142 Commits

Include renames

Author	SHA1	Message	Date
openhands	d8f2a21011	deps: upgrade Next.js from 16.3.5 to 16.3.6 ... Bump the framework to the latest 16.3.6 patch release. Typecheck passes and the homepage renders (HTTP 200) on the dev server with Next 16.3.6 under Turbopack.	2026-09-22 21:31:34 +02:00
openhands	1db49263eb	chore(deps): update @babel/parser and @types/node	2026-09-19 23:34:52 +02:00
openhands	a039ba13cc	chore: align Node toolchain on 26.9.0	2026-09-19 23:28:09 +02:00
openhands	2e25b39364	refactor(auth): single digest registry, extracted 2FA and login-log, dep bumps ... - password.ts: derive plain and salted digest detection from one DIGEST_SCHEMES table instead of parallel hardcoded lists, so adding a family is one row. - auth.ts: move 2FA challenge verification into twofactor-verification.ts and the website login-log insert into website-login-log.ts, slimming the NextAuth provider to orchestration only. - deps: bump @formatjs/icu-messageformat-parser, @tanstack/react-query, jszip, lucide-react, motion (patch/minor only). @types/react stay pinned per pnpm-workspace.yaml; next-auth is already at the newest available (v5 beta).	2026-09-17 15:26:25 +02:00
openhands	55c13b533c	chore(deps): update patch+minor dependencies ... Non-breaking updates across prod + dev deps after a pnpm typecheck + full test run (45 tests green, tsc clean): - react/react-dom 19.2.8 -> 19.3.0, @types/react(-dom) 19.3.0 - @tanstack/react-query 5.102.8 -> 5.103.0, react-virtual 3.14.13 - lucide-react 1.41.0 -> 1.46.0, motion 13.3.0, tailwind-merge 3.7.0 - isomorphic-dompurify 4.2.0, next-intl 4.14.5, react-hook-form 7.88.0 - mysql2 3.24.4, resend 6.28.1, tinymce 8.9.1, zod 4.6.5 - @biomejs/biome 2.5.14, @playwright/test 1.63.0, vitest 5.0.1 Deliberately kept pinned (breaking): @babel/parser 7.x (8 is a major), next-auth stays on v5-beta (4.24.15 is the v4 line).	2026-09-16 15:57:07 +02:00
Simo	7867bf6b72	test(news): gate deployment on an isolated real browser publication journey	2026-09-13 20:27:04 +02:00
Simo	422be3ce2d	test(ci): gate deployments on MariaDB and Redis integration checks	2026-09-13 17:47:58 +02:00
openhands	d755ab7ce1	revert(site): restore classic Habbo landing with soft theme polish ... Replace the premium dark-gaming redesign of home, login and register with the original classic landing (Habbo sky background, AuthTopBar, SurfaceCard layout). Keeps the theme background visible again and adds a subtle theme-aware brand halo behind the hero/Frank plus a soft primary glow on card hover. Also upgrades dependencies: next 16.3.5, vite 8.3.0 (typescript 7.0.2 was already latest). Temporarily lowers pnpm minimumReleaseAge to 60 min so the fresh 16.3.5 release can be installed; restore to 1440 once it is 24h old.	2026-09-12 16:14:21 +02:00
Simo	88790d1a0d	feat(cms): recover drafts and failed imports with verified UI workflows	2026-09-11 08:58:10 +02:00
openhands	bcefb0f8ff	build: update node engine range in package.json to match .nvmrc	2026-09-10 21:50:03 +02:00
Simo	c389c3893d	feat(cms): improve catalog, editorial recovery and operations	2026-09-09 19:36:15 +02:00
openhands	54b7c67878	perf: speed up local test runs by moving coverage to optional script ... Run vitest without coverage by default (pnpm test) and add pnpm test:coverage which enforces the coverage thresholds. CI keeps using the coverage run so thresholds are still enforced on every push.	2026-09-08 18:12:34 +02:00
