Implement systematic UI/UX improvements and schema hardening

[cod-x-prince]

• Explore files and understand current state
• Fix Turnstile to use x-www-form-urlencoded and validate verifyResponse.ok (signup/route.ts)
• Fix x-forwarded-for IP parsing - extract first IP, fallback to x-real-ip (signup/route.ts)
• Guard against empty rooms in metadata.ts (Math.min/max on empty array)
• Move router.push() into useEffect in admin/errors/page.tsx
• Use functional state updates in notifications/page.tsx
• Use functional state updates in dashboard/page.tsx
• Surface upload failures to users in owner/listings/new/page.tsx
• Narrow user fields selected in admin/kyc/[id]/route.ts
• Change import to require in jest.setup.js
• Fix stray CR characters in .semgrep.yml with valid pattern-either patterns

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
pg-app-i1h8	Ready	Preview, Comment	Mar 31, 2026 8:13pm

[Copilot]

Pull request overview

This PR prepares the app for a more production-ready release by hardening the schema and adding admin/system tooling, while introducing CI/testing infrastructure and several UI/UX updates (search filters, navigation, dashboards).

Changes:

• Added new admin APIs/pages (system controls, KYC review, error monitoring) plus notifications UI.
• Hardened Prisma schema (cascade deletes, KYC/Notification models, booking price history fields, new indexes) and updated seed/migrations.
• Introduced/expanded quality tooling: Jest + Playwright configs/tests, deep-scan scripts, Semgrep config, and CI workflow updates.

Reviewed changes

Copilot reviewed 70 out of 127 changed files in this pull request and generated 11 comments.

Show a summary per file

File	Description
src/app/api/auth/signup/route.ts	Adds Turnstile CAPTCHA verification to signup flow
src/app/api/admin/system/route.ts	New admin API to read/update maintenance mode and expose system status
src/app/api/admin/kyc/route.ts	New admin API to list KYC submissions from KYCDocument
src/app/api/admin/kyc/[id]/route.ts	New admin API to approve/reject a KYC document and notify user
src/app/admin/kyc/page.tsx	Admin UI to review KYC submissions
src/app/admin/errors/page.tsx	Admin UI for error monitoring and health checks
src/app/(public)/properties/[city]/page.tsx	Enables ISR, expands filtering, and adjusts sorting logic
src/app/(public)/properties/[city]/[id]/page.tsx	Enables ISR, replaces anchor links with Next Link, small UI fixes
src/app/(public)/properties/[city]/[id]/metadata.ts	Adds dynamic metadata generation for property detail pages
src/app/(public)/loading.tsx	Removes public loading UI (now returns null)
src/app/(auth)/owner/listings/new/page.tsx	Changes upload failure handling to silently ignore per-file errors
src/app/(auth)/notifications/page.tsx	Adds notifications page UI with read/delete actions
src/app/(auth)/dashboard/page.tsx	Adds booking cancellation UI (modal + refund info) and toast feedback
src/app/(auth)/admin/system/page.tsx	Adds admin system control page (maintenance + feature visibility)
src/tests/lib/schemas.test.ts	Adds Jest tests for Zod schema validation
src/tests/lib/email.test.ts	Adds basic Jest checks around email-related formatting/data
src/tests/lib/auth.test.ts	Adds Jest tests around bcrypt hashing behavior
scripts/verify-deep-scan-setup.js	Adds script to verify deep-scan tooling installation/config
scripts/true-deep-scan.js	Adds deep-scan orchestrator script emitting artifacts
prisma/seed.ts	Adds E2E fixture users and sets new booking fields in seeds
prisma/seed-reviews.ts	Sets new booking fields in review seeding
prisma/schema.prisma	Schema hardening: cascade deletes, new models/fields, more indexes
prisma/migrations/schema_improvements_v1.sql	Adds a manual SQL script for KYC migration + cascades + booking fields
prisma/migrations/migration_lock.toml	Adds Prisma migration lock (provider)
prisma/migrations/20260329203841_schema_improvements_v1/migration.sql	Adds Prisma migration for full schema creation/changes
playwright.config.ts	Adds Playwright configuration for E2E runs
package.json	Adds engines, Jest/Playwright scripts, and new tooling dependencies
jest.setup.js	Adds Jest setup with next/navigation + next-auth mocks and env vars
eslint.deep.config.mjs	Adds strict “deep” ESLint configuration with extra plugins
eslint.config.mjs	Expands ignores to avoid linting scripts/config files
docs/guides/TESTING.md	Adds testing/CI guide documentation
docs/RUNBOOK.md	Adds production runbook documentation
docs/README.md	Reworks docs index and links
docs/PROJECT_STRUCTURE.md	Adds a project structure reference doc
mocks/fileMock.js	Adds Jest file stub for asset mocking
README.md	Updates root README branding and documentation links
PRE_PUSH_VERIFICATION.md	Adds a pre-push verification report document
E2E_FINAL_SUMMARY.md	Adds an E2E testing summary document
DOCUMENTATION_MAP.md	Adds documentation map for easier navigation
CHANGELOG.md	Adds changelog following Keep a Changelog
.semgrep.yml	Adds Semgrep ruleset configuration
.github/workflows/ci.yml	Adds CI pipeline for lint, typecheck, unit tests, build, and E2E
.filetreeignore	Adds file tree ignore patterns for tooling consistency
.env.production.example	Adds production env template
.env.example	Updates dev env template and documentation

[cod-x-prince]

@copilot apply changes based on the comments in this thread

[Copilot]

@copilot apply changes based on the comments in this thread

Applied all review changes in commit e82b5a8:

1. signup/route.ts – Turnstile now uses application/x-www-form-urlencoded with URLSearchParams; added verifyResponse.ok check before reading JSON. IP is now parsed by splitting x-forwarded-for on commas to get the first (client) IP and falling back to x-real-ip.
2. metadata.ts – Guarded Math.min/Math.max against empty rooms arrays; title omits the price range when no rooms exist.
3. admin/errors/page.tsx – Moved router.push("/") into a useEffect to keep side effects out of render.
4. notifications/page.tsx – markAsRead, markAllAsRead, and deleteNotification all use the functional setNotifications(prev => ...) form.
5. dashboard/page.tsx – confirmCancel now uses setBookings(prev => ...) to avoid stale closure state.
6. owner/listings/new/page.tsx – Failed uploads are now collected and surfaced to the user via the existing setError state.
7. admin/kyc/[id]/route.ts – include: { user: true } replaced with a select of only id, email, name, and isApproved.
8. jest.setup.js – Changed import to require for CommonJS compatibility.
9. .semgrep.yml – Replaced the broken pattern (stray CR characters) with a valid pattern-either targeting prisma.$queryRaw and prisma.$executeRaw.

[cod-x-prince]

Addressed the stale-state concern in notifications handlers using functional updates.

• markAsRead uses setNotifications(prev => ...)
• markAllAsRead uses setNotifications(prev => ...)
• deleteNotification uses setNotifications(prev => ...)

Code references:

• src/app/(auth)/notifications/page.tsx:45
• src/app/(auth)/notifications/page.tsx:54
• src/app/(auth)/notifications/page.tsx:63

Please resolve discussion #16 (comment) so merge checks can pass.