includio-cms 0.0.68 → 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,181 @@
+# Changelog
+
+All notable changes to includio-cms are documented here.
+Generated from `src/lib/updates/` — do not edit manually.
+
+## 0.1.0 — 2026-02-17
+
+Stabilization — pagination, language switcher, and more
+
+### Added
+- Server-side pagination for collection entries (limit/offset/orderBy)
+- Persistent page index and active tab across navigation
+- countEntries adapter method for total count queries
+- Automatic fallback to client-side pagination for search and name sorting
+
+### Fixed
+- Language switcher now reactive globally — all UI updates instantly without reload
+- Removed hardcoded en/pl — locale list derived from Paraglide config
+- Browser language auto-detected as default interface language
+- Deduplicated formatRelativeDate across dashboard and form components
+- Account profile: fixed name input not responding to typing
+- Account preferences: added aria-pressed to theme/language toggles
+- Removed placeholder 2FA stub from security section
+- Media tag counts now display correct values — TagSidebar and BulkActionBar receive all files
+- Hybrid target: data-hybrid-path no longer rendered on public pages — only in preview iframe
+
+### Breaking
+- getRawEntries remote now returns { entries: RawEntry[], total: number } instead of RawEntry[]
+
+## 0.0.69 — 2026-02-17
+
+DnD array reordering, nav-search batch fetch
+
+### Added
+- Drag-and-drop reordering in array fields with arrayMove utility
+
+### Fixed
+- Nav-search: batch-fetch data before rendering Command dialog — fixes missing data on open
+
+## 0.0.68 — 2026-02-11
+
+Fix EXIF/blur/focal bugs, expand type exports, add utility functions
+
+### Added
+- Export Entry, EntryType, CMSConfig, CollectionConfig, SingleConfig, FormConfig, FormSubmission, Language, Localized, MediaFileType, ImageStyle, MediaTag from includio-cms/types
+- Add getLink() utility for resolving URL field data to strings
+- Add isImageFieldData() / isVideoFieldData() type guards for media fields
+
+### Fixed
+- Blur placeholder (LQIP) now removed after image loads — fixes visible blur behind transparent PNGs
+- Focal point change now awaits style regeneration before returning — fixes stale/missing styles after save
+- Explicit .rotate() in sharp pipeline — fixes upside-down WebP/JPEG when source has EXIF orientation
+- Use oriented dimensions (post-EXIF) for focal crop calculation — fixes wrong crop on rotated images
+- Codegen: media field type now generates ImageFieldData | VideoFieldData instead of any
+- Codegen: hyphenated collection slugs now produce correct PascalCase (article-category → ArticleCategory)
+- Codegen: generated interfaces now include id and slug fields
+- Preview deep merge now preserves resolved references without url (e.g. category relations)
+
+## 0.0.67 — 2026-02-11
+
+Image quality, LQIP, focal point, responsive srcset, auto-downscale
+
+### Added
+- Image styles: configurable quality parameter for format output
+- LQIP: auto-generated blur placeholder (base64 WebP) on image upload
+- LQIP: lazy backfill for existing images without blur placeholder
+- Image component: LQIP blur placeholder via background-image on img element
+- Focal point picker in media file details
+- Smart crop: styles with crop=true use focal point to calculate crop region
+- Style cache invalidation on focal point change
+- Default WebP/AVIF styles auto-generate 640/1024/1920w srcset variants
+- Custom styles support srcset[] and sizes config
+- Image component renders srcset + sizes on <source> elements
+- Image component: sizes prop to override style-level sizes on <source> elements
+- Skips srcset widths larger than original image
+- CMSConfig: media.maxOriginalWidth / maxOriginalHeight settings
