187 Commits

Include renames

Author	SHA1	Message	Date
openhands	dacc4cadfd	chore(deps): upgrade to typescript 7 bridge and clean up pnpm v11 workspace configs	2026-07-27 23:14:00 +02:00
openhands	af9f11d934	fix: resolve all Biome lint warnings ... - Replace 'as any' with proper CurrencyDb type in send-currency test - Fix noTemplateCurlyInString warnings in deploy-workflow-contract test	2026-07-27 17:33:07 +02:00
openhands	423a33200e	chore: improve tooling, linting, testing, and CI ... - Add LICENSE file (CC BY-NC-SA 4.0) - Add .nvmrc pinning Node 22 - Add Renovate config with daily schedule and Gitea Actions workflow - Reduce ESLint max-warnings from 1000 to 50 - Re-enable Biome a11y/security recommended rules - Fix Biome lint issues (a11y, hook deps, SVG labels, checkbox semantics) - Improve CI: run on pushes to feat/fix branches, add pnpm audit - Add Vitest coverage with v8 provider and thresholds - Add E2E tests (auth, admin, navigation specs) - Add admin-maintenance server action test - Install @vitest/coverage-v8 - Ignore coverage/ directory	2026-07-27 17:03:09 +02:00
openhands	7cc88287b8	Fix: set trustHost to true for production auth	2026-07-26 21:15:29 +02:00
openhands	46e9f61b35	Add logger.error callback and error page redirect to NextAuth config	2026-07-26 20:47:55 +02:00
openhands	17847545dd	Improvements: remove dead config, fix ESM, add URL validation, unify types, add missing logging ... - Remove .prettierrc (dead config, Biome replaces Prettier) - Rename lighthouserc.json to lighthouserc.cjs with module.exports for ESM compat - Add logger.warn to empty catch blocks in auth, register, site-settings, prisma-cache, redis, security, rate-limit - Unify ActionResult type: action-helper.ts uses 'ok' consistent with safe-action-shared.ts - Add noUnusedLocals + noUnusedParameters to tsconfig + fix 25 pre-existing unused vars - Replace barrel export src/types/index.ts with direct @/types/common imports - Make trustHost conditional (development only) in auth.ts - Add pre-flight URL validation to update-Nitrov3.sh to catch image.library.url misconfigurations - Improve NITRO_IMAGE_LIBRARY_URL content validation in pre-flight & post-compute checks	2026-07-26 20:28:11 +02:00
openhands	2c0478bfc0	test: add room, user, ticket validator test suites (83 files, 430+ tests)	2026-07-25 18:51:33 +02:00
openhands	960fea3549	test: expand validator, webhook, and catalog-tree test coverage	2026-07-25 18:47:04 +02:00
openhands	78b1982145	fix: remove as any cast from catalog-tree test mock	2026-07-25 18:36:40 +02:00
openhands	ac3c42f308	test: add action-helper, send-currency, permission-ranks, catalog-tree, and audit test suites (77 files, 405 tests)	2026-07-25 18:25:33 +02:00
openhands	2e9db75eca	test: add audit, staff-activity, and abuse-guard test suites (75 files, 376 tests)	2026-07-25 18:10:15 +02:00
openhands	c670227ad4	fix: downgrade typescript to 5.x and nodemailer to 8.x for peer dep compatibility + update lockfile	2026-07-25 17:37:23 +02:00
openhands	1acace49d0	refactor: full codebase overhaul — dead code removal, env validation, logger migration, date consolidation, Prisma schema cleanup, button consistency, useEffect deps, test coverage ... - env.ts: added 10 missing Zod-validated env vars (imager, paypal currency, argon2/bcrypt params) - Migrated 6 modules from process.env to validated env.