feat(auth): implement all 16 homepage/login/register review items

- add countArticles() (published-only, mirrors news-list) and warm total_articles
- localize homepage metadata; bind articleCount to both stats; unique photo alts
- drop duplicate news date and the mascot preload priorities
- extract shared AuthPageFrame/AuthUsersCards used by /login and /register
- login: localized noindex metadata, session redirect via safeRedirectPath,
  ?from passthrough from proxy, unified auth roster cache keys, registered notice
- register: localized metadata, session redirect to /me, unified cache keys
- add resend-verification flow on /verify with rate-limited non-enumerable action
- add safeRedirectPath() with unit tests
- register form: live requirements checklist + password mismatch guard
- login form: unverified state with resend-link CTA
- honour prefers-reduced-motion in TypewriterText
- add 6 translations across all 25 locales

src/actions/verify.ts

@@ -0,0 +1,54 @@
+"use server";
+
+import { eq } from "drizzle-orm";
+import { sendVerification } from "@/lib/auth/email-verification";
+import { db, User } from "@/lib/db";
+import { clientIp, rateLimit } from "@/lib/rate-limit";
+
+export interface ResendVerificationState {
+	ok: boolean;
+	error: string | null;
+}
+
+const EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+
+/**
+ * Re-send a verification e-mail for an address the visitor typed on /verify.
+ *
+ * Deliberately reports success even when no matching unverified account exists:
+ * a distinct failure would let anyone probe which addresses are registered. The
+ * identical-privacy behaviour also applies to the e-mail templates, which are
+ * only sent for real accounts. Rate limiting is the spam defence.
+ */
+export async function resendVerification(
+	_prevState: ResendVerificationState,
+	formData: FormData,
+): Promise<ResendVerificationState> {
+	const email = String(formData.get("email") ?? "")
+		.normalize("NFC")
+		.trim()
+		.toLowerCase();
+	if (!EMAIL_RE.test(email)) {
+		return { ok: false, error: "invalid" };
+	}
+
+	const ip = await clientIp();
+	if (!(await rateLimit(`verify:resend:${ip}`, 3, 10 * 60_000)).ok) {
+		return { ok: false, error: "rateLimited" };
+	}
+
+	try {
+		const [user] = await db
+			.select({ id: User.id, mailVerified: User.mailVerified })
+			.from(User)
+			.where(eq(User.mail, email))
+			.limit(1);
+		if (user && user.mailVerified !== "1") {
+			await sendVerification(email);
+		}
+	} catch {
+		return { ok: false, error: "unavailable" };
+	}
+
+	return { ok: true, error: null };
+}

src/app/(site)/login/page.tsx

@@ -1,20 +1,41 @@
 import { count, desc, eq } from "drizzle-orm";
+import type { Metadata } from "next";
 import { headers } from "next/headers";
 import Image from "next/image";
+import { redirect } from "next/navigation";
 import { getTranslations } from "next-intl/server";
-import { AuthTopBar } from "@/components/auth/auth-top-bar";
+import {
+	AuthPageFrame,
+	AuthUsersCards,
+} from "@/components/auth/auth-page-frame";
 import { LoginForm } from "@/components/auth/login-form";
-import { Reveal } from "@/components/motion-reveal";
-import { UserAvatarThumbnail } from "@/components/shared/user-avatar-thumbnail";
 import { SurfaceCard } from "@/components/surface-card";
+import { auth } from "@/lib/auth";
+import { safeRedirectPath } from "@/lib/auth/safe-redirect";
 import { cached } from "@/lib/cache";
 import { db, User } from "@/lib/db";
 import { resolveHotelName } from "@/lib/hotel-name";
 import { captchaConfig } from "@/lib/services/captcha";
 import { siteSettings } from "@/lib/services/site-settings";
-import { ICON_FRIENDS, ICON_NAV_GOODY, ICON_NAV_ME } from "@/lib/site-icons";
 
-export default async function LoginPage() {
+export async function generateMetadata(): Promise<Metadata> {
+	const t = await getTranslations("pages.login");
+	const title = t("title");
+	const description = t("subtitle");
+	return {
+		title,
+		description,
+		// Sign-in is a dead end for crawlers and duplicates the homepage copy.
+		robots: { index: false, follow: false },
+		openGraph: { title, description, type: "website" },
+	};
+}
+
+export default async function LoginPage({
+	searchParams,
+}: {
+	searchParams: Promise<{ from?: string; registered?: string }>;
+}) {
 	const t = await getTranslations("pages.login");
 	const [hotelName, cfg, logo] = await Promise.all([
 		resolveHotelName(),
@@ -23,6 +44,14 @@ export default async function LoginPage() {
 	]);
 	const nonce = (await headers()).get("x-nonce") ?? undefined;
 
+	const sp = await searchParams;
+	const redirectTo = safeRedirectPath(sp.from);
+
+	// Already signed in: the form has nothing to do here. Honour `from` first so
+	// an admin bounced off /admin lands back where they were heading.
+	const session = await auth();
+	if (session?.user?.id) redirect(redirectTo);
+
 	const [online, recentUsers, latestUsers] = await Promise.all([
 		cached("online_count", 10_000, () =>
 			db
@@ -31,227 +60,153 @@ export default async function LoginPage() {
 				.where(eq(User.online, "1"))
 				.then((rows) => rows[0]?.total ?? 0),
 		).catch(() => 0),
-		db
-			.select({ username: User.username, look: User.look })
-			.from(User)
-			.where(eq(User.online, "1"))
-			.limit(8)
-			.catch(() => []),
-		db
-			.select({ username: User.username, look: User.look })
-			.from(User)
-			.orderBy(desc(User.accountCreated))
-			.limit(8)
-			.catch(() => []),
+		cached(
+			"auth_online_users",
+			10_000,
+			() =>
+				db
+					.select({ username: User.username, look: User.look })
+					.from(User)
+					.where(eq(User.online, "1"))
+					.limit(8),
+			{ staleMs: 30000 },
+		).catch(() => []),
+		cached(
+			"auth_latest_users",
+			30_000,
+			() =>
+				db
+					.select({ username: User.username, look: User.look })
+					.from(User)
+					.orderBy(desc(User.accountCreated))
+					.limit(8),
+			{ staleMs: 60000 },
+		).catch(() => []),
 	]);
 
