Release v1.0.0 — promote develop → main

CHANGELOG.md

@@ -0,0 +1,67 @@
+# Changelog
+
+All notable releases to Stadium are documented here.
+
+## v1.0.0 — First official release
+
+Stadium is the home for **WebZero's builder programs**. It started as the site for a single hackathon and is now a recurring-events platform: hackathons, the M2 incubator, dogfooding sessions, and PitchOff competitions all live in one place, where builders show their work, the community explores it, and organizers run each event end to end.
+
+### Who it's for
+
+- **Visitors & the community** — anyone who wants to browse what's been built and discover teams.
+- **Builders & teams** — the people who ship projects in WebZero programs and want them seen, supported, and funded.
+- **Organizers & admins** — the WebZero team (and per-event partners) who run programs, review work, and pay out winners.
+
+---
+
+## What you can do with Stadium
+
+### Discover & explore — for everyone, no account needed
+
+- **Start from the landing page**, an entry point with a "space" for each program type (Hackathons, M2 Incubator, Dogfooding, PitchOff) that explains what each is.
+- **Browse the directory** of every project/entry, with search and filtering, and live index stats (total entries, winners, projects in M2, total paid out).
+- **Open any program** to see all of its projects.
+- **Dive into a project** across tabs — overview, milestones, team, and updates — including live links (site, repo, demo, slides) and a "seeking funding" signal when a team is raising.
+- **See the winners** of past events on dedicated winners pages.
+- **Set the vibe** with the hardware-style brightness rack: a time-of-day theme and a SoundCloud player that keeps playing as you move between pages.
+
+### Show your work & take part — for builders & teams
+
+- **Sign in with your wallet** using SIWS (Sign-In With Substrate), with multi-chain support across Substrate, Ethereum, and Solana wallets.
+- **Apply to a program** as a team — or, if you don't have a Stadium project yet, **apply as a non-member** and Stadium emails the right team on your behalf.
+- **Create and edit your project** — name, description, links, tech stack, and categories.
+- **Manage your team and payout address**, including per-member roles and socials.
+- **Post project updates** to keep the community and organizers in the loop.
+- **Raise your hand for funding** by setting a funding signal on your project.
+- **Run the M2 incubator track** end to end: agree on milestones, submit your final deliverables, watch your review status, and propose what comes next with a continuation ("what's next, milestone 3?").
+- **Attach a contact email to your wallet** so organizers can reach you.
+
+### Run your event — for organizers & admins
+
+- **Sign in two ways:** with an admin **wallet** (SIWS), or via an **email magic link** for view-only program admins who don't use a wallet — with an onboarding email when they're invited.
+- **Work within a tiered admin model:** app admins, global admins, and per-program admins, so partners can be scoped to just their event.
+- **Create and edit programs** — hackathon, M2 incubator, dogfooding, or PitchOff — with dates, status, and rich, templatable content sections.
+- **Manage sponsors** for each program.
+- **Collect and triage participation** in one unified inbox that merges in-app applications and signups, **import attendees from a Luma CSV**, and **export the inbox to CSV** (hardened against spreadsheet formula-injection).
+- **Apply on behalf of any project** as an admin when you need to.
+- **Invite co-admins** by wallet or by email, and manage the admin list per program.
+- **Review M2 submissions** — approve them or request changes.
+- **Record and confirm payouts** in multiple currencies (USDC / DOT).
+- **Keep an audit trail** with a per-program audit log of admin actions.
+
+### Trust, safety & platform
+
+- **SIWS verification** always checks the address inside the signed message, never a request header.
+- **One sign-in, fewer popups:** a short-lived HMAC session token replaces repeated wallet signatures; the signing secret is validated at server boot.
+- **Hardened by default:** security headers (helmet) and rate limiting on sensitive and public endpoints.
+- **Privacy-aware:** public project data excludes personal contact information.
+
+---
+
+## Under the hood
+
+- **Client:** React 18 + Vite + TypeScript + Tailwind + shadcn/ui, deployed to Vercel.
+- **Server:** Express 5 (ESM) on Supabase (Postgres), deployed to Railway.
+- **Auth:** multi-chain wallet sign-in via SIWS (Substrate, Ethereum, Solana), plus Supabase email magic-link for non-wallet admins.
+
+Live at <https://stadium.joinwebzero.com>.