* (auth, proxy-auth, paypal, password, redis, imager, moderation, alert, logger) - Replaced console.warn/error with pino logger in 9 server-side modules - Removed 50+ dead exports (SWF wrappers, coalesceHotelName, signIn, isStaff re-export, formatTimestamp, Skeleton/SkeletonCard, 4 unused housekeeping sections) - Consolidated date formatting: 28 files migrated to shared formatDate() from @/lib/format-date - Wired 4 radio/settings API routes through cached siteSettings service instead of raw Prisma queries - Added getMany()/getAll() helpers to SiteSettings service - Removed 88 dead Prisma model definitions (schema 2763→1846 lines) - Created admin action-helper.ts with wrapAction() for standardized error handling - Fixed useEffect dependency arrays in 4 data-heavy components - Replaced raw btn CSS classes with shadcn Button component across admin pages - Stripped dead i18n namespaces (common, pages.client) from all 22 translation files - Removed 2 dead scripts (create-release.sh, check-local-imports.ts) - Fixed knip.json configuration - Added 7 new test suites: format-date, paypal, moderation, alert, webhook, action-helper, and fixed password.test.ts for env mocking - All 358 tests passing across 72 test files - TypeScript: 0 errors	2026-07-25 17:33:06 +02:00
openhands	5fa342018d	chore: remove dead code and unused dependencies ... - Delete 4 unused files detected by knip - Remove lint-staged, eslint-config-prettier, plausible-tracker - Clean up knip.json entry patterns	2026-07-24 11:59:50 +02:00
openhands	7f8d083763	Remove Discord and Google OAuth verification from CMS ... - Remove Discord + Google OAuth providers from NextAuth config - Remove social login buttons (Discord/Google) from login form - Delete link-discord.ts action and discord-verify-form.tsx component - Simplify verify page to email-only verification flow - Remove connections settings page and its link from settings - Clean env.ts, .env, .env.example of Discord/Google client vars - Remove discordUrl social icon from register, login, and homepage - Clean translation files: remove continueWithDiscord, continueWithGoogle, connections keys	2026-07-24 11:49:16 +02:00
openhands	a9f1f4f99d	Fix Turbopack NFT warning ... - Remove import.meta.dirname from turbopack config (unnecessary filesystem op) - Add /*turbopackIgnore: true*/ to 3 path.join calls in upload-import.ts that were missing the comment, causing Turbopack to trace the whole project unintentionally	2026-07-23 20:57:43 +02:00
openhands	7dbca4117c	Fix BCRYPT_ROUNDS override — use function to read env at call time ... BCRYPT_ROUNDS was a module-level const evaluated at import time, so env overrides in tests or CI had no effect. Changed to function that reads process.env on each call. Also lowered hardcoded bcryptHash(..., 10) in test to use env var with fallback 4. CI: BCRYPT_ROUNDS=2. Password test suite: 1860ms → 29ms.	2026-07-23 19:30:47 +02:00
openhands	f7551166c5	Speed up tests: lower argon2 params in CI, env overrides ... - Allow ARGON2_MEMORY_SIZE, ARGON2_ITERATIONS, ARGON2_PARALLELISM env overrides - Use m=1024,t=1 in tests (was m=65536,t=4 → ~1s per hash) - Set fast params in CI and deploy workflows	2026-07-23 19:21:24 +02:00
openhands	aabf14aaf9	Fix deploy workflow tests for PM2	2026-07-23 19:14:47 +02:00
SimoandCursor	255c09b9fd	fix(admin): restore sidebar categories via ACL grant repair ... Co-authored-by: Cursor <[email protected]>	2026-07-22 21:47:23 +02:00
SimoandCursor	75cace41ea	feat(mod): tickets+team tabs; retire HK writes for live ACL ... Co-authored-by: Cursor <[email protected]>	2026-07-22 21:35:35 +02:00
SimoandCursor	084cca6ea4	feat(mod): lite /mod panel + clarify ACL vs housekeeping legacy ... Co-authored-by: Cursor <[email protected]>	2026-07-22 21:29:32 +02:00
SimoandCursor	a384c9a8bb	feat(admin): guilds console + user sanctions timeline ... Co-authored-by: Cursor <[email protected]>	2026-07-22 21:19:16 +02:00
SimoandCursor	025af147cd	feat(admin): marketplace console + analytics degraded banners ... Co-authored-by: Cursor <[email protected]>	2026-07-22 19:06:54 +02:00
SimoandCursor	f150aea8b9	feat(admin): P1 — clearer tickets labels, pagination, min_staff_rank, analytics errors ... Co-authored-by: Cursor <[email protected]>	2026-07-22 19:04:45 +02:00
SimoandCursor	75cdfdebe4	fix(admin): P0 integrity — permanent bans, ACL sidebar, rank guards ... Co-authored-by: Cursor <[email protected]>	2026-07-22 19:01:59 +02:00
