feat(banner): admin-controlled site banner above the header

hodyhq · hodyhq · commit 868f4efb5ab2 · 2026-06-26T12:24:44.000-04:00
Adds a tenant-scoped notice that appears above the page header for
maintenance windows, releases, or incident announcements. Off by
default for existing installs; admin opt-in via Site Settings →
Banner.

Schema
- tenants.site_banner_enabled BOOL NOT NULL DEFAULT FALSE
- tenants.site_banner_message TEXT NOT NULL DEFAULT ''
- tenants.site_banner_variant VARCHAR(20) NOT NULL DEFAULT 'info'
- Migration is additive — no behavior change on upgrade.

Backend
- New action UpdateTenantSiteBanner validates variant against an
  allowlist (info|success|warning|danger|brand) and rejects an
  enabled banner with empty message. Max 500 chars.
- New cmd + postgres handler updates the three columns in one UPDATE.
- New POST /_api/admin/settings/site-banner endpoint.
- Tenant entity carries the three fields; rendered via existing
  Tenant context in views/base.html immediately inside &lt;body&gt;.

Frontend
- /admin/banner page with toggle / variant dropdown / 500-char
  message textarea / live preview / per-keystroke counter.
- _site-banner.scss owns the five variant palettes (info teal,
  success green, warning amber, danger red, brand var --color-primary).
  Responsive: tightens padding/font under 640px.
- No customer-facing render changes when disabled — the
  conditional in views/base.html elides the &lt;div&gt; entirely.
diff --git a/app/actions/tenant.go b/app/actions/tenant.go
@@ -3,6 +3,7 @@ package actions
 import (
 	"context"
 	"fmt"
+	"strings"
 	"time"
 
 	"github.com/getfider/fider/app/models/query"
@@ -280,6 +281,48 @@ func (action *UpdateTenantAdvancedSettings) Validate(ctx context.Context, user *
 	return validate.Success()
 }
 
+// UpdateTenantSiteBanner is the input model used to toggle and edit the
+// site-wide banner shown above the page header.
+type UpdateTenantSiteBanner struct {
+	Enabled bool   `json:"enabled"`
+	Message string `json:"message"`
+	Variant string `json:"variant"`
+}
+
+// IsAuthorized returns true if current user is authorized to perform this action
+func (action *UpdateTenantSiteBanner) IsAuthorized(ctx context.Context, user *entity.User) bool {
+	return user != nil && user.Role == enum.RoleAdministrator
+}
+
+// Validate if current model is valid
+func (action *UpdateTenantSiteBanner) Validate(ctx context.Context, user *entity.User) *validate.Result {
+	result := validate.Success()
+
+	allowedVariants := map[string]bool{
+		"info":    true,
+		"success": true,
+		"warning": true,
+		"danger":  true,
+		"brand":   true,
+	}
+	if action.Variant == "" {
+		action.Variant = "info"
+	}
+	if !allowedVariants[action.Variant] {
+		result.AddFieldFailure("variant", "Variant must be one of info, success, warning, danger, brand.")
+	}
+
+	if len(action.Message) > 500 {
+		result.AddFieldFailure("message", "Banner message must be 500 characters or fewer.")
+	}
+
+	if action.Enabled && strings.TrimSpace(action.Message) == "" {
+		result.AddFieldFailure("message", "Banner message is required when the banner is enabled.")
+	}
+
+	return result
+}
+
 // UpdateTenantPrivacySettings is the input model used to update tenant privacy settings
 type UpdateTenantPrivacySettings struct {
 	IsPrivate           bool `json:"isPrivate"`
diff --git a/app/cmd/routes.go b/app/cmd/routes.go
@@ -170,6 +170,7 @@ func routes(r *web.Engine) *web.Engine {
 
