Feedback

What should we build next?

Browse boards, vote on ideas, share your own.

Sentry integration: error monitoring, releases, and performance

Wire up Sentry on both the Next.js front-end and the Node/Edge server side. Capture client errors with source maps, server runtime errors, slow API spans, and Web Vitals. Tag every event with org_id and project_id so support can filter by tenant. Tie commits to releases via the Sentry CLI in deploy/deploy.sh, enable Cron monitoring for scheduled jobs (digest emails, AI background jobs), and add a Report this link in the global error boundary. Optional PR comments for new errors introduced by a change.

FeatureShippedGeneral·3 months ago·1

Microsoft Teams app: bring Hollahoop AI agents into Teams

A Teams app that surfaces Hollahoop cloud agents directly inside Microsoft Teams channels and chats. Users would @mention an agent in a Teams thread to triage feedback, draft a changelog from a discussion, search the docs, or hand off a request to the support inbox without leaving Teams. Distributed via the Microsoft Teams Admin Center for orgs that already pay for Microsoft 365.

FeaturePlannedGeneral·3 months ago·0

Three-way theme switcher: light / dark / system

Theme used to be a binary toggle (light or dark). Many users want their dashboard to follow OS preference, so the system option is now first-class. - New shared module `src/lib/theme/theme.ts` with `readSavedTheme`, `setTheme`, `applyTheme`, `subscribeToSystemTheme` - All four entry points use it and stay in sync: top-bar `ThemeToggle`, sidebar account popover, public user-menu submenu, and `/app/account/appearance` - `system` resolves `prefers-color-scheme` at apply time and live-listens for OS changes via `matchMedia` - Pre-paint inline script in the root layout pins the resolved theme on `<html>` before hydration, so there's no FOUC Closes the related "Theme toggle flickers on first paint (FOUC)" card.

FeatureShippedGeneral·3 months ago·0

Customisable docs sections (create / rename / reorder / delete)

Docs sections were previously hard-coded to the seed values (Getting started / Guides / Reference) — there was no admin UI to add or rename them. You can now manage your docs taxonomy entirely from the docs admin page: - **Add** any header you want — Cookbook, FAQ, API reference, Tutorials, Migration guides, … - **Rename** existing sections inline (header + slug) - **Reorder** with up/down arrows (`position` swap) - **Delete** safely — pages are orphaned (`section_id = null`) rather than dropped, so it's reversible Behind the scenes: - New server actions: `createDocSectionAction`, `updateDocSectionAction`, `moveDocSectionAction`, `deleteDocSectionAction` - Slug uniqueness via the existing `(project_id, slug)` constraint, with a friendly error when collisions happen - Confirmation prompt warns when a delete will orphan pages

FeatureShippedGeneral·3 months ago·0

Collapsible portal sidebar with full lockup expanded and icon-only when narrow

Both portal sidebars (admin project rail + workspace org rail) are now **collapsible**. The full Hollahoop lockup (mark + wordmark) shows when expanded; just the icon mark renders in the 56px-wide collapsed rail. - New `useSidebarCollapsed` hook persists state to `hollahoop-sidebar-collapsed`, syncs across instances via custom event + storage event - `SidebarCollapseToggle` button (PanelLeftClose / PanelLeftOpen) - Pre-paint script in root layout pins `<html data-sidebar-collapsed>` before hydration so the rail never flashes the wrong width - Keyboard shortcut: **Ctrl/Cmd + B** (skipped if focus is in an input) - Search switches to icon variant, nav rows become icon-only with `title` tooltips, workspace org tree collapses to clickable org glyphs - User card in collapsed mode is an avatar pill; popover floats out to the right (`left-full ml-2 w-60`) so it isn't clipped - Width animates with `transition-[width] duration-200` Also fixed the previously-broken `BrandLockup` component: it referenced PNG assets that didn't exist on disk, so it now renders the existing SVG mark + a typographic wordmark that inherits theme foreground colour.

FeatureShippedGeneral·3 months ago·0

Avatar upload to object storage (replaces URL text input)

The profile screen used to ask users to paste a public image URL into an "Avatar URL" field — fine for tech-savvy folks, awkward for everyone else. Now the avatar field is a **proper upload control**: - Click, drag-and-drop, or paste-from-clipboard a PNG / JPG / WebP / AVIF / GIF / SVG (≤ 10 MB) - Files go through `/api/uploads` with `kind=avatar`, which authenticates, validates MIME + size, and stores under `avatar/<user_id>/<uuid>.ext` in the public Supabase Storage bucket (S3-compatible) - Each user's avatars are namespaced to their own user-id folder, with the storage path derived server-side from `auth.uid()` so it's unforgeable - "Replace" + "Remove" actions inline; persists immediately on upload so the sidebar widget refreshes via `router.refresh()` without forcing the user to click Save The DB column is unchanged — `profiles.avatar_url` still holds the public URL, just now pointing at a Hollahoop-owned storage object instead of an arbitrary external URL.

