static: public Reverse Watch dashboard by ZukwiZ · Pull Request #71 · csfloat/reverse-watch

ZukwiZ · 2026-05-27T17:09:14Z

Summary

Single self-contained `static/index.html` (inline CSS + JS, no build step) plus the icons / favicons / chart-event data it consumes.

Layout

Three KPI cards: Traders indexed, Traders flagged, Traders flagged 24h
Volume chart with period picker (7d / 30d / 3m / 6m / 1y) powered by uPlot
Recent-reversals table with client-side paging
Single-Steam-ID search with avatar + display name + Steam/CSFloat profile-link result chip
CS2 event annotation chips on the chart — data driven by `static/cs2-events.json`, edit that file to add or update events
Responsive mobile layout (single-column, condensed KPI row)

Dependencies

Material Symbols (Google Fonts CDN)
uPlot 1.6.x (unpkg CDN)
No bundler, no NPM, no build step

Heads-up for review

Steam display names are dev placeholders. The current implementation deterministically hashes a Steam ID into a placeholder string so the search-result chip has something to show against locally seeded synthetic data. For production we need a real source — three options worth a quick decision before this merges:
1. Extension-side enrichment (the extension already has Steam Web API access).
2. Server-side batched Steam Web API call with short cache.
3. DB-cached column populated lazily on first lookup.
Depends on Add Models #1 and Core Infrastructure #2 for the dashboard to actually function (in-memory static serving + the three new public endpoints). Reviewable in isolation against master — the HTML/JS is self-contained — but won't render real data until those land.

Test plan

After merging Add Models #1 + Core Infrastructure #2 + fix cursor proto field usage #3 (or locally on a branch that has all four): run `go run ./cmd/seed`, then load `http://localhost:80/\`
Click through every period in the picker (7d / 30d / 3m / 6m / 1y) — chart re-renders with the right number of buckets
CS2 event annotation chips appear at expected dates (see `static/cs2-events.json`)
Submit a known flagged Steam ID — result chip shows avatar + display name + working Steam + CSFloat profile links
Submit a clean Steam ID — result chip shows the clean state
DevTools mobile viewport (e.g. iPhone 14) — single-column layout, KPI cards stack, chart is readable, table paging still works
`curl -I http://localhost:80/\` returns the right `Content-Length` (depends on Add Models #1)

Made with Cursor

Note

Low Risk
Static HTML/JSON and CDN assets only; no server auth or data-model changes in this PR. Main follow-up is replacing placeholder Steam display names before production.

Overview
Replaces the minimal landing search page with a self-contained public dashboard in static/index.html (inline CSS/JS, no build). The page now loads KPI stats, a uPlot reversal volume chart with a 7d–1y period picker, a recent reversals table with client-side “load more,” and an upgraded Steam ID lookup that shows a compact result chip (verdict, placeholder avatar/name, Steam/CSFloat links). CS2 timeline annotations come from new static/cs2-events.json, rendered as stacked chips on the chart for the selected window.

README.md fixes a typo and documents that the dashboard is served at / from static/index.html. Trader display names are deterministic placeholders derived from Steam ID until real profile data exists; chart/table/search call the existing public /api/v1/... endpoints and Material Symbols + uPlot via CDN.

^{Reviewed by Cursor Bugbot for commit 0865861. Bugbot is set up for automated code reviews on this repo. Configure here.}

Single self-contained static/index.html (no build step) plus the icons / favicons / chart-event data it consumes. Layout - three KPI cards (Traders indexed, Traders flagged, Traders flagged 24h) - volume chart with period picker (7d / 30d / 3m / 6m / 1y), powered by uPlot from the unpkg CDN - recent-reversals table with client-side paging - single-Steam-ID search with avatar + display name + Steam/CSFloat profile link result chip - CS2 event annotation chips on the chart, data driven by static/cs2-events.json — edit that file to add or update events - responsive mobile layout (single-column, condensed KPI row) Dependencies - Material Symbols (Google Fonts CDN) - uPlot 1.6.x (unpkg CDN) - No bundler, no NPM dependencies, no build step. This PR depends on #1 (in-memory static serving) and #2 (public stats / recent endpoints) being merged for the dashboard to function, but is reviewable in isolation against master. Co-authored-by: Cursor <cursoragent@cursor.com>