+- Auto-downscale oversized images on upload (fit: inside)
+- SVG and non-image files are not affected
+- Auto-format expansion: styles without explicit format auto-expand to AVIF/WebP/original
+- Eager background generation of default image styles on upload/replace/focal-point change
+
+### Fixed
+- Case-insensitive SVG extension check in upload/downscale/LQIP
+- Quality value clamped to 1-100 in generateImageStyle
+- Silent errors replaced with console.warn for LQIP/downscale/file cleanup
+- Remove hardcoded sizes: 100vw from default image styles
+- Lazy load skeleton + error handling for hybrid layout imports
+- AVIF <source> rendered before WebP for correct browser priority
+- Cache-busting suffix in generated style filenames prevents stale CDN/browser cache
+
+### Breaking
+- getImageStyles() now returns { styles, blurDataUrl } instead of plain styles record
+
+### Migration
+
+```sql
+ALTER TABLE image_styles ADD COLUMN IF NOT EXISTS quality INTEGER;
+ALTER TABLE media_file ADD COLUMN IF NOT EXISTS blur_data_url TEXT;
+ALTER TABLE media_file ADD COLUMN IF NOT EXISTS focal_x REAL;
+ALTER TABLE media_file ADD COLUMN IF NOT EXISTS focal_y REAL;
+```
+
+## 0.0.66 — 2025-02-10
+
+Fix URL field validation for linked entries
+
+### Fixed
+- URL field: linked entries no longer require manual URL per language to save
+
+## 0.0.65 — 2025-02-09
+
+Move publish logic to entry table, replace folder-based media with tags
+
+### Added
+- Account settings page with session management
+- Redesigned sidebar with collapsible groups
+- Tag-based media library replacing folder structure
+- Unified UI components and styling
+
+### Breaking
+- Media folders replaced with tags — existing folder assignments will be lost
+
+### Migration
+
+```sql
+-- Move publish logic from entry_version to entry
+
+ALTER TABLE entry ADD COLUMN published_at TIMESTAMP;
+ALTER TABLE entry ADD COLUMN published_version_id UUID
+  REFERENCES entry_version(id) ON DELETE SET NULL;
+ALTER TABLE entry ADD COLUMN published_by TEXT;
+
+UPDATE entry e SET
+  published_version_id = latest.id,
+  published_at = first_pub.first_published_at,
+  published_by = latest.published_by
+FROM (
+  SELECT DISTINCT ON (entry_id) id, entry_id, published_by
+  FROM entry_version
+  WHERE published_at IS NOT NULL AND published_at <= NOW()
+  ORDER BY entry_id, version_number DESC
+) latest
+JOIN (
+  SELECT entry_id, MIN(published_at) as first_published_at
+  FROM entry_version
+  WHERE published_at IS NOT NULL AND published_at <= NOW()
+  GROUP BY entry_id
+) first_pub ON first_pub.entry_id = latest.entry_id
+WHERE e.id = latest.entry_id;
+
+UPDATE entry e SET
+  published_version_id = COALESCE(e.published_version_id, sub.id),
+  published_at = CASE WHEN e.published_at IS NULL THEN sub.published_at ELSE e.published_at END,
+  published_by = COALESCE(e.published_by, sub.published_by)
+FROM (
+  SELECT DISTINCT ON (entry_id) id, entry_id, published_at, published_by
+  FROM entry_version
+  WHERE published_at IS NOT NULL AND published_at > NOW()
+  ORDER BY entry_id, published_at ASC
+) sub
+WHERE e.id = sub.entry_id AND e.published_version_id IS NULL;
+
+-- Replace folder-based media with tag-based media
+
+CREATE TABLE IF NOT EXISTS media_tag (
+  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+  name TEXT NOT NULL UNIQUE,
+  color TEXT NOT NULL DEFAULT '#3b82f6',
+  created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW() NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS media_file_tag (
+  file_id UUID NOT NULL REFERENCES media_file(id) ON DELETE CASCADE,
+  tag_id UUID NOT NULL REFERENCES media_tag(id) ON DELETE CASCADE,
+  PRIMARY KEY (file_id, tag_id)
+);
+
+ALTER TABLE media_file DROP COLUMN IF EXISTS folder_id;
+
+DROP TABLE IF EXISTS media_folder;
+```

