fix: allow static assets to be served correctly

Fixed the not-found handler to exclude /assets routes, allowing static assets like images to be served with correct MIME types instead of being caught by the SPA fallback handler. Changes: - Updated setNotFoundHandler to check for /assets prefix - Assets are now served directly by fastify-static with correct content-type - Only non-API, non-asset routes fall through to index.html This fixes the default cover image not displaying because it was being served as text/html instead of image/jpeg. Co-Authored-By: Naomi Carrigan <commits@nhcarrigan.com>
feat: add default cover image for all media types
2026-02-20 19:45:37 -08:00 · 2026-02-20 19:40:46 -08:00 · 2026-02-20 19:29:05 -08:00 · 2026-02-20 18:35:21 -08:00 · 2026-02-20 18:32:05 -08:00 · 2026-02-20 18:28:24 -08:00
17 changed files with 49 additions and 100 deletions
@@ -102,53 +102,6 @@ const authRoutes: FastifyPluginAsync = async (app) => {
        request
      );

-      // Assign library member role if user is in Discord server but doesn't have it
-      const libraryRoleId = process.env.LIBRARY_ROLE_ID;
-      if (inDiscord && guildId && libraryRoleId) {
-        try {
-          const memberResponse = await fetch(
-            `https://discord.com/api/users/@me/guilds/${guildId}/member`,
-            {
-              headers: {
-                Authorization: `Bearer ${tokenResult.token.access_token}`,
-              },
-            }
-          );
-
-          if (memberResponse.ok) {
-            const memberData = await memberResponse.json() as { roles: string[] };
-            const hasLibraryRole = memberData.roles.includes(libraryRoleId);
-
-            if (!hasLibraryRole) {
-              const botToken = process.env.DISCORD_BOT_TOKEN;
-              if (botToken) {
-                const assignRoleResponse = await fetch(
-                  `https://discord.com/api/v10/guilds/${guildId}/members/${userData.id}/roles/${libraryRoleId}`,
-                  {
-                    method: "PUT",
-                    headers: {
-                      Authorization: `Bot ${botToken}`,
-                      "Content-Type": "application/json",
-                    },
-                  }
-                );
-
-                if (assignRoleResponse.ok || assignRoleResponse.status === 204) {
-                  app.log.info(`Assigned library role to user ${user.username} (${user.id})`);
-                } else {
-                  app.log.error(
-                    `Failed to assign library role to user ${user.username}: ${assignRoleResponse.status}`
-                  );
-                }
-              }
-            }
-          }
-        } catch (error) {
-          // Don't fail the login if role assignment fails
-          app.log.error({ err: error }, "Error assigning library role");
-        }
-      }
-
      // Set signed cookies and redirect to frontend
      reply
        .setCookie("auth-token", accessToken, {
@@ -244,8 +244,8 @@ import { Suggestion, SuggestionStatus, SuggestionEntity, CreateGameDto, UpdateGa
                <app-game-form
                  mode="add"
                  [initialData]="getGameInitialData(editingSuggestion()!)"
-                  (formSubmit)="saveGameFromSuggestion($event)"
-                  (formCancel)="closeEditModal()"
+                  (save)="saveGameFromSuggestion($event)"
+                  (cancel)="closeEditModal()"
                ></app-game-form>
              } @else if (editingSuggestion()!.entityType === SuggestionEntity.book) {
                <h3>Review & Edit Book Before Accepting</h3>
@@ -253,8 +253,8 @@ import { Suggestion, SuggestionStatus, SuggestionEntity, CreateGameDto, UpdateGa
                <app-book-form
                  mode="add"
                  [initialData]="getBookInitialData(editingSuggestion()!)"
-                  (formSubmit)="saveBookFromSuggestion($event)"
-                  (formCancel)="closeEditModal()"
+                  (save)="saveBookFromSuggestion($event)"
+                  (cancel)="closeEditModal()"
                ></app-book-form>
              } @else if (editingSuggestion()!.entityType === SuggestionEntity.music) {
                <h3>Review & Edit Music Before Accepting</h3>
@@ -262,8 +262,8 @@ import { Suggestion, SuggestionStatus, SuggestionEntity, CreateGameDto, UpdateGa
                <app-music-form
                  mode="add"
                  [initialData]="getMusicInitialData(editingSuggestion()!)"
-                  (formSubmit)="saveMusicFromSuggestion($event)"
-                  (formCancel)="closeEditModal()"
+                  (save)="saveMusicFromSuggestion($event)"
+                  (cancel)="closeEditModal()"
                ></app-music-form>
              } @else if (editingSuggestion()!.entityType === SuggestionEntity.show) {
                <h3>Review & Edit Show Before Accepting</h3>
@@ -271,8 +271,8 @@ import { Suggestion, SuggestionStatus, SuggestionEntity, CreateGameDto, UpdateGa
                <app-show-form
                  mode="add"
                  [initialData]="getShowInitialData(editingSuggestion()!)"
-                  (formSubmit)="saveShowFromSuggestion($event)"
-                  (formCancel)="closeEditModal()"
+                  (save)="saveShowFromSuggestion($event)"
+                  (cancel)="closeEditModal()"
                ></app-show-form>
              } @else if (editingSuggestion()!.entityType === SuggestionEntity.manga) {
                <h3>Review & Edit Manga Before Accepting</h3>
@@ -280,8 +280,8 @@ import { Suggestion, SuggestionStatus, SuggestionEntity, CreateGameDto, UpdateGa
                <app-manga-form
                  mode="add"
                  [initialData]="getMangaInitialData(editingSuggestion()!)"
-                  (formSubmit)="saveMangaFromSuggestion($event)"
-                  (formCancel)="closeEditModal()"
+                  (save)="saveMangaFromSuggestion($event)"
+                  (cancel)="closeEditModal()"
                ></app-manga-form>
              } @else if (editingSuggestion()!.entityType === SuggestionEntity.art) {
                <h3>Review & Edit Art Before Accepting</h3>
@@ -289,8 +289,8 @@ import { Suggestion, SuggestionStatus, SuggestionEntity, CreateGameDto, UpdateGa
                <app-art-form
                  mode="add"
                  [initialData]="getArtInitialData(editingSuggestion()!)"
-                  (formSubmit)="saveArtFromSuggestion($event)"
-                  (formCancel)="closeEditModal()"
+                  (save)="saveArtFromSuggestion($event)"
+                  (cancel)="closeEditModal()"
                ></app-art-form>
              }
            }
@@ -31,8 +31,8 @@ import { Art, Comment, UpdateArtDto } from '@library/shared-types';
        <app-art-form
          mode="edit"
          [art]="art()!"
-          (formSubmit)="saveEdit($event)"
-          (formCancel)="cancelEdit()"
+          (save)="saveEdit($event)"
+          (cancel)="cancelEdit()"
        ></app-art-form>
      }

