From bcfd8d155a958c7879994da85fb0b2dece786acf Mon Sep 17 00:00:00 2001
From: Brayden Langley <brayden167@gmail.com>
Date: Wed, 2 Sep 2026 11:28:19 -0700
Subject: [PATCH] fix: hide admin navigation from non-admins

---
 src/client/main.tsx           |  3 ++-
 src/client/navigation.test.ts | 17 +++++++++++++++++
 src/client/navigation.ts      |  3 +++
 3 files changed, 22 insertions(+), 1 deletion(-)
 create mode 100644 src/client/navigation.test.ts
 create mode 100644 src/client/navigation.ts

diff --git a/src/client/main.tsx b/src/client/main.tsx
index 3014487..d6def2a 100644
--- a/src/client/main.tsx
+++ b/src/client/main.tsx
@@ -33,6 +33,7 @@ import {
   speechChunks,
   type ReaderSpeechPreferences
 } from './readerSpeech'
+import { shouldShowAdminNavigation } from './navigation'
 
 type WalletSubstrate = 'auto' | 'json-api' | 'secure-json-api' | 'react-native' | 'Cicada' | 'XDM' | 'window.CWI'
 
@@ -1197,7 +1198,7 @@ function Shell ({ children, status }: { children: React.ReactNode, status: Statu
           <Link to='/about'><Info size={18} /> About</Link>
           <Link to='/settings'><SlidersHorizontal size={18} /> Reader settings</Link>
           <Link to='/author'><User size={18} /> Author</Link>
-          <Link to='/admin'><Settings size={18} /> Admin</Link>
+          {shouldShowAdminNavigation(status?.isAdmin) && <Link to='/admin'><Settings size={18} /> Admin</Link>}
         </nav>
         <button
           className='nav-feedback'
diff --git a/src/client/navigation.test.ts b/src/client/navigation.test.ts
new file mode 100644
index 0000000..58a12c7
--- /dev/null
+++ b/src/client/navigation.test.ts
@@ -0,0 +1,17 @@
+import { describe, expect, it } from 'vitest'
+import { shouldShowAdminNavigation } from './navigation'
+
+describe('shouldShowAdminNavigation', () => {
+  it('hides admin navigation while status is unknown', () => {
+    expect(shouldShowAdminNavigation(undefined)).toBe(false)
+    expect(shouldShowAdminNavigation(null)).toBe(false)
+  })
+
+  it('hides admin navigation for non-admins', () => {
+    expect(shouldShowAdminNavigation(false)).toBe(false)
+  })
+
+  it('shows admin navigation for admins', () => {
+    expect(shouldShowAdminNavigation(true)).toBe(true)
+  })
+})
diff --git a/src/client/navigation.ts b/src/client/navigation.ts
new file mode 100644
index 0000000..03cacb0
--- /dev/null
+++ b/src/client/navigation.ts
@@ -0,0 +1,3 @@
+export function shouldShowAdminNavigation (isAdmin: boolean | null | undefined): boolean {
+  return isAdmin === true
+}