rustio-admin

Django Admin, but for Rust. A small, focused admin framework for Postgres-backed Rust apps. From a struct to a working CRUD admin in under 50 lines of project code.

🔐 v0.4.0 (2026-05-09) — session lifecycle + recovery foundations. Hashed-at-rest session tokens with a 14-day plaintext-fallback transition; centralized invalidate_sessions API as the single legitimate writer of revoked_at (logout is now a soft revoke); typed SessionTrust + SessionInvalidationReason + SessionTarget lifecycle vocabulary. New email::Mailer trait + LogMailer default + framework_envelope. audit::redact helpers (doctrine 11 — never log secrets). correlation_id middleware (UUID v7 stamped before CSRF so even rejected requests trace) + new metadata JSONB / correlation_id / session_id columns on the audit row. Read-only /admin/account/sessions page (revoke buttons land in 0.5.x). New DESIGN_SESSIONS.md + DESIGN_AUDIT.md. Downstream projects: bump to rustio-admin = "0.4", install middleware::correlation_id BEFORE csrf_protect, then cargo update -p rustio-admin. v0.4.0 changelog · release.

🛡 v0.3.0 (2026-05-08) — authority + design-system stabilization. Server-side authority guards (self-demote / cross-rank / role-ceiling) with last-Administrator + last-Developer protection. Audit rows on every user/group authority mutation. Foreign-key list cells now resolve to display labels with click-throughs. Group permissions render as a model × action matrix instead of a flat 60+ checkbox list. Canonical accent moved to teal-emerald (#0F8C7E light / #3FAA9D dark) — retired the previous terracotta. New DESIGN_SYSTEM.md + PR template gate token-level changes behind a visual regression checklist. Downstream projects: bump to rustio-admin = "0.3" and cargo update -p rustio-admin. v0.3.0 changelog · release.

🔧 v0.2.1 (2026-05-07, CLI-only patch) — fixes the rustio startproject scaffold template, which was pinning new projects to rustio-admin = "0.1" and missing every 0.2.0 feature. Re-install the CLI with cargo install rustio-admin-cli --force to pick up the corrected template; existing projects are unaffected. v0.2.1 changelog · release.

✨ v0.2.0 released on 2026-05-07 — premium-chrome release. List view, form view, and Auth pages all share one design language; dark mode is now a calm graphite workspace rather than an OLED-black hacker terminal. New list-view toolbar (filters dropdown / sort dropdown / per-page picker / active-filter pills / numbered pagination / search glyph) ships with full URL state preservation across every widget. Per-row + master checkboxes drive the new bulk select; projects register custom bulk actions via ModelAdmin::bulk_actions() next to the built-in delete. Form pages cap at 880 px editorial width with a grouped action bar. Sticky sidebar at tablet+. Breaking change: AdminTheme is now an override-patch type (Option<String> fields) — admin.css is the single source of truth, so out of the box no inline <style> is emitted at all. See the v0.2.0 changelog including the Migrating from 0.1.x section, and the release tag.

🎨 v0.1.1 (2026-05-07) — design-system pass. Self-hosted Geist + Geist Mono + Tajawal + Noto Naskh Arabic (SIL OFL-1.1, ~270 KB embedded), full typography token system, crimson #A0341A brand accent. v0.1.1 changelog · release tag.

🚀 v0.1.0 (2026-05-07) — first public release. Three crates landed together: rustio-admin (the library), rustio-admin-macros (the RustioAdmin derive), and rustio-admin-cli (the rustio binary: startproject, startapp, migrate, user, group, perm, doctor). v0.1.0 changelog · release tag.

What you get

• #[derive(RustioAdmin)] on a plain struct → list / create / edit / delete pages.
• impl ModelAdmin for Django-style customisation (list_display, list_filter, search_fields, ordering, list_per_page).
• DB-backed sessions, Argon2 passwords, 5-tier role hierarchy, per-model RBAC.
• Hyper + sqlx + minijinja under the hood. Postgres only. No Tailwind, no PostCSS, no build step — one hand-written stylesheet.
• Single binary deploy. Project templates and CSS are baked in via include_str!; project overrides drop into templates/admin/.

Install

[dependencies]
rustio-admin = "0.4"
tokio  = { version = "1", features = ["macros", "rt-multi-thread"] }
chrono = { version = "0.4", features = ["serde"] }

The CLI ships separately:

cargo install rustio-admin-cli      # provides the `rustio` binary

The 3-line idea

#[derive(RustioAdmin)]
pub struct Post { pub id: i64, pub title: String, /* … */ }

impl Model     for Post { /* TABLE, COLUMNS, from_row, insert_values */ }
impl ModelAdmin for Post {}                            // accept every default

// In your `main`:
let admin = Admin::new().model::<Post>();
let router = register_admin_routes(Router::new(), admin, db, templates);
Server::new(router, addr).run().await?;

A model that wants more control fills in the ModelAdmin body:

impl ModelAdmin for Post {
    fn list_display()  -> &'static [&'static str] { &["title", "published", "created_at"] }
    fn list_filter()   -> &'static [&'static str] { &["published"] }
    fn search_fields() -> &'static [&'static str] { &["title", "body"] }
    fn ordering()      -> &'static [&'static str] { &["-created_at"] }
}

For a complete project skeleton see examples/minimal/ and the docs/getting-started.md walkthrough.

Documentation

Workspace layout

cargo build --workspace
cargo test  --workspace

Status

v0.2.0 — released 2026-05-07. Three releases shipped end-to-end against a local Postgres: v0.1.0 (initial public release; phases 1–15 of the strategic-reset rollout), v0.1.1 (design-system pass — self-hosted fonts, typography token system, crimson brand), and v0.2.0 (premium chrome — list-view toolbar with filters / sort / per-page / pills / numbered pagination + URL state preservation, bulk select + project-defined bulk actions, form refresh, single-source-of-truth theme architecture, calm graphite dark mode). All three browser-walked against the examples/minimal skeleton and a fresh rustio startproject + rustio startapp flow; the classrooms project consumes the published crate from crates.io. See the strategic reset plan for the design and the changelog for the per-release feature inventory.

Future work tracks under separate milestones — v0.3 candidates include richer filter widget kinds beyond BoolYesNo (date range, multi-select, foreign-key autocomplete), inline forms, dashboard widgets, and floating toast notifications. The schema-contract / drift-validator / AI-planner work that originally lived in this repo's predecessor stays explicitly out of scope and will, if it returns at all, ship as a separate rustio-pro-* family of crates.

Non-goals

rustio-admin is the admin layer and the auth/permissions/templates that surround it — nothing more. Not a full web framework. Not an ORM (the Model trait is a thin sqlx shim). Not a content management system. Not AI-augmented. Not multi-database (Postgres only, on purpose). Not schema-contract-driven (the schema-contract / drift-validator / AI-planner work belongs in a future Tier-2 crate, kept entirely out of this repo).

License

MIT — see LICENSE.