141 Commits

Include renames

Author	SHA1	Message	Date
openhands	1db49263eb	chore(deps): update @babel/parser and @types/node	2026-09-19 23:34:52 +02:00
openhands	a039ba13cc	chore: align Node toolchain on 26.9.0	2026-09-19 23:28:09 +02:00
openhands	2e25b39364	refactor(auth): single digest registry, extracted 2FA and login-log, dep bumps ... - password.ts: derive plain and salted digest detection from one DIGEST_SCHEMES table instead of parallel hardcoded lists, so adding a family is one row. - auth.ts: move 2FA challenge verification into twofactor-verification.ts and the website login-log insert into website-login-log.ts, slimming the NextAuth provider to orchestration only. - deps: bump @formatjs/icu-messageformat-parser, @tanstack/react-query, jszip, lucide-react, motion (patch/minor only). @types/react stay pinned per pnpm-workspace.yaml; next-auth is already at the newest available (v5 beta).	2026-09-17 15:26:25 +02:00
openhands	55c13b533c	chore(deps): update patch+minor dependencies ... Non-breaking updates across prod + dev deps after a pnpm typecheck + full test run (45 tests green, tsc clean): - react/react-dom 19.2.8 -> 19.3.0, @types/react(-dom) 19.3.0 - @tanstack/react-query 5.102.8 -> 5.103.0, react-virtual 3.14.13 - lucide-react 1.41.0 -> 1.46.0, motion 13.3.0, tailwind-merge 3.7.0 - isomorphic-dompurify 4.2.0, next-intl 4.14.5, react-hook-form 7.88.0 - mysql2 3.24.4, resend 6.28.1, tinymce 8.9.1, zod 4.6.5 - @biomejs/biome 2.5.14, @playwright/test 1.63.0, vitest 5.0.1 Deliberately kept pinned (breaking): @babel/parser 7.x (8 is a major), next-auth stays on v5-beta (4.24.15 is the v4 line).	2026-09-16 15:57:07 +02:00
Simo	7867bf6b72	test(news): gate deployment on an isolated real browser publication journey	2026-09-13 20:27:04 +02:00
Simo	422be3ce2d	test(ci): gate deployments on MariaDB and Redis integration checks	2026-09-13 17:47:58 +02:00
openhands	d755ab7ce1	revert(site): restore classic Habbo landing with soft theme polish ... Replace the premium dark-gaming redesign of home, login and register with the original classic landing (Habbo sky background, AuthTopBar, SurfaceCard layout). Keeps the theme background visible again and adds a subtle theme-aware brand halo behind the hero/Frank plus a soft primary glow on card hover. Also upgrades dependencies: next 16.3.5, vite 8.3.0 (typescript 7.0.2 was already latest). Temporarily lowers pnpm minimumReleaseAge to 60 min so the fresh 16.3.5 release can be installed; restore to 1440 once it is 24h old.	2026-09-12 16:14:21 +02:00
Simo	88790d1a0d	feat(cms): recover drafts and failed imports with verified UI workflows	2026-09-11 08:58:10 +02:00
openhands	bcefb0f8ff	build: update node engine range in package.json to match .nvmrc	2026-09-10 21:50:03 +02:00
Simo	c389c3893d	feat(cms): improve catalog, editorial recovery and operations	2026-09-09 19:36:15 +02:00
openhands	54b7c67878	perf: speed up local test runs by moving coverage to optional script ... Run vitest without coverage by default (pnpm test) and add pnpm test:coverage which enforces the coverage thresholds. CI keeps using the coverage run so thresholds are still enforced on every push.	2026-09-08 18:12:34 +02:00
openhands	ecadef904d	chore: remove knip, husky and lint-staged ... Drop the unused knip dead-code check and the husky+lint-staged pre-commit hook pipeline. All checks remain covered by the CI workflow (lint, typecheck, i18n, tests).	2026-09-08 16:56:55 +02:00