openhands	ecadef904d	chore: remove knip, husky and lint-staged ... Drop the unused knip dead-code check and the husky+lint-staged pre-commit hook pipeline. All checks remain covered by the CI workflow (lint, typecheck, i18n, tests).	2026-09-08 16:56:55 +02:00
openhands	bbb7d66067	chore: remove Playwright end-to-end testing setup ... Remove Playwright config, e2e spec, dependencies, and related references from package.json, tsconfig.json, and .gitignore.	2026-09-08 16:42:10 +02:00
openhands	52459c0b74	feat(db): add self-tuned mariadb-turbo container and bulk JSON importer ... - docker-compose: opt-in mariadb-turbo service (profile 'db') with inline mysqld tuning (max_allowed_packet=512M, innodb_flush_log_at_trx_commit=2, 2G buffer pool, net_read/write_timeout=600) for >50 MB JSON bulk loads; named volume for the datadir + node_modules host-sync guidance - scripts/bulk-import-json.ts: chunked (2000-row) idempotent importer with ON DUPLICATE KEY UPDATE, resumable, habbo furnidata or flat-array input - src/db/schema-gamedata.ts: promote+index JSON storage schema (furnidata, docs, texts) incl. VIRTUAL generated columns for MariaDB - package.json: add db:bulk, db:up, db:down, db:introspect, db:schema:generate	2026-09-07 16:54:44 +02:00
openhands	bef1775dea	fix(toolchain): restore node engines range to match .nvmrc pin	2026-09-07 11:24:52 +02:00
openhands	539e6d3fad	fix(docker): harden image and automate safe VPS updates ... - Use floating node:alpine that tracks the latest supported LTS; pnpm bootstrap follows package.json's packageManager pin. - Drop corepack (removed from node:26), install pnpm via npm global. - Add pnpm fetch + offline install for stable dependency-layer caching. - Run as non-root nextjs (UID/GID 33 = host www-data) with tini as PID 1 for correct signal handling. - Open node engines to >=20.9.0 so patches/minors float automatically. - Add docker-preflight.sh (per-VPS checks incl. --fix) and gate docker-update.sh so Node major upgrades require explicit review while patches deploy silently.	2026-09-07 11:22:30 +02:00
Simo	ef94646d60	fix(i18n): persist CMS translations and validate message catalogs	2026-09-06 17:55:11 +02:00
openhands	9dc9d1fa4b	perf: pre-compress gamedata JSON, tune MariaDB, fix avatar imager, docs ... - scripts/compress-gamedata.mjs: pre-compress large gamedata JSON to .gz (gzip level 9, idempotent mtime check) served via nginx gzip_static (48 MB FurnitureData.json -> ~2.4 MB, ~0.3s -> ~0.005s per request) - package.json: add gamedata:compress script - fix(imaging): accept real Habbo figure strings in avatar route (allow optional second number per part, e.g. hd-180-1.ch-210-66) - README: document avatar imager container (avatar-imaging-pixinode, port 8082, /docker/Polaris-imager), nginx /imaging proxying, MariaDB tuning, gamedata pre-compression cron and caching layers	2026-09-06 12:06:38 +02:00
Simo	816e3875c2	feat(admin): add production error center and refresh CMS dependencies	2026-09-05 19:53:09 +02:00
Simo	9ec9ab31ad	feat: export Catalog Studio assets and SQL to catalog repository	2026-09-05 11:49:00 +02:00