+	// `/login?registered=1` is where the sign-up form lands when it could not
+	// auto sign-in (e-mail verification still pending). Without this notice the
+	// visitor would only see an empty login form and no sign their account
+	// exists.
+	const notice =
+		sp.registered === "1" ? (
+			<p
+				role="status"
+				className="auth-alert auth-alert--success animate-fade-in-up m-0 mb-4"
+			>
+				{t("registeredSuccess")}
+			</p>
+		) : undefined;
+
 	return (
-		<div className="mx-auto w-full max-w-6xl flex flex-col gap-8 pb-16">
-			<div className="relative">
+		<AuthPageFrame
+			hotelName={hotelName}
+			logo={logo}
+			title={t("title")}
+			subtitle={t("subtitle")}
+			notice={notice}
+			form={
+				<LoginForm
+					redirectTo={redirectTo}
+					captcha={{
+						provider: cfg.provider,
+						siteKey: cfg.siteKey || undefined,
+						field: cfg.field || undefined,
+					}}
+					nonce={nonce}
+				/>
+			}
+		>
+			<SurfaceCard
+				className="card-glow relative overflow-hidden p-6 text-center"
+				style={{
+					borderColor:
+						"color-mix(in srgb, var(--color-primary) 20%, transparent)",
+				}}
+			>
 				<div
-					aria-hidden="true"
-					className="pointer-events-none absolute -inset-x-16 -top-24 overflow-hidden"
-				>
+					className="absolute inset-0"
+					style={{
+						background:
+							"linear-gradient(135deg, color-mix(in srgb, var(--color-primary) 10%, transparent), color-mix(in srgb, var(--color-accent) 10%, transparent))",
+					}}
+				/>
+				<div aria-hidden="true" className="absolute inset-0 overflow-hidden">
+					<div className="brand-halo left-1/2 top-0 h-64 w-[460px] max-w-full -translate-x-1/2 -translate-y-1/2" />
 					<div
-						className="aurora-blob -left-20 top-0 h-80 w-80"
+						className="aurora-blob -left-16 top-10 h-56 w-56"
 						style={{
 							background:
-								"color-mix(in srgb, var(--color-primary) 34%, transparent)",
-							opacity: 0.45,
+								"color-mix(in srgb, var(--color-primary) 45%, transparent)",
 						}}
 					/>
 					<div
-						className="aurora-blob -right-20 top-6 h-72 w-72"
+						className="aurora-blob -right-16 bottom-0 h-56 w-56"
 						style={{
 							background:
-								"color-mix(in srgb, var(--color-accent) 30%, transparent)",
-							animationDelay: "-7s",
-							opacity: 0.4,
+								"color-mix(in srgb, var(--color-accent) 40%, transparent)",
+							animationDelay: "-8s",
 						}}
 					/>
 				</div>
-				<AuthTopBar hotelName={hotelName} logo={logo} />
-			</div>
-
-			<Reveal>
-				<div className="flex flex-col gap-8 lg:flex-row lg:items-start">
-					{/* Left panel */}
-					<div className="lg:w-96 shrink-0 space-y-4">
-						<SurfaceCard
-							className="card-glow relative overflow-hidden p-6 text-center"
-							style={{
-								borderColor:
-									"color-mix(in srgb, var(--color-primary) 20%, transparent)",
-							}}
-						>
-							<div
-								className="absolute inset-0"
-								style={{
-									background:
-										"linear-gradient(135deg, color-mix(in srgb, var(--color-primary) 10%, transparent), color-mix(in srgb, var(--color-accent) 10%, transparent))",
-								}}
+				<div className="relative">
+					<div className="brand-halo left-1/2 top-8 h-52 w-52 -translate-x-1/2" />
+					<Image
+						src="/assets/images/FrankwithBag.gif"
+						alt="Frank"
+						width={130}
+						height={170}
+						className="relative object-contain mx-auto drop-shadow-xl animate-float"
+						unoptimized
+					/>
+					<div
+						className="inline-flex items-center gap-2 px-3.5 py-1 rounded-full text-xs font-bold uppercase tracking-wider mt-4 mb-3 border"
+						style={{
+							borderColor:
+								"color-mix(in srgb, var(--color-primary) 30%, transparent)",
+							background:
+								"color-mix(in srgb, var(--color-surface) 72%, transparent)",
+							color: "var(--color-primary-readable, var(--color-primary))",
+							boxShadow:
+								"0 8px 20px -12px color-mix(in srgb, var(--color-primary) 70%, transparent)",
+						}}
+					>
+						<span className="relative flex h-2 w-2">
+							<span
+								className="animate-ping absolute inline-flex h-full w-full rounded-full opacity-75"
+								style={{ background: "var(--color-primary)" }}
 							/>
-							<div
-								aria-hidden="true"
-								className="absolute inset-0 overflow-hidden"
-							>
-								<div className="brand-halo left-1/2 top-0 h-64 w-[460px] max-w-full -translate-x-1/2 -translate-y-1/2" />
-								<div
-									className="aurora-blob -left-16 top-10 h-56 w-56"
-									style={{
-										background:
-											"color-mix(in srgb, var(--color-primary) 45%, transparent)",
-									}}
-								/>
-								<div
-									className="aurora-blob -right-16 bottom-0 h-56 w-56"
-									style={{
-										background:
-											"color-mix(in srgb, var(--color-accent) 40%, transparent)",
-										animationDelay: "-8s",
-									}}
-								/>
-							</div>
-							<div className="relative">
-								<div className="brand-halo left-1/2 top-8 h-52 w-52 -translate-x-1/2" />
-								<Image
-									src="/assets/images/FrankwithBag.gif"
-									alt="Frank"
-									width={130}
-									height={170}
-									className="relative object-contain mx-auto drop-shadow-xl animate-float"
-									unoptimized
-									priority
-								/>
-								<div
-									className="inline-flex items-center gap-2 px-3.5 py-1 rounded-full text-xs font-bold uppercase tracking-wider mt-4 mb-3 border"
-									style={{
-										borderColor:
-											"color-mix(in srgb, var(--color-primary) 30%, transparent)",
-										background:
-											"color-mix(in srgb, var(--color-surface) 72%, transparent)",
-										color:
-											"var(--color-primary-readable, var(--color-primary))",
-										boxShadow:
-											"0 8px 20px -12px color-mix(in srgb, var(--color-primary) 70%, transparent)",
-									}}
-								>
-									<span className="relative flex h-2 w-2">
-										<span
-											className="animate-ping absolute inline-flex h-full w-full rounded-full opacity-75"
-											style={{ background: "var(--color-primary)" }}
-										/>
-										<span
-											className="relative inline-flex rounded-full h-2 w-2"
-											style={{ background: "var(--color-primary)" }}
-										/>
-									</span>
-									{t("usersOnline", { count: online })}
-								</div>
-								<h1
-									className="text-xl font-black"
-									style={{
-										color: "var(--color-text-readable)",
-										fontFamily: "var(--font-nunito)",
-									}}
-								>
-									{t("welcomeBack")}
-								</h1>
-								<p
-									className="text-xs mt-1.5 mx-auto max-w-[220px] leading-relaxed"
-									style={{ color: "var(--color-text-muted)" }}
-								>
-									{t("welcomeBackSub", { hotelName })}
-								</p>
-							</div>
-						</SurfaceCard>
-
-						{recentUsers.length > 0 && (
-							<SurfaceCard
-								title={t("whoIsOnline")}
-								icon={ICON_NAV_GOODY}
-								bodyClassName="p-4"
-								className="card-glow"
-							>
-								<div className="grid grid-cols-4 gap-1.5 sm:gap-2">
-									{recentUsers.map((u) => (
-										<div
-											key={u.username}
-											title={u.username}
-											className="avatar-tile"
-										>
-											<div className="relative">
-												<UserAvatarThumbnail
-													figure={u.look}
-													alt=""
-													options={{ direction: 2 }}
-													className="rounded-lg"
-												/>
-												<span className="avatar-online absolute -bottom-0.5 -right-0.5" />
-											</div>
-											<span className="avatar-name">{u.username}</span>
-										</div>
-									))}
-								</div>
-							</SurfaceCard>
-						)}
-
-						{latestUsers.length > 0 && (
-							<SurfaceCard
-								title={t("newestCitizens")}
-								icon={ICON_FRIENDS}
-								bodyClassName="p-4"
-								className="card-glow"
-							>
-								<div className="grid grid-cols-4 gap-1.5 sm:gap-2">
-									{latestUsers.map((u) => (
-										<div
-											key={u.username}
-											title={u.username}
-											className="avatar-tile"
-										>
-											<UserAvatarThumbnail
-												figure={u.look}
-												alt=""
-												options={{ direction: 2 }}
-												className="rounded-lg"
-											/>
-											<span className="avatar-name">{u.username}</span>
-										</div>
-									))}
-								</div>
-							</SurfaceCard>
-						)}
-					</div>
-
-					{/* Right: form */}
-					<div className="flex-1 lg:sticky lg:top-6">
-						<div className="gradient-border">
-							<SurfaceCard
-								title={t("title")}
-								icon={ICON_NAV_ME}
-								bodyClassName="p-6 sm:p-7"
-								className="card-glow"
-							>
-								<p
-									className="text-sm mb-6 leading-relaxed"
-									style={{ color: "var(--color-text-muted)" }}
-								>
-									{t("subtitle")}
-								</p>
-								<LoginForm
-									captcha={{
-										provider: cfg.provider,
-										siteKey: cfg.siteKey || undefined,
-										field: cfg.field || undefined,
-									}}
-									nonce={nonce}
-								/>
-							</SurfaceCard>
-						</div>
+							<span
+								className="relative inline-flex rounded-full h-2 w-2"
+								style={{ background: "var(--color-primary)" }}
+							/>
+						</span>
+						{t("usersOnline", { count: online })}
 					</div>
+					<h1
+						className="text-xl font-black"
+						style={{
+							color: "var(--color-text-readable)",
+							fontFamily: "var(--font-nunito)",
+						}}
+					>
+						{t("welcomeBack")}
+					</h1>
+					<p
+						className="text-xs mt-1.5 mx-auto max-w-[220px] leading-relaxed"
+						style={{ color: "var(--color-text-muted)" }}
+					>
+						{t("welcomeBackSub", { hotelName })}
+					</p>
 				</div>
-			</Reveal>
-		</div>
+			</SurfaceCard>
+
+			<AuthUsersCards
+				recentUsers={recentUsers}
+				latestUsers={latestUsers}
+				recentTitle={t("whoIsOnline")}
+				latestTitle={t("newestCitizens")}
+			/>
+		</AuthPageFrame>
 	);
 }

src/app/(site)/page.tsx

@@ -26,6 +26,7 @@ import { resolveHotelName } from "@/lib/hotel-name";
 import { captchaConfig } from "@/lib/services/captcha";
 import { getNewsList } from "@/lib/services/news-list";
 import {
+	countArticles,
 	countPhotos,
 	countRooms,
 	countUsers,
@@ -42,17 +43,17 @@ import {
 	ICON_NAV_ME,
 } from "@/lib/site-icons";
 
-export const metadata: Metadata = {
-	title: "Home",
-	description:
-		"An online virtual world where you can create your own avatar, make friends, chat, and build your own rooms.",
-	openGraph: {
-		title: "Home",
-		description:
-			"An online virtual world where you can create your own avatar, make friends, chat, and build your own rooms.",
-		type: "website",
-	},
-};
+export async function generateMetadata(): Promise<Metadata> {
+	const tn = await getTranslations("nav");
+	const tp = await getTranslations("pages.home");
+	const title = tn("home");
+	const description = tp("welcomeBody");
+	return {
+		title,
+		description,
+		openGraph: { title, description, type: "website" },
+	};
+}
 
 // ── Local visual language (theme-aware, no big white blocks) ──────────
 const PANEL_BG =
@@ -177,6 +178,7 @@ async function getHotelData() {
 		users,
 		rooms,
 		totalPhotos,
+		articleCount,
 		articles,
 		recentUsers,
 		recentPhotos,
@@ -197,6 +199,9 @@ async function getHotelData() {
 		cached("total_photos", 300_000, countPhotos, { staleMs: 300000 }).catch(
 			publicReadFailure("home.photos-count"),
 		),
+		cached("total_articles", 300_000, countArticles, {
+			staleMs: 300000,
+		}).catch(publicReadFailure("home.articles-count")),
 		getNewsList(4, { throwOnError: true }).catch(
 			publicReadFailure("home.news"),
 		),
@@ -230,6 +235,7 @@ async function getHotelData() {
 		users,
 		rooms,
 		totalPhotos,
+		articleCount,
 		articles,
 		recentUsers,
 		recentPhotos,
@@ -251,6 +257,7 @@ export default async function Home() {
 		users,
 		rooms,
 		totalPhotos,
+		articleCount,
 		articles,
 		recentUsers,
 		recentPhotos,
@@ -344,12 +351,6 @@ export default async function Home() {
 					>
 						{a.title}
 					</h3>
-					<p
-						className="mt-0.5 text-[10px] sm:text-[11px] font-semibold opacity-80"
-						style={{ color: "#cbd5e1" }}
-					>
-						{formatDate(a.createdAt, "date", "")}
-					</p>
 				</div>
 			</div>
 		</Link>
@@ -373,7 +374,7 @@ export default async function Home() {
 			color: "var(--color-primary)",
 		},
 		{
-			value: articles?.length ?? null,
+			value: articleCount,
 			label: tp("statsArticles"),
 			color: "var(--color-accent)",
 		},
@@ -699,7 +700,6 @@ export default async function Home() {
 							alt=""
 							width={96}
 							height={128}
-							priority
 							unoptimized
 							className="relative animate-float object-contain drop-shadow-2xl"
 						/>
@@ -856,7 +856,7 @@ export default async function Home() {
 									icon: ICON_CAMERA,
 								},
 								{
-									value: articles?.length ?? null,
+									value: articleCount,
 									label: tp("statsArticles"),
 									icon: ICON_ARTICLE,
 								},
@@ -1025,12 +1025,10 @@ export default async function Home() {
 					<Reveal className="mx-auto w-full max-w-7xl">
 						<GlassPanel title={tp("recentPhotos")} icon={ICON_CAMERA}>
 							<div className="mx-auto grid max-w-5xl grid-cols-2 gap-3 sm:grid-cols-4">
-								{recentPhotos.slice(0, 4).map((p) => (
+								{recentPhotos.slice(0, 4).map((p, i) => (
 									<Link
 										key={p.id}
 										href="/photos"
-										title=""
-										aria-label={tp("recentPhotos")}
 										className="block aspect-[4/3] overflow-hidden rounded-2xl border transition-all duration-300 ease-out hover:scale-[1.03] hover:shadow-xl hover:ring-2 hover:ring-[color-mix(in_srgb,var(--color-primary)_45%,transparent)]"
 										style={{
 											borderColor:
@@ -1039,7 +1037,7 @@ export default async function Home() {
 									>
 										<Image
 											src={p.url}
-											alt={tp("recentPhotos")}
+											alt={`${tp("recentPhotos")} ${i + 1}`}
 											width={280}
 											height={210}
 											className="h-full w-full object-cover"

src/app/(site)/register/page.tsx

@@ -1,18 +1,32 @@
 import { count, desc, eq } from "drizzle-orm";
+import type { Metadata } from "next";
 import { headers } from "next/headers";
 import Image from "next/image";
+import { redirect } from "next/navigation";
 import { getTranslations } from "next-intl/server";
-import { AuthTopBar } from "@/components/auth/auth-top-bar";
+import {
+	AuthPageFrame,
+	AuthUsersCards,
+} from "@/components/auth/auth-page-frame";
 import { RegisterForm } from "@/components/auth/register-form";
-import { Reveal } from "@/components/motion-reveal";
-import { UserAvatarThumbnail } from "@/components/shared/user-avatar-thumbnail";
 import { SurfaceCard } from "@/components/surface-card";
+import { auth } from "@/lib/auth";
 import { cached } from "@/lib/cache";
 import { db, User } from "@/lib/db";
 import { resolveHotelName } from "@/lib/hotel-name";
 import { captchaConfig } from "@/lib/services/captcha";
 import { siteSettings } from "@/lib/services/site-settings";
-import { ICON_FRIENDS, ICON_NAV_GOODY, ICON_NAV_ME } from "@/lib/site-icons";
+
+export async function generateMetadata(): Promise<Metadata> {
+	const t = await getTranslations("pages.register");
+	const title = t("title");
+	const description = t("subtitle");
+	return {
+		title,
+		description,
+		openGraph: { title, description, type: "website" },
+	};
+}
 
 export default async function RegisterPage() {
 	const tpr = await getTranslations("pages.register");
@@ -23,6 +37,10 @@ export default async function RegisterPage() {
 	]);
 	const nonce = (await headers()).get("x-nonce") ?? undefined;
 
