Board scaling: no sideways scrolling
- Revert the pannable narrow canvas. The canvas fits the viewport again and
`.viewport` goes back to `overflow: clip`, so a board can never widen the
document or scroll horizontally.
- Fix the unreadable-narrow-board regression at the real cause instead: cap the
inverse UI compensation at 2x (50% canvas scale). Down to 50% text and
controls keep their physical size; below it the board zooms out as a whole, so
a 200x200 logical tile hosts at most 28px logical text rather than 96px and
content stops overlapping its neighbours.
Touch editing
- Add `touch-action: none` to `.board-grid-entry`, the dnd-kit draggable and its
own drag handle. The 200ms touch activation delay is useless if the browser
has already handed the gesture to page panning and emitted `pointercancel`.
Only edit mode renders this element.
Custom widgets
- Memoize the merged `data`/`status`/`options` passed to `CustomJsxRenderer`.
They were rebuilt every render, so the compiled-template memo never hit and
the new reference-identity boundary key changed on every render, resetting the
error boundary and forcing an extra reconciliation of the widget subtree.
- Keep the cache key when the shared Redis cache is unavailable so the
process-local cache still absorbs polling instead of sending every widget
refresh upstream.
- Reclaim the shared cache's LRU/size/byte bookkeeping for TTL-expired entries
and touch the LRU in the same script, so expired ghosts stop consuming the
64 MiB budget and a read costs one round trip instead of two.
Forwarded IP
- Restore `ipAddressFromHeaders` to the full forwarding chain and add
`trustedIpAddressFromHeaders` for the last hop. Repointing the shared helper
had collapsed MCP failed-auth rate limiting into a single bucket for every
client behind a reverse proxy and replaced the client IP with the proxy IP in
API-key auth logs.
Runtime and restore
- Make the new /appdata ownership migration best-effort. Under `set -e` a mount
that rejects chown (CIFS/SMB, fixed-uid NFS) turned into a container that
refuses to start, and /appdata was never chowned before.
- Report malformed metadata.json as such instead of blaming the archive.
- Classify IPv4/IPv6 link-local addresses (169.254.0.0/16, fe80::/10) as
LAN in Jellyfin location parsing - they can't traverse a router, so a
false WAN reading was possible for common autoconfig/link-local sessions.
- Fix portrait video resolution mislabeling - a 1080x1920 clip was
classified off its long-axis height (1920) and showed as 1440p. Classify
by the short axis instead so orientation doesn't flip the result.
- Raise the compact-mode status column breakpoint from 420 to 540px - at
420 the fixed-width user (200px) and status (190px) columns left almost
no room for the currentlyPlaying column, the widget's primary content.
- Document the new resolution indicator in the media-server widget docs.
Rebuild the integration marquee on Mantine's Marquee, SimpleGrid and
ThemeIcon instead of the hand-rolled grid, track and keyframes, and
reduce the stylesheet to the mask and reduced-motion rule.
Drop the useMounted guards from the login form and let the buttons rely
on the pending state alone, and use Group for the restore flow's file
summary.
Replace the stacked install modals (browse -> details -> import review)
with page-based flows so the primary action is always reachable:
- /manage/custom-widgets/workshop browses submissions as a card grid
with large previews, sitting in a tab next to the installed widgets
- /manage/custom-widgets/workshop/[id] merges the listing, security
review and source setup onto one page with a sticky install footer
- /manage/custom-widgets/publish/[id] replaces the publish modal
- /manage/workshop redirects; its navbar entry is gone
- the Custom CSS picker collapses from three modals to one
Extract useCustomWidgetImport and ImportReviewContent so the Workshop
page and the file/clipboard dialog share one import pipeline.
Votes now show the viewer's own choice filled Reddit-style, backed by a
new user-votes query, and screenshots get a zoomable lightbox.
Rework the installed list onto ManageCollectionItem: show the widget
description, replace the cryptic "JSX - 2" badge with plain request and
origin facts, and swap the toggle and bare pencil for a status badge,
a labelled Edit button and a menu entry for enable/disable.
Fixes found while reviewing:
- importing could run twice and duplicate a widget; guard on pending and
succeeded, and return to the installed list instead of the heavy edit
form
- a background refetch of the submission (window focus, or the
invalidation a vote triggers) reset the source setup and silently wiped
part-typed credentials; key the reset on the sources, not the object
- breadcrumbs raised MISSING_MESSAGE for unmapped dynamic segments; fall
back to the raw segment via t.has
- publishing had no in-flight guard and could post duplicate listings
- tooltips on disabled vote and report controls never fired, making the
sign-in hint unreachable
The widget options ActionIcon rendered inside the widget Card, whose
containerType: size creates a stacking context, trapping its zIndex and
letting the dnd-kit resize handles paint over and block it.
Hoist BoardItemMenu out of the Card to the item root (same layer as the
title badge) and raise it to zIndex 30, above the handles (20). Error
recovery after edits is preserved via resetKeys=[item], which replaces
the resetErrorBoundary prop the in-card menu used to receive.
ajnart
Thomas
Bergasha