GODrums · 2026-05-29T12:50:40Z

If you want to make this code easier to maintain: there are lots of Static Site Generators (SSGs) to keep the build step super minimal. I can recommend:

Angular :) https://angular.dev/guide/routing/rendering-strategies#static-site-generation-ssg-prerendering
Astro (if you want React)
SvelteKit

Probably max. a 2-prompt addition to this PR. All of these can be configured to generate fully static HTMLs at build-time.

zedimytch · 2026-06-03T19:36:30Z

We can inline this as a const in the script block in our html file.

Done — inlined as a CS2_EVENTS const in the script block; the JSON file is removed.

zedimytch · 2026-06-03T19:44:42Z

+        // Dev placeholder: deterministic fake Steam display names derived
+        // from steam_id. Remove when real names ship (PRD §14 D-open-4).
+        const TRADER_ADJECTIVES = [
+            'Shadow', 'Golden', 'Crimson', 'Frozen', 'Stealth', 'Iron', 'Silent',
+            'Quick', 'Rogue', 'Mighty', 'Phantom', 'Toxic', 'Wild', 'Lone', 'Lucky',
+            'Cosmic', 'Royal', 'Savage', 'Mystic', 'Dark', 'Vivid', 'Solar', 'Lunar',
+            'Electric', 'Neon', 'Cyber', 'Mecha', 'Ghost', 'Steel', 'Radiant',
+        ];
+        const TRADER_NOUNS = [
+            'Wolf', 'Hawk', 'Tiger', 'Fox', 'Bear', 'Dragon', 'Phoenix', 'Viper',
+            'Hunter', 'Sniper', 'Ranger', 'Knight', 'Reaper', 'Warden', 'Mage',
+            'Trader', 'Ace', 'Bandit', 'Ninja', 'Samurai', 'Pirate', 'Demon',
+            'Spirit', 'Storm', 'Blade', 'Shadow', 'Wraith', 'Beast', 'Falcon', 'Specter',
+        ];
+        const TRADER_SUFFIXES = [
+            '', '', '', '_HD', '47', '88', '99', '_TR', 'X', 'TV', '_GG', '_RU', 'Z', '03', '13',
+        ];


Please remove all placeholder data. In general, this should not be committed.

Done — removed the fake display-name generator entirely. The Trader column + chip now show the real Steam ID, and avatars are a neutral person glyph. Real display names are pending a source decision (the open Steam-name-source question). Done in 8a04e6b.

zedimytch · 2026-06-03T19:49:28Z

 # [reverse.watch](https://reverse.watch)

-Community-driven open trade reversal tracking database for Steam. Participating entities can report trade reverals to the open database.
+Community-driven open trade reversal tracking database for Steam. Participating entities can report trade reversals to the open database, and anyone can browse activity at [reverse.watch](https://reverse.watch) — a public dashboard served from [`static/index.html`](static/index.html) at `/`.


Please remove all changes, except for the spelling fix.

Done — the README diff vs master is now just the reverals to reversals spelling fix.

zedimytch · 2026-06-22T19:05:28Z

If you want to make this code easier to maintain: there are lots of Static Site Generators (SSGs) to keep the build step super minimal. I can recommend:

Angular :) https://angular.dev/guide/routing/rendering-strategies#static-site-generation-ssg-prerendering

Astro (if you want React)

SvelteKit

Probably max. a 2-prompt addition to this PR. All of these can be configured to generate fully static HTMLs at build-time.

This looks like a great idea. Missed this comment in my original review.

We can use Astro, it's the lighter-weight option. We can use a FileServer which exposes certain directories /static/* and /_astro/* to the user.