 		ui.Get("/admin", handlers.GeneralSettingsPage())
 		ui.Get("/admin/advanced", handlers.AdvancedSettingsPage())
+		ui.Get("/admin/banner", handlers.ManageBanner())
 		ui.Get("/admin/privacy", handlers.Page("Privacy · Site Settings", "", "Administration/pages/PrivacySettings.page"))
 		ui.Get("/admin/invitations", handlers.Page("Invitations · Site Settings", "", "Administration/pages/Invitations.page"))
 		ui.Get("/admin/users", handlers.ManageMembers())
@@ -211,6 +212,7 @@ func routes(r *web.Engine) *web.Engine {
 		ui.Post("/_api/admin/settings/advanced", handlers.UpdateAdvancedSettings())
 		ui.Post("/_api/admin/settings/privacy", handlers.UpdatePrivacySettings())
 		ui.Post("/_api/admin/settings/emailauth", handlers.UpdateEmailAuthAllowed())
+		ui.Post("/_api/admin/settings/site-banner", handlers.UpdateSiteBanner())
 		ui.Post("/_api/admin/oauth", handlers.SaveOAuthConfig())
 		ui.Post("/_api/admin/oauth/:provider/status", handlers.SetSystemProviderStatus())
 		ui.Post("/_api/admin/roles/:role/users", handlers.ChangeUserRole())
diff --git a/app/handlers/admin.go b/app/handlers/admin.go
@@ -96,6 +96,26 @@ func UpdateAdvancedSettings() web.HandlerFunc {
 	}
 }
 
+// UpdateSiteBanner toggles and edits the site-wide banner shown above the header.
+func UpdateSiteBanner() web.HandlerFunc {
+	return func(c *web.Context) error {
+		action := new(actions.UpdateTenantSiteBanner)
+		if result := c.BindTo(action); !result.Ok {
+			return c.HandleValidation(result)
+		}
+
+		if err := bus.Dispatch(c, &cmd.UpdateTenantSiteBanner{
+			Enabled: action.Enabled,
+			Message: action.Message,
+			Variant: action.Variant,
+		}); err != nil {
+			return c.Failure(err)
+		}
+
+		return c.Ok(web.Map{})
+	}
+}
+
 // UpdatePrivacySettings update current tenant's privacy settings
 func UpdatePrivacySettings() web.HandlerFunc {
 	return func(c *web.Context) error {
diff --git a/app/handlers/banner_page.go b/app/handlers/banner_page.go
@@ -0,0 +1,24 @@
+package handlers
+
+import (
+	"net/http"
+
+	"github.com/getfider/fider/app/pkg/web"
+)
+
+// ManageBanner renders the admin page where tenants configure the
+// site-wide banner shown above the page header.
+func ManageBanner() web.HandlerFunc {
+	return func(c *web.Context) error {
+		tenant := c.Tenant()
+		return c.Page(http.StatusOK, web.Props{
+			Page:  "Administration/pages/ManageBanner.page",
+			Title: "Site Banner · Site Settings",
+			Data: web.Map{
+				"siteBannerEnabled": tenant.SiteBannerEnabled,
+				"siteBannerMessage": tenant.SiteBannerMessage,
+				"siteBannerVariant": tenant.SiteBannerVariant,
+			},
+		})
+	}
+}
diff --git a/app/models/cmd/tenant.go b/app/models/cmd/tenant.go
@@ -96,3 +96,12 @@ type CancelTenantDeletion struct {
 type DeleteTenant struct {
 	TenantID int
 }
+
+// UpdateTenantSiteBanner toggles and configures the site-wide banner shown
+// above the page header. Used by /_api/admin/settings/site-banner.
+type UpdateTenantSiteBanner struct {
+	TenantID int
+	Enabled  bool
+	Message  string
+	Variant  string
+}
diff --git a/app/models/entity/tenant.go b/app/models/entity/tenant.go
@@ -27,6 +27,9 @@ type Tenant struct {
 	PreventIndexing     bool              `json:"preventIndexing"`
 	IsModerationEnabled bool              `json:"isModerationEnabled"`
 	IsPro               bool              `json:"isPro"`
+	SiteBannerEnabled   bool              `json:"siteBannerEnabled"`
+	SiteBannerMessage   string            `json:"siteBannerMessage"`
+	SiteBannerVariant   string            `json:"siteBannerVariant"`
 	// ScheduledDeletionAt is set when the account owner has requested deletion of the whole
 	// site. The tenant stays active during the grace window; a background job performs the
 	// hard delete once this time passes. Not exposed to clients.
diff --git a/app/services/sqlstore/dbEntities/tenant.go b/app/services/sqlstore/dbEntities/tenant.go
@@ -29,6 +29,9 @@ type Tenant struct {
 	IsPro                 bool         `db:"is_pro"`
 	HasPaddleSubscription bool         `db:"has_paddle_subscription"`
 	ScheduledDeletionAt   dbx.NullTime `db:"scheduled_deletion_at"`
+	SiteBannerEnabled     bool         `db:"site_banner_enabled"`
+	SiteBannerMessage     string       `db:"site_banner_message"`
+	SiteBannerVariant     string       `db:"site_banner_variant"`
 }
 
