Carlos Arias b967419717 Phase 1: admin login page + secret-link token auth ... - /admin login page (public, noindex): password form + signed-in panel that activates the in-page console. Verified in-browser: login -> panel -> the astroagent handle appears on other pages. - Secret-link login: visit /admin/<token> to sign in without a password. adminauth token() validates a bcrypt-hashed token, sets the session, 302s to /admin. nginx routes the token path to PHP. set-admin-token.php generates it. - Password login kept as a fallback. Verified: token link -> session -> console access; bad token -> /admin?e=1. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01DoFYZY9gkGPNDqZ7NuEa9a		2026-07-23 22:15:50 +00:00
..
001_create_metrics_placeholder.sql	feat(api): Foundation — installer, migrations, two-tier auth, health round-trip	2026-07-04 23:23:51 +00:00
002_create_sp_plugins.sql	fix: repair the fresh-clone flow — track api/public + app/public, fix installer schema	2026-07-05 00:15:55 +00:00
003_schema_snapshot.sql	Baseline: full site build (brand, pages, DB, agent-editable)	2026-07-23 20:21:28 +00:00
004_create_cja_projects.sql	Baseline: full site build (brand, pages, DB, agent-editable)	2026-07-23 20:21:28 +00:00
005_create_cja_contact.sql	Baseline: full site build (brand, pages, DB, agent-editable)	2026-07-23 20:21:28 +00:00
006_projects_gallery_skills.sql	Baseline: full site build (brand, pages, DB, agent-editable)	2026-07-23 20:21:28 +00:00
007_create_cja_changelog.sql	Baseline: full site build (brand, pages, DB, agent-editable)	2026-07-23 20:21:28 +00:00
008_create_cja_admin.sql	Phase 0: admin console foundation	2026-07-23 20:23:48 +00:00
009_admin_token.sql	Phase 1: admin login page + secret-link token auth	2026-07-23 22:15:50 +00:00