openhands	bbb7d66067	chore: remove Playwright end-to-end testing setup ... Remove Playwright config, e2e spec, dependencies, and related references from package.json, tsconfig.json, and .gitignore.	2026-09-08 16:42:10 +02:00
openhands	52459c0b74	feat(db): add self-tuned mariadb-turbo container and bulk JSON importer ... - docker-compose: opt-in mariadb-turbo service (profile 'db') with inline mysqld tuning (max_allowed_packet=512M, innodb_flush_log_at_trx_commit=2, 2G buffer pool, net_read/write_timeout=600) for >50 MB JSON bulk loads; named volume for the datadir + node_modules host-sync guidance - scripts/bulk-import-json.ts: chunked (2000-row) idempotent importer with ON DUPLICATE KEY UPDATE, resumable, habbo furnidata or flat-array input - src/db/schema-gamedata.ts: promote+index JSON storage schema (furnidata, docs, texts) incl. VIRTUAL generated columns for MariaDB - package.json: add db:bulk, db:up, db:down, db:introspect, db:schema:generate	2026-09-07 16:54:44 +02:00
openhands	bef1775dea	fix(toolchain): restore node engines range to match .nvmrc pin	2026-09-07 11:24:52 +02:00
openhands	539e6d3fad	fix(docker): harden image and automate safe VPS updates ... - Use floating node:alpine that tracks the latest supported LTS; pnpm bootstrap follows package.json's packageManager pin. - Drop corepack (removed from node:26), install pnpm via npm global. - Add pnpm fetch + offline install for stable dependency-layer caching. - Run as non-root nextjs (UID/GID 33 = host www-data) with tini as PID 1 for correct signal handling. - Open node engines to >=20.9.0 so patches/minors float automatically. - Add docker-preflight.sh (per-VPS checks incl. --fix) and gate docker-update.sh so Node major upgrades require explicit review while patches deploy silently.	2026-09-07 11:22:30 +02:00
Simo	ef94646d60	fix(i18n): persist CMS translations and validate message catalogs	2026-09-06 17:55:11 +02:00
openhands	9dc9d1fa4b	perf: pre-compress gamedata JSON, tune MariaDB, fix avatar imager, docs ... - scripts/compress-gamedata.mjs: pre-compress large gamedata JSON to .gz (gzip level 9, idempotent mtime check) served via nginx gzip_static (48 MB FurnitureData.json -> ~2.4 MB, ~0.3s -> ~0.005s per request) - package.json: add gamedata:compress script - fix(imaging): accept real Habbo figure strings in avatar route (allow optional second number per part, e.g. hd-180-1.ch-210-66) - README: document avatar imager container (avatar-imaging-pixinode, port 8082, /docker/Polaris-imager), nginx /imaging proxying, MariaDB tuning, gamedata pre-compression cron and caching layers	2026-09-06 12:06:38 +02:00
Simo	816e3875c2	feat(admin): add production error center and refresh CMS dependencies	2026-09-05 19:53:09 +02:00
Simo	9ec9ab31ad	feat: export Catalog Studio assets and SQL to catalog repository	2026-09-05 11:49:00 +02:00
openhands	399c047515	fix: harden admin actions, search, sanitization and repo hygiene ... - Split approve/dismiss application workflows with distinct audit logs, rate-limited guards and real error logging - Validate article status/date/id input and stop resetting publishedAt on every update - Validate guild updates (state, forum enums, non-empty name) behind rate-limited guard - Fix scheduled-article publishing (ignore NULL dates, set updatedAt, type-safe predicates) - Harden admin search API (LIKE escaping, query cap, per-user rate limit, round-robin result cap) and fix search dialog abort/res.ok/loading races - Lock down HTML sanitizer to an allowlist profile and add XSS tests - Improve mobile nav accessibility (unique id, dialog role, focus management, scroll lock, outside close) - Log swallowed server errors instead of silent catch blocks - Remove dead eslint config, drop unused dompurify deps, restore knip CI step, add Playwright config with smoke spec	2026-09-04 13:04:08 +02:00
