Restyle frontend art and motion for issue 297 #437
No reviewers
Labels
No labels
agent:fix_bugfix
agent:fix_conflicts
agent:fix_security
agent:gap_analysis
agent:implement
agent:open_issues
agents
agent:security_audit
agent:verify
area
timecurve
arena
arena-v2
audit
block:feature_review
block:security
bug
contracts
design
devops
docs
documentation
enhancement
epic
feature
frontend
indexer
low priority
megaeth
operations
ops
performance
QA
qa checklist
referrals
removal
security
smart-contracts
tech-debt
testing
time-arena
timecurve
visual-qa
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set
Reference
code/yieldomega!437
Loading…
Reference in a new issue
No description provided.
Delete branch "cursor/issue-297-art-motion-audio"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Summary
Addresses #297. Issue should remain open until maintainer review.
Design Review Notes
/arenakeeps Last Buy and BUY CHARM dominant;/arena/protocolpresents VERIFY / TRACE / WATCH; Referrals keeps register/share/CRED tracking compact.ended()path instead ofpaused().Acceptance / Verification Checklist
glab issue view 297 -R PlasticDigits/yieldomega --comments; no issue comments were present./arena,/arena/protocol,/referrals; countdown mascot opacity/scale refined after first smoke pass.bash scripts/check-art-readme-consumers.shandarenaCommandConsoleStatic.test.tsverify new scene paths and old JPG production consumers are absent.WebAudioMixerpeer/timer gates are sparser; buy SFX gain reduced; sound guidance updated.paused(), docs/comments remove sale/redeem framing where touched, and browser smoke showed TimeArena/AUDIT/CRED copy.cd frontend && npm run typecheck;cd frontend && npm run lint(0 errors, 9 pre-existing warnings);cd frontend && npm test(108 files, 555 tests); focused post-refinenpm test -- arenaCommandConsoleStatic.test.ts timeArenaResponsiveLayoutCss.test.ts LaunchCountdownPage.test.tsx.Visual / Design Verification Checklist
home-command-console.svghero plus command-console Home cards, with PLAY TIME ARENA and AUDIT prominent.VITE_LAUNCH_TIMESTAMP; confirmlaunch-countdown-command-console.svg, subdued/hidden mascots at desktop/mobile, and clock remains the largest element./arena: confirmarena-simple-command-console.svg, Last Buy/BUY CHARM remain primary, mascot/sniper-shark accents are low-emphasis, and motion feels like drift/pulse./arena/protocol: confirmarena-protocol-command-console.svg, compact VERIFY / TRACE / WATCH framing, and address/blockie treatment unchanged./referrals: confirm compact CRED mechanics (5 + 5 CRED) and dark glass treatment; indexer-offline warnings may appear in local smoke.Accessibility / Responsive Notes
mentioned in issue #297
mentioned in commit
6ce251c2e8Security review
Commit reviewed:
dc78b0b8b51c051e61aa66378962560f64b8e4f1Scope: MR !437 — frontend art/motion/audio restyle for issue #297 (29 files: static SVG scene backplates, CSS motion tuning,
WebAudioMixergain/throttle constants, copy/docs/tests; no indexer/auth/API logic changes).Outcome:
FINDINGS: 0medium+Inline threads: none (no medium+ findings to anchor).
Review summary
Reviewed added/modified code paths for injection, XSS, SSRF, authz, secret leakage, unsafe deserialization, and supply-chain risk.
*-command-console.svgfiles are self-contained vector graphics (gradients/paths/text only). No<script>, event handlers,foreignObject, externalxlink:href, ordata:payloads.HomePage,LaunchCountdownPage,ArenaTimerHero,ArenaProtocolPage, andsurfaceContentreference hardcoded/art/scenes/...paths; no attacker-controlled input reachessrc/srcSet/background-image.WebAudioMixer,playGameSfx,useArenaSimplePageSfx): Throttle intervals and gain multipliers only; playback still uses the existing allowlistedSFX_FILESmap andfetchof bundled static URLs.indexerApi.ts: Comment-only rename/clarification of legacysale_ended; no request/response handling changes.ArenaSimpleAgentCardPython snippets: Documentation copy updated (ended()→paused()); not executed by the frontend bundle.No plausible medium+ attack path identified on this diff.
mentioned in commit
912c2ae220