SimoandCursor	e00e9ca2dc	refactor: centralize hotel name fallback via FALLBACK_HOTEL_NAME ... Route all user-facing Atom hotel defaults through resolveHotelName (settings then HOTEL_NAME env then brand constant). Exclude Playwright e2e from tsconfig until deps are installed. Co-authored-by: Cursor <[email protected]>	2026-07-22 18:45:59 +02:00
openhands	b0ad3a128e	fix: resolve turbopack NFT warning and disable Sentry telemetry	2026-07-21 23:49:23 +02:00
SimoandCursor	968ca15c27	feat: jwt cache, redis health, help-ticket admin, and write rate limits ... Cut Auth.js DB load with cached jwtVersion checks, surface Redis in /api/health and deploy warnings, add admin help-center ticket reply UI, rate-limit API tickets/reactions/referral claims, and revoke PATs on sign-out-everywhere. Co-authored-by: Cursor <[email protected]>	2026-07-21 21:58:48 +02:00
SimoandCursor	3bb96eb6f3	test: silence expected clone-import rollback warning ... The rollback case intentionally hits items_base insert failure; mock console.warn so deploy logs stay clean. Co-authored-by: Cursor <[email protected]>	2026-07-21 21:51:22 +02:00
SimoandCursor	fa40eebeed	fix(deploy): migrate after stop and shrink DB pool ... Stage migrate hit ER_CON_COUNT_ERROR while live still held the pool. Build in stage with DATABASE_POOL_SIZE=5, run db:migrate only after stopping the service (with retries), and lower the default pool from 40 to 10. Co-authored-by: Cursor <[email protected]>	2026-07-21 21:44:06 +02:00
SimoandCursor	687e1f9fb0	fix(deploy): stage worktree build and short .next cutover ... Build install/test/migrate in a detached worktree while the live site keeps serving, then swap .next and node_modules during a brief stop. Drops nuclear rm -rf src and rolls back .next.prev on cutover failure. Co-authored-by: Cursor <[email protected]>	2026-07-21 21:39:45 +02:00
SimoandCursor	77931db775	fix: cap Prisma pool during next build to stop deploy SSG timeouts ... Next build workers were each opening up to DATABASE_POOL_SIZE connections and exhausting MySQL (pool active=0), hanging sitemap generation. Cap build pool to 5, fail connect faster, limit SSG concurrency, and make sitemap dynamic. Co-authored-by: Cursor <[email protected]>	2026-07-21 21:28:27 +02:00
SimoandCursor	803e8f36c1	feat: shop buy, forum replies, tickets, messages, sessions, and UX hardening ... Complete remaining product gaps: credit-based shop purchases, guild thread replies, help ticket detail/reply/close, offline message compose, sign-out-everywhere via JWT version, ads delete confirm, soft-fail feedback, rate limits, loading states, and single auth() in site layout. Co-authored-by: Cursor <[email protected]>	2026-07-21 21:21:02 +02:00
SimoandCursor	ed7db6e048	feat: public events/polls, friends graph, captcha, SSE hardening, and admin UX ... Ship product gaps: register/vote pages, friend add/accept/decline/remove, email verify TTL, captcha on login/forgot, soft-fail user actions, SSE abort/shared client, Commando Centrum error toasts, admin delete for events/polls, and IT/NL i18n fills. Co-authored-by: Cursor <[email protected]>	2026-07-21 21:08:33 +02:00
SimoandCursor	2ff08e5127	chore: patch deps, CSP style nonces, otplib 13, and PR CI ... Co-authored-by: Cursor <[email protected]>	2026-07-21 20:46:02 +02:00
SimoandCursor	d2120987b0	perf: replace bcryptjs with native bcrypt for password hashing ... Co-authored-by: Cursor <[email protected]>	2026-07-21 20:37:02 +02:00
SimoandCursor	830d252346	chore: upgrade Zod 4, Vitest 4, and TypeScript 7 ... Bump major tooling stacks and adapt Zod error APIs (issues/flattenError) plus tsconfig paths for TS 7 baseUrl removal. Co-authored-by: Cursor <[email protected]>	2026-07-21 20:34:29 +02:00
