Added
- AddedInitial release of SNEERYBOOSTER V1 — White Frosted Gaming Control Center
- AddedNative Windows desktop application (Tauri + Rust) with custom
sneerybooster://protocol - AddedWebsite with shared authentication (JWT, 7-day session, localStorage sync)
- AddedDashboard: license status, device count, recent activity, quick actions
- AddedLicense page: activation, key management, plan/expiry display
- AddedDevices page: register, view, remove devices (auto-register from app)
- AddedGame Profiles page: create per-game optimization presets (Roblox, VALORANT, CS2, Fortnite, Genshin, Minecraft)
- AddedSettings page: profile, security (password change), preferences, danger zone (account deletion)
- AddedLogs page: filterable activity history (login, license, device, profile, sync)
- AddedReports page: usage analytics (sessions, game usage, license events, devices)
- AddedDownload page: order flow, QR payment, payment submission, version info via
GET /api/app/latest - AddedSupport page: ticket submission, Discord community links, bug reporting
- AddedDocumentation page: quick start, system requirements, installation, features, API reference, troubleshooting
- AddedChangelog page: version history with categorized changes
- AddedPrivacy Policy & Terms of Service pages
Added (Backend / Discord Bot)
- AddedCloudflare Worker REST API: 20+ endpoints (/api/register, /api/login, /api/account, /api/license, /api/activate, /api/order, /api/payment/submit, /api/devices, /api/game-profiles, /api/activity, /api/reports, /api/support/tickets, etc.)
- AddedDiscord bot with 14 slash commands: /pay, /confirm, /lang, /givekey, /checkkey, /setup, /reportbug, /bugstats, /ticketdone, /mykey, /pending, /stats, /order, /Sync to Client (context menu)
- AddedPrivate ticket threads (type 12) for client-server isolation
- AddedStaff sync: Discord context menu "Sync to Client" for staff replies
- AddedAuto-close warning at 60min for pending payments
- AddedCron job: expiry reminders (3d/1d/0d) in user's language
- AddedD1 database: users, keys, config, pending_payments, tickets, bug_reports, devices, game_profiles, orders, payments, activity_logs, sessions
- AddedJWT auth (HMAC-SHA256, 7-day), SHA-256 password hashing, HMAC-SHA256 license keys
- AddedDeep linking:
sneerybooster://open?token=JWTfor web→desktop auto-login - AddedNSIS installer with protocol registration, custom GUID, version display
Fixed
- FixedBooster conservative mode:
HIGH→ABOVE_NORMALpriority, removed self-boost, timer ref-count guard - FixedGUID in installer corrected (
08C11→E4C5) - FixedDouble-ping bug in ticket/bug threads (removed redundant pings)
- FixedsetConfig now persists all fields (ticket_channel_id, bug_report_channel_id)
- FixedDiscord bot token leak cleanup (removed startup bat, rotated token)
- FixedForum thread announcement leak (neutral thread names, webhook for clean posts)
- FixedStaff sync context menu now shows author name
- FixedSmart app open detection: modal instead of instant redirect to download
Changed
- ChangedClient ticket channel → text channel with private threads (type 12) for true isolation
- ChangedStaff forum channel ID updated to
1543183167429677086 - ChangedClient ticket channel ID updated to
1543180206653841459 - ChangedDiscord URL standardized to
https://discord.gg/RxTNtdvWvFacross all pages - ChangedGames list: HTML authoritative, removed JS duplication
- ChangedPricing & download CTAs now use smart app detection (
data-open-app) - ChangedFooter Privacy/Terms links now point to real pages
Security
- SecurityRotated leaked Discord bot token; removed exposed startup bat file
- SecurityJWT tokens HttpOnly-safe (localStorage), 7-day expiry, HMAC-SHA256
- SecurityPassword hashing: bcrypt cost 12
- SecurityLicense keys: HMAC-SHA256 with secret, format
XXXX-XXXX-XXXX-XXXX - SecurityPrivate Discord threads (type 12) — only requester + staff can view
- SecurityPayment verification: manual admin review only, no auto-activation