+	// An account already exists in this browser — there is nothing to sign up.
+	const session = await auth();
+	if (session?.user?.id) redirect("/me");
+
 	const [online, recentUsers, latestUsers] = await Promise.all([
 		cached("online_count", 10_000, () =>
 			db
@@ -32,7 +50,7 @@ export default async function RegisterPage() {
 				.then((rows) => rows[0]?.total ?? 0),
 		).catch(() => 0),
 		cached(
-			"register_online_users",
+			"auth_online_users",
 			10_000,
 			() =>
 				db
@@ -43,7 +61,7 @@ export default async function RegisterPage() {
 			{ staleMs: 30000 },
 		).catch(() => []),
 		cached(
-			"register_latest_users",
+			"auth_latest_users",
 			30_000,
 			() =>
 				db
@@ -56,219 +74,119 @@ export default async function RegisterPage() {
 	]);
 
 	return (
-		<div className="mx-auto w-full max-w-6xl flex flex-col gap-8 pb-16">
-			<div className="relative">
+		<AuthPageFrame
+			hotelName={hotelName}
+			logo={logo}
+			title={tpr("title")}
+			subtitle={tpr("subtitle")}
+			form={
+				<RegisterForm
+					hotelName={hotelName}
+					captcha={{
+						provider: cfg.provider,
+						siteKey: cfg.siteKey || undefined,
+					}}
+					nonce={nonce}
+				/>
+			}
+		>
+			<SurfaceCard
+				className="card-glow relative overflow-hidden p-6"
+				style={{
+					borderColor:
+						"color-mix(in srgb, var(--color-primary) 20%, transparent)",
+				}}
+			>
 				<div
-					aria-hidden="true"
-					className="pointer-events-none absolute -inset-x-16 -top-24 overflow-hidden"
-				>
+					className="absolute inset-0"
+					style={{
+						background:
+							"linear-gradient(135deg, color-mix(in srgb, var(--color-primary) 10%, transparent), color-mix(in srgb, var(--color-accent) 10%, transparent))",
+					}}
+				/>
+				<div aria-hidden="true" className="absolute inset-0 overflow-hidden">
+					<div className="brand-halo left-1/2 top-0 h-64 w-[460px] max-w-full -translate-x-1/2 -translate-y-1/2" />
 					<div
-						className="aurora-blob -left-20 top-0 h-80 w-80"
+						className="aurora-blob -left-16 top-6 h-56 w-56"
 						style={{
 							background:
-								"color-mix(in srgb, var(--color-primary) 34%, transparent)",
-							opacity: 0.45,
+								"color-mix(in srgb, var(--color-primary) 45%, transparent)",
 						}}
 					/>
 					<div
-						className="aurora-blob -right-20 top-6 h-72 w-72"
+						className="aurora-blob -right-16 bottom-0 h-56 w-56"
 						style={{
 							background:
-								"color-mix(in srgb, var(--color-accent) 30%, transparent)",
-							animationDelay: "-7s",
-							opacity: 0.4,
+								"color-mix(in srgb, var(--color-accent) 40%, transparent)",
+							animationDelay: "-8s",
 						}}
 					/>
 				</div>
-				<AuthTopBar hotelName={hotelName} logo={logo} />
-			</div>
-
-			<Reveal>
-				<div className="flex flex-col gap-8 lg:flex-row lg:items-start">
-					{/* Left: intro panel */}
-					<div className="lg:w-96 shrink-0 space-y-4">
-						<SurfaceCard
-							className="card-glow relative overflow-hidden p-6"
-							style={{
-								borderColor:
-									"color-mix(in srgb, var(--color-primary) 20%, transparent)",
-							}}
-						>
-							<div
-								className="absolute inset-0"
-								style={{
-									background:
-										"linear-gradient(135deg, color-mix(in srgb, var(--color-primary) 10%, transparent), color-mix(in srgb, var(--color-accent) 10%, transparent))",
-								}}
+				<div className="relative">
+					<div className="flex items-center gap-4">
+						<div className="shrink-0 animate-float">
+							<div className="brand-halo left-1/2 top-1/2 h-52 w-52 -translate-x-1/2 -translate-y-1/2" />
+							<Image
+								src="/assets/images/FrankwithBag.gif"
+								alt="Frank"
+								width={110}
+								height={145}
+								className="relative object-contain drop-shadow-xl"
+								unoptimized
 							/>
+						</div>
+						<div className="flex-1">
 							<div
-								aria-hidden="true"
-								className="absolute inset-0 overflow-hidden"
+								className="inline-flex items-center gap-2 px-3 py-1 rounded-full text-xs font-bold uppercase tracking-wider mb-2 border"
+								style={{
+									borderColor:
+										"color-mix(in srgb, var(--color-primary) 30%, transparent)",
+									background:
+										"color-mix(in srgb, var(--color-surface) 72%, transparent)",
+									color: "var(--color-primary-readable, var(--color-primary))",
+									boxShadow:
+										"0 8px 20px -12px color-mix(in srgb, var(--color-primary) 70%, transparent)",
+								}}
 							>
-								<div className="brand-halo left-1/2 top-0 h-64 w-[460px] max-w-full -translate-x-1/2 -translate-y-1/2" />
-								<div
-									className="aurora-blob -left-16 top-6 h-56 w-56"
-									style={{
-										background:
-											"color-mix(in srgb, var(--color-primary) 45%, transparent)",
-									}}
-								/>
-								<div
-									className="aurora-blob -right-16 bottom-0 h-56 w-56"
-									style={{
-										background:
-											"color-mix(in srgb, var(--color-accent) 40%, transparent)",
-										animationDelay: "-8s",
-									}}
-								/>
+								<span className="relative flex h-2 w-2">
+									<span
+										className="animate-ping absolute inline-flex h-full w-full rounded-full opacity-75"
+										style={{ background: "var(--color-primary)" }}
+									/>
+									<span
+										className="relative inline-flex rounded-full h-2 w-2"
+										style={{ background: "var(--color-primary)" }}
+									/>
+								</span>
+								{tpr("usersOnline", { count: online })}
 							</div>
-							<div className="relative">
-								<div className="flex items-center gap-4">
-									<div className="shrink-0 animate-float">
-										<div className="brand-halo left-1/2 top-1/2 h-52 w-52 -translate-x-1/2 -translate-y-1/2" />
-										<Image
-											src="/assets/images/FrankwithBag.gif"
-											alt="Frank"
-											width={110}
-											height={145}
-											className="relative object-contain drop-shadow-xl"
-											unoptimized
-											priority
-										/>
-									</div>
-									<div className="flex-1">
-										<div
-											className="inline-flex items-center gap-2 px-3 py-1 rounded-full text-xs font-bold uppercase tracking-wider mb-2 border"
-											style={{
-												borderColor:
-													"color-mix(in srgb, var(--color-primary) 30%, transparent)",
-												background:
-													"color-mix(in srgb, var(--color-surface) 72%, transparent)",
-												color:
-													"var(--color-primary-readable, var(--color-primary))",
-												boxShadow:
-													"0 8px 20px -12px color-mix(in srgb, var(--color-primary) 70%, transparent)",
-											}}
-										>
-											<span className="relative flex h-2 w-2">
-												<span
-													className="animate-ping absolute inline-flex h-full w-full rounded-full opacity-75"
-													style={{ background: "var(--color-primary)" }}
-												/>
-												<span
-													className="relative inline-flex rounded-full h-2 w-2"
-													style={{ background: "var(--color-primary)" }}
-												/>
-											</span>
-											{tpr("usersOnline", { count: online })}
-										</div>
-										<h1
-											className="text-lg font-black leading-tight"
-											style={{
-												color: "var(--color-text-readable)",
-												fontFamily: "var(--font-nunito)",
-											}}
-										>
-											{tpr("title")} —{" "}
-											<span className="gradient-text">{hotelName}</span>
-										</h1>
-										<p
-											className="text-xs mt-1.5 leading-relaxed"
-											style={{ color: "var(--color-text-muted)" }}
-										>
-											{tpr("subtitle")}
-										</p>
-									</div>
-								</div>
-							</div>
-						</SurfaceCard>
-
-						{recentUsers.length > 0 && (
-							<SurfaceCard
-								title={tpr("whoIsOnline")}
-								icon={ICON_NAV_GOODY}
-								bodyClassName="p-4"
-								className="card-glow"
+							<h1
+								className="text-lg font-black leading-tight"
+								style={{
+									color: "var(--color-text-readable)",
+									fontFamily: "var(--font-nunito)",
+								}}
 							>
-								<div className="grid grid-cols-4 gap-1.5">
-									{recentUsers.map((u) => (
-										<div
-											key={u.username}
-											title={u.username}
-											className="avatar-tile"
-										>
-											<div className="relative">
-												<UserAvatarThumbnail
-													figure={u.look}
-													alt=""
-													options={{ direction: 2 }}
-													className="rounded-lg"
-												/>
-												<span className="avatar-online absolute -bottom-0.5 -right-0.5" />
-											</div>
-											<span className="avatar-name">{u.username}</span>
-										</div>
-									))}
-								</div>
-							</SurfaceCard>
-						)}
-
-						{latestUsers.length > 0 && (
-							<SurfaceCard
-								title={tpr("newestCitizens")}
-								icon={ICON_FRIENDS}
-								bodyClassName="p-4"
-								className="card-glow"
+								{tpr("title")} —{" "}
+								<span className="gradient-text">{hotelName}</span>
+							</h1>
+							<p
+								className="text-xs mt-1.5 leading-relaxed"
+								style={{ color: "var(--color-text-muted)" }}
 							>
-								<div className="grid grid-cols-4 gap-1.5">
-									{latestUsers.map((u) => (
-										<div
-											key={u.username}
-											title={u.username}
-											className="avatar-tile"
-										>
-											<UserAvatarThumbnail
-												figure={u.look}
-												alt=""
-												options={{ direction: 2 }}
-												className="rounded-lg"
-											/>
-											<span className="avatar-name">{u.username}</span>
-										</div>
-									))}
-								</div>
-							</SurfaceCard>
-						)}
-					</div>
-
-					{/* Right: form */}
-					<div className="flex-1 lg:sticky lg:top-6">
-						<div className="gradient-border">
-							<SurfaceCard
-								title={tpr("title")}
-								icon={ICON_NAV_ME}
-								bodyClassName="p-6 sm:p-7"
-								className="card-glow"
-							>
-								<p
-									className="text-sm mb-6 leading-relaxed"
-									style={{ color: "var(--color-text-muted)" }}
-								>
-									{tpr("subtitle")}
-								</p>
-								<RegisterForm
-									hotelName={hotelName}
-									captcha={{
-										provider: cfg.provider,
-										siteKey: cfg.siteKey || undefined,
-									}}
-									nonce={nonce}
-								/>
-							</SurfaceCard>
+								{tpr("subtitle")}
+							</p>
 						</div>
 					</div>
 				</div>
-			</Reveal>
-		</div>
+			</SurfaceCard>
+
+			<AuthUsersCards
+				recentUsers={recentUsers}
+				latestUsers={latestUsers}
+				recentTitle={tpr("whoIsOnline")}
+				latestTitle={tpr("newestCitizens")}
+			/>
+		</AuthPageFrame>
 	);
 }

src/app/(site)/verify/page.tsx

@@ -1,6 +1,7 @@
 import { eq } from "drizzle-orm";
 import { CheckCircle2, Clock, MailX } from "lucide-react";
 import { getTranslations } from "next-intl/server";
+import { ResendVerificationForm } from "@/components/auth/resend-verification-form";
 import Link from "@/components/link";
 import { SurfaceCard } from "@/components/surface-card";
 import { isValidVerificationToken } from "@/lib/auth/email-verification";
@@ -185,6 +186,7 @@ export default async function VerifyPage({
 					<p className="text-sm" style={{ color: "var(--color-text-muted)" }}>
 						{t("invalidBody")}
 					</p>
+					<ResendVerificationForm />
 					<Link
 						href="/login"
 						className={`${linkClass} !shadow-none`}

src/app/globals.css

@@ -2679,6 +2679,17 @@ html {
 	border: 1px solid color-mix(in srgb, var(--color-danger) 32%, transparent);
 }
 
