diff --git a/internal/admin/dashboard/dashboard.go b/internal/admin/dashboard/dashboard.go
index 8b358144..14546cc5 100644
--- a/internal/admin/dashboard/dashboard.go
+++ b/internal/admin/dashboard/dashboard.go
@@ -18,7 +18,7 @@ import (
"github.com/labstack/echo/v5"
)
-//go:embed templates/*.html static/css/*.css static/js/*.js static/js/modules/*.js static/*.svg
+//go:embed templates/*.html static/css/*.css static/js/*.js static/js/modules/*.js static/vendor/*.js static/fonts/*.css static/fonts/*.woff2 static/*.svg
var content embed.FS
// Handler serves the admin dashboard UI.
diff --git a/internal/admin/dashboard/dashboard_test.go b/internal/admin/dashboard/dashboard_test.go
index e630c47d..1e89fd60 100644
--- a/internal/admin/dashboard/dashboard_test.go
+++ b/internal/admin/dashboard/dashboard_test.go
@@ -317,3 +317,76 @@ func TestStatic_NotFound(t *testing.T) {
t.Errorf("expected 404, got %d", rec.Code)
}
}
+
+// TestIndex_HasNoExternalResources guards the offline guarantee: the rendered
+// page must load every script, style, and font from the embedded /admin/static
+// tree, never from a CDN or remote font host.
+func TestIndex_HasNoExternalResources(t *testing.T) {
+ h, err := New()
+ if err != nil {
+ t.Fatalf("New() returned error: %v", err)
+ }
+
+ e := echo.New()
+ req := httptest.NewRequest(http.MethodGet, "/admin/dashboard", nil)
+ rec := httptest.NewRecorder()
+ c := e.NewContext(req, rec)
+
+ if err := h.Index(c); err != nil {
+ t.Fatalf("Index() returned error: %v", err)
+ }
+
+ // Match resources the browser actually fetches (src=, href=, CSS url()),
+ // including protocol-relative (//cdn...) URLs, while ignoring inline-SVG
+ // namespace URIs like http://www.w3.org/2000/svg.
+ loaded := regexp.MustCompile(`(?:src|href)=["'](?:https?:)?//|url\(\s*["']?(?:https?:)?//`)
+ if matches := loaded.FindAllString(rec.Body.String(), -1); len(matches) > 0 {
+ t.Errorf("expected no external (http/https) resources in page HTML, found: %v", matches)
+ }
+ for _, want := range []string{
+ `/admin/static/fonts/inter.css`,
+ `/admin/static/vendor/chart.umd.min.js`,
+ `/admin/static/vendor/alpine.min.js`,
+ `/admin/static/vendor/lucide.min.js`,
+ } {
+ if !strings.Contains(rec.Body.String(), want) {
+ t.Errorf("expected local asset %q in page HTML", want)
+ }
+ }
+}
+
+// TestStatic_ServesVendoredAssets confirms the vendored libraries and font
+// files are embedded and served, so the dashboard renders without network access.
+func TestStatic_ServesVendoredAssets(t *testing.T) {
+ h, err := New()
+ if err != nil {
+ t.Fatalf("New() returned error: %v", err)
+ }
+
+ paths := []string{
+ "/admin/static/vendor/chart.umd.min.js",
+ "/admin/static/vendor/alpine.min.js",
+ "/admin/static/vendor/lucide.min.js",
+ "/admin/static/fonts/inter.css",
+ "/admin/static/fonts/inter-latin.woff2",
+ "/admin/static/fonts/inter-latin-ext.woff2",
+ }
+ for _, path := range paths {
+ t.Run(path, func(t *testing.T) {
+ e := echo.New()
+ req := httptest.NewRequest(http.MethodGet, path, nil)
+ rec := httptest.NewRecorder()
+ c := e.NewContext(req, rec)
+
+ if err := h.Static(c); err != nil {
+ t.Fatalf("Static() returned error: %v", err)
+ }
+ if rec.Code != http.StatusOK {
+ t.Errorf("expected 200, got %d", rec.Code)
+ }
+ if rec.Body.Len() == 0 {
+ t.Errorf("expected non-empty body for %s", path)
+ }
+ })
+ }
+}
diff --git a/internal/admin/dashboard/static/fonts/inter-latin-ext.woff2 b/internal/admin/dashboard/static/fonts/inter-latin-ext.woff2
new file mode 100644
index 00000000..57da6f8d
Binary files /dev/null and b/internal/admin/dashboard/static/fonts/inter-latin-ext.woff2 differ
diff --git a/internal/admin/dashboard/static/fonts/inter-latin.woff2 b/internal/admin/dashboard/static/fonts/inter-latin.woff2
new file mode 100644
index 00000000..91dc3e85
Binary files /dev/null and b/internal/admin/dashboard/static/fonts/inter-latin.woff2 differ
diff --git a/internal/admin/dashboard/static/fonts/inter.css b/internal/admin/dashboard/static/fonts/inter.css
new file mode 100644
index 00000000..b9262f3d
--- /dev/null
+++ b/internal/admin/dashboard/static/fonts/inter.css
@@ -0,0 +1,18 @@
+/* Inter (variable, latin + latin-ext subsets) — vendored from Google Fonts for offline use.
