feat: shop buy, forum replies, tickets, messages, sessions, and UX hardening

Complete remaining product gaps: credit-based shop purchases, guild thread replies, help ticket detail/reply/close, offline message compose, sign-out-everywhere via JWT version, ads delete confirm, soft-fail feedback, rate limits, loading states, and single auth() in site layout.

Co-authored-by: Cursor <[email protected]>

src/app/(site)/guilds/[id]/forum/[threadId]/page.tsx

@@ -0,0 +1,275 @@
+import Link from "next/link";
+import { notFound } from "next/navigation";
+import { getTranslations } from "next-intl/server";
+import type { CSSProperties } from "react";
+import { replyToThread } from "@/actions/social";
+import { ContentCard, EmptyState } from "@/components/public/ui";
+import { auth } from "@/lib/auth";
+import { prisma } from "@/lib/prisma";
+
+export const revalidate = 60;
+
+type SearchParams = Promise<{ replied?: string; error?: string }>;
+
+function feedbackStyle(tone: "success" | "error"): CSSProperties {
+	const accent =
+		tone === "error" ? "var(--color-danger)" : "var(--color-primary)";
+	return {
+		margin: 0,
+		padding: "0.85rem 1rem",
+		borderRadius: "var(--radius-md)",
+		border: `1px solid ${accent}`,
+		color: "var(--color-text-readable, var(--color-text))",
+		fontSize: "0.9rem",
+		fontWeight: 600,
+		background: "var(--color-surface)",
+		borderLeft: `4px solid ${accent}`,
+	};
+}
+
+function formatTimestamp(ts: number | null | undefined): string {
+	if (!ts) return "";
+	return new Date(ts * 1000).toISOString().slice(0, 16).replace("T", " ");
+}
+
+export default async function GuildForumThreadPage({
+	params,
+	searchParams,
+}: {
+	params: Promise<{ id: string; threadId: string }>;
+	searchParams: SearchParams;
+}) {
+	const t = await getTranslations("pages.guildForumThread");
+	const { id, threadId: threadIdRaw } = await params;
+	const { replied, error } = await searchParams;
+	const guildId = Number(id);
+	const threadId = Number(threadIdRaw);
+	if (!Number.isInteger(guildId) || guildId <= 0) notFound();
+	if (!Number.isInteger(threadId) || threadId <= 0) notFound();
+
+	const session = await auth();
+	const viewerId = Number(session?.user?.id);
+	const isLoggedIn = Number.isInteger(viewerId) && viewerId > 0;
+
+	let guild: { id: number; name: string } | null = null;
+	let thread: {
+		id: number;
+		subject: string | null;
+		locked: number | null;
+		pinned: number | null;
+		openerId: number | null;
+	} | null = null;
+	let posts: {
+		id: number;
+		userId: number;
+		message: string;
+		createdAt: number;
+	}[] = [];
+
+	try {
+		[guild, thread] = await Promise.all([
+			prisma.guilds.findUnique({
+				where: { id: guildId },
+				select: { id: true, name: true },
+			}),
+			prisma.guildsForumsThreads.findFirst({
+				where: { id: threadId, guildId, state: 0 },
+				select: {
+					id: true,
+					subject: true,
+					locked: true,
+					pinned: true,
+					openerId: true,
+				},
+			}),
+		]);
+	} catch {
+		guild = null;
+		thread = null;
+	}
+
+	if (!guild || !thread) notFound();
+
+	try {
+		posts = await prisma.guildsForumsComments.findMany({
+			where: { threadId: thread.id, state: 0 },
+			orderBy: [{ createdAt: "asc" }, { id: "asc" }],
+			select: {
+				id: true,
+				userId: true,
+				message: true,
+				createdAt: true,
+			},
+		});
+	} catch {
+		posts = [];
+	}
+
+	const authorIds = Array.from(
+		new Set(posts.map((p) => p.userId).filter((v) => v > 0)),
+	);
+	let users: { id: number; username: string }[] = [];
+	try {
+		users = authorIds.length
+			? await prisma.user.findMany({
+					where: { id: { in: authorIds } },
+					select: { id: true, username: true },
+				})
+			: [];
+	} catch {
+		users = [];
+	}
+	const usernameById = new Map(users.map((u) => [u.id, u.username]));
+
+	const isLocked = !!thread.locked;
+	const canReply = isLoggedIn && !isLocked;
+
+	const errorMessage =
+		error === "invalid"
+			? t("errors.invalid")
+			: error === "not_found"
+				? t("errors.notFound")
+				: error === "locked"
+					? t("errors.locked")
+					: error === "ratelimit"
+						? t("errors.ratelimit")
+						: error
+							? t("errors.error")
+							: null;
+
+	return (
+		<main style={{ display: "grid", gap: "1.5rem" }}>
+			{replied === "1" ? (
+				<div role="status" style={feedbackStyle("success")}>
+					{t("success.replied")}
+				</div>
+			) : null}
+			{errorMessage ? (
+				<div role="alert" style={feedbackStyle("error")}>
