Simo
80f591a343
Phase A — Public REST API (was the biggest gap). 20 JSON endpoints under
/api mirroring AtomCMS: users/[username], online(+/count), me, articles
(+/[slug]), photos, home, staff, teams, leaderboard, shop(+/categories),
values(+/categories), settings, radio/{config,now-playing,listeners,
shouts}. Shared src/lib/api.ts (apiJson — BigInt-safe + CORS, pagination).
Read-only, fail-soft, and field-safe (never exposes password/auth_ticket/
2FA secrets/mail).
Phase B — Anti-abuse on registration: CAPTCHA (Cloudflare Turnstile /
Google reCAPTCHA, settings-driven, widget rendered on the register page),
VPN/proxy detection (proxycheck.io / IPQualityScore via /admin/vpn
settings), and max-accounts-per-IP. All fail-open when unconfigured.
src/lib/services/{captcha,ip-lookup}.ts.
Phase C — jobs-worker cron suite: radio-record-songs (30s, logs track
changes to radio_song_plays), radio-auto-dj (rotates radio_auto_dj_playlist
when no live DJ), github-update-check (hourly, sets update_available).
Shared src/lib/services/radio.ts (now-playing/listeners parsing).
Verified live (prod, amx_test): /api/* return real JSON (leaderboard 6
users, settings carry no secrets, user endpoint hides password). tsc 0,
vitest 49/49, next build 0 (20 new API routes).
atomcms-next
AtomCMS (Laravel) converted to Next.js 16 (App Router) + Prisma 7 against the same Arcturus-emulator MySQL/MariaDB database. Auth via NextAuth (argon2id/bcrypt + md5→argon2id upgrade), RCON to the emulator, full public site + admin panel.
Try it now (no database)
The dev/preview server is already running — open:
Public pages render with fallback defaults (empty data). Login / register / admin need a database (below).
Try it for real (your AtomCMS database)
Point it at your live (or a copy of your) AtomCMS database to log in with real accounts and see real data:
- Edit
atomcms-next/.env:DATABASE_URL=mysql://USER:PASSWORD@HOST:3306/DBNAME DATABASE_CONNECT_TIMEOUT_MS=10000 AUTH_SECRET=any-long-random-string-at-least-32-chars HOTEL_NAME=YourHotel # Optional emulator link (for RCON: give credits, ban, motto, disconnect): RCON_HOST=127.0.0.1 RCON_PORT=3001 - Restart the server (
pnpm -C atomcms-next start, orpnpm dev). - Log in at
/loginwith any existing account. Staff (rank ≥min_staff_rank, default 7) get the /admin panel. New users can/register.
It reads the schema you already have — no migrations are run against the emulator
tables (introspect/conform only). prisma generate is already done; if you add
tables, pnpm -C atomcms-next prisma:generate.
Run it yourself
cd atomcms-next
pnpm install # already done
pnpm dev # dev server (hot reload) on :3000
# or:
pnpm build && pnpm start # production
pnpm typecheck # tsc --noEmit
pnpm test # vitest (unit tests)
What's built
- Public: home, news (+comments/reactions), shop, marketplace, community,
rankings, staff, photos, guilds, rares, leaderboard, help (+tickets), profile
/u/<name>(badges/photos/guestbook), client launcher/client(SSO ticket), login / register / logout, settings, voucher redeem. - Admin (
/admin, staff-gated): users (give currency/motto/rank/alert/kick via RCON), rooms, articles, catalog, vouchers, badges, radio, achievements, rare-values, photos, bans, applications, word-filter, IP, logs, teams, housekeeping, permissions, emulator config, email templates, calendar, subscriptions, CMS settings. - Core: Prisma data layer (190 models), NextAuth auth core (byte-compatible argon2id/bcrypt/md5 + SSO ticket + Laravel encrypter + TOTP), RCON client + currency service, atom visual theme (self-hosted Nunito).