This will require a Node build stage in the Dockerfile.

dist/
  index.html
  _astro/...          # bundled JS/CSS (and optimized images, if you used src/assets)
  static/             # public/ files copied verbatim (logos, cs2-events.json)

fs := http.FileServer(http.Dir("dist"))
r.Handle("/static/*", fs)
r.Handle("/_astro/*", fs)
r.Get("/", func(w, r) { http.ServeFile(w, r, "dist/index.html") })

Here's a rough outline of the structure:

web/
├── package.json            # declares deps: astro, uplot. Defines `npm run build`.
├── package-lock.json       # pins exact versions + hashes → supply-chain control
├── astro.config.mjs        # output: 'static' + build options (assets dir, etc.)
├── tsconfig.json           # TS config (optional, only if you use .ts/.tsx)
│
├── public/                 # copied VERBATIM to dist/, paths preserved, no hashing
│   └── static/
│       ├── csfloat-logo.png      # keeps URL /static/csfloat-logo.png
│       ├── csfloat-icon.png
│       └── steam-icon.png
│
├── src/                    # SOURCE that gets compiled/bundled (not shipped as-is)
│   ├── pages/
│   │   └── index.astro     # your <head> + hero + KPIs + chart + table + footer markup
│   ├── components/
│   │   ├── ReversalChart.astro   # the uPlot chart + period picker (client island)
│   │   ├── SearchBox.astro       # Steam ID search + result chip logic
│   │   └── RecentTable.astro     # recent reversals table + "load more"
│   ├── scripts/
│   │   └── app.ts          # the JS currently in your <script> (or split per component)
│   ├── styles/
│   │   └── global.css      # the big inline <style> block moves here, gets bundled
│   └── assets/             # OPTIONAL: images you want Astro to optimize + hash
│       └── (logos here instead of public/ IF you want compression/cache-busting)
│
└── dist/                   # BUILD OUTPUT — the only thing Go serves at runtime
    ├── index.html          # compiled page (inline styles bundled out, refs hashed)
    ├── static/             # everything from public/ copied here verbatim
    │   ├── csfloat-logo.png
    │   ├── cs2-events.json
    │   └── ...
    └── _astro/             # bundled + hashed CSS/JS (and optimized images if src/assets)
        ├── index.[hash].css
        ├── client.[hash].js     # includes your bundled uPlot — no CDN
        └── ...

- Anchor the chart fill gradient to the plot area (u.bbox.top .. u.bbox.top + u.bbox.height) so the fade aligns with the plotted line instead of the canvas origin. - Keep Steam IDs as strings end-to-end: they are uint64 and exceed Number.MAX_SAFE_INTEGER, so coercing them through Number would corrupt the profile/stall links and table rows. The API already marshals steam_id as a JSON string; explicitly String() it at the chip links and recent-table rows so it is never parsed as a number. - Inline the CS2 event annotations as a CS2_EVENTS const in the script block, drop the runtime fetch of /static/cs2-events.json, and delete the now-unused static/cs2-events.json file. Co-authored-by: Cursor <cursoragent@cursor.com>

Replace the single self-contained static/index.html with an Astro project in web/ that builds to web/dist (gitignored). uPlot is now a pinned npm dependency bundled into the hashed _astro output instead of loaded from a CDN; Material Symbols stays on its existing web-font link. Markup is split into Hero/Search/Kpis/ReversalChart/RecentReversals/ SiteFooter components, the inline <style> moves to src/styles/global.css, and the inline <script> (including the CS2_EVENTS const and string-only steam_id handling) moves to src/scripts/app.ts. Go now serves web/dist via http.FileServer for /static/* and /_astro/* with / -> web/dist/index.html, replacing the old static/index.html serving. The Dockerfile gains a node build stage (npm ci && npm run build) whose web/dist is copied into the runtime image. The three PNG assets are relocated to web/public/static so their /static/* URLs are preserved. Co-authored-by: Cursor <cursoragent@cursor.com>

The summary endpoint now returns steam_ids_searched (backed by the new search_counts table) instead of traders_indexed. Co-authored-by: Cursor <cursoragent@cursor.com>

