Wonders of Work Review hub

Open changes waiting for a look, and what shipped recently. Anyone can open a preview below and leave feedback on GitLab.

Open for review

🌱 Nothing is waiting for review right now. Want to help shape what comes next? Read CONTRIBUTING →

Recently shipped to production (main) wondersofwork.nl 🎉

  • MR !110 by Iftakhar Hasnayen Abir ·
    Fix
    default location room selector visibility
    What this changes, and why

    Fixed create an event default location room selector visibility

    What this affects

    src/pages/[...locale]/create-event.astro

    How to try it

    go to create event page and select the default location

  • MR !109 by Iftakhar Hasnayen Abir ·
    Feature
    add sml-spaces variant to cardGrid to generate random S M L spaces
    What this changes, and why

    Add sml-spaces variants to CardGrid to generate 3 random spaces by serialy small, medium, large spaces

    What this affects

    src/components/blocks/CardGrid.astro

    How to try it

    go to homepage after Discover section you will find the section. you can regenerate or create from strapi using CardGrid page component and selecting sml-spaces from variants selector

  • MR !108 by Jurjen de Vries ·
    Chore
    rename default-* UI fallbacks to fallback-*
    What this changes, and why

    Renames the UI fallback assets from default-* to fallback-* so they are clearly not editorial media, and so the upcoming hardcoded/i18n lint can exclude fallback-* by convention.

    • public/images/default-avatar.svg -> fallback-avatar.svg
    • public/images/default-placeholder.svg -> fallback-placeholder.svg
    • public/images/loader.svg -> fallback-loader.svg
    • all references updated across .astro and public/scripts (24+ refs), zero old refs left.

    og-default.jpg is left as-is (Open Graph share image, different purpose).

    What this affects

    Image file names under public/images and every reference to them. No behaviour change — same images, new names. No editorial content.

    How to try it

    Open a preview: avatars, placeholders and the loader still render (they now load from /images/fallback-*.svg).

  • MR !107 by Iftakhar Hasnayen Abir ·
    Fix
    hardcoded text replace with cms
    What this changes, and why

    Completes the hardcoded-copy → Strapi migration so every user-facing string is content-managed (editable and translatable in Strapi instead of baked into code). This covers the bulk of the hardcoded-copy backlog, including copy hidden in client scripts that the grep-based lint:hardcoded could not see.

    English is preserved verbatim in the EN locale; the frontend now reads whatever Strapi serves per locale (nl-NL is populated), with an English fallback kept as the safety net.

    What this affects
    • public/scripts/* — all client libs: raw literals → window.__texts / window.profileUi / window.eventUi lookups; two dead files removed (user-metadata.js, profile.js), superseded by check-user-metadata.js
    • src/components/* — form fields, editor, navbar, pagination, reactions, room/tag selectors, loading, and blocks (audio/card/categories/newsletter/offer/quote/richtext), plus ExportKeySection
    • src/pages/[...locale]/* — agenda details, create-event, edit-profile, login, and event/story/profile previews
    • src/layouts/Layout.astro — injects window.__texts for client scripts
    • src/utils/getGlobals.ts + get{Login,Profile,Event}UiConfig.ts — expose the per-feature config shapes

    No Strapi schema changes in this MR — schema and content already live in production.

    How to try it

    On the preview link, switch locale (nl / en) and confirm the strings follow:

    • Newsletter status messages, event/story preview copy, profile export-key labels
    • Form field labels/placeholders, editor toolbar options, loading and error states
    Before you ask for review
    • [x] Branch named fix/…
    • [x] Commit messages follow Conventional Commits
    • [x] pnpm format run, checks green
    • [x] Tried it on the preview link
    • [x] Rebased on the latest main
  • MR !106 by Iftakhar Hasnayen Abir ·
    Fix
    replace newsletter custom icon with image media
    What this changes, and why

    update newsletter icon logic

    What this affects

    src/components/blocks/Newsletter.astro

    How to try it

    go to coworking page

  • MR !105 by M Maaz ·
    Fix
    harden markdown editor and add fenced code blocks
    What this changes, and why

    Hardening pass on the custom markdown editor used by the event and story description forms (MarkdownEditor2, a contenteditable WYSIWYG with a markdown bridge). Fixes from a security audit plus extended edge-case testing:

    • HTML injection and attribute breakout in the inline parser
    • Multi-line blockquotes kept only the first > line
    • Fenced code blocks were mangled on save/reload
    • Mixed bold+italic (**a*b*c**) lost the literal stars
    • Trailing-space growth on every save (soft breaks)
    • Duplicate .mde-editor p CSS rule
    • Autolinks (<https://...>) eaten as HTML tags
    • Link titles ([x](url "title")) broke the URL attribute
    • Nested lists and continuation lines were dropped
    • Missing constructs vs the renderer: h1/h5/h6, inline code, <hr>,

      • images, 1) lists, backslash escapes, task lists

    Adds fenced code blocks with sugar-high syntax highlighting (GitHub-dark palette). Interactive behavior hardened: Enter splits blocks into new paragraphs (Shift+Enter = soft break), the code button is selection-aware (only the selection becomes a block; a collapsed caret inserts a fresh one), empty paste no longer destroys the selection, Enter in an empty list item keeps the list, linking over a link is refused.

    Round-trips are byte-stable, escaping is minimal so nostr clients and marked never show stray backslashes, and the editor was fuzzed (unicode, deep nesting, huge inputs) without crashes, loss or XSS.