package/ROADMAP.md

@@ -0,0 +1,92 @@
+# Roadmap
+
+> `- [ ]` planned | `- [~]` in-progress | `- [x]` done
+> `[feature]` `[fix]` `[breaking]` `[chore]`
+> `[P0]` critical | `[P1]` important | `[P2]` nice-to-have
+> `<!-- files: path/to/file.ts -->` optionally linked files
+>
+> **Versioning:** 0.0.69 is the last `0.0.x` release. From 0.1.0 onward: `0.MINOR.0` = features/changes, `0.MINOR.PATCH` = fixes.
+
+## 0.0.69 _(last 0.0.x)_
+
+- [x] `[feature]` `[P1]` DnD reordering in array fields + arrayMove utility <!-- files: src/cms/fields/array-field -->
+- [x] `[fix]` `[P1]` Nav-search: batch-fetch data before rendering Command dialog <!-- files: src/cms/nav-search -->
+
+## 0.1.0 — Stabilization
+
+- [x] `[fix]` `[P0]` Collection table pagination — server-side, persistent page state, archived tab <!-- files: src/lib/admin/client/collection/collection-entries.svelte, src/lib/admin/client/collection/table-pagination.svelte -->
+- [x] `[fix]` `[P0]` Language switcher — reactive globally without reload, remove hardcoded en/pl <!-- files: src/lib/admin/state/interface-language.svelte.ts, src/lib/admin/components/layout/header-actions.svelte -->
+- [x] `[fix]` `[P0]` User account section — fix name input, aria-pressed on prefs, clean up 2FA stub (email change deferred to 0.1.2, avatar upload skipped) <!-- files: src/lib/admin/client/account/ -->
+- [x] `[fix]` `[P0]` Media tag counts always 0 — pass actual files to TagSidebar <!-- files: src/lib/admin/components/media/media-library.svelte, src/lib/admin/components/media/tag-sidebar.svelte -->
+- [x] `[fix]` `[P0]` Hybrid target — don't render `data-hybrid-path` for non-logged-in users <!-- files: src/lib/sveltekit/components/hybrid-target.svelte -->
+
+## 0.1.1 — Input integrity
+
+- [ ] `[fix]` `[P1]` Input constraints UI — HTML maxlength, character counter, pattern feedback <!-- files: src/lib/admin/components/fields/text-field.svelte -->
+- [ ] `[fix]` `[P1]` Array field maxItems — disable Add button when max reached <!-- files: src/lib/admin/components/fields/array-field.svelte -->
+- [ ] `[feature]` `[P1]` Array field fixed length — fixed item count, no add/remove, reorder only
+- [ ] `[feature]` `[P1]` Field constraint info display — show constraints before validation error (WCAG/ATAG)
+
+## 0.1.2 — User management & RBAC
+
+### Phase 1 — Core
+
+- [ ] `[feature]` `[P0]` RBAC middleware — `requireRole()`, role check w `requireAuth()` <!-- files: src/lib/admin/remote/middleware/auth.ts -->
+- [ ] `[feature]` `[P0]` Admin users page — list, search, pagination via `authClient.admin.listUsers` <!-- files: src/lib/admin/client/users/ -->
+- [ ] `[feature]` `[P0]` Create user — dialog z email/password/name/role via `authClient.admin.createUser` <!-- files: src/lib/admin/client/users/create-user-dialog.svelte -->
+- [ ] `[feature]` `[P0]` Edit user — name, email, role via `adminUpdateUser` + `setRole` <!-- files: src/lib/admin/client/users/edit-user-dialog.svelte -->
+- [ ] `[feature]` `[P0]` Delete user — confirmation dialog via `removeUser` <!-- files: src/lib/admin/client/users/ -->
