Commit Graph

97 Commits

Author SHA1 Message Date
Jage9
ba34ce4e9b Tighten auth helper origin checks 2026-03-08 21:58:19 -04:00
Jage9
6e8ecf44c1 Require auth session for media proxy 2026-03-08 21:44:27 -04:00
Jage9
6368187ee4 Add sample server env file 2026-03-08 20:56:41 -04:00
Jage9
78bc931cce Harden origin and media URL security 2026-03-08 20:51:50 -04:00
Jage9
5dafc05c8e Clarify command metadata docs 2026-03-08 19:42:19 -04:00
Jage9
f5cb5ebb78 Move command metadata authority to server 2026-03-08 19:35:04 -04:00
Jage9
1741bcc2bc Add context-aware command palette 2026-03-08 19:27:23 -04:00
Jage9
26d6bafce0 Support Cmd shortcuts in canvas text-edit modes 2026-03-02 00:24:46 -05:00
Jage9
429b295a64 Defer world activation until welcome preflight confirmation 2026-02-28 20:58:23 -05:00
Jage9
449f2c9530 Require targetUserId for item transfers 2026-02-28 20:26:40 -05:00
Jage9
daab7bb759 Support account-wide item transfer targets and fix delete confirm exit 2026-02-28 20:24:37 -05:00
Jage9
906c320e51 Add admin delete-account flow with yes/no confirmation 2026-02-28 20:06:43 -05:00
Jage9
b0fa040d33 Add z item management menu with transfer and yes/no confirmation 2026-02-28 05:11:49 -05:00
Jage9
027f04e58d Revert "Enforce websocket origin allowlist with secure-mode config"
This reverts commit cf30229b37.
2026-02-28 04:52:44 -05:00
Jage9
cf30229b37 Enforce websocket origin allowlist with secure-mode config 2026-02-28 04:47:07 -05:00
Jage9
b8843e7c21 Move auth session persistence to true HttpOnly cookies 2026-02-28 04:29:57 -05:00
Jage9
cf54132c25 Make websocket transport secure by default 2026-02-28 03:52:05 -05:00
Jage9
294ccfa902 Add emit initial delay option for widget audio emit 2026-02-28 03:21:55 -05:00
Jage9
3bd4f35653 Docs: add widget global emitLoopDelay default 2026-02-28 03:14:21 -05:00
Jage9
b0b6744a52 Enable PgUp/PgDn jumps in item property list cycling 2026-02-28 02:46:50 -05:00
Jage9
932ab68be5 Fix emit replay looping and add PgUp/PgDn option stepping 2026-02-28 02:38:26 -05:00
Jage9
887aad9435 Add emit loop delay control for item emit audio 2026-02-28 02:30:10 -05:00
Jage9
240d2ecfe8 Update slash-command help and add Feb 27 changelog entries 2026-02-27 19:32:37 -05:00
Jage9
8ba0398d25 Add reboot and version slash commands with permission guard 2026-02-27 04:40:36 -05:00
Jage9
464d39f78b Add server chat slash commands for me and uptime 2026-02-27 04:33:54 -05:00
Jage9
aba319751b Move admin menu wiring server-side and filter ban/unban lists 2026-02-27 03:49:28 -05:00
Jage9
52584197e9 Implement server-authoritative roles and Shift+Z admin flows 2026-02-27 03:37:20 -05:00
Jage9
1508e7e371 Broadcast pickup and drop system chat messages to other users 2026-02-27 02:39:25 -05:00
Jage9
31ecb8eb5c Store item actor ids with display-name snapshots and nickname carrier display 2026-02-27 02:34:58 -05:00
Jage9
4fcd006856 Track item updatedBy as readonly metadata and inspect field 2026-02-27 02:27:16 -05:00
Jage9
d74937b2dc Set default clock alarm time and gate alarm time field by visibility 2026-02-27 02:11:08 -05:00
Jage9
78be266fcf Add clock alarm scheduling with formatted alarm time options 2026-02-27 02:06:51 -05:00
Jage9
4840aa454b Move readonly item property display values to server 2026-02-27 01:32:25 -05:00
Jage9
4ed52649f1 Add spoken spatial clock announcements with top-of-hour mode 2026-02-27 01:05:23 -05:00
Jage9
08d74b8e2c Add Shift+Enter secondary item action with radio handler 2026-02-25 01:11:47 -05:00
Jage9
9eaa330c3e Add radio now-playing metadata polling and readonly props 2026-02-25 00:52:28 -05:00
Jage9
e7d3b41782 Harden auth flow against timing and event-loop blocking 2026-02-25 00:17:05 -05:00
Jage9
45db5762a1 Move nickname/position state server-side per account 2026-02-24 23:37:10 -05:00
Jage9
06d5e3fbf3 Show server auth policy limits in client auth UI 2026-02-24 22:35:29 -05:00
Jage9
d7be6d999a Update docs to use default local run commands 2026-02-24 22:14:23 -05:00
Jage9
bf3bc90f2a Add account auth with websocket login/register and sessions 2026-02-24 22:03:10 -05:00
Jage9
1938f239e6 Set new radio default emit range to 10 2026-02-24 21:24:31 -05:00
Jage9
297f1c0c1a Broadcast teleport landing sound to nearby users 2026-02-24 20:55:02 -05:00
Jage9
686d065bf9 Fix carried use-sound origin and centralize sound normalization 2026-02-24 20:34:48 -05:00
Jage9
c38778451d Remove client fallback item metadata inference 2026-02-24 19:57:05 -05:00
Jage9
fe07fa3e8f Use structured piano status packets instead of message text matching 2026-02-24 19:56:44 -05:00
Jage9
7488ac9f67 Make spawn and movement acceptance server-authoritative 2026-02-24 19:52:38 -05:00
Jage9
3c52d35983 refactor: remove per-type module.py and simplify plugin wiring 2026-02-24 18:56:42 -05:00
Jage9
fcb5e85b13 refactor: complete server-first item schema wiring and plugin contract checks 2026-02-24 18:48:08 -05:00
Jage9
3718449156 refactor: split item type packages into definition/validator/actions 2026-02-24 03:08:30 -05:00