@commonpub/layer 0.13.0 → 0.14.0

package/components/DiscussionItem.vue

@@ -5,10 +5,13 @@ const props = defineProps<{
   authorAvatarUrl?: string | null;
   replyCount: number;
   voteCount: number;
+  voteScore?: number;
   lastReplyAt?: Date;
   solved?: boolean;
 }>();
 
+const displayScore = computed(() => props.voteScore ?? props.voteCount);
+
 const emit = defineEmits<{
   upvote: [];
   downvote: [];
@@ -33,7 +36,7 @@ const lastReplyFormatted = computed((): string | null => {
       >
         <i class="fa-solid fa-chevron-up"></i>
       </button>
-      <span class="cpub-vote-count">{{ voteCount }}</span>
+      <span class="cpub-vote-count">{{ displayScore }}</span>
       <button
         class="cpub-vote-btn"
         aria-label="Downvote"

package/components/PollDisplay.vue

@@ -16,7 +16,7 @@ const { data, refresh } = await useFetch<{ options: PollOptionResult[]; userVote
 
 const totalVotes = computed(() => {
   if (!data.value) return 0;
-  return data.value.options.reduce((sum, opt) => sum + opt.voteCount, 0);
+  return data.value.options.reduce((sum: number, opt: { voteCount: number }) => sum + opt.voteCount, 0);
 });
 
 const hasVoted = computed(() => !!data.value?.userVote);

package/components/hub/HubDiscussions.vue

@@ -29,6 +29,7 @@ const discussionPosts = computed(() => {
           :author="post.author.name"
           :reply-count="post.replyCount"
           :vote-count="post.likeCount"
+          :vote-score="post.voteScore"
         />
       </NuxtLink>
       <div v-else>
@@ -37,6 +38,7 @@ const discussionPosts = computed(() => {
           :author="post.author.name"
           :reply-count="post.replyCount"
           :vote-count="post.likeCount"
+          :vote-score="post.voteScore"
         />
       </div>
     </template>

package/components/nav/MobileNavRenderer.vue

@@ -30,7 +30,7 @@ function isVisible(item: NavItem): boolean {
 }
 
 function visibleChildren(item: NavItem): NavItem[] {
-  return (item.children ?? []).filter(c => isVisible(c));
+  return (item.children ?? []).filter((c: NavItem) => isVisible(c));
 }
 </script>
 

package/components/nav/NavDropdown.vue

@@ -31,7 +31,7 @@ function isChildVisible(child: NavItem): boolean {
 }
 
 const visibleChildren = computed(() =>
-  (props.item.children ?? []).filter(c => isChildVisible(c)),
+  (props.item.children ?? []).filter((c: NavItem) => isChildVisible(c)),
 );
 
 function handleKeydown(e: KeyboardEvent): void {

package/components/nav/NavLink.vue

@@ -9,7 +9,7 @@ const isExternal = computed(() => props.item.type === 'external' && props.item.h
 </script>
 
 <template>
-  <span v-if="item.disabled" class="cpub-nav-link cpub-nav-panel-item--disabled">
+  <span v-if="item.disabled" class="cpub-nav-link cpub-nav-link--disabled">
     <i v-if="item.icon" :class="item.icon"></i> {{ item.label }}
   </span>
   <a
@@ -34,7 +34,7 @@ const isExternal = computed(() => props.item.type === 'external' && props.item.h
 <style scoped>
 .cpub-nav-external-icon {
   font-size: 8px;
-  opacity: 0.5;
+  color: var(--text-faint);
   margin-left: 2px;
 }
 </style>

package/composables/useAuth.ts

@@ -20,6 +20,21 @@ export interface ClientAuthSession {
   expiresAt: string;
 }
 
+interface AuthResponse {
+  user: ClientAuthUser | null;
+  session: ClientAuthSession | null;
+}
+
+/** Type-safe POST fetch that avoids Nuxt $fetch TS2589 deep instantiation */
+async function authPost(url: string, body: Record<string, unknown>): Promise<AuthResponse | null> {
+  return ($fetch as (url: string, opts: Record<string, unknown>) => Promise<AuthResponse | null>)(url, {
+    method: 'POST',
+    body,
+    credentials: 'include',
+    headers: { 'Content-Type': 'application/json' },
+  });
+}
+
 export function useAuth() {
   const user = useState<ClientAuthUser | null>('auth-user', () => null);
   const session = useState<ClientAuthSession | null>('auth-session', () => null);
@@ -28,27 +43,19 @@ export function useAuth() {
   const isAdmin = computed(() => user.value?.role === 'admin');
 
