Version history

Admin password: unescape Hostinger backslash-escaping in env values.

Removed diagnostic log. Root cause was backslash-escaped $ in Hostinger ADMIN_PASSWORD.

Diagnostic log on admin login to identify password mismatch.

Replaced HTTP Basic Auth with form-based admin password prompt. 8-hour signed cookie session.

ADMIN_PASSWORD used exactly as stored; removed env manipulation.

Restored HTTP Basic Auth on /adm with startup password-length log.

/adm JWT role check only — Basic Auth was looping on Hostinger.

Admin auth: express-basic-auth users object; removed custom safeEqual logic.

Admin password env quote-stripping. Profile artist-name checkbox fixed.

Admin auth: username=admin only. Startup log prints password length.

Homepage cards and timer readable in light mode.

Admin login env trimming. Admin nav hidden from non-admins. Profile artist-name checkbox.

Footer version dynamic. Header Admin link fixed. Purged old changelog entries from DB.

Removed all itsliveai scaffold tables and routes. Admin simplified. /ar alias removed.