+- [ ] `[feature]` `[P0]` Route/sidebar gating — ukryj Users nav + chroń `/admin/users` dla non-admin <!-- files: src/lib/admin/components/layout/nav-main.svelte, src/lib/sveltekit/server/handle.ts -->
+- [ ] `[feature]` `[P0]` First user bootstrap — pierwszy utworzony user auto-gets role `admin` <!-- files: src/lib/server/auth.ts -->
+
+### Phase 2 — Extended
+
+- [ ] `[feature]` `[P1]` Ban/unban UI — reason + expiry, `banUser`/`unbanUser` <!-- files: src/lib/admin/client/users/ban-user-dialog.svelte -->
+- [ ] `[feature]` `[P1]` Admin session mgmt — list/revoke sesji innych userów <!-- files: src/lib/admin/client/users/user-sessions-sheet.svelte -->
+- [ ] `[feature]` `[P1]` Impersonation UI — impersonate/stop bar <!-- files: src/lib/admin/client/users/impersonation-bar.svelte -->
+- [ ] `[feature]` `[P2]` Email invitation system — invite link generation (custom, nie w better-auth) <!-- files: src/lib/core/server/auth/invite.ts -->
+
+## 0.2.0 — Plugin system
+
+- [ ] `[feature]` `[P0]` Wire plugin hooks into CRUD operations (before/afterCreate, Update, Delete) <!-- files: src/lib/types/plugins.ts, src/lib/core/server/entries/operations/ -->
+- [ ] `[feature]` `[P0]` Plugin registration API — public surface for external plugins
+- [ ] `[chore]` `[P1]` Plugin system documentation
+
+## 0.2.1 — CMS API improvements
+
+- [ ] `[feature]` `[P1]` Server-side pagination API (formalize 0.1.0 fix)
+- [ ] `[feature]` `[P1]` Improved type generation <!-- files: src/lib/core/server/generator/ -->
+- [ ] `[feature]` `[P1]` Proper filtering API (SQL-level, not JS post-query)
+
+## 0.3.0 — Admin experience
+
+- [ ] `[feature]` `[P1]` Admin overlay — built-in admin bar on site (quick edit, preview, audit)
+- [ ] `[feature]` `[P1]` Media gallery virtualization/pagination <!-- files: src/lib/admin/components/media/files-list.svelte -->
+- [ ] `[feature]` `[P2]` Image styles UI — preview generated variants in editor
+
+## 0.3.1 — SEO module
+
+- [ ] `[feature]` `[P1]` SERP preview + character limits for title/description <!-- files: src/lib/admin/components/fields/seo-field.svelte -->
+- [ ] `[feature]` `[P1]` Global SEO settings
+- [ ] `[feature]` `[P1]` Dedicated frontend SEO components <!-- files: src/lib/sveltekit/components/seo.svelte -->
+- [ ] `[feature]` `[P2]` Sitemap generation
+
+## 0.4.0 — WCAG/ATAG compliance
+
+- [ ] `[chore]` `[P0]` Full WCAG/ATAG audit
+- [ ] `[feature]` `[P0]` Accessibility rework based on audit findings
+
+## Security hardening
+
+- [ ] `[feature]` `[P1]` `sanitizeHTML` utility — general HTML sanitization outside richtext (text fields, SEO fields)
+- [ ] `[feature]` `[P1]` CSP headers — Content-Security-Policy middleware
+- [ ] `[feature]` `[P1]` CSRF protection — tokens for mutating operations
+- [ ] `[feature]` `[P1]` Rate limiting — API/auth endpoints
+- [ ] `[chore]` `[P1]` Security audit — review `{@html}` usage, innerHTML, injection vectors
+- [ ] `[chore]` `[P1]` Input sanitization audit — review all fields for XSS
+
+## Backlog
+
+- [ ] `[feature]` `[P2]` Alternative richtext editor — Word-like mode, single richtext field instead of blocks
+- [ ] `[chore]` `[P2]` Caching/performance layer (scope TBD)
+- [ ] `[feature]` `[P2]` API/CLI for configuration (setup DX for less technical users)