+/* Same box with the success tint — post-registration confirmation, etc. */
+.auth-alert.auth-alert--success {
+	color: color-mix(
+		in srgb,
+		var(--color-success) 85%,
+		var(--color-text-readable)
+	);
+	background: color-mix(in srgb, var(--color-success) 10%, transparent);
+	border-color: color-mix(in srgb, var(--color-success) 32%, transparent);
+}
+
 /* ── Public page polish: explore pills ────────────────────────────── */
 .explore-pill {
 	display: inline-flex;

src/components/auth/auth-page-frame.tsx

@@ -0,0 +1,183 @@
+import type { ReactNode } from "react";
+import { AuthTopBar } from "@/components/auth/auth-top-bar";
+import { Reveal } from "@/components/motion-reveal";
+import { UserAvatarThumbnail } from "@/components/shared/user-avatar-thumbnail";
+import { SurfaceCard } from "@/components/surface-card";
+import { ICON_FRIENDS, ICON_NAV_GOODY, ICON_NAV_ME } from "@/lib/site-icons";
+
+export interface PublicUser {
+	username: string;
+	look: string;
+}
+
+/**
+ * The decorative aurora blobs that sit behind the auth top bar on `/login` and
+ * `/register`. Purely visual, hence aria-hidden, and shared so both pages keep
+ * the exact same tint and delay.
+ */
+export function AuthAurora() {
+	return (
+		<div
+			aria-hidden="true"
+			className="pointer-events-none absolute -inset-x-16 -top-24 overflow-hidden"
+		>
+			<div
+				className="aurora-blob -left-20 top-0 h-80 w-80"
+				style={{
+					background:
+						"color-mix(in srgb, var(--color-primary) 34%, transparent)",
+					opacity: 0.45,
+				}}
+			/>
+			<div
+				className="aurora-blob -right-20 top-6 h-72 w-72"
+				style={{
+					background:
+						"color-mix(in srgb, var(--color-accent) 30%, transparent)",
+					animationDelay: "-7s",
+					opacity: 0.4,
+				}}
+			/>
+		</div>
+	);
+}
+
+interface AuthUsersCardsProps {
+	recentUsers: PublicUser[];
+	latestUsers: PublicUser[];
+	/** Title of the online-users card. */
+	recentTitle: string;
+	/** Title of the newest-accounts card. */
+	latestTitle: string;
+}
+
+/**
+ * The "who is online" + "newest citizens" avatar cards both auth pages show in
+ * their left column. Cards with no users render nothing, so a cold database
+ * degrades to just the intro panel instead of an empty grid.
+ */
+export function AuthUsersCards({
+	recentUsers,
+	latestUsers,
+	recentTitle,
+	latestTitle,
+}: AuthUsersCardsProps) {
+	return (
+		<>
+			{recentUsers.length > 0 && (
+				<SurfaceCard
+					title={recentTitle}
+					icon={ICON_NAV_GOODY}
+					bodyClassName="p-4"
+					className="card-glow"
+				>
+					<AvatarGrid users={recentUsers} online />
+				</SurfaceCard>
+			)}
+			{latestUsers.length > 0 && (
+				<SurfaceCard
+					title={latestTitle}
+					icon={ICON_FRIENDS}
+					bodyClassName="p-4"
+					className="card-glow"
+				>
+					<AvatarGrid users={latestUsers} />
+				</SurfaceCard>
+			)}
+		</>
+	);
+}
+
+function AvatarGrid({
+	users,
+	online,
+}: {
+	users: PublicUser[];
+	online?: boolean;
+}) {
+	return (
+		<div className="grid grid-cols-4 gap-1.5 sm:gap-2">
+			{users.map((u) => (
+				<div key={u.username} title={u.username} className="avatar-tile">
+					<div className="relative">
+						<UserAvatarThumbnail
+							figure={u.look}
+							alt=""
+							options={{ direction: 2 }}
+							className="rounded-lg"
+						/>
+						{online && (
+							<span className="avatar-online absolute -bottom-0.5 -right-0.5" />
+						)}
+					</div>
+					<span className="avatar-name">{u.username}</span>
+				</div>
+			))}
+		</div>
+	);
+}
+
+interface AuthPageFrameProps {
+	hotelName: string;
+	logo?: string | null;
+	/** Title of the form card on the right. */
+	title: string;
+	/** One-line intro above the form. */
+	subtitle: ReactNode;
+	/** Optional notice rendered at the top of the form card (e.g. "registered"). */
+	notice?: ReactNode;
+	/** The form itself. */
+	form: ReactNode;
+	/** The left column: intro panel plus `AuthUsersCards`. */
+	children: ReactNode;
+}
+
+/**
+ * Shared skeleton for the public auth pages: aurora + top bar on top, a fixed
+ * left column for the promo/roster panels and a sticky right column holding the
+ * form. Both `/login` and `/register` used to duplicate all of it.
+ */
+export function AuthPageFrame({
+	hotelName,
+	logo,
+	title,
+	subtitle,
+	notice,
+	form,
+	children,
+}: AuthPageFrameProps) {
+	return (
+		<div className="mx-auto w-full max-w-6xl flex flex-col gap-8 pb-16">
+			<div className="relative">
+				<AuthAurora />
+				<AuthTopBar hotelName={hotelName} logo={logo} />
+			</div>
+
+			<Reveal>
+				<div className="flex flex-col gap-8 lg:flex-row lg:items-start">
+					<div className="lg:w-96 shrink-0 space-y-4">{children}</div>
+
+					<div className="flex-1 lg:sticky lg:top-6">
+						<div className="gradient-border">
+							<SurfaceCard
+								title={title}
+								icon={ICON_NAV_ME}
+								bodyClassName="p-6 sm:p-7"
+								className="card-glow"
+							>
+								{notice}
+								<p
+									className="text-sm mb-6 leading-relaxed"
+									style={{ color: "var(--color-text-muted)" }}
+								>
+									{subtitle}
+								</p>
+								{form}
+							</SurfaceCard>
+						</div>
+					</div>
+				</div>
+			</Reveal>
+		</div>
+	);
+}

src/components/auth/login-form.tsx

@@ -48,6 +48,7 @@ export function LoginForm({
 	const [code, setCode] = useState("");
 	const [needs2fa, setNeeds2fa] = useState(false);
 	const [error, setError] = useState<string | null>(null);
+	const [unverified, setUnverified] = useState(false);
 	const [pending, setPending] = useState(false);
 
 	const showFooter = variant === "page";
@@ -56,6 +57,7 @@ export function LoginForm({
 	async function onSubmit(e: FormEvent<HTMLFormElement>) {
 		e.preventDefault();
 		setError(null);
+		setUnverified(false);
 		setPending(true);
 		try {
 			if (!needs2fa) {
@@ -71,6 +73,7 @@ export function LoginForm({
 				}
 				if (pre === "unverified") {
 					setError(t("errorUnverified"));
+					setUnverified(true);
 					return;
 				}
 				if (pre === "twofactor") {
@@ -220,6 +223,21 @@ export function LoginForm({
 					</p>
 				)}
 
+				{unverified && (
+					<p
+						className="m-0 text-center text-xs"
+						style={{ color: "var(--color-text-muted)" }}
+					>
+						<Link
+							href="/verify"
+							className="font-extrabold transition-colors hover:underline"
+							style={{ color: "var(--color-primary)" }}
+						>
+							{t("verifyEmailCta")}
+						</Link>
+					</p>
+				)}
+
 				<button
 					type="submit"
 					disabled={pending}

src/components/auth/register-form.tsx

@@ -1,6 +1,14 @@
 "use client";
 
-import { KeyRound, Lock, Mail, ShieldCheck, UserRound } from "lucide-react";
+import {
+	Check,
+	KeyRound,
+	Lock,
+	Mail,
+	ShieldCheck,
+	UserRound,
+	X,
+} from "lucide-react";
 import Script from "next/script";
 import { signIn } from "next-auth/react";
 import { useTranslations } from "next-intl";
@@ -73,6 +81,7 @@ export function RegisterForm({
 	const [termsError, setTermsError] = useState(false);
 	const termsRef = useRef<HTMLDivElement>(null);
 	const [password, setPassword] = useState("");
+	const [confirmPassword, setConfirmPassword] = useState("");
 	const [showPassword, setShowPassword] = useState(false);
 	const [showConfirm, setShowConfirm] = useState(false);
 	const [signingIn, setSigningIn] = useState(false);
@@ -83,6 +92,21 @@ export function RegisterForm({
 	const [referralCode, setReferralCode] = useState("");
 	const strength = passwordStrength(password, t);
 
+	/**
+	 * The password policy the server enforces, evaluated live so the visitor can
+	 * see which rule they are still missing instead of submitting and reading a
+	 * single error back.
+	 */
+	const requirements = [
+		{ label: t("passwordMinLength"), met: password.length >= 12 },
+		{ label: t("passwordUpper"), met: /[A-Z]/.test(password) },
+		{ label: t("passwordLower"), met: /[a-z]/.test(password) },
+		{ label: t("passwordDigit"), met: /\d/.test(password) },
+		{ label: t("passwordSpecial"), met: /[^A-Za-z0-9]/.test(password) },
+	];
+	/** Shown as soon as the confirmation is filled in and disagrees. */
+	const mismatch = confirmPassword.length > 0 && confirmPassword !== password;
+
 	// The invite link is `/register?ref=<username>`; read it client-side so the
 	// attribution travels with the sign-up form without server state.
 	useEffect(() => {
@@ -146,9 +170,14 @@ export function RegisterForm({
 			{/* Form */}
 			<form
 				action={(fd) => {
+					const passwordValue = String(fd.get("password") ?? "");
+					const confirmation = String(fd.get("password_confirmation") ?? "");
+					// A mismatch is reported live under the field — no round-trip
+					// needed just to hear it again from the server.
+					if (passwordValue !== confirmation) return;
 					credentialsRef.current = {
 						username: String(fd.get("username") ?? "").trim(),
-						password: String(fd.get("password") ?? ""),
+						password: passwordValue,
 					};
 					formAction(fd);
 				}}
@@ -368,6 +397,26 @@ export function RegisterForm({
 									</div>
 								</div>
 							)}
+							<ul aria-label={t("password")} className="space-y-1 pt-1">
+								{requirements.map((r) => (
+									<li
+										key={r.label}
+										className="flex items-center gap-1.5 text-[11px] font-semibold transition-colors duration-200"
+										style={{
+											color: r.met
+												? "var(--color-success)"
+												: "var(--color-text-muted)",
+										}}
+									>
+										{r.met ? (
+											<Check className="h-3 w-3 shrink-0" aria-hidden="true" />
+										) : (
+											<X className="h-3 w-3 shrink-0" aria-hidden="true" />
+										)}
+										{r.label}
+									</li>
+								))}
+							</ul>
 						</div>
 						<div className="space-y-1.5">
 							<label htmlFor="password_confirmation" className="auth-label">
@@ -385,6 +434,8 @@ export function RegisterForm({
 									type={showConfirm ? "text" : "password"}
 									placeholder={t("confirmPasswordPlaceholder")}
 									autoComplete="new-password"
+									value={confirmPassword}
+									onChange={(e) => setConfirmPassword(e.target.value)}
 									className="auth-input has-icon has-action"
 									required
 								/>
@@ -395,6 +446,14 @@ export function RegisterForm({
 									labelHide={t("hidePassword")}
 								/>
 							</div>
+							{mismatch && (
+								<p
+									className="animate-fade-in-up text-xs font-bold"
+									style={{ color: "var(--color-danger)" }}
+								>
+									{t("passwordsDontMatch")}
+								</p>
+							)}
 						</div>
 					</div>
 				</div>
@@ -521,8 +580,11 @@ export function RegisterForm({
 				<button
 					type="submit"
 					disabled={isPending || signingIn}
-					onClick={() => {
+					onClick={(e) => {
 						if (!termsAccepted) {
+							// Don't fire a doomed server round-trip: shake the
+							// terms box and stay put until it is checked.
+							e.preventDefault();
 							setTermsError(true);
 							termsRef.current?.scrollIntoView({
 								behavior: "smooth",

