Operator documentation
Start with readiness, prepare a reviewed run, monitor backend evidence, and use the page that owns each recovery action.
Quick start
Confirm OpenAI, Ghost and default draft readiness.
Review keywords, effective settings and the immutable manifest.
Use real stage events, usage and keyword outcomes.
Review it in Ghost Admin before considering live publication.
Prepare and control
/onboarding/Derives readiness from configuration and recorded evidence.
Configuration status, connection checks, first-run evidence
Safe boundaryOptional budgets and author mapping never block readiness.
/dashboard/Prioritizes the active operation and the next safe action.
Run journal, operations ledger, usage ledger
Safe boundaryThis is a read model; mutations live on their owning pages.
/pipeline/Builds and reviews the exact execution manifest.
Server preflight and immutable run manifest
Safe boundaryEmpty queue scope is rejected; live publishing requires acknowledgement.
Monitor and investigate
/pipeline/status/<run_id>Shows one run's backend-emitted stages and outcomes.
Run events, usage events, journal checkpoints
Safe boundaryCancellation finishes the current keyword safely; consumed usage remains.
/pipeline/historyKeeps completed, failed, cancelled and interrupted work searchable.
Durable run journal and operations ledger
Safe boundaryLegacy estimates stay separate from metered usage.
/usageReports local OpenAI usage and coverage by period.
usage-ledger.sqlite3
Safe boundarySoft budgets alert only; Railway and Ghost hosting are excluded.
/logs/Investigates the current application process with cursor replay.
In-memory broadcast ring buffer
Safe boundaryLogs begin at the latest app restart and do not replace durable evidence.
Content and Ghost
/clusters/Owns stable cluster and topic planning state.
Revisioned cluster repository
Safe boundaryNo implicit process-all action is available.
/clusters/<cluster_id>Operates one cluster and its pillar/linking dependencies.
Cluster state plus article and maintenance evidence
Safe boundaryLinking targets only confirmed live posts in the selected cluster.
/articles/Shows recorded and Ghost-synced article identities.
operations.sqlite3 article registry
Safe boundaryUnknown legacy fields remain Unknown; the embedding cache is not inventory.
/authors/Maintains local author-to-Ghost mappings.
Revisioned author repository and synced Ghost users
Safe boundaryThe application does not create or delete Ghost users.
/cmsRuns explicit read-only post and user reconciliation.
Ghost Admin reads and operational registry
Safe boundaryCMS sync never creates, edits, schedules or deletes a Ghost post.
/cache/Operates duplicate-prevention coverage and recovery.
Embedding cache plus recovery operation evidence
Safe boundaryVectors are hidden; clear is blocked during an active mutation.
Configuration and delivery
/settings/Validates non-secret runtime behavior atomically.
Runtime settings revision and environment-owned configuration
Safe boundarySaved changes cannot alter an active run's immutable manifest.
/static-delivery/Builds and deploys a verified immutable publication artifact.
Static artifact manifests and maintenance operations
Safe boundaryStatic delivery does not change Ghost editorial status or call OpenAI.
/maintenance/backups/Creates verified portable application-state archives.
Backup manifests and integrity results
Safe boundaryRestore is offline-only; Ghost/MySQL disaster recovery uses Railway backups.
Outcome language
Draft created, Published on site, Scheduled, Sent, Uncertain and Simulated remain distinct everywhere.
Recovery
Check the run timeline, reconcile uncertain Ghost writes, retry failed keywords only, repair duplicate-index coverage, and create a verified backup before risky maintenance.
Operator sign in