Superminaren/hackerspace.sh
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
30bba045f8d8f347d5cc412e33e5cbb604a89d33
hackerspace.sh/CHANGELOG.md
T
Moheeb Zara 30bba045f8 feat: configurable member onboarding + UX/persona research 
A new member who joins via invite code now walks through an
admin-defined onboarding sequence before reaching the app.

Schema (migration 022, folded into schema.sql Section 14):
- space_onboarding_steps: step_key, step_type
  (welcome|code_of_conduct|profile|payment|content), title, body,
  config jsonb, is_enabled, is_required, is_system, sort_order,
  unique per (space, step_key). Full RLS: members read, admin/board
  write, admin delete non-system.
- space_members.onboarding_completed_at + onboarding_progress jsonb.
- Trigger seeds four default steps per space (welcome, code of
  conduct [required], profile, dues). Backfill seeds existing spaces
  and marks all existing members complete so the new gate never
  traps them.

Flow:
- /onboarding (top-level route, outside the (app) group so no
  redirect loop). Progress bar, step counter, back/continue, per-type
  rendering. Profile step calls updateMyProfile; payment step is a
  non-blocking nudge with optional link and "Remind me later".
- (app)/layout.tsx redirects to /onboarding while
  onboarding_completed_at is null.
- createSpace marks the founder complete: founders configure the
  space, they do not run the member flow (matches admin-vs-end-user
  persona research).
- finishOnboarding re-checks required steps server-side so a tampered
  client cannot skip a required code-of-conduct acknowledgement.
  skipOnboarding only works when nothing is required.

Admin config:
- Settings -> Onboarding tab: reorder, edit title/body/payment link,
  toggle enabled/required, add custom content steps, delete
  non-system steps.

Safety:
- components/safe-markdown.tsx renders admin-authored markdown and a
  sanitized subset of HTML (rehype-raw + rehype-sanitize). Added
  those two deps.

Also:
- bio added to updateMyProfileSchema (members can self-set it; not
  blocked by the migration-015 trigger).
- docs/UX_AND_PERSONAS.md: 4 personas and prioritized UX audit
  findings. Onboarding was finding #1; 2-6 deferred and tracked.

266/266 unit tests pass. Production build clean, /onboarding in the
route table. Migration 022 applies idempotently on the next deploy.
2026-05-15 15:38:40 -07:00

4.8 KiB
Raw Blame History

Changelog

All notable changes to this project are documented here. Format follows Keep a Changelog and the project loosely follows Semantic Versioning.

[Unreleased]

Added

  • Configurable member onboarding: a new member who joins via invite code is walked through an admin-defined sequence of steps at /onboarding before reaching the app. Built-in step types: welcome, code of conduct (required acknowledgement), profile, dues/payment nudge. Admins can add custom content steps with sanitized markdown/HTML, reorder, enable/disable, and mark steps required from Settings -> Onboarding. Founders skip the member flow (their onboarding is space configuration). Existing members were backfilled as completed so nobody is trapped. Server-side enforcement of required steps. New tables: space_onboarding_steps; new columns space_members.onboarding_completed_at and onboarding_progress.
  • SafeMarkdown component (react-markdown + remark-gfm + rehype-raw + rehype-sanitize) for rendering admin-authored markdown/HTML without XSS.
  • docs/UX_AND_PERSONAS.md: persona model and the UX audit that drove onboarding.
  • bio added to the self-service profile schema.
  • Forum at /forum: top-level discussion threads with categories, pinning, locking. Author or admin/board can edit; admin can delete.
  • Polymorphic comment threads on proposals, incidents, and policies. New comments table keyed on (entity_type, entity_id). Renders markdown.
  • User-creatable chat channels: inline "+ New channel" form in /comms (name, description, type). RLS now allows any member to create; default channels stay protected.
  • Custom membership tiers with prices: new space_tiers table per space. Settings -> Tiers tab to list, create, edit (including inline price edit), archive, and delete custom tiers. Built-in plus/basic/associate tiers seed on space creation and on existing spaces via backfill. space_members.tier_id FK backfilled from the legacy enum.
  • Customizable role labels and custom org roles: space_role_labels (rename/recolor built-ins per space) and space_custom_roles (non-privileged extra labels) with member m2m. Server actions wired; UI surface pending in a follow-up.
  • Multi-code invites: space_invites with per-code expiry, max-use cap, and enable/disable. Legacy spaces.invite_code backfilled as a permanent enabled invite. Settings -> Invites tab to manage. joinSpace honors any valid invite and increments uses_count.
  • Knowledge base markdown rendering: clicking a KB entry opens a modal that renders content as markdown via react-markdown + remark-gfm.
  • AtlasLogo as the brand mark: replaces the terminal icon on the landing nav and footer; public/logo.svg is the favicon.
  • Live site link in README.md: https://hackerspace.sh.

Changed

  • Secrets vault is now encrypted at rest: AES-256-GCM with a per-secret IV using a SECRETS_ENCRYPTION_KEY env var. The /ops list endpoint no longer sends plaintext or ciphertext to the client. A new revealSecret(id) server action is the only path to plaintext and writes a secret.revealed row to activity_log. Existing legacy plaintext rows continue to work.

Added (continued)

  • Production deployment to a self-hosted DigitalOcean Droplet with automatic HTTPS via Caddy and Let's Encrypt.
  • GitHub Actions workflow that pushes a deploy on every commit to main. Migrations are applied automatically via _migrations_applied tracking.
  • Daily encrypted pg_dumpall backup cron, retained 14 days, written to the persistent block volume.
  • Resend SMTP integration for transactional email (GoTrue).
  • Open-source release scaffolding: LICENSE (MIT), CONTRIBUTING.md, SECURITY.md, CHANGELOG.md, refreshed README.md, docs/WEBHOOKS.md.
  • GitHub repository link on the landing page.
  • Webhook signing secret is now displayed in the settings UI with show/hide and copy-to-clipboard.

Changed

  • Mobile responsiveness pass on the Kanban board, members table, payments table, proposal voting grids, and the landing mini board preview.
  • members directory now respects the member_directory_visibility space setting for non-admin viewers.
  • lib/actions/settings.ts now persists mission_statement alongside the rest of the space metadata.

Removed

  • @vercel/analytics dependency and all references to Vercel hosting. The project is self-hosted on a Droplet.
  • Dead v0 codegen artifacts.

Fixed

  • Auth container crash-loop on first boot caused by an empty DISABLE_SIGNUP env value.
  • Kong port-binding race that left supabase.hackerspace.sh returning 502 after a fresh stack bring-up.

[0.1.0] - 2026-03-10

Initial pre-production cut. See docs/HANDOFF.md for the full session-by-session history of work prior to the open-source release.

Reference in New Issue View Git Blame Copy Permalink