fix: session Mark Complete button + feat: two-dashboard architecture

Fix session completion bug: hx-vals sends form-encoded data but handler
expects JSON. Replaced with Chronicle.apiFetch() onclick, also fixing
XSS risk from session name interpolation into JSON string.

Add owner dashboard (GET /campaigns/:id/dashboard) visible only to
campaign owners. Campaign page remains the public-facing dashboard.
Both dashboards independently customizable via the dashboard editor
in the Customization Hub. New migration adds owner_dashboard_layout
JSON column to campaigns table.

https://claude.ai/code/session_01JmHn8AGZVkKPAvHDgR67Hu

Author: claude

db/migrations/000006_owner_dashboard.down.sql

@@ -0,0 +1 @@
+ALTER TABLE campaigns DROP COLUMN owner_dashboard_layout;

db/migrations/000006_owner_dashboard.up.sql

@@ -0,0 +1 @@
+ALTER TABLE campaigns ADD COLUMN owner_dashboard_layout JSON DEFAULT NULL;

internal/plugins/campaigns/customize.templ

@@ -146,9 +146,9 @@ templ dashboardEditorTab(cc *CampaignContext, csrfToken string) {
 	<div class="h-full flex flex-col">
 		<div class="px-6 pt-4 pb-2 shrink-0">
 			<div class="max-w-3xl mx-auto">
-				<h2 class="text-base font-semibold text-fg mb-0.5">Campaign Dashboard</h2>
+				<h2 class="text-base font-semibold text-fg mb-0.5">Campaign Page</h2>
 				<p class="text-xs text-fg-secondary">
-					Customize the layout of your campaign's main dashboard page.
+					Customize the layout of your campaign's main page visible to all members.
 				</p>
 			</div>
 		</div>
@@ -160,6 +160,22 @@ templ dashboardEditorTab(cc *CampaignContext, csrfToken string) {
 				data-csrf-token={ csrfToken }
 			></div>
 		</div>
+		<div class="px-6 pt-6 pb-2 shrink-0 border-t border-edge mt-4">
+			<div class="max-w-3xl mx-auto">
+				<h2 class="text-base font-semibold text-fg mb-0.5">Owner Dashboard</h2>
+				<p class="text-xs text-fg-secondary">
+					Customize your private management dashboard (visible to owner and co-DMs only).
+				</p>
+			</div>
+		</div>
+		<div class="flex-1 overflow-y-auto px-6 py-2">
+			<div
+				data-widget="dashboard-editor"
+				data-endpoint={ fmt.Sprintf("/campaigns/%s/owner-dashboard-layout", cc.Campaign.ID) }
+				data-campaign-id={ cc.Campaign.ID }
+				data-csrf-token={ csrfToken }
+			></div>
+		</div>
 	</div>
 }
 

internal/plugins/campaigns/handler.go

@@ -812,6 +812,76 @@ func (h *Handler) ResetDashboardLayout(c echo.Context) error {
 	return c.JSON(http.StatusOK, map[string]string{"status": "ok"})
 }
 
+// --- Owner Dashboard ---
+
+// OwnerDashboard renders the owner-only management dashboard (GET /campaigns/:id/dashboard).
+func (h *Handler) OwnerDashboard(c echo.Context) error {
+	cc := GetCampaignContext(c)
+	if cc == nil {
+		return apperror.NewMissingContext()
+	}
+
+	var recentEntities []RecentEntity
+	if h.recentLister != nil {
+		recentEntities, _ = h.recentLister.ListRecentForDashboard(
+			c.Request().Context(), cc.Campaign.ID, int(cc.MemberRole), auth.GetUserID(c), 8,
+		)
+	}
+
+	csrfToken := middleware.GetCSRFToken(c)
+	return middleware.Render(c, http.StatusOK, OwnerDashboardPage(cc, recentEntities, csrfToken))
+}
+
+// GetOwnerDashboardLayout returns the owner dashboard layout JSON (GET /campaigns/:id/owner-dashboard-layout).
+func (h *Handler) GetOwnerDashboardLayout(c echo.Context) error {
+	cc := GetCampaignContext(c)
+	if cc == nil {
+		return apperror.NewMissingContext()
+	}
+
+	layout, err := h.service.GetOwnerDashboardLayout(c.Request().Context(), cc.Campaign.ID)
+	if err != nil {
+		return err
+	}
+
+	return c.JSON(http.StatusOK, layout)
+}
+
+// UpdateOwnerDashboardLayout saves the owner dashboard layout (PUT /campaigns/:id/owner-dashboard-layout).
+func (h *Handler) UpdateOwnerDashboardLayout(c echo.Context) error {
+	cc := GetCampaignContext(c)
+	if cc == nil {
+		return apperror.NewMissingContext()
+	}
+
+	var layout DashboardLayout
+	if err := json.NewDecoder(c.Request().Body).Decode(&layout); err != nil {
+		return apperror.NewBadRequest("invalid JSON body")
+	}
+
+	if err := h.service.UpdateOwnerDashboardLayout(c.Request().Context(), cc.Campaign.ID, &layout); err != nil {
+		return err
+	}
+
+	h.logAudit(c, cc.Campaign.ID, "owner_dashboard_layout_updated", nil)
+	return c.JSON(http.StatusOK, map[string]string{"status": "ok"})
+}
+
+// ResetOwnerDashboardLayout removes the custom owner dashboard layout (DELETE /campaigns/:id/owner-dashboard-layout).
+func (h *Handler) ResetOwnerDashboardLayout(c echo.Context) error {
+	cc := GetCampaignContext(c)
+	if cc == nil {
+		return apperror.NewMissingContext()
+	}
+
+	if err := h.service.ResetOwnerDashboardLayout(c.Request().Context(), cc.Campaign.ID); err != nil {
+		return err
+	}
+
+	h.logAudit(c, cc.Campaign.ID, "owner_dashboard_layout_reset", nil)
+	return c.JSON(http.StatusOK, map[string]string{"status": "ok"})
+}
+
 // --- View As Player Toggle ---
 