   async function signIn(email: string, password: string): Promise<void> {
-    const data = await $fetch<{ user: ClientAuthUser | null; session: ClientAuthSession | null }>('/api/auth/sign-in/email', {
-      method: 'POST',
-      body: { email, password },
-      credentials: 'include',
-    });
+    const data = await authPost('/api/auth/sign-in/email', { email, password });
     user.value = data?.user ?? null;
     session.value = data?.session ?? null;
   }
 
   async function signUp(email: string, password: string, username: string): Promise<void> {
-    const data = await $fetch<{ user: ClientAuthUser | null; session: ClientAuthSession | null }>('/api/auth/sign-up/email', {
-      method: 'POST',
-      body: { email, password, username, name: username },
-      credentials: 'include',
-    });
+    const data = await authPost('/api/auth/sign-up/email', { email, password, username, name: username });
     user.value = data?.user ?? null;
     session.value = data?.session ?? null;
   }
 
   async function signOut(): Promise<void> {
-    await $fetch('/api/auth/sign-out', { method: 'POST', credentials: 'include', headers: { 'Content-Type': 'application/json' }, body: {} });
+    await authPost('/api/auth/sign-out', {});
     user.value = null;
     session.value = null;
     await navigateTo('/');
@@ -61,14 +68,12 @@ export function useAuth() {
   async function refreshSession(): Promise<void> {
     if (import.meta.server) return;
     try {
-      const data = await $fetch<{ user: ClientAuthUser | null; session: ClientAuthSession | null }>(
-        '/api/me',
-        { credentials: 'include' },
+      const data = await ($fetch as (url: string, opts: Record<string, unknown>) => Promise<AuthResponse | null>)(
+        '/api/me', { credentials: 'include' },
       );
       user.value = data?.user ?? null;
       session.value = data?.session ?? null;
     } catch {
-      // Session invalid or server unreachable — clear client state
       user.value = null;
       session.value = null;
     }

package/composables/useFeatures.ts

@@ -1,4 +1,6 @@
 // Feature flag composable — reactive access to enabled features
+// Initializes from build-time runtime config, then hydrates from /api/features
+// to pick up runtime DB overrides set via admin panel.
 
 export interface FeatureFlags {
   content: boolean;
@@ -16,24 +18,41 @@ export interface FeatureFlags {
   emailNotifications: boolean;
 }
 
+let hydrated = false;
+
 export function useFeatures() {
   const config = useRuntimeConfig();
-  const flags = config.public.features as unknown as FeatureFlags;
+  const buildFlags = config.public.features as unknown as FeatureFlags;
+
+  // Shared reactive state — initialized from build-time config
+  const flags = useState<FeatureFlags>('feature-flags', () => ({ ...buildFlags }));
+
+  // On client, fetch dynamic features once to pick up DB overrides
+  if (import.meta.client && !hydrated) {
+    hydrated = true;
+    ($fetch as Function)('/api/features')
+      .then((dynamic: FeatureFlags) => {
+        if (dynamic && typeof dynamic === 'object') {
+          flags.value = { ...flags.value, ...dynamic };
+        }
+      })
+      .catch(() => { /* use build-time defaults on failure */ });
+  }
 
   return {
     features: flags,
-    content: computed(() => flags.content),
-    social: computed(() => flags.social),
-    hubs: computed(() => flags.hubs),
-    docs: computed(() => flags.docs),
-    video: computed(() => flags.video),
-    contests: computed(() => flags.contests),
-    events: computed(() => flags.events),
-    learning: computed(() => flags.learning),
-    explainers: computed(() => flags.explainers),
-    editorial: computed(() => flags.editorial),
-    federation: computed(() => flags.federation),
-    admin: computed(() => flags.admin),
-    emailNotifications: computed(() => flags.emailNotifications),
+    content: computed(() => flags.value.content),
+    social: computed(() => flags.value.social),
+    hubs: computed(() => flags.value.hubs),
+    docs: computed(() => flags.value.docs),
+    video: computed(() => flags.value.video),
+    contests: computed(() => flags.value.contests),
+    events: computed(() => flags.value.events),
+    learning: computed(() => flags.value.learning),
+    explainers: computed(() => flags.value.explainers),
+    editorial: computed(() => flags.value.editorial),
+    federation: computed(() => flags.value.federation),
+    admin: computed(() => flags.value.admin),
+    emailNotifications: computed(() => flags.value.emailNotifications),
   };
 }

package/layouts/default.vue

@@ -21,7 +21,11 @@ const mobileMenuOpen = ref(false);
 const openDropdown = ref<string | null>(null);
 