@@ -31,8 +31,8 @@ import { Book, Comment, BookStatus, UpdateBookDto } from '@library/shared-types'
        <app-book-form
          mode="edit"
          [book]="book()!"
-          (formSubmit)="saveEdit($event)"
-          (formCancel)="cancelEdit()"
+          (save)="saveEdit($event)"
+          (cancel)="cancelEdit()"
        ></app-book-form>
      }

@@ -60,8 +60,8 @@ import { Game, Comment, GameStatus, UpdateGameDto } from '@library/shared-types'
              <app-game-form
                mode="edit"
                [game]="game()!"
-                (formSubmit)="saveEdit($event)"
-                (formCancel)="cancelEdit()"
+                (save)="saveEdit($event)"
+                (cancel)="cancelEdit()"
              ></app-game-form>
            }

@@ -31,8 +31,8 @@ import { Manga, Comment, MangaStatus, UpdateMangaDto } from '@library/shared-typ
        <app-manga-form
          mode="edit"
          [manga]="manga()!"
-          (formSubmit)="saveEdit($event)"
-          (formCancel)="cancelEdit()"
+          (save)="saveEdit($event)"
+          (cancel)="cancelEdit()"
        ></app-manga-form>
      }

@@ -31,8 +31,8 @@ import { Music, Comment, MusicStatus, MusicType, UpdateMusicDto } from '@library
        <app-music-form
          mode="edit"
          [music]="music()!"
-          (formSubmit)="saveEdit($event)"
-          (formCancel)="cancelEdit()"
+          (save)="saveEdit($event)"
+          (cancel)="cancelEdit()"
        ></app-music-form>
      }

