398 Commits

Include renames

Author	SHA1	Message	Date
openhands	423a33200e	chore: improve tooling, linting, testing, and CI ... - Add LICENSE file (CC BY-NC-SA 4.0) - Add .nvmrc pinning Node 22 - Add Renovate config with daily schedule and Gitea Actions workflow - Reduce ESLint max-warnings from 1000 to 50 - Re-enable Biome a11y/security recommended rules - Fix Biome lint issues (a11y, hook deps, SVG labels, checkbox semantics) - Improve CI: run on pushes to feat/fix branches, add pnpm audit - Add Vitest coverage with v8 provider and thresholds - Add E2E tests (auth, admin, navigation specs) - Add admin-maintenance server action test - Install @vitest/coverage-v8 - Ignore coverage/ directory	2026-07-27 17:03:09 +02:00
openhands	17847545dd	Improvements: remove dead config, fix ESM, add URL validation, unify types, add missing logging ... - Remove .prettierrc (dead config, Biome replaces Prettier) - Rename lighthouserc.json to lighthouserc.cjs with module.exports for ESM compat - Add logger.warn to empty catch blocks in auth, register, site-settings, prisma-cache, redis, security, rate-limit - Unify ActionResult type: action-helper.ts uses 'ok' consistent with safe-action-shared.ts - Add noUnusedLocals + noUnusedParameters to tsconfig + fix 25 pre-existing unused vars - Replace barrel export src/types/index.ts with direct @/types/common imports - Make trustHost conditional (development only) in auth.ts - Add pre-flight URL validation to update-Nitrov3.sh to catch image.library.url misconfigurations - Improve NITRO_IMAGE_LIBRARY_URL content validation in pre-flight & post-compute checks	2026-07-26 20:28:11 +02:00
openhands	0869b82f5f	fix: extract room quick-entry form into Client Component to fix Server Component event handler error ... - Move inline form with onSubmit handler from top-header.tsx (Server Component) into new RoomQuickEntry Client Component - Add badges section to /me page showing equipped badges from users_badges - Add last website login timestamp from website_login_logs to /me page stats - Add search bar to top-header for user search - Add achievement score, respects received, friend count stats to /me page - Add quick links card to /me page with Messages/Profile/Settings/Shop - Clean up RoomQuickEntry: use form.elements.namedItem, remove unused ref, add aria-label	2026-07-26 16:43:13 +02:00
openhands	3284e5a915	feat: add Toaster, notification bell, search, unread badges, last login, recent rooms, hotel alerts, quick room entry, friend requests in top bar	2026-07-26 13:17:51 +02:00
openhands	a906d671fb	fix: remove green dot from online counter in TopHeader	2026-07-26 13:06:11 +02:00
openhands	2818d2eb20	fix: remove lange banner (SiteHeader) for logged-in users; add online counter and Enter button in TopHeader	2026-07-26 12:59:50 +02:00
openhands	1acace49d0	refactor: full codebase overhaul — dead code removal, env validation, logger migration, date consolidation, Prisma schema cleanup, button consistency, useEffect deps, test coverage ... - env.ts: added 10 missing Zod-validated env vars (imager, paypal currency, argon2/bcrypt params) - Migrated 6 modules from process.env to validated env.