CLAUDE.md

@@ -38,7 +38,7 @@ Always run from the subdir, not the repo root.
 - `npm test` — `vitest run`
 - `npm start` — `node server.js`
 - `npm run seed:dev`, `npm run db:migrate`, `npm run db:reset` — local Mongo tooling (destructive; run only when asked)
-- `npm run verify:production`, `npm run verify:main-deployed`, `npm run deploy:all` — operational
+- `npm run verify:production`, `npm run verify:main-deployed` — operational (read-only prod health checks). Deploys are automatic: merging to `main` triggers Railway (server) + Vercel (client) via their GitHub integrations.
 
 ---
 

client/.env.example

@@ -2,13 +2,21 @@
 # For local development:
 VITE_API_BASE_URL=http://localhost:2000/api
 # For production:
-# VITE_API_BASE_URL=https://hw4os4c00wg4k80o.apps.joinwebzero.com/api
+# VITE_API_BASE_URL=https://stadium-production-996a.up.railway.app/api
 
 # Admin wallet addresses (comma-separated). Each entry is either `chain:address`
 # or a bare address (bare ⇒ substrate). Supported chains: substrate, ethereum.
 # Example: VITE_ADMIN_ADDRESSES=5Grw...,ethereum:0xAbC123...
 VITE_ADMIN_ADDRESSES=
 
+# Supabase Auth (social sign-in / email magic link). Used by the client to let
+# email-invited program admins sign in without a wallet. Both must be set or
+# email sign-in shows as "not configured". The ANON key is public (safe to ship
+# to the browser); the server still authorizes via program_admin_emails.
+# Get these from the Supabase dashboard (Project Settings → API).
+VITE_SUPABASE_URL=
+VITE_SUPABASE_ANON_KEY=
+
 # Preview / offline mode: when "true", the client serves fixtures from
 # src/lib/mockWinners.ts instead of calling the API. Writes are simulated in
 # localStorage. Production must leave this unset or "false". Set to "true" in

client/package.json

@@ -1,7 +1,7 @@
 {
   "name": "client",
   "private": true,
-  "version": "0.0.0",
+  "version": "1.0.0",
   "type": "module",
   "scripts": {
     "dev": "vite",
@@ -45,6 +45,7 @@
     "@radix-ui/react-toggle": "^1.1.9",
     "@radix-ui/react-toggle-group": "^1.1.10",
     "@radix-ui/react-tooltip": "^1.2.7",
+    "@supabase/supabase-js": "^2.106.1",
     "@talismn/siws": "^1.0.0",
     "@tanstack/react-query": "^5.56.2",
     "bs58": "^6.0.0",

client/src/App.tsx

@@ -11,6 +11,7 @@ import ProjectDetailsPage from "./pages/ProjectDetailsPage";
 import AdminPage from "./pages/AdminPage";
 import NotFound from "./pages/NotFound";
 import { useBrightness } from "@/hooks/use-brightness";
+import { SoundCloudAudioProvider } from "@/components/audio/sound-cloud-audio";
 import WinnersPage from "./pages/WinnersPage";
 import ProgramsPage from "./pages/ProgramsPage";
 import ProgramDetailPage from "./pages/ProgramDetailPage";
@@ -35,6 +36,7 @@ const App = () => {
         <TooltipProvider>
           <Toaster />
           <Sonner />
+          <SoundCloudAudioProvider>
           <BrowserRouter>
             <Routes>
               <Route path="/" element={<Layout />}>
@@ -57,6 +59,7 @@ const App = () => {
               <Route path="*" element={<NotFound />} />
             </Routes>
           </BrowserRouter>
+          </SoundCloudAudioProvider>
         </TooltipProvider>
       </QueryClientProvider>
     </ErrorBoundary>

client/src/components/Layout.tsx

@@ -1,14 +1,7 @@
-import { Link, Outlet, useLocation } from "react-router-dom";
+import { Outlet } from "react-router-dom";
+import { SiteFooter } from "@/components/SiteFooter";
 
 const Layout = () => {
-  const location = useLocation();
-
-  const isActive = (path: string) => {
-    if (path === "/" && location.pathname === "/") return true;
-    if (path !== "/" && location.pathname.startsWith(path)) return true;
-    return false;
-  };
-
   return (
     <div className="min-h-screen bg-background">
       {/* Skip to main content link for keyboard navigation */}
@@ -24,76 +17,7 @@ const Layout = () => {
         <Outlet />
       </main>
 