@@ -290,8 +290,8 @@ export class ArtFormComponent implements OnInit {
  @Input() mode: 'add' | 'edit' = 'add';
  @Input() art?: Art;
  @Input() initialData?: Partial<CreateArtDto>;
-  @Output() formSubmit = new EventEmitter<CreateArtDto | UpdateArtDto>();
-  @Output() formCancel = new EventEmitter<void>();
+  @Output() save = new EventEmitter<CreateArtDto | UpdateArtDto>();
+  @Output() cancel = new EventEmitter<void>();

  formData: Partial<CreateArtDto | UpdateArtDto> = {
    tags: [],
@@ -396,10 +396,10 @@ export class ArtFormComponent implements OnInit {
      ...this.formData as CreateArtDto | UpdateArtDto
    };

-    this.formSubmit.emit(data);
+    this.save.emit(data);
  }

  onCancel() {
-    this.formCancel.emit();
+    this.cancel.emit();
  }
 }
@@ -404,8 +404,8 @@ export class BookFormComponent implements OnInit {
  @Input() mode: 'add' | 'edit' = 'add';
  @Input() book?: Book;
  @Input() initialData?: Partial<CreateBookDto>;
-  @Output() formSubmit = new EventEmitter<CreateBookDto | UpdateBookDto>();
-  @Output() formCancel = new EventEmitter<void>();
+  @Output() save = new EventEmitter<CreateBookDto | UpdateBookDto>();
+  @Output() cancel = new EventEmitter<void>();

  BookStatus = BookStatus;

@@ -534,10 +534,10 @@ export class BookFormComponent implements OnInit {
      dateFinished: this.formData.dateFinished ? new Date(this.formData.dateFinished) : undefined
    };

-    this.formSubmit.emit(data);
+    this.save.emit(data);
  }

  onCancel() {
-    this.formCancel.emit();
+    this.cancel.emit();
  }
 }
@@ -392,8 +392,8 @@ export class GameFormComponent implements OnInit {
  @Input() mode: 'add' | 'edit' = 'add';
  @Input() game?: Game;
  @Input() initialData?: Partial<CreateGameDto>;
-  @Output() formSubmit = new EventEmitter<CreateGameDto | UpdateGameDto>();
-  @Output() formCancel = new EventEmitter<void>();
+  @Output() save = new EventEmitter<CreateGameDto | UpdateGameDto>();
+  @Output() cancel = new EventEmitter<void>();

  GameStatus = GameStatus;

@@ -522,10 +522,10 @@ export class GameFormComponent implements OnInit {
      dateFinished: this.formData.dateFinished ? new Date(this.formData.dateFinished) : undefined
    };

-    this.formSubmit.emit(data);
+    this.save.emit(data);
  }

  onCancel() {
-    this.formCancel.emit();
+    this.cancel.emit();
  }
 }
@@ -370,8 +370,8 @@ export class MangaFormComponent implements OnInit {
  @Input() mode: 'add' | 'edit' = 'add';
  @Input() manga?: Manga;
  @Input() initialData?: Partial<CreateMangaDto>;
-  @Output() formSubmit = new EventEmitter<CreateMangaDto | UpdateMangaDto>();
-  @Output() formCancel = new EventEmitter<void>();
+  @Output() save = new EventEmitter<CreateMangaDto | UpdateMangaDto>();
+  @Output() cancel = new EventEmitter<void>();

  MangaStatus = MangaStatus;

@@ -497,10 +497,10 @@ export class MangaFormComponent implements OnInit {
      dateFinished: this.formData.dateFinished ? new Date(this.formData.dateFinished) : undefined
    };

-    this.formSubmit.emit(data);
+    this.save.emit(data);
  }

  onCancel() {
-    this.formCancel.emit();
+    this.cancel.emit();
  }
 }
@@ -379,8 +379,8 @@ export class MusicFormComponent implements OnInit {
  @Input() mode: 'add' | 'edit' = 'add';
  @Input() music?: Music;
  @Input() initialData?: Partial<CreateMusicDto>;
-  @Output() formSubmit = new EventEmitter<CreateMusicDto | UpdateMusicDto>();
-  @Output() formCancel = new EventEmitter<void>();
+  @Output() save = new EventEmitter<CreateMusicDto | UpdateMusicDto>();
+  @Output() cancel = new EventEmitter<void>();