- Replace fabricated Steam display names and per-user avatar gradients with the real Steam ID; use a neutral person glyph avatar everywhere - Base64-inline the CSFloat logo and Steam/CSFloat icons and delete the static PNGs - Reduce README diff against master to only the "reversals" spelling fix - Offset chart event chips and hover tooltip by the plot-area inset so overlays align to the data across all period ranges Co-authored-by: Cursor <cursoragent@cursor.com>

cursor

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 8a04e6b. Configure here.}

ZukwiZ · 2026-06-24T13:40:49Z

Context for re-review: since the original round of comments, the frontend moved from a single static/index.html to an Astro app under web/ (per the discussion about serving it via a build step). uPlot is now bundled from npm (no CDN), the page builds to web/dist and is served via http.FileServer, and the icons are inlined as data: URIs. A few earlier line comments pointed at static/index.html, which no longer exists — I have replied on each thread pointing to where the change landed in the new structure.

web/dist is a gitignored Astro build output, so any run path that skips `npm run build` (e.g. `go run` locally or a deploy that doesn't run the Node build stage) would silently serve 404s for the dashboard. Validate that web/dist/index.html exists at startup and return a clear, actionable error instead. Addresses Bugbot "Homepage missing without web build". Co-authored-by: Cursor <cursoragent@cursor.com>

PR #69 changed /api/v1/stats/reversals/daily to return each bucket's date as an RFC3339 UTC timestamp (e.g. "2026-07-13T00:00:00Z") instead of a plain "YYYY-MM-DD" string. The chart's x-value parser previously appended "T00:00:00Z" to that string, which now produces an invalid date (NaN). Parse the ISO string directly; the trailing "Z" keeps it unambiguously UTC so day buckets never shift by a browser-local offset. Co-authored-by: Cursor <cursoragent@cursor.com>

ZukwiZ · 2026-07-13T09:51:06Z

hey @zedimytch, fixed the web/dist thing Bugbot flagged (server now fails fast at startup if the build output is missing, and the Docker build always produces it). also updated the chart to parse the new time.Time date format from #69, all in UTC. green now — ready for another look 🙏

cursor Bot reviewed May 27, 2026

View reviewed changes

Comment thread static/index.html Outdated

Comment thread static/index.html Outdated

zedimytch self-requested a review June 3, 2026 16:54

zedimytch requested changes Jun 3, 2026

View reviewed changes

cursor Bot reviewed Jun 24, 2026

View reviewed changes

Comment thread static/index.html Outdated

Comment thread static/index.html Outdated

ZukwiZ mentioned this pull request Jun 24, 2026

server: serve static files from memory (macOS sendfile fix) #68

Closed

4 tasks

byskov and others added 2 commits June 24, 2026 14:11

dashboard: read steam_ids_searched from summary KPI

e38e9af

The summary endpoint now returns steam_ids_searched (backed by the new search_counts table) instead of traders_indexed. Co-authored-by: Cursor <cursoragent@cursor.com>

cursor Bot reviewed Jun 24, 2026

View reviewed changes

Comment thread server/server.go Outdated

ZukwiZ requested a review from zedimytch June 24, 2026 13:40

byskov and others added 2 commits July 13, 2026 11:27

Uh oh!

Conversation

ZukwiZ commented May 27, 2026 • edited by cursor Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Heads-up for review

Test plan

Uh oh!

Uh oh!

Uh oh!

GODrums commented May 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

zedimytch Jun 3, 2026

Choose a reason for hiding this comment

Uh oh!

ZukwiZ Jun 24, 2026

Choose a reason for hiding this comment

Uh oh!

zedimytch Jun 3, 2026

Choose a reason for hiding this comment

Uh oh!

ZukwiZ Jun 24, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

zedimytch Jun 3, 2026

Choose a reason for hiding this comment

Uh oh!

ZukwiZ Jun 24, 2026

Choose a reason for hiding this comment

Uh oh!

zedimytch commented Jun 22, 2026

Uh oh!

Uh oh!

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

ZukwiZ commented Jun 24, 2026

Uh oh!

ZukwiZ commented Jul 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

ZukwiZ commented May 27, 2026 •

edited by cursor Bot

Loading

GODrums commented May 29, 2026 •

edited

Loading