src/components/auth/resend-verification-form.tsx

@@ -0,0 +1,99 @@
+"use client";
+
+import { Mail } from "lucide-react";
+import { useTranslations } from "next-intl";
+import { useActionState, useId } from "react";
+import {
+	type ResendVerificationState,
+	resendVerification,
+} from "@/actions/verify";
+
+const INITIAL_STATE: ResendVerificationState = { ok: false, error: null };
+
+/**
+ * Lets a visitor whose verification token expired or was mangled request a
+ * fresh mail straight from the invalid card of /verify. The server answers
+ * identically for unknown addresses, so no registered address can be probed;
+ * the live feedback is limited to "we tried" vs "throttled".
+ */
+export function ResendVerificationForm() {
+	const t = useTranslations("pages.verify");
+	const fieldId = useId();
+	const [state, formAction, isPending] = useActionState(
+		resendVerification,
+		INITIAL_STATE,
+	);
+
+	return (
+		<form action={formAction} className="mt-1 w-full space-y-2 text-left">
+			{state.ok ? (
+				<p
+					role="status"
+					className="auth-alert auth-alert--success m-0 animate-fade-in-up"
+				>
+					{t("resendSent")}
+				</p>
+			) : state.error ? (
+				<p role="alert" className="auth-alert m-0 animate-fade-in-up">
+					{t("resendFailed")}
+				</p>
+			) : null}
+
+			<label htmlFor={fieldId} className="auth-label">
+				{t("resendEmail")}
+			</label>
+			<div className="flex flex-col gap-2 sm:flex-row">
+				<div className="relative flex-1">
+					<Mail
+						aria-hidden="true"
+						className="pointer-events-none absolute left-3.5 top-1/2 h-4 w-4 -translate-y-1/2"
+						style={{ color: "var(--color-text-muted)" }}
+					/>
+					<input
+						id={fieldId}
+						name="email"
+						type="email"
+						required
+						autoComplete="email"
+						placeholder={t("resendEmail")}
+						className="auth-input has-icon"
+					/>
+				</div>
+				<button
+					type="submit"
+					disabled={isPending}
+					className="btn-brand btn-shine mb-0.5 shrink-0 px-5 py-3 text-sm font-extrabold uppercase tracking-wider disabled:opacity-60"
+				>
+					{isPending ? (
+						<span className="inline-flex items-center justify-center gap-2">
+							<svg
+								className="animate-spin h-4 w-4"
+								viewBox="0 0 24 24"
+								fill="none"
+								role="img"
+								aria-label="Loading"
+							>
+								<circle
+									className="opacity-25"
+									cx="12"
+									cy="12"
+									r="10"
+									stroke="currentColor"
+									strokeWidth="4"
+								/>
+								<path
+									className="opacity-75"
+									fill="currentColor"
+									d="M4 12a8 8 0 018-8V0C5.373 0 0 5.373 0 12h4z"
+								/>
+							</svg>
+							{t("resendButton")}
+						</span>
+					) : (
+						t("resendButton")
+					)}
+				</button>
+			</div>
+		</form>
+	);
+}

src/components/shared/public-avatar-contract.test.ts

@@ -4,17 +4,17 @@ import { describe, expect, it } from "vitest";
 
 const compactCallSites = new Map<string, number>([
 	["src/components/top-header.tsx", 1],
+	// /login and /register render their rosters through this shared frame.
+	["src/components/auth/auth-page-frame.tsx", 1],
 	["src/app/(site)/friends/page.tsx", 1],
 	["src/app/(site)/guilds/[id]/page.tsx", 1],
 	["src/app/(site)/leaderboard/page.tsx", 1],
-	["src/app/(site)/login/page.tsx", 2],
 	["src/app/(site)/me/page.tsx", 1],
 	["src/app/(site)/messages/page.tsx", 2],
 	["src/app/(site)/page.tsx", 2],
 	["src/app/(site)/radio/leaderboard/page.tsx", 1],
 	["src/app/(site)/radio/shouts/page.tsx", 1],
 	["src/app/(site)/rankings/page.tsx", 1],
-	["src/app/(site)/register/page.tsx", 2],
 	["src/app/(site)/search/page.tsx", 1],
 	["src/app/(site)/u/[username]/page.tsx", 2],
 ]);

src/components/typewriter-text.tsx

@@ -16,6 +16,15 @@ export function TypewriterText({
 	useEffect(() => {
 		setDisplayed(text[0] ?? "");
 		setDone(text.length <= 1);
+
+		// Respect "reduce motion": show the full text instead of animating the
+		// letters in, since the blinking cursor is pure CSS-driven decoration.
+		if (window.matchMedia("(prefers-reduced-motion: reduce)").matches) {
+			setDisplayed(text);
+			setDone(true);
+			return;
+		}
+
 		let i = 1;
 		const id = setInterval(() => {
 			if (i < text.length) {

src/lib/auth/safe-redirect.test.ts

@@ -0,0 +1,30 @@
+import { describe, expect, it } from "vitest";
+import { safeRedirectPath } from "./safe-redirect";
+
+describe("safeRedirectPath", () => {
+	it("keeps same-site destinations", () => {
+		expect(safeRedirectPath("/admin/users")).toBe("/admin/users");
+		expect(safeRedirectPath("/me")).toBe("/me");
+		expect(safeRedirectPath("/login?from=%2Fadmin")).toBe(
+			"/login?from=%2Fadmin",
+		);
+		expect(safeRedirectPath("/news/welcome#comments")).toBe(
+			"/news/welcome#comments",
+		);
+	});
+
+	it("refuses cross-origin and non-path destinations", () => {
+		expect(safeRedirectPath("//evil.example")).toBe("/me");
+		expect(safeRedirectPath("/\\evil.example")).toBe("/me");
+		expect(safeRedirectPath("https://evil.example")).toBe("/me");
+		expect(safeRedirectPath("javascript:alert(1)")).toBe("/me");
+		expect(safeRedirectPath("admin")).toBe("/me");
+	});
+
+	it("treats a missing value as the fallback", () => {
+		expect(safeRedirectPath(undefined)).toBe("/me");
+		expect(safeRedirectPath(null)).toBe("/me");
+		expect(safeRedirectPath("")).toBe("/me");
+		expect(safeRedirectPath(undefined, "/admin")).toBe("/admin");
+	});
+});

src/lib/auth/safe-redirect.ts

@@ -0,0 +1,17 @@
+/**
+ * Validate a post-login destination taken from the query string.
+ *
+ * The value ends up in `window.location.href`, so an unvalidated one turns the
+ * sign-in form into an open redirect. Only same-site absolute paths pass:
+ * `//host` and `/\host` are cross-origin in every browser, and anything without
+ * a leading slash is not a path at all.
+ */
+export function safeRedirectPath(
+	raw: string | null | undefined,
+	fallback = "/me",
+): string {
+	if (!raw) return fallback;
+	if (!raw.startsWith("/")) return fallback;
+	if (raw.startsWith("//") || raw.startsWith("/\\")) return fallback;
+	return raw;
+}

src/lib/services/cache-warmup.ts

@@ -7,6 +7,7 @@ import { logger } from "@/lib/logger";
 import { apiCacheKey, redisCache } from "@/lib/redis-cache";
 import { cacheNews } from "@/lib/services/news-cache";
 import {
+	countArticles,
 	countOnline,
 	countPhotos,
 	countRooms,
@@ -65,6 +66,11 @@ export async function warmPublicCaches(): Promise<void> {
 			staleMs: COUNTER_TTL_MS,
 		}),
 	);
+	await warm("total_articles", () =>
+		cached("total_articles", COUNTER_TTL_MS, countArticles, {
+			staleMs: COUNTER_TTL_MS,
+		}),
+	);
 	await warm("online_users", () =>
 		cached("online_users", ONLINE_TTL_MS, listOnlineUsers, {
 			staleMs: 15_000,

src/lib/services/public-counters.test.ts

@@ -14,6 +14,7 @@ const tables = vi.hoisted(() => ({
 	User: { name: "users" },
 	Rooms: { name: "rooms" },
 	CameraWeb: { name: "camera_web" },
+	WebsiteArticles: { name: "website_articles" },
 }));
 
 vi.mock("@/lib/db", () => {
@@ -48,6 +49,7 @@ vi.mock("@/lib/db", () => {
 });
 
 import {
+	countArticles,
 	countOnline,
 	countPhotos,
 	countRooms,
@@ -98,3 +100,11 @@ it("keeps the online count exact", async () => {
 	state.exact = 12;
 	expect(await countOnline()).toBe(12);
 });
+
+it("counts the articles table, not the news preview it renders from", async () => {
+	// The homepage shows a total article count while the news panel beside it
+	// only ever receives the four latest rows — the two must not be conflated.
+	state.perTable = { website_articles: 42, users: 7 };
+	expect(await countArticles()).toBe(42);
+	expect(await countUsers()).toBe(7);
+});

src/lib/services/public-counters.ts

@@ -1,7 +1,7 @@
 import "server-only";
 
-import { count, eq } from "drizzle-orm";
-import { CameraWeb, db, Rooms, User } from "@/lib/db";
+import { and, count, eq, or, sql } from "drizzle-orm";
+import { CameraWeb, db, Rooms, User, WebsiteArticles } from "@/lib/db";
 
 /**
  * Row counters for the public homepage.
@@ -40,6 +40,27 @@ export async function countPhotos(): Promise<number> {
 	return row?.total ?? 0;
 }
 
