A new "Site URL" setting (validated, trailing-slash-normalized, with
SITE_URL env fallback) anchors every absolute URL. On top of it:
- /feed.xml — RSS 2.0 with the 20 newest published posts: excerpt
description, full sanitized HTML in content:encoded (relative image
and link URLs rewritten to absolute, since readers resolve nothing),
categories from tags, dc:creator, and a self atom:link. Autodiscovery
<link> on every public page and a footer link.
- /sitemap.xml — home, post list, every published post and page
(lastmod from updatedAt), and publicly visible tags. Rendered per
request like the rest of the site so it never goes stale; drafts
never appear.
- /robots.txt — allow all, disallow /admin/ and /api/, sitemap pointer.
Admin pages also carry noindex meta as a second layer.
- Page metadata: metadataBase + canonical URLs everywhere, Open Graph
(article type with published/modified times, author, and tags on
posts; og:image + summary_large_image card when there's a featured
image), and BlogPosting JSON-LD on post pages.
Gotcha encoded in lib/seo.ts: Next merges metadata shallowly, so pages
setting alternates.canonical alone would wipe the layout's RSS
autodiscovery entry — pageAlternates() always sets both.
Backups gain settings.siteUrl (export v4; older files still import).
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Each author account now carries five grantable permissions, editable on
the Users page: publish posts, unpublish posts, delete posts (all three
scoped to the author's own posts), create tags, and approve comments
(scoped to comments on the author's posts, without delete). A bare
author writes and edits their own drafts only. Permission checks gate
the status TRANSITION, so editing an already-published post never
requires the publish permission, and the editor's status dropdown only
offers what the account may do. Tags an author creates are granted to
them automatically, and "creating" an existing off-grant tag is
refused (it would be a self-grant loophole). Existing author accounts
keep publish+unpublish via migration backfill.
Tags the admin attaches outside an author's grants now survive the
author's edits: the form shows them checked-and-locked and the server
re-attaches them on every save.
Every account can change its own password on the new /admin/account
page (current password required); the username in the admin header
links there.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
matt