bretton.dev / coves-frontend
Coves frontend - a photon fork
Star
Fork 0
Watch

Commits on main

feat(sidebar): open the source-code link in a new tab main
Bretton committed
feat(sidebar): link the App Store and Google Play apps
Bretton committed
fix(markdown): localize only routable links and own-instance profiles
Bretton committed
fix(test): bump nwsapi to 2.2.28 so the real Menu works in jsdom
Bretton committed
perf: cut bundle, round trips and re-renders across the web client
Bretton committed
feat(post): add Bluesky embed cards and compact previews
Bretton committed
fix(ssr): preserve caller addresses for AppView rate limits
Bretton committed
feat(discover): recover hot feed pagination safely
Bretton committed
feat(post): add feed-aware back navigation and refine post header
Bretton committed
feat(profile): add production-ready profile editing
Bretton committed
fix(ux): correct post handoffs and search navigation
Bretton committed
fix(markdown): render image syntax as alt text only, never media
Bretton committed
test(post): load Post.svelte once so the sensitive-media suite cannot time out
Bretton committed
fix(auth): recover expired sessions centrally without losing drafts
Bretton committed
feat(auth): hand web OAuth to Go and render login failures once
Bretton committed
fix(frontend): preserve writes and improve error feedback
Bretton committed
fix(pagination): complete cursor navigation and enforce ORIGIN
Bretton committed
fix(auth): avoid proxy session preflights and recover expired sessions
Bretton committed
fix(markdown): render GFM tables instead of a single empty cell
Bretton committed
fix(forms): prevent duplicate login and post submissions
Bretton committed
fix(profile): redirect guests and confirm community actions
Bretton committed
fix(post): gate untrusted embed media URLs before they reach the DOM
Bretton committed
fix(compliance): add policy links and Photon source notices
Bretton committed
fix(csp): allow Svelte's SSR event-replay handler by hash
Bretton committed
feat(richtext): compile compose markup into facets on the write side
Bretton committed
chore(static): remove Photon's Android assetlinks.json
Bretton committed
chore(ci): add pnpm run ci as the local merge gate
Bretton committed
fix(post): correct Tailwind @reference path after permalink move
Bretton committed
style(toast): restyle toasts to match Bluesky's proportions
Bretton committed
fix(post): redirect aliased permalinks to their canonical URL
Bretton committed
chore(editor): remove image upload and non-facet formatting controls
Bretton committed
feat(post): submit NSFW self-label, drop unsupported upload controls
Bretton committed
fix(auth): resolve login handles through the AppView
Bretton committed
feat(post): carry the record owner in post and comment permalinks
Bretton committed
fix(post): conceal NSFW content until explicitly revealed
Bretton committed
feat(vote): add downvote controls to posts and comments
Bretton committed
fix(community): hide unavailable community creation
Bretton committed
fix(a11y): expose navbar to screen readers
Bretton committed
fix(auth): keep unresolved handles on the sign-in form
Bretton committed
docs(claude): trim CLAUDE.md to project facts
Bretton committed
feat(moderation): expose account and community blocks
Bretton committed
refactor(shell): retire the multi-account switcher, add logout to the nav menu
Bretton committed
test(ci): give ESLint-driven tests a CI-tolerant timeout
Bretton committed
feat(ui): migrate icons from Heroicons to Lucide
Bretton committed
fix(ssr): allow trusted internal feed fetches
Bretton committed
feat(ssr): enable SSR by default, add ORIGIN boot check, refresh env docs
Bretton committed
feat(ssr): per-request locale, session, and credential isolation — SSR is safe to enable
Bretton committed
fix(security): stop the service worker caching session-bearing responses
Bretton committed
feat(log): isomorphic scrubbed logger — closes the SSR universal-module logging blocker
Bretton committed
feat(deploy): production compose project, deploy script, and /api/me client-address fix
Bretton committed
feat(embeds): render Streamable links as inline click-to-play players
Bretton committed
feat(community): render !name@origin and Lemmy-style canonical /c/ URLs
Bretton committed
refactor(quality): live-code cleanup, dead-code sweep, and hardening pass
Bretton committed
feat(security): app-owned CSP and security headers, fixed embed allowlist
Bretton committed
fix(state): break auth ↔ instance import cycle that broke dev with fresh storage
Bretton committed
fix(auth): enforce instance lock server-side, drop stale profile on unauthenticated sync
Bretton committed
fix(proxy): harden API proxy header boundary, transport, and response policy
Bretton committed
feat(server): structured, scrubbed server logging with request correlation
Bretton committed
chore(ci): pin actions and base image by hash, attest builds, trim context
Bretton committed
fix(security): allowlist http/https at every post-URL sink, drop /go open redirect
Bretton committed