HollaHoop
Sign in
Feedback

General

Anything else.

New post
All typesFeatureBugTweak

Sentry integration: error monitoring, releases, and performance

Wire up Sentry on both the Next.js front-end and the Node/Edge server side. Capture client errors with source maps, server runtime errors, slow API spans, and Web Vitals. Tag every event with org_id and project_id so support can filter by tenant. Tie commits to releases via the Sentry CLI in deploy/deploy.sh, enable Cron monitoring for scheduled jobs (digest emails, AI background jobs), and add a Report this link in the global error boundary. Optional PR comments for new errors introduced by a change.

FeatureShippedGeneral·2 months ago·1

Three-way theme switcher: light / dark / system

Theme used to be a binary toggle (light or dark). Many users want their dashboard to follow OS preference, so the system option is now first-class. - New shared module `src/lib/theme/theme.ts` with `readSavedTheme`, `setTheme`, `applyTheme`, `subscribeToSystemTheme` - All four entry points use it and stay in sync: top-bar `ThemeToggle`, sidebar account popover, public user-menu submenu, and `/app/account/appearance` - `system` resolves `prefers-color-scheme` at apply time and live-listens for OS changes via `matchMedia` - Pre-paint inline script in the root layout pins the resolved theme on `<html>` before hydration, so there's no FOUC Closes the related "Theme toggle flickers on first paint (FOUC)" card.

FeatureShippedGeneral·2 months ago·0

Customisable docs sections (create / rename / reorder / delete)

Docs sections were previously hard-coded to the seed values (Getting started / Guides / Reference) — there was no admin UI to add or rename them. You can now manage your docs taxonomy entirely from the docs admin page: - **Add** any header you want — Cookbook, FAQ, API reference, Tutorials, Migration guides, … - **Rename** existing sections inline (header + slug) - **Reorder** with up/down arrows (`position` swap) - **Delete** safely — pages are orphaned (`section_id = null`) rather than dropped, so it's reversible Behind the scenes: - New server actions: `createDocSectionAction`, `updateDocSectionAction`, `moveDocSectionAction`, `deleteDocSectionAction` - Slug uniqueness via the existing `(project_id, slug)` constraint, with a friendly error when collisions happen - Confirmation prompt warns when a delete will orphan pages

FeatureShippedGeneral·2 months ago·0

Collapsible portal sidebar with full lockup expanded and icon-only when narrow

Both portal sidebars (admin project rail + workspace org rail) are now **collapsible**. The full Hollahoop lockup (mark + wordmark) shows when expanded; just the icon mark renders in the 56px-wide collapsed rail. - New `useSidebarCollapsed` hook persists state to `hollahoop-sidebar-collapsed`, syncs across instances via custom event + storage event - `SidebarCollapseToggle` button (PanelLeftClose / PanelLeftOpen) - Pre-paint script in root layout pins `<html data-sidebar-collapsed>` before hydration so the rail never flashes the wrong width - Keyboard shortcut: **Ctrl/Cmd + B** (skipped if focus is in an input) - Search switches to icon variant, nav rows become icon-only with `title` tooltips, workspace org tree collapses to clickable org glyphs - User card in collapsed mode is an avatar pill; popover floats out to the right (`left-full ml-2 w-60`) so it isn't clipped - Width animates with `transition-[width] duration-200` Also fixed the previously-broken `BrandLockup` component: it referenced PNG assets that didn't exist on disk, so it now renders the existing SVG mark + a typographic wordmark that inherits theme foreground colour.

FeatureShippedGeneral·2 months ago·0

Avatar upload to object storage (replaces URL text input)

The profile screen used to ask users to paste a public image URL into an "Avatar URL" field — fine for tech-savvy folks, awkward for everyone else. Now the avatar field is a **proper upload control**: - Click, drag-and-drop, or paste-from-clipboard a PNG / JPG / WebP / AVIF / GIF / SVG (≤ 10 MB) - Files go through `/api/uploads` with `kind=avatar`, which authenticates, validates MIME + size, and stores under `avatar/<user_id>/<uuid>.ext` in the public Supabase Storage bucket (S3-compatible) - Each user's avatars are namespaced to their own user-id folder, with the storage path derived server-side from `auth.uid()` so it's unforgeable - "Replace" + "Remove" actions inline; persists immediately on upload so the sidebar widget refreshes via `router.refresh()` without forcing the user to click Save The DB column is unchanged — `profiles.avatar_url` still holds the public URL, just now pointing at a Hollahoop-owned storage object instead of an arbitrary external URL.

