feat: public events/polls, friends graph, captcha, SSE hardening, and admin UX

Ship product gaps: register/vote pages, friend add/accept/decline/remove, email verify TTL, captcha on login/forgot, soft-fail user actions, SSE abort/shared client, Commando Centrum error toasts, admin delete for events/polls, and IT/NL i18n fills.

Co-authored-by: Cursor <[email protected]>

src/lib/sse-client.ts

@@ -0,0 +1,86 @@
+import { toast } from "sonner";
+import { adminFetch } from "@/lib/admin-fetch";
+
+export type SseEvent = Record<string, unknown>;
+
+/**
+ * Read an SSE response body and invoke `onEvent` for each `data:` JSON payload.
+ */
+export async function readSseStream(
+	body: ReadableStream<Uint8Array>,
+	onEvent: (event: SseEvent) => void,
+	signal?: AbortSignal,
+): Promise<void> {
+	const reader = body.getReader();
+	const decoder = new TextDecoder();
+	let buf = "";
+
+	try {
+		while (true) {
+			if (signal?.aborted) {
+				await reader.cancel();
+				break;
+			}
+			const { value, done } = await reader.read();
+			if (done) break;
+			buf += decoder.decode(value, { stream: true });
+			const parts = buf.split("\n\n");
+			buf = parts.pop() ?? "";
+			for (const part of parts) {
+				if (!part.startsWith("data: ")) continue;
+				try {
+					onEvent(JSON.parse(part.slice(6)) as SseEvent);
+				} catch {
+					/* skip malformed events */
+				}
+			}
+		}
+	} finally {
+		reader.releaseLock();
+	}
+}
+
+/**
+ * POST JSON to an admin SSE import endpoint and drive the standard
+ * item_progress / batch_complete callbacks used by clothing & clone clients.
+ */
+export async function runSseImport(
+	url: string,
+	body: unknown,
+	onDone: (classname: string) => void,
+	onComplete: (succeeded: number, failed: number) => void,
+	signal?: AbortSignal,
+): Promise<void> {
+	const res = await adminFetch(url, {
+		method: "POST",
+		headers: { "Content-Type": "application/json" },
+		body: JSON.stringify(body),
+		signal,
+	});
+	if (!res.body) {
+		toast.error("No response stream");
+		return;
+	}
+
+	let succeeded = 0;
+	let failed = 0;
+
+	await readSseStream(
+		res.body,
+		(evt) => {
+			if (
+				evt.type === "item_progress" &&
+				(evt.status === "done" || evt.status === "failed")
+			) {
+				onDone(String(evt.classname ?? ""));
+			}
+			if (evt.type === "batch_complete") {
+				succeeded = Number(evt.succeeded ?? 0);
+				failed = Number(evt.failed ?? 0);
+			}
+		},
+		signal,
+	);
+
+	onComplete(succeeded, failed);
+}