53 Commits

Include renames

Author	SHA1	Message	Date
Simo	80f591a343	Add public REST API, anti-abuse protections, radio/GitHub cron jobs ... Phase A — Public REST API (was the biggest gap). 20 JSON endpoints under /api mirroring AtomCMS: users/[username], online(+/count), me, articles (+/[slug]), photos, home, staff, teams, leaderboard, shop(+/categories), values(+/categories), settings, radio/{config,now-playing,listeners, shouts}. Shared src/lib/api.ts (apiJson — BigInt-safe + CORS, pagination). Read-only, fail-soft, and field-safe (never exposes password/auth_ticket/ 2FA secrets/mail). Phase B — Anti-abuse on registration: CAPTCHA (Cloudflare Turnstile / Google reCAPTCHA, settings-driven, widget rendered on the register page), VPN/proxy detection (proxycheck.io / IPQualityScore via /admin/vpn settings), and max-accounts-per-IP. All fail-open when unconfigured. src/lib/services/{captcha,ip-lookup}.ts. Phase C — jobs-worker cron suite: radio-record-songs (30s, logs track changes to radio_song_plays), radio-auto-dj (rotates radio_auto_dj_playlist when no live DJ), github-update-check (hourly, sets update_available). Shared src/lib/services/radio.ts (now-playing/listeners parsing). Verified live (prod, amx_test): /api/* return real JSON (leaderboard 6 users, settings carry no secrets, user endpoint hides password). tsc 0, vitest 49/49, next build 0 (20 new API routes).	2026-06-28 21:44:02 +02:00
Simo	22d53d0e9c	Add security middleware, audit log, alerts, PayPal, cron, radio + apps ... Security (launch blockers): - src/middleware.ts (edge): forwards x-pathname + real client IP. - access-guard.ts (Node, from root layout): routes non-staff to /maintenance when maintenance mode is on, banned users to /banned. New /banned + /maintenance pages (the consumers the admin toggle was missing). Admin layout enforces force_staff_2fa before /admin. - staff-activity.ts audit log wired into ban/lift/give-currency/set-rank actions. Infra (parallel agents): alert service (alert_logs + Discord embed + email), PayPal top-up (create/capture API routes + /shop/topup), cron worker (scripts/jobs-worker.ts via croner: emulator-ping->alert, maintenance-check, bans-cleanup), social connections page, admin radio settings/banners/ranks. Public radio subsystem: /radio (+schedule, shouts+post, contests, giveaways, apply, leaderboard) and /apply/staff + /apply/team submission forms. Radio nav link added. .env.example documents the new optional vars. (radio song-requests dropped: its table is a stub in AtomCMS — columns added by un-modeled alter-migrations.) Verified: tsc exit 0, vitest 48/48, next build exit 0 (82 page routes).	2026-06-28 15:10:19 +02:00
Simo	b5bc7f6daf	Rebuild atomcms-next foundation on Prisma (align to habbo-next reference) ... Replace the superseded Drizzle monorepo scaffold with a single-app Prisma 7 data layer, mirroring the proven habbo-next approach to the shared Arcturus emulator DB (introspect/conform only, idempotent SQL migrations via a custom runner; never migrate-diff). - prisma/schema.prisma: User, UsersCurrency (composite PK), Ban, WebsiteSetting mapped to AtomCMS's default.sql columns; client generated to src/generated/prisma - src/lib/prisma.ts: PrismaMariaDb adapter singleton; src/env.ts zod env - src/lib/services: siteSettings (cached setting() equivalent) + CurrencyType enum - prisma/migrations + scripts/apply-migrations.ts: idempotent CMS-table runner Verified: prisma generate OK, tsc --noEmit exit 0, vitest 6/6 pass.	2026-06-27 15:26:40 +02:00