openhands	399c047515	fix: harden admin actions, search, sanitization and repo hygiene ... - Split approve/dismiss application workflows with distinct audit logs, rate-limited guards and real error logging - Validate article status/date/id input and stop resetting publishedAt on every update - Validate guild updates (state, forum enums, non-empty name) behind rate-limited guard - Fix scheduled-article publishing (ignore NULL dates, set updatedAt, type-safe predicates) - Harden admin search API (LIKE escaping, query cap, per-user rate limit, round-robin result cap) and fix search dialog abort/res.ok/loading races - Lock down HTML sanitizer to an allowlist profile and add XSS tests - Improve mobile nav accessibility (unique id, dialog role, focus management, scroll lock, outside close) - Log swallowed server errors instead of silent catch blocks - Remove dead eslint config, drop unused dompurify deps, restore knip CI step, add Playwright config with smoke spec	2026-09-04 13:04:08 +02:00
openhands	30c95b1a5c	feat: comprehensive CMS improvements ... - Fix DOMPurify SSR crash (use isomorphic-dompurify) - Fix SanitizedHtml to sanitize by default - Add auth guards to studio/catalog maintenance pages - Add update/edit to vouchers CRUD - Add update/edit to rare-values CRUD - Add approve workflow to applications page - Add edit form to guilds detail page - Add SEO metadata to all public pages (21 pages) - Fix mobile nav accessibility (focus trap, aria attributes) - Fix missing labels and table accessibility - Add dynamic imports for heavy client components (6 components) - Fix silent error swallowing (40+ locations) - Add content scheduling for articles (publishAt, status) - Wire up 12 missing webhook notification triggers - Add global search to admin panel - Add bulk actions to admin users table - Fix JSON formatting and a11y issues	2026-09-03 16:00:32 +02:00
openhands	a30e4af32e	feat: polish toolbar, live online count via SSE + emulator 3-state ... - Add emulator status 3-state (unknown/green/red) with tooltip - Extract shared primary button style/constants for DRY toolbar code - Add emulatorUnknown translations to all 25 locales - Bump Next.js to 16.3.4 - Fix RCON delivery timeout caching (15s TTL / shared across clients) - Who's-online tooltip throttled to max 1 request per 30s	2026-09-02 21:34:30 +02:00
openhands	58c35a2920	feat: enforce no hardcoded colors across entire CMS ... Added scripts/check-admin-colors.mjs — scans all src/ files for: - text-white, text-black (use theme text vars) - bg-white, bg-black (use theme background/overlay vars) - bg/text/border/ring with gray/slate/zinc/stone palette - bg/text/border/ring with red/green/blue/etc palette Fixed 21 violations across 11 files: - Overlays: bg-black/* → bg-foreground/* - Text: text-white → text-primary-foreground - Backgrounds: bg-white/10 → bg-background/10 - Green accents: bg-green-* → bg-primary - Red accents: bg-red-* → bg-destructive Integrated into: - lint-staged: runs on every *.ts/*.tsx commit - vitest: src/lib/no-hardcoded-colors.test.ts replaces old audit test - Allowlist: shadcn/ui primitives (button, badge, dialog) + 4 graphical files	2026-09-01 19:33:50 +02:00
openhands	d602ee59c7	chore: update all dependencies to latest versions ... - lucide-react 1.33.0 → 1.38.0 - mysql2 3.23.4 → 3.24.2 - next-intl 4.13.7 → 4.14.1 - otplib 13.4.1 → 13.5.0 - react-hook-form 7.85.0 → 7.87.0 - resend 6.21.0 → 6.25.0 - zod 4.4.3 → 4.5.4 - sharp 0.35.3 → 0.35.4 - @biomejs/biome 2.5.9 → 2.5.11 - @types/node 26.2.0 → 26.4.0 - @types/react-dom 19.2.4 → 19.2.5 - knip 6.32.2 → 6.33.0 - lint-staged 17.3.0 → 17.4.1 - tsx 4.23.12 → 4.23.13 - pnpm 11.24.0 → 11.25.0	2026-09-01 17:38:25 +02:00
Simo	e3a4726648	ci: register permission diagnostics command	2026-08-31 21:15:14 +02:00