-      {/* Footer */}
-      <footer className="border-t bg-muted/50 py-8 mt-16">
-        <div className="container">
-          <div className="flex flex-col md:flex-row justify-between items-center space-y-4 md:space-y-0">
-
-
-            <div className="flex items-center space-x-2">
-              <span className="text-sm text-muted-foreground">
-                Created with ❤️ by the cracked devs at {' '}
-                <a
-                  href="https://www.joinwebzero.com/"
-                  target="_blank"
-                  rel="noopener noreferrer"
-                  className="text-primary hover:underline transition-colors"
-                >
-                  WebZero
-                </a>
-              </span>
-            </div>
-            <div className="flex flex-col sm:flex-row items-center justify-center gap-2 sm:gap-4">
-              <div className="flex flex-wrap items-center justify-center gap-2 sm:gap-4">
-                <a
-                  href="https://luma.com/blockspace-symmetry"
-                  target="_blank"
-                  rel="noopener noreferrer"
-                  className="text-sm text-primary hover:underline transition-colors"
-                >
-                  Blockspace Symmetry 2024
-                </a>
-                <span className="hidden sm:inline text-muted-foreground">•</span>
-                  <a
-                    href="https://luma.com/blockspacesynergy"
-                    target="_blank"
-                    rel="noopener noreferrer"
-                    className="text-sm text-primary hover:underline transition-colors"
-                  >
-                    Blockspace Synergy 2025
-                  </a>
-                  <span className="hidden sm:inline text-muted-foreground">•</span>
-                  <a
-                    href="https://luma.com/sub0hack"
-                    target="_blank"
-                    rel="noopener noreferrer"
-                    className="text-sm text-primary hover:underline transition-colors"
-                  >
-                    sub0 Hack 2025
-                  </a>
-              </div>
-            </div>
-            <div className="flex items-center space-x-4">
-              <Link
-                to="https://github.com/JoinWebZero/"
-                className="text-sm text-muted-foreground hover:text-primary transition-colors"
-                target="_blank"
-                rel="noopener noreferrer"
-              >
-                GitHub
-              </Link>
-              <Link
-                to="https://x.com/JoinWebZero"
-                className="text-sm text-muted-foreground hover:text-primary transition-colors"
-                target="_blank"
-                rel="noopener noreferrer"
-              >
-                X
-              </Link>
-            </div>
-          </div>
-        </div>
-      </footer>
+      <SiteFooter />
     </div>
   );
 };

client/src/components/M2AgreementSection.tsx

@@ -125,7 +125,7 @@ export function M2AgreementSection({
         <div className="mb-5">
           <div className="flex items-center gap-2 mb-2">
             <CheckCircle className="w-3.5 h-3.5 text-led" />
-            <span className="label-hw text-display">·CORE FEATURES — MUST COMPLETE</span>
+            <span className="label-hw text-display">·CORE FEATURES: MUST COMPLETE</span>
           </div>
           <div className="lcd p-4">
             <ul className="space-y-2">
@@ -184,7 +184,7 @@ export function M2AgreementSection({
           ) : (
             <div className="flex items-start gap-2 lcd p-3 border-destructive">
               <AlertCircle className="w-3.5 h-3.5 mt-0.5 text-destructive flex-shrink-0" />
-              <p className="label-hw text-destructive">·ROADMAP LOCKED AFTER WEEK 4 — CONTACT YOUR MENTORS IF YOU NEED CHANGES.</p>
+              <p className="label-hw text-destructive">·ROADMAP LOCKED AFTER WEEK 4. CONTACT YOUR MENTORS IF YOU NEED CHANGES.</p>
             </div>
           )}
         </div>