History

mwiegand 6b0231970c feat(files): add GET /overlays/<id>/files/new + extend editor template Step 5/12 of docs/superpowers/plans/2026-05-17-files-overlay-rewrite.md. Adds a server-rendered editor page for creating a new file in a target folder. Renders the same overlay_file_editor.html as the edit route, but with is_new=True so the template: * Hides the Delete button * Hides the Download link (no file to download yet) * Changes the Save button label to "Create" * Emits data-at-folder on the textarea for the JS save handler to compose path = at_folder + "/" + filename * Updates the title block (browser tab + heading) to "New file" / "<at_folder>/…new file" The existing edit route now passes is_new=False and at_folder="" explicitly so both call sites are explicit about the contract. Path validation: ?at may be empty (overlay root) or a relative folder path. safe_resolve_for_listing rejects traversal attempts (400). A missing or non-directory at returns 404. Reused the helper to keep the safety story identical to the listing / edit routes. Phase B Step 5 is server-side only — no JS changes here. Step 6 migrates openEditorTextNew in editor.js to use this route via window.modals.openRouted(). Tests added (tests/test_url_addressable_modals.py): * test_new_route_renders_with_empty_content * test_new_route_renders_with_target_folder_attribute * test_new_route_renders_create_button_not_save * test_new_route_400s_for_invalid_at_path * test_new_route_404s_for_non_files_overlay pytest: 573 → 578 passed, 1 skipped, 3 deselected. Verified live: curl /overlays/2/files/new returns markup with data-at-folder="", "UTF-8 · 0 bytes" byte count, save button label "Create", and no Delete / Download buttons. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-05-17 16:03:01 +02:00
..
alembic	feat(l4d2-web): add command_history table for RCON console transcript	2026-05-14 21:26:56 +02:00
l4d2web	feat(files): add GET /overlays/<id>/files/new + extend editor template	2026-05-17 16:03:01 +02:00
scripts	fix(editor-v2): fix cm6 to rows-derived height, eliminate layout shift	2026-05-17 10:27:28 +02:00
tests	feat(files): add GET /overlays/<id>/files/new + extend editor template	2026-05-17 16:03:01 +02:00
alembic.ini	chore(l4d2): flatten component layout	2026-05-05 23:47:06 +02:00
pyproject.toml	refactor(repo): uv workspace + hatchling + layout restructure	2026-05-15 22:04:29 +02:00
README.md	refactor(repo): uv workspace + hatchling + layout restructure	2026-05-15 22:04:29 +02:00

README.md

l4d2-web-app

Flask web app for managing L4D2 servers through user-private blueprints.

Key v1 behaviors

Local username/password login; no public signup
Admin-managed overlay catalog
Private blueprints per user
Server creation from blueprints (live-linked; no per-server blueprint overrides)
Async job model with persisted command logs in job_logs
Desired vs actual state model
Live logs for jobs and servers via SSE endpoints
Host operations go through l4d2ctl via a local host command runner, not direct l4d2host imports

Frontend constraints

Server-rendered templates (Jinja)
Vendored HTMX (static/vendor/htmx.min.js)
Custom CSS only
Tokenized, consistent link and accent colors

Development

From the workspace root (../):

uv sync          # creates .venv, installs l4d2host + l4d2web editable, plus dev deps
uv run pytest l4d2web/tests -q

Configuration

The web app reads these settings from the environment:

DATABASE_URL: SQLAlchemy database URL, for example sqlite:////var/lib/left4me/left4me.db.
SECRET_KEY: Flask secret key used for sessions and CSRF-sensitive state.
JOB_WORKER_THREADS: number of background job worker threads.

In the systemd deployment, environment is loaded from /etc/left4me/host.env and /etc/left4me/web.env.

Admin Bootstrap

Create the first admin account with the Flask CLI. Provide the password through LEFT4ME_ADMIN_PASSWORD:

LEFT4ME_ADMIN_PASSWORD='change-me' flask create-user <username> --admin