 // Fetch configurable nav items (falls back to defaults on server)
-const { data: navItems } = await useFetch<NavItem[]>('/api/navigation/items');
+// useAsyncData avoids Nuxt's typed route inference which triggers TS2589
+const { data: navItems } = await useAsyncData('nav-items', () =>
+  ($fetch as Function)('/api/navigation/items') as Promise<NavItem[]>,
+  { default: () => [] as NavItem[] },
+);
 
 function toggleDropdown(name: string): void {
   openDropdown.value = openDropdown.value === name ? null : name;
@@ -224,42 +228,44 @@ const userUsername = computed(() => user.value?.username ?? '');
 }
 .cpub-topbar-logo { display: flex; align-items: center; flex-shrink: 0; text-decoration: none; color: var(--text); }
 
-.cpub-topbar-nav { display: flex; align-items: center; gap: 2px; margin-left: 24px; }
-.cpub-nav-link { font-size: 12px; color: var(--text-dim); padding: 5px 12px; border: var(--border-width-default) solid transparent; background: none; text-decoration: none; transition: color 0.15s, background 0.15s; display: flex; align-items: center; gap: 6px; }
-.cpub-nav-link i { font-size: 10px; }
-.cpub-nav-link:hover { color: var(--text); background: var(--surface2); }
-.cpub-nav-link.router-link-active { color: var(--text); background: var(--surface2); border-color: var(--border); }
+/* Nav styles use :deep() to reach into NavRenderer/NavDropdown/NavLink child components */
+:deep(.cpub-topbar-nav) { display: flex; align-items: center; gap: 2px; margin-left: 24px; }
+:deep(.cpub-nav-link) { font-size: 12px; color: var(--text-dim); padding: 5px 12px; border: var(--border-width-default) solid transparent; background: none; text-decoration: none; transition: color 0.15s, background 0.15s; display: flex; align-items: center; gap: 6px; }
+:deep(.cpub-nav-link i) { font-size: 10px; }
+:deep(.cpub-nav-link:hover) { color: var(--text); background: var(--surface2); }
+:deep(.cpub-nav-link.router-link-active) { color: var(--text); background: var(--surface2); border-color: var(--border); }
+:deep(.cpub-nav-link--disabled) { opacity: 0.35; cursor: not-allowed; pointer-events: none; }
 
 /* Nav dropdowns */
-.cpub-nav-dropdown { position: relative; }
-.cpub-nav-trigger { cursor: pointer; }
-.cpub-nav-caret { font-size: 7px !important; margin-left: 2px; transition: transform 0.15s; }
-.cpub-nav-trigger--open .cpub-nav-caret { transform: rotate(180deg); }
-.cpub-nav-panel {
+:deep(.cpub-nav-dropdown) { position: relative; }
+:deep(.cpub-nav-trigger) { cursor: pointer; }
+:deep(.cpub-nav-caret) { font-size: 7px !important; margin-left: 2px; transition: transform 0.15s; }
+:deep(.cpub-nav-trigger--open .cpub-nav-caret) { transform: rotate(180deg); }
+:deep(.cpub-nav-panel) {
   position: absolute; top: 100%; left: 0; min-width: 180px;
   background: var(--surface); border: var(--border-width-default) solid var(--border);
   box-shadow: var(--shadow-md); z-index: 200; display: flex; flex-direction: column; padding: 4px 0;
   margin-top: 4px;
 }
-.cpub-nav-panel-item {
+:deep(.cpub-nav-panel-item) {
   display: flex; align-items: center; gap: 8px; padding: 8px 14px;
   font-size: 12px; color: var(--text-dim); text-decoration: none;
   transition: background 0.1s, color 0.1s; cursor: pointer;
 }
-.cpub-nav-panel-item:hover { background: var(--surface2); color: var(--text); }
-.cpub-nav-panel-item i { width: 14px; text-align: center; font-size: 11px; }
-.cpub-nav-panel-item--disabled {
+:deep(.cpub-nav-panel-item:hover) { background: var(--surface2); color: var(--text); }
+:deep(.cpub-nav-panel-item i) { width: 14px; text-align: center; font-size: 11px; }
+:deep(.cpub-nav-panel-item--disabled) {
   opacity: 0.35; cursor: not-allowed; pointer-events: none;
 }
 