* (auth, proxy-auth, paypal, password, redis, imager, moderation, alert, logger) - Replaced console.warn/error with pino logger in 9 server-side modules - Removed 50+ dead exports (SWF wrappers, coalesceHotelName, signIn, isStaff re-export, formatTimestamp, Skeleton/SkeletonCard, 4 unused housekeeping sections) - Consolidated date formatting: 28 files migrated to shared formatDate() from @/lib/format-date - Wired 4 radio/settings API routes through cached siteSettings service instead of raw Prisma queries - Added getMany()/getAll() helpers to SiteSettings service - Removed 88 dead Prisma model definitions (schema 2763→1846 lines) - Created admin action-helper.ts with wrapAction() for standardized error handling - Fixed useEffect dependency arrays in 4 data-heavy components - Replaced raw btn CSS classes with shadcn Button component across admin pages - Stripped dead i18n namespaces (common, pages.client) from all 22 translation files - Removed 2 dead scripts (create-release.sh, check-local-imports.ts) - Fixed knip.json configuration - Added 7 new test suites: format-date, paypal, moderation, alert, webhook, action-helper, and fixed password.test.ts for env mocking - All 358 tests passing across 72 test files - TypeScript: 0 errors	2026-07-25 17:33:06 +02:00
openhands	12e4a07e48	polish: typewriter SSR fix, Community link label, verify premium cards, loading skeleton	2026-07-24 14:49:07 +02:00
openhands	c432d4e95d	fix: service worker cache busting — unregister old sw on load, bump cache version, stop caching HTML ... - Bump sw.js cache from v2 to v3 - Unregister all old service workers on page load - Stop caching HTML/navigation (caused stale CSS refs after rebuild)	2026-07-24 13:50:45 +02:00
openhands	b37b6bc2b9	feat: premium polish pass — typing effect, animated counters, ambient orbs, input glow, show/hide password, redesigned settings, Reveal animations ... - Add TypewriterText component for hero heading animation - Add AnimatedCounter with scroll-triggered count-up - Add AmbientOrbs with floating gradient orbs in hero - Add input-glow focus effect, btn-shine hover effect CSS - Add show/hide password toggle on login, register, and home login forms - Redesign settings page with premium gradient cards and icon headers - Polish /me dashboard with Reveal animations, btn-shine, input-glow - Add animate-count CSS keyframe	2026-07-24 13:34:46 +02:00
openhands	5fa342018d	chore: remove dead code and unused dependencies ... - Delete 4 unused files detected by knip - Remove lint-staged, eslint-config-prettier, plausible-tracker - Clean up knip.json entry patterns	2026-07-24 11:59:50 +02:00
openhands	7f8d083763	Remove Discord and Google OAuth verification from CMS ... - Remove Discord + Google OAuth providers from NextAuth config - Remove social login buttons (Discord/Google) from login form - Delete link-discord.ts action and discord-verify-form.tsx component - Simplify verify page to email-only verification flow - Remove connections settings page and its link from settings - Clean env.ts, .env, .env.example of Discord/Google client vars - Remove discordUrl social icon from register, login, and homepage - Clean translation files: remove continueWithDiscord, continueWithGoogle, connections keys	2026-07-24 11:49:16 +02:00
openhands	f7f6e09174	Fix migration connection exhaustion and polish auth pages ... - apply-migrations.ts: use single shared connection instead of one per operation - Increase MariaDB max_connections from 151 to 300 in server config - home-login-form.tsx: replace hardcoded gray colors with theme variables - register-form.tsx: add password strength meter, spinner, theme-aligned inputs - login-form.tsx: add Discord/Google SVG icons, spinner, smoother 2FA animation - page/register/login: apply premium animations (float, stagger, glow, gradient)	2026-07-24 11:30:58 +02:00
openhands	71a3b0a400	Add date and holiday detection to clock	2026-07-23 18:37:32 +02:00
openhands	eb603b50a9	Add live clock to top bar	2026-07-23 18:32:45 +02:00
openhands	36d9046a8d	Revert "Replace PNG icons with Habbo-style SVG pixel art icons across index, nav, and mobile nav" ... This reverts commit ac16df98c3.	2026-07-23 16:40:41 +02:00