FeatureShippedGeneral·3 months ago·0

Automatic custom domain DNS setup (Cloudflare API and friends)

First-party setup flow for connecting a custom domain to a Hollahoop project. When the user pastes a domain and a provider token (Cloudflare to start, then Vercel DNS, Route53, GoDaddy, Namecheap), Hollahoop creates the CNAME / TXT / ALIAS records automatically. For providers without a public API, fall back to a generated step-by-step guide with the exact records to add manually. Includes propagation polling, TLS issuance status, and a reusable verification API so multiple Hollahoop features (project hubs, widget script CDN, support email) can hang off the same domain config. Makes the existing Custom domain for the widget script and Custom domains for public project hubs cards much faster to onboard onto.

FeaturePlannedGeneral·3 months ago·0

MCP server hardening: redundancy, rate limits, abuse and threat review

Audit the public MCP surface against the latest model-context-protocol best practices. Revisit per-key and per-IP rate limits, add a circuit breaker for sustained abuse, instrument health and response-time SLOs with auto-failover to a warm replica, redact secrets from error responses, threat-model the tool surface (prompt injection via tool descriptions, scope escalation), and document the security posture publicly. Roll the resulting controls into the existing API rate limiting and abuse hardening card rather than duplicating that work.

FeatureIn progressGeneral·3 months ago·0

Accessibility pass: WCAG 2.2 AA across portal, public hubs, widget, and API

Bring the entire product up to WCAG 2.2 AA. Front-end: keyboard reachability, focus-visible states, semantic landmarks, ARIA only where native semantics fall short, color contrast tokens audited in both themes, prefers-reduced-motion respect, captions and transcripts on demo videos, screen-reader pass on every primary flow (post create, comment, vote, status change, billing). Back-end: API errors return human-readable messages, error responses include WCAG-compliant status text for downstream renderers, server-rendered pages ship correct lang attributes, transactional emails use accessible HTML structure. Add an automated axe-core run to CI so regressions fail PRs.

FeatureIn progressGeneral·3 months ago·0

Widget: identified end users via a signed JWT

Split out of the Embeddable feedback widget card (whose MVP has shipped). Today the widget signs visitors in anonymously; this card lets a host site submit feedback as a known user. Proposed shape: - A signing endpoint: the customer's backend calls Hollahoop with their API key plus the end user's id/email/name and gets back a short-lived JWT we sign. - The host passes that token to the widget via a data-user attribute or window.__hollahoop.identify(token). - /embed verifies the token (it is our own JWT), and submitPostAction associates the post with that identity instead of an anonymous user. - Anti-spoofing: verify signature + expiry server side; never trust client-supplied identity without a valid token. Out of scope: full SSO, per-user notification routing. Needs a decision on the JWT signing secret / key management before build.

FeatureIn progressFeature requests·3 months ago·0

Redis: shared rate limiting and hot-read cache for API and MCP

Context: API and MCP rate limiting is currently in-memory per pm2 process, so limits are roughly 2x intended and reset on every deploy. Public pages and hot queries hit Postgres directly. Scope: - Add a Redis client with graceful in-memory fallback when REDIS_URL is unset or unreachable. - Move the REST rate limiter (src/lib/api/rest.ts) to Redis atomic INCR + TTL, shared across instances. - Extend rate limiting to the MCP endpoint (tools/call) with a batch-size cap. - Add a small cache helper for hot reads (status lists, project settings, public board payloads) with TTL + invalidation. Infra: Redis LXC at 192.168.1.239:6379 (LAN). Requires a firewall allow from the prod VM 192.168.1.172 and REDIS_URL in /opt/hollahoop/.env. Rotate the Redis password before go-live. Done when: limits are exact across both pm2 instances and survive a deploy; cache has TTL and invalidation; the app falls back cleanly when REDIS_URL is absent. Backs the broader abuse-hardening cards for API and MCP.

FeatureShippedFeature requests·3 months ago·1

Storage hardening: signed direct uploads, image resizing, and malware scanning

Context: Uploads currently route bytes through the Node server with service-role writes (src/app/api/uploads). Migration 0022 flagged signed upload URLs, image resizing, and virus scanning as a follow-up. Scope: - Signed direct-to-Storage upload URLs so large files skip the app server. - Server-side image resizing and thumbnails for avatars and inline media. - A malware/content scanning step before a file becomes public. Done when: large media uploads do not pass through the Node process; resized variants are served; unsafe files are rejected.

FeaturePlannedFeature requests·3 months ago·0

RabbitMQ durable job queue for email outbox, webhooks, and AI tasks

Context: The email outbox drains inline in the request path, and outbound Slack/Discord webhooks fire synchronously. Under a traffic spike this adds latency and risks lost work. Scope: - Stand up a RabbitMQ producer/consumer with ack, retry, and a dead-letter queue. - Move email_outbox processing to a worker. - Move outbound webhook delivery to the queue with retries and idempotency (webhook_events). - Reserve a queue for future AI tasks (drafts, moderation). Infra: RabbitMQ is already available on the LAN. Add the AMQP URL to /opt/hollahoop/.env. Done when: emails and webhooks are enqueued and delivered by a worker, with retries and visibility into failures.

