Claude
7d9dd4e4a9
The first run on starshipos-f18.org created the dashboards, then XWiki refused the group and rights objects: a form-encoded POST needs XWiki's form token (CSRF), an XML one does not. For about two minutes Admin.WebHome and Contributors.WebHome were readable by guests (links and the names of secrets, no values). Objects now go as XML, and the spaces' rights are made before the pages, so a failed run cannot leave a dashboard open. Installed: Main 200, Admin and Contributors 401 as a guest, 200 as rajames; a second run changes nothing. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GE3SDvQn5EoxdGufk84zz2
site/org -- the .org XWiki's pages
The project's working wiki at starshipos-f18.org (the public face is the .com; demo/ has its
"Try it" page). Three pages, ruled by Captain Bob on 2026-11-07:
| Page | File | Who sees it |
|---|---|---|
Main.WebHome -- the landing page |
Main.WebHome.xwiki |
everyone, guests included |
Admin.WebHome -- the admin dashboard |
Admin.WebHome.xwiki |
the administrator (XWiki.rajames) alone |
Contributors.WebHome -- the contributors' dashboard |
Contributors.WebHome.xwiki |
the group XWiki.StarshipContributors, and the administrator |
They are in the starshipos-f18.com look -- the "StarshipOS.com" design canvas (navy #0A1222, accent
#F5891F, JetBrains Mono with Exo 2 headings), where they are also drawn as the .org artboards.
build.py writes the three .xwiki files (and, with --canvas <dir>, the artboards) from one
source: edit it, not the .xwiki files. Each page is one {{html}} block, which needs a page author
with script rights (the administrator has them). CI is shown as Gitea's live workflow badges, which
need no login.
install.sh puts them on the wiki through its REST API, makes the group and the rights, and checks
as a guest that the landing page is readable and the dashboards are not:
XWIKI_USER=rajames XWIKI_PASSWORD=... site/org/install.sh
Contributors are added to XWiki.StarshipContributors in the wiki's administration (Users and
Groups). The wiki-wide rights -- what guests may do anywhere else -- are the wiki's own, not this.