 func (t *Tenant) ToModel() *entity.Tenant {
@@ -63,6 +66,9 @@ func (t *Tenant) ToModel() *entity.Tenant {
 		PreventIndexing:     t.PreventIndexing,
 		IsModerationEnabled: isPro && t.IsModerationEnabled,
 		IsPro:               isPro,
+		SiteBannerEnabled:   t.SiteBannerEnabled,
+		SiteBannerMessage:   t.SiteBannerMessage,
+		SiteBannerVariant:   t.SiteBannerVariant,
 	}
 
 	if t.ScheduledDeletionAt.Valid {
diff --git a/app/services/sqlstore/postgres/postgres.go b/app/services/sqlstore/postgres/postgres.go
@@ -115,6 +115,7 @@ func (s Service) Init() {
 	bus.AddHandler(updateTenantPrivacySettings)
 	bus.AddHandler(updateTenantEmailAuthAllowedSettings)
 	bus.AddHandler(updateTenantAdvancedSettings)
+	bus.AddHandler(updateTenantSiteBanner)
 	bus.AddHandler(scheduleTenantDeletion)
 	bus.AddHandler(cancelTenantDeletion)
 	bus.AddHandler(deleteTenant)
diff --git a/app/services/sqlstore/postgres/tenant.go b/app/services/sqlstore/postgres/tenant.go
@@ -116,6 +116,21 @@ func updateTenantAdvancedSettings(ctx context.Context, c *cmd.UpdateTenantAdvanc
 	})
 }
 
+func updateTenantSiteBanner(ctx context.Context, c *cmd.UpdateTenantSiteBanner) error {
+	return using(ctx, func(trx *dbx.Trx, tenant *entity.Tenant, user *entity.User) error {
+		query := "UPDATE tenants SET site_banner_enabled = $1, site_banner_message = $2, site_banner_variant = $3 WHERE id = $4"
+		_, err := trx.Execute(query, c.Enabled, c.Message, c.Variant, tenant.ID)
+		if err != nil {
+			return errors.Wrap(err, "failed update tenant site banner")
+		}
+
+		tenant.SiteBannerEnabled = c.Enabled
+		tenant.SiteBannerMessage = c.Message
+		tenant.SiteBannerVariant = c.Variant
+		return nil
+	})
+}
+
 func activateTenant(ctx context.Context, c *cmd.ActivateTenant) error {
 	return using(ctx, func(trx *dbx.Trx, tenant *entity.Tenant, user *entity.User) error {
 		query := "UPDATE tenants SET status = $1 WHERE id = $2"
@@ -261,6 +276,7 @@ func getFirstTenant(ctx context.Context, q *query.GetFirstTenant) error {
 