 // viewAsPlayerCookie is the cookie name for the "view as player" display toggle.

internal/plugins/campaigns/model.go

@@ -98,8 +98,9 @@ type Campaign struct {
 	Settings        string    `json:"settings"`
 	BackdropPath    *string   `json:"backdrop_path,omitempty"`
 	SidebarConfig   string    `json:"sidebar_config"`
-	DashboardLayout *string   `json:"dashboard_layout,omitempty"` // JSON layout; nil = use hardcoded default.
-	CreatedBy       string    `json:"created_by"`
+	DashboardLayout      *string   `json:"dashboard_layout,omitempty"`       // JSON layout; nil = use hardcoded default.
+	OwnerDashboardLayout *string   `json:"owner_dashboard_layout,omitempty"` // Owner-only dashboard layout; nil = use default.
+	CreatedBy            string    `json:"created_by"`
 	CreatedAt       time.Time `json:"created_at"`
 	UpdatedAt       time.Time `json:"updated_at"`
 }
@@ -277,6 +278,23 @@ func (c *Campaign) ParseDashboardLayout() *DashboardLayout {
 	return &layout
 }
 
+// ParseOwnerDashboardLayout parses the campaign's owner_dashboard_layout JSON
+// into a DashboardLayout struct. Returns nil if the column is NULL (use default).
+func (c *Campaign) ParseOwnerDashboardLayout() *DashboardLayout {
+	if c.OwnerDashboardLayout == nil || *c.OwnerDashboardLayout == "" {
+		return nil
+	}
+	var layout DashboardLayout
+	if err := json.Unmarshal([]byte(*c.OwnerDashboardLayout), &layout); err != nil {
+		slog.Warn("failed to parse owner dashboard layout, using default",
+			slog.String("campaign_id", c.ID),
+			slog.String("error", err.Error()),
+		)
+		return nil
+	}
+	return &layout
+}
+
 // CampaignSettings holds campaign-level configuration stored as JSON in
 // the campaigns.settings column. Accent color, display preferences, etc.
 type CampaignSettings struct {

internal/plugins/campaigns/repository.go

@@ -52,6 +52,10 @@ type CampaignRepository interface {
 	// Pass nil to revert to the hardcoded default dashboard.
 	UpdateDashboardLayout(ctx context.Context, campaignID string, layoutJSON *string) error
 
+	// UpdateOwnerDashboardLayout updates only the owner_dashboard_layout JSON column.
+	// Pass nil to revert to the hardcoded default owner dashboard.
+	UpdateOwnerDashboardLayout(ctx context.Context, campaignID string, layoutJSON *string) error
+
 	// TransferOwnership atomically transfers campaign ownership from one user
 	// to another within a database transaction.
 	TransferOwnership(ctx context.Context, campaignID, fromUserID, toUserID string) error
@@ -75,12 +79,12 @@ func NewCampaignRepository(db *sql.DB) CampaignRepository {
 
 // Create inserts a new campaign row.
 func (r *campaignRepository) Create(ctx context.Context, campaign *Campaign) error {
-	query := `INSERT INTO campaigns (id, name, slug, description, is_public, settings, backdrop_path, sidebar_config, dashboard_layout, created_by, created_at, updated_at)
-	          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
+	query := `INSERT INTO campaigns (id, name, slug, description, is_public, settings, backdrop_path, sidebar_config, dashboard_layout, owner_dashboard_layout, created_by, created_at, updated_at)
+	          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
 
