Fix mobile admin scroll, email BCC leak, and My Rooms rework

[pataniaeli]

Summary

Addresses 5 open issues:

• Closes Administrator Tab will not scroll on mobile #10 — Administrator tab bar is now horizontally scrollable on mobile, so Advanced Settings (and any tab past the viewport edge) is reachable. The clipping was caused by the shared <main> container's overflow-x-hidden combined with the tab row having no scroll container of its own.
• Closes Bcc on emails #15 — Booking-updated, space-booking-confirmed, and space-booking-cancelled emails no longer expose every recipient's address to each other via to:/cc:. They now send to a neutral address and bcc the real recipients.
• Closes View of Senate session types #16 — The Senate session-type badge (Full Body / Weekly / Office Hours) no longer renders as a solid red block. It now uses muted, per-type tinted pills consistent with the site's existing status-badge style.
• Closes Filterable Senates #13 — Senate members/leadership can toggle which session types show up in My Rooms, persisted in localStorage so the filter survives across sessions.
• Closes New default view #14 — All Bookings in My Rooms gets search + status filters, plus a List/Calendar toggle (a new month-grid calendar view) instead of one long undifferentiated list.

Also bumped the version to 1.12.4 (package.json, package-lock.json, dashboard sidebar footer).

Test plan

• npx tsc --noEmit passes
• npx eslint shows no new errors/warnings vs. the pre-existing baseline (all remaining errors are in files untouched by this PR)
• Confirmed /my-rooms and /administrator routes compile cleanly via local dev server (Turbopack)
• Manual click-through in a logged-in session (I couldn't authenticate as a real northeastern.edu user in this environment — please verify the My Rooms filters/calendar and the mobile admin tab scroll visually before merging)

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
chambers	Ready	Preview	Aug 25, 2026 10:56pm

[pataniaeli]

Addressed review feedback:

• Calendar is now the default My Rooms view (was List).
• Calendar entries show the team, not the room — both the day-cell mini list and the expanded day-detail panel lead with the body name; room is now secondary detail.
• Senate session-type filter moved to Settings, out of My Rooms. It's a real per-user preference now (senate_type_preferences jsonb column on users, same shape as email_preferences) rather than a localStorage toggle, so it follows the user across devices/browsers. The section only renders when the user actually holds a board_memberships row for the Senate body (verified against the live DB — checked directly with an authenticated session: the "Senate Session Types Shown in My Rooms" checkboxes appear for a Senate member and the preference round-trips correctly to the users table).
• Applied the migration (20260825020000_add_senate_type_preferences.sql) to the live Supabase project — additive, nullable-free not null default '{}'::jsonb column, no backfill needed.

Verified end-to-end with a live authenticated session in this environment: toggled a Senate type off/on in Settings, confirmed the DB value changed, and confirmed My Rooms refetches (via a small window event) to pick up the new preference without a manual page reload.

🤖 Generated with Claude Code

[pataniaeli]

Also fixed a bug you flagged that wasn't on GitHub: Event checklist progress (Event Management Form / Engage Form) not persisting across sessions.

Root cause: `event_tracking` has `booking_id` as its primary key, so it's a true one-to-one relation to `bookings`. PostgREST embeds one-to-one relations as a single object, not an array — but the events page typed `event_tracking` as an array and read `event_tracking?.[0]`, which is always `undefined` on a plain object. So every fresh load re-derived the checklist as unchecked from the DB, no matter what had actually been saved. It only looked like it worked in the moment because of the optimistic local-state update on click, which vanished on the next load/session.

Confirmed via a live authenticated session: found an existing row in `event_tracking` with `event_management_form: true` that was rendering unchecked on load; fixed the object/array mismatch, reloaded, and it now renders checked correctly and survives a hard reload. Also stopped silently swallowing a failed save — the optimistic checkbox now rolls back if the PATCH doesn't come back `ok`, instead of showing state that was never written.

🤖 Generated with Claude Code