+ v20 ships one variable woff2 per subset, so a single @font-face covers weights 400-700. */
+@font-face {
+ font-family: 'Inter';
+ font-style: normal;
+ font-weight: 400 700;
+ font-display: swap;
+ src: url(inter-latin-ext.woff2) format('woff2');
+ unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+@font-face {
+ font-family: 'Inter';
+ font-style: normal;
+ font-weight: 400 700;
+ font-display: swap;
+ src: url(inter-latin.woff2) format('woff2');
+ unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
diff --git a/internal/admin/dashboard/static/js/modules/dashboard-layout.test.cjs b/internal/admin/dashboard/static/js/modules/dashboard-layout.test.cjs
index 9794d496..e6e26269 100644
--- a/internal/admin/dashboard/static/js/modules/dashboard-layout.test.cjs
+++ b/internal/admin/dashboard/static/js/modules/dashboard-layout.test.cjs
@@ -135,7 +135,7 @@ test("mono utility only sets the font family and font-size-md carries the 13px s
assert.match(fontSizeMdRule, /font-size:\s*13px/);
});
-test("dashboard layout pins Chart.js to 4.5.0 and avoids unused htmx", () => {
+test("dashboard layout serves fonts and JS libraries locally for offline use", () => {
const template = readFixture("../../../templates/layout.html");
assert.match(
@@ -144,16 +144,26 @@ test("dashboard layout pins Chart.js to 4.5.0 and avoids unused htmx", () => {
);
assert.match(
template,
- /
-
+
+
+
+
diff --git a/internal/admin/handler_audit.go b/internal/admin/handler_audit.go
index a065472e..6ff69ae8 100644
--- a/internal/admin/handler_audit.go
+++ b/internal/admin/handler_audit.go
@@ -18,6 +18,11 @@ import (
// matches the value documented in the @Param limit annotation below.
const maxAuditLogLimit = 100
+// defaultAuditLogLimit is the effective page size when the caller omits limit.
+// It mirrors the reader's pagination default so the disabled-reader fast path
+// reports the same limit an enabled reader would.
+const defaultAuditLogLimit = 25
+
// AuditLog handles GET /admin/audit/log
//
// @Summary Get paginated audit log entries
@@ -109,8 +114,17 @@ func (h *Handler) AuditLog(c *echo.Context) error {
}
if h.auditReader == nil {
+ // Echo the effective pagination so the response matches the enabled-reader
+ // contract. Returning limit:0 here would make the client send limit=0 on
+ // its next request, which fails validation above with a 400.
+ limit := params.Limit
+ if limit <= 0 {
+ limit = defaultAuditLogLimit
+ }
return c.JSON(http.StatusOK, auditLogListResponse{
Entries: []auditLogEntryResponse{},
+ Limit: limit,
+ Offset: params.Offset,
})
}
diff --git a/internal/admin/handler_test.go b/internal/admin/handler_test.go
index 25881419..91e910e5 100644
--- a/internal/admin/handler_test.go
+++ b/internal/admin/handler_test.go
@@ -594,6 +594,9 @@ func TestUsageByUserPath_Error(t *testing.T) {
func TestUsageLog_NilReader(t *testing.T) {
h := NewHandler(nil, nil)
+ // Omit limit, as a paging client's first request may. The disabled-reader
+ // path must report the default page size (not 0) so the client never resends
+ // limit=0 (which 400s).
c, rec := newHandlerContext("/admin/usage/log")
if err := h.UsageLog(c); err != nil {
@@ -610,6 +613,12 @@ func TestUsageLog_NilReader(t *testing.T) {
if len(result.Entries) != 0 {
t.Errorf("expected 0 entries, got %d", len(result.Entries))
}
+ if result.Offset != 0 {
+ t.Errorf("expected echoed offset 0, got %d", result.Offset)
+ }
+ if result.Limit != 50 {
+ t.Errorf("expected default echoed limit 50, got %d", result.Limit)
+ }
}
func TestUsageLog_Success(t *testing.T) {
@@ -746,6 +755,9 @@ func TestUsageLog_WithFilters(t *testing.T) {
func TestAuditLog_NilReader(t *testing.T) {
h := NewHandler(nil, nil)
+ // Omit limit, as a paging client's first request may. The disabled-reader
+ // path must report the default page size (not 0) so the client never resends
+ // limit=0 (which 400s).
c, rec := newHandlerContext("/admin/audit/log")
if err := h.AuditLog(c); err != nil {
@@ -762,6 +774,12 @@ func TestAuditLog_NilReader(t *testing.T) {
if len(result.Entries) != 0 {
t.Errorf("expected 0 entries, got %d", len(result.Entries))
}
+ if result.Offset != 0 {
+ t.Errorf("expected echoed offset 0, got %d", result.Offset)
+ }
+ if result.Limit != 25 {
+ t.Errorf("expected default echoed limit 25, got %d", result.Limit)
+ }
}
func TestAuditLog_Success(t *testing.T) {
diff --git a/internal/admin/handler_usage.go b/internal/admin/handler_usage.go
index 06a4064d..d193c708 100644
--- a/internal/admin/handler_usage.go
+++ b/internal/admin/handler_usage.go
@@ -18,6 +18,11 @@ import (
// matches the value documented in the @Param limit annotation below.
const maxUsageLogLimit = 200
+// defaultUsageLogLimit is the effective page size when the caller omits limit.
+// It mirrors the reader's pagination default so the disabled-reader fast path
+// reports the same limit an enabled reader would.
+const defaultUsageLogLimit = 50
+
// UsageSummary handles GET /admin/usage/summary
//
// @Summary Get usage summary
@@ -200,8 +205,17 @@ func (h *Handler) UsageLog(c *echo.Context) error {
}
if h.usageReader == nil {
+ // Echo the effective pagination so the response matches the enabled-reader
+ // contract. Returning limit:0 here would make the client send limit=0 on
+ // its next request, which fails validation above with a 400.
+ limit := params.Limit
+ if limit <= 0 {
+ limit = defaultUsageLogLimit
+ }
return c.JSON(http.StatusOK, usage.UsageLogResult{
Entries: []usage.UsageLogEntry{},
+ Limit: limit,
+ Offset: params.Offset,
})
}