16 Commits

Include renames

Author	SHA1	Message	Date
openhands	abc06e438c	fix: load .env in standalone tsx scripts	2026-08-11 17:08:23 +02:00
openhands	e867b675fc	fix: replace jsonc with jsonc-parser and cleanup build config	2026-08-11 16:50:10 +02:00
SimoandCursor	ba82789166	chore(db): finish Prisma cutover to Drizzle Kit tooling ... Move CMS SQL to drizzle/migrations, drop prisma packages/schema, wire drizzle-kit scripts, and regenerate schema names from src/db/schema.ts. Co-authored-by: Cursor <[email protected]>	2026-08-01 15:02:21 +02:00
openhands	17847545dd	Improvements: remove dead config, fix ESM, add URL validation, unify types, add missing logging ... - Remove .prettierrc (dead config, Biome replaces Prettier) - Rename lighthouserc.json to lighthouserc.cjs with module.exports for ESM compat - Add logger.warn to empty catch blocks in auth, register, site-settings, prisma-cache, redis, security, rate-limit - Unify ActionResult type: action-helper.ts uses 'ok' consistent with safe-action-shared.ts - Add noUnusedLocals + noUnusedParameters to tsconfig + fix 25 pre-existing unused vars - Replace barrel export src/types/index.ts with direct @/types/common imports - Make trustHost conditional (development only) in auth.ts - Add pre-flight URL validation to update-Nitrov3.sh to catch image.library.url misconfigurations - Improve NITRO_IMAGE_LIBRARY_URL content validation in pre-flight & post-compute checks	2026-07-26 20:28:11 +02:00
openhands	f7f6e09174	Fix migration connection exhaustion and polish auth pages ... - apply-migrations.ts: use single shared connection instead of one per operation - Increase MariaDB max_connections from 151 to 300 in server config - home-login-form.tsx: replace hardcoded gray colors with theme variables - register-form.tsx: add password strength meter, spinner, theme-aligned inputs - login-form.tsx: add Discord/Google SVG icons, spinner, smoother 2FA animation - page/register/login: apply premium animations (float, stagger, glow, gradient)	2026-07-24 11:30:58 +02:00
openhands	df38dccbf1	style: format code biome	2026-07-13 21:57:41 +02:00
Simo	d99b71a2d3	fix: make radio migrations safe for existing schemas	2026-07-11 22:18:45 +02:00
Simo	48ed1c20b6	fix: load environment for database migrations	2026-07-11 22:11:30 +02:00
Simo	c4454a292c	fix: parse SQL migration comments safely	2026-07-11 21:27:18 +02:00
Simo	5b4228261a	Reapply "Add missing admin action files and navigation links" ... This reverts commit 4d515bc400.	2026-07-11 20:52:56 +02:00
Simo	4d515bc400	Revert "Add missing admin action files and navigation links" ... This reverts commit 41be6835bf.	2026-07-11 20:37:56 +02:00
openhands	41be6835bf	Add missing admin action files and navigation links ... - Add 11 missing server action files: badges, bulk-users, catalog, catalog-bc, catalog-items, import-badges, import-furni, multi-account-detect, permissions, rooms, soundtracks - Add missing admin navigation links: tickets, sounds, translations, import, radio sub-pages - Add translation keys for all new navigation items	2026-07-11 12:01:05 +02:00
openhands	942bc6fc8d	Security hardening, code quality, and ESLint setup ... - Remove production DB dump (db_backup_*.sql) and update.log from git tracking - Add DB backups to .gitignore - Replace all console.log/console.error with structured logger module - Translate Dutch error messages to English (link-discord.ts) - Remove dead code blocks (register-form.tsx false && pattern) - Add ESLint flat config with TypeScript, React, Next.js, jsx-a11y, and security plugins - Add Prettier config - Add eslint-plugin-security for security-aware linting - Fix all 119+ ESLint warnings across the codebase: - Resolve security/detect-object-injection with safe access patterns - Resolve security/detect-non-literal-fs-filename with path traversal validation - Replace <img> with next/image <Image> component - Remove unused variables and imports - Replace non-null assertions with proper type guards - Replace <a> with <Link> for internal navigation - Use next/script Script component for external scripts - Fix setState-in-useEffect anti-patterns (navbar-color-picker, logo-generator, theme-switcher) - Add lint and format scripts to package.json All checks: typecheck ✓, tests 58/58 ✓, lint 0 errors 0 warnings ✓	2026-07-10 22:48:22 +02:00
openhands	c5db7f5156	fix: production hardening — migration script, security fixes, structured logging, API docs, component splitting ... - Create apply-migrations.ts and jobs-worker.ts scripts (package.json references) - Convert badge leaderboard from $queryRawUnsafe to $queryRaw with Prisma.sql templates - Fix OAuth email binding: add oauth_require_link site setting, skip 2FA-protected accounts - Add per-user 2FA rate limiting (5/30s) to prevent TOTP brute-force - Add structured JSON logger with levels (debug/info/warn/error) - Split 341-line HomePage into GuestView + UserView components - Add OpenAPI v3.1 spec at /api/openapi.json - Add LOG_LEVEL env var, regenerate Prisma client - Add mysql2 dependency for migration scripts - All 58 tests pass, typecheck clean	2026-07-08 13:06:02 +02:00
openhands	8a58bcb252	fix: restore word-level proxy for Habbo fonts, pre-cache all 175 fonts for 'Atom'	2026-07-03 17:58:56 +02:00
Simo	b5bc7f6daf	Rebuild atomcms-next foundation on Prisma (align to habbo-next reference) ... Replace the superseded Drizzle monorepo scaffold with a single-app Prisma 7 data layer, mirroring the proven habbo-next approach to the shared Arcturus emulator DB (introspect/conform only, idempotent SQL migrations via a custom runner; never migrate-diff). - prisma/schema.prisma: User, UsersCurrency (composite PK), Ban, WebsiteSetting mapped to AtomCMS's default.sql columns; client generated to src/generated/prisma - src/lib/prisma.ts: PrismaMariaDb adapter singleton; src/env.ts zod env - src/lib/services: siteSettings (cached setting() equivalent) + CurrencyType enum - prisma/migrations + scripts/apply-migrations.ts: idempotent CMS-table runner Verified: prisma generate OK, tsc --noEmit exit 0, vitest 6/6 pass.	2026-06-27 15:26:40 +02:00