+# --- Runtime, headless ---
+FROM dhi.io/static:20250419 AS runtime-headless
+COPY --from=builder-headless /go/src/app/bin/app /app
+COPY --from=builder-headless /go/src/app/db /db
+EXPOSE 8000/tcp
+CMD ["/app"]
+
+# --- Runtime, with UI (default target) ---
+FROM dhi.io/static:20250419 AS runtime-ui
+COPY --from=builder-ui /go/src/app/bin/app /app
+COPY --from=builder-ui /go/src/app/db /db
 EXPOSE 8000/tcp
 CMD ["/app"]

db/blobs.sql.go

@@ -11,6 +11,13 @@ where pubkey = ?
   and created < ?
 order by created asc;
 
+-- name: GetAllBlobsPaginated :many
+select *
+from blobs
+where created > ?
+  and created < ?
+order by created desc;
+
 -- name: GetBlobFromHash :one
 select *
 from blobs

db/queries/blobs.sql

@@ -15,3 +15,12 @@ func ListBlobs(
 ) ([]*core.Blob, error) {
 	return services.Blob().GetFromPubkeyPaginated(ctx, pubkey, since, until)
 }
+
+func ListAllBlobs(
+	ctx context.Context,
+	services core.Services,
+	since int64,
+	until int64,
+) ([]*core.Blob, error) {
+	return services.Blob().GetAllPaginated(ctx, since, until)
+}

internal/bud02/list.go

@@ -53,5 +53,6 @@ type BlobStorage interface {
 	GetFromHash(ctx context.Context, sha256 string) (*Blob, error)
 	GetFromPubkey(ctx context.Context, pubkey string) ([]*Blob, error)
 	GetFromPubkeyPaginated(ctx context.Context, pubkey string, since int64, until int64) ([]*Blob, error)
+	GetAllPaginated(ctx context.Context, since int64, until int64) ([]*Blob, error)
 	DeleteFromHash(ctx context.Context, sha256 string) error
 }

internal/core/blob_descriptor.go

@@ -0,0 +1,71 @@
+package httpapi
+
+import (
+	"math"
+	"net/http"
+	"strconv"
+
+	"github.com/gin-gonic/gin"
+
+	bud02 "github.com/sebdeveloper6952/blossom-server/v2/internal/bud02"
+	"github.com/sebdeveloper6952/blossom-server/v2/internal/core"
+)
+
+type adminBlobDescriptor struct {
+	Pubkey   string `json:"pubkey"`
+	Url      string `json:"url"`
+	Sha256   string `json:"sha256"`
+	Size     int64  `json:"size"`
+	Type     string `json:"type"`
+	Uploaded int64  `json:"uploaded"`
+}
+
+func fromDomainAdminBlobDescriptor(blob *core.Blob) adminBlobDescriptor {
+	return adminBlobDescriptor{
+		Pubkey:   blob.Pubkey,
+		Url:      blob.Url,
+		Sha256:   blob.Sha256,
+		Size:     blob.Size,
+		Type:     blob.Type,
+		Uploaded: blob.Uploaded,
+	}
+}
+
+func listAllBlobs(services core.Services) gin.HandlerFunc {
+	return func(ctx *gin.Context) {
+		var since int64
+		var until int64 = math.MaxInt64
+
+		if s := ctx.Query("since"); s != "" {
+			if v, err := strconv.ParseInt(s, 10, 64); err == nil {
+				since = v
+			}
+		}
+		if u := ctx.Query("until"); u != "" {
+			if v, err := strconv.ParseInt(u, 10, 64); err == nil {
+				until = v
+			}
+		}
+
+		blobs, err := bud02.ListAllBlobs(
+			ctx.Request.Context(),
+			services,
+			since,
+			until,
+		)
+		if err != nil {
+			ctx.AbortWithStatusJSON(
+				http.StatusInternalServerError,
+				apiError{Message: err.Error()},
+			)
+			return
+		}
+
+		out := make([]adminBlobDescriptor, len(blobs))
+		for i := range blobs {
+			out[i] = fromDomainAdminBlobDescriptor(blobs[i])
+		}
+
+		ctx.JSON(http.StatusOK, out)
+	}
+}

internal/httpapi/admin_controller.go

@@ -0,0 +1,17 @@
+package httpapi
+
+import (
+	"net/http"
+
+	"github.com/gin-gonic/gin"
+)
+
+func adminOnlyMiddleware(adminPubkey string) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		if adminPubkey == "" || c.GetString("pk") != adminPubkey {
+			c.AbortWithStatus(http.StatusForbidden)
+			return
+		}
+		c.Next()
+	}
+}

internal/httpapi/admin_middleware.go

@@ -0,0 +1,22 @@
+package httpapi
+
+import (
+	"net/http"
+
+	"github.com/gin-gonic/gin"
+)
+
+type meResponse struct {
+	Pubkey  string `json:"pubkey"`
+	IsAdmin bool   `json:"is_admin"`
+}
+
+func getMe(adminPubkey string) gin.HandlerFunc {
+	return func(ctx *gin.Context) {
+		pk := ctx.GetString("pk")
+		ctx.JSON(http.StatusOK, meResponse{
+			Pubkey:  pk,
+			IsAdmin: adminPubkey != "" && pk == adminPubkey,
+		})
+	}
+}