1.2.0

README.md

@@ -9,7 +9,7 @@
 <div align="center">
 
 ![license](https://img.shields.io/badge/license-AGPL--3.0-blue?style=flat-square)
-![version](https://img.shields.io/badge/version-1.1.0-brightgreen?style=flat-square)
+![version](https://img.shields.io/badge/version-1.2.0--beta.11-orange?style=flat-square)
 ![docker](https://img.shields.io/badge/docker-supported-blue?style=flat-square)
 
 [![discord](https://img.shields.io/discord/667479986214666272?logo=discord&logoColor=white&style=flat-square)](https://diamonddigital.dev/discord)
@@ -157,25 +157,7 @@ This project is licensed under the [GNU Affero General Public License v3.0](./LI
 
 ### AI Disclosure
 
-This project uses AI tools to aid development.
-
-AI is used to:
-- Plan significant changes
-- Implement initial passes of new features
-- Perform security audits (alongside human review)
-- Fix bugs and patch security vulnerabilities
-- Review pull requests (alongside human review)
-
-AI is NOT used to:
-- Design UI/UX
-- Design visual assets (such as bitmap and vector graphics)
-- Triage issues
-- Decide project direction
-- Create release information
-
-AI has a tendency to hallucinate/produce plausible but suboptimal, inaccurate or misleading solutions to delegated tasks.
-
-Every commit is manually reviewed and approved by a member of Diamond Digital Development, and testing is carried out to ensure changes work as intended, do not introduce regressions, and meet reliability and security expectations before being merged into the `master` branch.
+This project uses AI tools to aid development. Read our [AI Transparency & Quality Commitment](https://diamonddigital.dev/ai-transparency) statement for more information.
 
 
 ## Contact Us

package.json

@@ -1,6 +1,6 @@
 {
     "name": "craftbox",
-    "version": "1.1.0",
+    "version": "1.2.0-beta.11",
     "description": "A modern self-hosted platform for managing Minecraft servers with built-in mod support.",
     "main": "src/server.js",
     "funding": {
@@ -31,27 +31,27 @@
     "dependencies": {
         "archiver": "^7.0.1",
         "bcrypt": "^6.0.0",
-        "better-sqlite3": "^13.0.1",
+        "better-sqlite3": "^13.0.3",
         "bootstrap": "^5.3.8",
         "chart.js": "^4.5.1",
         "content-disposition": "^1.0.1",
         "ejs": "^6.0.1",
         "express": "^5.2.1",
-        "express-rate-limit": "^8.6.0",
+        "express-rate-limit": "^8.6.2",
         "express-session": "^1.19.0",
         "material-icons": "^1.13.14",
         "multer": "^2.1.1",
         "node-stream-zip": "^1.16.0",
         "passport": "^0.7.0",
         "passport-local": "^1.0.0",
         "quick.db": "^9.1.7",
-        "sharp": "^0.34.5",
-        "uuid": "^14.0.1",
-        "ws": "^8.21.1"
+        "sharp": "^0.35.4",
+        "uuid": "^14.0.2",
+        "ws": "^8.21.3"
     },
     "allowScripts": {
         "bcrypt@6.0.0": true,
-        "better-sqlite3@13.0.1": true,
-        "sharp@0.34.5": true
+        "better-sqlite3@13.0.3": true,
+        "sharp@0.35.4": true
     }
 }

public/js/account.js

@@ -1,6 +1,4 @@
 document.addEventListener('DOMContentLoaded', function () {
-    var csrfToken = document.querySelector('input[name="_csrf"]').value;
-
     // ═══════════════════════════════════════════
     // Change Username / Password
     // ═══════════════════════════════════════════
@@ -105,15 +103,11 @@ document.addEventListener('DOMContentLoaded', function () {
             showOverlay('Generating key...', 'Please wait while the key is created.');
 
             try {
-                var res = await fetch('/api/v1/account/apikeys', {
+                var res = await apiFetch('/api/v1/account/apikeys', {
                     method: 'POST',
-                    headers: {
-                        'Content-Type': 'application/json',
-                        'X-CSRF-Token': csrfToken
-                    },
-                    body: JSON.stringify({ name: name })
+                    body: { name: name }
                 });
-                var data = await res.json().catch(function () { return {}; });
+                var data = res.data || {};
                 if (!res.ok) {
                     hideOverlay();
                     confirmCreateBtn.disabled = false;
@@ -186,13 +180,12 @@ document.addEventListener('DOMContentLoaded', function () {
             showOverlay('Deleting key...', 'Please wait while the key is removed.');
 
             try {
-                var res = await fetch('/api/v1/account/apikeys/' + encodeURIComponent(pendingDeleteId), {
-                    method: 'DELETE',
-                    headers: { 'X-CSRF-Token': csrfToken }
+                var res = await apiFetch('/api/v1/account/apikeys/' + encodeURIComponent(pendingDeleteId), {
+                    method: 'DELETE'
                 });
 
                 if (!res.ok && res.status !== 204) {
-                    var data = await res.json().catch(function () { return {}; });
+                    var data = res.data || {};
                     hideOverlay();
                     confirmDeleteBtn.disabled = false;
                     showToast(data.message || data.error || 'Failed to delete key.', 'danger');