7 Commits

Include renames

Author	SHA1	Message	Date
SimoandCursor	65b2fbee6a	refactor(db): finish Drizzle migration for remaining actions and services ... Co-authored-by: Cursor <[email protected]>	2026-08-01 13:27:59 +02:00
SimoandCursor	968ca15c27	feat: jwt cache, redis health, help-ticket admin, and write rate limits ... Cut Auth.js DB load with cached jwtVersion checks, surface Redis in /api/health and deploy warnings, add admin help-center ticket reply UI, rate-limit API tickets/reactions/referral claims, and revoke PATs on sign-out-everywhere. Co-authored-by: Cursor <[email protected]>	2026-07-21 21:58:48 +02:00
openhands	df38dccbf1	style: format code biome	2026-07-13 21:57:41 +02:00
Simo	5b4228261a	Reapply "Add missing admin action files and navigation links" ... This reverts commit 4d515bc400.	2026-07-11 20:52:56 +02:00
Simo	4d515bc400	Revert "Add missing admin action files and navigation links" ... This reverts commit 41be6835bf.	2026-07-11 20:37:56 +02:00
openhands	41be6835bf	Add missing admin action files and navigation links ... - Add 11 missing server action files: badges, bulk-users, catalog, catalog-bc, catalog-items, import-badges, import-furni, multi-account-detect, permissions, rooms, soundtracks - Add missing admin navigation links: tickets, sounds, translations, import, radio sub-pages - Add translation keys for all new navigation items	2026-07-11 12:01:05 +02:00
Simo	f7b3845131	Close the web-feasible 100% gaps: REST write/token API, tickets, draw-badge, /me, sanitisation, dusk, radio SSE ... Final parity push (web-tier only): - REST API write + token auth: POST /api/tokens (issue a personal_access_token for the session user), Bearer auth via src/lib/api-auth.ts, POST /api/articles/[slug]/comment, GET/DELETE /api/me/tokens, full tickets API (/api/tickets +[id] +[id]/reply), radio current-dj/points/points-leaderboard/ embed-config + POST shouts, and a real-time /api/radio/stream (SSE). 31 public API routes total. - Pages: /draw-badge (buy a custom profile badge → credits + RCON), /me dashboard (stats + online friends + referral claim). Wired into the nav. - HTML sanitisation (sanitize-html) — the HTMLPurifier equivalent — applied to writeable boxes + article bodies before dangerouslySetInnerHTML. - "Dusk" dark theme preset + a default-dark site option honoured by the no-flash boot script. Verified live (prod, amx_test): token issue → Bearer endpoint 200, no-token 401; /api/me/tokens lists it; current-dj/leaderboard JSON; /me + /draw-badge 200; reverted the test user + tokens. tsc 0, vitest 49/49, next build 0.	2026-06-29 18:15:01 +02:00