openhands	ac16df98c3	Replace PNG icons with Habbo-style SVG pixel art icons across index, nav, and mobile nav ... - Create 20 Habbo-style pixel-art SVG icon components (home, user, catalog, star, community, games, enter, news, online, camera, chat, clock, heart, arrow, cog, furni, diamond, credits, duckets, rank) - Update index page: replace all PNG icon references, add pixel font headings, add Habbo-style gradient section headers - Update navigation: replace all PNG nav icons with Habbo SVG icons - Update NavDropdown: accept ReactNode icon instead of string path - Update mobile-nav: replace PNG brand icon with HabboHome SVG	2026-07-23 16:36:32 +02:00
SimoandCursor	084cca6ea4	feat(mod): lite /mod panel + clarify ACL vs housekeeping legacy ... Co-authored-by: Cursor <[email protected]>	2026-07-22 21:29:32 +02:00
SimoandCursor	025af147cd	feat(admin): marketplace console + analytics degraded banners ... Co-authored-by: Cursor <[email protected]>	2026-07-22 19:06:54 +02:00
SimoandCursor	f150aea8b9	feat(admin): P1 — clearer tickets labels, pagination, min_staff_rank, analytics errors ... Co-authored-by: Cursor <[email protected]>	2026-07-22 19:04:45 +02:00
SimoandCursor	75cdfdebe4	fix(admin): P0 integrity — permanent bans, ACL sidebar, rank guards ... Co-authored-by: Cursor <[email protected]>	2026-07-22 19:01:59 +02:00
SimoandCursor	8d28739ca6	feat(admin): expand/collapse all sidebar groups with scrollable nav ... Co-authored-by: Cursor <[email protected]>	2026-07-22 18:49:49 +02:00
SimoandCursor	e00e9ca2dc	refactor: centralize hotel name fallback via FALLBACK_HOTEL_NAME ... Route all user-facing Atom hotel defaults through resolveHotelName (settings then HOTEL_NAME env then brand constant). Exclude Playwright e2e from tsconfig until deps are installed. Co-authored-by: Cursor <[email protected]>	2026-07-22 18:45:59 +02:00
openhands	1ffd46713a	Redesign login, register, me pages with premium layout and i18n	2026-07-22 14:42:01 +02:00
openhands	063ac9ec40	refactor: clean premium design, fix header banner, remove clutter	2026-07-22 14:26:36 +02:00
openhands	5fe01532ca	feat: add Habbo sky background and pixel-font logo	2026-07-22 14:07:33 +02:00
SimoandCursor	803e8f36c1	feat: shop buy, forum replies, tickets, messages, sessions, and UX hardening ... Complete remaining product gaps: credit-based shop purchases, guild thread replies, help ticket detail/reply/close, offline message compose, sign-out-everywhere via JWT version, ads delete confirm, soft-fail feedback, rate limits, loading states, and single auth() in site layout. Co-authored-by: Cursor <[email protected]>	2026-07-21 21:21:02 +02:00
SimoandCursor	ed7db6e048	feat: public events/polls, friends graph, captcha, SSE hardening, and admin UX ... Ship product gaps: register/vote pages, friend add/accept/decline/remove, email verify TTL, captcha on login/forgot, soft-fail user actions, SSE abort/shared client, Commando Centrum error toasts, admin delete for events/polls, and IT/NL i18n fills. Co-authored-by: Cursor <[email protected]>	2026-07-21 21:08:33 +02:00
SimoandCursor	2ff08e5127	chore: patch deps, CSP style nonces, otplib 13, and PR CI ... Co-authored-by: Cursor <[email protected]>	2026-07-21 20:46:02 +02:00
SimoandCursor	9b47668fe9	chore: CSP script nonces, deploy health check, dead-code cleanup ... Add per-request CSP nonces (drop script unsafe-inline), post-deploy /api/health gate, bump next-auth to beta.32, and remove unused motion/cache/permission helpers. Co-authored-by: Cursor <[email protected]>	2026-07-21 20:27:08 +02:00
openhands	827595ef00	fix: mobile responsiveness for all admin pages ... - DataTable: overflow-x-auto on table wrapper (affects users, rooms, tickets) - Radio: overflow-x-auto wrappers around all 3 tables (shouts, applications, schedules) - Catalog items: responsive grids (grid-cols-1 sm:grid-cols-3) in Add/Edit dialogs - Catalog tabs: TabsList overflow-x-auto for narrow screens - Import clone: pagination flex-wrap to prevent overlap on small screens	2026-07-21 16:52:58 +02:00
