Admin Console

Admin Console

Batoi Press includes an authenticated admin console at /admin. The console is designed for practical site operation: create content, manage site structure, check operational state, and handle updates without requiring a database or a platform account.

Navigation Groups

• Overview: dashboard, site summary, runtime status, and quick actions.
• Publish: pages, posts, media, and menus.
• Site: settings, timezone, themes, static export, and cache.
• Governance: users, updates, and audit log.
• Intelligence: Batoi AIF status.

Publishing Workflows

Pages and posts use structured list screens with bookmarkable search and filters, workflow state, preview links, and editor panels for content, publishing, and SEO. Pages support hierarchy through parent selection, stable child routes, nested menu placement, draft exclusion, and optional Latest posts sections with an editor-controlled limit from 1 to 12. Content can move through draft, in-review, approved, scheduled, published, and archived states with reviewer notes, history, publish timing, and unpublish timing. Page/post saves are revision-safe and idempotent, while publish remains a separate privileged operation. Published posts support editable publish date and time values so release chronology can be corrected without changing the content body. Posts also support editable slugs, subtitles, featured images with alternative text, featured-image URL handling, previous/next article navigation, inline category creation, and full-width, left-sidebar, or right-sidebar layouts. Posts can be searched across title, slug, taxonomy, and SEO metadata. Asset management supports filename search, typed image/document/audio/video/CSS/JavaScript storage, deterministic sorting, public URLs, HTML snippets, multiple media uploads with per-file validation feedback, and upload signature checks. Owners and administrators can also install validated, versioned frontend-library ZIP packages, select one active version per library, and control global public-theme loading.

Managed media assets can be edited from the admin surface. Text-like assets such as CSS, JavaScript, module JavaScript, Markdown, and text files support direct source editing within size limits, while images, documents, stylesheets, scripts, audio, and video support same-extension replacement that preserves the public URL. Batoi Press snapshots the previous file, writes audit events, and revalidates user-managed asset responses so stable-path replacements become visible without changing embedded URLs.

Long-form page and post editing keeps the formatting toolbar available while content scrolls and provides a full-viewport Focus mode for concentrated editing. The editor toolbar includes a Media action that opens the image-filtered Media library in a separate tab, preserving unsaved content while the user uploads or locates an image, copies its URL or HTML snippet, adds alt text, and previews before saving. Editors can insert inline and display LaTeX, which loads MathJax only on public pages that contain supported delimiters. Semantic code blocks render with distinct block styling, language labels, horizontal overflow handling, and a Copy action.

Menus can be edited as ordered label and URL rows, including professional primary and footer menu locations, nested page/menu relationships, dropdowns, nested children, mega menus, keyboard controls, mobile behavior, active navigation states, and static-export parity. The Menus surface also controls the site homepage by selecting any published page. Batoi Press keeps a legacy Label|/url fallback for simple menu data, and installations without an explicit homepage continue to resolve the home page at /. Posts and category archives remain content routes; surface them through page content or Latest posts sections rather than making them homepage selector targets.

Sidebar widgets are managed from the admin surface for reusable post sidebars. Widgets are ordered and sanitized before rendering, and new installs include a recent-posts widget by default.

Themes can be uploaded, activated, previewed, and edited through constrained template surfaces. Header and footer template changes should be made through /admin/theme-templates when they are site-managed changes. Template saves keep the source editor usable after snapshots exist, and restore actions use the editor form with distinct snapshot names for rapid consecutive saves. Layout-heavy special pages may expose protected text-only editing so visible copy can be updated without damaging raw HTML structure.

The publishing panel can expose manifest-declared page templates from the active theme. Batoi Press validates template names, falls back to the standard page layout when a template is missing or invalid, and preserves selected templates in live rendering and static export.

Site Operations

The admin console separates operational tasks from everyday publishing work:

• Settings are grouped by identity, URL, localization, timezone, theme, favicon, and public branding.
• Public branding supports site logo upload, preview, replacement, removal, alt text, and text/logo/logo-plus-text header modes.
• Themes support activation, upload, compatibility inspection, preview targets, template editing, snapshots, same-slug upgrades, and restore-safe replacement. Optional bundled theme CSS and JavaScript files may be opened with starter content and created on save.
• API and MCP access are governed through owner-managed connection tokens, scoped reads, token expiry, revocation, and the OAuth resource-server boundary for external authorization providers.
• Cache can be cleared from the admin surface.
• Static export can generate a site export ZIP when the host supports ZIP creation, including configured homepages, nested pages and menus, Latest posts sections, sidebar widgets, recent posts, and featured-image alternative text.
• Updates show version status, manifest URL, trust metadata, package staging, transport diagnostics, upload validation, backups, and rollback backups. The update workflow creates the staging directory when needed before moving a validated package.

Governance

The installer creates the first owner user in radpress/config/users.json. User management supports edit email/role, password reset, disable, reactivate, and filtering by search, role, or status. Owner safeguards prevent disabling the current user or the last active owner. Disabled users cannot sign in. Batoi Press 2.x includes TOTP MFA, recovery codes, encrypted secrets, connection/session step-up, session inventory and revocation, idle expiry, and absolute expiry. The login surface includes a Forgot Password route that explains administrator-assisted recovery and the local CLI reset path for installs without account email delivery:

php radpress/bin/reset-admin-password.php USERNAME

Audit Log shows governance events from the file-backed audit log with pagination, search, filters, CSV/JSONL export, cleanup controls, and a default 90-day retention posture. User management, update actions, and content-changing operations should be treated as governance-sensitive actions.

API And MCP Boundary

Batoi Press 2.x exposes a versioned JSON API and stateless Streamable HTTP MCP endpoint for scoped site, content, taxonomy, media, menu, search, and health reads. External clients should use owner-managed, hashed, expiring, revocable connection tokens or an administrator-configured OAuth 2.1 authorization provider. Batoi Press acts as a resource server for OAuth; it does not implement an authorization server.

Runtime Boundary

The admin console uses bundled Batoi UIF assets. It does not require Composer, Node.js, Docker, a database, or a Batoi Platform account for normal runtime use.