+/**
+ * Published articles only — the same filter `getNewsList` renders from, so the
+ * "Articles" figure on the homepage can never disagree with the news section
+ * that sits next to it.
+ */
+export async function countArticles(): Promise<number> {
+	const [row] = await db
+		.select({ total: count() })
+		.from(WebsiteArticles)
+		.where(
+			and(
+				eq(WebsiteArticles.status, "published"),
+				or(
+					sql`${WebsiteArticles.publishAt} IS NULL`,
+					sql`${WebsiteArticles.publishAt} <= NOW()`,
+				),
+			),
+		);
+	return row?.total ?? 0;
+}
+
 /**
  * Online users is deliberately *not* estimated: it is read from an index over a
  * small subset of rows, it is the one counter people watch closely, and being a

src/messages/ar.json

@@ -6092,7 +6092,9 @@
 			"username": "اسم المستخدم",
 			"password": "كلمة المرور",
 			"showPassword": "إظهار",
-			"hidePassword": "إخفاء"
+			"hidePassword": "إخفاء",
+			"registeredSuccess": "تم إنشاء الحساب — تحقق من بريدك الوارد للحصول على رابط التحقق، ثم سجّل الدخول.",
+			"verifyEmailCta": "طلب رابط تحقق جديد"
 		},
 		"register": {
 			"title": "إنشاء حساب",
@@ -6192,7 +6194,11 @@
 			"invalidTitle": "Email verification",
 			"invalidSubtitle": "Invalid or expired link",
 			"invalidBody": "This verification link is not valid. Make sure you opened the full link from your email, or request a new one.",
-			"backToLogin": "Back to login"
+			"backToLogin": "Back to login",
+			"resendEmail": "البريد الإلكتروني",
+			"resendButton": "إرسال رابط جديد",
+			"resendSent": "إذا كان لهذا العنوان حساب، فسيصل رابط تحقق جديد قريبًا — تحقق من بريدك الوارد.",
+			"resendFailed": "تعذّر إرسال رابط جديد. حاول مرة أخرى بعد بضع دقائق."
 		},
 		"banned": {
 			"title": "You are banned",

src/messages/bg.json

@@ -847,7 +847,9 @@
 			"username": "Потребителско име",
 			"password": "Парола",
 			"showPassword": "Покажи",
-			"hidePassword": "Скрий"
+			"hidePassword": "Скрий",
+			"registeredSuccess": "Акаунтът е създаден — проверете пощата си за връзката за потвърждение и влезете.",
+			"verifyEmailCta": "Заявка за нова вързка за потвърждение"
 		},
 		"register": {
 			"title": "Създаване на акаунт",
@@ -947,7 +949,11 @@
 			"invalidTitle": "Проверка на имейл",
 			"invalidSubtitle": "Невалидна или изтекла връзка",
 			"invalidBody": "Тази връзка за потвърждение не е валидна. Уверете се, че сте отворили пълната връзка от имейла си или поискайте нова.",
-			"backToLogin": "Назад към входа"
+			"backToLogin": "Назад към входа",
+			"resendEmail": "Имейл адрес",
+			"resendButton": "Изпрати нова вързка",
+			"resendSent": "Ако този адрес има акаунт, нова вързка за потвърждение е на път — проверете пощата си.",
+			"resendFailed": "Не можахме да изпратим нова вързка. Опитайте отново след няколко минути."
 		},
 		"banned": {
 			"title": "Вие сте забранени",

src/messages/cs.json

@@ -847,7 +847,9 @@
 			"username": "Uživatelské jméno",
 			"password": "Heslo",
 			"showPassword": "Zobrazit",
-			"hidePassword": "Skrýt"
+			"hidePassword": "Skrýt",
+			"registeredSuccess": "Úter vytvořen — zkontrolujte svou schránku a najděte ověřovací odkaz, poté se přihlaste.",
+			"verifyEmailCta": "Vyžádat nový ověřovací odkaz"
 		},
 		"register": {
 			"title": "Vytvořit účet",
@@ -947,7 +949,11 @@
 			"invalidTitle": "Ověření e-mailem",
 			"invalidSubtitle": "Neplatný odkaz nebo odkaz, jehož platnost vypršela",
 			"invalidBody": "Tento ověřovací odkaz není platný. Ujistěte se, že jste otevřeli celý odkaz ze svého e-mailu, nebo požádejte o nový.",
-			"backToLogin": "Zpět k přihlášení"
+			"backToLogin": "Zpět k přihlášení",
+			"resendEmail": "E-mailová adresa",
+			"resendButton": "Odeslat nový odkaz",
+			"resendSent": "Pokud má tento e-mail účet, nový ověřovací odkaz je na cestě — zkontrolujte schránku.",
+			"resendFailed": "Nový odkaz se nepodařilo odeslat. Zkuste to znovu za několik minut."
 		},
 		"banned": {
 			"title": "Máte zákaz",

src/messages/da.json

@@ -847,7 +847,9 @@
 			"username": "Brugernavn",
 			"password": "Adgangskode",
 			"showPassword": "Vis",
-			"hidePassword": "Skjul"
+			"hidePassword": "Skjul",
+			"registeredSuccess": "Konto oprettet — tjek din indbakke for bekræftelseslinket, og log derefter ind.",
+			"verifyEmailCta": "Anmod om en ny bekræftelseslink"
 		},
 		"register": {
 			"title": "Opret konto",
@@ -947,7 +949,11 @@
 			"invalidTitle": "E-mailbekræftelse",
 			"invalidSubtitle": "Ugyldigt eller udløbet link",
 			"invalidBody": "Dette bekræftelseslink er ikke gyldigt. Sørg for, at du har åbnet hele linket fra din e-mail, eller anmod om et nyt.",
-			"backToLogin": "Tilbage til login"
+			"backToLogin": "Tilbage til login",
+			"resendEmail": "E-mailadresse",
+			"resendButton": "Send nyt link",
+			"resendSent": "Hvis den adresse har en konto, er et nyt bekræftelseslink på vej — tjek din indbakke.",
+			"resendFailed": "Det var ikke muligt at sende et nyt link. Prøv igen om et par minutter."
 		},
 		"banned": {
 			"title": "Du er bandlyst",

src/messages/de.json

@@ -817,7 +817,9 @@
 			"username": "Benutzername",
 			"password": "Passwort",
 			"showPassword": "Anzeigen",
-			"hidePassword": "Verbergen"
+			"hidePassword": "Verbergen",
+			"registeredSuccess": "Konto erstellt — prüf dein Postfach für den Bestätigungslink und melde dich dann an.",
+			"verifyEmailCta": "Neuen Bestätigungslink anfordern"
 		},
 		"register": {
 			"title": "Konto erstellen",
@@ -917,7 +919,11 @@
 			"invalidTitle": "E-Mail-Verifizierung",
 			"invalidSubtitle": "Ungültiger oder abgelaufener Link",
 			"invalidBody": "Dieser Verifizierungslink ist nicht gültig. Stelle sicher, dass du den vollständigen Link aus deiner E-Mail geöffnet hast, oder fordere einen neuen an.",
-			"backToLogin": "Zurück zur Anmeldung"
+			"backToLogin": "Zurück zur Anmeldung",
+			"resendEmail": "E-Mail-Adresse",
+			"resendButton": "Neuen Link senden",
+			"resendSent": "Wenn zu dieser Adresse ein Konto gehört, ist ein neuer Bestätigungslink unterwegs — prüf dein Postfach.",
+			"resendFailed": "Der neue Link konnte nicht gesendet werden. Versuche es in einigen Minuten erneut."
 		},
 		"banned": {
 			"title": "Du bist gebannt",

src/messages/el.json

@@ -847,7 +847,9 @@
 			"username": "Όνομα χρήστη",
 			"password": "Κωδικός πρόσβασης",
 			"showPassword": "Εμφάνιση",
-			"hidePassword": "Απόκρυψη"
+			"hidePassword": "Απόκρυψη",
+			"registeredSuccess": "Ο λογαριασμός δημιουργήθηκε — ελέγξτε τα εισερχόμενά σας για τον σύνδεσμο επαλήθευσης και συνδεθείτε.",
+			"verifyEmailCta": "Ζητήστε νέο σύνδεσμο επαλήθευσης"
 		},
 		"register": {
 			"title": "Δημιουργία λογαριασμού",
@@ -947,7 +949,11 @@
 			"invalidTitle": "Επαλήθευση μέσω email",
 			"invalidSubtitle": "Μη έγκυρος ή ληγμένος σύνδεσμος",
 			"invalidBody": "Αυτός ο σύνδεσμος επαλήθευσης δεν είναι έγκυρος. Βεβαιωθείτε ότι έχετε ανοίξει τον πλήρη σύνδεσμο από το email σας ή ζητήστε νέο.",
-			"backToLogin": "Επιστροφή στην είσοδο"
+			"backToLogin": "Επιστροφή στην είσοδο",
+			"resendEmail": "Διεύθυνση email",
+			"resendButton": "Αποστολή νέου συνδέσμου",
+			"resendSent": "Αν αυτή η διεύθυνση έχει λογαριασμό, ένας νέος σύνδεσμος επαλήθευσης είναι καθ' οδόν — ελέγξτε τα εισερχόμενά σας.",
+			"resendFailed": "Δεν ήταν δυνατή η αποστολή νέου συνδέσμου. Δοκιμάστε ξανά σε λίγα λεπτά."
 		},
 		"banned": {
 			"title": "Είστε απαγορευμένοι",

src/messages/en.json

@@ -1019,7 +1019,9 @@
 			"showPassword": "Show",
 			"hidePassword": "Hide",
 			"username": "Username",
-			"password": "Password"
+			"password": "Password",
+			"registeredSuccess": "Account created — check your inbox for the verification link, then sign in.",
+			"verifyEmailCta": "Request a new verification link"
 		},
 		"register": {
 			"title": "Create account",
@@ -1119,7 +1121,11 @@
 			"invalidTitle": "Email verification",
 			"invalidSubtitle": "Invalid or expired link",
 			"invalidBody": "This verification link is not valid. Make sure you opened the full link from your email, or request a new one.",
-			"backToLogin": "Back to login"
+			"backToLogin": "Back to login",
+			"resendEmail": "Email address",
+			"resendButton": "Send new link",
+			"resendSent": "If that address has an account, a new verification link is on its way — check your inbox.",
+			"resendFailed": "Couldn’t send a new link. Wait a few minutes and try again."
 		},
 		"banned": {
 			"title": "You are banned",

src/messages/es.json

@@ -817,7 +817,9 @@
 			"username": "Usuario",
 			"password": "Contraseña",
 			"showPassword": "Mostrar",
-			"hidePassword": "Ocultar"
+			"hidePassword": "Ocultar",
+			"registeredSuccess": "Cuenta creada: revisa tu bandeja de entrada para el enlace de verificación e inicia sesión.",
+			"verifyEmailCta": "Solicitar un nuevo enlace de verificación"
 		},
 		"register": {
 			"title": "Crear cuenta",
@@ -917,7 +919,11 @@
 			"invalidTitle": "Verificación de correo electrónico",
 			"invalidSubtitle": "Enlace inválido o expirado",
 			"invalidBody": "Este enlace de verificación no es válido. Asegúrate de haber abierto el enlace completo de tu correo, o solicita uno nuevo.",
-			"backToLogin": "Volver al inicio de sesión"
+			"backToLogin": "Volver al inicio de sesión",
+			"resendEmail": "Dirección de correo electrónico",
+			"resendButton": "Enviar nuevo enlace",
+			"resendSent": "Si esa dirección tiene una cuenta, un nuevo enlace de verificación está en camino: revisa tu bandeja de entrada.",
+			"resendFailed": "No se pudo enviar un nuevo enlace. Vuelve a intentarlo en unos minutos."
 		},
 		"banned": {
 			"title": "Has sido baneado",