 	_, err := r.db.ExecContext(ctx, query,
 		campaign.ID, campaign.Name, campaign.Slug, campaign.Description, campaign.IsPublic,
-		campaign.Settings, campaign.BackdropPath, campaign.SidebarConfig, campaign.DashboardLayout,
+		campaign.Settings, campaign.BackdropPath, campaign.SidebarConfig, campaign.DashboardLayout, campaign.OwnerDashboardLayout,
 		campaign.CreatedBy, campaign.CreatedAt, campaign.UpdatedAt,
 	)
 	if err != nil {
@@ -91,13 +95,13 @@ func (r *campaignRepository) Create(ctx context.Context, campaign *Campaign) err
 
 // FindByID retrieves a campaign by its UUID.
 func (r *campaignRepository) FindByID(ctx context.Context, id string) (*Campaign, error) {
-	query := `SELECT id, name, slug, description, is_public, settings, backdrop_path, sidebar_config, dashboard_layout, created_by, created_at, updated_at
+	query := `SELECT id, name, slug, description, is_public, settings, backdrop_path, sidebar_config, dashboard_layout, owner_dashboard_layout, created_by, created_at, updated_at
 	          FROM campaigns WHERE id = ?`
 
 	c := &Campaign{}
 	err := r.db.QueryRowContext(ctx, query, id).Scan(
 		&c.ID, &c.Name, &c.Slug, &c.Description, &c.IsPublic,
-		&c.Settings, &c.BackdropPath, &c.SidebarConfig, &c.DashboardLayout,
+		&c.Settings, &c.BackdropPath, &c.SidebarConfig, &c.DashboardLayout, &c.OwnerDashboardLayout,
 		&c.CreatedBy, &c.CreatedAt, &c.UpdatedAt,
 	)
 	if errors.Is(err, sql.ErrNoRows) {
@@ -111,13 +115,13 @@ func (r *campaignRepository) FindByID(ctx context.Context, id string) (*Campaign
 
 // FindBySlug retrieves a campaign by its URL slug.
 func (r *campaignRepository) FindBySlug(ctx context.Context, slug string) (*Campaign, error) {
-	query := `SELECT id, name, slug, description, is_public, settings, backdrop_path, sidebar_config, dashboard_layout, created_by, created_at, updated_at
+	query := `SELECT id, name, slug, description, is_public, settings, backdrop_path, sidebar_config, dashboard_layout, owner_dashboard_layout, created_by, created_at, updated_at
 	          FROM campaigns WHERE slug = ?`
 
 	c := &Campaign{}
 	err := r.db.QueryRowContext(ctx, query, slug).Scan(
 		&c.ID, &c.Name, &c.Slug, &c.Description, &c.IsPublic,
-		&c.Settings, &c.BackdropPath, &c.SidebarConfig, &c.DashboardLayout,
+		&c.Settings, &c.BackdropPath, &c.SidebarConfig, &c.DashboardLayout, &c.OwnerDashboardLayout,
 		&c.CreatedBy, &c.CreatedAt, &c.UpdatedAt,
 	)
 	if errors.Is(err, sql.ErrNoRows) {
@@ -161,7 +165,7 @@ func (r *campaignRepository) ListByUser(ctx context.Context, userID string, opts
 		var c Campaign
 		if err := rows.Scan(
 			&c.ID, &c.Name, &c.Slug, &c.Description, &c.IsPublic,
-			&c.Settings, &c.BackdropPath, &c.SidebarConfig, &c.DashboardLayout,
+			&c.Settings, &c.BackdropPath, &c.SidebarConfig, &c.DashboardLayout, &c.OwnerDashboardLayout,
 			&c.CreatedBy, &c.CreatedAt, &c.UpdatedAt,
 		); err != nil {
 			return nil, 0, fmt.Errorf("scanning campaign row: %w", err)
@@ -179,7 +183,7 @@ func (r *campaignRepository) ListAll(ctx context.Context, opts ListOptions) ([]C
 		return nil, 0, fmt.Errorf("counting all campaigns: %w", err)
 	}
 