  MusicStatus = MusicStatus;
  MusicType = MusicType;
@@ -509,10 +509,10 @@ export class MusicFormComponent implements OnInit {
      dateFinished: this.formData.dateFinished ? new Date(this.formData.dateFinished) : undefined
    };

-    this.formSubmit.emit(data);
+    this.save.emit(data);
  }

  onCancel() {
-    this.formCancel.emit();
+    this.cancel.emit();
  }
 }
@@ -368,8 +368,8 @@ export class ShowFormComponent implements OnInit {
  @Input() mode: 'add' | 'edit' = 'add';
  @Input() show?: Show;
  @Input() initialData?: Partial<CreateShowDto>;
-  @Output() formSubmit = new EventEmitter<CreateShowDto | UpdateShowDto>();
-  @Output() formCancel = new EventEmitter<void>();
+  @Output() save = new EventEmitter<CreateShowDto | UpdateShowDto>();
+  @Output() cancel = new EventEmitter<void>();

  ShowStatus = ShowStatus;
  ShowType = ShowType;
@@ -497,10 +497,10 @@ export class ShowFormComponent implements OnInit {
      dateFinished: this.formData.dateFinished ? new Date(this.formData.dateFinished) : undefined
    };

-    this.formSubmit.emit(data);
+    this.save.emit(data);
  }

  onCancel() {
-    this.formCancel.emit();
+    this.cancel.emit();
  }
 }
@@ -31,8 +31,8 @@ import { Show, Comment, ShowStatus, ShowType, UpdateShowDto } from '@library/sha
        <app-show-form
          mode="edit"
          [show]="show()!"
-          (formSubmit)="saveEdit($event)"
-          (formCancel)="cancelEdit()"
+          (save)="saveEdit($event)"
+          (cancel)="cancelEdit()"
        ></app-show-form>
      }

@@ -16,8 +16,6 @@ DISCORD_GUILD_ID="op://Environment Variables - Naomi/Library/discord server id"
 SPONSOR_ROLE_ID="op://Environment Variables - Naomi/Library/sponsor role id"
 MOD_ROLE_ID="op://Environment Variables - Naomi/Library/mod role id"
 STAFF_ROLE_ID="op://Environment Variables - Naomi/Library/staff role id"
-DISCORD_BOT_TOKEN="op://Environment Variables - Naomi/Library/discord bot token"
-LIBRARY_ROLE_ID="op://Environment Variables - Naomi/Library/library role id"

 # Application URL
 BASE_URL="op://Environment Variables - Naomi/Library/localhost url"
@@ -1,6 +1,6 @@
 {
  "name": "@library/source",
-  "version": "1.1.0",
+  "version": "1.0.0",
  "license": "MIT",
  "scripts": {
    "dev": "nx run-many --target=build --all && NODE_ENV=production op run --env-file=dev.env -- node dist/api/main.js",
@@ -16,8 +16,6 @@ DISCORD_GUILD_ID="op://Environment Variables - Naomi/Library/discord server id"
 SPONSOR_ROLE_ID="op://Environment Variables - Naomi/Library/sponsor role id"
 MOD_ROLE_ID="op://Environment Variables - Naomi/Library/mod role id"
 STAFF_ROLE_ID="op://Environment Variables - Naomi/Library/staff role id"
-DISCORD_BOT_TOKEN="op://Environment Variables - Naomi/Library/discord bot token"
-LIBRARY_ROLE_ID="op://Environment Variables - Naomi/Library/library role id"

