Create the me export center page with task controls and expose API usage guidance so users can launch and track data export from the dashboard.
Made-with: Cursor
Introduce user export task persistence with schema exports and migration metadata so export jobs can be queued, tracked, and evolved safely.
Made-with: Cursor
Define a user-centric backup/export design that prioritizes file and data portability, with masking policy, manifest checksums, and async task flow.
Made-with: Cursor
- Added card density options (compact and detailed) in the media page for improved layout flexibility.
- Introduced reading mode in the RSS page, allowing users to navigate through items with next/previous controls.
- Implemented visibility filtering in the timeline, enabling users to filter events based on visibility settings.
- Enhanced the event creation form with improved validation and quick submission functionality.
These updates improve user experience by providing more control over content display and interaction.
- Changed asset paths from `/public/assets` to `/public/upload` across various files to ensure consistency in media storage.
- Introduced visibility handling for posts, allowing for better control over comment visibility based on post status.
- Enhanced markdown export functionality with new utilities for exporting unlisted posts and normalizing image URLs.
- Updated tests to reflect changes in asset paths and visibility logic.
These updates improve the overall media management and user experience in handling post visibility and markdown exports.
Add a task-by-task implementation plan for public post markdown export, including TDD checkpoints, integration steps, and manual acceptance verification.
Made-with: Cursor
Document the public post detail markdown export design, including visitor access, image URL normalization to absolute links, UX states, and acceptance criteria.
Made-with: Cursor
- Updated SCSS styles for markdown elements, improving visual consistency and readability.
- Enhanced the appearance of code blocks with new background colors, borders, and shadows.
- Introduced responsive design adjustments for better mobile compatibility.
- Added new styles for headings, links, and blockquotes to improve overall aesthetics.
These changes significantly enhance the user experience when interacting with markdown content, making it more visually appealing and easier to read.
- Added highlight.js for improved syntax highlighting in markdown code blocks.
- Updated markdown rendering configuration to support language-specific highlighting.
- Introduced a new SCSS file for styling highlighted code blocks, enhancing visual presentation.
- Implemented a copy button functionality for code blocks to improve usability.
These changes significantly enhance the markdown rendering experience, making code snippets more readable and interactive.
- Added commented-out styles for code blocks to enhance presentation and usability.
- Updated markdown configuration to disable HTML rendering for improved security.
- Introduced a function to handle path not found errors in the error logger for better error management.
These changes prepare the codebase for future enhancements in markdown rendering and error handling.
- Changed markdown background to transparent for better integration with surrounding elements.
- Enhanced the appearance of markdown code blocks with rounded corners, padding, and box shadows for improved readability.
- Updated font family for code elements to ensure consistency and better aesthetics.
- Commented out submit buttons in post creation and editing forms for future implementation.
These changes refine the visual presentation of markdown content and prepare the UI for upcoming features.
- Updated the layout of the admin configuration and user profile pages for better visual appeal and usability.
- Introduced rounded borders and background enhancements for containers and cards.
- Improved text visibility with highlighted styles and added informative descriptions.
- Consolidated action buttons into sticky footers for easier access to save functionality.
- Removed redundant elements and streamlined the form structure for a cleaner interface.
This update significantly enhances the user experience by providing a more modern and intuitive design.
- Added `ensureClientMeSynced` function to synchronize client session with server, improving user experience by reducing unnecessary API calls.
- Updated `AppShell`, `public.vue`, and other components to utilize the new synchronization method instead of the previous refresh mechanism.
- Introduced a new API endpoint for session handling, ensuring consistent user state across client and server.
- Refactored `useAuthSession` to manage client session state more effectively, enhancing overall authentication flow.
This update streamlines the authentication process and enhances the reliability of user session management.
- Introduced a new skill for backend security audits, detailing checks for input validation, authentication, and sensitive data handling.
- Enhanced user registration process by adding specific error handling for username conflicts, returning a 409 status code with a user-friendly message.
- Improved file upload security by implementing checks for allowed image formats, ensuring only valid raster images are processed.
- Updated password hashing to use a stronger algorithm, increasing security for user credentials.
- Added tests for image magic byte validation and RSS URL safety checks to ensure robustness in file handling and URL processing.
This update significantly strengthens the security posture of the backend and improves user experience during registration.