openhands	30c95b1a5c	feat: comprehensive CMS improvements ... - Fix DOMPurify SSR crash (use isomorphic-dompurify) - Fix SanitizedHtml to sanitize by default - Add auth guards to studio/catalog maintenance pages - Add update/edit to vouchers CRUD - Add update/edit to rare-values CRUD - Add approve workflow to applications page - Add edit form to guilds detail page - Add SEO metadata to all public pages (21 pages) - Fix mobile nav accessibility (focus trap, aria attributes) - Fix missing labels and table accessibility - Add dynamic imports for heavy client components (6 components) - Fix silent error swallowing (40+ locations) - Add content scheduling for articles (publishAt, status) - Wire up 12 missing webhook notification triggers - Add global search to admin panel - Add bulk actions to admin users table - Fix JSON formatting and a11y issues	2026-09-03 16:00:32 +02:00
openhands	a30e4af32e	feat: polish toolbar, live online count via SSE + emulator 3-state ... - Add emulator status 3-state (unknown/green/red) with tooltip - Extract shared primary button style/constants for DRY toolbar code - Add emulatorUnknown translations to all 25 locales - Bump Next.js to 16.3.4 - Fix RCON delivery timeout caching (15s TTL / shared across clients) - Who's-online tooltip throttled to max 1 request per 30s	2026-09-02 21:34:30 +02:00
openhands	58c35a2920	feat: enforce no hardcoded colors across entire CMS ... Added scripts/check-admin-colors.mjs — scans all src/ files for: - text-white, text-black (use theme text vars) - bg-white, bg-black (use theme background/overlay vars) - bg/text/border/ring with gray/slate/zinc/stone palette - bg/text/border/ring with red/green/blue/etc palette Fixed 21 violations across 11 files: - Overlays: bg-black/* → bg-foreground/* - Text: text-white → text-primary-foreground - Backgrounds: bg-white/10 → bg-background/10 - Green accents: bg-green-* → bg-primary - Red accents: bg-red-* → bg-destructive Integrated into: - lint-staged: runs on every *.ts/*.tsx commit - vitest: src/lib/no-hardcoded-colors.test.ts replaces old audit test - Allowlist: shadcn/ui primitives (button, badge, dialog) + 4 graphical files	2026-09-01 19:33:50 +02:00
openhands	d602ee59c7	chore: update all dependencies to latest versions ... - lucide-react 1.33.0 → 1.38.0 - mysql2 3.23.4 → 3.24.2 - next-intl 4.13.7 → 4.14.1 - otplib 13.4.1 → 13.5.0 - react-hook-form 7.85.0 → 7.87.0 - resend 6.21.0 → 6.25.0 - zod 4.4.3 → 4.5.4 - sharp 0.35.3 → 0.35.4 - @biomejs/biome 2.5.9 → 2.5.11 - @types/node 26.2.0 → 26.4.0 - @types/react-dom 19.2.4 → 19.2.5 - knip 6.32.2 → 6.33.0 - lint-staged 17.3.0 → 17.4.1 - tsx 4.23.12 → 4.23.13 - pnpm 11.24.0 → 11.25.0	2026-09-01 17:38:25 +02:00
Simo	e3a4726648	ci: register permission diagnostics command	2026-08-31 21:15:14 +02:00
Simo	b1ddda66ff	Revert "Merge pull request 'Complete Housekeeping migration and /ase cutover' (#52) from codex/housekeeping-complete into main" ... This reverts commit 488b6e57c4, reversing changes made to b506b4499a.	2026-08-30 21:31:34 +02:00
Simo	2b8f73a91d	feat(housekeeping): cut over administration to ase	2026-08-30 20:35:22 +02:00
Simo	8a31556d51	test(housekeeping): prove 137 route parity	2026-08-30 19:11:14 +02:00