-/* Mobile nav sections */
-.cpub-mobile-section-label {
+/* Mobile nav sections — :deep() for MobileNavRenderer child component */
+:deep(.cpub-mobile-section-label) {
   font-family: var(--font-mono); font-size: 9px; font-weight: 700;
   text-transform: uppercase; letter-spacing: 0.1em; color: var(--text-faint);
   padding: 10px 20px 2px; margin-top: 4px;
 }
-.cpub-mobile-link--indent { padding-left: 36px; }
-.cpub-mobile-link--disabled { opacity: 0.35; cursor: not-allowed; pointer-events: none; }
+:deep(.cpub-mobile-link--indent) { padding-left: 36px; }
+:deep(.cpub-mobile-link--disabled) { opacity: 0.35; cursor: not-allowed; pointer-events: none; }
 
 .cpub-topbar-spacer { flex: 1; }
 .cpub-topbar-actions { display: flex; align-items: center; gap: 6px; }
@@ -288,10 +294,10 @@ const userUsername = computed(() => user.value?.username ?? '');
 
 .cpub-mobile-toggle { display: none; width: 32px; height: 32px; background: none; border: var(--border-width-default) solid transparent; color: var(--text-dim); font-size: 16px; cursor: pointer; align-items: center; justify-content: center; }
 .cpub-mobile-menu { display: none; position: fixed; inset: 0; top: 48px; z-index: 99; background: var(--color-surface-overlay-light); }
-.cpub-mobile-nav { background: var(--surface); border-bottom: var(--border-width-default) solid var(--border); padding: 8px 0; display: flex; flex-direction: column; box-shadow: var(--shadow-md); }
-.cpub-mobile-link { display: flex; align-items: center; gap: 10px; padding: 10px 20px; font-size: 13px; color: var(--text-dim); text-decoration: none; transition: background 0.1s; }
-.cpub-mobile-link:hover { background: var(--surface2); color: var(--text); }
-.cpub-mobile-link i { width: 16px; text-align: center; font-size: 12px; }
+:deep(.cpub-mobile-nav) { background: var(--surface); border-bottom: var(--border-width-default) solid var(--border); padding: 8px 0; display: flex; flex-direction: column; box-shadow: var(--shadow-md); }
+:deep(.cpub-mobile-link) { display: flex; align-items: center; gap: 10px; padding: 10px 20px; font-size: 13px; color: var(--text-dim); text-decoration: none; transition: background 0.1s; }
+:deep(.cpub-mobile-link:hover) { background: var(--surface2); color: var(--text); }
+:deep(.cpub-mobile-link i) { width: 16px; text-align: center; font-size: 12px; }
 .cpub-mobile-divider { height: 2px; background: var(--border2); margin: 4px 16px; }
 .cpub-mobile-nav-extra { border-top: var(--border-width-default) solid var(--border2); }
 

package/middleware/feature-gate.global.ts

@@ -1,7 +1,10 @@
 // Global client-side middleware that mirrors server/middleware/features.ts.
 // Prevents client-side navigation to feature-gated pages when the flag is disabled.
+// Uses useState('feature-flags') which is hydrated by useFeatures() from /api/features.
 