src/messages/fi.json

@@ -6092,7 +6092,9 @@
 			"username": "Käyttäjätunnus",
 			"password": "Salasana",
 			"showPassword": "Näytä",
-			"hidePassword": "Piilota"
+			"hidePassword": "Piilota",
+			"registeredSuccess": "Tili luotu — tarkista sähköpostisi ja avaa vahvistuslinkki, sitten kirjaudu sisään.",
+			"verifyEmailCta": "Pyydä uusi vahvistuslinkki"
 		},
 		"register": {
 			"title": "Luo tili",
@@ -6192,7 +6194,11 @@
 			"invalidTitle": "Email verification",
 			"invalidSubtitle": "Invalid or expired link",
 			"invalidBody": "This verification link is not valid. Make sure you opened the full link from your email, or request a new one.",
-			"backToLogin": "Back to login"
+			"backToLogin": "Back to login",
+			"resendEmail": "Sähköpostiosoite",
+			"resendButton": "Lähetä uusi linkki",
+			"resendSent": "Jos kyseiseen osoitteeseen on liitetty tili, uusi vahvistuslinkki on matkalla — tarkista sähköpostisi.",
+			"resendFailed": "Uutta linkkiä ei voitu lähettää. Yritä uudelleen muutaman minuutin kuluttua."
 		},
 		"banned": {
 			"title": "You are banned",

src/messages/fr.json

@@ -817,7 +817,9 @@
 			"username": "Nom d'utilisateur",
 			"password": "Mot de passe",
 			"showPassword": "Afficher",
-			"hidePassword": "Masquer"
+			"hidePassword": "Masquer",
+			"registeredSuccess": "Compte créé — vérifiez votre boîte mail pour le lien de confirmation, puis connectez-vous.",
+			"verifyEmailCta": "Demander un nouveau lien de vérification"
 		},
 		"register": {
 			"title": "Créer un compte",
@@ -917,7 +919,11 @@
 			"invalidTitle": "Vérification d'e-mail",
 			"invalidSubtitle": "Lien invalide ou expiré",
 			"invalidBody": "Ce lien de vérification n'est pas valide. Assurez-vous d'avoir ouvert le lien complet depuis votre e-mail, ou demandez-en un nouveau.",
-			"backToLogin": "Retour à la connexion"
+			"backToLogin": "Retour à la connexion",
+			"resendEmail": "Adresse e-mail",
+			"resendButton": "Envoyer un nouveau lien",
+			"resendSent": "Si cette adresse possède un compte, un nouveau lien de vérification est en route — vérifiez votre boîte mail.",
+			"resendFailed": "Impossible d’envoyer un nouveau lien. Réessayez dans quelques minutes."
 		},
 		"banned": {
 			"title": "Vous êtes banni",

src/messages/hr.json

@@ -847,7 +847,9 @@
 			"username": "Korisničko ime",
 			"password": "Lozinka",
 			"showPassword": "Prikaži",
-			"hidePassword": "Sakrij"
+			"hidePassword": "Sakrij",
+			"registeredSuccess": "Račun je stvoren — provjerite poštanski sandučić za poveznicu za verifikaciju, zatim se prijavite.",
+			"verifyEmailCta": "Zatraži novu poveznicu za verifikaciju"
 		},
 		"register": {
 			"title": "Napravi račun",
@@ -947,7 +949,11 @@
 			"invalidTitle": "Potvrda e-pošte",
 			"invalidSubtitle": "Veza je nevažeća ili je istekla",
 			"invalidBody": "Ova veza za potvrdu nije važeća. Provjerite jeste li otvorili cijelu vezu iz svoje e-pošte ili zatražite novu.",
-			"backToLogin": "Natrag na prijavu"
+			"backToLogin": "Natrag na prijavu",
+			"resendEmail": "Adresa e-pošte",
+			"resendButton": "Pošalji novu poveznicu",
+			"resendSent": "Ako ta adresa ima račun, nova poveznica za verifikaciju je na putu — provjerite poštanski sandučić.",
+			"resendFailed": "Novu poveznicu nije bilo moguće poslati. Pokušajte ponovo za nekoliko minuta."
 		},
 		"banned": {
 			"title": "Zabranjeni ste",

src/messages/hu.json

@@ -847,7 +847,9 @@
 			"username": "Felhasználónév",
 			"password": "Jelszó",
 			"showPassword": "Megjelenítés",
-			"hidePassword": "Elrejtés"
+			"hidePassword": "Elrejtés",
+			"registeredSuccess": "A fiók létrehozva — ellenőrizze a postaládáját a megerősítő linkért, majd jelentkezzen be.",
+			"verifyEmailCta": "Új megerősítő link kérése"
 		},
 		"register": {
 			"title": "Hozzon létre fiókot",
@@ -947,7 +949,11 @@
 			"invalidTitle": "E-mail ellenőrzés",
 			"invalidSubtitle": "Érvénytelen vagy lejárt link",
 			"invalidBody": "Ez az ellenőrző link nem érvényes. Győződjön meg arról, hogy a teljes linket az e-mailből nyitotta meg, vagy kérjen újat.",
-			"backToLogin": "Vissza a bejelentkezéshez"
+			"backToLogin": "Vissza a bejelentkezéshez",
+			"resendEmail": "E-mail cím",
+			"resendButton": "Új link küldése",
+			"resendSent": "Ha ehhez a címhez tartozik fiók, új megerősítő link útban van — nézze meg a postaládáját.",
+			"resendFailed": "Az új linket nem sikerült elküldeni. Próbálja újra néhány perc múlva."
 		},
 		"banned": {
 			"title": "Ki vagy tiltva",

src/messages/it.json

@@ -989,7 +989,9 @@
 			"username": "Nome utente",
 			"password": "Password",
 			"showPassword": "Mostra",
-			"hidePassword": "Nascondi"
+			"hidePassword": "Nascondi",
+			"registeredSuccess": "Account creato: controlla la tua casella per il link di verifica, poi accedi.",
+			"verifyEmailCta": "Richiedi un nuovo link di verifica"
 		},
 		"register": {
 			"title": "Crea un account",
@@ -1089,7 +1091,11 @@
 			"invalidTitle": "Verifica email",
 			"invalidSubtitle": "Link non valido o scaduto",
 			"invalidBody": "Questo link di verifica non è valido. Assicurati di aver aperto il link completo della tua email, oppure richiedine uno nuovo.",
-			"backToLogin": "Torna all'accesso"
+			"backToLogin": "Torna all'accesso",
+			"resendEmail": "Indirizzo e-mail",
+			"resendButton": "Invia nuovo link",
+			"resendSent": "Se quell'indirizzo ha un account, un nuovo link di verifica è in arrivo: controlla la casella.",
+			"resendFailed": "Impossibile inviare un nuovo link. Riprova tra qualche minuto."
 		},
 		"banned": {
 			"title": "Sei stato bannato",

src/messages/ja.json

@@ -6092,7 +6092,9 @@
 			"username": "ユーザー名",
 			"password": "パスワード",
 			"showPassword": "表示",
-			"hidePassword": "非表示"
+			"hidePassword": "非表示",
+			"registeredSuccess": "アカウントを作成しました。確認用リンクをメールでお確かめのうえ、ログインしてください。",
+			"verifyEmailCta": "新しい確認リンクをリクエスト"
 		},
 		"register": {
 			"title": "アカウント作成",
@@ -6192,7 +6194,11 @@
 			"invalidTitle": "Email verification",
 			"invalidSubtitle": "Invalid or expired link",
 			"invalidBody": "This verification link is not valid. Make sure you opened the full link from your email, or request a new one.",
-			"backToLogin": "Back to login"
+			"backToLogin": "Back to login",
+			"resendEmail": "メールアドレス",
+			"resendButton": "新しいリンクを送信",
+			"resendSent": "そのアドレスにアカウントがあれば、新しい確認リンクが届くはずです。受信トレイをご確認ください。",
+			"resendFailed": "新しいリンクを送信できませんでした。数分後にもう一度お試しください。"
 		},
 		"banned": {
 			"title": "You are banned",

src/messages/nl.json

@@ -1019,7 +1019,9 @@
 			"showPassword": "Toon",
 			"hidePassword": "Verberg",
 			"username": "Gebruikersnaam",
-			"password": "Wachtwoord"
+			"password": "Wachtwoord",
+			"registeredSuccess": "Account aangemaakt — check je inbox voor de verificatielink en log daarna in.",
+			"verifyEmailCta": "Een nieuwe verificatielink aanvragen"
 		},
 		"register": {
 			"title": "Account aanmaken",
@@ -1119,7 +1121,11 @@
 			"invalidTitle": "E-mailverificatie",
 			"invalidSubtitle": "Ongeldige of verlopen link",
 			"invalidBody": "Deze verificatielink is niet geldig. Zorg ervoor dat je de volledige link uit je e-mail hebt geopend of vraag een nieuwe aan.",
-			"backToLogin": "Terug naar inloggen"
+			"backToLogin": "Terug naar inloggen",
+			"resendEmail": "E-mailadres",
+			"resendButton": "Nieuwe link versturen",
+			"resendSent": "Als dit adres een account heeft, is er een nieuwe verificatielink onderweg — check je inbox.",
+			"resendFailed": "De nieuwe link kon niet worden verstuurd. Probeer het over een paar minuten opnieuw."
 		},
 		"banned": {
 			"title": "Je bent verbannen",

src/messages/no.json

@@ -847,7 +847,9 @@
 			"username": "Brukernavn",
 			"password": "Passord",
 			"showPassword": "Vis",
-			"hidePassword": "Skjul"
+			"hidePassword": "Skjul",
+			"registeredSuccess": "Konto opprettet — sjekk innboksen for verifiseringslenken, og logg så inn.",
+			"verifyEmailCta": "Be om en ny verifiseringslenke"
 		},
 		"register": {
 			"title": "Opprett konto",
@@ -947,7 +949,11 @@
 			"invalidTitle": "E-postbekreftelse",
 			"invalidSubtitle": "Ugyldig eller utløpt lenke",
 			"invalidBody": "Denne bekreftelseslenken er ikke gyldig. Sørg for at du åpnet hele lenken fra e-posten din, eller be om en ny.",
-			"backToLogin": "Tilbake til innlogging"
+			"backToLogin": "Tilbake til innlogging",
+			"resendEmail": "E-postadresse",
+			"resendButton": "Send ny lenke",
+			"resendSent": "Hvis den adressen har en konto, er en ny verifiseringslenke på vei — sjekk innboksen.",
+			"resendFailed": "Kunne ikke sende en ny lenke. Prøv igjen om noen minutter."
 		},
 		"banned": {
 			"title": "Du er utestengt",

src/messages/pl.json

@@ -847,7 +847,9 @@
 			"username": "Nazwa użytkownika",
 			"password": "Hasło",
 			"showPassword": "Pokaż",
-			"hidePassword": "Ukryj"
+			"hidePassword": "Ukryj",
+			"registeredSuccess": "Konto utworzone — sprawdź skrzynkę odbiorczą, aby znaleźć link weryfikacyjny, a następnie zaloguj się.",
+			"verifyEmailCta": "Poproś o nowy link weryfikacyjny"
 		},
 		"register": {
 			"title": "Utwórz konto",
@@ -947,7 +949,11 @@
 			"invalidTitle": "Weryfikacja e-mailowa",
 			"invalidSubtitle": "Nieprawidłowy lub wygasły link",
 			"invalidBody": "Ten link weryfikacyjny jest nieprawidłowy. Upewnij się, że otworzyłeś cały link z e-maila lub poproś o nowy.",
-			"backToLogin": "Powrót do logowania"
+			"backToLogin": "Powrót do logowania",
+			"resendEmail": "Adres e-mail",
+			"resendButton": "Wyślij nowy link",
+			"resendSent": "Jeśli ten adres ma konto, nowy link weryfikacyjny jest już w drodze — sprawdź skrzynkę odbiorczą.",
+			"resendFailed": "Nie udało się wysłać nowego linku. Spróbuj ponownie za kilka minut."
 		},
 		"banned": {
 			"title": "Masz zakaz",

