Changelog

Moved API fetching and caching logic from frontend/global-stats.php to a new tools/update_global_stats.php script. The frontend now reads from a pre-populated cache file, improving separation of concerns and enabling easier cache updates via cron or manual runs.

Refactored NotificationDispatcher and NotificationManager to improve PDO handling and error logging, and enhanced batch notification creation. Removed obsolete tools/check-opcache.php and tools/test-db.php scripts.

Removed hardcoded references to styles.css in admin and compare pages. Updated static-assets.php to load bundle.min.css if available, falling back to styles.css, improving asset management and supporting CSS bundling.

Replaces direct cURL usage with the new HttpService class for all backend API calls, improving code maintainability and centralizing HTTP logic. Also updates NotificationDispatcher to support new user tables and watchlists, and enables cache compression for large entries in cache_manager.php. Cleans up formatting and minor logic in several backend files.

• Add authentication helpers (requireAuth, requireAdmin, isAuthenticated, isAdmin, getCurrentUser)
• Add CSRF protection helpers (generateCsrfToken, validateCsrfToken, getCsrfToken, renderCsrfField)
• Add named constants for cache TTL, pagination, rate limits, and timeouts
• Create controller layer (BaseController, PackageController, UserController, AdminController)
• Create service layer (PackageService, UserService, CacheService)
• Create repository layer (BaseRepository, UserRepository, CacheRepository)
• Enhance CacheManager with key building methods (buildOrgKey, buildUserKey, buildPackageKey)
• Migrate 22 admin files to use centralized requireAdmin() function
• Migrate CSRF handling in admin forms to use new helpers
• Add comprehensive unit tests (25 tests, 100% passing)
• Eliminate 440 lines of duplicate authentication/CSRF code
• Zero breaking changes - fully backward compatible

• Removed package-type badge element from package-detail.php
• Simplified CSS for package-meta-primary
• Cleaner detail page layout without redundant type indicator

• Consolidated 26 animations into utilities/animations.css
• Removed 50+ duplicate selector blocks (.package-card, .hero, .package-type-buttons)
• Removed 100+ duplicate variables from theme files
• Fixed package-card opacity causing invisible content on load
• Fixed orphaned CSS rules from cleanup
• Expected 20-25% bundle size reduction
• Improved maintainability with single source of truth