SimoandCursor	9b47668fe9	chore: CSP script nonces, deploy health check, dead-code cleanup ... Add per-request CSP nonces (drop script unsafe-inline), post-deploy /api/health gate, bump next-auth to beta.32, and remove unused motion/cache/permission helpers. Co-authored-by: Cursor <[email protected]>	2026-07-21 20:27:08 +02:00
SimoandCursor	c46dadeda4	chore: harden deps, env validation, admin errors, and redis warnings ... Align nodemailer with Auth.js peers, bump patch deps, validate env on deploy builds, add admin error boundary, and warn when Redis is missing in production. Co-authored-by: Cursor <[email protected]>	2026-07-21 20:19:05 +02:00
openhands	bebd65c056	fix: refactor audit to SSE streaming, improve error handling ... - Changed from blocking JSON endpoint to SSE streaming (like sync-all/repair-icons) - Progress updates during each audit phase with item counts - Proper error handling with typed AuditEvent for every failure path - AbortController support for the client - Shows real-time progress for each check section	2026-07-21 15:33:15 +02:00
openhands	19e4e10b1d	feat: add catalog audit page ... Checks for: - items_base entries without catalog_items (not purchasable) - catalog_items referencing non-existent items_base - Items without .nitro or icon files on disk - Duplicate classnames - Items missing from all configured clone sources	2026-07-21 15:24:58 +02:00
openhands	90107c83d5	fix: rewrite repair-icons with proper error handling and progress ... - Wrap all DB/file operations in try-catch, send error events via SSE - Report skipped/progress events for items that already have icons - Add 'started' event with total count so the UI shows real-time progress - Catch route-level errors and stream them instead of returning JSON - Use log line content as React key instead of array index	2026-07-21 15:04:43 +02:00
openhands	804daeffca	feat: add .nitro upload + sync-all + repair-icons features ... - Upload .nitro bundles directly with full DB, catalog, and furnidata integration - Generate SQL migration files on upload (optional) - Auto-sync missing furniture from all configured clone sources (SSE batch) - Repair missing icons by extracting from local .nitro or downloading from sources - All behind ASSETS_IMPORT permission	2026-07-21 14:53:26 +02:00
openhands	c0975f8a43	fix: scope deploy contract test to deploy job; menu links use Gitea user-content anchors	2026-07-20 20:59:37 +02:00
openhands	5e8a13a84f	fix: resolve all biomaly lint errors and warnings across CMS ... - Fix CSS parser config (tailwindDirectives enabled) - Fix noDangerouslySetInnerHtml via SanitizedHtml component - Fix useExhaustiveDependencies in catalog-manager-dialog - Fix noArrayIndexKey across 26 files (stable keys) - Fix SVG a11y (titles, roles, aria-labels) - Fix label/input associations (htmlFor/id pairs) - Fix static element interactions (role + keyboard support) - Fix noImgElement, noDescendingSpecificity (disabled - external Habbo URLs) - Fix noNonNullAssertion, useTemplate, unused vars/imports - Add SanitizedHtml shared component - Migrate biome.json to 2.5.4 schema	2026-07-20 17:41:53 +02:00
openhands	c8ccbe1f42	perf: add Prisma query caching, ISR for news pages, and aggressive SW caching ... - Introduce redis-backed Prisma query cache (prisma-cache.ts) with per-model TTL - Replace force-dynamic with revalidate=60 + generateStaticParams on news/[slug] - Wrap article query with Redis cache (60s TTL) - Upgrade service worker to v2 with dedicated API cache and stale-while-revalidate for static assets	2026-07-20 14:54:55 +02:00
openhands	d5e3bc7875	refactor: mark dead exports with TODO, deduplicate field sanitization, fix import placement	2026-07-20 14:47:05 +02:00
openhands	ccd4994028	feat: enable React Compiler, add Redis caching for API routes, update README with requirements and install guide	2026-07-20 14:14:49 +02:00
openhands	f53d25e0a5	feat: add view transitions, smooth scroll, bundle analyzer, SSE radio stream, and AnimatePresence animations	2026-07-20 14:06:43 +02:00