changelog

• new sincerelyrex.com/social — a standalone social links page with glyph icons for Instagram, Facebook, Twitter, TikTok, Spotify, SoundCloud, Discord, and Last.fm. Inherits the main site's wallpaper and opacity automatically. Discord button copies username to clipboard with a toast notification.
• new File upload moved into the + modal — the separate toolbar upload button is gone. MapleGr0ve can now attach a file directly at the bottom of the add-entry form, with inline progress bar. File size limit raised to 200 MB.
• new Dynamic embed preview — the site's OG/Twitter card now shows a live entry count and last-updated date instead of a static description.

• fix Title and subtitle edits by MapleGr0ve now persist for all users — priv/settings.json had incorrect file permissions (644 instead of 664), so PHP could read it but never write it. Every save silently updated only the public copy; on reload, the admin's authenticated fetch read the stale private copy and overwrote the correct value. Fixed by correcting permissions and adding explicit write-failure errors to the API.
• fix Hero title no longer flickers or reverts on reload — title and subtitle are now included in the local settings cache so they apply instantly before the server fetch resolves, eliminating the race between two separate localStorage systems.
• impr File upload 413 errors — PHP upload limits raised to 200 MB via .user.ini. nginx client_max_body_size also needs updating (run sudo nginx -s reload after adding the directive).

• fix Login now works across all browsers — switched from HTTP Basic Auth to a custom header that nginx passes through correctly. The password field was silently failing because nginx was stripping the Authorization header before PHP could read it.
• fix Deletes and private toggles are now permanent — server entries (public or private) are now always removed from the server correctly. Previously, deleting a public server entry fell through to the wrong code path, hid the card visually, but left the server untouched so it reappeared on reload.
• fix Server writes now fail loudly — PHP previously returned {"ok":true} even when it couldn't write the data file. Now returns an HTTP 500 with a clear error if the write fails.
• fix No more wallpaper flash on load — removed the hardcoded radbear default from CSS and JS. The page now starts with a blank background; wallpaper is applied only once settings load.
• fix Brightness slider no longer breaks photo wallpapers — the slider now correctly preserves the invert filter for radbear while leaving real photos untouched.
• impr ViewOnly users no longer see private entries — previously the guest password exposed all items including ones marked private. Guest now sees the same items as an unauthenticated visitor, plus file download access.

• new Add & edit mode are now available to Default and ViewOnly users — add your own entries and edit them without a password. Changes stay local to your browser; only MapleGr0ve writes to the server.
• new Settings (⚙ button) is now visible to everyone. Theme colors, fonts, custom CSS, and presets all work clientside — changes persist in your browser only, and don't affect other visitors.
• new Brightness slider now visible and persistent for all users — no password required. Adjusting it saves to your browser.
• new Wallpaper URL — click the wallpaper button in the footer to open a preview with a URL input at the bottom. Paste any image URL to set it as your wallpaper. Persists locally; MapleGr0ve's URL also applies sitewide.

• impr File upload button is now MapleGr0ve-only — Default and ViewOnly users no longer see it in the toolbar.
• impr In edit mode, Default and ViewOnly users cannot edit, delete, or move MapleGr0ve's server entries — only locally-added items show those controls.

• new Search queries are now shareable — typing updates the URL (?q=soulseek) and loading that URL restores the search automatically.

• new Three-state layout toggle — click ⊢ sidebar in the footer to cycle: footer bar → pinned left sidebar → folded (hamburger). Preference persists across reloads.
• new Audio player — cards linking to or containing a direct audio file (.mp3, .flac, .wav, .ogg, .m4a, .aac) show a ▶ play button. Clicking loads a slim floating player above the footer with play/pause, seek bar, timestamps, and volume. Persists while you browse.
• new Video player — cards with YouTube, Vimeo, or direct video file (.mp4, .webm, .mov) links show a ▶ play button. Opens in a centered 16:9 modal with autoplay. Closing the modal stops playback immediately.
• new Uploaded audio and video files in the vault also get the ▶ play button alongside the existing download link — playback routes through the same authenticated serve endpoint.

• new Category manager — in edit mode, hover any category pill to rename, recolor, or delete it. Drag pills to reorder. Changes apply to all visitors.
• new Theme editor — ⚙ settings button in footer. Live-preview color pickers for all six CSS variables plus a font dropdown. Changes show instantly as you drag.
• new Theme presets — name and save any theme configuration, then switch between saved presets with one click. Active preset is highlighted.
• new Custom CSS — a full CSS editor injected live onto the page. Anything the theme editor can't expose, custom CSS can reach.
• new Export / Import — download a complete JSON backup of items, categories, theme, CSS, and ordering. Restore from backup with item merging (nothing overwritten).

• fix Wallpaper no longer flashes old image on reload — browser now caches the wallpaper and only re-fetches when a new one is uploaded.
• fix Safari/iOS native "Sign in" dialog no longer appears on load or when entering guest mode — auth requests now suppress browser credential prompts.
• fix File downloads no longer return 404 for guest users — files are now served through PHP rather than directly through Apache, which handles guest credentials correctly.
• fix Entering owner password no longer resets all entries to "private" — items only show the private badge if they were actually marked private.
• new Cross-browser sync for public items — items added while logged in now appear for visitors without a password. Private items remain owner/guest only.
• new Private checkbox now appears in the add-item form when logged in as owner. Items are public by default; check the box to make one private.

• new Cards with links now auto-load a preview image from the page's og:image — shows as a banner at the top of each card. Cached server-side so it only fetches once ever.
• new Drag to reorder cards within a category in edit mode. Order persists across reloads.
• new New items get a timestamp — date added shows subtly at the bottom of each card.
• new This changelog.

• fix ViewOnly mode no longer flashes the login form on load — auth form hides immediately while credentials re-verify in the background.
• fix File download links no longer trigger the browser's native auth dialog for unauthenticated visitors.
• new Cross-browser sync — items added while logged out are automatically merged to the server on next owner login. Nothing gets lost.
• impr Wallpaper now applies instantly on reload — no flash of the default background before your custom one appears.
• new Page title and subtitle are editable in edit mode. Changes save to your browser.

• new Card grid — add anything: name, icon, link, description, personal take, tags, install command, platform badges.
• new Categories with filter pills and per-category accent colors. Add your own.
• new Search across everything — names, descriptions, tags, quotes. Click any tag to filter by it.
• new Compact / card mode toggle — compact is a dense list, card mode gives each item room to breathe.

• new Edit mode — edit or remove any card, move items between public and private.
• new Batch add — paste a list (one per line, pipe-separated) to add many items at once.
• new Wallpaper — upload any image as the page background, with a brightness slider.

• new Owner + guest passwords — owner gets full access; guests get read-only view including private items.
• new Private vault — items marked private are stored server-side, only visible when logged in.
• new File uploads — upload anything to your private vault via the toolbar or drag-and-drop anywhere on the page.
• new Authenticated items sync across devices. Items added while logged out stay local to that browser.