shoney.arickathil
23550e7021
- lexer: backtick raw text literal — content verbatim, no escape
processing, common source margin removed at lex time; `${ }` raw and
`{{ }}` auto-escaping holes
- `{{ e }}` desugars to `esc(${e})` in parser.ml — a Call on the `esc`
in scope, so types/owner/emit/.wob/VM are untouched
- WO-E004 unterminated raw literal; WO-E005 newline inside "..." —
closes a hole where a missing quote silently ate the rest of the file
- wo-html: `Component` interface, `render_all`, `Layout`, README
- framework: `ok_html` joins ok_text/ok_json in http/types.wo
- site + shop restructured to one-feature-one-module MVC (view +
controller per directory, model at the root, bootstrap-only main)
- removed the filler `pad: Int` convention — verified unnecessary for
plain classes, interface dispatch, containers and actors
- corrected recorded claims: gap #1 blocks neither the build nor the
layout; a class crosses module lines, only a free fn is scoped
- docs/guides/language-surface.md — the full grammar inventory
- story 37 landed and moved to done/
Gates: oop-accept MET, oop-e2e 116/0, woc-test 556/0, site 11/0,
web-app 46/0, fibers 10/0, db-actor 8/0
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
33 lines
1.2 KiB
Text
33 lines
1.2 KiB
Text
-- admin.controller.wo — POST /admin/ch/:slug: title/body update,
|
|
-- form-encoded, bearer-gated. Mechanism (bearer_token, constant-time
|
|
-- ct_eq) is the framework's; POLICY — which routes, which token — is
|
|
-- this app's, right here. No rendering: the answer is a redirect.
|
|
use framework/http
|
|
|
|
pub class AdminEdit {
|
|
token: Text
|
|
|
|
fn handle(req: Req) -> Resp {
|
|
let got = bearer_token(req);
|
|
if got == nil { return unauthorized(); }
|
|
if ct_eq("${got}", self.token) == false { return unauthorized(); }
|
|
let slug = req.params["slug"];
|
|
if slug == nil { return not_found(); }
|
|
let hits = from c in Chapter where c.slug == slug take 1 select c;
|
|
if len(hits) == 0 { return not_found(); }
|
|
let f = form_values(req);
|
|
if f == nil { return bad_request("body must be form-encoded (title, body)"); }
|
|
let title = f["title"];
|
|
let body = f["body"];
|
|
if title == nil and body == nil { return bad_request("nothing to update"); }
|
|
if title != nil {
|
|
let t = trim("${title}");
|
|
if t == "" { return bad_request("title must not be empty"); }
|
|
hits[0].title = t;
|
|
}
|
|
if body != nil {
|
|
hits[0].body = "${body}";
|
|
}
|
|
return redirect("/ch/${slug}");
|
|
}
|
|
}
|