src/messages/pt.json

@@ -847,7 +847,9 @@
 			"username": "Nome de usuário",
 			"password": "Senha",
 			"showPassword": "Mostrar",
-			"hidePassword": "Ocultar"
+			"hidePassword": "Ocultar",
+			"registeredSuccess": "Conta criada — verifique a sua caixa de entrada para o link de confirmação e inicie sessão.",
+			"verifyEmailCta": "Pedir um novo link de verificação"
 		},
 		"register": {
 			"title": "Criar conta",
@@ -947,7 +949,11 @@
 			"invalidTitle": "Verificação de e-mail",
 			"invalidSubtitle": "Link inválido ou expirado",
 			"invalidBody": "Este link de verificação não é válido. Certifique-se de abrir o link completo do seu e-mail ou solicite um novo.",
-			"backToLogin": "Voltar ao login"
+			"backToLogin": "Voltar ao login",
+			"resendEmail": "Endereço de e-mail",
+			"resendButton": "Enviar novo link",
+			"resendSent": "Se esse endereço tiver uma conta, um novo link de verificação estará a caminho — confira a sua caixa de entrada.",
+			"resendFailed": "Não foi possível enviar um novo link. Tente novamente daqui a alguns minutos."
 		},
 		"banned": {
 			"title": "Você está banido",

src/messages/ro.json

@@ -847,7 +847,9 @@
 			"username": "Nume de utilizator",
 			"password": "Parolă",
 			"showPassword": "Arată",
-			"hidePassword": "Ascunde"
+			"hidePassword": "Ascunde",
+			"registeredSuccess": "Cont creat — verifică căsuța pentru linkul de confirmare, apoi autentifică-te.",
+			"verifyEmailCta": "Solicită un nou link de verificare"
 		},
 		"register": {
 			"title": "Creați cont",
@@ -947,7 +949,11 @@
 			"invalidTitle": "Verificare e-mail",
 			"invalidSubtitle": "Link nevalid sau expirat",
 			"invalidBody": "Acest link de verificare nu este valid. Asigurați-vă că ați deschis linkul complet din e-mailul dvs. sau solicitați unul nou.",
-			"backToLogin": "Înapoi la autentificare"
+			"backToLogin": "Înapoi la autentificare",
+			"resendEmail": "Adresă de e-mail",
+			"resendButton": "Trimite un nou link",
+			"resendSent": "Dacă acestă adresă are un cont, un nou link de verificare este pe drum — verifică căsuța.",
+			"resendFailed": "Nu s-a putut trimite un nou link. Încearcă din nou în câteva minute."
 		},
 		"banned": {
 			"title": "Esti interzis",

src/messages/ru.json

@@ -845,7 +845,9 @@
 			"username": "Имя пользователя",
 			"password": "Пароль",
 			"showPassword": "Показать",
-			"hidePassword": "Скрыть"
+			"hidePassword": "Скрыть",
+			"registeredSuccess": "Аккаунт создан — проверьте почту: там ссылка для подтверждения. После этого войдите.",
+			"verifyEmailCta": "Запросить новую ссылку для подтверждения"
 		},
 		"register": {
 			"title": "Создать аккаунт",
@@ -945,7 +947,11 @@
 			"invalidTitle": "Подтверждение адреса электронной почты",
 			"invalidSubtitle": "Недействительная или просроченная ссылка",
 			"invalidBody": "Эта ссылка для подтверждения недействительна. Убедитесь, что вы открыли полную ссылку из письма, или запросите новую.",
-			"backToLogin": "Назад к входу"
+			"backToLogin": "Назад к входу",
+			"resendEmail": "Адрес электронной почты",
+			"resendButton": "Отправить новую ссылку",
+			"resendSent": "Если к этому адресу привязан аккаунт, новая ссылка уже в пути — проверьте почту.",
+			"resendFailed": "Не удалось отправить новую ссылку. Попробуйте еще раз через несколько минут."
 		},
 		"banned": {
 			"title": "Вы заблокированы",

src/messages/sk.json

@@ -847,7 +847,9 @@
 			"username": "Používateľské meno",
 			"password": "heslo",
 			"showPassword": "Zobraziť",
-			"hidePassword": "Skryť"
+			"hidePassword": "Skryť",
+			"registeredSuccess": "Úter vytvorený — skontrolujte svoju schránku a nájdite overovací odkaz, potom sa prihláste.",
+			"verifyEmailCta": "Vyžiadať nový overovací odkaz"
 		},
 		"register": {
 			"title": "Vytvoriť účet",
@@ -947,7 +949,11 @@
 			"invalidTitle": "Overenie e-mailom",
 			"invalidSubtitle": "Neplatný odkaz alebo odkaz, ktorého platnosť vypršala",
 			"invalidBody": "Tento overovací odkaz nie je platný. Uistite sa, že ste otvorili celý odkaz zo svojho e-mailu, alebo požiadajte o nový.",
-			"backToLogin": "Späť na prihlásenie"
+			"backToLogin": "Späť na prihlásenie",
+			"resendEmail": "E-mailová adresa",
+			"resendButton": "Odoslať nový odkaz",
+			"resendSent": "Ak má tento e-mail účet, nový overovací odkaz je na ceste — skontrolujte schránku.",
+			"resendFailed": "Nový odkaz sa nepodarilo odoslať. Skúste to znova o niekoľko minút."
 		},
 		"banned": {
 			"title": "Máte zákaz",

src/messages/sr.json

@@ -847,7 +847,9 @@
 			"username": "Корисничко име",
 			"password": "Лозинка",
 			"showPassword": "Прикажи",
-			"hidePassword": "Сакриј"
+			"hidePassword": "Сакриј",
+			"registeredSuccess": "Налог је креиран — проверите пошту за везу за верификацију, а затим се пријавите.",
+			"verifyEmailCta": "Затражи нову везу за верификацију"
 		},
 		"register": {
 			"title": "Креирајте налог",
@@ -947,7 +949,11 @@
 			"invalidTitle": "Верификација е-поште",
 			"invalidSubtitle": "Неважећа или истекла веза",
 			"invalidBody": "Ова веза за верификацију није важећа. Уверите се да сте отворили целу везу из своје е-поште или затражите нову.",
-			"backToLogin": "Назад на пријаву"
+			"backToLogin": "Назад на пријаву",
+			"resendEmail": "Имејл адреса",
+			"resendButton": "Пошаљи нову везу",
+			"resendSent": "Ако за ту адресу постоји налог, нова веза за верификацију је на путу — проверите пошту.",
+			"resendFailed": "Нова веза није могла бити послата. Покушајте поново за неколико минута."
 		},
 		"banned": {
 			"title": "Забрањени сте",

src/messages/sv.json

@@ -847,7 +847,9 @@
 			"username": "Användarnamn",
 			"password": "Lösenord",
 			"showPassword": "Visa",
-			"hidePassword": "Dölj"
+			"hidePassword": "Dölj",
+			"registeredSuccess": "Konto skapad — kontrollera din inkorg för verifieringslänken och logga sedan in.",
+			"verifyEmailCta": "Begär en ny verifieringslänk"
 		},
 		"register": {
 			"title": "Skapa konto",
@@ -947,7 +949,11 @@
 			"invalidTitle": "E-postverifiering",
 			"invalidSubtitle": "Ogiltig eller utgången länk",
 			"invalidBody": "Denna verifieringslänk är inte giltig. Se till att du öppnade hela länken från din e-post, eller begär en ny.",
-			"backToLogin": "Tillbaka till inloggning"
+			"backToLogin": "Tillbaka till inloggning",
+			"resendEmail": "E-postadress",
+			"resendButton": "Skicka ny länk",
+			"resendSent": "Om den adressen har ett konto är en ny verifieringslänk på väg — kontrollera din inkorg.",
+			"resendFailed": "Det gick inte att skicka en ny länk. Försök igen om några minuter."
 		},
 		"banned": {
 			"title": "Du är förbjuden",

src/messages/tr.json

@@ -847,7 +847,9 @@
 			"username": "Kullanıcı adı",
 			"password": "Şifre",
 			"showPassword": "Göster",
-			"hidePassword": "Gizle"
+			"hidePassword": "Gizle",
+			"registeredSuccess": "Hesap oluşturuldu — doğrulama bağlantısı için gelen kutunuzu kontrol edin, ardından giriş yapın.",
+			"verifyEmailCta": "Yeni doğrulama bağlantısı iste"
 		},
 		"register": {
 			"title": "Hesap oluştur",
@@ -947,7 +949,11 @@
 			"invalidTitle": "E-posta doğrulaması",
 			"invalidSubtitle": "Geçersiz veya süresi dolmuş bağlantı",
 			"invalidBody": "Bu doğrulama bağlantısı geçerli değil. E-postanızdaki bağlantının tamamını açtığınızdan emin olun veya yeni bir bağlantı isteyin.",
-			"backToLogin": "Girişe geri dön"
+			"backToLogin": "Girişe geri dön",
+			"resendEmail": "E-posta adresi",
+			"resendButton": "Yeni bağlantı gönder",
+			"resendSent": "Bu adrese bağlı bir hesap varsa yeni bir doğrulama bağlantısı yolda — gelen kutunuzu kontrol edin.",
+			"resendFailed": "Yeni bağlantı gönderilemedi. Birkaç dakika sonra tekrar deneyin."
 		},
 		"banned": {
 			"title": "Yasaklandın",

src/messages/uk.json

@@ -847,7 +847,9 @@
 			"username": "Ім'я користувача",
 			"password": "Пароль",
 			"showPassword": "Показати",
-			"hidePassword": "Сховати"
+			"hidePassword": "Сховати",
+			"registeredSuccess": "Акаунт створено — перевірте пошту: там посилання для підтвердження. Після цього увійдіть.",
+			"verifyEmailCta": "Запросити нове посилання для підтвердження"
 		},
 		"register": {
 			"title": "Створити акаунт",
@@ -947,7 +949,11 @@
 			"invalidTitle": "Підтвердження електронної пошти",
 			"invalidSubtitle": "Недійсне або прострочене посилання",
 			"invalidBody": "Це посилання для підтвердження недійсне. Переконайтеся, що ви відкрили повне посилання зі свого електронного листа, або надішліть запит на нове.",
-			"backToLogin": "Назад до входу"
+			"backToLogin": "Назад до входу",
+			"resendEmail": "Адреса електронної пошти",
+			"resendButton": "Надіслати нове посилання",
+			"resendSent": "Якщо до цієї адреси прив'язаний аккаунт, нове посилання вже в дорозі — перевірте пошту.",
+			"resendFailed": "Не вдалося надіслати нове посилання. Спробуйте ще раз через кілька хвилин."
 		},
 		"banned": {
 			"title": "Ви забанені",

src/proxy.ts

@@ -40,7 +40,11 @@ export const proxy = async (req: import("next/server").NextRequest) => {
 		: null;
 
 	if (shouldRedirectAdminRequest(pathname, token)) {
-		return NextResponse.redirect(new URL("/login", req.url));
+		// Carry the destination along so the sign-in form can send the visitor
+		// back to the page they asked for instead of dumping them on /me.
+		const login = new URL("/login", req.url);
+		login.searchParams.set("from", `${pathname}${req.nextUrl.search}`);
+		return NextResponse.redirect(login);
 	}
 
 	const nonce = createCspNonce();