hpc-attack-live-admin-editing

name	hpc-attack-live-admin-editing
description	Use when changing HPC Attack instructor/admin-facing pages, room dashboard text, CSS, or lightweight JavaScript during a running class without restarting the game or disrupting student sessions.

HPC Attack Live Admin Editing

Core Rule

Keep the running hpc-attack process alive. Student sessions and game state live in memory, so restarting Python, Uvicorn, or scripts/start-game.sh resets the game.

Make live instructor-facing edits through files in live-admin/. The server reads these files on each /admin or /dashboard request.

Safe Workflow

1. Edit or create files under live-admin/.
2. Refresh only the instructor/admin browser tab that should change.
3. Verify /healthz still shows the same session_id.
4. Do not touch /terminal, /board, student auth, WebSocket handling, or GameEngine during live play unless the class is paused and a reset is acceptable.

Live Files

File	Effect
live-admin/admin-note.html	Adds instructor-only HTML above the normal admin console while preserving controls.
live-admin/dashboard-note.html	Adds HTML above the projected room dashboard.
live-admin/live.css	Adds CSS to both /admin and /dashboard.
live-admin/admin.css	Adds CSS only to /admin.
live-admin/dashboard.css	Adds CSS only to /dashboard.
live-admin/admin.js	Adds lightweight JavaScript only to /admin.
live-admin/dashboard.js	Adds lightweight JavaScript only to /dashboard.
live-admin/admin.html	Advanced: replaces the entire admin body. Preserve controls and API calls.
live-admin/dashboard.html	Advanced: replaces the entire dashboard body. Preserve /api/dashboard polling.

Prefer note/CSS/JS files. Use full admin.html or dashboard.html only for deliberate layout rewrites.

Editing Rules

• Keep changes instructor-facing. Do not modify the student terminal or situation board for a running class.
• Avoid Python code changes during live play. They will not take effect without restart.
• If a change needs new API behavior, defer it until after class or implement it before starting the game.
• Keep injected JavaScript small and defensive. If it fails, it should not block existing admin controls.
• Do not expose access codes on public tunnel pages. Admin and roster remain localhost-only.

Quick Checks

curl -s http://127.0.0.1:8765/healthz
curl -s http://127.0.0.1:8765/admin | rg "your live text"
curl -s http://127.0.0.1:8765/dashboard | rg "your live text"

If the page does not change, confirm the server was started from the repo root or set HPC_LIVE_ADMIN_DIR=/absolute/path/to/live-admin before starting.