neko/web, branch claude/fix-open-tickets-IVV1C

Complete V2 removal from Makefile and check in updated V3 production assets

2026-02-17T04:37:33+00:00

Remove legacy V2 React frontend and update build/test scripts to focus on Vanilla JS (V3)

2026-02-17T03:40:10+00:00

Fix CSP violation on login page by moving inline script to external file

2026-02-17T03:01:17+00:00

Update frontend build artifacts and fix test lint errors

2026-02-17T01:11:59+00:00

Fix scroll-to-read functionality across all UIs (V1, V2, V3)

2026-02-17T00:35:38+00:00

Remove circle styling from NEKO sidebar toggle button

2026-02-16T23:45:10+00:00

Strip border-radius, box-shadow, background, and backdrop-filter from
the sidebar toggle in both v2 and v3 frontends so the logo appears flat.

https://claude.ai/code/session_019Z4VJxzY7tcAuNkPAkvry9

Add tests for CSRF exclusions, Filter includeContent, multi-feed, and routing

2026-02-16T23:31:54+00:00

- CSRF: test excluded paths (/api/login, /api/logout), PUT/DELETE methods
- Item model: test Filter includeContent flag, ItemById returns content,
  multiple feed_ids filtering
- API: test read_filter=all param, feed_ids comma-separated filter,
  full_content exclusion from stream
- Routing: add v3 frontend route test

https://claude.ai/code/session_019Z4VJxzY7tcAuNkPAkvry9

Align sidebar CSS breakpoints with JS threshold at 1024px

2026-02-16T23:28:59+00:00

The sidebar default-closed JS logic used 1024px but CSS media queries
used 768px, causing inconsistent behavior on tablets. Updated all
sidebar-related breakpoints to 1024px/1025px to match.

https://claude.ai/code/session_019Z4VJxzY7tcAuNkPAkvry9

Enhance CSRF protection for login page

2026-02-16T22:02:48+00:00

Login form now includes a CSRF token from the cookie as a hidden form
field. The CSRF middleware accepts tokens from either the X-CSRF-Token
header (for JS clients) or the csrf_token form field (for HTML forms).
Removed /login from the CSRF exclusion list so login POSTs are now
validated.

Co-Authored-By: Claude Opus 4.6

v3 ui: require 100% visibility before marking items as read

2026-02-16T19:13:22+00:00

Change IntersectionObserver threshold from 0.5 to 1.0 so items are only
marked as read when fully scrolled into view, reducing accidental
mark-as-read during fast scrolling.

Also fix unused Category import in perf test and add thicket config.json
to repository so future agents can use thicket CLI commands.

Closes NK-s2g59a

https://claude.ai/code/session_019Z4VJxzY7tcAuNkPAkvry9