+					{errorMessage}
+				</div>
+			) : null}
+
+			<p style={{ margin: 0 }}>
+				<Link href={`/guilds/${guild.id}/forum`}>{t("backToForum")}</Link>
+			</p>
+
+			<ContentCard
+				icon="💬"
+				title={thread.subject?.trim() || t("noSubject")}
+				subtitle={t("inGuildForum", {
+					guild: guild.name || t("unnamedGuild"),
+				})}
+			>
+				<div style={{ display: "flex", flexWrap: "wrap", gap: "0.5rem" }}>
+					{thread.pinned ? (
+						<span className="online-badge online">📌 {t("pinned")}</span>
+					) : null}
+					{isLocked ? (
+						<span className="online-badge">🔒 {t("locked")}</span>
+					) : null}
+				</div>
+			</ContentCard>
+
+			<ContentCard
+				icon="📝"
+				title={t("postsTitle")}
+				subtitle={t("postsSubtitle", { count: posts.length })}
+				padded={posts.length === 0}
+			>
+				{posts.length === 0 ? (
+					<EmptyState icon="📝">{t("postsEmpty")}</EmptyState>
+				) : (
+					<ul
+						style={{
+							listStyle: "none",
+							margin: 0,
+							padding: 0,
+							display: "grid",
+							gap: "1rem",
+						}}
+					>
+						{posts.map((post) => {
+							const username = usernameById.get(post.userId);
+							return (
+								<li
+									key={post.id}
+									style={{
+										padding: "0.85rem 1rem",
+										borderRadius: "var(--radius-md)",
+										border: "1px solid var(--color-border, rgba(0,0,0,0.08))",
+										background: "var(--color-surface)",
+									}}
+								>
+									<div
+										style={{
+											display: "flex",
+											flexWrap: "wrap",
+											justifyContent: "space-between",
+											gap: "0.35rem",
+											marginBottom: "0.5rem",
+										}}
+									>
+										<span style={{ fontWeight: 700 }}>
+											{username ? (
+												<Link href={`/u/${username}`}>{username}</Link>
+											) : (
+												<span className="muted">
+													{t("userNumber", { id: post.userId })}
+												</span>
+											)}
+										</span>
+										<span className="muted" style={{ fontSize: "0.85rem" }}>
+											{formatTimestamp(post.createdAt)}
+										</span>
+									</div>
+									<p
+										style={{
+											margin: 0,
+											whiteSpace: "pre-wrap",
+											wordBreak: "break-word",
+										}}
+									>
+										{post.message}
+									</p>
+								</li>
+							);
+						})}
+					</ul>
+				)}
+			</ContentCard>
+
+			{canReply ? (
+				<ContentCard icon="✍️" title={t("replyTitle")} subtitle={t("replySubtitle")}>
+					<form action={replyToThread}>
+						<input type="hidden" name="guildId" value={String(guild.id)} />
+						<input type="hidden" name="threadId" value={String(thread.id)} />
+						<textarea
+							name="message"
+							required
+							rows={6}
+							placeholder={t("replyPlaceholder")}
+							style={{
+								width: "100%",
+								marginBottom: "0.75rem",
+								resize: "vertical",
+							}}
+						/>
+						<button type="submit" className="btn btn-primary">
+							{t("replySubmit")}
+						</button>
+					</form>
+				</ContentCard>
+			) : isLocked ? (
+				<p className="muted" style={{ margin: 0 }}>
+					{t("lockedHint")}
+				</p>
+			) : (
+				<p className="muted" style={{ margin: 0 }}>
+					{t("loginToReply")}{" "}
+					<Link href="/login">{t("loginLink")}</Link>
+				</p>
+			)}
+		</main>
+	);
+}

src/app/(site)/guilds/[id]/forum/loading.tsx

@@ -0,0 +1,15 @@
+export default function GuildForumLoading() {
+	return (
+		<div
+			style={{ display: "flex", justifyContent: "center", padding: "4rem 0" }}
+		>
+			<div
+				className="animate-spin w-8 h-8 border-4 rounded-full"
+				style={{
+					borderColor: "var(--color-primary)",
+					borderTopColor: "transparent",
+				}}
+			/>
+		</div>
+	);
+}

src/app/(site)/guilds/[id]/forum/page.tsx

@@ -156,9 +156,12 @@ export default async function GuildForumPage({
 								return (
 									<tr key={t2.id}>
 										<td style={{ padding: "0.6rem 0.75rem" }}>
-											<span style={{ fontWeight: 700 }}>
+											<Link
+												href={`/guilds/${guild.id}/forum/${t2.id}`}
+												style={{ fontWeight: 700 }}
+											>
 												{t2.subject?.trim() || t("noSubject")}
-											</span>
+											</Link>
 											{t2.pinned ? (
 												<span
 													className="online-badge online"

src/app/(site)/guilds/loading.tsx

@@ -0,0 +1 @@
+export { default } from "../friends/loading";