 	err := trx.Get(&tenant, `
 		SELECT t.id, t.name, t.subdomain, t.cname, t.invitation, t.locale, t.welcome_message, t.welcome_header, t.description_template, t.status, t.is_private, t.logo_bkey, t.custom_css, t.allowed_schemes, t.is_email_auth_allowed, t.is_feed_enabled, t.is_moderation_enabled, t.prevent_indexing, t.is_pro, t.scheduled_deletion_at,
+			t.site_banner_enabled, t.site_banner_message, t.site_banner_variant,
 			(b.paddle_subscription_id IS NOT NULL AND b.stripe_subscription_id IS NULL) AS has_paddle_subscription
 		FROM tenants t
 		LEFT JOIN tenants_billing b ON b.tenant_id = t.id
@@ -281,6 +297,7 @@ func getTenantByDomain(ctx context.Context, q *query.GetTenantByDomain) error {
 
 	err := trx.Get(&tenant, `
 		SELECT t.id, t.name, t.subdomain, t.cname, t.invitation, t.locale, t.welcome_message, t.welcome_header, t.description_template, t.status, t.is_private, t.logo_bkey, t.custom_css, t.allowed_schemes, t.is_email_auth_allowed, t.is_feed_enabled, t.is_moderation_enabled, t.prevent_indexing, t.is_pro, t.scheduled_deletion_at,
+			t.site_banner_enabled, t.site_banner_message, t.site_banner_variant,
 			(b.paddle_subscription_id IS NOT NULL AND b.stripe_subscription_id IS NULL) AS has_paddle_subscription
 		FROM tenants t
 		LEFT JOIN tenants_billing b ON b.tenant_id = t.id
diff --git a/locale/en/client.json b/locale/en/client.json
@@ -1,5 +1,19 @@
 {
   "action.cancel": "Cancel",
+  "admin.banner.charsleft": "{remaining} characters remaining",
+  "admin.banner.enable": "Show site-wide banner",
+  "admin.banner.form.message": "Message",
+  "admin.banner.form.variant": "Color variant",
+  "admin.banner.page.subtitle": "Show a site-wide notice above the header for maintenance, releases, or incidents",
+  "admin.banner.page.title": "Site Banner",
+  "admin.banner.preview": "Preview",
+  "admin.banner.save": "Save banner",
+  "admin.banner.saved": "Banner settings saved.",
+  "admin.banner.variant.brand": "Brand — tenant primary color",
+  "admin.banner.variant.danger": "Danger — incident in progress",
+  "admin.banner.variant.info": "Info — neutral announcement",
+  "admin.banner.variant.success": "Success — green confirmation",
+  "admin.banner.variant.warning": "Warning — scheduled maintenance",
   "action.change": "change",
   "action.close": "Close",
   "action.commentsfeed": "Comment Feed",
@@ -45,8 +59,6 @@
   "error.pagenotfound.title": "Page not found",
   "error.unauthorized.text": "You need to sign in before accessing this page.",
   "error.unauthorized.title": "Unauthorized",
-  "header.nav.feedback": "All Feedback",
-  "header.nav.roadmap": "Roadmap",
   "home.filter.label": "Filter",
   "home.filter.search.label": "Search in filters...",
   "home.form.defaultinvitation": "Enter your suggestion here...",
@@ -101,7 +113,6 @@
   "linkmodal.title": "Insert Link",
   "linkmodal.url.label": "URL",
   "linkmodal.url.placeholder": "https://example.com",
-  "listposts.label.showmore": "Show {0} more",
   "menu.administration": "Administration",
   "menu.mysettings": "My Settings",
   "menu.signout": "Sign out",
@@ -188,13 +199,6 @@
   "pagination.prev": "Previous",
   "post.pending": "pending",
   "postdetails.backtoall": "Back to all suggestions",
-  "postdetails.backtoroadmap": "Back to roadmap",
-  "roadmap.blank.description": "Mark posts as planned or in progress and they'll show up here on the roadmap.",
-  "roadmap.blank.title": "Your roadmap is waiting for its first update",
-  "roadmap.column.showmore": "Show more",
-  "roadmap.upsell.billing": "Upgrade to PRO",
-  "roadmap.upsell.description": "Upgrade to Pro to unlock your Roadmap",