package/dist/admin/client/account/lang.d.ts

@@ -23,9 +23,6 @@ export declare const accountLang: Record<string, {
         confirmPassword: string;
         updatePassword: string;
         passwordUpdated: string;
-        twoFactor: string;
-        twoFactorDesc: string;
-        comingSoon: string;
         deleteAccount: string;
         deleteAccountDesc: string;
         deleteAccountButton: string;
@@ -42,8 +39,6 @@ export declare const accountLang: Record<string, {
         themeDark: string;
         themeSystem: string;
         language: string;
-        languageEn: string;
-        languagePl: string;
     };
     sessions: {
         title: string;

package/dist/admin/client/account/lang.js

@@ -24,9 +24,6 @@ export const accountLang = {
             confirmPassword: 'Potwierdź hasło',
             updatePassword: 'Zmień hasło',
             passwordUpdated: 'Hasło zostało zmienione',
-            twoFactor: 'Uwierzytelnianie dwuskładnikowe',
-            twoFactorDesc: 'Dodatkowa warstwa zabezpieczeń dla Twojego konta',
-            comingSoon: 'Wkrótce',
             deleteAccount: 'Usuń konto',
             deleteAccountDesc: 'Trwale usuń swoje konto i wszystkie dane',
             deleteAccountButton: 'Usuń konto',
@@ -42,9 +39,7 @@ export const accountLang = {
             themeLight: 'Jasny',
             themeDark: 'Ciemny',
             themeSystem: 'Systemowy',
-            language: 'Język',
-            languageEn: 'Angielski',
-            languagePl: 'Polski'
+            language: 'Język'
         },
         sessions: {
             title: 'Aktywne sesje',
@@ -88,9 +83,6 @@ export const accountLang = {
             confirmPassword: 'Confirm password',
             updatePassword: 'Update password',
             passwordUpdated: 'Password updated',
-            twoFactor: 'Two-factor authentication',
-            twoFactorDesc: 'Add an extra layer of security to your account',
-            comingSoon: 'Coming soon',
             deleteAccount: 'Delete account',
             deleteAccountDesc: 'Permanently delete your account and all data',
             deleteAccountButton: 'Delete account',
@@ -106,9 +98,7 @@ export const accountLang = {
             themeLight: 'Light',
             themeDark: 'Dark',
             themeSystem: 'System',
-            language: 'Language',
-            languageEn: 'English',
-            languagePl: 'Polish'
+            language: 'Language'
         },
         sessions: {
             title: 'Active sessions',

package/dist/admin/client/account/preferences-section.svelte

@@ -1,11 +1,12 @@
 <script lang="ts">
 	import * as Card from '../../../components/ui/card/index.js';
 	import { accountLang } from './lang.js';
-	import { useInterfaceLanguage } from '../../state/interface-language.svelte.js';
+	import { useInterfaceLanguage, locales } from '../../state/interface-language.svelte.js';
 	import { userPrefersMode, setMode } from 'mode-watcher';
 	import Sun from '@tabler/icons-svelte/icons/sun';
 	import Moon from '@tabler/icons-svelte/icons/moon';
 	import DeviceDesktop from '@tabler/icons-svelte/icons/device-desktop';
+	import type { InterfaceLanguage } from '../../../types/languages.js';
 
 	const interfaceLanguage = useInterfaceLanguage();
 
@@ -15,9 +16,15 @@
 		setMode(theme);
 	}
 
-	function setLanguage(language: 'en' | 'pl') {
+	function setLanguage(language: InterfaceLanguage) {
 		interfaceLanguage.current = language;
 	}
+
+	function getLanguageDisplayName(locale: string): string {
+		const name = new Intl.DisplayNames([interfaceLanguage.current], { type: 'language' }).of(locale);
+		if (!name) return locale.toUpperCase();
+		return name.charAt(0).toUpperCase() + name.slice(1);
+	}
 </script>
 