 # Application URL
 BASE_URL="op://Environment Variables - Naomi/Library/base url"
Author	SHA1	Message	Date
hikari	e6b6131134	fix: allow static assets to be served correctly Fixed the not-found handler to exclude /assets routes, allowing static assets like images to be served with correct MIME types instead of being caught by the SPA fallback handler. Changes: - Updated setNotFoundHandler to check for /assets prefix - Assets are now served directly by fastify-static with correct content-type - Only non-API, non-asset routes fall through to index.html This fixes the default cover image not displaying because it was being served as text/html instead of image/jpeg. Co-Authored-By: Naomi Carrigan <commits@nhcarrigan.com>	2026-02-20 19:45:37 -08:00
hikari	d74a342f63	feat: add default cover image for all media types Added a beautiful default cover image featuring Naomi reading in her cozy library, which will be displayed whenever a media item doesn't have a cover image provided. Changes: - Added default-cover.jpg to frontend public/assets directory - Updated all list components (games, books, music, shows, manga, art) to always display an image using the default as fallback - Updated all detail components to always show cover section with default fallback - Removed conditional rendering of cover images - now always visible - Properly handles different property names (coverImage, coverArt, imageUrl) Benefits: - Consistent visual appearance across all media types - No more empty spaces where cover images would be - Better UX with uniform card layouts - Beautiful placeholder that matches the library theme Co-Authored-By: Naomi Carrigan <commits@nhcarrigan.com>	2026-02-20 19:40:46 -08:00
hikari	b781034fce	feat: add reusable form components and inline editing for all media types Created reusable form components for all media types (Game, Book, Music, Show, Manga, Art) to provide a consistent editing experience across the application. Changes: - Created 6 new form components in shared folder for all media types - Each form component supports both 'add' and 'edit' modes - Forms include all fields: title, author/artist/platform, status, dates, rating, time spent, notes, cover images, tags, and links - Added inline editing to all detail views using form components - Detail views now show edit form inline instead of navigating away - Integrated form components into admin suggestions workflow - Admins can now review and edit all suggestion details before accepting - Added scroll-to-top functionality when clicking edit in all list views - Ensures edit form is visible when opened from paginated lists Benefits: - Consistent UX across all media types - Better editing experience with inline forms - Improved admin suggestion workflow with full editing capabilities - No route navigation for edits (better for SEO and UX) - All forms follow the same styling and interaction patterns Co-Authored-By: Naomi Carrigan <commits@nhcarrigan.com>	2026-02-20 19:29:05 -08:00
hikari	f40f917bc5	feat: implement tiered rate limiting with admin bypass Update rate limiting to be more lenient for authenticated users and bypass limits entirely for admin users: - Unauthenticated users: 100 requests/minute (original limit) - Authenticated users: 500 requests/minute (5x increase) - Admin users: No rate limits (completely bypassed via allowList) This allows the admin to interact with the library without restrictions whilst still protecting against abuse from unauthenticated users. Authenticated users get a much more generous limit for better user experience. Uses @fastify/rate-limit's allowList and dynamic max options to implement the tiered system.	2026-02-20 18:35:21 -08:00
hikari	1fd2086afe	docs: add comprehensive CLAUDE.md project documentation Add detailed project documentation for AI assistants covering: - Git commit guidelines and user permissions - Project structure and technology stack - Database schema with all models - Authentication flow with Discord OAuth - Image upload handling (base64 and regular URLs) - Development workflow and scripts - CI/CD pipeline configuration - Configuration standards (TypeScript, ESLint, Jest) - Secrets management with 1Password CLI - Security features and API route structure - Code style conventions and common gotchas - Deployment instructions This documentation will help AI assistants understand the project architecture, follow established patterns, and work effectively within the codebase.	2026-02-20 18:32:05 -08:00
hikari	3668a67a62	fix: resolve base64 image upload issues This resolves issue #65 by addressing multiple problems that were preventing base64-encoded cover images from being uploaded: 1. Increased Fastify body limit from 1MB to 10MB to accommodate base64-encoded images 2. Removed duplicate coverImage string length validation that was blocking base64 data URLs 3. Fixed base64 size calculation to properly extract and measure just the base64 data portion 4. Updated validateDataUrl regex to allow whitespace in base64 strings 5. Added proper error handling with 400 status codes and helpful error messages instead of 500 errors Users can now successfully upload cover images as base64 data URLs up to 5MB (decoded size) and will receive clear validation error messages if uploads fail. Closes #65	2026-02-20 18:28:24 -08:00