-  "roadmap.upsell.title": "See what's happening in the Roadmap view",
   "showpost.comment.copylink.error": "Could not copy comment link, please copy page URL",
   "showpost.comment.copylink.success": "Successfully copied comment link to clipboard",
   "showpost.comment.unknownhighlighted": "Unknown comment ID #{id}",
@@ -230,7 +234,6 @@
   "signin.code.edit": "Edit",
   "signin.code.getnew": "Get a new code",
   "signin.code.instruction": "Please type in the code we just sent to <0>{email}</0>",
-  "signin.code.locked": "Your code has expired due to too many incorrect attempts. Please request a new one.",
   "signin.code.placeholder": "Type in the code here",
   "signin.code.sent": "A new code has been sent to your email.",
   "signin.email.placeholder": "Email address",
diff --git a/migrations/202606221200_add_tenant_site_banner.up.sql b/migrations/202606221200_add_tenant_site_banner.up.sql
@@ -0,0 +1,5 @@
+-- Site-wide banner controlled from Site Settings. Off by default for
+-- existing installs, so this migration adds no visible behavior change.
+ALTER TABLE tenants ADD site_banner_enabled BOOLEAN NOT NULL DEFAULT FALSE;
+ALTER TABLE tenants ADD site_banner_message TEXT NOT NULL DEFAULT '';
+ALTER TABLE tenants ADD site_banner_variant VARCHAR(20) NOT NULL DEFAULT 'info';
diff --git a/public/assets/styles/index.scss b/public/assets/styles/index.scss
@@ -3,5 +3,6 @@
 @import "reset.scss";
 @import "utility.scss";
 @import "tooltip.scss";
+@import "site-banner.scss";
 @include theme($light-colors, '[data-theme="light"]');
 @include theme($dark-colors, '[data-theme="dark"]');
diff --git a/public/assets/styles/site-banner.scss b/public/assets/styles/site-banner.scss
@@ -0,0 +1,26 @@
+// Site-wide banner shown above the page header. Toggled per tenant from
+// /admin/banner and rendered server-side by views/base.html.
+.site-banner {
+  display: block;
+  width: 100%;
+  padding: 10px 24px;
+  text-align: center;
+  font-size: 14px;
+  font-weight: 600;
+  line-height: 1.45;
+  white-space: pre-wrap;
+  word-wrap: break-word;
+
+  &--info    { background: #0EA5E9; color: #FFFFFF; }
+  &--success { background: #16A34A; color: #FFFFFF; }
+  &--warning { background: #FBBF24; color: #111111; }
+  &--danger  { background: #DC2626; color: #FFFFFF; }
+  &--brand   { background: var(--color-primary, #0F3EBB); color: #FFFFFF; }
+}
+
+@media (max-width: 640px) {
+  .site-banner {
+    padding: 8px 12px;
+    font-size: 13px;
+  }
+}
diff --git a/public/pages/Administration/components/SideMenu.tsx b/public/pages/Administration/components/SideMenu.tsx
@@ -47,6 +47,7 @@ export const SideMenu = (props: SiteMenuProps) => {
         <SideMenuItem name="invitations" title="Invitations" href="/admin/invitations" isActive={activeItem === "invitations"} />
         <SideMenuItem name="authentication" title="Authentication" href="/admin/authentication" isActive={activeItem === "authentication"} />
         <SideMenuItem name="advanced" title="Advanced" href="/admin/advanced" isActive={activeItem === "advanced"} />
+        <SideMenuItem name="banner" title="Banner" href="/admin/banner" isActive={activeItem === "banner"} />
         {fider.session.user.isAdministrator && (
           <>
             {fider.settings.isBillingEnabled && <SideMenuItem name="billing" title="Billing" href="/admin/billing" isActive={activeItem === "billing"} />}
diff --git a/public/pages/Administration/pages/ManageBanner.page.tsx b/public/pages/Administration/pages/ManageBanner.page.tsx
diff --git a/public/services/actions/tenant.ts b/public/services/actions/tenant.ts
diff --git a/views/base.html b/views/base.html