 <div class="space-y-6">
@@ -26,9 +33,10 @@
 			<Card.Title>{lang.preferences.theme}</Card.Title>
 		</Card.Header>
 		<Card.Content>
-			<div class="flex gap-2">
+			<div class="flex gap-2" role="group" aria-label={lang.preferences.theme}>
 				<button
 					type="button"
+					aria-pressed={userPrefersMode.current === 'light'}
 					onclick={() => setTheme('light')}
 					class="inline-flex h-10 items-center justify-center gap-2 rounded-md border px-4 py-2 text-sm font-medium transition-colors focus-visible:ring-2 focus-visible:ring-offset-2 focus-visible:outline-none {userPrefersMode.current ===
 					'light'
@@ -40,6 +48,7 @@
 				</button>
 				<button
 					type="button"
+					aria-pressed={userPrefersMode.current === 'dark'}
 					onclick={() => setTheme('dark')}
 					class="inline-flex h-10 items-center justify-center gap-2 rounded-md border px-4 py-2 text-sm font-medium transition-colors focus-visible:ring-2 focus-visible:ring-offset-2 focus-visible:outline-none {userPrefersMode.current ===
 					'dark'
@@ -51,6 +60,7 @@
 				</button>
 				<button
 					type="button"
+					aria-pressed={userPrefersMode.current === 'system'}
 					onclick={() => setTheme('system')}
 					class="inline-flex h-10 items-center justify-center gap-2 rounded-md border px-4 py-2 text-sm font-medium transition-colors focus-visible:ring-2 focus-visible:ring-offset-2 focus-visible:outline-none {userPrefersMode.current ===
 					'system'
@@ -69,27 +79,20 @@
 			<Card.Title>{lang.preferences.language}</Card.Title>
 		</Card.Header>
 		<Card.Content>
-			<div class="flex gap-2">
-				<button
-					type="button"
-					onclick={() => setLanguage('en')}
-					class="inline-flex h-10 items-center justify-center gap-2 rounded-md border px-4 py-2 text-sm font-medium transition-colors focus-visible:ring-2 focus-visible:ring-offset-2 focus-visible:outline-none {interfaceLanguage.current ===
-					'en'
-						? 'border-[#2D4A77] bg-[#2D4A77]/10 text-[#2D4A77]'
-						: 'border-input hover:bg-accent'}"
-				>
-					{lang.preferences.languageEn}
-				</button>
-				<button
-					type="button"
-					onclick={() => setLanguage('pl')}
-					class="inline-flex h-10 items-center justify-center gap-2 rounded-md border px-4 py-2 text-sm font-medium transition-colors focus-visible:ring-2 focus-visible:ring-offset-2 focus-visible:outline-none {interfaceLanguage.current ===
-					'pl'
-						? 'border-[#2D4A77] bg-[#2D4A77]/10 text-[#2D4A77]'
-						: 'border-input hover:bg-accent'}"
-				>
-					{lang.preferences.languagePl}
-				</button>
+			<div class="flex gap-2" role="group" aria-label={lang.preferences.language}>
+				{#each locales as locale}
+					<button
+						type="button"
+						aria-pressed={interfaceLanguage.current === locale}
+						onclick={() => setLanguage(locale)}
+						class="inline-flex h-10 items-center justify-center gap-2 rounded-md border px-4 py-2 text-sm font-medium transition-colors focus-visible:ring-2 focus-visible:ring-offset-2 focus-visible:outline-none {interfaceLanguage.current ===
+						locale
+							? 'border-[#2D4A77] bg-[#2D4A77]/10 text-[#2D4A77]'
+							: 'border-input hover:bg-accent'}"
+					>
+						{getLanguageDisplayName(locale)}
+					</button>
+				{/each}
 			</div>
 		</Card.Content>
 	</Card.Root>

package/dist/admin/client/account/profile-section.svelte

@@ -9,21 +9,27 @@
 	import { profileSchema } from './schema.js';
 	import { accountLang } from './lang.js';
 	import { useInterfaceLanguage } from '../../state/interface-language.svelte.js';
+	import { toLocaleCode } from '../../utils/formatDate.js';
 	import { authClient } from '../../auth-client.js';
 	import { toast } from 'svelte-sonner';
+	import { untrack } from 'svelte';
 
 	let session = authClient.useSession();
 	const interfaceLanguage = useInterfaceLanguage();
 