Simo	b1ddda66ff	Revert "Merge pull request 'Complete Housekeeping migration and /ase cutover' (#52) from codex/housekeeping-complete into main" ... This reverts commit 488b6e57c4, reversing changes made to b506b4499a.	2026-08-30 21:31:34 +02:00
Simo	2b8f73a91d	feat(housekeeping): cut over administration to ase	2026-08-30 20:35:22 +02:00
Simo	8a31556d51	test(housekeeping): prove 137 route parity	2026-08-30 19:11:14 +02:00
openhands	3baac5e885	chore: update nextjs and react to latest versionb to fix cve eploits	2026-08-29 21:30:44 +02:00
openhands	ca59a1065f	perf: use lzma-wasm for SWF decompression and drop vite ... Replace the pure-JS lzma decoder with lzma-wasm (Rust/WASM, base64-inlined, zero-alloc decompress), giving an order-of-magnitude speedup on furni imports. Remove the obsolete lzma type shim and the redundant top-level vite dev dependency, which nothing imports directly.	2026-08-29 19:27:27 +02:00
openhands	e3ed37d170	build: align pinned Node.js version with CI runtime (26.8.1) ... .nvmrc and package.json engines.node must match the exact version the CI environment runs, otherwise scripts/check-node-toolchain.mjs fails the strict equality assertion.	2026-08-27 15:12:03 +02:00
Simo	2a36ba1956	Merge branch 'main' into codex/housekeeping-foundation	2026-08-26 19:50:26 +02:00
Simo	a158c78a7c	test: verify housekeeping foundation boundaries	2026-08-26 17:44:03 +02:00
openhands	3070d85423	Perf: Optimize next.config.ts for Next.js 16	2026-08-25 22:35:46 +02:00
openhands	94b0b65ca0	Remove unused dependencies flagged by Knip	2026-08-25 22:28:02 +02:00
openhands	e06596391e	Fix Turbopack module resolution for lzma and restore path imports	2026-08-25 22:19:59 +02:00
Simo	3b3d7780c9	docs: complete housekeeping migration matrix	2026-08-25 18:49:58 +02:00
Simo	6ed1b03e24	chore: align Node 26.7.0 toolchain	2026-08-24 19:12:11 +02:00
openhands	e6dd22a4de	Update all packages to the latest versions for Epicnextcms	2026-08-22 14:41:01 +02:00
openhands	5668493485	chore: update dependencies to latest versions within version ranges ... Run pnpm update; bumped 21 packages, removed 20. App still typechecks and passes Biome.	2026-08-22 13:42:07 +02:00
openhands	0b4fc4559e	chore: update dependencies and lockfile to latest stable versions	2026-08-18 21:02:57 +02:00
openhands	e76c530e4f	Fix TypeScript errors and implement furniture import ID integrity with 18+ age verification ... - Add termsAccepted and ageVerified columns to User table - Update register schema with new boolean fields - Fix register form age verification checkbox (th -> t) - Fix furni-import spriteId declaration order - Fix batch route variable naming (id -> spriteId) - Fix catalog-audit import path and ensure correct types - Hardened import with per-item id conflict checks - Added audit option for FurnitureData.json spriteId conflicts - Updated tagline to include Leeftijdsvereiste: 18+	2026-08-14 16:37:00 +02:00
openhands	dc9e5a567c	chore: update project dependencies and configurations	2026-08-14 10:20:25 +02:00
openhands	9463c8d4da	fix: update Vite to version 8.2.1	2026-08-11 20:35:36 +02:00
openhands	0c39405dab	fix: copy .env for staged release migration	2026-08-11 16:58:27 +02:00
openhands	c808c59fce	fix: replace jsonc with jsonc-parser and cleanup build config	2026-08-11 16:53:03 +02:00
openhands	e867b675fc	fix: replace jsonc with jsonc-parser and cleanup build config	2026-08-11 16:50:10 +02:00
openhands	b1ac2e1331	fix: move @next/bundle-analyzer to runtime deps for next start	2026-08-09 12:47:40 +02:00