openhands	5e8a13a84f	fix: resolve all biomaly lint errors and warnings across CMS ... - Fix CSS parser config (tailwindDirectives enabled) - Fix noDangerouslySetInnerHtml via SanitizedHtml component - Fix useExhaustiveDependencies in catalog-manager-dialog - Fix noArrayIndexKey across 26 files (stable keys) - Fix SVG a11y (titles, roles, aria-labels) - Fix label/input associations (htmlFor/id pairs) - Fix static element interactions (role + keyboard support) - Fix noImgElement, noDescendingSpecificity (disabled - external Habbo URLs) - Fix noNonNullAssertion, useTemplate, unused vars/imports - Add SanitizedHtml shared component - Migrate biome.json to 2.5.4 schema	2026-07-20 17:41:53 +02:00
openhands	d5e3bc7875	refactor: mark dead exports with TODO, deduplicate field sanitization, fix import placement	2026-07-20 14:47:05 +02:00
openhands	f53d25e0a5	feat: add view transitions, smooth scroll, bundle analyzer, SSE radio stream, and AnimatePresence animations	2026-07-20 14:06:43 +02:00
SimoandCursor	518ed14a83	Add collapsible admin sidebar nav groups with persistence. ... Category headers toggle open/closed; state is stored in localStorage and the active route group stays expanded. Co-authored-by: Cursor <[email protected]>	2026-07-18 22:15:33 +02:00
SimoandCursor	dd806d2527	Reorganize admin nav by feature and soften light mode. ... Sidebar lists one entry per feature; keep hub tabs only for sibling views (events, tickets, ranks/permissions, moderation, radio, analytics, devops). Soft cool-gray light canvas/surface replaces harsh white. Co-authored-by: Cursor <[email protected]>	2026-07-18 22:06:41 +02:00
SimoandCursor	bcbdca841b	i18n observability hub: analytics pages and log tables. ... Translate analytics overview/activity/economy plus peak-hours/revenue charts, and audit/chat/commands/trades DataTables (en/nl/it). Includes prior events/polls detail i18n. Co-authored-by: Cursor <[email protected]>	2026-07-18 21:51:55 +02:00
SimoandCursor	8d1cf86105	feat(catalog): SSR stats in Visual Manager, honest deletes, newPageParent ... Pass DB totals into StatsBar, mirror Catalog Structure delete copy, and open New Page with ?newPageParent= for shop and BC. Co-authored-by: Cursor <[email protected]>	2026-07-18 21:14:55 +02:00
SimoandCursor	7d50b72ade	feat(catalog): Visual Manager for Builder Club with honest canEdit ... Mount BC Visual Manager, thread catalogType through tree/editor actions, and stop hardcoding canEdit=true in items/translate tabs. Co-authored-by: Cursor <[email protected]>	2026-07-18 21:03:07 +02:00
SimoandCursor	1f552c2822	Polish public error and 404 screens with brand atmosphere. ... Shared ErrorScreen composition, i18n for en/nl/it, Sentry on route errors, and a self-contained global-error fallback that matches the hotel gold theme. Co-authored-by: Cursor <[email protected]>	2026-07-18 20:00:04 +02:00
SimoandCursor	2de3696993	Enforce admin CSRF, harden catalog translate, use CMS hotel name for PayPal. ... Mutating withAdmin routes now require a double-submit CSRF token; translate is capped at 500 items with audit logging; PayPal descriptions prefer siteSettings hotel_name. Co-authored-by: Cursor <[email protected]>	2026-07-18 19:38:42 +02:00
SimoandCursor	6b884ad25a	Harden deploy gates, prod AUTH_SECRET, and Sentry error reporting. ... Align onlyBuiltDependencies with the workspace, fail fast without AUTH_SECRET in production, and delete catalog_items via VARCHAR-safe SQL so page deletes do not leave orphans. Co-authored-by: Cursor <[email protected]>	2026-07-18 19:32:15 +02:00