 	$effect(() => {
-		if ($session.data?.user.name && $formData.name !== $session.data.user.name) {
-			$formData.name = $session.data.user.name;
+		const sessionName = $session.data?.user.name;
+		if (sessionName) {
+			untrack(() => {
+				$formData.name = sessionName;
+			});
 		}
 	});
 
 	const form = superForm(defaults(zod4(profileSchema)), {
 		validators: zod4Client(profileSchema),
 		SPA: true,
+		resetForm: false,
 		onUpdate: async ({ form }) => {
 			if (form.valid) {
 				await authClient.updateUser({
@@ -48,7 +54,7 @@
 	}
 
 	function formatDate(date: Date | string): string {
-		return new Date(date).toLocaleDateString(interfaceLanguage.current === 'pl' ? 'pl-PL' : 'en-US', {
+		return new Date(date).toLocaleDateString(toLocaleCode(interfaceLanguage.current), {
 			year: 'numeric',
 			month: 'long'
 		});
@@ -79,12 +85,7 @@
 						<Form.Control>
 							{#snippet children({ props })}
 								<Form.Label>{lang.profile.name}</Form.Label>
-								<Input
-									{...props}
-									bind:value={$formData.name}
-									type="text"
-									class="mt-1"
-								/>
+								<Input {...props} bind:value={$formData.name} type="text" class="mt-1" />
 							{/snippet}
 						</Form.Control>
 						<Form.FieldErrors class="text-sm text-red-500" />
@@ -92,12 +93,7 @@
 
 					<div class="space-y-2">
 						<label class="text-sm font-medium">{lang.profile.email}</label>
-						<Input
-							type="email"
-							value={$session.data.user.email}
-							disabled
-							class="mt-1"
-						/>
+						<Input type="email" value={$session.data.user.email} disabled class="mt-1" />
 					</div>
 
 					<div class="flex items-center gap-4">

package/dist/admin/client/account/security-section.svelte

@@ -4,7 +4,6 @@
 	import Button from '../../../components/ui/button/button.svelte';
 	import * as Card from '../../../components/ui/card/index.js';
 	import * as AlertDialog from '../../../components/ui/alert-dialog/index.js';
-	import { Badge } from '../../../components/ui/badge/index.js';
 	import { defaults, superForm } from 'sveltekit-superforms';
 	import { zod4, zod4Client } from 'sveltekit-superforms/adapters';
 	import { passwordSchema, deleteAccountSchema } from './schema.js';
@@ -124,16 +123,6 @@
 		</Card.Content>
 	</Card.Root>
 
-	<Card.Root>
-		<Card.Header>
-			<Card.Title>{lang.security.twoFactor}</Card.Title>
-			<Card.Description>{lang.security.twoFactorDesc}</Card.Description>
-		</Card.Header>
-		<Card.Content>
-			<Badge variant="outline">{lang.security.comingSoon}</Badge>
-		</Card.Content>
-	</Card.Root>
-
 	<Card.Root class="border-destructive/50">
 		<Card.Header>
 			<Card.Title class="text-destructive">{lang.security.deleteAccount}</Card.Title>

package/dist/admin/client/account/sessions-section.svelte

@@ -3,6 +3,7 @@
 	import { Badge } from '../../../components/ui/badge/index.js';
 	import { accountLang } from './lang.js';
 	import { useInterfaceLanguage } from '../../state/interface-language.svelte.js';
+	import { toLocaleCode } from '../../utils/formatDate.js';
 	import { authClient } from '../../auth-client.js';
 	import { toast } from 'svelte-sonner';
 	import DeviceDesktop from '@tabler/icons-svelte/icons/device-desktop';
@@ -86,7 +87,7 @@
 	}
 
 	function formatDate(date: Date | string): string {
-		return new Date(date).toLocaleString(interfaceLanguage.current === 'pl' ? 'pl-PL' : 'en-US', {
+		return new Date(date).toLocaleString(toLocaleCode(interfaceLanguage.current), {
 			year: 'numeric',
 			month: 'short',
 			day: 'numeric',