FeaturePlannedFeature requests·3 months ago·0

Self-hosted Supabase backups and PITR: verify and run a restore drill

Context: Backup and point-in-time-recovery posture for the self-hosted Supabase Postgres is not visible from the app repo. This is a priority before marketing traffic. Scope: - Confirm automated Postgres backups exist (frequency, retention, offsite copy). - Confirm WAL archiving / PITR is configured. - Document and rehearse a full restore into a scratch environment. - Include Garage S3 bucket backup or replication for uploaded media. Done when: a restore drill succeeds and the runbook is written.

FeaturePlannedFeature requests·3 months ago·0

Search upgrade: Postgres full-text (tsvector) and pgvector semantic search

Context: Search is ILIKE-based today (src/lib/mcp/tools.ts). pgvector is enabled but unused; pg_trgm powers duplicate suggestions only. Scope: - Add tsvector columns and GIN indexes for posts, docs, and changelog; rank results. - Add an embeddings pipeline and pgvector index for semantic search and better duplicate detection. - Blend lexical and semantic results in the search UI and the MCP search tool. Done when: search returns ranked, relevant results across posts, docs, and changelog with semantic recall.

FeaturePlannedFeature requests·3 months ago·0

Edge caching and CDN headers for public pages and media (/m/*)

Context: Public pages (board, roadmap, changelog, docs) render with full SSR and no revalidation; the media resolver /m/* has no documented cache or CDN strategy. Scope: - Add ISR/revalidate to public pages with tag-based invalidation on writes. - Set long-lived cache-control plus immutable on /m/* responses and front with Cloudflare. - Ensure authed and admin pages stay uncached. Done when: anonymous public pages and media are served largely from cache/edge, cutting origin load during spikes.

FeatureShippedFeature requests·3 months ago·1

Verify and tune Postgres connection pooling for traffic spikes

Context: Each Next.js instance opens DB connections via Supabase. Under a spike, unpooled connections can exhaust Postgres. Scope: - Confirm whether Supavisor or PgBouncer fronts Postgres on the Supabase host. - Point the app at the pooled endpoint (transaction mode) where appropriate. - Set sane pool sizes versus Postgres max_connections, accounting for 2 pm2 instances. - Load test to validate headroom. Done when: connection counts stay bounded under load and the app uses the pooler.

FeatureShippedFeature requests·3 months ago·1

Guest posting redirect should explain why login is required

**UX audit finding** `/feedback/new` redirects straight to `/login` with no explanation when guest posting is disabled. Users who expect "submit without account" (marketed on landing page) hit a wall. **Fix:** On login page when `next` ends with `/feedback/new`, show a short note: "This project requires sign-in to post" OR enable guest posting in community settings with a guest form.

FeatureShippedFeature requests·3 months ago·0

i18n: pre-paint UI locale script + admin language switcher polish

**UX audit finding** Admin language switcher (`LanguageSwitcher`) persists locale but UI strings remain English. `document.documentElement.lang` should be set before first paint to avoid flash and assistive tech mismatch. **Fix:** Add pre-hydration script in root layout (mirror theme/sidebar pattern) + wire `applyUiLocale` on switch.

FeatureShippedFeature requests·3 months ago·0

UX audit batch — Jun 2026 (public portal + admin chrome)

# Hollahoop UX audit — Jun 16, 2026 Full pass as an anonymous user across localhost + production (`hollahoop.app`). ## Shipped this session - **P0** Fixed UTF-16 corrupted admin chrome (`workspace-top-bar`, `admin-top-bar`, `language-switcher`) — changelog/docs/app were 500ing - **Support inbox** Full-height collapsible filter rail (previous session) - **Roadmap list a11y** Vote/comment counts now have proper `aria-label`s - **Theme toggle** Names the *next* theme in the cycle for screen readers - **Post detail** "View on roadmap" link when status is on roadmap; softer comment composer; fewer duplicate Sign in links - **Login** Explains why sign-in is required when redirected from `/feedback/new` - **i18n** Pre-paint `document.documentElement.lang` from saved UI locale ## Still on the roadmap (planned) - Docs article layout: persistent sidebar TOC on desktop - Roadmap kanban: horizontal scroll affordance on mobile + column collapse memory - Public project hub: search trigger should show keyboard hint (`/`) - Guest posting: enable on demo project OR guest form with email-only - Full string i18n (next-intl extraction) — switcher is UI-only today - WCAG 2.2 AA pass (focus order, contrast audit widget) - Cookie consent: remember dismiss across sessions without re-prompt on every subdomain - Admin support desk: keyboard shortcuts (j/k navigate tickets, r reply) - Changelog: sticky tag filter bar while scrolling long feeds ## What felt great - Feedback board density and vote buttons - Roadmap kanban + prioritize flow - Login split panel design - Changelog tag filters

FeaturePlannedGeneral·3 months ago·0

Show org logo in public project header

**Severity:** Medium **Area:** Branding / navigation Org settings support logo upload and the admin sidebar shows it, but `ProjectHeader` always renders a letter-on-accent tile. Customers expect their logo on the public portal chrome, not just in admin. **Fix:** Pass org logo into `ProjectHeader` with fallback to accent initial.