    What this affects
    • src/components/MarkdownEditor2.astro - the editor (used by both

      • create-event and create-story forms)

    • public/scripts/render-markdown.js - public renderer, imports the

      • sugar-high bundle for fenced code highlighting

    • public/scripts/sugar-high.bundle.mjs - new vendored bundle
    • src/styles/_base.scss - .mde-editor styles and --sh-* tokens
    • package.json / pnpm-lock.yaml - sugar-high@^2.0.0 dependency
    • docs/markdown-editor.md - new editor documentation

    Review carefully: inline HTML escaping and URL sanitization (same allowlist as the public renderer), block-start escaping, and the Range-based DOM surgery in the Enter / code-button paths.

    How to try it

    On the preview link, open "Create event" (or a story):

    • Type a paragraph, press Enter - a new paragraph starts; Shift+Enter

      • makes a soft line break. Save and reload: content is byte-identical.

    • Select text and press </> - only the selection becomes a code

      • block; surrounding text stays put.

    • On an empty line, </> starts a fresh code block. Enter adds lines.
    • Fenced code with a language (e.g. ```js) renders highlighted on the

      • public event page.

    • Paste an image (no text) - the selection is preserved.
    Before you ask for review
    • [x] Branch named feat/..., fix/..., chore/..., docs/... or hotfix/...
    • [x] Commit messages follow Conventional Commits
    • [x] pnpm format has been run and the checks are green
    • [ ] Tried it on the preview link
    • [x] Rebased on the latest main
  • MR !103 by Jurjen de Vries ·
    Fix
    purple form field borders instead of peach
    What this changes

    Form fields used the peach $secondary-lightest (#fcdccc) border, which reads as light orange next to the purple brand palette. All form field borders are now $primary-lighter (#c1b3d8, lila) — same lightness, so the outline stays soft.

    • src/styles/_base.scss:60 — shared input-base mixin, so .input, .input-sm, .selector, .selector-sm, .textarea, .textarea-sm, .input-icon-in and friends all follow. Covers the newsletter signup, contact form, offer/quote form and booking form.
    • src/components/DateTimePicker.astro, src/components/BookingForm.astro, src/components/blocks/Offer.astro — date/time dropdown panels (Offer also had a border-secondary-light/20 panel border and divider).
    • src/components/MarkdownEditor.astro, src/components/MarkdownEditor2.astro — editor frame, toolbar and floating toolbars.

    Left untouched on purpose: btn-border-secondary buttons, peach *backgrounds* (Specs, CapsuleGrid, StepsGrid, Booking, Spotlight), and the markdown prose hr/blockquote borders in _base.scss — those are content, not form chrome.

    How to try

    1. Open the preview deploy for this MR. 2. Home page → newsletter block ("Abonneer je op onze nieuwsbrief"): the e-mail field border is lila, not peach. 3. /nl/offerte (offer form): all text fields, the textareas, the date/time picker and its dropdown panel show the same lila border. 4. Booking block on the home page: the number-of-people and date/time fields plus the dropdown panel match. 5. Focus a field — the focus ring is still ring-primary-light, unchanged.

    What this affects

    CSS only, no markup or logic changes; 11 lines across 6 files. No content, Strapi or route changes. Both locales, all pages containing forms. Everything is a colour token swap between existing palette variables, so no new colours are introduced.

  • MR !104 by Jurjen de Vries ·
    CI
    add ESLint base (lint:code)
    What this changes, and why

    Adds an ESLint base as the foundation for real code-quality linting (and, next, the mature i18n no-literal-string rule that will replace the grep-based lint:hardcoded). ESLint understands the JS/TS/Astro AST, so it catches bugs and bad patterns a regex cannot.

    • eslint + typescript-eslint + eslint-plugin-astro, flat config (eslint.config.js), non-type-checked recommended sets (fast, no Strapi needed).
    • New pnpm lint script and lint:code CI job, allow_failure (orange warning) like lint:types/lint:hardcoded.
    • no-explicit-any turned off for now (Strapi/Nostr data is loosely typed; separate effort); unused-vars as warnings during rollout.
    • Currently ~123 findings (empty blocks, unused vars, unused expressions, useless escapes) — real smells, non-blocking.
    What this affects

    eslint.config.js (new), package.json, pnpm-lock.yaml, .gitlab-ci.yml (new lint:code job), CONTRIBUTING checks table. No application code.

    How to try it

    pnpm lint locally, or the lint:code job on this MR (orange warning, non-blocking).

  • MR !97 by Iftakhar Hasnayen Abir ·
    Other
    Fix/event content editing
    What this changes, and why

    creat/edit event markdown editor line break and event type detector fixed

    What this affects
    • public/scripts/render-markdown.js & src/components/MarkdownEditor2.astro markdown editor rendering
    • src/pages/[...locale]/create-event.astro event type detector
    • src/pages/[...locale]/event-preview.astro preview menus after title
    How to try it

    1. create or edit an event description or event type 2. after update and redirect to preview page check the menus right after the title

  • MR !101 by Iftakhar Hasnayen Abir ·
    Fix
    newsletter ui with color variation and svg image
    What this changes, and why

    Newsletter UI update with two color variation and typewriter svg icon.

    What this affects
    • src/components/blocks/Newsletter.astro
    • added toggle button in the strapi for toggle the secondary color variation
    How to try it

    Open co-working page and scroll down to the newsletter section

See all merged changes on GitLab →