-const ROUTE_FEATURE_MAP: Record<string, keyof import('../composables/useFeatures').FeatureFlags> = {
+import type { FeatureFlags } from '../composables/useFeatures';
+
+const ROUTE_FEATURE_MAP: Record<string, keyof FeatureFlags> = {
   '/learn': 'learning',
   '/docs': 'docs',
   '/videos': 'video',
@@ -14,9 +17,10 @@ const ROUTE_FEATURE_MAP: Record<string, keyof import('../composables/useFeatures
 export default defineNuxtRouteMiddleware((to) => {
   for (const [prefix, feature] of Object.entries(ROUTE_FEATURE_MAP)) {
     if (to.path === prefix || to.path.startsWith(prefix + '/')) {
-      const config = useRuntimeConfig();
-      const flags = config.public.features as Record<string, boolean>;
-      if (!flags[feature]) {
+      // Prefer reactive state (hydrated from /api/features), fall back to build-time config
+      const featureState = useState<FeatureFlags | null>('feature-flags', () => null);
+      const flags = featureState.value ?? (useRuntimeConfig().public.features as Record<string, boolean>);
+      if (!(flags as Record<string, boolean>)[feature]) {
         throw createError({ statusCode: 404, statusMessage: 'Not Found' });
       }
       return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@commonpub/layer",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "type": "module",
   "main": "./nuxt.config.ts",
   "files": [
@@ -30,7 +30,7 @@
     "@aws-sdk/client-s3": "^3.1010.0",
     "@commonpub/explainer": "^0.7.11",
     "@commonpub/schema": "^0.13.0",
-    "@commonpub/server": "^2.39.0",
+    "@commonpub/server": "^2.41.0",
     "@tiptap/core": "^2.11.0",
     "@tiptap/extension-bold": "^2.11.0",
     "@tiptap/extension-bullet-list": "^2.11.0",
@@ -53,13 +53,13 @@
     "vue": "^3.4.0",
     "vue-router": "^4.3.0",
     "zod": "^4.3.6",
-    "@commonpub/docs": "0.6.2",
+    "@commonpub/auth": "0.5.1",
     "@commonpub/editor": "0.7.9",
+    "@commonpub/docs": "0.6.2",
     "@commonpub/learning": "0.5.0",
+    "@commonpub/protocol": "0.9.9",
     "@commonpub/config": "0.10.0",
-    "@commonpub/auth": "0.5.1",
-    "@commonpub/ui": "0.8.5",
-    "@commonpub/protocol": "0.9.9"
+    "@commonpub/ui": "0.8.5"
   },
   "devDependencies": {
     "@testing-library/jest-dom": "^6.9.1",

package/pages/contests/[slug]/index.vue

@@ -140,6 +140,7 @@ async function withdrawEntry(entryId: string): Promise<void> {
           <ContestRules v-if="c?.rules" :rules="c.rules" />
           <ContestPrizes v-if="c?.prizes?.length" :prizes="c.prizes" />
           <ContestJudges v-if="c?.judges?.length" :judge-ids="c.judges" />
+          <ContestJudgeManager v-if="isOwner && c" :contest-slug="slug" :is-owner="isOwner" />
           <ContestEntries
             :entries="entries"
             :contest-status="c?.status"

package/pages/events/[slug]/index.vue

@@ -15,7 +15,7 @@ const rsvpLoading = ref(false);
 
 const myRsvpStatus = computed((): AttendeeStatus | null => {
   if (!isAuthenticated.value || !attendees.value) return null;
-  const found = attendees.value.items.find(a => a.userId === user.value?.id);
+  const found = attendees.value.items.find((a: AttendeeItem) => a.userId === user.value?.id);
   return found?.status ?? null;
 });
 

package/pages/federated-hubs/[id]/index.vue

@@ -74,6 +74,7 @@ const postsVM = computed<HubPostViewModel[]>(() => {
       },
       createdAt: String(p.publishedAt ?? p.receivedAt),
       likeCount: (p.localLikeCount ?? 0) + (p.remoteLikeCount ?? 0),
+      voteScore: 0,
       replyCount: (p.localReplyCount ?? 0) + (p.remoteReplyCount ?? 0),
       isPinned: p.isPinned ?? false,
       isLocked: false,

package/pages/hubs/[slug]/index.vue

@@ -72,6 +72,7 @@ const postsVM = computed<HubPostViewModel[]>(() => {
     },
     createdAt: p.createdAt,
     likeCount: p.likeCount ?? 0,
+    voteScore: p.voteScore ?? 0,
     replyCount: p.replyCount ?? 0,
     isPinned: p.isPinned ?? false,
     isLocked: p.isLocked ?? false,

package/server/api/contests/[slug]/judge.post.ts

@@ -9,7 +9,7 @@ export default defineEventHandler(async (event): Promise<{ success: boolean }> =
 
   const result = await judgeContestEntry(db, input.entryId, input.score, user.id, input.feedback);
   if (!result.judged) {
-    throw createError({ statusCode: 403, message: result.error ?? 'Judging failed' });
+    throw createError({ statusCode: 403, statusMessage: result.error ?? 'Judging failed' });
   }
 
   return { success: true };

package/types/hub.ts

@@ -23,6 +23,7 @@ export interface HubPostViewModel {
   author: HubPostAuthor
   createdAt: string
   likeCount: number
+  voteScore: number
   replyCount: number
   isPinned: boolean
   isLocked: boolean