openhands	3c9c1311ec	chore: remove dead code flagged by knip ... Remove 19 unused source files (no importers anywhere in src/): - src/actions/admin-permissions.ts, admin-radio.ts, admin-user-edit.ts, admin-users.ts (functionality lives in @/actions/users and @/actions/permissions) - src/components/admin/confirm-action.tsx, page-header.tsx - src/components/motion-elements.tsx - src/lib/format-date.ts - src/lib/catalog-categories/* (incl. re-export barrel) - src/lib/foundation/{index,database,middleware,validation}.ts (errors/action kept, still imported directly) - src/lib/services/imager/{avatar-renderer,memory-cache}.ts - src/lib/services/nitro-assets.ts Update admin-operations-contract test to drop the two removed action-file gates (their permission coverage already exists in users.ts/permissions.ts). Add knip.json for repeatable dead-code audits. Verified: tsc --noEmit clean, next build succeeds, full test suite green (301/301).	2026-07-18 19:08:17 +02:00
openhands	60eb45be73	fix(admin): use theme-aware destructive foreground instead of hardcoded text-white ... The danger confirm button used a hardcoded text-white class which failed the admin theme source audit and could render unreadable against custom admin themes. Switch to the semantic text-destructive-foreground token. Also add media-grid.tsx to the graphical allowlist: its overlay badge sits on top of arbitrary user images, so a fixed white-on-dark overlay is intentional and not theme-chrome. Restores the full test suite to green (303/303).	2026-07-18 18:57:14 +02:00
openhands	243f8007d9	Fix articles list crash by moving interactive card to client component ... Extract the article card (thumbnail onError fallback, delete confirmation) into a Client Component so the admin articles list server page no longer passes event handlers to server-rendered elements.	2026-07-18 17:45:15 +02:00
openhands	6215074331	Polish admin articles: card grid, thumbnails, author, slug field ... Replace the plain articles table with a responsive card grid showing thumbnails, title, date and author. Add a slug field to the article form with live auto-suggestion, i18n-driven labels, a larger image preview and delete confirmation. Persist a user-provided slug (falls back to an auto-generated one) on create and update.	2026-07-18 17:38:01 +02:00
openhands	a07d438987	Improve media manager UI: search, delete, drag-and-drop, file meta ... Add a richer media manager with filename search, per-file delete with confirmation, drag-and-drop uploads, copy-URL feedback, file size/type/date metadata, and server-side upload validation that returns errors to the UI. Extend the /api/media listing with size and uploaded timestamps.	2026-07-18 17:29:01 +02:00
SimoandCursor	d1baaf798a	Add multi-hotel Habbo gamedata locale in CMS settings. ... Furni name suggestions, import enrichment, and badge texts now follow habbo_gamedata_hotel instead of hardcoded habbo.it. Co-authored-by: Cursor <[email protected]>	2026-07-17 22:28:18 +02:00
SimoandCursor	33a8a19820	Fix Visual Manager opacity and load categories like CatalogTree. ... Use an opaque admin-canvas portal and lazy parentId fetches instead of mode=full, which fails on large catalogs. Search no longer loads the entire tree. Co-authored-by: Cursor <[email protected]>	2026-07-17 22:09:01 +02:00
SimoandCursor	1d8efefce4	Fix Visual Manager empty categories: seed roots, harden tree API. ... Seed root tabs from SSR, load the full tree without CLEAR_TREE races, coerce parent ids, and tolerate catalog_items page_id type mismatches so category pages actually appear. Co-authored-by: Cursor <[email protected]>	2026-07-17 22:02:53 +02:00