-	query := `SELECT id, name, slug, description, is_public, settings, backdrop_path, sidebar_config, dashboard_layout, created_by, created_at, updated_at
+	query := `SELECT id, name, slug, description, is_public, settings, backdrop_path, sidebar_config, dashboard_layout, owner_dashboard_layout, created_by, created_at, updated_at
 	          FROM campaigns ORDER BY updated_at DESC LIMIT ? OFFSET ?`
 
 	rows, err := r.db.QueryContext(ctx, query, opts.PerPage, opts.Offset())
@@ -193,7 +197,7 @@ func (r *campaignRepository) ListAll(ctx context.Context, opts ListOptions) ([]C
 		var c Campaign
 		if err := rows.Scan(
 			&c.ID, &c.Name, &c.Slug, &c.Description, &c.IsPublic,
-			&c.Settings, &c.BackdropPath, &c.SidebarConfig, &c.DashboardLayout,
+			&c.Settings, &c.BackdropPath, &c.SidebarConfig, &c.DashboardLayout, &c.OwnerDashboardLayout,
 			&c.CreatedBy, &c.CreatedAt, &c.UpdatedAt,
 		); err != nil {
 			return nil, 0, fmt.Errorf("scanning campaign row: %w", err)
@@ -206,7 +210,7 @@ func (r *campaignRepository) ListAll(ctx context.Context, opts ListOptions) ([]C
 // ListPublic returns public campaigns ordered by most recently updated.
 // Used for the public landing page to showcase discoverable campaigns.
 func (r *campaignRepository) ListPublic(ctx context.Context, limit int) ([]Campaign, error) {
-	query := `SELECT id, name, slug, description, is_public, settings, backdrop_path, sidebar_config, dashboard_layout, created_by, created_at, updated_at
+	query := `SELECT id, name, slug, description, is_public, settings, backdrop_path, sidebar_config, dashboard_layout, owner_dashboard_layout, created_by, created_at, updated_at
 	          FROM campaigns WHERE is_public = 1
 	          ORDER BY updated_at DESC LIMIT ?`
 
@@ -221,7 +225,7 @@ func (r *campaignRepository) ListPublic(ctx context.Context, limit int) ([]Campa
 		var c Campaign
 		if err := rows.Scan(
 			&c.ID, &c.Name, &c.Slug, &c.Description, &c.IsPublic,
-			&c.Settings, &c.BackdropPath, &c.SidebarConfig, &c.DashboardLayout,
+			&c.Settings, &c.BackdropPath, &c.SidebarConfig, &c.DashboardLayout, &c.OwnerDashboardLayout,
 			&c.CreatedBy, &c.CreatedAt, &c.UpdatedAt,
 		); err != nil {
 			return nil, fmt.Errorf("scanning public campaign row: %w", err)
@@ -353,6 +357,23 @@ func (r *campaignRepository) UpdateDashboardLayout(ctx context.Context, campaign
 	return nil
 }
 
+// UpdateOwnerDashboardLayout updates only the owner_dashboard_layout JSON for a campaign.
+// Pass nil to revert to the hardcoded default owner dashboard.
+func (r *campaignRepository) UpdateOwnerDashboardLayout(ctx context.Context, campaignID string, layoutJSON *string) error {
+	result, err := r.db.ExecContext(ctx,
+		`UPDATE campaigns SET owner_dashboard_layout = ?, updated_at = NOW() WHERE id = ?`,
+		layoutJSON, campaignID,
+	)
+	if err != nil {
+		return fmt.Errorf("updating owner dashboard layout: %w", err)
+	}
+	rows, _ := result.RowsAffected()
+	if rows == 0 {
+		return apperror.NewNotFound("campaign not found")
+	}
+	return nil
+}
+
 // --- Membership ---
 
 // AddMember inserts a new campaign membership row.

internal/plugins/campaigns/routes.go

@@ -58,6 +58,12 @@ func RegisterRoutes(e *echo.Echo, h *Handler, svc CampaignService, authSvc auth.
 	cg.PUT("/dashboard-layout", h.UpdateDashboardLayout, RequireRole(RoleOwner))
 	cg.DELETE("/dashboard-layout", h.ResetDashboardLayout, RequireRole(RoleOwner))
 
+	// Owner dashboard (Owner + Co-DM).
+	cg.GET("/dashboard", h.OwnerDashboard, RequireRole(RoleOwner))
+	cg.GET("/owner-dashboard-layout", h.GetOwnerDashboardLayout, RequireRole(RoleOwner))
+	cg.PUT("/owner-dashboard-layout", h.UpdateOwnerDashboardLayout, RequireRole(RoleOwner))
+	cg.DELETE("/owner-dashboard-layout", h.ResetOwnerDashboardLayout, RequireRole(RoleOwner))
+
 	// Backdrop and branding (Owner only).
 	cg.POST("/backdrop", h.UploadBackdrop, RequireRole(RoleOwner))
 	cg.DELETE("/backdrop", h.RemoveBackdrop, RequireRole(RoleOwner))