Fix/socket collaboration migration

.gitignore

@@ -16,5 +16,9 @@ dist/
 .DS_Store
 Thumbs.db
 
-# Logs
+# Logs & Temporary Scratch Files
 *.log
+eslint_out.json
+create_cors_issue.cjs
+create_gssoc_labels.cjs
+server/logs/

eslint.config.js

@@ -0,0 +1,67 @@
+import js from '@eslint/js';
+import reactPlugin from 'eslint-plugin-react';
+import reactHooksPlugin from 'eslint-plugin-react-hooks';
+import reactRefreshPlugin from 'eslint-plugin-react-refresh';
+import globals from 'globals';
+
+export default [
+  // Ignore patterns (replaces ignorePatterns in legacy config)
+  {
+    ignores: ['dist/**', 'vite.config.js'],
+  },
+
+  // Base JS recommended rules
+  js.configs.recommended,
+
+  // React + React Hooks + React Refresh (eslint-plugin-react v7 flat config)
+  {
+    files: ['**/*.{js,jsx}'],
+    plugins: {
+      react: reactPlugin,
+      'react-hooks': reactHooksPlugin,
+      'react-refresh': reactRefreshPlugin,
+    },
+    languageOptions: {
+      ecmaVersion: 'latest',
+      sourceType: 'module',
+      globals: {
+        ...globals.browser,
+        ...globals.es2020,
+      },
+      parserOptions: {
+        ecmaFeatures: {
+          jsx: true,
+        },
+      },
+    },
+    settings: {
+      react: {
+        version: 'detect',
+      },
+    },
+    rules: {
+      // React recommended rules (v7 API)
+      ...reactPlugin.configs.recommended.rules,
+      // JSX runtime — disables react/react-in-jsx-scope for React 17+
+      ...reactPlugin.configs['jsx-runtime'].rules,
+
+      // React Hooks recommended rules
+      ...reactHooksPlugin.configs.recommended.rules,
+
+      // Project-specific overrides
+      'react/prop-types': 'off',
+      'no-unused-vars': 'warn',
+      'react-refresh/only-export-components': [
+        'warn',
+        { allowConstantExport: true },
+      ],
+
+      // react-hooks v7 introduced stricter rules; downgrade to warn until
+      // the pre-existing patterns are refactored in a dedicated pass.
+      'react-hooks/set-state-in-effect': 'warn',
+      'react-hooks/purity': 'warn',
+      'react-hooks/immutability': 'warn',
+      'react-hooks/refs': 'warn',
+    },
+  },
+];

firestore.rules

@@ -1,14 +1,23 @@
 rules_version = '2';
 service cloud.firestore {
   match /databases/{database}/documents {
-    // Allow users to access their own private collections
+
+    // ── USERS COLLECTION ───────────────────────────────────────────────────
+    // Allow users to access their own user documents and subcollections (e.g. savedCode)
     match /users/{userId}/{document=**} {
       allow read, write: if request.auth != null && request.auth.uid == userId;
     }
 
+    // Allow public read access to user profiles so display name checks during signup work
+    match /users/{userId} {
+      allow read: if true;
+    }
+
+    // ── ROOMS COLLECTION & SUBCOLLECTIONS ──────────────────────────────────
     match /rooms/{roomId} {
       // ── READ ─────────────────────────────────────────────────────────────
-      allow read: if request.auth != null && request.auth.uid in resource.data.participantIds;
+      // Allow any authenticated user to read room documents (needed to inspect/join rooms)
+      allow read: if request.auth != null;
 
       // ── WRITE ────────────────────────────────────────────────────────────
       allow create: if request.auth != null
@@ -40,28 +49,45 @@ service cloud.firestore {
       allow delete: if request.auth != null 
                     && request.auth.uid == resource.data.createdBy;
 
+      // ── ROOM SUBCOLLECTIONS ──────────────────────────────────────────────
+
       // Subcollection for collaborative voting
       match /votes/{voteId} {
-        allow read: if request.auth != null && request.auth.uid in get(/databases/$(database)/documents/rooms/$(roomId)).data.participants;
+        allow read: if request.auth != null;
         allow create, update: if request.auth != null;
-        allow delete: if request.auth != null 
-                      && (
-                        resource.data.createdBy == request.auth.uid ||
-                        get(/databases/$(database)/documents/rooms/$(roomId)).data.createdBy == request.auth.uid
-                      );
+        allow delete: if request.auth != null;
       }
 
       // Subcollection for collaborative cursors
       match /cursors/{userId} {
-        allow read: if request.auth != null
-                    && request.auth.uid in get(/databases/$(database)/documents/rooms/$(roomId)).data.participantIds;
+        allow read: if request.auth != null;
         allow write: if request.auth != null && request.auth.uid == userId;
       }
 
       // Subcollection for chat messages
       match /messages/{messageId} {
-        allow read, create: if request.auth != null
-                           && request.auth.uid in get(/databases/$(database)/documents/rooms/$(roomId)).data.participantIds;
+        allow read, create: if request.auth != null;
+      }
+
+      // Subcollections for WebRTC Video / Voice Calls & Signaling
+      match /calls/{callId} {
+        allow read, write: if request.auth != null;
+      }
+      match /calls/{callId}/{document=**} {
+        allow read, write: if request.auth != null;
+      }
+
+      match /voice_participants/{userId} {
+        allow read, write: if request.auth != null;
+      }
+
+      match /signals/{signalId} {
+        allow read, create, delete: if request.auth != null;
+      }
+
+      // Subcollection for Whiteboard Drawings
+      match /drawings/{drawingId} {
+        allow read, create, delete: if request.auth != null;
       }
     }
 
@@ -77,4 +103,3 @@ service cloud.firestore {
     }
   }
 }
-