FeatureShippedGeneral·2 months ago·0

Automatic custom domain DNS setup (Cloudflare API and friends)

First-party setup flow for connecting a custom domain to a Hollahoop project. When the user pastes a domain and a provider token (Cloudflare to start, then Vercel DNS, Route53, GoDaddy, Namecheap), Hollahoop creates the CNAME / TXT / ALIAS records automatically. For providers without a public API, fall back to a generated step-by-step guide with the exact records to add manually. Includes propagation polling, TLS issuance status, and a reusable verification API so multiple Hollahoop features (project hubs, widget script CDN, support email) can hang off the same domain config. Makes the existing Custom domain for the widget script and Custom domains for public project hubs cards much faster to onboard onto.

FeaturePlannedGeneral·2 months ago·0

MCP server hardening: redundancy, rate limits, abuse and threat review

Audit the public MCP surface against the latest model-context-protocol best practices. Revisit per-key and per-IP rate limits, add a circuit breaker for sustained abuse, instrument health and response-time SLOs with auto-failover to a warm replica, redact secrets from error responses, threat-model the tool surface (prompt injection via tool descriptions, scope escalation), and document the security posture publicly. Roll the resulting controls into the existing API rate limiting and abuse hardening card rather than duplicating that work.

FeatureIn progressGeneral·2 months ago·0

Accessibility pass: WCAG 2.2 AA across portal, public hubs, widget, and API

Bring the entire product up to WCAG 2.2 AA. Front-end: keyboard reachability, focus-visible states, semantic landmarks, ARIA only where native semantics fall short, color contrast tokens audited in both themes, prefers-reduced-motion respect, captions and transcripts on demo videos, screen-reader pass on every primary flow (post create, comment, vote, status change, billing). Back-end: API errors return human-readable messages, error responses include WCAG-compliant status text for downstream renderers, server-rendered pages ship correct lang attributes, transactional emails use accessible HTML structure. Add an automated axe-core run to CI so regressions fail PRs.

FeatureIn progressGeneral·2 months ago·0

UX audit batch — Jun 2026 (public portal + admin chrome)

# Hollahoop UX audit — Jun 16, 2026 Full pass as an anonymous user across localhost + production (`hollahoop.app`). ## Shipped this session - **P0** Fixed UTF-16 corrupted admin chrome (`workspace-top-bar`, `admin-top-bar`, `language-switcher`) — changelog/docs/app were 500ing - **Support inbox** Full-height collapsible filter rail (previous session) - **Roadmap list a11y** Vote/comment counts now have proper `aria-label`s - **Theme toggle** Names the *next* theme in the cycle for screen readers - **Post detail** "View on roadmap" link when status is on roadmap; softer comment composer; fewer duplicate Sign in links - **Login** Explains why sign-in is required when redirected from `/feedback/new` - **i18n** Pre-paint `document.documentElement.lang` from saved UI locale ## Still on the roadmap (planned) - Docs article layout: persistent sidebar TOC on desktop - Roadmap kanban: horizontal scroll affordance on mobile + column collapse memory - Public project hub: search trigger should show keyboard hint (`/`) - Guest posting: enable on demo project OR guest form with email-only - Full string i18n (next-intl extraction) — switcher is UI-only today - WCAG 2.2 AA pass (focus order, contrast audit widget) - Cookie consent: remember dismiss across sessions without re-prompt on every subdomain - Admin support desk: keyboard shortcuts (j/k navigate tickets, r reply) - Changelog: sticky tag filter bar while scrolling long feeds ## What felt great - Feedback board density and vote buttons - Roadmap kanban + prioritize flow - Login split panel design - Changelog tag filters

FeaturePlannedGeneral·1 month ago·0
HollahoopGet yours