- Introduced `GuestHomeSection` and `LoggedInHomeSection` components to provide tailored content for guests and logged-in users.
- Added a quick create button for logged-in users to facilitate easy post creation.
- Updated the AppShell component to include computed properties for visibility of the quick create button based on user login status.
- Refactored the main index page to utilize the new components, improving the overall layout and user engagement.
- Implemented a new utility function for normalizing post slugs to ensure consistent URL formatting.
This update significantly enhances the homepage experience for both guests and registered users, promoting user interaction and content creation.
- Added TypeScript definitions for nodemailer to improve type safety in email handling.
- Refactored comment email test handler to utilize a dedicated logger for better error tracking and debugging.
- Simplified email configuration retrieval by consolidating it into a single object for clarity and maintainability.
This update enhances the email notification system's robustness and developer experience.
Introduce an email field in the user profile, allowing users to input their email address. Implement email format validation on the server side to ensure proper formatting before saving. Update the profile form to include the email input, enhancing user experience and notification capabilities.
Made-with: Cursor
- Added a comprehensive implementation plan for comment email infrastructure, including SMTP configuration, guest email handling, and user notification preferences.
- Extended the config registry and admin UI to support new settings, ensuring a robust email notification system without blocking comment creation.
- Created necessary API endpoints and tests to validate the functionality of the new features.
This update enhances the comment system's email capabilities and user experience.
Expose login-state comment notify warnings in comment composer and show incomplete SMTP config status in admin settings to prevent misleading mail-send expectations.
Made-with: Cursor
Skip reply notification sending when receiver email format is invalid, while preserving best-effort behavior and adding test coverage for invalid receiver email.
Made-with: Cursor
Pass postId and commentId into reply notification flow and log structured failure context with receiverUserId and reason while keeping best-effort behavior unchanged.
Made-with: Cursor
Trigger reply notification email after comment creation for public and unlisted endpoints with gated checks for global switch, SMTP readiness, receiver preferences, and self-notify suppression.
Made-with: Cursor
Expose commentNotifyEnabled in profile page state, load it from /api/config/me with true fallback, and persist updates when saving profile settings.
Made-with: Cursor
Remove legacy guest compatibility fallback in service logic so undefined guestIsAnonymous is treated as false and guest email stays required by default. Update tests to assert missing anonymous flag without email now fails.
Made-with: Cursor
Keep guestIsAnonymous undefined when the field is omitted so legacy-client compatibility fallback can trigger. Explicit false remains strict and still requires guest email.
Made-with: Cursor
Add a temporary legacy fallback so guest payloads missing both guestEmail and guestIsAnonymous are treated as anonymous during rollout. Add service-level and API body parsing tests for guest email rules, logged-in ignore behavior, and public/unlisted passthrough.
Made-with: Cursor
Add guest email validation with anonymous-mode exceptions and persist guestEmail/guestIsAnonymous in comment creation. Update comment form to collect anonymous and email fields for guests and reset them after successful submit.
Made-with: Cursor
Refine the Task4 rollback plan with executable SQL, explicit schema restoration targets, and post-rollback validation checks so rollback readiness is auditable before Task5.
Made-with: Cursor
Document an actionable Task4 rollback plan for SQLite, including temp-table replacement steps, index/constraint rebuild, and maintenance-window backup prerequisites to remove quality gate blockers.
Made-with: Cursor
Extend post comment schema and sqlite migration metadata to persist optional guest email and an explicit anonymous flag for upcoming guest comment flows.
Made-with: Cursor
Add IP-based rate limiting for the admin test-email API and set SMTP connection/send timeouts to avoid long blocking requests, with extra admin email format validation.
Made-with: Cursor
Add an admin-only test email endpoint with SMTP config and admin email validation, plus a config-page action button to trigger test sends and minimal service tests for key 400 failure paths.
Made-with: Cursor
Restrict global config GET for non-admin users and always mask commentSmtpPass in responses, while preventing admin save from sending empty smtp passwords that would clear existing secrets.
Made-with: Cursor
Expose comment mail global config fields in the frontend composable and admin config page so admins can view and save notification mail settings.
Made-with: Cursor
Apply trim/blank-to-empty normalization for comment email/smtp global keys in setGlobalConfigValue, and replace registry test casts with KnownConfigKey-safe assertions plus normalization coverage.
Made-with: Cursor