openhands	3baac5e885	chore: update nextjs and react to latest versionb to fix cve eploits	2026-08-29 21:30:44 +02:00
openhands	ca59a1065f	perf: use lzma-wasm for SWF decompression and drop vite ... Replace the pure-JS lzma decoder with lzma-wasm (Rust/WASM, base64-inlined, zero-alloc decompress), giving an order-of-magnitude speedup on furni imports. Remove the obsolete lzma type shim and the redundant top-level vite dev dependency, which nothing imports directly.	2026-08-29 19:27:27 +02:00
openhands	e3ed37d170	build: align pinned Node.js version with CI runtime (26.8.1) ... .nvmrc and package.json engines.node must match the exact version the CI environment runs, otherwise scripts/check-node-toolchain.mjs fails the strict equality assertion.	2026-08-27 15:12:03 +02:00
Simo	2a36ba1956	Merge branch 'main' into codex/housekeeping-foundation	2026-08-26 19:50:26 +02:00
Simo	a158c78a7c	test: verify housekeeping foundation boundaries	2026-08-26 17:44:03 +02:00
openhands	3070d85423	Perf: Optimize next.config.ts for Next.js 16	2026-08-25 22:35:46 +02:00
openhands	94b0b65ca0	Remove unused dependencies flagged by Knip	2026-08-25 22:28:02 +02:00
openhands	e06596391e	Fix Turbopack module resolution for lzma and restore path imports	2026-08-25 22:19:59 +02:00
Simo	3b3d7780c9	docs: complete housekeeping migration matrix	2026-08-25 18:49:58 +02:00
Simo	6ed1b03e24	chore: align Node 26.7.0 toolchain	2026-08-24 19:12:11 +02:00
openhands	e6dd22a4de	Update all packages to the latest versions for Epicnextcms	2026-08-22 14:41:01 +02:00
openhands	5668493485	chore: update dependencies to latest versions within version ranges ... Run pnpm update; bumped 21 packages, removed 20. App still typechecks and passes Biome.	2026-08-22 13:42:07 +02:00
openhands	0b4fc4559e	chore: update dependencies and lockfile to latest stable versions	2026-08-18 21:02:57 +02:00
openhands	e76c530e4f	Fix TypeScript errors and implement furniture import ID integrity with 18+ age verification ... - Add termsAccepted and ageVerified columns to User table - Update register schema with new boolean fields - Fix register form age verification checkbox (th -> t) - Fix furni-import spriteId declaration order - Fix batch route variable naming (id -> spriteId) - Fix catalog-audit import path and ensure correct types - Hardened import with per-item id conflict checks - Added audit option for FurnitureData.json spriteId conflicts - Updated tagline to include Leeftijdsvereiste: 18+	2026-08-14 16:37:00 +02:00
openhands	dc9e5a567c	chore: update project dependencies and configurations	2026-08-14 10:20:25 +02:00
openhands	9463c8d4da	fix: update Vite to version 8.2.1	2026-08-11 20:35:36 +02:00
openhands	0c39405dab	fix: copy .env for staged release migration	2026-08-11 16:58:27 +02:00
openhands	c808c59fce	fix: replace jsonc with jsonc-parser and cleanup build config	2026-08-11 16:53:03 +02:00
openhands	e867b675fc	fix: replace jsonc with jsonc-parser and cleanup build config	2026-08-11 16:50:10 +02:00
openhands	b1ac2e1331	fix: move @next/bundle-analyzer to runtime deps for next start	2026-08-09 12:47:40 +02:00
openhands	ae1393d3e3	refactor: clean up duplicate imports and dead code ... - Merge type and value imports from the same module into single imports - Remove dead import-badges action (flow uses /api/admin/import/badges) - Remove unused babel-plugin-react-compiler devDependency - Remove stray test.txt file - Update knip config: track css imports, drop redundant ignore entries - Update contract test to drop obsolete dead-action assertion	2026-08-09 11:51:26 +02:00