Update src/api/admin.py

src/api/admin.py

@@ -266,6 +266,15 @@ async def admin_dashboard(request: Request):
     mm_on  = "selected" if cfg.get("maintenance_mode") else ""
     mm_off = "" if cfg.get("maintenance_mode") else "selected"
 
+    # Worker credentials injected into this page only. The dashboard tries the
+    # server-side proxy first and falls back to a direct browser -> Worker call,
+    # because some hosting environments (HF Spaces) cannot reach workers.dev
+    # while the admin's own browser can. This page is served exclusively to an
+    # authenticated admin session, so the token is not publicly exposed.
+    _s = get_settings()
+    cf_url = (_s.cloudflare_worker_url or "").strip().strip('"').strip("'").rstrip("/")
+    cf_token = (_s.cloudflare_worker_token or "").strip()
+
     return HTMLResponse(f"""<!DOCTYPE html>
 <html><head><meta charset="utf-8"><title>KU Library AI — Admin</title>
 <meta name="viewport" content="width=device-width,initial-scale=1">
@@ -357,8 +366,26 @@ tr:last-child td{{border-bottom:none}}
 
 </div>
 <script>
-// Analytics are proxied through the backend (/admin/analytics*) so the
-// Worker URL and bearer token never reach the browser.
+const CF_URL   = "{cf_url}";
+const CF_TOKEN = "{cf_token}";
+
+// Two-path analytics fetch. The backend proxy keeps credentials server-side and
+// is tried first; if the backend cannot reach the Worker (a known limitation on
+// some hosts) we retry directly from this browser, which can.
+async function cfFetch(path){{
+  try{{
+    const r = await fetch('/admin'+path);
+    const d = await r.json();
+    if(r.ok && !d.detail && !d.error) return {{data:d, via:'backend proxy'}};
+  }}catch(e){{ /* fall through to direct */ }}
+  if(!CF_URL) throw new Error('CLOUDFLARE_WORKER_URL not configured');
+  const h = CF_TOKEN ? {{'Authorization':'Bearer '+CF_TOKEN}} : {{}};
+  const r2 = await fetch(CF_URL+path, {{headers:h}});
+  const d2 = await r2.json();
+  if(!r2.ok) throw new Error('Worker HTTP '+r2.status+' '+(d2.error&&d2.error.message||''));
+  if(d2.error) throw new Error(d2.error.message||'Worker error');
+  return {{data:d2, via:'direct'}};
+}}
 
 async function loadStats(){{
   try{{
@@ -375,10 +402,8 @@ async function loadStats(){{
 
 async function loadCFAnalytics(){{
   try{{
-    const r=await fetch('/admin/analytics');
-    const d=await r.json();
-    if(!r.ok||d.detail) throw new Error('HTTP '+r.status+' '+(d.detail||''));
-    if(d.error) throw new Error(d.error.message||JSON.stringify(d.error));
+    const res=await cfFetch('/analytics');
+    const d=res.data;
     document.getElementById('cfStatsGrid').innerHTML=`
       <div class="stat"><div class="val">${{d.total||0}}</div><div class="lbl">Total Queries</div></div>
       <div class="stat"><div class="val">${{d.today||0}}</div><div class="lbl">Today</div></div>
@@ -397,10 +422,8 @@ async function loadCFAnalytics(){{
 
 async function loadRecentQueries(){{
   try{{
-    const r=await fetch('/admin/analytics/recent');
-    const d=await r.json();
-    if(!r.ok||d.detail) throw new Error('HTTP '+r.status+' '+(d.detail||''));
-    if(d.error) throw new Error(d.error.message||JSON.stringify(d.error));
+    const res=await cfFetch('/analytics/recent');
+    const d=res.data;
     if(d.error) throw new Error(d.error);
     const rows=(d.results||[]).map(q=>`<tr>
       <td style="white-space:nowrap;font-size:.74rem">${{q.timestamp||""}}</td>
@@ -698,7 +721,7 @@ async def _worker_get(path: str, params: Optional[dict] = None):
     if settings.cloudflare_worker_token:
         headers["Authorization"] = f"Bearer {settings.cloudflare_worker_token}"
     try:
-        async with _mk(timeout=10) as client:
+        async with _mk(timeout=25) as client:
             r = await client.get(f"{worker}{path}", params=params or {}, headers=headers)
             return r.json()
     except HTTPException:
@@ -756,7 +779,7 @@ async def admin_worker_health(request: Request):
         """One probe, its own short timeout, never raises."""
         entry = {"path": path}
         try:
-            async with _mk(timeout=6) as client:
+            async with _mk(timeout=20) as client:
                 r = await client.get(f"{worker}{path}",
                                      headers=headers if use_auth else {})
             entry["status"] = r.status_code